diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2232495b5d..7fdeb02eea 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,110 +6,37 @@ on:
   pull_request:
 
 concurrency:
-  # PRs group by number so a newer push supersedes and cancels the stale
-  # run. Pushes to main group by commit SHA, giving every commit its own
-  # group: a constant branch-wide key would let a newer push evict the
-  # queued run of a commit still waiting behind an in-flight one, and
-  # that commit would never be validated. cancel-in-progress therefore
-  # only governs PR supersession.
   group: ci-${{ github.event.pull_request.number || github.sha }}
   cancel-in-progress: ${{ github.event_name == 'pull_request' }}
 
 jobs:
-  # The four jobs below were one serial `checks` job. Splitting them lets
-  # GitHub run them concurrently, so a PR's wall-clock is the slowest job
-  # rather than the sum of all of them, and a lint or structural failure
-  # reports in about a minute instead of waiting behind the build.
-  lint:
+  # Warms the bun install cache once so the parallel jobs below mostly
+  # restore rather than reinstall from the network.
+  setup:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
       - uses: ./.github/actions/setup-workbench
-      - uses: actions/cache@v4
-        with:
-          path: |
-            .eslintcache
-            node_modules/.cache/prettier
-          key: lint-${{ runner.os }}-${{ hashFiles('bun.lock', 'eslint.config.ts', '.prettierrc.json', '.bun-version') }}
-      - run: bun run lint
 
   typecheck:
+    needs: setup
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
       - uses: ./.github/actions/setup-workbench
-      - uses: actions/cache@v4
-        with:
-          # Restores each package's incremental tsbuildinfo (composite build
-          # and combined --noEmit check now write separate files, so caching
-          # both means the next run's `tsc` calls only recheck what actually
-          # changed since the cached commit, instead of every file every PR.
-          # Paths are the workspace roots spelled out rather than `**/dist`:
-          # a recursive glob walks node_modules and follows every workspace
-          # symlink in it, and the save step ran for over 40 minutes.
-          path: |
-            apps/*/dist
-            packages/*/dist
-            tools/*/dist
-            workflows/*/dist
-            vendor/intx/*/dist
-            apps/*/tsconfig.tsbuildinfo
-            packages/*/tsconfig.tsbuildinfo
-            tools/*/tsconfig.tsbuildinfo
-            workflows/*/tsconfig.tsbuildinfo
-            vendor/intx/*/tsconfig.tsbuildinfo
-            tsconfig.tsbuildinfo
-            test/tsconfig.tsbuildinfo
-            test/isolation/tsconfig.tsbuildinfo
-          key: typecheck-${{ runner.os }}-${{ hashFiles('bun.lock', '.bun-version', 'tsconfig.base.json', 'scripts/generate-tsconfig-references.ts') }}-${{ github.sha }}
-          restore-keys: |
-            typecheck-${{ runner.os }}-${{ hashFiles('bun.lock', '.bun-version', 'tsconfig.base.json', 'scripts/generate-tsconfig-references.ts') }}-
       - run: bun run typecheck
 
-  # A hosted runner's 4 vCPUs cap how much a single job's package fan-out
-  # (scripts/run-all.ts's own concurrency) can cut wall-clock: the total
-  # CPU-seconds across every package's test script divided by 4 was still
-  # over 90s. Splitting the same total work across 3 runners, each with
-  # its own 4 vCPUs, is what actually buys more parallelism. --shard i/3
-  # (scripts/run-all.ts) round-robins the workspace's stably name-sorted
-  # package list across shards, so a run's set of packages-per-shard is
-  # reproducible and every package lands in exactly one shard.
-  build-test-shard:
-    strategy:
-      fail-fast: false
-      matrix:
-        shard: [1, 2, 3]
+  lint:
+    needs: setup
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
       - uses: ./.github/actions/setup-workbench
-      - run: bun run build
-      # The root-level scripts/*.test.ts suite (scripts/run-all.test.ts
-      # among them) isn't itself sharded — it only needs to run once, so
-      # it rides along on shard 1.
-      - if: matrix.shard == 1
-        run: bun test ./scripts/*.test.ts
-      - run: bun run scripts/run-all.ts test --shard ${{ matrix.shard }}/3
-
-  # The required check every branch protection rule and PR template
-  # names is "build-test" (predating the shard split above); this job
-  # keeps that name live by depending on every shard and failing if any
-  # of them did.
-  build-test:
-    needs: build-test-shard
-    if: always()
-    runs-on: ubuntu-latest
-    steps:
-      - if: contains(needs.build-test-shard.result, 'failure') || contains(needs.build-test-shard.result, 'cancelled')
-        run: |
-          echo "at least one build-test shard failed" >&2
-          exit 1
+      - run: bun run lint
+      - run: bun run fmt:check
 
   structural:
+    needs: setup
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -118,225 +45,14 @@ jobs:
       - uses: ./.github/actions/setup-workbench
       - run: bun run check:structural
 
-  e2e-plan:
-    runs-on: ubuntu-latest
-    outputs:
-      suites: ${{ steps.list-suites.outputs.suites }}
-    steps:
-      - uses: actions/checkout@v4
-      - uses: ./.github/actions/setup-workbench
-      - name: List e2e suites
-        id: list-suites
-        run: echo "suites=$(bun run scripts/e2e/list-suites.ts)" >> "$GITHUB_OUTPUT"
-
-  # One job per e2e suite so a PR's e2e wall-clock is the slowest suite
-  # rather than the sum of all of them, and a failing suite names itself
-  # instead of hiding behind "e2e failed". fail-fast is off so one flaky
-  # suite doesn't cancel every other suite's run.
-  e2e-suite:
-    needs: e2e-plan
+  # A single fast pass over every workspace's tests. DB-gated suites
+  # (scripts/e2e/* included) skip themselves when DATABASE_URL is unset —
+  # see scripts/e2e/db-gate.ts — so this job needs no Postgres service.
+  unit:
+    needs: setup
     runs-on: ubuntu-latest
     timeout-minutes: 10
-    strategy:
-      fail-fast: false
-      matrix:
-        suite: ${{ fromJson(needs.e2e-plan.outputs.suites) }}
-
-    services:
-      postgres:
-        # pgvector-enabled Postgres 17, matching the local development
-        # database (brew postgresql@17 + pgvector).
-        image: pgvector/pgvector:pg17
-        env:
-          POSTGRES_USER: postgres
-          POSTGRES_PASSWORD: postgres
-        ports:
-          - 5432:5432
-        options: >-
-          --health-cmd "pg_isready -U postgres -d postgres"
-          --health-interval 10s
-          --health-timeout 5s
-          --health-retries 5
-
-    steps:
-      - uses: actions/checkout@v4
-      - uses: ./.github/actions/setup-workbench
-
-      # The committed template ships a placeholder secret and a
-      # credential-less local DATABASE_URL; point the URL at the service
-      # container's superuser and mint a real session secret in place.
-      - name: Write env file
-        run: |
-          cp .env.example .env
-          secret=$(openssl rand -hex 32)
-          sed -i "s|^SESSION_SECRET=.*|SESSION_SECRET=${secret}|" .env
-          sed -i "s|^DATABASE_URL=.*|DATABASE_URL=postgres://postgres:postgres@localhost:5432/workbench|" .env
-
-      # The e2e suite skips itself when DATABASE_URL is absent, so a
-      # wiring mistake here could otherwise drop the whole suite while
-      # CI stays green. Fail loudly instead: the env file must exist
-      # with a usable DATABASE_URL and SESSION_SECRET, Postgres must be
-      # reachable, and git (the workflow-asset publication path) must be
-      # present. CI=true turns any remaining skip into a hard failure.
-      - name: Assert the e2e test env is wired
-        run: |
-          test -f .env
-          grep -q '^DATABASE_URL=postgres://postgres:postgres@localhost:5432/workbench$' .env
-          grep -Eq '^SESSION_SECRET=.{32,}$' .env
-          pg_isready -h localhost -p 5432
-          git --version
-
-      - name: Run the suite
-        run: |
-          if [ "${{ matrix.suite }}" = "unit" ]; then
-            bun test scripts/e2e/harness.test.ts scripts/e2e/db-gate.test.ts scripts/e2e/db-setup.test.ts scripts/e2e/list-suites.test.ts --max-concurrency=1
-          else
-            bun test "scripts/e2e/${{ matrix.suite }}.test.ts" --max-concurrency=1
-          fi
-        env:
-          DATABASE_URL: postgres://postgres:postgres@localhost:5432/workbench
-          E2E_LOG_DIR: e2e-logs
-
-      - name: Upload e2e logs
-        if: always()
-        uses: actions/upload-artifact@v4
-        with:
-          name: e2e-logs-${{ matrix.suite }}
-          path: e2e-logs
-          if-no-files-found: ignore
-
-  # Branch protection's required check is named "e2e"; this summary job
-  # keeps that name while the actual work runs as per-suite e2e-suite jobs.
-  e2e:
-    needs: e2e-suite
-    if: always()
-    runs-on: ubuntu-latest
-    steps:
-      - name: Check e2e-suite matrix result
-        run: |
-          if [ "${{ needs.e2e-suite.result }}" != "success" ]; then
-            echo "one or more e2e suites failed"
-            exit 1
-          fi
-
-  isolation:
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-
-    services:
-      postgres:
-        # pgvector-enabled Postgres 17, matching the local development
-        # database (brew postgresql@17 + pgvector).
-        image: pgvector/pgvector:pg17
-        env:
-          POSTGRES_USER: postgres
-          POSTGRES_PASSWORD: postgres
-        ports:
-          - 5432:5432
-        options: >-
-          --health-cmd "pg_isready -U postgres -d postgres"
-          --health-interval 10s
-          --health-timeout 5s
-          --health-retries 5
-
     steps:
       - uses: actions/checkout@v4
       - uses: ./.github/actions/setup-workbench
-
-      - name: Write env file
-        run: |
-          cp .env.example .env
-          secret=$(openssl rand -hex 32)
-          sed -i "s|^SESSION_SECRET=.*|SESSION_SECRET=${secret}|" .env
-          sed -i "s|^DATABASE_URL=.*|DATABASE_URL=postgres://postgres:postgres@localhost:5432/workbench|" .env
-
-      - name: Assert the e2e test env is wired
-        run: |
-          test -f .env
-          grep -q '^DATABASE_URL=postgres://postgres:postgres@localhost:5432/workbench$' .env
-          grep -Eq '^SESSION_SECRET=.{32,}$' .env
-          pg_isready -h localhost -p 5432
-          git --version
-
-      - name: Run the two-org isolation suite
-        run: bun test test/isolation
-        env:
-          DATABASE_URL: postgres://postgres:postgres@localhost:5432/workbench
-
-  db-suites:
-    runs-on: ubuntu-latest
-    timeout-minutes: 20
-
-    services:
-      postgres:
-        # pgvector-enabled Postgres 17, matching the local development
-        # database (brew postgresql@17 + pgvector).
-        image: pgvector/pgvector:pg17
-        env:
-          POSTGRES_USER: postgres
-          POSTGRES_PASSWORD: postgres
-        ports:
-          - 5432:5432
-        options: >-
-          --health-cmd "pg_isready -U postgres -d postgres"
-          --health-interval 10s
-          --health-timeout 5s
-          --health-retries 5
-
-    steps:
-      - uses: actions/checkout@v4
-      - uses: ./.github/actions/setup-workbench
-
-      - name: Write env file
-        run: |
-          cp .env.example .env
-          secret=$(openssl rand -hex 32)
-          sed -i "s|^SESSION_SECRET=.*|SESSION_SECRET=${secret}|" .env
-          sed -i "s|^DATABASE_URL=.*|DATABASE_URL=postgres://postgres:postgres@localhost:5432/workbench|" .env
-
-      - name: Assert the e2e test env is wired
-        run: |
-          test -f .env
-          grep -q '^DATABASE_URL=postgres://postgres:postgres@localhost:5432/workbench$' .env
-          grep -Eq '^SESSION_SECRET=.{32,}$' .env
-          pg_isready -h localhost -p 5432
-          git --version
-
-      # apps/hub/test and most of the package suites below connect
-      # straight to DATABASE_URL (or its `_e2e`-suffixed sibling from
-      # `e2eDatabaseUrl()`) rather than booting through the harness, so
-      # — unlike e2e and isolation, which provision their own schema —
-      # this job must create and migrate both databases itself before
-      # those suites run.
-      - name: Set up the databases
-        run: |
-          DATABASE_URL=postgres://postgres:postgres@localhost:5432/workbench bun scripts/db-setup.ts
-          DATABASE_URL=postgres://postgres:postgres@localhost:5432/workbench_e2e bun scripts/db-setup.ts
-
-      # apps/hub's own DB-backed suites (e.g. the sign-up rate-limit
-      # proof) never run under the plain `checks` job, which has no
-      # Postgres. CI=true turns a would-be skip here into a hard
-      # failure, so a misconfigured invocation can't pass vacuously.
-      - name: Run the hub's database-backed suites
-        run: |
-          set -a
-          . ./.env
-          set +a
-          bun test apps/hub/test
-        env:
-          DATABASE_URL: postgres://postgres:postgres@localhost:5432/workbench
-
-      # Every DB-gated suite under packages/* and apps/hub/src gates on
-      # DATABASE_URL and describe.skip's without one, so build-test (no
-      # Postgres) never runs them. Find them by the same signal they
-      # gate on rather than hardcoding a file list, so a newly added
-      # suite gets picked up automatically. CI=true turns a would-be
-      # skip into a hard failure.
-      - name: Run the database-backed package suites
-        run: |
-          set -a
-          . ./.env
-          set +a
-          bun --env-file="${GITHUB_WORKSPACE}/.env" test $(grep -rl DATABASE_URL --include='*.test.ts' packages apps | grep -v apps/hub/test)
-        env:
-          DATABASE_URL: postgres://postgres:postgres@localhost:5432/workbench
+      - run: bun test apps packages workflows scripts
diff --git a/.gitignore b/.gitignore
index a6df290e6d..1f1ea395ab 100644
--- a/.gitignore
+++ b/.gitignore
@@ -26,16 +26,13 @@ tmp/
 # Local runtime state (hub and sidecar data dirs)
 .data/
 
-# Local agent scratch (not product source; breaks prettier --check .)
+# Local agent scratch (not product source)
 .mb-scratch/
 .corbits/
 
 # Browser walkthrough harness screenshots + run summary (CL-6072)
 scripts/e2e/browser/shots/
 
-# Lint caches — local only; CI installs fresh and rebuilds them.
-.eslintcache
-
 # `bun pm pack` / `bun run release` tarballs — built on demand, never
 # committed (CL-8167).
 *.tgz
diff --git a/.prettierrc.json b/.oxfmtrc.json
similarity index 100%
rename from .prettierrc.json
rename to .oxfmtrc.json
diff --git a/.oxlintrc.json b/.oxlintrc.json
new file mode 100644
index 0000000000..2fc8671f55
--- /dev/null
+++ b/.oxlintrc.json
@@ -0,0 +1,82 @@
+{
+  "$schema": "./node_modules/oxlint/configuration_schema.json",
+  "plugins": [
+    "typescript",
+    "unicorn",
+    "oxc"
+  ],
+  "categories": {
+    "correctness": "error",
+    "suspicious": "warn"
+  },
+  "rules": {
+    "unicorn/consistent-function-scoping": "off",
+    "unicorn/prefer-string-starts-ends-with": "off",
+    "unicorn/no-array-sort": "off",
+    "unicorn/no-array-reverse": "off",
+    "unicorn/prefer-add-event-listener": "off",
+    "unicorn/no-useless-spread": "off",
+    "unicorn/no-useless-fallback-in-spread": "off",
+    "no-shadow": "off",
+    "no-underscore-dangle": "off",
+    "no-unmodified-loop-condition": "off",
+    "no-unused-expressions": ["error", { "allowTaggedTemplates": true }],
+    "no-unsafe-optional-chaining": "off",
+    "no-useless-concat": "off",
+    "unicorn/no-thenable": "off",
+    "unicorn/no-new-array": "off",
+    "unicorn/require-module-specifiers": "off",
+    "no-console": "off"
+  },
+  "env": {
+    "builtin": true
+  },
+  "ignorePatterns": [
+    "vendor/**",
+    "node_modules/**",
+    "dist/**",
+    ".worktrees/**",
+    ".data/**",
+    "*.gen.*"
+  ],
+  "overrides": [
+    {
+      "files": ["**/src/**/*.ts", "**/src/**/*.tsx"],
+      "excludeFiles": [
+        "**/src/**/*.test.ts",
+        "**/src/**/*.test.tsx",
+        "packages/client-log/src/index.ts"
+      ],
+      "rules": {
+        "no-console": "error"
+      }
+    },
+    {
+      "files": ["**/*.ts", "**/*.tsx"],
+      "excludeFiles": ["packages/icons/src/**"],
+      "rules": {
+        "no-restricted-imports": [
+          "error",
+          {
+            "paths": [
+              {
+                "name": "lucide-react",
+                "message": "lucide-react is retired — import from @corbits/icons instead."
+              },
+              {
+                "name": "@phosphor-icons/react",
+                "message": "Import icons from @corbits/icons, not @phosphor-icons/react directly."
+              }
+            ],
+            "patterns": [
+              {
+                "group": ["@phosphor-icons/react/*"],
+                "message": "Import icons from @corbits/icons, not @phosphor-icons/react directly."
+              }
+            ]
+          }
+        ]
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/.prettierignore b/.prettierignore
deleted file mode 100644
index d136272417..0000000000
--- a/.prettierignore
+++ /dev/null
@@ -1,15 +0,0 @@
-node_modules/
-dist/
-vendor/
-.claude/
-coverage/
-bun.lock
-GPL-2.0.txt
-.worktrees/
-.agent-state/
-dispatch/
-specs/
-plans/
-tmp/
-.mb-scratch/
-.corbits/
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index f8892d5987..f9cb17d89d 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -19,10 +19,10 @@ Thanks for your interest in Corbits Workbench.
 ## The short version
 
 1. `bun install` (or `bun run hooks:install`) sets a repo-local pre-push
-   hook. That hook is the local stand-in for the cheap CI jobs: lint,
-   typecheck, and unit tests. GitHub still runs walking-skeleton, e2e,
-   isolation, and database-backed suites. Skip the hook with
-   `git push --no-verify` or `SKIP_WORKBENCH_HOOKS=1`. Typecheck and
+   hook. That hook is the local stand-in for CI's jobs: typecheck, lint
+   (oxlint + `oxfmt --check`), structural checks, and unit tests. Skip
+   the hook with `git push --no-verify` or `SKIP_WORKBENCH_HOOKS=1`.
+   Typecheck and
    tests narrow to the packages your change touches; a change under
    `package.json`, `bun.lock`, a shared tsconfig, `scripts/`, or
    `.github/` falls back to checking every package instead, which takes
diff --git a/IMPLEMENTATION.md b/IMPLEMENTATION.md
index b10830afdc..09c8e97b10 100644
--- a/IMPLEMENTATION.md
+++ b/IMPLEMENTATION.md
@@ -69,10 +69,10 @@ recorded per-package in each vendored package's own `VENDORED-FROM` file.
 | `bun run dev`      | Validates `.env`, verifies the database, applies pending migrations, builds the web UI if needed, starts the hub and one sidecar |
 | `bun run setup`    | Applies pending database migrations (`scripts/db-setup.ts`)                                                                      |
 | `bun run reset`    | Drops the platform database schema and clears on-disk asset directories (local `DATABASE_URL` only, unrecoverable)               |
-| `bun run check`    | The full gate: `typecheck && lint && test` — must pass before every commit                                                       |
+| `bun run check`    | The full gate: `typecheck && lint && fmt:check && check:structural && test` — must pass before every commit                     |
 | `bun run test`     | Workspace unit/integration tests                                                                                                 |
 | `bun run test:e2e` | End-to-end smoke tests (`scripts/e2e/*.test.ts`)                                                                                 |
-| `bun run format`   | `prettier --write .`                                                                                                             |
+| `bun run fmt`      | `oxfmt` write                                                                                                                    |
 
 `bun run dev` seeds the administrator account and ensures the root
 tenant; it does not insert agents, tools, workflows, or skills. An empty
diff --git a/README.md b/README.md
index 21c59f9381..0f66363cb9 100644
--- a/README.md
+++ b/README.md
@@ -146,10 +146,11 @@ documented separately in [docs/CHAT.md](docs/CHAT.md).
 
 ## Development
 
-- `bun run check` — the full gate: typecheck, lint, test
+- `bun run check` — the full gate: typecheck, lint (oxlint + `oxfmt
+  --check`), structural checks, test
 - `bun run test` — workspace tests
 - `bun run test:e2e` — end-to-end smoke tests (see below)
-- `bun run format` — prettier write
+- `bun run fmt` — oxfmt write
 
 Conventions and agent guidance: [AGENTS.md](AGENTS.md). Contributions:
 [CONTRIBUTING.md](CONTRIBUTING.md).
diff --git a/apps/hub/package.json b/apps/hub/package.json
index 32e3732f4d..341ddf4b97 100644
--- a/apps/hub/package.json
+++ b/apps/hub/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@workbench/hub",
+  "version": "0.0.1",
   "private": true,
   "description": "Composition root that mounts the platform API, extension routes, and the user interface on one origin",
-  "version": "0.0.1",
   "license": "SEE LICENSE IN ../../LICENSE.md",
   "type": "module",
   "scripts": {
diff --git a/apps/hub/src/asset-service-factory.test.ts b/apps/hub/src/asset-service-factory.test.ts
index 0cdef5dbf4..0fba5c0e5d 100644
--- a/apps/hub/src/asset-service-factory.test.ts
+++ b/apps/hub/src/asset-service-factory.test.ts
@@ -1,11 +1,7 @@
 import { afterAll, expect, test } from "bun:test";
 import { mkdirSync } from "node:fs";
 import path from "node:path";
-import {
-  cleanupGitFixtures,
-  gitFixture,
-  scratchGitFixtureDir,
-} from "../test/git-fixture";
+import { cleanupGitFixtures, gitFixture, scratchGitFixtureDir } from "../test/git-fixture";
 import { createBootAssetWiring } from "./asset-service-factory";
 import { HubDataDirInsideGitWorkTreeError } from "./hub-data-dir-git-safety";
 
@@ -16,9 +12,9 @@ test("createBootAssetWiring refuses a data dir inside an existing git work tree"
   gitFixture(workTree, ["init", "-b", "main"]);
   const dataDir = path.join(workTree, ".data", "hub");
   mkdirSync(dataDir, { recursive: true });
-  await expect(
-    createBootAssetWiring({ db: {} as never, dataDir }),
-  ).rejects.toBeInstanceOf(HubDataDirInsideGitWorkTreeError);
+  await expect(createBootAssetWiring({ db: {} as never, dataDir })).rejects.toBeInstanceOf(
+    HubDataDirInsideGitWorkTreeError,
+  );
 });
 
 test("createBootAssetWiring opt-in skips the work-tree refusal", async () => {
diff --git a/apps/hub/src/asset-service-factory.ts b/apps/hub/src/asset-service-factory.ts
index 00e8857f54..939991e82e 100644
--- a/apps/hub/src/asset-service-factory.ts
+++ b/apps/hub/src/asset-service-factory.ts
@@ -16,9 +16,7 @@ import { assertHubDataDirGitSafety } from "./hub-data-dir-git-safety";
 
 // Host policy constant, not configuration — shared by boot (tool-package
 // registry routing) and asset-service construction.
-export const REGISTRIES = new Map([
-  ["npmjs", { url: "https://registry.npmjs.org" }],
-]);
+export const REGISTRIES = new Map([["npmjs", { url: "https://registry.npmjs.org" }]]);
 
 export interface BootAssetWiring {
   readonly signingKey: Awaited<ReturnType<typeof generateKeyPair>>;
diff --git a/apps/hub/src/config.ts b/apps/hub/src/config.ts
index 15f1f8d06a..e844c2f2ab 100644
--- a/apps/hub/src/config.ts
+++ b/apps/hub/src/config.ts
@@ -43,9 +43,7 @@ const HubEnv = type({
   DATABASE_URL: type(/^postgres(ql)?:\/\/.+$/).describe(
     "a Postgres connection URL, e.g. postgres://hub:hub@localhost:5432/hub",
   ),
-  BASE_URL: type(HTTP_URL).describe(
-    "an http(s) origin, e.g. http://localhost:3000",
-  ),
+  BASE_URL: type(HTTP_URL).describe("an http(s) origin, e.g. http://localhost:3000"),
   "PORT?": type(/^\d{1,5}$/).describe(
     "the local port to listen on when it differs from BASE_URL's — set this when a reverse proxy (Tailscale serve, nginx) fronts the hub and BASE_URL is the public https origin",
   ),
@@ -228,9 +226,7 @@ export type HubConfig = {
     readonly windowSeconds: number;
     readonly max: number;
   };
-  readonly socialProviders: Readonly<
-    Partial<Record<SocialProviderId, SocialProviderCredential>>
-  >;
+  readonly socialProviders: Readonly<Partial<Record<SocialProviderId, SocialProviderCredential>>>;
   readonly huggingfaceOAuthClientId?: string;
   readonly githubAppClientId?: string;
   readonly githubAppClientSecret?: string;
@@ -282,8 +278,7 @@ const SOCIAL_PROVIDER_ENV_KEYS: Record<
 function socialProvidersFrom(
   parsed: ParsedHubEnv,
 ): Readonly<Partial<Record<SocialProviderId, SocialProviderCredential>>> {
-  const providers: Partial<Record<SocialProviderId, SocialProviderCredential>> =
-    {};
+  const providers: Partial<Record<SocialProviderId, SocialProviderCredential>> = {};
   const errors: string[] = [];
   for (const [providerId, keys] of Object.entries(SOCIAL_PROVIDER_ENV_KEYS) as [
     SocialProviderId,
@@ -330,9 +325,7 @@ type SidecarProvisionersConfig = {
  * one variable — `SIDECAR_PROVISIONERS` — and listing it explicitly
  * (including `process`) behaves exactly as any other explicit list.
  */
-function sidecarProvisionersFrom(
-  parsed: ParsedHubEnv,
-): SidecarProvisionersConfig {
+function sidecarProvisionersFrom(parsed: ParsedHubEnv): SidecarProvisionersConfig {
   const ids = (parsed.SIDECAR_PROVISIONERS ?? "")
     .split(",")
     .map((id) => id.trim())
@@ -357,9 +350,7 @@ function sidecarProvisionersFrom(
   const provisioners: SidecarProvisionerConfig[] = [];
   for (const id of ids) {
     if (seen.has(id)) {
-      throw new Error(
-        `invalid hub environment: SIDECAR_PROVISIONERS lists ${id} more than once`,
-      );
+      throw new Error(`invalid hub environment: SIDECAR_PROVISIONERS lists ${id} more than once`);
     }
     seen.add(id);
     if (!isSidecarProvisionerId(id)) {
@@ -384,9 +375,7 @@ function sidecarProvisionersFrom(
       );
     }
     const onlyId = provisioners[0]?.id;
-    return onlyId === undefined
-      ? { provisioners }
-      : { provisioners, defaultProvisionerId: onlyId };
+    return onlyId === undefined ? { provisioners } : { provisioners, defaultProvisionerId: onlyId };
   }
   if (!seen.has(defaultProvisionerId)) {
     throw new Error(
@@ -426,10 +415,7 @@ function sidecarProvisionerConfigFor(
       return { id: "docker", image: parsed.DOCKER_PROVISIONER_IMAGE };
     }
     case "e2b": {
-      if (
-        parsed.E2B_API_KEY === undefined ||
-        parsed.E2B_TEMPLATE === undefined
-      ) {
+      if (parsed.E2B_API_KEY === undefined || parsed.E2B_TEMPLATE === undefined) {
         throw new Error(
           [
             "invalid hub environment: E2B_API_KEY and E2B_TEMPLATE must both be set when SIDECAR_PROVISIONERS includes e2b",
@@ -460,9 +446,7 @@ function sidecarProvisionerConfigFor(
  * have, so a misconfigured process dies at boot instead of failing at
  * first use.
  */
-export function readHubConfig(
-  env: Record<string, string | undefined>,
-): HubConfig {
+export function readHubConfig(env: Record<string, string | undefined>): HubConfig {
   const parsed = HubEnv(env);
   if (parsed instanceof type.errors) {
     throw new Error(
@@ -502,8 +486,7 @@ export function readHubConfig(
         : DEFAULT_SIGNIN_RATE_LIMIT_MAX,
     },
   };
-  if (parsed.HUB_ALLOW_GIT_INSIDE_WORK_TREE !== undefined)
-    hubConfig.allowGitInsideWorkTree = true;
+  if (parsed.HUB_ALLOW_GIT_INSIDE_WORK_TREE !== undefined) hubConfig.allowGitInsideWorkTree = true;
   if (parsed.PORT !== undefined) hubConfig.listenPort = Number(parsed.PORT);
   if (parsed.HUGGINGFACE_OAUTH_CLIENT_ID !== undefined)
     hubConfig.huggingfaceOAuthClientId = parsed.HUGGINGFACE_OAUTH_CLIENT_ID;
@@ -511,8 +494,7 @@ export function readHubConfig(
     hubConfig.githubAppClientId = parsed.GITHUB_APP_CLIENT_ID;
   if (parsed.GITHUB_APP_CLIENT_SECRET !== undefined)
     hubConfig.githubAppClientSecret = parsed.GITHUB_APP_CLIENT_SECRET;
-  if (parsed.GMAIL_CLIENT_ID !== undefined)
-    hubConfig.gmailClientId = parsed.GMAIL_CLIENT_ID;
+  if (parsed.GMAIL_CLIENT_ID !== undefined) hubConfig.gmailClientId = parsed.GMAIL_CLIENT_ID;
   if (parsed.GMAIL_CLIENT_SECRET !== undefined)
     hubConfig.gmailClientSecret = parsed.GMAIL_CLIENT_SECRET;
   if (parsed.GITHUB_API_BASE_URL !== undefined)
@@ -520,18 +502,13 @@ export function readHubConfig(
   if (parsed.CREDENTIAL_ENCRYPTION_KEY !== undefined)
     hubConfig.credentialEncryptionKeyHex = parsed.CREDENTIAL_ENCRYPTION_KEY;
   if (parsed.PRINCIPAL_KEY_ENCRYPTION_KEY !== undefined)
-    hubConfig.principalKeyEncryptionKeyHex =
-      parsed.PRINCIPAL_KEY_ENCRYPTION_KEY;
+    hubConfig.principalKeyEncryptionKeyHex = parsed.PRINCIPAL_KEY_ENCRYPTION_KEY;
   if (parsed.HUB_SIDECAR_WEBSOCKET_URL !== undefined)
     hubConfig.sidecarWebSocketUrl = parsed.HUB_SIDECAR_WEBSOCKET_URL;
   if (sidecarProvisioners.defaultProvisionerId !== undefined)
-    hubConfig.defaultSidecarProvisionerId =
-      sidecarProvisioners.defaultProvisionerId;
+    hubConfig.defaultSidecarProvisionerId = sidecarProvisioners.defaultProvisionerId;
 
-  if (
-    hubConfig.allowPlaintextSecrets &&
-    !isLoopbackBaseUrl(hubConfig.baseUrl)
-  ) {
+  if (hubConfig.allowPlaintextSecrets && !isLoopbackBaseUrl(hubConfig.baseUrl)) {
     throw new Error(
       [
         `ALLOW_PLAINTEXT_SECRETS is set, but BASE_URL (${hubConfig.baseUrl}) is not a loopback address.`,
diff --git a/apps/hub/src/connect-github-mount-gone.test.ts b/apps/hub/src/connect-github-mount-gone.test.ts
index 8a6feff2e3..a1485d332e 100644
--- a/apps/hub/src/connect-github-mount-gone.test.ts
+++ b/apps/hub/src/connect-github-mount-gone.test.ts
@@ -8,16 +8,7 @@ import { describe, expect, test } from "bun:test";
 import { readFileSync } from "node:fs";
 import path from "node:path";
 
-const HUB_INDEX = path.join(
-  import.meta.dir,
-  "..",
-  "..",
-  "..",
-  "apps",
-  "hub",
-  "src",
-  "index.ts",
-);
+const HUB_INDEX = path.join(import.meta.dir, "..", "..", "..", "apps", "hub", "src", "index.ts");
 
 const WB = "work" + "benches";
 const GH = "git" + "hub";
@@ -37,9 +28,7 @@ describe("hub-zero T3: the workbench-scoped connect mount is gone", () => {
 
   test("index.ts passes no settings-row port to the deleted mount's options", () => {
     const source = readFileSync(HUB_INDEX, "utf8");
-    const optionsPattern = new RegExp(
-      `${MOUNT_PORT_A}|${MOUNT_PORT_B}|${MOUNT_PORT_C}`,
-    );
+    const optionsPattern = new RegExp(`${MOUNT_PORT_A}|${MOUNT_PORT_B}|${MOUNT_PORT_C}`);
     expect(
       optionsPattern.test(source),
       "index.ts still passes a settings-row port to the deleted mount's options",
diff --git a/apps/hub/src/credential-material-refresh.test.ts b/apps/hub/src/credential-material-refresh.test.ts
index fd3c17884c..03198f9136 100644
--- a/apps/hub/src/credential-material-refresh.test.ts
+++ b/apps/hub/src/credential-material-refresh.test.ts
@@ -37,9 +37,7 @@ function store(initial: NonNullable<Row>) {
           ...row,
           secret: `enc:${tokens.secret}`,
           refreshSecret:
-            tokens.refreshSecret === undefined
-              ? row.refreshSecret
-              : `enc:${tokens.refreshSecret}`,
+            tokens.refreshSecret === undefined ? row.refreshSecret : `enc:${tokens.refreshSecret}`,
           expiresAt: tokens.expiresAt,
           status: "active",
         };
@@ -95,9 +93,7 @@ function harness(
 
 describe("createServingRefresh", () => {
   test("an api_key credential passes through untouched — never refreshed, never pushed", async () => {
-    const h = harness(
-      row({ type: "api_key", refreshSecret: null, expiresAt: null }),
-    );
+    const h = harness(row({ type: "api_key", refreshSecret: null, expiresAt: null }));
     const result = await h.refresh(servingOf(h));
     expect(result).toEqual({ ok: true });
     expect(h.calls.grantArgs).toHaveLength(0);
@@ -114,20 +110,15 @@ describe("createServingRefresh", () => {
   });
 
   test("an expiring oauth_token refreshes, persists, and pushes the updated frame", async () => {
-    const h = harness(
-      row({ expiresAt: new Date(NOW + 1000) }),
-      async (args) => ({
-        accessToken: `fresh:${args.refreshToken}`,
-        refreshToken: "rotated-refresh",
-        expiresIn: 3600,
-      }),
-    );
+    const h = harness(row({ expiresAt: new Date(NOW + 1000) }), async (args) => ({
+      accessToken: `fresh:${args.refreshToken}`,
+      refreshToken: "rotated-refresh",
+      expiresIn: 3600,
+    }));
     const result = await h.refresh(servingOf(h));
     expect(result).toEqual({ ok: true });
     expect(h.calls.refreshedTokens).toHaveLength(1);
-    expect(h.calls.refreshedTokens[0]?.secret).toBe(
-      "fresh:plain:enc:refresh-1",
-    );
+    expect(h.calls.refreshedTokens[0]?.secret).toBe("fresh:plain:enc:refresh-1");
     expect(h.calls.refreshedTokens[0]?.refreshSecret).toBe("rotated-refresh");
     expect(h.calls.pushes).toEqual(["ten_1"]);
   });
@@ -149,14 +140,11 @@ describe("createServingRefresh", () => {
   });
 
   test("a grant that states no expires_in persists a NULL expiry — the row never re-enters the due set", async () => {
-    const h = harness(
-      row({ expiresAt: new Date(NOW + 1000) }),
-      async (args) => ({
-        accessToken: `fresh:${args.refreshToken}`,
-        refreshToken: "rotated-refresh",
-        // no expiresIn: provider stated no lifetime
-      }),
-    );
+    const h = harness(row({ expiresAt: new Date(NOW + 1000) }), async (args) => ({
+      accessToken: `fresh:${args.refreshToken}`,
+      refreshToken: "rotated-refresh",
+      // no expiresIn: provider stated no lifetime
+    }));
     const result = await h.refresh(servingOf(h));
     expect(result).toEqual({ ok: true });
     expect(h.row()?.expiresAt).toBeNull();
@@ -189,9 +177,7 @@ describe("createServingRefresh", () => {
 
 function servingOf(
   h: {
-    row: () => NonNullable<
-      Awaited<ReturnType<ServingRefreshStore["loadRow"]>>
-    > | null;
+    row: () => NonNullable<Awaited<ReturnType<ServingRefreshStore["loadRow"]>>> | null;
   },
   status: string = "active",
 ): Parameters<ReturnType<typeof createServingRefresh>>[0] {
diff --git a/apps/hub/src/credential-material-refresh.ts b/apps/hub/src/credential-material-refresh.ts
index de86a1e2fd..4f5c4de08b 100644
--- a/apps/hub/src/credential-material-refresh.ts
+++ b/apps/hub/src/credential-material-refresh.ts
@@ -94,10 +94,7 @@ export type ServingRefreshStore = {
   >;
   /** Persists a successful refresh (encrypting the new pair) — only an
    * `active` row is updated; false means it was claimed meanwhile. */
-  applyRefreshedTokens(
-    credentialId: string,
-    tokens: RefreshedTokens,
-  ): Promise<boolean>;
+  applyRefreshedTokens(credentialId: string, tokens: RefreshedTokens): Promise<boolean>;
   /** Marks the credential re-auth-required: visible to the settings
    * Connections card as needs-attention. */
   markReauthRequired(credentialId: string, reason: string): Promise<void>;
@@ -105,11 +102,7 @@ export type ServingRefreshStore = {
    * running instances, so sidecars pick the new material up live. */
   pushUpdates(tenantId: string): Promise<void>;
   /** Decrypts a stored secret column for the grant. */
-  decrypt(
-    credentialId: string,
-    column: "secret" | "refreshSecret",
-    value: string,
-  ): Promise<string>;
+  decrypt(credentialId: string, column: "secret" | "refreshSecret", value: string): Promise<string>;
   /** Every `active` `oauth_token` credential in the tenant whose stored
    * `expiresAt` is at or before `cutoff` — the tenant-wide serving-time
    * sweep `refreshTenantServingCredentials` runs ahead of a dial. */
@@ -170,9 +163,7 @@ export function createServingRefresh(deps: ServingRefreshDeps): ServingRefresh {
         ...(result.tokens.refresh_token === undefined
           ? {}
           : { refreshToken: result.tokens.refresh_token }),
-        ...(result.tokens.expires_in === undefined
-          ? {}
-          : { expiresIn: result.tokens.expires_in }),
+        ...(result.tokens.expires_in === undefined ? {} : { expiresIn: result.tokens.expires_in }),
       };
     });
 
@@ -193,11 +184,7 @@ export function createServingRefresh(deps: ServingRefreshDeps): ServingRefresh {
           refreshSecret:
             row.refreshSecret === null
               ? null
-              : await deps.store.decrypt(
-                  row.id,
-                  "refreshSecret",
-                  row.refreshSecret,
-                ),
+              : await deps.store.decrypt(row.id, "refreshSecret", row.refreshSecret),
           expiresAt: row.expiresAt,
         } satisfies CredentialTokenRow;
       },
@@ -205,10 +192,7 @@ export function createServingRefresh(deps: ServingRefreshDeps): ServingRefresh {
         // False = another writer claimed the row (claimed-elsewhere): a
         // lost race, not an error — skip the follow-up push and let the
         // next resolution re-read whatever was persisted.
-        const applied = await deps.store.applyRefreshedTokens(
-          credentialId,
-          tokens,
-        );
+        const applied = await deps.store.applyRefreshedTokens(credentialId, tokens);
         lastApplyWon = applied;
       },
       refresh: async (row) => {
@@ -226,9 +210,7 @@ export function createServingRefresh(deps: ServingRefreshDeps): ServingRefresh {
           const refreshed = await refreshCodexTokens(row.refreshSecret, now(), {
             access: row.secret,
             refresh: row.refreshSecret,
-            ...(row.expiresAt === null
-              ? {}
-              : { expiresAt: row.expiresAt.getTime() }),
+            ...(row.expiresAt === null ? {} : { expiresAt: row.expiresAt.getTime() }),
             // The account id rides the credential's metadata (written at
             // connect from the id_token); carry it forward so a refresh
             // response without an id_token never drops chatgpt-account-id.
@@ -236,32 +218,21 @@ export function createServingRefresh(deps: ServingRefreshDeps): ServingRefresh {
           });
           return {
             secret: refreshed.access,
-            ...(refreshed.refresh === undefined
-              ? {}
-              : { refreshSecret: refreshed.refresh }),
-            expiresAt:
-              refreshed.expiresAt === undefined
-                ? null
-                : new Date(refreshed.expiresAt),
+            ...(refreshed.refresh === undefined ? {} : { refreshSecret: refreshed.refresh }),
+            expiresAt: refreshed.expiresAt === undefined ? null : new Date(refreshed.expiresAt),
           };
         }
         if (full.providerName === "xai-oauth") {
           const refreshed = await refreshXaiTokens(row.refreshSecret, now());
           return {
             secret: refreshed.access,
-            ...(refreshed.refresh === undefined
-              ? {}
-              : { refreshSecret: refreshed.refresh }),
-            expiresAt:
-              refreshed.expiresAt === undefined
-                ? null
-                : new Date(refreshed.expiresAt),
+            ...(refreshed.refresh === undefined ? {} : { refreshSecret: refreshed.refresh }),
+            expiresAt: refreshed.expiresAt === undefined ? null : new Date(refreshed.expiresAt),
           };
         }
         const parsed = CredentialMetadata(full.metadata ?? {});
         const serverUrl =
-          full.apiBaseUrl ??
-          (parsed instanceof type.errors ? undefined : parsed.url);
+          full.apiBaseUrl ?? (parsed instanceof type.errors ? undefined : parsed.url);
         if (serverUrl === undefined) {
           throw new Error(
             `credential ${row.id} has neither a provider API base URL nor a metadata URL to refresh against`,
@@ -274,12 +245,10 @@ export function createServingRefresh(deps: ServingRefreshDeps): ServingRefresh {
           serverUrl,
           accessToken: row.secret,
           refreshToken: row.refreshSecret,
-          ...(parsed instanceof type.errors ||
-          parsed.clientInformation === undefined
+          ...(parsed instanceof type.errors || parsed.clientInformation === undefined
             ? {}
             : {
-                clientInformation:
-                  parsed.clientInformation as OAuthClientInformationMixed,
+                clientInformation: parsed.clientInformation as OAuthClientInformationMixed,
               }),
         });
         return {
@@ -291,9 +260,7 @@ export function createServingRefresh(deps: ServingRefreshDeps): ServingRefresh {
           // the oauth-core stance. Never a short artificial
           // timer that would re-refresh on every dial.
           expiresAt:
-            refreshed.expiresIn === undefined
-              ? null
-              : new Date(now() + refreshed.expiresIn * 1000),
+            refreshed.expiresIn === undefined ? null : new Date(now() + refreshed.expiresIn * 1000),
         };
       },
     });
@@ -394,9 +361,7 @@ export function createDrizzleServingRefreshStore(
           expiresAt: tokens.expiresAt,
           updatedAt: now,
         })
-        .where(
-          and(eq(credential.id, credentialId), eq(credential.status, "active")),
-        )
+        .where(and(eq(credential.id, credentialId), eq(credential.status, "active")))
         .returning({ id: credential.id });
       return updated.length > 0;
     },
@@ -409,8 +374,7 @@ export function createDrizzleServingRefreshStore(
         })
         .where(eq(credential.id, credentialId));
     },
-    pushUpdates: (tenantId) =>
-      pushSourceUpdates(db, sidecarRouter, tenantId, credentialCipher),
+    pushUpdates: (tenantId) => pushSourceUpdates(db, sidecarRouter, tenantId, credentialCipher),
     decrypt: (credentialId, column, value) =>
       credentialCipher.decrypt(value, credentialAad(credentialId, column)),
     async loadDueRows(tenantId, cutoff) {
@@ -451,10 +415,7 @@ export function createTenantServingRefresh(
   const skewLeadMs = deps.skewLeadMs ?? 60 * 1000;
   const now = deps.now ?? Date.now;
   return async (tenantId: string) => {
-    const due = await deps.store.loadDueRows(
-      tenantId,
-      new Date(now() + skewLeadMs),
-    );
+    const due = await deps.store.loadDueRows(tenantId, new Date(now() + skewLeadMs));
     await Promise.all(due.map((row) => refresh(row)));
   };
 }
diff --git a/apps/hub/src/crypto-provider-cache-wiring.test.ts b/apps/hub/src/crypto-provider-cache-wiring.test.ts
index 4b65746ff0..ceb57c4dce 100644
--- a/apps/hub/src/crypto-provider-cache-wiring.test.ts
+++ b/apps/hub/src/crypto-provider-cache-wiring.test.ts
@@ -23,9 +23,7 @@ function productionTsFilesUnder(dir: string): string[] {
       if (entry.name === "node_modules") return [];
       return productionTsFilesUnder(full);
     }
-    return entry.name.endsWith(".ts") && !entry.name.endsWith(".test.ts")
-      ? [full]
-      : [];
+    return entry.name.endsWith(".ts") && !entry.name.endsWith(".test.ts") ? [full] : [];
   });
 }
 
@@ -34,9 +32,7 @@ function firstCall(source: string, callee: string): string {
   const token = `${callee}(`;
   const start = source.indexOf(token);
   if (start < 0) {
-    throw new Error(
-      `expected ${callee}(...) in ${path.relative(HUB_DIR, HUB_INDEX)}`,
-    );
+    throw new Error(`expected ${callee}(...) in ${path.relative(HUB_DIR, HUB_INDEX)}`);
   }
   let depth = 1;
   let i = start + token.length;
@@ -52,28 +48,19 @@ function firstCall(source: string, callee: string): string {
 describe("hub crypto-provider cache wiring", () => {
   test("createHub constructs one cache and passes it to every mail sender", () => {
     const sites = productionTsFilesUnder(HUB_DIR).flatMap((file) => {
-      const matches = readFileSync(file, "utf8").match(
-        /createCryptoProviderCache\s*\(/g,
-      );
+      const matches = readFileSync(file, "utf8").match(/createCryptoProviderCache\s*\(/g);
       return matches === null ? [] : matches.map(() => file);
     });
     expect(sites).toEqual([HUB_INDEX]);
 
     const source = readFileSync(HUB_INDEX, "utf8");
-    const assigned =
-      /const\s+(\w+)\s*=\s*createCryptoProviderCache\s*\(\s*\)/.exec(
-        source,
-      )?.[1];
+    const assigned = /const\s+(\w+)\s*=\s*createCryptoProviderCache\s*\(\s*\)/.exec(source)?.[1];
     if (assigned === undefined) {
-      throw new Error(
-        "createHub must assign createCryptoProviderCache() to a const",
-      );
+      throw new Error("createHub must assign createCryptoProviderCache() to a const");
     }
 
     expect(firstCall(source, "createHubChatPlatform")).toContain(assigned);
-    expect(firstCall(source, "launchWebhookTrigger")).toContain(
-      `cryptoProviderCache: ${assigned}`,
-    );
+    expect(firstCall(source, "launchWebhookTrigger")).toContain(`cryptoProviderCache: ${assigned}`);
     // The planner draft route's `runOneShotPrompt` mail sender was cut
     // with the stock-hub cutover (its inventory read through the deleted
     // memory/skills mounts), so only the two senders above remain pinned.
diff --git a/apps/hub/src/grant-allowance.ts b/apps/hub/src/grant-allowance.ts
index dce564155e..9c09dd9fdf 100644
--- a/apps/hub/src/grant-allowance.ts
+++ b/apps/hub/src/grant-allowance.ts
@@ -22,11 +22,7 @@ import { credentialAad } from "@intx/types";
 import { resolveApproval, type CreateApprovalRoutesDeps } from "@intx/hub-api";
 import type { GrantRule } from "@intx/types/authz";
 import type { GrantAllowanceGateDeps } from "@corbits/approvals";
-import {
-  listMcpTools,
-  withMcpConnection,
-  type McpServerToolsLoader,
-} from "@corbits/mcp-tools";
+import { listMcpTools, withMcpConnection, type McpServerToolsLoader } from "@corbits/mcp-tools";
 import { listMcpServerConnections } from "@corbits/connections";
 import { MCP_NO_TOKEN_SENTINEL } from "@corbits/credential-providers";
 
@@ -48,11 +44,7 @@ export function createMcpServerToolsAllowanceLoader(deps: {
     const connection = connections.find((c) => c.slug === serverSlug);
     if (connection === undefined || connection.url.length === 0) return null;
 
-    const provider = await resolveProviderByName(
-      deps.db,
-      tenantId,
-      `mcp:${serverSlug}`,
-    );
+    const provider = await resolveProviderByName(deps.db, tenantId, `mcp:${serverSlug}`);
     if (provider === null) return null;
     const credential = await deps.db.query.credential.findFirst({
       where: and(
@@ -77,9 +69,7 @@ export function createMcpServerToolsAllowanceLoader(deps: {
   };
 }
 
-export function createTenantGrantLister(
-  db: DB["db"],
-): GrantAllowanceGateDeps["listTenantGrants"] {
+export function createTenantGrantLister(db: DB["db"]): GrantAllowanceGateDeps["listTenantGrants"] {
   return async (tenantId) => {
     const rows = await db.query.grant.findMany({
       where: eq(schema.grant.tenantId, tenantId),
@@ -120,9 +110,7 @@ export function createAllowanceAutoApprover(
       },
     });
     if (result.kind !== "resolved") {
-      log(
-        `grant-allowance: approval ${approvalId} auto-resolve returned "${result.kind}"`,
-      );
+      log(`grant-allowance: approval ${approvalId} auto-resolve returned "${result.kind}"`);
       return false;
     }
     return true;
diff --git a/apps/hub/src/hub-data-dir-git-safety.test.ts b/apps/hub/src/hub-data-dir-git-safety.test.ts
index 1e5a60af0d..e496535216 100644
--- a/apps/hub/src/hub-data-dir-git-safety.test.ts
+++ b/apps/hub/src/hub-data-dir-git-safety.test.ts
@@ -1,11 +1,7 @@
 import { afterAll, expect, test } from "bun:test";
 import { mkdirSync, realpathSync, writeFileSync } from "node:fs";
 import path from "node:path";
-import {
-  cleanupGitFixtures,
-  gitFixture,
-  scratchGitFixtureDir,
-} from "../test/git-fixture";
+import { cleanupGitFixtures, gitFixture, scratchGitFixtureDir } from "../test/git-fixture";
 import {
   assertHubDataDirGitSafety,
   enclosingGitWorkTree,
@@ -30,9 +26,7 @@ test("a directory inside an existing git work tree fails loud", () => {
   mkdirSync(dataDir, { recursive: true });
 
   expect(enclosingGitWorkTree(dataDir)).toBe(realpathSync(workTree));
-  expect(() => assertHubDataDirGitSafety(dataDir)).toThrow(
-    HubDataDirInsideGitWorkTreeError,
-  );
+  expect(() => assertHubDataDirGitSafety(dataDir)).toThrow(HubDataDirInsideGitWorkTreeError);
   try {
     assertHubDataDirGitSafety(dataDir);
     throw new Error("expected assertHubDataDirGitSafety to throw");
@@ -50,7 +44,5 @@ test("opt-in allows initializing inside an existing git work tree", () => {
   const workTree = scratchGitFixtureDir("hub-data-opt-in-");
   gitFixture(workTree, ["init", "-b", "main"]);
   const dataDir = path.join(workTree, ".data", "hub");
-  expect(() =>
-    assertHubDataDirGitSafety(dataDir, { allowInsideWorkTree: true }),
-  ).not.toThrow();
+  expect(() => assertHubDataDirGitSafety(dataDir, { allowInsideWorkTree: true })).not.toThrow();
 });
diff --git a/apps/hub/src/hub-data-dir-git-safety.ts b/apps/hub/src/hub-data-dir-git-safety.ts
index d4f530c127..ff0dcb7876 100644
--- a/apps/hub/src/hub-data-dir-git-safety.ts
+++ b/apps/hub/src/hub-data-dir-git-safety.ts
@@ -15,9 +15,7 @@ const GIT_DIR_VARS = new Set([
   "GIT_ALTERNATE_OBJECT_DIRECTORIES",
 ]);
 
-export function envWithoutGitDir(
-  env: NodeJS.ProcessEnv = process.env,
-): NodeJS.ProcessEnv {
+export function envWithoutGitDir(env: NodeJS.ProcessEnv = process.env): NodeJS.ProcessEnv {
   const next: NodeJS.ProcessEnv = {};
   for (const [key, value] of Object.entries(env)) {
     if (value === undefined) continue;
@@ -75,8 +73,5 @@ export function assertHubDataDirGitSafety(
   if (opts?.allowInsideWorkTree === true) return;
   const enclosing = enclosingGitWorkTree(dir, opts?.env ?? process.env);
   if (enclosing === null) return;
-  throw new HubDataDirInsideGitWorkTreeError(
-    realpathSync(path.resolve(dir)),
-    enclosing,
-  );
+  throw new HubDataDirInsideGitWorkTreeError(realpathSync(path.resolve(dir)), enclosing);
 }
diff --git a/apps/hub/src/hub-error-handler.test.ts b/apps/hub/src/hub-error-handler.test.ts
index 2b0d250c0d..7aa11a80c2 100644
--- a/apps/hub/src/hub-error-handler.test.ts
+++ b/apps/hub/src/hub-error-handler.test.ts
@@ -15,8 +15,7 @@ import { hubErrorHandler } from "./hub-error-handler";
  * stands in for the real `InferenceResolutionError` (`@corbits/chat`'s
  * `model-unavailable.ts`) without importing it.
  */
-const MODEL_UNAVAILABLE_CONSUMER_MESSAGE =
-  "This agent's model isn't available here.";
+const MODEL_UNAVAILABLE_CONSUMER_MESSAGE = "This agent's model isn't available here.";
 
 class FakeInferenceResolutionError extends Error {
   readonly guidance: string;
@@ -67,9 +66,7 @@ describe("hubErrorHandler", () => {
       error: { code: string; userMessage: string; refId: string };
     };
     expect(body.error.code).toBe("internal_error");
-    expect(body.error.userMessage).toBe(
-      "Something went wrong. Please try again.",
-    );
+    expect(body.error.userMessage).toBe("Something went wrong. Please try again.");
     expect(typeof body.error.refId).toBe("string");
     expect(body.error.refId.length).toBeGreaterThan(0);
 
@@ -101,9 +98,7 @@ describe("hubErrorHandler", () => {
       error: { code: string; userMessage: string; refId: string };
     };
     expect(body.error.code).toBe("MultiStepFoldUnsupportedError");
-    expect(body.error.userMessage).toBe(
-      "definition wfd_research is not single-step (2 steps)",
-    );
+    expect(body.error.userMessage).toBe("definition wfd_research is not single-step (2 steps)");
     expect(typeof body.error.refId).toBe("string");
     expect(body.error.refId.length).toBeGreaterThan(0);
     expect(records).toHaveLength(1);
@@ -127,9 +122,7 @@ describe("hubErrorHandler", () => {
       error: { code: string; userMessage: string; refId: string };
     };
     expect(body.error.code).toBe("InferenceResolutionError");
-    expect(body.error.userMessage).toBe(
-      "This agent's model isn't available here.",
-    );
+    expect(body.error.userMessage).toBe("This agent's model isn't available here.");
     expect(body.error.userMessage).not.toContain("claude-sonnet-5");
     expect(body.error.userMessage).not.toMatch(/cannot resolve an inference/);
     expect(typeof body.error.refId).toBe("string");
diff --git a/apps/hub/src/hub-error-handler.ts b/apps/hub/src/hub-error-handler.ts
index 384004edc3..a0423ec41d 100644
--- a/apps/hub/src/hub-error-handler.ts
+++ b/apps/hub/src/hub-error-handler.ts
@@ -51,8 +51,7 @@ export function hubErrorHandler() {
     });
 
     if (hasGuidance(err)) {
-      const userMessage =
-        err.name === "InferenceResolutionError" ? err.guidance : err.message;
+      const userMessage = err.name === "InferenceResolutionError" ? err.guidance : err.message;
       return c.json(
         makeErrorEnvelope({
           code: err.name,
diff --git a/apps/hub/src/hub-zero-t4-registry.test.ts b/apps/hub/src/hub-zero-t4-registry.test.ts
index b1e0724ac6..606d20b3f8 100644
--- a/apps/hub/src/hub-zero-t4-registry.test.ts
+++ b/apps/hub/src/hub-zero-t4-registry.test.ts
@@ -16,15 +16,7 @@ import { describe, expect, test } from "bun:test";
 import { readFileSync } from "node:fs";
 import path from "node:path";
 
-const HUB_SRC = path.join(
-  import.meta.dir,
-  "..",
-  "..",
-  "..",
-  "apps",
-  "hub",
-  "src",
-);
+const HUB_SRC = path.join(import.meta.dir, "..", "..", "..", "apps", "hub", "src");
 
 function readHub(rel: string): string {
   return readFileSync(path.join(HUB_SRC, rel), "utf8");
@@ -46,10 +38,7 @@ describe("hub-zero T4: no legacy template import in the hub", () => {
     "native-workflow-routine-launch.ts",
   ]) {
     test(`${rel} imports no legacy template package`, () => {
-      expect(
-        readHub(rel).includes(LEGACY_PKG),
-        `${rel} still imports ${LEGACY_PKG}`,
-      ).toBe(false);
+      expect(readHub(rel).includes(LEGACY_PKG), `${rel} still imports ${LEGACY_PKG}`).toBe(false);
     });
   }
 });
@@ -57,10 +46,9 @@ describe("hub-zero T4: no legacy template import in the hub", () => {
 describe("hub-zero T4: the scheduled delivery join is cut", () => {
   test("no settings-row list read survives in the hub", () => {
     for (const rel of ["index.ts", "native-workflow-routine-launch.ts"]) {
-      expect(
-        readHub(rel).includes(LIST_SETTINGS),
-        `${rel} still reads ${LIST_SETTINGS}`,
-      ).toBe(false);
+      expect(readHub(rel).includes(LIST_SETTINGS), `${rel} still reads ${LIST_SETTINGS}`).toBe(
+        false,
+      );
     }
   });
 
@@ -77,9 +65,7 @@ describe("hub-zero T4: the scheduled delivery join is cut", () => {
   test("no delivery-join seam survives in index.ts", () => {
     const source = readHub("index.ts");
     for (const needle of [JOIN_DEPS, JOIN_FN, JOIN_PORT]) {
-      expect(source.includes(needle), `index.ts still contains ${needle}`).toBe(
-        false,
-      );
+      expect(source.includes(needle), `index.ts still contains ${needle}`).toBe(false);
     }
   });
 
@@ -119,9 +105,7 @@ describe("hub-zero T4: the native connector registry", () => {
       "gmail",
       "github",
     ]) {
-      expect(ids.has(id), `native registry is missing connector ${id}`).toBe(
-        true,
-      );
+      expect(ids.has(id), `native registry is missing connector ${id}`).toBe(true);
     }
   });
 
@@ -129,12 +113,8 @@ describe("hub-zero T4: the native connector registry", () => {
     const { CONNECTOR_REGISTRY } = await import("./native-connector-registry");
     for (const [key, descriptor] of Object.entries(CONNECTOR_REGISTRY)) {
       expect(descriptor.id, `${key} id`).toBe(key);
-      expect(descriptor.displayName.length > 0, `${key} displayName`).toBe(
-        true,
-      );
-      expect(Array.isArray(descriptor.feedsTools), `${key} feedsTools`).toBe(
-        true,
-      );
+      expect(descriptor.displayName.length > 0, `${key} displayName`).toBe(true);
+      expect(Array.isArray(descriptor.feedsTools), `${key} feedsTools`).toBe(true);
     }
   });
 
@@ -169,9 +149,7 @@ describe("hub-zero T4: the native connector registry", () => {
     }
     for (const preset of MCP_PRESETS) {
       expect(preset.url.length > 0, `${preset.slug} url`).toBe(true);
-      expect(preset.connectionMode.length > 0, `${preset.slug} mode`).toBe(
-        true,
-      );
+      expect(preset.connectionMode.length > 0, `${preset.slug} mode`).toBe(true);
     }
   });
 });
diff --git a/apps/hub/src/index.ts b/apps/hub/src/index.ts
index 8edca89c2b..0e26e0a1be 100644
--- a/apps/hub/src/index.ts
+++ b/apps/hub/src/index.ts
@@ -17,16 +17,9 @@ import {
   createWorkflowRunDispatchStore,
   listAssetsForTenant,
 } from "@intx/db";
-import {
-  tenant as tenantTable,
-  user as userTable,
-  workflowDefinition,
-} from "@intx/db/schema";
+import { tenant as tenantTable, user as userTable, workflowDefinition } from "@intx/db/schema";
 import { and, eq, inArray } from "drizzle-orm";
-import {
-  createEnvKeyCredentialCipher,
-  createNoopCredentialCipher,
-} from "@intx/crypto";
+import { createEnvKeyCredentialCipher, createNoopCredentialCipher } from "@intx/crypto";
 import type { CredentialCipher } from "@intx/types";
 import {
   createApp,
@@ -78,18 +71,12 @@ import {
   createInMemoryTurnClaimStore,
   createWorkbenchTurnQueue,
 } from "@corbits/agent-runtime";
-import {
-  createDrizzleMailboxWriter,
-  type MailboxFanoutDeps,
-} from "@corbits/chat/mailbox-fanout";
+import { createDrizzleMailboxWriter, type MailboxFanoutDeps } from "@corbits/chat/mailbox-fanout";
 import type { RelaunchNoticePort } from "@corbits/chat";
 import { reportError } from "@corbits/error-sink";
 import type { FinalizedTurnToolCall } from "@corbits/turn-artifacts";
 import { decodedOrNull } from "@corbits/url-path";
-import {
-  createInboxRoutes,
-  WORKBENCH_MAILBOX_VOCABULARY,
-} from "@corbits/inbox";
+import { createInboxRoutes, WORKBENCH_MAILBOX_VOCABULARY } from "@corbits/inbox";
 import {
   createInMemoryMailboxEventBus,
   createMailboxDb,
@@ -113,10 +100,7 @@ import {
   createWebhookTriggerRoutes,
   launchWebhookTrigger,
 } from "@corbits/webhook-triggers";
-import {
-  ensureRunSession,
-  isConversationalWorkflowName,
-} from "@corbits/workflows";
+import { ensureRunSession, isConversationalWorkflowName } from "@corbits/workflows";
 import {
   createSidecarProvisioner as createE2BSidecarProvisioner,
   readProvisionerConfig as readE2BProvisionerConfig,
@@ -143,15 +127,8 @@ import { grantConditionRegistry } from "./grant-conditions";
 import { wireMailRedelivery } from "./mail-redelivery";
 import { getLogger, setup } from "@intx/log";
 import { hexEncode } from "@intx/types";
-import {
-  createToolAllowanceRegistry,
-  withGrantAllowance,
-} from "@corbits/approvals";
-import {
-  createMcpCallClassifier,
-  MCP_CALL_TOOL,
-  mcpTools,
-} from "@corbits/mcp-tools";
+import { createToolAllowanceRegistry, withGrantAllowance } from "@corbits/approvals";
+import { createMcpCallClassifier, MCP_CALL_TOOL, mcpTools } from "@corbits/mcp-tools";
 import {
   createAllowanceAutoApprover,
   createMcpServerToolsAllowanceLoader,
@@ -211,11 +188,7 @@ import { type Context, Hono, type Next } from "hono";
 
 import { upgradeWebSocket, websocket } from "hono/bun";
 import { CORBITS_TOOLS_REGISTRY } from "@corbits/tool-registry-publish";
-import {
-  readHubConfig,
-  type HubConfig,
-  type SidecarProvisionerConfig,
-} from "./config";
+import { readHubConfig, type HubConfig, type SidecarProvisionerConfig } from "./config";
 import type { SidecarProvisioner } from "@intx/hub-sessions";
 import { withTurnPartWriteDefaults } from "./turn-part-content-default";
 import { createDrizzleTurnTextSnapshotReader } from "./turn-text-snapshot";
@@ -224,10 +197,7 @@ import { triggerNativeWorkflowRoutineRun } from "./native-workflow-routine-launc
 import { createCronEmitter } from "@corbits/workflow-schedule/emitter";
 import { createToolGrantsForPins } from "./tool-grants";
 import { drainHubServer, shutdownHub } from "./shutdown";
-import {
-  createInFlightRequestTracker,
-  withInFlightRequestTracking,
-} from "./in-flight-requests";
+import { createInFlightRequestTracker, withInFlightRequestTracking } from "./in-flight-requests";
 import {
   createWorkflowRunAuthenticator,
   withWorkflowRunTenantAuth,
@@ -339,9 +309,7 @@ export function credentialCipherFrom(
     log.warn`No CREDENTIAL_ENCRYPTION_KEY configured; secrets (e.g. webhook-trigger signing secrets) will NOT be encrypted at rest. ALLOW_PLAINTEXT_SECRETS is set — expected in dev/test only, never for a real deployment.`;
     return createNoopCredentialCipher();
   }
-  return createEnvKeyCredentialCipher(
-    Buffer.from(config.credentialEncryptionKeyHex, "hex"),
-  );
+  return createEnvKeyCredentialCipher(Buffer.from(config.credentialEncryptionKeyHex, "hex"));
 }
 
 /**
@@ -384,9 +352,7 @@ export function principalKeyStoreFrom(
   }
   return createPrincipalKeyStore({
     db,
-    cipher: createEnvKeyCredentialCipher(
-      Buffer.from(config.principalKeyEncryptionKeyHex, "hex"),
-    ),
+    cipher: createEnvKeyCredentialCipher(Buffer.from(config.principalKeyEncryptionKeyHex, "hex")),
   });
 }
 
@@ -436,9 +402,7 @@ function buildSidecarProvisioner(
           },
           dataDir: path.resolve(
             hubDataDir,
-            role === "probe"
-              ? "process-provisioner-probe"
-              : "process-provisioner",
+            role === "probe" ? "process-provisioner-probe" : "process-provisioner",
           ),
           hubWebSocketUrl,
         }),
@@ -447,11 +411,7 @@ function buildSidecarProvisioner(
       return createDockerSidecarProvisioner({
         config: {
           image: config.image,
-          stateFilePath: path.resolve(
-            hubDataDir,
-            "docker-provisioner",
-            "state.json",
-          ),
+          stateFilePath: path.resolve(hubDataDir, "docker-provisioner", "state.json"),
         },
       });
     case "e2b":
@@ -476,9 +436,7 @@ function buildSidecarProvisioner(
 
 export async function createHub(config: HubConfig) {
   const { db, close } = createDB(dbConfigFromUrl(config.databaseUrl));
-  const { db: mailboxDb, close: closeMailbox } = createMailboxDb(
-    config.databaseUrl,
-  );
+  const { db: mailboxDb, close: closeMailbox } = createMailboxDb(config.databaseUrl);
   const mailboxBus = createInMemoryMailboxEventBus();
   const log = getLogger(["hub", "auth"]);
   // Built once, tagged, and shared by every secret-at-rest seam in this
@@ -540,14 +498,11 @@ export async function createHub(config: HubConfig) {
     config.signInRateLimit.windowSeconds,
     config.signInRateLimit.max,
   );
-  const { signingKey, agentRepoStore, assetService } =
-    await createBootAssetWiring({
-      db,
-      dataDir: config.hubDataDir,
-      ...(config.allowGitInsideWorkTree === true
-        ? { allowGitInsideWorkTree: true }
-        : {}),
-    });
+  const { signingKey, agentRepoStore, assetService } = await createBootAssetWiring({
+    db,
+    dataDir: config.hubDataDir,
+    ...(config.allowGitInsideWorkTree === true ? { allowGitInsideWorkTree: true } : {}),
+  });
   const baseLookups = createHubSessionLookups({ db, agentRepoStore });
   // A chat agent is a native provisioned deployment. Reconnect
   // ownership is Interchange's live run. Completed means dead; wake is a
@@ -561,9 +516,7 @@ export async function createHub(config: HubConfig) {
   // assigned once they do; until then every registration takes the plain
   // parked path.
   const grantAllowanceGateRef: {
-    current?: (
-      args: Parameters<typeof baseLookups.registerSignalCorrelation>[0],
-    ) => Promise<void>;
+    current?: (args: Parameters<typeof baseLookups.registerSignalCorrelation>[0]) => Promise<void>;
   } = {};
   // Forward reference: `eventCollectors` (the wrapped
   // `EventCollectorRegistry`) isn't constructed until later in this
@@ -648,8 +601,7 @@ export async function createHub(config: HubConfig) {
     oauthLogin: {
       isLocalSidecar: async (identity) => {
         const allocation = await db.query.sidecarAllocation.findFirst({
-          where: (allocation, { eq: equals }) =>
-            equals(allocation.id, identity.allocationId),
+          where: (allocation, { eq: equals }) => equals(allocation.id, identity.allocationId),
           columns: { provisionerId: true },
         });
         return allocation?.provisionerId === "process";
@@ -800,8 +752,7 @@ export async function createHub(config: HubConfig) {
     },
   });
   const hubWebSocketUrl =
-    config.sidecarWebSocketUrl ??
-    `${config.baseUrl.replace(/^http/, "ws")}/api/sidecars/ws`;
+    config.sidecarWebSocketUrl ?? `${config.baseUrl.replace(/^http/, "ws")}/api/sidecars/ws`;
   // Provisioner plugins are injected at the application composition
   // boundary, mirroring @intx/hub-sessions's own reference wiring. An
   // install that configures nothing registers the `process` backend
@@ -822,12 +773,7 @@ export async function createHub(config: HubConfig) {
   const buildSidecarPlugins = (role: ProcessProvisionerRole) =>
     createSidecarPluginRegistry({
       provisioners: config.sidecarProvisioners.map((provisionerConfig) =>
-        buildSidecarProvisioner(
-          provisionerConfig,
-          config.hubDataDir,
-          hubWebSocketUrl,
-          role,
-        ),
+        buildSidecarProvisioner(provisionerConfig, config.hubDataDir, hubWebSocketUrl, role),
       ),
       ...(config.defaultSidecarProvisionerId !== undefined
         ? { defaultProvisionerId: config.defaultSidecarProvisionerId }
@@ -863,9 +809,7 @@ export async function createHub(config: HubConfig) {
     hubWebSocketUrl,
     onReady: async (allocation) => {
       await workflowAllocationService.deployReadyAllocation(allocation);
-      await workflowDispatchService.requeueForReadyAllocation(
-        allocation.anchorRunId,
-      );
+      await workflowDispatchService.requeueForReadyAllocation(allocation.anchorRunId);
     },
   });
   await workflowAllocationService.initialize?.();
@@ -877,21 +821,16 @@ export async function createHub(config: HubConfig) {
   sidecarRouter.events.on("sidecar.allocated.connected", (allocated) =>
     sidecarAllocationReconciler.handleConnected(allocated),
   );
-  sidecarRouter.events.on(
-    "mail.inbound.acknowledged",
-    ({ messageId, allocated }) => {
-      if (allocated === undefined) return;
-      return workflowDispatchService.acknowledge({ ...allocated, messageId });
-    },
-  );
+  sidecarRouter.events.on("mail.inbound.acknowledged", ({ messageId, allocated }) => {
+    if (allocated === undefined) return;
+    return workflowDispatchService.acknowledge({ ...allocated, messageId });
+  });
   const sidecarAllocationLog = getLogger(["hub", "sidecar-allocation"]);
   const ALLOCATION_RECONCILIATION_INTERVAL_MS = 1_000;
   const ALLOCATION_CONNECTION_REPAIR_INTERVAL_MS = 30_000;
-  let nextAllocationConnectionRepairAt =
-    Date.now() + ALLOCATION_CONNECTION_REPAIR_INTERVAL_MS;
+  let nextAllocationConnectionRepairAt = Date.now() + ALLOCATION_CONNECTION_REPAIR_INTERVAL_MS;
   let sidecarAllocationReconciliationStopped = false;
-  let sidecarAllocationReconciliationTimer:
-    ReturnType<typeof setTimeout> | undefined;
+  let sidecarAllocationReconciliationTimer: ReturnType<typeof setTimeout> | undefined;
   function scheduleAllocationReconciliation(delayMs: number): void {
     if (sidecarAllocationReconciliationStopped) return;
     const timer = setTimeout(() => {
@@ -905,8 +844,7 @@ export async function createHub(config: HubConfig) {
       await sidecarAllocationReconciler.reconcileUntilIdle();
       await workflowDispatchService.reconcileUntilIdle();
       if (Date.now() >= nextAllocationConnectionRepairAt) {
-        nextAllocationConnectionRepairAt =
-          Date.now() + ALLOCATION_CONNECTION_REPAIR_INTERVAL_MS;
+        nextAllocationConnectionRepairAt = Date.now() + ALLOCATION_CONNECTION_REPAIR_INTERVAL_MS;
         await sidecarAllocationReconciler.repairUnscheduledConnections();
       }
     } catch (error) {
@@ -936,14 +874,9 @@ export async function createHub(config: HubConfig) {
     // session, the same posture `workflow-run-deploy-auth` documents for
     // its own bearer mirror in `vendor/intx/hub-api`.
     getSession: async (headers) => {
-      const internalRunTriggerToken = headers.get(
-        "x-corbits-internal-run-trigger",
-      );
+      const internalRunTriggerToken = headers.get("x-corbits-internal-run-trigger");
       if (internalRunTriggerToken !== null) {
-        const userId = verifyInternalRunTriggerToken(
-          config.sessionSecret,
-          internalRunTriggerToken,
-        );
+        const userId = verifyInternalRunTriggerToken(config.sessionSecret, internalRunTriggerToken);
         if (userId === null) return null;
         const userRow = await db.query.user.findFirst({
           where: eq(userTable.id, userId),
@@ -1024,8 +957,7 @@ export async function createHub(config: HubConfig) {
           sidecarRouter.handleOpen(handle);
         },
         onMessage(evt, _ws) {
-          if (typeof evt.data === "string")
-            sidecarRouter.handleMessage(handle, evt.data);
+          if (typeof evt.data === "string") sidecarRouter.handleMessage(handle, evt.data);
         },
         onClose: () => sidecarRouter.handleClose(handle),
       };
@@ -1077,11 +1009,7 @@ export async function createHub(config: HubConfig) {
             db,
             sidecarRouter,
             workflowDispatchService,
-            readRunLifecycles: async (
-              agentAddress,
-              topLevelRunId,
-              targetRunId,
-            ) => {
+            readRunLifecycles: async (agentAddress, topLevelRunId, targetRunId) => {
               const lifecycles = await readDurableWorkflowRunLifecycles(
                 agentRepoStore.repoStore,
                 agentAddress,
@@ -1118,10 +1046,9 @@ export async function createHub(config: HubConfig) {
   const turnMailCorrelation = createDrizzleTurnMailCorrelationStore(db);
   // The chat platform's invite-launch fallback: a definition with no
   // model requirements of its own resolves the tenant-catalog default.
-  const chatHostInferencePreferencesResolver =
-    createWorkbenchHostInferencePreferencesResolver((tenantId) =>
-      listDefaultInferencePreferences(db, tenantId),
-    );
+  const chatHostInferencePreferencesResolver = createWorkbenchHostInferencePreferencesResolver(
+    (tenantId) => listDefaultInferencePreferences(db, tenantId),
+  );
   // Where a relaunch announces itself in the room (see `@corbits/chat`'s
   // `relaunch-notice.ts`). Armed further down, once the room-message
   // store the poster writes through exists — the platform that fires
@@ -1162,11 +1089,7 @@ export async function createHub(config: HubConfig) {
     // refreshed frames, so the run dials on a live token or fails over
     // past a credential that just went re-auth-required.
     refreshServingCredentials: createTenantServingRefresh({
-      store: createDrizzleServingRefreshStore(
-        db,
-        credentialCipher,
-        sidecarRouter,
-      ),
+      store: createDrizzleServingRefreshStore(db, credentialCipher, sidecarRouter),
       hubUrl: config.baseUrl,
     }),
     // A hand-authored definition with no model requirements of its own
@@ -1299,9 +1222,7 @@ export async function createHub(config: HubConfig) {
   });
   // Now that `chatStore`/`chatPlatform` exist, arm the finalized-turn
   // artifact-delivery ref declared beside `eventCollectors` above.
-  const artifactDeliveryHandlerDeps: Parameters<
-    typeof createArtifactDeliveryHandler
-  >[0] = {
+  const artifactDeliveryHandlerDeps: Parameters<typeof createArtifactDeliveryHandler>[0] = {
     db,
     store: chatStore,
     roomMessages,
@@ -1316,9 +1237,7 @@ export async function createHub(config: HubConfig) {
     providerHealth: createProviderHealthPort(providerHealthStore),
     listConnectedProviders: (tenantId) => listConnectedProviders(db, tenantId),
   };
-  artifactDeliveryHandlerRef.current = createArtifactDeliveryHandler(
-    artifactDeliveryHandlerDeps,
-  );
+  artifactDeliveryHandlerRef.current = createArtifactDeliveryHandler(artifactDeliveryHandlerDeps);
   // The "/name args" and "@name args" command registry: every tenant's
   // invitable workflow definitions, exposed as commands by
   // `createWorkflowCommandPlugin`, resolved fresh on every list/lookup
@@ -1331,8 +1250,7 @@ export async function createHub(config: HubConfig) {
   const commandRegistry = createCommandRegistry();
   commandRegistry.registerCommandPlugin(
     createWorkflowCommandPlugin({
-      listInvitableDefinitions: (tenantId) =>
-        chatPlatform.listInvitableDefinitions(tenantId),
+      listInvitableDefinitions: (tenantId) => chatPlatform.listInvitableDefinitions(tenantId),
       startWorkflow: (input) =>
         startWorkflowCommand(
           {
@@ -1369,8 +1287,7 @@ export async function createHub(config: HubConfig) {
   // keeps around. Wired into the picker surface: chat's invite/new-chat
   // dialogs (`chatDeps.isInvitableDefinition` below).
   const isPickerListableDefinition = (definition: { name: string }) =>
-    isConversationalAgentDefinition(definition) &&
-    !isPlannerCreatedDefinitionName(definition.name);
+    isConversationalAgentDefinition(definition) && !isPlannerCreatedDefinitionName(definition.name);
 
   const chatDeps: Parameters<typeof createChatRoutes>[0] = {
     store: chatStore,
@@ -1380,8 +1297,7 @@ export async function createHub(config: HubConfig) {
     threads: threadStore,
     turnMailCorrelation,
     agentTurns,
-    turnTextSnapshot: (input) =>
-      createDrizzleTurnTextSnapshotReader(db).read(input),
+    turnTextSnapshot: (input) => createDrizzleTurnTextSnapshotReader(db).read(input),
     blockResponses: blockResponseStore,
     reactions: reactionStore,
     pins: pinStore,
@@ -1414,8 +1330,7 @@ export async function createHub(config: HubConfig) {
     // instance down when it is removed from a chat's participants,
     // rather than leaving it deployed with nothing routing messages to
     // it.
-    releaseAgentInstance: (address, reason) =>
-      sidecarRouter.sendAgentUndeploy(address, reason),
+    releaseAgentInstance: (address, reason) => sidecarRouter.sendAgentUndeploy(address, reason),
     // CL-7450: fans a sent human message into every human participant's
     // `@corbits/mailbox` inbox, on the same `mailboxDb`/`mailboxBus` every
     // other mailbox consumer in this file shares. `resolveKnownPrincipalIds`
@@ -1476,10 +1391,7 @@ export async function createHub(config: HubConfig) {
   // (mentions + deliveries only), clear-done. The raw package surface
   // (including SSE events) mounts under `/mailbox` for hosts and tools
   // that need the universal API.
-  app.route(
-    `${TENANT_PREFIX}/inbox`,
-    createInboxRoutes({ db: mailboxDb, bus: mailboxBus }),
-  );
+  app.route(`${TENANT_PREFIX}/inbox`, createInboxRoutes({ db: mailboxDb, bus: mailboxBus }));
   // Library/artifacts plane (CL-8188): `@corbits/artifacts` mounted directly
   // rather than through the retired `@corbits/artifacts-hub` wrapper — the
   // library now owns counts, preview, and every other Library HTTP surface
@@ -1500,8 +1412,7 @@ export async function createHub(config: HubConfig) {
       countSegments: Object.fromEntries(
         LIBRARY_KIND_SEGMENTS.map((segment) => [
           segment,
-          (row: { kind: string; title: string }) =>
-            artifactMatchesLibraryKindSegment(row, segment),
+          (row: { kind: string; title: string }) => artifactMatchesLibraryKindSegment(row, segment),
         ]),
       ),
     });
@@ -1522,8 +1433,7 @@ export async function createHub(config: HubConfig) {
     mountWorkflowArtifacts(workflowArtifactsApi, {
       db,
       contentStore: artifactContentStore,
-      resolveRunScope: (token, runAddress) =>
-        workflowRunAuthenticator.resolve(token, runAddress),
+      resolveRunScope: (token, runAddress) => workflowRunAuthenticator.resolve(token, runAddress),
     });
     app.route("/api/workflow-artifacts", workflowArtifactsApi);
   }
@@ -1602,8 +1512,8 @@ export async function createHub(config: HubConfig) {
         conditionRegistry: grantConditionRegistry,
       }),
       workbenchBelongsToTenant: async (tenantId, chatId) =>
-        (await chatStore.getWorkbenchSettings(tenantId, chatId)) !==
-          undefined || (await chatStore.hasLaunchedInstance(tenantId, chatId)),
+        (await chatStore.getWorkbenchSettings(tenantId, chatId)) !== undefined ||
+        (await chatStore.hasLaunchedInstance(tenantId, chatId)),
     }),
   );
 
@@ -1618,10 +1528,7 @@ export async function createHub(config: HubConfig) {
   // comes from the trigger row the id resolves to, and the only trust
   // it is granted comes from the HMAC signature check in
   // `createWebhookIngressRoutes` itself.
-  const webhookTriggerStore = createDrizzleWebhookTriggerStore(
-    db,
-    credentialCipher,
-  );
+  const webhookTriggerStore = createDrizzleWebhookTriggerStore(db, credentialCipher);
   app.route(
     `${TENANT_PREFIX}/webhook-triggers`,
     createWebhookTriggerRoutes({
@@ -1736,17 +1643,14 @@ export async function createHub(config: HubConfig) {
         gmailClientSecret: config.gmailClientSecret,
       },
       providerHealth: providerHealthStore,
-      listConnectedProviders: (tenantId) =>
-        listConnectedProviders(db, tenantId),
+      listConnectedProviders: (tenantId) => listConnectedProviders(db, tenantId),
       // CL-6403: an operator-set GITHUB_API_BASE_URL lets a fake server
       // stand in for api.github.com for the `github` connector's PAT
       // probe and stored provider origin; unset in every real deployment,
       // so `probeBaseUrls` is empty and every connector probes its own
       // fixed production origin.
       probeBaseUrls:
-        config.githubApiBaseUrl !== undefined
-          ? { github: config.githubApiBaseUrl }
-          : {},
+        config.githubApiBaseUrl !== undefined ? { github: config.githubApiBaseUrl } : {},
       onConnected: settleServiceConnection,
     }),
   );
@@ -1784,11 +1688,7 @@ export async function createHub(config: HubConfig) {
       defaultReturnPath: "/settings/connections",
       // `/w/` is the chat room prefix: the in-room connect card
       // (CL-6393) starts OAuth from a room and must land back in it.
-      returnPathAllowlist: [
-        ...DEFAULT_RETURN_PATH_ALLOWLIST,
-        "/plugins",
-        "/w/",
-      ],
+      returnPathAllowlist: [...DEFAULT_RETURN_PATH_ALLOWLIST, "/plugins", "/w/"],
     }),
   );
   // Loopback OAuth connect (CL-7508): codex/xai-oauth connect through a
@@ -1840,11 +1740,7 @@ export async function createHub(config: HubConfig) {
       presets: MCP_PRESETS,
       onConnected: settleServiceConnection,
       // `/w/` for the same reason as the connections/oauth mount above.
-      returnPathAllowlist: [
-        ...DEFAULT_RETURN_PATH_ALLOWLIST,
-        "/plugins",
-        "/w/",
-      ],
+      returnPathAllowlist: [...DEFAULT_RETURN_PATH_ALLOWLIST, "/plugins", "/w/"],
     }),
   );
   // Myra's own connections-visibility surface
@@ -1947,10 +1843,7 @@ export async function createHub(config: HubConfig) {
       // died with the process must never stall shutdown, so bound it.
       // (CL-7584: a fire-and-forget reconcile's request can be cut
       // mid-query by this very teardown.)
-      await Promise.race([
-        close(),
-        new Promise((resolve) => setTimeout(resolve, 5_000)),
-      ]);
+      await Promise.race([close(), new Promise((resolve) => setTimeout(resolve, 5_000))]);
     },
   };
 }
@@ -1963,11 +1856,7 @@ if (import.meta.main) {
   const url = new URL(config.baseUrl);
   const port =
     config.listenPort ??
-    (url.port === ""
-      ? url.protocol === "https:"
-        ? 443
-        : 80
-      : Number(url.port));
+    (url.port === "" ? (url.protocol === "https:" ? 443 : 80) : Number(url.port));
   const server = Bun.serve({
     fetch: hub.app.fetch,
     websocket,
diff --git a/apps/hub/src/launch-caches.test.ts b/apps/hub/src/launch-caches.test.ts
index 20668d7f63..bf5901a2bd 100644
--- a/apps/hub/src/launch-caches.test.ts
+++ b/apps/hub/src/launch-caches.test.ts
@@ -181,12 +181,8 @@ describe("createLaunchCaches: assetService reads", () => {
       repoStore,
     });
 
-    expect(caches.assetService.createAsset).toBe(
-      inner.assetService.createAsset,
-    );
-    expect(caches.assetService.populateAsset).toBe(
-      inner.assetService.populateAsset,
-    );
+    expect(caches.assetService.createAsset).toBe(inner.assetService.createAsset);
+    expect(caches.assetService.populateAsset).toBe(inner.assetService.populateAsset);
   });
 });
 
@@ -202,16 +198,8 @@ describe("createLaunchCaches: repoStore packs", () => {
       repoStore,
     });
 
-    const first = await caches.repoStore.createPack(
-      principal,
-      repoId,
-      HEAD_REF,
-    );
-    const second = await caches.repoStore.createPack(
-      principal,
-      repoId,
-      HEAD_REF,
-    );
+    const first = await caches.repoStore.createPack(principal, repoId, HEAD_REF);
+    const second = await caches.repoStore.createPack(principal, repoId, HEAD_REF);
 
     expect(createPackCalls.length).toBe(1);
     expect(second).toEqual(first);
@@ -242,9 +230,7 @@ describe("createLaunchCaches: repoStore packs", () => {
 
     expect(caches.repoStore.initRepo).toBe(repoStore.initRepo);
     expect(caches.repoStore.writeTree).toBe(repoStore.writeTree);
-    expect(caches.repoStore.writeTreePreservingPrefix).toBe(
-      repoStore.writeTreePreservingPrefix,
-    );
+    expect(caches.repoStore.writeTreePreservingPrefix).toBe(repoStore.writeTreePreservingPrefix);
     expect(caches.repoStore.writeTreeDelta).toBe(repoStore.writeTreeDelta);
     expect(caches.repoStore.receivePack).toBe(repoStore.receivePack);
     expect(caches.repoStore.commitPackedTip).toBe(repoStore.commitPackedTip);
@@ -252,12 +238,8 @@ describe("createLaunchCaches: repoStore packs", () => {
     expect(caches.repoStore.listRefs).toBe(repoStore.listRefs);
     expect(caches.repoStore.resolveHead).toBe(repoStore.resolveHead);
     expect(caches.repoStore.getRepoDir).toBe(repoStore.getRepoDir);
-    expect(caches.repoStore.openCommittedReads).toBe(
-      repoStore.openCommittedReads,
-    );
-    expect(caches.repoStore.openCommittedReadsAtCommit).toBe(
-      repoStore.openCommittedReadsAtCommit,
-    );
+    expect(caches.repoStore.openCommittedReads).toBe(repoStore.openCommittedReads);
+    expect(caches.repoStore.openCommittedReadsAtCommit).toBe(repoStore.openCommittedReadsAtCommit);
     expect(caches.repoStore.subscribe).toBe(repoStore.subscribe);
   });
 });
diff --git a/apps/hub/src/launch-caches.ts b/apps/hub/src/launch-caches.ts
index a030627ed0..f80bd582c5 100644
--- a/apps/hub/src/launch-caches.ts
+++ b/apps/hub/src/launch-caches.ts
@@ -99,9 +99,7 @@ class BoundedCache<V> {
   }
 
   #isOverBudget(): boolean {
-    return (
-      this.#entries.size > this.#maxEntries || this.#bytes > this.#maxBytes
-    );
+    return this.#entries.size > this.#maxEntries || this.#bytes > this.#maxBytes;
   }
 }
 
@@ -141,9 +139,7 @@ export function createLaunchCaches(deps: {
     return repoStore.resolveRef(LAUNCH_CACHE_PRINCIPAL, repoId, effectiveRef);
   }
 
-  async function readAssetBlob(
-    params: ReadAssetBlobParams,
-  ): Promise<Uint8Array> {
+  async function readAssetBlob(params: ReadAssetBlobParams): Promise<Uint8Array> {
     const sha = await resolvePackageRegistryHeadSha(params.assetId, params.ref);
     if (sha === null) return assetService.readAssetBlob(params);
     const key = `${params.assetId}:${sha}:${params.path}`;
@@ -154,9 +150,7 @@ export function createLaunchCaches(deps: {
     return blob;
   }
 
-  async function listAssetBlobs(
-    params: ListAssetBlobsParams,
-  ): Promise<string[]> {
+  async function listAssetBlobs(params: ListAssetBlobsParams): Promise<string[]> {
     const sha = await resolvePackageRegistryHeadSha(params.assetId, params.ref);
     // No resolvable `main` means no tarballs yet. Match the tarball REST
     // list, which returns [] on this same not_found rather than failing
diff --git a/apps/hub/src/mail-redelivery.ts b/apps/hub/src/mail-redelivery.ts
index ece570eef9..ab6ba14e4f 100644
--- a/apps/hub/src/mail-redelivery.ts
+++ b/apps/hub/src/mail-redelivery.ts
@@ -43,26 +43,23 @@ export type WireMailRedeliveryDeps = {
 export function wireMailRedelivery(deps: WireMailRedeliveryDeps): () => void {
   const log = getLogger(["hub", "mail-redelivery"]);
 
-  return deps.sidecarRouter.events.on(
-    "mail.outbound.undelivered",
-    ({ rawMessage, recipients }) => {
-      for (const recipient of recipients) {
-        void (async () => {
-          if (!deps.sidecarRouter.getRoutableAddresses().includes(recipient)) {
-            try {
-              await deps.chatPlatform.ensureAwake(recipient);
-            } catch (cause) {
-              log.warn`could not wake ${recipient} ahead of redelivery: ${
-                cause instanceof Error ? cause.message : String(cause)
-              }`;
-            }
+  return deps.sidecarRouter.events.on("mail.outbound.undelivered", ({ rawMessage, recipients }) => {
+    for (const recipient of recipients) {
+      void (async () => {
+        if (!deps.sidecarRouter.getRoutableAddresses().includes(recipient)) {
+          try {
+            await deps.chatPlatform.ensureAwake(recipient);
+          } catch (cause) {
+            log.warn`could not wake ${recipient} ahead of redelivery: ${
+              cause instanceof Error ? cause.message : String(cause)
+            }`;
           }
-          const delivered = deps.sidecarRouter.routeMail(recipient, rawMessage);
-          if (!delivered) {
-            log.warn`redelivery to ${recipient} failed: still unroutable after wake`;
-          }
-        })();
-      }
-    },
-  );
+        }
+        const delivered = deps.sidecarRouter.routeMail(recipient, rawMessage);
+        if (!delivered) {
+          log.warn`redelivery to ${recipient} failed: still unroutable after wake`;
+        }
+      })();
+    }
+  });
 }
diff --git a/apps/hub/src/mailbox-persist.ts b/apps/hub/src/mailbox-persist.ts
index 9ea178f71c..e94cf98cd3 100644
--- a/apps/hub/src/mailbox-persist.ts
+++ b/apps/hub/src/mailbox-persist.ts
@@ -32,9 +32,7 @@ const logger = getLogger(["hub", "mailbox-persist"]);
  * type from the one place it is public rather than re-declaring its shape
  * by hand and drifting from the package's own definition.
  */
-type ResolveMailboxRefs = NonNullable<
-  CreateMailboxPersistOpts<unknown>["resolveRefs"]
->;
+type ResolveMailboxRefs = NonNullable<CreateMailboxPersistOpts<unknown>["resolveRefs"]>;
 
 /**
  * Resolve a `mail.outbound` frame's sender run address to the mailbox
@@ -78,9 +76,7 @@ type ResolveMailboxRefs = NonNullable<
  * constructed until after `lookups` is, so this only reads `.current`
  * inside the returned closure, never at wiring time.
  */
-export function createHubPersistMailWithSessionEnsure<
-  R extends readonly unknown[],
->(
+export function createHubPersistMailWithSessionEnsure<R extends readonly unknown[]>(
   db: DB["db"],
   eventCollectorsRef: { current?: Pick<EventCollectorPort, "create" | "has"> },
   upstream: (args: MailboxPersistArgs) => Promise<R>,
@@ -107,10 +103,10 @@ export function createHubPersistMailWithSessionEnsure<
     // record for this frame; skip the vendored delegate rather than let it
     // throw "no session for address" past the caller.
     if (sender !== undefined && sender.sessionId === null) {
-      logger.debug(
-        "skipping vendored persistMail for run {runId}: no session yet",
-        { runId: sender.id, senderAddress: args.senderAddress },
-      );
+      logger.debug("skipping vendored persistMail for run {runId}: no session yet", {
+        runId: sender.id,
+        senderAddress: args.senderAddress,
+      });
       // No `session_mail` rows were written for this frame: an empty
       // result, not a thrown error, so a caller iterating this like
       // `handleMailPersist` does simply emits no `mail.persisted` events.
@@ -120,9 +116,7 @@ export function createHubPersistMailWithSessionEnsure<
   };
 }
 
-export function createHubMailboxAuthorizeSender(
-  db: DB["db"],
-): AuthorizeMailboxSender {
+export function createHubMailboxAuthorizeSender(db: DB["db"]): AuthorizeMailboxSender {
   return async (senderAddress) => {
     const sender = await resolveRoutableAddress(db, senderAddress);
     if (sender === undefined) return null;
@@ -146,9 +140,7 @@ export function createHubMailboxAuthorizeSender(
  * under. There is no second id to chase and no header or participant scan
  * to disambiguate: an agent run is launched in the workbench it serves.
  */
-export const hubMailboxResolveRefs: ResolveMailboxRefs = ({
-  senderAuthorization,
-}) => {
+export const hubMailboxResolveRefs: ResolveMailboxRefs = ({ senderAuthorization }) => {
   const ref: MailboxRef = {
     kind: "workbench",
     id: senderAuthorization.tenantId,
diff --git a/apps/hub/src/mcp-credential-bindings.ts b/apps/hub/src/mcp-credential-bindings.ts
index 57bf582f97..6f7c07c708 100644
--- a/apps/hub/src/mcp-credential-bindings.ts
+++ b/apps/hub/src/mcp-credential-bindings.ts
@@ -17,15 +17,11 @@ import type { DB } from "@intx/db";
 import type { CredentialBinding } from "@intx/types";
 import { listMcpServerConnections } from "@corbits/connections";
 
-export type McpCredentialBindingsFor = (
-  tenantId: string,
-) => Promise<readonly CredentialBinding[]>;
+export type McpCredentialBindingsFor = (tenantId: string) => Promise<readonly CredentialBinding[]>;
 
 const MCP_TOOLS_PACKAGE = "@corbits/mcp-tools";
 
-export function createMcpCredentialBindingsFor(
-  db: DB["db"],
-): McpCredentialBindingsFor {
+export function createMcpCredentialBindingsFor(db: DB["db"]): McpCredentialBindingsFor {
   return async (tenantId: string) => {
     const connections = await listMcpServerConnections(db, tenantId);
     return connections.map((connection): CredentialBinding => ({
diff --git a/apps/hub/src/native-connector-registry.ts b/apps/hub/src/native-connector-registry.ts
index 54a6897b1a..d499a39f31 100644
--- a/apps/hub/src/native-connector-registry.ts
+++ b/apps/hub/src/native-connector-registry.ts
@@ -54,9 +54,10 @@ function chatgptAccountIdFromIdToken(idToken: string): string | undefined {
   let claims: Record<string, unknown>;
   try {
     const base64 = payload.replaceAll("-", "+").replaceAll("_", "/");
-    claims = JSON.parse(
-      atob(base64.padEnd(Math.ceil(base64.length / 4) * 4, "=")),
-    ) as Record<string, unknown>;
+    claims = JSON.parse(atob(base64.padEnd(Math.ceil(base64.length / 4) * 4, "="))) as Record<
+      string,
+      unknown
+    >;
   } catch {
     // report-error-ignore: a malformed id_token payload degrades to "no
     // account id" — the account id is a label, never a gate, so there is
@@ -67,11 +68,7 @@ function chatgptAccountIdFromIdToken(idToken: string): string | undefined {
     return claims.chatgpt_account_id;
   }
   const auth: unknown = claims["https://api.openai.com/auth"];
-  if (
-    typeof auth === "object" &&
-    auth !== null &&
-    "chatgpt_account_id" in auth
-  ) {
+  if (typeof auth === "object" && auth !== null && "chatgpt_account_id" in auth) {
     const nested = auth.chatgpt_account_id;
     if (typeof nested === "string") return nested;
   }
@@ -121,10 +118,7 @@ import {
   XAI_SCOPES,
   XAI_TOKEN_URL,
 } from "@corbits/xai-provider/constants";
-import {
-  exchangeCodeForKey,
-  OPENROUTER_AUTH_URL,
-} from "@corbits/connections/openrouter-connect";
+import { exchangeCodeForKey, OPENROUTER_AUTH_URL } from "@corbits/connections/openrouter-connect";
 import {
   exchangeCodeForGithubToken,
   GITHUB_AUTHORIZE_URL,
@@ -138,22 +132,21 @@ import {
   testScrapeCreatorsCredential,
 } from "@corbits/connections/probes";
 
-const INFERENCE_PROVIDER_DOCS_URL: Record<SupportedCredentialProvider, string> =
-  {
-    anthropic: "https://console.anthropic.com/settings/keys",
-    openai: "https://platform.openai.com/api-keys",
-    "google-genai": "https://aistudio.google.com/apikey",
-    xai: "https://console.x.ai",
-    "xai-oauth": "https://x.ai",
-    codex: "https://developers.openai.com/codex",
-    "opencode-zen": "https://opencode.ai/zen",
-    groq: "https://console.groq.com/keys",
-    deepseek: "https://platform.deepseek.com/api_keys",
-    mistral: "https://console.mistral.ai/api-keys",
-    openrouter: "https://openrouter.ai",
-    huggingface: "https://huggingface.co/settings/tokens",
-    ollama: "https://ollama.com",
-  };
+const INFERENCE_PROVIDER_DOCS_URL: Record<SupportedCredentialProvider, string> = {
+  anthropic: "https://console.anthropic.com/settings/keys",
+  openai: "https://platform.openai.com/api-keys",
+  "google-genai": "https://aistudio.google.com/apikey",
+  xai: "https://console.x.ai",
+  "xai-oauth": "https://x.ai",
+  codex: "https://developers.openai.com/codex",
+  "opencode-zen": "https://opencode.ai/zen",
+  groq: "https://console.groq.com/keys",
+  deepseek: "https://platform.deepseek.com/api_keys",
+  mistral: "https://console.mistral.ai/api-keys",
+  openrouter: "https://openrouter.ai",
+  huggingface: "https://huggingface.co/settings/tokens",
+  ollama: "https://ollama.com",
+};
 
 // Ollama's onboarding URL field default — the local-machine origin
 // Ollama listens on out of the box, before anyone points it at a
@@ -171,10 +164,7 @@ const EXA_ICON = {
 // four fall through to the monochrome initial tile every iconless
 // descriptor already gets.
 const INFERENCE_PROVIDER_ICONS: Partial<
-  Record<
-    SupportedCredentialProvider,
-    { readonly path: string; readonly hex: string }
-  >
+  Record<SupportedCredentialProvider, { readonly path: string; readonly hex: string }>
 > = {
   anthropic: { path: siAnthropic.path, hex: siAnthropic.hex },
   "google-genai": { path: siGooglegemini.path, hex: siGooglegemini.hex },
@@ -222,8 +212,7 @@ function inferenceProviderDescriptors(): Record<string, ConnectorDescriptor> {
             credentialPlugin: "http",
             docsUrl: INFERENCE_PROVIDER_DOCS_URL[providerId],
             feedsTools: [],
-            probe: (apiKey) =>
-              testProviderCredential({ provider: providerId, apiKey }),
+            probe: (apiKey) => testProviderCredential({ provider: providerId, apiKey }),
             ...(icon !== undefined ? { icon } : {}),
           };
   }
@@ -349,9 +338,7 @@ function inferenceProviderDescriptors(): Record<string, ConnectorDescriptor> {
           url.searchParams.set("code_challenge", codeChallenge);
         }
         url.searchParams.set("code_challenge_method", "S256");
-        for (const [name, value] of Object.entries(
-          CODEX_AUTHORIZE_EXTRA_PARAMS,
-        )) {
+        for (const [name, value] of Object.entries(CODEX_AUTHORIZE_EXTRA_PARAMS)) {
           url.searchParams.set(name, value);
         }
         return url;
@@ -397,9 +384,7 @@ function inferenceProviderDescriptors(): Record<string, ConnectorDescriptor> {
               : {}),
             ...(typeof tokens.expires_in === "number"
               ? {
-                  expiresAt: new Date(
-                    Date.now() + tokens.expires_in * 1000,
-                  ).toISOString(),
+                  expiresAt: new Date(Date.now() + tokens.expires_in * 1000).toISOString(),
                 }
               : {}),
             ...(accountId !== undefined ? { accountId } : {}),
@@ -477,9 +462,7 @@ function inferenceProviderDescriptors(): Record<string, ConnectorDescriptor> {
               : {}),
             ...(typeof tokens.expires_in === "number"
               ? {
-                  expiresAt: new Date(
-                    Date.now() + tokens.expires_in * 1000,
-                  ).toISOString(),
+                  expiresAt: new Date(Date.now() + tokens.expires_in * 1000).toISOString(),
                 }
               : {}),
           };
@@ -517,8 +500,7 @@ export const CONNECTOR_REGISTRY: ConnectorRegistry = createConnectorRegistry({
     docsUrl: "https://open.manus.ai/docs/v2/introduction",
     feedsTools: ["@corbits/manus-tools"],
     probe: (apiKey) => testManusCredential(apiKey),
-    description:
-      "Have Manus run tasks and produce files — including slide decks.",
+    description: "Have Manus run tasks and produce files — including slide decks.",
   },
   exa: {
     id: "exa",
@@ -598,13 +580,7 @@ export const CONNECTOR_REGISTRY: ConnectorRegistry = createConnectorRegistry({
         }
         return url;
       },
-      exchange: async ({
-        code,
-        codeVerifier,
-        redirectUri,
-        clientId,
-        clientSecret,
-      }) => {
+      exchange: async ({ code, codeVerifier, redirectUri, clientId, clientSecret }) => {
         if (clientId === undefined || clientSecret === undefined) {
           return {
             ok: false,
@@ -639,8 +615,7 @@ export const CONNECTOR_REGISTRY: ConnectorRegistry = createConnectorRegistry({
     authKind: "api-key",
     docsUrl: "https://github.com/settings/tokens",
     feedsTools: ["@corbits/github-tools"],
-    probe: (apiKey, opts) =>
-      testGitHubCredential(apiKey, undefined, opts?.baseUrl),
+    probe: (apiKey, opts) => testGitHubCredential(apiKey, undefined, opts?.baseUrl),
     description: "Read repos, issues, and pull requests.",
     icon: { path: siGithub.path, hex: siGithub.hex },
     oauth: {
@@ -834,5 +809,4 @@ export const MCP_PRESETS: readonly McpPreset[] = [
   },
 ];
 
-export const MCP_PRESET_CONNECTOR_IDS: readonly string[] =
-  mcpPresetConnectorIds(MCP_PRESETS);
+export const MCP_PRESET_CONNECTOR_IDS: readonly string[] = mcpPresetConnectorIds(MCP_PRESETS);
diff --git a/apps/hub/src/native-workflow-routine-launch.test.ts b/apps/hub/src/native-workflow-routine-launch.test.ts
index 185807ec4e..41f4287184 100644
--- a/apps/hub/src/native-workflow-routine-launch.test.ts
+++ b/apps/hub/src/native-workflow-routine-launch.test.ts
@@ -80,9 +80,7 @@ describe("triggerNativeWorkflowRoutineRun", () => {
       address: "wfr_anchor1@acme.hub.test",
     });
     expect(routeMailCalls).toHaveLength(1);
-    const [call] = routeMailCalls as [
-      { address: string; base64: string; messageId: string },
-    ];
+    const [call] = routeMailCalls as [{ address: string; base64: string; messageId: string }];
     expect(call.address).toBe("wfr_anchor1@acme.hub.test");
     expect(typeof call.base64).toBe("string");
     expect(call.base64.length).toBeGreaterThan(0);
diff --git a/apps/hub/src/native-workflow-routine-launch.ts b/apps/hub/src/native-workflow-routine-launch.ts
index dd55f27b48..c332372f1d 100644
--- a/apps/hub/src/native-workflow-routine-launch.ts
+++ b/apps/hub/src/native-workflow-routine-launch.ts
@@ -66,9 +66,7 @@ export class NativeWorkflowDeploymentMissingError extends Error {
       "This workflow has multiple steps and must be deployed " +
       "(POST /workflows/deployments) before a routine can launch it — " +
       "deploy it once, then run this routine again.";
-    super(
-      `definition ${definitionId} has no live native deployment (${guidance})`,
-    );
+    super(`definition ${definitionId} has no live native deployment (${guidance})`);
     this.name = "NativeWorkflowDeploymentMissingError";
     this.definitionId = definitionId;
     this.guidance = guidance;
@@ -132,11 +130,7 @@ export async function triggerNativeWorkflowRoutineRun(
     .orderBy(desc(workflowRun.createdAt))
     .limit(1);
 
-  if (
-    anchor === undefined ||
-    anchor.address === null ||
-    !isLiveWorkflowRunStatus(anchor.status)
-  ) {
+  if (anchor === undefined || anchor.address === null || !isLiveWorkflowRunStatus(anchor.status)) {
     throw new NativeWorkflowDeploymentMissingError(params.definitionId);
   }
   const address = anchor.address;
@@ -168,10 +162,7 @@ export async function triggerNativeWorkflowRoutineRun(
     kind: "conversation",
     text: params.content,
   });
-  const signature = await createDetachedSignatureFromProvider(
-    signedContent,
-    crypto,
-  );
+  const signature = await createDetachedSignatureFromProvider(signedContent, crypto);
   const rawMessage = assembleMessage(headers, signedContent, signature);
   const base64 = base64Encode(rawMessage);
 
diff --git a/apps/hub/src/notify-delivery.ts b/apps/hub/src/notify-delivery.ts
index 663f13bf0a..93f1778987 100644
--- a/apps/hub/src/notify-delivery.ts
+++ b/apps/hub/src/notify-delivery.ts
@@ -3,10 +3,7 @@
 // same adapter the inbox read-back repairs. Kept here instead of inline in
 // `index.ts` so the composed path is a single construction site the
 // crash-window suite can exercise directly.
-import {
-  createResolveExistingMailIds,
-  createWorkbenchMailboxDelivery,
-} from "@corbits/inbox";
+import { createResolveExistingMailIds, createWorkbenchMailboxDelivery } from "@corbits/inbox";
 import type { MailboxDb, MailboxEventBus } from "@corbits/mailbox";
 import {
   createInMemoryNotifyDispatchStore,
diff --git a/apps/hub/src/pinned-package-credential-bindings.ts b/apps/hub/src/pinned-package-credential-bindings.ts
index 0afe7bfeb3..e8eca5c645 100644
--- a/apps/hub/src/pinned-package-credential-bindings.ts
+++ b/apps/hub/src/pinned-package-credential-bindings.ts
@@ -20,10 +20,7 @@ export type PinnedPackageCredentialBindingsFor = (
   pins: readonly ToolPackagePin[],
 ) => Promise<readonly CredentialBinding[]>;
 
-export type IsConnectorConnected = (
-  tenantId: string,
-  connectorId: string,
-) => Promise<boolean>;
+export type IsConnectorConnected = (tenantId: string, connectorId: string) => Promise<boolean>;
 
 export function bindingsForConnectedPins(
   pins: readonly ToolPackagePin[],
diff --git a/apps/hub/src/routability-wiring.test.ts b/apps/hub/src/routability-wiring.test.ts
index 62439bdf60..7e04639e46 100644
--- a/apps/hub/src/routability-wiring.test.ts
+++ b/apps/hub/src/routability-wiring.test.ts
@@ -40,13 +40,9 @@ describe("hub sidecar routability wiring", () => {
     expect(assigned).not.toBeNull();
 
     // Exactly one definition: no second, diverging routability source.
-    const definitionCount = source.match(
-      /getRoutableAddresses\(\)\.includes\(/g,
-    );
+    const definitionCount = source.match(/getRoutableAddresses\(\)\.includes\(/g);
     expect(definitionCount).toHaveLength(1);
 
-    expect(firstCall(source, "launchWebhookTrigger")).toContain(
-      "isRoutable: isSidecarRoutable",
-    );
+    expect(firstCall(source, "launchWebhookTrigger")).toContain("isRoutable: isSidecarRoutable");
   });
 });
diff --git a/apps/hub/src/shutdown.test.ts b/apps/hub/src/shutdown.test.ts
index 4f6640e323..3e0e8b7837 100644
--- a/apps/hub/src/shutdown.test.ts
+++ b/apps/hub/src/shutdown.test.ts
@@ -7,10 +7,7 @@ test("drainWithTimeout resolves drained when the drain completes inside the boun
 });
 
 test("drainWithTimeout resolves timed-out when the drain outlives the bound", async () => {
-  const outcome = await drainWithTimeout(
-    () => new Promise<void>(() => undefined),
-    10,
-  );
+  const outcome = await drainWithTimeout(() => new Promise<void>(() => undefined), 10);
   expect(outcome).toEqual({ kind: "timed-out" });
 });
 
diff --git a/apps/hub/src/sign-in-rate-limit.ts b/apps/hub/src/sign-in-rate-limit.ts
index deee304c9d..36d2713e00 100644
--- a/apps/hub/src/sign-in-rate-limit.ts
+++ b/apps/hub/src/sign-in-rate-limit.ts
@@ -121,9 +121,7 @@ export function createSignInAttemptLimiter(
       if (bucket.count >= max) {
         return {
           allowed: false,
-          retryAfterSeconds: Math.ceil(
-            (bucket.windowStart + windowMs - now) / 1000,
-          ),
+          retryAfterSeconds: Math.ceil((bucket.windowStart + windowMs - now) / 1000),
         };
       }
       bucket.count += 1;
diff --git a/apps/hub/src/tool-grants.test.ts b/apps/hub/src/tool-grants.test.ts
index 15783b76cc..f184e9abba 100644
--- a/apps/hub/src/tool-grants.test.ts
+++ b/apps/hub/src/tool-grants.test.ts
@@ -5,15 +5,8 @@
 // than any source import.
 import { describe, expect, test } from "bun:test";
 import type { AssetWithOrigin } from "@intx/db";
-import type {
-  AssetService,
-  ListAssetBlobsParams,
-  ReadAssetBlobParams,
-} from "@intx/hub-sessions";
-import {
-  packToolPackageTarball,
-  tarballFilenameFor,
-} from "@corbits/tool-registry-publish";
+import type { AssetService, ListAssetBlobsParams, ReadAssetBlobParams } from "@intx/hub-sessions";
+import { packToolPackageTarball, tarballFilenameFor } from "@corbits/tool-registry-publish";
 import { createToolGrantsForPins } from "./tool-grants";
 
 async function fakeRegistryAssetService(
@@ -27,9 +20,7 @@ async function fakeRegistryAssetService(
   );
   return {
     listAssetBlobs: (params: ListAssetBlobsParams) =>
-      Promise.resolve(
-        [...blobs.keys()].filter((path) => path.startsWith(`${params.dir}/`)),
-      ),
+      Promise.resolve([...blobs.keys()].filter((path) => path.startsWith(`${params.dir}/`))),
     readAssetBlob: (params: ReadAssetBlobParams) => {
       const bytes = blobs.get(params.path);
       if (bytes === undefined) {
@@ -48,12 +39,8 @@ function assetRow(id: string, direct: boolean): AssetWithOrigin {
   } as AssetWithOrigin;
 }
 
-const CAPABILITY_DIR = new URL(
-  "../../../packages/capability-tools",
-  import.meta.url,
-).pathname;
-const MANUS_DIR = new URL("../../../packages/manus-tools", import.meta.url)
-  .pathname;
+const CAPABILITY_DIR = new URL("../../../packages/capability-tools", import.meta.url).pathname;
+const MANUS_DIR = new URL("../../../packages/manus-tools", import.meta.url).pathname;
 
 async function grantsFor(
   assetService: Pick<AssetService, "listAssetBlobs" | "readAssetBlob">,
@@ -87,24 +74,15 @@ describe("createToolGrantsForPins", () => {
   });
 
   test('floors an unmarked tool at allow and a `approval: "ask"` tool at ask', async () => {
-    const assetService = await fakeRegistryAssetService([
-      await packToolPackageTarball(MANUS_DIR),
-    ]);
+    const assetService = await fakeRegistryAssetService([await packToolPackageTarball(MANUS_DIR)]);
     const grants = await grantsFor(
       assetService,
       [assetRow("asset_1", true)],
       [{ name: "@corbits/manus-tools", version: "*" }],
     );
-    expect(
-      grants.find((grant) => grant.resource.endsWith(":webhook_create"))
-        ?.effect,
-    ).toBe("ask");
-    expect(
-      grants.find((grant) => grant.resource.endsWith(":create_slides"))?.effect,
-    ).toBe("allow");
-    expect(
-      grants.find((grant) => grant.resource.endsWith(":task_list"))?.effect,
-    ).toBe("allow");
+    expect(grants.find((grant) => grant.resource.endsWith(":webhook_create"))?.effect).toBe("ask");
+    expect(grants.find((grant) => grant.resource.endsWith(":create_slides"))?.effect).toBe("allow");
+    expect(grants.find((grant) => grant.resource.endsWith(":task_list"))?.effect).toBe("allow");
   });
 
   test("unions grants across every pinned package and skips unknown pins", async () => {
@@ -121,15 +99,9 @@ describe("createToolGrantsForPins", () => {
         { name: "@corbits/unknown-tools", version: "^1" },
       ],
     );
-    expect(
-      grants.some((grant) => grant.resource.includes("capability-tools")),
-    ).toBe(true);
-    expect(grants.some((grant) => grant.resource.includes("manus-tools"))).toBe(
-      true,
-    );
-    expect(grants.some((grant) => grant.resource.includes("unknown"))).toBe(
-      false,
-    );
+    expect(grants.some((grant) => grant.resource.includes("capability-tools"))).toBe(true);
+    expect(grants.some((grant) => grant.resource.includes("manus-tools"))).toBe(true);
+    expect(grants.some((grant) => grant.resource.includes("unknown"))).toBe(false);
   });
 
   test("resolves an inherited registry, not only a direct one", async () => {
@@ -158,8 +130,6 @@ describe("createToolGrantsForPins", () => {
     const assetService = await fakeRegistryAssetService([
       await packToolPackageTarball(CAPABILITY_DIR),
     ]);
-    expect(
-      await grantsFor(assetService, [assetRow("asset_1", true)], []),
-    ).toEqual([]);
+    expect(await grantsFor(assetService, [assetRow("asset_1", true)], [])).toEqual([]);
   });
 });
diff --git a/apps/hub/src/tool-grants.ts b/apps/hub/src/tool-grants.ts
index c6ecb1cd81..b748413d71 100644
--- a/apps/hub/src/tool-grants.ts
+++ b/apps/hub/src/tool-grants.ts
@@ -41,27 +41,20 @@ export type CreateToolGrantsForPinsDeps = {
    * shadows-wins down the ancestor chain. The hub binds
    * `@intx/db`'s `listAssetsForTenant` to its own db handle.
    */
-  listAssets: (
-    tenantId: string,
-    kind: string,
-  ) => Promise<readonly AssetWithOrigin[]>;
+  listAssets: (tenantId: string, kind: string) => Promise<readonly AssetWithOrigin[]>;
   /** The launch-path asset service — the launch caches' SHA-keyed wrapper. */
   assetService: Pick<AssetService, "listAssetBlobs" | "readAssetBlob">;
 };
 
-export function createToolGrantsForPins(
-  deps: CreateToolGrantsForPinsDeps,
-): ToolGrantsForPins {
+export function createToolGrantsForPins(deps: CreateToolGrantsForPinsDeps): ToolGrantsForPins {
   return async (tenantId, pins) => {
     const assets = await deps.listAssets(tenantId, "package-registry");
     const registry = assets.find((row) => row.name === CORBITS_TOOLS_REGISTRY);
     if (registry === undefined) return [];
 
     const source: ToolSurfaceBlobSource = {
-      listBlobs: (dir) =>
-        deps.assetService.listAssetBlobs({ assetId: registry.id, dir }),
-      readBlob: (path) =>
-        deps.assetService.readAssetBlob({ assetId: registry.id, path }),
+      listBlobs: (dir) => deps.assetService.listAssetBlobs({ assetId: registry.id, dir }),
+      readBlob: (path) => deps.assetService.readAssetBlob({ assetId: registry.id, path }),
       rootDir: "tarballs",
     };
     const manifests = await readToolSurfaceManifests(source);
diff --git a/apps/hub/src/turn-part-content-default.ts b/apps/hub/src/turn-part-content-default.ts
index 537e325cc3..5bef653983 100644
--- a/apps/hub/src/turn-part-content-default.ts
+++ b/apps/hub/src/turn-part-content-default.ts
@@ -28,9 +28,7 @@ export function withTurnPartWriteDefaults(db: DB["db"]): DB["db"] {
       if (prop !== "insert") {
         return Reflect.get(target, prop, receiver);
       }
-      const insert = Reflect.get(target, prop, target) as (
-        table: unknown,
-      ) => InsertBuilder;
+      const insert = Reflect.get(target, prop, target) as (table: unknown) => InsertBuilder;
       return (table: unknown) => {
         const builder = insert.call(target, table);
         if (table !== turnPart) {
@@ -42,11 +40,7 @@ export function withTurnPartWriteDefaults(db: DB["db"]): DB["db"] {
         const originalValues = builder.values.bind(builder);
         return {
           values: (values: unknown) =>
-            originalValues(
-              Array.isArray(values)
-                ? values.map(fillContent)
-                : fillContent(values),
-            ),
+            originalValues(Array.isArray(values) ? values.map(fillContent) : fillContent(values)),
         };
       };
     },
diff --git a/apps/hub/src/turn-text-snapshot.ts b/apps/hub/src/turn-text-snapshot.ts
index 0494ed1ba4..c3543f3110 100644
--- a/apps/hub/src/turn-text-snapshot.ts
+++ b/apps/hub/src/turn-text-snapshot.ts
@@ -18,10 +18,7 @@ export interface TurnTextSnapshotReader {
    * client reattaching mid-turn replays before the live tail resumes.
    * `null` for a run with no turns yet (nothing to reconstruct), never for
    * one that simply hasn't produced text yet (that reads as `""`). */
-  read(input: {
-    readonly tenantId: string;
-    readonly runId: string;
-  }): Promise<string | null>;
+  read(input: { readonly tenantId: string; readonly runId: string }): Promise<string | null>;
 }
 
 /** Pure so the reconstruction rule is testable without a database: text
@@ -57,16 +54,11 @@ export function snapshotTextFromParts(
   return text;
 }
 
-export function createDrizzleTurnTextSnapshotReader(
-  db: DB["db"],
-): TurnTextSnapshotReader {
+export function createDrizzleTurnTextSnapshotReader(db: DB["db"]): TurnTextSnapshotReader {
   return {
     async read({ tenantId, runId }) {
       const turns = await db.query.inferenceTurn.findMany({
-        where: and(
-          eq(inferenceTurn.runId, runId),
-          eq(inferenceTurn.tenantId, tenantId),
-        ),
+        where: and(eq(inferenceTurn.runId, runId), eq(inferenceTurn.tenantId, tenantId)),
         orderBy: asc(inferenceTurn.startedAt),
       });
       if (turns.length === 0) return null;
diff --git a/apps/hub/src/workflow-run-tenant-auth.ts b/apps/hub/src/workflow-run-tenant-auth.ts
index e9fd82bc63..ca881faaad 100644
--- a/apps/hub/src/workflow-run-tenant-auth.ts
+++ b/apps/hub/src/workflow-run-tenant-auth.ts
@@ -57,10 +57,7 @@ export type CreateWorkflowRunAuthenticatorDeps = {
 };
 
 export type ConcreteWorkflowRunAuthenticator = {
-  resolve(
-    token: string,
-    runAddress: string,
-  ): Promise<ResolvedWorkflowRunScope | null>;
+  resolve(token: string, runAddress: string): Promise<ResolvedWorkflowRunScope | null>;
 };
 
 export function createWorkflowRunAuthenticator(
diff --git a/apps/hub/test/boot-does-not-seed.test.ts b/apps/hub/test/boot-does-not-seed.test.ts
index bd909409ae..fc908f0b90 100644
--- a/apps/hub/test/boot-does-not-seed.test.ts
+++ b/apps/hub/test/boot-does-not-seed.test.ts
@@ -7,13 +7,7 @@
 // DB-gated: boots against its own scratch database so a reachable
 // DATABASE_URL is required and the suite skips without one.
 import { afterAll, expect, test } from "bun:test";
-import {
-  mkdirSync,
-  mkdtempSync,
-  readFileSync,
-  rmSync,
-  writeFileSync,
-} from "node:fs";
+import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import path from "node:path";
 import postgres from "postgres";
@@ -78,9 +72,7 @@ async function withScratchDatabase(
       onnotice: () => undefined,
     });
     try {
-      await cleanup.unsafe(
-        `DROP DATABASE IF EXISTS "${scratchDatabase}" WITH (FORCE)`,
-      );
+      await cleanup.unsafe(`DROP DATABASE IF EXISTS "${scratchDatabase}" WITH (FORCE)`);
     } finally {
       await cleanup.end();
     }
@@ -95,9 +87,7 @@ async function countTenants(url: string): Promise<number> {
     `;
     const count = rows[0]?.count;
     if (typeof count !== "number") {
-      throw new Error(
-        `tenant count: expected a number, got ${JSON.stringify(rows)}`,
-      );
+      throw new Error(`tenant count: expected a number, got ${JSON.stringify(rows)}`);
     }
     return count;
   } finally {
@@ -106,10 +96,7 @@ async function countTenants(url: string): Promise<number> {
 }
 
 test("process boot source does not mention the deleted boot seeder", () => {
-  const indexSource = readFileSync(
-    path.join(import.meta.dir, "../src/index.ts"),
-    "utf8",
-  );
+  const indexSource = readFileSync(path.join(import.meta.dir, "../src/index.ts"), "utf8");
   expect(indexSource).not.toContain("runSystem" + "Seed");
   expect(indexSource).not.toContain("system" + "-seed");
   expect(indexSource).not.toContain("ensureDefault" + "Tenant");
@@ -125,9 +112,7 @@ describeIfDb("hub process boot does not mint a root tenant", () => {
         startHub({
           databaseUrl: url,
           port: freePort(),
-          sessionSecret: Buffer.from(
-            crypto.getRandomValues(new Uint8Array(32)),
-          ).toString("hex"),
+          sessionSecret: Buffer.from(crypto.getRandomValues(new Uint8Array(32))).toString("hex"),
           dataDir,
         }),
       );
@@ -142,13 +127,11 @@ describeIfDb("hub process boot does not mint a root tenant", () => {
 
       expect(await countTenants(url)).toBe(0);
 
-      const signIn = await hop(
-        "sign-in as the former boot admin is not 200",
-        async () =>
-          api(hub.baseUrl, "POST", "/api/auth/sign-in/email", {
-            email: ALICE.email,
-            password: ALICE.password,
-          }),
+      const signIn = await hop("sign-in as the former boot admin is not 200", async () =>
+        api(hub.baseUrl, "POST", "/api/auth/sign-in/email", {
+          email: ALICE.email,
+          password: ALICE.password,
+        }),
       );
       expect(signIn.status).not.toBe(200);
     });
@@ -287,9 +270,7 @@ describeIfDb("boot with provider env vars plants nothing (CL-7579)", () => {
         startHub({
           databaseUrl: url,
           port: freePort(),
-          sessionSecret: Buffer.from(
-            crypto.getRandomValues(new Uint8Array(32)),
-          ).toString("hex"),
+          sessionSecret: Buffer.from(crypto.getRandomValues(new Uint8Array(32))).toString("hex"),
           dataDir: await tempDir("hub-boot-env-plant-genesis-"),
         }),
       );
@@ -300,18 +281,14 @@ describeIfDb("boot with provider env vars plants nothing (CL-7579)", () => {
       // Ollama whose probe would have succeeded.
       const ollama = fakeOllama();
       try {
-        const hub = await hop(
-          "hub process boot with OLLAMA_BASE_URL",
-          async () =>
-            startHub({
-              databaseUrl: url,
-              port: freePort(),
-              sessionSecret: Buffer.from(
-                crypto.getRandomValues(new Uint8Array(32)),
-              ).toString("hex"),
-              dataDir: await tempDir("hub-boot-env-plant-"),
-              extraEnv: { OLLAMA_BASE_URL: ollama.url },
-            }),
+        const hub = await hop("hub process boot with OLLAMA_BASE_URL", async () =>
+          startHub({
+            databaseUrl: url,
+            port: freePort(),
+            sessionSecret: Buffer.from(crypto.getRandomValues(new Uint8Array(32))).toString("hex"),
+            dataDir: await tempDir("hub-boot-env-plant-"),
+            extraEnv: { OLLAMA_BASE_URL: ollama.url },
+          }),
         );
         track(hub);
         await expectZeroRowsFor(url, 15_000);
diff --git a/apps/hub/test/chat-mount.test.ts b/apps/hub/test/chat-mount.test.ts
index cd35576662..706391defe 100644
--- a/apps/hub/test/chat-mount.test.ts
+++ b/apps/hub/test/chat-mount.test.ts
@@ -50,12 +50,9 @@ describeIfDb("chat mount", () => {
     const hub = await createHub(config);
     closers.push(hub.close);
 
-    const gated = await hub.app.request(
-      "/api/tenants/some-tenant/chat/workbenches",
-      {
-        method: "GET",
-      },
-    );
+    const gated = await hub.app.request("/api/tenants/some-tenant/chat/workbenches", {
+      method: "GET",
+    });
     expect(gated.status).toBe(401);
     expect(await gated.json()).toEqual({
       error: { code: "unauthorized", message: "Authentication required" },
diff --git a/apps/hub/test/composition.test.ts b/apps/hub/test/composition.test.ts
index 31dc6540c3..7c3484ec22 100644
--- a/apps/hub/test/composition.test.ts
+++ b/apps/hub/test/composition.test.ts
@@ -90,19 +90,14 @@ describeIfDb("shutdown", () => {
     // index.ts schedules its reconciliation loop with setTimeout(fn,
     // 1000) — the one 1000ms setTimeout call site in the module — so
     // this is the pending timer close() must cancel.
-    const reconciliationCallIndex = setTimeoutSpy.mock.calls.findIndex(
-      (call) => call[1] === 1000,
-    );
+    const reconciliationCallIndex = setTimeoutSpy.mock.calls.findIndex((call) => call[1] === 1000);
     expect(reconciliationCallIndex).toBeGreaterThanOrEqual(0);
-    const reconciliationTimerId = setTimeoutSpy.mock.results[
-      reconciliationCallIndex
-    ]?.value as ReturnType<typeof setTimeout>;
+    const reconciliationTimerId = setTimeoutSpy.mock.results[reconciliationCallIndex]
+      ?.value as ReturnType<typeof setTimeout>;
 
     await hub.close();
 
-    expect(clearTimeoutSpy.mock.calls.map((call) => call[0])).toContain(
-      reconciliationTimerId,
-    );
+    expect(clearTimeoutSpy.mock.calls.map((call) => call[0])).toContain(reconciliationTimerId);
 
     setTimeoutSpy.mockRestore();
     clearTimeoutSpy.mockRestore();
@@ -115,9 +110,7 @@ describeIfDb("extension mounting", () => {
 
     // Anonymous request to an extension route: the platform's tenant
     // middleware answers 401 before the extension's handler runs.
-    const gated = await hub.app.request(
-      "/api/tenants/some-tenant/chat/workbenches",
-    );
+    const gated = await hub.app.request("/api/tenants/some-tenant/chat/workbenches");
     expect(gated.status).toBe(401);
     expect(await gated.json()).toEqual({
       error: { code: "unauthorized", message: "Authentication required" },
@@ -176,11 +169,7 @@ describeIfDb(
       // Same targeted account, a distinct forged source IP every attempt.
       await signInAttempt(hub, "victim@example.com", "203.0.113.10");
       await signInAttempt(hub, "victim@example.com", "203.0.113.20");
-      const throttled = await signInAttempt(
-        hub,
-        "victim@example.com",
-        "203.0.113.30",
-      );
+      const throttled = await signInAttempt(hub, "victim@example.com", "203.0.113.30");
 
       expect(throttled.status).toBe(429);
     });
@@ -194,19 +183,11 @@ describeIfDb(
 
       // Exhausts alice's budget (max: 1), from the same source IP.
       await signInAttempt(hub, "alice@example.com", "203.0.113.40");
-      const throttledAlice = await signInAttempt(
-        hub,
-        "alice@example.com",
-        "203.0.113.40",
-      );
+      const throttledAlice = await signInAttempt(hub, "alice@example.com", "203.0.113.40");
       expect(throttledAlice.status).toBe(429);
 
       // bob's very first attempt is untouched by alice's exhausted budget.
-      const freshBob = await signInAttempt(
-        hub,
-        "bob@example.com",
-        "203.0.113.40",
-      );
+      const freshBob = await signInAttempt(hub, "bob@example.com", "203.0.113.40");
       expect(freshBob.status).not.toBe(429);
     });
 
@@ -218,11 +199,7 @@ describeIfDb(
       closers.push(hub.close);
 
       await signInAttempt(hub, "throttle-me@example.com", "203.0.113.50");
-      const throttled = await signInAttempt(
-        hub,
-        "throttle-me@example.com",
-        "203.0.113.60",
-      );
+      const throttled = await signInAttempt(hub, "throttle-me@example.com", "203.0.113.60");
 
       expect(throttled.status).toBe(429);
       expect(throttled.headers.get("retry-after")).not.toBeNull();
@@ -251,22 +228,13 @@ describeIfDb(
       // The account owner's correct password still succeeds: only
       // failures ever consume budget, so a correct attempt is never
       // gated on how many wrong guesses came before it.
-      const genuineSignIn = await signInAttempt(
-        hub,
-        email,
-        "203.0.113.73",
-        password,
-      );
+      const genuineSignIn = await signInAttempt(hub, email, "203.0.113.73", password);
       expect(genuineSignIn.status).toBe(200);
 
       // That success cleared the bucket: the very next wrong guess is a
       // fresh first failure, not an immediate 429 carried over from the
       // attacker's earlier attempts.
-      const freshFailureAfterSuccess = await signInAttempt(
-        hub,
-        email,
-        "203.0.113.74",
-      );
+      const freshFailureAfterSuccess = await signInAttempt(hub, email, "203.0.113.74");
       expect(freshFailureAfterSuccess.status).not.toBe(429);
     });
 
@@ -290,11 +258,7 @@ describeIfDb(
 
       // A real account's first attempt is untouched by the malformed
       // traffic above.
-      const fresh = await signInAttempt(
-        hub,
-        "never-touched@example.com",
-        "203.0.113.90",
-      );
+      const fresh = await signInAttempt(hub, "never-touched@example.com", "203.0.113.90");
       expect(fresh.status).not.toBe(429);
     });
   },
diff --git a/apps/hub/test/config.test.ts b/apps/hub/test/config.test.ts
index 6702da958a..228a7789fa 100644
--- a/apps/hub/test/config.test.ts
+++ b/apps/hub/test/config.test.ts
@@ -98,10 +98,7 @@ describe("readHubConfig", () => {
         GITHUB_CLIENT_ID: "github-id",
         GITHUB_CLIENT_SECRET: "github-secret",
       });
-      expect(Object.keys(config.socialProviders).sort()).toEqual([
-        "github",
-        "google",
-      ]);
+      expect(Object.keys(config.socialProviders).sort()).toEqual(["github", "google"]);
     });
 
     test("a client id with no secret fails loudly at boot", () => {
@@ -199,9 +196,7 @@ describe("readHubConfig", () => {
   });
 
   test("PRINCIPAL_KEY_ENCRYPTION_KEY absent by default", () => {
-    expect(
-      readHubConfig(validEnv).principalKeyEncryptionKeyHex,
-    ).toBeUndefined();
+    expect(readHubConfig(validEnv).principalKeyEncryptionKeyHex).toBeUndefined();
   });
 
   test("PRINCIPAL_KEY_ENCRYPTION_KEY accepts a 64-char hex key", () => {
@@ -241,12 +236,10 @@ describe("readHubConfig", () => {
 
   test("HUB_ALLOW_GIT_INSIDE_WORK_TREE='1' or 'true' opts in", () => {
     expect(
-      readHubConfig({ ...validEnv, HUB_ALLOW_GIT_INSIDE_WORK_TREE: "1" })
-        .allowGitInsideWorkTree,
+      readHubConfig({ ...validEnv, HUB_ALLOW_GIT_INSIDE_WORK_TREE: "1" }).allowGitInsideWorkTree,
     ).toBe(true);
     expect(
-      readHubConfig({ ...validEnv, HUB_ALLOW_GIT_INSIDE_WORK_TREE: "true" })
-        .allowGitInsideWorkTree,
+      readHubConfig({ ...validEnv, HUB_ALLOW_GIT_INSIDE_WORK_TREE: "true" }).allowGitInsideWorkTree,
     ).toBe(true);
   });
 
@@ -259,13 +252,11 @@ describe("readHubConfig", () => {
   });
 
   test("ALLOW_PLAINTEXT_SECRETS='1' or 'true' opts in", () => {
+    expect(readHubConfig({ ...validEnv, ALLOW_PLAINTEXT_SECRETS: "1" }).allowPlaintextSecrets).toBe(
+      true,
+    );
     expect(
-      readHubConfig({ ...validEnv, ALLOW_PLAINTEXT_SECRETS: "1" })
-        .allowPlaintextSecrets,
-    ).toBe(true);
-    expect(
-      readHubConfig({ ...validEnv, ALLOW_PLAINTEXT_SECRETS: "true" })
-        .allowPlaintextSecrets,
+      readHubConfig({ ...validEnv, ALLOW_PLAINTEXT_SECRETS: "true" }).allowPlaintextSecrets,
     ).toBe(true);
   });
 
@@ -360,9 +351,7 @@ describe("readHubConfig", () => {
         SIDECAR_PROVISIONERS: "docker",
         DOCKER_PROVISIONER_IMAGE: "ghcr.io/corbits/sidecar:latest",
       });
-      expect(config.sidecarProvisioners.map((one) => one.id)).toEqual([
-        "docker",
-      ]);
+      expect(config.sidecarProvisioners.map((one) => one.id)).toEqual(["docker"]);
     });
 
     test("SIDECAR_PROVISIONERS=docker with an image is wired and becomes the default", () => {
@@ -440,12 +429,9 @@ describe("readHubConfig", () => {
     test("is read from HUB_SIDECAR_WEBSOCKET_URL when set", () => {
       const config = readHubConfig({
         ...validEnv,
-        HUB_SIDECAR_WEBSOCKET_URL:
-          "ws://sidecar-host.internal:3000/api/sidecars/ws",
+        HUB_SIDECAR_WEBSOCKET_URL: "ws://sidecar-host.internal:3000/api/sidecars/ws",
       });
-      expect(config.sidecarWebSocketUrl).toBe(
-        "ws://sidecar-host.internal:3000/api/sidecars/ws",
-      );
+      expect(config.sidecarWebSocketUrl).toBe("ws://sidecar-host.internal:3000/api/sidecars/ws");
     });
 
     test("rejects a value that is not a ws(s):// URL", () => {
diff --git a/apps/hub/test/credential-cipher.test.ts b/apps/hub/test/credential-cipher.test.ts
index 3e1f8dcf23..2c144f5365 100644
--- a/apps/hub/test/credential-cipher.test.ts
+++ b/apps/hub/test/credential-cipher.test.ts
@@ -27,9 +27,7 @@ const baseConfig: HubConfig = {
 
 describe("credentialCipherFrom", () => {
   test("no key and no dev opt-in hard-fails boot, naming the variable, what it protects, and how to generate a key", () => {
-    expect(() => credentialCipherFrom(baseConfig, log)).toThrow(
-      /CREDENTIAL_ENCRYPTION_KEY/,
-    );
+    expect(() => credentialCipherFrom(baseConfig, log)).toThrow(/CREDENTIAL_ENCRYPTION_KEY/);
     try {
       credentialCipherFrom(baseConfig, log);
       throw new Error("expected credentialCipherFrom to throw");
@@ -43,10 +41,7 @@ describe("credentialCipherFrom", () => {
   });
 
   test("no key with ALLOW_PLAINTEXT_SECRETS set warns and falls back to the noop cipher", async () => {
-    const cipher = credentialCipherFrom(
-      { ...baseConfig, allowPlaintextSecrets: true },
-      log,
-    );
+    const cipher = credentialCipherFrom({ ...baseConfig, allowPlaintextSecrets: true }, log);
     const encrypted = await cipher.encrypt("secret-value", "aad");
     expect(encrypted).toBe("secret-value");
   });
@@ -79,18 +74,13 @@ describe("hubCredentialCipher", () => {
   });
 
   test("boot tags the noop cipher when ALLOW_PLAINTEXT_SECRETS is set", async () => {
-    const cipher = hubCredentialCipher(
-      { ...baseConfig, allowPlaintextSecrets: true },
-      log,
-    );
+    const cipher = hubCredentialCipher({ ...baseConfig, allowPlaintextSecrets: true }, log);
     expect(cipher).toBe(tagCredentialCipher(cipher));
     const encrypted = await cipher.encrypt("secret-value", "aad");
     expect(encrypted).toBe("secret-value");
   });
 
   test("boot still hard-fails when the key is missing and plaintext is not opted in", () => {
-    expect(() => hubCredentialCipher(baseConfig, log)).toThrow(
-      /CREDENTIAL_ENCRYPTION_KEY/,
-    );
+    expect(() => hubCredentialCipher(baseConfig, log)).toThrow(/CREDENTIAL_ENCRYPTION_KEY/);
   });
 });
diff --git a/apps/hub/test/git-fixture.ts b/apps/hub/test/git-fixture.ts
index e12732e7c4..5bde502842 100644
--- a/apps/hub/test/git-fixture.ts
+++ b/apps/hub/test/git-fixture.ts
@@ -20,9 +20,7 @@ function findRepositoryRoot(): string {
       stderr: "pipe",
     });
     if (result.exitCode !== 0) {
-      throw new Error(
-        `git rev-parse --show-toplevel failed: ${result.stderr.toString()}`,
-      );
+      throw new Error(`git rev-parse --show-toplevel failed: ${result.stderr.toString()}`);
     }
     repositoryRoot = realpathSync(result.stdout.toString().trim());
   }
@@ -81,9 +79,7 @@ export function gitFixture(cwd: string, args: readonly string[]): void {
     },
   );
   if (result.exitCode !== 0) {
-    throw new Error(
-      `git ${args.join(" ")} failed: ${result.stderr.toString()}`,
-    );
+    throw new Error(`git ${args.join(" ")} failed: ${result.stderr.toString()}`);
   }
 }
 
diff --git a/apps/hub/test/mail-redelivery.test.ts b/apps/hub/test/mail-redelivery.test.ts
index 6ea3f2f429..0d2151f81e 100644
--- a/apps/hub/test/mail-redelivery.test.ts
+++ b/apps/hub/test/mail-redelivery.test.ts
@@ -12,9 +12,7 @@ function createFakeSidecarRouter(opts: {
   emit(event: { rawMessage: string; recipients: string[] }): void;
   routeMailCalls: { agentAddress: string; rawMessage: string }[];
 } {
-  const listeners = new Set<
-    (event: { rawMessage: string; recipients: string[] }) => void
-  >();
+  const listeners = new Set<(event: { rawMessage: string; recipients: string[] }) => void>();
   const routeMailCalls: { agentAddress: string; rawMessage: string }[] = [];
   return {
     routeMailCalls,
@@ -125,8 +123,9 @@ describe("wireMailRedelivery", () => {
     await flush();
 
     expect(chatPlatform.ensureAwakeCalls).toEqual(["ins_asleep@ten1.test"]);
-    expect(
-      sidecarRouter.routeMailCalls.map((c) => c.agentAddress).sort(),
-    ).toEqual(["ins_asleep@ten1.test", "ins_routable@ten1.test"]);
+    expect(sidecarRouter.routeMailCalls.map((c) => c.agentAddress).sort()).toEqual([
+      "ins_asleep@ten1.test",
+      "ins_routable@ten1.test",
+    ]);
   });
 });
diff --git a/apps/hub/test/mailbox-persist.test.ts b/apps/hub/test/mailbox-persist.test.ts
index 681489247b..624fa2374a 100644
--- a/apps/hub/test/mailbox-persist.test.ts
+++ b/apps/hub/test/mailbox-persist.test.ts
@@ -24,14 +24,8 @@ import {
   principalMail,
   type MailboxDb,
 } from "@corbits/mailbox";
-import {
-  createHubSessionLookups,
-  type AgentRepoStore,
-} from "@intx/hub-sessions";
-import {
-  createHubMailboxAuthorizeSender,
-  hubMailboxResolveRefs,
-} from "../src/mailbox-persist";
+import { createHubSessionLookups, type AgentRepoStore } from "@intx/hub-sessions";
+import { createHubMailboxAuthorizeSender, hubMailboxResolveRefs } from "../src/mailbox-persist";
 import { dbGate } from "../../../scripts/e2e/db-gate";
 
 const databaseUrl = process.env["DATABASE_URL"] ?? "";
@@ -73,9 +67,10 @@ async function setup(opts: { withSession?: boolean } = {}) {
 
   const { db, close: closeDb } = createDB(dbConfigFromUrl(databaseUrl));
   closers.push(closeDb);
-  const { db: mailboxDb, close: closeMailbox } = createMailboxDb(
-    databaseUrl,
-  ) as { db: MailboxDb; close: () => Promise<void> };
+  const { db: mailboxDb, close: closeMailbox } = createMailboxDb(databaseUrl) as {
+    db: MailboxDb;
+    close: () => Promise<void>;
+  };
   closers.push(closeMailbox);
 
   const domain = `${uid("mailbox-persist-wrap")}.test`;
@@ -189,10 +184,7 @@ describeIfDb("hub persistMail wrapped with createMailboxPersist", () => {
         .select({ refs: principalMail.refs })
         .from(principalMail)
         .where(
-          and(
-            eq(principalMail.tenantId, tenantId),
-            eq(principalMail.principalId, principalId),
-          ),
+          and(eq(principalMail.tenantId, tenantId), eq(principalMail.principalId, principalId)),
         );
       seenRefsByPrincipalId.set(principalId, row?.refs);
     }
@@ -222,11 +214,7 @@ describeIfDb("hub persistMail wrapped with createMailboxPersist", () => {
 
     const upstreamResult = await persistMail({
       senderAddress,
-      recipients: [
-        `usr_${human1Id}@${domain}`,
-        `usr_${human2Id}@${domain}`,
-        agentRecipientAddress,
-      ],
+      recipients: [`usr_${human1Id}@${domain}`, `usr_${human2Id}@${domain}`, agentRecipientAddress],
       raw,
     });
     // The bus fires synchronously inside `persistMail`, but each listener's
@@ -237,9 +225,7 @@ describeIfDb("hub persistMail wrapped with createMailboxPersist", () => {
     // The upstream `session_mail` write still ran, and is durable -- not
     // just present in the return value.
     expect(
-      upstreamResult.some(
-        (r) => r.direction === "outbound" && r.address === senderAddress,
-      ),
+      upstreamResult.some((r) => r.direction === "outbound" && r.address === senderAddress),
     ).toBe(true);
     const sessionMailRows = await db
       .select()
@@ -254,9 +240,7 @@ describeIfDb("hub persistMail wrapped with createMailboxPersist", () => {
       .from(principalMail)
       .where(eq(principalMail.tenantId, tenantId));
     expect(rows).toHaveLength(2);
-    expect(rows.map((r) => r.principalId).sort()).toEqual(
-      [human1Id, human2Id].sort(),
-    );
+    expect(rows.map((r) => r.principalId).sort()).toEqual([human1Id, human2Id].sort());
     for (const row of rows) {
       expect(row.refs).toEqual([{ kind: "workbench", id: tenantId }]);
     }
@@ -269,15 +253,9 @@ describeIfDb("hub persistMail wrapped with createMailboxPersist", () => {
   });
 
   test("dual-write independence: a sender run with no live session makes upstream throw, the mailbox rows still get written, and zero session_mail rows land", async () => {
-    const {
-      db,
-      mailboxDb,
-      baseLookups,
-      domain,
-      tenantId,
-      senderAddress,
-      human1Id,
-    } = await setup({ withSession: false });
+    const { db, mailboxDb, baseLookups, domain, tenantId, senderAddress, human1Id } = await setup({
+      withSession: false,
+    });
 
     const persistMail = createMailboxPersist(mailboxDb, {
       upstream: baseLookups.persistMail,
@@ -318,15 +296,7 @@ describeIfDb("hub persistMail wrapped with createMailboxPersist", () => {
   });
 
   test("redelivery of the same frame is deduped: a retried persist for the same message and recipient writes no second mailbox row", async () => {
-    const {
-      db,
-      mailboxDb,
-      baseLookups,
-      domain,
-      tenantId,
-      senderAddress,
-      human1Id,
-    } = await setup();
+    const { db, mailboxDb, baseLookups, domain, tenantId, senderAddress, human1Id } = await setup();
 
     const persistMail = createMailboxPersist(mailboxDb, {
       upstream: baseLookups.persistMail,
diff --git a/apps/hub/test/notify-delivery.test.ts b/apps/hub/test/notify-delivery.test.ts
index 35bcedf09f..3d51870a7b 100644
--- a/apps/hub/test/notify-delivery.test.ts
+++ b/apps/hub/test/notify-delivery.test.ts
@@ -10,11 +10,7 @@ import postgres from "postgres";
 
 import { createDB, schema } from "@intx/db";
 import { generateId } from "@intx/hub-common";
-import {
-  createInMemoryMailboxEventBus,
-  createMailboxDb,
-  listUserMailbox,
-} from "@corbits/mailbox";
+import { createInMemoryMailboxEventBus, createMailboxDb, listUserMailbox } from "@corbits/mailbox";
 import {
   deliverApprovalMail,
   type ApprovalNotification,
@@ -51,165 +47,153 @@ function dbConfigFromUrl(databaseUrl: string) {
 const databaseUrl = e2eDatabaseUrl();
 const describeIfDb = dbGate(databaseUrl, import.meta.path);
 
-describeIfDb(
-  "hub notify delivery repairs the CL-7238 crash window on redelivery",
-  () => {
-    const scratchUrl = scratchUrlFor(
-      databaseUrl ?? "postgres://localhost:5432/unused",
-    );
-    const scratchDatabase = new URL(scratchUrl).pathname.replace(/^\//, "");
-
-    const tenantId = generateId("tenant");
-    const principalId = generateId("principal");
-
-    beforeAll(async () => {
-      const maintenanceUrl = new URL(scratchUrl);
-      maintenanceUrl.pathname = "/postgres";
-      const maintenance = postgres(maintenanceUrl.toString(), {
-        max: 1,
-        onnotice: () => undefined,
+describeIfDb("hub notify delivery repairs the CL-7238 crash window on redelivery", () => {
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused");
+  const scratchDatabase = new URL(scratchUrl).pathname.replace(/^\//, "");
+
+  const tenantId = generateId("tenant");
+  const principalId = generateId("principal");
+
+  beforeAll(async () => {
+    const maintenanceUrl = new URL(scratchUrl);
+    maintenanceUrl.pathname = "/postgres";
+    const maintenance = postgres(maintenanceUrl.toString(), {
+      max: 1,
+      onnotice: () => undefined,
+    });
+    try {
+      await maintenance.unsafe(`DROP DATABASE IF EXISTS "${scratchDatabase}"`);
+      await maintenance.unsafe(`CREATE DATABASE "${scratchDatabase}"`);
+    } finally {
+      await maintenance.end();
+    }
+
+    // The same path the hub boots with: the platform's own migrations,
+    // then every installed package's, including `@corbits/notify` and
+    // `@corbits/mailbox`.
+    await setupDatabase(scratchUrl);
+
+    const { db, close } = createDB(dbConfigFromUrl(scratchUrl));
+    try {
+      await db.insert(schema.tenant).values({
+        id: tenantId,
+        name: "Hub Notify Test Bench",
+        slug: `hub-notify-${tenantId}`,
+        domain: `hub-notify-${tenantId}.localhost`,
       });
-      try {
-        await maintenance.unsafe(
-          `DROP DATABASE IF EXISTS "${scratchDatabase}"`,
-        );
-        await maintenance.unsafe(`CREATE DATABASE "${scratchDatabase}"`);
-      } finally {
-        await maintenance.end();
-      }
-
-      // The same path the hub boots with: the platform's own migrations,
-      // then every installed package's, including `@corbits/notify` and
-      // `@corbits/mailbox`.
-      await setupDatabase(scratchUrl);
-
-      const { db, close } = createDB(dbConfigFromUrl(scratchUrl));
-      try {
-        await db.insert(schema.tenant).values({
-          id: tenantId,
-          name: "Hub Notify Test Bench",
-          slug: `hub-notify-${tenantId}`,
-          domain: `hub-notify-${tenantId}.localhost`,
-        });
-        await db.insert(schema.principal).values({
-          id: principalId,
-          tenantId,
-          kind: "agent",
-          refId: "not-a-real-agent-instance",
-          status: "active",
-        });
-      } finally {
-        await close();
-      }
-      // `setupDatabase` applies the platform's migrations plus every
-      // installed package's; under `bun run test`'s cross-package
-      // concurrency that comfortably exceeds bun:test's default 5s hook
-      // timeout, so it gets an explicit one here rather than a flaky suite.
-    }, 30000);
-
-    afterAll(async () => {
-      const maintenanceUrl = new URL(scratchUrl);
-      maintenanceUrl.pathname = "/postgres";
-      const maintenance = postgres(maintenanceUrl.toString(), {
-        max: 1,
-        onnotice: () => undefined,
+      await db.insert(schema.principal).values({
+        id: principalId,
+        tenantId,
+        kind: "agent",
+        refId: "not-a-real-agent-instance",
+        status: "active",
       });
-      try {
-        await maintenance.unsafe(
-          `DROP DATABASE IF EXISTS "${scratchDatabase}"`,
-        );
-      } finally {
-        await maintenance.end();
-      }
+    } finally {
+      await close();
+    }
+    // `setupDatabase` applies the platform's migrations plus every
+    // installed package's; under `bun run test`'s cross-package
+    // concurrency that comfortably exceeds bun:test's default 5s hook
+    // timeout, so it gets an explicit one here rather than a flaky suite.
+  }, 30000);
+
+  afterAll(async () => {
+    const maintenanceUrl = new URL(scratchUrl);
+    maintenanceUrl.pathname = "/postgres";
+    const maintenance = postgres(maintenanceUrl.toString(), {
+      max: 1,
+      onnotice: () => undefined,
     });
-
-    test("a crash-window redelivery through the composed hub deps queues its dispatch", async () => {
-      const mailboxDb = createMailboxDb(scratchUrl);
-      try {
-        // Exactly what the hub composes: the factory's own dispatch store
-        // and sink registry are the prod path (no sink registered means no
-        // fan-out, only the mailbox row the sweep's reader sees). The test
-        // registers one sink so the repaired dispatch has somewhere to go,
-        // and faults only the dispatch enqueue to open the crash window.
-        const deps = createHubNotifyDeliveryDeps({
-          mailboxDb: mailboxDb.db,
-          bus: createInMemoryMailboxEventBus(),
-          host: "hub.test",
-        });
-        const delivered: SinkDeliveryResult = { status: "delivered" };
-        deps.sinks.register({
-          name: "always",
-          isEnabledFor: async () => true,
-          deliver: async () => delivered,
-        });
-        const dispatch = deps.dispatch;
-        let crashNext = true;
-        const crashingDispatch: NotifyDispatchStore = {
-          ...dispatch,
-          enqueue: async (inputs) => {
-            if (crashNext) {
-              crashNext = false;
-              throw new Error(
-                "boom: crash between the mail write and the dispatch enqueue",
-              );
-            }
-            await dispatch.enqueue(inputs);
-          },
-        };
-        const event: ApprovalNotification = {
-          kind: "approval",
-          approvalId: generateId("approval"),
-          tenantId,
-          runId: generateId("workflowRun"),
-          deploymentId: generateId("workflowRun"),
-          toolName: "quarantine_token",
-          toolArguments: { repo: "corbitsdev/workbench" },
-          recipients: [{ tenantId, principalId }],
-          createdAt: new Date().toISOString(),
-        };
-
-        // The first attempt commits its mail row through the real adapter,
-        // then dies before the dispatch enqueue — the crash window.
-        await expect(
-          deliverApprovalMail({ ...deps, dispatch: crashingDispatch }, event),
-        ).rejects.toThrow("boom");
-
-        // The redelivery runs through the pristine composed deps: it
-        // dedupes on the mail key (no new row), resolves the committed
-        // row's id through the hub's read-back wiring, and queues the
-        // dispatch the crash swallowed. Without `resolveExistingMailIds`
-        // in the composed deps this queues nothing.
-        const redelivery = await deliverApprovalMail(deps, event);
-        expect(redelivery.deliveredMailboxRowIds).toEqual([]);
-        expect(redelivery.queuedDispatchCount).toBe(1);
-
-        const page = await listUserMailbox(mailboxDb.db, {
-          tenantId,
-          principalId,
-          limit: 10,
-          view: "all",
-          priorities: WORKBENCH_INBOX_PRIORITIES,
-        });
-        // Exactly one mail row for the redelivered event — the crash and
-        // the redelivery deduped onto the first attempt's row.
-        const matching = page.items.filter((item) =>
-          (item.subject ?? "").includes("quarantine_token"),
-        );
-        expect(matching).toHaveLength(1);
-        const mailId = matching[0]?.id;
-        if (mailId === undefined)
-          throw new Error("expected the redelivered mail row to list");
-        expect(await dispatch.listFor(mailId)).toHaveLength(1);
-
-        // A further benign redelivery repairs the same row again, and the
-        // dispatch store's (mail row, sink) dedupe holds it to one row.
-        const third = await deliverApprovalMail(deps, event);
-        expect(third.deliveredMailboxRowIds).toEqual([]);
-        expect(third.queuedDispatchCount).toBe(1);
-        expect(await dispatch.listFor(mailId)).toHaveLength(1);
-      } finally {
-        await mailboxDb.close();
-      }
-    }, 15000);
-  },
-);
+    try {
+      await maintenance.unsafe(`DROP DATABASE IF EXISTS "${scratchDatabase}"`);
+    } finally {
+      await maintenance.end();
+    }
+  });
+
+  test("a crash-window redelivery through the composed hub deps queues its dispatch", async () => {
+    const mailboxDb = createMailboxDb(scratchUrl);
+    try {
+      // Exactly what the hub composes: the factory's own dispatch store
+      // and sink registry are the prod path (no sink registered means no
+      // fan-out, only the mailbox row the sweep's reader sees). The test
+      // registers one sink so the repaired dispatch has somewhere to go,
+      // and faults only the dispatch enqueue to open the crash window.
+      const deps = createHubNotifyDeliveryDeps({
+        mailboxDb: mailboxDb.db,
+        bus: createInMemoryMailboxEventBus(),
+        host: "hub.test",
+      });
+      const delivered: SinkDeliveryResult = { status: "delivered" };
+      deps.sinks.register({
+        name: "always",
+        isEnabledFor: async () => true,
+        deliver: async () => delivered,
+      });
+      const dispatch = deps.dispatch;
+      let crashNext = true;
+      const crashingDispatch: NotifyDispatchStore = {
+        ...dispatch,
+        enqueue: async (inputs) => {
+          if (crashNext) {
+            crashNext = false;
+            throw new Error("boom: crash between the mail write and the dispatch enqueue");
+          }
+          await dispatch.enqueue(inputs);
+        },
+      };
+      const event: ApprovalNotification = {
+        kind: "approval",
+        approvalId: generateId("approval"),
+        tenantId,
+        runId: generateId("workflowRun"),
+        deploymentId: generateId("workflowRun"),
+        toolName: "quarantine_token",
+        toolArguments: { repo: "corbitsdev/workbench" },
+        recipients: [{ tenantId, principalId }],
+        createdAt: new Date().toISOString(),
+      };
+
+      // The first attempt commits its mail row through the real adapter,
+      // then dies before the dispatch enqueue — the crash window.
+      await expect(
+        deliverApprovalMail({ ...deps, dispatch: crashingDispatch }, event),
+      ).rejects.toThrow("boom");
+
+      // The redelivery runs through the pristine composed deps: it
+      // dedupes on the mail key (no new row), resolves the committed
+      // row's id through the hub's read-back wiring, and queues the
+      // dispatch the crash swallowed. Without `resolveExistingMailIds`
+      // in the composed deps this queues nothing.
+      const redelivery = await deliverApprovalMail(deps, event);
+      expect(redelivery.deliveredMailboxRowIds).toEqual([]);
+      expect(redelivery.queuedDispatchCount).toBe(1);
+
+      const page = await listUserMailbox(mailboxDb.db, {
+        tenantId,
+        principalId,
+        limit: 10,
+        view: "all",
+        priorities: WORKBENCH_INBOX_PRIORITIES,
+      });
+      // Exactly one mail row for the redelivered event — the crash and
+      // the redelivery deduped onto the first attempt's row.
+      const matching = page.items.filter((item) =>
+        (item.subject ?? "").includes("quarantine_token"),
+      );
+      expect(matching).toHaveLength(1);
+      const mailId = matching[0]?.id;
+      if (mailId === undefined) throw new Error("expected the redelivered mail row to list");
+      expect(await dispatch.listFor(mailId)).toHaveLength(1);
+
+      // A further benign redelivery repairs the same row again, and the
+      // dispatch store's (mail row, sink) dedupe holds it to one row.
+      const third = await deliverApprovalMail(deps, event);
+      expect(third.deliveredMailboxRowIds).toEqual([]);
+      expect(third.queuedDispatchCount).toBe(1);
+      expect(await dispatch.listFor(mailId)).toHaveLength(1);
+    } finally {
+      await mailboxDb.close();
+    }
+  }, 15000);
+});
diff --git a/apps/hub/test/rate-limit.test.ts b/apps/hub/test/rate-limit.test.ts
index 16de8b5dd0..70014cbd81 100644
--- a/apps/hub/test/rate-limit.test.ts
+++ b/apps/hub/test/rate-limit.test.ts
@@ -53,16 +53,11 @@ if (!databaseUrl) {
       const remainingBudget = ISOLATION_SIGNUP_RATE_LIMIT_MAX - 1;
       const statuses: number[] = [];
       for (let attempt = 0; attempt < remainingBudget + 1; attempt += 1) {
-        const response = await signUpAttempt(
-          app,
-          `rate-limit-${nonce}-${attempt}@isolation.test`,
-        );
+        const response = await signUpAttempt(app, `rate-limit-${nonce}-${attempt}@isolation.test`);
         statuses.push(response.status);
       }
 
-      expect(statuses.slice(0, remainingBudget)).toEqual(
-        new Array(remainingBudget).fill(200),
-      );
+      expect(statuses.slice(0, remainingBudget)).toEqual(new Array(remainingBudget).fill(200));
       expect(statuses[remainingBudget]).toBe(429);
     });
   });
diff --git a/apps/hub/test/relaunch-sweep-close.test.ts b/apps/hub/test/relaunch-sweep-close.test.ts
index 3a9795a8d8..751cf74407 100644
--- a/apps/hub/test/relaunch-sweep-close.test.ts
+++ b/apps/hub/test/relaunch-sweep-close.test.ts
@@ -63,9 +63,7 @@ describeIfDb("relaunch sweep teardown", () => {
       console.error = originalError;
     }
 
-    const leaked = errors.filter((line) =>
-      line.includes("relaunch sweep pass failed"),
-    );
+    const leaked = errors.filter((line) => line.includes("relaunch sweep pass failed"));
     expect(leaked).toEqual([]);
   }, 10_000);
 });
diff --git a/apps/hub/test/shutdown-drain.test.ts b/apps/hub/test/shutdown-drain.test.ts
index 79d9159bdf..9b6f44e4c4 100644
--- a/apps/hub/test/shutdown-drain.test.ts
+++ b/apps/hub/test/shutdown-drain.test.ts
@@ -136,9 +136,7 @@ describe("hub shutdown drain against a real server", () => {
       }),
     );
     const server = start();
-    const response = await fetch(
-      `http://localhost:${String(server.port)}/stream`,
-    );
+    const response = await fetch(`http://localhost:${String(server.port)}/stream`);
     expect(response.ok).toBe(true);
     expect(tracker.pending).toBe(0);
 
diff --git a/apps/sidecar/package.json b/apps/sidecar/package.json
index 262a3f4949..7b66a1a006 100644
--- a/apps/sidecar/package.json
+++ b/apps/sidecar/package.json
@@ -1,13 +1,13 @@
 {
   "name": "@workbench/sidecar",
+  "version": "0.0.1",
   "private": true,
   "description": "Generic execution host that dials in to a hub over WebSocket and hosts whatever it is deployed",
-  "version": "0.0.1",
   "license": "SEE LICENSE IN ../../LICENSE.md",
-  "type": "module",
   "bin": {
     "workflow-child": "./bin/workflow-child"
   },
+  "type": "module",
   "scripts": {
     "start": "bun src/index.ts",
     "dev": "bun --watch src/index.ts",
diff --git a/apps/sidecar/src/boot-restore-push-hold.test.ts b/apps/sidecar/src/boot-restore-push-hold.test.ts
index da9a3434a4..0894be3652 100644
--- a/apps/sidecar/src/boot-restore-push-hold.test.ts
+++ b/apps/sidecar/src/boot-restore-push-hold.test.ts
@@ -22,10 +22,7 @@ describe("createBootRestorePushHold", () => {
     hold.onDeploymentRegistered("run_b@bench.localhost");
     hold.end();
 
-    expect(store.held).toEqual([
-      "run_a@bench.localhost",
-      "run_b@bench.localhost",
-    ]);
+    expect(store.held).toEqual(["run_a@bench.localhost", "run_b@bench.localhost"]);
   });
 
   test("does not hold a deployment that arrives over a live link", () => {
diff --git a/apps/sidecar/src/child-grant-filter.test.ts b/apps/sidecar/src/child-grant-filter.test.ts
index 69b29eabcb..e1ec60f3dd 100644
--- a/apps/sidecar/src/child-grant-filter.test.ts
+++ b/apps/sidecar/src/child-grant-filter.test.ts
@@ -12,18 +12,11 @@ import { evaluateGrants } from "@intx/authz";
 import type { GrantRule } from "@intx/authz";
 import { defineWorkflow, step } from "@intx/workflow";
 
-import {
-  collectDeclaredResources,
-  filterGrantsToDeclaredResources,
-} from "./child-grant-filter";
+import { collectDeclaredResources, filterGrantsToDeclaredResources } from "./child-grant-filter";
 
 // A grant rule in the shape the per-run grants file carries. `effect` and
 // `action` vary per case; the rest is boilerplate the filter never inspects.
-function rule(
-  resource: string,
-  effect: GrantRule["effect"],
-  action = "invoke",
-): GrantRule {
+function rule(resource: string, effect: GrantRule["effect"], action = "invoke"): GrantRule {
   return {
     id: `grant-${effect}-${resource}-${action}`,
     resource,
@@ -39,12 +32,7 @@ function rule(
 
 function resources(grants: readonly unknown[]): string[] {
   return grants.map((g) => {
-    if (
-      typeof g === "object" &&
-      g !== null &&
-      "resource" in g &&
-      typeof g.resource === "string"
-    ) {
+    if (typeof g === "object" && g !== null && "resource" in g && typeof g.resource === "string") {
       return g.resource;
     }
     throw new Error(`test grant has no string resource: ${JSON.stringify(g)}`);
@@ -54,10 +42,7 @@ function resources(grants: readonly unknown[]): string[] {
 describe("filterGrantsToDeclaredResources", () => {
   test("keeps an allow whose exact resource is declared", () => {
     const declared = new Set(["tool:foo"]);
-    const filtered = filterGrantsToDeclaredResources(
-      [rule("tool:foo", "allow")],
-      declared,
-    );
+    const filtered = filterGrantsToDeclaredResources([rule("tool:foo", "allow")], declared);
     expect(resources(filtered)).toEqual(["tool:foo"]);
   });
 
@@ -65,10 +50,7 @@ describe("filterGrantsToDeclaredResources", () => {
     // The single grant that authorizes the most must survive: string equality
     // would drop `tool:*`, but `matchPattern("tool:*", "tool:foo")` is true.
     const declared = new Set(["tool:foo"]);
-    const filtered = filterGrantsToDeclaredResources(
-      [rule("tool:*", "allow")],
-      declared,
-    );
+    const filtered = filterGrantsToDeclaredResources([rule("tool:*", "allow")], declared);
     expect(resources(filtered)).toEqual(["tool:*"]);
   });
 
@@ -93,11 +75,7 @@ describe("filterGrantsToDeclaredResources", () => {
     // undeclared -- dropping one would weaken safety.
     const declared = new Set(["tool:foo"]);
     const filtered = filterGrantsToDeclaredResources(
-      [
-        rule("tool:bar", "deny"),
-        rule("effect:whatever", "ask"),
-        rule("tool:bar", "allow"),
-      ],
+      [rule("tool:bar", "deny"), rule("effect:whatever", "ask"), rule("tool:bar", "allow")],
       declared,
     );
     expect(resources(filtered)).toEqual(["tool:bar", "effect:whatever"]);
@@ -114,7 +92,6 @@ describe("filterGrantsToDeclaredResources", () => {
       declared,
     );
     const decision = await evaluateGrants(
-      // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- the filter returns unknown[]; the seeded rows are GrantRule by construction here
       [...(filtered as readonly GrantRule[])],
       "tool:foo",
       "invoke",
@@ -178,11 +155,7 @@ describe("collectDeclaredResources", () => {
         }),
       },
     });
-    const declared = collectDeclaredResources(
-      workflow,
-      createDefaultDirectorRegistry(),
-      new Map(),
-    );
+    const declared = collectDeclaredResources(workflow, createDefaultDirectorRegistry(), new Map());
     expect(declared.has("inference.source:anthropic:m1")).toBe(true);
     expect(declared.has("inference.source:anthropic:m2")).toBe(true);
   });
diff --git a/apps/sidecar/src/child-grant-filter.ts b/apps/sidecar/src/child-grant-filter.ts
index c4df26abd9..13440ac464 100644
--- a/apps/sidecar/src/child-grant-filter.ts
+++ b/apps/sidecar/src/child-grant-filter.ts
@@ -14,10 +14,7 @@
 import type { DirectorRegistry } from "@intx/agent";
 import { matchPattern } from "@intx/authz";
 import type { WorkflowDefinition } from "@intx/workflow";
-import {
-  walkCapabilities,
-  type PluginToolDefinitions,
-} from "@intx/workflow-deploy";
+import { walkCapabilities, type PluginToolDefinitions } from "@intx/workflow-deploy";
 
 /**
  * The flat union of every grant-shape resource string the child body declares,
@@ -81,10 +78,7 @@ export function filterGrantsToDeclaredResources(
   return parentGrants.filter((grant) => keepGrantForDeclared(grant, declared));
 }
 
-function keepGrantForDeclared(
-  grant: unknown,
-  declared: ReadonlySet<string>,
-): boolean {
+function keepGrantForDeclared(grant: unknown, declared: ReadonlySet<string>): boolean {
   if (!isAllowRuleWithResource(grant)) {
     return true;
   }
@@ -96,9 +90,7 @@ function keepGrantForDeclared(
   return false;
 }
 
-function isAllowRuleWithResource(
-  grant: unknown,
-): grant is { effect: "allow"; resource: string } {
+function isAllowRuleWithResource(grant: unknown): grant is { effect: "allow"; resource: string } {
   if (typeof grant !== "object" || grant === null) {
     return false;
   }
diff --git a/apps/sidecar/src/concurrency.test.ts b/apps/sidecar/src/concurrency.test.ts
index bdb1053285..3eeeeed74e 100644
--- a/apps/sidecar/src/concurrency.test.ts
+++ b/apps/sidecar/src/concurrency.test.ts
@@ -34,11 +34,7 @@ describe("runWithConcurrency", () => {
   });
 
   test("an empty list resolves immediately with no failures", async () => {
-    const failures = await runWithConcurrency(
-      [] as number[],
-      4,
-      async () => {},
-    );
+    const failures = await runWithConcurrency([] as number[], 4, async () => {});
     expect(failures).toEqual([]);
   });
 
diff --git a/apps/sidecar/src/config.ts b/apps/sidecar/src/config.ts
index 2f16a7929c..0ce26eece1 100644
--- a/apps/sidecar/src/config.ts
+++ b/apps/sidecar/src/config.ts
@@ -106,10 +106,7 @@ const SidecarEnv = type({
  * for an unset key so the caller's binding falls back to the vendor's own
  * default rather than this boundary inventing one.
  */
-function parsePositiveMsEnv(
-  raw: string | undefined,
-  name: string,
-): number | undefined {
+function parsePositiveMsEnv(raw: string | undefined, name: string): number | undefined {
   if (raw === undefined) return undefined;
   const n = Number(raw);
   if (!Number.isFinite(n) || n <= 0) {
@@ -171,18 +168,15 @@ export type SidecarConfig = {
  * rather than surfacing as a deep-stack `loadAdapterRegistry` import
  * failure.
  */
-export function parseSidecarAdapterManifest(
-  raw: string | undefined,
-): AdapterManifest {
+export function parseSidecarAdapterManifest(raw: string | undefined): AdapterManifest {
   if (raw === undefined) return DEFAULT_ADAPTER_MANIFEST;
   let parsed: unknown;
   try {
     parsed = JSON.parse(raw);
   } catch (cause) {
-    throw new Error(
-      "invalid sidecar environment: SIDECAR_ADAPTER_MANIFEST is not valid JSON",
-      { cause },
-    );
+    throw new Error("invalid sidecar environment: SIDECAR_ADAPTER_MANIFEST is not valid JSON", {
+      cause,
+    });
   }
   const validated = AdapterManifest(parsed);
   if (validated instanceof type.errors) {
@@ -199,9 +193,7 @@ export function parseSidecarAdapterManifest(
  * variable and the shape it must have, so a misconfigured process dies
  * at boot instead of failing at first use.
  */
-export function readSidecarConfig(
-  env: Record<string, string | undefined>,
-): SidecarConfig {
+export function readSidecarConfig(env: Record<string, string | undefined>): SidecarConfig {
   const parsed = SidecarEnv(env);
   if (parsed instanceof type.errors) {
     throw new Error(`invalid sidecar environment: ${parsed.summary}`);
@@ -221,20 +213,9 @@ export function readSidecarConfig(
     home: parsed.HOME,
     tmpdir: parsed.TMPDIR,
     toolRegistries: parsed.SIDECAR_TOOL_REGISTRIES,
-    adapterManifest: parseSidecarAdapterManifest(
-      parsed.SIDECAR_ADAPTER_MANIFEST,
-    ),
-    consumedRetentionMs: parsePositiveMsEnv(
-      parsed.CONSUMED_RETENTION_MS,
-      "CONSUMED_RETENTION_MS",
-    ),
-    readyTimeoutMs: parsePositiveMsEnv(
-      parsed.CHILD_READY_TIMEOUT_MS,
-      "CHILD_READY_TIMEOUT_MS",
-    ),
-    idleHibernateMs: parsePositiveMsEnv(
-      parsed.CHAT_IDLE_HIBERNATE_MS,
-      "CHAT_IDLE_HIBERNATE_MS",
-    ),
+    adapterManifest: parseSidecarAdapterManifest(parsed.SIDECAR_ADAPTER_MANIFEST),
+    consumedRetentionMs: parsePositiveMsEnv(parsed.CONSUMED_RETENTION_MS, "CONSUMED_RETENTION_MS"),
+    readyTimeoutMs: parsePositiveMsEnv(parsed.CHILD_READY_TIMEOUT_MS, "CHILD_READY_TIMEOUT_MS"),
+    idleHibernateMs: parsePositiveMsEnv(parsed.CHAT_IDLE_HIBERNATE_MS, "CHAT_IDLE_HIBERNATE_MS"),
   };
 }
diff --git a/apps/sidecar/src/conversation-state.test.ts b/apps/sidecar/src/conversation-state.test.ts
index a3a4120ce1..b4c9422c89 100644
--- a/apps/sidecar/src/conversation-state.test.ts
+++ b/apps/sidecar/src/conversation-state.test.ts
@@ -4,11 +4,7 @@ import path from "node:path";
 
 import { afterEach, expect, spyOn, test } from "bun:test";
 
-import type {
-  Principal,
-  RepoId,
-  RepoStore,
-} from "@intx/hub-sessions/substrate";
+import type { Principal, RepoId, RepoStore } from "@intx/hub-sessions/substrate";
 import type { ConversationTurn, PendingOperation } from "@intx/types/runtime";
 
 import {
@@ -24,9 +20,7 @@ const tmpDirs: string[] = [];
 
 afterEach(async () => {
   await Promise.all(
-    tmpDirs
-      .splice(0)
-      .map((dir) => fs.promises.rm(dir, { recursive: true, force: true })),
+    tmpDirs.splice(0).map((dir) => fs.promises.rm(dir, { recursive: true, force: true })),
   );
 });
 
@@ -61,21 +55,21 @@ function fsBackedSubstrate(repoDir: string): RepoStore {
     ) => {
       const prefixDir = path.join(
         repoDir,
-        ...args.preservePrefix
-          .split("/")
-          .filter((seg: string) => seg.length > 0),
+        ...args.preservePrefix.split("/").filter((seg: string) => seg.length > 0),
       );
       const existing = new Map<string, Uint8Array>();
       let names: string[] = [];
       try {
         names = await fs.promises.readdir(prefixDir);
       } catch (cause) {
-        if (!(
-          typeof cause === "object" &&
-          cause !== null &&
-          "code" in cause &&
-          cause.code === "ENOENT"
-        )) {
+        if (
+          !(
+            typeof cause === "object" &&
+            cause !== null &&
+            "code" in cause &&
+            cause.code === "ENOENT"
+          )
+        ) {
           throw cause;
         }
       }
@@ -83,19 +77,13 @@ function fsBackedSubstrate(repoDir: string): RepoStore {
         const full = path.join(prefixDir, name);
         const st = await fs.promises.stat(full);
         if (st.isFile()) {
-          existing.set(
-            `${args.preservePrefix}${name}`,
-            await fs.promises.readFile(full),
-          );
+          existing.set(`${args.preservePrefix}${name}`, await fs.promises.readFile(full));
         }
       }
       const files = await args.merge(existing);
       await fs.promises.rm(prefixDir, { recursive: true, force: true });
       for (const [rel, content] of Object.entries(files)) {
-        const dest = path.join(
-          repoDir,
-          ...rel.split("/").filter((seg: string) => seg.length > 0),
-        );
+        const dest = path.join(repoDir, ...rel.split("/").filter((seg: string) => seg.length > 0));
         await fs.promises.mkdir(path.dirname(dest), { recursive: true });
         await fs.promises.writeFile(dest, content);
       }
@@ -135,26 +123,14 @@ test("two rooms of one agent keep isolated turns; a new room starts empty", asyn
   await store.storage.writeTurns([userTurn("room A tool result")]);
   await store.mirrorToSubstrate();
 
-  const roomADir = durableConversationAgentStateDir(
-    repoDir,
-    "default",
-    "chan_a",
-  );
-  const reconstructedA = await reconstructDurableConversation(
-    roomADir,
-    "default/chan_a",
-  );
+  const roomADir = durableConversationAgentStateDir(repoDir, "default", "chan_a");
+  const reconstructedA = await reconstructDurableConversation(roomADir, "default/chan_a");
   expect(reconstructedA?.turns).toHaveLength(1);
 
   expect(await store.bindOriginatingWorkbench("chan_b")).toBe(true);
   expect(peekTurns(store)).toEqual([]);
 
-  const mixedLegacy = path.join(
-    repoDir,
-    "agent-state",
-    "default",
-    "checkpoint.json",
-  );
+  const mixedLegacy = path.join(repoDir, "agent-state", "default", "checkpoint.json");
   expect(fs.existsSync(mixedLegacy)).toBe(false);
 
   await store.storage.writeTurns([userTurn("room B first infer")]);
@@ -215,10 +191,7 @@ test("a retired signal-kind pending op is dropped on restore, not thrown on", as
     }),
   );
 
-  const reconstructed = await reconstructDurableConversation(
-    agentStateDir,
-    "default/chan_a",
-  );
+  const reconstructed = await reconstructDurableConversation(agentStateDir, "default/chan_a");
 
   expect(reconstructed?.pendingOperations).toEqual([survivingOp]);
 });
@@ -240,12 +213,8 @@ test("two queued mails bind and mirror under each message's From not a later ori
   });
   // Both inbound mails exist (enqueued) before the first invokeStep. A
   // latest-wins origin file would now name chan_b for both binds.
-  const fromA = originatingWorkbenchIdFromRequest(
-    mailRequest("chan_a@alice.localhost"),
-  );
-  const fromB = originatingWorkbenchIdFromRequest(
-    mailRequest("chan_b@alice.localhost"),
-  );
+  const fromA = originatingWorkbenchIdFromRequest(mailRequest("chan_a@alice.localhost"));
+  const fromB = originatingWorkbenchIdFromRequest(mailRequest("chan_b@alice.localhost"));
   expect(fromA).toBe("chan_a");
   expect(fromB).toBe("chan_b");
 
diff --git a/apps/sidecar/src/conversation-state.ts b/apps/sidecar/src/conversation-state.ts
index 84dfa721ab..b064174cb9 100644
--- a/apps/sidecar/src/conversation-state.ts
+++ b/apps/sidecar/src/conversation-state.ts
@@ -134,15 +134,8 @@ import { getLogger } from "@intx/log";
 import { reportError } from "@corbits/error-sink";
 import { createConnectorRouter } from "@intx/harness";
 import type { ConnectorReplyParts, RouteDecision } from "@intx/harness";
-import {
-  createIsogitStorage,
-  createNodeIsogitRuntime,
-} from "@intx/storage-isogit/node";
-import type {
-  Principal,
-  RepoId,
-  RepoStore,
-} from "@intx/hub-sessions/substrate";
+import { createIsogitStorage, createNodeIsogitRuntime } from "@intx/storage-isogit/node";
+import type { Principal, RepoId, RepoStore } from "@intx/hub-sessions/substrate";
 import { WORKFLOW_RUN_AGENT_STATE_PREFIX } from "@intx/hub-sessions/substrate";
 import { SignalKind } from "@intx/types";
 
@@ -405,10 +398,7 @@ export async function createDurableConversationStore(
   opts: DurableConversationStoreOpts,
 ): Promise<DurableConversationStore> {
   await fs.promises.mkdir(opts.localStoreDir, { recursive: true });
-  const baseStorage = await isogitStorage.createIsogitStore(
-    opts.localStoreDir,
-    opts.signer,
-  );
+  const baseStorage = await isogitStorage.createIsogitStore(opts.localStoreDir, opts.signer);
 
   // Reuse the connector router + the harness storage-override seam. The
   // router's `onStateChanged` is the change-driven commit hook the design
@@ -441,10 +431,7 @@ export async function createDurableConversationStore(
   }
 
   function agentStatePrefix(): string {
-    return durableConversationAgentStatePrefix(
-      opts.agentKey,
-      requireBoundWorkbenchId(),
-    );
+    return durableConversationAgentStatePrefix(opts.agentKey, requireBoundWorkbenchId());
   }
   // The number of mirror boundaries already durably committed (the
   // checkpoint's folded boundaries plus every appended WAL entry). It is
@@ -740,11 +727,7 @@ export async function createDurableConversationStore(
     // with the freshest metadata and truncate the WAL. Amortizes the
     // unavoidable O(N) full rewrite to O(N/K) per boundary.
     if (mirroredBoundaryCount - checkpointBoundarySeq >= CHECKPOINT_INTERVAL) {
-      await writeCheckpoint(
-        mirroredBoundaryCount,
-        turns.slice(0, mirroredTurnCount),
-        metadata,
-      );
+      await writeCheckpoint(mirroredBoundaryCount, turns.slice(0, mirroredTurnCount), metadata);
       checkpointBoundarySeq = mirroredBoundaryCount;
     }
   }
@@ -1034,10 +1017,7 @@ const PendingOperationKindEnvelope = type({ kind: "unknown" });
  * question is simply lost here -- their eventual reply just becomes the
  * next ordinary turn (docs/CHAT.md).
  */
-function dropUnclassifiedPendingOperations(
-  items: unknown[],
-  agentKey: string,
-): unknown[] {
+function dropUnclassifiedPendingOperations(items: unknown[], agentKey: string): unknown[] {
   return items.filter((item) => {
     const envelope = PendingOperationKindEnvelope(item);
     const kind = envelope instanceof type.errors ? undefined : envelope.kind;
@@ -1080,11 +1060,7 @@ export async function reconstructDurableConversation(
 ): Promise<ReconstructedConversation | null> {
   const checkpoint = await readCheckpointFromDir(agentStateDir, agentKey);
   const baseBoundarySeq = checkpoint?.checkpointSeq ?? 0;
-  const wal = await readWalTailFromDir(
-    agentStateDir,
-    agentKey,
-    baseBoundarySeq,
-  );
+  const wal = await readWalTailFromDir(agentStateDir, agentKey, baseBoundarySeq);
   if (checkpoint === null && wal.length === 0) return null;
 
   const turns: unknown[] = [...(checkpoint?.turns ?? [])];
@@ -1138,10 +1114,7 @@ async function readCheckpointFromDir(
 } | null> {
   let metaRaw: string;
   try {
-    metaRaw = await fs.promises.readFile(
-      path.join(agentStateDir, CHECKPOINT_META_FILE),
-      "utf8",
-    );
+    metaRaw = await fs.promises.readFile(path.join(agentStateDir, CHECKPOINT_META_FILE), "utf8");
   } catch (cause) {
     if (isErrnoNotFound(cause)) return null;
     throw cause;
@@ -1153,14 +1126,8 @@ async function readCheckpointFromDir(
       `sidecar conversation-state: ${CHECKPOINT_META_FILE} for ${agentKey} failed validation: ${validatedMeta.summary}; refusing to start the warm agent fresh on a corrupt checkpoint`,
     );
   }
-  const snapshotRaw = await fs.promises.readFile(
-    path.join(agentStateDir, CHECKPOINT_FILE),
-    "utf8",
-  );
-  const snapshot = parseJsonOrThrow(
-    snapshotRaw,
-    `${agentKey} ${CHECKPOINT_FILE}`,
-  );
+  const snapshotRaw = await fs.promises.readFile(path.join(agentStateDir, CHECKPOINT_FILE), "utf8");
+  const snapshot = parseJsonOrThrow(snapshotRaw, `${agentKey} ${CHECKPOINT_FILE}`);
   const validatedSnapshot = CheckpointSnapshot(snapshot);
   if (validatedSnapshot instanceof type.errors) {
     throw new Error(
@@ -1195,9 +1162,7 @@ async function readWalTailFromDir(
   agentStateDir: string,
   agentKey: string,
   fromSeq: number,
-): Promise<
-  { seq: number; turns: unknown[]; metadata: SnapshotMetadataValue }[]
-> {
+): Promise<{ seq: number; turns: unknown[]; metadata: SnapshotMetadataValue }[]> {
   const walDir = path.join(agentStateDir, WAL_DIR);
   let buckets: string[];
   try {
@@ -1220,14 +1185,8 @@ async function readWalTailFromDir(
           `sidecar conversation-state: unexpected non-JSON WAL entry ${WAL_DIR}/${bucket}/${file} for ${agentKey}`,
         );
       }
-      const raw = await fs.promises.readFile(
-        path.join(bucketDir, file),
-        "utf8",
-      );
-      const parsed = parseJsonOrThrow(
-        raw,
-        `${agentKey} ${WAL_DIR}/${bucket}/${file}`,
-      );
+      const raw = await fs.promises.readFile(path.join(bucketDir, file), "utf8");
+      const parsed = parseJsonOrThrow(raw, `${agentKey} ${WAL_DIR}/${bucket}/${file}`);
       const validated = WalEntry(parsed);
       if (validated instanceof type.errors) {
         throw new Error(
@@ -1271,10 +1230,5 @@ function parseJsonOrThrow(raw: string, label: string): unknown {
 }
 
 export function isErrnoNotFound(cause: unknown): boolean {
-  return (
-    typeof cause === "object" &&
-    cause !== null &&
-    "code" in cause &&
-    cause.code === "ENOENT"
-  );
+  return typeof cause === "object" && cause !== null && "code" in cause && cause.code === "ENOENT";
 }
diff --git a/apps/sidecar/src/default-harness.ts b/apps/sidecar/src/default-harness.ts
index dac6652271..806fa30002 100644
--- a/apps/sidecar/src/default-harness.ts
+++ b/apps/sidecar/src/default-harness.ts
@@ -18,15 +18,11 @@ export interface DefaultHarnessBuilderConfig {
   readonly adapters: AdapterRegistry;
 }
 
-export function createDefaultHarnessBuilder(
-  config: DefaultHarnessBuilderConfig,
-): HarnessBuilder {
+export function createDefaultHarnessBuilder(config: DefaultHarnessBuilderConfig): HarnessBuilder {
   return {
     canBuildSource(source: InferenceSource): void {
       if (!config.adapters.has(source.provider)) {
-        throw new Error(
-          `Source provider "${source.provider}" is not registered`,
-        );
+        throw new Error(`Source provider "${source.provider}" is not registered`);
       }
     },
   };
diff --git a/apps/sidecar/src/hibernated-agent-identity-vault.test.ts b/apps/sidecar/src/hibernated-agent-identity-vault.test.ts
index 16571ac690..ea67f39090 100644
--- a/apps/sidecar/src/hibernated-agent-identity-vault.test.ts
+++ b/apps/sidecar/src/hibernated-agent-identity-vault.test.ts
@@ -8,11 +8,7 @@ import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
 
-import {
-  createAgentKeyStore,
-  createAgentRepoStore,
-  agentDir,
-} from "@intx/hub-agent";
+import { createAgentKeyStore, createAgentRepoStore, agentDir } from "@intx/hub-agent";
 import { generateKeyPair, signEd25519, verifySSHSignature } from "@intx/crypto";
 
 import {
@@ -51,15 +47,12 @@ describe("hibernated-agent-identity-vault", () => {
     // The real, unmodified destructive call `hub-link.js` makes on every
     // undeploy -- exercised here exactly as the PR #291 spike exercised it.
     await repoStore.remove(address);
-    expect(await fs.readdir(dataDir)).not.toContain(
-      path.basename(agentDir(dataDir, address)),
-    );
+    expect(await fs.readdir(dataDir)).not.toContain(path.basename(agentDir(dataDir, address)));
 
     const restore = await restoreAgentIdentity(dataDir, address);
     expect(restore.restored).toBe(true);
 
-    const { keyPair: restored, isNew } =
-      await keyStore.loadOrGenerateKey(address);
+    const { keyPair: restored, isNew } = await keyStore.loadOrGenerateKey(address);
     expect(isNew).toBe(false);
     expect(restored.privateKey).toEqual(original.privateKey);
     expect(restored.publicKey).toEqual(original.publicKey);
@@ -80,8 +73,7 @@ describe("hibernated-agent-identity-vault", () => {
     const restore = await restoreAgentIdentity(dataDir, address);
     expect(restore.restored).toBe(false);
 
-    const { keyPair: regenerated, isNew } =
-      await keyStore.loadOrGenerateKey(address);
+    const { keyPair: regenerated, isNew } = await keyStore.loadOrGenerateKey(address);
     expect(isNew).toBe(true);
     expect(regenerated.privateKey).not.toEqual(original.privateKey);
   });
@@ -110,9 +102,7 @@ describe("hibernated-agent-identity-vault", () => {
     const dataDir = await makeTmpDataDir();
     const address = "run_already-gone@example.com";
 
-    const reportErrorMock = mock(
-      (_error: unknown, _context: unknown) => "ref-test",
-    );
+    const reportErrorMock = mock((_error: unknown, _context: unknown) => "ref-test");
     mock.module("@corbits/error-sink", () => ({
       reportError: reportErrorMock,
     }));
@@ -162,9 +152,7 @@ describe("hibernated-agent-identity-vault", () => {
       retentionMs,
     });
 
-    expect(result.reapedEntries).toEqual([
-      path.basename(agentDir(dataDir, oldAddress)),
-    ]);
+    expect(result.reapedEntries).toEqual([path.basename(agentDir(dataDir, oldAddress))]);
     await expect(fs.stat(oldVaultEntry)).rejects.toThrow();
     const freshVaultEntry = path.join(
       dataDir,
diff --git a/apps/sidecar/src/hibernated-agent-identity-vault.ts b/apps/sidecar/src/hibernated-agent-identity-vault.ts
index 1239add032..05ac0d92dc 100644
--- a/apps/sidecar/src/hibernated-agent-identity-vault.ts
+++ b/apps/sidecar/src/hibernated-agent-identity-vault.ts
@@ -46,10 +46,7 @@ function vaultRoot(dataDir: string): string {
 }
 
 function vaultEntryDir(dataDir: string, agentAddress: string): string {
-  return path.join(
-    vaultRoot(dataDir),
-    path.basename(agentDir(dataDir, agentAddress)),
-  );
+  return path.join(vaultRoot(dataDir), path.basename(agentDir(dataDir, agentAddress)));
 }
 
 async function pathExists(target: string): Promise<boolean> {
@@ -127,13 +124,9 @@ export async function snapshotAgentIdentity(
   await fsp.cp(source, dest, { recursive: true });
   await hardenPermissionsRecursive(dest);
   await fsp.chmod(dest, 0o700);
-  await fsp.writeFile(
-    path.join(dest, MARKER_FILENAME),
-    new Date().toISOString(),
-    {
-      mode: 0o600,
-    },
-  );
+  await fsp.writeFile(path.join(dest, MARKER_FILENAME), new Date().toISOString(), {
+    mode: 0o600,
+  });
   return { snapshotted: true };
 }
 
@@ -209,11 +202,8 @@ export async function reapExpiredHibernationSnapshots(
       if (!isErrnoNotFound(cause)) throw cause;
     }
 
-    const snapshottedAtMs =
-      snapshottedAtIso === undefined ? NaN : Date.parse(snapshottedAtIso);
-    const expired = Number.isNaN(snapshottedAtMs)
-      ? true
-      : nowMs - snapshottedAtMs >= retentionMs;
+    const snapshottedAtMs = snapshottedAtIso === undefined ? NaN : Date.parse(snapshottedAtIso);
+    const expired = Number.isNaN(snapshottedAtMs) ? true : nowMs - snapshottedAtMs >= retentionMs;
 
     if (expired) {
       await fsp.rm(entryPath, { recursive: true, force: true });
diff --git a/apps/sidecar/src/hub-link-watchdog.ts b/apps/sidecar/src/hub-link-watchdog.ts
index 822dd752dc..a484fe3f5e 100644
--- a/apps/sidecar/src/hub-link-watchdog.ts
+++ b/apps/sidecar/src/hub-link-watchdog.ts
@@ -30,9 +30,7 @@ export type CreateHubLinkWatchdogOpts = {
   onStall: () => void;
 };
 
-export function createHubLinkWatchdog(
-  opts: CreateHubLinkWatchdogOpts,
-): HubLinkWatchdog {
+export function createHubLinkWatchdog(opts: CreateHubLinkWatchdogOpts): HubLinkWatchdog {
   let deadline: ReturnType<typeof setTimeout> | undefined;
 
   function arm(): void {
diff --git a/apps/sidecar/src/index.ts b/apps/sidecar/src/index.ts
index 5ed30d44a8..173155628b 100644
--- a/apps/sidecar/src/index.ts
+++ b/apps/sidecar/src/index.ts
@@ -18,11 +18,7 @@
 // for the first connect attempt, and only then does the link dial out.
 
 import path from "node:path";
-import {
-  createEd25519Crypto,
-  generateKeyPair,
-  verifySSHSignature,
-} from "@intx/crypto";
+import { createEd25519Crypto, generateKeyPair, verifySSHSignature } from "@intx/crypto";
 import { createSidecarOrchestrator, type HubLink } from "@intx/hub-agent";
 import { createAgentRepoStore } from "@intx/hub-sessions";
 import { loadAdapterRegistry } from "@intx/inference/providers";
@@ -33,10 +29,7 @@ import { hexEncode } from "@intx/types";
 
 import { reportError } from "@corbits/error-sink";
 import { readSidecarConfig } from "./config";
-import {
-  DEFAULT_TOOL_REGISTRIES_JSON,
-  parseToolRegistries,
-} from "./tool-materialization";
+import { DEFAULT_TOOL_REGISTRIES_JSON, parseToolRegistries } from "./tool-materialization";
 import { createWorkflowProbeExecutor } from "./workflow-probe-handler";
 import { createWorkflowClosureMaterializer } from "./workflow-closure-materialization";
 import { MAX_INLINE_ASSET_PAYLOAD_BYTES } from "./source-asset-delivery";
@@ -45,10 +38,7 @@ import { createHubLinkWatchdog } from "./hub-link-watchdog";
 import { createOAuthLoopbackLoginService } from "./oauth-login";
 import { attachShutdownRejectionHandler, runSidecarShutdown } from "./shutdown";
 import { loadOrMintSidecarKeypair } from "./signing-keypair";
-import {
-  createSidecarDeployRouter,
-  type SidecarDeployRouter,
-} from "./workflow-host-wiring";
+import { createSidecarDeployRouter, type SidecarDeployRouter } from "./workflow-host-wiring";
 import {
   createDeploymentAddressRegistry,
   createMultistepCredentialsRouter,
@@ -97,11 +87,8 @@ await createTarballCache({
 // commit with it, and each workflow-process child re-derives it from
 // its spawn-time env. The public key is logged so an operator can pin
 // which identity a given process advertises.
-const signingKey = await loadOrMintSidecarKeypair(
-  path.join(config.dataDir, ".sidecar-signing"),
-);
-getLogger(["sidecar", "boot"])
-  .info`Sidecar identity ${hexEncode(signingKey.publicKey)}`;
+const signingKey = await loadOrMintSidecarKeypair(path.join(config.dataDir, ".sidecar-signing"));
+getLogger(["sidecar", "boot"]).info`Sidecar identity ${hexEncode(signingKey.publicKey)}`;
 
 // The substrate-backed RepoStore the supervisors read and write through.
 // Wrapped below with the pack-pushing facade so a successful
@@ -182,8 +169,7 @@ const multistepSubstrateEnv: Record<string, string> = {
   // operator pinned none, so the child's per-step tool materialization
   // resolves the exact registries this boot edge resolved — a child
   // never falls back to a default of its own.
-  SIDECAR_TOOL_REGISTRIES:
-    config.toolRegistries ?? DEFAULT_TOOL_REGISTRIES_JSON,
+  SIDECAR_TOOL_REGISTRIES: config.toolRegistries ?? DEFAULT_TOOL_REGISTRIES_JSON,
 };
 if (config.home !== undefined) {
   multistepSubstrateEnv["HOME"] = config.home;
@@ -210,9 +196,7 @@ const workflowProbeExecutor = createWorkflowProbeExecutor({
     cacheMaxBytes: CACHE_MAX_BYTES,
     registryMaxTarballBytes: REGISTRY_MAX_TARBALL_BYTES,
     maxAssetPayloadBytes: MAX_INLINE_ASSET_PAYLOAD_BYTES,
-    registries: parseToolRegistries(
-      config.toolRegistries ?? DEFAULT_TOOL_REGISTRIES_JSON,
-    ),
+    registries: parseToolRegistries(config.toolRegistries ?? DEFAULT_TOOL_REGISTRIES_JSON),
     scratchRoot: path.join(config.dataDir, "workflow-probe", "closures"),
   }),
 });
@@ -285,14 +269,8 @@ const orchestrator = createSidecarOrchestrator({
       wrappedRepoStore.markAddressUnroutable(address);
     }
   },
-  createDeployRouter: ({
-    sessions,
-    keyStore,
-    publishWorkflowInferenceEvent,
-  }) => {
-    const deployRouterConfigBase: Parameters<
-      typeof createSidecarDeployRouter
-    >[0] = {
+  createDeployRouter: ({ sessions, keyStore, publishWorkflowInferenceEvent }) => {
+    const deployRouterConfigBase: Parameters<typeof createSidecarDeployRouter>[0] = {
       sessions,
       keyStore,
       transport,
@@ -353,9 +331,7 @@ const orchestrator = createSidecarOrchestrator({
             idleHibernateMs: config.idleHibernateMs,
           }
         : deployRouterConfigWithReadyTimeoutMs;
-    const router = createSidecarDeployRouter(
-      deployRouterConfigWithIdleHibernateMs,
-    );
+    const router = createSidecarDeployRouter(deployRouterConfigWithIdleHibernateMs);
     capturedRouter = router;
     return router;
   },
@@ -364,9 +340,7 @@ const orchestrator = createSidecarOrchestrator({
 resolvedHubLink = orchestrator.hubLink;
 
 if (capturedRouter === undefined) {
-  throw new Error(
-    "sidecar boot: deploy router was not constructed before deployment restore",
-  );
+  throw new Error("sidecar boot: deploy router was not constructed before deployment restore");
 }
 const deployRouter: SidecarDeployRouter = capturedRouter;
 
diff --git a/apps/sidecar/src/multistep-credentials-router.test.ts b/apps/sidecar/src/multistep-credentials-router.test.ts
index 82e524d640..5108961e05 100644
--- a/apps/sidecar/src/multistep-credentials-router.test.ts
+++ b/apps/sidecar/src/multistep-credentials-router.test.ts
@@ -47,9 +47,9 @@ test("a handler rejection propagates to the caller", async () => {
   router.register("ins_dep_1@example.com", () =>
     Promise.reject(new Error("child rejected credentials-updated")),
   );
-  await expect(
-    router.tryRoute(makeFrame("ins_dep_1@example.com")),
-  ).rejects.toThrow(/child rejected credentials-updated/);
+  await expect(router.tryRoute(makeFrame("ins_dep_1@example.com"))).rejects.toThrow(
+    /child rejected credentials-updated/,
+  );
 });
 
 test("unregister stops routing for the address", async () => {
diff --git a/apps/sidecar/src/multistep-grants-router.test.ts b/apps/sidecar/src/multistep-grants-router.test.ts
index 1320707e36..1631b2778d 100644
--- a/apps/sidecar/src/multistep-grants-router.test.ts
+++ b/apps/sidecar/src/multistep-grants-router.test.ts
@@ -33,12 +33,10 @@ test("tryRoute dispatches the frame's runId and stepGrants to the handler", asyn
 
 test("a handler rejection propagates to the caller", async () => {
   const router = createMultistepGrantsRouter();
-  router.register("ins_dep_1@example.com", () =>
-    Promise.reject(new Error("durable write failed")),
+  router.register("ins_dep_1@example.com", () => Promise.reject(new Error("durable write failed")));
+  await expect(router.tryRoute(makeFrame("ins_dep_1@example.com"))).rejects.toThrow(
+    /durable write failed/,
   );
-  await expect(
-    router.tryRoute(makeFrame("ins_dep_1@example.com")),
-  ).rejects.toThrow(/durable write failed/);
 });
 
 test("unregister stops routing for the address", async () => {
diff --git a/apps/sidecar/src/oauth-login.test.ts b/apps/sidecar/src/oauth-login.test.ts
index 63f282c463..57da8034da 100644
--- a/apps/sidecar/src/oauth-login.test.ts
+++ b/apps/sidecar/src/oauth-login.test.ts
@@ -3,10 +3,7 @@
 // `OAuthCallbackPortInUseError`, and never opens a browser sidecar-side.
 import { afterAll, describe, expect, test } from "bun:test";
 import { createServer, type Server } from "node:http";
-import {
-  CODEX_AUTHORIZE_URL,
-  CODEX_REDIRECT_URI,
-} from "@corbits/codex-provider/constants";
+import { CODEX_AUTHORIZE_URL, CODEX_REDIRECT_URI } from "@corbits/codex-provider/constants";
 import { XAI_REDIRECT_URI } from "@corbits/xai-provider";
 import { OAuthCallbackPortInUseError } from "@corbits/oauth-core";
 import { createOAuthLoopbackLoginService } from "./oauth-login";
diff --git a/apps/sidecar/src/oauth-login.ts b/apps/sidecar/src/oauth-login.ts
index ec7a8fc06a..53e7ab5cef 100644
--- a/apps/sidecar/src/oauth-login.ts
+++ b/apps/sidecar/src/oauth-login.ts
@@ -20,16 +20,8 @@ import {
   type FetchLike,
   type OAuthClientConfig,
 } from "@corbits/oauth-core";
-import {
-  codexOAuthConfig,
-  exchangeCodexCode,
-  CODEX_REDIRECT_URI,
-} from "@corbits/codex-provider";
-import {
-  exchangeXaiCode,
-  xaiOAuthConfig,
-  XAI_REDIRECT_URI,
-} from "@corbits/xai-provider";
+import { codexOAuthConfig, exchangeCodexCode, CODEX_REDIRECT_URI } from "@corbits/codex-provider";
+import { exchangeXaiCode, xaiOAuthConfig, XAI_REDIRECT_URI } from "@corbits/xai-provider";
 
 /** The sidecar-hosted login outcome: the shape `@intx/types`'s
  * `OAuthLoginTokens` wire arm carries. */
@@ -62,10 +54,7 @@ function isLoopbackHost(host: string): boolean {
  * URI, asserting the loopback + pinned-port contract up front: a bind
  * failure later is genuinely "port already in use", never "we drifted onto
  * some other port". */
-function callbackConfig(
-  redirectUri: string,
-  pinnedPort: number,
-): CallbackServerConfig {
+function callbackConfig(redirectUri: string, pinnedPort: number): CallbackServerConfig {
   const url = new URL(redirectUri);
   if (url.protocol !== "http:" || !isLoopbackHost(url.hostname)) {
     throw new Error(
@@ -124,12 +113,9 @@ export function createOAuthLoopbackLoginService(deps?: {
       const handle = await startOAuthLogin(
         { profile: connectorId, signal: new AbortController().signal, now },
         {
-          startCallbackServer: (state) =>
-            startCallbackServer(state, connector.callback),
-          buildAuthorizeUrl: (pkce, state) =>
-            buildAuthorizeUrl(connector.oauthConfig, pkce, state),
-          exchangeCode: (code, verifier, at) =>
-            connector.exchange(code, verifier, at),
+          startCallbackServer: (state) => startCallbackServer(state, connector.callback),
+          buildAuthorizeUrl: (pkce, state) => buildAuthorizeUrl(connector.oauthConfig, pkce, state),
+          exchangeCode: (code, verifier, at) => connector.exchange(code, verifier, at),
           // Persistence is the hub's job: the connect pipeline stores the
           // credential row, so the staged `commit` here is a no-op that
           // exists only to satisfy the oauth-core login contract.
diff --git a/apps/sidecar/src/originating-workbench.test.ts b/apps/sidecar/src/originating-workbench.test.ts
index e560090089..c74d3fd52b 100644
--- a/apps/sidecar/src/originating-workbench.test.ts
+++ b/apps/sidecar/src/originating-workbench.test.ts
@@ -18,12 +18,10 @@ function mailRequest(from: string) {
 }
 
 test("extractOriginatingWorkbenchId reads the From local-part", () => {
-  expect(extractOriginatingWorkbenchId("chan_room_a@alice.localhost")).toBe(
-    "chan_room_a",
+  expect(extractOriginatingWorkbenchId("chan_room_a@alice.localhost")).toBe("chan_room_a");
+  expect(extractOriginatingWorkbenchId("Workbench <ins_workbench1@alice.localhost>")).toBe(
+    "ins_workbench1",
   );
-  expect(
-    extractOriginatingWorkbenchId("Workbench <ins_workbench1@alice.localhost>"),
-  ).toBe("ins_workbench1");
 });
 
 test("extractOriginatingWorkbenchId is undefined for an empty or bare From", () => {
@@ -32,19 +30,13 @@ test("extractOriginatingWorkbenchId is undefined for an empty or bare From", ()
 });
 
 test("resolveOriginatingWorkbenchId uses the unscoped sentinel when From is missing", () => {
-  expect(resolveOriginatingWorkbenchId(undefined)).toBe(
-    UNSCOPED_ORIGINATING_WORKBENCH_ID,
-  );
+  expect(resolveOriginatingWorkbenchId(undefined)).toBe(UNSCOPED_ORIGINATING_WORKBENCH_ID);
   expect(resolveOriginatingWorkbenchId("chan_a")).toBe("chan_a");
 });
 
 test("originatingWorkbenchIdFromRequest is a function of this request's mail", () => {
-  expect(
-    originatingWorkbenchIdFromRequest(mailRequest("chan_a@alice.localhost")),
-  ).toBe("chan_a");
-  expect(
-    originatingWorkbenchIdFromRequest(mailRequest("chan_b@alice.localhost")),
-  ).toBe("chan_b");
+  expect(originatingWorkbenchIdFromRequest(mailRequest("chan_a@alice.localhost"))).toBe("chan_a");
+  expect(originatingWorkbenchIdFromRequest(mailRequest("chan_b@alice.localhost"))).toBe("chan_b");
 });
 
 test("a resumed input delivers the decision's mail, not the original input", () => {
@@ -61,9 +53,7 @@ test("a resumed input delivers the decision's mail, not the original input", ()
 });
 
 test("a request without mail names no room", () => {
-  expect(originatingWorkbenchIdFromRequest({ input: "plain text" })).toBe(
-    undefined,
-  );
+  expect(originatingWorkbenchIdFromRequest({ input: "plain text" })).toBe(undefined);
   expect(
     originatingWorkbenchIdFromRequest({
       input: mailRequest("chan_a@alice.localhost").input,
diff --git a/apps/sidecar/src/originating-workbench.ts b/apps/sidecar/src/originating-workbench.ts
index db20942586..8754d5a573 100644
--- a/apps/sidecar/src/originating-workbench.ts
+++ b/apps/sidecar/src/originating-workbench.ts
@@ -20,9 +20,7 @@ export const UNSCOPED_ORIGINATING_WORKBENCH_ID = "_unscoped";
  * Local-part of a From header value. Chat encodes the originating workbench
  * id there; anything else (empty, unparseable) is undefined.
  */
-export function extractOriginatingWorkbenchId(
-  from: string,
-): string | undefined {
+export function extractOriginatingWorkbenchId(from: string): string | undefined {
   if (from.trim() === "") return undefined;
   try {
     const spec = extractAddrSpec(from);
@@ -34,9 +32,7 @@ export function extractOriginatingWorkbenchId(
   }
 }
 
-export function resolveOriginatingWorkbenchId(
-  fromWorkbenchId: string | undefined,
-): string {
+export function resolveOriginatingWorkbenchId(fromWorkbenchId: string | undefined): string {
   return fromWorkbenchId !== undefined && fromWorkbenchId.length > 0
     ? fromWorkbenchId
     : UNSCOPED_ORIGINATING_WORKBENCH_ID;
@@ -52,7 +48,5 @@ export function originatingWorkbenchIdFromRequest(
 ): string | undefined {
   const delivered = req.resume === undefined ? req.input : req.resume.decision;
   if (!isMail(delivered)) return undefined;
-  return resolveOriginatingWorkbenchId(
-    extractOriginatingWorkbenchId(delivered.headers.from),
-  );
+  return resolveOriginatingWorkbenchId(extractOriginatingWorkbenchId(delivered.headers.from));
 }
diff --git a/apps/sidecar/src/run-grants.test.ts b/apps/sidecar/src/run-grants.test.ts
index 18fdf0cca9..f20774aa9f 100644
--- a/apps/sidecar/src/run-grants.test.ts
+++ b/apps/sidecar/src/run-grants.test.ts
@@ -9,9 +9,7 @@ import { readRunGrants, runGrantsPath } from "./run-grants";
 const tempDirs: string[] = [];
 
 afterEach(async () => {
-  await Promise.all(
-    tempDirs.splice(0).map((dir) => rm(dir, { recursive: true, force: true })),
-  );
+  await Promise.all(tempDirs.splice(0).map((dir) => rm(dir, { recursive: true, force: true })));
 });
 
 async function makeRepoStore(): Promise<{ store: RepoStore; dir: string }> {
diff --git a/apps/sidecar/src/sidecar-materialization-config.ts b/apps/sidecar/src/sidecar-materialization-config.ts
index b91480c108..2d26cba8ea 100644
--- a/apps/sidecar/src/sidecar-materialization-config.ts
+++ b/apps/sidecar/src/sidecar-materialization-config.ts
@@ -54,9 +54,7 @@ export function readRegistries(): ReadonlyMap<string, RegistryConfig> {
   }
   const validated = RegistryConfigEnvArray(parsed);
   if (validated instanceof type.errors) {
-    throw new Error(
-      `SIDECAR_TOOL_REGISTRIES failed validation: ${validated.summary}`,
-    );
+    throw new Error(`SIDECAR_TOOL_REGISTRIES failed validation: ${validated.summary}`);
   }
   const out = new Map<string, RegistryConfig>();
   for (const entry of validated) {
diff --git a/apps/sidecar/src/signing-keypair.ts b/apps/sidecar/src/signing-keypair.ts
index cebc309bbb..8d3932dc48 100644
--- a/apps/sidecar/src/signing-keypair.ts
+++ b/apps/sidecar/src/signing-keypair.ts
@@ -43,16 +43,11 @@ async function exists(filePath: string): Promise<boolean> {
  * which of the two files rotted, so we halt and let an operator decide
  * (restore the seed, or remove the directory to mint a fresh identity).
  */
-export async function loadOrMintSidecarKeypair(
-  signingDir: string,
-): Promise<KeyPair> {
+export async function loadOrMintSidecarKeypair(signingDir: string): Promise<KeyPair> {
   const privateKeyPath = path.join(signingDir, PRIVATE_KEY_FILENAME);
   const publicKeyPath = path.join(signingDir, PUBLIC_KEY_FILENAME);
 
-  const [havePriv, havePub] = await Promise.all([
-    exists(privateKeyPath),
-    exists(publicKeyPath),
-  ]);
+  const [havePriv, havePub] = await Promise.all([exists(privateKeyPath), exists(publicKeyPath)]);
   if (havePriv !== havePub) {
     throw new Error(
       `sidecar signing keypair under ${signingDir} is partial: privateKey=${String(havePriv)} publicKey=${String(havePub)}; remove the directory to reset`,
diff --git a/apps/sidecar/src/source-asset-delivery.ts b/apps/sidecar/src/source-asset-delivery.ts
index dd2080b139..28e87e13a0 100644
--- a/apps/sidecar/src/source-asset-delivery.ts
+++ b/apps/sidecar/src/source-asset-delivery.ts
@@ -59,12 +59,7 @@ export async function indexAssetPackIntoGitDir(args: {
   };
 
   try {
-    await indexPackIntoGitDir(
-      tempDir,
-      pack,
-      commitSha,
-      DEFAULT_PACK_MATERIALIZATION_LIMITS,
-    );
+    await indexPackIntoGitDir(tempDir, pack, commitSha, DEFAULT_PACK_MATERIALIZATION_LIMITS);
   } catch (err) {
     await cleanupTemp();
     throw err;
@@ -130,9 +125,7 @@ export function sourceAssetGitDir(gitDirRoot: string, assetId: string): string {
   // resolve to the shared root itself. Mirrors `applyAssetPack`'s all-dots
   // segment guard.
   if (!SAFE_ASSET_ID.test(assetId) || /^\.+$/.test(assetId)) {
-    throw new Error(
-      `source-asset delivery: unsafe assetId ${JSON.stringify(assetId)}`,
-    );
+    throw new Error(`source-asset delivery: unsafe assetId ${JSON.stringify(assetId)}`);
   }
   return path.join(gitDirRoot, assetId);
 }
diff --git a/apps/sidecar/src/step-agent-tools.test.ts b/apps/sidecar/src/step-agent-tools.test.ts
index 217b6ec891..b4ea854bdb 100644
--- a/apps/sidecar/src/step-agent-tools.test.ts
+++ b/apps/sidecar/src/step-agent-tools.test.ts
@@ -21,10 +21,7 @@ import type { GrantRule } from "@intx/authz";
 import type { CredentialDelivery } from "@intx/types/sidecar";
 import type { CredentialWiring } from "@intx/workflow-host";
 
-import {
-  consumerBindings,
-  type StepCredentialContext,
-} from "./step-agent-tools";
+import { consumerBindings, type StepCredentialContext } from "./step-agent-tools";
 
 const CONSUMER = toolConsumer("@corbits/granola-tools");
 const OTHER_CONSUMER = toolConsumer("@corbits/linear-tools");
@@ -46,8 +43,7 @@ function providersWithCapturedAuth(): {
   const providers = createCredentialProviderRegistry([
     createHttpCredentialProvider({
       fetch: async (_input, init) => {
-        captured =
-          (init?.headers as Headers | undefined)?.get("authorization") ?? null;
+        captured = (init?.headers as Headers | undefined)?.get("authorization") ?? null;
         return new Response("{}", { status: 200 });
       },
     }),
@@ -57,9 +53,7 @@ function providersWithCapturedAuth(): {
 
 function delivery(secret: string): CredentialDelivery {
   return {
-    bindings: [
-      { handle: "granola", credentialId: CREDENTIAL_ID, consumer: CONSUMER },
-    ],
+    bindings: [{ handle: "granola", credentialId: CREDENTIAL_ID, consumer: CONSUMER }],
     materials: [
       {
         credentialId: CREDENTIAL_ID,
@@ -178,9 +172,7 @@ describe("createCredentialCapability composed over a fake CredentialWiring", ()
       grants: [],
     });
 
-    await expect(capability.resolve("granola")).rejects.toThrow(
-      /no credential is bound to handle/,
-    );
+    await expect(capability.resolve("granola")).rejects.toThrow(/no credential is bound to handle/);
   });
 
   test("a bound handle with no matching grant fails closed even though the binding exists", async () => {
@@ -196,8 +188,6 @@ describe("createCredentialCapability composed over a fake CredentialWiring", ()
       grants: [...context.wiring.resolveStepGrants(STEP_ID)] as GrantRule[],
     });
 
-    await expect(capability.resolve("granola")).rejects.toThrow(
-      /not authorized to use credential/,
-    );
+    await expect(capability.resolve("granola")).rejects.toThrow(/not authorized to use credential/);
   });
 });
diff --git a/apps/sidecar/src/step-agent-tools.ts b/apps/sidecar/src/step-agent-tools.ts
index dca5ccc9f8..ab1806e050 100644
--- a/apps/sidecar/src/step-agent-tools.ts
+++ b/apps/sidecar/src/step-agent-tools.ts
@@ -94,10 +94,7 @@ const STEP_TOOLS = Symbol("intx.sidecar.step-tools");
 // through `Reflect.get`/`Reflect.set` so neither site needs a type
 // assertion: `BaseEnv` is an interface without a symbol index
 // signature, so a structural cast would otherwise be required.
-function setStepToolSlot(
-  env: object,
-  materialization: StepToolMaterialization,
-): void {
+function setStepToolSlot(env: object, materialization: StepToolMaterialization): void {
   Reflect.set(env, STEP_TOOLS, materialization);
 }
 
@@ -112,9 +109,7 @@ function getStepToolSlot(env: object): StepToolMaterialization | undefined {
   return value;
 }
 
-function isStepToolMaterialization(
-  value: unknown,
-): value is StepToolMaterialization {
+function isStepToolMaterialization(value: unknown): value is StepToolMaterialization {
   return (
     typeof value === "object" &&
     value !== null &&
@@ -142,15 +137,8 @@ export interface StepCredentialContext {
 
 const STEP_CREDENTIALS = Symbol("intx.sidecar.step-credentials");
 
-function isStepCredentialContext(
-  value: unknown,
-): value is StepCredentialContext {
-  return (
-    typeof value === "object" &&
-    value !== null &&
-    "wiring" in value &&
-    "stepId" in value
-  );
+function isStepCredentialContext(value: unknown): value is StepCredentialContext {
+  return typeof value === "object" && value !== null && "wiring" in value && "stepId" in value;
 }
 
 /**
@@ -160,10 +148,7 @@ function isStepCredentialContext(
  * `buildEnv` once the `CredentialWiring` the child's runtime carries is
  * known.
  */
-export function attachStepCredentials(
-  env: object,
-  context: StepCredentialContext,
-): void {
+export function attachStepCredentials(env: object, context: StepCredentialContext): void {
   Reflect.set(env, STEP_CREDENTIALS, context);
 }
 
@@ -171,9 +156,7 @@ export function attachStepCredentials(
  * Read back the credential context `attachStepCredentials` set on the
  * per-step env.
  */
-export function getStepCredentialContext(
-  env: object,
-): StepCredentialContext | undefined {
+export function getStepCredentialContext(env: object): StepCredentialContext | undefined {
   const value: unknown = Reflect.get(env, STEP_CREDENTIALS);
   if (value === undefined) return undefined;
   if (!isStepCredentialContext(value)) {
@@ -374,10 +357,7 @@ export function attachStepTools(
  */
 export function createToolBearingAgentFactory(deps: {
   providers: CredentialProviderRegistry;
-}): <EnvReq extends BaseEnv>(
-  def: AgentDefinition<EnvReq>,
-  env: EnvReq,
-) => Promise<Agent> {
+}): <EnvReq extends BaseEnv>(def: AgentDefinition<EnvReq>, env: EnvReq) => Promise<Agent> {
   return async <EnvReq extends BaseEnv>(
     def: AgentDefinition<EnvReq>,
     env: EnvReq,
@@ -406,9 +386,7 @@ export function createToolBearingAgentFactory(deps: {
     // way.
     const credentialContext = getStepCredentialContext(env);
     const credentialCapabilities = new Map<string, HostCredentialCapability>();
-    function credentialCapabilityFor(
-      consumer: string,
-    ): HostCredentialCapability {
+    function credentialCapabilityFor(consumer: string): HostCredentialCapability {
       const existing = credentialCapabilities.get(consumer);
       if (existing !== undefined) return existing;
       const bindings = consumerBindings(credentialContext, consumer);
@@ -449,10 +427,7 @@ export function createToolBearingAgentFactory(deps: {
             : undefined;
           const scopedEnv: BaseEnv & {
             credentials?: HostCredentialCapability;
-          } =
-            credentials !== undefined
-              ? { ...factoryEnv, credentials }
-              : factoryEnv;
+          } = credentials !== undefined ? { ...factoryEnv, credentials } : factoryEnv;
           const bundle = annotated(scopedEnv);
           if (bundle.dispose !== undefined) {
             capturedDisposers.add(bundle.dispose);
@@ -531,8 +506,8 @@ export function createToolBearingAgentFactory(deps: {
     // directly, only overridden -- so the first credential-requiring
     // factory's capability satisfies the presence check for all of
     // them.
-    const credentialRequiringFactory = materialization.factories.find(
-      (factory) => factory.requires.includes("credentials"),
+    const credentialRequiringFactory = materialization.factories.find((factory) =>
+      factory.requires.includes("credentials"),
     );
     if (credentialRequiringFactory !== undefined) {
       chainEnv = {
@@ -678,9 +653,7 @@ export function stepInferenceMaterialResolver(
 ): CredentialMaterialResolver {
   return (credentialId) => {
     const current = context.wiring.materialRef.current;
-    const material = current?.materials.find(
-      (entry) => entry.credentialId === credentialId,
-    );
+    const material = current?.materials.find((entry) => entry.credentialId === credentialId);
     if (material === undefined) {
       throw new Error(
         `sidecar workflow-child step ${JSON.stringify(context.stepId)}: inference source credential ${credentialId} has no delivered material (revoked, rotated away, or never delivered)`,
@@ -719,10 +692,7 @@ function wrapAgentClose(agent: Agent, teardown: () => Promise<void>): Agent {
   };
 }
 
-async function disposeAll(
-  instances: readonly unknown[],
-  context: string,
-): Promise<unknown[]> {
+async function disposeAll(instances: readonly unknown[], context: string): Promise<unknown[]> {
   const failures: unknown[] = [];
   for (const instance of instances) {
     const dispose = pluginDispose(instance);
diff --git a/apps/sidecar/src/step-credential-capabilities.test.ts b/apps/sidecar/src/step-credential-capabilities.test.ts
index 8addf59f12..847ad00e9a 100644
--- a/apps/sidecar/src/step-credential-capabilities.test.ts
+++ b/apps/sidecar/src/step-credential-capabilities.test.ts
@@ -33,8 +33,7 @@ function trackingProvider(): {
 }
 
 function grant(
-  overrides: Partial<GrantRule> &
-    Pick<GrantRule, "resource" | "action" | "effect">,
+  overrides: Partial<GrantRule> & Pick<GrantRule, "resource" | "action" | "effect">,
 ): GrantRule {
   return {
     id: "grt_test",
@@ -100,21 +99,18 @@ describe("buildCredentialCapabilities", () => {
         ],
       },
     };
-    const caps = buildCredentialCapabilities(
-      [fac("@intx/pkg-a", []), fac("@intx/pkg-b", [])],
-      {
-        materialCell: cell,
-        resolveGrants: () => [
-          grant({
-            resource: "credential:c1",
-            action: "use",
-            effect: "allow",
-            conditions: { tool: toolConsumer("@intx/pkg-a") },
-          }),
-        ],
-        providers: createCredentialProviderRegistry([track.provider]),
-      },
-    );
+    const caps = buildCredentialCapabilities([fac("@intx/pkg-a", []), fac("@intx/pkg-b", [])], {
+      materialCell: cell,
+      resolveGrants: () => [
+        grant({
+          resource: "credential:c1",
+          action: "use",
+          effect: "allow",
+          conditions: { tool: toolConsumer("@intx/pkg-a") },
+        }),
+      ],
+      providers: createCredentialProviderRegistry([track.provider]),
+    });
 
     const capA = caps.get("@intx/pkg-a");
     const capB = caps.get("@intx/pkg-b");
@@ -134,17 +130,12 @@ describe("buildCredentialCapabilities", () => {
     const track = trackingProvider();
     const cell = { current: { bindings: [], materials: [] } };
     expect(() =>
-      buildCredentialCapabilities(
-        [fac("@intx/pkg-a", [{ handle: "needed" }])],
-        {
-          materialCell: cell,
-          resolveGrants: () => [],
-          providers: createCredentialProviderRegistry([track.provider]),
-        },
-      ),
-    ).toThrow(
-      /declares credential handle\(s\) that no binding resolves: needed/,
-    );
+      buildCredentialCapabilities([fac("@intx/pkg-a", [{ handle: "needed" }])], {
+        materialCell: cell,
+        resolveGrants: () => [],
+        providers: createCredentialProviderRegistry([track.provider]),
+      }),
+    ).toThrow(/declares credential handle\(s\) that no binding resolves: needed/);
   });
 
   test("dropping a credential's material starves an already-shaped handle", async () => {
@@ -185,8 +176,7 @@ describe("buildCredentialCapabilities", () => {
 
     await capA.resolve("cred");
     const shaped = track.shapes[0];
-    if (shaped === undefined)
-      throw new Error("expected the handle to be shaped");
+    if (shaped === undefined) throw new Error("expected the handle to be shaped");
 
     // Live read works while the material is delivered.
     expect(shaped.readCurrentMaterial()).toEqual({ secret: "sk-1" });
@@ -239,8 +229,7 @@ describe("buildCredentialCapabilities", () => {
     if (capA === undefined) throw new Error("expected a capability for pkg-a");
     await capA.resolve("cred");
     const shaped = track.shapes[0];
-    if (shaped === undefined)
-      throw new Error("expected the handle to be shaped");
+    if (shaped === undefined) throw new Error("expected the handle to be shaped");
 
     // A rotation may change the secret, never the provider/origin. A live entry
     // whose origin drifted is refused rather than followed.
@@ -255,9 +244,7 @@ describe("buildCredentialCapabilities", () => {
         },
       ],
     };
-    expect(() => shaped.readCurrentMaterial()).toThrow(
-      /changed provider\/origin/,
-    );
+    expect(() => shaped.readCurrentMaterial()).toThrow(/changed provider\/origin/);
   });
 
   test("a descriptor with no backing material fails the build closed", () => {
diff --git a/apps/sidecar/src/step-credential-capabilities.ts b/apps/sidecar/src/step-credential-capabilities.ts
index b988b4f5ce..0c122b47e3 100644
--- a/apps/sidecar/src/step-credential-capabilities.ts
+++ b/apps/sidecar/src/step-credential-capabilities.ts
@@ -98,11 +98,7 @@ export function buildCredentialCapabilities(
     // Fail the launch closed if the package declares a handle no binding
     // resolves for it -- the tool needs a credential the definition never
     // bound. Checked against THIS consumer's bound set only (invariant 2).
-    reconcileDeclaredCredentials(
-      consumer,
-      stf.declaredCredentials,
-      new Set(bindings.keys()),
-    );
+    reconcileDeclaredCredentials(consumer, stf.declaredCredentials, new Set(bindings.keys()));
 
     if (stf.declaredCredentials.length === 0 && bindings.size === 0) {
       continue;
@@ -192,9 +188,7 @@ function makeReadCurrentMaterial(args: {
         `credential material for ${credentialId} (consumer ${consumer}) is not available: the delivery cell is empty`,
       );
     }
-    const material = delivery.materials.find(
-      (entry) => entry.credentialId === credentialId,
-    );
+    const material = delivery.materials.find((entry) => entry.credentialId === credentialId);
     if (material === undefined) {
       throw new Error(
         `credential material for ${credentialId} (consumer ${consumer}) is no longer delivered: a re-push dropped it (rotated away or revoked)`,
diff --git a/apps/sidecar/src/tool-materialization.test.ts b/apps/sidecar/src/tool-materialization.test.ts
index 7838339a3d..d3facada1a 100644
--- a/apps/sidecar/src/tool-materialization.test.ts
+++ b/apps/sidecar/src/tool-materialization.test.ts
@@ -13,18 +13,14 @@ import {
 const tempDirs: string[] = [];
 
 async function tempDir(): Promise<string> {
-  const d = await fs.promises.mkdtemp(
-    path.join(os.tmpdir(), "default-harness-test-"),
-  );
+  const d = await fs.promises.mkdtemp(path.join(os.tmpdir(), "default-harness-test-"));
   tempDirs.push(d);
   return d;
 }
 
 afterEach(async () => {
   const dirs = tempDirs.splice(0);
-  await Promise.all(
-    dirs.map((d) => fs.promises.rm(d, { recursive: true, force: true })),
-  );
+  await Promise.all(dirs.map((d) => fs.promises.rm(d, { recursive: true, force: true })));
 });
 
 describe("materializeToolPackages — manifest.invalid gate", () => {
@@ -80,10 +76,7 @@ describe("materializeToolPackages — manifest.invalid gate", () => {
     // writer must not push the bytes through JSON.stringify, which
     // would double-encode the string and erase the original-input
     // evidence the audit file exists to preserve.
-    const persisted = await fs.promises.readFile(
-      path.join(attemptDir, "manifest.json"),
-      "utf-8",
-    );
+    const persisted = await fs.promises.readFile(path.join(attemptDir, "manifest.json"), "utf-8");
     expect(persisted).toBe(corrupt);
 
     const errorJson = JSON.parse(
@@ -131,10 +124,7 @@ describe("materializeToolPackages — manifest.invalid gate", () => {
     // The audit trail records the bytes-as-supplied for both
     // failure modes, so a future investigator can replay the
     // same input against a newer validator.
-    const persisted = await fs.promises.readFile(
-      path.join(attemptDir, "manifest.json"),
-      "utf-8",
-    );
+    const persisted = await fs.promises.readFile(path.join(attemptDir, "manifest.json"), "utf-8");
     expect(persisted).toBe(wrongShape);
 
     const errorJson = JSON.parse(
@@ -149,21 +139,15 @@ describe("materializeToolPackages — manifest.invalid gate", () => {
     });
 
     test("accepts a bare id for backward compatibility with pre-versioned files", () => {
-      expect(parseActiveDeployId("legacy-deploy-id", "/dummy")).toBe(
-        "legacy-deploy-id",
-      );
+      expect(parseActiveDeployId("legacy-deploy-id", "/dummy")).toBe("legacy-deploy-id");
     });
 
     test("rejects an unknown version prefix loudly", () => {
-      expect(() => parseActiveDeployId("v2:abc", "/dummy")).toThrow(
-        /unknown version prefix/,
-      );
+      expect(() => parseActiveDeployId("v2:abc", "/dummy")).toThrow(/unknown version prefix/);
     });
 
     test("rejects a v1-prefixed but empty id", () => {
-      expect(() => parseActiveDeployId("v1:", "/dummy")).toThrow(
-        /carries the v1 prefix but no id/,
-      );
+      expect(() => parseActiveDeployId("v1:", "/dummy")).toThrow(/carries the v1 prefix but no id/);
     });
 
     test("rejects an empty file", () => {
@@ -253,10 +237,7 @@ describe("materializeToolPackages — manifest.invalid gate", () => {
       expect(outcome.degraded).toBe(true);
       expect(outcome.error).toBeInstanceOf(Error);
 
-      const dirtyContents = await fs.promises.readFile(
-        `${activeIdFile}.dirty`,
-        "utf-8",
-      );
+      const dirtyContents = await fs.promises.readFile(`${activeIdFile}.dirty`, "utf-8");
       expect(dirtyContents).toBe("v1:new-id-42");
     });
   });
@@ -270,10 +251,7 @@ describe("materializeToolPackages — manifest.invalid gate", () => {
     const storeDir = await tempDir();
     const instanceDir = path.join(storeDir, "tool-packages");
     await fs.promises.mkdir(instanceDir, { recursive: true });
-    await fs.promises.writeFile(
-      path.join(instanceDir, "active-deploy-id"),
-      "v1:stale-recorded",
-    );
+    await fs.promises.writeFile(path.join(instanceDir, "active-deploy-id"), "v1:stale-recorded");
     await fs.promises.writeFile(
       path.join(instanceDir, "active-deploy-id.dirty"),
       "v1:truth-from-marker",
@@ -304,10 +282,7 @@ describe("materializeToolPackages — manifest.invalid gate", () => {
       throw new Error("no attempt dir was created");
     }
     const errorJson = JSON.parse(
-      await fs.promises.readFile(
-        path.join(auditRoot, attemptDirName, "error.json"),
-        "utf-8",
-      ),
+      await fs.promises.readFile(path.join(auditRoot, attemptDirName, "error.json"), "utf-8"),
     );
     expect(errorJson.previousDeployId).toBe("truth-from-marker");
   });
diff --git a/apps/sidecar/src/tool-materialization.ts b/apps/sidecar/src/tool-materialization.ts
index ed9c32ae7f..d92c04844f 100644
--- a/apps/sidecar/src/tool-materialization.ts
+++ b/apps/sidecar/src/tool-materialization.ts
@@ -80,9 +80,7 @@ export const DEFAULT_TOOL_REGISTRIES_JSON = JSON.stringify([
  * on malformed JSON, on a wrong-shape payload, and on duplicate
  * registry names.
  */
-export function parseToolRegistries(
-  raw: string,
-): ReadonlyMap<string, RegistryConfig> {
+export function parseToolRegistries(raw: string): ReadonlyMap<string, RegistryConfig> {
   if (raw.trim() === "") {
     throw new Error(
       "SIDECAR_TOOL_REGISTRIES is set but empty — unset the variable to use the default npmjs registry",
@@ -99,9 +97,7 @@ export function parseToolRegistries(
   }
   const validated = RegistryConfigEnvArray(parsed);
   if (validated instanceof type.errors) {
-    throw new Error(
-      `SIDECAR_TOOL_REGISTRIES failed validation: ${validated.summary}`,
-    );
+    throw new Error(`SIDECAR_TOOL_REGISTRIES failed validation: ${validated.summary}`);
   }
   const out = new Map<string, RegistryConfig>();
   for (const entry of validated) {
@@ -111,9 +107,7 @@ export function parseToolRegistries(
       );
     }
     const config: RegistryConfig =
-      entry.auth !== undefined
-        ? { url: entry.url, auth: entry.auth }
-        : { url: entry.url };
+      entry.auth !== undefined ? { url: entry.url, auth: entry.auth } : { url: entry.url };
     out.set(entry.name, config);
   }
   return out;
@@ -280,9 +274,7 @@ export async function materializeToolPackages(args: {
   // committed deploy to "fresh instance".
   let previousDeployId = NO_PRIOR_DEPLOY_ID;
   try {
-    const dirtyRaw = (
-      await fs.promises.readFile(activeIdDirtyFile, "utf-8")
-    ).trim();
+    const dirtyRaw = (await fs.promises.readFile(activeIdDirtyFile, "utf-8")).trim();
     const dirtyId = parseActiveDeployId(dirtyRaw, activeIdDirtyFile);
     logger.warn`active-deploy-id dirty marker present at ${activeIdDirtyFile}; the prior apply could not durably record the committed deploy id and the boot is reconciling from ${dirtyId}`;
     previousDeployId = dirtyId;
@@ -328,9 +320,7 @@ export async function materializeToolPackages(args: {
         occurredAt,
       },
     });
-    return new Error(
-      `tool-package apply rejected (manifest.invalid): ${reason}`,
-    );
+    return new Error(`tool-package apply rejected (manifest.invalid): ${reason}`);
   };
 
   let parsedManifest: unknown;
@@ -343,9 +333,7 @@ export async function materializeToolPackages(args: {
   }
   const validated = ToolPackageManifest(parsedManifest);
   if (validated instanceof type.errors) {
-    throw await rejectManifestInvalid(
-      `schema validation failed: ${validated.summary}`,
-    );
+    throw await rejectManifestInvalid(`schema validation failed: ${validated.summary}`);
   }
 
   const cache = createTarballCache({
@@ -391,9 +379,7 @@ export async function materializeToolPackages(args: {
       manifestBytes: rawManifestBytes,
       failure: result,
     });
-    throw new Error(
-      `tool-package apply rejected (${result.category}): ${result.message}`,
-    );
+    throw new Error(`tool-package apply rejected (${result.category}): ${result.message}`);
   }
 
   // Apply staged: the loader built the new deploy at
@@ -432,10 +418,9 @@ export async function materializeToolPackages(args: {
         occurredAt,
       },
     });
-    throw new Error(
-      `tool-package apply rejected (apply.previous-rotation.failed): ${message}`,
-      { cause: err },
-    );
+    throw new Error(`tool-package apply rejected (apply.previous-rotation.failed): ${message}`, {
+      cause: err,
+    });
   }
   return {
     factories: collectFactories(result.loaded),
@@ -555,10 +540,7 @@ async function persistActiveDeployId(
  *
  * Exported for direct unit testing of the cleanup contract.
  */
-export async function clearDirtyMarker(
-  activeIdFile: string,
-  reason: string,
-): Promise<void> {
+export async function clearDirtyMarker(activeIdFile: string, reason: string): Promise<void> {
   try {
     await fs.promises.unlink(`${activeIdFile}.dirty`);
   } catch (err) {
@@ -652,12 +634,7 @@ async function writeRejectedApplyAudit(args: {
     occurredAt: string;
   };
 }): Promise<void> {
-  const dir = path.join(
-    args.storeDir,
-    "audit",
-    "rejected-applies",
-    args.attemptId,
-  );
+  const dir = path.join(args.storeDir, "audit", "rejected-applies", args.attemptId);
   await fs.promises.mkdir(dir, { recursive: true });
   // fsync the files and their parent directory before returning so the
   // rejection's evidence is durable before the caller throws and tears
@@ -669,10 +646,7 @@ async function writeRejectedApplyAudit(args: {
   // should not turn into a second cascading failure on an already-
   // failing apply.
   await fsyncWriteFile(path.join(dir, "manifest.json"), args.manifestBytes);
-  await fsyncWriteFile(
-    path.join(dir, "error.json"),
-    JSON.stringify(args.failure, null, 2),
-  );
+  await fsyncWriteFile(path.join(dir, "error.json"), JSON.stringify(args.failure, null, 2));
   try {
     const dirHandle = await fs.promises.open(dir, "r");
     try {
@@ -685,10 +659,7 @@ async function writeRejectedApplyAudit(args: {
   }
 }
 
-async function fsyncWriteFile(
-  filePath: string,
-  contents: string,
-): Promise<void> {
+async function fsyncWriteFile(filePath: string, contents: string): Promise<void> {
   const handle = await fs.promises.open(filePath, "w");
   try {
     await handle.writeFile(contents);
@@ -702,9 +673,7 @@ async function fsyncWriteFile(
   }
 }
 
-function collectFactories(
-  loaded: readonly LoadedToolPackage[],
-): readonly LoadedToolFactory[] {
+function collectFactories(loaded: readonly LoadedToolPackage[]): readonly LoadedToolFactory[] {
   const out: LoadedToolFactory[] = [];
   for (const pkg of loaded) {
     for (const f of pkg.factories) out.push(f);
diff --git a/apps/sidecar/src/workflow-closure-apply.ts b/apps/sidecar/src/workflow-closure-apply.ts
index 76a2aacfa2..fdf6e91a14 100644
--- a/apps/sidecar/src/workflow-closure-apply.ts
+++ b/apps/sidecar/src/workflow-closure-apply.ts
@@ -165,9 +165,7 @@ export async function applyFrozenWorkflowClosure(
     registries: args.registries,
     host: { os: process.platform, cpu: process.arch },
     maxRegistryTarballBytes: args.registryMaxTarballBytes,
-    ...(args.fetchTarball !== undefined
-      ? { fetchTarball: args.fetchTarball }
-      : {}),
+    ...(args.fetchTarball !== undefined ? { fetchTarball: args.fetchTarball } : {}),
   });
 
   // Apply EXACTLY the frozen entries. `topLevel` is emptied so `applyAtomic`
@@ -209,22 +207,17 @@ export async function applyFrozenWorkflowClosure(
   // under the same name@version reimports rather than resolving to the prior
   // instance.
   const workflowEntry = args.closure.entries.find(
-    (entry) =>
-      entry.name === workflowPin.name && entry.version === workflowPin.version,
+    (entry) => entry.name === workflowPin.name && entry.version === workflowPin.version,
   );
 
   const definition = await loadWorkflowDefinitionFromClosure({
     packageDir,
     ...(workflowEntry !== undefined
       ? {
-          importCacheKey: getToolPackageSourceContentIdentity(
-            workflowEntry.source,
-          ),
+          importCacheKey: getToolPackageSourceContentIdentity(workflowEntry.source),
         }
       : {}),
-    ...(args.importModule !== undefined
-      ? { importModule: args.importModule }
-      : {}),
+    ...(args.importModule !== undefined ? { importModule: args.importModule } : {}),
   });
 
   logger.debug`applied frozen workflow closure ${workflowPin.name}@${workflowPin.version}: loaded definition ${definition.id}`;
diff --git a/apps/sidecar/src/workflow-closure-materialization.ts b/apps/sidecar/src/workflow-closure-materialization.ts
index 789d88db9e..8b6622f58e 100644
--- a/apps/sidecar/src/workflow-closure-materialization.ts
+++ b/apps/sidecar/src/workflow-closure-materialization.ts
@@ -164,9 +164,7 @@ export function createWorkflowClosureMaterializer(
         registries: config.registries,
         host,
         maxRegistryTarballBytes: config.registryMaxTarballBytes,
-        ...(config.fetchTarball !== undefined
-          ? { fetchTarball: config.fetchTarball }
-          : {}),
+        ...(config.fetchTarball !== undefined ? { fetchTarball: config.fetchTarball } : {}),
       });
 
       // Materialize any inline-delivered assets under the probe scratch:
@@ -221,11 +219,7 @@ export function createWorkflowClosureMaterializer(
       });
 
       const storeDir = path.join(scratchDir, "store");
-      const packageDir = storeEntryDir(
-        storeDir,
-        workflowPin.name,
-        workflowPin.version,
-      );
+      const packageDir = storeEntryDir(storeDir, workflowPin.name, workflowPin.version);
 
       await assertFrameEntryMatchesPackage(packageDir, frame.entry);
 
diff --git a/apps/sidecar/src/workflow-deployment-record.test.ts b/apps/sidecar/src/workflow-deployment-record.test.ts
index 28c7e9c702..042d0891e1 100644
--- a/apps/sidecar/src/workflow-deployment-record.test.ts
+++ b/apps/sidecar/src/workflow-deployment-record.test.ts
@@ -62,9 +62,7 @@ describe("markWorkflowDeploymentRecordParked", () => {
 
     await markWorkflowDeploymentRecordParked(dataDir, "dep_missing");
 
-    await expect(
-      readWorkflowDeploymentRecord(dataDir, "dep_missing"),
-    ).resolves.toBeUndefined();
+    await expect(readWorkflowDeploymentRecord(dataDir, "dep_missing")).resolves.toBeUndefined();
   });
 });
 
@@ -128,9 +126,7 @@ describe("scanWorkflowDeploymentRecords reaps pre-cutover records", () => {
 
     expect(scanned).toHaveLength(1);
     expect(scanned[0]?.deploymentId).toBe("dep_live");
-    await expect(
-      readWorkflowDeploymentRecord(dataDir, "dep_live"),
-    ).resolves.toBeDefined();
+    await expect(readWorkflowDeploymentRecord(dataDir, "dep_live")).resolves.toBeDefined();
   });
 
   test("a record invalid for a reason other than the old-format shape is warned about, not reaped", async () => {
@@ -185,11 +181,10 @@ describe("recordWorkflowDeploymentRestoreFailure", () => {
     const dataDir = await makeDataDir();
     await writeWorkflowDeploymentRecord(dataDir, "dep_1", baseRecord);
 
-    const updated = await recordWorkflowDeploymentRestoreFailure(
-      dataDir,
-      "dep_1",
-      { kind: "permanent", reason: "address derives a different slug" },
-    );
+    const updated = await recordWorkflowDeploymentRestoreFailure(dataDir, "dep_1", {
+      kind: "permanent",
+      reason: "address derives a different slug",
+    });
 
     expect(updated?.restoreFailure).toEqual({
       kind: "permanent",
@@ -225,14 +220,10 @@ describe("recordWorkflowDeploymentRestoreFailure", () => {
       kind: "permanent",
       reason: "malformed",
     });
-    let record = await recordWorkflowDeploymentRestoreFailure(
-      dataDir,
-      "dep_1",
-      {
-        kind: "permanent",
-        reason: "still malformed",
-      },
-    );
+    let record = await recordWorkflowDeploymentRestoreFailure(dataDir, "dep_1", {
+      kind: "permanent",
+      reason: "still malformed",
+    });
     expect(record?.restoreFailure?.attempts).toBe(2);
 
     record = await recordWorkflowDeploymentRestoreFailure(dataDir, "dep_1", {
@@ -249,11 +240,10 @@ describe("recordWorkflowDeploymentRestoreFailure", () => {
     // Deliberately never written: simulates a teardown deleting the record
     // before the boot loop's failure-recording catch acquires the lock.
 
-    const updated = await recordWorkflowDeploymentRestoreFailure(
-      dataDir,
-      "dep_missing",
-      { kind: "transient", reason: "provider not registered" },
-    );
+    const updated = await recordWorkflowDeploymentRestoreFailure(dataDir, "dep_missing", {
+      kind: "transient",
+      reason: "provider not registered",
+    });
 
     expect(updated).toBeUndefined();
     const onDisk = await readWorkflowDeploymentRecord(dataDir, "dep_missing");
@@ -265,11 +255,10 @@ describe("clearWorkflowDeploymentRestoreFailure", () => {
   test("drops restoreFailure after a successful restore", async () => {
     const dataDir = await makeDataDir();
     await writeWorkflowDeploymentRecord(dataDir, "dep_1", baseRecord);
-    const failed = await recordWorkflowDeploymentRestoreFailure(
-      dataDir,
-      "dep_1",
-      { kind: "transient", reason: "provider not registered" },
-    );
+    const failed = await recordWorkflowDeploymentRestoreFailure(dataDir, "dep_1", {
+      kind: "transient",
+      reason: "provider not registered",
+    });
 
     await clearWorkflowDeploymentRestoreFailure(
       dataDir,
@@ -328,8 +317,6 @@ describe("isWorkflowDeploymentRestoreQuarantined", () => {
     // A transient failure never quarantines, no matter how high its own
     // counter climbs -- it is tracked on a separate counter from the
     // permanent one.
-    expect(isWorkflowDeploymentRestoreQuarantined(transientAtSameCount)).toBe(
-      false,
-    );
+    expect(isWorkflowDeploymentRestoreQuarantined(transientAtSameCount)).toBe(false);
   });
 });
diff --git a/apps/sidecar/src/workflow-deployment-record.ts b/apps/sidecar/src/workflow-deployment-record.ts
index 46369da3f7..5239a50d4a 100644
--- a/apps/sidecar/src/workflow-deployment-record.ts
+++ b/apps/sidecar/src/workflow-deployment-record.ts
@@ -92,9 +92,7 @@ export const WorkflowDeploymentRecord = type({
 });
 export type WorkflowDeploymentRecord = typeof WorkflowDeploymentRecord.infer;
 
-export type RestoreFailureKind = NonNullable<
-  WorkflowDeploymentRecord["restoreFailure"]
->["kind"];
+export type RestoreFailureKind = NonNullable<WorkflowDeploymentRecord["restoreFailure"]>["kind"];
 
 /**
  * Thrown from inside the restore path to mark WHY a specific attempt
@@ -259,9 +257,7 @@ export async function recordWorkflowDeploymentRestoreFailure(
   if (existing === undefined) return undefined;
   const previous = existing.restoreFailure;
   const attempts =
-    previous !== undefined && previous.kind === failure.kind
-      ? previous.attempts + 1
-      : 1;
+    previous !== undefined && previous.kind === failure.kind ? previous.attempts + 1 : 1;
   const updated: WorkflowDeploymentRecord = {
     ...existing,
     restoreFailure: {
@@ -286,7 +282,7 @@ export async function clearWorkflowDeploymentRestoreFailure(
   record: WorkflowDeploymentRecord,
 ): Promise<void> {
   if (record.restoreFailure === undefined) return;
-  const { restoreFailure, ...rest } = record;
+  const { restoreFailure: _restoreFailure, ...rest } = record;
   await writeWorkflowDeploymentRecord(dataDir, deploymentId, rest);
 }
 
@@ -297,9 +293,7 @@ export async function clearWorkflowDeploymentRestoreFailure(
  * streak never quarantines, however high its own counter climbs -- see
  * `WorkflowRestoreFailure`.
  */
-export function isWorkflowDeploymentRestoreQuarantined(
-  record: WorkflowDeploymentRecord,
-): boolean {
+export function isWorkflowDeploymentRestoreQuarantined(record: WorkflowDeploymentRecord): boolean {
   return (
     record.restoreFailure?.kind === "permanent" &&
     record.restoreFailure.attempts >= RESTORE_QUARANTINE_THRESHOLD
@@ -332,9 +326,7 @@ export interface ScannedWorkflowDeployment {
  * deliberately hibernated resumes on the next message or routine fire
  * that addresses it, not by being pre-spawned at boot.
  */
-export function partitionScannedDeployments(
-  scanned: readonly ScannedWorkflowDeployment[],
-): {
+export function partitionScannedDeployments(scanned: readonly ScannedWorkflowDeployment[]): {
   live: ScannedWorkflowDeployment[];
   parked: ScannedWorkflowDeployment[];
 } {
diff --git a/apps/sidecar/src/workflow-host-wiring/asset-materialization.ts b/apps/sidecar/src/workflow-host-wiring/asset-materialization.ts
index c40a16f0c4..94b3f051d9 100644
--- a/apps/sidecar/src/workflow-host-wiring/asset-materialization.ts
+++ b/apps/sidecar/src/workflow-host-wiring/asset-materialization.ts
@@ -42,11 +42,13 @@ export async function materializeWorkflowSources(
     try {
       existing = await readFile(sourcesAssetPath, "utf8");
     } catch (cause) {
-      if (!(
-        cause instanceof Error &&
-        "code" in cause &&
-        (cause as { code: unknown }).code === "ENOENT"
-      )) {
+      if (
+        !(
+          cause instanceof Error &&
+          "code" in cause &&
+          (cause as { code: unknown }).code === "ENOENT"
+        )
+      ) {
         throw cause;
       }
     }
diff --git a/apps/sidecar/src/workflow-host-wiring/closure-staging.ts b/apps/sidecar/src/workflow-host-wiring/closure-staging.ts
index 0415bc922e..b2f974a055 100644
--- a/apps/sidecar/src/workflow-host-wiring/closure-staging.ts
+++ b/apps/sidecar/src/workflow-host-wiring/closure-staging.ts
@@ -11,10 +11,7 @@ import { join as pathJoin } from "node:path";
 import { workflowSourceAssetMountPath } from "@intx/hub-sessions";
 import type { SourceRefPin } from "@intx/types/sidecar";
 
-import {
-  applyFrozenWorkflowClosure,
-  type AppliedWorkflowClosure,
-} from "../workflow-closure-apply";
+import { applyFrozenWorkflowClosure, type AppliedWorkflowClosure } from "../workflow-closure-apply";
 import { sourceAssetGitDir } from "../source-asset-delivery";
 import { parseToolRegistries } from "../tool-materialization";
 
@@ -26,10 +23,7 @@ import { parseToolRegistries } from "../tool-materialization";
  * and re-materialization needs no re-delivery. The store is reclaimed on
  * redeploy (at the deploy call site) and on undeploy.
  */
-export function deploymentSourceAssetRoot(
-  dataDir: string,
-  deploymentId: string,
-): string {
+export function deploymentSourceAssetRoot(dataDir: string, deploymentId: string): string {
   return pathJoin(dataDir, "workflow-definition-sources", deploymentId);
 }
 
@@ -38,10 +32,7 @@ export function deploymentSourceAssetRoot(
  * asset entries are checked out from. Sibling of the plain-file source store;
  * both survive restart so re-materialization needs no re-delivery.
  */
-export function deploymentSourceGitRoot(
-  dataDir: string,
-  deploymentId: string,
-): string {
+export function deploymentSourceGitRoot(dataDir: string, deploymentId: string): string {
   return pathJoin(dataDir, "workflow-definition-source-gits", deploymentId);
 }
 
@@ -49,43 +40,25 @@ export function deploymentSourceGitRoot(
  * The per-deployment directory a deployment's closure is laid out under.
  * Deterministic per deployment id, so a redeploy or a boot restore reuses it.
  */
-export function deploymentClosureInstanceDir(
-  dataDir: string,
-  deploymentId: string,
-): string {
+export function deploymentClosureInstanceDir(dataDir: string, deploymentId: string): string {
   return pathJoin(dataDir, "workflow-definition-closures", deploymentId);
 }
 
 function deriveSourceAssetMounts(pin: SourceRefPin): Map<string, string> {
   const mounts = new Map<string, string>();
   for (const entry of pin.closure.entries) {
-    if (
-      entry.source.kind === "asset" &&
-      entry.source.package.format === "tarball"
-    ) {
-      mounts.set(
-        entry.source.assetId,
-        workflowSourceAssetMountPath(entry.source.assetId),
-      );
+    if (entry.source.kind === "asset" && entry.source.package.format === "tarball") {
+      mounts.set(entry.source.assetId, workflowSourceAssetMountPath(entry.source.assetId));
     }
   }
   return mounts;
 }
 
-function deriveSourceGitDirs(
-  pin: SourceRefPin,
-  gitRoot: string,
-): Map<string, string> {
+function deriveSourceGitDirs(pin: SourceRefPin, gitRoot: string): Map<string, string> {
   const gitDirs = new Map<string, string>();
   for (const entry of pin.closure.entries) {
-    if (
-      entry.source.kind === "asset" &&
-      entry.source.package.format === "source"
-    ) {
-      gitDirs.set(
-        entry.source.assetId,
-        sourceAssetGitDir(gitRoot, entry.source.assetId),
-      );
+    if (entry.source.kind === "asset" && entry.source.package.format === "source") {
+      gitDirs.set(entry.source.assetId, sourceAssetGitDir(gitRoot, entry.source.assetId));
     }
   }
   return gitDirs;
@@ -150,10 +123,7 @@ export async function resolveDeploymentAssetMounts(
  * the tarball cache and the per-fetch cap. A missing or non-numeric value is a
  * boot-edge wiring bug, so it fails loud rather than defaulting.
  */
-export function requireSubstrateByteCap(
-  env: Record<string, string>,
-  key: string,
-): number {
+export function requireSubstrateByteCap(env: Record<string, string>, key: string): number {
   const raw = env[key];
   if (raw === undefined) {
     throw new Error(
@@ -183,28 +153,21 @@ export async function materializeDeploymentClosure(args: {
   pin: SourceRefPin;
   substrateEnv: Record<string, string>;
 }): Promise<AppliedWorkflowClosure> {
-  const instanceDir = deploymentClosureInstanceDir(
+  const instanceDir = deploymentClosureInstanceDir(args.dataDir, args.deploymentId);
+  await rm(instanceDir, { recursive: true, force: true });
+
+  const { assetRoot, assetMounts, gitDirs } = await resolveDeploymentAssetMounts(
     args.dataDir,
     args.deploymentId,
+    args.pin,
   );
-  await rm(instanceDir, { recursive: true, force: true });
-
-  const { assetRoot, assetMounts, gitDirs } =
-    await resolveDeploymentAssetMounts(
-      args.dataDir,
-      args.deploymentId,
-      args.pin,
-    );
 
   return applyFrozenWorkflowClosure({
     source: args.pin.source,
     closure: args.pin.closure,
     instanceDir,
     cacheRoot: pathJoin(args.dataDir, "workflow-definition-closure-cache"),
-    cacheMaxBytes: requireSubstrateByteCap(
-      args.substrateEnv,
-      "SIDECAR_CACHE_MAX_BYTES",
-    ),
+    cacheMaxBytes: requireSubstrateByteCap(args.substrateEnv, "SIDECAR_CACHE_MAX_BYTES"),
     registryMaxTarballBytes: requireSubstrateByteCap(
       args.substrateEnv,
       "SIDECAR_REGISTRY_MAX_TARBALL_BYTES",
@@ -218,10 +181,7 @@ export async function materializeDeploymentClosure(args: {
   });
 }
 
-function requireSubstrateEntry(
-  env: Record<string, string>,
-  key: string,
-): string {
+function requireSubstrateEntry(env: Record<string, string>, key: string): string {
   const raw = env[key];
   if (raw === undefined) {
     throw new Error(
diff --git a/apps/sidecar/src/workflow-host-wiring/index.ts b/apps/sidecar/src/workflow-host-wiring/index.ts
index 298ac2354e..92b6abd49b 100644
--- a/apps/sidecar/src/workflow-host-wiring/index.ts
+++ b/apps/sidecar/src/workflow-host-wiring/index.ts
@@ -36,10 +36,7 @@ import {
   type InferenceSource,
   type KeyPair,
 } from "@intx/types/runtime";
-import {
-  WorkflowProjectionDefinition,
-  type AgentDeployFrame,
-} from "@intx/types/sidecar";
+import { WorkflowProjectionDefinition, type AgentDeployFrame } from "@intx/types/sidecar";
 import { projectLiveToInert } from "@intx/workflow";
 
 import type {
@@ -70,28 +67,15 @@ import {
   snapshotAgentIdentity,
 } from "../hibernated-agent-identity-vault";
 import { isErrnoNotFound } from "../conversation-state";
-import {
-  computeWireDefinitionHash,
-  validateWorkflowProjection,
-} from "./wire-validation";
+import { computeWireDefinitionHash, validateWorkflowProjection } from "./wire-validation";
 import { defaultSubprocessSpawner } from "./transport";
 
 export { defaultSubprocessSpawner };
-import {
-  createSidecarWorkflowSupervisor,
-  type SidecarWorkflowSupervisor,
-} from "./supervisor";
-
-export {
-  deriveSidecarMailAuditRef,
-  type CreateSidecarWorkflowSupervisorOpts,
-} from "./supervisor";
+import { createSidecarWorkflowSupervisor, type SidecarWorkflowSupervisor } from "./supervisor";
+
+export { deriveSidecarMailAuditRef, type CreateSidecarWorkflowSupervisorOpts } from "./supervisor";
 export { createSidecarWorkflowSupervisor, type SidecarWorkflowSupervisor };
-import {
-  createStepStrategy,
-  deriveDeploymentId,
-  writeStepGrants,
-} from "./step-strategy";
+import { createStepStrategy, deriveDeploymentId, writeStepGrants } from "./step-strategy";
 
 export { deriveDeploymentId };
 import { materializeWorkflowSources } from "./asset-materialization";
@@ -229,10 +213,7 @@ function withRestoreTimeout<T>(
  * whose caller has already timed out stops advancing instead of spending
  * that work on an attempt nobody is waiting on anymore.
  */
-function throwIfRestoreAborted(
-  signal: AbortSignal,
-  deploymentId: string,
-): void {
+function throwIfRestoreAborted(signal: AbortSignal, deploymentId: string): void {
   if (signal.aborted) {
     throw new Error(
       `restore of ${deploymentId} was cancelled after its boot-restore attempt timed out`,
@@ -246,9 +227,7 @@ function throwIfRestoreAborted(
  * `CHILD_KILL_ESCALATION_MS` -- still awaiting `shutdown()` to completion
  * either way, never abandoning it.
  */
-async function shutdownSupervisorWithEscalation(
-  wired: SidecarWorkflowSupervisor,
-): Promise<void> {
+async function shutdownSupervisorWithEscalation(wired: SidecarWorkflowSupervisor): Promise<void> {
   const timer = setTimeout(() => {
     wired.hardKillChild();
   }, CHILD_KILL_ESCALATION_MS);
@@ -266,9 +245,7 @@ async function shutdownSupervisorWithEscalation(
  * with this key; the multi-step branch surfaces it to the link so the
  * hub records the verifying key for the deployment's signed events.
  */
-async function derivePrincipalPublicKeyHex(
-  signingKeySeed: Uint8Array,
-): Promise<string> {
+async function derivePrincipalPublicKeyHex(signingKeySeed: Uint8Array): Promise<string> {
   return hexEncode(await derivePublicKeyBytes(signingKeySeed));
 }
 
@@ -341,10 +318,7 @@ export interface SidecarDeployRouter extends DeployRouter {
    * internal `teardownDeployment` for the exact split between the two
    * flavors.
    */
-  teardownDeployment(
-    agentAddress: string,
-    opts: { reclaimDirs: boolean },
-  ): Promise<void>;
+  teardownDeployment(agentAddress: string, opts: { reclaimDirs: boolean }): Promise<void>;
 }
 
 export function createSidecarDeployRouter(deps: {
@@ -390,10 +364,7 @@ export function createSidecarDeployRouter(deps: {
    * the child triggers sees the mapping. Tests that do not exercise
    * the pack push path may pass a no-op.
    */
-  registerDeployment: (entry: {
-    deploymentId: string;
-    agentAddress: string;
-  }) => void;
+  registerDeployment: (entry: { deploymentId: string; agentAddress: string }) => void;
   /**
    * Symmetric removal hook for `registerDeployment`. Fires from the
    * link's `agent.undeploy` path so the boot edge's
@@ -404,10 +375,7 @@ export function createSidecarDeployRouter(deps: {
    * silently resolving to the prior address. Tests that do not
    * exercise the pack push path may pass a no-op.
    */
-  unregisterDeployment: (entry: {
-    deploymentId: string;
-    agentAddress: string;
-  }) => void;
+  unregisterDeployment: (entry: { deploymentId: string; agentAddress: string }) => void;
   /**
    * Control-plane suspension sink threaded verbatim to every deployment's
    * supervisor as `onSuspensionRegister`. Production wires this to the
@@ -666,15 +634,11 @@ export function createSidecarDeployRouter(deps: {
   const stepStateDataDir = multistepSubstrateEnv.SIDECAR_DATA_DIR;
   const persistDeploymentRecord =
     deps.writeWorkflowDeploymentRecord ?? writeWorkflowDeploymentRecord;
-  const applyClosure =
-    deps.materializeDeploymentClosure ?? materializeDeploymentClosure;
-  const restoreAttemptTimeoutMs =
-    deps.restoreAttemptTimeoutMs ?? RESTORE_ATTEMPT_TIMEOUT_MS;
-  const multistepSpawner =
-    deps.multistepSubprocessSpawner ?? defaultSubprocessSpawner;
+  const applyClosure = deps.materializeDeploymentClosure ?? materializeDeploymentClosure;
+  const restoreAttemptTimeoutMs = deps.restoreAttemptTimeoutMs ?? RESTORE_ATTEMPT_TIMEOUT_MS;
+  const multistepSpawner = deps.multistepSubprocessSpawner ?? defaultSubprocessSpawner;
   const multistepDeriveStepAddress: DeriveStepAddress =
-    deps.multistepDeriveStepAddress ??
-    (({ runId, stepId }) => `${runId}-${stepId}`);
+    deps.multistepDeriveStepAddress ?? (({ runId, stepId }) => `${runId}-${stepId}`);
 
   // Per-deployment supervisor tracking. The multi-step branch
   // constructs one `SidecarWorkflowSupervisor` per `agent.deploy`
@@ -744,10 +708,7 @@ export function createSidecarDeployRouter(deps: {
   // `activeSupervisors` (see below) while holding the lock, the final
   // on-disk state is correct regardless of ordering.
   const deploymentRecordLocks = new Map<string, Promise<unknown>>();
-  function withDeploymentRecordLock<T>(
-    deploymentId: string,
-    fn: () => Promise<T>,
-  ): Promise<T> {
+  function withDeploymentRecordLock<T>(deploymentId: string, fn: () => Promise<T>): Promise<T> {
     const prior = deploymentRecordLocks.get(deploymentId) ?? Promise.resolve();
     const settled = prior.then(fn, fn);
     deploymentRecordLocks.set(
@@ -922,9 +883,7 @@ export function createSidecarDeployRouter(deps: {
       principalId: spec.principalId,
       sources,
       ...(spec.sessionId !== undefined ? { sessionId: spec.sessionId } : {}),
-      ...(spec.hubPublicKey !== undefined
-        ? { hubPublicKey: spec.hubPublicKey }
-        : {}),
+      ...(spec.hubPublicKey !== undefined ? { hubPublicKey: spec.hubPublicKey } : {}),
       approvedWireHash: spec.approvedWireHash,
       sourceRef: spec.sourceRef,
     };
@@ -942,9 +901,7 @@ export function createSidecarDeployRouter(deps: {
    * deploy-only durable state (the source closure, step grants) before
    * calling.
    */
-  async function spawnWorkflowDeployment(
-    spec: WorkflowDeploySpec,
-  ): Promise<DeployRouterResult> {
+  async function spawnWorkflowDeployment(spec: WorkflowDeploySpec): Promise<DeployRouterResult> {
     // Fail loud if this address already has a live supervisor. Both single-
     // and multi-step now register on the transport, so both carry the
     // `transport.register` duplicate-throw backstop; this `has()` check is the
@@ -1062,24 +1019,16 @@ export function createSidecarDeployRouter(deps: {
             deploymentId,
             agentAddress: spec.agentAddress,
           }),
-        ...(spec.credentials !== undefined
-          ? { credentialDelivery: spec.credentials }
-          : {}),
-        ...(deps.multistepBinaryPath !== undefined
-          ? { binaryPath: deps.multistepBinaryPath }
-          : {}),
-        ...(deps.onDispatchTiming !== undefined
-          ? { onDispatchTiming: deps.onDispatchTiming }
-          : {}),
+        ...(spec.credentials !== undefined ? { credentialDelivery: spec.credentials } : {}),
+        ...(deps.multistepBinaryPath !== undefined ? { binaryPath: deps.multistepBinaryPath } : {}),
+        ...(deps.onDispatchTiming !== undefined ? { onDispatchTiming: deps.onDispatchTiming } : {}),
         ...(deps.repackEveryMessages !== undefined
           ? { repackEveryMessages: deps.repackEveryMessages }
           : {}),
         ...(deps.consumedRetentionMs !== undefined
           ? { consumedRetentionMs: deps.consumedRetentionMs }
           : {}),
-        ...(deps.readyTimeoutMs !== undefined
-          ? { readyTimeoutMs: deps.readyTimeoutMs }
-          : {}),
+        ...(deps.readyTimeoutMs !== undefined ? { readyTimeoutMs: deps.readyTimeoutMs } : {}),
       };
       const wired = createSidecarWorkflowSupervisor(wiredBaseConfig);
 
@@ -1101,8 +1050,7 @@ export function createSidecarDeployRouter(deps: {
       // `getTransportFor(senderAddress).send` throws "not registered".
       // Registration happens before `spawn()` so the address is live the
       // instant the first reply routes outbound.
-      const { keyPair, isNew: keyIsNew } =
-        await deps.keyStore.loadOrGenerateKey(spec.agentAddress);
+      const { keyPair, isNew: keyIsNew } = await deps.keyStore.loadOrGenerateKey(spec.agentAddress);
       // A restored vault entry that did not yield an existing on-disk key
       // means the restore itself is broken (a corrupt or partial
       // snapshot) -- the exact "wake silently rotates identity" failure
@@ -1120,10 +1068,7 @@ export function createSidecarDeployRouter(deps: {
           },
         );
       }
-      deps.transport.register(
-        spec.agentAddress,
-        deps.createAgentCrypto(keyPair),
-      );
+      deps.transport.register(spec.agentAddress, deps.createAgentCrypto(keyPair));
       agentTransportRegistered = true;
 
       // The public key the deploy ack surfaces to the hub is the deployment
@@ -1177,12 +1122,7 @@ export function createSidecarDeployRouter(deps: {
             logger.warn`dropping workflow inference event for ${spec.agentAddress}: ${validated.summary}`;
             return;
           }
-          publishInferenceEvent(
-            spec.agentAddress,
-            validated,
-            spec.sessionId,
-            childRunId,
-          );
+          publishInferenceEvent(spec.agentAddress, validated, spec.sessionId, childRunId);
         },
       };
 
@@ -1272,70 +1212,65 @@ export function createSidecarDeployRouter(deps: {
         // stepId-agnostic.
         const rotationStepId = spec.definition.stepOrder[0];
         if (rotationStepId === undefined) {
-          throw new Error(
-            "single-step deploy has no step id for sources rotation",
-          );
+          throw new Error("single-step deploy has no step id for sources rotation");
         }
-        deps.multistepSourcesRouter?.register(
-          spec.agentAddress,
-          async (args) => {
-            const rotated = { [rotationStepId]: args.sources };
-            // Swap `currentSources` synchronously BEFORE the durable persist.
-            // `currentSources` is the process-local respawn hint the
-            // supervisor reads synchronously through `dynamicSpawnEnv`, so a
-            // recycle that interleaves the persist `await` must respawn the
-            // child on the SAME sources being persisted, not the stale prior
-            // table. The obvious inverse -- persist first, then swap -- is
-            // rejected: it leaves the child on the OLD sources during the
-            // persist window while the record has already moved to NEW, so a
-            // recycle there respawns stale and a restart would "correct" it,
-            // i.e. the running child contradicts durable intent. Swapping
-            // first makes the only residual disagreement child-ahead-of-
-            // durable on a failed persist, which the next recycle heals down
-            // to the rolled-back durable truth -- the benign direction. The
-            // wire boundary guarantees `args.sources[0]` is the default,
-            // which the recycle env form pins as the active source.
-            const prevSources = currentSources;
-            currentSources = rotated;
-            // The durable write still precedes the LIVE swap
-            // (`deliverSources`), preserving persist-before-externally-visible
-            // for state that outlives the process; only the process-local
-            // respawn hint moves ahead. On a failed persist, roll the hint
-            // back so `currentSources` and the record stay in agreement in the
-            // common (no interleaved recycle) failure case -- the invariant
-            // restart consistency depends on. Persistence lets the rotation
-            // survive a full sidecar restart, not just a recycle: the boot
-            // scan reseeds spec.sources from record.sources. Overwrites the
-            // deploy-time record in place. Skipped when no data dir was wired
-            // (a test router that never persists), matching the restore guard.
-            if (stepStateDataDir !== undefined) {
-              try {
-                await persistDeploymentRecord(
-                  stepStateDataDir,
-                  deploymentId,
-                  buildDeploymentRecord(spec, rotated),
-                );
-              } catch (cause) {
-                // Restoring unconditionally is safe because rotations for one
-                // deployment are serialized by the sidecar's per-connection
-                // inbound-frame queue: each hub frame, sources.update
-                // included, runs its handler to completion on that queue
-                // before the next frame's handler starts, so no second
-                // rotation is in flight whose committed table this rollback
-                // could clobber. This does NOT rely on the hub pacing its
-                // sends -- the hub dispatches sources.update fire-and-forget;
-                // the sidecar frame queue is the sole serializer. Parallelizing
-                // inbound-frame dispatch would break this rollback.
-                currentSources = prevSources;
-                throw cause;
-              }
+        deps.multistepSourcesRouter?.register(spec.agentAddress, async (args) => {
+          const rotated = { [rotationStepId]: args.sources };
+          // Swap `currentSources` synchronously BEFORE the durable persist.
+          // `currentSources` is the process-local respawn hint the
+          // supervisor reads synchronously through `dynamicSpawnEnv`, so a
+          // recycle that interleaves the persist `await` must respawn the
+          // child on the SAME sources being persisted, not the stale prior
+          // table. The obvious inverse -- persist first, then swap -- is
+          // rejected: it leaves the child on the OLD sources during the
+          // persist window while the record has already moved to NEW, so a
+          // recycle there respawns stale and a restart would "correct" it,
+          // i.e. the running child contradicts durable intent. Swapping
+          // first makes the only residual disagreement child-ahead-of-
+          // durable on a failed persist, which the next recycle heals down
+          // to the rolled-back durable truth -- the benign direction. The
+          // wire boundary guarantees `args.sources[0]` is the default,
+          // which the recycle env form pins as the active source.
+          const prevSources = currentSources;
+          currentSources = rotated;
+          // The durable write still precedes the LIVE swap
+          // (`deliverSources`), preserving persist-before-externally-visible
+          // for state that outlives the process; only the process-local
+          // respawn hint moves ahead. On a failed persist, roll the hint
+          // back so `currentSources` and the record stay in agreement in the
+          // common (no interleaved recycle) failure case -- the invariant
+          // restart consistency depends on. Persistence lets the rotation
+          // survive a full sidecar restart, not just a recycle: the boot
+          // scan reseeds spec.sources from record.sources. Overwrites the
+          // deploy-time record in place. Skipped when no data dir was wired
+          // (a test router that never persists), matching the restore guard.
+          if (stepStateDataDir !== undefined) {
+            try {
+              await persistDeploymentRecord(
+                stepStateDataDir,
+                deploymentId,
+                buildDeploymentRecord(spec, rotated),
+              );
+            } catch (cause) {
+              // Restoring unconditionally is safe because rotations for one
+              // deployment are serialized by the sidecar's per-connection
+              // inbound-frame queue: each hub frame, sources.update
+              // included, runs its handler to completion on that queue
+              // before the next frame's handler starts, so no second
+              // rotation is in flight whose committed table this rollback
+              // could clobber. This does NOT rely on the hub pacing its
+              // sends -- the hub dispatches sources.update fire-and-forget;
+              // the sidecar frame queue is the sole serializer. Parallelizing
+              // inbound-frame dispatch would break this rollback.
+              currentSources = prevSources;
+              throw cause;
             }
-            await wired.supervisor.deliverSources({
-              sources: args.sources,
-              defaultSource: args.defaultSource,
-            });
-          },
-        );
+          }
+          await wired.supervisor.deliverSources({
+            sources: args.sources,
+            defaultSource: args.defaultSource,
+          });
+        });
       }
 
       // Register the credential-delivery handler for EVERY deployment (not
@@ -1345,14 +1280,11 @@ export function createSidecarDeployRouter(deps: {
       // `credentials-updated` control frame to the child where the material
       // cell is swapped. No durable persist -- credential material never
       // touches disk.
-      deps.multistepCredentialsRouter?.register(
-        spec.agentAddress,
-        async (args) => {
-          await wired.supervisor.deliverCredentials({
-            delivery: args.delivery,
-          });
-        },
-      );
+      deps.multistepCredentialsRouter?.register(spec.agentAddress, async (args) => {
+        await wired.supervisor.deliverCredentials({
+          delivery: args.delivery,
+        });
+      });
       routersRegistered = true;
 
       succeeded = true;
@@ -1378,8 +1310,7 @@ export function createSidecarDeployRouter(deps: {
         }
         if (wiredForUnwind !== undefined) {
           await wiredForUnwind.supervisor.shutdown().catch((cause) => {
-            const message =
-              cause instanceof Error ? cause.message : String(cause);
+            const message = cause instanceof Error ? cause.message : String(cause);
             logger.warn`multi-step deploy unwind: supervisor.shutdown failed: ${message}`;
           });
         }
@@ -1435,9 +1366,7 @@ export function createSidecarDeployRouter(deps: {
    * per-step address is workflow-derived and records no `agent_instance`
    * key, so the hub discards this value.
    */
-  async function provisionStep(
-    frame: AgentDeployFrame,
-  ): Promise<DeployRouterResult> {
+  async function provisionStep(frame: AgentDeployFrame): Promise<DeployRouterResult> {
     await deps.sessions.initRepo(frame.agentAddress);
     deps.keyStore.recordHubKey(frame.agentAddress, frame.hubPublicKey);
     return {
@@ -1459,9 +1388,7 @@ export function createSidecarDeployRouter(deps: {
     // every later wake would re-trip this same guard, a permanent
     // wake/reject loop against a run the sidecar never stopped.
     if (activeSupervisors.has(frame.agentAddress)) {
-      const { keyPair } = await deps.keyStore.loadOrGenerateKey(
-        frame.agentAddress,
-      );
+      const { keyPair } = await deps.keyStore.loadOrGenerateKey(frame.agentAddress);
       return { publicKey: hexEncode(keyPair.publicKey) };
     }
     // A deploy still in flight for the address stays a hard reject: two
@@ -1599,8 +1526,7 @@ export function createSidecarDeployRouter(deps: {
         sessionId: frame.config.sessionId,
         tenantId: frame.config.tenantId,
         principalId: frame.config.principalId,
-        hubPublicKey:
-          definition.stepOrder.length === 1 ? frame.hubPublicKey : undefined,
+        hubPublicKey: definition.stepOrder.length === 1 ? frame.hubPublicKey : undefined,
         approvedWireHash: projection.approvedWireHash,
         closurePackageDir: applied.packageDir,
         sourceRef: projection.sourceRef,
@@ -1621,11 +1547,7 @@ export function createSidecarDeployRouter(deps: {
       // disk (not through env) because the body child is in-process and loses
       // its env across a restart.
       for (const referenced of projection.referencedDefinitions ?? []) {
-        await materializeWorkflowSources(
-          dataDir,
-          referenced.definition.id,
-          referenced.sources,
-        );
+        await materializeWorkflowSources(dataDir, referenced.definition.id, referenced.sources);
       }
 
       // Grants bridge: the spawned child does not see the frame; it reads
@@ -1656,10 +1578,7 @@ export function createSidecarDeployRouter(deps: {
       // `writeTree` without a `clearPrefix` is purely additive, so it
       // never disturbs the run's events. Guarded on `isRunAddress`: only
       // a run address names a self-anchored run id.
-      if (
-        definition.stepOrder.length === 1 &&
-        isRunAddress(frame.agentAddress)
-      ) {
+      if (definition.stepOrder.length === 1 && isRunAddress(frame.agentAddress)) {
         await writeStepGrants({
           repoStore: deps.repoStore,
           deploymentId,
@@ -1682,10 +1601,7 @@ export function createSidecarDeployRouter(deps: {
       try {
         await deleteWorkflowDeploymentRecord(dataDir, deploymentId);
       } catch (cleanupError) {
-        const message =
-          cleanupError instanceof Error
-            ? cleanupError.message
-            : String(cleanupError);
+        const message = cleanupError instanceof Error ? cleanupError.message : String(cleanupError);
         logger.error`deploy cleanup: deleteWorkflowDeploymentRecord failed for ${deploymentId}: ${message}`;
       }
       releaseSlug(deploymentId, frame.agentAddress);
@@ -1715,9 +1631,7 @@ export function createSidecarDeployRouter(deps: {
   function isMissingClosureStagingFailure(cause: unknown): boolean {
     if (!(cause instanceof Error)) return false;
     if (isErrnoNotFound(cause)) return true;
-    return (
-      "cause" in cause && isErrnoNotFound((cause as { cause?: unknown }).cause)
-    );
+    return "cause" in cause && isErrnoNotFound((cause as { cause?: unknown }).cause);
   }
 
   /**
@@ -1884,8 +1798,7 @@ export function createSidecarDeployRouter(deps: {
           try {
             deps.assertSourceBuildable(source);
           } catch (cause) {
-            const reason =
-              cause instanceof Error ? cause.message : String(cause);
+            const reason = cause instanceof Error ? cause.message : String(cause);
             throw new WorkflowRestoreFailure("transient", reason);
           }
         }
@@ -1930,8 +1843,7 @@ export function createSidecarDeployRouter(deps: {
     // no-op for an already-held (deploymentId, address) pair, so the
     // pre-claim check distinguishes the two. A PARKED deployment keeps
     // its slug claimed, so a wake respawn lands in this already-held arm.
-    const slugNewlyClaimed =
-      slugClaims.get(deploymentId) !== record.agentAddress;
+    const slugNewlyClaimed = slugClaims.get(deploymentId) !== record.agentAddress;
     claimSlug(deploymentId, record.agentAddress);
     try {
       // CL-7215: checked INSIDE this try, after the slug is claimed, so a
@@ -1970,33 +1882,22 @@ export function createSidecarDeployRouter(deps: {
         //   successful (if late) restore.
         let reclaimedDuringSpawn = false;
         try {
-          const corrected = await withDeploymentRecordLock(
-            deploymentId,
-            async () => {
-              const onDisk = await readWorkflowDeploymentRecord(
-                dataDir,
-                deploymentId,
-              );
-              if (onDisk === undefined) {
-                reclaimedDuringSpawn = true;
-                return false;
-              }
-              if (onDisk.restoreFailure === undefined) return false;
-              await clearWorkflowDeploymentRestoreFailure(
-                dataDir,
-                deploymentId,
-                onDisk,
-              );
-              return true;
-            },
-          );
+          const corrected = await withDeploymentRecordLock(deploymentId, async () => {
+            const onDisk = await readWorkflowDeploymentRecord(dataDir, deploymentId);
+            if (onDisk === undefined) {
+              reclaimedDuringSpawn = true;
+              return false;
+            }
+            if (onDisk.restoreFailure === undefined) return false;
+            await clearWorkflowDeploymentRestoreFailure(dataDir, deploymentId, onDisk);
+            return true;
+          });
           if (corrected) {
             logger.warn`Workflow deployment ${record.agentAddress} finished restoring after its boot-restore attempt had already timed out; corrected its record so it no longer claims the deployment failed to restore`;
           }
         } catch (correctionError) {
           reportError(correctionError, {
-            operation:
-              "workflow-host-wiring.restoreDeploymentFromRecord.lateRestoreCorrection",
+            operation: "workflow-host-wiring.restoreDeploymentFromRecord.lateRestoreCorrection",
             agentId: record.agentAddress,
           });
         }
@@ -2100,10 +2001,10 @@ export function createSidecarDeployRouter(deps: {
       // and is deliberately NOT touched here either way -- a re-deploy on
       // the same address must restore the prior conversation from it.
       if (opts.reclaimDirs && stepStateDataDir !== undefined) {
-        await rm(
-          pathJoin(stepStateDataDir, "workflow-step-state", deploymentId),
-          { recursive: true, force: true },
-        );
+        await rm(pathJoin(stepStateDataDir, "workflow-step-state", deploymentId), {
+          recursive: true,
+          force: true,
+        });
       }
     }
     // Drop the deployment record so a boot-time restore does not re-spawn a
@@ -2211,87 +2112,68 @@ export function createSidecarDeployRouter(deps: {
       // `try`/`catch` gave.
       let skippedQuarantinedCount = 0;
       let deferredToWakeCount = 0;
-      await runWithConcurrency(
-        live,
-        RESTORE_CONCURRENCY,
-        async ({ deploymentId, record }) => {
-          // Skip WITHOUT attempting: a permanently unrestorable record that
-          // has already crossed RESTORE_QUARANTINE_THRESHOLD gets neither a
-          // spawn attempt nor a per-record warning this boot -- both are
-          // pointless for a deterministic failure that has already been
-          // reported that many times. It still counts toward the one
-          // summary line below, and the record itself is untouched (an
-          // operator reclaims it by undeploying the address).
-          if (isWorkflowDeploymentRestoreQuarantined(record)) {
-            skippedQuarantinedCount += 1;
+      await runWithConcurrency(live, RESTORE_CONCURRENCY, async ({ deploymentId, record }) => {
+        // Skip WITHOUT attempting: a permanently unrestorable record that
+        // has already crossed RESTORE_QUARANTINE_THRESHOLD gets neither a
+        // spawn attempt nor a per-record warning this boot -- both are
+        // pointless for a deterministic failure that has already been
+        // reported that many times. It still counts toward the one
+        // summary line below, and the record itself is untouched (an
+        // operator reclaims it by undeploying the address).
+        if (isWorkflowDeploymentRestoreQuarantined(record)) {
+          skippedQuarantinedCount += 1;
+          return;
+        }
+        try {
+          const outcome = await withRestoreTimeout(
+            (signal) => restoreDeploymentFromRecord(dataDir, deploymentId, record, signal),
+            deploymentId,
+            restoreAttemptTimeoutMs,
+          );
+          if (outcome === "deferred-to-wake") {
+            deferredToWakeCount += 1;
             return;
           }
-          try {
-            const outcome = await withRestoreTimeout(
-              (signal) =>
-                restoreDeploymentFromRecord(
-                  dataDir,
-                  deploymentId,
-                  record,
-                  signal,
-                ),
-              deploymentId,
-              restoreAttemptTimeoutMs,
-            );
-            if (outcome === "deferred-to-wake") {
-              deferredToWakeCount += 1;
+          if (record.restoreFailure !== undefined) {
+            await clearWorkflowDeploymentRestoreFailure(dataDir, deploymentId, record);
+          }
+        } catch (cause) {
+          const reason = cause instanceof Error ? cause.message : String(cause);
+          const kind = cause instanceof WorkflowRestoreFailure ? cause.kind : "transient";
+          // CL-7215: serialized against `restoreDeploymentFromRecord`'s
+          // own late-settle correction AND `teardownDeployment`'s record
+          // writes via the same lock, and gated on `activeSupervisors` --
+          // in-memory, always set synchronously the instant
+          // `spawnWorkflowDeployment` actually succeeds, unlike a disk
+          // snapshot -- so a restore that timed out here but has ALREADY
+          // gone live by the time this runs never gets a boot failure
+          // recorded against it in the first place. See the lock's own
+          // doc comment for why every writer must go through it.
+          await withDeploymentRecordLock(deploymentId, async () => {
+            if (activeSupervisors.has(record.agentAddress)) {
+              logger.warn`Workflow deployment ${deploymentId} timed out during boot restore but finished spawning before its failure could be recorded; leaving its record as a live, successful restore`;
               return;
             }
-            if (record.restoreFailure !== undefined) {
-              await clearWorkflowDeploymentRestoreFailure(
-                dataDir,
-                deploymentId,
-                record,
-              );
-            }
-          } catch (cause) {
-            const reason =
-              cause instanceof Error ? cause.message : String(cause);
-            const kind =
-              cause instanceof WorkflowRestoreFailure
-                ? cause.kind
-                : "transient";
-            // CL-7215: serialized against `restoreDeploymentFromRecord`'s
-            // own late-settle correction AND `teardownDeployment`'s record
-            // writes via the same lock, and gated on `activeSupervisors` --
-            // in-memory, always set synchronously the instant
-            // `spawnWorkflowDeployment` actually succeeds, unlike a disk
-            // snapshot -- so a restore that timed out here but has ALREADY
-            // gone live by the time this runs never gets a boot failure
-            // recorded against it in the first place. See the lock's own
-            // doc comment for why every writer must go through it.
-            await withDeploymentRecordLock(deploymentId, async () => {
-              if (activeSupervisors.has(record.agentAddress)) {
-                logger.warn`Workflow deployment ${deploymentId} timed out during boot restore but finished spawning before its failure could be recorded; leaving its record as a live, successful restore`;
-                return;
-              }
-              const updated = await recordWorkflowDeploymentRestoreFailure(
-                dataDir,
-                deploymentId,
-                { kind, reason },
-              );
-              if (updated === undefined) {
-                // The record is gone -- a concurrent reclaiming teardown
-                // won the lock first and deleted it. Nothing to mark: the
-                // deployment was torn down on purpose, not left claiming a
-                // false restore failure.
-                return;
-              }
-              if (isWorkflowDeploymentRestoreQuarantined(updated)) {
-                const attempts = updated.restoreFailure?.attempts ?? 0;
-                logger.warn`Workflow deployment ${deploymentId} failed to restore ${attempts} consecutive times and is now quarantined -- it will not be retried again until the address is undeployed. Last failure: ${reason}`;
-              } else {
-                logger.warn`Failed to restore workflow deployment ${deploymentId}: ${reason}`;
-              }
+            const updated = await recordWorkflowDeploymentRestoreFailure(dataDir, deploymentId, {
+              kind,
+              reason,
             });
-          }
-        },
-      );
+            if (updated === undefined) {
+              // The record is gone -- a concurrent reclaiming teardown
+              // won the lock first and deleted it. Nothing to mark: the
+              // deployment was torn down on purpose, not left claiming a
+              // false restore failure.
+              return;
+            }
+            if (isWorkflowDeploymentRestoreQuarantined(updated)) {
+              const attempts = updated.restoreFailure?.attempts ?? 0;
+              logger.warn`Workflow deployment ${deploymentId} failed to restore ${attempts} consecutive times and is now quarantined -- it will not be retried again until the address is undeployed. Last failure: ${reason}`;
+            } else {
+              logger.warn`Failed to restore workflow deployment ${deploymentId}: ${reason}`;
+            }
+          });
+        }
+      });
       if (skippedQuarantinedCount > 0) {
         logger.warn`Skipped ${skippedQuarantinedCount} quarantined workflow deployment record(s) (permanent restore failures, already reported); undeploy an address to clear its record`;
       }
@@ -2329,8 +2211,7 @@ export function createSidecarDeployRouter(deps: {
           try {
             await shutdownSupervisorWithEscalation(wired);
           } catch (cause) {
-            const reason =
-              cause instanceof Error ? cause.message : String(cause);
+            const reason = cause instanceof Error ? cause.message : String(cause);
             logger.warn`Drain: supervisor shutdown for ${address} failed: ${reason}`;
           }
         }),
diff --git a/apps/sidecar/src/workflow-host-wiring/step-strategy.ts b/apps/sidecar/src/workflow-host-wiring/step-strategy.ts
index f9870e4a84..bad44fabec 100644
--- a/apps/sidecar/src/workflow-host-wiring/step-strategy.ts
+++ b/apps/sidecar/src/workflow-host-wiring/step-strategy.ts
@@ -3,11 +3,7 @@
 // per-step mail address and agent-state repo id, and the pre-spawn
 // write of every step's grants into its agent-state repo.
 
-import {
-  parseAgentId,
-  type Principal,
-  type RepoStore,
-} from "@intx/hub-sessions";
+import { parseAgentId, type Principal, type RepoStore } from "@intx/hub-sessions";
 import {
   STEP_GRANTS_PATH,
   STEP_GRANTS_REF,
@@ -169,14 +165,9 @@ export async function writeStepGrants(args: {
       runId: args.deploymentId,
       stepId,
     });
-    await args.repoStore.writeTree(
-      GRANTS_WRITE_PRINCIPAL,
-      repoId,
-      STEP_GRANTS_REF,
-      {
-        files: { [STEP_GRANTS_PATH]: serialized },
-        message: `Write step grants for ${stepId}`,
-      },
-    );
+    await args.repoStore.writeTree(GRANTS_WRITE_PRINCIPAL, repoId, STEP_GRANTS_REF, {
+      files: { [STEP_GRANTS_PATH]: serialized },
+      message: `Write step grants for ${stepId}`,
+    });
   }
 }
diff --git a/apps/sidecar/src/workflow-host-wiring/supervisor.test.ts b/apps/sidecar/src/workflow-host-wiring/supervisor.test.ts
index 149dbadd8f..77ef5e5865 100644
--- a/apps/sidecar/src/workflow-host-wiring/supervisor.test.ts
+++ b/apps/sidecar/src/workflow-host-wiring/supervisor.test.ts
@@ -26,8 +26,7 @@ mock.module("@intx/workflow-host", () => ({
   wrapHubTransportAsMailBus: () => ({
     routeInbound: async () => {},
   }),
-  hashGrants: async (grants: readonly unknown[]) =>
-    `stub-hash:${JSON.stringify(grants)}`,
+  hashGrants: async (grants: readonly unknown[]) => `stub-hash:${JSON.stringify(grants)}`,
 }));
 
 let capturedConfig: unknown;
@@ -35,9 +34,7 @@ let capturedConfig: unknown;
 const tempDirs: string[] = [];
 
 afterEach(async () => {
-  await Promise.all(
-    tempDirs.splice(0).map((dir) => rm(dir, { recursive: true, force: true })),
-  );
+  await Promise.all(tempDirs.splice(0).map((dir) => rm(dir, { recursive: true, force: true })));
 });
 
 async function makeRepoStore(): Promise<{ store: RepoStore; dir: string }> {
@@ -49,8 +46,7 @@ async function makeRepoStore(): Promise<{ store: RepoStore; dir: string }> {
   return { store, dir };
 }
 
-const { createSidecarWorkflowSupervisor, DEFAULT_MAX_GRANTS_AGE_MS } =
-  await import("./supervisor");
+const { createSidecarWorkflowSupervisor, DEFAULT_MAX_GRANTS_AGE_MS } = await import("./supervisor");
 
 test("createSidecarWorkflowSupervisor forwards onSuspensionRegister to the workflow-host supervisor", () => {
   const registerSuspension = mock(() => {});
@@ -158,9 +154,7 @@ test("createSidecarWorkflowSupervisor omits credentialDelivery when the deploy c
     dynamicSpawnEnv: () => ({}),
   });
 
-  expect(
-    (capturedConfig as { credentialDelivery?: unknown }).credentialDelivery,
-  ).toBeUndefined();
+  expect((capturedConfig as { credentialDelivery?: unknown }).credentialDelivery).toBeUndefined();
 });
 
 // CL-6242: the vendor's recycle policy (`RecyclePolicyBounds` /
@@ -188,14 +182,10 @@ test("createSidecarWorkflowSupervisor arms the grants-age recycle policy for a w
   expect(capturedConfig).toMatchObject({
     recyclePolicy: { maxGrantsAgeMs: DEFAULT_MAX_GRANTS_AGE_MS },
   });
-  expect(
-    typeof (capturedConfig as { readGrantsAgeMs?: unknown }).readGrantsAgeMs,
-  ).toBe("function");
+  expect(typeof (capturedConfig as { readGrantsAgeMs?: unknown }).readGrantsAgeMs).toBe("function");
   // No RSS reader: see the module-level comment in `supervisor.ts` on why
   // `maxRssBytes`/`readRssBytes` are never wired.
-  expect(
-    (capturedConfig as { readRssBytes?: unknown }).readRssBytes,
-  ).toBeUndefined();
+  expect((capturedConfig as { readRssBytes?: unknown }).readRssBytes).toBeUndefined();
 });
 
 test("createSidecarWorkflowSupervisor omits the recycle policy for a non-warm-keep deployment", () => {
@@ -215,12 +205,8 @@ test("createSidecarWorkflowSupervisor omits the recycle policy for a non-warm-ke
     warmKeep: false,
   });
 
-  expect(
-    (capturedConfig as { recyclePolicy?: unknown }).recyclePolicy,
-  ).toBeUndefined();
-  expect(
-    (capturedConfig as { readGrantsAgeMs?: unknown }).readGrantsAgeMs,
-  ).toBeUndefined();
+  expect((capturedConfig as { recyclePolicy?: unknown }).recyclePolicy).toBeUndefined();
+  expect((capturedConfig as { readGrantsAgeMs?: unknown }).readGrantsAgeMs).toBeUndefined();
 });
 
 test("readGrantsAgeMs reports undefined until deliverCredentials fires, then a non-negative age", async () => {
@@ -240,9 +226,8 @@ test("readGrantsAgeMs reports undefined until deliverCredentials fires, then a n
     warmKeep: true,
   });
 
-  const readGrantsAgeMs = (
-    capturedConfig as { readGrantsAgeMs: () => number | undefined }
-  ).readGrantsAgeMs;
+  const readGrantsAgeMs = (capturedConfig as { readGrantsAgeMs: () => number | undefined })
+    .readGrantsAgeMs;
   expect(readGrantsAgeMs()).toBeUndefined();
 
   await wired.supervisor.deliverCredentials({
@@ -282,10 +267,7 @@ test("createSidecarWorkflowSupervisor wires onRunStart to assemble the run's cre
 
   const onRunStart = (
     capturedConfig as {
-      onRunStart: (args: {
-        runId: string;
-        anchorRunId: string;
-      }) => Promise<unknown>;
+      onRunStart: (args: { runId: string; anchorRunId: string }) => Promise<unknown>;
     }
   ).onRunStart;
   const snapshot = await onRunStart({ runId: "run-1", anchorRunId: "dep-8" });
@@ -326,16 +308,13 @@ test("onRunStart fails a run with no per-run grants file closed", async () => {
 
   const onRunStart = (
     capturedConfig as {
-      onRunStart: (args: {
-        runId: string;
-        anchorRunId: string;
-      }) => Promise<unknown>;
+      onRunStart: (args: { runId: string; anchorRunId: string }) => Promise<unknown>;
     }
   ).onRunStart;
 
-  await expect(
-    onRunStart({ runId: "run-missing", anchorRunId: "dep-9" }),
-  ).rejects.toThrow(/has no grants file; failing closed/);
+  await expect(onRunStart({ runId: "run-missing", anchorRunId: "dep-9" })).rejects.toThrow(
+    /has no grants file; failing closed/,
+  );
 });
 
 test("onRunStart refreshes readGrantsAgeMs, mirroring deliverCredentials's observation point", async () => {
@@ -360,15 +339,11 @@ test("onRunStart refreshes readGrantsAgeMs, mirroring deliverCredentials's obser
     warmKeep: true,
   });
 
-  const readGrantsAgeMs = (
-    capturedConfig as { readGrantsAgeMs: () => number | undefined }
-  ).readGrantsAgeMs;
+  const readGrantsAgeMs = (capturedConfig as { readGrantsAgeMs: () => number | undefined })
+    .readGrantsAgeMs;
   const onRunStart = (
     capturedConfig as {
-      onRunStart: (args: {
-        runId: string;
-        anchorRunId: string;
-      }) => Promise<unknown>;
+      onRunStart: (args: { runId: string; anchorRunId: string }) => Promise<unknown>;
     }
   ).onRunStart;
   expect(readGrantsAgeMs()).toBeUndefined();
diff --git a/apps/sidecar/src/workflow-host-wiring/supervisor.ts b/apps/sidecar/src/workflow-host-wiring/supervisor.ts
index 75971daec8..8f2cf5ab22 100644
--- a/apps/sidecar/src/workflow-host-wiring/supervisor.ts
+++ b/apps/sidecar/src/workflow-host-wiring/supervisor.ts
@@ -5,11 +5,7 @@
 
 import { signEd25519 } from "@intx/crypto";
 import type { HubTransport } from "@intx/mail-memory";
-import type {
-  RepoId,
-  RepoStore,
-  WorkflowRunSupervisorPrincipal,
-} from "@intx/hub-sessions";
+import type { RepoId, RepoStore, WorkflowRunSupervisorPrincipal } from "@intx/hub-sessions";
 import {
   createWorkflowSupervisor,
   hashGrants,
@@ -30,10 +26,7 @@ import {
 
 import { getLogger } from "@intx/log";
 
-import {
-  defaultSubprocessSpawner,
-  SIDECAR_WORKFLOW_CHILD_BINARY,
-} from "./transport";
+import { defaultSubprocessSpawner, SIDECAR_WORKFLOW_CHILD_BINARY } from "./transport";
 import { readRunGrants } from "../run-grants";
 
 const logger = getLogger(["sidecar", "workflow-host-wiring", "supervisor"]);
@@ -242,10 +235,7 @@ export type CreateSidecarWorkflowSupervisorOpts = {
    * (crash-loop latch, channel crash, recycle failure). Production wiring
    * routes it to the deploy router's address reclaim.
    */
-  onSelfTerminate?: (info: {
-    phase: "stopped" | "crash-looping";
-    reason: string;
-  }) => void;
+  onSelfTerminate?: (info: { phase: "stopped" | "crash-looping"; reason: string }) => void;
   /**
    * Decrypted credential material from the deploy frame's
    * `workflow.credentials`, forwarded verbatim to the supervisor's
@@ -315,9 +305,7 @@ export function deriveSidecarMailAuditRef(deploymentId: string): (
 export function createSidecarWorkflowSupervisor(
   opts: CreateSidecarWorkflowSupervisorOpts,
 ): SidecarWorkflowSupervisor {
-  const mailBus: HubTransportMailBusAdapter = wrapHubTransportAsMailBus(
-    opts.transport,
-  );
+  const mailBus: HubTransportMailBusAdapter = wrapHubTransportAsMailBus(opts.transport);
   // Tracks the most recently spawned child's handle so `hardKillChild` can
   // reach it directly. The `WorkflowSupervisor` interface exposes no raw
   // handle access, so wrapping the spawner -- the same injection point
@@ -400,34 +388,24 @@ export function createSidecarWorkflowSupervisor(
     ...(opts.onSuspensionRegister !== undefined
       ? { onSuspensionRegister: opts.onSuspensionRegister }
       : {}),
-    ...(opts.onSelfTerminate !== undefined
-      ? { onSelfTerminate: opts.onSelfTerminate }
-      : {}),
+    ...(opts.onSelfTerminate !== undefined ? { onSelfTerminate: opts.onSelfTerminate } : {}),
     ...(opts.credentialDelivery !== undefined
       ? { credentialDelivery: opts.credentialDelivery }
       : {}),
-    ...(opts.deriveStepRepoId !== undefined
-      ? { deriveStepRepoId: opts.deriveStepRepoId }
-      : {}),
-    ...(opts.onDispatchTiming !== undefined
-      ? { onDispatchTiming: opts.onDispatchTiming }
-      : {}),
+    ...(opts.deriveStepRepoId !== undefined ? { deriveStepRepoId: opts.deriveStepRepoId } : {}),
+    ...(opts.onDispatchTiming !== undefined ? { onDispatchTiming: opts.onDispatchTiming } : {}),
     ...(opts.repackEveryMessages !== undefined
       ? { repackEveryMessages: opts.repackEveryMessages }
       : {}),
     ...(opts.consumedRetentionMs !== undefined
       ? { consumedRetentionMs: opts.consumedRetentionMs }
       : {}),
-    ...(opts.readyTimeoutMs !== undefined
-      ? { readyTimeoutMs: opts.readyTimeoutMs }
-      : {}),
+    ...(opts.readyTimeoutMs !== undefined ? { readyTimeoutMs: opts.readyTimeoutMs } : {}),
     ...(recyclePolicy !== undefined
       ? {
           recyclePolicy,
           readGrantsAgeMs: () =>
-            lastGrantsRefreshAt === undefined
-              ? undefined
-              : Date.now() - lastGrantsRefreshAt,
+            lastGrantsRefreshAt === undefined ? undefined : Date.now() - lastGrantsRefreshAt,
         }
       : {}),
   };
diff --git a/apps/sidecar/src/workflow-host-wiring/transport.ts b/apps/sidecar/src/workflow-host-wiring/transport.ts
index 0d6a35faf6..653a75a785 100644
--- a/apps/sidecar/src/workflow-host-wiring/transport.ts
+++ b/apps/sidecar/src/workflow-host-wiring/transport.ts
@@ -75,9 +75,7 @@ function ndjsonWriterFromFileSink(sink: Bun.FileSink): NdjsonWriter {
  * receiver's iterator finalises only on EOF, which mirrors the
  * `defaultControlReader` shape the child wires for `process.stdin`.
  */
-function ndjsonReaderFromReadableStream(
-  stream: ReadableStream<Uint8Array>,
-): NdjsonReader {
+function ndjsonReaderFromReadableStream(stream: ReadableStream<Uint8Array>): NdjsonReader {
   return {
     read(): AsyncIterableIterator<string> {
       return (async function* () {
diff --git a/apps/sidecar/src/workflow-host-wiring/wire-validation.ts b/apps/sidecar/src/workflow-host-wiring/wire-validation.ts
index e312862987..1ea25d7ddf 100644
--- a/apps/sidecar/src/workflow-host-wiring/wire-validation.ts
+++ b/apps/sidecar/src/workflow-host-wiring/wire-validation.ts
@@ -48,9 +48,7 @@ export function validateWorkflowProjection(projection: {
 }): void {
   const def = projection.definition;
   if (typeof def.id !== "string" || def.id.length === 0) {
-    throw new Error(
-      "sidecar deploy router: workflow.definition.id must be a non-empty string",
-    );
+    throw new Error("sidecar deploy router: workflow.definition.id must be a non-empty string");
   }
   if (!Array.isArray(def.stepOrder) || def.stepOrder.length === 0) {
     throw new Error(
@@ -58,14 +56,10 @@ export function validateWorkflowProjection(projection: {
     );
   }
   if (typeof def.steps !== "object" || def.steps === null) {
-    throw new Error(
-      "sidecar deploy router: workflow.definition.steps must be an object",
-    );
+    throw new Error("sidecar deploy router: workflow.definition.steps must be an object");
   }
   if (typeof projection.sources !== "object" || projection.sources === null) {
-    throw new Error(
-      "sidecar deploy router: workflow.sources must be an object",
-    );
+    throw new Error("sidecar deploy router: workflow.sources must be an object");
   }
   const steps = def.steps;
   const sources = projection.sources;
@@ -118,9 +112,7 @@ function canonicalJsonStringify(value: unknown): string {
   if (Array.isArray(value)) {
     return `[${value.map(canonicalJsonStringify).join(",")}]`;
   }
-  const entries = Object.entries(value).sort(([a], [b]) =>
-    a < b ? -1 : a > b ? 1 : 0,
-  );
+  const entries = Object.entries(value).sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
   return `{${entries
     .map(([k, v]) => `${JSON.stringify(k)}:${canonicalJsonStringify(v)}`)
     .join(",")}}`;
@@ -137,13 +129,8 @@ function canonicalJsonStringify(value: unknown): string {
  * round-trip the hub for a hash the orchestrator's hand-off task will
  * also derive deterministically from the same canonical form.
  */
-export async function computeWireDefinitionHash(
-  definition: unknown,
-): Promise<string> {
+export async function computeWireDefinitionHash(definition: unknown): Promise<string> {
   const canonical = canonicalJsonStringify(definition);
-  const digest = await crypto.subtle.digest(
-    "SHA-256",
-    new TextEncoder().encode(canonical),
-  );
+  const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(canonical));
   return hexEncode(new Uint8Array(digest));
 }
diff --git a/apps/sidecar/src/workflow-probe-handler.ts b/apps/sidecar/src/workflow-probe-handler.ts
index cc02450b6a..2118a9abef 100644
--- a/apps/sidecar/src/workflow-probe-handler.ts
+++ b/apps/sidecar/src/workflow-probe-handler.ts
@@ -35,10 +35,7 @@ import type { WorkflowProbeRequestFrame } from "@intx/types/sidecar";
 import { WorkflowProjectionDefinition } from "@intx/types/sidecar";
 import { computeWireDefinitionHash } from "@intx/types/wire-definition-hash";
 import { collectDeclaredPluginNames, projectLiveToInert } from "@intx/workflow";
-import {
-  walkCapabilities,
-  type CapabilityWalkResult,
-} from "@intx/workflow-deploy";
+import { walkCapabilities, type CapabilityWalkResult } from "@intx/workflow-deploy";
 import {
   DEFAULT_KILL_TIMEOUT_MS,
   MacedEnvelope,
@@ -214,7 +211,6 @@ export const defaultProbeChildSpawner: ProbeChildSpawner = ({
         proc.kill(signal);
         return;
       }
-      // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- the probe reaper passes "SIGTERM"/"SIGKILL"; Bun's runtime accepts the same "SIG*" strings, narrowed back at the boundary.
       proc.kill(signal as NodeJS.Signals);
     },
     exited: proc.exited,
@@ -257,12 +253,9 @@ export function createWorkflowProbeExecutor(opts: WorkflowProbeExecutorOpts): {
   const spawnProbeChild = opts.spawnProbeChild ?? defaultProbeChildSpawner;
   const binaryPath = opts.binaryPath ?? DEFAULT_PROBE_CHILD_BINARY;
   const childTimeoutMs = opts.childTimeoutMs ?? DEFAULT_PROBE_CHILD_TIMEOUT_MS;
-  const killTimeoutMs =
-    opts.killTimeoutMs ?? DEFAULT_PROBE_CHILD_KILL_TIMEOUT_MS;
+  const killTimeoutMs = opts.killTimeoutMs ?? DEFAULT_PROBE_CHILD_KILL_TIMEOUT_MS;
 
-  async function probe(
-    frame: WorkflowProbeRequestFrame,
-  ): Promise<WorkflowProbeResult> {
+  async function probe(frame: WorkflowProbeRequestFrame): Promise<WorkflowProbeResult> {
     const materialized = await opts.materialize(frame);
     try {
       return await runOneShotProbeChild({
@@ -295,9 +288,7 @@ interface RunOneShotProbeChildArgs {
  * exits without a frame (malformed code / crash), or the self-owned
  * deadline fires first.
  */
-async function runOneShotProbeChild(
-  args: RunOneShotProbeChildArgs,
-): Promise<WorkflowProbeResult> {
+async function runOneShotProbeChild(args: RunOneShotProbeChildArgs): Promise<WorkflowProbeResult> {
   const channelId = generateChannelId();
   const hmacKey = generateHmacKey();
   const env = buildProbeChildEnv({
@@ -317,12 +308,12 @@ async function runOneShotProbeChild(
   // Attach a catch so a post-reap stdout read error (the kill closes the
   // pipe mid-read) resolves to null instead of surfacing as an unhandled
   // rejection on the losing race branch.
-  const linePromise: Promise<string | null> = readResultLine(
-    handle.stdout,
-  ).catch((err: unknown) => {
-    logger.debug`probe child ${String(handle.pid)} stdout read errored: ${errorMessage(err)}`;
-    return null;
-  });
+  const linePromise: Promise<string | null> = readResultLine(handle.stdout).catch(
+    (err: unknown) => {
+      logger.debug`probe child ${String(handle.pid)} stdout read errored: ${errorMessage(err)}`;
+      return null;
+    },
+  );
 
   const deadline = createDeadline(args.childTimeoutMs);
   try {
@@ -386,10 +377,7 @@ function buildProbeChildEnv(args: {
  * guaranteed to settle -- a child that traps or ignores SIGTERM cannot
  * wedge this call. A kill against an already-exited child is a no-op.
  */
-async function reapChild(
-  handle: ProbeChildHandle,
-  killTimeoutMs: number,
-): Promise<void> {
+async function reapChild(handle: ProbeChildHandle, killTimeoutMs: number): Promise<void> {
   try {
     handle.kill("SIGTERM");
   } catch (err) {
@@ -434,9 +422,7 @@ async function parseProbeResult(
   }
   const maced = MacedEnvelope(raw);
   if (maced instanceof type.errors) {
-    throw new Error(
-      `workflow probe child result envelope failed validation: ${maced.summary}`,
-    );
+    throw new Error(`workflow probe child result envelope failed validation: ${maced.summary}`);
   }
   const envelopeBytes = encodeEnvelope(maced.envelope);
   const macBytes = hexDecode(maced.mac);
@@ -453,18 +439,14 @@ async function parseProbeResult(
   }
   const payload = ProbeResultPayload(maced.envelope.payload);
   if (payload instanceof type.errors) {
-    throw new Error(
-      `workflow probe child result payload failed validation: ${payload.summary}`,
-    );
+    throw new Error(`workflow probe child result payload failed validation: ${payload.summary}`);
   }
   if (!payload.ok) {
     throw new Error(`workflow probe evaluation failed: ${payload.error}`);
   }
   const projection = WorkflowProjectionDefinition(payload.projection);
   if (projection instanceof type.errors) {
-    throw new Error(
-      `workflow probe child projection failed validation: ${projection.summary}`,
-    );
+    throw new Error(`workflow probe child projection failed validation: ${projection.summary}`);
   }
   return {
     projection,
@@ -525,9 +507,7 @@ export async function runWorkflowProbeChildFromProcessEnv(
   await writeLine(`${JSON.stringify({ envelope, mac })}\n`);
 }
 
-async function computeProbePayload(
-  packageDir: string,
-): Promise<ProbeResultPayload> {
+async function computeProbePayload(packageDir: string): Promise<ProbeResultPayload> {
   const definition = await loadWorkflowDefinitionFromClosure({ packageDir });
   const projection = projectLiveToInert(definition);
   const wireHash = await computeWireDefinitionHash(projection);
@@ -546,11 +526,10 @@ async function computeProbePayload(
   // an un-approved `tool:<name>`. Loading here (over the frozen closure the
   // run-child also materializes from) keeps the approved snapshot and the
   // runtime plugin in lockstep.
-  const pluginToolDefinitions =
-    await loadWorkflowPluginToolDefinitionsFromClosure({
-      packageDir,
-      plugins: collectDeclaredPluginNames(definition),
-    });
+  const pluginToolDefinitions = await loadWorkflowPluginToolDefinitionsFromClosure({
+    packageDir,
+    plugins: collectDeclaredPluginNames(definition),
+  });
   const walk = walkCapabilities(definition, directors, pluginToolDefinitions);
   // Fail closed on an unresolved director: the runtime does not re-gate
   // `director:<id>` against the approved grant set, so this advertisement is
@@ -566,10 +545,7 @@ async function computeProbePayload(
     ok: true,
     projection,
     grants: collectDeploymentGrants(walk),
-    grantWalkSnapshot: buildGrantWalkSnapshot(
-      walk,
-      definition.grantRequirements,
-    ),
+    grantWalkSnapshot: buildGrantWalkSnapshot(walk, definition.grantRequirements),
     wireHash,
   };
 }
@@ -621,9 +597,7 @@ interface ProbeChildEnv {
 
 const NonEmptyString = type("string > 0");
 
-function parseProbeChildEnv(
-  rawEnv: Readonly<Record<string, string | undefined>>,
-): ProbeChildEnv {
+function parseProbeChildEnv(rawEnv: Readonly<Record<string, string | undefined>>): ProbeChildEnv {
   const channelId = requireEnv(rawEnv, PROBE_CHANNEL_ID_ENV);
   const packageDir = requireEnv(rawEnv, PROBE_PACKAGE_DIR_ENV);
   const hmacKeyHex = requireEnv(rawEnv, PROBE_HMAC_KEY_ENV);
@@ -636,15 +610,10 @@ function parseProbeChildEnv(
   return { channelId, hmacKey, packageDir };
 }
 
-function requireEnv(
-  rawEnv: Readonly<Record<string, string | undefined>>,
-  key: string,
-): string {
+function requireEnv(rawEnv: Readonly<Record<string, string | undefined>>, key: string): string {
   const value = NonEmptyString(rawEnv[key]);
   if (value instanceof type.errors) {
-    throw new Error(
-      `workflow probe child env: required key ${key} is unset or empty`,
-    );
+    throw new Error(`workflow probe child env: required key ${key} is unset or empty`);
   }
   return value;
 }
@@ -667,9 +636,7 @@ function defaultStdoutWriteLine(line: string): Promise<void> {
  * complete line, or `null` when the stream closes without one (the child
  * exited before writing). Releases the reader lock on every exit.
  */
-async function readResultLine(
-  stream: ReadableStream<Uint8Array>,
-): Promise<string | null> {
+async function readResultLine(stream: ReadableStream<Uint8Array>): Promise<string | null> {
   const reader = stream.getReader();
   const decoder = new TextDecoder("utf-8");
   let pending = "";
diff --git a/apps/sidecar/src/workflow-run-pack-client.test.ts b/apps/sidecar/src/workflow-run-pack-client.test.ts
index e5b94f9107..297815668f 100644
--- a/apps/sidecar/src/workflow-run-pack-client.test.ts
+++ b/apps/sidecar/src/workflow-run-pack-client.test.ts
@@ -81,15 +81,12 @@ function createRecordingUnderlyingRepoStore(): {
       packedTipCommits.push({ repoId, ref, commitSha });
     },
   };
-  // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- in-test stub; the unused RepoStore methods are guarded by the Proxy below
   const store = new Proxy(stub as RepoStore, {
     get(target, prop, receiver) {
       const value = Reflect.get(target, prop, receiver);
       if (value !== undefined) return value;
       return () => {
-        throw new Error(
-          `stub RepoStore: ${String(prop)} not implemented for this test`,
-        );
+        throw new Error(`stub RepoStore: ${String(prop)} not implemented for this test`);
       };
     },
   });
@@ -98,8 +95,7 @@ function createRecordingUnderlyingRepoStore(): {
 
 describe("createWorkflowRunPackClient", () => {
   test("push builds a pack under the supervisor principal, forwards it to the hub link, and commits the packed tip on the ack", async () => {
-    const { store, packs, packedTipCommits } =
-      createRecordingUnderlyingRepoStore();
+    const { store, packs, packedTipCommits } = createRecordingUnderlyingRepoStore();
     const sent: {
       agentAddress: string;
       repoId: RepoId;
@@ -142,8 +138,7 @@ describe("createWorkflowRunPackClient", () => {
     const client = createWorkflowRunPackClient({
       substrate: store,
       hubLink: {
-        pushWorkflowRunPack: () =>
-          Promise.reject(new Error("transfer cancelled: Connection lost")),
+        pushWorkflowRunPack: () => Promise.reject(new Error("transfer cancelled: Connection lost")),
       },
     });
 
@@ -248,16 +243,11 @@ describe("createWorkflowRunPackPushingRepoStore", () => {
     });
 
     const repoId: RepoId = { kind: "workflow-run", id: "dep-pipeline" };
-    await facade.writeTreePreservingPrefix(
-      { kind: "supervisor" },
-      repoId,
-      "refs/heads/main",
-      {
-        preservePrefix: "runs/r-1/events/",
-        merge: async () => ({ "runs/r-1/events/0.json": "{}" }),
-        message: "first",
-      },
-    );
+    await facade.writeTreePreservingPrefix({ kind: "supervisor" }, repoId, "refs/heads/main", {
+      preservePrefix: "runs/r-1/events/",
+      merge: async () => ({ "runs/r-1/events/0.json": "{}" }),
+      message: "first",
+    });
     // Yield to the microtask queue so the push's `enter` log lands.
     // With a serialised wrap the write would not resolve until
     // `exit`; pipelining is the property under test, so we assert
@@ -307,18 +297,13 @@ describe("createWorkflowRunPackPushingRepoStore", () => {
     // slot's `dirty` flag, but only one coalesced follow-up push
     // runs after the first exits.
     for (let i = 0; i < 5; i += 1) {
-      await facade.writeTreePreservingPrefix(
-        { kind: "supervisor" },
-        repoId,
-        "refs/heads/main",
-        {
-          preservePrefix: "runs/r-1/events/",
-          merge: async () => ({
-            [`runs/r-1/events/${String(i)}.json`]: "{}",
-          }),
-          message: `write-${String(i)}`,
-        },
-      );
+      await facade.writeTreePreservingPrefix({ kind: "supervisor" }, repoId, "refs/heads/main", {
+        preservePrefix: "runs/r-1/events/",
+        merge: async () => ({
+          [`runs/r-1/events/${String(i)}.json`]: "{}",
+        }),
+        message: `write-${String(i)}`,
+      });
     }
     expect(pushCount).toBe(1);
     resolveFirst();
@@ -353,16 +338,11 @@ describe("createWorkflowRunPackPushingRepoStore", () => {
       registry,
     });
     const repoId: RepoId = { kind: "workflow-run", id: "dep-fail" };
-    await facade.writeTreePreservingPrefix(
-      { kind: "supervisor" },
-      repoId,
-      "refs/heads/main",
-      {
-        preservePrefix: "runs/r/events/",
-        merge: async () => ({ "runs/r/events/0.json": "{}" }),
-        message: "first",
-      },
-    );
+    await facade.writeTreePreservingPrefix({ kind: "supervisor" }, repoId, "refs/heads/main", {
+      preservePrefix: "runs/r/events/",
+      merge: async () => ({ "runs/r/events/0.json": "{}" }),
+      message: "first",
+    });
     // Wait for the failed push to settle on the chain without
     // consuming the latched error; flush would also surface the
     // error, but the contract being pinned here is that the NEXT
@@ -370,16 +350,11 @@ describe("createWorkflowRunPackPushingRepoStore", () => {
     // code does not call flush between writes.
     await new Promise((resolve) => setTimeout(resolve, 10));
     await expect(
-      facade.writeTreePreservingPrefix(
-        { kind: "supervisor" },
-        repoId,
-        "refs/heads/main",
-        {
-          preservePrefix: "runs/r/events/",
-          merge: async () => ({ "runs/r/events/1.json": "{}" }),
-          message: "second",
-        },
-      ),
+      facade.writeTreePreservingPrefix({ kind: "supervisor" }, repoId, "refs/heads/main", {
+        preservePrefix: "runs/r/events/",
+        merge: async () => ({ "runs/r/events/1.json": "{}" }),
+        message: "second",
+      }),
     ).rejects.toThrow(/non_fast_forward/);
   });
 
@@ -475,16 +450,11 @@ describe("createWorkflowRunPackPushingRepoStore", () => {
     const repoId: RepoId = { kind: "workflow-run", id: "dep-blocked" };
 
     facade.markAddressUnroutable("agent-blocked@example.com");
-    await facade.writeTreePreservingPrefix(
-      { kind: "supervisor" },
-      repoId,
-      "refs/heads/main",
-      {
-        preservePrefix: "runs/r/events/",
-        merge: async () => ({ "runs/r/events/0.json": "{}" }),
-        message: "append while blocked",
-      },
-    );
+    await facade.writeTreePreservingPrefix({ kind: "supervisor" }, repoId, "refs/heads/main", {
+      preservePrefix: "runs/r/events/",
+      merge: async () => ({ "runs/r/events/0.json": "{}" }),
+      message: "append while blocked",
+    });
     // Yield: a wire push would have run by now if the block were not held.
     await new Promise((r) => setTimeout(r, 0));
     expect(pushCount).toBe(0);
@@ -520,16 +490,11 @@ describe("createWorkflowRunPackPushingRepoStore", () => {
     });
     const repoId: RepoId = { kind: "workflow-run", id: "dep-cancelled" };
 
-    await facade.writeTreePreservingPrefix(
-      { kind: "supervisor" },
-      repoId,
-      "refs/heads/main",
-      {
-        preservePrefix: "runs/r/events/",
-        merge: async () => ({ "runs/r/events/0.json": "{}" }),
-        message: "single batch",
-      },
-    );
+    await facade.writeTreePreservingPrefix({ kind: "supervisor" }, repoId, "refs/heads/main", {
+      preservePrefix: "runs/r/events/",
+      merge: async () => ({ "runs/r/events/0.json": "{}" }),
+      message: "single batch",
+    });
     // Let the first push settle and latch "Connection lost" without a
     // second write to re-arm the loop.
     await new Promise((r) => setTimeout(r, 10));
@@ -564,16 +529,11 @@ describe("createWorkflowRunPackPushingRepoStore", () => {
     });
     const repoId: RepoId = { kind: "workflow-run", id: "dep-clean" };
 
-    await facade.writeTreePreservingPrefix(
-      { kind: "supervisor" },
-      repoId,
-      "refs/heads/main",
-      {
-        preservePrefix: "runs/r/events/",
-        merge: async () => ({ "runs/r/events/0.json": "{}" }),
-        message: "append",
-      },
-    );
+    await facade.writeTreePreservingPrefix({ kind: "supervisor" }, repoId, "refs/heads/main", {
+      preservePrefix: "runs/r/events/",
+      merge: async () => ({ "runs/r/events/0.json": "{}" }),
+      message: "append",
+    });
     await facade.flushWorkflowRunPushes(repoId, "refs/heads/main");
     expect(pushCount).toBe(1);
 
@@ -586,9 +546,7 @@ describe("createWorkflowRunPackPushingRepoStore", () => {
 describe("createMultistepMailRouter", () => {
   test("tryRoute returns null when no handler is registered", () => {
     const router = createMultistepMailRouter();
-    expect(
-      router.tryRoute("dep@integration.interchange", new Uint8Array([1])),
-    ).toBeNull();
+    expect(router.tryRoute("dep@integration.interchange", new Uint8Array([1]))).toBeNull();
   });
 
   test("a registered handler receives the inbound message and tryRoute returns its settlement", async () => {
@@ -610,10 +568,7 @@ describe("createMultistepMailRouter", () => {
     router.register("dep@integration.interchange", async () => {
       throw new Error("durable write failed");
     });
-    const durable = router.tryRoute(
-      "dep@integration.interchange",
-      new Uint8Array([1]),
-    );
+    const durable = router.tryRoute("dep@integration.interchange", new Uint8Array([1]));
     expect(durable).not.toBeNull();
     await expect(durable).rejects.toThrow(/durable write failed/);
   });
@@ -624,9 +579,7 @@ describe("createMultistepMailRouter", () => {
     router.register("dep-a@integration.interchange", async (msg) => {
       received.push(msg);
     });
-    expect(
-      router.tryRoute("dep-b@integration.interchange", new Uint8Array([9])),
-    ).toBeNull();
+    expect(router.tryRoute("dep-b@integration.interchange", new Uint8Array([9]))).toBeNull();
     expect(received).toHaveLength(0);
   });
 
@@ -637,9 +590,7 @@ describe("createMultistepMailRouter", () => {
       received.push(msg);
     });
     router.unregister("dep@integration.interchange");
-    expect(
-      router.tryRoute("dep@integration.interchange", new Uint8Array([1])),
-    ).toBeNull();
+    expect(router.tryRoute("dep@integration.interchange", new Uint8Array([1]))).toBeNull();
     expect(received).toHaveLength(0);
   });
 
@@ -737,9 +688,7 @@ describe("createMultistepCredentialsRouter", () => {
     router.register("dep@integration.interchange", async () => {
       throw new Error("deliverCredentials failed in a recycling phase");
     });
-    await expect(router.tryRoute(frame)).rejects.toThrow(
-      /deliverCredentials failed/,
-    );
+    await expect(router.tryRoute(frame)).rejects.toThrow(/deliverCredentials failed/);
   });
 });
 
@@ -765,8 +714,7 @@ describe("createMultistepSourcesRouter", () => {
 
   test("a registered handler receives the rotation and tryRoute returns true", async () => {
     const router = createMultistepSourcesRouter();
-    const received: { sources: InferenceSource[]; defaultSource: string }[] =
-      [];
+    const received: { sources: InferenceSource[]; defaultSource: string }[] = [];
     router.register("dep@integration.interchange", async (args) => {
       received.push(args);
     });
@@ -802,9 +750,9 @@ describe("createMultistepSourcesRouter", () => {
     });
     // Duplicate ids would crash the child's control-channel receiver on
     // its narrow, so the router rejects before dispatch.
-    await expect(
-      router.tryRoute({ ...frame, sources: [source, { ...source }] }),
-    ).rejects.toThrow(/unique ids/);
+    await expect(router.tryRoute({ ...frame, sources: [source, { ...source }] })).rejects.toThrow(
+      /unique ids/,
+    );
     expect(called).toBe(false);
   });
 
diff --git a/apps/sidecar/src/workflow-run-pack-client.ts b/apps/sidecar/src/workflow-run-pack-client.ts
index e983bb25d8..e8e9193249 100644
--- a/apps/sidecar/src/workflow-run-pack-client.ts
+++ b/apps/sidecar/src/workflow-run-pack-client.ts
@@ -19,11 +19,7 @@ import { getLogger } from "@intx/log";
 import { SourcesUpdatedData } from "@intx/workflow-host";
 import type { InferenceSource } from "@intx/types/runtime";
 import type { CredentialDelivery } from "@intx/types/sidecar";
-import type {
-  RepoId,
-  RepoStore,
-  WorkflowRunSupervisorPrincipal,
-} from "@intx/hub-sessions";
+import type { RepoId, RepoStore, WorkflowRunSupervisorPrincipal } from "@intx/hub-sessions";
 import type { HubLink } from "@intx/hub-agent";
 
 const logger = getLogger(["sidecar", "workflow-run-pack-client"]);
@@ -37,11 +33,7 @@ export type WorkflowRunPackClient = {
    * failure shape is intentionally loud per the project's
    * defensive-coding rule.
    */
-  push(opts: {
-    agentAddress: string;
-    repoId: RepoId;
-    ref: string;
-  }): Promise<void>;
+  push(opts: { agentAddress: string; repoId: RepoId; ref: string }): Promise<void>;
   /**
    * Seed the acknowledged-tip state after the Hub restores a ref into a fresh
    * worker. This prevents a reconnect from trying to re-send an empty delta at
@@ -96,11 +88,7 @@ export function createWorkflowRunPackClient(
       if (tip !== null && tip === lastAckedSha.get(ackKey(repoId, ref))) {
         return;
       }
-      const { pack, commitSha } = await substrate.createPack(
-        principal,
-        repoId,
-        ref,
-      );
+      const { pack, commitSha } = await substrate.createPack(principal, repoId, ref);
       await hubLink.pushWorkflowRunPack({
         agentAddress,
         repoId,
@@ -359,9 +347,7 @@ export function createMultistepGrantsRouter(): MultistepGrantsRouter {
  * the child where the material cell is swapped. No durable persist --
  * credential material never touches disk.
  */
-export type MultistepCredentialsHandler = (args: {
-  delivery: CredentialDelivery;
-}) => Promise<void>;
+export type MultistepCredentialsHandler = (args: { delivery: CredentialDelivery }) => Promise<void>;
 
 /**
  * Per-deployment-address credential-delivery handler registry the sidecar
@@ -416,9 +402,7 @@ export function createMultistepCredentialsRouter(): MultistepCredentialsRouter {
  * commits a signed `CancelRequested{origin: "supervisor-drain"}`
  * against the workflow-run repo when the deadline expires.
  */
-export type MultistepDrainHandler = (args: {
-  deadlineMs: number;
-}) => Promise<void>;
+export type MultistepDrainHandler = (args: { deadlineMs: number }) => Promise<void>;
 
 /**
  * Per-deployment-address drain handler registry the sidecar hub-link
@@ -653,10 +637,7 @@ export type WorkflowRunPackPushingRepoStore = RepoStore & {
    * hook so an undeploy does not leave a slot (and its blocked address)
    * in this process-wide map forever.
    */
-  reclaimPushState: (entry: {
-    deploymentId: string;
-    agentAddress: string;
-  }) => void;
+  reclaimPushState: (entry: { deploymentId: string; agentAddress: string }) => void;
 };
 
 export function createWorkflowRunPackPushingRepoStore(
@@ -721,8 +702,7 @@ export function createWorkflowRunPackPushingRepoStore(
         } catch (cause) {
           const msg = cause instanceof Error ? cause.message : String(cause);
           logger.warn`workflow-run pack push failed for deployment ${repoId.id} (${slot.agentAddress}): ${msg}`;
-          slot.lastError =
-            cause instanceof Error ? cause : new Error(String(cause));
+          slot.lastError = cause instanceof Error ? cause : new Error(String(cause));
         }
       }
       slot.inFlight = null;
@@ -730,11 +710,7 @@ export function createWorkflowRunPackPushingRepoStore(
     })();
   }
 
-  function schedulePush(
-    agentAddress: string,
-    repoId: RepoId,
-    ref: string,
-  ): void {
+  function schedulePush(agentAddress: string, repoId: RepoId, ref: string): void {
     const key = slotKey(repoId, ref);
     let slot = slots.get(key);
     if (slot === undefined) {
@@ -777,10 +753,7 @@ export function createWorkflowRunPackPushingRepoStore(
     blockedAddresses.add(agentAddress);
   }
 
-  function reclaimPushState(entry: {
-    deploymentId: string;
-    agentAddress: string;
-  }): void {
+  function reclaimPushState(entry: { deploymentId: string; agentAddress: string }): void {
     blockedAddresses.delete(entry.agentAddress);
     for (const [key, slot] of slots) {
       if (slot.repoId.id === entry.deploymentId) {
@@ -814,10 +787,7 @@ export function createWorkflowRunPackPushingRepoStore(
     }
   }
 
-  async function flushWorkflowRunPushes(
-    repoId: RepoId,
-    ref: string,
-  ): Promise<void> {
+  async function flushWorkflowRunPushes(repoId: RepoId, ref: string): Promise<void> {
     const slot = slots.get(slotKey(repoId, ref));
     if (slot === undefined) return;
     if (slot.inFlight === null && !slot.dirty) {
@@ -850,8 +820,7 @@ export function createWorkflowRunPackPushingRepoStore(
     getRepoDir: underlying.getRepoDir.bind(underlying),
     subscribe: underlying.subscribe.bind(underlying),
     openCommittedReads: underlying.openCommittedReads.bind(underlying),
-    openCommittedReadsAtCommit:
-      underlying.openCommittedReadsAtCommit.bind(underlying),
+    openCommittedReadsAtCommit: underlying.openCommittedReadsAtCommit.bind(underlying),
     flushWorkflowRunPushes,
     notifyAddressRoutable,
     markAddressUnroutable,
@@ -863,12 +832,7 @@ export function createWorkflowRunPackPushingRepoStore(
           throw latched;
         }
       }
-      const result = await underlying.writeTreePreservingPrefix(
-        principal,
-        repoId,
-        ref,
-        args,
-      );
+      const result = await underlying.writeTreePreservingPrefix(principal, repoId, ref, args);
       if (repoId.kind !== "workflow-run") {
         return result;
       }
@@ -888,12 +852,7 @@ export function createWorkflowRunPackPushingRepoStore(
           throw latched;
         }
       }
-      const result = await underlying.writeTreeDelta(
-        principal,
-        repoId,
-        ref,
-        args,
-      );
+      const result = await underlying.writeTreeDelta(principal, repoId, ref, args);
       if (repoId.kind !== "workflow-run") {
         return result;
       }
diff --git a/apps/sidecar/src/workflow-run-pack-restore.test.ts b/apps/sidecar/src/workflow-run-pack-restore.test.ts
index 4114b866c7..907a1daa81 100644
--- a/apps/sidecar/src/workflow-run-pack-restore.test.ts
+++ b/apps/sidecar/src/workflow-run-pack-restore.test.ts
@@ -90,9 +90,7 @@ test("restored refs survive replacement and the next sidecar commit fast-forward
     for (const ref of ["refs/heads/main", "refs/heads/events"] as const) {
       const pack = await source.repoStore.createPack(hubPrincipal, repoId, ref);
       await restore({ agentAddress, repoId, ...pack });
-      expect(await target.repoStore.resolveRef(hubPrincipal, repoId, ref)).toBe(
-        pack.commitSha,
-      );
+      expect(await target.repoStore.resolveRef(hubPrincipal, repoId, ref)).toBe(pack.commitSha);
     }
     const restoredInbox = path.join(
       target.repoStore.getRepoDir(repoId),
@@ -141,18 +139,8 @@ test("restored refs survive replacement and the next sidecar commit fast-forward
     });
 
     expect(pushed).toHaveLength(1);
-    expect(
-      await source.repoStore.resolveRef(
-        hubPrincipal,
-        repoId,
-        "refs/heads/events",
-      ),
-    ).toBe(
-      await target.repoStore.resolveRef(
-        hubPrincipal,
-        repoId,
-        "refs/heads/events",
-      ),
+    expect(await source.repoStore.resolveRef(hubPrincipal, repoId, "refs/heads/events")).toBe(
+      await target.repoStore.resolveRef(hubPrincipal, repoId, "refs/heads/events"),
     );
   } finally {
     await fs.rm(root, { recursive: true, force: true });
diff --git a/apps/sidecar/src/workflow-run-pack-restore.ts b/apps/sidecar/src/workflow-run-pack-restore.ts
index 8d54672eec..53b4245e59 100644
--- a/apps/sidecar/src/workflow-run-pack-restore.ts
+++ b/apps/sidecar/src/workflow-run-pack-restore.ts
@@ -1,11 +1,7 @@
 import { promises as fs } from "node:fs";
 import path from "node:path";
 
-import {
-  WORKFLOW_RUN_RESTORE_REFS,
-  type RepoId,
-  type RepoStore,
-} from "@intx/hub-sessions";
+import { WORKFLOW_RUN_RESTORE_REFS, type RepoId, type RepoStore } from "@intx/hub-sessions";
 import { deriveWorkflowRunRepoId } from "@intx/workflow-deploy";
 
 const RESTORABLE_REFS: readonly string[] = WORKFLOW_RUN_RESTORE_REFS;
@@ -18,19 +14,14 @@ export type WorkflowRunPackRestoreArgs = {
   commitSha: string;
 };
 
-export type WorkflowRunPackRestorer = (
-  args: WorkflowRunPackRestoreArgs,
-) => Promise<void>;
+export type WorkflowRunPackRestorer = (args: WorkflowRunPackRestoreArgs) => Promise<void>;
 
 type MaterializedFile = {
   oid: string;
   read(): Promise<Uint8Array>;
 };
 
-async function materializeRestoredRefs(
-  substrate: RepoStore,
-  repoId: RepoId,
-): Promise<void> {
+async function materializeRestoredRefs(substrate: RepoStore, repoId: RepoId): Promise<void> {
   const hubPrincipal = { kind: "hub" } as const;
   const files = new Map<string, MaterializedFile>();
   const directories = new Set<string>();
@@ -64,9 +55,7 @@ async function materializeRestoredRefs(
         }
         const existing = files.get(relPath);
         if (existing !== undefined && existing.oid !== entry.oid) {
-          throw new Error(
-            `workflow_run_restore_conflict: ${relPath} differs across restored refs`,
-          );
+          throw new Error(`workflow_run_restore_conflict: ${relPath} differs across restored refs`);
         }
         if (existing === undefined) {
           files.set(relPath, {
@@ -98,9 +87,7 @@ async function materializeRestoredRefs(
   for (const [relPath, file] of files) {
     const destination = destinations.get(relPath);
     if (destination === undefined) {
-      throw new Error(
-        `workflow_run_restore_invalid: missing validated destination for ${relPath}`,
-      );
+      throw new Error(`workflow_run_restore_invalid: missing validated destination for ${relPath}`);
     }
     await fs.mkdir(path.dirname(destination), { recursive: true });
     await fs.writeFile(destination, await file.read());
@@ -133,9 +120,7 @@ export function createWorkflowRunPackRestorer(args: {
       );
     }
     if (!RESTORABLE_REFS.includes(ref)) {
-      throw new Error(
-        `workflow_run_restore_invalid: unsupported workflow-run ref ${ref}`,
-      );
+      throw new Error(`workflow_run_restore_invalid: unsupported workflow-run ref ${ref}`);
     }
 
     // `RepoStore` initializes a signed `.gitignore` genesis on main. Do that
@@ -143,20 +128,9 @@ export function createWorkflowRunPackRestorer(args: {
     // null and then letting `receivePack` initialize it would observe a new
     // genesis inside the receive lock and reject the stale null pre-image.
     await substrate.initRepo(repoId);
-    const expectedOldSha = await substrate.resolveRef(
-      hubPrincipal,
-      repoId,
-      ref,
-    );
+    const expectedOldSha = await substrate.resolveRef(hubPrincipal, repoId, ref);
     if (expectedOldSha !== commitSha) {
-      await substrate.receivePack(
-        hubPrincipal,
-        repoId,
-        ref,
-        pack,
-        commitSha,
-        expectedOldSha,
-      );
+      await substrate.receivePack(hubPrincipal, repoId, ref, pack, commitSha, expectedOldSha);
     }
     await materializeRestoredRefs(substrate, repoId);
 
diff --git a/apps/sidecar/src/workflow-run-record.test.ts b/apps/sidecar/src/workflow-run-record.test.ts
index 2cb675f112..bd7eefc3b5 100644
--- a/apps/sidecar/src/workflow-run-record.test.ts
+++ b/apps/sidecar/src/workflow-run-record.test.ts
@@ -154,8 +154,7 @@ describe("workflow run record store", () => {
     // all-missing rejecting while silently admitting a partial record). The
     // `SourceRefPin` co-requires its `source` + `closure`, so a half-populated
     // pin must be rejected too, not just an absent one.
-    const rejects = (r: unknown): boolean =>
-      WorkflowRunRecord(r) instanceof type.errors;
+    const rejects = (r: unknown): boolean => WorkflowRunRecord(r) instanceof type.errors;
 
     const base = {
       version: 1,
@@ -177,12 +176,8 @@ describe("workflow run record store", () => {
     expect(rejects({ ...base, approvedWireHash })).toBe(true);
     // A half-populated pin (only one of source/closure) is rejected by the
     // pin's own co-requirement, even alongside a valid hash.
-    expect(rejects({ ...base, sourceRef: { source }, approvedWireHash })).toBe(
-      true,
-    );
-    expect(rejects({ ...base, sourceRef: { closure }, approvedWireHash })).toBe(
-      true,
-    );
+    expect(rejects({ ...base, sourceRef: { source }, approvedWireHash })).toBe(true);
+    expect(rejects({ ...base, sourceRef: { closure }, approvedWireHash })).toBe(true);
     // Full pin + hash -> accepted.
     expect(rejects({ ...base, sourceRef, approvedWireHash })).toBe(false);
   });
@@ -295,10 +290,7 @@ describe("scanWorkflowRunRecords", () => {
     // A directory whose record parses but fails the schema (missing fields).
     const invalidDir = path.join(dataDir, "workflow-runs", "dep-invalid");
     await fs.mkdir(invalidDir, { recursive: true });
-    await fs.writeFile(
-      path.join(invalidDir, "deployment.json"),
-      JSON.stringify({ version: 1 }),
-    );
+    await fs.writeFile(path.join(invalidDir, "deployment.json"), JSON.stringify({ version: 1 }));
 
     // A bare run directory with no record at all.
     await fs.mkdir(path.join(dataDir, "workflow-runs", "dep-empty"), {
diff --git a/apps/sidecar/src/workflow-run-record.ts b/apps/sidecar/src/workflow-run-record.ts
index 7421b27ad8..6eaf352f64 100644
--- a/apps/sidecar/src/workflow-run-record.ts
+++ b/apps/sidecar/src/workflow-run-record.ts
@@ -37,9 +37,7 @@ const RECORD_FILENAME = "deployment.json";
 /** True for a `node:fs` rejection whose `code` is `ENOENT`. */
 function isENOENT(cause: unknown): boolean {
   return (
-    cause instanceof Error &&
-    "code" in cause &&
-    (cause as { code: unknown }).code === "ENOENT"
+    cause instanceof Error && "code" in cause && (cause as { code: unknown }).code === "ENOENT"
   );
 }
 
@@ -119,10 +117,7 @@ export async function writeWorkflowRunRecord(
  * torn-down or never-completed run is not restored on the next boot. A
  * missing record is not an error (`force`).
  */
-export async function deleteWorkflowRunRecord(
-  dataDir: string,
-  runId: string,
-): Promise<void> {
+export async function deleteWorkflowRunRecord(dataDir: string, runId: string): Promise<void> {
   await rm(recordPath(dataDir, runId), { force: true });
 }
 
@@ -145,9 +140,7 @@ export interface ScannedWorkflowRun {
  * The returned `runId` is the directory name; the caller cross-checks it
  * against the record's own address before trusting it.
  */
-export async function scanWorkflowRunRecords(
-  dataDir: string,
-): Promise<ScannedWorkflowRun[]> {
+export async function scanWorkflowRunRecords(dataDir: string): Promise<ScannedWorkflowRun[]> {
   const runsDir = pathJoin(dataDir, "workflow-runs");
   let entries;
   try {
diff --git a/apps/sidecar/src/workflow-substrate-factory/child-runtime.ts b/apps/sidecar/src/workflow-substrate-factory/child-runtime.ts
index d938b75f98..c2c273e04a 100644
--- a/apps/sidecar/src/workflow-substrate-factory/child-runtime.ts
+++ b/apps/sidecar/src/workflow-substrate-factory/child-runtime.ts
@@ -11,11 +11,7 @@ import path from "node:path";
 
 import { createDefaultDirectorRegistry } from "@intx/agent";
 import type { DirectorRegistry } from "@intx/agent";
-import type {
-  Principal,
-  RepoId,
-  RepoStore,
-} from "@intx/hub-sessions/substrate";
+import type { Principal, RepoId, RepoStore } from "@intx/hub-sessions/substrate";
 import { signalName } from "@intx/types";
 import type { InferenceEvent } from "@intx/types/runtime";
 import {
@@ -46,10 +42,7 @@ import {
 import type { MailPartReader } from "@intx/types/runtime";
 import { reportError } from "@corbits/error-sink";
 
-import {
-  parseStepInferenceSources,
-  type StepInferenceSourceTable,
-} from "./config";
+import { parseStepInferenceSources, type StepInferenceSourceTable } from "./config";
 
 function fireAndForget(
   work: Promise<unknown>,
@@ -215,9 +208,7 @@ export interface SidecarRunChildDeps {
  * either per-call (no handle to dispose) or shared with the parent
  * (the scheduler).
  */
-export function createSidecarRunChild(
-  deps: SidecarRunChildDeps,
-): RunChildWorkflow {
+export function createSidecarRunChild(deps: SidecarRunChildDeps): RunChildWorkflow {
   const directors = deps.directors ?? createDefaultDirectorRegistry();
   const clock = deps.clock ?? defaultClock;
   const newId = deps.newId ?? defaultNewId;
@@ -342,9 +333,7 @@ export function createSidecarRunChild(
  * `handle.cancel` exactly as `createSidecarRunChild` does; the child
  * runtime takes no abort signal of its own.
  */
-export function createSidecarSpawnSuspendableChild(
-  deps: SidecarRunChildDeps,
-): RunSuspendableChild {
+export function createSidecarSpawnSuspendableChild(deps: SidecarRunChildDeps): RunSuspendableChild {
   const directors = deps.directors ?? createDefaultDirectorRegistry();
   const clock = deps.clock ?? defaultClock;
   const newId = deps.newId ?? defaultNewId;
@@ -421,22 +410,12 @@ export function createSidecarSpawnSuspendableChild(
         );
       }
       const bodySourcesRef: SourcesSnapshotRef = {
-        current: await readBodyStepInferenceSources(
-          deps.dataDir,
-          rewrittenDefinition.id,
-        ),
+        current: await readBodyStepInferenceSources(deps.dataDir, rewrittenDefinition.id),
       };
       const bodyInvokeStep = deps.bodyInvokeStep;
       const authorize = inputAuthorize ?? baseEnv.authorize;
       invokeStep = (req) =>
-        bodyInvokeStep(
-          req,
-          authorize,
-          bodySourcesRef,
-          onEvent,
-          credentialWiring,
-          mailPartReader,
-        );
+        bodyInvokeStep(req, authorize, bodySourcesRef, onEvent, credentialWiring, mailPartReader);
     }
 
     // FIFO the caller drains via `next()`: each entry is either an approval
@@ -629,8 +608,7 @@ function buildChildRunEnv(args: {
   signalChannel: ReturnType<typeof createWorkflowHostSignalChannel>;
   definition: WorkflowDefinition;
 } {
-  const { deps, directors, clock, newId, repoStore, runChild, definition } =
-    args;
+  const { deps, directors, clock, newId, repoStore, runChild, definition } = args;
   const childRunId = args.childRunId;
   // A rung may itself embed a grandchild as an inline `childWorkflow`. Lift
   // each to an internal `{ ref }` and run the rewritten definition whose
@@ -639,9 +617,7 @@ function buildChildRunEnv(args: {
   // from, so a grandchild spawns with no on-disk read at any depth.
   const { workflow: rewrittenDefinition, bodies: grandchildBodies } =
     rewriteInlineChildWorkflowBodies(definition);
-  const grandchildMap = new Map(
-    grandchildBodies.map((body) => [body.ref, body.definition]),
-  );
+  const grandchildMap = new Map(grandchildBodies.map((body) => [body.ref, body.definition]));
   const blobs = createWorkflowRunBlobSubstrate({
     substrate: deps.substrate,
     repoId: deps.workflowRunRepoId,
@@ -649,8 +625,7 @@ function buildChildRunEnv(args: {
     runId: childRunId,
     ref: deps.workflowRunRef,
   });
-  const startChannel =
-    deps.createSignalChannel ?? createWorkflowHostSignalChannel;
+  const startChannel = deps.createSignalChannel ?? createWorkflowHostSignalChannel;
   const signalChannel = startChannel({
     repoStore: deps.substrate,
     principal: deps.principal,
@@ -688,8 +663,7 @@ function buildChildRunEnv(args: {
     bodies: grandchildMap,
     runChild,
   });
-  const spawnChild: SpawnChildWorkflow = (spawnInput) =>
-    hostSpawnChild(spawnInput, args.onEvent);
+  const spawnChild: SpawnChildWorkflow = (spawnInput) => hostSpawnChild(spawnInput, args.onEvent);
   const env: WorkflowRuntimeEnv = {
     repoStore,
     scheduler: deps.scheduler,
@@ -720,13 +694,7 @@ async function readBodyStepInferenceSources(
   dataDir: string,
   bodyRef: string,
 ): Promise<StepInferenceSourceTable> {
-  const sourcesPath = path.join(
-    dataDir,
-    "assets",
-    "workflow",
-    bodyRef,
-    "sources.json",
-  );
+  const sourcesPath = path.join(dataDir, "assets", "workflow", bodyRef, "sources.json");
   let raw: string;
   try {
     raw = await fs.promises.readFile(sourcesPath, "utf8");
diff --git a/apps/sidecar/src/workflow-substrate-factory/compactors.test.ts b/apps/sidecar/src/workflow-substrate-factory/compactors.test.ts
index f85bb1c1e8..c459e715e4 100644
--- a/apps/sidecar/src/workflow-substrate-factory/compactors.test.ts
+++ b/apps/sidecar/src/workflow-substrate-factory/compactors.test.ts
@@ -81,19 +81,14 @@ test("caps each folded turn's contribution so the summary stays bounded regardle
     maxSummaryChars: 500,
   });
   const turns = Array.from({ length: 200 }, (_, i) =>
-    textTurn(
-      "user",
-      `a very long message repeated many times `.repeat(20) + String(i),
-      i,
-    ),
+    textTurn("user", `a very long message repeated many times `.repeat(20) + String(i), i),
   );
 
   const result = await compactor.apply(turns, makeCtx());
   const summary = result.output[0];
 
   expect(summary?.content[0]?.type).toBe("text");
-  const text =
-    summary?.content[0]?.type === "text" ? summary.content[0].text : "";
+  const text = summary?.content[0]?.type === "text" ? summary.content[0].text : "";
   expect(text.length).toBeLessThanOrEqual(500);
 });
 
@@ -111,8 +106,7 @@ test("non-text content blocks fold to a short placeholder rather than being drop
 
   const result = await compactor.apply(turns, makeCtx());
   const summary = result.output[0];
-  const text =
-    summary?.content[0]?.type === "text" ? summary.content[0].text : "";
+  const text = summary?.content[0]?.type === "text" ? summary.content[0].text : "";
   expect(text).toContain("tool_call");
 });
 
@@ -126,9 +120,7 @@ test("createBudgetedContextCompactor: a short conversation under budget is untou
   const turns = Array.from({ length: 6 }, (_, i) =>
     textTurn(i % 2 === 0 ? "user" : "assistant", `turn ${i}`, i),
   );
-  const compactor = createBudgetedContextCompactor(
-    estimateTurnsChars(turns) + 1_000,
-  );
+  const compactor = createBudgetedContextCompactor(estimateTurnsChars(turns) + 1_000);
 
   const result = await compactor.apply(turns, makeCtx());
 
@@ -177,9 +169,7 @@ test("estimateTurnsChars measures a tool_call's real argument size, not a placeh
   const turn: ConversationTurn = {
     role: "assistant",
     timestamp: 0,
-    content: [
-      { type: "tool_call", id: "c1", name: "search", arguments: largeArgs },
-    ],
+    content: [{ type: "tool_call", id: "c1", name: "search", arguments: largeArgs }],
   };
 
   expect(estimateTurnsChars([turn])).toBeGreaterThanOrEqual(15_000);
@@ -213,11 +203,7 @@ test("createBudgetedContextCompactor: folded output never exceeds the budget it
   // than `maxSummaryChars` (4000) but not by much, the exact regime
   // where an uncounted summary previously pushed the total over.
   const turns = Array.from({ length: 40 }, (_, i) =>
-    textTurn(
-      i % 2 === 0 ? "user" : "assistant",
-      `message number ${i} `.repeat(25),
-      i,
-    ),
+    textTurn(i % 2 === 0 ? "user" : "assistant", `message number ${i} `.repeat(25), i),
   );
   const budgetChars = 6_000;
   const compactor = createBudgetedContextCompactor(budgetChars);
diff --git a/apps/sidecar/src/workflow-substrate-factory/compactors.ts b/apps/sidecar/src/workflow-substrate-factory/compactors.ts
index ba6b22ddb6..6b64e36dc7 100644
--- a/apps/sidecar/src/workflow-substrate-factory/compactors.ts
+++ b/apps/sidecar/src/workflow-substrate-factory/compactors.ts
@@ -89,9 +89,7 @@ function mediaSourceChars(source: {
 function toolResultItemChars(
   item: Extract<ContentBlock, { type: "tool_result" }>["content"][number],
 ): number {
-  return item.type === "text"
-    ? item.text.length
-    : mediaSourceChars(item.source);
+  return item.type === "text" ? item.text.length : mediaSourceChars(item.source);
 }
 
 /**
@@ -156,10 +154,7 @@ export function estimateTurnsChars(turns: ConversationTurn[]): number {
  * recent exchange is never folded away even when it alone exceeds
  * budget (the honest-overflow case a director checks separately).
  */
-function countTurnsWithinBudget(
-  turns: ConversationTurn[],
-  budgetChars: number,
-): number {
+function countTurnsWithinBudget(turns: ConversationTurn[], budgetChars: number): number {
   let runningChars = 0;
   let kept = 0;
   for (let i = turns.length - 1; i >= 0; i--) {
@@ -176,11 +171,7 @@ function countTurnsWithinBudget(
 }
 
 function roleLabel(role: ConversationTurn["role"]): string {
-  return role === "user"
-    ? "User"
-    : role === "assistant"
-      ? "Assistant"
-      : "System";
+  return role === "user" ? "User" : role === "assistant" ? "Assistant" : "System";
 }
 
 /**
diff --git a/apps/sidecar/src/workflow-substrate-factory/config.test.ts b/apps/sidecar/src/workflow-substrate-factory/config.test.ts
index 594b70bfb4..7801c44eb8 100644
--- a/apps/sidecar/src/workflow-substrate-factory/config.test.ts
+++ b/apps/sidecar/src/workflow-substrate-factory/config.test.ts
@@ -3,19 +3,13 @@ import { expect, test } from "bun:test";
 import { deriveHubHttpUrl } from "./config";
 
 test("derives an https origin from a wss:// hub URL", () => {
-  expect(deriveHubHttpUrl("wss://hub.example.com/api/sidecars/ws")).toBe(
-    "https://hub.example.com",
-  );
+  expect(deriveHubHttpUrl("wss://hub.example.com/api/sidecars/ws")).toBe("https://hub.example.com");
 });
 
 test("derives an http origin from a ws:// hub URL", () => {
-  expect(deriveHubHttpUrl("ws://localhost:3000/api/sidecars/ws")).toBe(
-    "http://localhost:3000",
-  );
+  expect(deriveHubHttpUrl("ws://localhost:3000/api/sidecars/ws")).toBe("http://localhost:3000");
 });
 
 test("preserves a non-default port", () => {
-  expect(deriveHubHttpUrl("wss://hub.example.com:8443/ws")).toBe(
-    "https://hub.example.com:8443",
-  );
+  expect(deriveHubHttpUrl("wss://hub.example.com:8443/ws")).toBe("https://hub.example.com:8443");
 });
diff --git a/apps/sidecar/src/workflow-substrate-factory/config.ts b/apps/sidecar/src/workflow-substrate-factory/config.ts
index ed85237f1c..5aab3b0640 100644
--- a/apps/sidecar/src/workflow-substrate-factory/config.ts
+++ b/apps/sidecar/src/workflow-substrate-factory/config.ts
@@ -128,9 +128,7 @@ export type StepInferenceSourceTable = typeof StepInferenceSourceTable.infer;
  * a structured error rather than being deferred to a deep-stack
  * `buildEnv` failure.
  */
-export function parseStepInferenceSources(
-  raw: string,
-): StepInferenceSourceTable {
+export function parseStepInferenceSources(raw: string): StepInferenceSourceTable {
   let parsed: unknown;
   try {
     parsed = JSON.parse(raw);
diff --git a/apps/sidecar/src/workflow-substrate-factory/context-budget.test.ts b/apps/sidecar/src/workflow-substrate-factory/context-budget.test.ts
index f1db773042..e8d6db2282 100644
--- a/apps/sidecar/src/workflow-substrate-factory/context-budget.test.ts
+++ b/apps/sidecar/src/workflow-substrate-factory/context-budget.test.ts
@@ -33,25 +33,14 @@ test("readNumCtxHint: a top-level numCtx pin is visible without the Ollama bag s
 });
 
 test("resolveContextBudgetChars: a bigger numCtx yields a bigger budget", () => {
-  const small = resolveContextBudgetChars(
-    { default: { numCtx: 32_000 } },
-    "qwen3",
-  );
-  const large = resolveContextBudgetChars(
-    { default: { numCtx: 128_000 } },
-    "gpt-oss:20b",
-  );
+  const small = resolveContextBudgetChars({ default: { numCtx: 32_000 } }, "qwen3");
+  const large = resolveContextBudgetChars({ default: { numCtx: 128_000 } }, "gpt-oss:20b");
 
   expect(large).toBeGreaterThan(small);
 });
 
 test("resolveContextWindowTokens: quirks pin wins over the advertised catalog window", () => {
-  expect(
-    resolveContextWindowTokens(
-      { default: { numCtx: 8_192 } },
-      "claude-sonnet-5",
-    ),
-  ).toBe(8_192);
+  expect(resolveContextWindowTokens({ default: { numCtx: 8_192 } }, "claude-sonnet-5")).toBe(8_192);
 });
 
 test("resolveContextWindowTokens: a frontier catalog model gets its advertised window, not a 32k-char cap", () => {
@@ -67,15 +56,13 @@ test("resolveContextWindowTokens: a frontier catalog model gets its advertised w
 test("resolveContextWindowTokens: an Ollama catalog model gets its native window without quirks", () => {
   expect(resolveContextWindowTokens(undefined, "gpt-oss:20b")).toBe(131_072);
   expect(resolveContextWindowTokens(undefined, "qwen3.8:27b")).toBe(32_768);
-  expect(
-    resolveHardContextLimitChars(undefined, "gpt-oss:20b"),
-  ).toBeGreaterThan(resolveHardContextLimitChars(undefined, "qwen3.8:27b"));
+  expect(resolveHardContextLimitChars(undefined, "gpt-oss:20b")).toBeGreaterThan(
+    resolveHardContextLimitChars(undefined, "qwen3.8:27b"),
+  );
 });
 
 test("advertisedContextWindowTokens: a relay-prefixed name still matches the catalog model", () => {
-  expect(advertisedContextWindowTokens("anthropic/claude-sonnet-5")).toBe(
-    200_000,
-  );
+  expect(advertisedContextWindowTokens("anthropic/claude-sonnet-5")).toBe(200_000);
   expect(advertisedContextWindowTokens("openai/gpt-4.1")).toBe(1_047_576);
 });
 
diff --git a/apps/sidecar/src/workflow-substrate-factory/context-budget.ts b/apps/sidecar/src/workflow-substrate-factory/context-budget.ts
index b7b44b91d3..72b8dd121a 100644
--- a/apps/sidecar/src/workflow-substrate-factory/context-budget.ts
+++ b/apps/sidecar/src/workflow-substrate-factory/context-budget.ts
@@ -60,9 +60,7 @@ const ADVERTISED_CONTEXT_WINDOWS: readonly (readonly [string, number])[] = [
 ];
 
 function positiveTokenCount(value: unknown): number | undefined {
-  return typeof value === "number" && Number.isFinite(value) && value > 0
-    ? value
-    : undefined;
+  return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : undefined;
 }
 
 function readWindowFromBag(bag: Record<string, unknown>): number | undefined {
@@ -86,9 +84,7 @@ function catalogModelKey(model: string): string {
  * family prefix. `undefined` if this module has no published window for
  * the name.
  */
-export function advertisedContextWindowTokens(
-  model: string,
-): number | undefined {
+export function advertisedContextWindowTokens(model: string): number | undefined {
   const key = catalogModelKey(model);
   if (key.length === 0) {
     return undefined;
@@ -98,10 +94,7 @@ export function advertisedContextWindowTokens(
     if (key === prefix) {
       return tokens;
     }
-    if (
-      key.startsWith(prefix) &&
-      (best === undefined || prefix.length > best.prefixLength)
-    ) {
+    if (key.startsWith(prefix) && (best === undefined || prefix.length > best.prefixLength)) {
       best = { prefixLength: prefix.length, tokens };
     }
   }
@@ -115,10 +108,7 @@ export function advertisedContextWindowTokens(
  * { numCtx? } } }`) and a few other common token-window field names.
  * Returns `undefined` for any unrecognized shape rather than throwing.
  */
-export function readNumCtxHint(
-  quirks: unknown,
-  model: string,
-): number | undefined {
+export function readNumCtxHint(quirks: unknown, model: string): number | undefined {
   if (typeof quirks !== "object" || quirks === null) {
     return undefined;
   }
@@ -149,10 +139,7 @@ export function readNumCtxHint(
  * fallback. Compact headroom is applied by the char-budget helpers,
  * not here.
  */
-export function resolveContextWindowTokens(
-  quirks: unknown,
-  model: string,
-): number {
+export function resolveContextWindowTokens(quirks: unknown, model: string): number {
   return (
     readNumCtxHint(quirks, model) ??
     advertisedContextWindowTokens(model) ??
@@ -169,14 +156,8 @@ function toChars(tokens: number, headroom: number): number {
  * Applies `COMPACTION_HEADROOM` on top of the resolved window so
  * compaction fires with room left, not at the hard edge.
  */
-export function resolveContextBudgetChars(
-  quirks: unknown,
-  model: string,
-): number {
-  return toChars(
-    resolveContextWindowTokens(quirks, model),
-    COMPACTION_HEADROOM,
-  );
+export function resolveContextBudgetChars(quirks: unknown, model: string): number {
+  return toChars(resolveContextWindowTokens(quirks, model), COMPACTION_HEADROOM);
 }
 
 /**
@@ -185,9 +166,6 @@ export function resolveContextBudgetChars(
  * at all, used to detect the unrecoverable case where even the turns a
  * compactor must keep verbatim are already too large.
  */
-export function resolveHardContextLimitChars(
-  quirks: unknown,
-  model: string,
-): number {
+export function resolveHardContextLimitChars(quirks: unknown, model: string): number {
   return toChars(resolveContextWindowTokens(quirks, model), 1);
 }
diff --git a/apps/sidecar/src/workflow-substrate-factory/index.ts b/apps/sidecar/src/workflow-substrate-factory/index.ts
index 12a4a1410a..271a6ed3cd 100644
--- a/apps/sidecar/src/workflow-substrate-factory/index.ts
+++ b/apps/sidecar/src/workflow-substrate-factory/index.ts
@@ -65,10 +65,7 @@ import {
 import { type ReadParkedApprovalOps, type StepInvoker } from "@intx/workflow";
 import type { InboundMessage } from "@intx/types/runtime";
 
-import {
-  createToolBearingAgentFactory,
-  type StepToolCacheConfig,
-} from "../step-agent-tools";
+import { createToolBearingAgentFactory, type StepToolCacheConfig } from "../step-agent-tools";
 import {
   createDurableConversationRegistry,
   prepareConversationForOriginatingWorkbench,
@@ -103,11 +100,7 @@ import {
   type SidecarRunChildDeps,
 } from "./child-runtime";
 
-export {
-  createSidecarRunChild,
-  createSidecarSpawnSuspendableChild,
-  type SidecarBodyStepInvoker,
-};
+export { createSidecarRunChild, createSidecarSpawnSuspendableChild, type SidecarBodyStepInvoker };
 
 export { parseAdapterManifest, SIDECAR_SUBSTRATE_CONFIG_KEYS };
 
@@ -144,9 +137,7 @@ export class ChildStepNotImplementedError extends Error {
 
 function hexDecode(hex: string, name: string): Uint8Array {
   if (hex.length % 2 !== 0) {
-    throw new Error(
-      `${name} must be even-length hex; got ${String(hex.length)} chars`,
-    );
+    throw new Error(`${name} must be even-length hex; got ${String(hex.length)} chars`);
   }
   const out = new Uint8Array(hex.length / 2);
   for (let i = 0; i < out.length; i += 1) {
@@ -196,9 +187,7 @@ function createStepStorageSigner(signingKey: {
   privateKey: Uint8Array;
 }): (payload: string) => Promise<string> {
   return (payload: string) =>
-    Promise.resolve(
-      createSSHSignature(payload, signingKey.privateKey, signingKey.publicKey),
-    );
+    Promise.resolve(createSSHSignature(payload, signingKey.privateKey, signingKey.publicKey));
 }
 
 /**
@@ -233,8 +222,7 @@ export function createSidecarSubstrateFactory(
 ): SubstrateFactory {
   const createBareRepoStore =
     deps.createBareRepoStore ??
-    (({ dataDir, signingKey }) =>
-      createAgentRepoStore({ dataDir, signingKey }).repoStore);
+    (({ dataDir, signingKey }) => createAgentRepoStore({ dataDir, signingKey }).repoStore);
 
   return async (env: SubstrateFactoryEnv) => {
     const validated = SubstrateConfig(env.substrateConfig);
@@ -244,9 +232,7 @@ export function createSidecarSubstrateFactory(
       );
     }
 
-    const stepInferenceSources = parseStepInferenceSources(
-      validated.STEP_INFERENCE_SOURCES,
-    );
+    const stepInferenceSources = parseStepInferenceSources(validated.STEP_INFERENCE_SOURCES);
 
     // Build the child's adapter registry eagerly at boot from the
     // operator-supplied manifest. `loadAdapterRegistry` imports every
@@ -260,14 +246,8 @@ export function createSidecarSubstrateFactory(
     );
 
     const signingKey = {
-      publicKey: hexDecode(
-        validated.SIDECAR_SIGNING_PUBLIC_KEY,
-        "SIDECAR_SIGNING_PUBLIC_KEY",
-      ),
-      privateKey: hexDecode(
-        validated.SIDECAR_SIGNING_PRIVATE_KEY,
-        "SIDECAR_SIGNING_PRIVATE_KEY",
-      ),
+      publicKey: hexDecode(validated.SIDECAR_SIGNING_PUBLIC_KEY, "SIDECAR_SIGNING_PUBLIC_KEY"),
+      privateKey: hexDecode(validated.SIDECAR_SIGNING_PRIVATE_KEY, "SIDECAR_SIGNING_PRIVATE_KEY"),
     };
 
     const bareStore: RepoStore = createBareRepoStore({
@@ -313,10 +293,7 @@ export function createSidecarSubstrateFactory(
     // delivers the resolved input as a synthesized inbound message, and
     // captures the agent's reply as the step output.
     const stepToolCache: StepToolCacheConfig = {
-      cacheMaxBytes: parseByteCap(
-        validated.SIDECAR_CACHE_MAX_BYTES,
-        "SIDECAR_CACHE_MAX_BYTES",
-      ),
+      cacheMaxBytes: parseByteCap(validated.SIDECAR_CACHE_MAX_BYTES, "SIDECAR_CACHE_MAX_BYTES"),
       registryMaxTarballBytes: parseByteCap(
         validated.SIDECAR_REGISTRY_MAX_TARBALL_BYTES,
         "SIDECAR_REGISTRY_MAX_TARBALL_BYTES",
@@ -344,8 +321,7 @@ export function createSidecarSubstrateFactory(
     // and each store restores its prior snapshot from the substrate on
     // first acquire.
     const conversationSigner = createStepStorageSigner(signingKey);
-    const durableConversation: DurableConversationRegistry | undefined = env
-      .spawn.warmKeep
+    const durableConversation: DurableConversationRegistry | undefined = env.spawn.warmKeep
       ? createDurableConversationRegistry({
           dataDir: validated.SIDECAR_DATA_DIR,
           workflowRunRepoId,
@@ -460,9 +436,7 @@ export function createSidecarSubstrateFactory(
     // `runChild` recursion and the sub-namespace scoping around it are
     // real and exercised right up to this seam.
     const childInvokeStep: StepInvoker = (req) =>
-      Promise.reject(
-        new ChildStepNotImplementedError(req.agent.id, req.authzContext.stepId),
-      );
+      Promise.reject(new ChildStepNotImplementedError(req.agent.id, req.authzContext.stepId));
 
     // onTrigger BODY step invoker (CL-6448). Unlike a childWorkflow child,
     // an onTrigger section body IS staged: its definition and per-step
@@ -501,8 +475,7 @@ export function createSidecarSubstrateFactory(
       try {
         return await createWorkflowStepInvoker({
           workflowAuthorize: authorize,
-          buildEnv: (buildReq) =>
-            buildStepEnv(buildReq, sourcesRef, credentialWiring),
+          buildEnv: (buildReq) => buildStepEnv(buildReq, sourcesRef, credentialWiring),
           agentFactory: stepAgentFactory,
           sourcesRef,
           onEvent,
@@ -590,22 +563,15 @@ export function createSidecarSubstrateFactory(
             driveConnectorReplies({
               stream,
               composeReply: () => durableConversation.get(key).composeReply(),
-              send: (message) =>
-                env.outboundMailBridge.submit(
-                  env.spawn.mailboxAddress,
-                  message,
-                ),
+              send: (message) => env.outboundMailBridge.submit(env.spawn.mailboxAddress, message),
               resolveReferences: async (inReplyTo) => {
                 const store = await transportInbound.reader.open();
-                const parent = store.messages.find(
-                  (m) => m.envelope.messageId === inReplyTo,
-                );
+                const parent = store.messages.find((m) => m.envelope.messageId === inReplyTo);
                 return parent === undefined
                   ? undefined
                   : [...parent.envelope.references, parent.envelope.messageId];
               },
-              onReplySent: (receipt) =>
-                durableConversation.get(key).onReplySent(receipt),
+              onReplySent: (receipt) => durableConversation.get(key).onReplySent(receipt),
             })
         : undefined;
 
@@ -642,11 +608,7 @@ export function createSidecarSubstrateFactory(
       })(req);
     };
 
-    const evaluateGrantsAdapter: GrantEvaluator = async ({
-      resource,
-      action,
-      grants,
-    }) => {
+    const evaluateGrantsAdapter: GrantEvaluator = async ({ resource, action, grants }) => {
       const result = await evaluateGrants(
         // The credentialsSnapshot's grants are typed as
         // `readonly unknown[]` so the workflow-host package does not
@@ -689,8 +651,7 @@ export function createSidecarSubstrateFactory(
     // closure, so a body resolves in-process with no on-disk read and no
     // separate per-body re-verify -- the parent's re-verify already covers
     // every inline body.
-    const runSuspendableChild =
-      createSidecarSpawnSuspendableChild(childRunDeps);
+    const runSuspendableChild = createSidecarSpawnSuspendableChild(childRunDeps);
 
     // Per-run scratch reclamation for the cold (multi-step) path. The
     // run-loop fires this once each run reaches its terminal status; it
@@ -705,18 +666,17 @@ export function createSidecarSubstrateFactory(
     // module's intent explicit. `rm -rf` semantics via `recursive +
     // force` so a run that never wrote scratch (no buildEnv reached) is
     // a no-op rather than an ENOENT throw.
-    const cleanupRunStorage: ((runId: string) => Promise<void>) | undefined =
-      env.spawn.warmKeep
-        ? undefined
-        : (runId: string) =>
-            fs.promises.rm(
-              runStepStorageRoot({
-                dataDir: validated.SIDECAR_DATA_DIR,
-                workflowRunRepoId,
-                runId,
-              }),
-              { recursive: true, force: true },
-            );
+    const cleanupRunStorage: ((runId: string) => Promise<void>) | undefined = env.spawn.warmKeep
+      ? undefined
+      : (runId: string) =>
+          fs.promises.rm(
+            runStepStorageRoot({
+              dataDir: validated.SIDECAR_DATA_DIR,
+              workflowRunRepoId,
+              runId,
+            }),
+            { recursive: true, force: true },
+          );
 
     // Recover a parked correlation's approval snapshot for the child's
     // re-registration enumeration (ported from upstream Interchange's
@@ -726,12 +686,7 @@ export function createSidecarSubstrateFactory(
     // selects the durable read — cold reads the per-attempt isogit
     // store, warm reconstructs the agent's durable conversation state
     // from the substrate.
-    const loadParkedApproval: LoadParkedApproval = ({
-      runId,
-      stepId,
-      attempt,
-      correlationId,
-    }) =>
+    const loadParkedApproval: LoadParkedApproval = ({ runId, stepId, attempt, correlationId }) =>
       env.spawn.warmKeep
         ? readWarmParkedApprovalSnapshot({
             substrate,
@@ -754,11 +709,7 @@ export function createSidecarSubstrateFactory(
     // correlationId (answering the supervisor's re-registration), this is
     // the enumeration the classifier needs when the correlationId never
     // reached the log — the crash-across-park case.
-    const readParkedApprovalOps: ReadParkedApprovalOps = async ({
-      runId,
-      stepId,
-      attempt,
-    }) =>
+    const readParkedApprovalOps: ReadParkedApprovalOps = async ({ runId, stepId, attempt }) =>
       toParkedApprovalOps(
         env.spawn.warmKeep
           ? await readWarmParkedPendingOperations({
@@ -805,5 +756,4 @@ export function createSidecarSubstrateFactory(
  * hub sink (tests, alternate hosts) construct their own via
  * `createSidecarSubstrateFactory`.
  */
-export const createSubstrate: SubstrateFactory =
-  createSidecarSubstrateFactory();
+export const createSubstrate: SubstrateFactory = createSidecarSubstrateFactory();
diff --git a/apps/sidecar/src/workflow-substrate-factory/parked-approvals.test.ts b/apps/sidecar/src/workflow-substrate-factory/parked-approvals.test.ts
index 914cf1ef0b..5a05604d1e 100644
--- a/apps/sidecar/src/workflow-substrate-factory/parked-approvals.test.ts
+++ b/apps/sidecar/src/workflow-substrate-factory/parked-approvals.test.ts
@@ -20,9 +20,7 @@ import {
 
 const tempDirs: string[] = [];
 afterEach(async () => {
-  await Promise.all(
-    tempDirs.splice(0).map((dir) => rm(dir, { recursive: true, force: true })),
-  );
+  await Promise.all(tempDirs.splice(0).map((dir) => rm(dir, { recursive: true, force: true })));
 });
 
 const REPO_ID = { kind: "workflow-run" as const, id: "dep-parked-1" };
@@ -113,12 +111,8 @@ describe("readWarmParkedPendingOperations", () => {
   test("collects pending ops from nested rooms and ignores a mixed agent-state blob", async () => {
     const repoDir = await mkdtemp(path.join(tmpdir(), "parked-warm-"));
     tempDirs.push(repoDir);
-    await writeRoomCheckpoint(repoDir, "default", "chan_a", [
-      approvalOp("corr-a"),
-    ]);
-    await writeRoomCheckpoint(repoDir, "default", "chan_b", [
-      approvalOp("corr-b"),
-    ]);
+    await writeRoomCheckpoint(repoDir, "default", "chan_a", [approvalOp("corr-a")]);
+    await writeRoomCheckpoint(repoDir, "default", "chan_b", [approvalOp("corr-b")]);
     await writeFile(
       path.join(repoDir, "agent-state", "default", "checkpoint.json"),
       JSON.stringify({ pendingOperations: [approvalOp("corr-legacy")] }),
diff --git a/apps/sidecar/src/workflow-substrate-factory/parked-approvals.ts b/apps/sidecar/src/workflow-substrate-factory/parked-approvals.ts
index 0c1894d0e9..615cbd5ade 100644
--- a/apps/sidecar/src/workflow-substrate-factory/parked-approvals.ts
+++ b/apps/sidecar/src/workflow-substrate-factory/parked-approvals.ts
@@ -17,10 +17,7 @@ import { createIsogitStore } from "@intx/storage-isogit/node";
 import type { ApprovalSnapshot, PendingOperation } from "@intx/types/runtime";
 import type { ParkedApprovalOp } from "@intx/workflow";
 
-import {
-  isErrnoNotFound,
-  reconstructDurableConversation,
-} from "../conversation-state";
+import { isErrnoNotFound, reconstructDurableConversation } from "../conversation-state";
 import { stepStorageRoot } from "./storage-paths";
 
 async function directoryExists(dir: string): Promise<boolean> {
@@ -36,8 +33,7 @@ export function findApprovalSnapshot(
   pendingOperations: readonly PendingOperation[],
   correlationId: string,
 ): ApprovalSnapshot | undefined {
-  return pendingOperations.find((op) => op.correlationId === correlationId)
-    ?.approvalSnapshot;
+  return pendingOperations.find((op) => op.correlationId === correlationId)?.approvalSnapshot;
 }
 
 /**
@@ -82,10 +78,7 @@ export async function readColdParkedApprovalSnapshot(args: {
   attempt: number;
   correlationId: string;
 }): Promise<ApprovalSnapshot | undefined> {
-  return findApprovalSnapshot(
-    await readColdParkedPendingOperations(args),
-    args.correlationId,
-  );
+  return findApprovalSnapshot(await readColdParkedPendingOperations(args), args.correlationId);
 }
 
 /**
@@ -143,10 +136,7 @@ export async function readWarmParkedApprovalSnapshot(args: {
   stepId: string;
   correlationId: string;
 }): Promise<ApprovalSnapshot | undefined> {
-  return findApprovalSnapshot(
-    await readWarmParkedPendingOperations(args),
-    args.correlationId,
-  );
+  return findApprovalSnapshot(await readWarmParkedPendingOperations(args), args.correlationId);
 }
 
 /**
@@ -157,9 +147,7 @@ export async function readWarmParkedApprovalSnapshot(args: {
  * `SignalAwaited` from those alone, and must not see the reactor's
  * pending-operation internals.
  */
-export function toParkedApprovalOps(
-  pendingOperations: PendingOperation[],
-): ParkedApprovalOp[] {
+export function toParkedApprovalOps(pendingOperations: PendingOperation[]): ParkedApprovalOp[] {
   return pendingOperations
     .filter((op) => op.kind === "approval")
     .map((op) => ({
diff --git a/apps/sidecar/src/workflow-substrate-factory/step-env.test.ts b/apps/sidecar/src/workflow-substrate-factory/step-env.test.ts
index 5bf5ec4fb8..7f8b65f836 100644
--- a/apps/sidecar/src/workflow-substrate-factory/step-env.test.ts
+++ b/apps/sidecar/src/workflow-substrate-factory/step-env.test.ts
@@ -11,24 +11,16 @@ import { afterEach, expect, test } from "bun:test";
 import type { AgentDefinition, BaseEnv } from "@intx/agent";
 import type { RepoId } from "@intx/hub-sessions/substrate";
 import type { StepInvokeRequest } from "@intx/workflow";
-import type {
-  ChildOutboundMailBridge,
-  SourcesSnapshotRef,
-} from "@intx/workflow-host";
-
-import {
-  SUMMARIZE_BUDGETED_TURNS_NAME,
-  SUMMARIZE_OLDER_TURNS_NAME,
-} from "./compactors";
+import type { ChildOutboundMailBridge, SourcesSnapshotRef } from "@intx/workflow-host";
+
+import { SUMMARIZE_BUDGETED_TURNS_NAME, SUMMARIZE_OLDER_TURNS_NAME } from "./compactors";
 import { createSidecarStepBuildEnv } from "./step-env";
 
 const tmpDirs: string[] = [];
 
 afterEach(async () => {
   await Promise.all(
-    tmpDirs
-      .splice(0)
-      .map((dir) => fs.promises.rm(dir, { recursive: true, force: true })),
+    tmpDirs.splice(0).map((dir) => fs.promises.rm(dir, { recursive: true, force: true })),
   );
 });
 
@@ -79,12 +71,10 @@ test("the built step env carries the deploying definition's own definitionId and
 
   const env = await buildEnv(stepInvokeRequest(), sourcesRef);
 
-  expect((env as unknown as { definitionId: string }).definitionId).toBe(
-    "wfd_capability_owner",
+  expect((env as unknown as { definitionId: string }).definitionId).toBe("wfd_capability_owner");
+  expect((env as unknown as { hubCapabilitiesUrl: string }).hubCapabilitiesUrl).toBe(
+    "https://hub.example.com",
   );
-  expect(
-    (env as unknown as { hubCapabilitiesUrl: string }).hubCapabilitiesUrl,
-  ).toBe("https://hub.example.com");
   // Same hub origin as the sibling artifacts/skills bindings — one
   // origin, one name per tool-bundle surface, never overloaded.
   expect((env as unknown as { hubArtifactsUrl: string }).hubArtifactsUrl).toBe(
@@ -93,12 +83,8 @@ test("the built step env carries the deploying definition's own definitionId and
   expect((env as unknown as { memoryBaseUrl: string }).memoryBaseUrl).toBe(
     "https://hub.example.com",
   );
-  expect((env as unknown as { memoryTenantId: string }).memoryTenantId).toBe(
-    "ten_test",
-  );
-  expect((env as unknown as { address: string }).address).toBe(
-    "run_1@example.com",
-  );
+  expect((env as unknown as { memoryTenantId: string }).memoryTenantId).toBe("ten_test");
+  expect((env as unknown as { address: string }).address).toBe("run_1@example.com");
 });
 
 test("a body-step env with no staged deploy tree still carries definitionId, so the binding is not tool-materialization-gated", async () => {
@@ -116,9 +102,7 @@ test("a body-step env with no staged deploy tree still carries definitionId, so
   } as unknown as SourcesSnapshotRef;
 
   const env = await buildEnv(stepInvokeRequest(), sourcesRef);
-  expect((env as unknown as { definitionId: string }).definitionId).toBe(
-    "wfd_parent_definition",
-  );
+  expect((env as unknown as { definitionId: string }).definitionId).toBe("wfd_parent_definition");
 });
 
 // CL-6448: the body-turn history seam. A section body runs each message as
@@ -196,16 +180,11 @@ test("the built step env forwards the summarize-older-turns compactor (CL-6204)
 
   const env = await buildEnv(stepInvokeRequest(), sourcesRef);
 
-  const compactors = (
-    env as unknown as { compactors: Record<string, { name: string }> }
-  ).compactors;
+  const compactors = (env as unknown as { compactors: Record<string, { name: string }> })
+    .compactors;
   expect(Object.keys(compactors).sort()).toEqual(
     [SUMMARIZE_OLDER_TURNS_NAME, SUMMARIZE_BUDGETED_TURNS_NAME].sort(),
   );
-  expect(compactors[SUMMARIZE_OLDER_TURNS_NAME]?.name).toBe(
-    SUMMARIZE_OLDER_TURNS_NAME,
-  );
-  expect(compactors[SUMMARIZE_BUDGETED_TURNS_NAME]?.name).toBe(
-    SUMMARIZE_BUDGETED_TURNS_NAME,
-  );
+  expect(compactors[SUMMARIZE_OLDER_TURNS_NAME]?.name).toBe(SUMMARIZE_OLDER_TURNS_NAME);
+  expect(compactors[SUMMARIZE_BUDGETED_TURNS_NAME]?.name).toBe(SUMMARIZE_BUDGETED_TURNS_NAME);
 });
diff --git a/apps/sidecar/src/workflow-substrate-factory/step-env.ts b/apps/sidecar/src/workflow-substrate-factory/step-env.ts
index eafab68ae8..511eb991b0 100644
--- a/apps/sidecar/src/workflow-substrate-factory/step-env.ts
+++ b/apps/sidecar/src/workflow-substrate-factory/step-env.ts
@@ -9,16 +9,9 @@ import path from "node:path";
 
 import type { RepoId } from "@intx/hub-sessions/substrate";
 import { createDependencies, type AdapterRegistry } from "@intx/inference";
-import {
-  createIsogitStorage,
-  createNodeIsogitRuntime,
-} from "@intx/storage-isogit/node";
+import { createIsogitStorage, createNodeIsogitRuntime } from "@intx/storage-isogit/node";
 import type { RegistryConfig } from "@intx/tool-packaging";
-import type {
-  AuditStore,
-  ContextStore,
-  MessageTransport,
-} from "@intx/types/runtime";
+import type { AuditStore, ContextStore, MessageTransport } from "@intx/types/runtime";
 import type { StepInvokeRequest } from "@intx/workflow";
 import {
   createSupervisorBackedTransport,
@@ -45,10 +38,7 @@ import {
   createSummarizeOlderTurnsCompactor,
 } from "./compactors";
 import { createStepInferenceSourceResolver } from "./config";
-import {
-  resolveContextBudgetChars,
-  resolveHardContextLimitChars,
-} from "./context-budget";
+import { resolveContextBudgetChars, resolveHardContextLimitChars } from "./context-budget";
 import { stepStorageRoot, warmStepStorageRoot } from "./storage-paths";
 import { createWorkbenchDirectorRegistry } from "./workbench-director";
 
@@ -221,9 +211,7 @@ export function createSidecarStepBuildEnv(
     // agent this build constructs. A warm agent that is already built does
     // not pass through here again, so a rotation does not reach it through
     // this path -- this ref covers only a build that has not happened yet.
-    const resolveStepInferenceSource = createStepInferenceSourceResolver(
-      sourcesRef.current,
-    );
+    const resolveStepInferenceSource = createStepInferenceSourceResolver(sourcesRef.current);
     const { stepId, runId, attempt } = req.authzContext;
     if (stepId === undefined) {
       throw new Error(
@@ -256,10 +244,7 @@ export function createSidecarStepBuildEnv(
     // model and a 32K model compact at different points rather than
     // sharing one constant. Built per invocation (not module scope)
     // because the budget depends on the step's own resolved source.
-    const contextBudgetChars = resolveContextBudgetChars(
-      activeSource.quirks,
-      activeSource.model,
-    );
+    const contextBudgetChars = resolveContextBudgetChars(activeSource.quirks, activeSource.model);
     const contextHardLimitChars = resolveHardContextLimitChars(
       activeSource.quirks,
       activeSource.model,
@@ -271,8 +256,7 @@ export function createSidecarStepBuildEnv(
     });
     const compactors = {
       ...stepCompactors,
-      [SUMMARIZE_BUDGETED_TURNS_NAME]:
-        createBudgetedContextCompactor(contextBudgetChars),
+      [SUMMARIZE_BUDGETED_TURNS_NAME]: createBudgetedContextCompactor(contextBudgetChars),
     };
 
     // Root the per-step scratch (workspace + tool tarball-cache +
@@ -331,17 +315,15 @@ export function createSidecarStepBuildEnv(
     // exactly the body agent's pins the folded launch staged -- and a
     // deployment that staged no tree for the body's stepId reads ENOENT
     // into the legitimate empty-tools case.
-    const materialization: StepToolMaterialization = await materializeStepTools(
-      {
-        dataDir: deps.dataDir,
-        mailboxAddress: deps.mailboxAddress,
-        stepId,
-        stepCount: deps.stepCount,
-        storeDir,
-        cache: deps.cache,
-        registries: deps.registries,
-      },
-    );
+    const materialization: StepToolMaterialization = await materializeStepTools({
+      dataDir: deps.dataDir,
+      mailboxAddress: deps.mailboxAddress,
+      stepId,
+      stepCount: deps.stepCount,
+      storeDir,
+      cache: deps.cache,
+      registries: deps.registries,
+    });
 
     // Supervisor-backed transport for the step agent's mail tools (both
     // halves of mailbox ownership). Outbound (`send`) routes over the
diff --git a/apps/sidecar/src/workflow-substrate-factory/workbench-director.test.ts b/apps/sidecar/src/workflow-substrate-factory/workbench-director.test.ts
index c33d0ffaae..3b4cc337d8 100644
--- a/apps/sidecar/src/workflow-substrate-factory/workbench-director.test.ts
+++ b/apps/sidecar/src/workflow-substrate-factory/workbench-director.test.ts
@@ -125,11 +125,7 @@ async function seedToolBatch(director: ReactorDirector): Promise<void> {
 
 test("empty inference.done retries infer once", async () => {
   const director = createWorkbenchDirector("you are a test agent");
-  const actions = await director.decide(
-    inferenceDone(emptyTurn()),
-    state(),
-    caps,
-  );
+  const actions = await director.decide(inferenceDone(emptyTurn()), state(), caps);
 
   expect(typesOf(actions)).toEqual(["checkpoint", "infer"]);
 });
@@ -137,11 +133,7 @@ test("empty inference.done retries infer once", async () => {
 test("a second empty inference.done replies honestly instead of waiting", async () => {
   const director = createWorkbenchDirector("you are a test agent");
   await director.decide(inferenceDone(emptyTurn()), state(), caps);
-  const actions = await director.decide(
-    inferenceDone(emptyTurn()),
-    state(),
-    caps,
-  );
+  const actions = await director.decide(inferenceDone(emptyTurn()), state(), caps);
 
   expect(typesOf(actions)).toEqual(["checkpoint", "reply"]);
   expect(replyOf(actions)).toBe(EMPTY_TURN_REPLY);
@@ -163,11 +155,7 @@ test("empty then a real text turn replies with the model text", async () => {
 
 test("a text turn on the first inference.done replies without retrying", async () => {
   const director = createWorkbenchDirector("you are a test agent");
-  const actions = await director.decide(
-    inferenceDone(textTurn("hello")),
-    state(),
-    caps,
-  );
+  const actions = await director.decide(inferenceDone(textTurn("hello")), state(), caps);
 
   expect(typesOf(actions)).toEqual(["checkpoint", "reply"]);
   expect(replyOf(actions)).toBe("hello");
@@ -197,11 +185,7 @@ test("reactive mode still waits on an empty turn (no retry)", async () => {
   const director = createWorkbenchDirector("you are a test agent", [], {
     mode: "reactive",
   });
-  const actions = await director.decide(
-    inferenceDone(emptyTurn()),
-    state(),
-    caps,
-  );
+  const actions = await director.decide(inferenceDone(emptyTurn()), state(), caps);
 
   expect(typesOf(actions)).toEqual(["checkpoint", "wait"]);
 });
@@ -217,11 +201,7 @@ test("a new message.received resets the empty-turn retry budget", async () => {
     state(),
     caps,
   );
-  const actions = await director.decide(
-    inferenceDone(emptyTurn()),
-    state(),
-    caps,
-  );
+  const actions = await director.decide(inferenceDone(emptyTurn()), state(), caps);
 
   expect(typesOf(actions)).toEqual(["checkpoint", "infer"]);
 });
@@ -290,9 +270,7 @@ test("context budget: tool-heavy history past the hard limit is caught even thou
     },
   );
   const bigState = stateWithTurns(
-    Array.from({ length: 10 }, (_, i) =>
-      toolResultTurn("x".repeat(20_000), `call_${String(i)}`),
-    ),
+    Array.from({ length: 10 }, (_, i) => toolResultTurn("x".repeat(20_000), `call_${String(i)}`)),
   );
 
   const actions = await director.decide(
@@ -398,7 +376,7 @@ test("context budget: with no contextBudget configured, behavior is unchanged",
 test("the factory is namespaced and is the sidecar registry default", () => {
   const registry = createWorkbenchDirectorRegistry();
   expect(registry.defaultFactory().id).toBe(WORKBENCH_DIRECTOR_ID);
-  expect(
-    registry.resolve({ id: defaultDirectorFactory.id, config: {} }).id,
-  ).toBe(defaultDirectorFactory.id);
+  expect(registry.resolve({ id: defaultDirectorFactory.id, config: {} }).id).toBe(
+    defaultDirectorFactory.id,
+  );
 });
diff --git a/apps/sidecar/src/workflow-substrate-factory/workbench-director.ts b/apps/sidecar/src/workflow-substrate-factory/workbench-director.ts
index 9bde5f143d..23e091a948 100644
--- a/apps/sidecar/src/workflow-substrate-factory/workbench-director.ts
+++ b/apps/sidecar/src/workflow-substrate-factory/workbench-director.ts
@@ -52,10 +52,7 @@ import {
   defineDirector,
   type DirectorRegistry,
 } from "@intx/agent";
-import {
-  createDefaultDirector,
-  type DefaultDirectorPolicy,
-} from "@intx/inference";
+import { createDefaultDirector, type DefaultDirectorPolicy } from "@intx/inference";
 import {
   formatSafetyRatingText,
   type AssistantTurn,
@@ -149,12 +146,7 @@ export class WorkbenchDirector implements ReactorDirector {
 
     const actions = await this.inner.decide(event, state, capabilities);
 
-    const budgeted = this.applyContextBudget(
-      event,
-      state,
-      capabilities,
-      actions,
-    );
+    const budgeted = this.applyContextBudget(event, state, capabilities, actions);
     if (budgeted !== undefined) {
       return budgeted;
     }
@@ -163,10 +155,7 @@ export class WorkbenchDirector implements ReactorDirector {
       return actions;
     }
 
-    if (
-      !this.isEmptyConversationalTurn(event.turn) ||
-      !actionsIncludeWait(actions)
-    ) {
+    if (!this.isEmptyConversationalTurn(event.turn) || !actionsIncludeWait(actions)) {
       this.emptyTurnRetried = false;
       return actions;
     }
@@ -183,20 +172,14 @@ export class WorkbenchDirector implements ReactorDirector {
     }
 
     this.emptyTurnRetried = false;
-    return [
-      capabilities.checkpoint("empty-turn-reply"),
-      capabilities.reply(EMPTY_TURN_REPLY),
-    ];
+    return [capabilities.checkpoint("empty-turn-reply"), capabilities.reply(EMPTY_TURN_REPLY)];
   }
 
   private isEmptyConversationalTurn(turn: AssistantTurn): boolean {
     if (!this.conversational) {
       return false;
     }
-    return (
-      extractToolCalls(turn).length === 0 &&
-      extractTextContent(turn).length === 0
-    );
+    return extractToolCalls(turn).length === 0 && extractTextContent(turn).length === 0;
   }
 
   /**
@@ -219,10 +202,7 @@ export class WorkbenchDirector implements ReactorDirector {
     const chars = estimateTurnsChars(state.turns);
 
     if (chars > this.contextBudget.hardLimitChars) {
-      if (
-        list.some((action) => action.type === "infer") ||
-        event.type === "message.received"
-      ) {
+      if (list.some((action) => action.type === "infer") || event.type === "message.received") {
         return [
           capabilities.checkpoint("context-overflow"),
           capabilities.reply(CONTEXT_OVERFLOW_MESSAGE),
@@ -234,17 +214,10 @@ export class WorkbenchDirector implements ReactorDirector {
       return undefined;
     }
 
-    if (
-      event.type === "tool.done" &&
-      list.length === 0 &&
-      chars > this.contextBudget.budgetChars
-    ) {
+    if (event.type === "tool.done" && list.length === 0 && chars > this.contextBudget.budgetChars) {
       return [
         capabilities.checkpoint("context-budget-compact"),
-        capabilities.compact(
-          this.contextBudget.compactorName,
-          "context-budget",
-        ),
+        capabilities.compact(this.contextBudget.compactorName, "context-budget"),
       ];
     }
 
@@ -258,12 +231,7 @@ export function createWorkbenchDirector(
   policy: DefaultDirectorPolicy = {},
   contextBudget?: ContextBudgetOptions,
 ): ReactorDirector {
-  return new WorkbenchDirector(
-    systemPrompt,
-    toolDefinitions,
-    policy,
-    contextBudget,
-  );
+  return new WorkbenchDirector(systemPrompt, toolDefinitions, policy, contextBudget);
 }
 
 const WorkbenchDirectorConfigSchema = type({
@@ -274,9 +242,7 @@ export type WorkbenchDirectorConfig = {
   mode?: "conversational" | "reactive";
 };
 
-function buildWorkbenchFactory(
-  contextBudget: ContextBudgetOptions | undefined,
-) {
+function buildWorkbenchFactory(contextBudget: ContextBudgetOptions | undefined) {
   return defineDirector<WorkbenchDirectorConfig>({
     id: WORKBENCH_DIRECTOR_ID,
     configSchema: WorkbenchDirectorConfigSchema,
diff --git a/apps/sidecar/test/atomic-write.test.ts b/apps/sidecar/test/atomic-write.test.ts
index 6967c847eb..11bdd50405 100644
--- a/apps/sidecar/test/atomic-write.test.ts
+++ b/apps/sidecar/test/atomic-write.test.ts
@@ -7,9 +7,7 @@ import { writeFileAtomicDurable } from "../src/atomic-write";
 const tempDirs: string[] = [];
 
 afterEach(async () => {
-  await Promise.all(
-    tempDirs.splice(0).map((dir) => rm(dir, { recursive: true, force: true })),
-  );
+  await Promise.all(tempDirs.splice(0).map((dir) => rm(dir, { recursive: true, force: true })));
 });
 
 async function makeDir(): Promise<string> {
diff --git a/apps/sidecar/test/attachments-only-mail-step.test.ts b/apps/sidecar/test/attachments-only-mail-step.test.ts
index 6631204748..b047355f5b 100644
--- a/apps/sidecar/test/attachments-only-mail-step.test.ts
+++ b/apps/sidecar/test/attachments-only-mail-step.test.ts
@@ -9,10 +9,7 @@ import { expect, test } from "bun:test";
 import type { Agent, SendResult } from "@intx/agent";
 import type { AuthzCallResult } from "@intx/inference";
 import type { StepInvokeRequest } from "@intx/workflow";
-import {
-  createWorkflowStepInvoker,
-  type StepEnvBase,
-} from "@intx/workflow-host";
+import { createWorkflowStepInvoker, type StepEnvBase } from "@intx/workflow-host";
 import type { InboundMessage, Mail } from "@intx/types/runtime";
 
 const ALLOW: AuthzCallResult = {
diff --git a/apps/sidecar/test/body-turn-request-assembly.test.ts b/apps/sidecar/test/body-turn-request-assembly.test.ts
index 5ade29c0ee..e58e0ce105 100644
--- a/apps/sidecar/test/body-turn-request-assembly.test.ts
+++ b/apps/sidecar/test/body-turn-request-assembly.test.ts
@@ -14,12 +14,7 @@ import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 
-import {
-  createAgent,
-  createDefaultDirectorRegistry,
-  defineAgent,
-  defineTool,
-} from "@intx/agent";
+import { createAgent, createDefaultDirectorRegistry, defineAgent, defineTool } from "@intx/agent";
 import { createDependencies } from "@intx/inference";
 import { createBuiltinRegistry } from "@intx/inference/providers";
 
@@ -163,9 +158,7 @@ test("an openai-compatible turn's wire request carries the restored history and
     await agent.close();
   }
 
-  expect(captured.url).toBe(
-    "http://inference.stub.invalid/v1/chat/completions",
-  );
+  expect(captured.url).toBe("http://inference.stub.invalid/v1/chat/completions");
   const request = captured.body as {
     messages: { role: string; content: unknown }[];
     tools?: { function: { name: string } }[];
diff --git a/apps/sidecar/test/config.test.ts b/apps/sidecar/test/config.test.ts
index f6c53b0f7e..bacfebad49 100644
--- a/apps/sidecar/test/config.test.ts
+++ b/apps/sidecar/test/config.test.ts
@@ -52,9 +52,7 @@ test("an unset SIDECAR_ADAPTER_MANIFEST defaults to the shipped Ollama adapter,
 
 test("the shipped default manifest registers the loopback-OAuth Responses adapters (CL-7510)", () => {
   const config = readSidecarConfig(VALID_ENV);
-  const byProvider = new Map(
-    config.adapterManifest.map((entry) => [entry.provider, entry]),
-  );
+  const byProvider = new Map(config.adapterManifest.map((entry) => [entry.provider, entry]));
   expect(byProvider.get("codex")).toEqual({
     provider: "codex",
     specifier: "@corbits/codex-provider",
@@ -98,9 +96,9 @@ test("carries a valid adapter manifest through as its parsed form", () => {
 });
 
 test("a malformed adapter manifest fails boot naming the variable", () => {
-  expect(() =>
-    readSidecarConfig({ ...VALID_ENV, SIDECAR_ADAPTER_MANIFEST: "{not json" }),
-  ).toThrow(/SIDECAR_ADAPTER_MANIFEST/);
+  expect(() => readSidecarConfig({ ...VALID_ENV, SIDECAR_ADAPTER_MANIFEST: "{not json" })).toThrow(
+    /SIDECAR_ADAPTER_MANIFEST/,
+  );
 });
 
 test("an adapter manifest entry missing a required field fails boot", () => {
@@ -123,21 +121,19 @@ test("carries operator overrides for consumedRetentionMs/readyTimeoutMs through
 });
 
 test("a non-numeric CONSUMED_RETENTION_MS fails boot naming the variable", () => {
-  expect(() =>
-    readSidecarConfig({ ...VALID_ENV, CONSUMED_RETENTION_MS: "not-a-number" }),
-  ).toThrow(/CONSUMED_RETENTION_MS/);
+  expect(() => readSidecarConfig({ ...VALID_ENV, CONSUMED_RETENTION_MS: "not-a-number" })).toThrow(
+    /CONSUMED_RETENTION_MS/,
+  );
 });
 
 test("a non-positive CHILD_READY_TIMEOUT_MS fails boot naming the variable", () => {
-  expect(() =>
-    readSidecarConfig({ ...VALID_ENV, CHILD_READY_TIMEOUT_MS: "0" }),
-  ).toThrow(/CHILD_READY_TIMEOUT_MS/);
+  expect(() => readSidecarConfig({ ...VALID_ENV, CHILD_READY_TIMEOUT_MS: "0" })).toThrow(
+    /CHILD_READY_TIMEOUT_MS/,
+  );
 });
 
 test("carries a valid tool-registry pin through as the raw JSON", () => {
-  const pin = JSON.stringify([
-    { name: "internal", url: "https://npm.example.com" },
-  ]);
+  const pin = JSON.stringify([{ name: "internal", url: "https://npm.example.com" }]);
   const config = readSidecarConfig({
     ...VALID_ENV,
     SIDECAR_TOOL_REGISTRIES: pin,
@@ -146,15 +142,15 @@ test("carries a valid tool-registry pin through as the raw JSON", () => {
 });
 
 test("a malformed tool-registry pin fails boot naming the variable", () => {
-  expect(() =>
-    readSidecarConfig({ ...VALID_ENV, SIDECAR_TOOL_REGISTRIES: "{not json" }),
-  ).toThrow(/SIDECAR_TOOL_REGISTRIES/);
+  expect(() => readSidecarConfig({ ...VALID_ENV, SIDECAR_TOOL_REGISTRIES: "{not json" })).toThrow(
+    /SIDECAR_TOOL_REGISTRIES/,
+  );
 });
 
 test("an empty tool-registry pin fails boot instead of defaulting to npmjs", () => {
-  expect(() =>
-    readSidecarConfig({ ...VALID_ENV, SIDECAR_TOOL_REGISTRIES: "" }),
-  ).toThrow(/SIDECAR_TOOL_REGISTRIES/);
+  expect(() => readSidecarConfig({ ...VALID_ENV, SIDECAR_TOOL_REGISTRIES: "" })).toThrow(
+    /SIDECAR_TOOL_REGISTRIES/,
+  );
 });
 
 test("carries the optional child-env OS facts through when present", () => {
@@ -185,19 +181,15 @@ test("a missing variable errors naming it", () => {
 });
 
 test("an empty variable errors naming it", () => {
-  expect(() => readSidecarConfig({ ...VALID_ENV, SIDECAR_ID: "" })).toThrow(
-    /SIDECAR_ID/,
-  );
+  expect(() => readSidecarConfig({ ...VALID_ENV, SIDECAR_ID: "" })).toThrow(/SIDECAR_ID/);
 });
 
 test("a non-websocket hub URL errors naming the expected shape", () => {
-  expect(() =>
-    readSidecarConfig({ ...VALID_ENV, HUB_WS_URL: "https://hub.example.com" }),
-  ).toThrow(/ws:\/\/ or wss:\/\//);
+  expect(() => readSidecarConfig({ ...VALID_ENV, HUB_WS_URL: "https://hub.example.com" })).toThrow(
+    /ws:\/\/ or wss:\/\//,
+  );
 });
 
 test("an unparseable hub URL errors", () => {
-  expect(() =>
-    readSidecarConfig({ ...VALID_ENV, HUB_WS_URL: "ws://" }),
-  ).toThrow(/HUB_WS_URL/);
+  expect(() => readSidecarConfig({ ...VALID_ENV, HUB_WS_URL: "ws://" })).toThrow(/HUB_WS_URL/);
 });
diff --git a/apps/sidecar/test/credential-bindings-parity.test.ts b/apps/sidecar/test/credential-bindings-parity.test.ts
index 437f89a13e..b192b23e81 100644
--- a/apps/sidecar/test/credential-bindings-parity.test.ts
+++ b/apps/sidecar/test/credential-bindings-parity.test.ts
@@ -13,10 +13,7 @@ import { describe, expect, test } from "bun:test";
 import type { CredentialDelivery } from "@intx/types/sidecar";
 import { deriveResolvedBindings } from "@corbits/credential-providers";
 
-import {
-  consumerBindings,
-  type StepCredentialContext,
-} from "../src/step-agent-tools";
+import { consumerBindings, type StepCredentialContext } from "../src/step-agent-tools";
 
 const CONSUMER = "tool:@corbits/granola-tools";
 const OTHER_CONSUMER = "tool:@corbits/linear-tools";
@@ -24,9 +21,7 @@ const CREDENTIAL_ID = "cred_parity_1";
 
 function delivery(secret: string): CredentialDelivery {
   return {
-    bindings: [
-      { handle: "granola", credentialId: CREDENTIAL_ID, consumer: CONSUMER },
-    ],
+    bindings: [{ handle: "granola", credentialId: CREDENTIAL_ID, consumer: CONSUMER }],
     materials: [
       {
         credentialId: CREDENTIAL_ID,
@@ -52,10 +47,7 @@ describe("consumerBindings (sidecar) vs deriveResolvedBindings (@corbits/credent
   test("agree on the bound handle's static fields for a matching consumer", () => {
     const context = contextFor(delivery("s3cr3t"));
     const fromSidecar = consumerBindings(context, CONSUMER);
-    const fromGranolaCopy = deriveResolvedBindings(
-      delivery("s3cr3t"),
-      CONSUMER,
-    );
+    const fromGranolaCopy = deriveResolvedBindings(delivery("s3cr3t"), CONSUMER);
 
     expect([...fromSidecar.keys()]).toEqual([...fromGranolaCopy.keys()]);
     const sidecarBinding = fromSidecar.get("granola");
@@ -75,9 +67,7 @@ describe("consumerBindings (sidecar) vs deriveResolvedBindings (@corbits/credent
       stepId: "step_parity",
     };
     const sidecarBinding = consumerBindings(context, CONSUMER).get("granola");
-    const copyBinding = deriveResolvedBindings(originalDelivery, CONSUMER).get(
-      "granola",
-    );
+    const copyBinding = deriveResolvedBindings(originalDelivery, CONSUMER).get("granola");
     if (sidecarBinding === undefined || copyBinding === undefined) {
       throw new Error("expected both derivations to bind the granola handle");
     }
@@ -93,13 +83,10 @@ describe("consumerBindings (sidecar) vs deriveResolvedBindings (@corbits/credent
     const rotatedDelivery = delivery("rotated-secret");
     ref.current = rotatedDelivery;
     expect(sidecarBinding.readCurrentMaterial().secret).toBe("rotated-secret");
-    const copyBindingAfterRotation = deriveResolvedBindings(
-      rotatedDelivery,
-      CONSUMER,
-    ).get("granola");
-    expect(copyBindingAfterRotation?.readCurrentMaterial().secret).toBe(
-      "rotated-secret",
+    const copyBindingAfterRotation = deriveResolvedBindings(rotatedDelivery, CONSUMER).get(
+      "granola",
     );
+    expect(copyBindingAfterRotation?.readCurrentMaterial().secret).toBe("rotated-secret");
   });
 
   test("agree on filtering out a binding for a different consumer", () => {
@@ -112,8 +99,6 @@ describe("consumerBindings (sidecar) vs deriveResolvedBindings (@corbits/credent
   test("agree on an empty delivery yielding no bindings", () => {
     const context = contextFor(null);
     expect(consumerBindings(context, CONSUMER).size).toBe(0);
-    expect(
-      deriveResolvedBindings({ bindings: [], materials: [] }, CONSUMER).size,
-    ).toBe(0);
+    expect(deriveResolvedBindings({ bindings: [], materials: [] }, CONSUMER).size).toBe(0);
   });
 });
diff --git a/apps/sidecar/test/deploy-router.test.ts b/apps/sidecar/test/deploy-router.test.ts
index d6165983f2..4bc7c10f8b 100644
--- a/apps/sidecar/test/deploy-router.test.ts
+++ b/apps/sidecar/test/deploy-router.test.ts
@@ -8,11 +8,7 @@ import { mkdtemp, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import path from "node:path";
 import { afterEach, expect, test } from "bun:test";
-import {
-  createEd25519Crypto,
-  generateKeyPair,
-  verifySSHSignature,
-} from "@intx/crypto";
+import { createEd25519Crypto, generateKeyPair, verifySSHSignature } from "@intx/crypto";
 import {
   createAgentKeyStore,
   createAgentRepoStore as createSidecarSideRepoStore,
@@ -36,9 +32,7 @@ import { assembleRunCredentialsSnapshot } from "../src/workflow-host-wiring/supe
 const tempDirs: string[] = [];
 
 afterEach(async () => {
-  await Promise.all(
-    tempDirs.splice(0).map((dir) => rm(dir, { recursive: true, force: true })),
-  );
+  await Promise.all(tempDirs.splice(0).map((dir) => rm(dir, { recursive: true, force: true })));
 });
 
 async function makeDataDir(): Promise<string> {
@@ -99,9 +93,7 @@ async function makeRouter(dataDir: string): Promise<RouterFixture> {
     materializeDeploymentClosure: ({ deploymentId }) => {
       const definition = closureDefinitions.get(deploymentId);
       if (definition === undefined) {
-        throw new Error(
-          `test closure materializer: no definition registered for ${deploymentId}`,
-        );
+        throw new Error(`test closure materializer: no definition registered for ${deploymentId}`);
       }
       return Promise.resolve({
         definition,
@@ -144,10 +136,7 @@ const SOURCE_REF: NonNullable<AgentDeployFrame["workflow"]>["sourceRef"] = {
  * Register the definition the pinned closure evaluates to for `agentAddress`
  * and return the live shape the router's projection gate runs against.
  */
-function stageClosureDefinition(
-  agentAddress: string,
-  stepOrder: string[],
-): void {
+function stageClosureDefinition(agentAddress: string, stepOrder: string[]): void {
   const steps: Record<string, ReturnType<typeof step>> = {};
   for (const stepId of stepOrder) {
     steps[stepId] = step({
@@ -213,15 +202,12 @@ test("a frame with neither provisionStep nor workflow is refused", async () => {
     hubPublicKey: hexEncode(hubKey.publicKey),
   };
 
-  await expect(router.deploy(frame)).rejects.toThrow(
-    /provisionStep or a workflow definition/,
-  );
+  await expect(router.deploy(frame)).rejects.toThrow(/provisionStep or a workflow definition/);
 });
 
 test("an unbuildable inference provider rejects the deploy before any spawn", async () => {
   const dataDir = await makeDataDir();
-  const { router, spawnedBinaries, rejectedSources } =
-    await makeRouter(dataDir);
+  const { router, spawnedBinaries, rejectedSources } = await makeRouter(dataDir);
   const hubKey = await generateKeyPair();
   const frame: AgentDeployFrame = {
     type: "agent.deploy",
@@ -309,9 +295,7 @@ test("a single-step deploy writes the self-anchored run's grants before spawning
 
   stageClosureDefinition(agentAddress, ["step-1"]);
 
-  await expect(router.deploy(frame)).rejects.toThrow(
-    /refuses to launch a real child/,
-  );
+  await expect(router.deploy(frame)).rejects.toThrow(/refuses to launch a real child/);
 
   const substrate = createAgentRepoStore({
     dataDir,
diff --git a/apps/sidecar/test/host-boot.test.ts b/apps/sidecar/test/host-boot.test.ts
index 2f62f87b9c..45cb92ec47 100644
--- a/apps/sidecar/test/host-boot.test.ts
+++ b/apps/sidecar/test/host-boot.test.ts
@@ -30,9 +30,7 @@ test("host dials in against a stub hub and exits cleanly on SIGTERM", async () =
     websocket: {
       open() {},
       message(_ws, message) {
-        registered.resolve(
-          typeof message === "string" ? message : message.toString(),
-        );
+        registered.resolve(typeof message === "string" ? message : message.toString());
       },
     },
   });
diff --git a/apps/sidecar/test/shutdown.test.ts b/apps/sidecar/test/shutdown.test.ts
index a7baad8006..cbe5424b3e 100644
--- a/apps/sidecar/test/shutdown.test.ts
+++ b/apps/sidecar/test/shutdown.test.ts
@@ -22,10 +22,7 @@ test("resolves drained when the drain completes inside the bound", async () => {
 });
 
 test("resolves timed-out when the drain outlives the bound", async () => {
-  const outcome = await drainWithTimeout(
-    () => new Promise<void>(() => undefined),
-    10,
-  );
+  const outcome = await drainWithTimeout(() => new Promise<void>(() => undefined), 10);
   expect(outcome).toEqual({ kind: "timed-out" });
 });
 
@@ -113,12 +110,9 @@ test("a rejected shutdown promise is caught by the signal handler binding", asyn
   process.on("unhandledRejection", onUnhandled);
   const reported: unknown[] = [];
   try {
-    attachShutdownRejectionHandler(
-      Promise.reject(new Error("escaped")),
-      (error) => {
-        reported.push(error);
-      },
-    );
+    attachShutdownRejectionHandler(Promise.reject(new Error("escaped")), (error) => {
+      reported.push(error);
+    });
     await Bun.sleep(20);
     expect(reported).toHaveLength(1);
     expect(unhandled).toEqual([]);
diff --git a/apps/sidecar/test/signing-keypair.test.ts b/apps/sidecar/test/signing-keypair.test.ts
index 6c147ab43e..0758a68692 100644
--- a/apps/sidecar/test/signing-keypair.test.ts
+++ b/apps/sidecar/test/signing-keypair.test.ts
@@ -7,9 +7,7 @@ import { loadOrMintSidecarKeypair } from "../src/signing-keypair";
 const tempDirs: string[] = [];
 
 afterEach(async () => {
-  await Promise.all(
-    tempDirs.splice(0).map((dir) => rm(dir, { recursive: true, force: true })),
-  );
+  await Promise.all(tempDirs.splice(0).map((dir) => rm(dir, { recursive: true, force: true })));
 });
 
 async function makeSigningDir(): Promise<string> {
@@ -38,13 +36,8 @@ test("loads the same identity on a second boot", async () => {
 test("halts when the public anchor does not match the seed", async () => {
   const signingDir = await makeSigningDir();
   await loadOrMintSidecarKeypair(signingDir);
-  await writeFile(
-    path.join(signingDir, "ed25519.public"),
-    new Uint8Array(32).fill(7),
-  );
-  await expect(loadOrMintSidecarKeypair(signingDir)).rejects.toThrow(
-    /does not match/,
-  );
+  await writeFile(path.join(signingDir, "ed25519.public"), new Uint8Array(32).fill(7));
+  await expect(loadOrMintSidecarKeypair(signingDir)).rejects.toThrow(/does not match/);
 });
 
 test("halts on a partial keypair directory", async () => {
diff --git a/apps/sidecar/test/support/workflow-lifecycle-fixture.ts b/apps/sidecar/test/support/workflow-lifecycle-fixture.ts
index 3e926ad462..9fb3c5b881 100644
--- a/apps/sidecar/test/support/workflow-lifecycle-fixture.ts
+++ b/apps/sidecar/test/support/workflow-lifecycle-fixture.ts
@@ -161,9 +161,7 @@ export function createSpawnTestRepoStore(tempBase: string): RepoStore {
       const value = Reflect.get(target, prop, receiver);
       if (value !== undefined) return value;
       return () => {
-        throw new Error(
-          `stub RepoStore: ${String(prop)} not implemented for this test`,
-        );
+        throw new Error(`stub RepoStore: ${String(prop)} not implemented for this test`);
       };
     },
   });
@@ -286,12 +284,9 @@ export async function makeLifecycleFixture(opts?: {
 
   const transport = createInMemoryTransport();
   const keyPair = await generateKeyPair();
-  const tempBase = await fs.mkdtemp(
-    path.join(os.tmpdir(), "sidecar-lifecycle-repos-"),
-  );
+  const tempBase = await fs.mkdtemp(path.join(os.tmpdir(), "sidecar-lifecycle-repos-"));
   const dataDir =
-    opts?.dataDir ??
-    (await fs.mkdtemp(path.join(os.tmpdir(), "sidecar-lifecycle-data-")));
+    opts?.dataDir ?? (await fs.mkdtemp(path.join(os.tmpdir(), "sidecar-lifecycle-data-")));
   const repoStore = createSpawnTestRepoStore(tempBase);
 
   const multistepMailRouter = createMultistepMailRouter();
@@ -307,9 +302,7 @@ export async function makeLifecycleFixture(opts?: {
         throw new Error("single-step branch must not invoke provisionAgent");
       },
       persistHubPublicKey: async () => {
-        throw new Error(
-          "single-step branch must not invoke persistHubPublicKey",
-        );
+        throw new Error("single-step branch must not invoke persistHubPublicKey");
       },
       initRepo: async () => undefined,
     } as unknown as Parameters<typeof createSidecarDeployRouter>[0]["sessions"],
@@ -327,9 +320,7 @@ export async function makeLifecycleFixture(opts?: {
           await fs.mkdir(agentDir(dataDir, address), { recursive: true });
           return { keyPair: await generateKeyPair(), isNew: false };
         },
-      } as unknown as Parameters<
-        typeof createSidecarDeployRouter
-      >[0]["keyStore"]),
+      } as unknown as Parameters<typeof createSidecarDeployRouter>[0]["keyStore"]),
     transport,
     repoStore,
     signingKeySeed: keyPair.privateKey,
diff --git a/apps/sidecar/test/tool-materialization.test.ts b/apps/sidecar/test/tool-materialization.test.ts
index 521132aaaa..d3c8076b29 100644
--- a/apps/sidecar/test/tool-materialization.test.ts
+++ b/apps/sidecar/test/tool-materialization.test.ts
@@ -16,18 +16,14 @@ import { SIDECAR_SUBSTRATE_CONFIG_KEYS } from "../src/workflow-substrate-factory
 const tempDirs: string[] = [];
 
 async function tempDir(): Promise<string> {
-  const d = await fs.promises.mkdtemp(
-    path.join(os.tmpdir(), "default-harness-test-"),
-  );
+  const d = await fs.promises.mkdtemp(path.join(os.tmpdir(), "default-harness-test-"));
   tempDirs.push(d);
   return d;
 }
 
 afterEach(async () => {
   const dirs = tempDirs.splice(0);
-  await Promise.all(
-    dirs.map((d) => fs.promises.rm(d, { recursive: true, force: true })),
-  );
+  await Promise.all(dirs.map((d) => fs.promises.rm(d, { recursive: true, force: true })));
 });
 
 describe("materializeToolPackages — manifest.invalid gate", () => {
@@ -83,10 +79,7 @@ describe("materializeToolPackages — manifest.invalid gate", () => {
     // writer must not push the bytes through JSON.stringify, which
     // would double-encode the string and erase the original-input
     // evidence the audit file exists to preserve.
-    const persisted = await fs.promises.readFile(
-      path.join(attemptDir, "manifest.json"),
-      "utf-8",
-    );
+    const persisted = await fs.promises.readFile(path.join(attemptDir, "manifest.json"), "utf-8");
     expect(persisted).toBe(corrupt);
 
     const errorJson = JSON.parse(
@@ -134,10 +127,7 @@ describe("materializeToolPackages — manifest.invalid gate", () => {
     // The audit trail records the bytes-as-supplied for both
     // failure modes, so a future investigator can replay the
     // same input against a newer validator.
-    const persisted = await fs.promises.readFile(
-      path.join(attemptDir, "manifest.json"),
-      "utf-8",
-    );
+    const persisted = await fs.promises.readFile(path.join(attemptDir, "manifest.json"), "utf-8");
     expect(persisted).toBe(wrongShape);
 
     const errorJson = JSON.parse(
@@ -152,21 +142,15 @@ describe("materializeToolPackages — manifest.invalid gate", () => {
     });
 
     test("accepts a bare id for backward compatibility with pre-versioned files", () => {
-      expect(parseActiveDeployId("legacy-deploy-id", "/dummy")).toBe(
-        "legacy-deploy-id",
-      );
+      expect(parseActiveDeployId("legacy-deploy-id", "/dummy")).toBe("legacy-deploy-id");
     });
 
     test("rejects an unknown version prefix loudly", () => {
-      expect(() => parseActiveDeployId("v2:abc", "/dummy")).toThrow(
-        /unknown version prefix/,
-      );
+      expect(() => parseActiveDeployId("v2:abc", "/dummy")).toThrow(/unknown version prefix/);
     });
 
     test("rejects a v1-prefixed but empty id", () => {
-      expect(() => parseActiveDeployId("v1:", "/dummy")).toThrow(
-        /carries the v1 prefix but no id/,
-      );
+      expect(() => parseActiveDeployId("v1:", "/dummy")).toThrow(/carries the v1 prefix but no id/);
     });
 
     test("rejects an empty file", () => {
@@ -256,10 +240,7 @@ describe("materializeToolPackages — manifest.invalid gate", () => {
       expect(outcome.degraded).toBe(true);
       expect(outcome.error).toBeInstanceOf(Error);
 
-      const dirtyContents = await fs.promises.readFile(
-        `${activeIdFile}.dirty`,
-        "utf-8",
-      );
+      const dirtyContents = await fs.promises.readFile(`${activeIdFile}.dirty`, "utf-8");
       expect(dirtyContents).toBe("v1:new-id-42");
     });
   });
@@ -273,10 +254,7 @@ describe("materializeToolPackages — manifest.invalid gate", () => {
     const storeDir = await tempDir();
     const instanceDir = path.join(storeDir, "tool-packages");
     await fs.promises.mkdir(instanceDir, { recursive: true });
-    await fs.promises.writeFile(
-      path.join(instanceDir, "active-deploy-id"),
-      "v1:stale-recorded",
-    );
+    await fs.promises.writeFile(path.join(instanceDir, "active-deploy-id"), "v1:stale-recorded");
     await fs.promises.writeFile(
       path.join(instanceDir, "active-deploy-id.dirty"),
       "v1:truth-from-marker",
@@ -307,10 +285,7 @@ describe("materializeToolPackages — manifest.invalid gate", () => {
       throw new Error("no attempt dir was created");
     }
     const errorJson = JSON.parse(
-      await fs.promises.readFile(
-        path.join(auditRoot, attemptDirName, "error.json"),
-        "utf-8",
-      ),
+      await fs.promises.readFile(path.join(auditRoot, attemptDirName, "error.json"), "utf-8"),
     );
     expect(errorJson.previousDeployId).toBe("truth-from-marker");
   });
@@ -348,9 +323,7 @@ describe("tool-registry threading", () => {
 
   test("the default payload the boot edge serializes parses to the public npmjs registry", () => {
     const registries = parseToolRegistries(DEFAULT_TOOL_REGISTRIES_JSON);
-    expect([...registries.entries()]).toEqual([
-      ["npmjs", { url: "https://registry.npmjs.org" }],
-    ]);
+    expect([...registries.entries()]).toEqual([["npmjs", { url: "https://registry.npmjs.org" }]]);
   });
 
   test("parseToolRegistries collapses the wire array into a map keyed by name", () => {
@@ -379,9 +352,7 @@ describe("tool-registry threading", () => {
 
   test("malformed JSON, wrong shapes, and duplicate names fail loud", () => {
     expect(() => parseToolRegistries("{not json")).toThrow(/not valid JSON/);
-    expect(() => parseToolRegistries(JSON.stringify({ npmjs: {} }))).toThrow(
-      /failed validation/,
-    );
+    expect(() => parseToolRegistries(JSON.stringify({ npmjs: {} }))).toThrow(/failed validation/);
     expect(() =>
       parseToolRegistries(
         JSON.stringify([
diff --git a/apps/sidecar/test/workflow-deploy-lifecycle.test.ts b/apps/sidecar/test/workflow-deploy-lifecycle.test.ts
index 0eb3109eaa..067c53ed5c 100644
--- a/apps/sidecar/test/workflow-deploy-lifecycle.test.ts
+++ b/apps/sidecar/test/workflow-deploy-lifecycle.test.ts
@@ -44,9 +44,7 @@ describe("workflow deployment lifecycle through the deploy router", () => {
       stepOrder: ["body-step"],
       steps: { "body-step": { kind: "step" } },
     };
-    frame.workflow.referencedDefinitions = [
-      { definition: bodyDefinition, sources: bodySources },
-    ];
+    frame.workflow.referencedDefinitions = [{ definition: bodyDefinition, sources: bodySources }];
 
     const deployPromise = router.deploy(frame);
     await answerReadyHandshake(spawns, 0);
@@ -55,16 +53,14 @@ describe("workflow deployment lifecycle through the deploy router", () => {
     // A body child runs in-process and loses its env across a restart, so its
     // per-step source pins must be durable on disk.
     const bodyDir = path.join(dataDir, "assets", "workflow", bodyDefinition.id);
-    expect(
-      JSON.parse(await fs.readFile(path.join(bodyDir, "sources.json"), "utf8")),
-    ).toEqual(bodySources);
+    expect(JSON.parse(await fs.readFile(path.join(bodyDir, "sources.json"), "utf8"))).toEqual(
+      bodySources,
+    );
 
     // The body DEFINITION is never staged: the run child resolves each body
     // in-memory from the parent's re-verified closure. A staged copy would be
     // a second, un-verified source of the body's bytes.
-    await expect(
-      fs.stat(path.join(bodyDir, "workflow.json")),
-    ).rejects.toThrow();
+    await expect(fs.stat(path.join(bodyDir, "workflow.json"))).rejects.toThrow();
     await expect(
       fs.stat(path.join(dataDir, "assets", "workflow", "wf-lifecycle")),
     ).rejects.toThrow();
@@ -82,9 +78,7 @@ describe("workflow deployment lifecycle through the deploy router", () => {
     // The child EVALUATES the pinned code from this dir rather than reading an
     // inert definition off disk, and re-verifies its projection against the
     // hub-approved hash -- never a sidecar recompute.
-    expect(spawn.env.CLOSURE_PACKAGE_DIR).toBe(
-      path.join(dataDir, "closure-package", deploymentId),
-    );
+    expect(spawn.env.CLOSURE_PACKAGE_DIR).toBe(path.join(dataDir, "closure-package", deploymentId));
     expect(spawn.env.DEFINITION_HASH).toBe(LIFECYCLE_APPROVED_WIRE_HASH);
     expect(spawn.env.WORKFLOW_DEFINITION_REF).toBeUndefined();
     expect(spawn.env.REFERENCED_DEFINITION_HASHES).toBeUndefined();
@@ -119,12 +113,7 @@ describe("workflow deployment lifecycle through the deploy router", () => {
     expect(router.activeAddresses()).toEqual([frame.agentAddress]);
     // The durable deployment record the next boot restores from.
     const deploymentId = deriveDeploymentId(frame.agentAddress);
-    const recordFile = path.join(
-      dataDir,
-      "workflow-runs",
-      deploymentId,
-      "deployment.json",
-    );
+    const recordFile = path.join(dataDir, "workflow-runs", deploymentId, "deployment.json");
     await expect(fs.stat(recordFile)).resolves.toBeDefined();
   });
 
@@ -136,12 +125,7 @@ describe("workflow deployment lifecycle through the deploy router", () => {
     await deployPromise;
 
     const deploymentId = deriveDeploymentId(frame.agentAddress);
-    const recordFile = path.join(
-      dataDir,
-      "workflow-runs",
-      deploymentId,
-      "deployment.json",
-    );
+    const recordFile = path.join(dataDir, "workflow-runs", deploymentId, "deployment.json");
     const durableConversationFile = path.join(
       dataDir,
       "agent-conversation-state",
@@ -246,15 +230,11 @@ describe("workflow deployment lifecycle through the deploy router", () => {
     // The deployment's whole step-state subtree is reclaimed -- warm
     // stable workspace AND any cold leftover -- now that its supervisor
     // and child are torn down.
-    await expect(
-      fs.stat(path.join(stepStateRoot, deploymentId)),
-    ).rejects.toThrow();
+    await expect(fs.stat(path.join(stepStateRoot, deploymentId))).rejects.toThrow();
     // So is the deployment record: an undeployed deployment must not be
     // restored on the next boot.
     await expect(
-      fs.stat(
-        path.join(dataDir, "workflow-runs", deploymentId, "deployment.json"),
-      ),
+      fs.stat(path.join(dataDir, "workflow-runs", deploymentId, "deployment.json")),
     ).rejects.toThrow();
     // A different deployment's scratch is untouched: the sweep is scoped
     // to this deployment's `<deploymentId>` subtree only.
@@ -269,8 +249,7 @@ describe("workflow deployment lifecycle through the deploy router", () => {
   // port, no `MultistepCredentialsRouter` handler was ever installed, so an
   // inbound `credentials.update` frame was unrouted for every deployment.
   test("a hub credentials.update frame reaches the child as a credentials-updated control frame", async () => {
-    const { router, spawns, multistepCredentialsRouter } =
-      await makeLifecycleFixture();
+    const { router, spawns, multistepCredentialsRouter } = await makeLifecycleFixture();
     const frame = makeWorkflowFrame("run_lifecycle-credentials@example.com");
 
     const deployPromise = router.deploy(frame);
@@ -304,8 +283,8 @@ describe("workflow deployment lifecycle through the deploy router", () => {
     expect(routed).toBe(true);
     const credentialsUpdatedLine = spawn.sentControlLines.find(
       (line) =>
-        (JSON.parse(line) as { envelope: { payload: { type: string } } })
-          .envelope.payload.type === "credentials-updated",
+        (JSON.parse(line) as { envelope: { payload: { type: string } } }).envelope.payload.type ===
+        "credentials-updated",
     );
     if (credentialsUpdatedLine === undefined) {
       throw new Error(
diff --git a/apps/sidecar/test/workflow-grants-barrier.test.ts b/apps/sidecar/test/workflow-grants-barrier.test.ts
index cd1a885baa..0002950661 100644
--- a/apps/sidecar/test/workflow-grants-barrier.test.ts
+++ b/apps/sidecar/test/workflow-grants-barrier.test.ts
@@ -17,8 +17,7 @@ import { createSpawnTestRepoStore } from "./support/workflow-lifecycle-fixture";
 
 const DEPLOYMENT_ID = "dep-barrier";
 const STEP_ORDER = ["step-a", "step-b"];
-const deriveStepAddress = ({ stepId }: { stepId: string }) =>
-  `${DEPLOYMENT_ID}-${stepId}@local`;
+const deriveStepAddress = ({ stepId }: { stepId: string }) => `${DEPLOYMENT_ID}-${stepId}@local`;
 
 // Wrapped in an object: the stub store is a Proxy that throws on any
 // unknown property, so returning it bare from an async function makes the
@@ -87,8 +86,6 @@ describe("assembleRunCredentialsSnapshot", () => {
       expect(step.grants).toEqual(grants);
       expect(step.address).toBe(deriveStepAddress({ stepId: step.stepId }));
     }
-    expect(new Set(snapshot.steps.map((step) => step.contentHash)).size).toBe(
-      1,
-    );
+    expect(new Set(snapshot.steps.map((step) => step.contentHash)).size).toBe(1);
   });
 });
diff --git a/apps/sidecar/test/workflow-restore-defer-to-wake.test.ts b/apps/sidecar/test/workflow-restore-defer-to-wake.test.ts
index 6fe56181f6..285fe5bca9 100644
--- a/apps/sidecar/test/workflow-restore-defer-to-wake.test.ts
+++ b/apps/sidecar/test/workflow-restore-defer-to-wake.test.ts
@@ -19,11 +19,7 @@ import { mkdtemp, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import path from "node:path";
 import { afterEach, expect, test } from "bun:test";
-import {
-  createEd25519Crypto,
-  generateKeyPair,
-  verifySSHSignature,
-} from "@intx/crypto";
+import { createEd25519Crypto, generateKeyPair, verifySSHSignature } from "@intx/crypto";
 import {
   createAgentKeyStore,
   createAgentRepoStore as createSidecarSideRepoStore,
@@ -49,9 +45,7 @@ import {
 const tempDirs: string[] = [];
 
 afterEach(async () => {
-  await Promise.all(
-    tempDirs.splice(0).map((dir) => rm(dir, { recursive: true, force: true })),
-  );
+  await Promise.all(tempDirs.splice(0).map((dir) => rm(dir, { recursive: true, force: true })));
 });
 
 async function makeDataDir(): Promise<string> {
@@ -96,9 +90,7 @@ async function makeRouter(
     materializeDeploymentClosure: ({ deploymentId }) => {
       const definition = closureDefinitions.get(deploymentId);
       if (definition === undefined) {
-        throw new Error(
-          `test closure materializer: no definition registered for ${deploymentId}`,
-        );
+        throw new Error(`test closure materializer: no definition registered for ${deploymentId}`);
       }
       return Promise.resolve({
         definition,
diff --git a/apps/sidecar/test/workflow-restore-quarantine.test.ts b/apps/sidecar/test/workflow-restore-quarantine.test.ts
index 829f1c4146..35e9c49efb 100644
--- a/apps/sidecar/test/workflow-restore-quarantine.test.ts
+++ b/apps/sidecar/test/workflow-restore-quarantine.test.ts
@@ -13,11 +13,7 @@ import { mkdtemp, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import path from "node:path";
 import { afterEach, expect, test } from "bun:test";
-import {
-  createEd25519Crypto,
-  generateKeyPair,
-  verifySSHSignature,
-} from "@intx/crypto";
+import { createEd25519Crypto, generateKeyPair, verifySSHSignature } from "@intx/crypto";
 import {
   createAgentKeyStore,
   createAgentRepoStore as createSidecarSideRepoStore,
@@ -44,9 +40,7 @@ import {
 const tempDirs: string[] = [];
 
 afterEach(async () => {
-  await Promise.all(
-    tempDirs.splice(0).map((dir) => rm(dir, { recursive: true, force: true })),
-  );
+  await Promise.all(tempDirs.splice(0).map((dir) => rm(dir, { recursive: true, force: true })));
 });
 
 async function makeDataDir(): Promise<string> {
@@ -101,9 +95,7 @@ async function makeRouter(
       }
       const definition = closureDefinitions.get(deploymentId);
       if (definition === undefined) {
-        throw new Error(
-          `test closure materializer: no definition registered for ${deploymentId}`,
-        );
+        throw new Error(`test closure materializer: no definition registered for ${deploymentId}`);
       }
       return Promise.resolve({
         definition,
@@ -191,32 +183,19 @@ test("a permanently unrestorable record is quarantined after RESTORE_QUARANTINE_
 
   for (let boot = 1; boot <= RESTORE_QUARANTINE_THRESHOLD; boot++) {
     await router.restoreWorkflowDeployments();
-    const onDisk = await readWorkflowDeploymentRecord(
-      dataDir,
-      mismatchedDeploymentId,
-    );
+    const onDisk = await readWorkflowDeploymentRecord(dataDir, mismatchedDeploymentId);
     expect(onDisk?.restoreFailure?.kind).toBe("permanent");
     expect(onDisk?.restoreFailure?.attempts).toBe(boot);
   }
 
-  const quarantined = await readWorkflowDeploymentRecord(
-    dataDir,
-    mismatchedDeploymentId,
-  );
-  expect(quarantined?.restoreFailure?.attempts).toBe(
-    RESTORE_QUARANTINE_THRESHOLD,
-  );
+  const quarantined = await readWorkflowDeploymentRecord(dataDir, mismatchedDeploymentId);
+  expect(quarantined?.restoreFailure?.attempts).toBe(RESTORE_QUARANTINE_THRESHOLD);
 
   // One more boot: quarantine means the attempt count does NOT move --
   // the record is skipped entirely rather than attempted and re-failed.
   await router.restoreWorkflowDeployments();
-  const afterQuarantineBoot = await readWorkflowDeploymentRecord(
-    dataDir,
-    mismatchedDeploymentId,
-  );
-  expect(afterQuarantineBoot?.restoreFailure?.attempts).toBe(
-    RESTORE_QUARANTINE_THRESHOLD,
-  );
+  const afterQuarantineBoot = await readWorkflowDeploymentRecord(dataDir, mismatchedDeploymentId);
+  expect(afterQuarantineBoot?.restoreFailure?.attempts).toBe(RESTORE_QUARANTINE_THRESHOLD);
 
   // The record itself is never deleted -- an operator can still undeploy
   // the address to reclaim it.
@@ -230,9 +209,7 @@ test("a transiently unbuildable provider is retried every boot and never quarant
     assertSourceBuildable: (source) => {
       assertCalls += 1;
       if (source.provider === "unbuildable") {
-        throw new Error(
-          `Source provider "${source.provider}" is not registered`,
-        );
+        throw new Error(`Source provider "${source.provider}" is not registered`);
       }
     },
   });
@@ -310,11 +287,7 @@ test("a missing/incomplete closure staging directory quarantines as a permanent
     approvedWireHash: "d".repeat(64),
     sourceRef: SOURCE_REF,
   };
-  await writeWorkflowDeploymentRecord(
-    dataDir,
-    brokenDeploymentId,
-    brokenRecord,
-  );
+  await writeWorkflowDeploymentRecord(dataDir, brokenDeploymentId, brokenRecord);
 
   const healthyRecord: WorkflowDeploymentRecord = {
     version: 2,
@@ -335,29 +308,19 @@ test("a missing/incomplete closure staging directory quarantines as a permanent
     approvedWireHash: "d".repeat(64),
     sourceRef: SOURCE_REF,
   };
-  await writeWorkflowDeploymentRecord(
-    dataDir,
-    healthyDeploymentId,
-    healthyRecord,
-  );
+  await writeWorkflowDeploymentRecord(dataDir, healthyDeploymentId, healthyRecord);
 
   for (let boot = 1; boot <= RESTORE_QUARANTINE_THRESHOLD; boot++) {
     // Boot completes without throwing -- the ENOENT never escapes the
     // restore loop, however it is classified.
     await expect(router.restoreWorkflowDeployments()).resolves.toBeUndefined();
-    const broken = await readWorkflowDeploymentRecord(
-      dataDir,
-      brokenDeploymentId,
-    );
+    const broken = await readWorkflowDeploymentRecord(dataDir, brokenDeploymentId);
     expect(broken?.restoreFailure?.kind).toBe("permanent");
     expect(broken?.restoreFailure?.attempts).toBe(boot);
 
     // The sibling deployment's own restore was attempted on every boot,
     // unaffected by the broken record ahead of (or behind) it in the scan.
-    const healthy = await readWorkflowDeploymentRecord(
-      dataDir,
-      healthyDeploymentId,
-    );
+    const healthy = await readWorkflowDeploymentRecord(dataDir, healthyDeploymentId);
     expect(healthy?.restoreFailure?.kind).toBe("transient");
     expect(healthy?.restoreFailure?.attempts).toBe(boot);
   }
@@ -365,11 +328,6 @@ test("a missing/incomplete closure staging directory quarantines as a permanent
   // One more boot: quarantined now, so the attempt count stops moving --
   // the record is skipped rather than re-attempted and re-failed.
   await router.restoreWorkflowDeployments();
-  const afterQuarantine = await readWorkflowDeploymentRecord(
-    dataDir,
-    brokenDeploymentId,
-  );
-  expect(afterQuarantine?.restoreFailure?.attempts).toBe(
-    RESTORE_QUARANTINE_THRESHOLD,
-  );
+  const afterQuarantine = await readWorkflowDeploymentRecord(dataDir, brokenDeploymentId);
+  expect(afterQuarantine?.restoreFailure?.attempts).toBe(RESTORE_QUARANTINE_THRESHOLD);
 });
diff --git a/apps/sidecar/test/workflow-restore-timeout-cancel.test.ts b/apps/sidecar/test/workflow-restore-timeout-cancel.test.ts
index 3e4fc4a1c5..93f248e191 100644
--- a/apps/sidecar/test/workflow-restore-timeout-cancel.test.ts
+++ b/apps/sidecar/test/workflow-restore-timeout-cancel.test.ts
@@ -21,17 +21,12 @@ import {
   writeWorkflowDeploymentRecord,
   type WorkflowDeploymentRecord,
 } from "../src/workflow-deployment-record";
-import {
-  answerReadyHandshake,
-  makeLifecycleFixture,
-} from "./support/workflow-lifecycle-fixture";
+import { answerReadyHandshake, makeLifecycleFixture } from "./support/workflow-lifecycle-fixture";
 
 const tempDirs: string[] = [];
 
 afterEach(async () => {
-  await Promise.all(
-    tempDirs.splice(0).map((dir) => rm(dir, { recursive: true, force: true })),
-  );
+  await Promise.all(tempDirs.splice(0).map((dir) => rm(dir, { recursive: true, force: true })));
 });
 
 async function makeDataDir(): Promise<string> {
@@ -121,10 +116,7 @@ test("a restore that outlasts its timeout corrects its record once the spawn act
   const restorePromise = router.restoreWorkflowDeployments();
   await restorePromise;
 
-  const afterTimeout = await readWorkflowDeploymentRecord(
-    dataDir,
-    deploymentId,
-  );
+  const afterTimeout = await readWorkflowDeploymentRecord(dataDir, deploymentId);
   expect(afterTimeout?.restoreFailure).toBeDefined();
   expect(router.activeAddresses()).toEqual([]);
 
@@ -142,10 +134,7 @@ test("a restore that outlasts its timeout corrects its record once the spawn act
   let afterLateRestore: WorkflowDeploymentRecord | undefined;
   const deadline = Date.now() + 5000;
   while (Date.now() < deadline) {
-    afterLateRestore = await readWorkflowDeploymentRecord(
-      dataDir,
-      deploymentId,
-    );
+    afterLateRestore = await readWorkflowDeploymentRecord(dataDir, deploymentId);
     if (afterLateRestore?.restoreFailure === undefined) break;
     await new Promise((r) => setTimeout(r, 5));
   }
@@ -238,10 +227,7 @@ test("a reclaiming teardown racing a dangling restore's boot-failure write is no
   // Poll for the unwind: it is a background continuation of the restore
   // attempt, not something `restoreWorkflowDeployments()` awaits.
   const deadline = Date.now() + 10_000;
-  while (
-    Date.now() < deadline &&
-    router.activeAddresses().includes(agentAddress)
-  ) {
+  while (Date.now() < deadline && router.activeAddresses().includes(agentAddress)) {
     await new Promise((r) => setTimeout(r, 5));
   }
 
diff --git a/apps/sidecar/test/workflow-substrate-factory-child-cancel-report.test.ts b/apps/sidecar/test/workflow-substrate-factory-child-cancel-report.test.ts
index da126f8fcf..3856f34238 100644
--- a/apps/sidecar/test/workflow-substrate-factory-child-cancel-report.test.ts
+++ b/apps/sidecar/test/workflow-substrate-factory-child-cancel-report.test.ts
@@ -17,10 +17,7 @@ import {
   WORKFLOW_RUN_GITIGNORE_PATH,
 } from "@intx/hub-sessions";
 import type { AuthorizeFn } from "@intx/hub-sessions";
-import type {
-  RepoId,
-  WorkflowRunWorkflowProcessPrincipal,
-} from "@intx/hub-sessions/substrate";
+import type { RepoId, WorkflowRunWorkflowProcessPrincipal } from "@intx/hub-sessions/substrate";
 import type { KeyPair } from "@intx/types/runtime";
 import {
   createInMemoryRepoStore,
@@ -28,10 +25,7 @@ import {
   defineWorkflow,
   step,
 } from "@intx/workflow";
-import {
-  createWorkflowHostSignalChannel,
-  type RunChildWorkflow,
-} from "@intx/workflow-host";
+import { createWorkflowHostSignalChannel, type RunChildWorkflow } from "@intx/workflow-host";
 
 import {
   createSidecarRunChild,
@@ -68,13 +62,9 @@ afterAll(async () => {
 test("a cancel rejection during abort is reported and is not unhandled", async () => {
   const forced = new Error("forced cancel reject");
   const cancelMock = mock(() => Promise.reject(forced));
-  const reportErrorMock = mock(
-    (_error: unknown, _context: unknown) => "ref-test",
-  );
+  const reportErrorMock = mock((_error: unknown, _context: unknown) => "ref-test");
 
-  const dataDir = await fs.promises.mkdtemp(
-    path.join(os.tmpdir(), "run-child-cancel-report-"),
-  );
+  const dataDir = await fs.promises.mkdtemp(path.join(os.tmpdir(), "run-child-cancel-report-"));
   tempDirs.push(dataDir);
   const substrate = createRepoStore({
     dataDir,
@@ -157,13 +147,9 @@ test("a cancel rejection during abort is reported and is not unhandled", async (
 test("a signalChannel.stop rejection is reported and is not unhandled", async () => {
   const forced = new Error("forced stop reject");
   const stopMock = mock(() => Promise.reject(forced));
-  const reportErrorMock = mock(
-    (_error: unknown, _context: unknown) => "ref-test",
-  );
+  const reportErrorMock = mock((_error: unknown, _context: unknown) => "ref-test");
 
-  const dataDir = await fs.promises.mkdtemp(
-    path.join(os.tmpdir(), "run-child-stop-report-"),
-  );
+  const dataDir = await fs.promises.mkdtemp(path.join(os.tmpdir(), "run-child-stop-report-"));
   tempDirs.push(dataDir);
   const substrate = createRepoStore({
     dataDir,
@@ -253,9 +239,7 @@ test("a signalChannel.stop rejection is reported and is not unhandled", async ()
 test("a spawn-suspendable abort cancel rejection is reported and is not unhandled", async () => {
   const forced = new Error("forced suspendable cancel reject");
   const cancelMock = mock(() => Promise.reject(forced));
-  const reportErrorMock = mock(
-    (_error: unknown, _context: unknown) => "ref-test",
-  );
+  const reportErrorMock = mock((_error: unknown, _context: unknown) => "ref-test");
 
   const dataDir = await fs.promises.mkdtemp(
     path.join(os.tmpdir(), "run-suspendable-cancel-report-"),
diff --git a/apps/sidecar/test/workflow-substrate-factory-run-child.test.ts b/apps/sidecar/test/workflow-substrate-factory-run-child.test.ts
index 311ae67251..75d3cb70f9 100644
--- a/apps/sidecar/test/workflow-substrate-factory-run-child.test.ts
+++ b/apps/sidecar/test/workflow-substrate-factory-run-child.test.ts
@@ -23,10 +23,7 @@ import {
   WORKFLOW_RUN_GITIGNORE_PATH,
 } from "@intx/hub-sessions";
 import type { AuthorizeFn } from "@intx/hub-sessions";
-import type {
-  RepoId,
-  WorkflowRunWorkflowProcessPrincipal,
-} from "@intx/hub-sessions/substrate";
+import type { RepoId, WorkflowRunWorkflowProcessPrincipal } from "@intx/hub-sessions/substrate";
 import {
   createInMemoryRepoStore,
   createInMemoryScheduler,
@@ -66,9 +63,7 @@ afterAll(async () => {
   }
 });
 
-async function makeSubstrate(
-  prefix: string,
-): Promise<ReturnType<typeof createRepoStore>> {
+async function makeSubstrate(prefix: string): Promise<ReturnType<typeof createRepoStore>> {
   const dataDir = await fs.promises.mkdtemp(path.join(os.tmpdir(), prefix));
   tempDirs.push(dataDir);
   const substrate = createRepoStore({
@@ -121,10 +116,7 @@ const completeImmediately: StepInvoker = async () => ({
   output: { done: true },
 });
 
-async function makeRunChild(
-  prefix: string,
-  invokeStep: StepInvoker,
-): Promise<RunChildWorkflow> {
+async function makeRunChild(prefix: string, invokeStep: StepInvoker): Promise<RunChildWorkflow> {
   const substrate = await makeSubstrate(prefix);
   return createSidecarRunChild({
     substrate,
@@ -139,10 +131,7 @@ async function makeRunChild(
   });
 }
 
-function childInput(
-  id: string,
-  signal: AbortSignal,
-): Parameters<RunChildWorkflow>[0] {
+function childInput(id: string, signal: AbortSignal): Parameters<RunChildWorkflow>[0] {
   return {
     definition: childDefinition(`child-wf-${id}`),
     definitionRef: REF,
@@ -158,10 +147,7 @@ function childInput(
 
 describe("createSidecarRunChild", () => {
   test("an unaborted child runs to a completed terminal", async () => {
-    const runChild = await makeRunChild(
-      "run-child-complete-",
-      completeImmediately,
-    );
+    const runChild = await makeRunChild("run-child-complete-", completeImmediately);
     const result = await runChild(
       childInput("complete", new AbortController().signal),
       () => undefined,
@@ -181,10 +167,7 @@ describe("createSidecarRunChild", () => {
 
     const runChild = await makeRunChild("run-child-abort-", parkAndAnnounce);
     const abort = new AbortController();
-    const pending = runChild(
-      childInput("abort", abort.signal),
-      () => undefined,
-    );
+    const pending = runChild(childInput("abort", abort.signal), () => undefined);
 
     // Wait on the step actually being entered, not on a fixed delay: the
     // cancel has to interrupt a run in flight, and a machine slow enough
@@ -203,10 +186,7 @@ describe("createSidecarRunChild", () => {
     const runChild = await makeRunChild("run-child-preabort-", parkForever);
     const abort = new AbortController();
     abort.abort();
-    const result = await runChild(
-      childInput("preabort", abort.signal),
-      () => undefined,
-    );
+    const result = await runChild(childInput("preabort", abort.signal), () => undefined);
     expect(result.terminalStatus).toBe("cancelled");
   });
 });
diff --git a/apps/sidecar/test/workflow-substrate-factory-suspendable-child.test.ts b/apps/sidecar/test/workflow-substrate-factory-suspendable-child.test.ts
index 759d4f3c8b..c068986c4a 100644
--- a/apps/sidecar/test/workflow-substrate-factory-suspendable-child.test.ts
+++ b/apps/sidecar/test/workflow-substrate-factory-suspendable-child.test.ts
@@ -19,11 +19,7 @@ import path from "node:path";
 
 import { generateKeyPair } from "@intx/crypto";
 import type { AuthzCallResult } from "@intx/inference";
-import type {
-  ApprovalSnapshot,
-  KeyPair,
-  MailPartReader,
-} from "@intx/types/runtime";
+import type { ApprovalSnapshot, KeyPair, MailPartReader } from "@intx/types/runtime";
 import { defineAgent } from "@intx/agent";
 import {
   createRepoStore,
@@ -31,10 +27,7 @@ import {
   WORKFLOW_RUN_GITIGNORE_PATH,
 } from "@intx/hub-sessions";
 import type { AuthorizeFn } from "@intx/hub-sessions";
-import type {
-  RepoId,
-  WorkflowRunWorkflowProcessPrincipal,
-} from "@intx/hub-sessions/substrate";
+import type { RepoId, WorkflowRunWorkflowProcessPrincipal } from "@intx/hub-sessions/substrate";
 import {
   createInMemoryRepoStore,
   createInMemoryScheduler,
@@ -116,9 +109,7 @@ function bodyDefinition(id: string): WorkflowDefinition {
   });
 }
 
-async function makeSubstrate(
-  prefix: string,
-): Promise<ReturnType<typeof createRepoStore>> {
+async function makeSubstrate(prefix: string): Promise<ReturnType<typeof createRepoStore>> {
   const dataDir = await makeTempDir(prefix);
   const substrate = createRepoStore({
     dataDir,
@@ -135,9 +126,7 @@ async function makeSubstrate(
 
 // An invoker that suspends as an approval on its first invocation and, on
 // the resume re-invocation, records the delivered decision and completes.
-function suspendThenComplete(record: {
-  resumeDecision?: unknown;
-}): StepInvoker {
+function suspendThenComplete(record: { resumeDecision?: unknown }): StepInvoker {
   return async (req) => {
     if (req.resume === undefined) {
       return {
@@ -234,17 +223,10 @@ describe("createSidecarSpawnSuspendableChild", () => {
     const dataDir = await makeTempDir("suspendable-body-datadir-");
     const sourcesDir = path.join(dataDir, "assets", "workflow", "body-wf-real");
     await fs.promises.mkdir(sourcesDir, { recursive: true });
-    await fs.promises.writeFile(
-      path.join(sourcesDir, "sources.json"),
-      JSON.stringify(bodySources),
-    );
+    await fs.promises.writeFile(path.join(sourcesDir, "sources.json"), JSON.stringify(bodySources));
 
     const seen: { sources?: unknown; agentId?: string } = {};
-    const bodyInvokeStep: SidecarBodyStepInvoker = async (
-      req,
-      _authorize,
-      sourcesRef,
-    ) => {
+    const bodyInvokeStep: SidecarBodyStepInvoker = async (req, _authorize, sourcesRef) => {
       seen.sources = sourcesRef.current;
       seen.agentId = req.agent.id;
       return { output: { done: true } };
@@ -299,12 +281,7 @@ describe("createSidecarSpawnSuspendableChild", () => {
   test("the body invoker receives spawn-input authorize, credentialWiring, and mailPartReader", async () => {
     const substrate = await makeSubstrate("suspendable-body-authorize-");
     const dataDir = await makeTempDir("suspendable-body-authz-datadir-");
-    const sourcesDir = path.join(
-      dataDir,
-      "assets",
-      "workflow",
-      "body-wf-authz",
-    );
+    const sourcesDir = path.join(dataDir, "assets", "workflow", "body-wf-authz");
     await fs.promises.mkdir(sourcesDir, { recursive: true });
     await fs.promises.writeFile(
       path.join(sourcesDir, "sources.json"),
diff --git a/apps/sidecar/test/workflow-suspend-identity-preservation.test.ts b/apps/sidecar/test/workflow-suspend-identity-preservation.test.ts
index 9d1c455fa7..8ae09c0134 100644
--- a/apps/sidecar/test/workflow-suspend-identity-preservation.test.ts
+++ b/apps/sidecar/test/workflow-suspend-identity-preservation.test.ts
@@ -12,11 +12,7 @@ import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
 
-import {
-  createAgentKeyStore,
-  createAgentRepoStore,
-  agentDir,
-} from "@intx/hub-agent";
+import { createAgentKeyStore, createAgentRepoStore, agentDir } from "@intx/hub-agent";
 import { generateKeyPair, verifySSHSignature } from "@intx/crypto";
 import { hexEncode } from "@intx/types";
 
@@ -45,9 +41,7 @@ async function makeFrameWithRealHubKey(agentAddress: string) {
 
 describe("hibernate/wake preserves the real deployed agent's identity", () => {
   test("hibernate teardown, then redeploy: the same keypair comes back (isNew: false)", async () => {
-    const dataDir = await fs.mkdtemp(
-      path.join(os.tmpdir(), "sidecar-suspend-identity-"),
-    );
+    const dataDir = await fs.mkdtemp(path.join(os.tmpdir(), "sidecar-suspend-identity-"));
     const keyStore = createAgentKeyStore({ dataDir, ...cryptoOps });
     // The real, unmodified package's own repo store -- its `remove` is
     // exactly the destructive call `@intx/hub-agent`'s `ws/hub-link.js`
@@ -71,9 +65,7 @@ describe("hibernate/wake preserves the real deployed agent's identity", () => {
     await router.teardownDeployment(address, { reclaimDirs: false });
     // Models the published package's own post-hook delete.
     await realRepoStore.remove(address);
-    expect(await fs.readdir(dataDir)).not.toContain(
-      path.basename(agentDir(dataDir, address)),
-    );
+    expect(await fs.readdir(dataDir)).not.toContain(path.basename(agentDir(dataDir, address)));
 
     const frame2 = await makeFrameWithRealHubKey(address);
     const deploy2 = router.deploy(frame2);
@@ -89,9 +81,7 @@ describe("hibernate/wake preserves the real deployed agent's identity", () => {
   });
 
   test("reclaiming (non-hibernate) teardown, then redeploy: a fresh keypair comes back", async () => {
-    const dataDir = await fs.mkdtemp(
-      path.join(os.tmpdir(), "sidecar-suspend-identity-"),
-    );
+    const dataDir = await fs.mkdtemp(path.join(os.tmpdir(), "sidecar-suspend-identity-"));
     const keyStore = createAgentKeyStore({ dataDir, ...cryptoOps });
     const realRepoStore = createAgentRepoStore({ dataDir });
 
diff --git a/apps/sidecar/test/workflow-teardown-flavor.test.ts b/apps/sidecar/test/workflow-teardown-flavor.test.ts
index ecad18a7b9..905795710d 100644
--- a/apps/sidecar/test/workflow-teardown-flavor.test.ts
+++ b/apps/sidecar/test/workflow-teardown-flavor.test.ts
@@ -11,10 +11,7 @@ import { describe, test, expect } from "bun:test";
 import fs from "node:fs/promises";
 import path from "node:path";
 
-import {
-  deriveDeploymentId,
-  IDLE_HIBERNATE_UNDEPLOY_REASON,
-} from "../src/workflow-host-wiring";
+import { deriveDeploymentId, IDLE_HIBERNATE_UNDEPLOY_REASON } from "../src/workflow-host-wiring";
 import { readWorkflowDeploymentRecord } from "../src/workflow-deployment-record";
 import {
   answerReadyHandshake,
@@ -31,17 +28,8 @@ describe("teardownDeployment reclaimDirs flavors", () => {
     await deployPromise;
 
     const deploymentId = deriveDeploymentId(frame.agentAddress);
-    const recordFile = path.join(
-      dataDir,
-      "workflow-runs",
-      deploymentId,
-      "deployment.json",
-    );
-    const stepStateDir = path.join(
-      dataDir,
-      "workflow-step-state",
-      deploymentId,
-    );
+    const recordFile = path.join(dataDir, "workflow-runs", deploymentId, "deployment.json");
+    const stepStateDir = path.join(dataDir, "workflow-step-state", deploymentId);
     await fs.mkdir(stepStateDir, { recursive: true });
     await fs.writeFile(path.join(stepStateDir, "marker.txt"), "x");
 
@@ -63,17 +51,8 @@ describe("teardownDeployment reclaimDirs flavors", () => {
     await deployPromise;
 
     const deploymentId = deriveDeploymentId(frame.agentAddress);
-    const recordFile = path.join(
-      dataDir,
-      "workflow-runs",
-      deploymentId,
-      "deployment.json",
-    );
-    const stepStateDir = path.join(
-      dataDir,
-      "workflow-step-state",
-      deploymentId,
-    );
+    const recordFile = path.join(dataDir, "workflow-runs", deploymentId, "deployment.json");
+    const stepStateDir = path.join(dataDir, "workflow-step-state", deploymentId);
     await fs.mkdir(stepStateDir, { recursive: true });
     await fs.writeFile(path.join(stepStateDir, "marker.txt"), "x");
 
@@ -86,9 +65,7 @@ describe("teardownDeployment reclaimDirs flavors", () => {
     // ...but every piece of durable state a relaunch resumes from survives.
     await expect(fs.stat(recordFile)).resolves.toBeDefined();
     await expect(fs.stat(stepStateDir)).resolves.toBeDefined();
-    expect(
-      await fs.readFile(path.join(stepStateDir, "marker.txt"), "utf8"),
-    ).toBe("x");
+    expect(await fs.readFile(path.join(stepStateDir, "marker.txt"), "utf8")).toBe("x");
     // The address is no longer live/routable: a relaunch re-establishes it
     // through the ordinary deploy path, not a resumed registration.
     expect(router.activeAddresses()).toEqual([]);
@@ -112,9 +89,7 @@ describe("teardownDeployment reclaimDirs flavors", () => {
       reclaimDirs: true,
     });
 
-    await expect(
-      readWorkflowDeploymentRecord(dataDir, deploymentId),
-    ).resolves.toBeUndefined();
+    await expect(readWorkflowDeploymentRecord(dataDir, deploymentId)).resolves.toBeUndefined();
   });
 
   test("both flavors unregister the transport, routers, and deployment-address mapping", async () => {
@@ -132,10 +107,7 @@ describe("teardownDeployment reclaimDirs flavors", () => {
     // No live mail/credentials handler remains registered for the address:
     // routing a frame against it fails to find a handler.
     expect(
-      multistepMailRouter.tryRoute(
-        frame.agentAddress,
-        new TextEncoder().encode("post-hibernate"),
-      ),
+      multistepMailRouter.tryRoute(frame.agentAddress, new TextEncoder().encode("post-hibernate")),
     ).toBeNull();
     expect(
       await multistepCredentialsRouter.tryRoute({
@@ -148,15 +120,11 @@ describe("teardownDeployment reclaimDirs flavors", () => {
 
   test("undeploy(frame) picks the flavor from frame.reason", async () => {
     const hibernating = await makeLifecycleFixture();
-    const hibernateFrame = makeWorkflowFrame(
-      "run_undeploy-reason-hibernate@example.com",
-    );
+    const hibernateFrame = makeWorkflowFrame("run_undeploy-reason-hibernate@example.com");
     const hibernateDeploy = hibernating.router.deploy(hibernateFrame);
     await answerReadyHandshake(hibernating.spawns, 0);
     await hibernateDeploy;
-    const hibernateDeploymentId = deriveDeploymentId(
-      hibernateFrame.agentAddress,
-    );
+    const hibernateDeploymentId = deriveDeploymentId(hibernateFrame.agentAddress);
     const hibernateStepStateDir = path.join(
       hibernating.dataDir,
       "workflow-step-state",
@@ -174,9 +142,7 @@ describe("teardownDeployment reclaimDirs flavors", () => {
     await expect(fs.stat(hibernateStepStateDir)).resolves.toBeDefined();
 
     const reclaiming = await makeLifecycleFixture();
-    const reclaimFrame = makeWorkflowFrame(
-      "run_undeploy-reason-reclaim@example.com",
-    );
+    const reclaimFrame = makeWorkflowFrame("run_undeploy-reason-reclaim@example.com");
     const reclaimDeploy = reclaiming.router.deploy(reclaimFrame);
     await answerReadyHandshake(reclaiming.spawns, 0);
     await reclaimDeploy;
@@ -221,10 +187,7 @@ describe("teardownDeployment reclaimDirs flavors", () => {
     });
 
     const deploymentId = deriveDeploymentId(frame.agentAddress);
-    const parkedBeforeRedeploy = await readWorkflowDeploymentRecord(
-      dataDir,
-      deploymentId,
-    );
+    const parkedBeforeRedeploy = await readWorkflowDeploymentRecord(dataDir, deploymentId);
     expect(parkedBeforeRedeploy?.parkedAt).toBeDefined();
 
     const secondDeploy = router.deploy(frame);
@@ -232,10 +195,7 @@ describe("teardownDeployment reclaimDirs flavors", () => {
     await expect(secondDeploy).resolves.toBeDefined();
 
     expect(router.activeAddresses()).toEqual([frame.agentAddress]);
-    const redeployedRecord = await readWorkflowDeploymentRecord(
-      dataDir,
-      deploymentId,
-    );
+    const redeployedRecord = await readWorkflowDeploymentRecord(dataDir, deploymentId);
     expect(redeployedRecord?.parkedAt).toBeUndefined();
   });
 });
diff --git a/apps/web/package.json b/apps/web/package.json
index c57af9e4af..fa2c4cf205 100644
--- a/apps/web/package.json
+++ b/apps/web/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@workbench/web",
+  "version": "0.0.1",
   "private": true,
   "description": "Single-page interface for the workbench: every page and route lives here, composed from the published component library, and builds to a static bundle the hub serves from its own origin (point HUB_STATIC_DIR at apps/web/dist)",
-  "version": "0.0.1",
   "license": "SEE LICENSE IN ../../LICENSE.md",
   "repository": {
     "type": "git",
@@ -26,8 +26,10 @@
     "@corbits/chat-ui": "workspace:*",
     "@corbits/client-log": "workspace:*",
     "@corbits/command-palette": "workspace:*",
+    "@corbits/connections": "workspace:*",
     "@corbits/context-menu": "workspace:*",
     "@corbits/error-sink": "workspace:*",
+    "@corbits/icons": "workspace:*",
     "@corbits/inbox": "workspace:*",
     "@corbits/inference-settings": "workspace:*",
     "@corbits/plugins-ui": "workspace:*",
@@ -38,12 +40,10 @@
     "@corbits/text-diff": "workspace:*",
     "@corbits/url-path": "workspace:*",
     "@corbits/workflows": "workspace:*",
-    "@corbits/icons": "workspace:*",
     "@intx/types": "workspace:*",
     "@radix-ui/react-dialog": "^1.1.15",
     "@radix-ui/react-slot": "^1.2.3",
     "@tanstack/react-query": "catalog:",
-    "@corbits/connections": "workspace:*",
     "arktype": "catalog:",
     "react": "^19.2.0",
     "react-dom": "^19.2.0"
diff --git a/apps/web/src/activatable-row.test.ts b/apps/web/src/activatable-row.test.ts
index 95bd78af1b..54bcbadcc7 100644
--- a/apps/web/src/activatable-row.test.ts
+++ b/apps/web/src/activatable-row.test.ts
@@ -1,10 +1,6 @@
 import { afterEach, describe, expect, test } from "bun:test";
 
-import {
-  isAdditiveSelectClick,
-  isRowActivationKey,
-  rowActivationProps,
-} from "./activatable-row";
+import { isAdditiveSelectClick, isRowActivationKey, rowActivationProps } from "./activatable-row";
 
 // `isAdditiveSelectClick`'s Mac/non-Mac branch reads `navigator.platform`,
 // which happy-dom's `GlobalRegistrator` reports as whatever the *host* OS
@@ -33,9 +29,7 @@ describe("isAdditiveSelectClick", () => {
 
   test("ctrl-click is not additive on Mac (it's the context-menu gesture)", () => {
     stubPlatform("MacIntel");
-    expect(isAdditiveSelectClick({ metaKey: false, ctrlKey: true })).toBe(
-      false,
-    );
+    expect(isAdditiveSelectClick({ metaKey: false, ctrlKey: true })).toBe(false);
   });
 
   test("ctrl-click is additive on non-Mac", () => {
@@ -44,9 +38,7 @@ describe("isAdditiveSelectClick", () => {
   });
 
   test("a plain click is not additive", () => {
-    expect(isAdditiveSelectClick({ metaKey: false, ctrlKey: false })).toBe(
-      false,
-    );
+    expect(isAdditiveSelectClick({ metaKey: false, ctrlKey: false })).toBe(false);
   });
 });
 
diff --git a/apps/web/src/activatable-row.ts b/apps/web/src/activatable-row.ts
index a896ad1279..4206187148 100644
--- a/apps/web/src/activatable-row.ts
+++ b/apps/web/src/activatable-row.ts
@@ -27,9 +27,7 @@ export function isAdditiveSelectClick(event: {
 function isMacPlatform(): boolean {
   // Browsers report "MacIntel"; happy-dom (our test DOM) reports
   // "X11; Darwin arm64" — both are the same Ctrl-click-is-context-menu OS.
-  return (
-    typeof navigator !== "undefined" && /mac|darwin/i.test(navigator.platform)
-  );
+  return typeof navigator !== "undefined" && /mac|darwin/i.test(navigator.platform);
 }
 
 export function rowActivationProps(onSelect: () => void) {
diff --git a/apps/web/src/agent-chat-launch.test.ts b/apps/web/src/agent-chat-launch.test.ts
index 96f801af0d..4ed0d39c30 100644
--- a/apps/web/src/agent-chat-launch.test.ts
+++ b/apps/web/src/agent-chat-launch.test.ts
@@ -14,8 +14,7 @@ describe("launchAgentChat", () => {
   function stubFetch(respond: (path: string) => Response): RecordedCall[] {
     const calls: RecordedCall[] = [];
     globalThis.fetch = ((input: RequestInfo | URL, init?: RequestInit) => {
-      const path =
-        typeof input === "string" ? input : new URL(String(input)).pathname;
+      const path = typeof input === "string" ? input : new URL(String(input)).pathname;
       calls.push(init === undefined ? { path } : { path, init });
       return Promise.resolve(respond(path));
     }) as typeof fetch;
diff --git a/apps/web/src/agent-dm-launch.test.ts b/apps/web/src/agent-dm-launch.test.ts
index ccab573f02..d5dff8bfce 100644
--- a/apps/web/src/agent-dm-launch.test.ts
+++ b/apps/web/src/agent-dm-launch.test.ts
@@ -14,8 +14,7 @@ describe("openAgentDmChat", () => {
   function stubFetch(respond: (path: string) => Response): RecordedCall[] {
     const calls: RecordedCall[] = [];
     globalThis.fetch = ((input: RequestInfo | URL, init?: RequestInit) => {
-      const path =
-        typeof input === "string" ? input : new URL(String(input)).pathname;
+      const path = typeof input === "string" ? input : new URL(String(input)).pathname;
       calls.push(init === undefined ? { path } : { path, init });
       return Promise.resolve(respond(path));
     }) as typeof fetch;
@@ -43,9 +42,7 @@ describe("openAgentDmChat", () => {
       throw new Error(`unexpected fetch: ${path}`);
     });
 
-    await openAgentDmChat("tnt_root", "wfd_outreach", (to) =>
-      navigated.push(to),
-    );
+    await openAgentDmChat("tnt_root", "wfd_outreach", (to) => navigated.push(to));
 
     const call = calls.find((c) => c.path.endsWith("/chat/workbenches"));
     expect(call?.path).toBe("/api/tenants/tnt_root/chat/workbenches");
diff --git a/apps/web/src/agents-api.ts b/apps/web/src/agents-api.ts
index afe0408662..c8df8a03a4 100644
--- a/apps/web/src/agents-api.ts
+++ b/apps/web/src/agents-api.ts
@@ -18,11 +18,7 @@ import type { ArkErrors } from "arktype";
 import { useQuery } from "@tanstack/react-query";
 
 import type { APIQuery } from "@corbits/api-query";
-import {
-  ApiQueryError,
-  UnauthenticatedError,
-  toAPIQuery,
-} from "@corbits/api-query";
+import { ApiQueryError, UnauthenticatedError, toAPIQuery } from "@corbits/api-query";
 import { isChatPickerModelName } from "@corbits/connections/model-capability";
 import { parseErrorEnvelope } from "@corbits/error-sink";
 import { tenantKeys } from "./query-client";
@@ -58,19 +54,11 @@ async function getJSON<T>(path: string, schema: Validator<T>): Promise<T> {
     throw new ApiQueryError("Not signed in.", 401, path);
   }
   if (!response.ok) {
-    throw new ApiQueryError(
-      `The server answered ${response.status}.`,
-      response.status,
-      path,
-    );
+    throw new ApiQueryError(`The server answered ${response.status}.`, response.status, path);
   }
   const parsed = schema(await response.json().catch(() => undefined));
   if (parsed instanceof type.errors) {
-    throw new ApiQueryError(
-      `Unexpected response shape: ${parsed.summary}`,
-      undefined,
-      path,
-    );
+    throw new ApiQueryError(`Unexpected response shape: ${parsed.summary}`, undefined, path);
   }
   return parsed;
 }
@@ -107,31 +95,22 @@ async function postJSON<T>(
   }
   const parsed = schema(json);
   if (parsed instanceof type.errors) {
-    throw new ApiQueryError(
-      `Unexpected response shape: ${parsed.summary}`,
-      undefined,
-      path,
-    );
+    throw new ApiQueryError(`Unexpected response shape: ${parsed.summary}`, undefined, path);
   }
   return parsed;
 }
 
-export function listAgentDefinitions(
-  tenantId: string,
-): Promise<readonly AgentDefinition[]> {
+export function listAgentDefinitions(tenantId: string): Promise<readonly AgentDefinition[]> {
   return getJSON(
     `/api/tenants/${tenantId}/workflows/definitions?limit=${PAGE_LIMIT}`,
     DefinitionsPage,
   ).then((page) => page.data);
 }
 
-export function listAgentInstances(
-  tenantId: string,
-): Promise<readonly AgentInstance[]> {
-  return getJSON(
-    `/api/tenants/${tenantId}/workflows/runs?limit=${PAGE_LIMIT}`,
-    InstancesPage,
-  ).then((page) => page.data);
+export function listAgentInstances(tenantId: string): Promise<readonly AgentInstance[]> {
+  return getJSON(`/api/tenants/${tenantId}/workflows/runs?limit=${PAGE_LIMIT}`, InstancesPage).then(
+    (page) => page.data,
+  );
 }
 
 /**
@@ -145,13 +124,10 @@ export function listAgentInstances(
  * `getDescendantTenants`; the native listing filters one tenant, so a
  * workspace parent sees only its own runs, not its child workbenches'.
  */
-export function listTopLevelRuns(
-  tenantId: string,
-): Promise<readonly AgentInstance[]> {
-  return getJSON(
-    `/api/tenants/${tenantId}/workflows/runs?limit=${PAGE_LIMIT}`,
-    InstancesPage,
-  ).then((page) => page.data);
+export function listTopLevelRuns(tenantId: string): Promise<readonly AgentInstance[]> {
+  return getJSON(`/api/tenants/${tenantId}/workflows/runs?limit=${PAGE_LIMIT}`, InstancesPage).then(
+    (page) => page.data,
+  );
 }
 
 /** The tenant's visible, enabled catalog models for the create-agent form's
@@ -162,16 +138,10 @@ export function listTopLevelRuns(
  * and bare `.gguf` names are also omitted (CL-6744) — this endpoint carries
  * no offering capability lists, so the name-only
  * {@link isChatPickerModelName} gate is the available signal. */
-export function listCatalogModels(
-  tenantId: string,
-): Promise<readonly CatalogModel[]> {
-  return getJSON(
-    `/api/tenants/${tenantId}/catalog/models?limit=${PAGE_LIMIT}`,
-    ModelsPage,
-  ).then((page) =>
-    page.data.filter(
-      (model) => !model.disabled && isChatPickerModelName(model.canonicalName),
-    ),
+export function listCatalogModels(tenantId: string): Promise<readonly CatalogModel[]> {
+  return getJSON(`/api/tenants/${tenantId}/catalog/models?limit=${PAGE_LIMIT}`, ModelsPage).then(
+    (page) =>
+      page.data.filter((model) => !model.disabled && isChatPickerModelName(model.canonicalName)),
   );
 }
 
@@ -184,8 +154,7 @@ const AgentDefinitionDraftResponse = type({
     "skills?": "string[]",
   },
 });
-export type AgentDefinitionDraft =
-  typeof AgentDefinitionDraftResponse.infer.draft;
+export type AgentDefinitionDraft = typeof AgentDefinitionDraftResponse.infer.draft;
 
 /**
  * Asks Myra to draft a starting system prompt (and optionally a
@@ -232,11 +201,7 @@ export function createAgentDefinition(
   tenantId: string,
   input: CreateAgentDefinitionInput,
 ): Promise<AgentDefinition & { readonly skills: readonly string[] }> {
-  return postJSON(
-    `/api/tenants/${tenantId}/agent-definitions`,
-    CreatedAgentDefinition,
-    input,
-  );
+  return postJSON(`/api/tenants/${tenantId}/agent-definitions`, CreatedAgentDefinition, input);
 }
 
 const AgentCapabilitiesResponse = type({
@@ -264,10 +229,7 @@ export function getAgentCapabilities(
  * immutable slug, server-side. A slug-addressed page reads this instead of
  * scanning the paginated definitions listing, so an agent past that
  * listing's ceiling still answers on its own URL. */
-export function getAgentDefinitionBySlug(
-  tenantId: string,
-  slug: string,
-): Promise<AgentDefinition> {
+export function getAgentDefinitionBySlug(tenantId: string, slug: string): Promise<AgentDefinition> {
   return getJSON(
     `/api/tenants/${tenantId}/agent-definitions/by-name/${encodeURIComponent(slug)}`,
     WorkflowDefinitionResponse,
@@ -434,9 +396,7 @@ type SkillsOutcome =
  * native `GET /workflows/runs` listing's own predicate — so this page
  * never has to derive that exclusion itself from a tenant's workbenches.
  */
-export async function loadAgentDirectory(
-  tenantId: string,
-): Promise<AgentDirectoryData> {
+export async function loadAgentDirectory(tenantId: string): Promise<AgentDirectoryData> {
   const [definitions, instances, modelsOutcome] = await Promise.all([
     listAgentDefinitions(tenantId),
     listTopLevelRuns(tenantId),
@@ -478,9 +438,7 @@ export async function loadAgentDirectory(
  * page keeps a single loading/error envelope. Pass no reloadKey —
  * invalidate `tenantKeys.agentDirectory(tenantId)` after create.
  */
-export function useAgentDirectory(
-  tenantId: string | undefined,
-): APIQuery<AgentDirectoryData> {
+export function useAgentDirectory(tenantId: string | undefined): APIQuery<AgentDirectoryData> {
   const result = useQuery({
     queryKey:
       tenantId === undefined
diff --git a/apps/web/src/agents-directory.ts b/apps/web/src/agents-directory.ts
index 75fe0e7608..bb543cf1a8 100644
--- a/apps/web/src/agents-directory.ts
+++ b/apps/web/src/agents-directory.ts
@@ -26,9 +26,7 @@ export type AgentDefinitionWithDisplayName = WithDisplayName<AgentDefinition>;
 
 /** One definition's display name derived the same way the roster's are, so
  * the same agent never reads under two different names across screens. */
-export function withAgentDisplayName(
-  definition: AgentDefinition,
-): AgentDefinitionWithDisplayName {
+export function withAgentDisplayName(definition: AgentDefinition): AgentDefinitionWithDisplayName {
   return withDisplayNameShared(definition);
 }
 
diff --git a/apps/web/src/api.ts b/apps/web/src/api.ts
index 98d208203c..f541f8d065 100644
--- a/apps/web/src/api.ts
+++ b/apps/web/src/api.ts
@@ -16,11 +16,7 @@ import { type } from "arktype";
 import type { ArkErrors } from "arktype";
 
 import type { APIQuery } from "@corbits/api-query";
-import {
-  ApiQueryError,
-  UnauthenticatedError,
-  toAPIQuery,
-} from "@corbits/api-query";
+import { ApiQueryError, UnauthenticatedError, toAPIQuery } from "@corbits/api-query";
 import { pathToQueryKey } from "./query-client";
 
 export const ProfileSchema = UserProfile;
@@ -106,10 +102,7 @@ type Validator<T> = (data: unknown) => T | ArkErrors;
  * call sites that still pass `""` when a tenant is unresolved cannot hit
  * the network with a broken URL.
  */
-export function useAPIQuery<T>(
-  path: string,
-  schema: Validator<T>,
-): APIQuery<T> {
+export function useAPIQuery<T>(path: string, schema: Validator<T>): APIQuery<T> {
   const enabled = path !== "";
   const result = useQuery({
     queryKey: pathToQueryKey(path),
@@ -122,19 +115,11 @@ export function useAPIQuery<T>(
         throw new UnauthenticatedError();
       }
       if (!response.ok) {
-        throw new ApiQueryError(
-          `The server answered ${response.status}.`,
-          response.status,
-          path,
-        );
+        throw new ApiQueryError(`The server answered ${response.status}.`, response.status, path);
       }
       const parsed = schema(await response.json());
       if (parsed instanceof type.errors) {
-        throw new ApiQueryError(
-          `Unexpected response shape: ${parsed.summary}`,
-          undefined,
-          path,
-        );
+        throw new ApiQueryError(`Unexpected response shape: ${parsed.summary}`, undefined, path);
       }
       return parsed;
     },
@@ -147,11 +132,7 @@ export function useAPIQuery<T>(
  * parses its GETs: loud on a non-2xx status and on a response shape that
  * doesn't match the schema, never a silent fallback.
  */
-async function postJSON<T>(
-  path: string,
-  schema: Validator<T>,
-  body: unknown,
-): Promise<T> {
+async function postJSON<T>(path: string, schema: Validator<T>, body: unknown): Promise<T> {
   let response: Response;
   try {
     response = await fetch(path, {
@@ -167,19 +148,11 @@ async function postJSON<T>(
     );
   }
   if (!response.ok) {
-    throw new ApiQueryError(
-      `The server answered ${response.status}.`,
-      response.status,
-      path,
-    );
+    throw new ApiQueryError(`The server answered ${response.status}.`, response.status, path);
   }
   const parsed = schema(await response.json());
   if (parsed instanceof type.errors) {
-    throw new ApiQueryError(
-      `Unexpected response shape: ${parsed.summary}`,
-      undefined,
-      path,
-    );
+    throw new ApiQueryError(`Unexpected response shape: ${parsed.summary}`, undefined, path);
   }
   return parsed;
 }
@@ -187,15 +160,10 @@ async function postJSON<T>(
 /** Approves a pending approval. Scope is always "once": the hub rejects
  * "always" with a 400 (see `vendor/intx/hub-api/src/routes/approvals.ts`),
  * so this surface never offers it. */
-export function approveApproval(
-  tenantId: string,
-  approvalId: string,
-): Promise<Approval> {
-  return postJSON(
-    `/api/tenants/${tenantId}/approvals/${approvalId}/approve`,
-    ApprovalResponse,
-    { scope: "once" },
-  );
+export function approveApproval(tenantId: string, approvalId: string): Promise<Approval> {
+  return postJSON(`/api/tenants/${tenantId}/approvals/${approvalId}/approve`, ApprovalResponse, {
+    scope: "once",
+  });
 }
 
 export function rejectApproval(
@@ -217,10 +185,7 @@ export function rejectApproval(
  * .../artifacts/:id/preview` in `@corbits/artifacts-hub`) answers 415 for
  * a non-HTML artifact.
  */
-export function artifactPreviewPath(
-  tenantId: string,
-  artifactId: string,
-): string {
+export function artifactPreviewPath(tenantId: string, artifactId: string): string {
   return `/api/tenants/${tenantId}/artifacts/${encodeURIComponent(artifactId)}/preview`;
 }
 
@@ -248,9 +213,7 @@ export async function fetchArtifactDetail(
   }
   const parsed = ArtifactDetailSchema(await response.json());
   if (parsed instanceof type.errors) {
-    throw new ApiQueryError(
-      `Unexpected artifact response shape: ${parsed.summary}`,
-    );
+    throw new ApiQueryError(`Unexpected artifact response shape: ${parsed.summary}`);
   }
   return parsed.artifact;
 }
diff --git a/apps/web/src/app-error-boundary.tsx b/apps/web/src/app-error-boundary.tsx
index 833733137f..638f544a9d 100644
--- a/apps/web/src/app-error-boundary.tsx
+++ b/apps/web/src/app-error-boundary.tsx
@@ -24,9 +24,7 @@ export class AppErrorBoundary extends Component<
     const refId = reportError(error, {
       operation: "app_render",
       extra: {
-        ...(info.componentStack !== null
-          ? { componentStack: info.componentStack }
-          : {}),
+        ...(info.componentStack !== null ? { componentStack: info.componentStack } : {}),
       },
     });
     this.setState({ hasError: true, refId });
@@ -47,17 +45,12 @@ export class AppErrorBoundary extends Component<
                 <>
                   Something broke while rendering. Reloading usually fixes it.
                   <br />
-                  <span className="app-boot-frame-refid">
-                    Reference: {this.state.refId}
-                  </span>
+                  <span className="app-boot-frame-refid">Reference: {this.state.refId}</span>
                 </>
               )
             }
             action={
-              <Button
-                variant="outline"
-                onClick={() => window.location.reload()}
-              >
+              <Button variant="outline" onClick={() => window.location.reload()}>
                 Reload
               </Button>
             }
diff --git a/apps/web/src/app.css b/apps/web/src/app.css
index 5c96f3c512..bd6ce7925a 100644
--- a/apps/web/src/app.css
+++ b/apps/web/src/app.css
@@ -19,8 +19,7 @@
    (injected at runtime, unrelated to this stylesheet); this just stops
    react-ui's override from fighting it. Higher specificity than that rule
    wins the cascade on its own, so this is safe regardless of load order. */
-[data-sonner-toaster][data-x-position="right"]
-  [data-sonner-toast].corbits-toast {
+[data-sonner-toaster][data-x-position="right"] [data-sonner-toast].corbits-toast {
   left: auto !important;
   transform: none !important;
 }
@@ -41,8 +40,7 @@ html {
 /* Inputs in side drawers already have a visible control boundary. Color that
    edge on focus so the focus treatment reads as one control, not a second
    outline outside it. */
-[data-slot="dialog-content"][data-side="right"]
-  [data-slot="input"]:focus-visible {
+[data-slot="dialog-content"][data-side="right"] [data-slot="input"]:focus-visible {
   outline: none;
   border-color: var(--accent-rail, var(--primary));
 }
@@ -115,9 +113,7 @@ select:disabled,
    Scoped to the sidebar so stage content keeps library defaults. */
 .shell-sidebar button:not(:disabled):not([aria-disabled="true"]),
 .shell-sidebar [data-slot="button"]:not(:disabled):not([aria-disabled="true"]),
-.shell-sidebar
-  [data-slot="sidebar-item-row"]
-  button:not(:disabled):not([aria-disabled="true"]),
+.shell-sidebar [data-slot="sidebar-item-row"] button:not(:disabled):not([aria-disabled="true"]),
 .shell-sidebar .shell-ch-row:not(:disabled):not([aria-disabled="true"]) {
   cursor: pointer;
 }
@@ -200,10 +196,7 @@ select:disabled,
 /* Shared dialog craft — layout/scroll/chrome on react-ui data slots only.
    Feature forms and dialog body content keep their own styles. */
 [data-slot="dialog-content"][data-side="center"] {
-  width: min(
-    calc(100vw - (var(--dialog-gutter) * 2)),
-    var(--dialog-content-max-width)
-  );
+  width: min(calc(100vw - (var(--dialog-gutter) * 2)), var(--dialog-content-max-width));
   max-height: var(--dialog-content-max-height);
   overflow: hidden;
 }
@@ -940,8 +933,7 @@ select:disabled,
   align-items: center;
   gap: 0.5rem;
   padding: 0.45rem 0.7rem;
-  border-bottom: 1px solid
-    color-mix(in srgb, var(--foreground) 10%, transparent);
+  border-bottom: 1px solid color-mix(in srgb, var(--foreground) 10%, transparent);
 }
 
 .shell-routine-new {
@@ -1115,8 +1107,7 @@ select:disabled,
   justify-content: space-between;
   gap: 0.5rem;
   padding-bottom: 0.55rem;
-  border-bottom: 1px solid
-    color-mix(in srgb, var(--foreground) 10%, transparent);
+  border-bottom: 1px solid color-mix(in srgb, var(--foreground) 10%, transparent);
 }
 
 .shell-canvas-pane-heading {
@@ -1738,9 +1729,7 @@ select:disabled,
 }
 
 .shell-sidebar .shell-panel-search [data-slot="input"]::placeholder,
-.shell-sidebar
-  [data-slot="sidebar-panel-body"]
-  [data-slot="input"]::placeholder {
+.shell-sidebar [data-slot="sidebar-panel-body"] [data-slot="input"]::placeholder {
   color: var(--shell-panel-faint);
 }
 
@@ -1756,9 +1745,7 @@ select:disabled,
   box-shadow: none;
 }
 
-.shell-sidebar
-  [data-slot="sidebar-panel-body"]
-  [data-slot="input"]:focus-visible {
+.shell-sidebar [data-slot="sidebar-panel-body"] [data-slot="input"]:focus-visible {
   outline: none;
   border-color: var(--foreground);
   box-shadow: 0 0 0 1px var(--foreground);
@@ -1789,19 +1776,14 @@ select:disabled,
    left edge. Selector doubles as the kill for react-ui's bg-primary/10
    selected wash. */
 .shell-sidebar [data-slot="sidebar-item-row"] > div.bg-primary\/10,
-.shell-sidebar
-  [data-slot="sidebar-item-row"]
-  > div:has(button[aria-current="true"]) {
+.shell-sidebar [data-slot="sidebar-item-row"] > div:has(button[aria-current="true"]) {
   background-color: var(--background);
   color: var(--shell-accent);
   box-shadow: inset 2px 0 0 0 var(--shell-accent);
 }
 
 .shell-sidebar [data-slot="sidebar-item-row"] > div.bg-primary\/10 > button,
-.shell-sidebar
-  [data-slot="sidebar-item-row"]
-  > div:has(button[aria-current="true"])
-  > button {
+.shell-sidebar [data-slot="sidebar-item-row"] > div:has(button[aria-current="true"]) > button {
   font-weight: 600;
 }
 
@@ -1839,12 +1821,7 @@ select:disabled,
 }
 
 /* Mock .count: the trailing meta slot when it is plain text. */
-.shell-sidebar
-  [data-slot="sidebar-item-row"]
-  > div
-  > button
-  > span
-  + span:last-child {
+.shell-sidebar [data-slot="sidebar-item-row"] > div > button > span + span:last-child {
   font-size: 0.72rem;
   color: var(--shell-panel-faint);
 }
@@ -2342,8 +2319,7 @@ select:disabled,
    attention-seeking animation, fully off under reduced motion.
    DESIGN.md's motion ceiling is 300ms — stays at 280ms. */
 .onboarding-phase {
-  animation: onboarding-phase-in var(--duration-large, 300ms)
-    var(--ease-out, ease) both;
+  animation: onboarding-phase-in var(--duration-large, 300ms) var(--ease-out, ease) both;
 }
 
 @keyframes onboarding-phase-in {
@@ -2615,8 +2591,7 @@ select:disabled,
 
 .insights-grid > .insights-panel {
   border: 0;
-  border-bottom: 1px solid
-    color-mix(in srgb, var(--foreground) 10%, transparent);
+  border-bottom: 1px solid color-mix(in srgb, var(--foreground) 10%, transparent);
 }
 
 .insights-grid > .insights-panel:last-child {
@@ -2914,11 +2889,7 @@ tr.insights-row-clickable:hover {
 }
 
 /* The current row's copy follows the row's accent ink. */
-.shell-sidebar
-  [data-slot="sidebar-item-row"]
-  button[aria-current="true"]
-  .panel-row-copy
-  strong {
+.shell-sidebar [data-slot="sidebar-item-row"] button[aria-current="true"] .panel-row-copy strong {
   color: inherit;
 }
 
diff --git a/apps/web/src/app.tsx b/apps/web/src/app.tsx
index 1b8f49a5d9..5ae5ec25f5 100644
--- a/apps/web/src/app.tsx
+++ b/apps/web/src/app.tsx
@@ -18,12 +18,7 @@ import { NotFoundPage } from "./pages/not-found-page";
 import { OnboardingPage } from "./pages/onboarding-page";
 import { ProvisioningErrorPage } from "./pages/provisioning-error-page";
 import { createAppQueryClient } from "./query-client";
-import {
-  APP_ROUTES,
-  LOGIN_PATH,
-  matchesRoute,
-  ONBOARDING_PATH,
-} from "./routes";
+import { APP_ROUTES, LOGIN_PATH, matchesRoute, ONBOARDING_PATH } from "./routes";
 import type { SessionState, SessionUser } from "./session";
 import { AppShell } from "./shell/app-shell";
 import { ComposerInsertionProvider } from "./shell/composer-insertion";
@@ -34,13 +29,7 @@ import { ShellChromeProvider } from "./shell/shell-chrome-provider";
  * there with `?next=` so a successful sign-in returns to where the visitor
  * meant to go — the URL is the source of truth for "where was I headed",
  * not an implicit conditional swap in `App`. */
-function LoginRedirect({
-  path,
-  navigate,
-}: {
-  readonly path: string;
-  readonly navigate: Navigate;
-}) {
+function LoginRedirect({ path, navigate }: { readonly path: string; readonly navigate: Navigate }) {
   useEffect(() => {
     navigate(buildLoginRedirect(path));
   }, [path, navigate]);
@@ -94,13 +83,8 @@ function Shell({
   // DB, a cookie for a deleted user, an expired session) routes the whole
   // shell back to login instead of leaving one panel stuck showing "sign
   // in required" beside chrome that still renders as if signed in.
-  const queryClient = useMemo(
-    () => createAppQueryClient(onSignOut),
-    [onSignOut],
-  );
-  const route = APP_ROUTES.find((candidate) =>
-    matchesRoute(candidate.path, path),
-  );
+  const queryClient = useMemo(() => createAppQueryClient(onSignOut), [onSignOut]);
+  const route = APP_ROUTES.find((candidate) => matchesRoute(candidate.path, path));
   return (
     <QueryClientProvider client={queryClient}>
       <NavigationProvider navigate={navigate} onSignOut={onSignOut} user={user}>
@@ -110,11 +94,7 @@ function Shell({
               <ShellChromeProvider path={path} navigate={navigate}>
                 <CommandPaletteProvider path={path} navigate={navigate}>
                   <AppShell path={path} user={user} onSignOut={onSignOut}>
-                    {route === undefined ? (
-                      <NotFoundPage />
-                    ) : (
-                      route.render(path, navigate)
-                    )}
+                    {route === undefined ? <NotFoundPage /> : route.render(path, navigate)}
                   </AppShell>
                 </CommandPaletteProvider>
               </ShellChromeProvider>
@@ -199,14 +179,7 @@ export function App({
         if (path === ONBOARDING_PATH) {
           return <OnboardingGate navigate={navigate} user={session.user} />;
         }
-        return (
-          <Shell
-            path={path}
-            navigate={navigate}
-            user={session.user}
-            onSignOut={onSignOut}
-          />
-        );
+        return <Shell path={path} navigate={navigate} user={session.user} onSignOut={onSignOut} />;
     }
   }
 }
diff --git a/apps/web/src/approval-actions.ts b/apps/web/src/approval-actions.ts
index 1737f38ed3..963ebf7989 100644
--- a/apps/web/src/approval-actions.ts
+++ b/apps/web/src/approval-actions.ts
@@ -33,9 +33,7 @@ export function createChatApprovalActions(
         const key = query.queryKey;
         if (!Array.isArray(key)) return false;
         return key.some(
-          (part) =>
-            typeof part === "string" &&
-            part.includes(`/api/tenants/${tenantId}/inbox`),
+          (part) => typeof part === "string" && part.includes(`/api/tenants/${tenantId}/inbox`),
         );
       },
     });
diff --git a/apps/web/src/auth-screen.tsx b/apps/web/src/auth-screen.tsx
index ea7fc67a5d..64295de431 100644
--- a/apps/web/src/auth-screen.tsx
+++ b/apps/web/src/auth-screen.tsx
@@ -7,12 +7,7 @@ import { LoginForm } from "@corbits/react-ui/blocks/login/login-form";
 import { useState } from "react";
 
 import { AuthLayout } from "./auth/auth-layout";
-import {
-  SOCIAL_SIGN_IN_PROVIDERS,
-  signIn,
-  signInSocial,
-  signUp,
-} from "./session";
+import { SOCIAL_SIGN_IN_PROVIDERS, signIn, signInSocial, signUp } from "./session";
 import type { SessionUser, SocialProviderId } from "./session";
 
 type Mode = "sign-in" | "sign-up";
@@ -35,19 +30,12 @@ const SOCIAL_PROVIDER_LABEL: Record<SocialProviderId, string> = {
   github: "Continue with GitHub",
 };
 
-export function AuthScreen({
-  onSignedIn,
-}: {
-  readonly onSignedIn: (user: SessionUser) => void;
-}) {
+export function AuthScreen({ onSignedIn }: { readonly onSignedIn: (user: SessionUser) => void }) {
   const [mode, setMode] = useState<Mode>("sign-in");
   const [busy, setBusy] = useState(false);
   const [error, setError] = useState<string | null>(null);
 
-  const submit = async (credentials: {
-    readonly email: string;
-    readonly password: string;
-  }) => {
+  const submit = async (credentials: { readonly email: string; readonly password: string }) => {
     setBusy(true);
     setError(null);
     const result =
diff --git a/apps/web/src/auth/auth-layout.tsx b/apps/web/src/auth/auth-layout.tsx
index e8ec2c435a..49228ee935 100644
--- a/apps/web/src/auth/auth-layout.tsx
+++ b/apps/web/src/auth/auth-layout.tsx
@@ -34,11 +34,7 @@ export function AuthLayout({ children }: { readonly children: ReactNode }) {
           quote card. The <img> is the no-JS fallback; the 2D-canvas dither
           (ambient + cursor warp) paints over it. */}
       <div aria-hidden className="auth-panel">
-        <img
-          src="/images/hero-dither.png"
-          alt=""
-          className="auth-panel-fallback"
-        />
+        <img src="/images/hero-dither.png" alt="" className="auth-panel-fallback" />
         <DitherBackground className="auth-panel-dither" />
         <QuoteCard />
       </div>
diff --git a/apps/web/src/auth/dither-background.tsx b/apps/web/src/auth/dither-background.tsx
index 5b5da6f632..4db66d63aa 100644
--- a/apps/web/src/auth/dither-background.tsx
+++ b/apps/web/src/auth/dither-background.tsx
@@ -170,9 +170,7 @@ export function DitherBackground({ className }: { className?: string }) {
           const di = (y * w + x) * 4;
           const thr = ((BAYER[rowBayer + (x & 7)] ?? 0) + 0.5) / BAYER_DIVISOR;
           for (let c = 0; c < 3; c++) {
-            const q = Math.floor(
-              ((srcPx[si + c] ?? 0) / 255) * (LEVELS - 1) + thr,
-            );
+            const q = Math.floor(((srcPx[si + c] ?? 0) / 255) * (LEVELS - 1) + thr);
             d[di + c] = (q / (LEVELS - 1)) * 255;
           }
           d[di + 3] = 255;
diff --git a/apps/web/src/auth/quote-card.tsx b/apps/web/src/auth/quote-card.tsx
index 59f84929c9..4a5faa05e0 100644
--- a/apps/web/src/auth/quote-card.tsx
+++ b/apps/web/src/auth/quote-card.tsx
@@ -71,9 +71,7 @@ export function QuoteCard() {
   return (
     <div className="auth-quote-overlay">
       <div className="auth-quote-card">
-        <blockquote className="auth-quote-text">
-          &ldquo;{current.quote}&rdquo;
-        </blockquote>
+        <blockquote className="auth-quote-text">&ldquo;{current.quote}&rdquo;</blockquote>
         {current.author !== undefined && (
           <div className="auth-quote-attr">
             <div className="auth-quote-attr-rule" />
diff --git a/apps/web/src/auto-workbench-title.test.ts b/apps/web/src/auto-workbench-title.test.ts
index b8c2390255..87abf2774b 100644
--- a/apps/web/src/auto-workbench-title.test.ts
+++ b/apps/web/src/auto-workbench-title.test.ts
@@ -9,9 +9,7 @@ import {
 
 describe("titleFromFirstMessage (CL-6656)", () => {
   test("trims and collapses whitespace into a single-line title", () => {
-    expect(titleFromFirstMessage("  Help me\nplan  Q3  ")).toBe(
-      "Help me plan Q3",
-    );
+    expect(titleFromFirstMessage("  Help me\nplan  Q3  ")).toBe("Help me plan Q3");
   });
 
   test("returns undefined for blank or whitespace-only input", () => {
@@ -20,9 +18,7 @@ describe("titleFromFirstMessage (CL-6656)", () => {
   });
 
   test("keeps a short message intact", () => {
-    expect(titleFromFirstMessage("Draft a launch checklist")).toBe(
-      "Draft a launch checklist",
-    );
+    expect(titleFromFirstMessage("Draft a launch checklist")).toBe("Draft a launch checklist");
   });
 
   test("truncates a long message at a word boundary with an ellipsis", () => {
@@ -39,23 +35,17 @@ describe("titleFromFirstMessage (CL-6656)", () => {
 
 describe("autoNameFromFirstMessage (CL-6656)", () => {
   test("names an ad-hoc New Workbench from the first message", () => {
-    expect(
-      autoNameFromFirstMessage(NEW_WORKBENCH_TITLE, "Plan the Q3 launch"),
-    ).toBe("Plan the Q3 launch");
+    expect(autoNameFromFirstMessage(NEW_WORKBENCH_TITLE, "Plan the Q3 launch")).toBe(
+      "Plan the Q3 launch",
+    );
   });
 
   test("leaves prefab and already-renamed titles alone", () => {
-    expect(
-      autoNameFromFirstMessage("Code review", "Review the auth PR"),
-    ).toBeUndefined();
-    expect(
-      autoNameFromFirstMessage("My research bench", "Dig into pricing"),
-    ).toBeUndefined();
+    expect(autoNameFromFirstMessage("Code review", "Review the auth PR")).toBeUndefined();
+    expect(autoNameFromFirstMessage("My research bench", "Dig into pricing")).toBeUndefined();
   });
 
   test("returns undefined when the first message has no usable text", () => {
-    expect(
-      autoNameFromFirstMessage(NEW_WORKBENCH_TITLE, "   "),
-    ).toBeUndefined();
+    expect(autoNameFromFirstMessage(NEW_WORKBENCH_TITLE, "   ")).toBeUndefined();
   });
 });
diff --git a/apps/web/src/auto-workbench-title.ts b/apps/web/src/auto-workbench-title.ts
index a8ba1d0224..d13bda47c5 100644
--- a/apps/web/src/auto-workbench-title.ts
+++ b/apps/web/src/auto-workbench-title.ts
@@ -28,8 +28,7 @@ export function titleFromFirstMessage(
 
   const sliced = collapsed.slice(0, maxLength);
   const lastSpace = sliced.lastIndexOf(" ");
-  const cut =
-    lastSpace > Math.floor(maxLength / 2) ? sliced.slice(0, lastSpace) : sliced;
+  const cut = lastSpace > Math.floor(maxLength / 2) ? sliced.slice(0, lastSpace) : sliced;
   return `${cut.replace(/[.,;:!?]+$/u, "")}…`;
 }
 
diff --git a/apps/web/src/bench-context.test.ts b/apps/web/src/bench-context.test.ts
index bc3f350051..35ecaff398 100644
--- a/apps/web/src/bench-context.test.ts
+++ b/apps/web/src/bench-context.test.ts
@@ -3,9 +3,7 @@ import { describe, expect, test } from "bun:test";
 import { resolveSelection } from "./bench-context";
 import type { Principal } from "./api";
 
-function membership(
-  overrides: Partial<Principal> & { tenantId: string },
-): Principal {
+function membership(overrides: Partial<Principal> & { tenantId: string }): Principal {
   return {
     principalId: `prn_${overrides.tenantId}`,
     tenantName: overrides.tenantId,
@@ -69,9 +67,7 @@ describe("resolveSelection", () => {
   });
 
   test("a stored selection for a tenant no longer in memberships falls through", () => {
-    const memberships = [
-      membership({ tenantId: "tnt_bench", tenantName: "Launch Team" }),
-    ];
+    const memberships = [membership({ tenantId: "tnt_bench", tenantName: "Launch Team" })];
 
     const resolved = resolveSelection(memberships, "tnt_gone");
 
@@ -79,9 +75,7 @@ describe("resolveSelection", () => {
   });
 
   test("undefined when every membership is a raw-id tenant", () => {
-    const memberships = [
-      membership({ tenantId: "tnt_raw", tenantName: "tnt_raw" }),
-    ];
+    const memberships = [membership({ tenantId: "tnt_raw", tenantName: "tnt_raw" })];
 
     const resolved = resolveSelection(memberships, null);
 
diff --git a/apps/web/src/bench-context.tsx b/apps/web/src/bench-context.tsx
index f7c622641e..314e29503e 100644
--- a/apps/web/src/bench-context.tsx
+++ b/apps/web/src/bench-context.tsx
@@ -69,10 +69,7 @@ export function resolveSelection(
   memberships: readonly Principal[],
   stored: string | null,
 ): Principal | undefined {
-  const storedMatch =
-    stored !== null
-      ? memberships.find((m) => m.tenantId === stored)
-      : undefined;
+  const storedMatch = stored !== null ? memberships.find((m) => m.tenantId === stored) : undefined;
   if (storedMatch !== undefined && isBenchMembership(storedMatch)) {
     return storedMatch;
   }
@@ -82,14 +79,10 @@ export function resolveSelection(
 export function BenchProvider({ children }: { readonly children: ReactNode }) {
   const queryClient = useQueryClient();
   const memberships = useAPIQuery("/api/me/principals", PrincipalsSchema);
-  const [stored, setStored] = useState<string | null>(() =>
-    readStoredTenantId(),
-  );
+  const [stored, setStored] = useState<string | null>(() => readStoredTenantId());
 
   const resolved =
-    memberships.kind === "ready"
-      ? resolveSelection(memberships.data.data, stored)
-      : undefined;
+    memberships.kind === "ready" ? resolveSelection(memberships.data.data, stored) : undefined;
 
   useEffect(() => {
     if (resolved !== undefined && resolved.tenantId !== stored) {
@@ -122,9 +115,7 @@ export function BenchProvider({ children }: { readonly children: ReactNode }) {
     [memberships, resolved, stored, queryClient],
   );
 
-  return (
-    <BenchContext.Provider value={value}>{children}</BenchContext.Provider>
-  );
+  return <BenchContext.Provider value={value}>{children}</BenchContext.Provider>;
 }
 
 export function useBench(): BenchState {
diff --git a/apps/web/src/block-response-actions.ts b/apps/web/src/block-response-actions.ts
index a42afc2719..26e1e383f8 100644
--- a/apps/web/src/block-response-actions.ts
+++ b/apps/web/src/block-response-actions.ts
@@ -5,10 +5,7 @@
 // routes (`getBlockResponses`/`submitPollResponse`/`submitFormResponse` in
 // `api.ts`).
 
-import type {
-  BlockResponseActions,
-  BlockResponseSubmitResult,
-} from "@corbits/chat-ui";
+import type { BlockResponseActions, BlockResponseSubmitResult } from "@corbits/chat-ui";
 import {
   CHAT_STRINGS,
   ChatApiError,
@@ -22,9 +19,7 @@ export function createChatBlockResponseActions(
   tenantId: string,
   workbenchId: string,
 ): BlockResponseActions {
-  async function submit(
-    call: () => Promise<void>,
-  ): Promise<BlockResponseSubmitResult> {
+  async function submit(call: () => Promise<void>): Promise<BlockResponseSubmitResult> {
     try {
       await call();
       return { kind: "submitted" };
@@ -37,10 +32,7 @@ export function createChatBlockResponseActions(
       }
       return {
         kind: "error",
-        message:
-          cause instanceof Error
-            ? cause.message
-            : CHAT_STRINGS.blockFormSubmitError,
+        message: cause instanceof Error ? cause.message : CHAT_STRINGS.blockFormSubmitError,
       };
     }
   }
@@ -48,12 +40,7 @@ export function createChatBlockResponseActions(
   return {
     async getResponses(messageId, blockId) {
       try {
-        const result = await getBlockResponses(
-          tenantId,
-          workbenchId,
-          messageId,
-          blockId,
-        );
+        const result = await getBlockResponses(tenantId, workbenchId, messageId, blockId);
         return {
           kind: "ready",
           tally: result.tally,
@@ -66,37 +53,19 @@ export function createChatBlockResponseActions(
         }
         return {
           kind: "error",
-          message:
-            cause instanceof Error ? cause.message : "Couldn't load responses.",
+          message: cause instanceof Error ? cause.message : "Couldn't load responses.",
         };
       }
     },
     submitPoll(messageId, blockId, choiceIds) {
-      return submit(() =>
-        submitPollResponse(
-          tenantId,
-          workbenchId,
-          messageId,
-          blockId,
-          choiceIds,
-        ),
-      );
+      return submit(() => submitPollResponse(tenantId, workbenchId, messageId, blockId, choiceIds));
     },
     submitForm(messageId, blockId, values) {
-      return submit(() =>
-        submitFormResponse(tenantId, workbenchId, messageId, blockId, values),
-      );
+      return submit(() => submitFormResponse(tenantId, workbenchId, messageId, blockId, values));
     },
     submitQuestion(messageId, blockId, answer, optionIndex) {
       return submit(() =>
-        submitQuestionResponse(
-          tenantId,
-          workbenchId,
-          messageId,
-          blockId,
-          answer,
-          optionIndex,
-        ),
+        submitQuestionResponse(tenantId, workbenchId, messageId, blockId, answer, optionIndex),
       );
     },
   };
diff --git a/apps/web/src/chat-artifact-open.ts b/apps/web/src/chat-artifact-open.ts
index f6ced4f7cc..a0ee1a75f8 100644
--- a/apps/web/src/chat-artifact-open.ts
+++ b/apps/web/src/chat-artifact-open.ts
@@ -33,9 +33,7 @@ export function artifactContentFromDetail(
     // presence `/update` route's own write-grant check is the real gate
     // — this only decides which pane a capable viewer sees.
     canEdit: rendererKind === "doc",
-    ...(rendererKind === "html"
-      ? { previewSrc: artifactPreviewPath(tenantId, detail.id) }
-      : {}),
+    ...(rendererKind === "html" ? { previewSrc: artifactPreviewPath(tenantId, detail.id) } : {}),
   };
 }
 
@@ -64,10 +62,7 @@ export function artifactContentFromBlob(
   blobId: string,
   contentBase64: string,
 ): CanvasArtifactContent {
-  const rendererKind = resolveRendererKindFromMediaType(
-    part.mediaType,
-    part.name,
-  );
+  const rendererKind = resolveRendererKindFromMediaType(part.mediaType, part.name);
   if (!isTextDecodableMediaType(part.mediaType)) {
     return {
       id: blobId,
diff --git a/apps/web/src/client-bootstrap.test.ts b/apps/web/src/client-bootstrap.test.ts
index dd331713a7..620da6821f 100644
--- a/apps/web/src/client-bootstrap.test.ts
+++ b/apps/web/src/client-bootstrap.test.ts
@@ -2,11 +2,7 @@ import { describe, expect, test } from "bun:test";
 
 import type { ClientLogger } from "@corbits/client-log";
 
-import {
-  bootstrapClientSession,
-  logBootstrapResult,
-  logBootstrapThrown,
-} from "./client-bootstrap";
+import { bootstrapClientSession, logBootstrapResult, logBootstrapThrown } from "./client-bootstrap";
 import type { ClientBootstrapResult } from "./client-bootstrap";
 import type { StockHub } from "./needs-converge";
 
@@ -76,8 +72,7 @@ test("session bootstrap drives the portable client manifest", async () => {
     deployWorkflow: () => Promise.reject(new Error("unexpected deploy")),
     sendRunMail: () => Promise.reject(new Error("unexpected send")),
     listRunMail: () => Promise.resolve([]),
-    searchAgentMailbox: () =>
-      Promise.reject(new Error("unexpected mailbox search")),
+    searchAgentMailbox: () => Promise.reject(new Error("unexpected mailbox search")),
     readMailThread: () => Promise.reject(new Error("unexpected thread read")),
   };
 
diff --git a/apps/web/src/client-bootstrap.ts b/apps/web/src/client-bootstrap.ts
index bd575cfdb6..85a48e8271 100644
--- a/apps/web/src/client-bootstrap.ts
+++ b/apps/web/src/client-bootstrap.ts
@@ -67,8 +67,7 @@ export async function ensurePrimaryTenant(
  * "Myra" display name. Resolved from the catalog at runtime, never
  * hardcoded at the call site. */
 export function resolveMyraDefinitionRefId(): string | undefined {
-  return WORKFLOW_CATALOG.find((entry) => entry.displayName === "Myra")
-    ?.assetName;
+  return WORKFLOW_CATALOG.find((entry) => entry.displayName === "Myra")?.assetName;
 }
 
 export type ClientBootstrapAccount = {
@@ -127,8 +126,7 @@ export const UPSTREAM_GAP_NOTES: Record<StockHubCapability, string> = {
     "Myra is absent and the client was not given the exact stock source and offering ids — supply myraDeploy from client config.",
   "project-workflow-principal":
     "Stock Interchange cannot carry a workflow identity into a child room by refId, so workbench member setup waits on an upstream capability.",
-  "principal-roles":
-    "The stock member invite route cannot assign the requested child-room roles.",
+  "principal-roles": "The stock member invite route cannot assign the requested child-room roles.",
   "agent-mailbox-reads":
     "Stock Interchange exposes no per-agent mailbox search, so participant-filtered thread derivation waits on a stock search route.",
   "thread-fork-context":
@@ -139,8 +137,7 @@ export async function bootstrapClientSession(
   account: ClientBootstrapAccount,
   deps: ClientBootstrapDeps,
 ): Promise<ClientBootstrapResult> {
-  const myraDefinitionRefId =
-    deps.myraDefinitionRefId ?? resolveMyraDefinitionRefId();
+  const myraDefinitionRefId = deps.myraDefinitionRefId ?? resolveMyraDefinitionRefId();
   if (myraDefinitionRefId === undefined) {
     return {
       kind: "error",
@@ -205,10 +202,7 @@ export async function bootstrapClientSession(
  * (first-open in main, signup in the onboarding page): a converged lane
  * logs at info, a stock gap or any other failure logs at warn — never
  * shown, never gating the shell. */
-export function logBootstrapResult(
-  log: ClientLogger,
-  result: ClientBootstrapResult,
-): void {
+export function logBootstrapResult(log: ClientLogger, result: ClientBootstrapResult): void {
   if (result.kind === "ready") {
     log.info("Portable client bootstrap converged", {
       primaryTenantId: result.primaryTenantId,
@@ -252,8 +246,6 @@ export function runPortableClientBootstrap(
     ...(overrides?.myraDefinitionRefId === undefined
       ? {}
       : { myraDefinitionRefId: overrides.myraDefinitionRefId }),
-    ...(overrides?.myraDeploy === undefined
-      ? {}
-      : { myraDeploy: overrides.myraDeploy }),
+    ...(overrides?.myraDeploy === undefined ? {} : { myraDeploy: overrides.myraDeploy }),
   });
 }
diff --git a/apps/web/src/command-palette-actions.test.ts b/apps/web/src/command-palette-actions.test.ts
index 2d34f4d489..38ab1d269e 100644
--- a/apps/web/src/command-palette-actions.test.ts
+++ b/apps/web/src/command-palette-actions.test.ts
@@ -33,8 +33,7 @@ function context(overrides: {
   const ctx = {
     path: overrides.path,
     navigate: (to: string) => navigated.push(to),
-    tenantId:
-      overrides.tenantId !== undefined ? overrides.tenantId : "tenant-1",
+    tenantId: overrides.tenantId !== undefined ? overrides.tenantId : "tenant-1",
     cycleTheme: () => {
       themeCycled = true;
     },
@@ -66,9 +65,7 @@ describe("ACTION_COMMANDS", () => {
   });
 
   test("exactly one New workbench create row — no duplicate title+destination (CL-6820)", () => {
-    const newWorkbenchRows = ACTION_COMMANDS.filter(
-      (c) => c.title === "New workbench",
-    );
+    const newWorkbenchRows = ACTION_COMMANDS.filter((c) => c.title === "New workbench");
     expect(newWorkbenchRows).toHaveLength(1);
     expect(newWorkbenchRows[0]?.id).toBe("new-workbench");
 
@@ -155,8 +152,7 @@ describe("runActionCommand", () => {
   test("talk-to-myra opens Myra's DM via kind=chat + definitionId, not a title-match mint", async () => {
     const calls: { readonly path: string; readonly init?: RequestInit }[] = [];
     globalThis.fetch = ((input: RequestInfo | URL, init?: RequestInit) => {
-      const path =
-        typeof input === "string" ? input : new URL(String(input)).pathname;
+      const path = typeof input === "string" ? input : new URL(String(input)).pathname;
       calls.push(init === undefined ? { path } : { path, init });
       if (path.includes("/workflows/definitions")) {
         return Promise.resolve(
@@ -199,9 +195,7 @@ describe("runActionCommand", () => {
     const { ctx, navigated } = context({ path: "/" });
     await runActionCommand("talk-to-myra", ctx);
 
-    const createCall = calls.find((call) =>
-      call.path.endsWith("/chat/workbenches"),
-    );
+    const createCall = calls.find((call) => call.path.endsWith("/chat/workbenches"));
     expect(createCall?.init?.method).toBe("POST");
     expect(JSON.parse(String(createCall?.init?.body))).toEqual({
       kind: "chat",
diff --git a/apps/web/src/command-palette-actions.ts b/apps/web/src/command-palette-actions.ts
index fb26c39be1..5b315b07a4 100644
--- a/apps/web/src/command-palette-actions.ts
+++ b/apps/web/src/command-palette-actions.ts
@@ -120,8 +120,7 @@ export async function runActionCommand(
     }
     case "new-skill": {
       newSkillRequest.request({
-        alreadyOnTargetRoute:
-          ctx.path === "/skills" || ctx.path.startsWith("/skills/"),
+        alreadyOnTargetRoute: ctx.path === "/skills" || ctx.path.startsWith("/skills/"),
         navigateToTargetRoute: () => ctx.navigate("/skills"),
         dispatch: () => window.dispatchEvent(new CustomEvent(NEW_SKILL_EVENT)),
       });
@@ -129,8 +128,7 @@ export async function runActionCommand(
     }
     case "upload-artifact": {
       requestLibraryUpload({
-        alreadyOnLibrary:
-          ctx.path === "/files" || ctx.path.startsWith("/files/"),
+        alreadyOnLibrary: ctx.path === "/files" || ctx.path.startsWith("/files/"),
         navigateToLibrary: () => ctx.navigate("/files"),
       });
       return;
diff --git a/apps/web/src/command-palette-provider.tsx b/apps/web/src/command-palette-provider.tsx
index d82e26f594..d31887accb 100644
--- a/apps/web/src/command-palette-provider.tsx
+++ b/apps/web/src/command-palette-provider.tsx
@@ -1,9 +1,4 @@
-import {
-  artifactKindLabel,
-  CommandPalette,
-  useCommandShortcut,
-  useTheme,
-} from "@corbits/react-ui";
+import { artifactKindLabel, CommandPalette, useCommandShortcut, useTheme } from "@corbits/react-ui";
 import type { CommandPaletteGroup } from "@corbits/react-ui";
 import { listWorkbenches } from "@corbits/chat-ui";
 import { libraryArtifactPath } from "@corbits/artifact-ui";
@@ -20,21 +15,10 @@ import {
   type RecentEntry,
 } from "@corbits/command-palette";
 import { useQueryClient } from "@tanstack/react-query";
-import {
-  useCallback,
-  useEffect,
-  useMemo,
-  useRef,
-  useState,
-  type ReactNode,
-} from "react";
+import { useCallback, useEffect, useMemo, useRef, useState, type ReactNode } from "react";
 
 import { listAgentDefinitions } from "./agents-api";
-import {
-  ACTION_COMMANDS,
-  runActionCommand,
-  type ActionCommandId,
-} from "./command-palette-actions";
+import { ACTION_COMMANDS, runActionCommand, type ActionCommandId } from "./command-palette-actions";
 import {
   openCommandPalette,
   setCommandPaletteOpen,
@@ -49,16 +33,8 @@ import { ArtifactListPageSchema, useAPIQuery } from "./api";
 import { isBenchMembership, useBench } from "./bench-context";
 import { useCloseCanvas } from "./shell/canvas-availability";
 import { listMcpServers } from "@corbits/plugins-ui";
-import {
-  AGENTS_PATH_PREFIX,
-  PLUGINS_PATH_PREFIX,
-  SKILLS_PATH_PREFIX,
-} from "./path-ids";
-import {
-  listScheduledWorkflows,
-  runScheduledWorkflowNow,
-  useTenantQuery,
-} from "./routines-api";
+import { AGENTS_PATH_PREFIX, PLUGINS_PATH_PREFIX, SKILLS_PATH_PREFIX } from "./path-ids";
+import { listScheduledWorkflows, runScheduledWorkflowNow, useTenantQuery } from "./routines-api";
 import { listSkills } from "./skills-api";
 import { tenantKeys } from "./query-client";
 import type { Navigate } from "./navigation";
@@ -105,8 +81,7 @@ export function CommandPaletteProvider({
   const closeCanvas = useCloseCanvas();
 
   const recentsStore = useMemo(
-    () =>
-      selectedTenantId === null ? null : recentsStoreForBench(selectedTenantId),
+    () => (selectedTenantId === null ? null : recentsStoreForBench(selectedTenantId)),
     [selectedTenantId],
   );
 
@@ -145,10 +120,7 @@ export function CommandPaletteProvider({
     }
     window.addEventListener(WORKBENCH_NOT_FOUND_EVENT, onWorkbenchNotFound);
     return () => {
-      window.removeEventListener(
-        WORKBENCH_NOT_FOUND_EVENT,
-        onWorkbenchNotFound,
-      );
+      window.removeEventListener(WORKBENCH_NOT_FOUND_EVENT, onWorkbenchNotFound);
     };
   }, [removeRecent]);
 
@@ -212,12 +184,8 @@ export function CommandPaletteProvider({
   // fetches for (by design — the unscoped default view should not dump
   // every entity on open). The mock shows every item in an active scope for
   // this input, so fetch that scope's raw list directly instead.
-  const [bareWorkbenches, setBareWorkbenches] = useState<
-    readonly PaletteResultItem[]
-  >([]);
-  const [bareAgents, setBareAgents] = useState<readonly PaletteResultItem[]>(
-    [],
-  );
+  const [bareWorkbenches, setBareWorkbenches] = useState<readonly PaletteResultItem[]>([]);
+  const [bareAgents, setBareAgents] = useState<readonly PaletteResultItem[]>([]);
 
   useEffect(() => {
     if (bareScopeKind !== "workbenches" || !open) {
@@ -279,9 +247,7 @@ export function CommandPaletteProvider({
     () => listMcpServers(selectedTenantId ?? ""),
   );
   const artifactsQuery = useAPIQuery(
-    selectedTenantId === null || !open
-      ? ""
-      : `/api/tenants/${selectedTenantId}/artifacts`,
+    selectedTenantId === null || !open ? "" : `/api/tenants/${selectedTenantId}/artifacts`,
     ArtifactListPageSchema,
   );
 
@@ -296,9 +262,7 @@ export function CommandPaletteProvider({
   // tenancy is the only thing filtered out here.
   const workbenchMemberships =
     memberships.kind === "ready"
-      ? memberships.data.data.filter((membership) =>
-          isBenchMembership(membership),
-        )
+      ? memberships.data.data.filter((membership) => isBenchMembership(membership))
       : [];
   const nextWorkbench =
     workbenchMemberships.length > 1
@@ -325,8 +289,7 @@ export function CommandPaletteProvider({
   useEffect(() => {
     const previous = searchScope.current;
     const routeChanged = previous.path !== path;
-    const benchSwitched =
-      previous.tenantId !== null && previous.tenantId !== selectedTenantId;
+    const benchSwitched = previous.tenantId !== null && previous.tenantId !== selectedTenantId;
     searchScope.current = { path, tenantId: selectedTenantId };
     if (routeChanged || benchSwitched) setCommandPaletteOpen(false);
   }, [path, selectedTenantId]);
@@ -530,21 +493,17 @@ export function CommandPaletteProvider({
         });
       } else if (id.startsWith("route:")) {
         const routePath = id.slice("route:".length);
-        const label =
-          STATIC_COMMANDS.find((command) => command.id === id)?.title ??
-          routePath;
+        const label = STATIC_COMMANDS.find((command) => command.id === id)?.title ?? routePath;
         navigate(routePath);
         pushRecent({ kind: "route", id, title: label });
       } else if (id.startsWith("entity:workbenches:")) {
         const workbenchId = id.slice("entity:workbenches:".length);
-        const title =
-          workbenchItems.find((item) => item.id === id)?.title ?? workbenchId;
+        const title = workbenchItems.find((item) => item.id === id)?.title ?? workbenchId;
         navigate(`/w/${workbenchId}`);
         pushRecent({ kind: "workbenches", id, title, subtitle: "Workbench" });
       } else if (id.startsWith("entity:agents:")) {
         const agentId = id.slice("entity:agents:".length);
-        const title =
-          agentItems.find((item) => item.id === id)?.title ?? agentId;
+        const title = agentItems.find((item) => item.id === id)?.title ?? agentId;
         navigate(
           detailPath(AGENTS_PATH_PREFIX, {
             slug: agentHandleById.current.get(agentId) ?? "",
@@ -554,18 +513,14 @@ export function CommandPaletteProvider({
         pushRecent({ kind: "agents", id, title, subtitle: "Agent" });
       } else if (id.startsWith("entity:routines:")) {
         const routineId = id.slice("entity:routines:".length);
-        const title =
-          routineItems.find((item) => item.id === id)?.title ?? routineId;
+        const title = routineItems.find((item) => item.id === id)?.title ?? routineId;
         navigate(`/routines/${encodeURIComponent(routineId)}`);
         pushRecent({ kind: "routines", id, title, subtitle: "Routine" });
       } else if (id.startsWith("entity:skills:")) {
         const skillId = id.slice("entity:skills:".length);
-        const title =
-          skillItems.find((item) => item.id === id)?.title ?? skillId;
+        const title = skillItems.find((item) => item.id === id)?.title ?? skillId;
         // A skill's name is its slug: the Skills API keys every route on it.
-        navigate(
-          detailPath(SKILLS_PATH_PREFIX, { slug: skillId, id: skillId }),
-        );
+        navigate(detailPath(SKILLS_PATH_PREFIX, { slug: skillId, id: skillId }));
         pushRecent({ kind: "skills", id, title, subtitle: "Skill" });
       } else if (id.startsWith("entity:plugins:")) {
         const slug = id.slice("entity:plugins:".length);
@@ -576,8 +531,7 @@ export function CommandPaletteProvider({
         pushRecent({ kind: "plugins", id, title, subtitle: "Plugin" });
       } else if (id.startsWith("entity:library:")) {
         const artifactId = id.slice("entity:library:".length);
-        const title =
-          libraryItems.find((item) => item.id === id)?.title ?? "Files";
+        const title = libraryItems.find((item) => item.id === id)?.title ?? "Files";
         navigate(libraryArtifactPath(artifactId));
         pushRecent({ kind: "library", id, title, subtitle: "Files" });
       }
diff --git a/apps/web/src/connect-service-actions.ts b/apps/web/src/connect-service-actions.ts
index 27edc03141..01438a35dc 100644
--- a/apps/web/src/connect-service-actions.ts
+++ b/apps/web/src/connect-service-actions.ts
@@ -15,10 +15,7 @@
 // Plugins page) publishes `chat.settings`; ChatWorkspace parses that
 // event and calls `notifySettingsChanged` so a mounted card flips
 // without remounting (CL-6476).
-import type {
-  ConnectServiceActions,
-  ConnectServiceQuery,
-} from "@corbits/chat-ui";
+import type { ConnectServiceActions, ConnectServiceQuery } from "@corbits/chat-ui";
 import {
   completeConnectorCredential,
   ConnectionsApiError,
@@ -26,18 +23,12 @@ import {
   listProviders,
   oauthStartHref,
 } from "@corbits/settings-ui";
-import {
-  connectMcpPreset,
-  listMcpPresets,
-  McpServersApiError,
-} from "@corbits/plugins-ui";
+import { connectMcpPreset, listMcpPresets, McpServersApiError } from "@corbits/plugins-ui";
 import { mcpPresetBySlug, MCP_PRESETS } from "@corbits/connections/mcp-presets";
 import { CONNECTOR_REGISTRY } from "@corbits/connections/registry";
 
 function bareConnectorId(connectorId: string): string {
-  return connectorId.startsWith("mcp:")
-    ? connectorId.slice("mcp:".length)
-    : connectorId;
+  return connectorId.startsWith("mcp:") ? connectorId.slice("mcp:".length) : connectorId;
 }
 
 export function createChatConnectServiceActions(
diff --git a/apps/web/src/global-routines.ts b/apps/web/src/global-routines.ts
index 2b19988bb6..33fa6ef01e 100644
--- a/apps/web/src/global-routines.ts
+++ b/apps/web/src/global-routines.ts
@@ -66,10 +66,7 @@ export function useGlobalRoutines(): APIQuery<readonly GlobalRoutineRow[]> {
   if (failed !== undefined) {
     return {
       kind: "error",
-      message:
-        failed.error instanceof Error
-          ? failed.error.message
-          : "Couldn't load routines.",
+      message: failed.error instanceof Error ? failed.error.message : "Couldn't load routines.",
       retry: () => {
         for (const result of results) void result.refetch();
       },
@@ -102,10 +99,7 @@ export function useInvalidateRoutines(): (tenantId: string) => void {
 
 export type RoutineActions = {
   readonly runNow: (row: GlobalRoutineRow) => Promise<void>;
-  readonly setEnabled: (
-    row: GlobalRoutineRow,
-    enabled: boolean,
-  ) => Promise<void>;
+  readonly setEnabled: (row: GlobalRoutineRow, enabled: boolean) => Promise<void>;
 };
 
 export function useRoutineActions(): RoutineActions {
@@ -113,10 +107,7 @@ export function useRoutineActions(): RoutineActions {
   return {
     runNow: async (row) => {
       try {
-        await runScheduledWorkflowNow(
-          row.tenantId,
-          row.definition.definitionId,
-        );
+        await runScheduledWorkflowNow(row.tenantId, row.definition.definitionId);
         invalidate(row.tenantId);
         toast(`${row.definition.name} started`);
       } catch (cause) {
diff --git a/apps/web/src/granola-plugin-availability.test.ts b/apps/web/src/granola-plugin-availability.test.ts
index fcb9ff3973..656e0dfdf4 100644
--- a/apps/web/src/granola-plugin-availability.test.ts
+++ b/apps/web/src/granola-plugin-availability.test.ts
@@ -10,8 +10,7 @@ afterEach(() => {
 
 describe("fetchGranolaPluginConnected", () => {
   test("false on 404 — Granola not connected", async () => {
-    globalThis.fetch = (async () =>
-      new Response(null, { status: 404 })) as unknown as typeof fetch;
+    globalThis.fetch = (async () => new Response(null, { status: 404 })) as unknown as typeof fetch;
     expect(await fetchGranolaPluginConnected("tnt_1")).toBe(false);
   });
 
diff --git a/apps/web/src/granola-plugin-availability.ts b/apps/web/src/granola-plugin-availability.ts
index 1e0cc31e24..5061d968b8 100644
--- a/apps/web/src/granola-plugin-availability.ts
+++ b/apps/web/src/granola-plugin-availability.ts
@@ -14,9 +14,7 @@ const ResolvedCredential = type({
 
 /** True when Granola is connected (or needs attention) for `tenantId`. A
  * missing, revoked, or unreadable credential is not offerable. */
-export async function fetchGranolaPluginConnected(
-  tenantId: string,
-): Promise<boolean> {
+export async function fetchGranolaPluginConnected(tenantId: string): Promise<boolean> {
   const response = await fetch(
     `/api/tenants/${tenantId}/credentials/resolve/${encodeURIComponent("Granola")}`,
     { headers: { accept: "application/json" } },
@@ -28,11 +26,7 @@ export async function fetchGranolaPluginConnected(
   if (parsed instanceof type.errors) return false;
   // Revoked reads as not connected — same rule as
   // `@corbits/connections/plugins`' resolveOne.
-  return (
-    parsed.status === "active" ||
-    parsed.status === "expired" ||
-    parsed.status === "error"
-  );
+  return parsed.status === "active" || parsed.status === "expired" || parsed.status === "error";
 }
 
 /** Absent (still fetching) never claims Granola is connected — the trigger
diff --git a/apps/web/src/insights-deeplinks.test.ts b/apps/web/src/insights-deeplinks.test.ts
index d4ce7348e0..c8d1e4b307 100644
--- a/apps/web/src/insights-deeplinks.test.ts
+++ b/apps/web/src/insights-deeplinks.test.ts
@@ -33,9 +33,7 @@ describe("runDetailPath", () => {
 
 describe("runDeepLinkTarget", () => {
   test("returns the insights run-detail path for a purpose run", () => {
-    expect(runDeepLinkTarget(run("run_42"))).toBe(
-      `${INSIGHTS_RUNS_PATH}/run_42`,
-    );
+    expect(runDeepLinkTarget(run("run_42"))).toBe(`${INSIGHTS_RUNS_PATH}/run_42`);
   });
 
   test("is stable across two runs that differ only by id", () => {
@@ -49,8 +47,6 @@ describe("workbenchInsightsPath", () => {
   });
 
   test("encodes a workbench id so a slash or space cannot break out of the segment", () => {
-    expect(workbenchInsightsPath("a/b c")).toBe(
-      "/insights/workbench/a%2Fb%20c",
-    );
+    expect(workbenchInsightsPath("a/b c")).toBe("/insights/workbench/a%2Fb%20c");
   });
 });
diff --git a/apps/web/src/insights-path.test.ts b/apps/web/src/insights-path.test.ts
index 2f6086412f..4b335c7140 100644
--- a/apps/web/src/insights-path.test.ts
+++ b/apps/web/src/insights-path.test.ts
@@ -33,9 +33,7 @@ describe("parseInsightsPath", () => {
   });
 
   test("a malformed escape on a workbench deep link falls back to landing, not a throw", () => {
-    expect(() =>
-      parseInsightsPath("/insights/workbench/%E0%A4%A"),
-    ).not.toThrow();
+    expect(() => parseInsightsPath("/insights/workbench/%E0%A4%A")).not.toThrow();
     expect(parseInsightsPath("/insights/workbench/%E0%A4%A")).toEqual({
       mode: "landing",
       runId: null,
diff --git a/apps/web/src/insights-stats.test.ts b/apps/web/src/insights-stats.test.ts
index 152ee12650..a749fa1740 100644
--- a/apps/web/src/insights-stats.test.ts
+++ b/apps/web/src/insights-stats.test.ts
@@ -12,9 +12,7 @@ import {
 import type { InsightsRun } from "./insights-api";
 import type { ScheduledWorkflowDefinition } from "./routines-api";
 
-function run(
-  partial: Partial<InsightsRun> & Pick<InsightsRun, "id" | "status">,
-): InsightsRun {
+function run(partial: Partial<InsightsRun> & Pick<InsightsRun, "id" | "status">): InsightsRun {
   return {
     tenantId: "t1",
     definitionId: "def",
@@ -92,9 +90,7 @@ describe("computeInsightsStats", () => {
         run({
           id: "stale",
           status: "running",
-          createdAt: new Date(
-            Date.now() - FIRE_RUNNING_WINDOW_MS - 1,
-          ).toISOString(),
+          createdAt: new Date(Date.now() - FIRE_RUNNING_WINDOW_MS - 1).toISOString(),
         }),
       ],
       [],
@@ -140,9 +136,7 @@ describe("purposeRunsForInsights", () => {
   const deployment = run({ id: "ins_deployed", status: "running" });
 
   test("drops a workbench-host run by its definition-name pattern", () => {
-    expect(purposeRunsForInsights([deployment, workbenchHost])).toEqual([
-      deployment,
-    ]);
+    expect(purposeRunsForInsights([deployment, workbenchHost])).toEqual([deployment]);
   });
 
   test("leaves an ordinary top-level deployment run alone", () => {
diff --git a/apps/web/src/insights-stats.ts b/apps/web/src/insights-stats.ts
index 72aa8f3799..f52ff25fe5 100644
--- a/apps/web/src/insights-stats.ts
+++ b/apps/web/src/insights-stats.ts
@@ -3,10 +3,7 @@
 // existing endpoints.
 
 import { isWorkbenchHostDefinitionName } from "@corbits/chat-ui/wire/workbench-host-naming";
-import {
-  runOutcomeStatus,
-  withListingAbandoned,
-} from "@corbits/workflows/client";
+import { runOutcomeStatus, withListingAbandoned } from "@corbits/workflows/client";
 
 import type { InsightsRun } from "./insights-api";
 import type { ScheduledWorkflowDefinition } from "./routines-api";
@@ -54,12 +51,8 @@ export const INSIGHTS_RECENT_LIMIT = 12;
  * creation) with a scoped feed; CL-8087 repointed that scoped feed from
  * the deleted `feed=fires` route to the native listing.
  */
-export function purposeRunsForInsights(
-  runs: readonly InsightsRun[],
-): readonly InsightsRun[] {
-  return runs.filter(
-    (run) => !isWorkbenchHostDefinitionName(run.definitionName),
-  );
+export function purposeRunsForInsights(runs: readonly InsightsRun[]): readonly InsightsRun[] {
+  return runs.filter((run) => !isWorkbenchHostDefinitionName(run.definitionName));
 }
 
 /**
@@ -102,9 +95,7 @@ export type DefinitionRunGroup = {
  * fires equivalent exists. Group order follows each group's own newest
  * run, newest overall first.
  */
-export function groupRunsByDefinition(
-  runs: readonly InsightsRun[],
-): readonly DefinitionRunGroup[] {
+export function groupRunsByDefinition(runs: readonly InsightsRun[]): readonly DefinitionRunGroup[] {
   const byGroupKey = new Map<string, InsightsRun[]>();
   for (const run of runs) {
     const groupKey = run.routineId ?? run.definitionId;
@@ -116,9 +107,7 @@ export function groupRunsByDefinition(
     }
   }
   const groups = [...byGroupKey.entries()].map(([groupKey, group]) => {
-    const runs = [...group].sort((a, b) =>
-      b.createdAt.localeCompare(a.createdAt),
-    );
+    const runs = [...group].sort((a, b) => b.createdAt.localeCompare(a.createdAt));
     // Name from the newest run, after sorting — a routine or definition
     // rename must show the current name in the group header, not
     // whatever name its oldest fetched run happened to carry.
@@ -145,8 +134,7 @@ export function computeInsightsStats(
   let stopped = 0;
   let deployed = 0;
   for (const run of purposeful) {
-    const outcome =
-      runOutcomeStatus(withListingAbandoned(run, now), now) ?? run.status;
+    const outcome = runOutcomeStatus(withListingAbandoned(run, now), now) ?? run.status;
     switch (outcome) {
       case "running":
       case "updating":
diff --git a/apps/web/src/insights-timeline.test.ts b/apps/web/src/insights-timeline.test.ts
index a9cb416381..d8b05eee64 100644
--- a/apps/web/src/insights-timeline.test.ts
+++ b/apps/web/src/insights-timeline.test.ts
@@ -25,11 +25,7 @@ describe("bucketRunsByDay", () => {
     const buckets = bucketRunsByDay([], 3, NOW);
     expect(buckets).toHaveLength(3);
     // Oldest first: Jan 13, Jan 14, Jan 15 (UTC days, since NOW is UTC).
-    expect(buckets.map((b) => b.key)).toEqual([
-      "2026-01-13",
-      "2026-01-14",
-      "2026-01-15",
-    ]);
+    expect(buckets.map((b) => b.key)).toEqual(["2026-01-13", "2026-01-14", "2026-01-15"]);
     expect(buckets.every((b) => b.count === 0)).toBe(true);
   });
 
diff --git a/apps/web/src/insights-timeline.ts b/apps/web/src/insights-timeline.ts
index c467eb6209..5ffbe2f166 100644
--- a/apps/web/src/insights-timeline.ts
+++ b/apps/web/src/insights-timeline.ts
@@ -16,20 +16,7 @@ export type DayBucket = {
 /** Default window for the timeline strip. */
 export const INSIGHTS_TIMELINE_DAYS = 14;
 
-const MONTHS = [
-  "Jan",
-  "Feb",
-  "Mar",
-  "Apr",
-  "May",
-  "Jun",
-  "Jul",
-  "Aug",
-  "Sep",
-  "Oct",
-  "Nov",
-  "Dec",
-];
+const MONTHS = ["Jan", "Feb", "Mar", "Apr", "May", "Jun", "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"];
 
 /**
  * Buckets `runs` into the last `days` UTC days ending on `now`'s day, oldest
@@ -43,11 +30,7 @@ export function bucketRunsByDay(
 ): readonly DayBucket[] {
   // Start of the current UTC day, then walk back `days - 1` days so the
   // window includes today.
-  const todayUTC = Date.UTC(
-    now.getUTCFullYear(),
-    now.getUTCMonth(),
-    now.getUTCDate(),
-  );
+  const todayUTC = Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate());
   const dayMs = 86_400_000;
 
   const counts = new Map<string, number>();
diff --git a/apps/web/src/insights-workbench-scope.test.ts b/apps/web/src/insights-workbench-scope.test.ts
index e7b0de8e0e..316b057e56 100644
--- a/apps/web/src/insights-workbench-scope.test.ts
+++ b/apps/web/src/insights-workbench-scope.test.ts
@@ -39,9 +39,7 @@ describe("resolveWorkbenchInsightsScope", () => {
   });
 
   test("reports not-found for an id absent from the bench's workbench list", () => {
-    const workbenches = [
-      workbench({ id: "ch_1", tenancy: { tenantId: "tnt_1" } }),
-    ];
+    const workbenches = [workbench({ id: "ch_1", tenancy: { tenantId: "tnt_1" } })];
     expect(resolveWorkbenchInsightsScope(workbenches, "tnt_stale")).toEqual({
       kind: "not-found",
     });
diff --git a/apps/web/src/instant-agent-create.test.ts b/apps/web/src/instant-agent-create.test.ts
index afb690f471..e7f7a455cc 100644
--- a/apps/web/src/instant-agent-create.test.ts
+++ b/apps/web/src/instant-agent-create.test.ts
@@ -26,8 +26,7 @@ describe("createWorkbench", () => {
   function stubFetch(respond: (path: string) => Response): RecordedCall[] {
     const calls: RecordedCall[] = [];
     globalThis.fetch = ((input: RequestInfo | URL, init?: RequestInit) => {
-      const path =
-        typeof input === "string" ? input : new URL(String(input)).pathname;
+      const path = typeof input === "string" ? input : new URL(String(input)).pathname;
       calls.push(init === undefined ? { path } : { path, init });
       return Promise.resolve(respond(path));
     }) as typeof fetch;
@@ -71,20 +70,10 @@ describe("createWorkbench", () => {
       throw new Error(`unexpected fetch: ${path}`);
     });
 
-    await createWorkbench(
-      "tnt_1",
-      (to) => navigated.push(to),
-      newQueryClient(),
-    );
-    await createWorkbench(
-      "tnt_1",
-      (to) => navigated.push(to),
-      newQueryClient(),
-    );
+    await createWorkbench("tnt_1", (to) => navigated.push(to), newQueryClient());
+    await createWorkbench("tnt_1", (to) => navigated.push(to), newQueryClient());
 
-    const createCalls = calls.filter((call) =>
-      call.path.endsWith("/chat/workbenches"),
-    );
+    const createCalls = calls.filter((call) => call.path.endsWith("/chat/workbenches"));
     expect(createCalls).toHaveLength(2);
     expect(navigated).toEqual(["/w/chan-1", "/w/chan-2"]);
     expect(navigated[0]).not.toBe(navigated[1]);
@@ -109,9 +98,7 @@ describe("createWorkbench", () => {
       cause = error;
     }
     expect(cause).toBeInstanceOf(WorkbenchPreconditionError);
-    expect((cause as WorkbenchPreconditionError).kind).toBe(
-      "setup-agent-missing",
-    );
+    expect((cause as WorkbenchPreconditionError).kind).toBe("setup-agent-missing");
   });
 
   test("a first message renames the room off New Workbench via chat/name", async () => {
diff --git a/apps/web/src/instant-agent-create.ts b/apps/web/src/instant-agent-create.ts
index 416da7eef8..97baa59358 100644
--- a/apps/web/src/instant-agent-create.ts
+++ b/apps/web/src/instant-agent-create.ts
@@ -22,10 +22,7 @@ import {
 import { reportError } from "@corbits/error-sink";
 
 import { listAgentDefinitions } from "./agents-api";
-import {
-  autoNameFromFirstMessage,
-  NEW_WORKBENCH_TITLE,
-} from "./auto-workbench-title";
+import { autoNameFromFirstMessage, NEW_WORKBENCH_TITLE } from "./auto-workbench-title";
 import { findMyraDefinition } from "./myra-workbench";
 import { workbenchPath } from "./workbench-path";
 
@@ -120,10 +117,7 @@ export async function createWorkbench(
 ): Promise<void> {
   const definitions = await listAgentDefinitions(tenantId);
   if (findMyraDefinition(definitions) === undefined) {
-    throw new WorkbenchPreconditionError(
-      SETUP_AGENT_MISSING_MESSAGE,
-      "setup-agent-missing",
-    );
+    throw new WorkbenchPreconditionError(SETUP_AGENT_MISSING_MESSAGE, "setup-agent-missing");
   }
   const workbench = await createWorkbenchChannel(tenantId, {
     kind: "workbench",
@@ -131,26 +125,16 @@ export async function createWorkbench(
   });
 
   if (firstMessage !== undefined && firstMessage.trim() !== "") {
-    const selectedAgentInvites = [...new Set(selectedAgentDefinitionIds)].map(
-      (definitionId) => ({ kind: "agent" as const, definitionId }),
-    );
+    const selectedAgentInvites = [...new Set(selectedAgentDefinitionIds)].map((definitionId) => ({
+      kind: "agent" as const,
+      definitionId,
+    }));
     try {
-      await sendMessage(
-        tenantId,
-        workbench.id,
-        partsForSend(firstMessage, []),
-        {
-          ...(selectedAgentInvites.length > 0
-            ? { invite: selectedAgentInvites }
-            : {}),
-        },
-      );
+      await sendMessage(tenantId, workbench.id, partsForSend(firstMessage, []), {
+        ...(selectedAgentInvites.length > 0 ? { invite: selectedAgentInvites } : {}),
+      });
     } catch (cause) {
-      throw new WorkbenchPostCreateError(
-        workbench.id,
-        "opening-message",
-        cause,
-      );
+      throw new WorkbenchPostCreateError(workbench.id, "opening-message", cause);
     }
     // Blank / ad-hoc mints stay "New Workbench" until named. When the
     // prompt box already supplied the opening message, rename via the same
diff --git a/apps/web/src/last-workbench.ts b/apps/web/src/last-workbench.ts
index 208f020a5c..6440abf650 100644
--- a/apps/web/src/last-workbench.ts
+++ b/apps/web/src/last-workbench.ts
@@ -8,10 +8,7 @@
 
 const KEY_PREFIX = "workbench.lastWorkbenchId.";
 
-export function recordLastWorkbenchId(
-  benchTenantId: string,
-  workbenchId: string,
-): void {
+export function recordLastWorkbenchId(benchTenantId: string, workbenchId: string): void {
   try {
     window.sessionStorage.setItem(`${KEY_PREFIX}${benchTenantId}`, workbenchId);
   } catch {
diff --git a/apps/web/src/library-workbench-scope.test.ts b/apps/web/src/library-workbench-scope.test.ts
index aae4cc960c..228a4c16c3 100644
--- a/apps/web/src/library-workbench-scope.test.ts
+++ b/apps/web/src/library-workbench-scope.test.ts
@@ -35,9 +35,7 @@ describe("resolveLibraryWorkbenchScope", () => {
   });
 
   test("returns null for an id absent from the bench's workbench list", () => {
-    const workbenches = [
-      workbench({ id: "ch_1", tenancy: { tenantId: "tnt_1" } }),
-    ];
+    const workbenches = [workbench({ id: "ch_1", tenancy: { tenantId: "tnt_1" } })];
     expect(resolveLibraryWorkbenchScope(workbenches, "ch_stale")).toBeNull();
   });
 
diff --git a/apps/web/src/login-next.test.ts b/apps/web/src/login-next.test.ts
index 7b4564c92d..645a643579 100644
--- a/apps/web/src/login-next.test.ts
+++ b/apps/web/src/login-next.test.ts
@@ -27,9 +27,7 @@ describe("validatedNextPath", () => {
   });
 
   test("an absolute URL is rejected", () => {
-    expect(validatedNextPath("?next=https%3A%2F%2Fevil.example%2Fphish")).toBe(
-      "/",
-    );
+    expect(validatedNextPath("?next=https%3A%2F%2Fevil.example%2Fphish")).toBe("/");
   });
 
   test("a protocol-relative path is rejected", () => {
diff --git a/apps/web/src/main.tsx b/apps/web/src/main.tsx
index a2569fb590..61b0f08706 100644
--- a/apps/web/src/main.tsx
+++ b/apps/web/src/main.tsx
@@ -58,8 +58,7 @@ function Root() {
     message: string;
     refId?: string | undefined;
   } | null>(null);
-  const provisionedUserId =
-    session.kind === "signed-in" ? session.user.id : null;
+  const provisionedUserId = session.kind === "signed-in" ? session.user.id : null;
   const runProvisioning = useCallback(() => {
     if (provisionedUserId === null) return () => undefined;
     let cancelled = false;
@@ -83,9 +82,7 @@ function Root() {
 
   const handleSignOut = useCallback(() => {
     setSession({ kind: "signed-out" });
-    toast(
-      "Signed out. If you were on a shared computer, close the browser to be sure.",
-    );
+    toast("Signed out. If you were on a shared computer, close the browser to be sure.");
     void signOut().then((ok) => {
       if (ok) return;
       log.error("Sign-out request to the server failed");
@@ -99,9 +96,7 @@ function Root() {
   // exposes no onChange hook or externally-supplied initial value a host
   // could observe or override without forking the component.
   const themeStorageKey =
-    session.kind === "signed-in"
-      ? `corbits-theme:${session.user.id}`
-      : "corbits-theme";
+    session.kind === "signed-in" ? `corbits-theme:${session.user.id}` : "corbits-theme";
 
   return (
     <ThemeProvider storageKey={themeStorageKey} defaultMode="light">
diff --git a/apps/web/src/myra-deploy.ts b/apps/web/src/myra-deploy.ts
index 88cb83918e..69060d8191 100644
--- a/apps/web/src/myra-deploy.ts
+++ b/apps/web/src/myra-deploy.ts
@@ -34,9 +34,7 @@ async function readErrorBody(response: Response): Promise<string> {
   const envelope = type({
     error: { code: "string", userMessage: "string", refId: "string" },
   })(body);
-  return envelope instanceof type.errors
-    ? `HTTP ${response.status}`
-    : envelope.error.userMessage;
+  return envelope instanceof type.errors ? `HTTP ${response.status}` : envelope.error.userMessage;
 }
 
 /** Idempotently ensures the `package-registry` asset Myra's tarball is
@@ -46,31 +44,24 @@ export async function ensureMyraSourceAsset(
   tenantId: string,
   fetchImpl: typeof fetch = fetch,
 ): Promise<string> {
-  const created = await fetchImpl(
-    `/api/tenants/${encodeURIComponent(tenantId)}/assets`,
-    {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({
-        kind: MYRA_SOURCE_CONFIG.assetKind,
-        name: MYRA_SOURCE_CONFIG.assetName,
-        displayName: MYRA_SOURCE_CONFIG.displayName,
-      }),
-    },
-  );
+  const created = await fetchImpl(`/api/tenants/${encodeURIComponent(tenantId)}/assets`, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify({
+      kind: MYRA_SOURCE_CONFIG.assetKind,
+      name: MYRA_SOURCE_CONFIG.assetName,
+      displayName: MYRA_SOURCE_CONFIG.displayName,
+    }),
+  });
   if (created.status === 201) {
     const parsed = AssetCreatedShape(await created.json());
     if (parsed instanceof type.errors) {
-      throw new MyraDeployError(
-        `Myra's source came back an unexpected shape: ${parsed.summary}`,
-      );
+      throw new MyraDeployError(`Myra's source came back an unexpected shape: ${parsed.summary}`);
     }
     return parsed.id;
   }
   if (created.status !== 409) {
-    throw new MyraDeployError(
-      `preparing Myra's source failed: ${await readErrorBody(created)}`,
-    );
+    throw new MyraDeployError(`preparing Myra's source failed: ${await readErrorBody(created)}`);
   }
   const listed = await fetchImpl(
     `/api/tenants/${encodeURIComponent(tenantId)}/assets?kind=${MYRA_SOURCE_CONFIG.assetKind}&inherited=false`,
@@ -86,9 +77,7 @@ export async function ensureMyraSourceAsset(
       `this workbench's setup list came back an unexpected shape: ${parsed.summary}`,
     );
   }
-  const existing = parsed.find(
-    (asset) => asset.name === MYRA_SOURCE_CONFIG.assetName,
-  );
+  const existing = parsed.find((asset) => asset.name === MYRA_SOURCE_CONFIG.assetName);
   if (existing === undefined) {
     throw new MyraDeployError(
       "Myra's source reported a name conflict but is not listed on this workbench",
@@ -141,8 +130,7 @@ function tarEntry(path: string, content: Uint8Array): Uint8Array {
   for (const byte of header) checksum += byte;
   writeField(148, padOctal(checksum, 8).slice(0, 7) + "\0 ");
 
-  const paddedLength =
-    Math.ceil(content.length / TAR_BLOCK_SIZE) * TAR_BLOCK_SIZE;
+  const paddedLength = Math.ceil(content.length / TAR_BLOCK_SIZE) * TAR_BLOCK_SIZE;
   const body = new Uint8Array(paddedLength);
   body.set(content);
 
@@ -155,17 +143,14 @@ function tarEntry(path: string, content: Uint8Array): Uint8Array {
 /** Packs a `{ path: contents }` tree (as `renderWorkflowSourceTree`
  * returns) into an npm-shaped tar archive rooted at `package/`, then
  * gzips it. */
-export async function packTarball(
-  tree: Readonly<Record<string, string>>,
-): Promise<Uint8Array> {
+export async function packTarball(tree: Readonly<Record<string, string>>): Promise<Uint8Array> {
   const encoder = new TextEncoder();
   const entries: Uint8Array[] = [];
   for (const [path, contents] of Object.entries(tree)) {
     entries.push(tarEntry(`package/${path}`, encoder.encode(contents)));
   }
   const endOfArchive = new Uint8Array(TAR_BLOCK_SIZE * 2);
-  const totalLength =
-    entries.reduce((sum, entry) => sum + entry.length, 0) + endOfArchive.length;
+  const totalLength = entries.reduce((sum, entry) => sum + entry.length, 0) + endOfArchive.length;
   const tar = new Uint8Array(totalLength);
   let offset = 0;
   for (const entry of entries) {
@@ -174,17 +159,12 @@ export async function packTarball(
   }
   tar.set(endOfArchive, offset);
 
-  const gzipStream = new Blob([tar])
-    .stream()
-    .pipeThrough(new CompressionStream("gzip"));
+  const gzipStream = new Blob([tar]).stream().pipeThrough(new CompressionStream("gzip"));
   return new Uint8Array(await new Response(gzipStream).arrayBuffer());
 }
 
 function tarballFilename(): string {
-  const safeName = MYRA_SOURCE_CONFIG.packageName.replace(
-    /[^A-Za-z0-9_.@+-]/g,
-    "-",
-  );
+  const safeName = MYRA_SOURCE_CONFIG.packageName.replace(/[^A-Za-z0-9_.@+-]/g, "-");
   return `${safeName}-${MYRA_SOURCE_CONFIG.packageVersion}.tgz`;
 }
 
@@ -252,9 +232,7 @@ export async function publishMyraTarball(
 ): Promise<void> {
   const tree = renderWorkflowSourceTree({
     packageName: MYRA_SOURCE_CONFIG.packageName,
-    workflowJson: JSON.stringify(
-      buildMyraDefinitionJson(`assistant@${tenantDomain}`),
-    ),
+    workflowJson: JSON.stringify(buildMyraDefinitionJson(`assistant@${tenantDomain}`)),
   });
   const tarball = await packTarball(tree);
   const filename = tarballFilename();
@@ -267,9 +245,7 @@ export async function publishMyraTarball(
     },
   );
   if (!response.ok) {
-    throw new MyraDeployError(
-      `publishing Myra's tarball failed: ${await readErrorBody(response)}`,
-    );
+    throw new MyraDeployError(`publishing Myra's tarball failed: ${await readErrorBody(response)}`);
   }
   const parsed = TarballPutShape(await response.json());
   if (parsed instanceof type.errors) {
@@ -290,9 +266,7 @@ export function buildMyraDeployInput(args: {
   defaultSourceOfferingId: string;
 }): WorkflowDeployInput {
   if (args.sourceOfferingIds.length === 0) {
-    throw new MyraDeployError(
-      "at least one source offering id is required to start Myra",
-    );
+    throw new MyraDeployError("at least one source offering id is required to start Myra");
   }
   if (!args.sourceOfferingIds.includes(args.defaultSourceOfferingId)) {
     throw new MyraDeployError(
@@ -324,12 +298,7 @@ export async function deployMyraSource(
   fetchImpl: typeof fetch = fetch,
 ): Promise<WorkflowDeployInput> {
   const assetId = await ensureMyraSourceAsset(args.tenantId, fetchImpl);
-  await publishMyraTarball(
-    args.tenantId,
-    assetId,
-    args.tenantDomain,
-    fetchImpl,
-  );
+  await publishMyraTarball(args.tenantId, assetId, args.tenantDomain, fetchImpl);
   return buildMyraDeployInput({
     assetId,
     sourceOfferingIds: args.sourceOfferingIds,
diff --git a/apps/web/src/myra-workbench.test.ts b/apps/web/src/myra-workbench.test.ts
index 2bbdfa53ff..2c7d6de289 100644
--- a/apps/web/src/myra-workbench.test.ts
+++ b/apps/web/src/myra-workbench.test.ts
@@ -24,10 +24,7 @@ describe("myra-workbench helpers", () => {
   });
 });
 
-function definition(partial: {
-  readonly id: string;
-  readonly name: string;
-}): AgentDefinition {
+function definition(partial: { readonly id: string; readonly name: string }): AgentDefinition {
   return {
     id: partial.id,
     tenantId: "tnt_1",
@@ -49,9 +46,7 @@ describe("findMyraDefinition", () => {
   });
 
   test("returns undefined when no assistant definition is deployed", () => {
-    expect(
-      findMyraDefinition([definition({ id: "def-echo", name: "echo" })]),
-    ).toBeUndefined();
+    expect(findMyraDefinition([definition({ id: "def-echo", name: "echo" })])).toBeUndefined();
   });
 });
 
@@ -68,8 +63,7 @@ describe("ensureMyraWorkbench", () => {
   function stubFetch(respond: (path: string) => Response): RecordedCall[] {
     const calls: RecordedCall[] = [];
     globalThis.fetch = ((input: RequestInfo | URL, init?: RequestInit) => {
-      const path =
-        typeof input === "string" ? input : new URL(String(input)).pathname;
+      const path = typeof input === "string" ? input : new URL(String(input)).pathname;
       calls.push(init === undefined ? { path } : { path, init });
       return Promise.resolve(respond(path));
     }) as typeof fetch;
@@ -105,13 +99,9 @@ describe("ensureMyraWorkbench", () => {
     const result = await ensureMyraWorkbench("tnt_1");
 
     expect(result).toEqual({ kind: "ready", workbenchId: "chat-1" });
-    expect(calls.some((call) => call.path.includes("kind=workbench"))).toBe(
-      false,
-    );
+    expect(calls.some((call) => call.path.includes("kind=workbench"))).toBe(false);
     expect(calls.some((call) => call.path.includes("kind=chat"))).toBe(false);
-    const createCall = calls.find((call) =>
-      call.path.endsWith("/chat/workbenches"),
-    );
+    const createCall = calls.find((call) => call.path.endsWith("/chat/workbenches"));
     expect(createCall?.init?.method).toBe("POST");
     expect(JSON.parse(String(createCall?.init?.body))).toEqual({
       kind: "chat",
diff --git a/apps/web/src/myra-workbench.ts b/apps/web/src/myra-workbench.ts
index c3fd26e3ca..85c2df6ed3 100644
--- a/apps/web/src/myra-workbench.ts
+++ b/apps/web/src/myra-workbench.ts
@@ -3,10 +3,7 @@
 // `createDefaultAgentWorkbench`; this file's job is to name Myra as the
 // configured agent and wire it to this app's agent-definitions fetch.
 
-import {
-  createDefaultAgentWorkbench,
-  findDefinitionByAssetName,
-} from "@corbits/chat-ui";
+import { createDefaultAgentWorkbench, findDefinitionByAssetName } from "@corbits/chat-ui";
 import { WORKFLOW_CATALOG } from "@corbits/workflows/catalog";
 
 import { listAgentDefinitions, type AgentDefinition } from "./agents-api";
diff --git a/apps/web/src/navigation.tsx b/apps/web/src/navigation.tsx
index 7777bff1e6..fec5c0b8b8 100644
--- a/apps/web/src/navigation.tsx
+++ b/apps/web/src/navigation.tsx
@@ -41,9 +41,7 @@ export function NavigationProvider({
   return (
     <NavigateContext.Provider value={navigate}>
       <SignOutContext.Provider value={onSignOut}>
-        <SessionUserContext.Provider value={user}>
-          {children}
-        </SessionUserContext.Provider>
+        <SessionUserContext.Provider value={user}>{children}</SessionUserContext.Provider>
       </SignOutContext.Provider>
     </NavigateContext.Provider>
   );
@@ -82,11 +80,7 @@ export function handleLinkClick(
   navigate(to);
 }
 
-export function Link({
-  to,
-  onClick,
-  ...props
-}: ComponentProps<"a"> & { readonly to: string }) {
+export function Link({ to, onClick, ...props }: ComponentProps<"a"> & { readonly to: string }) {
   const navigate = useNavigate();
   return (
     <a
diff --git a/apps/web/src/needs-converge.test.ts b/apps/web/src/needs-converge.test.ts
index aed17db44f..1e27948f01 100644
--- a/apps/web/src/needs-converge.test.ts
+++ b/apps/web/src/needs-converge.test.ts
@@ -140,13 +140,10 @@ describe("group workbench creation sequence", () => {
       listRunMail: (input) => {
         calls.push(`listRunMail:${input.tenantId}`);
         return Promise.resolve([
-          mailMessage("<primary@example>", "ada@example.com", [
-            "bea@example.com",
-          ]),
+          mailMessage("<primary@example>", "ada@example.com", ["bea@example.com"]),
         ]);
       },
-      searchAgentMailbox: () =>
-        Promise.reject(new Error("unexpected mailbox search")),
+      searchAgentMailbox: () => Promise.reject(new Error("unexpected mailbox search")),
       readMailThread: () => Promise.reject(new Error("unexpected thread read")),
     };
 
@@ -231,15 +228,10 @@ describe("group workbench creation sequence", () => {
       },
       listRunMail: () =>
         Promise.resolve([
-          mailMessage("<primary@example>", "ada@example.com", [
-            "bea@example.com",
-          ]),
-          mailMessage("<reply@example>", "bea@example.com", [
-            "ada@example.com",
-          ]),
+          mailMessage("<primary@example>", "ada@example.com", ["bea@example.com"]),
+          mailMessage("<reply@example>", "bea@example.com", ["ada@example.com"]),
         ]),
-      searchAgentMailbox: () =>
-        Promise.reject(new Error("unexpected mailbox search")),
+      searchAgentMailbox: () => Promise.reject(new Error("unexpected mailbox search")),
       readMailThread: () => Promise.reject(new Error("unexpected thread read")),
     };
 
@@ -264,12 +256,7 @@ describe("group workbench creation sequence", () => {
       ],
     });
 
-    const report = await convergeNeedsList(
-      manifest,
-      hub,
-      store,
-      snapshotWithChild("tnt_atlas"),
-    );
+    const report = await convergeNeedsList(manifest, hub, store, snapshotWithChild("tnt_atlas"));
 
     // No resend: the recorded native Message-ID is the idempotency proof.
     // The reply carries no In-Reply-To, so it groups as a sub-thread.
@@ -314,8 +301,7 @@ describe("group workbench creation sequence", () => {
       deployWorkflow: () => Promise.reject(new Error("unexpected deploy")),
       sendRunMail: () => Promise.resolve({ messageId: "<primary@example>" }),
       listRunMail: () => Promise.resolve([]),
-      searchAgentMailbox: () =>
-        Promise.reject(new Error("unexpected mailbox search")),
+      searchAgentMailbox: () => Promise.reject(new Error("unexpected mailbox search")),
       readMailThread: () => Promise.reject(new Error("unexpected thread read")),
     };
 
@@ -325,20 +311,13 @@ describe("group workbench creation sequence", () => {
       workbenches: [{ localId: "atlas", slug: "ada-atlas", name: "Atlas" }],
     });
 
-    const report = await convergeNeedsList(
-      manifest,
-      hub,
-      store,
-      snapshotWithMyra(),
-    );
+    const report = await convergeNeedsList(manifest, hub, store, snapshotWithMyra());
 
     // No initialMessage supplied, so no primary-thread send — and no mail
     // to read means no primary thread entry either.
     expect(report.createdTenantIds).toEqual(["tnt_atlas"]);
     expect(report.primaryThreads).toEqual([]);
-    expect(store.load()).toEqual([
-      { localId: "atlas", tenantId: "tnt_atlas", kind: "workbench" },
-    ]);
+    expect(store.load()).toEqual([{ localId: "atlas", tenantId: "tnt_atlas", kind: "workbench" }]);
   });
 });
 
@@ -365,8 +344,7 @@ describe("writes after gap checks", () => {
         return Promise.resolve({ messageId: "<late@example>" });
       },
       listRunMail: () => Promise.resolve([]),
-      searchAgentMailbox: () =>
-        Promise.reject(new Error("unexpected mailbox search")),
+      searchAgentMailbox: () => Promise.reject(new Error("unexpected mailbox search")),
       readMailThread: () => Promise.reject(new Error("unexpected thread read")),
     };
   }
@@ -395,9 +373,7 @@ describe("writes after gap checks", () => {
       (error: unknown) => error,
     );
     expect(failure).toBeInstanceOf(StockHubCapabilityError);
-    expect((failure as StockHubCapabilityError).capability).toBe(
-      "deploy-workflow-inputs",
-    );
+    expect((failure as StockHubCapabilityError).capability).toBe("deploy-workflow-inputs");
     expect(calls).toEqual([]);
   });
 
@@ -471,9 +447,7 @@ describe("writes after gap checks", () => {
           localId: "bot",
           slug: "ada-bot",
           name: "Bot",
-          principals: [
-            { kind: "workflow", refId: "run_bot", roles: ["member"] },
-          ],
+          principals: [{ kind: "workflow", refId: "run_bot", roles: ["member"] }],
         },
         {
           localId: "bossy",
@@ -501,9 +475,7 @@ describe("writes after gap checks", () => {
       (error: unknown) => error,
     );
     expect(failure).toBeInstanceOf(StockHubCapabilityError);
-    expect((failure as StockHubCapabilityError).capability).toBe(
-      "project-workflow-principal",
-    );
+    expect((failure as StockHubCapabilityError).capability).toBe("project-workflow-principal");
     expect(calls).toEqual([]);
   });
 });
@@ -530,8 +502,7 @@ describe("thread-native DM derivation", () => {
       deployWorkflow: () => Promise.reject(new Error("unexpected deploy")),
       sendRunMail: () => Promise.reject(new Error("unexpected send")),
       listRunMail: () => Promise.resolve([]),
-      searchAgentMailbox: () =>
-        Promise.reject(new Error("unexpected mailbox search")),
+      searchAgentMailbox: () => Promise.reject(new Error("unexpected mailbox search")),
       readMailThread: () => Promise.reject(new Error("unexpected thread read")),
     };
 
@@ -552,10 +523,7 @@ describe("thread-native DM derivation", () => {
         mailMessage("<two@example>", "ada@example.com", ["myra@example.com"], {
           subject: "Myra daily",
         }),
-        mailMessage("<group@example>", "myra@example.com", [
-          "ada@example.com",
-          "bea@example.com",
-        ]),
+        mailMessage("<group@example>", "myra@example.com", ["ada@example.com", "bea@example.com"]),
       ],
     );
 
@@ -585,8 +553,7 @@ describe("sub-thread forking", () => {
         return Promise.resolve({ messageId: "<sub@example>" });
       },
       listRunMail: () => Promise.resolve([]),
-      searchAgentMailbox: () =>
-        Promise.reject(new Error("unexpected mailbox search")),
+      searchAgentMailbox: () => Promise.reject(new Error("unexpected mailbox search")),
       readMailThread: () => Promise.reject(new Error("unexpected thread read")),
     };
 
@@ -596,30 +563,16 @@ describe("sub-thread forking", () => {
       messageId: "<primary@example>",
       references: [] as readonly string[],
     };
-    const first = await forkSubThread(
-      storage,
-      hub,
-      HUB_SCOPE,
-      ACCOUNT_ID,
-      parent,
-      {
-        to: ["bea@example.com"],
-        subject: "Atlas delivery",
-        body: "First delivery update.",
-      },
-    );
-    const replay = await forkSubThread(
-      storage,
-      hub,
-      HUB_SCOPE,
-      ACCOUNT_ID,
-      parent,
-      {
-        to: ["bea@example.com"],
-        subject: "Atlas delivery",
-        body: "First delivery update.",
-      },
-    );
+    const first = await forkSubThread(storage, hub, HUB_SCOPE, ACCOUNT_ID, parent, {
+      to: ["bea@example.com"],
+      subject: "Atlas delivery",
+      body: "First delivery update.",
+    });
+    const replay = await forkSubThread(storage, hub, HUB_SCOPE, ACCOUNT_ID, parent, {
+      to: ["bea@example.com"],
+      subject: "Atlas delivery",
+      body: "First delivery update.",
+    });
 
     expect(first).toBe("<sub@example>");
     // Same parent + subject replays the recorded id instead of resending.
@@ -652,8 +605,7 @@ describe("sub-thread forking", () => {
         return Promise.resolve({ messageId: `<sub${next}@example>` });
       },
       listRunMail: () => Promise.resolve([]),
-      searchAgentMailbox: () =>
-        Promise.reject(new Error("unexpected mailbox search")),
+      searchAgentMailbox: () => Promise.reject(new Error("unexpected mailbox search")),
       readMailThread: () => Promise.reject(new Error("unexpected thread read")),
     };
 
@@ -663,30 +615,16 @@ describe("sub-thread forking", () => {
       messageId: "<primary@example>",
       references: [] as readonly string[],
     };
-    const first = await forkSubThread(
-      storage,
-      hub,
-      HUB_SCOPE,
-      ACCOUNT_ID,
-      parent,
-      {
-        to: ["bea@example.com"],
-        subject: "Atlas delivery",
-        body: "First delivery update.",
-      },
-    );
-    const edited = await forkSubThread(
-      storage,
-      hub,
-      HUB_SCOPE,
-      ACCOUNT_ID,
-      parent,
-      {
-        to: ["bea@example.com"],
-        subject: "Atlas delivery",
-        body: "Edited delivery update.",
-      },
-    );
+    const first = await forkSubThread(storage, hub, HUB_SCOPE, ACCOUNT_ID, parent, {
+      to: ["bea@example.com"],
+      subject: "Atlas delivery",
+      body: "First delivery update.",
+    });
+    const edited = await forkSubThread(storage, hub, HUB_SCOPE, ACCOUNT_ID, parent, {
+      to: ["bea@example.com"],
+      subject: "Atlas delivery",
+      body: "Edited delivery update.",
+    });
 
     // An edited body is a new send, never a replay of the recorded id.
     expect(first).toBe("<sub1@example>");
@@ -714,8 +652,7 @@ describe("sub-thread forking", () => {
         return Promise.resolve({ messageId: `<sub${next}@example>` });
       },
       listRunMail: () => Promise.resolve([]),
-      searchAgentMailbox: () =>
-        Promise.reject(new Error("unexpected mailbox search")),
+      searchAgentMailbox: () => Promise.reject(new Error("unexpected mailbox search")),
       readMailThread: () => Promise.reject(new Error("unexpected thread read")),
     };
 
@@ -725,30 +662,16 @@ describe("sub-thread forking", () => {
       messageId: "<primary@example>",
       references: [] as readonly string[],
     };
-    const first = await forkSubThread(
-      storage,
-      hub,
-      HUB_SCOPE,
-      ACCOUNT_ID,
-      parent,
-      {
-        to: ["bea@example.com"],
-        subject: "Atlas delivery",
-        body: "First delivery update.",
-      },
-    );
-    const retargeted = await forkSubThread(
-      storage,
-      hub,
-      HUB_SCOPE,
-      ACCOUNT_ID,
-      parent,
-      {
-        to: ["bea@example.com", "cal@example.com"],
-        subject: "Atlas delivery",
-        body: "First delivery update.",
-      },
-    );
+    const first = await forkSubThread(storage, hub, HUB_SCOPE, ACCOUNT_ID, parent, {
+      to: ["bea@example.com"],
+      subject: "Atlas delivery",
+      body: "First delivery update.",
+    });
+    const retargeted = await forkSubThread(storage, hub, HUB_SCOPE, ACCOUNT_ID, parent, {
+      to: ["bea@example.com", "cal@example.com"],
+      subject: "Atlas delivery",
+      body: "First delivery update.",
+    });
 
     expect(first).toBe("<sub1@example>");
     expect(retargeted).toBe("<sub2@example>");
@@ -767,8 +690,7 @@ describe("stock-only fetch hub", () => {
     return (async (url: unknown, init?: { method?: string; body?: string }) => {
       const method = init?.method ?? "GET";
       const path = String(url).split("?")[0] ?? String(url);
-      const body =
-        init?.body === undefined ? undefined : JSON.parse(init.body as string);
+      const body = init?.body === undefined ? undefined : JSON.parse(init.body as string);
       seen.push({ method, url: String(url), body });
       const key = `${method} ${path}`;
       const payload = key in routes ? routes[key] : routes[path];
@@ -782,25 +704,19 @@ describe("stock-only fetch hub", () => {
   test("mailbox search and thread reads stay typed upstream gaps", async () => {
     const hub = createFetchStockHub(stubFetch([], {}));
 
-    const search = await hub
-      .searchAgentMailbox({ address: "myra@example.com" })
-      .then(
-        () => null,
-        (error: unknown) => error,
-      );
-    expect(search).toBeInstanceOf(StockHubCapabilityError);
-    expect((search as StockHubCapabilityError).capability).toBe(
-      "agent-mailbox-reads",
+    const search = await hub.searchAgentMailbox({ address: "myra@example.com" }).then(
+      () => null,
+      (error: unknown) => error,
     );
+    expect(search).toBeInstanceOf(StockHubCapabilityError);
+    expect((search as StockHubCapabilityError).capability).toBe("agent-mailbox-reads");
 
     const thread = await hub.readMailThread({ messageId: "<a@example>" }).then(
       () => null,
       (error: unknown) => error,
     );
     expect(thread).toBeInstanceOf(StockHubCapabilityError);
-    expect((thread as StockHubCapabilityError).capability).toBe(
-      "thread-fork-context",
-    );
+    expect((thread as StockHubCapabilityError).capability).toBe("thread-fork-context");
   });
 
   test("every request stays on stock routes with no custom idempotency keys", async () => {
diff --git a/apps/web/src/needs-converge.ts b/apps/web/src/needs-converge.ts
index 6c9ca37946..206336d608 100644
--- a/apps/web/src/needs-converge.ts
+++ b/apps/web/src/needs-converge.ts
@@ -93,11 +93,7 @@ export type StockHub = {
    * owner — the stock route the first-signup installer step uses to
    * create the primary tenant; a workbench child tenant always supplies
    * it. */
-  createTenant(input: {
-    name: string;
-    slug: string;
-    parentId?: string;
-  }): Promise<HubTenant>;
+  createTenant(input: { name: string; slug: string; parentId?: string }): Promise<HubTenant>;
   /**
    * Invites by email and assigns `role` (a system role name, e.g.
    * "member") in the same op — the stock invite route's `roleId` is the
@@ -105,10 +101,7 @@ export type StockHub = {
    * principal lands with zero roles and every subsequent read 403s
    * (CL-8085/CL-8131 fix).
    */
-  inviteMember(
-    tenantId: string,
-    input: { email: string; role: string },
-  ): Promise<void>;
+  inviteMember(tenantId: string, input: { email: string; role: string }): Promise<void>;
   deployWorkflow(tenantId: string, input: WorkflowDeployInput): Promise<void>;
   sendRunMail(input: SendRunMailInput): Promise<{ messageId: string }>;
   listRunMail(input: { tenantId: string }): Promise<MailMessage[]>;
@@ -179,17 +172,13 @@ export async function findOwnedTenants(hub: StockHub): Promise<HubTenant[]> {
       membership.roles.some((role) => role.name === "owner"),
   );
   return (
-    await Promise.all(
-      activeOwned.map((membership) => hub.getTenant(membership.tenantId)),
-    )
+    await Promise.all(activeOwned.map((membership) => hub.getTenant(membership.tenantId)))
   ).filter((tenant): tenant is HubTenant => tenant !== null);
 }
 
 export async function readHubSnapshot(hub: StockHub): Promise<HubSnapshot> {
   const tenants = await findOwnedTenants(hub);
-  const primaryCandidates = tenants.filter(
-    (tenant) => tenant.parentId === null,
-  );
+  const primaryCandidates = tenants.filter((tenant) => tenant.parentId === null);
   const [primaryTenant] = primaryCandidates;
   if (primaryCandidates.length !== 1 || primaryTenant === undefined) {
     throw new StockHubCapabilityError(
@@ -197,16 +186,11 @@ export async function readHubSnapshot(hub: StockHub): Promise<HubSnapshot> {
       `Sign-in must leave exactly one owned top-level home; found ${primaryCandidates.length}.`,
     );
   }
-  const childTenants = tenants.filter(
-    (tenant) => tenant.parentId === primaryTenant.id,
-  );
+  const childTenants = tenants.filter((tenant) => tenant.parentId === primaryTenant.id);
   const [primaryPrincipals, childRows] = await Promise.all([
     hub.listPrincipals(primaryTenant.id),
     Promise.all(
-      childTenants.map(
-        async (tenant) =>
-          [tenant.id, await hub.listPrincipals(tenant.id)] as const,
-      ),
+      childTenants.map(async (tenant) => [tenant.id, await hub.listPrincipals(tenant.id)] as const),
     ),
   ]);
   return {
@@ -248,9 +232,7 @@ async function convergeWorkbenchTenant(
   workbench: NeedsList["workbenches"][number],
 ): Promise<{ tenantId: string; created: boolean }> {
   const stored = store.load().find((row) => row.localId === workbench.localId);
-  const existing = snapshot.childTenants.find(
-    (tenant) => tenant.id === stored?.tenantId,
-  );
+  const existing = snapshot.childTenants.find((tenant) => tenant.id === stored?.tenantId);
   if (existing !== undefined && stored !== undefined) {
     return { tenantId: existing.id, created: false };
   }
@@ -355,12 +337,7 @@ export async function convergeNeedsList(
   // primary-thread first message.
   const createdTenantIds: string[] = [];
   for (const workbench of manifest.workbenches) {
-    const converged = await convergeWorkbenchTenant(
-      hub,
-      store,
-      snapshot,
-      workbench,
-    );
+    const converged = await convergeWorkbenchTenant(hub, store, snapshot, workbench);
     if (converged.created) createdTenantIds.push(converged.tenantId);
     await convergePrimaryThread(hub, store, workbench, converged.tenantId);
   }
@@ -370,9 +347,7 @@ export async function convergeNeedsList(
   // recorded primary id) plus forked sub-threads.
   const primaryThreads: PrimaryThread[] = [];
   for (const workbench of manifest.workbenches) {
-    const stored = store
-      .load()
-      .find((row) => row.localId === workbench.localId);
+    const stored = store.load().find((row) => row.localId === workbench.localId);
     if (stored === undefined) continue;
     const mail = await hub.listRunMail({ tenantId: stored.tenantId });
     const grouped = deriveThreads(mail);
@@ -388,9 +363,7 @@ export async function convergeNeedsList(
     primaryThreads.push({
       tenantId: stored.tenantId,
       rootMessageId,
-      subThreads: grouped.filter(
-        (thread) => thread.rootMessageId !== rootMessageId,
-      ),
+      subThreads: grouped.filter((thread) => thread.rootMessageId !== rootMessageId),
     });
   }
 
@@ -548,10 +521,7 @@ async function resolveRoleId(
   return found.id;
 }
 
-async function readJson(
-  response: Response,
-  operation: string,
-): Promise<unknown> {
+async function readJson(response: Response, operation: string): Promise<unknown> {
   if (!response.ok) {
     throw new StockHubRequestError(
       operation,
@@ -608,23 +578,14 @@ async function fetchAllPages<T>(
 export function createFetchStockHub(fetchImpl: typeof fetch = fetch): StockHub {
   return {
     async listMyPrincipals() {
-      return fetchAllPages(
-        fetchImpl,
-        "/api/me/principals",
-        "listMyPrincipals",
-        (body) => parseBoundary(MembershipPageShape, body, "listMyPrincipals"),
+      return fetchAllPages(fetchImpl, "/api/me/principals", "listMyPrincipals", (body) =>
+        parseBoundary(MembershipPageShape, body, "listMyPrincipals"),
       );
     },
     async getTenant(id) {
-      const response = await fetchImpl(
-        `/api/tenants/${encodeURIComponent(id)}`,
-      );
+      const response = await fetchImpl(`/api/tenants/${encodeURIComponent(id)}`);
       if (response.status === 404) return null;
-      const parsed = parseBoundary(
-        TenantShape,
-        await readJson(response, "getTenant"),
-        "getTenant",
-      );
+      const parsed = parseBoundary(TenantShape, await readJson(response, "getTenant"), "getTenant");
       return { ...parsed, parentId: parsed.parentId ?? null };
     },
     async listPrincipals(tenantId) {
@@ -650,41 +611,32 @@ export function createFetchStockHub(fetchImpl: typeof fetch = fetch): StockHub {
     async inviteMember(tenantId, input) {
       const roleId = await resolveRoleId(fetchImpl, tenantId, input.role);
       await readJson(
-        await fetchImpl(
-          `/api/tenants/${encodeURIComponent(tenantId)}/members/invite`,
-          {
-            method: "POST",
-            headers: { "content-type": "application/json" },
-            body: JSON.stringify({ email: input.email, roleId }),
-          },
-        ),
+        await fetchImpl(`/api/tenants/${encodeURIComponent(tenantId)}/members/invite`, {
+          method: "POST",
+          headers: { "content-type": "application/json" },
+          body: JSON.stringify({ email: input.email, roleId }),
+        }),
         "inviteMember",
       );
     },
     async deployWorkflow(tenantId, input) {
       await readJson(
-        await fetchImpl(
-          `/api/tenants/${encodeURIComponent(tenantId)}/workflows/deployments`,
-          {
-            method: "POST",
-            headers: { "content-type": "application/json" },
-            body: JSON.stringify(input),
-          },
-        ),
+        await fetchImpl(`/api/tenants/${encodeURIComponent(tenantId)}/workflows/deployments`, {
+          method: "POST",
+          headers: { "content-type": "application/json" },
+          body: JSON.stringify(input),
+        }),
         "deployWorkflow",
       );
     },
     async sendRunMail(input) {
       const { tenantId, ...message } = input;
       const body = await readJson(
-        await fetchImpl(
-          `/api/tenants/${encodeURIComponent(tenantId)}/mailbox/messages`,
-          {
-            method: "POST",
-            headers: { "content-type": "application/json" },
-            body: JSON.stringify(message),
-          },
-        ),
+        await fetchImpl(`/api/tenants/${encodeURIComponent(tenantId)}/mailbox/messages`, {
+          method: "POST",
+          headers: { "content-type": "application/json" },
+          body: JSON.stringify(message),
+        }),
         "sendRunMail",
       );
       return parseBoundary(SentMailShape, body, "sendRunMail");
diff --git a/apps/web/src/needs-list.test.ts b/apps/web/src/needs-list.test.ts
index e61318571d..8713668b76 100644
--- a/apps/web/src/needs-list.test.ts
+++ b/apps/web/src/needs-list.test.ts
@@ -69,9 +69,7 @@ describe("portable needs-list", () => {
       account: { id: "usr_1", email: "ada@example.com", name: "Ada" },
       myraDefinitionRefId: "assistant",
     });
-    expect(
-      parseNeedsList({ ...manifest, version: 2 }) instanceof type.errors,
-    ).toBe(true);
+    expect(parseNeedsList({ ...manifest, version: 2 }) instanceof type.errors).toBe(true);
   });
 });
 
@@ -80,11 +78,7 @@ describe("account and hub scoped child-tenant store", () => {
     const storage = memoryStorage();
     const ada = childTenantStore(storage, "https://one.example", "usr_ada");
     const bea = childTenantStore(storage, "https://one.example", "usr_bea");
-    const otherHub = childTenantStore(
-      storage,
-      "https://two.example",
-      "usr_ada",
-    );
+    const otherHub = childTenantStore(storage, "https://two.example", "usr_ada");
 
     ada.record({
       localId: "atlas",
@@ -118,34 +112,29 @@ describe("account and hub scoped child-tenant store", () => {
     const storage = memoryStorage({
       "workbench.child-tenants:https%3A%2F%2Fone.example:usr_ada": "not json",
     });
-    expect(
-      childTenantStore(storage, "https://one.example", "usr_ada").load(),
-    ).toEqual([]);
+    expect(childTenantStore(storage, "https://one.example", "usr_ada").load()).toEqual([]);
   });
 
   test("keeps valid rows when one row is corrupt, and drops legacy DM rows", () => {
     const storage = memoryStorage({
-      "workbench.child-tenants:https%3A%2F%2Fone.example:usr_ada":
-        JSON.stringify([
-          {
-            localId: "atlas",
-            tenantId: "tnt_atlas",
-            kind: "workbench",
-            primaryThreadMessageId: "<primary@example>",
-          },
-          { localId: "", tenantId: "tnt_bad", kind: "workbench" },
-          {
-            localId: "dm:run_myra",
-            tenantId: "tnt_dm",
-            kind: "chat",
-            principalRefId: "run_myra",
-          },
-          null,
-        ]),
+      "workbench.child-tenants:https%3A%2F%2Fone.example:usr_ada": JSON.stringify([
+        {
+          localId: "atlas",
+          tenantId: "tnt_atlas",
+          kind: "workbench",
+          primaryThreadMessageId: "<primary@example>",
+        },
+        { localId: "", tenantId: "tnt_bad", kind: "workbench" },
+        {
+          localId: "dm:run_myra",
+          tenantId: "tnt_dm",
+          kind: "chat",
+          principalRefId: "run_myra",
+        },
+        null,
+      ]),
     });
-    expect(
-      childTenantStore(storage, "https://one.example", "usr_ada").load(),
-    ).toEqual([
+    expect(childTenantStore(storage, "https://one.example", "usr_ada").load()).toEqual([
       {
         localId: "atlas",
         tenantId: "tnt_atlas",
@@ -188,21 +177,19 @@ describe("account and hub scoped thread-link store", () => {
 
   test("treats corrupt client state as empty and skips bad rows", () => {
     const storage = memoryStorage({
-      "workbench.thread-links:https%3A%2F%2Fone.example:usr_ada":
-        JSON.stringify([
-          { workbenchLocalId: "atlas", messageId: "<sub@example>" },
-          { workbenchLocalId: "", messageId: "<bad@example>" },
-          null,
-        ]),
+      "workbench.thread-links:https%3A%2F%2Fone.example:usr_ada": JSON.stringify([
+        { workbenchLocalId: "atlas", messageId: "<sub@example>" },
+        { workbenchLocalId: "", messageId: "<bad@example>" },
+        null,
+      ]),
     });
-    expect(
-      threadLinkStore(storage, "https://one.example", "usr_ada").load(),
-    ).toEqual([{ workbenchLocalId: "atlas", messageId: "<sub@example>" }]);
+    expect(threadLinkStore(storage, "https://one.example", "usr_ada").load()).toEqual([
+      { workbenchLocalId: "atlas", messageId: "<sub@example>" },
+    ]);
     expect(
       threadLinkStore(
         memoryStorage({
-          "workbench.thread-links:https%3A%2F%2Fone.example:usr_ada":
-            "not json",
+          "workbench.thread-links:https%3A%2F%2Fone.example:usr_ada": "not json",
         }),
         "https://one.example",
         "usr_ada",
diff --git a/apps/web/src/onboarding.ts b/apps/web/src/onboarding.ts
index 46895c6981..af3c993312 100644
--- a/apps/web/src/onboarding.ts
+++ b/apps/web/src/onboarding.ts
@@ -35,18 +35,14 @@ export type ActiveCredentialProbe =
  * so the caller treats it as the weaker check it is: only a confirmed
  * miss means "no key", never a probe failure (CL-6868).
  */
-export async function hasActiveCredential(
-  tenantId: string,
-): Promise<ActiveCredentialProbe> {
+export async function hasActiveCredential(tenantId: string): Promise<ActiveCredentialProbe> {
   try {
     const response = await fetch(`/api/tenants/${tenantId}/credentials`);
     if (!response.ok) return { kind: "error" };
     const body: unknown = await response.json().catch(() => null);
     const parsed = CredentialsPage(body);
     if (parsed instanceof type.errors) return { kind: "error" };
-    return parsed.data.some((c) => c.status === "active")
-      ? { kind: "active" }
-      : { kind: "none" };
+    return parsed.data.some((c) => c.status === "active") ? { kind: "active" } : { kind: "none" };
   } catch {
     return { kind: "error" };
   }
@@ -81,9 +77,7 @@ export type ProvisionOutcome =
 export async function triggerFirstLoginProvisioning(): Promise<ProvisionOutcome> {
   try {
     const owned = await findOwnedTenants(createFetchStockHub());
-    return owned.length === 0
-      ? { kind: "needs-onboarding" }
-      : { kind: "existing-member" };
+    return owned.length === 0 ? { kind: "needs-onboarding" } : { kind: "existing-member" };
   } catch (cause) {
     const refId = reportError(cause, { operation: "first_login_provisioning" });
     return { kind: "error", message: FALLBACK_ERROR_MESSAGE, refId };
@@ -137,9 +131,7 @@ export type AgentReadiness =
  * absence stays an explicit, testable outcome — a 404/410 answers
  * `route-gone`, never the generic agent error below.
  */
-export async function fetchAgentReadiness(
-  tenantId: string,
-): Promise<AgentReadiness> {
+export async function fetchAgentReadiness(tenantId: string): Promise<AgentReadiness> {
   try {
     const response = await fetch(
       `/api/onboarding/provisioning-status?${new URLSearchParams({ tenantId })}`,
@@ -159,12 +151,9 @@ export async function fetchAgentReadiness(
       throw new Error(`Agent readiness request failed (${response.status})`);
     }
     const parsed = ProvisioningStatus(body);
-    if (parsed instanceof type.errors)
-      throw new Error("Invalid agent readiness response");
+    if (parsed instanceof type.errors) throw new Error("Invalid agent readiness response");
     if (parsed.kind === "ready") return { kind: "ready" };
-    return parsed.setupAgentReady
-      ? { kind: "chat-ready" }
-      : { kind: "preparing" };
+    return parsed.setupAgentReady ? { kind: "chat-ready" } : { kind: "preparing" };
   } catch (cause) {
     const refId = reportError(cause, {
       operation: "agent_readiness",
diff --git a/apps/web/src/onboarding/onboarding-layout.tsx b/apps/web/src/onboarding/onboarding-layout.tsx
index 70a6a681d0..398f9f9db4 100644
--- a/apps/web/src/onboarding/onboarding-layout.tsx
+++ b/apps/web/src/onboarding/onboarding-layout.tsx
@@ -10,11 +10,7 @@ import { DitherBackground } from "../auth/dither-background";
  * the auth form column — the credential step's provider picker and the
  * guidance cards need more room than a login form does.
  */
-export function OnboardingLayout({
-  children,
-}: {
-  readonly children: ReactNode;
-}) {
+export function OnboardingLayout({ children }: { readonly children: ReactNode }) {
   return (
     <div className="onboarding-shell">
       <main className="onboarding-form-col">
@@ -31,11 +27,7 @@ export function OnboardingLayout({
       </main>
 
       <div aria-hidden className="onboarding-panel">
-        <img
-          src="/images/hero-dither.png"
-          alt=""
-          className="onboarding-panel-fallback"
-        />
+        <img src="/images/hero-dither.png" alt="" className="onboarding-panel-fallback" />
         <DitherBackground className="onboarding-panel-dither" />
       </div>
     </div>
diff --git a/apps/web/src/onboarding/provider-connect-step.tsx b/apps/web/src/onboarding/provider-connect-step.tsx
index 9d2b9c4533..6d1278c91d 100644
--- a/apps/web/src/onboarding/provider-connect-step.tsx
+++ b/apps/web/src/onboarding/provider-connect-step.tsx
@@ -8,10 +8,7 @@
 // an earlier run of this same step) skips this UI entirely: see
 // `resolveExistingOffering` in `onboarding-page.tsx`.
 import { Button, Input, RadioGroup, RadioOption } from "@corbits/react-ui";
-import {
-  getResolvedCatalog,
-  shadowOffering,
-} from "@corbits/inference-settings";
+import { getResolvedCatalog, shadowOffering } from "@corbits/inference-settings";
 import { reportError } from "@corbits/error-sink";
 import { useState } from "react";
 import type { FormEvent } from "react";
@@ -76,9 +73,7 @@ export type ExistingOffering = {
  * all: every visible offering becomes `sourceOfferingIds`, and the
  * lowest-priority one is the default — the same rule
  * `resolveRealSourceOfferingIds` in `packages/onboarding` applies. */
-export async function resolveExistingOffering(
-  tenantId: string,
-): Promise<ExistingOffering | null> {
+export async function resolveExistingOffering(tenantId: string): Promise<ExistingOffering | null> {
   const models = await getResolvedCatalog(tenantId);
   const offerings = models
     .flatMap((model) => model.offerings)
@@ -107,8 +102,7 @@ export function ProviderConnectStep({
   const [submitting, setSubmitting] = useState(false);
 
   const option =
-    PROVIDER_OPTIONS.find((candidate) => candidate.plugin === selected) ??
-    PROVIDER_OPTIONS[0];
+    PROVIDER_OPTIONS.find((candidate) => candidate.plugin === selected) ?? PROVIDER_OPTIONS[0];
 
   async function handleSubmit(event: FormEvent<HTMLFormElement>) {
     event.preventDefault();
@@ -135,19 +129,14 @@ export function ProviderConnectStep({
         operation: "onboarding.connect-provider",
         tenantId,
       });
-      onError(
-        `${cause instanceof Error ? cause.message : String(cause)} (ref ${refId})`,
-      );
+      onError(`${cause instanceof Error ? cause.message : String(cause)} (ref ${refId})`);
     } finally {
       setSubmitting(false);
     }
   }
 
   return (
-    <form
-      className="onboarding-credential-form"
-      onSubmit={(event) => void handleSubmit(event)}
-    >
+    <form className="onboarding-credential-form" onSubmit={(event) => void handleSubmit(event)}>
       <RadioGroup
         name="provider"
         label="Inference provider"
diff --git a/apps/web/src/pages/agent-detail-page.tsx b/apps/web/src/pages/agent-detail-page.tsx
index 4d2645731a..be1e17da06 100644
--- a/apps/web/src/pages/agent-detail-page.tsx
+++ b/apps/web/src/pages/agent-detail-page.tsx
@@ -207,54 +207,50 @@ export function AgentDetailPage({
   const trimmedName = displayName.trim();
   const trimmedPrompt = systemPrompt.trim();
   const instructionsDirty =
-    trimmedName !== definition.displayName ||
-    trimmedPrompt !== detail.systemPrompt;
+    trimmedName !== definition.displayName || trimmedPrompt !== detail.systemPrompt;
   // Compared against the loaded value alone, so picking "Bench default" on
   // an agent with a pinned model is a real edit — clearing a model is a
   // change like any other, not the absence of one.
   const modelDirty = model !== (detail.model ?? "");
   const skillsDirty = !sameSkillSet(skills, detail.skills);
   const dirty = instructionsDirty || modelDirty || skillsDirty;
-  const saveable =
-    dirty && trimmedName !== "" && trimmedPrompt !== "" && save.kind !== "busy";
+  const saveable = dirty && trimmedName !== "" && trimmedPrompt !== "" && save.kind !== "busy";
 
   async function onSave() {
     setSave({ kind: "busy" });
-    const parts: readonly { part: SavePart; write: () => Promise<unknown> }[] =
-      [
-        ...(instructionsDirty
-          ? [
-              {
-                part: "instructions" as const,
-                write: () =>
-                  updateAgentInstructions(tenantId, definition.id, {
-                    name: trimmedName,
-                    systemPrompt: trimmedPrompt,
-                  }),
-              },
-            ]
-          : []),
-        ...(modelDirty
-          ? [
-              {
-                part: "model" as const,
-                write: () =>
-                  model === ""
-                    ? clearAgentModel(tenantId, definition.id)
-                    : setAgentModel(tenantId, definition.id, model),
-              },
-            ]
-          : []),
-        ...(skillsDirty
-          ? [
-              {
-                part: "skills" as const,
-                write: () =>
-                  updateAgentSkills(tenantId, definition.id, [...skills]),
-              },
-            ]
-          : []),
-      ];
+    const parts: readonly { part: SavePart; write: () => Promise<unknown> }[] = [
+      ...(instructionsDirty
+        ? [
+            {
+              part: "instructions" as const,
+              write: () =>
+                updateAgentInstructions(tenantId, definition.id, {
+                  name: trimmedName,
+                  systemPrompt: trimmedPrompt,
+                }),
+            },
+          ]
+        : []),
+      ...(modelDirty
+        ? [
+            {
+              part: "model" as const,
+              write: () =>
+                model === ""
+                  ? clearAgentModel(tenantId, definition.id)
+                  : setAgentModel(tenantId, definition.id, model),
+            },
+          ]
+        : []),
+      ...(skillsDirty
+        ? [
+            {
+              part: "skills" as const,
+              write: () => updateAgentSkills(tenantId, definition.id, [...skills]),
+            },
+          ]
+        : []),
+    ];
 
     const saved: SavePart[] = [];
     for (const { part, write } of parts) {
@@ -270,10 +266,7 @@ export function AgentDetailPage({
           saved,
           failed: {
             part,
-            message: describeApiError(
-              cause,
-              `saving this agent's ${SAVE_PART_COPY[part]}`,
-            ),
+            message: describeApiError(cause, `saving this agent's ${SAVE_PART_COPY[part]}`),
           },
         });
         return;
@@ -312,11 +305,7 @@ export function AgentDetailPage({
   async function onToggleArchived() {
     setLifecycle({ kind: "busy" });
     try {
-      await setAgentDefinitionStatus(
-        tenantId,
-        definition.id,
-        archived ? "deployed" : "stopped",
-      );
+      await setAgentDefinitionStatus(tenantId, definition.id, archived ? "deployed" : "stopped");
       setLifecycle({ kind: "idle" });
       onStatusChanged();
     } catch (cause: unknown) {
@@ -335,10 +324,7 @@ export function AgentDetailPage({
   return (
     <div className="flex h-full min-h-0 flex-col">
       <StageTopBar
-        crumbs={[
-          { label: "Agents", href: AGENTS_PATH_PREFIX },
-          { label: definition.displayName },
-        ]}
+        crumbs={[{ label: "Agents", href: AGENTS_PATH_PREFIX }, { label: definition.displayName }]}
         actions={
           <>
             <Button
@@ -355,9 +341,7 @@ export function AgentDetailPage({
               variant="outline"
               disabled={lifecycle.kind === "busy"}
               onConfirm={() => void onToggleArchived()}
-              aria-label={
-                archived ? "Restore this agent" : "Archive this agent"
-              }
+              aria-label={archived ? "Restore this agent" : "Archive this agent"}
             >
               {archived ? "Restore" : "Archive"}
             </ConfirmButton>
@@ -394,8 +378,7 @@ export function AgentDetailPage({
             ) : null}
             {dirty ? (
               <p className="text-sm text-muted-foreground">
-                Unsaved edits — Duplicate copies the saved version, so it waits
-                until you save.
+                Unsaved edits — Duplicate copies the saved version, so it waits until you save.
               </p>
             ) : null}
 
@@ -413,12 +396,9 @@ export function AgentDetailPage({
                   value={displayName}
                   onChange={(event) => setDisplayName(event.target.value)}
                 />
-                <p className="font-mono text-xs text-muted-foreground">
-                  {definition.name}
-                </p>
+                <p className="font-mono text-xs text-muted-foreground">{definition.name}</p>
                 <p className="text-xs text-muted-foreground">
-                  The handle above is this agent&apos;s address and its URL. It
-                  never changes.
+                  The handle above is this agent&apos;s address and its URL. It never changes.
                 </p>
               </div>
               <div className="flex items-center gap-2">
@@ -440,8 +420,8 @@ export function AgentDetailPage({
                 </label>
                 {models.length === 0 ? (
                   <p className="text-sm text-muted-foreground">
-                    No models in this bench&apos;s catalog yet — connect a
-                    provider in Settings and this agent can pick one.
+                    No models in this bench&apos;s catalog yet — connect a provider in Settings and
+                    this agent can pick one.
                   </p>
                 ) : (
                   <Select
@@ -452,10 +432,7 @@ export function AgentDetailPage({
                   >
                     <option value="">Bench default</option>
                     {models.map((catalogModel) => (
-                      <option
-                        key={catalogModel.canonicalName}
-                        value={catalogModel.canonicalName}
-                      >
+                      <option key={catalogModel.canonicalName} value={catalogModel.canonicalName}>
                         {catalogModel.displayName ?? catalogModel.canonicalName}
                       </option>
                     ))}
@@ -477,10 +454,7 @@ export function AgentDetailPage({
               />
             </Section>
 
-            <Section
-              title="Skills"
-              description="Pinned skills this agent can load while it works."
-            >
+            <Section title="Skills" description="Pinned skills this agent can load while it works.">
               {skillsError !== undefined ? (
                 <p className="mb-3 text-sm text-destructive" role="alert">
                   Could not load agent skills: {skillsError}
@@ -500,8 +474,7 @@ export function AgentDetailPage({
             >
               {recent.length === 0 ? (
                 <p className="text-sm text-muted-foreground">
-                  No runs yet — start a chat with this agent and its runs appear
-                  here.
+                  No runs yet — start a chat with this agent and its runs appear here.
                 </p>
               ) : (
                 <Table aria-label="Recent runs">
@@ -516,10 +489,7 @@ export function AgentDetailPage({
                     {recent.map((run) => (
                       <TableRow key={run.id}>
                         <TableCell className="font-mono text-xs">
-                          <Link
-                            to={runDetailPath(run.id)}
-                            className="underline underline-offset-2"
-                          >
+                          <Link to={runDetailPath(run.id)} className="underline underline-offset-2">
                             {run.id}
                           </Link>
                         </TableCell>
@@ -528,9 +498,7 @@ export function AgentDetailPage({
                             {RUN_STATUS_COPY[run.status].label}
                           </Badge>
                         </TableCell>
-                        <TableCell className="text-muted-foreground">
-                          {run.createdAt}
-                        </TableCell>
+                        <TableCell className="text-muted-foreground">{run.createdAt}</TableCell>
                       </TableRow>
                     ))}
                   </TableBody>
@@ -611,12 +579,7 @@ export function AgentDetailRoute({
   function shell(body: ReactNode) {
     return (
       <div className="flex h-full min-h-0 flex-col">
-        <StageTopBar
-          crumbs={[
-            { label: "Agents", href: AGENTS_PATH_PREFIX },
-            { label: slug },
-          ]}
-        />
+        <StageTopBar crumbs={[{ label: "Agents", href: AGENTS_PATH_PREFIX }, { label: slug }]} />
         <PageShell width="full" className="page-fill">
           {body}
         </PageShell>
diff --git a/apps/web/src/pages/agent-skills-picker.tsx b/apps/web/src/pages/agent-skills-picker.tsx
index 46699ae6a5..c24f7ef465 100644
--- a/apps/web/src/pages/agent-skills-picker.tsx
+++ b/apps/web/src/pages/agent-skills-picker.tsx
@@ -121,9 +121,7 @@ export function AgentSkillsPicker({
             checked={selected.includes(skill.name)}
             disabled={disabled}
             onCheckedChange={() => toggle(skill.name)}
-            {...(skill.description !== ""
-              ? { description: skill.description }
-              : {})}
+            {...(skill.description !== "" ? { description: skill.description } : {})}
           />
         );
       })}
diff --git a/apps/web/src/pages/agents-page.tsx b/apps/web/src/pages/agents-page.tsx
index 5398e13355..c036497c1f 100644
--- a/apps/web/src/pages/agents-page.tsx
+++ b/apps/web/src/pages/agents-page.tsx
@@ -45,10 +45,7 @@ import {
   type AgentInstance,
   type CatalogModel,
 } from "../agents-api";
-import {
-  purposeAgentDefinitions,
-  type AgentDefinitionWithDisplayName,
-} from "../agents-directory";
+import { purposeAgentDefinitions, type AgentDefinitionWithDisplayName } from "../agents-directory";
 import { useBench } from "../bench-context";
 import { isAdditiveSelectClick } from "../activatable-row";
 import { Link } from "../navigation";
@@ -102,9 +99,7 @@ export function agentRosterStatus(
   instances: readonly AgentInstance[],
 ): AgentRosterStatus {
   if (definition.status === "stopped") return "archived";
-  const own = instances.filter(
-    (instance) => instance.definitionId === definition.id,
-  );
+  const own = instances.filter((instance) => instance.definitionId === definition.id);
   if (own.some((instance) => instance.status === "running")) return "running";
   if (own.some((instance) => instance.status === "error")) return "blocked";
   return "idle";
@@ -155,10 +150,7 @@ export async function archiveDefinitions(
 
 /** The toast copy for a bulk archive — an honest count either way, never
  * a blanket success/failure message that could describe a partial run. */
-export function archiveResultToast({
-  succeededIds,
-  failedIds,
-}: ArchiveDefinitionsResult): string {
+export function archiveResultToast({ succeededIds, failedIds }: ArchiveDefinitionsResult): string {
   const total = succeededIds.length + failedIds.length;
   if (failedIds.length === 0) {
     return succeededIds.length === 1
@@ -166,9 +158,7 @@ export function archiveResultToast({
       : `Archived ${succeededIds.length} agents`;
   }
   if (succeededIds.length === 0) {
-    return failedIds.length === 1
-      ? "Couldn't archive that agent"
-      : "Couldn't archive those agents";
+    return failedIds.length === 1 ? "Couldn't archive that agent" : "Couldn't archive those agents";
   }
   return `Archived ${succeededIds.length} of ${total} — the rest failed`;
 }
@@ -374,15 +364,10 @@ function AgentDetailPanel({
   return (
     <aside className="flex min-h-0 min-w-0 flex-col gap-4 border-l border-border bg-card p-4">
       <div>
-        <p className="truncate text-sm font-semibold">
-          {definition.displayName}
-        </p>
-        <p className="truncate font-mono text-xs text-muted-foreground">
-          {definition.name}
-        </p>
+        <p className="truncate text-sm font-semibold">{definition.displayName}</p>
+        <p className="truncate font-mono text-xs text-muted-foreground">{definition.name}</p>
         <p className="mt-1 text-sm text-muted-foreground">
-          {definition.description !== null &&
-          definition.description !== undefined
+          {definition.description !== null && definition.description !== undefined
             ? definition.description
             : "No description"}
         </p>
@@ -391,10 +376,7 @@ function AgentDetailPanel({
         <div className="flex items-center justify-between gap-2">
           <dt className="text-muted-foreground">Status</dt>
           <dd>
-            <Badge
-              tone={DEFINITION_STATUS_TONE[definition.status]}
-              className="normal-case"
-            >
+            <Badge tone={DEFINITION_STATUS_TONE[definition.status]} className="normal-case">
               {DEFINITION_STATUS_LABEL[definition.status]}
             </Badge>
           </dd>
@@ -402,9 +384,7 @@ function AgentDetailPanel({
         <div className="flex items-center justify-between gap-2">
           <dt className="text-muted-foreground">Model</dt>
           <dd>
-            {capabilities.status === "loading" ? (
-              <Skeleton className="h-4 w-16" />
-            ) : null}
+            {capabilities.status === "loading" ? <Skeleton className="h-4 w-16" /> : null}
             {capabilities.status === "error" ? (
               <span className="text-destructive">{capabilities.message}</span>
             ) : null}
@@ -486,10 +466,7 @@ export function AgentsPage({
 }: {
   readonly tenantId: string | null;
   readonly definitions: readonly AgentDefinitionWithDisplayName[];
-  readonly workbenches: ReadonlyMap<
-    string,
-    readonly DefinitionWorkbenchInstance[]
-  >;
+  readonly workbenches: ReadonlyMap<string, readonly DefinitionWorkbenchInstance[]>;
   readonly instances: readonly AgentInstance[];
   /** When the top-level-runs fetch failed — Status/Runs · 7d must not pretend
    * the history is empty (CL-6842). */
@@ -515,14 +492,9 @@ export function AgentsPage({
     [definitions],
   );
   const selection = useListSelection({ ids: definitionIds });
-  const allSelected =
-    definitions.length > 0 && selection.selectedCount === definitions.length;
+  const allSelected = definitions.length > 0 && selection.selectedCount === definitions.length;
   const headerChecked: SelectionCheckboxState =
-    selection.selectedCount === 0
-      ? false
-      : allSelected
-        ? true
-        : "indeterminate";
+    selection.selectedCount === 0 ? false : allSelected ? true : "indeterminate";
 
   return (
     <div className="flex h-full min-h-0 flex-col">
@@ -531,11 +503,7 @@ export function AgentsPage({
         subtitle={`${definitions.length} agents`}
         actions={
           tenantId !== null ? (
-            <Button
-              size="sm"
-              onClick={() => onCreateOpenChange(true)}
-              aria-label="Create an agent"
-            >
+            <Button size="sm" onClick={() => onCreateOpenChange(true)} aria-label="Create an agent">
               <Plus /> New agent
             </Button>
           ) : null
@@ -545,10 +513,7 @@ export function AgentsPage({
         <div className="min-h-0 min-w-0 flex-1 overflow-auto">
           <PageShell width="full" className="page-fill">
             {skillsError !== undefined ? (
-              <p
-                className="px-4 pb-3 text-sm text-destructive sm:px-7"
-                role="alert"
-              >
+              <p className="px-4 pb-3 text-sm text-destructive sm:px-7" role="alert">
                 Could not load agent skills: {skillsError}
               </p>
             ) : null}
@@ -571,27 +536,17 @@ export function AgentsPage({
                       <TableHead className="w-10">
                         <SelectionCheckbox
                           checked={headerChecked}
-                          onToggle={() =>
-                            allSelected
-                              ? selection.clear()
-                              : selection.selectAll()
-                          }
+                          onToggle={() => (allSelected ? selection.clear() : selection.selectAll())}
                           rowLabel="all agents"
                           ariaLabel="Select all agents"
                           className="opacity-100"
                         />
                       </TableHead>
                       <TableHead>Agent</TableHead>
-                      <TableHead className="hidden lg:table-cell">
-                        Description
-                      </TableHead>
+                      <TableHead className="hidden lg:table-cell">Description</TableHead>
                       <TableHead>Status</TableHead>
-                      <TableHead className="hidden lg:table-cell">
-                        Model
-                      </TableHead>
-                      <TableHead className="hidden text-right lg:table-cell">
-                        Runs · 7d
-                      </TableHead>
+                      <TableHead className="hidden lg:table-cell">Model</TableHead>
+                      <TableHead className="hidden text-right lg:table-cell">Runs · 7d</TableHead>
                     </TableRow>
                   </TableHeader>
                   <TableBody>
@@ -604,56 +559,35 @@ export function AgentsPage({
                         instancesError,
                       );
                       const status =
-                        runs.kind === "error"
-                          ? null
-                          : agentRosterStatus(definition, instances);
+                        runs.kind === "error" ? null : agentRosterStatus(definition, instances);
                       return (
                         <TableRow
                           key={definition.id}
-                          data-state={
-                            selectedId === definition.id
-                              ? "selected"
-                              : undefined
-                          }
+                          data-state={selectedId === definition.id ? "selected" : undefined}
                           className="group cursor-pointer"
                           role="button"
                           tabIndex={0}
                           onClick={(event) => {
-                            if (
-                              event.shiftKey ||
-                              isAdditiveSelectClick(event)
-                            ) {
+                            if (event.shiftKey || isAdditiveSelectClick(event)) {
                               selection.toggle(definition.id, {
                                 shiftKey: event.shiftKey,
                               });
                               return;
                             }
-                            onSelect(
-                              selectedId === definition.id
-                                ? null
-                                : definition.id,
-                            );
+                            onSelect(selectedId === definition.id ? null : definition.id);
                           }}
                           onKeyDown={(event) => {
                             if (event.key !== "Enter" && event.key !== " ") {
                               return;
                             }
                             event.preventDefault();
-                            onSelect(
-                              selectedId === definition.id
-                                ? null
-                                : definition.id,
-                            );
+                            onSelect(selectedId === definition.id ? null : definition.id);
                           }}
                         >
-                          <TableCell
-                            onClick={(event) => event.stopPropagation()}
-                          >
+                          <TableCell onClick={(event) => event.stopPropagation()}>
                             <SelectionCheckbox
                               checked={isSelected}
-                              onToggle={(modifiers) =>
-                                selection.toggle(definition.id, modifiers)
-                              }
+                              onToggle={(modifiers) => selection.toggle(definition.id, modifiers)}
                               rowLabel={definition.displayName}
                             />
                           </TableCell>
@@ -675,12 +609,7 @@ export function AgentsPage({
                             ) : (
                               <span className="inline-flex items-center gap-1.5">
                                 {status === "running" ? (
-                                  <StatusDot
-                                    label="Live"
-                                    live
-                                    tone="emphasis"
-                                    size="xs"
-                                  />
+                                  <StatusDot label="Live" live tone="emphasis" size="xs" />
                                 ) : null}
                                 <Badge
                                   tone={AGENT_ROSTER_STATUS_TONE[status]}
@@ -812,9 +741,7 @@ export function AgentsRoute({
   }
 
   const definitions = purposeAgentDefinitions(directory.data.definitions);
-  const workbenches = workbenchesByDefinition(
-    activity.kind === "ready" ? activity.chats : [],
-  );
+  const workbenches = workbenchesByDefinition(activity.kind === "ready" ? activity.chats : []);
 
   return (
     <AgentsPage
@@ -823,17 +750,13 @@ export function AgentsRoute({
       workbenches={workbenches}
       instances={runsQuery.data ?? []}
       instancesError={
-        runsQuery.isError
-          ? describeApiError(runsQuery.error, "loading run history")
-          : null
+        runsQuery.isError ? describeApiError(runsQuery.error, "loading run history") : null
       }
       models={directory.data.models}
       selectedId={selectedId}
       onSelect={(id) =>
         navigate(
-          id === null
-            ? AGENTS_PATH_PREFIX
-            : `${AGENTS_PATH_PREFIX}/${encodeURIComponent(id)}`,
+          id === null ? AGENTS_PATH_PREFIX : `${AGENTS_PATH_PREFIX}/${encodeURIComponent(id)}`,
         )
       }
       createOpen={createOpen}
diff --git a/apps/web/src/pages/chat-page.tsx b/apps/web/src/pages/chat-page.tsx
index 68d4bd8a13..fc7be989c0 100644
--- a/apps/web/src/pages/chat-page.tsx
+++ b/apps/web/src/pages/chat-page.tsx
@@ -37,19 +37,12 @@ import {
 } from "../workbench-path";
 import { reportWorkbenchNotFound } from "../workbench-not-found-event";
 import { recordLastWorkbenchId } from "../last-workbench";
-import {
-  ONBOARDING_PATH,
-  MISSION_CONTROL_PATH,
-  NEW_WORKBENCH_PATH,
-} from "../routes";
+import { ONBOARDING_PATH, MISSION_CONTROL_PATH, NEW_WORKBENCH_PATH } from "../routes";
 import {
   useProviderHealthBanner,
   useRequestPluginsConnect,
 } from "../shell/provider-health-context";
-import {
-  useOpenArtifactInCanvas,
-  useOpenProfileInCanvas,
-} from "../shell/canvas-availability";
+import { useOpenArtifactInCanvas, useOpenProfileInCanvas } from "../shell/canvas-availability";
 import { useRegisterComposerInsert } from "../shell/composer-insertion";
 import { StageTopBar } from "../shell/stage-top-bar";
 import { tenantResolutionFromBench } from "../shell/tenant-resolution";
@@ -112,10 +105,7 @@ export function ChatPage({
   // any more (that stack still backs the artifact canvas's cursor sync,
   // which has no chat stream of its own to piggyback on).
   const approvalActions = useMemo(
-    () =>
-      tenantId === null
-        ? undefined
-        : createChatApprovalActions(tenantId, queryClient),
+    () => (tenantId === null ? undefined : createChatApprovalActions(tenantId, queryClient)),
     [tenantId, queryClient],
   );
   const blockResponses = useMemo(
@@ -126,10 +116,7 @@ export function ChatPage({
     [tenantId, workbenchId],
   );
   const connectServiceActions = useMemo(
-    () =>
-      tenantId === null
-        ? undefined
-        : createChatConnectServiceActions(tenantId, path),
+    () => (tenantId === null ? undefined : createChatConnectServiceActions(tenantId, path)),
     [tenantId, path],
   );
 
@@ -213,9 +200,7 @@ export function ChatPage({
       const blobId = part.blobId;
       void fetchWorkbenchBlob(tenantId, workbenchId, blobId)
         .then((contentBase64) => {
-          openArtifactInCanvas(
-            artifactContentFromBlob(part, blobId, contentBase64),
-          );
+          openArtifactInCanvas(artifactContentFromBlob(part, blobId, contentBase64));
         })
         .catch((err) => {
           openArtifactInCanvas(
@@ -251,9 +236,7 @@ export function ChatPage({
       tenant={tenant}
       {...(currentUser !== undefined ? { currentUser } : {})}
       workbenchId={workbenchId}
-      onWorkbenchChange={(nextWorkbenchId) =>
-        navigate(workbenchPath(nextWorkbenchId))
-      }
+      onWorkbenchChange={(nextWorkbenchId) => navigate(workbenchPath(nextWorkbenchId))}
       onOpenProfile={openProfile}
       registerComposerInsert={registerComposerInsert}
       settingsOpen={settingsOpen}
@@ -261,11 +244,7 @@ export function ChatPage({
         if (workbenchId === null) return;
         navigate(
           open
-            ? workbenchSettingsPath(
-                workbenchId,
-                section ?? settingsSection,
-                entityId,
-              )
+            ? workbenchSettingsPath(workbenchId, section ?? settingsSection, entityId)
             : workbenchPath(workbenchId),
         );
       }}
@@ -277,13 +256,7 @@ export function ChatPage({
       settingsEntityId={settingsEntityId}
       onSettingsEntityIdChange={(entityId) => {
         if (workbenchId === null) return;
-        navigate(
-          workbenchSettingsPath(
-            workbenchId,
-            settingsSection,
-            entityId ?? undefined,
-          ),
-        );
+        navigate(workbenchSettingsPath(workbenchId, settingsSection, entityId ?? undefined));
       }}
       onOpenArtifact={openArtifact}
       onOpenArtifactInLibrary={openArtifactInLibrary}
@@ -292,9 +265,7 @@ export function ChatPage({
       onConnectModel={handleConnectModel}
       {...(approvalActions !== undefined ? { approvalActions } : {})}
       {...(blockResponses !== undefined ? { blockResponses } : {})}
-      {...(connectServiceActions !== undefined
-        ? { connectServiceActions }
-        : {})}
+      {...(connectServiceActions !== undefined ? { connectServiceActions } : {})}
       listMembers={listMembers}
       onWorkbenchNotFound={reportWorkbenchNotFound}
       onGoToMissionControl={() => navigate(MISSION_CONTROL_PATH)}
@@ -304,9 +275,7 @@ export function ChatPage({
       headerSlot={(chrome) => (
         <StageTopBar
           crumbs={chrome.crumbs}
-          {...(chrome.subtitle !== undefined
-            ? { subtitle: chrome.subtitle }
-            : {})}
+          {...(chrome.subtitle !== undefined ? { subtitle: chrome.subtitle } : {})}
           {...(chrome.actions !== undefined ? { actions: chrome.actions } : {})}
         />
       )}
diff --git a/apps/web/src/pages/create-agent-panel.tsx b/apps/web/src/pages/create-agent-panel.tsx
index 2f5532f56f..bf9b04ec55 100644
--- a/apps/web/src/pages/create-agent-panel.tsx
+++ b/apps/web/src/pages/create-agent-panel.tsx
@@ -63,11 +63,7 @@ import type { AvatarColor } from "@corbits/chat-ui";
 import { ApiQueryError } from "@corbits/api-query";
 
 import type { AgentDefinition, CatalogModel } from "../agents-api";
-import {
-  createAgentDefinition,
-  draftAgentDefinition,
-  listCatalogModels,
-} from "../agents-api";
+import { createAgentDefinition, draftAgentDefinition, listCatalogModels } from "../agents-api";
 import { isValidSlug, slugify } from "@corbits/slug";
 
 import { AgentSkillsPicker } from "./agent-skills-picker";
@@ -190,8 +186,7 @@ const SUGGESTIONS: readonly Suggestion[] = [
   {
     name: "Research Assistant",
     cardDescription: "Digs into questions you drop in its workbench",
-    purpose:
-      "Digs into questions dropped in its workbench and comes back with a grounded answer.",
+    purpose: "Digs into questions dropped in its workbench and comes back with a grounded answer.",
   },
   {
     name: "Daily Digest",
@@ -205,10 +200,7 @@ const SUGGESTIONS: readonly Suggestion[] = [
  * on a button that cannot be used. `null` once nothing blocks
  * submission. Purpose is never a gate — a name alone is a supported
  * happy path. */
-function blockedReason(
-  values: FormValues,
-  draftFailed: boolean,
-): string | null {
+function blockedReason(values: FormValues, draftFailed: boolean): string | null {
   if (values.name.trim() === "") return "Add a name to continue.";
   if (!isValidSlug(values.handle.trim())) {
     return "Fix the handle below — lowercase letters, digits, and hyphens only.";
@@ -237,8 +229,7 @@ export function CreateAgentPanel({
   readonly onCreated: (definition: AgentDefinition) => void;
 }) {
   const [values, setValues] = useState<FormValues>(EMPTY_VALUES);
-  const [avatarColor, setAvatarColor] =
-    useState<AvatarColor>(CORBIT_DEFAULT_COLOR);
+  const [avatarColor, setAvatarColor] = useState<AvatarColor>(CORBIT_DEFAULT_COLOR);
   const [handleTouched, setHandleTouched] = useState(false);
   const [advancedOpen, setAdvancedOpen] = useState(false);
   const [draftFailed, setDraftFailed] = useState(false);
@@ -300,8 +291,7 @@ export function CreateAgentPanel({
   }
 
   function handleAdvancedChange(next: Record<string, unknown>) {
-    const handle =
-      typeof next.handle === "string" ? next.handle : values.handle;
+    const handle = typeof next.handle === "string" ? next.handle : values.handle;
     const model = typeof next.model === "string" ? next.model : values.model;
     const manualSystemPrompt =
       typeof next.manualSystemPrompt === "string"
@@ -318,10 +308,7 @@ export function CreateAgentPanel({
   const models = modelsState.kind === "ready" ? modelsState.models : [];
   const blocked = blockedReason(values, draftFailed);
 
-  async function handleSubmit(effective?: {
-    readonly name: string;
-    readonly purpose: string;
-  }) {
+  async function handleSubmit(effective?: { readonly name: string; readonly purpose: string }) {
     const name = effective?.name ?? values.name;
     const purpose = effective?.purpose ?? values.purpose;
     const handle = handleTouched ? values.handle : slugify(name);
@@ -361,10 +348,7 @@ export function CreateAgentPanel({
       } catch (cause) {
         setDraftFailed(true);
         setSubmitError(
-          submitErrorFromCause(
-            cause,
-            "Myra couldn't draft a starting prompt for this agent.",
-          ),
+          submitErrorFromCause(cause, "Myra couldn't draft a starting prompt for this agent."),
         );
         setSubmitting(false);
         return;
@@ -384,9 +368,7 @@ export function CreateAgentPanel({
       onOpenChange(false);
       onCreated(created);
     } catch (cause) {
-      setSubmitError(
-        submitErrorFromCause(cause, "Could not create the agent."),
-      );
+      setSubmitError(submitErrorFromCause(cause, "Could not create the agent."));
     } finally {
       setSubmitting(false);
     }
@@ -402,8 +384,8 @@ export function CreateAgentPanel({
         <DialogHeader>
           <DialogTitle>New agent</DialogTitle>
           <DialogDescription>
-            A name is enough to start — Myra drafts the starting instructions,
-            and you teach it the rest in conversation.
+            A name is enough to start — Myra drafts the starting instructions, and you teach it the
+            rest in conversation.
           </DialogDescription>
         </DialogHeader>
         <DialogBody>
@@ -413,17 +395,14 @@ export function CreateAgentPanel({
               {submitError.refId !== undefined ? (
                 <>
                   <br />
-                  <span className="text-xs">
-                    Reference: {submitError.refId}
-                  </span>
+                  <span className="text-xs">Reference: {submitError.refId}</span>
                 </>
               ) : null}
             </p>
           )}
           {modelsState.kind === "error" && (
             <p className="mb-3 text-sm text-muted-foreground" role="status">
-              Model catalog unavailable — the agent will use the workbench
-              default.
+              Model catalog unavailable — the agent will use the workbench default.
             </p>
           )}
 
@@ -491,12 +470,8 @@ export function CreateAgentPanel({
                   disabled={submitting}
                   onClick={() => applySuggestion(suggestion)}
                 >
-                  <span className="create-agent-suggestion-title">
-                    {suggestion.name}
-                  </span>
-                  <span className="create-agent-suggestion-desc">
-                    {suggestion.cardDescription}
-                  </span>
+                  <span className="create-agent-suggestion-title">{suggestion.name}</span>
+                  <span className="create-agent-suggestion-desc">{suggestion.cardDescription}</span>
                 </button>
               ))}
             </div>
diff --git a/apps/web/src/pages/create-skill-dialog.tsx b/apps/web/src/pages/create-skill-dialog.tsx
index e88f8726d4..1c1eda1dc2 100644
--- a/apps/web/src/pages/create-skill-dialog.tsx
+++ b/apps/web/src/pages/create-skill-dialog.tsx
@@ -56,9 +56,7 @@ export function validationIssues(values: SkillCreateInput): readonly string[] {
   if (name === "") {
     issues.push("Name is required.");
   } else if (!SKILL_NAME_PATTERN.test(name)) {
-    issues.push(
-      "Name must be lowercase letters, digits, and hyphens — no whitespace or capitals.",
-    );
+    issues.push("Name must be lowercase letters, digits, and hyphens — no whitespace or capitals.");
   } else if (name.length > 64) {
     issues.push("Name must be at most 64 characters.");
   }
@@ -97,10 +95,7 @@ export function CreateSkillDialog({
   function handleFormChange(next: Record<string, unknown>) {
     setValues({
       name: typeof next.name === "string" ? next.name : values.name,
-      displayName:
-        typeof next.displayName === "string"
-          ? next.displayName
-          : values.displayName,
+      displayName: typeof next.displayName === "string" ? next.displayName : values.displayName,
     });
   }
 
@@ -132,9 +127,8 @@ export function CreateSkillDialog({
         <DialogHeader>
           <DialogTitle>Create skill</DialogTitle>
           <DialogDescription>
-            Names a new skill asset in this workbench. Its instructions are
-            written separately — there is no stock hub route yet to author
-            SKILL.md content in this dialog.
+            Names a new skill asset in this workbench. Its instructions are written separately —
+            there is no stock hub route yet to author SKILL.md content in this dialog.
           </DialogDescription>
         </DialogHeader>
         <DialogBody>
@@ -144,10 +138,7 @@ export function CreateSkillDialog({
             </p>
           )}
           {showIssues && issues.length > 0 && (
-            <ul
-              className="mb-3 list-inside list-disc text-sm text-destructive"
-              role="alert"
-            >
+            <ul className="mb-3 list-inside list-disc text-sm text-destructive" role="alert">
               {issues.map((issue) => (
                 <li key={issue}>{issue}</li>
               ))}
@@ -161,11 +152,7 @@ export function CreateSkillDialog({
           />
         </DialogBody>
         <DialogFooter>
-          <Button
-            type="button"
-            variant="outline"
-            onClick={() => handleOpenChange(false)}
-          >
+          <Button type="button" variant="outline" onClick={() => handleOpenChange(false)}>
             Cancel
           </Button>
           <Button
diff --git a/apps/web/src/pages/diff-view.tsx b/apps/web/src/pages/diff-view.tsx
index 628472bb3f..47a8be934e 100644
--- a/apps/web/src/pages/diff-view.tsx
+++ b/apps/web/src/pages/diff-view.tsx
@@ -5,13 +5,7 @@
 // computes the script exactly once per render — the change summary is read
 // off the same result the rows come from.
 
-import {
-  Badge,
-  Table,
-  TableBody,
-  TableCell,
-  TableRow,
-} from "@corbits/react-ui";
+import { Badge, Table, TableBody, TableCell, TableRow } from "@corbits/react-ui";
 import { diffText } from "@corbits/text-diff";
 import type { DiffLine } from "@corbits/text-diff";
 import { useMemo } from "react";
@@ -57,8 +51,7 @@ export function DiffView({
     return (
       <div className="flex flex-col gap-1" data-testid="diff-too-large">
         <p className="text-sm text-foreground">
-          This change is too large to show line by line — showing a summary
-          only.
+          This change is too large to show line by line — showing a summary only.
         </p>
         <p className="font-mono text-xs tabular-nums text-muted-foreground">
           {`${String(diff.beforeLines)} lines before, ${String(
@@ -74,9 +67,7 @@ export function DiffView({
   return (
     <div className="flex flex-col gap-2" data-testid="diff-view">
       <p className="font-mono text-xs tabular-nums text-muted-foreground">
-        {`+${String(diff.totals.added)} added, −${String(
-          diff.totals.removed,
-        )} removed`}
+        {`+${String(diff.totals.added)} added, −${String(diff.totals.removed)} removed`}
       </p>
       <div className="max-h-96 overflow-auto rounded-md border border-border bg-muted/30">
         <Table className="w-full border-collapse font-mono text-xs leading-relaxed">
diff --git a/apps/web/src/pages/insights-page-render.test.tsx b/apps/web/src/pages/insights-page-render.test.tsx
index 92e248a745..7d5c0d2ca8 100644
--- a/apps/web/src/pages/insights-page-render.test.tsx
+++ b/apps/web/src/pages/insights-page-render.test.tsx
@@ -57,11 +57,7 @@ function InsightsPageAtPath({
   return (
     <NavigationProvider navigate={() => {}}>
       <BenchContext.Provider value={benchState}>
-        <InsightsPage
-          path={path}
-          runs={readyEmpty(runs)}
-          routines={readyEmpty([])}
-        />
+        <InsightsPage path={path} runs={readyEmpty(runs)} routines={readyEmpty([])} />
       </BenchContext.Provider>
     </NavigationProvider>
   );
@@ -72,12 +68,7 @@ function render(path: string, runs?: RunsStub) {
   document.body.appendChild(container);
   root = createRoot(container);
   act(() => {
-    root?.render(
-      <InsightsPageAtPath
-        path={path}
-        {...(runs === undefined ? {} : { runs })}
-      />,
-    );
+    root?.render(<InsightsPageAtPath path={path} {...(runs === undefined ? {} : { runs })} />);
   });
   return container;
 }
@@ -126,9 +117,7 @@ describe("InsightsPage 'Running now' strip", () => {
   // recent-runs slice. Persist has not settled (`endedAt` absent), so the
   // fire is live — not remapped to completed by the abandoned-fire window.
   test("a run started 8 days ago that is still running stays in the strip and the KPI", () => {
-    const eightDaysAgo = new Date(
-      Date.now() - 8 * 24 * 60 * 60 * 1000,
-    ).toISOString();
+    const eightDaysAgo = new Date(Date.now() - 8 * 24 * 60 * 60 * 1000).toISOString();
     const el = render("/insights", {
       data: [
         {
diff --git a/apps/web/src/pages/insights-page.test.ts b/apps/web/src/pages/insights-page.test.ts
index ea1b4574a3..d687cc896a 100644
--- a/apps/web/src/pages/insights-page.test.ts
+++ b/apps/web/src/pages/insights-page.test.ts
@@ -4,9 +4,7 @@ import { FIRE_RUNNING_WINDOW_MS } from "@corbits/workflows/client";
 import { elapsedLabel, isRunningNow } from "./insights-page";
 import type { InsightsRun } from "../insights-api";
 
-function run(
-  partial: Partial<InsightsRun> & Pick<InsightsRun, "id" | "createdAt">,
-): InsightsRun {
+function run(partial: Partial<InsightsRun> & Pick<InsightsRun, "id" | "createdAt">): InsightsRun {
   return {
     tenantId: "t1",
     definitionId: "wfd_a",
@@ -90,9 +88,7 @@ describe("isRunningNow", () => {
       isRunningNow(
         run({
           id: "stale",
-          createdAt: new Date(
-            Date.now() - FIRE_RUNNING_WINDOW_MS - 1,
-          ).toISOString(),
+          createdAt: new Date(Date.now() - FIRE_RUNNING_WINDOW_MS - 1).toISOString(),
           status: "running",
         }),
       ),
diff --git a/apps/web/src/pages/insights-page.tsx b/apps/web/src/pages/insights-page.tsx
index f4a2e4afdd..bdf274be71 100644
--- a/apps/web/src/pages/insights-page.tsx
+++ b/apps/web/src/pages/insights-page.tsx
@@ -35,11 +35,7 @@ import {
   type RunStatus,
 } from "@corbits/react-ui";
 import { ChartBar } from "@corbits/icons";
-import {
-  runOutcomeStatus,
-  runStatusLabel,
-  withListingAbandoned,
-} from "@corbits/workflows/client";
+import { runOutcomeStatus, runStatusLabel, withListingAbandoned } from "@corbits/workflows/client";
 import type * as React from "react";
 import { useEffect, useState } from "react";
 
@@ -50,11 +46,7 @@ import { workbenchesQueryKey, listWorkbenches } from "@corbits/chat-ui";
 import { useBench } from "../bench-context";
 import { resolveWorkbenchInsightsScope } from "../insights-workbench-scope";
 import { parseInsightsPath } from "../insights-path";
-import {
-  insightsTopLevelRunsPath,
-  TopLevelRunsSchema,
-  type InsightsRun,
-} from "../insights-api";
+import { insightsTopLevelRunsPath, TopLevelRunsSchema, type InsightsRun } from "../insights-api";
 import {
   computeInsightsStats,
   durationLabel,
@@ -91,9 +83,7 @@ export function formatWhen(iso: string): string {
  * so the badge tone always comes from `RUN_STATUS_TONE`, the one source
  * every run-status tone reads from, rather than a second opinion invented
  * on this page. */
-const WORKFLOW_RUN_STATUS_ALIAS: Readonly<
-  Record<WorkflowRunStatus, RunStatus>
-> = {
+const WORKFLOW_RUN_STATUS_ALIAS: Readonly<Record<WorkflowRunStatus, RunStatus>> = {
   deployed: "completed",
   running: "running",
   updating: "running",
@@ -174,10 +164,7 @@ function onRowActivate(onActivate: () => void) {
   };
 }
 
-function runsDetailLabel(stats: {
-  readonly running: number;
-  readonly errored: number;
-}): string {
+function runsDetailLabel(stats: { readonly running: number; readonly errored: number }): string {
   if (stats.running > 0) {
     return `${formatCount(stats.running)} running`;
   }
@@ -210,10 +197,7 @@ function useTickingNow(enabled: boolean): number {
  * with an in-flight turn stays in flight however old it is; without an
  * explicit no-in-flight signal, missing `turns` is not abandonment.
  */
-export function isRunningNow(
-  run: InsightsRun,
-  now: number = Date.now(),
-): boolean {
+export function isRunningNow(run: InsightsRun, now: number = Date.now()): boolean {
   const outcome = runOutcomeStatus(withListingAbandoned(run, now), now);
   return outcome === "running" || outcome === "updating";
 }
@@ -245,9 +229,7 @@ function RunningNowStrip({
   readonly runs: readonly InsightsRun[];
   readonly onOpenRun: (id: string) => void;
 }) {
-  const maybeLive = runs.some(
-    (run) => run.status === "running" || run.status === "updating",
-  );
+  const maybeLive = runs.some((run) => run.status === "running" || run.status === "updating");
   const now = useTickingNow(maybeLive);
   const running = runs.filter((run) => isRunningNow(run, now));
   if (running.length === 0) return null;
@@ -263,25 +245,15 @@ function RunningNowStrip({
       <ul className="insights-running-now-strip">
         {running.map((run) => (
           <li key={run.id}>
-            <button
-              type="button"
-              className="insights-flight"
-              onClick={() => onOpenRun(run.id)}
-            >
+            <button type="button" className="insights-flight" onClick={() => onOpenRun(run.id)}>
               <StatusDot
                 label={runStatusLabel("running")}
                 tone={RUN_STATUS_DOT_TONE.running}
                 live
               />
-              <span className="insights-flight-name">
-                {runDisplayName(run)}
-              </span>
-              <span className="insights-flight-elapsed">
-                {elapsedLabel(run.createdAt, now)}
-              </span>
-              <Badge tone={RUN_STATUS_TONE.running}>
-                {runStatusLabel("running")}
-              </Badge>
+              <span className="insights-flight-name">{runDisplayName(run)}</span>
+              <span className="insights-flight-elapsed">{elapsedLabel(run.createdAt, now)}</span>
+              <Badge tone={RUN_STATUS_TONE.running}>{runStatusLabel("running")}</Badge>
             </button>
           </li>
         ))}
@@ -310,9 +282,7 @@ function RecentRunRows({
           >
             <TableCell>
               <div className="flex min-w-0 flex-col gap-0.5">
-                <strong className="truncate text-sm font-semibold">
-                  {runDisplayName(row)}
-                </strong>
+                <strong className="truncate text-sm font-semibold">{runDisplayName(row)}</strong>
                 <span className="truncate text-xs text-muted-foreground">
                   {formatWhen(row.createdAt)}
                 </span>
@@ -326,10 +296,7 @@ function RecentRunRows({
           </TableRow>
         ))}
         <TableRow {...onRowActivate(onOpenRuns)}>
-          <TableCell
-            colSpan={2}
-            className="font-semibold text-primary-emphasis"
-          >
+          <TableCell colSpan={2} className="font-semibold text-primary-emphasis">
             All runs →
           </TableCell>
         </TableRow>
@@ -415,11 +382,7 @@ function InsightsLanding({
           <h2>Recent runs</h2>
         </div>
         {recent.length > 0 ? (
-          <RecentRunRows
-            runs={recent}
-            onOpenRun={onOpenRun}
-            onOpenRuns={onOpenRuns}
-          />
+          <RecentRunRows runs={recent} onOpenRun={onOpenRun} onOpenRuns={onOpenRuns} />
         ) : (
           <RichEmptyState
             icon={<ChartBar />}
@@ -503,10 +466,7 @@ export function InsightsRunsHistory({
   return (
     <div className="flex h-full min-h-0 flex-col">
       <StageTopBar
-        crumbs={[
-          { label: "Insights", href: INSIGHTS_PATH_PREFIX },
-          { label: "Run history" },
-        ]}
+        crumbs={[{ label: "Insights", href: INSIGHTS_PATH_PREFIX }, { label: "Run history" }]}
         subtitle={`${purpose.length} runs`}
       />
       <div className="min-h-0 flex-1 overflow-y-auto">
@@ -534,9 +494,7 @@ export function InsightsRunsHistory({
                   ))}
                 </div>
                 {nextCursor !== null ? (
-                  <p className="insights-note">
-                    Showing the 100 most recent runs.
-                  </p>
+                  <p className="insights-note">Showing the 100 most recent runs.</p>
                 ) : null}
               </>
             )}
@@ -547,11 +505,7 @@ export function InsightsRunsHistory({
   );
 }
 
-export function InsightsRunDetail({
-  run,
-}: {
-  readonly run: InsightsRun | null;
-}) {
+export function InsightsRunDetail({ run }: { readonly run: InsightsRun | null }) {
   return (
     <div className="flex h-full min-h-0 flex-col">
       <StageTopBar
@@ -567,18 +521,13 @@ export function InsightsRunDetail({
             <StatGrid columns={3}>
               <InsightsStat
                 label="Status"
-                value={
-                  run !== null ? runStatusLabel(insightsRunStatus(run)) : "—"
-                }
+                value={run !== null ? runStatusLabel(insightsRunStatus(run)) : "—"}
               />
               <InsightsStat
                 label="Started"
                 value={run !== null ? formatWhen(run.createdAt) : "—"}
               />
-              <InsightsStat
-                label="Duration"
-                value={run !== null ? runDurationLabel(run) : "—"}
-              />
+              <InsightsStat label="Duration" value={run !== null ? runDurationLabel(run) : "—"} />
             </StatGrid>
             {run === null ? (
               <RichEmptyState
@@ -608,8 +557,7 @@ export function InsightsPage({
   const navigate = useNavigate();
   const { mode, runId } = parseInsightsPath(path);
 
-  const unauth =
-    runs.kind === "unauthenticated" || routines.kind === "unauthenticated";
+  const unauth = runs.kind === "unauthenticated" || routines.kind === "unauthenticated";
 
   if (unauth) {
     return (
@@ -639,9 +587,7 @@ export function InsightsPage({
         runs={runsData}
         loading={runs.kind === "loading"}
         nextCursor={runsNextCursor}
-        onOpenRun={(id) =>
-          navigate(`${INSIGHTS_RUNS_PATH}/${encodeURIComponent(id)}`)
-        }
+        onOpenRun={(id) => navigate(`${INSIGHTS_RUNS_PATH}/${encodeURIComponent(id)}`)}
       />
     );
   }
@@ -672,9 +618,7 @@ export function InsightsPage({
             runsNextCursor={runsNextCursor}
             routines={routinesData}
             loading={loading}
-            onOpenRun={(id) =>
-              navigate(`${INSIGHTS_RUNS_PATH}/${encodeURIComponent(id)}`)
-            }
+            onOpenRun={(id) => navigate(`${INSIGHTS_RUNS_PATH}/${encodeURIComponent(id)}`)}
             onOpenRuns={() => navigate(INSIGHTS_RUNS_PATH)}
           />
         </PageShell>
@@ -747,10 +691,7 @@ function InsightsWorkbenchPage({
   return (
     <div className="flex h-full min-h-0 flex-col">
       <StageTopBar
-        crumbs={[
-          { label: "Insights", href: INSIGHTS_PATH_PREFIX },
-          { label: resolution.title },
-        ]}
+        crumbs={[{ label: "Insights", href: INSIGHTS_PATH_PREFIX }, { label: resolution.title }]}
       />
       <div className="min-h-0 flex-1 overflow-y-auto">
         <PageShell width="full" className="page-fill">
@@ -769,10 +710,7 @@ export function InsightsRoute({ path }: { readonly path?: string }) {
   const { selectedTenantId } = useBench();
   const navigate = useNavigate();
   const currentPath =
-    path ??
-    (typeof window !== "undefined"
-      ? window.location.pathname
-      : INSIGHTS_PATH_PREFIX);
+    path ?? (typeof window !== "undefined" ? window.location.pathname : INSIGHTS_PATH_PREFIX);
   const { mode, workbenchId } = parseInsightsPath(currentPath);
 
   const runs = useAPIQuery(
@@ -793,30 +731,19 @@ export function InsightsRoute({ path }: { readonly path?: string }) {
   const runsForPage: APIQuery<{
     data: readonly InsightsRun[];
     nextCursor: string | null;
-  }> =
-    selectedTenantId === null
-      ? { kind: "ready", data: { data: [], nextCursor: null } }
-      : runs;
+  }> = selectedTenantId === null ? { kind: "ready", data: { data: [], nextCursor: null } } : runs;
 
   if (mode === "workbench" && workbenchId !== null) {
     return (
       <InsightsWorkbenchPageRoute
         workbenchId={workbenchId}
         benchTenantId={selectedTenantId}
-        onOpenRun={(id) =>
-          navigate(`${INSIGHTS_RUNS_PATH}/${encodeURIComponent(id)}`)
-        }
+        onOpenRun={(id) => navigate(`${INSIGHTS_RUNS_PATH}/${encodeURIComponent(id)}`)}
       />
     );
   }
 
-  return (
-    <InsightsPage
-      path={currentPath}
-      runs={runsForPage}
-      routines={routinesForPage}
-    />
-  );
+  return <InsightsPage path={currentPath} runs={runsForPage} routines={routinesForPage} />;
 }
 
 /** Resolves the workbench-scoped route's own workbench list — split out of
@@ -831,12 +758,8 @@ function InsightsWorkbenchPageRoute({
   readonly benchTenantId: string | null;
   readonly onOpenRun: (id: string) => void;
 }) {
-  const { workbenches, chats, isLoading } =
-    useWorkbenchAndChatLists(benchTenantId);
-  const resolution = resolveWorkbenchInsightsScope(
-    [...workbenches, ...chats],
-    workbenchId,
-  );
+  const { workbenches, chats, isLoading } = useWorkbenchAndChatLists(benchTenantId);
+  const resolution = resolveWorkbenchInsightsScope([...workbenches, ...chats], workbenchId);
   return (
     <InsightsWorkbenchPage
       workbenchId={workbenchId}
@@ -864,10 +787,8 @@ function useWorkbenchAndChatLists(tenantId: string | null) {
     () => listWorkbenches(tenantId as string, "chat"),
   );
   return {
-    workbenches:
-      workbenchesOfKind.kind === "ready" ? workbenchesOfKind.data : [],
+    workbenches: workbenchesOfKind.kind === "ready" ? workbenchesOfKind.data : [],
     chats: chatsOfKind.kind === "ready" ? chatsOfKind.data : [],
-    isLoading:
-      workbenchesOfKind.kind === "loading" || chatsOfKind.kind === "loading",
+    isLoading: workbenchesOfKind.kind === "loading" || chatsOfKind.kind === "loading",
   };
 }
diff --git a/apps/web/src/pages/legacy-settings-redirects.tsx b/apps/web/src/pages/legacy-settings-redirects.tsx
index f5034d5c8b..7715ca044f 100644
--- a/apps/web/src/pages/legacy-settings-redirects.tsx
+++ b/apps/web/src/pages/legacy-settings-redirects.tsx
@@ -8,11 +8,7 @@
 
 import { useEffect } from "react";
 
-function legacyRedirectTarget(
-  path: string,
-  oldPrefix: string,
-  newPrefix: string,
-): string {
+function legacyRedirectTarget(path: string, oldPrefix: string, newPrefix: string): string {
   if (path === oldPrefix) return newPrefix;
   if (path.startsWith(`${oldPrefix}/`)) {
     return `${newPrefix}/${path.slice(oldPrefix.length + 1)}`;
@@ -78,12 +74,5 @@ export function LegacyLibraryRedirect({
   readonly path: string;
   readonly navigate: (to: string) => void;
 }) {
-  return (
-    <LegacyRedirect
-      path={path}
-      navigate={navigate}
-      oldPrefix="/library"
-      newPrefix="/files"
-    />
-  );
+  return <LegacyRedirect path={path} navigate={navigate} oldPrefix="/library" newPrefix="/files" />;
 }
diff --git a/apps/web/src/pages/library-page.tsx b/apps/web/src/pages/library-page.tsx
index 478d9097e8..e8cd8abfc5 100644
--- a/apps/web/src/pages/library-page.tsx
+++ b/apps/web/src/pages/library-page.tsx
@@ -21,11 +21,7 @@ import {
   toast,
   useListSelection,
 } from "@corbits/react-ui";
-import type {
-  SelectionCheckboxState,
-  UseListSelectionResult,
-  ViewMode,
-} from "@corbits/react-ui";
+import type { SelectionCheckboxState, UseListSelectionResult, ViewMode } from "@corbits/react-ui";
 import {
   ArtifactCard,
   ArtifactRenderer,
@@ -40,21 +36,10 @@ import {
 } from "@corbits/artifact-ui";
 import type { ArtifactSort, ArtifactSummary } from "@corbits/artifact-ui";
 import { useQueryClient } from "@tanstack/react-query";
-import {
-  ArrowsDownUp,
-  ArrowSquareOut,
-  LinkSimple as LinkIcon,
-  Stack,
-  X,
-} from "@corbits/icons";
+import { ArrowsDownUp, ArrowSquareOut, LinkSimple as LinkIcon, Stack, X } from "@corbits/icons";
 import { useCallback, useEffect, useMemo, useRef, useState } from "react";
 import type { MouseEvent as ReactMouseEvent } from "react";
-import {
-  describeApiError,
-  ListSkeleton,
-  QueryView,
-  SignedOutNotice,
-} from "@corbits/api-query";
+import { describeApiError, ListSkeleton, QueryView, SignedOutNotice } from "@corbits/api-query";
 
 import {
   artifactPreviewPath,
@@ -66,10 +51,7 @@ import {
 import { isAdditiveSelectClick, isRowActivationKey } from "../activatable-row";
 import { useBench } from "../bench-context";
 import { readLastWorkbenchId } from "../last-workbench";
-import {
-  consumePendingLibraryUpload,
-  LIBRARY_UPLOAD_EVENT,
-} from "../library-upload";
+import { consumePendingLibraryUpload, LIBRARY_UPLOAD_EVENT } from "../library-upload";
 import { resolveLibraryWorkbenchScope } from "../library-workbench-scope";
 import { Link } from "../navigation";
 import { FILES_PATH_PREFIX } from "../path-ids";
@@ -106,14 +88,9 @@ function ArtifactRows({
   readonly onSelect: (id: string) => void;
   readonly selection: UseListSelectionResult<string>;
 }) {
-  const allSelected =
-    artifacts.length > 0 && selection.selectedCount === artifacts.length;
+  const allSelected = artifacts.length > 0 && selection.selectedCount === artifacts.length;
   const headerChecked: SelectionCheckboxState =
-    selection.selectedCount === 0
-      ? false
-      : allSelected
-        ? true
-        : "indeterminate";
+    selection.selectedCount === 0 ? false : allSelected ? true : "indeterminate";
   // `useListSelection` hands back ids in toggle/insertion order, not row
   // order — a bottom-up shift-select would otherwise join/copy links out of
   // visible order. Sort against this row order before handing ids to any
@@ -130,9 +107,7 @@ function ArtifactRows({
           <TableHead className="w-10">
             <SelectionCheckbox
               checked={headerChecked}
-              onToggle={() =>
-                allSelected ? selection.clear() : selection.selectAll()
-              }
+              onToggle={() => (allSelected ? selection.clear() : selection.selectAll())}
               rowLabel="all files"
               ariaLabel="Select all files"
               className="opacity-100"
@@ -150,8 +125,7 @@ function ArtifactRows({
           const selectionIds =
             isSelected && selection.selectedCount > 1
               ? [...selection.selectedIds].sort(
-                  (a, b) =>
-                    (visibleOrder.get(a) ?? 0) - (visibleOrder.get(b) ?? 0),
+                  (a, b) => (visibleOrder.get(a) ?? 0) - (visibleOrder.get(b) ?? 0),
                 )
               : [artifact.id];
           return (
@@ -179,9 +153,7 @@ function ArtifactRows({
               <TableCell onClick={(event) => event.stopPropagation()}>
                 <SelectionCheckbox
                   checked={isSelected}
-                  onToggle={(modifiers) =>
-                    selection.toggle(artifact.id, modifiers)
-                  }
+                  onToggle={(modifiers) => selection.toggle(artifact.id, modifiers)}
                   rowLabel={artifact.title}
                 />
               </TableCell>
@@ -189,14 +161,9 @@ function ArtifactRows({
               <TableCell className="text-muted-foreground">
                 {artifactKindLabel(artifact.kind)}
               </TableCell>
+              <TableCell className="text-muted-foreground">{artifact.ownerName ?? "—"}</TableCell>
               <TableCell className="text-muted-foreground">
-                {artifact.ownerName ?? "—"}
-              </TableCell>
-              <TableCell className="text-muted-foreground">
-                {formatRelativeTime(
-                  artifact.updatedAt ?? artifact.createdAt,
-                  now,
-                )}
+                {formatRelativeTime(artifact.updatedAt ?? artifact.createdAt, now)}
               </TableCell>
             </TableRow>
           );
@@ -213,11 +180,7 @@ function ArtifactRows({
  * (manual, agent, imported, unknown) renders nothing here rather than
  * guessing.
  */
-function ProvenanceLine({
-  source,
-}: {
-  readonly source: Record<string, unknown>;
-}) {
+function ProvenanceLine({ source }: { readonly source: Record<string, unknown> }) {
   const runId = workflowRunIdFromSource(source);
   if (runId === null) return null;
   return (
@@ -245,8 +208,7 @@ function PreviewPane({
   readonly error: string | null;
   readonly onClose: () => void;
 }) {
-  const rendererKind =
-    detail !== null ? resolveArtifactRendererKind(detail) : null;
+  const rendererKind = detail !== null ? resolveArtifactRendererKind(detail) : null;
   const previewSrc =
     detail !== null && rendererKind === "html" && tenantId !== null
       ? artifactPreviewPath(tenantId, detail.id)
@@ -257,8 +219,7 @@ function PreviewPane({
   // aren't text-decodable (an image, a real PDF, a legacy `.docx`/`.xlsx`).
   // `source.upload.mimeType` disambiguates — present only when this
   // artifact really does have stored bytes behind it.
-  const uploadMimeType =
-    detail !== null ? uploadMimeTypeFromSource(detail.source) : null;
+  const uploadMimeType = detail !== null ? uploadMimeTypeFromSource(detail.source) : null;
   const contentUnavailable =
     detail !== null &&
     detail.content === "" &&
@@ -268,9 +229,7 @@ function PreviewPane({
     <aside className="flex h-full min-h-0 min-w-0 flex-col border-l border-border bg-card">
       <div className="flex items-center justify-between gap-2 border-b border-border px-4 py-3">
         <div className="min-w-0">
-          <p className="truncate text-sm font-semibold">
-            {detail?.title ?? "Preview"}
-          </p>
+          <p className="truncate text-sm font-semibold">{detail?.title ?? "Preview"}</p>
           {detail !== null ? (
             <p className="truncate text-xs text-muted-foreground">
               {artifactKindLabel(detail.kind)}
@@ -307,10 +266,7 @@ function PreviewPane({
             {error}
           </p>
         ) : null}
-        {!loading &&
-        error === null &&
-        detail !== null &&
-        rendererKind !== null ? (
+        {!loading && error === null && detail !== null && rendererKind !== null ? (
           <ArtifactRenderer
             rendererKind={rendererKind}
             title={detail.title}
@@ -394,18 +350,13 @@ export function LibraryPage({
   const visible = useMemo(
     () =>
       sortArtifacts(
-        onQueryChange === undefined
-          ? filterArtifacts(artifacts, activeQuery)
-          : artifacts,
+        onQueryChange === undefined ? filterArtifacts(artifacts, activeQuery) : artifacts,
         sort,
       ),
     [artifacts, activeQuery, sort, onQueryChange],
   );
 
-  const visibleIds = useMemo(
-    () => visible.map((artifact) => artifact.id),
-    [visible],
-  );
+  const visibleIds = useMemo(() => visible.map((artifact) => artifact.id), [visible]);
   // A row filtered out of `visibleIds` drops out of `selection.selectedIds`
   // immediately (the hook reconciles against `ids` on every read) but
   // `useListSelection` keeps it in its own internal state, so the row comes
@@ -446,10 +397,7 @@ export function LibraryPage({
         crumbs={
           selectedSummary === null
             ? [{ label: "Files" }]
-            : [
-                { label: "Files", href: FILES_PATH_PREFIX },
-                { label: selectedSummary.title },
-              ]
+            : [{ label: "Files", href: FILES_PATH_PREFIX }, { label: selectedSummary.title }]
         }
         subtitle={
           selectedSummary === null
@@ -512,24 +460,15 @@ export function LibraryPage({
                 <div className="lg:hidden">
                   <Menu>
                     <MenuTrigger asChild>
-                      <Button
-                        type="button"
-                        size="sm"
-                        variant="ghost"
-                        aria-label="Files scope"
-                      >
-                        {scope === "all"
-                          ? "All workbenches"
-                          : workbenchScope.title}
+                      <Button type="button" size="sm" variant="ghost" aria-label="Files scope">
+                        {scope === "all" ? "All workbenches" : workbenchScope.title}
                       </Button>
                     </MenuTrigger>
                     <MenuContent align="end">
                       <MenuItem onSelect={() => onScopeChange("workbench")}>
                         {workbenchScope.title}
                       </MenuItem>
-                      <MenuItem onSelect={() => onScopeChange("all")}>
-                        All workbenches
-                      </MenuItem>
+                      <MenuItem onSelect={() => onScopeChange("all")}>All workbenches</MenuItem>
                     </MenuContent>
                   </Menu>
                 </div>
@@ -557,11 +496,7 @@ export function LibraryPage({
             </Menu>
             <ViewToggle mode={viewMode} onChange={setViewMode} />
             {onUpload !== undefined ? (
-              <Button
-                size="sm"
-                disabled={uploading === true}
-                onClick={openPicker}
-              >
+              <Button size="sm" disabled={uploading === true} onClick={openPicker}>
                 {uploading === true ? "Uploading…" : "Upload"}
               </Button>
             ) : null}
@@ -681,46 +616,32 @@ export function LibraryRoute({ path }: { readonly path: string }) {
   // the same way kind-nav selection already worked before this route
   // existed.
   const deepLinkedArtifactId = libraryArtifactIdFromPath(path);
-  const [selectedId, setSelectedId] = useState<string | null>(
-    deepLinkedArtifactId,
-  );
+  const [selectedId, setSelectedId] = useState<string | null>(deepLinkedArtifactId);
   useEffect(() => {
     if (deepLinkedArtifactId !== null) setSelectedId(deepLinkedArtifactId);
   }, [deepLinkedArtifactId]);
-  const kindSegment =
-    deepLinkedArtifactId === null ? libraryKindSegmentFromPath(path) : "";
+  const kindSegment = deepLinkedArtifactId === null ? libraryKindSegmentFromPath(path) : "";
 
   // Files' workbench-first lens (CL-6353): the workbench the person just
   // came from, if `last-workbench.ts` recorded one for this bench, resolved
   // to its own tenant via the same sidebar-backed activity listing every
   // other bench-scoped surface already fetches.
   const activity = useBenchActivity(selectedTenantId);
-  const lastWorkbenchId =
-    selectedTenantId === null ? null : readLastWorkbenchId(selectedTenantId);
+  const lastWorkbenchId = selectedTenantId === null ? null : readLastWorkbenchId(selectedTenantId);
   const workbenchScope =
     activity.kind === "ready"
-      ? resolveLibraryWorkbenchScope(
-          [...activity.workbenches, ...activity.chats],
-          lastWorkbenchId,
-        )
+      ? resolveLibraryWorkbenchScope([...activity.workbenches, ...activity.chats], lastWorkbenchId)
       : null;
-  const [scopeOverride, setScopeOverride] = useState<
-    "workbench" | "all" | null
-  >(null);
-  const scope =
-    scopeOverride ?? (workbenchScope !== null ? "workbench" : "all");
+  const [scopeOverride, setScopeOverride] = useState<"workbench" | "all" | null>(null);
+  const scope = scopeOverride ?? (workbenchScope !== null ? "workbench" : "all");
   const scopeTenantId =
-    scope === "workbench" && workbenchScope !== null
-      ? workbenchScope.tenantId
-      : selectedTenantId;
+    scope === "workbench" && workbenchScope !== null ? workbenchScope.tenantId : selectedTenantId;
 
   const listPath =
     scopeTenantId === null
       ? ""
       : `/api/tenants/${scopeTenantId}/artifacts${
-          searchQuery.trim() === ""
-            ? ""
-            : `?q=${encodeURIComponent(searchQuery.trim())}`
+          searchQuery.trim() === "" ? "" : `?q=${encodeURIComponent(searchQuery.trim())}`
         }`;
   const page = useAPIQuery(listPath, ArtifactListPageSchema);
 
@@ -782,10 +703,7 @@ export function LibraryRoute({ path }: { readonly path: string }) {
             <RichEmptyState
               icon={<Stack />}
               title="Couldn't load your files"
-              description={describeApiError(
-                { status: page.status },
-                "loading your files",
-              )}
+              description={describeApiError({ status: page.status }, "loading your files")}
             />
           )}
         </PageShell>
@@ -796,8 +714,8 @@ export function LibraryRoute({ path }: { readonly path: string }) {
   return (
     <QueryView query={page} label="your files" skeleton="rows">
       {(rows) => {
-        const artifacts = mapArtifactListToSummaries(rows.artifacts).filter(
-          (row) => artifactMatchesLibraryKindSegment(row, kindSegment),
+        const artifacts = mapArtifactListToSummaries(rows.artifacts).filter((row) =>
+          artifactMatchesLibraryKindSegment(row, kindSegment),
         );
         return (
           <LibraryPage
@@ -816,10 +734,7 @@ export function LibraryRoute({ path }: { readonly path: string }) {
             previewLoading={detail.kind === "loading" && selectedId !== null}
             previewError={
               detail.kind === "error" && selectedId !== null
-                ? describeApiError(
-                    { status: detail.status },
-                    "loading this file",
-                  )
+                ? describeApiError({ status: detail.status }, "loading this file")
                 : null
             }
             onUpload={(files) => {
@@ -827,10 +742,7 @@ export function LibraryRoute({ path }: { readonly path: string }) {
                 setUploading(true);
                 setUploadError(null);
                 try {
-                  const uploaded = await uploadArtifactFiles(
-                    selectedTenantId,
-                    files,
-                  );
+                  const uploaded = await uploadArtifactFiles(selectedTenantId, files);
                   await queryClient.invalidateQueries({
                     queryKey: tenantKeys.artifacts(selectedTenantId),
                   });
@@ -839,15 +751,9 @@ export function LibraryRoute({ path }: { readonly path: string }) {
                   // two can differ (e.g. a collision rename), and a sibling
                   // fix for empty content read-back means this toast must
                   // only ever repeat the upload response, not assume it.
-                  toast(
-                    artifactUploadToast(
-                      uploaded.map((artifact) => artifact.title),
-                    ),
-                  );
+                  toast(artifactUploadToast(uploaded.map((artifact) => artifact.title)));
                 } catch (err) {
-                  setUploadError(
-                    describeApiError(err, "uploading those files"),
-                  );
+                  setUploadError(describeApiError(err, "uploading those files"));
                 } finally {
                   setUploading(false);
                 }
diff --git a/apps/web/src/pages/mission-control-page.tsx b/apps/web/src/pages/mission-control-page.tsx
index b1401b7cbd..85245d15c7 100644
--- a/apps/web/src/pages/mission-control-page.tsx
+++ b/apps/web/src/pages/mission-control-page.tsx
@@ -33,18 +33,11 @@ import { useState } from "react";
 import { useQueryClient } from "@tanstack/react-query";
 
 import { CHAT_STRINGS, type Workbench } from "@corbits/chat-ui";
-import {
-  runOutcomeStatus,
-  runStatusLabel,
-  withListingAbandoned,
-} from "@corbits/workflows/client";
+import { runOutcomeStatus, runStatusLabel, withListingAbandoned } from "@corbits/workflows/client";
 
 import { approveApproval, rejectApproval } from "../api";
 import { useBench } from "../bench-context";
-import {
-  usePendingApprovals,
-  type PendingApproval,
-} from "../pending-approvals";
+import { usePendingApprovals, type PendingApproval } from "../pending-approvals";
 import { tenantKeys } from "../query-client";
 import { NEW_WORKBENCH_PATH } from "../routes";
 import { useBenchActivity } from "../shell/bench-activity";
@@ -82,12 +75,8 @@ function listingFromRoutine(routine: RoutineActivityItem, now: number) {
   );
 }
 
-function routineInFlightRow(
-  routine: RoutineActivityItem,
-  now: number,
-): InFlightRow {
-  const status =
-    runOutcomeStatus(listingFromRoutine(routine, now), now) ?? routine.status;
+function routineInFlightRow(routine: RoutineActivityItem, now: number): InFlightRow {
+  const status = runOutcomeStatus(listingFromRoutine(routine, now), now) ?? routine.status;
   return {
     key: `routine:${routine.id}`,
     label: routine.name,
@@ -106,10 +95,7 @@ export function computeInFlightRows(
   now: number = Date.now(),
 ): readonly InFlightRow[] {
   const rows = routines
-    .filter(
-      (routine) =>
-        runOutcomeStatus(listingFromRoutine(routine, now), now) === "running",
-    )
+    .filter((routine) => runOutcomeStatus(listingFromRoutine(routine, now), now) === "running")
     .map((routine) => routineInFlightRow(routine, now));
   return rows.sort((a, b) => Date.parse(b.createdAt) - Date.parse(a.createdAt));
 }
@@ -194,9 +180,7 @@ function ApprovalRow({
         <span className="mission-control-cell-primary">{item.headline}</span>
       </TableCell>
       <TableCell className="mission-control-opt">{item.agentName}</TableCell>
-      <TableCell className="mission-control-opt">
-        {formatRelativeTime(item.createdAt)}
-      </TableCell>
+      <TableCell className="mission-control-opt">{formatRelativeTime(item.createdAt)}</TableCell>
       <TableCell className="mission-control-num">
         <div className="mission-control-row-actions">
           <Button
@@ -221,39 +205,25 @@ function ApprovalRow({
   );
 }
 
-export function MissionControlRoute({
-  navigate,
-}: {
-  readonly navigate: (to: string) => void;
-}) {
+export function MissionControlRoute({ navigate }: { readonly navigate: (to: string) => void }) {
   const { selectedTenantId: tenantId } = useBench();
   const approvalsQuery = usePendingApprovals(tenantId);
   const activity = useBenchActivity(tenantId);
 
-  const pendingApprovals =
-    approvalsQuery.kind === "ready" ? approvalsQuery.data : null;
+  const pendingApprovals = approvalsQuery.kind === "ready" ? approvalsQuery.data : null;
   const oldestWaitingAt =
     pendingApprovals !== null && pendingApprovals.length > 0
       ? pendingApprovals.reduce((oldest, item) =>
-          Date.parse(item.createdAt) < Date.parse(oldest.createdAt)
-            ? item
-            : oldest,
+          Date.parse(item.createdAt) < Date.parse(oldest.createdAt) ? item : oldest,
         ).createdAt
       : null;
 
-  const inFlightRows =
-    activity.kind === "ready" ? computeInFlightRows(activity.routines) : [];
-  const activeRunsCount =
-    activity.kind === "ready" ? inFlightRows.length : null;
+  const inFlightRows = activity.kind === "ready" ? computeInFlightRows(activity.routines) : [];
+  const activeRunsCount = activity.kind === "ready" ? inFlightRows.length : null;
 
   const jumpBackRows =
     activity.kind === "ready"
-      ? computeJumpBackRows(
-          activity.workbenches,
-          activity.chats,
-          activity.agents,
-          navigate,
-        )
+      ? computeJumpBackRows(activity.workbenches, activity.chats, activity.agents, navigate)
       : [];
 
   return (
@@ -261,11 +231,7 @@ export function MissionControlRoute({
       <StageTopBar
         crumbs={[{ label: "Mission Control" }]}
         actions={
-          <Button
-            variant="primary"
-            size="sm"
-            onClick={() => navigate(NEW_WORKBENCH_PATH)}
-          >
+          <Button variant="primary" size="sm" onClick={() => navigate(NEW_WORKBENCH_PATH)}>
             <Plus /> {CHAT_STRINGS.newWorkbenchAction}
           </Button>
         }
@@ -278,17 +244,13 @@ export function MissionControlRoute({
                 label="Active runs"
                 value={dash(activeRunsCount)}
                 sub={
-                  activeRunsCount !== null && activeRunsCount > 0
-                    ? "live now"
-                    : "nothing running"
+                  activeRunsCount !== null && activeRunsCount > 0 ? "live now" : "nothing running"
                 }
               />
               <StatGridItem
                 label="Waiting on you"
                 value={dash(pendingApprovals?.length ?? null)}
-                danger={
-                  pendingApprovals !== null && pendingApprovals.length > 0
-                }
+                danger={pendingApprovals !== null && pendingApprovals.length > 0}
                 sub={
                   oldestWaitingAt !== null
                     ? `oldest ${formatRelativeTime(oldestWaitingAt)}`
@@ -300,13 +262,9 @@ export function MissionControlRoute({
             <section className="mission-control-panel">
               <div className="mission-control-panel-header">
                 <h2>Needs you</h2>
-                <span className="mission-control-hint">
-                  approvals block agents until you act
-                </span>
+                <span className="mission-control-hint">approvals block agents until you act</span>
               </div>
-              {approvalsQuery.kind === "loading" ? (
-                <Skeleton className="h-24 w-full" />
-              ) : null}
+              {approvalsQuery.kind === "loading" ? <Skeleton className="h-24 w-full" /> : null}
               {approvalsQuery.kind === "error" ? (
                 <RichEmptyState
                   title="Couldn't load approvals"
@@ -330,23 +288,15 @@ export function MissionControlRoute({
                   <TableHeader>
                     <TableRow>
                       <TableHead>Request</TableHead>
-                      <TableHead className="mission-control-opt">
-                        From
-                      </TableHead>
-                      <TableHead className="mission-control-opt">
-                        Waiting
-                      </TableHead>
+                      <TableHead className="mission-control-opt">From</TableHead>
+                      <TableHead className="mission-control-opt">Waiting</TableHead>
                       <TableHead className="mission-control-num" />
                     </TableRow>
                   </TableHeader>
                   <TableBody>
                     {tenantId !== null &&
                       pendingApprovals.map((item) => (
-                        <ApprovalRow
-                          key={item.id}
-                          item={item}
-                          tenantId={tenantId}
-                        />
+                        <ApprovalRow key={item.id} item={item} tenantId={tenantId} />
                       ))}
                   </TableBody>
                 </Table>
@@ -358,14 +308,9 @@ export function MissionControlRoute({
                 <h2>In flight</h2>
                 <span className="mission-control-hint">live</span>
               </div>
-              {activity.kind === "loading" ? (
-                <Skeleton className="h-24 w-full" />
-              ) : null}
+              {activity.kind === "loading" ? <Skeleton className="h-24 w-full" /> : null}
               {activity.kind === "error" ? (
-                <RichEmptyState
-                  title="Couldn't load activity"
-                  description={activity.message}
-                />
+                <RichEmptyState title="Couldn't load activity" description={activity.message} />
               ) : null}
               {activity.kind !== "loading" &&
               activity.kind !== "error" &&
@@ -380,12 +325,8 @@ export function MissionControlRoute({
                   <TableHeader>
                     <TableRow>
                       <TableHead>Run</TableHead>
-                      <TableHead className="mission-control-opt">
-                        Elapsed
-                      </TableHead>
-                      <TableHead className="mission-control-num">
-                        Steps
-                      </TableHead>
+                      <TableHead className="mission-control-opt">Elapsed</TableHead>
+                      <TableHead className="mission-control-num">Steps</TableHead>
                       <TableHead />
                     </TableRow>
                   </TableHeader>
@@ -393,20 +334,14 @@ export function MissionControlRoute({
                     {inFlightRows.map((row) => (
                       <TableRow key={row.key}>
                         <TableCell>
-                          <span className="mission-control-cell-primary">
-                            {row.label}
-                          </span>
+                          <span className="mission-control-cell-primary">{row.label}</span>
                           <br />
-                          <span className="mission-control-cell-context">
-                            {row.context}
-                          </span>
+                          <span className="mission-control-cell-context">{row.context}</span>
                         </TableCell>
                         <TableCell className="mission-control-opt">
                           {formatRelativeTime(row.createdAt)}
                         </TableCell>
-                        <TableCell className="mission-control-num">
-                          {row.steps}
-                        </TableCell>
+                        <TableCell className="mission-control-num">{row.steps}</TableCell>
                         <TableCell className="mission-control-num">
                           <Badge tone={row.statusTone}>{row.statusLabel}</Badge>
                         </TableCell>
@@ -422,13 +357,9 @@ export function MissionControlRoute({
                 <div className="mission-control-panel-header">
                   <h2>Jump back in</h2>
                 </div>
-                {activity.kind === "loading" ? (
-                  <Skeleton className="h-24 w-full" />
-                ) : null}
+                {activity.kind === "loading" ? <Skeleton className="h-24 w-full" /> : null}
                 {activity.kind !== "loading" && jumpBackRows.length === 0 ? (
-                  <p className="mission-control-empty-note">
-                    Nothing recent yet.
-                  </p>
+                  <p className="mission-control-empty-note">Nothing recent yet.</p>
                 ) : null}
                 {jumpBackRows.length > 0 ? (
                   <div className="mission-control-rows">
@@ -442,12 +373,8 @@ export function MissionControlRoute({
                         >
                           {row.icon === "chat" ? <ChatCircleDots /> : <Robot />}
                           <span className="mission-control-jump-body">
-                            <span className="mission-control-cell-primary">
-                              {row.label}
-                            </span>
-                            <span className="mission-control-cell-context">
-                              {row.context}
-                            </span>
+                            <span className="mission-control-cell-primary">{row.label}</span>
+                            <span className="mission-control-cell-context">{row.context}</span>
                           </span>
                           <span className="mission-control-jump-when">
                             {formatRelativeTime(row.when)}
@@ -457,12 +384,8 @@ export function MissionControlRoute({
                         <div key={row.key} className="mission-control-jump-row">
                           <Robot />
                           <span className="mission-control-jump-body">
-                            <span className="mission-control-cell-primary">
-                              {row.label}
-                            </span>
-                            <span className="mission-control-cell-context">
-                              {row.context}
-                            </span>
+                            <span className="mission-control-cell-primary">{row.label}</span>
+                            <span className="mission-control-cell-context">{row.context}</span>
                           </span>
                           <span className="mission-control-jump-when">
                             {formatRelativeTime(row.when)}
diff --git a/apps/web/src/pages/new-workbench-picker.tsx b/apps/web/src/pages/new-workbench-picker.tsx
index 79cd6f61ed..e22df41606 100644
--- a/apps/web/src/pages/new-workbench-picker.tsx
+++ b/apps/web/src/pages/new-workbench-picker.tsx
@@ -31,8 +31,7 @@ import { useNavigate } from "../navigation";
 import { StageTopBar } from "../shell/stage-top-bar";
 import { workbenchPath } from "../workbench-path";
 
-const GENERIC_CREATE_FAILURE =
-  "Something went wrong creating this workbench. Try again.";
+const GENERIC_CREATE_FAILURE = "Something went wrong creating this workbench. Try again.";
 
 /**
  * Allow-lists what's safe to show verbatim, rather than denylisting
@@ -43,10 +42,7 @@ const GENERIC_CREATE_FAILURE =
  * both embed raw request paths and schema summaries in `.message` and
  * must go through their own describer, never shown directly.
  */
-export function describeWorkbenchCreateFailure(
-  cause: unknown,
-  refId?: string,
-): string {
+export function describeWorkbenchCreateFailure(cause: unknown, refId?: string): string {
   if (cause instanceof WorkbenchPostCreateError) {
     const message =
       cause.stage === "opening-message"
@@ -74,9 +70,7 @@ function agentDisplayName({
   readonly name: string;
   readonly description?: string;
 }): string {
-  return description === undefined || description === ""
-    ? humanizeSlug(name)
-    : description;
+  return description === undefined || description === "" ? humanizeSlug(name) : description;
 }
 
 export function NewWorkbenchPickerRoute() {
@@ -91,9 +85,9 @@ export function NewWorkbenchPickerRoute() {
     };
   }, [selectedTenantId]);
   const [prompt, setPrompt] = useState("");
-  const [selectedAgentDefinitionIds, setSelectedAgentDefinitionIds] = useState<
-    readonly string[]
-  >([]);
+  const [selectedAgentDefinitionIds, setSelectedAgentDefinitionIds] = useState<readonly string[]>(
+    [],
+  );
   const [agentPickerOpen, setAgentPickerOpen] = useState(false);
   const [createAgentOpen, setCreateAgentOpen] = useState(false);
   const [agentQuery, setAgentQuery] = useState("");
@@ -151,9 +145,7 @@ export function NewWorkbenchPickerRoute() {
 
   useEffect(() => {
     if (invitableAgents.data === undefined) return;
-    const availableDefinitionIds = new Set(
-      invitableAgents.data.map((agent) => agent.id),
-    );
+    const availableDefinitionIds = new Set(invitableAgents.data.map((agent) => agent.id));
     setSelectedAgentDefinitionIds((current) => {
       const next = current.filter((id) => availableDefinitionIds.has(id));
       return next.length === current.length ? current : next;
@@ -172,22 +164,13 @@ export function NewWorkbenchPickerRoute() {
     selectedAgentDefinitionIds.includes(agent.id),
   );
 
-  async function handleCreate(
-    firstMessage?: string,
-    selectedIds: readonly string[] = [],
-  ) {
+  async function handleCreate(firstMessage?: string, selectedIds: readonly string[] = []) {
     if (selectedTenantId === null || creating) return;
     lastAttemptRef.current = { firstMessage, selectedIds };
     setCreating(true);
     setStillSettingUp(false);
     try {
-      await createWorkbench(
-        selectedTenantId,
-        navigate,
-        queryClient,
-        firstMessage,
-        selectedIds,
-      );
+      await createWorkbench(selectedTenantId, navigate, queryClient, firstMessage, selectedIds);
     } catch (cause) {
       if (cause instanceof WorkbenchPostCreateError) {
         const refId = reportError(cause, {
@@ -201,10 +184,7 @@ export function NewWorkbenchPickerRoute() {
         toast(describeWorkbenchCreateFailure(cause, refId));
         return;
       }
-      if (
-        cause instanceof WorkbenchPreconditionError &&
-        cause.kind === "setup-agent-missing"
-      ) {
+      if (cause instanceof WorkbenchPreconditionError && cause.kind === "setup-agent-missing") {
         setCreating(false);
         setStillSettingUp(true);
         return;
@@ -257,12 +237,7 @@ export function NewWorkbenchPickerRoute() {
       <StageTopBar
         crumbs={[{ label: CHAT_STRINGS.newWorkbenchAction }]}
         actions={
-          <Button
-            type="button"
-            variant="ghost"
-            size="sm"
-            onClick={() => navigate("/")}
-          >
+          <Button type="button" variant="ghost" size="sm" onClick={() => navigate("/")}>
             Cancel
           </Button>
         }
@@ -272,8 +247,8 @@ export function NewWorkbenchPickerRoute() {
           <div className="new-workbench-picker-not-ready">
             <h3>Still setting up your workbench</h3>
             <p className="new-workbench-picker-sub">
-              Your account&apos;s agents are finishing setup in the background.
-              This usually takes under a minute — try again in a moment.
+              Your account&apos;s agents are finishing setup in the background. This usually takes
+              under a minute — try again in a moment.
             </p>
             <Button type="button" variant="outline" onClick={retryLastAttempt}>
               Try again
@@ -285,10 +260,7 @@ export function NewWorkbenchPickerRoute() {
           // briefly in case it resolves fast" delay only bought a blank
           // pane here (CL-6623 finding #3) — show the loader outright
           // instead of leaving a gap before it mounts.
-          <WorkbenchLoadingState
-            delayMs={0}
-            title="Setting up your workbench…"
-          />
+          <WorkbenchLoadingState delayMs={0} title="Setting up your workbench…" />
         ) : (
           <>
             <h3>What do you want your Workbench to do?</h3>
@@ -318,10 +290,7 @@ export function NewWorkbenchPickerRoute() {
                     }
                   }}
                 />
-                <div
-                  className="new-workbench-prompt-examples"
-                  aria-label="Try an example"
-                >
+                <div className="new-workbench-prompt-examples" aria-label="Try an example">
                   <span>Try</span>
                   {[
                     "Review every PR on faremeter/interchange",
@@ -356,30 +325,20 @@ export function NewWorkbenchPickerRoute() {
                     </span>
                   ))}
                   {invitableAgents.isLoading ? (
-                    <span className="new-workbench-agent-status">
-                      Loading agents…
-                    </span>
+                    <span className="new-workbench-agent-status">Loading agents…</span>
                   ) : invitableAgents.isError ? (
                     <span className="new-workbench-agent-status" role="status">
-                      Couldn&apos;t load agents. You can still start without
-                      one.
+                      Couldn&apos;t load agents. You can still start without one.
                     </span>
                   ) : (
-                    <div
-                      ref={agentPickerRootRef}
-                      className="new-workbench-agent-picker"
-                    >
+                    <div ref={agentPickerRootRef} className="new-workbench-agent-picker">
                       <button
                         ref={agentPickerTriggerRef}
                         type="button"
                         className="new-workbench-add-agent"
                         aria-controls={AGENT_LISTBOX_ID}
                         aria-expanded={agentPickerOpen}
-                        onClick={() =>
-                          agentPickerOpen
-                            ? closeAgentPicker()
-                            : openAgentPicker()
-                        }
+                        onClick={() => (agentPickerOpen ? closeAgentPicker() : openAgentPicker())}
                       >
                         + Add agent
                       </button>
@@ -408,25 +367,19 @@ export function NewWorkbenchPickerRoute() {
                               if (event.key === "ArrowDown") {
                                 event.preventDefault();
                                 setActiveAgentIndex((current) =>
-                                  Math.min(
-                                    current + 1,
-                                    filteredAgents.length - 1,
-                                  ),
+                                  Math.min(current + 1, filteredAgents.length - 1),
                                 );
                               }
                               if (event.key === "ArrowUp") {
                                 event.preventDefault();
-                                setActiveAgentIndex((current) =>
-                                  Math.max(current - 1, 0),
-                                );
+                                setActiveAgentIndex((current) => Math.max(current - 1, 0));
                               }
                               if (event.key === "Enter") {
                                 // Implicit form submission would otherwise
                                 // fire on a miss, creating a workbench the
                                 // operator did not ask for.
                                 event.preventDefault();
-                                const activeAgent =
-                                  filteredAgents[activeAgentIndex];
+                                const activeAgent = filteredAgents[activeAgentIndex];
                                 if (activeAgent !== undefined) {
                                   toggleAgent(activeAgent.id);
                                 }
@@ -444,14 +397,9 @@ export function NewWorkbenchPickerRoute() {
                                 : "No agents match that search."}
                             </p>
                           ) : (
-                            <div
-                              id={AGENT_LISTBOX_ID}
-                              role="listbox"
-                              aria-label="Available agents"
-                            >
+                            <div id={AGENT_LISTBOX_ID} role="listbox" aria-label="Available agents">
                               {filteredAgents.map((agent, index) => {
-                                const selected =
-                                  selectedAgentDefinitionIds.includes(agent.id);
+                                const selected = selectedAgentDefinitionIds.includes(agent.id);
                                 return (
                                   <button
                                     key={agent.id}
@@ -464,9 +412,7 @@ export function NewWorkbenchPickerRoute() {
                                         ? "new-workbench-agent-option is-active"
                                         : "new-workbench-agent-option"
                                     }
-                                    onMouseMove={() =>
-                                      setActiveAgentIndex(index)
-                                    }
+                                    onMouseMove={() => setActiveAgentIndex(index)}
                                     onClick={() => toggleAgent(agent.id)}
                                   >
                                     <span className="new-workbench-agent-option-name">
@@ -475,9 +421,7 @@ export function NewWorkbenchPickerRoute() {
                                     <span className="new-workbench-agent-option-handle">
                                       {agent.name}
                                     </span>
-                                    {selected ? (
-                                      <span aria-hidden="true">✓</span>
-                                    ) : null}
+                                    {selected ? <span aria-hidden="true">✓</span> : null}
                                   </button>
                                 );
                               })}
@@ -516,8 +460,8 @@ export function NewWorkbenchPickerRoute() {
               disabled={creating || selectedTenantId === null}
               onClick={() => void handleCreate()}
             >
-              Or <span>just open an empty channel</span> — nobody is in it yet,
-              add people and agents as you go.
+              Or <span>just open an empty channel</span> — nobody is in it yet, add people and
+              agents as you go.
             </button>
           </>
         )}
@@ -530,28 +474,20 @@ export function NewWorkbenchPickerRoute() {
           tenantId={selectedTenantId}
           onCreated={(definition) => {
             if (currentTenantIdRef.current !== selectedTenantId) return;
-            queryClient.setQueryData<
-              Awaited<ReturnType<typeof listTenantInvitableDefinitions>>
-            >(
+            queryClient.setQueryData<Awaited<ReturnType<typeof listTenantInvitableDefinitions>>>(
               ["tenant", selectedTenantId, "invitable-definitions"],
               (current) => [
-                ...(current ?? []).filter(
-                  (agent) => agent.id !== definition.id,
-                ),
+                ...(current ?? []).filter((agent) => agent.id !== definition.id),
                 {
                   id: definition.id,
                   name: definition.name,
-                  ...(definition.description !== null &&
-                  definition.description !== ""
+                  ...(definition.description !== null && definition.description !== ""
                     ? { description: definition.description }
                     : {}),
                 },
               ],
             );
-            setSelectedAgentDefinitionIds((current) => [
-              ...current,
-              definition.id,
-            ]);
+            setSelectedAgentDefinitionIds((current) => [...current, definition.id]);
             promptRef.current?.focus();
           }}
         />
diff --git a/apps/web/src/pages/onboarding-page.tsx b/apps/web/src/pages/onboarding-page.tsx
index 8c896af458..75da7ec6ae 100644
--- a/apps/web/src/pages/onboarding-page.tsx
+++ b/apps/web/src/pages/onboarding-page.tsx
@@ -23,10 +23,7 @@ import { WarningCircle } from "@corbits/icons";
 import { WorkbenchLoadingState } from "@corbits/chat-ui";
 import { useCallback, useEffect, useState } from "react";
 
-import {
-  ensurePrimaryTenant,
-  runPortableClientBootstrap,
-} from "../client-bootstrap";
+import { ensurePrimaryTenant, runPortableClientBootstrap } from "../client-bootstrap";
 import { createFetchStockHub, findOwnedTenants } from "../needs-converge";
 import { deployMyraSource } from "../myra-deploy";
 import { useNavigate } from "../navigation";
@@ -125,9 +122,7 @@ export function OnboardingPage({ user }: { readonly user: SessionUser }) {
             setState({
               phase: "error",
               message:
-                error instanceof Error
-                  ? error.message
-                  : "Checking your model access hit a snag.",
+                error instanceof Error ? error.message : "Checking your model access hit a snag.",
             });
           },
         );
@@ -136,10 +131,7 @@ export function OnboardingPage({ user }: { readonly user: SessionUser }) {
         if (cancelled) return;
         setState({
           phase: "error",
-          message:
-            error instanceof Error
-              ? error.message
-              : "Setting up your workbench hit a snag.",
+          message: error instanceof Error ? error.message : "Setting up your workbench hit a snag.",
         });
       },
     );
@@ -149,7 +141,6 @@ export function OnboardingPage({ user }: { readonly user: SessionUser }) {
     // `publishAndInstall` is defined below and stable across renders (it
     // closes over nothing but `setState`), so it is intentionally left
     // out of this effect's dependency list.
-    // eslint-disable-next-line react-hooks/exhaustive-deps
   }, [state.phase, user]);
 
   // Step 3: publish Myra's deploy input for the resolved offering, then
@@ -171,10 +162,7 @@ export function OnboardingPage({ user }: { readonly user: SessionUser }) {
       (error: unknown) => {
         setState({
           phase: "error",
-          message:
-            error instanceof Error
-              ? error.message
-              : "Publishing Myra's source hit a snag.",
+          message: error instanceof Error ? error.message : "Publishing Myra's source hit a snag.",
         });
       },
     );
@@ -203,10 +191,7 @@ export function OnboardingPage({ user }: { readonly user: SessionUser }) {
         if (cancelled) return;
         setState({
           phase: "error",
-          message:
-            error instanceof Error
-              ? error.message
-              : "Setting up your workbench hit a snag.",
+          message: error instanceof Error ? error.message : "Setting up your workbench hit a snag.",
         });
       },
     );
@@ -222,10 +207,7 @@ export function OnboardingPage({ user }: { readonly user: SessionUser }) {
           <h1 className="onboarding-title">Checking your workbench</h1>
           <p className="onboarding-subtitle">One moment.</p>
           <div className="onboarding-content">
-            <WorkbenchLoadingState
-              delayMs={0}
-              title="Checking your workbench…"
-            />
+            <WorkbenchLoadingState delayMs={0} title="Checking your workbench…" />
           </div>
         </div>
       </OnboardingLayout>
@@ -235,10 +217,7 @@ export function OnboardingPage({ user }: { readonly user: SessionUser }) {
   if (state.phase === "provider-setup") {
     return (
       <OnboardingLayout>
-        <div
-          className="onboarding-phase onboarding-phase--credential"
-          key="provider-setup"
-        >
+        <div className="onboarding-phase onboarding-phase--credential" key="provider-setup">
           <h1 className="onboarding-title">Connect a model provider</h1>
           <p className="onboarding-subtitle">
             Myra needs one working inference credential before she can start.
@@ -257,8 +236,7 @@ export function OnboardingPage({ user }: { readonly user: SessionUser }) {
                   if (primary === undefined) {
                     setState({
                       phase: "error",
-                      message:
-                        "Your primary workbench disappeared mid-setup — please retry.",
+                      message: "Your primary workbench disappeared mid-setup — please retry.",
                     });
                     return;
                   }
@@ -280,10 +258,7 @@ export function OnboardingPage({ user }: { readonly user: SessionUser }) {
           <h1 className="onboarding-title">Setting up your workbench</h1>
           <p className="onboarding-subtitle">One moment.</p>
           <div className="onboarding-content">
-            <WorkbenchLoadingState
-              delayMs={0}
-              title="Setting up your workbench…"
-            />
+            <WorkbenchLoadingState delayMs={0} title="Setting up your workbench…" />
           </div>
         </div>
       </OnboardingLayout>
diff --git a/apps/web/src/pages/plugins-page.tsx b/apps/web/src/pages/plugins-page.tsx
index 158d5207d0..683c6cd528 100644
--- a/apps/web/src/pages/plugins-page.tsx
+++ b/apps/web/src/pages/plugins-page.tsx
@@ -38,10 +38,7 @@ import {
 } from "../shell/provider-health-context";
 import { StageTopBar } from "../shell/stage-top-bar";
 import { createSkill, listSkills, type SkillSummary } from "../skills-api";
-import {
-  CreateSkillDialog,
-  type SkillCreateInput,
-} from "./create-skill-dialog";
+import { CreateSkillDialog, type SkillCreateInput } from "./create-skill-dialog";
 
 type PluginsState =
   | { readonly status: "loading" }
@@ -87,9 +84,7 @@ export function PluginsRoute({
   // A preset deep link's slug (CL-7141), passed to the MCP presets
   // section so it can focus that preset's own card once its catalog
   // has loaded — cleared as soon as the section has acted on it.
-  const [autoConnectPresetSlug, setAutoConnectPresetSlug] = useState<
-    string | null
-  >(null);
+  const [autoConnectPresetSlug, setAutoConnectPresetSlug] = useState<string | null>(null);
   const pendingConnectProvider = usePendingConnectProvider();
   const clearPendingConnectProvider = useClearPendingConnectProvider();
   const requestPluginsConnect = useRequestPluginsConnect();
@@ -131,8 +126,7 @@ export function PluginsRoute({
         if (!cancelled) setPluginsState({ status: "ready", plugins });
       })
       .catch((cause: unknown) => {
-        if (!cancelled)
-          setPluginsState({ status: "error", message: messageOf(cause) });
+        if (!cancelled) setPluginsState({ status: "error", message: messageOf(cause) });
       });
     return () => {
       cancelled = true;
@@ -181,8 +175,7 @@ export function PluginsRoute({
         if (!cancelled) setSkillsState({ status: "ready", skills });
       })
       .catch((cause: unknown) => {
-        if (!cancelled)
-          setSkillsState({ status: "error", message: messageOf(cause) });
+        if (!cancelled) setSkillsState({ status: "error", message: messageOf(cause) });
       });
     return () => {
       cancelled = true;
@@ -205,12 +198,7 @@ export function PluginsRoute({
       setConnectDeepLinkNotFound(true);
     }
     clearPendingConnectProvider();
-  }, [
-    pluginsState,
-    pendingConnectProvider,
-    clearPendingConnectProvider,
-    openPluginPanel,
-  ]);
+  }, [pluginsState, pendingConnectProvider, clearPendingConnectProvider, openPluginPanel]);
 
   // `request_connection`'s fallback link (CL-7141): `/plugins?connect=<id>`
   // hands the connector id off through the same `requestPluginsConnect`
@@ -232,9 +220,7 @@ export function PluginsRoute({
     window.history.replaceState(
       null,
       "",
-      rest === ""
-        ? window.location.pathname
-        : `${window.location.pathname}?${rest}`,
+      rest === "" ? window.location.pathname : `${window.location.pathname}?${rest}`,
     );
     if (connectId.startsWith("mcp:")) {
       const slug = connectId.slice("mcp:".length);
diff --git a/apps/web/src/pages/routine-detail-page.tsx b/apps/web/src/pages/routine-detail-page.tsx
index 3325bce617..e941c82743 100644
--- a/apps/web/src/pages/routine-detail-page.tsx
+++ b/apps/web/src/pages/routine-detail-page.tsx
@@ -21,12 +21,7 @@ function RoutineNotice({
 }) {
   return (
     <div className="flex h-full min-h-0 flex-col">
-      <StageTopBar
-        crumbs={[
-          { label: "Routines", href: ROUTINES_PATH_PREFIX },
-          { label: title },
-        ]}
-      />
+      <StageTopBar crumbs={[{ label: "Routines", href: ROUTINES_PATH_PREFIX }, { label: title }]} />
       <PageShell>
         <p className="m-0 text-sm text-[var(--ui-fg-muted)]">{description}</p>
         {children ?? (
@@ -53,10 +48,7 @@ export function RoutineDetailPage({
   return (
     <div className="flex h-full min-h-0 flex-col">
       <StageTopBar
-        crumbs={[
-          { label: "Routines", href: ROUTINES_PATH_PREFIX },
-          { label: row.definition.name },
-        ]}
+        crumbs={[{ label: "Routines", href: ROUTINES_PATH_PREFIX }, { label: row.definition.name }]}
         subtitle={sentence}
         actions={
           <div className="flex items-center gap-2">
@@ -74,9 +66,7 @@ export function RoutineDetailPage({
       />
       <PageShell>
         <h1 className="m-0 text-xl font-semibold">{row.definition.name}</h1>
-        <p className="mt-2 text-sm text-[var(--ui-fg-muted)]">
-          {row.tenantName}
-        </p>
+        <p className="mt-2 text-sm text-[var(--ui-fg-muted)]">{row.tenantName}</p>
         <p className="mt-4 text-lg">{sentence}</p>
       </PageShell>
     </div>
@@ -95,24 +85,17 @@ export function RoutineDetailRoute({ segment }: { readonly segment: string }) {
   const actions = useRoutineActions();
   const rows = routinesQuery.kind === "ready" ? routinesQuery.data : [];
   const resolved =
-    routinesQuery.kind === "ready"
-      ? resolveRoutineSegment(rows, segment)
-      : undefined;
+    routinesQuery.kind === "ready" ? resolveRoutineSegment(rows, segment) : undefined;
 
   if (routinesQuery.kind === "loading") {
     return <RoutineNotice title="Routine" description="Loading…" />;
   }
   if (routinesQuery.kind === "error") {
-    return (
-      <RoutineNotice title={segment} description={routinesQuery.message} />
-    );
+    return <RoutineNotice title={segment} description={routinesQuery.message} />;
   }
   if (resolved === undefined) {
     return (
-      <RoutineNotice
-        title={segment}
-        description="No scheduled workflow matches this address."
-      />
+      <RoutineNotice title={segment} description="No scheduled workflow matches this address." />
     );
   }
 
diff --git a/apps/web/src/pages/routines-available-strings.ts b/apps/web/src/pages/routines-available-strings.ts
index 13ca8d349e..031ecdaf9b 100644
--- a/apps/web/src/pages/routines-available-strings.ts
+++ b/apps/web/src/pages/routines-available-strings.ts
@@ -4,8 +4,7 @@
 // platform-side noun (see `scripts/checks/ui-vocabulary.ts`).
 
 export const AVAILABLE_SECTION_TITLE = "Available";
-export const AVAILABLE_SECTION_SUBTITLE =
-  "Workflows this workbench hasn't added yet.";
+export const AVAILABLE_SECTION_SUBTITLE = "Workflows this workbench hasn't added yet.";
 
 /**
  * Every connector id `WORKFLOW_CATALOG` currently names as a required
@@ -31,9 +30,7 @@ function connectorDisplayName(connectorId: string): string {
   );
 }
 
-export function missingConnectionsReason(
-  missingConnections: readonly string[],
-): string {
+export function missingConnectionsReason(missingConnections: readonly string[]): string {
   const names = missingConnections.map(connectorDisplayName);
   if (names.length === 1) {
     return `Connect ${names[0]} first.`;
diff --git a/apps/web/src/pages/routines-page.tsx b/apps/web/src/pages/routines-page.tsx
index 4a9b7c2a60..a7117d79e0 100644
--- a/apps/web/src/pages/routines-page.tsx
+++ b/apps/web/src/pages/routines-page.tsx
@@ -26,10 +26,7 @@ import type { GlobalRoutineRow } from "../global-routines";
 import { routineDetailPath } from "../global-routines";
 import { useBench } from "../bench-context";
 import { tenantKeys } from "../query-client";
-import {
-  listAvailableCatalogWorkflows,
-  type AvailableCatalogWorkflow,
-} from "../routines-api";
+import { listAvailableCatalogWorkflows, type AvailableCatalogWorkflow } from "../routines-api";
 import { Link } from "../navigation";
 import { PLUGINS_PATH_PREFIX } from "../path-ids";
 import { StageTopBar } from "../shell/stage-top-bar";
@@ -42,11 +39,7 @@ import {
 
 export type { GlobalRoutineRow } from "../global-routines";
 
-export function AvailableCatalogWorkflowsSection({
-  tenantId,
-}: {
-  readonly tenantId: string;
-}) {
+export function AvailableCatalogWorkflowsSection({ tenantId }: { readonly tenantId: string }) {
   const query = useQuery({
     queryKey: tenantKeys.availableCatalogWorkflows(tenantId),
     queryFn: () => listAvailableCatalogWorkflows(tenantId),
@@ -60,9 +53,7 @@ export function AvailableCatalogWorkflowsSection({
     <div className="flex flex-col gap-2 border-b border-[var(--ui-border)] p-4">
       <div className="flex flex-col">
         <h2 className="text-sm font-medium">{AVAILABLE_SECTION_TITLE}</h2>
-        <p className="text-xs text-[var(--ui-fg-muted)]">
-          {AVAILABLE_SECTION_SUBTITLE}
-        </p>
+        <p className="text-xs text-[var(--ui-fg-muted)]">{AVAILABLE_SECTION_SUBTITLE}</p>
       </div>
       <ul className="flex flex-col gap-2">
         {items.map((entry) => {
@@ -74,9 +65,7 @@ export function AvailableCatalogWorkflowsSection({
             >
               <div className="flex flex-col gap-1">
                 <span className="text-sm font-medium">{entry.displayName}</span>
-                <span className="text-xs text-[var(--ui-fg-muted)]">
-                  {entry.description}
-                </span>
+                <span className="text-xs text-[var(--ui-fg-muted)]">{entry.description}</span>
                 {!entry.connectionsSatisfied ? (
                   <span className="flex items-center gap-2 text-xs text-[var(--ui-fg-muted)]">
                     {missingConnectionsReason(entry.missingConnections)}
@@ -143,15 +132,11 @@ export function GlobalRoutinesList({
                   >
                     {row.definition.name}
                   </Link>
-                  <span className="text-xs text-[var(--ui-fg-muted)]">
-                    {row.tenantName}
-                  </span>
+                  <span className="text-xs text-[var(--ui-fg-muted)]">{row.tenantName}</span>
                 </span>
               </TableCell>
               <TableCell>
-                <span className="text-sm">
-                  {scheduleSentence(row.definition.cron)}
-                </span>
+                <span className="text-sm">{scheduleSentence(row.definition.cron)}</span>
               </TableCell>
               <TableCell>
                 <Switch
@@ -161,11 +146,7 @@ export function GlobalRoutinesList({
                 />
               </TableCell>
               <TableCell>
-                <RunNowButton
-                  variant="outline"
-                  size="sm"
-                  onRun={() => onRunNow(row)}
-                />
+                <RunNowButton variant="outline" size="sm" onRun={() => onRunNow(row)} />
               </TableCell>
             </TableRow>
           );
diff --git a/apps/web/src/pages/settings-nav.tsx b/apps/web/src/pages/settings-nav.tsx
index 447de908ed..0cb2bd8e83 100644
--- a/apps/web/src/pages/settings-nav.tsx
+++ b/apps/web/src/pages/settings-nav.tsx
@@ -26,24 +26,15 @@ export function SettingsNav({
   const activeId = settingsSectionIdFromPath(path);
 
   return (
-    <nav
-      className="settings-nav"
-      aria-label={SETTINGS_STRINGS.sectionsNavLabel}
-    >
+    <nav className="settings-nav" aria-label={SETTINGS_STRINGS.sectionsNavLabel}>
       {groups.map((group) => {
-        const primary = group.sections.filter(
-          (section) => section.advanced !== true,
-        );
-        const advanced = group.sections.filter(
-          (section) => section.advanced === true,
-        );
+        const primary = group.sections.filter((section) => section.advanced !== true);
+        const advanced = group.sections.filter((section) => section.advanced === true);
         return (
           <div key={group.id} className="settings-nav-group">
             <p className="settings-nav-heading">{group.label}</p>
             {group.accessProbeFailed === true && (
-              <p className="settings-nav-access-error">
-                {SETTINGS_STRINGS.accessProbeFailedHint}
-              </p>
+              <p className="settings-nav-access-error">{SETTINGS_STRINGS.accessProbeFailedHint}</p>
             )}
             {primary.map((section) => {
               const Icon = section.icon;
@@ -53,9 +44,7 @@ export function SettingsNav({
                   name={section.title}
                   leading={<Icon aria-hidden="true" />}
                   selected={section.id === activeId}
-                  onSelect={() =>
-                    onNavigate(`${SETTINGS_PATH_PREFIX}/${section.id}`)
-                  }
+                  onSelect={() => onNavigate(`${SETTINGS_PATH_PREFIX}/${section.id}`)}
                 />
               );
             })}
@@ -76,9 +65,7 @@ export function SettingsNav({
                       name={section.title}
                       leading={<Icon aria-hidden="true" />}
                       selected={section.id === activeId}
-                      onSelect={() =>
-                        onNavigate(`${SETTINGS_PATH_PREFIX}/${section.id}`)
-                      }
+                      onSelect={() => onNavigate(`${SETTINGS_PATH_PREFIX}/${section.id}`)}
                     />
                   );
                 })}
diff --git a/apps/web/src/pages/settings-page.tsx b/apps/web/src/pages/settings-page.tsx
index 8049ca8f47..3d0b5799c9 100644
--- a/apps/web/src/pages/settings-page.tsx
+++ b/apps/web/src/pages/settings-page.tsx
@@ -7,11 +7,7 @@
 // renders here in the stage, beside the active section (`settings-nav.tsx`)
 // — master-detail, the list is never repeated in the section panel.
 
-import {
-  flattenSettingsSections,
-  resolveActiveSection,
-  SettingsShell,
-} from "@corbits/settings-ui";
+import { flattenSettingsSections, resolveActiveSection, SettingsShell } from "@corbits/settings-ui";
 import { PageShell } from "@corbits/react-ui";
 import { useEffect } from "react";
 
@@ -42,12 +38,9 @@ export function SettingsRoute({
   const requestedId = settingsSectionIdFromPath(path);
   const activeSection = resolveActiveSection(sections, requestedId);
   const entityId =
-    activeSection === undefined
-      ? null
-      : settingsEntityIdFromPath(path, activeSection.id);
+    activeSection === undefined ? null : settingsEntityIdFromPath(path, activeSection.id);
   const requestedSectionExists =
-    requestedId !== null &&
-    sections.some((section) => section.id === requestedId);
+    requestedId !== null && sections.some((section) => section.id === requestedId);
   // A gated section (People/Roles/Grants/Credentials) is absent from
   // `sections` while its probe is still resolving, same as when it's
   // genuinely denied — wait for every gate to settle before treating a
@@ -75,13 +68,7 @@ export function SettingsRoute({
     if (requestedId !== null && requestedSectionExists) return;
     if (requestedId !== null && !accessSettled) return;
     navigate(`${SETTINGS_PATH_PREFIX}/${activeSectionId}`);
-  }, [
-    requestedId,
-    requestedSectionExists,
-    accessSettled,
-    activeSectionId,
-    navigate,
-  ]);
+  }, [requestedId, requestedSectionExists, accessSettled, activeSectionId, navigate]);
 
   return (
     <div className="flex h-full min-h-0 flex-col">
@@ -89,10 +76,7 @@ export function SettingsRoute({
         crumbs={
           activeSection === undefined
             ? [{ label: "Settings" }]
-            : [
-                { label: "Settings", href: SETTINGS_PATH_PREFIX },
-                { label: activeSection.title },
-              ]
+            : [{ label: "Settings", href: SETTINGS_PATH_PREFIX }, { label: activeSection.title }]
         }
       />
       <div className="settings-layout min-h-0 flex-1">
diff --git a/apps/web/src/pages/skill-detail-page.tsx b/apps/web/src/pages/skill-detail-page.tsx
index ca203f8f34..1ed6fbccd7 100644
--- a/apps/web/src/pages/skill-detail-page.tsx
+++ b/apps/web/src/pages/skill-detail-page.tsx
@@ -13,12 +13,7 @@
 // vendoring a replacement surface. This page is scoped down to what the
 // stock routes actually carry until one exists — see the CL-8086 PR body
 // for the gap.
-import {
-  PageShell,
-  RichEmptyState,
-  Section,
-  formatRelativeTime,
-} from "@corbits/react-ui";
+import { PageShell, RichEmptyState, Section, formatRelativeTime } from "@corbits/react-ui";
 import { Lightning } from "@corbits/icons";
 import { WorkbenchLoadingState } from "@corbits/chat-ui";
 import { ApiQueryError, describeApiError } from "@corbits/api-query";
@@ -76,10 +71,7 @@ export function SkillDetailPage({
     void read();
   }, [read]);
 
-  const crumbs = [
-    { label: "Skills", href: SKILLS_PATH_PREFIX },
-    { label: name },
-  ];
+  const crumbs = [{ label: "Skills", href: SKILLS_PATH_PREFIX }, { label: name }];
 
   function frame(body: ReactNode) {
     return (
@@ -96,9 +88,7 @@ export function SkillDetailPage({
 
   if (tenantId === null) {
     return frame(
-      <p className="text-sm text-muted-foreground">
-        Pick a workbench to see this skill.
-      </p>,
+      <p className="text-sm text-muted-foreground">Pick a workbench to see this skill.</p>,
     );
   }
 
@@ -133,9 +123,7 @@ export function SkillDetailPage({
   return frame(
     <div className="flex flex-col gap-6">
       <header className="min-w-0">
-        <h1 className="truncate text-lg font-semibold tracking-tight">
-          {skillDisplayName(skill)}
-        </h1>
+        <h1 className="truncate text-lg font-semibold tracking-tight">{skillDisplayName(skill)}</h1>
         <p className="mt-1 text-xs text-muted-foreground">
           Updated {formatRelativeTime(skill.updatedAtIso, now)}
         </p>
@@ -146,10 +134,9 @@ export function SkillDetailPage({
         description="Not readable here yet: there is no stock Interchange route for a skill's SKILL.md content (CL-8086)."
       >
         <p className="text-sm text-muted-foreground">
-          This skill's description, instructions, version history, and pinned-by
-          list lived in the workbench-specific skill registry removed by
-          CL-8086. They will return once a stock route for reading and writing
-          skill content exists.
+          This skill's description, instructions, version history, and pinned-by list lived in the
+          workbench-specific skill registry removed by CL-8086. They will return once a stock route
+          for reading and writing skill content exists.
         </p>
       </Section>
     </div>,
diff --git a/apps/web/src/pages/skills-page.tsx b/apps/web/src/pages/skills-page.tsx
index d6827254ac..3b467c341d 100644
--- a/apps/web/src/pages/skills-page.tsx
+++ b/apps/web/src/pages/skills-page.tsx
@@ -34,10 +34,7 @@ import { useCallback, useEffect, useState, type ReactNode } from "react";
 import { rowActivationProps } from "../activatable-row";
 import { consumePendingNewSkill } from "../command-palette-actions";
 import { createSkill, listSkills, type SkillSummary } from "../skills-api";
-import {
-  CreateSkillDialog,
-  type SkillCreateInput,
-} from "./create-skill-dialog";
+import { CreateSkillDialog, type SkillCreateInput } from "./create-skill-dialog";
 import { useBench } from "../bench-context";
 import { SKILLS_PATH_PREFIX } from "../path-ids";
 import { skillDisplayName } from "../skill-display-name";
@@ -96,8 +93,7 @@ export function SkillsPage({
   useEffect(() => {
     const onCreate = () => setCreateOpen(true);
     window.addEventListener("workbench:skills:create", onCreate);
-    return () =>
-      window.removeEventListener("workbench:skills:create", onCreate);
+    return () => window.removeEventListener("workbench:skills:create", onCreate);
   }, []);
 
   function open(name: string) {
@@ -116,11 +112,7 @@ export function SkillsPage({
   }
 
   const createDialog = (
-    <CreateSkillDialog
-      open={createOpen}
-      onOpenChange={setCreateOpen}
-      onSubmit={handleCreate}
-    />
+    <CreateSkillDialog open={createOpen} onOpenChange={setCreateOpen} onSubmit={handleCreate} />
   );
 
   const crumbs = [{ label: "Skills" }];
@@ -137,9 +129,7 @@ export function SkillsPage({
       <div className="flex h-full min-h-0 flex-col">
         <StageTopBar
           crumbs={crumbs}
-          {...(filter === undefined
-            ? {}
-            : { filter: { label: "Filter skills", ...filter } })}
+          {...(filter === undefined ? {} : { filter: { label: "Filter skills", ...filter } })}
           actions={actions}
         />
         <div className="min-h-0 flex-1 overflow-y-auto">
@@ -160,9 +150,7 @@ export function SkillsPage({
   if (tenantId === null) {
     return stage(
       null,
-      <p className="text-sm text-muted-foreground">
-        Pick a workbench to see its skills.
-      </p>,
+      <p className="text-sm text-muted-foreground">Pick a workbench to see its skills.</p>,
     );
   }
 
@@ -233,9 +221,7 @@ export function SkillsPage({
                   className="cursor-pointer"
                   {...rowActivationProps(() => open(skill.name))}
                 >
-                  <TableCell className="w-48 font-medium">
-                    {skillDisplayName(skill)}
-                  </TableCell>
+                  <TableCell className="w-48 font-medium">{skillDisplayName(skill)}</TableCell>
                   <TableCell className="max-w-sm truncate text-muted-foreground">
                     {skill.description}
                   </TableCell>
@@ -257,11 +243,7 @@ export function SkillsPage({
  * action slot) belongs to `SkillsPage`; a single skill has its own route
  * (`/skills/<name>`, `skill-detail-page.tsx`).
  */
-export function SkillsRoute({
-  navigate,
-}: {
-  readonly navigate: (to: string) => void;
-}) {
+export function SkillsRoute({ navigate }: { readonly navigate: (to: string) => void }) {
   const { selectedTenantId } = useBench();
 
   return <SkillsPage tenantId={selectedTenantId} navigate={navigate} />;
diff --git a/apps/web/src/pages/workbench-timeline.tsx b/apps/web/src/pages/workbench-timeline.tsx
index de08e7c6f4..156b46d5cd 100644
--- a/apps/web/src/pages/workbench-timeline.tsx
+++ b/apps/web/src/pages/workbench-timeline.tsx
@@ -62,17 +62,14 @@ function TimelineRowBody({ event }: { readonly event: TimelineEvent }) {
       return (
         <div className="workbench-timeline-entry-body">
           <strong>{event.senderName}</strong>
-          <span className="workbench-timeline-entry-excerpt">
-            {event.excerpt}
-          </span>
+          <span className="workbench-timeline-entry-excerpt">{event.excerpt}</span>
         </div>
       );
     case "thread-fork":
       return (
         <div className="workbench-timeline-entry-body">
           <span>
-            Forked {event.threadKind === "delivery" ? "delivery" : "reply"}{" "}
-            thread · {event.title}
+            Forked {event.threadKind === "delivery" ? "delivery" : "reply"} thread · {event.title}
           </span>
         </div>
       );
@@ -96,23 +93,14 @@ function TimelineRow({ event }: { readonly event: TimelineEvent }) {
       data-indented={indented}
       data-ctx-timeline-event={event.id}
     >
-      <span
-        className={`workbench-timeline-marker ${markerClass(event)}`}
-        aria-hidden="true"
-      />
-      <span className="workbench-timeline-entry-time">
-        {timeOfDay(event.at)}
-      </span>
+      <span className={`workbench-timeline-marker ${markerClass(event)}`} aria-hidden="true" />
+      <span className="workbench-timeline-entry-time">{timeOfDay(event.at)}</span>
       <TimelineRowBody event={event} />
     </li>
   );
 }
 
-function DayKpiRow({
-  kpi,
-}: {
-  readonly kpi: ReturnType<typeof computeTimelineDayKpis>[number];
-}) {
+function DayKpiRow({ kpi }: { readonly kpi: ReturnType<typeof computeTimelineDayKpis>[number] }) {
   return (
     <div className="workbench-timeline-kpi-day">
       <h4>{kpi.label}</h4>
@@ -142,10 +130,7 @@ export function WorkbenchTimelineView({
   readonly loading: boolean;
 }) {
   const [filter, setFilter] = useState<TimelineFilter>("all");
-  const filtered = useMemo(
-    () => filterTimelineEvents(events, filter),
-    [events, filter],
-  );
+  const filtered = useMemo(() => filterTimelineEvents(events, filter), [events, filter]);
   const dayGroups = useMemo(() => groupTimelineByDay(filtered), [filtered]);
   const kpis = useMemo(() => computeTimelineDayKpis(events), [events]);
 
@@ -165,11 +150,7 @@ export function WorkbenchTimelineView({
 
   return (
     <div className="workbench-timeline">
-      <div
-        className="workbench-timeline-filters"
-        role="group"
-        aria-label="Timeline filter"
-      >
+      <div className="workbench-timeline-filters" role="group" aria-label="Timeline filter">
         {FILTERS.map((option) => (
           <button
             key={option.id}
@@ -195,10 +176,7 @@ export function WorkbenchTimelineView({
                 </div>
                 <ol className="workbench-timeline-rail">
                   {day.events.map((event) => (
-                    <TimelineRow
-                      key={`${event.kind}-${event.id}`}
-                      event={event}
-                    />
+                    <TimelineRow key={`${event.kind}-${event.id}`} event={event} />
                   ))}
                 </ol>
               </section>
@@ -239,20 +217,14 @@ export function WorkbenchTimelineRoute({
       ? ["tenant", "none", "chat", "workbenches", workbenchId, "messages"]
       : tenantKeys.workbenchMessages(benchTenantId, workbenchId),
     benchTenantId !== null,
-    () =>
-      listMessages(benchTenantId as string, workbenchId).then(
-        (page) => page.items,
-      ),
+    () => listMessages(benchTenantId as string, workbenchId).then((page) => page.items),
   );
   const threadsQuery = useTenantQuery(
     benchTenantId === null
       ? ["tenant", "none", "chat", "workbenches", workbenchId, "threads"]
       : tenantKeys.workbenchThreads(benchTenantId, workbenchId),
     benchTenantId !== null,
-    () =>
-      listThreads(benchTenantId as string, workbenchId).then(
-        (page) => page.items,
-      ),
+    () => listThreads(benchTenantId as string, workbenchId).then((page) => page.items),
   );
   const approvalsQuery = usePendingApprovals(benchTenantId);
 
diff --git a/apps/web/src/pages/workflow-detail-page.tsx b/apps/web/src/pages/workflow-detail-page.tsx
index 935b7fe5a0..7eaf124107 100644
--- a/apps/web/src/pages/workflow-detail-page.tsx
+++ b/apps/web/src/pages/workflow-detail-page.tsx
@@ -12,10 +12,7 @@ import type { BadgeTone } from "@corbits/react-ui";
 import { Clock, FlowArrow } from "@corbits/icons";
 
 import { useBench } from "../bench-context";
-import {
-  WORKFLOWS_PATH_PREFIX,
-  workflowDefinitionAssetIdFromPath,
-} from "../path-ids";
+import { WORKFLOWS_PATH_PREFIX, workflowDefinitionAssetIdFromPath } from "../path-ids";
 import { StageTopBar } from "../shell/stage-top-bar";
 import { tenantKeys } from "../query-client";
 import { useTenantQuery } from "../routines-api";
@@ -25,40 +22,28 @@ import {
   type WorkflowDefinitionDetailT,
 } from "../workflow-detail-api";
 
-const STATUS_LABEL: Readonly<
-  Record<WorkflowDefinitionDetailT["status"], string>
-> = {
+const STATUS_LABEL: Readonly<Record<WorkflowDefinitionDetailT["status"], string>> = {
   deployed: "Deployed",
   stopped: "Stopped",
 };
 
-const STATUS_TONE: Readonly<
-  Record<WorkflowDefinitionDetailT["status"], BadgeTone>
-> = {
+const STATUS_TONE: Readonly<Record<WorkflowDefinitionDetailT["status"], BadgeTone>> = {
   deployed: "success",
   stopped: "neutral",
 };
 
 /** The header row: display name, status badge, and current version. */
-function WorkflowDetailHeader({
-  detail,
-}: {
-  readonly detail: WorkflowDefinitionDetailT;
-}) {
+function WorkflowDetailHeader({ detail }: { readonly detail: WorkflowDefinitionDetailT }) {
   return (
     <section className="flex flex-col gap-2">
       <div className="flex items-center gap-2">
-        <Badge tone={STATUS_TONE[detail.status]}>
-          {STATUS_LABEL[detail.status]}
-        </Badge>
+        <Badge tone={STATUS_TONE[detail.status]}>{STATUS_LABEL[detail.status]}</Badge>
         <span className="font-mono text-xs text-[var(--ui-fg-muted)]">
           v{detail.currentVersion}
         </span>
       </div>
       {detail.description !== undefined && detail.description !== null ? (
-        <p className="m-0 text-sm text-[var(--ui-fg-muted)]">
-          {detail.description}
-        </p>
+        <p className="m-0 text-sm text-[var(--ui-fg-muted)]">{detail.description}</p>
       ) : null}
     </section>
   );
@@ -82,18 +67,11 @@ export function NotLaunchableStrip({
 
 /** The whole page body, given a resolved detail — pure, so the layout is
  * testable without a fetch or a router. */
-export function WorkflowDetailPage({
-  detail,
-}: {
-  readonly detail: WorkflowDefinitionDetailT;
-}) {
+export function WorkflowDetailPage({ detail }: { readonly detail: WorkflowDefinitionDetailT }) {
   return (
     <div className="flex h-full min-h-0 flex-col">
       <StageTopBar
-        crumbs={[
-          { label: "Workflows", href: WORKFLOWS_PATH_PREFIX },
-          { label: detail.name },
-        ]}
+        crumbs={[{ label: "Workflows", href: WORKFLOWS_PATH_PREFIX }, { label: detail.name }]}
       />
       <PageShell width="full" className="page-fill">
         <div className="flex flex-col gap-6">
@@ -117,11 +95,7 @@ function WorkflowNotice({
     <div className="flex h-full min-h-0 flex-col">
       <StageTopBar crumbs={[{ label: title }]} />
       <PageShell width="full" className="page-fill">
-        <EmptyState
-          icon={<FlowArrow />}
-          title={title}
-          description={description}
-        />
+        <EmptyState icon={<FlowArrow />} title={title} description={description} />
       </PageShell>
     </div>
   );
@@ -148,15 +122,10 @@ export function WorkflowDetailRoute({ path }: { readonly path: string }) {
     );
   }
 
-  if (
-    detailQuery.kind === "loading" ||
-    detailQuery.kind === "unauthenticated"
-  ) {
+  if (detailQuery.kind === "loading" || detailQuery.kind === "unauthenticated") {
     return (
       <div className="flex h-full min-h-0 flex-col">
-        <StageTopBar
-          crumbs={[{ label: "Workflows", href: WORKFLOWS_PATH_PREFIX }]}
-        />
+        <StageTopBar crumbs={[{ label: "Workflows", href: WORKFLOWS_PATH_PREFIX }]} />
         <PageShell width="full" className="page-fill">
           <EmptyState icon={<Clock />} title="Loading workflow…" />
         </PageShell>
@@ -165,9 +134,7 @@ export function WorkflowDetailRoute({ path }: { readonly path: string }) {
   }
 
   if (detailQuery.kind === "error") {
-    return (
-      <WorkflowNotice title="Workflow" description={detailQuery.message} />
-    );
+    return <WorkflowNotice title="Workflow" description={detailQuery.message} />;
   }
 
   return <WorkflowDetailPage detail={detailQuery.data} />;
diff --git a/apps/web/src/path-ids.test.ts b/apps/web/src/path-ids.test.ts
index 9bd28d0eaa..247df2055b 100644
--- a/apps/web/src/path-ids.test.ts
+++ b/apps/web/src/path-ids.test.ts
@@ -10,20 +10,16 @@ import {
 
 describe("detailSlugFromPath", () => {
   test("reads the slug a detail path carries", () => {
-    expect<string | null>(
-      detailSlugFromPath("/agents/triage-bot", AGENTS_PATH_PREFIX),
-    ).toBe("triage-bot");
+    expect<string | null>(detailSlugFromPath("/agents/triage-bot", AGENTS_PATH_PREFIX)).toBe(
+      "triage-bot",
+    );
   });
 
   test("rejects the bare prefix, another prefix, and a nested path", () => {
     expect(detailSlugFromPath("/agents", AGENTS_PATH_PREFIX)).toBeNull();
     expect(detailSlugFromPath("/agents/", AGENTS_PATH_PREFIX)).toBeNull();
-    expect(
-      detailSlugFromPath("/skills/triage-bot", AGENTS_PATH_PREFIX),
-    ).toBeNull();
-    expect(
-      detailSlugFromPath("/agents/triage-bot/runs", AGENTS_PATH_PREFIX),
-    ).toBeNull();
+    expect(detailSlugFromPath("/skills/triage-bot", AGENTS_PATH_PREFIX)).toBeNull();
+    expect(detailSlugFromPath("/agents/triage-bot/runs", AGENTS_PATH_PREFIX)).toBeNull();
   });
 
   test("rejects an id-shaped segment so id deep links stay with the roster", () => {
@@ -32,12 +28,8 @@ describe("detailSlugFromPath", () => {
 
   test("rejects percent-escapes rather than decoding them", () => {
     expect(detailSlugFromPath("/agents/%", AGENTS_PATH_PREFIX)).toBeNull();
-    expect(
-      detailSlugFromPath("/agents/%E0%A4%A", AGENTS_PATH_PREFIX),
-    ).toBeNull();
-    expect(
-      detailSlugFromPath("/agents/triage%2Dbot", AGENTS_PATH_PREFIX),
-    ).toBeNull();
+    expect(detailSlugFromPath("/agents/%E0%A4%A", AGENTS_PATH_PREFIX)).toBeNull();
+    expect(detailSlugFromPath("/agents/triage%2Dbot", AGENTS_PATH_PREFIX)).toBeNull();
   });
 });
 
diff --git a/apps/web/src/path-ids.ts b/apps/web/src/path-ids.ts
index fcf34fbc24..1dd13c1d7b 100644
--- a/apps/web/src/path-ids.ts
+++ b/apps/web/src/path-ids.ts
@@ -35,10 +35,7 @@ export function detailSlugFromPath(path: string, prefix: string): Slug | null {
 
 /** The undecoded remainder of a flat top-level route (`/agents/:id`) —
  * `null` for the bare prefix or a path outside it. */
-function rawSegmentFromTopLevelPath(
-  path: string,
-  prefix: string,
-): string | null {
+function rawSegmentFromTopLevelPath(path: string, prefix: string): string | null {
   if (path === prefix) return null;
   if (!path.startsWith(`${prefix}/`)) return null;
   const rest = path.slice(prefix.length + 1);
@@ -92,10 +89,7 @@ export function settingsSectionIdFromPath(path: string): string | null {
 
 /** Extract a section's own sub-selection from `/settings/:sectionId/:entityId`
  * — `null` when the path isn't under that section, or carries no sub-id. */
-export function settingsEntityIdFromPath(
-  path: string,
-  sectionId: string,
-): string | null {
+export function settingsEntityIdFromPath(path: string, sectionId: string): string | null {
   const prefix = `${SETTINGS_PATH_PREFIX}/${sectionId}/`;
   if (!path.startsWith(prefix)) return null;
   const rest = path.slice(prefix.length);
diff --git a/apps/web/src/pending-approvals.ts b/apps/web/src/pending-approvals.ts
index 8a52cefbde..0d2a45a24d 100644
--- a/apps/web/src/pending-approvals.ts
+++ b/apps/web/src/pending-approvals.ts
@@ -56,10 +56,7 @@ function runViewPath(tenantId: string, runId: string): string {
  * can hold the grant to resolve an approval without holding the read grant
  * on its run.
  */
-async function fetchAgentName(
-  tenantId: string,
-  runId: string,
-): Promise<string> {
+async function fetchAgentName(tenantId: string, runId: string): Promise<string> {
   const response = await fetch(runViewPath(tenantId, runId), {
     headers: { accept: "application/json" },
   });
@@ -85,9 +82,7 @@ function composeApproval(row: ApprovalRow, agentName: string): ApprovalDisplay {
  * them. One naming read per distinct run, cached by react-query, so a run
  * with several pending asks is named once.
  */
-export function usePendingApprovals(
-  tenantId: string | null,
-): APIQuery<readonly PendingApproval[]> {
+export function usePendingApprovals(tenantId: string | null): APIQuery<readonly PendingApproval[]> {
   const { memberships } = useBench();
   const list = useAPIQuery(
     tenantId === null ? "" : pendingApprovalsPath(tenantId),
@@ -111,10 +106,7 @@ export function usePendingApprovals(
   if (agentNames.some((name) => name.isPending)) return { kind: "loading" };
 
   const agentNameByRunId = new Map(
-    runIds.map((runId, index) => [
-      runId,
-      agentNames[index]?.data ?? UNNAMED_AGENT,
-    ]),
+    runIds.map((runId, index) => [runId, agentNames[index]?.data ?? UNNAMED_AGENT]),
   );
   const membership =
     memberships.kind === "ready"
@@ -137,9 +129,7 @@ export function usePendingApprovals(
  * (no bench selected yet, or the read hasn't resolved), so a caller never
  * mistakes "still loading" for "zero pending."
  */
-export function usePendingApprovalCount(
-  tenantId: string | null,
-): number | null {
+export function usePendingApprovalCount(tenantId: string | null): number | null {
   const list = useAPIQuery(
     tenantId === null ? "" : pendingApprovalsPath(tenantId),
     TenantApprovalsSchema,
@@ -163,10 +153,9 @@ export async function getApprovalDetail(
   tenantId: string,
   approvalId: string,
 ): Promise<ApprovalDetailResult> {
-  const response = await fetch(
-    `/api/tenants/${tenantId}/approvals/${approvalId}`,
-    { headers: { accept: "application/json" } },
-  );
+  const response = await fetch(`/api/tenants/${tenantId}/approvals/${approvalId}`, {
+    headers: { accept: "application/json" },
+  });
   if (response.status === 403) return { kind: "forbidden" };
   if (response.status === 404) return { kind: "not-found" };
   if (!response.ok) {
diff --git a/apps/web/src/profile-relations.test.ts b/apps/web/src/profile-relations.test.ts
index cd8927d006..65cca3af99 100644
--- a/apps/web/src/profile-relations.test.ts
+++ b/apps/web/src/profile-relations.test.ts
@@ -42,10 +42,7 @@ describe("dmCreateInputFor", () => {
   });
 
   test("an agent subject with no matching running instance has no create input", () => {
-    const input = dmCreateInputFor(
-      subject({ kind: "agent", address: "ins_42@bench.dev" }),
-      null,
-    );
+    const input = dmCreateInputFor(subject({ kind: "agent", address: "ins_42@bench.dev" }), null);
     expect(input).toBeNull();
   });
 });
diff --git a/apps/web/src/profile-relations.ts b/apps/web/src/profile-relations.ts
index a2e0bb9e65..726eef4fad 100644
--- a/apps/web/src/profile-relations.ts
+++ b/apps/web/src/profile-relations.ts
@@ -26,11 +26,7 @@ export async function loadSharedWorkbenches(
     listWorkbenches(tenantId, "workbench"),
     listWorkbenches(tenantId, "chat"),
   ]);
-  return sharedWorkbenchesWith(
-    [...workbenches, ...chats],
-    viewerPrincipalId,
-    subject.address,
-  );
+  return sharedWorkbenchesWith([...workbenches, ...chats], viewerPrincipalId, subject.address);
 }
 
 /**
@@ -89,9 +85,7 @@ export async function ensureProfileDm(
     let agentDefinitionId: string | null = null;
     if (subject.kind === "agent") {
       const instances = await listAgentInstances(tenantId);
-      const instance = instances.find(
-        (candidate) => candidate.address === subject.address,
-      );
+      const instance = instances.find((candidate) => candidate.address === subject.address);
       agentDefinitionId = instance?.definitionId ?? null;
     }
     const input = dmCreateInputFor(subject, agentDefinitionId);
diff --git a/apps/web/src/query-client.test.ts b/apps/web/src/query-client.test.ts
index 183e33e653..8c371c54c4 100644
--- a/apps/web/src/query-client.test.ts
+++ b/apps/web/src/query-client.test.ts
@@ -19,9 +19,7 @@ describe("shouldRetryQuery", () => {
   });
 
   test("never retries a definitive 404", () => {
-    expect(shouldRetryQuery(0, new ApiQueryError("not found", 404))).toBe(
-      false,
-    );
+    expect(shouldRetryQuery(0, new ApiQueryError("not found", 404))).toBe(false);
   });
 
   test("retries other statuses up to 3 attempts", () => {
diff --git a/apps/web/src/query-client.ts b/apps/web/src/query-client.ts
index 07787c2cc6..bff1c221ad 100644
--- a/apps/web/src/query-client.ts
+++ b/apps/web/src/query-client.ts
@@ -16,10 +16,7 @@ import type { WorkbenchKind } from "@corbits/chat-ui";
  * times only delays an honest quiet no-op. Everything else (500s,
  * network failures) gets the normal three attempts.
  */
-export function shouldRetryQuery(
-  failureCount: number,
-  error: unknown,
-): boolean {
+export function shouldRetryQuery(failureCount: number, error: unknown): boolean {
   if (error instanceof UnauthenticatedError) return false;
   if (error instanceof ApiQueryError && error.status === 404) return false;
   return failureCount < 3;
@@ -50,9 +47,7 @@ export function isAuthInvalidError(error: unknown): boolean {
  * invalid-session discovery; the caller is responsible for making it
  * idempotent (main.tsx's `handleSignOut` already is).
  */
-export function createAppQueryClient(
-  onAuthInvalid: () => void = () => undefined,
-): QueryClient {
+export function createAppQueryClient(onAuthInvalid: () => void = () => undefined): QueryClient {
   return new QueryClient({
     queryCache: new QueryCache({
       onError: (error) => {
@@ -82,39 +77,31 @@ export const meKeys = {
 /** Tenant-scoped keys — removed wholesale when the user leaves a bench. */
 export const tenantKeys = {
   all: (tenantId: string) => ["tenant", tenantId] as const,
-  pendingApprovals: (tenantId: string) =>
-    ["tenant", tenantId, "approvals"] as const,
+  pendingApprovals: (tenantId: string) => ["tenant", tenantId, "approvals"] as const,
   /** One agent-name read per run, shared by every approval that run raised
    * (see `pending-approvals.ts`). */
-  runView: (tenantId: string, runId: string) =>
-    ["tenant", tenantId, "runs", runId] as const,
+  runView: (tenantId: string, runId: string) => ["tenant", tenantId, "runs", runId] as const,
   routines: (tenantId: string) => ["tenant", tenantId, "routines"] as const,
   availableCatalogWorkflows: (tenantId: string) =>
     ["tenant", tenantId, "routines", "available"] as const,
   skills: (tenantId: string) => ["tenant", tenantId, "skills"] as const,
-  mcpServers: (tenantId: string) =>
-    ["tenant", tenantId, "mcp-servers"] as const,
+  mcpServers: (tenantId: string) => ["tenant", tenantId, "mcp-servers"] as const,
   routineRuns: (tenantId: string, routineId: string) =>
     ["tenant", tenantId, "routines", routineId, "runs"] as const,
-  routineRunHistories: (tenantId: string) =>
-    ["tenant", tenantId, "routine-run-histories"] as const,
-  definitions: (tenantId: string) =>
-    ["tenant", tenantId, "definitions"] as const,
-  agentDirectory: (tenantId: string) =>
-    ["tenant", tenantId, "agents", "directory"] as const,
+  routineRunHistories: (tenantId: string) => ["tenant", tenantId, "routine-run-histories"] as const,
+  definitions: (tenantId: string) => ["tenant", tenantId, "definitions"] as const,
+  agentDirectory: (tenantId: string) => ["tenant", tenantId, "agents", "directory"] as const,
   /** The sidebar's unified list of agent-DM candidates: own + ancestor
    * definitions (see `@corbits/agent-directory`'s `listVisibleAgentDefinitions`).
    * Kept apart from `agentDirectory` above, which is a different surface's
    * own key. */
-  visibleAgents: (tenantId: string) =>
-    ["tenant", tenantId, "agents", "visible"] as const,
+  visibleAgents: (tenantId: string) => ["tenant", tenantId, "agents", "visible"] as const,
   assets: (tenantId: string) => ["tenant", tenantId, "assets"] as const,
   artifacts: (tenantId: string) => ["tenant", tenantId, "artifacts"] as const,
   // Nested under `artifacts` (not a sibling key) so one
   // `invalidateQueries({ queryKey: tenantKeys.artifacts(tenantId) })` after
   // an upload covers both the list and the kind-nav counts.
-  artifactCounts: (tenantId: string) =>
-    ["tenant", tenantId, "artifacts", "counts"] as const,
+  artifactCounts: (tenantId: string) => ["tenant", tenantId, "artifacts", "counts"] as const,
   /** Settings section-nav gating (People/Roles/Grants/Credentials). Keyed
    * so col2's nav band and the settings stage — mounted in separate
    * subtrees — share one cached probe instead of each firing its own. */
@@ -126,43 +113,22 @@ export const tenantKeys = {
    * the Routines picker, `ChatWorkspace`'s own sidebar) keys against,
    * rather than each side of the app/package boundary keeping its own copy
    * of the literal that could drift apart. */
-  workbenches: (tenantId: string, kind: WorkbenchKind) =>
-    workbenchesQueryKey(tenantId, kind),
+  workbenches: (tenantId: string, kind: WorkbenchKind) => workbenchesQueryKey(tenantId, kind),
   /** The sidebar routine-activity seam (`./shell/routine-activity.ts`).
    * CL-8087 deleted the `feed=fires` route this read, so the query resolves
    * with no items and issues no fetch — the key is kept (not the deleted
    * `/top-level-runs` path) so both sidebar mounts still share one cache
    * entry, and so a future native fires equivalent has a key to rewire. */
-  routineActivity: (tenantId: string) =>
-    ["tenant", tenantId, "routine-activity"] as const,
+  routineActivity: (tenantId: string) => ["tenant", tenantId, "routine-activity"] as const,
   /** A workbench's own timeline reads (CL-6224): `tenantId` is the owning
    * bench chat's workbench-tenancy addresses these routes at (see
    * docs/workbench-tenancy.md), `workbenchId` the workbench's own id. */
   workbenchMessages: (tenantId: string, workbenchId: string) =>
-    [
-      "tenant",
-      tenantId,
-      "chat",
-      "workbenches",
-      workbenchId,
-      "messages",
-    ] as const,
+    ["tenant", tenantId, "chat", "workbenches", workbenchId, "messages"] as const,
   workbenchThreads: (tenantId: string, workbenchId: string) =>
-    [
-      "tenant",
-      tenantId,
-      "chat",
-      "workbenches",
-      workbenchId,
-      "threads",
-    ] as const,
+    ["tenant", tenantId, "chat", "workbenches", workbenchId, "threads"] as const,
   workbenchTimelineRoutineRuns: (tenantId: string, workbenchId: string) =>
-    [
-      "tenant",
-      tenantId,
-      "workbench-timeline-routine-runs",
-      workbenchId,
-    ] as const,
+    ["tenant", tenantId, "workbench-timeline-routine-runs", workbenchId] as const,
 };
 
 /**
@@ -171,10 +137,7 @@ export const tenantKeys = {
  * the routines list and its run history — or one of them goes stale while
  * the other doesn't.
  */
-export function invalidateRoutineQueries(
-  queryClient: QueryClient,
-  tenantId: string,
-): void {
+export function invalidateRoutineQueries(queryClient: QueryClient, tenantId: string): void {
   void queryClient.invalidateQueries({
     queryKey: tenantKeys.routines(tenantId),
   });
@@ -196,15 +159,11 @@ export function pathToQueryKey(path: string): readonly unknown[] {
   }
   const assets = /^\/api\/tenants\/([^/]+)\/assets$/.exec(path);
   if (assets?.[1] !== undefined) return tenantKeys.assets(assets[1]);
-  const artifactCounts = /^\/api\/tenants\/([^/]+)\/artifacts\/counts$/.exec(
-    path,
-  );
+  const artifactCounts = /^\/api\/tenants\/([^/]+)\/artifacts\/counts$/.exec(path);
   if (artifactCounts?.[1] !== undefined) {
     return tenantKeys.artifactCounts(artifactCounts[1]);
   }
-  const artifacts = /^\/api\/tenants\/([^/]+)\/artifacts(?:\?(.*))?$/.exec(
-    path,
-  );
+  const artifacts = /^\/api\/tenants\/([^/]+)\/artifacts(?:\?(.*))?$/.exec(path);
   if (artifacts?.[1] !== undefined) {
     return [...tenantKeys.artifacts(artifacts[1]), artifacts[2] ?? ""] as const;
   }
diff --git a/apps/web/src/routes.tsx b/apps/web/src/routes.tsx
index b097ba020d..5820ec6496 100644
--- a/apps/web/src/routes.tsx
+++ b/apps/web/src/routes.tsx
@@ -61,8 +61,7 @@ const MissionControlRoute = lazy(async () => ({
   default: (await import("./pages/mission-control-page")).MissionControlRoute,
 }));
 const NewWorkbenchPickerRoute = lazy(async () => ({
-  default: (await import("./pages/new-workbench-picker"))
-    .NewWorkbenchPickerRoute,
+  default: (await import("./pages/new-workbench-picker")).NewWorkbenchPickerRoute,
 }));
 const ChatPage = lazy(async () => ({
   default: (await import("./pages/chat-page")).ChatPage,
@@ -176,9 +175,7 @@ function slugForDetailRoute(routePath: string, path: string): Slug | null {
 function routineDetailSegment(path: string): string {
   const segment = routineSegmentFromPath(path);
   if (segment === null) {
-    throw new Error(
-      `${ROUTINE_DETAIL_PATH} rendered for a path with no routine: ${path}`,
-    );
+    throw new Error(`${ROUTINE_DETAIL_PATH} rendered for a path with no routine: ${path}`);
   }
   return segment;
 }
@@ -197,10 +194,7 @@ export type AppRoute = {
   readonly path: string;
   readonly label: string;
   readonly icon: ReactNode;
-  readonly render: (
-    path: string,
-    navigate: (to: string) => void,
-  ) => ReactElement;
+  readonly render: (path: string, navigate: (to: string) => void) => ReactElement;
   /** False only for the one screen with no `StageTopBar` of its own — Myra
    * land (`/`) is a bare ensure+redirect hop (see `pages/home-page.tsx`)
    * with nothing in the stage to title itself while it resolves. `AppShell`
@@ -252,11 +246,7 @@ export function matchesRoute(routePath: string, path: string): boolean {
 
 /** Bounces old `/inbox` links and bookmarks home (CL-6151: the Inbox page
  * is gone — tasks and approvals don't flow into a workbench). */
-function InboxRedirect({
-  navigate,
-}: {
-  readonly navigate: (to: string) => void;
-}) {
+function InboxRedirect({ navigate }: { readonly navigate: (to: string) => void }) {
   useEffect(() => {
     navigate("/");
   }, [navigate]);
@@ -308,9 +298,7 @@ export const APP_ROUTES: readonly AppRoute[] = [
     path: ROUTINE_DETAIL_PATH,
     label: "Routine",
     icon: <FlowArrow />,
-    render: (path: string) => (
-      <RoutineDetailRoute segment={routineDetailSegment(path)} />
-    ),
+    render: (path: string) => <RoutineDetailRoute segment={routineDetailSegment(path)} />,
   },
   {
     path: "/routines",
@@ -349,10 +337,7 @@ export const APP_ROUTES: readonly AppRoute[] = [
     label: "Agent",
     icon: <Robot />,
     render: (path: string, navigate: (to: string) => void) => (
-      <AgentDetailRoute
-        slug={detailRouteSlug(AGENT_DETAIL_PATH, path)}
-        navigate={navigate}
-      />
+      <AgentDetailRoute slug={detailRouteSlug(AGENT_DETAIL_PATH, path)} navigate={navigate} />
     ),
   },
   {
@@ -383,9 +368,7 @@ export const APP_ROUTES: readonly AppRoute[] = [
     path: "/skills",
     label: "Skills",
     icon: <Lightning />,
-    render: (_path: string, navigate: (to: string) => void) => (
-      <SkillsRoute navigate={navigate} />
-    ),
+    render: (_path: string, navigate: (to: string) => void) => <SkillsRoute navigate={navigate} />,
   },
   {
     // Skills spent CL-5990 through CL-6355 as a Settings section — this
diff --git a/apps/web/src/routines-api.ts b/apps/web/src/routines-api.ts
index d32d6739ad..850989a3ad 100644
--- a/apps/web/src/routines-api.ts
+++ b/apps/web/src/routines-api.ts
@@ -21,11 +21,7 @@
 import { type } from "arktype";
 import { useQuery } from "@tanstack/react-query";
 import type { APIQuery } from "@corbits/api-query";
-import {
-  ApiQueryError,
-  UnauthenticatedError,
-  toAPIQuery,
-} from "@corbits/api-query";
+import { ApiQueryError, UnauthenticatedError, toAPIQuery } from "@corbits/api-query";
 
 import { setAgentDefinitionStatus } from "./agents-api";
 
@@ -40,8 +36,7 @@ export const ScheduledWorkflowDefinition = type({
   updatedAt: "string",
 });
 
-export type ScheduledWorkflowDefinition =
-  typeof ScheduledWorkflowDefinition.infer;
+export type ScheduledWorkflowDefinition = typeof ScheduledWorkflowDefinition.infer;
 
 export const AvailableCatalogWorkflow = type({
   assetName: "string",
@@ -74,10 +69,7 @@ export function listAvailableCatalogWorkflows(
   return Promise.resolve([]);
 }
 
-export function scheduledWorkflowRunPath(
-  tenantId: string,
-  definitionId: string,
-): string {
+export function scheduledWorkflowRunPath(tenantId: string, definitionId: string): string {
   return `/api/tenants/${tenantId}/workflows/scheduled/${encodeURIComponent(definitionId)}/run`;
 }
 
diff --git a/apps/web/src/session.test.ts b/apps/web/src/session.test.ts
index 8845032e84..78f3f6250c 100644
--- a/apps/web/src/session.test.ts
+++ b/apps/web/src/session.test.ts
@@ -20,9 +20,7 @@ describe("rate-limited auth responses", () => {
             status: 429,
             headers: {
               "content-type": "application/json",
-              ...(retryAfterSeconds === null
-                ? {}
-                : { "X-Retry-After": retryAfterSeconds }),
+              ...(retryAfterSeconds === null ? {} : { "X-Retry-After": retryAfterSeconds }),
             },
           },
         ),
diff --git a/apps/web/src/session.ts b/apps/web/src/session.ts
index 4a21524f90..cf1a26e7a2 100644
--- a/apps/web/src/session.ts
+++ b/apps/web/src/session.ts
@@ -52,8 +52,7 @@ export async function fetchSession(): Promise<SessionState> {
   } catch {
     return {
       kind: "error",
-      message:
-        "You're offline, or Workbench isn't reachable. We'll keep trying.",
+      message: "You're offline, or Workbench isn't reachable. We'll keep trying.",
     };
   }
 }
@@ -82,10 +81,7 @@ function rateLimitedResult(response: Response): AuthResult {
   };
 }
 
-async function postAuth(
-  path: string,
-  body: Record<string, string>,
-): Promise<AuthResult> {
+async function postAuth(path: string, body: Record<string, string>): Promise<AuthResult> {
   try {
     const response = await fetch(path, {
       method: "POST",
@@ -145,10 +141,7 @@ export type SocialProviderId = typeof SocialProviderId.infer;
  * better-auth only wires the credential pairs it was given, so an
  * unconfigured click surfaces better-auth's own error on the form.
  */
-export const SOCIAL_SIGN_IN_PROVIDERS: readonly SocialProviderId[] = [
-  "google",
-  "github",
-];
+export const SOCIAL_SIGN_IN_PROVIDERS: readonly SocialProviderId[] = ["google", "github"];
 
 const SocialSignInResponse = type({ url: "string" });
 
@@ -163,9 +156,7 @@ const SocialSignInResponse = type({ url: "string" });
  * `fetchSession` probe on mount already finds a signed-in session with
  * no dedicated callback route needed on this side.
  */
-export async function signInSocial(
-  provider: SocialProviderId,
-): Promise<AuthResult | null> {
+export async function signInSocial(provider: SocialProviderId): Promise<AuthResult | null> {
   try {
     const response = await fetch("/api/auth/sign-in/social", {
       method: "POST",
diff --git a/apps/web/src/settings-access.ts b/apps/web/src/settings-access.ts
index aac860de0f..6b5f61ed4f 100644
--- a/apps/web/src/settings-access.ts
+++ b/apps/web/src/settings-access.ts
@@ -7,10 +7,7 @@
 // The package stays free of TanStack Query: this only injects the
 // package's probe into the app's cache, the package never imports Query.
 
-import {
-  coalesceSectionAccess,
-  probeSectionAccess,
-} from "@corbits/settings-ui";
+import { coalesceSectionAccess, probeSectionAccess } from "@corbits/settings-ui";
 import type { TenancyAccess } from "@corbits/settings-ui";
 import { useQuery, useQueryClient } from "@tanstack/react-query";
 
diff --git a/apps/web/src/shell/app-shell.tsx b/apps/web/src/shell/app-shell.tsx
index c07091694d..fcf103007c 100644
--- a/apps/web/src/shell/app-shell.tsx
+++ b/apps/web/src/shell/app-shell.tsx
@@ -11,14 +11,7 @@
 // and this component only reads it through the same hooks page code
 // already uses.
 
-import {
-  lazy,
-  Suspense,
-  useEffect,
-  useRef,
-  useState,
-  type ReactNode,
-} from "react";
+import { lazy, Suspense, useEffect, useRef, useState, type ReactNode } from "react";
 import type { ArtifactSaveState } from "@corbits/artifact-ui";
 
 import { WorkbenchLoadingState } from "@corbits/chat-ui";
@@ -53,16 +46,12 @@ const CanvasColumn = lazy(async () => ({
  * (see `AppRoute.hasStageTopBar`'s doc) — everything else titles its own
  * stage, so this stays false for the rest. */
 function routeHasNoStageTopBar(path: string): boolean {
-  const route = APP_ROUTES.find((candidate) =>
-    matchesRoute(candidate.path, path),
-  );
+  const route = APP_ROUTES.find((candidate) => matchesRoute(candidate.path, path));
   return route?.hasStageTopBar === false;
 }
 
 function routeLabel(path: string): string {
-  const route = APP_ROUTES.find((candidate) =>
-    matchesRoute(candidate.path, path),
-  );
+  const route = APP_ROUTES.find((candidate) => matchesRoute(candidate.path, path));
   return route?.label ?? "Workbench";
 }
 
@@ -90,9 +79,9 @@ export function AppShell({
   // co-edit presence). Resets to a fresh state the moment the open
   // artifact changes so a stale "Saved · v3" from a previous artifact can
   // never leak into a newly opened one.
-  const [artifactSaveState, setArtifactSaveState] = useState<ArtifactSaveState>(
-    { kind: "read-only" },
-  );
+  const [artifactSaveState, setArtifactSaveState] = useState<ArtifactSaveState>({
+    kind: "read-only",
+  });
   const artifactSaveStateForId = useRef<string | null>(null);
   useEffect(() => {
     if (canvasArtifact === null || canvasArtifact.rendererKind !== "doc") {
@@ -103,9 +92,7 @@ export function AppShell({
     if (artifactSaveStateForId.current === canvasArtifact.id) return;
     artifactSaveStateForId.current = canvasArtifact.id;
     setArtifactSaveState(
-      canvasArtifact.canEdit === true
-        ? { kind: "unsaved" }
-        : { kind: "read-only" },
+      canvasArtifact.canEdit === true ? { kind: "unsaved" } : { kind: "read-only" },
     );
   }, [canvasArtifact]);
 
@@ -146,12 +133,7 @@ export function AppShell({
 
   return (
     <div className="shell-frame">
-      <Sidebar
-        path={path}
-        user={user}
-        onNavigate={navigate}
-        onSignOut={onSignOut}
-      />
+      <Sidebar path={path} user={user} onNavigate={navigate} onSignOut={onSignOut} />
       <div className="shell-main" ref={mainRef}>
         <div className="shell-main-content">
           <ProviderHealthBanner path={path} />
diff --git a/apps/web/src/shell/bench-activity.ts b/apps/web/src/shell/bench-activity.ts
index e0b16ad9dd..846fee1546 100644
--- a/apps/web/src/shell/bench-activity.ts
+++ b/apps/web/src/shell/bench-activity.ts
@@ -66,8 +66,7 @@ export function useBenchActivity(tenantId: string | null): BenchActivityQuery {
       });
     };
     window.addEventListener(WORKBENCHES_MUTATED_EVENT, onMutated);
-    return () =>
-      window.removeEventListener(WORKBENCHES_MUTATED_EVENT, onMutated);
+    return () => window.removeEventListener(WORKBENCHES_MUTATED_EVENT, onMutated);
   }, [queryClient]);
 
   const workbenchesQuery = useQuery({
@@ -99,14 +98,8 @@ export function useBenchActivity(tenantId: string | null): BenchActivityQuery {
 
   if (tenantId === null) return { kind: "empty" };
 
-  for (const query of [
-    workbenchesQuery,
-    chatsQuery,
-    routinesQuery,
-    agentsQuery,
-  ]) {
-    if (query.isError)
-      return { kind: "error", message: errorMessage(query.error) };
+  for (const query of [workbenchesQuery, chatsQuery, routinesQuery, agentsQuery]) {
+    if (query.isError) return { kind: "error", message: errorMessage(query.error) };
   }
   if (
     workbenchesQuery.data === undefined ||
diff --git a/apps/web/src/shell/canvas-availability.tsx b/apps/web/src/shell/canvas-availability.tsx
index f45ad4d078..1cd4b4a02c 100644
--- a/apps/web/src/shell/canvas-availability.tsx
+++ b/apps/web/src/shell/canvas-availability.tsx
@@ -202,9 +202,7 @@ export function useOpenProfileInCanvas(): (subject: ProfileSubject) => void {
 
 /** Opens (or replaces) the canvas's typed artifact pane — the seam a chat
  * artifact chip or the Library page's "open in canvas" affordance calls. */
-export function useOpenArtifactInCanvas(): (
-  artifact: CanvasArtifactContent,
-) => void {
+export function useOpenArtifactInCanvas(): (artifact: CanvasArtifactContent) => void {
   return useContext(CanvasHostContext).openArtifact;
 }
 
@@ -212,9 +210,7 @@ export function useOpenArtifactInCanvas(): (
  * "New routine" action, the `/routines` page's own create button, and an
  * existing routine's own "Edit" hop all call this. `routineId: null` starts
  * a brand-new routine; a real id opens that routine for editing. */
-export function useOpenRoutineInCanvas(): (
-  subject: RoutinePanelSubject,
-) => void {
+export function useOpenRoutineInCanvas(): (subject: RoutinePanelSubject) => void {
   return useContext(CanvasHostContext).openRoutine;
 }
 
diff --git a/apps/web/src/shell/canvas-column.tsx b/apps/web/src/shell/canvas-column.tsx
index 368f343f71..5b764ec648 100644
--- a/apps/web/src/shell/canvas-column.tsx
+++ b/apps/web/src/shell/canvas-column.tsx
@@ -29,30 +29,16 @@ import {
   // published from a separate repo, not part of this rename.
   type ProfileCardChannel,
 } from "@corbits/react-ui";
-import {
-  ArtifactRenderer,
-  ArtifactTextEditor,
-  type ArtifactSaveState,
-} from "@corbits/artifact-ui";
+import { ArtifactRenderer, ArtifactTextEditor, type ArtifactSaveState } from "@corbits/artifact-ui";
 import type { ProfileSubject, SharedWorkbenchSummary } from "@corbits/chat-ui";
-import {
-  ArrowsIn,
-  ArrowsOut,
-  ArrowSquareOut,
-  CaretLeft,
-  UserCircle,
-  X,
-} from "@corbits/icons";
+import { ArrowsIn, ArrowsOut, ArrowSquareOut, CaretLeft, UserCircle, X } from "@corbits/icons";
 import { useEffect, useState } from "react";
 import type { ReactNode } from "react";
 
 import { useBench } from "../bench-context";
 import { workbenchPath } from "../workbench-path";
 import { ensureProfileDm, loadSharedWorkbenches } from "../profile-relations";
-import type {
-  CanvasArtifactContent,
-  RoutinePanelSubject,
-} from "./canvas-availability";
+import type { CanvasArtifactContent, RoutinePanelSubject } from "./canvas-availability";
 import { useInsertIntoComposer } from "./composer-insertion";
 
 export function CanvasColumn({
@@ -86,12 +72,7 @@ export function CanvasColumn({
   // subtree is an ARIA violation, and the browser moves focus out of an
   // `inert` subtree for us when it closes.
   return (
-    <div
-      className="shell-canvas-column"
-      data-open={open}
-      data-focus={focus}
-      inert={!open}
-    >
+    <div className="shell-canvas-column" data-open={open} data-focus={focus} inert={!open}>
       <div className="shell-canvas-inner">
         {profile !== null ? (
           <ProfileCanvasPane
@@ -215,19 +196,11 @@ export function CanvasPaneHeader({
     >
       <div className="shell-canvas-pane-heading">
         {onBack !== undefined ? (
-          <Button
-            variant="ghost"
-            size="sm"
-            onClick={onBack}
-            aria-label="Back"
-            title="Back"
-          >
+          <Button variant="ghost" size="sm" onClick={onBack} aria-label="Back" title="Back">
             <CaretLeft />
           </Button>
         ) : null}
-        {title !== undefined ? (
-          <span className="shell-canvas-pane-title">{title}</span>
-        ) : null}
+        {title !== undefined ? <span className="shell-canvas-pane-title">{title}</span> : null}
       </div>
       <div className="shell-canvas-pane-actions">
         {trailing}
@@ -251,12 +224,7 @@ export function CanvasPaneHeader({
           </Button>
         ) : null}
         {onClose !== undefined ? (
-          <Button
-            variant="ghost"
-            size="sm"
-            onClick={onClose}
-            aria-label="Close"
-          >
+          <Button variant="ghost" size="sm" onClick={onClose} aria-label="Close">
             <X />
           </Button>
         ) : null}
@@ -278,13 +246,7 @@ function profileActions(
     id: "message",
     label: messagePending ? "Messaging…" : "Message",
     tone: "primary",
-    onClick: messageAction(
-      tenantId,
-      profile,
-      onNavigate,
-      onClose,
-      setMessagePending,
-    ),
+    onClick: messageAction(tenantId, profile, onNavigate, onClose, setMessagePending),
   };
   const mention: ProfileCardAction = {
     id: "mention",
@@ -361,9 +323,7 @@ function useSharedWorkbenches(
   viewerPrincipalId: string | null,
   profile: ProfileSubject,
 ): readonly SharedWorkbenchSummary[] {
-  const [workbenches, setWorkbenches] = useState<
-    readonly SharedWorkbenchSummary[]
-  >([]);
+  const [workbenches, setWorkbenches] = useState<readonly SharedWorkbenchSummary[]>([]);
 
   useEffect(() => {
     setWorkbenches([]);
@@ -405,19 +365,11 @@ function ProfileCanvasPane({
   useEffect(() => {
     setMessagePending(false);
   }, [profile.address]);
-  const sharedWorkbenches = useSharedWorkbenches(
-    selectedTenantId,
-    selectedPrincipalId,
-    profile,
-  );
+  const sharedWorkbenches = useSharedWorkbenches(selectedTenantId, selectedPrincipalId, profile);
 
   return (
     <div className="shell-profile-pane">
-      <CanvasPaneHeader
-        focus={focus}
-        onClose={onClose}
-        onToggleFocus={onToggleFocus}
-      />
+      <CanvasPaneHeader focus={focus} onClose={onClose} onToggleFocus={onToggleFocus} />
       <ProfileCard
         name={profile.displayName}
         subtitle={`@${profile.handle}`}
@@ -471,9 +423,7 @@ function ArtifactCanvasPane({
         focus={focus}
         onClose={onClose}
         onToggleFocus={onToggleFocus}
-        {...(artifact.previewSrc !== undefined
-          ? { previewSrc: artifact.previewSrc }
-          : {})}
+        {...(artifact.previewSrc !== undefined ? { previewSrc: artifact.previewSrc } : {})}
       />
       <div className="shell-artifact-pane-body">
         {showEditor ? (
@@ -493,9 +443,7 @@ function ArtifactCanvasPane({
             {...(artifact.unavailableReason !== undefined
               ? { unavailableReason: artifact.unavailableReason }
               : {})}
-            {...(artifact.previewSrc !== undefined
-              ? { previewSrc: artifact.previewSrc }
-              : {})}
+            {...(artifact.previewSrc !== undefined ? { previewSrc: artifact.previewSrc } : {})}
           />
         )}
       </div>
diff --git a/apps/web/src/shell/composer-insertion.tsx b/apps/web/src/shell/composer-insertion.tsx
index 7f7f5aa47b..ccfa17f7d4 100644
--- a/apps/web/src/shell/composer-insertion.tsx
+++ b/apps/web/src/shell/composer-insertion.tsx
@@ -20,11 +20,7 @@ const ComposerInsertionContext = createContext<ComposerInsertionHost>({
   insertText: () => false,
 });
 
-export function ComposerInsertionProvider({
-  children,
-}: {
-  readonly children: ReactNode;
-}) {
+export function ComposerInsertionProvider({ children }: { readonly children: ReactNode }) {
   const insertRef = useRef<((text: string) => void) | null>(null);
   const value = useMemo<ComposerInsertionHost>(
     () => ({
@@ -40,17 +36,13 @@ export function ComposerInsertionProvider({
     [],
   );
   return (
-    <ComposerInsertionContext.Provider value={value}>
-      {children}
-    </ComposerInsertionContext.Provider>
+    <ComposerInsertionContext.Provider value={value}>{children}</ComposerInsertionContext.Provider>
   );
 }
 
 /** `ChatPage` calls this once and hands the result straight to
  * `ChatWorkspace`'s `registerComposerInsert` prop. */
-export function useRegisterComposerInsert(): (
-  insert: ((text: string) => void) | null,
-) => void {
+export function useRegisterComposerInsert(): (insert: ((text: string) => void) | null) => void {
   return useContext(ComposerInsertionContext).registerInsert;
 }
 
diff --git a/apps/web/src/shell/context-menu/items.test.tsx b/apps/web/src/shell/context-menu/items.test.tsx
index de9996e1a7..990be06ec0 100644
--- a/apps/web/src/shell/context-menu/items.test.tsx
+++ b/apps/web/src/shell/context-menu/items.test.tsx
@@ -14,26 +14,19 @@ import { LIBRARY_BULK_OPERATION_IDS } from "../library-artifacts";
 
 function itemIds(entries: readonly ContextMenuEntry[]): readonly string[] {
   return entries
-    .filter(
-      (entry): entry is Extract<ContextMenuEntry, { kind: "item" }> =>
-        entry.kind === "item",
-    )
+    .filter((entry): entry is Extract<ContextMenuEntry, { kind: "item" }> => entry.kind === "item")
     .map((entry) => entry.id);
 }
 
 function findItem(entries: readonly ContextMenuEntry[], id: string) {
-  const entry = entries.find(
-    (candidate) => candidate.kind === "item" && candidate.id === id,
-  );
+  const entry = entries.find((candidate) => candidate.kind === "item" && candidate.id === id);
   if (entry === undefined || entry.kind !== "item") {
     throw new Error(`no item "${id}" in menu`);
   }
   return entry;
 }
 
-function actions(
-  overrides: Partial<ShellContextMenuActions> = {},
-): ShellContextMenuActions {
+function actions(overrides: Partial<ShellContextMenuActions> = {}): ShellContextMenuActions {
   return {
     tenantId: "tenant-1",
     navigate: mock(() => undefined),
@@ -126,9 +119,7 @@ describe("shellContextMenuFor: workbench", () => {
     const menu = shellContextMenuFor(target, actions());
     findItem(menu.entries, "copy-link").onSelect();
     await Promise.resolve();
-    expect(navigator.clipboard.writeText).toHaveBeenCalledWith(
-      `${window.location.origin}/w/ch-1`,
-    );
+    expect(navigator.clipboard.writeText).toHaveBeenCalledWith(`${window.location.origin}/w/ch-1`);
     expect(toastMock).toHaveBeenCalledWith("Launch Planning link copied");
   });
 
@@ -278,10 +269,7 @@ describe("shellContextMenuFor: account", () => {
 
   test("settings navigates to the settings route", () => {
     const navigate = mock((_to: string) => undefined);
-    const menu = shellContextMenuFor(
-      { type: "account" },
-      actions({ navigate }),
-    );
+    const menu = shellContextMenuFor({ type: "account" }, actions({ navigate }));
     findItem(menu.entries, "settings").onSelect();
     expect(navigate).toHaveBeenCalledWith("/settings");
   });
@@ -303,10 +291,7 @@ describe("shellContextMenuFor: shell", () => {
 
   test("theme item calls cycleTheme", () => {
     const cycleTheme = mock(() => undefined);
-    const menu = shellContextMenuFor(
-      { type: "shell" },
-      actions({ cycleTheme }),
-    );
+    const menu = shellContextMenuFor({ type: "shell" }, actions({ cycleTheme }));
     findItem(menu.entries, "theme").onSelect();
     expect(cycleTheme).toHaveBeenCalledTimes(1);
   });
diff --git a/apps/web/src/shell/context-menu/items.tsx b/apps/web/src/shell/context-menu/items.tsx
index ca7e01480b..b646d6132c 100644
--- a/apps/web/src/shell/context-menu/items.tsx
+++ b/apps/web/src/shell/context-menu/items.tsx
@@ -214,9 +214,7 @@ function insightsRunMenu(
  * right-clicked row, or the whole active selection when the row is part of
  * one — see `SHELL_CONTEXT_MENU_TARGETS`.
  */
-function artifactMenu(
-  target: Extract<ShellContextMenuTarget, { type: "artifact" }>,
-): ContextMenu {
+function artifactMenu(target: Extract<ShellContextMenuTarget, { type: "artifact" }>): ContextMenu {
   const count = target.ids.length;
   return {
     entries: [
diff --git a/apps/web/src/shell/context-menu/shell-context-menu.tsx b/apps/web/src/shell/context-menu/shell-context-menu.tsx
index 5465cf1f74..202a537578 100644
--- a/apps/web/src/shell/context-menu/shell-context-menu.tsx
+++ b/apps/web/src/shell/context-menu/shell-context-menu.tsx
@@ -18,23 +18,15 @@ import { invalidateRoutineQueries } from "../../query-client";
 import { useOpenProfileInCanvas } from "../canvas-availability";
 import { shellContextMenuFor } from "./items";
 import type { ShellContextMenuActions } from "./items";
-import {
-  SHELL_CONTEXT_MENU_FALLBACK,
-  SHELL_CONTEXT_MENU_TARGETS,
-} from "./targets";
+import { SHELL_CONTEXT_MENU_FALLBACK, SHELL_CONTEXT_MENU_TARGETS } from "./targets";
 
-export function ShellContextMenu({
-  onSignOut,
-}: {
-  readonly onSignOut: () => void;
-}) {
+export function ShellContextMenu({ onSignOut }: { readonly onSignOut: () => void }) {
   const { selectedTenantId } = useBench();
   const navigate = useNavigate();
   const openProfile = useOpenProfileInCanvas();
   const { cycleMode } = useTheme();
   const queryClient = useQueryClient();
-  const { open, x, y, menu, triggerElement, show, hide } =
-    useContextMenuState();
+  const { open, x, y, menu, triggerElement, show, hide } = useContextMenuState();
 
   const actions: ShellContextMenuActions = {
     tenantId: selectedTenantId,
@@ -56,14 +48,7 @@ export function ShellContextMenu({
     },
     // `actions` is a fresh object every render; the values it closes over
     // are what actually determine the menu, so those are the real deps.
-    [
-      selectedTenantId,
-      navigate,
-      openProfile,
-      cycleMode,
-      onSignOut,
-      queryClient,
-    ],
+    [selectedTenantId, navigate, openProfile, cycleMode, onSignOut, queryClient],
   );
 
   useDocumentContextMenuTrigger({ resolve, onOpen: show });
diff --git a/apps/web/src/shell/context-menu/targets.test.ts b/apps/web/src/shell/context-menu/targets.test.ts
index 507bf6b354..88cd5f75d6 100644
--- a/apps/web/src/shell/context-menu/targets.test.ts
+++ b/apps/web/src/shell/context-menu/targets.test.ts
@@ -1,10 +1,7 @@
 import { describe, expect, test } from "bun:test";
 import { resolveTarget } from "@corbits/context-menu";
 
-import {
-  SHELL_CONTEXT_MENU_FALLBACK,
-  SHELL_CONTEXT_MENU_TARGETS,
-} from "./targets";
+import { SHELL_CONTEXT_MENU_FALLBACK, SHELL_CONTEXT_MENU_TARGETS } from "./targets";
 
 /** Parses `html`'s single root element and mounts it in the document, so
  * `origin.closest()` walks a real ancestor chain. */
@@ -18,11 +15,7 @@ function mount(html: string): Element {
 }
 
 function resolve(origin: Element | null) {
-  return resolveTarget(
-    origin,
-    SHELL_CONTEXT_MENU_TARGETS,
-    SHELL_CONTEXT_MENU_FALLBACK,
-  );
+  return resolveTarget(origin, SHELL_CONTEXT_MENU_TARGETS, SHELL_CONTEXT_MENU_FALLBACK);
 }
 
 describe("SHELL_CONTEXT_MENU_TARGETS", () => {
@@ -105,8 +98,6 @@ describe("SHELL_CONTEXT_MENU_TARGETS", () => {
 
   test("falls back to the shell target for anything unmatched", () => {
     const container = mount('<div><span id="plain"></span></div>');
-    expect(resolve(container.querySelector("#plain"))).toEqual(
-      SHELL_CONTEXT_MENU_FALLBACK,
-    );
+    expect(resolve(container.querySelector("#plain"))).toEqual(SHELL_CONTEXT_MENU_FALLBACK);
   });
 });
diff --git a/apps/web/src/shell/context-menu/targets.ts b/apps/web/src/shell/context-menu/targets.ts
index 359b95fdda..2ddb668153 100644
--- a/apps/web/src/shell/context-menu/targets.ts
+++ b/apps/web/src/shell/context-menu/targets.ts
@@ -41,68 +41,67 @@ function attr(element: Element, name: string): string | null {
 // matches anywhere in the ancestor chain, not the nearest match overall — so
 // a target nested inside another (the profile face inside a workbench row)
 // must be listed before its container.
-export const SHELL_CONTEXT_MENU_TARGETS: readonly TargetDefinition<ShellContextMenuTarget>[] =
-  [
-    {
-      selector: "[data-ctx-account]",
-      resolve: () => ({ type: "account" }),
+export const SHELL_CONTEXT_MENU_TARGETS: readonly TargetDefinition<ShellContextMenuTarget>[] = [
+  {
+    selector: "[data-ctx-account]",
+    resolve: () => ({ type: "account" }),
+  },
+  {
+    selector: "[data-ctx-profile-address]",
+    resolve: (element) => {
+      const address = attr(element, "data-ctx-profile-address");
+      const handle = attr(element, "data-ctx-profile-handle");
+      if (address === null || handle === null) return null;
+      return { type: "profile", address, handle };
     },
-    {
-      selector: "[data-ctx-profile-address]",
-      resolve: (element) => {
-        const address = attr(element, "data-ctx-profile-address");
-        const handle = attr(element, "data-ctx-profile-handle");
-        if (address === null || handle === null) return null;
-        return { type: "profile", address, handle };
-      },
+  },
+  {
+    selector: "[data-ctx-workbench]",
+    resolve: (element) => {
+      const id = attr(element, "data-ctx-workbench");
+      if (id === null) return null;
+      return {
+        type: "workbench",
+        id,
+        title: attr(element, "data-ctx-workbench-title") ?? id,
+        pinned: attr(element, "data-ctx-workbench-pinned") === "true",
+      };
     },
-    {
-      selector: "[data-ctx-workbench]",
-      resolve: (element) => {
-        const id = attr(element, "data-ctx-workbench");
-        if (id === null) return null;
-        return {
-          type: "workbench",
-          id,
-          title: attr(element, "data-ctx-workbench-title") ?? id,
-          pinned: attr(element, "data-ctx-workbench-pinned") === "true",
-        };
-      },
+  },
+  {
+    selector: "[data-ctx-routine]",
+    resolve: (element) => {
+      const id = attr(element, "data-ctx-routine");
+      if (id === null) return null;
+      return {
+        type: "routine",
+        id,
+        name: attr(element, "data-ctx-routine-name") ?? id,
+      };
     },
-    {
-      selector: "[data-ctx-routine]",
-      resolve: (element) => {
-        const id = attr(element, "data-ctx-routine");
-        if (id === null) return null;
-        return {
-          type: "routine",
-          id,
-          name: attr(element, "data-ctx-routine-name") ?? id,
-        };
-      },
+  },
+  {
+    selector: "[data-ctx-insights-run]",
+    resolve: (element) => {
+      const id = attr(element, "data-ctx-insights-run");
+      if (id === null) return null;
+      return { type: "insights-run", id };
     },
-    {
-      selector: "[data-ctx-insights-run]",
-      resolve: (element) => {
-        const id = attr(element, "data-ctx-insights-run");
-        if (id === null) return null;
-        return { type: "insights-run", id };
-      },
+  },
+  {
+    selector: "[data-ctx-artifact]",
+    resolve: (element) => {
+      const id = attr(element, "data-ctx-artifact");
+      if (id === null) return null;
+      const selectedIds = attr(element, "data-ctx-artifact-selected-ids");
+      const ids =
+        selectedIds === null
+          ? [id]
+          : selectedIds.split(",").filter((candidate) => candidate !== "");
+      return { type: "artifact", id, ids: ids.length > 0 ? ids : [id] };
     },
-    {
-      selector: "[data-ctx-artifact]",
-      resolve: (element) => {
-        const id = attr(element, "data-ctx-artifact");
-        if (id === null) return null;
-        const selectedIds = attr(element, "data-ctx-artifact-selected-ids");
-        const ids =
-          selectedIds === null
-            ? [id]
-            : selectedIds.split(",").filter((candidate) => candidate !== "");
-        return { type: "artifact", id, ids: ids.length > 0 ? ids : [id] };
-      },
-    },
-  ];
+  },
+];
 
 export const SHELL_CONTEXT_MENU_FALLBACK: ShellContextMenuTarget = {
   type: "shell",
diff --git a/apps/web/src/shell/library-artifacts.test.ts b/apps/web/src/shell/library-artifacts.test.ts
index a11c4946eb..8acaacfe17 100644
--- a/apps/web/src/shell/library-artifacts.test.ts
+++ b/apps/web/src/shell/library-artifacts.test.ts
@@ -21,15 +21,11 @@ describe("copy-link labels", () => {
 
 describe("artifactUploadToast", () => {
   test("a single file is confirmed by name", () => {
-    expect(artifactUploadToast(["q3-report.pdf"])).toBe(
-      "Uploaded · q3-report.pdf",
-    );
+    expect(artifactUploadToast(["q3-report.pdf"])).toBe("Uploaded · q3-report.pdf");
   });
 
   test("several files are confirmed by count", () => {
-    expect(artifactUploadToast(["a.png", "b.png", "c.png", "d.png"])).toBe(
-      "Uploaded 4 files",
-    );
+    expect(artifactUploadToast(["a.png", "b.png", "c.png", "d.png"])).toBe("Uploaded 4 files");
   });
 });
 
diff --git a/apps/web/src/shell/library-artifacts.ts b/apps/web/src/shell/library-artifacts.ts
index 3270ffcbd2..56143bf75e 100644
--- a/apps/web/src/shell/library-artifacts.ts
+++ b/apps/web/src/shell/library-artifacts.ts
@@ -29,9 +29,7 @@ export type ArtifactDetail = ArtifactListRow & {
 };
 
 /** One list row reshaped for the Library gallery. */
-export function artifactListRowToSummary(
-  row: ArtifactListRow,
-): ArtifactSummary {
+export function artifactListRowToSummary(row: ArtifactListRow): ArtifactSummary {
   return {
     id: row.id,
     title: row.title,
@@ -43,9 +41,7 @@ export function artifactListRowToSummary(
 }
 
 /** Map a full listing into gallery rows, preserving order and count. */
-export function mapArtifactListToSummaries(
-  rows: readonly ArtifactListRow[],
-): ArtifactSummary[] {
+export function mapArtifactListToSummaries(rows: readonly ArtifactListRow[]): ArtifactSummary[] {
   return rows.map(artifactListRowToSummary);
 }
 
@@ -74,9 +70,7 @@ export async function uploadArtifactFiles(
       body: form,
     });
   } catch (cause) {
-    throw new ApiQueryError(
-      cause instanceof Error ? cause.message : String(cause),
-    );
+    throw new ApiQueryError(cause instanceof Error ? cause.message : String(cause));
   }
   if (response.status === 401) {
     throw new UnauthenticatedError();
@@ -109,18 +103,13 @@ export async function saveArtifactContent(
 ): Promise<ArtifactDetail> {
   let response: Response;
   try {
-    response = await fetch(
-      `/api/tenants/${tenantId}/artifacts/${encodeURIComponent(artifactId)}`,
-      {
-        method: "PUT",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ content }),
-      },
-    );
+    response = await fetch(`/api/tenants/${tenantId}/artifacts/${encodeURIComponent(artifactId)}`, {
+      method: "PUT",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ content }),
+    });
   } catch (cause) {
-    throw new ApiQueryError(
-      cause instanceof Error ? cause.message : String(cause),
-    );
+    throw new ApiQueryError(cause instanceof Error ? cause.message : String(cause));
   }
   if (response.status === 401) {
     throw new UnauthenticatedError();
@@ -138,9 +127,7 @@ export async function saveArtifactContent(
  * read off the query's own status field, never string-matched out of a
  * rendered message (that copy is display-boundary plain by design and
  * carries no status text to match against). */
-export function isArtifactsUnavailableStatus(
-  status: number | undefined,
-): boolean {
+export function isArtifactsUnavailableStatus(status: number | undefined): boolean {
   return status === 503;
 }
 
@@ -173,9 +160,7 @@ export function libraryArtifactDeepLink(id: string): string {
  * clipboard — the same `copyLink` idiom already used for workbenches,
  * routines, and insight runs, extended to a whole selection. */
 export async function copyArtifactLinks(ids: readonly string[]): Promise<void> {
-  const urls = ids.map(
-    (id) => `${window.location.origin}${libraryArtifactDeepLink(id)}`,
-  );
+  const urls = ids.map((id) => `${window.location.origin}${libraryArtifactDeepLink(id)}`);
   await navigator.clipboard.writeText(urls.join("\n"));
 }
 
@@ -197,9 +182,7 @@ export function copyArtifactLinksActionLabel(count: number): string {
  * with no upload backing at all (e.g. a co-edited doc), which is the only
  * case where an empty `content` genuinely means "nothing here yet."
  */
-export function uploadMimeTypeFromSource(
-  source: Record<string, unknown>,
-): string | null {
+export function uploadMimeTypeFromSource(source: Record<string, unknown>): string | null {
   const upload = source.upload;
   if (typeof upload !== "object" || upload === null) return null;
   const mimeType = (upload as Record<string, unknown>).mimeType;
diff --git a/apps/web/src/shell/provider-health-banner.tsx b/apps/web/src/shell/provider-health-banner.tsx
index a46512d24f..f86f254e9e 100644
--- a/apps/web/src/shell/provider-health-banner.tsx
+++ b/apps/web/src/shell/provider-health-banner.tsx
@@ -35,10 +35,7 @@ const PLUGINS_PATH = "/plugins";
 
 // CL-6734: recovery on Settings and the room only — never a stalker toast.
 export function isProviderHealthRecoverySurface(path: string): boolean {
-  return (
-    matchesRoute(SETTINGS_PATH, path) ||
-    matchesRoute(WORKBENCH_PATH_PREFIX, path)
-  );
+  return matchesRoute(SETTINGS_PATH, path) || matchesRoute(WORKBENCH_PATH_PREFIX, path);
 }
 
 // How long the collapse/fade-out below takes to play before the banner's
@@ -58,9 +55,7 @@ const POLL_ERROR_COPY = "Couldn't check provider health. Try again shortly.";
 // expected in practice, but a caller should still see something rather
 // than nothing).
 function providerDisplayName(provider: string): string {
-  const descriptor = connectorDescriptors(CONNECTOR_REGISTRY).find(
-    (d) => d.id === provider,
-  );
+  const descriptor = connectorDescriptors(CONNECTOR_REGISTRY).find((d) => d.id === provider);
   return descriptor?.displayName ?? provider;
 }
 
@@ -68,9 +63,7 @@ function providerDisplayName(provider: string): string {
 // place a `ProviderHealthRecord.category` becomes a sentence. Never a
 // provider's own error text: see `provider-health.ts`'s module header for
 // why only a closed enum ever reaches this far.
-const CATEGORY_COPY: Readonly<
-  Record<ClassifiedInferenceFailureCategory, string>
-> = {
+const CATEGORY_COPY: Readonly<Record<ClassifiedInferenceFailureCategory, string>> = {
   credential_failure: "turned down your key.",
   quota_exhausted: "says this key is out of credit.",
 };
@@ -108,9 +101,7 @@ export function ProviderHealthBanner({ path }: { readonly path: string }) {
   // instantly — see the module comment on hard-shoving the stage this
   // replaces. The `role="alert"` below still comes off the LIVE chrome,
   // not this cache, so a screen reader never sees a stale alert linger.
-  const [cachedVisible, setCachedVisible] = useState<VisibleChrome | null>(
-    visible,
-  );
+  const [cachedVisible, setCachedVisible] = useState<VisibleChrome | null>(visible);
   useEffect(() => {
     if (visibleKind === "error") {
       setCachedVisible({ kind: "error" });
@@ -120,10 +111,7 @@ export function ProviderHealthBanner({ path }: { readonly path: string }) {
       setCachedVisible({ kind: "unhealthy", banner: unhealthyBanner });
       return;
     }
-    const timeout = setTimeout(
-      () => setCachedVisible(null),
-      COLLAPSE_TRANSITION_MS,
-    );
+    const timeout = setTimeout(() => setCachedVisible(null), COLLAPSE_TRANSITION_MS);
     return () => clearTimeout(timeout);
   }, [visibleKind, unhealthyBanner]);
 
@@ -161,10 +149,7 @@ export function ProviderHealthBanner({ path }: { readonly path: string }) {
     >
       <div className="provider-health-banner-collapse-inner">
         {cachedVisible !== null ? (
-          <div
-            className="provider-health-banner"
-            role={isOpen ? "alert" : undefined}
-          >
+          <div className="provider-health-banner" role={isOpen ? "alert" : undefined}>
             <Warning className="provider-health-banner-icon" aria-hidden />
             <p className="provider-health-banner-text">
               {cachedVisible.kind === "error"
@@ -176,12 +161,7 @@ export function ProviderHealthBanner({ path }: { readonly path: string }) {
                 <Button size="sm" variant="primary" onClick={handleFix}>
                   Fix it
                 </Button>
-                <Button
-                  variant="ghost"
-                  size="sm"
-                  onClick={dismiss}
-                  aria-label="Dismiss"
-                >
+                <Button variant="ghost" size="sm" onClick={dismiss} aria-label="Dismiss">
                   <X aria-hidden />
                 </Button>
               </>
diff --git a/apps/web/src/shell/provider-health-context.test.ts b/apps/web/src/shell/provider-health-context.test.ts
index 180f8c6852..c43e64531b 100644
--- a/apps/web/src/shell/provider-health-context.test.ts
+++ b/apps/web/src/shell/provider-health-context.test.ts
@@ -33,22 +33,15 @@ describe("deriveProviderHealthBanner", () => {
     const providers = {
       anthropic: { ...RECORD, at: "2026-08-15T00:00:00.000Z" },
     };
-    expect(
-      deriveProviderHealthBanner(providers, {}, 0)?.zeroWorkingProviders,
-    ).toBe(true);
-    expect(
-      deriveProviderHealthBanner(providers, {}, 1)?.zeroWorkingProviders,
-    ).toBe(false);
+    expect(deriveProviderHealthBanner(providers, {}, 0)?.zeroWorkingProviders).toBe(true);
+    expect(deriveProviderHealthBanner(providers, {}, 1)?.zeroWorkingProviders).toBe(false);
   });
 
   test("an unknown connected count never claims zero working providers", () => {
     const providers = {
       anthropic: { ...RECORD, at: "2026-08-15T00:00:00.000Z" },
     };
-    expect(
-      deriveProviderHealthBanner(providers, {}, undefined)
-        ?.zeroWorkingProviders,
-    ).toBe(false);
+    expect(deriveProviderHealthBanner(providers, {}, undefined)?.zeroWorkingProviders).toBe(false);
   });
 
   test("a dismissed incident (same `at`) is hidden", () => {
@@ -76,9 +69,7 @@ describe("deriveProviderHealthBanner", () => {
       },
       openai: { ...RECORD, at: "2026-08-15T01:00:00.000Z" },
     };
-    expect(deriveProviderHealthBanner(providers, {}, 2)?.provider).toBe(
-      "openai",
-    );
+    expect(deriveProviderHealthBanner(providers, {}, 2)?.provider).toBe("openai");
   });
 });
 
diff --git a/apps/web/src/shell/provider-health-context.tsx b/apps/web/src/shell/provider-health-context.tsx
index cf47cf0608..31e6322e28 100644
--- a/apps/web/src/shell/provider-health-context.tsx
+++ b/apps/web/src/shell/provider-health-context.tsx
@@ -75,9 +75,7 @@ type ProviderHealthContextValue = {
   readonly clearPendingConnectProvider: () => void;
 };
 
-const ProviderHealthContext = createContext<ProviderHealthContextValue | null>(
-  null,
-);
+const ProviderHealthContext = createContext<ProviderHealthContextValue | null>(null);
 
 function firstUnhealthyProvider(
   providers: Readonly<Record<string, ProviderHealthRecord>>,
@@ -147,28 +145,18 @@ export function deriveProviderHealthChrome(
   return { kind: "unhealthy", banner };
 }
 
-export function ProviderHealthProvider({
-  children,
-}: {
-  readonly children: ReactNode;
-}) {
+export function ProviderHealthProvider({ children }: { readonly children: ReactNode }) {
   const { selectedTenantId } = useBench();
-  const [providers, setProviders] = useState<
-    Readonly<Record<string, ProviderHealthRecord>>
-  >({});
-  const [connectedProviderCount, setConnectedProviderCount] = useState<
-    number | undefined
-  >(undefined);
+  const [providers, setProviders] = useState<Readonly<Record<string, ProviderHealthRecord>>>({});
+  const [connectedProviderCount, setConnectedProviderCount] = useState<number | undefined>(
+    undefined,
+  );
   const [status, setStatus] = useState<ProviderHealthPollStatus>("unknown");
   // Keyed by provider, remembers the `at` of the incident a person last
   // dismissed — so a later `at` for the same provider is a NEW incident,
   // not a re-show of one already acknowledged.
-  const [dismissedAt, setDismissedAt] = useState<
-    Readonly<Record<string, string>>
-  >({});
-  const [pendingConnectProvider, setPendingConnectProvider] = useState<
-    string | null
-  >(null);
+  const [dismissedAt, setDismissedAt] = useState<Readonly<Record<string, string>>>({});
+  const [pendingConnectProvider, setPendingConnectProvider] = useState<string | null>(null);
 
   const tenantIdRef = useRef(selectedTenantId);
   tenantIdRef.current = selectedTenantId;
@@ -235,11 +223,7 @@ export function ProviderHealthProvider({
 
   const banner =
     status === "ready"
-      ? deriveProviderHealthBanner(
-          providers,
-          dismissedAt,
-          connectedProviderCount,
-        )
+      ? deriveProviderHealthBanner(providers, dismissedAt, connectedProviderCount)
       : null;
 
   return (
@@ -261,9 +245,7 @@ export function ProviderHealthProvider({
 function useProviderHealthContext(): ProviderHealthContextValue {
   const value = useContext(ProviderHealthContext);
   if (value === null) {
-    throw new Error(
-      "provider health hooks used outside ProviderHealthProvider",
-    );
+    throw new Error("provider health hooks used outside ProviderHealthProvider");
   }
   return value;
 }
diff --git a/apps/web/src/shell/shell-chrome-provider.tsx b/apps/web/src/shell/shell-chrome-provider.tsx
index 28f7afd4bf..24731ea772 100644
--- a/apps/web/src/shell/shell-chrome-provider.tsx
+++ b/apps/web/src/shell/shell-chrome-provider.tsx
@@ -8,13 +8,7 @@
 // plus the shell-only read (`useCanvasColumnOpen`) it needs for its own
 // render.
 
-import {
-  useCallback,
-  useEffect,
-  useRef,
-  useState,
-  type ReactNode,
-} from "react";
+import { useCallback, useEffect, useRef, useState, type ReactNode } from "react";
 
 import type { ProfileSubject } from "@corbits/chat-ui";
 import {
@@ -30,11 +24,7 @@ import {
   useShellLayoutMode,
 } from "@corbits/shell-layout";
 import { useBench } from "../bench-context";
-import {
-  workbenchIdFromPath,
-  workbenchPath,
-  isWorkbenchPath,
-} from "../workbench-path";
+import { workbenchIdFromPath, workbenchPath, isWorkbenchPath } from "../workbench-path";
 import {
   CanvasAvailabilityProvider,
   type AppCanvasColumnState,
@@ -66,11 +56,7 @@ export function ShellChromeProvider({
   const canvasAllowed = canvasColumnAllowed(layoutMode);
 
   const [canvasState, setCanvasState] = useState<AppCanvasColumnState>(
-    initialCanvasColumnState<
-      ProfileSubject,
-      CanvasArtifactContent,
-      RoutinePanelSubject
-    >,
+    initialCanvasColumnState<ProfileSubject, CanvasArtifactContent, RoutinePanelSubject>,
   );
 
   // Tracks the last workbench scope we applied so a real switch (A→B) can
@@ -118,10 +104,7 @@ export function ShellChromeProvider({
     setCanvasState((state) => openArtifactInCanvas(state, artifact));
   }, []);
 
-  const openRoutine = useCallback(
-    (_subject: RoutinePanelSubject) => undefined,
-    [],
-  );
+  const openRoutine = useCallback((_subject: RoutinePanelSubject) => undefined, []);
 
   const closeCanvas = useCallback(() => {
     setCanvasState((state) => closeCanvasContent(state));
diff --git a/apps/web/src/shell/sidebar-rows.test.ts b/apps/web/src/shell/sidebar-rows.test.ts
index f06bd0e847..992ae8fe45 100644
--- a/apps/web/src/shell/sidebar-rows.test.ts
+++ b/apps/web/src/shell/sidebar-rows.test.ts
@@ -43,10 +43,7 @@ describe("buildSidebarRows", () => {
     const rows = mix([channel], [dm]);
 
     expect(idsOf(rows)).toEqual(["ch_dm", "ch_room"]);
-    expect(rows.map((row) => row.workbench.kind)).toEqual([
-      "chat",
-      "workbench",
-    ]);
+    expect(rows.map((row) => row.workbench.kind)).toEqual(["chat", "workbench"]);
     expect(rows.every((row) => row.kind === "workbench")).toBe(true);
   });
 
diff --git a/apps/web/src/shell/sidebar-rows.ts b/apps/web/src/shell/sidebar-rows.ts
index fabbbdf623..0ac498f798 100644
--- a/apps/web/src/shell/sidebar-rows.ts
+++ b/apps/web/src/shell/sidebar-rows.ts
@@ -29,9 +29,7 @@ function isPinned(row: SidebarRow): boolean {
  * the kind:chat and kind:workbench fetches, then sort here — do not split
  * by kind.
  */
-export function buildSidebarRows(
-  items: readonly Workbench[],
-): readonly SidebarRow[] {
+export function buildSidebarRows(items: readonly Workbench[]): readonly SidebarRow[] {
   // Every row a person can see in Postgres appears here. An earlier
   // heuristic (CL-6271) collapsed same-agent chats onto the newest
   // definitionId to hide stale cross-tenant DM siblings; once creation
@@ -41,11 +39,8 @@ export function buildSidebarRows(
   // Hiding real workbenches reads as data loss; a duplicate stale DM is
   // merely untidy. If stale siblings resurface, fix them server-side at
   // list time, not with a client-side identity guess.
-  const rows: SidebarRow[] = items.map(
-    (workbench) => ({ kind: "workbench", workbench }) as const,
-  );
-  const byRecency = (a: SidebarRow, b: SidebarRow) =>
-    recencyOf(b) - recencyOf(a);
+  const rows: SidebarRow[] = items.map((workbench) => ({ kind: "workbench", workbench }) as const);
+  const byRecency = (a: SidebarRow, b: SidebarRow) => recencyOf(b) - recencyOf(a);
   return [
     ...rows.filter(isPinned).sort(byRecency),
     ...rows.filter((row) => !isPinned(row)).sort(byRecency),
diff --git a/apps/web/src/shell/sidebar.tsx b/apps/web/src/shell/sidebar.tsx
index 1cac5a77c4..f3173f4ece 100644
--- a/apps/web/src/shell/sidebar.tsx
+++ b/apps/web/src/shell/sidebar.tsx
@@ -51,12 +51,7 @@ import webPackage from "../../package.json";
 import { useAPIQuery } from "../api";
 import { useBench } from "../bench-context";
 import { TopLevelRunsSchema, insightsTopLevelRunsPath } from "../insights-api";
-import {
-  matchesRoute,
-  MISSION_CONTROL_PATH,
-  NEW_WORKBENCH_PATH,
-  SETTINGS_PATH,
-} from "../routes";
+import { matchesRoute, MISSION_CONTROL_PATH, NEW_WORKBENCH_PATH, SETTINGS_PATH } from "../routes";
 import type { SessionUser } from "../session";
 import { SidebarBrandMark } from "./brand-mark";
 import { initialsOf } from "./docks";
@@ -82,8 +77,7 @@ export function Sidebar({
     selectedTenantId === null ? "" : insightsTopLevelRunsPath(selectedTenantId),
     TopLevelRunsSchema,
   );
-  const showInsights =
-    runsQuery.kind === "ready" && runsQuery.data.data.length > 0;
+  const showInsights = runsQuery.kind === "ready" && runsQuery.data.data.length > 0;
 
   return (
     <SidebarPanel
@@ -120,12 +114,8 @@ export function Sidebar({
         <button
           type="button"
           className="shell-sidebar-mission-control-row"
-          data-active={
-            matchesRoute(MISSION_CONTROL_PATH, path) ? "true" : undefined
-          }
-          aria-current={
-            matchesRoute(MISSION_CONTROL_PATH, path) ? "page" : undefined
-          }
+          data-active={matchesRoute(MISSION_CONTROL_PATH, path) ? "true" : undefined}
+          aria-current={matchesRoute(MISSION_CONTROL_PATH, path) ? "page" : undefined}
           onClick={() => onNavigate(MISSION_CONTROL_PATH)}
         >
           <SquaresFour />
diff --git a/apps/web/src/shell/stage-search.tsx b/apps/web/src/shell/stage-search.tsx
index 414860f170..5959a893b2 100644
--- a/apps/web/src/shell/stage-search.tsx
+++ b/apps/web/src/shell/stage-search.tsx
@@ -28,12 +28,7 @@ export type StageSearchProps = {
   readonly placeholder?: string;
 };
 
-export function StageSearch({
-  label,
-  value,
-  onChange,
-  placeholder,
-}: StageSearchProps) {
+export function StageSearch({ label, value, onChange, placeholder }: StageSearchProps) {
   const [open, setOpen] = useState(value.length > 0);
   const wasOpen = useRef(open);
   const buttonRef = useRef<HTMLButtonElement>(null);
@@ -49,11 +44,7 @@ export function StageSearch({
   }, [open]);
 
   return (
-    <div
-      className="stage-search"
-      data-testid="stage-search"
-      data-expanded={expanded}
-    >
+    <div className="stage-search" data-testid="stage-search" data-expanded={expanded}>
       <button
         ref={buttonRef}
         type="button"
diff --git a/apps/web/src/shell/stage-top-bar.tsx b/apps/web/src/shell/stage-top-bar.tsx
index 9f50a166ed..dd9255fe7c 100644
--- a/apps/web/src/shell/stage-top-bar.tsx
+++ b/apps/web/src/shell/stage-top-bar.tsx
@@ -64,10 +64,7 @@ export function StageTopBar({
           <div className="stage-top-bar-sub">{subtitle}</div>
         </>
       ) : null}
-      <div
-        className="stage-top-bar-actions"
-        data-testid="stage-top-bar-actions"
-      >
+      <div className="stage-top-bar-actions" data-testid="stage-top-bar-actions">
         {filter !== undefined ? <StageSearch {...filter} /> : null}
         {chip !== undefined ? <Chip tone={chip.tone}>{chip.label}</Chip> : null}
         {actions}
@@ -76,11 +73,7 @@ export function StageTopBar({
   );
 }
 
-function StageCrumbTrail({
-  crumbs,
-}: {
-  readonly crumbs: readonly StageCrumb[];
-}) {
+function StageCrumbTrail({ crumbs }: { readonly crumbs: readonly StageCrumb[] }) {
   const lastIndex = crumbs.length - 1;
   const trail = crumbs.map((crumb, index) => (
     <Fragment key={`${String(index)}-${crumb.label}`}>
diff --git a/apps/web/src/shell/tenant-resolution.ts b/apps/web/src/shell/tenant-resolution.ts
index 6aeef57439..cf5a84e2ad 100644
--- a/apps/web/src/shell/tenant-resolution.ts
+++ b/apps/web/src/shell/tenant-resolution.ts
@@ -6,10 +6,7 @@ import type { TenantResolution } from "@corbits/chat-ui";
 
 import type { useBench } from "../bench-context";
 
-type BenchSlice = Pick<
-  ReturnType<typeof useBench>,
-  "memberships" | "selectedTenantId"
->;
+type BenchSlice = Pick<ReturnType<typeof useBench>, "memberships" | "selectedTenantId">;
 
 export function tenantResolutionFromBench(bench: BenchSlice): TenantResolution {
   if (bench.memberships.kind !== "ready") {
diff --git a/apps/web/src/shell/workbench-list.test.ts b/apps/web/src/shell/workbench-list.test.ts
index 6c42751be3..079c9e3d07 100644
--- a/apps/web/src/shell/workbench-list.test.ts
+++ b/apps/web/src/shell/workbench-list.test.ts
@@ -50,12 +50,8 @@ describe("renamePayload", () => {
 
 describe("workbenchRowSignals", () => {
   test("opening clears a ready reply but keeps an active orbit", () => {
-    expect(
-      workbenchRowSignals(workbench({ live: "reply-ready" }), true).live,
-    ).toBe("idle");
-    expect(workbenchRowSignals(workbench({ live: "working" }), true).live).toBe(
-      "working",
-    );
+    expect(workbenchRowSignals(workbench({ live: "reply-ready" }), true).live).toBe("idle");
+    expect(workbenchRowSignals(workbench({ live: "working" }), true).live).toBe("working");
   });
 
   test("passes through only the signals the platform actually sent", () => {
@@ -70,9 +66,7 @@ describe("workbenchRowSignals", () => {
   });
 
   test("an open workbench never shows a stale unread badge", () => {
-    expect(
-      workbenchRowSignals(workbench({ unreadCount: 5 }), true).unread,
-    ).toBe(0);
+    expect(workbenchRowSignals(workbench({ unreadCount: 5 }), true).unread).toBe(0);
   });
 });
 
@@ -84,12 +78,7 @@ describe("orderWorkbenchRows", () => {
       workbench({ id: "c" }),
       workbench({ id: "d", pinned: true }),
     ];
-    expect(orderWorkbenchRows(rows).map((row) => row.id)).toEqual([
-      "b",
-      "d",
-      "a",
-      "c",
-    ]);
+    expect(orderWorkbenchRows(rows).map((row) => row.id)).toEqual(["b", "d", "a", "c"]);
   });
 
   test("orders most-recent activity first within each half", () => {
@@ -121,11 +110,7 @@ describe("orderWorkbenchRows", () => {
       workbench({ id: "b", kind: "workbench" }),
       workbench({ id: "c", kind: "chat" }),
     ];
-    expect(orderWorkbenchRows(rows).map((row) => row.id)).toEqual([
-      "a",
-      "b",
-      "c",
-    ]);
+    expect(orderWorkbenchRows(rows).map((row) => row.id)).toEqual(["a", "b", "c"]);
   });
 });
 
@@ -137,9 +122,7 @@ describe("filterSidebarRows", () => {
       row({ id: "ch_a", title: "Launch plan" }),
       row({ id: "ch_b", title: "Research brief" }),
     ];
-    expect(
-      filterSidebarRows(rows, "launch").map((r) => r.workbench.id),
-    ).toEqual(["ch_a"]);
+    expect(filterSidebarRows(rows, "launch").map((r) => r.workbench.id)).toEqual(["ch_a"]);
   });
 
   test("matches preview text even when the title does not (CL-6662)", () => {
@@ -155,33 +138,19 @@ describe("filterSidebarRows", () => {
         preview: "Weekly digest ready",
       }),
     ];
-    expect(
-      filterSidebarRows(rows, "Solvora").map((r) => r.workbench.id),
-    ).toEqual(["ch_solvora"]);
+    expect(filterSidebarRows(rows, "Solvora").map((r) => r.workbench.id)).toEqual(["ch_solvora"]);
   });
 
   test("is case-insensitive across title and preview", () => {
-    const rows = [
-      row({ id: "ch_1", title: "Myra", preview: "Talked about Acme pricing" }),
-    ];
-    expect(filterSidebarRows(rows, "ACME").map((r) => r.workbench.id)).toEqual([
-      "ch_1",
-    ]);
-    expect(filterSidebarRows(rows, "myra").map((r) => r.workbench.id)).toEqual([
-      "ch_1",
-    ]);
+    const rows = [row({ id: "ch_1", title: "Myra", preview: "Talked about Acme pricing" })];
+    expect(filterSidebarRows(rows, "ACME").map((r) => r.workbench.id)).toEqual(["ch_1"]);
+    expect(filterSidebarRows(rows, "myra").map((r) => r.workbench.id)).toEqual(["ch_1"]);
   });
 
   test("an empty or whitespace-only query returns every row", () => {
     const rows = [row({ id: "ch_a" }), row({ id: "ch_b", title: "Other" })];
-    expect(filterSidebarRows(rows, "").map((r) => r.workbench.id)).toEqual([
-      "ch_a",
-      "ch_b",
-    ]);
-    expect(filterSidebarRows(rows, "   ").map((r) => r.workbench.id)).toEqual([
-      "ch_a",
-      "ch_b",
-    ]);
+    expect(filterSidebarRows(rows, "").map((r) => r.workbench.id)).toEqual(["ch_a", "ch_b"]);
+    expect(filterSidebarRows(rows, "   ").map((r) => r.workbench.id)).toEqual(["ch_a", "ch_b"]);
   });
 
   test("returns no rows when neither title nor preview matches", () => {
@@ -191,9 +160,7 @@ describe("filterSidebarRows", () => {
 
   test("a missing preview still matches on title alone", () => {
     const rows = [row({ id: "ch_1", title: "Launch plan" })];
-    expect(
-      filterSidebarRows(rows, "launch").map((r) => r.workbench.id),
-    ).toEqual(["ch_1"]);
+    expect(filterSidebarRows(rows, "launch").map((r) => r.workbench.id)).toEqual(["ch_1"]);
   });
 
   test("filters a mixed list without splitting by kind", () => {
@@ -210,16 +177,9 @@ describe("filterSidebarRows", () => {
         title: "Launch plan",
       }),
     ];
-    expect(
-      filterSidebarRows(rows, "launch").map((r) => r.workbench.id),
-    ).toEqual(["ch_room"]);
-    expect(
-      filterSidebarRows(rows, "Solvora").map((r) => r.workbench.id),
-    ).toEqual(["ch_dm"]);
-    expect(filterSidebarRows(rows, "").map((r) => r.workbench.id)).toEqual([
-      "ch_dm",
-      "ch_room",
-    ]);
+    expect(filterSidebarRows(rows, "launch").map((r) => r.workbench.id)).toEqual(["ch_room"]);
+    expect(filterSidebarRows(rows, "Solvora").map((r) => r.workbench.id)).toEqual(["ch_dm"]);
+    expect(filterSidebarRows(rows, "").map((r) => r.workbench.id)).toEqual(["ch_dm", "ch_room"]);
   });
 });
 
diff --git a/apps/web/src/shell/workbench-list.tsx b/apps/web/src/shell/workbench-list.tsx
index dbc3cd7269..eac55defcf 100644
--- a/apps/web/src/shell/workbench-list.tsx
+++ b/apps/web/src/shell/workbench-list.tsx
@@ -24,14 +24,7 @@ import {
 } from "@corbits/chat-ui";
 import type { Workbench } from "@corbits/chat-ui";
 import { useQueryClient } from "@tanstack/react-query";
-import {
-  ChatCircle,
-  Check,
-  DotsThree,
-  Hash,
-  MagnifyingGlass,
-  PushPin,
-} from "@corbits/icons";
+import { ChatCircle, Check, DotsThree, Hash, MagnifyingGlass, PushPin } from "@corbits/icons";
 import { useEffect, useState } from "react";
 import type { KeyboardEvent } from "react";
 
@@ -85,10 +78,7 @@ export function rowMenuLabels(
  * title) — the caller's cue to treat the rename as a no-op cancel rather
  * than firing an empty-name PATCH.
  */
-export function renamePayload(
-  input: string,
-  currentTitle: string,
-): string | undefined {
+export function renamePayload(input: string, currentTitle: string): string | undefined {
   const trimmed = input.trim();
   if (trimmed.length === 0 || trimmed === currentTitle) return undefined;
   return trimmed;
@@ -116,30 +106,20 @@ export type WorkbenchRowSignals = {
  * refetch on navigation, so the open row's count is forced to 0 locally.
  */
 export function workbenchRowSignals(
-  workbench: Pick<
-    Workbench,
-    "unreadCount" | "lastActivityAt" | "live" | "sharedLabel"
-  >,
+  workbench: Pick<Workbench, "unreadCount" | "lastActivityAt" | "live" | "sharedLabel">,
   isOpen: boolean,
 ): WorkbenchRowSignals {
   return {
-    ...(workbench.sharedLabel !== undefined
-      ? { sharedLabel: workbench.sharedLabel }
-      : {}),
+    ...(workbench.sharedLabel !== undefined ? { sharedLabel: workbench.sharedLabel } : {}),
     ...(workbench.live !== undefined
       ? {
-          live:
-            isOpen && workbench.live === "reply-ready"
-              ? "idle"
-              : workbench.live,
+          live: isOpen && workbench.live === "reply-ready" ? "idle" : workbench.live,
         }
       : {}),
     ...(workbench.lastActivityAt !== undefined
       ? { time: formatRelativeTime(workbench.lastActivityAt) }
       : {}),
-    ...(workbench.unreadCount !== undefined
-      ? { unread: isOpen ? 0 : workbench.unreadCount }
-      : {}),
+    ...(workbench.unreadCount !== undefined ? { unread: isOpen ? 0 : workbench.unreadCount } : {}),
   };
 }
 
@@ -149,9 +129,7 @@ export function workbenchRowSignals(
  * relative order (stable sort). Kind is kept on each workbench for
  * icons/create; this helper never groups by it.
  */
-export function orderWorkbenchRows(
-  workbenches: readonly Workbench[],
-): readonly Workbench[] {
+export function orderWorkbenchRows(workbenches: readonly Workbench[]): readonly Workbench[] {
   const byRecency = (a: Workbench, b: Workbench) => {
     const at = a.lastActivityAt ? Date.parse(a.lastActivityAt) : 0;
     const bt = b.lastActivityAt ? Date.parse(b.lastActivityAt) : 0;
@@ -177,8 +155,7 @@ export function filterSidebarRows(
   if (needle === "") return rows;
   return rows.filter((row) => {
     const title =
-      displayWorkbenchTitle(row.workbench.title, row.workbench.id) ||
-      CHAT_STRINGS.unnamedWorkbench;
+      displayWorkbenchTitle(row.workbench.title, row.workbench.id) || CHAT_STRINGS.unnamedWorkbench;
     if (title.toLowerCase().includes(needle)) return true;
     const preview = row.workbench.preview ?? "";
     return preview.toLowerCase().includes(needle);
@@ -233,11 +210,7 @@ function WorkbenchRow({
       if (isWorkbenchRenameRequestFor(event, workbench.id)) startRename();
     }
     window.addEventListener(REQUEST_WORKBENCH_RENAME_EVENT, onRenameRequest);
-    return () =>
-      window.removeEventListener(
-        REQUEST_WORKBENCH_RENAME_EVENT,
-        onRenameRequest,
-      );
+    return () => window.removeEventListener(REQUEST_WORKBENCH_RENAME_EVENT, onRenameRequest);
   }, [workbench.id]);
 
   async function commitRename() {
@@ -294,25 +267,18 @@ function WorkbenchRow({
         autoFocus
         value={renameValue}
         aria-label={CHAT_STRINGS.rowMenuRename}
-        onChange={(event) =>
-          setRenameValue((event.target as HTMLInputElement).value)
-        }
+        onChange={(event) => setRenameValue((event.target as HTMLInputElement).value)}
         onKeyDown={handleRenameKeyDown}
         onBlur={() => void commitRename()}
       />
     );
   }
 
-  const displayTitle =
-    displayWorkbenchTitle(title, workbench.id) || CHAT_STRINGS.unnamedWorkbench;
+  const displayTitle = displayWorkbenchTitle(title, workbench.id) || CHAT_STRINGS.unnamedWorkbench;
   const { sharedLabel, live, time, unread } = signals;
   const hasUnread = typeof unread === "number" && unread > 0;
   const liveLabel =
-    live === "working"
-      ? "Agent working"
-      : live === "reply-ready"
-        ? "Reply ready"
-        : "";
+    live === "working" ? "Agent working" : live === "reply-ready" ? "Reply ready" : "";
 
   return (
     <div
@@ -340,17 +306,9 @@ function WorkbenchRow({
             </span>
           )}
           {live === "working" ? (
-            <span
-              className="shell-ch-orbit"
-              aria-hidden="true"
-              title="Agent working"
-            />
+            <span className="shell-ch-orbit" aria-hidden="true" title="Agent working" />
           ) : live === "reply-ready" ? (
-            <span
-              className="shell-ch-completion"
-              aria-hidden="true"
-              title="Reply ready"
-            >
+            <span className="shell-ch-completion" aria-hidden="true" title="Reply ready">
               <Check aria-hidden="true" />
             </span>
           ) : null}
@@ -362,10 +320,7 @@ function WorkbenchRow({
           <span className="shell-ch-name-row">
             <span className="shell-ch-name">{displayTitle}</span>
             {pinned ? (
-              <PushPin
-                className="shell-ch-pin"
-                aria-label={CHAT_STRINGS.rowMenuPin}
-              />
+              <PushPin className="shell-ch-pin" aria-label={CHAT_STRINGS.rowMenuPin} />
             ) : null}
             {sharedLabel !== undefined && sharedLabel !== "" ? (
               <Badge tone="shared" title={sharedLabel}>
@@ -378,9 +333,7 @@ function WorkbenchRow({
           ) : null}
         </span>
         <span className="shell-ch-right">
-          {time !== undefined && time !== "" ? (
-            <span className="shell-ch-time">{time}</span>
-          ) : null}
+          {time !== undefined && time !== "" ? <span className="shell-ch-time">{time}</span> : null}
           {hasUnread && live !== "reply-ready" ? (
             <Badge tone="accent" className="shell-ch-unread-badge">
               {unread}
@@ -401,9 +354,7 @@ function WorkbenchRow({
           </MenuTrigger>
           <MenuContent align="start">
             <MenuItem onSelect={startRename}>{renameLabel}</MenuItem>
-            <MenuItem onSelect={() => void togglePinned()}>
-              {pinToggleLabel}
-            </MenuItem>
+            <MenuItem onSelect={() => void togglePinned()}>{pinToggleLabel}</MenuItem>
           </MenuContent>
         </Menu>
       </div>
@@ -495,10 +446,7 @@ export function WorkbenchList({
               active={row.workbench.id === activeId}
               tenantId={tenantId}
               onSelect={() => onNavigate(workbenchPath(row.workbench.id))}
-              signals={workbenchRowSignals(
-                row.workbench,
-                row.workbench.id === activeId,
-              )}
+              signals={workbenchRowSignals(row.workbench, row.workbench.id === activeId)}
             />
           ))}
         </div>
diff --git a/apps/web/src/skill-display-name.test.ts b/apps/web/src/skill-display-name.test.ts
index 83609018a9..46c9c7c02e 100644
--- a/apps/web/src/skill-display-name.test.ts
+++ b/apps/web/src/skill-display-name.test.ts
@@ -4,9 +4,7 @@ import { skillDisplayName } from "./skill-display-name";
 
 describe("skillDisplayName", () => {
   test("title-cases a kebab slug when no display title is set", () => {
-    expect(skillDisplayName({ name: "writing-system-prompts" })).toBe(
-      "Writing System Prompts",
-    );
+    expect(skillDisplayName({ name: "writing-system-prompts" })).toBe("Writing System Prompts");
     expect(skillDisplayName({ name: "triage" })).toBe("Triage");
   });
 
@@ -29,8 +27,6 @@ describe("skillDisplayName", () => {
   });
 
   test("treats a whitespace-only displayTitle as absent", () => {
-    expect(skillDisplayName({ name: "triage", displayTitle: "   " })).toBe(
-      "Triage",
-    );
+    expect(skillDisplayName({ name: "triage", displayTitle: "   " })).toBe("Triage");
   });
 });
diff --git a/apps/web/src/skills-api.ts b/apps/web/src/skills-api.ts
index 3a288cdfa1..3a7052548d 100644
--- a/apps/web/src/skills-api.ts
+++ b/apps/web/src/skills-api.ts
@@ -91,11 +91,7 @@ async function request<T>(
   }
   const parsed = schema(json);
   if (parsed instanceof type.errors) {
-    throw new ApiQueryError(
-      `Unexpected response shape: ${parsed.summary}`,
-      undefined,
-      path,
-    );
+    throw new ApiQueryError(`Unexpected response shape: ${parsed.summary}`, undefined, path);
   }
   return parsed;
 }
@@ -113,20 +109,16 @@ function toSkillSummary(asset: Asset): SkillSummary {
   };
 }
 
-export function listSkills(
-  tenantId: string,
-  query = "",
-): Promise<readonly SkillSummary[]> {
-  return request(
-    `${base(tenantId)}?kind=skill&inherited=false`,
-    AssetListResponse,
-  ).then((assets) => {
-    const skills = assets.map(toSkillSummary);
-    const needle = query.trim().toLowerCase();
-    return needle === ""
-      ? skills
-      : skills.filter((skill) => skill.name.toLowerCase().includes(needle));
-  });
+export function listSkills(tenantId: string, query = ""): Promise<readonly SkillSummary[]> {
+  return request(`${base(tenantId)}?kind=skill&inherited=false`, AssetListResponse).then(
+    (assets) => {
+      const skills = assets.map(toSkillSummary);
+      const needle = query.trim().toLowerCase();
+      return needle === ""
+        ? skills
+        : skills.filter((skill) => skill.name.toLowerCase().includes(needle));
+    },
+  );
 }
 
 export async function loadSkill(
@@ -136,11 +128,7 @@ export async function loadSkill(
   const skills = await listSkills(tenantId);
   const skill = skills.find((candidate) => candidate.name === name);
   if (skill === undefined) {
-    throw new ApiQueryError(
-      `No skill named "${name}" in this workbench.`,
-      404,
-      base(tenantId),
-    );
+    throw new ApiQueryError(`No skill named "${name}" in this workbench.`, 404, base(tenantId));
   }
   return { skill };
 }
@@ -161,9 +149,7 @@ export function createSkill(
     body: {
       kind: "skill",
       name: input.name,
-      ...(input.displayName !== undefined
-        ? { displayName: input.displayName }
-        : {}),
+      ...(input.displayName !== undefined ? { displayName: input.displayName } : {}),
     },
   }).then(toSkillSummary);
 }
diff --git a/apps/web/src/threads.test.ts b/apps/web/src/threads.test.ts
index 70bd959eda..f242812fd4 100644
--- a/apps/web/src/threads.test.ts
+++ b/apps/web/src/threads.test.ts
@@ -83,10 +83,7 @@ describe("thread grouping", () => {
       message("<b@example>", "ada@example.com", ["myra@example.com"]),
     ]);
 
-    expect(threads.map((thread) => thread.messageIds)).toEqual([
-      ["<a@example>"],
-      ["<b@example>"],
-    ]);
+    expect(threads.map((thread) => thread.messageIds)).toEqual([["<a@example>"], ["<b@example>"]]);
   });
 
   test("keeps same-subject messages with distinct correspondents separate", () => {
@@ -99,10 +96,7 @@ describe("thread grouping", () => {
       }),
     ]);
 
-    expect(threads.map((thread) => thread.messageIds)).toEqual([
-      ["<a@example>"],
-      ["<b@example>"],
-    ]);
+    expect(threads.map((thread) => thread.messageIds)).toEqual([["<a@example>"], ["<b@example>"]]);
   });
 
   test("scopes the subject fallback to a single participant set", () => {
@@ -190,14 +184,9 @@ describe("DM derivation from participant-filtered threads", () => {
   test("excludes group threads, user-only threads, and agent-only threads", () => {
     const threads = deriveDmThreads(
       [
-        message("<group@example>", "ada@example.com", [
-          "myra@example.com",
-          "reviewer@example.com",
-        ]),
+        message("<group@example>", "ada@example.com", ["myra@example.com", "reviewer@example.com"]),
         message("<solo@example>", "ada@example.com", ["ada@example.com"]),
-        message("<agents@example>", "myra@example.com", [
-          "reviewer@example.com",
-        ]),
+        message("<agents@example>", "myra@example.com", ["reviewer@example.com"]),
       ],
       user,
     );
@@ -233,9 +222,7 @@ describe("participants", () => {
           cc: ["bea@example.com"],
         }),
       ),
-    ).toEqual(
-      new Set(["ada@example.com", "myra@example.com", "bea@example.com"]),
-    );
+    ).toEqual(new Set(["ada@example.com", "myra@example.com", "bea@example.com"]));
   });
 });
 
diff --git a/apps/web/src/threads.ts b/apps/web/src/threads.ts
index 710f5ffe51..ad6bd21eaf 100644
--- a/apps/web/src/threads.ts
+++ b/apps/web/src/threads.ts
@@ -50,10 +50,7 @@ function normalizeSubject(subject: string): string {
     .toLowerCase();
 }
 
-function parentIdOf(
-  message: ThreadMessage,
-  knownIds: Set<string>,
-): string | undefined {
+function parentIdOf(message: ThreadMessage, knownIds: Set<string>): string | undefined {
   if (message.inReplyTo !== undefined && knownIds.has(message.inReplyTo)) {
     return message.inReplyTo;
   }
@@ -92,8 +89,7 @@ export function deriveThreads(messages: readonly ThreadMessage[]): Thread[] {
   const participantKeyOf = (group: Group): string => {
     const members = new Set<string>();
     for (const member of group.members) {
-      for (const participant of participantsOf(member))
-        members.add(participant);
+      for (const participant of participantsOf(member)) members.add(participant);
     }
     return JSON.stringify([...members].sort());
   };
@@ -124,8 +120,7 @@ export function deriveThreads(messages: readonly ThreadMessage[]): Thread[] {
       else existing.members.push(...group.members);
       continue;
     }
-    const subject =
-      group.subject === undefined ? "" : normalizeSubject(group.subject);
+    const subject = group.subject === undefined ? "" : normalizeSubject(group.subject);
     if (subject === "") {
       solo.push(group);
       continue;
@@ -136,14 +131,13 @@ export function deriveThreads(messages: readonly ThreadMessage[]): Thread[] {
     else existing.members.push(...group.members);
   }
 
-  return [
-    ...merged.entries(),
-    ...solo.map((group) => ["", group] as const),
-  ].map(([key, group]) => ({
-    key: key === "" ? `message:${group.members[0]?.messageId}` : key,
-    rootMessageId: group.members[0]?.messageId ?? "",
-    messageIds: group.members.map((message) => message.messageId),
-  }));
+  return [...merged.entries(), ...solo.map((group) => ["", group] as const)].map(
+    ([key, group]) => ({
+      key: key === "" ? `message:${group.members[0]?.messageId}` : key,
+      rootMessageId: group.members[0]?.messageId ?? "",
+      messageIds: group.members.map((message) => message.messageId),
+    }),
+  );
 }
 
 /** Derives DMs: threads whose participant set is the user's principal
@@ -156,9 +150,7 @@ export function deriveDmThreads(
   const users = new Set(userAddresses.map(normalizeAddress));
   const derived: DmThread[] = [];
   for (const thread of deriveThreads(messages)) {
-    const byId = new Map(
-      messages.map((message) => [message.messageId, message]),
-    );
+    const byId = new Map(messages.map((message) => [message.messageId, message]));
     const members = new Set<string>();
     for (const messageId of thread.messageIds) {
       const message = byId.get(messageId);
diff --git a/apps/web/src/webhook-triggers-api.ts b/apps/web/src/webhook-triggers-api.ts
index 668960b63e..d912818158 100644
--- a/apps/web/src/webhook-triggers-api.ts
+++ b/apps/web/src/webhook-triggers-api.ts
@@ -38,11 +38,7 @@ export type CreateWebhookTriggerInput = {
 
 type Validator<T> = (data: unknown) => T | ArkErrors;
 
-async function request<T>(
-  path: string,
-  schema: Validator<T>,
-  init?: RequestInit,
-): Promise<T> {
+async function request<T>(path: string, schema: Validator<T>, init?: RequestInit): Promise<T> {
   let response: Response;
   try {
     response = await fetch(path, {
@@ -50,9 +46,7 @@ async function request<T>(
       headers: { "content-type": "application/json", ...init?.headers },
     });
   } catch (cause) {
-    throw new ApiQueryError(
-      cause instanceof Error ? cause.message : String(cause),
-    );
+    throw new ApiQueryError(cause instanceof Error ? cause.message : String(cause));
   }
   if (response.status === 401) {
     throw new UnauthenticatedError();
@@ -60,9 +54,7 @@ async function request<T>(
   if (!response.ok) {
     const detail = await response
       .json()
-      .then(
-        (body: { error?: { message?: string } }) => body.error?.message ?? "",
-      )
+      .then((body: { error?: { message?: string } }) => body.error?.message ?? "")
       .catch(() => "");
     throw new ApiQueryError(
       `The server answered ${response.status} for ${path}.${detail === "" ? "" : ` ${detail}`}`,
@@ -73,30 +65,20 @@ async function request<T>(
   const body: unknown = await response.json().catch(() => undefined);
   const parsed = schema(body);
   if (parsed instanceof type.errors) {
-    throw new ApiQueryError(
-      `Unexpected response shape from ${path}: ${parsed.summary}`,
-    );
+    throw new ApiQueryError(`Unexpected response shape from ${path}: ${parsed.summary}`);
   }
   return parsed;
 }
 
-export function listWebhookTriggers(
-  tenantId: string,
-): Promise<readonly WebhookTrigger[]> {
+export function listWebhookTriggers(tenantId: string): Promise<readonly WebhookTrigger[]> {
   return request(
     `/api/tenants/${tenantId}/webhook-triggers`,
     type({ items: WebhookTrigger.array() }),
   ).then((page) => page.items);
 }
 
-export function getWebhookTrigger(
-  tenantId: string,
-  id: string,
-): Promise<WebhookTrigger> {
-  return request(
-    `/api/tenants/${tenantId}/webhook-triggers/${id}`,
-    WebhookTrigger,
-  );
+export function getWebhookTrigger(tenantId: string, id: string): Promise<WebhookTrigger> {
+  return request(`/api/tenants/${tenantId}/webhook-triggers/${id}`, WebhookTrigger);
 }
 
 /**
@@ -113,11 +95,10 @@ export function createWebhookTrigger(
   tenantId: string,
   input: CreateWebhookTriggerInput,
 ): Promise<WebhookTriggerWithSecret> {
-  return request(
-    `/api/tenants/${tenantId}/webhook-triggers`,
-    WebhookTriggerWithSecret,
-    { method: "POST", body: JSON.stringify(input) },
-  );
+  return request(`/api/tenants/${tenantId}/webhook-triggers`, WebhookTriggerWithSecret, {
+    method: "POST",
+    body: JSON.stringify(input),
+  });
 }
 
 export function rotateWebhookTriggerSecret(
@@ -136,22 +117,16 @@ export function setWebhookTriggerEnabled(
   id: string,
   enabled: boolean,
 ): Promise<WebhookTrigger> {
-  return request(
-    `/api/tenants/${tenantId}/webhook-triggers/${id}/enabled`,
-    WebhookTrigger,
-    { method: "POST", body: JSON.stringify({ enabled }) },
-  );
+  return request(`/api/tenants/${tenantId}/webhook-triggers/${id}/enabled`, WebhookTrigger, {
+    method: "POST",
+    body: JSON.stringify({ enabled }),
+  });
 }
 
-export function deleteWebhookTrigger(
-  tenantId: string,
-  id: string,
-): Promise<void> {
-  return request(
-    `/api/tenants/${tenantId}/webhook-triggers/${id}`,
-    type("unknown"),
-    { method: "DELETE" },
-  ).then(() => undefined);
+export function deleteWebhookTrigger(tenantId: string, id: string): Promise<void> {
+  return request(`/api/tenants/${tenantId}/webhook-triggers/${id}`, type("unknown"), {
+    method: "DELETE",
+  }).then(() => undefined);
 }
 
 /** The URL a sender posts deliveries to — built client-side (no route
diff --git a/apps/web/src/workbench-not-found-event.ts b/apps/web/src/workbench-not-found-event.ts
index 3d384d2127..6d7d05fc0d 100644
--- a/apps/web/src/workbench-not-found-event.ts
+++ b/apps/web/src/workbench-not-found-event.ts
@@ -8,7 +8,5 @@ export const WORKBENCH_NOT_FOUND_EVENT = "workbench:workbench-not-found";
 
 export function reportWorkbenchNotFound(workbenchId: string): void {
   if (typeof window === "undefined") return;
-  window.dispatchEvent(
-    new CustomEvent(WORKBENCH_NOT_FOUND_EVENT, { detail: workbenchId }),
-  );
+  window.dispatchEvent(new CustomEvent(WORKBENCH_NOT_FOUND_EVENT, { detail: workbenchId }));
 }
diff --git a/apps/web/src/workbench-path.test.ts b/apps/web/src/workbench-path.test.ts
index 8702048f5d..582e59111c 100644
--- a/apps/web/src/workbench-path.test.ts
+++ b/apps/web/src/workbench-path.test.ts
@@ -44,18 +44,14 @@ describe("workbench settings path helpers", () => {
   });
 
   test("builds a section-scoped settings path", () => {
-    expect(workbenchSettingsPath("ch_1", "members")).toBe(
-      "/w/ch_1/settings/members",
-    );
+    expect(workbenchSettingsPath("ch_1", "members")).toBe("/w/ch_1/settings/members");
   });
 
   test("builds a section entity deep link and encodes the entity id", () => {
     expect(workbenchSettingsPath("ch_1", "agents", "wfd_myra")).toBe(
       "/w/ch_1/settings/agents/wfd_myra",
     );
-    expect(workbenchSettingsPath("ch_1", "agents", "a/b")).toBe(
-      "/w/ch_1/settings/agents/a%2Fb",
-    );
+    expect(workbenchSettingsPath("ch_1", "agents", "a/b")).toBe("/w/ch_1/settings/agents/a%2Fb");
   });
 
   test("workbenchIdFromPath resolves ids under /settings", () => {
@@ -69,12 +65,8 @@ describe("workbench settings path helpers", () => {
   });
 
   test("workbenchIdFromPath resolves ids under a section entity deep link", () => {
-    expect(workbenchIdFromPath("/w/ch_1/settings/agents/wfd_myra")).toBe(
-      "ch_1",
-    );
-    expect(workbenchIdFromPath("/chat/ch_1/settings/agents/wfd_myra")).toBe(
-      "ch_1",
-    );
+    expect(workbenchIdFromPath("/w/ch_1/settings/agents/wfd_myra")).toBe("ch_1");
+    expect(workbenchIdFromPath("/chat/ch_1/settings/agents/wfd_myra")).toBe("ch_1");
   });
 
   test("isWorkbenchSettingsPath is true for /settings, /settings/:section, and entity", () => {
@@ -86,72 +78,42 @@ describe("workbench settings path helpers", () => {
   });
 
   test("workbenchSettingsSectionFromPath extracts the trailing section segment", () => {
-    expect(workbenchSettingsSectionFromPath("/w/ch_1/settings/members")).toBe(
-      "members",
-    );
-    expect(workbenchSettingsSectionFromPath("/chat/ch_1/settings/agents")).toBe(
-      "agents",
-    );
-    expect(
-      workbenchSettingsSectionFromPath("/w/ch_1/settings"),
-    ).toBeUndefined();
+    expect(workbenchSettingsSectionFromPath("/w/ch_1/settings/members")).toBe("members");
+    expect(workbenchSettingsSectionFromPath("/chat/ch_1/settings/agents")).toBe("agents");
+    expect(workbenchSettingsSectionFromPath("/w/ch_1/settings")).toBeUndefined();
     expect(workbenchSettingsSectionFromPath("/w/ch_1")).toBeUndefined();
   });
 
   test("workbenchSettingsSectionFromPath reads an unrecognized section id as no section", () => {
-    expect(
-      workbenchSettingsSectionFromPath("/w/ch_1/settings/not-a-real-section"),
-    ).toBeUndefined();
+    expect(workbenchSettingsSectionFromPath("/w/ch_1/settings/not-a-real-section")).toBeUndefined();
   });
 
   test("workbenchSettingsSectionFromPath ignores a trailing entity id", () => {
-    expect(
-      workbenchSettingsSectionFromPath("/w/ch_1/settings/agents/wfd_myra"),
-    ).toBe("agents");
-    expect(
-      workbenchSettingsSectionFromPath("/chat/ch_1/settings/agents/a%2Fb"),
-    ).toBe("agents");
+    expect(workbenchSettingsSectionFromPath("/w/ch_1/settings/agents/wfd_myra")).toBe("agents");
+    expect(workbenchSettingsSectionFromPath("/chat/ch_1/settings/agents/a%2Fb")).toBe("agents");
   });
 
   test("workbenchSettingsEntityIdFromPath extracts the entity under a section", () => {
+    expect(workbenchSettingsEntityIdFromPath("/w/ch_1/settings/agents/wfd_myra", "agents")).toBe(
+      "wfd_myra",
+    );
+    expect(workbenchSettingsEntityIdFromPath("/chat/ch_1/settings/agents/a%2Fb", "agents")).toBe(
+      "a/b",
+    );
+    expect(workbenchSettingsEntityIdFromPath("/w/ch_1/settings/agents", "agents")).toBeNull();
     expect(
-      workbenchSettingsEntityIdFromPath(
-        "/w/ch_1/settings/agents/wfd_myra",
-        "agents",
-      ),
-    ).toBe("wfd_myra");
-    expect(
-      workbenchSettingsEntityIdFromPath(
-        "/chat/ch_1/settings/agents/a%2Fb",
-        "agents",
-      ),
-    ).toBe("a/b");
-    expect(
-      workbenchSettingsEntityIdFromPath("/w/ch_1/settings/agents", "agents"),
-    ).toBeNull();
-    expect(
-      workbenchSettingsEntityIdFromPath(
-        "/w/ch_1/settings/agents/wfd_myra",
-        "members",
-      ),
-    ).toBeNull();
-    expect(
-      workbenchSettingsEntityIdFromPath("/w/ch_1/settings", "agents"),
+      workbenchSettingsEntityIdFromPath("/w/ch_1/settings/agents/wfd_myra", "members"),
     ).toBeNull();
+    expect(workbenchSettingsEntityIdFromPath("/w/ch_1/settings", "agents")).toBeNull();
   });
 
   test("workbenchSettingsSectionFromPath reads a malformed escape as no section", () => {
-    expect(
-      workbenchSettingsSectionFromPath("/w/ch_1/settings/%E0%A4%A"),
-    ).toBeUndefined();
+    expect(workbenchSettingsSectionFromPath("/w/ch_1/settings/%E0%A4%A")).toBeUndefined();
   });
 
   test("workbenchSettingsEntityIdFromPath reads a malformed escape as no entity", () => {
     expect(
-      workbenchSettingsEntityIdFromPath(
-        "/w/ch_1/settings/agents/%E0%A4%A",
-        "agents",
-      ),
+      workbenchSettingsEntityIdFromPath("/w/ch_1/settings/agents/%E0%A4%A", "agents"),
     ).toBeNull();
   });
 });
diff --git a/apps/web/src/workbench-path.ts b/apps/web/src/workbench-path.ts
index 388607b224..532d41f541 100644
--- a/apps/web/src/workbench-path.ts
+++ b/apps/web/src/workbench-path.ts
@@ -8,10 +8,7 @@
 // `/settings/:section` and `settingsEntityIdFromPath` for the app-level
 // Settings page.
 
-import {
-  isWorkbenchSettingsSectionId,
-  type WorkbenchSettingsSectionId,
-} from "@corbits/chat-ui";
+import { isWorkbenchSettingsSectionId, type WorkbenchSettingsSectionId } from "@corbits/chat-ui";
 import { decodedOrNull } from "@corbits/url-path";
 
 export const WORKBENCH_PATH_PREFIX = "/w";
@@ -117,10 +114,7 @@ export function workbenchSettingsSectionFromPath(
  * no sub-id. Mirrors `settingsEntityIdFromPath` in `path-ids.ts`, but
  * locates the settings suffix the same way `workbenchSettingsSectionFromPath`
  * does (`indexOf`), because workbench paths are not rooted at `/settings`. */
-export function workbenchSettingsEntityIdFromPath(
-  path: string,
-  sectionId: string,
-): string | null {
+export function workbenchSettingsEntityIdFromPath(path: string, sectionId: string): string | null {
   const sectionPrefix = `${SETTINGS_SUFFIX}/${sectionId}/`;
   const index = path.indexOf(sectionPrefix);
   if (index === -1) return null;
diff --git a/apps/web/src/workbench-rename-events.ts b/apps/web/src/workbench-rename-events.ts
index 9defabcac1..36f1f1b06d 100644
--- a/apps/web/src/workbench-rename-events.ts
+++ b/apps/web/src/workbench-rename-events.ts
@@ -2,8 +2,7 @@
  * row's own inline-rename input without either side owning the other's
  * state. */
 
-export const REQUEST_WORKBENCH_RENAME_EVENT =
-  "workbench:request-workbench-rename";
+export const REQUEST_WORKBENCH_RENAME_EVENT = "workbench:request-workbench-rename";
 
 export type WorkbenchRenameRequest = { readonly workbenchId: string };
 
@@ -16,13 +15,9 @@ export function requestWorkbenchRename(workbenchId: string): void {
   );
 }
 
-export function isWorkbenchRenameRequestFor(
-  event: Event,
-  workbenchId: string,
-): boolean {
+export function isWorkbenchRenameRequestFor(event: Event, workbenchId: string): boolean {
   return (
     event instanceof CustomEvent &&
-    (event.detail as WorkbenchRenameRequest | undefined)?.workbenchId ===
-      workbenchId
+    (event.detail as WorkbenchRenameRequest | undefined)?.workbenchId === workbenchId
   );
 }
diff --git a/apps/web/src/workbench-timeline-merge.test.ts b/apps/web/src/workbench-timeline-merge.test.ts
index d186c51eaa..2677923f25 100644
--- a/apps/web/src/workbench-timeline-merge.test.ts
+++ b/apps/web/src/workbench-timeline-merge.test.ts
@@ -52,9 +52,7 @@ function approval(overrides: Partial<PendingApproval> = {}): PendingApproval {
 describe("toMessageEvents", () => {
   test("joins text parts and truncates the excerpt at 120 chars", () => {
     const long = "a".repeat(200);
-    const [event] = toMessageEvents([
-      message({ parts: [{ kind: "text", text: long }] }),
-    ]);
+    const [event] = toMessageEvents([message({ parts: [{ kind: "text", text: long }] })]);
     expect(event?.excerpt.length).toBe(121);
     expect(event?.excerpt.endsWith("…")).toBe(true);
   });
@@ -119,24 +117,18 @@ describe("toApprovalEvents", () => {
 describe("mergeTimelineEvents", () => {
   test("sorts every kind onto one oldest-first spine", () => {
     const merged = mergeTimelineEvents({
-      messages: toMessageEvents([
-        message({ id: "m1", createdAt: "2026-08-17T10:00:00.000Z" }),
-      ]),
+      messages: toMessageEvents([message({ id: "m1", createdAt: "2026-08-17T10:00:00.000Z" })]),
       threadForks: toThreadForkEvents([
         thread({ id: "f1", createdAt: "2026-08-17T09:30:00.000Z" }),
       ]),
-      approvals: toApprovalEvents([
-        approval({ id: "a1", createdAt: "2026-08-17T12:00:00.000Z" }),
-      ]),
+      approvals: toApprovalEvents([approval({ id: "a1", createdAt: "2026-08-17T12:00:00.000Z" })]),
     });
     expect(merged.map((e) => e.id)).toEqual(["f1", "m1", "a1"]);
   });
 
   test("drops an event with an unparseable timestamp instead of sorting it arbitrarily", () => {
     const merged = mergeTimelineEvents({
-      messages: toMessageEvents([
-        message({ id: "m1", createdAt: "not-a-date" }),
-      ]),
+      messages: toMessageEvents([message({ id: "m1", createdAt: "not-a-date" })]),
       threadForks: [],
       approvals: [],
     });
@@ -255,15 +247,10 @@ describe("filterTimelineEvents", () => {
   });
 
   test("messages keeps messages and thread forks", () => {
-    expect(filterTimelineEvents(events, "messages").map((e) => e.id)).toEqual([
-      "m1",
-      "f1",
-    ]);
+    expect(filterTimelineEvents(events, "messages").map((e) => e.id)).toEqual(["m1", "f1"]);
   });
 
   test("approvals keeps only approvals", () => {
-    expect(filterTimelineEvents(events, "approvals").map((e) => e.id)).toEqual([
-      "a1",
-    ]);
+    expect(filterTimelineEvents(events, "approvals").map((e) => e.id)).toEqual(["a1"]);
   });
 });
diff --git a/apps/web/src/workbench-timeline-merge.ts b/apps/web/src/workbench-timeline-merge.ts
index 6b6fe44cb0..9d5ae1bfc2 100644
--- a/apps/web/src/workbench-timeline-merge.ts
+++ b/apps/web/src/workbench-timeline-merge.ts
@@ -36,8 +36,7 @@ export type TimelineApprovalEvent = {
   readonly headline: string;
 };
 
-export type TimelineEvent =
-  TimelineMessageEvent | TimelineThreadForkEvent | TimelineApprovalEvent;
+export type TimelineEvent = TimelineMessageEvent | TimelineThreadForkEvent | TimelineApprovalEvent;
 
 const EXCERPT_LIMIT = 120;
 
@@ -48,9 +47,7 @@ function messageExcerpt(item: MessageItem): string {
     .join(" ")
     .trim();
   if (text === "") return "(no text)";
-  return text.length > EXCERPT_LIMIT
-    ? `${text.slice(0, EXCERPT_LIMIT)}…`
-    : text;
+  return text.length > EXCERPT_LIMIT ? `${text.slice(0, EXCERPT_LIMIT)}…` : text;
 }
 
 /** Never the raw address (a per-workbench local id shape) — falls back to
@@ -59,9 +56,7 @@ function senderDisplayName(sender: MessageItem["sender"]): string {
   return sender.name ?? localPartOf(sender.address);
 }
 
-export function toMessageEvents(
-  items: readonly MessageItem[],
-): readonly TimelineMessageEvent[] {
+export function toMessageEvents(items: readonly MessageItem[]): readonly TimelineMessageEvent[] {
   return items.map((item) => ({
     kind: "message",
     id: item.id,
@@ -114,14 +109,8 @@ export type TimelineEventGroups = {
 
 /** One wall-clock spine, oldest first. An event with an unparseable
  * timestamp is dropped rather than sorted arbitrarily. */
-export function mergeTimelineEvents(
-  groups: TimelineEventGroups,
-): readonly TimelineEvent[] {
-  const all: TimelineEvent[] = [
-    ...groups.messages,
-    ...groups.threadForks,
-    ...groups.approvals,
-  ];
+export function mergeTimelineEvents(groups: TimelineEventGroups): readonly TimelineEvent[] {
+  const all: TimelineEvent[] = [...groups.messages, ...groups.threadForks, ...groups.approvals];
   return all
     .filter((event) => !Number.isNaN(Date.parse(event.at)))
     .sort((a, b) => {
@@ -156,9 +145,7 @@ function dayLabel(key: string): string {
 
 /** Buckets an already-sorted (oldest first) spine by UTC calendar day,
  * preserving that order across day boundaries. */
-export function groupTimelineByDay(
-  events: readonly TimelineEvent[],
-): readonly TimelineDayGroup[] {
+export function groupTimelineByDay(events: readonly TimelineEvent[]): readonly TimelineDayGroup[] {
   const order: string[] = [];
   const buckets = new Map<string, TimelineEvent[]>();
   for (const event of events) {
@@ -228,9 +215,7 @@ export function filterTimelineEvents(
     case "all":
       return events;
     case "messages":
-      return events.filter(
-        (event) => event.kind === "message" || event.kind === "thread-fork",
-      );
+      return events.filter((event) => event.kind === "message" || event.kind === "thread-fork");
     case "approvals":
       return events.filter((event) => event.kind === "approval");
   }
diff --git a/apps/web/src/workflow-detail-api.ts b/apps/web/src/workflow-detail-api.ts
index 0abe8aadb1..1d34aca609 100644
--- a/apps/web/src/workflow-detail-api.ts
+++ b/apps/web/src/workflow-detail-api.ts
@@ -14,10 +14,7 @@ import { WorkflowDefinitionDetail } from "@corbits/workflows/client";
 import type { WorkflowDefinitionDetail as WorkflowDefinitionDetailT } from "@corbits/workflows/client";
 
 export type { WorkflowDefinitionDetail as WorkflowDefinitionDetailT } from "@corbits/workflows/client";
-export {
-  workflowDetailPath,
-  workflowNotLaunchableReason,
-} from "@corbits/workflows/client";
+export { workflowDetailPath, workflowNotLaunchableReason } from "@corbits/workflows/client";
 
 const StockWorkflowDefinition = type({
   id: "string",
@@ -69,11 +66,7 @@ async function request<T>(path: string, schema: Validator<T>): Promise<T> {
   const body: unknown = await response.json().catch(() => undefined);
   const parsed = schema(body);
   if (parsed instanceof type.errors) {
-    throw new ApiQueryError(
-      `Unexpected response shape: ${parsed.summary}`,
-      undefined,
-      path,
-    );
+    throw new ApiQueryError(`Unexpected response shape: ${parsed.summary}`, undefined, path);
   }
   return parsed;
 }
diff --git a/apps/web/test/action-command-dispatch-race.test.tsx b/apps/web/test/action-command-dispatch-race.test.tsx
index 1a8b739430..13f8f4a93b 100644
--- a/apps/web/test/action-command-dispatch-race.test.tsx
+++ b/apps/web/test/action-command-dispatch-race.test.tsx
@@ -14,10 +14,7 @@ import { afterEach, describe, expect, test } from "bun:test";
 import { act } from "react";
 import { createRoot, type Root } from "react-dom/client";
 
-import {
-  resetPendingDialogRequests,
-  runActionCommand,
-} from "../src/command-palette-actions";
+import { resetPendingDialogRequests, runActionCommand } from "../src/command-palette-actions";
 import { SkillsPage } from "../src/pages/skills-page";
 import { TestQueryProvider } from "./test-query-provider";
 
diff --git a/apps/web/test/agent-detail-page.test.tsx b/apps/web/test/agent-detail-page.test.tsx
index 4a302bcb7c..f901ba6e51 100644
--- a/apps/web/test/agent-detail-page.test.tsx
+++ b/apps/web/test/agent-detail-page.test.tsx
@@ -19,11 +19,7 @@ import {
   type SaveReport,
 } from "../src/pages/agent-detail-page";
 import type { AgentDefinitionWithDisplayName } from "../src/agents-directory";
-import type {
-  AgentDefinitionDetail,
-  AgentInstance,
-  CatalogModel,
-} from "../src/agents-api";
+import type { AgentDefinitionDetail, AgentInstance, CatalogModel } from "../src/agents-api";
 
 const definition: AgentDefinitionWithDisplayName = {
   id: "wfd_1",
@@ -81,9 +77,7 @@ function run(overrides: Partial<AgentInstance> = {}): AgentInstance {
 
 const noop = () => undefined;
 
-function renderPage(
-  props: Partial<Parameters<typeof AgentDetailPage>[0]> = {},
-) {
+function renderPage(props: Partial<Parameters<typeof AgentDetailPage>[0]> = {}) {
   return renderToStaticMarkup(
     <AgentDetailPage
       tenantId="tnt_1"
@@ -138,8 +132,7 @@ describe("AgentDetailPage render", () => {
 
   test("puts Duplicate, Archive, and Save in the top bar's action slot", () => {
     const markup = renderPage();
-    const actions =
-      markup.split('data-testid="stage-top-bar-actions"')[1] ?? "";
+    const actions = markup.split('data-testid="stage-top-bar-actions"')[1] ?? "";
     expect(actions).toContain('aria-label="Duplicate this agent"');
     expect(actions).toContain('aria-label="Archive this agent"');
     expect(actions).toContain('aria-label="Save this agent"');
@@ -214,9 +207,7 @@ describe("AgentDetailPage render", () => {
 
 describe("describeSaveReport", () => {
   test("a clean save names what it wrote", () => {
-    expect(describeSaveReport({ saved: ["model"], failed: null })).toBe(
-      "Saved default model.",
-    );
+    expect(describeSaveReport({ saved: ["model"], failed: null })).toBe("Saved default model.");
   });
 
   test("a partial save names both halves, never just the failure", () => {
@@ -244,8 +235,7 @@ function json(body: unknown, status = 200) {
 function stubFetch(): void {
   globalThis.fetch = ((input: RequestInfo | URL, init?: RequestInit) => {
     const url = String(input);
-    const body =
-      init?.body !== undefined ? JSON.parse(String(init.body)) : undefined;
+    const body = init?.body !== undefined ? JSON.parse(String(init.body)) : undefined;
     requests.push({ method: init?.method ?? "GET", url, body });
     if (url.endsWith("/skills") && (init?.method ?? "GET") === "GET") {
       return Promise.resolve(json({ skills: [] }));
@@ -257,9 +247,7 @@ function stubFetch(): void {
       return Promise.resolve(json({ skills: ["triage"] }));
     }
     if (url.endsWith("/capabilities")) {
-      return Promise.resolve(
-        json({ skills: ["triage"], model: "claude-opus" }),
-      );
+      return Promise.resolve(json({ skills: ["triage"], model: "claude-opus" }));
     }
     if (url.endsWith("/status")) {
       return Promise.resolve(json({ id: "wfd_1", status: "stopped" }));
@@ -282,9 +270,7 @@ function stubFetch(): void {
         ),
       );
     }
-    return Promise.resolve(
-      json({ name: "Triage bot", systemPrompt: "You sort inbound issues." }),
-    );
+    return Promise.resolve(json({ name: "Triage bot", systemPrompt: "You sort inbound issues." }));
   }) as typeof fetch;
 }
 
@@ -306,9 +292,7 @@ afterEach(() => {
   container = null;
 });
 
-async function mount(
-  overrides: Partial<Parameters<typeof AgentDetailPage>[0]> = {},
-) {
+async function mount(overrides: Partial<Parameters<typeof AgentDetailPage>[0]> = {}) {
   container = document.createElement("div");
   document.body.appendChild(container);
   root = createRoot(container);
@@ -334,10 +318,7 @@ async function mount(
   return container;
 }
 
-function setValue(
-  element: HTMLInputElement | HTMLTextAreaElement,
-  value: string,
-) {
+function setValue(element: HTMLInputElement | HTMLTextAreaElement, value: string) {
   const setter = Object.getOwnPropertyDescriptor(
     element instanceof HTMLTextAreaElement
       ? HTMLTextAreaElement.prototype
@@ -365,9 +346,7 @@ describe("AgentDetailPage edits", () => {
     let saved = 0;
     const node = await mount({ onSaved: () => (saved += 1) });
     const name = node.querySelector<HTMLInputElement>("#agent-display-name");
-    const prompt = node.querySelector<HTMLTextAreaElement>(
-      "#agent-system-prompt",
-    );
+    const prompt = node.querySelector<HTMLTextAreaElement>("#agent-system-prompt");
     if (name === null || prompt === null) throw new Error("editor not mounted");
 
     await act(async () => {
@@ -381,8 +360,7 @@ describe("AgentDetailPage edits", () => {
 
     const put = requests.find(
       (request) =>
-        request.method === "PUT" &&
-        request.url === "/api/tenants/tnt_1/agent-definitions/wfd_1",
+        request.method === "PUT" && request.url === "/api/tenants/tnt_1/agent-definitions/wfd_1",
     );
     expect(put?.body).toEqual({
       name: "Inbox triage",
@@ -413,8 +391,7 @@ describe("AgentDetailPage edits", () => {
     expect(
       requests.some(
         (request) =>
-          request.url === "/api/tenants/tnt_1/agent-definitions/wfd_1" &&
-          request.method === "PUT",
+          request.url === "/api/tenants/tnt_1/agent-definitions/wfd_1" && request.method === "PUT",
       ),
     ).toBe(false);
   });
@@ -431,9 +408,7 @@ describe("AgentDetailPage edits", () => {
       await Promise.resolve();
     });
 
-    const post = requests.find(
-      (request) => request.url === "/api/tenants/tnt_1/agent-definitions",
-    );
+    const post = requests.find((request) => request.url === "/api/tenants/tnt_1/agent-definitions");
     expect(post?.body).toEqual({
       name: "Triage bot copy",
       handle: "triage-bot-copy",
@@ -452,9 +427,7 @@ describe("AgentDetailPage edits", () => {
     await act(async () => {
       archive.click();
     });
-    expect(requests.some((request) => request.url.endsWith("/status"))).toBe(
-      false,
-    );
+    expect(requests.some((request) => request.url.endsWith("/status"))).toBe(false);
 
     await act(async () => {
       archive.click();
@@ -477,9 +450,7 @@ describe("AgentDetailPage edits", () => {
       Promise.resolve(
         json({ error: { message: "The agent is locked." } }, 500),
       )) as unknown as typeof fetch;
-    const prompt = node.querySelector<HTMLTextAreaElement>(
-      "#agent-system-prompt",
-    );
+    const prompt = node.querySelector<HTMLTextAreaElement>("#agent-system-prompt");
     if (prompt === null) throw new Error("editor not mounted");
 
     await act(async () => {
@@ -513,9 +484,7 @@ describe("AgentDetailPage edits", () => {
     });
 
     const cleared = requests.find(
-      (request) =>
-        request.url ===
-        "/api/tenants/tnt_1/agent-definitions/wfd_1/capabilities/model",
+      (request) => request.url === "/api/tenants/tnt_1/agent-definitions/wfd_1/capabilities/model",
     );
     expect(cleared?.method).toBe("DELETE");
     // Never the inventory-checked add route with an empty name.
@@ -523,8 +492,7 @@ describe("AgentDetailPage edits", () => {
       requests.some(
         (request) =>
           request.url.endsWith("/capabilities") &&
-          (request.body as { canonicalName?: string } | undefined)
-            ?.canonicalName === "",
+          (request.body as { canonicalName?: string } | undefined)?.canonicalName === "",
       ),
     ).toBe(false);
   });
@@ -533,24 +501,19 @@ describe("AgentDetailPage edits", () => {
     const reports: SaveReport[] = [];
     globalThis.fetch = ((input: RequestInfo | URL, init?: RequestInit) => {
       const url = String(input);
-      const body =
-        init?.body !== undefined ? JSON.parse(String(init.body)) : undefined;
+      const body = init?.body !== undefined ? JSON.parse(String(init.body)) : undefined;
       requests.push({ method: init?.method ?? "GET", url, body });
       if (url.endsWith("/capabilities")) {
         return Promise.resolve(json({ error: { message: "model gone" } }, 500));
       }
       if (url.endsWith("/skills")) return Promise.resolve(json({ skills: [] }));
-      return Promise.resolve(
-        json({ name: "Inbox triage", systemPrompt: "New instructions." }),
-      );
+      return Promise.resolve(json({ name: "Inbox triage", systemPrompt: "New instructions." }));
     }) as unknown as typeof fetch;
 
     const node = await mount({
       onSaved: (report: SaveReport) => reports.push(report),
     });
-    const prompt = node.querySelector<HTMLTextAreaElement>(
-      "#agent-system-prompt",
-    );
+    const prompt = node.querySelector<HTMLTextAreaElement>("#agent-system-prompt");
     const select = node.querySelector<HTMLSelectElement>("#agent-model");
     if (prompt === null || select === null) {
       throw new Error("editor not mounted");
@@ -569,9 +532,7 @@ describe("AgentDetailPage edits", () => {
 
     expect(reports[0]?.saved).toEqual(["instructions"]);
     expect(reports[0]?.failed?.part).toBe("model");
-    expect(describeSaveReport(reports[0] as SaveReport)).toContain(
-      "name and system prompt",
-    );
+    expect(describeSaveReport(reports[0] as SaveReport)).toContain("name and system prompt");
   });
 
   test("a duplicate whose handle already exists says what collided, never 'try again'", async () => {
@@ -583,8 +544,7 @@ describe("AgentDetailPage edits", () => {
             {
               error: {
                 code: "conflict",
-                message:
-                  'An agent with the handle "triage-bot-copy" already exists',
+                message: 'An agent with the handle "triage-bot-copy" already exists',
               },
             },
             409,
@@ -607,19 +567,14 @@ describe("AgentDetailPage edits", () => {
 
   test("Duplicate waits for unsaved edits rather than silently copying the saved version", async () => {
     const node = await mount();
-    const prompt = node.querySelector<HTMLTextAreaElement>(
-      "#agent-system-prompt",
-    );
+    const prompt = node.querySelector<HTMLTextAreaElement>("#agent-system-prompt");
     if (prompt === null) throw new Error("editor not mounted");
 
     await act(async () => {
       setValue(prompt, "Edited, not yet saved.");
     });
 
-    const duplicate = byLabel(
-      node,
-      "Duplicate this agent",
-    ) as HTMLButtonElement;
+    const duplicate = byLabel(node, "Duplicate this agent") as HTMLButtonElement;
     expect(duplicate.disabled).toBe(true);
     expect(node.textContent).toContain("Duplicate copies the saved version");
   });
diff --git a/apps/web/test/agents-api.test.ts b/apps/web/test/agents-api.test.ts
index c6765f7886..60b7ef28d8 100644
--- a/apps/web/test/agents-api.test.ts
+++ b/apps/web/test/agents-api.test.ts
@@ -136,9 +136,7 @@ describe("listCatalogModels", () => {
       ]),
     );
 
-    await expect(listCatalogModels("tnt_1")).rejects.toThrow(
-      /Unexpected response shape/,
-    );
+    await expect(listCatalogModels("tnt_1")).rejects.toThrow(/Unexpected response shape/);
   });
 });
 
@@ -289,9 +287,7 @@ describe("getAgentDefinitionBySlug", () => {
   // the listing's first (and only) page — it asks the server by name.
   test("resolves one definition by name, never through the paginated listing", async () => {
     const calls = stubFetch((path) => {
-      expect(path).toBe(
-        "/api/tenants/tnt_1/agent-definitions/by-name/triage-bot",
-      );
+      expect(path).toBe("/api/tenants/tnt_1/agent-definitions/by-name/triage-bot");
       return json({
         id: "wfd_1",
         tenantId: "tnt_1",
@@ -313,9 +309,7 @@ describe("getAgentDefinitionBySlug", () => {
 describe("clearAgentModel", () => {
   test("DELETEs the model capability rather than posting an empty name", async () => {
     const calls = stubFetch((path) => {
-      expect(path).toBe(
-        "/api/tenants/tnt_1/agent-definitions/wfd_1/capabilities/model",
-      );
+      expect(path).toBe("/api/tenants/tnt_1/agent-definitions/wfd_1/capabilities/model");
       return json({ skills: [] });
     });
 
@@ -386,8 +380,7 @@ describe("draftAgentDefinition errors", () => {
         {
           error: {
             code: "drafting_failed",
-            message:
-              "MyraAgentDefinitionDraftingUnavailableError: no myra\n    at draft",
+            message: "MyraAgentDefinitionDraftingUnavailableError: no myra\n    at draft",
           },
         },
         422,
diff --git a/apps/web/test/agents-page.test.tsx b/apps/web/test/agents-page.test.tsx
index f313024f01..d1ff4a5444 100644
--- a/apps/web/test/agents-page.test.tsx
+++ b/apps/web/test/agents-page.test.tsx
@@ -67,18 +67,14 @@ describe("agentRosterStatus", () => {
 
   test("a deployed definition with a running instance reads Running", () => {
     expect(
-      agentRosterStatus(triage, [
-        instance({ definitionId: "wfd_1", status: "running" }),
-      ]),
+      agentRosterStatus(triage, [instance({ definitionId: "wfd_1", status: "running" })]),
     ).toBe("running");
   });
 
   test("a deployed definition with only an erroring instance reads Blocked", () => {
-    expect(
-      agentRosterStatus(triage, [
-        instance({ definitionId: "wfd_1", status: "error" }),
-      ]),
-    ).toBe("blocked");
+    expect(agentRosterStatus(triage, [instance({ definitionId: "wfd_1", status: "error" })])).toBe(
+      "blocked",
+    );
   });
 
   test("a deployed definition with no live instances reads Idle", () => {
@@ -112,8 +108,7 @@ describe("agentModelSettledContent (CL-6848)", () => {
       agentModelSettledContent(
         {
           status: "error",
-          message:
-            "Something went wrong loading this agent's model. Try again.",
+          message: "Something went wrong loading this agent's model. Try again.",
         },
         [],
       ),
@@ -212,8 +207,7 @@ describe("AgentModelCellView (CL-6848)", () => {
       <AgentModelCellView
         state={{
           status: "error",
-          message:
-            "Something went wrong loading this agent's model. Try again.",
+          message: "Something went wrong loading this agent's model. Try again.",
         }}
         catalog={[]}
       />,
@@ -246,9 +240,7 @@ describe("AgentModelCellView (CL-6848)", () => {
           status: "ready",
           data: { name: "triage-bot", model: "claude-sonnet-4" },
         }}
-        catalog={[
-          { canonicalName: "claude-sonnet-4", displayName: "Claude Sonnet 4" },
-        ]}
+        catalog={[{ canonicalName: "claude-sonnet-4", displayName: "Claude Sonnet 4" }]}
       />,
     );
     expect(markup).toContain("Claude Sonnet 4");
@@ -259,9 +251,7 @@ describe("AgentModelCellView (CL-6848)", () => {
 
 describe("agentRunsSettledContent (CL-6842)", () => {
   test("a runs fetch failure is not the same as an honest empty history", () => {
-    expect(
-      agentRunsSettledContent("wfd_1", [], NOW, "Couldn't load run history"),
-    ).toEqual({
+    expect(agentRunsSettledContent("wfd_1", [], NOW, "Couldn't load run history")).toEqual({
       kind: "error",
       message: "Couldn't load run history",
     });
@@ -290,21 +280,15 @@ describe("agentRunsSettledContent (CL-6842)", () => {
 
 describe("archiveDefinitions", () => {
   test("one id failing does not roll back or hide the ids that succeeded", async () => {
-    const result = await archiveDefinitions(
-      ["wfd_1", "wfd_2", "wfd_3"],
-      (id) =>
-        id === "wfd_2"
-          ? Promise.reject(new Error("504"))
-          : Promise.resolve(undefined),
+    const result = await archiveDefinitions(["wfd_1", "wfd_2", "wfd_3"], (id) =>
+      id === "wfd_2" ? Promise.reject(new Error("504")) : Promise.resolve(undefined),
     );
     expect(result.succeededIds).toEqual(["wfd_1", "wfd_3"]);
     expect(result.failedIds).toEqual(["wfd_2"]);
   });
 
   test("every id succeeding reports no failures", async () => {
-    const result = await archiveDefinitions(["wfd_1", "wfd_2"], () =>
-      Promise.resolve(undefined),
-    );
+    const result = await archiveDefinitions(["wfd_1", "wfd_2"], () => Promise.resolve(undefined));
     expect(result.succeededIds).toEqual(["wfd_1", "wfd_2"]);
     expect(result.failedIds).toEqual([]);
   });
@@ -329,21 +313,19 @@ describe("archiveResultToast", () => {
   });
 
   test("reports full success", () => {
-    expect(archiveResultToast({ succeededIds: ["a"], failedIds: [] })).toBe(
-      "Archived 1 agent",
+    expect(archiveResultToast({ succeededIds: ["a"], failedIds: [] })).toBe("Archived 1 agent");
+    expect(archiveResultToast({ succeededIds: ["a", "b"], failedIds: [] })).toBe(
+      "Archived 2 agents",
     );
-    expect(
-      archiveResultToast({ succeededIds: ["a", "b"], failedIds: [] }),
-    ).toBe("Archived 2 agents");
   });
 
   test("reports full failure", () => {
     expect(archiveResultToast({ succeededIds: [], failedIds: ["a"] })).toBe(
       "Couldn't archive that agent",
     );
-    expect(
-      archiveResultToast({ succeededIds: [], failedIds: ["a", "b"] }),
-    ).toBe("Couldn't archive those agents");
+    expect(archiveResultToast({ succeededIds: [], failedIds: ["a", "b"] })).toBe(
+      "Couldn't archive those agents",
+    );
   });
 });
 
@@ -627,9 +609,7 @@ describe("AgentsPage", () => {
     );
     expect(markup).toContain("text-destructive");
     expect(markup).toContain('role="alert"');
-    expect(markup).toContain(
-      "Something went wrong loading run history. Try again.",
-    );
+    expect(markup).toContain("Something went wrong loading run history. Try again.");
     // Must not claim an Idle status or a literal zero off fabricated empty
     // instances — that is the dishonest path `runsQuery.data ?? []` produced.
     expect(markup).not.toContain("Idle");
diff --git a/apps/web/test/api.test.tsx b/apps/web/test/api.test.tsx
index 27c51ef24d..bf720e8a46 100644
--- a/apps/web/test/api.test.tsx
+++ b/apps/web/test/api.test.tsx
@@ -28,8 +28,7 @@ type RecordedCall = { readonly path: string; readonly init?: RequestInit };
 function stubFetch(respond: (path: string) => Response): RecordedCall[] {
   const calls: RecordedCall[] = [];
   globalThis.fetch = ((input: RequestInfo | URL, init?: RequestInit) => {
-    const path =
-      typeof input === "string" ? input : new URL(String(input)).pathname;
+    const path = typeof input === "string" ? input : new URL(String(input)).pathname;
     calls.push(init === undefined ? { path } : { path, init });
     return Promise.resolve(respond(path));
   }) as typeof fetch;
@@ -71,25 +70,19 @@ describe("approveApproval", () => {
 
   test("throws an ApiQueryError on a non-2xx response", async () => {
     stubFetch(() => json({ error: { code: "already_resolved" } }, 409));
-    await expect(approveApproval("tnt_1", "apr_1")).rejects.toBeInstanceOf(
-      ApiQueryError,
-    );
+    await expect(approveApproval("tnt_1", "apr_1")).rejects.toBeInstanceOf(ApiQueryError);
   });
 });
 
 describe("rejectApproval", () => {
   test("omits the message body when none is given", async () => {
-    const calls = stubFetch(() =>
-      json({ ...approvalFixture, status: "rejected" }),
-    );
+    const calls = stubFetch(() => json({ ...approvalFixture, status: "rejected" }));
     await rejectApproval("tnt_1", "apr_1");
     expect(JSON.parse(String(calls[0]?.init?.body))).toEqual({});
   });
 
   test("sends the message when given", async () => {
-    const calls = stubFetch(() =>
-      json({ ...approvalFixture, status: "rejected" }),
-    );
+    const calls = stubFetch(() => json({ ...approvalFixture, status: "rejected" }));
     await rejectApproval("tnt_1", "apr_1", "Not now");
     expect(JSON.parse(String(calls[0]?.init?.body))).toEqual({
       message: "Not now",
diff --git a/apps/web/test/app-shell-setup-note-removed.test.tsx b/apps/web/test/app-shell-setup-note-removed.test.tsx
index 020a11b97a..a419500a1c 100644
--- a/apps/web/test/app-shell-setup-note-removed.test.tsx
+++ b/apps/web/test/app-shell-setup-note-removed.test.tsx
@@ -44,10 +44,10 @@ const emptyMemberships = () =>
 // A pending provisioning status is exactly the shape that used to flip the
 // note visible once the legacy session flag was set.
 const pendingProvisioningStatus = () =>
-  new Response(
-    JSON.stringify({ kind: "provisioning", setupAgentReady: true }),
-    { status: 200, headers: { "content-type": "application/json" } },
-  );
+  new Response(JSON.stringify({ kind: "provisioning", setupAgentReady: true }), {
+    status: 200,
+    headers: { "content-type": "application/json" },
+  });
 
 describe("app shell no longer shows the background setup note", () => {
   let container: HTMLDivElement;
@@ -59,9 +59,7 @@ describe("app shell no longer shows the background setup note", () => {
     globalThis.fetch = ((input: RequestInfo | URL) => {
       const url = typeof input === "string" ? input : String(input);
       return Promise.resolve(
-        url.includes("provisioning-status")
-          ? pendingProvisioningStatus()
-          : emptyMemberships(),
+        url.includes("provisioning-status") ? pendingProvisioningStatus() : emptyMemberships(),
       );
     }) as typeof fetch;
     container = document.createElement("div");
diff --git a/apps/web/test/auth.test.tsx b/apps/web/test/auth.test.tsx
index 5464190a08..ac7800dc9e 100644
--- a/apps/web/test/auth.test.tsx
+++ b/apps/web/test/auth.test.tsx
@@ -13,13 +13,7 @@ import { renderToStaticMarkup } from "react-dom/server";
 
 import { App } from "../src/app";
 import { AuthScreen } from "../src/auth-screen";
-import {
-  SOCIAL_SIGN_IN_PROVIDERS,
-  fetchSession,
-  signIn,
-  signOut,
-  signUp,
-} from "../src/session";
+import { SOCIAL_SIGN_IN_PROVIDERS, fetchSession, signIn, signOut, signUp } from "../src/session";
 import type { SessionState } from "../src/session";
 
 const realFetch = globalThis.fetch;
@@ -37,8 +31,7 @@ function stubFetch(
 ): RecordedCall[] {
   const calls: RecordedCall[] = [];
   globalThis.fetch = ((input: RequestInfo | URL, init?: RequestInit) => {
-    const path =
-      typeof input === "string" ? input : new URL(String(input)).pathname;
+    const path = typeof input === "string" ? input : new URL(String(input)).pathname;
     calls.push(init === undefined ? { path } : { path, init });
     return Promise.resolve(respond(path));
   }) as typeof fetch;
@@ -231,9 +224,7 @@ describe("the gate", () => {
   });
 
   test("loading and error are their own screens, not a broken shell", () => {
-    expect(renderApp({ kind: "loading" })).toContain(
-      "Getting your workbench ready",
-    );
+    expect(renderApp({ kind: "loading" })).toContain("Getting your workbench ready");
     const markup = renderApp({ kind: "error", message: "socket hang up" });
     expect(markup).toContain("socket hang up");
     expect(markup).toContain("Try again");
@@ -263,10 +254,7 @@ describe("social sign-in buttons", () => {
   // unconfigured click must surface better-auth's own message on the form.
   test("a failed social sign-in surfaces better-auth's message on the form", async () => {
     const calls = stubFetch(() =>
-      json(
-        { message: "Social sign-in is not configured for this provider" },
-        400,
-      ),
+      json({ message: "Social sign-in is not configured for this provider" }, 400),
     );
     const container = document.createElement("div");
     document.body.appendChild(container);
@@ -286,12 +274,8 @@ describe("social sign-in buttons", () => {
       await act(async () => {
         await new Promise((resolve) => setTimeout(resolve, 0));
       });
-      expect(calls.map((call) => call.path)).toEqual([
-        "/api/auth/sign-in/social",
-      ]);
-      expect(container.textContent).toContain(
-        "Social sign-in is not configured for this provider",
-      );
+      expect(calls.map((call) => call.path)).toEqual(["/api/auth/sign-in/social"]);
+      expect(container.textContent).toContain("Social sign-in is not configured for this provider");
     } finally {
       await act(async () => {
         root.unmount();
diff --git a/apps/web/test/bench-activity.test.tsx b/apps/web/test/bench-activity.test.tsx
index 3591e3c3b0..77c646a8a0 100644
--- a/apps/web/test/bench-activity.test.tsx
+++ b/apps/web/test/bench-activity.test.tsx
@@ -40,8 +40,7 @@ function stubTenantFetch(
     calls.push(path);
     if (path.includes("/agent-definitions/visible"))
       return Promise.resolve(json({ definitions: data.agents ?? [] }));
-    if (path.includes("kind=chat"))
-      return Promise.resolve(json({ items: data.chats ?? [] }));
+    if (path.includes("kind=chat")) return Promise.resolve(json({ items: data.chats ?? [] }));
     return Promise.resolve(json({ items: data.workbenches ?? [] }));
   }) as typeof fetch;
 }
@@ -109,9 +108,7 @@ describe("useBenchActivity", () => {
     expect(calls.some((path) => path.includes("kind=chat"))).toBe(true);
     expect(calls.some((path) => path.includes("/workflows/runs"))).toBe(false);
     expect(calls.some((path) => path.includes("/top-level-runs"))).toBe(false);
-    expect(
-      calls.some((path) => path.includes("/agent-definitions/visible")),
-    ).toBe(true);
+    expect(calls.some((path) => path.includes("/agent-definitions/visible"))).toBe(true);
     root.unmount();
     container.remove();
   });
@@ -125,9 +122,7 @@ describe("useBenchActivity", () => {
           title: "General",
           kind: "workbench",
           pinned: true,
-          participants: [
-            { address: "run_invited1@tnt1.example", handle: "echo" },
-          ],
+          participants: [{ address: "run_invited1@tnt1.example", handle: "echo" }],
         },
       ],
       chats: [
@@ -199,9 +194,7 @@ describe("useBenchActivity", () => {
     });
     const { latest, root, container } = await mountHook("tnt_1");
     await settle();
-    expect(
-      (latest() as { workbenches?: readonly unknown[] }).workbenches,
-    ).toEqual([]);
+    expect((latest() as { workbenches?: readonly unknown[] }).workbenches).toEqual([]);
 
     // The row a fresh `createWorkbench` call would have returned — present
     // in the backing store now, as if the mint had just landed.
diff --git a/apps/web/test/canvas-column.test.tsx b/apps/web/test/canvas-column.test.tsx
index 29a260ccca..a9b1ab7fcd 100644
--- a/apps/web/test/canvas-column.test.tsx
+++ b/apps/web/test/canvas-column.test.tsx
@@ -48,13 +48,9 @@ function jsonResponse(body: unknown): Response {
 function routeFetch(input: RequestInfo | URL): Promise<Response> {
   const url = String(input);
   if (url.includes("/api/me/principals")) {
-    return Promise.resolve(
-      jsonResponse({ data: [membership], nextCursor: null }),
-    );
+    return Promise.resolve(jsonResponse({ data: [membership], nextCursor: null }));
   }
-  return Promise.reject(
-    new Error(`unrouted fetch in canvas-column test: ${url}`),
-  );
+  return Promise.reject(new Error(`unrouted fetch in canvas-column test: ${url}`));
 }
 
 const profile = {
@@ -137,10 +133,7 @@ describe("canvas profile card Message action", () => {
   }
 
   test("stays open and shows a pending label while the DM is being resolved, then closes and navigates once it's ready", async () => {
-    let resolveDm: (value: {
-      kind: "ready";
-      workbenchId: string;
-    }) => void = () => undefined;
+    let resolveDm: (value: { kind: "ready"; workbenchId: string }) => void = () => undefined;
     ensureProfileDmResult = new Promise((resolve) => {
       resolveDm = resolve;
     });
@@ -183,9 +176,7 @@ describe("canvas profile card Message action", () => {
 
   test("with no bench resolved yet, Message toasts honestly instead of silently closing", async () => {
     globalThis.fetch = ((_input: RequestInfo | URL, _init?: RequestInit) =>
-      Promise.reject(
-        new Error("no bench resolves in this test"),
-      )) as typeof fetch;
+      Promise.reject(new Error("no bench resolves in this test"))) as typeof fetch;
     await renderPanel();
 
     await act(async () => {
diff --git a/apps/web/test/chat-header-toggle.test.tsx b/apps/web/test/chat-header-toggle.test.tsx
index d26c50a4b4..0ffffb4570 100644
--- a/apps/web/test/chat-header-toggle.test.tsx
+++ b/apps/web/test/chat-header-toggle.test.tsx
@@ -103,9 +103,7 @@ describe("ChatWorkspace headerLeading", () => {
     });
     const header = container.querySelector(".chat-workbench-header");
     if (header === null) throw new Error("bare header not rendered");
-    expect(
-      header.querySelector('button[aria-label="Toggle sidebar"]'),
-    ).not.toBeNull();
+    expect(header.querySelector('button[aria-label="Toggle sidebar"]')).not.toBeNull();
   });
 
   test("an active workbench renders the toggle first in the workbench header", async () => {
diff --git a/apps/web/test/connect-service-actions.test.ts b/apps/web/test/connect-service-actions.test.ts
index c789240873..4c492bfe52 100644
--- a/apps/web/test/connect-service-actions.test.ts
+++ b/apps/web/test/connect-service-actions.test.ts
@@ -27,9 +27,7 @@ function stubFetch(respond: (path: string, method: string) => Response) {
     calls.push({
       path,
       method,
-      ...(typeof init?.body === "string"
-        ? { body: JSON.parse(init.body) as unknown }
-        : {}),
+      ...(typeof init?.body === "string" ? { body: JSON.parse(init.body) as unknown } : {}),
     });
     return respond(path, method);
   }) as unknown as typeof fetch;
diff --git a/apps/web/test/create-agent-panel.test.tsx b/apps/web/test/create-agent-panel.test.tsx
index ea48095722..56f2302d00 100644
--- a/apps/web/test/create-agent-panel.test.tsx
+++ b/apps/web/test/create-agent-panel.test.tsx
@@ -59,13 +59,9 @@ function stubFetch(overrides: {
   globalThis.fetch = ((input: RequestInfo | URL, init?: RequestInit) => {
     const url = String(input);
     const body =
-      init?.body !== undefined
-        ? (JSON.parse(String(init.body)) as Record<string, unknown>)
-        : {};
+      init?.body !== undefined ? (JSON.parse(String(init.body)) as Record<string, unknown>) : {};
     if (url.includes("/catalog/models")) {
-      return Promise.resolve(
-        json({ data: overrides.models ?? [], nextCursor: null }),
-      );
+      return Promise.resolve(json({ data: overrides.models ?? [], nextCursor: null }));
     }
     if (url.endsWith("/skills")) {
       return Promise.resolve(json({ skills: [] }));
@@ -77,9 +73,7 @@ function stubFetch(overrides: {
       );
     }
     if (url.endsWith("/agent-definitions")) {
-      return Promise.resolve(
-        overrides.create?.(body) ?? json(CREATED_DEFINITION, 201),
-      );
+      return Promise.resolve(overrides.create?.(body) ?? json(CREATED_DEFINITION, 201));
     }
     return Promise.resolve(json({}, 200));
   }) as typeof fetch;
@@ -102,20 +96,13 @@ afterEach(() => {
   container = null;
 });
 
-async function mount(
-  onCreated: (definition: { id: string }) => void = () => {},
-) {
+async function mount(onCreated: (definition: { id: string }) => void = () => {}) {
   container = document.createElement("div");
   document.body.appendChild(container);
   root = createRoot(container);
   await act(async () => {
     root?.render(
-      <CreateAgentPanel
-        open
-        onOpenChange={() => {}}
-        tenantId="tenant_1"
-        onCreated={onCreated}
-      />,
+      <CreateAgentPanel open onOpenChange={() => {}} tenantId="tenant_1" onCreated={onCreated} />,
     );
   });
   await act(async () => {
@@ -135,14 +122,11 @@ function nativeValueSetter(
 }
 
 function fillField(id: string, value: string, textarea = false) {
-  const el = document.getElementById(id) as
-    HTMLInputElement | HTMLTextAreaElement | null;
+  const el = document.getElementById(id) as HTMLInputElement | HTMLTextAreaElement | null;
   expect(el).not.toBeNull();
   if (el === null) return;
   const setter = nativeValueSetter(
-    textarea
-      ? window.HTMLTextAreaElement.prototype
-      : window.HTMLInputElement.prototype,
+    textarea ? window.HTMLTextAreaElement.prototype : window.HTMLInputElement.prototype,
   );
   act(() => {
     setter.call(el, value);
@@ -174,9 +158,7 @@ describe("CreateAgentPanel happy path", () => {
 
   test("Advanced is collapsed by default", async () => {
     await mount();
-    const details = document.querySelector(
-      ".create-agent-advanced",
-    ) as HTMLDetailsElement | null;
+    const details = document.querySelector(".create-agent-advanced") as HTMLDetailsElement | null;
     expect(details).not.toBeNull();
     expect(details?.open).toBe(false);
   });
@@ -185,9 +167,9 @@ describe("CreateAgentPanel happy path", () => {
   // workbench mint — title and CTA must use the agent noun.
   test("dialog title and primary CTA use the agent noun, not workbench", async () => {
     await mount();
-    const heading = [
-      ...document.body.querySelectorAll("h2, [role='heading']"),
-    ].find((el) => (el.textContent ?? "").trim() === "New agent");
+    const heading = [...document.body.querySelectorAll("h2, [role='heading']")].find(
+      (el) => (el.textContent ?? "").trim() === "New agent",
+    );
     expect(heading).toBeDefined();
     expect(document.body.textContent).not.toContain("New workbench");
     fillField("create-agent-name", "Research Buddy");
@@ -206,9 +188,7 @@ describe("CreateAgentPanel happy path", () => {
     expect(findButton("Get started")?.hasAttribute("disabled")).toBe(false);
     // No purpose was typed — still enabled, no "describe what it does"
     // requirement anywhere in the disabled-reason copy.
-    expect(document.body.textContent).not.toContain(
-      "Describe what this agent should do.",
-    );
+    expect(document.body.textContent).not.toContain("Describe what this agent should do.");
   });
 
   test("submitting with just a name still runs the drafting flow, then deploys with it", async () => {
@@ -219,10 +199,7 @@ describe("CreateAgentPanel happy path", () => {
     stubFetch({
       draft: (body) => {
         captured.draftBody = body;
-        return json(
-          { draft: { systemPrompt: "You are a friendly, capable assistant." } },
-          201,
-        );
+        return json({ draft: { systemPrompt: "You are a friendly, capable assistant." } }, 201);
       },
       create: (body) => {
         captured.createBody = body;
@@ -245,9 +222,7 @@ describe("CreateAgentPanel happy path", () => {
     await settle();
 
     expect(captured.draftBody).toEqual({ name: "Research Buddy" });
-    expect(captured.createBody?.systemPrompt).toBe(
-      "You are a friendly, capable assistant.",
-    );
+    expect(captured.createBody?.systemPrompt).toBe("You are a friendly, capable assistant.");
     expect(captured.createBody?.handle).toBe("research-buddy");
     expect((created as { id: string } | null)?.id).toBe("wfd_new");
   });
@@ -259,10 +234,7 @@ describe("CreateAgentPanel happy path", () => {
     stubFetch({
       draft: (body) => {
         captured.draftBody = body;
-        return json(
-          { draft: { systemPrompt: "You help with research." } },
-          201,
-        );
+        return json({ draft: { systemPrompt: "You help with research." } }, 201);
       },
     });
 
@@ -290,10 +262,7 @@ describe("CreateAgentPanel Suggestions", () => {
     stubFetch({
       draft: (body) => {
         captured.draftBody = body;
-        return json(
-          { draft: { systemPrompt: "You prep a morning digest." } },
-          201,
-        );
+        return json({ draft: { systemPrompt: "You prep a morning digest." } }, 201);
       },
     });
 
@@ -350,18 +319,12 @@ describe("CreateAgentPanel drafting failure — fails closed", () => {
     await settle();
 
     expect(createCalled).toBe(false);
-    const details = document.querySelector(
-      ".create-agent-advanced",
-    ) as HTMLDetailsElement | null;
+    const details = document.querySelector(".create-agent-advanced") as HTMLDetailsElement | null;
     expect(details?.open).toBe(false);
-    expect(document.body.textContent).toContain(
-      "Myra couldn't draft a starting prompt for that.",
-    );
+    expect(document.body.textContent).toContain("Myra couldn't draft a starting prompt for that.");
     expect(document.body.textContent).toContain("Reference: ref_1");
     expect(findButton("Get started")).toBeUndefined();
-    const blockedCta = findButton(
-      "Open Advanced and write a system prompt to continue.",
-    );
+    const blockedCta = findButton("Open Advanced and write a system prompt to continue.");
     expect(blockedCta).toBeDefined();
     expect(blockedCta?.hasAttribute("disabled")).toBe(true);
     expect(document.body.textContent).not.toContain("Myra picks one");
@@ -369,9 +332,7 @@ describe("CreateAgentPanel drafting failure — fails closed", () => {
       "Left unset, the agent uses the workbench default.",
     );
 
-    const manualField = document.getElementById(
-      "create-agent-advanced-manualSystemPrompt",
-    );
+    const manualField = document.getElementById("create-agent-advanced-manualSystemPrompt");
     expect(manualField).not.toBeNull();
 
     fillField(
@@ -409,15 +370,11 @@ describe("CreateAgentPanel drafting failure — fails closed", () => {
     });
     await settle();
 
-    expect(document.body.textContent).toContain(
-      "Something went wrong. Please try again.",
-    );
+    expect(document.body.textContent).toContain("Something went wrong. Please try again.");
     expect(document.body.textContent).toContain("Reference: ref_sink_1");
     expect(document.body.textContent).not.toContain("The server answered 500.");
     expect(document.body.textContent).not.toContain("at draft");
-    const details = document.querySelector(
-      ".create-agent-advanced",
-    ) as HTMLDetailsElement | null;
+    const details = document.querySelector(".create-agent-advanced") as HTMLDetailsElement | null;
     expect(details?.open).toBe(false);
   });
 });
diff --git a/apps/web/test/dither-background.test.tsx b/apps/web/test/dither-background.test.tsx
index 74e52c6b4b..aac2fa4040 100644
--- a/apps/web/test/dither-background.test.tsx
+++ b/apps/web/test/dither-background.test.tsx
@@ -26,9 +26,7 @@ describe("DitherBackground", () => {
   });
 
   test("passes the caller's class through to the canvas", () => {
-    const markup = renderToStaticMarkup(
-      <DitherBackground className="auth-panel-dither" />,
-    );
+    const markup = renderToStaticMarkup(<DitherBackground className="auth-panel-dither" />);
     expect(markup).toContain('class="auth-panel-dither"');
   });
 });
diff --git a/apps/web/test/fetch-dedupe.test.tsx b/apps/web/test/fetch-dedupe.test.tsx
index f733196d67..778a366d65 100644
--- a/apps/web/test/fetch-dedupe.test.tsx
+++ b/apps/web/test/fetch-dedupe.test.tsx
@@ -13,10 +13,7 @@ import type { Root } from "react-dom/client";
 import { BenchProvider } from "../src/bench-context";
 import { requestWorkbenchRename } from "../src/workbench-rename-events";
 import { WorkbenchList } from "../src/shell/workbench-list";
-import {
-  createTestQueryClient,
-  TestQueryProvider,
-} from "./test-query-provider";
+import { createTestQueryClient, TestQueryProvider } from "./test-query-provider";
 
 const realFetch = globalThis.fetch;
 
@@ -61,8 +58,7 @@ function stubFetch(calls: string[]): void {
   globalThis.fetch = ((input: RequestInfo | URL) => {
     const path = typeof input === "string" ? input : String(input);
     calls.push(path);
-    if (path.includes("/api/me/principals"))
-      return Promise.resolve(json(membership));
+    if (path.includes("/api/me/principals")) return Promise.resolve(json(membership));
     if (path.includes("/agent-definitions/visible"))
       return Promise.resolve(json({ definitions: [] }));
     return Promise.resolve(json({ items: [] }));
@@ -77,10 +73,7 @@ async function settle() {
   }
 }
 
-function countsByMatch(
-  calls: readonly string[],
-  predicate: (path: string) => boolean,
-): number {
+function countsByMatch(calls: readonly string[], predicate: (path: string) => boolean): number {
   return calls.filter(predicate).length;
 }
 
@@ -129,8 +122,7 @@ describe("shell listing dedupe (CL-6045)", () => {
     globalThis.fetch = ((input: RequestInfo | URL, init?: RequestInit) => {
       const path = typeof input === "string" ? input : String(input);
       calls.push(path);
-      if (path.includes("/api/me/principals"))
-        return Promise.resolve(json(membership));
+      if (path.includes("/api/me/principals")) return Promise.resolve(json(membership));
       if (path.includes("/agent-definitions/visible"))
         return Promise.resolve(json({ definitions: [] }));
       if (init?.method === "PATCH") {
@@ -143,8 +135,7 @@ describe("shell listing dedupe (CL-6045)", () => {
           }),
         );
       }
-      if (path.includes("kind=workbench"))
-        return Promise.resolve(json({ items: [workbench] }));
+      if (path.includes("kind=workbench")) return Promise.resolve(json({ items: [workbench] }));
       return Promise.resolve(json({ items: [] }));
     }) as typeof fetch;
     const queryClient = createTestQueryClient();
@@ -167,14 +158,9 @@ describe("shell listing dedupe (CL-6045)", () => {
 
     act(() => requestWorkbenchRename("ch_1"));
     await settle();
-    const input = container.querySelector(
-      'input[aria-label="Rename"]',
-    ) as HTMLInputElement | null;
+    const input = container.querySelector('input[aria-label="Rename"]') as HTMLInputElement | null;
     expect(input).not.toBeNull();
-    const setter = Object.getOwnPropertyDescriptor(
-      window.HTMLInputElement.prototype,
-      "value",
-    )?.set;
+    const setter = Object.getOwnPropertyDescriptor(window.HTMLInputElement.prototype, "value")?.set;
     if (setter === undefined) {
       throw new Error("HTMLInputElement.prototype.value has no native setter");
     }
@@ -183,9 +169,7 @@ describe("shell listing dedupe (CL-6045)", () => {
       input?.dispatchEvent(new Event("input", { bubbles: true }));
     });
     await act(async () => {
-      input?.dispatchEvent(
-        new KeyboardEvent("keydown", { key: "Enter", bubbles: true }),
-      );
+      input?.dispatchEvent(new KeyboardEvent("keydown", { key: "Enter", bubbles: true }));
     });
     await settle();
 
diff --git a/apps/web/test/global-command-palette.test.tsx b/apps/web/test/global-command-palette.test.tsx
index 76b24b5841..e51aa03c3f 100644
--- a/apps/web/test/global-command-palette.test.tsx
+++ b/apps/web/test/global-command-palette.test.tsx
@@ -74,8 +74,7 @@ function stubShellFetch(): void {
       );
     if (path.includes("/workflows/definitions"))
       return Promise.resolve(json({ data: [slugHandled], nextCursor: null }));
-    if (path.includes("/mcp-servers"))
-      return Promise.resolve(json({ data: [] }));
+    if (path.includes("/mcp-servers")) return Promise.resolve(json({ data: [] }));
     if (path.includes("/skills")) return Promise.resolve(json({ skills: [] }));
     if (path.includes("/routines")) return Promise.resolve(json({ data: [] }));
     return Promise.resolve(json({ data: [], nextCursor: null }));
@@ -136,10 +135,7 @@ async function pressCmdK(): Promise<void> {
 }
 
 async function typeInPalette(value: string): Promise<void> {
-  const setValue = Object.getOwnPropertyDescriptor(
-    window.HTMLInputElement.prototype,
-    "value",
-  )?.set;
+  const setValue = Object.getOwnPropertyDescriptor(window.HTMLInputElement.prototype, "value")?.set;
   if (setValue === undefined) throw new Error("no native value setter");
   const input = paletteInput();
   await act(async () => {
@@ -150,9 +146,9 @@ async function typeInPalette(value: string): Promise<void> {
 }
 
 function resultRow(text: string): HTMLElement {
-  const row = [
-    ...document.querySelectorAll<HTMLElement>('[role="option"]'),
-  ].find((option) => option.textContent?.includes(text));
+  const row = [...document.querySelectorAll<HTMLElement>('[role="option"]')].find((option) =>
+    option.textContent?.includes(text),
+  );
   if (row === undefined) throw new Error(`no result row for ${text}`);
   return row;
 }
@@ -233,9 +229,7 @@ describe("Cmd+K opens the global command palette", () => {
     await typeInPalette("@");
 
     await act(async () => {
-      resultRow("research-analyst").dispatchEvent(
-        new MouseEvent("click", { bubbles: true }),
-      );
+      resultRow("research-analyst").dispatchEvent(new MouseEvent("click", { bubbles: true }));
     });
 
     expect(navigated).toContain("/agents/research-analyst");
diff --git a/apps/web/test/home-page.test.tsx b/apps/web/test/home-page.test.tsx
index 7a3fb99891..c861daa18a 100644
--- a/apps/web/test/home-page.test.tsx
+++ b/apps/web/test/home-page.test.tsx
@@ -37,12 +37,9 @@ const json = (body: unknown, status = 200) =>
     headers: { "content-type": "application/json" },
   });
 
-function stubFetch(
-  respond: (path: string, method: string, init?: RequestInit) => Response,
-) {
+function stubFetch(respond: (path: string, method: string, init?: RequestInit) => Response) {
   globalThis.fetch = ((input: RequestInfo | URL, init?: RequestInit) => {
-    const path =
-      typeof input === "string" ? input : new URL(String(input)).pathname;
+    const path = typeof input === "string" ? input : new URL(String(input)).pathname;
     return Promise.resolve(respond(path, init?.method ?? "GET", init));
   }) as typeof fetch;
 }
@@ -130,9 +127,7 @@ describe("HomeRoute (the `/` land hop every entry point funnels through)", () =>
         });
       }
       if (path.endsWith("/chat/workbenches") && method === "POST") {
-        throw new Error(
-          `unexpected POST ${path} — HomeRoute must not mint a Myra workbench`,
-        );
+        throw new Error(`unexpected POST ${path} — HomeRoute must not mint a Myra workbench`);
       }
       throw new Error(`unexpected fetch: ${method} ${path}`);
     });
@@ -215,9 +210,7 @@ describe("HomeRoute (the `/` land hop every entry point funnels through)", () =>
     expect(navigated).toEqual(["/w/chan_myra_dm"]);
     // The land above is the no-error state: no `/api/onboarding/*`
     // request fired, and no error copy rendered on the way there.
-    expect(
-      requestedPaths.filter((path) => path.includes("/api/onboarding")),
-    ).toEqual([]);
+    expect(requestedPaths.filter((path) => path.includes("/api/onboarding"))).toEqual([]);
     expect(container?.textContent).not.toContain("Couldn't open the workbench");
   });
 });
@@ -278,10 +271,7 @@ describe("the wait right after connecting a provider", () => {
         <TestQueryProvider>
           <NavigationProvider navigate={(to) => props.navigated.push(to)}>
             <BenchProvider>
-              <HomeRoute
-                retryMs={props.retryMs}
-                stallAfterMs={props.stallAfterMs}
-              />
+              <HomeRoute retryMs={props.retryMs} stallAfterMs={props.stallAfterMs} />
             </BenchProvider>
           </NavigationProvider>
         </TestQueryProvider>,
@@ -296,8 +286,7 @@ describe("the wait right after connecting a provider", () => {
     let failDefinitions = true;
     stubFetch((path, method) => {
       if (path === "/api/me/principals") return json(PRINCIPALS_RESPONSE);
-      if (path.endsWith("/chat/workbenches") && method === "GET")
-        return json({ items: [] });
+      if (path.endsWith("/chat/workbenches") && method === "GET") return json({ items: [] });
       if (path.includes("/workflows/definitions")) {
         return failDefinitions
           ? json({ error: "boom" }, 500)
@@ -418,9 +407,7 @@ describe("the wait right after connecting a provider", () => {
       await settle();
       if ((container?.textContent ?? "").includes("longer than usual")) break;
     }
-    expect(container?.textContent ?? "").toContain(
-      "Myra is taking longer than usual",
-    );
+    expect(container?.textContent ?? "").toContain("Myra is taking longer than usual");
 
     for (let i = 0; i < 60; i++) {
       await settle();
@@ -460,9 +447,7 @@ describe('a failed memberships fetch never reads as "pick from the switcher"', (
     await settle();
 
     expect(container.textContent).not.toContain("No workbench selected");
-    expect(container.textContent).not.toContain(
-      "Pick a workbench from the switcher",
-    );
+    expect(container.textContent).not.toContain("Pick a workbench from the switcher");
     expect(container.textContent).toContain("Couldn't load your workbenches");
 
     const retryButton = Array.from(container.querySelectorAll("button")).find(
@@ -487,10 +472,7 @@ describe("the other two entries land on the same `/` hop", () => {
     // through `/login?next=...` returns to that path instead, so the
     // literal `navigate("/")` call this test used to pin no longer
     // applies unconditionally.
-    const source = readFileSync(
-      new URL("../src/main.tsx", import.meta.url),
-      "utf8",
-    );
+    const source = readFileSync(new URL("../src/main.tsx", import.meta.url), "utf8");
     expect(source).toMatch(
       /handleSignedIn[\s\S]*?navigate\(validatedNextPath\(window\.location\.search\)\)/,
     );
diff --git a/apps/web/test/insights-route.test.tsx b/apps/web/test/insights-route.test.tsx
index c99f4861cd..2fb3b7dab7 100644
--- a/apps/web/test/insights-route.test.tsx
+++ b/apps/web/test/insights-route.test.tsx
@@ -77,8 +77,7 @@ function stubFetch(runsBody: { data: readonly unknown[] }): RecordedCall[] {
   globalThis.fetch = ((input: RequestInfo | URL) => {
     const path = typeof input === "string" ? input : String(input);
     calls.push({ path });
-    if (path.includes("/api/me/principals"))
-      return Promise.resolve(json(membership));
+    if (path.includes("/api/me/principals")) return Promise.resolve(json(membership));
     if (path.includes("/me/workflows/runs"))
       return Promise.resolve(
         new Response(JSON.stringify({ error: { message: "dead endpoint" } }), {
@@ -107,12 +106,9 @@ function stubFetch(runsBody: { data: readonly unknown[] }): RecordedCall[] {
           byModel: [],
         }),
       );
-    if (path.includes("/insights/activity"))
-      return Promise.resolve(json({ days: [] }));
-    if (path.includes("/insights/tools"))
-      return Promise.resolve(json({ tools: [] }));
-    if (path.includes("/routines"))
-      return Promise.resolve(json({ data: [], nextCursor: null }));
+    if (path.includes("/insights/activity")) return Promise.resolve(json({ days: [] }));
+    if (path.includes("/insights/tools")) return Promise.resolve(json({ tools: [] }));
+    if (path.includes("/routines")) return Promise.resolve(json({ data: [], nextCursor: null }));
     return Promise.resolve(json({ data: [], nextCursor: null }));
   }) as typeof fetch;
   return calls;
@@ -147,9 +143,7 @@ describe("InsightsRoute run feed", () => {
     const el = await mount();
     expect(el.textContent).toContain("Morning brief");
     expect(calls.some((c) => c.path.includes("/workflows/runs"))).toBe(true);
-    expect(calls.some((c) => c.path.includes("/me/workflows/runs"))).toBe(
-      false,
-    );
+    expect(calls.some((c) => c.path.includes("/me/workflows/runs"))).toBe(false);
   });
 
   test("an empty tenant shows an honest zero, not an error", async () => {
@@ -164,9 +158,7 @@ describe("InsightsRoute run feed", () => {
     const el = await mount("/insights/runs");
     expect(el.textContent).toContain("Morning brief");
     expect(calls.some((c) => c.path.includes("/workflows/runs"))).toBe(true);
-    expect(calls.some((c) => c.path.includes("/me/workflows/runs"))).toBe(
-      false,
-    );
+    expect(calls.some((c) => c.path.includes("/me/workflows/runs"))).toBe(false);
   });
 
   // CL-8087: the native listing carries no routine attribution at all, so
diff --git a/apps/web/test/insights-row-activation.test.tsx b/apps/web/test/insights-row-activation.test.tsx
index 9a7c577f44..9070444f05 100644
--- a/apps/web/test/insights-row-activation.test.tsx
+++ b/apps/web/test/insights-row-activation.test.tsx
@@ -8,9 +8,7 @@ import { InsightsRunsHistory } from "../src/pages/insights-page";
 import { TestQueryProvider } from "./test-query-provider";
 
 globalThis.fetch = ((_input: RequestInfo | URL, _init?: RequestInit) =>
-  Promise.reject(
-    new Error("no network in insights row-activation tests"),
-  )) as typeof fetch;
+  Promise.reject(new Error("no network in insights row-activation tests"))) as typeof fetch;
 
 function insightsRun(
   partial: Partial<InsightsRun> & Pick<InsightsRun, "id" | "status">,
@@ -91,9 +89,7 @@ describe("Insights row activation (hand-rolled onRowActivate helper)", () => {
 
     const row = el.querySelector('[data-ctx-insights-run="run_2"]');
     act(() => {
-      row?.dispatchEvent(
-        new KeyboardEvent("keydown", { key: "Enter", bubbles: true }),
-      );
+      row?.dispatchEvent(new KeyboardEvent("keydown", { key: "Enter", bubbles: true }));
     });
     expect(opened).toEqual(["run_2"]);
   });
@@ -113,9 +109,7 @@ describe("Insights row activation (hand-rolled onRowActivate helper)", () => {
 
     const row = el.querySelector('[data-ctx-insights-run="run_3"]');
     act(() => {
-      row?.dispatchEvent(
-        new KeyboardEvent("keydown", { key: " ", bubbles: true }),
-      );
+      row?.dispatchEvent(new KeyboardEvent("keydown", { key: " ", bubbles: true }));
     });
     expect(opened).toEqual(["run_3"]);
   });
@@ -135,9 +129,7 @@ describe("Insights row activation (hand-rolled onRowActivate helper)", () => {
 
     const row = el.querySelector('[data-ctx-insights-run="run_4"]');
     act(() => {
-      row?.dispatchEvent(
-        new KeyboardEvent("keydown", { key: "Tab", bubbles: true }),
-      );
+      row?.dispatchEvent(new KeyboardEvent("keydown", { key: "Tab", bubbles: true }));
     });
     expect(opened).toEqual([]);
   });
diff --git a/apps/web/test/legacy-settings-redirects.test.tsx b/apps/web/test/legacy-settings-redirects.test.tsx
index 21359560a7..a1d5a49e2e 100644
--- a/apps/web/test/legacy-settings-redirects.test.tsx
+++ b/apps/web/test/legacy-settings-redirects.test.tsx
@@ -88,22 +88,14 @@ describe("LegacySettingsSkillsRedirect", () => {
 describe("LegacyLibraryRedirect", () => {
   test("bare /library redirects to /files", async () => {
     const navigated: string[] = [];
-    await mount(
-      <LegacyLibraryRedirect
-        path="/library"
-        navigate={(to) => navigated.push(to)}
-      />,
-    );
+    await mount(<LegacyLibraryRedirect path="/library" navigate={(to) => navigated.push(to)} />);
     expect(navigated).toEqual(["/files"]);
   });
 
   test("/library/:id preserves the id at its new home", async () => {
     const navigated: string[] = [];
     await mount(
-      <LegacyLibraryRedirect
-        path="/library/art_1"
-        navigate={(to) => navigated.push(to)}
-      />,
+      <LegacyLibraryRedirect path="/library/art_1" navigate={(to) => navigated.push(to)} />,
     );
     expect(navigated).toEqual(["/files/art_1"]);
   });
diff --git a/apps/web/test/library-artifact-deep-link.test.tsx b/apps/web/test/library-artifact-deep-link.test.tsx
index 6a827f208c..17eb973f7f 100644
--- a/apps/web/test/library-artifact-deep-link.test.tsx
+++ b/apps/web/test/library-artifact-deep-link.test.tsx
@@ -48,9 +48,7 @@ function jsonResponse(body: unknown): Response {
 function routeFetch(input: RequestInfo | URL): Promise<Response> {
   const url = String(input);
   if (url.includes("/api/me/principals")) {
-    return Promise.resolve(
-      jsonResponse({ data: [membership], nextCursor: null }),
-    );
+    return Promise.resolve(jsonResponse({ data: [membership], nextCursor: null }));
   }
   if (url.includes("/artifacts/art_1")) {
     return Promise.resolve(
@@ -60,9 +58,7 @@ function routeFetch(input: RequestInfo | URL): Promise<Response> {
     );
   }
   if (url.includes("/artifacts")) {
-    return Promise.resolve(
-      jsonResponse({ artifacts: [listedArtifact], nextCursor: null }),
-    );
+    return Promise.resolve(jsonResponse({ artifacts: [listedArtifact], nextCursor: null }));
   }
   return Promise.reject(new Error(`unrouted fetch in library test: ${url}`));
 }
diff --git a/apps/web/test/library-artifacts.test.ts b/apps/web/test/library-artifacts.test.ts
index 58fd44d3fd..070ed29bf2 100644
--- a/apps/web/test/library-artifacts.test.ts
+++ b/apps/web/test/library-artifacts.test.ts
@@ -60,8 +60,8 @@ describe("library-artifacts", () => {
   test("uploadArtifactFiles throws an UnauthenticatedError on 401", async () => {
     globalThis.fetch = ((_input: RequestInfo | URL, _init?: RequestInit) =>
       Promise.resolve(new Response(null, { status: 401 }))) as typeof fetch;
-    await expect(
-      uploadArtifactFiles("tnt_1", [new File(["x"], "x.txt")]),
-    ).rejects.toBeInstanceOf(UnauthenticatedError);
+    await expect(uploadArtifactFiles("tnt_1", [new File(["x"], "x.txt")])).rejects.toBeInstanceOf(
+      UnauthenticatedError,
+    );
   });
 });
diff --git a/apps/web/test/library-page-selection.test.tsx b/apps/web/test/library-page-selection.test.tsx
index 983929ebea..086c6d0ebe 100644
--- a/apps/web/test/library-page-selection.test.tsx
+++ b/apps/web/test/library-page-selection.test.tsx
@@ -95,10 +95,7 @@ function headerCheckbox(): HTMLButtonElement {
   return button as HTMLButtonElement;
 }
 
-function click(
-  button: HTMLButtonElement,
-  modifiers: { shiftKey?: boolean } = {},
-) {
+function click(button: HTMLButtonElement, modifiers: { shiftKey?: boolean } = {}) {
   act(() => {
     button.dispatchEvent(
       new MouseEvent("click", {
@@ -159,9 +156,7 @@ describe("LibraryPage selection", () => {
     expect(bar?.textContent).toContain("1 selected");
 
     act(() => {
-      window.dispatchEvent(
-        new KeyboardEvent("keydown", { key: "Escape", bubbles: true }),
-      );
+      window.dispatchEvent(new KeyboardEvent("keydown", { key: "Escape", bubbles: true }));
     });
     expect(bulkActionBar()).toBeNull();
   });
@@ -170,8 +165,8 @@ describe("LibraryPage selection", () => {
     render();
     click(checkboxFor("Alpha"));
     click(checkboxFor("Bravo"), { shiftKey: false });
-    const ids = [...container.querySelectorAll("[data-bulk-action]")].map(
-      (node) => node.getAttribute("data-bulk-action"),
+    const ids = [...container.querySelectorAll("[data-bulk-action]")].map((node) =>
+      node.getAttribute("data-bulk-action"),
     );
     expect(ids).toEqual([...LIBRARY_BULK_OPERATION_IDS]);
   });
@@ -180,9 +175,7 @@ describe("LibraryPage selection", () => {
     render();
     const row = rowFor("Alpha");
     act(() => {
-      row.dispatchEvent(
-        new MouseEvent("click", { bubbles: true, metaKey: true }),
-      );
+      row.dispatchEvent(new MouseEvent("click", { bubbles: true, metaKey: true }));
     });
     expect(checkboxFor("Alpha").getAttribute("aria-checked")).toBe("true");
   });
@@ -193,9 +186,7 @@ describe("LibraryPage selection", () => {
     render();
     const row = rowFor("Alpha");
     act(() => {
-      row.dispatchEvent(
-        new MouseEvent("click", { bubbles: true, ctrlKey: true }),
-      );
+      row.dispatchEvent(new MouseEvent("click", { bubbles: true, ctrlKey: true }));
     });
     expect(checkboxFor("Alpha").getAttribute("aria-checked")).toBe("false");
   });
@@ -204,9 +195,7 @@ describe("LibraryPage selection", () => {
     render();
     click(checkboxFor("Charlie"));
     click(checkboxFor("Alpha"), { shiftKey: true });
-    const button = container.querySelector(
-      '[data-bulk-action="copy-link"]',
-    ) as HTMLButtonElement;
+    const button = container.querySelector('[data-bulk-action="copy-link"]') as HTMLButtonElement;
     act(() => button.click());
     await Promise.resolve();
     await Promise.resolve();
@@ -240,9 +229,7 @@ describe("LibraryPage selection", () => {
     render();
     click(checkboxFor("Alpha"));
     click(checkboxFor("Bravo"), { shiftKey: true });
-    const button = container.querySelector(
-      '[data-bulk-action="copy-link"]',
-    ) as HTMLButtonElement;
+    const button = container.querySelector('[data-bulk-action="copy-link"]') as HTMLButtonElement;
     act(() => button.click());
     await Promise.resolve();
     await Promise.resolve();
@@ -256,13 +243,9 @@ describe("LibraryPage selection", () => {
 describe("LibraryPage top-nav action placement", () => {
   test("primary page actions render inside the StageTopBar action slot, not the page body", () => {
     act(() => {
-      root.render(
-        <LibraryPage artifacts={artifacts} onUpload={() => undefined} />,
-      );
+      root.render(<LibraryPage artifacts={artifacts} onUpload={() => undefined} />);
     });
-    const topBarActions = container.querySelector(
-      '[data-testid="stage-top-bar-actions"]',
-    );
+    const topBarActions = container.querySelector('[data-testid="stage-top-bar-actions"]');
     expect(topBarActions).not.toBeNull();
     expect(topBarActions?.textContent).toContain("Upload");
 
@@ -283,19 +266,11 @@ describe("LibraryPage top-nav action placement", () => {
         />,
       );
     });
-    const topBarActions = container.querySelector(
-      '[data-testid="stage-top-bar-actions"]',
-    );
+    const topBarActions = container.querySelector('[data-testid="stage-top-bar-actions"]');
     expect(topBarActions).not.toBeNull();
-    expect(
-      topBarActions?.querySelector('[aria-label="Filter files"]'),
-    ).not.toBeNull();
-    expect(
-      topBarActions?.querySelector('[aria-label="Files scope"]'),
-    ).not.toBeNull();
-    expect(
-      topBarActions?.querySelector('[aria-label="Newest first"]'),
-    ).not.toBeNull();
+    expect(topBarActions?.querySelector('[aria-label="Filter files"]')).not.toBeNull();
+    expect(topBarActions?.querySelector('[aria-label="Files scope"]')).not.toBeNull();
+    expect(topBarActions?.querySelector('[aria-label="Newest first"]')).not.toBeNull();
     expect(topBarActions?.querySelector('[aria-label="View"]')).not.toBeNull();
     expect(container.querySelector(".page-toolbar")).toBeNull();
   });
@@ -328,15 +303,11 @@ describe("LibraryPage top-nav action placement", () => {
         />,
       );
     });
-    const topBarActions = container.querySelector(
-      '[data-testid="stage-top-bar-actions"]',
-    );
+    const topBarActions = container.querySelector('[data-testid="stage-top-bar-actions"]');
     // The two-state scope toggle is visually one control (a bordered
     // segmented group, the same idiom `ViewToggle` already uses in this
     // bar) rather than two stray buttons that read as independent chips.
-    const scopeGroup = topBarActions?.querySelector(
-      '[aria-label="Files scope"]',
-    );
+    const scopeGroup = topBarActions?.querySelector('[aria-label="Files scope"]');
     expect(scopeGroup?.className).toContain("border");
     expect(scopeGroup?.textContent).toContain("Launch plan");
     expect(scopeGroup?.textContent).toContain("All workbenches");
@@ -345,9 +316,7 @@ describe("LibraryPage top-nav action placement", () => {
     // no button labelled bare "All" sits beside "All workbenches".
     const buttons = [...(topBarActions?.querySelectorAll("button") ?? [])];
     expect(buttons.some((b) => b.textContent?.trim() === "All")).toBe(false);
-    expect(buttons.some((b) => b.textContent?.trim() === "Back to files")).toBe(
-      true,
-    );
+    expect(buttons.some((b) => b.textContent?.trim() === "Back to files")).toBe(true);
   });
 
   test("the files scope control stays in the document below the lg breakpoint", () => {
@@ -361,9 +330,7 @@ describe("LibraryPage top-nav action placement", () => {
         />,
       );
     });
-    const topBarActions = container.querySelector(
-      '[data-testid="stage-top-bar-actions"]',
-    );
+    const topBarActions = container.querySelector('[data-testid="stage-top-bar-actions"]');
     const scopeControls = [
       ...(topBarActions?.querySelectorAll('[aria-label="Files scope"]') ?? []),
     ];
@@ -372,19 +339,13 @@ describe("LibraryPage top-nav action placement", () => {
     // behind `hidden lg:flex` vanishes below 1024px with no way to reach
     // All workbenches. At least one control must stay in the tree without
     // that class — the overflow menu in this bar, or the group itself.
-    expect(
-      scopeControls.some((el) => !el.className.split(/\s+/).includes("hidden")),
-    ).toBe(true);
+    expect(scopeControls.some((el) => !el.className.split(/\s+/).includes("hidden"))).toBe(true);
   });
 
   test("the file detail pane fills the available height", () => {
     act(() => {
       root.render(
-        <LibraryPage
-          artifacts={artifacts}
-          selectedId="art_1"
-          onSelect={() => undefined}
-        />,
+        <LibraryPage artifacts={artifacts} selectedId="art_1" onSelect={() => undefined} />,
       );
     });
     const pane = container.querySelector("aside");
diff --git a/apps/web/test/library-upload-confirmation.test.tsx b/apps/web/test/library-upload-confirmation.test.tsx
index 488f054a4c..d470930cce 100644
--- a/apps/web/test/library-upload-confirmation.test.tsx
+++ b/apps/web/test/library-upload-confirmation.test.tsx
@@ -40,9 +40,7 @@ function jsonResponse(body: unknown, status = 200): Response {
 function uploadFile(container: HTMLDivElement, file: File): void {
   // The picker is unlabeled on purpose (CL-6750) — the visible Upload
   // button is the only named control; this helper drives the ghost input.
-  const input = container.querySelector(
-    'input[type="file"]',
-  ) as HTMLInputElement | null;
+  const input = container.querySelector('input[type="file"]') as HTMLInputElement | null;
   if (input === null) throw new Error("no upload input");
   Object.defineProperty(input, "files", {
     configurable: true,
@@ -98,9 +96,7 @@ describe("Files upload confirmation", () => {
     globalThis.fetch = ((input: RequestInfo | URL, init?: RequestInit) => {
       const url = String(input);
       if (url.includes("/api/me/principals")) {
-        return Promise.resolve(
-          jsonResponse({ data: [membership], nextCursor: null }),
-        );
+        return Promise.resolve(jsonResponse({ data: [membership], nextCursor: null }));
       }
       if (url.includes("/artifacts/upload") && init?.method === "POST") {
         return Promise.resolve(
@@ -126,9 +122,7 @@ describe("Files upload confirmation", () => {
         );
       }
       if (url.includes("/artifacts")) {
-        return Promise.resolve(
-          jsonResponse({ artifacts: [], nextCursor: null }),
-        );
+        return Promise.resolve(jsonResponse({ artifacts: [], nextCursor: null }));
       }
       return Promise.reject(new Error(`unrouted fetch: ${url}`));
     }) as typeof fetch;
@@ -147,17 +141,13 @@ describe("Files upload confirmation", () => {
     globalThis.fetch = ((input: RequestInfo | URL, init?: RequestInit) => {
       const url = String(input);
       if (url.includes("/api/me/principals")) {
-        return Promise.resolve(
-          jsonResponse({ data: [membership], nextCursor: null }),
-        );
+        return Promise.resolve(jsonResponse({ data: [membership], nextCursor: null }));
       }
       if (url.includes("/artifacts/upload") && init?.method === "POST") {
         return Promise.resolve(jsonResponse({ error: "boom" }, 500));
       }
       if (url.includes("/artifacts")) {
-        return Promise.resolve(
-          jsonResponse({ artifacts: [], nextCursor: null }),
-        );
+        return Promise.resolve(jsonResponse({ artifacts: [], nextCursor: null }));
       }
       return Promise.reject(new Error(`unrouted fetch: ${url}`));
     }) as typeof fetch;
diff --git a/apps/web/test/login-routing.test.tsx b/apps/web/test/login-routing.test.tsx
index 00cd284fe3..070295e2c0 100644
--- a/apps/web/test/login-routing.test.tsx
+++ b/apps/web/test/login-routing.test.tsx
@@ -42,11 +42,7 @@ const user: SessionUser = {
  * `LoginForm` submission end to end. */
 let capturedHandleSignedIn: ((user: SessionUser) => void) | null = null;
 
-function TestRoot({
-  initialSession,
-}: {
-  readonly initialSession: SessionState;
-}) {
+function TestRoot({ initialSession }: { readonly initialSession: SessionState }) {
   const [path, setPath] = useState(window.location.pathname);
   useEffect(() => {
     const onPopState = () => setPath(window.location.pathname);
diff --git a/apps/web/test/mission-control-page.test.tsx b/apps/web/test/mission-control-page.test.tsx
index 4f7a023e53..bd825d0f35 100644
--- a/apps/web/test/mission-control-page.test.tsx
+++ b/apps/web/test/mission-control-page.test.tsx
@@ -101,9 +101,7 @@ describe("computeInFlightRows", () => {
       routine({
         id: "stale",
         status: "running",
-        startedAt: new Date(
-          Date.now() - FIRE_RUNNING_WINDOW_MS - 1,
-        ).toISOString(),
+        startedAt: new Date(Date.now() - FIRE_RUNNING_WINDOW_MS - 1).toISOString(),
       }),
     ]);
     expect(rows.map((row) => row.key)).toEqual(["routine:stale"]);
diff --git a/apps/web/test/page-type-drift.ts b/apps/web/test/page-type-drift.ts
index 0d07b60363..a15fae1ec5 100644
--- a/apps/web/test/page-type-drift.ts
+++ b/apps/web/test/page-type-drift.ts
@@ -24,5 +24,4 @@ const _cursor: string | null = inferred.nextCursor;
 declare const principalsQuery: APIQuery<Inferred>;
 const _accepted: APIQuery<PrincipalsPage> = principalsQuery;
 // @ts-expect-error a drifted envelope (nextCursor: number) must be rejected
-const _rejected: APIQuery<{ data: Principal[]; nextCursor: number }> =
-  principalsQuery;
+const _rejected: APIQuery<{ data: Principal[]; nextCursor: number }> = principalsQuery;
diff --git a/apps/web/test/pages.test.tsx b/apps/web/test/pages.test.tsx
index ed5560512a..babbf50359 100644
--- a/apps/web/test/pages.test.tsx
+++ b/apps/web/test/pages.test.tsx
@@ -20,18 +20,14 @@ describe("empty states", () => {
   test("library teaches what will appear once the seam is real", () => {
     const markup = renderToStaticMarkup(<LibraryPage artifacts={[]} />);
     expect(markup).toContain("No files yet");
-    expect(markup).toContain(
-      "Upload a file, or let your agents drop their work here",
-    );
+    expect(markup).toContain("Upload a file, or let your agents drop their work here");
   });
 
   // CL-6750 — empty Files must tell one story: invite to add files. A
   // "0 files" count beside the poster reads as a second empty announcement,
   // and a labeled ghost file input twins the visible Upload button.
   test("empty library is one invitation, not count + poster + twin uploads", () => {
-    const markup = renderToStaticMarkup(
-      <LibraryPage artifacts={[]} onUpload={() => undefined} />,
-    );
+    const markup = renderToStaticMarkup(<LibraryPage artifacts={[]} onUpload={() => undefined} />);
     expect(markup).toContain("No files yet");
     expect(markup).not.toContain("0 files");
     // One visible Upload in the top bar.
@@ -62,9 +58,7 @@ describe("live data", () => {
   };
 
   test("library renders every artifact it's given", () => {
-    const markup = renderToStaticMarkup(
-      <LibraryPage artifacts={[reportArtifact, csvArtifact]} />,
-    );
+    const markup = renderToStaticMarkup(<LibraryPage artifacts={[reportArtifact, csvArtifact]} />);
     expect(markup).toContain("Q3 report");
     expect(markup).toContain("Signups export");
   });
@@ -95,10 +89,7 @@ describe("settings top bar", () => {
       <TestQueryProvider>
         <NavigationProvider navigate={() => undefined}>
           <BenchProvider>
-            <SettingsRoute
-              path="/settings/account"
-              navigate={() => undefined}
-            />
+            <SettingsRoute path="/settings/account" navigate={() => undefined} />
           </BenchProvider>
         </NavigationProvider>
       </TestQueryProvider>,
diff --git a/apps/web/test/pending-approvals.test.tsx b/apps/web/test/pending-approvals.test.tsx
index 2e25ec1243..21864045d7 100644
--- a/apps/web/test/pending-approvals.test.tsx
+++ b/apps/web/test/pending-approvals.test.tsx
@@ -131,9 +131,7 @@ describe("usePendingApprovals", () => {
       root?.render(
         <TestQueryProvider>
           <NavigationProvider navigate={() => undefined}>
-            <BenchContext.Provider value={benchState}>
-              {children}
-            </BenchContext.Provider>
+            <BenchContext.Provider value={benchState}>{children}</BenchContext.Provider>
           </NavigationProvider>
         </TestQueryProvider>,
       );
@@ -176,9 +174,7 @@ describe("usePendingApprovals", () => {
       'Research Analyst in Growth Team Bench: Sends an email on the tenant\'s behalf: "Welcome Acme"',
       'Research Analyst in Growth Team Bench: Sends an email on the tenant\'s behalf: "Welcome Acme"',
     ]);
-    expect(
-      requested.filter((path) => path.includes("/runs/run_1")),
-    ).toHaveLength(1);
+    expect(requested.filter((path) => path.includes("/runs/run_1"))).toHaveLength(1);
   });
 
   test("a refused list read reads as a failure, never as an empty queue", async () => {
diff --git a/apps/web/test/plugins-page.test.tsx b/apps/web/test/plugins-page.test.tsx
index f50d9a5540..7137c22b03 100644
--- a/apps/web/test/plugins-page.test.tsx
+++ b/apps/web/test/plugins-page.test.tsx
@@ -72,14 +72,11 @@ function nativeValueSetter(
 }
 
 function fillField(id: string, value: string, textarea = false) {
-  const el = document.getElementById(id) as
-    HTMLInputElement | HTMLTextAreaElement | null;
+  const el = document.getElementById(id) as HTMLInputElement | HTMLTextAreaElement | null;
   expect(el).not.toBeNull();
   if (el === null) return;
   const setter = nativeValueSetter(
-    textarea
-      ? window.HTMLTextAreaElement.prototype
-      : window.HTMLInputElement.prototype,
+    textarea ? window.HTMLTextAreaElement.prototype : window.HTMLInputElement.prototype,
   );
   setter.call(el, value);
   el.dispatchEvent(new Event("input", { bubbles: true }));
@@ -92,10 +89,8 @@ function stubFetch(
   globalThis.fetch = ((input: RequestInfo | URL, init?: RequestInit) => {
     const path = typeof input === "string" ? input : String(input);
     const method = (init?.method ?? "GET").toUpperCase();
-    if (path.includes("/mcp-servers/presets"))
-      return Promise.resolve(json({ data: mcpPresets }));
-    if (path.includes("/api/me/principals"))
-      return Promise.resolve(json(membership));
+    if (path.includes("/mcp-servers/presets")) return Promise.resolve(json({ data: mcpPresets }));
+    if (path.includes("/api/me/principals")) return Promise.resolve(json(membership));
     if (path.includes("/credentials/resolve/GitHub")) {
       return Promise.resolve(
         json({
@@ -117,11 +112,8 @@ function stubFetch(
       );
     }
     if (path.includes("/connections/provider-health"))
-      return Promise.resolve(
-        json({ providers: {}, connectedProviderCount: 1 }),
-      );
-    if (path.includes("/credentials/resolve/"))
-      return Promise.resolve(json(null, 404));
+      return Promise.resolve(json({ providers: {}, connectedProviderCount: 1 }));
+    if (path.includes("/credentials/resolve/")) return Promise.resolve(json(null, 404));
     if (path.includes("/api/tenants/tnt_1/assets")) {
       if (method === "POST") {
         const parsed =
@@ -174,10 +166,7 @@ async function mount(props: { readonly navigate?: (to: string) => void } = {}) {
         <NavigationProvider navigate={() => undefined}>
           <BenchProvider>
             <ProviderHealthProvider>
-              <PluginsRoute
-                path="/plugins"
-                navigate={props.navigate ?? (() => undefined)}
-              />
+              <PluginsRoute path="/plugins" navigate={props.navigate ?? (() => undefined)} />
             </ProviderHealthProvider>
           </BenchProvider>
         </NavigationProvider>
@@ -248,9 +237,7 @@ describe("PluginsRoute", () => {
     stubFetch();
     const el = await mount();
 
-    expect(
-      el.querySelector('button[aria-label="Filter plugins"]'),
-    ).not.toBeNull();
+    expect(el.querySelector('button[aria-label="Filter plugins"]')).not.toBeNull();
     expect(el.textContent).not.toContain("New skill");
 
     const skillsTab = [...el.querySelectorAll("button")].find(
@@ -261,9 +248,7 @@ describe("PluginsRoute", () => {
       skillsTab?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
     });
 
-    expect(
-      el.querySelector('button[aria-label="Filter skills"]'),
-    ).not.toBeNull();
+    expect(el.querySelector('button[aria-label="Filter skills"]')).not.toBeNull();
     expect(el.textContent).toContain("New skill");
     expect(el.textContent).toContain("weekly-digest");
   });
@@ -303,8 +288,7 @@ describe("PluginsRoute", () => {
   test("a fresh mount never shows a provider connector, even one resolved as connected", async () => {
     globalThis.fetch = ((input: RequestInfo | URL) => {
       const path = typeof input === "string" ? input : String(input);
-      if (path.includes("/api/me/principals"))
-        return Promise.resolve(json(membership));
+      if (path.includes("/api/me/principals")) return Promise.resolve(json(membership));
       if (path.includes("/credentials/resolve/OpenRouter")) {
         return Promise.resolve(
           json({
@@ -316,13 +300,9 @@ describe("PluginsRoute", () => {
         );
       }
       if (path.includes("/connections/provider-health"))
-        return Promise.resolve(
-          json({ providers: {}, connectedProviderCount: 1 }),
-        );
-      if (path.includes("/credentials/resolve/"))
-        return Promise.resolve(json(null, 404));
-      if (path.includes("/api/tenants/tnt_1/assets"))
-        return Promise.resolve(json([]));
+        return Promise.resolve(json({ providers: {}, connectedProviderCount: 1 }));
+      if (path.includes("/credentials/resolve/")) return Promise.resolve(json(null, 404));
+      if (path.includes("/api/tenants/tnt_1/assets")) return Promise.resolve(json([]));
       return Promise.resolve(json({ data: [], nextCursor: null }));
     }) as typeof fetch;
 
@@ -353,9 +333,7 @@ describe("PluginsRoute", () => {
     }
 
     expect(document.querySelector('[role="dialog"]')).toBeNull();
-    expect(el.textContent).toContain(
-      "Couldn't find that connection — pick it below.",
-    );
+    expect(el.textContent).toContain("Couldn't find that connection — pick it below.");
   });
 
   test("clicking a skill card navigates to that skill's page", async () => {
@@ -430,29 +408,20 @@ describe("PluginsRoute", () => {
       return { promise, resolve };
     }
 
-    const skillsDeferred: Record<
-      string,
-      ReturnType<typeof deferredResponse>
-    > = {
+    const skillsDeferred: Record<string, ReturnType<typeof deferredResponse>> = {
       tnt_a: deferredResponse(),
       tnt_b: deferredResponse(),
     };
 
     globalThis.fetch = ((input: RequestInfo | URL) => {
       const path = typeof input === "string" ? input : String(input);
-      if (path.includes("/credentials/resolve/"))
-        return Promise.resolve(json(null, 404));
+      if (path.includes("/credentials/resolve/")) return Promise.resolve(json(null, 404));
       if (path.includes("/connections/provider-health"))
-        return Promise.resolve(
-          json({ providers: {}, connectedProviderCount: 0 }),
-        );
+        return Promise.resolve(json({ providers: {}, connectedProviderCount: 0 }));
       const skillsMatch = /\/api\/tenants\/(tnt_[ab])\/assets/.exec(path);
       if (skillsMatch) {
         const tenantId = skillsMatch[1] as string;
-        return (
-          skillsDeferred[tenantId]?.promise ??
-          Promise.resolve(json({ skills: [] }))
-        );
+        return skillsDeferred[tenantId]?.promise ?? Promise.resolve(json({ skills: [] }));
       }
       return Promise.resolve(json({ data: [], nextCursor: null }));
     }) as typeof fetch;
@@ -469,9 +438,7 @@ describe("PluginsRoute", () => {
         selectTenant: setTenantId,
         onBenchCreated: () => undefined,
       };
-      return (
-        <BenchContext.Provider value={value}>{children}</BenchContext.Provider>
-      );
+      return <BenchContext.Provider value={value}>{children}</BenchContext.Provider>;
     }
 
     container = document.createElement("div");
@@ -585,8 +552,7 @@ describe("PluginsRoute", () => {
       const method = (init?.method ?? "GET").toUpperCase();
       if (method === "DELETE" && path.includes("/credentials/cred_1"))
         return Promise.resolve(new Response(null, { status: 204 }));
-      if (path.includes("/api/me/principals"))
-        return Promise.resolve(json(membership));
+      if (path.includes("/api/me/principals")) return Promise.resolve(json(membership));
       if (path.includes("/credentials/resolve/GitHub")) {
         if (deferCredentialResolves) {
           return new Promise<Response>((resolve) => {
@@ -596,22 +562,16 @@ describe("PluginsRoute", () => {
         return Promise.resolve(json(githubCredential));
       }
       if (path.includes("/connections/provider-health"))
-        return Promise.resolve(
-          json({ providers: {}, connectedProviderCount: 1 }),
-        );
-      if (path.includes("/credentials/resolve/"))
-        return Promise.resolve(json(null, 404));
-      if (path.includes("/api/tenants/tnt_1/assets"))
-        return Promise.resolve(json([]));
+        return Promise.resolve(json({ providers: {}, connectedProviderCount: 1 }));
+      if (path.includes("/credentials/resolve/")) return Promise.resolve(json(null, 404));
+      if (path.includes("/api/tenants/tnt_1/assets")) return Promise.resolve(json([]));
       return Promise.resolve(json({ data: [], nextCursor: null }));
     }) as typeof fetch;
 
     const el = await mount();
     expect(el.textContent).toContain("Connected here");
 
-    const manageButton = el.querySelector<HTMLButtonElement>(
-      'button[aria-label="Manage GitHub"]',
-    );
+    const manageButton = el.querySelector<HTMLButtonElement>('button[aria-label="Manage GitHub"]');
     await act(async () => {
       manageButton?.click();
     });
@@ -633,14 +593,10 @@ describe("PluginsRoute", () => {
 
     // First click arms the confirm button, second click fires the delete.
     await act(async () => {
-      disconnectButton()?.dispatchEvent(
-        new MouseEvent("click", { bubbles: true }),
-      );
+      disconnectButton()?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
     });
     await act(async () => {
-      disconnectButton()?.dispatchEvent(
-        new MouseEvent("click", { bubbles: true }),
-      );
+      disconnectButton()?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
     });
     for (let i = 0; i < 5; i++) {
       await act(async () => {
@@ -689,9 +645,7 @@ describe("PluginsRoute", () => {
     const el = await mount();
 
     expect(document.querySelector('[role="dialog"]')).toBeNull();
-    expect(el.textContent).not.toContain(
-      "Couldn't find that connection — pick it below.",
-    );
+    expect(el.textContent).not.toContain("Couldn't find that connection — pick it below.");
     expect(window.location.search).toBe("");
   });
 
@@ -748,9 +702,7 @@ describe("PluginsRoute", () => {
     const el = await mount();
 
     expect(document.querySelector('[role="dialog"]')).toBeNull();
-    expect(el.textContent).not.toContain(
-      "Couldn't find that connection — pick it below.",
-    );
+    expect(el.textContent).not.toContain("Couldn't find that connection — pick it below.");
     expect(window.location.search).toBe("");
   });
 });
@@ -764,22 +716,16 @@ describe("PluginsRoute refresh-on-visibility effect", () => {
     let resolveGithubCalls = 0;
     globalThis.fetch = ((input: RequestInfo | URL) => {
       const path = typeof input === "string" ? input : String(input);
-      if (path.includes("/mcp-servers/presets"))
-        return Promise.resolve(json({ data: [] }));
-      if (path.includes("/api/me/principals"))
-        return Promise.resolve(json(membership));
+      if (path.includes("/mcp-servers/presets")) return Promise.resolve(json({ data: [] }));
+      if (path.includes("/api/me/principals")) return Promise.resolve(json(membership));
       if (path.includes("/credentials/resolve/GitHub")) {
         resolveGithubCalls += 1;
         return Promise.resolve(json(null, 404));
       }
-      if (path.includes("/credentials/resolve/"))
-        return Promise.resolve(json(null, 404));
+      if (path.includes("/credentials/resolve/")) return Promise.resolve(json(null, 404));
       if (path.includes("/connections/provider-health"))
-        return Promise.resolve(
-          json({ providers: {}, connectedProviderCount: 0 }),
-        );
-      if (path.includes("/api/tenants/tnt_1/assets"))
-        return Promise.resolve(json([]));
+        return Promise.resolve(json({ providers: {}, connectedProviderCount: 0 }));
+      if (path.includes("/api/tenants/tnt_1/assets")) return Promise.resolve(json([]));
       return Promise.resolve(json({ data: [], nextCursor: null }));
     }) as typeof fetch;
 
@@ -826,10 +772,7 @@ describe("PluginsRoute refresh-on-visibility effect", () => {
     act(() => root?.unmount());
     root = null;
 
-    expect(documentRemoveSpy).toHaveBeenCalledWith(
-      "visibilitychange",
-      visibilityHandler,
-    );
+    expect(documentRemoveSpy).toHaveBeenCalledWith("visibilitychange", visibilityHandler);
     expect(windowRemoveSpy).toHaveBeenCalledWith("focus", focusHandler);
 
     documentAddSpy.mockRestore();
@@ -852,9 +795,7 @@ describe("PluginsRoute refresh-on-visibility effect", () => {
         selectTenant: () => undefined,
         onBenchCreated: () => undefined,
       };
-      return (
-        <BenchContext.Provider value={value}>{children}</BenchContext.Provider>
-      );
+      return <BenchContext.Provider value={value}>{children}</BenchContext.Provider>;
     }
 
     container = document.createElement("div");
@@ -879,12 +820,8 @@ describe("PluginsRoute refresh-on-visibility effect", () => {
       });
     }
 
-    expect(
-      documentAddSpy.mock.calls.some((call) => call[0] === "visibilitychange"),
-    ).toBe(false);
-    expect(windowAddSpy.mock.calls.some((call) => call[0] === "focus")).toBe(
-      false,
-    );
+    expect(documentAddSpy.mock.calls.some((call) => call[0] === "visibilitychange")).toBe(false);
+    expect(windowAddSpy.mock.calls.some((call) => call[0] === "focus")).toBe(false);
 
     documentAddSpy.mockRestore();
     windowAddSpy.mockRestore();
diff --git a/apps/web/test/provider-health-banner.test.tsx b/apps/web/test/provider-health-banner.test.tsx
index 3bc0b81fb8..e54068dc22 100644
--- a/apps/web/test/provider-health-banner.test.tsx
+++ b/apps/web/test/provider-health-banner.test.tsx
@@ -11,11 +11,7 @@ import { createRoot, type Root } from "react-dom/client";
 
 import { BenchProvider } from "../src/bench-context";
 import { NavigationProvider } from "../src/navigation";
-import {
-  FILES_PATH_PREFIX,
-  PLUGINS_PATH_PREFIX,
-  SKILLS_PATH_PREFIX,
-} from "../src/path-ids";
+import { FILES_PATH_PREFIX, PLUGINS_PATH_PREFIX, SKILLS_PATH_PREFIX } from "../src/path-ids";
 import { MISSION_CONTROL_PATH, SETTINGS_PATH } from "../src/routes";
 import {
   isProviderHealthRecoverySurface,
@@ -61,8 +57,7 @@ const membership = {
 function stubFetch(providerHealthBody: unknown): void {
   globalThis.fetch = ((input: RequestInfo | URL) => {
     const path = typeof input === "string" ? input : String(input);
-    if (path.includes("/api/me/principals"))
-      return Promise.resolve(json(membership));
+    if (path.includes("/api/me/principals")) return Promise.resolve(json(membership));
     if (path.includes("/connections/provider-health"))
       return Promise.resolve(json(providerHealthBody));
     return Promise.resolve(json({ items: [] }));
@@ -115,10 +110,7 @@ async function flushForHealthMarker(marker: string): Promise<void> {
   }
 }
 
-function findByText(
-  container: HTMLElement,
-  text: string,
-): HTMLElement | undefined {
+function findByText(container: HTMLElement, text: string): HTMLElement | undefined {
   return Array.from(container.querySelectorAll("button")).find(
     (button) => button.textContent === text,
   );
@@ -264,9 +256,7 @@ describe("ProviderHealthBanner (CL-6092)", () => {
     await flushForHealthMarker("healthy");
 
     expect(container.querySelector('[role="alert"]')).toBeNull();
-    expect(
-      container.querySelector('[data-provider-health="healthy"]'),
-    ).not.toBeNull();
+    expect(container.querySelector('[data-provider-health="healthy"]')).not.toBeNull();
   });
 
   // CL-6834: a failed first poll used to leave providers at {}, which the
@@ -275,8 +265,7 @@ describe("ProviderHealthBanner (CL-6092)", () => {
   test("first-load poll failure shows error chrome, not a silent healthy state", async () => {
     globalThis.fetch = ((input: RequestInfo | URL) => {
       const path = typeof input === "string" ? input : String(input);
-      if (path.includes("/api/me/principals"))
-        return Promise.resolve(json(membership));
+      if (path.includes("/api/me/principals")) return Promise.resolve(json(membership));
       if (path.includes("/connections/provider-health"))
         return Promise.reject(new Error("network down"));
       return Promise.resolve(json({ items: [] }));
@@ -285,17 +274,13 @@ describe("ProviderHealthBanner (CL-6092)", () => {
     await mount(() => undefined);
     await flushForHealthMarker("error");
 
-    expect(
-      container.querySelector('[data-provider-health="error"]'),
-    ).not.toBeNull();
+    expect(container.querySelector('[data-provider-health="error"]')).not.toBeNull();
     expect(container.querySelector('[role="alert"]')).not.toBeNull();
     expect(container.textContent).toContain("Couldn't check provider health");
     // Not the guided unhealthy-provider copy — there is no incident to fix.
     expect(container.textContent).not.toContain("turned down your key.");
     expect(findByText(container, "Fix it")).toBeUndefined();
-    expect(
-      container.querySelector('[data-provider-health="healthy"]'),
-    ).toBeNull();
+    expect(container.querySelector('[data-provider-health="healthy"]')).toBeNull();
   });
 });
 
@@ -313,22 +298,16 @@ const CREDENTIAL_FAILURE_HEALTH = {
 describe("isProviderHealthRecoverySurface (CL-6734)", () => {
   test("Skills, Files, Mission Control, and Plugins are not recovery surfaces", () => {
     expect(isProviderHealthRecoverySurface(SKILLS_PATH_PREFIX)).toBe(false);
-    expect(
-      isProviderHealthRecoverySurface(`${SKILLS_PATH_PREFIX}/drafting`),
-    ).toBe(false);
+    expect(isProviderHealthRecoverySurface(`${SKILLS_PATH_PREFIX}/drafting`)).toBe(false);
     expect(isProviderHealthRecoverySurface(FILES_PATH_PREFIX)).toBe(false);
     expect(isProviderHealthRecoverySurface(MISSION_CONTROL_PATH)).toBe(false);
     expect(isProviderHealthRecoverySurface(PLUGINS_PATH_PREFIX)).toBe(false);
-    expect(
-      isProviderHealthRecoverySurface(`${PLUGINS_PATH_PREFIX}/anthropic`),
-    ).toBe(false);
+    expect(isProviderHealthRecoverySurface(`${PLUGINS_PATH_PREFIX}/anthropic`)).toBe(false);
   });
 
   test("Settings and the broken room still are", () => {
     expect(isProviderHealthRecoverySurface(SETTINGS_PATH)).toBe(true);
-    expect(isProviderHealthRecoverySurface(`${SETTINGS_PATH}/members`)).toBe(
-      true,
-    );
+    expect(isProviderHealthRecoverySurface(`${SETTINGS_PATH}/members`)).toBe(true);
     expect(isProviderHealthRecoverySurface("/w/ch_1")).toBe(true);
     expect(isProviderHealthRecoverySurface("/w/ch_1/settings")).toBe(true);
     expect(isProviderHealthRecoverySurface("/")).toBe(true);
@@ -391,9 +370,7 @@ describe("ProviderHealthBanner scope (CL-6734)", () => {
     expect(container.querySelector('[role="alert"]')).not.toBeNull();
 
     await act(async () => {
-      root.render(
-        <Harness navigate={() => undefined} path={SKILLS_PATH_PREFIX} />,
-      );
+      root.render(<Harness navigate={() => undefined} path={SKILLS_PATH_PREFIX} />);
     });
     expect(container.querySelector('[role="alert"]')).toBeNull();
 
diff --git a/apps/web/test/provisioning-error-page.test.tsx b/apps/web/test/provisioning-error-page.test.tsx
index 9135e60546..da4fe607ef 100644
--- a/apps/web/test/provisioning-error-page.test.tsx
+++ b/apps/web/test/provisioning-error-page.test.tsx
@@ -23,11 +23,7 @@ afterEach(() => {
   container = null;
 });
 
-function renderPage(props: {
-  message: string;
-  refId?: string;
-  onRetry: () => void;
-}) {
+function renderPage(props: { message: string; refId?: string; onRetry: () => void }) {
   container = document.createElement("div");
   document.body.appendChild(container);
   root = createRoot(container);
@@ -38,8 +34,7 @@ function renderPage(props: {
 describe("ProvisioningErrorPage", () => {
   test("renders the consumer-language card, not a raw error string", () => {
     const el = renderPage({
-      message:
-        "Setting up your workbench hit a snag — we're on it. Try again in a moment.",
+      message: "Setting up your workbench hit a snag — we're on it. Try again in a moment.",
       refId: "1a2b3c-9z",
       onRetry: () => undefined,
     });
@@ -73,9 +68,7 @@ describe("ProvisioningErrorPage", () => {
 
     const button = el.querySelector("button");
     expect(button).not.toBeNull();
-    act(() =>
-      button?.dispatchEvent(new MouseEvent("click", { bubbles: true })),
-    );
+    act(() => button?.dispatchEvent(new MouseEvent("click", { bubbles: true })));
     expect(retried).toBe(true);
   });
 });
diff --git a/apps/web/test/query-client.test.ts b/apps/web/test/query-client.test.ts
index 92608cb089..3cfe92d49d 100644
--- a/apps/web/test/query-client.test.ts
+++ b/apps/web/test/query-client.test.ts
@@ -19,9 +19,7 @@ describe("pathToQueryKey", () => {
   });
 
   test("maps tenant assets onto a tenant-scoped key", () => {
-    expect(pathToQueryKey("/api/tenants/tnt_1/assets")).toEqual(
-      tenantKeys.assets("tnt_1"),
-    );
+    expect(pathToQueryKey("/api/tenants/tnt_1/assets")).toEqual(tenantKeys.assets("tnt_1"));
   });
 
   test("falls back to a path key for unknown routes", () => {
@@ -35,13 +33,9 @@ describe("tenantKeys.routineActivity", () => {
   // mounts subscribe to one entry and a future native fires equivalent has
   // a key to rewire.
   test("keys routine activity per tenant without the deleted route name", () => {
-    expect(tenantKeys.routineActivity("tnt_1")).toEqual([
-      "tenant",
-      "tnt_1",
-      "routine-activity",
-    ]);
-    expect(
-      (tenantKeys.routineActivity("tnt_1") as readonly unknown[]).join("/"),
-    ).not.toContain("top-level-runs");
+    expect(tenantKeys.routineActivity("tnt_1")).toEqual(["tenant", "tnt_1", "routine-activity"]);
+    expect((tenantKeys.routineActivity("tnt_1") as readonly unknown[]).join("/")).not.toContain(
+      "top-level-runs",
+    );
   });
 });
diff --git a/apps/web/test/react-ui-toast-mock.ts b/apps/web/test/react-ui-toast-mock.ts
index 82a24694b2..9458cd609e 100644
--- a/apps/web/test/react-ui-toast-mock.ts
+++ b/apps/web/test/react-ui-toast-mock.ts
@@ -23,8 +23,7 @@ type ToastFn = typeof actualReactUi.toast;
  * scope; `mockClear()` it between tests the way any other spy is cleared.
  */
 export function spyOnReactUiToast(): ReturnType<typeof mock<ToastFn>> {
-  const spy = mock(((...args: Parameters<ToastFn>) =>
-    realToast(...args)) as ToastFn);
+  const spy = mock(((...args: Parameters<ToastFn>) => realToast(...args)) as ToastFn);
   // `toast` carries its own variants (`toast.error` and friends); the spy
   // stands in for the whole callable, so it must carry them too.
   Object.assign(spy, realToast);
diff --git a/apps/web/test/routes.test.tsx b/apps/web/test/routes.test.tsx
index 5e3c512304..b96db5c5a2 100644
--- a/apps/web/test/routes.test.tsx
+++ b/apps/web/test/routes.test.tsx
@@ -77,10 +77,7 @@ async function flushLazyImports(): Promise<void> {
   }
 }
 
-async function renderApp(
-  path: string,
-  session: SessionState = signedIn,
-): Promise<string> {
+async function renderApp(path: string, session: SessionState = signedIn): Promise<string> {
   stubEmptyFetch();
   const container = document.createElement("div");
   document.body.appendChild(container);
@@ -124,10 +121,9 @@ function stagePageTitle(markup: string): string | undefined {
  * stage title carries it. Returns the active row's label so tests confirm
  * the *right* footer affordance lights, and nothing else does. */
 function activeFooterLabel(markup: string): string | undefined {
-  const lit =
-    /shell-sidebar-footer-row"[^>]*aria-current="page"[^>]*>([\s\S]*?)<\/button>/.exec(
-      markup,
-    );
+  const lit = /shell-sidebar-footer-row"[^>]*aria-current="page"[^>]*>([\s\S]*?)<\/button>/.exec(
+    markup,
+  );
   if (lit === null) return undefined;
   return /<span>([^<]+)<\/span>/.exec(lit[1] ?? "")?.[1];
 }
@@ -197,18 +193,10 @@ describe("route table", () => {
   });
 
   test("legacy /settings/agents and /settings/skills stay routable (redirect-only, off the palette pages)", () => {
-    expect(matchesRoute("/settings/agents", "/settings/agents/wfd_1")).toBe(
-      true,
-    );
-    expect(matchesRoute("/settings/skills", "/settings/skills/skill_1")).toBe(
-      true,
-    );
-    expect(NAV_ROUTES.map((route) => route.path)).not.toContain(
-      "/settings/agents",
-    );
-    expect(NAV_ROUTES.map((route) => route.path)).not.toContain(
-      "/settings/skills",
-    );
+    expect(matchesRoute("/settings/agents", "/settings/agents/wfd_1")).toBe(true);
+    expect(matchesRoute("/settings/skills", "/settings/skills/skill_1")).toBe(true);
+    expect(NAV_ROUTES.map((route) => route.path)).not.toContain("/settings/agents");
+    expect(NAV_ROUTES.map((route) => route.path)).not.toContain("/settings/skills");
   });
 
   test("legacy /library stays routable (redirect-only) but is off the palette pages", () => {
@@ -219,18 +207,14 @@ describe("route table", () => {
   test("a slug segment resolves to the entity's own detail route (CL-6412)", () => {
     expect(matchesRoute(AGENT_DETAIL_PATH, "/agents/triage-bot")).toBe(true);
     expect(matchesRoute(SKILL_DETAIL_PATH, "/skills/pr-review")).toBe(true);
-    expect(matchesRoute(ROUTINE_DETAIL_PATH, "/routines/weekly-digest")).toBe(
-      true,
-    );
+    expect(matchesRoute(ROUTINE_DETAIL_PATH, "/routines/weekly-digest")).toBe(true);
   });
 
   test("detail routes match only a single, slug-shaped segment", () => {
     expect(matchesRoute(AGENT_DETAIL_PATH, "/agents")).toBe(false);
     expect(matchesRoute(AGENT_DETAIL_PATH, "/agents/wfd_1")).toBe(false);
     expect(matchesRoute(AGENT_DETAIL_PATH, "/agents/Triage-Bot")).toBe(false);
-    expect(matchesRoute(AGENT_DETAIL_PATH, "/agents/triage-bot/runs")).toBe(
-      false,
-    );
+    expect(matchesRoute(AGENT_DETAIL_PATH, "/agents/triage-bot/runs")).toBe(false);
     expect(matchesRoute(AGENT_DETAIL_PATH, "/skills/triage-bot")).toBe(false);
   });
 
@@ -267,23 +251,17 @@ describe("route table", () => {
     expect(routeFor("/routines/%E0%A4%A")).toBe("/routines");
     expect(matchesRoute("/plugins", "/plugins/%")).toBe(false);
     expect(matchesRoute(ROUTINE_DETAIL_PATH, "/routines/%E0%A4%A")).toBe(false);
-    expect(matchesRoute(AGENT_DETAIL_PATH, "/agents/%2Ftriage-bot")).toBe(
-      false,
-    );
+    expect(matchesRoute(AGENT_DETAIL_PATH, "/agents/%2Ftriage-bot")).toBe(false);
     // A workflow detail path reuses workflowDefinitionAssetIdFromPath
     // (CL-7371 review): a malformed percent-escape segment must never
     // match the route at all, not match and then fail to resolve an id.
-    expect(matchesRoute(WORKFLOW_DETAIL_PATH, "/workflows/%E0%A4%A")).toBe(
-      false,
-    );
+    expect(matchesRoute(WORKFLOW_DETAIL_PATH, "/workflows/%E0%A4%A")).toBe(false);
   });
 
   test("workflow detail path matches a single opaque segment only", () => {
     expect(matchesRoute(WORKFLOW_DETAIL_PATH, "/workflows/wfd_1")).toBe(true);
     expect(matchesRoute(WORKFLOW_DETAIL_PATH, "/workflows")).toBe(false);
-    expect(matchesRoute(WORKFLOW_DETAIL_PATH, "/workflows/wfd_1/runs")).toBe(
-      false,
-    );
+    expect(matchesRoute(WORKFLOW_DETAIL_PATH, "/workflows/wfd_1/runs")).toBe(false);
   });
 
   test("a detail path keeps its roster's sidebar row lit", () => {
@@ -414,9 +392,7 @@ describe("routes render", () => {
 
   test("a malformed percent-escape renders a screen instead of crashing", async () => {
     expect(await renderApp("/plugins/%")).toContain("Page not found");
-    expect(await renderApp("/routines/%E0%A4%A")).toContain(
-      'data-testid="shell-sidebar"',
-    );
+    expect(await renderApp("/routines/%E0%A4%A")).toContain('data-testid="shell-sidebar"');
   });
 
   test("an unknown path renders the not-found screen", async () => {
diff --git a/apps/web/test/routine-detail-page.test.tsx b/apps/web/test/routine-detail-page.test.tsx
index adf60cfef1..69211075ab 100644
--- a/apps/web/test/routine-detail-page.test.tsx
+++ b/apps/web/test/routine-detail-page.test.tsx
@@ -8,10 +8,7 @@ import type { Root } from "react-dom/client";
 import { renderToStaticMarkup } from "react-dom/server";
 
 import { NavigationProvider } from "../src/navigation";
-import {
-  resolveRoutineSegment,
-  RoutineDetailPage,
-} from "../src/pages/routine-detail-page";
+import { resolveRoutineSegment, RoutineDetailPage } from "../src/pages/routine-detail-page";
 import type { GlobalRoutineRow } from "../src/global-routines";
 import type { ScheduledWorkflowDefinition } from "../src/routines-api";
 
@@ -75,9 +72,7 @@ describe("RoutineDetailPage", () => {
 
   test("Run now and Pause both sit in the top bar's action slot", () => {
     const markup = renderPage();
-    const actions = markup.slice(
-      markup.indexOf('data-testid="stage-top-bar-actions"'),
-    );
+    const actions = markup.slice(markup.indexOf('data-testid="stage-top-bar-actions"'));
     expect(actions).toContain("Run now");
     expect(actions).toContain("Pause");
   });
@@ -203,9 +198,7 @@ describe("RoutineDetailRoute", () => {
     });
   }
 
-  function scheduledRecord(
-    overrides: Record<string, unknown>,
-  ): Record<string, unknown> {
+  function scheduledRecord(overrides: Record<string, unknown>): Record<string, unknown> {
     return {
       definitionId: "wfd_mine",
       assetId: "ast_1",
@@ -231,17 +224,13 @@ describe("RoutineDetailRoute", () => {
     },
   ];
 
-  function mockFetch(
-    itemsByTenant: Record<string, Record<string, unknown>[]>,
-  ): typeof fetch {
+  function mockFetch(itemsByTenant: Record<string, Record<string, unknown>[]>): typeof fetch {
     return (async (input: RequestInfo | URL): Promise<Response> => {
       const url = String(input);
       if (url.includes("/api/me/principals")) {
         return jsonResponse({ data: memberships, nextCursor: null });
       }
-      const scheduledMatch = url.match(
-        /\/api\/tenants\/([^/]+)\/workflows\/scheduled$/,
-      );
+      const scheduledMatch = url.match(/\/api\/tenants\/([^/]+)\/workflows\/scheduled$/);
       if (scheduledMatch) {
         return jsonResponse({
           items: itemsByTenant[scheduledMatch[1] as string] ?? [],
@@ -259,8 +248,7 @@ describe("RoutineDetailRoute", () => {
     itemsByTenant: Record<string, Record<string, unknown>[]>,
   ): Promise<{ container: HTMLDivElement; root: Root }> {
     const { BenchProvider } = await import("../src/bench-context");
-    const { RoutineDetailRoute } =
-      await import("../src/pages/routine-detail-page");
+    const { RoutineDetailRoute } = await import("../src/pages/routine-detail-page");
     const { TestQueryProvider } = await import("./test-query-provider");
 
     globalThis.fetch = mockFetch(itemsByTenant);
@@ -271,9 +259,7 @@ describe("RoutineDetailRoute", () => {
       root.render(
         <TestQueryProvider>
           <NavigationProvider navigate={noop}>
-            <BenchProvider>
-              {createElement(RoutineDetailRoute, { segment })}
-            </BenchProvider>
+            <BenchProvider>{createElement(RoutineDetailRoute, { segment })}</BenchProvider>
           </NavigationProvider>
         </TestQueryProvider>,
       );
@@ -307,9 +293,7 @@ describe("RoutineDetailRoute", () => {
       tnt_1: [scheduledRecord({ definitionId: "wfd_mine", name: "My digest" })],
     });
     try {
-      expect(container.textContent).toContain(
-        "No scheduled workflow matches this address.",
-      );
+      expect(container.textContent).toContain("No scheduled workflow matches this address.");
       expect(container.textContent).toContain("Back to Routines");
     } finally {
       cleanup(container, root);
diff --git a/apps/web/test/routines-page.test.tsx b/apps/web/test/routines-page.test.tsx
index 2cb114740b..44e798117c 100644
--- a/apps/web/test/routines-page.test.tsx
+++ b/apps/web/test/routines-page.test.tsx
@@ -9,10 +9,7 @@ import { createRoot } from "react-dom/client";
 import type { Root } from "react-dom/client";
 import { renderToStaticMarkup } from "react-dom/server";
 
-import {
-  GlobalRoutinesList,
-  scheduleSentence,
-} from "../src/pages/routines-page";
+import { GlobalRoutinesList, scheduleSentence } from "../src/pages/routines-page";
 import type { GlobalRoutineRow } from "../src/pages/routines-page";
 import { NavigationProvider } from "../src/navigation";
 import type { ScheduledWorkflowDefinition } from "../src/routines-api";
@@ -113,9 +110,7 @@ describe("GlobalRoutinesList", () => {
   });
 
   test("the On switch is named Off when the routine is disabled", () => {
-    const markup = renderList([
-      row({ definition: { ...definition, status: "stopped" } }),
-    ]);
+    const markup = renderList([row({ definition: { ...definition, status: "stopped" } })]);
     expect(markup).toContain('aria-label="Off Morning brief"');
     expect(markup).not.toContain('aria-label="Resume Morning brief"');
   });
diff --git a/apps/web/test/settings-access.test.tsx b/apps/web/test/settings-access.test.tsx
index 6103611ae0..30a290dec3 100644
--- a/apps/web/test/settings-access.test.tsx
+++ b/apps/web/test/settings-access.test.tsx
@@ -8,10 +8,7 @@ import { createRoot, type Root } from "react-dom/client";
 import type { TenancyAccess } from "@corbits/settings-ui";
 
 import { useSettingsAccess } from "../src/settings-access";
-import {
-  createTestQueryClient,
-  TestQueryProvider,
-} from "./test-query-provider";
+import { createTestQueryClient, TestQueryProvider } from "./test-query-provider";
 
 const realFetch = globalThis.fetch;
 
@@ -36,11 +33,7 @@ const json = (body: unknown, status = 200) =>
     headers: { "content-type": "application/json" },
   });
 
-function AccessProbe({
-  onAccess,
-}: {
-  readonly onAccess: (access: TenancyAccess) => void;
-}) {
+function AccessProbe({ onAccess }: { readonly onAccess: (access: TenancyAccess) => void }) {
   const access = useSettingsAccess("tnt_1", "prn_1");
   onAccess(access);
   return null;
@@ -93,9 +86,7 @@ describe("useSettingsAccess", () => {
 
   test("a network failure is error, not denied", async () => {
     globalThis.fetch = (() =>
-      Promise.reject(
-        new TypeError("Failed to fetch"),
-      )) as unknown as typeof fetch;
+      Promise.reject(new TypeError("Failed to fetch"))) as unknown as typeof fetch;
     const seen = await mountProbe();
     const last = seen[seen.length - 1];
     expect(last).toEqual({
diff --git a/apps/web/test/settings-page.test.tsx b/apps/web/test/settings-page.test.tsx
index 88dc1ba79f..5bc7a6d8a0 100644
--- a/apps/web/test/settings-page.test.tsx
+++ b/apps/web/test/settings-page.test.tsx
@@ -53,10 +53,7 @@ function seededClient(access: TenancyAccess = deniedAccess): QueryClient {
     },
   });
   client.setQueryData(meKeys.principals, principalsPage);
-  client.setQueryData(
-    tenantKeys.settingsAccess("tenant_1", "principal_1"),
-    access,
-  );
+  client.setQueryData(tenantKeys.settingsAccess("tenant_1", "principal_1"), access);
   return client;
 }
 
@@ -75,11 +72,7 @@ describe("SettingsRoute section-id redirect", () => {
     container = null;
   });
 
-  async function mount(
-    path: string,
-    navigated: string[],
-    access: TenancyAccess = deniedAccess,
-  ) {
+  async function mount(path: string, navigated: string[], access: TenancyAccess = deniedAccess) {
     container = document.createElement("div");
     document.body.appendChild(container);
     root = createRoot(container);
@@ -115,19 +108,13 @@ describe("SettingsRoute section-id redirect", () => {
   test("a probe failure is not presented as a gate deny", async () => {
     const navigated: string[] = [];
     await mount("/settings/account", navigated, errorAccess);
-    expect(container?.textContent).toContain(
-      SETTINGS_STRINGS.accessProbeFailedHint,
-    );
-    expect(container?.textContent).not.toContain(
-      SETTINGS_STRINGS.peopleSectionTitle,
-    );
+    expect(container?.textContent).toContain(SETTINGS_STRINGS.accessProbeFailedHint);
+    expect(container?.textContent).not.toContain(SETTINGS_STRINGS.peopleSectionTitle);
   });
 
   test("a gate deny does not claim the access check failed", async () => {
     const navigated: string[] = [];
     await mount("/settings/account", navigated);
-    expect(container?.textContent).not.toContain(
-      SETTINGS_STRINGS.accessProbeFailedHint,
-    );
+    expect(container?.textContent).not.toContain(SETTINGS_STRINGS.accessProbeFailedHint);
   });
 });
diff --git a/apps/web/test/shell-chrome-wiring.test.tsx b/apps/web/test/shell-chrome-wiring.test.tsx
index 9e21653996..53009b35d4 100644
--- a/apps/web/test/shell-chrome-wiring.test.tsx
+++ b/apps/web/test/shell-chrome-wiring.test.tsx
@@ -147,9 +147,7 @@ describe("palette actions reach the real shell state (CL-5936 sibling-context re
   });
 
   function click(testId: string): void {
-    const button = container.querySelector<HTMLButtonElement>(
-      `[data-testid="${testId}"]`,
-    );
+    const button = container.querySelector<HTMLButtonElement>(`[data-testid="${testId}"]`);
     if (button === null) throw new Error(`${testId} not rendered`);
     button.click();
   }
@@ -164,16 +162,12 @@ describe("palette actions reach the real shell state (CL-5936 sibling-context re
     await act(async () => {
       click("probe-open-profile");
     });
-    expect(
-      container.querySelector('.shell-canvas-column[data-open="true"]'),
-    ).not.toBeNull();
+    expect(container.querySelector('.shell-canvas-column[data-open="true"]')).not.toBeNull();
 
     await act(async () => {
       click("probe-close-canvas");
     });
-    expect(
-      container.querySelector('.shell-canvas-column[data-open="true"]'),
-    ).toBeNull();
+    expect(container.querySelector('.shell-canvas-column[data-open="true"]')).toBeNull();
   });
 });
 
@@ -219,15 +213,9 @@ function CanvasSlotsProbe() {
       >
         Open routine
       </button>
-      <span data-testid="canvas-profile">
-        {profile === null ? "null" : "set"}
-      </span>
-      <span data-testid="canvas-artifact">
-        {artifact === null ? "null" : "set"}
-      </span>
-      <span data-testid="canvas-routine">
-        {routine === null ? "null" : "set"}
-      </span>
+      <span data-testid="canvas-profile">{profile === null ? "null" : "set"}</span>
+      <span data-testid="canvas-artifact">{artifact === null ? "null" : "set"}</span>
+      <span data-testid="canvas-routine">{routine === null ? "null" : "set"}</span>
     </div>
   );
 }
@@ -267,9 +255,7 @@ describe("canvas dismisses when in-app nav leaves a rail surface (CL-6819)", ()
   });
 
   function click(testId: string): void {
-    const button = container.querySelector<HTMLButtonElement>(
-      `[data-testid="${testId}"]`,
-    );
+    const button = container.querySelector<HTMLButtonElement>(`[data-testid="${testId}"]`);
     if (button === null) throw new Error(`${testId} not rendered`);
     button.click();
   }
diff --git a/apps/web/test/sidebar.test.tsx b/apps/web/test/sidebar.test.tsx
index f72d51cded..a9f1e0ce44 100644
--- a/apps/web/test/sidebar.test.tsx
+++ b/apps/web/test/sidebar.test.tsx
@@ -70,19 +70,14 @@ function runsBody(count: number): unknown {
   };
 }
 
-function stubFetch(options?: {
-  readonly runCount?: number;
-  readonly failRuns?: boolean;
-}): void {
+function stubFetch(options?: { readonly runCount?: number; readonly failRuns?: boolean }): void {
   globalThis.fetch = ((input: RequestInfo | URL) => {
     const path = typeof input === "string" ? input : String(input);
-    if (path.includes("/api/me/principals"))
-      return Promise.resolve(json(membership));
+    if (path.includes("/api/me/principals")) return Promise.resolve(json(membership));
     if (path.includes("/agent-definitions/visible"))
       return Promise.resolve(json({ definitions: [] }));
     if (path.includes("/workflows/runs")) {
-      if (options?.failRuns === true)
-        return Promise.resolve(json({ error: "unavailable" }, 500));
+      if (options?.failRuns === true) return Promise.resolve(json({ error: "unavailable" }, 500));
       return Promise.resolve(json(runsBody(options?.runCount ?? 0)));
     }
     return Promise.resolve(json({ items: [] }));
@@ -90,11 +85,9 @@ function stubFetch(options?: {
 }
 
 function footerRowLabelsFromMarkup(markup: string): string[] {
-  return [
-    ...markup.matchAll(
-      /shell-sidebar-footer-row[\s\S]*?<span>([^<]*)<\/span>/g,
-    ),
-  ].map((match) => match[1] ?? "");
+  return [...markup.matchAll(/shell-sidebar-footer-row[\s\S]*?<span>([^<]*)<\/span>/g)].map(
+    (match) => match[1] ?? "",
+  );
 }
 
 function footerRowLabelsFromDom(container: HTMLElement): string[] {
@@ -125,12 +118,7 @@ async function mountSidebar(
     root.render(
       <TestQueryProvider>
         <BenchProvider>
-          <Sidebar
-            path={path}
-            user={user}
-            onNavigate={onNavigate}
-            onSignOut={noop}
-          />
+          <Sidebar path={path} user={user} onNavigate={onNavigate} onSignOut={noop} />
         </BenchProvider>
       </TestQueryProvider>,
     );
@@ -173,9 +161,7 @@ describe("Sidebar", () => {
       );
     });
 
-    const newButton = container.querySelector<HTMLButtonElement>(
-      '[aria-label="New workbench"]',
-    );
+    const newButton = container.querySelector<HTMLButtonElement>('[aria-label="New workbench"]');
     await act(async () => {
       newButton?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
     });
@@ -278,9 +264,9 @@ describe("Sidebar", () => {
       "Plugins",
       "Insights",
     ]);
-    const insights = [
-      ...container.querySelectorAll(".shell-sidebar-footer-row"),
-    ].find((row) => row.textContent?.includes("Insights") === true);
+    const insights = [...container.querySelectorAll(".shell-sidebar-footer-row")].find(
+      (row) => row.textContent?.includes("Insights") === true,
+    );
     expect(insights?.getAttribute("aria-current")).toBe("page");
     act(() => root.unmount());
     container.remove();
@@ -318,8 +304,7 @@ describe("Sidebar", () => {
     function stubWorkbenches(): void {
       globalThis.fetch = ((input: RequestInfo | URL) => {
         const path = typeof input === "string" ? input : String(input);
-        if (path.includes("/api/me/principals"))
-          return Promise.resolve(json(membership));
+        if (path.includes("/api/me/principals")) return Promise.resolve(json(membership));
         if (path.includes("/chat/workbenches?kind=workbench"))
           return Promise.resolve(json({ items: [workbench] }));
         if (path.includes("/chat/workbenches?kind=chat"))
@@ -347,12 +332,7 @@ describe("Sidebar", () => {
         root.render(
           <TestQueryProvider>
             <BenchProvider>
-              <Sidebar
-                path={path}
-                user={user}
-                onNavigate={onNavigate}
-                onSignOut={noop}
-              />
+              <Sidebar path={path} user={user} onNavigate={onNavigate} onSignOut={noop} />
             </BenchProvider>
           </TestQueryProvider>,
         );
@@ -370,15 +350,11 @@ describe("Sidebar", () => {
       test(`renders the same workbench rows on ${path} as on a chat route, with none active`, async () => {
         const { container, root } = await mountAt(path);
 
-        expect(
-          container.querySelector('[aria-label="Search agents and channels"]'),
-        ).not.toBeNull();
+        expect(container.querySelector('[aria-label="Search agents and channels"]')).not.toBeNull();
         const row = container.querySelector(".shell-ch-row");
         expect(row).not.toBeNull();
         expect(row?.textContent).toContain("Research brief");
-        expect(
-          container.querySelector('.shell-ch-row[data-active="true"]'),
-        ).toBeNull();
+        expect(container.querySelector('.shell-ch-row[data-active="true"]')).toBeNull();
 
         act(() => root.unmount());
         container.remove();
@@ -387,9 +363,7 @@ describe("Sidebar", () => {
 
     test("selecting a row from a global page navigates to that conversation", async () => {
       const navigated: string[] = [];
-      const { container, root } = await mountAt("/plugins", (to) =>
-        navigated.push(to),
-      );
+      const { container, root } = await mountAt("/plugins", (to) => navigated.push(to));
 
       const row = container.querySelector<HTMLButtonElement>(".shell-ch-row");
       await act(async () => {
@@ -431,25 +405,20 @@ describe("Sidebar", () => {
     function stubAgentSidebar(): void {
       globalThis.fetch = ((input: RequestInfo | URL, _init?: RequestInit) => {
         const path = typeof input === "string" ? input : String(input);
-        if (path.includes("/api/me/principals"))
-          return Promise.resolve(json(membership));
+        if (path.includes("/api/me/principals")) return Promise.resolve(json(membership));
         if (path.includes("/chat/workbenches?kind=workbench"))
           return Promise.resolve(json({ items: [workbench] }));
         if (path.includes("/chat/workbenches?kind=chat"))
           return Promise.resolve(json({ items: [] }));
         if (path.includes("/agent-definitions/visible"))
-          return Promise.resolve(
-            json({ definitions: [ownAgent, inheritedAgent] }),
-          );
+          return Promise.resolve(json({ definitions: [ownAgent, inheritedAgent] }));
         if (path.includes("/approvals"))
           return Promise.resolve(json({ data: [], nextCursor: null }));
         return Promise.resolve(json({ items: [] }));
       }) as typeof fetch;
     }
 
-    async function mountSidebar(
-      onNavigate: (to: string) => void = noop,
-    ): Promise<{
+    async function mountSidebar(onNavigate: (to: string) => void = noop): Promise<{
       container: HTMLDivElement;
       root: ReturnType<typeof createRoot>;
     }> {
@@ -460,12 +429,7 @@ describe("Sidebar", () => {
         root.render(
           <TestQueryProvider>
             <BenchProvider>
-              <Sidebar
-                path="/w"
-                user={user}
-                onNavigate={onNavigate}
-                onSignOut={noop}
-              />
+              <Sidebar path="/w" user={user} onNavigate={onNavigate} onSignOut={noop} />
             </BenchProvider>
           </TestQueryProvider>,
         );
@@ -486,9 +450,7 @@ describe("Sidebar", () => {
       const labels = [...container.querySelectorAll(".shell-ch-row")].map(
         (row) => row.textContent ?? "",
       );
-      expect(labels.some((label) => label.includes("Research brief"))).toBe(
-        true,
-      );
+      expect(labels.some((label) => label.includes("Research brief"))).toBe(true);
       expect(labels.some((label) => label.includes("Outreach"))).toBe(false);
       expect(labels.some((label) => label.includes("Researcher"))).toBe(false);
       expect(container.querySelector("[data-ctx-agent]")).toBeNull();
@@ -517,14 +479,12 @@ describe("Sidebar", () => {
     };
     globalThis.fetch = ((input: RequestInfo | URL) => {
       const path = typeof input === "string" ? input : String(input);
-      if (path.includes("/api/me/principals"))
-        return Promise.resolve(json(membership));
+      if (path.includes("/api/me/principals")) return Promise.resolve(json(membership));
       if (path.includes("/chat/workbenches?kind=workbench"))
         return Promise.resolve(json({ items: [channel] }));
       if (path.includes("/chat/workbenches?kind=chat"))
         return Promise.resolve(json({ items: [dm] }));
-      if (path.includes("/approvals"))
-        return Promise.resolve(json({ data: [], nextCursor: null }));
+      if (path.includes("/approvals")) return Promise.resolve(json({ data: [], nextCursor: null }));
       if (path.includes("/agent-definitions/visible"))
         return Promise.resolve(json({ definitions: [] }));
       return Promise.resolve(json({ items: [] }));
@@ -550,14 +510,10 @@ describe("Sidebar", () => {
     }
 
     const agentsHeading = container.querySelector("#sidebar-agents-heading");
-    const channelsHeading = container.querySelector(
-      "#sidebar-channels-heading",
-    );
+    const channelsHeading = container.querySelector("#sidebar-channels-heading");
     expect(agentsHeading).toBeNull();
     expect(channelsHeading).toBeNull();
-    expect(container.querySelectorAll(".shell-panel-list-label")).toHaveLength(
-      0,
-    );
+    expect(container.querySelectorAll(".shell-panel-list-label")).toHaveLength(0);
     const wraps = [...container.querySelectorAll(".shell-ch-row-wrap")];
     expect(wraps.map((row) => row.getAttribute("data-ctx-workbench"))).toEqual([
       "ch_room",
@@ -663,28 +619,19 @@ describe("Sidebar", () => {
         root.render(
           <TestQueryProvider>
             <BenchProvider>
-              <Sidebar
-                path="/w"
-                user={user}
-                onNavigate={noop}
-                onSignOut={onSignOut}
-              />
+              <Sidebar path="/w" user={user} onNavigate={noop} onSignOut={onSignOut} />
             </BenchProvider>
           </TestQueryProvider>,
         );
       });
 
-      const trigger = container.querySelector<HTMLButtonElement>(
-        ".shell-sidebar-account-btn",
-      );
+      const trigger = container.querySelector<HTMLButtonElement>(".shell-sidebar-account-btn");
       expect(trigger).not.toBeNull();
       expect(trigger?.textContent).toContain(user.name);
       await act(async () => {
         // Radix's dropdown-menu trigger opens on `pointerdown`, not
         // `click` — mirroring how a real mouse interaction reaches it.
-        trigger?.dispatchEvent(
-          new PointerEvent("pointerdown", { bubbles: true, button: 0 }),
-        );
+        trigger?.dispatchEvent(new PointerEvent("pointerdown", { bubbles: true, button: 0 }));
       });
       for (let i = 0; i < 5; i++) {
         await act(async () => {
@@ -747,9 +694,9 @@ describe("Sidebar", () => {
         signedOut = true;
       });
 
-      const logOutItem = [
-        ...document.querySelectorAll('[role="menuitem"]'),
-      ].find((item) => item.textContent?.includes("Log out") === true);
+      const logOutItem = [...document.querySelectorAll('[role="menuitem"]')].find(
+        (item) => item.textContent?.includes("Log out") === true,
+      );
       expect(logOutItem).not.toBeUndefined();
       expect(logOutItem?.className).toContain("text-destructive");
 
@@ -785,9 +732,7 @@ describe("Sidebar", () => {
       );
     });
 
-    const settingsButton = container.querySelector<HTMLButtonElement>(
-      '[aria-label="Settings"]',
-    );
+    const settingsButton = container.querySelector<HTMLButtonElement>('[aria-label="Settings"]');
     expect(settingsButton).not.toBeNull();
     await act(async () => {
       settingsButton?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
diff --git a/apps/web/test/skill-detail-page.test.tsx b/apps/web/test/skill-detail-page.test.tsx
index f1437bbed3..635cff30fc 100644
--- a/apps/web/test/skill-detail-page.test.tsx
+++ b/apps/web/test/skill-detail-page.test.tsx
@@ -124,9 +124,7 @@ describe("SkillDetailPage", () => {
       },
     });
     const el = await mount({ name: kebab });
-    expect(el.querySelector("h1")?.textContent?.trim()).toBe(
-      "Writing System Prompts",
-    );
+    expect(el.querySelector("h1")?.textContent?.trim()).toBe("Writing System Prompts");
   });
 
   test("a name the roster doesn't carry renders the missing empty state", async () => {
@@ -147,12 +145,9 @@ describe("SkillDetailPage", () => {
     expect(el.textContent).toContain("Couldn't load this skill");
     // describeApiError deliberately never surfaces raw server text — the
     // page shows its generic copy for the 500 instead.
-    expect(el.textContent).toContain(
-      "Something went wrong loading this skill.",
-    );
+    expect(el.textContent).toContain("Something went wrong loading this skill.");
     expect(el.textContent).not.toContain("The hub fell over.");
-    const reads = () =>
-      requested.filter((entry) => entry.path === LIST_PATH).length;
+    const reads = () => requested.filter((entry) => entry.path === LIST_PATH).length;
     expect(reads()).toBe(1);
     const retry = Array.from(el.querySelectorAll("button")).find((button) =>
       button.textContent?.includes("Retry"),
diff --git a/apps/web/test/skills-page.test.tsx b/apps/web/test/skills-page.test.tsx
index 1376690b2c..68357ef494 100644
--- a/apps/web/test/skills-page.test.tsx
+++ b/apps/web/test/skills-page.test.tsx
@@ -42,15 +42,13 @@ function stubRoutes(routes: StubRoutes): void {
     requested.push({
       method,
       path,
-      body:
-        init?.body === undefined ? undefined : JSON.parse(String(init.body)),
+      body: init?.body === undefined ? undefined : JSON.parse(String(init.body)),
     });
     const key = `${method} ${path}`;
     if (!(key in routes)) {
-      return new Response(
-        JSON.stringify({ error: { message: `no stub for ${key}` } }),
-        { status: 404 },
-      );
+      return new Response(JSON.stringify({ error: { message: `no stub for ${key}` } }), {
+        status: 404,
+      });
     }
     return new Response(JSON.stringify(routes[key]), { status: 200 });
   }) as unknown as typeof fetch;
@@ -110,14 +108,11 @@ function nativeValueSetter(
 }
 
 function fillField(id: string, value: string, textarea = false) {
-  const el = document.getElementById(id) as
-    HTMLInputElement | HTMLTextAreaElement | null;
+  const el = document.getElementById(id) as HTMLInputElement | HTMLTextAreaElement | null;
   expect(el).not.toBeNull();
   if (el === null) return;
   const setter = nativeValueSetter(
-    textarea
-      ? window.HTMLTextAreaElement.prototype
-      : window.HTMLInputElement.prototype,
+    textarea ? window.HTMLTextAreaElement.prototype : window.HTMLInputElement.prototype,
   );
   setter.call(el, value);
   el.dispatchEvent(new Event("input", { bubbles: true }));
@@ -180,9 +175,7 @@ describe("SkillsPage", () => {
   test("an explicit displayName wins over the title-cased slug", async () => {
     stubRoutes({
       ...EMPTY_REGISTRY,
-      [`GET ${LIST_PATH}`]: [
-        { ...TRIAGE_ASSET, name: "summarize", displayName: "Summarize Now!" },
-      ],
+      [`GET ${LIST_PATH}`]: [{ ...TRIAGE_ASSET, name: "summarize", displayName: "Summarize Now!" }],
     });
     const el = await mount();
     const nameCell = Array.from(el.querySelectorAll("td")).find((cell) =>
@@ -226,9 +219,7 @@ describe("SkillsPage", () => {
       await Promise.resolve();
     });
 
-    const call = requested.find(
-      (entry) => entry.method === "POST" && entry.path === CREATE_PATH,
-    );
+    const call = requested.find((entry) => entry.method === "POST" && entry.path === CREATE_PATH);
     expect(call?.body).toEqual({
       kind: "skill",
       name: "summarize",
@@ -271,9 +262,7 @@ describe("SkillsPage", () => {
       await Promise.resolve();
     });
 
-    const call = requested.find(
-      (entry) => entry.method === "POST" && entry.path === CREATE_PATH,
-    );
+    const call = requested.find((entry) => entry.method === "POST" && entry.path === CREATE_PATH);
     expect(call?.body).toEqual({ kind: "skill", name: "summarize" });
     expect(navigated).toContain("/skills/summarize");
   });
@@ -291,8 +280,7 @@ describe("SkillsPage", () => {
       requested.push({
         method,
         path,
-        body:
-          init?.body === undefined ? undefined : JSON.parse(String(init.body)),
+        body: init?.body === undefined ? undefined : JSON.parse(String(init.body)),
       });
       if (method === "POST" && path === CREATE_PATH) {
         return new Response(
@@ -335,9 +323,7 @@ describe("SkillsPage", () => {
     // The dialog is still open with the typed values rather than closed.
     expect(document.body.textContent).toContain("Create skill");
     expect(
-      requested.filter(
-        (entry) => entry.method === "POST" && entry.path === CREATE_PATH,
-      ),
+      requested.filter((entry) => entry.method === "POST" && entry.path === CREATE_PATH),
     ).toHaveLength(1);
   });
 
@@ -378,9 +364,7 @@ describe("SkillsPage", () => {
 
 describe("CreateSkillDialog validation", () => {
   test("an empty form names every missing field in plain language", () => {
-    expect(validationIssues({ name: "", displayName: "" })).toEqual([
-      "Name is required.",
-    ]);
+    expect(validationIssues({ name: "", displayName: "" })).toEqual(["Name is required."]);
   });
 
   test("a slug the asset routes could never carry is rejected before submit", () => {
@@ -389,9 +373,7 @@ describe("CreateSkillDialog validation", () => {
         name: "Summarize Transcript",
         displayName: "",
       }),
-    ).toEqual([
-      "Name must be lowercase letters, digits, and hyphens — no whitespace or capitals.",
-    ]);
+    ).toEqual(["Name must be lowercase letters, digits, and hyphens — no whitespace or capitals."]);
   });
 
   test("a complete form has no validation issues", () => {
@@ -404,8 +386,6 @@ describe("CreateSkillDialog validation", () => {
   });
 
   test("displayName stays optional — a bare name is submittable", () => {
-    expect(validationIssues({ name: "summarize", displayName: "" })).toEqual(
-      [],
-    );
+    expect(validationIssues({ name: "summarize", displayName: "" })).toEqual([]);
   });
 });
diff --git a/apps/web/test/stage-search-filter.test.tsx b/apps/web/test/stage-search-filter.test.tsx
index e67bd4f9f6..12a83921ec 100644
--- a/apps/web/test/stage-search-filter.test.tsx
+++ b/apps/web/test/stage-search-filter.test.tsx
@@ -11,10 +11,7 @@ import { act } from "react";
 import { createRoot, type Root } from "react-dom/client";
 import { useState } from "react";
 
-import {
-  setCommandPaletteOpen,
-  useCommandPaletteOpen,
-} from "../src/command-palette-open-store";
+import { setCommandPaletteOpen, useCommandPaletteOpen } from "../src/command-palette-open-store";
 import { StageTopBar } from "../src/shell/stage-top-bar";
 
 const appCss = readFileSync(new URL("../src/app.css", import.meta.url), "utf8");
@@ -48,17 +45,13 @@ function render(node: React.ReactElement): void {
 }
 
 function magnifier(): HTMLButtonElement {
-  const button = container.querySelector<HTMLButtonElement>(
-    '[data-testid="stage-search"] button',
-  );
+  const button = container.querySelector<HTMLButtonElement>('[data-testid="stage-search"] button');
   if (button === null) throw new Error("no magnifier rendered");
   return button;
 }
 
 function filterInput(): HTMLInputElement | null {
-  return container.querySelector<HTMLInputElement>(
-    '[data-testid="stage-search"] input',
-  );
+  return container.querySelector<HTMLInputElement>('[data-testid="stage-search"] input');
 }
 
 function Harness({ filterable = true }: { readonly filterable?: boolean }) {
@@ -116,9 +109,7 @@ describe("the stage top bar's per-page filter", () => {
     });
 
     expect(filterInput()?.value).toBe("invoice");
-    expect(
-      container.querySelector('[data-testid="global-open"]')?.textContent,
-    ).toBe("false");
+    expect(container.querySelector('[data-testid="global-open"]')?.textContent).toBe("false");
   });
 
   test("Escape clears the query first, then collapses back to the magnifier", () => {
@@ -130,8 +121,7 @@ describe("the stage top bar's per-page filter", () => {
       "value",
     )?.set;
     const input = filterInput();
-    if (input === null || setValue === undefined)
-      throw new Error("setup failed");
+    if (input === null || setValue === undefined) throw new Error("setup failed");
     act(() => {
       setValue.call(input, "invoice");
       input.dispatchEvent(new Event("input", { bubbles: true }));
diff --git a/apps/web/test/stage-top-bar.test.tsx b/apps/web/test/stage-top-bar.test.tsx
index f981da0f77..f4cfbb15de 100644
--- a/apps/web/test/stage-top-bar.test.tsx
+++ b/apps/web/test/stage-top-bar.test.tsx
@@ -43,31 +43,22 @@ describe("StageTopBar", () => {
   });
 
   test("omits the dot when there is no subtitle", () => {
-    const markup = renderToStaticMarkup(
-      <StageTopBar crumbs={[{ label: "Skills" }]} />,
-    );
+    const markup = renderToStaticMarkup(<StageTopBar crumbs={[{ label: "Skills" }]} />);
     expect(markup).not.toContain("stage-top-bar-dot");
     expect(markup).not.toContain("stage-top-bar-sub");
   });
 
   test("carries no sidebar toggle of its own", () => {
-    const markup = renderToStaticMarkup(
-      <StageTopBar crumbs={[{ label: "Library" }]} />,
-    );
+    const markup = renderToStaticMarkup(<StageTopBar crumbs={[{ label: "Library" }]} />);
     expect(markup).not.toContain('aria-label="Toggle sidebar"');
     expect(markup).not.toContain('aria-label="Collapse sidebar"');
   });
 
   test("an interactive subtitle is not clipped by overflow hidden", () => {
-    const css = readFileSync(
-      new URL("../src/app.css", import.meta.url),
-      "utf8",
-    );
+    const css = readFileSync(new URL("../src/app.css", import.meta.url), "utf8");
     const interactive = css
       .split("}")
-      .find((candidate) =>
-        candidate.includes(".stage-top-bar-sub:has(button)"),
-      );
+      .find((candidate) => candidate.includes(".stage-top-bar-sub:has(button)"));
     expect(interactive).toBeDefined();
     expect(interactive).toContain("overflow: visible");
     expect(interactive).toContain("flex-shrink: 0");
@@ -142,15 +133,9 @@ describe("shell frame", () => {
       root.render(<ShellHarness />);
     });
 
-    expect(
-      container.querySelector('[data-testid="shell-sidebar"]'),
-    ).not.toBeNull();
-    expect(
-      container.querySelector('button[aria-label="Collapse sidebar"]'),
-    ).toBeNull();
-    expect(
-      container.querySelector('button[aria-label="Expand sidebar"]'),
-    ).toBeNull();
+    expect(container.querySelector('[data-testid="shell-sidebar"]')).not.toBeNull();
+    expect(container.querySelector('button[aria-label="Collapse sidebar"]')).toBeNull();
+    expect(container.querySelector('button[aria-label="Expand sidebar"]')).toBeNull();
   });
 
   test("the sidebar stays across navigation", async () => {
@@ -161,8 +146,6 @@ describe("shell frame", () => {
     await act(async () => {
       root.render(<ShellHarness path="/routines" />);
     });
-    expect(
-      container.querySelector('[data-testid="shell-sidebar"]'),
-    ).not.toBeNull();
+    expect(container.querySelector('[data-testid="shell-sidebar"]')).not.toBeNull();
   });
 });
diff --git a/apps/web/test/stage-top-nav.test.tsx b/apps/web/test/stage-top-nav.test.tsx
index e127de34be..3582658a14 100644
--- a/apps/web/test/stage-top-nav.test.tsx
+++ b/apps/web/test/stage-top-nav.test.tsx
@@ -68,12 +68,7 @@ describe("stage breadcrumbs", () => {
   test("intermediate crumbs are links to their own route; the last crumb is the page title", () => {
     const markup = renderToStaticMarkup(
       <NavigationProvider navigate={noop}>
-        <StageTopBar
-          crumbs={[
-            { label: "Skills", href: "/skills" },
-            { label: "weekly-digest" },
-          ]}
-        />
+        <StageTopBar crumbs={[{ label: "Skills", href: "/skills" }, { label: "weekly-digest" }]} />
       </NavigationProvider>,
     );
     expect(markup).toContain('aria-label="Breadcrumb"');
@@ -106,18 +101,10 @@ describe("stage breadcrumbs", () => {
   test("every class the trail renders is truncation-capped by the stylesheet", () => {
     const markup = renderToStaticMarkup(
       <NavigationProvider navigate={noop}>
-        <StageTopBar
-          crumbs={[
-            { label: "Files", href: "/files" },
-            { label: "a".repeat(200) },
-          ]}
-        />
+        <StageTopBar crumbs={[{ label: "Files", href: "/files" }, { label: "a".repeat(200) }]} />
       </NavigationProvider>,
     );
-    const css = readFileSync(
-      new URL("../src/app.css", import.meta.url),
-      "utf8",
-    );
+    const css = readFileSync(new URL("../src/app.css", import.meta.url), "utf8");
     for (const className of ["stage-crumb-link", "stage-crumb-current"]) {
       expect(markup).toContain(`class="${className}"`);
       const rule = ruleFor(css, className);
@@ -135,19 +122,14 @@ describe("stage breadcrumbs", () => {
     const el = await render(
       <NavigationProvider navigate={(to) => navigated.push(to)}>
         <StageTopBar
-          crumbs={[
-            { label: "Insights", href: "/insights" },
-            { label: "Run history" },
-          ]}
+          crumbs={[{ label: "Insights", href: "/insights" }, { label: "Run history" }]}
         />
       </NavigationProvider>,
     );
     const link = el.querySelector<HTMLAnchorElement>("a.stage-crumb-link");
     expect(link).not.toBeNull();
     await act(async () => {
-      link?.dispatchEvent(
-        new MouseEvent("click", { bubbles: true, cancelable: true }),
-      );
+      link?.dispatchEvent(new MouseEvent("click", { bubbles: true, cancelable: true }));
     });
     expect(navigated).toEqual(["/insights"]);
   });
@@ -207,9 +189,7 @@ describe("Skills declares its nav through the top-bar contract", () => {
 
     const bar = el.querySelector('[data-testid="stage-top-bar"]');
     expect(bar).not.toBeNull();
-    expect(bar?.querySelector('[aria-current="page"]')?.textContent).toBe(
-      "Skills",
-    );
+    expect(bar?.querySelector('[aria-current="page"]')?.textContent).toBe("Skills");
     const actions = el.querySelector('[data-testid="stage-top-bar-actions"]');
     expect(actions?.textContent).toContain("New skill");
     expect(el.querySelector(".page-toolbar")).toBeNull();
@@ -235,9 +215,7 @@ describe("Skills declares its nav through the top-bar contract", () => {
 
     const trail = el.querySelector('nav[aria-label="Breadcrumb"]');
     expect(trail?.querySelector("a")?.getAttribute("href")).toBe("/skills");
-    expect(trail?.querySelector('[aria-current="page"]')?.textContent).toBe(
-      "weekly-digest",
-    );
+    expect(trail?.querySelector('[aria-current="page"]')?.textContent).toBe("weekly-digest");
     expect(el.querySelector('table[aria-label="Skills"]')).toBeNull();
   });
 
@@ -259,9 +237,7 @@ describe("Skills declares its nav through the top-bar contract", () => {
 
     const parent = el.querySelector<HTMLAnchorElement>("a.stage-crumb-link");
     await act(async () => {
-      parent?.dispatchEvent(
-        new MouseEvent("click", { bubbles: true, cancelable: true }),
-      );
+      parent?.dispatchEvent(new MouseEvent("click", { bubbles: true, cancelable: true }));
     });
     expect(navigated).toContain("/skills");
   });
@@ -289,11 +265,8 @@ describe("Plugins declares its nav through the top-bar contract", () => {
           }),
         );
       if (path.includes("/connections/provider-health"))
-        return Promise.resolve(
-          json({ providers: {}, connectedProviderCount: 0 }),
-        );
-      if (path.includes("/credentials/resolve/"))
-        return Promise.resolve(json(null, 404));
+        return Promise.resolve(json({ providers: {}, connectedProviderCount: 0 }));
+      if (path.includes("/credentials/resolve/")) return Promise.resolve(json(null, 404));
       if (path.includes(`/api/tenants/${TENANT}/assets`))
         return Promise.resolve(json([SKILL_ASSET]));
       return Promise.resolve(json({ data: [], nextCursor: null }));
@@ -312,9 +285,7 @@ describe("Plugins declares its nav through the top-bar contract", () => {
     );
 
     const bar = el.querySelector('[data-testid="stage-top-bar"]');
-    expect(bar?.querySelector('[aria-current="page"]')?.textContent).toBe(
-      "Plugins",
-    );
+    expect(bar?.querySelector('[aria-current="page"]')?.textContent).toBe("Plugins");
 
     const skillsTab = [...el.querySelectorAll("button")].find(
       (button) => button.textContent?.includes("Skills") === true,
diff --git a/apps/web/test/tailwind-build.test.ts b/apps/web/test/tailwind-build.test.ts
index 01f0ac0007..c02a2d3f37 100644
--- a/apps/web/test/tailwind-build.test.ts
+++ b/apps/web/test/tailwind-build.test.ts
@@ -10,21 +10,15 @@ const DIST_ASSETS = path.join(WEB_ROOT, "dist/assets");
 
 function builtCss(): string {
   if (!existsSync(DIST_ASSETS)) {
-    throw new Error(
-      "apps/web/dist/assets missing — run `bun run build` in apps/web first",
-    );
+    throw new Error("apps/web/dist/assets missing — run `bun run build` in apps/web first");
   }
   // Code splitting emits one CSS file per chunk; a utility may land in
   // any of them, so assert against all of them together.
-  const files = readdirSync(DIST_ASSETS).filter((name) =>
-    name.endsWith(".css"),
-  );
+  const files = readdirSync(DIST_ASSETS).filter((name) => name.endsWith(".css"));
   if (files.length === 0) {
     throw new Error("no CSS asset under apps/web/dist/assets");
   }
-  return files
-    .map((file) => readFileSync(path.join(DIST_ASSETS, file), "utf8"))
-    .join("\n");
+  return files.map((file) => readFileSync(path.join(DIST_ASSETS, file), "utf8")).join("\n");
 }
 
 describe("Tailwind production CSS", () => {
diff --git a/apps/web/test/theme-default.test.tsx b/apps/web/test/theme-default.test.tsx
index 90764a3b67..128f5e1196 100644
--- a/apps/web/test/theme-default.test.tsx
+++ b/apps/web/test/theme-default.test.tsx
@@ -49,9 +49,7 @@ describe("app default theme", () => {
       );
     });
 
-    expect(
-      container.querySelector('[data-testid="resolved-mode"]')?.textContent,
-    ).toBe("light");
+    expect(container.querySelector('[data-testid="resolved-mode"]')?.textContent).toBe("light");
     expect(document.documentElement.classList.contains("dark")).toBe(false);
     expect(document.documentElement.style.colorScheme).toBe("light");
 
diff --git a/apps/web/test/toast-single-system.test.tsx b/apps/web/test/toast-single-system.test.tsx
index 2a13e8ff2b..a2cdab8545 100644
--- a/apps/web/test/toast-single-system.test.tsx
+++ b/apps/web/test/toast-single-system.test.tsx
@@ -95,9 +95,7 @@ afterEach(() => {
     container.remove();
     container = null;
   }
-  document
-    .querySelectorAll("[data-sonner-toaster]")
-    .forEach((node) => node.remove());
+  document.querySelectorAll("[data-sonner-toaster]").forEach((node) => node.remove());
 });
 
 const sleep = (ms: number) => new Promise((resolve) => setTimeout(resolve, ms));
@@ -159,9 +157,7 @@ describe("the one toast system (CL-6372)", () => {
     await renderPickerWithToaster();
 
     await act(async () => {
-      emptyChannelButton()?.dispatchEvent(
-        new MouseEvent("click", { bubbles: true }),
-      );
+      emptyChannelButton()?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
     });
     for (let i = 0; i < 30; i++) {
       await settle();
@@ -173,9 +169,7 @@ describe("the one toast system (CL-6372)", () => {
     // The stub's setup agent is deployed, so this is a real create
     // failure (the workbench-create request itself 500s) — a
     // `ChatApiError`, described through `describeChatError`.
-    expect(shown[0]?.textContent).toBe(
-      "Something went wrong on our end. Try again in a moment.",
-    );
+    expect(shown[0]?.textContent).toBe("Something went wrong on our end. Try again in a moment.");
     await waitForClear();
   });
 
@@ -199,9 +193,7 @@ describe("the one toast system (CL-6372)", () => {
     await renderPickerWithToaster();
 
     await act(async () => {
-      emptyChannelButton()?.dispatchEvent(
-        new MouseEvent("click", { bubbles: true }),
-      );
+      emptyChannelButton()?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
     });
     for (let i = 0; i < 30; i++) {
       await settle();
@@ -217,9 +209,7 @@ describe("the one toast system (CL-6372)", () => {
     await renderPickerWithToaster();
 
     await act(async () => {
-      emptyChannelButton()?.dispatchEvent(
-        new MouseEvent("click", { bubbles: true }),
-      );
+      emptyChannelButton()?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
     });
     for (let i = 0; i < 30; i++) {
       await settle();
@@ -244,9 +234,7 @@ describe("the one toast system (CL-6372)", () => {
     act(() => toast("Second"));
     await settle();
 
-    const staying = document.body.querySelectorAll(
-      '[data-sonner-toast][data-removed="false"]',
-    );
+    const staying = document.body.querySelectorAll('[data-sonner-toast][data-removed="false"]');
     expect(staying.length).toBe(1);
     expect(staying[0]?.textContent).toBe("Second");
     await waitForClear();
diff --git a/apps/web/test/webhook-triggers-api.test.ts b/apps/web/test/webhook-triggers-api.test.ts
index 9a80340bff..8cf6806bde 100644
--- a/apps/web/test/webhook-triggers-api.test.ts
+++ b/apps/web/test/webhook-triggers-api.test.ts
@@ -77,9 +77,7 @@ describe("getWebhookTrigger", () => {
 
 describe("createWebhookTrigger", () => {
   test("POSTs the input and returns the one-time secret", async () => {
-    const calls = stubFetch(() =>
-      json({ ...triggerFixture, secret: "generated-secret" }, 201),
-    );
+    const calls = stubFetch(() => json({ ...triggerFixture, secret: "generated-secret" }, 201));
     const result = await createWebhookTrigger("tnt_1", {
       name: "Support digest",
       workflowDefinitionId: "wfd_1",
@@ -108,14 +106,10 @@ describe("createWebhookTrigger", () => {
 
 describe("rotateWebhookTriggerSecret", () => {
   test("POSTs to the rotate route and returns the new one-time secret", async () => {
-    const calls = stubFetch(() =>
-      json({ ...triggerFixture, secret: "rotated-secret" }),
-    );
+    const calls = stubFetch(() => json({ ...triggerFixture, secret: "rotated-secret" }));
     const result = await rotateWebhookTriggerSecret("tnt_1", "wht_1");
     expect(result.secret).toBe("rotated-secret");
-    expect(calls[0]?.path).toBe(
-      "/api/tenants/tnt_1/webhook-triggers/wht_1/rotate-secret",
-    );
+    expect(calls[0]?.path).toBe("/api/tenants/tnt_1/webhook-triggers/wht_1/rotate-secret");
     expect(calls[0]?.init?.method).toBe("POST");
   });
 });
@@ -141,19 +135,13 @@ describe("deleteWebhookTrigger", () => {
 
 describe("error handling", () => {
   test("a 404 surfaces the hub's error message", async () => {
-    stubFetch(() =>
-      json({ error: { code: "not_found", message: "trigger not found" } }, 404),
-    );
-    await expect(getWebhookTrigger("tnt_1", "missing")).rejects.toThrow(
-      /trigger not found/,
-    );
+    stubFetch(() => json({ error: { code: "not_found", message: "trigger not found" } }, 404));
+    await expect(getWebhookTrigger("tnt_1", "missing")).rejects.toThrow(/trigger not found/);
   });
 
   test("a 401 throws an UnauthenticatedError", async () => {
     stubFetch(() => new Response(null, { status: 401 }));
-    await expect(listWebhookTriggers("tnt_1")).rejects.toBeInstanceOf(
-      UnauthenticatedError,
-    );
+    await expect(listWebhookTriggers("tnt_1")).rejects.toBeInstanceOf(UnauthenticatedError);
   });
 });
 
diff --git a/apps/web/test/workbench-list.test.tsx b/apps/web/test/workbench-list.test.tsx
index ae91c4e90a..96b24a30b1 100644
--- a/apps/web/test/workbench-list.test.tsx
+++ b/apps/web/test/workbench-list.test.tsx
@@ -55,12 +55,9 @@ function stubFetch(
 ): void {
   globalThis.fetch = ((input: RequestInfo | URL) => {
     const path = typeof input === "string" ? input : String(input);
-    if (path.includes("/api/me/principals"))
-      return Promise.resolve(json(membership));
+    if (path.includes("/api/me/principals")) return Promise.resolve(json(membership));
     if (path.includes("/approvals"))
-      return Promise.resolve(
-        json({ data: data.pendingApprovals ?? [], nextCursor: null }),
-      );
+      return Promise.resolve(json({ data: data.pendingApprovals ?? [], nextCursor: null }));
     if (path.includes("/agent-definitions/visible"))
       return Promise.resolve(json({ definitions: [] }));
     if (path.includes("/chat/workbenches?kind=workbench"))
@@ -231,16 +228,10 @@ describe("WorkbenchList avatar activity", () => {
       const corbit = avatar?.querySelector('[data-corbit="true"]');
       expect(corbit).not.toBeNull();
       expect(corbit?.parentElement?.getAttribute("aria-hidden")).toBe("true");
-      expect(el.querySelector(".shell-ch-preview")?.textContent).toBe(
-        "Here is the revised draft.",
-      );
+      expect(el.querySelector(".shell-ch-preview")?.textContent).toBe("Here is the revised draft.");
       expect(el.querySelector(".shell-ch-live")).toBeNull();
       expect(avatar?.querySelector('[aria-live="polite"]')?.textContent).toBe(
-        activity === "working"
-          ? "Agent working"
-          : activity === "reply-ready"
-            ? "Reply ready"
-            : "",
+        activity === "working" ? "Agent working" : activity === "reply-ready" ? "Reply ready" : "",
       );
       if (activity === "working") {
         expect(avatar?.querySelector(".shell-ch-orbit")).not.toBeNull();
diff --git a/apps/web/test/workflow-detail-page.test.tsx b/apps/web/test/workflow-detail-page.test.tsx
index 647e20a04b..a76a2c5889 100644
--- a/apps/web/test/workflow-detail-page.test.tsx
+++ b/apps/web/test/workflow-detail-page.test.tsx
@@ -22,9 +22,7 @@ const baseDetail: WorkflowDefinitionDetailT = {
 
 describe("WorkflowDetailPage", () => {
   test("a deployed workflow shows no not-launchable strip", () => {
-    const html = renderToStaticMarkup(
-      <WorkflowDetailPage detail={baseDetail} />,
-    );
+    const html = renderToStaticMarkup(<WorkflowDetailPage detail={baseDetail} />);
     expect(html).toContain("Deployed");
     expect(html).toContain("v3");
     expect(html).toContain("Sends outreach messages");
diff --git a/bun.lock b/bun.lock
index 9254e7d153..ac9768f841 100644
--- a/bun.lock
+++ b/bun.lock
@@ -15,7 +15,6 @@
         "@corbits/ollama-adapter": "workspace:*",
         "@corbits/webhook-triggers": "workspace:*",
         "@corbits/xai-provider": "workspace:*",
-        "@eslint/js": "^10.0.0",
         "@intx/crypto": "workspace:*",
         "@intx/db": "workspace:*",
         "@intx/log": "workspace:*",
@@ -23,12 +22,11 @@
         "@intx/types": "0.3.0",
         "@types/bun": "1.3.14",
         "@typescript/native-preview": "7.0.0-dev.20260707.2",
-        "eslint": "^10.8.0",
         "jiti": "^2.7.0",
-        "prettier": "^3.6.2",
+        "oxfmt": "0.68.0",
+        "oxlint": "1.83.0",
         "puppeteer-core": "^25.7.0",
         "typescript": "6.0.3",
-        "typescript-eslint": "^8.42.0",
       },
     },
     "apps/hub": {
@@ -188,7 +186,7 @@
     },
     "packages/access-tools": {
       "name": "@corbits/access-tools",
-      "version": "0.0.5",
+      "version": "0.0.6",
       "dependencies": {
         "arktype": "catalog:",
       },
@@ -242,7 +240,7 @@
     },
     "packages/agent-directory-tools": {
       "name": "@corbits/agent-directory-tools",
-      "version": "0.0.6",
+      "version": "0.0.7",
       "dependencies": {
         "arktype": "catalog:",
       },
@@ -359,7 +357,7 @@
     },
     "packages/capability-tools": {
       "name": "@corbits/capability-tools",
-      "version": "0.0.6",
+      "version": "0.0.7",
       "dependencies": {
         "arktype": "catalog:",
       },
@@ -374,7 +372,7 @@
     },
     "packages/catalog-tools": {
       "name": "@corbits/catalog-tools",
-      "version": "0.1.0",
+      "version": "0.1.1",
       "dependencies": {
         "@corbits/inference-catalog": "0.1.0",
         "arktype": "catalog:",
@@ -473,7 +471,7 @@
         "typescript": "catalog:",
       },
       "peerDependencies": {
-        "@corbits/github-tools": "0.0.10",
+        "@corbits/github-tools": "0.0.11",
       },
     },
     "packages/codex-provider": {
@@ -564,7 +562,7 @@
     },
     "packages/connections-tools": {
       "name": "@corbits/connections-tools",
-      "version": "0.0.11",
+      "version": "0.0.12",
       "dependencies": {
         "arktype": "catalog:",
       },
@@ -682,7 +680,7 @@
     },
     "packages/github-tools": {
       "name": "@corbits/github-tools",
-      "version": "0.0.10",
+      "version": "0.0.11",
       "dependencies": {
         "arktype": "catalog:",
       },
@@ -709,7 +707,7 @@
     },
     "packages/granola-tools": {
       "name": "@corbits/granola-tools",
-      "version": "0.0.4",
+      "version": "0.0.5",
       "dependencies": {
         "arktype": "catalog:",
       },
@@ -803,7 +801,7 @@
     },
     "packages/interaction-tools": {
       "name": "@corbits/interaction-tools",
-      "version": "0.0.9",
+      "version": "0.0.10",
       "dependencies": {
         "arktype": "catalog:",
       },
@@ -819,7 +817,7 @@
     },
     "packages/jimmy-agent": {
       "name": "@corbits/jimmy-agent",
-      "version": "0.0.2",
+      "version": "0.0.3",
       "dependencies": {
         "@intx/agent": "workspace:*",
         "@intx/types": "workspace:*",
@@ -832,7 +830,7 @@
     },
     "packages/linear-tools": {
       "name": "@corbits/linear-tools",
-      "version": "0.0.4",
+      "version": "0.0.5",
       "dependencies": {
         "arktype": "catalog:",
       },
@@ -852,7 +850,7 @@
     },
     "packages/manus-tools": {
       "name": "@corbits/manus-tools",
-      "version": "0.0.11",
+      "version": "0.0.12",
       "dependencies": {
         "arktype": "catalog:",
       },
@@ -867,7 +865,7 @@
     },
     "packages/mcp-tools": {
       "name": "@corbits/mcp-tools",
-      "version": "0.0.11",
+      "version": "0.0.12",
       "dependencies": {
         "@modelcontextprotocol/sdk": "catalog:",
         "arktype": "catalog:",
@@ -1054,7 +1052,7 @@
     },
     "packages/scout-agent": {
       "name": "@corbits/scout-agent",
-      "version": "0.0.4",
+      "version": "0.0.5",
       "dependencies": {
         "@intx/agent": "workspace:*",
         "@intx/types": "workspace:*",
@@ -1122,7 +1120,7 @@
     },
     "packages/skills-tools": {
       "name": "@corbits/skills-tools",
-      "version": "0.0.7",
+      "version": "0.0.8",
       "dependencies": {
         "arktype": "catalog:",
       },
@@ -1168,7 +1166,7 @@
     },
     "packages/tools-skills": {
       "name": "@corbits/tools-skills",
-      "version": "0.0.3",
+      "version": "0.0.4",
       "dependencies": {
         "arktype": "catalog:",
       },
@@ -1202,7 +1200,7 @@
     },
     "packages/web-search-tools": {
       "name": "@corbits/web-search-tools",
-      "version": "0.0.3",
+      "version": "0.0.4",
       "dependencies": {
         "arktype": "catalog:",
       },
@@ -1242,7 +1240,7 @@
     },
     "packages/workflow-authoring-tools": {
       "name": "@corbits/workflow-authoring-tools",
-      "version": "0.0.7",
+      "version": "0.0.8",
       "dependencies": {
         "arktype": "catalog:",
       },
@@ -1566,7 +1564,7 @@
       "name": "@corbits/assistant-workflow",
       "version": "0.0.2",
       "dependencies": {
-        "@corbits/catalog-tools": "0.1.0",
+        "@corbits/catalog-tools": "0.1.1",
         "@corbits/memory": "github:corbitsdev/corbits-memory#9e6f213fa2c002b531d3f6af1aa0abd737b8afe3",
       },
       "devDependencies": {
@@ -1922,10 +1920,6 @@
 
     "@bufbuild/protobuf": ["@bufbuild/protobuf@2.15.0", "", {}, "sha512-DAheWUkVr/SJTWCc+lg9dhY0eN4SaWlf4+bG1KzHeXbnqt0AfB/NX0Z+VunGlM1ki1B4zVvye27MpKh/svySUA=="],
 
-    "@cacheable/memory": ["@cacheable/memory@2.2.0", "", { "dependencies": { "@cacheable/utils": "^2.5.0", "@keyv/bigmap": "^1.3.1", "hookified": "^1.15.1", "keyv": "^5.6.0" } }, "sha512-CTLKqLItRCEixEAewD3/j9DB3/o96gpTPD4eJ1v+DGOlxZRZncRQkGYqqnAGCscYd6RNeXfGeiuCphsPtqyIfQ=="],
-
-    "@cacheable/utils": ["@cacheable/utils@2.5.0", "", { "dependencies": { "hashery": "^1.5.1", "keyv": "^5.6.0" } }, "sha512-buipgOVDkkPXNR5+xBpDw7Zk2n1EvU7qBJCNUcL7rhQ//kfpOXPAvQ511Os0vpLYJ1pZnvudNytkQt2hst3wqA=="],
-
     "@chat-adapter/state-memory": ["@chat-adapter/state-memory@4.40.0", "", { "dependencies": { "chat": "4.40.0" } }, "sha512-NmFFkvUfnDBDS/mkzrtKHdW757EGt0eX3OQH5IPxrKqhjSsNzpqUdkJ/uDB4BP0Rbex4oW/HgwhZ+JGONVbMBQ=="],
 
     "@connectrpc/connect": ["@connectrpc/connect@2.2.0", "", { "peerDependencies": { "@bufbuild/protobuf": "^2.7.0" } }, "sha512-M63OQ1ZFcPUm85CuewJ9G9CMV8LjzGR9935xOnXNQGSazAbwMb3x2W7vXBYM1zqrP7XFD8uxp/dUAhirclgwnQ=="],
@@ -2166,22 +2160,6 @@
 
     "@esbuild/win32-x64": ["@esbuild/win32-x64@0.25.12", "", { "os": "win32", "cpu": "x64" }, "sha512-alJC0uCZpTFrSL0CCDjcgleBXPnCrEAhTBILpeAp7M/OFgoqtAetfBzX0xM00MUsVVPpVjlPuMbREqnZCXaTnA=="],
 
-    "@eslint-community/eslint-utils": ["@eslint-community/eslint-utils@4.10.1", "", { "dependencies": { "eslint-visitor-keys": "^3.4.3" }, "peerDependencies": { "eslint": "^6.0.0 || ^7.0.0 || >=8.0.0" } }, "sha512-cuadcxVFE8sDK6iWJbs8Sn0av2Nrh2QSGQhVlBW9AaAHqHwjWsZHT8LJ4hFGPh7ASBV2deFdM7H/DPjulmh8rg=="],
-
-    "@eslint-community/regexpp": ["@eslint-community/regexpp@4.12.2", "", {}, "sha512-EriSTlt5OC9/7SXkRSCAhfSxxoSUgBm33OH+IkwbdpgoqsSsUg7y3uh+IICI/Qg4BBWr3U2i39RpmycbxMq4ew=="],
-
-    "@eslint/config-array": ["@eslint/config-array@0.23.5", "", { "dependencies": { "@eslint/object-schema": "^3.0.5", "debug": "^4.3.1", "minimatch": "^10.2.4" } }, "sha512-Y3kKLvC1dvTOT+oGlqNQ1XLqK6D1HU2YXPc52NmAlJZbMMWDzGYXMiPRJ8TYD39muD/OTjlZmNJ4ib7dvSrMBA=="],
-
-    "@eslint/config-helpers": ["@eslint/config-helpers@0.7.0", "", { "dependencies": { "@eslint/core": "^1.2.1" } }, "sha512-DObd/KKUsU+FaFv4PLxSRenpXfQWmPXXP3pPZ6/K1PCrMu2vQpMDMuQe/BqYeoLcz8ro0bVDF1RxOJgfVEdhUw=="],
-
-    "@eslint/core": ["@eslint/core@1.2.1", "", { "dependencies": { "@types/json-schema": "^7.0.15" } }, "sha512-MwcE1P+AZ4C6DWlpin/OmOA54mmIZ/+xZuJiQd4SyB29oAJjN30UW9wkKNptW2ctp4cEsvhlLY/CsQ1uoHDloQ=="],
-
-    "@eslint/js": ["@eslint/js@10.0.1", "", { "peerDependencies": { "eslint": "^10.0.0" }, "optionalPeers": ["eslint"] }, "sha512-zeR9k5pd4gxjZ0abRoIaxdc7I3nDktoXZk2qOv9gCNWx3mVwEn32VRhyLaRsDiJjTs0xq/T8mfPtyuXu7GWBcA=="],
-
-    "@eslint/object-schema": ["@eslint/object-schema@3.0.5", "", {}, "sha512-vqTaUEgxzm+YDSdElad6PiRoX4t8VGDjCtt05zn4nU810UIx/uNEV7/lZJ6KwFThKZOzOxzXy48da+No7HZaMw=="],
-
-    "@eslint/plugin-kit": ["@eslint/plugin-kit@0.7.3", "", { "dependencies": { "@eslint/core": "^1.2.1", "levn": "^0.4.1" } }, "sha512-IkO+/KEUvwbVpiURZg+P7zF74z5Jxe0UgJxVni+RtoHQ6IZieXaO02kmadomap/q+l6bc/jdPGGqTjhuZnuz1Q=="],
-
     "@floating-ui/core": ["@floating-ui/core@1.8.0", "", { "dependencies": { "@floating-ui/utils": "^0.2.12" } }, "sha512-0CIZ5itps/8x7BG8dEIhs53BvCUH2PCoogtakwRTut+Arm58sJooJ0AuZhLw2HJYIR5cMLNPBSS728sPho2khQ=="],
 
     "@floating-ui/dom": ["@floating-ui/dom@1.8.0", "", { "dependencies": { "@floating-ui/core": "^1.8.0", "@floating-ui/utils": "^0.2.12" } }, "sha512-yXSrzeHZBTZadLOlfyhCkJHNeLJnHRnRInwdZ40L7ZiaAtrBwoYlsDrX3v5zB1Utk7CLfzcOVnVVWoXEky7Ceg=="],
@@ -2198,16 +2176,6 @@
 
     "@hono/standard-validator": ["@hono/standard-validator@0.2.3", "", { "peerDependencies": { "@standard-schema/spec": "^1.0.0", "hono": ">=3.9.0" } }, "sha512-bp9vHu6Va6SfMHC3D4ZLBbT/woi+AZ9CRdTXQu3kLJuLh2W/Gb9UO4hijS+BQAGFXi4EGpXdetxpzwTAawSVeg=="],
 
-    "@humanfs/core": ["@humanfs/core@0.19.2", "", { "dependencies": { "@humanfs/types": "^0.15.0" } }, "sha512-UhXNm+CFMWcbChXywFwkmhqjs3PRCmcSa/hfBgLIb7oQ5HNb1wS0icWsGtSAUNgefHeI+eBrA8I1fxmbHsGdvA=="],
-
-    "@humanfs/node": ["@humanfs/node@0.16.8", "", { "dependencies": { "@humanfs/core": "^0.19.2", "@humanfs/types": "^0.15.0", "@humanwhocodes/retry": "^0.4.0" } }, "sha512-gE1eQNZ3R++kTzFUpdGlpmy8kDZD/MLyHqDwqjkVQI0JMdI1D51sy1H958PNXYkM2rAac7e5/CnIKZrHtPh3BQ=="],
-
-    "@humanfs/types": ["@humanfs/types@0.15.0", "", {}, "sha512-ZZ1w0aoQkwuUuC7Yf+7sdeaNfqQiiLcSRbfI08oAxqLtpXQr9AIVX7Ay7HLDuiLYAaFPu8oBYNq/QIi9URHJ3Q=="],
-
-    "@humanwhocodes/module-importer": ["@humanwhocodes/module-importer@1.0.1", "", {}, "sha512-bxveV4V8v5Yb4ncFTT3rPSgZBOpCkjfK0y4oVVVJwIuDVBRMDXrPyXRL988i5ap9m9bnyEEjWfm5WkBmtffLfA=="],
-
-    "@humanwhocodes/retry": ["@humanwhocodes/retry@0.4.3", "", {}, "sha512-bV0Tgo9K4hfPCek+aMAn81RppFKv2ySDQeMoSZuvTASywNTnVJCArCZE2FWqpvIatKu7VMRLWlR1EazvVhDyhQ=="],
-
     "@intx/agent": ["@intx/agent@workspace:vendor/intx/agent"],
 
     "@intx/authz": ["@intx/authz@0.3.0", "", { "dependencies": { "@intx/types": "0.3.0" } }, "sha512-kyIKQAVjfB8H84mES0QA4cNnYfpPoyLmQITVBxiuXv1VO/K74TQZnCDpoo0IL7oFk2q7bbDXSAEE4ubMBVTHzA=="],
@@ -2268,10 +2236,6 @@
 
     "@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.31", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw=="],
 
-    "@keyv/bigmap": ["@keyv/bigmap@1.3.1", "", { "dependencies": { "hashery": "^1.4.0", "hookified": "^1.15.0" }, "peerDependencies": { "keyv": "^5.6.0" } }, "sha512-WbzE9sdmQtKy8vrNPa9BRnwZh5UF4s1KTmSK0KUVLo3eff5BlQNNWDnFOouNpKfPKDnms9xynJjsMYjMaT/aFQ=="],
-
-    "@keyv/serialize": ["@keyv/serialize@1.1.1", "", {}, "sha512-dXn3FZhPv0US+7dtJsIi2R+c7qWYiReoEh5zUntWCf4oSpMNib8FDhSoed6m3QyZdx5hK7iLFkYk3rNxwt8vTA=="],
-
     "@logtape/hono": ["@logtape/hono@2.2.8", "", { "peerDependencies": { "@logtape/logtape": "^2.2.8", "hono": "^4.0.0" } }, "sha512-pDpClmd8j1zIXe3xqKsCnPUJbXM7hb7uRUUvs3nln9twEWB52plaARC2tO8D0iX3GwbqVqMKVtWfhhqtRVNAuA=="],
 
     "@logtape/logtape": ["@logtape/logtape@2.3.5", "", {}, "sha512-s4LlalG0JO2Fg8ENy1aQVdOS47VOD2pip6mOW29TNuCxW5zOhrQk/ck/xs77M7O15b2pK2KnDSr7L0Tf6LIUXg=="],
@@ -2292,6 +2256,82 @@
 
     "@opentelemetry/semantic-conventions": ["@opentelemetry/semantic-conventions@1.43.0", "", {}, "sha512-eSYWTm620tTk45EKSedaUL8MFYI8hW164hIXsgIHyxu3VobUB3fFCu5t0hQby6OoWRPsG1KkKUG2M5UadiLiVg=="],
 
+    "@oxfmt/binding-android-arm-eabi": ["@oxfmt/binding-android-arm-eabi@0.68.0", "", { "os": "android", "cpu": "arm" }, "sha512-dhfYPbzv/h9JgHjNkl2R6sOjUfxDyLGOZVb3g8/ScaTNwwJcYgmHh8kcYFDUhinuy1QAoANCWUvw1jlk+z6gAg=="],
+
+    "@oxfmt/binding-android-arm64": ["@oxfmt/binding-android-arm64@0.68.0", "", { "os": "android", "cpu": "arm64" }, "sha512-v3Njdi6qY0O/5eGfg01ww2w6gTn2mUvZ72Bnx1/UN53A9wruh3Nk6otc3WkgJLkXD4Qgz1SOcVQieH1oD03V9Q=="],
+
+    "@oxfmt/binding-darwin-arm64": ["@oxfmt/binding-darwin-arm64@0.68.0", "", { "os": "darwin", "cpu": "arm64" }, "sha512-ei4MCMzHFREmZwPJ7KuWUB4kBuHdsgDrnXGJVcEAopU7fj7S42I8BChdFILWdHvhFqR08FLJtOfbZIr2CDw0cA=="],
+
+    "@oxfmt/binding-darwin-x64": ["@oxfmt/binding-darwin-x64@0.68.0", "", { "os": "darwin", "cpu": "x64" }, "sha512-UrKgzZxYhwB9DSvTX+vdgl9M32wLUNKJcAKIoiyx/Kzn/zveqi7W6kYVcRroFMhS3Kwz0KhTk3WBeSuQn4YCTg=="],
+
+    "@oxfmt/binding-freebsd-x64": ["@oxfmt/binding-freebsd-x64@0.68.0", "", { "os": "freebsd", "cpu": "x64" }, "sha512-6jrEKgpJbilM1QaRv7hEtKXr4p4AK4jvvyOtajwyhu0kOz3e0O7OLnSTk6tBotRqCcUC4ehZRJ1Zx+Y99wieLw=="],
+
+    "@oxfmt/binding-linux-arm-gnueabihf": ["@oxfmt/binding-linux-arm-gnueabihf@0.68.0", "", { "os": "linux", "cpu": "arm" }, "sha512-YOIVnKOBaLeGullskS179N12hjSAdFYnzLjOaKiLhAKNWgnShq9w4xRdtmUm6BlnP65l2/EA9Aw/KlftNxDM7Q=="],
+
+    "@oxfmt/binding-linux-arm-musleabihf": ["@oxfmt/binding-linux-arm-musleabihf@0.68.0", "", { "os": "linux", "cpu": "arm" }, "sha512-xW5XoEHVNqydPBv2KXvk9lmEzyAlOQHVEazKoXUuAacqekjya+OdiaFjjEBl0oJD02raG8g3TRl9OVCh9PDIHA=="],
+
+    "@oxfmt/binding-linux-arm64-gnu": ["@oxfmt/binding-linux-arm64-gnu@0.68.0", "", { "os": "linux", "cpu": "arm64" }, "sha512-QCvYwVVQieu6oyJglAgV9vH/YMDxZyR4cwVSYtoq9oOXd5N+D3TDUBjNwxFrLn5AdcJZOcvn/7IB17vJGp+2Og=="],
+
+    "@oxfmt/binding-linux-arm64-musl": ["@oxfmt/binding-linux-arm64-musl@0.68.0", "", { "os": "linux", "cpu": "arm64" }, "sha512-4TVz5iFQ8ndrHnhX50UXiz9BIWAtUSOHJ6Nus4qWFfJBXq/Ed/krXbF/ehJu42BXM5tIvBs99jNIM22s9agY5A=="],
+
+    "@oxfmt/binding-linux-ppc64-gnu": ["@oxfmt/binding-linux-ppc64-gnu@0.68.0", "", { "os": "linux", "cpu": "ppc64" }, "sha512-qLe3ao0RP84bnPxBvRI+GnlK/jybo538NWu0Xrm+zYeTmJtpzqLhnnd5BH21NafqKnplbGZjtN1cnrOlWF73lw=="],
+
+    "@oxfmt/binding-linux-riscv64-gnu": ["@oxfmt/binding-linux-riscv64-gnu@0.68.0", "", { "os": "linux", "cpu": "none" }, "sha512-Yvyl7a6gbb0vM6r925KW2dO+/CmXySO5TVbcX7o/uZJ+d108HFOG0TxIyHApmn5USuj5mhDPxzhiVwOlGP7uSA=="],
+
+    "@oxfmt/binding-linux-riscv64-musl": ["@oxfmt/binding-linux-riscv64-musl@0.68.0", "", { "os": "linux", "cpu": "none" }, "sha512-mJlFuFVCxzrYM5sFStN433D/s/mb6Wq4aCQAM02vs/OudHywnaSAd2rb1vlYUJtqdYIciJtiasuxvfbYkv5fLg=="],
+
+    "@oxfmt/binding-linux-s390x-gnu": ["@oxfmt/binding-linux-s390x-gnu@0.68.0", "", { "os": "linux", "cpu": "s390x" }, "sha512-RlfSg++qs1hbKltRR6lYvV9EoI3MdlfSQD9w1hdHVYjHqjIn1tkH4FWOpMSmjKGN20zr+nI+W9o4ARogCDudGQ=="],
+
+    "@oxfmt/binding-linux-x64-gnu": ["@oxfmt/binding-linux-x64-gnu@0.68.0", "", { "os": "linux", "cpu": "x64" }, "sha512-nyzRB9U+dlYUKu3pMo3afHzZBUv/oTHZMG36ZfJViNVfOIzp70Q4GS8FFRGgYJ/p0zcyDCgpBvYISOdJOMh+jQ=="],
+
+    "@oxfmt/binding-linux-x64-musl": ["@oxfmt/binding-linux-x64-musl@0.68.0", "", { "os": "linux", "cpu": "x64" }, "sha512-iCx3sbZRIvGrL1RafphEiUKBaW1lc0/tAjKOIB/Wjw2+STRBEdu5+fH1Gc1faEWEmc2k5Ks4iUUV54Zd5C9a1A=="],
+
+    "@oxfmt/binding-openharmony-arm64": ["@oxfmt/binding-openharmony-arm64@0.68.0", "", { "os": "none", "cpu": "arm64" }, "sha512-x2X5AZez7OgyLLFpwIgItoXBUqudDM7yiaTsxv8R8vKQ6e81l0jVw0NFeUCXzcl1sAJq8h+tC8N4mY8EiMeL4w=="],
+
+    "@oxfmt/binding-win32-arm64-msvc": ["@oxfmt/binding-win32-arm64-msvc@0.68.0", "", { "os": "win32", "cpu": "arm64" }, "sha512-AHVPjXkenLPQUh6kB8zSC8pX2ct9r4T1Edk9r/RNJyov6wPsS5uAfYtipwG4chn6+3bPFG5rI/3DxEeH8vib1w=="],
+
+    "@oxfmt/binding-win32-ia32-msvc": ["@oxfmt/binding-win32-ia32-msvc@0.68.0", "", { "os": "win32", "cpu": "ia32" }, "sha512-n09SjEk5VH7z8Hl4WVP7hho+cCwGViENkQFiM45vbW85dJd7kEhWaHRUobaPzEmrWyu6uumd4EuNfNyDKLtzDA=="],
+
+    "@oxfmt/binding-win32-x64-msvc": ["@oxfmt/binding-win32-x64-msvc@0.68.0", "", { "os": "win32", "cpu": "x64" }, "sha512-gPe+dJLXaPuWPWqlpklDAJp0k+K9KhQPYiQLHfb+i2rmFuUGfJ/5Qlj6tr1mO6of5g0DiLjG/XCFHIaPhotqqA=="],
+
+    "@oxlint/binding-android-arm-eabi": ["@oxlint/binding-android-arm-eabi@1.83.0", "", { "os": "android", "cpu": "arm" }, "sha512-0yGY24EwsLk5YDe6F+VkmZyRHSwJDALa3nIrPpq7FXmp2lV2d0TzvBCGeZk+wgiULRGr5blhyr4QMp5KCXJUqA=="],
+
+    "@oxlint/binding-android-arm64": ["@oxlint/binding-android-arm64@1.83.0", "", { "os": "android", "cpu": "arm64" }, "sha512-hHfJ0vc17A4iUjH5p9BsTUPYbYRNxGpvD2lbu1aBRk54bzNIx9o5TtYF39QPZcV95DagZd+4DEAw2RH3G2ZsMg=="],
+
+    "@oxlint/binding-darwin-arm64": ["@oxlint/binding-darwin-arm64@1.83.0", "", { "os": "darwin", "cpu": "arm64" }, "sha512-hsOjYjszLb/3zym/TkzUMPAoQlTJcuzSyEPOAyA+skXJIX9M0o+4JfOtqopX/Vf4hSLrJ98j0nvFo23gzk8auQ=="],
+
+    "@oxlint/binding-darwin-x64": ["@oxlint/binding-darwin-x64@1.83.0", "", { "os": "darwin", "cpu": "x64" }, "sha512-mjh5oH2EA+wl5yRJYT9K9G61O2zFlpuv+yf2JwZOi0+dq2FnTUtm1h8i+5Ik0fXPWIu/k84I1psZR9aQsLAnyA=="],
+
+    "@oxlint/binding-freebsd-x64": ["@oxlint/binding-freebsd-x64@1.83.0", "", { "os": "freebsd", "cpu": "x64" }, "sha512-fNHr64/YaO8YssuoDVC8+F4Uk5enR86q5uxfHkQrjAPs1dbAILOrD2uaud+J7MO8Fx774g44ERLD0IGIvZE48w=="],
+
+    "@oxlint/binding-linux-arm-gnueabihf": ["@oxlint/binding-linux-arm-gnueabihf@1.83.0", "", { "os": "linux", "cpu": "arm" }, "sha512-Qpwy3zzAwMj+8/lyYItHmkSMwbkprFNWTK7jPYDOxSyxEhaSLOWYUTCMkjF334J8/WD0nznCCsoBbIH6hpsuIw=="],
+
+    "@oxlint/binding-linux-arm-musleabihf": ["@oxlint/binding-linux-arm-musleabihf@1.83.0", "", { "os": "linux", "cpu": "arm" }, "sha512-s+BirYLFq7JL2k9sP0XI3ZXJ9dYvJ8sX3jLCLoag7tt+zrSHpZxP0jqznfL+Gdgwu7ay0dYgGYJXrQvq3iWloA=="],
+
+    "@oxlint/binding-linux-arm64-gnu": ["@oxlint/binding-linux-arm64-gnu@1.83.0", "", { "os": "linux", "cpu": "arm64" }, "sha512-7lihXt3vKr+GIyapNbHrnFHm/biiW30le6Zv/DExbAFPF6YwCQXVFlONPFehxs0CpGO4CBfYPM9rdDT+XMoIlg=="],
+
+    "@oxlint/binding-linux-arm64-musl": ["@oxlint/binding-linux-arm64-musl@1.83.0", "", { "os": "linux", "cpu": "arm64" }, "sha512-q63JalLYVkZiZvls1z3PPUnpmQluOMXp0khqQMznCeAPLGydfNY8JhvuA4WlK57JfrvikU8wB5lPVveqpIXvew=="],
+
+    "@oxlint/binding-linux-ppc64-gnu": ["@oxlint/binding-linux-ppc64-gnu@1.83.0", "", { "os": "linux", "cpu": "ppc64" }, "sha512-krQmDF+dRbxvdqVPV88ZuOoPPu8X5BuqDA8Hd+qcS4YMRQCb+nexA57DazgGsc/rGdKBe3QmV0mnv0bdpW/p5g=="],
+
+    "@oxlint/binding-linux-riscv64-gnu": ["@oxlint/binding-linux-riscv64-gnu@1.83.0", "", { "os": "linux", "cpu": "none" }, "sha512-MmOl8Y6txEAXZU1RG8Rr264jQ6D7VPmqFsU/45x/FeWsGe32hklTqGrLE6UxHzp5Rjt0wP+20tY8YXKgSFB3mw=="],
+
+    "@oxlint/binding-linux-riscv64-musl": ["@oxlint/binding-linux-riscv64-musl@1.83.0", "", { "os": "linux", "cpu": "none" }, "sha512-u1rMymh0W3JZkq370kzQsYPULGWqhE09pZRqnZvUSoYaI9pVO5yVX+iYIslmWuEgwuzH9YAaOsScJiobWCHoOw=="],
+
+    "@oxlint/binding-linux-s390x-gnu": ["@oxlint/binding-linux-s390x-gnu@1.83.0", "", { "os": "linux", "cpu": "s390x" }, "sha512-y0zK3HNwGysu7rqtE+BQG/d0bx5gh/KwlOtghN8oWeK1KcWzeaLqtZrbm8owqdma1lFyrce/hTO5ismuNu+INQ=="],
+
+    "@oxlint/binding-linux-x64-gnu": ["@oxlint/binding-linux-x64-gnu@1.83.0", "", { "os": "linux", "cpu": "x64" }, "sha512-rS5gM0NgD7ngmuJmbIehsidtrOwKkLFwCQbKEeb9KuyQrrWNq5Zkn0uV6AYdXOMJ0grrWEiLwBuvMxt8w5vsNw=="],
+
+    "@oxlint/binding-linux-x64-musl": ["@oxlint/binding-linux-x64-musl@1.83.0", "", { "os": "linux", "cpu": "x64" }, "sha512-W2IH4EtpcPaWcvNGCA95YoDg4vxqE/ZiPCi3arrxEEpsK7+JQN9WYwrlYFx9pcdP6KPXqRqkv3zdQPHcx7b6YQ=="],
+
+    "@oxlint/binding-openharmony-arm64": ["@oxlint/binding-openharmony-arm64@1.83.0", "", { "os": "none", "cpu": "arm64" }, "sha512-6LyKkUyoajssTPLlZmDbZIbu4IZ5B4bGuRUnBgCGpEvHP3FQMaYITncHA/unPUo7q+Z+pIu2HhdkQ+8d1SG7iA=="],
+
+    "@oxlint/binding-win32-arm64-msvc": ["@oxlint/binding-win32-arm64-msvc@1.83.0", "", { "os": "win32", "cpu": "arm64" }, "sha512-Uz/fObEtF0jmNJQJ8CGRBKfefYstS0/wjD3s6IGzP8nUwsJykHQJBiN3npHwKiGRGn/vvBEgNr4B3cCzmmatvg=="],
+
+    "@oxlint/binding-win32-ia32-msvc": ["@oxlint/binding-win32-ia32-msvc@1.83.0", "", { "os": "win32", "cpu": "ia32" }, "sha512-u7XcvPW6Bk58tY5iWs2ESb0vJjoE/kuSpHxopbwp/p3ZtWVQXZ6wor5w3ssVTHOqd/v8b+QdhSFWQ4grEUNWpA=="],
+
+    "@oxlint/binding-win32-x64-msvc": ["@oxlint/binding-win32-x64-msvc@1.83.0", "", { "os": "win32", "cpu": "x64" }, "sha512-LZRubd7ph13QmAg4fFecTYVZkiYbROR2Htaxh/ufWRkDhPOm2wrwaEYR89e0YpPFD3dqBrPoxS7myBw5hmYA7Q=="],
+
     "@phosphor-icons/react": ["@phosphor-icons/react@2.1.10", "", { "peerDependencies": { "react": ">= 16.8", "react-dom": ">= 16.8" } }, "sha512-vt8Tvq8GLjheAZZYa+YG/pW7HDbov8El/MANW8pOAz4eGxrwhnbfrQZq0Cp4q8zBEu8NIhHdnr+r8thnfRSNYA=="],
 
     "@puppeteer/browsers": ["@puppeteer/browsers@3.2.2", "", { "dependencies": { "modern-tar": "^0.8.4", "yargs": "^18.0.0" }, "peerDependencies": { "proxy-agent": ">=8.0.1", "yauzl": "^2.10.0 || ^3.4.0" }, "optionalPeers": ["proxy-agent", "yauzl"], "bin": { "browsers": "lib/main-cli.js" } }, "sha512-q2BU4YfO9h/Wt7IcWPcggpOOqLk2Tbs1hDwolvKZrweRjy751OJBKMN9zO5bfD0pzU7X/tvKw/exQds4pM/LOg=="],
@@ -2458,8 +2498,6 @@
 
     "@types/debug": ["@types/debug@4.1.13", "", { "dependencies": { "@types/ms": "*" } }, "sha512-KSVgmQmzMwPlmtljOomayoR89W4FynCAi3E8PPs7vmDVPe84hT+vGPKkJfThkmXs0x0jAaa9U8uW8bbfyS2fWw=="],
 
-    "@types/esrecurse": ["@types/esrecurse@4.3.1", "", {}, "sha512-xJBAbDifo5hpffDBuHl0Y8ywswbiAp/Wi7Y/GtAgSlZyIABppyurxVueOPE8LUQOxdlgi6Zqce7uoEpqNTeiUw=="],
-
     "@types/estree": ["@types/estree@1.0.9", "", {}, "sha512-GhdPgy1el4/ImP05X05Uw4cw2/M93BCUmnEvWZNStlCzEKME4Fkk+YpoA5OiHNQmoS7Cafb8Xa3Pya8m1Qrzeg=="],
 
     "@types/json-schema": ["@types/json-schema@7.0.15", "", {}, "sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA=="],
@@ -2468,7 +2506,7 @@
 
     "@types/ms": ["@types/ms@2.1.0", "", {}, "sha512-GsCCIZDE/p3i96vtEqx+7dBUGXrc7zeSK3wwPHIaRThS+9OhWIXRqzs4d6k1SVU8g91DrNRWxWUGhp5KXQb2VA=="],
 
-    "@types/node": ["@types/node@22.20.3", "", { "dependencies": { "undici-types": "~6.21.0" } }, "sha512-DZmzkmwHzXrLPAXPyKNDzlIwMMUZCVacoD25ywdy5YTKGbOx/2ld+Q38Im2zJ0vBuZP5Prd3VZutKZyXwkOS8A=="],
+    "@types/node": ["@types/node@26.6.1", "", { "dependencies": { "undici-types": "~8.9.0" } }, "sha512-VqGJBMCtdhqkBUCcBLvywI0NJ+KLuVzgNnlBUNFOQjqVxzo2lxLUNg1DSey8+u2u6ktswSAxg+s68QLzWHNOuA=="],
 
     "@types/react": ["@types/react@19.3.0", "", { "dependencies": { "csstype": "^3.2.2" } }, "sha512-N0rFCuH9YoxG9/m61l9MfpJKfmLOVU0em7ipIz6TRgSSkvReLB9vL85GB+yr8Bs5leqpvg96JSwF4ZS1s4viQg=="],
 
@@ -2484,26 +2522,6 @@
 
     "@types/ws": ["@types/ws@8.18.1", "", { "dependencies": { "@types/node": "*" } }, "sha512-ThVF6DCVhA8kUGy+aazFQ4kXQ7E1Ty7A3ypFOe0IcJV8O/M511G99AW24irKrW56Wt44yG9+ij8FaqoBGkuBXg=="],
 
-    "@typescript-eslint/eslint-plugin": ["@typescript-eslint/eslint-plugin@8.70.0", "", { "dependencies": { "@eslint-community/regexpp": "^4.12.2", "@typescript-eslint/scope-manager": "8.70.0", "@typescript-eslint/type-utils": "8.70.0", "@typescript-eslint/utils": "8.70.0", "@typescript-eslint/visitor-keys": "8.70.0", "ignore": "^7.0.5", "natural-compare": "^1.4.0", "ts-api-utils": "^2.5.0" }, "peerDependencies": { "@typescript-eslint/parser": "^8.70.0", "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0", "typescript": ">=4.8.4 <6.1.0" } }, "sha512-/v8HZt6RlyIZxB3ntehELOcUcfxKPVGWXnQdJuHRmzrqgF8nQypcC/oxGW+Ot4VGKDq81XugPKxx0n5PBtf9PA=="],
-
-    "@typescript-eslint/parser": ["@typescript-eslint/parser@8.70.0", "", { "dependencies": { "@typescript-eslint/scope-manager": "8.70.0", "@typescript-eslint/types": "8.70.0", "@typescript-eslint/typescript-estree": "8.70.0", "@typescript-eslint/visitor-keys": "8.70.0", "debug": "^4.4.3" }, "peerDependencies": { "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0", "typescript": ">=4.8.4 <6.1.0" } }, "sha512-zYvrmj9Yxd63UGaXw+kdt6A0F0s0qveJyuatIM77bYC2DE4pgmg7a50u8LR7PRtXd0x+h+Tl3eXabGm06SWd3Q=="],
-
-    "@typescript-eslint/project-service": ["@typescript-eslint/project-service@8.70.0", "", { "dependencies": { "@typescript-eslint/tsconfig-utils": "^8.70.0", "@typescript-eslint/types": "^8.70.0", "debug": "^4.4.3" }, "peerDependencies": { "typescript": ">=4.8.4 <6.1.0" } }, "sha512-hFHbTNqhU9G+2eKFXCBVb1tjFT/LceiJ4+HfLO4pTpDI0KHi6iajpcFFkaSQ9gXmCh7n82A0PthaayEdN6mspQ=="],
-
-    "@typescript-eslint/scope-manager": ["@typescript-eslint/scope-manager@8.70.0", "", { "dependencies": { "@typescript-eslint/types": "8.70.0", "@typescript-eslint/visitor-keys": "8.70.0" } }, "sha512-8nP3Kwh5hlgZ4FicGvmznAmJe8UL4sdU8tLukrPaMuQmDuk4Y8xYfzu/aYZW4xT2JCgc7H/TpDI5cGlxcWJSqQ=="],
-
-    "@typescript-eslint/tsconfig-utils": ["@typescript-eslint/tsconfig-utils@8.70.0", "", { "peerDependencies": { "typescript": ">=4.8.4 <6.1.0" } }, "sha512-adnkeeNq9Sq1sUf4+FRVc0KdgYghzsgFpZSQVZVvY0LCuUuN0FnQgyGzCJeC4fW1cdXseBAjU2EOqUIjbNcZUw=="],
-
-    "@typescript-eslint/type-utils": ["@typescript-eslint/type-utils@8.70.0", "", { "dependencies": { "@typescript-eslint/types": "8.70.0", "@typescript-eslint/typescript-estree": "8.70.0", "@typescript-eslint/utils": "8.70.0", "debug": "^4.4.3", "ts-api-utils": "^2.5.0" }, "peerDependencies": { "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0", "typescript": ">=4.8.4 <6.1.0" } }, "sha512-NUMKIhYVaVIVLnRL9CRt+VVcuLgSHUCpXn4/+K8wql+vdInUzvx8BjUO1oJ7cG9shjFJKtF8F8Hh2kCh3/KBVw=="],
-
-    "@typescript-eslint/types": ["@typescript-eslint/types@8.70.0", "", {}, "sha512-asTOIYhDg4zdzOScCyaytrsV3cR6B4ecPQlXw/dJIm7J/MZTtCtfVII9JD8Geh4jTCrK/Xe6cg5UevoleMcoJQ=="],
-
-    "@typescript-eslint/typescript-estree": ["@typescript-eslint/typescript-estree@8.70.0", "", { "dependencies": { "@typescript-eslint/project-service": "8.70.0", "@typescript-eslint/tsconfig-utils": "8.70.0", "@typescript-eslint/types": "8.70.0", "@typescript-eslint/visitor-keys": "8.70.0", "debug": "^4.4.3", "minimatch": "^10.2.2", "semver": "^7.7.3", "tinyglobby": "^0.2.15", "ts-api-utils": "^2.5.0" }, "peerDependencies": { "typescript": ">=4.8.4 <6.1.0" } }, "sha512-d9NmHMPEKQ7QCLLm1jI3zmoQBwT5KwFYjXBJ9ymZfKCUU+5rmTRykKAFvH5Qn/ZCds3CEAFS9OC9M/jkl0X2bA=="],
-
-    "@typescript-eslint/utils": ["@typescript-eslint/utils@8.70.0", "", { "dependencies": { "@eslint-community/eslint-utils": "^4.9.1", "@typescript-eslint/scope-manager": "8.70.0", "@typescript-eslint/types": "8.70.0", "@typescript-eslint/typescript-estree": "8.70.0" }, "peerDependencies": { "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0", "typescript": ">=4.8.4 <6.1.0" } }, "sha512-oZmtKJz/4fufZ2p3+Cn3ijEojcdfR+1zYDH2xKYrEly0dR/Q/1xUPRCOlKGxod78nWlU2UnDe09GZ3TaknBFGA=="],
-
-    "@typescript-eslint/visitor-keys": ["@typescript-eslint/visitor-keys@8.70.0", "", { "dependencies": { "@typescript-eslint/types": "8.70.0", "eslint-visitor-keys": "^5.0.0" } }, "sha512-BoC8PiO4Hkdo0TVJh9Ntxr5MxPDI7/oFsrygN5ADelFSeXG/qgNuucIGA+L5Z6JpPTE/uRfcTWtscjbUaufepQ=="],
-
     "@typescript/native-preview": ["@typescript/native-preview@7.0.0-dev.20260707.2", "", { "optionalDependencies": { "@typescript/native-preview-darwin-arm64": "7.0.0-dev.20260707.2", "@typescript/native-preview-darwin-x64": "7.0.0-dev.20260707.2", "@typescript/native-preview-linux-arm": "7.0.0-dev.20260707.2", "@typescript/native-preview-linux-arm64": "7.0.0-dev.20260707.2", "@typescript/native-preview-linux-x64": "7.0.0-dev.20260707.2", "@typescript/native-preview-win32-arm64": "7.0.0-dev.20260707.2", "@typescript/native-preview-win32-x64": "7.0.0-dev.20260707.2" }, "bin": { "tsgo": "bin/tsgo" } }, "sha512-oUGp+Rep/hqMhPunyinsALUwSlzHINSxitifPiSaeqoKOKD2OlR9NE3TaPqwsl4NlGslsOSUXI1JotWQzpYCPg=="],
 
     "@typescript/native-preview-darwin-arm64": ["@typescript/native-preview-darwin-arm64@7.0.0-dev.20260707.2", "", { "os": "darwin", "cpu": "arm64" }, "sha512-wny2pgKjGbiZtnOIHVa3tXC1UfDqxNEFzyPGmiqybedG8hipG2Nfp0l5UxbaKCjkLacUpH/W5bP2hBOMVhCOzg=="],
@@ -2536,13 +2554,9 @@
 
     "accepts": ["accepts@2.0.0", "", { "dependencies": { "mime-types": "^3.0.0", "negotiator": "^1.0.0" } }, "sha512-5cvg6CtKwfgdmVqY1WIiXKc3Q1bkRqGLi+2W/6ao+6Y7gu/RCwRuAhGEzh5B4KlszSuTLgZYuqFqo5bImjNKng=="],
 
-    "acorn": ["acorn@8.18.0", "", { "bin": { "acorn": "bin/acorn" } }, "sha512-lGq+9yr1/GuAWaVYIHRjvvySG5/4VfKIvC8EWxStPdcDh/Ka7FG3twP6v4d5BkravUilhIAsG4Qj83t02LWUPQ=="],
-
-    "acorn-jsx": ["acorn-jsx@5.3.2", "", { "peerDependencies": { "acorn": "^6.0.0 || ^7.0.0 || ^8.0.0" } }, "sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ=="],
-
     "agent-base": ["agent-base@7.1.4", "", {}, "sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ=="],
 
-    "ajv": ["ajv@6.15.0", "", { "dependencies": { "fast-deep-equal": "^3.1.1", "fast-json-stable-stringify": "^2.0.0", "json-schema-traverse": "^0.4.1", "uri-js": "^4.2.2" } }, "sha512-fgFx7Hfoq60ytK2c7DhnF8jIvzYgOMxfugjLOSMHjLIPgenqa7S7oaagATUq99mV6IYvN2tRmC0wnTYX6iPbMw=="],
+    "ajv": ["ajv@8.20.0", "", { "dependencies": { "fast-deep-equal": "^3.1.3", "fast-uri": "^3.0.1", "json-schema-traverse": "^1.0.0", "require-from-string": "^2.0.2" } }, "sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA=="],
 
     "ajv-formats": ["ajv-formats@3.0.1", "", { "dependencies": { "ajv": "^8.0.0" } }, "sha512-8iUql50EUR+uUcdRQ3HDqa6EVyo3docL8g5WJ3FNcWmu62IbkGUue/pEyLBW8VGKKucTPgqeks4fIU1DA4yowQ=="],
 
@@ -2566,7 +2580,7 @@
 
     "base64-js": ["base64-js@1.5.1", "", {}, "sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA=="],
 
-    "baseline-browser-mapping": ["baseline-browser-mapping@2.11.24", "", { "bin": { "baseline-browser-mapping": "dist/cli.cjs" } }, "sha512-hYrgxie335U08WqICoGqKRzV1HFXv6zdxwJE4ekCb80CM9a0SVVsN4QPwT67RraRo+9h8IATk6uxHJw7QSkdOg=="],
+    "baseline-browser-mapping": ["baseline-browser-mapping@2.11.25", "", { "bin": { "baseline-browser-mapping": "dist/cli.cjs" } }, "sha512-gMmEShwwq7FJqMwvfRwvCl00v4kN+KOfJqXn+f4nrufak5gNHJOksd/60Dvjuz7sI8Y5WiSFBa8FEYr+zoyqCw=="],
 
     "better-auth": ["better-auth@1.6.29", "", { "dependencies": { "@better-auth/core": "1.6.29", "@better-auth/drizzle-adapter": "1.6.29", "@better-auth/kysely-adapter": "1.6.29", "@better-auth/memory-adapter": "1.6.29", "@better-auth/mongo-adapter": "1.6.29", "@better-auth/prisma-adapter": "1.6.29", "@better-auth/telemetry": "1.6.29", "@better-auth/utils": "0.4.2", "@better-fetch/fetch": "1.3.1", "@noble/ciphers": "^2.1.1", "@noble/hashes": "^2.0.1", "better-call": "1.4.0", "defu": "^6.1.4", "jose": "^6.1.3", "kysely": "^0.28.17 || ^0.29.0", "nanostores": "^1.1.1", "zod": "^4.3.6" }, "peerDependencies": { "@lynx-js/react": "*", "@prisma/client": "^5.0.0 || ^6.0.0 || ^7.0.0", "@sveltejs/kit": "^2.0.0", "@tanstack/react-start": "^1.0.0", "@tanstack/solid-start": "^1.0.0", "better-sqlite3": "^12.0.0", "drizzle-kit": ">=0.31.4", "drizzle-orm": "^0.45.2", "mongodb": "^6.0.0 || ^7.0.0", "mysql2": "^3.0.0", "next": "^14.0.0 || ^15.0.0 || ^16.0.0", "pg": "^8.0.0", "prisma": "^5.0.0 || ^6.0.0 || ^7.0.0", "react": "^18.0.0 || ^19.0.0", "react-dom": "^18.0.0 || ^19.0.0", "solid-js": "^1.0.0", "svelte": "^4.0.0 || ^5.0.0", "vitest": "^2.0.0 || ^3.0.0 || ^4.0.0", "vue": "^3.0.0" }, "optionalPeers": ["@lynx-js/react", "@prisma/client", "@sveltejs/kit", "@tanstack/react-start", "@tanstack/solid-start", "better-sqlite3", "drizzle-kit", "drizzle-orm", "mongodb", "mysql2", "next", "pg", "prisma", "react", "react-dom", "solid-js", "svelte", "vitest", "vue"] }, "sha512-7i2kOry+Jb1mRUR14kCDVS23GCKUGWxayZRXULbNz/6nFLPT6XSuGJVrwo/d+Qfq/iubA0/4Acw2/eg/tPCCnA=="],
 
@@ -2590,8 +2604,6 @@
 
     "cacache": ["cacache@20.0.4", "", { "dependencies": { "@npmcli/fs": "^5.0.0", "fs-minipass": "^3.0.0", "glob": "^13.0.0", "lru-cache": "^11.1.0", "minipass": "^7.0.3", "minipass-collect": "^2.0.1", "minipass-flush": "^1.0.5", "minipass-pipeline": "^1.2.4", "p-map": "^7.0.2", "ssri": "^13.0.0" } }, "sha512-M3Lab8NPYlZU2exsL3bMVvMrMqgwCnMWfdZbK28bn3pK6APT/Te/I8hjRPNu1uwORY9a1eEQoifXbKPQMfMTOA=="],
 
-    "cacheable": ["cacheable@2.5.0", "", { "dependencies": { "@cacheable/memory": "^2.2.0", "@cacheable/utils": "^2.5.0", "hookified": "^1.15.0", "keyv": "^5.6.0", "qified": "^0.10.1" } }, "sha512-60cyAOytib/OzBw1JNSoSV/boK1AtHryDIjvVBk7XbN4ugfkM3+Sry7fEjNgPMGgOjuaZPAp8ruZ0Cxafwyq9g=="],
-
     "call-bind": ["call-bind@1.0.9", "", { "dependencies": { "call-bind-apply-helpers": "^1.0.2", "es-define-property": "^1.0.1", "get-intrinsic": "^1.3.0", "set-function-length": "^1.2.2" } }, "sha512-a/hy+pNsFUTR+Iz8TCJvXudKVLAnz/DyeSUo10I5yvFDQJBFU2s9uqQpoSrJlroHUKoKqzg+epxyP9lqFdzfBQ=="],
 
     "call-bind-apply-helpers": ["call-bind-apply-helpers@1.0.2", "", { "dependencies": { "es-errors": "^1.3.0", "function-bind": "^1.1.2" } }, "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ=="],
@@ -2648,8 +2660,6 @@
 
     "decompress-response": ["decompress-response@6.0.0", "", { "dependencies": { "mimic-response": "^3.1.0" } }, "sha512-aW35yZM6Bb/4oJlZncMH2LCoZtJXTRxES17vE3hoRiowU2kWHaJKFkSBDnDR+cm9J+9QhXmREyIfv0pji9ejCQ=="],
 
-    "deep-is": ["deep-is@0.1.4", "", {}, "sha512-oIPzksmTg4/MriiaYGO+okXDT7ztn/w3Eptv/+gSIdMdKsJo0u4CfYNFJPy+4SKMuCqGw2wxnA+URMg3t8a/bQ=="],
-
     "define-data-property": ["define-data-property@1.1.4", "", { "dependencies": { "es-define-property": "^1.0.0", "es-errors": "^1.3.0", "gopd": "^1.0.1" } }, "sha512-rBMvIzlpA8v6E+SJZoo++HAYqsLrkg7MSfIinMPFhmkorw7X+dOXVJQs+QT69zGkzMyfDnIMN2Wid1+NbL3T+A=="],
 
     "defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
@@ -2702,23 +2712,7 @@
 
     "escape-html": ["escape-html@1.0.3", "", {}, "sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow=="],
 
-    "escape-string-regexp": ["escape-string-regexp@4.0.0", "", {}, "sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA=="],
-
-    "eslint": ["eslint@10.10.0", "", { "dependencies": { "@eslint-community/eslint-utils": "^4.8.0", "@eslint-community/regexpp": "^4.12.2", "@eslint/config-array": "^0.23.5", "@eslint/config-helpers": "^0.7.0", "@eslint/core": "^1.2.1", "@eslint/plugin-kit": "^0.7.3", "@humanfs/node": "^0.16.6", "@humanwhocodes/module-importer": "^1.0.1", "@humanwhocodes/retry": "^0.4.2", "@types/estree": "^1.0.6", "ajv": "^6.14.0", "cross-spawn": "^7.0.6", "debug": "^4.3.2", "escape-string-regexp": "^4.0.0", "eslint-scope": "^9.1.2", "eslint-visitor-keys": "^5.0.1", "espree": "^11.2.0", "esquery": "^1.7.0", "esutils": "^2.0.2", "fast-deep-equal": "^3.1.3", "file-entry-cache": "11.1.5 || >11.1.6 <12", "find-up": "^5.0.0", "glob-parent": "^6.0.2", "ignore": "^5.2.0", "imurmurhash": "^0.1.4", "is-glob": "^4.0.0", "json-stable-stringify-without-jsonify": "^1.0.1", "minimatch": "^10.2.5", "natural-compare": "^1.4.0", "optionator": "^0.9.3" }, "peerDependencies": { "jiti": "*" }, "optionalPeers": ["jiti"], "bin": { "eslint": "bin/eslint.js" } }, "sha512-NPXn6r5zl4uET1DAVPaOwzX3rut4c0wcmw3dWJAfOsTM5+TogXo0DDjz8pwm/hL8cyVNpHqeK4JpN0NjnyFFNw=="],
-
-    "eslint-scope": ["eslint-scope@9.1.2", "", { "dependencies": { "@types/esrecurse": "^4.3.1", "@types/estree": "^1.0.8", "esrecurse": "^4.3.0", "estraverse": "^5.2.0" } }, "sha512-xS90H51cKw0jltxmvmHy2Iai1LIqrfbw57b79w/J7MfvDfkIkFZ+kj6zC3BjtUwh150HsSSdxXZcsuv72miDFQ=="],
-
-    "eslint-visitor-keys": ["eslint-visitor-keys@5.0.1", "", {}, "sha512-tD40eHxA35h0PEIZNeIjkHoDR4YjjJp34biM0mDvplBe//mB+IHCqHDGV7pxF+7MklTvighcCPPZC7ynWyjdTA=="],
-
-    "espree": ["espree@11.2.0", "", { "dependencies": { "acorn": "^8.16.0", "acorn-jsx": "^5.3.2", "eslint-visitor-keys": "^5.0.1" } }, "sha512-7p3DrVEIopW1B1avAGLuCSh1jubc01H2JHc8B4qqGblmg5gI9yumBgACjWo4JlIc04ufug4xJ3SQI8HkS/Rgzw=="],
-
-    "esquery": ["esquery@1.7.0", "", { "dependencies": { "estraverse": "^5.1.0" } }, "sha512-Ap6G0WQwcU/LHsvLwON1fAQX9Zp0A2Y6Y/cJBl9r/JbW90Zyg4/zbG6zzKa2OTALELarYHmKu0GhpM5EO+7T0g=="],
-
-    "esrecurse": ["esrecurse@4.3.0", "", { "dependencies": { "estraverse": "^5.2.0" } }, "sha512-KmfKL3b6G+RXvP8N1vr3Tq1kL/oCFgn2NYXEtqP8/L3pKapUA4G8cFVaoF3SU323CD4XypR/ffioHmkti6/Tag=="],
-
-    "estraverse": ["estraverse@5.3.0", "", {}, "sha512-MMdARuVEQziNTeJD8DgMqmhwR11BRQ/cBP+pLtYdSTnf3MIO8fFeiINEbX36ZdNlfU/7A9f3gUw49B3oQsvwBA=="],
-
-    "esutils": ["esutils@2.0.3", "", {}, "sha512-kVscqXk4OCp68SZ0dkgEKVi6/8ij300KBWTJq32P/dYeWTSwK41WyTxalN1eRmA5Z9UU/LX9D7FWSmV9SAYx6g=="],
+    "escape-string-regexp": ["escape-string-regexp@5.0.0", "", {}, "sha512-/veY75JbMK4j1yjvuUxuVsiS/hr/4iHs9FTT6cgTexxdE0Ly/glccBAkloH/DofkjRbZU3bnoj38mOmhkZ0lHw=="],
 
     "etag": ["etag@1.8.1", "", {}, "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg=="],
 
@@ -2738,26 +2732,14 @@
 
     "fast-deep-equal": ["fast-deep-equal@3.1.3", "", {}, "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q=="],
 
-    "fast-json-stable-stringify": ["fast-json-stable-stringify@2.1.0", "", {}, "sha512-lhd/wF+Lk98HZoTCtlVraHtfh5XYijIjalXck7saUtuanSDyLMxnHhSXEDJqHxD7msR8D0uCmqlkwjCV8xvwHw=="],
-
-    "fast-levenshtein": ["fast-levenshtein@2.0.6", "", {}, "sha512-DCXu6Ifhqcks7TZKY3Hxp3y6qphY5SJZmrWMDrKcERSOXWQdMhU9Ig/PYrzyw/ul9jOIyh0N4M0tbC5hodg8dw=="],
-
     "fast-text-encoding": ["fast-text-encoding@1.0.6", "", {}, "sha512-VhXlQgj9ioXCqGstD37E/HBeqEGV/qOD/kmbVG8h5xKBYvM1L3lR1Zn4555cQ8GkYbJa8aJSipLPndE1k6zK2w=="],
 
     "fast-uri": ["fast-uri@3.1.8", "", {}, "sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg=="],
 
     "fdir": ["fdir@6.5.0", "", { "peerDependencies": { "picomatch": "^3 || ^4" }, "optionalPeers": ["picomatch"] }, "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg=="],
 
-    "file-entry-cache": ["file-entry-cache@11.1.5", "", { "dependencies": { "flat-cache": "^6.1.23" } }, "sha512-+PFTHITI08JIGhnNpGNI8T8inUpgZfk3GNEqfT9R2zZV2iFXg3CvqzSl/uEhs7TSGujYRELEANyDvS8Fj7+S7Q=="],
-
     "finalhandler": ["finalhandler@2.1.1", "", { "dependencies": { "debug": "^4.4.0", "encodeurl": "^2.0.0", "escape-html": "^1.0.3", "on-finished": "^2.4.1", "parseurl": "^1.3.3", "statuses": "^2.0.1" } }, "sha512-S8KoZgRZN+a5rNwqTxlZZePjT/4cnm0ROV70LedRHZ0p8u9fRID0hJUZQpkKLzro8LfmC8sx23bY6tVNxv8pQA=="],
 
-    "find-up": ["find-up@5.0.0", "", { "dependencies": { "locate-path": "^6.0.0", "path-exists": "^4.0.0" } }, "sha512-78/PXT1wlLLDgTzDs7sjq9hzz0vXD+zn+7wypEe4fXQxCmdmqfGsEPQxmiCSQI3ajFV91bVSsvNtrJRiW6nGng=="],
-
-    "flat-cache": ["flat-cache@6.1.23", "", { "dependencies": { "cacheable": "^2.5.0", "flatted": "^3.4.2", "hookified": "^1.15.0" } }, "sha512-f++BY9pTk+983xK1FLzlLpmM0i0z+jHmx3QESGkURMXujQZz1k5wzwX6hjnQ8goaD0B+sYnDK1yZ6MTyZfUaqA=="],
-
-    "flatted": ["flatted@3.4.4", "", {}, "sha512-5+ybhBZANEJxaH3X5evAFatUxLfEHSr7n6kYJ+1Qd0mUqr4eu9gIf6GDbWHf8RJijHrjjO8G+la14SlL2SeS1Q=="],
-
     "for-each": ["for-each@0.3.5", "", { "dependencies": { "is-callable": "^1.2.7" } }, "sha512-dKx12eRCVIzqCxFGplyFKJMPvLEWgmNtUrpTiJIR5u97zEhRG8ySrtboPHZXx7daLxQVrl643cTzbab2tkQjxg=="],
 
     "forwarded": ["forwarded@0.2.0", "", {}, "sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow=="],
@@ -2786,8 +2768,6 @@
 
     "glob": ["glob@13.0.6", "", { "dependencies": { "minimatch": "^10.2.2", "minipass": "^7.1.3", "path-scurry": "^2.0.2" } }, "sha512-Wjlyrolmm8uDpm/ogGyXZXb1Z+Ca2B8NbJwqBVg0axK9GbBeoS7yGV6vjXnYdGm6X53iehEuxxbyiKp8QmN4Vw=="],
 
-    "glob-parent": ["glob-parent@6.0.2", "", { "dependencies": { "is-glob": "^4.0.3" } }, "sha512-XxwI8EOhVQgWp6iDL+3b0r86f4d6AX6zSU55HfB4ydCEuXLXc5FcYeOu+nnGftS4TEju/11rt4KJPTMgbfmv4A=="],
-
     "gopd": ["gopd@1.2.0", "", {}, "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg=="],
 
     "graceful-fs": ["graceful-fs@4.2.11", "", {}, "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ=="],
@@ -2800,16 +2780,12 @@
 
     "has-tostringtag": ["has-tostringtag@1.0.2", "", { "dependencies": { "has-symbols": "^1.0.3" } }, "sha512-NqADB8VjPFLM2V0VvHUewwwsw0ZWBaIdgo+ieHtK3hasLz4qeCRjYcqfB6AQrBggRKppKF8L52/VqdVsO47Dlw=="],
 
-    "hashery": ["hashery@1.5.1", "", { "dependencies": { "hookified": "^1.15.0" } }, "sha512-iZyKG96/JwPz1N55vj2Ie2vXbhu440zfUfJvSwEqEbeLluk7NnapfGqa7LH0mOsnDxTF85Mx8/dyR6HfqcbmbQ=="],
-
     "hasown": ["hasown@2.0.4", "", { "dependencies": { "function-bind": "^1.1.2" } }, "sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A=="],
 
     "hono": ["hono@4.13.3", "", {}, "sha512-r8AO2mYHoLxSHkgafNeC/BXyb2vWRxD3jem4Ts+ptav8oTG5FIRifAjuJEmZI4bSvvc2ns0GxmIYiZnHqN3mMw=="],
 
     "hono-openapi": ["hono-openapi@1.3.3", "", { "dependencies": { "@hono/standard-validator": "^0.4.0", "@standard-community/standard-json": "^0.3.5", "@standard-community/standard-openapi": "^0.2.9", "@standard-schema/spec": "^1.0.0", "@types/json-schema": "^7.0.15", "openapi-types": "^12.1.3" }, "peerDependencies": { "hono": "^4.11.2" } }, "sha512-+LVFPQEc4eDrXr/Rd0QQkRh/DbEZRXnm1RZU4bVaoqmWiWgspT4nNHIQMgi44X+D9/8k1eGzHvR0KLNPJ/0xaQ=="],
 
-    "hookified": ["hookified@1.15.1", "", {}, "sha512-MvG/clsADq1GPM2KGo2nyfaWVyn9naPiXrqIe4jYjXNZQt238kWyOGrsyc/DmRAQ+Re6yeo6yX/yoNCG5KAEVg=="],
-
     "hosted-git-info": ["hosted-git-info@8.1.0", "", { "dependencies": { "lru-cache": "^10.0.1" } }, "sha512-Rw/B2DNQaPBICNXEm8balFz9a6WpZrkCGpcWFpy7nCj+NyhSdqXipmfvtmWt9xGfp0wZnBxB+iVpLmQMYt47Tw=="],
 
     "http-cache-semantics": ["http-cache-semantics@4.2.0", "", {}, "sha512-dTxcvPXqPvXBQpq5dUr6mEMJX4oIEFv6bwom3FDwKRDsuIjjJGANqhBuoAn9c1RQJIdAKav33ED65E2ys+87QQ=="],
@@ -2826,8 +2802,6 @@
 
     "ignore": ["ignore@5.3.2", "", {}, "sha512-hsBTNUqQTDwkWtcdYI2i06Y/nUBEsNEDJKjWdigLvegy8kDuJAS8uRlpkkcQpyEXL0Z/pjDy5HBmMjRCJ2gq+g=="],
 
-    "imurmurhash": ["imurmurhash@0.1.4", "", {}, "sha512-JmXMZ6wuvDmLiHEml9ykzqO6lwFbof0GG4IkcGaENdCRDDmMVnny7s5HsIgHCbaq0w2MyPhDqkhTUgS2LU2PHA=="],
-
     "inherits": ["inherits@2.0.4", "", {}, "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ=="],
 
     "ip-address": ["ip-address@10.7.2", "", {}, "sha512-7H/2gFSIitxc0hG3nOI1glS8QLo/EHBFFLk8vEUjXY/xu0AdL8jZ9U1IzO2PUm0d2D/ofQcAifb0g6OBkt8U7w=="],
@@ -2836,10 +2810,6 @@
 
     "is-callable": ["is-callable@1.2.7", "", {}, "sha512-1BC0BVFhS/p0qtw6enp8e+8OD0UrK0oFLztSjNzhcKA3WDuJxxAPXzPuPtKkjEY9UUoEWlX/8fgKeu2S8i9JTA=="],
 
-    "is-extglob": ["is-extglob@2.1.1", "", {}, "sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ=="],
-
-    "is-glob": ["is-glob@4.0.3", "", { "dependencies": { "is-extglob": "^2.1.1" } }, "sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg=="],
-
     "is-plain-obj": ["is-plain-obj@4.1.0", "", {}, "sha512-+Pgi+vMuUNkJyExiMBt5IlFoMyKnr5zhJ4Uspz58WOhBF5QoIZkFyNHIbBAtHwzVAgk5RtndVNsDRN61/mmDqg=="],
 
     "is-promise": ["is-promise@4.0.0", "", {}, "sha512-hvpoI6korhJMnej285dSg6nu1+e6uxs7zG3BYAm5byqDsgJNWwxzM6z6iZiAgQR4TJ30JmBTOwqZUw3WlyH3AQ=="],
@@ -2862,12 +2832,10 @@
 
     "jsesc": ["jsesc@3.1.0", "", { "bin": { "jsesc": "bin/jsesc" } }, "sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA=="],
 
-    "json-schema-traverse": ["json-schema-traverse@0.4.1", "", {}, "sha512-xbbCH5dCYU5T8LcEhhuh7HJ88HXuW3qsI3Y0zOZFKfZEHcpWiHU/Jxzk629Brsab/mMiHQti9wMP+845RPe3Vg=="],
+    "json-schema-traverse": ["json-schema-traverse@1.0.0", "", {}, "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug=="],
 
     "json-schema-typed": ["json-schema-typed@8.0.2", "", {}, "sha512-fQhoXdcvc3V28x7C7BMs4P5+kNlgUURe2jmUT1T//oBRMDrqy1QPelJimwZGo7Hg9VPV3EQV5Bnq4hbFy2vetA=="],
 
-    "json-stable-stringify-without-jsonify": ["json-stable-stringify-without-jsonify@1.0.1", "", {}, "sha512-Bdboy+l7tA3OGW6FjyFHWkP5LuByj1Tk33Ljyq0axyzdk9//JSi2u3fP1QSmd1KNwq6VOKYGlAu87CisVir6Pw=="],
-
     "json5": ["json5@2.2.3", "", { "bin": { "json5": "lib/cli.js" } }, "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg=="],
 
     "jsonparse": ["jsonparse@1.3.1", "", {}, "sha512-POQXvpdL69+CluYsillJ7SUhKvytYjW9vG/GKpnf+xP8UWgYEM/RaMzHHofbALDiKbbP1W8UEYmgGl39WkPZsg=="],
@@ -2876,12 +2844,8 @@
 
     "just-once": ["just-once@1.1.0", "", {}, "sha512-+rZVpl+6VyTilK7vB/svlMPil4pxqIJZkbnN7DKZTOzyXfun6ZiFeq2Pk4EtCEHZ0VU4EkdFzG8ZK5F3PErcDw=="],
 
-    "keyv": ["keyv@5.6.0", "", { "dependencies": { "@keyv/serialize": "^1.1.1" } }, "sha512-CYDD3SOtsHtyXeEORYRx2qBtpDJFjRTGXUtmNEMGyzYOKj1TE3tycdlho7kA1Ufx9OYWZzg52QFBGALTirzDSw=="],
-
     "kysely": ["kysely@0.29.6", "", {}, "sha512-hHaB8C/rfzDDtr/t8YZwxAuPJTT0zHyaPoVzcXwDYhYNAgH/4sIfVhi/XLLIY+bL/FqaIJnjATDbi8ObSELmxg=="],
 
-    "levn": ["levn@0.4.1", "", { "dependencies": { "prelude-ls": "^1.2.1", "type-check": "~0.4.0" } }, "sha512-+bT2uH4E5LGE7h/n3evcS/sQlJXCpIp6ym8OWJ5eV6+67Dsql/LaaT7qJBAt2rzfoa/5QBGBhxDix1dMt2kQKQ=="],
-
     "lightningcss": ["lightningcss@1.32.0", "", { "dependencies": { "detect-libc": "^2.0.3" }, "optionalDependencies": { "lightningcss-android-arm64": "1.32.0", "lightningcss-darwin-arm64": "1.32.0", "lightningcss-darwin-x64": "1.32.0", "lightningcss-freebsd-x64": "1.32.0", "lightningcss-linux-arm-gnueabihf": "1.32.0", "lightningcss-linux-arm64-gnu": "1.32.0", "lightningcss-linux-arm64-musl": "1.32.0", "lightningcss-linux-x64-gnu": "1.32.0", "lightningcss-linux-x64-musl": "1.32.0", "lightningcss-win32-arm64-msvc": "1.32.0", "lightningcss-win32-x64-msvc": "1.32.0" } }, "sha512-NXYBzinNrblfraPGyrbPoD19C1h9lfI/1mzgWYvXUTe414Gz/X1FD2XBZSZM7rRTrMA8JL3OtAaGifrIKhQ5yQ=="],
 
     "lightningcss-android-arm64": ["lightningcss-android-arm64@1.32.0", "", { "os": "android", "cpu": "arm64" }, "sha512-YK7/ClTt4kAK0vo6w3X+Pnm0D2cf2vPHbhOXdoNti1Ga0al1P4TBZhwjATvjNwLEBCnKvjJc2jQgHXH0NEwlAg=="],
@@ -2906,8 +2870,6 @@
 
     "lightningcss-win32-x64-msvc": ["lightningcss-win32-x64-msvc@1.32.0", "", { "os": "win32", "cpu": "x64" }, "sha512-Amq9B/SoZYdDi1kFrojnoqPLxYhQ4Wo5XiL8EVJrVsB8ARoC1PWW6VGtT0WKCemjy8aC+louJnjS7U18x3b06Q=="],
 
-    "locate-path": ["locate-path@6.0.0", "", { "dependencies": { "p-locate": "^5.0.0" } }, "sha512-iPZK6eYjbxRu3uB4/WZ3EsEIMJFMqAoopl3R+zuq0UjcAm/MO6KCweDgPfP3elTztoKP3KtnVHxTn2NHBSDVUw=="],
-
     "longest-streak": ["longest-streak@3.1.0", "", {}, "sha512-9Ri+o0JYgehTaVBBDoMqIl8GXtbWg711O3srftcHhZ0dqnETqLaoIK0x17fUw9rFSlK/0NlsKe0Ahhyl5pXE2g=="],
 
     "lru-cache": ["lru-cache@11.5.2", "", {}, "sha512-4pfM1Ff0x50o0tQwb5ucw/RzNyD0/YJME6IVcStalZuMWxdt3sR3huStTtxz4PUmvZfRguvDejasvQ2kifR11g=="],
@@ -3040,8 +3002,6 @@
 
     "nanostores": ["nanostores@1.5.3", "", {}, "sha512-rQLB6eV4f2AW/n3L0JmwCROpaisYy9EDEADvEFSd1C/qG8hB6O5TPlh9A791JRbJr4CnMQBzptDcvD9OR1+6WA=="],
 
-    "natural-compare": ["natural-compare@1.4.0", "", {}, "sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw=="],
-
     "negotiator": ["negotiator@1.1.0", "", { "dependencies": { "content-type": "^2.1.0" } }, "sha512-NMPBRMJgiQHjbd8phG3Vebdx4kZ1H121rbl5IkMqeOsahptB9BKo/d7oJ3zTXqTgagn2bWlNSXkh0QUGM31RYg=="],
 
     "node-releases": ["node-releases@2.0.56", "", {}, "sha512-x0InOIyzgdk+eyaWaRJFH5snEtiImgBgblZ2CyPrLmqqcuMQkEvcDPHbzqbD8eDsSeJbVOjn+crzyzHaM4D+/A=="],
@@ -3070,11 +3030,9 @@
 
     "openapi-typescript-helpers": ["openapi-typescript-helpers@0.0.15", "", {}, "sha512-opyTPaunsklCBpTK8JGef6mfPhLSnyy5a0IN9vKtx3+4aExf+KxEqYwIy3hqkedXIB97u357uLMJsOnm3GVjsw=="],
 
-    "optionator": ["optionator@0.9.4", "", { "dependencies": { "deep-is": "^0.1.3", "fast-levenshtein": "^2.0.6", "levn": "^0.4.1", "prelude-ls": "^1.2.1", "type-check": "^0.4.0", "word-wrap": "^1.2.5" } }, "sha512-6IpQ7mKUxRcZNLIObR0hz7lxsapSSIYNZJwXPGeF0mTVqGKFIXj1DQcMoT22S3ROcLyY/rz0PWaWZ9ayWmad9g=="],
+    "oxfmt": ["oxfmt@0.68.0", "", { "dependencies": { "tinypool": "2.1.2" }, "optionalDependencies": { "@oxfmt/binding-android-arm-eabi": "0.68.0", "@oxfmt/binding-android-arm64": "0.68.0", "@oxfmt/binding-darwin-arm64": "0.68.0", "@oxfmt/binding-darwin-x64": "0.68.0", "@oxfmt/binding-freebsd-x64": "0.68.0", "@oxfmt/binding-linux-arm-gnueabihf": "0.68.0", "@oxfmt/binding-linux-arm-musleabihf": "0.68.0", "@oxfmt/binding-linux-arm64-gnu": "0.68.0", "@oxfmt/binding-linux-arm64-musl": "0.68.0", "@oxfmt/binding-linux-ppc64-gnu": "0.68.0", "@oxfmt/binding-linux-riscv64-gnu": "0.68.0", "@oxfmt/binding-linux-riscv64-musl": "0.68.0", "@oxfmt/binding-linux-s390x-gnu": "0.68.0", "@oxfmt/binding-linux-x64-gnu": "0.68.0", "@oxfmt/binding-linux-x64-musl": "0.68.0", "@oxfmt/binding-openharmony-arm64": "0.68.0", "@oxfmt/binding-win32-arm64-msvc": "0.68.0", "@oxfmt/binding-win32-ia32-msvc": "0.68.0", "@oxfmt/binding-win32-x64-msvc": "0.68.0" }, "peerDependencies": { "svelte": "^5.0.0", "vite-plus": "*" }, "optionalPeers": ["svelte", "vite-plus"], "bin": { "oxfmt": "bin/oxfmt" } }, "sha512-Z0XMofcXCGUXbcpBHnWyUiX93BGiw1B+lcHNbQDWEtOhX06ewoFfu4zXkyiLhRrNnMq0twqXRHUcJetf+GsiQQ=="],
 
-    "p-limit": ["p-limit@3.1.0", "", { "dependencies": { "yocto-queue": "^0.1.0" } }, "sha512-TYOanM3wGwNGsZN2cVTYPArw454xnXj5qmWF1bEoAc4+cU/ol7GVh7odevjp1FNHduHc3KZMcFduxU5Xc6uJRQ=="],
-
-    "p-locate": ["p-locate@5.0.0", "", { "dependencies": { "p-limit": "^3.0.2" } }, "sha512-LaNjtRWUBY++zB5nE/NwcaoMylSPk+S+ZHNB1TzdbMJMny6dynpAGt7X/tl/QYq3TIeE6nxHppbo2LGymrG5Pw=="],
+    "oxlint": ["oxlint@1.83.0", "", { "optionalDependencies": { "@oxlint/binding-android-arm-eabi": "1.83.0", "@oxlint/binding-android-arm64": "1.83.0", "@oxlint/binding-darwin-arm64": "1.83.0", "@oxlint/binding-darwin-x64": "1.83.0", "@oxlint/binding-freebsd-x64": "1.83.0", "@oxlint/binding-linux-arm-gnueabihf": "1.83.0", "@oxlint/binding-linux-arm-musleabihf": "1.83.0", "@oxlint/binding-linux-arm64-gnu": "1.83.0", "@oxlint/binding-linux-arm64-musl": "1.83.0", "@oxlint/binding-linux-ppc64-gnu": "1.83.0", "@oxlint/binding-linux-riscv64-gnu": "1.83.0", "@oxlint/binding-linux-riscv64-musl": "1.83.0", "@oxlint/binding-linux-s390x-gnu": "1.83.0", "@oxlint/binding-linux-x64-gnu": "1.83.0", "@oxlint/binding-linux-x64-musl": "1.83.0", "@oxlint/binding-openharmony-arm64": "1.83.0", "@oxlint/binding-win32-arm64-msvc": "1.83.0", "@oxlint/binding-win32-ia32-msvc": "1.83.0", "@oxlint/binding-win32-x64-msvc": "1.83.0" }, "peerDependencies": { "oxlint-tsgolint": ">=7.0.2001", "vite-plus": "*" }, "optionalPeers": ["oxlint-tsgolint", "vite-plus"], "bin": { "oxlint": "bin/oxlint" } }, "sha512-cyDzSzaw3uzP0TeCeq3lLRPPoaUxkbB4ZOXj+kn+5r+BX9V+4bNVGk9lxer+WrgcpebH4JxLlJ3KQjveVztOLQ=="],
 
     "p-map": ["p-map@7.0.8", "", {}, "sha512-MitaVsCuCFIvOLLPIU7NnfrZvS9H9h7kwMUkDo+T2pEISaJD48IV9S8iIdXB7PsvvdxyYcsSTTrr90XKsbulNw=="],
 
@@ -3082,8 +3040,6 @@
 
     "parseurl": ["parseurl@1.3.3", "", {}, "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ=="],
 
-    "path-exists": ["path-exists@4.0.0", "", {}, "sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w=="],
-
     "path-key": ["path-key@3.1.1", "", {}, "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q=="],
 
     "path-scurry": ["path-scurry@2.0.2", "", { "dependencies": { "lru-cache": "^11.0.0", "minipass": "^7.1.2" } }, "sha512-3O/iVVsJAPsOnpwWIeD+d6z/7PmqApyQePUtCndjatj/9I5LylHvt5qluFaBT3I5h3r1ejfR056c+FCv+NnNXg=="],
@@ -3106,22 +3062,14 @@
 
     "postgres": ["postgres@3.4.9", "", {}, "sha512-GD3qdB0x1z9xgFI6cdRD6xu2Sp2WCOEoe3mtnyB5Ee0XrrL5Pe+e4CCnJrRMnL1zYtRDZmQQVbvOttLnKDLnaw=="],
 
-    "prelude-ls": ["prelude-ls@1.2.1", "", {}, "sha512-vkcDPrRZo1QZLbn5RLGPpg/WmIQ65qoWWhcGKf/b5eplkkarX0m9z8ppCat4mlOqUsWpyNuYgO3VRyrYHSzX5g=="],
-
-    "prettier": ["prettier@3.9.7", "", { "bin": { "prettier": "bin/prettier.cjs" } }, "sha512-T3mF5P7HFzZVLDQuCUNtJj6WK1pcpLMweMNUVwGb01bLNkH9AkKxtZvmInw8K6bnn2O3d6/5RHl6zSHiBAD0Og=="],
-
     "proc-log": ["proc-log@5.0.0", "", {}, "sha512-Azwzvl90HaF0aCz1JrDdXQykFakSSNPaPoiZ9fm5qJIMHioDZEi7OAdRwSm6rSoPtY3Qutnm3L7ogmg3dc+wbQ=="],
 
     "process": ["process@0.11.10", "", {}, "sha512-cdGef/drWFoydD1JsMzuFf8100nZl+GT+yacc2bEced5f9Rjk4z+WtFUTBu9PhOi9j/jfmBPu0mMEY4wIdAF8A=="],
 
     "proxy-addr": ["proxy-addr@2.0.8", "", { "dependencies": { "forwarded": "0.2.0", "ipaddr.js": "1.9.1" } }, "sha512-5nnx0yGyVUcY6t9RnWcARWtwT9F1D8O9rt08htPvnd49W1IgZtmLkhu9WfMzQj1cFxjHIO6connUNVW5k7AVyQ=="],
 
-    "punycode": ["punycode@2.3.1", "", {}, "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg=="],
-
     "puppeteer-core": ["puppeteer-core@25.11.0", "", { "dependencies": { "@puppeteer/browsers": "3.2.2", "chromium-bidi": "17.0.2", "devtools-protocol": "0.0.1680125", "typed-query-selector": "^2.12.2", "webdriver-bidi-protocol": "0.4.3", "ws": "^8.21.3" } }, "sha512-Ujym7JbxoAqanaxGcHgmTomfhC01HfDCSuGZ8Hs9boHrDjzbNVMnFRJo2KtbDT9LCRgeJoFnkn9JQZ41eEUrLw=="],
 
-    "qified": ["qified@0.10.1", "", { "dependencies": { "hookified": "^2.1.1" } }, "sha512-+Owyggi9IxT1ePKGafcI87ubSmxol6smwJ+RAHDQlx9+9cPwFWDiKFFCPuWhr9ignlGpZ9vDQLw67N4dcTVFEA=="],
-
     "qs": ["qs@6.16.0", "", { "dependencies": { "es-define-property": "^1.0.1", "side-channel": "^1.1.1" } }, "sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA=="],
 
     "quansync": ["quansync@0.2.11", "", {}, "sha512-AifT7QEbW9Nri4tAwR5M/uzpBuqfZf+zwaEM/QkzEjj7NBuFD2rBuy0K3dE+8wltbezDV7JMA0WfnCPYRSYbXA=="],
@@ -3234,20 +3182,18 @@
 
     "tinyglobby": ["tinyglobby@0.2.17", "", { "dependencies": { "fdir": "^6.5.0", "picomatch": "^4.0.4" } }, "sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g=="],
 
+    "tinypool": ["tinypool@2.1.2", "", {}, "sha512-9YodfrxS9g9IbFr/KOjE5bAeJ0p61n3bW6mqvy0jtoeKd1kTW1Cxm0oulm6KX2lyM9Gl6WIe8nEbY7LWv5ZJww=="],
+
     "to-buffer": ["to-buffer@1.2.2", "", { "dependencies": { "isarray": "^2.0.5", "safe-buffer": "^5.2.1", "typed-array-buffer": "^1.0.3" } }, "sha512-db0E3UJjcFhpDhAF4tLo03oli3pwl3dbnzXOUIlRKrp+ldk/VUxzpWYZENsw2SZiuBjHAk7DfB0VU7NKdpb6sw=="],
 
     "toidentifier": ["toidentifier@1.0.1", "", {}, "sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA=="],
 
     "trough": ["trough@2.2.0", "", {}, "sha512-tmMpK00BjZiUyVyvrBK7knerNgmgvcV/KLVyuma/SC+TQN167GrMRciANTz09+k3zW8L8t60jWO1GpfkZdjTaw=="],
 
-    "ts-api-utils": ["ts-api-utils@2.5.0", "", { "peerDependencies": { "typescript": ">=4.8.4" } }, "sha512-OJ/ibxhPlqrMM0UiNHJ/0CKQkoKF243/AEmplt3qpRgkW8VG7IfOS41h7V8TjITqdByHzrjcS/2si+y4lIh8NA=="],
-
     "tslib": ["tslib@2.8.1", "", {}, "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w=="],
 
     "tsx": ["tsx@4.23.13", "", { "dependencies": { "esbuild": "~0.28.0" }, "optionalDependencies": { "fsevents": "~2.3.3" }, "bin": { "tsx": "dist/cli.mjs" } }, "sha512-BL5MGkRln6aDYhb0xbQlEAGw743BaZYWdbWtdJOBriYJboKgUUYCadFp2/FpBBZquBC/ezNBn7wMMPx7FDZUDw=="],
 
-    "type-check": ["type-check@0.4.0", "", { "dependencies": { "prelude-ls": "^1.2.1" } }, "sha512-XleUoc9uwGXqjWwXaUTZAmzMcFZ5858QA2vvx1Ur5xIcixXIP+8LnFDgRplU30us6teqdlskFfu+ae4K79Ooew=="],
-
     "type-is": ["type-is@2.1.0", "", { "dependencies": { "content-type": "^2.0.0", "media-typer": "^1.1.0", "mime-types": "^3.0.0" } }, "sha512-faYHw0anBbc/kWF3zFTEnxSFOAGUX9GFbOBthvDdLsIlEoWOFOtS0zgCiQYwIskL9iGXZL3kAXD8OoZ4GmMATA=="],
 
     "typed-array-buffer": ["typed-array-buffer@1.0.3", "", { "dependencies": { "call-bound": "^1.0.3", "es-errors": "^1.3.0", "is-typed-array": "^1.1.14" } }, "sha512-nAYYwfY3qnzX30IkA6AQZjVbtK6duGontcQm1WSG1MD94YLqK0515GNApXkoxKOWMusVssAHWLh9SeaoefYFGw=="],
@@ -3256,11 +3202,9 @@
 
     "typescript": ["typescript@6.0.3", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-y2TvuxSZPDyQakkFRPZHKFm+KKVqIisdg9/CZwm9ftvKXLP8NRWj38/ODjNbr43SsoXqNuAisEf1GdCxqWcdBw=="],
 
-    "typescript-eslint": ["typescript-eslint@8.70.0", "", { "dependencies": { "@typescript-eslint/eslint-plugin": "8.70.0", "@typescript-eslint/parser": "8.70.0", "@typescript-eslint/typescript-estree": "8.70.0", "@typescript-eslint/utils": "8.70.0" }, "peerDependencies": { "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0", "typescript": ">=4.8.4 <6.1.0" } }, "sha512-P/W5cz70/cQAuKfY3xwQMWWTV7BvJ0mAQmi+9mBcsVPaBUpd6Ohpa+fECv9rBFrQcig86jAiNBFNWUqnTjr4pw=="],
-
     "undici": ["undici@7.29.1", "", {}, "sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q=="],
 
-    "undici-types": ["undici-types@6.21.0", "", {}, "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ=="],
+    "undici-types": ["undici-types@8.9.0", "", {}, "sha512-KTDyRTYX8sWmKXAikPHHSyc63CRPETMctyjKFupcC6OBLXT3xsN0e9aF7m+mIXutFWpUXuedtowG7iLOzp0kQg=="],
 
     "undici8": ["undici@8.10.2", "", {}, "sha512-/y4/bH9YNU5hi9NIrpOuvGXFcxrj3CMrV+/AYpowAYTpHn8gX/XPFjNy766FPoYY0miQhdW977JFWKGNhBdwyQ=="],
 
@@ -3278,8 +3222,6 @@
 
     "update-browserslist-db": ["update-browserslist-db@1.3.3", "", { "dependencies": { "escalade": "^3.2.0", "picocolors": "^1.1.1" }, "peerDependencies": { "browserslist": ">= 4.21.0" }, "bin": { "update-browserslist-db": "cli.js" } }, "sha512-pJ2sYawQS0R/WI928Gj5GlPhTGzbMelq0+4INtSYNDV9ErKJcX6xjGWkoG/VnB3dpUm00zALaqkrUD77pO5TDQ=="],
 
-    "uri-js": ["uri-js@4.4.1", "", { "dependencies": { "punycode": "^2.1.0" } }, "sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg=="],
-
     "use-callback-ref": ["use-callback-ref@1.3.3", "", { "dependencies": { "tslib": "^2.0.0" }, "peerDependencies": { "@types/react": "*", "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc" }, "optionalPeers": ["@types/react"] }, "sha512-jQL3lRnocaFtu3V00JToYz/4QkNWswxijDaCVNZRiRTO3HQDLsdu1ZtmIUvV4yPp+rvWm5j0y0TG/S61cuijTg=="],
 
     "use-sidecar": ["use-sidecar@1.1.3", "", { "dependencies": { "detect-node-es": "^1.1.0", "tslib": "^2.0.0" }, "peerDependencies": { "@types/react": "*", "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc" }, "optionalPeers": ["@types/react"] }, "sha512-Fedw0aZvkhynoPYlA5WXrMCAMm+nSWdZt6lzJQ7Ok8S6Q+VsHmHpRWndVRJ8Be0ZbkfPc5LRYH+5XrzXcEeLRQ=="],
@@ -3306,8 +3248,6 @@
 
     "which-typed-array": ["which-typed-array@1.1.23", "", { "dependencies": { "available-typed-arrays": "^1.0.7", "call-bind": "^1.0.9", "call-bound": "^1.0.4", "for-each": "^0.3.5", "get-proto": "^1.0.1", "gopd": "^1.2.0", "has-tostringtag": "^1.0.2" } }, "sha512-JMh8aK+1B/0bk/YNupICmH5MgCq6yNLKYQUfsZtSDLLCCmxUkHjUY+oOlIa90lO7lHN1woAfpenLdlKpXy9o+A=="],
 
-    "word-wrap": ["word-wrap@1.2.5", "", {}, "sha512-BN22B5eaMMI9UMtjrGd5g5eCYPpCPDUy0FJXbYsaT5zYxjFOckS53SQDE3pWkVoWpHXVb3BrYcEN4Twa55B5cA=="],
-
     "wrap-ansi": ["wrap-ansi@9.0.2", "", { "dependencies": { "ansi-styles": "^6.2.1", "string-width": "^7.0.0", "strip-ansi": "^7.1.0" } }, "sha512-42AtmgqjV+X1VpdOfyTGOYRi0/zsoLqtXQckTmqTeybT+BDIbM/Guxo7x3pE2vtpr1ok6xRqM9OpBe+Jyoqyww=="],
 
     "wrappy": ["wrappy@1.0.2", "", {}, "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ=="],
@@ -3322,8 +3262,6 @@
 
     "yargs-parser": ["yargs-parser@22.0.0", "", {}, "sha512-rwu/ClNdSMpkSrUb+d6BRsSkLUq1fmfsY6TOpYzTwvwkg1/NRG85KBy3kq++A8LKQwX6lsu+aWad+2khvuXrqw=="],
 
-    "yocto-queue": ["yocto-queue@0.1.0", "", {}, "sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q=="],
-
     "zod": ["zod@4.6.5", "", {}, "sha512-v5l/aFXZQeai4awLbOpSoHecE9UiMrnfx75tEXLjNonXVARxQ5mOeipTjROUchszUNCqnE+hqAMujRsRHsut2Q=="],
 
     "zod-to-json-schema": ["zod-to-json-schema@3.25.2", "", { "peerDependencies": { "zod": "^3.25.28 || ^4" } }, "sha512-O/PgfnpT1xKSDeQYSCfRI5Gy3hPf91mKVDuYLUHZJMiDFptvP41MSnWofm8dnCm0256ZNfZIM7DSzuSMAFnjHA=="],
@@ -3336,28 +3274,10 @@
 
     "@babel/helper-compilation-targets/semver": ["semver@6.3.1", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA=="],
 
-    "@corbits/artifact-ui/@corbits/react-ui": ["@corbits/react-ui@github:corbitsdev/react-ui#3b12281", { "dependencies": { "class-variance-authority": "^0.7.1", "clsx": "^2.1.1", "tailwind-merge": "^3.3.1" }, "peerDependencies": { "@radix-ui/react-dialog": "^1.1.15", "@radix-ui/react-dropdown-menu": "^2.1.16", "@radix-ui/react-slot": "^1.2.3", "@radix-ui/react-tooltip": "^1.2.8", "@tanstack/react-query": "^5.90.2", "lucide-react": "^0.545.0 || ^1.0.0", "react": "^18.2.0 || ^19.0.0", "react-dom": "^18.2.0 || ^19.0.0", "sonner": "^2.0.7" }, "optionalPeers": ["@tanstack/react-query"] }, "corbitsdev-react-ui-3b12281", "sha512-Abvm/DO0Gqg0ITHGT9355ZxyKRPMVJLSSQSjpd3a8qt4JPrSMOLIOS4sX8ZMNNaArIbnY9F+VKrOWkUJUyO4Nw=="],
-
-    "@corbits/assistant-workflow/@corbits/memory": ["@corbits/memory@github:corbitsdev/corbits-memory#9e6f213", { "dependencies": { "@intx/agent": "0.2.2", "@intx/authz": "0.2.2", "@intx/hub-api": "0.2.2", "@intx/log": "0.2.2", "@intx/workflow": "0.2.2", "arktype": "^2.1.29", "drizzle-orm": "^0.45.1", "hono": "^4.9.0", "hono-openapi": "^1.3.1", "postgres": "^3.4.7" } }, "corbitsdev-corbits-memory-9e6f213", "sha512-utnM4ZT2zmslcPXYWAAqxlDNLcpGsXFiTOtj8h7+OXnhCP0Eaw8yl25+yCTyHpvt3jcdeG4h5uFsSj7ou0BZCA=="],
-
-    "@corbits/diligence-brief-workflow/@corbits/memory": ["@corbits/memory@github:corbitsdev/corbits-memory#9e6f213", { "dependencies": { "@intx/agent": "0.2.2", "@intx/authz": "0.2.2", "@intx/hub-api": "0.2.2", "@intx/log": "0.2.2", "@intx/workflow": "0.2.2", "arktype": "^2.1.29", "drizzle-orm": "^0.45.1", "hono": "^4.9.0", "hono-openapi": "^1.3.1", "postgres": "^3.4.7" } }, "corbitsdev-corbits-memory-9e6f213", "sha512-utnM4ZT2zmslcPXYWAAqxlDNLcpGsXFiTOtj8h7+OXnhCP0Eaw8yl25+yCTyHpvt3jcdeG4h5uFsSj7ou0BZCA=="],
-
-    "@corbits/inbox/@corbits/mailbox": ["@corbits/mailbox@github:corbitsdev/corbits-mailbox#bc96404", { "dependencies": { "@hono/standard-validator": "0.2.3", "@standard-community/standard-json": "0.3.5", "@standard-community/standard-openapi": "0.2.9", "arktype": "2.1.29", "hono-openapi": "1.3.1" }, "peerDependencies": { "@intx/log": "^0.2.2", "@intx/mime": "^0.2.2", "@intx/types": "^0.2.2", "drizzle-orm": "^0.45.2", "hono": "^4.12.0", "postgres": "^3.4.0" } }, "corbitsdev-corbits-mailbox-bc96404", "sha512-NEeNP2XsjIKOUbRr5szrCDWAYPQSmMNSu33ODyLUCiXdnq12HYWYG/C+0DcAMELlY+9Ktqf543Kg/Qb22NtjWQ=="],
-
     "@corbits/mailbox/hono-openapi": ["hono-openapi@1.3.1", "", { "peerDependencies": { "@hono/standard-validator": "^0.2.0", "@standard-community/standard-json": "^0.3.5", "@standard-community/standard-openapi": "^0.2.9", "@types/json-schema": "^7.0.15", "hono": "^4.11.2", "openapi-types": "^12.1.3" }, "optionalPeers": ["@hono/standard-validator", "hono"] }, "sha512-NLVeVkhKZ3drmQNEIPac8HX8Y54uf1hJAgIM/7MfDsaeVVmB+QILWQxx5x3R3NvRHgedcbEbOCGY2uR7WQYyMw=="],
 
-    "@corbits/plugins-ui/@corbits/react-ui": ["@corbits/react-ui@github:corbitsdev/react-ui#3b12281", { "dependencies": { "class-variance-authority": "^0.7.1", "clsx": "^2.1.1", "tailwind-merge": "^3.3.1" }, "peerDependencies": { "@radix-ui/react-dialog": "^1.1.15", "@radix-ui/react-dropdown-menu": "^2.1.16", "@radix-ui/react-slot": "^1.2.3", "@radix-ui/react-tooltip": "^1.2.8", "@tanstack/react-query": "^5.90.2", "lucide-react": "^0.545.0 || ^1.0.0", "react": "^18.2.0 || ^19.0.0", "react-dom": "^18.2.0 || ^19.0.0", "sonner": "^2.0.7" }, "optionalPeers": ["@tanstack/react-query"] }, "corbitsdev-react-ui-3b12281", "sha512-Abvm/DO0Gqg0ITHGT9355ZxyKRPMVJLSSQSjpd3a8qt4JPrSMOLIOS4sX8ZMNNaArIbnY9F+VKrOWkUJUyO4Nw=="],
-
-    "@corbits/scout-agent/@corbits/memory": ["@corbits/memory@github:corbitsdev/corbits-memory#9e6f213", { "dependencies": { "@intx/agent": "0.2.2", "@intx/authz": "0.2.2", "@intx/hub-api": "0.2.2", "@intx/log": "0.2.2", "@intx/workflow": "0.2.2", "arktype": "^2.1.29", "drizzle-orm": "^0.45.1", "hono": "^4.9.0", "hono-openapi": "^1.3.1", "postgres": "^3.4.7" } }, "corbitsdev-corbits-memory-9e6f213", "sha512-utnM4ZT2zmslcPXYWAAqxlDNLcpGsXFiTOtj8h7+OXnhCP0Eaw8yl25+yCTyHpvt3jcdeG4h5uFsSj7ou0BZCA=="],
-
-    "@corbits/settings-ui/@corbits/react-ui": ["@corbits/react-ui@github:corbitsdev/react-ui#3b12281", { "dependencies": { "class-variance-authority": "^0.7.1", "clsx": "^2.1.1", "tailwind-merge": "^3.3.1" }, "peerDependencies": { "@radix-ui/react-dialog": "^1.1.15", "@radix-ui/react-dropdown-menu": "^2.1.16", "@radix-ui/react-slot": "^1.2.3", "@radix-ui/react-tooltip": "^1.2.8", "@tanstack/react-query": "^5.90.2", "lucide-react": "^0.545.0 || ^1.0.0", "react": "^18.2.0 || ^19.0.0", "react-dom": "^18.2.0 || ^19.0.0", "sonner": "^2.0.7" }, "optionalPeers": ["@tanstack/react-query"] }, "corbitsdev-react-ui-3b12281", "sha512-Abvm/DO0Gqg0ITHGT9355ZxyKRPMVJLSSQSjpd3a8qt4JPrSMOLIOS4sX8ZMNNaArIbnY9F+VKrOWkUJUyO4Nw=="],
-
     "@esbuild-kit/core-utils/esbuild": ["esbuild@0.18.20", "", { "optionalDependencies": { "@esbuild/android-arm": "0.18.20", "@esbuild/android-arm64": "0.18.20", "@esbuild/android-x64": "0.18.20", "@esbuild/darwin-arm64": "0.18.20", "@esbuild/darwin-x64": "0.18.20", "@esbuild/freebsd-arm64": "0.18.20", "@esbuild/freebsd-x64": "0.18.20", "@esbuild/linux-arm": "0.18.20", "@esbuild/linux-arm64": "0.18.20", "@esbuild/linux-ia32": "0.18.20", "@esbuild/linux-loong64": "0.18.20", "@esbuild/linux-mips64el": "0.18.20", "@esbuild/linux-ppc64": "0.18.20", "@esbuild/linux-riscv64": "0.18.20", "@esbuild/linux-s390x": "0.18.20", "@esbuild/linux-x64": "0.18.20", "@esbuild/netbsd-x64": "0.18.20", "@esbuild/openbsd-x64": "0.18.20", "@esbuild/sunos-x64": "0.18.20", "@esbuild/win32-arm64": "0.18.20", "@esbuild/win32-ia32": "0.18.20", "@esbuild/win32-x64": "0.18.20" }, "bin": { "esbuild": "bin/esbuild" } }, "sha512-ceqxoedUrcayh7Y7ZX6NdbbDzGROiyVBgC4PriJThBKSVPWnnFHZAkfI1lJT8QFkOwH4qOS2SJkS4wvpGl8BpA=="],
 
-    "@eslint-community/eslint-utils/eslint-visitor-keys": ["eslint-visitor-keys@3.4.3", "", {}, "sha512-wpc+LXeiyiisxPlEkUzU6svyS1frIO3Mgxj1fdy7Pm8Ygzguax2N3Fa/D/ag1WqbOprdI+uY6wMUl8/a2G+iag=="],
-
-    "@modelcontextprotocol/sdk/ajv": ["ajv@8.20.0", "", { "dependencies": { "fast-deep-equal": "^3.1.3", "fast-uri": "^3.0.1", "json-schema-traverse": "^1.0.0", "require-from-string": "^2.0.2" } }, "sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA=="],
-
     "@tailwindcss/oxide-wasm32-wasi/@emnapi/core": ["@emnapi/core@1.11.3", "", { "dependencies": { "@emnapi/wasi-threads": "1.2.3", "tslib": "^2.4.0" }, "bundled": true }, "sha512-zLpS5asjEb7lq8jYLq37N6XKaE41DIexlY1rF/z4/tIl3wo13Sqm28fRyfIsKZD+NZ8mM5RoKkpW/rBcuoSZSg=="],
 
     "@tailwindcss/oxide-wasm32-wasi/@emnapi/runtime": ["@emnapi/runtime@1.11.3", "", { "dependencies": { "tslib": "^2.4.0" }, "bundled": true }, "sha512-Xz4Tpyki7XyrpbUK1jR1AhdAdaXyhhY4lZ3neLodmhpuWfy2PAQN5B46sAiU4liOXGLkHypn/qU+jvfWSCYYLA=="],
@@ -3370,18 +3290,6 @@
 
     "@tailwindcss/oxide-wasm32-wasi/tslib": ["tslib@2.8.1", "", { "bundled": true }, "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w=="],
 
-    "@typescript-eslint/eslint-plugin/ignore": ["ignore@7.0.9", "", {}, "sha512-brTTsvFRt5C1gGHtPst/281UjPD5t9fBqbgoMPlVWy11ZLTPfu7HxK4ZYqO9H7o/yC9rSTCI85EaQ4OoY12qYw=="],
-
-    "@workbench/hub/@corbits/mailbox": ["@corbits/mailbox@github:corbitsdev/corbits-mailbox#bc96404", { "dependencies": { "@hono/standard-validator": "0.2.3", "@standard-community/standard-json": "0.3.5", "@standard-community/standard-openapi": "0.2.9", "arktype": "2.1.29", "hono-openapi": "1.3.1" }, "peerDependencies": { "@intx/log": "^0.2.2", "@intx/mime": "^0.2.2", "@intx/types": "^0.2.2", "drizzle-orm": "^0.45.2", "hono": "^4.12.0", "postgres": "^3.4.0" } }, "corbitsdev-corbits-mailbox-bc96404", "sha512-NEeNP2XsjIKOUbRr5szrCDWAYPQSmMNSu33ODyLUCiXdnq12HYWYG/C+0DcAMELlY+9Ktqf543Kg/Qb22NtjWQ=="],
-
-    "@workbench/hub/@corbits/memory": ["@corbits/memory@github:corbitsdev/corbits-memory#9e6f213", { "dependencies": { "@intx/agent": "0.2.2", "@intx/authz": "0.2.2", "@intx/hub-api": "0.2.2", "@intx/log": "0.2.2", "@intx/workflow": "0.2.2", "arktype": "^2.1.29", "drizzle-orm": "^0.45.1", "hono": "^4.9.0", "hono-openapi": "^1.3.1", "postgres": "^3.4.7" } }, "corbitsdev-corbits-memory-9e6f213", "sha512-utnM4ZT2zmslcPXYWAAqxlDNLcpGsXFiTOtj8h7+OXnhCP0Eaw8yl25+yCTyHpvt3jcdeG4h5uFsSj7ou0BZCA=="],
-
-    "@workbench/sidecar/@corbits/oauth-core": ["@corbits/oauth-core@github:corbitsdev/corbits-oauth-core#e1e69e6", { "dependencies": { "arktype": "2.2.3" } }, "corbitsdev-corbits-oauth-core-e1e69e6", "sha512-wUrD73iVyk/Dtb4yRn3hCh6N8syfsEvAkRz4XYqT0FIB3sYDSMYEWHcDMJx9nq64my/HBOeN1J6PHIOtpjhtPg=="],
-
-    "@workbench/web/@corbits/react-ui": ["@corbits/react-ui@github:corbitsdev/react-ui#3b12281", { "dependencies": { "class-variance-authority": "^0.7.1", "clsx": "^2.1.1", "tailwind-merge": "^3.3.1" }, "peerDependencies": { "@radix-ui/react-dialog": "^1.1.15", "@radix-ui/react-dropdown-menu": "^2.1.16", "@radix-ui/react-slot": "^1.2.3", "@radix-ui/react-tooltip": "^1.2.8", "@tanstack/react-query": "^5.90.2", "lucide-react": "^0.545.0 || ^1.0.0", "react": "^18.2.0 || ^19.0.0", "react-dom": "^18.2.0 || ^19.0.0", "sonner": "^2.0.7" }, "optionalPeers": ["@tanstack/react-query"] }, "corbitsdev-react-ui-3b12281", "sha512-Abvm/DO0Gqg0ITHGT9355ZxyKRPMVJLSSQSjpd3a8qt4JPrSMOLIOS4sX8ZMNNaArIbnY9F+VKrOWkUJUyO4Nw=="],
-
-    "ajv-formats/ajv": ["ajv@8.20.0", "", { "dependencies": { "fast-deep-equal": "^3.1.3", "fast-uri": "^3.0.1", "json-schema-traverse": "^1.0.0", "require-from-string": "^2.0.2" } }, "sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA=="],
-
     "better-call/@better-auth/utils": ["@better-auth/utils@0.5.0", "", { "dependencies": { "@noble/hashes": "^2.0.1" } }, "sha512-BL8W4EfIZFwlu0r54m3v1ztjDhu6dDe/amLTm0xybmbZaNgYUqhD3SjpAsnq0q8YD6/ki4iwIgxJNLP/N3TxiA=="],
 
     "body-parser/content-type": ["content-type@2.1.0", "", {}, "sha512-mj7UPXE0jaqaOsukNZRUEfEi2AcL7C/vwmwcHV0O97eO1E1pxBZuyjlZrx5seTaNBg1U6+o35wpa35Qfcc+7ag=="],
@@ -3404,8 +3312,6 @@
 
     "make-fetch-happen/ssri": ["ssri@13.0.1", "", { "dependencies": { "minipass": "^7.0.3" } }, "sha512-QUiRf1+u9wPTL/76GTYlKttDEBWV1ga9ZXW8BG6kfdeyyM8LGPix9gROyg9V2+P0xNyF3X2Go526xKFdMZrHSQ=="],
 
-    "mdast-util-find-and-replace/escape-string-regexp": ["escape-string-regexp@5.0.0", "", {}, "sha512-/veY75JbMK4j1yjvuUxuVsiS/hr/4iHs9FTT6cgTexxdE0Ly/glccBAkloH/DofkjRbZU3bnoj38mOmhkZ0lHw=="],
-
     "minipass-flush/minipass": ["minipass@3.3.6", "", { "dependencies": { "yallist": "^4.0.0" } }, "sha512-DxiNidxSEK+tHG6zOIklvNOwm3hvCrbUrdtzY74U6HKTJxvIDfOUL5W5P2Ghd3DTkhhKPYGqeNUIh5qcM4YBfw=="],
 
     "minipass-pipeline/minipass": ["minipass@3.3.6", "", { "dependencies": { "yallist": "^4.0.0" } }, "sha512-DxiNidxSEK+tHG6zOIklvNOwm3hvCrbUrdtzY74U6HKTJxvIDfOUL5W5P2Ghd3DTkhhKPYGqeNUIh5qcM4YBfw=="],
@@ -3416,8 +3322,6 @@
 
     "npm-registry-fetch/proc-log": ["proc-log@6.1.0", "", {}, "sha512-iG+GYldRf2BQ0UDUAd6JQ/RwzaQy6mXmsk/IzlYyal4A4SNFw54MeH4/tLkF4I5WoWG9SQwuqWzS99jaFQHBuQ=="],
 
-    "qified/hookified": ["hookified@2.2.0", "", {}, "sha512-p/LgFzRN5FeoD3DLS6bkUapeye6E4SI6yJs6KetENd18S+FBthqYq2amJUWpt5z0EQwwHemidjY5OqJGEKm5uA=="],
-
     "tsx/esbuild": ["esbuild@0.28.2", "", { "optionalDependencies": { "@esbuild/aix-ppc64": "0.28.2", "@esbuild/android-arm": "0.28.2", "@esbuild/android-arm64": "0.28.2", "@esbuild/android-x64": "0.28.2", "@esbuild/darwin-arm64": "0.28.2", "@esbuild/darwin-x64": "0.28.2", "@esbuild/freebsd-arm64": "0.28.2", "@esbuild/freebsd-x64": "0.28.2", "@esbuild/linux-arm": "0.28.2", "@esbuild/linux-arm64": "0.28.2", "@esbuild/linux-ia32": "0.28.2", "@esbuild/linux-loong64": "0.28.2", "@esbuild/linux-mips64el": "0.28.2", "@esbuild/linux-ppc64": "0.28.2", "@esbuild/linux-riscv64": "0.28.2", "@esbuild/linux-s390x": "0.28.2", "@esbuild/linux-x64": "0.28.2", "@esbuild/netbsd-arm64": "0.28.2", "@esbuild/netbsd-x64": "0.28.2", "@esbuild/openbsd-arm64": "0.28.2", "@esbuild/openbsd-x64": "0.28.2", "@esbuild/openharmony-arm64": "0.28.2", "@esbuild/sunos-x64": "0.28.2", "@esbuild/win32-arm64": "0.28.2", "@esbuild/win32-ia32": "0.28.2", "@esbuild/win32-x64": "0.28.2" }, "bin": { "esbuild": "bin/esbuild" } }, "sha512-HKVLS8dvII+xoKW9kmqxbRKrnWEXfJJr/FZhhJmiqIB0e053QNYFqOBouTMO/k5sID4MvCiUCvv8b9M4h32wIA=="],
 
     "type-is/content-type": ["content-type@2.1.0", "", {}, "sha512-mj7UPXE0jaqaOsukNZRUEfEi2AcL7C/vwmwcHV0O97eO1E1pxBZuyjlZrx5seTaNBg1U6+o35wpa35Qfcc+7ag=="],
@@ -3428,8 +3332,6 @@
 
     "@babel/helper-compilation-targets/lru-cache/yallist": ["yallist@3.1.1", "", {}, "sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g=="],
 
-    "@corbits/inbox/@corbits/mailbox/hono-openapi": ["hono-openapi@1.3.1", "", { "peerDependencies": { "@hono/standard-validator": "^0.2.0", "@standard-community/standard-json": "^0.3.5", "@standard-community/standard-openapi": "^0.2.9", "@types/json-schema": "^7.0.15", "hono": "^4.11.2", "openapi-types": "^12.1.3" }, "optionalPeers": ["@hono/standard-validator", "hono"] }, "sha512-NLVeVkhKZ3drmQNEIPac8HX8Y54uf1hJAgIM/7MfDsaeVVmB+QILWQxx5x3R3NvRHgedcbEbOCGY2uR7WQYyMw=="],
-
     "@esbuild-kit/core-utils/esbuild/@esbuild/android-arm": ["@esbuild/android-arm@0.18.20", "", { "os": "android", "cpu": "arm" }, "sha512-fyi7TDI/ijKKNZTUJAQqiG5T7YjJXgnzkURqmGj13C6dCqckZBLdl4h7bkhHt/t0WP+zO9/zwroDvANaOqO5Sw=="],
 
     "@esbuild-kit/core-utils/esbuild/@esbuild/android-arm64": ["@esbuild/android-arm64@0.18.20", "", { "os": "android", "cpu": "arm64" }, "sha512-Nz4rJcchGDtENV0eMKUNa6L12zz2zBDXuhj/Vjh18zGqB44Bi7MBMSXjgunJgjRhCmKOjnPuZp4Mb6OKqtMHLQ=="],
@@ -3474,12 +3376,6 @@
 
     "@esbuild-kit/core-utils/esbuild/@esbuild/win32-x64": ["@esbuild/win32-x64@0.18.20", "", { "os": "win32", "cpu": "x64" }, "sha512-kTdfRcSiDfQca/y9QIkng02avJ+NCaQvrMejlsB3RRv5sE9rRoeBPISaZpKxHELzRxZyLvNts1P27W3wV+8geQ=="],
 
-    "@modelcontextprotocol/sdk/ajv/json-schema-traverse": ["json-schema-traverse@1.0.0", "", {}, "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug=="],
-
-    "@workbench/hub/@corbits/mailbox/hono-openapi": ["hono-openapi@1.3.1", "", { "peerDependencies": { "@hono/standard-validator": "^0.2.0", "@standard-community/standard-json": "^0.3.5", "@standard-community/standard-openapi": "^0.2.9", "@types/json-schema": "^7.0.15", "hono": "^4.11.2", "openapi-types": "^12.1.3" }, "optionalPeers": ["@hono/standard-validator", "hono"] }, "sha512-NLVeVkhKZ3drmQNEIPac8HX8Y54uf1hJAgIM/7MfDsaeVVmB+QILWQxx5x3R3NvRHgedcbEbOCGY2uR7WQYyMw=="],
-
-    "ajv-formats/ajv/json-schema-traverse": ["json-schema-traverse@1.0.0", "", {}, "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug=="],
-
     "minipass-flush/minipass/yallist": ["yallist@4.0.0", "", {}, "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
 
     "minipass-pipeline/minipass/yallist": ["yallist@4.0.0", "", {}, "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
diff --git a/eslint.config.ts b/eslint.config.ts
deleted file mode 100644
index 6da5ec1983..0000000000
--- a/eslint.config.ts
+++ /dev/null
@@ -1,130 +0,0 @@
-// @ts-check
-
-import * as eslint from "@eslint/js";
-import * as tseslint from "typescript-eslint";
-import { defineConfig, globalIgnores } from "eslint/config";
-
-export default defineConfig(
-  eslint.configs.recommended,
-  tseslint.configs.strict,
-  tseslint.configs.stylistic,
-  globalIgnores([
-    "**/node_modules/**",
-    "**/dist/**",
-    ".data/**",
-    "apps/hub/.data/**",
-    "coverage/**",
-    "tmp/**",
-    "vendor/**",
-    ".claude/**",
-    ".worktrees/**",
-    ".agent-state/**",
-    "dispatch/**",
-    "specs/**",
-    "plans/**",
-  ]),
-  {
-    linterOptions: {
-      // Zero-suppressions policy: inline disables are not permitted at all.
-      noInlineConfig: true,
-      reportUnusedDisableDirectives: "error",
-    },
-    rules: {
-      // The real rule lives in the `src/**` override below, scoped there
-      // so generated build output, one-off scripts, and top-level
-      // entrypoints (which install `@intx/log`'s own console sink) are
-      // never in scope for it. Off by default here.
-      "no-console": 0,
-      "@typescript-eslint/no-unused-expressions": [
-        "error",
-        { allowTaggedTemplates: true },
-      ],
-      // Stylistic only, no bug-catching value; arktype mixes type/interface
-      // deliberately.
-      "@typescript-eslint/consistent-type-definitions": 0,
-      "@typescript-eslint/no-empty-function": 0,
-      "@typescript-eslint/no-empty-object-type": 0,
-      "@typescript-eslint/no-invalid-void-type": 0,
-      "@typescript-eslint/no-inferrable-types": 0,
-      "@typescript-eslint/consistent-indexed-object-style": 0,
-      "@typescript-eslint/no-unused-vars": [
-        "error",
-        {
-          args: "all",
-          argsIgnorePattern: "^_",
-          caughtErrors: "all",
-          caughtErrorsIgnorePattern: "^_",
-          destructuredArrayIgnorePattern: "^_",
-          varsIgnorePattern: "^_",
-          ignoreRestSiblings: true,
-        },
-      ],
-    },
-  },
-  {
-    files: ["scripts/**/*.ts"],
-    rules: { "no-console": 0 },
-  },
-  // CL-6359: every app/package's `src/` routes through the global logger
-  // — `@intx/log` on the backend, `@corbits/client-log` in the browser —
-  // instead of ad-hoc `console.*` calls, so a category+level shape is
-  // traceable end-to-end and nothing bypasses it silently. Two carve-outs:
-  // tests, where a stray console call is dev noise, not a product
-  // surface; and each logger module's own implementation, which is the
-  // one sanctioned place `console.*` is still called directly.
-  {
-    files: ["**/src/**/*.ts", "**/src/**/*.tsx"],
-    ignores: [
-      "**/src/**/*.test.ts",
-      "**/src/**/*.test.tsx",
-      "packages/client-log/src/index.ts",
-    ],
-    rules: { "no-console": "error" },
-  },
-  // CL-icons-phosphor: Phosphor (bold weight) replaced lucide-react as the
-  // one icon library, and the Sparkle/Sparkles glyph is banned outright —
-  // owner ruling, it read as a generic "AI" cliché everywhere it appeared.
-  // `packages/icons` is the single place allowed to import
-  // `@phosphor-icons/react` directly (see its `src/index.tsx`); every other
-  // package routes glyphs through `@corbits/icons` so the curated name list
-  // and the bold-weight default stay enforced in one place.
-  {
-    files: ["**/*.ts", "**/*.tsx"],
-    ignores: ["packages/icons/src/**"],
-    rules: {
-      "no-restricted-imports": [
-        "error",
-        {
-          paths: [
-            {
-              name: "lucide-react",
-              message:
-                "lucide-react is retired — import from @corbits/icons instead.",
-            },
-            {
-              name: "@phosphor-icons/react",
-              message:
-                "Import icons from @corbits/icons, not @phosphor-icons/react directly.",
-            },
-          ],
-          patterns: [
-            {
-              group: ["@phosphor-icons/react/*"],
-              message:
-                "Import icons from @corbits/icons, not @phosphor-icons/react directly.",
-            },
-          ],
-        },
-      ],
-      "no-restricted-syntax": [
-        "error",
-        {
-          selector:
-            "ImportSpecifier[imported.name=/^Sparkle(s)?$/], ImportSpecifier[local.name=/^Sparkle(s)?$/]",
-          message:
-            "The Sparkle/Sparkles glyph is banned — pick a glyph that means something specific to what it marks.",
-        },
-      ],
-    },
-  },
-);
diff --git a/package.json b/package.json
index 728d2262e1..9798c25b50 100644
--- a/package.json
+++ b/package.json
@@ -11,10 +11,11 @@
     "workflows/*"
   ],
   "scripts": {
-    "check": "bun run typecheck && bun run lint && bun run test && bun run check:structural",
+    "check": "bun run typecheck && bun run lint && bun run fmt:check && bun run check:structural && bun run test",
     "typecheck": "bun run scripts/typecheck.ts",
-    "lint": "prettier --check --cache . && eslint --cache .",
-    "format": "prettier --write .",
+    "lint": "oxlint apps packages workflows scripts test",
+    "fmt": "oxfmt apps packages workflows scripts test",
+    "fmt:check": "oxfmt --check apps packages workflows scripts test",
     "hooks:install": "bun run scripts/hooks-install.ts",
     "prepare": "bun run hooks:install",
     "build": "bun run scripts/run-all.ts build",
@@ -39,17 +40,15 @@
     "@intx/crypto": "workspace:*",
     "@intx/log": "workspace:*",
     "@corbits/connections": "workspace:*",
-    "@eslint/js": "^10.0.0",
     "@intx/mime": "0.3.0",
     "@intx/types": "0.3.0",
     "@types/bun": "1.3.14",
     "@typescript/native-preview": "7.0.0-dev.20260707.2",
-    "eslint": "^10.8.0",
     "jiti": "^2.7.0",
-    "prettier": "^3.6.2",
+    "oxlint": "1.83.0",
+    "oxfmt": "0.68.0",
     "puppeteer-core": "^25.7.0",
     "typescript": "6.0.3",
-    "typescript-eslint": "^8.42.0",
     "@corbits/webhook-triggers": "workspace:*"
   },
   "engines": {
diff --git a/packages/access-tools/package.json b/packages/access-tools/package.json
index 52d95dedc5..0d36a13cdd 100644
--- a/packages/access-tools/package.json
+++ b/packages/access-tools/package.json
@@ -1,21 +1,21 @@
 {
   "name": "@corbits/access-tools",
+  "version": "0.0.6",
   "description": "Myra's principal and grant tools: list_principals, list_grants, grant_access, and revoke_access as an @intx/agent tool bundle, calling stock Interchange tenant routes with the workflow run's own bearer credential and enforcing a delegation ceiling before it grants",
-  "version": "0.0.5",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "packages/access-tools"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "packages/access-tools"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -27,17 +27,17 @@
   "dependencies": {
     "arktype": "catalog:"
   },
-  "peerDependencies": {
-    "@corbits/error-sink": "0.0.2",
-    "@intx/agent": "0.3.0",
-    "@intx/authz": "0.3.0",
-    "@intx/types": "0.3.0"
-  },
   "devDependencies": {
     "@corbits/agent-directory": "workspace:*",
     "@corbits/agent-directory-tools": "workspace:*",
     "@corbits/tool-registry-publish": "workspace:*",
     "@types/bun": "catalog:",
     "typescript": "catalog:"
+  },
+  "peerDependencies": {
+    "@corbits/error-sink": "0.0.2",
+    "@intx/agent": "0.3.0",
+    "@intx/authz": "0.3.0",
+    "@intx/types": "0.3.0"
   }
 }
diff --git a/packages/access-tools/src/client.test.ts b/packages/access-tools/src/client.test.ts
index 274cf989ff..8c3b1c9aa0 100644
--- a/packages/access-tools/src/client.test.ts
+++ b/packages/access-tools/src/client.test.ts
@@ -107,9 +107,7 @@ test("listGrants passes filters through and reads the stock page envelope", asyn
 });
 
 test("listGrants follows nextCursor so a full page plus one all return", async () => {
-  const all = Array.from({ length: 51 }, (_, i) =>
-    nativeGrant(`grant_${i + 1}`),
-  );
+  const all = Array.from({ length: 51 }, (_, i) => nativeGrant(`grant_${i + 1}`));
   const seen: string[] = [];
   const fetchImpl = (async (url: string | URL | Request) => {
     const raw = String(url);
@@ -130,15 +128,10 @@ test("listGrants follows nextCursor so a full page plus one all return", async (
 
 test("grantAccess reads the caller's own grants first, then posts one stock single-action body per action", async () => {
   const posted: unknown[] = [];
-  const fetchImpl = (async (
-    url: string | URL | Request,
-    init?: RequestInit,
-  ) => {
+  const fetchImpl = (async (url: string | URL | Request, init?: RequestInit) => {
     if (init?.method !== "POST") {
       expect(String(url)).toContain("principalId=prin_caller");
-      return ceilingPage([
-        nativeGrant("own_1", { principalId: "prin_caller", action: "*" }),
-      ]);
+      return ceilingPage([nativeGrant("own_1", { principalId: "prin_caller", action: "*" })]);
     }
     expect(String(url)).toBe(`${TENANT_BASE}/grants`);
     const body = JSON.parse(String(init.body)) as Record<string, unknown>;
@@ -178,14 +171,9 @@ test("grantAccess reads the caller's own grants first, then posts one stock sing
 
 test("grantAccess refuses a pair outside the caller's own authority, before any write", async () => {
   const methods: (string | undefined)[] = [];
-  const fetchImpl = (async (
-    _url: string | URL | Request,
-    init?: RequestInit,
-  ) => {
+  const fetchImpl = (async (_url: string | URL | Request, init?: RequestInit) => {
     methods.push(init?.method);
-    return ceilingPage([
-      nativeGrant("own_1", { principalId: "prin_caller", action: "read" }),
-    ]);
+    return ceilingPage([nativeGrant("own_1", { principalId: "prin_caller", action: "read" })]);
   }) as unknown as typeof fetch;
 
   await expect(
@@ -225,23 +213,18 @@ test("a 404 looking up the grant to revoke surfaces as AccessNotFoundError", asy
       { status: 404 },
     )) as unknown as typeof fetch;
 
-  await expect(
-    revokeAccess(testConfig(fetchImpl), "grant_missing"),
-  ).rejects.toThrow(AccessNotFoundError);
+  await expect(revokeAccess(testConfig(fetchImpl), "grant_missing")).rejects.toThrow(
+    AccessNotFoundError,
+  );
 });
 
 test("revokeAccess checks the ceiling against the grant it read back, then deletes", async () => {
   const calls: string[] = [];
-  const fetchImpl = (async (
-    url: string | URL | Request,
-    init?: RequestInit,
-  ) => {
+  const fetchImpl = (async (url: string | URL | Request, init?: RequestInit) => {
     calls.push(`${init?.method ?? "GET"} ${String(url)}`);
     if (init?.method === "DELETE") return new Response(null, { status: 204 });
     if (String(url).includes("principalId=prin_caller")) {
-      return ceilingPage([
-        nativeGrant("own_1", { principalId: "prin_caller", action: "*" }),
-      ]);
+      return ceilingPage([nativeGrant("own_1", { principalId: "prin_caller", action: "*" })]);
     }
     return Response.json(nativeGrant("grant_1"));
   }) as unknown as typeof fetch;
@@ -253,10 +236,7 @@ test("revokeAccess checks the ceiling against the grant it read back, then delet
 
 test("revokeAccess refuses a grant outside the caller's own authority", async () => {
   const methods: (string | undefined)[] = [];
-  const fetchImpl = (async (
-    url: string | URL | Request,
-    init?: RequestInit,
-  ) => {
+  const fetchImpl = (async (url: string | URL | Request, init?: RequestInit) => {
     methods.push(init?.method);
     if (String(url).includes("principalId=prin_caller")) {
       return ceilingPage([]);
diff --git a/packages/access-tools/src/client.ts b/packages/access-tools/src/client.ts
index 92ca1da483..ea0b43f293 100644
--- a/packages/access-tools/src/client.ts
+++ b/packages/access-tools/src/client.ts
@@ -78,10 +78,7 @@ function errorMessageFrom(body: unknown): string | undefined {
   return undefined;
 }
 
-async function readErrorMessage(
-  response: Response,
-  fallback: string,
-): Promise<string> {
+async function readErrorMessage(response: Response, fallback: string): Promise<string> {
   const body: unknown = await response.json().catch(() => undefined);
   return errorMessageFrom(body) ?? fallback;
 }
@@ -108,19 +105,13 @@ async function doRequest(
     headers: { ...authHeaders(config), ...(init.headers ?? {}) },
   });
   if (response.status === 403) {
-    throw new AccessForbiddenError(
-      await readErrorMessage(response, `${failureLabel}: forbidden`),
-    );
+    throw new AccessForbiddenError(await readErrorMessage(response, `${failureLabel}: forbidden`));
   }
   if (response.status === 404) {
-    throw new AccessNotFoundError(
-      await readErrorMessage(response, `${failureLabel}: not found`),
-    );
+    throw new AccessNotFoundError(await readErrorMessage(response, `${failureLabel}: not found`));
   }
   if (!response.ok) {
-    throw new Error(
-      `${failureLabel}: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`${failureLabel}: ${response.status} ${response.statusText}`);
   }
   return response;
 }
@@ -172,9 +163,7 @@ async function readAllPages<T>(
   failureLabel: string,
   parse: (
     body: unknown,
-  ) =>
-    | { data: readonly T[]; nextCursor?: string | null | undefined }
-    | type.errors,
+  ) => { data: readonly T[]; nextCursor?: string | null | undefined } | type.errors,
 ): Promise<readonly T[]> {
   const items: T[] = [];
   let cursor: string | undefined;
@@ -182,12 +171,7 @@ async function readAllPages<T>(
     const params = new URLSearchParams(query);
     params.set("limit", String(PAGE_LIMIT));
     if (cursor !== undefined) params.set("cursor", cursor);
-    const response = await doRequest(
-      config,
-      `${path}?${params.toString()}`,
-      {},
-      failureLabel,
-    );
+    const response = await doRequest(config, `${path}?${params.toString()}`, {}, failureLabel);
     const parsed = parse(await response.json());
     if (parsed instanceof type.errors) {
       throw new Error(
@@ -227,12 +211,8 @@ async function listGrantRows(
     params.set("principalId", filter.principalId);
   }
   if (filter?.resource !== undefined) params.set("resource", filter.resource);
-  return await readAllPages(
-    config,
-    "/grants",
-    params,
-    "Listing grants failed",
-    (body) => GrantsPage(body),
+  return await readAllPages(config, "/grants", params, "Listing grants failed", (body) =>
+    GrantsPage(body),
   );
 }
 
@@ -259,9 +239,7 @@ function toGrantRule(row: GrantRow): GrantRule {
     origin: row.origin,
     conditions: row.conditions ?? null,
     expiresAt:
-      row.expiresAt === undefined || row.expiresAt === null
-        ? null
-        : new Date(row.expiresAt),
+      row.expiresAt === undefined || row.expiresAt === null ? null : new Date(row.expiresAt),
     roleId: row.roleId ?? null,
     principalId: row.principalId,
   };
@@ -313,11 +291,7 @@ export async function grantAccess(
   config: AccessToolClientConfig,
   input: GrantAccessRequest,
 ): Promise<readonly ListedGrant[]> {
-  const outside = await firstActionOutsideCeiling(
-    config,
-    input.resource,
-    input.actions,
-  );
+  const outside = await firstActionOutsideCeiling(config, input.resource, input.actions);
   if (outside !== null) {
     throw new DelegationCeilingError(
       `Cannot grant "${input.resource}" "${outside}": exceeds the caller's own authority`,
@@ -351,9 +325,7 @@ export async function grantAccess(
     );
     const parsed = CreatedGrant(await response.json());
     if (parsed instanceof type.errors) {
-      throw new Error(
-        `Grant-access response did not match the expected shape: ${parsed.summary}`,
-      );
+      throw new Error(`Grant-access response did not match the expected shape: ${parsed.summary}`);
     }
     created.push({
       id: parsed.id,
@@ -366,10 +338,7 @@ export async function grantAccess(
   return created;
 }
 
-export async function revokeAccess(
-  config: AccessToolClientConfig,
-  grantId: string,
-): Promise<void> {
+export async function revokeAccess(config: AccessToolClientConfig, grantId: string): Promise<void> {
   const response = await doRequest(
     config,
     `/grants/${encodeURIComponent(grantId)}`,
@@ -378,13 +347,9 @@ export async function revokeAccess(
   );
   const target = CreatedGrant(await response.json());
   if (target instanceof type.errors) {
-    throw new Error(
-      `Grant lookup response did not match the expected shape: ${target.summary}`,
-    );
+    throw new Error(`Grant lookup response did not match the expected shape: ${target.summary}`);
   }
-  const outside = await firstActionOutsideCeiling(config, target.resource, [
-    target.action,
-  ]);
+  const outside = await firstActionOutsideCeiling(config, target.resource, [target.action]);
   if (outside !== null) {
     throw new DelegationCeilingError(
       `Cannot revoke "${target.resource}" "${target.action}": exceeds the caller's own authority`,
diff --git a/packages/access-tools/src/tool.test.ts b/packages/access-tools/src/tool.test.ts
index d2e159b48b..a52538d142 100644
--- a/packages/access-tools/src/tool.test.ts
+++ b/packages/access-tools/src/tool.test.ts
@@ -1,12 +1,7 @@
 import { expect, test } from "bun:test";
 import type { ToolCall } from "@intx/types/runtime";
 
-import {
-  accessTools,
-  GRANT_ACCESS_TOOL,
-  LIST_GRANTS_TOOL,
-  type WorkflowAccessEnv,
-} from "./tool";
+import { accessTools, GRANT_ACCESS_TOOL, LIST_GRANTS_TOOL, type WorkflowAccessEnv } from "./tool";
 
 function testEnv(): WorkflowAccessEnv {
   return {
@@ -47,8 +42,7 @@ test("a 403 from the stock grant route surfaces as a clear tool error", async ()
       JSON.stringify({
         error: {
           code: "forbidden",
-          message:
-            "Myra can only grant room:read — she herself holds no room:write here",
+          message: "Myra can only grant room:read — she herself holds no room:write here",
         },
       }),
       { status: 403 },
@@ -97,10 +91,9 @@ test("a successful grant_access round-trips into list_grants", async () => {
       posted.push(body);
       // Native `POST /grants` creates exactly one single-action grant and
       // returns the single `GrantResponse` object.
-      return new Response(
-        JSON.stringify(nativeRow(`grant_${posted.length}`, body.action)),
-        { status: 201 },
-      );
+      return new Response(JSON.stringify(nativeRow(`grant_${posted.length}`, body.action)), {
+        status: 201,
+      });
     }
     if (path.endsWith("/grants")) {
       // The caller's own ceiling read: wide enough to delegate anything.
@@ -119,10 +112,7 @@ test("a successful grant_access round-trips into list_grants", async () => {
             posted.length === 0
               ? []
               : posted.map((body, index) =>
-                  nativeRow(
-                    `grant_${index + 1}`,
-                    (body as { action: string }).action,
-                  ),
+                  nativeRow(`grant_${index + 1}`, (body as { action: string }).action),
                 ),
           nextCursor: null,
         }),
diff --git a/packages/access-tools/src/tool.ts b/packages/access-tools/src/tool.ts
index 12c6d9896c..6f5ea12a91 100644
--- a/packages/access-tools/src/tool.ts
+++ b/packages/access-tools/src/tool.ts
@@ -75,18 +75,13 @@ function clientConfig(env: WorkflowAccessEnv): AccessToolClientConfig {
   };
 }
 
-async function runListPrincipals(
-  env: WorkflowAccessEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runListPrincipals(env: WorkflowAccessEnv, call: ToolCall): Promise<ToolResult> {
   try {
     const principals = await listPrincipals(clientConfig(env));
     const content =
       principals.length === 0
         ? "No principals in this tenant."
-        : principals
-            .map((p) => `${p.kind} ${p.refId} — ${p.status} (id: ${p.id})`)
-            .join("\n");
+        : principals.map((p) => `${p.kind} ${p.refId} — ${p.status} (id: ${p.id})`).join("\n");
     return { callId: call.id, isError: false, content };
   } catch (err) {
     reportError(err, {
@@ -97,22 +92,14 @@ async function runListPrincipals(
   }
 }
 
-async function runListGrants(
-  env: WorkflowAccessEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runListGrants(env: WorkflowAccessEnv, call: ToolCall): Promise<ToolResult> {
   const parsed = ListGrantsInput(call.arguments);
   if (parsed instanceof type.errors) {
-    return errorResult(
-      call.id,
-      new Error(`list_grants received invalid input: ${parsed.summary}`),
-    );
+    return errorResult(call.id, new Error(`list_grants received invalid input: ${parsed.summary}`));
   }
   try {
     const grants = await listGrants(clientConfig(env), {
-      ...(parsed.principalId !== undefined
-        ? { principalId: parsed.principalId }
-        : {}),
+      ...(parsed.principalId !== undefined ? { principalId: parsed.principalId } : {}),
       ...(parsed.resource !== undefined ? { resource: parsed.resource } : {}),
     });
     const content =
@@ -131,10 +118,7 @@ async function runListGrants(
   }
 }
 
-async function runGrantAccess(
-  env: WorkflowAccessEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runGrantAccess(env: WorkflowAccessEnv, call: ToolCall): Promise<ToolResult> {
   const parsed = GrantAccessInput(call.arguments);
   if (parsed instanceof type.errors) {
     return errorResult(
@@ -159,10 +143,7 @@ async function runGrantAccess(
   }
 }
 
-async function runRevokeAccess(
-  env: WorkflowAccessEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runRevokeAccess(env: WorkflowAccessEnv, call: ToolCall): Promise<ToolResult> {
   const parsed = RevokeAccessInput(call.arguments);
   if (parsed instanceof type.errors) {
     return errorResult(
@@ -191,13 +172,7 @@ async function runRevokeAccess(
  */
 export const accessTools = defineTool<WorkflowAccessEnv>({
   id: "@corbits/access-tools/access",
-  requires: [
-    "hubAccessUrl",
-    "sidecarToken",
-    "address",
-    "tenantId",
-    "principalId",
-  ],
+  requires: ["hubAccessUrl", "sidecarToken", "address", "tenantId", "principalId"],
   definitions: [
     { name: LIST_PRINCIPALS_TOOL },
     { name: LIST_GRANTS_TOOL },
@@ -230,8 +205,7 @@ export const accessTools = defineTool<WorkflowAccessEnv>({
             },
             resource: {
               type: "string",
-              description:
-                'Only grants for this exact resource string (e.g. "workflow-run:*").',
+              description: 'Only grants for this exact resource string (e.g. "workflow-run:*").',
             },
           },
         },
@@ -250,21 +224,18 @@ export const accessTools = defineTool<WorkflowAccessEnv>({
           properties: {
             principalId: {
               type: "string",
-              description:
-                "The principal id to grant access to (from list_principals).",
+              description: "The principal id to grant access to (from list_principals).",
             },
             resource: {
               type: "string",
               description:
-                'The resource string to grant, e.g. "workflow-run:*" or ' +
-                '"asset:ast_123".',
+                'The resource string to grant, e.g. "workflow-run:*" or ' + '"asset:ast_123".',
             },
             actions: {
               type: "array",
               items: { type: "string" },
               description:
-                'Actions to grant on that resource, e.g. ["read"] or ' +
-                '["read", "write"].',
+                'Actions to grant on that resource, e.g. ["read"] or ' + '["read", "write"].',
             },
             why: {
               type: "string",
@@ -306,10 +277,7 @@ export const accessTools = defineTool<WorkflowAccessEnv>({
           return runRevokeAccess(env, call);
         default:
           return Promise.resolve(
-            errorResult(
-              call.id,
-              new Error(`@corbits/access-tools: unknown tool "${call.name}"`),
-            ),
+            errorResult(call.id, new Error(`@corbits/access-tools: unknown tool "${call.name}"`)),
           );
       }
     },
diff --git a/packages/agent-directory-tools/package.json b/packages/agent-directory-tools/package.json
index 2564368925..15905ee743 100644
--- a/packages/agent-directory-tools/package.json
+++ b/packages/agent-directory-tools/package.json
@@ -1,21 +1,21 @@
 {
   "name": "@corbits/agent-directory-tools",
+  "version": "0.0.7",
   "description": "Myra's manager tools: list_agents and create_agent as an @intx/agent tool bundle — creates a new specialist agent definition in the caller's own tenant and, by default, mints or reopens that specialist's own 1:1 chat. Creation is free; the reactor never parks the create/mint pair",
-  "version": "0.0.6",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "packages/agent-directory-tools"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "packages/agent-directory-tools"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -27,12 +27,12 @@
   "dependencies": {
     "arktype": "catalog:"
   },
-  "peerDependencies": {
-    "@intx/agent": "0.3.0",
-    "@intx/types": "0.3.0"
-  },
   "devDependencies": {
     "@types/bun": "catalog:",
     "typescript": "catalog:"
+  },
+  "peerDependencies": {
+    "@intx/agent": "0.3.0",
+    "@intx/types": "0.3.0"
   }
 }
diff --git a/packages/agent-directory-tools/src/client.test.ts b/packages/agent-directory-tools/src/client.test.ts
index 39faf2bbda..f59dea6171 100644
--- a/packages/agent-directory-tools/src/client.test.ts
+++ b/packages/agent-directory-tools/src/client.test.ts
@@ -52,9 +52,7 @@ test("createAgentDefinition posts to the workflow-agent-directory definitions en
     systemPrompt: "You are a careful research assistant.",
   });
 
-  expect(seenUrl).toBe(
-    "https://hub.example.com/api/workflow-agent-directory/definitions",
-  );
+  expect(seenUrl).toBe("https://hub.example.com/api/workflow-agent-directory/definitions");
   expect(seenHeaders?.["authorization"]).toBe("Bearer sc-token");
   expect(seenHeaders?.["x-workflow-run-address"]).toBe("run_1@workflow");
   expect(seenBody).toEqual({
@@ -153,22 +151,16 @@ test("createAgentDefinition throws an honest error on a non-4xx HTTP failure", a
 
 test("listAgentDefinitions returns the definitions array", async () => {
   const fetchImpl = (async (url: string | URL) => {
-    expect(String(url)).toBe(
-      "https://hub.example.com/api/workflow-agent-directory/definitions",
-    );
+    expect(String(url)).toBe("https://hub.example.com/api/workflow-agent-directory/definitions");
     return new Response(
       JSON.stringify({
-        definitions: [
-          { id: "def_1", name: "Research Buddy", description: null },
-        ],
+        definitions: [{ id: "def_1", name: "Research Buddy", description: null }],
       }),
     );
   }) as unknown as typeof fetch;
 
   const definitions = await listAgentDefinitions(testConfig(fetchImpl));
-  expect(definitions).toEqual([
-    { id: "def_1", name: "Research Buddy", description: null },
-  ]);
+  expect(definitions).toEqual([{ id: "def_1", name: "Research Buddy", description: null }]);
 });
 
 test("inviteParticipant posts to the workflow-chat participants invite endpoint", async () => {
@@ -188,9 +180,7 @@ test("inviteParticipant posts to the workflow-chat participants invite endpoint"
   }) as unknown as typeof fetch;
 
   const result = await inviteParticipant(testConfig(fetchImpl), "def_1");
-  expect(seenUrl).toBe(
-    "https://hub.example.com/api/workflow-chat/participants/invite",
-  );
+  expect(seenUrl).toBe("https://hub.example.com/api/workflow-chat/participants/invite");
   expect(seenBody).toEqual({ definitionId: "def_1" });
   expect(result.address).toBe("ins_1@acme.example");
 });
@@ -208,9 +198,9 @@ test("inviteParticipant throws NoOwnChannelError on a 404", async () => {
       { status: 404 },
     )) as unknown as typeof fetch;
 
-  await expect(
-    inviteParticipant(testConfig(fetchImpl), "def_1"),
-  ).rejects.toBeInstanceOf(NoOwnChannelError);
+  await expect(inviteParticipant(testConfig(fetchImpl), "def_1")).rejects.toBeInstanceOf(
+    NoOwnChannelError,
+  );
 });
 
 test("mintAgentDm posts to the workflow-chat participants mint-dm endpoint", async () => {
@@ -231,9 +221,7 @@ test("mintAgentDm posts to the workflow-chat participants mint-dm endpoint", asy
   }) as unknown as typeof fetch;
 
   const result = await mintAgentDm(testConfig(fetchImpl), "def_1");
-  expect(seenUrl).toBe(
-    "https://hub.example.com/api/workflow-chat/participants/mint-dm",
-  );
+  expect(seenUrl).toBe("https://hub.example.com/api/workflow-chat/participants/mint-dm");
   expect(seenBody).toEqual({ definitionId: "def_1" });
   expect(result.workbenchId).toBe("wb_1");
   expect(result.address).toBe("ins_1@acme.example");
@@ -254,7 +242,7 @@ test("mintAgentDm throws NoOwnWorkbenchError on a 404", async () => {
       { status: 404 },
     )) as unknown as typeof fetch;
 
-  await expect(
-    mintAgentDm(testConfig(fetchImpl), "def_1"),
-  ).rejects.toBeInstanceOf(NoOwnWorkbenchError);
+  await expect(mintAgentDm(testConfig(fetchImpl), "def_1")).rejects.toBeInstanceOf(
+    NoOwnWorkbenchError,
+  );
 });
diff --git a/packages/agent-directory-tools/src/client.ts b/packages/agent-directory-tools/src/client.ts
index c9f897f9c4..d5b054e4d9 100644
--- a/packages/agent-directory-tools/src/client.ts
+++ b/packages/agent-directory-tools/src/client.ts
@@ -76,9 +76,7 @@ export interface MintedAgentDm {
   readonly handle: string;
 }
 
-function authHeaders(
-  config: AgentDirectoryToolClientConfig,
-): Record<string, string> {
+function authHeaders(config: AgentDirectoryToolClientConfig): Record<string, string> {
   return {
     authorization: `Bearer ${config.sidecarToken}`,
     "x-workflow-run-address": config.address,
@@ -93,21 +91,14 @@ function errorMessageFrom(body: unknown): string | undefined {
     return undefined;
   }
   const error = (body as { error: unknown }).error;
-  if (
-    error === null ||
-    typeof error !== "object" ||
-    !("userMessage" in error)
-  ) {
+  if (error === null || typeof error !== "object" || !("userMessage" in error)) {
     return undefined;
   }
   const userMessage = (error as { userMessage: unknown }).userMessage;
   return typeof userMessage === "string" ? userMessage : undefined;
 }
 
-async function readErrorMessage(
-  response: Response,
-  fallback: string,
-): Promise<string> {
+async function readErrorMessage(response: Response, fallback: string): Promise<string> {
   const body: unknown = await response.json().catch(() => undefined);
   return errorMessageFrom(body) ?? fallback;
 }
@@ -143,23 +134,16 @@ export async function createAgentDefinition(
   );
   if (response.status === 400 || response.status === 409) {
     throw new CreateAgentDefinitionError(
-      await readErrorMessage(
-        response,
-        `Creating the agent failed: ${response.status}`,
-      ),
+      await readErrorMessage(response, `Creating the agent failed: ${response.status}`),
     );
   }
   if (!response.ok) {
-    throw new Error(
-      `Creating the agent failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`Creating the agent failed: ${response.status} ${response.statusText}`);
   }
   const body: unknown = await response.json();
   const parsed = CreatedAgentDefinitionResponse(body);
   if (parsed instanceof type.errors) {
-    throw new Error(
-      `Create-agent response did not match the expected shape: ${parsed.summary}`,
-    );
+    throw new Error(`Create-agent response did not match the expected shape: ${parsed.summary}`);
   }
   return parsed;
 }
@@ -181,16 +165,12 @@ export async function listAgentDefinitions(
     { headers: authHeaders(config) },
   );
   if (!response.ok) {
-    throw new Error(
-      `Listing agents failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`Listing agents failed: ${response.status} ${response.statusText}`);
   }
   const body: unknown = await response.json();
   const parsed = ListedAgentDefinitionsResponse(body);
   if (parsed instanceof type.errors) {
-    throw new Error(
-      `List-agents response did not match the expected shape: ${parsed.summary}`,
-    );
+    throw new Error(`List-agents response did not match the expected shape: ${parsed.summary}`);
   }
   return parsed.definitions;
 }
@@ -213,33 +193,23 @@ export async function inviteParticipant(
   definitionId: string,
 ): Promise<InvitedParticipant> {
   const doFetch = config.fetchImpl ?? fetch;
-  const response = await doFetch(
-    `${config.hubChatUrl}/api/workflow-chat/participants/invite`,
-    {
-      method: "POST",
-      headers: { ...authHeaders(config), "content-type": "application/json" },
-      body: JSON.stringify({ definitionId }),
-    },
-  );
+  const response = await doFetch(`${config.hubChatUrl}/api/workflow-chat/participants/invite`, {
+    method: "POST",
+    headers: { ...authHeaders(config), "content-type": "application/json" },
+    body: JSON.stringify({ definitionId }),
+  });
   if (response.status === 404) {
     throw new NoOwnChannelError(
-      await readErrorMessage(
-        response,
-        "The caller has no channel of its own to invite into",
-      ),
+      await readErrorMessage(response, "The caller has no channel of its own to invite into"),
     );
   }
   if (!response.ok) {
-    throw new Error(
-      `Inviting the agent failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`Inviting the agent failed: ${response.status} ${response.statusText}`);
   }
   const body: unknown = await response.json();
   const parsed = InvitedParticipantResponse(body);
   if (parsed instanceof type.errors) {
-    throw new Error(
-      `Invite response did not match the expected shape: ${parsed.summary}`,
-    );
+    throw new Error(`Invite response did not match the expected shape: ${parsed.summary}`);
   }
   return parsed;
 }
@@ -263,33 +233,23 @@ export async function mintAgentDm(
   definitionId: string,
 ): Promise<MintedAgentDm> {
   const doFetch = config.fetchImpl ?? fetch;
-  const response = await doFetch(
-    `${config.hubChatUrl}/api/workflow-chat/participants/mint-dm`,
-    {
-      method: "POST",
-      headers: { ...authHeaders(config), "content-type": "application/json" },
-      body: JSON.stringify({ definitionId }),
-    },
-  );
+  const response = await doFetch(`${config.hubChatUrl}/api/workflow-chat/participants/mint-dm`, {
+    method: "POST",
+    headers: { ...authHeaders(config), "content-type": "application/json" },
+    body: JSON.stringify({ definitionId }),
+  });
   if (response.status === 404) {
     throw new NoOwnWorkbenchError(
-      await readErrorMessage(
-        response,
-        "The caller has no own workbench to mint a DM against",
-      ),
+      await readErrorMessage(response, "The caller has no own workbench to mint a DM against"),
     );
   }
   if (!response.ok) {
-    throw new Error(
-      `Minting the agent DM failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`Minting the agent DM failed: ${response.status} ${response.statusText}`);
   }
   const body: unknown = await response.json();
   const parsed = MintedAgentDmResponse(body);
   if (parsed instanceof type.errors) {
-    throw new Error(
-      `Mint-DM response did not match the expected shape: ${parsed.summary}`,
-    );
+    throw new Error(`Mint-DM response did not match the expected shape: ${parsed.summary}`);
   }
   return parsed;
 }
diff --git a/packages/agent-directory-tools/src/tool.test.ts b/packages/agent-directory-tools/src/tool.test.ts
index 3f5365281b..76eba550a8 100644
--- a/packages/agent-directory-tools/src/tool.test.ts
+++ b/packages/agent-directory-tools/src/tool.test.ts
@@ -23,10 +23,7 @@ function callFor(name: string, args: Record<string, unknown>): ToolCall {
 
 test("declares exactly list_agents and create_agent", () => {
   const bundle = agentDirectoryTools(testEnv());
-  expect(bundle.definitions.map((d) => d.name)).toEqual([
-    LIST_AGENTS_TOOL,
-    CREATE_AGENT_TOOL,
-  ]);
+  expect(bundle.definitions.map((d) => d.name)).toEqual([LIST_AGENTS_TOOL, CREATE_AGENT_TOOL]);
 });
 
 test("requires the sanctioned env keys", () => {
@@ -47,13 +44,9 @@ test("list_agents and create_agent declare no approval key", () => {
 
 test("create_agent's description does not say a human must approve before anything is created", () => {
   const bundle = agentDirectoryTools(testEnv());
-  const definition = bundle.definitions.find(
-    (d) => d.name === CREATE_AGENT_TOOL,
-  );
+  const definition = bundle.definitions.find((d) => d.name === CREATE_AGENT_TOOL);
   expect(definition).toBeDefined();
-  expect((definition as { description: string }).description).not.toMatch(
-    /human must approve/i,
-  );
+  expect((definition as { description: string }).description).not.toMatch(/human must approve/i);
 });
 
 test("create_agent's modelPreference field tells the model to omit it rather than guess a name", () => {
@@ -63,8 +56,7 @@ test("create_agent's modelPreference field tells the model to omit it rather tha
       properties: { modelPreference: { description: string } };
     };
   };
-  const description =
-    definition.inputSchema.properties.modelPreference.description;
+  const description = definition.inputSchema.properties.modelPreference.description;
   expect(description).toMatch(/omit/i);
   expect(description).toMatch(/do not (guess|invent)/i);
 });
@@ -113,10 +105,7 @@ test("list_agents reports the tenant's taskable agents", async () => {
     )) as unknown as typeof fetch;
   try {
     const bundle = agentDirectoryTools(testEnv());
-    const result = await bundle.run(
-      callFor(LIST_AGENTS_TOOL, {}),
-      new AbortController().signal,
-    );
+    const result = await bundle.run(callFor(LIST_AGENTS_TOOL, {}), new AbortController().signal);
     expect(result.isError).toBeFalsy();
     expect(result.content).toContain("Research Buddy");
     expect(result.content).toContain("Answers research questions");
@@ -128,15 +117,10 @@ test("list_agents reports the tenant's taskable agents", async () => {
 test("list_agents reports honestly when the workbench has no other agents", async () => {
   const originalFetch = globalThis.fetch;
   globalThis.fetch = (async () =>
-    new Response(
-      JSON.stringify({ definitions: [] }),
-    )) as unknown as typeof fetch;
+    new Response(JSON.stringify({ definitions: [] }))) as unknown as typeof fetch;
   try {
     const bundle = agentDirectoryTools(testEnv());
-    const result = await bundle.run(
-      callFor(LIST_AGENTS_TOOL, {}),
-      new AbortController().signal,
-    );
+    const result = await bundle.run(callFor(LIST_AGENTS_TOOL, {}), new AbortController().signal);
     expect(result.isError).toBeFalsy();
     expect(result.content).toMatch(/No other agents/);
   } finally {
@@ -187,12 +171,8 @@ test("create_agent creates then mints its own DM by default, in one call sequenc
     expect(result.content).toMatch(/opened its own chat/);
     expect(result.content).toMatch(/workbenchId/);
     expect(seenUrls.some((url) => url.endsWith("/definitions"))).toBe(true);
-    expect(seenUrls.some((url) => url.endsWith("/participants/mint-dm"))).toBe(
-      true,
-    );
-    expect(seenUrls.some((url) => url.endsWith("/participants/invite"))).toBe(
-      false,
-    );
+    expect(seenUrls.some((url) => url.endsWith("/participants/mint-dm"))).toBe(true);
+    expect(seenUrls.some((url) => url.endsWith("/participants/invite"))).toBe(false);
   } finally {
     globalThis.fetch = originalFetch;
   }
@@ -228,12 +208,8 @@ test("create_agent with invite: false creates but never calls mint-dm or invite"
     );
     expect(result.isError).toBeFalsy();
     expect(result.content).toMatch(/Created "Research Buddy"/);
-    expect(seenUrls.some((url) => url.endsWith("/participants/invite"))).toBe(
-      false,
-    );
-    expect(seenUrls.some((url) => url.endsWith("/participants/mint-dm"))).toBe(
-      false,
-    );
+    expect(seenUrls.some((url) => url.endsWith("/participants/invite"))).toBe(false);
+    expect(seenUrls.some((url) => url.endsWith("/participants/mint-dm"))).toBe(false);
   } finally {
     globalThis.fetch = originalFetch;
   }
@@ -323,9 +299,7 @@ test("create_agent maps modelPreference to the create route's model field", asyn
       }),
       new AbortController().signal,
     );
-    expect((seenBody as { model?: string }).model).toBe(
-      "anthropic/claude-sonnet-5",
-    );
+    expect((seenBody as { model?: string }).model).toBe("anthropic/claude-sonnet-5");
   } finally {
     globalThis.fetch = originalFetch;
   }
diff --git a/packages/agent-directory-tools/src/tool.ts b/packages/agent-directory-tools/src/tool.ts
index 073f3ac6be..88e6122f21 100644
--- a/packages/agent-directory-tools/src/tool.ts
+++ b/packages/agent-directory-tools/src/tool.ts
@@ -63,9 +63,7 @@ function errorResult(callId: string, err: unknown): ToolResult {
   };
 }
 
-function clientConfig(
-  env: WorkflowAgentDirectoryEnv,
-): AgentDirectoryToolClientConfig {
+function clientConfig(env: WorkflowAgentDirectoryEnv): AgentDirectoryToolClientConfig {
   return {
     hubAgentDirectoryUrl: env.hubAgentDirectoryUrl,
     hubChatUrl: env.hubChatUrl,
@@ -90,9 +88,7 @@ function handleFromAgentName(name: string): string {
   return slug.length > 0 ? slug : "agent";
 }
 
-function toCreateAgentDefinitionRequest(
-  input: CreateAgentInput,
-): CreateAgentDefinitionRequest {
+function toCreateAgentDefinitionRequest(input: CreateAgentInput): CreateAgentDefinitionRequest {
   const request: {
     name: string;
     handle: string;
@@ -105,8 +101,7 @@ function toCreateAgentDefinitionRequest(
     handle: handleFromAgentName(input.name),
     systemPrompt: input.systemPrompt,
   };
-  if (input.modelPreference !== undefined)
-    request.model = input.modelPreference;
+  if (input.modelPreference !== undefined) request.model = input.modelPreference;
   if (input.skills !== undefined) request.skills = input.skills;
   if (input.toolPackagePins !== undefined) {
     request.toolPackagePins = input.toolPackagePins;
@@ -114,10 +109,7 @@ function toCreateAgentDefinitionRequest(
   return request;
 }
 
-async function runListAgents(
-  env: WorkflowAgentDirectoryEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runListAgents(env: WorkflowAgentDirectoryEnv, call: ToolCall): Promise<ToolResult> {
   try {
     const definitions = await listAgentDefinitions(clientConfig(env));
     const content =
@@ -136,10 +128,7 @@ async function runListAgents(
   }
 }
 
-async function runCreateAgent(
-  env: WorkflowAgentDirectoryEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runCreateAgent(env: WorkflowAgentDirectoryEnv, call: ToolCall): Promise<ToolResult> {
   const parsed = CreateAgentInput(call.arguments);
   if (parsed instanceof type.errors) {
     return errorResult(
@@ -240,8 +229,7 @@ export const agentDirectoryTools = defineTool<WorkflowAgentDirectoryEnv>({
           properties: {
             name: {
               type: "string",
-              description:
-                'The new agent\'s display name, e.g. "Release Notes Writer".',
+              description: 'The new agent\'s display name, e.g. "Release Notes Writer".',
             },
             systemPrompt: {
               type: "string",
@@ -295,9 +283,7 @@ export const agentDirectoryTools = defineTool<WorkflowAgentDirectoryEnv>({
           return Promise.resolve(
             errorResult(
               call.id,
-              new Error(
-                `@corbits/agent-directory-tools: unknown tool "${call.name}"`,
-              ),
+              new Error(`@corbits/agent-directory-tools: unknown tool "${call.name}"`),
             ),
           );
       }
diff --git a/packages/agent-directory/package.json b/packages/agent-directory/package.json
index 6cacf34843..35b49652c4 100644
--- a/packages/agent-directory/package.json
+++ b/packages/agent-directory/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/agent-directory",
+  "version": "0.0.1",
   "private": true,
   "description": "Creates agent definitions as workflow assets the tenant can browse, invite, and launch",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
@@ -23,8 +23,8 @@
     "@corbits/workflows": "workspace:*",
     "@intx/agent": "workspace:*",
     "@intx/db": "workspace:*",
-    "@intx/hub-common": "0.3.0",
     "@intx/hub-api": "workspace:*",
+    "@intx/hub-common": "0.3.0",
     "@intx/hub-sessions": "workspace:*",
     "@intx/log": "0.3.0",
     "@intx/types": "workspace:*",
diff --git a/packages/agent-directory/src/agent-definition-draft-routes.ts b/packages/agent-directory/src/agent-definition-draft-routes.ts
index 1ab3b82dc3..4aca8767cb 100644
--- a/packages/agent-directory/src/agent-definition-draft-routes.ts
+++ b/packages/agent-directory/src/agent-definition-draft-routes.ts
@@ -100,9 +100,7 @@ export function createAgentDefinitionDraftRoutes(
           503,
         );
       }
-      const body = CreateAgentDefinitionDraftBody(
-        await c.req.json().catch(() => undefined),
-      );
+      const body = CreateAgentDefinitionDraftBody(await c.req.json().catch(() => undefined));
       if (body instanceof type.errors) {
         return c.json(
           makeErrorEnvelope({
diff --git a/packages/agent-directory/src/agent-definition-drafting.test.ts b/packages/agent-directory/src/agent-definition-drafting.test.ts
index 309ef09c40..462a55fa40 100644
--- a/packages/agent-directory/src/agent-definition-drafting.test.ts
+++ b/packages/agent-directory/src/agent-definition-drafting.test.ts
@@ -95,15 +95,15 @@ describe("parseAgentDefinitionDraftReply", () => {
   });
 
   test("rejects a reply missing the required systemPrompt", () => {
-    expect(() =>
-      parseAgentDefinitionDraftReply(JSON.stringify({ description: "x" })),
-    ).toThrow(AgentDefinitionDraftReplyUnparseableError);
+    expect(() => parseAgentDefinitionDraftReply(JSON.stringify({ description: "x" }))).toThrow(
+      AgentDefinitionDraftReplyUnparseableError,
+    );
   });
 
   test("rejects an empty systemPrompt", () => {
-    expect(() =>
-      parseAgentDefinitionDraftReply(JSON.stringify({ systemPrompt: "" })),
-    ).toThrow(AgentDefinitionDraftReplyUnparseableError);
+    expect(() => parseAgentDefinitionDraftReply(JSON.stringify({ systemPrompt: "" }))).toThrow(
+      AgentDefinitionDraftReplyUnparseableError,
+    );
   });
 
   test("rejects a toolPackagePins array over the cardinality bound", () => {
@@ -277,9 +277,7 @@ describe("createMyraAgentDefinitionDrafting", () => {
         },
       }),
     );
-    await expect(drafting.propose(INPUT)).rejects.toBeInstanceOf(
-      OneShotRunTimedOutError,
-    );
+    await expect(drafting.propose(INPUT)).rejects.toBeInstanceOf(OneShotRunTimedOutError);
   });
 
   test("a name-only propose (no purpose) still runs the drafting flow, never a template", async () => {
diff --git a/packages/agent-directory/src/agent-definition-drafting.ts b/packages/agent-directory/src/agent-definition-drafting.ts
index a004ed8ae9..0944940f11 100644
--- a/packages/agent-directory/src/agent-definition-drafting.ts
+++ b/packages/agent-directory/src/agent-definition-drafting.ts
@@ -25,11 +25,7 @@ import { type } from "arktype";
 import type { OneShotReply } from "./one-shot-prompt";
 
 import { BoundedDedupedToolPackageNameArray } from "./create-bounds";
-import {
-  assembleInventory,
-  type InventorySources,
-  type PlannerInventory,
-} from "./inventory";
+import { assembleInventory, type InventorySources, type PlannerInventory } from "./inventory";
 
 const DEFAULT_DRAFTING_TIMEOUT_MS = 60_000;
 const MAX_REPLY_EXCERPT = 400;
@@ -113,9 +109,7 @@ export type AgentDefinitionDraft = {
 };
 
 function excerpt(raw: string): string {
-  return raw.length > MAX_REPLY_EXCERPT
-    ? `${raw.slice(0, MAX_REPLY_EXCERPT)}…`
-    : raw;
+  return raw.length > MAX_REPLY_EXCERPT ? `${raw.slice(0, MAX_REPLY_EXCERPT)}…` : raw;
 }
 
 export class AgentDefinitionDraftReplyUnparseableError extends Error {
@@ -150,9 +144,7 @@ export class MyraAgentDefinitionDraftingUnavailableError extends Error {
  * that doesn't match, an empty/oversized system prompt or description,
  * or a `toolPackagePins` array over cardinality/with a duplicate. Never
  * partially trusts a near-miss. */
-export function parseAgentDefinitionDraftReply(
-  raw: string,
-): AgentDefinitionDraftReply {
+export function parseAgentDefinitionDraftReply(raw: string): AgentDefinitionDraftReply {
   let json: unknown;
   try {
     json = JSON.parse(raw);
@@ -186,9 +178,7 @@ export function validateAgentDefinitionDraftReplyAgainstInventory(
   inventory: PlannerInventory,
 ): AgentDefinitionDraft {
   if (reply.modelPreference !== undefined) {
-    const known = inventory.models.some(
-      (model) => model.canonicalName === reply.modelPreference,
-    );
+    const known = inventory.models.some((model) => model.canonicalName === reply.modelPreference);
     if (!known) {
       throw new AgentDefinitionDraftReferenceOutOfInventoryError(
         "modelPreference",
@@ -197,40 +187,27 @@ export function validateAgentDefinitionDraftReplyAgainstInventory(
     }
   }
 
-  const toolPackageNames = new Set(
-    inventory.toolPackages.map((entry) => entry.name),
-  );
+  const toolPackageNames = new Set(inventory.toolPackages.map((entry) => entry.name));
   for (const pin of reply.toolPackagePins ?? []) {
     if (!toolPackageNames.has(pin)) {
-      throw new AgentDefinitionDraftReferenceOutOfInventoryError(
-        "toolPackagePins",
-        pin,
-      );
+      throw new AgentDefinitionDraftReferenceOutOfInventoryError("toolPackagePins", pin);
     }
   }
 
   const skillNames = new Set(inventory.skills.map((skill) => skill.name));
   for (const skill of reply.skills ?? []) {
     if (!skillNames.has(skill)) {
-      throw new AgentDefinitionDraftReferenceOutOfInventoryError(
-        "skills",
-        skill,
-      );
+      throw new AgentDefinitionDraftReferenceOutOfInventoryError("skills", skill);
     }
   }
 
   const base: AgentDefinitionDraft = {
     systemPrompt: reply.systemPrompt,
-    toolPackagePins: withDefaultCapabilityRequestPin(
-      reply.toolPackagePins ?? [],
-      inventory,
-    ),
+    toolPackagePins: withDefaultCapabilityRequestPin(reply.toolPackagePins ?? [], inventory),
     skills: reply.skills ?? [],
   };
   const withDescription =
-    reply.description !== undefined
-      ? { ...base, description: reply.description }
-      : base;
+    reply.description !== undefined ? { ...base, description: reply.description } : base;
   return reply.modelPreference !== undefined
     ? { ...withDescription, modelPreference: reply.modelPreference }
     : withDescription;
@@ -290,9 +267,7 @@ function buildAgentDefinitionDraftPrompt(
           "before anything is deployed.",
         ]
       : [
-          "A person is creating a new agent named " +
-            JSON.stringify(name) +
-            ".",
+          "A person is creating a new agent named " + JSON.stringify(name) + ".",
           "They described what it should do like this, for you to turn into a",
           "starting system prompt for review before anything is deployed:",
           "",
@@ -387,11 +362,7 @@ export function createMyraAgentDefinitionDrafting(
         principalId,
       });
 
-      const draftPrompt = buildAgentDefinitionDraftPrompt(
-        name,
-        purpose,
-        inventory,
-      );
+      const draftPrompt = buildAgentDefinitionDraftPrompt(name, purpose, inventory);
 
       const reply = await deps.runner.run({
         tenantId,
@@ -402,10 +373,7 @@ export function createMyraAgentDefinitionDrafting(
       });
 
       const parsed = parseAgentDefinitionDraftReply(reply.content);
-      return validateAgentDefinitionDraftReplyAgainstInventory(
-        parsed,
-        inventory,
-      );
+      return validateAgentDefinitionDraftReplyAgainstInventory(parsed, inventory);
     },
   };
 }
diff --git a/packages/agent-directory/src/agent-workflow.test.ts b/packages/agent-directory/src/agent-workflow.test.ts
index 9106f837ff..d1fd4f2e96 100644
--- a/packages/agent-directory/src/agent-workflow.test.ts
+++ b/packages/agent-directory/src/agent-workflow.test.ts
@@ -7,10 +7,7 @@ import { describe, expect, test } from "bun:test";
 import path from "node:path";
 import type { DB } from "@intx/db";
 import type { AssetService } from "@intx/hub-sessions";
-import {
-  CORBITS_TOOL_PACKAGE_DIRS,
-  packToolPackageTarball,
-} from "@corbits/tool-registry-publish";
+import { CORBITS_TOOL_PACKAGE_DIRS, packToolPackageTarball } from "@corbits/tool-registry-publish";
 import {
   buildAgentDefinitionWorkflow,
   createAgentDefinitionCore,
@@ -26,8 +23,7 @@ describe("SKILLS_TOOL_PACKAGE_PIN", () => {
     // Assert against what the registry actually carries: the packed
     // tarball for the pinned package, not a source-tree import.
     const dir = CORBITS_TOOL_PACKAGE_DIRS.find(
-      (candidate) =>
-        path.basename(candidate) === SKILLS_TOOL_PACKAGE_PIN.name.split("/")[1],
+      (candidate) => path.basename(candidate) === SKILLS_TOOL_PACKAGE_PIN.name.split("/")[1],
     );
     expect(dir).toBeDefined();
     const tarball = await packToolPackageTarball(dir as string);
@@ -79,10 +75,7 @@ describe("withAgentToolPackagePin", () => {
       version: "1.2.3",
     });
     const definition = JSON.parse(nextWorkflowJson) as {
-      steps: Record<
-        string,
-        { agent: { toolPackagePins?: { name: string; version: string }[] } }
-      >;
+      steps: Record<string, { agent: { toolPackagePins?: { name: string; version: string }[] } }>;
     };
     const [step] = Object.values(definition.steps);
     expect(step?.agent.toolPackagePins).toContainEqual({
@@ -117,10 +110,7 @@ describe("readPinnedSkillNames", () => {
       { name: "web-research", description: "Researches the web." },
       { name: "long-form-write", description: "Writes long documents." },
     ]);
-    expect(readPinnedSkillNames(workflowJson)).toEqual([
-      "web-research",
-      "long-form-write",
-    ]);
+    expect(readPinnedSkillNames(workflowJson)).toEqual(["web-research", "long-form-write"]);
   });
 
   test("unpinning everything reads back no names", () => {
diff --git a/packages/agent-directory/src/agent-workflow.ts b/packages/agent-directory/src/agent-workflow.ts
index 947efa52e7..143b9aeda2 100644
--- a/packages/agent-directory/src/agent-workflow.ts
+++ b/packages/agent-directory/src/agent-workflow.ts
@@ -30,10 +30,7 @@ import {
 import { type } from "arktype";
 import semver from "semver";
 
-import {
-  writeAndDeployAgentDefinition,
-  type AgentDefinitionDeployer,
-} from "./definition-asset";
+import { writeAndDeployAgentDefinition, type AgentDefinitionDeployer } from "./definition-asset";
 import { createPinnedVersionResolver } from "./tool-package-version";
 
 export const AGENT_DEFINITION_STEP_ID = "agent";
@@ -46,7 +43,7 @@ export const AGENT_DEFINITION_STEP_ID = "agent";
  */
 export const SKILLS_TOOL_PACKAGE_PIN = {
   name: "@corbits/tools-skills",
-  version: "0.0.3",
+  version: "0.0.4",
 } as const;
 
 /**
@@ -90,9 +87,7 @@ function withSkillsToolPin(
   existing: AgentToolPackagePins,
   pinsSkills: boolean,
 ): AgentToolPackagePins {
-  const others = existing.filter(
-    (pin) => pin.name !== SKILLS_TOOL_PACKAGE_PIN.name,
-  );
+  const others = existing.filter((pin) => pin.name !== SKILLS_TOOL_PACKAGE_PIN.name);
   return pinsSkills ? [...others, { ...SKILLS_TOOL_PACKAGE_PIN }] : others;
 }
 
@@ -114,10 +109,7 @@ export function reindexPinnedSkills(
     );
   }
   for (const step of Object.values(definition.steps)) {
-    step.agent.systemPrompt = withAvailableSkills(
-      step.agent.systemPrompt,
-      entries,
-    );
+    step.agent.systemPrompt = withAvailableSkills(step.agent.systemPrompt, entries);
     step.agent.toolPackagePins = withSkillsToolPin(
       step.agent.toolPackagePins ?? [],
       entries.length > 0,
@@ -152,10 +144,7 @@ export function readPinnedSkillNames(workflowJson: string): readonly string[] {
   // Stanza lines render as `- name: description`, and skill names can
   // never contain a space or a colon, so the first colon on a `- ` line
   // always ends the name — even when the description itself holds colons.
-  const body = step.agent.systemPrompt.slice(
-    open + AVAILABLE_SKILLS_OPEN_TAG.length,
-    close,
-  );
+  const body = step.agent.systemPrompt.slice(open + AVAILABLE_SKILLS_OPEN_TAG.length, close);
   const names: string[] = [];
   for (const line of body.split("\n")) {
     const trimmed = line.trim();
@@ -192,10 +181,7 @@ export function readAgentSystemPrompt(workflowJson: string): string {
 /** Replaces a definition's system prompt in its serialized
  * `workflow.json`, leaving every other field — the trigger, timeouts,
  * inference sources, tool-package pins — untouched. */
-export function withAgentSystemPrompt(
-  workflowJson: string,
-  systemPrompt: string,
-): string {
+export function withAgentSystemPrompt(workflowJson: string, systemPrompt: string): string {
   const raw: unknown = JSON.parse(workflowJson);
   const definition = DefinitionWithAgentSteps(raw);
   if (definition instanceof type.errors) {
@@ -224,9 +210,7 @@ export type AgentDefinitionCapabilities = {
  * serialized `workflow.json` — the same fields `withAgentToolPackagePin`/
  * `withAgentModel` write, read back for the settings surface's
  * "Capabilities" list and for merging an additive pin. */
-export function readAgentCapabilities(
-  workflowJson: string,
-): AgentDefinitionCapabilities {
+export function readAgentCapabilities(workflowJson: string): AgentDefinitionCapabilities {
   const raw: unknown = JSON.parse(workflowJson);
   const definition = DefinitionWithAgentSteps(raw);
   if (definition instanceof type.errors) {
@@ -281,9 +265,7 @@ export function withAgentToolPackagePin(
 ): string {
   const parsedPin = NonWildcardToolPackagePin(pin);
   if (parsedPin instanceof type.errors) {
-    throw new Error(
-      `withAgentToolPackagePin: pin must be ${parsedPin.summary}`,
-    );
+    throw new Error(`withAgentToolPackagePin: pin must be ${parsedPin.summary}`);
   }
   const raw: unknown = JSON.parse(workflowJson);
   const definition = DefinitionWithAgentSteps(raw);
@@ -394,9 +376,7 @@ export function buildAgentDefinitionWorkflow(
     throw new Error("buildAgentDefinitionWorkflow requires a non-empty handle");
   }
   if (input.systemPrompt === "") {
-    throw new Error(
-      "buildAgentDefinitionWorkflow requires a non-empty systemPrompt",
-    );
+    throw new Error("buildAgentDefinitionWorkflow requires a non-empty systemPrompt");
   }
   const agent = defineAgent({
     id: AGENT_DEFINITION_STEP_ID,
@@ -410,10 +390,7 @@ export function buildAgentDefinitionWorkflow(
       // provider fresh against the tenant catalog (see
       // `resolveDefinitionSources`), so a placeholder here costs
       // nothing real.
-      sources:
-        input.model !== undefined
-          ? [{ provider: "catalog", model: input.model }]
-          : [],
+      sources: input.model !== undefined ? [{ provider: "catalog", model: input.model }] : [],
     },
   });
   const trigger = {
@@ -430,8 +407,7 @@ export function buildAgentDefinitionWorkflow(
       triggers: "unbounded",
     }),
   };
-  return input.credentialBindings !== undefined &&
-    input.credentialBindings.length > 0
+  return input.credentialBindings !== undefined && input.credentialBindings.length > 0
     ? defineWorkflow({
         id: `wf_agent_${input.handle}`,
         trigger,
@@ -455,9 +431,7 @@ const AGENT_DEFINITION_TURN_TIMEOUT_MS = 2 * 60 * 1000;
  * copy stays consistent with that convention rather than reaching
  * into another package's internals.
  */
-export function serializeAgentDefinitionWorkflow(
-  definition: WorkflowDefinition,
-): string {
+export function serializeAgentDefinitionWorkflow(definition: WorkflowDefinition): string {
   assertJsonPortable(definition, "definition");
   return JSON.stringify(definition);
 }
@@ -491,9 +465,7 @@ export type CreateAgentDefinitionCoreDeps = {
    * launch time. Omitted, or a tenant with no connected provider,
    * leaves the definition exactly as empty as before this dep existed.
    */
-  readonly tenantDefaultModel?: (
-    tenantId: string,
-  ) => Promise<string | undefined>;
+  readonly tenantDefaultModel?: (tenantId: string) => Promise<string | undefined>;
 };
 
 export type CreateAgentDefinitionCoreInput = {
@@ -561,12 +533,9 @@ export async function createAgentDefinitionCore(
     description: input.description ?? "",
     systemPrompt: input.systemPrompt,
   };
-  const model =
-    input.model ?? (await deps.tenantDefaultModel?.(input.tenantId));
+  const model = input.model ?? (await deps.tenantDefaultModel?.(input.tenantId));
   const definition = buildAgentDefinitionWorkflow(
-    model !== undefined
-      ? { ...baseDefinitionInput, model }
-      : baseDefinitionInput,
+    model !== undefined ? { ...baseDefinitionInput, model } : baseDefinitionInput,
   );
   // The definition's own system prompt is what the caller supplied; the
   // pinned-skills index and any directly-named tool-package pins are
@@ -574,11 +543,7 @@ export async function createAgentDefinitionCore(
   // describes exactly what the definition currently carries.
   let workflowJson = reindexPinnedSkills(
     serializeAgentDefinitionWorkflow(definition),
-    await deps.skillIndex.resolve(
-      input.tenantId,
-      input.principalId,
-      input.skills,
-    ),
+    await deps.skillIndex.resolve(input.tenantId, input.principalId, input.skills),
   );
   // One resolver shared across every named pin: it loads the tenant's
   // registry asset and tarball listing at most once, so a five-pin
@@ -604,10 +569,7 @@ export async function createAgentDefinitionCore(
     });
     assetId = created.id;
   } catch (cause) {
-    if (
-      cause instanceof AssetServiceError &&
-      cause.reason === "duplicate_asset"
-    ) {
+    if (cause instanceof AssetServiceError && cause.reason === "duplicate_asset") {
       // A previous attempt may have created the asset row but failed
       // before populateAsset wrote its source tree — an empty shell that
       // blocks retries with a misleading conflict. Recover: look up the
@@ -661,9 +623,7 @@ export async function createAgentDefinitionCore(
     orderBy: desc(workflowDefinition.createdAt),
   });
   if (row === undefined) {
-    throw new Error(
-      `agent definition for asset "${assetId}" was created but is not readable back`,
-    );
+    throw new Error(`agent definition for asset "${assetId}" was created but is not readable back`);
   }
   return { row };
 }
@@ -682,9 +642,7 @@ function assertJsonPortable(value: unknown, path: string): void {
     case "object":
       break;
     default:
-      throw new Error(
-        `${path} is a ${typeof value}, which does not survive JSON serialization`,
-      );
+      throw new Error(`${path} is a ${typeof value}, which does not survive JSON serialization`);
   }
   if (Array.isArray(value)) {
     value.forEach((element, index) => {
@@ -694,9 +652,7 @@ function assertJsonPortable(value: unknown, path: string): void {
   }
   const proto: unknown = Object.getPrototypeOf(value);
   if (proto !== Object.prototype && proto !== null) {
-    throw new Error(
-      `${path} is a non-plain object; JSON would flatten it lossily`,
-    );
+    throw new Error(`${path} is a non-plain object; JSON would flatten it lossily`);
   }
   for (const [key, entry] of Object.entries(value)) {
     assertJsonPortable(entry, `${path}.${key}`);
diff --git a/packages/agent-directory/src/asset-write.ts b/packages/agent-directory/src/asset-write.ts
index 5196ae090a..d2fafdea85 100644
--- a/packages/agent-directory/src/asset-write.ts
+++ b/packages/agent-directory/src/asset-write.ts
@@ -16,10 +16,7 @@ const MAX_STALE_SNAPSHOT_RETRIES = 8;
 
 const writeChains = new Map<string, Promise<void>>();
 
-async function withAssetWriteLock<T>(
-  assetId: string,
-  fn: () => Promise<T>,
-): Promise<T> {
+async function withAssetWriteLock<T>(assetId: string, fn: () => Promise<T>): Promise<T> {
   const previous = writeChains.get(assetId) ?? Promise.resolve();
   let release: () => void = () => undefined;
   const held = new Promise<void>((resolve) => {
@@ -60,21 +57,11 @@ export type CommitLatestAgentAssetSnapshotArgs<T> = {
 export async function commitLatestAgentAssetSnapshot<T>(
   args: CommitLatestAgentAssetSnapshotArgs<T>,
 ): Promise<T> {
-  for (
-    let remaining = MAX_STALE_SNAPSHOT_RETRIES;
-    remaining > 0;
-    remaining -= 1
-  ) {
-    const snapshot = await readAgentDefinitionWorkflowJson(
-      args.assetService,
-      args.assetId,
-    );
+  for (let remaining = MAX_STALE_SNAPSHOT_RETRIES; remaining > 0; remaining -= 1) {
+    const snapshot = await readAgentDefinitionWorkflowJson(args.assetService, args.assetId);
     const prepared = await args.prepare(snapshot);
     const wrote = await withAssetWriteLock(args.assetId, async () => {
-      const latest = await readAgentDefinitionWorkflowJson(
-        args.assetService,
-        args.assetId,
-      );
+      const latest = await readAgentDefinitionWorkflowJson(args.assetService, args.assetId);
       if (latest !== snapshot) return false;
       await args.write({
         workflowJson: prepared.workflowJson,
diff --git a/packages/agent-directory/src/capability-add.ts b/packages/agent-directory/src/capability-add.ts
index b2628bef41..5e55083f2b 100644
--- a/packages/agent-directory/src/capability-add.ts
+++ b/packages/agent-directory/src/capability-add.ts
@@ -19,10 +19,7 @@ import {
 } from "./agent-workflow";
 import { commitLatestAgentAssetSnapshot } from "./asset-write";
 import type { AddCapabilityInput } from "./capability-inventory";
-import {
-  writeAndDeployAgentDefinition,
-  type AgentDefinitionDeployer,
-} from "./definition-asset";
+import { writeAndDeployAgentDefinition, type AgentDefinitionDeployer } from "./definition-asset";
 import { resolvePinnedVersion } from "./tool-package-version";
 
 export type CommitAgentCapabilityAddArgs = {
@@ -113,9 +110,9 @@ async function prepareCapabilityAdd(
       // no existing pin resolves fresh against the registry. An explicit
       // bump is a distinct, explicit input this does not add (CL-7389).
       const packageName = args.body.name;
-      const existingPin = readAgentCapabilities(
-        workflowJson,
-      ).toolPackagePins.find((pin) => pin.name === packageName);
+      const existingPin = readAgentCapabilities(workflowJson).toolPackagePins.find(
+        (pin) => pin.name === packageName,
+      );
       const pin =
         existingPin ??
         (await resolvePinnedVersion(
@@ -131,16 +128,10 @@ async function prepareCapabilityAdd(
       break;
     }
     case "skill": {
-      const nextSkills = skills.includes(args.body.name)
-        ? skills
-        : [...skills, args.body.name];
+      const nextSkills = skills.includes(args.body.name) ? skills : [...skills, args.body.name];
       nextWorkflowJson = reindexPinnedSkills(
         workflowJson,
-        await args.skillIndex.resolve(
-          args.tenantId,
-          args.principalId,
-          nextSkills,
-        ),
+        await args.skillIndex.resolve(args.tenantId, args.principalId, nextSkills),
       );
       skills = nextSkills;
       message = `Add ${args.body.name} skill to ${args.handle}`;
@@ -160,9 +151,7 @@ async function prepareCapabilityAdd(
     result: {
       toolPackagePins: capabilities.toolPackagePins,
       skills,
-      ...(capabilities.model !== undefined
-        ? { model: capabilities.model }
-        : {}),
+      ...(capabilities.model !== undefined ? { model: capabilities.model } : {}),
     },
   };
 }
diff --git a/packages/agent-directory/src/capability-inventory.ts b/packages/agent-directory/src/capability-inventory.ts
index d02b1cc43f..f627376b07 100644
--- a/packages/agent-directory/src/capability-inventory.ts
+++ b/packages/agent-directory/src/capability-inventory.ts
@@ -31,9 +31,7 @@ export const BASELINE_AGENT_TOOL_PINS = [
 
 /** The baseline pins this tenant can actually resolve — a package the
  * registry does not carry is dropped, never pinned to fail at launch. */
-export function baselineAgentToolPins(
-  inventory: CapabilityInventory,
-): string[] {
+export function baselineAgentToolPins(inventory: CapabilityInventory): string[] {
   const available = new Set(inventory.toolPackages.map((entry) => entry.name));
   return BASELINE_AGENT_TOOL_PINS.filter((name) => available.has(name));
 }
@@ -53,9 +51,7 @@ export type CapabilityInventoryProvider = {
 
 export class CapabilityOutOfInventoryError extends Error {
   constructor(field: string, reference: string) {
-    super(
-      `"${reference}" for "${field}" was never offered in this workbench's inventory`,
-    );
+    super(`"${reference}" for "${field}" was never offered in this workbench's inventory`);
     this.name = "CapabilityOutOfInventoryError";
   }
 }
@@ -79,18 +75,14 @@ export function assertCapabilityInInventory(
 ): void {
   switch (addition.kind) {
     case "toolPackage": {
-      const known = inventory.toolPackages.some(
-        (entry) => entry.name === addition.name,
-      );
+      const known = inventory.toolPackages.some((entry) => entry.name === addition.name);
       if (!known) {
         throw new CapabilityOutOfInventoryError("toolPackage", addition.name);
       }
       return;
     }
     case "skill": {
-      const known = inventory.skills.some(
-        (entry) => entry.name === addition.name,
-      );
+      const known = inventory.skills.some((entry) => entry.name === addition.name);
       if (!known) {
         throw new CapabilityOutOfInventoryError("skill", addition.name);
       }
@@ -101,10 +93,7 @@ export function assertCapabilityInInventory(
         (entry) => entry.canonicalName === addition.canonicalName,
       );
       if (!known) {
-        throw new CapabilityOutOfInventoryError(
-          "model",
-          addition.canonicalName,
-        );
+        throw new CapabilityOutOfInventoryError("model", addition.canonicalName);
       }
       return;
     }
diff --git a/packages/agent-directory/src/client.test.ts b/packages/agent-directory/src/client.test.ts
index edaef76df3..233868b9fa 100644
--- a/packages/agent-directory/src/client.test.ts
+++ b/packages/agent-directory/src/client.test.ts
@@ -56,10 +56,7 @@ const last30DaysResearchDefinition = {
 
 describe("purposeAgentDefinitions", () => {
   test("drops the chat anchor machinery's workbench-host definitions", () => {
-    const result = purposeAgentDefinitions([
-      researcher,
-      workbenchHostDefinition,
-    ]);
+    const result = purposeAgentDefinitions([researcher, workbenchHostDefinition]);
     expect(result).toEqual([researcher]);
   });
 
@@ -108,10 +105,7 @@ describe("purposeAgentInstances", () => {
   });
 
   test("does not exclude an ordinary deployment merely because a different id is in the set", () => {
-    const result = purposeAgentInstances(
-      [instance],
-      new Set([invitedAgentInstance.id]),
-    );
+    const result = purposeAgentInstances([instance], new Set([invitedAgentInstance.id]));
     expect(result).toEqual([instance]);
   });
 });
@@ -187,27 +181,25 @@ describe("deriveDisplayName", () => {
   });
 
   test("backfills a humanized name when description is null", () => {
-    expect(
-      deriveDisplayName({ name: "research-analyst", description: null }),
-    ).toBe("Research Analyst");
+    expect(deriveDisplayName({ name: "research-analyst", description: null })).toBe(
+      "Research Analyst",
+    );
   });
 
   test("backfills a humanized name when description is missing entirely", () => {
-    expect(deriveDisplayName({ name: "research-analyst" })).toBe(
-      "Research Analyst",
-    );
+    expect(deriveDisplayName({ name: "research-analyst" })).toBe("Research Analyst");
   });
 
   test("backfills when description is an empty string", () => {
-    expect(
-      deriveDisplayName({ name: "research-analyst", description: "" }),
-    ).toBe("Research Analyst");
+    expect(deriveDisplayName({ name: "research-analyst", description: "" })).toBe(
+      "Research Analyst",
+    );
   });
 
   test("backfills when description is whitespace-only, never rendering a blank name", () => {
-    expect(
-      deriveDisplayName({ name: "research-analyst", description: "   " }),
-    ).toBe("Research Analyst");
+    expect(deriveDisplayName({ name: "research-analyst", description: "   " })).toBe(
+      "Research Analyst",
+    );
   });
 
   test("trims incidental whitespace around a real description", () => {
diff --git a/packages/agent-directory/src/client.ts b/packages/agent-directory/src/client.ts
index 4f087bf541..7d043cc623 100644
--- a/packages/agent-directory/src/client.ts
+++ b/packages/agent-directory/src/client.ts
@@ -60,9 +60,7 @@ export function purposeAgentDefinitions<T extends UserFacingAgentDefinition>(
   definitions: readonly T[],
 ): readonly T[] {
   return definitions.filter(
-    (d) =>
-      !isWorkbenchHostDefinitionName(d.name) &&
-      isConversationalWorkflowName(d.name),
+    (d) => !isWorkbenchHostDefinitionName(d.name) && isConversationalWorkflowName(d.name),
   );
 }
 
@@ -79,8 +77,7 @@ export function purposeAgentInstances<T extends UserFacingAgentInstance>(
 ): readonly T[] {
   return instances.filter(
     (instance) =>
-      !isWorkbenchHostDefinitionName(instance.definitionName) &&
-      !excludeRunIds.has(instance.id),
+      !isWorkbenchHostDefinitionName(instance.definitionName) && !excludeRunIds.has(instance.id),
   );
 }
 
@@ -92,8 +89,7 @@ export function filterDefinitions<T extends UserFacingAgentDefinition>(
   if (needle === "") return definitions;
   return definitions.filter(
     (d) =>
-      d.name.toLowerCase().includes(needle) ||
-      (d.description ?? "").toLowerCase().includes(needle),
+      d.name.toLowerCase().includes(needle) || (d.description ?? "").toLowerCase().includes(needle),
   );
 }
 
@@ -103,9 +99,7 @@ export function filterInstances<T extends UserFacingAgentInstance>(
 ): readonly T[] {
   const needle = query.trim().toLowerCase();
   if (needle === "") return instances;
-  return instances.filter((i) =>
-    i.definitionName.toLowerCase().includes(needle),
-  );
+  return instances.filter((i) => i.definitionName.toLowerCase().includes(needle));
 }
 
 /**
diff --git a/packages/agent-directory/src/create-bounds.ts b/packages/agent-directory/src/create-bounds.ts
index df7fd95856..72d554d29a 100644
--- a/packages/agent-directory/src/create-bounds.ts
+++ b/packages/agent-directory/src/create-bounds.ts
@@ -15,18 +15,16 @@ const MAX_TOOL_PACKAGE_PINS = 8;
 /** A deduped array of at most `MAX_TOOL_PACKAGE_PINS` tool package
  * names, mirroring `@corbits/agent-directory`'s `validation.ts`
  * `SkillNameArray`'s own dedup-check style exactly. */
-export const BoundedDedupedToolPackageNameArray = type("string[]").narrow(
-  (names, ctx) => {
-    if (names.length > MAX_TOOL_PACKAGE_PINS) {
-      return ctx.mustBe(`at most ${MAX_TOOL_PACKAGE_PINS} tool package pins`);
+export const BoundedDedupedToolPackageNameArray = type("string[]").narrow((names, ctx) => {
+  if (names.length > MAX_TOOL_PACKAGE_PINS) {
+    return ctx.mustBe(`at most ${MAX_TOOL_PACKAGE_PINS} tool package pins`);
+  }
+  const seen = new Set<string>();
+  for (const name of names) {
+    if (seen.has(name)) {
+      return ctx.mustBe(`a list without duplicate tool package "${name}"`);
     }
-    const seen = new Set<string>();
-    for (const name of names) {
-      if (seen.has(name)) {
-        return ctx.mustBe(`a list without duplicate tool package "${name}"`);
-      }
-      seen.add(name);
-    }
-    return true;
-  },
-);
+    seen.add(name);
+  }
+  return true;
+});
diff --git a/packages/agent-directory/src/definition-asset.ts b/packages/agent-directory/src/definition-asset.ts
index 1c0d1ffb2f..228e64e2cf 100644
--- a/packages/agent-directory/src/definition-asset.ts
+++ b/packages/agent-directory/src/definition-asset.ts
@@ -53,14 +53,8 @@ export function readAgentDefinitionWorkflowJson(
 }
 
 /** The serialized workflow inside entry-module bytes read at a past commit. */
-export function parseAgentDefinitionEntry(
-  entryModule: Uint8Array,
-  assetId: string,
-): string {
-  return parseWorkflowSourceEntry(
-    new TextDecoder().decode(entryModule),
-    assetId,
-  );
+export function parseAgentDefinitionEntry(entryModule: Uint8Array, assetId: string): string {
+  return parseWorkflowSourceEntry(new TextDecoder().decode(entryModule), assetId);
 }
 
 /** The `WorkflowDeployer` seam this package needs — never the whole
diff --git a/packages/agent-directory/src/definition-history.ts b/packages/agent-directory/src/definition-history.ts
index 4b2fdea63e..ebfe00a6c8 100644
--- a/packages/agent-directory/src/definition-history.ts
+++ b/packages/agent-directory/src/definition-history.ts
@@ -5,11 +5,7 @@
 import fs from "node:fs";
 import git from "isomorphic-git";
 
-import {
-  DEFAULT_ASSET_REF,
-  type RepoId,
-  type RepoStore,
-} from "@intx/hub-sessions";
+import { DEFAULT_ASSET_REF, type RepoId, type RepoStore } from "@intx/hub-sessions";
 
 const AGENT_DEFINITION_ASSET_KIND = "workflow";
 
@@ -48,9 +44,7 @@ async function readAssetCommitHistory(input: {
       commitSha: entry.oid,
       message,
       author: entry.commit.author.name,
-      committedAtIso: new Date(
-        entry.commit.author.timestamp * 1000,
-      ).toISOString(),
+      committedAtIso: new Date(entry.commit.author.timestamp * 1000).toISOString(),
     });
   }
   return commits;
diff --git a/packages/agent-directory/src/index.ts b/packages/agent-directory/src/index.ts
index 7c219dc473..5f6e1e7d2c 100644
--- a/packages/agent-directory/src/index.ts
+++ b/packages/agent-directory/src/index.ts
@@ -86,10 +86,7 @@ export {
   type CreateWorkflowAgentCreateRoutesDeps,
   type WorkflowAgentCreateEnv,
 } from "./workflow-create-routes";
-export {
-  listVisibleAgentDefinitions,
-  type VisibleAgentDefinition,
-} from "./visible-definitions";
+export { listVisibleAgentDefinitions, type VisibleAgentDefinition } from "./visible-definitions";
 export {
   assembleInventory,
   type InventoryAgent,
diff --git a/packages/agent-directory/src/inventory.test.ts b/packages/agent-directory/src/inventory.test.ts
index d897e0a4b9..58edd0c0ac 100644
--- a/packages/agent-directory/src/inventory.test.ts
+++ b/packages/agent-directory/src/inventory.test.ts
@@ -2,9 +2,7 @@ import { describe, expect, test } from "bun:test";
 
 import { assembleInventory, type InventorySources } from "./inventory";
 
-function buildSources(
-  overrides: Partial<InventorySources> = {},
-): InventorySources {
+function buildSources(overrides: Partial<InventorySources> = {}): InventorySources {
   return {
     async listConversationalAgents() {
       return [];
diff --git a/packages/agent-directory/src/inventory.ts b/packages/agent-directory/src/inventory.ts
index 03cc65f5f5..75754e63d9 100644
--- a/packages/agent-directory/src/inventory.ts
+++ b/packages/agent-directory/src/inventory.ts
@@ -62,16 +62,9 @@ export type PlannerInventory = {
 };
 
 export type InventorySources = {
-  listConversationalAgents(
-    tenantId: string,
-  ): Promise<readonly InventoryAgent[]>;
-  listUsableToolPackages(
-    tenantId: string,
-  ): Promise<readonly InventoryToolPackage[]>;
-  listSkills(caller: {
-    tenantId: string;
-    principalId: string;
-  }): Promise<readonly InventorySkill[]>;
+  listConversationalAgents(tenantId: string): Promise<readonly InventoryAgent[]>;
+  listUsableToolPackages(tenantId: string): Promise<readonly InventoryToolPackage[]>;
+  listSkills(caller: { tenantId: string; principalId: string }): Promise<readonly InventorySkill[]>;
   /** A process-level fact (`mountMemory() !== undefined` at hub boot),
    * not a per-call async lookup — memory is either compiled into this
    * process's deployment or it isn't, for the process's whole
@@ -101,10 +94,7 @@ export async function assembleInventory(
       agent.description !== undefined
         ? {
             ...agent,
-            description: sanitizeInventoryText(
-              agent.description,
-              MAX_DESCRIPTION_LENGTH,
-            ),
+            description: sanitizeInventoryText(agent.description, MAX_DESCRIPTION_LENGTH),
           }
         : agent,
     ),
@@ -113,10 +103,7 @@ export async function assembleInventory(
       skill.description !== undefined
         ? {
             ...skill,
-            description: sanitizeInventoryText(
-              skill.description,
-              MAX_DESCRIPTION_LENGTH,
-            ),
+            description: sanitizeInventoryText(skill.description, MAX_DESCRIPTION_LENGTH),
           }
         : skill,
     ),
diff --git a/packages/agent-directory/src/migrations.ts b/packages/agent-directory/src/migrations.ts
index d2b48450dd..094ba9ca0b 100644
--- a/packages/agent-directory/src/migrations.ts
+++ b/packages/agent-directory/src/migrations.ts
@@ -98,10 +98,9 @@ export async function applyAgentDirectoryMigrations(
         applied.push(migration.name);
       } catch (err) {
         const message = err instanceof Error ? err.message : String(err);
-        throw new Error(
-          `agent-directory migration ${migration.name} failed: ${message}`,
-          { cause: err },
-        );
+        throw new Error(`agent-directory migration ${migration.name} failed: ${message}`, {
+          cause: err,
+        });
       }
     }
 
diff --git a/packages/agent-directory/src/native-deploy-cutover.test.ts b/packages/agent-directory/src/native-deploy-cutover.test.ts
index 7ac039318a..bb2b7f8626 100644
--- a/packages/agent-directory/src/native-deploy-cutover.test.ts
+++ b/packages/agent-directory/src/native-deploy-cutover.test.ts
@@ -16,9 +16,7 @@ function tsFilesUnder(dir: string): string[] {
   return readdirSync(dir, { withFileTypes: true }).flatMap((entry) => {
     const full = path.join(dir, entry.name);
     if (entry.isDirectory()) return tsFilesUnder(full);
-    return entry.name.endsWith(".ts") && !entry.name.endsWith(".test.ts")
-      ? [full]
-      : [];
+    return entry.name.endsWith(".ts") && !entry.name.endsWith(".test.ts") ? [full] : [];
   });
 }
 
@@ -42,9 +40,7 @@ describe("workflow-freeze cutover", () => {
     const packageJson = JSON.parse(
       readFileSync(path.join(import.meta.dir, "../package.json"), "utf8"),
     ) as { dependencies?: Record<string, string> };
-    expect(Object.keys(packageJson.dependencies ?? {})).not.toContain(
-      "@corbits/workflow-freeze",
-    );
+    expect(Object.keys(packageJson.dependencies ?? {})).not.toContain("@corbits/workflow-freeze");
   });
 
   test("no source file in apps/hub imports @corbits/workflow-freeze", () => {
diff --git a/packages/agent-directory/src/one-shot-prompt.test.ts b/packages/agent-directory/src/one-shot-prompt.test.ts
index 54f7ce329b..497940261b 100644
--- a/packages/agent-directory/src/one-shot-prompt.test.ts
+++ b/packages/agent-directory/src/one-shot-prompt.test.ts
@@ -30,9 +30,7 @@ const AGENT_WIRE_PROJECTION = {
       kind: "step",
       agent: {
         systemPrompt: "You are Myra.",
-        modelSources: [
-          { provider: "anthropic", model: "declared-default-model" },
-        ],
+        modelSources: [{ provider: "anthropic", model: "declared-default-model" }],
       },
     },
   },
@@ -207,9 +205,7 @@ describe("runOneShotPrompt", () => {
     expect(launchCalls).toHaveLength(1);
     expect(fakeSend.calls).toBe(1);
     expect(fake.listenerCount("agent.event")).toBe(0);
-    expect(undeployCalls).toEqual([
-      { address: triggerAddress, reason: "planning-run-complete" },
-    ]);
+    expect(undeployCalls).toEqual([{ address: triggerAddress, reason: "planning-run-complete" }]);
   });
 
   test("a failed run rejects with OneShotRunFailedError, unsubscribes, and tears the run down", async () => {
@@ -239,9 +235,7 @@ describe("runOneShotPrompt", () => {
 
     await expect(promise).rejects.toBeInstanceOf(OneShotRunFailedError);
     expect(fake.listenerCount("agent.event")).toBe(0);
-    expect(undeployCalls).toEqual([
-      { address: triggerAddress, reason: "planning-run-failed" },
-    ]);
+    expect(undeployCalls).toEqual([{ address: triggerAddress, reason: "planning-run-failed" }]);
   });
 
   test("an unknown definition throws OneShotDefinitionNotFoundError", async () => {
@@ -323,16 +317,14 @@ describe("timeout tears the launched run down", () => {
       undeploy,
     } as never;
 
-    await expect(
-      runOneShotPrompt(deps, { ...INPUT, timeoutMs: 100 }),
-    ).rejects.toBeInstanceOf(OneShotRunTimedOutError);
+    await expect(runOneShotPrompt(deps, { ...INPUT, timeoutMs: 100 })).rejects.toBeInstanceOf(
+      OneShotRunTimedOutError,
+    );
     const triggerAddress = firstCall(launchCalls).address;
 
     expect(launchCalls).toHaveLength(1);
     expect(fake.listenerCount("agent.event")).toBe(0);
-    expect(undeployCalls).toEqual([
-      { address: triggerAddress, reason: "planning-run-timed-out" },
-    ]);
+    expect(undeployCalls).toEqual([{ address: triggerAddress, reason: "planning-run-timed-out" }]);
   });
 });
 
@@ -373,9 +365,7 @@ describe("routable wait on the opening send", () => {
     const result = await promise;
     expect(result.content).toBe("Hello");
     expect(send.calls).toBe(2);
-    expect(undeployCalls).toEqual([
-      { address: triggerAddress, reason: "planning-run-complete" },
-    ]);
+    expect(undeployCalls).toEqual([{ address: triggerAddress, reason: "planning-run-complete" }]);
   });
 
   test("rejects OneShotRunUnreachableError when the routable wait expires", async () => {
@@ -491,9 +481,7 @@ describe("routable wait on the opening send", () => {
     // runner consults.
     expect(routabilityAddresses).toContain(triggerAddress);
     expect(send.calls).toBe(2);
-    expect(undeployCalls).toEqual([
-      { address: triggerAddress, reason: "planning-run-complete" },
-    ]);
+    expect(undeployCalls).toEqual([{ address: triggerAddress, reason: "planning-run-complete" }]);
   });
 
   test("the reply timer wins over the routable wait and no send follows the teardown", async () => {
@@ -526,9 +514,7 @@ describe("routable wait on the opening send", () => {
 
     expect(caught).toBeInstanceOf(OneShotRunTimedOutError);
     const triggerAddress = firstCall(launchCalls).address;
-    expect(undeployCalls).toEqual([
-      { address: triggerAddress, reason: "planning-run-timed-out" },
-    ]);
+    expect(undeployCalls).toEqual([{ address: triggerAddress, reason: "planning-run-timed-out" }]);
     // Let any post-teardown send attempt surface before pinning the count.
     await new Promise((r) => setTimeout(r, 20));
     expect(send.calls).toBeLessThanOrEqual(1);
diff --git a/packages/agent-directory/src/one-shot-prompt.ts b/packages/agent-directory/src/one-shot-prompt.ts
index de35b47896..4f90e4e65d 100644
--- a/packages/agent-directory/src/one-shot-prompt.ts
+++ b/packages/agent-directory/src/one-shot-prompt.ts
@@ -150,15 +150,13 @@ async function provisionOnAsset(
     readonly domain: string;
   },
 ): Promise<ProvisionedOneShot> {
-  const offerings = [
-    ...(await listVisibleOfferings(deps.db, input.tenantId)),
-  ].sort((a, b) => a.offering.priority - b.offering.priority);
+  const offerings = [...(await listVisibleOfferings(deps.db, input.tenantId))].sort(
+    (a, b) => a.offering.priority - b.offering.priority,
+  );
   const sourceOfferingIds = offerings.map((o) => o.offering.id);
   const defaultSourceOfferingId = sourceOfferingIds[0];
   if (defaultSourceOfferingId === undefined) {
-    throw new Error(
-      `no catalog offerings visible to tenant "${input.tenantId}"`,
-    );
+    throw new Error(`no catalog offerings visible to tenant "${input.tenantId}"`);
   }
   const commitSha = await deps.repoStore.resolveRef(
     { kind: "hub" },
@@ -166,33 +164,30 @@ async function provisionOnAsset(
     DEFAULT_ASSET_REF,
   );
   if (commitSha === null) {
-    throw new Error(
-      `definition asset "${input.definitionAssetId}" has no HEAD`,
-    );
+    throw new Error(`definition asset "${input.definitionAssetId}" has no HEAD`);
   }
   const anchorRunId = generateId("workflowRun");
   const sessionId = generateId("session");
-  const prepared =
-    await deps.workflowAllocationService.prepareProvisionedDeployment({
-      tenantId: input.tenantId,
-      anchorRunId,
-      sessionId,
-      deploymentDomain: input.domain,
-      source: {
-        kind: "asset",
-        assetId: input.definitionAssetId,
-        package: { format: "source", commitSha },
-      },
-      entry: WORKFLOW_SOURCE_ENTRY,
-      definitionAssetId: input.definitionAssetId,
-      sourceAuthorityPrincipalId: input.principalId,
-      sourceOfferingIds,
-      defaultSourceOfferingId,
-      deployContent: { systemPrompt: "" },
-      ...(input.foldedBody.toolPackagePins.length > 0
-        ? { toolPackagePins: input.foldedBody.toolPackagePins }
-        : {}),
-    });
+  const prepared = await deps.workflowAllocationService.prepareProvisionedDeployment({
+    tenantId: input.tenantId,
+    anchorRunId,
+    sessionId,
+    deploymentDomain: input.domain,
+    source: {
+      kind: "asset",
+      assetId: input.definitionAssetId,
+      package: { format: "source", commitSha },
+    },
+    entry: WORKFLOW_SOURCE_ENTRY,
+    definitionAssetId: input.definitionAssetId,
+    sourceAuthorityPrincipalId: input.principalId,
+    sourceOfferingIds,
+    defaultSourceOfferingId,
+    deployContent: { systemPrompt: "" },
+    ...(input.foldedBody.toolPackagePins.length > 0
+      ? { toolPackagePins: input.foldedBody.toolPackagePins }
+      : {}),
+  });
   await recordAgentSessionAtProvision({
     db: deps.db,
     eventCollectors: deps.eventCollectors,
@@ -239,10 +234,7 @@ export async function runOneShotPrompt(
   }
 
   const projection = await readDefinitionProjection(deps.db, definitionRow);
-  const foldedBody = readFoldedBody(
-    projection,
-    definitionRow.grantRequirements,
-  );
+  const foldedBody = readFoldedBody(projection, definitionRow.grantRequirements);
 
   const launched = await (deps.provision !== undefined
     ? deps.provision({
@@ -264,31 +256,28 @@ export async function runOneShotPrompt(
     let settled = false;
     let accumulated = "";
 
-    const unsubscribe = deps.events.on(
-      "agent.event",
-      ({ agentAddress, event }) => {
-        if (agentAddress !== launched.address || settled) return;
+    const unsubscribe = deps.events.on("agent.event", ({ agentAddress, event }) => {
+      if (agentAddress !== launched.address || settled) return;
 
-        const content = connectorReplyContent(event);
-        if (content !== undefined) {
-          accumulated += content;
-          return;
-        }
+      const content = connectorReplyContent(event);
+      if (content !== undefined) {
+        accumulated += content;
+        return;
+      }
 
-        const ended = messageRunEnded(event);
-        if (ended === undefined) return;
+      const ended = messageRunEnded(event);
+      if (ended === undefined) return;
 
-        if (ended.status === "failed") {
-          void settle("planning-run-failed", () => {
-            reject(new OneShotRunFailedError(ended.errorMessage));
-          });
-          return;
-        }
-        void settle("planning-run-complete", () => {
-          resolve({ content: accumulated, runId: launched.runId });
+      if (ended.status === "failed") {
+        void settle("planning-run-failed", () => {
+          reject(new OneShotRunFailedError(ended.errorMessage));
         });
-      },
-    );
+        return;
+      }
+      void settle("planning-run-complete", () => {
+        resolve({ content: accumulated, runId: launched.runId });
+      });
+    });
 
     async function settle(reason: string, finish: () => void): Promise<void> {
       if (settled) return;
@@ -296,11 +285,7 @@ export async function runOneShotPrompt(
       clearTimeout(timer);
       unsubscribe();
       try {
-        await endAgentSessionForRun(
-          deps.db,
-          launched.runId,
-          deps.eventCollectors,
-        );
+        await endAgentSessionForRun(deps.db, launched.runId, deps.eventCollectors);
       } catch (err) {
         reportError(err, {
           operation: "agent-directory.one-shot.end-session",
diff --git a/packages/agent-directory/src/resolve-myra-definition-id.ts b/packages/agent-directory/src/resolve-myra-definition-id.ts
index 2c793645ee..780c664245 100644
--- a/packages/agent-directory/src/resolve-myra-definition-id.ts
+++ b/packages/agent-directory/src/resolve-myra-definition-id.ts
@@ -12,9 +12,7 @@ import { WORKFLOW_CATALOG } from "@corbits/workflows/catalog";
 /** Myra's asset name in the seeded workflow catalog — the same lookup
  * `apps/web/src/myra-workbench.ts` does client-side, mirrored here for
  * the hub side. */
-const MYRA_ASSET_NAME = WORKFLOW_CATALOG.find(
-  (entry) => entry.displayName === "Myra",
-)?.assetName;
+const MYRA_ASSET_NAME = WORKFLOW_CATALOG.find((entry) => entry.displayName === "Myra")?.assetName;
 
 export class MyraDefinitionUnresolvableError extends Error {
   constructor(tenantId: string, reason: string) {
@@ -45,10 +43,7 @@ export async function resolveMyraDefinitionIdFromDb(
     ),
   });
   if (row === undefined || row.status !== "deployed" || row.assetId === null) {
-    throw new MyraDefinitionUnresolvableError(
-      tenantId,
-      "no deployed Myra definition was found",
-    );
+    throw new MyraDefinitionUnresolvableError(tenantId, "no deployed Myra definition was found");
   }
   return row.id;
 }
diff --git a/packages/agent-directory/src/routes.ts b/packages/agent-directory/src/routes.ts
index e50cf5bbd6..b6b377bf14 100644
--- a/packages/agent-directory/src/routes.ts
+++ b/packages/agent-directory/src/routes.ts
@@ -132,11 +132,7 @@ function definitionNotFound(definitionId: string) {
 function hostGuardedRow(
   row: { readonly name: string; readonly assetId: string | null } | undefined,
 ): row is { readonly name: string; readonly assetId: string } {
-  return (
-    row !== undefined &&
-    row.assetId !== null &&
-    !isWorkbenchHostDefinitionName(row.name)
-  );
+  return row !== undefined && row.assetId !== null && !isWorkbenchHostDefinitionName(row.name);
 }
 
 export function createAgentDefinitionRoutes({
@@ -157,22 +153,13 @@ export function createAgentDefinitionRoutes({
   // one rather than letting it read as a 500.
   app.onError((err, c) => {
     if (err instanceof SkillIndexResolutionError) {
-      return c.json(
-        makeErrorEnvelope({ code: "bad_request", userMessage: err.message }),
-        400,
-      );
+      return c.json(makeErrorEnvelope({ code: "bad_request", userMessage: err.message }), 400);
     }
     if (err instanceof CapabilityOutOfInventoryError) {
-      return c.json(
-        makeErrorEnvelope({ code: "bad_request", userMessage: err.message }),
-        400,
-      );
+      return c.json(makeErrorEnvelope({ code: "bad_request", userMessage: err.message }), 400);
     }
     if (err instanceof RetiredWorkflowEnvelopeError) {
-      return c.json(
-        makeErrorEnvelope({ code: "conflict", userMessage: err.message }),
-        409,
-      );
+      return c.json(makeErrorEnvelope({ code: "conflict", userMessage: err.message }), 409);
     }
     if (err instanceof WorkflowAuthorError) {
       return c.json(
@@ -184,9 +171,7 @@ export function createAgentDefinitionRoutes({
   });
 
   app.post("/", requireGrant("workflow-definition:*", "create"), async (c) => {
-    const body = CreateAgentDefinitionInput(
-      await c.req.json().catch(() => undefined),
-    );
+    const body = CreateAgentDefinitionInput(await c.req.json().catch(() => undefined));
     if (body instanceof type.errors) {
       return c.json(
         makeErrorEnvelope({
@@ -207,9 +192,7 @@ export function createAgentDefinitionRoutes({
     // built up mutably rather than as one literal, mirroring
     // `apps/hub`'s own `deployAgentDefinition` caller of this same core.
     const coreInput: {
-      -readonly [
-        K in keyof CreateAgentDefinitionCoreInput
-      ]: CreateAgentDefinitionCoreInput[K];
+      -readonly [K in keyof CreateAgentDefinitionCoreInput]: CreateAgentDefinitionCoreInput[K];
     } = {
       tenantId: tenant.id,
       principalId: principal.id,
@@ -219,8 +202,7 @@ export function createAgentDefinitionRoutes({
       systemPrompt: body.systemPrompt,
       skills,
     };
-    if (body.description !== undefined)
-      coreInput.description = body.description;
+    if (body.description !== undefined) coreInput.description = body.description;
     if (body.model !== undefined) coreInput.model = body.model;
     if (body.toolPackagePins !== undefined && body.toolPackagePins.length > 0) {
       coreInput.toolPackagePins = body.toolPackagePins;
@@ -240,10 +222,7 @@ export function createAgentDefinitionRoutes({
       ));
     } catch (cause) {
       if (cause instanceof DuplicateAgentHandleError) {
-        return c.json(
-          makeErrorEnvelope({ code: "conflict", userMessage: cause.message }),
-          409,
-        );
+        return c.json(makeErrorEnvelope({ code: "conflict", userMessage: cause.message }), 409);
       }
       throw cause;
     }
@@ -264,94 +243,79 @@ export function createAgentDefinitionRoutes({
     );
   });
 
-  app.get(
-    "/skills",
-    requireGrant("workflow-definition:*", "read"),
-    async (c) => {
-      const tenant = c.get("tenant");
-      const idsParam = c.req.query("ids") ?? "";
-      const ids = [
-        ...new Set(
-          idsParam
-            .split(",")
-            .map((id) => id.trim())
-            .filter((id) => id !== ""),
-        ),
-      ];
-
-      const entries = await Promise.all(
-        ids.map(async (definitionId) => {
-          try {
-            const row = await db.query.workflowDefinition.findFirst({
-              where: and(
-                eq(workflowDefinition.id, definitionId),
-                eq(workflowDefinition.tenantId, tenant.id),
-              ),
-            });
-            if (row === undefined || row.assetId === null) return null;
-            // Pins read out of the asset's own stanza: the bulk read
-            // survives the side table's deletion by going to the same
-            // source `GET /:definitionId` reads. One unreadable asset
-            // (a pre-cutover retired envelope, a missing blob) must not
-            // fail the whole batch — skip that id, report it, serve the
-            // healthy ones.
-            const workflowJson = await readAgentDefinitionWorkflowJson(
-              assetService,
-              row.assetId,
-            );
-            const skills = readPinnedSkillNames(workflowJson);
-            return [definitionId, skills] as const;
-          } catch (err) {
-            reportError(err, {
-              operation: "agentDirectory.bulkSkills",
-              tenantId: tenant.id,
-              extra: { definitionId },
-            });
-            return null;
-          }
-        }),
-      );
+  app.get("/skills", requireGrant("workflow-definition:*", "read"), async (c) => {
+    const tenant = c.get("tenant");
+    const idsParam = c.req.query("ids") ?? "";
+    const ids = [
+      ...new Set(
+        idsParam
+          .split(",")
+          .map((id) => id.trim())
+          .filter((id) => id !== ""),
+      ),
+    ];
+
+    const entries = await Promise.all(
+      ids.map(async (definitionId) => {
+        try {
+          const row = await db.query.workflowDefinition.findFirst({
+            where: and(
+              eq(workflowDefinition.id, definitionId),
+              eq(workflowDefinition.tenantId, tenant.id),
+            ),
+          });
+          if (row === undefined || row.assetId === null) return null;
+          // Pins read out of the asset's own stanza: the bulk read
+          // survives the side table's deletion by going to the same
+          // source `GET /:definitionId` reads. One unreadable asset
+          // (a pre-cutover retired envelope, a missing blob) must not
+          // fail the whole batch — skip that id, report it, serve the
+          // healthy ones.
+          const workflowJson = await readAgentDefinitionWorkflowJson(assetService, row.assetId);
+          const skills = readPinnedSkillNames(workflowJson);
+          return [definitionId, skills] as const;
+        } catch (err) {
+          reportError(err, {
+            operation: "agentDirectory.bulkSkills",
+            tenantId: tenant.id,
+            extra: { definitionId },
+          });
+          return null;
+        }
+      }),
+    );
 
-      const skills: Record<string, readonly string[]> = {};
-      for (const entry of entries) {
-        if (entry !== null) skills[entry[0]] = entry[1];
-      }
-      return c.json({ skills });
-    },
-  );
+    const skills: Record<string, readonly string[]> = {};
+    for (const entry of entries) {
+      if (entry !== null) skills[entry[0]] = entry[1];
+    }
+    return c.json({ skills });
+  });
 
   // Feeds the settings surface's guided capability-add picker with only
   // what this tenant actually has — the same source `POST
   // /:definitionId/capabilities` re-checks fail-closed on the add itself,
   // so a name this call doesn't list can never be added either.
-  app.get(
-    "/capabilities/inventory",
-    requireGrant("workflow-definition:*", "read"),
-    async (c) => {
-      const tenant = c.get("tenant");
-      const principal = c.get("principal");
-      const inventory = await capabilityInventory.resolve({
-        tenantId: tenant.id,
-        principalId: principal.id,
-      });
-      return c.json(inventory);
-    },
-  );
+  app.get("/capabilities/inventory", requireGrant("workflow-definition:*", "read"), async (c) => {
+    const tenant = c.get("tenant");
+    const principal = c.get("principal");
+    const inventory = await capabilityInventory.resolve({
+      tenantId: tenant.id,
+      principalId: principal.id,
+    });
+    return c.json(inventory);
+  });
 
   // Every agent this tenant can open a direct chat with — its own agent
   // definitions plus every ancestor's (CL-6253): the sidebar's unified
   // recency-sorted stream reads this list, keyed by `tenantId` per row
   // so a click can mint the DM in the agent's actual owning tenant, not
   // the caller's.
-  app.get(
-    "/visible",
-    requireGrant("workflow-definition:*", "read"),
-    async (c) => {
-      const tenant = c.get("tenant");
-      const definitions = await listVisibleAgentDefinitions(db, tenant.id);
-      return c.json({ definitions });
-    },
-  );
+  app.get("/visible", requireGrant("workflow-definition:*", "read"), async (c) => {
+    const tenant = c.get("tenant");
+    const definitions = await listVisibleAgentDefinitions(db, tenant.id);
+    return c.json({ definitions });
+  });
 
   // A definition's kebab `name` is its immutable, URL-facing slug
   // (CL-6413), so a slug-addressed detail screen resolves through this
@@ -359,34 +323,27 @@ export function createAgentDefinitionRoutes({
   // agent past the listing's pagination ceiling still answers on its own
   // URL. Grant-checked tenant-wide because there is no definition id to
   // scope to until the lookup itself has run.
-  app.get(
-    "/by-name/:name",
-    requireGrant("workflow-definition:*", "read"),
-    async (c) => {
-      const tenant = c.get("tenant");
-      const name = c.req.param("name");
-      const row = await db.query.workflowDefinition.findFirst({
-        where: and(
-          eq(workflowDefinition.name, name),
-          eq(workflowDefinition.tenantId, tenant.id),
-        ),
-      });
-      if (!hostGuardedRow(row)) {
-        return c.json(definitionNotFound(name), 404);
-      }
+  app.get("/by-name/:name", requireGrant("workflow-definition:*", "read"), async (c) => {
+    const tenant = c.get("tenant");
+    const name = c.req.param("name");
+    const row = await db.query.workflowDefinition.findFirst({
+      where: and(eq(workflowDefinition.name, name), eq(workflowDefinition.tenantId, tenant.id)),
+    });
+    if (!hostGuardedRow(row)) {
+      return c.json(definitionNotFound(name), 404);
+    }
 
-      return c.json({
-        id: row.id,
-        tenantId: row.tenantId,
-        name: row.name,
-        description: row.description ?? null,
-        currentVersion: row.currentVersion,
-        status: row.status,
-        createdAt: row.createdAt.toISOString(),
-        updatedAt: row.updatedAt.toISOString(),
-      });
-    },
-  );
+    return c.json({
+      id: row.id,
+      tenantId: row.tenantId,
+      name: row.name,
+      description: row.description ?? null,
+      currentVersion: row.currentVersion,
+      status: row.status,
+      createdAt: row.createdAt.toISOString(),
+      updatedAt: row.updatedAt.toISOString(),
+    });
+  });
 
   app.get(
     "/:definitionId",
@@ -404,10 +361,7 @@ export function createAgentDefinitionRoutes({
         return c.json(definitionNotFound(definitionId), 404);
       }
 
-      const workflowJson = await readAgentDefinitionWorkflowJson(
-        assetService,
-        row.assetId,
-      );
+      const workflowJson = await readAgentDefinitionWorkflowJson(assetService, row.assetId);
       const capabilities = readAgentCapabilities(workflowJson);
       // Pins read out of the asset's own stanza: deleting the side
       // table leaves this surface's only skills source the snapshot
@@ -454,9 +408,7 @@ export function createAgentDefinitionRoutes({
     "/:definitionId/restore",
     requireGrant(idResource("workflow-definition", "definitionId"), "update"),
     async (c) => {
-      const body = RestoreDefinitionInput(
-        await c.req.json().catch(() => undefined),
-      );
+      const body = RestoreDefinitionInput(await c.req.json().catch(() => undefined));
       if (body instanceof type.errors) {
         return c.json(
           makeErrorEnvelope({
@@ -494,10 +446,7 @@ export function createAgentDefinitionRoutes({
           404,
         );
       }
-      const restoredWorkflowJson = parseAgentDefinitionEntry(
-        entryBytes,
-        row.assetId,
-      );
+      const restoredWorkflowJson = parseAgentDefinitionEntry(entryBytes, row.assetId);
 
       // Pins live in the asset's own stanza (reindexed on every write),
       // so restoring a prior commit restores that revision's pins with
@@ -531,9 +480,7 @@ export function createAgentDefinitionRoutes({
     "/:definitionId/capabilities",
     requireGrant(idResource("workflow-definition", "definitionId"), "update"),
     async (c) => {
-      const body = AddCapabilityInput(
-        await c.req.json().catch(() => undefined),
-      );
+      const body = AddCapabilityInput(await c.req.json().catch(() => undefined));
       if (body instanceof type.errors) {
         return c.json(
           makeErrorEnvelope({
@@ -585,9 +532,7 @@ export function createAgentDefinitionRoutes({
     "/:definitionId",
     requireGrant(idResource("workflow-definition", "definitionId"), "update"),
     async (c) => {
-      const body = UpdateAgentInstructionsInput(
-        await c.req.json().catch(() => undefined),
-      );
+      const body = UpdateAgentInstructionsInput(await c.req.json().catch(() => undefined));
       if (body instanceof type.errors) {
         return c.json(
           makeErrorEnvelope({
@@ -772,9 +717,7 @@ export function createAgentDefinitionRoutes({
     "/:definitionId/status",
     requireGrant(idResource("workflow-definition", "definitionId"), "update"),
     async (c) => {
-      const body = UpdateDefinitionStatusInput(
-        await c.req.json().catch(() => undefined),
-      );
+      const body = UpdateDefinitionStatusInput(await c.req.json().catch(() => undefined));
       if (body instanceof type.errors) {
         return c.json(
           makeErrorEnvelope({
@@ -801,10 +744,7 @@ export function createAgentDefinitionRoutes({
         .update(workflowDefinition)
         .set({ status: body.status, updatedAt: new Date() })
         .where(
-          and(
-            eq(workflowDefinition.id, definitionId),
-            eq(workflowDefinition.tenantId, tenant.id),
-          ),
+          and(eq(workflowDefinition.id, definitionId), eq(workflowDefinition.tenantId, tenant.id)),
         );
 
       return c.json({ id: definitionId, status: body.status });
@@ -815,9 +755,7 @@ export function createAgentDefinitionRoutes({
     "/:definitionId/skills",
     requireGrant(idResource("workflow-definition", "definitionId"), "update"),
     async (c) => {
-      const body = UpdateAgentSkillsInput(
-        await c.req.json().catch(() => undefined),
-      );
+      const body = UpdateAgentSkillsInput(await c.req.json().catch(() => undefined));
       if (body instanceof type.errors) {
         return c.json(
           makeErrorEnvelope({
diff --git a/packages/agent-directory/src/stale-task-agent-naming.ts b/packages/agent-directory/src/stale-task-agent-naming.ts
index f2b8aaed4e..6cfb01b7ea 100644
--- a/packages/agent-directory/src/stale-task-agent-naming.ts
+++ b/packages/agent-directory/src/stale-task-agent-naming.ts
@@ -8,8 +8,6 @@
 // deliberately keeps around must keep excluding them.
 const PLANNER_CREATED_HANDLE_PREFIX = "myra-task-";
 
-export function isPlannerCreatedDefinitionName(
-  definitionName: string,
-): boolean {
+export function isPlannerCreatedDefinitionName(definitionName: string): boolean {
   return definitionName.startsWith(PLANNER_CREATED_HANDLE_PREFIX);
 }
diff --git a/packages/agent-directory/src/tool-package-version.test.ts b/packages/agent-directory/src/tool-package-version.test.ts
index f2c23f7744..cb4cbb43ce 100644
--- a/packages/agent-directory/src/tool-package-version.test.ts
+++ b/packages/agent-directory/src/tool-package-version.test.ts
@@ -12,10 +12,7 @@ import type { AssetService } from "@intx/hub-sessions";
 import { CORBITS_TOOLS_REGISTRY } from "@corbits/tool-registry-publish";
 
 import { CapabilityOutOfInventoryError } from "./capability-inventory";
-import {
-  createPinnedVersionResolver,
-  resolvePinnedVersion,
-} from "./tool-package-version";
+import { createPinnedVersionResolver, resolvePinnedVersion } from "./tool-package-version";
 
 const TENANT_ID = "tnt_1";
 
@@ -49,10 +46,7 @@ function registryDb(counters: { tenant: number; asset: number }): DB["db"] {
   } as unknown as DB["db"];
 }
 
-function assetServiceWith(
-  tarballs: string[],
-  counters: { list: number },
-): AssetService {
+function assetServiceWith(tarballs: string[], counters: { list: number }): AssetService {
   return {
     createAsset: () => {
       throw new Error("not used");
@@ -76,10 +70,7 @@ test("a stable version wins over a higher-sorting prerelease", async () => {
     {
       db: registryDb(c),
       assetService: assetServiceWith(
-        [
-          "corbits-memory-tools-1.9.0.tgz",
-          "corbits-memory-tools-2.0.0-rc.1.tgz",
-        ],
+        ["corbits-memory-tools-1.9.0.tgz", "corbits-memory-tools-2.0.0-rc.1.tgz"],
         c,
       ),
     },
@@ -95,10 +86,7 @@ test("a prerelease wins only when the registry carries no stable version", async
     {
       db: registryDb(c),
       assetService: assetServiceWith(
-        [
-          "corbits-memory-tools-2.0.0-rc.1.tgz",
-          "corbits-memory-tools-2.0.0-rc.2.tgz",
-        ],
+        ["corbits-memory-tools-2.0.0-rc.1.tgz", "corbits-memory-tools-2.0.0-rc.2.tgz"],
         c,
       ),
     },
@@ -172,11 +160,7 @@ test("createPinnedVersionResolver loads the registry and its listing at most onc
     {
       db: registryDb(c),
       assetService: assetServiceWith(
-        [
-          "corbits-a-tools-1.0.0.tgz",
-          "corbits-b-tools-2.0.0.tgz",
-          "corbits-c-tools-3.0.0.tgz",
-        ],
+        ["corbits-a-tools-1.0.0.tgz", "corbits-b-tools-2.0.0.tgz", "corbits-c-tools-3.0.0.tgz"],
         c,
       ),
     },
diff --git a/packages/agent-directory/src/tool-package-version.ts b/packages/agent-directory/src/tool-package-version.ts
index 3e66e34bf6..3e047e4e1c 100644
--- a/packages/agent-directory/src/tool-package-version.ts
+++ b/packages/agent-directory/src/tool-package-version.ts
@@ -22,10 +22,7 @@ import type { DB } from "@intx/db";
 import { resolveAssetByName } from "@intx/db";
 import type { AssetService } from "@intx/hub-sessions";
 
-import {
-  CORBITS_TOOLS_REGISTRY,
-  tarballCoversPackage,
-} from "@corbits/tool-registry-publish";
+import { CORBITS_TOOLS_REGISTRY, tarballCoversPackage } from "@corbits/tool-registry-publish";
 
 import { CapabilityOutOfInventoryError } from "./capability-inventory";
 
@@ -49,10 +46,7 @@ export type ResolvePinnedVersionDeps = {
  * for a filename that does not cover `packageName` or does not parse as
  * a valid semver version — a defensively-shaped filename is treated as
  * absent rather than crashing the resolution. */
-function versionFromTarballFilename(
-  filename: string,
-  packageName: string,
-): string | null {
+function versionFromTarballFilename(filename: string, packageName: string): string | null {
   if (!tarballCoversPackage(filename, packageName)) return null;
   const prefix = `${packageName.replace(/^@/, "").replace("/", "-")}-`;
   const version = filename.slice(prefix.length, -".tgz".length);
@@ -66,12 +60,8 @@ function versionFromTarballFilename(
  * because prerelease identifiers still sort after a lower release under
  * plain semver comparison for a higher major/minor/patch, silently
  * pinning a pre-release build a person never asked for. */
-function highestPreferringStable(
-  versions: readonly string[],
-): string | undefined {
-  const stable = versions.filter(
-    (version) => semver.prerelease(version) === null,
-  );
+function highestPreferringStable(versions: readonly string[]): string | undefined {
+  const stable = versions.filter((version) => semver.prerelease(version) === null);
   const candidates = stable.length > 0 ? stable : versions;
   return candidates.slice().sort(semver.compare).at(-1);
 }
diff --git a/packages/agent-directory/src/validation.ts b/packages/agent-directory/src/validation.ts
index 7c50806395..75c24a6d9b 100644
--- a/packages/agent-directory/src/validation.ts
+++ b/packages/agent-directory/src/validation.ts
@@ -33,8 +33,7 @@ function boundedNonBlankString(max: number) {
 const SkillNameArray = skillNameSchema.array().narrow((skills, ctx) => {
   const seen = new Set<string>();
   for (const name of skills) {
-    if (seen.has(name))
-      return ctx.mustBe(`a list without duplicate skill "${name}"`);
+    if (seen.has(name)) return ctx.mustBe(`a list without duplicate skill "${name}"`);
     seen.add(name);
   }
   return true;
@@ -43,17 +42,14 @@ const SkillNameArray = skillNameSchema.array().narrow((skills, ctx) => {
 // A pinned tool package names a `@corbits/*` workspace package, the only
 // namespace this catalog ever resolves a pin against.
 const ToolPackageNamePattern = type(/^@corbits\/[a-z0-9-]+$/);
-const ToolPackagePinArray = ToolPackageNamePattern.array().narrow(
-  (pins, ctx) => {
-    const seen = new Set<string>();
-    for (const name of pins) {
-      if (seen.has(name))
-        return ctx.mustBe(`a list without duplicate tool package "${name}"`);
-      seen.add(name);
-    }
-    return true;
-  },
-);
+const ToolPackagePinArray = ToolPackageNamePattern.array().narrow((pins, ctx) => {
+  const seen = new Set<string>();
+  for (const name of pins) {
+    if (seen.has(name)) return ctx.mustBe(`a list without duplicate tool package "${name}"`);
+    seen.add(name);
+  }
+  return true;
+});
 
 export const CreateAgentDefinitionInput = type({
   name: boundedNonBlankString(100),
@@ -73,8 +69,7 @@ export const CreateAgentDefinitionInput = type({
   // agent-directory create, Scout, Jimmy).
   "toolPackagePins?": ToolPackagePinArray,
 });
-export type CreateAgentDefinitionInput =
-  typeof CreateAgentDefinitionInput.infer;
+export type CreateAgentDefinitionInput = typeof CreateAgentDefinitionInput.infer;
 
 /** The body of a request that replaces a definition's attached skills
  * wholesale — an empty array clears every attachment, never a partial
@@ -92,8 +87,7 @@ export const UpdateAgentInstructionsInput = type({
   name: boundedNonBlankString(100),
   systemPrompt: boundedNonBlankString(8000),
 });
-export type UpdateAgentInstructionsInput =
-  typeof UpdateAgentInstructionsInput.infer;
+export type UpdateAgentInstructionsInput = typeof UpdateAgentInstructionsInput.infer;
 
 /** The body of a request that moves a definition between the two
  * lifecycle states the schema knows: `deployed` (launchable, listed
@@ -104,8 +98,7 @@ export type UpdateAgentInstructionsInput =
 export const UpdateDefinitionStatusInput = type({
   status: "'deployed' | 'stopped'",
 });
-export type UpdateDefinitionStatusInput =
-  typeof UpdateDefinitionStatusInput.infer;
+export type UpdateDefinitionStatusInput = typeof UpdateDefinitionStatusInput.infer;
 
 /** The body of a request that restores a definition to an earlier
  * commit on its own asset history — the same `commitSha` shape
diff --git a/packages/agent-directory/src/workflow-capability-routes.ts b/packages/agent-directory/src/workflow-capability-routes.ts
index 41c7645163..bd377740fd 100644
--- a/packages/agent-directory/src/workflow-capability-routes.ts
+++ b/packages/agent-directory/src/workflow-capability-routes.ts
@@ -80,10 +80,7 @@ export type WorkflowCapabilityRunScope = {
 };
 
 export type WorkflowRunAuthenticator = {
-  resolve(
-    token: string,
-    runAddress: string,
-  ): Promise<WorkflowCapabilityRunScope | null>;
+  resolve(token: string, runAddress: string): Promise<WorkflowCapabilityRunScope | null>;
 };
 
 export type WorkflowCapabilitiesEnv = {
@@ -102,11 +99,7 @@ function definitionNotFound(definitionId: string) {
 function hostGuardedRow(
   row: { readonly name: string; readonly assetId: string | null } | undefined,
 ): row is { readonly name: string; readonly assetId: string } {
-  return (
-    row !== undefined &&
-    row.assetId !== null &&
-    !isWorkbenchHostDefinitionName(row.name)
-  );
+  return row !== undefined && row.assetId !== null && !isWorkbenchHostDefinitionName(row.name);
 }
 
 export type CreateWorkflowCapabilityRoutesDeps = {
@@ -129,16 +122,10 @@ export function createWorkflowCapabilityRoutes(
 
   app.onError((err, c) => {
     if (err instanceof CapabilityOutOfInventoryError) {
-      return c.json(
-        makeErrorEnvelope({ code: "bad_request", userMessage: err.message }),
-        400,
-      );
+      return c.json(makeErrorEnvelope({ code: "bad_request", userMessage: err.message }), 400);
     }
     if (err instanceof RetiredWorkflowEnvelopeError) {
-      return c.json(
-        makeErrorEnvelope({ code: "conflict", userMessage: err.message }),
-        409,
-      );
+      return c.json(makeErrorEnvelope({ code: "conflict", userMessage: err.message }), 409);
     }
     if (err instanceof WorkflowAuthorError) {
       return c.json(
@@ -151,17 +138,14 @@ export function createWorkflowCapabilityRoutes(
 
   app.use("*", async (c, next) => {
     const authHeader = c.req.header("authorization") ?? "";
-    const token = authHeader.startsWith("Bearer ")
-      ? authHeader.slice("Bearer ".length)
-      : "";
+    const token = authHeader.startsWith("Bearer ") ? authHeader.slice("Bearer ".length) : "";
     const address = c.req.header("x-workflow-run-address") ?? "";
     const scope = await deps.authenticator.resolve(token, address);
     if (scope === null) {
       return c.json(
         makeErrorEnvelope({
           code: "unauthorized",
-          userMessage:
-            "Missing or unrecognized sidecar bearer token / run address",
+          userMessage: "Missing or unrecognized sidecar bearer token / run address",
         }),
         401,
       );
@@ -195,8 +179,7 @@ export function createWorkflowCapabilityRoutes(
       return c.json(
         makeErrorEnvelope({
           code: "forbidden",
-          userMessage:
-            "A workflow run may only request capabilities for its own agent definition",
+          userMessage: "A workflow run may only request capabilities for its own agent definition",
         }),
         403,
       );
diff --git a/packages/agent-directory/src/workflow-create-routes.ts b/packages/agent-directory/src/workflow-create-routes.ts
index b7352c7527..0c097daf09 100644
--- a/packages/agent-directory/src/workflow-create-routes.ts
+++ b/packages/agent-directory/src/workflow-create-routes.ts
@@ -89,12 +89,9 @@ const CreateWorkflowAgentDefinitionInput = type({
  * automatable catalog workflow, and not a workbench host's own silent
  * anchor definition.
  */
-function isConversationalAgentDefinition(definition: {
-  readonly name: string;
-}): boolean {
+function isConversationalAgentDefinition(definition: { readonly name: string }): boolean {
   return (
-    !isAutomatableWorkflowName(definition.name) &&
-    !isWorkbenchHostDefinitionName(definition.name)
+    !isAutomatableWorkflowName(definition.name) && !isWorkbenchHostDefinitionName(definition.name)
   );
 }
 
@@ -115,33 +112,24 @@ export function createWorkflowAgentCreateRoutes(
 
   app.onError((err, c) => {
     if (err instanceof CapabilityOutOfInventoryError) {
-      return c.json(
-        makeErrorEnvelope({ code: "bad_request", userMessage: err.message }),
-        400,
-      );
+      return c.json(makeErrorEnvelope({ code: "bad_request", userMessage: err.message }), 400);
     }
     if (err instanceof DuplicateAgentHandleError) {
-      return c.json(
-        makeErrorEnvelope({ code: "conflict", userMessage: err.message }),
-        409,
-      );
+      return c.json(makeErrorEnvelope({ code: "conflict", userMessage: err.message }), 409);
     }
     throw err;
   });
 
   app.use("*", async (c, next) => {
     const authHeader = c.req.header("authorization") ?? "";
-    const token = authHeader.startsWith("Bearer ")
-      ? authHeader.slice("Bearer ".length)
-      : "";
+    const token = authHeader.startsWith("Bearer ") ? authHeader.slice("Bearer ".length) : "";
     const address = c.req.header("x-workflow-run-address") ?? "";
     const scope = await deps.authenticator.resolve(token, address);
     if (scope === null) {
       return c.json(
         makeErrorEnvelope({
           code: "unauthorized",
-          userMessage:
-            "Missing or unrecognized sidecar bearer token / run address",
+          userMessage: "Missing or unrecognized sidecar bearer token / run address",
         }),
         401,
       );
@@ -152,9 +140,7 @@ export function createWorkflowAgentCreateRoutes(
 
   app.post("/definitions", async (c) => {
     const scope = c.get("workflowCapabilityScope");
-    const body = CreateWorkflowAgentDefinitionInput(
-      await c.req.json().catch(() => undefined),
-    );
+    const body = CreateWorkflowAgentDefinitionInput(await c.req.json().catch(() => undefined));
     if (body instanceof type.errors) {
       return c.json(
         makeErrorEnvelope({
@@ -195,9 +181,7 @@ export function createWorkflowAgentCreateRoutes(
     // `./routes.ts`'s `POST /` caller builds its own core input this
     // way: an absent `model`/`toolPackagePins` must be an absent key.
     const coreInput: {
-      -readonly [
-        K in keyof CreateAgentDefinitionCoreInput
-      ]: CreateAgentDefinitionCoreInput[K];
+      -readonly [K in keyof CreateAgentDefinitionCoreInput]: CreateAgentDefinitionCoreInput[K];
     } = {
       tenantId: scope.tenantId,
       principalId: scope.principalId,
@@ -217,9 +201,7 @@ export function createWorkflowAgentCreateRoutes(
     // asked, no fallback consulted.
     let modelNote: string | null = null;
     if (body.model !== undefined) {
-      const knownModel = inventory.models.some(
-        (entry) => entry.canonicalName === body.model,
-      );
+      const knownModel = inventory.models.some((entry) => entry.canonicalName === body.model);
       if (knownModel) {
         coreInput.model = body.model;
       } else {
diff --git a/packages/agent-directory/src/workflow-skill-pin-routes.ts b/packages/agent-directory/src/workflow-skill-pin-routes.ts
index 3b6196ffc7..ba8958bb67 100644
--- a/packages/agent-directory/src/workflow-skill-pin-routes.ts
+++ b/packages/agent-directory/src/workflow-skill-pin-routes.ts
@@ -73,11 +73,7 @@ function definitionNotFound(definitionId: string) {
 function hostGuardedRow(
   row: { readonly name: string; readonly assetId: string | null } | undefined,
 ): row is { readonly name: string; readonly assetId: string } {
-  return (
-    row !== undefined &&
-    row.assetId !== null &&
-    !isWorkbenchHostDefinitionName(row.name)
-  );
+  return row !== undefined && row.assetId !== null && !isWorkbenchHostDefinitionName(row.name);
 }
 
 const PinBody = type({
@@ -107,10 +103,7 @@ export function createWorkflowSkillPinRoutes(
   // conflict, never a server fault.
   app.onError((err, c) => {
     if (err instanceof RetiredWorkflowEnvelopeError) {
-      return c.json(
-        makeErrorEnvelope({ code: "conflict", userMessage: err.message }),
-        409,
-      );
+      return c.json(makeErrorEnvelope({ code: "conflict", userMessage: err.message }), 409);
     }
     if (err instanceof WorkflowAuthorError) {
       return c.json(
@@ -123,17 +116,14 @@ export function createWorkflowSkillPinRoutes(
 
   app.use("*", async (c, next) => {
     const authHeader = c.req.header("authorization") ?? "";
-    const token = authHeader.startsWith("Bearer ")
-      ? authHeader.slice("Bearer ".length)
-      : "";
+    const token = authHeader.startsWith("Bearer ") ? authHeader.slice("Bearer ".length) : "";
     const address = c.req.header("x-workflow-run-address") ?? "";
     const scope = await deps.authenticator.resolve(token, address);
     if (scope === null) {
       return c.json(
         makeErrorEnvelope({
           code: "unauthorized",
-          userMessage:
-            "Missing or unrecognized sidecar bearer token / run address",
+          userMessage: "Missing or unrecognized sidecar bearer token / run address",
         }),
         401,
       );
@@ -174,17 +164,11 @@ export function createWorkflowSkillPinRoutes(
         // stanza is the source of truth, so a concurrent writer's pins
         // survive the retry instead of being clobbered by a stale read.
         const skills = readPinnedSkillNames(snapshot);
-        const nextSkills = skills.includes(body.skillName)
-          ? skills
-          : [...skills, body.skillName];
+        const nextSkills = skills.includes(body.skillName) ? skills : [...skills, body.skillName];
         return {
           workflowJson: reindexPinnedSkills(
             snapshot,
-            await deps.skillIndex.resolve(
-              scope.tenantId,
-              scope.principalId,
-              nextSkills,
-            ),
+            await deps.skillIndex.resolve(scope.tenantId, scope.principalId, nextSkills),
           ),
           message: `Pin ${body.skillName} skill to ${row.name}`,
           result: { skills: nextSkills },
diff --git a/packages/agent-directory/test/agent-definition-draft-routes.test.ts b/packages/agent-directory/test/agent-definition-draft-routes.test.ts
index 7e3f866d34..5ec204b458 100644
--- a/packages/agent-directory/test/agent-definition-draft-routes.test.ts
+++ b/packages/agent-directory/test/agent-definition-draft-routes.test.ts
@@ -70,10 +70,7 @@ function buildApp(
   return app;
 }
 
-async function postDraft(
-  app: Hono<TenantEnv>,
-  body: unknown,
-): Promise<Response> {
+async function postDraft(app: Hono<TenantEnv>, body: unknown): Promise<Response> {
   return app.request("/agent-definitions/draft", {
     method: "POST",
     headers: { "content-type": "application/json" },
@@ -105,9 +102,7 @@ afterEach(() => resetSync());
 describe("agent-definition draft route envelope", () => {
   test("a drafting failure answers 422 makeErrorEnvelope and reports the same refId", async () => {
     const app = buildApp(() =>
-      Promise.reject(
-        new MyraAgentDefinitionDraftingUnavailableError("tnt_1", "no myra"),
-      ),
+      Promise.reject(new MyraAgentDefinitionDraftingUnavailableError("tnt_1", "no myra")),
     );
 
     const res = await postDraft(app, { name: "Research Buddy" });
@@ -122,23 +117,17 @@ describe("agent-definition draft route envelope", () => {
     expect(envelope?.error.refId.length).toBeGreaterThan(0);
     expect(JSON.stringify(body)).not.toContain("no myra");
     expect(JSON.stringify(body)).not.toContain("stack");
-    expect(
-      (body as { error: { message?: unknown } }).error.message,
-    ).toBeUndefined();
+    expect((body as { error: { message?: unknown } }).error.message).toBeUndefined();
 
     expect(records).toHaveLength(1);
     expect(records[0]?.properties.refId).toBe(envelope?.error.refId);
-    expect(records[0]?.properties.operation).toBe(
-      "agentDirectory.draftAgentDefinition",
-    );
+    expect(records[0]?.properties.operation).toBe("agentDirectory.draftAgentDefinition");
     expect(records[0]?.properties.tenantId).toBe("tnt_1");
   });
 
   test("an OneShotRunUnreachableError maps to the 422 drafting_failed envelope", async () => {
     const app = buildApp(() =>
-      Promise.reject(
-        new OneShotRunUnreachableError(new Error("agent is unreachable")),
-      ),
+      Promise.reject(new OneShotRunUnreachableError(new Error("agent is unreachable"))),
     );
 
     const res = await postDraft(app, { name: "Research Buddy" });
@@ -166,9 +155,7 @@ describe("agent-definition draft route envelope", () => {
     expect(envelope).toBeDefined();
     expect(envelope?.error.code).toBe("bad_request");
     expect(envelope?.error.userMessage.length).toBeGreaterThan(0);
-    expect(
-      (body as { error: { message?: unknown } }).error.message,
-    ).toBeUndefined();
+    expect((body as { error: { message?: unknown } }).error.message).toBeUndefined();
   });
 
   test("an unexpected throw is not mapped to drafting_failed", async () => {
diff --git a/packages/agent-directory/test/agent-workflow.test.ts b/packages/agent-directory/test/agent-workflow.test.ts
index bed9d5afd5..7d211d58b0 100644
--- a/packages/agent-directory/test/agent-workflow.test.ts
+++ b/packages/agent-directory/test/agent-workflow.test.ts
@@ -26,9 +26,7 @@ const INPUT = {
 function agentStep(definition: WorkflowDefinition): StepPrimitive {
   const primitive = definition.steps[AGENT_DEFINITION_STEP_ID];
   if (primitive === undefined || primitive.kind !== "step") {
-    throw new Error(
-      `definition has no step primitive named ${AGENT_DEFINITION_STEP_ID}`,
-    );
+    throw new Error(`definition has no step primitive named ${AGENT_DEFINITION_STEP_ID}`);
   }
   return primitive;
 }
@@ -81,21 +79,17 @@ test("a supplied toolPackagePins lands on the step's agent verbatim", () => {
 
 test("the trigger address is derived from the handle and tenant domain", () => {
   const definition = buildAgentDefinitionWorkflow(INPUT);
-  expect(definition.triggers).toEqual([
-    { type: "mail", to: "research-buddy@example.test" },
-  ]);
+  expect(definition.triggers).toEqual([{ type: "mail", to: "research-buddy@example.test" }]);
 });
 
 test("an empty handle is rejected", () => {
-  expect(() => buildAgentDefinitionWorkflow({ ...INPUT, handle: "" })).toThrow(
-    /non-empty handle/,
-  );
+  expect(() => buildAgentDefinitionWorkflow({ ...INPUT, handle: "" })).toThrow(/non-empty handle/);
 });
 
 test("an empty system prompt is rejected", () => {
-  expect(() =>
-    buildAgentDefinitionWorkflow({ ...INPUT, systemPrompt: "" }),
-  ).toThrow(/non-empty systemPrompt/);
+  expect(() => buildAgentDefinitionWorkflow({ ...INPUT, systemPrompt: "" })).toThrow(
+    /non-empty systemPrompt/,
+  );
 });
 
 test("serialization round-trips through JSON byte-faithfully", () => {
@@ -120,8 +114,6 @@ test("a pinned model can be un-pinned, leaving the prompt and pins untouched", (
 });
 
 test("un-pinning a model on a definition that never had one is a no-op", () => {
-  const json = serializeAgentDefinitionWorkflow(
-    buildAgentDefinitionWorkflow(INPUT),
-  );
+  const json = serializeAgentDefinitionWorkflow(buildAgentDefinitionWorkflow(INPUT));
   expect(readAgentCapabilities(withoutAgentModel(json)).model).toBeUndefined();
 });
diff --git a/packages/agent-directory/test/migrations.test.ts b/packages/agent-directory/test/migrations.test.ts
index 521121f385..ff69909f04 100644
--- a/packages/agent-directory/test/migrations.test.ts
+++ b/packages/agent-directory/test/migrations.test.ts
@@ -19,15 +19,10 @@ function scratchUrlFor(e2eUrl: string): string {
 const databaseUrl = e2eDatabaseUrl();
 const describeIfDb = dbGate(databaseUrl, import.meta.path);
 
-const migrationNames = [
-  "0001_definition_skills",
-  "0002_drop_definition_skills",
-];
+const migrationNames = ["0001_definition_skills", "0002_drop_definition_skills"];
 
 describeIfDb("applyAgentDirectoryMigrations", () => {
-  const scratchUrl = scratchUrlFor(
-    databaseUrl ?? "postgres://localhost:5432/unused",
-  );
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused");
   const scratchDatabase = new URL(scratchUrl).pathname.replace(/^\//, "");
 
   beforeAll(async () => {
diff --git a/packages/agent-directory/test/routes.integration.test.ts b/packages/agent-directory/test/routes.integration.test.ts
index 90cc555888..1cf7ab5bc3 100644
--- a/packages/agent-directory/test/routes.integration.test.ts
+++ b/packages/agent-directory/test/routes.integration.test.ts
@@ -80,9 +80,7 @@ const fakeCapabilityInventory: CapabilityInventoryProvider = {
 
 const fakeSkillIndex: PinnedSkillIndexResolver = {
   resolve: (_tenantId, _principalId, names) =>
-    Promise.resolve(
-      names.map((name) => ({ name, description: `What ${name} does.` })),
-    ),
+    Promise.resolve(names.map((name) => ({ name, description: `What ${name} does.` }))),
 };
 
 const fakeHistory: DefinitionAssetHistory = {
@@ -110,9 +108,7 @@ async function post(app: Hono<TenantEnv>, body: unknown): Promise<Response> {
  * the stub still projects a `workflow_definition` row directly (the one
  * piece of the real deploy every route's read-back depends on) rather
  * than faking the whole install/probe/gate/freeze pipeline. */
-function recordingAgentDefinitionDeployer(
-  db: ReturnType<typeof createDB>["db"],
-) {
+function recordingAgentDefinitionDeployer(db: ReturnType<typeof createDB>["db"]) {
   const deploys: {
     tenantId: string;
     principalId: string;
diff --git a/packages/agent-directory/test/routes.test.ts b/packages/agent-directory/test/routes.test.ts
index 35987aa207..71eeb3ba73 100644
--- a/packages/agent-directory/test/routes.test.ts
+++ b/packages/agent-directory/test/routes.test.ts
@@ -29,10 +29,7 @@ import {
   readAgentDefinitionWorkflowJson,
   RetiredWorkflowEnvelopeError,
 } from "../src/definition-asset";
-import {
-  createAgentDefinitionRoutes,
-  SkillIndexResolutionError,
-} from "../src/routes";
+import { createAgentDefinitionRoutes, SkillIndexResolutionError } from "../src/routes";
 import type { PinnedSkillIndexResolver } from "../src/routes";
 import {
   createWorkflowSkillPinRoutes,
@@ -40,19 +37,13 @@ import {
 } from "../src/workflow-skill-pin-routes";
 import type { DefinitionAssetHistory } from "../src/definition-history";
 import type { CapabilityInventoryProvider } from "../src/capability-inventory";
-import {
-  definitionFrom,
-  SOURCE_TREE_PATHS,
-  storedDefinitionBytesWithSkills,
-} from "./source-tree";
+import { definitionFrom, SOURCE_TREE_PATHS, storedDefinitionBytesWithSkills } from "./source-tree";
 
 /** A `readAssetBlob` that always answers the definition's entry module
  * with `workflowBytes` — pins live in the asset's own stanza, so a test
  * that needs a definition's skills stubs the bytes with
  * `storedDefinitionBytesWithSkills` instead of seeding side state. */
-function readAssetBlobFor(
-  workflowBytes: Uint8Array,
-): AssetService["readAssetBlob"] {
+function readAssetBlobFor(workflowBytes: Uint8Array): AssetService["readAssetBlob"] {
   return () => Promise.resolve(workflowBytes);
 }
 
@@ -65,9 +56,7 @@ const fakeCapabilityInventory: CapabilityInventoryProvider = {
     }),
 };
 
-function fakeHistory(
-  overrides: Partial<DefinitionAssetHistory> = {},
-): DefinitionAssetHistory {
+function fakeHistory(overrides: Partial<DefinitionAssetHistory> = {}): DefinitionAssetHistory {
   return {
     history: () => Promise.resolve([]),
     readBlobAtCommit: () => Promise.resolve(null),
@@ -79,9 +68,7 @@ function fakeHistory(
  * can assert on the stanza without standing up the registry. */
 const fakeSkillIndex: PinnedSkillIndexResolver = {
   resolve: (_tenantId, _principalId, names) =>
-    Promise.resolve(
-      names.map((name) => ({ name, description: `What ${name} does.` })),
-    ),
+    Promise.resolve(names.map((name) => ({ name, description: `What ${name} does.` }))),
 };
 
 const TENANT = {
@@ -175,18 +162,13 @@ function liveDefinitionAsset(initial: Uint8Array): AssetService {
     // fixed version — enough for `resolvePinnedVersion` to resolve
     // without each concurrent-write test needing its own tarball list.
     listAssetBlobs: () =>
-      Promise.resolve([
-        "corbits-github-tools-3.1.0.tgz",
-        "corbits-memory-tools-1.4.0.tgz",
-      ]),
+      Promise.resolve(["corbits-github-tools-3.1.0.tgz", "corbits-memory-tools-1.4.0.tgz"]),
   });
 }
 
 /** The entry module a stored definition's asset carries, so the PUT
  * path has something real to re-index. */
-function storedDefinitionBytes(
-  systemPrompt = "You are a careful research assistant.",
-): Uint8Array {
+function storedDefinitionBytes(systemPrompt = "You are a careful research assistant."): Uint8Array {
   const tree = agentDefinitionSourceTree({
     handle: "research-buddy",
     workflowJson: serializeAgentDefinitionWorkflow(
@@ -223,10 +205,7 @@ function storedDefinitionBytesWithModel(model: string): Uint8Array {
  * pins none. */
 function modelFrom(workflowJson: string): string | undefined {
   const parsed = JSON.parse(workflowJson) as {
-    steps: Record<
-      string,
-      { agent: { inference?: { sources: { model?: string }[] } } }
-    >;
+    steps: Record<string, { agent: { inference?: { sources: { model?: string }[] } } }>;
   };
   const step = Object.values(parsed.steps)[0];
   if (step === undefined) throw new Error("definition carries no steps");
@@ -236,10 +215,7 @@ function modelFrom(workflowJson: string): string | undefined {
 /** The one step agent's tool-package pins inside a serialized definition. */
 function pinsFrom(workflowJson: string): { name: string; version: string }[] {
   const parsed = JSON.parse(workflowJson) as {
-    steps: Record<
-      string,
-      { agent: { toolPackagePins?: { name: string; version: string }[] } }
-    >;
+    steps: Record<string, { agent: { toolPackagePins?: { name: string; version: string }[] } }>;
   };
   const step = Object.values(parsed.steps)[0];
   if (step === undefined) throw new Error("definition carries no steps");
@@ -321,8 +297,7 @@ function fakeDb(opts: FakeDbOptions = {}): DB["db"] {
         const chain: Record<string, unknown> = {
           onConflictDoNothing: () => chain,
           returning: () => Promise.resolve([{ id: "def_new" }]),
-          then: (onFulfilled: unknown) =>
-            Promise.resolve([]).then(onFulfilled as never),
+          then: (onFulfilled: unknown) => Promise.resolve([]).then(onFulfilled as never),
         };
         return chain;
       },
@@ -404,11 +379,7 @@ async function post(app: Hono<TenantEnv>, body: unknown): Promise<Response> {
   });
 }
 
-async function postTo(
-  app: Hono<TenantEnv>,
-  path: string,
-  body: unknown,
-): Promise<Response> {
+async function postTo(app: Hono<TenantEnv>, path: string, body: unknown): Promise<Response> {
   return app.request(path, {
     method: "POST",
     headers: { "content-type": "application/json" },
@@ -416,11 +387,7 @@ async function postTo(
   });
 }
 
-async function put(
-  app: Hono<TenantEnv>,
-  path: string,
-  body: unknown,
-): Promise<Response> {
+async function put(app: Hono<TenantEnv>, path: string, body: unknown): Promise<Response> {
   return app.request(path, {
     method: "PUT",
     headers: { "content-type": "application/json" },
@@ -540,8 +507,7 @@ function fakeCreateDb(): DB["db"] {
         const chain: Record<string, unknown> = {
           onConflictDoNothing: () => chain,
           returning: () => Promise.resolve([{ id: "def_new" }]),
-          then: (onFulfilled: unknown) =>
-            Promise.resolve([]).then(onFulfilled as never),
+          then: (onFulfilled: unknown) => Promise.resolve([]).then(onFulfilled as never),
         };
         return chain;
       },
@@ -656,10 +622,7 @@ test("a create request with toolPackagePins pins each named package at its highe
         return Promise.resolve({ commitSha: "deadbeef" });
       },
       listAssetBlobs: () =>
-        Promise.resolve([
-          "corbits-memory-tools-1.4.0.tgz",
-          "corbits-web-search-tools-2.1.0.tgz",
-        ]),
+        Promise.resolve(["corbits-memory-tools-1.4.0.tgz", "corbits-web-search-tools-2.1.0.tgz"]),
     }),
     withToolPackageRegistryQueries(fakeCreateDb()),
   );
@@ -688,9 +651,7 @@ test("a create request rejects a toolPackagePins entry outside the @corbits scop
   expect(response.status).toBe(400);
 });
 
-function fakeSkillsDb(
-  row: { id: string; assetId: string | null } | undefined,
-): DB["db"] {
+function fakeSkillsDb(row: { id: string; assetId: string | null } | undefined): DB["db"] {
   return {
     query: {
       workflowDefinition: {
@@ -726,9 +687,7 @@ test("GET /skills returns an empty list for a definition with no pinned skills",
 test("GET /skills returns the stanza's pinned skills", async () => {
   const app = buildApp(
     fakeAssetService({
-      readAssetBlob: readAssetBlobFor(
-        storedDefinitionBytesWithSkills("web-research"),
-      ),
+      readAssetBlob: readAssetBlobFor(storedDefinitionBytesWithSkills("web-research")),
     }),
     fakeSkillsDb({ id: "def_1", assetId: "ast_1" }),
   );
@@ -812,9 +771,7 @@ test("PUT /:definitionId/skills replaces the skill set, writing the definition s
   expect(response.status).toBe(200);
   expect(Object.keys(writtenFiles ?? {})).toEqual(SOURCE_TREE_PATHS);
   // The written tree's stanza is the pins — no side table to consult.
-  expect(readPinnedSkillNames(definitionFrom(writtenFiles))).toEqual([
-    "long-form-write",
-  ]);
+  expect(readPinnedSkillNames(definitionFrom(writtenFiles))).toEqual(["long-form-write"]);
   const body = (await response.json()) as { skills: readonly string[] };
   expect(body.skills).toEqual(["long-form-write"]);
 });
@@ -870,17 +827,12 @@ test("PUT /:definitionId/skills with no pins strips the index from the prompt",
   );
   await put(app, "/def_1/skills", { skills: [] });
   const workflowJson = definitionFrom(writtenFiles);
-  expect(promptFrom(workflowJson)).toBe(
-    "You are a careful research assistant.",
-  );
+  expect(promptFrom(workflowJson)).toBe("You are a careful research assistant.");
   expect(pinsFrom(workflowJson)).toEqual([]);
 });
 
 test("PUT /:definitionId/skills rejects a duplicate skill name with a 400", async () => {
-  const app = buildApp(
-    fakeAssetService(),
-    fakeSkillsDb({ id: "def_1", assetId: "ast_1" }),
-  );
+  const app = buildApp(fakeAssetService(), fakeSkillsDb({ id: "def_1", assetId: "ast_1" }));
   const response = await put(app, "/def_1/skills", {
     skills: ["Web research", "Web research"],
   });
@@ -888,10 +840,7 @@ test("PUT /:definitionId/skills rejects a duplicate skill name with a 400", asyn
 });
 
 test("PUT /:definitionId/skills rejects a blank skill name with a 400", async () => {
-  const app = buildApp(
-    fakeAssetService(),
-    fakeSkillsDb({ id: "def_1", assetId: "ast_1" }),
-  );
+  const app = buildApp(fakeAssetService(), fakeSkillsDb({ id: "def_1", assetId: "ast_1" }));
   const response = await put(app, "/def_1/skills", { skills: ["   "] });
   expect(response.status).toBe(400);
 });
@@ -989,9 +938,7 @@ test("GET /:definitionId returns the agent's display name and system prompt", as
 /** A `readAssetBlob` for an asset written before the source-form
  * cutover: it carries a bare `workflow.json`, so the entry module the
  * routes read is simply absent. */
-function retiredEnvelopeAssetService(
-  overrides: Partial<AssetService> = {},
-): AssetService {
+function retiredEnvelopeAssetService(overrides: Partial<AssetService> = {}): AssetService {
   return fakeAssetService({
     readAssetBlob: (params) =>
       Promise.reject(
@@ -1062,9 +1009,7 @@ test("PUT /:definitionId writes the new system prompt in a single source-tree co
   const app = buildApp(
     fakeAssetService({
       readAssetBlob: () =>
-        Promise.resolve(
-          storedDefinitionBytes("You are a careful research assistant."),
-        ),
+        Promise.resolve(storedDefinitionBytes("You are a careful research assistant.")),
       populateAsset: (params) => {
         writtenFiles = params.tree.files;
         return Promise.resolve({ commitSha: "deadbeef" });
@@ -1163,11 +1108,9 @@ test("PUT instructions after a newer tarball lands keeps the stored pin version"
   });
   expect(response.status).toBe(200);
   expect(listCalls).toBe(0);
-  expect(
-    pinsFrom(
-      definitionFrom({ [AGENT_DEFINITION_ENTRY_PATH]: writtenEntry ?? "" }),
-    ),
-  ).toEqual([{ name: "@corbits/memory-tools", version: "1.4.0" }]);
+  expect(pinsFrom(definitionFrom({ [AGENT_DEFINITION_ENTRY_PATH]: writtenEntry ?? "" }))).toEqual([
+    { name: "@corbits/memory-tools", version: "1.4.0" },
+  ]);
 });
 
 test("PUT /:definitionId 404s for an unknown definition", async () => {
@@ -1248,10 +1191,7 @@ test("GET /:definitionId scopes its grant check to this definition, not the tena
   await app.request("/def_1");
   expect(requireGrant.calls).toEqual([
     {
-      resource: idResource(
-        "workflow-definition",
-        "definitionId",
-      )({ param: () => "def_1" }),
+      resource: idResource("workflow-definition", "definitionId")({ param: () => "def_1" }),
       action: "read",
     },
   ]);
@@ -1375,9 +1315,7 @@ test("clearing a model rewrites the definition with no inference source", async
   let writtenMessage: string | undefined;
   const app = buildApp(
     fakeAssetService({
-      readAssetBlob: readAssetBlobFor(
-        storedDefinitionBytesWithModel("anthropic/claude-sonnet"),
-      ),
+      readAssetBlob: readAssetBlobFor(storedDefinitionBytesWithModel("anthropic/claude-sonnet")),
       populateAsset: (params) => {
         writtenFiles = params.tree.files;
         writtenMessage = params.tree.message;
@@ -1424,9 +1362,7 @@ test("clearing a model 404s for an unknown definition and scopes its grant per i
     requireGrant,
   );
   await app.request("/def_1/capabilities/model", { method: "DELETE" });
-  expect(requireGrant.calls).toEqual([
-    { resource: "workflow-definition:def_1", action: "update" },
-  ]);
+  expect(requireGrant.calls).toEqual([{ resource: "workflow-definition:def_1", action: "update" }]);
 });
 
 // --- PUT /:definitionId/status (archive and restore) ---
@@ -1450,9 +1386,7 @@ test("archiving a definition writes the stopped status and touches nothing else"
   const response = await put(app, "/def_1/status", { status: "stopped" });
   expect(response.status).toBe(200);
   expect(await response.json()).toEqual({ id: "def_1", status: "stopped" });
-  expect(db.directUpdateCalls).toEqual([
-    { status: "stopped", updatedAt: expect.any(Date) },
-  ]);
+  expect(db.directUpdateCalls).toEqual([{ status: "stopped", updatedAt: expect.any(Date) }]);
   // Archiving is a row-status change: the definition's asset and its git
   // history are never rewritten, which is what makes a restore possible.
   expect(populateCalled).toBe(false);
@@ -1467,9 +1401,7 @@ test("restoring a definition writes the deployed status back", async () => {
   const app = buildApp(fakeAssetService(), db);
   const response = await put(app, "/def_1/status", { status: "deployed" });
   expect(response.status).toBe(200);
-  expect(db.directUpdateCalls).toEqual([
-    { status: "deployed", updatedAt: expect.any(Date) },
-  ]);
+  expect(db.directUpdateCalls).toEqual([{ status: "deployed", updatedAt: expect.any(Date) }]);
 });
 
 test("a status outside the schema's two lifecycle states is a 400, never written", async () => {
@@ -1486,9 +1418,7 @@ test("a status outside the schema's two lifecycle states is a 400, never written
 
 test("status 404s for an unknown definition and for a workbench host", async () => {
   const unknown = buildApp(fakeAssetService(), fakeInstructionsDb(undefined));
-  expect(
-    (await put(unknown, "/def_missing/status", { status: "stopped" })).status,
-  ).toBe(404);
+  expect((await put(unknown, "/def_missing/status", { status: "stopped" })).status).toBe(404);
 
   const host = buildApp(
     fakeAssetService(),
@@ -1498,9 +1428,7 @@ test("status 404s for an unknown definition and for a workbench host", async ()
       name: `run-${"a".repeat(32)}`,
     }),
   );
-  expect(
-    (await put(host, "/def_host/status", { status: "stopped" })).status,
-  ).toBe(404);
+  expect((await put(host, "/def_host/status", { status: "stopped" })).status).toBe(404);
 });
 
 test("status scopes its grant check per definition id and requires update", async () => {
@@ -1515,9 +1443,7 @@ test("status scopes its grant check per definition id and requires update", asyn
     requireGrant,
   );
   await put(app, "/def_1/status", { status: "stopped" });
-  expect(requireGrant.calls).toEqual([
-    { resource: "workflow-definition:def_1", action: "update" },
-  ]);
+  expect(requireGrant.calls).toEqual([{ resource: "workflow-definition:def_1", action: "update" }]);
 });
 
 test("a create request indexes its pinned skills into the stored system prompt", async () => {
@@ -1555,9 +1481,7 @@ test("a create request indexes its pinned skills into the stored system prompt",
   expect(prompt).toContain("skills_load");
   // The prompt tells the model to call `skills_load`, so the bundle that
   // provides it must be pinned on the same push.
-  expect(pinsFrom(workflowJson)).toEqual([
-    { name: "@corbits/tools-skills", version: "0.0.3" },
-  ]);
+  expect(pinsFrom(workflowJson)).toEqual([{ name: "@corbits/tools-skills", version: "0.0.3" }]);
 });
 
 test("pinning a skill the registry cannot resolve is a 400, not a 500", async () => {
@@ -1565,10 +1489,7 @@ test("pinning a skill the registry cannot resolve is a 400, not a 500", async ()
     db: fakeCreateDb(),
     assetService: fakeAssetService(),
     skillIndex: {
-      resolve: () =>
-        Promise.reject(
-          new SkillIndexResolutionError('cannot pin skill "ghost"'),
-        ),
+      resolve: () => Promise.reject(new SkillIndexResolutionError('cannot pin skill "ghost"')),
     },
     history: fakeHistory(),
     capabilityInventory: fakeCapabilityInventory,
@@ -1623,9 +1544,7 @@ test("a create request with no pinned skills stores the author's prompt verbatim
     systemPrompt: "You are a careful research assistant.",
   });
   const workflowJson = definitionFrom(writtenFiles);
-  expect(promptFrom(workflowJson)).toBe(
-    "You are a careful research assistant.",
-  );
+  expect(promptFrom(workflowJson)).toBe("You are a careful research assistant.");
   expect(pinsFrom(workflowJson)).toEqual([]);
 });
 
@@ -1687,9 +1606,7 @@ test("GET /:definitionId/versions scopes its grant check per definition id", asy
     requireGrant,
   );
   await app.request("/def_1/versions");
-  expect(requireGrant.calls).toEqual([
-    { resource: "workflow-definition:def_1", action: "read" },
-  ]);
+  expect(requireGrant.calls).toEqual([{ resource: "workflow-definition:def_1", action: "read" }]);
 });
 
 // --- POST /:definitionId/restore ---
@@ -1775,9 +1692,7 @@ test("restore scopes its grant check per definition id and requires update", asy
     }),
   );
   await postTo(app, "/def_1/restore", { commitSha: "sha1" });
-  expect(requireGrant.calls).toEqual([
-    { resource: "workflow-definition:def_1", action: "update" },
-  ]);
+  expect(requireGrant.calls).toEqual([{ resource: "workflow-definition:def_1", action: "update" }]);
 });
 
 // --- POST /:definitionId/capabilities ---
@@ -1816,9 +1731,7 @@ test("adding a tool package pin merges it into the definition in one commit, nam
   const body = (await response.json()) as {
     toolPackagePins: { name: string; version: string }[];
   };
-  expect(body.toolPackagePins).toEqual([
-    { name: "@corbits/github-tools", version: "3.1.0" },
-  ]);
+  expect(body.toolPackagePins).toEqual([{ name: "@corbits/github-tools", version: "3.1.0" }]);
 });
 
 test("re-adding an already-pinned tool package keeps its stored version after a newer tarball lands", async () => {
@@ -1852,10 +1765,7 @@ test("re-adding an already-pinned tool package keeps its stored version after a
       // A newer tarball has landed since the pin was first added — this
       // re-add must not bump onto it.
       listAssetBlobs: () =>
-        Promise.resolve([
-          "corbits-memory-tools-1.4.0.tgz",
-          "corbits-memory-tools-1.5.0.tgz",
-        ]),
+        Promise.resolve(["corbits-memory-tools-1.4.0.tgz", "corbits-memory-tools-1.5.0.tgz"]),
     }),
     withToolPackageRegistryQueries(
       fakeInstructionsDb({
@@ -1887,9 +1797,7 @@ test("re-adding an already-pinned tool package keeps its stored version after a
   const body = (await response.json()) as {
     toolPackagePins: { name: string; version: string }[];
   };
-  expect(body.toolPackagePins).toEqual([
-    { name: "@corbits/memory-tools", version: "1.4.0" },
-  ]);
+  expect(body.toolPackagePins).toEqual([{ name: "@corbits/memory-tools", version: "1.4.0" }]);
 });
 
 test("adding a tool package pin the tenant's inventory doesn't offer is a 400, never written", async () => {
@@ -1969,9 +1877,7 @@ test("adding a skill merges it additively into the definition stanza and re-inde
   expect(Object.keys(writtenFiles ?? {})).toEqual(SOURCE_TREE_PATHS);
   // Pins live in the definition's own workflow stanza now — no store to
   // consult, the written source tree is the assertion.
-  expect(readPinnedSkillNames(definitionFrom(writtenFiles))).toEqual([
-    "research",
-  ]);
+  expect(readPinnedSkillNames(definitionFrom(writtenFiles))).toEqual(["research"]);
   expect(definitionFrom(writtenFiles).includes("research")).toBe(true);
   const body = (await response.json()) as { skills: string[] };
   expect(body.skills).toEqual(["research"]);
@@ -2022,9 +1928,7 @@ test("setting a model in the tenant's catalog writes a single named commit", asy
     canonicalName: "anthropic/claude-sonnet",
   });
   expect(response.status).toBe(200);
-  expect(writtenMessage).toBe(
-    "Set research-buddy's model to anthropic/claude-sonnet",
-  );
+  expect(writtenMessage).toBe("Set research-buddy's model to anthropic/claude-sonnet");
   const body = (await response.json()) as { model?: string };
   expect(body.model).toBe("anthropic/claude-sonnet");
 });
@@ -2046,9 +1950,7 @@ test("capabilities route scopes its grant check per definition id and requires u
     kind: "model",
     canonicalName: "anthropic/claude-sonnet",
   });
-  expect(requireGrant.calls).toEqual([
-    { resource: "workflow-definition:def_1", action: "update" },
-  ]);
+  expect(requireGrant.calls).toEqual([{ resource: "workflow-definition:def_1", action: "update" }]);
 });
 
 test("capabilities route 404s for an unknown definition", async () => {
@@ -2064,10 +1966,7 @@ test("two concurrent capability-adds on the same definition both land", async ()
   const inventory: CapabilityInventoryProvider = {
     resolve: () =>
       Promise.resolve({
-        toolPackages: [
-          { name: "@corbits/github-tools" },
-          { name: "@corbits/memory-tools" },
-        ],
+        toolPackages: [{ name: "@corbits/github-tools" }, { name: "@corbits/memory-tools" }],
         skills: [{ name: "research" }],
         models: [{ canonicalName: "anthropic/claude-sonnet" }],
       }),
@@ -2100,10 +1999,7 @@ test("two concurrent capability-adds on the same definition both land", async ()
   expect(first.status).toBe(200);
   expect(second.status).toBe(200);
 
-  const workflowJson = await readAgentDefinitionWorkflowJson(
-    assetService,
-    "ast_1",
-  );
+  const workflowJson = await readAgentDefinitionWorkflowJson(assetService, "ast_1");
   const names = pinsFrom(workflowJson)
     .map((pin) => pin.name)
     .toSorted();
@@ -2133,10 +2029,7 @@ test("concurrent PUT instructions and DELETE model both land", async () => {
   expect(putRes.status).toBe(200);
   expect(delRes.status).toBe(200);
 
-  const workflowJson = await readAgentDefinitionWorkflowJson(
-    assetService,
-    "ast_1",
-  );
+  const workflowJson = await readAgentDefinitionWorkflowJson(assetService, "ast_1");
   expect(promptFrom(workflowJson)).toBe("You are now a blunt researcher.");
   expect(modelFrom(workflowJson)).toBeUndefined();
 });
@@ -2164,14 +2057,9 @@ test("concurrent PUT skills and DELETE model both land", async () => {
   expect(skillsRes.status).toBe(200);
   expect(delRes.status).toBe(200);
 
-  const workflowJson = await readAgentDefinitionWorkflowJson(
-    assetService,
-    "ast_1",
-  );
+  const workflowJson = await readAgentDefinitionWorkflowJson(assetService, "ast_1");
   expect(readPinnedSkillNames(workflowJson)).toEqual(["long-form-write"]);
-  expect(promptFrom(workflowJson)).toContain(
-    "- long-form-write: What long-form-write does.",
-  );
+  expect(promptFrom(workflowJson)).toContain("- long-form-write: What long-form-write does.");
   expect(modelFrom(workflowJson)).toBeUndefined();
 });
 
@@ -2200,14 +2088,9 @@ test("concurrent DELETE model and a capability-add both land", async () => {
   expect(delRes.status).toBe(200);
   expect(capRes.status).toBe(200);
 
-  const workflowJson = await readAgentDefinitionWorkflowJson(
-    assetService,
-    "ast_1",
-  );
+  const workflowJson = await readAgentDefinitionWorkflowJson(assetService, "ast_1");
   expect(modelFrom(workflowJson)).toBeUndefined();
-  expect(pinsFrom(workflowJson).map((pin) => pin.name)).toContain(
-    "@corbits/github-tools",
-  );
+  expect(pinsFrom(workflowJson).map((pin) => pin.name)).toContain("@corbits/github-tools");
 });
 
 test("concurrent pin_skill and DELETE model both land", async () => {
@@ -2264,10 +2147,7 @@ test("concurrent pin_skill and DELETE model both land", async () => {
   expect(pinRes.status).toBe(200);
   expect(delRes.status).toBe(200);
 
-  const workflowJson = await readAgentDefinitionWorkflowJson(
-    assetService,
-    "ast_1",
-  );
+  const workflowJson = await readAgentDefinitionWorkflowJson(assetService, "ast_1");
   expect(readPinnedSkillNames(workflowJson)).toEqual(["research"]);
   expect(promptFrom(workflowJson)).toContain("- research: What research does.");
   expect(modelFrom(workflowJson)).toBeUndefined();
diff --git a/packages/agent-directory/test/source-tree.ts b/packages/agent-directory/test/source-tree.ts
index b475d82a5a..0391ff1a85 100644
--- a/packages/agent-directory/test/source-tree.ts
+++ b/packages/agent-directory/test/source-tree.ts
@@ -18,9 +18,7 @@ import {
 export const SOURCE_TREE_PATHS = ["package.json", AGENT_DEFINITION_ENTRY_PATH];
 
 /** The serialized definition a written source tree carries. */
-export function definitionFrom(
-  files: Record<string, string | Uint8Array> | undefined,
-): string {
+export function definitionFrom(files: Record<string, string | Uint8Array> | undefined): string {
   const entry = files?.[AGENT_DEFINITION_ENTRY_PATH];
   if (typeof entry !== "string") {
     throw new Error("the written tree carries no entry module");
@@ -31,9 +29,7 @@ export function definitionFrom(
 /** A stored definition that already pins skills — the state every
  * pin-reading route observes. The stanza is the seed: no side table to
  * write, the bytes carry the pins like a real asset would. */
-export function storedDefinitionBytesWithSkills(
-  ...names: string[]
-): Uint8Array {
+export function storedDefinitionBytesWithSkills(...names: string[]): Uint8Array {
   const tree = agentDefinitionSourceTree({
     handle: "research-buddy",
     workflowJson: reindexPinnedSkills(
diff --git a/packages/agent-directory/test/tool-package-version.drizzle.test.ts b/packages/agent-directory/test/tool-package-version.drizzle.test.ts
index 3a0d580fdf..30c3f71a3e 100644
--- a/packages/agent-directory/test/tool-package-version.drizzle.test.ts
+++ b/packages/agent-directory/test/tool-package-version.drizzle.test.ts
@@ -28,9 +28,7 @@ const describeIfDb = dbGate(databaseUrl, import.meta.path);
 
 const SCHEMA = "agent_directory_tool_package_version_test";
 
-function fakeAssetService(
-  filenamesByDir: Record<string, string[]>,
-): AssetService {
+function fakeAssetService(filenamesByDir: Record<string, string[]>): AssetService {
   return {
     createAsset: () => {
       throw new Error("not used in these tests");
@@ -58,130 +56,117 @@ async function seedTenant(
   });
 }
 
-describeIfDb(
-  "resolvePinnedVersion: resolves against the tenant's corbits-tools registry",
-  () => {
-    const target = dbTargetFromUrl(
-      databaseUrl ?? "postgres://localhost:5432/unused",
-    );
-
-    beforeAll(async () => {
-      await runMigrations(target, { schema: SCHEMA });
-    });
-
-    afterAll(async () => {
-      await dropSchema(target, { schema: SCHEMA });
-    });
-
-    test("resolves the highest published version among the registry's tarballs", async () => {
-      const { db, close } = createDB({ ...target, schema: SCHEMA });
-      try {
-        const tenantId = `tnt_tpv_${randomUUID().slice(0, 8)}`;
-        await seedTenant(db, { id: tenantId });
-        await db.insert(schema.asset).values({
-          id: `asset_${tenantId}`,
-          tenantId,
-          kind: "package-registry",
-          name: CORBITS_TOOLS_REGISTRY,
-        });
-
-        const assetService = fakeAssetService({
-          tarballs: [
-            "corbits-memory-tools-1.2.0.tgz",
-            "corbits-memory-tools-1.10.0.tgz",
-            "corbits-memory-tools-1.3.0.tgz",
-            "corbits-capability-tools-0.0.2.tgz",
-          ],
-        });
-        const resolved = await resolvePinnedVersion(
-          { db, assetService },
-          tenantId,
-          "@corbits/memory-tools",
-        );
-        expect(resolved).toEqual({
-          name: "@corbits/memory-tools",
-          version: "1.10.0",
-        });
-      } finally {
-        await close();
-      }
-    });
-
-    test("a child tenant resolves against its inherited (ancestor-owned) registry", async () => {
-      const { db, close } = createDB({ ...target, schema: SCHEMA });
-      try {
-        const rootId = `tnt_tpv_root_${randomUUID().slice(0, 8)}`;
-        const childId = `tnt_tpv_child_${randomUUID().slice(0, 8)}`;
-        await seedTenant(db, { id: rootId });
-        await seedTenant(db, { id: childId, parentId: rootId });
-        await db.insert(schema.asset).values({
-          id: `asset_${rootId}`,
-          tenantId: rootId,
-          kind: "package-registry",
-          name: CORBITS_TOOLS_REGISTRY,
-        });
-
-        const assetService = fakeAssetService({
-          tarballs: ["corbits-capability-tools-0.0.2.tgz"],
-        });
-        const resolved = await resolvePinnedVersion(
-          { db, assetService },
-          childId,
-          "@corbits/capability-tools",
-        );
-        expect(resolved).toEqual({
-          name: "@corbits/capability-tools",
-          version: "0.0.2",
-        });
-      } finally {
-        await close();
-      }
-    });
-
-    test("pinning a package absent from the registry fails closed", async () => {
-      const { db, close } = createDB({ ...target, schema: SCHEMA });
-      try {
-        const tenantId = `tnt_tpv_${randomUUID().slice(0, 8)}`;
-        await seedTenant(db, { id: tenantId });
-        await db.insert(schema.asset).values({
-          id: `asset_${tenantId}`,
-          tenantId,
-          kind: "package-registry",
-          name: CORBITS_TOOLS_REGISTRY,
-        });
-
-        const assetService = fakeAssetService({
-          tarballs: ["corbits-memory-tools-1.0.0.tgz"],
-        });
-        await expect(
-          resolvePinnedVersion(
-            { db, assetService },
-            tenantId,
-            "@corbits/no-such-tools",
-          ),
-        ).rejects.toBeInstanceOf(CapabilityOutOfInventoryError);
-      } finally {
-        await close();
-      }
-    });
-
-    test("a tenant with no visible corbits-tools registry fails closed", async () => {
-      const { db, close } = createDB({ ...target, schema: SCHEMA });
-      try {
-        const tenantId = `tnt_tpv_${randomUUID().slice(0, 8)}`;
-        await seedTenant(db, { id: tenantId });
-
-        const assetService = fakeAssetService({});
-        await expect(
-          resolvePinnedVersion(
-            { db, assetService },
-            tenantId,
-            "@corbits/memory-tools",
-          ),
-        ).rejects.toBeInstanceOf(CapabilityOutOfInventoryError);
-      } finally {
-        await close();
-      }
-    });
-  },
-);
+describeIfDb("resolvePinnedVersion: resolves against the tenant's corbits-tools registry", () => {
+  const target = dbTargetFromUrl(databaseUrl ?? "postgres://localhost:5432/unused");
+
+  beforeAll(async () => {
+    await runMigrations(target, { schema: SCHEMA });
+  });
+
+  afterAll(async () => {
+    await dropSchema(target, { schema: SCHEMA });
+  });
+
+  test("resolves the highest published version among the registry's tarballs", async () => {
+    const { db, close } = createDB({ ...target, schema: SCHEMA });
+    try {
+      const tenantId = `tnt_tpv_${randomUUID().slice(0, 8)}`;
+      await seedTenant(db, { id: tenantId });
+      await db.insert(schema.asset).values({
+        id: `asset_${tenantId}`,
+        tenantId,
+        kind: "package-registry",
+        name: CORBITS_TOOLS_REGISTRY,
+      });
+
+      const assetService = fakeAssetService({
+        tarballs: [
+          "corbits-memory-tools-1.2.0.tgz",
+          "corbits-memory-tools-1.10.0.tgz",
+          "corbits-memory-tools-1.3.0.tgz",
+          "corbits-capability-tools-0.0.2.tgz",
+        ],
+      });
+      const resolved = await resolvePinnedVersion(
+        { db, assetService },
+        tenantId,
+        "@corbits/memory-tools",
+      );
+      expect(resolved).toEqual({
+        name: "@corbits/memory-tools",
+        version: "1.10.0",
+      });
+    } finally {
+      await close();
+    }
+  });
+
+  test("a child tenant resolves against its inherited (ancestor-owned) registry", async () => {
+    const { db, close } = createDB({ ...target, schema: SCHEMA });
+    try {
+      const rootId = `tnt_tpv_root_${randomUUID().slice(0, 8)}`;
+      const childId = `tnt_tpv_child_${randomUUID().slice(0, 8)}`;
+      await seedTenant(db, { id: rootId });
+      await seedTenant(db, { id: childId, parentId: rootId });
+      await db.insert(schema.asset).values({
+        id: `asset_${rootId}`,
+        tenantId: rootId,
+        kind: "package-registry",
+        name: CORBITS_TOOLS_REGISTRY,
+      });
+
+      const assetService = fakeAssetService({
+        tarballs: ["corbits-capability-tools-0.0.2.tgz"],
+      });
+      const resolved = await resolvePinnedVersion(
+        { db, assetService },
+        childId,
+        "@corbits/capability-tools",
+      );
+      expect(resolved).toEqual({
+        name: "@corbits/capability-tools",
+        version: "0.0.2",
+      });
+    } finally {
+      await close();
+    }
+  });
+
+  test("pinning a package absent from the registry fails closed", async () => {
+    const { db, close } = createDB({ ...target, schema: SCHEMA });
+    try {
+      const tenantId = `tnt_tpv_${randomUUID().slice(0, 8)}`;
+      await seedTenant(db, { id: tenantId });
+      await db.insert(schema.asset).values({
+        id: `asset_${tenantId}`,
+        tenantId,
+        kind: "package-registry",
+        name: CORBITS_TOOLS_REGISTRY,
+      });
+
+      const assetService = fakeAssetService({
+        tarballs: ["corbits-memory-tools-1.0.0.tgz"],
+      });
+      await expect(
+        resolvePinnedVersion({ db, assetService }, tenantId, "@corbits/no-such-tools"),
+      ).rejects.toBeInstanceOf(CapabilityOutOfInventoryError);
+    } finally {
+      await close();
+    }
+  });
+
+  test("a tenant with no visible corbits-tools registry fails closed", async () => {
+    const { db, close } = createDB({ ...target, schema: SCHEMA });
+    try {
+      const tenantId = `tnt_tpv_${randomUUID().slice(0, 8)}`;
+      await seedTenant(db, { id: tenantId });
+
+      const assetService = fakeAssetService({});
+      await expect(
+        resolvePinnedVersion({ db, assetService }, tenantId, "@corbits/memory-tools"),
+      ).rejects.toBeInstanceOf(CapabilityOutOfInventoryError);
+    } finally {
+      await close();
+    }
+  });
+});
diff --git a/packages/agent-directory/test/validation.test.ts b/packages/agent-directory/test/validation.test.ts
index 83d7c7a5a3..e575ceeca8 100644
--- a/packages/agent-directory/test/validation.test.ts
+++ b/packages/agent-directory/test/validation.test.ts
@@ -144,17 +144,11 @@ test("UpdateAgentSkillsInput rejects a duplicate skill name", () => {
 });
 
 test("UpdateDefinitionStatusInput accepts the two lifecycle states", () => {
-  expect(
-    UpdateDefinitionStatusInput({ status: "stopped" }) instanceof type.errors,
-  ).toBe(false);
-  expect(
-    UpdateDefinitionStatusInput({ status: "deployed" }) instanceof type.errors,
-  ).toBe(false);
+  expect(UpdateDefinitionStatusInput({ status: "stopped" }) instanceof type.errors).toBe(false);
+  expect(UpdateDefinitionStatusInput({ status: "deployed" }) instanceof type.errors).toBe(false);
 });
 
 test("UpdateDefinitionStatusInput rejects any other status, deletion included", () => {
-  expect(
-    UpdateDefinitionStatusInput({ status: "deleted" }) instanceof type.errors,
-  ).toBe(true);
+  expect(UpdateDefinitionStatusInput({ status: "deleted" }) instanceof type.errors).toBe(true);
   expect(UpdateDefinitionStatusInput({}) instanceof type.errors).toBe(true);
 });
diff --git a/packages/agent-directory/test/visible-definitions.drizzle.test.ts b/packages/agent-directory/test/visible-definitions.drizzle.test.ts
index cf793e540a..0015b3282f 100644
--- a/packages/agent-directory/test/visible-definitions.drizzle.test.ts
+++ b/packages/agent-directory/test/visible-definitions.drizzle.test.ts
@@ -45,8 +45,7 @@ async function seedDefinition(
     status?: "deployed" | "stopped";
   },
 ) {
-  const assetId =
-    input.assetId === undefined ? `asset_${input.id}` : input.assetId;
+  const assetId = input.assetId === undefined ? `asset_${input.id}` : input.assetId;
   if (assetId !== null) {
     await db.insert(schema.asset).values({
       id: assetId,
@@ -65,223 +64,200 @@ async function seedDefinition(
   });
 }
 
-describeIfDb(
-  "listVisibleAgentDefinitions: tenant ancestor-chain inheritance",
-  () => {
-    const target = dbTargetFromUrl(
-      databaseUrl ?? "postgres://localhost:5432/unused",
-    );
+describeIfDb("listVisibleAgentDefinitions: tenant ancestor-chain inheritance", () => {
+  const target = dbTargetFromUrl(databaseUrl ?? "postgres://localhost:5432/unused");
 
-    beforeAll(async () => {
-      await runMigrations(target, { schema: SCHEMA });
-    });
+  beforeAll(async () => {
+    await runMigrations(target, { schema: SCHEMA });
+  });
 
-    afterAll(async () => {
-      await dropSchema(target, { schema: SCHEMA });
-    });
+  afterAll(async () => {
+    await dropSchema(target, { schema: SCHEMA });
+  });
 
-    test("a child tenant sees a parent tenant's agent definition", async () => {
-      const { db, close } = createDB({ ...target, schema: SCHEMA });
-      try {
-        await seedTenant(db, { id: "tnt_dm_sees_parent" });
-        await seedTenant(db, {
-          id: "tnt_dm_sees_parent_child",
-          parentId: "tnt_dm_sees_parent",
-        });
-        await seedDefinition(db, {
-          id: "wfd_outreach",
-          tenantId: "tnt_dm_sees_parent",
-          name: "outreach",
-          description: "Outreach",
-        });
+  test("a child tenant sees a parent tenant's agent definition", async () => {
+    const { db, close } = createDB({ ...target, schema: SCHEMA });
+    try {
+      await seedTenant(db, { id: "tnt_dm_sees_parent" });
+      await seedTenant(db, {
+        id: "tnt_dm_sees_parent_child",
+        parentId: "tnt_dm_sees_parent",
+      });
+      await seedDefinition(db, {
+        id: "wfd_outreach",
+        tenantId: "tnt_dm_sees_parent",
+        name: "outreach",
+        description: "Outreach",
+      });
 
-        const definitions = await listVisibleAgentDefinitions(
-          db,
-          "tnt_dm_sees_parent_child",
-        );
+      const definitions = await listVisibleAgentDefinitions(db, "tnt_dm_sees_parent_child");
 
-        expect(definitions).toHaveLength(1);
-        expect(definitions[0]).toMatchObject({
-          id: "wfd_outreach",
-          name: "Outreach",
-          tenantId: "tnt_dm_sees_parent",
-          tenantName: "tnt_dm_sees_parent",
-        });
-        expect(typeof definitions[0]?.createdAt).toBe("string");
-      } finally {
-        await close();
-      }
-    });
+      expect(definitions).toHaveLength(1);
+      expect(definitions[0]).toMatchObject({
+        id: "wfd_outreach",
+        name: "Outreach",
+        tenantId: "tnt_dm_sees_parent",
+        tenantName: "tnt_dm_sees_parent",
+      });
+      expect(typeof definitions[0]?.createdAt).toBe("string");
+    } finally {
+      await close();
+    }
+  });
 
-    test("a child's own definition shadows a parent's same-name definition", async () => {
-      const { db, close } = createDB({ ...target, schema: SCHEMA });
-      try {
-        await seedTenant(db, { id: "tnt_dm_shadow_parent" });
-        await seedTenant(db, {
-          id: "tnt_dm_shadow_child",
-          parentId: "tnt_dm_shadow_parent",
-        });
-        await seedDefinition(db, {
-          id: "wfd_shadow_parent",
-          tenantId: "tnt_dm_shadow_parent",
-          name: "assist",
-          description: "Assist (parent)",
-        });
-        await seedDefinition(db, {
-          id: "wfd_shadow_child",
-          tenantId: "tnt_dm_shadow_child",
-          name: "assist",
-          description: "Assist (child)",
-        });
+  test("a child's own definition shadows a parent's same-name definition", async () => {
+    const { db, close } = createDB({ ...target, schema: SCHEMA });
+    try {
+      await seedTenant(db, { id: "tnt_dm_shadow_parent" });
+      await seedTenant(db, {
+        id: "tnt_dm_shadow_child",
+        parentId: "tnt_dm_shadow_parent",
+      });
+      await seedDefinition(db, {
+        id: "wfd_shadow_parent",
+        tenantId: "tnt_dm_shadow_parent",
+        name: "assist",
+        description: "Assist (parent)",
+      });
+      await seedDefinition(db, {
+        id: "wfd_shadow_child",
+        tenantId: "tnt_dm_shadow_child",
+        name: "assist",
+        description: "Assist (child)",
+      });
 
-        const definitions = await listVisibleAgentDefinitions(
-          db,
-          "tnt_dm_shadow_child",
-        );
+      const definitions = await listVisibleAgentDefinitions(db, "tnt_dm_shadow_child");
 
-        expect(definitions).toHaveLength(1);
-        expect(definitions[0]).toMatchObject({
-          id: "wfd_shadow_child",
-          name: "Assist (child)",
-          tenantId: "tnt_dm_shadow_child",
-        });
-      } finally {
-        await close();
-      }
-    });
+      expect(definitions).toHaveLength(1);
+      expect(definitions[0]).toMatchObject({
+        id: "wfd_shadow_child",
+        name: "Assist (child)",
+        tenantId: "tnt_dm_shadow_child",
+      });
+    } finally {
+      await close();
+    }
+  });
 
-    test("a sibling tenant never sees another sibling's definition", async () => {
-      const { db, close } = createDB({ ...target, schema: SCHEMA });
-      try {
-        await seedTenant(db, { id: "tnt_dm_siblings_parent" });
-        await seedTenant(db, {
-          id: "tnt_dm_sibling_a",
-          parentId: "tnt_dm_siblings_parent",
-        });
-        await seedTenant(db, {
-          id: "tnt_dm_sibling_b",
-          parentId: "tnt_dm_siblings_parent",
-        });
-        await seedDefinition(db, {
-          id: "wfd_sibling_a",
-          tenantId: "tnt_dm_sibling_a",
-          name: "researcher",
-          description: "Researcher",
-        });
+  test("a sibling tenant never sees another sibling's definition", async () => {
+    const { db, close } = createDB({ ...target, schema: SCHEMA });
+    try {
+      await seedTenant(db, { id: "tnt_dm_siblings_parent" });
+      await seedTenant(db, {
+        id: "tnt_dm_sibling_a",
+        parentId: "tnt_dm_siblings_parent",
+      });
+      await seedTenant(db, {
+        id: "tnt_dm_sibling_b",
+        parentId: "tnt_dm_siblings_parent",
+      });
+      await seedDefinition(db, {
+        id: "wfd_sibling_a",
+        tenantId: "tnt_dm_sibling_a",
+        name: "researcher",
+        description: "Researcher",
+      });
 
-        const definitions = await listVisibleAgentDefinitions(
-          db,
-          "tnt_dm_sibling_b",
-        );
+      const definitions = await listVisibleAgentDefinitions(db, "tnt_dm_sibling_b");
 
-        expect(definitions).toEqual([]);
-      } finally {
-        await close();
-      }
-    });
+      expect(definitions).toEqual([]);
+    } finally {
+      await close();
+    }
+  });
 
-    test("a workbench host anchor is never listed as a DM-able definition", async () => {
-      const { db, close } = createDB({ ...target, schema: SCHEMA });
-      try {
-        await seedTenant(db, { id: "tnt_dm_host_guard" });
-        await seedDefinition(db, {
-          id: "wfd_host",
-          tenantId: "tnt_dm_host_guard",
-          name: `run-${"a".repeat(32)}`,
-        });
-        await seedDefinition(db, {
-          id: "wfd_real",
-          tenantId: "tnt_dm_host_guard",
-          name: "assist",
-          description: "Assist",
-        });
+  test("a workbench host anchor is never listed as a DM-able definition", async () => {
+    const { db, close } = createDB({ ...target, schema: SCHEMA });
+    try {
+      await seedTenant(db, { id: "tnt_dm_host_guard" });
+      await seedDefinition(db, {
+        id: "wfd_host",
+        tenantId: "tnt_dm_host_guard",
+        name: `run-${"a".repeat(32)}`,
+      });
+      await seedDefinition(db, {
+        id: "wfd_real",
+        tenantId: "tnt_dm_host_guard",
+        name: "assist",
+        description: "Assist",
+      });
 
-        const definitions = await listVisibleAgentDefinitions(
-          db,
-          "tnt_dm_host_guard",
-        );
+      const definitions = await listVisibleAgentDefinitions(db, "tnt_dm_host_guard");
 
-        expect(definitions).toHaveLength(1);
-        expect(definitions[0]).toMatchObject({
-          id: "wfd_real",
-          name: "Assist",
-          tenantId: "tnt_dm_host_guard",
-        });
-      } finally {
-        await close();
-      }
-    });
+      expect(definitions).toHaveLength(1);
+      expect(definitions[0]).toMatchObject({
+        id: "wfd_real",
+        name: "Assist",
+        tenantId: "tnt_dm_host_guard",
+      });
+    } finally {
+      await close();
+    }
+  });
 
-    test("a seeded workflow-catalog utility is never listed as a DM-able definition", async () => {
-      const { db, close } = createDB({ ...target, schema: SCHEMA });
-      try {
-        await seedTenant(db, { id: "tnt_dm_catalog_guard" });
-        await seedDefinition(db, {
-          id: "wfd_echo",
-          tenantId: "tnt_dm_catalog_guard",
-          name: "echo",
-        });
-        await seedDefinition(db, {
-          id: "wfd_last_30_days",
-          tenantId: "tnt_dm_catalog_guard",
-          name: "last-30-days-research",
-        });
-        await seedDefinition(db, {
-          id: "wfd_heartbeat",
-          tenantId: "tnt_dm_catalog_guard",
-          name: "heartbeat",
-        });
-        await seedDefinition(db, {
-          id: "wfd_workbench_digest",
-          tenantId: "tnt_dm_catalog_guard",
-          name: "workbench-digest",
-        });
-        await seedDefinition(db, {
-          id: "wfd_assistant",
-          tenantId: "tnt_dm_catalog_guard",
-          name: "assistant",
-          description: "Myra",
-        });
-        await seedDefinition(db, {
-          id: "wfd_custom_agent",
-          tenantId: "tnt_dm_catalog_guard",
-          name: "my-researcher",
-          description: "My researcher",
-        });
+  test("a seeded workflow-catalog utility is never listed as a DM-able definition", async () => {
+    const { db, close } = createDB({ ...target, schema: SCHEMA });
+    try {
+      await seedTenant(db, { id: "tnt_dm_catalog_guard" });
+      await seedDefinition(db, {
+        id: "wfd_echo",
+        tenantId: "tnt_dm_catalog_guard",
+        name: "echo",
+      });
+      await seedDefinition(db, {
+        id: "wfd_last_30_days",
+        tenantId: "tnt_dm_catalog_guard",
+        name: "last-30-days-research",
+      });
+      await seedDefinition(db, {
+        id: "wfd_heartbeat",
+        tenantId: "tnt_dm_catalog_guard",
+        name: "heartbeat",
+      });
+      await seedDefinition(db, {
+        id: "wfd_workbench_digest",
+        tenantId: "tnt_dm_catalog_guard",
+        name: "workbench-digest",
+      });
+      await seedDefinition(db, {
+        id: "wfd_assistant",
+        tenantId: "tnt_dm_catalog_guard",
+        name: "assistant",
+        description: "Myra",
+      });
+      await seedDefinition(db, {
+        id: "wfd_custom_agent",
+        tenantId: "tnt_dm_catalog_guard",
+        name: "my-researcher",
+        description: "My researcher",
+      });
 
-        const definitions = await listVisibleAgentDefinitions(
-          db,
-          "tnt_dm_catalog_guard",
-        );
+      const definitions = await listVisibleAgentDefinitions(db, "tnt_dm_catalog_guard");
 
-        expect(definitions.map((d) => d.id).sort()).toEqual(
-          ["wfd_assistant", "wfd_custom_agent"].sort(),
-        );
-      } finally {
-        await close();
-      }
-    });
+      expect(definitions.map((d) => d.id).sort()).toEqual(
+        ["wfd_assistant", "wfd_custom_agent"].sort(),
+      );
+    } finally {
+      await close();
+    }
+  });
 
-    test("a definition with no materialized asset is not launchable yet, so it isn't listed", async () => {
-      const { db, close } = createDB({ ...target, schema: SCHEMA });
-      try {
-        await seedTenant(db, { id: "tnt_dm_no_asset" });
-        await seedDefinition(db, {
-          id: "wfd_no_asset",
-          tenantId: "tnt_dm_no_asset",
-          name: "draft",
-          assetId: null,
-        });
+  test("a definition with no materialized asset is not launchable yet, so it isn't listed", async () => {
+    const { db, close } = createDB({ ...target, schema: SCHEMA });
+    try {
+      await seedTenant(db, { id: "tnt_dm_no_asset" });
+      await seedDefinition(db, {
+        id: "wfd_no_asset",
+        tenantId: "tnt_dm_no_asset",
+        name: "draft",
+        assetId: null,
+      });
 
-        const definitions = await listVisibleAgentDefinitions(
-          db,
-          "tnt_dm_no_asset",
-        );
+      const definitions = await listVisibleAgentDefinitions(db, "tnt_dm_no_asset");
 
-        expect(definitions).toEqual([]);
-      } finally {
-        await close();
-      }
-    });
-  },
-);
+      expect(definitions).toEqual([]);
+    } finally {
+      await close();
+    }
+  });
+});
diff --git a/packages/agent-directory/test/workflow-capability-routes.test.ts b/packages/agent-directory/test/workflow-capability-routes.test.ts
index fd736871dc..e3a002efca 100644
--- a/packages/agent-directory/test/workflow-capability-routes.test.ts
+++ b/packages/agent-directory/test/workflow-capability-routes.test.ts
@@ -21,10 +21,7 @@ import {
   type WorkflowCapabilityRunScope,
   type WorkflowRunAuthenticator,
 } from "../src/workflow-capability-routes";
-import {
-  agentDefinitionSourceTree,
-  AGENT_DEFINITION_ENTRY_PATH,
-} from "../src/definition-asset";
+import { agentDefinitionSourceTree, AGENT_DEFINITION_ENTRY_PATH } from "../src/definition-asset";
 import type { PinnedSkillIndexResolver } from "../src/routes";
 import { definitionFrom, SOURCE_TREE_PATHS } from "./source-tree";
 import type { CapabilityInventoryProvider } from "../src/capability-inventory";
@@ -48,9 +45,7 @@ const fakeCapabilityInventory: CapabilityInventoryProvider = {
 
 const fakeSkillIndex: PinnedSkillIndexResolver = {
   resolve: (_tenantId, _principalId, names) =>
-    Promise.resolve(
-      names.map((name) => ({ name, description: `What ${name} does.` })),
-    ),
+    Promise.resolve(names.map((name) => ({ name, description: `What ${name} does.` }))),
 };
 
 function storedDefinitionBytes(): Uint8Array {
@@ -72,9 +67,7 @@ function storedDefinitionBytes(): Uint8Array {
  * with `workflowBytes` — pins live in the asset's own stanza, so a test
  * that needs a definition's skills reads them back out of the written
  * tree instead of seeding side state. */
-function readAssetBlobFor(
-  workflowBytes: Uint8Array,
-): AssetService["readAssetBlob"] {
+function readAssetBlobFor(workflowBytes: Uint8Array): AssetService["readAssetBlob"] {
   return () => Promise.resolve(workflowBytes);
 }
 
@@ -266,8 +259,7 @@ test("a run may add a capability to its own definition without any grant check",
         writtenMessage = params.tree.message;
         return Promise.resolve({ commitSha: "deadbeef" });
       },
-      listAssetBlobs: () =>
-        Promise.resolve(["corbits-capability-tools-0.0.2.tgz"]),
+      listAssetBlobs: () => Promise.resolve(["corbits-capability-tools-0.0.2.tgz"]),
     }),
     deployer,
   });
@@ -282,15 +274,11 @@ test("a run may add a capability to its own definition without any grant check",
   expect(deployer.deploys).toHaveLength(1);
   expect(deployer.deploys[0]?.commitSha).toBe("deadbeef");
   expect(Object.keys(writtenFiles ?? {})).toEqual(SOURCE_TREE_PATHS);
-  expect(writtenMessage).toBe(
-    "Add @corbits/capability-tools to research-buddy",
-  );
+  expect(writtenMessage).toBe("Add @corbits/capability-tools to research-buddy");
   const body = (await response.json()) as {
     toolPackagePins: { name: string; version: string }[];
   };
-  expect(body.toolPackagePins).toEqual([
-    { name: "@corbits/capability-tools", version: "0.0.2" },
-  ]);
+  expect(body.toolPackagePins).toEqual([{ name: "@corbits/capability-tools", version: "0.0.2" }]);
 });
 
 test("adding a capability the tenant's inventory doesn't offer is a 400, never written", async () => {
@@ -330,9 +318,7 @@ test("adding a skill merges it additively into the definition stanza and re-inde
   expect(response.status).toBe(200);
   expect(Object.keys(writtenFiles ?? {})).toEqual(SOURCE_TREE_PATHS);
   // The written tree's stanza is the pins — no side table to consult.
-  expect(readPinnedSkillNames(definitionFrom(writtenFiles))).toEqual([
-    "research",
-  ]);
+  expect(readPinnedSkillNames(definitionFrom(writtenFiles))).toEqual(["research"]);
   const body = (await response.json()) as { skills: string[] };
   expect(body.skills).toEqual(["research"]);
 });
@@ -353,9 +339,7 @@ test("setting a model in the tenant's catalog writes a single named commit", asy
     canonicalName: "anthropic/claude-sonnet",
   });
   expect(response.status).toBe(200);
-  expect(writtenMessage).toBe(
-    "Set research-buddy's model to anthropic/claude-sonnet",
-  );
+  expect(writtenMessage).toBe("Set research-buddy's model to anthropic/claude-sonnet");
   const body = (await response.json()) as { model?: string };
   expect(body.model).toBe("anthropic/claude-sonnet");
 });
diff --git a/packages/agent-directory/test/workflow-create-routes.test.ts b/packages/agent-directory/test/workflow-create-routes.test.ts
index c2491d5a52..8fb5f5e721 100644
--- a/packages/agent-directory/test/workflow-create-routes.test.ts
+++ b/packages/agent-directory/test/workflow-create-routes.test.ts
@@ -39,15 +39,12 @@ const fakeCapabilityInventory: CapabilityInventoryProvider = {
 
 const fakeSkillIndex: PinnedSkillIndexResolver = {
   resolve: (_tenantId, _principalId, names) =>
-    Promise.resolve(
-      names.map((name) => ({ name, description: `What ${name} does.` })),
-    ),
+    Promise.resolve(names.map((name) => ({ name, description: `What ${name} does.` }))),
 };
 
 function fakeAssetService(overrides: Partial<AssetService> = {}): AssetService {
   return {
-    createAsset: () =>
-      Promise.resolve({ id: "ast_new", tenantId: TENANT_ID, kind: "workflow" }),
+    createAsset: () => Promise.resolve({ id: "ast_new", tenantId: TENANT_ID, kind: "workflow" }),
     populateAsset: () => Promise.resolve({ commitSha: "deadbeef" }),
     readAssetBlob: () => {
       throw new Error("not used in these tests");
@@ -135,8 +132,7 @@ function fakeDb(
         const chain: Record<string, unknown> = {
           onConflictDoNothing: () => chain,
           returning: () => Promise.resolve([{ id: createdRow.id }]),
-          then: (onFulfilled: unknown) =>
-            Promise.resolve([]).then(onFulfilled as never),
+          then: (onFulfilled: unknown) => Promise.resolve([]).then(onFulfilled as never),
         };
         return chain;
       },
@@ -189,9 +185,7 @@ function recordingAgentDefinitionDeployer() {
     },
   };
 }
-function buildApp(
-  opts: Partial<CreateWorkflowAgentCreateRoutesDeps> = {},
-): Hono {
+function buildApp(opts: Partial<CreateWorkflowAgentCreateRoutesDeps> = {}): Hono {
   return createWorkflowAgentCreateRoutes({
     db: opts.db ?? fakeDb(),
     assetService: opts.assetService ?? fakeAssetService(),
@@ -342,9 +336,7 @@ test("a create with no model bakes the tenant's catalog default in, so the defin
       },
     }),
     tenantDefaultModel: (tenantId) =>
-      Promise.resolve(
-        tenantId === TENANT_ID ? "anthropic/claude-sonnet" : undefined,
-      ),
+      Promise.resolve(tenantId === TENANT_ID ? "anthropic/claude-sonnet" : undefined),
   });
   const response = await app.request("/definitions", {
     method: "POST",
@@ -401,9 +393,7 @@ test("a create naming a model outside the tenant's catalog falls back to the ten
       },
     }),
     tenantDefaultModel: (tenantId) =>
-      Promise.resolve(
-        tenantId === TENANT_ID ? "anthropic/claude-sonnet" : undefined,
-      ),
+      Promise.resolve(tenantId === TENANT_ID ? "anthropic/claude-sonnet" : undefined),
   });
   const response = await app.request("/definitions", {
     method: "POST",
diff --git a/packages/agent-directory/test/workflow-skill-pin-routes.test.ts b/packages/agent-directory/test/workflow-skill-pin-routes.test.ts
index 9da542583b..861db0a1c5 100644
--- a/packages/agent-directory/test/workflow-skill-pin-routes.test.ts
+++ b/packages/agent-directory/test/workflow-skill-pin-routes.test.ts
@@ -20,16 +20,9 @@ import {
   type WorkflowSkillPinRunScope,
   type WorkflowRunAuthenticator,
 } from "../src/workflow-skill-pin-routes";
-import {
-  agentDefinitionSourceTree,
-  AGENT_DEFINITION_ENTRY_PATH,
-} from "../src/definition-asset";
+import { agentDefinitionSourceTree, AGENT_DEFINITION_ENTRY_PATH } from "../src/definition-asset";
 import type { PinnedSkillIndexResolver } from "../src/routes";
-import {
-  definitionFrom,
-  SOURCE_TREE_PATHS,
-  storedDefinitionBytesWithSkills,
-} from "./source-tree";
+import { definitionFrom, SOURCE_TREE_PATHS, storedDefinitionBytesWithSkills } from "./source-tree";
 
 const TENANT_ID = "tnt_1";
 const OTHER_TENANT_ID = "tnt_2";
@@ -40,9 +33,7 @@ const RUN_ADDRESS = "run_1@example.com";
 
 const fakeSkillIndex: PinnedSkillIndexResolver = {
   resolve: (_tenantId, _principalId, names) =>
-    Promise.resolve(
-      names.map((name) => ({ name, description: `What ${name} does.` })),
-    ),
+    Promise.resolve(names.map((name) => ({ name, description: `What ${name} does.` }))),
 };
 
 function storedDefinitionBytes(): Uint8Array {
@@ -60,9 +51,7 @@ function storedDefinitionBytes(): Uint8Array {
   return new TextEncoder().encode(tree[AGENT_DEFINITION_ENTRY_PATH]);
 }
 
-function readAssetBlobFor(
-  workflowBytes: Uint8Array,
-): AssetService["readAssetBlob"] {
+function readAssetBlobFor(workflowBytes: Uint8Array): AssetService["readAssetBlob"] {
   return () => Promise.resolve(workflowBytes);
 }
 
@@ -121,9 +110,7 @@ function currentLookup(
     name: string;
   }[],
 ) {
-  return rows.find(
-    (row) => row.id === lookupId && row.tenantId === lookupTenant,
-  );
+  return rows.find((row) => row.id === lookupId && row.tenantId === lookupTenant);
 }
 
 const authenticateAsTenant1: WorkflowRunAuthenticator = {
@@ -301,9 +288,7 @@ test("pins a skill onto another definition in the same tenant and re-indexes its
   expect(Object.keys(writtenFiles ?? {})).toEqual(SOURCE_TREE_PATHS);
   expect(writtenMessage).toBe("Pin research skill to research-buddy");
   // The written tree's stanza is the pins — no side table to consult.
-  expect(readPinnedSkillNames(definitionFrom(writtenFiles))).toEqual([
-    "research",
-  ]);
+  expect(readPinnedSkillNames(definitionFrom(writtenFiles))).toEqual(["research"]);
   const body = (await response.json()) as { skills: string[] };
   expect(body.skills).toEqual(["research"]);
 });
@@ -356,9 +341,7 @@ test("pinning the same skill twice is idempotent, never duplicated", async () =>
       },
     ]),
     assetService: fakeAssetService({
-      readAssetBlob: readAssetBlobFor(
-        storedDefinitionBytesWithSkills("research"),
-      ),
+      readAssetBlob: readAssetBlobFor(storedDefinitionBytesWithSkills("research")),
     }),
   });
   const response = await postPin(app, {
diff --git a/packages/agent-events/package.json b/packages/agent-events/package.json
index dd06350109..81e032e201 100644
--- a/packages/agent-events/package.json
+++ b/packages/agent-events/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/agent-events",
+  "version": "0.0.1",
   "private": true,
   "description": "Structural readers for the sidecar agent.event frames: connector replies, inference-done content blocks, tool-done results, and message-run start/end brackets",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/agent-events/src/agent-events.test.ts b/packages/agent-events/src/agent-events.test.ts
index 2fb2c30af5..fbf2f190b3 100644
--- a/packages/agent-events/src/agent-events.test.ts
+++ b/packages/agent-events/src/agent-events.test.ts
@@ -228,9 +228,7 @@ describe("messageRunBracket", () => {
   test("any other event, or a bracket missing its ids, reads as no bracket", () => {
     expect(messageRunBracket({ type: "connector.reply" })).toBeUndefined();
     expect(messageRunBracket(undefined)).toBeUndefined();
-    expect(
-      messageRunBracket({ type: "message.run.started", data: {} }),
-    ).toBeUndefined();
+    expect(messageRunBracket({ type: "message.run.started", data: {} })).toBeUndefined();
     expect(
       messageRunBracket({
         type: "message.run.ended",
diff --git a/packages/agent-events/src/agent-events.ts b/packages/agent-events/src/agent-events.ts
index f2ff473832..4bb3a713b7 100644
--- a/packages/agent-events/src/agent-events.ts
+++ b/packages/agent-events/src/agent-events.ts
@@ -47,9 +47,7 @@ export type ReplyContentBlock =
  * which part of a reply's text was actually tool-call JSON the model
  * emitted inline — it reads the split the harness already made instead of
  * re-deriving it from prose. */
-export function inferenceDoneBlocks(
-  event: unknown,
-): ReplyContentBlock[] | undefined {
+export function inferenceDoneBlocks(event: unknown): ReplyContentBlock[] | undefined {
   if (
     typeof event !== "object" ||
     event === null ||
@@ -57,8 +55,7 @@ export function inferenceDoneBlocks(
   ) {
     return undefined;
   }
-  const content = (event as { data?: { turn?: { content?: unknown } } }).data
-    ?.turn?.content;
+  const content = (event as { data?: { turn?: { content?: unknown } } }).data?.turn?.content;
   if (!Array.isArray(content)) return undefined;
 
   const blocks: ReplyContentBlock[] = [];
@@ -97,9 +94,7 @@ export function inferenceDoneBlocks(
  * entries to fill in a tool-trace part's outcome once its call settles. */
 export function toolDoneResult(
   event: unknown,
-):
-  | { callId: string; content: unknown; isError: boolean; detail?: unknown }
-  | undefined {
+): { callId: string; content: unknown; isError: boolean; detail?: unknown } | undefined {
   if (
     typeof event !== "object" ||
     event === null ||
@@ -138,21 +133,14 @@ export type MessageRunBracket = {
   readonly messageRunId: string;
 };
 
-export function messageRunBracket(
-  event: unknown,
-): MessageRunBracket | undefined {
+export function messageRunBracket(event: unknown): MessageRunBracket | undefined {
   if (typeof event !== "object" || event === null) return undefined;
   const type = (event as { type?: unknown }).type;
   if (type !== "message.run.started" && type !== "message.run.ended") {
     return undefined;
   }
-  const data = (
-    event as { data?: { messageId?: unknown; messageRunId?: unknown } }
-  ).data;
-  if (
-    typeof data?.messageId !== "string" ||
-    typeof data?.messageRunId !== "string"
-  ) {
+  const data = (event as { data?: { messageId?: unknown; messageRunId?: unknown } }).data;
+  if (typeof data?.messageId !== "string" || typeof data?.messageRunId !== "string") {
     return undefined;
   }
   return { messageId: data.messageId, messageRunId: data.messageRunId };
@@ -183,13 +171,10 @@ export function messageRunEnded(event: unknown): MessageRunEnded | undefined {
   ) {
     return undefined;
   }
-  const data = (
-    event as { data?: { status?: unknown; error?: { message?: unknown } } }
-  ).data;
+  const data = (event as { data?: { status?: unknown; error?: { message?: unknown } } }).data;
   if (data?.status !== "completed" && data?.status !== "failed") {
     return undefined;
   }
-  const errorMessage =
-    typeof data.error?.message === "string" ? data.error.message : undefined;
+  const errorMessage = typeof data.error?.message === "string" ? data.error.message : undefined;
   return { status: data.status, errorMessage };
 }
diff --git a/packages/agent-runtime/package.json b/packages/agent-runtime/package.json
index 866f50ba96..67ee1eb748 100644
--- a/packages/agent-runtime/package.json
+++ b/packages/agent-runtime/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/agent-runtime",
+  "version": "0.0.1",
   "private": true,
   "description": "The versioned definition builder every workbench agent run deploys, plus the renderer that pins it into a per-run code-sourced workflow package",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/agent-runtime/src/agent-turns.test.ts b/packages/agent-runtime/src/agent-turns.test.ts
index d617151706..e761d9badc 100644
--- a/packages/agent-runtime/src/agent-turns.test.ts
+++ b/packages/agent-runtime/src/agent-turns.test.ts
@@ -39,10 +39,7 @@ describe("createInMemoryAgentTurnStore", () => {
       workbenchId: "wb_2",
     });
 
-    expect([first.childRunId, second.childRunId]).toEqual([
-      "turn__0",
-      "turn__1",
-    ]);
+    expect([first.childRunId, second.childRunId]).toEqual(["turn__0", "turn__1"]);
     expect(otherAgent.childRunId).toBe("turn__0");
     expect(otherWorkbench.childRunId).toBe("turn__2");
   });
@@ -85,9 +82,7 @@ describe("createInMemoryAgentTurnStore", () => {
     const store = createInMemoryAgentTurnStore();
     const opened = await store.startTurn(BASE);
 
-    expect(
-      await store.getTurn({ tenantId: "ten_other", turnId: opened.id }),
-    ).toBeUndefined();
+    expect(await store.getTurn({ tenantId: "ten_other", turnId: opened.id })).toBeUndefined();
     expect(
       await store.finishTurn({
         tenantId: "ten_other",
@@ -125,15 +120,9 @@ describe("createInMemoryAgentTurnStore", () => {
     expect(second.status).toBe("running");
 
     expect((await store.findRunningTurn(BASE))?.id).toBe(second.id);
-    expect(
-      (await store.findRunningTurn({ ...BASE, childRunId: "turn__0" }))?.id,
-    ).toBe(first.id);
-    expect(
-      (await store.findRunningTurn({ ...BASE, childRunId: "turn__1" }))?.id,
-    ).toBe(second.id);
-    expect(
-      await store.findRunningTurn({ ...BASE, childRunId: "turn__9" }),
-    ).toBeUndefined();
+    expect((await store.findRunningTurn({ ...BASE, childRunId: "turn__0" }))?.id).toBe(first.id);
+    expect((await store.findRunningTurn({ ...BASE, childRunId: "turn__1" }))?.id).toBe(second.id);
+    expect(await store.findRunningTurn({ ...BASE, childRunId: "turn__9" })).toBeUndefined();
   });
 
   // CL-7200: listing used to sort by startedAt string alone, while
@@ -198,10 +187,9 @@ describe("createInMemoryAgentTurnStore", () => {
     const fresh = await store.startTurn(BASE);
 
     expect((await store.findRunningTurn(BASE))?.id).toBe(fresh.id);
-    expect(
-      (await store.getTurn({ tenantId: BASE.tenantId, turnId: stale.id }))
-        ?.status,
-    ).toBe("failed");
+    expect((await store.getTurn({ tenantId: BASE.tenantId, turnId: stale.id }))?.status).toBe(
+      "failed",
+    );
   });
 
   // CL-6670: `dispatchTurn` awaits this before opening a second occurrence
@@ -300,9 +288,7 @@ describe("createInMemoryAgentTurnStore", () => {
       const controller = new AbortController();
       controller.abort(new Error("already gone"));
 
-      await expect(
-        store.waitUntilFree(BASE, controller.signal),
-      ).rejects.toThrow("already gone");
+      await expect(store.waitUntilFree(BASE, controller.signal)).rejects.toThrow("already gone");
     });
   });
 
@@ -415,9 +401,7 @@ describe("createInMemoryAgentTurnStore", () => {
         workbenchId: BASE.workbenchId,
       });
 
-      expect(new Set(running.map((turn) => turn.id))).toEqual(
-        new Set([first.id, second.id]),
-      );
+      expect(new Set(running.map((turn) => turn.id))).toEqual(new Set([first.id, second.id]));
     });
 
     test("returns nothing for a workbench with no running turns", async () => {
diff --git a/packages/agent-runtime/src/agent-turns.ts b/packages/agent-runtime/src/agent-turns.ts
index 14a83f8715..65efd4d412 100644
--- a/packages/agent-runtime/src/agent-turns.ts
+++ b/packages/agent-runtime/src/agent-turns.ts
@@ -11,10 +11,7 @@
 // assigns `n` sequentially per section run; an agent's warm section run
 // can serve more than one workbench, so this store allocates the same
 // sequence per agent rather than restarting it in every room.
-import {
-  AGENT_RUNTIME_SECTION_ID,
-  agentRuntimeTurnRunId,
-} from "@corbits/agent-runtime";
+import { AGENT_RUNTIME_SECTION_ID, agentRuntimeTurnRunId } from "@corbits/agent-runtime";
 import { and, asc, desc, eq, inArray, lt, sql } from "drizzle-orm";
 
 import { agentTurns } from "@corbits/chat/schema";
@@ -205,10 +202,7 @@ function newTurnId(): string {
   return `turn_${crypto.randomUUID().replace(/-/g, "")}`;
 }
 
-function agentKey(input: {
-  readonly tenantId: string;
-  readonly agentAddress: string;
-}): string {
+function agentKey(input: { readonly tenantId: string; readonly agentAddress: string }): string {
   return `${input.tenantId} ${input.agentAddress}`;
 }
 
@@ -307,9 +301,7 @@ export function createTurnFreedSignal(): {
   };
 }
 
-export function createInMemoryAgentTurnStore(
-  options: AgentTurnStoreOptions = {},
-): AgentTurnStore {
+export function createInMemoryAgentTurnStore(options: AgentTurnStoreOptions = {}): AgentTurnStore {
   const rows = new Map<string, AgentTurn>();
   const nextOccurrence = new Map<string, number>();
   const now = options.now ?? Date.now;
@@ -344,8 +336,7 @@ export function createInMemoryAgentTurnStore(
           turn.workbenchId === input.workbenchId &&
           turn.agentAddress === input.agentAddress &&
           turn.status === "running" &&
-          (input.childRunId === undefined ||
-            turn.childRunId === input.childRunId),
+          (input.childRunId === undefined || turn.childRunId === input.childRunId),
       )
       .sort(compareTurnsNewestFirst)[0];
   }
@@ -427,11 +418,7 @@ export function createInMemoryAgentTurnStore(
       expireStaleTurns();
       const workbenchIds = new Set(input.workbenchIds);
       const ordered = [...rows.values()]
-        .filter(
-          (turn) =>
-            turn.tenantId === input.tenantId &&
-            workbenchIds.has(turn.workbenchId),
-        )
+        .filter((turn) => turn.tenantId === input.tenantId && workbenchIds.has(turn.workbenchId))
         .sort(
           (a, b) =>
             Number(b.status === "running") - Number(a.status === "running") ||
@@ -439,8 +426,7 @@ export function createInMemoryAgentTurnStore(
         );
       const byWorkbench = new Map<string, AgentTurn>();
       for (const turn of ordered) {
-        if (!byWorkbench.has(turn.workbenchId))
-          byWorkbench.set(turn.workbenchId, turn);
+        if (!byWorkbench.has(turn.workbenchId)) byWorkbench.set(turn.workbenchId, turn);
       }
       return [...byWorkbench.values()];
     },
@@ -470,9 +456,7 @@ export function createInMemoryAgentTurnStore(
       expireStaleTurns();
       return [...rows.values()]
         .filter(
-          (turn) =>
-            turn.tenantId === input.tenantId &&
-            turn.workbenchId === input.workbenchId,
+          (turn) => turn.tenantId === input.tenantId && turn.workbenchId === input.workbenchId,
         )
         .sort(compareTurnsNewestFirst)
         .slice(0, input.limit ?? AGENT_TURNS_PAGE_SIZE);
@@ -480,9 +464,7 @@ export function createInMemoryAgentTurnStore(
 
     async getTurn(input) {
       const found = rows.get(input.turnId);
-      return found !== undefined && found.tenantId === input.tenantId
-        ? found
-        : undefined;
+      return found !== undefined && found.tenantId === input.tenantId ? found : undefined;
     },
   };
 }
@@ -505,14 +487,10 @@ type AgentTurnRow = {
 
 function toAgentTurn(row: AgentTurnRow): AgentTurn {
   const requested = Array.isArray(row.requestMessageIds)
-    ? row.requestMessageIds.filter(
-        (value): value is string => typeof value === "string",
-      )
+    ? row.requestMessageIds.filter((value): value is string => typeof value === "string")
     : [];
   const status: AgentTurnStatus =
-    row.status === "completed" ||
-    row.status === "failed" ||
-    row.status === "cancelled"
+    row.status === "completed" || row.status === "failed" || row.status === "cancelled"
       ? row.status
       : "running";
   return {
@@ -539,9 +517,10 @@ function toAgentTurn(row: AgentTurnRow): AgentTurn {
  * cannot both claim the same child run id — one of them fails loudly
  * rather than two turns quietly sharing a run id.
  */
-export function createDrizzleAgentTurnStore<
-  TSchema extends Record<string, unknown>,
->(db: ChatDb<TSchema>, options: AgentTurnStoreOptions = {}): AgentTurnStore {
+export function createDrizzleAgentTurnStore<TSchema extends Record<string, unknown>>(
+  db: ChatDb<TSchema>,
+  options: AgentTurnStoreOptions = {},
+): AgentTurnStore {
   const now = options.now ?? Date.now;
   const freed = createTurnFreedSignal();
 
@@ -589,9 +568,7 @@ export function createDrizzleAgentTurnStore<
           eq(agentTurns.workbenchId, input.workbenchId),
           eq(agentTurns.agentAddress, input.agentAddress),
           eq(agentTurns.status, "running"),
-          ...(input.childRunId !== undefined
-            ? [eq(agentTurns.childRunId, input.childRunId)]
-            : []),
+          ...(input.childRunId !== undefined ? [eq(agentTurns.childRunId, input.childRunId)] : []),
         ),
       )
       .orderBy(desc(agentTurns.startedAt), desc(agentTurns.occurrence))
@@ -663,15 +640,9 @@ export function createDrizzleAgentTurnStore<
         .set({
           status: input.status,
           endedAt: new Date(),
-          ...(input.sectionRunId !== undefined
-            ? { sectionRunId: input.sectionRunId }
-            : {}),
-          ...(input.childRunId !== undefined
-            ? { childRunId: input.childRunId }
-            : {}),
-          ...(input.replyMessageId !== undefined
-            ? { replyMessageId: input.replyMessageId }
-            : {}),
+          ...(input.sectionRunId !== undefined ? { sectionRunId: input.sectionRunId } : {}),
+          ...(input.childRunId !== undefined ? { childRunId: input.childRunId } : {}),
+          ...(input.replyMessageId !== undefined ? { replyMessageId: input.replyMessageId } : {}),
           ...(input.error !== undefined ? { error: input.error } : {}),
         })
         .where(
@@ -682,8 +653,7 @@ export function createDrizzleAgentTurnStore<
           ),
         )
         .returning();
-      const finished =
-        row === undefined ? undefined : toAgentTurn(row as AgentTurnRow);
+      const finished = row === undefined ? undefined : toAgentTurn(row as AgentTurnRow);
       if (finished !== undefined) freed.notify(sectionKey(finished));
       return finished;
     },
@@ -763,12 +733,7 @@ export function createDrizzleAgentTurnStore<
       const [row] = await db
         .select()
         .from(agentTurns)
-        .where(
-          and(
-            eq(agentTurns.id, input.turnId),
-            eq(agentTurns.tenantId, input.tenantId),
-          ),
-        )
+        .where(and(eq(agentTurns.id, input.turnId), eq(agentTurns.tenantId, input.tenantId)))
         .limit(1);
       return row === undefined ? undefined : toAgentTurn(row as AgentTurnRow);
     },
diff --git a/packages/agent-runtime/src/artifact-delivery.test.ts b/packages/agent-runtime/src/artifact-delivery.test.ts
index 5efb2ab234..5b0ce8e72a 100644
--- a/packages/agent-runtime/src/artifact-delivery.test.ts
+++ b/packages/agent-runtime/src/artifact-delivery.test.ts
@@ -1,9 +1,6 @@
 import { describe, expect, test } from "bun:test";
 
-import {
-  artifactPartsForFinalizedTurn,
-  artifactPartsForToolCall,
-} from "./artifact-delivery";
+import { artifactPartsForFinalizedTurn, artifactPartsForToolCall } from "./artifact-delivery";
 
 describe("artifactPartsForToolCall", () => {
   test("returns a FilePart for a single persisted-artifact result", () => {
@@ -81,9 +78,7 @@ describe("artifactPartsForToolCall", () => {
   });
 
   test("returns no parts for unparseable JSON", () => {
-    expect(
-      artifactPartsForToolCall({ isError: false, result: "not json" }),
-    ).toEqual([]);
+    expect(artifactPartsForToolCall({ isError: false, result: "not json" })).toEqual([]);
   });
 
   test("returns no parts for a result that isn't the recognized shape", () => {
@@ -130,8 +125,6 @@ describe("artifactPartsForFinalizedTurn", () => {
   });
 
   test("returns an empty array when no tool call names a persisted artifact", () => {
-    expect(
-      artifactPartsForFinalizedTurn([{ isError: false, result: "{}" }]),
-    ).toEqual([]);
+    expect(artifactPartsForFinalizedTurn([{ isError: false, result: "{}" }])).toEqual([]);
   });
 });
diff --git a/packages/agent-runtime/src/artifact-delivery.ts b/packages/agent-runtime/src/artifact-delivery.ts
index a8b6c67f88..d4716708c0 100644
--- a/packages/agent-runtime/src/artifact-delivery.ts
+++ b/packages/agent-runtime/src/artifact-delivery.ts
@@ -28,9 +28,7 @@ function filePartFor(artifact: PersistedArtifact): FilePart {
 }
 
 /** One tool call's persisted artifacts as `FilePart`s. */
-export function artifactPartsForToolCall(
-  toolCall: FinalizedTurnToolCall,
-): readonly FilePart[] {
+export function artifactPartsForToolCall(toolCall: FinalizedTurnToolCall): readonly FilePart[] {
   return persistedArtifactsForToolCall(toolCall).map(filePartFor);
 }
 
diff --git a/packages/agent-runtime/src/chat-orchestrator.ts b/packages/agent-runtime/src/chat-orchestrator.ts
index da7312ceaa..5b3a74809e 100644
--- a/packages/agent-runtime/src/chat-orchestrator.ts
+++ b/packages/agent-runtime/src/chat-orchestrator.ts
@@ -57,25 +57,13 @@ import { consumerFacingInferenceText } from "@corbits/chat/consumer-inference-te
 import type { ConnectedProviderLister } from "@corbits/chat/inference-preferences";
 import { mentionedParticipants } from "@corbits/chat/mentions";
 import { domainOf, localPartOf } from "@corbits/chat/agent-address";
-import {
-  readBindingByAddressAnyTenant,
-  resolveLiveAgent,
-} from "@corbits/chat/agent-binding";
-import {
-  parseParticipants,
-  type ParticipantRecord,
-} from "@corbits/chat/participants";
+import { readBindingByAddressAnyTenant, resolveLiveAgent } from "@corbits/chat/agent-binding";
+import { parseParticipants, type ParticipantRecord } from "@corbits/chat/participants";
 import type { Part, TextPart } from "@corbits/chat/parts";
 import type { ChatPlatform } from "@corbits/chat/platform-port";
-import {
-  postRoomMessage,
-  type RoomMessageStore,
-} from "@corbits/chat/room-messages";
+import { postRoomMessage, type RoomMessageStore } from "@corbits/chat/room-messages";
 import type { AgentTurn, AgentTurnStore } from "./agent-turns";
-import {
-  mailIdFromBracketMessageId,
-  type TurnMailCorrelationStore,
-} from "./turn-mail-correlation";
+import { mailIdFromBracketMessageId, type TurnMailCorrelationStore } from "./turn-mail-correlation";
 import type { ChatStore } from "@corbits/chat/store";
 import type { ThreadStore } from "@corbits/chat/threads";
 import {
@@ -124,11 +112,7 @@ export type ChatOrchestratorDeps = {
    */
   agentTurns?: Pick<
     AgentTurnStore,
-    | "findRunningTurn"
-    | "findTurnByChildRun"
-    | "finishTurn"
-    | "listTurns"
-    | "getTurn"
+    "findRunningTurn" | "findTurnByChildRun" | "finishTurn" | "listTurns" | "getTurn"
   >;
   /**
    * Resolves a gate-blocked event's `correlationId` to the approval row the
@@ -198,10 +182,7 @@ export type ChatOrchestratorDeps = {
    * threads keeps every post on the root feed exactly as before this
    * landed.
    */
-  threads?: Pick<
-    ThreadStore,
-    "ensureRootThread" | "threadIdForMessage" | "assignMessage"
-  >;
+  threads?: Pick<ThreadStore, "ensureRootThread" | "threadIdForMessage" | "assignMessage">;
   /**
    * Durable dispatch-mail -> source-message correlation (CL-6314): what
    * lets a reply find the message that woke its turn, whether a human
@@ -244,13 +225,9 @@ function gateBlockedCorrelationId(event: unknown): string | undefined {
   ) {
     return undefined;
   }
-  const data = (
-    event as { data?: { reason?: unknown; correlationId?: unknown } }
-  ).data;
+  const data = (event as { data?: { reason?: unknown; correlationId?: unknown } }).data;
   if (data?.reason !== "approval") return undefined;
-  return typeof data.correlationId === "string"
-    ? data.correlationId
-    : undefined;
+  return typeof data.correlationId === "string" ? data.correlationId : undefined;
 }
 
 /**
@@ -266,11 +243,7 @@ function gateBlockedCorrelationId(event: unknown): string | undefined {
  * session and must not share this key. An old sidecar omits `childRunId`
  * and today's session id remains the key.
  */
-function turnKeyFor(
-  agentAddress: string,
-  sessionId: string,
-  childRunId?: string,
-): string {
+function turnKeyFor(agentAddress: string, sessionId: string, childRunId?: string): string {
   return `${agentAddress}:${childRunId ?? sessionId}`;
 }
 
@@ -286,9 +259,7 @@ function turnKeyFor(
  * turn (see `turnKeyFor` below): reset the moment a turn's
  * `connector.reply` or turn-drop notice consumes it.
  */
-export function createReplyPartsAccumulator(
-  connectorRegistry?: ConnectorRegistry,
-): {
+export function createReplyPartsAccumulator(connectorRegistry?: ConnectorRegistry): {
   onInferenceDone(turnKey: string, blocks: ReplyContentBlock[]): void;
   onToolDone(
     turnKey: string,
@@ -309,8 +280,7 @@ export function createReplyPartsAccumulator(
   return {
     onInferenceDone(turnKey, blocks) {
       const parts = partsByTurn.get(turnKey) ?? [];
-      const toolTraceIndex =
-        toolTraceIndexByTurn.get(turnKey) ?? new Map<string, number>();
+      const toolTraceIndex = toolTraceIndexByTurn.get(turnKey) ?? new Map<string, number>();
       for (const block of blocks) {
         if (block.kind === "text") {
           parts.push({ kind: "text", text: block.text });
@@ -414,9 +384,7 @@ function failedTurnNoticeParts(errorMessage: string): TextPart[] {
   ];
 }
 
-function rewriteToolsUnsupportedReply(
-  parts: readonly Part[],
-): readonly Part[] | undefined {
+function rewriteToolsUnsupportedReply(parts: readonly Part[]): readonly Part[] | undefined {
   if (!isToolsUnsupportedInferenceText(flattenReplyText(parts))) {
     return undefined;
   }
@@ -527,21 +495,14 @@ type OpenBracket = {
  * unthreaded, exactly as before this landed.
  */
 async function threadForSourceMessage(
-  threads:
-    Pick<ThreadStore, "ensureRootThread" | "threadIdForMessage"> | undefined,
+  threads: Pick<ThreadStore, "ensureRootThread" | "threadIdForMessage"> | undefined,
   tenantId: string,
   workbenchId: string,
   sourceMessageId: string,
 ): Promise<string | undefined> {
   if (threads === undefined) return undefined;
   const root = await threads.ensureRootThread(tenantId, workbenchId);
-  return (
-    (await threads.threadIdForMessage(
-      tenantId,
-      workbenchId,
-      sourceMessageId,
-    )) ?? root.id
-  );
+  return (await threads.threadIdForMessage(tenantId, workbenchId, sourceMessageId)) ?? root.id;
 }
 
 /**
@@ -566,12 +527,7 @@ async function threadForBracketMail(
   if (source === undefined || source.workbenchId !== workbenchId) {
     return undefined;
   }
-  return threadForSourceMessage(
-    deps.threads,
-    tenantId,
-    workbenchId,
-    source.sourceMessageId,
-  );
+  return threadForSourceMessage(deps.threads, tenantId, workbenchId, source.sourceMessageId);
 }
 
 /**
@@ -598,29 +554,16 @@ async function threadForTurnPost(
   turn: Pick<AgentTurn, "requestMessageIds"> | undefined,
 ): Promise<string | undefined> {
   if (mailId !== undefined) {
-    const fromMail = await threadForBracketMail(
-      deps,
-      tenantId,
-      workbenchId,
-      mailId,
-    );
+    const fromMail = await threadForBracketMail(deps, tenantId, workbenchId, mailId);
     if (fromMail !== undefined) return fromMail;
   }
-  const sourceMessageId =
-    turn?.requestMessageIds[turn.requestMessageIds.length - 1];
+  const sourceMessageId = turn?.requestMessageIds[turn.requestMessageIds.length - 1];
   if (sourceMessageId !== undefined) {
-    return threadForSourceMessage(
-      deps.threads,
-      tenantId,
-      workbenchId,
-      sourceMessageId,
-    );
+    return threadForSourceMessage(deps.threads, tenantId, workbenchId, sourceMessageId);
   }
   if (deps.threads === undefined) return undefined;
   reportError(
-    new Error(
-      `${agentAddress}'s reply names no parent message — appending it to the root thread`,
-    ),
+    new Error(`${agentAddress}'s reply names no parent message — appending it to the root thread`),
     {
       operation: "chat.threadForTurnPost",
       tenantId,
@@ -752,8 +695,7 @@ async function latestTurnForAgent(
 }
 
 async function runningTurnForReply(
-  agentTurns:
-    Pick<AgentTurnStore, "findRunningTurn" | "findTurnByChildRun"> | undefined,
+  agentTurns: Pick<AgentTurnStore, "findRunningTurn" | "findTurnByChildRun"> | undefined,
   input: {
     readonly tenantId: string;
     readonly workbenchId: string;
@@ -859,18 +801,15 @@ async function postReply(
   }
 
   if (targetIds.length === 0) {
-    reportError(
-      new Error(`dropping ${agentAddress}'s reply: no originating workbench`),
-      {
-        operation: "chat.postReply",
-        tenantId: resolved.tenantId,
-        agentId: agentAddress,
-        extra: {
-          workbenchIds: resolved.workbenchIds,
-          runningWorkbenchIds: runningIds,
-        },
+    reportError(new Error(`dropping ${agentAddress}'s reply: no originating workbench`), {
+      operation: "chat.postReply",
+      tenantId: resolved.tenantId,
+      agentId: agentAddress,
+      extra: {
+        workbenchIds: resolved.workbenchIds,
+        runningWorkbenchIds: runningIds,
       },
-    );
+    });
     log.error`chat orchestrator: dropping ${agentAddress}'s reply — no originating workbench among ${String(resolved.workbenchIds.length)} membership(s) (${String(runningIds.length)} running)`;
     return;
   }
@@ -921,8 +860,7 @@ async function postReply(
     // teammates, they must receive it exactly as they would a human's
     // @mention — otherwise a handoff only reaches the human side of
     // the workbench and the mentioned specialist never wakes up.
-    const participants =
-      resolved.participantsByWorkbenchId.get(workbenchId) ?? [];
+    const participants = resolved.participantsByWorkbenchId.get(workbenchId) ?? [];
     const mentioned = mentionedParticipants(parts, participants).filter(
       (address) => localPartOf(address) !== localPartOf(resolved.roomAddress),
     );
@@ -935,9 +873,7 @@ async function postReply(
       const domain = domainOf(recipient);
       if (domain === undefined) {
         reportError(
-          new Error(
-            `cannot delegate to "${recipient}": address carries no mail domain`,
-          ),
+          new Error(`cannot delegate to "${recipient}": address carries no mail domain`),
           {
             operation: "chat.postReply.delegate",
             tenantId: resolved.tenantId,
@@ -1130,12 +1066,7 @@ async function postFinalizedTurnArtifacts(
     if (!claimed) continue;
 
     try {
-      const threadId = await threadForFinalizedTurn(
-        deps,
-        resolved.tenantId,
-        workbenchId,
-        turnId,
-      );
+      const threadId = await threadForFinalizedTurn(deps, resolved.tenantId, workbenchId, turnId);
       const posted = await postRoomMessage(deps, {
         tenantId: resolved.tenantId,
         workbenchId,
@@ -1178,15 +1109,9 @@ async function threadForFinalizedTurn(
   if (turn === undefined || turn.workbenchId !== workbenchId) {
     return undefined;
   }
-  const sourceMessageId =
-    turn.requestMessageIds[turn.requestMessageIds.length - 1];
+  const sourceMessageId = turn.requestMessageIds[turn.requestMessageIds.length - 1];
   if (sourceMessageId === undefined) return undefined;
-  return threadForSourceMessage(
-    deps.threads,
-    tenantId,
-    workbenchId,
-    sourceMessageId,
-  );
+  return threadForSourceMessage(deps.threads, tenantId, workbenchId, sourceMessageId);
 }
 
 /**
@@ -1416,33 +1341,25 @@ export function createArtifactDeliveryHandler(deps: ChatOrchestratorDeps): (
   },
 ) => void {
   return (agentAddress, turn) => {
-    void postFinalizedTurnArtifacts(
-      deps,
-      agentAddress,
-      turn.turnId,
-      turn.toolCalls,
-    ).catch((cause: unknown) => {
-      log.error`chat orchestrator: failed to post ${agentAddress}'s finalized-turn artifacts: ${
-        cause instanceof Error ? cause.message : String(cause)
-      }`;
-    });
-    void postFinalizedTurnMemoryEntries(
-      deps,
-      agentAddress,
-      turn.turnId,
-      turn.toolCalls,
-    ).catch((cause: unknown) => {
-      log.error`chat orchestrator: failed to record ${agentAddress}'s finalized-turn memory entries: ${
-        cause instanceof Error ? cause.message : String(cause)
-      }`;
-    });
-    void postProviderHealthSignal(deps, agentAddress, turn.errors).catch(
+    void postFinalizedTurnArtifacts(deps, agentAddress, turn.turnId, turn.toolCalls).catch(
+      (cause: unknown) => {
+        log.error`chat orchestrator: failed to post ${agentAddress}'s finalized-turn artifacts: ${
+          cause instanceof Error ? cause.message : String(cause)
+        }`;
+      },
+    );
+    void postFinalizedTurnMemoryEntries(deps, agentAddress, turn.turnId, turn.toolCalls).catch(
       (cause: unknown) => {
-        log.error`chat orchestrator: failed to report ${agentAddress}'s provider health signal: ${
+        log.error`chat orchestrator: failed to record ${agentAddress}'s finalized-turn memory entries: ${
           cause instanceof Error ? cause.message : String(cause)
         }`;
       },
     );
+    void postProviderHealthSignal(deps, agentAddress, turn.errors).catch((cause: unknown) => {
+      log.error`chat orchestrator: failed to report ${agentAddress}'s provider health signal: ${
+        cause instanceof Error ? cause.message : String(cause)
+      }`;
+    });
   };
 }
 
@@ -1575,15 +1492,13 @@ export function createChatOrchestrator(
             cause instanceof Error ? cause.message : String(cause)
           }`;
         });
-        void postDailyTranscriptDigest(
-          deps,
-          agentAddress,
-          flattenReplyText(parts),
-        ).catch((cause: unknown) => {
-          log.error`chat orchestrator: failed to record ${agentAddress}'s daily transcript digest: ${
-            cause instanceof Error ? cause.message : String(cause)
-          }`;
-        });
+        void postDailyTranscriptDigest(deps, agentAddress, flattenReplyText(parts)).catch(
+          (cause: unknown) => {
+            log.error`chat orchestrator: failed to record ${agentAddress}'s daily transcript digest: ${
+              cause instanceof Error ? cause.message : String(cause)
+            }`;
+          },
+        );
         return;
       }
 
@@ -1623,9 +1538,7 @@ export function createChatOrchestrator(
           openBrackets.delete(turnKey);
         }
         const endedMailId =
-          bracket !== undefined
-            ? mailIdFromBracketMessageId(bracket.messageId)
-            : undefined;
+          bracket !== undefined ? mailIdFromBracketMessageId(bracket.messageId) : undefined;
 
         const hadReply = repliedTurns.delete(turnKey);
         if (!hadReply) {
diff --git a/packages/agent-runtime/src/client-ids.ts b/packages/agent-runtime/src/client-ids.ts
index 1c88961c48..08ce3e8c45 100644
--- a/packages/agent-runtime/src/client-ids.ts
+++ b/packages/agent-runtime/src/client-ids.ts
@@ -48,11 +48,7 @@ export interface ClientIdStore {
   ): Promise<readonly ClientIdRow[]>;
 }
 
-function clientIdKey(
-  tenantId: string,
-  workbenchId: string,
-  messageId: string,
-): string {
+function clientIdKey(tenantId: string, workbenchId: string, messageId: string): string {
   return `${tenantId}::${workbenchId}::${messageId}`;
 }
 
@@ -61,15 +57,12 @@ export function createInMemoryClientIdStore(): ClientIdStore {
 
   return {
     async recordClientId(input) {
-      rows.set(
-        clientIdKey(input.tenantId, input.workbenchId, input.messageId),
-        {
-          tenantId: input.tenantId,
-          workbenchId: input.workbenchId,
-          messageId: input.messageId,
-          clientId: input.clientId,
-        },
-      );
+      rows.set(clientIdKey(input.tenantId, input.workbenchId, input.messageId), {
+        tenantId: input.tenantId,
+        workbenchId: input.workbenchId,
+        messageId: input.messageId,
+        clientId: input.clientId,
+      });
     },
 
     async listClientIdsForMessages(tenantId, workbenchId, messageIds) {
@@ -77,21 +70,18 @@ export function createInMemoryClientIdStore(): ClientIdStore {
       const wanted = new Set(messageIds);
       return [...rows.values()].filter(
         (row) =>
-          row.tenantId === tenantId &&
-          row.workbenchId === workbenchId &&
-          wanted.has(row.messageId),
+          row.tenantId === tenantId && row.workbenchId === workbenchId && wanted.has(row.messageId),
       );
     },
   };
 }
 
-export type ClientIdDb<
-  TSchema extends Record<string, unknown> = Record<string, never>,
-> = PostgresJsDatabase<TSchema>;
+export type ClientIdDb<TSchema extends Record<string, unknown> = Record<string, never>> =
+  PostgresJsDatabase<TSchema>;
 
-export function createDrizzleClientIdStore<
-  TSchema extends Record<string, unknown>,
->(db: ClientIdDb<TSchema>): ClientIdStore {
+export function createDrizzleClientIdStore<TSchema extends Record<string, unknown>>(
+  db: ClientIdDb<TSchema>,
+): ClientIdStore {
   return {
     async recordClientId(input) {
       await db
diff --git a/packages/agent-runtime/src/config.test.ts b/packages/agent-runtime/src/config.test.ts
index cbaad13f3f..2eecdd5ed9 100644
--- a/packages/agent-runtime/src/config.test.ts
+++ b/packages/agent-runtime/src/config.test.ts
@@ -27,26 +27,26 @@ describe("parseAgentRuntimeConfig", () => {
   });
 
   test("rejects an empty inference chain rather than building a modelless agent", () => {
-    expect(() =>
-      parseAgentRuntimeConfig({ ...stepConfig, inferencePreferences: [] }),
-    ).toThrow(/invalid agent-runtime config/);
+    expect(() => parseAgentRuntimeConfig({ ...stepConfig, inferencePreferences: [] })).toThrow(
+      /invalid agent-runtime config/,
+    );
   });
 
   test("rejects a section mode with no turn timeout", () => {
-    expect(() =>
-      parseAgentRuntimeConfig({ ...stepConfig, mode: { kind: "section" } }),
-    ).toThrow(/invalid agent-runtime config/);
+    expect(() => parseAgentRuntimeConfig({ ...stepConfig, mode: { kind: "section" } })).toThrow(
+      /invalid agent-runtime config/,
+    );
   });
 
   test("rejects an unknown mode", () => {
-    expect(() =>
-      parseAgentRuntimeConfig({ ...stepConfig, mode: { kind: "swarm" } }),
-    ).toThrow(/invalid agent-runtime config/);
+    expect(() => parseAgentRuntimeConfig({ ...stepConfig, mode: { kind: "swarm" } })).toThrow(
+      /invalid agent-runtime config/,
+    );
   });
 
   test("rejects an empty trigger address", () => {
-    expect(() =>
-      parseAgentRuntimeConfig({ ...stepConfig, triggerAddress: "" }),
-    ).toThrow(/invalid agent-runtime config/);
+    expect(() => parseAgentRuntimeConfig({ ...stepConfig, triggerAddress: "" })).toThrow(
+      /invalid agent-runtime config/,
+    );
   });
 });
diff --git a/packages/agent-runtime/src/definition.test.ts b/packages/agent-runtime/src/definition.test.ts
index 7b8ab6668f..c73e452781 100644
--- a/packages/agent-runtime/src/definition.test.ts
+++ b/packages/agent-runtime/src/definition.test.ts
@@ -32,9 +32,7 @@ describe("buildAgentRuntimeWorkflow — step mode", () => {
     expect(definition.stepOrder).toEqual([AGENT_RUNTIME_STEP_ID]);
     const stepPrimitive = definition.steps[AGENT_RUNTIME_STEP_ID];
     expect(stepPrimitive?.kind).toBe("step");
-    expect(definition.triggers).toEqual([
-      { type: "mail", to: "run_a@bench.example" },
-    ]);
+    expect(definition.triggers).toEqual([{ type: "mail", to: "run_a@bench.example" }]);
   });
 
   test("the step's trigger budget is unbounded, so a run never goes silent after one reply", () => {
@@ -87,9 +85,7 @@ describe("buildAgentRuntimeWorkflow — step mode", () => {
   });
 
   test("omits credentialBindings entirely when the config declares none", () => {
-    expect(
-      buildAgentRuntimeWorkflow(baseConfig).credentialBindings,
-    ).toBeUndefined();
+    expect(buildAgentRuntimeWorkflow(baseConfig).credentialBindings).toBeUndefined();
   });
 
   test("pins the step's input to a literal when the config supplies one", () => {
@@ -104,8 +100,7 @@ describe("buildAgentRuntimeWorkflow — step mode", () => {
   });
 
   test("leaves the step reading its real trigger payload by default", () => {
-    const stepPrimitive =
-      buildAgentRuntimeWorkflow(baseConfig).steps[AGENT_RUNTIME_STEP_ID];
+    const stepPrimitive = buildAgentRuntimeWorkflow(baseConfig).steps[AGENT_RUNTIME_STEP_ID];
 
     expect(stepPrimitive).not.toMatchObject({ input: { literal: undefined } });
   });
@@ -128,8 +123,7 @@ describe("buildAgentRuntimeWorkflow — section mode", () => {
   });
 
   test("the section's body is one agent step carrying the per-turn timeout", () => {
-    const section =
-      buildAgentRuntimeWorkflow(sectionConfig).steps[AGENT_RUNTIME_SECTION_ID];
+    const section = buildAgentRuntimeWorkflow(sectionConfig).steps[AGENT_RUNTIME_SECTION_ID];
 
     expect(section).toMatchObject({
       body: {
@@ -148,16 +142,13 @@ describe("buildAgentRuntimeWorkflow — section mode", () => {
   });
 
   test("authors onBodyFailure 'continue' so a failed turn re-arms the section", () => {
-    const section =
-      buildAgentRuntimeWorkflow(sectionConfig).steps[AGENT_RUNTIME_SECTION_ID];
+    const section = buildAgentRuntimeWorkflow(sectionConfig).steps[AGENT_RUNTIME_SECTION_ID];
 
     expect(section).toMatchObject({ onBodyFailure: "tolerate" });
   });
 
   test("the section's failure policy survives the live→inert projection", () => {
-    const projected = projectLiveToInert(
-      buildAgentRuntimeWorkflow(sectionConfig),
-    );
+    const projected = projectLiveToInert(buildAgentRuntimeWorkflow(sectionConfig));
     const section = projected.steps[AGENT_RUNTIME_SECTION_ID];
 
     expect(section).toMatchObject({
diff --git a/packages/agent-runtime/src/definition.ts b/packages/agent-runtime/src/definition.ts
index ed8124ce33..cfe3468297 100644
--- a/packages/agent-runtime/src/definition.ts
+++ b/packages/agent-runtime/src/definition.ts
@@ -45,9 +45,7 @@ export const AGENT_RUNTIME_TURN_STEP_ID = "reply";
  */
 export function agentRuntimeTurnRunId(occurrence: number): string {
   if (!Number.isInteger(occurrence) || occurrence < 0) {
-    throw new Error(
-      "agentRuntimeTurnRunId requires a non-negative integer occurrence",
-    );
+    throw new Error("agentRuntimeTurnRunId requires a non-negative integer occurrence");
   }
   return `${AGENT_RUNTIME_SECTION_ID}__${String(occurrence)}`;
 }
@@ -128,15 +126,9 @@ function buildSectionWorkflow(
  * `mode` selects the shape; every other field is the same per-run data
  * either shape needs.
  */
-export function buildAgentRuntimeWorkflow(
-  config: AgentRuntimeConfig,
-): WorkflowDefinition {
+export function buildAgentRuntimeWorkflow(config: AgentRuntimeConfig): WorkflowDefinition {
   if (config.mode.kind === "section") {
     return buildSectionWorkflow(config, config.mode.turnTimeoutMs);
   }
-  return buildFoldedStepWorkflow(
-    config,
-    config.mode.literalInput,
-    "literalInput" in config.mode,
-  );
+  return buildFoldedStepWorkflow(config, config.mode.literalInput, "literalInput" in config.mode);
 }
diff --git a/packages/agent-runtime/src/index.ts b/packages/agent-runtime/src/index.ts
index 4757dd382f..9556d6b247 100644
--- a/packages/agent-runtime/src/index.ts
+++ b/packages/agent-runtime/src/index.ts
@@ -26,10 +26,7 @@ export type {
   FinishAgentTurnInput,
   StartAgentTurnInput,
 } from "./agent-turns";
-export {
-  CHAT_TURN_TIMEOUT_MS,
-  createInMemoryTurnClaimStore,
-} from "./turn-claims";
+export { CHAT_TURN_TIMEOUT_MS, createInMemoryTurnClaimStore } from "./turn-claims";
 export type { TurnClaim, TurnClaimStore, TurnClaimToken } from "./turn-claims";
 export { createWorkbenchTurnQueue, TurnQueuedEvent } from "./turn-queue";
 export type {
@@ -38,34 +35,12 @@ export type {
   WorkbenchTurnQueue,
   WorkbenchTurnQueueDeps,
 } from "./turn-queue";
-export {
-  createInMemoryClientIdStore,
-  createDrizzleClientIdStore,
-} from "./client-ids";
-export type {
-  ClientIdRow,
-  ClientIdStore,
-  ClientIdDb,
-  RecordClientIdInput,
-} from "./client-ids";
-export {
-  createArtifactDeliveryHandler,
-  createChatOrchestrator,
-} from "./chat-orchestrator";
-export type {
-  ChatOrchestrator,
-  ChatOrchestratorDeps,
-} from "./chat-orchestrator";
-export {
-  createDrizzleWriteClaimStore,
-  createInMemoryWriteClaimStore,
-} from "./write-claims";
-export type {
-  WriteClaim,
-  WriteClaimDb,
-  WriteClaimStore,
-  WriteClaimSurface,
-} from "./write-claims";
+export { createInMemoryClientIdStore, createDrizzleClientIdStore } from "./client-ids";
+export type { ClientIdRow, ClientIdStore, ClientIdDb, RecordClientIdInput } from "./client-ids";
+export { createArtifactDeliveryHandler, createChatOrchestrator } from "./chat-orchestrator";
+export type { ChatOrchestrator, ChatOrchestratorDeps } from "./chat-orchestrator";
+export { createDrizzleWriteClaimStore, createInMemoryWriteClaimStore } from "./write-claims";
+export type { WriteClaim, WriteClaimDb, WriteClaimStore, WriteClaimSurface } from "./write-claims";
 export {
   createDrizzleTurnMailCorrelationStore,
   createInMemoryTurnMailCorrelationStore,
@@ -80,7 +55,4 @@ export type {
 export { AGENT_TURN_STALE_MS } from "./agent-turns";
 export { POSTED_APPROVAL_GUARD_TTL_MS } from "./chat-orchestrator";
 
-export {
-  artifactPartsForFinalizedTurn,
-  artifactPartsForToolCall,
-} from "./artifact-delivery";
+export { artifactPartsForFinalizedTurn, artifactPartsForToolCall } from "./artifact-delivery";
diff --git a/packages/agent-runtime/src/source-tree.test.ts b/packages/agent-runtime/src/source-tree.test.ts
index f9a0616e49..38621c4ce6 100644
--- a/packages/agent-runtime/src/source-tree.test.ts
+++ b/packages/agent-runtime/src/source-tree.test.ts
@@ -2,10 +2,7 @@ import { describe, expect, test } from "bun:test";
 
 import type { AgentRuntimeConfig } from "./config";
 import { buildAgentRuntimeWorkflow } from "./definition";
-import {
-  AGENT_RUNTIME_ENTRY_PATH,
-  renderAgentRuntimeSourceTree,
-} from "./source-tree";
+import { AGENT_RUNTIME_ENTRY_PATH, renderAgentRuntimeSourceTree } from "./source-tree";
 
 const config: AgentRuntimeConfig = {
   workflowId: "wf_run_a",
@@ -60,10 +57,7 @@ describe("renderAgentRuntimeSourceTree", () => {
 
   test("the rendered entry parses back to the definition the builder produced", () => {
     const entry = render()["workflow.js"] ?? "";
-    const literal = entry.slice(
-      "export default ".length,
-      entry.lastIndexOf(";"),
-    );
+    const literal = entry.slice("export default ".length, entry.lastIndexOf(";"));
 
     expect(JSON.parse(literal)).toEqual(
       JSON.parse(JSON.stringify(buildAgentRuntimeWorkflow(config))),
@@ -71,18 +65,13 @@ describe("renderAgentRuntimeSourceTree", () => {
   });
 
   test("renders the section mode's turn timeout into the bytes too", () => {
-    const entry =
-      render({ mode: { kind: "section", turnTimeoutMs: 45_000 } })[
-        "workflow.js"
-      ] ?? "";
+    const entry = render({ mode: { kind: "section", turnTimeoutMs: 45_000 } })["workflow.js"] ?? "";
 
     expect(entry).toContain('"kind": "onTrigger"');
     expect(entry).toContain("45000");
   });
 
   test("refuses to render a config the run child would reject", () => {
-    expect(() => render({ inferencePreferences: [] })).toThrow(
-      /invalid agent-runtime config/,
-    );
+    expect(() => render({ inferencePreferences: [] })).toThrow(/invalid agent-runtime config/);
   });
 });
diff --git a/packages/agent-runtime/src/source-tree.ts b/packages/agent-runtime/src/source-tree.ts
index 0182e473fd..517a4d1288 100644
--- a/packages/agent-runtime/src/source-tree.ts
+++ b/packages/agent-runtime/src/source-tree.ts
@@ -22,10 +22,7 @@
 // with `source.kind: "asset"`, `package.format: "source"`, `commitSha` —
 // the only source variant whose pin is cheap enough to mint per run
 // (the registry and tarball variants would each need a publish).
-import {
-  renderWorkflowSourceTree,
-  WORKFLOW_SOURCE_ENTRY,
-} from "@corbits/workflows";
+import { renderWorkflowSourceTree, WORKFLOW_SOURCE_ENTRY } from "@corbits/workflows";
 import { parseAgentRuntimeConfig, type AgentRuntimeConfig } from "./config";
 import { buildAgentRuntimeWorkflow } from "./definition";
 
@@ -84,9 +81,7 @@ function assertJsonPortable(value: unknown, path: string): void {
     case "object":
       break;
     default:
-      throw new Error(
-        `${path} is a ${typeof value}, which does not survive JSON serialization`,
-      );
+      throw new Error(`${path} is a ${typeof value}, which does not survive JSON serialization`);
   }
   if (Array.isArray(value)) {
     value.forEach((element, index) => {
@@ -96,9 +91,7 @@ function assertJsonPortable(value: unknown, path: string): void {
   }
   const proto: unknown = Object.getPrototypeOf(value);
   if (proto !== Object.prototype && proto !== null) {
-    throw new Error(
-      `${path} is a non-plain object; JSON would flatten it lossily`,
-    );
+    throw new Error(`${path} is a non-plain object; JSON would flatten it lossily`);
   }
   for (const [key, entry] of Object.entries(value)) {
     assertJsonPortable(entry, `${path}.${key}`);
diff --git a/packages/agent-runtime/src/turn-claims.test.ts b/packages/agent-runtime/src/turn-claims.test.ts
index 4b2553faff..3f930d6998 100644
--- a/packages/agent-runtime/src/turn-claims.test.ts
+++ b/packages/agent-runtime/src/turn-claims.test.ts
@@ -16,30 +16,22 @@ describe("createInMemoryTurnClaimStore", () => {
 
   test("claims on different workbenches never contend", async () => {
     const store = createInMemoryTurnClaimStore({ ttlMs: 60_000 });
-    await expect(store.tryClaim({ workbenchId: "wb_1" })).resolves.not.toBe(
-      false,
-    );
-    await expect(store.tryClaim({ workbenchId: "wb_2" })).resolves.not.toBe(
-      false,
-    );
+    await expect(store.tryClaim({ workbenchId: "wb_1" })).resolves.not.toBe(false);
+    await expect(store.tryClaim({ workbenchId: "wb_2" })).resolves.not.toBe(false);
   });
 
   test("release frees the claim for a fresh tryClaim", async () => {
     const store = createInMemoryTurnClaimStore({ ttlMs: 60_000 });
     const token = await store.tryClaim({ workbenchId: "wb_1" });
-    await expect(
-      store.release({ workbenchId: "wb_1" }, token as string),
-    ).resolves.toBe(true);
-    await expect(store.tryClaim({ workbenchId: "wb_1" })).resolves.not.toBe(
-      false,
-    );
+    await expect(store.release({ workbenchId: "wb_1" }, token as string)).resolves.toBe(true);
+    await expect(store.tryClaim({ workbenchId: "wb_1" })).resolves.not.toBe(false);
   });
 
   test("releasing a claim nobody holds is a harmless no-op", async () => {
     const store = createInMemoryTurnClaimStore({ ttlMs: 60_000 });
-    await expect(
-      store.release({ workbenchId: "wb_never_claimed" }, "some_token"),
-    ).resolves.toBe(false);
+    await expect(store.release({ workbenchId: "wb_never_claimed" }, "some_token")).resolves.toBe(
+      false,
+    );
   });
 
   test("releasing with a stale token — one the TTL already reassigned — is a no-op", async () => {
@@ -56,12 +48,8 @@ describe("createInMemoryTurnClaimStore", () => {
 
     // The first holder's `finally` releasing its now-stale token must
     // never evict the second holder's live claim.
-    await expect(
-      store.release({ workbenchId: "wb_1" }, firstToken as string),
-    ).resolves.toBe(false);
-    await expect(
-      store.holds({ workbenchId: "wb_1" }, secondToken as string),
-    ).resolves.toBe(true);
+    await expect(store.release({ workbenchId: "wb_1" }, firstToken as string)).resolves.toBe(false);
+    await expect(store.holds({ workbenchId: "wb_1" }, secondToken as string)).resolves.toBe(true);
   });
 
   test("a mismatched release evicts an already-expired entry, so the true original token then finds nothing left to release", async () => {
@@ -76,16 +64,12 @@ describe("createInMemoryTurnClaimStore", () => {
     // A release with the wrong token still can't claim credit for
     // freeing this workbench, but it notices the stale entry it found
     // along the way and cleans it up rather than leaving it in place.
-    await expect(
-      store.release({ workbenchId: "wb_1" }, "not_the_real_token"),
-    ).resolves.toBe(false);
+    await expect(store.release({ workbenchId: "wb_1" }, "not_the_real_token")).resolves.toBe(false);
 
     // Proof the entry is actually gone, not merely ignored: the true
     // original token — still technically correct — now finds nothing
     // left to release.
-    await expect(
-      store.release({ workbenchId: "wb_1" }, token as string),
-    ).resolves.toBe(false);
+    await expect(store.release({ workbenchId: "wb_1" }, token as string)).resolves.toBe(false);
   });
 
   test("a claim older than the TTL is reclaimable even without release — the crash/hang backstop", async () => {
@@ -98,25 +82,19 @@ describe("createInMemoryTurnClaimStore", () => {
     now += 999;
     await expect(store.tryClaim({ workbenchId: "wb_1" })).resolves.toBe(false);
     now += 2;
-    await expect(store.tryClaim({ workbenchId: "wb_1" })).resolves.not.toBe(
-      false,
-    );
+    await expect(store.tryClaim({ workbenchId: "wb_1" })).resolves.not.toBe(false);
   });
 
   describe("holds", () => {
     test("is true for the current, unexpired holder's own token", async () => {
       const store = createInMemoryTurnClaimStore({ ttlMs: 60_000 });
       const token = await store.tryClaim({ workbenchId: "wb_1" });
-      await expect(
-        store.holds({ workbenchId: "wb_1" }, token as string),
-      ).resolves.toBe(true);
+      await expect(store.holds({ workbenchId: "wb_1" }, token as string)).resolves.toBe(true);
     });
 
     test("is false for a token nobody ever held", async () => {
       const store = createInMemoryTurnClaimStore({ ttlMs: 60_000 });
-      await expect(
-        store.holds({ workbenchId: "wb_1" }, "never_claimed"),
-      ).resolves.toBe(false);
+      await expect(store.holds({ workbenchId: "wb_1" }, "never_claimed")).resolves.toBe(false);
     });
 
     test("is false once the TTL expires, even without a fresh tryClaim", async () => {
@@ -127,9 +105,7 @@ describe("createInMemoryTurnClaimStore", () => {
       });
       const token = await store.tryClaim({ workbenchId: "wb_1" });
       now += 1_000;
-      await expect(
-        store.holds({ workbenchId: "wb_1" }, token as string),
-      ).resolves.toBe(false);
+      await expect(store.holds({ workbenchId: "wb_1" }, token as string)).resolves.toBe(false);
     });
 
     test("observing an expired claim deletes it, so the original token then finds nothing to release", async () => {
@@ -140,12 +116,8 @@ describe("createInMemoryTurnClaimStore", () => {
       });
       const token = await store.tryClaim({ workbenchId: "wb_1" });
       now += 1_000;
-      await expect(
-        store.holds({ workbenchId: "wb_1" }, token as string),
-      ).resolves.toBe(false);
-      await expect(
-        store.release({ workbenchId: "wb_1" }, token as string),
-      ).resolves.toBe(false);
+      await expect(store.holds({ workbenchId: "wb_1" }, token as string)).resolves.toBe(false);
+      await expect(store.release({ workbenchId: "wb_1" }, token as string)).resolves.toBe(false);
     });
   });
 });
diff --git a/packages/agent-runtime/src/turn-claims.ts b/packages/agent-runtime/src/turn-claims.ts
index 20883bbb4b..5e4b765d7f 100644
--- a/packages/agent-runtime/src/turn-claims.ts
+++ b/packages/agent-runtime/src/turn-claims.ts
@@ -109,9 +109,7 @@ export function createInMemoryTurnClaimStore(options: {
    * until a future `tryClaim` for this workbench happens to overwrite it
    * (CL-7200).
    */
-  function liveHolder(
-    workbenchId: string,
-  ): { token: string; claimedAt: number } | undefined {
+  function liveHolder(workbenchId: string): { token: string; claimedAt: number } | undefined {
     const existing = holders.get(workbenchId);
     if (existing === undefined) return undefined;
     if (isExpired(existing)) {
diff --git a/packages/agent-runtime/src/turn-mail-correlation.test.ts b/packages/agent-runtime/src/turn-mail-correlation.test.ts
index d9b5410313..937e97302c 100644
--- a/packages/agent-runtime/src/turn-mail-correlation.test.ts
+++ b/packages/agent-runtime/src/turn-mail-correlation.test.ts
@@ -14,9 +14,7 @@ import {
 describe("mailIdFromBracketMessageId", () => {
   test("strips the MIME framing the reactor reports the bracket in", () => {
     expect(
-      mailIdFromBracketMessageId(
-        "<0f1e2d3c-4b5a-6789-abcd-ef0123456789@ten1.workbench.test>",
-      ),
+      mailIdFromBracketMessageId("<0f1e2d3c-4b5a-6789-abcd-ef0123456789@ten1.workbench.test>"),
     ).toBe("0f1e2d3c-4b5a-6789-abcd-ef0123456789");
   });
 
@@ -41,9 +39,7 @@ describe("createInMemoryTurnMailCorrelationStore", () => {
       sourceMessageId: "msg_1",
     });
 
-    expect(
-      await store.findTurnMailSource({ tenantId: "ten_1", mailId: "mail_1" }),
-    ).toEqual({
+    expect(await store.findTurnMailSource({ tenantId: "ten_1", mailId: "mail_1" })).toEqual({
       tenantId: "ten_1",
       workbenchId: "ins_workbench1",
       sourceMessageId: "msg_1",
@@ -52,9 +48,7 @@ describe("createInMemoryTurnMailCorrelationStore", () => {
 
   test("an unrecorded mail resolves to undefined, never a guess", async () => {
     const store = createInMemoryTurnMailCorrelationStore();
-    expect(
-      await store.findTurnMailSource({ tenantId: "ten_1", mailId: "mail_x" }),
-    ).toBeUndefined();
+    expect(await store.findTurnMailSource({ tenantId: "ten_1", mailId: "mail_x" })).toBeUndefined();
   });
 
   test("the same mail id under another tenant is a different correlation", async () => {
@@ -66,9 +60,7 @@ describe("createInMemoryTurnMailCorrelationStore", () => {
       sourceMessageId: "msg_1",
     });
 
-    expect(
-      await store.findTurnMailSource({ tenantId: "ten_2", mailId: "mail_1" }),
-    ).toBeUndefined();
+    expect(await store.findTurnMailSource({ tenantId: "ten_2", mailId: "mail_1" })).toBeUndefined();
   });
 
   test("a second record for the same mail keeps the first source", async () => {
@@ -86,8 +78,8 @@ describe("createInMemoryTurnMailCorrelationStore", () => {
       sourceMessageId: "msg_2",
     });
 
-    expect(
-      await store.findTurnMailSource({ tenantId: "ten_1", mailId: "mail_1" }),
-    ).toMatchObject({ sourceMessageId: "msg_1" });
+    expect(await store.findTurnMailSource({ tenantId: "ten_1", mailId: "mail_1" })).toMatchObject({
+      sourceMessageId: "msg_1",
+    });
   });
 });
diff --git a/packages/agent-runtime/src/turn-mail-correlation.ts b/packages/agent-runtime/src/turn-mail-correlation.ts
index 3821894c13..fe3bf163bf 100644
--- a/packages/agent-runtime/src/turn-mail-correlation.ts
+++ b/packages/agent-runtime/src/turn-mail-correlation.ts
@@ -46,9 +46,8 @@ export type TurnMailCorrelationStore = {
   }): Promise<TurnMailSource | undefined>;
 };
 
-export type TurnMailCorrelationDb<
-  TSchema extends Record<string, unknown> = Record<string, never>,
-> = PostgresJsDatabase<TSchema>;
+export type TurnMailCorrelationDb<TSchema extends Record<string, unknown> = Record<string, never>> =
+  PostgresJsDatabase<TSchema>;
 
 /**
  * Production store over `turnMailCorrelation`. One atomic
@@ -58,9 +57,9 @@ export type TurnMailCorrelationDb<
  * source rather than throwing a PK-violation — the same fix
  * `createDrizzleWriteClaimStore` (`./write-claims.ts`) uses.
  */
-export function createDrizzleTurnMailCorrelationStore<
-  TSchema extends Record<string, unknown>,
->(db: TurnMailCorrelationDb<TSchema>): TurnMailCorrelationStore {
+export function createDrizzleTurnMailCorrelationStore<TSchema extends Record<string, unknown>>(
+  db: TurnMailCorrelationDb<TSchema>,
+): TurnMailCorrelationStore {
   return {
     async recordTurnMail(input) {
       await db
diff --git a/packages/agent-runtime/src/turn-queue.test.ts b/packages/agent-runtime/src/turn-queue.test.ts
index 5abe6aaf8c..90dc095f17 100644
--- a/packages/agent-runtime/src/turn-queue.test.ts
+++ b/packages/agent-runtime/src/turn-queue.test.ts
@@ -121,10 +121,7 @@ describe("createWorkbenchTurnQueue", () => {
     await Promise.resolve();
     await Promise.resolve();
 
-    expect(calls).toEqual([
-      [turn("msg_1", "one")],
-      [turn("msg_2", "two"), turn("msg_3", "three")],
-    ]);
+    expect(calls).toEqual([[turn("msg_1", "one")], [turn("msg_2", "two"), turn("msg_3", "three")]]);
 
     resolveNext(); // settle the batched turn so nothing is left hanging
     await firstRun;
diff --git a/packages/agent-runtime/src/turn-queue.ts b/packages/agent-runtime/src/turn-queue.ts
index 5ed4b3b954..9c0f6ca52d 100644
--- a/packages/agent-runtime/src/turn-queue.ts
+++ b/packages/agent-runtime/src/turn-queue.ts
@@ -76,16 +76,10 @@ export type WorkbenchTurnQueue = {
    * `dispatch`'s own failure is `dispatch`'s to report (see
    * `dispatchTurn`'s per-recipient handling in `workbench-service.ts`).
    */
-  run(
-    workbenchId: string,
-    turn: QueuedTurn,
-    dispatch: DispatchTurnBatch,
-  ): Promise<void>;
+  run(workbenchId: string, turn: QueuedTurn, dispatch: DispatchTurnBatch): Promise<void>;
 };
 
-export function createWorkbenchTurnQueue(
-  deps: WorkbenchTurnQueueDeps,
-): WorkbenchTurnQueue {
+export function createWorkbenchTurnQueue(deps: WorkbenchTurnQueueDeps): WorkbenchTurnQueue {
   // Process-local, paired one-to-one with `deps.claims`: a multi-replica
   // hub would need every workbench's turns routed to the same replica,
   // or replica B enqueues here into a `Map` replica A never reads and a
diff --git a/packages/agent-runtime/src/write-claims.ts b/packages/agent-runtime/src/write-claims.ts
index c0f7cb1617..d17f10944a 100644
--- a/packages/agent-runtime/src/write-claims.ts
+++ b/packages/agent-runtime/src/write-claims.ts
@@ -45,9 +45,8 @@ export type WriteClaimStore = {
   release(claim: WriteClaim): Promise<void>;
 };
 
-export type WriteClaimDb<
-  TSchema extends Record<string, unknown> = Record<string, never>,
-> = PostgresJsDatabase<TSchema>;
+export type WriteClaimDb<TSchema extends Record<string, unknown> = Record<string, never>> =
+  PostgresJsDatabase<TSchema>;
 
 /**
  * Production store over `finalizedTurnWriteClaim`. A single atomic
@@ -58,9 +57,9 @@ export type WriteClaimDb<
  * `createDrizzleReactionStore` (`./reactions.ts`) uses for
  * `toggleReaction`.
  */
-export function createDrizzleWriteClaimStore<
-  TSchema extends Record<string, unknown>,
->(db: WriteClaimDb<TSchema>): WriteClaimStore {
+export function createDrizzleWriteClaimStore<TSchema extends Record<string, unknown>>(
+  db: WriteClaimDb<TSchema>,
+): WriteClaimStore {
   return {
     async tryClaim(claim) {
       const inserted = await db
@@ -108,8 +107,7 @@ export function createDrizzleWriteClaimStore<
  */
 export function createInMemoryWriteClaimStore(): WriteClaimStore {
   const claimed = new Set<string>();
-  const keyOf = (claim: WriteClaim) =>
-    `${claim.tenantId}:${claim.surface}:${claim.claimKey}`;
+  const keyOf = (claim: WriteClaim) => `${claim.tenantId}:${claim.surface}:${claim.claimKey}`;
   return {
     async tryClaim(claim) {
       const key = keyOf(claim);
diff --git a/packages/api-query/package.json b/packages/api-query/package.json
index 186086c9b7..9e7cf9190e 100644
--- a/packages/api-query/package.json
+++ b/packages/api-query/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/api-query",
+  "version": "0.0.1",
   "private": true,
   "description": "The shared hub-query envelope (loading/unauthenticated/error/ready) and its QueryView renderer, so every page reports a fetch the same way",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
@@ -14,8 +14,8 @@
     "test": "bun test"
   },
   "dependencies": {
-    "@corbits/react-ui": "github:corbitsdev/react-ui#3b122812a307ccb35be31386f7696020c5a84635",
     "@corbits/icons": "workspace:*",
+    "@corbits/react-ui": "github:corbitsdev/react-ui#3b122812a307ccb35be31386f7696020c5a84635",
     "react": "^19.2.0"
   },
   "devDependencies": {
diff --git a/packages/api-query/src/envelope.test.ts b/packages/api-query/src/envelope.test.ts
index 674e2e930b..38ae0d0361 100644
--- a/packages/api-query/src/envelope.test.ts
+++ b/packages/api-query/src/envelope.test.ts
@@ -43,9 +43,7 @@ describe("describeQueryError", () => {
   });
 
   test("maps everything else to generic retry copy", () => {
-    expect(describeQueryError(new Error("boom"))).toBe(
-      "Something went wrong. Try again.",
-    );
+    expect(describeQueryError(new Error("boom"))).toBe("Something went wrong. Try again.");
     expect(describeQueryError(new ApiQueryError("boom", 500))).toBe(
       "Something went wrong. Try again.",
     );
@@ -66,27 +64,25 @@ describe("describeApiError", () => {
   });
 
   test("401 and 403 read as an access problem", () => {
-    expect(
-      describeApiError(new ApiQueryError("boom", 401), "loading this"),
-    ).toBe("You don't have access to this.");
-    expect(
-      describeApiError(new ApiQueryError("boom", 403), "loading this"),
-    ).toBe("You don't have access to this.");
+    expect(describeApiError(new ApiQueryError("boom", 401), "loading this")).toBe(
+      "You don't have access to this.",
+    );
+    expect(describeApiError(new ApiQueryError("boom", 403), "loading this")).toBe(
+      "You don't have access to this.",
+    );
   });
 
   test("404 reads as gone, not as a generic failure", () => {
-    expect(describeApiError(pathBearing, "loading this")).toBe(
-      "This isn't here anymore.",
-    );
+    expect(describeApiError(pathBearing, "loading this")).toBe("This isn't here anymore.");
   });
 
   test("5xx and network failures share the same actionable copy, named around the task", () => {
-    expect(
-      describeApiError(new ApiQueryError("boom", 500), "uploading this file"),
-    ).toBe("Something went wrong uploading this file. Try again.");
-    expect(
-      describeApiError(new TypeError("Failed to fetch"), "starting that task"),
-    ).toBe("Something went wrong starting that task. Try again.");
+    expect(describeApiError(new ApiQueryError("boom", 500), "uploading this file")).toBe(
+      "Something went wrong uploading this file. Try again.",
+    );
+    expect(describeApiError(new TypeError("Failed to fetch"), "starting that task")).toBe(
+      "Something went wrong starting that task. Try again.",
+    );
   });
 
   test("an error with no status falls back to the same generic copy", () => {
diff --git a/packages/api-query/src/envelope.ts b/packages/api-query/src/envelope.ts
index 2bef1fccc2..545613eb93 100644
--- a/packages/api-query/src/envelope.ts
+++ b/packages/api-query/src/envelope.ts
@@ -101,10 +101,7 @@ export function toAPIQuery<T>(result: {
     if (result.error instanceof UnauthenticatedError) {
       return { kind: "unauthenticated" };
     }
-    if (
-      result.error instanceof ApiQueryError &&
-      result.error.status !== undefined
-    ) {
+    if (result.error instanceof ApiQueryError && result.error.status !== undefined) {
       return {
         kind: "error",
         message: describeQueryError(result.error),
diff --git a/packages/api-query/src/index.ts b/packages/api-query/src/index.ts
index 0313394c6e..0d16ce111b 100644
--- a/packages/api-query/src/index.ts
+++ b/packages/api-query/src/index.ts
@@ -7,9 +7,4 @@ export {
   toAPIQuery,
 } from "./envelope";
 export type { QuerySkeletonVariant } from "./query-view";
-export {
-  DetailSkeleton,
-  ListSkeleton,
-  QueryView,
-  SignedOutNotice,
-} from "./query-view";
+export { DetailSkeleton, ListSkeleton, QueryView, SignedOutNotice } from "./query-view";
diff --git a/packages/api-query/src/query-view.test.tsx b/packages/api-query/src/query-view.test.tsx
index 3ac859382e..19761ab696 100644
--- a/packages/api-query/src/query-view.test.tsx
+++ b/packages/api-query/src/query-view.test.tsx
@@ -27,9 +27,7 @@ describe("QueryView error state", () => {
     expect(markup).toContain("Couldn&#x27;t load your benches");
     expect(markup).not.toMatch(/\/api\//);
     expect(markup).not.toContain("abc-123");
-    expect(markup).toContain(
-      "Something went wrong loading your benches. Try again.",
-    );
+    expect(markup).toContain("Something went wrong loading your benches. Try again.");
   });
 
   test("404 reads as gone, not as a generic failure", () => {
@@ -72,11 +70,7 @@ describe("QueryView loading skeletons", () => {
 
   test('skeleton="rows" renders purpose-shaped list-row placeholders', () => {
     const markup = renderToStaticMarkup(
-      <QueryView<string>
-        query={{ kind: "loading" }}
-        label="items"
-        skeleton="rows"
-      >
+      <QueryView<string> query={{ kind: "loading" }} label="items" skeleton="rows">
         {(data) => <div>{data}</div>}
       </QueryView>,
     );
@@ -86,11 +80,7 @@ describe("QueryView loading skeletons", () => {
 
   test('skeleton="detail" renders a header-plus-lines placeholder', () => {
     const markup = renderToStaticMarkup(
-      <QueryView<string>
-        query={{ kind: "loading" }}
-        label="item"
-        skeleton="detail"
-      >
+      <QueryView<string> query={{ kind: "loading" }} label="item" skeleton="detail">
         {(data) => <div>{data}</div>}
       </QueryView>,
     );
diff --git a/packages/api-query/src/query-view.tsx b/packages/api-query/src/query-view.tsx
index a257a03577..a9d7d8d067 100644
--- a/packages/api-query/src/query-view.tsx
+++ b/packages/api-query/src/query-view.tsx
@@ -40,11 +40,7 @@ export function DetailSkeleton() {
   );
 }
 
-function QuerySkeleton({
-  variant,
-}: {
-  readonly variant: QuerySkeletonVariant;
-}) {
+function QuerySkeleton({ variant }: { readonly variant: QuerySkeletonVariant }) {
   switch (variant) {
     case "rows":
       return <ListSkeleton />;
@@ -103,10 +99,7 @@ export function QueryView<T>({
         <EmptyState
           icon={<WarningCircle />}
           title={`Couldn't load ${label}`}
-          description={describeApiError(
-            { status: query.status },
-            `loading ${label}`,
-          )}
+          description={describeApiError({ status: query.status }, `loading ${label}`)}
           action={
             <Button variant="outline" onClick={query.retry}>
               Retry
diff --git a/packages/approvals/package.json b/packages/approvals/package.json
index 36133b0d7e..f484609a81 100644
--- a/packages/approvals/package.json
+++ b/packages/approvals/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/approvals",
+  "version": "0.0.1",
   "private": true,
   "description": "The grant-allowance gate that decides when a tenant's standing grants already authorize a tool call, plus the pure headline builder that names an approval for a human",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/approvals/src/allowance.test.ts b/packages/approvals/src/allowance.test.ts
index 37e10ed7af..7c0a28786d 100644
--- a/packages/approvals/src/allowance.test.ts
+++ b/packages/approvals/src/allowance.test.ts
@@ -43,16 +43,13 @@ const mergeAllowance: ToolAllowance = {
   classify: () => Promise.resolve({ readOnly: false }),
 };
 
-const registry = createToolAllowanceRegistry([
-  readDiffAllowance,
-  mergeAllowance,
-]);
+const registry = createToolAllowanceRegistry([readDiffAllowance, mergeAllowance]);
 
 describe("createToolAllowanceRegistry", () => {
   test("rejects duplicate tool annotations", () => {
-    expect(() =>
-      createToolAllowanceRegistry([readDiffAllowance, readDiffAllowance]),
-    ).toThrow(/duplicate allowance/);
+    expect(() => createToolAllowanceRegistry([readDiffAllowance, readDiffAllowance])).toThrow(
+      /duplicate allowance/,
+    );
   });
 });
 
@@ -141,10 +138,7 @@ describe("evaluateToolAllowance", () => {
 describe("withGrantAllowance", () => {
   type Registered = Parameters<ReturnType<typeof withGrantAllowance>>[0];
 
-  function gateHarness(overrides?: {
-    grants?: GrantRule[];
-    autoApproveResult?: boolean;
-  }) {
+  function gateHarness(overrides?: { grants?: GrantRule[]; autoApproveResult?: boolean }) {
     const calls = {
       base: [] as Registered[],
       autoApprove: [] as {
@@ -166,8 +160,7 @@ describe("withGrantAllowance", () => {
             approvalId: `apr_${correlationId}`,
             tenantId: TENANT,
           }),
-        listTenantGrants: () =>
-          Promise.resolve(overrides?.grants ?? [repoGrant()]),
+        listTenantGrants: () => Promise.resolve(overrides?.grants ?? [repoGrant()]),
         autoApprove: (args) => {
           calls.autoApprove.push(args);
           return Promise.resolve(overrides?.autoApproveResult ?? true);
diff --git a/packages/approvals/src/allowance.ts b/packages/approvals/src/allowance.ts
index adc271d506..877c013c2c 100644
--- a/packages/approvals/src/allowance.ts
+++ b/packages/approvals/src/allowance.ts
@@ -90,15 +90,11 @@ export async function evaluateToolAllowance(args: {
   grants: GrantRule[];
 }): Promise<AllowanceDecision> {
   const allowance = args.registry.get(args.toolName);
-  if (allowance === undefined)
-    return { outcome: "park", reason: "unclassified" };
+  if (allowance === undefined) return { outcome: "park", reason: "unclassified" };
 
   let classification: AllowanceClassification;
   try {
-    classification = await allowance.classify(
-      args.tenantId,
-      args.toolArguments,
-    );
+    classification = await allowance.classify(args.tenantId, args.toolArguments);
   } catch {
     return { outcome: "park", reason: "classification_failed" };
   }
@@ -133,9 +129,7 @@ export type RegisteredApprovalRef = {
 export type GrantAllowanceGateDeps = {
   registry: ToolAllowanceRegistry;
   /** The pending approval the registration just co-wrote, by correlation. */
-  findRegisteredApproval(
-    correlationId: string,
-  ): Promise<RegisteredApprovalRef | null>;
+  findRegisteredApproval(correlationId: string): Promise<RegisteredApprovalRef | null>;
   /** The tenant's live grant rows — role- and principal-scoped alike. */
   listTenantGrants(tenantId: string): Promise<GrantRule[]>;
   /**
@@ -185,9 +179,7 @@ export function withGrantAllowance<Args extends RegisterApprovalArgs>(
         grants: await deps.listTenantGrants(registered.tenantId),
       });
       if (decision.outcome !== "ride") {
-        deps.log(
-          `grant-allowance: ${args.approvalSnapshot.name} parked (${decision.reason})`,
-        );
+        deps.log(`grant-allowance: ${args.approvalSnapshot.name} parked (${decision.reason})`);
         return;
       }
       const resolved = await deps.autoApprove({
diff --git a/packages/approvals/src/headline.test.ts b/packages/approvals/src/headline.test.ts
index 46ad7e12f0..85a2a044d3 100644
--- a/packages/approvals/src/headline.test.ts
+++ b/packages/approvals/src/headline.test.ts
@@ -42,9 +42,7 @@ test("folds in the live call's title argument, when present, as the specific ask
 });
 
 test("ignores a blank or non-string title rather than rendering an empty quote", () => {
-  expect(headlineFor({ name: "send_email" }, { title: "   " })).toBe(
-    "send_email",
-  );
+  expect(headlineFor({ name: "send_email" }, { title: "   " })).toBe("send_email");
   expect(headlineFor({ name: "send_email" }, { title: 42 })).toBe("send_email");
 });
 
diff --git a/packages/approvals/src/headline.ts b/packages/approvals/src/headline.ts
index f94337e899..f41f47751c 100644
--- a/packages/approvals/src/headline.ts
+++ b/packages/approvals/src/headline.ts
@@ -42,15 +42,12 @@ function workflowDeployHeadline(toolArguments: object): string | undefined {
   const commitSha = stringField(toolArguments, "commitSha");
   if (commitSha === undefined) return undefined;
   const packageName =
-    stringField(toolArguments, "packageName") ??
-    stringField(toolArguments, "assetId");
+    stringField(toolArguments, "packageName") ?? stringField(toolArguments, "assetId");
   if (packageName === undefined) return undefined;
   const sha7 = commitSha.slice(0, 7);
   const pins = toolPackagePinsField(toolArguments, "toolPackagePins");
   const toolsText =
-    pins.length > 0
-      ? pins.map((pin) => `${pin.name}@${pin.version}`).join(", ")
-      : "none declared";
+    pins.length > 0 ? pins.map((pin) => `${pin.name}@${pin.version}`).join(", ") : "none declared";
   return `Deploy workflow ${packageName} @ ${sha7} — tools: ${toolsText}`;
 }
 
@@ -79,29 +76,20 @@ const TOOL_HEADLINE_RENDERERS: Readonly<
  * appended so the headline reflects what THIS approval is actually
  * about, not just which tool is asking.
  */
-export function headlineFor(
-  toolDefinition: unknown,
-  toolArguments: unknown,
-): string {
+export function headlineFor(toolDefinition: unknown, toolArguments: unknown): string {
   const toolName =
     typeof toolDefinition === "object" && toolDefinition !== null
       ? stringField(toolDefinition, "name")
       : undefined;
-  const renderer =
-    toolName !== undefined ? TOOL_HEADLINE_RENDERERS[toolName] : undefined;
-  if (
-    renderer !== undefined &&
-    typeof toolArguments === "object" &&
-    toolArguments !== null
-  ) {
+  const renderer = toolName !== undefined ? TOOL_HEADLINE_RENDERERS[toolName] : undefined;
+  if (renderer !== undefined && typeof toolArguments === "object" && toolArguments !== null) {
     const rendered = renderer(toolArguments);
     if (rendered !== undefined) return rendered;
   }
 
   const base =
     typeof toolDefinition === "object" && toolDefinition !== null
-      ? (stringField(toolDefinition, "description") ??
-        stringField(toolDefinition, "name"))
+      ? (stringField(toolDefinition, "description") ?? stringField(toolDefinition, "name"))
       : undefined;
   const headline = base ?? "Run a tool";
   const title =
diff --git a/packages/artifact-ui/package.json b/packages/artifact-ui/package.json
index 42322ccac1..0a5ed018a3 100644
--- a/packages/artifact-ui/package.json
+++ b/packages/artifact-ui/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/artifact-ui",
+  "version": "0.0.1",
   "private": true,
   "description": "The artifact library's domain seam: the ArtifactSummary type a Library page renders, plus the sort and filter rules every artifact surface shares",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "sideEffects": false,
@@ -16,10 +16,10 @@
     "test": "bun test"
   },
   "dependencies": {
-    "@corbits/react-ui": "github:corbitsdev/react-ui#3b122812a307ccb35be31386f7696020c5a84635",
-    "arktype": "catalog:",
     "@corbits/icons": "workspace:*",
+    "@corbits/react-ui": "github:corbitsdev/react-ui#3b122812a307ccb35be31386f7696020c5a84635",
     "@corbits/url-path": "workspace:*",
+    "arktype": "catalog:",
     "react": "^19.2.0"
   },
   "devDependencies": {
diff --git a/packages/artifact-ui/src/artifact-card.tsx b/packages/artifact-ui/src/artifact-card.tsx
index 87ef9ea6ad..80ee81f275 100644
--- a/packages/artifact-ui/src/artifact-card.tsx
+++ b/packages/artifact-ui/src/artifact-card.tsx
@@ -2,11 +2,7 @@
 // line (owner · source · size · updated). Pure presentational — the page
 // owns selection and preview.
 
-import {
-  Badge,
-  artifactKindLabel,
-  formatRelativeTime,
-} from "@corbits/react-ui";
+import { Badge, artifactKindLabel, formatRelativeTime } from "@corbits/react-ui";
 import type { ReactNode } from "react";
 
 import type { ArtifactSummary } from "./types";
@@ -42,10 +38,7 @@ function metaLine(
   if (meta?.sizeLabel !== undefined && meta.sizeLabel !== null) {
     parts.push(meta.sizeLabel);
   }
-  const when = formatRelativeTime(
-    artifact.updatedAt ?? artifact.createdAt,
-    now,
-  );
+  const when = formatRelativeTime(artifact.updatedAt ?? artifact.createdAt, now);
   if (when !== "") parts.push(when);
   return parts.join(" · ");
 }
@@ -78,18 +71,12 @@ export function ArtifactCard({
         </Badge>
         {trailing}
       </div>
-      <span className="truncate text-sm font-semibold leading-snug">
-        {artifact.title}
-      </span>
+      <span className="truncate text-sm font-semibold leading-snug">{artifact.title}</span>
       {snippet !== undefined && snippet !== null && snippet !== "" ? (
-        <span className="line-clamp-2 text-xs text-muted-foreground">
-          {snippet}
-        </span>
+        <span className="line-clamp-2 text-xs text-muted-foreground">{snippet}</span>
       ) : null}
       {line !== "" ? (
-        <span className="truncate text-[0.7rem] text-muted-foreground">
-          {line}
-        </span>
+        <span className="truncate text-[0.7rem] text-muted-foreground">{line}</span>
       ) : null}
     </button>
   );
diff --git a/packages/artifact-ui/src/artifact-renderer.tsx b/packages/artifact-ui/src/artifact-renderer.tsx
index 379eb47f48..256dd3c4e2 100644
--- a/packages/artifact-ui/src/artifact-renderer.tsx
+++ b/packages/artifact-ui/src/artifact-renderer.tsx
@@ -170,9 +170,7 @@ function PdfRenderer({
   return (
     <div className="rounded-[var(--ui-radius-md)] border border-border bg-card p-6 shadow-sm">
       <h3 className="mb-3 text-sm font-semibold">{title}</h3>
-      <p className="whitespace-pre-wrap text-sm leading-relaxed text-foreground">
-        {content}
-      </p>
+      <p className="whitespace-pre-wrap text-sm leading-relaxed text-foreground">{content}</p>
     </div>
   );
 }
@@ -211,11 +209,7 @@ function EmptyContent({ message }: { readonly message: string }) {
   return <p className="text-sm text-muted-foreground">{message}</p>;
 }
 
-function UnsupportedRenderer({
-  unavailableReason,
-}: {
-  readonly unavailableReason?: string;
-}) {
+function UnsupportedRenderer({ unavailableReason }: { readonly unavailableReason?: string }) {
   return (
     <div className="flex flex-col items-center gap-2 py-8 text-center text-sm text-muted-foreground">
       <FileDashed className="size-6" aria-hidden="true" />
@@ -234,19 +228,9 @@ export function ArtifactRenderer({
 }: ArtifactRenderProps) {
   switch (rendererKind) {
     case "doc":
-      return (
-        <DocRenderer
-          content={content}
-          contentUnavailable={contentUnavailable ?? false}
-        />
-      );
+      return <DocRenderer content={content} contentUnavailable={contentUnavailable ?? false} />;
     case "sheet":
-      return (
-        <SheetRenderer
-          content={content}
-          contentUnavailable={contentUnavailable ?? false}
-        />
-      );
+      return <SheetRenderer content={content} contentUnavailable={contentUnavailable ?? false} />;
     case "pdf":
       return (
         <PdfRenderer
@@ -257,16 +241,11 @@ export function ArtifactRenderer({
       );
     case "html":
       return (
-        <HtmlPreviewRenderer
-          title={title}
-          {...(previewSrc !== undefined ? { previewSrc } : {})}
-        />
+        <HtmlPreviewRenderer title={title} {...(previewSrc !== undefined ? { previewSrc } : {})} />
       );
     case "unsupported":
       return (
-        <UnsupportedRenderer
-          {...(unavailableReason !== undefined ? { unavailableReason } : {})}
-        />
+        <UnsupportedRenderer {...(unavailableReason !== undefined ? { unavailableReason } : {})} />
       );
   }
 }
diff --git a/packages/artifact-ui/src/kind-filter.test.ts b/packages/artifact-ui/src/kind-filter.test.ts
index 7bc0a60c54..e00ab33177 100644
--- a/packages/artifact-ui/src/kind-filter.test.ts
+++ b/packages/artifact-ui/src/kind-filter.test.ts
@@ -25,90 +25,53 @@ describe("libraryKindSegmentFromPath", () => {
 
 describe("artifactMatchesLibraryKindSegment", () => {
   test("empty segment matches everything", () => {
-    expect(
-      artifactMatchesLibraryKindSegment({ kind: "routine", title: "r" }, ""),
-    ).toBe(true);
+    expect(artifactMatchesLibraryKindSegment({ kind: "routine", title: "r" }, "")).toBe(true);
   });
 
   test("document segment matches kind document and file with doc-ish extension", () => {
     expect(
-      artifactMatchesLibraryKindSegment(
-        { kind: "document", title: "brief" },
-        "document",
-      ),
+      artifactMatchesLibraryKindSegment({ kind: "document", title: "brief" }, "document"),
     ).toBe(true);
-    expect(
-      artifactMatchesLibraryKindSegment(
-        { kind: "file", title: "notes.md" },
-        "document",
-      ),
-    ).toBe(true);
-    expect(
-      artifactMatchesLibraryKindSegment(
-        { kind: "file", title: "data.csv" },
-        "document",
-      ),
-    ).toBe(false);
+    expect(artifactMatchesLibraryKindSegment({ kind: "file", title: "notes.md" }, "document")).toBe(
+      true,
+    );
+    expect(artifactMatchesLibraryKindSegment({ kind: "file", title: "data.csv" }, "document")).toBe(
+      false,
+    );
   });
 
   test("sheet segment matches csv-export, sheet, and spreadsheet-ish files", () => {
-    expect(
-      artifactMatchesLibraryKindSegment(
-        { kind: "csv-export", title: "q1" },
-        "sheet",
-      ),
-    ).toBe(true);
-    expect(
-      artifactMatchesLibraryKindSegment(
-        { kind: "file", title: "budget.xls" },
-        "sheet",
-      ),
-    ).toBe(true);
+    expect(artifactMatchesLibraryKindSegment({ kind: "csv-export", title: "q1" }, "sheet")).toBe(
+      true,
+    );
+    expect(artifactMatchesLibraryKindSegment({ kind: "file", title: "budget.xls" }, "sheet")).toBe(
+      true,
+    );
   });
 
   test("pdf segment matches kind pdf and file with .pdf extension", () => {
-    expect(
-      artifactMatchesLibraryKindSegment(
-        { kind: "pdf", title: "contract" },
-        "pdf",
-      ),
-    ).toBe(true);
-    expect(
-      artifactMatchesLibraryKindSegment(
-        { kind: "file", title: "contract.pdf" },
-        "pdf",
-      ),
-    ).toBe(true);
-    expect(
-      artifactMatchesLibraryKindSegment(
-        { kind: "file", title: "contract.docx" },
-        "pdf",
-      ),
-    ).toBe(false);
+    expect(artifactMatchesLibraryKindSegment({ kind: "pdf", title: "contract" }, "pdf")).toBe(true);
+    expect(artifactMatchesLibraryKindSegment({ kind: "file", title: "contract.pdf" }, "pdf")).toBe(
+      true,
+    );
+    expect(artifactMatchesLibraryKindSegment({ kind: "file", title: "contract.docx" }, "pdf")).toBe(
+      false,
+    );
   });
 
   test("routine segment matches only kind routine", () => {
-    expect(
-      artifactMatchesLibraryKindSegment(
-        { kind: "routine", title: "digest" },
-        "routine",
-      ),
-    ).toBe(true);
-    expect(
-      artifactMatchesLibraryKindSegment(
-        { kind: "file", title: "digest.md" },
-        "routine",
-      ),
-    ).toBe(false);
+    expect(artifactMatchesLibraryKindSegment({ kind: "routine", title: "digest" }, "routine")).toBe(
+      true,
+    );
+    expect(artifactMatchesLibraryKindSegment({ kind: "file", title: "digest.md" }, "routine")).toBe(
+      false,
+    );
   });
 
   test("unknown segment matches nothing", () => {
-    expect(
-      artifactMatchesLibraryKindSegment(
-        { kind: "document", title: "brief" },
-        "unknown",
-      ),
-    ).toBe(false);
+    expect(artifactMatchesLibraryKindSegment({ kind: "document", title: "brief" }, "unknown")).toBe(
+      false,
+    );
   });
 });
 
diff --git a/packages/artifact-ui/src/kind-filter.ts b/packages/artifact-ui/src/kind-filter.ts
index ac1c67f0dc..1730c369fa 100644
--- a/packages/artifact-ui/src/kind-filter.ts
+++ b/packages/artifact-ui/src/kind-filter.ts
@@ -16,12 +16,7 @@ import type { ArtifactSummary } from "./types";
 const LIBRARY_PATH = "/files";
 
 /** Kind nav segments in display order, excluding the implicit "all". */
-export const LIBRARY_KIND_SEGMENTS = [
-  "document",
-  "sheet",
-  "pdf",
-  "routine",
-] as const;
+export const LIBRARY_KIND_SEGMENTS = ["document", "sheet", "pdf", "routine"] as const;
 
 export type LibraryKindSegment = (typeof LIBRARY_KIND_SEGMENTS)[number];
 
@@ -76,9 +71,7 @@ export function artifactMatchesLibraryKindSegment(
   switch (segment) {
     case "document":
       if (kind === "document") return true;
-      return (
-        kind === "file" && (ext === "doc" || ext === "txt" || ext === "md")
-      );
+      return kind === "file" && (ext === "doc" || ext === "txt" || ext === "md");
     case "sheet":
       if (kind === "csv-export" || kind === "sheet") return true;
       return kind === "file" && (ext === "xls" || ext === "csv");
diff --git a/packages/artifact-ui/src/provenance.test.ts b/packages/artifact-ui/src/provenance.test.ts
index e5a02d4d99..3f1bfb11ec 100644
--- a/packages/artifact-ui/src/provenance.test.ts
+++ b/packages/artifact-ui/src/provenance.test.ts
@@ -4,26 +4,18 @@ import { workflowRunIdFromSource } from "./provenance";
 
 describe("workflowRunIdFromSource", () => {
   test("returns the run id for a workflow-origin source", () => {
-    expect(
-      workflowRunIdFromSource({ origin: "workflow", runId: "run_1" }),
-    ).toBe("run_1");
+    expect(workflowRunIdFromSource({ origin: "workflow", runId: "run_1" })).toBe("run_1");
   });
 
   test("is null for a non-workflow origin", () => {
     expect(workflowRunIdFromSource({ origin: "manual" })).toBeNull();
-    expect(
-      workflowRunIdFromSource({ origin: "agent", runId: "run_1" }),
-    ).toBeNull();
+    expect(workflowRunIdFromSource({ origin: "agent", runId: "run_1" })).toBeNull();
   });
 
   test("is null when workflow origin has no usable runId", () => {
     expect(workflowRunIdFromSource({ origin: "workflow" })).toBeNull();
-    expect(
-      workflowRunIdFromSource({ origin: "workflow", runId: "" }),
-    ).toBeNull();
-    expect(
-      workflowRunIdFromSource({ origin: "workflow", runId: 42 }),
-    ).toBeNull();
+    expect(workflowRunIdFromSource({ origin: "workflow", runId: "" })).toBeNull();
+    expect(workflowRunIdFromSource({ origin: "workflow", runId: 42 })).toBeNull();
   });
 
   test("is null for a missing source", () => {
diff --git a/packages/artifact-ui/src/renderer-kind.test.ts b/packages/artifact-ui/src/renderer-kind.test.ts
index 4ae4bc285f..f41af7fa46 100644
--- a/packages/artifact-ui/src/renderer-kind.test.ts
+++ b/packages/artifact-ui/src/renderer-kind.test.ts
@@ -8,89 +8,59 @@ import {
 
 describe("resolveArtifactRendererKind", () => {
   test("kind document renders as doc", () => {
-    expect(
-      resolveArtifactRendererKind({ kind: "document", title: "Brief" }),
-    ).toBe("doc");
+    expect(resolveArtifactRendererKind({ kind: "document", title: "Brief" })).toBe("doc");
   });
 
   test("kind file with a doc-ish extension renders as doc", () => {
-    expect(
-      resolveArtifactRendererKind({ kind: "file", title: "notes.md" }),
-    ).toBe("doc");
+    expect(resolveArtifactRendererKind({ kind: "file", title: "notes.md" })).toBe("doc");
   });
 
   test("kind sheet or csv-export renders as sheet", () => {
-    expect(resolveArtifactRendererKind({ kind: "sheet", title: "Q1" })).toBe(
-      "sheet",
-    );
-    expect(
-      resolveArtifactRendererKind({ kind: "csv-export", title: "Q1" }),
-    ).toBe("sheet");
+    expect(resolveArtifactRendererKind({ kind: "sheet", title: "Q1" })).toBe("sheet");
+    expect(resolveArtifactRendererKind({ kind: "csv-export", title: "Q1" })).toBe("sheet");
   });
 
   test("kind file with a spreadsheet extension renders as sheet", () => {
-    expect(
-      resolveArtifactRendererKind({ kind: "file", title: "budget.csv" }),
-    ).toBe("sheet");
+    expect(resolveArtifactRendererKind({ kind: "file", title: "budget.csv" })).toBe("sheet");
   });
 
   test("kind pdf, or file with .pdf extension, renders as pdf", () => {
-    expect(
-      resolveArtifactRendererKind({ kind: "pdf", title: "contract" }),
-    ).toBe("pdf");
-    expect(
-      resolveArtifactRendererKind({ kind: "file", title: "contract.pdf" }),
-    ).toBe("pdf");
+    expect(resolveArtifactRendererKind({ kind: "pdf", title: "contract" })).toBe("pdf");
+    expect(resolveArtifactRendererKind({ kind: "file", title: "contract.pdf" })).toBe("pdf");
   });
 
   test("kind file with .html extension renders as html", () => {
-    expect(
-      resolveArtifactRendererKind({ kind: "file", title: "landing.html" }),
-    ).toBe("html");
+    expect(resolveArtifactRendererKind({ kind: "file", title: "landing.html" })).toBe("html");
   });
 
   test("routine and unrecognized kinds fall back to unsupported", () => {
-    expect(
-      resolveArtifactRendererKind({ kind: "routine", title: "Weekly GTM" }),
-    ).toBe("unsupported");
-    expect(
-      resolveArtifactRendererKind({ kind: "image", title: "logo.png" }),
-    ).toBe("unsupported");
+    expect(resolveArtifactRendererKind({ kind: "routine", title: "Weekly GTM" })).toBe(
+      "unsupported",
+    );
+    expect(resolveArtifactRendererKind({ kind: "image", title: "logo.png" })).toBe("unsupported");
   });
 });
 
 describe("resolveRendererKindFromMediaType", () => {
   test("text/markdown and text/plain render as doc", () => {
-    expect(resolveRendererKindFromMediaType("text/markdown", "notes.md")).toBe(
-      "doc",
-    );
-    expect(resolveRendererKindFromMediaType("text/plain", "notes.txt")).toBe(
-      "doc",
-    );
+    expect(resolveRendererKindFromMediaType("text/markdown", "notes.md")).toBe("doc");
+    expect(resolveRendererKindFromMediaType("text/plain", "notes.txt")).toBe("doc");
   });
 
   test("text/csv renders as sheet", () => {
-    expect(resolveRendererKindFromMediaType("text/csv", "q1.csv")).toBe(
-      "sheet",
-    );
+    expect(resolveRendererKindFromMediaType("text/csv", "q1.csv")).toBe("sheet");
   });
 
   test("application/pdf renders as pdf", () => {
-    expect(
-      resolveRendererKindFromMediaType("application/pdf", "contract.pdf"),
-    ).toBe("pdf");
+    expect(resolveRendererKindFromMediaType("application/pdf", "contract.pdf")).toBe("pdf");
   });
 
   test("falls back to filename extension when the MIME type is generic", () => {
-    expect(
-      resolveRendererKindFromMediaType("application/octet-stream", "notes.md"),
-    ).toBe("doc");
+    expect(resolveRendererKindFromMediaType("application/octet-stream", "notes.md")).toBe("doc");
   });
 
   test("an unrecognized MIME type and extension is unsupported", () => {
-    expect(resolveRendererKindFromMediaType("image/png", "logo.png")).toBe(
-      "unsupported",
-    );
+    expect(resolveRendererKindFromMediaType("image/png", "logo.png")).toBe("unsupported");
   });
 });
 
diff --git a/packages/artifact-ui/src/renderer-kind.ts b/packages/artifact-ui/src/renderer-kind.ts
index 709466e495..985b3aec50 100644
--- a/packages/artifact-ui/src/renderer-kind.ts
+++ b/packages/artifact-ui/src/renderer-kind.ts
@@ -6,13 +6,7 @@
 
 import { titleExtension } from "./title-extension";
 
-export const ARTIFACT_RENDERER_KINDS = [
-  "doc",
-  "sheet",
-  "pdf",
-  "html",
-  "unsupported",
-] as const;
+export const ARTIFACT_RENDERER_KINDS = ["doc", "sheet", "pdf", "html", "unsupported"] as const;
 
 export type ArtifactRendererKind = (typeof ARTIFACT_RENDERER_KINDS)[number];
 
@@ -44,11 +38,7 @@ export function resolveArtifactRendererKind(artifact: {
   return "unsupported";
 }
 
-const DOC_MEDIA_TYPES = new Set([
-  "text/plain",
-  "text/markdown",
-  "application/json",
-]);
+const DOC_MEDIA_TYPES = new Set(["text/plain", "text/markdown", "application/json"]);
 const SHEET_MEDIA_TYPES = new Set([
   "text/csv",
   "application/vnd.ms-excel",
@@ -86,12 +76,8 @@ export function resolveRendererKindFromMediaType(
 export function isTextDecodableMediaType(mediaType: string): boolean {
   const mime = mediaType.trim().toLowerCase();
   if (mime === "application/vnd.ms-excel") return false;
-  if (
-    mime === "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
-  ) {
+  if (mime === "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet") {
     return false;
   }
-  return (
-    DOC_MEDIA_TYPES.has(mime) || mime === "text/csv" || mime.startsWith("text/")
-  );
+  return DOC_MEDIA_TYPES.has(mime) || mime === "text/csv" || mime.startsWith("text/");
 }
diff --git a/packages/artifact-ui/src/save-state.test.ts b/packages/artifact-ui/src/save-state.test.ts
index 8dedd7761c..7a7028aec4 100644
--- a/packages/artifact-ui/src/save-state.test.ts
+++ b/packages/artifact-ui/src/save-state.test.ts
@@ -29,9 +29,9 @@ describe("formatSaveStateLine", () => {
   });
 
   test("saved combines the relative-time label with the version, never claiming a version that wasn't confirmed", () => {
-    expect(
-      formatSaveStateLine({ kind: "saved", version: 12, savedAt: 0 }, 30_000),
-    ).toBe("Saved just now · v12");
+    expect(formatSaveStateLine({ kind: "saved", version: 12, savedAt: 0 }, 30_000)).toBe(
+      "Saved just now · v12",
+    );
   });
 
   test("unsaved is honest about not having confirmed a write yet", () => {
diff --git a/packages/artifact-ui/src/save-state.ts b/packages/artifact-ui/src/save-state.ts
index 2c191a8c93..127ea3785f 100644
--- a/packages/artifact-ui/src/save-state.ts
+++ b/packages/artifact-ui/src/save-state.ts
@@ -33,10 +33,7 @@ export function formatSavedLabel(savedAt: number, now: number): string {
 /** The one line the canvas artifact pane renders under an editable text
  * artifact — empty for a read-only viewer, since there is nothing to
  * report about a save state they can't affect. */
-export function formatSaveStateLine(
-  state: ArtifactSaveState,
-  now: number,
-): string {
+export function formatSaveStateLine(state: ArtifactSaveState, now: number): string {
   switch (state.kind) {
     case "read-only":
       return "";
diff --git a/packages/artifact-ui/src/sort-filter.ts b/packages/artifact-ui/src/sort-filter.ts
index 7cd299dc16..af51708d1e 100644
--- a/packages/artifact-ui/src/sort-filter.ts
+++ b/packages/artifact-ui/src/sort-filter.ts
@@ -25,7 +25,6 @@ export function filterArtifacts(
   if (needle === "") return [...artifacts];
   return artifacts.filter(
     (artifact) =>
-      artifact.title.toLowerCase().includes(needle) ||
-      artifact.kind.toLowerCase().includes(needle),
+      artifact.title.toLowerCase().includes(needle) || artifact.kind.toLowerCase().includes(needle),
   );
 }
diff --git a/packages/artifact-ui/test/artifact-card.test.tsx b/packages/artifact-ui/test/artifact-card.test.tsx
index 20f69c0cfa..a0ab265b06 100644
--- a/packages/artifact-ui/test/artifact-card.test.tsx
+++ b/packages/artifact-ui/test/artifact-card.test.tsx
@@ -8,9 +8,7 @@ import { renderToStaticMarkup } from "react-dom/server";
 import { ArtifactCard } from "../src/artifact-card";
 import type { ArtifactSummary } from "../src/types";
 
-function artifact(
-  overrides: Partial<ArtifactSummary> & { readonly id: string },
-): ArtifactSummary {
+function artifact(overrides: Partial<ArtifactSummary> & { readonly id: string }): ArtifactSummary {
   return {
     title: "Untitled",
     kind: "document",
diff --git a/packages/artifact-ui/test/artifact-renderer.test.tsx b/packages/artifact-ui/test/artifact-renderer.test.tsx
index 4a654992e9..2cb2921804 100644
--- a/packages/artifact-ui/test/artifact-renderer.test.tsx
+++ b/packages/artifact-ui/test/artifact-renderer.test.tsx
@@ -12,10 +12,7 @@ import { ArtifactRenderer } from "../src/artifact-renderer";
 
 function oversizedCsv(rowCount: number): string {
   const header = "id,name\n";
-  const rows = Array.from(
-    { length: rowCount },
-    (_, index) => `${index},row-${index}`,
-  ).join("\n");
+  const rows = Array.from({ length: rowCount }, (_, index) => `${index},row-${index}`).join("\n");
   return header + rows;
 }
 
@@ -25,11 +22,7 @@ describe("ArtifactRenderer sheet cutover", () => {
     const content = oversizedCsv(rowCount);
 
     const markup = renderToStaticMarkup(
-      <ArtifactRenderer
-        rendererKind="sheet"
-        title="Big sheet"
-        content={content}
-      />,
+      <ArtifactRenderer rendererKind="sheet" title="Big sheet" content={content} />,
     );
 
     const renderedDataRows = markup.match(/row-\d+/g)?.length ?? 0;
@@ -61,46 +54,25 @@ describe("ArtifactRenderer sheet cutover", () => {
 describe("ArtifactRenderer contentUnavailable — stored-but-unreadable file", () => {
   test("doc renderer says the file couldn't be read, not that it's empty", () => {
     const markup = renderToStaticMarkup(
-      <ArtifactRenderer
-        rendererKind="doc"
-        title="notes.docx"
-        content=""
-        contentUnavailable
-      />,
-    );
-    expect(markup).toContain(
-      "We couldn&#x27;t read this file&#x27;s contents for preview.",
+      <ArtifactRenderer rendererKind="doc" title="notes.docx" content="" contentUnavailable />,
     );
+    expect(markup).toContain("We couldn&#x27;t read this file&#x27;s contents for preview.");
     expect(markup).not.toContain("This document has no content yet.");
   });
 
   test("sheet renderer says the file couldn't be read, not that it's empty", () => {
     const markup = renderToStaticMarkup(
-      <ArtifactRenderer
-        rendererKind="sheet"
-        title="budget.xlsx"
-        content=""
-        contentUnavailable
-      />,
-    );
-    expect(markup).toContain(
-      "We couldn&#x27;t read this file&#x27;s contents for preview.",
+      <ArtifactRenderer rendererKind="sheet" title="budget.xlsx" content="" contentUnavailable />,
     );
+    expect(markup).toContain("We couldn&#x27;t read this file&#x27;s contents for preview.");
     expect(markup).not.toContain("This sheet has no rows yet.");
   });
 
   test("pdf renderer says the file couldn't be read, not that no text is stored", () => {
     const markup = renderToStaticMarkup(
-      <ArtifactRenderer
-        rendererKind="pdf"
-        title="contract.pdf"
-        content=""
-        contentUnavailable
-      />,
-    );
-    expect(markup).toContain(
-      "We couldn&#x27;t read this file&#x27;s contents for preview.",
+      <ArtifactRenderer rendererKind="pdf" title="contract.pdf" content="" contentUnavailable />,
     );
+    expect(markup).toContain("We couldn&#x27;t read this file&#x27;s contents for preview.");
     expect(markup).not.toContain("No extracted text is stored");
   });
 
@@ -132,8 +104,6 @@ describe("ArtifactRenderer html preview", () => {
       <ArtifactRenderer rendererKind="html" title="Landing page" content="" />,
     );
     expect(markup).not.toContain("<iframe");
-    expect(markup).toContain(
-      "No sandboxed preview is available for this HTML artifact yet.",
-    );
+    expect(markup).toContain("No sandboxed preview is available for this HTML artifact yet.");
   });
 });
diff --git a/packages/artifact-ui/test/artifacts.test.ts b/packages/artifact-ui/test/artifacts.test.ts
index 5f87267095..3fc4d11fd6 100644
--- a/packages/artifact-ui/test/artifacts.test.ts
+++ b/packages/artifact-ui/test/artifacts.test.ts
@@ -6,9 +6,7 @@ import { describe, expect, test } from "bun:test";
 
 import { ArtifactSummary, filterArtifacts, sortArtifacts } from "../src/index";
 
-function artifact(
-  overrides: Partial<ArtifactSummary> & { readonly id: string },
-): ArtifactSummary {
+function artifact(overrides: Partial<ArtifactSummary> & { readonly id: string }): ArtifactSummary {
   return {
     title: "Untitled",
     kind: "document",
@@ -32,9 +30,7 @@ describe("ArtifactSummary", () => {
 
   test("rejects a row missing a required field", () => {
     const parsed = ArtifactSummary({ id: "art_1" });
-    expect(
-      parsed instanceof Error || "id" in Object(parsed) === false,
-    ).toBeTruthy();
+    expect(parsed instanceof Error || "id" in Object(parsed) === false).toBeTruthy();
   });
 });
 
@@ -43,17 +39,11 @@ describe("sortArtifacts", () => {
   const newer = artifact({ id: "b", createdAt: "2026-02-01T00:00:00.000Z" });
 
   test("newest first by default ordering", () => {
-    expect(sortArtifacts([older, newer], "newest").map((a) => a.id)).toEqual([
-      "b",
-      "a",
-    ]);
+    expect(sortArtifacts([older, newer], "newest").map((a) => a.id)).toEqual(["b", "a"]);
   });
 
   test("oldest first when asked", () => {
-    expect(sortArtifacts([newer, older], "oldest").map((a) => a.id)).toEqual([
-      "a",
-      "b",
-    ]);
+    expect(sortArtifacts([newer, older], "oldest").map((a) => a.id)).toEqual(["a", "b"]);
   });
 
   test("does not mutate the input array", () => {
@@ -72,15 +62,11 @@ describe("filterArtifacts", () => {
   });
 
   test("matches on title, case-insensitively", () => {
-    expect(filterArtifacts([report, csv], "q3").map((a) => a.id)).toEqual([
-      "a",
-    ]);
+    expect(filterArtifacts([report, csv], "q3").map((a) => a.id)).toEqual(["a"]);
   });
 
   test("matches on kind too", () => {
-    expect(filterArtifacts([report, csv], "csv").map((a) => a.id)).toEqual([
-      "b",
-    ]);
+    expect(filterArtifacts([report, csv], "csv").map((a) => a.id)).toEqual(["b"]);
   });
 
   test("no match empties the result rather than falling back to all", () => {
diff --git a/packages/bench-ui/package.json b/packages/bench-ui/package.json
index e35f67f6fd..bc0fb36b70 100644
--- a/packages/bench-ui/package.json
+++ b/packages/bench-ui/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/bench-ui",
+  "version": "0.0.1",
   "private": true,
   "description": "Bench tenancy helpers: raw-identifier guard and shared tenancy contracts over Interchange's native tenant model",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/bench-ui/src/tenancy-contracts.test.ts b/packages/bench-ui/src/tenancy-contracts.test.ts
index 5e8a4f8834..e565011f49 100644
--- a/packages/bench-ui/src/tenancy-contracts.test.ts
+++ b/packages/bench-ui/src/tenancy-contracts.test.ts
@@ -10,9 +10,7 @@ import {
   type TenantParentLookup,
 } from "./tenancy-contracts";
 
-function memoryLookup(
-  parents: Record<string, string | null>,
-): TenantParentLookup {
+function memoryLookup(parents: Record<string, string | null>): TenantParentLookup {
   return {
     async getParentId(id) {
       if (!Object.prototype.hasOwnProperty.call(parents, id)) return null;
@@ -109,8 +107,6 @@ describe("canShareWorkbenchWithinParent", () => {
 
   test("child and parent can share", async () => {
     const lookup = memoryLookup({ root: null, child: "root" });
-    expect(await canShareWorkbenchWithinParent("child", "root", lookup)).toBe(
-      true,
-    );
+    expect(await canShareWorkbenchWithinParent("child", "root", lookup)).toBe(true);
   });
 });
diff --git a/packages/capability-tools/package.json b/packages/capability-tools/package.json
index 89e5126b59..3f30af3002 100644
--- a/packages/capability-tools/package.json
+++ b/packages/capability-tools/package.json
@@ -1,21 +1,21 @@
 {
   "name": "@corbits/capability-tools",
+  "version": "0.0.7",
   "description": "The request_capability tool as an @intx/agent tool bundle (CL-6084): an agent asks in-chat for a tool package, skill, or model it doesn't have, gated behind Interchange's native per-invocation approval, and — once approved — calls the sanctioned workflow-run capabilities surface with the run's own bearer token, never a model-supplied identity",
-  "version": "0.0.6",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "packages/capability-tools"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "packages/capability-tools"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -27,12 +27,12 @@
   "dependencies": {
     "arktype": "catalog:"
   },
-  "peerDependencies": {
-    "@intx/agent": "0.3.0",
-    "@intx/types": "0.3.0"
-  },
   "devDependencies": {
     "@types/bun": "catalog:",
     "typescript": "catalog:"
+  },
+  "peerDependencies": {
+    "@intx/agent": "0.3.0",
+    "@intx/types": "0.3.0"
   }
 }
diff --git a/packages/capability-tools/src/client.test.ts b/packages/capability-tools/src/client.test.ts
index d512ced3b8..2cfa4e3da2 100644
--- a/packages/capability-tools/src/client.test.ts
+++ b/packages/capability-tools/src/client.test.ts
@@ -38,9 +38,7 @@ test("addCapability posts to the definition's workflow-run capabilities endpoint
     name: "@corbits/github-tools",
   });
 
-  expect(seenUrl).toBe(
-    "https://hub.example.com/api/workflow-capabilities/def_1/capabilities",
-  );
+  expect(seenUrl).toBe("https://hub.example.com/api/workflow-capabilities/def_1/capabilities");
   expect(seenHeaders?.["authorization"]).toBe("Bearer sc-token");
   expect(seenHeaders?.["x-workflow-run-address"]).toBe("run_1@workflow");
   expect(seenBody).toEqual({
@@ -89,9 +87,7 @@ test("addCapability throws an honest error on a non-400 HTTP failure, never fabr
 
 test("addCapability throws on a response that doesn't match the expected shape", async () => {
   const fetchImpl = (async () =>
-    new Response(
-      JSON.stringify({ nonsense: true }),
-    )) as unknown as typeof fetch;
+    new Response(JSON.stringify({ nonsense: true }))) as unknown as typeof fetch;
 
   await expect(
     addCapability(testConfig(fetchImpl), {
@@ -103,9 +99,7 @@ test("addCapability throws on a response that doesn't match the expected shape",
 
 test("fetchCapabilityInventory flattens the inventory to plain name arrays", async () => {
   const fetchImpl = (async (url: string | URL) => {
-    expect(String(url)).toBe(
-      "https://hub.example.com/api/workflow-capabilities/inventory",
-    );
+    expect(String(url)).toBe("https://hub.example.com/api/workflow-capabilities/inventory");
     return new Response(
       JSON.stringify({
         toolPackages: [{ name: "@corbits/memory-tools" }],
diff --git a/packages/capability-tools/src/client.ts b/packages/capability-tools/src/client.ts
index 7b00092191..024648e34d 100644
--- a/packages/capability-tools/src/client.ts
+++ b/packages/capability-tools/src/client.ts
@@ -109,16 +109,12 @@ export async function addCapability(
     throw new CapabilityOutOfInventoryError(message);
   }
   if (!response.ok) {
-    throw new Error(
-      `Requesting a capability failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`Requesting a capability failed: ${response.status} ${response.statusText}`);
   }
   const body: unknown = await response.json();
   const parsed = AddedCapabilitiesResponse(body);
   if (parsed instanceof type.errors) {
-    throw new Error(
-      `Capability response did not match the expected shape: ${parsed.summary}`,
-    );
+    throw new Error(`Capability response did not match the expected shape: ${parsed.summary}`);
   }
   return parsed;
 }
diff --git a/packages/capability-tools/src/index.ts b/packages/capability-tools/src/index.ts
index 327c294cde..cefdd2e721 100644
--- a/packages/capability-tools/src/index.ts
+++ b/packages/capability-tools/src/index.ts
@@ -7,8 +7,4 @@ export {
   type CapabilityInventorySnapshot,
   type CapabilityToolClientConfig,
 } from "./client";
-export {
-  capabilityTools,
-  REQUEST_CAPABILITY_TOOL,
-  type WorkflowCapabilityEnv,
-} from "./tool";
+export { capabilityTools, REQUEST_CAPABILITY_TOOL, type WorkflowCapabilityEnv } from "./tool";
diff --git a/packages/capability-tools/src/run-bearer.ts b/packages/capability-tools/src/run-bearer.ts
index 897d14f1cf..7a5800f123 100644
--- a/packages/capability-tools/src/run-bearer.ts
+++ b/packages/capability-tools/src/run-bearer.ts
@@ -17,9 +17,7 @@ export interface RunBearerClientConfig {
 
 /** The two headers every run-authenticated route resolves tenant and
  * principal from — identity never rides in a request body. */
-export function runBearerHeaders(
-  config: RunBearerClientConfig,
-): Record<string, string> {
+export function runBearerHeaders(config: RunBearerClientConfig): Record<string, string> {
   return {
     authorization: `Bearer ${config.sidecarToken}`,
     "x-workflow-run-address": config.address,
diff --git a/packages/capability-tools/src/tool.test.ts b/packages/capability-tools/src/tool.test.ts
index 9289a5484d..25a8d65ba2 100644
--- a/packages/capability-tools/src/tool.test.ts
+++ b/packages/capability-tools/src/tool.test.ts
@@ -1,11 +1,7 @@
 import { expect, test } from "bun:test";
 import type { ToolCall } from "@intx/types/runtime";
 
-import {
-  capabilityTools,
-  REQUEST_CAPABILITY_TOOL,
-  type WorkflowCapabilityEnv,
-} from "./tool";
+import { capabilityTools, REQUEST_CAPABILITY_TOOL, type WorkflowCapabilityEnv } from "./tool";
 
 function testEnv(): WorkflowCapabilityEnv {
   return {
@@ -22,9 +18,7 @@ function callFor(args: Record<string, unknown>): ToolCall {
 
 test("declares exactly the request_capability tool", () => {
   const bundle = capabilityTools(testEnv());
-  expect(bundle.definitions.map((d) => d.name)).toEqual([
-    REQUEST_CAPABILITY_TOOL,
-  ]);
+  expect(bundle.definitions.map((d) => d.name)).toEqual([REQUEST_CAPABILITY_TOOL]);
 });
 
 test("requires the sanctioned workflow-capability env keys, including the calling agent's own definitionId", () => {
@@ -37,9 +31,7 @@ test("requires the sanctioned workflow-capability env keys, including the callin
 });
 
 test("declares approval: \"ask\" — Interchange's native per-invocation gate — so a human must approve before this bundle's run() ever executes", () => {
-  expect(capabilityTools.definitions).toEqual([
-    { name: REQUEST_CAPABILITY_TOOL, approval: "ask" },
-  ]);
+  expect(capabilityTools.definitions).toEqual([{ name: REQUEST_CAPABILITY_TOOL, approval: "ask" }]);
 });
 
 test("the tool's input schema requires kind, name, and why, and offers an optional title for the approval card", () => {
@@ -101,13 +93,9 @@ test("on approval, calls the capabilities route with the calling agent's own def
       }),
       new AbortController().signal,
     );
-    expect(seenUrl).toBe(
-      "https://hub.example.com/api/workflow-capabilities/def_1/capabilities",
-    );
+    expect(seenUrl).toBe("https://hub.example.com/api/workflow-capabilities/def_1/capabilities");
     expect(result.isError).toBeFalsy();
-    expect(result.content).toBe(
-      "Added @corbits/github-tools — I can use it from my next reply.",
-    );
+    expect(result.content).toBe("Added @corbits/github-tools — I can use it from my next reply.");
   } finally {
     globalThis.fetch = originalFetch;
   }
@@ -156,9 +144,7 @@ test("an out-of-inventory request reports what's actually available, never a fab
         { status: 400 },
       );
     }
-    expect(String(url)).toBe(
-      "https://hub.example.com/api/workflow-capabilities/inventory",
-    );
+    expect(String(url)).toBe("https://hub.example.com/api/workflow-capabilities/inventory");
     return new Response(
       JSON.stringify({
         toolPackages: [{ name: "@corbits/memory-tools" }],
diff --git a/packages/capability-tools/src/tool.ts b/packages/capability-tools/src/tool.ts
index eaa62a8efd..29292eace4 100644
--- a/packages/capability-tools/src/tool.ts
+++ b/packages/capability-tools/src/tool.ts
@@ -70,9 +70,7 @@ function clientConfig(env: WorkflowCapabilityEnv) {
   };
 }
 
-function toAddCapabilityRequest(
-  input: RequestCapabilityInput,
-): AddCapabilityRequest {
+function toAddCapabilityRequest(input: RequestCapabilityInput): AddCapabilityRequest {
   switch (input.kind) {
     case "tool-package":
       return { kind: "toolPackage", name: input.name };
@@ -135,10 +133,7 @@ async function runRequestCapability(
     if (err instanceof CapabilityOutOfInventoryError) {
       try {
         const inventory = await fetchCapabilityInventory(clientConfig(env));
-        return errorResult(
-          call.id,
-          new Error(outOfInventoryMessage(parsed, inventory)),
-        );
+        return errorResult(call.id, new Error(outOfInventoryMessage(parsed, inventory)));
       } catch {
         return errorResult(call.id, err);
       }
@@ -214,9 +209,7 @@ export const capabilityTools = defineTool<WorkflowCapabilityEnv>({
           return Promise.resolve(
             errorResult(
               call.id,
-              new Error(
-                `@corbits/capability-tools: unknown tool "${call.name}"`,
-              ),
+              new Error(`@corbits/capability-tools: unknown tool "${call.name}"`),
             ),
           );
       }
diff --git a/packages/catalog-tools/package.json b/packages/catalog-tools/package.json
index a98c61c0c3..e968479fdc 100644
--- a/packages/catalog-tools/package.json
+++ b/packages/catalog-tools/package.json
@@ -1,21 +1,21 @@
 {
   "name": "@corbits/catalog-tools",
+  "version": "0.1.1",
   "description": "The list_model_concepts, pick_models and estimate_run_cost tools as an @intx/agent bundle: an agent asks for a model by what the work needs and gets back an ordered, priced chain of what this bench can actually reach — never a model named by hand.",
-  "version": "0.1.0",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "packages/catalog-tools"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "packages/catalog-tools"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -28,12 +28,12 @@
     "@corbits/inference-catalog": "0.1.0",
     "arktype": "catalog:"
   },
-  "peerDependencies": {
-    "@intx/agent": "0.3.0",
-    "@intx/types": "0.3.0"
-  },
   "devDependencies": {
     "@types/bun": "catalog:",
     "typescript": "catalog:"
+  },
+  "peerDependencies": {
+    "@intx/agent": "0.3.0",
+    "@intx/types": "0.3.0"
   }
 }
diff --git a/packages/catalog-tools/src/chain.ts b/packages/catalog-tools/src/chain.ts
index f5a6d49458..f38c5cda07 100644
--- a/packages/catalog-tools/src/chain.ts
+++ b/packages/catalog-tools/src/chain.ts
@@ -14,11 +14,7 @@ import {
   type ModelChain,
 } from "@corbits/inference-catalog";
 
-import {
-  fetchCatalog,
-  fetchModelPolicy,
-  type CatalogToolClientConfig,
-} from "./client";
+import { fetchCatalog, fetchModelPolicy, type CatalogToolClientConfig } from "./client";
 
 /** What this bench can reach and what it is willing to spend, read once. */
 export type BenchCatalog = {
@@ -26,13 +22,8 @@ export type BenchCatalog = {
   readonly policy: BenchModelPolicy;
 };
 
-export async function readBenchCatalog(
-  config: CatalogToolClientConfig,
-): Promise<BenchCatalog> {
-  const [models, policy] = await Promise.all([
-    fetchCatalog(config),
-    fetchModelPolicy(config),
-  ]);
+export async function readBenchCatalog(config: CatalogToolClientConfig): Promise<BenchCatalog> {
+  const [models, policy] = await Promise.all([fetchCatalog(config), fetchModelPolicy(config)]);
   return { models, policy };
 }
 
diff --git a/packages/catalog-tools/src/client.test.ts b/packages/catalog-tools/src/client.test.ts
index 3e7b9ea30c..481cff78ce 100644
--- a/packages/catalog-tools/src/client.test.ts
+++ b/packages/catalog-tools/src/client.test.ts
@@ -1,10 +1,6 @@
 import { describe, expect, test } from "bun:test";
 
-import {
-  fetchCatalog,
-  fetchModelPolicy,
-  type CatalogToolClientConfig,
-} from "./client";
+import { fetchCatalog, fetchModelPolicy, type CatalogToolClientConfig } from "./client";
 
 const MODELS_BODY = [
   {
@@ -51,9 +47,7 @@ describe("catalog tool client", () => {
 
     await fetchCatalog(config(fetchImpl));
 
-    expect(seen?.url).toBe(
-      "https://hub.example.com/api/tenants/bench_1/models",
-    );
+    expect(seen?.url).toBe("https://hub.example.com/api/tenants/bench_1/models");
     expect(seen?.headers.get("authorization")).toBe("Bearer sc-token");
     expect(seen?.headers.get("x-workflow-run-address")).toBe("run_1@workflow");
   });
@@ -71,9 +65,7 @@ describe("catalog tool client", () => {
         { status: 400 },
       )) as unknown as typeof fetch;
 
-    await expect(fetchCatalog(config(fetchImpl))).rejects.toThrow(
-      "the bench is not reachable",
-    );
+    await expect(fetchCatalog(config(fetchImpl))).rejects.toThrow("the bench is not reachable");
   });
 
   test("a body in an unexpected shape is an error, not a half-parsed answer", async () => {
@@ -82,9 +74,7 @@ describe("catalog tool client", () => {
         status: 200,
       })) as unknown as typeof fetch;
 
-    await expect(fetchCatalog(config(fetchImpl))).rejects.toThrow(
-      "unexpected shape",
-    );
+    await expect(fetchCatalog(config(fetchImpl))).rejects.toThrow("unexpected shape");
   });
 
   test("an unreachable hub is an error, never an empty list", async () => {
@@ -92,9 +82,7 @@ describe("catalog tool client", () => {
       throw new Error("connection refused");
     }) as unknown as typeof fetch;
 
-    await expect(fetchCatalog(config(fetchImpl))).rejects.toThrow(
-      "connection refused",
-    );
+    await expect(fetchCatalog(config(fetchImpl))).rejects.toThrow("connection refused");
   });
 
   test("reads the model policy out of the tenant's own config blob", async () => {
diff --git a/packages/catalog-tools/src/client.ts b/packages/catalog-tools/src/client.ts
index 292094adcc..34286134bc 100644
--- a/packages/catalog-tools/src/client.ts
+++ b/packages/catalog-tools/src/client.ts
@@ -16,10 +16,7 @@
 // child, from those two reads.
 import { type } from "arktype";
 import { DiscoveredModel } from "@corbits/inference-catalog/catalog";
-import {
-  readModelPolicy,
-  type BenchModelPolicy,
-} from "@corbits/inference-catalog/policy";
+import { readModelPolicy, type BenchModelPolicy } from "@corbits/inference-catalog/policy";
 
 export interface CatalogToolClientConfig {
   /** The hub's plain HTTP origin — the same value connections-tools'
@@ -74,15 +71,12 @@ async function read<T>(
   );
   if (!response.ok) {
     const detail: unknown = await response.json().catch(() => undefined);
-    const message =
-      errorMessageFrom(detail) ?? `${response.status} ${response.statusText}`;
+    const message = errorMessageFrom(detail) ?? `${response.status} ${response.statusText}`;
     throw new Error(`${what} failed: ${message}`);
   }
   const parsed = schema(await response.json());
   if (parsed instanceof type.errors) {
-    throw new Error(
-      `${what} came back in an unexpected shape: ${parsed.summary}`,
-    );
+    throw new Error(`${what} came back in an unexpected shape: ${parsed.summary}`);
   }
   return parsed;
 }
@@ -98,14 +92,9 @@ export async function fetchCatalog(
 }
 
 /** This bench's model policy, out of its own tenant config blob. */
-export async function fetchModelPolicy(
-  config: CatalogToolClientConfig,
-): Promise<BenchModelPolicy> {
-  const tenant = await read(
-    config,
-    "",
-    "Reading this bench's settings",
-    (raw) => TenantResponse(raw),
+export async function fetchModelPolicy(config: CatalogToolClientConfig): Promise<BenchModelPolicy> {
+  const tenant = await read(config, "", "Reading this bench's settings", (raw) =>
+    TenantResponse(raw),
   );
   return readModelPolicy(tenant.config ?? {});
 }
diff --git a/packages/catalog-tools/src/index.ts b/packages/catalog-tools/src/index.ts
index 0fba547f84..31efc74fa3 100644
--- a/packages/catalog-tools/src/index.ts
+++ b/packages/catalog-tools/src/index.ts
@@ -1,14 +1,5 @@
-export {
-  chainFor,
-  chainNote,
-  readBenchCatalog,
-  type BenchCatalog,
-} from "./chain";
-export {
-  fetchCatalog,
-  fetchModelPolicy,
-  type CatalogToolClientConfig,
-} from "./client";
+export { chainFor, chainNote, readBenchCatalog, type BenchCatalog } from "./chain";
+export { fetchCatalog, fetchModelPolicy, type CatalogToolClientConfig } from "./client";
 export {
   catalogTools,
   describeChain,
diff --git a/packages/catalog-tools/src/tool.test.ts b/packages/catalog-tools/src/tool.test.ts
index a874e0ca62..7ab7f34985 100644
--- a/packages/catalog-tools/src/tool.test.ts
+++ b/packages/catalog-tools/src/tool.test.ts
@@ -88,10 +88,7 @@ function stubbing(models: unknown, config?: Record<string, unknown>): void {
     if (url.endsWith("/models")) {
       return new Response(JSON.stringify(models), { status: 200 });
     }
-    return new Response(
-      JSON.stringify({ id: "bench_1", config: config ?? null }),
-      { status: 200 },
-    );
+    return new Response(JSON.stringify({ id: "bench_1", config: config ?? null }), { status: 200 });
   }) as unknown as typeof fetch;
 }
 
diff --git a/packages/catalog-tools/src/tool.ts b/packages/catalog-tools/src/tool.ts
index fa9772f67d..dabcec1353 100644
--- a/packages/catalog-tools/src/tool.ts
+++ b/packages/catalog-tools/src/tool.ts
@@ -108,10 +108,7 @@ function clientConfig(env: WorkflowCatalogEnv): CatalogToolClientConfig {
 
 /** The need, as exactly one of the two forms chain resolution accepts. The
  * input schema has already rejected both-at-once and neither. */
-function needOf(input: {
-  concept?: string;
-  capabilities?: Capability[];
-}): ChainNeed {
+function needOf(input: { concept?: string; capabilities?: Capability[] }): ChainNeed {
   return input.concept !== undefined
     ? { concept: input.concept }
     : { capabilities: input.capabilities ?? [] };
@@ -135,9 +132,7 @@ export function describeChain(chain: ModelChain): string {
   if (chain.entries.length === 0) {
     return note ?? "Nothing on this bench can do that kind of work right now.";
   }
-  const lines = chain.entries.map((entry, index) =>
-    describeEntry(entry, index + 1),
-  );
+  const lines = chain.entries.map((entry, index) => describeEntry(entry, index + 1));
   const head =
     chain.entries.length === 1
       ? "One model here fits:"
@@ -145,10 +140,7 @@ export function describeChain(chain: ModelChain): string {
   return [head, ...lines, note].filter(Boolean).join("\n");
 }
 
-async function runListModelConcepts(
-  env: WorkflowCatalogEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runListModelConcepts(env: WorkflowCatalogEnv, call: ToolCall): Promise<ToolResult> {
   try {
     const bench = await readBenchCatalog(clientConfig(env));
     const lines = CONCEPTS.map((concept) => {
@@ -164,10 +156,9 @@ async function runListModelConcepts(
     return {
       callId: call.id,
       isError: false,
-      content: [
-        "Ask for a model by the kind of work, using one of these ids:",
-        ...lines,
-      ].join("\n"),
+      content: ["Ask for a model by the kind of work, using one of these ids:", ...lines].join(
+        "\n",
+      ),
     };
   } catch (err) {
     return errorResult(call.id, err);
@@ -303,9 +294,7 @@ export const catalogTools = defineTool<WorkflowCatalogEnv>({
             return Promise.resolve(
               errorResult(
                 call.id,
-                new Error(
-                  `pick_models received invalid input: ${parsed.summary}`,
-                ),
+                new Error(`pick_models received invalid input: ${parsed.summary}`),
               ),
             );
           }
@@ -317,9 +306,7 @@ export const catalogTools = defineTool<WorkflowCatalogEnv>({
             return Promise.resolve(
               errorResult(
                 call.id,
-                new Error(
-                  `estimate_run_cost received invalid input: ${parsed.summary}`,
-                ),
+                new Error(`estimate_run_cost received invalid input: ${parsed.summary}`),
               ),
             );
           }
@@ -327,10 +314,7 @@ export const catalogTools = defineTool<WorkflowCatalogEnv>({
         }
         default:
           return Promise.resolve(
-            errorResult(
-              call.id,
-              new Error(`@corbits/catalog-tools: unknown tool "${call.name}"`),
-            ),
+            errorResult(call.id, new Error(`@corbits/catalog-tools: unknown tool "${call.name}"`)),
           );
       }
     },
diff --git a/packages/chat-ui/package.json b/packages/chat-ui/package.json
index b21f492c70..b2d87d6d5c 100644
--- a/packages/chat-ui/package.json
+++ b/packages/chat-ui/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/chat-ui",
+  "version": "0.0.1",
   "private": true,
   "description": "The chat surface's UI: the workspace, timeline, composer, and sidebar composed from the published component library",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "sideEffects": false,
@@ -25,15 +25,15 @@
   },
   "dependencies": {
     "@corbits/api-query": "workspace:*",
+    "@corbits/connections": "workspace:*",
     "@corbits/context-menu": "workspace:*",
     "@corbits/error-sink": "workspace:*",
+    "@corbits/icons": "workspace:*",
     "@corbits/inference-settings": "workspace:*",
+    "@corbits/jimmy-agent": "workspace:*",
     "@corbits/react-ui": "github:corbitsdev/react-ui#3b122812a307ccb35be31386f7696020c5a84635",
     "@tanstack/react-query": "catalog:",
-    "@corbits/connections": "workspace:*",
-    "@corbits/jimmy-agent": "workspace:*",
     "arktype": "catalog:",
-    "@corbits/icons": "workspace:*",
     "react": "^19.2.0",
     "react-dom": "^19.2.0"
   },
diff --git a/packages/chat-ui/src/agent-display-names.ts b/packages/chat-ui/src/agent-display-names.ts
index 774d02128c..1dd8582077 100644
--- a/packages/chat-ui/src/agent-display-names.ts
+++ b/packages/chat-ui/src/agent-display-names.ts
@@ -18,9 +18,7 @@ export type AgentDisplayNames = ReadonlyMap<string, string>;
 export function agentDisplayNamesFromAgents(
   agents: readonly { readonly address: string; readonly displayName: string }[],
 ): AgentDisplayNames {
-  return new Map(
-    agents.map((agent) => [agent.address, agent.displayName] as const),
-  );
+  return new Map(agents.map((agent) => [agent.address, agent.displayName] as const));
 }
 
 /**
diff --git a/packages/chat-ui/src/agent-part-adapter.test.ts b/packages/chat-ui/src/agent-part-adapter.test.ts
index 78a4468ff1..ca588969f4 100644
--- a/packages/chat-ui/src/agent-part-adapter.test.ts
+++ b/packages/chat-ui/src/agent-part-adapter.test.ts
@@ -3,19 +3,15 @@ import { toReactUiReasoning } from "./agent-part-adapter";
 
 describe("toReactUiReasoning", () => {
   test("carries the text through", () => {
-    expect(toReactUiReasoning({ kind: "reasoning", text: "thinking" })).toEqual(
-      {
-        kind: "reasoning",
-        text: "thinking",
-      },
-    );
+    expect(toReactUiReasoning({ kind: "reasoning", text: "thinking" })).toEqual({
+      kind: "reasoning",
+      text: "thinking",
+    });
   });
 
   // chat's ReasoningPart has no duration field; react-ui's is optional, so
   // it stays absent rather than being fabricated as 0.
   test("omits durationMs entirely rather than inventing a zero", () => {
-    expect(
-      "durationMs" in toReactUiReasoning({ kind: "reasoning", text: "x" }),
-    ).toBe(false);
+    expect("durationMs" in toReactUiReasoning({ kind: "reasoning", text: "x" })).toBe(false);
   });
 });
diff --git a/packages/chat-ui/src/api.ts b/packages/chat-ui/src/api.ts
index eece65a95d..421ef0e230 100644
--- a/packages/chat-ui/src/api.ts
+++ b/packages/chat-ui/src/api.ts
@@ -36,10 +36,7 @@ export {
   Part,
 } from "./wire/parts";
 export type { ParticipantRecord } from "./wire/participants";
-export type {
-  OnboardingStepLabel,
-  WorkbenchOnboardingStep,
-} from "./wire/blocks";
+export type { OnboardingStepLabel, WorkbenchOnboardingStep } from "./wire/blocks";
 export const WorkbenchKind = type("'workbench' | 'chat'");
 export type WorkbenchKind = typeof WorkbenchKind.infer;
 
@@ -93,14 +90,12 @@ export type Workbench = Omit<typeof WorkbenchWire.infer, "participants"> & {
   readonly participants: readonly ParticipantRecord[];
 };
 
-const WorkbenchesResponse = type({ items: WorkbenchWire.array() }).pipe(
-  (response) => ({
-    items: response.items.map((wire) => ({
-      ...wire,
-      participants: parseParticipants(wire.participants),
-    })),
-  }),
-);
+const WorkbenchesResponse = type({ items: WorkbenchWire.array() }).pipe((response) => ({
+  items: response.items.map((wire) => ({
+    ...wire,
+    participants: parseParticipants(wire.participants),
+  })),
+}));
 
 // `tenantId`/`tenantName`/`tenantMonogram` are set server-side only for a
 // message sent by a shared workbench's "other side" participant — a share
@@ -230,9 +225,7 @@ export class ChatApiError extends Error {
  */
 export function describeChatError(cause: unknown, fallback: string): string {
   const statused =
-    cause instanceof ChatApiError || cause instanceof InferenceSettingsApiError
-      ? cause
-      : null;
+    cause instanceof ChatApiError || cause instanceof InferenceSettingsApiError ? cause : null;
   if (statused === null) return fallback;
   switch (statused.status) {
     case 401:
@@ -242,10 +235,7 @@ export function describeChatError(cause: unknown, fallback: string): string {
     case undefined:
       return "Couldn't reach the server. Check your connection and try again.";
     default: {
-      if (
-        cause instanceof InferenceSettingsApiError &&
-        statused.message.trim() !== ""
-      ) {
+      if (cause instanceof InferenceSettingsApiError && statused.message.trim() !== "") {
         return statused.message;
       }
       return statused.status >= 500
@@ -257,11 +247,7 @@ export function describeChatError(cause: unknown, fallback: string): string {
 
 type Validator<T> = (data: unknown) => T | ArkErrors;
 
-async function request<T>(
-  path: string,
-  schema: Validator<T>,
-  init?: RequestInit,
-): Promise<T> {
+async function request<T>(path: string, schema: Validator<T>, init?: RequestInit): Promise<T> {
   let response: Response;
   try {
     response = await fetch(path, {
@@ -269,25 +255,18 @@ async function request<T>(
       headers: { "content-type": "application/json", ...init?.headers },
     });
   } catch (cause) {
-    throw new ChatApiError(
-      cause instanceof Error ? cause.message : String(cause),
-    );
+    throw new ChatApiError(cause instanceof Error ? cause.message : String(cause));
   }
   if (response.status === 401) {
     throw new UnauthenticatedError();
   }
   if (!response.ok) {
-    throw new ChatApiError(
-      `The server answered ${response.status} for ${path}.`,
-      response.status,
-    );
+    throw new ChatApiError(`The server answered ${response.status} for ${path}.`, response.status);
   }
   const body: unknown = await response.json().catch(() => undefined);
   const parsed = schema(body);
   if (parsed instanceof type.errors) {
-    throw new ChatApiError(
-      `Unexpected response shape from ${path}: ${parsed.summary}`,
-    );
+    throw new ChatApiError(`Unexpected response shape from ${path}: ${parsed.summary}`);
   }
   return parsed;
 }
@@ -314,9 +293,7 @@ export function workbenchesQueryKey(
 
 /** Prefix covering every `workbenchesQueryKey` kind for a tenant — invalidate
  * this after a mutation (create, rename, pin) to refetch both kinds. */
-export function workbenchesQueryKeyPrefix(
-  tenantId: string,
-): readonly [string, string, string] {
+export function workbenchesQueryKeyPrefix(tenantId: string): readonly [string, string, string] {
   return ["tenant", tenantId, "workbenches"] as const;
 }
 
@@ -324,9 +301,7 @@ export function listWorkbenches(
   tenantId: string,
   kind: WorkbenchKind,
 ): Promise<readonly Workbench[]> {
-  return request(workbenchesPath(tenantId, kind), WorkbenchesResponse).then(
-    (page) => page.items,
-  );
+  return request(workbenchesPath(tenantId, kind), WorkbenchesResponse).then((page) => page.items);
 }
 
 /**
@@ -339,13 +314,10 @@ export function listWorkbenches(
  * the shell's second column splitting the result into its workbenches and
  * chats sections (see `apps/web/src/shell/bench-activity.ts`).
  */
-export function listAllWorkbenches(
-  tenantId: string,
-): Promise<readonly Workbench[]> {
-  return request(
-    `/api/tenants/${tenantId}/chat/workbenches`,
-    WorkbenchesResponse,
-  ).then((page) => page.items);
+export function listAllWorkbenches(tenantId: string): Promise<readonly Workbench[]> {
+  return request(`/api/tenants/${tenantId}/chat/workbenches`, WorkbenchesResponse).then(
+    (page) => page.items,
+  );
 }
 
 // A chat is a direct thread with exactly one counterpart, picked at
@@ -415,18 +387,13 @@ export function applyStreamWorkbenchesMutated(data: unknown): void {
   );
 }
 
-export function createWorkbench(
-  tenantId: string,
-  input: CreateWorkbenchInput,
-): Promise<Workbench> {
+export function createWorkbench(tenantId: string, input: CreateWorkbenchInput): Promise<Workbench> {
   return request(`/api/tenants/${tenantId}/chat/workbenches`, Workbench, {
     method: "POST",
     body: JSON.stringify(input),
   }).then((workbench) => {
     if (typeof window !== "undefined") {
-      window.dispatchEvent(
-        new CustomEvent(WORKBENCHES_MUTATED_EVENT, { detail: { tenantId } }),
-      );
+      window.dispatchEvent(new CustomEvent(WORKBENCHES_MUTATED_EVENT, { detail: { tenantId } }));
     }
     return workbench;
   });
@@ -509,11 +476,10 @@ export function sendMessage(
     body["invite"] = options.invite;
   }
   if (options?.clientId !== undefined) body["clientId"] = options.clientId;
-  return request(
-    `/api/tenants/${tenantId}/chat/workbenches/${workbenchId}/messages`,
-    SentMessage,
-    { method: "POST", body: JSON.stringify(body) },
-  );
+  return request(`/api/tenants/${tenantId}/chat/workbenches/${workbenchId}/messages`, SentMessage, {
+    method: "POST",
+    body: JSON.stringify(body),
+  });
 }
 
 // `parentThreadId` is the thread this one hangs directly off: null for the
@@ -591,18 +557,14 @@ export function putReadState(
   workbenchId: string,
   input: { readonly lastSeenCreatedAt: string; readonly lastSeenId: string },
 ): Promise<void> {
-  return request(
-    `/api/tenants/${tenantId}/chat/workbenches/${workbenchId}/read-state`,
-    ReadState,
-    { method: "PUT", body: JSON.stringify(input) },
-  ).then(() => undefined);
+  return request(`/api/tenants/${tenantId}/chat/workbenches/${workbenchId}/read-state`, ReadState, {
+    method: "PUT",
+    body: JSON.stringify(input),
+  }).then(() => undefined);
 }
 
 export function listRuns(tenantId: string): Promise<readonly Run[]> {
-  return request(
-    `/api/tenants/${tenantId}/workflows/deployments`,
-    RunsResponse,
-  );
+  return request(`/api/tenants/${tenantId}/workflows/deployments`, RunsResponse);
 }
 
 export function listInvitableDefinitions(
@@ -634,11 +596,10 @@ export function inviteAgent(
   workbenchId: string,
   definitionId: string,
 ): Promise<InvitedAgent> {
-  return request(
-    `/api/tenants/${tenantId}/chat/workbenches/${workbenchId}/invite`,
-    InvitedAgent,
-    { method: "POST", body: JSON.stringify({ definitionId }) },
-  );
+  return request(`/api/tenants/${tenantId}/chat/workbenches/${workbenchId}/invite`, InvitedAgent, {
+    method: "POST",
+    body: JSON.stringify({ definitionId }),
+  });
 }
 
 const PostedOnboardingStep = type({ id: "string" });
@@ -685,14 +646,11 @@ const CreatedAgentDefinition = type({ id: "string" });
  * goes through. Idempotency is the caller's job: only offer this when
  * `JIMMY_QUICK_CREATE.handle` is absent from the tenant's invitable list.
  */
-export function quickCreateJimmy(
-  tenantId: string,
-): Promise<{ readonly id: string }> {
-  return request(
-    `/api/tenants/${tenantId}/agent-definitions`,
-    CreatedAgentDefinition,
-    { method: "POST", body: JSON.stringify(JIMMY_QUICK_CREATE) },
-  );
+export function quickCreateJimmy(tenantId: string): Promise<{ readonly id: string }> {
+  return request(`/api/tenants/${tenantId}/agent-definitions`, CreatedAgentDefinition, {
+    method: "POST",
+    body: JSON.stringify(JIMMY_QUICK_CREATE),
+  });
 }
 
 // `DELETE /workbenches/:id/participants/:address` (see
@@ -834,10 +792,7 @@ export function listVisibleAgentDefinitions(
  * never the caller's own tenant when the agent was reached through
  * ancestor inheritance — the DM workbench lives where the agent lives.
  */
-export function openAgentDm(
-  tenantId: string,
-  definitionId: string,
-): Promise<Workbench> {
+export function openAgentDm(tenantId: string, definitionId: string): Promise<Workbench> {
   return createWorkbench(tenantId, {
     kind: "chat",
     definitionId,
@@ -845,14 +800,8 @@ export function openAgentDm(
   });
 }
 
-export function getAgentInstructions(
-  tenantId: string,
-  definitionId: string,
-): Promise<AgentDetail> {
-  return request(
-    agentInstructionsPath(tenantId, definitionId),
-    AgentDetailWire,
-  );
+export function getAgentInstructions(tenantId: string, definitionId: string): Promise<AgentDetail> {
+  return request(agentInstructionsPath(tenantId, definitionId), AgentDetailWire);
 }
 
 export function updateAgentInstructions(
@@ -860,11 +809,10 @@ export function updateAgentInstructions(
   definitionId: string,
   input: AgentInstructions,
 ): Promise<AgentInstructions> {
-  return request(
-    agentInstructionsPath(tenantId, definitionId),
-    AgentInstructionsWire,
-    { method: "PUT", body: JSON.stringify(input) },
-  );
+  return request(agentInstructionsPath(tenantId, definitionId), AgentInstructionsWire, {
+    method: "PUT",
+    body: JSON.stringify(input),
+  });
 }
 
 // `GET /:definitionId/versions` / `POST /:definitionId/restore` (see
@@ -896,11 +844,10 @@ export function restoreAgentVersion(
   definitionId: string,
   commitSha: string,
 ): Promise<AgentDetail> {
-  return request(
-    `${agentInstructionsPath(tenantId, definitionId)}/restore`,
-    AgentDetailWire,
-    { method: "POST", body: JSON.stringify({ commitSha }) },
-  );
+  return request(`${agentInstructionsPath(tenantId, definitionId)}/restore`, AgentDetailWire, {
+    method: "POST",
+    body: JSON.stringify({ commitSha }),
+  });
 }
 
 // `GET /agent-definitions/capabilities/inventory` /
@@ -916,9 +863,7 @@ const CapabilityInventoryWire = type({
 });
 export type CapabilityInventory = typeof CapabilityInventoryWire.infer;
 
-export function listCapabilityInventory(
-  tenantId: string,
-): Promise<CapabilityInventory> {
+export function listCapabilityInventory(tenantId: string): Promise<CapabilityInventory> {
   return request(
     `/api/tenants/${tenantId}/agent-definitions/capabilities/inventory`,
     CapabilityInventoryWire,
@@ -942,10 +887,7 @@ export function addAgentCapability(
   );
 }
 
-export function workbenchStreamUrl(
-  tenantId: string,
-  workbenchId: string,
-): string {
+export function workbenchStreamUrl(tenantId: string, workbenchId: string): string {
   return `/api/tenants/${tenantId}/chat/workbenches/${workbenchId}/stream`;
 }
 
@@ -957,14 +899,10 @@ export function workbenchStreamUrl(
  * on a polling interval. Best-effort: a dropped ping just means the next
  * one (or the eventual `"offline"` on disconnect) catches up.
  */
-export function pingWorkbenchPresence(
-  tenantId: string,
-  workbenchId: string,
-): Promise<void> {
-  return fetch(
-    `/api/tenants/${tenantId}/chat/workbenches/${workbenchId}/presence`,
-    { method: "POST" },
-  )
+export function pingWorkbenchPresence(tenantId: string, workbenchId: string): Promise<void> {
+  return fetch(`/api/tenants/${tenantId}/chat/workbenches/${workbenchId}/presence`, {
+    method: "POST",
+  })
     .then(() => undefined)
     .catch(() => undefined);
 }
@@ -1019,10 +957,7 @@ export function getBlockResponses(
   messageId: string,
   blockId: string,
 ): Promise<BlockResponses> {
-  return request(
-    blockResponsesPath(tenantId, workbenchId, messageId, blockId),
-    BlockResponsesWire,
-  );
+  return request(blockResponsesPath(tenantId, workbenchId, messageId, blockId), BlockResponsesWire);
 }
 
 export function submitPollResponse(
@@ -1099,10 +1034,7 @@ const WorkbenchSettingsResponse = WorkbenchWire.and({
   ...wire,
   participants: parseParticipants(wire.participants),
 }));
-export type WorkbenchSettings = Omit<
-  typeof WorkbenchSettingsResponse.infer,
-  "participants"
-> & {
+export type WorkbenchSettings = Omit<typeof WorkbenchSettingsResponse.infer, "participants"> & {
   readonly participants: readonly ParticipantRecord[];
 };
 
@@ -1171,13 +1103,8 @@ const BenchChatSettingsResponse = type({
 });
 export type BenchChatSettings = typeof BenchChatSettingsResponse.infer;
 
-export function getBenchChatSettings(
-  tenantId: string,
-): Promise<BenchChatSettings> {
-  return request(
-    `/api/tenants/${tenantId}/chat/bench/settings`,
-    BenchChatSettingsResponse,
-  );
+export function getBenchChatSettings(tenantId: string): Promise<BenchChatSettings> {
+  return request(`/api/tenants/${tenantId}/chat/bench/settings`, BenchChatSettingsResponse);
 }
 
 export type BenchChatSettingsPatch = {
@@ -1188,11 +1115,10 @@ export function patchBenchChatSettings(
   tenantId: string,
   patch: BenchChatSettingsPatch,
 ): Promise<BenchChatSettings> {
-  return request(
-    `/api/tenants/${tenantId}/chat/bench/settings`,
-    BenchChatSettingsResponse,
-    { method: "PATCH", body: JSON.stringify(patch) },
-  );
+  return request(`/api/tenants/${tenantId}/chat/bench/settings`, BenchChatSettingsResponse, {
+    method: "PATCH",
+    body: JSON.stringify(patch),
+  });
 }
 
 // The turn projection's read surface (CL-6329/CL-6380): what a client
@@ -1221,9 +1147,7 @@ export function listWorkbenchTurns(
   tenantId: string,
   workbenchId: string,
 ): Promise<readonly AgentTurnSummary[]> {
-  return request(turnsPath(tenantId, workbenchId), AgentTurnsListWire).then(
-    (body) => body.items,
-  );
+  return request(turnsPath(tenantId, workbenchId), AgentTurnsListWire).then((body) => body.items);
 }
 
 const AgentTurnDetailWire = AgentTurnWire.and({
@@ -1236,10 +1160,7 @@ export function getWorkbenchTurn(
   workbenchId: string,
   turnId: string,
 ): Promise<AgentTurnDetail> {
-  return request(
-    `${turnsPath(tenantId, workbenchId)}/${turnId}`,
-    AgentTurnDetailWire,
-  );
+  return request(`${turnsPath(tenantId, workbenchId)}/${turnId}`, AgentTurnDetailWire);
 }
 
 const CancelWorkbenchTurnWire = type({ cancelledCount: "number" });
@@ -1258,13 +1179,9 @@ export function cancelWorkbenchTurn(
   tenantId: string,
   workbenchId: string,
 ): Promise<CancelWorkbenchTurnResult> {
-  return request(
-    `${turnsPath(tenantId, workbenchId)}/cancel`,
-    CancelWorkbenchTurnWire,
-    {
-      method: "POST",
-    },
-  );
+  return request(`${turnsPath(tenantId, workbenchId)}/cancel`, CancelWorkbenchTurnWire, {
+    method: "POST",
+  });
 }
 
 /**
diff --git a/packages/chat-ui/src/artifact-chip.tsx b/packages/chat-ui/src/artifact-chip.tsx
index 4e6a3c1147..691f422b6b 100644
--- a/packages/chat-ui/src/artifact-chip.tsx
+++ b/packages/chat-ui/src/artifact-chip.tsx
@@ -27,10 +27,8 @@ export function ArtifactChip({
   readonly onOpenInLibrary?: (part: Part & { kind: "file" }) => void;
 }) {
   const openable =
-    (part.blobId !== undefined || part.artifactId !== undefined) &&
-    onOpen !== undefined;
-  const libraryOpenable =
-    part.artifactId !== undefined && onOpenInLibrary !== undefined;
+    (part.blobId !== undefined || part.artifactId !== undefined) && onOpen !== undefined;
+  const libraryOpenable = part.artifactId !== undefined && onOpenInLibrary !== undefined;
 
   return (
     <div className="chat-artifact-chip">
@@ -38,9 +36,7 @@ export function ArtifactChip({
         type="button"
         className="chat-artifact-chip-open"
         disabled={!openable}
-        {...(openable && onOpen !== undefined
-          ? { onClick: () => onOpen(part) }
-          : {})}
+        {...(openable && onOpen !== undefined ? { onClick: () => onOpen(part) } : {})}
       >
         <span className="chat-artifact-chip-icon" aria-hidden="true">
           <FileText />
diff --git a/packages/chat-ui/src/avatar.test.tsx b/packages/chat-ui/src/avatar.test.tsx
index c3af0c622b..b8c2359f05 100644
--- a/packages/chat-ui/src/avatar.test.tsx
+++ b/packages/chat-ui/src/avatar.test.tsx
@@ -15,20 +15,11 @@ import {
 
 describe("avatarColorForPrincipal", () => {
   test("is deterministic for the same principal", () => {
-    expect(avatarColorForPrincipal("prn_alice")).toBe(
-      avatarColorForPrincipal("prn_alice"),
-    );
+    expect(avatarColorForPrincipal("prn_alice")).toBe(avatarColorForPrincipal("prn_alice"));
   });
 
   test("always returns a color from the approved pastel palette", () => {
-    const principals = [
-      "prn_alice",
-      "prn_bob",
-      "prn_carla",
-      "prn_dana",
-      "prn_eve",
-      "prn_frank",
-    ];
+    const principals = ["prn_alice", "prn_bob", "prn_carla", "prn_dana", "prn_eve", "prn_frank"];
     for (const p of principals) {
       expect(AVATAR_COLORS).toContain(avatarColorForPrincipal(p));
     }
@@ -36,9 +27,7 @@ describe("avatarColorForPrincipal", () => {
 
   test("distributes distinct principals across palette colors", () => {
     const colors = new Set(
-      ["prn_alice", "prn_bob", "prn_carla", "prn_dana"].map(
-        avatarColorForPrincipal,
-      ),
+      ["prn_alice", "prn_bob", "prn_carla", "prn_dana"].map(avatarColorForPrincipal),
     );
     expect(colors.size).toBeGreaterThan(1);
   });
@@ -46,15 +35,13 @@ describe("avatarColorForPrincipal", () => {
 
 describe("avatarClassForPrincipal", () => {
   test("is deterministic for the same principal", () => {
-    expect(avatarClassForPrincipal("prn_alice")).toBe(
-      avatarClassForPrincipal("prn_alice"),
-    );
+    expect(avatarClassForPrincipal("prn_alice")).toBe(avatarClassForPrincipal("prn_alice"));
   });
 
   test("never displays the seed itself", () => {
-    expect(
-      avatarClassForPrincipal("prn_super_secret_internal_id"),
-    ).not.toContain("prn_super_secret_internal_id");
+    expect(avatarClassForPrincipal("prn_super_secret_internal_id")).not.toContain(
+      "prn_super_secret_internal_id",
+    );
   });
 });
 
@@ -115,9 +102,7 @@ describe("CorbitAvatar", () => {
     expect(html).toContain("fill:var(--avatar-3)");
   });
   test("renders an SVG with an accessible name and no visible label", () => {
-    const html = renderToStaticMarkup(
-      <CorbitAvatar ariaLabel="Myra" size="md" />,
-    );
+    const html = renderToStaticMarkup(<CorbitAvatar ariaLabel="Myra" size="md" />);
     expect(html).toContain('role="img"');
     expect(html).toContain('aria-label="Myra"');
     expect(html).toContain('data-corbit="true"');
diff --git a/packages/chat-ui/src/avatar.tsx b/packages/chat-ui/src/avatar.tsx
index c9795a793b..22ef28bf04 100644
--- a/packages/chat-ui/src/avatar.tsx
+++ b/packages/chat-ui/src/avatar.tsx
@@ -6,12 +6,7 @@ import type { CSSProperties } from "react";
    theme) and consumed here by reference, so no product code hardcodes a
    color value. Numbered like react-ui's --chart-1..5 series — slot order is
    the deterministic resolution order, not a ranking. */
-export const AVATAR_COLORS = [
-  "--avatar-1",
-  "--avatar-2",
-  "--avatar-3",
-  "--avatar-4",
-] as const;
+export const AVATAR_COLORS = ["--avatar-1", "--avatar-2", "--avatar-3", "--avatar-4"] as const;
 
 export type AvatarColor = (typeof AVATAR_COLORS)[number];
 
@@ -54,11 +49,7 @@ export function resolveAvatarFill(
   principalId: string,
   explicitImageUrl?: string | null,
 ): AvatarFill {
-  if (
-    explicitImageUrl !== undefined &&
-    explicitImageUrl !== null &&
-    explicitImageUrl.length > 0
-  ) {
+  if (explicitImageUrl !== undefined && explicitImageUrl !== null && explicitImageUrl.length > 0) {
     return { kind: "image", url: explicitImageUrl };
   }
   return { kind: "generated", className: avatarClassForPrincipal(principalId) };
@@ -92,8 +83,7 @@ export function CorbitAvatar({
   className,
   style,
 }: CorbitAvatarProps) {
-  const sizeClass =
-    typeof size === "number" ? undefined : CORBIT_SIZE_CLASS[size];
+  const sizeClass = typeof size === "number" ? undefined : CORBIT_SIZE_CLASS[size];
   const sizeStyle: CSSProperties =
     typeof size === "number" ? { width: `${size}px`, height: `${size}px` } : {};
 
diff --git a/packages/chat-ui/src/blocks/approval-actions.ts b/packages/chat-ui/src/blocks/approval-actions.ts
index 30734042c5..9a408bf17e 100644
--- a/packages/chat-ui/src/blocks/approval-actions.ts
+++ b/packages/chat-ui/src/blocks/approval-actions.ts
@@ -10,8 +10,7 @@
 
 /** The platform's own status vocabulary for an approval (`ApprovalResponse.status`
  * in `@intx/types/src/approvals.ts`) -- never invented here. */
-export type ApprovalLiveStatus =
-  "pending" | "approved" | "rejected" | "timeout" | "expired";
+export type ApprovalLiveStatus = "pending" | "approved" | "rejected" | "timeout" | "expired";
 
 /**
  * A standing-consent offer the platform is willing to take for this
@@ -107,7 +106,5 @@ export type ApprovalActions = {
    * capture tool identity). Omit this until a host can wire it to something
    * real; the card never shows the standing-consent link without it.
    */
-  readonly allowStanding?: (
-    approvalId: string,
-  ) => Promise<ApprovalDecisionResult>;
+  readonly allowStanding?: (approvalId: string) => Promise<ApprovalDecisionResult>;
 };
diff --git a/packages/chat-ui/src/blocks/approve-block.tsx b/packages/chat-ui/src/blocks/approve-block.tsx
index e72d54e7b8..20e1e2498b 100644
--- a/packages/chat-ui/src/blocks/approve-block.tsx
+++ b/packages/chat-ui/src/blocks/approve-block.tsx
@@ -45,11 +45,7 @@ function statusLabel(status: ApprovalLiveStatus): string {
 /** The platform's own account of the request -- always rendered first and
  * unmissable whenever it's available, so a human never decides against
  * only the agent's framing. */
-function PlatformDetail({
-  detail,
-}: {
-  readonly detail: PlatformApprovalDetail;
-}) {
+function PlatformDetail({ detail }: { readonly detail: PlatformApprovalDetail }) {
   const args = Object.entries(detail.arguments);
   return (
     <div className="chat-block-approve-platform">
@@ -62,9 +58,7 @@ function PlatformDetail({
           {args.map(([label, value]) => (
             <div key={label} className="chat-block-approve-arg">
               <dt>{label}</dt>
-              <dd>
-                {typeof value === "string" ? value : JSON.stringify(value)}
-              </dd>
+              <dd>{typeof value === "string" ? value : JSON.stringify(value)}</dd>
             </div>
           ))}
         </dl>
@@ -94,22 +88,10 @@ function ApproveButtons({
   return (
     <div className="chat-block-actions-group">
       <div className="chat-block-actions">
-        <Button
-          type="button"
-          variant="primary"
-          disabled={busy}
-          onClick={onApprove}
-        >
-          {deciding === "approve"
-            ? CHAT_STRINGS.blockApproveApproving
-            : actionLabel}
+        <Button type="button" variant="primary" disabled={busy} onClick={onApprove}>
+          {deciding === "approve" ? CHAT_STRINGS.blockApproveApproving : actionLabel}
         </Button>
-        <Button
-          type="button"
-          variant="outline"
-          disabled={busy}
-          onClick={onDeny}
-        >
+        <Button type="button" variant="outline" disabled={busy} onClick={onDeny}>
           {deciding === "reject"
             ? CHAT_STRINGS.blockApproveRejecting
             : CHAT_STRINGS.blockDenyAction}
@@ -220,9 +202,7 @@ export function ApproveBlockView({
   });
 
   const detail =
-    view.kind === "actionable" ||
-    view.kind === "spectator" ||
-    view.kind === "resolved"
+    view.kind === "actionable" || view.kind === "spectator" || view.kind === "resolved"
       ? view.detail
       : null;
 
@@ -230,15 +210,11 @@ export function ApproveBlockView({
     <BlockCard title={data.title}>
       {detail !== null && <PlatformDetail detail={detail} />}
       {detail?.consequence !== undefined && (
-        <p className="chat-block-text chat-block-consequence">
-          {detail.consequence}
-        </p>
+        <p className="chat-block-text chat-block-consequence">{detail.consequence}</p>
       )}
       {view.kind !== "undetermined" && data.body !== undefined && (
         <p className="chat-block-text chat-block-agent-note">
-          {detail !== null
-            ? `${CHAT_STRINGS.blockApproveAgentNoteLabel}: `
-            : ""}
+          {detail !== null ? `${CHAT_STRINGS.blockApproveAgentNoteLabel}: ` : ""}
           {data.body}
         </p>
       )}
@@ -272,9 +248,7 @@ export function ApproveBlockView({
           <p className="chat-block-approve-status" data-status={view.status}>
             {statusLabel(view.status)}
           </p>
-          <p className="chat-block-text">
-            {CHAT_STRINGS.blockApproveSpectatorNote}
-          </p>
+          <p className="chat-block-text">{CHAT_STRINGS.blockApproveSpectatorNote}</p>
         </>
       )}
       {view.kind === "resolved" && (
@@ -283,18 +257,14 @@ export function ApproveBlockView({
             {statusLabel(view.status)}
           </p>
           {view.resolvedElsewhere && (
-            <p className="chat-block-text">
-              {CHAT_STRINGS.blockApproveConflictNote}
-            </p>
+            <p className="chat-block-text">{CHAT_STRINGS.blockApproveConflictNote}</p>
           )}
         </>
       )}
       {(view.kind === "actionable" || view.kind === "undetermined") && (
         <>
           {view.kind === "undetermined" && (
-            <p className="chat-block-text">
-              {CHAT_STRINGS.blockApproveUndeterminedNote}
-            </p>
+            <p className="chat-block-text">{CHAT_STRINGS.blockApproveUndeterminedNote}</p>
           )}
           {view.error !== null && (
             <p className="chat-block-text" role="alert">
@@ -308,9 +278,7 @@ export function ApproveBlockView({
             onDeny={() => decide("reject")}
             standingConsent={detail?.standingConsent}
             allowingStanding={allowingStanding}
-            onAllowStanding={
-              actions?.allowStanding !== undefined ? allowStanding : null
-            }
+            onAllowStanding={actions?.allowStanding !== undefined ? allowStanding : null}
           />
         </>
       )}
diff --git a/packages/chat-ui/src/blocks/block-responses.ts b/packages/chat-ui/src/blocks/block-responses.ts
index af579b7714..36119ac1f7 100644
--- a/packages/chat-ui/src/blocks/block-responses.ts
+++ b/packages/chat-ui/src/blocks/block-responses.ts
@@ -35,7 +35,9 @@ export type QuestionResponsePayload = {
 };
 
 export type BlockResponsePayload =
-  PollResponsePayload | FormResponsePayload | QuestionResponsePayload;
+  | PollResponsePayload
+  | FormResponsePayload
+  | QuestionResponsePayload;
 
 /**
  * The live read behind a poll/form card. `own` is this signed-in
@@ -64,10 +66,7 @@ export type BlockResponseActions = {
    * the message it lives in plus its own `pollId`/`formId` -- the same
    * (messageId, blockId) scope the server keys responses by, so a vote can
    * never be read back against the wrong message's block. */
-  readonly getResponses: (
-    messageId: string,
-    blockId: string,
-  ) => Promise<BlockResponseQuery>;
+  readonly getResponses: (messageId: string, blockId: string) => Promise<BlockResponseQuery>;
   /** Casts (or changes) this principal's vote. */
   readonly submitPoll: (
     messageId: string,
diff --git a/packages/chat-ui/src/blocks/connect-github-actions.ts b/packages/chat-ui/src/blocks/connect-github-actions.ts
index ed80b38bda..bf41f838cf 100644
--- a/packages/chat-ui/src/blocks/connect-github-actions.ts
+++ b/packages/chat-ui/src/blocks/connect-github-actions.ts
@@ -83,9 +83,7 @@ export type ConnectGithubActions = {
    */
   readonly submitAccessToken: (
     token: string,
-  ) => Promise<
-    { readonly ok: true } | { readonly ok: false; readonly message: string }
-  >;
+  ) => Promise<{ readonly ok: true } | { readonly ok: false; readonly message: string }>;
   /** Mints a grant and a live webhook trigger per repo id, then
    * records the selection through the host's own `startReviewingRepos`
    * binding. */
diff --git a/packages/chat-ui/src/blocks/connect-github-block-container.tsx b/packages/chat-ui/src/blocks/connect-github-block-container.tsx
index 1c44c583a4..32b6598481 100644
--- a/packages/chat-ui/src/blocks/connect-github-block-container.tsx
+++ b/packages/chat-ui/src/blocks/connect-github-block-container.tsx
@@ -25,10 +25,7 @@ import type { ConnectGithubBlockData } from "../wire/blocks";
 import { reportError } from "@corbits/error-sink";
 
 import { CHAT_STRINGS } from "../strings";
-import type {
-  ConnectGithubActions,
-  ConnectGithubQuery,
-} from "./connect-github-actions";
+import type { ConnectGithubActions, ConnectGithubQuery } from "./connect-github-actions";
 import type { OnboardingScene } from "./connect-github-block";
 import { ConnectGithubBlockView } from "./connect-github-block";
 
@@ -79,10 +76,7 @@ async function readConnectState(
   }
 }
 
-function displayQueryOf(
-  messageId: string,
-  query: ConnectGithubQuery,
-): ConnectGithubQuery {
+function displayQueryOf(messageId: string, query: ConnectGithubQuery): ConnectGithubQuery {
   if (query.kind === "connected" || query.kind === "disconnected") {
     return query;
   }
@@ -109,9 +103,7 @@ export function ConnectGithubBlockContainer({
    * picker back without the server's recorded selection changing — only
    * pressing "Start reviewing" again writes anything. */
   const [repickRequested, setRepickRequested] = useState(false);
-  const [startReviewingError, setStartReviewingError] = useState<
-    string | undefined
-  >(undefined);
+  const [startReviewingError, setStartReviewingError] = useState<string | undefined>(undefined);
   const mountedRef = useRef(true);
   const hadPickerRef = useRef(false);
   const hadConnectRef = useRef(false);
@@ -164,8 +156,7 @@ export function ConnectGithubBlockContainer({
   );
 
   const displayQuery = displayQueryOf(messageId, query);
-  const recordedRepoIds =
-    displayQuery.kind === "connected" ? displayQuery.selectedRepoIds : [];
+  const recordedRepoIds = displayQuery.kind === "connected" ? displayQuery.selectedRepoIds : [];
   const currentStepIndex =
     displayQuery.kind !== "connected"
       ? STEP_CONNECT
@@ -222,9 +213,7 @@ export function ConnectGithubBlockContainer({
 
   function toggleRepo(repoId: string) {
     setSelectedRepoIds((current) =>
-      current.includes(repoId)
-        ? current.filter((id) => id !== repoId)
-        : [...current, repoId],
+      current.includes(repoId) ? current.filter((id) => id !== repoId) : [...current, repoId],
     );
   }
 
@@ -236,9 +225,7 @@ export function ConnectGithubBlockContainer({
     } catch (cause) {
       reportError(cause, { operation: "connect-github.startReviewing" });
       if (mountedRef.current) {
-        setStartReviewingError(
-          CHAT_STRINGS.blockConnectGithubStartReviewingError,
-        );
+        setStartReviewingError(CHAT_STRINGS.blockConnectGithubStartReviewingError);
       }
     }
   }
@@ -251,9 +238,7 @@ export function ConnectGithubBlockContainer({
       repos={displayQuery.repos}
       selectedRepoIds={selectedRepoIds}
       onToggleRepo={toggleRepo}
-      onSelectAll={() =>
-        setSelectedRepoIds(displayQuery.repos.map((repo) => repo.id))
-      }
+      onSelectAll={() => setSelectedRepoIds(displayQuery.repos.map((repo) => repo.id))}
       onChangeConnection={connectedActions.requestConnect}
       onStartReviewing={(repoIds) => {
         void startReviewing(repoIds);
@@ -261,9 +246,7 @@ export function ConnectGithubBlockContainer({
       onSkip={() => {
         void connectedActions.skip();
       }}
-      {...(startReviewingError !== undefined
-        ? { error: startReviewingError }
-        : {})}
+      {...(startReviewingError !== undefined ? { error: startReviewingError } : {})}
       {...(hadConnectRef.current ? { autoFocus: true } : {})}
     />
   );
diff --git a/packages/chat-ui/src/blocks/connect-github-block.tsx b/packages/chat-ui/src/blocks/connect-github-block.tsx
index c7575bc4aa..e81af98f45 100644
--- a/packages/chat-ui/src/blocks/connect-github-block.tsx
+++ b/packages/chat-ui/src/blocks/connect-github-block.tsx
@@ -72,9 +72,7 @@ export type ConnectGithubCardBody =
        * modal. */
       readonly onSubmitAccessToken: (
         token: string,
-      ) => Promise<
-        { readonly ok: true } | { readonly ok: false; readonly message: string }
-      >;
+      ) => Promise<{ readonly ok: true } | { readonly ok: false; readonly message: string }>;
     }
   | {
       readonly kind: "error";
@@ -82,9 +80,7 @@ export type ConnectGithubCardBody =
       readonly onConnect: () => void;
       readonly onSubmitAccessToken: (
         token: string,
-      ) => Promise<
-        { readonly ok: true } | { readonly ok: false; readonly message: string }
-      >;
+      ) => Promise<{ readonly ok: true } | { readonly ok: false; readonly message: string }>;
     }
   | {
       readonly kind: "connected";
@@ -162,13 +158,9 @@ function SceneHeader({ scene }: { readonly scene: OnboardingScene }) {
                 key={step.title}
                 className="chat-block-scene-step"
                 {...(marked ? { "data-state": state } : {})}
-                aria-current={
-                  marked && state === "current" ? "step" : undefined
-                }
+                aria-current={marked && state === "current" ? "step" : undefined}
               >
-                <span className="chat-block-scene-step-title">
-                  {step.title}
-                </span>
+                <span className="chat-block-scene-step-title">{step.title}</span>
                 {mark !== undefined ? (
                   <span className="chat-block-scene-step-mark">{mark}</span>
                 ) : null}
@@ -238,9 +230,7 @@ function DisconnectedBody({
   readonly onConnect: () => void;
   readonly onSubmitAccessToken: (
     token: string,
-  ) => Promise<
-    { readonly ok: true } | { readonly ok: false; readonly message: string }
-  >;
+  ) => Promise<{ readonly ok: true } | { readonly ok: false; readonly message: string }>;
   readonly error?: string;
   readonly actionLabel?: string;
 }) {
@@ -271,9 +261,7 @@ function DisconnectedBody({
   if (fieldOpen) {
     return (
       <>
-        <p className="chat-block-text">
-          {CHAT_STRINGS.blockConnectGithubIntro}
-        </p>
+        <p className="chat-block-text">{CHAT_STRINGS.blockConnectGithubIntro}</p>
         <ol className="chat-block-text chat-block-connect-steps">
           {CHAT_STRINGS.blockConnectGithubTokenSteps.map((step) => (
             <li key={step}>{step}</li>
@@ -306,10 +294,7 @@ function DisconnectedBody({
           {...(error !== undefined ? { "aria-invalid": true } : {})}
         />
         {error !== undefined ? (
-          <p
-            className="chat-block-text chat-block-connect-token-error"
-            role="alert"
-          >
+          <p className="chat-block-text chat-block-connect-token-error" role="alert">
             {error}
           </p>
         ) : null}
@@ -343,10 +328,7 @@ function DisconnectedBody({
   return (
     <>
       {error !== undefined ? (
-        <p
-          className="chat-block-text chat-block-connect-token-error"
-          role="alert"
-        >
+        <p className="chat-block-text chat-block-connect-token-error" role="alert">
           {error}
         </p>
       ) : null}
@@ -401,9 +383,7 @@ function ConnectedBody({
       </p>
 
       <div className="chat-block-connect-count-row">
-        <span>
-          {CHAT_STRINGS.blockConnectGithubRepoCount(repos.length, pickedCount)}
-        </span>
+        <span>{CHAT_STRINGS.blockConnectGithubRepoCount(repos.length, pickedCount)}</span>
         <Button type="button" variant="link" onClick={onSelectAll}>
           {CHAT_STRINGS.blockConnectGithubSelectAll}
         </Button>
@@ -424,13 +404,8 @@ function ConnectedBody({
                 checked={selected}
                 onCheckedChange={() => onToggleRepo(repo.id)}
               />
-              <label
-                htmlFor={checkboxId}
-                className="chat-block-connect-repo-label"
-              >
-                <span className="chat-block-connect-repo-name">
-                  {repo.name}
-                </span>
+              <label htmlFor={checkboxId} className="chat-block-connect-repo-label">
+                <span className="chat-block-connect-repo-name">{repo.name}</span>
                 <span className="chat-block-connect-repo-meta">
                   {repoMetaLabel(repo.lastPushedAt)}
                 </span>
@@ -468,16 +443,11 @@ function ConnectedBody({
 }
 
 export function ConnectGithubBlockView(props: ConnectGithubCardProps) {
-  const currentStepTitle =
-    props.scene.steps?.[props.scene.currentStepIndex]?.title;
+  const currentStepTitle = props.scene.steps?.[props.scene.currentStepIndex]?.title;
   return (
     <BlockCard title={props.scene.title}>
       <SceneHeader scene={props.scene} />
-      <div
-        className="chat-block-scene-status"
-        aria-live="polite"
-        aria-atomic="true"
-      >
+      <div className="chat-block-scene-status" aria-live="polite" aria-atomic="true">
         {currentStepTitle ?? null}
       </div>
       <div className="chat-block-scene-body">
diff --git a/packages/chat-ui/src/blocks/connect-service-actions.ts b/packages/chat-ui/src/blocks/connect-service-actions.ts
index f7377e5acd..c59d051309 100644
--- a/packages/chat-ui/src/blocks/connect-service-actions.ts
+++ b/packages/chat-ui/src/blocks/connect-service-actions.ts
@@ -22,7 +22,8 @@ export type ConnectServiceQuery =
   | { readonly kind: "error"; readonly message: string };
 
 export type ConnectServiceResult =
-  { readonly ok: true } | { readonly ok: false; readonly message: string };
+  | { readonly ok: true }
+  | { readonly ok: false; readonly message: string };
 
 export interface ConnectServiceActions {
   getConnectState(connectorId: string): Promise<ConnectServiceQuery>;
diff --git a/packages/chat-ui/src/blocks/connect-service-block-container.tsx b/packages/chat-ui/src/blocks/connect-service-block-container.tsx
index c371699450..25d64bc1cf 100644
--- a/packages/chat-ui/src/blocks/connect-service-block-container.tsx
+++ b/packages/chat-ui/src/blocks/connect-service-block-container.tsx
@@ -10,10 +10,7 @@
 import { useEffect, useState } from "react";
 import type { ConnectServiceBlockData } from "../wire/blocks";
 
-import type {
-  ConnectServiceActions,
-  ConnectServiceQuery,
-} from "./connect-service-actions";
+import type { ConnectServiceActions, ConnectServiceQuery } from "./connect-service-actions";
 import { ConnectServiceBlockView } from "./connect-service-block";
 
 export function ConnectServiceBlockContainer({
@@ -35,10 +32,7 @@ export function ConnectServiceBlockContainer({
     }
 
     void actions.getConnectState(data.connectorId).then(applyQuery);
-    const unsubscribe = actions.subscribeConnectState(
-      data.connectorId,
-      applyQuery,
-    );
+    const unsubscribe = actions.subscribeConnectState(data.connectorId, applyQuery);
     return () => {
       cancelled = true;
       unsubscribe();
@@ -46,12 +40,7 @@ export function ConnectServiceBlockContainer({
   }, [actions, data.connectorId]);
 
   if (query.kind === "connected") {
-    return (
-      <ConnectServiceBlockView
-        kind="connected"
-        displayName={data.displayName}
-      />
-    );
+    return <ConnectServiceBlockView kind="connected" displayName={data.displayName} />;
   }
 
   const affordance = query.kind === "disconnected" ? query.affordance : "oauth";
diff --git a/packages/chat-ui/src/blocks/connect-service-block.tsx b/packages/chat-ui/src/blocks/connect-service-block.tsx
index 77482f4366..d32d84fbe6 100644
--- a/packages/chat-ui/src/blocks/connect-service-block.tsx
+++ b/packages/chat-ui/src/blocks/connect-service-block.tsx
@@ -12,10 +12,7 @@ import { Button, Input } from "@corbits/react-ui";
 import { Check } from "@corbits/icons";
 
 import { CHAT_STRINGS } from "../strings";
-import type {
-  ConnectAffordance,
-  ConnectServiceResult,
-} from "./connect-service-actions";
+import type { ConnectAffordance, ConnectServiceResult } from "./connect-service-actions";
 import { BlockCard } from "./block-card";
 
 export type ConnectServiceCardProps =
@@ -114,9 +111,7 @@ function KeyPasteBody({
         </p>
       ) : null}
       {error !== undefined ? (
-        <p className="chat-block-text chat-block-connect-token-error">
-          {error}
-        </p>
+        <p className="chat-block-text chat-block-connect-token-error">{error}</p>
       ) : null}
       <div className="chat-block-actions">
         <Button
@@ -176,9 +171,7 @@ function OneClickBody({
 export function ConnectServiceBlockView(props: ConnectServiceCardProps) {
   if (props.kind === "connected") {
     return (
-      <BlockCard
-        title={CHAT_STRINGS.blockConnectServiceHeadline(props.displayName)}
-      >
+      <BlockCard title={CHAT_STRINGS.blockConnectServiceHeadline(props.displayName)}>
         <p className="chat-block-connect-line">
           <span className="chat-block-connect-tick" aria-hidden="true">
             <Check />
@@ -189,9 +182,7 @@ export function ConnectServiceBlockView(props: ConnectServiceCardProps) {
     );
   }
   return (
-    <BlockCard
-      title={CHAT_STRINGS.blockConnectServiceHeadline(props.displayName)}
-    >
+    <BlockCard title={CHAT_STRINGS.blockConnectServiceHeadline(props.displayName)}>
       {props.affordance === "api-key" ? (
         <KeyPasteBody
           displayName={props.displayName}
diff --git a/packages/chat-ui/src/blocks/form-block.tsx b/packages/chat-ui/src/blocks/form-block.tsx
index 8fab486ac8..8f6f48af9b 100644
--- a/packages/chat-ui/src/blocks/form-block.tsx
+++ b/packages/chat-ui/src/blocks/form-block.tsx
@@ -13,10 +13,7 @@ import type { FormBlockData } from "../wire/blocks";
 
 import { CHAT_STRINGS } from "../strings";
 import { BlockCard } from "./block-card";
-import type {
-  BlockResponseActions,
-  BlockResponseQuery,
-} from "./block-responses";
+import type { BlockResponseActions, BlockResponseQuery } from "./block-responses";
 
 type FieldValues = Readonly<Record<string, string>>;
 
@@ -33,17 +30,11 @@ function ownValues(query: BlockResponseQuery): FieldValues | null {
   return query.own.kind === "form" ? query.own.values : null;
 }
 
-function isBlank(
-  field: FormBlockData["fields"][number],
-  value: string,
-): boolean {
+function isBlank(field: FormBlockData["fields"][number], value: string): boolean {
   return field.input === "checkbox" ? value !== "true" : value.trim() === "";
 }
 
-function validate(
-  data: FormBlockData,
-  values: FieldValues,
-): Readonly<Record<string, string>> {
+function validate(data: FormBlockData, values: FieldValues): Readonly<Record<string, string>> {
   const errors: Record<string, string> = {};
   for (const field of data.fields) {
     if (field.required === true && isBlank(field, values[field.id] ?? "")) {
@@ -126,9 +117,7 @@ export function FormBlockView({
 }) {
   const [query, setQuery] = useState<BlockResponseQuery>({ kind: "loading" });
   const [values, setValues] = useState<FieldValues>(() => defaultValues(data));
-  const [fieldErrors, setFieldErrors] = useState<
-    Readonly<Record<string, string>>
-  >({});
+  const [fieldErrors, setFieldErrors] = useState<Readonly<Record<string, string>>>({});
   const [submitError, setSubmitError] = useState<string | null>(null);
   const [submitting, setSubmitting] = useState(false);
   const [editing, setEditing] = useState(false);
@@ -193,9 +182,7 @@ export function FormBlockView({
     setValues((prev) => ({ ...prev, [fieldId]: value }));
     if (fieldErrors[fieldId] !== undefined) {
       setFieldErrors(
-        Object.fromEntries(
-          Object.entries(fieldErrors).filter(([id]) => id !== fieldId),
-        ),
+        Object.fromEntries(Object.entries(fieldErrors).filter(([id]) => id !== fieldId)),
       );
     }
   }
@@ -249,10 +236,7 @@ export function FormBlockView({
                 onChange={(value) => handleChange(field.id, value)}
               />
               {fieldErrors[field.id] !== undefined && (
-                <p
-                  className="chat-block-text chat-block-field-error"
-                  role="alert"
-                >
+                <p className="chat-block-text chat-block-field-error" role="alert">
                   {fieldErrors[field.id]}
                 </p>
               )}
@@ -267,17 +251,10 @@ export function FormBlockView({
         <div className="chat-block-actions">
           {locked ? (
             <>
-              <span
-                className="chat-block-form-submitted"
-                data-status="submitted"
-              >
+              <span className="chat-block-form-submitted" data-status="submitted">
                 {CHAT_STRINGS.blockFormSubmitted}
               </span>
-              <Button
-                type="button"
-                variant="outline"
-                onClick={() => setEditing(true)}
-              >
+              <Button type="button" variant="outline" onClick={() => setEditing(true)}>
                 {CHAT_STRINGS.blockFormEdit}
               </Button>
             </>
diff --git a/packages/chat-ui/src/blocks/metrics-block.tsx b/packages/chat-ui/src/blocks/metrics-block.tsx
index 0005bbf613..d61f6da90d 100644
--- a/packages/chat-ui/src/blocks/metrics-block.tsx
+++ b/packages/chat-ui/src/blocks/metrics-block.tsx
@@ -2,11 +2,7 @@ import type { MetricsBlockData } from "../wire/blocks";
 
 import { BlockCard } from "./block-card";
 
-export function MetricsBlockView({
-  data,
-}: {
-  readonly data: MetricsBlockData;
-}) {
+export function MetricsBlockView({ data }: { readonly data: MetricsBlockData }) {
   return (
     <BlockCard title={data.title}>
       <div className="chat-block-metrics">
@@ -15,10 +11,7 @@ export function MetricsBlockView({
             <div className="chat-block-metric-label">{metric.label}</div>
             <div className="chat-block-metric-value">{metric.value}</div>
             {metric.detail !== undefined && (
-              <div
-                className="chat-block-metric-detail"
-                data-trend={metric.trend}
-              >
+              <div className="chat-block-metric-detail" data-trend={metric.trend}>
                 {metric.detail}
               </div>
             )}
@@ -31,10 +24,7 @@ export function MetricsBlockView({
             <div key={`${index}-${bar.label}`} className="chat-block-bar-row">
               <span>{bar.label}</span>
               <span className="chat-block-bar" aria-hidden="true">
-                <span
-                  className="chat-block-bar-fill"
-                  style={{ width: `${bar.percent}%` }}
-                />
+                <span className="chat-block-bar-fill" style={{ width: `${bar.percent}%` }} />
               </span>
               <span>{bar.percent}%</span>
             </div>
diff --git a/packages/chat-ui/src/blocks/poll-block.tsx b/packages/chat-ui/src/blocks/poll-block.tsx
index efd10dd468..83dfe6cc03 100644
--- a/packages/chat-ui/src/blocks/poll-block.tsx
+++ b/packages/chat-ui/src/blocks/poll-block.tsx
@@ -9,10 +9,7 @@ import type { PollBlockData } from "../wire/blocks";
 
 import { CHAT_STRINGS } from "../strings";
 import { BlockCard } from "./block-card";
-import type {
-  BlockResponseActions,
-  BlockResponseQuery,
-} from "./block-responses";
+import type { BlockResponseActions, BlockResponseQuery } from "./block-responses";
 
 function ownChoiceIds(query: BlockResponseQuery): readonly string[] {
   if (query.kind !== "ready" || query.own === null) return [];
@@ -34,12 +31,7 @@ function StaticChoices({ data }: { readonly data: PollBlockData }) {
   return (
     <div className="chat-block-choices">
       {data.choices.map((choice) => (
-        <button
-          key={choice.id}
-          type="button"
-          className="chat-block-choice"
-          disabled
-        >
+        <button key={choice.id} type="button" className="chat-block-choice" disabled>
           {choice.label}
         </button>
       ))}
@@ -80,16 +72,11 @@ export function PollBlockView({
     );
   }
 
-  const closed =
-    data.closesAt !== undefined && Date.parse(data.closesAt) <= Date.now();
+  const closed = data.closesAt !== undefined && Date.parse(data.closesAt) <= Date.now();
 
   function castVote(choiceId: string) {
     if (actions === undefined || messageId === undefined || closed) return;
-    const nextChoiceIds = toggledChoiceIds(
-      ownChoiceIds(query),
-      choiceId,
-      data.multi === true,
-    );
+    const nextChoiceIds = toggledChoiceIds(ownChoiceIds(query), choiceId, data.multi === true);
     if (nextChoiceIds.length === 0) return;
     setVoting(choiceId);
     setError(null);
@@ -134,10 +121,7 @@ export function PollBlockView({
                 )}
               </span>
               <span className="chat-block-bar" aria-hidden="true">
-                <span
-                  className="chat-block-bar-fill"
-                  style={{ width: `${percent}%` }}
-                />
+                <span className="chat-block-bar-fill" style={{ width: `${percent}%` }} />
               </span>
               <span className="chat-block-poll-choice-count">
                 {CHAT_STRINGS.blockPollVoteCount(count)}
diff --git a/packages/chat-ui/src/blocks/question-block.tsx b/packages/chat-ui/src/blocks/question-block.tsx
index fb21f59e8c..666f1d250d 100644
--- a/packages/chat-ui/src/blocks/question-block.tsx
+++ b/packages/chat-ui/src/blocks/question-block.tsx
@@ -17,10 +17,7 @@ import { Check } from "@corbits/icons";
 
 import { CHAT_STRINGS } from "../strings";
 import { BlockCard } from "./block-card";
-import type {
-  BlockResponseActions,
-  BlockResponseQuery,
-} from "./block-responses";
+import type { BlockResponseActions, BlockResponseQuery } from "./block-responses";
 
 function ownAnswer(query: BlockResponseQuery): {
   readonly answer: string;
@@ -31,12 +28,8 @@ function ownAnswer(query: BlockResponseQuery): {
   if (query.own.kind !== "question") return null;
   return {
     answer: query.own.answer,
-    ...(query.own.optionIndex !== undefined
-      ? { optionIndex: query.own.optionIndex }
-      : {}),
-    ...(query.own.notifiedAt !== undefined
-      ? { notifiedAt: query.own.notifiedAt }
-      : {}),
+    ...(query.own.optionIndex !== undefined ? { optionIndex: query.own.optionIndex } : {}),
+    ...(query.own.notifiedAt !== undefined ? { notifiedAt: query.own.notifiedAt } : {}),
   };
 }
 
@@ -44,9 +37,7 @@ function notifyNeverLanded(answered: ReturnType<typeof ownAnswer>): boolean {
   return answered !== null && answered.notifiedAt === null;
 }
 
-function answeredValue(
-  answered: NonNullable<ReturnType<typeof ownAnswer>>,
-): string {
+function answeredValue(answered: NonNullable<ReturnType<typeof ownAnswer>>): string {
   return answered.optionIndex !== undefined
     ? `${CHAT_STRINGS.optionLetter(answered.optionIndex)}. ${answered.answer}`
     : answered.answer;
@@ -70,9 +61,7 @@ function AnsweredSummary({
         <p className="chat-block-question-answered-label">
           {CHAT_STRINGS.blockQuestionAnsweredLabel}
         </p>
-        <p className="chat-block-question-answered-value">
-          {answeredValue(answered)}
-        </p>
+        <p className="chat-block-question-answered-value">{answeredValue(answered)}</p>
       </div>
     </div>
   );
@@ -130,9 +119,7 @@ export function QuestionBlockView({
     return (
       <BlockCard title={data.question}>
         {data.subtitle !== undefined && (
-          <p className="chat-block-text chat-block-question-subtitle">
-            {data.subtitle}
-          </p>
+          <p className="chat-block-text chat-block-question-subtitle">{data.subtitle}</p>
         )}
         <StaticOptions data={data} />
       </BlockCard>
@@ -212,15 +199,9 @@ export function QuestionBlockView({
   return (
     <BlockCard title={data.question}>
       {data.subtitle !== undefined && (
-        <p className="chat-block-text chat-block-question-subtitle">
-          {data.subtitle}
-        </p>
+        <p className="chat-block-text chat-block-question-subtitle">{data.subtitle}</p>
       )}
-      <div
-        className="chat-block-choices"
-        role="group"
-        aria-label={data.question}
-      >
+      <div className="chat-block-choices" role="group" aria-label={data.question}>
         {data.options.map((option, index) => (
           <button
             key={option}
@@ -237,10 +218,7 @@ export function QuestionBlockView({
         ))}
       </div>
       {data.allowFreeText === true && (
-        <form
-          className="chat-block-question-freetext"
-          onSubmit={onFreeTextSubmit}
-        >
+        <form className="chat-block-question-freetext" onSubmit={onFreeTextSubmit}>
           <label htmlFor={`question-freetext-${data.questionId}`}>
             {CHAT_STRINGS.blockQuestionFreeTextLabel}
           </label>
@@ -257,9 +235,7 @@ export function QuestionBlockView({
             className="chat-block-question-freetext-submit"
             disabled={loading || submitting || freeText.trim().length === 0}
           >
-            {submitting
-              ? CHAT_STRINGS.blockQuestionSubmitting
-              : CHAT_STRINGS.blockQuestionSubmit}
+            {submitting ? CHAT_STRINGS.blockQuestionSubmitting : CHAT_STRINGS.blockQuestionSubmit}
           </button>
         </form>
       )}
diff --git a/packages/chat-ui/src/blocks/registry.tsx b/packages/chat-ui/src/blocks/registry.tsx
index 6045481684..784a496a8d 100644
--- a/packages/chat-ui/src/blocks/registry.tsx
+++ b/packages/chat-ui/src/blocks/registry.tsx
@@ -36,9 +36,7 @@ function renderKnownBlock(
       return (
         <ApproveBlockView
           data={block.data}
-          {...(approvalActions !== undefined
-            ? { actions: approvalActions }
-            : {})}
+          {...(approvalActions !== undefined ? { actions: approvalActions } : {})}
         />
       );
     case "steps":
@@ -76,18 +74,14 @@ function renderKnownBlock(
         <ConnectGithubBlockContainer
           data={block.data}
           messageId={messageId}
-          {...(connectGithubActions !== undefined
-            ? { actions: connectGithubActions }
-            : {})}
+          {...(connectGithubActions !== undefined ? { actions: connectGithubActions } : {})}
         />
       );
     case "connect-service":
       return (
         <ConnectServiceBlockContainer
           data={block.data}
-          {...(connectServiceActions !== undefined
-            ? { actions: connectServiceActions }
-            : {})}
+          {...(connectServiceActions !== undefined ? { actions: connectServiceActions } : {})}
         />
       );
   }
@@ -96,12 +90,8 @@ function renderKnownBlock(
 function UnsupportedBlock({ type }: { readonly type: string }) {
   return (
     <div className="chat-fallback-block">
-      <span className="chat-fallback-label">
-        {CHAT_STRINGS.blockUnsupportedTitle}
-      </span>
-      <span className="chat-fallback-body">
-        {CHAT_STRINGS.blockUnsupportedBody(type)}
-      </span>
+      <span className="chat-fallback-label">{CHAT_STRINGS.blockUnsupportedTitle}</span>
+      <span className="chat-fallback-body">{CHAT_STRINGS.blockUnsupportedBody(type)}</span>
     </div>
   );
 }
diff --git a/packages/chat-ui/src/blocks/steps-block.tsx b/packages/chat-ui/src/blocks/steps-block.tsx
index fcdadc898e..514f697b4a 100644
--- a/packages/chat-ui/src/blocks/steps-block.tsx
+++ b/packages/chat-ui/src/blocks/steps-block.tsx
@@ -7,16 +7,10 @@ export function StepsBlockView({ data }: { readonly data: StepsBlockData }) {
     <BlockCard title={data.title}>
       <div className="chat-block-steps">
         {data.steps.map((step, index) => (
-          <div
-            key={`${index}-${step.label}`}
-            className="chat-block-step"
-            data-state={step.state}
-          >
+          <div key={`${index}-${step.label}`} className="chat-block-step" data-state={step.state}>
             <span className="chat-block-step-dot" aria-hidden="true" />
             <span>{step.label}</span>
-            {step.note !== undefined && (
-              <span className="chat-block-step-note">{step.note}</span>
-            )}
+            {step.note !== undefined && <span className="chat-block-step-note">{step.note}</span>}
           </div>
         ))}
       </div>
diff --git a/packages/chat-ui/src/blocks/stream-block.tsx b/packages/chat-ui/src/blocks/stream-block.tsx
index 7ea38f908d..5d5ff2a235 100644
--- a/packages/chat-ui/src/blocks/stream-block.tsx
+++ b/packages/chat-ui/src/blocks/stream-block.tsx
@@ -7,9 +7,7 @@ export function StreamBlockView({ data }: { readonly data: StreamBlockData }) {
     <BlockCard title={data.title}>
       <pre className="chat-block-stream">
         {data.text}
-        {!data.done && (
-          <span className="chat-block-cursor" aria-hidden="true" />
-        )}
+        {!data.done && <span className="chat-block-cursor" aria-hidden="true" />}
       </pre>
     </BlockCard>
   );
diff --git a/packages/chat-ui/src/chat-workspace.test.ts b/packages/chat-ui/src/chat-workspace.test.ts
index 2471129535..883f00c3f8 100644
--- a/packages/chat-ui/src/chat-workspace.test.ts
+++ b/packages/chat-ui/src/chat-workspace.test.ts
@@ -1,9 +1,6 @@
 import { describe, expect, test } from "bun:test";
 
-import {
-  bringInLoadErrorMessage,
-  buildMemberAvatarStack,
-} from "./chat-workspace";
+import { bringInLoadErrorMessage, buildMemberAvatarStack } from "./chat-workspace";
 import type { ParticipantRecord } from "./api";
 import { avatarClassForPrincipal } from "./avatar";
 import { CHAT_STRINGS } from "./strings";
@@ -98,8 +95,8 @@ describe("bringInLoadErrorMessage (CL-6839)", () => {
   });
 
   test("both failures use the combined copy", () => {
-    expect(
-      bringInLoadErrorMessage(["members", "invitableAgents"], new Error("x")),
-    ).toBe(CHAT_STRINGS.mentionBringInLoadError);
+    expect(bringInLoadErrorMessage(["members", "invitableAgents"], new Error("x"))).toBe(
+      CHAT_STRINGS.mentionBringInLoadError,
+    );
   });
 });
diff --git a/packages/chat-ui/src/chat-workspace.tsx b/packages/chat-ui/src/chat-workspace.tsx
index c53b3cd365..ba2dcfaf22 100644
--- a/packages/chat-ui/src/chat-workspace.tsx
+++ b/packages/chat-ui/src/chat-workspace.tsx
@@ -15,13 +15,7 @@ import { isAgentAddress } from "./wire/mentions";
 import { Button, EmptyState, toast } from "@corbits/react-ui";
 import { reportError } from "@corbits/error-sink";
 import { getResolvedCatalog } from "@corbits/inference-settings";
-import {
-  CaretDown,
-  ChatCircle,
-  SlidersHorizontal,
-  UserPlus,
-  WarningCircle,
-} from "@corbits/icons";
+import { CaretDown, ChatCircle, SlidersHorizontal, UserPlus, WarningCircle } from "@corbits/icons";
 import { useQuery, useQueryClient } from "@tanstack/react-query";
 import { useCallback, useEffect, useMemo, useRef, useState } from "react";
 import type { ReactNode } from "react";
@@ -51,16 +45,10 @@ import { Composer } from "./composer";
 import type { ComposerHandle } from "./composer";
 import { InviteAgentDialog } from "./invite-agent-dialog";
 import { WorkbenchLoadingState } from "./loading-state";
-import {
-  mentionCandidatesFromParticipants,
-  resolveBringInLists,
-} from "./mentions";
+import { mentionCandidatesFromParticipants, resolveBringInLists } from "./mentions";
 import type { BringInListFailure, BringInMember } from "./mentions";
 import { SLASH_COMMANDS } from "./slash-commands";
-import {
-  failedTurnModelChoices,
-  failedTurnToolCapableModelChoices,
-} from "./failed-turn-models";
+import { failedTurnModelChoices, failedTurnToolCapableModelChoices } from "./failed-turn-models";
 import { CHAT_STRINGS } from "./strings";
 import { displayWorkbenchTitle } from "./workbench-display-title";
 import {
@@ -86,11 +74,7 @@ import {
 } from "./agent-display-names";
 import { NoUsableModelBanner } from "./no-usable-model-banner";
 import { ResumeFailedBanner } from "./resume-failed-banner";
-import type {
-  CurrentUser,
-  ScrollSnapshot,
-  TimelineMessageItem,
-} from "./timeline";
+import type { CurrentUser, ScrollSnapshot, TimelineMessageItem } from "./timeline";
 import type { ApprovalActions } from "./blocks/approval-actions";
 import type { BlockResponseActions } from "./blocks/block-responses";
 import type { ConnectGithubActions } from "./blocks/connect-github-actions";
@@ -107,22 +91,13 @@ import { useWorkbenchFeed } from "./use-workbench-feed";
 import { CorbitAvatar, avatarClassForPrincipal } from "./avatar";
 import { useWorkbenchPresenceRoster } from "./workbench-presence";
 import { type } from "arktype";
-import {
-  ChatMessageEventData,
-  ChatSettingsEventData,
-} from "./wire/stream-events";
+import { ChatMessageEventData, ChatSettingsEventData } from "./wire/stream-events";
 import { useThreadNavigation } from "./use-thread-navigation";
 import { mergePendingSends, useOptimisticSends } from "./use-optimistic-sends";
-export {
-  mergePendingSends,
-  pendingSenderAddress,
-} from "./use-optimistic-sends";
+export { mergePendingSends, pendingSenderAddress } from "./use-optimistic-sends";
 export type { PendingSend } from "./use-optimistic-sends";
 import { useWorkbenchTimelineView } from "./workbench-timeline-view";
-export {
-  chatFeedQueryKeyPrefix,
-  chatThreadsQueryKey,
-} from "./use-workbench-feed";
+export { chatFeedQueryKeyPrefix, chatThreadsQueryKey } from "./use-workbench-feed";
 export type { MessagesState } from "./workbench-timeline-view";
 
 /**
@@ -220,11 +195,7 @@ export function buildMemberAvatarStack(
   const humans = participants
     .filter((participant) => !isAgentAddress(participant.address))
     .map((participant) => {
-      const label = typingLabel(
-        localPartOf(participant.address),
-        participants,
-        currentUser,
-      );
+      const label = typingLabel(localPartOf(participant.address), participants, currentUser);
       return {
         key: participant.address,
         initials: label.slice(0, 1).toUpperCase(),
@@ -306,8 +277,7 @@ export function workbenchNotFoundRecoveryAction(args: {
   readonly onBackToWorkbenchList?: () => void;
 }): ReactNode | undefined {
   const { onGoToMissionControl, onNewWorkbench, onBackToWorkbenchList } = args;
-  const hasModernRecovery =
-    onGoToMissionControl !== undefined || onNewWorkbench !== undefined;
+  const hasModernRecovery = onGoToMissionControl !== undefined || onNewWorkbench !== undefined;
   if (hasModernRecovery) {
     return (
       <>
@@ -354,17 +324,14 @@ export function composerPlaceholderFor(
     | undefined,
   options?: { readonly slashCommandCount?: number },
 ): string {
-  const slashAvailable =
-    (options?.slashCommandCount ?? SLASH_COMMANDS.length) > 0;
+  const slashAvailable = (options?.slashCommandCount ?? SLASH_COMMANDS.length) > 0;
   if (workbench === undefined || workbench.kind !== "chat") {
     return slashAvailable
       ? `${CHAT_STRINGS.composerPlaceholder}, / for commands`
       : CHAT_STRINGS.composerPlaceholder;
   }
   const counterpart =
-    workbench.title.trim().length > 0
-      ? workbench.title
-      : CHAT_STRINGS.unnamedWorkbench;
+    workbench.title.trim().length > 0 ? workbench.title : CHAT_STRINGS.unnamedWorkbench;
   const base = CHAT_STRINGS.composerPlaceholderChat(counterpart);
   return slashAvailable ? `${base} / for commands` : base;
 }
@@ -393,9 +360,7 @@ const STREAMING_REPLY_ITEM_ID = "streaming_reply";
 function firstAgentParticipant(
   participants: readonly ParticipantRecord[],
 ): ParticipantRecord | undefined {
-  return participants.find((participant) =>
-    isAgentAddress(participant.address),
-  );
+  return participants.find((participant) => isAgentAddress(participant.address));
 }
 
 /**
@@ -414,11 +379,7 @@ export function mergeStreamingReply(
   // in the incoming-message slot owns that phase until the first delta
   // lands. A `"replied"` turn renders nothing: its reply is already a
   // persisted message.
-  if (
-    streamingReply === null ||
-    streamingReply.phase === "replied" ||
-    streamingReply.text === ""
-  ) {
+  if (streamingReply === null || streamingReply.phase === "replied" || streamingReply.text === "") {
     return items;
   }
   const agent = firstAgentParticipant(participants);
@@ -525,10 +486,7 @@ function useWorkbenchLists(tenantId: string) {
     if (workbenches.isError) {
       return {
         kind: "error",
-        message: describeChatError(
-          workbenches.error,
-          "Couldn't load workbenches.",
-        ),
+        message: describeChatError(workbenches.error, "Couldn't load workbenches."),
       };
     }
     if (chats.isError) {
@@ -611,9 +569,7 @@ function ChatWorkspaceInner({
   readonly settingsSection?: WorkbenchSettingsSectionId;
   /** Fired when the user switches tabs while the settings surface is
    * already open, so the host can reflect it in the URL. */
-  readonly onSettingsSectionChange?: (
-    section: WorkbenchSettingsSectionId,
-  ) => void;
+  readonly onSettingsSectionChange?: (section: WorkbenchSettingsSectionId) => void;
   /** Section sub-selection while settings are open — host-controlled from
    * the URL (`/w/:id/settings/:section/:entityId`). `null` means the
    * section's own list (or a section with no list). */
@@ -655,18 +611,14 @@ function ChatWorkspaceInner({
    * mounts, and with `null` when it unmounts so the host never holds a
    * stale handle. Optional: hosts that don't need the insert path omit it.
    */
-  readonly registerComposerInsert?: (
-    insert: ((text: string) => void) | null,
-  ) => void;
+  readonly registerComposerInsert?: (insert: ((text: string) => void) | null) => void;
   /**
    * Tenant members the mention popover's "Bring in…" group can offer —
    * the same reduced listing the shell already fetches for its
    * people/agents surfaces. Optional: omitting it hides the People group
    * (a workbench that can't grow its human roster still works).
    */
-  readonly listMembers?: (
-    tenantId: string,
-  ) => Promise<readonly BringInMember[]>;
+  readonly listMembers?: (tenantId: string) => Promise<readonly BringInMember[]>;
   /**
    * The composer's `/routine` command: opens the New Routine panel with
    * the active workbench pre-bound as its destination. Host-supplied so
@@ -678,10 +630,7 @@ function ChatWorkspaceInner({
    * CL-6099) are global-only pages now — reached from the shell rail, not
    * a per-workbench header button or composer command.
    */
-  readonly onCreateRoutineInSpace?: (
-    workbenchId: string,
-    preselectedAssetId?: string,
-  ) => void;
+  readonly onCreateRoutineInSpace?: (workbenchId: string, preselectedAssetId?: string) => void;
   /** Fired when the routed workbench 404s — a deleted workbench, or a stale
    * Recents entry that outlived it. The host owns Recents (this package
    * never touches localStorage), so it's told rather than reaching out. */
@@ -716,11 +665,8 @@ function ChatWorkspaceInner({
       queryKey: workbenchesQueryKeyPrefix(tenantId),
     });
   }, [queryClient, tenantId]);
-  const { state: workbenchesState, reload: reloadWorkbenches } =
-    useWorkbenchLists(tenantId);
-  const [selectedWorkbenchId, setSelectedWorkbenchId] = useState<string | null>(
-    null,
-  );
+  const { state: workbenchesState, reload: reloadWorkbenches } = useWorkbenchLists(tenantId);
+  const [selectedWorkbenchId, setSelectedWorkbenchId] = useState<string | null>(null);
   const activeWorkbenchId = controlledWorkbenchId ?? selectedWorkbenchId;
   const setActiveWorkbenchId = (id: string) => {
     setSelectedWorkbenchId(id);
@@ -729,9 +675,7 @@ function ChatWorkspaceInner({
   const [inviteDialogOpen, setInviteDialogOpen] = useState(false);
   // CL-6833: catch-up `fetchRunningTurn` failure must surface a banner with
   // Retry — never look idle. `resumeAttempt` re-arms the effect on Retry.
-  const [resumeFailedRefId, setResumeFailedRefId] = useState<string | null>(
-    null,
-  );
+  const [resumeFailedRefId, setResumeFailedRefId] = useState<string | null>(null);
   const [resumeAttempt, setResumeAttempt] = useState(0);
   // null = workbench root feed. A concrete id opens that thread in the same
   // geometry (timeline + composer). pendingParentMessageId is set when the
@@ -805,9 +749,7 @@ function ChatWorkspaceInner({
   }, [tenantId, activeWorkbenchId]);
 
   const composerMounted =
-    !settingsOpen &&
-    activeWorkbenchId !== null &&
-    messagesState.kind === "ready";
+    !settingsOpen && activeWorkbenchId !== null && messagesState.kind === "ready";
 
   useEffect(() => {
     if (registerComposerInsert === undefined) return;
@@ -819,8 +761,10 @@ function ChatWorkspaceInner({
     return () => registerComposerInsert(null);
   }, [registerComposerInsert, composerMounted]);
 
-  const { typingState, handleStreamEvent: handleTypingEvent } =
-    useTypingIndicator(currentUser?.principalId, activeWorkbenchId);
+  const { typingState, handleStreamEvent: handleTypingEvent } = useTypingIndicator(
+    currentUser?.principalId,
+    activeWorkbenchId,
+  );
   const {
     streamingReply,
     replyTimedOutRefId,
@@ -853,13 +797,9 @@ function ChatWorkspaceInner({
   // was. A ref (not state) holds each workbench's last snapshot: recording it
   // never needs to trigger a re-render, only be there the next time this
   // workbench's `WorkbenchTimeline` mounts.
-  const scrollSnapshotsRef = useRef<ReadonlyMap<string, ScrollSnapshot>>(
-    new Map(),
-  );
+  const scrollSnapshotsRef = useRef<ReadonlyMap<string, ScrollSnapshot>>(new Map());
   const restoredScrollSnapshot =
-    activeWorkbenchId !== null
-      ? scrollSnapshotsRef.current.get(activeWorkbenchId)
-      : undefined;
+    activeWorkbenchId !== null ? scrollSnapshotsRef.current.get(activeWorkbenchId) : undefined;
   const handleScrollSnapshot = useCallback(
     (snapshot: ScrollSnapshot) => {
       if (activeWorkbenchId === null) return;
@@ -880,9 +820,7 @@ function ChatWorkspaceInner({
   // `handleStreamingReplyEvent`/`handleTurnActivityEvent`, and the real
   // message it eventually produces arrives as its own `chat.message`.
   useWorkbenchStream(
-    activeWorkbenchId !== null
-      ? workbenchStreamUrl(tenantId, activeWorkbenchId)
-      : "",
+    activeWorkbenchId !== null ? workbenchStreamUrl(tenantId, activeWorkbenchId) : "",
     (eventType, data) => {
       handleTypingEvent(eventType, data);
       handleStreamingReplyEvent(eventType, data);
@@ -992,17 +930,15 @@ function ChatWorkspaceInner({
     isKnownWorkbenchKind(activeWorkbench.kind) &&
     activeWorkbench.kind === "chat";
   const activeChatAgent = isActiveChat
-    ? activeWorkbench?.participants.find((participant) =>
-        isAgentAddress(participant.address),
-      )
+    ? activeWorkbench?.participants.find((participant) => isAgentAddress(participant.address))
     : undefined;
 
-  const hasAgentParticipant = (activeWorkbench?.participants ?? []).some(
-    (participant) => isAgentAddress(participant.address),
+  const hasAgentParticipant = (activeWorkbench?.participants ?? []).some((participant) =>
+    isAgentAddress(participant.address),
   );
 
-  const resumeAgentAddress = (activeWorkbench?.participants ?? []).find(
-    (participant) => isAgentAddress(participant.address),
+  const resumeAgentAddress = (activeWorkbench?.participants ?? []).find((participant) =>
+    isAgentAddress(participant.address),
   )?.address;
 
   // CL-6380: a turn runs entirely server-side — this component mounting or
@@ -1048,18 +984,17 @@ function ChatWorkspaceInner({
     setResumeAttempt((attempt) => attempt + 1);
   }, []);
 
-  const { pendingSends, handleSend, retryPendingSend, discardPendingSend } =
-    useOptimisticSends({
-      tenantId,
-      activeWorkbenchId,
-      currentUserPrincipalId: currentUser?.principalId,
-      openThreadId,
-      pendingParentMessageId,
-      openThreadById,
-      noteAwaitingReply,
-      hasAgentParticipant,
-      restoreDraft: (text) => composerRef.current?.insertText(text),
-    });
+  const { pendingSends, handleSend, retryPendingSend, discardPendingSend } = useOptimisticSends({
+    tenantId,
+    activeWorkbenchId,
+    currentUserPrincipalId: currentUser?.principalId,
+    openThreadId,
+    pendingParentMessageId,
+    openThreadById,
+    noteAwaitingReply,
+    hasAgentParticipant,
+    restoreDraft: (text) => composerRef.current?.insertText(text),
+  });
 
   /** Retry on a failed-turn strip: sends the recovered text
    * (`findRetryText`) straight back through the normal send path — same
@@ -1078,13 +1013,7 @@ function ChatWorkspaceInner({
     queryFn: () => getResolvedCatalog(tenantId),
   });
   const workbenchAgentsQuery = useQuery({
-    queryKey: [
-      "tenant",
-      tenantId,
-      "chat",
-      "workbench-agents",
-      activeWorkbenchId,
-    ],
+    queryKey: ["tenant", tenantId, "chat", "workbench-agents", activeWorkbenchId],
     queryFn: () =>
       activeWorkbenchId !== null
         ? listWorkbenchAgents(tenantId, activeWorkbenchId)
@@ -1122,9 +1051,7 @@ function ChatWorkspaceInner({
     }
     return {
       models: failedTurnModelChoices(catalogQuery.data ?? []),
-      toolCapableModels: failedTurnToolCapableModelChoices(
-        catalogQuery.data ?? [],
-      ),
+      toolCapableModels: failedTurnToolCapableModelChoices(catalogQuery.data ?? []),
       definitionIdByAddress,
       onApplyModel: async ({ definitionId, address, canonicalName }) => {
         if (activeWorkbenchId === null) return;
@@ -1138,12 +1065,7 @@ function ChatWorkspaceInner({
         openWorkbenchSettings("agents", definitionId);
       },
     };
-  }, [
-    catalogQuery.data,
-    workbenchAgentsQuery.data,
-    tenantId,
-    activeWorkbenchId,
-  ]);
+  }, [catalogQuery.data, workbenchAgentsQuery.data, tenantId, activeWorkbenchId]);
 
   const addressedMessageParts = useMemo(
     () =>
@@ -1177,27 +1099,19 @@ function ChatWorkspaceInner({
   });
   const bringInMembersQuery = useQuery({
     queryKey: ["tenant", tenantId, "chat", "bring-in-members"],
-    queryFn: () =>
-      listMembers !== undefined ? listMembers(tenantId) : Promise.resolve([]),
+    queryFn: () => (listMembers !== undefined ? listMembers(tenantId) : Promise.resolve([])),
     enabled: bringInEnabled && listMembers !== undefined,
   });
   const bringInLists = resolveBringInLists({
     members: bringInMembersQuery,
     invitableAgents: invitableAgentsQuery,
   });
-  const bringInLoadError = bringInLoadErrorMessage(
-    bringInLists.failures,
-    bringInLists.firstError,
-  );
+  const bringInLoadError = bringInLoadErrorMessage(bringInLists.failures, bringInLists.firstError);
 
   const offerInviteControl = shouldOfferInviteControl({
     kind: activeWorkbench?.kind,
-    invitableAgents: invitableAgentsQuery.isSuccess
-      ? (invitableAgentsQuery.data ?? [])
-      : undefined,
-    ...(bringInMembersQuery.isSuccess
-      ? { bringInMembers: bringInMembersQuery.data ?? [] }
-      : {}),
+    invitableAgents: invitableAgentsQuery.isSuccess ? (invitableAgentsQuery.data ?? []) : undefined,
+    ...(bringInMembersQuery.isSuccess ? { bringInMembers: bringInMembersQuery.data ?? [] } : {}),
   });
 
   // A settings URL for a workbench id that resolved workbenches don't contain
@@ -1228,12 +1142,9 @@ function ChatWorkspaceInner({
     workbenchesState.kind === "ready" &&
     activeWorkbenchId !== null &&
     activeWorkbench === undefined;
-  const workbenchGone =
-    messagesState.kind === "error" && messagesState.workbenchNotFound;
+  const workbenchGone = messagesState.kind === "error" && messagesState.workbenchNotFound;
   const awaitingWorkbenchEvidence =
-    workbenchMissingFromList &&
-    !workbenchGone &&
-    messagesState.kind !== "ready";
+    workbenchMissingFromList && !workbenchGone && messagesState.kind !== "ready";
 
   // Who's live in this workbench right now, beyond the static participants
   // list — derived from this workbench's own `chat.presence`/
@@ -1266,12 +1177,8 @@ function ChatWorkspaceInner({
   );
   const visibleMemberStack = memberStack.slice(0, TEAM_AVATAR_STACK_LIMIT);
   const memberStackOverflow = memberStack.length - visibleMemberStack.length;
-  const visiblePresenceStack = presenceMembers.slice(
-    0,
-    TEAM_AVATAR_STACK_LIMIT,
-  );
-  const presenceStackOverflow =
-    presenceMembers.length - visiblePresenceStack.length;
+  const visiblePresenceStack = presenceMembers.slice(0, TEAM_AVATAR_STACK_LIMIT);
+  const presenceStackOverflow = presenceMembers.length - visiblePresenceStack.length;
 
   const showRoomChrome =
     workbenchesState.kind === "ready" &&
@@ -1279,8 +1186,7 @@ function ChatWorkspaceInner({
     !workbenchGone &&
     !awaitingWorkbenchEvidence;
 
-  const roomTitle =
-    activeWorkbenchDisplayTitle || CHAT_STRINGS.unnamedWorkbench;
+  const roomTitle = activeWorkbenchDisplayTitle || CHAT_STRINGS.unnamedWorkbench;
 
   const headerActions = (
     <>
@@ -1306,34 +1212,29 @@ function ChatWorkspaceInner({
                       ? `Reply · ${thread.parentMessageId.slice(0, 8)}`
                       : "Thread")}
                 </button>
-                {(subThreadsByParentId.get(thread.id) ?? []).map(
-                  (subThread) => (
-                    <button
-                      key={subThread.id}
-                      type="button"
-                      role="menuitem"
-                      className="chat-threads-menu-item chat-threads-menu-item-nested"
-                      onClick={() => {
-                        openThreadById(subThread.id);
-                      }}
-                    >
-                      {subThread.title ??
-                        (subThread.parentMessageId !== null
-                          ? `Fork · ${subThread.parentMessageId.slice(0, 8)}`
-                          : "Sub-thread")}
-                    </button>
-                  ),
-                )}
+                {(subThreadsByParentId.get(thread.id) ?? []).map((subThread) => (
+                  <button
+                    key={subThread.id}
+                    type="button"
+                    role="menuitem"
+                    className="chat-threads-menu-item chat-threads-menu-item-nested"
+                    onClick={() => {
+                      openThreadById(subThread.id);
+                    }}
+                  >
+                    {subThread.title ??
+                      (subThread.parentMessageId !== null
+                        ? `Fork · ${subThread.parentMessageId.slice(0, 8)}`
+                        : "Sub-thread")}
+                  </button>
+                ))}
               </div>
             ))}
           </div>
         </details>
       ) : null}
       {visibleMemberStack.length > 0 ? (
-        <div
-          className="chat-member-stack"
-          aria-label={CHAT_STRINGS.workbenchMembersLabel}
-        >
+        <div className="chat-member-stack" aria-label={CHAT_STRINGS.workbenchMembersLabel}>
           {visibleMemberStack.map((entry) =>
             entry.tone === "agent" ? (
               <span
@@ -1342,11 +1243,7 @@ function ChatWorkspaceInner({
                 data-agent="true"
                 title={entry.label}
               >
-                <CorbitAvatar
-                  size="sm"
-                  ariaLabel={entry.label}
-                  className="!size-full"
-                />
+                <CorbitAvatar size="sm" ariaLabel={entry.label} className="!size-full" />
               </span>
             ) : (
               <span
@@ -1369,10 +1266,7 @@ function ChatWorkspaceInner({
         </div>
       ) : null}
       {presenceMembers.length > 0 ? (
-        <div
-          className="chat-presence-stack"
-          aria-label={CHAT_STRINGS.workbenchPresenceLabel}
-        >
+        <div className="chat-presence-stack" aria-label={CHAT_STRINGS.workbenchPresenceLabel}>
           {visiblePresenceStack.map((member) => (
             <span
               key={member.principalId}
@@ -1393,11 +1287,7 @@ function ChatWorkspaceInner({
         </div>
       ) : null}
       {offerInviteControl ? (
-        <Button
-          variant="outline"
-          size="sm"
-          onClick={() => setInviteDialogOpen(true)}
-        >
+        <Button variant="outline" size="sm" onClick={() => setInviteDialogOpen(true)}>
           <UserPlus />
           {CHAT_STRINGS.inviteAgentAction}
         </Button>
@@ -1418,11 +1308,7 @@ function ChatWorkspaceInner({
 
   const threadBreadcrumb = inThreadView ? (
     <nav className="chat-thread-breadcrumb" aria-label="Thread">
-      <button
-        type="button"
-        className="chat-thread-breadcrumb-link"
-        onClick={closeThread}
-      >
+      <button type="button" className="chat-thread-breadcrumb-link" onClick={closeThread}>
         {roomTitle}
       </button>
       <span className="chat-thread-breadcrumb-sep" aria-hidden="true">
@@ -1446,9 +1332,7 @@ function ChatWorkspaceInner({
       ) : null}
       <span
         className="chat-thread-breadcrumb-current"
-        {...(headerSlot === undefined
-          ? { "aria-current": "page" as const }
-          : {})}
+        {...(headerSlot === undefined ? { "aria-current": "page" as const } : {})}
       >
         {threadTitle}
       </span>
@@ -1470,9 +1354,7 @@ function ChatWorkspaceInner({
   // shell's col2 toggle) so the sidebar stays reachable. When `headerSlot`
   // owns the bar, that chrome lifts out of `.chat-workbench-header`.
   const bareLeadingHeader =
-    headerSlot === undefined &&
-    headerLeading !== undefined &&
-    !showRoomChrome ? (
+    headerSlot === undefined && headerLeading !== undefined && !showRoomChrome ? (
       <div className="chat-workbench-header">{headerLeading}</div>
     ) : null;
 
@@ -1481,11 +1363,7 @@ function ChatWorkspaceInner({
       ? headerSlot(showRoomChrome ? roomChrome : WORKBENCHES_LIST_CHROME)
       : bareLeadingHeader;
 
-  if (
-    settingsOpen &&
-    activeWorkbenchId !== null &&
-    activeWorkbench !== undefined
-  ) {
+  if (settingsOpen && activeWorkbenchId !== null && activeWorkbench !== undefined) {
     return (
       <>
         <div className="chat-workspace">
@@ -1494,10 +1372,8 @@ function ChatWorkspaceInner({
             tenantId={tenantId}
             workbenchId={activeWorkbenchId}
             workbenchTitle={
-              displayWorkbenchTitle(
-                activeWorkbench.title,
-                activeWorkbench.id,
-              ) || CHAT_STRINGS.unnamedWorkbench
+              displayWorkbenchTitle(activeWorkbench.title, activeWorkbench.id) ||
+              CHAT_STRINGS.unnamedWorkbench
             }
             section={settingsSection}
             onSectionChange={(next) => onSettingsSectionChange?.(next)}
@@ -1540,10 +1416,7 @@ function ChatWorkspaceInner({
               title={`Couldn't load ${CHAT_STRINGS.couldNotLoadWorkbenches}`}
               description={workbenchesState.message}
               action={
-                <Button
-                  variant="outline"
-                  onClick={() => void reloadWorkbenches()}
-                >
+                <Button variant="outline" onClick={() => void reloadWorkbenches()}>
                   Try again
                 </Button>
               }
@@ -1564,13 +1437,9 @@ function ChatWorkspaceInner({
               title={CHAT_STRINGS.workbenchNotFoundTitle}
               description={CHAT_STRINGS.workbenchNotFoundDescription}
               action={workbenchNotFoundRecoveryAction({
-                ...(onGoToMissionControl !== undefined
-                  ? { onGoToMissionControl }
-                  : {}),
+                ...(onGoToMissionControl !== undefined ? { onGoToMissionControl } : {}),
                 ...(onNewWorkbench !== undefined ? { onNewWorkbench } : {}),
-                ...(onBackToWorkbenchList !== undefined
-                  ? { onBackToWorkbenchList }
-                  : {}),
+                ...(onBackToWorkbenchList !== undefined ? { onBackToWorkbenchList } : {}),
               })}
             />
           ) : awaitingWorkbenchEvidence ? (
@@ -1609,10 +1478,7 @@ function ChatWorkspaceInner({
                         </Button>
                       ) : undefined
                     ) : (
-                      <Button
-                        variant="outline"
-                        onClick={() => feed.refetchMessages()}
-                      >
+                      <Button variant="outline" onClick={() => feed.refetchMessages()}>
                         Try again
                       </Button>
                     )
@@ -1638,8 +1504,8 @@ function ChatWorkspaceInner({
                     settingUpAgent={
                       activeWorkbench?.kind === "chat" &&
                       typeof activeWorkbench.definitionId === "string" &&
-                      !(activeWorkbench.participants ?? []).some(
-                        (participant) => isAgentAddress(participant.address),
+                      !(activeWorkbench.participants ?? []).some((participant) =>
+                        isAgentAddress(participant.address),
                       )
                     }
                     items={appendReplyTimedOutNotice(
@@ -1660,39 +1526,21 @@ function ChatWorkspaceInner({
                     agentDisplayNames={agentDisplayNames}
                     threadMetaByMessageId={threadMetaByMessageId}
                     threadAffordanceMode={inThreadView ? "fork" : "reply"}
-                    onOpenThread={
-                      inThreadView ? forkMessage : openThreadForMessage
-                    }
+                    onOpenThread={inThreadView ? forkMessage : openThreadForMessage}
                     onEditMessage={(messageId) => {
                       if (messagesState.kind !== "ready") return;
-                      const item = messagesState.items.find(
-                        (message) => message.id === messageId,
-                      );
+                      const item = messagesState.items.find((message) => message.id === messageId);
                       if (item === undefined) return;
                       composerRef.current?.setText(messageText(item));
                     }}
                     {...(onOpenProfile !== undefined ? { onOpenProfile } : {})}
-                    {...(onOpenArtifact !== undefined
-                      ? { onOpenArtifact }
-                      : {})}
-                    {...(onOpenArtifactInLibrary !== undefined
-                      ? { onOpenArtifactInLibrary }
-                      : {})}
-                    {...(onFixConnection !== undefined
-                      ? { onFixConnection }
-                      : {})}
-                    {...(approvalActions !== undefined
-                      ? { approvalActions }
-                      : {})}
-                    {...(blockResponses !== undefined
-                      ? { blockResponses }
-                      : {})}
-                    {...(connectGithubActions !== undefined
-                      ? { connectGithubActions }
-                      : {})}
-                    {...(connectServiceActions !== undefined
-                      ? { connectServiceActions }
-                      : {})}
+                    {...(onOpenArtifact !== undefined ? { onOpenArtifact } : {})}
+                    {...(onOpenArtifactInLibrary !== undefined ? { onOpenArtifactInLibrary } : {})}
+                    {...(onFixConnection !== undefined ? { onFixConnection } : {})}
+                    {...(approvalActions !== undefined ? { approvalActions } : {})}
+                    {...(blockResponses !== undefined ? { blockResponses } : {})}
+                    {...(connectGithubActions !== undefined ? { connectGithubActions } : {})}
+                    {...(connectServiceActions !== undefined ? { connectServiceActions } : {})}
                     onRetryFailedTurn={handleRetryFailedTurn}
                     failedTurnRecovery={failedTurnRecovery}
                     pendingActions={{
@@ -1727,15 +1575,10 @@ function ChatWorkspaceInner({
                   <TurnActivityStrip activity={turnActivity} />
                   <div className="chat-composer-stack">
                     {resumeFailedRefId !== null ? (
-                      <ResumeFailedBanner
-                        refId={resumeFailedRefId}
-                        onRetry={handleRetryResume}
-                      />
+                      <ResumeFailedBanner refId={resumeFailedRefId} onRetry={handleRetryResume} />
                     ) : null}
                     {hasUsableModel === false && hasAgentParticipant ? (
-                      <NoUsableModelBanner
-                        onConnectModel={() => onConnectModel?.()}
-                      />
+                      <NoUsableModelBanner onConnectModel={() => onConnectModel?.()} />
                     ) : null}
                     <Composer
                       ref={composerRef}
@@ -1753,14 +1596,9 @@ function ChatWorkspaceInner({
                       running={isAwaitingReply(streamingReply)}
                       onStop={handleStopTurn}
                       onInviteAgent={() => setInviteDialogOpen(true)}
-                      onOpenAgentsSettings={() =>
-                        openWorkbenchSettings("agents")
-                      }
+                      onOpenAgentsSettings={() => openWorkbenchSettings("agents")}
                       onCreateRoutineInSpace={() => {
-                        if (
-                          onCreateRoutineInSpace !== undefined &&
-                          activeWorkbenchId !== null
-                        ) {
+                        if (onCreateRoutineInSpace !== undefined && activeWorkbenchId !== null) {
                           onCreateRoutineInSpace(
                             activeWorkbenchId,
                             singleWorkbenchAgentDefinitionAssetId,
@@ -1777,9 +1615,7 @@ function ChatWorkspaceInner({
           )}
         </div>
       </div>
-      {activeWorkbenchId !== null &&
-      !workbenchGone &&
-      !awaitingWorkbenchEvidence ? (
+      {activeWorkbenchId !== null && !workbenchGone && !awaitingWorkbenchEvidence ? (
         <InviteAgentDialog
           open={inviteDialogOpen}
           onOpenChange={setInviteDialogOpen}
@@ -1873,9 +1709,7 @@ export function ChatWorkspace({
   readonly settingsSection?: WorkbenchSettingsSectionId;
   /** Fired when the user switches tabs while the settings surface is
    * already open, so the host can reflect it in the URL. */
-  readonly onSettingsSectionChange?: (
-    section: WorkbenchSettingsSectionId,
-  ) => void;
+  readonly onSettingsSectionChange?: (section: WorkbenchSettingsSectionId) => void;
   /** Section sub-selection — host-controlled from the URL
    * (`/w/:id/settings/:section/:entityId`). */
   readonly settingsEntityId?: string | null;
@@ -1911,18 +1745,11 @@ export function ChatWorkspace({
    * of `.chat-workbench-header`. */
   readonly headerSlot?: (chrome: ChatHeaderChrome) => ReactNode;
   /** See `ChatWorkspaceInner`'s prop of the same name. */
-  readonly registerComposerInsert?: (
-    insert: ((text: string) => void) | null,
-  ) => void;
+  readonly registerComposerInsert?: (insert: ((text: string) => void) | null) => void;
   /** See `ChatWorkspaceInner`'s prop of the same name. */
-  readonly listMembers?: (
-    tenantId: string,
-  ) => Promise<readonly BringInMember[]>;
+  readonly listMembers?: (tenantId: string) => Promise<readonly BringInMember[]>;
   /** "New routine in this space" — see `ChatWorkspaceInner`'s prop note. */
-  readonly onCreateRoutineInSpace?: (
-    workbenchId: string,
-    preselectedAssetId?: string,
-  ) => void;
+  readonly onCreateRoutineInSpace?: (workbenchId: string, preselectedAssetId?: string) => void;
   /** See `ChatWorkspaceInner`'s prop of the same name. */
   readonly onWorkbenchNotFound?: (workbenchId: string) => void;
   /** See `ChatWorkspaceInner`'s prop of the same name. */
@@ -1950,48 +1777,26 @@ export function ChatWorkspace({
           {...(currentUser !== undefined ? { currentUser } : {})}
           {...(onOpenProfile !== undefined ? { onOpenProfile } : {})}
           {...(settingsOpen !== undefined ? { settingsOpen } : {})}
-          {...(onSettingsOpenChange !== undefined
-            ? { onSettingsOpenChange }
-            : {})}
+          {...(onSettingsOpenChange !== undefined ? { onSettingsOpenChange } : {})}
           {...(settingsSection !== undefined ? { settingsSection } : {})}
-          {...(onSettingsSectionChange !== undefined
-            ? { onSettingsSectionChange }
-            : {})}
+          {...(onSettingsSectionChange !== undefined ? { onSettingsSectionChange } : {})}
           {...(settingsEntityId !== undefined ? { settingsEntityId } : {})}
-          {...(onSettingsEntityIdChange !== undefined
-            ? { onSettingsEntityIdChange }
-            : {})}
+          {...(onSettingsEntityIdChange !== undefined ? { onSettingsEntityIdChange } : {})}
           {...(approvalActions !== undefined ? { approvalActions } : {})}
           {...(blockResponses !== undefined ? { blockResponses } : {})}
-          {...(connectGithubActions !== undefined
-            ? { connectGithubActions }
-            : {})}
-          {...(connectServiceActions !== undefined
-            ? { connectServiceActions }
-            : {})}
+          {...(connectGithubActions !== undefined ? { connectGithubActions } : {})}
+          {...(connectServiceActions !== undefined ? { connectServiceActions } : {})}
           {...(onOpenArtifact !== undefined ? { onOpenArtifact } : {})}
-          {...(onOpenArtifactInLibrary !== undefined
-            ? { onOpenArtifactInLibrary }
-            : {})}
+          {...(onOpenArtifactInLibrary !== undefined ? { onOpenArtifactInLibrary } : {})}
           {...(onFixConnection !== undefined ? { onFixConnection } : {})}
           {...(headerLeading !== undefined ? { headerLeading } : {})}
           {...(headerSlot !== undefined ? { headerSlot } : {})}
-          {...(registerComposerInsert !== undefined
-            ? { registerComposerInsert }
-            : {})}
+          {...(registerComposerInsert !== undefined ? { registerComposerInsert } : {})}
           {...(listMembers !== undefined ? { listMembers } : {})}
-          {...(onCreateRoutineInSpace !== undefined
-            ? { onCreateRoutineInSpace }
-            : {})}
-          {...(onWorkbenchNotFound !== undefined
-            ? { onWorkbenchNotFound }
-            : {})}
-          {...(onBackToWorkbenchList !== undefined
-            ? { onBackToWorkbenchList }
-            : {})}
-          {...(onGoToMissionControl !== undefined
-            ? { onGoToMissionControl }
-            : {})}
+          {...(onCreateRoutineInSpace !== undefined ? { onCreateRoutineInSpace } : {})}
+          {...(onWorkbenchNotFound !== undefined ? { onWorkbenchNotFound } : {})}
+          {...(onBackToWorkbenchList !== undefined ? { onBackToWorkbenchList } : {})}
+          {...(onGoToMissionControl !== undefined ? { onGoToMissionControl } : {})}
           {...(onNewWorkbench !== undefined ? { onNewWorkbench } : {})}
           {...(onSignIn !== undefined ? { onSignIn } : {})}
           {...(hasUsableModel !== undefined ? { hasUsableModel } : {})}
diff --git a/packages/chat-ui/src/clock.ts b/packages/chat-ui/src/clock.ts
index 9e049fe2aa..9b2da06c2b 100644
--- a/packages/chat-ui/src/clock.ts
+++ b/packages/chat-ui/src/clock.ts
@@ -12,6 +12,5 @@ export type Clock = {
 export const REAL_CLOCK: Clock = {
   now: () => Date.now(),
   setTimeout: (callback, ms) => setTimeout(callback, ms),
-  clearTimeout: (handle) =>
-    clearTimeout(handle as ReturnType<typeof setTimeout>),
+  clearTimeout: (handle) => clearTimeout(handle as ReturnType<typeof setTimeout>),
 };
diff --git a/packages/chat-ui/src/composer.tsx b/packages/chat-ui/src/composer.tsx
index c4aed69065..9371f40478 100644
--- a/packages/chat-ui/src/composer.tsx
+++ b/packages/chat-ui/src/composer.tsx
@@ -7,14 +7,7 @@
 // does not compose with an inline mention popover.
 
 import { Avatar, Button } from "@corbits/react-ui";
-import {
-  ArrowUp,
-  CircleNotch,
-  Microphone,
-  Paperclip,
-  Stop,
-  X,
-} from "@corbits/icons";
+import { ArrowUp, CircleNotch, Microphone, Paperclip, Stop, X } from "@corbits/icons";
 import { reportError } from "@corbits/error-sink";
 import {
   forwardRef,
@@ -43,11 +36,7 @@ import type {
   MentionOption,
   MentionQuery,
 } from "./mentions";
-import {
-  SLASH_COMMANDS,
-  activeSlashQuery,
-  filterSlashCommands,
-} from "./slash-commands";
+import { SLASH_COMMANDS, activeSlashQuery, filterSlashCommands } from "./slash-commands";
 import type { SlashCommandSpec, SlashQuery } from "./slash-commands";
 import { CHAT_STRINGS } from "./strings";
 
@@ -117,9 +106,7 @@ export type SpeechRecognitionLike = {
 
 type SpeechRecognitionCtor = new () => SpeechRecognitionLike;
 
-function isSpeechRecognitionCtor(
-  value: unknown,
-): value is SpeechRecognitionCtor {
+function isSpeechRecognitionCtor(value: unknown): value is SpeechRecognitionCtor {
   return typeof value === "function";
 }
 
@@ -181,13 +168,9 @@ export function spliceDictationTranscript(
     return { text: `${prefix}${suffix}`, caret: prefix.length };
   }
   const head =
-    prefix.length === 0 || /\s$/u.test(prefix)
-      ? `${prefix}${trimmed}`
-      : `${prefix} ${trimmed}`;
+    prefix.length === 0 || /\s$/u.test(prefix) ? `${prefix}${trimmed}` : `${prefix} ${trimmed}`;
   const text =
-    suffix.length === 0 || /^\s/u.test(suffix)
-      ? `${head}${suffix}`
-      : `${head} ${suffix}`;
+    suffix.length === 0 || /^\s/u.test(suffix) ? `${head}${suffix}` : `${head} ${suffix}`;
   return { text, caret: head.length };
 }
 
@@ -195,10 +178,7 @@ export function spliceDictationTranscript(
  * The B2 fix, isolated as a pure rule: a successful send clears the draft;
  * a failed one keeps exactly what the user had typed so nothing is lost.
  */
-export function draftAfterSend(
-  previousValue: string,
-  succeeded: boolean,
-): string {
+export function draftAfterSend(previousValue: string, succeeded: boolean): string {
   return succeeded ? "" : previousValue;
 }
 
@@ -217,10 +197,7 @@ export function attachmentsAfterSend(
  * Build the wire `Part[]` for a composer send. Empty trimmed text is omitted;
  * each attachment becomes a `FilePart` carrying inline base64 `data`.
  */
-export function partsForSend(
-  text: string,
-  attachments: readonly ComposerAttachment[],
-): Part[] {
+export function partsForSend(text: string, attachments: readonly ComposerAttachment[]): Part[] {
   const parts: Part[] = [];
   const trimmed = text.trim();
   if (trimmed.length > 0) {
@@ -237,10 +214,7 @@ export function partsForSend(
   return parts;
 }
 
-export function canSendComposer(
-  text: string,
-  attachments: readonly ComposerAttachment[],
-): boolean {
+export function canSendComposer(text: string, attachments: readonly ComposerAttachment[]): boolean {
   return text.trim().length > 0 || attachments.length > 0;
 }
 
@@ -320,9 +294,7 @@ export function base64DecodedByteLength(data: string): number {
   return (data.length * 3) / 4 - padding;
 }
 
-export function attachmentBytesOnComposer(
-  attachments: readonly ComposerAttachment[],
-): number {
+export function attachmentBytesOnComposer(attachments: readonly ComposerAttachment[]): number {
   let total = 0;
   for (const file of attachments) {
     total += base64DecodedByteLength(file.data);
@@ -334,21 +306,14 @@ function formatLimitMiB(bytes: number): number {
   return Math.round(bytes / (1024 * 1024));
 }
 
-export function attachmentValidationMessage(
-  error: AttachmentValidationError,
-): string {
+export function attachmentValidationMessage(error: AttachmentValidationError): string {
   switch (error.kind) {
     case "count":
       return CHAT_STRINGS.composerAttachmentCountError(error.max);
     case "perFile":
-      return CHAT_STRINGS.composerAttachmentPerFileError(
-        error.name,
-        formatLimitMiB(error.max),
-      );
+      return CHAT_STRINGS.composerAttachmentPerFileError(error.name, formatLimitMiB(error.max));
     case "total":
-      return CHAT_STRINGS.composerAttachmentTotalError(
-        formatLimitMiB(error.max),
-      );
+      return CHAT_STRINGS.composerAttachmentTotalError(formatLimitMiB(error.max));
   }
 }
 
@@ -415,8 +380,7 @@ function readFileAsBase64(file: File): Promise<string> {
       const comma = result.indexOf(",");
       resolve(comma === -1 ? result : result.slice(comma + 1));
     };
-    reader.onerror = () =>
-      reject(reader.error ?? new Error("failed to read attachment"));
+    reader.onerror = () => reject(reader.error ?? new Error("failed to read attachment"));
     reader.readAsDataURL(file);
   });
 }
@@ -496,12 +460,8 @@ export const Composer = forwardRef<
   ref,
 ) {
   const [value, setValue] = useState("");
-  const [attachments, setAttachments] = useState<readonly ComposerAttachment[]>(
-    [],
-  );
-  const [pendingInvites, setPendingInvites] = useState<
-    readonly MentionInviteIntent[]
-  >([]);
+  const [attachments, setAttachments] = useState<readonly ComposerAttachment[]>([]);
+  const [pendingInvites, setPendingInvites] = useState<readonly MentionInviteIntent[]>([]);
   const [mention, setMention] = useState<MentionQuery | null>(null);
   const [highlight, setHighlight] = useState(0);
   const [slash, setSlash] = useState<SlashQuery | null>(null);
@@ -531,9 +491,7 @@ export const Composer = forwardRef<
   const dictatePrefixRef = useRef("");
   const dictateSuffixRef = useRef("");
   const [listening, setListening] = useState(false);
-  const [dictateAvailable] = useState(
-    () => speechRecognitionConstructor() !== null,
-  );
+  const [dictateAvailable] = useState(() => speechRecognitionConstructor() !== null);
 
   function stopDictation() {
     const rec = recognitionRef.current;
@@ -694,17 +652,11 @@ export const Composer = forwardRef<
   const mentionOptions: readonly MentionOption[] =
     mention !== null
       ? filterMentionOptions(
-          mentionOptionsFromWorkbench(
-            participants,
-            members,
-            invitableAgents,
-            agentDisplayNames,
-          ),
+          mentionOptionsFromWorkbench(participants, members, invitableAgents, agentDisplayNames),
           mention.query,
         )
       : [];
-  const slashCandidates =
-    slash !== null ? filterSlashCommands(slash.query) : [];
+  const slashCandidates = slash !== null ? filterSlashCommands(slash.query) : [];
   const busy = { sending, preparing };
   const canSend = canSendComposerAction(value, attachments, busy);
   const canAttach = canAttachComposer(busy);
@@ -786,21 +738,14 @@ export const Composer = forwardRef<
     const textarea = textareaRef.current;
     if (mention === null || textarea === null) return;
     const caret = textarea.selectionStart;
-    const result = insertMention(
-      value,
-      caret,
-      mention,
-      option.candidate.handle,
-    );
+    const result = insertMention(value, caret, mention, option.candidate.handle);
     setValue(result.text);
     setMention(null);
     if (option.invite !== undefined) {
       const invite = option.invite;
       setPendingInvites((current) => {
         const key =
-          invite.kind === "agent"
-            ? `agent:${invite.definitionId}`
-            : `person:${invite.principalId}`;
+          invite.kind === "agent" ? `agent:${invite.definitionId}` : `person:${invite.principalId}`;
         const alreadyPending = current.some(
           (pending) =>
             (pending.kind === "agent"
@@ -848,8 +793,7 @@ export const Composer = forwardRef<
         next.push({
           id: nextAttachmentId(),
           name: file.name,
-          mediaType:
-            file.type.length > 0 ? file.type : "application/octet-stream",
+          mediaType: file.type.length > 0 ? file.type : "application/octet-stream",
           data,
         });
       }
@@ -909,10 +853,7 @@ export const Composer = forwardRef<
       }
       if (event.key === "ArrowUp") {
         event.preventDefault();
-        setSlashHighlight(
-          (index) =>
-            (index - 1 + slashCandidates.length) % slashCandidates.length,
-        );
+        setSlashHighlight((index) => (index - 1 + slashCandidates.length) % slashCandidates.length);
         return;
       }
       if (event.key === "Enter" || event.key === "Tab") {
@@ -934,10 +875,7 @@ export const Composer = forwardRef<
       }
       if (event.key === "ArrowUp") {
         event.preventDefault();
-        setHighlight(
-          (index) =>
-            (index - 1 + mentionOptions.length) % mentionOptions.length,
-        );
+        setHighlight((index) => (index - 1 + mentionOptions.length) % mentionOptions.length);
         return;
       }
       if (event.key === "Enter" || event.key === "Tab") {
@@ -978,9 +916,7 @@ export const Composer = forwardRef<
       {slash !== null && (
         <div className="chat-mention-popover chat-popover-enter" role="listbox">
           {slashCandidates.length === 0 ? (
-            <div className="chat-mention-empty">
-              {CHAT_STRINGS.composerSlashEmpty}
-            </div>
+            <div className="chat-mention-empty">{CHAT_STRINGS.composerSlashEmpty}</div>
           ) : (
             slashCandidates.map((command, index) => (
               <button
@@ -996,9 +932,7 @@ export const Composer = forwardRef<
                 }}
               >
                 <span className="chat-mention-handle">{command.name}</span>
-                <span className="chat-mention-label">
-                  {command.description}
-                </span>
+                <span className="chat-mention-label">{command.description}</span>
               </button>
             ))
           )}
@@ -1022,8 +956,7 @@ export const Composer = forwardRef<
               ) : null}
               {mentionOptions.map((option, index) => {
                 const prev = mentionOptions[index - 1];
-                const showSection =
-                  index === 0 || prev?.section !== option.section;
+                const showSection = index === 0 || prev?.section !== option.section;
                 const isAgent = option.section === "agents";
                 return (
                   <div key={`${option.section}:${option.candidate.id}`}>
@@ -1062,12 +995,8 @@ export const Composer = forwardRef<
                         />
                       )}
                       <span className="chat-mention-meta">
-                        <span className="chat-mention-name">
-                          {option.candidate.label}
-                        </span>
-                        <span className="chat-mention-handle">
-                          @{option.candidate.handle}
-                        </span>
+                        <span className="chat-mention-name">{option.candidate.label}</span>
+                        <span className="chat-mention-handle">@{option.candidate.handle}</span>
                       </span>
                     </button>
                   </div>
@@ -1078,13 +1007,8 @@ export const Composer = forwardRef<
         </div>
       )}
       {helpOpen && (
-        <div
-          className="chat-mention-popover chat-slash-help chat-popover-enter"
-          role="note"
-        >
-          <div className="chat-slash-help-title">
-            {CHAT_STRINGS.composerHelpTitle}
-          </div>
+        <div className="chat-mention-popover chat-slash-help chat-popover-enter" role="note">
+          <div className="chat-slash-help-title">{CHAT_STRINGS.composerHelpTitle}</div>
           {SLASH_COMMANDS.map((command) => (
             <div key={command.id} className="chat-mention-option">
               <span className="chat-mention-handle">{command.name}</span>
@@ -1092,9 +1016,7 @@ export const Composer = forwardRef<
             </div>
           ))}
           <div className="chat-slash-help-footer">
-            <span className="chat-slash-help-note">
-              {CHAT_STRINGS.composerHelpNote}
-            </span>
+            <span className="chat-slash-help-note">{CHAT_STRINGS.composerHelpNote}</span>
             <button
               type="button"
               className="chat-slash-help-close"
@@ -1125,9 +1047,7 @@ export const Composer = forwardRef<
           >
             {attachments.map((file) => (
               <li key={file.id} className="chat-composer-attachment">
-                <span className="chat-composer-attachment-name">
-                  {file.name}
-                </span>
+                <span className="chat-composer-attachment-name">{file.name}</span>
                 <button
                   type="button"
                   className="chat-composer-attachment-remove"
@@ -1189,15 +1109,9 @@ export const Composer = forwardRef<
                 disabled={sending || preparing}
                 onClick={toggleDictation}
                 aria-label={
-                  listening
-                    ? CHAT_STRINGS.composerDictateStop
-                    : CHAT_STRINGS.composerDictate
-                }
-                title={
-                  listening
-                    ? CHAT_STRINGS.composerDictateStop
-                    : CHAT_STRINGS.composerDictate
+                  listening ? CHAT_STRINGS.composerDictateStop : CHAT_STRINGS.composerDictate
                 }
+                title={listening ? CHAT_STRINGS.composerDictateStop : CHAT_STRINGS.composerDictate}
               >
                 <Microphone aria-hidden="true" />
               </Button>
@@ -1224,22 +1138,11 @@ export const Composer = forwardRef<
               disabled={!canSend}
               data-send-state={sendVisualState}
               onClick={() => void send()}
-              aria-label={
-                sending
-                  ? CHAT_STRINGS.composerSending
-                  : CHAT_STRINGS.composerSend
-              }
-              title={
-                sending
-                  ? CHAT_STRINGS.composerSending
-                  : CHAT_STRINGS.composerSend
-              }
+              aria-label={sending ? CHAT_STRINGS.composerSending : CHAT_STRINGS.composerSend}
+              title={sending ? CHAT_STRINGS.composerSending : CHAT_STRINGS.composerSend}
             >
               {sendVisualState === "sending" ? (
-                <CircleNotch
-                  className="chat-composer-send-spinner"
-                  aria-hidden="true"
-                />
+                <CircleNotch className="chat-composer-send-spinner" aria-hidden="true" />
               ) : (
                 <ArrowUp aria-hidden="true" />
               )}
@@ -1247,11 +1150,7 @@ export const Composer = forwardRef<
           </div>
         </div>
       </div>
-      <div
-        className="chat-composer-status"
-        aria-live="polite"
-        aria-atomic="true"
-      >
+      <div className="chat-composer-status" aria-live="polite" aria-atomic="true">
         {preparing ? CHAT_STRINGS.composerPreparing : null}
       </div>
       {errorMessage !== null && (
diff --git a/packages/chat-ui/src/default-agent-workbench.test.ts b/packages/chat-ui/src/default-agent-workbench.test.ts
index bcacb18365..1ba29e9a23 100644
--- a/packages/chat-ui/src/default-agent-workbench.test.ts
+++ b/packages/chat-ui/src/default-agent-workbench.test.ts
@@ -20,8 +20,7 @@ describe("createDefaultAgentWorkbench", () => {
   function stubFetch(respond: (path: string) => Response): RecordedCall[] {
     const calls: RecordedCall[] = [];
     globalThis.fetch = ((input: RequestInfo | URL, init?: RequestInit) => {
-      const path =
-        typeof input === "string" ? input : new URL(String(input)).pathname;
+      const path = typeof input === "string" ? input : new URL(String(input)).pathname;
       calls.push(init === undefined ? { path } : { path, init });
       return Promise.resolve(respond(path));
     }) as typeof fetch;
@@ -85,9 +84,7 @@ describe("createDefaultAgentWorkbench", () => {
       assetName: "assistant",
     });
 
-    const result = await agent.ensure("tnt_1", async () => [
-      definition("def-echo", "echo"),
-    ]);
+    const result = await agent.ensure("tnt_1", async () => [definition("def-echo", "echo")]);
 
     expect(result.kind).toBe("error");
   });
@@ -98,9 +95,7 @@ describe("createDefaultAgentWorkbench", () => {
       assetName: undefined,
     });
 
-    const result = await agent.ensure("tnt_1", async () => [
-      definition("def-echo", "echo"),
-    ]);
+    const result = await agent.ensure("tnt_1", async () => [definition("def-echo", "echo")]);
 
     expect(result.kind).toBe("error");
   });
@@ -123,9 +118,7 @@ describe("createDefaultAgentWorkbench", () => {
       throw new Error(`unexpected fetch: ${path}`);
     });
 
-    await agent.ensure("tnt_1", async () => [
-      definition("def-assistant", "assistant"),
-    ]);
+    await agent.ensure("tnt_1", async () => [definition("def-assistant", "assistant")]);
     expect(agent.isCachedWorkbenchId("chat-1")).toBe(true);
     agent.resetCache();
     expect(agent.isCachedWorkbenchId("chat-1")).toBe(false);
diff --git a/packages/chat-ui/src/default-agent-workbench.ts b/packages/chat-ui/src/default-agent-workbench.ts
index 107ed7720f..92dee63c0b 100644
--- a/packages/chat-ui/src/default-agent-workbench.ts
+++ b/packages/chat-ui/src/default-agent-workbench.ts
@@ -41,9 +41,7 @@ export function findDefinitionByAssetName<D extends { readonly name: string }>(
  * default agent's workbench?" synchronously from an id alone, with no
  * workbench-title fetch of its own.
  */
-export function createDefaultAgentWorkbench(
-  config: DefaultAgentWorkbenchConfig,
-) {
+export function createDefaultAgentWorkbench(config: DefaultAgentWorkbenchConfig) {
   let cachedWorkbenchId: string | null = null;
 
   function isCachedWorkbenchId(workbenchId: string | null): boolean {
@@ -54,18 +52,13 @@ export function createDefaultAgentWorkbench(
     cachedWorkbenchId = null;
   }
 
-  async function ensure<
-    D extends { readonly id: string; readonly name: string },
-  >(
+  async function ensure<D extends { readonly id: string; readonly name: string }>(
     tenantId: string,
     listDefinitions: (tenantId: string) => Promise<readonly D[]>,
   ): Promise<EnsureDefaultAgentWorkbenchResult> {
     try {
       const definitions = await listDefinitions(tenantId);
-      const definition = findDefinitionByAssetName(
-        definitions,
-        config.assetName,
-      );
+      const definition = findDefinitionByAssetName(definitions, config.assetName);
       if (definition === undefined) {
         return {
           kind: "error",
@@ -95,6 +88,4 @@ export function createDefaultAgentWorkbench(
   };
 }
 
-export type DefaultAgentWorkbench = ReturnType<
-  typeof createDefaultAgentWorkbench
->;
+export type DefaultAgentWorkbench = ReturnType<typeof createDefaultAgentWorkbench>;
diff --git a/packages/chat-ui/src/direct-workbench.test.ts b/packages/chat-ui/src/direct-workbench.test.ts
index a42e05ad1d..c0c0356f4a 100644
--- a/packages/chat-ui/src/direct-workbench.test.ts
+++ b/packages/chat-ui/src/direct-workbench.test.ts
@@ -3,10 +3,7 @@ import { describe, expect, test } from "bun:test";
 import { findDirectWorkbenchWith } from "./direct-workbench";
 import type { Workbench } from "./api";
 
-function workbench(
-  id: string,
-  participantAddresses: readonly string[],
-): Workbench {
+function workbench(id: string, participantAddresses: readonly string[]): Workbench {
   return {
     id,
     title: id,
@@ -26,16 +23,12 @@ describe("findDirectWorkbenchWith", () => {
       workbench("c2", ["viewer@x.dev", "subject@x.dev"]),
     ];
 
-    expect(findDirectWorkbenchWith(workbenches, "subject@x.dev")?.id).toBe(
-      "c2",
-    );
+    expect(findDirectWorkbenchWith(workbenches, "subject@x.dev")?.id).toBe("c2");
   });
 
   test("returns undefined when no workbench has that participant", () => {
     const workbenches = [workbench("c1", ["viewer@x.dev"])];
 
-    expect(
-      findDirectWorkbenchWith(workbenches, "subject@x.dev"),
-    ).toBeUndefined();
+    expect(findDirectWorkbenchWith(workbenches, "subject@x.dev")).toBeUndefined();
   });
 });
diff --git a/packages/chat-ui/src/direct-workbench.ts b/packages/chat-ui/src/direct-workbench.ts
index acd5ae067b..bed45d30ac 100644
--- a/packages/chat-ui/src/direct-workbench.ts
+++ b/packages/chat-ui/src/direct-workbench.ts
@@ -10,8 +10,6 @@ export function findDirectWorkbenchWith(
   subjectAddress: string,
 ): Workbench | undefined {
   return workbenches.find((workbench) =>
-    workbench.participants.some(
-      (participant) => participant.address === subjectAddress,
-    ),
+    workbench.participants.some((participant) => participant.address === subjectAddress),
   );
 }
diff --git a/packages/chat-ui/src/failed-turn-models.test.ts b/packages/chat-ui/src/failed-turn-models.test.ts
index 53386a30ba..17f7b49bb5 100644
--- a/packages/chat-ui/src/failed-turn-models.test.ts
+++ b/packages/chat-ui/src/failed-turn-models.test.ts
@@ -1,10 +1,7 @@
 import { describe, expect, test } from "bun:test";
 import type { ModelInfo } from "@corbits/inference-settings";
 
-import {
-  failedTurnModelChoices,
-  failedTurnToolCapableModelChoices,
-} from "./failed-turn-models";
+import { failedTurnModelChoices, failedTurnToolCapableModelChoices } from "./failed-turn-models";
 
 function model(
   canonicalName: string,
@@ -40,11 +37,7 @@ const UNCATALOGED = model("qwen3:8b", [], "qwen3:8b");
 
 describe("failedTurnModelChoices", () => {
   test("keeps chat-capable models, including ones without tools", () => {
-    const choices = failedTurnModelChoices([
-      CHAT_ONLY,
-      TOOL_CAPABLE,
-      UNCATALOGED,
-    ]);
+    const choices = failedTurnModelChoices([CHAT_ONLY, TOOL_CAPABLE, UNCATALOGED]);
     expect(choices.map((choice) => choice.canonicalName)).toEqual([
       "google/gemini-2.5-flash",
       "anthropic/claude-sonnet",
@@ -55,13 +48,7 @@ describe("failedTurnModelChoices", () => {
 
 describe("failedTurnToolCapableModelChoices", () => {
   test("keeps only models whose offerings advertise function-calling", () => {
-    const choices = failedTurnToolCapableModelChoices([
-      CHAT_ONLY,
-      TOOL_CAPABLE,
-      UNCATALOGED,
-    ]);
-    expect(choices.map((choice) => choice.canonicalName)).toEqual([
-      "anthropic/claude-sonnet",
-    ]);
+    const choices = failedTurnToolCapableModelChoices([CHAT_ONLY, TOOL_CAPABLE, UNCATALOGED]);
+    expect(choices.map((choice) => choice.canonicalName)).toEqual(["anthropic/claude-sonnet"]);
   });
 });
diff --git a/packages/chat-ui/src/failed-turn-models.ts b/packages/chat-ui/src/failed-turn-models.ts
index 0503233fd9..7ccfa90ad2 100644
--- a/packages/chat-ui/src/failed-turn-models.ts
+++ b/packages/chat-ui/src/failed-turn-models.ts
@@ -1,7 +1,4 @@
-import {
-  chatCapableModels,
-  providerDisplayName,
-} from "@corbits/inference-settings";
+import { chatCapableModels, providerDisplayName } from "@corbits/inference-settings";
 import type { ModelInfo } from "@corbits/inference-settings";
 
 import { CHAT_STRINGS } from "./strings";
@@ -14,9 +11,7 @@ export type FailedTurnModelChoice = {
 };
 
 function offeringSupportsTools(capabilities: readonly string[]): boolean {
-  return capabilities.some((capability) =>
-    capability.startsWith("function-calling"),
-  );
+  return capabilities.some((capability) => capability.startsWith("function-calling"));
 }
 
 function toolCapableModels(models: readonly ModelInfo[]): readonly ModelInfo[] {
@@ -27,18 +22,13 @@ function toolCapableModels(models: readonly ModelInfo[]): readonly ModelInfo[] {
     );
     if (offerings.length === 0) continue;
     kept.push(
-      offerings.length === model.offerings.length
-        ? model
-        : { ...model, offerings: [...offerings] },
+      offerings.length === model.offerings.length ? model : { ...model, offerings: [...offerings] },
     );
   }
   return kept;
 }
 
-function toChoices(
-  models: readonly ModelInfo[],
-  limit: number,
-): readonly FailedTurnModelChoice[] {
+function toChoices(models: readonly ModelInfo[], limit: number): readonly FailedTurnModelChoice[] {
   return models
     .filter((model) => model.offerings.length > 0)
     .slice(0, limit)
@@ -48,9 +38,7 @@ function toChoices(
         canonicalName: model.canonicalName,
         label: CHAT_STRINGS.workbenchSettingsAgentDetailModelOption(
           model.displayName ?? model.canonicalName,
-          topOffering === undefined
-            ? ""
-            : providerDisplayName(topOffering.providerName),
+          topOffering === undefined ? "" : providerDisplayName(topOffering.providerName),
         ),
       };
     });
diff --git a/packages/chat-ui/src/index.ts b/packages/chat-ui/src/index.ts
index 1d7b17ba3f..975073986f 100644
--- a/packages/chat-ui/src/index.ts
+++ b/packages/chat-ui/src/index.ts
@@ -28,12 +28,7 @@ export {
   avatarClassForPrincipal,
   resolveAvatarFill,
 } from "./avatar";
-export type {
-  AvatarFill,
-  AvatarColor,
-  CorbitAvatarProps,
-  CorbitAvatarSize,
-} from "./avatar";
+export type { AvatarFill, AvatarColor, CorbitAvatarProps, CorbitAvatarSize } from "./avatar";
 
 export { threadMessagesToTimeline, roomRefFor } from "./mailbox-timeline";
 export type { TimelineItem } from "./mailbox-timeline";
@@ -80,10 +75,7 @@ export {
   mentionOptionsFromWorkbench,
   resolveBringInLists,
 } from "./mentions";
-export {
-  agentDisplayNamesFromAgents,
-  displayNameForAddress,
-} from "./agent-display-names";
+export { agentDisplayNamesFromAgents, displayNameForAddress } from "./agent-display-names";
 export type { AgentDisplayNames } from "./agent-display-names";
 export type {
   BringInAgentDefinition,
@@ -96,16 +88,8 @@ export type {
   MentionSection,
 } from "./mentions";
 
-export {
-  SLASH_COMMANDS,
-  activeSlashQuery,
-  filterSlashCommands,
-} from "./slash-commands";
-export type {
-  SlashCommandId,
-  SlashCommandSpec,
-  SlashQuery,
-} from "./slash-commands";
+export { SLASH_COMMANDS, activeSlashQuery, filterSlashCommands } from "./slash-commands";
+export type { SlashCommandId, SlashCommandSpec, SlashQuery } from "./slash-commands";
 
 export { CHAT_STRINGS } from "./strings";
 export { displayWorkbenchTitle } from "./workbench-display-title";
@@ -137,10 +121,7 @@ export type {
   FormResponsePayload,
   QuestionResponsePayload,
 } from "./blocks/block-responses";
-export type {
-  ConnectGithubActions,
-  ConnectGithubQuery,
-} from "./blocks/connect-github-actions";
+export type { ConnectGithubActions, ConnectGithubQuery } from "./blocks/connect-github-actions";
 export type {
   ConnectServiceActions,
   ConnectServiceQuery,
@@ -236,10 +217,7 @@ export { sharedWorkbenchesWith } from "./shared-workbenches";
 export type { SharedWorkbenchSummary } from "./shared-workbenches";
 export { findDirectWorkbenchWith } from "./direct-workbench";
 
-export {
-  createDefaultAgentWorkbench,
-  findDefinitionByAssetName,
-} from "./default-agent-workbench";
+export { createDefaultAgentWorkbench, findDefinitionByAssetName } from "./default-agent-workbench";
 export type {
   DefaultAgentWorkbench,
   DefaultAgentWorkbenchConfig,
@@ -248,11 +226,7 @@ export type {
 
 export { ArtifactChip } from "./artifact-chip";
 
-export {
-  PrThreadView,
-  PrQueuedStrip,
-  PrFailedTurnStrip,
-} from "./pr-thread-view";
+export { PrThreadView, PrQueuedStrip, PrFailedTurnStrip } from "./pr-thread-view";
 export type {
   PrThreadRole,
   PrThreadStatus,
diff --git a/packages/chat-ui/src/inference-failure.test.ts b/packages/chat-ui/src/inference-failure.test.ts
index 370a0fc85a..5813b35f57 100644
--- a/packages/chat-ui/src/inference-failure.test.ts
+++ b/packages/chat-ui/src/inference-failure.test.ts
@@ -91,11 +91,9 @@ describe("isClassifiedInferenceFailureText", () => {
         "This agent could not complete your request due to an unrecoverable inference error [HTTP 402]: payment required",
       ),
     ).toBe(false);
-    expect(
-      isClassifiedInferenceFailureText(
-        "This agent's inference request was aborted",
-      ),
-    ).toBe(false);
+    expect(isClassifiedInferenceFailureText("This agent's inference request was aborted")).toBe(
+      false,
+    );
   });
 
   test("does not match an ordinary agent reply, even one that mentions credentials mid-sentence", () => {
@@ -104,8 +102,6 @@ describe("isClassifiedInferenceFailureText", () => {
         "I'd due to a credential error need your API key to continue.",
       ),
     ).toBe(false);
-    expect(
-      isClassifiedInferenceFailureText("Here are the results you asked for."),
-    ).toBe(false);
+    expect(isClassifiedInferenceFailureText("Here are the results you asked for.")).toBe(false);
   });
 });
diff --git a/packages/chat-ui/src/inference-failure.ts b/packages/chat-ui/src/inference-failure.ts
index 7948604441..f4f7202b5d 100644
--- a/packages/chat-ui/src/inference-failure.ts
+++ b/packages/chat-ui/src/inference-failure.ts
@@ -35,7 +35,5 @@ export {
 } from "./wire/consumer-inference-text";
 
 export function isClassifiedInferenceFailureText(text: string): boolean {
-  return CLASSIFIED_INFERENCE_FAILURE_PREAMBLES.some((preamble) =>
-    text.startsWith(preamble),
-  );
+  return CLASSIFIED_INFERENCE_FAILURE_PREAMBLES.some((preamble) => text.startsWith(preamble));
 }
diff --git a/packages/chat-ui/src/invite-agent-dialog.tsx b/packages/chat-ui/src/invite-agent-dialog.tsx
index f718152b62..976e6bede2 100644
--- a/packages/chat-ui/src/invite-agent-dialog.tsx
+++ b/packages/chat-ui/src/invite-agent-dialog.tsx
@@ -118,17 +118,14 @@ export function InviteAgentDialog({
   }
 
   const jimmyMissing =
-    state.kind === "ready" &&
-    !state.items.some((item) => item.name === JIMMY_QUICK_CREATE.handle);
+    state.kind === "ready" && !state.items.some((item) => item.name === JIMMY_QUICK_CREATE.handle);
 
   return (
     <Dialog open={open} onOpenChange={onOpenChange}>
       <DialogContent side="right">
         <DialogHeader>
           <DialogTitle>{CHAT_STRINGS.inviteAgentDialogTitle}</DialogTitle>
-          <DialogDescription>
-            {CHAT_STRINGS.inviteAgentDialogDescription}
-          </DialogDescription>
+          <DialogDescription>{CHAT_STRINGS.inviteAgentDialogDescription}</DialogDescription>
         </DialogHeader>
         <DialogBody>
           {inviteError !== null && (
@@ -171,9 +168,7 @@ export function InviteAgentDialog({
                     className="chat-invitable-item"
                     data-testid="invitable-definition"
                   >
-                    <span className="chat-invitable-item-name">
-                      {displayName}
-                    </span>
+                    <span className="chat-invitable-item-name">{displayName}</span>
                     <Button
                       variant="outline"
                       size="sm"
@@ -188,10 +183,7 @@ export function InviteAgentDialog({
                 );
               })}
               {jimmyMissing && (
-                <li
-                  className="chat-invitable-item"
-                  data-testid="quick-create-jimmy"
-                >
+                <li className="chat-invitable-item" data-testid="quick-create-jimmy">
                   <span className="chat-invitable-item-info">
                     <span className="chat-invitable-item-name">
                       {JIMMY_QUICK_CREATE.name}
diff --git a/packages/chat-ui/src/mailbox-timeline.test.ts b/packages/chat-ui/src/mailbox-timeline.test.ts
index 440f4dd6f5..f4de07ecfd 100644
--- a/packages/chat-ui/src/mailbox-timeline.test.ts
+++ b/packages/chat-ui/src/mailbox-timeline.test.ts
@@ -7,8 +7,7 @@ import {
 } from "./mailbox-timeline";
 
 function message(
-  overrides: Partial<MailboxThreadMessage> &
-    Pick<MailboxThreadMessage, "id" | "messageId">,
+  overrides: Partial<MailboxThreadMessage> & Pick<MailboxThreadMessage, "id" | "messageId">,
 ): MailboxThreadMessage {
   return {
     references: [],
diff --git a/packages/chat-ui/src/mailbox-timeline.ts b/packages/chat-ui/src/mailbox-timeline.ts
index ed6e62db0f..5325eb3e3a 100644
--- a/packages/chat-ui/src/mailbox-timeline.ts
+++ b/packages/chat-ui/src/mailbox-timeline.ts
@@ -80,9 +80,7 @@ async function mailboxRequest<T>(
   try {
     response = await fetch(path);
   } catch (cause) {
-    throw new MailboxThreadFetchError(
-      cause instanceof Error ? cause.message : String(cause),
-    );
+    throw new MailboxThreadFetchError(cause instanceof Error ? cause.message : String(cause));
   }
   if (!response.ok) {
     throw new MailboxThreadFetchError(
@@ -130,13 +128,9 @@ export function threadMessagesToTimeline(
 
   return messages.map((message) => {
     const parentId =
-      message.inReplyTo !== undefined
-        ? idByMessageId.get(message.inReplyTo)
-        : undefined;
+      message.inReplyTo !== undefined ? idByMessageId.get(message.inReplyTo) : undefined;
     const text =
-      message.subject !== undefined &&
-      message.subject !== null &&
-      message.subject.length > 0
+      message.subject !== undefined && message.subject !== null && message.subject.length > 0
         ? `${message.subject}\n${message.body}`
         : message.body;
     return {
diff --git a/packages/chat-ui/src/markdown.tsx b/packages/chat-ui/src/markdown.tsx
index 2f3f994147..7613dcfdb7 100644
--- a/packages/chat-ui/src/markdown.tsx
+++ b/packages/chat-ui/src/markdown.tsx
@@ -40,13 +40,7 @@ function renderInline(text: string, keyPrefix: string): ReactNode[] {
       const label = token.slice(1, closeBracket);
       const href = token.slice(closeBracket + 2, -1);
       nodes.push(
-        <a
-          key={key}
-          href={href}
-          target="_blank"
-          rel="noopener noreferrer"
-          className="chat-md-link"
-        >
+        <a key={key} href={href} target="_blank" rel="noopener noreferrer" className="chat-md-link">
           {label}
         </a>,
       );
@@ -81,10 +75,7 @@ function parseBlocks(source: string): Block[] {
     if (line.trim().startsWith("```")) {
       const codeLines: string[] = [];
       index++;
-      while (
-        index < lines.length &&
-        !(lines[index] ?? "").trim().startsWith("```")
-      ) {
+      while (index < lines.length && !(lines[index] ?? "").trim().startsWith("```")) {
         codeLines.push(lines[index] ?? "");
         index++;
       }
@@ -174,9 +165,7 @@ export function Markdown({ text }: { readonly text: string }) {
           return (
             <ListTag key={key} className="chat-md-list">
               {block.items.map((item, itemIndex) => (
-                <li key={`${key}-${itemIndex}`}>
-                  {renderInline(item, `${key}-${itemIndex}`)}
-                </li>
+                <li key={`${key}-${itemIndex}`}>{renderInline(item, `${key}-${itemIndex}`)}</li>
               ))}
             </ListTag>
           );
diff --git a/packages/chat-ui/src/mentions.ts b/packages/chat-ui/src/mentions.ts
index bcd69043d8..0292df520e 100644
--- a/packages/chat-ui/src/mentions.ts
+++ b/packages/chat-ui/src/mentions.ts
@@ -17,10 +17,7 @@
 import { isAgentAddress } from "./wire/mentions";
 import { handleFromName } from "./wire/participants";
 import type { ParticipantRecord } from "./api";
-import {
-  displayNameForAddress,
-  type AgentDisplayNames,
-} from "./agent-display-names";
+import { displayNameForAddress, type AgentDisplayNames } from "./agent-display-names";
 
 export type MentionCandidate = {
   readonly id: string;
@@ -36,9 +33,7 @@ export type MentionCandidate = {
 function readableLabel(handle: string): string {
   const words = handle.split(/[-_]+/).filter((word) => word.length > 0);
   if (words.length === 0) return handle;
-  return words
-    .map((word) => word.charAt(0).toUpperCase() + word.slice(1))
-    .join(" ");
+  return words.map((word) => word.charAt(0).toUpperCase() + word.slice(1)).join(" ");
 }
 
 /**
@@ -127,9 +122,7 @@ export function bringInOptionsFromMembersAndAgents(
   invitableAgents: readonly BringInAgentDefinition[],
   participants: readonly ParticipantRecord[],
 ): readonly MentionOption[] {
-  const participantAddresses = new Set(
-    participants.map((participant) => participant.address),
-  );
+  const participantAddresses = new Set(participants.map((participant) => participant.address));
   const people: MentionOption[] = members
     .filter((member) => !participantAddresses.has(member.id))
     .map((member) => {
@@ -189,19 +182,10 @@ export function mentionOptionsFromWorkbench(
         label: readableLabel(participant.handle),
       },
     }));
-  const bringIn = bringInOptionsFromMembersAndAgents(
-    members,
-    invitableAgents,
-    participants,
-  );
+  const bringIn = bringInOptionsFromMembersAndAgents(members, invitableAgents, participants);
   const bringInAgents = bringIn.filter((option) => option.section === "agents");
   const bringInPeople = bringIn.filter((option) => option.section === "people");
-  return [
-    ...agentParticipants,
-    ...bringInAgents,
-    ...peopleParticipants,
-    ...bringInPeople,
-  ];
+  return [...agentParticipants, ...bringInAgents, ...peopleParticipants, ...bringInPeople];
 }
 
 /**
@@ -234,10 +218,7 @@ export type MentionQuery = {
  * caret. Returns `null` when the caret is not inside one — including right
  * after a mention that was closed by a space.
  */
-export function activeMentionQuery(
-  text: string,
-  caret: number,
-): MentionQuery | null {
+export function activeMentionQuery(text: string, caret: number): MentionQuery | null {
   const upToCaret = text.slice(0, caret);
   const at = upToCaret.lastIndexOf("@");
   if (at === -1) return null;
@@ -305,9 +286,7 @@ type BringInQuerySlice<T> = {
  */
 export function resolveBringInLists(input: {
   readonly members: BringInQuerySlice<readonly BringInMember[]>;
-  readonly invitableAgents: BringInQuerySlice<
-    readonly BringInAgentDefinition[]
-  >;
+  readonly invitableAgents: BringInQuerySlice<readonly BringInAgentDefinition[]>;
 }): {
   readonly members: readonly BringInMember[];
   readonly invitableAgents: readonly BringInAgentDefinition[];
@@ -319,9 +298,7 @@ export function resolveBringInLists(input: {
   if (input.invitableAgents.isError) failures.push("invitableAgents");
   return {
     members: input.members.isError ? [] : (input.members.data ?? []),
-    invitableAgents: input.invitableAgents.isError
-      ? []
-      : (input.invitableAgents.data ?? []),
+    invitableAgents: input.invitableAgents.isError ? [] : (input.invitableAgents.data ?? []),
     failures,
     firstError:
       failures[0] === "members"
diff --git a/packages/chat-ui/src/no-usable-model-banner.tsx b/packages/chat-ui/src/no-usable-model-banner.tsx
index 417c059343..6873ed861f 100644
--- a/packages/chat-ui/src/no-usable-model-banner.tsx
+++ b/packages/chat-ui/src/no-usable-model-banner.tsx
@@ -9,23 +9,12 @@ import { Button } from "@corbits/react-ui";
 import { WarningCircle } from "@corbits/icons";
 import { CHAT_STRINGS } from "./strings";
 
-export function NoUsableModelBanner({
-  onConnectModel,
-}: {
-  readonly onConnectModel: () => void;
-}) {
+export function NoUsableModelBanner({ onConnectModel }: { readonly onConnectModel: () => void }) {
   return (
     <div className="chat-no-model-banner" role="status">
       <WarningCircle aria-hidden="true" />
-      <span className="chat-no-model-banner-text">
-        {CHAT_STRINGS.noUsableModelBannerText}
-      </span>
-      <Button
-        type="button"
-        variant="outline"
-        size="sm"
-        onClick={onConnectModel}
-      >
+      <span className="chat-no-model-banner-text">{CHAT_STRINGS.noUsableModelBannerText}</span>
+      <Button type="button" variant="outline" size="sm" onClick={onConnectModel}>
         {CHAT_STRINGS.noUsableModelBannerAction}
       </Button>
     </div>
diff --git a/packages/chat-ui/src/pr-thread-view.tsx b/packages/chat-ui/src/pr-thread-view.tsx
index 73e07f7ba7..740998550b 100644
--- a/packages/chat-ui/src/pr-thread-view.tsx
+++ b/packages/chat-ui/src/pr-thread-view.tsx
@@ -115,8 +115,7 @@ export type PrThreadViewProps = {
 function initialsFromName(name: string): string {
   const parts = name.trim().split(/\s+/).filter(Boolean);
   const first = parts[0]?.[0] ?? "";
-  const second =
-    parts.length > 1 ? (parts[1]?.[0] ?? "") : (parts[0]?.[1] ?? "");
+  const second = parts.length > 1 ? (parts[1]?.[0] ?? "") : (parts[0]?.[1] ?? "");
   return `${first}${second}`.toUpperCase();
 }
 
@@ -158,21 +157,14 @@ function RoleBadge({ role }: { readonly role: PrThreadRole }) {
   if (role === "human") return null;
   return (
     <span className="chat-pr-role-badge" data-role={role}>
-      {role === "host"
-        ? CHAT_STRINGS.prThreadHostBadge
-        : CHAT_STRINGS.prThreadReviewerBadge}
+      {role === "host" ? CHAT_STRINGS.prThreadHostBadge : CHAT_STRINGS.prThreadReviewerBadge}
     </span>
   );
 }
 
 function TraceButton({ trace }: { readonly trace: PrThreadTrace }) {
   return (
-    <Button
-      type="button"
-      variant="link"
-      className="chat-pr-trace"
-      onClick={trace.onViewWork}
-    >
+    <Button type="button" variant="link" className="chat-pr-trace" onClick={trace.onViewWork}>
       {CHAT_STRINGS.prThreadViewWork(trace.stepCount, trace.seconds)}
     </Button>
   );
@@ -188,11 +180,7 @@ function SuggestedFixBlock({ fix }: { readonly fix: PrThreadSuggestedFix }) {
       <div className="chat-pr-fix-code">
         <pre>
           {fix.lines.map((line, index) => (
-            <span
-              key={`${fix.file}-${index}`}
-              className="chat-pr-fix-line"
-              data-kind={line.kind}
-            >
+            <span key={`${fix.file}-${index}`} className="chat-pr-fix-line" data-kind={line.kind}>
               {line.text}
               {"\n"}
             </span>
@@ -200,20 +188,10 @@ function SuggestedFixBlock({ fix }: { readonly fix: PrThreadSuggestedFix }) {
         </pre>
       </div>
       <div className="chat-pr-fix-actions">
-        <Button
-          type="button"
-          variant="secondary"
-          size="sm"
-          onClick={fix.onCopy}
-        >
+        <Button type="button" variant="secondary" size="sm" onClick={fix.onCopy}>
           {CHAT_STRINGS.prThreadCopyAction}
         </Button>
-        <Button
-          type="button"
-          variant="secondary"
-          size="sm"
-          onClick={fix.onOpenOnGithub}
-        >
+        <Button type="button" variant="secondary" size="sm" onClick={fix.onOpenOnGithub}>
           {CHAT_STRINGS.prThreadOpenOnGithubAction}
         </Button>
       </div>
@@ -238,11 +216,7 @@ function ReplyRow({ reply }: { readonly reply: PrThreadReply }) {
           className={avatarClassForPrincipal(reply.sender)}
         />
       ) : (
-        <CorbitAvatar
-          ariaLabel={reply.sender}
-          size="lg"
-          className="sender-avatar"
-        />
+        <CorbitAvatar ariaLabel={reply.sender} size="lg" className="sender-avatar" />
       )}
       <div className="chat-pr-reply-body">
         <div className="chat-pr-reply-head">
@@ -253,38 +227,25 @@ function ReplyRow({ reply }: { readonly reply: PrThreadReply }) {
         <div className="chat-pr-reply-text">
           <Markdown text={reply.text} />
         </div>
-        {reply.suggestedFix !== undefined && (
-          <SuggestedFixBlock fix={reply.suggestedFix} />
-        )}
+        {reply.suggestedFix !== undefined && <SuggestedFixBlock fix={reply.suggestedFix} />}
         {reply.trace !== undefined && <TraceButton trace={reply.trace} />}
       </div>
     </div>
   );
 }
 
-export function PrFailedTurnStrip({
-  failedTurn,
-}: {
-  readonly failedTurn: PrThreadFailedTurn;
-}) {
+export function PrFailedTurnStrip({ failedTurn }: { readonly failedTurn: PrThreadFailedTurn }) {
   return (
     <div className="chat-pr-failed" role="status">
       <span className="chat-pr-failed-text">
         <strong>
-          {failedTurn.titleText ??
-            CHAT_STRINGS.prThreadFailedTitle(failedTurn.sender)}
+          {failedTurn.titleText ?? CHAT_STRINGS.prThreadFailedTitle(failedTurn.sender)}
         </strong>
         <span className="chat-pr-failed-sub">
-          {failedTurn.subText ??
-            CHAT_STRINGS.prThreadFailedSub(failedTurn.repo)}
+          {failedTurn.subText ?? CHAT_STRINGS.prThreadFailedSub(failedTurn.repo)}
         </span>
       </span>
-      <Button
-        type="button"
-        variant="secondary"
-        size="sm"
-        onClick={failedTurn.onRetry}
-      >
+      <Button type="button" variant="secondary" size="sm" onClick={failedTurn.onRetry}>
         {CHAT_STRINGS.prThreadRetryAction}
       </Button>
       <Button
@@ -321,11 +282,7 @@ function ThreadFooter({ footer }: { readonly footer: PrThreadFooter }) {
     <footer className="chat-pr-foot">
       <span className="chat-pr-wait-avatars" aria-hidden="true">
         {footer.nextReviewers.map((reviewer) => (
-          <CorbitAvatar
-            key={reviewer.label}
-            ariaLabel={reviewer.label}
-            size="sm"
-          />
+          <CorbitAvatar key={reviewer.label} ariaLabel={reviewer.label} size="sm" />
         ))}
       </span>
       <span className="chat-pr-foot-text">
@@ -365,10 +322,9 @@ export function PrThreadView({
         {replies.map((reply) => (
           <Fragment key={reply.id}>
             <ReplyRow reply={reply} />
-            {failedTurn !== undefined &&
-              failedTurn.afterReplyId === reply.id && (
-                <PrFailedTurnStrip failedTurn={failedTurn} />
-              )}
+            {failedTurn !== undefined && failedTurn.afterReplyId === reply.id && (
+              <PrFailedTurnStrip failedTurn={failedTurn} />
+            )}
           </Fragment>
         ))}
       </div>
diff --git a/packages/chat-ui/src/profile-subject.ts b/packages/chat-ui/src/profile-subject.ts
index 2dc0b46b7d..f1312f8932 100644
--- a/packages/chat-ui/src/profile-subject.ts
+++ b/packages/chat-ui/src/profile-subject.ts
@@ -20,17 +20,12 @@ function initialsOf(source: string): string {
     .filter((word) => word.length > 0);
   if (words.length === 0) return "?";
   const first = words[0]?.charAt(0) ?? "";
-  const second =
-    words.length > 1
-      ? (words[1]?.charAt(0) ?? "")
-      : (words[0]?.charAt(1) ?? "");
+  const second = words.length > 1 ? (words[1]?.charAt(0) ?? "") : (words[0]?.charAt(1) ?? "");
   const initials = `${first}${second}`.toUpperCase();
   return initials.length > 0 ? initials : "?";
 }
 
-export function profileSubjectFromParticipant(
-  participant: ParticipantRecord,
-): ProfileSubject {
+export function profileSubjectFromParticipant(participant: ParticipantRecord): ProfileSubject {
   const isAgent = isAgentAddress(participant.address);
   const displayName = isAgent ? `@${participant.handle}` : participant.handle;
   return {
diff --git a/packages/chat-ui/src/shared-workbenches.test.ts b/packages/chat-ui/src/shared-workbenches.test.ts
index c62bdb84d7..db890d5379 100644
--- a/packages/chat-ui/src/shared-workbenches.test.ts
+++ b/packages/chat-ui/src/shared-workbenches.test.ts
@@ -3,11 +3,7 @@ import { describe, expect, test } from "bun:test";
 import { sharedWorkbenchesWith } from "./shared-workbenches";
 import type { Workbench } from "./api";
 
-function workbench(
-  id: string,
-  title: string,
-  participantAddresses: readonly string[],
-): Workbench {
+function workbench(id: string, title: string, participantAddresses: readonly string[]): Workbench {
   return {
     id,
     title,
@@ -28,25 +24,15 @@ describe("sharedWorkbenchesWith", () => {
       workbench("c3", "Subject only", ["subject@x.dev", "someone-else@x.dev"]),
     ];
 
-    const result = sharedWorkbenchesWith(
-      workbenches,
-      "viewer",
-      "subject@x.dev",
-    );
+    const result = sharedWorkbenchesWith(workbenches, "viewer", "subject@x.dev");
 
     expect(result.map((c) => c.id)).toEqual(["c1"]);
   });
 
   test("matches the viewer by principal id against the participant address's local part", () => {
-    const workbenches = [
-      workbench("c1", "DM", ["ins_abc@x.dev", "viewer@x.dev"]),
-    ];
+    const workbenches = [workbench("c1", "DM", ["ins_abc@x.dev", "viewer@x.dev"])];
 
-    const result = sharedWorkbenchesWith(
-      workbenches,
-      "viewer",
-      "ins_abc@x.dev",
-    );
+    const result = sharedWorkbenchesWith(workbenches, "viewer", "ins_abc@x.dev");
 
     expect(result).toHaveLength(1);
   });
@@ -56,44 +42,24 @@ describe("sharedWorkbenchesWith", () => {
       workbench(`c${i}`, `Workbench ${i}`, ["viewer@x.dev", "subject@x.dev"]),
     );
 
-    expect(
-      sharedWorkbenchesWith(workbenches, "viewer", "subject@x.dev"),
-    ).toHaveLength(4);
-    expect(
-      sharedWorkbenchesWith(workbenches, "viewer", "subject@x.dev", 2),
-    ).toHaveLength(2);
+    expect(sharedWorkbenchesWith(workbenches, "viewer", "subject@x.dev")).toHaveLength(4);
+    expect(sharedWorkbenchesWith(workbenches, "viewer", "subject@x.dev", 2)).toHaveLength(2);
   });
 
   test("reports each shared workbench's title and member count", () => {
     const workbenches = [
-      workbench("c1", "Launch planning", [
-        "viewer@x.dev",
-        "subject@x.dev",
-        "third@x.dev",
-      ]),
+      workbench("c1", "Launch planning", ["viewer@x.dev", "subject@x.dev", "third@x.dev"]),
     ];
 
-    const result = sharedWorkbenchesWith(
-      workbenches,
-      "viewer",
-      "subject@x.dev",
-    );
+    const result = sharedWorkbenchesWith(workbenches, "viewer", "subject@x.dev");
 
-    expect(result).toEqual([
-      { id: "c1", title: "Launch planning", memberCount: 3 },
-    ]);
+    expect(result).toEqual([{ id: "c1", title: "Launch planning", memberCount: 3 }]);
   });
 
   test("falls back to a placeholder title for an untitled workbench", () => {
-    const workbenches = [
-      workbench("c1", "", ["viewer@x.dev", "subject@x.dev"]),
-    ];
+    const workbenches = [workbench("c1", "", ["viewer@x.dev", "subject@x.dev"])];
 
-    const result = sharedWorkbenchesWith(
-      workbenches,
-      "viewer",
-      "subject@x.dev",
-    );
+    const result = sharedWorkbenchesWith(workbenches, "viewer", "subject@x.dev");
 
     expect(result[0]?.title).toBe("Untitled conversation");
   });
diff --git a/packages/chat-ui/src/shared-workbenches.ts b/packages/chat-ui/src/shared-workbenches.ts
index b6f20e0642..e06b7bdaeb 100644
--- a/packages/chat-ui/src/shared-workbenches.ts
+++ b/packages/chat-ui/src/shared-workbenches.ts
@@ -42,10 +42,7 @@ export function sharedWorkbenchesWith(
     .slice(0, limit)
     .map((workbench) => ({
       id: workbench.id,
-      title:
-        workbench.title.trim().length > 0
-          ? workbench.title
-          : "Untitled conversation",
+      title: workbench.title.trim().length > 0 ? workbench.title : "Untitled conversation",
       memberCount: workbench.participants.length,
     }));
 }
diff --git a/packages/chat-ui/src/sidebar.tsx b/packages/chat-ui/src/sidebar.tsx
index 209e22d93d..79646a94f2 100644
--- a/packages/chat-ui/src/sidebar.tsx
+++ b/packages/chat-ui/src/sidebar.tsx
@@ -25,10 +25,7 @@ export function rowMenuLabels(
  * title) — the caller's cue to treat the rename as a no-op cancel rather
  * than an empty-name PATCH.
  */
-export function renamePayload(
-  input: string,
-  currentTitle: string,
-): string | undefined {
+export function renamePayload(input: string, currentTitle: string): string | undefined {
   const trimmed = input.trim();
   if (trimmed.length === 0 || trimmed === currentTitle) return undefined;
   return trimmed;
diff --git a/packages/chat-ui/src/slash-commands.test.ts b/packages/chat-ui/src/slash-commands.test.ts
index bdb6a5f2d2..872bf2e031 100644
--- a/packages/chat-ui/src/slash-commands.test.ts
+++ b/packages/chat-ui/src/slash-commands.test.ts
@@ -1,10 +1,6 @@
 import { describe, expect, test } from "bun:test";
 
-import {
-  SLASH_COMMANDS,
-  activeSlashQuery,
-  filterSlashCommands,
-} from "./slash-commands";
+import { SLASH_COMMANDS, activeSlashQuery, filterSlashCommands } from "./slash-commands";
 
 describe("activeSlashQuery", () => {
   test("detects an open command right after the /", () => {
diff --git a/packages/chat-ui/src/slash-commands.ts b/packages/chat-ui/src/slash-commands.ts
index fdb5bc8adc..26670f3ca0 100644
--- a/packages/chat-ui/src/slash-commands.ts
+++ b/packages/chat-ui/src/slash-commands.ts
@@ -10,8 +10,7 @@
 // and are omitted rather than wired to a no-op — a command that appears
 // in the popover promises a real action.
 
-export type SlashCommandId =
-  "invite" | "summarize" | "routine" | "agents" | "help";
+export type SlashCommandId = "invite" | "summarize" | "routine" | "agents" | "help";
 
 export type SlashCommandSpec = {
   readonly id: SlashCommandId;
@@ -57,10 +56,7 @@ export type SlashQuery = {
  * command — with the caret inside it and no whitespace since. Returns null
  * everywhere else, including once the token is closed by a space.
  */
-export function activeSlashQuery(
-  text: string,
-  caret: number,
-): SlashQuery | null {
+export function activeSlashQuery(text: string, caret: number): SlashQuery | null {
   if (text.charAt(0) !== "/") return null;
   const upToCaret = text.slice(0, caret);
   if (!/^\/[\w-]*$/.test(upToCaret)) return null;
@@ -71,9 +67,7 @@ export function activeSlashQuery(
  * Commands whose id starts with the query, case-insensitively. An empty
  * query matches every command — the popover opens on a bare "/".
  */
-export function filterSlashCommands(
-  query: string,
-): readonly SlashCommandSpec[] {
+export function filterSlashCommands(query: string): readonly SlashCommandSpec[] {
   const needle = query.toLowerCase();
   return SLASH_COMMANDS.filter((command) => command.id.startsWith(needle));
 }
diff --git a/packages/chat-ui/src/streaming-reply.test.ts b/packages/chat-ui/src/streaming-reply.test.ts
index 6bad4bd3c8..a1f28d680a 100644
--- a/packages/chat-ui/src/streaming-reply.test.ts
+++ b/packages/chat-ui/src/streaming-reply.test.ts
@@ -35,9 +35,7 @@ function awaiting(text: string) {
 
 describe("nextStreamingReplyState (CL-6115: token deltas fold into a growing reply)", () => {
   test("a non chat.agent event never opens or changes the reply", () => {
-    expect(
-      nextStreamingReplyState(null, { eventType: "chat.typing", data: {} }),
-    ).toBeNull();
+    expect(nextStreamingReplyState(null, { eventType: "chat.typing", data: {} })).toBeNull();
     const current = awaiting("hi");
     expect(
       nextStreamingReplyState(current, {
@@ -144,30 +142,21 @@ describe("nextStreamingReplyState (CL-6115: token deltas fold into a growing rep
 
   test("reactor.start opens an empty reply when idle — the turn began before any tokens", () => {
     expect(
-      nextStreamingReplyState(
-        null,
-        agentEvent({ type: "reactor.start", seq: 0, data: {} }),
-      ),
+      nextStreamingReplyState(null, agentEvent({ type: "reactor.start", seq: 0, data: {} })),
     ).toEqual(AWAITING_EMPTY);
   });
 
   test("reactor.start never resets an in-progress reply", () => {
     const state = awaiting("Hello");
     expect(
-      nextStreamingReplyState(
-        state,
-        agentEvent({ type: "reactor.start", seq: 9, data: {} }),
-      ),
+      nextStreamingReplyState(state, agentEvent({ type: "reactor.start", seq: 9, data: {} })),
     ).toBe(state);
   });
 
   test("reactor.done and reactor.error clear the reply — the whole turn is over", () => {
     for (const type of ["reactor.done", "reactor.error"]) {
       expect(
-        nextStreamingReplyState(
-          awaiting("Hello"),
-          agentEvent({ type, seq: 10, data: {} }),
-        ),
+        nextStreamingReplyState(awaiting("Hello"), agentEvent({ type, seq: 10, data: {} })),
       ).toBeNull();
     }
   });
@@ -193,9 +182,7 @@ describe("nextStreamingReplyState (CL-6376: the typing pulse clears on a dispatc
         eventType: "chat.message",
         data: {
           id: "msg_1",
-          parts: [
-            { kind: "text", text: "I didn't get that one", turnFailed: true },
-          ],
+          parts: [{ kind: "text", text: "I didn't get that one", turnFailed: true }],
         },
       }),
     ).toBeNull();
@@ -319,10 +306,7 @@ describe("nextStreamingReplyState (CL-7201: the typing pulse clears on a user ca
         ],
       },
     });
-    state = nextStreamingReplyState(
-      state,
-      agentEvent({ type: "reactor.start", seq: 0, data: {} }),
-    );
+    state = nextStreamingReplyState(state, agentEvent({ type: "reactor.start", seq: 0, data: {} }));
     expect(isPendingReply(state)).toBe(false);
     expect(isAwaitingReply(state)).toBe(false);
   });
@@ -368,9 +352,7 @@ describe("nextStreamingReplyState (CL-false-no-reply: rendered content, not a li
         data: {
           id: "msg_1",
           sender: { name: null, address: MYRA.address },
-          parts: [
-            { kind: "text", text: "I didn't get that one", turnFailed: true },
-          ],
+          parts: [{ kind: "text", text: "I didn't get that one", turnFailed: true }],
         },
       }),
     ).toBeNull();
@@ -485,10 +467,7 @@ describe("nextStreamingReplyState (CL-6432 reopened: a folded run parks after th
       agentEvent({ type: "inference.start", seq: 1, data: { model: "x" } }),
     );
     expect(isPendingReply(state)).toBe(true);
-    state = nextStreamingReplyState(
-      state,
-      delta("Hey! What are you working on right now?"),
-    );
+    state = nextStreamingReplyState(state, delta("Hey! What are you working on right now?"));
     state = nextStreamingReplyState(
       state,
       agentEvent({
@@ -592,9 +571,7 @@ describe("typingAgentNames", () => {
 
   test('a slugified handle is shown as a display name — "myra" reads "Myra"', () => {
     expect(
-      typingAgentNames(awaiting(""), [
-        { address: "myra@agents.example", handle: "myra" },
-      ]),
+      typingAgentNames(awaiting(""), [{ address: "myra@agents.example", handle: "myra" }]),
     ).toEqual(["Myra"]);
   });
 
@@ -626,11 +603,7 @@ describe("typingAgentNames", () => {
 
   test("a 1:1 with no mention still names the only agent", () => {
     expect(
-      typingAgentNames(
-        awaiting(""),
-        [HUMAN, MYRA],
-        [{ kind: "text", text: "hello" }],
-      ),
+      typingAgentNames(awaiting(""), [HUMAN, MYRA], [{ kind: "text", text: "hello" }]),
     ).toEqual(["Myra"]);
   });
 
@@ -702,14 +675,12 @@ describe("hydrateStreamingReplyFromTurn (CL-6380: reattach snapshot)", () => {
   });
 
   test("a running turn with committed text opens the reply carrying it", () => {
-    expect(
-      hydrateStreamingReplyFromTurn({ textSnapshot: "streamed so far" }),
-    ).toEqual(awaiting("streamed so far"));
+    expect(hydrateStreamingReplyFromTurn({ textSnapshot: "streamed so far" })).toEqual(
+      awaiting("streamed so far"),
+    );
   });
 
   test("a running turn with no text yet opens the same empty pending pulse as openPendingReply", () => {
-    expect(hydrateStreamingReplyFromTurn({ textSnapshot: null })).toEqual(
-      AWAITING_EMPTY,
-    );
+    expect(hydrateStreamingReplyFromTurn({ textSnapshot: null })).toEqual(AWAITING_EMPTY);
   });
 });
diff --git a/packages/chat-ui/src/streaming-reply.ts b/packages/chat-ui/src/streaming-reply.ts
index 029fad08ab..e99d4e8d83 100644
--- a/packages/chat-ui/src/streaming-reply.ts
+++ b/packages/chat-ui/src/streaming-reply.ts
@@ -17,10 +17,7 @@ import { isAgentAddress, mentionedParticipants } from "./wire/mentions";
 import { reportError } from "@corbits/error-sink";
 import type { Part, ParticipantRecord } from "./api";
 import { REAL_CLOCK, type Clock } from "./clock";
-import {
-  displayNameForAddress,
-  type AgentDisplayNames,
-} from "./agent-display-names";
+import { displayNameForAddress, type AgentDisplayNames } from "./agent-display-names";
 import { displayNameFromHandle } from "./timeline";
 
 /**
@@ -205,11 +202,7 @@ export function nextStreamingReplyState(
   if (event.eventType === "chat.message") {
     if (hasTurnCancelledPart(event.data)) return REPLIED;
     if (hasTurnFailedPart(event.data)) return null;
-    if (
-      current !== null &&
-      current.phase === "awaiting" &&
-      isRenderedAgentReply(event.data)
-    ) {
+    if (current !== null && current.phase === "awaiting" && isRenderedAgentReply(event.data)) {
       return REPLIED;
     }
     return current;
@@ -260,9 +253,7 @@ export function nextStreamingReplyState(
  * even though no `reactor.start` has streamed yet. Never resets a reply
  * already streaming.
  */
-export function openPendingReply(
-  current: StreamingReplyState,
-): StreamingReplyState {
+export function openPendingReply(current: StreamingReplyState): StreamingReplyState {
   // A `"replied"` previous turn is over — the send that called this opens
   // the next one, so the pulse comes back.
   if (current === null || current.phase === "replied") return awaiting("");
@@ -325,15 +316,10 @@ export function useStreamingReply(
   readonly handleStreamEvent: (eventType: string, data: unknown) => void;
   readonly noteAwaitingReply: () => void;
   /** See `resumeFromTurn`'s own doc comment below. */
-  readonly resumeFromTurn: (
-    runningTurn: { readonly textSnapshot?: string | null } | null,
-  ) => void;
+  readonly resumeFromTurn: (runningTurn: { readonly textSnapshot?: string | null } | null) => void;
 } {
-  const [streamingReply, setStreamingReply] =
-    useState<StreamingReplyState>(null);
-  const [replyTimedOutRefId, setReplyTimedOutRefId] = useState<string | null>(
-    null,
-  );
+  const [streamingReply, setStreamingReply] = useState<StreamingReplyState>(null);
+  const [replyTimedOutRefId, setReplyTimedOutRefId] = useState<string | null>(null);
   const pendingSinceRef = useRef<number | null>(null);
   const holdTimerRef = useRef<unknown>(null);
 
@@ -394,8 +380,7 @@ export function useStreamingReply(
       pendingSinceRef.current !== null &&
       now - pendingSinceRef.current < minVisibleMs
     ) {
-      if (holdTimerRef.current !== null)
-        clock.clearTimeout(holdTimerRef.current);
+      if (holdTimerRef.current !== null) clock.clearTimeout(holdTimerRef.current);
       const remaining = minVisibleMs - (now - pendingSinceRef.current);
       const held = next;
       holdTimerRef.current = clock.setTimeout(() => {
@@ -417,18 +402,13 @@ export function useStreamingReply(
   function handleStreamEvent(eventType: string, data: unknown) {
     setReplyTimedOutRefId(null);
     setStreamingReply((current) =>
-      commitReply(
-        nextStreamingReplyState(current, { eventType, data }),
-        current,
-      ),
+      commitReply(nextStreamingReplyState(current, { eventType, data }), current),
     );
   }
 
   function noteAwaitingReply() {
     setReplyTimedOutRefId(null);
-    setStreamingReply((current) =>
-      commitReply(openPendingReply(current), current),
-    );
+    setStreamingReply((current) => commitReply(openPendingReply(current), current));
   }
 
   /**
@@ -441,14 +421,10 @@ export function useStreamingReply(
    * must never clear a reply a fast SSE `reactor.start` already opened
    * while the snapshot fetch was in flight.
    */
-  function resumeFromTurn(
-    runningTurn: { readonly textSnapshot?: string | null } | null,
-  ) {
+  function resumeFromTurn(runningTurn: { readonly textSnapshot?: string | null } | null) {
     if (runningTurn === null) return;
     setReplyTimedOutRefId(null);
-    setStreamingReply(
-      (current) => current ?? hydrateStreamingReplyFromTurn(runningTurn),
-    );
+    setStreamingReply((current) => current ?? hydrateStreamingReplyFromTurn(runningTurn));
   }
 
   return {
@@ -475,13 +451,10 @@ export function typingAgentNames(
   displayNames?: AgentDisplayNames,
 ): readonly string[] {
   if (!isPendingReply(streamingReply)) return [];
-  const agents = participants.filter((participant) =>
-    isAgentAddress(participant.address),
-  );
+  const agents = participants.filter((participant) => isAgentAddress(participant.address));
   if (agents.length === 0) return [];
 
-  const addressed =
-    parts === undefined ? [] : mentionedParticipants(parts, participants);
+  const addressed = parts === undefined ? [] : mentionedParticipants(parts, participants);
   const named =
     addressed.length > 0
       ? agents.filter((agent) => addressed.includes(agent.address))
@@ -490,8 +463,7 @@ export function typingAgentNames(
         : [];
   return named.map(
     (agent) =>
-      displayNameForAddress(agent.address, displayNames) ??
-      displayNameFromHandle(agent.handle),
+      displayNameForAddress(agent.address, displayNames) ?? displayNameFromHandle(agent.handle),
   );
 }
 
diff --git a/packages/chat-ui/src/strings.test.ts b/packages/chat-ui/src/strings.test.ts
index aa1d4ffa32..fa0d90dc04 100644
--- a/packages/chat-ui/src/strings.test.ts
+++ b/packages/chat-ui/src/strings.test.ts
@@ -4,30 +4,20 @@ import { CHAT_STRINGS } from "./strings";
 
 describe("toast confirmation copy", () => {
   test("workbench create carries the new workbench's title", () => {
-    expect(CHAT_STRINGS.workbenchCreatedToast("Launch planning")).toBe(
-      "Created · Launch planning",
-    );
+    expect(CHAT_STRINGS.workbenchCreatedToast("Launch planning")).toBe("Created · Launch planning");
   });
 
   test("rename confirms the title the workbench now has", () => {
-    expect(CHAT_STRINGS.workbenchRenamedToast("Growth")).toBe(
-      "Renamed to Growth",
-    );
+    expect(CHAT_STRINGS.workbenchRenamedToast("Growth")).toBe("Renamed to Growth");
   });
 
   test("rename failure tells the person to try again", () => {
-    expect(CHAT_STRINGS.workbenchRenameError).toBe(
-      "Couldn't rename that workbench — try again.",
-    );
+    expect(CHAT_STRINGS.workbenchRenameError).toBe("Couldn't rename that workbench — try again.");
   });
 
   test("pin copy follows the state the workbench just entered", () => {
-    expect(CHAT_STRINGS.workbenchPinnedToast(true, "Deploy notes")).toBe(
-      "Pinned Deploy notes",
-    );
-    expect(CHAT_STRINGS.workbenchPinnedToast(false, "Deploy notes")).toBe(
-      "Unpinned Deploy notes",
-    );
+    expect(CHAT_STRINGS.workbenchPinnedToast(true, "Deploy notes")).toBe("Pinned Deploy notes");
+    expect(CHAT_STRINGS.workbenchPinnedToast(false, "Deploy notes")).toBe("Unpinned Deploy notes");
   });
 });
 
@@ -37,9 +27,7 @@ describe("agentsTyping copy", () => {
   });
 
   test("two names are joined with 'and'", () => {
-    expect(CHAT_STRINGS.agentsTyping(["Myra", "Scribe"])).toBe(
-      "Myra and Scribe are typing…",
-    );
+    expect(CHAT_STRINGS.agentsTyping(["Myra", "Scribe"])).toBe("Myra and Scribe are typing…");
   });
 
   test("three or more collapse the rest into 'and N others'", () => {
@@ -58,18 +46,12 @@ describe("agentsTyping copy", () => {
 
 describe("approve vs deny vs form action copy", () => {
   test("deny forbidden and error are distinct from approve copy", () => {
-    expect(CHAT_STRINGS.blockDenyActionForbidden).toBe(
-      "You do not have permission to deny this.",
-    );
-    expect(CHAT_STRINGS.blockDenyActionError).toBe(
-      "Couldn't deny this request.",
-    );
+    expect(CHAT_STRINGS.blockDenyActionForbidden).toBe("You do not have permission to deny this.");
+    expect(CHAT_STRINGS.blockDenyActionError).toBe("Couldn't deny this request.");
     expect(CHAT_STRINGS.blockDenyActionForbidden).not.toBe(
       CHAT_STRINGS.blockApproveActionForbidden,
     );
-    expect(CHAT_STRINGS.blockDenyActionError).not.toBe(
-      CHAT_STRINGS.blockApproveActionError,
-    );
+    expect(CHAT_STRINGS.blockDenyActionError).not.toBe(CHAT_STRINGS.blockApproveActionError);
   });
 
   test("form submit forbidden is respond copy, not approve copy", () => {
diff --git a/packages/chat-ui/src/strings.ts b/packages/chat-ui/src/strings.ts
index 5d7c1501cd..0303d2ed07 100644
--- a/packages/chat-ui/src/strings.ts
+++ b/packages/chat-ui/src/strings.ts
@@ -21,13 +21,11 @@ export const CHAT_STRINGS = {
   noWorkbenchesTitle: "No workbenches yet",
   noWorkbenchesDescription: "Create one to get started.",
   noChatSelectedTitle: "Select a conversation",
-  noChatSelectedDescription:
-    "Choose a workbench from the sidebar, or create a new one.",
+  noChatSelectedDescription: "Choose a workbench from the sidebar, or create a new one.",
   couldNotLoadWorkbenches: "workbenches",
   couldNotLoadMessages: "messages",
   workbenchNotFoundTitle: "This workbench isn't here anymore",
-  workbenchNotFoundDescription:
-    "It may have been deleted, or the link is out of date.",
+  workbenchNotFoundDescription: "It may have been deleted, or the link is out of date.",
   /** @deprecated Prefer Mission Control / New workbench recovery (CL-6796). */
   workbenchNotFoundAction: "Back to workbenches",
   workbenchNotFoundMissionControlAction: "Mission Control",
@@ -44,12 +42,10 @@ export const CHAT_STRINGS = {
   composerAttachmentsLabel: "Selected attachments",
   composerRemoveAttachment: (name: string) => `Remove ${name}`,
   composerPreparing: "Preparing attachments…",
-  composerAttachmentCountError: (max: number) =>
-    `You can attach at most ${max} files.`,
+  composerAttachmentCountError: (max: number) => `You can attach at most ${max} files.`,
   composerAttachmentPerFileError: (name: string, maxMiB: number) =>
     `"${name}" is too large (max ${maxMiB} MB per file).`,
-  composerAttachmentTotalError: (maxMiB: number) =>
-    `Those files total more than ${maxMiB} MB.`,
+  composerAttachmentTotalError: (maxMiB: number) => `Those files total more than ${maxMiB} MB.`,
   composerAttachmentReadError: "Couldn't read one of those files — try again.",
   composerDictate: "Dictate",
   composerDictateStop: "Stop dictating",
@@ -66,8 +62,7 @@ export const CHAT_STRINGS = {
     "Tip: press / for commands",
   ],
   emptyTimelineDescription: "Say something to get the conversation going.",
-  emptyAgentTimelineDescription:
-    "They're ready — send the first message to get started.",
+  emptyAgentTimelineDescription: "They're ready — send the first message to get started.",
   jumpToLatestAction: "Jump to latest",
   mentionEmpty: "No matches",
   mentionAgentsGroupLabel: "Agents",
@@ -93,12 +88,10 @@ export const CHAT_STRINGS = {
   legacyBadgeLabel: "Legacy",
   eventAgentJoined: (displayName: string) => `${displayName} joined`,
   eventAgentJoinedUnknown: "An agent joined",
-  eventAgentsJoined: (displayNames: readonly string[]) =>
-    `${joinWithAnd(displayNames)} joined`,
+  eventAgentsJoined: (displayNames: readonly string[]) => `${joinWithAnd(displayNames)} joined`,
   eventMembershipChanged: "Membership updated",
   eventSettingsChanged: "Settings updated",
-  eventWorkbenchRenamed: (from: string, to: string): string =>
-    `Renamed "${from}" to "${to}"`,
+  eventWorkbenchRenamed: (from: string, to: string): string => `Renamed "${from}" to "${to}"`,
   eventWorkbenchRenamedTo: (to: string): string => `Renamed to "${to}"`,
   eventBlockResponsePoll: "A vote was recorded",
   eventBlockResponseForm: "A form was submitted",
@@ -114,16 +107,12 @@ export const CHAT_STRINGS = {
   inviteAgentAction: "Invite agent",
   workbenchMembersLabel: "Members",
   workbenchPresenceLabel: "Live",
-  teamStackOverflow: (count: number) =>
-    `${count} more ${count === 1 ? "member" : "members"}`,
-  threadsMenuCount: (count: number) =>
-    `${count} ${count === 1 ? "thread" : "threads"}`,
+  teamStackOverflow: (count: number) => `${count} more ${count === 1 ? "member" : "members"}`,
+  threadsMenuCount: (count: number) => `${count} ${count === 1 ? "thread" : "threads"}`,
   inviteAgentDialogTitle: "Invite an agent",
-  inviteAgentDialogDescription:
-    "Launch one of your workbench's agents into this conversation.",
+  inviteAgentDialogDescription: "Launch one of your workbench's agents into this conversation.",
   inviteAgentEmptyTitle: "No agents to invite",
-  inviteAgentEmptyDescription:
-    "Add an agent to this workbench before inviting it here.",
+  inviteAgentEmptyDescription: "Add an agent to this workbench before inviting it here.",
   inviteAgentLoadError: "Couldn't load invitable agents",
   inviteAgentInviting: "Inviting…",
   inviteAgentInviteError: "Couldn't invite that agent — try again.",
@@ -150,8 +139,7 @@ export const CHAT_STRINGS = {
     pinned
       ? "Couldn't pin that workbench — try again."
       : "Couldn't unpin that workbench — try again.",
-  agentDmOpenError: (name: string) =>
-    `Couldn't open a conversation with ${name} — try again.`,
+  agentDmOpenError: (name: string) => `Couldn't open a conversation with ${name} — try again.`,
   streamMessageDropped: "Couldn't apply that message live — refreshing.",
   turnCancelError: "Couldn't stop that turn — try again.",
   pendingSendLabel: "Sending…",
@@ -160,8 +148,7 @@ export const CHAT_STRINGS = {
   pendingSendDiscardAction: "Discard",
   fallbackPartUnsupported: "Unsupported content",
   blockUnsupportedTitle: "Unsupported block",
-  blockUnsupportedBody: (type: string) =>
-    `This "${type}" block can't be shown here yet.`,
+  blockUnsupportedBody: (type: string) => `This "${type}" block can't be shown here yet.`,
   blockApproveAction: "Approve",
   blockDenyAction: "Not now",
   blockApproveAllowStanding: (offer: { verb: string; resource: string }) =>
@@ -175,21 +162,17 @@ export const CHAT_STRINGS = {
   blockApproveStatusNotFound: "This approval could not be found.",
   blockApproveStatusLoadError: "Couldn't load this approval's status.",
   blockApproveSpectatorNote: "This one isn't yours to decide.",
-  blockApproveUndeterminedNote:
-    "We're still checking whether this is yours to decide.",
+  blockApproveUndeterminedNote: "We're still checking whether this is yours to decide.",
   blockApproveApproving: "Approving…",
   blockApproveRejecting: "Denying…",
   blockApproveActionForbidden: "You do not have permission to act on this.",
   blockApproveActionError: "Couldn't reach the approval — try again.",
   blockDenyActionForbidden: "You do not have permission to deny this.",
   blockDenyActionError: "Couldn't deny this request.",
-  blockApprovePlatformRequestedBy: (agentName: string) =>
-    `${agentName} is asking to`,
+  blockApprovePlatformRequestedBy: (agentName: string) => `${agentName} is asking to`,
   blockApproveAgentNoteLabel: "Agent's note",
-  blockApproveConflictNote:
-    "Someone else already resolved this while you were deciding.",
-  blockPollVoteCount: (count: number) =>
-    count === 1 ? "1 vote" : `${count} votes`,
+  blockApproveConflictNote: "Someone else already resolved this while you were deciding.",
+  blockPollVoteCount: (count: number) => (count === 1 ? "1 vote" : `${count} votes`),
   blockPollYourVote: "Your vote",
   blockPollChangeVote: "Change vote",
   blockPollVoteError: "Couldn't record your vote — try again.",
@@ -197,8 +180,7 @@ export const CHAT_STRINGS = {
   blockFormSubmitted: "Submitted",
   blockFormEdit: "Edit response",
   blockFormSubmitError: "Couldn't submit — try again.",
-  blockFormSubmitForbidden:
-    "You do not have permission to respond in this conversation.",
+  blockFormSubmitForbidden: "You do not have permission to respond in this conversation.",
   blockFormFieldRequired: "This field is required.",
   blockQuestionFreeTextLabel: "Type your own answer",
   blockQuestionFreeTextPlaceholder: "Type your own answer…",
@@ -226,13 +208,11 @@ export const CHAT_STRINGS = {
     "Under Repository permissions, set Contents, Issues, and Pull requests to Read and write, so the reviewers can read your diffs and post back on them.",
     "Paste it here. It's stored encrypted, only your agents use it, and you can remove it any time.",
   ] as readonly string[],
-  blockConnectGithubTokenSettingsUrl:
-    "https://github.com/settings/personal-access-tokens/new",
+  blockConnectGithubTokenSettingsUrl: "https://github.com/settings/personal-access-tokens/new",
   blockConnectGithubTokenSettingsLink: "Open GitHub's token page",
   blockConnectGithubTokenHelper:
     "Your token is stored encrypted, only your agents use it, and you can remove it any time.",
-  blockConnectGithubConnectedAs: (org: string) =>
-    `Connected to GitHub as ${org}`,
+  blockConnectGithubConnectedAs: (org: string) => `Connected to GitHub as ${org}`,
   blockConnectGithubChange: "change",
   blockConnectGithubRepoCount: (found: number, picked: number) =>
     `${found} repo${found === 1 ? "" : "s"} your token can reach · ${picked} picked`,
@@ -244,8 +224,7 @@ export const CHAT_STRINGS = {
   blockConnectGithubStartReviewing: (count: number) =>
     `Start reviewing ${count} repo${count === 1 ? "" : "s"}`,
   blockConnectGithubSkip: "skip for now",
-  blockConnectGithubStartReviewingError:
-    "Couldn't start reviewing — try again.",
+  blockConnectGithubStartReviewingError: "Couldn't start reviewing — try again.",
   blockConnectGithubStateUnreadable:
     "Couldn't reach GitHub with your token just now — try connecting again.",
   blockConnectGithubTokenFieldLabel: "Personal access token",
@@ -263,13 +242,11 @@ export const CHAT_STRINGS = {
     `You'll paste a ${name} API key — it stays in your workbench and you can disconnect any time.`,
   blockConnectServiceKeyFieldLabel: (name: string) => `${name} API key`,
   blockConnectServiceKeyFieldPlaceholder: "Paste your key",
-  blockConnectServiceKeyWhere: (name: string) =>
-    `Where do I find my ${name} key?`,
+  blockConnectServiceKeyWhere: (name: string) => `Where do I find my ${name} key?`,
   blockConnectServiceKeySubmit: "Connect",
   blockConnectServiceKeySubmitting: "Connecting…",
   blockConnectServiceKeyCancel: "cancel",
-  blockConnectServiceConnected: (name: string) =>
-    `${name} connected — you're set.`,
+  blockConnectServiceConnected: (name: string) => `${name} connected — you're set.`,
   prThreadStatusReviewed: "Reviewed",
   prThreadStatusReading: "Reading now",
   prThreadStatusWaitingOnYou: "Waiting on you",
@@ -288,8 +265,7 @@ export const CHAT_STRINGS = {
   prThreadCopyAction: "Copy",
   prThreadOpenOnGithubAction: "Open on GitHub",
   prThreadFailedTitle: (sender: string) => `${sender}'s review didn't finish`,
-  prThreadFailedSub: (repo: string) =>
-    `We retried once. Nothing was posted to ${repo}.`,
+  prThreadFailedSub: (repo: string) => `We retried once. Nothing was posted to ${repo}.`,
   prThreadRetryAction: "Retry",
   prThreadWhatHappenedAction: "what happened",
   optionLetter: (index: number) => String.fromCharCode(65 + index),
@@ -311,16 +287,13 @@ export const CHAT_STRINGS = {
     `Couldn't resume the running reply — try again. (ref ${refId})`,
   resumeFailedRetryAction: "Retry",
   turnFailedTitle: (sender: string) => `${sender} didn't reply`,
-  turnFailedModelUnavailable: (sender: string) =>
-    `${sender}'s model isn't available here.`,
-  turnFailedToolsUnsupported: (sender: string) =>
-    `${sender}'s model can't use tools.`,
+  turnFailedModelUnavailable: (sender: string) => `${sender}'s model isn't available here.`,
+  turnFailedToolsUnsupported: (sender: string) => `${sender}'s model can't use tools.`,
   turnFailedPickModel: "Pick a model",
   turnFailedMoreInSettings: "More in Settings",
   turnCancelledTitle: (sender: string) => `You stopped ${sender}'s turn`,
   turnFailedSub: "No reply arrived — the agent may be unavailable.",
-  noUsableModelBannerText:
-    "No model is connected yet, so a reply here won't come through.",
+  noUsableModelBannerText: "No model is connected yet, so a reply here won't come through.",
   noUsableModelBannerAction: "Connect a model",
   rowMenuLabel: "Conversation actions",
   rowMenuRename: "Rename",
@@ -351,10 +324,8 @@ export const CHAT_STRINGS = {
   workbenchSettingsUseBenchDefault: (benchDefault: number) =>
     `Use workbench default (${benchDefault})`,
   workbenchSettingsUseOverride: "Set a custom value for this conversation",
-  workbenchSettingsContextWindowDisabled:
-    "Disabled — mentioned agents see no history",
-  workbenchSettingsContextWindowCustom: (count: number) =>
-    `Last ${count} messages`,
+  workbenchSettingsContextWindowDisabled: "Disabled — mentioned agents see no history",
+  workbenchSettingsContextWindowCustom: (count: number) => `Last ${count} messages`,
   workbenchSettingsDeliveryTitle: "Delivery thread",
   workbenchSettingsDeliveryBody:
     "Routine and agent delivery always lands in a dedicated delivery thread — never the main timeline — so broadcast stays readable.",
@@ -379,10 +350,8 @@ export const CHAT_STRINGS = {
   workbenchSettingsAgentDetailInstructionsLabel: "Instructions",
   workbenchSettingsAgentDetailInstructionsHint:
     "How this agent should act and what it knows to do. Applies from this agent's next reply in this conversation; other conversations with the same agent pick it up the next time their agent wakes.",
-  workbenchSettingsAgentDetailLoadError:
-    "Couldn't load this agent's instructions",
-  workbenchSettingsAgentDetailSaveError:
-    "Couldn't save these changes — try again.",
+  workbenchSettingsAgentDetailLoadError: "Couldn't load this agent's instructions",
+  workbenchSettingsAgentDetailSaveError: "Couldn't save these changes — try again.",
   workbenchSettingsAgentDetailSavedToast: "Instructions saved",
   // Scoped rather than a bare "Save" (CL-6215 EMIL #4) — the top-bar Save
   // right above it in the same view saves the conversation's own General
@@ -391,13 +360,11 @@ export const CHAT_STRINGS = {
   workbenchSettingsAgentDetailSave: "Save instructions",
   workbenchSettingsAgentDetailSaving: "Saving…",
   workbenchSettingsAgentDetailCancel: "Cancel",
-  workbenchSettingsAgentDetailNoAgents:
-    "No agents to configure in this conversation.",
+  workbenchSettingsAgentDetailNoAgents: "No agents to configure in this conversation.",
   workbenchSettingsAgentDetailCapabilitiesTitle: "Capabilities",
   workbenchSettingsAgentDetailCapabilitiesHint:
     "What this agent can use. Add a tool, skill, or model from what's available in this workbench.",
-  workbenchSettingsAgentDetailNoCapabilities:
-    "No tools, skills, or model set yet.",
+  workbenchSettingsAgentDetailNoCapabilities: "No tools, skills, or model set yet.",
   workbenchSettingsAgentDetailModelLabel: "Model",
   workbenchSettingsAgentDetailModelUnset: "No model set",
   workbenchSettingsAgentDetailAddCapabilityLabel: "Add a capability",
@@ -417,12 +384,9 @@ export const CHAT_STRINGS = {
   workbenchSettingsAgentDetailAddCapabilityAdding: "Adding…",
   workbenchSettingsAgentDetailAddCapabilityError:
     "Couldn't add that — it may no longer be available.",
-  workbenchSettingsAgentDetailCapabilityInventoryError:
-    "Couldn't load what's available to add.",
-  workbenchSettingsAgentDetailModelOption: (
-    canonicalName: string,
-    providerName: string,
-  ) => `${canonicalName} · ${providerName}`,
+  workbenchSettingsAgentDetailCapabilityInventoryError: "Couldn't load what's available to add.",
+  workbenchSettingsAgentDetailModelOption: (canonicalName: string, providerName: string) =>
+    `${canonicalName} · ${providerName}`,
   workbenchSettingsAgentDetailNoConnectedModels:
     "No connected providers yet — connect one in Shared Settings.",
   workbenchSettingsAgentDetailCatalogError: "Couldn't load the models.",
@@ -431,28 +395,24 @@ export const CHAT_STRINGS = {
   workbenchSettingsAgentDetailHistoryTitle: "History",
   workbenchSettingsAgentDetailHistoryHint:
     "Every change to this agent's instructions and capabilities, oldest actions first.",
-  workbenchSettingsAgentDetailHistoryLoadError:
-    "Couldn't load this agent's history",
+  workbenchSettingsAgentDetailHistoryLoadError: "Couldn't load this agent's history",
   workbenchSettingsAgentDetailHistoryEmpty: "No history yet.",
   workbenchSettingsAgentDetailHistoryCurrent: "Current",
   workbenchSettingsAgentDetailHistoryRestore: "Restore",
   workbenchSettingsAgentDetailHistoryRestoring: "Restoring…",
-  workbenchSettingsAgentDetailHistoryRestoreError:
-    "Couldn't restore that version — try again.",
+  workbenchSettingsAgentDetailHistoryRestoreError: "Couldn't restore that version — try again.",
   workbenchSettingsNotificationsLabel: "Notifications",
   workbenchSettingsNotifyAll: "All messages",
   workbenchSettingsNotifyMentions: "Mentions only",
   workbenchSettingsNotifyMute: "Mute",
   workbenchSettingsNotificationsHint:
     "This choice is yours alone — it doesn't change notifications for anyone else.",
-  workbenchSettingsNotificationsSaveError:
-    "Couldn't save your notification setting — try again.",
+  workbenchSettingsNotificationsSaveError: "Couldn't save your notification setting — try again.",
   workbenchSettingsArchiveTitle: "Archive workbench",
   workbenchSettingsArchiveBody:
     "Archiving is not available yet. Closing this workbench would hide it from the sidebar without deleting history once the action lands.",
   workbenchSettingsLoadError: "this conversation's settings",
-  workbenchSettingsSaveError:
-    "Couldn't save this conversation's settings — try again.",
+  workbenchSettingsSaveError: "Couldn't save this conversation's settings — try again.",
   workbenchSettingsSavedToast: "Settings saved",
   workbenchSettingsSave: "Save",
   workbenchSettingsSaving: "Saving…",
diff --git a/packages/chat-ui/src/styles.css b/packages/chat-ui/src/styles.css
index 45237d7393..b074eb93f2 100644
--- a/packages/chat-ui/src/styles.css
+++ b/packages/chat-ui/src/styles.css
@@ -110,8 +110,7 @@
   gap: 0.55rem;
   min-height: 3rem;
   height: 3rem;
-  border-bottom: 1px solid
-    color-mix(in srgb, var(--foreground) 10%, transparent);
+  border-bottom: 1px solid color-mix(in srgb, var(--foreground) 10%, transparent);
   padding: 0 0.9rem;
 }
 
@@ -329,8 +328,7 @@
   justify-content: space-between;
   gap: 0.5rem;
   border: 0;
-  border-bottom: 1px solid
-    color-mix(in srgb, var(--foreground) 10%, transparent);
+  border-bottom: 1px solid color-mix(in srgb, var(--foreground) 10%, transparent);
   background: transparent;
   padding: 0.5rem 0.125rem;
   font: inherit;
@@ -590,8 +588,7 @@
   align-items: center;
   gap: 0.75rem;
   padding: 0.6rem 0.125rem;
-  border-bottom: 1px solid
-    color-mix(in srgb, var(--foreground) 10%, transparent);
+  border-bottom: 1px solid color-mix(in srgb, var(--foreground) 10%, transparent);
 }
 
 .plugins-directory-list .plugins-directory-row:last-child {
@@ -813,8 +810,7 @@
   }
 
   .chat-jump-to-latest {
-    animation: chat-jump-to-latest-enter var(--duration-standard, 200ms)
-      var(--chat-ease);
+    animation: chat-jump-to-latest-enter var(--duration-standard, 200ms) var(--chat-ease);
   }
 }
 
@@ -1074,10 +1070,7 @@
 }
 
 .chat-md-inline-code {
-  background: var(
-    --muted,
-    color-mix(in srgb, var(--foreground) 8%, transparent)
-  );
+  background: var(--muted, color-mix(in srgb, var(--foreground) 8%, transparent));
   border-radius: var(--ui-radius-sm, 0.25rem);
   padding: 0.05rem 0.3rem;
   font-size: 0.85em;
@@ -1086,10 +1079,7 @@
 .chat-md-code-block {
   margin: 0.35rem 0;
   padding: 0.5rem 0.6rem;
-  background: var(
-    --muted,
-    color-mix(in srgb, var(--foreground) 8%, transparent)
-  );
+  background: var(--muted, color-mix(in srgb, var(--foreground) 8%, transparent));
   border-radius: var(--ui-radius-sm, 0.25rem);
   overflow-x: auto;
   font-size: 0.85em;
@@ -1574,10 +1564,7 @@
   display: block;
   height: 0.45rem;
   border-radius: 0;
-  background: var(
-    --muted,
-    color-mix(in srgb, var(--foreground) 8%, transparent)
-  );
+  background: var(--muted, color-mix(in srgb, var(--foreground) 8%, transparent));
   overflow: hidden;
 }
 
@@ -2081,11 +2068,7 @@
   max-width: 100%;
   border: 1px solid var(--border);
   border-radius: var(--ui-radius-md, 0.5rem);
-  background: color-mix(
-    in srgb,
-    var(--foreground) 3%,
-    var(--card, var(--background))
-  );
+  background: color-mix(in srgb, var(--foreground) 3%, var(--card, var(--background)));
   padding: 0.2rem 0.35rem 0.2rem 0.5rem;
   font-size: 0.75rem;
   line-height: 1.3;
@@ -2289,14 +2272,10 @@
   border-radius: var(--radius);
   padding: 0.35rem 0.75rem 0.35rem 0.4rem;
   transition:
-    transform var(--duration-standard, 180ms)
-      var(--ease-out, cubic-bezier(0.23, 1, 0.32, 1)),
-    background-color var(--duration-standard, 180ms)
-      var(--ease-out, cubic-bezier(0.23, 1, 0.32, 1)),
-    border-color var(--duration-standard, 180ms)
-      var(--ease-out, cubic-bezier(0.23, 1, 0.32, 1)),
-    color var(--duration-standard, 180ms)
-      var(--ease-out, cubic-bezier(0.23, 1, 0.32, 1));
+    transform var(--duration-standard, 180ms) var(--ease-out, cubic-bezier(0.23, 1, 0.32, 1)),
+    background-color var(--duration-standard, 180ms) var(--ease-out, cubic-bezier(0.23, 1, 0.32, 1)),
+    border-color var(--duration-standard, 180ms) var(--ease-out, cubic-bezier(0.23, 1, 0.32, 1)),
+    color var(--duration-standard, 180ms) var(--ease-out, cubic-bezier(0.23, 1, 0.32, 1));
 }
 
 .chat-tool-activity-trigger {
@@ -2648,11 +2627,7 @@
 
 .chat-composer-mic[data-listening="true"] {
   color: var(--shell-accent, var(--primary));
-  background: color-mix(
-    in srgb,
-    var(--shell-accent, var(--primary)) 12%,
-    transparent
-  );
+  background: color-mix(in srgb, var(--shell-accent, var(--primary)) 12%, transparent);
 }
 
 .chat-composer-keyboard-hint {
@@ -2825,11 +2800,7 @@
    the one house color for "live". */
 .first-run-composer-mic[data-listening="true"] {
   color: var(--shell-accent, var(--primary));
-  background: color-mix(
-    in srgb,
-    var(--shell-accent, var(--primary)) 12%,
-    transparent
-  );
+  background: color-mix(in srgb, var(--shell-accent, var(--primary)) 12%, transparent);
 }
 
 .chat-mention-popover {
@@ -2949,10 +2920,7 @@
 
 .chat-mention-option[data-highlighted="true"],
 .chat-mention-option:hover {
-  background: var(
-    --muted,
-    color-mix(in srgb, var(--foreground) 6%, transparent)
-  );
+  background: var(--muted, color-mix(in srgb, var(--foreground) 6%, transparent));
 }
 
 .chat-mention-empty {
@@ -3091,10 +3059,7 @@
 }
 
 .chat-threads-menu-item:hover {
-  background: var(
-    --muted,
-    color-mix(in srgb, var(--foreground) 6%, transparent)
-  );
+  background: var(--muted, color-mix(in srgb, var(--foreground) 6%, transparent));
 }
 
 /* Sub-threads render indented under their depth-1 parent — the two-level
@@ -3116,10 +3081,7 @@
   margin: 0 0 0.5rem;
   padding: 0.375rem 0.75rem;
   border-radius: var(--ui-radius-md, 0.375rem);
-  background: var(
-    --muted,
-    color-mix(in srgb, var(--foreground) 5%, transparent)
-  );
+  background: var(--muted, color-mix(in srgb, var(--foreground) 5%, transparent));
   font-size: 0.75rem;
   color: var(--muted-foreground);
 }
@@ -3856,11 +3818,7 @@
   font-weight: 650;
   letter-spacing: 0.02em;
   text-transform: uppercase;
-  background: color-mix(
-    in srgb,
-    var(--chat-agent-accent, var(--primary)) 14%,
-    transparent
-  );
+  background: color-mix(in srgb, var(--chat-agent-accent, var(--primary)) 14%, transparent);
   color: var(--chat-agent-accent, var(--primary));
 }
 
@@ -3880,8 +3838,7 @@
   font-size: 0.72rem;
   font-weight: 600;
   color: var(--muted-foreground);
-  border-bottom: 1px dashed
-    color-mix(in srgb, var(--muted-foreground) 55%, transparent);
+  border-bottom: 1px dashed color-mix(in srgb, var(--muted-foreground) 55%, transparent);
   align-self: flex-start;
   cursor: pointer;
 }
diff --git a/packages/chat-ui/src/thread-feed.test.ts b/packages/chat-ui/src/thread-feed.test.ts
index e2945fde35..05c0b8b65f 100644
--- a/packages/chat-ui/src/thread-feed.test.ts
+++ b/packages/chat-ui/src/thread-feed.test.ts
@@ -1,10 +1,6 @@
 import { describe, expect, test } from "bun:test";
 import type { MessageItem } from "./api";
-import {
-  selectThreadFeed,
-  threadAffordanceMeta,
-  type ThreadActivityRow,
-} from "./thread-feed";
+import { selectThreadFeed, threadAffordanceMeta, type ThreadActivityRow } from "./thread-feed";
 
 function message(
   id: string,
@@ -25,11 +21,7 @@ const ROOT = "thr_root";
 
 describe("selectThreadFeed (CL-6313: one query, filtered by membership)", () => {
   test("root feed is root-thread membership only", () => {
-    const items = [
-      message("1", ROOT),
-      message("2", "thr_reply"),
-      message("3", ROOT),
-    ];
+    const items = [message("1", ROOT), message("2", "thr_reply"), message("3", ROOT)];
     const feed = selectThreadFeed(items, {
       openThreadId: null,
       parentMessageId: null,
@@ -39,11 +31,7 @@ describe("selectThreadFeed (CL-6313: one query, filtered by membership)", () =>
   });
 
   test("an open thread shows its own membership with the parent for context", () => {
-    const items = [
-      message("1", ROOT),
-      message("2", "thr_reply"),
-      message("3", "thr_reply"),
-    ];
+    const items = [message("1", ROOT), message("2", "thr_reply"), message("3", "thr_reply")];
     const feed = selectThreadFeed(items, {
       openThreadId: "thr_reply",
       parentMessageId: "1",
diff --git a/packages/chat-ui/src/thread-feed.ts b/packages/chat-ui/src/thread-feed.ts
index 874cedb00c..56c84d7007 100644
--- a/packages/chat-ui/src/thread-feed.ts
+++ b/packages/chat-ui/src/thread-feed.ts
@@ -34,9 +34,7 @@ export type ThreadFeedView = {
 
 function oldestFirst(items: readonly MessageItem[]): MessageItem[] {
   return [...items].sort((a, b) =>
-    a.createdAt === b.createdAt
-      ? a.id.localeCompare(b.id)
-      : a.createdAt.localeCompare(b.createdAt),
+    a.createdAt === b.createdAt ? a.id.localeCompare(b.id) : a.createdAt.localeCompare(b.createdAt),
   );
 }
 
@@ -65,9 +63,7 @@ export function selectThreadFeed(
 ): MessageItem[] {
   if (view.openThreadId !== null) {
     const inThread = oldestFirst(
-      items.filter(
-        (item) => threadIdOf(item, view.rootThreadId) === view.openThreadId,
-      ),
+      items.filter((item) => threadIdOf(item, view.rootThreadId) === view.openThreadId),
     );
     return withParent(inThread, items, view.parentMessageId);
   }
@@ -76,9 +72,7 @@ export function selectThreadFeed(
   }
   if (view.rootThreadId === "") return oldestFirst(items);
   return oldestFirst(
-    items.filter(
-      (item) => threadIdOf(item, view.rootThreadId) === view.rootThreadId,
-    ),
+    items.filter((item) => threadIdOf(item, view.rootThreadId) === view.rootThreadId),
   );
 }
 
diff --git a/packages/chat-ui/src/timeline.test.ts b/packages/chat-ui/src/timeline.test.ts
index 59b8d55a8a..2820e722cc 100644
--- a/packages/chat-ui/src/timeline.test.ts
+++ b/packages/chat-ui/src/timeline.test.ts
@@ -17,24 +17,18 @@ describe("friendlyEventText — workbench.agent-joined (CL-6594)", () => {
     const participants: readonly ParticipantRecord[] = [
       { address: "run_scout@dana.localhost", handle: "scout" },
     ];
-    expect(
-      friendlyEventText(
-        agentJoinedPart("run_scout@dana.localhost"),
-        participants,
-      ),
-    ).toBe("Scout joined");
+    expect(friendlyEventText(agentJoinedPart("run_scout@dana.localhost"), participants)).toBe(
+      "Scout joined",
+    );
   });
 
   test("falls back to the address's own local part, never a generic noun, when the roster hasn't caught up with this address yet", () => {
     const participants: readonly ParticipantRecord[] = [
       { address: "run_myra@dana.localhost", handle: "myra" },
     ];
-    expect(
-      friendlyEventText(
-        agentJoinedPart("run_scout@dana.localhost"),
-        participants,
-      ),
-    ).toBe("Run Scout joined");
+    expect(friendlyEventText(agentJoinedPart("run_scout@dana.localhost"), participants)).toBe(
+      "Run Scout joined",
+    );
   });
 
   test("falls back to the generic line only when the event itself carries no address at all", () => {
@@ -67,8 +61,6 @@ describe("friendlyEventText — connection.connected (CL-6741)", () => {
       event: "connection.connected",
       data: { connectorId: "github", displayName: "GitHub" },
     };
-    expect(friendlyEventText(part, [])).toBe(
-      "GitHub connected successfully. Manage in Plugins",
-    );
+    expect(friendlyEventText(part, [])).toBe("GitHub connected successfully. Manage in Plugins");
   });
 });
diff --git a/packages/chat-ui/src/timeline.tsx b/packages/chat-ui/src/timeline.tsx
index 4ad421b764..62f9d80d2c 100644
--- a/packages/chat-ui/src/timeline.tsx
+++ b/packages/chat-ui/src/timeline.tsx
@@ -17,18 +17,9 @@ import {
   useContextMenuState,
 } from "@corbits/context-menu";
 import type { ContextMenu, ContextMenuEntry } from "@corbits/context-menu";
-import {
-  Avatar,
-  Button,
-  EmptyState,
-  PartsRenderer,
-  toast,
-} from "@corbits/react-ui";
+import { Avatar, Button, EmptyState, PartsRenderer, toast } from "@corbits/react-ui";
 import { toReactUiReasoning } from "./agent-part-adapter";
-import {
-  displayNameForAddress,
-  type AgentDisplayNames,
-} from "./agent-display-names";
+import { displayNameForAddress, type AgentDisplayNames } from "./agent-display-names";
 import { CorbitAvatar, avatarClassForPrincipal } from "./avatar";
 import { groupTimelineParts } from "./tool-activity";
 import { ToolActivityGroup } from "./tool-activity-view";
@@ -45,12 +36,7 @@ import { memo } from "react";
 import { useEffect, useRef, useState } from "react";
 import type { MouseEvent as ReactMouseEvent, ReactNode } from "react";
 
-import type {
-  MessageItem,
-  MessageSender,
-  ParticipantRecord,
-  Part,
-} from "./api";
+import type { MessageItem, MessageSender, ParticipantRecord, Part } from "./api";
 import { ArtifactChip } from "./artifact-chip";
 import type { ApprovalActions } from "./blocks/approval-actions";
 import type { BlockResponseActions } from "./blocks/block-responses";
@@ -204,8 +190,7 @@ function formatDayLabel(iso: string): string {
 
   const yesterday = new Date(now);
   yesterday.setDate(now.getDate() - 1);
-  if (isSameCalendarDay(date, yesterday))
-    return CHAT_STRINGS.dayDividerYesterday;
+  if (isSameCalendarDay(date, yesterday)) return CHAT_STRINGS.dayDividerYesterday;
 
   return date.toLocaleDateString([], {
     month: "short",
@@ -226,10 +211,7 @@ function initialsOf(source: string): string {
     .filter((word) => word.length > 0);
   if (words.length === 0) return "?";
   const first = words[0]?.charAt(0) ?? "";
-  const second =
-    words.length > 1
-      ? (words[1]?.charAt(0) ?? "")
-      : (words[0]?.charAt(1) ?? "");
+  const second = words.length > 1 ? (words[1]?.charAt(0) ?? "") : (words[0]?.charAt(1) ?? "");
   const initials = `${first}${second}`.toUpperCase();
   return initials.length > 0 ? initials : "?";
 }
@@ -271,10 +253,7 @@ function senderDisplay(
 ): SenderDisplay | undefined {
   if (sender === undefined) return undefined;
 
-  if (
-    currentUser !== undefined &&
-    localPartOf(sender.address) === currentUser.principalId
-  ) {
+  if (currentUser !== undefined && localPartOf(sender.address) === currentUser.principalId) {
     const label = currentUser.name ?? CHAT_STRINGS.senderYou;
     return {
       label,
@@ -284,16 +263,11 @@ function senderDisplay(
     };
   }
 
-  const matched = participants.find(
-    (participant) => participant.address === sender.address,
-  );
+  const matched = participants.find((participant) => participant.address === sender.address);
   if (matched !== undefined) {
     const isAgent = isAgentAddress(matched.address);
     const senderName = sender.name;
-    const wireName =
-      senderName !== null && senderName.trim().length > 0
-        ? senderName
-        : undefined;
+    const wireName = senderName !== null && senderName.trim().length > 0 ? senderName : undefined;
     // An agent renders its resolved display name (CL-6424) — the wire
     // name when the server sent one, else the `/agents` snapshot's — and
     // only then falls back to a human reading of its handle ("myra" ->
@@ -304,8 +278,7 @@ function senderDisplay(
         ? (displayNameForAddress(matched.address, displayNames) ?? wireName)
         : wireName;
     const label =
-      resolvedName ??
-      (isAgent ? displayNameFromHandle(matched.handle) : matched.handle);
+      resolvedName ?? (isAgent ? displayNameFromHandle(matched.handle) : matched.handle);
     return {
       label,
       handle: matched.handle,
@@ -361,11 +334,7 @@ function SenderAvatar({
         />
       )}
       {tenantMonogram !== undefined ? (
-        <span
-          className="chat-sender-tenant-badge"
-          title={tenantName}
-          aria-hidden="true"
-        >
+        <span className="chat-sender-tenant-badge" title={tenantName} aria-hidden="true">
           {tenantMonogram}
         </span>
       ) : null}
@@ -374,9 +343,7 @@ function SenderAvatar({
 }
 
 export function AgentBadge() {
-  return (
-    <span className="chat-agent-badge">{CHAT_STRINGS.agentBadgeLabel}</span>
-  );
+  return <span className="chat-agent-badge">{CHAT_STRINGS.agentBadgeLabel}</span>;
 }
 
 /** The one visible cue a message this reader just sent is still in
@@ -436,12 +403,7 @@ function TextBubble({
   pendingActions?: PendingActions;
 }) {
   const consumerText = consumerFacingInferenceText(text);
-  const display = senderDisplay(
-    sender,
-    participants,
-    currentUser,
-    agentDisplayNames,
-  );
+  const display = senderDisplay(sender, participants, currentUser, agentDisplayNames);
   const isOwn =
     currentUser !== undefined &&
     sender !== undefined &&
@@ -449,11 +411,8 @@ function TextBubble({
   const matched =
     sender === undefined
       ? undefined
-      : participants.find(
-          (participant) => participant.address === sender.address,
-        );
-  const profileSubject =
-    matched !== undefined ? profileSubjectFromParticipant(matched) : null;
+      : participants.find((participant) => participant.address === sender.address);
+  const profileSubject = matched !== undefined ? profileSubjectFromParticipant(matched) : null;
 
   function handleOpenProfile() {
     if (profileSubject !== null && onOpenProfile !== undefined) {
@@ -462,11 +421,7 @@ function TextBubble({
   }
 
   return (
-    <div
-      className="chat-bubble-row"
-      data-own={isOwn}
-      data-grouped={!showHeader}
-    >
+    <div className="chat-bubble-row" data-own={isOwn} data-grouped={!showHeader}>
       {showHeader && display !== undefined && (
         <button
           type="button"
@@ -483,9 +438,7 @@ function TextBubble({
             {...(sender?.tenantMonogram !== undefined
               ? { tenantMonogram: sender.tenantMonogram }
               : {})}
-            {...(sender?.tenantName !== undefined
-              ? { tenantName: sender.tenantName }
-              : {})}
+            {...(sender?.tenantName !== undefined ? { tenantName: sender.tenantName } : {})}
           />
         </button>
       )}
@@ -496,15 +449,12 @@ function TextBubble({
               <button
                 type="button"
                 className="chat-bubble-sender-button"
-                disabled={
-                  profileSubject === null || onOpenProfile === undefined
-                }
+                disabled={profileSubject === null || onOpenProfile === undefined}
                 onClick={handleOpenProfile}
               >
                 <span
                   className="chat-bubble-sender"
-                  {...(display.handle !== undefined &&
-                  display.handle !== display.label
+                  {...(display.handle !== undefined && display.handle !== display.label
                     ? { title: `@${display.handle}` }
                     : {})}
                 >
@@ -513,16 +463,12 @@ function TextBubble({
                 </span>
               </button>
             )}
-            <span className="chat-bubble-time">
-              {formatTimestamp(createdAt)}
-            </span>
+            <span className="chat-bubble-time">{formatTimestamp(createdAt)}</span>
             {pendingStatus === "sending" ? <PendingGlyph /> : null}
           </div>
         ) : (
           <>
-            <span className="chat-bubble-time-grouped">
-              {formatTimestamp(createdAt)}
-            </span>
+            <span className="chat-bubble-time-grouped">{formatTimestamp(createdAt)}</span>
             {pendingStatus === "sending" ? <PendingGlyph /> : null}
           </>
         )}
@@ -543,10 +489,7 @@ function TextBubble({
             </Button>
           )}
         {pendingStatus === "failed" && pendingActions !== undefined ? (
-          <PendingFailedRow
-            nonce={pendingNonce ?? ""}
-            pendingActions={pendingActions}
-          />
+          <PendingFailedRow nonce={pendingNonce ?? ""} pendingActions={pendingActions} />
         ) : null}
       </div>
     </div>
@@ -577,16 +520,13 @@ function joinedAgentName(
     typeof part.data === "object" && part.data !== null
       ? (part.data as Record<string, unknown>)
       : undefined;
-  const address =
-    data !== undefined && typeof data.address === "string"
-      ? data.address
-      : undefined;
+  const address = data !== undefined && typeof data.address === "string" ? data.address : undefined;
   if (address === undefined) return undefined;
   const resolved = displayNameForAddress(address, displayNames);
   if (resolved !== undefined) return resolved;
   const handle =
-    participants.find((participant) => participant.address === address)
-      ?.handle ?? localPartOf(address);
+    participants.find((participant) => participant.address === address)?.handle ??
+    localPartOf(address);
   return displayNameFromHandle(handle);
 }
 
@@ -610,23 +550,15 @@ export function friendlyEventText(
       return CHAT_STRINGS.eventMembershipChanged;
     case "workbench.settings-changed": {
       const changed =
-        data !== undefined &&
-        typeof data.changed === "object" &&
-        data.changed !== null
+        data !== undefined && typeof data.changed === "object" && data.changed !== null
           ? (data.changed as Record<string, unknown>)
           : undefined;
       const previous =
-        data !== undefined &&
-        typeof data.previous === "object" &&
-        data.previous !== null
+        data !== undefined && typeof data.previous === "object" && data.previous !== null
           ? (data.previous as Record<string, unknown>)
           : undefined;
       const to = changed?.["chat/name"];
-      if (
-        changed !== undefined &&
-        Object.keys(changed).length === 1 &&
-        typeof to === "string"
-      ) {
+      if (changed !== undefined && Object.keys(changed).length === 1 && typeof to === "string") {
         const from = previous?.["chat/name"];
         return typeof from === "string" && from !== to
           ? CHAT_STRINGS.eventWorkbenchRenamed(from, to)
@@ -642,9 +574,7 @@ export function friendlyEventText(
     }
     case "connection.connected": {
       const displayName =
-        data !== undefined && typeof data.displayName === "string"
-          ? data.displayName
-          : undefined;
+        data !== undefined && typeof data.displayName === "string" ? data.displayName : undefined;
       return displayName !== undefined
         ? CHAT_STRINGS.eventConnectionConnected(displayName)
         : CHAT_STRINGS.eventGeneric(part.event);
@@ -687,12 +617,8 @@ function EventLine({
           collapsedText
         ) : connectedDisplayName !== undefined ? (
           <>
-            {CHAT_STRINGS.eventConnectionConnectedBeforePlugins(
-              connectedDisplayName,
-            )}
-            <a href="/plugins">
-              {CHAT_STRINGS.eventConnectionConnectedPlugins}
-            </a>
+            {CHAT_STRINGS.eventConnectionConnectedBeforePlugins(connectedDisplayName)}
+            <a href="/plugins">{CHAT_STRINGS.eventConnectionConnectedPlugins}</a>
           </>
         ) : (
           friendlyEventText(part, participants, agentDisplayNames)
@@ -778,20 +704,14 @@ function FailedTurnStrip({
   ) => void | Promise<void>;
   readonly onWhatHappenedFailedTurn?: (item: TimelineMessageItem) => void;
 }) {
-  const display = senderDisplay(
-    item.sender,
-    participants,
-    currentUser,
-    agentDisplayNames,
-  );
+  const display = senderDisplay(item.sender, participants, currentUser, agentDisplayNames);
   const sender = display?.label ?? CHAT_STRINGS.senderFallbackMember;
   const consumerDetail = consumerFacingInferenceText(detailText);
   const [expanded, setExpanded] = useState(false);
   // Guards the resend itself against a double-click firing two sends —
   // not composer state, since Retry never touches the composer any more.
   const [retrying, setRetrying] = useState(false);
-  const definitionId =
-    failedTurnRecovery?.definitionIdByAddress[item.sender.address];
+  const definitionId = failedTurnRecovery?.definitionIdByAddress[item.sender.address];
 
   if (namedRecovery !== undefined) {
     const recoveryTitle =
@@ -854,9 +774,7 @@ function FailedTurnStrip({
 
   return (
     <div className="chat-turn-failed" role="status">
-      <span className="chat-turn-failed-text">
-        {CHAT_STRINGS.turnFailedTitle(sender)}
-      </span>
+      <span className="chat-turn-failed-text">{CHAT_STRINGS.turnFailedTitle(sender)}</span>
       <Button
         type="button"
         variant="ghost"
@@ -866,8 +784,8 @@ function FailedTurnStrip({
         onClick={() => {
           if (retrying) return;
           setRetrying(true);
-          void Promise.resolve(onRetryFailedTurn?.(item, retryText)).finally(
-            () => setRetrying(false),
+          void Promise.resolve(onRetryFailedTurn?.(item, retryText)).finally(() =>
+            setRetrying(false),
           );
         }}
       >
@@ -886,9 +804,7 @@ function FailedTurnStrip({
       </button>
       {expanded ? (
         <span className="chat-turn-failed-detail">
-          {consumerDetail.length > 0
-            ? consumerDetail
-            : CHAT_STRINGS.turnFailedSub}
+          {consumerDetail.length > 0 ? consumerDetail : CHAT_STRINGS.turnFailedSub}
         </span>
       ) : null}
     </div>
@@ -914,12 +830,7 @@ function CancelledTurnStrip({
   readonly currentUser: CurrentUser | undefined;
   readonly agentDisplayNames?: AgentDisplayNames;
 }) {
-  const display = senderDisplay(
-    item.sender,
-    participants,
-    currentUser,
-    agentDisplayNames,
-  );
+  const display = senderDisplay(item.sender, participants, currentUser, agentDisplayNames);
   const sender = display?.label ?? CHAT_STRINGS.senderFallbackMember;
   return (
     <div className="chat-turn-cancelled" role="status">
@@ -961,12 +872,8 @@ export function findRetryText(
 function FallbackPart({ part }: { part: Part }) {
   return (
     <div className="chat-fallback-block">
-      <span className="chat-fallback-label">
-        {CHAT_STRINGS.fallbackPartLabel(part.kind)}
-      </span>
-      <span className="chat-fallback-body">
-        {CHAT_STRINGS.fallbackPartUnsupported}
-      </span>
+      <span className="chat-fallback-label">{CHAT_STRINGS.fallbackPartLabel(part.kind)}</span>
+      <span className="chat-fallback-body">{CHAT_STRINGS.fallbackPartUnsupported}</span>
     </div>
   );
 }
@@ -1045,10 +952,7 @@ export function offersMessageSocialChrome(item: MessageItem): boolean {
       return true;
     }
     if (part.kind === "block") {
-      return (
-        part.block.type === "connect-github" ||
-        part.block.type === "connect-service"
-      );
+      return part.block.type === "connect-github" || part.block.type === "connect-service";
     }
     return false;
   });
@@ -1062,9 +966,7 @@ export function offersMessageSocialChrome(item: MessageItem): boolean {
  * right edge.
  */
 export function isSystemNoticeItem(item: MessageItem): boolean {
-  return (
-    item.parts.length > 0 && item.parts.every((part) => part.kind === "event")
-  );
+  return item.parts.length > 0 && item.parts.every((part) => part.kind === "event");
 }
 
 /**
@@ -1074,9 +976,7 @@ export function isSystemNoticeItem(item: MessageItem): boolean {
  * is the room talking, not a person.
  */
 export function isSystemSenderItem(item: MessageItem): boolean {
-  return (
-    item.sender !== undefined && localPartOf(item.sender.address) === "system"
-  );
+  return item.sender !== undefined && localPartOf(item.sender.address) === "system";
 }
 
 /** The display name a lone agent-joined row names, or undefined when the
@@ -1088,11 +988,7 @@ function agentJoinName(
 ): string | undefined {
   if (item.parts.length !== 1) return undefined;
   const part = item.parts[0];
-  if (
-    part === undefined ||
-    part.kind !== "event" ||
-    part.event !== "workbench.agent-joined"
-  ) {
+  if (part === undefined || part.kind !== "event" || part.event !== "workbench.agent-joined") {
     return undefined;
   }
   return joinedAgentName(part, participants, displayNames);
@@ -1159,9 +1055,7 @@ function PendingFailedRow({
 }) {
   return (
     <div className="chat-pending-failed-row" role="alert">
-      <span className="chat-pending-failed-label">
-        {CHAT_STRINGS.pendingSendFailedLabel}
-      </span>
+      <span className="chat-pending-failed-label">{CHAT_STRINGS.pendingSendFailedLabel}</span>
       <Button
         type="button"
         variant="ghost"
@@ -1208,12 +1102,7 @@ function StreamingMessageGroup({
   readonly agentDisplayNames?: AgentDisplayNames;
 }) {
   const text = messageText(item);
-  const display = senderDisplay(
-    item.sender,
-    participants,
-    currentUser,
-    agentDisplayNames,
-  );
+  const display = senderDisplay(item.sender, participants, currentUser, agentDisplayNames);
 
   return (
     <div className="chat-message-group" id={messageDomId(item.id)}>
@@ -1332,11 +1221,7 @@ function MessageHoverToolbar({
   readonly onEditMessage?: (messageId: string) => void;
 }) {
   const menuHasEntries = !isContextMenuEmpty(menu);
-  if (
-    onOpenThread === undefined &&
-    onEditMessage === undefined &&
-    !menuHasEntries
-  ) {
+  if (onOpenThread === undefined && onEditMessage === undefined && !menuHasEntries) {
     return null;
   }
 
@@ -1584,19 +1469,11 @@ function MessagePartsInner({
                   part.turnFailedReason === "tools_unsupported"
                     ? { namedRecovery: part.turnFailedReason }
                     : {})}
-                  {...(agentDisplayNames !== undefined
-                    ? { agentDisplayNames }
-                    : {})}
+                  {...(agentDisplayNames !== undefined ? { agentDisplayNames } : {})}
                   {...(retryText !== undefined ? { retryText } : {})}
-                  {...(failedTurnRecovery !== undefined
-                    ? { failedTurnRecovery }
-                    : {})}
-                  {...(onRetryFailedTurn !== undefined
-                    ? { onRetryFailedTurn }
-                    : {})}
-                  {...(onWhatHappenedFailedTurn !== undefined
-                    ? { onWhatHappenedFailedTurn }
-                    : {})}
+                  {...(failedTurnRecovery !== undefined ? { failedTurnRecovery } : {})}
+                  {...(onRetryFailedTurn !== undefined ? { onRetryFailedTurn } : {})}
+                  {...(onWhatHappenedFailedTurn !== undefined ? { onWhatHappenedFailedTurn } : {})}
                 />
               );
             }
@@ -1607,9 +1484,7 @@ function MessagePartsInner({
                   item={item}
                   participants={participants}
                   currentUser={currentUser}
-                  {...(agentDisplayNames !== undefined
-                    ? { agentDisplayNames }
-                    : {})}
+                  {...(agentDisplayNames !== undefined ? { agentDisplayNames } : {})}
                 />
               );
             }
@@ -1623,17 +1498,13 @@ function MessagePartsInner({
                   participants={participants}
                   currentUser={currentUser}
                   showHeader={showHeader}
-                  {...(agentDisplayNames !== undefined
-                    ? { agentDisplayNames }
-                    : {})}
+                  {...(agentDisplayNames !== undefined ? { agentDisplayNames } : {})}
                   {...(item.pendingStatus !== undefined
                     ? { pendingStatus: item.pendingStatus, pendingNonce }
                     : {})}
                   {...(pendingActions !== undefined ? { pendingActions } : {})}
                   {...(onOpenProfile !== undefined ? { onOpenProfile } : {})}
-                  {...(onFixConnection !== undefined
-                    ? { onFixConnection }
-                    : {})}
+                  {...(onFixConnection !== undefined ? { onFixConnection } : {})}
                 />
               );
             }
@@ -1644,12 +1515,8 @@ function MessagePartsInner({
                   part={part}
                   createdAt={item.createdAt}
                   participants={participants}
-                  {...(collapsedJoinText !== undefined
-                    ? { collapsedText: collapsedJoinText }
-                    : {})}
-                  {...(agentDisplayNames !== undefined
-                    ? { agentDisplayNames }
-                    : {})}
+                  {...(collapsedJoinText !== undefined ? { collapsedText: collapsedJoinText } : {})}
+                  {...(agentDisplayNames !== undefined ? { agentDisplayNames } : {})}
                 />
               );
             }
@@ -1659,9 +1526,7 @@ function MessagePartsInner({
                   key={key}
                   part={part}
                   {...(onOpenArtifact !== undefined ? { onOpenArtifact } : {})}
-                  {...(onOpenArtifactInLibrary !== undefined
-                    ? { onOpenArtifactInLibrary }
-                    : {})}
+                  {...(onOpenArtifactInLibrary !== undefined ? { onOpenArtifactInLibrary } : {})}
                 />
               );
             }
@@ -1671,9 +1536,7 @@ function MessagePartsInner({
             // above, and react-ui's `ToolBlock` renders one call at a time
             // with its arguments and result as `JSON.stringify` output.
             if (part.kind === "reasoning") {
-              return (
-                <PartsRenderer key={key} parts={[toReactUiReasoning(part)]} />
-              );
+              return <PartsRenderer key={key} parts={[toReactUiReasoning(part)]} />;
             }
             if (part.kind === "block") {
               return (
@@ -1681,16 +1544,10 @@ function MessagePartsInner({
                   key={key}
                   block={part.block}
                   messageId={item.id}
-                  {...(approvalActions !== undefined
-                    ? { approvalActions }
-                    : {})}
+                  {...(approvalActions !== undefined ? { approvalActions } : {})}
                   {...(blockResponses !== undefined ? { blockResponses } : {})}
-                  {...(connectGithubActions !== undefined
-                    ? { connectGithubActions }
-                    : {})}
-                  {...(connectServiceActions !== undefined
-                    ? { connectServiceActions }
-                    : {})}
+                  {...(connectGithubActions !== undefined ? { connectGithubActions } : {})}
+                  {...(connectServiceActions !== undefined ? { connectServiceActions } : {})}
                 />
               );
             }
@@ -1835,9 +1692,7 @@ function ThreadAffordance({
       ) : null}
       <span className="chat-thread-affordance-meta">
         <span className="chat-thread-reply-count">{label}</span>
-        {activity !== "" ? (
-          <span className="chat-thread-last-activity">{activity}</span>
-        ) : null}
+        {activity !== "" ? <span className="chat-thread-last-activity">{activity}</span> : null}
       </span>
       <button type="button" className="chat-thread-open" onClick={onOpen}>
         {mode === "fork" ? CHAT_STRINGS.forkThreadAction : "Open"}
@@ -1965,9 +1820,7 @@ export function WorkbenchTimeline({
   // Starts pinned (true) unless a restored snapshot says otherwise — a
   // workbench's first-ever render always lands at the bottom, but remounting
   // after Settings closes restores exactly how the reader left it.
-  const [pinnedToLatest, setPinnedToLatest] = useState(
-    scrollRestore?.pinned ?? true,
-  );
+  const [pinnedToLatest, setPinnedToLatest] = useState(scrollRestore?.pinned ?? true);
   const pinnedRef = useRef(pinnedToLatest);
 
   // Kept current every render (never a dependency) so the unmount cleanup
@@ -1985,9 +1838,7 @@ export function WorkbenchTimeline({
       container.scrollHeight - container.scrollTop - container.clientHeight;
     const nextPinned = distanceFromBottom <= BOTTOM_PIN_THRESHOLD_PX;
     pinnedRef.current = nextPinned;
-    setPinnedToLatest((current) =>
-      current === nextPinned ? current : nextPinned,
-    );
+    setPinnedToLatest((current) => (current === nextPinned ? current : nextPinned));
   };
 
   const jumpToLatest = () => {
@@ -2044,11 +1895,7 @@ export function WorkbenchTimeline({
     return () => observer.disconnect();
   }, []);
 
-  const joinRuns = collapseAgentJoinRuns(
-    items,
-    participants,
-    agentDisplayNames,
-  );
+  const joinRuns = collapseAgentJoinRuns(items, participants, agentDisplayNames);
 
   if (items.length === 0) {
     // A freshly created agent chat answers before it finishes setting up
@@ -2068,9 +1915,7 @@ export function WorkbenchTimeline({
     // caller), an empty timeline isn't a stage to wait out — it's a ready
     // conversation with nobody in it yet. Leads with the agent's own name
     // so the affordance is "message them", not the generic feed copy.
-    const readyAgent = participants.find((participant) =>
-      isAgentAddress(participant.address),
-    );
+    const readyAgent = participants.find((participant) => isAgentAddress(participant.address));
     if (readyAgent !== undefined) {
       const readyAgentName =
         displayNameForAddress(readyAgent.address, agentDisplayNames) ??
@@ -2104,10 +1949,7 @@ export function WorkbenchTimeline({
           const previous = index > 0 ? items[index - 1] : undefined;
           const showDayDivider =
             previous === undefined ||
-            !isSameCalendarDay(
-              new Date(previous.createdAt),
-              new Date(item.createdAt),
-            );
+            !isSameCalendarDay(new Date(previous.createdAt), new Date(item.createdAt));
           // Keyed by `clientId` (falling back to `id`) when present: a
           // pending send and the confirmed message that later reconciles
           // it (CL-6251's wire `clientId`) share this key, so React
@@ -2124,17 +1966,11 @@ export function WorkbenchTimeline({
                 participants={participants}
                 currentUser={currentUser}
                 showDayDivider={showDayDivider}
-                {...(agentDisplayNames !== undefined
-                  ? { agentDisplayNames }
-                  : {})}
+                {...(agentDisplayNames !== undefined ? { agentDisplayNames } : {})}
               />
             );
           }
-          const showHeader = !isGroupedWithPrevious(
-            item,
-            previous,
-            showDayDivider,
-          );
+          const showHeader = !isGroupedWithPrevious(item, previous, showDayDivider);
           const collapsedJoinText = joinRuns.textByLeadId.get(item.id);
           return (
             <MessageParts
@@ -2145,12 +1981,8 @@ export function WorkbenchTimeline({
               currentUser={currentUser}
               showDayDivider={showDayDivider}
               showHeader={showHeader}
-              {...(agentDisplayNames !== undefined
-                ? { agentDisplayNames }
-                : {})}
-              {...(collapsedJoinText !== undefined
-                ? { collapsedJoinText }
-                : {})}
+              {...(agentDisplayNames !== undefined ? { agentDisplayNames } : {})}
+              {...(collapsedJoinText !== undefined ? { collapsedJoinText } : {})}
               threadMeta={threadMetaByMessageId?.get(item.id)}
               threadAffordanceMode={threadAffordanceMode}
               {...(onOpenThread !== undefined ? { onOpenThread } : {})}
@@ -2158,38 +1990,22 @@ export function WorkbenchTimeline({
               {...(onOpenProfile !== undefined ? { onOpenProfile } : {})}
               {...(onOpenArtifact !== undefined ? { onOpenArtifact } : {})}
               {...(onFixConnection !== undefined ? { onFixConnection } : {})}
-              {...(onOpenArtifactInLibrary !== undefined
-                ? { onOpenArtifactInLibrary }
-                : {})}
+              {...(onOpenArtifactInLibrary !== undefined ? { onOpenArtifactInLibrary } : {})}
               {...(approvalActions !== undefined ? { approvalActions } : {})}
               {...(blockResponses !== undefined ? { blockResponses } : {})}
-              {...(connectGithubActions !== undefined
-                ? { connectGithubActions }
-                : {})}
-              {...(connectServiceActions !== undefined
-                ? { connectServiceActions }
-                : {})}
+              {...(connectGithubActions !== undefined ? { connectGithubActions } : {})}
+              {...(connectServiceActions !== undefined ? { connectServiceActions } : {})}
               {...(pendingActions !== undefined ? { pendingActions } : {})}
-              {...(onRetryFailedTurn !== undefined
-                ? { onRetryFailedTurn }
-                : {})}
-              {...(onWhatHappenedFailedTurn !== undefined
-                ? { onWhatHappenedFailedTurn }
-                : {})}
-              {...(failedTurnRecovery !== undefined
-                ? { failedTurnRecovery }
-                : {})}
+              {...(onRetryFailedTurn !== undefined ? { onRetryFailedTurn } : {})}
+              {...(onWhatHappenedFailedTurn !== undefined ? { onWhatHappenedFailedTurn } : {})}
+              {...(failedTurnRecovery !== undefined ? { failedTurnRecovery } : {})}
             />
           );
         })}
         {footer}
       </div>
       {pinnedToLatest ? null : (
-        <button
-          type="button"
-          className="chat-jump-to-latest"
-          onClick={jumpToLatest}
-        >
+        <button type="button" className="chat-jump-to-latest" onClick={jumpToLatest}>
           <ArrowDown aria-hidden="true" />
           {CHAT_STRINGS.jumpToLatestAction}
         </button>
diff --git a/packages/chat-ui/src/tool-activity-view.tsx b/packages/chat-ui/src/tool-activity-view.tsx
index e368aedeed..d73cfe707b 100644
--- a/packages/chat-ui/src/tool-activity-view.tsx
+++ b/packages/chat-ui/src/tool-activity-view.tsx
@@ -42,20 +42,14 @@ function StatusMarker({ status }: { readonly status: ToolActivityStatus }) {
       <Check />
     );
   return (
-    <span
-      className="chat-tool-activity-marker"
-      data-status={status}
-      aria-hidden="true"
-    >
+    <span className="chat-tool-activity-marker" data-status={status} aria-hidden="true">
       {icon}
     </span>
   );
 }
 
 function chipAccessibleName(row: ToolActivityRow): string {
-  return row.status === "failed"
-    ? `${CHAT_STRINGS.toolActivityFailed}. ${row.phrase}`
-    : row.phrase;
+  return row.status === "failed" ? `${CHAT_STRINGS.toolActivityFailed}. ${row.phrase}` : row.phrase;
 }
 
 function ActionGlyph({ glyph }: { readonly glyph: ToolActivityGlyph }) {
@@ -84,18 +78,14 @@ function ActionGlyph({ glyph }: { readonly glyph: ToolActivityGlyph }) {
       break;
   }
   return (
-    <span
-      className="chat-tool-activity-tile chat-tool-activity-glyph"
-      aria-hidden="true"
-    >
+    <span className="chat-tool-activity-tile chat-tool-activity-glyph" aria-hidden="true">
       {icon}
     </span>
   );
 }
 
 function LeadingMark({ row }: { readonly row: ToolActivityRow }) {
-  const tile =
-    row.provider === undefined ? undefined : providerTile(row.provider);
+  const tile = row.provider === undefined ? undefined : providerTile(row.provider);
   if (tile !== undefined) {
     return (
       <span
@@ -110,20 +100,12 @@ function LeadingMark({ row }: { readonly row: ToolActivityRow }) {
   return <ActionGlyph glyph={row.glyph} />;
 }
 
-function ChipBody({
-  row,
-  open,
-}: {
-  readonly row: ToolActivityRow;
-  readonly open: boolean;
-}) {
+function ChipBody({ row, open }: { readonly row: ToolActivityRow; readonly open: boolean }) {
   return (
     <>
       <LeadingMark row={row} />
       {row.status === "failed" ? (
-        <span className="chat-tool-activity-status-word">
-          {CHAT_STRINGS.toolActivityFailed}.{" "}
-        </span>
+        <span className="chat-tool-activity-status-word">{CHAT_STRINGS.toolActivityFailed}. </span>
       ) : null}
       <span className="chat-tool-activity-phrase">{row.phrase}</span>
       {row.meta === undefined ? null : (
@@ -133,11 +115,7 @@ function ChipBody({
       )}
       <StatusMarker status={row.status} />
       {row.detail === undefined ? null : (
-        <CaretRight
-          className="chat-tool-activity-caret"
-          data-open={open}
-          aria-hidden="true"
-        />
+        <CaretRight className="chat-tool-activity-caret" data-open={open} aria-hidden="true" />
       )}
     </>
   );
@@ -155,11 +133,7 @@ function ToolActivityLine({
 
   if (!hasDetail) {
     return (
-      <div
-        className="chat-tool-activity-row"
-        data-status={row.status}
-        data-indented={indented}
-      >
+      <div className="chat-tool-activity-row" data-status={row.status} data-indented={indented}>
         <div className="chat-tool-activity-chip" title={row.toolName}>
           <ChipBody row={row} open={false} />
         </div>
@@ -168,11 +142,7 @@ function ToolActivityLine({
   }
 
   return (
-    <div
-      className="chat-tool-activity-row"
-      data-status={row.status}
-      data-indented={indented}
-    >
+    <div className="chat-tool-activity-row" data-status={row.status} data-indented={indented}>
       <button
         type="button"
         className="chat-tool-activity-chip chat-tool-activity-trigger"
@@ -194,11 +164,7 @@ function ToolActivityLine({
  * chip keeps its own disclosure onto its detail; there is no group-level
  * trigger and no count of how many calls happened.
  */
-export function ToolActivityGroup({
-  rows,
-}: {
-  readonly rows: readonly ToolActivityRow[];
-}) {
+export function ToolActivityGroup({ rows }: { readonly rows: readonly ToolActivityRow[] }) {
   if (rows.length === 0) return null;
   return (
     <div className="chat-tool-activity" data-slot="tool-activity">
@@ -224,10 +190,7 @@ export function LiveToolActivity({
 }) {
   if (rows.length === 0 && !thinking && retryCount === 0) return null;
   return (
-    <div
-      className="chat-tool-activity chat-tool-activity-live"
-      data-slot="tool-activity"
-    >
+    <div className="chat-tool-activity chat-tool-activity-live" data-slot="tool-activity">
       {rows.map((row) => (
         <ToolActivityLine key={row.key} row={row} indented={false} />
       ))}
diff --git a/packages/chat-ui/src/tool-activity.test.ts b/packages/chat-ui/src/tool-activity.test.ts
index 91d82ff754..7671ec43c1 100644
--- a/packages/chat-ui/src/tool-activity.test.ts
+++ b/packages/chat-ui/src/tool-activity.test.ts
@@ -73,43 +73,31 @@ describe("resolveToolIdentity", () => {
 
 describe("describeToolCall", () => {
   test("a web search names what was searched for, in the right tense", () => {
-    expect(
-      describeToolCall("web_search", { query: "bench pricing" }, "past"),
-    ).toBe('Searched the web for "bench pricing"');
-    expect(
-      describeToolCall("web_search", { query: "bench pricing" }, "present"),
-    ).toBe('Searching the web for "bench pricing"');
+    expect(describeToolCall("web_search", { query: "bench pricing" }, "past")).toBe(
+      'Searched the web for "bench pricing"',
+    );
+    expect(describeToolCall("web_search", { query: "bench pricing" }, "present")).toBe(
+      'Searching the web for "bench pricing"',
+    );
   });
 
   test("a provider tool reads as a sentence naming the provider, not the identifier", () => {
-    const phrase = describeToolCall(
-      "slack__post_message",
-      { channel: "general" },
-      "past",
-    );
+    const phrase = describeToolCall("slack__post_message", { channel: "general" }, "past");
     expect(phrase).toBe("Posted a message in Slack #general");
     expect(phrase).not.toContain("__");
     expect(phrase).not.toContain("slack__post_message");
   });
 
   test("a file tool names the file, not its full path", () => {
-    expect(
-      describeToolCall(
-        "write_file",
-        { path: "/srv/app/src/report.md" },
-        "past",
-      ),
-    ).toBe("Wrote a file — report.md");
+    expect(describeToolCall("write_file", { path: "/srv/app/src/report.md" }, "past")).toBe(
+      "Wrote a file — report.md",
+    );
   });
 
   test("a url tool names the host", () => {
-    expect(
-      describeToolCall(
-        "fetch_page",
-        { url: "https://www.example.com/a/b" },
-        "past",
-      ),
-    ).toBe("Fetched a page on example.com");
+    expect(describeToolCall("fetch_page", { url: "https://www.example.com/a/b" }, "past")).toBe(
+      "Fetched a page on example.com",
+    );
   });
 
   test("an MCP dispatch call describes the tool it actually invoked", () => {
@@ -133,24 +121,16 @@ describe("describeToolCall", () => {
   });
 
   test("a colon-namespaced GitHub tool still names the provider, not the id", () => {
-    expect(describeToolCall("github:get_issue", {}, "past")).toBe(
-      "Retrieved an issue in GitHub",
-    );
-    expect(describeToolCall("github__get_issue", {}, "past")).toBe(
-      "Retrieved an issue in GitHub",
-    );
+    expect(describeToolCall("github:get_issue", {}, "past")).toBe("Retrieved an issue in GitHub");
+    expect(describeToolCall("github__get_issue", {}, "past")).toBe("Retrieved an issue in GitHub");
   });
 
   test("a bare search names the query and never the identifier", () => {
-    expect(describeToolCall("search", { q: "x" }, "past")).toBe(
-      'Searched for "x"',
-    );
+    expect(describeToolCall("search", { q: "x" }, "past")).toBe('Searched for "x"');
   });
 
   test("an unknown colon-namespaced verb title-cases the end name, not the package", () => {
-    expect(describeToolCall("acme:frobnicate_widget", {}, "past")).toBe(
-      "Frobnicate widget",
-    );
+    expect(describeToolCall("acme:frobnicate_widget", {}, "past")).toBe("Frobnicate widget");
   });
 
   test("an Interchange memory search is a layman sentence, not a qualified id", () => {
@@ -166,33 +146,21 @@ describe("describeToolCall", () => {
   });
 
   test("an Interchange memory search still running has no query to name", () => {
-    expect(
-      describeToolCall(
-        "@corbits/memory-tools/memory:memory_search",
-        {},
-        "present",
-      ),
-    ).toBe("Searching memory");
+    expect(describeToolCall("@corbits/memory-tools/memory:memory_search", {}, "present")).toBe(
+      "Searching memory",
+    );
   });
 
   test("an Interchange list-agents call pluralizes without a package path", () => {
-    expect(
-      describeToolCall(
-        "@corbits/agent-directory-tools/ad:list_agents",
-        {},
-        "past",
-      ),
-    ).toBe("Listed agents");
+    expect(describeToolCall("@corbits/agent-directory-tools/ad:list_agents", {}, "past")).toBe(
+      "Listed agents",
+    );
   });
 
   test("an Interchange ask-user call is a question, not the tool id", () => {
-    expect(
-      describeToolCall(
-        "@corbits/interaction-tools/ask-user:ask_user",
-        {},
-        "past",
-      ),
-    ).toBe("Asked a question");
+    expect(describeToolCall("@corbits/interaction-tools/ask-user:ask_user", {}, "past")).toBe(
+      "Asked a question",
+    );
   });
 
   test("a verb in the middle of the leftover name still tenses, without repeating Linear", () => {
@@ -204,25 +172,17 @@ describe("describeToolCall", () => {
     expect(phrase).toBe("Listed recent issues in Linear");
     expect(phrase).not.toBe("Linear list recent issues in Linear");
     expect(
-      describeToolCall(
-        "@corbits/linear-tools/li:linear_list_recent_issues",
-        {},
-        "present",
-      ),
+      describeToolCall("@corbits/linear-tools/li:linear_list_recent_issues", {}, "present"),
     ).toBe("Listing recent issues in Linear");
   });
 
   test("a nameless-verb tool still tenses its query clause", () => {
-    expect(
-      describeToolCall("github_activity", { query: "bench pricing" }, "past"),
-    ).toBe('Ran github activity for "bench pricing"');
-    expect(
-      describeToolCall(
-        "github_activity",
-        { query: "bench pricing" },
-        "present",
-      ),
-    ).toBe('Running github activity for "bench pricing"');
+    expect(describeToolCall("github_activity", { query: "bench pricing" }, "past")).toBe(
+      'Ran github activity for "bench pricing"',
+    );
+    expect(describeToolCall("github_activity", { query: "bench pricing" }, "present")).toBe(
+      'Running github activity for "bench pricing"',
+    );
   });
 });
 
@@ -237,9 +197,7 @@ describe("plainTextOfOutput", () => {
   });
 
   test("unwraps a result envelope's content", () => {
-    expect(plainTextOfOutput({ content: [{ type: "text", text: "hi" }] })).toBe(
-      "hi",
-    );
+    expect(plainTextOfOutput({ content: [{ type: "text", text: "hi" }] })).toBe("hi");
   });
 
   test("returns nothing for an opaque object rather than stringifying it", () => {
@@ -253,15 +211,13 @@ describe("summarizeToolOutput", () => {
   });
 
   test("a failure keeps its first line as the reason", () => {
-    expect(
-      summarizeToolOutput("failed", "Repository not found\n  at listIssues"),
-    ).toBe("Repository not found");
+    expect(summarizeToolOutput("failed", "Repository not found\n  at listIssues")).toBe(
+      "Repository not found",
+    );
   });
 
   test("a success with no prose falls back to counting the results", () => {
-    expect(summarizeToolOutput("success", [{ id: 1 }, { id: 2 }])).toBe(
-      "2 results.",
-    );
+    expect(summarizeToolOutput("success", [{ id: 1 }, { id: 2 }])).toBe("2 results.");
     expect(summarizeToolOutput("success", [])).toBe("Nothing found.");
   });
 
@@ -287,9 +243,7 @@ describe("toToolActivityRow", () => {
       "k",
     );
     expect(row.status).toBe("failed");
-    expect(row.phrase).toBe(
-      "Retrieved an issue in GitHub corbitsdev/workbench",
-    );
+    expect(row.phrase).toBe("Retrieved an issue in GitHub corbitsdev/workbench");
     expect(row.detail).toBe("Repository not found");
   });
 
@@ -325,8 +279,7 @@ describe("toToolActivityRow", () => {
       trace({
         name: "@corbits/interaction-tools/ask-user:ask_user",
         status: "success",
-        output:
-          "The question has been shown to the user. Do not repeat the question.",
+        output: "The question has been shown to the user. Do not repeat the question.",
       }),
       "k",
     );
@@ -428,31 +381,18 @@ describe("groupTimelineParts", () => {
       ],
       "m1",
     );
-    expect(groups.map((group) => group.kind)).toEqual([
-      "part",
-      "tool-activity",
-      "part",
-    ]);
+    expect(groups.map((group) => group.kind)).toEqual(["part", "tool-activity", "part"]);
     const round = groups[1];
     expect(round?.kind === "tool-activity" && round.rows.length).toBe(3);
   });
 
   test("rounds separated by prose stay separate rounds", () => {
-    const groups = groupTimelineParts(
-      [trace({}), text("mid"), trace({}), trace({})],
-      "m1",
-    );
-    expect(groups.map((group) => group.kind)).toEqual([
-      "tool-activity",
-      "part",
-      "tool-activity",
-    ]);
+    const groups = groupTimelineParts([trace({}), text("mid"), trace({}), trace({})], "m1");
+    expect(groups.map((group) => group.kind)).toEqual(["tool-activity", "part", "tool-activity"]);
   });
 
   test("a message with no tool calls is unchanged", () => {
     const groups = groupTimelineParts([text("hello")], "m1");
-    expect(groups).toEqual([
-      { kind: "part", part: text("hello"), key: "m1-0" },
-    ]);
+    expect(groups).toEqual([{ kind: "part", part: text("hello"), key: "m1-0" }]);
   });
 });
diff --git a/packages/chat-ui/src/tool-activity.ts b/packages/chat-ui/src/tool-activity.ts
index 6b686194e9..71398bce33 100644
--- a/packages/chat-ui/src/tool-activity.ts
+++ b/packages/chat-ui/src/tool-activity.ts
@@ -25,7 +25,13 @@ import type { Part, ToolTracePart } from "./wire/parts";
 export type ToolActivityStatus = "pending" | "running" | "success" | "failed";
 
 export type ToolActivityGlyph =
-  "search" | "list" | "ask" | "memory" | "agents" | "write" | "generic";
+  | "search"
+  | "list"
+  | "ask"
+  | "memory"
+  | "agents"
+  | "write"
+  | "generic";
 
 /** One tool call, ready to render: no identifiers, no JSON, no tense
  * mismatch with its own status. */
@@ -128,13 +134,7 @@ const PROVIDER_TILES: Record<string, ProviderTile> = {
 };
 
 /** Path segments that look like a namespace but are not a brand provider. */
-const NOT_PROVIDERS = new Set([
-  "memory",
-  "ad",
-  "ask-user",
-  "corbits",
-  "@corbits",
-]);
+const NOT_PROVIDERS = new Set(["memory", "ad", "ask-user", "corbits", "@corbits"]);
 
 /** Brand mark for a known provider. Unknown leftovers are not brands —
  * the chip uses an action glyph instead of inventing initials. */
@@ -149,10 +149,7 @@ function asRecord(value: unknown): Record<string, unknown> | undefined {
   return value as Record<string, unknown>;
 }
 
-function readString(
-  bag: Record<string, unknown> | undefined,
-  key: string,
-): string | undefined {
+function readString(bag: Record<string, unknown> | undefined, key: string): string | undefined {
   const value = bag?.[key];
   if (typeof value !== "string") return undefined;
   const trimmed = value.trim();
@@ -197,18 +194,13 @@ function packageStem(segment: string): string {
 function knownBrandId(candidate: string): string | undefined {
   const stemmed = packageStem(candidate);
   if (stemmed === "" || NOT_PROVIDERS.has(stemmed)) return undefined;
-  if (
-    PROVIDER_NAMES[stemmed] !== undefined ||
-    PROVIDER_TILES[stemmed] !== undefined
-  ) {
+  if (PROVIDER_NAMES[stemmed] !== undefined || PROVIDER_TILES[stemmed] !== undefined) {
     return stemmed;
   }
   return undefined;
 }
 
-function providerFromLeftover(
-  leftover: string | undefined,
-): string | undefined {
+function providerFromLeftover(leftover: string | undefined): string | undefined {
   if (leftover === undefined || leftover === "") return undefined;
   const interchange = leftover.includes("/") || leftover.startsWith("@");
   if (interchange) {
@@ -267,10 +259,7 @@ function splitQualifiedName(name: string): {
  * segment or `-tools` stem is a known brand; `memory`, `ad`, and
  * `ask-user` never are.
  */
-export function resolveToolIdentity(
-  name: string,
-  input: unknown,
-): ToolIdentity {
+export function resolveToolIdentity(name: string, input: unknown): ToolIdentity {
   const args = asRecord(input);
   if (name === "mcp_read" || name === "mcp_call") {
     const server = readString(args, "server");
@@ -292,8 +281,7 @@ export function resolveToolIdentity(
 }
 
 export function toolActivityGlyph(words: readonly string[]): ToolActivityGlyph {
-  const has = (candidates: readonly string[]) =>
-    words.some((word) => candidates.includes(word));
+  const has = (candidates: readonly string[]) => words.some((word) => candidates.includes(word));
   if (has(["search", "find", "query", "grep", "glob"])) return "search";
   if (has(["list"])) return "list";
   if (has(["ask"])) return "ask";
@@ -397,10 +385,7 @@ function pluralize(word: string): string {
   return `${word}s`;
 }
 
-function objectPhrase(
-  words: readonly string[],
-  verb: string | undefined,
-): string | undefined {
+function objectPhrase(words: readonly string[], verb: string | undefined): string | undefined {
   if (words.length === 0) return undefined;
   const lastWord = words[words.length - 1] ?? "";
   const rendered =
@@ -414,10 +399,7 @@ function objectPhrase(
   return `${startsWithVowel ? "an" : "a"} ${joined}`;
 }
 
-function buildClauseSuffix(
-  clause: string | undefined,
-  hasProvider: boolean,
-): string {
+function buildClauseSuffix(clause: string | undefined, hasProvider: boolean): string {
   if (clause === undefined) return "";
   if (hasProvider && clause.startsWith("in ")) {
     return ` ${clause.slice("in ".length)}`;
@@ -425,11 +407,7 @@ function buildClauseSuffix(
   return ` ${clause}`;
 }
 
-function domainHead(
-  words: readonly string[],
-  verb: string,
-  tense: Tense,
-): string | undefined {
+function domainHead(words: readonly string[], verb: string, tense: Tense): string | undefined {
   const has = (word: string) => words.includes(word);
   const conjugation = VERBS[verb];
   if (conjugation === undefined) return undefined;
@@ -456,11 +434,7 @@ function domainHead(
  * for. Never contains the tool's identifier, its argument JSON, or an
  * internal id.
  */
-export function describeToolCall(
-  name: string,
-  input: unknown,
-  tense: Tense,
-): string {
+export function describeToolCall(name: string, input: unknown, tense: Tense): string {
   const identity = resolveToolIdentity(name, input);
   const clause = argumentClause(input);
   const picked = pickVerb(identity.words);
@@ -469,9 +443,7 @@ export function describeToolCall(
       ? picked.objectWords
       : picked.objectWords.filter((word) => word !== identity.provider);
   const providerSuffix =
-    identity.provider === undefined
-      ? ""
-      : ` in ${providerDisplayName(identity.provider)}`;
+    identity.provider === undefined ? "" : ` in ${providerDisplayName(identity.provider)}`;
 
   if (picked.verb !== undefined) {
     const domain = domainHead(identity.words, picked.verb, tense);
@@ -481,10 +453,7 @@ export function describeToolCall(
     const conjugation = VERBS[picked.verb];
     if (conjugation !== undefined) {
       const object = objectPhrase(objectWords, picked.verb);
-      const head =
-        object === undefined
-          ? conjugation[tense]
-          : `${conjugation[tense]} ${object}`;
+      const head = object === undefined ? conjugation[tense] : `${conjugation[tense]} ${object}`;
       const clauseSuffix = buildClauseSuffix(clause, providerSuffix !== "");
       return `${head}${providerSuffix}${clauseSuffix}`;
     }
@@ -537,17 +506,10 @@ export function plainTextOfOutput(output: unknown): string | undefined {
     const fromContent = plainTextOfOutput(nested);
     if (fromContent !== undefined) return fromContent;
   }
-  return (
-    readString(record, "text") ??
-    readString(record, "message") ??
-    readString(record, "error")
-  );
+  return readString(record, "text") ?? readString(record, "message") ?? readString(record, "error");
 }
 
-function shortField(
-  record: Record<string, unknown>,
-  key: string,
-): string | undefined {
+function shortField(record: Record<string, unknown>, key: string): string | undefined {
   const value = readString(record, key);
   if (value === undefined) return undefined;
   if (value.length > MAX_SHORT_FIELD) return truncate(value, MAX_SHORT_FIELD);
@@ -618,9 +580,7 @@ export function summarizeToolOutput(
   }
   const nestedRecord = asRecord(nested);
   if (nestedRecord !== undefined) {
-    return (
-      shortField(nestedRecord, "text") ?? shortField(nestedRecord, "message")
-    );
+    return shortField(nestedRecord, "text") ?? shortField(nestedRecord, "message");
   }
   return undefined;
 }
@@ -631,13 +591,9 @@ function rowStatus(part: ToolTracePart): ToolActivityStatus {
   return part.status;
 }
 
-export function toToolActivityRow(
-  part: ToolTracePart,
-  key: string,
-): ToolActivityRow {
+export function toToolActivityRow(part: ToolTracePart, key: string): ToolActivityRow {
   const status = rowStatus(part);
-  const tense: Tense =
-    status === "running" || status === "pending" ? "present" : "past";
+  const tense: Tense = status === "running" || status === "pending" ? "present" : "past";
   const identity = resolveToolIdentity(part.name, part.input);
   return {
     key,
diff --git a/packages/chat-ui/src/turn-activity.test.ts b/packages/chat-ui/src/turn-activity.test.ts
index d8b1c9a569..c377d316b7 100644
--- a/packages/chat-ui/src/turn-activity.test.ts
+++ b/packages/chat-ui/src/turn-activity.test.ts
@@ -8,9 +8,7 @@ function agentEvent(inner: unknown) {
 
 describe("nextTurnActivityState (CL-6196: live tool-call and thinking states)", () => {
   test("a non chat.agent event never opens or changes the activity", () => {
-    expect(
-      nextTurnActivityState(null, { eventType: "chat.typing", data: {} }, 0),
-    ).toBeNull();
+    expect(nextTurnActivityState(null, { eventType: "chat.typing", data: {} }, 0)).toBeNull();
   });
 
   test("reactor.start opens an empty activity, clearing any leftover from a previous turn", () => {
@@ -38,12 +36,7 @@ describe("nextTurnActivityState (CL-6196: live tool-call and thinking states)",
   });
 
   test("reactor.done, reactor.error, inference.done, and inference.error finalize the turn to null", () => {
-    for (const type of [
-      "reactor.done",
-      "reactor.error",
-      "inference.done",
-      "inference.error",
-    ]) {
+    for (const type of ["reactor.done", "reactor.error", "inference.done", "inference.error"]) {
       const state = nextTurnActivityState(
         {
           toolCalls: [],
@@ -301,11 +294,7 @@ describe("nextTurnActivityState (CL-6196: live tool-call and thinking states)",
       retryCount: 0,
     });
     expect(
-      nextTurnActivityState(
-        null,
-        agentEvent({ type: "tool.start", seq: 1, data: {} }),
-        0,
-      ),
+      nextTurnActivityState(null, agentEvent({ type: "tool.start", seq: 1, data: {} }), 0),
     ).toEqual({
       toolCalls: [],
       thinking: { active: false, charCount: 0 },
diff --git a/packages/chat-ui/src/turn-activity.tsx b/packages/chat-ui/src/turn-activity.tsx
index 1579f722ed..a6f379c771 100644
--- a/packages/chat-ui/src/turn-activity.tsx
+++ b/packages/chat-ui/src/turn-activity.tsx
@@ -46,9 +46,7 @@ const EMPTY_ACTIVITY: NonNullable<TurnActivityState> = {
 };
 
 function asRecord(value: unknown): Record<string, unknown> | null {
-  return typeof value === "object" && value !== null
-    ? (value as Record<string, unknown>)
-    : null;
+  return typeof value === "object" && value !== null ? (value as Record<string, unknown>) : null;
 }
 
 /** The bare `type` discriminant of a `chat.agent` payload — mirrors
@@ -66,9 +64,7 @@ function innerData(data: unknown): Record<string, unknown> | null {
   return record === null ? null : asRecord(record.data);
 }
 
-function parseToolCallStart(
-  data: unknown,
-): { callId: string; name: string } | null {
+function parseToolCallStart(data: unknown): { callId: string; name: string } | null {
   const inner = innerData(data);
   if (inner === null) return null;
   const { callId, name } = inner;
@@ -105,9 +101,7 @@ function parseToolStart(data: unknown): {
 /** A settled tool call, with the one thing the old reading dropped: whether
  * it actually worked. A failed call used to land in the strip as a quiet
  * check mark, indistinguishable from a success. */
-function parseToolDone(
-  data: unknown,
-): { callId: string; isError: boolean } | null {
+function parseToolDone(data: unknown): { callId: string; isError: boolean } | null {
   const inner = innerData(data);
   const result = inner === null ? null : asRecord(inner.result);
   if (result === null) return null;
@@ -240,9 +234,7 @@ export function nextTurnActivityState(
     const parsed = parseThinkingDelta(event.data);
     if (parsed === null) return base;
     const charCount =
-      parsed.kind === "cumulative"
-        ? parsed.charCount
-        : base.thinking.charCount + parsed.charCount;
+      parsed.kind === "cumulative" ? parsed.charCount : base.thinking.charCount + parsed.charCount;
     return { ...base, thinking: { active: true, charCount } };
   }
   const thinking = base.thinking.active
@@ -302,12 +294,7 @@ export function nextTurnActivityState(
     return {
       ...base,
       thinking,
-      toolCalls: settleToolCall(
-        base.toolCalls,
-        parsed.callId,
-        parsed.isError,
-        nowMs,
-      ),
+      toolCalls: settleToolCall(base.toolCalls, parsed.callId, parsed.isError, nowMs),
     };
   }
   if (innerType === "inference.retry") {
@@ -369,9 +356,7 @@ export function useTurnActivity(
   }, [activity, staleMs, clock]);
 
   function handleStreamEvent(eventType: string, data: unknown) {
-    setActivity((current) =>
-      nextTurnActivityState(current, { eventType, data }, clock.now()),
-    );
+    setActivity((current) => nextTurnActivityState(current, { eventType, data }, clock.now()));
   }
 
   return { activity, handleStreamEvent };
@@ -399,11 +384,7 @@ export function toolActivityRows(
       toolName: identity.toolName,
       glyph: toolActivityGlyph(identity.words),
       provider: identity.provider,
-      phrase: describeToolCall(
-        call.name,
-        call.input,
-        isRunning ? "present" : "past",
-      ),
+      phrase: describeToolCall(call.name, call.input, isRunning ? "present" : "past"),
       detail: undefined,
       status: call.status,
     };
@@ -418,13 +399,8 @@ export function toolActivityRows(
  * needed one. Renders nothing once the turn ends — the persisted message
  * takes over from there, in the same row idiom.
  */
-export function TurnActivityStrip({
-  activity,
-}: {
-  readonly activity: TurnActivityState;
-}) {
-  const hasRunningToolCall =
-    activity?.toolCalls.some((call) => call.status === "running") ?? false;
+export function TurnActivityStrip({ activity }: { readonly activity: TurnActivityState }) {
+  const hasRunningToolCall = activity?.toolCalls.some((call) => call.status === "running") ?? false;
   const [, forceTick] = useState(0);
 
   useEffect(() => {
diff --git a/packages/chat-ui/src/typing-indicator.tsx b/packages/chat-ui/src/typing-indicator.tsx
index 868adfc060..570c1a45aa 100644
--- a/packages/chat-ui/src/typing-indicator.tsx
+++ b/packages/chat-ui/src/typing-indicator.tsx
@@ -123,13 +123,7 @@ export function useTypingIndicator(
 
   function handleStreamEvent(eventType: string, data: unknown) {
     const now = Date.now();
-    const next = nextTypingState(
-      typingState,
-      { eventType, data },
-      selfPrincipalId,
-      now,
-      timeoutMs,
-    );
+    const next = nextTypingState(typingState, { eventType, data }, selfPrincipalId, now, timeoutMs);
     if (next === typingState) return;
 
     setTypingState(next);
@@ -137,9 +131,7 @@ export function useTypingIndicator(
     if (next !== null) {
       const expiresAt = next.expiresAt;
       timerRef.current = setTimeout(() => {
-        setTypingState((current) =>
-          isTypingStateExpired(current, Date.now()) ? null : current,
-        );
+        setTypingState((current) => (isTypingStateExpired(current, Date.now()) ? null : current));
       }, expiresAt - now);
     }
   }
@@ -176,11 +168,7 @@ export function TypingIndicator({ label }: { readonly label: string }) {
  * kicks in at three. Renders nothing for an empty list so callers can
  * pass it unconditionally.
  */
-export function AgentTypingIndicator({
-  names,
-}: {
-  readonly names: readonly string[];
-}) {
+export function AgentTypingIndicator({ names }: { readonly names: readonly string[] }) {
   if (names.length === 0) return null;
   return <TypingDotsBubble status={CHAT_STRINGS.agentsTyping(names)} />;
 }
diff --git a/packages/chat-ui/src/use-optimistic-sends.ts b/packages/chat-ui/src/use-optimistic-sends.ts
index 3b91bc2f0b..584d5ef147 100644
--- a/packages/chat-ui/src/use-optimistic-sends.ts
+++ b/packages/chat-ui/src/use-optimistic-sends.ts
@@ -69,9 +69,7 @@ function nextPendingSendNonce(): string {
  * item not being server-issued yet. Shared with `sendPending`'s own
  * synchronous insert (`chat-workspace.tsx`) so a message never changes
  * sender identity mid-flight. */
-export function pendingSenderAddress(
-  currentUserPrincipalId: string | undefined,
-): string {
+export function pendingSenderAddress(currentUserPrincipalId: string | undefined): string {
   return `${currentUserPrincipalId ?? "you"}@pending.local`;
 }
 
@@ -110,22 +108,18 @@ export function mergePendingSends(
       .map((item) => item.clientId)
       .filter((clientId): clientId is string => clientId !== undefined),
   );
-  const unresolvedSends = pendingSends.filter(
-    (pending) => !confirmedClientIds.has(pending.nonce),
-  );
+  const unresolvedSends = pendingSends.filter((pending) => !confirmedClientIds.has(pending.nonce));
   if (unresolvedSends.length === 0) return items;
   const senderAddress = pendingSenderAddress(currentUserPrincipalId);
-  const pendingItems: TimelineMessageItem[] = unresolvedSends.map(
-    (pending) => ({
-      id: pending.nonce,
-      createdAt: pending.createdAt,
-      parts: partsForSend(pending.text, pending.attachments),
-      sender: { name: null, address: senderAddress },
-      clientId: pending.nonce,
-      pendingStatus: pending.status,
-      pendingNonce: pending.nonce,
-    }),
-  );
+  const pendingItems: TimelineMessageItem[] = unresolvedSends.map((pending) => ({
+    id: pending.nonce,
+    createdAt: pending.createdAt,
+    parts: partsForSend(pending.text, pending.attachments),
+    sender: { name: null, address: senderAddress },
+    clientId: pending.nonce,
+    pendingStatus: pending.status,
+    pendingNonce: pending.nonce,
+  }));
   return [...items, ...pendingItems];
 }
 
@@ -260,16 +254,12 @@ export function useOptimisticSends(args: {
         (current: MessagesResponse | undefined) => {
           if (current === undefined) return current;
           const matchIndex = current.items.findIndex(
-            (item) =>
-              item.id === confirmed.id || item.clientId === confirmed.clientId,
+            (item) => item.id === confirmed.id || item.clientId === confirmed.clientId,
           );
           if (matchIndex >= 0) {
             const existing = current.items[matchIndex];
             if (existing === undefined) return current;
-            if (
-              confirmed.threadId !== undefined &&
-              existing.threadId !== confirmed.threadId
-            ) {
+            if (confirmed.threadId !== undefined && existing.threadId !== confirmed.threadId) {
               const items = current.items.slice();
               items[matchIndex] = {
                 ...existing,
@@ -304,10 +294,7 @@ export function useOptimisticSends(args: {
         // different workbench must not drag them back into this one's
         // thread — `useThreadNavigation` already reset the open thread on
         // that switch; re-opening it here would undo that reset (CL-7198).
-        if (
-          pendingParentMessageId !== null &&
-          activeWorkbenchIdRef.current === activeWorkbenchId
-        ) {
+        if (pendingParentMessageId !== null && activeWorkbenchIdRef.current === activeWorkbenchId) {
           openThreadById(threadId);
         }
       }
@@ -327,9 +314,7 @@ export function useOptimisticSends(args: {
         toast(CHAT_STRINGS.mentionForbidden);
       }
       setPendingSends((current) =>
-        current.map((p) =>
-          p.nonce === nonce ? { ...p, status: "failed" } : p,
-        ),
+        current.map((p) => (p.nonce === nonce ? { ...p, status: "failed" } : p)),
       );
     }
   }
diff --git a/packages/chat-ui/src/use-thread-navigation.ts b/packages/chat-ui/src/use-thread-navigation.ts
index 56b94f3dd6..bcc0bcbdd0 100644
--- a/packages/chat-ui/src/use-thread-navigation.ts
+++ b/packages/chat-ui/src/use-thread-navigation.ts
@@ -50,18 +50,10 @@ export function useThreadNavigation(args: {
   readonly threadsLoaded: boolean;
   readonly refetchThreads: () => Promise<unknown>;
 }): ThreadNavigation {
-  const {
-    tenantId,
-    activeWorkbenchId,
-    threads,
-    rootThreadId,
-    threadsLoaded,
-    refetchThreads,
-  } = args;
+  const { tenantId, activeWorkbenchId, threads, rootThreadId, threadsLoaded, refetchThreads } =
+    args;
   const [openThreadId, setOpenThreadId] = useState<string | null>(null);
-  const [pendingParentMessageId, setPendingParentMessageId] = useState<
-    string | null
-  >(null);
+  const [pendingParentMessageId, setPendingParentMessageId] = useState<string | null>(null);
   // A thread id `openThreadById` just set (first reply create, CL-6660)
   // can land one render before the seeded `GET /threads` row is visible
   // to this hook. Hold it so the stale-id effect below does not drop a
@@ -97,10 +89,7 @@ export function useThreadNavigation(args: {
 
   const replyThreadFor = useCallback(
     (messageId: string) =>
-      threads.find(
-        (thread) =>
-          thread.kind === "reply" && thread.parentMessageId === messageId,
-      ),
+      threads.find((thread) => thread.kind === "reply" && thread.parentMessageId === messageId),
     [threads],
   );
 
@@ -164,17 +153,13 @@ export function useThreadNavigation(args: {
     [threads],
   );
   const depth1Threads = useMemo(
-    () =>
-      replyThreads.filter((thread) => thread.parentThreadId === rootThreadId),
+    () => replyThreads.filter((thread) => thread.parentThreadId === rootThreadId),
     [replyThreads, rootThreadId],
   );
   const subThreadsByParentId = useMemo(() => {
     const map = new Map<string, WorkbenchThreadRow[]>();
     for (const thread of replyThreads) {
-      if (
-        thread.parentThreadId === null ||
-        thread.parentThreadId === rootThreadId
-      ) {
+      if (thread.parentThreadId === null || thread.parentThreadId === rootThreadId) {
         continue;
       }
       const list = map.get(thread.parentThreadId) ?? [];
@@ -184,9 +169,7 @@ export function useThreadNavigation(args: {
   }, [replyThreads, rootThreadId]);
 
   const openThread =
-    openThreadId === null
-      ? undefined
-      : threads.find((thread) => thread.id === openThreadId);
+    openThreadId === null ? undefined : threads.find((thread) => thread.id === openThreadId);
   const openThreadParent =
     openThread?.parentThreadId !== undefined &&
     openThread.parentThreadId !== null &&
@@ -200,9 +183,7 @@ export function useThreadNavigation(args: {
     inThreadView: openThreadId !== null || pendingParentMessageId !== null,
     openThread,
     openThreadParent,
-    threadTitle:
-      openThread?.title ??
-      (pendingParentMessageId !== null ? "New thread" : "Thread"),
+    threadTitle: openThread?.title ?? (pendingParentMessageId !== null ? "New thread" : "Thread"),
     depth1Threads,
     subThreadsByParentId,
     openThreadForMessage,
diff --git a/packages/chat-ui/src/use-workbench-feed.ts b/packages/chat-ui/src/use-workbench-feed.ts
index 401373346f..36533bb333 100644
--- a/packages/chat-ui/src/use-workbench-feed.ts
+++ b/packages/chat-ui/src/use-workbench-feed.ts
@@ -60,25 +60,13 @@ const NO_MESSAGES: readonly MessageItem[] = [];
 
 /** The three reads that make up one workbench's feed. They share a
  * prefix so a single `invalidateQueries` refreshes all of them. */
-export function chatFeedQueryKeyPrefix(
-  tenantId: string,
-  workbenchId: string | null,
-) {
+export function chatFeedQueryKeyPrefix(tenantId: string, workbenchId: string | null) {
   return ["chat", "feed", tenantId, workbenchId] as const;
 }
-export function chatMessagesQueryKey(
-  tenantId: string,
-  workbenchId: string | null,
-) {
-  return [
-    ...chatFeedQueryKeyPrefix(tenantId, workbenchId),
-    "messages",
-  ] as const;
+export function chatMessagesQueryKey(tenantId: string, workbenchId: string | null) {
+  return [...chatFeedQueryKeyPrefix(tenantId, workbenchId), "messages"] as const;
 }
-export function chatThreadsQueryKey(
-  tenantId: string,
-  workbenchId: string | null,
-) {
+export function chatThreadsQueryKey(tenantId: string, workbenchId: string | null) {
   return [...chatFeedQueryKeyPrefix(tenantId, workbenchId), "threads"] as const;
 }
 
@@ -224,11 +212,9 @@ export function useWorkbenchFeed(args: {
   // transient failure a retry could fix.
   const messagesError = messagesQuery.error;
   const isUnauthorized =
-    messagesError instanceof MailboxThreadFetchError &&
-    messagesError.status === 401;
+    messagesError instanceof MailboxThreadFetchError && messagesError.status === 401;
   const workbenchNotFound =
-    messagesError instanceof MailboxThreadFetchError &&
-    messagesError.status === 404;
+    messagesError instanceof MailboxThreadFetchError && messagesError.status === 404;
 
   // React Query keeps the last successful data through a failed refetch,
   // so a background failure leaves the timeline exactly as it was and
@@ -250,13 +236,7 @@ export function useWorkbenchFeed(args: {
       };
     }
     return { kind: "loading" };
-  }, [
-    activeWorkbenchId,
-    messagesQuery.data,
-    messagesError,
-    workbenchNotFound,
-    isUnauthorized,
-  ]);
+  }, [activeWorkbenchId, messagesQuery.data, messagesError, workbenchNotFound, isUnauthorized]);
 
   useEffect(() => {
     if (workbenchNotFound && activeWorkbenchId !== null) {
@@ -278,10 +258,7 @@ export function useWorkbenchFeed(args: {
     // window is the difference between ~40 requests per turn and ~2.
     const pending = refreshTimerRef.current;
     if (pending !== undefined) {
-      if (
-        pending.tenantId === tenantId &&
-        pending.workbenchId === activeWorkbenchId
-      ) {
+      if (pending.tenantId === tenantId && pending.workbenchId === activeWorkbenchId) {
         return;
       }
       // A timer scheduled for a workbench the reader has since left —
diff --git a/packages/chat-ui/src/use-workbench-stream.ts b/packages/chat-ui/src/use-workbench-stream.ts
index 25f260dc94..6d4c3d235f 100644
--- a/packages/chat-ui/src/use-workbench-stream.ts
+++ b/packages/chat-ui/src/use-workbench-stream.ts
@@ -130,12 +130,7 @@ export function useWorkbenchStream(
         if (cancelled) return;
         startPolling();
         attempts += 1;
-        const delay = backoffDelayMs(
-          attempts,
-          Math.random,
-          baseDelayMs,
-          maxDelayMs,
-        );
+        const delay = backoffDelayMs(attempts, Math.random, baseDelayMs, maxDelayMs);
         reconnectTimer = setTimeout(connect, delay);
       };
 
diff --git a/packages/chat-ui/src/wire/blocks.ts b/packages/chat-ui/src/wire/blocks.ts
index 327c15eef8..5c8ab69908 100644
--- a/packages/chat-ui/src/wire/blocks.ts
+++ b/packages/chat-ui/src/wire/blocks.ts
@@ -173,9 +173,7 @@ const ConnectGithubConnectedData = type({
   "steps?": OnboardingStepLabel.array(),
 }).onDeepUndeclaredKey("delete");
 
-export const ConnectGithubBlockData = ConnectGithubDisconnectedData.or(
-  ConnectGithubConnectedData,
-);
+export const ConnectGithubBlockData = ConnectGithubDisconnectedData.or(ConnectGithubConnectedData);
 export type ConnectGithubBlockData = typeof ConnectGithubBlockData.infer;
 
 // An agent-authored "connect this service" card (CL-6393), the
diff --git a/packages/chat-ui/src/wire/consumer-inference-text.ts b/packages/chat-ui/src/wire/consumer-inference-text.ts
index e7b707e2b8..fc6612eb9d 100644
--- a/packages/chat-ui/src/wire/consumer-inference-text.ts
+++ b/packages/chat-ui/src/wire/consumer-inference-text.ts
@@ -64,9 +64,7 @@ export function consumerFacingInferenceText(raw: string): string {
 
 /** True when `text` is (or starts with) a classified inference-failure preamble. */
 export function isClassifiedInferenceFailureText(text: string): boolean {
-  return CLASSIFIED_INFERENCE_FAILURE_PREAMBLES.some((preamble) =>
-    text.startsWith(preamble),
-  );
+  return CLASSIFIED_INFERENCE_FAILURE_PREAMBLES.some((preamble) => text.startsWith(preamble));
 }
 
 /**
diff --git a/packages/chat-ui/src/wire/display-name.ts b/packages/chat-ui/src/wire/display-name.ts
index 08d5953395..ccc91881c3 100644
--- a/packages/chat-ui/src/wire/display-name.ts
+++ b/packages/chat-ui/src/wire/display-name.ts
@@ -58,9 +58,7 @@ export function deriveDisplayName(definition: {
 }): string {
   const parsed = DisplayNameSource(definition);
   if (parsed instanceof type.errors) {
-    throw new Error(
-      `deriveDisplayName: invalid agent record: ${parsed.summary}`,
-    );
+    throw new Error(`deriveDisplayName: invalid agent record: ${parsed.summary}`);
   }
   const description = parsed.description?.trim();
   if (description !== undefined && description !== "") {
diff --git a/packages/chat-ui/src/wire/mentions.ts b/packages/chat-ui/src/wire/mentions.ts
index 9babe28636..f5b1b7e7db 100644
--- a/packages/chat-ui/src/wire/mentions.ts
+++ b/packages/chat-ui/src/wire/mentions.ts
@@ -44,18 +44,13 @@ export function mentionedParticipants(
   participants: readonly ParticipantRecord[],
 ): string[] {
   const texts = parts
-    .filter(
-      (part): part is Extract<PartType, { kind: "text" }> =>
-        part.kind === "text",
-    )
+    .filter((part): part is Extract<PartType, { kind: "text" }> => part.kind === "text")
     .map((part) => part.text);
   if (texts.length === 0) return [];
   return participants
     .filter((participant) => isAgentAddress(participant.address))
     .filter((participant) => {
-      const mentionPattern = new RegExp(
-        `@${escapeForRegExp(participant.handle)}\\b`,
-      );
+      const mentionPattern = new RegExp(`@${escapeForRegExp(participant.handle)}\\b`);
       return texts.some((text) => mentionPattern.test(text));
     })
     .map((participant) => participant.address);
diff --git a/packages/chat-ui/src/wire/participants.ts b/packages/chat-ui/src/wire/participants.ts
index b8075c6643..2d3632c0e5 100644
--- a/packages/chat-ui/src/wire/participants.ts
+++ b/packages/chat-ui/src/wire/participants.ts
@@ -78,10 +78,7 @@ export function handleFromName(name: string, fallbackAddress: string): string {
  * a workbench: "echo" becomes "echo-2", then "echo-3", etc. — the first
  * suffix not already taken.
  */
-export function dedupeHandle(
-  handle: string,
-  taken: ReadonlySet<string>,
-): string {
+export function dedupeHandle(handle: string, taken: ReadonlySet<string>): string {
   if (!taken.has(handle)) return handle;
   let suffix = 2;
   while (taken.has(`${handle}-${suffix}`)) suffix += 1;
diff --git a/packages/chat-ui/src/wire/parts.ts b/packages/chat-ui/src/wire/parts.ts
index e8a6ccda16..1e0bab1f9a 100644
--- a/packages/chat-ui/src/wire/parts.ts
+++ b/packages/chat-ui/src/wire/parts.ts
@@ -88,9 +88,7 @@ export const FilePart = type({
     return true;
   }
   if (hasBlobId === hasData) {
-    return ctx.reject(
-      "exactly one of `blobId` or `data` must be set on a FilePart",
-    );
+    return ctx.reject("exactly one of `blobId` or `data` must be set on a FilePart");
   }
   return true;
 });
diff --git a/packages/chat-ui/src/wire/stream-events.ts b/packages/chat-ui/src/wire/stream-events.ts
index bd8dafb6ac..ebfab24773 100644
--- a/packages/chat-ui/src/wire/stream-events.ts
+++ b/packages/chat-ui/src/wire/stream-events.ts
@@ -92,5 +92,4 @@ export const ChatPresenceSnapshotEventData = type({
     lastActiveAt: "string",
   }).array(),
 });
-export type ChatPresenceSnapshotEventData =
-  typeof ChatPresenceSnapshotEventData.infer;
+export type ChatPresenceSnapshotEventData = typeof ChatPresenceSnapshotEventData.infer;
diff --git a/packages/chat-ui/src/wire/tools-unsupported.ts b/packages/chat-ui/src/wire/tools-unsupported.ts
index ac8f327662..52aea11122 100644
--- a/packages/chat-ui/src/wire/tools-unsupported.ts
+++ b/packages/chat-ui/src/wire/tools-unsupported.ts
@@ -10,8 +10,7 @@
  * catalog/registry capability strings never belong on the timeline.
  */
 
-export const TOOLS_UNSUPPORTED_CONSUMER_MESSAGE =
-  "This agent's model can't use tools.";
+export const TOOLS_UNSUPPORTED_CONSUMER_MESSAGE = "This agent's model can't use tools.";
 
 /**
  * Conservative match: provider/inference errors about tools /
diff --git a/packages/chat-ui/src/workbench-display-title.test.ts b/packages/chat-ui/src/workbench-display-title.test.ts
index 9730b172cc..87cc4f7bca 100644
--- a/packages/chat-ui/src/workbench-display-title.test.ts
+++ b/packages/chat-ui/src/workbench-display-title.test.ts
@@ -11,16 +11,12 @@ describe("displayWorkbenchTitle", () => {
 
   test("a title matching the run-id shape reads as New workbench even for a different id", () => {
     const runId = "run_1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d";
-    expect(displayWorkbenchTitle(runId, "some-other-id")).toBe(
-      CHAT_STRINGS.newWorkbenchTitle,
-    );
+    expect(displayWorkbenchTitle(runId, "some-other-id")).toBe(CHAT_STRINGS.newWorkbenchTitle);
   });
 
   test("a legacy instance-id-shaped title reads as New workbench", () => {
     const insId = "ins_1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d";
-    expect(displayWorkbenchTitle(insId, "some-other-id")).toBe(
-      CHAT_STRINGS.newWorkbenchTitle,
-    );
+    expect(displayWorkbenchTitle(insId, "some-other-id")).toBe(CHAT_STRINGS.newWorkbenchTitle);
   });
 
   test("a real title renders unchanged", () => {
diff --git a/packages/chat-ui/src/workbench-display-title.ts b/packages/chat-ui/src/workbench-display-title.ts
index 4336062a82..0eb9dbf10f 100644
--- a/packages/chat-ui/src/workbench-display-title.ts
+++ b/packages/chat-ui/src/workbench-display-title.ts
@@ -17,7 +17,5 @@ const RUN_ID_SHAPE = /^(?:run|ins)_[0-9a-f]{32}$/;
  * keep applying their own empty-title fallback on top of this.
  */
 export function displayWorkbenchTitle(title: string, id: string): string {
-  return title === id || RUN_ID_SHAPE.test(title)
-    ? CHAT_STRINGS.newWorkbenchTitle
-    : title;
+  return title === id || RUN_ID_SHAPE.test(title) ? CHAT_STRINGS.newWorkbenchTitle : title;
 }
diff --git a/packages/chat-ui/src/workbench-presence.ts b/packages/chat-ui/src/workbench-presence.ts
index 2ff07464ee..cb7a7bff22 100644
--- a/packages/chat-ui/src/workbench-presence.ts
+++ b/packages/chat-ui/src/workbench-presence.ts
@@ -37,9 +37,7 @@ export function parsePresenceEvent(
 
 /** Parses a `chat.presence.snapshot` SSE payload — the one-time roster a
  * freshly opened stream is handed before any delta. */
-export function parsePresenceSnapshotEvent(
-  data: unknown,
-): readonly PresenceRosterEntry[] | null {
+export function parsePresenceSnapshotEvent(data: unknown): readonly PresenceRosterEntry[] | null {
   if (typeof data !== "object" || data === null) return null;
   const members = (data as Record<string, unknown>).members;
   if (!Array.isArray(members)) return null;
@@ -74,21 +72,15 @@ export function nextPresenceRoster(
     const parsed = parsePresenceEvent(event.data);
     if (parsed === null) return current;
     if (parsed.state === "offline") {
-      return current.filter(
-        (member) => member.principalId !== parsed.principalId,
-      );
+      return current.filter((member) => member.principalId !== parsed.principalId);
     }
-    const existingIndex = current.findIndex(
-      (member) => member.principalId === parsed.principalId,
-    );
+    const existingIndex = current.findIndex((member) => member.principalId === parsed.principalId);
     const entry: PresenceRosterEntry = {
       principalId: parsed.principalId,
       lastActiveAt: parsed.lastActiveAt,
     };
     if (existingIndex === -1) return [...current, entry];
-    return current.map((member, index) =>
-      index === existingIndex ? entry : member,
-    );
+    return current.map((member, index) => (index === existingIndex ? entry : member));
   }
   return current;
 }
diff --git a/packages/chat-ui/src/workbench-settings/agents-section.test.ts b/packages/chat-ui/src/workbench-settings/agents-section.test.ts
index c950916140..a29524c75f 100644
--- a/packages/chat-ui/src/workbench-settings/agents-section.test.ts
+++ b/packages/chat-ui/src/workbench-settings/agents-section.test.ts
@@ -6,10 +6,7 @@
 
 import { describe, expect, test } from "bun:test";
 
-import {
-  collapseHistoryVersions,
-  summarizeHistoryMessage,
-} from "./agents-section";
+import { collapseHistoryVersions, summarizeHistoryMessage } from "./agents-section";
 import type { AgentVersion } from "../api";
 
 function version(overrides: Partial<AgentVersion> = {}): AgentVersion {
@@ -28,34 +25,26 @@ describe("summarizeHistoryMessage", () => {
     expect(summarizeHistoryMessage("Update agent instructions for Myra")).toBe(
       "Instructions updated",
     );
-    expect(summarizeHistoryMessage("Update agent skills for Myra")).toBe(
-      "Skills updated",
-    );
+    expect(summarizeHistoryMessage("Update agent skills for Myra")).toBe("Skills updated");
   });
 
   test("a capability addition names what was added", () => {
     expect(summarizeHistoryMessage("Add @corbits/github-tools to Myra")).toBe(
       "Added tool: @corbits/github-tools",
     );
-    expect(summarizeHistoryMessage("Add research skill to Myra")).toBe(
-      "Added skill: research",
+    expect(summarizeHistoryMessage("Add research skill to Myra")).toBe("Added skill: research");
+    expect(summarizeHistoryMessage("Set Myra's model to anthropic/claude-sonnet")).toBe(
+      "Model set to anthropic/claude-sonnet",
     );
-    expect(
-      summarizeHistoryMessage("Set Myra's model to anthropic/claude-sonnet"),
-    ).toBe("Model set to anthropic/claude-sonnet");
   });
 
   test("restore and creation read as their own summaries", () => {
-    expect(summarizeHistoryMessage("Restore agent Myra to a1b2c3d4")).toBe(
-      "Restored from history",
-    );
+    expect(summarizeHistoryMessage("Restore agent Myra to a1b2c3d4")).toBe("Restored from history");
     expect(summarizeHistoryMessage("Define agent Myra")).toBe("Agent created");
   });
 
   test("an unrecognized message falls back to itself rather than going blank", () => {
-    expect(summarizeHistoryMessage("Something new entirely")).toBe(
-      "Something new entirely",
-    );
+    expect(summarizeHistoryMessage("Something new entirely")).toBe("Something new entirely");
   });
 });
 
diff --git a/packages/chat-ui/src/workbench-settings/agents-section.tsx b/packages/chat-ui/src/workbench-settings/agents-section.tsx
index fb7d77abc4..38d2c2dc14 100644
--- a/packages/chat-ui/src/workbench-settings/agents-section.tsx
+++ b/packages/chat-ui/src/workbench-settings/agents-section.tsx
@@ -85,8 +85,7 @@ export function AgentsSection({
 }) {
   const [state, setState] = useState<ListState>({ kind: "loading" });
   const [localEntityId, setLocalEntityId] = useState<string | null>(null);
-  const selectedId =
-    onEntityIdChange !== undefined ? (entityId ?? null) : localEntityId;
+  const selectedId = onEntityIdChange !== undefined ? (entityId ?? null) : localEntityId;
 
   useEffect(() => {
     let cancelled = false;
@@ -145,25 +144,16 @@ export function AgentsSection({
   const selected =
     selectedId === null
       ? null
-      : (state.agents.find((agent) => agent.definitionId === selectedId) ??
-        null);
+      : (state.agents.find((agent) => agent.definitionId === selectedId) ?? null);
 
   if (selected !== null) {
     return (
       <div className="workbench-settings-pane">
-        <button
-          type="button"
-          className="chat-settings-agent-back"
-          onClick={() => select(null)}
-        >
+        <button type="button" className="chat-settings-agent-back" onClick={() => select(null)}>
           <ArrowLeft aria-hidden="true" />
           {CHAT_STRINGS.workbenchSettingsAgentsBackAction}
         </button>
-        <AgentDetailEditor
-          tenantId={tenantId}
-          workbenchId={workbenchId}
-          agent={selected}
-        />
+        <AgentDetailEditor tenantId={tenantId} workbenchId={workbenchId} agent={selected} />
       </div>
     );
   }
@@ -172,13 +162,9 @@ export function AgentsSection({
     <div className="workbench-settings-pane">
       <div className="chat-settings-field">
         <span>{CHAT_STRINGS.workbenchSettingsAgentsLabel}</span>
-        <p className="chat-settings-field-hint">
-          {CHAT_STRINGS.workbenchSettingsAgentsInviteHint}
-        </p>
+        <p className="chat-settings-field-hint">{CHAT_STRINGS.workbenchSettingsAgentsInviteHint}</p>
         {state.agents.length === 0 ? (
-          <p className="chat-settings-field-hint">
-            {CHAT_STRINGS.workbenchSettingsNoAgents}
-          </p>
+          <p className="chat-settings-field-hint">{CHAT_STRINGS.workbenchSettingsNoAgents}</p>
         ) : (
           <ul className="chat-settings-participants-list">
             {state.agents.map((agent) => (
@@ -198,11 +184,7 @@ export function AgentsSection({
             ))}
           </ul>
         )}
-        <button
-          type="button"
-          className="chat-settings-invite-agent-action"
-          onClick={onInvite}
-        >
+        <button type="button" className="chat-settings-invite-agent-action" onClick={onInvite}>
           <UserPlus aria-hidden="true" />
           {CHAT_STRINGS.inviteAgentAction}
         </button>
@@ -252,10 +234,7 @@ function AgentDetailEditor({
         if (cancelled) return;
         setCatalogState({
           kind: "error",
-          message: describeChatError(
-            cause,
-            CHAT_STRINGS.workbenchSettingsAgentDetailCatalogError,
-          ),
+          message: describeChatError(cause, CHAT_STRINGS.workbenchSettingsAgentDetailCatalogError),
         });
       });
     return () => {
@@ -305,8 +284,7 @@ function AgentDetailEditor({
     );
   }
 
-  const dirty =
-    name !== state.detail.name || instructions !== state.detail.systemPrompt;
+  const dirty = name !== state.detail.name || instructions !== state.detail.systemPrompt;
 
   function handleCancel() {
     if (state.kind !== "ready") return;
@@ -324,9 +302,7 @@ function AgentDetailEditor({
       systemPrompt: instructions,
     })
       .then((saved) =>
-        refreshWorkbenchAgent(tenantId, workbenchId, agent.address).then(
-          () => saved,
-        ),
+        refreshWorkbenchAgent(tenantId, workbenchId, agent.address).then(() => saved),
       )
       .then((saved) => {
         toast(CHAT_STRINGS.workbenchSettingsAgentDetailSavedToast);
@@ -339,9 +315,7 @@ function AgentDetailEditor({
             : prev,
         );
       })
-      .catch(() =>
-        setSaveError(CHAT_STRINGS.workbenchSettingsAgentDetailSaveError),
-      )
+      .catch(() => setSaveError(CHAT_STRINGS.workbenchSettingsAgentDetailSaveError))
       .finally(() => setSaving(false));
   }
 
@@ -367,9 +341,7 @@ function AgentDetailEditor({
         <Input value={name} onChange={(event) => setName(event.target.value)} />
       </label>
       <label className="chat-settings-field">
-        <span>
-          {CHAT_STRINGS.workbenchSettingsAgentDetailInstructionsLabel}
-        </span>
+        <span>{CHAT_STRINGS.workbenchSettingsAgentDetailInstructionsLabel}</span>
         <textarea
           className="chat-textarea"
           value={instructions}
@@ -386,20 +358,10 @@ function AgentDetailEditor({
         </p>
       ) : null}
       <div className="chat-settings-field-actions">
-        <Button
-          type="button"
-          variant="outline"
-          onClick={handleCancel}
-          disabled={!dirty || saving}
-        >
+        <Button type="button" variant="outline" onClick={handleCancel} disabled={!dirty || saving}>
           {CHAT_STRINGS.workbenchSettingsAgentDetailCancel}
         </Button>
-        <Button
-          type="button"
-          variant="primary"
-          onClick={handleSave}
-          disabled={!dirty || saving}
-        >
+        <Button type="button" variant="primary" onClick={handleSave} disabled={!dirty || saving}>
           {saving
             ? CHAT_STRINGS.workbenchSettingsAgentDetailSaving
             : CHAT_STRINGS.workbenchSettingsAgentDetailSave}
@@ -459,19 +421,14 @@ function connectedModelOptions(
   alreadySet: string | undefined,
 ): readonly ModelOption[] {
   return chatCapableModels(models)
-    .filter(
-      (model) =>
-        model.offerings.length > 0 && model.canonicalName !== alreadySet,
-    )
+    .filter((model) => model.offerings.length > 0 && model.canonicalName !== alreadySet)
     .map((model) => {
       const topOffering = model.offerings[0];
       return {
         canonicalName: model.canonicalName,
         label: CHAT_STRINGS.workbenchSettingsAgentDetailModelOption(
           model.displayName ?? model.canonicalName,
-          topOffering === undefined
-            ? ""
-            : providerDisplayName(topOffering.providerName),
+          topOffering === undefined ? "" : providerDisplayName(topOffering.providerName),
         ),
       };
     });
@@ -508,16 +465,13 @@ function ModelSelect({
   const [error, setError] = useState<string | null>(null);
 
   const options =
-    catalogState.kind === "ready"
-      ? connectedModelOptions(catalogState.models, undefined)
-      : [];
+    catalogState.kind === "ready" ? connectedModelOptions(catalogState.models, undefined) : [];
 
   // The currently-set model may no longer carry a connected offering
   // (its provider was disconnected) — still list it, disabled, rather
   // than silently drop the value the select is showing.
   const currentOptions =
-    detail.model !== undefined &&
-    !options.some((option) => option.canonicalName === detail.model)
+    detail.model !== undefined && !options.some((option) => option.canonicalName === detail.model)
       ? [{ canonicalName: detail.model, label: detail.model }, ...options]
       : options;
 
@@ -530,17 +484,13 @@ function ModelSelect({
       canonicalName,
     })
       .then((capabilities) =>
-        refreshWorkbenchAgent(tenantId, workbenchId, agent.address).then(
-          () => capabilities,
-        ),
+        refreshWorkbenchAgent(tenantId, workbenchId, agent.address).then(() => capabilities),
       )
       .then((capabilities) => {
         toast(CHAT_STRINGS.workbenchSettingsAgentDetailSavedToast);
         onChanged({ ...detail, ...capabilities });
       })
-      .catch(() =>
-        setError(CHAT_STRINGS.workbenchSettingsAgentDetailAddCapabilityError),
-      )
+      .catch(() => setError(CHAT_STRINGS.workbenchSettingsAgentDetailAddCapabilityError))
       .finally(() => setSaving(false));
   }
 
@@ -550,16 +500,10 @@ function ModelSelect({
       <select
         value={detail.model ?? ""}
         onChange={(event) => handleChange(event.target.value)}
-        disabled={
-          saving ||
-          catalogState.kind === "loading" ||
-          catalogState.kind === "error"
-        }
+        disabled={saving || catalogState.kind === "loading" || catalogState.kind === "error"}
       >
         {detail.model === undefined ? (
-          <option value="">
-            {CHAT_STRINGS.workbenchSettingsAgentDetailModelUnset}
-          </option>
+          <option value="">{CHAT_STRINGS.workbenchSettingsAgentDetailModelUnset}</option>
         ) : null}
         {currentOptions.map((option) => (
           <option key={option.canonicalName} value={option.canonicalName}>
@@ -583,12 +527,7 @@ function ModelSelect({
             {catalogState.message}
           </p>
           <div className="chat-settings-field-actions">
-            <Button
-              type="button"
-              variant="outline"
-              size="sm"
-              onClick={onRetryCatalog}
-            >
+            <Button type="button" variant="outline" size="sm" onClick={onRetryCatalog}>
               {CHAT_STRINGS.workbenchSettingsAgentDetailCatalogRetryAction}
             </Button>
             <a href="/settings/connections">
@@ -644,19 +583,14 @@ function CapabilitiesBlock({
   }, [tenantId]);
 
   const modelOptions =
-    catalogState.kind === "ready"
-      ? connectedModelOptions(catalogState.models, detail.model)
-      : [];
+    catalogState.kind === "ready" ? connectedModelOptions(catalogState.models, detail.model) : [];
 
   const options =
     kind === "toolPackage"
       ? inventoryState.kind === "ready"
         ? inventoryState.inventory.toolPackages
             .map((entry) => entry.name)
-            .filter(
-              (name) =>
-                !detail.toolPackagePins.some((pin) => pin.name === name),
-            )
+            .filter((name) => !detail.toolPackagePins.some((pin) => pin.name === name))
         : []
       : kind === "skill"
         ? inventoryState.kind === "ready"
@@ -667,9 +601,7 @@ function CapabilitiesBlock({
         : modelOptions.map((option) => option.canonicalName);
 
   const optionsLoading =
-    kind === "model"
-      ? catalogState.kind === "loading"
-      : inventoryState.kind === "loading";
+    kind === "model" ? catalogState.kind === "loading" : inventoryState.kind === "loading";
 
   function addition(): CapabilityAddition | undefined {
     if (choice === "") return undefined;
@@ -684,27 +616,19 @@ function CapabilitiesBlock({
     setAddError(null);
     addAgentCapability(tenantId, agent.definitionId, next)
       .then((capabilities) =>
-        refreshWorkbenchAgent(tenantId, workbenchId, agent.address).then(
-          () => capabilities,
-        ),
+        refreshWorkbenchAgent(tenantId, workbenchId, agent.address).then(() => capabilities),
       )
       .then((capabilities) => {
         toast(CHAT_STRINGS.workbenchSettingsAgentDetailSavedToast);
         onChanged({ ...detail, ...capabilities });
         setChoice("");
       })
-      .catch(() =>
-        setAddError(
-          CHAT_STRINGS.workbenchSettingsAgentDetailAddCapabilityError,
-        ),
-      )
+      .catch(() => setAddError(CHAT_STRINGS.workbenchSettingsAgentDetailAddCapabilityError))
       .finally(() => setAdding(false));
   }
 
   const hasCapabilities =
-    detail.toolPackagePins.length > 0 ||
-    detail.skills.length > 0 ||
-    detail.model !== undefined;
+    detail.toolPackagePins.length > 0 || detail.skills.length > 0 || detail.model !== undefined;
 
   return (
     <div className="chat-settings-agent-block-section">
@@ -728,8 +652,7 @@ function CapabilitiesBlock({
           {detail.model !== undefined ? (
             <li key="model">
               <span className="chat-settings-capability-chip">
-                {CHAT_STRINGS.workbenchSettingsAgentDetailModelLabel}:{" "}
-                {detail.model}
+                {CHAT_STRINGS.workbenchSettingsAgentDetailModelLabel}: {detail.model}
               </span>
             </li>
           ) : null}
@@ -747,9 +670,7 @@ function CapabilitiesBlock({
       ) : (
         <div className="chat-settings-capability-add">
           <label className="chat-settings-field">
-            <span>
-              {CHAT_STRINGS.workbenchSettingsAgentDetailAddCapabilityLabel}
-            </span>
+            <span>{CHAT_STRINGS.workbenchSettingsAgentDetailAddCapabilityLabel}</span>
             <select
               value={kind}
               onChange={(event) => {
@@ -761,39 +682,26 @@ function CapabilitiesBlock({
                 {CHAT_STRINGS.workbenchSettingsAgentDetailAddCapabilityKindTool}
               </option>
               <option value="skill">
-                {
-                  CHAT_STRINGS.workbenchSettingsAgentDetailAddCapabilityKindSkill
-                }
+                {CHAT_STRINGS.workbenchSettingsAgentDetailAddCapabilityKindSkill}
               </option>
               <option value="model">
-                {
-                  CHAT_STRINGS.workbenchSettingsAgentDetailAddCapabilityKindModel
-                }
+                {CHAT_STRINGS.workbenchSettingsAgentDetailAddCapabilityKindModel}
               </option>
             </select>
           </label>
           <label className="chat-settings-field">
-            <span>
-              {
-                CHAT_STRINGS.workbenchSettingsAgentDetailAddCapabilityChoiceLabel
-              }
-            </span>
+            <span>{CHAT_STRINGS.workbenchSettingsAgentDetailAddCapabilityChoiceLabel}</span>
             <select
               value={choice}
               onChange={(event) => setChoice(event.target.value)}
               disabled={optionsLoading || options.length === 0}
             >
               <option value="">
-                {CHAT_STRINGS.workbenchSettingsAgentDetailAddCapabilityChoicePlaceholder(
-                  kind,
-                )}
+                {CHAT_STRINGS.workbenchSettingsAgentDetailAddCapabilityChoicePlaceholder(kind)}
               </option>
               {kind === "model"
                 ? modelOptions.map((option) => (
-                    <option
-                      key={option.canonicalName}
-                      value={option.canonicalName}
-                    >
+                    <option key={option.canonicalName} value={option.canonicalName}>
                       {option.label}
                     </option>
                   ))
@@ -816,9 +724,7 @@ function CapabilitiesBlock({
           </Button>
         </div>
       )}
-      {kind === "model" &&
-      catalogState.kind === "ready" &&
-      modelOptions.length === 0 ? (
+      {kind === "model" && catalogState.kind === "ready" && modelOptions.length === 0 ? (
         <p className="chat-settings-field-hint">
           {CHAT_STRINGS.workbenchSettingsAgentDetailNoConnectedModels}
         </p>
@@ -955,20 +861,14 @@ function HistoryBlock({
     setRestoreError(null);
     restoreAgentVersion(tenantId, agent.definitionId, commitSha)
       .then((detail) =>
-        refreshWorkbenchAgent(tenantId, workbenchId, agent.address).then(
-          () => detail,
-        ),
+        refreshWorkbenchAgent(tenantId, workbenchId, agent.address).then(() => detail),
       )
       .then((detail) => {
         toast(CHAT_STRINGS.workbenchSettingsAgentDetailSavedToast);
         onRestored(detail);
         reload();
       })
-      .catch(() =>
-        setRestoreError(
-          CHAT_STRINGS.workbenchSettingsAgentDetailHistoryRestoreError,
-        ),
-      )
+      .catch(() => setRestoreError(CHAT_STRINGS.workbenchSettingsAgentDetailHistoryRestoreError))
       .finally(() => setRestoring(null));
   }
 
@@ -1003,16 +903,12 @@ function HistoryBlock({
             {collapseHistoryVersions(state.versions).map((row) => (
               <TableRow
                 key={row.commitSha}
-                className={
-                  row.current ? "chat-settings-history-row-current" : undefined
-                }
+                className={row.current ? "chat-settings-history-row-current" : undefined}
               >
                 <TableCell className="text-sm" title={row.commitSha}>
                   {row.summary}
                   {row.repeatCount > 1 ? (
-                    <span className="chat-settings-history-repeat-count">
-                      ×{row.repeatCount}
-                    </span>
+                    <span className="chat-settings-history-repeat-count">×{row.repeatCount}</span>
                   ) : null}
                   {row.current ? (
                     <span className="chat-settings-history-current-label">
@@ -1020,9 +916,7 @@ function HistoryBlock({
                     </span>
                   ) : null}
                 </TableCell>
-                <TableCell className="text-sm text-muted-foreground">
-                  {row.author}
-                </TableCell>
+                <TableCell className="text-sm text-muted-foreground">{row.author}</TableCell>
                 <TableCell className="text-sm text-muted-foreground">
                   {formatRelativeTime(row.committedAtIso, Date.now())}
                 </TableCell>
diff --git a/packages/chat-ui/src/workbench-settings/context-window.test.ts b/packages/chat-ui/src/workbench-settings/context-window.test.ts
index 00fdeed707..6a41630fd6 100644
--- a/packages/chat-ui/src/workbench-settings/context-window.test.ts
+++ b/packages/chat-ui/src/workbench-settings/context-window.test.ts
@@ -1,21 +1,20 @@
 import { describe, expect, test } from "bun:test";
 
-import {
-  contextWindowControlState,
-  contextWindowPatchValue,
-} from "./context-window";
+import { contextWindowControlState, contextWindowPatchValue } from "./context-window";
 
 describe("contextWindowControlState", () => {
   test("an inheriting workbench renders the bench-default mode with the resolved value", () => {
-    expect(contextWindowControlState({ value: 20, source: "inherit" })).toEqual(
-      { mode: "inherit", displayValue: 20 },
-    );
+    expect(contextWindowControlState({ value: 20, source: "inherit" })).toEqual({
+      mode: "inherit",
+      displayValue: 20,
+    });
   });
 
   test("an overriding workbench renders the override mode with its own value", () => {
-    expect(contextWindowControlState({ value: 5, source: "override" })).toEqual(
-      { mode: "override", displayValue: 5 },
-    );
+    expect(contextWindowControlState({ value: 5, source: "override" })).toEqual({
+      mode: "override",
+      displayValue: 5,
+    });
   });
 });
 
diff --git a/packages/chat-ui/src/workbench-settings/general-section.tsx b/packages/chat-ui/src/workbench-settings/general-section.tsx
index 9863db98d7..942d423e8a 100644
--- a/packages/chat-ui/src/workbench-settings/general-section.tsx
+++ b/packages/chat-ui/src/workbench-settings/general-section.tsx
@@ -37,10 +37,7 @@ export function GeneralSection({
     <div className="workbench-settings-pane">
       <label className="chat-settings-field">
         <span>{CHAT_STRINGS.workbenchSettingsNameLabel}</span>
-        <Input
-          value={name}
-          onChange={(event) => onNameChange(event.target.value)}
-        />
+        <Input value={name} onChange={(event) => onNameChange(event.target.value)} />
       </label>
       <label className="chat-settings-field">
         <span>{CHAT_STRINGS.workbenchSettingsPurposeLabel}</span>
@@ -60,9 +57,7 @@ export function GeneralSection({
           label={CHAT_STRINGS.workbenchSettingsPinnedLabel}
         />
       </label>
-      <p className="chat-settings-field-hint">
-        {CHAT_STRINGS.workbenchSettingsPinnedDescription}
-      </p>
+      <p className="chat-settings-field-hint">{CHAT_STRINGS.workbenchSettingsPinnedDescription}</p>
       <div className="chat-settings-field">
         <span>{CHAT_STRINGS.workbenchSettingsContextWindowLabel}</span>
         <div
diff --git a/packages/chat-ui/src/workbench-settings/index.ts b/packages/chat-ui/src/workbench-settings/index.ts
index 10b0956876..08833f5677 100644
--- a/packages/chat-ui/src/workbench-settings/index.ts
+++ b/packages/chat-ui/src/workbench-settings/index.ts
@@ -1,8 +1,5 @@
 export { WorkbenchSettingsSurface } from "./surface";
-export {
-  contextWindowControlState,
-  contextWindowPatchValue,
-} from "./context-window";
+export { contextWindowControlState, contextWindowPatchValue } from "./context-window";
 export type { ContextWindowMode } from "./context-window";
 export {
   workbenchSettingsSections,
diff --git a/packages/chat-ui/src/workbench-settings/members-section.tsx b/packages/chat-ui/src/workbench-settings/members-section.tsx
index 650705a4f4..64af9b769b 100644
--- a/packages/chat-ui/src/workbench-settings/members-section.tsx
+++ b/packages/chat-ui/src/workbench-settings/members-section.tsx
@@ -46,9 +46,7 @@ export function MembersSection({
     removeWorkbenchParticipant(tenantId, workbenchId, address)
       .then(() => onParticipantsChanged())
       .catch((cause: unknown) =>
-        setRowError(
-          describeChatError(cause, CHAT_STRINGS.workbenchSettingsRemoveError),
-        ),
+        setRowError(describeChatError(cause, CHAT_STRINGS.workbenchSettingsRemoveError)),
       )
       .finally(() => setRemovingAddress(null));
   }
@@ -58,33 +56,22 @@ export function MembersSection({
       <div className="chat-settings-field">
         <span>{CHAT_STRINGS.workbenchSettingsPeopleLabel}</span>
         {people.length === 0 ? (
-          <p className="chat-settings-field-hint">
-            {CHAT_STRINGS.workbenchSettingsNoPeople}
-          </p>
+          <p className="chat-settings-field-hint">{CHAT_STRINGS.workbenchSettingsNoPeople}</p>
         ) : (
           <ul className="chat-settings-participants-list">
             {people.map((participant) => {
               const isSelf = participant.address === currentUserPrincipalId;
               const busy = removingAddress === participant.address;
               return (
-                <li
-                  key={participant.address}
-                  className="chat-settings-participant-row"
-                >
+                <li key={participant.address} className="chat-settings-participant-row">
                   <div className="chat-settings-participant-row-main">
                     <span>{participant.handle}</span>
                     <ConfirmButton
                       variant="outline"
                       size="sm"
-                      confirmLabel={
-                        CHAT_STRINGS.workbenchSettingsRemoveConfirmLabel
-                      }
+                      confirmLabel={CHAT_STRINGS.workbenchSettingsRemoveConfirmLabel}
                       disabled={isSelf || busy}
-                      title={
-                        isSelf
-                          ? CHAT_STRINGS.workbenchSettingsRemoveSelfHint
-                          : undefined
-                      }
+                      title={isSelf ? CHAT_STRINGS.workbenchSettingsRemoveSelfHint : undefined}
                       onConfirm={() => handleRemove(participant.address)}
                     >
                       {busy
diff --git a/packages/chat-ui/src/workbench-settings/model.test.ts b/packages/chat-ui/src/workbench-settings/model.test.ts
index 573e255f02..ce0ffd274c 100644
--- a/packages/chat-ui/src/workbench-settings/model.test.ts
+++ b/packages/chat-ui/src/workbench-settings/model.test.ts
@@ -54,9 +54,13 @@ describe("workbenchSettingsSections", () => {
   });
 
   test("isDm is ignored for a workbench — Agents stays regardless", () => {
-    expect(
-      workbenchSettingsSections("workbench", true).map((s) => s.id),
-    ).toEqual(["general", "members", "agents", "notifications", "danger"]);
+    expect(workbenchSettingsSections("workbench", true).map((s) => s.id)).toEqual([
+      "general",
+      "members",
+      "agents",
+      "notifications",
+      "danger",
+    ]);
   });
 
   test("Myra/Keys & plugins/Inference are gone as distinct nav ids", () => {
@@ -67,21 +71,13 @@ describe("workbenchSettingsSections", () => {
   });
 
   test("Plugins is global-only now — no workbench-scoped nav id", () => {
-    expect(
-      workbenchSettingsSections("workbench").map((s) => s.id),
-    ).not.toContain("plugins");
-    expect(
-      workbenchSettingsSections("chat", true).map((s) => s.id),
-    ).not.toContain("plugins");
+    expect(workbenchSettingsSections("workbench").map((s) => s.id)).not.toContain("plugins");
+    expect(workbenchSettingsSections("chat", true).map((s) => s.id)).not.toContain("plugins");
   });
 
   test("Capacity is gone — sidecar placement is Interchange's own concern now", () => {
-    expect(workbenchSettingsSections("chat").map((s) => s.id)).not.toContain(
-      "capacity",
-    );
-    expect(
-      workbenchSettingsSections("workbench").map((s) => s.id),
-    ).not.toContain("capacity");
+    expect(workbenchSettingsSections("chat").map((s) => s.id)).not.toContain("capacity");
+    expect(workbenchSettingsSections("workbench").map((s) => s.id)).not.toContain("capacity");
     expect(WORKBENCH_SETTINGS_SECTION_IDS).not.toContain(
       "capacity" as (typeof WORKBENCH_SETTINGS_SECTION_IDS)[number],
     );
@@ -89,12 +85,6 @@ describe("workbenchSettingsSections", () => {
 
   test("groups sections Shared / Personal / Danger for the nav", () => {
     const groups = workbenchSettingsSections("workbench").map((s) => s.group);
-    expect(groups).toEqual([
-      "shared",
-      "shared",
-      "shared",
-      "personal",
-      "danger",
-    ]);
+    expect(groups).toEqual(["shared", "shared", "shared", "personal", "danger"]);
   });
 });
diff --git a/packages/chat-ui/src/workbench-settings/model.ts b/packages/chat-ui/src/workbench-settings/model.ts
index d7e55dab80..0217a3f199 100644
--- a/packages/chat-ui/src/workbench-settings/model.ts
+++ b/packages/chat-ui/src/workbench-settings/model.ts
@@ -19,18 +19,25 @@
 import { CHAT_STRINGS } from "../strings";
 
 export type WorkbenchSettingsSectionId =
-  "general" | "members" | "agents" | "notifications" | "danger";
+  | "general"
+  | "members"
+  | "agents"
+  | "notifications"
+  | "danger";
 
 /** Every `WorkbenchSettingsSectionId`, for validating a section id read
  * off a URL — a route parser needs this list to narrow untrusted input
  * without an unchecked cast; `sectionsForWorkbenchKind` below is a
  * per-kind subset that doesn't fit that job. */
-export const WORKBENCH_SETTINGS_SECTION_IDS: readonly WorkbenchSettingsSectionId[] =
-  ["general", "members", "agents", "notifications", "danger"];
+export const WORKBENCH_SETTINGS_SECTION_IDS: readonly WorkbenchSettingsSectionId[] = [
+  "general",
+  "members",
+  "agents",
+  "notifications",
+  "danger",
+];
 
-export function isWorkbenchSettingsSectionId(
-  value: string,
-): value is WorkbenchSettingsSectionId {
+export function isWorkbenchSettingsSectionId(value: string): value is WorkbenchSettingsSectionId {
   return (WORKBENCH_SETTINGS_SECTION_IDS as readonly string[]).includes(value);
 }
 
diff --git a/packages/chat-ui/src/workbench-settings/surface.tsx b/packages/chat-ui/src/workbench-settings/surface.tsx
index 10836f3f0b..095cbf7d37 100644
--- a/packages/chat-ui/src/workbench-settings/surface.tsx
+++ b/packages/chat-ui/src/workbench-settings/surface.tsx
@@ -13,33 +13,19 @@ import { isAgentAddress } from "../wire/mentions";
 import { useEffect, useState } from "react";
 
 import type { APIQuery } from "@corbits/api-query";
-import {
-  QueryView,
-  UnauthenticatedError,
-  describeQueryError,
-} from "@corbits/api-query";
-import {
-  getBenchChatSettings,
-  getWorkbenchSettings,
-  patchWorkbenchSettings,
-} from "../api";
+import { QueryView, UnauthenticatedError, describeQueryError } from "@corbits/api-query";
+import { getBenchChatSettings, getWorkbenchSettings, patchWorkbenchSettings } from "../api";
 import type { WorkbenchSettings } from "../api";
 import { WorkbenchLoadingState } from "../loading-state";
 import { CHAT_STRINGS } from "../strings";
 import { AgentsSection } from "./agents-section";
-import {
-  contextWindowControlState,
-  contextWindowPatchValue,
-} from "./context-window";
+import { contextWindowControlState, contextWindowPatchValue } from "./context-window";
 import type { ContextWindowMode } from "./context-window";
 import { DangerSection } from "./danger-section";
 import { GeneralSection } from "./general-section";
 import { MembersSection } from "./members-section";
 import { workbenchSettingsSections } from "./model";
-import type {
-  WorkbenchSettingsSection,
-  WorkbenchSettingsSectionId,
-} from "./model";
+import type { WorkbenchSettingsSection, WorkbenchSettingsSectionId } from "./model";
 
 type WorkbenchSettingsData = {
   readonly data: WorkbenchSettings;
@@ -104,8 +90,7 @@ export function WorkbenchSettingsSurface({
   const [name, setName] = useState("");
   const [purpose, setPurpose] = useState("");
   const [pinned, setPinned] = useState(false);
-  const [contextWindowMode, setContextWindowMode] =
-    useState<ContextWindowMode>("inherit");
+  const [contextWindowMode, setContextWindowMode] = useState<ContextWindowMode>("inherit");
   const [contextWindowInput, setContextWindowInput] = useState("");
   const [saving, setSaving] = useState(false);
   const [saveError, setSaveError] = useState<string | null>(null);
@@ -115,10 +100,7 @@ export function WorkbenchSettingsSurface({
   useEffect(() => {
     let cancelled = false;
     setQuery({ kind: "loading" });
-    Promise.all([
-      getWorkbenchSettings(tenantId, workbenchId),
-      getBenchChatSettings(tenantId),
-    ])
+    Promise.all([getWorkbenchSettings(tenantId, workbenchId), getBenchChatSettings(tenantId)])
       .then(([settings, bench]) => {
         if (cancelled) return;
         const control = contextWindowControlState(settings.contextWindow);
@@ -151,7 +133,6 @@ export function WorkbenchSettingsSurface({
     return () => {
       cancelled = true;
     };
-    // eslint-disable-next-line react-hooks/exhaustive-deps
   }, [tenantId, workbenchId, reloadKey]);
 
   const ready = query.kind === "ready" ? query.data : undefined;
@@ -163,9 +144,7 @@ export function WorkbenchSettingsSurface({
   // without a second signal to keep in sync.
   const hasAgent =
     ready !== undefined &&
-    ready.data.participants.some((participant) =>
-      isAgentAddress(participant.address),
-    );
+    ready.data.participants.some((participant) => isAgentAddress(participant.address));
   const isDm = ready !== undefined && !hasAgent;
   const sections = workbenchSettingsSections(
     ready !== undefined ? ready.data.kind : "workbench",
@@ -180,8 +159,7 @@ export function WorkbenchSettingsSurface({
 
   const overrideValue = Number.parseInt(contextWindowInput, 10);
   const overrideValid =
-    contextWindowMode === "inherit" ||
-    (Number.isFinite(overrideValue) && overrideValue >= 0);
+    contextWindowMode === "inherit" || (Number.isFinite(overrideValue) && overrideValue >= 0);
   const saveDisabled = ready === undefined || !overrideValid || saving;
 
   function handleSave() {
@@ -216,10 +194,7 @@ export function WorkbenchSettingsSurface({
             <button type="button" onClick={onBack}>
               {workbenchTitle}
             </button>
-            <span
-              className="workbench-settings-breadcrumb-sep"
-              aria-hidden="true"
-            >
+            <span className="workbench-settings-breadcrumb-sep" aria-hidden="true">
               /
             </span>
             <span className="workbench-settings-breadcrumb-current">
@@ -227,9 +202,7 @@ export function WorkbenchSettingsSurface({
             </span>
           </nav>
           <span className="workbench-settings-section-dot" aria-hidden="true" />
-          <span className="workbench-settings-section-label">
-            {activeSection.label}
-          </span>
+          <span className="workbench-settings-section-label">{activeSection.label}</span>
         </div>
         {/* One primary action visible per view where possible (CL-6215
             EMIL #4): the Agents section has its own scoped "Save
@@ -244,9 +217,7 @@ export function WorkbenchSettingsSurface({
             disabled={saveDisabled}
             onClick={handleSave}
           >
-            {saving
-              ? CHAT_STRINGS.workbenchSettingsSaving
-              : CHAT_STRINGS.workbenchSettingsSave}
+            {saving ? CHAT_STRINGS.workbenchSettingsSaving : CHAT_STRINGS.workbenchSettingsSave}
           </Button>
         ) : null}
       </div>
@@ -254,9 +225,7 @@ export function WorkbenchSettingsSurface({
       <QueryView
         query={query}
         label={CHAT_STRINGS.workbenchSettingsLoadError}
-        loadingContent={
-          <WorkbenchLoadingState title="Loading workbench settings…" />
-        }
+        loadingContent={<WorkbenchLoadingState title="Loading workbench settings…" />}
       >
         {({ data, benchDefault }) => (
           <div className="workbench-settings-shell">
@@ -278,18 +247,14 @@ export function WorkbenchSettingsSurface({
                     }
                   >
                     {label !== "" ? (
-                      <div className="workbench-settings-nav-group-label">
-                        {label}
-                      </div>
+                      <div className="workbench-settings-nav-group-label">{label}</div>
                     ) : null}
                     {groupSections.map((s) => (
                       <button
                         key={s.id}
                         type="button"
                         className="workbench-settings-nav-item"
-                        aria-current={
-                          s.id === activeSection.id ? "page" : undefined
-                        }
+                        aria-current={s.id === activeSection.id ? "page" : undefined}
                         onClick={() => onSectionChange?.(s.id)}
                       >
                         {s.label}
@@ -329,9 +294,7 @@ export function WorkbenchSettingsSurface({
                   tenantId={tenantId}
                   workbenchId={workbenchId}
                   participants={data.participants}
-                  {...(currentUserPrincipalId !== undefined
-                    ? { currentUserPrincipalId }
-                    : {})}
+                  {...(currentUserPrincipalId !== undefined ? { currentUserPrincipalId } : {})}
                   onInvite={onInviteParticipant}
                   onParticipantsChanged={reload}
                 />
@@ -343,9 +306,7 @@ export function WorkbenchSettingsSurface({
                   workbenchId={workbenchId}
                   onInvite={onInviteParticipant}
                   entityId={entityId}
-                  {...(onEntityIdChange !== undefined
-                    ? { onEntityIdChange }
-                    : {})}
+                  {...(onEntityIdChange !== undefined ? { onEntityIdChange } : {})}
                 />
               ) : null}
 
diff --git a/packages/chat-ui/src/workbench-timeline-view.ts b/packages/chat-ui/src/workbench-timeline-view.ts
index c30ff08b81..0e78945055 100644
--- a/packages/chat-ui/src/workbench-timeline-view.ts
+++ b/packages/chat-ui/src/workbench-timeline-view.ts
@@ -34,10 +34,7 @@ export type MessagesState =
     }
   | { readonly kind: "ready"; readonly items: readonly MessageItem[] };
 
-export function messagesStateFor(
-  status: FeedStatus,
-  items: readonly MessageItem[],
-): MessagesState {
+export function messagesStateFor(status: FeedStatus, items: readonly MessageItem[]): MessagesState {
   return status.kind === "ready" ? { kind: "ready", items } : status;
 }
 
@@ -61,8 +58,7 @@ export function useWorkbenchTimelineView(args: {
   // exists, and from the message the reader is replying to before it
   // does — one value either way, so the feed never has to know which case
   // it is in.
-  const parentMessageId =
-    openThread?.parentMessageId ?? pendingParentMessageId ?? null;
+  const parentMessageId = openThread?.parentMessageId ?? pendingParentMessageId ?? null;
 
   const feedItems = useMemo(
     () =>
@@ -103,14 +99,7 @@ export function useWorkbenchTimelineView(args: {
           roomId: activeWorkbenchId,
         });
       });
-  }, [
-    tenantId,
-    activeWorkbenchId,
-    openThreadId,
-    pendingParentMessageId,
-    feedItems,
-    queryClient,
-  ]);
+  }, [tenantId, activeWorkbenchId, openThreadId, pendingParentMessageId, feedItems, queryClient]);
 
   return {
     messagesState: messagesStateFor(feedStatus, feedItems),
diff --git a/packages/chat-ui/test/agent-display-names.test.ts b/packages/chat-ui/test/agent-display-names.test.ts
index e2ebedaffa..db0aaa6b1d 100644
--- a/packages/chat-ui/test/agent-display-names.test.ts
+++ b/packages/chat-ui/test/agent-display-names.test.ts
@@ -1,9 +1,6 @@
 import { describe, expect, test } from "bun:test";
 
-import {
-  agentDisplayNamesFromAgents,
-  displayNameForAddress,
-} from "../src/agent-display-names";
+import { agentDisplayNamesFromAgents, displayNameForAddress } from "../src/agent-display-names";
 
 describe("agentDisplayNamesFromAgents", () => {
   test("keys each agent's display name by its participant address", () => {
@@ -32,14 +29,10 @@ describe("displayNameForAddress", () => {
     const names = agentDisplayNamesFromAgents([
       { address: "ins_echo@acme.example", displayName: "Myra" },
     ]);
-    expect(
-      displayNameForAddress("ins_other@acme.example", names),
-    ).toBeUndefined();
+    expect(displayNameForAddress("ins_other@acme.example", names)).toBeUndefined();
   });
 
   test("is undefined without a snapshot so the caller falls back", () => {
-    expect(
-      displayNameForAddress("ins_echo@acme.example", undefined),
-    ).toBeUndefined();
+    expect(displayNameForAddress("ins_echo@acme.example", undefined)).toBeUndefined();
   });
 });
diff --git a/packages/chat-ui/test/agent-typing-indicator.test.tsx b/packages/chat-ui/test/agent-typing-indicator.test.tsx
index f87d3f3903..6ec95132ab 100644
--- a/packages/chat-ui/test/agent-typing-indicator.test.tsx
+++ b/packages/chat-ui/test/agent-typing-indicator.test.tsx
@@ -17,8 +17,7 @@ function render(names: readonly string[]) {
   });
   return {
     container,
-    label: () =>
-      container.querySelector(".chat-typing-indicator-label")?.textContent,
+    label: () => container.querySelector(".chat-typing-indicator-label")?.textContent,
     unmount: () => root.unmount(),
   };
 }
@@ -33,15 +32,9 @@ describe("AgentTypingIndicator", () => {
   test("one agent reads as a single typist", () => {
     const { container, label, unmount } = render(["Myra"]);
     expect(label()).toBe("Myra is typing…");
-    expect(
-      container.querySelector(".chat-typing-indicator-dots"),
-    ).not.toBeNull();
-    expect(
-      container.querySelectorAll(".chat-agent-typing-avatar"),
-    ).toHaveLength(0);
-    expect(
-      container.querySelector(".chat-typing-row")?.getAttribute("data-own"),
-    ).toBe("false");
+    expect(container.querySelector(".chat-typing-indicator-dots")).not.toBeNull();
+    expect(container.querySelectorAll(".chat-agent-typing-avatar")).toHaveLength(0);
+    expect(container.querySelector(".chat-typing-row")?.getAttribute("data-own")).toBe("false");
     unmount();
   });
 
diff --git a/packages/chat-ui/test/agents-section.test.tsx b/packages/chat-ui/test/agents-section.test.tsx
index 07dd2bf516..41a7be08b3 100644
--- a/packages/chat-ui/test/agents-section.test.tsx
+++ b/packages/chat-ui/test/agents-section.test.tsx
@@ -80,10 +80,7 @@ function stubFetch(options: {
   readonly catalogFailUntil?: number;
   readonly addCapabilityFails?: boolean;
   readonly restoreFails?: boolean;
-  readonly onSave?: (
-    definitionId: string,
-    body: { name: string; systemPrompt: string },
-  ) => void;
+  readonly onSave?: (definitionId: string, body: { name: string; systemPrompt: string }) => void;
   readonly onRefresh?: (address: string) => void;
   readonly onAddCapability?: (definitionId: string, body: unknown) => void;
   readonly onRestore?: (definitionId: string, commitSha: string) => void;
@@ -141,8 +138,7 @@ function stubFetch(options: {
         options.catalogFails === true ||
         options.catalogNetworkFails === true ||
         options.catalogFailStatus !== undefined ||
-        (options.catalogFailUntil !== undefined &&
-          catalogCalls <= options.catalogFailUntil);
+        (options.catalogFailUntil !== undefined && catalogCalls <= options.catalogFailUntil);
       if (catalogShouldFail) {
         if (options.catalogNetworkFails === true) {
           throw new TypeError("Failed to fetch");
@@ -206,10 +202,7 @@ function stubFetch(options: {
       const definitionId = restoreMatch[1] as string;
       const agent = agents.find((a) => a.definitionId === definitionId);
       if (agent === undefined) {
-        return json(
-          { error: { code: "not_found", message: "no such agent" } },
-          404,
-        );
+        return json({ error: { code: "not_found", message: "no such agent" } }, 404);
       }
       if (options.restoreFails === true) {
         return json({ error: { code: "internal", message: "boom" } }, 500);
@@ -224,16 +217,12 @@ function stubFetch(options: {
         model: agent.model,
       });
     }
-    const capabilitiesMatch =
-      /\/agent-definitions\/([^/]+)\/capabilities$/.exec(path);
+    const capabilitiesMatch = /\/agent-definitions\/([^/]+)\/capabilities$/.exec(path);
     if (capabilitiesMatch !== null) {
       const definitionId = capabilitiesMatch[1] as string;
       const agent = agents.find((a) => a.definitionId === definitionId);
       if (agent === undefined) {
-        return json(
-          { error: { code: "not_found", message: "no such agent" } },
-          404,
-        );
+        return json({ error: { code: "not_found", message: "no such agent" } }, 404);
       }
       if (options.addCapabilityFails === true) {
         return json({ error: { code: "bad_request", message: "boom" } }, 400);
@@ -244,10 +233,7 @@ function stubFetch(options: {
         | { kind: "model"; canonicalName: string };
       options.onAddCapability?.(definitionId, body);
       if (body.kind === "toolPackage") {
-        agent.toolPackagePins = [
-          ...agent.toolPackagePins,
-          { name: body.name, version: "*" },
-        ];
+        agent.toolPackagePins = [...agent.toolPackagePins, { name: body.name, version: "*" }];
       } else if (body.kind === "skill") {
         agent.skills = [...agent.skills, body.name];
       } else {
@@ -264,10 +250,7 @@ function stubFetch(options: {
       const definitionId = definitionMatch[1];
       const agent = agents.find((a) => a.definitionId === definitionId);
       if (agent === undefined) {
-        return json(
-          { error: { code: "not_found", message: "no such agent" } },
-          404,
-        );
+        return json({ error: { code: "not_found", message: "no such agent" } }, 404);
       }
       if (init?.method === "PUT") {
         if (options.saveFails === true) {
@@ -323,9 +306,7 @@ afterEach(() => {
 const sleep = (ms: number) => new Promise((resolve) => setTimeout(resolve, ms));
 const settle = () => act(() => sleep(10));
 
-function baseProps(
-  overrides: Partial<Parameters<typeof WorkbenchSettingsSurface>[0]> = {},
-) {
+function baseProps(overrides: Partial<Parameters<typeof WorkbenchSettingsSurface>[0]> = {}) {
   return {
     tenantId: "tnt_1",
     workbenchId: "ch_1",
@@ -338,10 +319,7 @@ function baseProps(
 }
 
 function setTextareaValue(textarea: HTMLTextAreaElement | null, value: string) {
-  const setter = Object.getOwnPropertyDescriptor(
-    HTMLTextAreaElement.prototype,
-    "value",
-  )?.set;
+  const setter = Object.getOwnPropertyDescriptor(HTMLTextAreaElement.prototype, "value")?.set;
   act(() => {
     setter?.call(textarea, value);
     textarea?.dispatchEvent(new Event("input", { bubbles: true }));
@@ -349,17 +327,15 @@ function setTextareaValue(textarea: HTMLTextAreaElement | null, value: string) {
 }
 
 function findButton(el: HTMLElement, text: string) {
-  return Array.from(
-    el.querySelectorAll(".workbench-settings-panel-area button"),
-  ).find((button) => button.textContent === text) as
-    HTMLButtonElement | undefined;
+  return Array.from(el.querySelectorAll(".workbench-settings-panel-area button")).find(
+    (button) => button.textContent === text,
+  ) as HTMLButtonElement | undefined;
 }
 
 function openAgent(el: HTMLElement, handle: string) {
-  const row = Array.from(
-    el.querySelectorAll(".chat-settings-agent-picker-row"),
-  ).find((button) => button.textContent === `@${handle}`) as
-    HTMLButtonElement | undefined;
+  const row = Array.from(el.querySelectorAll(".chat-settings-agent-picker-row")).find(
+    (button) => button.textContent === `@${handle}`,
+  ) as HTMLButtonElement | undefined;
   act(() => {
     row?.click();
   });
@@ -380,9 +356,9 @@ describe("Agents section — list", () => {
     const el = mount(baseProps());
     await settle();
 
-    const rows = Array.from(
-      el.querySelectorAll(".chat-settings-agent-picker-row"),
-    ).map((row) => row.textContent);
+    const rows = Array.from(el.querySelectorAll(".chat-settings-agent-picker-row")).map(
+      (row) => row.textContent,
+    );
     expect(rows.sort()).toEqual(["@myra", "@researcher"]);
     expect(findButton(el, "Invite agent")).toBeDefined();
     expect(el.textContent).toContain("Autonomy");
@@ -394,9 +370,7 @@ describe("Agents section — list", () => {
     await settle();
 
     const row = el.querySelector(".chat-settings-agent-picker-row");
-    expect(
-      row?.querySelector(".chat-settings-agent-picker-row-chevron"),
-    ).not.toBeNull();
+    expect(row?.querySelector(".chat-settings-agent-picker-row-chevron")).not.toBeNull();
   });
 
   test("no agents invited yet reads honestly, not as an empty list", async () => {
@@ -426,9 +400,9 @@ describe("Agents section — list", () => {
     openAgent(el, "researcher");
     await settle();
 
-    const titles = Array.from(
-      el.querySelectorAll(".chat-settings-agent-block-title"),
-    ).map((node) => node.textContent);
+    const titles = Array.from(el.querySelectorAll(".chat-settings-agent-block-title")).map(
+      (node) => node.textContent,
+    );
     expect(titles).toEqual(["Researcher"]);
     expect(el.querySelector(".chat-settings-agent-back")).not.toBeNull();
   });
@@ -443,9 +417,9 @@ describe("Agents section — list", () => {
     );
     await settle();
 
-    const titles = Array.from(
-      el.querySelectorAll(".chat-settings-agent-block-title"),
-    ).map((node) => node.textContent);
+    const titles = Array.from(el.querySelectorAll(".chat-settings-agent-block-title")).map(
+      (node) => node.textContent,
+    );
     expect(titles).toEqual(["Myra"]);
     expect(el.querySelector(".chat-settings-agent-picker-row")).toBeNull();
   });
@@ -482,11 +456,7 @@ describe("Agents section — list", () => {
     await settle();
 
     act(() => {
-      (
-        el.querySelector(
-          ".chat-settings-agent-back",
-        ) as HTMLButtonElement | null
-      )?.click();
+      (el.querySelector(".chat-settings-agent-back") as HTMLButtonElement | null)?.click();
     });
     expect(changes).toEqual(["wfd_myra", null]);
   });
@@ -589,9 +559,7 @@ describe("Agents section — detail", () => {
 
     openAgent(el, "myra");
     await settle();
-    const back = el.querySelector(
-      ".chat-settings-agent-back",
-    ) as HTMLButtonElement | null;
+    const back = el.querySelector(".chat-settings-agent-back") as HTMLButtonElement | null;
     act(() => {
       back?.click();
     });
@@ -622,10 +590,7 @@ describe("Agents section — Capabilities", () => {
     stubFetch({
       agents: [withCapabilities],
       capabilityInventory: {
-        toolPackages: [
-          { name: "@corbits/github-tools" },
-          { name: "@corbits/granola-tools" },
-        ],
+        toolPackages: [{ name: "@corbits/github-tools" }, { name: "@corbits/granola-tools" }],
         skills: [{ name: "research" }, { name: "writing" }],
         models: [{ canonicalName: "anthropic/claude-sonnet" }],
       },
@@ -635,18 +600,14 @@ describe("Agents section — Capabilities", () => {
     openAgent(el, "myra");
     await settle();
 
-    const listText = el.querySelector(
-      ".chat-settings-capability-list",
-    )?.textContent;
+    const listText = el.querySelector(".chat-settings-capability-list")?.textContent;
     expect(listText).toContain("@corbits/github-tools");
     expect(listText).toContain("research");
 
     const choiceSelect = el.querySelectorAll(
       ".chat-settings-capability-add select",
     )[1] as HTMLSelectElement | null;
-    const toolOptions = Array.from(choiceSelect?.options ?? []).map(
-      (option) => option.value,
-    );
+    const toolOptions = Array.from(choiceSelect?.options ?? []).map((option) => option.value);
     // The already-pinned tool package is not offered again; the
     // not-yet-pinned one is.
     expect(toolOptions).not.toContain("@corbits/github-tools");
@@ -755,9 +716,8 @@ describe("Agents section — Capabilities", () => {
       name: "@corbits/github-tools",
     });
     expect(refreshCalls).toEqual(["myra@acme.example"]);
-    const badges = Array.from(
-      el.querySelectorAll(".chat-settings-capability-list"),
-    )[0]?.textContent;
+    const badges = Array.from(el.querySelectorAll(".chat-settings-capability-list"))[0]
+      ?.textContent;
     expect(badges).toContain("@corbits/github-tools");
   });
 
@@ -798,9 +758,7 @@ describe("Agents section — Capabilities", () => {
 
 describe("Agents section — Model select (CL-6272.3)", () => {
   function modelSelect(el: HTMLElement) {
-    return el.querySelector(
-      ".chat-settings-agent-model-select select",
-    ) as HTMLSelectElement | null;
+    return el.querySelector(".chat-settings-agent-model-select select") as HTMLSelectElement | null;
   }
 
   test("shows the current model and options labeled 'Model · Provider'", async () => {
@@ -826,9 +784,7 @@ describe("Agents section — Model select (CL-6272.3)", () => {
 
     const select = modelSelect(el);
     expect(select?.value).toBe("anthropic/claude-sonnet");
-    const labels = Array.from(select?.options ?? []).map(
-      (option) => option.textContent,
-    );
+    const labels = Array.from(select?.options ?? []).map((option) => option.textContent);
     expect(labels).toEqual(["Claude Sonnet · Anthropic", "GPT · Opencode Zen"]);
   });
 
@@ -940,9 +896,7 @@ describe("Agents section — Model select (CL-6272.3)", () => {
     await settle();
 
     const alert = el.querySelector(".chat-dialog-error")?.textContent;
-    expect(alert).toBe(
-      "Couldn't reach the server. Check your connection and try again.",
-    );
+    expect(alert).toBe("Couldn't reach the server. Check your connection and try again.");
     expect(alert).not.toBe("Couldn't load the models.");
   });
 
@@ -963,9 +917,7 @@ describe("Agents section — Model select (CL-6272.3)", () => {
     await settle();
 
     expect(modelSelect(el)?.disabled).toBe(true);
-    expect(el.querySelector(".chat-dialog-error")?.textContent).toBe(
-      "catalog boom",
-    );
+    expect(el.querySelector(".chat-dialog-error")?.textContent).toBe("catalog boom");
 
     act(() => {
       findButton(el, "Retry")?.click();
@@ -975,9 +927,9 @@ describe("Agents section — Model select (CL-6272.3)", () => {
     expect(el.querySelector(".chat-dialog-error")).toBeNull();
     const select = modelSelect(el);
     expect(select?.disabled).toBe(false);
-    expect(
-      Array.from(select?.options ?? []).map((option) => option.textContent),
-    ).toContain("Claude Sonnet · Anthropic");
+    expect(Array.from(select?.options ?? []).map((option) => option.textContent)).toContain(
+      "Claude Sonnet · Anthropic",
+    );
   });
 });
 
diff --git a/packages/chat-ui/test/api.test.ts b/packages/chat-ui/test/api.test.ts
index 984609d0a0..f51fffffd3 100644
--- a/packages/chat-ui/test/api.test.ts
+++ b/packages/chat-ui/test/api.test.ts
@@ -43,8 +43,7 @@ type RecordedCall = { readonly path: string; readonly init?: RequestInit };
 function stubFetch(respond: (path: string) => Response): RecordedCall[] {
   const calls: RecordedCall[] = [];
   globalThis.fetch = ((input: RequestInfo | URL, init?: RequestInit) => {
-    const path =
-      typeof input === "string" ? input : new URL(String(input)).pathname;
+    const path = typeof input === "string" ? input : new URL(String(input)).pathname;
     calls.push(init === undefined ? { path } : { path, init });
     return Promise.resolve(respond(path));
   }) as typeof fetch;
@@ -73,9 +72,7 @@ describe("listWorkbenches", () => {
       }),
     );
     const workbenches = await listWorkbenches("tenant_1", "workbench");
-    expect(calls[0]?.path).toBe(
-      "/api/tenants/tenant_1/chat/workbenches?kind=workbench",
-    );
+    expect(calls[0]?.path).toBe("/api/tenants/tenant_1/chat/workbenches?kind=workbench");
     expect(workbenches).toEqual([
       {
         id: "c1",
@@ -111,25 +108,19 @@ describe("listWorkbenches", () => {
       }),
     );
     const workbenches = await listWorkbenches("tenant_1", "workbench");
-    expect(calls[0]?.path).toBe(
-      "/api/tenants/tenant_1/chat/workbenches?kind=workbench",
-    );
+    expect(calls[0]?.path).toBe("/api/tenants/tenant_1/chat/workbenches?kind=workbench");
     expect(workbenches[0]?.tenancy).toEqual({ tenantId: "tnt_1" });
     expect(workbenches[1]?.tenancy).toBeNull();
   });
 
   test("throws a ChatApiError on a malformed response", async () => {
     stubFetch(() => json({ items: [{ id: "c1" }] }));
-    await expect(listWorkbenches("tenant_1", "chat")).rejects.toBeInstanceOf(
-      ChatApiError,
-    );
+    await expect(listWorkbenches("tenant_1", "chat")).rejects.toBeInstanceOf(ChatApiError);
   });
 
   test("throws an UnauthenticatedError on 401", async () => {
     stubFetch(() => json(null, 401));
-    await expect(listWorkbenches("tenant_1", "chat")).rejects.toBeInstanceOf(
-      UnauthenticatedError,
-    );
+    await expect(listWorkbenches("tenant_1", "chat")).rejects.toBeInstanceOf(UnauthenticatedError);
   });
 });
 
@@ -243,13 +234,9 @@ describe("createWorkbench", () => {
 
 describe("sendMessage", () => {
   test("posts { parts } with the TextPart payload", async () => {
-    const calls = stubFetch(() =>
-      json({ id: "m1", createdAt: "2026-01-01T00:00:00.000Z" }, 201),
-    );
+    const calls = stubFetch(() => json({ id: "m1", createdAt: "2026-01-01T00:00:00.000Z" }, 201));
     await sendMessage("tenant_1", "chan_1", [{ kind: "text", text: "hello" }]);
-    expect(calls[0]?.path).toBe(
-      "/api/tenants/tenant_1/chat/workbenches/chan_1/messages",
-    );
+    expect(calls[0]?.path).toBe("/api/tenants/tenant_1/chat/workbenches/chan_1/messages");
     expect(calls[0]?.init?.method).toBe("POST");
     expect(JSON.parse(String(calls[0]?.init?.body))).toEqual({
       parts: [{ kind: "text", text: "hello" }],
@@ -331,9 +318,7 @@ describe("listMessages", () => {
         ],
       }),
     );
-    await expect(listMessages("tenant_1", "chan_1")).rejects.toBeInstanceOf(
-      ChatApiError,
-    );
+    await expect(listMessages("tenant_1", "chan_1")).rejects.toBeInstanceOf(ChatApiError);
   });
 });
 
@@ -342,16 +327,14 @@ describe("fetchWorkbenchBlob", () => {
     const calls = stubFetch(() => json({ contentBase64: "aGVsbG8=" }));
     const content = await fetchWorkbenchBlob("tenant_1", "chan_1", "blob_m1_1");
     expect(content).toBe("aGVsbG8=");
-    expect(calls[0]?.path).toBe(
-      "/api/tenants/tenant_1/chat/workbenches/chan_1/blobs/blob_m1_1",
-    );
+    expect(calls[0]?.path).toBe("/api/tenants/tenant_1/chat/workbenches/chan_1/blobs/blob_m1_1");
   });
 
   test("throws a ChatApiError on a non-2xx response", async () => {
     stubFetch(() => json({ error: { code: "not_found" } }, 404));
-    await expect(
-      fetchWorkbenchBlob("tenant_1", "chan_1", "blob_missing"),
-    ).rejects.toBeInstanceOf(ChatApiError);
+    await expect(fetchWorkbenchBlob("tenant_1", "chan_1", "blob_missing")).rejects.toBeInstanceOf(
+      ChatApiError,
+    );
   });
 });
 
@@ -377,34 +360,26 @@ describe("listRuns", () => {
 
 describe("listTenantInvitableDefinitions", () => {
   test("fetches the tenant-wide listing with no workbench id", async () => {
-    const calls = stubFetch(() =>
-      json({ items: [{ id: "wfd_echo", name: "echo" }] }),
-    );
+    const calls = stubFetch(() => json({ items: [{ id: "wfd_echo", name: "echo" }] }));
     const items = await listTenantInvitableDefinitions("tenant_1");
-    expect(calls[0]?.path).toBe(
-      "/api/tenants/tenant_1/chat/invitable-definitions",
-    );
+    expect(calls[0]?.path).toBe("/api/tenants/tenant_1/chat/invitable-definitions");
     expect(items).toEqual([{ id: "wfd_echo", name: "echo" }]);
   });
 });
 
 describe("listInvitableDefinitions", () => {
   test("fetches the workbench's invitable definitions", async () => {
-    const calls = stubFetch(() =>
-      json({ items: [{ id: "wfd_echo", name: "echo" }] }),
-    );
+    const calls = stubFetch(() => json({ items: [{ id: "wfd_echo", name: "echo" }] }));
     const items = await listInvitableDefinitions("tenant_1", "chan_1");
-    expect(calls[0]?.path).toBe(
-      "/api/tenants/tenant_1/chat/workbenches/chan_1/invitable",
-    );
+    expect(calls[0]?.path).toBe("/api/tenants/tenant_1/chat/workbenches/chan_1/invitable");
     expect(items).toEqual([{ id: "wfd_echo", name: "echo" }]);
   });
 
   test("throws a ChatApiError on a malformed response", async () => {
     stubFetch(() => json({ items: [{ id: "wfd_echo" }] }));
-    await expect(
-      listInvitableDefinitions("tenant_1", "chan_1"),
-    ).rejects.toBeInstanceOf(ChatApiError);
+    await expect(listInvitableDefinitions("tenant_1", "chan_1")).rejects.toBeInstanceOf(
+      ChatApiError,
+    );
   });
 });
 
@@ -424,9 +399,7 @@ describe("listWorkbenchAgents", () => {
       }),
     );
     const items = await listWorkbenchAgents("tenant_1", "chan_1");
-    expect(calls[0]?.path).toBe(
-      "/api/tenants/tenant_1/chat/workbenches/chan_1/agents",
-    );
+    expect(calls[0]?.path).toBe("/api/tenants/tenant_1/chat/workbenches/chan_1/agents");
     expect(items).toEqual([
       {
         address: "ins_echo@acme.example",
@@ -451,9 +424,7 @@ describe("listWorkbenchAgents", () => {
         ],
       }),
     );
-    await expect(
-      listWorkbenchAgents("tenant_1", "chan_1"),
-    ).rejects.toBeInstanceOf(ChatApiError);
+    await expect(listWorkbenchAgents("tenant_1", "chan_1")).rejects.toBeInstanceOf(ChatApiError);
   });
 });
 
@@ -501,9 +472,7 @@ describe("listVisibleAgentDefinitions", () => {
 
   test("throws a ChatApiError on a malformed response", async () => {
     stubFetch(() => json({ definitions: [{ id: "wfd_outreach" }] }));
-    await expect(listVisibleAgentDefinitions("tnt_1")).rejects.toBeInstanceOf(
-      ChatApiError,
-    );
+    await expect(listVisibleAgentDefinitions("tnt_1")).rejects.toBeInstanceOf(ChatApiError);
   });
 });
 
@@ -535,15 +504,10 @@ describe("openAgentDm", () => {
 describe("inviteAgent", () => {
   test("posts the definitionId and returns the launched agent's address", async () => {
     const calls = stubFetch(() =>
-      json(
-        { address: "ins_invited1@acme.example", definitionId: "wfd_echo" },
-        201,
-      ),
+      json({ address: "ins_invited1@acme.example", definitionId: "wfd_echo" }, 201),
     );
     const invited = await inviteAgent("tenant_1", "chan_1", "wfd_echo");
-    expect(calls[0]?.path).toBe(
-      "/api/tenants/tenant_1/chat/workbenches/chan_1/invite",
-    );
+    expect(calls[0]?.path).toBe("/api/tenants/tenant_1/chat/workbenches/chan_1/invite");
     expect(calls[0]?.init?.method).toBe("POST");
     expect(JSON.parse(String(calls[0]?.init?.body))).toEqual({
       definitionId: "wfd_echo",
@@ -562,29 +526,19 @@ describe("postWorkbenchOnboardingStep", () => {
       kind: "connect-github" as const,
       requiredForTemplate: "Code review",
       promise: "Three reviewers read every pull request.",
-      steps: [
-        { title: "Connect GitHub", why: "So reviewers can read your code." },
-      ],
+      steps: [{ title: "Connect GitHub", why: "So reviewers can read your code." }],
     };
 
-    const posted = await postWorkbenchOnboardingStep(
-      "tenant_1",
-      "chan_1",
-      step,
-    );
+    const posted = await postWorkbenchOnboardingStep("tenant_1", "chan_1", step);
 
-    expect(calls[0]?.path).toBe(
-      "/api/tenants/tenant_1/chat/workbenches/chan_1/onboarding",
-    );
+    expect(calls[0]?.path).toBe("/api/tenants/tenant_1/chat/workbenches/chan_1/onboarding");
     expect(calls[0]?.init?.method).toBe("POST");
     expect(JSON.parse(String(calls[0]?.init?.body))).toEqual(step);
     expect(posted).toEqual({ id: "msg_1" });
   });
 
   test("a rejected step surfaces as a ChatApiError", async () => {
-    stubFetch(() =>
-      json({ error: { code: "bad_request", message: "nope" } }, 400),
-    );
+    stubFetch(() => json({ error: { code: "bad_request", message: "nope" } }, 400));
 
     await expect(
       postWorkbenchOnboardingStep("tenant_1", "chan_1", {
@@ -603,9 +557,7 @@ describe("quickCreateJimmy", () => {
     const created = await quickCreateJimmy("tenant_1");
     expect(calls[0]?.path).toBe("/api/tenants/tenant_1/agent-definitions");
     expect(calls[0]?.init?.method).toBe("POST");
-    expect(JSON.parse(String(calls[0]?.init?.body))).toEqual(
-      JIMMY_QUICK_CREATE,
-    );
+    expect(JSON.parse(String(calls[0]?.init?.body))).toEqual(JIMMY_QUICK_CREATE);
     expect(created).toEqual({ id: "wfd_jimmy" });
   });
 });
@@ -624,9 +576,7 @@ describe("getWorkbenchSettings", () => {
       }),
     );
     const settings = await getWorkbenchSettings("tenant_1", "c1");
-    expect(calls[0]?.path).toBe(
-      "/api/tenants/tenant_1/chat/workbenches/c1/settings",
-    );
+    expect(calls[0]?.path).toBe("/api/tenants/tenant_1/chat/workbenches/c1/settings");
     expect(settings.settings["chat/contextWindow"]).toBe(5);
     expect(settings.contextWindow).toEqual({ value: 5, source: "override" });
   });
@@ -654,9 +604,7 @@ describe("patchWorkbenchSettings", () => {
       "chat/pinned": false,
       "chat/contextWindow": 0,
     });
-    expect(calls[0]?.path).toBe(
-      "/api/tenants/tenant_1/chat/workbenches/c1/settings",
-    );
+    expect(calls[0]?.path).toBe("/api/tenants/tenant_1/chat/workbenches/c1/settings");
     expect(calls[0]?.init?.method).toBe("PATCH");
     expect(JSON.parse(String(calls[0]?.init?.body))).toEqual({
       "chat/name": "Renamed",
@@ -713,45 +661,33 @@ describe("describeChatError", () => {
   const fallback = "Couldn't load the models.";
 
   test("surfaces an InferenceSettingsApiError envelope userMessage on 500", () => {
-    expect(
-      describeChatError(
-        new InferenceSettingsApiError("catalog boom", 500),
-        fallback,
-      ),
-    ).toBe("catalog boom");
+    expect(describeChatError(new InferenceSettingsApiError("catalog boom", 500), fallback)).toBe(
+      "catalog boom",
+    );
   });
 
   test("maps an InferenceSettingsApiError 401 the same way as ChatApiError", () => {
-    expect(
-      describeChatError(
-        new InferenceSettingsApiError("signed out boom", 401),
-        fallback,
-      ),
-    ).toBe("You're signed out. Sign in again to continue.");
+    expect(describeChatError(new InferenceSettingsApiError("signed out boom", 401), fallback)).toBe(
+      "You're signed out. Sign in again to continue.",
+    );
     expect(describeChatError(new ChatApiError("boom", 401), fallback)).toBe(
       "You're signed out. Sign in again to continue.",
     );
   });
 
   test("maps a network InferenceSettingsApiError the same way as ChatApiError", () => {
-    expect(
-      describeChatError(
-        new InferenceSettingsApiError("Failed to fetch"),
-        fallback,
-      ),
-    ).toBe("Couldn't reach the server. Check your connection and try again.");
-    expect(
-      describeChatError(new ChatApiError("Failed to fetch"), fallback),
-    ).toBe("Couldn't reach the server. Check your connection and try again.");
+    expect(describeChatError(new InferenceSettingsApiError("Failed to fetch"), fallback)).toBe(
+      "Couldn't reach the server. Check your connection and try again.",
+    );
+    expect(describeChatError(new ChatApiError("Failed to fetch"), fallback)).toBe(
+      "Couldn't reach the server. Check your connection and try again.",
+    );
   });
 
   test("never leaks a ChatApiError path on 500", () => {
     expect(
       describeChatError(
-        new ChatApiError(
-          "The server answered 500 for /api/tenants/tnt_1/models.",
-          500,
-        ),
+        new ChatApiError("The server answered 500 for /api/tenants/tnt_1/models.", 500),
         fallback,
       ),
     ).toBe("Something went wrong on our end. Try again in a moment.");
diff --git a/packages/chat-ui/test/approve-block.test.tsx b/packages/chat-ui/test/approve-block.test.tsx
index 1236c29063..982fc5e594 100644
--- a/packages/chat-ui/test/approve-block.test.tsx
+++ b/packages/chat-ui/test/approve-block.test.tsx
@@ -55,10 +55,8 @@ function messageWithApproveBlock(approvalId: string): MessageItem[] {
 function fakeActions(overrides: Partial<ApprovalActions>): ApprovalActions {
   return {
     getStatus: async () => ({ kind: "loading" }) as ApprovalStatusQuery,
-    approve: async () =>
-      ({ kind: "resolved", status: "approved" }) as ApprovalDecisionResult,
-    reject: async () =>
-      ({ kind: "resolved", status: "rejected" }) as ApprovalDecisionResult,
+    approve: async () => ({ kind: "resolved", status: "approved" }) as ApprovalDecisionResult,
+    reject: async () => ({ kind: "resolved", status: "rejected" }) as ApprovalDecisionResult,
     ...overrides,
   };
 }
@@ -109,10 +107,7 @@ async function mount(actions: ApprovalActions, approvalId = "apv_1") {
   root = createRoot(container);
   await act(async () => {
     root?.render(
-      <WorkbenchTimeline
-        items={messageWithApproveBlock(approvalId)}
-        approvalActions={actions}
-      />,
+      <WorkbenchTimeline items={messageWithApproveBlock(approvalId)} approvalActions={actions} />,
     );
   });
   return container;
@@ -145,9 +140,7 @@ describe("approve card round-trip", () => {
 
     expect(statusIds).toEqual([approvalId]);
 
-    const approveButton = el.querySelector(
-      ".chat-block-actions button",
-    ) as HTMLButtonElement;
+    const approveButton = el.querySelector(".chat-block-actions button") as HTMLButtonElement;
     await act(async () => {
       approveButton.click();
     });
@@ -193,9 +186,7 @@ describe("approve card round-trip", () => {
     // the page, but the platform detail must appear first in document
     // order — never the agent's framing standing in ahead of it.
     const platformIndex = el.innerHTML.indexOf("Wire $50,000 to acct_9182");
-    const agentIndex = el.innerHTML.indexOf(
-      "Just a routine refresh, nothing to worry about!",
-    );
+    const agentIndex = el.innerHTML.indexOf("Just a routine refresh, nothing to worry about!");
     expect(platformIndex).toBeGreaterThan(-1);
     expect(agentIndex).toBeGreaterThan(-1);
     expect(platformIndex).toBeLessThan(agentIndex);
@@ -216,16 +207,12 @@ describe("approve card round-trip", () => {
     // The agent's own body text — the exact confused-deputy risk (an
     // innocuous "Refresh cache" framing over a real wire transfer) — must
     // never render as the description sitting next to live buttons.
-    expect(el.textContent).not.toContain(
-      "Just a routine refresh, nothing to worry about!",
-    );
+    expect(el.textContent).not.toContain("Just a routine refresh, nothing to worry about!");
 
     await act(async () => {
       (buttons[0] as HTMLButtonElement).click();
     });
-    expect(el.textContent).toContain(
-      "You do not have permission to act on this.",
-    );
+    expect(el.textContent).toContain("You do not have permission to act on this.");
   });
 
   test("approve success re-renders resolved state from a re-read and invalidates", async () => {
@@ -241,9 +228,7 @@ describe("approve card round-trip", () => {
     };
     const el = await mount(actions);
 
-    const approveButton = el.querySelector(
-      ".chat-block-actions button",
-    ) as HTMLButtonElement;
+    const approveButton = el.querySelector(".chat-block-actions button") as HTMLButtonElement;
     await act(async () => {
       approveButton.click();
     });
@@ -266,9 +251,7 @@ describe("approve card round-trip", () => {
       }),
     );
 
-    const approveButton = el.querySelector(
-      ".chat-block-actions button",
-    ) as HTMLButtonElement;
+    const approveButton = el.querySelector(".chat-block-actions button") as HTMLButtonElement;
     await act(async () => {
       approveButton.click();
     });
@@ -306,9 +289,7 @@ describe("approve card round-trip", () => {
     };
     const el = await mount(actions);
 
-    const approveButton = el.querySelector(
-      ".chat-block-actions button",
-    ) as HTMLButtonElement;
+    const approveButton = el.querySelector(".chat-block-actions button") as HTMLButtonElement;
     await act(async () => {
       approveButton.click();
     });
@@ -316,9 +297,7 @@ describe("approve card round-trip", () => {
     expect(reads).toBe(2);
     expect(el.querySelectorAll(".chat-block-actions button")).toHaveLength(0);
     expect(el.textContent).toContain("Approved");
-    expect(el.textContent).toContain(
-      "Someone else already resolved this while you were deciding.",
-    );
+    expect(el.textContent).toContain("Someone else already resolved this while you were deciding.");
   });
 
   test("an already-resolved approval renders calmly with no buttons", async () => {
@@ -352,8 +331,7 @@ describe("approve card round-trip", () => {
     const el = await mount(
       fakeBackend("pending", true, {
         ...PLATFORM_DETAIL,
-        consequence:
-          "Merging goes further than posting a review — it puts the change live.",
+        consequence: "Merging goes further than posting a review — it puts the change live.",
       }).actions,
     );
 
diff --git a/packages/chat-ui/test/artifact-chip.test.tsx b/packages/chat-ui/test/artifact-chip.test.tsx
index 63301d6b90..6e5d6d15e3 100644
--- a/packages/chat-ui/test/artifact-chip.test.tsx
+++ b/packages/chat-ui/test/artifact-chip.test.tsx
@@ -20,18 +20,13 @@ function filePart(overrides: Partial<Part & { kind: "file" }>): Part & {
 
 describe("ArtifactChip", () => {
   test("is disabled with no blobId, data, or artifactId", () => {
-    const markup = renderToStaticMarkup(
-      <ArtifactChip part={filePart({ data: "aGVsbG8=" })} />,
-    );
+    const markup = renderToStaticMarkup(<ArtifactChip part={filePart({ data: "aGVsbG8=" })} />);
     expect(markup).toContain('disabled=""');
   });
 
   test("is openable when artifactId is set and onOpen is supplied", () => {
     const markup = renderToStaticMarkup(
-      <ArtifactChip
-        part={filePart({ artifactId: "art_1" })}
-        onOpen={() => {}}
-      />,
+      <ArtifactChip part={filePart({ artifactId: "art_1" })} onOpen={() => {}} />,
     );
     expect(markup).not.toContain('disabled=""');
   });
@@ -44,26 +39,19 @@ describe("ArtifactChip", () => {
   });
 
   test("stays disabled when artifactId is set but no onOpen is supplied", () => {
-    const markup = renderToStaticMarkup(
-      <ArtifactChip part={filePart({ artifactId: "art_1" })} />,
-    );
+    const markup = renderToStaticMarkup(<ArtifactChip part={filePart({ artifactId: "art_1" })} />);
     expect(markup).toContain('disabled=""');
   });
 
   test("renders the file name and media type", () => {
-    const markup = renderToStaticMarkup(
-      <ArtifactChip part={filePart({ artifactId: "art_1" })} />,
-    );
+    const markup = renderToStaticMarkup(<ArtifactChip part={filePart({ artifactId: "art_1" })} />);
     expect(markup).toContain("Notes");
     expect(markup).toContain("text/plain");
   });
 
   test("offers Open in Files when artifactId and onOpenInLibrary are both set", () => {
     const markup = renderToStaticMarkup(
-      <ArtifactChip
-        part={filePart({ artifactId: "art_1" })}
-        onOpenInLibrary={() => {}}
-      />,
+      <ArtifactChip part={filePart({ artifactId: "art_1" })} onOpenInLibrary={() => {}} />,
     );
     expect(markup).toContain('aria-label="Open in Files"');
   });
@@ -81,10 +69,7 @@ describe("ArtifactChip", () => {
 
   test("has no Library affordance when onOpenInLibrary is not supplied", () => {
     const markup = renderToStaticMarkup(
-      <ArtifactChip
-        part={filePart({ artifactId: "art_1" })}
-        onOpen={() => {}}
-      />,
+      <ArtifactChip part={filePart({ artifactId: "art_1" })} onOpen={() => {}} />,
     );
     expect(markup).not.toContain("Open in Files");
   });
diff --git a/packages/chat-ui/test/avatar-composition.test.tsx b/packages/chat-ui/test/avatar-composition.test.tsx
index 35579bfcae..fc6e0c7718 100644
--- a/packages/chat-ui/test/avatar-composition.test.tsx
+++ b/packages/chat-ui/test/avatar-composition.test.tsx
@@ -12,9 +12,7 @@ import {
 
 describe("avatar composition and identity resolution", () => {
   test("agent Corbit avatar is distinct from human initials avatar", () => {
-    const corbitHtml = renderToStaticMarkup(
-      <CorbitAvatar ariaLabel="Echo Agent" size="md" />,
-    );
+    const corbitHtml = renderToStaticMarkup(<CorbitAvatar ariaLabel="Echo Agent" size="md" />);
     expect(corbitHtml).toContain('data-corbit="true"');
     expect(corbitHtml).toContain('aria-label="Echo Agent"');
     expect(corbitHtml).toContain("<svg");
@@ -35,10 +33,7 @@ describe("avatar composition and identity resolution", () => {
   });
 
   test("human explicit image takes precedence over pastel initials fallback", () => {
-    const withImage = resolveAvatarFill(
-      "usr_alice",
-      "https://example.com/avatar.jpg",
-    );
+    const withImage = resolveAvatarFill("usr_alice", "https://example.com/avatar.jpg");
     expect(withImage.kind).toBe("image");
     if (withImage.kind === "image") {
       expect(withImage.url).toBe("https://example.com/avatar.jpg");
@@ -61,15 +56,10 @@ describe("avatar composition and identity resolution", () => {
 
     const rendered = participants.map((p) => {
       if (p.isAgent) {
-        return renderToStaticMarkup(
-          <CorbitAvatar ariaLabel={p.name} size="sm" />,
-        );
+        return renderToStaticMarkup(<CorbitAvatar ariaLabel={p.name} size="sm" />);
       }
       return renderToStaticMarkup(
-        <span
-          className={avatarClassForPrincipal(p.id)}
-          data-testid="human-avatar"
-        >
+        <span className={avatarClassForPrincipal(p.id)} data-testid="human-avatar">
           {p.name.slice(0, 1)}
         </span>,
       );
diff --git a/packages/chat-ui/test/blocks.test.tsx b/packages/chat-ui/test/blocks.test.tsx
index f3731a0d16..564be48243 100644
--- a/packages/chat-ui/test/blocks.test.tsx
+++ b/packages/chat-ui/test/blocks.test.tsx
@@ -177,9 +177,7 @@ describe("block rendering", () => {
 
   test("unknown block type renders the labeled fallback, not raw JSON", () => {
     const markup = renderToStaticMarkup(
-      <WorkbenchTimeline
-        items={messageWithBlock("carousel", { secret: "payload" })}
-      />,
+      <WorkbenchTimeline items={messageWithBlock("carousel", { secret: "payload" })} />,
     );
     expect(markup).toContain("Unsupported block");
     expect(markup).toContain("carousel");
@@ -188,9 +186,7 @@ describe("block rendering", () => {
 
   test("malformed data for a known type renders the fallback", () => {
     const markup = renderToStaticMarkup(
-      <WorkbenchTimeline
-        items={messageWithBlock("metrics", { title: 42, metrics: "nope" })}
-      />,
+      <WorkbenchTimeline items={messageWithBlock("metrics", { title: 42, metrics: "nope" })} />,
     );
     expect(markup).toContain("Unsupported block");
     expect(markup).not.toContain("nope");
diff --git a/packages/chat-ui/test/chat-bubble-flat.test.ts b/packages/chat-ui/test/chat-bubble-flat.test.ts
index 31fddce5aa..5414a053b8 100644
--- a/packages/chat-ui/test/chat-bubble-flat.test.ts
+++ b/packages/chat-ui/test/chat-bubble-flat.test.ts
@@ -12,11 +12,9 @@ const css = readFileSync(
 
 function ruleBodies(selector: string): string[] {
   const escaped = selector.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  return [
-    ...css.matchAll(
-      new RegExp(`(?:^|\\n)\\s*${escaped}\\s*\\{([^}]+)\\}`, "g"),
-    ),
-  ].map((match) => match[1] ?? "");
+  return [...css.matchAll(new RegExp(`(?:^|\\n)\\s*${escaped}\\s*\\{([^}]+)\\}`, "g"))].map(
+    (match) => match[1] ?? "",
+  );
 }
 
 describe("chat-bubble is visually flat", () => {
diff --git a/packages/chat-ui/test/chat-workspace.test.tsx b/packages/chat-ui/test/chat-workspace.test.tsx
index 1950582bd0..69c477a4fa 100644
--- a/packages/chat-ui/test/chat-workspace.test.tsx
+++ b/packages/chat-ui/test/chat-workspace.test.tsx
@@ -77,8 +77,7 @@ function stubFetch(
     if (/\/chat\/workbenches\?kind=workbench$/.test(path)) {
       return json({ items: [workbench] });
     }
-    if (/\/chat\/workbenches\?kind=chat$/.test(path))
-      return json({ items: [] });
+    if (/\/chat\/workbenches\?kind=chat$/.test(path)) return json({ items: [] });
     if (/\/chat\/workbenches\/[^/]+\/threads$/.test(path)) {
       return json({ rootThreadId: "", items: [] });
     }
@@ -200,9 +199,7 @@ describe("ChatWorkspace settings surface", () => {
     });
     await harness.settle();
 
-    expect(
-      harness.container.querySelector(".workbench-settings-stage"),
-    ).not.toBeNull();
+    expect(harness.container.querySelector(".workbench-settings-stage")).not.toBeNull();
     expect(harness.container.textContent).toContain("Launch Planning");
     harness.unmount();
   });
@@ -222,8 +219,7 @@ describe("ChatWorkspace settings surface", () => {
       if (/\/chat\/workbenches\?kind=workbench$/.test(path)) {
         return json({ items: [WORKBENCH_WIRE] });
       }
-      if (/\/chat\/workbenches\?kind=chat$/.test(path))
-        return json({ items: [] });
+      if (/\/chat\/workbenches\?kind=chat$/.test(path)) return json({ items: [] });
       if (/\/chat\/workbenches\/[^/]+\/threads$/.test(path)) {
         return json({ rootThreadId: "", items: [] });
       }
@@ -234,8 +230,7 @@ describe("ChatWorkspace settings surface", () => {
       if (/\/chat\/workbenches\/[^/]+\/invitable$/.test(path)) {
         return json({ items: [] });
       }
-      if (/\/chat\/workbenches\/[^/]+\/pins$/.test(path))
-        return json({ items: [] });
+      if (/\/chat\/workbenches\/[^/]+\/pins$/.test(path)) return json({ items: [] });
       if (/\/chat\/workbenches\/[^/]+\/settings$/.test(path)) {
         return json({
           ...WORKBENCH_WIRE,
@@ -267,20 +262,12 @@ describe("ChatWorkspace settings surface", () => {
     });
     await harness.settle();
 
-    expect(
-      harness.container.querySelector(".workbench-settings-stage"),
-    ).toBeNull();
+    expect(harness.container.querySelector(".workbench-settings-stage")).toBeNull();
     expect(settingsOpenChanges).toEqual([false]);
-    expect(harness.container.textContent).toContain(
-      "This workbench isn't here anymore",
-    );
-    expect(
-      harness.container.querySelector(".chat-workbench-header"),
-    ).toBeNull();
+    expect(harness.container.textContent).toContain("This workbench isn't here anymore");
+    expect(harness.container.querySelector(".chat-workbench-header")).toBeNull();
     expect(harness.container.textContent).not.toContain("Invite agent");
-    expect(harness.container.textContent).not.toContain(
-      "Untitled conversation",
-    );
+    expect(harness.container.textContent).not.toContain("Untitled conversation");
     harness.unmount();
   });
 
@@ -309,16 +296,14 @@ describe("ChatWorkspace settings surface", () => {
       workbenchId: "ch_1",
       settingsOpen: true,
       settingsSection: "general",
-      onSettingsSectionChange: (section: string) =>
-        sectionChanges.push(section),
+      onSettingsSectionChange: (section: string) => sectionChanges.push(section),
     });
     await harness.settle();
 
-    const items = Array.from(
-      harness.container.querySelectorAll(".workbench-settings-nav-item"),
-    );
+    const items = Array.from(harness.container.querySelectorAll(".workbench-settings-nav-item"));
     const membersItem = items.find((el) => el.textContent === "Members") as
-      HTMLButtonElement | undefined;
+      | HTMLButtonElement
+      | undefined;
     expect(membersItem).not.toBeUndefined();
     act(() => membersItem?.click());
     await harness.settle();
@@ -334,8 +319,7 @@ describe("ChatWorkspace settings surface", () => {
       tenant: { kind: "ready", tenantId: "tnt_1" },
       workbenchId: "ch_1",
       settingsOpen: false,
-      onSettingsOpenChange: (_open: boolean, section?: string) =>
-        opens.push(section),
+      onSettingsOpenChange: (_open: boolean, section?: string) => opens.push(section),
     });
     await harness.settle();
 
@@ -362,9 +346,7 @@ describe("connection state is never rendered as chrome", () => {
     firstStream().fail();
     await harness.settle();
 
-    expect(
-      harness.container.querySelector(".chat-stream-indicator"),
-    ).toBeNull();
+    expect(harness.container.querySelector(".chat-stream-indicator")).toBeNull();
     expect(harness.container.textContent).not.toContain("Reconnecting");
     harness.unmount();
   });
@@ -382,9 +364,7 @@ describe("connection state is never rendered as chrome", () => {
     firstStream().fail();
     await harness.settle();
 
-    const textarea = harness.container.querySelector(
-      ".chat-composer-input",
-    ) as HTMLTextAreaElement;
+    const textarea = harness.container.querySelector(".chat-composer-input") as HTMLTextAreaElement;
     act(() => {
       textareaValueSetter.call(textarea, "hello while down");
       textarea.dispatchEvent(new Event("input", { bubbles: true }));
@@ -433,8 +413,7 @@ function stubThreadedFetch({
     if (/\/chat\/workbenches\?kind=workbench$/.test(path)) {
       return json({ items: [WORKBENCH_WIRE] });
     }
-    if (/\/chat\/workbenches\?kind=chat$/.test(path))
-      return json({ items: [] });
+    if (/\/chat\/workbenches\?kind=chat$/.test(path)) return json({ items: [] });
     if (/\/chat\/workbenches\/[^/]+\/threads$/.test(path)) {
       return json({ rootThreadId: "", items: [] });
     }
@@ -516,21 +495,15 @@ describe("Thread breadcrumb and fork (CL-5908, CL-5948)", () => {
     });
     await harness.settle();
 
-    const openButton = harness.container.querySelector(
-      ".chat-thread-open",
-    ) as HTMLButtonElement;
+    const openButton = harness.container.querySelector(".chat-thread-open") as HTMLButtonElement;
     await act(async () => {
       openButton.dispatchEvent(new MouseEvent("click", { bubbles: true }));
       await sleep(30);
     });
 
-    const breadcrumb = harness.container.querySelector(
-      ".chat-thread-breadcrumb",
-    );
+    const breadcrumb = harness.container.querySelector(".chat-thread-breadcrumb");
     expect(breadcrumb).not.toBeNull();
-    expect(
-      breadcrumb?.querySelectorAll(".chat-thread-breadcrumb-link"),
-    ).toHaveLength(1);
+    expect(breadcrumb?.querySelectorAll(".chat-thread-breadcrumb-link")).toHaveLength(1);
     expect(breadcrumb?.textContent).toContain("Launch Planning");
     harness.unmount();
   });
@@ -543,9 +516,7 @@ describe("Thread breadcrumb and fork (CL-5908, CL-5948)", () => {
     });
     await harness.settle();
 
-    const openButton = harness.container.querySelector(
-      ".chat-thread-open",
-    ) as HTMLButtonElement;
+    const openButton = harness.container.querySelector(".chat-thread-open") as HTMLButtonElement;
     await act(async () => {
       openButton.dispatchEvent(new MouseEvent("click", { bubbles: true }));
       await sleep(30);
@@ -572,9 +543,7 @@ describe("Thread breadcrumb and fork (CL-5908, CL-5948)", () => {
     });
     await harness.settle();
 
-    const openButton = harness.container.querySelector(
-      ".chat-thread-open",
-    ) as HTMLButtonElement;
+    const openButton = harness.container.querySelector(".chat-thread-open") as HTMLButtonElement;
     await act(async () => {
       openButton.dispatchEvent(new MouseEvent("click", { bubbles: true }));
       await sleep(30);
@@ -582,9 +551,7 @@ describe("Thread breadcrumb and fork (CL-5908, CL-5948)", () => {
 
     const originalRow = harness.container.querySelector("#chat-message-msg_2");
     expect(originalRow?.textContent).toContain("inside the thread");
-    const editButton = originalRow?.querySelector(
-      ".chat-hover-edit",
-    ) as HTMLButtonElement;
+    const editButton = originalRow?.querySelector(".chat-hover-edit") as HTMLButtonElement;
     expect(editButton).not.toBeNull();
     await act(async () => {
       editButton.dispatchEvent(new MouseEvent("click", { bubbles: true }));
@@ -606,9 +573,9 @@ describe("Thread breadcrumb and fork (CL-5908, CL-5948)", () => {
       threadId: "msg_1",
       parts: [{ kind: "text", text: editedPrompt }],
     });
-    expect(
-      harness.container.querySelector("#chat-message-msg_2")?.textContent,
-    ).toContain("inside the thread");
+    expect(harness.container.querySelector("#chat-message-msg_2")?.textContent).toContain(
+      "inside the thread",
+    );
     harness.unmount();
   });
 
@@ -626,15 +593,9 @@ describe("Thread breadcrumb and fork (CL-5908, CL-5948)", () => {
 describe("hover Edit copies an own prompt into the composer", () => {
   const OWN_PROMPT = "rewrite this prompt";
 
-  function stubFetchWithOwnPrompt(
-    sentMessages: unknown[],
-    forkCalls: string[],
-  ) {
+  function stubFetchWithOwnPrompt(sentMessages: unknown[], forkCalls: string[]) {
     globalThis.EventSource = StubEventSource as unknown as typeof EventSource;
-    globalThis.fetch = (async (
-      input: RequestInfo | URL,
-      init?: RequestInit,
-    ) => {
+    globalThis.fetch = (async (input: RequestInfo | URL, init?: RequestInit) => {
       const path = typeof input === "string" ? input : String(input);
       const json = (body: unknown) =>
         new Response(JSON.stringify(body), {
@@ -644,8 +605,7 @@ describe("hover Edit copies an own prompt into the composer", () => {
       if (/\/chat\/workbenches\?kind=workbench$/.test(path)) {
         return json({ items: [WORKBENCH_WIRE] });
       }
-      if (/\/chat\/workbenches\?kind=chat$/.test(path))
-        return json({ items: [] });
+      if (/\/chat\/workbenches\?kind=chat$/.test(path)) return json({ items: [] });
       if (/\/chat\/workbenches\/[^/]+\/threads\/fork$/.test(path)) {
         forkCalls.push(path);
         return json({ id: "thr_should_not_fork" });
@@ -753,25 +713,19 @@ describe("hover Edit copies an own prompt into the composer", () => {
     await harness.settle();
 
     const ownGroup = harness.container.querySelector("#chat-message-msg_own");
-    const agentGroup = harness.container.querySelector(
-      "#chat-message-msg_agent",
-    );
+    const agentGroup = harness.container.querySelector("#chat-message-msg_agent");
     expect(ownGroup?.getAttribute("data-own")).toBe("true");
     expect(agentGroup?.querySelector(".chat-hover-edit")).toBeNull();
 
     typeInComposer(harness.container, "unsent draft");
-    const edit = ownGroup?.querySelector(
-      ".chat-hover-edit",
-    ) as HTMLButtonElement;
+    const edit = ownGroup?.querySelector(".chat-hover-edit") as HTMLButtonElement;
     expect(edit).not.toBeNull();
     await act(async () => {
       edit.dispatchEvent(new MouseEvent("click", { bubbles: true }));
       await sleep(30);
     });
 
-    const composer = harness.container.querySelector(
-      ".chat-composer-input",
-    ) as HTMLTextAreaElement;
+    const composer = harness.container.querySelector(".chat-composer-input") as HTMLTextAreaElement;
     expect(composer.value).toBe(OWN_PROMPT);
     expect(ownGroup?.textContent).toContain(OWN_PROMPT);
 
@@ -788,35 +742,27 @@ describe("hover Edit copies an own prompt into the composer", () => {
     expect(sentMessages[0]).toMatchObject({
       parts: [{ kind: "text", text: OWN_PROMPT }],
     });
-    expect(
-      harness.container.querySelector("#chat-message-msg_own"),
-    ).not.toBeNull();
-    expect(
-      harness.container.querySelector("#chat-message-msg_own")?.textContent,
-    ).toContain(OWN_PROMPT);
+    expect(harness.container.querySelector("#chat-message-msg_own")).not.toBeNull();
+    expect(harness.container.querySelector("#chat-message-msg_own")?.textContent).toContain(
+      OWN_PROMPT,
+    );
     harness.unmount();
   });
 });
 
 const WORKBENCH_WITH_AGENT_WIRE = {
   ...WORKBENCH_WIRE,
-  participants: [
-    { address: "researcher@agents.example", handle: "researcher" },
-  ],
+  participants: [{ address: "researcher@agents.example", handle: "researcher" }],
 };
 
 function pressEnter(textarea: HTMLTextAreaElement) {
   act(() => {
-    textarea.dispatchEvent(
-      new KeyboardEvent("keydown", { key: "Enter", bubbles: true }),
-    );
+    textarea.dispatchEvent(new KeyboardEvent("keydown", { key: "Enter", bubbles: true }));
   });
 }
 
 function typeInComposer(container: HTMLElement, text: string) {
-  const textarea = container.querySelector(
-    ".chat-composer-input",
-  ) as HTMLTextAreaElement;
+  const textarea = container.querySelector(".chat-composer-input") as HTMLTextAreaElement;
   act(() => {
     setTextareaValue.call(textarea, text);
     textarea.dispatchEvent(new Event("input", { bubbles: true }));
@@ -893,10 +839,7 @@ describe("composer slash commands — each wired command's real action", () => {
     const harness = await mount({
       tenant: { kind: "ready", tenantId: "tnt_1" },
       workbenchId: "ch_1",
-      onCreateRoutineInSpace: (
-        workbenchId: string,
-        preselectedAssetId?: string,
-      ) => {
+      onCreateRoutineInSpace: (workbenchId: string, preselectedAssetId?: string) => {
         opened.push(workbenchId, preselectedAssetId);
       },
     });
@@ -933,10 +876,7 @@ describe("composer slash commands — each wired command's real action", () => {
     const harness = await mount({
       tenant: { kind: "ready", tenantId: "tnt_1" },
       workbenchId: "ch_1",
-      onCreateRoutineInSpace: (
-        workbenchId: string,
-        preselectedAssetId?: string,
-      ) => {
+      onCreateRoutineInSpace: (workbenchId: string, preselectedAssetId?: string) => {
         opened.push(workbenchId, preselectedAssetId);
       },
     });
@@ -966,10 +906,7 @@ describe("composer slash commands — each wired command's real action", () => {
     const harness = await mount({
       tenant: { kind: "ready", tenantId: "tnt_1" },
       workbenchId: "ch_1",
-      onCreateRoutineInSpace: (
-        workbenchId: string,
-        preselectedAssetId?: string,
-      ) => {
+      onCreateRoutineInSpace: (workbenchId: string, preselectedAssetId?: string) => {
         opened.push(workbenchId, preselectedAssetId);
       },
     });
@@ -1113,9 +1050,7 @@ describe("composer slash commands — each wired command's real action", () => {
     typeInComposer(harness.container, "/");
     await harness.settle();
 
-    const popoverText = harness.container.querySelector(
-      ".chat-mention-popover",
-    )?.textContent;
+    const popoverText = harness.container.querySelector(".chat-mention-popover")?.textContent;
     expect(popoverText).not.toBeUndefined();
     expect(popoverText).not.toContain("/thread");
     expect(popoverText).not.toContain("/status");
@@ -1167,8 +1102,7 @@ describe("a workbench-level 404 offers a way out instead of retrying forever", (
       if (/\/chat\/workbenches\?kind=workbench$/.test(path)) {
         return json({ items: [WORKBENCH_WIRE] });
       }
-      if (/\/chat\/workbenches\?kind=chat$/.test(path))
-        return json({ items: [] });
+      if (/\/chat\/workbenches\?kind=chat$/.test(path)) return json({ items: [] });
       if (/\/chat\/workbenches\/[^/]+\/threads$/.test(path)) {
         return json({ rootThreadId: "", items: [] });
       }
@@ -1179,8 +1113,7 @@ describe("a workbench-level 404 offers a way out instead of retrying forever", (
       if (/\/chat\/workbenches\/[^/]+\/invitable$/.test(path)) {
         return json({ items: [] });
       }
-      if (/\/chat\/workbenches\/[^/]+\/pins$/.test(path))
-        return json({ items: [] });
+      if (/\/chat\/workbenches\/[^/]+\/pins$/.test(path)) return json({ items: [] });
       if (/\/chat\/workbenches\/[^/]+\/settings$/.test(path)) {
         return json({
           ...WORKBENCH_WIRE,
@@ -1211,8 +1144,7 @@ describe("a workbench-level 404 offers a way out instead of retrying forever", (
     const harness = await mount({
       tenant: { kind: "ready", tenantId: "tnt_1" },
       workbenchId: "ch_1",
-      onWorkbenchNotFound: (workbenchId: string) =>
-        notFoundIds.push(workbenchId),
+      onWorkbenchNotFound: (workbenchId: string) => notFoundIds.push(workbenchId),
       onGoToMissionControl: () => {
         missionControlClicks += 1;
       },
@@ -1228,40 +1160,30 @@ describe("a workbench-level 404 offers a way out instead of retrying forever", (
     expect(notFoundIds.length).toBeGreaterThan(0);
     expect(new Set(notFoundIds)).toEqual(new Set(["ch_1"]));
     expect(harness.container.textContent).not.toContain("Try again");
-    expect(harness.container.textContent).toContain(
-      "This workbench isn't here anymore",
-    );
+    expect(harness.container.textContent).toContain("This workbench isn't here anymore");
     expect(harness.container.textContent).toContain("Mission Control");
     expect(harness.container.textContent).toContain("New workbench");
     // CL-6796: not-found is the whole stage — never room chrome underneath.
-    expect(
-      harness.container.querySelector(".chat-workbench-header"),
-    ).toBeNull();
+    expect(harness.container.querySelector(".chat-workbench-header")).toBeNull();
     expect(harness.container.textContent).not.toContain("Invite agent");
-    expect(harness.container.textContent).not.toContain(
-      "Untitled conversation",
-    );
+    expect(harness.container.textContent).not.toContain("Untitled conversation");
     expect(harness.container.querySelector("textarea")).toBeNull();
 
-    const missionControlButton = Array.from(
-      harness.container.querySelectorAll("button"),
-    ).find((button) => button.textContent?.includes("Mission Control"));
+    const missionControlButton = Array.from(harness.container.querySelectorAll("button")).find(
+      (button) => button.textContent?.includes("Mission Control"),
+    );
     expect(missionControlButton).toBeDefined();
     act(() => {
-      missionControlButton?.dispatchEvent(
-        new MouseEvent("click", { bubbles: true }),
-      );
+      missionControlButton?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
     });
     expect(missionControlClicks).toBe(1);
 
-    const newWorkbenchButton = Array.from(
-      harness.container.querySelectorAll("button"),
-    ).find((button) => button.textContent?.includes("New workbench"));
+    const newWorkbenchButton = Array.from(harness.container.querySelectorAll("button")).find(
+      (button) => button.textContent?.includes("New workbench"),
+    );
     expect(newWorkbenchButton).toBeDefined();
     act(() => {
-      newWorkbenchButton?.dispatchEvent(
-        new MouseEvent("click", { bubbles: true }),
-      );
+      newWorkbenchButton?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
     });
     expect(newWorkbenchClicks).toBe(1);
 
@@ -1277,24 +1199,17 @@ describe("a workbench-level 404 offers a way out instead of retrying forever", (
     const harness = await mount({
       tenant: { kind: "ready", tenantId: "tnt_1" },
       workbenchId: "tnt_not_a_workbench",
-      onWorkbenchNotFound: (workbenchId: string) =>
-        notFoundIds.push(workbenchId),
+      onWorkbenchNotFound: (workbenchId: string) => notFoundIds.push(workbenchId),
       onGoToMissionControl: () => undefined,
       onNewWorkbench: () => undefined,
     });
     await harness.settle();
 
     expect(notFoundIds).toContain("tnt_not_a_workbench");
-    expect(harness.container.textContent).toContain(
-      "This workbench isn't here anymore",
-    );
-    expect(
-      harness.container.querySelector(".chat-workbench-header"),
-    ).toBeNull();
+    expect(harness.container.textContent).toContain("This workbench isn't here anymore");
+    expect(harness.container.querySelector(".chat-workbench-header")).toBeNull();
     expect(harness.container.textContent).not.toContain("Invite agent");
-    expect(harness.container.textContent).not.toContain(
-      "Untitled conversation",
-    );
+    expect(harness.container.textContent).not.toContain("Untitled conversation");
     expect(harness.container.querySelector("textarea")).toBeNull();
     expect(harness.container.textContent).toContain("Mission Control");
     expect(harness.container.textContent).toContain("New workbench");
@@ -1323,8 +1238,7 @@ describe("a workbench-level 404 offers a way out instead of retrying forever", (
         // Stale ready cache: existing workbench only — not the routed id.
         return json({ items: [WORKBENCH_WIRE] });
       }
-      if (/\/chat\/workbenches\?kind=chat$/.test(path))
-        return json({ items: [] });
+      if (/\/chat\/workbenches\?kind=chat$/.test(path)) return json({ items: [] });
       if (/\/chat\/workbenches\/[^/]+\/threads$/.test(path)) {
         return json({ rootThreadId: "", items: [] });
       }
@@ -1335,8 +1249,7 @@ describe("a workbench-level 404 offers a way out instead of retrying forever", (
       if (/\/chat\/workbenches\/[^/]+\/invitable$/.test(path)) {
         return json({ items: [] });
       }
-      if (/\/chat\/workbenches\/[^/]+\/pins$/.test(path))
-        return json({ items: [] });
+      if (/\/chat\/workbenches\/[^/]+\/pins$/.test(path)) return json({ items: [] });
       if (/\/chat\/workbenches\/[^/]+\/settings$/.test(path)) {
         return json({
           id: "ch_fresh",
@@ -1364,16 +1277,13 @@ describe("a workbench-level 404 offers a way out instead of retrying forever", (
     const harness = await mount({
       tenant: { kind: "ready", tenantId: "tnt_1" },
       workbenchId: "ch_fresh",
-      onWorkbenchNotFound: (workbenchId: string) =>
-        notFoundIds.push(workbenchId),
+      onWorkbenchNotFound: (workbenchId: string) => notFoundIds.push(workbenchId),
       onGoToMissionControl: () => undefined,
       onNewWorkbench: () => undefined,
     });
     await harness.settle();
 
-    expect(harness.container.textContent).not.toContain(
-      "This workbench isn't here anymore",
-    );
+    expect(harness.container.textContent).not.toContain("This workbench isn't here anymore");
     expect(notFoundIds).toEqual([]);
     expect(harness.container.textContent).not.toContain("Invite agent");
     expect(harness.container.querySelector("textarea")).toBeNull();
@@ -1388,9 +1298,7 @@ describe("a workbench-level 404 offers a way out instead of retrying forever", (
       await sleep(30);
     });
 
-    expect(harness.container.textContent).not.toContain(
-      "This workbench isn't here anymore",
-    );
+    expect(harness.container.textContent).not.toContain("This workbench isn't here anymore");
     expect(notFoundIds).toEqual([]);
 
     harness.unmount();
@@ -1410,8 +1318,7 @@ describe("a 401 on the messages load offers Sign in instead of a dead-end retry"
       if (/\/chat\/workbenches\?kind=workbench$/.test(path)) {
         return json({ items: [WORKBENCH_WIRE] });
       }
-      if (/\/chat\/workbenches\?kind=chat$/.test(path))
-        return json({ items: [] });
+      if (/\/chat\/workbenches\?kind=chat$/.test(path)) return json({ items: [] });
       if (/\/chat\/workbenches\/[^/]+\/threads$/.test(path)) {
         return json({ rootThreadId: "", items: [] });
       }
@@ -1422,8 +1329,7 @@ describe("a 401 on the messages load offers Sign in instead of a dead-end retry"
       if (/\/chat\/workbenches\/[^/]+\/invitable$/.test(path)) {
         return json({ items: [] });
       }
-      if (/\/chat\/workbenches\/[^/]+\/pins$/.test(path))
-        return json({ items: [] });
+      if (/\/chat\/workbenches\/[^/]+\/pins$/.test(path)) return json({ items: [] });
       if (/\/chat\/workbenches\/[^/]+\/settings$/.test(path)) {
         return json({
           ...WORKBENCH_WIRE,
@@ -1461,9 +1367,9 @@ describe("a 401 on the messages load offers Sign in instead of a dead-end retry"
     expect(harness.container.textContent).not.toContain("Try again");
     expect(harness.container.textContent).toContain("Sign in");
 
-    const signInButton = Array.from(
-      harness.container.querySelectorAll("button"),
-    ).find((button) => button.textContent === "Sign in");
+    const signInButton = Array.from(harness.container.querySelectorAll("button")).find(
+      (button) => button.textContent === "Sign in",
+    );
     expect(signInButton).toBeDefined();
     act(() => {
       signInButton?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
@@ -1487,8 +1393,7 @@ describe("chat error copy never leaks a raw API path", () => {
       if (/\/chat\/workbenches\?kind=workbench$/.test(path)) {
         return json({ items: [WORKBENCH_WIRE] });
       }
-      if (/\/chat\/workbenches\?kind=chat$/.test(path))
-        return json({ items: [] });
+      if (/\/chat\/workbenches\?kind=chat$/.test(path)) return json({ items: [] });
       if (/\/chat\/workbenches\/[^/]+\/threads$/.test(path)) {
         return json({ rootThreadId: "", items: [] });
       }
@@ -1544,10 +1449,7 @@ describe("chat error copy never leaks a raw API path", () => {
 describe("optimistic send (CL-6103)", () => {
   function stubFetchWithSendOutcome(shouldFail: () => boolean) {
     globalThis.EventSource = StubEventSource as unknown as typeof EventSource;
-    globalThis.fetch = (async (
-      input: RequestInfo | URL,
-      init?: RequestInit,
-    ) => {
+    globalThis.fetch = (async (input: RequestInfo | URL, init?: RequestInit) => {
       const path = typeof input === "string" ? input : String(input);
       const json = (body: unknown, status = 200) =>
         new Response(JSON.stringify(body), {
@@ -1557,8 +1459,7 @@ describe("optimistic send (CL-6103)", () => {
       if (/\/chat\/workbenches\?kind=workbench$/.test(path)) {
         return json({ items: [WORKBENCH_WIRE] });
       }
-      if (/\/chat\/workbenches\?kind=chat$/.test(path))
-        return json({ items: [] });
+      if (/\/chat\/workbenches\?kind=chat$/.test(path)) return json({ items: [] });
       if (/\/chat\/workbenches\/[^/]+\/threads$/.test(path)) {
         return json({ rootThreadId: "", items: [] });
       }
@@ -1593,9 +1494,7 @@ describe("optimistic send (CL-6103)", () => {
   }
 
   function clickSend(container: HTMLElement) {
-    const button = container.querySelector<HTMLButtonElement>(
-      '[aria-label^="Send"]',
-    );
+    const button = container.querySelector<HTMLButtonElement>('[aria-label^="Send"]');
     if (button === null) throw new Error("send button not found");
     act(() => button.click());
   }
@@ -1610,9 +1509,7 @@ describe("optimistic send (CL-6103)", () => {
     await harness.settle();
 
     const sendButton = () =>
-      harness.container.querySelector<HTMLButtonElement>(
-        '[aria-label^="Send"]',
-      );
+      harness.container.querySelector<HTMLButtonElement>('[aria-label^="Send"]');
     expect(sendButton()?.getAttribute("data-send-state")).toBe("empty");
     expect(sendButton()?.hasAttribute("disabled")).toBe(true);
 
@@ -1644,17 +1541,13 @@ describe("optimistic send (CL-6103)", () => {
     });
 
     expect(textarea.value).toBe("");
-    const pendingBubble = harness.container.querySelector(
-      '.chat-bubble[data-pending="sending"]',
-    );
+    const pendingBubble = harness.container.querySelector('.chat-bubble[data-pending="sending"]');
     expect(pendingBubble).not.toBeNull();
     expect(pendingBubble?.textContent).toContain("hi");
 
     await harness.settle();
 
-    expect(
-      harness.container.querySelector(".chat-bubble[data-pending]"),
-    ).toBeNull();
+    expect(harness.container.querySelector(".chat-bubble[data-pending]")).toBeNull();
     harness.unmount();
   });
 
@@ -1676,9 +1569,7 @@ describe("optimistic send (CL-6103)", () => {
 
     // Never a detached corner line — the failure lives on the bubble.
     expect(harness.container.textContent).not.toContain("Couldn't send");
-    const failedBubble = harness.container.querySelector(
-      '.chat-bubble[data-pending="failed"]',
-    );
+    const failedBubble = harness.container.querySelector('.chat-bubble[data-pending="failed"]');
     expect(failedBubble).not.toBeNull();
     expect(failedBubble?.textContent).toContain("Not sent");
 
@@ -1691,9 +1582,7 @@ describe("optimistic send (CL-6103)", () => {
     act(() => retryButton?.click());
     await harness.settle();
 
-    expect(
-      harness.container.querySelector(".chat-bubble[data-pending]"),
-    ).toBeNull();
+    expect(harness.container.querySelector(".chat-bubble[data-pending]")).toBeNull();
     expect(textarea.value).toBe("");
     harness.unmount();
   });
@@ -1713,20 +1602,16 @@ describe("optimistic send (CL-6103)", () => {
     });
     await harness.settle();
 
-    expect(
-      harness.container.querySelector('.chat-bubble[data-pending="failed"]'),
-    ).not.toBeNull();
+    expect(harness.container.querySelector('.chat-bubble[data-pending="failed"]')).not.toBeNull();
 
-    const discardButton = [
-      ...harness.container.querySelectorAll("button"),
-    ].find((button) => button.textContent === "Discard");
+    const discardButton = [...harness.container.querySelectorAll("button")].find(
+      (button) => button.textContent === "Discard",
+    );
     expect(discardButton).not.toBeUndefined();
     act(() => discardButton?.click());
     await harness.settle();
 
-    expect(
-      harness.container.querySelector(".chat-bubble[data-pending]"),
-    ).toBeNull();
+    expect(harness.container.querySelector(".chat-bubble[data-pending]")).toBeNull();
     expect(textarea.value).toBe("hi there");
     harness.unmount();
   });
@@ -1748,10 +1633,7 @@ describe("refresh ordering around a send (CL-6251, CL-6313)", () => {
     // triggered — every GET before this index is an incidental load the
     // race doesn't care about (see the mock below).
     let raceStartIndex = Number.POSITIVE_INFINITY;
-    globalThis.fetch = (async (
-      input: RequestInfo | URL,
-      init?: RequestInit,
-    ) => {
+    globalThis.fetch = (async (input: RequestInfo | URL, init?: RequestInit) => {
       const path = typeof input === "string" ? input : String(input);
       const json = (body: unknown) =>
         new Response(JSON.stringify(body), {
@@ -1761,8 +1643,7 @@ describe("refresh ordering around a send (CL-6251, CL-6313)", () => {
       if (/\/chat\/workbenches\?kind=workbench$/.test(path)) {
         return json({ items: [WORKBENCH_WIRE] });
       }
-      if (/\/chat\/workbenches\?kind=chat$/.test(path))
-        return json({ items: [] });
+      if (/\/chat\/workbenches\?kind=chat$/.test(path)) return json({ items: [] });
       if (/\/chat\/workbenches\/[^/]+\/threads$/.test(path)) {
         return json({ rootThreadId: "", items: [] });
       }
@@ -1847,9 +1728,7 @@ describe("refresh ordering around a send (CL-6251, CL-6313)", () => {
     act(() => firstStream().fail());
     await act(() => sleep(300));
 
-    const sendButton = harness.container.querySelector<HTMLButtonElement>(
-      '[aria-label^="Send"]',
-    );
+    const sendButton = harness.container.querySelector<HTMLButtonElement>('[aria-label^="Send"]');
     if (sendButton === null) throw new Error("send button not found");
     typeInComposer(harness.container, "second");
     act(() => sendButton.click());
@@ -1858,9 +1737,7 @@ describe("refresh ordering around a send (CL-6251, CL-6313)", () => {
     // the send's own refresh to land behind it.
     await act(() => sleep(700));
 
-    expect(
-      harness.container.querySelector("#chat-message-msg_new_2"),
-    ).not.toBeNull();
+    expect(harness.container.querySelector("#chat-message-msg_new_2")).not.toBeNull();
     expect(harness.container.textContent).toContain("second");
     harness.unmount();
   });
@@ -1892,9 +1769,7 @@ describe("Workbench header polish (CL-6106)", () => {
     // second settle beyond mount's own.
     await harness.settle();
 
-    const trigger = harness.container.querySelector(
-      ".chat-threads-menu-trigger",
-    );
+    const trigger = harness.container.querySelector(".chat-threads-menu-trigger");
     expect(trigger).not.toBeNull();
     expect(trigger?.textContent).toContain("1 thread");
     harness.unmount();
@@ -1908,9 +1783,7 @@ describe("Workbench header polish (CL-6106)", () => {
     });
     await harness.settle();
 
-    const chip = harness.container.querySelector(
-      '.member-avatar[data-agent="true"]',
-    );
+    const chip = harness.container.querySelector('.member-avatar[data-agent="true"]');
     expect(chip).not.toBeNull();
     expect((chip as HTMLElement).title).toBe("Researcher");
     expect(chip?.querySelector('[data-corbit="true"]')).not.toBeNull();
@@ -1952,17 +1825,11 @@ describe("Workbench header polish (CL-6106)", () => {
     });
     await harness.settle();
 
-    expect(
-      harness.container.querySelector(".chat-workbench-header"),
-    ).toBeNull();
-    const hostBar = harness.container.querySelector(
-      '[data-testid="host-stage-bar"]',
-    );
+    expect(harness.container.querySelector(".chat-workbench-header")).toBeNull();
+    const hostBar = harness.container.querySelector('[data-testid="host-stage-bar"]');
     expect(hostBar).not.toBeNull();
     expect(hostBar?.textContent).toContain("Launch Planning");
-    expect(
-      harness.container.querySelector('button[aria-label="Settings"]'),
-    ).not.toBeNull();
+    expect(harness.container.querySelector('button[aria-label="Settings"]')).not.toBeNull();
     harness.unmount();
   });
 
@@ -1975,34 +1842,22 @@ describe("Workbench header polish (CL-6106)", () => {
         createElement(
           "div",
           { "data-testid": "host-stage-bar" },
-          createElement(
-            "span",
-            { "aria-current": "page" },
-            chrome.crumbs.at(-1)?.label,
-          ),
+          createElement("span", { "aria-current": "page" }, chrome.crumbs.at(-1)?.label),
           chrome.subtitle !== undefined
-            ? createElement(
-                "div",
-                { className: "stage-top-bar-sub" },
-                chrome.subtitle,
-              )
+            ? createElement("div", { className: "stage-top-bar-sub" }, chrome.subtitle)
             : null,
           chrome.actions,
         ),
     });
     await harness.settle();
 
-    const openButton = harness.container.querySelector(
-      ".chat-thread-open",
-    ) as HTMLButtonElement;
+    const openButton = harness.container.querySelector(".chat-thread-open") as HTMLButtonElement;
     await act(async () => {
       openButton.dispatchEvent(new MouseEvent("click", { bubbles: true }));
       await sleep(30);
     });
 
-    expect(
-      harness.container.querySelectorAll('[aria-current="page"]'),
-    ).toHaveLength(1);
+    expect(harness.container.querySelectorAll('[aria-current="page"]')).toHaveLength(1);
     expect(
       harness.container
         .querySelector(".chat-thread-breadcrumb-current")
@@ -2017,9 +1872,7 @@ describe("Workbench header polish (CL-6106)", () => {
       closeThread.dispatchEvent(new MouseEvent("click", { bubbles: true }));
       await sleep(30);
     });
-    expect(
-      harness.container.querySelector(".chat-thread-breadcrumb"),
-    ).toBeNull();
+    expect(harness.container.querySelector(".chat-thread-breadcrumb")).toBeNull();
     harness.unmount();
   });
 
@@ -2027,18 +1880,13 @@ describe("Workbench header polish (CL-6106)", () => {
     const harness = await mount({
       tenant: { kind: "loading" },
       headerSlot: (chrome) =>
-        createElement(
-          "div",
-          { "data-testid": "host-stage-bar" },
-          chrome.crumbs[0]?.label,
-        ),
+        createElement("div", { "data-testid": "host-stage-bar" }, chrome.crumbs[0]?.label),
     });
     await harness.settle();
 
-    expect(
-      harness.container.querySelector('[data-testid="host-stage-bar"]')
-        ?.textContent,
-    ).toBe("Workbenches");
+    expect(harness.container.querySelector('[data-testid="host-stage-bar"]')?.textContent).toBe(
+      "Workbenches",
+    );
     harness.unmount();
   });
 });
@@ -2053,14 +1901,10 @@ describe("CL-6833: running-turn resume failure is visible, never silent idle", (
     await harness.settle();
     await harness.settle();
 
-    const banner = harness.container.querySelector(
-      ".chat-resume-failed-banner",
-    );
+    const banner = harness.container.querySelector(".chat-resume-failed-banner");
     expect(banner).not.toBeNull();
     expect(banner?.getAttribute("role")).toBe("alert");
-    expect(harness.container.textContent).toContain(
-      "Couldn't resume the running reply",
-    );
+    expect(harness.container.textContent).toContain("Couldn't resume the running reply");
     expect(
       [...harness.container.querySelectorAll("button")].some(
         (button) => button.textContent?.trim() === "Retry",
@@ -2078,9 +1922,7 @@ describe("CL-6833: running-turn resume failure is visible, never silent idle", (
     await harness.settle();
     await harness.settle();
 
-    expect(
-      harness.container.querySelector(".chat-resume-failed-banner"),
-    ).toBeNull();
+    expect(harness.container.querySelector(".chat-resume-failed-banner")).toBeNull();
     harness.unmount();
   });
 
@@ -2088,10 +1930,7 @@ describe("CL-6833: running-turn resume failure is visible, never silent idle", (
     let turnsCalls = 0;
     stubFetch(undefined, WORKBENCH_WITH_AGENT_WIRE, { turnsFail: true });
     const failingFetch = globalThis.fetch;
-    globalThis.fetch = (async (
-      input: RequestInfo | URL,
-      init?: RequestInit,
-    ) => {
+    globalThis.fetch = (async (input: RequestInfo | URL, init?: RequestInit) => {
       const path = typeof input === "string" ? input : String(input);
       if (/\/chat\/workbenches\/[^/]+\/turns(?:\/|$|\?)/.test(path)) {
         turnsCalls += 1;
@@ -2112,9 +1951,7 @@ describe("CL-6833: running-turn resume failure is visible, never silent idle", (
     await harness.settle();
     await harness.settle();
 
-    expect(
-      harness.container.querySelector(".chat-resume-failed-banner"),
-    ).not.toBeNull();
+    expect(harness.container.querySelector(".chat-resume-failed-banner")).not.toBeNull();
 
     const retry = [...harness.container.querySelectorAll("button")].find(
       (button) => button.textContent?.trim() === "Retry",
@@ -2126,9 +1963,7 @@ describe("CL-6833: running-turn resume failure is visible, never silent idle", (
     await harness.settle();
 
     expect(turnsCalls).toBeGreaterThanOrEqual(2);
-    expect(
-      harness.container.querySelector(".chat-resume-failed-banner"),
-    ).toBeNull();
+    expect(harness.container.querySelector(".chat-resume-failed-banner")).toBeNull();
     harness.unmount();
   });
 });
@@ -2149,10 +1984,7 @@ describe("Invite control visibility (CL-6781)", () => {
 
   test("shows Invite agent once at least one definition is invitable", async () => {
     globalThis.EventSource = StubEventSource as unknown as typeof EventSource;
-    globalThis.fetch = (async (
-      input: RequestInfo | URL,
-      init?: RequestInit,
-    ) => {
+    globalThis.fetch = (async (input: RequestInfo | URL, init?: RequestInit) => {
       const path = typeof input === "string" ? input : String(input);
       const json = (body: unknown) =>
         new Response(JSON.stringify(body), {
@@ -2162,8 +1994,7 @@ describe("Invite control visibility (CL-6781)", () => {
       if (/\/chat\/workbenches\?kind=workbench$/.test(path)) {
         return json({ items: [WORKBENCH_WIRE] });
       }
-      if (/\/chat\/workbenches\?kind=chat$/.test(path))
-        return json({ items: [] });
+      if (/\/chat\/workbenches\?kind=chat$/.test(path)) return json({ items: [] });
       if (/\/chat\/workbenches\/[^/]+\/threads$/.test(path)) {
         return json({ rootThreadId: "", items: [] });
       }
@@ -2179,8 +2010,7 @@ describe("Invite control visibility (CL-6781)", () => {
           items: [{ id: "wfd_echo", name: "echo", description: "Echo" }],
         });
       }
-      if (/\/chat\/workbenches\/[^/]+\/pins$/.test(path))
-        return json({ items: [] });
+      if (/\/chat\/workbenches\/[^/]+\/pins$/.test(path)) return json({ items: [] });
       if (/\/chat\/workbenches\/[^/]+\/settings$/.test(path)) {
         return json({
           ...WORKBENCH_WIRE,
@@ -2236,8 +2066,7 @@ describe("switching workbenches never carries a stale root-thread id across", ()
       if (/\/chat\/workbenches\?kind=workbench$/.test(path)) {
         return json({ items: [WORKBENCH_A, WORKBENCH_B] });
       }
-      if (/\/chat\/workbenches\?kind=chat$/.test(path))
-        return json({ items: [] });
+      if (/\/chat\/workbenches\?kind=chat$/.test(path)) return json({ items: [] });
       if (/\/chat\/workbenches\/[^/]+\/threads$/.test(path)) {
         return json({ rootThreadId: "", items: [] });
       }
@@ -2248,8 +2077,7 @@ describe("switching workbenches never carries a stale root-thread id across", ()
       if (/\/chat\/workbenches\/[^/]+\/invitable$/.test(path)) {
         return json({ items: [] });
       }
-      if (/\/chat\/workbenches\/[^/]+\/pins$/.test(path))
-        return json({ items: [] });
+      if (/\/chat\/workbenches\/[^/]+\/pins$/.test(path)) return json({ items: [] });
       if (/\/chat\/workbenches\/[^/]+\/settings$/.test(path)) {
         return json({
           ...WORKBENCH_A,
diff --git a/packages/chat-ui/test/components.test.tsx b/packages/chat-ui/test/components.test.tsx
index d536cdab92..89efeb9ff0 100644
--- a/packages/chat-ui/test/components.test.tsx
+++ b/packages/chat-ui/test/components.test.tsx
@@ -82,9 +82,7 @@ describe("WorkbenchTimeline", () => {
         sender: { name: null, address: "prn_fixture1@agents.example" },
       },
     ];
-    const markup = renderToStaticMarkup(
-      <WorkbenchTimeline items={reasoning} />,
-    );
+    const markup = renderToStaticMarkup(<WorkbenchTimeline items={reasoning} />);
     expect(markup).toContain("weighing the options");
     expect(markup).toContain('data-slot="reasoning-part"');
   });
@@ -120,9 +118,7 @@ describe("WorkbenchTimeline", () => {
         sender: { name: "Researcher", address: "researcher@agents.example" },
       },
     ];
-    const markup = renderToStaticMarkup(
-      <WorkbenchTimeline items={withSender} />,
-    );
+    const markup = renderToStaticMarkup(<WorkbenchTimeline items={withSender} />);
     expect(markup).toContain("Researcher");
   });
 
@@ -141,9 +137,7 @@ describe("WorkbenchTimeline", () => {
         },
       },
     ];
-    const markup = renderToStaticMarkup(
-      <WorkbenchTimeline items={withSender} />,
-    );
+    const markup = renderToStaticMarkup(<WorkbenchTimeline items={withSender} />);
     expect(markup).toContain("chat-sender-tenant-badge");
     expect(markup).toContain("BC");
   });
@@ -157,9 +151,7 @@ describe("WorkbenchTimeline", () => {
         sender: { name: "Researcher", address: "researcher@agents.example" },
       },
     ];
-    const markup = renderToStaticMarkup(
-      <WorkbenchTimeline items={withSender} />,
-    );
+    const markup = renderToStaticMarkup(<WorkbenchTimeline items={withSender} />);
     expect(markup).not.toContain("chat-sender-tenant-badge");
   });
 
@@ -172,9 +164,7 @@ describe("WorkbenchTimeline", () => {
         sender: { name: null, address: "prn_a1b2c3@agents.example" },
       },
     ];
-    const markup = renderToStaticMarkup(
-      <WorkbenchTimeline items={withSender} />,
-    );
+    const markup = renderToStaticMarkup(<WorkbenchTimeline items={withSender} />);
     expect(markup).toContain("Member");
     expect(markup).not.toMatch(RAW_ID_PATTERN);
   });
@@ -188,9 +178,7 @@ describe("WorkbenchTimeline", () => {
         sender: { name: null, address: "ins_unknown1@agents.example" },
       },
     ];
-    const markup = renderToStaticMarkup(
-      <WorkbenchTimeline items={withSender} />,
-    );
+    const markup = renderToStaticMarkup(<WorkbenchTimeline items={withSender} />);
     expect(markup).toContain("Member");
     expect(markup).not.toMatch(RAW_ID_PATTERN);
   });
@@ -207,9 +195,7 @@ describe("WorkbenchTimeline", () => {
     const markup = renderToStaticMarkup(
       <WorkbenchTimeline
         items={withSender}
-        participants={[
-          { address: "ins_cd03d8e3@agents.example", handle: "echo" },
-        ]}
+        participants={[{ address: "ins_cd03d8e3@agents.example", handle: "echo" }]}
       />,
     );
     expect(markup).toContain("@echo");
@@ -248,10 +234,7 @@ describe("WorkbenchTimeline", () => {
       },
     ];
     const markup = renderToStaticMarkup(
-      <WorkbenchTimeline
-        items={withSender}
-        currentUser={{ principalId: "prn_self1" }}
-      />,
+      <WorkbenchTimeline items={withSender} currentUser={{ principalId: "prn_self1" }} />,
     );
     expect(markup).toContain("You");
     expect(markup).toContain('data-own="true"');
@@ -318,9 +301,7 @@ describe("WorkbenchTimeline", () => {
     const markup = renderToStaticMarkup(
       <WorkbenchTimeline items={withFile} onOpenArtifact={() => {}} />,
     );
-    expect(markup).toMatch(
-      /<button[^>]*class="chat-artifact-chip-open"[^>]*disabled/,
-    );
+    expect(markup).toMatch(/<button[^>]*class="chat-artifact-chip-open"[^>]*disabled/);
   });
 
   test("a blobId-backed file part renders its artifact chip clickable when onOpenArtifact is wired", () => {
@@ -343,9 +324,7 @@ describe("WorkbenchTimeline", () => {
       <WorkbenchTimeline items={withFile} onOpenArtifact={() => {}} />,
     );
     expect(markup).toContain("matrix.csv");
-    expect(markup).not.toMatch(
-      /<button[^>]*class="chat-artifact-chip-open"[^>]*disabled/,
-    );
+    expect(markup).not.toMatch(/<button[^>]*class="chat-artifact-chip-open"[^>]*disabled/);
   });
 
   test("a blobId-backed file part stays inert with no onOpenArtifact wired", () => {
@@ -365,9 +344,7 @@ describe("WorkbenchTimeline", () => {
       },
     ];
     const markup = renderToStaticMarkup(<WorkbenchTimeline items={withFile} />);
-    expect(markup).toMatch(
-      /<button[^>]*class="chat-artifact-chip-open"[^>]*disabled/,
-    );
+    expect(markup).toMatch(/<button[^>]*class="chat-artifact-chip-open"[^>]*disabled/);
   });
 
   test("renders the signed-in user's own bubble right-aligned, others left-aligned", () => {
@@ -386,10 +363,7 @@ describe("WorkbenchTimeline", () => {
       },
     ];
     const markup = renderToStaticMarkup(
-      <WorkbenchTimeline
-        items={bothSenders}
-        currentUser={{ principalId: "prn_self1" }}
-      />,
+      <WorkbenchTimeline items={bothSenders} currentUser={{ principalId: "prn_self1" }} />,
     );
     expect(markup).toContain('data-own="true"');
     expect(markup).toContain('data-own="false"');
@@ -410,9 +384,7 @@ describe("WorkbenchTimeline", () => {
         sender: { name: null, address: "prn_fixture1@agents.example" },
       },
     ];
-    const markup = renderToStaticMarkup(
-      <WorkbenchTimeline items={acrossDays} />,
-    );
+    const markup = renderToStaticMarkup(<WorkbenchTimeline items={acrossDays} />);
     expect(markup).toContain("chat-day-divider");
   });
 
@@ -438,9 +410,7 @@ describe("WorkbenchTimeline", () => {
     const markup = renderToStaticMarkup(
       <WorkbenchTimeline
         items={joinItems}
-        participants={[
-          { address: "ins_newagent1@agents.example", handle: "echo" },
-        ]}
+        participants={[{ address: "ins_newagent1@agents.example", handle: "echo" }]}
       />,
     );
     expect(markup).toContain("Echo joined");
@@ -490,20 +460,14 @@ describe("WorkbenchTimeline", () => {
 
   test("offers Fix this connection on a classified failure reply when a handler is wired", () => {
     const markup = renderToStaticMarkup(
-      <WorkbenchTimeline
-        items={classifiedFailureItems}
-        onFixConnection={() => {}}
-      />,
+      <WorkbenchTimeline items={classifiedFailureItems} onFixConnection={() => {}} />,
     );
     expect(markup).toContain("Fix this connection");
   });
 
   test("never renders HTTP status or the raw provider message on a classified failure reply", () => {
     const markup = renderToStaticMarkup(
-      <WorkbenchTimeline
-        items={classifiedFailureItems}
-        onFixConnection={() => {}}
-      />,
+      <WorkbenchTimeline items={classifiedFailureItems} onFixConnection={() => {}} />,
     );
     expect(markup).not.toMatch(/\[HTTP/);
     expect(markup).not.toContain("401");
@@ -517,23 +481,16 @@ describe("WorkbenchTimeline", () => {
 
   test("renders Fix this connection as a react-ui outline button, not a bare link", () => {
     const markup = renderToStaticMarkup(
-      <WorkbenchTimeline
-        items={classifiedFailureItems}
-        onFixConnection={() => {}}
-      />,
+      <WorkbenchTimeline items={classifiedFailureItems} onFixConnection={() => {}} />,
     );
-    const fixConnectionButton = markup.match(
-      /<button[^>]*chat-bubble-fix-connection[^>]*>/,
-    )?.[0];
+    const fixConnectionButton = markup.match(/<button[^>]*chat-bubble-fix-connection[^>]*>/)?.[0];
     expect(fixConnectionButton).toBeDefined();
     expect(fixConnectionButton).toContain('data-slot="button"');
     expect(fixConnectionButton).toMatch(/\bborder\b/);
   });
 
   test("offers nothing when no onFixConnection handler is wired, even on a classified reply", () => {
-    const markup = renderToStaticMarkup(
-      <WorkbenchTimeline items={classifiedFailureItems} />,
-    );
+    const markup = renderToStaticMarkup(<WorkbenchTimeline items={classifiedFailureItems} />);
     expect(markup).not.toContain("Fix this connection");
   });
 
@@ -548,11 +505,7 @@ describe("WorkbenchTimeline", () => {
 describe("Composer", () => {
   test("disables send while the draft is empty", () => {
     const markup = renderToStaticMarkup(
-      <Composer
-        agents={[]}
-        onSend={() => Promise.resolve(true)}
-        {...composerSlashHandlers}
-      />,
+      <Composer agents={[]} onSend={() => Promise.resolve(true)} {...composerSlashHandlers} />,
     );
     expect(markup).toMatch(/<button[^>]*disabled[^>]*>/);
   });
@@ -576,11 +529,7 @@ describe("Composer", () => {
 
   test("exposes an attach control, file input, and polite preparing live region", () => {
     const markup = renderToStaticMarkup(
-      <Composer
-        agents={[]}
-        onSend={() => Promise.resolve(true)}
-        {...composerSlashHandlers}
-      />,
+      <Composer agents={[]} onSend={() => Promise.resolve(true)} {...composerSlashHandlers} />,
     );
     expect(markup).toContain('aria-label="Attach files"');
     expect(markup).toContain('type="file"');
@@ -658,19 +607,11 @@ describe("no raw identifiers on screen", () => {
 
 describe("rowMenuLabels", () => {
   test("offers Unpin for a pinned workbench", () => {
-    expect(rowMenuLabels({ pinned: true })).toEqual([
-      "Rename",
-      "Unpin",
-      "Settings",
-    ]);
+    expect(rowMenuLabels({ pinned: true })).toEqual(["Rename", "Unpin", "Settings"]);
   });
 
   test("offers Pin for an unpinned workbench", () => {
-    expect(rowMenuLabels({ pinned: false })).toEqual([
-      "Rename",
-      "Pin",
-      "Settings",
-    ]);
+    expect(rowMenuLabels({ pinned: false })).toEqual(["Rename", "Pin", "Settings"]);
   });
 });
 
@@ -801,21 +742,11 @@ describe("nextTypingState", () => {
 
 describe("isTypingStateExpired", () => {
   test("is false before the expiry", () => {
-    expect(
-      isTypingStateExpired(
-        { principalId: "prn_other1", expiresAt: 5000 },
-        4000,
-      ),
-    ).toBe(false);
+    expect(isTypingStateExpired({ principalId: "prn_other1", expiresAt: 5000 }, 4000)).toBe(false);
   });
 
   test("is true once past the expiry", () => {
-    expect(
-      isTypingStateExpired(
-        { principalId: "prn_other1", expiresAt: 5000 },
-        5000,
-      ),
-    ).toBe(true);
+    expect(isTypingStateExpired({ principalId: "prn_other1", expiresAt: 5000 }, 5000)).toBe(true);
   });
 
   test("is false with no active state", () => {
diff --git a/packages/chat-ui/test/composer-synchronous-double-send.test.tsx b/packages/chat-ui/test/composer-synchronous-double-send.test.tsx
index 49873bef0f..dc67f3163a 100644
--- a/packages/chat-ui/test/composer-synchronous-double-send.test.tsx
+++ b/packages/chat-ui/test/composer-synchronous-double-send.test.tsx
@@ -27,8 +27,7 @@ afterEach(() => {
   }
 });
 
-const settle = () =>
-  act(() => new Promise((resolve) => setTimeout(resolve, 0)));
+const settle = () => act(() => new Promise((resolve) => setTimeout(resolve, 0)));
 
 function mount(onSend: (payload: ComposerSendPayload) => Promise<boolean>) {
   container = document.createElement("div");
@@ -70,9 +69,7 @@ function typeInto(element: HTMLTextAreaElement, text: string) {
 }
 
 function sendButton(): HTMLButtonElement {
-  const button = container?.querySelector<HTMLButtonElement>(
-    '[aria-label^="Send"]',
-  );
+  const button = container?.querySelector<HTMLButtonElement>('[aria-label^="Send"]');
   if (button === null || button === undefined) {
     throw new Error("send button not found");
   }
diff --git a/packages/chat-ui/test/composer.test.tsx b/packages/chat-ui/test/composer.test.tsx
index 7b2e044b77..8c47994f09 100644
--- a/packages/chat-ui/test/composer.test.tsx
+++ b/packages/chat-ui/test/composer.test.tsx
@@ -23,8 +23,7 @@ afterEach(() => {
   }
 });
 
-const settle = () =>
-  act(() => new Promise((resolve) => setTimeout(resolve, 0)));
+const settle = () => act(() => new Promise((resolve) => setTimeout(resolve, 0)));
 
 function mount(onSend: () => Promise<boolean>) {
   container = document.createElement("div");
@@ -47,9 +46,7 @@ function mount(onSend: () => Promise<boolean>) {
 }
 
 function sendButton(): HTMLButtonElement {
-  const button = container?.querySelector<HTMLButtonElement>(
-    '[aria-label^="Send"]',
-  );
+  const button = container?.querySelector<HTMLButtonElement>('[aria-label^="Send"]');
   if (button === null || button === undefined) {
     throw new Error("send button not found");
   }
@@ -106,9 +103,7 @@ describe("Composer send button", () => {
 test("labels the icon-only attachment action in the composer rail", () => {
   mount(() => Promise.resolve(true));
 
-  expect(
-    container?.querySelector('[aria-label="Attach files"]')?.textContent,
-  ).toBe("");
+  expect(container?.querySelector('[aria-label="Attach files"]')?.textContent).toBe("");
 });
 
 function textarea(): HTMLTextAreaElement {
@@ -130,9 +125,7 @@ function typeInto(element: HTMLTextAreaElement, text: string) {
   });
 }
 
-function mountWithMentions(
-  onSend: (payload: ComposerSendPayload) => Promise<boolean>,
-) {
+function mountWithMentions(onSend: (payload: ComposerSendPayload) => Promise<boolean>) {
   container = document.createElement("div");
   document.body.appendChild(container);
   root = createRoot(container);
@@ -142,13 +135,9 @@ function mountWithMentions(
       createElement(Composer, {
         ref,
         agents: [],
-        participants: [
-          { address: "researcher@agents.example", handle: "researcher" },
-        ],
+        participants: [{ address: "researcher@agents.example", handle: "researcher" }],
         members: [{ id: "prn_bob", displayName: "Bob" }],
-        invitableAgents: [
-          { id: "wfd_echo", name: "echo", description: "Echo" },
-        ],
+        invitableAgents: [{ id: "wfd_echo", name: "echo", description: "Echo" }],
         onSend,
         onInviteAgent: () => undefined,
         onOpenAgentsSettings: () => undefined,
@@ -165,9 +154,7 @@ describe("Composer mention popover — Agents and People (CL-5879)", () => {
     typeInto(textarea(), "@");
     await settle();
 
-    const options = Array.from(
-      container?.querySelectorAll(".chat-mention-option") ?? [],
-    );
+    const options = Array.from(container?.querySelectorAll(".chat-mention-option") ?? []);
     const rows = options.map((option) => ({
       name: option.querySelector(".chat-mention-name")?.textContent,
       handle: option.querySelector(".chat-mention-handle")?.textContent,
@@ -195,18 +182,14 @@ describe("Composer mention popover — Agents and People (CL-5879)", () => {
     await settle();
 
     const options = Array.from(
-      container?.querySelectorAll<HTMLButtonElement>(".chat-mention-option") ??
-        [],
+      container?.querySelectorAll<HTMLButtonElement>(".chat-mention-option") ?? [],
     );
     const bobOption = options.find(
-      (option) =>
-        option.querySelector(".chat-mention-handle")?.textContent === "@bob",
+      (option) => option.querySelector(".chat-mention-handle")?.textContent === "@bob",
     );
     if (bobOption === undefined) throw new Error("bob option not found");
     act(() => {
-      bobOption.dispatchEvent(
-        new MouseEvent("mousedown", { bubbles: true, cancelable: true }),
-      );
+      bobOption.dispatchEvent(new MouseEvent("mousedown", { bubbles: true, cancelable: true }));
     });
     await settle();
 
@@ -218,9 +201,7 @@ describe("Composer mention popover — Agents and People (CL-5879)", () => {
     await settle();
 
     if (sent.payload === null) throw new Error("payload not sent");
-    expect(sent.payload.invite).toEqual([
-      { kind: "person", principalId: "prn_bob", name: "Bob" },
-    ]);
+    expect(sent.payload.invite).toEqual([{ kind: "person", principalId: "prn_bob", name: "Bob" }]);
   });
 
   test("picking an existing-participant candidate marks no invite intent", async () => {
@@ -233,13 +214,10 @@ describe("Composer mention popover — Agents and People (CL-5879)", () => {
     await settle();
 
     const options = Array.from(
-      container?.querySelectorAll<HTMLButtonElement>(".chat-mention-option") ??
-        [],
+      container?.querySelectorAll<HTMLButtonElement>(".chat-mention-option") ?? [],
     );
     const researcherOption = options.find(
-      (option) =>
-        option.querySelector(".chat-mention-handle")?.textContent ===
-        "@researcher",
+      (option) => option.querySelector(".chat-mention-handle")?.textContent === "@researcher",
     );
     if (researcherOption === undefined) {
       throw new Error("researcher option not found");
@@ -277,12 +255,8 @@ describe("Composer keyboard hint", () => {
     expect(keyboardHint()?.getAttribute("data-visible")).toBe("true");
     expect(keyboardHint()?.getAttribute("aria-hidden")).toBe("false");
     expect(keyboardHint()?.textContent).toBe("Enter to send");
-    expect(
-      container?.querySelectorAll(".chat-composer-actions button").length,
-    ).toBe(2);
-    expect(container?.querySelector(".chat-composer-row > textarea")).toBe(
-      textarea(),
-    );
+    expect(container?.querySelectorAll(".chat-composer-actions button").length).toBe(2);
+    expect(container?.querySelector(".chat-composer-row > textarea")).toBe(textarea());
   });
 
   test("hides when the focused draft is cleared", async () => {
@@ -370,9 +344,7 @@ describe("Composer mention bring-in load error (CL-6839)", () => {
 
     const empty = container?.querySelector(".chat-mention-empty");
     expect(empty?.getAttribute("role")).toBe("alert");
-    expect(empty?.textContent).toBe(
-      "Couldn't load people and agents to bring in",
-    );
+    expect(empty?.textContent).toBe("Couldn't load people and agents to bring in");
     expect(container?.textContent).not.toContain("No matches");
   });
 
@@ -384,9 +356,7 @@ describe("Composer mention bring-in load error (CL-6839)", () => {
       root?.render(
         createElement(Composer, {
           agents: [],
-          participants: [
-            { address: "researcher@agents.example", handle: "researcher" },
-          ],
+          participants: [{ address: "researcher@agents.example", handle: "researcher" }],
           members: [],
           invitableAgents: [],
           bringInLoadError: "Couldn't load agents to bring in",
@@ -402,9 +372,9 @@ describe("Composer mention bring-in load error (CL-6839)", () => {
 
     const alert = container?.querySelector('.chat-mention-empty[role="alert"]');
     expect(alert?.textContent).toBe("Couldn't load agents to bring in");
-    const handles = Array.from(
-      container?.querySelectorAll(".chat-mention-handle") ?? [],
-    ).map((node) => node.textContent);
+    const handles = Array.from(container?.querySelectorAll(".chat-mention-handle") ?? []).map(
+      (node) => node.textContent,
+    );
     expect(handles).toEqual(["@researcher"]);
   });
 });
@@ -511,9 +481,7 @@ describe("ComposerHandle.setText", () => {
         createElement(Composer, {
           ref,
           agents: [],
-          participants: [
-            { address: "researcher@agents.example", handle: "researcher" },
-          ],
+          participants: [{ address: "researcher@agents.example", handle: "researcher" }],
           onSend: (payload) => {
             sent.push(payload);
             return Promise.resolve(true);
@@ -560,13 +528,9 @@ describe("ComposerHandle.setText", () => {
         createElement(Composer, {
           ref,
           agents: [],
-          participants: [
-            { address: "researcher@agents.example", handle: "researcher" },
-          ],
+          participants: [{ address: "researcher@agents.example", handle: "researcher" }],
           members: [{ id: "prn_bob", displayName: "Bob" }],
-          invitableAgents: [
-            { id: "wfd_echo", name: "echo", description: "Echo" },
-          ],
+          invitableAgents: [{ id: "wfd_echo", name: "echo", description: "Echo" }],
           onSend: (payload) => {
             sent.payload = payload;
             return Promise.resolve(true);
@@ -581,18 +545,14 @@ describe("ComposerHandle.setText", () => {
     typeInto(textarea(), "@bo");
     await settle();
     const options = Array.from(
-      container?.querySelectorAll<HTMLButtonElement>(".chat-mention-option") ??
-        [],
+      container?.querySelectorAll<HTMLButtonElement>(".chat-mention-option") ?? [],
     );
     const bobOption = options.find(
-      (option) =>
-        option.querySelector(".chat-mention-handle")?.textContent === "@bob",
+      (option) => option.querySelector(".chat-mention-handle")?.textContent === "@bob",
     );
     if (bobOption === undefined) throw new Error("bob option not found");
     act(() => {
-      bobOption.dispatchEvent(
-        new MouseEvent("mousedown", { bubbles: true, cancelable: true }),
-      );
+      bobOption.dispatchEvent(new MouseEvent("mousedown", { bubbles: true, cancelable: true }));
     });
     await settle();
     expect(textarea().value).toBe("@bob ");
@@ -637,9 +597,7 @@ describe("ComposerHandle.setText", () => {
       );
     });
 
-    const fileInput = container.querySelector<HTMLInputElement>(
-      ".chat-composer-file-input",
-    );
+    const fileInput = container.querySelector<HTMLInputElement>(".chat-composer-file-input");
     if (fileInput === null) throw new Error("file input not found");
 
     const file = new File(["hello"], "notes.txt", { type: "text/plain" });
@@ -659,9 +617,7 @@ describe("ComposerHandle.setText", () => {
     });
     await settle();
     await settle();
-    expect(
-      container.querySelector(".chat-composer-attachments"),
-    ).not.toBeNull();
+    expect(container.querySelector(".chat-composer-attachments")).not.toBeNull();
 
     await act(async () => {
       ref.current?.setText("copied prompt");
@@ -689,9 +645,7 @@ describe("ComposerHandle.setText", () => {
 // with a permanently disabled button and no way to retry for the rest
 // of that turn's life (Critique finding, CL-7201).
 function stopButton(): HTMLButtonElement {
-  const button = container?.querySelector<HTMLButtonElement>(
-    '[aria-label="Stop"]',
-  );
+  const button = container?.querySelector<HTMLButtonElement>('[aria-label="Stop"]');
   if (button === null || button === undefined) {
     throw new Error("stop button not found");
   }
@@ -701,8 +655,7 @@ function stopButton(): HTMLButtonElement {
 function mountStoppable(
   running: boolean,
   onStop: () => void | Promise<unknown>,
-  onSend: (payload: ComposerSendPayload) => Promise<boolean> = () =>
-    Promise.resolve(true),
+  onSend: (payload: ComposerSendPayload) => Promise<boolean> = () => Promise.resolve(true),
 ) {
   container = document.createElement("div");
   document.body.appendChild(container);
@@ -747,9 +700,7 @@ describe("Composer stop affordance (CL-7201)", () => {
     const actions = container?.querySelector(".chat-composer-actions");
     const submitActions = stopButton().parentElement;
     expect(actions?.children).toHaveLength(3);
-    expect(
-      submitActions?.classList.contains("chat-composer-submit-actions"),
-    ).toBe(true);
+    expect(submitActions?.classList.contains("chat-composer-submit-actions")).toBe(true);
     expect(submitActions?.children).toHaveLength(2);
     expect(submitActions?.lastElementChild).toBe(sendButton());
     expect(actions?.lastElementChild).toBe(submitActions);
@@ -862,8 +813,7 @@ describe("Composer dictate", () => {
     onerror: ((event: unknown) => void) | null = null;
     onend: (() => void) | null = null;
     started = false;
-    resultOnStop: readonly { isFinal: boolean; transcript: string }[] | null =
-      null;
+    resultOnStop: readonly { isFinal: boolean; transcript: string }[] | null = null;
 
     constructor() {
       recognitions.push(this);
@@ -928,9 +878,7 @@ describe("Composer dictate", () => {
     textarea().setSelectionRange(5, 5);
     await settle();
 
-    const dictate = container?.querySelector<HTMLButtonElement>(
-      '[aria-label="Dictate"]',
-    );
+    const dictate = container?.querySelector<HTMLButtonElement>('[aria-label="Dictate"]');
     if (dictate === null || dictate === undefined) {
       throw new Error("dictate button not found");
     }
@@ -960,9 +908,7 @@ describe("Composer dictate", () => {
     await settle();
 
     expect(recognitions.at(-1)?.started).toBe(false);
-    const idle = container?.querySelector<HTMLButtonElement>(
-      '[aria-label="Dictate"]',
-    );
+    const idle = container?.querySelector<HTMLButtonElement>('[aria-label="Dictate"]');
     expect(idle?.getAttribute("aria-pressed")).toBe("false");
     expect(idle?.getAttribute("data-listening")).toBe("false");
   });
@@ -974,9 +920,7 @@ describe("Composer dictate", () => {
     textarea().setSelectionRange(5, 5);
     await settle();
 
-    const dictate = container?.querySelector<HTMLButtonElement>(
-      '[aria-label="Dictate"]',
-    );
+    const dictate = container?.querySelector<HTMLButtonElement>('[aria-label="Dictate"]');
     if (dictate === null || dictate === undefined) {
       throw new Error("dictate button not found");
     }
@@ -1025,9 +969,7 @@ describe("Composer dictate", () => {
     textarea().setSelectionRange(5, 5);
     await settle();
 
-    const dictate = container?.querySelector<HTMLButtonElement>(
-      '[aria-label="Dictate"]',
-    );
+    const dictate = container?.querySelector<HTMLButtonElement>('[aria-label="Dictate"]');
     if (dictate === null || dictate === undefined) {
       throw new Error("dictate button not found");
     }
@@ -1081,9 +1023,7 @@ describe("Composer dictate", () => {
     textarea().setSelectionRange(5, 5);
     await settle();
 
-    const dictate = container?.querySelector<HTMLButtonElement>(
-      '[aria-label="Dictate"]',
-    );
+    const dictate = container?.querySelector<HTMLButtonElement>('[aria-label="Dictate"]');
     if (dictate === null || dictate === undefined) {
       throw new Error("dictate button not found");
     }
@@ -1143,9 +1083,7 @@ describe("Composer dictate", () => {
     textarea().setSelectionRange(5, 5);
     await settle();
 
-    const dictate = container?.querySelector<HTMLButtonElement>(
-      '[aria-label="Dictate"]',
-    );
+    const dictate = container?.querySelector<HTMLButtonElement>('[aria-label="Dictate"]');
     if (dictate === null || dictate === undefined) {
       throw new Error("dictate button not found");
     }
@@ -1186,9 +1124,7 @@ describe("Composer dictate", () => {
     const report = spyOn(errorSink, "reportError");
     mount(() => Promise.resolve(true));
 
-    const dictate = container?.querySelector<HTMLButtonElement>(
-      '[aria-label="Dictate"]',
-    );
+    const dictate = container?.querySelector<HTMLButtonElement>('[aria-label="Dictate"]');
     if (dictate === null || dictate === undefined) {
       throw new Error("dictate button not found");
     }
diff --git a/packages/chat-ui/test/connect-github-block-container.test.tsx b/packages/chat-ui/test/connect-github-block-container.test.tsx
index 5b2afe0854..909d7afa6b 100644
--- a/packages/chat-ui/test/connect-github-block-container.test.tsx
+++ b/packages/chat-ui/test/connect-github-block-container.test.tsx
@@ -41,11 +41,7 @@ async function mount(actions: ConnectGithubActions, messageId = "m1") {
   root = createRoot(container);
   await act(async () => {
     root?.render(
-      <ConnectGithubBlockContainer
-        data={DATA}
-        messageId={messageId}
-        actions={actions}
-      />,
+      <ConnectGithubBlockContainer data={DATA} messageId={messageId} actions={actions} />,
     );
   });
   return container;
@@ -67,8 +63,7 @@ function typeInto(element: HTMLInputElement, text: string) {
  * connected fact, mirroring the real `/github/state` route reading the
  * just-written credential. */
 function buildNeverNotifiesHarness(options?: {
-  readonly submitResult?:
-    { readonly ok: true } | { readonly ok: false; readonly message: string };
+  readonly submitResult?: { readonly ok: true } | { readonly ok: false; readonly message: string };
 }) {
   let connected = false;
   return {
@@ -105,9 +100,7 @@ async function openFieldAndSubmit(el: HTMLElement, token: string) {
   await act(async () => {
     connectButton.click();
   });
-  const tokenField = el.querySelector(
-    "#connect-github-token",
-  ) as HTMLInputElement;
+  const tokenField = el.querySelector("#connect-github-token") as HTMLInputElement;
   await act(async () => {
     typeInto(tokenField, token);
   });
@@ -132,9 +125,7 @@ describe("ConnectGithubBlockContainer post-submit refresh (CL-6463)", () => {
     await openFieldAndSubmit(el, "ghp_test123");
 
     expect(el.textContent).toContain("Connected to GitHub as octocat");
-    expect(el.querySelectorAll(".chat-block-connect-repo-row")).toHaveLength(
-      REPOS.length,
-    );
+    expect(el.querySelectorAll(".chat-block-connect-repo-row")).toHaveLength(REPOS.length);
   });
 
   test("a successful PAT submit moves focus onto the pick-repos heading", async () => {
@@ -147,9 +138,7 @@ describe("ConnectGithubBlockContainer post-submit refresh (CL-6463)", () => {
     await act(async () => {
       connectButton.click();
     });
-    const tokenField = el.querySelector(
-      "#connect-github-token",
-    ) as HTMLInputElement;
+    const tokenField = el.querySelector("#connect-github-token") as HTMLInputElement;
     await act(async () => {
       typeInto(tokenField, "ghp_test123");
     });
@@ -188,9 +177,7 @@ describe("ConnectGithubBlockContainer post-submit refresh (CL-6463)", () => {
     ) as HTMLButtonElement;
     expect(submitButton.disabled).toBe(false);
 
-    const tokenField = el.querySelector(
-      "#connect-github-token",
-    ) as HTMLInputElement;
+    const tokenField = el.querySelector("#connect-github-token") as HTMLInputElement;
     expect(tokenField.disabled).toBe(false);
   });
 });
@@ -234,9 +221,7 @@ describe("ConnectGithubBlockContainer keeps connected across loading (CL-6741)",
     });
     expect(el.textContent).toContain("Connected to GitHub as octocat");
     expect(el.textContent).not.toContain("Connect GitHub");
-    expect(el.querySelectorAll(".chat-block-connect-repo-row")).toHaveLength(
-      REPOS.length,
-    );
+    expect(el.querySelectorAll(".chat-block-connect-repo-row")).toHaveLength(REPOS.length);
 
     // Remount while the host still reports loading — the last connected
     // snapshot must survive so Connect never flashes.
diff --git a/packages/chat-ui/test/connect-github-block.test.tsx b/packages/chat-ui/test/connect-github-block.test.tsx
index 55421954bd..2d3277bce5 100644
--- a/packages/chat-ui/test/connect-github-block.test.tsx
+++ b/packages/chat-ui/test/connect-github-block.test.tsx
@@ -96,8 +96,7 @@ function PickReposHarness({
   readonly initiallySelected: readonly string[];
   readonly onStartReviewing: (repoIds: readonly string[]) => void;
 }) {
-  const [selected, setSelected] =
-    useState<readonly string[]>(initiallySelected);
+  const [selected, setSelected] = useState<readonly string[]>(initiallySelected);
   return (
     <ConnectGithubBlockView
       scene={SCENE}
@@ -107,9 +106,7 @@ function PickReposHarness({
       selectedRepoIds={selected}
       onToggleRepo={(repoId) =>
         setSelected((prev) =>
-          prev.includes(repoId)
-            ? prev.filter((id) => id !== repoId)
-            : [...prev, repoId],
+          prev.includes(repoId) ? prev.filter((id) => id !== repoId) : [...prev, repoId],
         )
       }
       onSelectAll={() => setSelected(REPOS.map((repo) => repo.id))}
@@ -172,15 +169,11 @@ describe("connect GitHub card — 2a disconnected", () => {
       (item) => item.textContent,
     );
     expect(steps).toHaveLength(4);
-    expect(steps[0]).toContain(
-      "Open GitHub's fine-grained token page and generate a new token.",
-    );
+    expect(steps[0]).toContain("Open GitHub's fine-grained token page and generate a new token.");
     expect(steps[1]).toContain("Repository access");
     expect(steps[3]).toContain("Paste it here");
     expect(
-      el.querySelector(
-        'a[href="https://github.com/settings/personal-access-tokens/new"]',
-      ),
+      el.querySelector('a[href="https://github.com/settings/personal-access-tokens/new"]'),
     ).not.toBeNull();
 
     const field = el.querySelector("#connect-github-token");
@@ -229,8 +222,7 @@ describe("connect GitHub card — 2a disconnected", () => {
     const el = await mount({
       kind: "disconnected",
       onConnect: () => undefined,
-      onSubmitAccessToken: () =>
-        Promise.resolve({ ok: false, message: "Bad token." }),
+      onSubmitAccessToken: () => Promise.resolve({ ok: false, message: "Bad token." }),
     });
 
     const openLink = [...el.querySelectorAll("button")].find(
@@ -256,9 +248,7 @@ describe("connect GitHub card — 2a disconnected", () => {
 
     expect(el.textContent).toContain("Bad token.");
     expect(el.querySelector("#connect-github-token")).not.toBeNull();
-    expect(
-      el.querySelector(".chat-block-connect-token-error")?.getAttribute("role"),
-    ).toBe("alert");
+    expect(el.querySelector(".chat-block-connect-token-error")?.getAttribute("role")).toBe("alert");
     expect(field.getAttribute("aria-invalid")).toBe("true");
   });
 });
@@ -305,9 +295,7 @@ describe("connect GitHub card — 2b pick your repos", () => {
       onSkip: () => undefined,
     });
 
-    const mobileCheckbox = [
-      ...el.querySelectorAll<HTMLInputElement>('input[type="checkbox"]'),
-    ][3];
+    const mobileCheckbox = [...el.querySelectorAll<HTMLInputElement>('input[type="checkbox"]')][3];
     expect(mobileCheckbox).not.toBeUndefined();
 
     await act(async () => {
@@ -333,9 +321,7 @@ describe("connect GitHub card — 2b pick your repos", () => {
     ) as HTMLButtonElement;
     expect(start.textContent).toBe("Start reviewing 3 repos");
 
-    const mobileCheckbox = [
-      ...el.querySelectorAll<HTMLInputElement>('input[type="checkbox"]'),
-    ][3];
+    const mobileCheckbox = [...el.querySelectorAll<HTMLInputElement>('input[type="checkbox"]')][3];
     await act(async () => {
       mobileCheckbox?.click();
     });
@@ -354,10 +340,7 @@ describe("connect GitHub card — 2b pick your repos", () => {
 
   test("Select all picks every repo and the primary label pluralizes to a single repo correctly", async () => {
     const el = await mountElement(
-      <PickReposHarness
-        initiallySelected={[]}
-        onStartReviewing={() => undefined}
-      />,
+      <PickReposHarness initiallySelected={[]} onStartReviewing={() => undefined} />,
     );
 
     expect(el.textContent).toContain("6 repos your token can reach · 0 picked");
@@ -426,9 +409,7 @@ describe("connect GitHub card — accessibility", () => {
       onSkip: () => undefined,
     });
 
-    const checkboxes = el.querySelectorAll<HTMLInputElement>(
-      'input[type="checkbox"]',
-    );
+    const checkboxes = el.querySelectorAll<HTMLInputElement>('input[type="checkbox"]');
     expect(checkboxes).toHaveLength(6);
     for (const checkbox of checkboxes) {
       expect(checkbox.id.length).toBeGreaterThan(0);
@@ -438,12 +419,10 @@ describe("connect GitHub card — accessibility", () => {
     }
 
     const group = el.querySelector('[role="group"]');
-    expect(
-      el.querySelector(".chat-block-scene-pick-heading")?.textContent,
-    ).toBe("Choose what gets reviewed");
-    expect(group?.getAttribute("aria-labelledby")).toBe(
-      "connect-github-pick-heading",
+    expect(el.querySelector(".chat-block-scene-pick-heading")?.textContent).toBe(
+      "Choose what gets reviewed",
     );
+    expect(group?.getAttribute("aria-labelledby")).toBe("connect-github-pick-heading");
 
     const firstCheckbox = checkboxes[0];
     if (firstCheckbox === undefined) {
@@ -477,8 +456,7 @@ describe("connect GitHub card — accessibility", () => {
     expect(status?.textContent).toBe("Connect GitHub");
     expect(body?.contains(status)).toBe(false);
     expect(
-      el.querySelector("#connect-github-token") ??
-        el.querySelector('input[type="password"]'),
+      el.querySelector("#connect-github-token") ?? el.querySelector('input[type="password"]'),
     ).toBeNull();
   });
 
@@ -486,8 +464,7 @@ describe("connect GitHub card — accessibility", () => {
     const el = await mount({
       kind: "disconnected",
       onConnect: () => undefined,
-      onSubmitAccessToken: () =>
-        Promise.resolve({ ok: false, message: "Bad token." }),
+      onSubmitAccessToken: () => Promise.resolve({ ok: false, message: "Bad token." }),
     });
 
     const openLink = [...el.querySelectorAll("button")].find(
@@ -516,9 +493,7 @@ describe("connect GitHub card — accessibility", () => {
     expect(alert?.textContent).toContain("Bad token.");
     expect(status?.contains(alert)).toBe(false);
     expect(status?.textContent).toBe("Connect GitHub");
-    expect(el.querySelector(".chat-block-scene-body")?.contains(field)).toBe(
-      true,
-    );
+    expect(el.querySelector(".chat-block-scene-body")?.contains(field)).toBe(true);
   });
 
   test("a start-reviewing error is an alert beside the status live region, not nested inside it", async () => {
@@ -552,17 +527,12 @@ describe("connect GitHub card — accessibility", () => {
 
   test("toggling a repo checkbox does not change the status live region", async () => {
     const el = await mountElement(
-      <PickReposHarness
-        initiallySelected={["checkout"]}
-        onStartReviewing={() => undefined}
-      />,
+      <PickReposHarness initiallySelected={["checkout"]} onStartReviewing={() => undefined} />,
     );
     const status = el.querySelector(".chat-block-scene-status");
     expect(status?.textContent).toBe("Connect GitHub");
 
-    const mobileCheckbox = [
-      ...el.querySelectorAll<HTMLInputElement>('input[type="checkbox"]'),
-    ][3];
+    const mobileCheckbox = [...el.querySelectorAll<HTMLInputElement>('input[type="checkbox"]')][3];
     await act(async () => {
       mobileCheckbox?.click();
     });
diff --git a/packages/chat-ui/test/connect-github-flow.test.tsx b/packages/chat-ui/test/connect-github-flow.test.tsx
index 321a6845e5..12eb8dac6a 100644
--- a/packages/chat-ui/test/connect-github-flow.test.tsx
+++ b/packages/chat-ui/test/connect-github-flow.test.tsx
@@ -180,10 +180,7 @@ async function mount(actions: ConnectGithubActions) {
   root = createRoot(container);
   await act(async () => {
     root?.render(
-      <WorkbenchTimeline
-        items={messageWithConnectGithubBlock()}
-        connectGithubActions={actions}
-      />,
+      <WorkbenchTimeline items={messageWithConnectGithubBlock()} connectGithubActions={actions} />,
     );
   });
   return container;
@@ -208,9 +205,7 @@ describe("connect-github round trip (CL-6345)", () => {
       connectButton.click();
     });
 
-    const tokenField = el.querySelector(
-      "#connect-github-token",
-    ) as HTMLInputElement;
+    const tokenField = el.querySelector("#connect-github-token") as HTMLInputElement;
     await act(async () => {
       typeInto(tokenField, "ghp_test123");
     });
@@ -225,13 +220,9 @@ describe("connect-github round trip (CL-6345)", () => {
     });
 
     expect(el.textContent).toContain("Connected to GitHub as octocat");
-    expect(el.querySelectorAll(".chat-block-connect-repo-row")).toHaveLength(
-      REPOS.length,
-    );
+    expect(el.querySelectorAll(".chat-block-connect-repo-row")).toHaveLength(REPOS.length);
 
-    const checkboxes = [
-      ...el.querySelectorAll<HTMLInputElement>('input[type="checkbox"]'),
-    ];
+    const checkboxes = [...el.querySelectorAll<HTMLInputElement>('input[type="checkbox"]')];
     await act(async () => {
       checkboxes[0]?.click();
       checkboxes[1]?.click();
@@ -239,8 +230,7 @@ describe("connect-github round trip (CL-6345)", () => {
     });
     expect(el.textContent).toContain("4 repos your token can reach · 3 picked");
 
-    const getConnectStateCallCountBeforeStart =
-      harness.getConnectStateCallCount();
+    const getConnectStateCallCountBeforeStart = harness.getConnectStateCallCount();
 
     const startButton = [...el.querySelectorAll("button")].find((button) =>
       button.textContent?.startsWith("Start reviewing"),
@@ -250,23 +240,13 @@ describe("connect-github round trip (CL-6345)", () => {
       startButton.click();
     });
 
-    expect(harness.grantedRepos).toEqual([
-      "acme/checkout",
-      "acme/billing-api",
-      "acme/web",
-    ]);
-    expect(harness.createdTriggerRepos).toEqual([
-      "acme/checkout",
-      "acme/billing-api",
-      "acme/web",
-    ]);
+    expect(harness.grantedRepos).toEqual(["acme/checkout", "acme/billing-api", "acme/web"]);
+    expect(harness.createdTriggerRepos).toEqual(["acme/checkout", "acme/billing-api", "acme/web"]);
     expect(harness.persistedRepoIds()).toEqual(["1", "2", "3"]);
 
     // Settled purely from the folded stream event — no extra
     // `getConnectState` fetch beyond the initial mount + connect reads.
-    expect(harness.getConnectStateCallCount()).toBe(
-      getConnectStateCallCountBeforeStart,
-    );
+    expect(harness.getConnectStateCallCount()).toBe(getConnectStateCallCountBeforeStart);
     // Reviewing, not "pick your repos" again and never "Connect": the
     // server recorded the selection, so the same card now names what is
     // under review.
diff --git a/packages/chat-ui/test/connect-service-block.test.tsx b/packages/chat-ui/test/connect-service-block.test.tsx
index 0503de2297..b26ed6405a 100644
--- a/packages/chat-ui/test/connect-service-block.test.tsx
+++ b/packages/chat-ui/test/connect-service-block.test.tsx
@@ -138,8 +138,7 @@ describe("ConnectServiceBlockView key-paste arm", () => {
       reason: "Connect Linear so I can file this for you.",
       affordance: "api-key",
       onConnect: () => undefined,
-      onSubmitKey: () =>
-        Promise.resolve({ ok: false, message: "That key was rejected." }),
+      onSubmitKey: () => Promise.resolve({ ok: false, message: "That key was rejected." }),
     });
     await act(async () => {
       buttonByText(host, "Connect Linear").click();
diff --git a/packages/chat-ui/test/connect-service-flow.test.tsx b/packages/chat-ui/test/connect-service-flow.test.tsx
index c5da7d126c..b7bfe44b53 100644
--- a/packages/chat-ui/test/connect-service-flow.test.tsx
+++ b/packages/chat-ui/test/connect-service-flow.test.tsx
@@ -99,9 +99,7 @@ describe("ConnectServiceBlockContainer", () => {
   });
 
   test("renders the disconnected framing with no port at all", async () => {
-    const host = await mountElement(
-      <ConnectServiceBlockContainer data={DATA} />,
-    );
+    const host = await mountElement(<ConnectServiceBlockContainer data={DATA} />);
     expect(host.textContent).toContain("Connect Gmail");
   });
 });
diff --git a/packages/chat-ui/test/failed-turn-strip.test.tsx b/packages/chat-ui/test/failed-turn-strip.test.tsx
index 694efa907f..12a8484c31 100644
--- a/packages/chat-ui/test/failed-turn-strip.test.tsx
+++ b/packages/chat-ui/test/failed-turn-strip.test.tsx
@@ -64,9 +64,7 @@ describe("the failed-turn notice renders through PrFailedTurnStrip", () => {
       root?.render(
         <WorkbenchTimeline
           items={failedTurnItem()}
-          participants={[
-            { address: "ins_echo1@agents.example", handle: "echo" },
-          ]}
+          participants={[{ address: "ins_echo1@agents.example", handle: "echo" }]}
         />,
       );
     });
@@ -82,11 +80,9 @@ describe("the failed-turn notice renders through PrFailedTurnStrip", () => {
 
     // The notice never renders as an ordinary bubble alongside the strip.
     const bubbles = container.querySelectorAll(".chat-bubble");
-    expect(
-      [...bubbles].some((bubble) =>
-        bubble.textContent?.includes("send it again"),
-      ),
-    ).toBe(false);
+    expect([...bubbles].some((bubble) => bubble.textContent?.includes("send it again"))).toBe(
+      false,
+    );
   });
 
   test("Retry and what-happened invoke the host's own actions with the failed item", async () => {
@@ -99,9 +95,7 @@ describe("the failed-turn notice renders through PrFailedTurnStrip", () => {
       root?.render(
         <WorkbenchTimeline
           items={failedTurnItem()}
-          participants={[
-            { address: "ins_echo1@agents.example", handle: "echo" },
-          ]}
+          participants={[{ address: "ins_echo1@agents.example", handle: "echo" }]}
           onRetryFailedTurn={(item) => {
             retried.push(item.id);
           }}
@@ -174,9 +168,7 @@ describe("the failed-turn notice renders through PrFailedTurnStrip", () => {
       root?.render(
         <WorkbenchTimeline
           items={items}
-          participants={[
-            { address: "ins_echo1@agents.example", handle: "echo" },
-          ]}
+          participants={[{ address: "ins_echo1@agents.example", handle: "echo" }]}
         />,
       );
     });
@@ -192,9 +184,7 @@ describe("the failed-turn notice renders through PrFailedTurnStrip", () => {
       "I can't reach a model right now — add or check your model key in Settings, then I'll pick this up.",
     );
     // Never the fixed guess this strip used to always show, regardless of cause.
-    expect(detail?.textContent).not.toBe(
-      "No reply arrived — the agent may be unavailable.",
-    );
+    expect(detail?.textContent).not.toBe("No reply arrived — the agent may be unavailable.");
   });
 
   test("the expanded detail never shows HTTP status or a raw provider dump", async () => {
@@ -225,9 +215,7 @@ describe("the failed-turn notice renders through PrFailedTurnStrip", () => {
       root?.render(
         <WorkbenchTimeline
           items={items}
-          participants={[
-            { address: "ins_echo1@agents.example", handle: "echo" },
-          ]}
+          participants={[{ address: "ins_echo1@agents.example", handle: "echo" }]}
         />,
       );
     });
@@ -257,9 +245,7 @@ describe("the failed-turn notice renders through PrFailedTurnStrip", () => {
       root?.render(
         <WorkbenchTimeline
           items={failedTurnItem()}
-          participants={[
-            { address: "ins_echo1@agents.example", handle: "echo" },
-          ]}
+          participants={[{ address: "ins_echo1@agents.example", handle: "echo" }]}
           onRetryFailedTurn={(_item, retryText) => {
             retried.push(retryText);
           }}
@@ -268,9 +254,7 @@ describe("the failed-turn notice renders through PrFailedTurnStrip", () => {
     });
 
     act(() => {
-      (
-        container?.querySelector(".chat-turn-failed-retry") as HTMLButtonElement
-      ).click();
+      (container?.querySelector(".chat-turn-failed-retry") as HTMLButtonElement).click();
     });
 
     // The strip hands the recovered text straight to the host's resend
@@ -289,9 +273,7 @@ describe("the failed-turn notice renders through PrFailedTurnStrip", () => {
       root?.render(
         <WorkbenchTimeline
           items={failedTurnItem()}
-          participants={[
-            { address: "ins_echo1@agents.example", handle: "echo" },
-          ]}
+          participants={[{ address: "ins_echo1@agents.example", handle: "echo" }]}
           onRetryFailedTurn={(_item, retryText) => {
             calls.push(retryText);
             return new Promise<void>((resolve) => {
@@ -356,9 +338,7 @@ describe("the failed-turn notice renders through PrFailedTurnStrip", () => {
               sender: { name: "Jimmy", address: "ins_echo1@agents.example" },
             },
           ]}
-          participants={[
-            { address: "ins_echo1@agents.example", handle: "echo" },
-          ]}
+          participants={[{ address: "ins_echo1@agents.example", handle: "echo" }]}
           failedTurnRecovery={{
             models: [
               { canonicalName: "anthropic/claude-sonnet", label: "Sonnet" },
@@ -389,9 +369,7 @@ describe("the failed-turn notice renders through PrFailedTurnStrip", () => {
     expect(strip?.textContent).not.toContain("wfd_echo");
     expect(container.querySelector(".chat-turn-failed-retry")).toBeNull();
 
-    const select = container.querySelector(
-      ".chat-turn-failed-models",
-    ) as HTMLSelectElement;
+    const select = container.querySelector(".chat-turn-failed-models") as HTMLSelectElement;
     expect(select).not.toBeNull();
     expect([...select.options].map((option) => option.textContent)).toEqual([
       "Pick a model",
@@ -408,11 +386,7 @@ describe("the failed-turn notice renders through PrFailedTurnStrip", () => {
     expect(retried).toEqual(["hi @echo"]);
 
     act(() => {
-      (
-        container?.querySelector(
-          ".chat-turn-failed-settings",
-        ) as HTMLButtonElement
-      ).click();
+      (container?.querySelector(".chat-turn-failed-settings") as HTMLButtonElement).click();
     });
     expect(opened).toEqual(["wfd_echo"]);
   });
@@ -448,9 +422,7 @@ describe("the failed-turn notice renders through PrFailedTurnStrip", () => {
               sender: { name: "Jimmy", address: "ins_echo1@agents.example" },
             },
           ]}
-          participants={[
-            { address: "ins_echo1@agents.example", handle: "echo" },
-          ]}
+          participants={[{ address: "ins_echo1@agents.example", handle: "echo" }]}
           failedTurnRecovery={{
             models: [
               { canonicalName: "openai/gpt-4.1", label: "GPT-4.1" },
@@ -486,18 +458,14 @@ describe("the failed-turn notice renders through PrFailedTurnStrip", () => {
     expect(strip?.textContent).not.toContain("wfd_echo");
     expect(container.querySelector(".chat-turn-failed-retry")).toBeNull();
 
-    const select = container.querySelector(
-      ".chat-turn-failed-models",
-    ) as HTMLSelectElement;
+    const select = container.querySelector(".chat-turn-failed-models") as HTMLSelectElement;
     expect(select).not.toBeNull();
     expect([...select.options].map((option) => option.textContent)).toEqual([
       "Pick a model",
       "Sonnet",
       "GPT-4.1",
     ]);
-    expect(
-      [...select.options].map((option) => option.textContent),
-    ).not.toContain("Flash");
+    expect([...select.options].map((option) => option.textContent)).not.toContain("Flash");
 
     await act(async () => {
       select.value = "anthropic/claude-sonnet";
@@ -506,9 +474,7 @@ describe("the failed-turn notice renders through PrFailedTurnStrip", () => {
     expect(applied).toEqual(["anthropic/claude-sonnet"]);
     expect(retried).toEqual(["hi @echo"]);
 
-    const settings = container.querySelector(
-      ".chat-turn-failed-settings",
-    ) as HTMLButtonElement;
+    const settings = container.querySelector(".chat-turn-failed-settings") as HTMLButtonElement;
     expect(settings.textContent).toBe("More in Settings");
     act(() => {
       settings.click();
diff --git a/packages/chat-ui/test/fake-clock.ts b/packages/chat-ui/test/fake-clock.ts
index 69c99714cd..d79cef101e 100644
--- a/packages/chat-ui/test/fake-clock.ts
+++ b/packages/chat-ui/test/fake-clock.ts
@@ -34,10 +34,7 @@ export function createFakeClock(): FakeClock {
       let dueId: number | null = null;
       let dueEntry: { fireAt: number; callback: () => void } | null = null;
       for (const [id, entry] of timers) {
-        if (
-          entry.fireAt <= target &&
-          (dueEntry === null || entry.fireAt < dueEntry.fireAt)
-        ) {
+        if (entry.fireAt <= target && (dueEntry === null || entry.fireAt < dueEntry.fireAt)) {
           dueId = id;
           dueEntry = entry;
         }
diff --git a/packages/chat-ui/test/form-block.test.tsx b/packages/chat-ui/test/form-block.test.tsx
index a3d3eddefe..4d472ff846 100644
--- a/packages/chat-ui/test/form-block.test.tsx
+++ b/packages/chat-ui/test/form-block.test.tsx
@@ -9,10 +9,7 @@ import { act } from "react";
 import { createRoot } from "react-dom/client";
 import type { Root } from "react-dom/client";
 
-import type {
-  BlockResponseActions,
-  BlockResponseQuery,
-} from "../src/blocks/block-responses";
+import type { BlockResponseActions, BlockResponseQuery } from "../src/blocks/block-responses";
 import type { MessageItem } from "../src/api";
 import { WorkbenchTimeline } from "../src/timeline";
 
@@ -29,9 +26,7 @@ function messageWithFormBlock(): MessageItem[] {
             data: {
               formId: "blk_form1",
               title: "Release notes",
-              fields: [
-                { id: "name", label: "Name", input: "text", required: true },
-              ],
+              fields: [{ id: "name", label: "Name", input: "text", required: true }],
               submitLabel: "Save",
             },
           },
@@ -78,10 +73,7 @@ function fakeBackend() {
 // workaround, the same one Testing Library's `fireEvent` performs
 // internally.
 function setInputValue(input: HTMLInputElement, value: string): void {
-  const setter = Object.getOwnPropertyDescriptor(
-    window.HTMLInputElement.prototype,
-    "value",
-  )?.set;
+  const setter = Object.getOwnPropertyDescriptor(window.HTMLInputElement.prototype, "value")?.set;
   setter?.call(input, value);
   input.dispatchEvent(new Event("input", { bubbles: true }));
 }
@@ -101,12 +93,7 @@ async function mount(actions: BlockResponseActions) {
   document.body.appendChild(container);
   root = createRoot(container);
   await act(async () => {
-    root?.render(
-      <WorkbenchTimeline
-        items={messageWithFormBlock()}
-        blockResponses={actions}
-      />,
-    );
+    root?.render(<WorkbenchTimeline items={messageWithFormBlock()} blockResponses={actions} />);
   });
   return container;
 }
@@ -148,9 +135,7 @@ describe("form card round-trip", () => {
     const backend = fakeBackend();
     const el = await mount(backend.actions);
 
-    const firstInput = el.querySelector(
-      "input[type='text']",
-    ) as HTMLInputElement;
+    const firstInput = el.querySelector("input[type='text']") as HTMLInputElement;
     await act(async () => {
       setInputValue(firstInput, "v2.0");
     });
@@ -158,18 +143,14 @@ describe("form card round-trip", () => {
       (el.querySelector("form") as HTMLFormElement).requestSubmit();
     });
 
-    const editButton = [
-      ...el.querySelectorAll(".chat-block-actions button"),
-    ].find(
+    const editButton = [...el.querySelectorAll(".chat-block-actions button")].find(
       (button) => button.textContent === "Edit response",
     ) as HTMLButtonElement;
     await act(async () => {
       editButton.click();
     });
 
-    const secondInput = el.querySelector(
-      "input[type='text']",
-    ) as HTMLInputElement;
+    const secondInput = el.querySelector("input[type='text']") as HTMLInputElement;
     expect(secondInput.disabled).toBe(false);
     await act(async () => {
       setInputValue(secondInput, "v2.1");
@@ -191,9 +172,7 @@ describe("form card round-trip", () => {
       root?.render(<WorkbenchTimeline items={messageWithFormBlock()} />);
     });
 
-    const input = container.querySelector(
-      "input[type='text']",
-    ) as HTMLInputElement;
+    const input = container.querySelector("input[type='text']") as HTMLInputElement;
     expect(input.disabled).toBe(true);
     expect(container.querySelector("form")).toBeNull();
   });
diff --git a/packages/chat-ui/test/inference-preamble-drift.test.ts b/packages/chat-ui/test/inference-preamble-drift.test.ts
index bdeccac97d..de9c70bd2b 100644
--- a/packages/chat-ui/test/inference-preamble-drift.test.ts
+++ b/packages/chat-ui/test/inference-preamble-drift.test.ts
@@ -18,10 +18,7 @@ import { CLASSIFIED_INFERENCE_FAILURE_PREAMBLES } from "../src/inference-failure
 
 test("chat-ui's classified-failure preambles match the published director's exact strings", () => {
   const entry = fileURLToPath(import.meta.resolve("@intx/inference"));
-  const director = readFileSync(
-    join(dirname(entry), `default-director${extname(entry)}`),
-    "utf8",
-  );
+  const director = readFileSync(join(dirname(entry), `default-director${extname(entry)}`), "utf8");
   for (const preamble of CLASSIFIED_INFERENCE_FAILURE_PREAMBLES) {
     expect(director).toContain(`"${preamble}"`);
   }
diff --git a/packages/chat-ui/test/invite-agent-dialog.test.tsx b/packages/chat-ui/test/invite-agent-dialog.test.tsx
index 8bc8dd2f5f..d9ca9656f6 100644
--- a/packages/chat-ui/test/invite-agent-dialog.test.tsx
+++ b/packages/chat-ui/test/invite-agent-dialog.test.tsx
@@ -42,8 +42,7 @@ function stubFetch(routes: {
   createJimmy?: () => { id: string };
 }) {
   globalThis.fetch = ((input: RequestInfo | URL, init?: RequestInit) => {
-    const path =
-      typeof input === "string" ? input : new URL(String(input)).pathname;
+    const path = typeof input === "string" ? input : new URL(String(input)).pathname;
     if (path.endsWith("/invitable")) {
       return Promise.resolve(jsonResponse({ items: routes.invitable() }));
     }
@@ -167,9 +166,7 @@ describe("InviteAgentDialog definition rows (CL-6424)", () => {
       onOpenChange: () => undefined,
     });
     const names = Array.from(
-      el.querySelectorAll(
-        '[data-testid="invitable-definition"] .chat-invitable-item-name',
-      ),
+      el.querySelectorAll('[data-testid="invitable-definition"] .chat-invitable-item-name'),
     ).map((name) => name.textContent);
     expect(names).toEqual(["Myra", "Code Review", "Jimmy"]);
   });
diff --git a/packages/chat-ui/test/loading-state.test.tsx b/packages/chat-ui/test/loading-state.test.tsx
index fd544ccc7d..be329a8c8d 100644
--- a/packages/chat-ui/test/loading-state.test.tsx
+++ b/packages/chat-ui/test/loading-state.test.tsx
@@ -49,9 +49,7 @@ describe("WorkbenchLoadingState", () => {
   });
 
   test("accepts a title override for a non-workbench surface", () => {
-    const el = mount(
-      <WorkbenchLoadingState delayMs={0} title="Loading routines…" />,
-    );
+    const el = mount(<WorkbenchLoadingState delayMs={0} title="Loading routines…" />);
 
     expect(el.textContent).toContain("Loading routines…");
   });
diff --git a/packages/chat-ui/test/members-section.test.tsx b/packages/chat-ui/test/members-section.test.tsx
index 691ead13bc..d1df8b17cd 100644
--- a/packages/chat-ui/test/members-section.test.tsx
+++ b/packages/chat-ui/test/members-section.test.tsx
@@ -46,8 +46,7 @@ function stubFetch(options: {
     if (/\/sidecar-placement$/.test(path)) {
       return json({ enabled: false, provisionerAvailable: false });
     }
-    const removeMatch =
-      /\/chat\/workbenches\/[^/]+\/participants\/([^/]+)$/.exec(path);
+    const removeMatch = /\/chat\/workbenches\/[^/]+\/participants\/([^/]+)$/.exec(path);
     if (removeMatch !== null && init?.method === "DELETE") {
       const address = decodeURIComponent(removeMatch[1] as string);
       if (options.gateRemoveOn !== undefined) {
@@ -112,9 +111,7 @@ afterEach(() => {
 const sleep = (ms: number) => new Promise((resolve) => setTimeout(resolve, ms));
 const settle = () => act(() => sleep(10));
 
-function baseProps(
-  overrides: Partial<Parameters<typeof WorkbenchSettingsSurface>[0]> = {},
-) {
+function baseProps(overrides: Partial<Parameters<typeof WorkbenchSettingsSurface>[0]> = {}) {
   return {
     tenantId: "tnt_1",
     workbenchId: "ch_1",
@@ -127,8 +124,8 @@ function baseProps(
 }
 
 function rowFor(el: HTMLElement, handle: string) {
-  return Array.from(el.querySelectorAll(".chat-settings-participant-row")).find(
-    (row) => row.textContent?.includes(handle),
+  return Array.from(el.querySelectorAll(".chat-settings-participant-row")).find((row) =>
+    row.textContent?.includes(handle),
   ) as HTMLElement | undefined;
 }
 
diff --git a/packages/chat-ui/test/mentions.test.ts b/packages/chat-ui/test/mentions.test.ts
index b9ad7519ae..8b298768fc 100644
--- a/packages/chat-ui/test/mentions.test.ts
+++ b/packages/chat-ui/test/mentions.test.ts
@@ -60,16 +60,12 @@ describe("mentionCandidatesFromParticipants", () => {
       mentionCandidatesFromParticipants([
         { address: "ins_cd03d8e3@agents.example", handle: "echo" },
       ]),
-    ).toEqual([
-      { id: "ins_cd03d8e3@agents.example", handle: "echo", label: "Echo" },
-    ]);
+    ).toEqual([{ id: "ins_cd03d8e3@agents.example", handle: "echo", label: "Echo" }]);
   });
 
   test("returns nothing when no participant is an agent address", () => {
     expect(
-      mentionCandidatesFromParticipants([
-        { address: "user_abc123", handle: "user_abc123" },
-      ]),
+      mentionCandidatesFromParticipants([{ address: "user_abc123", handle: "user_abc123" }]),
     ).toEqual([]);
   });
 
@@ -192,10 +188,7 @@ describe("mentionOptionsFromWorkbench and filterMentionOptions (CL-5879 mention-
       [{ id: "wfd_echo", name: "echo", description: "Echo" }],
     );
     const filtered = filterMentionOptions(options, "re");
-    expect(filtered.map((option) => option.candidate.handle)).toEqual([
-      "researcher",
-      "reed",
-    ]);
+    expect(filtered.map((option) => option.candidate.handle)).toEqual(["researcher", "reed"]);
   });
 
   test("in-workbench agent rows show the resolved display name (CL-6424)", () => {
@@ -206,31 +199,19 @@ describe("mentionOptionsFromWorkbench and filterMentionOptions (CL-5879 mention-
       new Map([["researcher@agents.example", "Myra"]]),
     );
     expect(options.map((option) => option.candidate.label)).toEqual(["Myra"]);
-    expect(options.map((option) => option.candidate.handle)).toEqual([
-      "researcher",
-    ]);
+    expect(options.map((option) => option.candidate.handle)).toEqual(["researcher"]);
   });
 });
 
 describe("insertMention", () => {
   test("splices the mention in with a trailing space and advances the caret", () => {
-    const result = insertMention(
-      "hi @re",
-      6,
-      { start: 3, query: "re" },
-      "researcher",
-    );
+    const result = insertMention("hi @re", 6, { start: 3, query: "re" }, "researcher");
     expect(result.text).toBe("hi @researcher ");
     expect(result.caret).toBe(result.text.length);
   });
 
   test("preserves text after the caret", () => {
-    const result = insertMention(
-      "hi @re please",
-      6,
-      { start: 3, query: "re" },
-      "researcher",
-    );
+    const result = insertMention("hi @re please", 6, { start: 3, query: "re" }, "researcher");
     expect(result.text).toBe("hi @researcher  please");
   });
 });
diff --git a/packages/chat-ui/test/message-grouping-and-failed-polish.test.tsx b/packages/chat-ui/test/message-grouping-and-failed-polish.test.tsx
index f0d24fcdbd..49c6743743 100644
--- a/packages/chat-ui/test/message-grouping-and-failed-polish.test.tsx
+++ b/packages/chat-ui/test/message-grouping-and-failed-polish.test.tsx
@@ -82,9 +82,7 @@ describe("consecutive same-author grouping", () => {
     const groups = el.querySelectorAll(".chat-message-group");
     expect(groups[1]?.getAttribute("data-grouped")).toBe("false");
     expect(
-      el
-        .querySelectorAll(".chat-bubble-row")[1]
-        ?.querySelector(".chat-bubble-head"),
+      el.querySelectorAll(".chat-bubble-row")[1]?.querySelector(".chat-bubble-head"),
     ).not.toBeNull();
   });
 
@@ -119,9 +117,7 @@ describe("consecutive same-author grouping", () => {
       {
         id: "m2",
         createdAt: "2026-01-01T00:00:10.000Z",
-        parts: [
-          { kind: "event", event: "workbench.settings-changed", data: {} },
-        ],
+        parts: [{ kind: "event", event: "workbench.settings-changed", data: {} }],
         sender: { name: "Researcher", address: "researcher@agents.example" },
       },
       {
@@ -178,9 +174,7 @@ describe("failed pending message's inline recovery affordance", () => {
     expect(retry?.className).not.toContain("underline");
     expect(discard?.className).not.toContain("underline");
 
-    expect(
-      container.querySelector(".chat-pending-failed-label")?.textContent,
-    ).toBe("Not sent");
+    expect(container.querySelector(".chat-pending-failed-label")?.textContent).toBe("Not sent");
   });
 });
 
@@ -231,9 +225,9 @@ describe("the reply-timed-out notice gets the same ref+Retry treatment as the se
         ?.querySelector(".chat-turn-failed-disclosure")
         ?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
     });
-    expect(
-      container.querySelector(".chat-turn-failed-detail")?.textContent,
-    ).toContain("(ref mt4ewrje-zvbmti)");
+    expect(container.querySelector(".chat-turn-failed-detail")?.textContent).toContain(
+      "(ref mt4ewrje-zvbmti)",
+    );
 
     // Never the old, action-less plain event line for this failure.
     expect(container.querySelector(".chat-event-line")).toBeNull();
@@ -256,18 +250,12 @@ describe("own-message avatar initials never fabricate 'YO'", () => {
     ];
   }
 
-  async function mountOwn(currentUser: {
-    principalId: string;
-    name?: string;
-    handle?: string;
-  }) {
+  async function mountOwn(currentUser: { principalId: string; name?: string; handle?: string }) {
     container = document.createElement("div");
     document.body.appendChild(container);
     root = createRoot(container);
     await act(async () => {
-      root?.render(
-        <WorkbenchTimeline items={ownItem()} currentUser={currentUser} />,
-      );
+      root?.render(<WorkbenchTimeline items={ownItem()} currentUser={currentUser} />);
     });
     return container;
   }
@@ -278,9 +266,7 @@ describe("own-message avatar initials never fabricate 'YO'", () => {
       name: "Sawyer Cutler",
     });
     expect(el.querySelector(".sender-avatar")?.textContent).toBe("SC");
-    expect(el.querySelector(".chat-bubble-sender")?.textContent).toBe(
-      "Sawyer Cutler",
-    );
+    expect(el.querySelector(".chat-bubble-sender")?.textContent).toBe("Sawyer Cutler");
   });
 
   test("no name but a handle falls back to that handle's first letter", async () => {
diff --git a/packages/chat-ui/test/message-hover-toolbar.test.tsx b/packages/chat-ui/test/message-hover-toolbar.test.tsx
index e79f695bd1..56d4994887 100644
--- a/packages/chat-ui/test/message-hover-toolbar.test.tsx
+++ b/packages/chat-ui/test/message-hover-toolbar.test.tsx
@@ -21,11 +21,9 @@ const chatUiCss = readFileSync(
 
 function cssRuleBodies(selector: string): string[] {
   const escaped = selector.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  return [
-    ...chatUiCss.matchAll(
-      new RegExp(`(?:^|\\n)\\s*${escaped}\\s*\\{([^}]+)\\}`, "g"),
-    ),
-  ].map((match) => match[1] ?? "");
+  return [...chatUiCss.matchAll(new RegExp(`(?:^|\\n)\\s*${escaped}\\s*\\{([^}]+)\\}`, "g"))].map(
+    (match) => match[1] ?? "",
+  );
 }
 
 /** Radix's exit-animation handling runs through a couple of microtasks even
@@ -38,9 +36,7 @@ async function flush(): Promise<void> {
   });
 }
 
-function textMessage(
-  overrides: Partial<TimelineMessageItem> = {},
-): TimelineMessageItem[] {
+function textMessage(overrides: Partial<TimelineMessageItem> = {}): TimelineMessageItem[] {
   return [
     {
       id: "m1",
@@ -75,15 +71,9 @@ async function mount(props: {
     root?.render(
       <WorkbenchTimeline
         items={props.items}
-        {...(props.onOpenThread !== undefined
-          ? { onOpenThread: props.onOpenThread }
-          : {})}
-        {...(props.onEditMessage !== undefined
-          ? { onEditMessage: props.onEditMessage }
-          : {})}
-        {...(props.currentUser !== undefined
-          ? { currentUser: props.currentUser }
-          : {})}
+        {...(props.onOpenThread !== undefined ? { onOpenThread: props.onOpenThread } : {})}
+        {...(props.onEditMessage !== undefined ? { onEditMessage: props.onEditMessage } : {})}
+        {...(props.currentUser !== undefined ? { currentUser: props.currentUser } : {})}
       />,
     );
   });
@@ -148,9 +138,7 @@ describe("hover Edit on own prompts", () => {
       onEditMessage: () => undefined,
     });
 
-    expect(
-      el.querySelector(".chat-message-group")?.getAttribute("data-own"),
-    ).toBe("false");
+    expect(el.querySelector(".chat-message-group")?.getAttribute("data-own")).toBe("false");
     expect(el.querySelector(".chat-hover-edit")).toBeNull();
   });
 
@@ -192,9 +180,7 @@ describe("hover Edit on own prompts", () => {
       onEditMessage: () => undefined,
     });
 
-    expect(
-      el.querySelector(".chat-message-group")?.getAttribute("data-own"),
-    ).toBe("true");
+    expect(el.querySelector(".chat-message-group")?.getAttribute("data-own")).toBe("true");
     expect(el.querySelector(".chat-hover-edit")).toBeNull();
   });
 
@@ -235,9 +221,7 @@ describe("hover Edit on own prompts", () => {
 
 describe("own-prompt hover toolbar is mirrored off the prompt", () => {
   test("own rows pin the toolbar to the inboard (left) edge", () => {
-    const bodies = cssRuleBodies(
-      '.chat-message-group[data-own="true"] .chat-hover-toolbar',
-    );
+    const bodies = cssRuleBodies('.chat-message-group[data-own="true"] .chat-hover-toolbar');
     expect(bodies.length).toBeGreaterThan(0);
     const body = bodies[0] ?? "";
     expect(body).toMatch(/right:\s*auto/);
@@ -253,12 +237,8 @@ describe("own-prompt hover toolbar is mirrored off the prompt", () => {
   });
 
   test("hover, focus-within, and data-open still reveal the toolbar", () => {
-    expect(chatUiCss).toMatch(
-      /\.chat-message-group:hover\s+\.chat-hover-toolbar/,
-    );
-    expect(chatUiCss).toMatch(
-      /\.chat-message-group:focus-within\s+\.chat-hover-toolbar/,
-    );
+    expect(chatUiCss).toMatch(/\.chat-message-group:hover\s+\.chat-hover-toolbar/);
+    expect(chatUiCss).toMatch(/\.chat-message-group:focus-within\s+\.chat-hover-toolbar/);
     expect(chatUiCss).toMatch(/\.chat-hover-toolbar\[data-open="true"\]/);
   });
 });
@@ -305,9 +285,7 @@ describe("the persistent inline 'Reply in thread' link is gone", () => {
     });
 
     expect(withReplies.querySelector(".chat-thread-affordance")).not.toBeNull();
-    expect(
-      withReplies.querySelector(".chat-thread-reply-count")?.textContent,
-    ).toBe("3 replies");
+    expect(withReplies.querySelector(".chat-thread-reply-count")?.textContent).toBe("3 replies");
 
     act(() => repliesRoot.unmount());
     withReplies.remove();
@@ -323,22 +301,16 @@ describe("the ellipsis menu", () => {
       onOpenThread: (id) => opened.push(id),
     });
 
-    const ellipsis = el.querySelector(
-      ".chat-hover-ellipsis",
-    ) as HTMLButtonElement;
+    const ellipsis = el.querySelector(".chat-hover-ellipsis") as HTMLButtonElement;
     await act(async () => ellipsis.click());
     await flush();
 
-    const items = Array.from(
-      document.querySelectorAll<HTMLElement>('[data-slot="menu-item"]'),
-    );
+    const items = Array.from(document.querySelectorAll<HTMLElement>('[data-slot="menu-item"]'));
     const labels = items.map((item) => item.textContent);
     expect(labels).toContain("Reply in thread");
     expect(labels).toContain("Copy text");
 
-    const replyItem = items.find(
-      (item) => item.textContent === "Reply in thread",
-    );
+    const replyItem = items.find((item) => item.textContent === "Reply in thread");
     act(() => replyItem?.click());
     await flush();
 
@@ -355,9 +327,7 @@ describe("the ellipsis menu", () => {
 
     const group = el.querySelector(".chat-message-group") as HTMLElement;
     await act(async () => {
-      group.dispatchEvent(
-        new MouseEvent("contextmenu", { bubbles: true, cancelable: true }),
-      );
+      group.dispatchEvent(new MouseEvent("contextmenu", { bubbles: true, cancelable: true }));
     });
     await flush();
 
diff --git a/packages/chat-ui/test/no-usable-model-banner.test.tsx b/packages/chat-ui/test/no-usable-model-banner.test.tsx
index 3ba235387a..f21040e446 100644
--- a/packages/chat-ui/test/no-usable-model-banner.test.tsx
+++ b/packages/chat-ui/test/no-usable-model-banner.test.tsx
@@ -25,9 +25,7 @@ describe("NoUsableModelBanner", () => {
     document.body.appendChild(container);
     root = createRoot(container);
     await act(async () => {
-      root?.render(
-        <NoUsableModelBanner onConnectModel={() => connected.push(1)} />,
-      );
+      root?.render(<NoUsableModelBanner onConnectModel={() => connected.push(1)} />);
     });
 
     expect(container.querySelector(".chat-no-model-banner")).not.toBeNull();
diff --git a/packages/chat-ui/test/onboarding-scene-card.test.tsx b/packages/chat-ui/test/onboarding-scene-card.test.tsx
index f49eea9134..fd94c2c6f1 100644
--- a/packages/chat-ui/test/onboarding-scene-card.test.tsx
+++ b/packages/chat-ui/test/onboarding-scene-card.test.tsx
@@ -74,28 +74,18 @@ function stepRows(el: HTMLElement) {
 
 function stepTitles(el: HTMLElement) {
   return stepRows(el).map(
-    (row) =>
-      row.querySelector(".chat-block-scene-step-title")?.textContent ?? "",
+    (row) => row.querySelector(".chat-block-scene-step-title")?.textContent ?? "",
   );
 }
 
 function currentStepTitle(el: HTMLElement): string | undefined {
-  const current = stepRows(el).find(
-    (row) => row.getAttribute("data-state") === "current",
-  );
-  return (
-    current?.querySelector(".chat-block-scene-step-title")?.textContent ??
-    undefined
-  );
+  const current = stepRows(el).find((row) => row.getAttribute("data-state") === "current");
+  return current?.querySelector(".chat-block-scene-step-title")?.textContent ?? undefined;
 }
 
 function currentStepAria(el: HTMLElement): string | null {
-  const current = stepRows(el).find(
-    (row) => row.getAttribute("aria-current") === "step",
-  );
-  return (
-    current?.querySelector(".chat-block-scene-step-title")?.textContent ?? null
-  );
+  const current = stepRows(el).find((row) => row.getAttribute("aria-current") === "step");
+  return current?.querySelector(".chat-block-scene-step-title")?.textContent ?? null;
 }
 
 /** A host whose live state is whatever the test says it is, pushed once
@@ -132,9 +122,7 @@ describe("the room's onboarding card is a scene, not a member's message", () =>
     expect(el.querySelector(".chat-bubble-row")).toBeNull();
     expect(el.textContent).not.toContain("Member");
     expect(el.textContent).not.toContain("system");
-    expect(
-      el.querySelector(".chat-message-group")?.getAttribute("data-own"),
-    ).toBe("false");
+    expect(el.querySelector(".chat-message-group")?.getAttribute("data-own")).toBe("false");
   });
 
   test("the card names the job, promises the outcome, and lists the room's own step labels in order", async () => {
@@ -148,12 +136,8 @@ describe("the room's onboarding card is a scene, not a member's message", () =>
         })}
       />,
     );
-    expect(el.querySelector(".chat-block-title")?.textContent).toBe(
-      "Code review",
-    );
-    expect(el.querySelector(".chat-block-scene-promise")?.textContent).toBe(
-      PROMISE,
-    );
+    expect(el.querySelector(".chat-block-title")?.textContent).toBe("Code review");
+    expect(el.querySelector(".chat-block-scene-promise")?.textContent).toBe(PROMISE);
     expect(stepTitles(el)).toEqual([
       "Connect GitHub",
       "Choose what gets reviewed",
@@ -170,9 +154,7 @@ describe("the room's onboarding card is a scene, not a member's message", () =>
         })}
       />,
     );
-    expect(el.querySelector(".chat-block-title")?.textContent).toBe(
-      "Code review",
-    );
+    expect(el.querySelector(".chat-block-title")?.textContent).toBe("Code review");
     expect(el.querySelector(".chat-block-scene-promise")).toBeNull();
     expect(el.querySelector(".chat-block-scene-steps")).toBeNull();
     expect(el.querySelector(".chat-block-scene-why")).toBeNull();
@@ -189,9 +171,7 @@ describe("the room's onboarding card is a scene, not a member's message", () =>
         })}
       />,
     );
-    expect(el.querySelector(".chat-block-scene-promise")?.textContent).toBe(
-      PROMISE,
-    );
+    expect(el.querySelector(".chat-block-scene-promise")?.textContent).toBe(PROMISE);
     expect(el.querySelector(".chat-block-scene-steps")).toBeNull();
   });
 
@@ -206,10 +186,7 @@ describe("the room's onboarding card is a scene, not a member's message", () =>
         })}
       />,
     );
-    expect(stepTitles(el)).toEqual([
-      "Connect GitHub",
-      "Choose what gets reviewed",
-    ]);
+    expect(stepTitles(el)).toEqual(["Connect GitHub", "Choose what gets reviewed"]);
     expect(currentStepTitle(el)).toBeUndefined();
     expect(el.querySelector(".chat-block-scene-why")).toBeNull();
   });
@@ -237,18 +214,12 @@ describe("the walkthrough marker follows the live connect state", () => {
     const el = await mountAt("m_step1", { kind: "disconnected" });
     expect(currentStepTitle(el)).toBe("Connect GitHub");
     expect(currentStepAria(el)).toBe("Connect GitHub");
-    expect(el.querySelector(".chat-block-scene-why")?.textContent).toBe(
-      STEPS[0]?.why,
-    );
+    expect(el.querySelector(".chat-block-scene-why")?.textContent).toBe(STEPS[0]?.why);
     const status = el.querySelector(".chat-block-scene-status");
     expect(status?.getAttribute("aria-live")).toBe("polite");
     expect(status?.textContent).toBe("Connect GitHub");
-    expect(
-      el.querySelector(".chat-block-scene-body")?.getAttribute("aria-live"),
-    ).toBeNull();
-    expect(el.querySelector(".chat-block-scene-body")?.contains(status)).toBe(
-      false,
-    );
+    expect(el.querySelector(".chat-block-scene-body")?.getAttribute("aria-live")).toBeNull();
+    expect(el.querySelector(".chat-block-scene-body")?.contains(status)).toBe(false);
   });
 
   test("connected with nothing recorded yet marks Pick your repos", async () => {
@@ -260,9 +231,7 @@ describe("the walkthrough marker follows the live connect state", () => {
     });
     expect(currentStepTitle(el)).toBe("Choose what gets reviewed");
     expect(currentStepAria(el)).toBe("Choose what gets reviewed");
-    expect(el.querySelector(".chat-block-scene-why")?.textContent).toBe(
-      STEPS[1]?.why,
-    );
+    expect(el.querySelector(".chat-block-scene-why")?.textContent).toBe(STEPS[1]?.why);
     expect(el.textContent).toContain("acme/checkout");
   });
 
@@ -277,9 +246,9 @@ describe("the walkthrough marker follows the live connect state", () => {
     expect(currentStepAria(el)).toBe("Start reviewing");
     const done = el.querySelector(".chat-block-scene-reviewing");
     expect(done?.textContent).toContain("Reviewing");
-    const names = [
-      ...el.querySelectorAll(".chat-block-scene-repo-names li"),
-    ].map((item) => item.textContent);
+    const names = [...el.querySelectorAll(".chat-block-scene-repo-names li")].map(
+      (item) => item.textContent,
+    );
     expect(names).toEqual(["acme/checkout", "acme/web"]);
     expect(done?.textContent).toContain("change repos");
     // The done state never re-offers connecting — the card is past it.
@@ -301,13 +270,9 @@ describe("the walkthrough marker follows the live connect state", () => {
       changeRepos?.click();
     });
     expect(el.textContent).toContain("2 repos your token can reach · 1 picked");
-    expect(el.querySelector(".chat-block-title")?.textContent).toBe(
-      "Code review",
-    );
+    expect(el.querySelector(".chat-block-title")?.textContent).toBe("Code review");
     expect(currentStepTitle(el)).toBe("Choose what gets reviewed");
-    expect(el.querySelector(".chat-block-scene-why")?.textContent).toBe(
-      STEPS[1]?.why,
-    );
+    expect(el.querySelector(".chat-block-scene-why")?.textContent).toBe(STEPS[1]?.why);
   });
 
   test("a rejected start reviewing after change repos keeps the picker and reports the error", async () => {
@@ -322,11 +287,7 @@ describe("the walkthrough marker follows the live connect state", () => {
       startReviewing: () => Promise.reject(new Error("could not start")),
     };
     const el = await mount(
-      <ConnectGithubBlockContainer
-        data={DATA}
-        messageId="m_step_reject"
-        actions={actions}
-      />,
+      <ConnectGithubBlockContainer data={DATA} messageId="m_step_reject" actions={actions} />,
     );
     const changeRepos = [...el.querySelectorAll("button")].find(
       (button) => button.textContent === "change repos",
diff --git a/packages/chat-ui/test/own-message-alignment.test.tsx b/packages/chat-ui/test/own-message-alignment.test.tsx
index 568400be00..7971436736 100644
--- a/packages/chat-ui/test/own-message-alignment.test.tsx
+++ b/packages/chat-ui/test/own-message-alignment.test.tsx
@@ -31,10 +31,7 @@ async function mount(items: readonly MessageItem[], currentUser?: CurrentUser) {
   root = createRoot(container);
   await act(async () => {
     root?.render(
-      <WorkbenchTimeline
-        items={items}
-        {...(currentUser !== undefined ? { currentUser } : {})}
-      />,
+      <WorkbenchTimeline items={items} {...(currentUser !== undefined ? { currentUser } : {})} />,
     );
   });
   return container;
@@ -98,9 +95,7 @@ describe("own-message alignment is per viewer, not per message", () => {
     // System notices align left for every viewer (CL-6772 / DESIGN.md) —
     // even when this reader caused the event. Marking the group as own
     // would put them on the signed-in user's right edge.
-    expect(
-      el.querySelector(".chat-message-group")?.getAttribute("data-own"),
-    ).toBe("false");
+    expect(el.querySelector(".chat-message-group")?.getAttribute("data-own")).toBe("false");
     expect(el.querySelector(".chat-event-line")).not.toBeNull();
     expect(el.querySelector(".chat-bubble-row")).toBeNull();
   });
@@ -121,18 +116,14 @@ describe("own-message alignment is per viewer, not per message", () => {
       },
     ];
     const el = await mount(items, { principalId: "sawyer" });
-    expect(
-      el.querySelector(".chat-message-group")?.getAttribute("data-own"),
-    ).toBe("false");
+    expect(el.querySelector(".chat-message-group")?.getAttribute("data-own")).toBe("false");
     expect(el.querySelector(".chat-event-line")).not.toBeNull();
     expect(el.querySelector(".chat-bubble-row")).toBeNull();
   });
 
   test("no signed-in currentUser means nothing renders as own", async () => {
     const el = await mount(messageFrom("sawyer@agents.example"));
-    expect(
-      el.querySelector(".chat-message-group")?.getAttribute("data-own"),
-    ).toBe("false");
+    expect(el.querySelector(".chat-message-group")?.getAttribute("data-own")).toBe("false");
   });
 
   test("own-authored text plus tool activity plus a gen-UI block keeps tools and the block outside the bubble", async () => {
diff --git a/packages/chat-ui/test/pending-send-lifecycle.test.tsx b/packages/chat-ui/test/pending-send-lifecycle.test.tsx
index 6a351afdf4..d6a52d6f33 100644
--- a/packages/chat-ui/test/pending-send-lifecycle.test.tsx
+++ b/packages/chat-ui/test/pending-send-lifecycle.test.tsx
@@ -20,10 +20,7 @@ afterEach(() => {
   root = null;
 });
 
-async function mount(
-  items: readonly TimelineMessageItem[],
-  pendingActions?: PendingActions,
-) {
+async function mount(items: readonly TimelineMessageItem[], pendingActions?: PendingActions) {
   container = document.createElement("div");
   document.body.appendChild(container);
   root = createRoot(container);
@@ -95,12 +92,8 @@ describe("pending send lifecycle", () => {
       { onRetry: () => {}, onDiscard: () => {} },
     );
 
-    expect(el.querySelector(".chat-bubble-text")?.textContent).toBe(
-      "will retry",
-    );
-    expect(el.querySelector(".chat-pending-failed-label")?.textContent).toBe(
-      "Not sent",
-    );
+    expect(el.querySelector(".chat-bubble-text")?.textContent).toBe("will retry");
+    expect(el.querySelector(".chat-pending-failed-label")?.textContent).toBe("Not sent");
     expect(el.querySelector(".chat-pending-retry")).not.toBeNull();
   });
 });
diff --git a/packages/chat-ui/test/poll-block.test.tsx b/packages/chat-ui/test/poll-block.test.tsx
index 755f1efd10..0e84a1b61c 100644
--- a/packages/chat-ui/test/poll-block.test.tsx
+++ b/packages/chat-ui/test/poll-block.test.tsx
@@ -70,11 +70,7 @@ function fakeBackend() {
         own: own === undefined ? null : { kind: "poll", choiceIds: own },
       };
     },
-    submitPoll: async (
-      _messageId,
-      _blockId,
-      choiceIds,
-    ): Promise<BlockResponseSubmitResult> => {
+    submitPoll: async (_messageId, _blockId, choiceIds): Promise<BlockResponseSubmitResult> => {
       submitCalls.push({ choiceIds });
       votesByPrincipal.set("me", choiceIds);
       return { kind: "submitted" };
@@ -101,12 +97,7 @@ async function mount(actions: BlockResponseActions) {
   document.body.appendChild(container);
   root = createRoot(container);
   await act(async () => {
-    root?.render(
-      <WorkbenchTimeline
-        items={messageWithPollBlock()}
-        blockResponses={actions}
-      />,
-    );
+    root?.render(<WorkbenchTimeline items={messageWithPollBlock()} blockResponses={actions} />);
   });
   return container;
 }
@@ -132,8 +123,8 @@ describe("poll card round-trip", () => {
     const backend = fakeBackend();
     const el = await mount(backend.actions);
 
-    const tuesday = [...el.querySelectorAll(".chat-block-poll-choice")].find(
-      (button) => button.textContent?.includes("Tuesday"),
+    const tuesday = [...el.querySelectorAll(".chat-block-poll-choice")].find((button) =>
+      button.textContent?.includes("Tuesday"),
     ) as HTMLButtonElement;
 
     await act(async () => {
@@ -152,10 +143,11 @@ describe("poll card round-trip", () => {
 
     const choices = [...el.querySelectorAll(".chat-block-poll-choice")];
     const tuesday = choices.find((b) => b.textContent?.includes("Tuesday")) as
-      HTMLButtonElement | undefined;
-    const thursday = choices.find((b) =>
-      b.textContent?.includes("Thursday"),
-    ) as HTMLButtonElement | undefined;
+      | HTMLButtonElement
+      | undefined;
+    const thursday = choices.find((b) => b.textContent?.includes("Thursday")) as
+      | HTMLButtonElement
+      | undefined;
     if (tuesday === undefined || thursday === undefined) {
       throw new Error("expected both choices to render");
     }
@@ -171,9 +163,9 @@ describe("poll card round-trip", () => {
     // Total respondents stays 1 — the same principal changed their vote,
     // never counted twice.
     expect(el.textContent).toContain("1 vote");
-    const refreshedThursday = [
-      ...el.querySelectorAll(".chat-block-poll-choice"),
-    ].find((b) => b.textContent?.includes("Thursday")) as HTMLButtonElement;
+    const refreshedThursday = [...el.querySelectorAll(".chat-block-poll-choice")].find((b) =>
+      b.textContent?.includes("Thursday"),
+    ) as HTMLButtonElement;
     expect(refreshedThursday.dataset["selected"]).toBe("true");
   });
 
diff --git a/packages/chat-ui/test/pr-thread-view.test.tsx b/packages/chat-ui/test/pr-thread-view.test.tsx
index dec2d190bd..cd24f73465 100644
--- a/packages/chat-ui/test/pr-thread-view.test.tsx
+++ b/packages/chat-ui/test/pr-thread-view.test.tsx
@@ -14,11 +14,7 @@ import type { ReactElement } from "react";
 import { createRoot } from "react-dom/client";
 import type { Root } from "react-dom/client";
 
-import type {
-  PrThreadFailedTurn,
-  PrThreadReply,
-  PrThreadViewProps,
-} from "../src/pr-thread-view";
+import type { PrThreadFailedTurn, PrThreadReply, PrThreadViewProps } from "../src/pr-thread-view";
 import { PrQueuedStrip, PrThreadView } from "../src/pr-thread-view";
 
 let container: HTMLDivElement | null = null;
@@ -87,9 +83,7 @@ describe("PrThreadView — settled thread", () => {
     expect(el.textContent).toContain("Reviewed");
     expect(el.textContent).toContain("Greybeard");
     expect(el.textContent).toContain("CTO");
-    expect(el.textContent).toContain(
-      "All three posted to acme/checkout · 9:48 AM",
-    );
+    expect(el.textContent).toContain("All three posted to acme/checkout · 9:48 AM");
 
     const link = [...el.querySelectorAll("button")].find(
       (button) => button.textContent === "View on GitHub",
@@ -167,8 +161,8 @@ describe("PrThreadView — settled thread", () => {
       },
     });
 
-    const traceButtons = [...document.querySelectorAll("button")].filter(
-      (button) => button.textContent?.startsWith("view the work"),
+    const traceButtons = [...document.querySelectorAll("button")].filter((button) =>
+      button.textContent?.startsWith("view the work"),
     ) as HTMLButtonElement[];
     expect(traceButtons).toHaveLength(2);
     expect(traceButtons[0]?.textContent).toBe("view the work · 6 steps, 41s");
@@ -262,14 +256,10 @@ describe("PrThreadView — the suggested-fix block", () => {
     expect(el.textContent).toContain("Suggested fix");
     expect(el.textContent).toContain("src/charge.ts");
     expect(el.textContent).toContain("const key = idempotencyKeyFor(order);");
-    expect(el.textContent).toContain(
-      "return gateway.charge({ amount, card });",
-    );
+    expect(el.textContent).toContain("return gateway.charge({ amount, card });");
 
     const removedLine = el.querySelector('[data-kind="removed"]');
-    expect(removedLine?.textContent).toContain(
-      "return gateway.charge({ amount, card });",
-    );
+    expect(removedLine?.textContent).toContain("return gateway.charge({ amount, card });");
     const addedLine = el.querySelector('[data-kind="added"]');
     expect(addedLine?.textContent).toContain("idempotencyKey: key");
 
@@ -324,13 +314,9 @@ describe("PrThreadView — live thread", () => {
     });
 
     expect(el.textContent).toContain("Reading now");
-    expect(el.textContent).toContain(
-      "CTO and Critique are next, once Greybeard finishes.",
-    );
+    expect(el.textContent).toContain("CTO and Critique are next, once Greybeard finishes.");
 
-    const waitAvatars = el.querySelectorAll(
-      ".chat-pr-wait-avatars [aria-label]",
-    );
+    const waitAvatars = el.querySelectorAll(".chat-pr-wait-avatars [aria-label]");
     expect(waitAvatars.length).toBeGreaterThanOrEqual(2);
   });
 
@@ -369,9 +355,7 @@ describe("PrThreadView — status chip tones", () => {
       },
     };
 
-    const reviewed = await mountElement(
-      <PrThreadView {...base} status={{ kind: "reviewed" }} />,
-    );
+    const reviewed = await mountElement(<PrThreadView {...base} status={{ kind: "reviewed" }} />);
     expect(reviewed.textContent).toContain("Reviewed");
     await act(async () => root?.unmount());
     container?.remove();
@@ -390,9 +374,7 @@ describe("PrThreadView — status chip tones", () => {
     document.body.appendChild(container);
     root = createRoot(container);
     await act(async () => {
-      root?.render(
-        <PrThreadView {...base} status={{ kind: "waiting-on-you" }} />,
-      );
+      root?.render(<PrThreadView {...base} status={{ kind: "waiting-on-you" }} />);
     });
     expect(container.textContent).toContain("Waiting on you");
   });
@@ -439,9 +421,7 @@ describe("PrThreadView — failed turn (screen 4)", () => {
     });
 
     expect(el.textContent).toContain("Greybeard's review didn't finish");
-    expect(el.textContent).toContain(
-      "We retried once. Nothing was posted to acme/checkout.",
-    );
+    expect(el.textContent).toContain("We retried once. Nothing was posted to acme/checkout.");
     // The room stays visibly alive around the failed turn.
     expect(el.textContent).toContain("CTO");
     expect(el.textContent).toContain("Unaffected by Greybeard's drop");
@@ -510,9 +490,7 @@ describe("PrThreadView — failed turn (screen 4)", () => {
 
 describe("PrQueuedStrip", () => {
   test("renders the queued line verbatim with the static queue-bars glyph", async () => {
-    const el = await mountElement(
-      <PrQueuedStrip prNumber={77} repo="acme/web" />,
-    );
+    const el = await mountElement(<PrQueuedStrip prNumber={77} repo="acme/web" />);
     expect(el.textContent).toContain(
       "#77 in acme/web is queued — waiting for the current review to finish.",
     );
diff --git a/packages/chat-ui/test/presence-stack.test.tsx b/packages/chat-ui/test/presence-stack.test.tsx
index 206b0aaa80..eaa746dc60 100644
--- a/packages/chat-ui/test/presence-stack.test.tsx
+++ b/packages/chat-ui/test/presence-stack.test.tsx
@@ -24,10 +24,7 @@ class StubEventSource {
     StubEventSource.instances.push(this);
   }
 
-  addEventListener(
-    eventType: string,
-    listener: (message: MessageEvent) => void,
-  ) {
+  addEventListener(eventType: string, listener: (message: MessageEvent) => void) {
     this.listeners.set(eventType, listener);
   }
 
@@ -68,16 +65,13 @@ function stubFetch() {
     if (/\/chat\/workbenches\?kind=workbench$/.test(path)) {
       return json({ items: [WORKBENCH_WIRE] });
     }
-    if (/\/chat\/workbenches\?kind=chat$/.test(path))
-      return json({ items: [] });
+    if (/\/chat\/workbenches\?kind=chat$/.test(path)) return json({ items: [] });
     if (/\/chat\/workbenches\/[^/]+\/threads$/.test(path)) {
       return json({ rootThreadId: "", items: [] });
     }
-    if (/\/chat\/workbenches\/[^/]+\/messages/.test(path))
-      return json({ items: [] });
+    if (/\/chat\/workbenches\/[^/]+\/messages/.test(path)) return json({ items: [] });
     if (/\/chat\/workbenches\/[^/]+\/read-state$/.test(path)) return json({});
-    if (/\/chat\/workbenches\/[^/]+\/invitable$/.test(path))
-      return json({ items: [] });
+    if (/\/chat\/workbenches\/[^/]+\/invitable$/.test(path)) return json({ items: [] });
     if (/\/mailbox\/me\/threads/.test(path)) {
       return json({ threads: [] });
     }
@@ -85,8 +79,7 @@ function stubFetch() {
   }) as typeof fetch;
 }
 
-const { ChatWorkspace, TEAM_AVATAR_STACK_LIMIT } =
-  await import("../src/chat-workspace");
+const { ChatWorkspace, TEAM_AVATAR_STACK_LIMIT } = await import("../src/chat-workspace");
 
 const sleep = (ms: number) => new Promise((resolve) => setTimeout(resolve, ms));
 
@@ -156,9 +149,7 @@ describe("workbench header presence stack", () => {
 
     const avatars = harness.container.querySelectorAll(".chat-presence-avatar");
     expect(avatars).toHaveLength(2);
-    expect(
-      harness.container.querySelector(".chat-presence-stack"),
-    ).not.toBeNull();
+    expect(harness.container.querySelector(".chat-presence-stack")).not.toBeNull();
     expect(harness.container.querySelector(".chat-member-stack")).toBeNull();
     harness.unmount();
   });
@@ -179,9 +170,7 @@ describe("workbench header presence stack", () => {
       });
     });
     await harness.settle();
-    expect(
-      harness.container.querySelectorAll(".chat-presence-avatar"),
-    ).toHaveLength(1);
+    expect(harness.container.querySelectorAll(".chat-presence-avatar")).toHaveLength(1);
 
     act(() => {
       firstStream().emit("chat.presence", {
@@ -191,9 +180,7 @@ describe("workbench header presence stack", () => {
       });
     });
     await harness.settle();
-    expect(
-      harness.container.querySelectorAll(".chat-presence-avatar"),
-    ).toHaveLength(0);
+    expect(harness.container.querySelectorAll(".chat-presence-avatar")).toHaveLength(0);
     harness.unmount();
   });
 
@@ -216,12 +203,10 @@ describe("workbench header presence stack", () => {
     });
     await harness.settle();
 
-    expect(
-      harness.container.querySelectorAll(".chat-presence-avatar"),
-    ).toHaveLength(TEAM_AVATAR_STACK_LIMIT);
-    const overflow = harness.container.querySelector(
-      ".chat-presence-stack-overflow",
+    expect(harness.container.querySelectorAll(".chat-presence-avatar")).toHaveLength(
+      TEAM_AVATAR_STACK_LIMIT,
     );
+    const overflow = harness.container.querySelector(".chat-presence-stack-overflow");
     expect(overflow).not.toBeNull();
     expect(overflow?.textContent).toBe("+4");
     harness.unmount();
diff --git a/packages/chat-ui/test/question-block.test.tsx b/packages/chat-ui/test/question-block.test.tsx
index e98e708fb2..9ace8b7a16 100644
--- a/packages/chat-ui/test/question-block.test.tsx
+++ b/packages/chat-ui/test/question-block.test.tsx
@@ -13,10 +13,7 @@ import { act } from "react";
 import { createRoot } from "react-dom/client";
 import type { Root } from "react-dom/client";
 
-import type {
-  BlockResponseActions,
-  BlockResponseQuery,
-} from "../src/blocks/block-responses";
+import type { BlockResponseActions, BlockResponseQuery } from "../src/blocks/block-responses";
 import type { MessageItem } from "../src/api";
 import { CHAT_STRINGS } from "../src/strings";
 import { WorkbenchTimeline } from "../src/timeline";
@@ -46,10 +43,7 @@ function messageWithQuestionBlock(allowFreeText = false): MessageItem[] {
   ];
 }
 
-function fakeBackend(opts?: {
-  readonly failSubmits?: number;
-  readonly persistFails?: boolean;
-}) {
+function fakeBackend(opts?: { readonly failSubmits?: number; readonly persistFails?: boolean }) {
   let answer: {
     answer: string;
     optionIndex?: number;
@@ -69,20 +63,13 @@ function fakeBackend(opts?: {
           : {
               kind: "question",
               answer: answer.answer,
-              ...(answer.optionIndex !== undefined
-                ? { optionIndex: answer.optionIndex }
-                : {}),
+              ...(answer.optionIndex !== undefined ? { optionIndex: answer.optionIndex } : {}),
               notifiedAt: answer.notifiedAt,
             },
     }),
     submitPoll: async () => ({ kind: "submitted" }),
     submitForm: async () => ({ kind: "submitted" }),
-    submitQuestion: async (
-      _messageId,
-      _blockId,
-      submittedAnswer,
-      optionIndex,
-    ) => {
+    submitQuestion: async (_messageId, _blockId, submittedAnswer, optionIndex) => {
       submitCalls.push({ answer: submittedAnswer, optionIndex });
       if (opts?.persistFails === true) {
         return { kind: "error", message: "persist_failed" };
@@ -107,10 +94,7 @@ function fakeBackend(opts?: {
 }
 
 function setInputValue(input: HTMLInputElement, value: string): void {
-  const setter = Object.getOwnPropertyDescriptor(
-    window.HTMLInputElement.prototype,
-    "value",
-  )?.set;
+  const setter = Object.getOwnPropertyDescriptor(window.HTMLInputElement.prototype, "value")?.set;
   setter?.call(input, value);
   input.dispatchEvent(new Event("input", { bubbles: true }));
 }
@@ -141,8 +125,8 @@ async function mount(actions: BlockResponseActions, allowFreeText = false) {
 }
 
 function choiceButton(el: HTMLElement, label: string): HTMLButtonElement {
-  const button = [...el.querySelectorAll(".chat-block-question-choice")].find(
-    (node) => node.textContent?.includes(label),
+  const button = [...el.querySelectorAll(".chat-block-question-choice")].find((node) =>
+    node.textContent?.includes(label),
   ) as HTMLButtonElement | undefined;
   if (button === undefined) throw new Error(`expected ${label}`);
   return button;
@@ -188,9 +172,7 @@ describe("question card — open state", () => {
   test("free-text field renders only when allowFreeText is set", async () => {
     const backend = fakeBackend();
     const withFreeText = await mount(backend.actions, true);
-    expect(
-      withFreeText.querySelector(".chat-block-question-freetext"),
-    ).not.toBeNull();
+    expect(withFreeText.querySelector(".chat-block-question-freetext")).not.toBeNull();
 
     const mounted = root;
     if (mounted !== null) act(() => mounted.unmount());
@@ -199,9 +181,7 @@ describe("question card — open state", () => {
     root = null;
 
     const withoutFreeText = await mount(backend.actions, false);
-    expect(
-      withoutFreeText.querySelector(".chat-block-question-freetext"),
-    ).toBeNull();
+    expect(withoutFreeText.querySelector(".chat-block-question-freetext")).toBeNull();
   });
 
   test("options are focusable buttons in document order (native tab nav)", async () => {
@@ -227,9 +207,7 @@ describe("question card — answering", () => {
       choiceButton(el, "Production").click();
     });
 
-    expect(backend.submitCalls).toEqual([
-      { answer: "Production", optionIndex: 1 },
-    ]);
+    expect(backend.submitCalls).toEqual([{ answer: "Production", optionIndex: 1 }]);
     expect(el.querySelector('[data-answered="true"]')).not.toBeNull();
     expect(el.querySelector(".chat-block-question-check")).not.toBeNull();
     expect(el.textContent).toContain("Production");
@@ -240,12 +218,8 @@ describe("question card — answering", () => {
     const backend = fakeBackend();
     const el = await mount(backend.actions, true);
 
-    const input = el.querySelector(
-      ".chat-block-question-freetext input",
-    ) as HTMLInputElement;
-    const form = el.querySelector(
-      ".chat-block-question-freetext",
-    ) as HTMLFormElement;
+    const input = el.querySelector(".chat-block-question-freetext input") as HTMLInputElement;
+    const form = el.querySelector(".chat-block-question-freetext") as HTMLFormElement;
 
     await act(async () => {
       setInputValue(input, "Somewhere else entirely");
@@ -269,9 +243,7 @@ describe("question card — answering", () => {
       choiceButton(el, "Production").click();
     });
 
-    expect(backend.submitCalls).toEqual([
-      { answer: "Production", optionIndex: 1 },
-    ]);
+    expect(backend.submitCalls).toEqual([{ answer: "Production", optionIndex: 1 }]);
     expect(el.querySelector('[data-answered="true"]')).not.toBeNull();
     expect(el.textContent).toContain("Production");
     expect(el.querySelector(".chat-block-question-check")).toBeNull();
@@ -279,9 +251,7 @@ describe("question card — answering", () => {
     expect(alert).not.toBeNull();
     expect(alert?.textContent).toBe(CHAT_STRINGS.blockQuestionNotifyFailed);
 
-    const retry = el.querySelector(
-      "[data-question-retry]",
-    ) as HTMLButtonElement | null;
+    const retry = el.querySelector("[data-question-retry]") as HTMLButtonElement | null;
     expect(retry).not.toBeNull();
     expect(retry?.disabled).toBe(false);
 
@@ -314,9 +284,7 @@ describe("question card — answering", () => {
     expect(remounted.querySelector(".chat-block-question-check")).toBeNull();
     const alert = remounted.querySelector("[role='alert']");
     expect(alert?.textContent).toBe(CHAT_STRINGS.blockQuestionNotifyFailed);
-    const retry = remounted.querySelector(
-      "[data-question-retry]",
-    ) as HTMLButtonElement | null;
+    const retry = remounted.querySelector("[data-question-retry]") as HTMLButtonElement | null;
     expect(retry).not.toBeNull();
 
     await act(async () => {
@@ -327,21 +295,15 @@ describe("question card — answering", () => {
       { answer: "Production", optionIndex: 1 },
     ]);
     expect(remounted.querySelector("[data-question-retry]")).toBeNull();
-    expect(
-      remounted.querySelector(".chat-block-question-check"),
-    ).not.toBeNull();
+    expect(remounted.querySelector(".chat-block-question-check")).not.toBeNull();
   });
 
   test("free-text notify-failed retry resubmits the same string without optionIndex", async () => {
     const backend = fakeBackend({ failSubmits: 1 });
     const el = await mount(backend.actions, true);
 
-    const input = el.querySelector(
-      ".chat-block-question-freetext input",
-    ) as HTMLInputElement;
-    const form = el.querySelector(
-      ".chat-block-question-freetext",
-    ) as HTMLFormElement;
+    const input = el.querySelector(".chat-block-question-freetext input") as HTMLInputElement;
+    const form = el.querySelector(".chat-block-question-freetext") as HTMLFormElement;
 
     await act(async () => {
       setInputValue(input, "Somewhere else entirely");
@@ -353,9 +315,7 @@ describe("question card — answering", () => {
     expect(backend.submitCalls).toEqual([
       { answer: "Somewhere else entirely", optionIndex: undefined },
     ]);
-    const retry = el.querySelector(
-      "[data-question-retry]",
-    ) as HTMLButtonElement | null;
+    const retry = el.querySelector("[data-question-retry]") as HTMLButtonElement | null;
     expect(retry).not.toBeNull();
 
     await act(async () => {
@@ -377,9 +337,7 @@ describe("question card — answering", () => {
       choiceButton(el, "Production").click();
     });
 
-    expect(backend.submitCalls).toEqual([
-      { answer: "Production", optionIndex: 1 },
-    ]);
+    expect(backend.submitCalls).toEqual([{ answer: "Production", optionIndex: 1 }]);
     expect(el.querySelector('[data-answered="true"]')).toBeNull();
     expect(el.querySelector("[data-question-retry]")).toBeNull();
     expect(el.querySelectorAll(".chat-block-question-choice")).toHaveLength(3);
diff --git a/packages/chat-ui/test/refresh-and-send.test.ts b/packages/chat-ui/test/refresh-and-send.test.ts
index 573699a0c4..f968161673 100644
--- a/packages/chat-ui/test/refresh-and-send.test.ts
+++ b/packages/chat-ui/test/refresh-and-send.test.ts
@@ -124,9 +124,7 @@ describe("validateAttachmentPick (count / per-file / total limits)", () => {
 
   test("rejects a single file over the per-file limit before any read", () => {
     expect(
-      validateAttachmentPick(0, 0, [
-        { name: "huge.bin", size: limits.maxPerFileBytes + 1 },
-      ]),
+      validateAttachmentPick(0, 0, [{ name: "huge.bin", size: limits.maxPerFileBytes + 1 }]),
     ).toEqual({
       kind: "perFile",
       name: "huge.bin",
@@ -139,9 +137,7 @@ describe("validateAttachmentPick (count / per-file / total limits)", () => {
     // Stay under the per-file ceiling so the total rule is what fires.
     const chunk = limits.maxPerFileBytes;
     const existing = limits.maxTotalBytes - chunk + 1;
-    expect(
-      validateAttachmentPick(1, existing, [{ name: "more.bin", size: chunk }]),
-    ).toEqual({
+    expect(validateAttachmentPick(1, existing, [{ name: "more.bin", size: chunk }])).toEqual({
       kind: "total",
       total: existing + chunk,
       max: limits.maxTotalBytes,
@@ -205,15 +201,11 @@ describe("composer busy state rules (preparing blocks send and attach)", () => {
   });
 
   test("canSendComposerAction blocks while sending", () => {
-    expect(
-      canSendComposerAction("hi", [], { sending: true, preparing: false }),
-    ).toBe(false);
+    expect(canSendComposerAction("hi", [], { sending: true, preparing: false })).toBe(false);
   });
 
   test("canSendComposerAction allows a ready draft", () => {
-    expect(
-      canSendComposerAction("hi", [], { sending: false, preparing: false }),
-    ).toBe(true);
+    expect(canSendComposerAction("hi", [], { sending: false, preparing: false })).toBe(true);
   });
 
   test("canAttachComposer is false while preparing or sending", () => {
@@ -298,9 +290,7 @@ describe("composerPlaceholderFor (CL-6070 / CL-6740: names the open recipient; n
     expect(composerPlaceholderFor({ kind: "chat", title: "Scout" })).toBe(
       `${CHAT_STRINGS.composerPlaceholderChat("Scout")} / for commands`,
     );
-    expect(
-      composerPlaceholderFor({ kind: "chat", title: "Scout" }),
-    ).not.toContain("Myra");
+    expect(composerPlaceholderFor({ kind: "chat", title: "Scout" })).not.toContain("Myra");
   });
 
   test("names the counterpart for a person chat too — a chat's title is always its counterpart's name", () => {
@@ -310,9 +300,9 @@ describe("composerPlaceholderFor (CL-6070 / CL-6740: names the open recipient; n
   });
 
   test("keeps the generic workbench copy for a workbench", () => {
-    expect(
-      composerPlaceholderFor({ kind: "workbench", title: "General" }),
-    ).toBe(`${CHAT_STRINGS.composerPlaceholder}, / for commands`);
+    expect(composerPlaceholderFor({ kind: "workbench", title: "General" })).toBe(
+      `${CHAT_STRINGS.composerPlaceholder}, / for commands`,
+    );
   });
 
   test("keeps the generic copy with no workbench resolved yet", () => {
@@ -329,21 +319,15 @@ describe("composerPlaceholderFor (CL-6070 / CL-6740: names the open recipient; n
 
   test("advertises / for commands only when the slash catalog is non-empty", () => {
     expect(SLASH_COMMANDS.length).toBeGreaterThan(0);
+    expect(composerPlaceholderFor({ kind: "workbench", title: "General" })).toContain(
+      "/ for commands",
+    );
     expect(
-      composerPlaceholderFor({ kind: "workbench", title: "General" }),
-    ).toContain("/ for commands");
-    expect(
-      composerPlaceholderFor(
-        { kind: "workbench", title: "General" },
-        { slashCommandCount: 0 },
-      ),
+      composerPlaceholderFor({ kind: "workbench", title: "General" }, { slashCommandCount: 0 }),
     ).not.toContain("/ for commands");
-    expect(
-      composerPlaceholderFor(
-        { kind: "chat", title: "Priya" },
-        { slashCommandCount: 0 },
-      ),
-    ).toBe("Message Priya…");
+    expect(composerPlaceholderFor({ kind: "chat", title: "Priya" }, { slashCommandCount: 0 })).toBe(
+      "Message Priya…",
+    );
   });
 });
 
@@ -365,17 +349,11 @@ describe("appendReplyTimedOutNotice (CL-6677: same ref+Retry backstop as the ser
   const participants = [{ address: "myra@agents.example", handle: "myra" }];
 
   test("no timeout leaves the timeline untouched", () => {
-    expect(appendReplyTimedOutNotice(serverItems, null, participants)).toBe(
-      serverItems,
-    );
+    expect(appendReplyTimedOutNotice(serverItems, null, participants)).toBe(serverItems);
   });
 
   test("a timed-out turn appends a turnFailed text part carrying the ref id, attributed to the agent", () => {
-    const withNotice = appendReplyTimedOutNotice(
-      serverItems,
-      "mt4ewrje-zvbmti",
-      participants,
-    );
+    const withNotice = appendReplyTimedOutNotice(serverItems, "mt4ewrje-zvbmti", participants);
     expect(withNotice).toHaveLength(2);
     expect(withNotice[1]?.parts).toEqual([
       {
@@ -469,9 +447,7 @@ describe("shouldConnect (S3: an empty workbench url opens no connection)", () =>
   });
 
   test("is true once a real stream url is known", () => {
-    expect(shouldConnect("/api/tenants/tnt_1/chat/workbenches/c1/stream")).toBe(
-      true,
-    );
+    expect(shouldConnect("/api/tenants/tnt_1/chat/workbenches/c1/stream")).toBe(true);
   });
 });
 
@@ -486,15 +462,11 @@ describe("composerSendVisualState (CL-6103: the send button reflects state)", ()
 
   test("a send in flight always wins, even over an emptied draft", () => {
     expect(composerSendVisualState("", [], { sending: true })).toBe("sending");
-    expect(composerSendVisualState("hi", [], { sending: true })).toBe(
-      "sending",
-    );
+    expect(composerSendVisualState("hi", [], { sending: true })).toBe("sending");
   });
 
   test("an attachment with no text still counts as something to send", () => {
-    expect(
-      composerSendVisualState("", [sampleAttachment], { sending: false }),
-    ).toBe("ready");
+    expect(composerSendVisualState("", [sampleAttachment], { sending: false })).toBe("ready");
   });
 });
 
@@ -595,15 +567,9 @@ describe("mergePendingSends (CL-6251: clientId reconciliation never double-rende
         clientId: "pending_1",
       },
     ];
-    const merged = mergePendingSends(
-      itemsWithConfirmedCopy,
-      pending,
-      "prn_alice",
-    );
+    const merged = mergePendingSends(itemsWithConfirmedCopy, pending, "prn_alice");
     expect(merged).toHaveLength(2);
-    expect(
-      merged.filter((item) => item.pendingStatus !== undefined),
-    ).toHaveLength(0);
+    expect(merged.filter((item) => item.pendingStatus !== undefined)).toHaveLength(0);
   });
 
   test("POST-first: the pending entry is still present when the confirmed item hasn't loaded yet — renders once, as pending", () => {
@@ -622,11 +588,7 @@ describe("mergePendingSends (CL-6251: clientId reconciliation never double-rende
         clientId: "pending_other",
       },
     ];
-    const merged = mergePendingSends(
-      itemsWithUnrelatedClientId,
-      pending,
-      "prn_alice",
-    );
+    const merged = mergePendingSends(itemsWithUnrelatedClientId, pending, "prn_alice");
     expect(merged).toHaveLength(2);
     expect(merged[1]?.pendingStatus).toBe("sending");
   });
@@ -650,11 +612,7 @@ describe("mergePendingSends (CL-6251: clientId reconciliation never double-rende
         clientId: "pending_1",
       },
     ];
-    const merged = mergePendingSends(
-      itemsWithConfirmedCopy,
-      failedPending,
-      "prn_alice",
-    );
+    const merged = mergePendingSends(itemsWithConfirmedCopy, failedPending, "prn_alice");
     expect(merged).toHaveLength(1);
     expect(merged[0]?.pendingStatus).toBeUndefined();
   });
@@ -676,11 +634,9 @@ describe("mergeStreamingReply (CL-6115: the in-progress agent reply folds into t
   });
 
   test("a growing reply appends a streaming item attributed to the workbench's agent", () => {
-    const merged = mergeStreamingReply(
-      serverItems,
-      { phase: "awaiting", text: "Working on it" },
-      [agent],
-    );
+    const merged = mergeStreamingReply(serverItems, { phase: "awaiting", text: "Working on it" }, [
+      agent,
+    ]);
     expect(merged).toHaveLength(2);
     expect(merged[1]).toMatchObject({
       streaming: true,
@@ -690,20 +646,12 @@ describe("mergeStreamingReply (CL-6115: the in-progress agent reply folds into t
   });
 
   test("no agent participant to attribute the reply to means no synthetic item", () => {
-    const merged = mergeStreamingReply(
-      serverItems,
-      { phase: "awaiting", text: "hi" },
-      [],
-    );
+    const merged = mergeStreamingReply(serverItems, { phase: "awaiting", text: "hi" }, []);
     expect(merged).toBe(serverItems);
   });
 
   test("a pending reply with no tokens yet renders no ghost bubble — the typing line owns that phase", () => {
-    const merged = mergeStreamingReply(
-      serverItems,
-      { phase: "awaiting", text: "" },
-      [agent],
-    );
+    const merged = mergeStreamingReply(serverItems, { phase: "awaiting", text: "" }, [agent]);
     expect(merged).toBe(serverItems);
   });
 });
diff --git a/packages/chat-ui/test/resume-failed-banner.test.tsx b/packages/chat-ui/test/resume-failed-banner.test.tsx
index 3523d7bc2b..e2838e2257 100644
--- a/packages/chat-ui/test/resume-failed-banner.test.tsx
+++ b/packages/chat-ui/test/resume-failed-banner.test.tsx
@@ -25,20 +25,13 @@ describe("ResumeFailedBanner (CL-6833)", () => {
     document.body.appendChild(container);
     root = createRoot(container);
     await act(async () => {
-      root?.render(
-        <ResumeFailedBanner
-          refId="mt4ewrje-zvbmti"
-          onRetry={() => retries.push(1)}
-        />,
-      );
+      root?.render(<ResumeFailedBanner refId="mt4ewrje-zvbmti" onRetry={() => retries.push(1)} />);
     });
 
     const banner = container.querySelector(".chat-resume-failed-banner");
     expect(banner).not.toBeNull();
     expect(banner?.getAttribute("role")).toBe("alert");
-    expect(container.textContent).toContain(
-      "Couldn't resume the running reply",
-    );
+    expect(container.textContent).toContain("Couldn't resume the running reply");
     expect(container.textContent).toContain("ref mt4ewrje-zvbmti");
 
     act(() => {
diff --git a/packages/chat-ui/test/stream-message-parse-drop.test.tsx b/packages/chat-ui/test/stream-message-parse-drop.test.tsx
index 296305597a..6a5073e845 100644
--- a/packages/chat-ui/test/stream-message-parse-drop.test.tsx
+++ b/packages/chat-ui/test/stream-message-parse-drop.test.tsx
@@ -23,10 +23,7 @@ class StubEventSource {
     StubEventSource.instances.push(this);
   }
 
-  addEventListener(
-    eventType: string,
-    listener: (message: MessageEvent) => void,
-  ) {
+  addEventListener(eventType: string, listener: (message: MessageEvent) => void) {
     this.listeners.set(eventType, listener);
   }
 
@@ -98,10 +95,7 @@ function stubFetch() {
     if (/\/chat\/workbenches\/[^/]+\/invitable$/.test(path)) {
       return json({ items: [] });
     }
-    if (
-      /\/chat\/workbenches\/[^/]+\/presence$/.test(path) &&
-      init?.method === "POST"
-    ) {
+    if (/\/chat\/workbenches\/[^/]+\/presence$/.test(path) && init?.method === "POST") {
       return json({});
     }
     if (/\/mailbox\/me\/threads/.test(path)) {
@@ -164,9 +158,7 @@ describe("dropped chat.message is not silent until poll (CL-6837)", () => {
     });
     await harness.settle(300);
 
-    expect(toast).toHaveBeenCalledWith(
-      "Couldn't apply that message live — refreshing.",
-    );
+    expect(toast).toHaveBeenCalledWith("Couldn't apply that message live — refreshing.");
     expect(feedRefetchCount).toBeGreaterThan(feedRefetchCountAfterHydration);
     toast.mockRestore();
     harness.unmount();
@@ -187,9 +179,7 @@ describe("dropped chat.message is not silent until poll (CL-6837)", () => {
     });
     await harness.settle(300);
 
-    expect(toast).toHaveBeenCalledWith(
-      "Couldn't apply that message live — refreshing.",
-    );
+    expect(toast).toHaveBeenCalledWith("Couldn't apply that message live — refreshing.");
     expect(feedRefetchCount).toBeGreaterThan(feedRefetchCountAfterHydration);
     expect(harness.container.textContent).not.toContain("not-json");
     toast.mockRestore();
diff --git a/packages/chat-ui/test/system-join-edge.test.tsx b/packages/chat-ui/test/system-join-edge.test.tsx
index 1e8f71977c..c09681415e 100644
--- a/packages/chat-ui/test/system-join-edge.test.tsx
+++ b/packages/chat-ui/test/system-join-edge.test.tsx
@@ -103,10 +103,7 @@ describe("CL-6772: join / system notices stay on the left edge", () => {
   });
 
   test("event-line CSS anchors left under the message gutter, not centered", () => {
-    const cssPath = join(
-      dirname(fileURLToPath(import.meta.url)),
-      "../src/styles.css",
-    );
+    const cssPath = join(dirname(fileURLToPath(import.meta.url)), "../src/styles.css");
     const css = readFileSync(cssPath, "utf8");
     const block = css.match(/\.chat-event-line\s*\{[^}]+\}/);
     expect(block).not.toBeNull();
diff --git a/packages/chat-ui/test/system-row-chrome.test.tsx b/packages/chat-ui/test/system-row-chrome.test.tsx
index fd41165320..12b6c5bbff 100644
--- a/packages/chat-ui/test/system-row-chrome.test.tsx
+++ b/packages/chat-ui/test/system-row-chrome.test.tsx
@@ -23,10 +23,7 @@ const socialActions = {
   onOpenThread: () => undefined,
 };
 
-async function mount(
-  items: MessageItem[],
-  extra: { onFixConnection?: () => void } = {},
-) {
+async function mount(items: MessageItem[], extra: { onFixConnection?: () => void } = {}) {
   container = document.createElement("div");
   document.body.appendChild(container);
   root = createRoot(container);
@@ -35,9 +32,7 @@ async function mount(
       <WorkbenchTimeline
         items={items}
         onOpenThread={socialActions.onOpenThread}
-        {...(extra.onFixConnection !== undefined
-          ? { onFixConnection: extra.onFixConnection }
-          : {})}
+        {...(extra.onFixConnection !== undefined ? { onFixConnection: extra.onFixConnection } : {})}
       />,
     );
   });
@@ -92,9 +87,7 @@ describe("CL-6739: system / error / connect rows hide social chrome", () => {
 
     const line = el.querySelector(".chat-event-line");
     expect(line).not.toBeNull();
-    expect(line?.textContent).toContain(
-      "GitHub connected successfully. Manage in Plugins",
-    );
+    expect(line?.textContent).toContain("GitHub connected successfully. Manage in Plugins");
     const pluginsLink = line?.querySelector('a[href="/plugins"]');
     expect(pluginsLink).not.toBeNull();
     expect(pluginsLink?.textContent).toBe("Plugins");
@@ -244,9 +237,7 @@ describe("CL-6739: system / error / connect rows hide social chrome", () => {
 
     const group = el.querySelector(".chat-message-group") as HTMLElement;
     await act(async () => {
-      group.dispatchEvent(
-        new MouseEvent("contextmenu", { bubbles: true, cancelable: true }),
-      );
+      group.dispatchEvent(new MouseEvent("contextmenu", { bubbles: true, cancelable: true }));
     });
 
     expect(document.querySelector('[data-slot="menu-content"]')).toBeNull();
diff --git a/packages/chat-ui/test/team-avatar-stack.test.tsx b/packages/chat-ui/test/team-avatar-stack.test.tsx
index 31091b78c7..26999e4859 100644
--- a/packages/chat-ui/test/team-avatar-stack.test.tsx
+++ b/packages/chat-ui/test/team-avatar-stack.test.tsx
@@ -24,10 +24,7 @@ class StubEventSource {
     StubEventSource.instances.push(this);
   }
 
-  addEventListener(
-    eventType: string,
-    listener: (message: MessageEvent) => void,
-  ) {
+  addEventListener(eventType: string, listener: (message: MessageEvent) => void) {
     this.listeners.set(eventType, listener);
   }
 
@@ -84,16 +81,13 @@ function stubFetch(workbenchWire: {
         ],
       });
     }
-    if (/\/chat\/workbenches\?kind=chat$/.test(path))
-      return json({ items: [] });
+    if (/\/chat\/workbenches\?kind=chat$/.test(path)) return json({ items: [] });
     if (/\/chat\/workbenches\/[^/]+\/threads$/.test(path)) {
       return json({ rootThreadId: "", items: [] });
     }
-    if (/\/chat\/workbenches\/[^/]+\/messages/.test(path))
-      return json({ items: [] });
+    if (/\/chat\/workbenches\/[^/]+\/messages/.test(path)) return json({ items: [] });
     if (/\/chat\/workbenches\/[^/]+\/read-state$/.test(path)) return json({});
-    if (/\/chat\/workbenches\/[^/]+\/invitable$/.test(path))
-      return json({ items: [] });
+    if (/\/chat\/workbenches\/[^/]+\/invitable$/.test(path)) return json({ items: [] });
     if (/\/mailbox\/me\/threads/.test(path)) {
       return json({ threads: [] });
     }
@@ -161,9 +155,7 @@ describe("workbench header member avatar stack", () => {
     await harness.settle();
     act(() => {
       firstStream().emit("chat.presence.snapshot", {
-        members: [
-          { principalId: "prn_alice", lastActiveAt: "2026-01-01T00:00:00Z" },
-        ],
+        members: [{ principalId: "prn_alice", lastActiveAt: "2026-01-01T00:00:00Z" }],
       });
     });
     await harness.settle();
@@ -171,28 +163,20 @@ describe("workbench header member avatar stack", () => {
     const memberStack = harness.container.querySelector(".chat-member-stack");
     expect(memberStack).not.toBeNull();
     expect(harness.container.querySelector(".chat-team-stack")).toBeNull();
-    const agentAvatars = harness.container.querySelectorAll(
-      '.member-avatar[data-agent="true"]',
-    );
+    const agentAvatars = harness.container.querySelectorAll('.member-avatar[data-agent="true"]');
     expect(agentAvatars).toHaveLength(1);
     const agentAvatar = agentAvatars[0] as HTMLElement;
     expect(agentAvatar.title).toBe("Myra");
-    const memberHumans = harness.container.querySelectorAll(
-      ".member-avatar:not([data-agent])",
-    );
+    const memberHumans = harness.container.querySelectorAll(".member-avatar:not([data-agent])");
     expect(agentAvatar.querySelector('[data-corbit="true"]')).not.toBeNull();
     expect(memberHumans).toHaveLength(1);
     expect((memberHumans[0] as HTMLElement).title).toBe("Alice");
     const liveStack = harness.container.querySelector(".chat-presence-stack");
     expect(liveStack).not.toBeNull();
-    const liveAvatars = harness.container.querySelectorAll(
-      ".chat-presence-avatar",
-    );
+    const liveAvatars = harness.container.querySelectorAll(".chat-presence-avatar");
     expect(liveAvatars).toHaveLength(1);
     expect((liveAvatars[0] as HTMLElement).title).toBe("Alice");
-    expect(
-      harness.container.querySelector(".chat-member-stack-overflow"),
-    ).toBeNull();
+    expect(harness.container.querySelector(".chat-member-stack-overflow")).toBeNull();
     harness.unmount();
   });
 
@@ -213,14 +197,9 @@ describe("workbench header member avatar stack", () => {
       harness.container.querySelectorAll('.member-avatar[data-agent="true"]'),
     ) as HTMLElement[];
     expect(agentAvatars).toHaveLength(2);
-    expect(agentAvatars.map((avatar) => avatar.title)).toEqual([
-      "Myra",
-      "Scout",
-    ]);
+    expect(agentAvatars.map((avatar) => avatar.title)).toEqual(["Myra", "Scout"]);
     expect(
-      agentAvatars.every(
-        (avatar) => avatar.querySelector('[data-corbit="true"]') !== null,
-      ),
+      agentAvatars.every((avatar) => avatar.querySelector('[data-corbit="true"]') !== null),
     ).toBe(true);
     harness.unmount();
   });
@@ -242,9 +221,7 @@ describe("workbench header member avatar stack", () => {
     });
     await harness.settle();
 
-    const agentAvatars = harness.container.querySelectorAll(
-      '.member-avatar[data-agent="true"]',
-    );
+    const agentAvatars = harness.container.querySelectorAll('.member-avatar[data-agent="true"]');
     expect(agentAvatars).toHaveLength(1);
     expect((agentAvatars[0] as HTMLElement).title).toBe("Myra the Helper");
     harness.unmount();
@@ -256,10 +233,7 @@ describe("workbench header member avatar stack", () => {
       humanParticipant(`prn_${index}`, name),
     );
     stubFetch({
-      participants: [
-        { address: "myra@agents.example", handle: "Myra" },
-        ...humanParticipants,
-      ],
+      participants: [{ address: "myra@agents.example", handle: "Myra" }, ...humanParticipants],
     });
     const harness = mount({
       tenant: { kind: "ready", tenantId: "tnt_1" },
@@ -277,9 +251,7 @@ describe("workbench header member avatar stack", () => {
     await harness.settle();
 
     // 1 agent + 6 humans = 7 total, limit is 6, so one overflows.
-    const overflow = harness.container.querySelector(
-      ".chat-member-stack-overflow",
-    );
+    const overflow = harness.container.querySelector(".chat-member-stack-overflow");
     expect(overflow).not.toBeNull();
     expect(overflow?.textContent).toBe("+1");
     harness.unmount();
@@ -300,16 +272,12 @@ describe("workbench header member avatar stack", () => {
     await harness.settle();
     act(() => {
       firstStream().emit("chat.presence.snapshot", {
-        members: [
-          { principalId: "prn_self", lastActiveAt: "2026-01-01T00:00:00Z" },
-        ],
+        members: [{ principalId: "prn_self", lastActiveAt: "2026-01-01T00:00:00Z" }],
       });
     });
     await harness.settle();
 
-    const presenceAvatars = harness.container.querySelectorAll(
-      ".chat-presence-avatar",
-    );
+    const presenceAvatars = harness.container.querySelectorAll(".chat-presence-avatar");
     expect(presenceAvatars).toHaveLength(1);
     expect((presenceAvatars[0] as HTMLElement).title).toBe("sawyer");
     expect((presenceAvatars[0] as HTMLElement).title).not.toBe("Member");
@@ -331,9 +299,7 @@ describe("workbench header member avatar stack", () => {
     });
     await harness.settle();
 
-    const memberHumans = harness.container.querySelectorAll(
-      ".member-avatar:not([data-agent])",
-    );
+    const memberHumans = harness.container.querySelectorAll(".member-avatar:not([data-agent])");
     expect(memberHumans).toHaveLength(1);
     expect((memberHumans[0] as HTMLElement).title).toBe("sawyer");
     expect((memberHumans[0] as HTMLElement).title).not.toBe("ada-handle");
diff --git a/packages/chat-ui/test/timeline-jump-to-latest.test.tsx b/packages/chat-ui/test/timeline-jump-to-latest.test.tsx
index fcbb6e8833..c81e630ef2 100644
--- a/packages/chat-ui/test/timeline-jump-to-latest.test.tsx
+++ b/packages/chat-ui/test/timeline-jump-to-latest.test.tsx
@@ -51,8 +51,7 @@ async function mount(props?: {
     readonly pinned: boolean;
   };
 }) {
-  globalThis.ResizeObserver =
-    NoopResizeObserver as unknown as typeof ResizeObserver;
+  globalThis.ResizeObserver = NoopResizeObserver as unknown as typeof ResizeObserver;
   container = document.createElement("div");
   document.body.appendChild(container);
   root = createRoot(container);
@@ -60,15 +59,11 @@ async function mount(props?: {
     root?.render(
       <WorkbenchTimeline
         items={props?.items ?? items()}
-        {...(props?.scrollRestore !== undefined
-          ? { scrollRestore: props.scrollRestore }
-          : {})}
+        {...(props?.scrollRestore !== undefined ? { scrollRestore: props.scrollRestore } : {})}
       />,
     );
   });
-  const scrollEl = container.querySelector(
-    ".chat-timeline",
-  ) as HTMLElement | null;
+  const scrollEl = container.querySelector(".chat-timeline") as HTMLElement | null;
   if (scrollEl !== null) {
     Object.defineProperty(scrollEl, "scrollHeight", {
       value: 900,
diff --git a/packages/chat-ui/test/timeline-scroll-pin.test.tsx b/packages/chat-ui/test/timeline-scroll-pin.test.tsx
index d58969b3bb..7258f25ab3 100644
--- a/packages/chat-ui/test/timeline-scroll-pin.test.tsx
+++ b/packages/chat-ui/test/timeline-scroll-pin.test.tsx
@@ -70,8 +70,7 @@ afterEach(() => {
 });
 
 async function mount() {
-  globalThis.ResizeObserver =
-    StubResizeObserver as unknown as typeof ResizeObserver;
+  globalThis.ResizeObserver = StubResizeObserver as unknown as typeof ResizeObserver;
   container = document.createElement("div");
   document.body.appendChild(container);
   root = createRoot(container);
diff --git a/packages/chat-ui/test/tool-activity-view.test.tsx b/packages/chat-ui/test/tool-activity-view.test.tsx
index 1ec8eca3b0..24e30d53bc 100644
--- a/packages/chat-ui/test/tool-activity-view.test.tsx
+++ b/packages/chat-ui/test/tool-activity-view.test.tsx
@@ -126,16 +126,12 @@ describe("ToolActivityGroup", () => {
   });
 
   test("a call still running speaks in the present tense and offers no disclosure", () => {
-    const el = mount([
-      trace({ name: "web_search", input: { query: "x" }, status: "running" }),
-    ]);
+    const el = mount([trace({ name: "web_search", input: { query: "x" }, status: "running" })]);
     expect(el.textContent).toContain('Searching the web for "x"');
     expect(el.querySelector(".chat-tool-activity-trigger")).toBeNull();
-    expect(
-      el
-        .querySelector(".chat-tool-activity-marker")
-        ?.getAttribute("data-status"),
-    ).toBe("running");
+    expect(el.querySelector(".chat-tool-activity-marker")?.getAttribute("data-status")).toBe(
+      "running",
+    );
   });
 
   test("consecutive calls stack as individual chips, never a count", () => {
@@ -192,11 +188,9 @@ describe("ToolActivityGroup", () => {
     expect(name).toMatch(/fail|couldn't/i);
     expect(name).toContain("Retrieved an issue in GitHub");
     expect(el.querySelector('[data-status="failed"]')).not.toBeNull();
-    expect(
-      el
-        .querySelector(".chat-tool-activity-marker")
-        ?.getAttribute("aria-hidden"),
-    ).toBe("true");
+    expect(el.querySelector(".chat-tool-activity-marker")?.getAttribute("aria-hidden")).toBe(
+      "true",
+    );
   });
 
   test("a disclosure chip has an accessible name", () => {
@@ -213,12 +207,8 @@ describe("ToolActivityGroup", () => {
   });
 
   test("a known-provider chip uses brand initials, not a dash", () => {
-    const el = mount([
-      trace({ name: "slack__post_message", input: { channel: "general" } }),
-    ]);
-    expect(el.querySelector(".chat-tool-activity-tile")?.textContent).toBe(
-      "Sl",
-    );
+    const el = mount([trace({ name: "slack__post_message", input: { channel: "general" } })]);
+    expect(el.querySelector(".chat-tool-activity-tile")?.textContent).toBe("Sl");
   });
 
   test("a qualified memory search chip is a layman sentence, not a package path", () => {
@@ -257,9 +247,7 @@ describe("ToolActivityGroup", () => {
     ]);
     expect(el.textContent).toContain("Listed recent issues in Linear");
     expect(el.textContent).not.toContain("Linear list recent issues");
-    expect(el.querySelector(".chat-tool-activity-tile")?.textContent).toBe(
-      "Li",
-    );
+    expect(el.querySelector(".chat-tool-activity-tile")?.textContent).toBe("Li");
   });
 });
 
@@ -301,9 +289,7 @@ const css = readFileSync(
 
 function ruleBody(selector: string): string {
   const escaped = selector.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  const match = new RegExp(`(?:^|\\n)\\s*${escaped}\\s*\\{([^}]+)\\}`).exec(
-    css,
-  );
+  const match = new RegExp(`(?:^|\\n)\\s*${escaped}\\s*\\{([^}]+)\\}`).exec(css);
   return match?.[1] ?? "";
 }
 
diff --git a/packages/chat-ui/test/use-optimistic-sends-stale-navigation.test.tsx b/packages/chat-ui/test/use-optimistic-sends-stale-navigation.test.tsx
index 94598f50ee..72ce9d95d3 100644
--- a/packages/chat-ui/test/use-optimistic-sends-stale-navigation.test.tsx
+++ b/packages/chat-ui/test/use-optimistic-sends-stale-navigation.test.tsx
@@ -61,8 +61,7 @@ function mount(initialWorkbenchId: string) {
   const root = createRoot(container);
   const openThreadCalls: string[] = [];
   let setWorkbenchId: (id: string) => void = () => undefined;
-  let handleSend: (payload: ComposerSendPayload) => Promise<boolean> = () =>
-    Promise.resolve(false);
+  let handleSend: (payload: ComposerSendPayload) => Promise<boolean> = () => Promise.resolve(false);
 
   function Host() {
     const [workbenchId, updateWorkbenchId] = useState(initialWorkbenchId);
@@ -85,13 +84,7 @@ function mount(initialWorkbenchId: string) {
   }
 
   act(() => {
-    root.render(
-      createElement(
-        QueryClientProvider,
-        { client: queryClient },
-        createElement(Host),
-      ),
-    );
+    root.render(createElement(QueryClientProvider, { client: queryClient }, createElement(Host)));
   });
 
   return {
diff --git a/packages/chat-ui/test/use-streaming-reply.test.tsx b/packages/chat-ui/test/use-streaming-reply.test.tsx
index a42430ead1..47f374faf4 100644
--- a/packages/chat-ui/test/use-streaming-reply.test.tsx
+++ b/packages/chat-ui/test/use-streaming-reply.test.tsx
@@ -12,11 +12,7 @@ import { useStreamingReply } from "../src/streaming-reply";
 import type { StreamingReplyState } from "../src/streaming-reply";
 import { createFakeClock } from "./fake-clock";
 
-function mount(
-  initialWorkbenchId: string | null,
-  clearMs?: number,
-  minVisibleMs = 0,
-) {
+function mount(initialWorkbenchId: string | null, clearMs?: number, minVisibleMs = 0) {
   const container = document.createElement("div");
   document.body.appendChild(container);
   const root = createRoot(container);
@@ -26,9 +22,7 @@ function mount(
   let send: (eventType: string, data: unknown) => void = () => {};
   let setWorkbenchId: (id: string | null) => void = () => {};
   let awaitReply: () => void = () => {};
-  let resume: (
-    runningTurn: { readonly textSnapshot: string | null } | null,
-  ) => void = () => {};
+  let resume: (runningTurn: { readonly textSnapshot: string | null } | null) => void = () => {};
 
   function Host() {
     const [workbenchId, updateWorkbenchId] = useState(initialWorkbenchId);
@@ -65,9 +59,7 @@ function mount(
       act(() => {
         awaitReply();
       }),
-    resumeFromTurn: (
-      runningTurn: { readonly textSnapshot: string | null } | null,
-    ) =>
+    resumeFromTurn: (runningTurn: { readonly textSnapshot: string | null } | null) =>
       act(() => {
         resume(runningTurn);
       }),
diff --git a/packages/chat-ui/test/use-turn-activity.test.tsx b/packages/chat-ui/test/use-turn-activity.test.tsx
index 11c1ccccaa..9c3428d1f5 100644
--- a/packages/chat-ui/test/use-turn-activity.test.tsx
+++ b/packages/chat-ui/test/use-turn-activity.test.tsx
@@ -23,11 +23,7 @@ function mount(initialWorkbenchId: string | null, staleMs?: number) {
   function Host() {
     const [workbenchId, updateWorkbenchId] = useState(initialWorkbenchId);
     setWorkbenchId = updateWorkbenchId;
-    const { activity, handleStreamEvent } = useTurnActivity(
-      workbenchId,
-      staleMs,
-      fakeClock.clock,
-    );
+    const { activity, handleStreamEvent } = useTurnActivity(workbenchId, staleMs, fakeClock.clock);
     send = handleStreamEvent;
     return createElement(TurnActivityStrip, { activity });
   }
@@ -62,15 +58,11 @@ describe("useTurnActivity + TurnActivityStrip (CL-6196: live wiring)", () => {
       data: { callId: "c1", name: "web_search", partial: { text: "" } },
     });
 
-    const row = harness.container.querySelector(
-      ".chat-tool-activity-row",
-    ) as HTMLElement;
+    const row = harness.container.querySelector(".chat-tool-activity-row") as HTMLElement;
     expect(row).not.toBeNull();
-    expect(
-      row
-        .querySelector(".chat-tool-activity-marker")
-        ?.getAttribute("data-status"),
-    ).toBe("running");
+    expect(row.querySelector(".chat-tool-activity-marker")?.getAttribute("data-status")).toBe(
+      "running",
+    );
     expect(row.textContent).toContain("Searching the web");
     expect(row.textContent).not.toContain("web_search");
     harness.unmount();
@@ -94,9 +86,7 @@ describe("useTurnActivity + TurnActivityStrip (CL-6196: live wiring)", () => {
       },
     });
 
-    expect(harness.container.textContent).toContain(
-      "Searching pages in Notion",
-    );
+    expect(harness.container.textContent).toContain("Searching pages in Notion");
     harness.unmount();
   });
 
@@ -113,14 +103,10 @@ describe("useTurnActivity + TurnActivityStrip (CL-6196: live wiring)", () => {
       data: { result: { callId: "c1", content: "ok" } },
     });
 
-    const row = harness.container.querySelector(
-      ".chat-tool-activity-row",
-    ) as HTMLElement;
-    expect(
-      row
-        .querySelector(".chat-tool-activity-marker")
-        ?.getAttribute("data-status"),
-    ).toBe("success");
+    const row = harness.container.querySelector(".chat-tool-activity-row") as HTMLElement;
+    expect(row.querySelector(".chat-tool-activity-marker")?.getAttribute("data-status")).toBe(
+      "success",
+    );
 
     harness.send("chat.agent", {
       type: "inference.done",
@@ -139,9 +125,7 @@ describe("useTurnActivity + TurnActivityStrip (CL-6196: live wiring)", () => {
       data: { token: "hmm", partial: { text: "", thinking: "hmm" } },
     });
 
-    expect(
-      harness.container.querySelector(".chat-tool-activity-thinking"),
-    ).not.toBeNull();
+    expect(harness.container.querySelector(".chat-tool-activity-thinking")).not.toBeNull();
     harness.unmount();
   });
 
@@ -152,9 +136,7 @@ describe("useTurnActivity + TurnActivityStrip (CL-6196: live wiring)", () => {
       seq: 1,
       data: { call: { id: "c1", name: "search", arguments: {} } },
     });
-    expect(
-      harness.container.querySelector(".chat-tool-activity-row"),
-    ).not.toBeNull();
+    expect(harness.container.querySelector(".chat-tool-activity-row")).not.toBeNull();
 
     harness.switchWorkbench("chan_b");
     expect(harness.container.querySelector(".chat-tool-activity")).toBeNull();
@@ -168,9 +150,7 @@ describe("useTurnActivity + TurnActivityStrip (CL-6196: live wiring)", () => {
       seq: 1,
       data: { call: { id: "c1", name: "search", arguments: {} } },
     });
-    expect(
-      harness.container.querySelector(".chat-tool-activity"),
-    ).not.toBeNull();
+    expect(harness.container.querySelector(".chat-tool-activity")).not.toBeNull();
 
     // No `tool.done`/`reactor.done` ever arrives — a dropped SSE mid-turn.
     await harness.settle(60);
@@ -193,9 +173,7 @@ describe("useTurnActivity + TurnActivityStrip (CL-6196: live wiring)", () => {
       data: { callId: "c2", name: "web_search" },
     });
     await harness.settle(20);
-    expect(
-      harness.container.querySelector(".chat-tool-activity"),
-    ).not.toBeNull();
+    expect(harness.container.querySelector(".chat-tool-activity")).not.toBeNull();
 
     await harness.settle(30);
     expect(harness.container.querySelector(".chat-tool-activity")).toBeNull();
diff --git a/packages/chat-ui/test/use-typing-indicator.test.tsx b/packages/chat-ui/test/use-typing-indicator.test.tsx
index 3d618b0901..55209605de 100644
--- a/packages/chat-ui/test/use-typing-indicator.test.tsx
+++ b/packages/chat-ui/test/use-typing-indicator.test.tsx
@@ -19,10 +19,7 @@ const sleep = (ms: number) => new Promise((resolve) => setTimeout(resolve, ms));
 // the suite around two seconds even so.
 const TEST_TIMEOUT_MS = 500;
 
-function mount(
-  selfPrincipalId: string | undefined,
-  initialWorkbenchId: string | null,
-) {
+function mount(selfPrincipalId: string | undefined, initialWorkbenchId: string | null) {
   const container = document.createElement("div");
   document.body.appendChild(container);
   const root = createRoot(container);
diff --git a/packages/chat-ui/test/use-workbench-feed-refresh-scoping.test.tsx b/packages/chat-ui/test/use-workbench-feed-refresh-scoping.test.tsx
index b6c541c1d3..6aa0e07186 100644
--- a/packages/chat-ui/test/use-workbench-feed-refresh-scoping.test.tsx
+++ b/packages/chat-ui/test/use-workbench-feed-refresh-scoping.test.tsx
@@ -10,10 +10,7 @@ import { act, createElement, useState } from "react";
 import { createRoot } from "react-dom/client";
 import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
 
-import {
-  chatFeedQueryKeyPrefix,
-  useWorkbenchFeed,
-} from "../src/use-workbench-feed";
+import { chatFeedQueryKeyPrefix, useWorkbenchFeed } from "../src/use-workbench-feed";
 
 const realFetch = globalThis.fetch;
 
@@ -67,13 +64,7 @@ function mount(tenantId: string, initialWorkbenchId: string) {
   }
 
   act(() => {
-    root.render(
-      createElement(
-        QueryClientProvider,
-        { client: queryClient },
-        createElement(Host),
-      ),
-    );
+    root.render(createElement(QueryClientProvider, { client: queryClient }, createElement(Host)));
   });
 
   return {
@@ -103,9 +94,7 @@ describe("useWorkbenchFeed — refresh timer scoping across a workbench switch (
 
     await harness.settle(400);
 
-    expect(harness.invalidateCalls()).toEqual([
-      chatFeedQueryKeyPrefix("ten_1", "ch_b"),
-    ]);
+    expect(harness.invalidateCalls()).toEqual([chatFeedQueryKeyPrefix("ten_1", "ch_b")]);
     harness.unmount();
   });
 
@@ -120,9 +109,7 @@ describe("useWorkbenchFeed — refresh timer scoping across a workbench switch (
 
     await harness.settle(400);
 
-    expect(harness.invalidateCalls()).toEqual([
-      chatFeedQueryKeyPrefix("ten_1", "ch_a"),
-    ]);
+    expect(harness.invalidateCalls()).toEqual([chatFeedQueryKeyPrefix("ten_1", "ch_a")]);
     harness.unmount();
   });
 });
diff --git a/packages/chat-ui/test/use-workbench-stream.test.tsx b/packages/chat-ui/test/use-workbench-stream.test.tsx
index de8bf70bd4..3fdaded35f 100644
--- a/packages/chat-ui/test/use-workbench-stream.test.tsx
+++ b/packages/chat-ui/test/use-workbench-stream.test.tsx
@@ -11,10 +11,7 @@ import { afterEach, describe, expect, test } from "bun:test";
 import { act, createElement } from "react";
 import { createRoot } from "react-dom/client";
 
-import {
-  parseStreamEventJson,
-  useWorkbenchStream,
-} from "../src/use-workbench-stream";
+import { parseStreamEventJson, useWorkbenchStream } from "../src/use-workbench-stream";
 
 const realEventSource = globalThis.EventSource;
 const sleep = (ms: number) => new Promise((resolve) => setTimeout(resolve, ms));
@@ -34,10 +31,7 @@ class StubEventSource {
     StubEventSource.instances.push(this);
   }
 
-  addEventListener(
-    eventType: string,
-    listener: (message: MessageEvent) => void,
-  ) {
+  addEventListener(eventType: string, listener: (message: MessageEvent) => void) {
     this.listeners.set(eventType, listener);
   }
 
@@ -105,8 +99,7 @@ function mount(
 
   return {
     latest: (): StubEventSource => {
-      const instance =
-        StubEventSource.instances[StubEventSource.instances.length - 1];
+      const instance = StubEventSource.instances[StubEventSource.instances.length - 1];
       if (instance === undefined) throw new Error("no EventSource was opened");
       return instance;
     },
@@ -219,9 +212,7 @@ describe("useWorkbenchStream (reconnect + poll wiring)", () => {
 
     harness.latest().emit("chat.message", { id: "m1", parts: [] });
 
-    expect(harness.events()).toEqual([
-      ["chat.message", { id: "m1", parts: [] }],
-    ]);
+    expect(harness.events()).toEqual([["chat.message", { id: "m1", parts: [] }]]);
     expect(harness.pollCount()).toBe(pollsAfterOpen);
     harness.unmount();
   });
diff --git a/packages/chat-ui/test/workbench-loading-tip.test.tsx b/packages/chat-ui/test/workbench-loading-tip.test.tsx
index 00a5392520..db110d5533 100644
--- a/packages/chat-ui/test/workbench-loading-tip.test.tsx
+++ b/packages/chat-ui/test/workbench-loading-tip.test.tsx
@@ -27,9 +27,7 @@ function mount() {
   document.body.appendChild(container);
   root = createRoot(container);
   act(() => {
-    root?.render(
-      <WorkbenchTimeline items={[]} participants={[]} settingUpAgent />,
-    );
+    root?.render(<WorkbenchTimeline items={[]} participants={[]} settingUpAgent />);
   });
   return container;
 }
diff --git a/packages/chat-ui/test/workbench-presence.test.ts b/packages/chat-ui/test/workbench-presence.test.ts
index 38d42b21b3..0237194681 100644
--- a/packages/chat-ui/test/workbench-presence.test.ts
+++ b/packages/chat-ui/test/workbench-presence.test.ts
@@ -36,20 +36,14 @@ describe("parsePresenceSnapshotEvent", () => {
   test("parses a well-formed roster", () => {
     expect(
       parsePresenceSnapshotEvent({
-        members: [
-          { principalId: "prn_alice", lastActiveAt: "2026-01-01T00:00:00Z" },
-        ],
+        members: [{ principalId: "prn_alice", lastActiveAt: "2026-01-01T00:00:00Z" }],
       }),
-    ).toEqual([
-      { principalId: "prn_alice", lastActiveAt: "2026-01-01T00:00:00Z" },
-    ]);
+    ).toEqual([{ principalId: "prn_alice", lastActiveAt: "2026-01-01T00:00:00Z" }]);
   });
 
   test("rejects a malformed roster rather than crashing", () => {
     expect(parsePresenceSnapshotEvent({ members: "nope" })).toBeNull();
-    expect(
-      parsePresenceSnapshotEvent({ members: [{ principalId: "x" }] }),
-    ).toBeNull();
+    expect(parsePresenceSnapshotEvent({ members: [{ principalId: "x" }] })).toBeNull();
   });
 });
 
@@ -96,15 +90,11 @@ describe("nextPresenceRoster", () => {
 
   test("any other event type leaves the roster untouched", () => {
     const current = [{ principalId: "prn_alice", lastActiveAt: "t1" }];
-    expect(
-      nextPresenceRoster(current, { eventType: "chat.typing", data: {} }),
-    ).toBe(current);
+    expect(nextPresenceRoster(current, { eventType: "chat.typing", data: {} })).toBe(current);
   });
 
   test("a malformed delta leaves the roster untouched", () => {
     const current = [{ principalId: "prn_alice", lastActiveAt: "t1" }];
-    expect(
-      nextPresenceRoster(current, { eventType: "chat.presence", data: null }),
-    ).toBe(current);
+    expect(nextPresenceRoster(current, { eventType: "chat.presence", data: null })).toBe(current);
   });
 });
diff --git a/packages/chat-ui/test/workbench-settings-retry.test.tsx b/packages/chat-ui/test/workbench-settings-retry.test.tsx
index 37bf616219..8020309141 100644
--- a/packages/chat-ui/test/workbench-settings-retry.test.tsx
+++ b/packages/chat-ui/test/workbench-settings-retry.test.tsx
@@ -47,12 +47,9 @@ afterEach(() => {
   }
 });
 
-const settle = () =>
-  act(() => new Promise((resolve) => setTimeout(resolve, 10)));
+const settle = () => act(() => new Promise((resolve) => setTimeout(resolve, 10)));
 
-function baseProps(
-  overrides: Partial<Parameters<typeof WorkbenchSettingsSurface>[0]> = {},
-) {
+function baseProps(overrides: Partial<Parameters<typeof WorkbenchSettingsSurface>[0]> = {}) {
   return {
     tenantId: "tnt_1",
     workbenchId: "ch_1",
diff --git a/packages/chat-ui/test/zero-refetch-on-stream-event.test.tsx b/packages/chat-ui/test/zero-refetch-on-stream-event.test.tsx
index 177647271d..52ff883d9f 100644
--- a/packages/chat-ui/test/zero-refetch-on-stream-event.test.tsx
+++ b/packages/chat-ui/test/zero-refetch-on-stream-event.test.tsx
@@ -25,10 +25,7 @@ class StubEventSource {
     StubEventSource.instances.push(this);
   }
 
-  addEventListener(
-    eventType: string,
-    listener: (message: MessageEvent) => void,
-  ) {
+  addEventListener(eventType: string, listener: (message: MessageEvent) => void) {
     this.listeners.set(eventType, listener);
   }
 
@@ -87,8 +84,7 @@ function stubFetch() {
     if (/\/chat\/workbenches\?kind=workbench$/.test(path)) {
       return json({ items: [WORKBENCH_WIRE] });
     }
-    if (/\/chat\/workbenches\?kind=chat$/.test(path))
-      return json({ items: [] });
+    if (/\/chat\/workbenches\?kind=chat$/.test(path)) return json({ items: [] });
     if (/\/chat\/workbenches\/[^/]+\/threads$/.test(path)) {
       return json({ rootThreadId: "", items: [] });
     }
@@ -104,15 +100,10 @@ function stubFetch() {
       }
       return json({ items: [] });
     }
-    if (/\/chat\/workbenches\/[^/]+\/pins$/.test(path))
-      return json({ items: [] });
+    if (/\/chat\/workbenches\/[^/]+\/pins$/.test(path)) return json({ items: [] });
     if (/\/chat\/workbenches\/[^/]+\/read-state$/.test(path)) return json({});
-    if (/\/chat\/workbenches\/[^/]+\/invitable$/.test(path))
-      return json({ items: [] });
-    if (
-      /\/chat\/workbenches\/[^/]+\/presence$/.test(path) &&
-      init?.method === "POST"
-    ) {
+    if (/\/chat\/workbenches\/[^/]+\/invitable$/.test(path)) return json({ items: [] });
+    if (/\/chat\/workbenches\/[^/]+\/presence$/.test(path) && init?.method === "POST") {
       return json({});
     }
     if (/\/mailbox\/me\/threads/.test(path)) {
@@ -179,9 +170,7 @@ describe("zero refetches on a stream event, post-hydration (CL-6328 §6/1.2)", (
     });
     await harness.settle();
 
-    const textarea = harness.container.querySelector(
-      ".chat-composer-input",
-    ) as HTMLTextAreaElement;
+    const textarea = harness.container.querySelector(".chat-composer-input") as HTMLTextAreaElement;
     const setter = Object.getOwnPropertyDescriptor(
       window.HTMLTextAreaElement.prototype,
       "value",
@@ -221,9 +210,7 @@ describe("zero refetches on a stream event, post-hydration (CL-6328 §6/1.2)", (
 
     // No refetch triggered by the echo, and no duplicate bubble.
     expect(feedRefetchCount).toBe(feedRefetchCountAfterSend);
-    const bubbles = harness.container.querySelectorAll(
-      '[data-own="true"] .chat-bubble',
-    );
+    const bubbles = harness.container.querySelectorAll('[data-own="true"] .chat-bubble');
     expect(bubbles).toHaveLength(1);
     harness.unmount();
   });
diff --git a/packages/chat/package.json b/packages/chat/package.json
index 1f539602e8..73397c6b4e 100644
--- a/packages/chat/package.json
+++ b/packages/chat/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/chat",
+  "version": "0.0.1",
   "private": true,
   "description": "Chat package scaffold",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
@@ -42,11 +42,13 @@
     "@corbits/approvals": "workspace:*",
     "@corbits/collections": "workspace:*",
     "@corbits/commands": "workspace:*",
+    "@corbits/connections": "workspace:*",
     "@corbits/error-sink": "workspace:*",
     "@corbits/hub-api-client": "workspace:*",
     "@corbits/mailbox": "github:corbitsdev/corbits-mailbox#bc964040fa42ffe4e5d5004f87edaab6486e5d60",
     "@corbits/memory": "github:corbitsdev/corbits-memory#9e6f213fa2c002b531d3f6af1aa0abd737b8afe3",
     "@corbits/turn-artifacts": "workspace:*",
+    "@corbits/url-path": "workspace:*",
     "@corbits/workflows": "workspace:*",
     "@intx/agent": "workspace:*",
     "@intx/authz": "0.3.0",
@@ -60,8 +62,6 @@
     "@intx/types": "workspace:*",
     "@intx/workflow": "workspace:*",
     "@intx/workflow-deploy": "workspace:*",
-    "@corbits/url-path": "workspace:*",
-    "@corbits/connections": "workspace:*",
     "arktype": "catalog:",
     "drizzle-orm": "catalog:",
     "hono": "catalog:",
diff --git a/packages/chat/src/agent-binding.test.ts b/packages/chat/src/agent-binding.test.ts
index e9967fb04f..719f3a65e4 100644
--- a/packages/chat/src/agent-binding.test.ts
+++ b/packages/chat/src/agent-binding.test.ts
@@ -49,9 +49,7 @@ function fakeDb(rows: LaunchRow[]) {
         where: (predicate: unknown) => ({
           limit: async () => {
             const value = matchingValue(predicate);
-            return rows.filter(
-              (row) => row.instanceId === value || row.currentRunId === value,
-            );
+            return rows.filter((row) => row.instanceId === value || row.currentRunId === value);
           },
         }),
       }),
@@ -94,11 +92,7 @@ describe("readBindingByAddress", () => {
 
   test("is undefined for an address this package never launched", async () => {
     expect(
-      await readBindingByAddress(
-        fakeDb([relaunched]),
-        "echo_1@acme.example",
-        "ten_1",
-      ),
+      await readBindingByAddress(fakeDb([relaunched]), "echo_1@acme.example", "ten_1"),
     ).toBeUndefined();
   });
 });
@@ -138,32 +132,25 @@ describe("readBindingByAddress: tenant scoping (CL-7474)", () => {
   });
 
   test("a bench invite in tenant B never resolves tenant A's launch", async () => {
-    expect(
-      await readBindingByAddress(db, "run_a1@acme.example", "tnt_b"),
-    ).toBeUndefined();
-    expect(
-      await readBindingByAddress(db, "run_b1@acme.example", "tnt_a"),
-    ).toBeUndefined();
+    expect(await readBindingByAddress(db, "run_a1@acme.example", "tnt_b")).toBeUndefined();
+    expect(await readBindingByAddress(db, "run_b1@acme.example", "tnt_a")).toBeUndefined();
   });
 });
 
 describe("readBindingByAddressAnyTenant", () => {
   test("the address-only resolution event-stream discovery needs, with no tenant to check against", async () => {
-    const anyTenantDb = fakeDb([
-      { ...relaunched, instanceId: "run_a1", currentRunId: "run_a1" },
-    ]);
+    const anyTenantDb = fakeDb([{ ...relaunched, instanceId: "run_a1", currentRunId: "run_a1" }]);
     expect(
-      (await readBindingByAddressAnyTenant(anyTenantDb, "run_a1@acme.example"))
-        ?.tenantId,
+      (await readBindingByAddressAnyTenant(anyTenantDb, "run_a1@acme.example"))?.tenantId,
     ).toBe("ten_1");
   });
 });
 
 describe("resolveRoomAddress", () => {
   test("leaves a non-participant address alone", async () => {
-    expect(
-      await resolveRoomAddress(fakeDb([relaunched]), "echo_1@acme.example"),
-    ).toBe("echo_1@acme.example");
+    expect(await resolveRoomAddress(fakeDb([relaunched]), "echo_1@acme.example")).toBe(
+      "echo_1@acme.example",
+    );
   });
 });
 
diff --git a/packages/chat/src/agent-binding.ts b/packages/chat/src/agent-binding.ts
index 28637507da..a70c58dbde 100644
--- a/packages/chat/src/agent-binding.ts
+++ b/packages/chat/src/agent-binding.ts
@@ -174,8 +174,7 @@ async function readBindingRowByAddress(
   const domain = requireDomain(address);
   const localPart = localPartOf(address);
   const byStableId = await readLaunchRow(db, "instanceId", localPart);
-  const row =
-    byStableId ?? (await readLaunchRow(db, "currentRunId", localPart));
+  const row = byStableId ?? (await readLaunchRow(db, "currentRunId", localPart));
   return row === undefined ? undefined : { row, domain };
 }
 
@@ -185,18 +184,12 @@ async function readBindingRowByAddress(
  * package owns — an echo instance on the shared event stream is not
  * this mapping's business.
  */
-export async function resolveRoomAddress(
-  db: DB["db"],
-  liveAddress: string,
-): Promise<string> {
+export async function resolveRoomAddress(db: DB["db"], liveAddress: string): Promise<string> {
   const binding = await readBindingByAddressAnyTenant(db, liveAddress);
   return binding?.roomAddress ?? liveAddress;
 }
 
-async function readRun(
-  db: DB["db"],
-  runId: string,
-): Promise<LiveAgent["run"] | undefined> {
+async function readRun(db: DB["db"], runId: string): Promise<LiveAgent["run"] | undefined> {
   return db.query.workflowRun.findFirst({ where: eq(workflowRun.id, runId) });
 }
 
@@ -244,10 +237,7 @@ export async function resolveLiveByStableIdAnyTenant(
   return row === undefined ? undefined : resolveLiveRunForRow(db, row);
 }
 
-async function resolveLiveRunForRow(
-  db: DB["db"],
-  row: LaunchRow,
-): Promise<LiveAgent | undefined> {
+async function resolveLiveRunForRow(db: DB["db"], row: LaunchRow): Promise<LiveAgent | undefined> {
   const run = await readRun(db, row.currentRunId);
   if (run === undefined || run.address === null) return undefined;
   return { binding: bindingFrom(row, requireDomain(run.address)), run };
@@ -265,9 +255,7 @@ export async function findStandingLaunchByDefinition(
   input: {
     readonly tenantId: string;
     readonly definitionId: string;
-    readonly resolveDefinitionAssetId: (
-      definitionId: string,
-    ) => Promise<string | undefined>;
+    readonly resolveDefinitionAssetId: (definitionId: string) => Promise<string | undefined>;
   },
 ): Promise<AgentBinding | undefined> {
   const rows = await db
@@ -275,9 +263,7 @@ export async function findStandingLaunchByDefinition(
     .from(workbenchLaunch)
     .where(eq(workbenchLaunch.tenantId, input.tenantId))
     .orderBy(asc(workbenchLaunch.createdAt));
-  const invitedAssetId = await input.resolveDefinitionAssetId(
-    input.definitionId,
-  );
+  const invitedAssetId = await input.resolveDefinitionAssetId(input.definitionId);
   for (const row of rows) {
     const run = await readRun(db, row.currentRunId);
     if (run === undefined || run.address === null) continue;
@@ -369,9 +355,7 @@ export async function repointBinding(
   newRunId: string,
   sourcesDigest: string,
 ): Promise<void> {
-  const history = [...binding.priorRunIds, binding.currentRunId].slice(
-    -PRIOR_RUN_HISTORY_LIMIT,
-  );
+  const history = [...binding.priorRunIds, binding.currentRunId].slice(-PRIOR_RUN_HISTORY_LIMIT);
   await db
     .update(workbenchLaunch)
     .set({ currentRunId: newRunId, priorRunIds: history, sourcesDigest })
@@ -430,10 +414,7 @@ export async function listLaunchesForTenant(
  * a migration, and an unbounded one on a large tenant would turn every
  * boot into a deploy storm.
  */
-export async function listLaunchesBeyondWake(
-  db: DB["db"],
-  limit: number,
-): Promise<LiveAgent[]> {
+export async function listLaunchesBeyondWake(db: DB["db"], limit: number): Promise<LiveAgent[]> {
   const rows = await db.select().from(workbenchLaunch).limit(limit);
   const dead: LiveAgent[] = [];
   for (const row of rows) {
diff --git a/packages/chat/src/agent-dm-mode.ts b/packages/chat/src/agent-dm-mode.ts
index a447ee87b3..c6458782aa 100644
--- a/packages/chat/src/agent-dm-mode.ts
+++ b/packages/chat/src/agent-dm-mode.ts
@@ -31,9 +31,7 @@ export const AGENT_DM_DEFINITION_ID_KEY = "chat/definitionId";
 /** The agent this DM was minted for, or `undefined` when the settings
  * carry no (string) definition id. Non-string values are not a DM's agent
  * — validation at the trust boundary, not a fallback path. */
-export function definitionIdOfSettings(
-  settings: Record<string, unknown>,
-): string | undefined {
+export function definitionIdOfSettings(settings: Record<string, unknown>): string | undefined {
   const value = settings[AGENT_DM_DEFINITION_ID_KEY];
   return typeof value === "string" ? value : undefined;
 }
@@ -44,8 +42,5 @@ export function definitionIdOfSettings(
 export function isAgentDmSettings(settings: Record<string, unknown>): boolean {
   const kind = settings["chat/kind"];
   const effectiveKind = typeof kind === "string" ? kind : AGENT_DM_KIND;
-  return (
-    effectiveKind === AGENT_DM_KIND &&
-    definitionIdOfSettings(settings) !== undefined
-  );
+  return effectiveKind === AGENT_DM_KIND && definitionIdOfSettings(settings) !== undefined;
 }
diff --git a/packages/chat/src/block-responses.test.ts b/packages/chat/src/block-responses.test.ts
index c787e6283b..ec551d969d 100644
--- a/packages/chat/src/block-responses.test.ts
+++ b/packages/chat/src/block-responses.test.ts
@@ -13,9 +13,7 @@ const KEY: BlockResponseKey = {
 describe("createInMemoryBlockResponseStore — notification claim/release", () => {
   test("claiming before any response is upserted for the key fails", async () => {
     const store = createInMemoryBlockResponseStore();
-    await expect(store.claimBlockResponseNotification(KEY)).resolves.toBe(
-      false,
-    );
+    await expect(store.claimBlockResponseNotification(KEY)).resolves.toBe(false);
   });
 
   test("the first claim after an upsert wins, returning a token", async () => {
@@ -35,9 +33,7 @@ describe("createInMemoryBlockResponseStore — notification claim/release", () =
       payload: { kind: "question", answer: "Staging" },
     });
     await store.claimBlockResponseNotification(KEY);
-    await expect(store.claimBlockResponseNotification(KEY)).resolves.toBe(
-      false,
-    );
+    await expect(store.claimBlockResponseNotification(KEY)).resolves.toBe(false);
   });
 
   test("release with the holder's own token frees the claim for a fresh claim", async () => {
@@ -48,9 +44,7 @@ describe("createInMemoryBlockResponseStore — notification claim/release", () =
     });
     const token = await store.claimBlockResponseNotification(KEY);
     await store.releaseBlockResponseNotification(KEY, token as string);
-    await expect(store.claimBlockResponseNotification(KEY)).resolves.not.toBe(
-      false,
-    );
+    await expect(store.claimBlockResponseNotification(KEY)).resolves.not.toBe(false);
   });
 
   test("release with a stale token — one a second claim already replaced — never evicts the live claim", async () => {
@@ -73,9 +67,7 @@ describe("createInMemoryBlockResponseStore — notification claim/release", () =
     // A caller presenting the first (now stale) token must never release
     // the second claim it does not hold.
     await store.releaseBlockResponseNotification(KEY, firstToken as string);
-    await expect(store.claimBlockResponseNotification(KEY)).resolves.toBe(
-      false,
-    );
+    await expect(store.claimBlockResponseNotification(KEY)).resolves.toBe(false);
   });
 
   test("releasing with a token nobody ever held is a harmless no-op", async () => {
@@ -87,9 +79,7 @@ describe("createInMemoryBlockResponseStore — notification claim/release", () =
     await store.claimBlockResponseNotification(KEY);
     await store.releaseBlockResponseNotification(KEY, "some_other_token");
     // The real claim is still held -- a fresh claim attempt still loses.
-    await expect(store.claimBlockResponseNotification(KEY)).resolves.toBe(
-      false,
-    );
+    await expect(store.claimBlockResponseNotification(KEY)).resolves.toBe(false);
   });
 
   test("changing the answer keeps the row unclaimable-again once already notified", async () => {
@@ -107,8 +97,6 @@ describe("createInMemoryBlockResponseStore — notification claim/release", () =
       ...KEY,
       payload: { kind: "question", answer: "Production" },
     });
-    await expect(store.claimBlockResponseNotification(KEY)).resolves.toBe(
-      false,
-    );
+    await expect(store.claimBlockResponseNotification(KEY)).resolves.toBe(false);
   });
 });
diff --git a/packages/chat/src/block-responses.ts b/packages/chat/src/block-responses.ts
index 9231633b05..09ddc80d73 100644
--- a/packages/chat/src/block-responses.ts
+++ b/packages/chat/src/block-responses.ts
@@ -73,9 +73,7 @@ export interface UpsertBlockResponseInput extends BlockResponseKey {
 }
 
 export interface BlockResponseStore {
-  upsertBlockResponse(
-    input: UpsertBlockResponseInput,
-  ): Promise<BlockResponseRow>;
+  upsertBlockResponse(input: UpsertBlockResponseInput): Promise<BlockResponseRow>;
   /**
    * Atomically claims the right to send a question's answer into the
    * workbench and dispatch the asking agent's turn: flips `notifiedAt`
@@ -85,9 +83,7 @@ export interface BlockResponseStore {
    * a second dispatch. The token must be presented back to
    * `releaseBlockResponseNotification` to release this exact claim.
    */
-  claimBlockResponseNotification(
-    key: BlockResponseKey,
-  ): Promise<string | false>;
+  claimBlockResponseNotification(key: BlockResponseKey): Promise<string | false>;
   /**
    * Releases a claim this call took but failed to act on (the send
    * threw), resetting `notifiedAt` to null so a retried submission can
@@ -95,10 +91,7 @@ export interface BlockResponseStore {
    * a caller can never release a claim it does not hold. Never called
    * after a successful send.
    */
-  releaseBlockResponseNotification(
-    key: BlockResponseKey,
-    token: string,
-  ): Promise<void>;
+  releaseBlockResponseNotification(key: BlockResponseKey, token: string): Promise<void>;
   /**
    * Every response on file for one block instance — including every other
    * principal's raw payload. Only ever called from inside a route handler
@@ -175,12 +168,7 @@ export function createInMemoryBlockResponseStore(): BlockResponseStore {
         notifiedAt: existing?.notifiedAt ?? null,
       };
       rows.set(key, row);
-      const blk = blockKey(
-        input.tenantId,
-        input.workbenchId,
-        input.messageId,
-        input.blockId,
-      );
+      const blk = blockKey(input.tenantId, input.workbenchId, input.messageId, input.blockId);
       const keys = byBlock.get(blk) ?? new Set<string>();
       keys.add(key);
       byBlock.set(blk, keys);
@@ -207,9 +195,7 @@ export function createInMemoryBlockResponseStore(): BlockResponseStore {
     },
 
     async listBlockResponses(tenantId, workbenchId, messageId, blockId) {
-      const keys = byBlock.get(
-        blockKey(tenantId, workbenchId, messageId, blockId),
-      );
+      const keys = byBlock.get(blockKey(tenantId, workbenchId, messageId, blockId));
       if (keys === undefined) return [];
       return [...keys].flatMap((key) => {
         const row = rows.get(key);
@@ -219,9 +205,8 @@ export function createInMemoryBlockResponseStore(): BlockResponseStore {
   };
 }
 
-export type BlockResponseDb<
-  TSchema extends Record<string, unknown> = Record<string, never>,
-> = PostgresJsDatabase<TSchema>;
+export type BlockResponseDb<TSchema extends Record<string, unknown> = Record<string, never>> =
+  PostgresJsDatabase<TSchema>;
 
 function mapRow(row: typeof blockResponses.$inferSelect): BlockResponseRow {
   return {
@@ -247,9 +232,9 @@ function keyClause(key: BlockResponseKey) {
   );
 }
 
-export function createDrizzleBlockResponseStore<
-  TSchema extends Record<string, unknown>,
->(db: BlockResponseDb<TSchema>): BlockResponseStore {
+export function createDrizzleBlockResponseStore<TSchema extends Record<string, unknown>>(
+  db: BlockResponseDb<TSchema>,
+): BlockResponseStore {
   return {
     async upsertBlockResponse(input) {
       const now = new Date();
@@ -296,9 +281,7 @@ export function createDrizzleBlockResponseStore<
       await db
         .update(blockResponses)
         .set({ notifiedAt: null, notificationClaimToken: null })
-        .where(
-          and(keyClause(key), eq(blockResponses.notificationClaimToken, token)),
-        );
+        .where(and(keyClause(key), eq(blockResponses.notificationClaimToken, token)));
     },
 
     async listBlockResponses(tenantId, workbenchId, messageId, blockId) {
diff --git a/packages/chat/src/blocks.test.ts b/packages/chat/src/blocks.test.ts
index d3e3844e15..6482008990 100644
--- a/packages/chat/src/blocks.test.ts
+++ b/packages/chat/src/blocks.test.ts
@@ -253,11 +253,7 @@ describe("parseBlock hostile inputs", () => {
     });
     expect(result.ok).toBe(true);
     if (!result.ok || result.block.type !== "poll") throw new Error("shape");
-    expect(Object.keys(result.block.data).sort()).toEqual([
-      "choices",
-      "pollId",
-      "title",
-    ]);
+    expect(Object.keys(result.block.data).sort()).toEqual(["choices", "pollId", "title"]);
     const choice = result.block.data.choices[0];
     if (choice === undefined) throw new Error("missing choice");
     expect(Object.keys(choice).sort()).toEqual(["id", "label"]);
@@ -274,15 +270,7 @@ describe("parseBlock hostile inputs", () => {
   });
 
   test("non-object data for every known type fails cleanly", () => {
-    for (const t of [
-      "approve",
-      "steps",
-      "metrics",
-      "poll",
-      "form",
-      "stream",
-      "question",
-    ]) {
+    for (const t of ["approve", "steps", "metrics", "poll", "form", "stream", "question"]) {
       for (const data of [null, undefined, 0, "s", [], () => {}]) {
         const result = parseBlock({ type: t, data });
         expect(result.ok).toBe(false);
@@ -306,11 +294,7 @@ describe("parseBlock — question", () => {
     if (!result.ok) throw new Error(result.summary);
     expect(result.block.type).toBe("question");
     if (result.block.type !== "question") throw new Error("wrong type");
-    expect(result.block.data.options).toEqual([
-      "Staging",
-      "Production",
-      "Canary",
-    ]);
+    expect(result.block.data.options).toEqual(["Staging", "Production", "Canary"]);
     expect(result.block.data.allowFreeText).toBeUndefined();
   });
 
@@ -363,9 +347,7 @@ describe("parseBlock — question", () => {
     expect(result.ok).toBe(true);
     if (!result.ok) throw new Error(result.summary);
     if (result.block.type !== "question") throw new Error("wrong type");
-    expect(
-      (result.block.data as Record<string, unknown>)["tally"],
-    ).toBeUndefined();
+    expect((result.block.data as Record<string, unknown>)["tally"]).toBeUndefined();
   });
 });
 
@@ -419,9 +401,7 @@ describe("parseBlock connect-github", () => {
     });
     expect(result.ok).toBe(true);
     if (!result.ok) throw new Error(result.summary);
-    expect(
-      (result.block.data as Record<string, unknown>)["repos"],
-    ).toBeUndefined();
+    expect((result.block.data as Record<string, unknown>)["repos"]).toBeUndefined();
   });
 });
 
@@ -489,8 +469,6 @@ describe("parseBlock connect-service", () => {
     });
     expect(result.ok).toBe(true);
     if (!result.ok) throw new Error(result.summary);
-    expect(
-      (result.block.data as Record<string, unknown>)["state"],
-    ).toBeUndefined();
+    expect((result.block.data as Record<string, unknown>)["state"]).toBeUndefined();
   });
 });
diff --git a/packages/chat/src/blocks.ts b/packages/chat/src/blocks.ts
index 7e109548a9..8f652cc83a 100644
--- a/packages/chat/src/blocks.ts
+++ b/packages/chat/src/blocks.ts
@@ -167,9 +167,7 @@ const ConnectGithubConnectedData = type({
   "steps?": OnboardingStepLabel.array(),
 }).onDeepUndeclaredKey("delete");
 
-export const ConnectGithubBlockData = ConnectGithubDisconnectedData.or(
-  ConnectGithubConnectedData,
-);
+export const ConnectGithubBlockData = ConnectGithubDisconnectedData.or(ConnectGithubConnectedData);
 export type ConnectGithubBlockData = typeof ConnectGithubBlockData.infer;
 
 // An agent-authored "connect this service" card (CL-6393), the
diff --git a/packages/chat/src/codec.ts b/packages/chat/src/codec.ts
index a8b82b0d88..bf7f9f4c82 100644
--- a/packages/chat/src/codec.ts
+++ b/packages/chat/src/codec.ts
@@ -241,10 +241,7 @@ function blobToText(blob: string | Uint8Array): string {
  * fetching its bytes, so large files are never pulled into memory just
  * to decode a message list.
  */
-export async function decodeMail(
-  mail: unknown,
-  opts: { fetchBlob: FetchBlob },
-): Promise<Part[]> {
+export async function decodeMail(mail: unknown, opts: { fetchBlob: FetchBlob }): Promise<Part[]> {
   const parsed = MailReadContent(mail);
   if (parsed instanceof type.errors) {
     throw new Error(`invalid mail read content: ${parsed.summary}`);
@@ -282,10 +279,7 @@ export async function decodeMail(
     const head = text.slice(0, separator);
     const headerShaped = head
       .split("\r\n")
-      .every(
-        (line) =>
-          /^[\x21-\x39\x3b-\x7e]+:\s?.*$/.test(line) || /^[ \t]/.test(line),
-      );
+      .every((line) => /^[\x21-\x39\x3b-\x7e]+:\s?.*$/.test(line) || /^[ \t]/.test(line));
     if (!headerShaped || !/^content-/im.test(head)) return text;
     const body = text.slice(separator + 4);
     // The raw slice was never transfer-decoded either; honor the encoding
@@ -300,9 +294,7 @@ export async function decodeMail(
     const label = attachment.name ?? attachment.blobId;
 
     if (attachment.type === "application/json") {
-      const text = stripLeafMimeHeaders(
-        blobToText(await opts.fetchBlob(attachment.blobId)),
-      );
+      const text = stripLeafMimeHeaders(blobToText(await opts.fetchBlob(attachment.blobId)));
       let json: unknown;
       try {
         json = JSON.parse(text);
@@ -319,9 +311,7 @@ export async function decodeMail(
     }
 
     if (attachment.type === "text/plain") {
-      const text = stripLeafMimeHeaders(
-        blobToText(await opts.fetchBlob(attachment.blobId)),
-      );
+      const text = stripLeafMimeHeaders(blobToText(await opts.fetchBlob(attachment.blobId)));
       parts.push({ kind: "text", text });
       continue;
     }
diff --git a/packages/chat/src/connect-pending.ts b/packages/chat/src/connect-pending.ts
index e6c9b2bee8..a50ff547ed 100644
--- a/packages/chat/src/connect-pending.ts
+++ b/packages/chat/src/connect-pending.ts
@@ -25,16 +25,9 @@ import { localPartOf } from "./agent-address";
 import { ConnectServiceBlockData } from "./blocks";
 import { isAgentAddress } from "./mentions";
 import type { Part as PartType } from "./parts";
-import {
-  postRoomMessage,
-  type RoomMessage,
-  type RoomMessageStore,
-} from "./room-messages";
+import { postRoomMessage, type RoomMessage, type RoomMessageStore } from "./room-messages";
 import type { ChatStore } from "./store";
-import {
-  dispatchTurn,
-  type SendWorkbenchMessageDeps,
-} from "./workbench-service";
+import { dispatchTurn, type SendWorkbenchMessageDeps } from "./workbench-service";
 import { participantsOf } from "./workbench-settings";
 
 export const CONNECTIONS_PENDING_KEY = "connections/pending";
@@ -54,27 +47,20 @@ const TEMPLATE_PENDING_CONNECTIONS_KEY = "template/pendingConnections";
 
 const PendingConnections = type("string[]");
 
-function pendingConnectionsAt(
-  settings: Record<string, unknown>,
-  key: string,
-): readonly string[] {
+function pendingConnectionsAt(settings: Record<string, unknown>, key: string): readonly string[] {
   const parsed = PendingConnections(settings[key]);
   if (parsed instanceof type.errors) return [];
   return parsed;
 }
 
-export function pendingConnectionsOf(
-  settings: Record<string, unknown>,
-): readonly string[] {
+export function pendingConnectionsOf(settings: Record<string, unknown>): readonly string[] {
   return pendingConnectionsAt(settings, CONNECTIONS_PENDING_KEY);
 }
 
 /** Connector ids named by `connect-service` block parts in a message —
  * parsed through the block's own schema so a malformed block registers
  * nothing. */
-export function connectServiceConnectorIds(
-  parts: readonly PartType[],
-): readonly string[] {
+export function connectServiceConnectorIds(parts: readonly PartType[]): readonly string[] {
   const ids: string[] = [];
   for (const part of parts) {
     if (part.kind !== "block" || part.block.type !== "connect-service") {
@@ -92,19 +78,14 @@ export function connectServiceConnectorIds(
  * matching strips the prefix from both sides so the card settles
  * whichever spelling registered it. */
 function bareConnectorId(connectorId: string): string {
-  return connectorId.startsWith("mcp:")
-    ? connectorId.slice("mcp:".length)
-    : connectorId;
+  return connectorId.startsWith("mcp:") ? connectorId.slice("mcp:".length) : connectorId;
 }
 
 export type SettleConnectedServiceDeps = Pick<
   SendWorkbenchMessageDeps,
   "platform" | "agentTurns" | "roomMessages" | "publish"
 > & {
-  readonly store: Pick<
-    ChatStore,
-    "listWorkbenchSettings" | "updateWorkbenchSettings"
-  >;
+  readonly store: Pick<ChatStore, "listWorkbenchSettings" | "updateWorkbenchSettings">;
 };
 
 export type SettleConnectedServiceInput = {
@@ -121,8 +102,7 @@ function hostAgentAddress(
 ): string | undefined {
   return participantsOf(settings).find(
     (participant) =>
-      isAgentAddress(participant.address) &&
-      localPartOf(participant.address) !== principalId,
+      isAgentAddress(participant.address) && localPartOf(participant.address) !== principalId,
   )?.address;
 }
 
@@ -137,9 +117,7 @@ async function existingRequestMessageIds(
   input: { readonly tenantId: string; readonly workbenchId: string },
 ): Promise<readonly string[]> {
   const listed = await roomMessages.listMessages(input);
-  const lastUser = listed.items.find(
-    (message) => message.senderPrincipalId !== null,
-  );
+  const lastUser = listed.items.find((message) => message.senderPrincipalId !== null);
   const lastAgent = listed.items.find((message) => message.runId !== null);
   return [lastUser, lastAgent]
     .filter((message): message is RoomMessage => message !== undefined)
@@ -160,19 +138,14 @@ export async function settleConnectedService(
   const isSettled = (entry: string) => bareConnectorId(entry) === connected;
   for (const row of rows) {
     const pending = pendingConnectionsOf(row.settings);
-    const templatePending = pendingConnectionsAt(
-      row.settings,
-      TEMPLATE_PENDING_CONNECTIONS_KEY,
-    );
+    const templatePending = pendingConnectionsAt(row.settings, TEMPLATE_PENDING_CONNECTIONS_KEY);
     const matchedPending = pending.some(isSettled);
     const matchedTemplatePending = templatePending.some(isSettled);
     if (!matchedPending && !matchedTemplatePending) continue;
 
     const settingsPatch: Record<string, unknown> = { ...row.settings };
     if (matchedPending) {
-      settingsPatch[CONNECTIONS_PENDING_KEY] = pending.filter(
-        (entry) => !isSettled(entry),
-      );
+      settingsPatch[CONNECTIONS_PENDING_KEY] = pending.filter((entry) => !isSettled(entry));
     }
     if (matchedTemplatePending) {
       settingsPatch[TEMPLATE_PENDING_CONNECTIONS_KEY] = templatePending.filter(
@@ -229,10 +202,10 @@ export async function settleConnectedService(
 
     if (agentAddress === undefined) continue;
 
-    const requestMessageIds = await existingRequestMessageIds(
-      deps.roomMessages,
-      { tenantId: input.tenantId, workbenchId: row.workbenchId },
-    );
+    const requestMessageIds = await existingRequestMessageIds(deps.roomMessages, {
+      tenantId: input.tenantId,
+      workbenchId: row.workbenchId,
+    });
     await dispatchTurn(deps, {
       tenantId: input.tenantId,
       workbenchId: row.workbenchId,
diff --git a/packages/chat/src/consumer-inference-text.ts b/packages/chat/src/consumer-inference-text.ts
index 7999ae4978..4dbea5a2d5 100644
--- a/packages/chat/src/consumer-inference-text.ts
+++ b/packages/chat/src/consumer-inference-text.ts
@@ -58,9 +58,7 @@ export function consumerFacingInferenceText(raw: string): string {
 
 /** True when `text` is (or starts with) a classified inference-failure preamble. */
 export function isClassifiedInferenceFailureText(text: string): boolean {
-  return CLASSIFIED_INFERENCE_FAILURE_PREAMBLES.some((preamble) =>
-    text.startsWith(preamble),
-  );
+  return CLASSIFIED_INFERENCE_FAILURE_PREAMBLES.some((preamble) => text.startsWith(preamble));
 }
 
 /**
diff --git a/packages/chat/src/credential-cipher-tag.test.ts b/packages/chat/src/credential-cipher-tag.test.ts
index 2660df3fa5..5a0f23e80b 100644
--- a/packages/chat/src/credential-cipher-tag.test.ts
+++ b/packages/chat/src/credential-cipher-tag.test.ts
@@ -16,18 +16,12 @@ describe("tagCredentialCipher", () => {
   });
 
   test("refuses to mint a tag when the cipher is missing", () => {
-    expect(() => tagCredentialCipher(undefined)).toThrow(
-      /missing or has the wrong shape/,
-    );
-    expect(() => tagCredentialCipher(null)).toThrow(
-      /missing or has the wrong shape/,
-    );
+    expect(() => tagCredentialCipher(undefined)).toThrow(/missing or has the wrong shape/);
+    expect(() => tagCredentialCipher(null)).toThrow(/missing or has the wrong shape/);
   });
 
   test("refuses to mint a tag when the cipher has the wrong shape", () => {
-    expect(() => tagCredentialCipher({})).toThrow(
-      /missing or has the wrong shape/,
-    );
+    expect(() => tagCredentialCipher({})).toThrow(/missing or has the wrong shape/);
     expect(() => tagCredentialCipher({ encrypt: async () => "" })).toThrow(
       /missing or has the wrong shape/,
     );
diff --git a/packages/chat/src/credential-cipher-tag.ts b/packages/chat/src/credential-cipher-tag.ts
index 9409bbb180..f451a693a1 100644
--- a/packages/chat/src/credential-cipher-tag.ts
+++ b/packages/chat/src/credential-cipher-tag.ts
@@ -5,9 +5,7 @@ import type { CredentialCipher } from "@intx/types";
 function isCredentialCipher(value: unknown): value is CredentialCipher {
   if (value === null || typeof value !== "object") return false;
   if (!("encrypt" in value) || !("decrypt" in value)) return false;
-  return (
-    typeof value.encrypt === "function" && typeof value.decrypt === "function"
-  );
+  return typeof value.encrypt === "function" && typeof value.decrypt === "function";
 }
 
 export function tagCredentialCipher(cipher: unknown): CredentialCipher {
diff --git a/packages/chat/src/crypto-cache.ts b/packages/chat/src/crypto-cache.ts
index 9df678cda6..3d6a785fc8 100644
--- a/packages/chat/src/crypto-cache.ts
+++ b/packages/chat/src/crypto-cache.ts
@@ -28,9 +28,7 @@ export function createCryptoProviderCache(options?: {
         providers.set(key, pending);
         return pending;
       }
-      const minted = generateKeyPair().then((keyPair) =>
-        createEd25519Crypto(keyPair),
-      );
+      const minted = generateKeyPair().then((keyPair) => createEd25519Crypto(keyPair));
       providers.set(key, minted);
       return minted;
     },
diff --git a/packages/chat/src/display-name.test.ts b/packages/chat/src/display-name.test.ts
index b65cf3ffc0..f2d9c725a0 100644
--- a/packages/chat/src/display-name.test.ts
+++ b/packages/chat/src/display-name.test.ts
@@ -26,18 +26,16 @@ describe("deriveDisplayName", () => {
   });
 
   test("humanizes the slug when description is absent or blank", () => {
-    expect(deriveDisplayName({ name: "architecture-reviewer" })).toBe(
+    expect(deriveDisplayName({ name: "architecture-reviewer" })).toBe("Architecture Reviewer");
+    expect(deriveDisplayName({ name: "architecture-reviewer", description: "   " })).toBe(
       "Architecture Reviewer",
     );
-    expect(
-      deriveDisplayName({ name: "architecture-reviewer", description: "   " }),
-    ).toBe("Architecture Reviewer");
   });
 
   test("throws rather than humanizing an internal run id into a fake name (CL-6471)", () => {
-    expect(() =>
-      deriveDisplayName({ name: "run_737a058d48006e2bde12559576f422e0" }),
-    ).toThrow(/internal identifier/);
+    expect(() => deriveDisplayName({ name: "run_737a058d48006e2bde12559576f422e0" })).toThrow(
+      /internal identifier/,
+    );
   });
 
   test("throws when the description itself is an internal id", () => {
diff --git a/packages/chat/src/display-name.ts b/packages/chat/src/display-name.ts
index 24eedf9112..59a9c158ed 100644
--- a/packages/chat/src/display-name.ts
+++ b/packages/chat/src/display-name.ts
@@ -53,9 +53,7 @@ export function deriveDisplayName(definition: {
 }): string {
   const parsed = DisplayNameSource(definition);
   if (parsed instanceof type.errors) {
-    throw new Error(
-      `deriveDisplayName: invalid agent definition: ${parsed.summary}`,
-    );
+    throw new Error(`deriveDisplayName: invalid agent definition: ${parsed.summary}`);
   }
   const description = parsed.description?.trim();
   if (description !== undefined && description !== "") {
diff --git a/packages/chat/src/federation-trust.ts b/packages/chat/src/federation-trust.ts
index 2b4ab8f229..9a04722ebd 100644
--- a/packages/chat/src/federation-trust.ts
+++ b/packages/chat/src/federation-trust.ts
@@ -13,9 +13,8 @@ import type { PostgresJsDatabase } from "drizzle-orm/postgres-js";
 import { generateId } from "@intx/hub-common";
 import { federationTrust, tenant } from "@intx/db/schema";
 
-export type FederationTrustDb<
-  TSchema extends Record<string, unknown> = Record<string, never>,
-> = PostgresJsDatabase<TSchema>;
+export type FederationTrustDb<TSchema extends Record<string, unknown> = Record<string, never>> =
+  PostgresJsDatabase<TSchema>;
 
 export interface FederationTrustStore {
   /** Upserts both directions of trust between the two tenants as
@@ -49,13 +48,10 @@ export interface FederationTrustStore {
  * The production `FederationTrustStore`, operating on `@intx/db`'s native
  * `federation_trust`/`tenant` tables.
  */
-export function createDrizzleFederationTrustStore<
-  TSchema extends Record<string, unknown>,
->(db: FederationTrustDb<TSchema>): FederationTrustStore {
-  async function upsertDirection(
-    fromTenantId: string,
-    toTenantId: string,
-  ): Promise<void> {
+export function createDrizzleFederationTrustStore<TSchema extends Record<string, unknown>>(
+  db: FederationTrustDb<TSchema>,
+): FederationTrustStore {
+  async function upsertDirection(fromTenantId: string, toTenantId: string): Promise<void> {
     const [existing] = await db
       .select({ id: federationTrust.id })
       .from(federationTrust)
@@ -120,18 +116,12 @@ export function createDrizzleFederationTrustStore<
       await db
         .delete(federationTrust)
         .where(
-          and(
-            eq(federationTrust.tenantId, tenantA),
-            eq(federationTrust.targetTenantId, tenantB),
-          ),
+          and(eq(federationTrust.tenantId, tenantA), eq(federationTrust.targetTenantId, tenantB)),
         );
       await db
         .delete(federationTrust)
         .where(
-          and(
-            eq(federationTrust.tenantId, tenantB),
-            eq(federationTrust.targetTenantId, tenantA),
-          ),
+          and(eq(federationTrust.tenantId, tenantB), eq(federationTrust.targetTenantId, tenantA)),
         );
     },
 
@@ -220,11 +210,7 @@ export function createInMemoryFederationTrustStore(): FederationTrustStore & {
     async resolveSharedViaParent(tenantA, tenantB) {
       const a = tenants.get(tenantA);
       const b = tenants.get(tenantB);
-      if (
-        a?.parentId === undefined ||
-        b?.parentId === undefined ||
-        a.parentId !== b.parentId
-      ) {
+      if (a?.parentId === undefined || b?.parentId === undefined || a.parentId !== b.parentId) {
         return undefined;
       }
       const parent = tenants.get(a.parentId);
diff --git a/packages/chat/src/id-leak-guard.test.ts b/packages/chat/src/id-leak-guard.test.ts
index 82d35aa2c8..31707f8d38 100644
--- a/packages/chat/src/id-leak-guard.test.ts
+++ b/packages/chat/src/id-leak-guard.test.ts
@@ -5,14 +5,9 @@ import { assertNoLeakedInternalId } from "./id-leak-guard";
 
 describe("assertNoLeakedInternalId", () => {
   test("passes real, human-authored text through untouched", () => {
+    expect(() => assertNoLeakedInternalId("Architecture reviewer", "a display name")).not.toThrow();
     expect(() =>
-      assertNoLeakedInternalId("Architecture reviewer", "a display name"),
-    ).not.toThrow();
-    expect(() =>
-      assertNoLeakedInternalId(
-        "Hi Alice, I'm Myra — your teammate here.",
-        "a greeting",
-      ),
+      assertNoLeakedInternalId("Hi Alice, I'm Myra — your teammate here.", "a greeting"),
     ).not.toThrow();
   });
 
@@ -26,19 +21,14 @@ describe("assertNoLeakedInternalId", () => {
       "gtk_737a058d48006e2bde12559576f422e0",
     ];
     for (const id of ids) {
-      expect(() => assertNoLeakedInternalId(id, "a name")).toThrow(
-        /internal identifier/,
-      );
+      expect(() => assertNoLeakedInternalId(id, "a name")).toThrow(/internal identifier/);
     }
   });
 
   test("catches the humanized (Title Cased) form the same id renders as once split", () => {
     // `humanizeSlug`'s exact transform: "run_737a058d..." -> "Run 737a058d..."
     expect(() =>
-      assertNoLeakedInternalId(
-        "Run 737a058d48006e2bde12559576f422e0",
-        "a participant name",
-      ),
+      assertNoLeakedInternalId("Run 737a058d48006e2bde12559576f422e0", "a participant name"),
     ).toThrow(/internal identifier/);
   });
 
@@ -53,8 +43,6 @@ describe("assertNoLeakedInternalId", () => {
 
   test("never flags a short, coincidental substring match", () => {
     // "runner" starts with "run" but not the "run_" id prefix + hex tail.
-    expect(() =>
-      assertNoLeakedInternalId("Runner McRunface", "a display name"),
-    ).not.toThrow();
+    expect(() => assertNoLeakedInternalId("Runner McRunface", "a display name")).not.toThrow();
   });
 });
diff --git a/packages/chat/src/index.ts b/packages/chat/src/index.ts
index 8d99c6358d..846656b667 100644
--- a/packages/chat/src/index.ts
+++ b/packages/chat/src/index.ts
@@ -32,26 +32,15 @@ export {
   settleConnectedService,
 } from "./connect-pending";
 
-export type {
-  SettleConnectedServiceDeps,
-  SettleConnectedServiceInput,
-} from "./connect-pending";
+export type { SettleConnectedServiceDeps, SettleConnectedServiceInput } from "./connect-pending";
 export { encodeParts, decodeParts, decodeMail, senderOf } from "./codec";
 export {
   CONSUMER_INFERENCE_FAILURE_NOTICE,
   consumerFacingInferenceText,
 } from "./consumer-inference-text";
-export type {
-  MailContent,
-  MailReadContent,
-  FetchBlob,
-  MailSender,
-} from "./codec";
+export type { MailContent, MailReadContent, FetchBlob, MailSender } from "./codec";
 
-export {
-  workbenchHostAssetName,
-  isWorkbenchHostDefinitionName,
-} from "./workbench-host-naming";
+export { workbenchHostAssetName, isWorkbenchHostDefinitionName } from "./workbench-host-naming";
 
 export {
   WORKBENCH_CONTROL_NAMESPACE,
@@ -61,10 +50,7 @@ export {
   parseControlPayload,
   applyControlPayload,
 } from "./settings-control";
-export type {
-  WorkbenchParticipantState,
-  ControlApplyResult,
-} from "./settings-control";
+export type { WorkbenchParticipantState, ControlApplyResult } from "./settings-control";
 
 export { presetForKind } from "./kinds";
 export type { WorkbenchKindPreset } from "./kinds";
@@ -92,10 +78,7 @@ export {
 export type { WorkbenchSubscriberRegistry } from "./workbench-events";
 
 export { createWorkbenchPresenceRegistry } from "./workbench-presence";
-export type {
-  WorkbenchPresenceRegistry,
-  PresenceMember,
-} from "./workbench-presence";
+export type { WorkbenchPresenceRegistry, PresenceMember } from "./workbench-presence";
 
 export {
   ChatMessageEventData,
@@ -108,10 +91,7 @@ export {
 } from "./stream-events";
 
 export { assembleTurnContext, contextItemFor } from "./turn-context";
-export type {
-  AssembleTurnContextInput,
-  TurnContextThreadScope,
-} from "./turn-context";
+export type { AssembleTurnContextInput, TurnContextThreadScope } from "./turn-context";
 export {
   AGENT_DM_DEFINITION_ID_KEY,
   AGENT_DM_KIND,
@@ -119,10 +99,7 @@ export {
   isAgentDmSettings,
 } from "./agent-dm-mode";
 export { recordSourcesDigest } from "./agent-binding";
-export {
-  createTurnCancelRegistry,
-  TurnCancelledError,
-} from "./turn-cancellation";
+export { createTurnCancelRegistry, TurnCancelledError } from "./turn-cancellation";
 export type { TurnCancelRegistry } from "./turn-cancellation";
 export type {
   WorkbenchEvents,
@@ -199,10 +176,7 @@ export { createInMemoryPinStore, createDrizzlePinStore } from "./pins";
 export type { PinRow, PinStore, PinDb, PinMessageInput } from "./pins";
 
 export { joinRunParticipant } from "./run-participant";
-export type {
-  JoinRunParticipantDeps,
-  JoinRunParticipantInput,
-} from "./run-participant";
+export type { JoinRunParticipantDeps, JoinRunParticipantInput } from "./run-participant";
 export {
   dispatchTurn,
   DEFAULT_TURN_DISPATCH_TIMEOUT_MS,
@@ -244,10 +218,7 @@ export {
   createDrizzleFederationTrustStore,
   createInMemoryFederationTrustStore,
 } from "./federation-trust";
-export type {
-  FederationTrustDb,
-  FederationTrustStore,
-} from "./federation-trust";
+export type { FederationTrustDb, FederationTrustStore } from "./federation-trust";
 
 export {
   createDrizzleWorkbenchShareStore,
@@ -265,10 +236,7 @@ export type {
 } from "./workbench-share";
 
 export { createHubChatPlatform } from "./platform-adapter";
-export type {
-  CreateHubChatPlatformDeps,
-  HubChatPlatform,
-} from "./platform-adapter";
+export type { CreateHubChatPlatformDeps, HubChatPlatform } from "./platform-adapter";
 export { createRunTriggerClient, RunTriggerError } from "./run-trigger-client";
 export type {
   RunTriggerClient,
@@ -291,16 +259,9 @@ export type {
   ToolGrantsForPins,
 } from "./pin-ports";
 export { sendRunMail } from "./send-run-mail";
-export type {
-  RunMailDeps,
-  SendRunMailParams,
-  SentRunMail,
-} from "./send-run-mail";
+export type { RunMailDeps, SendRunMailParams, SentRunMail } from "./send-run-mail";
 
-export {
-  createRelaunchNoticePoster,
-  relaunchNoticeText,
-} from "./relaunch-notice";
+export { createRelaunchNoticePoster, relaunchNoticeText } from "./relaunch-notice";
 export type { RelaunchNotice, RelaunchNoticePort } from "./relaunch-notice";
 
 export {
@@ -309,11 +270,7 @@ export {
   postRoomMessage,
   previewOf,
 } from "./room-messages";
-export type {
-  RoomMessage,
-  RoomMessageStore,
-  PostRoomMessageInput,
-} from "./room-messages";
+export type { RoomMessage, RoomMessageStore, PostRoomMessageInput } from "./room-messages";
 
 export { resolveWorkbenchIdForAgentFrame } from "./mail-headers";
 
diff --git a/packages/chat/src/inference-preferences.test.ts b/packages/chat/src/inference-preferences.test.ts
index f27443386e..09ad976fbb 100644
--- a/packages/chat/src/inference-preferences.test.ts
+++ b/packages/chat/src/inference-preferences.test.ts
@@ -46,12 +46,10 @@ function offering(
 
 describe("createWorkbenchHostInferencePreferencesResolver", () => {
   test("returns the catalog's primary and fallbacks without reordering", async () => {
-    const resolve = createWorkbenchHostInferencePreferencesResolver(
-      async () => [
-        { provider: "openai-compatible", model: "grok-4.6" },
-        { provider: "anthropic", model: "claude-sonnet-5" },
-      ],
-    );
+    const resolve = createWorkbenchHostInferencePreferencesResolver(async () => [
+      { provider: "openai-compatible", model: "grok-4.6" },
+      { provider: "anthropic", model: "claude-sonnet-5" },
+    ]);
     expect(await resolve("tnt_bench")).toEqual([
       { provider: "openai-compatible", model: "grok-4.6" },
       { provider: "anthropic", model: "claude-sonnet-5" },
@@ -59,20 +57,16 @@ describe("createWorkbenchHostInferencePreferencesResolver", () => {
   });
 
   test("a bench with no routed offerings resolves to an empty list", async () => {
-    const resolve = createWorkbenchHostInferencePreferencesResolver(
-      async () => [],
-    );
+    const resolve = createWorkbenchHostInferencePreferencesResolver(async () => []);
     expect(await resolve("tnt_bench")).toEqual([]);
   });
 
   test("passes the tenant id through to the catalog route lookup", async () => {
     const seen: string[] = [];
-    const resolve = createWorkbenchHostInferencePreferencesResolver(
-      async (tenantId) => {
-        seen.push(tenantId);
-        return [];
-      },
-    );
+    const resolve = createWorkbenchHostInferencePreferencesResolver(async (tenantId) => {
+      seen.push(tenantId);
+      return [];
+    });
     await resolve("tnt_specific");
     expect(seen).toEqual(["tnt_specific"]);
   });
@@ -80,9 +74,7 @@ describe("createWorkbenchHostInferencePreferencesResolver", () => {
 
 describe("selectDefaultInferencePreferences", () => {
   test("excludes offerings with no resolvable credential", () => {
-    const result = selectDefaultInferencePreferences([
-      offering({ credentialId: null }),
-    ]);
+    const result = selectDefaultInferencePreferences([offering({ credentialId: null })]);
     expect(result).toEqual([]);
   });
 
diff --git a/packages/chat/src/inference-preferences.ts b/packages/chat/src/inference-preferences.ts
index e934aa982d..08e1616b80 100644
--- a/packages/chat/src/inference-preferences.ts
+++ b/packages/chat/src/inference-preferences.ts
@@ -22,9 +22,7 @@ import { preferCompletionCapable } from "@corbits/connections/model-capability";
 
 /** Reads back the provider names a tenant (or an ancestor it inherits
  * catalog rows from) actually has a usable credential for. */
-export type ConnectedProviderLister = (
-  tenantId: string,
-) => Promise<readonly string[]>;
+export type ConnectedProviderLister = (tenantId: string) => Promise<readonly string[]>;
 
 export type DefaultInferencePreferenceLister = (
   tenantId: string,
@@ -83,9 +81,7 @@ export async function listConnectedProviders(
 export function selectDefaultInferencePreferences(
   offerings: readonly ResolvedOffering[],
 ): readonly InferencePreference[] {
-  const credentialed = offerings.filter(
-    (entry) => entry.provider.credentialId !== null,
-  );
+  const credentialed = offerings.filter((entry) => entry.provider.credentialId !== null);
   const completionCapable = preferCompletionCapable(
     credentialed,
     (entry) => entry.offering.capabilities,
diff --git a/packages/chat/src/mail-headers.test.ts b/packages/chat/src/mail-headers.test.ts
index a0684e45d6..a7ffe2916a 100644
--- a/packages/chat/src/mail-headers.test.ts
+++ b/packages/chat/src/mail-headers.test.ts
@@ -13,15 +13,11 @@ import {
 
 describe("mailMessageIdFor", () => {
   test("frames the row id against the mail domain", () => {
-    expect(mailMessageIdFor("msg_1", "ten1.workbench.test")).toBe(
-      "<msg_1@ten1.workbench.test>",
-    );
+    expect(mailMessageIdFor("msg_1", "ten1.workbench.test")).toBe("<msg_1@ten1.workbench.test>");
   });
 
   test("round-trips back to the row it names", () => {
-    expect(
-      rowIdFromMailMessageId(mailMessageIdFor("msg_1", "ten1.workbench.test")),
-    ).toBe("msg_1");
+    expect(rowIdFromMailMessageId(mailMessageIdFor("msg_1", "ten1.workbench.test"))).toBe("msg_1");
   });
 
   test("an id from another transport misses the row instead of crashing", () => {
@@ -33,9 +29,9 @@ describe("mailMessageIdFor", () => {
 
 describe("mailThreadHeaders", () => {
   test("a root-feed row threads under nothing", () => {
-    expect(
-      mailThreadHeaders({ rowId: "msg_1", domain: "d.test", ancestors: [] }),
-    ).toEqual({ messageId: "<msg_1@d.test>" });
+    expect(mailThreadHeaders({ rowId: "msg_1", domain: "d.test", ancestors: [] })).toEqual({
+      messageId: "<msg_1@d.test>",
+    });
   });
 
   test("a depth-1 reply names its anchor in both headers", () => {
@@ -69,9 +65,7 @@ describe("mailThreadHeaders", () => {
 
 describe("parentMailMessageId", () => {
   test("In-Reply-To names the parent", () => {
-    expect(parentMailMessageId({ inReplyTo: "<msg_1@d.test>" })).toBe(
-      "<msg_1@d.test>",
-    );
+    expect(parentMailMessageId({ inReplyTo: "<msg_1@d.test>" })).toBe("<msg_1@d.test>");
   });
 
   test("References' tail names the parent when In-Reply-To is absent", () => {
@@ -84,9 +78,7 @@ describe("parentMailMessageId", () => {
 
   test("a reply threading under nothing resolves to no parent", () => {
     expect(parentMailMessageId({})).toBeUndefined();
-    expect(
-      parentMailMessageId({ inReplyTo: "", references: [] }),
-    ).toBeUndefined();
+    expect(parentMailMessageId({ inReplyTo: "", references: [] })).toBeUndefined();
   });
 });
 
diff --git a/packages/chat/src/mail-headers.ts b/packages/chat/src/mail-headers.ts
index c79ed59a86..27fb055079 100644
--- a/packages/chat/src/mail-headers.ts
+++ b/packages/chat/src/mail-headers.ts
@@ -50,9 +50,7 @@ export function mailThreadHeaders(input: {
   readonly references?: readonly string[];
 } {
   const messageId = mailMessageIdFor(input.rowId, input.domain);
-  const references = input.ancestors.map((ancestor) =>
-    mailMessageIdFor(ancestor, input.domain),
-  );
+  const references = input.ancestors.map((ancestor) => mailMessageIdFor(ancestor, input.domain));
   const inReplyTo = references[references.length - 1];
   return {
     messageId,
@@ -129,11 +127,10 @@ export async function resolveWorkbenchIdForAgentFrame(
     if (row !== undefined) return row.workbenchId;
   }
 
-  const workbenchIds =
-    await store.chatStore.findWorkbenchIdsByParticipantAddress(
-      tenantId,
-      args.senderAddress,
-    );
+  const workbenchIds = await store.chatStore.findWorkbenchIdsByParticipantAddress(
+    tenantId,
+    args.senderAddress,
+  );
   if (workbenchIds.length === 1) return workbenchIds[0];
 
   reportError(
diff --git a/packages/chat/src/mailbox-fanout.ts b/packages/chat/src/mailbox-fanout.ts
index 88e9bca268..7a76be6ae2 100644
--- a/packages/chat/src/mailbox-fanout.ts
+++ b/packages/chat/src/mailbox-fanout.ts
@@ -112,18 +112,13 @@ export interface MailboxWriter {
    * idempotency) is a no-op for that item, not a rollback trigger.
    * Returns one result per item, in item order.
    */
-  writeBatch(
-    items: readonly MailboxBatchItem[],
-  ): Promise<readonly MailboxBatchResult[]>;
+  writeBatch(items: readonly MailboxBatchItem[]): Promise<readonly MailboxBatchResult[]>;
 }
 
 /** The production `MailboxWriter`: a thin pass-through onto
  * `@corbits/mailbox`'s own `writeMailboxMessages` batch call — no
  * hand-rolled inserts against the package's schema. */
-export function createDrizzleMailboxWriter(
-  db: MailboxDb,
-  bus?: MailboxEventBus,
-): MailboxWriter {
+export function createDrizzleMailboxWriter(db: MailboxDb, bus?: MailboxEventBus): MailboxWriter {
   return {
     async writeBatch(items) {
       const batch: WriteMailboxMessagesItem[] = items.map((item) => ({
@@ -135,9 +130,7 @@ export function createDrizzleMailboxWriter(
           body: item.body,
           messageId: item.messageId,
           direction: item.direction,
-          ...(item.inReplyTo !== undefined
-            ? { inReplyTo: item.inReplyTo }
-            : {}),
+          ...(item.inReplyTo !== undefined ? { inReplyTo: item.inReplyTo } : {}),
           ...(item.references !== undefined && item.references.length > 0
             ? { references: [...item.references] }
             : {}),
@@ -194,9 +187,7 @@ export type WriteChatMailboxFanoutInput = {
 /** The human participants of a workbench, by their bare principal id —
  * a human's own participant address is never suffixed with a domain
  * (see `workbench-service.ts`'s member-add path), unlike an agent's. */
-function humanPrincipalIds(
-  participants: readonly ParticipantRecord[],
-): readonly string[] {
+function humanPrincipalIds(participants: readonly ParticipantRecord[]): readonly string[] {
   return participants
     .filter((participant) => !isAgentAddress(participant.address))
     .map((participant) => participant.address);
@@ -228,10 +219,7 @@ export async function writeChatMailboxFanout(
   candidateIds.add(input.senderPrincipalId);
   const candidateList = [...candidateIds];
 
-  const known = await deps.resolveKnownPrincipalIds(
-    input.tenantId,
-    candidateList,
-  );
+  const known = await deps.resolveKnownPrincipalIds(input.tenantId, candidateList);
 
   const refs: MailboxRef[] = [{ kind: "workbench", id: input.workbenchId }];
   const batch: MailboxBatchItem[] = [];
@@ -265,8 +253,7 @@ export async function writeChatMailboxFanout(
       subject: input.subject,
       body: input.body,
       messageId: input.messageId,
-      direction:
-        principalId === input.senderPrincipalId ? "outbound" : "inbound",
+      direction: principalId === input.senderPrincipalId ? "outbound" : "inbound",
       refs,
       ...(input.inReplyTo !== undefined ? { inReplyTo: input.inReplyTo } : {}),
       ...(input.references !== undefined && input.references.length > 0
diff --git a/packages/chat/src/mentions.ts b/packages/chat/src/mentions.ts
index cc0659ba24..86b24fee98 100644
--- a/packages/chat/src/mentions.ts
+++ b/packages/chat/src/mentions.ts
@@ -38,18 +38,13 @@ export function mentionedParticipants(
   participants: readonly ParticipantRecord[],
 ): string[] {
   const texts = parts
-    .filter(
-      (part): part is Extract<PartType, { kind: "text" }> =>
-        part.kind === "text",
-    )
+    .filter((part): part is Extract<PartType, { kind: "text" }> => part.kind === "text")
     .map((part) => part.text);
   if (texts.length === 0) return [];
   return participants
     .filter((participant) => isAgentAddress(participant.address))
     .filter((participant) => {
-      const mentionPattern = new RegExp(
-        `@${escapeForRegExp(participant.handle)}\\b`,
-      );
+      const mentionPattern = new RegExp(`@${escapeForRegExp(participant.handle)}\\b`);
       return texts.some((text) => mentionPattern.test(text));
     })
     .map((participant) => participant.address);
diff --git a/packages/chat/src/migrations.ts b/packages/chat/src/migrations.ts
index 65c4b9e0c4..777fbbab80 100644
--- a/packages/chat/src/migrations.ts
+++ b/packages/chat/src/migrations.ts
@@ -621,9 +621,7 @@ export interface ApplyChatMigrationsReport {
  * both surfaced, since a partial apply here would otherwise fail
  * silently at the next `workbench setup`.
  */
-export async function applyChatMigrations(
-  databaseUrl: string,
-): Promise<ApplyChatMigrationsReport> {
+export async function applyChatMigrations(databaseUrl: string): Promise<ApplyChatMigrationsReport> {
   const sql = postgres(databaseUrl, { max: 1, onnotice: () => undefined });
   try {
     await sql.unsafe(`CREATE SCHEMA IF NOT EXISTS ${quoteIdentifier(SCHEMA)}`);
@@ -632,9 +630,7 @@ export async function applyChatMigrations(
       `CREATE TABLE IF NOT EXISTS ${quoteQualified(SCHEMA, LEDGER_TABLE)} (` +
         `name text PRIMARY KEY, applied_at timestamptz NOT NULL DEFAULT now())`,
     );
-    const rows = await sql.unsafe(
-      `SELECT name FROM ${quoteQualified(SCHEMA, LEDGER_TABLE)}`,
-    );
+    const rows = await sql.unsafe(`SELECT name FROM ${quoteQualified(SCHEMA, LEDGER_TABLE)}`);
     const alreadyApplied = new Set(rows.map((row) => String(row["name"])));
     const applied: string[] = [];
     for (const migration of chatMigrations) {
diff --git a/packages/chat/src/model-unavailable.test.ts b/packages/chat/src/model-unavailable.test.ts
index abfff76ae9..f647176449 100644
--- a/packages/chat/src/model-unavailable.test.ts
+++ b/packages/chat/src/model-unavailable.test.ts
@@ -39,9 +39,7 @@ describe("consumerTurnError", () => {
     expect(consumerTurnError(new ModelUnavailableError(cause))).toBe(
       MODEL_UNAVAILABLE_CONSUMER_MESSAGE,
     );
-    expect(consumerTurnError(new Error("sidecar unavailable"))).toBe(
-      "sidecar unavailable",
-    );
+    expect(consumerTurnError(new Error("sidecar unavailable"))).toBe("sidecar unavailable");
   });
 });
 
@@ -49,11 +47,7 @@ describe("isModelUnavailableCause", () => {
   test("recognizes the wrapped and unwrapped resolution failures", () => {
     const cause = new InferenceResolutionError("launch", "no catalog source");
     expect(isModelUnavailableCause(cause)).toBe(true);
-    expect(isModelUnavailableCause(new ModelUnavailableError(cause))).toBe(
-      true,
-    );
-    expect(isModelUnavailableCause(new Error("sidecar unavailable"))).toBe(
-      false,
-    );
+    expect(isModelUnavailableCause(new ModelUnavailableError(cause))).toBe(true);
+    expect(isModelUnavailableCause(new Error("sidecar unavailable"))).toBe(false);
   });
 });
diff --git a/packages/chat/src/model-unavailable.ts b/packages/chat/src/model-unavailable.ts
index 4a72ab5161..c8630cd47e 100644
--- a/packages/chat/src/model-unavailable.ts
+++ b/packages/chat/src/model-unavailable.ts
@@ -25,8 +25,7 @@ export class InferenceResolutionError extends Error {
   }
 }
 
-export const MODEL_UNAVAILABLE_CONSUMER_MESSAGE =
-  "This agent's model isn't available here.";
+export const MODEL_UNAVAILABLE_CONSUMER_MESSAGE = "This agent's model isn't available here.";
 
 /**
  * Thrown at wake (`wakeByAddress` / `ensureAwake`) in place of a raw
@@ -49,9 +48,7 @@ export class ModelUnavailableError extends Error {
 export function isModelUnavailableCause(cause: unknown): boolean {
   if (cause instanceof ModelUnavailableError) return true;
   if (cause instanceof InferenceResolutionError) return true;
-  return (
-    cause instanceof Error && cause.cause instanceof InferenceResolutionError
-  );
+  return cause instanceof Error && cause.cause instanceof InferenceResolutionError;
 }
 
 /** Turn-row `error` text: never a raw `InferenceResolutionError.message`. */
diff --git a/packages/chat/src/native-principal.test.ts b/packages/chat/src/native-principal.test.ts
index 370ecda30b..9c910b0bbe 100644
--- a/packages/chat/src/native-principal.test.ts
+++ b/packages/chat/src/native-principal.test.ts
@@ -16,7 +16,5 @@ test("native principal reads stay scoped to the requested tenant", async () => {
     status: "active",
     refId: "usr_member",
   });
-  expect(
-    await principals.getTenantPrincipal("tnt_other", "prn_member"),
-  ).toBeUndefined();
+  expect(await principals.getTenantPrincipal("tnt_other", "prn_member")).toBeUndefined();
 });
diff --git a/packages/chat/src/native-principal.ts b/packages/chat/src/native-principal.ts
index 0ba71fefac..63b233de6d 100644
--- a/packages/chat/src/native-principal.ts
+++ b/packages/chat/src/native-principal.ts
@@ -10,15 +10,12 @@ export interface NativePrincipal {
 }
 
 export interface NativePrincipalStore {
-  getTenantPrincipal(
-    tenantId: string,
-    principalId: string,
-  ): Promise<NativePrincipal | undefined>;
+  getTenantPrincipal(tenantId: string, principalId: string): Promise<NativePrincipal | undefined>;
 }
 
-export function createDrizzleNativePrincipalStore<
-  TSchema extends Record<string, unknown>,
->(db: PostgresJsDatabase<TSchema>): NativePrincipalStore {
+export function createDrizzleNativePrincipalStore<TSchema extends Record<string, unknown>>(
+  db: PostgresJsDatabase<TSchema>,
+): NativePrincipalStore {
   return {
     async getTenantPrincipal(tenantId, principalId) {
       const [row] = await db
@@ -29,9 +26,7 @@ export function createDrizzleNativePrincipalStore<
           refId: principal.refId,
         })
         .from(principal)
-        .where(
-          and(eq(principal.tenantId, tenantId), eq(principal.id, principalId)),
-        )
+        .where(and(eq(principal.tenantId, tenantId), eq(principal.id, principalId)))
         .limit(1);
       return row;
     },
@@ -42,8 +37,7 @@ export function createInMemoryNativePrincipalStore(): NativePrincipalStore & {
   registerPrincipal(tenantId: string, value: NativePrincipal): void;
 } {
   const principals = new Map<string, NativePrincipal>();
-  const key = (tenantId: string, principalId: string) =>
-    `${tenantId}\u0000${principalId}`;
+  const key = (tenantId: string, principalId: string) => `${tenantId}\u0000${principalId}`;
 
   return {
     registerPrincipal(tenantId, value) {
diff --git a/packages/chat/src/participants.test.ts b/packages/chat/src/participants.test.ts
index 805bd23a9c..5bdea25236 100644
--- a/packages/chat/src/participants.test.ts
+++ b/packages/chat/src/participants.test.ts
@@ -18,9 +18,7 @@ describe("addParticipant", () => {
 
 describe("handleFromName / dedupeHandle", () => {
   test("slugs a display name and falls back to the address local part", () => {
-    expect(handleFromName("Content Researcher", "run_1@x")).toBe(
-      "content-researcher",
-    );
+    expect(handleFromName("Content Researcher", "run_1@x")).toBe("content-researcher");
     expect(handleFromName("!!!", "run_scout@x")).toBe("run_scout");
   });
 
diff --git a/packages/chat/src/participants.ts b/packages/chat/src/participants.ts
index feaad72727..bb3b0b6b5a 100644
--- a/packages/chat/src/participants.ts
+++ b/packages/chat/src/participants.ts
@@ -72,10 +72,7 @@ export function handleFromName(name: string, fallbackAddress: string): string {
  * a workbench: "echo" becomes "echo-2", then "echo-3", etc. — the first
  * suffix not already taken.
  */
-export function dedupeHandle(
-  handle: string,
-  taken: ReadonlySet<string>,
-): string {
+export function dedupeHandle(handle: string, taken: ReadonlySet<string>): string {
   if (!taken.has(handle)) return handle;
   let suffix = 2;
   while (taken.has(`${handle}-${suffix}`)) suffix += 1;
diff --git a/packages/chat/src/parts.ts b/packages/chat/src/parts.ts
index 2146f70085..026f906594 100644
--- a/packages/chat/src/parts.ts
+++ b/packages/chat/src/parts.ts
@@ -82,9 +82,7 @@ export const FilePart = type({
     return true;
   }
   if (hasBlobId === hasData) {
-    return ctx.reject(
-      "exactly one of `blobId` or `data` must be set on a FilePart",
-    );
+    return ctx.reject("exactly one of `blobId` or `data` must be set on a FilePart");
   }
   return true;
 });
diff --git a/packages/chat/src/pin-ports.ts b/packages/chat/src/pin-ports.ts
index bf7fe7da24..1052f520af 100644
--- a/packages/chat/src/pin-ports.ts
+++ b/packages/chat/src/pin-ports.ts
@@ -15,9 +15,7 @@ export type ToolGrantsForPins = (
   pins: readonly ToolPackagePin[],
 ) => Promise<readonly PinnedToolGrantDeclaration[]>;
 
-export type McpCredentialBindingsFor = (
-  tenantId: string,
-) => Promise<readonly CredentialBinding[]>;
+export type McpCredentialBindingsFor = (tenantId: string) => Promise<readonly CredentialBinding[]>;
 
 export type PinnedPackageCredentialBindingsFor = (
   tenantId: string,
diff --git a/packages/chat/src/pins.ts b/packages/chat/src/pins.ts
index 7167b47666..914e67def6 100644
--- a/packages/chat/src/pins.ts
+++ b/packages/chat/src/pins.ts
@@ -28,11 +28,7 @@ export interface PinMessageInput {
 
 export interface PinStore {
   pinMessage(input: PinMessageInput): Promise<PinRow>;
-  unpinMessage(
-    tenantId: string,
-    workbenchId: string,
-    messageId: string,
-  ): Promise<void>;
+  unpinMessage(tenantId: string, workbenchId: string, messageId: string): Promise<void>;
   /** Every pinned message in a workbench, newest pin first — the pinned
    * strip's own read, and the set `GET /workbenches/:id/messages` marks
    * each page item against. */
@@ -65,17 +61,14 @@ export function createInMemoryPinStore(): PinStore {
 
     async listPins(tenantId, workbenchId) {
       return [...rows.values()]
-        .filter(
-          (row) => row.tenantId === tenantId && row.workbenchId === workbenchId,
-        )
+        .filter((row) => row.tenantId === tenantId && row.workbenchId === workbenchId)
         .sort((a, b) => b.pinnedAt.getTime() - a.pinnedAt.getTime());
     },
   };
 }
 
-export type PinDb<
-  TSchema extends Record<string, unknown> = Record<string, never>,
-> = PostgresJsDatabase<TSchema>;
+export type PinDb<TSchema extends Record<string, unknown> = Record<string, never>> =
+  PostgresJsDatabase<TSchema>;
 
 export function createDrizzlePinStore<TSchema extends Record<string, unknown>>(
   db: PinDb<TSchema>,
@@ -93,11 +86,7 @@ export function createDrizzlePinStore<TSchema extends Record<string, unknown>>(
           pinnedAt: now,
         })
         .onConflictDoUpdate({
-          target: [
-            pinnedMessages.tenantId,
-            pinnedMessages.workbenchId,
-            pinnedMessages.messageId,
-          ],
+          target: [pinnedMessages.tenantId, pinnedMessages.workbenchId, pinnedMessages.messageId],
           set: { pinnedBy: input.pinnedBy, pinnedAt: now },
         })
         .returning();
@@ -124,10 +113,7 @@ export function createDrizzlePinStore<TSchema extends Record<string, unknown>>(
         .select()
         .from(pinnedMessages)
         .where(
-          and(
-            eq(pinnedMessages.tenantId, tenantId),
-            eq(pinnedMessages.workbenchId, workbenchId),
-          ),
+          and(eq(pinnedMessages.tenantId, tenantId), eq(pinnedMessages.workbenchId, workbenchId)),
         )
         .orderBy(desc(pinnedMessages.pinnedAt));
       return rows as PinRow[];
diff --git a/packages/chat/src/platform-adapter.ts b/packages/chat/src/platform-adapter.ts
index e74acd3f28..fac13578b7 100644
--- a/packages/chat/src/platform-adapter.ts
+++ b/packages/chat/src/platform-adapter.ts
@@ -115,10 +115,7 @@ export type CreateHubChatPlatformDeps = {
    * relaunch call `prepareProvisionedDeployment` on this; chat never
    * mints the run row itself.
    */
-  workflowAllocationService: Pick<
-    WorkflowAllocationService,
-    "prepareProvisionedDeployment"
-  >;
+  workflowAllocationService: Pick<WorkflowAllocationService, "prepareProvisionedDeployment">;
   sidecarRouter: SidecarRouter;
   toolGrantsForPins: ToolGrantsForPins;
   /**
@@ -178,9 +175,7 @@ export type CreateHubChatPlatformDeps = {
    * connected provider, that 409 is exactly what still happens — the
    * honest answer when there is truly nothing to launch against.
    */
-  workbenchHostInferencePreferences?: (
-    tenantId: string,
-  ) => Promise<readonly InferencePreference[]>;
+  workbenchHostInferencePreferences?: (tenantId: string) => Promise<readonly InferencePreference[]>;
   /**
    * Where a relaunch announces itself in the room — see
    * `./relaunch-notice.ts` for why this is a ref the host arms later
@@ -234,9 +229,7 @@ export type HubChatPlatform = ChatPlatform & {
    * its next message. Best-effort per participant: one failed relaunch
    * is logged and the pass moves on.
    */
-  reconcileInferenceSources(
-    tenantId: string,
-  ): Promise<{ scanned: number; relaunched: number }>;
+  reconcileInferenceSources(tenantId: string): Promise<{ scanned: number; relaunched: number }>;
   /**
    * Relaunches live participants in `tenantId` whose launch pins include
    * any of `packageNames` — a tool-package connector's `feedsTools` the
@@ -259,9 +252,7 @@ export type HubChatPlatform = ChatPlatform & {
  * id — the host owns the cache so every mail sender in the process
  * shares it.
  */
-export function createHubChatPlatform(
-  deps: CreateHubChatPlatformDeps,
-): HubChatPlatform {
+export function createHubChatPlatform(deps: CreateHubChatPlatformDeps): HubChatPlatform {
   void tagCredentialCipher(deps.credentialCipher);
   const runMailDeps = {
     db: deps.db,
@@ -308,9 +299,7 @@ export function createHubChatPlatform(
       return refIdForUserPrincipal(input.principalId);
     }
     if (input.definitionId === null) {
-      throw new Error(
-        "run has no definitionId to resolve a run-trigger authority from",
-      );
+      throw new Error("run has no definitionId to resolve a run-trigger authority from");
     }
     const rows = await deps.db
       .select({ assetId: workflowDefinition.assetId })
@@ -319,9 +308,7 @@ export function createHubChatPlatform(
       .limit(1);
     const assetId = rows[0]?.assetId;
     if (assetId === null || assetId === undefined) {
-      throw new Error(
-        `workflow definition "${input.definitionId}" has no asset`,
-      );
+      throw new Error(`workflow definition "${input.definitionId}" has no asset`);
     }
     const creatorPrincipalId = await sourceAuthorityForAsset(assetId);
     return refIdForUserPrincipal(creatorPrincipalId);
@@ -383,33 +370,30 @@ export function createHubChatPlatform(
       DEFAULT_ASSET_REF,
     );
     if (commitSha === null) {
-      throw new Error(
-        `definition asset "${input.definitionAssetId}" has no HEAD`,
-      );
+      throw new Error(`definition asset "${input.definitionAssetId}" has no HEAD`);
     }
     const anchorRunId = generateId("workflowRun");
     const sessionId = generateId("session");
-    const prepared =
-      await deps.workflowAllocationService.prepareProvisionedDeployment({
-        tenantId: input.tenantId,
-        anchorRunId,
-        deploymentDomain: input.deploymentDomain,
-        source: {
-          kind: "asset",
-          assetId: input.definitionAssetId,
-          package: { format: "source", commitSha },
-        },
-        entry: WORKFLOW_SOURCE_ENTRY,
-        definitionAssetId: input.definitionAssetId,
-        sessionId,
-        sourceAuthorityPrincipalId: input.sourceAuthorityPrincipalId,
-        sourceOfferingIds: offerings.sourceOfferingIds,
-        defaultSourceOfferingId: offerings.defaultSourceOfferingId,
-        deployContent: { systemPrompt: "" },
-        ...(input.foldedBody.toolPackagePins.length > 0
-          ? { toolPackagePins: input.foldedBody.toolPackagePins }
-          : {}),
-      });
+    const prepared = await deps.workflowAllocationService.prepareProvisionedDeployment({
+      tenantId: input.tenantId,
+      anchorRunId,
+      deploymentDomain: input.deploymentDomain,
+      source: {
+        kind: "asset",
+        assetId: input.definitionAssetId,
+        package: { format: "source", commitSha },
+      },
+      entry: WORKFLOW_SOURCE_ENTRY,
+      definitionAssetId: input.definitionAssetId,
+      sessionId,
+      sourceAuthorityPrincipalId: input.sourceAuthorityPrincipalId,
+      sourceOfferingIds: offerings.sourceOfferingIds,
+      defaultSourceOfferingId: offerings.defaultSourceOfferingId,
+      deployContent: { systemPrompt: "" },
+      ...(input.foldedBody.toolPackagePins.length > 0
+        ? { toolPackagePins: input.foldedBody.toolPackagePins }
+        : {}),
+    });
     await recordAgentSessionAtProvision({
       db: deps.db,
       eventCollectors: deps.eventCollectors,
@@ -449,8 +433,7 @@ export function createHubChatPlatform(
   // the wake itself, so that hang becomes a rejection
   // `dispatchTurnBatch`'s catch can report and notify on, instead of a
   // promise nothing ever settles.
-  const MAIL_DELIVERY_TIMEOUT_MS =
-    deps.mailDeliveryTimeoutMs ?? DEFAULT_WAKE_TIMEOUT_MS;
+  const MAIL_DELIVERY_TIMEOUT_MS = deps.mailDeliveryTimeoutMs ?? DEFAULT_WAKE_TIMEOUT_MS;
 
   function isRoutable(address: string): boolean {
     return deps.sidecarRouter.getRoutableAddresses().includes(address);
@@ -488,20 +471,14 @@ export function createHubChatPlatform(
     const prepared = await provisionOnAsset({
       tenantId: binding.tenantId,
       deploymentDomain: domainOf(binding.roomAddress),
-      sourceAuthorityPrincipalId:
-        await sourceAuthorityForAsset(definitionAssetId),
+      sourceAuthorityPrincipalId: await sourceAuthorityForAsset(definitionAssetId),
       definitionAssetId,
       foldedBody: binding.foldedBody,
     });
 
     await endAgentSessionForRun(deps.db, run.id, deps.eventCollectors);
 
-    await repointBinding(
-      deps.db,
-      binding,
-      prepared.runId,
-      prepared.sourcesDigest,
-    );
+    await repointBinding(deps.db, binding, prepared.runId, prepared.sourcesDigest);
 
     deps.relaunchNotice?.current?.({
       tenantId: binding.tenantId,
@@ -628,15 +605,11 @@ export function createHubChatPlatform(
     if (definitionRow === undefined || definitionRow.assetId === null) {
       return undefined;
     }
-    const { row: authoredRow, projection } =
-      await resolveAuthoredProjectedDefinition(tenantId, {
-        assetId: definitionRow.assetId,
-        name: definitionRow.name,
-      });
-    const freshFoldedBody = readFoldedBody(
-      projection,
-      authoredRow.grantRequirements,
-    );
+    const { row: authoredRow, projection } = await resolveAuthoredProjectedDefinition(tenantId, {
+      assetId: definitionRow.assetId,
+      name: definitionRow.name,
+    });
+    const freshFoldedBody = readFoldedBody(projection, authoredRow.grantRequirements);
     if (foldedBodyContentEquals(freshFoldedBody, currentFoldedBody)) {
       return undefined;
     }
@@ -669,10 +642,7 @@ export function createHubChatPlatform(
   async function hasDriftedSources(binding: AgentBinding): Promise<boolean> {
     const checkedAt = sourcesCheckedAt.get(binding.stableId);
     const now = Date.now();
-    if (
-      checkedAt !== undefined &&
-      now - checkedAt < SOURCES_CHECK_INTERVAL_MS
-    ) {
+    if (checkedAt !== undefined && now - checkedAt < SOURCES_CHECK_INTERVAL_MS) {
       return false;
     }
     let offerings: Awaited<ReturnType<typeof catalogOfferings>>;
@@ -795,10 +765,7 @@ export function createHubChatPlatform(
    * caller's timeout never shortens another's wait on the same
    * coalesced wake.
    */
-  function boundToWakeTimeout(
-    pending: Promise<void>,
-    address: string,
-  ): Promise<void> {
+  function boundToWakeTimeout(pending: Promise<void>, address: string): Promise<void> {
     return new Promise((resolve, reject) => {
       const timer = setTimeout(() => {
         reject(
@@ -899,11 +866,7 @@ export function createHubChatPlatform(
   async function reconcileInferenceSources(
     tenantId: string,
   ): Promise<{ scanned: number; relaunched: number }> {
-    const participants = await listLaunchesForTenant(
-      deps.db,
-      tenantId,
-      RECONCILE_SOURCES_LIMIT,
-    );
+    const participants = await listLaunchesForTenant(deps.db, tenantId, RECONCILE_SOURCES_LIMIT);
     let relaunched = 0;
     for (const { binding, run } of participants) {
       // A recent send may have stamped `sourcesCheckedAt` so
@@ -927,11 +890,7 @@ export function createHubChatPlatform(
     packageNames: readonly string[],
   ): Promise<{ scanned: number; relaunched: number }> {
     const wanted = new Set(packageNames);
-    const participants = await listLaunchesForTenant(
-      deps.db,
-      tenantId,
-      RECONCILE_SOURCES_LIMIT,
-    );
+    const participants = await listLaunchesForTenant(deps.db, tenantId, RECONCILE_SOURCES_LIMIT);
     let relaunched = 0;
     for (const live of participants) {
       const pinsWanted = live.binding.foldedBody.toolPackagePins.some((pin) =>
@@ -961,10 +920,7 @@ export function createHubChatPlatform(
    * participant id — not the room's own address, once anything has been
    * relaunched.
    */
-  async function requireLive(
-    stableId: string,
-    expectedTenantId?: string,
-  ): Promise<LiveAgent> {
+  async function requireLive(stableId: string, expectedTenantId?: string): Promise<LiveAgent> {
     const live =
       expectedTenantId === undefined
         ? await resolveLiveByStableIdAnyTenant(deps.db, stableId)
@@ -1112,13 +1068,8 @@ export function createHubChatPlatform(
     if (candidates.length === 0) {
       throw new DefinitionProjectionMissingError(definitionAsset.name);
     }
-    const resolved = await resolveNewestProjectedDefinition(
-      deps.db,
-      candidates,
-    );
-    const row = candidates.find(
-      (candidate) => candidate.id === resolved.definitionId,
-    );
+    const resolved = await resolveNewestProjectedDefinition(deps.db, candidates);
+    const row = candidates.find((candidate) => candidate.id === resolved.definitionId);
     if (row === undefined) {
       throw new Error(
         `resolved definition "${resolved.definitionId}" is not among the ` +
@@ -1128,9 +1079,7 @@ export function createHubChatPlatform(
     return { row, projection: resolved.projection };
   }
 
-  async function resolveDefinitionAssetId(
-    definitionId: string,
-  ): Promise<string | undefined> {
+  async function resolveDefinitionAssetId(definitionId: string): Promise<string | undefined> {
     const row = await deps.db.query.workflowDefinition.findFirst({
       where: eq(workflowDefinition.id, definitionId),
     });
@@ -1146,9 +1095,7 @@ export function createHubChatPlatform(
         ),
       });
       if (definitionRow === undefined) {
-        throw new Error(
-          `No definition "${input.definitionId}" for this tenant`,
-        );
+        throw new Error(`No definition "${input.definitionId}" for this tenant`);
       }
       if (definitionRow.status !== "deployed") {
         throw new Error(
@@ -1157,9 +1104,7 @@ export function createHubChatPlatform(
         );
       }
       if (definitionRow.assetId === null) {
-        throw new Error(
-          `Definition "${input.definitionId}" has not been materialized`,
-        );
+        throw new Error(`Definition "${input.definitionId}" has not been materialized`);
       }
       const definitionAssetId = definitionRow.assetId;
 
@@ -1179,16 +1124,15 @@ export function createHubChatPlatform(
         return { instanceId: standing.stableId, address: standing.roomAddress };
       }
 
-      const { row: resolvedDefinitionRow, projection } =
-        await resolveAuthoredProjectedDefinition(input.tenantId, {
+      const { row: resolvedDefinitionRow, projection } = await resolveAuthoredProjectedDefinition(
+        input.tenantId,
+        {
           assetId: definitionAssetId,
           name: definitionRow.name,
-        });
-
-      const foldedBody = readFoldedBody(
-        projection,
-        resolvedDefinitionRow.grantRequirements,
+        },
       );
+
+      const foldedBody = readFoldedBody(projection, resolvedDefinitionRow.grantRequirements);
       if (foldedBody.systemPrompt === "") {
         throw new Error(
           `Definition "${input.definitionId}" cannot be launched without ` +
@@ -1221,9 +1165,7 @@ export function createHubChatPlatform(
       return { instanceId: prepared.runId, address: prepared.address };
     },
 
-    async listInvitableDefinitions(
-      tenantId,
-    ): Promise<readonly InvitableDefinition[]> {
+    async listInvitableDefinitions(tenantId): Promise<readonly InvitableDefinition[]> {
       // A definition deployed in a parent tenant is invitable from a child
       // workbench like a plugin, so this reads the whole ancestor chain --
       // the same walk credential and catalog resolution already perform --
@@ -1294,11 +1236,7 @@ export function createHubChatPlatform(
         : { name: row.name };
     },
 
-    async refreshAgentInstanceFromDefinition(
-      tenantId,
-      _workbenchId,
-      address,
-    ): Promise<void> {
+    async refreshAgentInstanceFromDefinition(tenantId, _workbenchId, address): Promise<void> {
       const binding = await readBindingByAddress(deps.db, address, tenantId);
       if (binding === undefined) return;
       const live = await resolveLiveAgent(deps.db, binding);
@@ -1319,15 +1257,11 @@ export function createHubChatPlatform(
       // repointed it to; the refresh recomputes from the hub-authored
       // sibling so the saved edit — not the clone's frozen snapshot —
       // is what the next wake replays.
-      const { row: authoredRow, projection } =
-        await resolveAuthoredProjectedDefinition(tenantId, {
-          assetId: definitionRow.assetId,
-          name: definitionRow.name,
-        });
-      const foldedBody = readFoldedBody(
-        projection,
-        authoredRow.grantRequirements,
-      );
+      const { row: authoredRow, projection } = await resolveAuthoredProjectedDefinition(tenantId, {
+        assetId: definitionRow.assetId,
+        name: definitionRow.name,
+      });
+      const foldedBody = readFoldedBody(projection, authoredRow.grantRequirements);
 
       await deps.db
         .update(workbenchLaunch)
@@ -1440,9 +1374,7 @@ export function createHubChatPlatform(
       } else if (input.principalId !== undefined) {
         from = `${input.principalId}@${domain}`;
       } else {
-        throw new Error(
-          "sendMail requires either principalId or fromWorkbenchId",
-        );
+        throw new Error("sendMail requires either principalId or fromWorkbenchId");
       }
       // Keyed by workbench id (`generateId("workflowRun")` / older
       // `generateId("instance")`), not the invited agent's instance id.
@@ -1450,13 +1382,11 @@ export function createHubChatPlatform(
       // process would mint a different signing key for the same string.
       const cryptoProvider = await cryptoProviders.get(input.workbenchId);
 
-      const attachments = input.content.attachments?.map(
-        (attachment, index) => ({
-          name: attachment.name ?? `attachment-${index}`,
-          contentType: attachment.mimeType,
-          data: new Uint8Array(Buffer.from(attachment.data, "base64")),
-        }),
-      );
+      const attachments = input.content.attachments?.map((attachment, index) => ({
+        name: attachment.name ?? `attachment-${index}`,
+        contentType: attachment.mimeType,
+        data: new Uint8Array(Buffer.from(attachment.data, "base64")),
+      }));
 
       const authAsUserId = await resolveTriggerAuthUserId({
         principalId: input.principalId,
@@ -1475,9 +1405,7 @@ export function createHubChatPlatform(
         authAsUserId,
       };
       const withAttachments =
-        attachments !== undefined
-          ? { ...sendMailBase, attachments }
-          : sendMailBase;
+        attachments !== undefined ? { ...sendMailBase, attachments } : sendMailBase;
       const withReplyTo =
         input.content.replyTo !== undefined
           ? { ...withAttachments, replyTo: input.content.replyTo }
@@ -1489,41 +1417,32 @@ export function createHubChatPlatform(
       // the event — both can be present on the same mail.
       const withThreading = {
         ...withReplyTo,
-        ...(input.content.messageId !== undefined
-          ? { messageId: input.content.messageId }
-          : {}),
-        ...(input.content.inReplyTo !== undefined
-          ? { inReplyTo: input.content.inReplyTo }
-          : {}),
-        ...(input.content.references !== undefined
-          ? { references: input.content.references }
-          : {}),
+        ...(input.content.messageId !== undefined ? { messageId: input.content.messageId } : {}),
+        ...(input.content.inReplyTo !== undefined ? { inReplyTo: input.content.inReplyTo } : {}),
+        ...(input.content.references !== undefined ? { references: input.content.references } : {}),
       };
-      const sent = await sendRunMailWithReclaimRetry(
-        withThreading,
-        async () => {
-          const relive = await requireLive(input.workbenchId, input.tenantId);
-          try {
-            await ensureRunSession({
-              db: deps.db,
-              eventCollectors: deps.eventCollectors,
-              runId: relive.run.id,
-            });
-          } catch (err) {
-            reportError(err, {
-              operation: "chat.sendMail.ensureRunSession",
-              tenantId: input.tenantId,
-              agentId: relive.binding.liveAddress,
-              extra: { runId: relive.run.id },
-            });
-          }
-          return {
-            agentAddress: relive.binding.liveAddress,
-            anchorRunId: relive.run.id,
-            sessionId: await resolveRunSessionIdOrThrow(deps.db, relive.run),
-          };
-        },
-      );
+      const sent = await sendRunMailWithReclaimRetry(withThreading, async () => {
+        const relive = await requireLive(input.workbenchId, input.tenantId);
+        try {
+          await ensureRunSession({
+            db: deps.db,
+            eventCollectors: deps.eventCollectors,
+            runId: relive.run.id,
+          });
+        } catch (err) {
+          reportError(err, {
+            operation: "chat.sendMail.ensureRunSession",
+            tenantId: input.tenantId,
+            agentId: relive.binding.liveAddress,
+            extra: { runId: relive.run.id },
+          });
+        }
+        return {
+          agentAddress: relive.binding.liveAddress,
+          anchorRunId: relive.run.id,
+          sessionId: await resolveRunSessionIdOrThrow(deps.db, relive.run),
+        };
+      });
 
       return sent;
     },
@@ -1554,10 +1473,7 @@ export function createHubChatPlatform(
       const priorSessionIds = await retiredSessionIds(binding);
       for (const sessionId of [liveSessionId, ...priorSessionIds]) {
         const mailRow = await deps.db.query.sessionMail.findFirst({
-          where: and(
-            eq(sessionMail.id, mailId),
-            eq(sessionMail.sessionId, sessionId),
-          ),
+          where: and(eq(sessionMail.id, mailId), eq(sessionMail.sessionId, sessionId)),
         });
         if (mailRow !== undefined) {
           return extractPartByPath(mailRow.raw, partPath);
diff --git a/packages/chat/src/platform-port.ts b/packages/chat/src/platform-port.ts
index 668314d9d4..f1d43c8da8 100644
--- a/packages/chat/src/platform-port.ts
+++ b/packages/chat/src/platform-port.ts
@@ -73,9 +73,7 @@ export interface WorkbenchLauncher {
    * "invite agent" affordance can offer — never including a workbench's
    * own host definition.
    */
-  listInvitableDefinitions(
-    tenantId: string,
-  ): Promise<readonly InvitableDefinition[]>;
+  listInvitableDefinitions(tenantId: string): Promise<readonly InvitableDefinition[]>;
 
   /**
    * Resolves an already-joined participant's address back to the
@@ -110,9 +108,7 @@ export interface WorkbenchLauncher {
    */
   resolveDefinitionNameSource(
     definitionId: string,
-  ): Promise<
-    { readonly name: string; readonly description?: string } | undefined
-  >;
+  ): Promise<{ readonly name: string; readonly description?: string } | undefined>;
 
   /**
    * Recomputes an already-invited instance's folded launch body from
diff --git a/packages/chat/src/reactions.ts b/packages/chat/src/reactions.ts
index bbace28254..ee4a740bbf 100644
--- a/packages/chat/src/reactions.ts
+++ b/packages/chat/src/reactions.ts
@@ -116,13 +116,9 @@ function reactionKey(input: {
   emoji: string;
   principalId: string;
 }): string {
-  return [
-    input.tenantId,
-    input.workbenchId,
-    input.messageId,
-    input.emoji,
-    input.principalId,
-  ].join("::");
+  return [input.tenantId, input.workbenchId, input.messageId, input.emoji, input.principalId].join(
+    "::",
+  );
 }
 
 export function createInMemoryReactionStore(): ReactionStore {
@@ -144,21 +140,18 @@ export function createInMemoryReactionStore(): ReactionStore {
       const wanted = new Set(messageIds);
       return [...rows.values()].filter(
         (row) =>
-          row.tenantId === tenantId &&
-          row.workbenchId === workbenchId &&
-          wanted.has(row.messageId),
+          row.tenantId === tenantId && row.workbenchId === workbenchId && wanted.has(row.messageId),
       );
     },
   };
 }
 
-export type ReactionDb<
-  TSchema extends Record<string, unknown> = Record<string, never>,
-> = PostgresJsDatabase<TSchema>;
+export type ReactionDb<TSchema extends Record<string, unknown> = Record<string, never>> =
+  PostgresJsDatabase<TSchema>;
 
-export function createDrizzleReactionStore<
-  TSchema extends Record<string, unknown>,
->(db: ReactionDb<TSchema>): ReactionStore {
+export function createDrizzleReactionStore<TSchema extends Record<string, unknown>>(
+  db: ReactionDb<TSchema>,
+): ReactionStore {
   return {
     // A single atomic `INSERT ... ON CONFLICT DO NOTHING`, never a
     // select-then-branch: two concurrent toggles for the same
diff --git a/packages/chat/src/relaunch-notice.ts b/packages/chat/src/relaunch-notice.ts
index 56063513ff..93ca9a70fc 100644
--- a/packages/chat/src/relaunch-notice.ts
+++ b/packages/chat/src/relaunch-notice.ts
@@ -85,9 +85,7 @@ export function createRelaunchNoticePoster(deps: {
         tenantId: notice.tenantId,
         workbenchId: room.workbenchId,
         sender: { name: null, address: notice.roomAddress },
-        parts: [
-          { kind: "text", text: relaunchNoticeText(notice.deadRunStatus) },
-        ],
+        parts: [{ kind: "text", text: relaunchNoticeText(notice.deadRunStatus) }],
         runId: localPartOf(notice.roomAddress),
       });
     }
diff --git a/packages/chat/src/resolve-workbench-ref.test.ts b/packages/chat/src/resolve-workbench-ref.test.ts
index 71fef8f663..636c5eadc3 100644
--- a/packages/chat/src/resolve-workbench-ref.test.ts
+++ b/packages/chat/src/resolve-workbench-ref.test.ts
@@ -74,11 +74,10 @@ describe("resolveWorkbenchIdForAgentFrame", () => {
       mailMessageId,
     });
 
-    const workbenchId = await resolveWorkbenchIdForAgentFrame(
-      { chatStore, roomMessages },
-      TENANT,
-      { senderAddress, inReplyTo: mailMessageId },
-    );
+    const workbenchId = await resolveWorkbenchIdForAgentFrame({ chatStore, roomMessages }, TENANT, {
+      senderAddress,
+      inReplyTo: mailMessageId,
+    });
 
     expect(workbenchId).toBe("wb_two");
     expect(reportErrorCalls).toHaveLength(0);
@@ -91,11 +90,9 @@ describe("resolveWorkbenchIdForAgentFrame", () => {
 
     await seedWorkbench(chatStore, "wb_only", senderAddress);
 
-    const workbenchId = await resolveWorkbenchIdForAgentFrame(
-      { chatStore, roomMessages },
-      TENANT,
-      { senderAddress },
-    );
+    const workbenchId = await resolveWorkbenchIdForAgentFrame({ chatStore, roomMessages }, TENANT, {
+      senderAddress,
+    });
 
     expect(workbenchId).toBe("wb_only");
     expect(reportErrorCalls).toHaveLength(0);
@@ -109,17 +106,13 @@ describe("resolveWorkbenchIdForAgentFrame", () => {
     await seedWorkbench(chatStore, "wb_a", senderAddress);
     await seedWorkbench(chatStore, "wb_b", senderAddress);
 
-    const workbenchId = await resolveWorkbenchIdForAgentFrame(
-      { chatStore, roomMessages },
-      TENANT,
-      { senderAddress },
-    );
+    const workbenchId = await resolveWorkbenchIdForAgentFrame({ chatStore, roomMessages }, TENANT, {
+      senderAddress,
+    });
 
     expect(workbenchId).toBeUndefined();
     expect(reportErrorCalls).toHaveLength(1);
-    expect(reportErrorCalls[0]?.context["operation"]).toBe(
-      "mailbox_ref_unresolved",
-    );
+    expect(reportErrorCalls[0]?.context["operation"]).toBe("mailbox_ref_unresolved");
     expect(reportErrorCalls[0]?.context["tenantId"]).toBe(TENANT);
   });
 
@@ -128,16 +121,12 @@ describe("resolveWorkbenchIdForAgentFrame", () => {
     const roomMessages = createInMemoryRoomMessageStore();
     const senderAddress = `ins_agent4@${DOMAIN}`;
 
-    const workbenchId = await resolveWorkbenchIdForAgentFrame(
-      { chatStore, roomMessages },
-      TENANT,
-      { senderAddress },
-    );
+    const workbenchId = await resolveWorkbenchIdForAgentFrame({ chatStore, roomMessages }, TENANT, {
+      senderAddress,
+    });
 
     expect(workbenchId).toBeUndefined();
     expect(reportErrorCalls).toHaveLength(1);
-    expect(reportErrorCalls[0]?.context["operation"]).toBe(
-      "mailbox_ref_unresolved",
-    );
+    expect(reportErrorCalls[0]?.context["operation"]).toBe("mailbox_ref_unresolved");
   });
 });
diff --git a/packages/chat/src/room-messages.test.ts b/packages/chat/src/room-messages.test.ts
index 0113e14392..6e02fb1fb4 100644
--- a/packages/chat/src/room-messages.test.ts
+++ b/packages/chat/src/room-messages.test.ts
@@ -1,11 +1,7 @@
 import { describe, expect, test } from "bun:test";
 
 import { CONSUMER_INFERENCE_FAILURE_NOTICE } from "./consumer-inference-text";
-import {
-  createInMemoryRoomMessageStore,
-  postRoomMessage,
-  previewOf,
-} from "./room-messages";
+import { createInMemoryRoomMessageStore, postRoomMessage, previewOf } from "./room-messages";
 
 const TENANT = "tnt_1";
 const WORKBENCH = "run_room";
@@ -92,9 +88,7 @@ describe("postRoomMessage", () => {
     });
     expect(listed.items[0]?.parts).toEqual(posted.parts);
     expect(JSON.stringify(publisher.published)).not.toMatch(/\[HTTP/);
-    expect(JSON.stringify(publisher.published)).not.toContain(
-      "API key is invalid",
-    );
+    expect(JSON.stringify(publisher.published)).not.toContain("API key is invalid");
   });
 
   test("an agent's message carries its run, a human's carries its principal", async () => {
@@ -291,9 +285,7 @@ describe("listActivity", () => {
       workbenches: [{ workbenchId: WORKBENCH }],
     });
 
-    expect(activity[WORKBENCH]?.preview).toBe(
-      CONSUMER_INFERENCE_FAILURE_NOTICE,
-    );
+    expect(activity[WORKBENCH]?.preview).toBe(CONSUMER_INFERENCE_FAILURE_NOTICE);
     expect(activity[WORKBENCH]?.preview).not.toMatch(/model key/i);
     expect(activity[WORKBENCH]?.preview).not.toMatch(/ref /i);
   });
@@ -311,9 +303,7 @@ describe("listActivity", () => {
         workbenchId: WORKBENCH,
         sender: { name: "Myra", address: "run_myra@acme.example" },
         runId: "run_myra",
-        parts: [
-          { kind: "text", text: "Hi — I'm Myra. What are we working on?" },
-        ],
+        parts: [{ kind: "text", text: "Hi — I'm Myra. What are we working on?" }],
       },
     );
     await Bun.sleep(2);
@@ -379,9 +369,7 @@ describe("listActivity", () => {
 
 describe("previewOf", () => {
   test("collapses whitespace and truncates long text", () => {
-    expect(previewOf([{ kind: "text", text: " hello   there \n" }])).toBe(
-      "hello there",
-    );
+    expect(previewOf([{ kind: "text", text: " hello   there \n" }])).toBe("hello there");
     expect(previewOf([{ kind: "text", text: "x".repeat(120) }])).toEndWith("…");
   });
 
diff --git a/packages/chat/src/room-messages.ts b/packages/chat/src/room-messages.ts
index c4faf8df48..d2a610dd7a 100644
--- a/packages/chat/src/room-messages.ts
+++ b/packages/chat/src/room-messages.ts
@@ -92,9 +92,7 @@ export interface ListRoomActivityInput {
 }
 
 export interface RoomMessageStore {
-  insertMessage(
-    input: PostRoomMessageInput & { readonly id: string },
-  ): Promise<RoomMessage>;
+  insertMessage(input: PostRoomMessageInput & { readonly id: string }): Promise<RoomMessage>;
   listMessages(input: ListRoomMessagesInput): Promise<ListedRoomMessages>;
   getMessages(input: {
     readonly tenantId: string;
@@ -125,9 +123,7 @@ export interface RoomMessageStore {
     readonly tenantId: string;
     readonly mailMessageId: string;
   }): Promise<RoomMessage | undefined>;
-  listActivity(
-    input: ListRoomActivityInput,
-  ): Promise<Record<string, RoomActivitySummary>>;
+  listActivity(input: ListRoomActivityInput): Promise<Record<string, RoomActivitySummary>>;
   /**
    * Removes a just-inserted row that never reached a client (CL-7450):
    * the mailbox fan-out step runs AFTER the row is stored but BEFORE it
@@ -228,9 +224,7 @@ function isFailurePreviewParts(parts: readonly Part[]): boolean {
  * are walked past so a join notice never blanks a prior readable preview
  * (CL-6795). Ordinary user/agent replies are never skipped.
  */
-function activityPreviewFromNewestFirst(
-  newestFirst: readonly RoomMessage[],
-): string {
+function activityPreviewFromNewestFirst(newestFirst: readonly RoomMessage[]): string {
   for (const message of newestFirst) {
     if (isFailurePreviewParts(message.parts)) continue;
     const preview = previewOf(message.parts);
@@ -358,9 +352,7 @@ function encodeCursor(message: RoomMessage): string {
   return `${message.createdAt}|${message.id}`;
 }
 
-function decodeCursor(
-  cursor: string,
-): { createdAt: Date; id: string } | undefined {
+function decodeCursor(cursor: string): { createdAt: Date; id: string } | undefined {
   const separator = cursor.lastIndexOf("|");
   if (separator === -1) return undefined;
   const createdAt = new Date(cursor.slice(0, separator));
@@ -423,9 +415,7 @@ export function createDrizzleRoomMessageStore(
         })
         .returning();
       if (row === undefined) {
-        throw new Error(
-          `failed to post a message into workbench "${input.workbenchId}"`,
-        );
+        throw new Error(`failed to post a message into workbench "${input.workbenchId}"`);
       }
       return toRoomMessage(row as MessageRow);
     },
@@ -435,8 +425,7 @@ export function createDrizzleRoomMessageStore(
         eq(workbenchMessages.tenantId, input.tenantId),
         eq(workbenchMessages.workbenchId, input.workbenchId),
       );
-      const cursor =
-        input.cursor === undefined ? undefined : decodeCursor(input.cursor);
+      const cursor = input.cursor === undefined ? undefined : decodeCursor(input.cursor);
       // Keyset, never offset: `(created_at, id)` strictly before the
       // cursor, so a message posted mid-page never shifts a later page.
       const where =
@@ -531,9 +520,7 @@ export function createDrizzleRoomMessageStore(
 
     async listActivity(input) {
       if (input.workbenches.length === 0) return {};
-      const workbenchIds = input.workbenches.map(
-        (workbench) => workbench.workbenchId,
-      );
+      const workbenchIds = input.workbenches.map((workbench) => workbench.workbenchId);
       const inTenant = eq(workbenchMessages.tenantId, input.tenantId);
 
       // Two bulk queries, never a read of every message the listed
@@ -544,9 +531,7 @@ export function createDrizzleRoomMessageStore(
       const newestRows = await db
         .selectDistinctOn([workbenchMessages.workbenchId])
         .from(workbenchMessages)
-        .where(
-          and(inTenant, inArray(workbenchMessages.workbenchId, workbenchIds)),
-        )
+        .where(and(inTenant, inArray(workbenchMessages.workbenchId, workbenchIds)))
         .orderBy(
           asc(workbenchMessages.workbenchId),
           desc(workbenchMessages.createdAt),
@@ -559,9 +544,7 @@ export function createDrizzleRoomMessageStore(
       // list. No cursor means everything in that workbench is unread.
       const unreadConditions = input.workbenches.map((workbench) => {
         const cursor =
-          workbench.sinceCreatedAt === undefined
-            ? new Date(0)
-            : new Date(workbench.sinceCreatedAt);
+          workbench.sinceCreatedAt === undefined ? new Date(0) : new Date(workbench.sinceCreatedAt);
         return and(
           eq(workbenchMessages.workbenchId, workbench.workbenchId),
           gt(workbenchMessages.createdAt, cursor),
@@ -575,9 +558,7 @@ export function createDrizzleRoomMessageStore(
         .from(workbenchMessages)
         .where(and(inTenant, or(...unreadConditions)))
         .groupBy(workbenchMessages.workbenchId);
-      const unreadByWorkbenchId = new Map(
-        unread.map((row) => [row.workbenchId, row.unreadCount]),
-      );
+      const unreadByWorkbenchId = new Map(unread.map((row) => [row.workbenchId, row.unreadCount]));
 
       const result: Record<string, RoomActivitySummary> = {};
       for (const row of newestRows) {
@@ -588,26 +569,12 @@ export function createDrizzleRoomMessageStore(
           const recentRows = await db
             .select()
             .from(workbenchMessages)
-            .where(
-              and(
-                inTenant,
-                eq(workbenchMessages.workbenchId, newest.workbenchId),
-              ),
-            )
-            .orderBy(
-              desc(workbenchMessages.createdAt),
-              desc(workbenchMessages.id),
-            )
+            .where(and(inTenant, eq(workbenchMessages.workbenchId, newest.workbenchId)))
+            .orderBy(desc(workbenchMessages.createdAt), desc(workbenchMessages.id))
             .limit(PREVIEW_LOOKBACK);
-          newestFirstForPreview = recentRows.map((recent) =>
-            toRoomMessage(recent as MessageRow),
-          );
+          newestFirstForPreview = recentRows.map((recent) => toRoomMessage(recent as MessageRow));
         }
-        result[newest.workbenchId] = summaryOf(
-          newest,
-          unreadCount,
-          newestFirstForPreview,
-        );
+        result[newest.workbenchId] = summaryOf(newest, unreadCount, newestFirstForPreview);
       }
       return result;
     },
@@ -619,8 +586,7 @@ export function createDrizzleRoomMessageStore(
  * workbench tables. */
 export function createInMemoryRoomMessageStore(): RoomMessageStore {
   const byWorkbench = new Map<string, RoomMessage[]>();
-  const keyOf = (tenantId: string, workbenchId: string) =>
-    `${tenantId}:${workbenchId}`;
+  const keyOf = (tenantId: string, workbenchId: string) => `${tenantId}:${workbenchId}`;
 
   return {
     async insertMessage(input) {
@@ -657,9 +623,7 @@ export function createInMemoryRoomMessageStore(): RoomMessageStore {
     async findByMailMessageId(input) {
       for (const [key, messages] of byWorkbench) {
         if (!key.startsWith(`${input.tenantId}:`)) continue;
-        const match = messages.find(
-          (message) => message.mailMessageId === input.mailMessageId,
-        );
+        const match = messages.find((message) => message.mailMessageId === input.mailMessageId);
         if (match !== undefined) return match;
       }
       return undefined;
@@ -676,8 +640,7 @@ export function createInMemoryRoomMessageStore(): RoomMessageStore {
     },
 
     async listMessages(input) {
-      const messages =
-        byWorkbench.get(keyOf(input.tenantId, input.workbenchId)) ?? [];
+      const messages = byWorkbench.get(keyOf(input.tenantId, input.workbenchId)) ?? [];
       // The same `(created_at, id)` total order the drizzle store pages
       // by, so a cursor means the same thing against either.
       const newestFirst = [...messages].sort((left, right) =>
@@ -685,8 +648,7 @@ export function createInMemoryRoomMessageStore(): RoomMessageStore {
           ? right.id.localeCompare(left.id)
           : right.createdAt.localeCompare(left.createdAt),
       );
-      const cursor =
-        input.cursor === undefined ? undefined : decodeCursor(input.cursor);
+      const cursor = input.cursor === undefined ? undefined : decodeCursor(input.cursor);
       if (cursor === undefined) return pageOf(newestFirst);
       const cursorCreatedAt = cursor.createdAt.toISOString();
       return pageOf(
@@ -708,23 +670,19 @@ export function createInMemoryRoomMessageStore(): RoomMessageStore {
     },
 
     async getMessage(input) {
-      const messages =
-        byWorkbench.get(keyOf(input.tenantId, input.workbenchId)) ?? [];
+      const messages = byWorkbench.get(keyOf(input.tenantId, input.workbenchId)) ?? [];
       return messages.find((message) => message.id === input.messageId);
     },
 
     async listActivity(input) {
       const result: Record<string, RoomActivitySummary> = {};
       for (const workbench of input.workbenches) {
-        const messages = byWorkbench.get(
-          keyOf(input.tenantId, workbench.workbenchId),
-        );
+        const messages = byWorkbench.get(keyOf(input.tenantId, workbench.workbenchId));
         const newest = messages?.[messages.length - 1];
         if (messages === undefined || newest === undefined) continue;
         const unreadCount = messages.filter(
           (message) =>
-            workbench.sinceCreatedAt === undefined ||
-            message.createdAt > workbench.sinceCreatedAt,
+            workbench.sinceCreatedAt === undefined || message.createdAt > workbench.sinceCreatedAt,
         ).length;
         const newestFirst = [...messages]
           .sort((left, right) =>
@@ -733,11 +691,7 @@ export function createInMemoryRoomMessageStore(): RoomMessageStore {
               : right.createdAt.localeCompare(left.createdAt),
           )
           .slice(0, PREVIEW_LOOKBACK);
-        result[workbench.workbenchId] = summaryOf(
-          newest,
-          unreadCount,
-          newestFirst,
-        );
+        result[workbench.workbenchId] = summaryOf(newest, unreadCount, newestFirst);
       }
       return result;
     },
diff --git a/packages/chat/src/routes.ts b/packages/chat/src/routes.ts
index 6fcfeb1c84..b27a9b617d 100644
--- a/packages/chat/src/routes.ts
+++ b/packages/chat/src/routes.ts
@@ -30,21 +30,13 @@ import {
   type BlockResponseRow,
   type BlockResponseStore,
 } from "./block-responses";
-import {
-  aggregateReactionsByMessage,
-  type ReactionStore,
-  type ReactionSummary,
-} from "./reactions";
+import { aggregateReactionsByMessage, type ReactionStore, type ReactionSummary } from "./reactions";
 import { isKnownReactionEmoji } from "./reaction-emoji";
 import type { PinRow, PinStore } from "./pins";
 import type { ClientIdStore } from "@corbits/agent-runtime";
 import { presetForKind } from "./kinds";
 import { localPartOf } from "./agent-address";
-import {
-  parseParticipants,
-  addParticipant,
-  handleFromName,
-} from "./participants";
+import { parseParticipants, addParticipant, handleFromName } from "./participants";
 import type { ParticipantRecord } from "./participants";
 import {
   WORKBENCH_CONTROL_NAMESPACE,
@@ -90,22 +82,12 @@ import {
   type WorkbenchPresenceRegistry,
 } from "./workbench-presence";
 import { createInMemoryTurnClaimStore } from "@corbits/agent-runtime";
-import {
-  createWorkbenchTurnQueue,
-  type WorkbenchTurnQueue,
-} from "@corbits/agent-runtime";
-import {
-  createTurnCancelRegistry,
-  type TurnCancelRegistry,
-} from "./turn-cancellation";
+import { createWorkbenchTurnQueue, type WorkbenchTurnQueue } from "@corbits/agent-runtime";
+import { createTurnCancelRegistry, type TurnCancelRegistry } from "./turn-cancellation";
 import type { TurnMailCorrelationStore } from "@corbits/agent-runtime";
 import type { ChatPlatform } from "./platform-port";
 import type { ChatStore } from "./store";
-import {
-  dispatchAtCommand,
-  dispatchSlashCommand,
-  resolveAtCommand,
-} from "@corbits/commands";
+import { dispatchAtCommand, dispatchSlashCommand, resolveAtCommand } from "@corbits/commands";
 import type { CommandRegistry, CommandResult } from "@corbits/commands";
 import { InferenceResolutionError } from "./model-unavailable";
 import { DefinitionProjectionMissingError } from "@corbits/workflows";
@@ -113,10 +95,7 @@ import type { NativePrincipal, NativePrincipalStore } from "./native-principal";
 import type { AgentTurnStore } from "@corbits/agent-runtime";
 import type { ThreadStore } from "./threads";
 import { ThreadDepthCapError } from "./threads";
-import {
-  MailboxFanoutFailedError,
-  type MailboxFanoutDeps,
-} from "./mailbox-fanout";
+import { MailboxFanoutFailedError, type MailboxFanoutDeps } from "./mailbox-fanout";
 import type { WorkbenchShareStore } from "./workbench-share";
 import { monogramFromName } from "./workbench-share";
 import type { FederationTrustStore } from "./federation-trust";
@@ -178,10 +157,7 @@ export type CreateChatRoutesDeps = {
    * hub wires this to its user table; omitted, the canned greeting
    * simply carries no name.
    */
-  resolvePrincipalName?: (
-    tenantId: string,
-    principalId: string,
-  ) => Promise<string | undefined>;
+  resolvePrincipalName?: (tenantId: string, principalId: string) => Promise<string | undefined>;
   /**
    * Runs a fresh chat's post-mint delivery chain (join event → canned
    * greeting → agent pre-warm) after the 201 — the sends that carry
@@ -337,10 +313,7 @@ export type CreateChatRoutesDeps = {
    * `FederationTrustStore` (this router never establishes or revokes
    * trust itself; that stays the native federation-trust surface's job).
    */
-  trust?: Pick<
-    FederationTrustStore,
-    "resolveSharedViaParent" | "getTenantName"
-  >;
+  trust?: Pick<FederationTrustStore, "resolveSharedViaParent" | "getTenantName">;
   /**
    * Releases an invited agent's launched instance when it is removed
    * from a workbench's participants — see `workbench-service.ts`'s
@@ -351,8 +324,7 @@ export type CreateChatRoutesDeps = {
    * error level rather than silently accepted (see
    * `removeWorkbenchParticipant`).
    */
-  releaseAgentInstance?:
-    ((address: string, reason: string) => Promise<void>) | undefined;
+  releaseAgentInstance?: ((address: string, reason: string) => Promise<void>) | undefined;
 };
 
 const log = getLogger(["chat", "routes"]);
@@ -440,10 +412,7 @@ const RemoveParticipantParams = type({
  * remainder, never from this joined text. */
 function textOf(parts: readonly PartType[]): string {
   return parts
-    .filter(
-      (part): part is Extract<PartType, { kind: "text" }> =>
-        part.kind === "text",
-    )
+    .filter((part): part is Extract<PartType, { kind: "text" }> => part.kind === "text")
     .map((part) => part.text)
     .join(" ");
 }
@@ -500,9 +469,9 @@ const SubmitQuestionResponseBody = type({
   "optionIndex?": "number.integer >= 0",
 });
 
-const SubmitBlockResponseBody = SubmitPollResponseBody.or(
-  SubmitFormResponseBody,
-).or(SubmitQuestionResponseBody);
+const SubmitBlockResponseBody = SubmitPollResponseBody.or(SubmitFormResponseBody).or(
+  SubmitQuestionResponseBody,
+);
 
 /**
  * The caller's own row on the GET wire. A question also carries
@@ -525,9 +494,7 @@ function ownBlockResponseForClient(row: BlockResponseRow | undefined):
   return {
     kind: "question",
     answer: row.payload.answer,
-    ...(row.payload.optionIndex !== undefined
-      ? { optionIndex: row.payload.optionIndex }
-      : {}),
+    ...(row.payload.optionIndex !== undefined ? { optionIndex: row.payload.optionIndex } : {}),
     notifiedAt: row.notifiedAt === null ? null : row.notifiedAt.toISOString(),
   };
 }
@@ -634,12 +601,7 @@ async function resolveWorkbenchAccess(
 ): Promise<{ ownerTenantId: string } | undefined> {
   if (await workbenchInTenant(deps.store, actingTenantId, workbenchId)) {
     if (
-      !(await benchCallerCanOpenWorkbench(
-        deps.store,
-        actingTenantId,
-        workbenchId,
-        principalId,
-      ))
+      !(await benchCallerCanOpenWorkbench(deps.store, actingTenantId, workbenchId, principalId))
     ) {
       return undefined;
     }
@@ -648,9 +610,7 @@ async function resolveWorkbenchAccess(
   if (deps.shares === undefined) return undefined;
   const share = await deps.shares.getShare(workbenchId, actingTenantId);
   if (share === undefined) return undefined;
-  if (
-    !(await deps.shares.isShareMember(actingTenantId, workbenchId, principalId))
-  ) {
+  if (!(await deps.shares.isShareMember(actingTenantId, workbenchId, principalId))) {
     return undefined;
   }
   return { ownerTenantId: share.owningTenantId };
@@ -674,24 +634,13 @@ async function resolveMessageSenderTenant(
   ownerTenantId: string,
   workbenchId: string,
   senderAddress: string,
-): Promise<
-  { tenantId: string; tenantName?: string; tenantMonogram?: string } | undefined
-> {
+): Promise<{ tenantId: string; tenantName?: string; tenantMonogram?: string } | undefined> {
   if (deps.shares === undefined) return undefined;
-  const shares = await deps.shares.listSharesForWorkbench(
-    ownerTenantId,
-    workbenchId,
-  );
+  const shares = await deps.shares.listSharesForWorkbench(ownerTenantId, workbenchId);
   if (shares.length === 0) return undefined;
   const principalId = localPartOf(senderAddress);
   for (const share of shares) {
-    if (
-      await deps.shares.isShareMember(
-        share.projectedTenantId,
-        workbenchId,
-        principalId,
-      )
-    ) {
+    if (await deps.shares.isShareMember(share.projectedTenantId, workbenchId, principalId)) {
       const name = await deps.trust?.getTenantName(share.projectedTenantId);
       const base = { tenantId: share.projectedTenantId };
       return name !== undefined
@@ -716,10 +665,7 @@ async function messageExistsInWorkbench(
   workbenchId: string,
   messageId: string,
 ): Promise<boolean> {
-  return (
-    (await roomMessages.getMessage({ tenantId, workbenchId, messageId })) !==
-    undefined
-  );
+  return (await roomMessages.getMessage({ tenantId, workbenchId, messageId })) !== undefined;
 }
 
 /** The address a caller's own message is posted under: their principal
@@ -778,11 +724,7 @@ async function enrichWithReactionsAndPins<T extends WireMessageItem>(
       : undefined;
   const pinnedIds =
     deps.pins !== undefined
-      ? new Set(
-          (await deps.pins.listPins(tenantId, workbenchId)).map(
-            (row) => row.messageId,
-          ),
-        )
+      ? new Set((await deps.pins.listPins(tenantId, workbenchId)).map((row) => row.messageId))
       : undefined;
   const clientIdByMessage =
     deps.clientIds !== undefined
@@ -832,7 +774,8 @@ async function enrichWithReactionsAndPins<T extends WireMessageItem>(
  * participant's existing run (CL-6451) — never a freshly minted one.
  */
 type WorkbenchCommandDecision =
-  { readonly command: CommandResult } | { readonly routeToParticipant: string };
+  | { readonly command: CommandResult }
+  | { readonly routeToParticipant: string };
 
 /**
  * Decides whether an incoming workbench message opens the command path
@@ -872,30 +815,18 @@ async function dispatchWorkbenchCommand(
   }
 
   if (input.text.startsWith("@")) {
-    const resolved = await resolveAtCommand(
-      deps.commands,
-      input.text,
-      input.tenantId,
-    );
+    const resolved = await resolveAtCommand(deps.commands, input.text, input.tenantId);
     if (resolved === undefined) return undefined;
 
-    const existing = await deps.store.getWorkbenchSettings(
-      input.tenantId,
-      input.workbenchId,
-    );
-    const participants =
-      existing !== undefined ? participantsOf(existing.settings) : [];
+    const existing = await deps.store.getWorkbenchSettings(input.tenantId, input.workbenchId);
+    const participants = existing !== undefined ? participantsOf(existing.settings) : [];
     const namesKnownHandle = participants.some(
       (participant) => participant.handle === resolved.name,
     );
     if (namesKnownHandle) return undefined;
 
-    const invitable = await deps.platform.listInvitableDefinitions(
-      input.tenantId,
-    );
-    const commandDefinition = invitable.find(
-      (definition) => definition.name === resolved.name,
-    );
+    const invitable = await deps.platform.listInvitableDefinitions(input.tenantId);
+    const commandDefinition = invitable.find((definition) => definition.name === resolved.name);
     if (commandDefinition !== undefined) {
       const resident = await findResidentAgentForDefinition(
         deps.platform,
@@ -916,8 +847,7 @@ async function dispatchWorkbenchCommand(
 
 export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
   const app = new Hono<TenantEnv>();
-  const registry =
-    deps.workbenchSubscribers ?? createWorkbenchSubscriberRegistry();
+  const registry = deps.workbenchSubscribers ?? createWorkbenchSubscriberRegistry();
   const publish = registry.publish;
   // One upstream platform subscription per workbench, fanned out to every
   // SSE connection on that workbench — see `createPlatformWorkbenchFanout`.
@@ -931,464 +861,404 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
     });
   const turnCancellation = deps.turnCancellation ?? createTurnCancelRegistry();
 
-  app.post(
-    "/workbenches",
-    deps.requireGrant("workflow-run:*", "create"),
-    async (c) => {
-      const body = CreateWorkbenchBody(
-        await c.req.json().catch(() => undefined),
+  app.post("/workbenches", deps.requireGrant("workflow-run:*", "create"), async (c) => {
+    const body = CreateWorkbenchBody(await c.req.json().catch(() => undefined));
+    if (body instanceof type.errors) {
+      return c.json(
+        makeErrorEnvelope({
+          code: "bad_request",
+          userMessage: `invalid workbench body: ${body.summary}`,
+        }),
+        400,
       );
-      if (body instanceof type.errors) {
-        return c.json(
-          makeErrorEnvelope({
-            code: "bad_request",
-            userMessage: `invalid workbench body: ${body.summary}`,
-          }),
-          400,
-        );
-      }
+    }
 
-      if (
-        body.kind === "chat" &&
-        body.definitionId === undefined &&
-        body.principalId === undefined
-      ) {
+    if (body.kind === "chat" && body.definitionId === undefined && body.principalId === undefined) {
+      return c.json(
+        makeErrorEnvelope({
+          code: "bad_request",
+          userMessage:
+            "creating a chat requires either a definitionId naming the " +
+            "one agent it launches with, or a principalId naming the " +
+            "one bench member it's a direct conversation with",
+        }),
+        400,
+      );
+    }
+    if (body.kind === "chat" && body.definitionId !== undefined && body.principalId !== undefined) {
+      return c.json(
+        makeErrorEnvelope({
+          code: "bad_request",
+          userMessage: "a chat's counterpart is exactly one agent or one person, " + "never both",
+        }),
+        400,
+      );
+    }
+
+    const tenant = c.get("tenant");
+    const principal = c.get("principal");
+
+    // A person-DM's counterpart is validated before anything is
+    // minted: a caller cannot start a direct chat with themselves
+    // (structurally never a DM — there is no second party), and
+    // `principalId` must name a real, active member of this bench.
+    // Both fail closed with an ordinary client error rather than
+    // seeding a workbench with a participant record nothing backs.
+    // The validated counterpart is carried to the join below — one
+    // lookup, one predicate, no second read that could drift.
+    let dmCounterpart: NativePrincipal | undefined;
+    if (isChatWithPrincipal(body)) {
+      if (body.principalId === principal.id) {
         return c.json(
           makeErrorEnvelope({
-            code: "bad_request",
-            userMessage:
-              "creating a chat requires either a definitionId naming the " +
-              "one agent it launches with, or a principalId naming the " +
-              "one bench member it's a direct conversation with",
+            code: "conflict",
+            userMessage: "you cannot start a direct chat with yourself",
           }),
-          400,
+          409,
         );
       }
-      if (
-        body.kind === "chat" &&
-        body.definitionId !== undefined &&
-        body.principalId !== undefined
-      ) {
+      const target = await deps.principals.getTenantPrincipal(tenant.id, body.principalId);
+      if (target === undefined || target.kind !== "user" || target.status !== "active") {
         return c.json(
           makeErrorEnvelope({
             code: "bad_request",
-            userMessage:
-              "a chat's counterpart is exactly one agent or one person, " +
-              "never both",
+            userMessage: "principalId does not name an active member of this bench",
           }),
           400,
         );
       }
+      dmCounterpart = target;
+    }
 
-      const tenant = c.get("tenant");
-      const principal = c.get("principal");
+    // The client creates the conversation tenant through Interchange before
+    // initializing chat. The tenant id is therefore the stable workbench id;
+    // chat never mints or links another tenant behind it.
+    const workbenchId = tenant.id;
+    // An unnamed agent chat is titled by its agent's display name. An
+    // unknown definition leaves this undefined; the post-join handle
+    // fallback below still names the chat then.
+    const invitable = isChatWithDefinition(body)
+      ? await deps.platform.listInvitableDefinitions(tenant.id)
+      : [];
+    const isAgentDm = isChatWithDefinition(body);
+    const chatTitle =
+      body.name ??
+      (isAgentDm
+        ? invitable.find((definition) => definition.id === body.definitionId)?.description
+        : undefined);
+
+    const preset = presetForKind(body.kind);
+    // Initial participants arrive as bare addresses; each gets a
+    // handle derived from its own local part, de-duplicated the same
+    // way an invited agent's handle is (see `POST .../invite` below)
+    // — settings always hold records, never bare strings.
+    const initialParticipants = (body.participants ?? []).reduce<ParticipantRecord[]>(
+      (acc, address) => addParticipant(acc, address, localPartOf(address)),
+      [],
+    );
+    const baseSettings = {
+      "chat/kind": body.kind,
+      "chat/pinned": preset.pinned,
+      "chat/participants": initialParticipants,
+      // The creator's standing invite: members-only visibility admits
+      // exactly this principal plus participant-row holders (see
+      // `benchCallerCanOpenWorkbench`), so creation stamps it here —
+      // the one write path that knows who the creator is.
+      "chat/createdBy": principal.id,
+    };
+    // The definition pin identifies the agent bound to this client-minted DM.
+    const withDefinitionId: Record<string, unknown> = isChatWithDefinition(body)
+      ? { ...baseSettings, [AGENT_DM_DEFINITION_ID_KEY]: body.definitionId }
+      : baseSettings;
+    const settings: Record<string, unknown> =
+      chatTitle !== undefined ? { ...withDefinitionId, "chat/name": chatTitle } : withDefinitionId;
+
+    const row = await deps.store.createWorkbenchSettings({
+      tenantId: tenant.id,
+      workbenchId,
+      settings,
+      updatedBy: principal.id,
+    });
 
-      // A person-DM's counterpart is validated before anything is
-      // minted: a caller cannot start a direct chat with themselves
-      // (structurally never a DM — there is no second party), and
-      // `principalId` must name a real, active member of this bench.
-      // Both fail closed with an ordinary client error rather than
-      // seeding a workbench with a participant record nothing backs.
-      // The validated counterpart is carried to the join below — one
-      // lookup, one predicate, no second read that could drift.
-      let dmCounterpart: NativePrincipal | undefined;
-      if (isChatWithPrincipal(body)) {
-        if (body.principalId === principal.id) {
+    // Everything on the request path below is database work — an
+    // agent launch is a mint (see `WorkbenchLauncher`'s own docs), so
+    // the 201 returns in database time with the agent already a
+    // participant. The deploy rides the post-mint delivery chain: the
+    // greeting posts as data, and an explicit pre-warm deploys the
+    // agent ahead of the member's first message.
+    if (!isChatWithPrincipal(body) && isChatWithDefinition(body)) {
+      const definitionId = body.definitionId;
+      const runPostMintDelivery =
+        deps.runPostMintDelivery ?? ((work: () => Promise<void>) => void work());
+
+      let joined: Awaited<ReturnType<typeof launchAndJoinAgent>>;
+      try {
+        joined = await launchAndJoinAgent(
+          {
+            store: deps.store,
+            platform: deps.platform,
+            roomMessages: deps.roomMessages,
+            publish,
+          },
+          {
+            tenantId: tenant.id,
+            principalId: principal.id,
+            workbenchId,
+            definitionId,
+            existingSettings: row.settings,
+            invitable,
+          },
+        );
+      } catch (err) {
+        // CL-6357: a definition whose every asset candidate has gone
+        // unresolvable (DB/blob drift) is a named, consumer-facing
+        // 4xx — never an unhandled 500 — with the same compensation
+        // every other agent-mint failure already ran above.
+        if (err instanceof DefinitionProjectionMissingError) {
           return c.json(
             makeErrorEnvelope({
-              code: "conflict",
-              userMessage: "you cannot start a direct chat with yourself",
+              code: "not_launchable",
+              userMessage: err.guidance,
             }),
             409,
           );
         }
-        const target = await deps.principals.getTenantPrincipal(
-          tenant.id,
-          body.principalId,
-        );
-        if (
-          target === undefined ||
-          target.kind !== "user" ||
-          target.status !== "active"
-        ) {
+        if (err instanceof InferenceResolutionError) {
           return c.json(
             makeErrorEnvelope({
-              code: "bad_request",
-              userMessage:
-                "principalId does not name an active member of this bench",
+              code: "not_launchable",
+              userMessage: MODEL_UNAVAILABLE_CONSUMER_MESSAGE,
             }),
-            400,
+            409,
           );
         }
-        dmCounterpart = target;
-      }
-
-      // The client creates the conversation tenant through Interchange before
-      // initializing chat. The tenant id is therefore the stable workbench id;
-      // chat never mints or links another tenant behind it.
-      const workbenchId = tenant.id;
-      // An unnamed agent chat is titled by its agent's display name. An
-      // unknown definition leaves this undefined; the post-join handle
-      // fallback below still names the chat then.
-      const invitable = isChatWithDefinition(body)
-        ? await deps.platform.listInvitableDefinitions(tenant.id)
-        : [];
-      const isAgentDm = isChatWithDefinition(body);
-      const chatTitle =
-        body.name ??
-        (isAgentDm
-          ? invitable.find((definition) => definition.id === body.definitionId)
-              ?.description
-          : undefined);
-
-      const preset = presetForKind(body.kind);
-      // Initial participants arrive as bare addresses; each gets a
-      // handle derived from its own local part, de-duplicated the same
-      // way an invited agent's handle is (see `POST .../invite` below)
-      // — settings always hold records, never bare strings.
-      const initialParticipants = (body.participants ?? []).reduce<
-        ParticipantRecord[]
-      >(
-        (acc, address) => addParticipant(acc, address, localPartOf(address)),
-        [],
-      );
-      const baseSettings = {
-        "chat/kind": body.kind,
-        "chat/pinned": preset.pinned,
-        "chat/participants": initialParticipants,
-        // The creator's standing invite: members-only visibility admits
-        // exactly this principal plus participant-row holders (see
-        // `benchCallerCanOpenWorkbench`), so creation stamps it here —
-        // the one write path that knows who the creator is.
-        "chat/createdBy": principal.id,
-      };
-      // The definition pin identifies the agent bound to this client-minted DM.
-      const withDefinitionId: Record<string, unknown> = isChatWithDefinition(
-        body,
-      )
-        ? { ...baseSettings, [AGENT_DM_DEFINITION_ID_KEY]: body.definitionId }
-        : baseSettings;
-      const settings: Record<string, unknown> =
-        chatTitle !== undefined
-          ? { ...withDefinitionId, "chat/name": chatTitle }
-          : withDefinitionId;
-
-      const row = await deps.store.createWorkbenchSettings({
-        tenantId: tenant.id,
-        workbenchId,
-        settings,
-        updatedBy: principal.id,
-      });
+        throw err;
+      }
 
-      // Everything on the request path below is database work — an
-      // agent launch is a mint (see `WorkbenchLauncher`'s own docs), so
-      // the 201 returns in database time with the agent already a
-      // participant. The deploy rides the post-mint delivery chain: the
-      // greeting posts as data, and an explicit pre-warm deploys the
-      // agent ahead of the member's first message.
-      if (!isChatWithPrincipal(body) && isChatWithDefinition(body)) {
-        const definitionId = body.definitionId;
-        const runPostMintDelivery =
-          deps.runPostMintDelivery ??
-          ((work: () => Promise<void>) => void work());
-
-        let joined: Awaited<ReturnType<typeof launchAndJoinAgent>>;
-        try {
-          joined = await launchAndJoinAgent(
-            {
-              store: deps.store,
-              platform: deps.platform,
-              roomMessages: deps.roomMessages,
-              publish,
-            },
-            {
-              tenantId: tenant.id,
-              principalId: principal.id,
-              workbenchId,
-              definitionId,
-              existingSettings: row.settings,
-              invitable,
-            },
+      const finalSettings =
+        chatTitle === undefined
+          ? (
+              await deps.store.updateWorkbenchSettings({
+                tenantId: tenant.id,
+                workbenchId,
+                settings: { ...joined.settings, "chat/name": joined.handle },
+                updatedBy: principal.id,
+              })
+            ).settings
+          : joined.settings;
+
+      const agentAddress = joined.address;
+      const joinEventDelivered = joined.joinEventDelivered;
+      const agentDisplayName = joined.displayName;
+      runPostMintDelivery(async () => {
+        const senderName =
+          deps.resolvePrincipalName !== undefined
+            ? await deps.resolvePrincipalName(tenant.id, principal.id).catch(() => undefined)
+            : undefined;
+        // Greeting after the join event, so the timeline reads
+        // joined-then-hello; neither ever rejects.
+        await joinEventDelivered;
+        await postCannedGreeting(
+          { roomMessages: deps.roomMessages, publish },
+          {
+            tenantId: tenant.id,
+            workbenchId,
+            agentAddress,
+            agentName: agentDisplayName,
+            ...(senderName !== undefined ? { senderName } : {}),
+          },
+        );
+        await deps.platform.ensureAwake(agentAddress).catch((err: unknown) => {
+          log.error(
+            "Pre-warm deploy failed for workbench {workbenchId}'s agent " +
+              "{agentAddress}; the next message to it retries the wake: {err}",
+            { workbenchId, agentAddress, err },
           );
-        } catch (err) {
-          // CL-6357: a definition whose every asset candidate has gone
-          // unresolvable (DB/blob drift) is a named, consumer-facing
-          // 4xx — never an unhandled 500 — with the same compensation
-          // every other agent-mint failure already ran above.
-          if (err instanceof DefinitionProjectionMissingError) {
-            return c.json(
-              makeErrorEnvelope({
-                code: "not_launchable",
-                userMessage: err.guidance,
-              }),
-              409,
-            );
-          }
-          if (err instanceof InferenceResolutionError) {
-            return c.json(
-              makeErrorEnvelope({
-                code: "not_launchable",
-                userMessage: MODEL_UNAVAILABLE_CONSUMER_MESSAGE,
-              }),
-              409,
-            );
-          }
-          throw err;
-        }
+        });
+      });
 
+      return c.json(workbenchView({ workbenchId, settings: finalSettings }), 201);
+    }
+
+    if (isChatWithPrincipal(body)) {
+      // A person-DM's counterpart is added directly, with no
+      // instance to launch (see `joinHumanParticipant`'s own doc
+      // comment). Its handle has no settings-held name to derive
+      // from the way an invited agent's does, so it comes from the
+      // slug of whatever title the caller gave the chat — chat-ui
+      // always sends the chosen member's display name as `name`
+      // when the person didn't type a custom title, so this
+      // resolves to something readable in the overwhelming case;
+      // the local-part-of-the-principal-id fallback below only
+      // fires for a bare API call that omits `name` entirely.
+      const memberHandle = handleFromName(body.name ?? "", body.principalId);
+      // The pre-mint gate above already validated this counterpart —
+      // reused here with the full predicate rather than re-fetched, so
+      // the kind/status check cannot drift between the two reads. The
+      // fail-closed shape stays: an unset counterpart is still a 400.
+      if (
+        dmCounterpart === undefined ||
+        dmCounterpart.kind !== "user" ||
+        dmCounterpart.status !== "active"
+      ) {
+        return c.json(
+          makeErrorEnvelope({
+            code: "bad_request",
+            userMessage: "principalId does not name an active member of this bench",
+          }),
+          400,
+        );
+      }
+      try {
+        const joined = await joinHumanParticipant(
+          {
+            store: deps.store,
+            roomMessages: deps.roomMessages,
+            publish,
+          },
+          {
+            tenantId: tenant.id,
+            principalId: principal.id,
+            workbenchId,
+            memberPrincipalId: body.principalId,
+            memberHandle,
+          },
+        );
+
+        // The chat's default title, when the caller passes no name,
+        // is the same handle its one participant record carries —
+        // mirroring the agent-chat fallback below exactly.
         const finalSettings =
-          chatTitle === undefined
+          body.name === undefined
             ? (
                 await deps.store.updateWorkbenchSettings({
                   tenantId: tenant.id,
                   workbenchId,
-                  settings: { ...joined.settings, "chat/name": joined.handle },
+                  settings: {
+                    ...joined.settings,
+                    "chat/name": joined.handle,
+                  },
                   updatedBy: principal.id,
                 })
               ).settings
             : joined.settings;
 
-        const agentAddress = joined.address;
-        const joinEventDelivered = joined.joinEventDelivered;
-        const agentDisplayName = joined.displayName;
-        runPostMintDelivery(async () => {
-          const senderName =
-            deps.resolvePrincipalName !== undefined
-              ? await deps
-                  .resolvePrincipalName(tenant.id, principal.id)
-                  .catch(() => undefined)
-              : undefined;
-          // Greeting after the join event, so the timeline reads
-          // joined-then-hello; neither ever rejects.
-          await joinEventDelivered;
-          await postCannedGreeting(
-            { roomMessages: deps.roomMessages, publish },
-            {
-              tenantId: tenant.id,
-              workbenchId,
-              agentAddress,
-              agentName: agentDisplayName,
-              ...(senderName !== undefined ? { senderName } : {}),
-            },
-          );
-          await deps.platform
-            .ensureAwake(agentAddress)
-            .catch((err: unknown) => {
-              log.error(
-                "Pre-warm deploy failed for workbench {workbenchId}'s agent " +
-                  "{agentAddress}; the next message to it retries the wake: {err}",
-                { workbenchId, agentAddress, err },
-              );
-            });
+        return c.json(workbenchView({ workbenchId, settings: finalSettings }), 201);
+      } catch (err) {
+        reportError(err, {
+          operation: "chat.joinHumanParticipant",
+          tenantId: tenant.id,
         });
-
-        return c.json(
-          workbenchView({ workbenchId, settings: finalSettings }),
-          201,
-        );
-      }
-
-      if (isChatWithPrincipal(body)) {
-        // A person-DM's counterpart is added directly, with no
-        // instance to launch (see `joinHumanParticipant`'s own doc
-        // comment). Its handle has no settings-held name to derive
-        // from the way an invited agent's does, so it comes from the
-        // slug of whatever title the caller gave the chat — chat-ui
-        // always sends the chosen member's display name as `name`
-        // when the person didn't type a custom title, so this
-        // resolves to something readable in the overwhelming case;
-        // the local-part-of-the-principal-id fallback below only
-        // fires for a bare API call that omits `name` entirely.
-        const memberHandle = handleFromName(body.name ?? "", body.principalId);
-        // The pre-mint gate above already validated this counterpart —
-        // reused here with the full predicate rather than re-fetched, so
-        // the kind/status check cannot drift between the two reads. The
-        // fail-closed shape stays: an unset counterpart is still a 400.
-        if (
-          dmCounterpart === undefined ||
-          dmCounterpart.kind !== "user" ||
-          dmCounterpart.status !== "active"
-        ) {
-          return c.json(
-            makeErrorEnvelope({
-              code: "bad_request",
-              userMessage:
-                "principalId does not name an active member of this bench",
-            }),
-            400,
-          );
-        }
-        try {
-          const joined = await joinHumanParticipant(
-            {
-              store: deps.store,
-              roomMessages: deps.roomMessages,
-              publish,
-            },
-            {
-              tenantId: tenant.id,
-              principalId: principal.id,
-              workbenchId,
-              memberPrincipalId: body.principalId,
-              memberHandle,
-            },
-          );
-
-          // The chat's default title, when the caller passes no name,
-          // is the same handle its one participant record carries —
-          // mirroring the agent-chat fallback below exactly.
-          const finalSettings =
-            body.name === undefined
-              ? (
-                  await deps.store.updateWorkbenchSettings({
-                    tenantId: tenant.id,
-                    workbenchId,
-                    settings: {
-                      ...joined.settings,
-                      "chat/name": joined.handle,
-                    },
-                    updatedBy: principal.id,
-                  })
-                ).settings
-              : joined.settings;
-
-          return c.json(
-            workbenchView({ workbenchId, settings: finalSettings }),
-            201,
-          );
-        } catch (err) {
-          reportError(err, {
-            operation: "chat.joinHumanParticipant",
-            tenantId: tenant.id,
-          });
-          throw err;
-        }
+        throw err;
       }
+    }
 
-      return c.json(workbenchView(row), 201);
-    },
-  );
-
-  app.get(
-    "/workbenches",
-    deps.requireGrant("workflow-run:*", "read"),
-    async (c) => {
-      const tenant = c.get("tenant");
-      const kind = c.req.query("kind");
-      const rows = await deps.store.listWorkbenchSettings(tenant.id, kind);
+    return c.json(workbenchView(row), 201);
+  });
 
-      // Message signals (unread count, preview, relative time) in two bulk
-      // calls covering every row — never one per workbench. The caller's
-      // own read cursors come from `workbench_read_state`, the activity
-      // from the timeline itself.
-      const principal = c.get("principal");
-      const readStates = await deps.store.listReadStates(
-        tenant.id,
-        rows.map((row) => row.workbenchId),
-        principal.id,
-      );
-      const cursorByWorkbenchId = new Map(
-        readStates.map((state) => [
-          state.workbenchId,
-          state.lastSeenCreatedAt.toISOString(),
-        ]),
-      );
-      const activityByWorkbenchId = await deps.roomMessages.listActivity({
-        tenantId: tenant.id,
-        workbenches: rows.map((row) => {
-          const sinceCreatedAt = cursorByWorkbenchId.get(row.workbenchId);
-          return sinceCreatedAt === undefined
-            ? { workbenchId: row.workbenchId }
-            : { workbenchId: row.workbenchId, sinceCreatedAt };
-        }),
-      });
+  app.get("/workbenches", deps.requireGrant("workflow-run:*", "read"), async (c) => {
+    const tenant = c.get("tenant");
+    const kind = c.req.query("kind");
+    const rows = await deps.store.listWorkbenchSettings(tenant.id, kind);
+
+    // Message signals (unread count, preview, relative time) in two bulk
+    // calls covering every row — never one per workbench. The caller's
+    // own read cursors come from `workbench_read_state`, the activity
+    // from the timeline itself.
+    const principal = c.get("principal");
+    const readStates = await deps.store.listReadStates(
+      tenant.id,
+      rows.map((row) => row.workbenchId),
+      principal.id,
+    );
+    const cursorByWorkbenchId = new Map(
+      readStates.map((state) => [state.workbenchId, state.lastSeenCreatedAt.toISOString()]),
+    );
+    const activityByWorkbenchId = await deps.roomMessages.listActivity({
+      tenantId: tenant.id,
+      workbenches: rows.map((row) => {
+        const sinceCreatedAt = cursorByWorkbenchId.get(row.workbenchId);
+        return sinceCreatedAt === undefined
+          ? { workbenchId: row.workbenchId }
+          : { workbenchId: row.workbenchId, sinceCreatedAt };
+      }),
+    });
 
-      const liveState = await listWorkbenchLiveState({
-        tenantId: tenant.id,
-        workbenchIds: rows.map((row) => row.workbenchId),
-        readCursors: cursorByWorkbenchId,
-        agentTurns: deps.agentTurns,
-        roomMessages: deps.roomMessages,
-      });
+    const liveState = await listWorkbenchLiveState({
+      tenantId: tenant.id,
+      workbenchIds: rows.map((row) => row.workbenchId),
+      readCursors: cursorByWorkbenchId,
+      agentTurns: deps.agentTurns,
+      roomMessages: deps.roomMessages,
+    });
 
-      const ownItems = rows.map((row) => {
-        const view = workbenchView(row);
-        const activity = activityByWorkbenchId[row.workbenchId];
-        const withLiveState = {
-          ...view,
-          live: liveState.get(row.workbenchId),
-        };
-        if (activity === undefined) return withLiveState;
-        const withUnread = {
-          ...withLiveState,
-          unreadCount: activity.unreadCount,
-        };
-        if (activity.lastActivityAt === undefined) return withUnread;
-        const withActivity = {
-          ...withUnread,
-          lastActivityAt: activity.lastActivityAt,
-        };
-        return activity.preview === undefined
-          ? withActivity
-          : { ...withActivity, preview: activity.preview };
-      });
+    const ownItems = rows.map((row) => {
+      const view = workbenchView(row);
+      const activity = activityByWorkbenchId[row.workbenchId];
+      const withLiveState = {
+        ...view,
+        live: liveState.get(row.workbenchId),
+      };
+      if (activity === undefined) return withLiveState;
+      const withUnread = {
+        ...withLiveState,
+        unreadCount: activity.unreadCount,
+      };
+      if (activity.lastActivityAt === undefined) return withUnread;
+      const withActivity = {
+        ...withUnread,
+        lastActivityAt: activity.lastActivityAt,
+      };
+      return activity.preview === undefined
+        ? withActivity
+        : { ...withActivity, preview: activity.preview };
+    });
 
-      // Workbenches a sibling tenant projected into this one (CL-5882) —
-      // a UNION with this tenant's own rows above, never a replacement.
-      // Only a share this caller's principal was explicitly added to
-      // (`isShareMember`) contributes a row: a share that exists but has
-      // no member row for this principal, or a tenant with no share at
-      // all, adds nothing here, matching `resolveWorkbenchAccess`'s same
-      // fail-closed rule for the message/read-state/stream routes.
-      const shares = deps.shares;
-      const sharedItems =
-        shares === undefined
-          ? []
-          : await (async () => {
-              const projectedShares = await shares.listSharesProjectedInto(
+    // Workbenches a sibling tenant projected into this one (CL-5882) —
+    // a UNION with this tenant's own rows above, never a replacement.
+    // Only a share this caller's principal was explicitly added to
+    // (`isShareMember`) contributes a row: a share that exists but has
+    // no member row for this principal, or a tenant with no share at
+    // all, adds nothing here, matching `resolveWorkbenchAccess`'s same
+    // fail-closed rule for the message/read-state/stream routes.
+    const shares = deps.shares;
+    const sharedItems =
+      shares === undefined
+        ? []
+        : await (async () => {
+            const projectedShares = await shares.listSharesProjectedInto(tenant.id);
+            const items: Record<string, unknown>[] = [];
+            for (const share of projectedShares) {
+              if (!(await shares.isShareMember(tenant.id, share.workbenchId, principal.id))) {
+                continue;
+              }
+              const ownerRow = await deps.store.getWorkbenchSettings(
+                share.owningTenantId,
+                share.workbenchId,
+              );
+              if (ownerRow === undefined) continue;
+              const view = workbenchView(ownerRow);
+              if (kind !== undefined && view.kind !== kind) continue;
+              const viaParent = await deps.trust?.resolveSharedViaParent(
+                share.owningTenantId,
                 tenant.id,
               );
-              const items: Record<string, unknown>[] = [];
-              for (const share of projectedShares) {
-                if (
-                  !(await shares.isShareMember(
-                    tenant.id,
-                    share.workbenchId,
-                    principal.id,
-                  ))
-                ) {
-                  continue;
-                }
-                const ownerRow = await deps.store.getWorkbenchSettings(
-                  share.owningTenantId,
-                  share.workbenchId,
-                );
-                if (ownerRow === undefined) continue;
-                const view = workbenchView(ownerRow);
-                if (kind !== undefined && view.kind !== kind) continue;
-                const viaParent = await deps.trust?.resolveSharedViaParent(
-                  share.owningTenantId,
-                  tenant.id,
-                );
-                const owningTenantName = await deps.trust?.getTenantName(
-                  share.owningTenantId,
-                );
-                const sharedLabel =
-                  viaParent !== undefined
-                    ? `shared via parent · ${viaParent.parentName}`
-                    : `shared · ${owningTenantName ?? "another tenant"}`;
-                items.push({
-                  ...view,
-                  sharedLabel,
-                  live: "idle",
-                });
-              }
-              return items;
-            })();
+              const owningTenantName = await deps.trust?.getTenantName(share.owningTenantId);
+              const sharedLabel =
+                viaParent !== undefined
+                  ? `shared via parent · ${viaParent.parentName}`
+                  : `shared · ${owningTenantName ?? "another tenant"}`;
+              items.push({
+                ...view,
+                sharedLabel,
+                live: "idle",
+              });
+            }
+            return items;
+          })();
 
-      return c.json({ items: [...ownItems, ...sharedItems] });
-    },
-  );
+    return c.json({ items: [...ownItems, ...sharedItems] });
+  });
 
   // A message's thread is the one it was assigned to, or the root thread
   // when it was never assigned at all — `workbench_thread_messages` states
@@ -1408,10 +1278,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
   > {
     if (deps.threads === undefined) return undefined;
     const root = await deps.threads.ensureRootThread(tenantId, workbenchId);
-    const assignments = await deps.threads.listThreadAssignments(
-      tenantId,
-      workbenchId,
-    );
+    const assignments = await deps.threads.listThreadAssignments(tenantId, workbenchId);
     return {
       rootThreadId: root.id,
       threadIdOf: (id) => assignments.get(id) ?? root.id,
@@ -1451,10 +1318,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
         tenantId: tenant.id,
         workbenchId,
       });
-      const activityByThreadId = new Map<
-        string,
-        { count: number; lastActivityAt: string }
-      >();
+      const activityByThreadId = new Map<string, { count: number; lastActivityAt: string }>();
       for (const item of listed.items) {
         const threadId = membership.threadIdOf(item.id);
         const current = activityByThreadId.get(threadId);
@@ -1533,9 +1397,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
         parentMessageId: body.parentMessageId,
       };
       const thread = await deps.threads.forkThread(
-        body.title !== undefined
-          ? { ...forkParams, title: body.title }
-          : forkParams,
+        body.title !== undefined ? { ...forkParams, title: body.title } : forkParams,
       );
       return c.json(
         {
@@ -1595,9 +1457,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
         runRef: body.runRef,
       };
       const thread = await deps.threads.createDeliveryThread(
-        body.title !== undefined
-          ? { ...deliveryParams, title: body.title }
-          : deliveryParams,
+        body.title !== undefined ? { ...deliveryParams, title: body.title } : deliveryParams,
       );
       return c.json(
         {
@@ -1621,12 +1481,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       const workbenchId = c.req.param("id");
       const cursor = c.req.query("cursor");
 
-      const access = await resolveWorkbenchAccess(
-        deps,
-        tenant.id,
-        workbenchId,
-        principal.id,
-      );
+      const access = await resolveWorkbenchAccess(deps, tenant.id, workbenchId, principal.id);
       if (access === undefined) {
         return c.json(
           makeErrorEnvelope({
@@ -1648,10 +1503,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       // membership resolve costs one extra read, not one per thread.
       // Absent (not a fabricated id) on a host that mounts no thread
       // store, matching `GET /threads`' own `rootThreadId: ""` there.
-      const membership = await resolveThreadMembership(
-        access.ownerTenantId,
-        workbenchId,
-      );
+      const membership = await resolveThreadMembership(access.ownerTenantId, workbenchId);
 
       const items = await Promise.all(
         listed.items.map(async (message) => {
@@ -1665,9 +1517,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
             id: message.id,
             createdAt: message.createdAt,
             sender:
-              senderTenant !== undefined
-                ? { ...message.sender, ...senderTenant }
-                : message.sender,
+              senderTenant !== undefined ? { ...message.sender, ...senderTenant } : message.sender,
             parts: message.parts,
           };
           return membership === undefined
@@ -1706,12 +1556,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       const workbenchId = c.req.param("id");
       const blobId = c.req.param("blobId");
       if (
-        (await resolveWorkbenchAccess(
-          deps,
-          tenant.id,
-          workbenchId,
-          principal.id,
-        )) === undefined
+        (await resolveWorkbenchAccess(deps, tenant.id, workbenchId, principal.id)) === undefined
       ) {
         return c.json(
           makeErrorEnvelope({
@@ -1783,12 +1628,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       const workbenchId = c.req.param("id");
       const messageParts = parsed.parts as PartType[];
 
-      const access = await resolveWorkbenchAccess(
-        deps,
-        tenant.id,
-        workbenchId,
-        principal.id,
-      );
+      const access = await resolveWorkbenchAccess(deps, tenant.id, workbenchId, principal.id);
       if (access === undefined) {
         return c.json(
           makeErrorEnvelope({
@@ -1815,10 +1655,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       if (parsed.invite !== undefined && parsed.invite.length > 0) {
         const denied = await checkGrant(
           deps.requireGrant,
-          idResource(
-            "workflow-run",
-            "id",
-          )({ param: (name) => c.req.param(name) }),
+          idResource("workflow-run", "id")({ param: (name) => c.req.param(name) }),
           "create",
           c,
         );
@@ -1832,10 +1669,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
           );
         }
 
-        const existing = await deps.store.getWorkbenchSettings(
-          ownerTenantId,
-          workbenchId,
-        );
+        const existing = await deps.store.getWorkbenchSettings(ownerTenantId, workbenchId);
         if (existing === undefined) {
           return c.json(
             makeErrorEnvelope({
@@ -1847,15 +1681,12 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
         }
 
         let currentSettings = existing.settings;
-        const invitable =
-          await deps.platform.listInvitableDefinitions(ownerTenantId);
+        const invitable = await deps.platform.listInvitableDefinitions(ownerTenantId);
         for (const entry of parsed.invite) {
           const participants = participantsOf(currentSettings);
           if (
             entry.kind === "person" &&
-            participants.some(
-              (participant) => participant.address === entry.principalId,
-            )
+            participants.some((participant) => participant.address === entry.principalId)
           ) {
             continue;
           }
@@ -1912,20 +1743,12 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
             continue;
           }
 
-          const target = await deps.principals.getTenantPrincipal(
-            ownerTenantId,
-            entry.principalId,
-          );
-          if (
-            target === undefined ||
-            target.kind !== "user" ||
-            target.status !== "active"
-          ) {
+          const target = await deps.principals.getTenantPrincipal(ownerTenantId, entry.principalId);
+          if (target === undefined || target.kind !== "user" || target.status !== "active") {
             return c.json(
               makeErrorEnvelope({
                 code: "bad_request",
-                userMessage:
-                  "principalId does not name an active member of this bench",
+                userMessage: "principalId does not name an active member of this bench",
               }),
               400,
             );
@@ -1966,10 +1789,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
           });
         } catch (err) {
           if (err instanceof KindIsChatError) {
-            return c.json(
-              makeErrorEnvelope({ code: err.code, userMessage: err.message }),
-              409,
-            );
+            return c.json(makeErrorEnvelope({ code: err.code, userMessage: err.message }), 409);
           }
           throw err;
         }
@@ -2001,16 +1821,10 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       // subscribers must not see a root-feed echo of a reply send.
       let targetThreadId: string | undefined;
       if (deps.threads !== undefined) {
-        const root = await deps.threads.ensureRootThread(
-          ownerTenantId,
-          workbenchId,
-        );
+        const root = await deps.threads.ensureRootThread(ownerTenantId, workbenchId);
         targetThreadId = root.id;
         if (parsed.threadId !== undefined) {
-          const existing = await deps.threads.getThread(
-            ownerTenantId,
-            parsed.threadId,
-          );
+          const existing = await deps.threads.getThread(ownerTenantId, parsed.threadId);
           if (existing === undefined || existing.workbenchId !== workbenchId) {
             return c.json(
               makeErrorEnvelope({
@@ -2065,9 +1879,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
             publish,
             turnQueue,
             turnCancellation,
-            ...(deps.agentTurns !== undefined
-              ? { agentTurns: deps.agentTurns }
-              : {}),
+            ...(deps.agentTurns !== undefined ? { agentTurns: deps.agentTurns } : {}),
             ...(deps.threads !== undefined ? { threads: deps.threads } : {}),
             ...(deps.turnMailCorrelation !== undefined
               ? { turnMailCorrelation: deps.turnMailCorrelation }
@@ -2089,11 +1901,8 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
             ...(parsed.inReplyToMessageId !== undefined
               ? { inReplyToMessageId: parsed.inReplyToMessageId }
               : {}),
-            ...(targetThreadId !== undefined
-              ? { threadId: targetThreadId }
-              : {}),
-            ...(commandDecision !== undefined &&
-            "routeToParticipant" in commandDecision
+            ...(targetThreadId !== undefined ? { threadId: targetThreadId } : {}),
+            ...(commandDecision !== undefined && "routeToParticipant" in commandDecision
               ? { forcedRecipientAddress: commandDecision.routeToParticipant }
               : {}),
           },
@@ -2136,9 +1945,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
             id: sent.id,
             createdAt: sent.createdAt,
             threadId: targetThreadId,
-            ...(parsed.clientId !== undefined
-              ? { clientId: parsed.clientId }
-              : {}),
+            ...(parsed.clientId !== undefined ? { clientId: parsed.clientId } : {}),
           },
           201,
         );
@@ -2148,9 +1955,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
         {
           id: sent.id,
           createdAt: sent.createdAt,
-          ...(parsed.clientId !== undefined
-            ? { clientId: parsed.clientId }
-            : {}),
+          ...(parsed.clientId !== undefined ? { clientId: parsed.clientId } : {}),
         },
         201,
       );
@@ -2177,12 +1982,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       const messageId = c.req.param("messageId");
       const blockId = c.req.param("blockId");
 
-      const access = await resolveWorkbenchAccess(
-        deps,
-        tenant.id,
-        workbenchId,
-        principal.id,
-      );
+      const access = await resolveWorkbenchAccess(deps, tenant.id, workbenchId, principal.id);
       if (access === undefined) {
         return c.json(
           makeErrorEnvelope({
@@ -2194,9 +1994,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       }
       const ownerTenantId = access.ownerTenantId;
 
-      const body = SubmitBlockResponseBody(
-        await c.req.json().catch(() => undefined),
-      );
+      const body = SubmitBlockResponseBody(await c.req.json().catch(() => undefined));
       if (body instanceof type.errors) {
         return c.json(
           makeErrorEnvelope({
@@ -2215,9 +2013,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
             : {
                 kind: "question",
                 answer: body.answer,
-                ...(body.optionIndex !== undefined
-                  ? { optionIndex: body.optionIndex }
-                  : {}),
+                ...(body.optionIndex !== undefined ? { optionIndex: body.optionIndex } : {}),
               };
 
       const responseKey = {
@@ -2277,8 +2073,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       // a retried submission can still notify the agent, rather than
       // leaving the answer permanently unable to reach it.
       if (payload.kind === "question") {
-        const claimToken =
-          await deps.blockResponses.claimBlockResponseNotification(responseKey);
+        const claimToken = await deps.blockResponses.claimBlockResponseNotification(responseKey);
         if (claimToken !== false) {
           // The answer replies to the question card, so it lands in that
           // card's own thread — which is also what gives its dispatch
@@ -2301,12 +2096,8 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
                 publish,
                 turnQueue,
                 turnCancellation,
-                ...(deps.agentTurns !== undefined
-                  ? { agentTurns: deps.agentTurns }
-                  : {}),
-                ...(deps.threads !== undefined
-                  ? { threads: deps.threads }
-                  : {}),
+                ...(deps.agentTurns !== undefined ? { agentTurns: deps.agentTurns } : {}),
+                ...(deps.threads !== undefined ? { threads: deps.threads } : {}),
                 ...(deps.turnMailCorrelation !== undefined
                   ? { turnMailCorrelation: deps.turnMailCorrelation }
                   : {}),
@@ -2316,9 +2107,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
                 ...(deps.waitUntilFreeTimeoutMs !== undefined
                   ? { waitUntilFreeTimeoutMs: deps.waitUntilFreeTimeoutMs }
                   : {}),
-                ...(deps.mailbox !== undefined
-                  ? { mailbox: deps.mailbox }
-                  : {}),
+                ...(deps.mailbox !== undefined ? { mailbox: deps.mailbox } : {}),
               },
               {
                 tenantId: ownerTenantId,
@@ -2332,9 +2121,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
                 // ties an answer to the question it answers. There is no
                 // correlation id on the wire.
                 inReplyToMessageId: messageId,
-                ...(answerThread !== undefined
-                  ? { threadId: answerThread.id }
-                  : {}),
+                ...(answerThread !== undefined ? { threadId: answerThread.id } : {}),
               },
             );
             deps.onMessageFanout?.(answer.fanoutDelivered);
@@ -2358,10 +2145,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
                     tenantId: ownerTenantId,
                     roomId: workbenchId,
                   });
-            await deps.blockResponses.releaseBlockResponseNotification(
-              responseKey,
-              claimToken,
-            );
+            await deps.blockResponses.releaseBlockResponseNotification(responseKey, claimToken);
             return c.json(
               makeErrorEnvelope({
                 code: "notify_failed",
@@ -2398,12 +2182,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       const messageId = c.req.param("messageId");
       const blockId = c.req.param("blockId");
 
-      const access = await resolveWorkbenchAccess(
-        deps,
-        tenant.id,
-        workbenchId,
-        principal.id,
-      );
+      const access = await resolveWorkbenchAccess(deps, tenant.id, workbenchId, principal.id);
       if (access === undefined) {
         return c.json(
           makeErrorEnvelope({
@@ -2428,9 +2207,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
         blockId,
       );
       const { tally, total } = aggregatePollResponses(rows);
-      const own = ownBlockResponseForClient(
-        rows.find((row) => row.principalId === principal.id),
-      );
+      const own = ownBlockResponseForClient(rows.find((row) => row.principalId === principal.id));
 
       return c.json({ tally, total, own });
     },
@@ -2455,12 +2232,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       const workbenchId = c.req.param("id");
       const messageId = c.req.param("messageId");
 
-      const access = await resolveWorkbenchAccess(
-        deps,
-        tenant.id,
-        workbenchId,
-        principal.id,
-      );
+      const access = await resolveWorkbenchAccess(deps, tenant.id, workbenchId, principal.id);
       if (access === undefined) {
         return c.json(
           makeErrorEnvelope({
@@ -2472,12 +2244,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       }
       const ownerTenantId = access.ownerTenantId;
       if (
-        !(await messageExistsInWorkbench(
-          deps.roomMessages,
-          ownerTenantId,
-          workbenchId,
-          messageId,
-        ))
+        !(await messageExistsInWorkbench(deps.roomMessages, ownerTenantId, workbenchId, messageId))
       ) {
         return c.json(
           makeErrorEnvelope({
@@ -2488,9 +2255,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
         );
       }
 
-      const body = ToggleReactionBody(
-        await c.req.json().catch(() => undefined),
-      );
+      const body = ToggleReactionBody(await c.req.json().catch(() => undefined));
       if (body instanceof type.errors) {
         return c.json(
           makeErrorEnvelope({
@@ -2518,11 +2283,9 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
         principalId: principal.id,
       });
 
-      const rows = await deps.reactions.listReactionsForMessages(
-        ownerTenantId,
-        workbenchId,
-        [messageId],
-      );
+      const rows = await deps.reactions.listReactionsForMessages(ownerTenantId, workbenchId, [
+        messageId,
+      ]);
       const count = rows.filter((row) => row.emoji === body.emoji).length;
 
       publish(workbenchId, {
@@ -2558,12 +2321,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       const workbenchId = c.req.param("id");
       const messageId = c.req.param("messageId");
 
-      const access = await resolveWorkbenchAccess(
-        deps,
-        tenant.id,
-        workbenchId,
-        principal.id,
-      );
+      const access = await resolveWorkbenchAccess(deps, tenant.id, workbenchId, principal.id);
       if (access === undefined) {
         return c.json(
           makeErrorEnvelope({
@@ -2575,12 +2333,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       }
       const ownerTenantId = access.ownerTenantId;
       if (
-        !(await messageExistsInWorkbench(
-          deps.roomMessages,
-          ownerTenantId,
-          workbenchId,
-          messageId,
-        ))
+        !(await messageExistsInWorkbench(deps.roomMessages, ownerTenantId, workbenchId, messageId))
       ) {
         return c.json(
           makeErrorEnvelope({
@@ -2635,12 +2388,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       const workbenchId = c.req.param("id");
       const messageId = c.req.param("messageId");
 
-      const access = await resolveWorkbenchAccess(
-        deps,
-        tenant.id,
-        workbenchId,
-        principal.id,
-      );
+      const access = await resolveWorkbenchAccess(deps, tenant.id, workbenchId, principal.id);
       if (access === undefined) {
         return c.json(
           makeErrorEnvelope({
@@ -2651,11 +2399,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
         );
       }
 
-      await deps.pins.unpinMessage(
-        access.ownerTenantId,
-        workbenchId,
-        messageId,
-      );
+      await deps.pins.unpinMessage(access.ownerTenantId, workbenchId, messageId);
 
       publish(workbenchId, {
         type: "chat.pin",
@@ -2684,12 +2428,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       const principal = c.get("principal");
       const workbenchId = c.req.param("id");
 
-      const access = await resolveWorkbenchAccess(
-        deps,
-        tenant.id,
-        workbenchId,
-        principal.id,
-      );
+      const access = await resolveWorkbenchAccess(deps, tenant.id, workbenchId, principal.id);
       if (access === undefined) {
         return c.json(
           makeErrorEnvelope({
@@ -2708,9 +2447,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
         tenantId: ownerTenantId,
         workbenchId,
       });
-      const byId = new Map(
-        listed.items.map((message) => [message.id, message]),
-      );
+      const byId = new Map(listed.items.map((message) => [message.id, message]));
 
       const items = pins.flatMap((pin: PinRow) => {
         const message = byId.get(pin.messageId);
@@ -2734,15 +2471,11 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
   // The tenant-wide listing the new-chat dialog reads before any workbench
   // exists; the per-workbench `/workbenches/:id/invitable` below serves the
   // in-workbench invite flow and insists its workbench is real.
-  app.get(
-    "/invitable-definitions",
-    deps.requireGrant("workflow-run:*", "read"),
-    async (c) => {
-      const tenant = c.get("tenant");
-      const items = await deps.platform.listInvitableDefinitions(tenant.id);
-      return c.json({ items: items.filter(deps.isInvitableDefinition) });
-    },
-  );
+  app.get("/invitable-definitions", deps.requireGrant("workflow-run:*", "read"), async (c) => {
+    const tenant = c.get("tenant");
+    const items = await deps.platform.listInvitableDefinitions(tenant.id);
+    return c.json({ items: items.filter(deps.isInvitableDefinition) });
+  });
 
   app.get(
     "/workbenches/:id/invitable",
@@ -2750,10 +2483,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
     async (c) => {
       const tenant = c.get("tenant");
       const workbenchId = c.req.param("id");
-      const existing = await deps.store.getWorkbenchSettings(
-        tenant.id,
-        workbenchId,
-      );
+      const existing = await deps.store.getWorkbenchSettings(tenant.id, workbenchId);
       if (
         existing === undefined &&
         !(await workbenchInTenant(deps.store, tenant.id, workbenchId))
@@ -2807,10 +2537,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
     async (c) => {
       const tenant = c.get("tenant");
       const workbenchId = c.req.param("id");
-      const existing = await deps.store.getWorkbenchSettings(
-        tenant.id,
-        workbenchId,
-      );
+      const existing = await deps.store.getWorkbenchSettings(tenant.id, workbenchId);
       if (existing === undefined) {
         return c.json(
           makeErrorEnvelope({
@@ -2821,28 +2548,22 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
         );
       }
 
-      const agentParticipants = participantsOf(existing.settings).filter(
-        (participant) => isAgentAddress(participant.address),
+      const agentParticipants = participantsOf(existing.settings).filter((participant) =>
+        isAgentAddress(participant.address),
       );
       const invitable = await deps.platform.listInvitableDefinitions(tenant.id);
       const items = (
         await Promise.all(
           agentParticipants.map(async (participant) => {
-            const definitionId =
-              await deps.platform.resolveDefinitionIdByAddress(
-                participant.address,
-              );
+            const definitionId = await deps.platform.resolveDefinitionIdByAddress(
+              participant.address,
+            );
             if (definitionId === undefined) return null;
-            const definitionAssetId =
-              await deps.platform.resolveDefinitionAssetId(definitionId);
+            const definitionAssetId = await deps.platform.resolveDefinitionAssetId(definitionId);
             if (definitionAssetId === undefined) return null;
             let displayName: string;
             try {
-              displayName = await resolveInvitedDisplayName(
-                deps.platform,
-                invitable,
-                definitionId,
-              );
+              displayName = await resolveInvitedDisplayName(deps.platform, invitable, definitionId);
             } catch (err) {
               reportError(err, {
                 operation: "chat.workbenchAgents.displayName",
@@ -2893,11 +2614,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
 
       const tenant = c.get("tenant");
       const workbenchId = c.req.param("id");
-      await deps.platform.refreshAgentInstanceFromDefinition(
-        tenant.id,
-        workbenchId,
-        body.address,
-      );
+      await deps.platform.refreshAgentInstanceFromDefinition(tenant.id, workbenchId, body.address);
       return c.json({ ok: true });
     },
   );
@@ -2921,10 +2638,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       const principal = c.get("principal");
       const workbenchId = c.req.param("id");
 
-      const existing = await deps.store.getWorkbenchSettings(
-        tenant.id,
-        workbenchId,
-      );
+      const existing = await deps.store.getWorkbenchSettings(tenant.id, workbenchId);
       if (existing === undefined) {
         return c.json(
           makeErrorEnvelope({
@@ -2953,10 +2667,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
           },
         );
 
-        return c.json(
-          { address: joined.address, definitionId: joined.definitionId },
-          201,
-        );
+        return c.json({ address: joined.address, definitionId: joined.definitionId }, 201);
       } catch (err) {
         if (err instanceof InferenceResolutionError) {
           return c.json(
@@ -2977,10 +2688,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
           );
         }
         if (err instanceof KindIsChatError) {
-          return c.json(
-            makeErrorEnvelope({ code: err.code, userMessage: err.message }),
-            409,
-          );
+          return c.json(makeErrorEnvelope({ code: err.code, userMessage: err.message }), 409);
         }
         throw err;
       }
@@ -2997,9 +2705,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
     "/workbenches/:id/onboarding",
     deps.requireGrant(idResource("workflow-run", "id"), "create"),
     async (c) => {
-      const step = WorkbenchOnboardingStep(
-        await c.req.json().catch(() => undefined),
-      );
+      const step = WorkbenchOnboardingStep(await c.req.json().catch(() => undefined));
       if (step instanceof type.errors) {
         return c.json(
           makeErrorEnvelope({
@@ -3012,10 +2718,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
 
       const tenant = c.get("tenant");
       const workbenchId = c.req.param("id");
-      const existing = await deps.store.getWorkbenchSettings(
-        tenant.id,
-        workbenchId,
-      );
+      const existing = await deps.store.getWorkbenchSettings(tenant.id, workbenchId);
       if (existing === undefined) {
         return c.json(
           makeErrorEnvelope({
@@ -3082,10 +2785,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       const principal = c.get("principal");
       const workbenchId = c.req.param("id");
 
-      const existing = await deps.store.getWorkbenchSettings(
-        tenant.id,
-        workbenchId,
-      );
+      const existing = await deps.store.getWorkbenchSettings(tenant.id, workbenchId);
       if (existing === undefined) {
         return c.json(
           makeErrorEnvelope({
@@ -3101,8 +2801,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
           makeErrorEnvelope({
             code: "conflict",
             userMessage:
-              "a chat's participants are fixed at creation; removal is " +
-              "only for workbenches",
+              "a chat's participants are fixed at creation; removal is " + "only for workbenches",
           }),
           409,
         );
@@ -3173,10 +2872,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       // A share can only ever be created by the tenant that already
       // owns the workbench — `getWorkbenchSettings` scopes by
       // `tenant.id`, so a caller cannot share one it does not own.
-      const existing = await deps.store.getWorkbenchSettings(
-        tenant.id,
-        workbenchId,
-      );
+      const existing = await deps.store.getWorkbenchSettings(tenant.id, workbenchId);
       if (existing === undefined) {
         return c.json(
           makeErrorEnvelope({
@@ -3200,8 +2896,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
             makeErrorEnvelope({
               code: "forbidden",
               userMessage:
-                "no bilateral trust with the target tenant — establish " +
-                "trust before sharing",
+                "no bilateral trust with the target tenant — establish " + "trust before sharing",
             }),
             403,
           );
@@ -3209,8 +2904,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
           return c.json(
             makeErrorEnvelope({
               code: "conflict",
-              userMessage:
-                "this workbench is already shared with " + "that tenant",
+              userMessage: "this workbench is already shared with " + "that tenant",
             }),
             409,
           );
@@ -3219,9 +2913,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
             tenant.id,
             body.projectedTenantId,
           );
-          const targetName = await deps.trust?.getTenantName(
-            body.projectedTenantId,
-          );
+          const targetName = await deps.trust?.getTenantName(body.projectedTenantId);
           let sharedContext: Record<string, unknown> = {};
           if (deps.trust !== undefined) {
             const inner: Record<string, unknown> = {};
@@ -3262,10 +2954,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       const tenant = c.get("tenant");
       const workbenchId = c.req.param("id");
 
-      const existing = await deps.store.getWorkbenchSettings(
-        tenant.id,
-        workbenchId,
-      );
+      const existing = await deps.store.getWorkbenchSettings(tenant.id, workbenchId);
       if (existing === undefined) {
         return c.json(
           makeErrorEnvelope({
@@ -3276,10 +2965,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
         );
       }
 
-      const rows = await deps.shares.listSharesForWorkbench(
-        tenant.id,
-        workbenchId,
-      );
+      const rows = await deps.shares.listSharesForWorkbench(tenant.id, workbenchId);
       return c.json({
         items: rows.map((row) => ({
           owningTenantId: row.owningTenantId,
@@ -3310,10 +2996,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       const workbenchId = c.req.param("id");
       const projectedTenantId = c.req.param("projectedTenantId");
 
-      const existing = await deps.store.getWorkbenchSettings(
-        tenant.id,
-        workbenchId,
-      );
+      const existing = await deps.store.getWorkbenchSettings(tenant.id, workbenchId);
       if (existing === undefined) {
         return c.json(
           makeErrorEnvelope({
@@ -3324,11 +3007,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
         );
       }
 
-      const revoked = await deps.shares.revokeShare(
-        tenant.id,
-        workbenchId,
-        projectedTenantId,
-      );
+      const revoked = await deps.shares.revokeShare(tenant.id, workbenchId, projectedTenantId);
       if (!revoked) {
         return c.json(
           makeErrorEnvelope({
@@ -3348,9 +3027,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
     "/workbenches/:id/share-members",
     deps.requireGrant(idResource("workflow-run", "id"), "manage"),
     async (c) => {
-      const body = AddShareMemberBody(
-        await c.req.json().catch(() => undefined),
-      );
+      const body = AddShareMemberBody(await c.req.json().catch(() => undefined));
       if (body instanceof type.errors) {
         return c.json(
           makeErrorEnvelope({
@@ -3430,11 +3107,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       const workbenchId = c.req.param("id");
       const principalId = c.req.param("principalId");
 
-      const removed = await deps.shares.removeShareMember(
-        tenant.id,
-        workbenchId,
-        principalId,
-      );
+      const removed = await deps.shares.removeShareMember(tenant.id, workbenchId, principalId);
       if (!removed) {
         return c.json(
           makeErrorEnvelope({
@@ -3464,59 +3137,49 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
     };
   }
 
-  app.get(
-    "/bench/settings",
-    deps.requireGrant("workflow-run:*", "read"),
-    async (c) => {
-      const tenant = c.get("tenant");
-      const row = await deps.store.getBenchSettings(tenant.id);
-      const settings = row?.settings ?? {};
-      return c.json({
-        settings,
-        contextWindow: benchContextWindowOf(settings),
-      });
-    },
-  );
+  app.get("/bench/settings", deps.requireGrant("workflow-run:*", "read"), async (c) => {
+    const tenant = c.get("tenant");
+    const row = await deps.store.getBenchSettings(tenant.id);
+    const settings = row?.settings ?? {};
+    return c.json({
+      settings,
+      contextWindow: benchContextWindowOf(settings),
+    });
+  });
 
-  app.patch(
-    "/bench/settings",
-    deps.requireGrant("workflow-run:*", "write"),
-    async (c) => {
-      const tenant = c.get("tenant");
-      const principal = c.get("principal");
+  app.patch("/bench/settings", deps.requireGrant("workflow-run:*", "write"), async (c) => {
+    const tenant = c.get("tenant");
+    const principal = c.get("principal");
 
-      let patch: Record<string, unknown>;
-      try {
-        patch = validateBenchSettingsPatch(
-          await c.req.json().catch(() => undefined),
+    let patch: Record<string, unknown>;
+    try {
+      patch = validateBenchSettingsPatch(await c.req.json().catch(() => undefined));
+    } catch (err) {
+      if (err instanceof SettingsValidationError) {
+        return c.json(
+          makeErrorEnvelope({
+            code: "bad_request",
+            userMessage: err.message,
+          }),
+          400,
         );
-      } catch (err) {
-        if (err instanceof SettingsValidationError) {
-          return c.json(
-            makeErrorEnvelope({
-              code: "bad_request",
-              userMessage: err.message,
-            }),
-            400,
-          );
-        }
-        throw err;
       }
+      throw err;
+    }
 
-      const existing = await deps.store.getBenchSettings(tenant.id);
-      const merged = { ...(existing?.settings ?? {}), ...patch };
-      const row = await deps.store.upsertBenchSettings({
-        tenantId: tenant.id,
-        settings: merged,
-        updatedBy: principal.id,
-      });
+    const existing = await deps.store.getBenchSettings(tenant.id);
+    const merged = { ...(existing?.settings ?? {}), ...patch };
+    const row = await deps.store.upsertBenchSettings({
+      tenantId: tenant.id,
+      settings: merged,
+      updatedBy: principal.id,
+    });
 
-      return c.json({
-        settings: row.settings,
-        contextWindow: benchContextWindowOf(row.settings),
-      });
-    },
-  );
+    return c.json({
+      settings: row.settings,
+      contextWindow: benchContextWindowOf(row.settings),
+    });
+  });
 
   app.get(
     "/workbenches/:id/settings",
@@ -3546,10 +3209,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       const principal = c.get("principal");
       const workbenchId = c.req.param("id");
 
-      const existing = await deps.store.getWorkbenchSettings(
-        tenant.id,
-        workbenchId,
-      );
+      const existing = await deps.store.getWorkbenchSettings(tenant.id, workbenchId);
       if (existing === undefined) {
         return c.json(
           makeErrorEnvelope({
@@ -3562,9 +3222,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
 
       let patch: Record<string, unknown>;
       try {
-        patch = validateSettingsPatch(
-          await c.req.json().catch(() => undefined),
-        );
+        patch = validateSettingsPatch(await c.req.json().catch(() => undefined));
       } catch (err) {
         if (err instanceof SettingsValidationError) {
           return c.json(
@@ -3578,10 +3236,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
         throw err;
       }
 
-      if (
-        kindOf(existing.settings) === "chat" &&
-        patch["chat/participants"] !== undefined
-      ) {
+      if (kindOf(existing.settings) === "chat" && patch["chat/participants"] !== undefined) {
         const refusal = new KindIsChatError();
         return c.json(
           makeErrorEnvelope({
@@ -3600,9 +3255,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       // invite.
       const writePatch: Record<string, unknown> = { ...patch };
       if (patch["chat/participants"] !== undefined) {
-        writePatch["chat/participants"] = parseParticipants(
-          patch["chat/participants"],
-        );
+        writePatch["chat/participants"] = parseParticipants(patch["chat/participants"]);
       }
       const row = await deps.store.patchWorkbenchSettings({
         tenantId: tenant.id,
@@ -3617,9 +3270,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       // anchor's mailbox. A failure here is loud (unhandled), never
       // swallowed, since the timeline is the record of what changed.
       const priorState: WorkbenchParticipantState = {
-        participants: participantsOf(existing.settings).map(
-          (participant) => participant.address,
-        ),
+        participants: participantsOf(existing.settings).map((participant) => participant.address),
         settings: existing.settings,
       };
       const controlPayloadBase: WorkbenchControlPayload = {
@@ -3635,11 +3286,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
               ),
             }
           : controlPayloadBase;
-      const { events } = applyControlPayload(
-        priorState,
-        controlPayload,
-        principal.id,
-      );
+      const { events } = applyControlPayload(priorState, controlPayload, principal.id);
       for (const event of events) {
         await postRoomMessage(
           { roomMessages: deps.roomMessages, publish },
@@ -3669,12 +3316,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       const tenant = c.get("tenant");
       const principal = c.get("principal");
       const workbenchId = c.req.param("id");
-      const access = await resolveWorkbenchAccess(
-        deps,
-        tenant.id,
-        workbenchId,
-        principal.id,
-      );
+      const access = await resolveWorkbenchAccess(deps, tenant.id, workbenchId, principal.id);
       if (access === undefined) {
         return c.json(
           makeErrorEnvelope({
@@ -3684,11 +3326,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
           404,
         );
       }
-      const row = await deps.store.getReadState(
-        access.ownerTenantId,
-        workbenchId,
-        principal.id,
-      );
+      const row = await deps.store.getReadState(access.ownerTenantId, workbenchId, principal.id);
       if (row === undefined) {
         return c.json({ lastSeenCreatedAt: null, lastSeenId: null });
       }
@@ -3718,12 +3356,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       const principal = c.get("principal");
       const workbenchId = c.req.param("id");
 
-      const access = await resolveWorkbenchAccess(
-        deps,
-        tenant.id,
-        workbenchId,
-        principal.id,
-      );
+      const access = await resolveWorkbenchAccess(deps, tenant.id, workbenchId, principal.id);
       if (access === undefined) {
         return c.json(
           makeErrorEnvelope({
@@ -3757,12 +3390,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       const principal = c.get("principal");
       const workbenchId = c.req.param("id");
       if (
-        (await resolveWorkbenchAccess(
-          deps,
-          tenant.id,
-          workbenchId,
-          principal.id,
-        )) === undefined
+        (await resolveWorkbenchAccess(deps, tenant.id, workbenchId, principal.id)) === undefined
       ) {
         return c.json(
           makeErrorEnvelope({
@@ -3795,12 +3423,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       const principal = c.get("principal");
       const workbenchId = c.req.param("id");
       if (
-        (await resolveWorkbenchAccess(
-          deps,
-          tenant.id,
-          workbenchId,
-          principal.id,
-        )) === undefined
+        (await resolveWorkbenchAccess(deps, tenant.id, workbenchId, principal.id)) === undefined
       ) {
         return c.json(
           makeErrorEnvelope({
@@ -3841,12 +3464,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       const principal = c.get("principal");
       const workbenchId = c.req.param("id");
       if (
-        (await resolveWorkbenchAccess(
-          deps,
-          tenant.id,
-          workbenchId,
-          principal.id,
-        )) === undefined
+        (await resolveWorkbenchAccess(deps, tenant.id, workbenchId, principal.id)) === undefined
       ) {
         return c.json(
           makeErrorEnvelope({
@@ -3864,12 +3482,9 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
           workbenchId,
           stream,
           authorize: () =>
-            resolveWorkbenchAccess(
-              deps,
-              tenant.id,
-              workbenchId,
-              principal.id,
-            ).then((access) => access !== undefined),
+            resolveWorkbenchAccess(deps, tenant.id, workbenchId, principal.id).then(
+              (access) => access !== undefined,
+            ),
           presence: { registry: presence, principalId: principal.id },
         });
         stream.onAbort(teardown);
@@ -3897,12 +3512,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       const tenant = c.get("tenant");
       const principal = c.get("principal");
       const workbenchId = c.req.param("id");
-      const access = await resolveWorkbenchAccess(
-        deps,
-        tenant.id,
-        workbenchId,
-        principal.id,
-      );
+      const access = await resolveWorkbenchAccess(deps, tenant.id, workbenchId, principal.id);
       if (access === undefined) {
         return c.json(
           makeErrorEnvelope({
@@ -3931,12 +3541,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       const tenant = c.get("tenant");
       const principal = c.get("principal");
       const workbenchId = c.req.param("id");
-      const access = await resolveWorkbenchAccess(
-        deps,
-        tenant.id,
-        workbenchId,
-        principal.id,
-      );
+      const access = await resolveWorkbenchAccess(deps, tenant.id, workbenchId, principal.id);
       if (access === undefined) {
         return c.json(
           makeErrorEnvelope({
@@ -3951,9 +3556,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
           turnCancellation,
           roomMessages: deps.roomMessages,
           publish,
-          ...(deps.agentTurns !== undefined
-            ? { agentTurns: deps.agentTurns }
-            : {}),
+          ...(deps.agentTurns !== undefined ? { agentTurns: deps.agentTurns } : {}),
         },
         { tenantId: access.ownerTenantId, workbenchId },
       );
@@ -3977,12 +3580,7 @@ export function createChatRoutes(deps: CreateChatRoutesDeps): Hono<TenantEnv> {
       const tenant = c.get("tenant");
       const principal = c.get("principal");
       const workbenchId = c.req.param("id");
-      const access = await resolveWorkbenchAccess(
-        deps,
-        tenant.id,
-        workbenchId,
-        principal.id,
-      );
+      const access = await resolveWorkbenchAccess(deps, tenant.id, workbenchId, principal.id);
       if (access === undefined) {
         return c.json(
           makeErrorEnvelope({
diff --git a/packages/chat/src/run-participant.test.ts b/packages/chat/src/run-participant.test.ts
index ca2921b3eb..65ca66fa2c 100644
--- a/packages/chat/src/run-participant.test.ts
+++ b/packages/chat/src/run-participant.test.ts
@@ -9,9 +9,7 @@ function fakeStore(existing: Record<string, unknown>) {
     store: {
       mutateWorkbenchParticipants: async (input: {
         updatedBy: string;
-        mutate: (
-          participants: readonly ParticipantRecord[],
-        ) => ParticipantRecord[];
+        mutate: (participants: readonly ParticipantRecord[]) => ParticipantRecord[];
       }) => {
         const nextParticipants = input.mutate(
           (existing["chat/participants"] as ParticipantRecord[]) ?? [],
diff --git a/packages/chat/src/run-participant.ts b/packages/chat/src/run-participant.ts
index 6d3fc53c83..31ce40dd65 100644
--- a/packages/chat/src/run-participant.ts
+++ b/packages/chat/src/run-participant.ts
@@ -34,7 +34,6 @@ export async function joinRunParticipant(
     tenantId: input.tenantId,
     workbenchId: input.workbenchId,
     updatedBy: input.principalId,
-    mutate: (participants) =>
-      addParticipant(participants, input.address, input.handle),
+    mutate: (participants) => addParticipant(participants, input.address, input.handle),
   });
 }
diff --git a/packages/chat/src/run-trigger-client.ts b/packages/chat/src/run-trigger-client.ts
index 7d22d29510..5e9dc84b28 100644
--- a/packages/chat/src/run-trigger-client.ts
+++ b/packages/chat/src/run-trigger-client.ts
@@ -64,10 +64,7 @@ export type RunTriggerClientDeps = {
    * path a real inbound request to the hub takes.
    */
   app: {
-    request: (
-      input: string,
-      init?: RequestInit,
-    ) => Response | Promise<Response>;
+    request: (input: string, init?: RequestInit) => Response | Promise<Response>;
   };
   /**
    * The shared secret `./run-trigger-internal-auth.ts` signs the
@@ -110,9 +107,7 @@ export type TriggeredWorkflowRunMail = {
 };
 
 export type RunTriggerClient = {
-  triggerMail(
-    input: TriggerWorkflowRunMailInput,
-  ): Promise<TriggeredWorkflowRunMail>;
+  triggerMail(input: TriggerWorkflowRunMailInput): Promise<TriggeredWorkflowRunMail>;
 };
 
 async function readJson(response: Response): Promise<unknown> {
@@ -128,9 +123,7 @@ async function readJson(response: Response): Promise<unknown> {
   }
 }
 
-export function createRunTriggerClient(
-  deps: RunTriggerClientDeps,
-): RunTriggerClient {
+export function createRunTriggerClient(deps: RunTriggerClientDeps): RunTriggerClient {
   return {
     async triggerMail(input): Promise<TriggeredWorkflowRunMail> {
       const signToken = deps.signToken ?? signInternalRunTriggerToken;
@@ -167,9 +160,7 @@ export function createRunTriggerClient(
 
       const parsed = TriggerResponse(json);
       if (parsed instanceof type.errors) {
-        throw new Error(
-          `malformed workflow-run trigger response: ${parsed.summary}`,
-        );
+        throw new Error(`malformed workflow-run trigger response: ${parsed.summary}`);
       }
       return parsed;
     },
diff --git a/packages/chat/src/schema.ts b/packages/chat/src/schema.ts
index 70b4cc5c3e..1308f32a8c 100644
--- a/packages/chat/src/schema.ts
+++ b/packages/chat/src/schema.ts
@@ -34,9 +34,7 @@ export const workbenchSettings = chatSchema.table(
     workbenchId: text("workbench_id").notNull(),
     settings: jsonb("settings").notNull(),
     updatedBy: text("updated_by").notNull(),
-    updatedAt: timestamp("updated_at", { withTimezone: true })
-      .notNull()
-      .defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow(),
   },
   (table) => [primaryKey({ columns: [table.tenantId, table.workbenchId] })],
 );
@@ -53,9 +51,7 @@ export const chatBenchSettings = chatSchema.table("chat_bench_settings", {
   tenantId: text("tenant_id").primaryKey(),
   settings: jsonb("settings").notNull(),
   updatedBy: text("updated_by").notNull(),
-  updatedAt: timestamp("updated_at", { withTimezone: true })
-    .notNull()
-    .defaultNow(),
+  updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow(),
 });
 
 /**
@@ -126,9 +122,7 @@ export const workbenchLaunch = chatSchema.table("workbench_launch", {
    * deploy, and for rows that predate the column.
    */
   sourcesDigest: text("sources_digest"),
-  createdAt: timestamp("created_at", { withTimezone: true })
-    .notNull()
-    .defaultNow(),
+  createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
 });
 
 /**
@@ -170,16 +164,10 @@ export const workbenchMessages = chatSchema.table(
     // cursor` tie-break could never match and a message sharing a
     // millisecond with the cursor row would fall out of the timeline
     // between pages.
-    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 })
-      .notNull()
-      .defaultNow(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).notNull().defaultNow(),
   },
   (table) => [
-    index("workbench_messages_feed_idx").on(
-      table.tenantId,
-      table.workbenchId,
-      table.createdAt,
-    ),
+    index("workbench_messages_feed_idx").on(table.tenantId, table.workbenchId, table.createdAt),
   ],
 );
 
@@ -210,15 +198,10 @@ export const workbenchThreads = chatSchema.table(
     /** Routine/run reference for delivery threads; null otherwise. */
     runRef: text("run_ref"),
     title: text("title"),
-    createdAt: timestamp("created_at", { withTimezone: true })
-      .notNull()
-      .defaultNow(),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
   },
   (table) => [
-    index("workbench_threads_workbench_idx").on(
-      table.tenantId,
-      table.workbenchId,
-    ),
+    index("workbench_threads_workbench_idx").on(table.tenantId, table.workbenchId),
     uniqueIndex("workbench_threads_root_key")
       .on(table.tenantId, table.workbenchId)
       .where(sql`${table.kind} = 'root'`),
@@ -246,18 +229,13 @@ export const workbenchThreadMessages = chatSchema.table(
     workbenchId: text("workbench_id").notNull(),
     threadId: text("thread_id").notNull(),
     messageId: text("message_id").notNull(),
-    createdAt: timestamp("created_at", { withTimezone: true })
-      .notNull()
-      .defaultNow(),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
   },
   (table) => [
     primaryKey({
       columns: [table.tenantId, table.workbenchId, table.messageId],
     }),
-    index("workbench_thread_messages_thread_idx").on(
-      table.tenantId,
-      table.threadId,
-    ),
+    index("workbench_thread_messages_thread_idx").on(table.tenantId, table.threadId),
   ],
 );
 
@@ -280,9 +258,7 @@ export const workbenchShare = chatSchema.table(
     workbenchId: text("workbench_id").notNull(),
     projectedTenantId: text("projected_tenant_id").notNull(),
     createdBy: text("created_by").notNull(),
-    createdAt: timestamp("created_at", { withTimezone: true })
-      .notNull()
-      .defaultNow(),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
   },
   (table) => [
     primaryKey({ columns: [table.workbenchId, table.projectedTenantId] }),
@@ -307,9 +283,7 @@ export const workbenchShareMember = chatSchema.table(
     workbenchId: text("workbench_id").notNull(),
     principalId: text("principal_id").notNull(),
     addedBy: text("added_by").notNull(),
-    addedAt: timestamp("added_at", { withTimezone: true })
-      .notNull()
-      .defaultNow(),
+    addedAt: timestamp("added_at", { withTimezone: true }).notNull().defaultNow(),
   },
   (table) => [
     primaryKey({
@@ -334,12 +308,8 @@ export const blockResponses = chatSchema.table(
     blockId: text("block_id").notNull(),
     principalId: text("principal_id").notNull(),
     payload: jsonb("payload").notNull(),
-    createdAt: timestamp("created_at", { withTimezone: true })
-      .notNull()
-      .defaultNow(),
-    updatedAt: timestamp("updated_at", { withTimezone: true })
-      .notNull()
-      .defaultNow(),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow(),
     // Question-only claim flag: null until a question's answer has been
     // sent into the workbench and its turn dispatched. See
     // `claimBlockResponseNotification` in `./block-responses.ts`.
@@ -387,25 +357,13 @@ export const messageReactions = chatSchema.table(
     messageId: text("message_id").notNull(),
     emoji: text("emoji").notNull(),
     principalId: text("principal_id").notNull(),
-    createdAt: timestamp("created_at", { withTimezone: true })
-      .notNull()
-      .defaultNow(),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
   },
   (table) => [
     primaryKey({
-      columns: [
-        table.tenantId,
-        table.workbenchId,
-        table.messageId,
-        table.emoji,
-        table.principalId,
-      ],
+      columns: [table.tenantId, table.workbenchId, table.messageId, table.emoji, table.principalId],
     }),
-    index("message_reactions_message_idx").on(
-      table.tenantId,
-      table.workbenchId,
-      table.messageId,
-    ),
+    index("message_reactions_message_idx").on(table.tenantId, table.workbenchId, table.messageId),
   ],
 );
 
@@ -425,18 +383,13 @@ export const pinnedMessages = chatSchema.table(
     workbenchId: text("workbench_id").notNull(),
     messageId: text("message_id").notNull(),
     pinnedBy: text("pinned_by").notNull(),
-    pinnedAt: timestamp("pinned_at", { withTimezone: true })
-      .notNull()
-      .defaultNow(),
+    pinnedAt: timestamp("pinned_at", { withTimezone: true }).notNull().defaultNow(),
   },
   (table) => [
     primaryKey({
       columns: [table.tenantId, table.workbenchId, table.messageId],
     }),
-    index("pinned_messages_workbench_idx").on(
-      table.tenantId,
-      table.workbenchId,
-    ),
+    index("pinned_messages_workbench_idx").on(table.tenantId, table.workbenchId),
   ],
 );
 
@@ -485,9 +438,7 @@ export const finalizedTurnWriteClaim = chatSchema.table(
     tenantId: text("tenant_id").notNull(),
     surface: text("surface").notNull(),
     claimKey: text("claim_key").notNull(),
-    claimedAt: timestamp("claimed_at", { withTimezone: true })
-      .notNull()
-      .defaultNow(),
+    claimedAt: timestamp("claimed_at", { withTimezone: true }).notNull().defaultNow(),
   },
   (table) => [
     primaryKey({
@@ -511,9 +462,7 @@ export const turnMailCorrelation = chatSchema.table(
     mailId: text("mail_id").notNull(),
     workbenchId: text("workbench_id").notNull(),
     sourceMessageId: text("source_message_id").notNull(),
-    recordedAt: timestamp("recorded_at", { withTimezone: true })
-      .notNull()
-      .defaultNow(),
+    recordedAt: timestamp("recorded_at", { withTimezone: true }).notNull().defaultNow(),
   },
   (table) => [
     primaryKey({
@@ -550,21 +499,11 @@ export const agentTurns = chatSchema.table(
     /** running | completed | failed */
     status: text("status").notNull(),
     error: text("error"),
-    startedAt: timestamp("started_at", { withTimezone: true })
-      .notNull()
-      .defaultNow(),
+    startedAt: timestamp("started_at", { withTimezone: true }).notNull().defaultNow(),
     endedAt: timestamp("ended_at", { withTimezone: true }),
   },
   (table) => [
-    index("agent_turns_workbench_idx").on(
-      table.tenantId,
-      table.workbenchId,
-      table.startedAt,
-    ),
-    unique("agent_turns_occurrence_key").on(
-      table.tenantId,
-      table.agentAddress,
-      table.occurrence,
-    ),
+    index("agent_turns_workbench_idx").on(table.tenantId, table.workbenchId, table.startedAt),
+    unique("agent_turns_occurrence_key").on(table.tenantId, table.agentAddress, table.occurrence),
   ],
 );
diff --git a/packages/chat/src/send-run-mail.ts b/packages/chat/src/send-run-mail.ts
index 5e03ccfd26..7da98e3841 100644
--- a/packages/chat/src/send-run-mail.ts
+++ b/packages/chat/src/send-run-mail.ts
@@ -97,8 +97,7 @@ async function signLocalRunMailCopy(
     messageId,
     subject: undefined,
     inReplyTo: params.inReplyTo ?? params.replyTo,
-    references:
-      params.references !== undefined ? [...params.references] : undefined,
+    references: params.references !== undefined ? [...params.references] : undefined,
     mimeVersion: "1.0",
     interchangeType: "conversation.message",
     interchangeCorrelationId: undefined,
@@ -113,14 +112,9 @@ async function signLocalRunMailCopy(
   const signedContent = assembleSignedContent({
     kind: "conversation",
     text: params.content,
-    ...(params.attachments !== undefined
-      ? { attachments: params.attachments }
-      : {}),
+    ...(params.attachments !== undefined ? { attachments: params.attachments } : {}),
   });
-  const signature = await createDetachedSignatureFromProvider(
-    signedContent,
-    params.cryptoProvider,
-  );
+  const signature = await createDetachedSignatureFromProvider(signedContent, params.cryptoProvider);
   return assembleMessage(headers, signedContent, signature);
 }
 
diff --git a/packages/chat/src/settings-control.ts b/packages/chat/src/settings-control.ts
index 1b670f34ba..268f2773d9 100644
--- a/packages/chat/src/settings-control.ts
+++ b/packages/chat/src/settings-control.ts
@@ -44,9 +44,7 @@ export function isControlMessage(parts: readonly Part[]): boolean {
   if (parts.length !== 1) return false;
   const [part] = parts;
   return (
-    part !== undefined &&
-    part.kind === "block" &&
-    part.block.type === WORKBENCH_CONTROL_NAMESPACE
+    part !== undefined && part.kind === "block" && part.block.type === WORKBENCH_CONTROL_NAMESPACE
   );
 }
 
@@ -55,13 +53,9 @@ export function isControlMessage(parts: readonly Part[]): boolean {
  * loudly rather than silently ignoring it. Callers must have already
  * confirmed `isControlMessage(parts)`.
  */
-export function parseControlPayload(
-  parts: readonly Part[],
-): WorkbenchControlPayload {
+export function parseControlPayload(parts: readonly Part[]): WorkbenchControlPayload {
   if (!isControlMessage(parts)) {
-    throw new Error(
-      "parseControlPayload requires a message that isControlMessage accepts",
-    );
+    throw new Error("parseControlPayload requires a message that isControlMessage accepts");
   }
   const [part] = parts;
   // isControlMessage already narrowed this to a single BlockPart.
diff --git a/packages/chat/src/store.ts b/packages/chat/src/store.ts
index 2cdf06a47a..bb731c690f 100644
--- a/packages/chat/src/store.ts
+++ b/packages/chat/src/store.ts
@@ -32,9 +32,8 @@ import {
  * host hands in its own `drizzle(sql, { schema })` instance unchanged —
  * whatever its schema — and no cast is ever needed at the call site.
  */
-export type ChatDb<
-  TSchema extends Record<string, unknown> = Record<string, never>,
-> = PostgresJsDatabase<TSchema>;
+export type ChatDb<TSchema extends Record<string, unknown> = Record<string, never>> =
+  PostgresJsDatabase<TSchema>;
 
 export interface WorkbenchSettingsRow {
   readonly tenantId: string;
@@ -71,9 +70,7 @@ export interface MutateWorkbenchParticipantsInput {
    * latest committed list, never a snapshot a concurrent writer has
    * since moved past.
    */
-  readonly mutate: (
-    participants: readonly ParticipantRecord[],
-  ) => ParticipantRecord[];
+  readonly mutate: (participants: readonly ParticipantRecord[]) => ParticipantRecord[];
 }
 
 export interface PatchWorkbenchSettingsInput {
@@ -121,9 +118,7 @@ export interface WorkbenchByParticipantAddress {
 }
 
 export interface ChatStore {
-  createWorkbenchSettings(
-    input: CreateWorkbenchSettingsInput,
-  ): Promise<WorkbenchSettingsRow>;
+  createWorkbenchSettings(input: CreateWorkbenchSettingsInput): Promise<WorkbenchSettingsRow>;
   getWorkbenchSettings(
     tenantId: string,
     workbenchId: string,
@@ -136,13 +131,8 @@ export interface ChatStore {
    * each of them in turn (see `routes.ts`'s create handler).
    */
   deleteWorkbenchSettings(tenantId: string, workbenchId: string): Promise<void>;
-  listWorkbenchSettings(
-    tenantId: string,
-    kind?: string,
-  ): Promise<WorkbenchSettingsRow[]>;
-  updateWorkbenchSettings(
-    input: UpdateWorkbenchSettingsInput,
-  ): Promise<WorkbenchSettingsRow>;
+  listWorkbenchSettings(tenantId: string, kind?: string): Promise<WorkbenchSettingsRow[]>;
+  updateWorkbenchSettings(input: UpdateWorkbenchSettingsInput): Promise<WorkbenchSettingsRow>;
   /**
    * The targeted counterpart to `updateWorkbenchSettings` for the one
    * key every join/remove path actually changes: `chat/participants`.
@@ -162,13 +152,9 @@ export interface ChatStore {
    * are written; omitted keys keep the locked snapshot's values, so a
    * concurrent PATCH of a different key cannot be reverted.
    */
-  patchWorkbenchSettings(
-    input: PatchWorkbenchSettingsInput,
-  ): Promise<WorkbenchSettingsRow>;
+  patchWorkbenchSettings(input: PatchWorkbenchSettingsInput): Promise<WorkbenchSettingsRow>;
   getBenchSettings(tenantId: string): Promise<ChatBenchSettingsRow | undefined>;
-  upsertBenchSettings(
-    input: UpsertBenchSettingsInput,
-  ): Promise<ChatBenchSettingsRow>;
+  upsertBenchSettings(input: UpsertBenchSettingsInput): Promise<ChatBenchSettingsRow>;
   getReadState(
     tenantId: string,
     workbenchId: string,
@@ -226,10 +212,7 @@ export interface ChatStore {
    * to tell "exactly one" from "several" needs the full list, not a first
    * pick.
    */
-  findWorkbenchIdsByParticipantAddress(
-    tenantId: string,
-    address: string,
-  ): Promise<string[]>;
+  findWorkbenchIdsByParticipantAddress(tenantId: string, address: string): Promise<string[]>;
 }
 
 /** Top-level JSONB merge: only keys present in `patch` overwrite. */
@@ -356,9 +339,7 @@ export function createDrizzleChatStore<TSchema extends Record<string, unknown>>(
           );
         }
         const currentRow = current as WorkbenchSettingsRow;
-        const nextParticipants = input.mutate(
-          participantsOf(currentRow.settings),
-        );
+        const nextParticipants = input.mutate(participantsOf(currentRow.settings));
         const [row] = await tx
           .update(workbenchSettings)
           .set({
@@ -515,10 +496,7 @@ export function createDrizzleChatStore<TSchema extends Record<string, unknown>>(
         .select({ instanceId: workbenchLaunch.instanceId })
         .from(workbenchLaunch)
         .where(
-          and(
-            eq(workbenchLaunch.tenantId, tenantId),
-            eq(workbenchLaunch.instanceId, instanceId),
-          ),
+          and(eq(workbenchLaunch.tenantId, tenantId), eq(workbenchLaunch.instanceId, instanceId)),
         )
         .limit(1);
       return row !== undefined;
@@ -530,11 +508,7 @@ export function createDrizzleChatStore<TSchema extends Record<string, unknown>>(
         .from(workbenchSettings)
         .where(eq(workbenchSettings.tenantId, tenantId));
       for (const row of rows as WorkbenchSettingsRow[]) {
-        if (
-          participantsOf(row.settings).some(
-            (participant) => participant.address === address,
-          )
-        ) {
+        if (participantsOf(row.settings).some((participant) => participant.address === address)) {
           return { workbenchId: row.workbenchId, settings: row.settings };
         }
       }
@@ -548,9 +522,7 @@ export function createDrizzleChatStore<TSchema extends Record<string, unknown>>(
         .where(eq(workbenchSettings.tenantId, tenantId));
       return (rows as WorkbenchSettingsRow[])
         .filter((row) =>
-          participantsOf(row.settings).some(
-            (participant) => participant.address === address,
-          ),
+          participantsOf(row.settings).some((participant) => participant.address === address),
         )
         .map((row) => row.workbenchId);
     },
@@ -570,18 +542,11 @@ export function createInMemoryChatStore(): ChatStore {
   const launchedByKey = new Set<string>();
   const rowLocks = new Map<string, Promise<void>>();
 
-  const settingsKey = (tenantId: string, workbenchId: string) =>
-    `${tenantId}:${workbenchId}`;
-  const readStateKey = (
-    tenantId: string,
-    workbenchId: string,
-    principalId: string,
-  ) => `${tenantId}:${workbenchId}:${principalId}`;
+  const settingsKey = (tenantId: string, workbenchId: string) => `${tenantId}:${workbenchId}`;
+  const readStateKey = (tenantId: string, workbenchId: string, principalId: string) =>
+    `${tenantId}:${workbenchId}:${principalId}`;
 
-  const withRowLock = async <T>(
-    key: string,
-    fn: () => Promise<T>,
-  ): Promise<T> => {
+  const withRowLock = async <T>(key: string, fn: () => Promise<T>): Promise<T> => {
     const previous = rowLocks.get(key) ?? Promise.resolve();
     let release: () => void = () => undefined;
     const held = new Promise<void>((resolve) => {
@@ -621,9 +586,7 @@ export function createInMemoryChatStore(): ChatStore {
     },
 
     async listWorkbenchSettings(tenantId, kind) {
-      const rows = [...settingsByKey.values()].filter(
-        (row) => row.tenantId === tenantId,
-      );
+      const rows = [...settingsByKey.values()].filter((row) => row.tenantId === tenantId);
       if (kind === undefined) return rows;
       return rows.filter((row) => row.settings["chat/kind"] === kind);
     },
@@ -707,22 +670,13 @@ export function createInMemoryChatStore(): ChatStore {
     },
 
     async getReadState(tenantId, workbenchId, principalId) {
-      return readStateByKey.get(
-        readStateKey(tenantId, workbenchId, principalId),
-      );
+      return readStateByKey.get(readStateKey(tenantId, workbenchId, principalId));
     },
 
     async putReadState(input) {
-      const key = readStateKey(
-        input.tenantId,
-        input.workbenchId,
-        input.principalId,
-      );
+      const key = readStateKey(input.tenantId, input.workbenchId, input.principalId);
       const existing = readStateByKey.get(key);
-      if (
-        existing !== undefined &&
-        existing.lastSeenCreatedAt > input.lastSeenCreatedAt
-      ) {
+      if (existing !== undefined && existing.lastSeenCreatedAt > input.lastSeenCreatedAt) {
         return existing;
       }
       const row: ReadStateRow = { ...input };
@@ -732,9 +686,7 @@ export function createInMemoryChatStore(): ChatStore {
 
     async listReadStates(tenantId, workbenchIds, principalId) {
       return workbenchIds.flatMap((workbenchId) => {
-        const row = readStateByKey.get(
-          readStateKey(tenantId, workbenchId, principalId),
-        );
+        const row = readStateByKey.get(readStateKey(tenantId, workbenchId, principalId));
         return row === undefined ? [] : [row];
       });
     },
@@ -746,11 +698,7 @@ export function createInMemoryChatStore(): ChatStore {
     async findWorkbenchByParticipantAddress(tenantId, address) {
       for (const row of settingsByKey.values()) {
         if (row.tenantId !== tenantId) continue;
-        if (
-          participantsOf(row.settings).some(
-            (participant) => participant.address === address,
-          )
-        ) {
+        if (participantsOf(row.settings).some((participant) => participant.address === address)) {
           return { workbenchId: row.workbenchId, settings: row.settings };
         }
       }
@@ -761,11 +709,7 @@ export function createInMemoryChatStore(): ChatStore {
       const ids: string[] = [];
       for (const row of settingsByKey.values()) {
         if (row.tenantId !== tenantId) continue;
-        if (
-          participantsOf(row.settings).some(
-            (participant) => participant.address === address,
-          )
-        ) {
+        if (participantsOf(row.settings).some((participant) => participant.address === address)) {
           ids.push(row.workbenchId);
         }
       }
diff --git a/packages/chat/src/stream-events.ts b/packages/chat/src/stream-events.ts
index 974c7c109c..7786d4b590 100644
--- a/packages/chat/src/stream-events.ts
+++ b/packages/chat/src/stream-events.ts
@@ -106,5 +106,4 @@ export const ChatPresenceSnapshotEventData = type({
     lastActiveAt: "string",
   }).array(),
 });
-export type ChatPresenceSnapshotEventData =
-  typeof ChatPresenceSnapshotEventData.infer;
+export type ChatPresenceSnapshotEventData = typeof ChatPresenceSnapshotEventData.infer;
diff --git a/packages/chat/src/threads.test.ts b/packages/chat/src/threads.test.ts
index 1588d21a83..87498b4ee6 100644
--- a/packages/chat/src/threads.test.ts
+++ b/packages/chat/src/threads.test.ts
@@ -148,10 +148,7 @@ describe("in-memory ThreadStore", () => {
       threadId: root.id,
       messageId: "msg_b",
     });
-    expect(await store.listMessageIds("t1", root.id)).toEqual([
-      "msg_a",
-      "msg_b",
-    ]);
+    expect(await store.listMessageIds("t1", root.id)).toEqual(["msg_a", "msg_b"]);
     expect(await store.threadIdForMessage("t1", "c1", "msg_a")).toBe(root.id);
   });
 
@@ -209,11 +206,7 @@ describe("in-memory ThreadStore", () => {
       parentMessageId: "msg_1",
     });
     const list = await store.listThreads("t1", "c1");
-    expect(list.map((t) => t.kind).sort()).toEqual([
-      "delivery",
-      "reply",
-      "root",
-    ]);
+    expect(list.map((t) => t.kind).sort()).toEqual(["delivery", "reply", "root"]);
   });
 
   test("openReplyThread on a root message opens a depth-1 thread parented on root", async () => {
diff --git a/packages/chat/src/threads.ts b/packages/chat/src/threads.ts
index 35911f5300..5659f6eb38 100644
--- a/packages/chat/src/threads.ts
+++ b/packages/chat/src/threads.ts
@@ -68,10 +68,7 @@ export function resolveThreadAnchor(
   if (container.id === root.id) {
     return { parentThreadId: root.id, blocked: false };
   }
-  if (
-    container.parentThreadId === null ||
-    container.parentThreadId === root.id
-  ) {
+  if (container.parentThreadId === null || container.parentThreadId === root.id) {
     return { parentThreadId: container.id, blocked: false };
   }
   return { parentThreadId: container.parentThreadId, blocked: true };
@@ -104,13 +101,8 @@ export type AssignMessageInput = {
 };
 
 export interface ThreadStore {
-  ensureRootThread(
-    tenantId: string,
-    workbenchId: string,
-  ): Promise<WorkbenchThread>;
-  createDeliveryThread(
-    input: CreateDeliveryThreadInput,
-  ): Promise<WorkbenchThread>;
+  ensureRootThread(tenantId: string, workbenchId: string): Promise<WorkbenchThread>;
+  createDeliveryThread(input: CreateDeliveryThreadInput): Promise<WorkbenchThread>;
   /** Opens (or reuses) the depth-1 reply thread for a message. Throws
    * `ThreadDepthCapError` if the message already lives in a depth-2
    * sub-thread — a caller wanting the depth-cap-redirect behavior wants
@@ -121,19 +113,10 @@ export interface ThreadStore {
    * creates a sibling sub-thread under that sub-thread's parent rather
    * than a third level (CL-5948). Never throws for depth. */
   forkThread(input: ForkThreadInput): Promise<WorkbenchThread>;
-  getThread(
-    tenantId: string,
-    threadId: string,
-  ): Promise<WorkbenchThread | undefined>;
-  listThreads(
-    tenantId: string,
-    workbenchId: string,
-  ): Promise<readonly WorkbenchThread[]>;
+  getThread(tenantId: string, threadId: string): Promise<WorkbenchThread | undefined>;
+  listThreads(tenantId: string, workbenchId: string): Promise<readonly WorkbenchThread[]>;
   assignMessage(input: AssignMessageInput): Promise<void>;
-  listMessageIds(
-    tenantId: string,
-    threadId: string,
-  ): Promise<readonly string[]>;
+  listMessageIds(tenantId: string, threadId: string): Promise<readonly string[]>;
   /**
    * Every membership row this workbench has, as `messageId -> threadId`.
    * A message with no row is absent rather than defaulted to the root
@@ -218,11 +201,7 @@ export async function mailAncestryOf(
     if (thread === undefined || thread.parentMessageId === null) break;
     ancestors.unshift(thread.parentMessageId);
     current =
-      (await store.threadIdForMessage(
-        tenantId,
-        workbenchId,
-        thread.parentMessageId,
-      )) ?? null;
+      (await store.threadIdForMessage(tenantId, workbenchId, thread.parentMessageId)) ?? null;
   }
   return ancestors;
 }
@@ -233,18 +212,11 @@ export function createInMemoryThreadStore(): ThreadStore {
   const messageToThread = new Map<string, string>();
   const threadMessages = new Map<string, string[]>();
 
-  const workbenchKey = (tenantId: string, workbenchId: string) =>
-    `${tenantId}::${workbenchId}`;
-  const messageKey = (
-    tenantId: string,
-    workbenchId: string,
-    messageId: string,
-  ) => `${tenantId}::${workbenchId}::${messageId}`;
+  const workbenchKey = (tenantId: string, workbenchId: string) => `${tenantId}::${workbenchId}`;
+  const messageKey = (tenantId: string, workbenchId: string, messageId: string) =>
+    `${tenantId}::${workbenchId}::${messageId}`;
 
-  async function ensureRootThread(
-    tenantId: string,
-    workbenchId: string,
-  ): Promise<WorkbenchThread> {
+  async function ensureRootThread(tenantId: string, workbenchId: string): Promise<WorkbenchThread> {
     const key = workbenchKey(tenantId, workbenchId);
     const ids = byWorkbench.get(key) ?? [];
     for (const id of ids) {
@@ -274,9 +246,7 @@ export function createInMemoryThreadStore(): ThreadStore {
     parentMessageId: string,
     root: WorkbenchThread,
   ): Promise<WorkbenchThread> {
-    const containerId = messageToThread.get(
-      messageKey(tenantId, workbenchId, parentMessageId),
-    );
+    const containerId = messageToThread.get(messageKey(tenantId, workbenchId, parentMessageId));
     if (containerId === undefined) return root;
     return threads.get(containerId) ?? root;
   }
@@ -396,13 +366,10 @@ export function createInMemoryThreadStore(): ThreadStore {
   };
 }
 
-export type ThreadDb<
-  TSchema extends Record<string, unknown> = Record<string, never>,
-> = PostgresJsDatabase<TSchema>;
+export type ThreadDb<TSchema extends Record<string, unknown> = Record<string, never>> =
+  PostgresJsDatabase<TSchema>;
 
-function mapThreadRow(
-  row: typeof workbenchThreads.$inferSelect,
-): WorkbenchThread {
+function mapThreadRow(row: typeof workbenchThreads.$inferSelect): WorkbenchThread {
   return {
     id: row.id,
     tenantId: row.tenantId,
@@ -416,9 +383,9 @@ function mapThreadRow(
   };
 }
 
-export function createDrizzleThreadStore<
-  TSchema extends Record<string, unknown>,
->(db: ThreadDb<TSchema>): ThreadStore {
+export function createDrizzleThreadStore<TSchema extends Record<string, unknown>>(
+  db: ThreadDb<TSchema>,
+): ThreadStore {
   async function selectRootThread(
     tenantId: string,
     workbenchId: string,
@@ -438,10 +405,7 @@ export function createDrizzleThreadStore<
     return rows[0] ? mapThreadRow(rows[0]) : undefined;
   }
 
-  async function ensureRootThread(
-    tenantId: string,
-    workbenchId: string,
-  ): Promise<WorkbenchThread> {
+  async function ensureRootThread(tenantId: string, workbenchId: string): Promise<WorkbenchThread> {
     const existing = await selectRootThread(tenantId, workbenchId);
     if (existing) return existing;
     // Insert-first, not select-then-insert: two concurrent first
@@ -499,12 +463,7 @@ export function createDrizzleThreadStore<
     const containerRows = await db
       .select()
       .from(workbenchThreads)
-      .where(
-        and(
-          eq(workbenchThreads.tenantId, tenantId),
-          eq(workbenchThreads.id, containerId),
-        ),
-      )
+      .where(and(eq(workbenchThreads.tenantId, tenantId), eq(workbenchThreads.id, containerId)))
       .limit(1);
     return containerRows[0] ? mapThreadRow(containerRows[0]) : root;
   }
@@ -654,9 +613,7 @@ export function createDrizzleThreadStore<
         input.runRef,
       );
       if (!reselected) {
-        throw new Error(
-          "expected delivery thread row after conflicting insert",
-        );
+        throw new Error("expected delivery thread row after conflicting insert");
       }
       return reselected;
     },
@@ -668,12 +625,7 @@ export function createDrizzleThreadStore<
       const rows = await db
         .select()
         .from(workbenchThreads)
-        .where(
-          and(
-            eq(workbenchThreads.tenantId, tenantId),
-            eq(workbenchThreads.id, threadId),
-          ),
-        )
+        .where(and(eq(workbenchThreads.tenantId, tenantId), eq(workbenchThreads.id, threadId)))
         .limit(1);
       return rows[0] ? mapThreadRow(rows[0]) : undefined;
     },
diff --git a/packages/chat/src/tools-unsupported.test.ts b/packages/chat/src/tools-unsupported.test.ts
index 14d87ff202..23b6545168 100644
--- a/packages/chat/src/tools-unsupported.test.ts
+++ b/packages/chat/src/tools-unsupported.test.ts
@@ -42,44 +42,30 @@ describe("isToolsUnsupportedInferenceText", () => {
   });
 
   test("does not classify embedding/chat-capability failures", () => {
-    expect(
-      isToolsUnsupportedInferenceText("this model does not support generate"),
-    ).toBe(false);
-    expect(
-      isToolsUnsupportedInferenceText("this model does not support chat"),
-    ).toBe(false);
+    expect(isToolsUnsupportedInferenceText("this model does not support generate")).toBe(false);
+    expect(isToolsUnsupportedInferenceText("this model does not support chat")).toBe(false);
   });
 
   test("does not classify ordinary replies that mention tools", () => {
-    expect(
-      isToolsUnsupportedInferenceText(
-        "I can use tools to look that up if you want.",
-      ),
-    ).toBe(false);
+    expect(isToolsUnsupportedInferenceText("I can use tools to look that up if you want.")).toBe(
+      false,
+    );
   });
 
   test("does not classify ordinary tool-not-supported connector prose", () => {
+    expect(isToolsUnsupportedInferenceText("The grep tool is not supported in this sandbox.")).toBe(
+      false,
+    );
     expect(
-      isToolsUnsupportedInferenceText(
-        "The grep tool is not supported in this sandbox.",
-      ),
-    ).toBe(false);
-    expect(
-      isToolsUnsupportedInferenceText(
-        "The search tool is not supported in this environment.",
-      ),
+      isToolsUnsupportedInferenceText("The search tool is not supported in this environment."),
     ).toBe(false);
   });
 });
 
 describe("TOOLS_UNSUPPORTED_CONSUMER_MESSAGE", () => {
   test("is one honest sentence with no HTTP, registry, or provider dump", () => {
-    expect(TOOLS_UNSUPPORTED_CONSUMER_MESSAGE).toBe(
-      "This agent's model can't use tools.",
-    );
+    expect(TOOLS_UNSUPPORTED_CONSUMER_MESSAGE).toBe("This agent's model can't use tools.");
     expect(TOOLS_UNSUPPORTED_CONSUMER_MESSAGE).not.toMatch(/HTTP/i);
-    expect(TOOLS_UNSUPPORTED_CONSUMER_MESSAGE.toLowerCase()).not.toContain(
-      "function-calling",
-    );
+    expect(TOOLS_UNSUPPORTED_CONSUMER_MESSAGE.toLowerCase()).not.toContain("function-calling");
   });
 });
diff --git a/packages/chat/src/tools-unsupported.ts b/packages/chat/src/tools-unsupported.ts
index 85331998c8..8c69077b65 100644
--- a/packages/chat/src/tools-unsupported.ts
+++ b/packages/chat/src/tools-unsupported.ts
@@ -4,8 +4,7 @@
  * catalog/registry capability strings never belong on the timeline.
  */
 
-export const TOOLS_UNSUPPORTED_CONSUMER_MESSAGE =
-  "This agent's model can't use tools.";
+export const TOOLS_UNSUPPORTED_CONSUMER_MESSAGE = "This agent's model can't use tools.";
 
 /**
  * Conservative match: provider/inference errors about tools /
diff --git a/packages/chat/src/turn-cancellation.test.ts b/packages/chat/src/turn-cancellation.test.ts
index 61feba776d..81e190d8f0 100644
--- a/packages/chat/src/turn-cancellation.test.ts
+++ b/packages/chat/src/turn-cancellation.test.ts
@@ -1,9 +1,6 @@
 import { describe, expect, test } from "bun:test";
 
-import {
-  createTurnCancelRegistry,
-  TurnCancelledError,
-} from "./turn-cancellation";
+import { createTurnCancelRegistry, TurnCancelledError } from "./turn-cancellation";
 
 describe("createTurnCancelRegistry (CL-7201)", () => {
   test("cancel aborts every controller registered for that workbench", () => {
diff --git a/packages/chat/src/turn-cancellation.ts b/packages/chat/src/turn-cancellation.ts
index 75f32820d0..eab53ff8bf 100644
--- a/packages/chat/src/turn-cancellation.ts
+++ b/packages/chat/src/turn-cancellation.ts
@@ -51,8 +51,7 @@ export function createTurnCancelRegistry(): TurnCancelRegistry {
   return {
     register(workbenchId) {
       const controller = new AbortController();
-      const controllers =
-        controllersByWorkbench.get(workbenchId) ?? new Set<AbortController>();
+      const controllers = controllersByWorkbench.get(workbenchId) ?? new Set<AbortController>();
       controllers.add(controller);
       controllersByWorkbench.set(workbenchId, controllers);
       return controller;
diff --git a/packages/chat/src/turn-context.test.ts b/packages/chat/src/turn-context.test.ts
index 8cb1eb2414..6f323e61d4 100644
--- a/packages/chat/src/turn-context.test.ts
+++ b/packages/chat/src/turn-context.test.ts
@@ -5,9 +5,7 @@ import { assembleTurnContext } from "./turn-context";
 
 const TENANT = "ten_1";
 const WORKBENCH = "wb_1";
-const PARTICIPANTS = [
-  { address: "ins_echo1@acme.example", handle: "echo" },
-] as const;
+const PARTICIPANTS = [{ address: "ins_echo1@acme.example", handle: "echo" }] as const;
 
 async function seed(texts: readonly { from: string; text: string }[]) {
   const roomMessages = createInMemoryRoomMessageStore();
@@ -45,15 +43,11 @@ describe("assembleTurnContext", () => {
     expect(context).toContain("user: first");
     expect(context).toContain("@echo: second");
     expect(context).not.toContain("the new one");
-    expect(context?.indexOf("first")).toBeLessThan(
-      context?.indexOf("second") ?? -1,
-    );
+    expect(context?.indexOf("first")).toBeLessThan(context?.indexOf("second") ?? -1);
   });
 
   test("a context window of zero assembles nothing at all", async () => {
-    const { roomMessages } = await seed([
-      { from: "prn_alice@acme.example", text: "first" },
-    ]);
+    const { roomMessages } = await seed([{ from: "prn_alice@acme.example", text: "first" }]);
 
     expect(
       await assembleTurnContext({
diff --git a/packages/chat/src/turn-context.ts b/packages/chat/src/turn-context.ts
index b64cb89080..44c650a390 100644
--- a/packages/chat/src/turn-context.ts
+++ b/packages/chat/src/turn-context.ts
@@ -66,9 +66,7 @@ export function contextItemFor(
   participants: readonly ParticipantRecord[],
 ): WorkbenchContextItem | undefined {
   const texts = message.parts
-    .filter(
-      (part): part is Extract<Part, { kind: "text" }> => part.kind === "text",
-    )
+    .filter((part): part is Extract<Part, { kind: "text" }> => part.kind === "text")
     .map((part) => part.text);
   if (texts.length === 0) return undefined;
   return {
@@ -113,8 +111,7 @@ export async function assembleTurnContext(
     const fetchCap = input.contextWindow + DROPPED_RECAP_LOOKBACK;
     const inScope = (message: RoomMessage): boolean =>
       message.id !== input.excludeMessageId &&
-      (input.thread === undefined ||
-        input.thread.threadIdOf(message.id) === input.thread.threadId);
+      (input.thread === undefined || input.thread.threadIdOf(message.id) === input.thread.threadId);
 
     const newestFirst: RoomMessage[] = [];
     let cursor: string | undefined;
diff --git a/packages/chat/src/with-timeout.test.ts b/packages/chat/src/with-timeout.test.ts
index f9e9de4b76..03370c9ca7 100644
--- a/packages/chat/src/with-timeout.test.ts
+++ b/packages/chat/src/with-timeout.test.ts
@@ -24,11 +24,7 @@ describe("withTimeout", () => {
 
   test("rejects with the timeout message when work never settles", async () => {
     await expect(
-      withTimeout(
-        () => new Promise<never>(() => {}),
-        10,
-        "did not settle within 10ms",
-      ),
+      withTimeout(() => new Promise<never>(() => {}), 10, "did not settle within 10ms"),
     ).rejects.toThrow("did not settle within 10ms");
   });
 
@@ -142,12 +138,7 @@ describe("withTimeout", () => {
 
     test("work settling on its own is unaffected by an external signal that never fires", async () => {
       const external = new AbortController();
-      const result = await withTimeout(
-        async () => "ok",
-        50,
-        "timed out",
-        external.signal,
-      );
+      const result = await withTimeout(async () => "ok", 50, "timed out", external.signal);
       expect(result).toBe("ok");
     });
 
diff --git a/packages/chat/src/workbench-context.ts b/packages/chat/src/workbench-context.ts
index bb09c91f63..90df7e2def 100644
--- a/packages/chat/src/workbench-context.ts
+++ b/packages/chat/src/workbench-context.ts
@@ -38,9 +38,7 @@ const RECAP_LABEL = "system";
 
 function formatRecapDate(iso: string): string {
   const parsed = new Date(iso);
-  return Number.isNaN(parsed.getTime())
-    ? iso
-    : parsed.toISOString().slice(0, 10);
+  return Number.isNaN(parsed.getTime()) ? iso : parsed.toISOString().slice(0, 10);
 }
 
 export interface DroppedRecapInput {
@@ -68,9 +66,7 @@ export interface DroppedRecapInput {
  * Never exceeds its own cap regardless of how much history it is
  * standing in for.
  */
-export function buildDroppedRecap(
-  input: DroppedRecapInput,
-): WorkbenchContextItem {
+export function buildDroppedRecap(input: DroppedRecapInput): WorkbenchContextItem {
   const countLabel = `${input.droppedCount}${input.moreBeyondFold ? "+" : ""}`;
   const dateRange =
     input.firstDate !== undefined && input.lastDate !== undefined
@@ -93,8 +89,7 @@ export function buildDroppedRecap(
       : input.moreBeyondFold
         ? " … and possibly more"
         : "";
-  const body =
-    leads.length > 0 ? leads.join("; ") : "(no human messages in this span)";
+  const body = leads.length > 0 ? leads.join("; ") : "(no human messages in this span)";
 
   return {
     label: RECAP_LABEL,
@@ -116,9 +111,7 @@ export interface WorkbenchContextItem {
 }
 
 function truncate(text: string): string {
-  return text.length > MAX_MESSAGE_LENGTH
-    ? `${text.slice(0, MAX_MESSAGE_LENGTH)}…`
-    : text;
+  return text.length > MAX_MESSAGE_LENGTH ? `${text.slice(0, MAX_MESSAGE_LENGTH)}…` : text;
 }
 
 /**
@@ -140,13 +133,8 @@ export function renderWorkbenchContext(input: {
    */
   readonly recap?: WorkbenchContextItem;
 }): string {
-  const lines = input.items.map(
-    (item) => `${item.label}: ${truncate(item.text)}`,
-  );
-  const recapLine =
-    input.recap !== undefined
-      ? [`${input.recap.label}: ${input.recap.text}`]
-      : [];
+  const lines = input.items.map((item) => `${item.label}: ${truncate(item.text)}`);
+  const recapLine = input.recap !== undefined ? [`${input.recap.label}: ${input.recap.text}`] : [];
   return [CONTEXT_HEADER, ...recapLine, ...lines].join("\n");
 }
 
diff --git a/packages/chat/src/workbench-events.ts b/packages/chat/src/workbench-events.ts
index 65c3ce59b6..b9f1729c9f 100644
--- a/packages/chat/src/workbench-events.ts
+++ b/packages/chat/src/workbench-events.ts
@@ -155,9 +155,7 @@ export interface WorkbenchSubscriberRegistry {
  * upstream subscription is released only once the last local subscriber
  * for that workbench goes away.
  */
-export function createPlatformWorkbenchFanout(
-  platform: WorkbenchEvents,
-): WorkbenchEvents {
+export function createPlatformWorkbenchFanout(platform: WorkbenchEvents): WorkbenchEvents {
   interface Entry {
     subscribers: Set<WorkbenchSubscriber>;
     unsubscribeUpstream: () => void;
@@ -169,12 +167,9 @@ export function createPlatformWorkbenchFanout(
       let entry = entriesByWorkbench.get(workbenchId);
       if (entry === undefined) {
         const subscribers = new Set<WorkbenchSubscriber>();
-        const unsubscribeUpstream = platform.subscribeToWorkbench(
-          workbenchId,
-          (event) => {
-            for (const subscriber of subscribers) subscriber(event);
-          },
-        );
+        const unsubscribeUpstream = platform.subscribeToWorkbench(workbenchId, (event) => {
+          for (const subscriber of subscribers) subscriber(event);
+        });
         entry = { subscribers, unsubscribeUpstream };
         entriesByWorkbench.set(workbenchId, entry);
       }
@@ -437,12 +432,9 @@ export function bridgeWorkbenchStream(input: {
   // itself is still a failure worth knowing about, so it's reported
   // rather than swallowed.
   try {
-    unsubscribePlatform = input.platform.subscribeToWorkbench(
-      input.workbenchId,
-      (event) => {
-        enqueue(() => deliverEvent(event));
-      },
-    );
+    unsubscribePlatform = input.platform.subscribeToWorkbench(input.workbenchId, (event) => {
+      enqueue(() => deliverEvent(event));
+    });
   } catch (error) {
     reportError(error, {
       operation: "chat.workbenchStream.platformSubscribe",
diff --git a/packages/chat/src/workbench-presence.test.ts b/packages/chat/src/workbench-presence.test.ts
index daa79b3d2a..a68b2d5308 100644
--- a/packages/chat/src/workbench-presence.test.ts
+++ b/packages/chat/src/workbench-presence.test.ts
@@ -61,11 +61,7 @@ describe("createWorkbenchPresenceRegistry", () => {
     const registry = createWorkbenchPresenceRegistry();
     registry.connect("wb_1", "prn_ada");
     registry.connect("wb_2", "prn_bob");
-    expect(registry.snapshot("wb_1").map((m) => m.principalId)).toEqual([
-      "prn_ada",
-    ]);
-    expect(registry.snapshot("wb_2").map((m) => m.principalId)).toEqual([
-      "prn_bob",
-    ]);
+    expect(registry.snapshot("wb_1").map((m) => m.principalId)).toEqual(["prn_ada"]);
+    expect(registry.snapshot("wb_2").map((m) => m.principalId)).toEqual(["prn_bob"]);
   });
 });
diff --git a/packages/chat/src/workbench-reply-activity.ts b/packages/chat/src/workbench-reply-activity.ts
index 495f3fdd85..cce94a3abf 100644
--- a/packages/chat/src/workbench-reply-activity.ts
+++ b/packages/chat/src/workbench-reply-activity.ts
@@ -10,17 +10,13 @@ export async function listWorkbenchLiveState(input: {
   readonly agentTurns: AgentTurnStore | undefined;
   readonly roomMessages: RoomMessageStore;
 }): Promise<ReadonlyMap<string, WorkbenchLiveState>> {
-  const live = new Map<string, WorkbenchLiveState>(
-    input.workbenchIds.map((id) => [id, "idle"]),
-  );
+  const live = new Map<string, WorkbenchLiveState>(input.workbenchIds.map((id) => [id, "idle"]));
   if (input.agentTurns === undefined) return live;
   const turns = await input.agentTurns.listWorkbenchTurns(input);
   const replies = await input.roomMessages.getMessages({
     tenantId: input.tenantId,
     messageIds: turns.flatMap((turn) =>
-      turn.status === "completed" && turn.replyMessageId !== null
-        ? [turn.replyMessageId]
-        : [],
+      turn.status === "completed" && turn.replyMessageId !== null ? [turn.replyMessageId] : [],
     ),
   });
   const byId = new Map(replies.map((reply) => [reply.id, reply]));
diff --git a/packages/chat/src/workbench-service.timeouts.test.ts b/packages/chat/src/workbench-service.timeouts.test.ts
index 877fac0cb3..85478ee3f8 100644
--- a/packages/chat/src/workbench-service.timeouts.test.ts
+++ b/packages/chat/src/workbench-service.timeouts.test.ts
@@ -20,9 +20,7 @@ describe("CL-7129's timeout constants", () => {
     // (the section body's own per-occurrence timeout). A wait bound at
     // or below that would time out a message queued behind such a
     // turn and drop it as undelivered instead of waiting it out.
-    expect(DEFAULT_WAIT_UNTIL_FREE_TIMEOUT_MS).toBeGreaterThan(
-      CHAT_TURN_TIMEOUT_MS,
-    );
+    expect(DEFAULT_WAIT_UNTIL_FREE_TIMEOUT_MS).toBeGreaterThan(CHAT_TURN_TIMEOUT_MS);
   });
 
   test("the claim TTL exceeds the wait bound plus the dispatch deadline, so it never fires on a well-behaved dispatch", () => {
diff --git a/packages/chat/src/workbench-service.ts b/packages/chat/src/workbench-service.ts
index e4c61973f9..7ae1b50a8a 100644
--- a/packages/chat/src/workbench-service.ts
+++ b/packages/chat/src/workbench-service.ts
@@ -20,16 +20,10 @@ import { deriveDisplayName } from "./display-name";
 import { assertNoLeakedInternalId } from "./id-leak-guard";
 import { isAgentAddress, mentionedParticipants } from "./mentions";
 import { mergeContextIntoParts } from "./workbench-context";
-import {
-  assembleTurnContext,
-  type TurnContextThreadScope,
-} from "./turn-context";
+import { assembleTurnContext, type TurnContextThreadScope } from "./turn-context";
 import type { AgentTurnStore } from "@corbits/agent-runtime";
 import type { ThreadStore } from "./threads";
-import {
-  TurnCancelledError,
-  type TurnCancelRegistry,
-} from "./turn-cancellation";
+import { TurnCancelledError, type TurnCancelRegistry } from "./turn-cancellation";
 import {
   addParticipant,
   handleFromName,
@@ -130,24 +124,18 @@ export type LaunchAndJoinAgentResult = {
  * equality when either side's asset is unresolvable.
  */
 export async function findResidentAgentForDefinition(
-  platform: Pick<
-    WorkbenchLauncher,
-    "resolveDefinitionIdByAddress" | "resolveDefinitionAssetId"
-  >,
+  platform: Pick<WorkbenchLauncher, "resolveDefinitionIdByAddress" | "resolveDefinitionAssetId">,
   participants: readonly ParticipantRecord[],
   definitionId: string,
 ): Promise<ParticipantRecord | undefined> {
   const assetId = await platform.resolveDefinitionAssetId(definitionId);
   for (const participant of participants) {
     if (!isAgentAddress(participant.address)) continue;
-    const launchedFrom = await platform.resolveDefinitionIdByAddress(
-      participant.address,
-    );
+    const launchedFrom = await platform.resolveDefinitionIdByAddress(participant.address);
     if (launchedFrom === undefined) continue;
     if (launchedFrom === definitionId) return participant;
     if (assetId === undefined) continue;
-    const launchedFromAssetId =
-      await platform.resolveDefinitionAssetId(launchedFrom);
+    const launchedFromAssetId = await platform.resolveDefinitionAssetId(launchedFrom);
     if (launchedFromAssetId === assetId) return participant;
   }
   return undefined;
@@ -168,12 +156,9 @@ export async function resolveInvitedDisplayName(
   invitable: readonly InvitableDefinition[],
   definitionId: string,
 ): Promise<string> {
-  const invitedDefinition = invitable.find(
-    (definition) => definition.id === definitionId,
-  );
+  const invitedDefinition = invitable.find((definition) => definition.id === definitionId);
   const nameSource =
-    invitedDefinition ??
-    (await platform.resolveDefinitionNameSource(definitionId));
+    invitedDefinition ?? (await platform.resolveDefinitionNameSource(definitionId));
   if (nameSource === undefined) {
     throw new Error(
       `cannot resolve a display name for definition "${definitionId}": ` +
@@ -181,10 +166,7 @@ export async function resolveInvitedDisplayName(
     );
   }
   const displayName = deriveDisplayName(nameSource);
-  assertNoLeakedInternalId(
-    displayName,
-    `definition "${definitionId}"'s display name`,
-  );
+  assertNoLeakedInternalId(displayName, `definition "${definitionId}"'s display name`);
   return displayName;
 }
 
@@ -248,9 +230,7 @@ export async function launchAndJoinAgent(
 
   if (kindOf(input.existingSettings) === AGENT_DM_KIND) {
     const boundDefinitionId = definitionIdOfSettings(input.existingSettings);
-    const alreadyHasAgent = participants.some((participant) =>
-      isAgentAddress(participant.address),
-    );
+    const alreadyHasAgent = participants.some((participant) => isAgentAddress(participant.address));
     const isThisChatMint =
       typeof boundDefinitionId === "string" &&
       boundDefinitionId === input.definitionId &&
@@ -414,11 +394,8 @@ export function cannedGreeting(input: CannedGreetingInput): string {
   // through `agentName` alone.
   assertNoLeakedInternalId(input.agentName, "a greeting's agent name");
   const who =
-    input.senderName !== undefined && input.senderName !== ""
-      ? ` ${input.senderName}`
-      : "";
-  const variation =
-    GREETING_VARIATIONS[greetingVariationIndex(input.workbenchId)];
+    input.senderName !== undefined && input.senderName !== "" ? ` ${input.senderName}` : "";
+  const variation = GREETING_VARIATIONS[greetingVariationIndex(input.workbenchId)];
   if (variation === undefined) throw new Error("no greeting variations");
   return variation(who, input.agentName, nextStepsOfferClause());
 }
@@ -578,8 +555,7 @@ export type RemoveWorkbenchParticipantDeps = {
    * mid-removal), but that gap is logged at error level so it is never
    * silent.
    */
-  readonly releaseAgentInstance?:
-    ((address: string, reason: string) => Promise<void>) | undefined;
+  readonly releaseAgentInstance?: ((address: string, reason: string) => Promise<void>) | undefined;
 };
 
 export type RemoveWorkbenchParticipantInput = {
@@ -616,8 +592,7 @@ export async function removeWorkbenchParticipant(
     tenantId: input.tenantId,
     workbenchId: input.workbenchId,
     updatedBy: input.principalId,
-    mutate: (participants) =>
-      removeParticipant(participants, input.participant.address),
+    mutate: (participants) => removeParticipant(participants, input.participant.address),
   });
 
   const isAgent = isAgentAddress(input.participant.address);
@@ -649,10 +624,7 @@ export async function removeWorkbenchParticipant(
   if (isAgent) {
     if (deps.releaseAgentInstance !== undefined) {
       try {
-        await deps.releaseAgentInstance(
-          input.participant.address,
-          "participant-removed",
-        );
+        await deps.releaseAgentInstance(input.participant.address, "participant-removed");
       } catch (err) {
         removeLog.error(
           "Releasing {address}'s launched instance failed after it was " +
@@ -685,10 +657,7 @@ export async function removeWorkbenchParticipant(
 }
 
 export type StartWorkflowCommandDeps = {
-  readonly store: Pick<
-    ChatStore,
-    "getWorkbenchSettings" | "mutateWorkbenchParticipants"
-  >;
+  readonly store: Pick<ChatStore, "getWorkbenchSettings" | "mutateWorkbenchParticipants">;
   readonly platform: WorkbenchLauncher & Pick<WorkbenchMail, "sendMail">;
   readonly roomMessages: RoomMessageStore;
   readonly publish: (workbenchId: string, event: ChatWorkbenchEvent) => void;
@@ -729,14 +698,9 @@ export async function startWorkflowCommand(
   deps: StartWorkflowCommandDeps,
   input: StartWorkflowCommandInput,
 ): Promise<StartWorkflowCommandResult> {
-  const existing = await deps.store.getWorkbenchSettings(
-    input.tenantId,
-    input.workbenchId,
-  );
+  const existing = await deps.store.getWorkbenchSettings(input.tenantId, input.workbenchId);
   if (existing === undefined) {
-    throw new Error(
-      `No workbench "${input.workbenchId}" to start a workflow in`,
-    );
+    throw new Error(`No workbench "${input.workbenchId}" to start a workflow in`);
   }
 
   const resident = await findResidentAgentForDefinition(
@@ -773,8 +737,7 @@ export async function startWorkflowCommand(
     },
   );
 
-  const openingText =
-    input.args.trim() !== "" ? input.args.trim() : "Continue.";
+  const openingText = input.args.trim() !== "" ? input.args.trim() : "Continue.";
   await deps.platform.sendMail({
     tenantId: input.tenantId,
     workbenchId: localPartOf(joined.address),
@@ -912,16 +875,11 @@ export const DEFAULT_WAIT_UNTIL_FREE_TIMEOUT_MS = CHAT_TURN_TIMEOUT_MS + 30_000;
  * so it is unreachable in any well-behaved case.
  */
 export const DEFAULT_TURN_CLAIM_TTL_MS =
-  DEFAULT_WAIT_UNTIL_FREE_TIMEOUT_MS +
-  DEFAULT_TURN_DISPATCH_TIMEOUT_MS +
-  30_000;
+  DEFAULT_WAIT_UNTIL_FREE_TIMEOUT_MS + DEFAULT_TURN_DISPATCH_TIMEOUT_MS + 30_000;
 
 /** `waitUntilFree`'s own timeout message: names the agent address the
  * wait was blocked on and the budget it exceeded. */
-export function waitUntilFreeTimeoutMessage(
-  agentAddress: string,
-  timeoutMs: number,
-): string {
+export function waitUntilFreeTimeoutMessage(agentAddress: string, timeoutMs: number): string {
   return `waiting for "${agentAddress}"'s prior turn to close did not settle within ${String(timeoutMs)}ms`;
 }
 
@@ -929,10 +887,7 @@ export function waitUntilFreeTimeoutMessage(
  * run address (the recipient every dispatch failure is already reported
  * and notified against) and the budget it exceeded, so a person reading
  * the `reportError` refId's logged cause sees exactly what expired. */
-export function turnDispatchTimeoutMessage(
-  agentAddress: string,
-  timeoutMs: number,
-): string {
+export function turnDispatchTimeoutMessage(agentAddress: string, timeoutMs: number): string {
   return `turn for "${agentAddress}" did not settle within ${String(timeoutMs)}ms`;
 }
 
@@ -1137,12 +1092,8 @@ async function mailboxFanOutForSend(
     mailMessageId,
   });
 
-  const settingsRow = await deps.store.getWorkbenchSettings(
-    input.tenantId,
-    input.workbenchId,
-  );
-  const participants =
-    settingsRow !== undefined ? participantsOf(settingsRow.settings) : [];
+  const settingsRow = await deps.store.getWorkbenchSettings(input.tenantId, input.workbenchId);
+  const participants = settingsRow !== undefined ? participantsOf(settingsRow.settings) : [];
 
   const ancestors =
     deps.threads !== undefined
@@ -1157,9 +1108,7 @@ async function mailboxFanOutForSend(
     ancestors.length > 0
       ? mailMessageIdFor(ancestors[ancestors.length - 1] as string, domain)
       : undefined;
-  const references = ancestors.map((ancestor) =>
-    mailMessageIdFor(ancestor, domain),
-  );
+  const references = ancestors.map((ancestor) => mailMessageIdFor(ancestor, domain));
 
   const body = mailboxBodyOf(input.messageParts);
   await writeChatMailboxFanout(mailboxDeps, {
@@ -1230,10 +1179,7 @@ async function turnThreadScope(
   messageId: string,
 ): Promise<{ thread?: TurnContextThreadScope }> {
   if (deps.threads === undefined) return {};
-  const assignments = await deps.threads.listThreadAssignments(
-    input.tenantId,
-    input.workbenchId,
-  );
+  const assignments = await deps.threads.listThreadAssignments(input.tenantId, input.workbenchId);
   const threadId = assignments.get(messageId);
   if (threadId === undefined) return {};
   return {
@@ -1249,16 +1195,10 @@ async function routeToRecipients(
   input: SendWorkbenchMessageInput,
   messageId: string,
 ): Promise<void> {
-  const settingsRow = await deps.store.getWorkbenchSettings(
-    input.tenantId,
-    input.workbenchId,
-  );
-  const participants =
-    settingsRow !== undefined ? participantsOf(settingsRow.settings) : [];
+  const settingsRow = await deps.store.getWorkbenchSettings(input.tenantId, input.workbenchId);
+  const participants = settingsRow !== undefined ? participantsOf(settingsRow.settings) : [];
 
-  const recipientSet = new Set(
-    mentionedParticipants(input.messageParts, participants),
-  );
+  const recipientSet = new Set(mentionedParticipants(input.messageParts, participants));
   if (input.forcedRecipientAddress !== undefined) {
     recipientSet.add(input.forcedRecipientAddress);
   }
@@ -1277,9 +1217,7 @@ async function routeToRecipients(
   // shared across rooms is not asked with another room's rows.
   const isDefaultRouting = recipientSet.size === 0;
   if (isDefaultRouting) {
-    const host = participants.find((participant) =>
-      isAgentAddress(participant.address),
-    );
+    const host = participants.find((participant) => isAgentAddress(participant.address));
     if (host !== undefined) recipientSet.add(host.address);
   }
   const recipients = [...recipientSet];
@@ -1314,8 +1252,7 @@ async function routeToRecipients(
           contextWindow: resolveContextWindow(
             settingsRow?.settings ?? {},
             benchContextWindowOf(
-              (await deps.store.getBenchSettings(input.tenantId))?.settings ??
-                {},
+              (await deps.store.getBenchSettings(input.tenantId))?.settings ?? {},
             ),
           ).value,
           ...(await turnThreadScope(deps, input, messageId)),
@@ -1334,8 +1271,7 @@ async function routeToRecipients(
       recipients,
       parts: turnParts,
     },
-    (batch) =>
-      dispatchTurnBatch(deps, input.tenantId, input.workbenchId, batch),
+    (batch) => dispatchTurnBatch(deps, input.tenantId, input.workbenchId, batch),
   );
 }
 
@@ -1368,10 +1304,8 @@ async function dispatchTurnBatch(
   workbenchId: string,
   batch: readonly QueuedTurn[],
 ): Promise<void> {
-  const turnDispatchTimeoutMs =
-    deps.turnDispatchTimeoutMs ?? DEFAULT_TURN_DISPATCH_TIMEOUT_MS;
-  const waitUntilFreeTimeoutMs =
-    deps.waitUntilFreeTimeoutMs ?? DEFAULT_WAIT_UNTIL_FREE_TIMEOUT_MS;
+  const turnDispatchTimeoutMs = deps.turnDispatchTimeoutMs ?? DEFAULT_TURN_DISPATCH_TIMEOUT_MS;
+  const waitUntilFreeTimeoutMs = deps.waitUntilFreeTimeoutMs ?? DEFAULT_WAIT_UNTIL_FREE_TIMEOUT_MS;
   const recipientSet = new Set<string>();
   for (const turn of batch) {
     for (const agentAddress of turn.recipients) recipientSet.add(agentAddress);
@@ -1433,11 +1367,7 @@ async function dispatchTurnBatch(
         const agentTurns = deps.agentTurns;
         if (agentTurns !== undefined) {
           await withTimeout(
-            (signal) =>
-              agentTurns.waitUntilFree(
-                { tenantId, workbenchId, agentAddress },
-                signal,
-              ),
+            (signal) => agentTurns.waitUntilFree({ tenantId, workbenchId, agentAddress }, signal),
             waitUntilFreeTimeoutMs,
             waitUntilFreeTimeoutMessage(agentAddress, waitUntilFreeTimeoutMs),
             cancelController.signal,
@@ -1604,10 +1534,7 @@ export async function dispatchTurn(
         tenantId: input.tenantId,
         turnId: turn.id,
         status: cancelled ? "cancelled" : "failed",
-        error:
-          signal?.reason instanceof Error
-            ? signal.reason.message
-            : "turn dispatch timed out",
+        error: signal?.reason instanceof Error ? signal.reason.message : "turn dispatch timed out",
       })
       .then((finished) => {
         if (finished === undefined || !cancelled) return;
@@ -1647,15 +1574,12 @@ export async function dispatchTurn(
     // that row — and names the row's own parent chain in
     // `In-Reply-To`/`References`. Degrades to unthreaded (as before) when
     // this composition has no mailbox domain to derive it from.
-    const sourceMessageId =
-      input.requestMessageIds[input.requestMessageIds.length - 1];
+    const sourceMessageId = input.requestMessageIds[input.requestMessageIds.length - 1];
     const mailboxDeps = deps.mailbox;
     const threadHeaders =
       mailboxDeps !== undefined && sourceMessageId !== undefined
         ? await (async () => {
-            const domain = await mailboxDeps.resolveTenantDomain(
-              input.tenantId,
-            );
+            const domain = await mailboxDeps.resolveTenantDomain(input.tenantId);
             const threadId =
               deps.threads !== undefined
                 ? ((await deps.threads.threadIdForMessage(
@@ -1666,12 +1590,7 @@ export async function dispatchTurn(
                 : null;
             const ancestors =
               deps.threads !== undefined
-                ? await mailAncestryOf(
-                    deps.threads,
-                    input.tenantId,
-                    input.workbenchId,
-                    threadId,
-                  )
+                ? await mailAncestryOf(deps.threads, input.tenantId, input.workbenchId, threadId)
                 : [];
             return mailThreadHeaders({
               rowId: sourceMessageId,
@@ -1698,10 +1617,7 @@ export async function dispatchTurn(
     // the conversation is where its newest message is. A record that
     // fails is reported, never thrown: the turn was dispatched, and
     // threading degrades to unthreaded rather than failing it.
-    if (
-      sourceMessageId !== undefined &&
-      deps.turnMailCorrelation !== undefined
-    ) {
+    if (sourceMessageId !== undefined && deps.turnMailCorrelation !== undefined) {
       try {
         await deps.turnMailCorrelation.recordTurnMail({
           tenantId: input.tenantId,
@@ -1737,8 +1653,7 @@ export async function dispatchTurn(
 const CREDENTIAL_UNDELIVERED_NOTICE =
   "I can't reach a model right now — add or check your model key in " +
   "Settings, then I'll pick this up.";
-const RETRYABLE_UNDELIVERED_NOTICE =
-  "I didn't get that one — send it again and I'll pick it up.";
+const RETRYABLE_UNDELIVERED_NOTICE = "I didn't get that one — send it again and I'll pick it up.";
 const MODEL_UNAVAILABLE_UNDELIVERED_NOTICE = MODEL_UNAVAILABLE_CONSUMER_MESSAGE;
 
 /**
@@ -1764,8 +1679,7 @@ function isCredentialDispatchFailure(cause: unknown): boolean {
     const code = (cause as { code?: unknown; category?: unknown }).code;
     const category = (cause as { category?: unknown }).category;
     if (status === 401 || statusCode === 401) return true;
-    if (code === "credential_failure" || category === "credential_failure")
-      return true;
+    if (code === "credential_failure" || category === "credential_failure") return true;
   }
   return false;
 }
@@ -1812,9 +1726,7 @@ async function postUndeliveredNotice(
           kind: "text",
           text: `${notice} (ref ${input.refId})`,
           turnFailed: true,
-          ...(modelUnavailable
-            ? { turnFailedReason: "model_unavailable" as const }
-            : {}),
+          ...(modelUnavailable ? { turnFailedReason: "model_unavailable" as const } : {}),
         },
       ],
     });
@@ -1963,12 +1875,9 @@ export async function cancelWorkbenchTurn(
   );
 
   const settled = await Promise.all(
-    running.map((turn) =>
-      agentTurns.getTurn({ tenantId: input.tenantId, turnId: turn.id }),
-    ),
+    running.map((turn) => agentTurns.getTurn({ tenantId: input.tenantId, turnId: turn.id })),
   );
   return {
-    cancelledCount: settled.filter((turn) => turn?.status === "cancelled")
-      .length,
+    cancelledCount: settled.filter((turn) => turn?.status === "cancelled").length,
   };
 }
diff --git a/packages/chat/src/workbench-settings.ts b/packages/chat/src/workbench-settings.ts
index c9955da738..d471e73b42 100644
--- a/packages/chat/src/workbench-settings.ts
+++ b/packages/chat/src/workbench-settings.ts
@@ -8,11 +8,7 @@
 // independently testable.
 import { type, type Type } from "arktype";
 import { presetForKind } from "./kinds";
-import {
-  parseParticipants,
-  ParticipantsSetting,
-  type ParticipantRecord,
-} from "./participants";
+import { parseParticipants, ParticipantsSetting, type ParticipantRecord } from "./participants";
 import { definitionIdOfSettings } from "./agent-dm-mode";
 
 const PatchSettingsBody = type("Record<string, unknown>");
@@ -37,9 +33,7 @@ export const ChatNamespaceSchemas: Readonly<Record<string, Type<unknown>>> = {
 // Kept as its own schema table (rather than folded into
 // `ChatNamespaceSchemas`) because a bench default is never nullable — there
 // is nothing beneath it to inherit from.
-export const ChatBenchNamespaceSchemas: Readonly<
-  Record<string, Type<unknown>>
-> = {
+export const ChatBenchNamespaceSchemas: Readonly<Record<string, Type<unknown>>> = {
   "chat/contextWindow": type("number"),
 };
 
@@ -52,9 +46,7 @@ function validatePatchAgainst(
 ): Record<string, unknown> {
   const parsed = PatchSettingsBody(body);
   if (parsed instanceof type.errors) {
-    throw new SettingsValidationError(
-      `settings patch must be an object: ${parsed.summary}`,
-    );
+    throw new SettingsValidationError(`settings patch must be an object: ${parsed.summary}`);
   }
   const validated: Record<string, unknown> = {};
   for (const [key, value] of Object.entries(parsed)) {
@@ -65,9 +57,7 @@ function validatePatchAgainst(
       }
       const result = schema(value);
       if (result instanceof type.errors) {
-        throw new SettingsValidationError(
-          `invalid value for "${key}": ${result.summary}`,
-        );
+        throw new SettingsValidationError(`invalid value for "${key}": ${result.summary}`);
       }
       validated[key] = value;
     } else {
@@ -95,9 +85,7 @@ export function validateSettingsPatch(body: unknown): Record<string, unknown> {
  * its own, so every `chat/*` key here is required to be its real type,
  * never `null`.
  */
-export function validateBenchSettingsPatch(
-  body: unknown,
-): Record<string, unknown> {
+export function validateBenchSettingsPatch(body: unknown): Record<string, unknown> {
   return validatePatchAgainst(body, ChatBenchNamespaceSchemas, "chat/");
 }
 
@@ -153,9 +141,7 @@ export function contextWindowOf(settings: Record<string, unknown>): number {
  * there is nothing beneath it — so this never returns a null/override
  * distinction, only a plain number.
  */
-export function benchContextWindowOf(
-  settings: Record<string, unknown>,
-): number {
+export function benchContextWindowOf(settings: Record<string, unknown>): number {
   return clampWindow(settings["chat/contextWindow"]) ?? DEFAULT_CONTEXT_WINDOW;
 }
 
@@ -193,9 +179,7 @@ export function resolveContextWindow(
 ): ResolvedContextWindow {
   const validatedDefault = BenchDefaultInput(benchDefault);
   if (validatedDefault instanceof type.errors) {
-    throw new Error(
-      `resolveContextWindow: invalid bench default: ${validatedDefault.summary}`,
-    );
+    throw new Error(`resolveContextWindow: invalid bench default: ${validatedDefault.summary}`);
   }
   const clampedDefault = Math.min(validatedDefault, MAX_CONTEXT_WINDOW);
 
@@ -220,15 +204,11 @@ export type WorkbenchVisibility = "bench" | "members";
  * participants may. Defaults to `"bench"` for any other or absent
  * value, never fails closed to `"members"` from a malformed setting.
  */
-export function visibilityOf(
-  settings: Record<string, unknown>,
-): WorkbenchVisibility {
+export function visibilityOf(settings: Record<string, unknown>): WorkbenchVisibility {
   return settings["chat/visibility"] === "members" ? "members" : "bench";
 }
 
-export function participantsOf(
-  settings: Record<string, unknown>,
-): ParticipantRecord[] {
+export function participantsOf(settings: Record<string, unknown>): ParticipantRecord[] {
   return parseParticipants(settings["chat/participants"]);
 }
 
diff --git a/packages/chat/src/workbench-share.ts b/packages/chat/src/workbench-share.ts
index 79d0baa454..1ca4d4c714 100644
--- a/packages/chat/src/workbench-share.ts
+++ b/packages/chat/src/workbench-share.ts
@@ -16,9 +16,8 @@ import type { PostgresJsDatabase } from "drizzle-orm/postgres-js";
 import { workbenchShare, workbenchShareMember } from "./schema";
 import type { FederationTrustStore } from "./federation-trust";
 
-export type WorkbenchShareDb<
-  TSchema extends Record<string, unknown> = Record<string, never>,
-> = PostgresJsDatabase<TSchema>;
+export type WorkbenchShareDb<TSchema extends Record<string, unknown> = Record<string, never>> =
+  PostgresJsDatabase<TSchema>;
 
 export interface WorkbenchShareRow {
   readonly owningTenantId: string;
@@ -75,14 +74,9 @@ export interface WorkbenchShareStore {
     workbenchId: string,
   ): Promise<readonly WorkbenchShareRow[]>;
 
-  listSharesProjectedInto(
-    projectedTenantId: string,
-  ): Promise<readonly WorkbenchShareRow[]>;
+  listSharesProjectedInto(projectedTenantId: string): Promise<readonly WorkbenchShareRow[]>;
 
-  getShare(
-    workbenchId: string,
-    projectedTenantId: string,
-  ): Promise<WorkbenchShareRow | undefined>;
+  getShare(workbenchId: string, projectedTenantId: string): Promise<WorkbenchShareRow | undefined>;
 
   /** `"no_share"` — never seeded — when no `workbench_share` row exists
    * for `(workbenchId, projectedTenantId)`. */
@@ -94,10 +88,7 @@ export interface WorkbenchShareStore {
     principalId: string,
   ): Promise<boolean>;
 
-  listShareMembers(
-    projectedTenantId: string,
-    workbenchId: string,
-  ): Promise<readonly string[]>;
+  listShareMembers(projectedTenantId: string, workbenchId: string): Promise<readonly string[]>;
 
   isShareMember(
     projectedTenantId: string,
@@ -110,20 +101,13 @@ export interface WorkbenchShareStore {
  * The production `WorkbenchShareStore`, operating on this package's own
  * `workbench_share`/`workbench_share_member` tables (see `./schema.ts`).
  */
-export function createDrizzleWorkbenchShareStore<
-  TSchema extends Record<string, unknown>,
->(
+export function createDrizzleWorkbenchShareStore<TSchema extends Record<string, unknown>>(
   db: WorkbenchShareDb<TSchema>,
   deps: WorkbenchShareStoreDeps,
 ): WorkbenchShareStore {
   return {
     async createShare(input) {
-      if (
-        !(await deps.trust.hasBilateralTrust(
-          input.owningTenantId,
-          input.projectedTenantId,
-        ))
-      ) {
+      if (!(await deps.trust.hasBilateralTrust(input.owningTenantId, input.projectedTenantId))) {
         return { kind: "trust_missing" };
       }
 
@@ -295,12 +279,7 @@ export function createInMemoryWorkbenchShareStore(
 
   return {
     async createShare(input) {
-      if (
-        !(await deps.trust.hasBilateralTrust(
-          input.owningTenantId,
-          input.projectedTenantId,
-        ))
-      ) {
+      if (!(await deps.trust.hasBilateralTrust(input.owningTenantId, input.projectedTenantId))) {
         return { kind: "trust_missing" };
       }
       const key = shareKey(input.workbenchId, input.projectedTenantId);
@@ -321,10 +300,7 @@ export function createInMemoryWorkbenchShareStore(
     async revokeShare(owningTenantId, workbenchId, projectedTenantId) {
       const key = shareKey(workbenchId, projectedTenantId);
       const existing = sharesByKey.get(key);
-      if (
-        existing === undefined ||
-        existing.owningTenantId !== owningTenantId
-      ) {
+      if (existing === undefined || existing.owningTenantId !== owningTenantId) {
         return false;
       }
       sharesByKey.delete(key);
@@ -334,16 +310,12 @@ export function createInMemoryWorkbenchShareStore(
 
     async listSharesForWorkbench(owningTenantId, workbenchId) {
       return [...sharesByKey.values()].filter(
-        (row) =>
-          row.owningTenantId === owningTenantId &&
-          row.workbenchId === workbenchId,
+        (row) => row.owningTenantId === owningTenantId && row.workbenchId === workbenchId,
       );
     },
 
     async listSharesProjectedInto(projectedTenantId) {
-      return [...sharesByKey.values()].filter(
-        (row) => row.projectedTenantId === projectedTenantId,
-      );
+      return [...sharesByKey.values()].filter((row) => row.projectedTenantId === projectedTenantId);
     },
 
     async getShare(workbenchId, projectedTenantId) {
@@ -363,25 +335,19 @@ export function createInMemoryWorkbenchShareStore(
     },
 
     async removeShareMember(projectedTenantId, workbenchId, principalId) {
-      const members = membersByShare.get(
-        shareKey(workbenchId, projectedTenantId),
-      );
+      const members = membersByShare.get(shareKey(workbenchId, projectedTenantId));
       if (members === undefined) return false;
       return members.delete(principalId);
     },
 
     async listShareMembers(projectedTenantId, workbenchId) {
-      const members = membersByShare.get(
-        shareKey(workbenchId, projectedTenantId),
-      );
+      const members = membersByShare.get(shareKey(workbenchId, projectedTenantId));
       return members === undefined ? [] : [...members];
     },
 
     async isShareMember(projectedTenantId, workbenchId, principalId) {
       return (
-        membersByShare
-          .get(shareKey(workbenchId, projectedTenantId))
-          ?.has(principalId) ?? false
+        membersByShare.get(shareKey(workbenchId, projectedTenantId))?.has(principalId) ?? false
       );
     },
   };
diff --git a/packages/chat/src/workflow-participant-routes.ts b/packages/chat/src/workflow-participant-routes.ts
index 279d5a2ac1..0fb062d2e5 100644
--- a/packages/chat/src/workflow-participant-routes.ts
+++ b/packages/chat/src/workflow-participant-routes.ts
@@ -83,10 +83,7 @@ export type WorkflowParticipantRunScope = {
 };
 
 export type WorkflowRunAuthenticator = {
-  resolve(
-    token: string,
-    runAddress: string,
-  ): Promise<WorkflowParticipantRunScope | null>;
+  resolve(token: string, runAddress: string): Promise<WorkflowParticipantRunScope | null>;
 };
 
 /** The resolved scope PLUS the run's own address — the address is
@@ -145,8 +142,7 @@ export type CreateWorkflowParticipantRoutesDeps = {
     | "mutateWorkbenchParticipants"
   > &
     SendWorkbenchMessageDeps["store"];
-  readonly platform: LaunchAndJoinAgentDeps["platform"] &
-    SendWorkbenchMessageDeps["platform"];
+  readonly platform: LaunchAndJoinAgentDeps["platform"] & SendWorkbenchMessageDeps["platform"];
   readonly roomMessages: SendWorkbenchMessageDeps["roomMessages"];
   readonly publish: LaunchAndJoinAgentDeps["publish"];
   /** The same one-in-flight-turn-per-workbench queue `createChatRoutes`
@@ -172,17 +168,14 @@ export function createWorkflowParticipantRoutes(
 
   app.use("*", async (c, next) => {
     const authHeader = c.req.header("authorization") ?? "";
-    const token = authHeader.startsWith("Bearer ")
-      ? authHeader.slice("Bearer ".length)
-      : "";
+    const token = authHeader.startsWith("Bearer ") ? authHeader.slice("Bearer ".length) : "";
     const address = c.req.header("x-workflow-run-address") ?? "";
     const scope = await deps.authenticator.resolve(token, address);
     if (scope === null) {
       return c.json(
         makeErrorEnvelope({
           code: "unauthorized",
-          userMessage:
-            "Missing or unrecognized sidecar bearer token / run address",
+          userMessage: "Missing or unrecognized sidecar bearer token / run address",
         }),
         401,
       );
@@ -193,9 +186,7 @@ export function createWorkflowParticipantRoutes(
 
   app.post("/participants/invite", async (c) => {
     const scope = c.get("workflowParticipantScope");
-    const body = InviteParticipantInput(
-      await c.req.json().catch(() => undefined),
-    );
+    const body = InviteParticipantInput(await c.req.json().catch(() => undefined));
     if (body instanceof type.errors) {
       return c.json(
         makeErrorEnvelope({
@@ -235,9 +226,7 @@ export function createWorkflowParticipantRoutes(
           workbenchId: workbench.workbenchId,
           definitionId: body.definitionId,
           existingSettings: workbench.settings,
-          invitable: await deps.platform.listInvitableDefinitions(
-            scope.tenantId,
-          ),
+          invitable: await deps.platform.listInvitableDefinitions(scope.tenantId),
         },
       );
     } catch (err) {
@@ -263,10 +252,7 @@ export function createWorkflowParticipantRoutes(
         );
       }
       if (err instanceof KindIsChatError) {
-        return c.json(
-          makeErrorEnvelope({ code: err.code, userMessage: err.message }),
-          409,
-        );
+        return c.json(makeErrorEnvelope({ code: err.code, userMessage: err.message }), 409);
       }
       throw err;
     }
@@ -336,9 +322,7 @@ export function createWorkflowParticipantRoutes(
           {
             id: existing.id,
             createdAt: existing.createdAt,
-            ...(existing.mailMessageId !== null
-              ? { mailMessageId: existing.mailMessageId }
-              : {}),
+            ...(existing.mailMessageId !== null ? { mailMessageId: existing.mailMessageId } : {}),
           },
           200,
         );
@@ -349,15 +333,10 @@ export function createWorkflowParticipantRoutes(
     // settings before the message lands, so a later connection completing
     // in the browser can find this room and settle the card
     // (`./connect-pending.ts`'s `settleConnectedService`).
-    const requestedConnectorIds = connectServiceConnectorIds(
-      body.parts as PartType[],
-    );
+    const requestedConnectorIds = connectServiceConnectorIds(body.parts as PartType[]);
     if (requestedConnectorIds.length > 0) {
       const pending = pendingConnectionsOf(workbench.settings);
-      const merged = [
-        ...pending,
-        ...requestedConnectorIds.filter((id) => !pending.includes(id)),
-      ];
+      const merged = [...pending, ...requestedConnectorIds.filter((id) => !pending.includes(id))];
       if (merged.length !== pending.length) {
         const updated = await deps.store.updateWorkbenchSettings({
           tenantId: scope.tenantId,
@@ -420,10 +399,7 @@ export function createWorkflowParticipantRoutes(
       mailMessageId,
     });
 
-    return c.json(
-      { id: sent.id, createdAt: sent.createdAt, mailMessageId },
-      201,
-    );
+    return c.json({ id: sent.id, createdAt: sent.createdAt, mailMessageId }, 201);
   });
 
   return app;
diff --git a/packages/chat/test/agent-turn-dispatch.test.ts b/packages/chat/test/agent-turn-dispatch.test.ts
index 863f33b923..6ca0078720 100644
--- a/packages/chat/test/agent-turn-dispatch.test.ts
+++ b/packages/chat/test/agent-turn-dispatch.test.ts
@@ -20,9 +20,7 @@ import {
   timelineOf,
 } from "./test-support";
 
-async function roomWithAgent(
-  overrides: Parameters<typeof buildDeps>[0] = {},
-): Promise<{
+async function roomWithAgent(overrides: Parameters<typeof buildDeps>[0] = {}): Promise<{
   app: ReturnType<typeof createChatRoutes>;
   deps: ReturnType<typeof buildDeps>;
   workbenchId: string;
@@ -83,9 +81,9 @@ describe("dispatchTurn's turn projection", () => {
     });
 
     await sendText(app, workbenchId, "two");
-    const [secondTurn] = (
-      await agentTurns.listTurns({ tenantId: TENANT.id, workbenchId })
-    ).filter((turn) => turn.id !== firstTurn?.id);
+    const [secondTurn] = (await agentTurns.listTurns({ tenantId: TENANT.id, workbenchId })).filter(
+      (turn) => turn.id !== firstTurn?.id,
+    );
     await agentTurns.finishTurn({
       tenantId: TENANT.id,
       turnId: secondTurn?.id ?? "",
@@ -100,11 +98,7 @@ describe("dispatchTurn's turn projection", () => {
     });
     const occurrences = turns.map((turn) => turn.occurrence).sort();
     expect(occurrences).toEqual([0, 1, 2]);
-    expect(turns.map((turn) => turn.childRunId).sort()).toEqual([
-      "turn__0",
-      "turn__1",
-      "turn__2",
-    ]);
+    expect(turns.map((turn) => turn.childRunId).sort()).toEqual(["turn__0", "turn__1", "turn__2"]);
   });
 
   test("an unreachable agent closes its turn failed rather than leaving it open", async () => {
@@ -216,9 +210,7 @@ describe("overlapping turns across agents and messages (CL-6670)", () => {
       agentAddress: "ins_b1@acme.example",
     });
     expect(bTurn?.childRunId).toBe("turn__0");
-    expect(
-      platform.sentMail.some((mail) => mail.workbenchId === "ins_b1"),
-    ).toBe(true);
+    expect(platform.sentMail.some((mail) => mail.workbenchId === "ins_b1")).toBe(true);
 
     // A's own turn was never touched by B's arrival — still open,
     // waiting for A's real reply, exactly as it was before B's message.
@@ -258,9 +250,7 @@ describe("overlapping turns across agents and messages (CL-6670)", () => {
       workbenchId,
     });
     expect(stillOnlyOne).toHaveLength(1);
-    expect(
-      (deps.platform as ReturnType<typeof fakePlatform>).sentMail,
-    ).toHaveLength(1);
+    expect((deps.platform as ReturnType<typeof fakePlatform>).sentMail).toHaveLength(1);
 
     // The agent's real reply lands — the first turn closes...
     await agentTurns.finishTurn({
@@ -278,13 +268,8 @@ describe("overlapping turns across agents and messages (CL-6670)", () => {
       tenantId: TENANT.id,
       workbenchId,
     });
-    expect(turns.map((turn) => turn.childRunId).sort()).toEqual([
-      "turn__0",
-      "turn__1",
-    ]);
-    expect(
-      (deps.platform as ReturnType<typeof fakePlatform>).sentMail,
-    ).toHaveLength(2);
+    expect(turns.map((turn) => turn.childRunId).sort()).toEqual(["turn__0", "turn__1"]);
+    expect((deps.platform as ReturnType<typeof fakePlatform>).sentMail).toHaveLength(2);
   });
 
   // CL-7129: the wait this queues behind has to tolerate a prior turn
@@ -325,9 +310,7 @@ describe("overlapping turns across agents and messages (CL-6670)", () => {
 
     const timeline = await timelineOf(deps, workbenchId);
     const undelivered = timeline.find((message) =>
-      message.parts.some(
-        (part) => part.kind === "text" && part.turnFailed === true,
-      ),
+      message.parts.some((part) => part.kind === "text" && part.turnFailed === true),
     );
     expect(undelivered).toBeUndefined();
 
@@ -335,10 +318,7 @@ describe("overlapping turns across agents and messages (CL-6670)", () => {
       tenantId: TENANT.id,
       workbenchId,
     });
-    expect(turns.map((turn) => turn.childRunId).sort()).toEqual([
-      "turn__0",
-      "turn__1",
-    ]);
+    expect(turns.map((turn) => turn.childRunId).sort()).toEqual(["turn__0", "turn__1"]);
   });
 });
 
@@ -358,15 +338,11 @@ describe("the turns routes", () => {
       tenantId: TENANT.id,
       workbenchId,
     });
-    const one = await app.request(
-      `/workbenches/${workbenchId}/turns/${only?.id ?? ""}`,
-    );
+    const one = await app.request(`/workbenches/${workbenchId}/turns/${only?.id ?? ""}`);
     expect(one.status).toBe(200);
     expect(await one.json()).toMatchObject({ childRunId: "turn__0" });
 
-    const missing = await app.request(
-      `/workbenches/${workbenchId}/turns/turn_nope`,
-    );
+    const missing = await app.request(`/workbenches/${workbenchId}/turns/turn_nope`);
     expect(missing.status).toBe(404);
   });
 });
diff --git a/packages/chat/test/agent-turns-routes.test.ts b/packages/chat/test/agent-turns-routes.test.ts
index 277eb6484c..34c1ce9723 100644
--- a/packages/chat/test/agent-turns-routes.test.ts
+++ b/packages/chat/test/agent-turns-routes.test.ts
@@ -6,21 +6,13 @@ import { describe, expect, test } from "bun:test";
 import { createInMemoryAgentTurnStore } from "@corbits/agent-runtime";
 import type { AgentTurn } from "@corbits/agent-runtime";
 import { createChatRoutes } from "../src/routes";
-import {
-  buildDeps,
-  createWorkbench,
-  mountAs,
-  OTHER_TENANT,
-  TENANT,
-} from "./test-support";
+import { buildDeps, createWorkbench, mountAs, OTHER_TENANT, TENANT } from "./test-support";
 
 describe("GET /workbenches/:id/turns", () => {
   test("404s when the host injected no turn store", async () => {
     const deps = buildDeps();
     const app = mountAs(createChatRoutes(deps), "prn_alice");
-    const workbenchId = (
-      await createWorkbench(app, { kind: "workbench", name: "room" })
-    ).body.id;
+    const workbenchId = (await createWorkbench(app, { kind: "workbench", name: "room" })).body.id;
 
     const res = await app.request(`/workbenches/${workbenchId}/turns`);
     expect(res.status).toBe(404);
@@ -30,9 +22,7 @@ describe("GET /workbenches/:id/turns", () => {
     const agentTurns = createInMemoryAgentTurnStore();
     const deps = buildDeps({ agentTurns });
     const app = mountAs(createChatRoutes(deps), "prn_alice");
-    const workbenchId = (
-      await createWorkbench(app, { kind: "workbench", name: "room" })
-    ).body.id;
+    const workbenchId = (await createWorkbench(app, { kind: "workbench", name: "room" })).body.id;
 
     const first = await agentTurns.startTurn({
       tenantId: TENANT.id,
@@ -52,10 +42,7 @@ describe("GET /workbenches/:id/turns", () => {
     expect(res.status).toBe(200);
     const body = (await res.json()) as { items: AgentTurn[] };
     expect(body.items.map((turn) => turn.id)).toEqual([second.id, first.id]);
-    expect(body.items.map((turn) => turn.childRunId)).toEqual([
-      "turn__0",
-      "turn__0",
-    ]);
+    expect(body.items.map((turn) => turn.childRunId)).toEqual(["turn__0", "turn__0"]);
     expect(body.items.map((turn) => turn.agentAddress)).toEqual([
       "ins_echo2@acme.example",
       "ins_echo1@acme.example",
@@ -68,9 +55,7 @@ describe("GET /workbenches/:id/turns/:turnId", () => {
     const agentTurns = createInMemoryAgentTurnStore();
     const deps = buildDeps({ agentTurns });
     const app = mountAs(createChatRoutes(deps), "prn_alice");
-    const workbenchId = (
-      await createWorkbench(app, { kind: "workbench", name: "room" })
-    ).body.id;
+    const workbenchId = (await createWorkbench(app, { kind: "workbench", name: "room" })).body.id;
 
     const opened = await agentTurns.startTurn({
       tenantId: TENANT.id,
@@ -86,9 +71,7 @@ describe("GET /workbenches/:id/turns/:turnId", () => {
       replyMessageId: "msg_reply",
     });
 
-    const res = await app.request(
-      `/workbenches/${workbenchId}/turns/${opened.id}`,
-    );
+    const res = await app.request(`/workbenches/${workbenchId}/turns/${opened.id}`);
     expect(res.status).toBe(200);
     const turn = (await res.json()) as AgentTurn;
     expect(turn.status).toBe("completed");
@@ -101,9 +84,7 @@ describe("GET /workbenches/:id/turns/:turnId", () => {
     const agentTurns = createInMemoryAgentTurnStore();
     const deps = buildDeps({ agentTurns });
     const app = mountAs(createChatRoutes(deps), "prn_alice");
-    const workbenchId = (
-      await createWorkbench(app, { kind: "workbench", name: "room" })
-    ).body.id;
+    const workbenchId = (await createWorkbench(app, { kind: "workbench", name: "room" })).body.id;
 
     const opened = await agentTurns.startTurn({
       tenantId: TENANT.id,
@@ -118,9 +99,7 @@ describe("GET /workbenches/:id/turns/:turnId", () => {
       error: "the agent never answered",
     });
 
-    const res = await app.request(
-      `/workbenches/${workbenchId}/turns/${opened.id}`,
-    );
+    const res = await app.request(`/workbenches/${workbenchId}/turns/${opened.id}`);
     const turn = (await res.json()) as AgentTurn;
     expect(turn.status).toBe("failed");
     expect(turn.error).toBe("the agent never answered");
@@ -130,13 +109,10 @@ describe("GET /workbenches/:id/turns/:turnId", () => {
     const agentTurns = createInMemoryAgentTurnStore();
     const deps = buildDeps({
       agentTurns,
-      turnTextSnapshot: async ({ runId }) =>
-        runId === "turn__0" ? "streamed so far" : null,
+      turnTextSnapshot: async ({ runId }) => (runId === "turn__0" ? "streamed so far" : null),
     });
     const app = mountAs(createChatRoutes(deps), "prn_alice");
-    const workbenchId = (
-      await createWorkbench(app, { kind: "workbench", name: "room" })
-    ).body.id;
+    const workbenchId = (await createWorkbench(app, { kind: "workbench", name: "room" })).body.id;
 
     const opened = await agentTurns.startTurn({
       tenantId: TENANT.id,
@@ -145,9 +121,7 @@ describe("GET /workbenches/:id/turns/:turnId", () => {
       requestMessageIds: ["msg_1"],
     });
 
-    const res = await app.request(
-      `/workbenches/${workbenchId}/turns/${opened.id}`,
-    );
+    const res = await app.request(`/workbenches/${workbenchId}/turns/${opened.id}`);
     const turn = (await res.json()) as AgentTurn & {
       textSnapshot: string | null;
     };
@@ -162,9 +136,7 @@ describe("GET /workbenches/:id/turns/:turnId", () => {
       turnTextSnapshot: async () => "should never be read",
     });
     const app = mountAs(createChatRoutes(deps), "prn_alice");
-    const workbenchId = (
-      await createWorkbench(app, { kind: "workbench", name: "room" })
-    ).body.id;
+    const workbenchId = (await createWorkbench(app, { kind: "workbench", name: "room" })).body.id;
 
     const opened = await agentTurns.startTurn({
       tenantId: TENANT.id,
@@ -179,9 +151,7 @@ describe("GET /workbenches/:id/turns/:turnId", () => {
       replyMessageId: "msg_reply",
     });
 
-    const res = await app.request(
-      `/workbenches/${workbenchId}/turns/${opened.id}`,
-    );
+    const res = await app.request(`/workbenches/${workbenchId}/turns/${opened.id}`);
     const turn = (await res.json()) as AgentTurn & {
       textSnapshot: string | null;
     };
@@ -192,9 +162,7 @@ describe("GET /workbenches/:id/turns/:turnId", () => {
     const agentTurns = createInMemoryAgentTurnStore();
     const deps = buildDeps({ agentTurns });
     const app = mountAs(createChatRoutes(deps), "prn_alice");
-    const workbenchId = (
-      await createWorkbench(app, { kind: "workbench", name: "room" })
-    ).body.id;
+    const workbenchId = (await createWorkbench(app, { kind: "workbench", name: "room" })).body.id;
 
     const opened = await agentTurns.startTurn({
       tenantId: TENANT.id,
@@ -203,9 +171,7 @@ describe("GET /workbenches/:id/turns/:turnId", () => {
       requestMessageIds: ["msg_1"],
     });
 
-    const res = await app.request(
-      `/workbenches/${workbenchId}/turns/${opened.id}`,
-    );
+    const res = await app.request(`/workbenches/${workbenchId}/turns/${opened.id}`);
     const turn = (await res.json()) as AgentTurn & {
       textSnapshot: string | null;
     };
@@ -221,9 +187,7 @@ describe("GET /workbenches/:id/turns/:turnId", () => {
     // created under another tenant.
     const appHere = mountAs(routes, "prn_alice", TENANT);
     const appElsewhere = mountAs(routes, "prn_alice", OTHER_TENANT);
-    const here = (
-      await createWorkbench(appHere, { kind: "workbench", name: "here" })
-    ).body.id;
+    const here = (await createWorkbench(appHere, { kind: "workbench", name: "here" })).body.id;
     const elsewhere = (
       await createWorkbench(appElsewhere, {
         kind: "workbench",
@@ -239,22 +203,16 @@ describe("GET /workbenches/:id/turns/:turnId", () => {
       requestMessageIds: ["msg_1"],
     });
 
-    const res = await appHere.request(
-      `/workbenches/${here}/turns/${opened.id}`,
-    );
+    const res = await appHere.request(`/workbenches/${here}/turns/${opened.id}`);
     expect(res.status).toBe(404);
   });
 
   test("an unknown turn id is not found", async () => {
     const deps = buildDeps({ agentTurns: createInMemoryAgentTurnStore() });
     const app = mountAs(createChatRoutes(deps), "prn_alice");
-    const workbenchId = (
-      await createWorkbench(app, { kind: "workbench", name: "room" })
-    ).body.id;
+    const workbenchId = (await createWorkbench(app, { kind: "workbench", name: "room" })).body.id;
 
-    const res = await app.request(
-      `/workbenches/${workbenchId}/turns/turn_nope`,
-    );
+    const res = await app.request(`/workbenches/${workbenchId}/turns/turn_nope`);
     expect(res.status).toBe(404);
   });
 });
diff --git a/packages/chat/test/agent-turns.drizzle.test.ts b/packages/chat/test/agent-turns.drizzle.test.ts
index 69982cb69f..84e3786060 100644
--- a/packages/chat/test/agent-turns.drizzle.test.ts
+++ b/packages/chat/test/agent-turns.drizzle.test.ts
@@ -14,10 +14,7 @@ import { drizzle } from "drizzle-orm/postgres-js";
 import postgres from "postgres";
 
 import { e2eDatabaseUrl } from "../../../scripts/e2e/database-url";
-import {
-  AGENT_TURN_STALE_MS,
-  createDrizzleAgentTurnStore,
-} from "@corbits/agent-runtime";
+import { AGENT_TURN_STALE_MS, createDrizzleAgentTurnStore } from "@corbits/agent-runtime";
 import { applyChatMigrations } from "../src/migrations";
 import { createDrizzleRoomMessageStore } from "../src/room-messages";
 import { listWorkbenchLiveState } from "../src/workbench-reply-activity";
@@ -38,9 +35,7 @@ const WORKBENCH = "run_workbench1";
 const AGENT = "ins_echo1@acme.example";
 
 describeIfDb("createDrizzleAgentTurnStore", () => {
-  const scratchUrl = scratchUrlFor(
-    databaseUrl ?? "postgres://localhost:5432/unused",
-  );
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused");
   const scratchDatabase = new URL(scratchUrl).pathname.replace(/^\//, "");
 
   async function withMaintenance(
@@ -103,10 +98,7 @@ describeIfDb("createDrizzleAgentTurnStore", () => {
         requestMessageIds: ["msg_3"],
       });
 
-      expect([first.childRunId, second.childRunId]).toEqual([
-        "turn__0",
-        "turn__1",
-      ]);
+      expect([first.childRunId, second.childRunId]).toEqual(["turn__0", "turn__1"]);
       expect(otherAgent.childRunId).toBe("turn__0");
       expect(otherWorkbench.childRunId).toBe("turn__2");
       expect(first.status).toBe("running");
@@ -148,10 +140,7 @@ describeIfDb("createDrizzleAgentTurnStore", () => {
         requestMessageIds: ["msg_race"],
       };
 
-      const settled = await Promise.allSettled([
-        store.startTurn(input),
-        store.startTurn(input),
-      ]);
+      const settled = await Promise.allSettled([store.startTurn(input), store.startTurn(input)]);
       const opened = settled.flatMap((result) =>
         result.status === "fulfilled" ? [result.value] : [],
       );
@@ -166,9 +155,7 @@ describeIfDb("createDrizzleAgentTurnStore", () => {
         tenantId: TENANT,
         workbenchId: "run_race",
       });
-      expect(new Set(listed.map((turn) => turn.childRunId)).size).toBe(
-        listed.length,
-      );
+      expect(new Set(listed.map((turn) => turn.childRunId)).size).toBe(listed.length);
     } finally {
       await sql.end();
     }
@@ -231,15 +218,11 @@ describeIfDb("createDrizzleAgentTurnStore", () => {
       expect(second.status).toBe("running");
 
       expect((await store.findRunningTurn(input))?.id).toBe(second.id);
-      expect(
-        (await store.findRunningTurn({ ...input, childRunId: "turn__0" }))?.id,
-      ).toBe(first.id);
-      expect(
-        (await store.findRunningTurn({ ...input, childRunId: "turn__1" }))?.id,
-      ).toBe(second.id);
-      expect(
-        await store.findRunningTurn({ ...input, childRunId: "turn__9" }),
-      ).toBeUndefined();
+      expect((await store.findRunningTurn({ ...input, childRunId: "turn__0" }))?.id).toBe(first.id);
+      expect((await store.findRunningTurn({ ...input, childRunId: "turn__1" }))?.id).toBe(
+        second.id,
+      );
+      expect(await store.findRunningTurn({ ...input, childRunId: "turn__9" })).toBeUndefined();
     } finally {
       await sql.end();
     }
diff --git a/packages/chat/test/block-responses-routes.test.ts b/packages/chat/test/block-responses-routes.test.ts
index d9658d4ffb..a8a6ac4e22 100644
--- a/packages/chat/test/block-responses-routes.test.ts
+++ b/packages/chat/test/block-responses-routes.test.ts
@@ -28,9 +28,7 @@ import {
  * (the answer, never the `block.response` event) throws once, then
  * delegates normally — used to simulate a notify failure a retry
  * recovers from. */
-function roomMessagesFailingNextAnswer(
-  base: RoomMessageStore,
-): RoomMessageStore {
+function roomMessagesFailingNextAnswer(base: RoomMessageStore): RoomMessageStore {
   let shouldFail = true;
   return {
     ...base,
@@ -114,8 +112,7 @@ describe("block response routes — gating", () => {
     const store = createInMemoryBlockResponseStore();
     const deps = buildDeps({
       blockResponses: store,
-      requireGrant: () => async (c) =>
-        c.json({ error: { code: "forbidden", message: "no" } }, 403),
+      requireGrant: () => async (c) => c.json({ error: { code: "forbidden", message: "no" } }, 403),
     });
     const app = mountAs(createChatRoutes(deps), "prn_alice");
     const workbenchId = await newWorkbench(deps.store);
@@ -123,12 +120,7 @@ describe("block response routes — gating", () => {
     const post = await vote(app, workbenchId, "m1", "blk_poll1", ["a"]);
     expect(post.status).toBe(403);
 
-    const rows = await store.listBlockResponses(
-      TENANT.id,
-      workbenchId,
-      "m1",
-      "blk_poll1",
-    );
+    const rows = await store.listBlockResponses(TENANT.id, workbenchId, "m1", "blk_poll1");
     expect(rows).toHaveLength(0);
   });
 
@@ -248,9 +240,10 @@ describe("block response routes — form privacy", () => {
       feedback: "Alice's private notes",
     });
 
-    const asBob = (await (
-      await getResponses(appBob, workbenchId, "m1", "blk_form1")
-    ).json()) as { own: unknown; tally: Record<string, number> };
+    const asBob = (await (await getResponses(appBob, workbenchId, "m1", "blk_form1")).json()) as {
+      own: unknown;
+      tally: Record<string, number>;
+    };
     expect(asBob.own).toBeNull();
     expect(asBob.tally).toEqual({});
 
@@ -275,12 +268,12 @@ describe("block response routes — anti-hijack scope", () => {
     await vote(app, workbenchId, "m1", "blk_shared", ["a"]);
     await vote(app, workbenchId, "m2", "blk_shared", ["b"]);
 
-    const m1 = (await (
-      await getResponses(app, workbenchId, "m1", "blk_shared")
-    ).json()) as { tally: Record<string, number> };
-    const m2 = (await (
-      await getResponses(app, workbenchId, "m2", "blk_shared")
-    ).json()) as { tally: Record<string, number> };
+    const m1 = (await (await getResponses(app, workbenchId, "m1", "blk_shared")).json()) as {
+      tally: Record<string, number>;
+    };
+    const m2 = (await (await getResponses(app, workbenchId, "m2", "blk_shared")).json()) as {
+      tally: Record<string, number>;
+    };
     expect(m1.tally).toEqual({ a: 1 });
     expect(m2.tally).toEqual({ b: 1 });
   });
@@ -296,18 +289,15 @@ describe("block response routes — question answers", () => {
     const app = mountAs(createChatRoutes(deps), "prn_alice");
     const workbenchId = await newWorkbench(deps.store);
 
-    const post = await app.request(
-      responsesUrl(workbenchId, "m1", "blk_question1"),
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          kind: "question",
-          answer: "Production",
-          optionIndex: 1,
-        }),
-      },
-    );
+    const post = await app.request(responsesUrl(workbenchId, "m1", "blk_question1"), {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        kind: "question",
+        answer: "Production",
+        optionIndex: 1,
+      }),
+    });
     expect(post.status).toBe(200);
 
     // Two messages land on the timeline: the answer-as-message, and the
@@ -315,9 +305,7 @@ describe("block response routes — question answers", () => {
     // and neither mailed anywhere.
     const timeline = await timelineOf(deps, workbenchId);
     expect(timeline).toHaveLength(2);
-    expect(
-      timeline.every((message) => message.senderPrincipalId === "prn_alice"),
-    ).toBe(true);
+    expect(timeline.every((message) => message.senderPrincipalId === "prn_alice")).toBe(true);
     expect(timelineTexts(timeline)).toEqual(["Production"]);
     expect(timelineEvents(timeline, "block.response")).toHaveLength(1);
     expect(platform.sentMail).toHaveLength(0);
@@ -329,9 +317,7 @@ describe("block response routes — question answers", () => {
       answer: "Production",
       optionIndex: 1,
     });
-    expect((body.own as { notifiedAt: unknown }).notifiedAt).toEqual(
-      expect.any(String),
-    );
+    expect((body.own as { notifiedAt: unknown }).notifiedAt).toEqual(expect.any(String));
   });
 
   test("a question answer is dispatched as a reply to the card's own Message-ID, and never to another question's (CL-7104)", async () => {
@@ -364,14 +350,11 @@ describe("block response routes — question answers", () => {
       parts: [{ kind: "text", text: "Which region?" }],
     });
 
-    const answerTwo = await app.request(
-      responsesUrl(workbench.id, cardTwo.id, "q_two"),
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ kind: "question", answer: "eu-west-1" }),
-      },
-    );
+    const answerTwo = await app.request(responsesUrl(workbench.id, cardTwo.id, "q_two"), {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ kind: "question", answer: "eu-west-1" }),
+    });
     expect(answerTwo.status).toBe(200);
     await settleFanout();
 
@@ -380,14 +363,10 @@ describe("block response routes — question answers", () => {
     // no correlation field anywhere on the wire.
     const dispatched = platform.sentMail[platform.sentMail.length - 1];
     expect(dispatched?.content.inReplyTo).toBe(`<${cardTwo.id}@acme.example>`);
-    expect(dispatched?.content.references).toEqual([
-      `<${cardTwo.id}@acme.example>`,
-    ]);
+    expect(dispatched?.content.references).toEqual([`<${cardTwo.id}@acme.example>`]);
     // An answer to the second question never names the first, so a gate
     // parked on the first card is left parked.
-    expect(dispatched?.content.inReplyTo).not.toBe(
-      `<${cardOne.id}@acme.example>`,
-    );
+    expect(dispatched?.content.inReplyTo).not.toBe(`<${cardOne.id}@acme.example>`);
   });
 
   test("changing an answer updates the stored response but never dispatches a second turn", async () => {
@@ -399,24 +378,18 @@ describe("block response routes — question answers", () => {
     const app = mountAs(createChatRoutes(deps), "prn_alice");
     const workbenchId = await newWorkbench(deps.store);
 
-    const first = await app.request(
-      responsesUrl(workbenchId, "m1", "blk_question1"),
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ kind: "question", answer: "Staging" }),
-      },
-    );
+    const first = await app.request(responsesUrl(workbenchId, "m1", "blk_question1"), {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ kind: "question", answer: "Staging" }),
+    });
     expect(first.status).toBe(200);
 
-    const second = await app.request(
-      responsesUrl(workbenchId, "m1", "blk_question1"),
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ kind: "question", answer: "Production" }),
-      },
-    );
+    const second = await app.request(responsesUrl(workbenchId, "m1", "blk_question1"), {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ kind: "question", answer: "Production" }),
+    });
     expect(second.status).toBe(200);
 
     // Only the first answer ever became a message the agent was asked to
@@ -432,9 +405,7 @@ describe("block response routes — question answers", () => {
       kind: "question",
       answer: "Production",
     });
-    expect((body.own as { notifiedAt: unknown }).notifiedAt).toEqual(
-      expect.any(String),
-    );
+    expect((body.own as { notifiedAt: unknown }).notifiedAt).toEqual(expect.any(String));
   });
 
   test("a double-click resubmitting the identical answer never dispatches a second turn", async () => {
@@ -463,9 +434,7 @@ describe("block response routes — question answers", () => {
 
   test("a failed notification releases the claim so a retried answer still reaches the agent", async () => {
     const platform = fakePlatform();
-    const roomMessages = roomMessagesFailingNextAnswer(
-      createInMemoryRoomMessageStore(),
-    );
+    const roomMessages = roomMessagesFailingNextAnswer(createInMemoryRoomMessageStore());
     const deps = buildDeps({
       platform,
       roomMessages,
@@ -490,12 +459,7 @@ describe("block response routes — question answers", () => {
     expect(failedBody.error.userMessage).toMatch(/ref /);
 
     // The answer itself was already durable even though the notify failed.
-    const afterFailure = await getResponses(
-      app,
-      workbenchId,
-      "m1",
-      "blk_question1",
-    );
+    const afterFailure = await getResponses(app, workbenchId, "m1", "blk_question1");
     const afterFailureBody = (await afterFailure.json()) as { own: unknown };
     expect(afterFailureBody.own).toEqual({
       kind: "question",
@@ -519,14 +483,11 @@ describe("block response routes — question answers", () => {
     const app = mountAs(createChatRoutes(deps), "prn_alice");
     const workbenchId = await newWorkbench(deps.store);
 
-    const post = await app.request(
-      responsesUrl(workbenchId, "m1", "blk_question1"),
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ kind: "question", answer: "" }),
-      },
-    );
+    const post = await app.request(responsesUrl(workbenchId, "m1", "blk_question1"), {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ kind: "question", answer: "" }),
+    });
     expect(post.status).toBe(400);
   });
 });
diff --git a/packages/chat/test/block-responses.drizzle.test.ts b/packages/chat/test/block-responses.drizzle.test.ts
index 16e392607c..4b0b0cfca7 100644
--- a/packages/chat/test/block-responses.drizzle.test.ts
+++ b/packages/chat/test/block-responses.drizzle.test.ts
@@ -29,160 +29,149 @@ function scratchUrlFor(e2eUrl: string): string {
 const databaseUrl = e2eDatabaseUrl();
 const describeIfDb = dbGate(databaseUrl, import.meta.path);
 
-describeIfDb(
-  "createDrizzleBlockResponseStore: concurrent notification claim",
-  () => {
-    const scratchUrl = scratchUrlFor(
-      databaseUrl ?? "postgres://localhost:5432/unused",
-    );
-    const scratchTarget = new URL(scratchUrl);
-    const scratchDatabase = scratchTarget.pathname.replace(/^\//, "");
-
-    beforeAll(async () => {
-      const maintenanceUrl = new URL(scratchUrl);
-      maintenanceUrl.pathname = "/postgres";
-      const maintenance = postgres(maintenanceUrl.toString(), {
-        max: 1,
-        onnotice: () => undefined,
-      });
-      try {
-        await maintenance.unsafe(
-          `DROP DATABASE IF EXISTS "${scratchDatabase}"`,
-        );
-        await maintenance.unsafe(`CREATE DATABASE "${scratchDatabase}"`);
-      } finally {
-        await maintenance.end();
-      }
-      await applyChatMigrations(scratchUrl);
+describeIfDb("createDrizzleBlockResponseStore: concurrent notification claim", () => {
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused");
+  const scratchTarget = new URL(scratchUrl);
+  const scratchDatabase = scratchTarget.pathname.replace(/^\//, "");
+
+  beforeAll(async () => {
+    const maintenanceUrl = new URL(scratchUrl);
+    maintenanceUrl.pathname = "/postgres";
+    const maintenance = postgres(maintenanceUrl.toString(), {
+      max: 1,
+      onnotice: () => undefined,
     });
-
-    afterAll(async () => {
-      const maintenanceUrl = new URL(scratchUrl);
-      maintenanceUrl.pathname = "/postgres";
-      const maintenance = postgres(maintenanceUrl.toString(), {
-        max: 1,
-        onnotice: () => undefined,
-      });
-      try {
-        await maintenance.unsafe(
-          `DROP DATABASE IF EXISTS "${scratchDatabase}"`,
-        );
-      } finally {
-        await maintenance.end();
-      }
+    try {
+      await maintenance.unsafe(`DROP DATABASE IF EXISTS "${scratchDatabase}"`);
+      await maintenance.unsafe(`CREATE DATABASE "${scratchDatabase}"`);
+    } finally {
+      await maintenance.end();
+    }
+    await applyChatMigrations(scratchUrl);
+  });
+
+  afterAll(async () => {
+    const maintenanceUrl = new URL(scratchUrl);
+    maintenanceUrl.pathname = "/postgres";
+    const maintenance = postgres(maintenanceUrl.toString(), {
+      max: 1,
+      onnotice: () => undefined,
     });
+    try {
+      await maintenance.unsafe(`DROP DATABASE IF EXISTS "${scratchDatabase}"`);
+    } finally {
+      await maintenance.end();
+    }
+  });
+
+  function keyFor(claimKey: string): BlockResponseKey {
+    return {
+      tenantId: "ten_1",
+      workbenchId: "run_1",
+      messageId: "m1",
+      blockId: "blk_question1",
+      principalId: claimKey,
+    };
+  }
+
+  test("two concurrent claims for the same key never throw, and exactly one wins", async () => {
+    // `max: 5` — a real connection pool, so the two claims below issue
+    // genuinely overlapping queries rather than being serialized onto
+    // one connection before either can race the other.
+    const sql = postgres(scratchUrl, { max: 5, onnotice: () => undefined });
+    try {
+      const store = createDrizzleBlockResponseStore(drizzle(sql));
+      const key = keyFor("prn_race_1");
+      await store.upsertBlockResponse({
+        ...key,
+        payload: { kind: "question", answer: "Staging" },
+      });
 
-    function keyFor(claimKey: string): BlockResponseKey {
-      return {
-        tenantId: "ten_1",
-        workbenchId: "run_1",
-        messageId: "m1",
-        blockId: "blk_question1",
-        principalId: claimKey,
-      };
+      const [first, second] = await Promise.all([
+        store.claimBlockResponseNotification(key),
+        store.claimBlockResponseNotification(key),
+      ]);
+
+      const outcomes = [first, second];
+      expect(outcomes.filter((outcome) => outcome !== false)).toHaveLength(1);
+      expect(outcomes.filter((outcome) => outcome === false)).toHaveLength(1);
+
+      const rows = await sql.unsafe(
+        `SELECT "notified_at", "notification_claim_token" FROM "chat"."block_responses" WHERE "tenant_id" = 'ten_1' AND "workbench_id" = 'run_1' AND "message_id" = 'm1' AND "block_id" = 'blk_question1' AND "principal_id" = 'prn_race_1'`,
+      );
+      expect(rows).toHaveLength(1);
+      expect(rows[0]?.notified_at).not.toBeNull();
+      expect(rows[0]?.notification_claim_token).toBe(outcomes.find((outcome) => outcome !== false));
+    } finally {
+      await sql.end();
     }
+  });
+
+  test("a claim already won is not won again by a later call", async () => {
+    const sql = postgres(scratchUrl, { max: 5, onnotice: () => undefined });
+    try {
+      const store = createDrizzleBlockResponseStore(drizzle(sql));
+      const key = keyFor("prn_sequential_1");
+      await store.upsertBlockResponse({
+        ...key,
+        payload: { kind: "question", answer: "Staging" },
+      });
 
-    test("two concurrent claims for the same key never throw, and exactly one wins", async () => {
-      // `max: 5` — a real connection pool, so the two claims below issue
-      // genuinely overlapping queries rather than being serialized onto
-      // one connection before either can race the other.
-      const sql = postgres(scratchUrl, { max: 5, onnotice: () => undefined });
-      try {
-        const store = createDrizzleBlockResponseStore(drizzle(sql));
-        const key = keyFor("prn_race_1");
-        await store.upsertBlockResponse({
-          ...key,
-          payload: { kind: "question", answer: "Staging" },
-        });
-
-        const [first, second] = await Promise.all([
-          store.claimBlockResponseNotification(key),
-          store.claimBlockResponseNotification(key),
-        ]);
-
-        const outcomes = [first, second];
-        expect(outcomes.filter((outcome) => outcome !== false)).toHaveLength(1);
-        expect(outcomes.filter((outcome) => outcome === false)).toHaveLength(1);
-
-        const rows = await sql.unsafe(
-          `SELECT "notified_at", "notification_claim_token" FROM "chat"."block_responses" WHERE "tenant_id" = 'ten_1' AND "workbench_id" = 'run_1' AND "message_id" = 'm1' AND "block_id" = 'blk_question1' AND "principal_id" = 'prn_race_1'`,
-        );
-        expect(rows).toHaveLength(1);
-        expect(rows[0]?.notified_at).not.toBeNull();
-        expect(rows[0]?.notification_claim_token).toBe(
-          outcomes.find((outcome) => outcome !== false),
-        );
-      } finally {
-        await sql.end();
-      }
-    });
+      const first = await store.claimBlockResponseNotification(key);
+      const second = await store.claimBlockResponseNotification(key);
 
-    test("a claim already won is not won again by a later call", async () => {
-      const sql = postgres(scratchUrl, { max: 5, onnotice: () => undefined });
-      try {
-        const store = createDrizzleBlockResponseStore(drizzle(sql));
-        const key = keyFor("prn_sequential_1");
-        await store.upsertBlockResponse({
-          ...key,
-          payload: { kind: "question", answer: "Staging" },
-        });
-
-        const first = await store.claimBlockResponseNotification(key);
-        const second = await store.claimBlockResponseNotification(key);
-
-        expect(typeof first).toBe("string");
-        expect(second).toBe(false);
-      } finally {
-        await sql.end();
-      }
-    });
+      expect(typeof first).toBe("string");
+      expect(second).toBe(false);
+    } finally {
+      await sql.end();
+    }
+  });
+
+  test("release with the holder's own token frees the claim for a fresh claim", async () => {
+    const sql = postgres(scratchUrl, { max: 5, onnotice: () => undefined });
+    try {
+      const store = createDrizzleBlockResponseStore(drizzle(sql));
+      const key = keyFor("prn_release_1");
+      await store.upsertBlockResponse({
+        ...key,
+        payload: { kind: "question", answer: "Staging" },
+      });
 
-    test("release with the holder's own token frees the claim for a fresh claim", async () => {
-      const sql = postgres(scratchUrl, { max: 5, onnotice: () => undefined });
-      try {
-        const store = createDrizzleBlockResponseStore(drizzle(sql));
-        const key = keyFor("prn_release_1");
-        await store.upsertBlockResponse({
-          ...key,
-          payload: { kind: "question", answer: "Staging" },
-        });
-
-        const token = await store.claimBlockResponseNotification(key);
-        expect(token).not.toBe(false);
-        await store.releaseBlockResponseNotification(key, token as string);
-
-        const reclaimed = await store.claimBlockResponseNotification(key);
-        expect(reclaimed).not.toBe(false);
-      } finally {
-        await sql.end();
-      }
-    });
+      const token = await store.claimBlockResponseNotification(key);
+      expect(token).not.toBe(false);
+      await store.releaseBlockResponseNotification(key, token as string);
 
-    test("release with a stale token never evicts a live claim", async () => {
-      const sql = postgres(scratchUrl, { max: 5, onnotice: () => undefined });
-      try {
-        const store = createDrizzleBlockResponseStore(drizzle(sql));
-        const key = keyFor("prn_stale_token_1");
-        await store.upsertBlockResponse({
-          ...key,
-          payload: { kind: "question", answer: "Staging" },
-        });
-
-        const firstToken = await store.claimBlockResponseNotification(key);
-        expect(firstToken).not.toBe(false);
-        await store.releaseBlockResponseNotification(key, firstToken as string);
-        const secondToken = await store.claimBlockResponseNotification(key);
-        expect(secondToken).not.toBe(false);
-        expect(secondToken).not.toBe(firstToken);
-
-        // The first (now stale) token must never release the second,
-        // currently-live claim.
-        await store.releaseBlockResponseNotification(key, firstToken as string);
-        const thirdAttempt = await store.claimBlockResponseNotification(key);
-        expect(thirdAttempt).toBe(false);
-      } finally {
-        await sql.end();
-      }
-    });
-  },
-);
+      const reclaimed = await store.claimBlockResponseNotification(key);
+      expect(reclaimed).not.toBe(false);
+    } finally {
+      await sql.end();
+    }
+  });
+
+  test("release with a stale token never evicts a live claim", async () => {
+    const sql = postgres(scratchUrl, { max: 5, onnotice: () => undefined });
+    try {
+      const store = createDrizzleBlockResponseStore(drizzle(sql));
+      const key = keyFor("prn_stale_token_1");
+      await store.upsertBlockResponse({
+        ...key,
+        payload: { kind: "question", answer: "Staging" },
+      });
+
+      const firstToken = await store.claimBlockResponseNotification(key);
+      expect(firstToken).not.toBe(false);
+      await store.releaseBlockResponseNotification(key, firstToken as string);
+      const secondToken = await store.claimBlockResponseNotification(key);
+      expect(secondToken).not.toBe(false);
+      expect(secondToken).not.toBe(firstToken);
+
+      // The first (now stale) token must never release the second,
+      // currently-live claim.
+      await store.releaseBlockResponseNotification(key, firstToken as string);
+      const thirdAttempt = await store.claimBlockResponseNotification(key);
+      expect(thirdAttempt).toBe(false);
+    } finally {
+      await sql.end();
+    }
+  });
+});
diff --git a/packages/chat/test/chat-orchestrator.test.ts b/packages/chat/test/chat-orchestrator.test.ts
index 4f4e544072..9c5cb8357b 100644
--- a/packages/chat/test/chat-orchestrator.test.ts
+++ b/packages/chat/test/chat-orchestrator.test.ts
@@ -77,10 +77,7 @@ function fakeRoom(options?: { failPostOnCall: number }) {
     listActivity: store.listActivity,
     deleteMessage: store.deleteMessage,
   };
-  const publish: WorkbenchSubscriberRegistry["publish"] = (
-    workbenchId,
-    event,
-  ) => {
+  const publish: WorkbenchSubscriberRegistry["publish"] = (workbenchId, event) => {
     published.push({ workbenchId, event });
   };
   return { roomMessages, publish, posted, published };
@@ -160,25 +157,18 @@ function launchRowFor(runId: string, tenantId: string) {
 // returns the configured run regardless of which address was queried
 // — the same convention `platform-adapter.test.ts`'s own fake `db`
 // uses.
-function createFakeDb(run?: {
-  id: string;
-  tenantId: string;
-  principalId?: string | null;
-}) {
+function createFakeDb(run?: { id: string; tenantId: string; principalId?: string | null }) {
   return {
     query: {
       workflowRun: {
         findFirst: async () =>
-          run === undefined
-            ? undefined
-            : { ...run, principalId: run.principalId ?? null },
+          run === undefined ? undefined : { ...run, principalId: run.principalId ?? null },
       },
     },
     select: () => ({
       from: () => ({
         where: () => ({
-          limit: async () =>
-            run === undefined ? [] : [launchRowFor(run.id, run.tenantId)],
+          limit: async () => (run === undefined ? [] : [launchRowFor(run.id, run.tenantId)]),
         }),
       }),
     }),
@@ -198,10 +188,7 @@ function fakeMemory() {
   };
 }
 
-function workbenchRow(
-  workbenchId: string,
-  participantAddresses: string[],
-): WorkbenchSettingsRow {
+function workbenchRow(workbenchId: string, participantAddresses: string[]): WorkbenchSettingsRow {
   return {
     tenantId: "ten_1",
     workbenchId,
@@ -236,9 +223,7 @@ describe("createChatOrchestrator", () => {
       store: {
         listWorkbenchSettings: async (tenantId) => {
           listWorkbenchSettingsCalls.push(tenantId);
-          return [
-            workbenchRow("ins_workbench1", ["ins_echo1@ten1.workbench.test"]),
-          ];
+          return [workbenchRow("ins_workbench1", ["ins_echo1@ten1.workbench.test"])];
         },
       },
       roomMessages: room.roomMessages,
@@ -317,9 +302,7 @@ describe("createChatOrchestrator", () => {
 
     await new Promise((resolve) => setTimeout(resolve, 0));
 
-    expect(room.posted.map((message) => message.workbenchId)).toEqual([
-      "ins_room_b",
-    ]);
+    expect(room.posted.map((message) => message.workbenchId)).toEqual(["ins_room_b"]);
     expect(room.posted[0]).toMatchObject({
       workbenchId: "ins_room_b",
       parts: [{ kind: "text", text: "reply for room B" }],
@@ -390,9 +373,7 @@ describe("createChatOrchestrator", () => {
 
     // Two running turns and no event hint: the single-running fallback
     // cannot fire, so only the bracket mail's header names room A.
-    expect(room.posted.map((message) => message.workbenchId)).toEqual([
-      "ins_room_a",
-    ]);
+    expect(room.posted.map((message) => message.workbenchId)).toEqual(["ins_room_a"]);
 
     orchestrator.dispose();
   });
@@ -508,9 +489,7 @@ describe("createChatOrchestrator", () => {
     });
     await new Promise((resolve) => setTimeout(resolve, 0));
 
-    expect(room.posted.map((message) => message.workbenchId)).toEqual([
-      "ins_room_a",
-    ]);
+    expect(room.posted.map((message) => message.workbenchId)).toEqual(["ins_room_a"]);
 
     orchestrator.dispose();
   });
@@ -558,9 +537,10 @@ describe("createChatOrchestrator", () => {
       runId: "turn__9",
       parts: [{ kind: "text", text: "reconciled" }],
     });
-    expect(
-      await agentTurns.getTurn({ tenantId: "ten_1", turnId: turn.id }),
-    ).toMatchObject({ status: "completed", childRunId: "turn__9" });
+    expect(await agentTurns.getTurn({ tenantId: "ten_1", turnId: turn.id })).toMatchObject({
+      status: "completed",
+      childRunId: "turn__9",
+    });
 
     orchestrator.dispose();
   });
@@ -614,9 +594,10 @@ describe("createChatOrchestrator", () => {
     await new Promise((resolve) => setTimeout(resolve, 0));
 
     expect(room.posted).toHaveLength(0);
-    expect(
-      await agentTurns.getTurn({ tenantId: "ten_1", turnId: current.id }),
-    ).toMatchObject({ status: "running", childRunId: "turn__1" });
+    expect(await agentTurns.getTurn({ tenantId: "ten_1", turnId: current.id })).toMatchObject({
+      status: "running",
+      childRunId: "turn__1",
+    });
 
     orchestrator.dispose();
   });
@@ -667,14 +648,12 @@ describe("createChatOrchestrator", () => {
     await new Promise((resolve) => setTimeout(resolve, 0));
 
     expect(room.posted.map((message) => message.workbenchId)).toEqual([]);
-    expect(
-      (await agentTurns.getTurn({ tenantId: "ten_1", turnId: turnA.id }))
-        ?.status,
-    ).toBe("running");
-    expect(
-      (await agentTurns.getTurn({ tenantId: "ten_1", turnId: turnB.id }))
-        ?.status,
-    ).toBe("running");
+    expect((await agentTurns.getTurn({ tenantId: "ten_1", turnId: turnA.id }))?.status).toBe(
+      "running",
+    );
+    expect((await agentTurns.getTurn({ tenantId: "ten_1", turnId: turnB.id }))?.status).toBe(
+      "running",
+    );
 
     orchestrator.dispose();
   });
@@ -741,9 +720,7 @@ describe("createChatOrchestrator", () => {
 
     await new Promise((resolve) => setTimeout(resolve, 0));
 
-    expect(room.posted.map((message) => message.workbenchId)).toEqual([
-      "ins_workbench1",
-    ]);
+    expect(room.posted.map((message) => message.workbenchId)).toEqual(["ins_workbench1"]);
     expect(room.posted[0]).toMatchObject({
       workbenchId: "ins_workbench1",
       parts: [{ kind: "text", text: "solo fallback" }],
@@ -772,9 +749,7 @@ describe("createChatOrchestrator", () => {
     const orchestrator = createChatOrchestrator({
       db: createFakeDb({ id: "ins_echo1", tenantId: "ten_1" }) as never,
       store: {
-        listWorkbenchSettings: async () => [
-          workbenchRow("ins_workbench1", [agentAddress]),
-        ],
+        listWorkbenchSettings: async () => [workbenchRow("ins_workbench1", [agentAddress])],
       },
       roomMessages: room.roomMessages,
       publish: room.publish,
@@ -846,13 +821,10 @@ describe("createChatOrchestrator", () => {
 
     await new Promise((resolve) => setTimeout(resolve, 0));
 
-    expect(room.posted.map((message) => message.workbenchId)).toEqual([
-      "ins_room_b",
-    ]);
-    expect(
-      (await agentTurns.getTurn({ tenantId: "ten_1", turnId: turnA.id }))
-        ?.status,
-    ).toBe("running");
+    expect(room.posted.map((message) => message.workbenchId)).toEqual(["ins_room_b"]);
+    expect((await agentTurns.getTurn({ tenantId: "ten_1", turnId: turnA.id }))?.status).toBe(
+      "running",
+    );
     expect(
       (
         await agentTurns.findRunningTurn({
@@ -994,20 +966,14 @@ describe("createChatOrchestrator", () => {
 
     // Room A's own reply carries only its own text — never room B's
     // "Let me check that." text or its tool-trace.
-    const postedInA = room.posted.filter(
-      (message) => message.workbenchId === "ins_room_a",
-    );
+    const postedInA = room.posted.filter((message) => message.workbenchId === "ins_room_a");
     expect(postedInA).toHaveLength(1);
-    expect(postedInA[0]?.parts).toEqual([
-      { kind: "text", text: "Sure, one sec." },
-    ]);
+    expect(postedInA[0]?.parts).toEqual([{ kind: "text", text: "Sure, one sec." }]);
 
     // Room B's own reply keeps its full accumulated [text, tool-trace] —
     // never swallowed by room A's bracket close, and never replaced by
     // just the flattened `content` string.
-    const postedInB = room.posted.filter(
-      (message) => message.workbenchId === "ins_room_b",
-    );
+    const postedInB = room.posted.filter((message) => message.workbenchId === "ins_room_b");
     expect(postedInB).toHaveLength(1);
     expect(postedInB[0]?.parts).toEqual([
       { kind: "text", text: "Let me check that." },
@@ -1052,9 +1018,7 @@ describe("createChatOrchestrator", () => {
     const orchestrator = createChatOrchestrator({
       db: createFakeDb({ id: "ins_echo1", tenantId: "ten_1" }) as never,
       store: {
-        listWorkbenchSettings: async () => [
-          workbenchRow("ins_workbench1", [agentAddress]),
-        ],
+        listWorkbenchSettings: async () => [workbenchRow("ins_workbench1", [agentAddress])],
       },
       roomMessages: room.roomMessages,
       publish: room.publish,
@@ -1078,14 +1042,12 @@ describe("createChatOrchestrator", () => {
       runId: "turn__0",
       parts: [{ kind: "text", text: "first reply" }],
     });
-    expect(
-      (await agentTurns.getTurn({ tenantId: "ten_1", turnId: first.id }))
-        ?.status,
-    ).toBe("completed");
-    expect(
-      (await agentTurns.getTurn({ tenantId: "ten_1", turnId: second.id }))
-        ?.status,
-    ).toBe("running");
+    expect((await agentTurns.getTurn({ tenantId: "ten_1", turnId: first.id }))?.status).toBe(
+      "completed",
+    );
+    expect((await agentTurns.getTurn({ tenantId: "ten_1", turnId: second.id }))?.status).toBe(
+      "running",
+    );
 
     orchestrator.dispose();
   });
@@ -1116,9 +1078,7 @@ describe("createChatOrchestrator", () => {
     const orchestrator = createChatOrchestrator({
       db: createFakeDb({ id: "ins_echo1", tenantId: "ten_1" }) as never,
       store: {
-        listWorkbenchSettings: async () => [
-          workbenchRow("ins_workbench1", [agentAddress]),
-        ],
+        listWorkbenchSettings: async () => [workbenchRow("ins_workbench1", [agentAddress])],
       },
       roomMessages: room.roomMessages,
       publish: room.publish,
@@ -1145,14 +1105,12 @@ describe("createChatOrchestrator", () => {
       runId: "turn__0",
       parts: [{ kind: "text", text: "provider timed out" }],
     });
-    expect(
-      (await agentTurns.getTurn({ tenantId: "ten_1", turnId: first.id }))
-        ?.status,
-    ).toBe("failed");
-    expect(
-      (await agentTurns.getTurn({ tenantId: "ten_1", turnId: second.id }))
-        ?.status,
-    ).toBe("running");
+    expect((await agentTurns.getTurn({ tenantId: "ten_1", turnId: first.id }))?.status).toBe(
+      "failed",
+    );
+    expect((await agentTurns.getTurn({ tenantId: "ten_1", turnId: second.id }))?.status).toBe(
+      "running",
+    );
 
     orchestrator.dispose();
   });
@@ -1180,9 +1138,7 @@ describe("createChatOrchestrator", () => {
     const orchestrator = createChatOrchestrator({
       db: createFakeDb({ id: "ins_echo1", tenantId: "ten_1" }) as never,
       store: {
-        listWorkbenchSettings: async () => [
-          workbenchRow("ins_workbench1", [agentAddress]),
-        ],
+        listWorkbenchSettings: async () => [workbenchRow("ins_workbench1", [agentAddress])],
       },
       roomMessages: room.roomMessages,
       publish: room.publish,
@@ -1202,14 +1158,12 @@ describe("createChatOrchestrator", () => {
 
     expect(room.posted).toHaveLength(1);
     expect(room.posted[0]?.runId).toBe("turn__1");
-    expect(
-      (await agentTurns.getTurn({ tenantId: "ten_1", turnId: first.id }))
-        ?.status,
-    ).toBe("running");
-    expect(
-      (await agentTurns.getTurn({ tenantId: "ten_1", turnId: second.id }))
-        ?.status,
-    ).toBe("completed");
+    expect((await agentTurns.getTurn({ tenantId: "ten_1", turnId: first.id }))?.status).toBe(
+      "running",
+    );
+    expect((await agentTurns.getTurn({ tenantId: "ten_1", turnId: second.id }))?.status).toBe(
+      "completed",
+    );
 
     orchestrator.dispose();
   });
@@ -1232,9 +1186,7 @@ describe("createChatOrchestrator", () => {
     const orchestrator = createChatOrchestrator({
       db: createFakeDb({ id: "ins_echo1", tenantId: "ten_1" }) as never,
       store: {
-        listWorkbenchSettings: async () => [
-          workbenchRow("ins_workbench1", [agentAddress]),
-        ],
+        listWorkbenchSettings: async () => [workbenchRow("ins_workbench1", [agentAddress])],
       },
       roomMessages: room.roomMessages,
       publish: room.publish,
@@ -1265,10 +1217,9 @@ describe("createChatOrchestrator", () => {
     });
     await new Promise((resolve) => setTimeout(resolve, 0));
 
-    expect(
-      (await agentTurns.getTurn({ tenantId: "ten_1", turnId: first.id }))
-        ?.status,
-    ).toBe("completed");
+    expect((await agentTurns.getTurn({ tenantId: "ten_1", turnId: first.id }))?.status).toBe(
+      "completed",
+    );
 
     const second = await agentTurns.startTurn({
       tenantId: "ten_1",
@@ -1346,9 +1297,7 @@ describe("createChatOrchestrator", () => {
     await new Promise((resolve) => setTimeout(resolve, 0));
 
     expect(room.posted).toHaveLength(2);
-    expect(room.posted[0]?.parts).toEqual([
-      { kind: "text", text: "first thought" },
-    ]);
+    expect(room.posted[0]?.parts).toEqual([{ kind: "text", text: "first thought" }]);
     expect(room.posted[1]?.parts).toEqual([
       { kind: "text", text: "Let me check that." },
       {
@@ -1361,10 +1310,9 @@ describe("createChatOrchestrator", () => {
       { kind: "text", text: "second thought" },
     ]);
     expect(room.posted[1]?.runId).toBe("turn__1");
-    expect(
-      (await agentTurns.getTurn({ tenantId: "ten_1", turnId: second.id }))
-        ?.status,
-    ).toBe("completed");
+    expect((await agentTurns.getTurn({ tenantId: "ten_1", turnId: second.id }))?.status).toBe(
+      "completed",
+    );
 
     orchestrator.dispose();
   });
@@ -1547,9 +1495,7 @@ describe("createChatOrchestrator", () => {
           findFirst: async () => {
             const run = runs[runCallIndex];
             runCallIndex += 1;
-            return run === undefined
-              ? undefined
-              : { ...run, principalId: null };
+            return run === undefined ? undefined : { ...run, principalId: null };
           },
         },
       },
@@ -1559,9 +1505,7 @@ describe("createChatOrchestrator", () => {
             limit: async () => {
               const run = runs[launchCallIndex];
               launchCallIndex += 1;
-              return run === undefined
-                ? []
-                : [launchRowFor(run.id, run.tenantId)];
+              return run === undefined ? [] : [launchRowFor(run.id, run.tenantId)];
             },
           }),
         }),
@@ -1569,11 +1513,7 @@ describe("createChatOrchestrator", () => {
     };
   }
 
-  function bracketed(
-    mailId: string,
-    messageRunId: string,
-    domain: string = "ten1.workbench.test",
-  ) {
+  function bracketed(mailId: string, messageRunId: string, domain: string = "ten1.workbench.test") {
     return {
       started: {
         type: "message.run.started",
@@ -1689,13 +1629,9 @@ describe("createChatOrchestrator", () => {
     // The reply's own row carries the thread, and so does its
     // membership — the read model sees it in the thread either way.
     expect(reply?.threadId).toBe(thread.id);
-    expect(
-      await threads.threadIdForMessage(
-        "ten_1",
-        "ins_workbench1",
-        reply?.id ?? "",
-      ),
-    ).toBe(thread.id);
+    expect(await threads.threadIdForMessage("ten_1", "ins_workbench1", reply?.id ?? "")).toBe(
+      thread.id,
+    );
 
     orchestrator.dispose();
   });
@@ -1779,13 +1715,9 @@ describe("createChatOrchestrator", () => {
       (message) => message.sender.address === "ins_echo1@ten1.workbench.test",
     );
     expect(reply?.threadId).toBe(thread.id);
-    expect(
-      await threads.threadIdForMessage(
-        "ten_1",
-        "ins_workbench1",
-        reply?.id ?? "",
-      ),
-    ).toBe(thread.id);
+    expect(await threads.threadIdForMessage("ten_1", "ins_workbench1", reply?.id ?? "")).toBe(
+      thread.id,
+    );
 
     orchestrator.dispose();
   });
@@ -1851,13 +1783,9 @@ describe("createChatOrchestrator", () => {
       (message) => message.sender.address === "ins_echo1@ten1.workbench.test",
     );
     expect(reply?.threadId).toBe(root.id);
-    expect(
-      await threads.threadIdForMessage(
-        "ten_1",
-        "ins_workbench1",
-        reply?.id ?? "",
-      ),
-    ).toBe(root.id);
+    expect(await threads.threadIdForMessage("ten_1", "ins_workbench1", reply?.id ?? "")).toBe(
+      root.id,
+    );
 
     orchestrator.dispose();
   });
@@ -2090,9 +2018,7 @@ describe("createChatOrchestrator", () => {
     if (delegatingMessage?.id === undefined) {
       throw new Error("expected the host's delegating message to be posted");
     }
-    expect(delegationHeaders).toEqual([
-      `<${delegatingMessage.id}@ten1.workbench.test>`,
-    ]);
+    expect(delegationHeaders).toEqual([`<${delegatingMessage.id}@ten1.workbench.test>`]);
     const delegationMailId = delegatingMessage.id;
     expect(
       await turnMail.findTurnMailSource({
@@ -2131,11 +2057,7 @@ describe("createChatOrchestrator", () => {
     expect(specialistReply).toMatchObject({ workbenchId: "ins_workbench1" });
     expect(specialistReply?.threadId).toBe(thread.id);
     expect(
-      await threads.threadIdForMessage(
-        "ten_1",
-        "ins_workbench1",
-        specialistReply?.id ?? "",
-      ),
+      await threads.threadIdForMessage("ten_1", "ins_workbench1", specialistReply?.id ?? ""),
     ).toBe(thread.id);
     const listed = await threads.listThreads("ten_1", "ins_workbench1");
     expect(listed.map((entry) => entry.kind).sort()).toEqual(["reply", "root"]);
@@ -2184,13 +2106,9 @@ describe("createChatOrchestrator", () => {
     expect(reply).toMatchObject({ workbenchId: "ins_workbench1" });
     const root = await threads.ensureRootThread("ten_1", "ins_workbench1");
     expect(reply?.threadId).toBe(root.id);
-    expect(
-      await threads.threadIdForMessage(
-        "ten_1",
-        "ins_workbench1",
-        reply?.id ?? "",
-      ),
-    ).toBe(root.id);
+    expect(await threads.threadIdForMessage("ten_1", "ins_workbench1", reply?.id ?? "")).toBe(
+      root.id,
+    );
 
     orchestrator.dispose();
   });
@@ -2817,13 +2735,9 @@ describe("createChatOrchestrator", () => {
     expect(parts).toHaveLength(1);
     expect(parts[0]?.kind).toBe("block");
     expect(card?.threadId).toBe(thread.id);
-    expect(
-      await threads.threadIdForMessage(
-        "ten_1",
-        "ins_workbench1",
-        card?.id ?? "",
-      ),
-    ).toBe(thread.id);
+    expect(await threads.threadIdForMessage("ten_1", "ins_workbench1", card?.id ?? "")).toBe(
+      thread.id,
+    );
 
     orchestrator.dispose();
   });
@@ -2900,17 +2814,11 @@ describe("createChatOrchestrator", () => {
     });
     await new Promise((resolve) => setTimeout(resolve, 0));
 
-    const card = room.posted.find((message) =>
-      message.parts.some((part) => part.kind === "block"),
-    );
+    const card = room.posted.find((message) => message.parts.some((part) => part.kind === "block"));
     expect(card?.threadId).toBe(thread.id);
-    expect(
-      await threads.threadIdForMessage(
-        "ten_1",
-        "ins_workbench1",
-        card?.id ?? "",
-      ),
-    ).toBe(thread.id);
+    expect(await threads.threadIdForMessage("ten_1", "ins_workbench1", card?.id ?? "")).toBe(
+      thread.id,
+    );
 
     orchestrator.dispose();
   });
@@ -3240,13 +3148,9 @@ describe("createArtifactDeliveryHandler", () => {
       },
     ]);
     expect(delivery?.threadId).toBe(thread.id);
-    expect(
-      await threads.threadIdForMessage(
-        "ten_1",
-        "ins_workbench1",
-        delivery?.id ?? "",
-      ),
-    ).toBe(thread.id);
+    expect(await threads.threadIdForMessage("ten_1", "ins_workbench1", delivery?.id ?? "")).toBe(
+      thread.id,
+    );
   });
 
   test("sends nothing when the turn's tool calls name no persisted artifact", async () => {
@@ -3560,10 +3464,9 @@ describe("createArtifactDeliveryHandler", () => {
 
     // art_1 recorded; art_2's add threw, releasing its claim.
     expect(added).toHaveLength(1);
-    expect(
-      (added[0] as { attributes: { artifactId: string } }).attributes
-        .artifactId,
-    ).toBe("art_1");
+    expect((added[0] as { attributes: { artifactId: string } }).attributes.artifactId).toBe(
+      "art_1",
+    );
 
     // Redelivery: art_1's claim is still held (skipped, not re-added);
     // art_2's claim was released, so it is retried and this time
@@ -3574,11 +3477,7 @@ describe("createArtifactDeliveryHandler", () => {
     expect(added).toHaveLength(2);
     expect(
       added
-        .map(
-          (entry) =>
-            (entry as { attributes: { artifactId: string } }).attributes
-              .artifactId,
-        )
+        .map((entry) => (entry as { attributes: { artifactId: string } }).attributes.artifactId)
         .sort(),
     ).toEqual(["art_1", "art_2"]);
   });
diff --git a/packages/chat/test/codec.test.ts b/packages/chat/test/codec.test.ts
index 101de06e66..b2b65afe62 100644
--- a/packages/chat/test/codec.test.ts
+++ b/packages/chat/test/codec.test.ts
@@ -70,9 +70,7 @@ describe("encodeParts / decodeParts", () => {
 
   test("bare text mail with no attachments decodes to a single TextPart", () => {
     const mail: MailContent = { content: "sent from a plain mail client" };
-    expect(decodeParts(mail)).toEqual([
-      { kind: "text", text: "sent from a plain mail client" },
-    ]);
+    expect(decodeParts(mail)).toEqual([{ kind: "text", text: "sent from a plain mail client" }]);
   });
 
   test("mail with an empty attachments array decodes as bare text", () => {
@@ -114,9 +112,7 @@ describe("encodeParts / decodeParts", () => {
       attachments: [
         {
           mimeType: "application/json",
-          data: Buffer.from(JSON.stringify({ kind: "nonsense" })).toString(
-            "base64",
-          ),
+          data: Buffer.from(JSON.stringify({ kind: "nonsense" })).toString("base64"),
           name: "part-0.json",
         },
       ],
@@ -143,9 +139,7 @@ describe("decodeMail", () => {
       attachments: [],
     };
     const parts = await decodeMail(mail, { fetchBlob: fakeFetchBlob({}) });
-    expect(parts).toEqual([
-      { kind: "text", text: "sent from a plain mail client" },
-    ]);
+    expect(parts).toEqual([{ kind: "text", text: "sent from a plain mail client" }]);
   });
 
   test("every Part kind round-trips through the JMAP read shape", async () => {
@@ -250,9 +244,7 @@ describe("decodeMail", () => {
     const mail: MailReadContent = {
       textBody: [{ partId: "1", type: "text/plain" }],
       bodyValues: { "1": { value: "" } },
-      attachments: [
-        { blobId: "blob_m2_2", name: "note.txt", type: "text/plain", size: 5 },
-      ],
+      attachments: [{ blobId: "blob_m2_2", name: "note.txt", type: "text/plain", size: 5 }],
     };
     const parts = await decodeMail(mail, {
       fetchBlob: fakeFetchBlob({ blob_m2_2: "hello" }),
@@ -274,9 +266,7 @@ describe("decodeMail", () => {
       ],
     };
     const fetchBlob: FetchBlob = async () => {
-      throw new Error(
-        "fetchBlob should not be called for non-json/text attachments",
-      );
+      throw new Error("fetchBlob should not be called for non-json/text attachments");
     };
     const parts = await decodeMail(mail, { fetchBlob });
     expect(parts).toEqual([
@@ -332,9 +322,9 @@ describe("decodeMail", () => {
   });
 
   test("decodeMail rejects a structurally invalid mail read shape", async () => {
-    await expect(
-      decodeMail({ textBody: [] }, { fetchBlob: fakeFetchBlob({}) }),
-    ).rejects.toThrow(/invalid mail read content/);
+    await expect(decodeMail({ textBody: [] }, { fetchBlob: fakeFetchBlob({}) })).rejects.toThrow(
+      /invalid mail read content/,
+    );
   });
 });
 
@@ -434,9 +424,7 @@ describe("decodeMail leaf-header compensation", () => {
   const mailWith = (blobId: string) => ({
     textBody: [],
     bodyValues: {},
-    attachments: [
-      { blobId, name: "part.json", type: "application/json", size: 10 },
-    ],
+    attachments: [{ blobId, name: "part.json", type: "application/json", size: 10 }],
   });
 
   test("strips a leaf attachment's own MIME header block before parsing", async () => {
@@ -477,8 +465,6 @@ describe("decodeMail leaf-header compensation", () => {
     const parts = await decodeMail(mailWith("blob_x_3"), {
       fetchBlob: async () => tricky,
     });
-    expect(parts).toEqual([
-      { kind: "text", text: "Content-Type: not a header" },
-    ]);
+    expect(parts).toEqual([{ kind: "text", text: "Content-Type: not a header" }]);
   });
 });
diff --git a/packages/chat/test/commands.test.ts b/packages/chat/test/commands.test.ts
index 04dbfc6b72..cdd28692d4 100644
--- a/packages/chat/test/commands.test.ts
+++ b/packages/chat/test/commands.test.ts
@@ -5,10 +5,7 @@
 // participant's handle, so an ordinary agent mention is untouched.
 import { describe, expect, test } from "bun:test";
 import { createChatRoutes } from "../src/routes";
-import {
-  createCommandRegistry,
-  createWorkflowCommandPlugin,
-} from "@corbits/commands";
+import { createCommandRegistry, createWorkflowCommandPlugin } from "@corbits/commands";
 import { createInMemoryAgentTurnStore } from "@corbits/agent-runtime";
 import { startWorkflowCommand } from "../src/workbench-service";
 import {
@@ -27,9 +24,9 @@ import {
  * commands are the tenant's invitable definitions, dispatching through
  * `startWorkflowCommand` against the same store/platform the routes use.
  */
-function buildWorkflowCommandDeps(
-  platform: ReturnType<typeof fakePlatform>,
-): ReturnType<typeof buildDeps> & {
+function buildWorkflowCommandDeps(platform: ReturnType<typeof fakePlatform>): ReturnType<
+  typeof buildDeps
+> & {
   agentTurns: ReturnType<typeof createInMemoryAgentTurnStore>;
 } {
   const registry = createCommandRegistry();
@@ -37,8 +34,7 @@ function buildWorkflowCommandDeps(
   const deps = buildDeps({ commands: registry, platform, agentTurns });
   registry.registerCommandPlugin(
     createWorkflowCommandPlugin({
-      listInvitableDefinitions: (tenantId) =>
-        platform.listInvitableDefinitions(tenantId),
+      listInvitableDefinitions: (tenantId) => platform.listInvitableDefinitions(tenantId),
       startWorkflow: (input) =>
         startWorkflowCommand(
           {
@@ -83,16 +79,13 @@ describe("workbench command dispatch", () => {
     };
     expect(body.command).toEqual({
       type: "message",
-      text:
-        "Unknown command: /nope. No agent commands are available in this " +
-        "workbench yet.",
+      text: "Unknown command: /nope. No agent commands are available in this " + "workbench yet.",
     });
 
     // Only the result reaches the timeline; the raw "/nope some args"
     // never does.
     expect(timelineTexts(await timelineOf(deps, workbench.id))).toEqual([
-      "Unknown command: /nope. No agent commands are available in this " +
-        "workbench yet.",
+      "Unknown command: /nope. No agent commands are available in this " + "workbench yet.",
     ]);
   });
 
@@ -108,9 +101,7 @@ describe("workbench command dispatch", () => {
     expect(response.status).toBe(201);
     const body = (await response.json()) as Record<string, unknown>;
     expect(body["command"]).toBeUndefined();
-    expect(timelineTexts(await timelineOf(deps, workbench.id))).toEqual([
-      "/usr/local/bin",
-    ]);
+    expect(timelineTexts(await timelineOf(deps, workbench.id))).toEqual(["/usr/local/bin"]);
   });
 
   test("/<agent> invokes that agent directly with the rest of the line as its message — CL-6499", async () => {
@@ -123,11 +114,7 @@ describe("workbench command dispatch", () => {
       kind: "workbench",
     });
 
-    const response = await sendText(
-      app,
-      workbench.id,
-      "/jimmy throw me a gif for shipping code",
-    );
+    const response = await sendText(app, workbench.id, "/jimmy throw me a gif for shipping code");
     expect(response.status).toBe(201);
     const body = (await response.json()) as {
       command: { type: string; handle: string };
@@ -136,12 +123,8 @@ describe("workbench command dispatch", () => {
     expect(body.command.handle).toBe("jimmy");
     expect(platform.launchInviteCalls).toHaveLength(1);
 
-    const delivered = platform.sentMail.find(
-      (mail) => mail.workbenchId === "ins_invited1",
-    );
-    expect(delivered?.content.content).toContain(
-      "throw me a gif for shipping code",
-    );
+    const delivered = platform.sentMail.find((mail) => mail.workbenchId === "ins_invited1");
+    expect(delivered?.content.content).toContain("throw me a gif for shipping code");
   });
 
   test("a registered slash command runs its handler with the parsed args", async () => {
@@ -164,9 +147,7 @@ describe("workbench command dispatch", () => {
     const response = await sendText(app, workbench.id, "/greet world");
     expect(response.status).toBe(201);
     expect(seenArgs).toBe("world");
-    expect(timelineTexts(await timelineOf(deps, workbench.id))).toEqual([
-      "hi world",
-    ]);
+    expect(timelineTexts(await timelineOf(deps, workbench.id))).toEqual(["hi world"]);
   });
 
   test("an @mention of an existing agent participant keeps its ordinary fan-out, never the command path", async () => {
@@ -193,9 +174,7 @@ describe("workbench command dispatch", () => {
 
     const platform = deps.platform as ReturnType<typeof fakePlatform>;
     // The ordinary mention fan-out sent a copy to the participant.
-    expect(
-      platform.sentMail.some((mail) => mail.workbenchId === "ins_echo1"),
-    ).toBe(true);
+    expect(platform.sentMail.some((mail) => mail.workbenchId === "ins_echo1")).toBe(true);
   });
 
   test("an @name that resolves to a command (not a participant) dispatches instead of fanning out", async () => {
@@ -211,11 +190,7 @@ describe("workbench command dispatch", () => {
       kind: "workbench",
     });
 
-    const response = await sendText(
-      app,
-      workbench.id,
-      "@assistant do the thing",
-    );
+    const response = await sendText(app, workbench.id, "@assistant do the thing");
     expect(response.status).toBe(201);
     const body = (await response.json()) as {
       command: { type: string; text: string };
@@ -234,9 +209,7 @@ describe("workbench command dispatch", () => {
   // for the same participant.
   test("an @name naming an already-resident definition routes to the existing run, never a second one", async () => {
     const platform = fakePlatform({
-      invitable: [
-        { id: "wfd_assistant", name: "assistant", description: "Myra" },
-      ],
+      invitable: [{ id: "wfd_assistant", name: "assistant", description: "Myra" }],
       resolveDefinitionIdByAddress: async (address) =>
         address === "ins_invited1@acme.example" ? "wfd_assistant" : undefined,
     });
@@ -254,11 +227,7 @@ describe("workbench command dispatch", () => {
     expect(invite.status).toBe(201);
     expect(platform.launchInviteCalls).toHaveLength(1);
 
-    const response = await sendText(
-      app,
-      workbench.id,
-      "@assistant set up a sales workbench",
-    );
+    const response = await sendText(app, workbench.id, "@assistant set up a sales workbench");
     expect(response.status).toBe(201);
     const body = (await response.json()) as Record<string, unknown>;
     // Not a command dispatch: the message posts as an ordinary message.
@@ -267,9 +236,7 @@ describe("workbench command dispatch", () => {
     expect(platform.launchInviteCalls).toHaveLength(1);
 
     // The message reached the EXISTING participant's run...
-    const delivered = platform.sentMail.filter(
-      (mail) => mail.workbenchId === "ins_invited1",
-    );
+    const delivered = platform.sentMail.filter((mail) => mail.workbenchId === "ins_invited1");
     expect(delivered).toHaveLength(1);
     expect(delivered[0]?.content.content).toContain("set up a sales workbench");
     // ...through the ordinary turn pipeline: one turn row, on the same
@@ -330,9 +297,7 @@ describe("workbench command dispatch", () => {
 
   test("an @name for a definition NOT in the room still starts it as a command", async () => {
     const platform = fakePlatform({
-      invitable: [
-        { id: "wfd_assistant", name: "assistant", description: "Myra" },
-      ],
+      invitable: [{ id: "wfd_assistant", name: "assistant", description: "Myra" }],
     });
     const deps = buildWorkflowCommandDeps(platform);
     const app = mountAs(createChatRoutes(deps), "prn_alice");
diff --git a/packages/chat/test/connect-pending.test.ts b/packages/chat/test/connect-pending.test.ts
index 804d77b4e5..061d2e94d8 100644
--- a/packages/chat/test/connect-pending.test.ts
+++ b/packages/chat/test/connect-pending.test.ts
@@ -13,10 +13,7 @@ import { createInMemoryChatStore } from "../src/store";
 import { createInMemoryRoomMessageStore } from "../src/room-messages";
 import { createInMemoryTurnClaimStore } from "@corbits/agent-runtime";
 import { createWorkbenchTurnQueue } from "@corbits/agent-runtime";
-import {
-  CONNECTION_CONNECTED_EVENT,
-  settleConnectedService,
-} from "../src/connect-pending";
+import { CONNECTION_CONNECTED_EVENT, settleConnectedService } from "../src/connect-pending";
 import { fakePlatform, TENANT } from "./test-support";
 
 const HUMAN_ADDRESS = "prn_owner@acme.example";
@@ -88,16 +85,12 @@ function buildDeps() {
 
 function expectEventOnlySettleNotice(
   items: Awaited<
-    ReturnType<
-      ReturnType<typeof createInMemoryRoomMessageStore>["listMessages"]
-    >
+    ReturnType<ReturnType<typeof createInMemoryRoomMessageStore>["listMessages"]>
   >["items"],
   displayName: string,
 ) {
   const notices = items.filter(
-    (item) =>
-      item.parts.length > 0 &&
-      item.parts.every((part) => part.kind === "event"),
+    (item) => item.parts.length > 0 && item.parts.every((part) => part.kind === "event"),
   );
   expect(notices.length).toBeGreaterThanOrEqual(1);
   const notice = notices[0];
@@ -118,8 +111,7 @@ function expectEventOnlySettleNotice(
 }
 
 test("After connect, no new timeline row is authored as the signed-in user by the product", async () => {
-  const { store, roomMessages, published, platform, agentTurns, deps } =
-    buildDeps();
+  const { store, roomMessages, published, platform, agentTurns, deps } = buildDeps();
   await seedWorkbench(store, "chan_waiting", ["gmail", "exa"]);
   await seedWorkbench(store, "chan_other", undefined);
 
@@ -134,14 +126,10 @@ test("After connect, no new timeline row is authored as the signed-in user by th
   expect(settled?.settings["connections/pending"]).toEqual(["exa"]);
   expect(
     published.some(
-      (entry) =>
-        entry.workbenchId === "chan_waiting" &&
-        entry.event.type === "chat.settings",
+      (entry) => entry.workbenchId === "chan_waiting" && entry.event.type === "chat.settings",
     ),
   ).toBe(true);
-  expect(published.some((entry) => entry.event.type === "chat.message")).toBe(
-    true,
-  );
+  expect(published.some((entry) => entry.event.type === "chat.message")).toBe(true);
 
   const listed = await roomMessages.listMessages({
     tenantId: TENANT.id,
@@ -174,8 +162,7 @@ test("After connect, no new timeline row is authored as the signed-in user by th
 });
 
 test("Connect card flips in place; agent wakes without a forged user message", async () => {
-  const { store, roomMessages, published, platform, agentTurns, deps } =
-    buildDeps();
+  const { store, roomMessages, published, platform, agentTurns, deps } = buildDeps();
   await seedWorkbench(store, "chan_waiting", ["gmail"]);
   await roomMessages.insertMessage({
     id: "msg_1",
@@ -205,14 +192,10 @@ test("Connect card flips in place; agent wakes without a forged user message", a
   expect(settled?.settings["connections/pending"]).toEqual([]);
   expect(
     published.some(
-      (entry) =>
-        entry.workbenchId === "chan_waiting" &&
-        entry.event.type === "chat.settings",
+      (entry) => entry.workbenchId === "chan_waiting" && entry.event.type === "chat.settings",
     ),
   ).toBe(true);
-  expect(published.some((entry) => entry.event.type === "chat.message")).toBe(
-    true,
-  );
+  expect(published.some((entry) => entry.event.type === "chat.message")).toBe(true);
 
   const listed = await roomMessages.listMessages({
     tenantId: TENANT.id,
@@ -222,15 +205,11 @@ test("Connect card flips in place; agent wakes without a forged user message", a
   expect(listed.items.map((item) => item.id).toSorted()).toEqual(
     expect.arrayContaining(["msg_1", "msg_2"]),
   );
-  expect(
-    listed.items.some((item) =>
-      JSON.stringify(item.parts).includes("is connected now"),
-    ),
-  ).toBe(false);
+  expect(listed.items.some((item) => JSON.stringify(item.parts).includes("is connected now"))).toBe(
+    false,
+  );
   expectEventOnlySettleNotice(listed.items, "Gmail");
-  expect(
-    listed.items.filter((item) => item.senderPrincipalId === "prn_owner"),
-  ).toHaveLength(1);
+  expect(listed.items.filter((item) => item.senderPrincipalId === "prn_owner")).toHaveLength(1);
 
   expect(platform.sentMail).toHaveLength(1);
   expect(platform.sentMail[0]?.workbenchId).toBe("ins_myra");
@@ -265,8 +244,7 @@ test("matches a pending mcp-prefixed entry when the preset connects under its ba
 });
 
 test("settles a room whose GitHub card is pending under the code-review template's own key — a credential created out of band (not through that card's own submit) still reaches it, and no agent is woken", async () => {
-  const { store, roomMessages, published, platform, agentTurns, deps } =
-    buildDeps();
+  const { store, roomMessages, published, platform, agentTurns, deps } = buildDeps();
   await seedTemplateWorkbench(store, "chan_template", ["github"]);
 
   await settleConnectedService(deps, {
@@ -281,14 +259,10 @@ test("settles a room whose GitHub card is pending under the code-review template
   expect(settled?.settings["template/id"]).toBe("code-review");
   expect(
     published.some(
-      (entry) =>
-        entry.workbenchId === "chan_template" &&
-        entry.event.type === "chat.settings",
+      (entry) => entry.workbenchId === "chan_template" && entry.event.type === "chat.settings",
     ),
   ).toBe(true);
-  expect(published.some((entry) => entry.event.type === "chat.message")).toBe(
-    true,
-  );
+  expect(published.some((entry) => entry.event.type === "chat.message")).toBe(true);
 
   const listed = await roomMessages.listMessages({
     tenantId: TENANT.id,
@@ -452,17 +426,9 @@ test("System / settle notices are not presented as the human's messages", async
   });
   expect(listed.items).toHaveLength(1);
   expectEventOnlySettleNotice(listed.items, "GitHub");
-  expect(
-    listed.items.filter((item) => item.sender.address === HUMAN_ADDRESS),
-  ).toHaveLength(0);
-  expect(
-    listed.items.filter((item) => item.senderPrincipalId === "prn_owner"),
-  ).toHaveLength(0);
-  expect(
-    listed.items.some((item) =>
-      item.parts.some((part) => part.kind === "text"),
-    ),
-  ).toBe(false);
+  expect(listed.items.filter((item) => item.sender.address === HUMAN_ADDRESS)).toHaveLength(0);
+  expect(listed.items.filter((item) => item.senderPrincipalId === "prn_owner")).toHaveLength(0);
+  expect(listed.items.some((item) => item.parts.some((part) => part.kind === "text"))).toBe(false);
 });
 
 test("a connector no room is waiting on settles nothing", async () => {
diff --git a/packages/chat/test/dispatch-turn-abort.test.ts b/packages/chat/test/dispatch-turn-abort.test.ts
index ea248583a7..bd8e144141 100644
--- a/packages/chat/test/dispatch-turn-abort.test.ts
+++ b/packages/chat/test/dispatch-turn-abort.test.ts
@@ -49,9 +49,7 @@ describe("dispatchTurn with an already-aborted signal (CL-7201)", () => {
       workbenchId: "wb_1",
     });
     const notice = messages.items.find((message) =>
-      message.parts.some(
-        (part) => part.kind === "text" && part.turnCancelled === true,
-      ),
+      message.parts.some((part) => part.kind === "text" && part.turnCancelled === true),
     );
     expect(notice).toBeDefined();
   });
diff --git a/packages/chat/test/mail-threading.test.ts b/packages/chat/test/mail-threading.test.ts
index 62a6e1015a..bb6489a5da 100644
--- a/packages/chat/test/mail-threading.test.ts
+++ b/packages/chat/test/mail-threading.test.ts
@@ -45,10 +45,8 @@ function harness() {
           }));
         },
       },
-      resolveKnownPrincipalIds: async (
-        _tenantId: string,
-        candidateIds: readonly string[],
-      ) => new Set(candidateIds),
+      resolveKnownPrincipalIds: async (_tenantId: string, candidateIds: readonly string[]) =>
+        new Set(candidateIds),
       resolveTenantDomain: async () => DOMAIN,
     },
   };
@@ -77,10 +75,7 @@ async function postRow(
   return row;
 }
 
-async function dispatch(
-  h: ReturnType<typeof harness>,
-  requestMessageIds: readonly string[],
-) {
+async function dispatch(h: ReturnType<typeof harness>, requestMessageIds: readonly string[]) {
   await dispatchTurn(h.deps as never, {
     tenantId: TENANT,
     workbenchId: WORKBENCH,
@@ -168,11 +163,7 @@ describe("dispatch mail threading", () => {
       workbenchId: WORKBENCH,
       parentMessageId: first.id,
     });
-    const inFirst = await postRow(
-      h.roomMessages,
-      "@ins_echo1 one",
-      firstThread.id,
-    );
+    const inFirst = await postRow(h.roomMessages, "@ins_echo1 one", firstThread.id);
     await h.threads.assignMessage({
       tenantId: TENANT,
       workbenchId: WORKBENCH,
@@ -186,11 +177,7 @@ describe("dispatch mail threading", () => {
       workbenchId: WORKBENCH,
       parentMessageId: second.id,
     });
-    const inSecond = await postRow(
-      h.roomMessages,
-      "@ins_echo1 two",
-      secondThread.id,
-    );
+    const inSecond = await postRow(h.roomMessages, "@ins_echo1 two", secondThread.id);
     await h.threads.assignMessage({
       tenantId: TENANT,
       workbenchId: WORKBENCH,
diff --git a/packages/chat/test/mailbox-fanout.drizzle.test.ts b/packages/chat/test/mailbox-fanout.drizzle.test.ts
index 8f43955f6b..72879105f8 100644
--- a/packages/chat/test/mailbox-fanout.drizzle.test.ts
+++ b/packages/chat/test/mailbox-fanout.drizzle.test.ts
@@ -17,10 +17,7 @@ import { createMailboxDb, runMailboxMigrations } from "@corbits/mailbox";
 
 import { e2eDatabaseUrl } from "../../../scripts/e2e/database-url";
 import { dbGate } from "../../../scripts/e2e/db-gate";
-import {
-  createDrizzleMailboxWriter,
-  type MailboxBatchItem,
-} from "../src/mailbox-fanout";
+import { createDrizzleMailboxWriter, type MailboxBatchItem } from "../src/mailbox-fanout";
 
 function scratchUrlFor(e2eUrl: string): string {
   const url = new URL(e2eUrl);
@@ -38,9 +35,7 @@ const OTHER_PRINCIPAL_ID = "prn_bob";
 const DOMAIN = "acme.example";
 
 describeIfDb("createDrizzleMailboxWriter", () => {
-  const scratchUrl = scratchUrlFor(
-    databaseUrl ?? "postgres://localhost:5432/unused",
-  );
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused");
   const scratchTarget = new URL(scratchUrl);
   const scratchDatabase = scratchTarget.pathname.replace(/^\//, "");
 
@@ -280,8 +275,7 @@ describeIfDb("createDrizzleMailboxWriter", () => {
       );
       const headers = [...rows].map((r) => {
         const text = Buffer.from(r.raw).toString("utf8");
-        const h = (n: string) =>
-          text.match(new RegExp(`^${n}:\\s*(.*)$`, "im"))?.[1] ?? null;
+        const h = (n: string) => text.match(new RegExp(`^${n}:\\s*(.*)$`, "im"))?.[1] ?? null;
         return {
           principal: r.principal_id,
           messageId: h("Message-ID"),
diff --git a/packages/chat/test/mailbox-fanout.test.ts b/packages/chat/test/mailbox-fanout.test.ts
index 18daecc625..3b7f94db46 100644
--- a/packages/chat/test/mailbox-fanout.test.ts
+++ b/packages/chat/test/mailbox-fanout.test.ts
@@ -60,10 +60,7 @@ function inMemoryWriter(): {
 
 function knownPrincipals(ids: readonly string[]) {
   const known = new Set(ids);
-  return async (
-    _tenantId: string,
-    candidateIds: readonly string[],
-  ): Promise<ReadonlySet<string>> =>
+  return async (_tenantId: string, candidateIds: readonly string[]): Promise<ReadonlySet<string>> =>
     new Set(candidateIds.filter((id) => known.has(id)));
 }
 
@@ -335,10 +332,7 @@ describe("writeChatMailboxFanout (CL-7450)", () => {
     );
 
     for (const row of rows) {
-      expect(row.references).toEqual([
-        "<msg_5@acme.example>",
-        "<msg_6@acme.example>",
-      ]);
+      expect(row.references).toEqual(["<msg_5@acme.example>", "<msg_6@acme.example>"]);
     }
   });
 
@@ -387,11 +381,7 @@ describe("sendWorkbenchMessage's mailbox fan-out wiring (CL-7450)", () => {
       workbenchId: WORKBENCH_ID,
       updatedBy: SENDER,
       settings: {
-        "chat/participants": participantsOf(
-          SENDER,
-          OTHER_HUMANS,
-          AGENT_ADDRESS,
-        ),
+        "chat/participants": participantsOf(SENDER, OTHER_HUMANS, AGENT_ADDRESS),
       },
     });
 
@@ -460,11 +450,7 @@ describe("sendWorkbenchMessage's mailbox fan-out wiring (CL-7450)", () => {
       workbenchId: WORKBENCH_ID,
       updatedBy: SENDER,
       settings: {
-        "chat/participants": participantsOf(
-          SENDER,
-          OTHER_HUMANS,
-          AGENT_ADDRESS,
-        ),
+        "chat/participants": participantsOf(SENDER, OTHER_HUMANS, AGENT_ADDRESS),
       },
     });
 
@@ -496,10 +482,7 @@ describe("sendWorkbenchMessage's mailbox fan-out wiring (CL-7450)", () => {
           turnCancellation,
           mailbox: {
             writer: failingWriter,
-            resolveKnownPrincipalIds: knownPrincipals([
-              SENDER,
-              ...OTHER_HUMANS,
-            ]),
+            resolveKnownPrincipalIds: knownPrincipals([SENDER, ...OTHER_HUMANS]),
             resolveTenantDomain: domainOf(DOMAIN),
           },
         },
diff --git a/packages/chat/test/migrations.test.ts b/packages/chat/test/migrations.test.ts
index 759cb1f9ec..a10c565794 100644
--- a/packages/chat/test/migrations.test.ts
+++ b/packages/chat/test/migrations.test.ts
@@ -58,9 +58,7 @@ const migrationNames = [
 ];
 
 describeIfDb("applyChatMigrations", () => {
-  const scratchUrl = scratchUrlFor(
-    databaseUrl ?? "postgres://localhost:5432/unused",
-  );
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused");
   const scratchTarget = new URL(scratchUrl);
   const scratchDatabase = scratchTarget.pathname.replace(/^\//, "");
 
@@ -182,9 +180,7 @@ describeIfDb("applyChatMigrations", () => {
       const threadIndexes = await sql.unsafe(
         `SELECT indexname FROM pg_indexes WHERE schemaname = 'chat' AND tablename = 'workbench_threads'`,
       );
-      const threadIndexNames = threadIndexes.map((row) =>
-        String(row["indexname"]),
-      );
+      const threadIndexNames = threadIndexes.map((row) => String(row["indexname"]));
       expect(threadIndexNames).toContain("workbench_threads_root_key");
       expect(threadIndexNames).toContain("workbench_threads_reply_key");
 
@@ -214,8 +210,7 @@ describeIfDb("applyChatMigrations", () => {
       // means restating its `jsonb_set` logic against the current table
       // name rather than replaying that stale literal text.
       const contextWindowInheritSql = chatMigrations.find(
-        (candidate) =>
-          candidate.name === "0008_channel_context_window_explicit_inherit",
+        (candidate) => candidate.name === "0008_channel_context_window_explicit_inherit",
       );
       if (contextWindowInheritSql === undefined) {
         throw new Error("0008 migration missing from chatMigrations");
@@ -229,19 +224,9 @@ describeIfDb("applyChatMigrations", () => {
       const rows = await sql.unsafe(
         `SELECT workbench_id, settings FROM "chat"."workbench_settings" ORDER BY workbench_id`,
       );
-      const byId = new Map(
-        rows.map((row) => [String(row["workbench_id"]), row["settings"]]),
-      );
-      expect(
-        (byId.get("chn_absent") as Record<string, unknown>)[
-          "chat/contextWindow"
-        ],
-      ).toBeNull();
-      expect(
-        (byId.get("chn_override") as Record<string, unknown>)[
-          "chat/contextWindow"
-        ],
-      ).toBe(5);
+      const byId = new Map(rows.map((row) => [String(row["workbench_id"]), row["settings"]]));
+      expect((byId.get("chn_absent") as Record<string, unknown>)["chat/contextWindow"]).toBeNull();
+      expect((byId.get("chn_override") as Record<string, unknown>)["chat/contextWindow"]).toBe(5);
     } finally {
       await sql.end();
     }
@@ -249,9 +234,10 @@ describeIfDb("applyChatMigrations", () => {
 });
 
 describeIfDb("0025_workbench_threads_unique_key dedupe", () => {
-  const scratchUrl = scratchUrlFor(
-    databaseUrl ?? "postgres://localhost:5432/unused",
-  ).replace("_chat_migrations_test", "_chat_migrations_dedupe_test");
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused").replace(
+    "_chat_migrations_test",
+    "_chat_migrations_dedupe_test",
+  );
   const scratchTarget = new URL(scratchUrl);
   const scratchDatabase = scratchTarget.pathname.replace(/^\//, "");
 
@@ -302,10 +288,9 @@ describeIfDb("0025_workbench_threads_unique_key dedupe", () => {
       for (const migration of preDedupeMigrations) {
         await seed.begin(async (tx) => {
           await tx.unsafe(migration.sql);
-          await tx.unsafe(
-            `INSERT INTO "chat"."chat_migrations" (name) VALUES ($1)`,
-            [migration.name],
-          );
+          await tx.unsafe(`INSERT INTO "chat"."chat_migrations" (name) VALUES ($1)`, [
+            migration.name,
+          ]);
         });
       }
 
@@ -370,9 +355,7 @@ describeIfDb("0025_workbench_threads_unique_key dedupe", () => {
           `WHERE tenant_id = 'tnt_dedupe' AND workbench_id = 'wb_dedupe' ` +
           `AND kind = 'reply' AND parent_message_id = 'msg_parent'`,
       );
-      expect(replies.map((row) => String(row["id"]))).toEqual([
-        "thr_reply_old",
-      ]);
+      expect(replies.map((row) => String(row["id"]))).toEqual(["thr_reply_old"]);
 
       const messageThreadId = await verify.unsafe(
         `SELECT thread_id FROM "chat"."workbench_messages" WHERE id = 'msg_in_dropped_reply'`,
@@ -382,9 +365,7 @@ describeIfDb("0025_workbench_threads_unique_key dedupe", () => {
       const childParentThreadId = await verify.unsafe(
         `SELECT parent_thread_id FROM "chat"."workbench_threads" WHERE id = 'thr_child_of_dropped_root'`,
       );
-      expect(String(childParentThreadId[0]?.["parent_thread_id"])).toBe(
-        "thr_root_old",
-      );
+      expect(String(childParentThreadId[0]?.["parent_thread_id"])).toBe("thr_root_old");
 
       // The reply unique index holds: a second reply row for the same
       // (tenant, workbench, parent_message_id) key is now rejected
@@ -407,9 +388,10 @@ describeIfDb("0025_workbench_threads_unique_key dedupe", () => {
 });
 
 describeIfDb("0026_workbench_threads_delivery_key dedupe", () => {
-  const scratchUrl = scratchUrlFor(
-    databaseUrl ?? "postgres://localhost:5432/unused",
-  ).replace("_chat_migrations_test", "_chat_migrations_delivery_dedupe_test");
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused").replace(
+    "_chat_migrations_test",
+    "_chat_migrations_delivery_dedupe_test",
+  );
   const scratchTarget = new URL(scratchUrl);
   const scratchDatabase = scratchTarget.pathname.replace(/^\//, "");
 
@@ -459,10 +441,9 @@ describeIfDb("0026_workbench_threads_delivery_key dedupe", () => {
       for (const migration of preDeliveryKeyMigrations) {
         await seed.begin(async (tx) => {
           await tx.unsafe(migration.sql);
-          await tx.unsafe(
-            `INSERT INTO "chat"."chat_migrations" (name) VALUES ($1)`,
-            [migration.name],
-          );
+          await tx.unsafe(`INSERT INTO "chat"."chat_migrations" (name) VALUES ($1)`, [
+            migration.name,
+          ]);
         });
       }
 
@@ -526,9 +507,7 @@ describeIfDb("0026_workbench_threads_delivery_key dedupe", () => {
           `WHERE tenant_id = 'tnt_ddedupe' AND workbench_id = 'wb_ddedupe' ` +
           `AND kind = 'delivery' AND run_ref = 'run_1'`,
       );
-      expect(deliveries.map((row) => String(row["id"]))).toEqual([
-        "thr_delivery_old",
-      ]);
+      expect(deliveries.map((row) => String(row["id"]))).toEqual(["thr_delivery_old"]);
 
       const nullRunRefRows = await verify.unsafe(
         `SELECT id FROM "chat"."workbench_threads" ` +
@@ -548,16 +527,12 @@ describeIfDb("0026_workbench_threads_delivery_key dedupe", () => {
       const messageThreadId = await verify.unsafe(
         `SELECT thread_id FROM "chat"."workbench_messages" WHERE id = 'msg_in_dropped_delivery'`,
       );
-      expect(String(messageThreadId[0]?.["thread_id"])).toBe(
-        "thr_delivery_old",
-      );
+      expect(String(messageThreadId[0]?.["thread_id"])).toBe("thr_delivery_old");
 
       const childParentThreadId = await verify.unsafe(
         `SELECT parent_thread_id FROM "chat"."workbench_threads" WHERE id = 'thr_child_of_dropped_delivery'`,
       );
-      expect(String(childParentThreadId[0]?.["parent_thread_id"])).toBe(
-        "thr_delivery_old",
-      );
+      expect(String(childParentThreadId[0]?.["parent_thread_id"])).toBe("thr_delivery_old");
 
       // The delivery unique index holds: a second delivery row for the
       // same (tenant, workbench, run_ref) key is now rejected rather
diff --git a/packages/chat/test/parts.test.ts b/packages/chat/test/parts.test.ts
index 7737396fba..2ccbe7488a 100644
--- a/packages/chat/test/parts.test.ts
+++ b/packages/chat/test/parts.test.ts
@@ -169,9 +169,7 @@ describe("Part schemas", () => {
   });
 
   test("parsePart throws a precise error for invalid data", () => {
-    expect(() => parsePart({ kind: "text", text: 42 })).toThrow(
-      /invalid chat part/,
-    );
+    expect(() => parsePart({ kind: "text", text: 42 })).toThrow(/invalid chat part/);
   });
 
   test("parsePart throws for completely malformed input", () => {
diff --git a/packages/chat/test/pins-routes.test.ts b/packages/chat/test/pins-routes.test.ts
index e3c8e96b21..f07ca7a158 100644
--- a/packages/chat/test/pins-routes.test.ts
+++ b/packages/chat/test/pins-routes.test.ts
@@ -13,19 +13,11 @@ function pinUrl(workbenchId: string, messageId: string) {
   return `/workbenches/${workbenchId}/messages/${messageId}/pin`;
 }
 
-async function pin(
-  app: ReturnType<typeof mountAs>,
-  workbenchId: string,
-  messageId: string,
-) {
+async function pin(app: ReturnType<typeof mountAs>, workbenchId: string, messageId: string) {
   return app.request(pinUrl(workbenchId, messageId), { method: "POST" });
 }
 
-async function unpin(
-  app: ReturnType<typeof mountAs>,
-  workbenchId: string,
-  messageId: string,
-) {
+async function unpin(app: ReturnType<typeof mountAs>, workbenchId: string, messageId: string) {
   return app.request(pinUrl(workbenchId, messageId), { method: "DELETE" });
 }
 
@@ -54,17 +46,14 @@ describe("pin routes — gating", () => {
 
     expect((await pin(app, workbench.id, "m1")).status).toBe(404);
     expect((await unpin(app, workbench.id, "m1")).status).toBe(404);
-    expect(
-      (await app.request(`/workbenches/${workbench.id}/pins`)).status,
-    ).toBe(404);
+    expect((await app.request(`/workbenches/${workbench.id}/pins`)).status).toBe(404);
   });
 
   test("a denied grant is rejected before any pin is stored", async () => {
     const store = createInMemoryPinStore();
     const deps = buildDeps({
       pins: store,
-      requireGrant: () => async (c) =>
-        c.json({ error: { code: "forbidden", message: "no" } }, 403),
+      requireGrant: () => async (c) => c.json({ error: { code: "forbidden", message: "no" } }, 403),
     });
     const app = mountAs(createChatRoutes(deps), "prn_alice");
     const workbenchId = "run_workbench1";
@@ -86,10 +75,7 @@ describe("pin routes — gating", () => {
     const app = mountAs(createChatRoutes(deps), "prn_alice");
     const { body } = await createWorkbench(app, { kind: "workbench" });
 
-    const otherApp = mountAs(
-      createChatRoutes(buildDeps({ pins: store })),
-      "prn_mallory",
-    );
+    const otherApp = mountAs(createChatRoutes(buildDeps({ pins: store })), "prn_mallory");
     expect((await pin(otherApp, body.id, "m1")).status).toBe(404);
   });
 
@@ -217,9 +203,7 @@ describe("pin routes — chat.pin SSE event", () => {
     const messageId = await sendAndGetMessageId(app, workbench.id);
 
     const received: ChatWorkbenchEvent[] = [];
-    workbenchSubscribers.subscribe(workbench.id, (event) =>
-      received.push(event),
-    );
+    workbenchSubscribers.subscribe(workbench.id, (event) => received.push(event));
 
     await pin(app, workbench.id, messageId);
     await unpin(app, workbench.id, messageId);
diff --git a/packages/chat/test/platform-adapter.test.ts b/packages/chat/test/platform-adapter.test.ts
index 6c0222d43f..ec5a7b712f 100644
--- a/packages/chat/test/platform-adapter.test.ts
+++ b/packages/chat/test/platform-adapter.test.ts
@@ -21,10 +21,7 @@
 // exercised without a real Postgres.
 
 import { beforeEach, describe, expect, mock, test } from "bun:test";
-import {
-  DefinitionProjectionMissingError,
-  WORKFLOW_SOURCE_ENTRY,
-} from "@corbits/workflows";
+import { DefinitionProjectionMissingError, WORKFLOW_SOURCE_ENTRY } from "@corbits/workflows";
 import type { DefinitionSourceResolution } from "@intx/hub-api";
 import {
   agentSession,
@@ -40,14 +37,8 @@ import type { EventCollectorRegistry, SidecarRouter } from "@intx/hub-sessions";
 import { workbenchLaunch } from "../src/schema";
 import type { CreateHubChatPlatformDeps } from "../src/platform-adapter";
 import { MODEL_UNAVAILABLE_CONSUMER_MESSAGE } from "../src/model-unavailable";
-import type {
-  RunTriggerClient,
-  TriggerWorkflowRunMailInput,
-} from "../src/run-trigger-client";
-import {
-  createCryptoProviderCache,
-  type CryptoProviderCache,
-} from "../src/crypto-cache";
+import type { RunTriggerClient, TriggerWorkflowRunMailInput } from "../src/run-trigger-client";
+import { createCryptoProviderCache, type CryptoProviderCache } from "../src/crypto-cache";
 
 const actualHubApi = await import("@intx/hub-api");
 
@@ -77,9 +68,7 @@ mock.module("@intx/hub-api", () => ({
 
 const actualDb = await import("@intx/db");
 
-type BuildCredentialDeliveryResult = Awaited<
-  ReturnType<typeof actualDb.buildCredentialDelivery>
->;
+type BuildCredentialDeliveryResult = Awaited<ReturnType<typeof actualDb.buildCredentialDelivery>>;
 
 let buildCredentialDeliveryResult: BuildCredentialDeliveryResult = {
   ok: true,
@@ -98,9 +87,7 @@ const DEFAULT_VISIBLE_OFFERINGS = [
     provider: { name: "anthropic" },
   },
 ];
-let visibleOfferings: typeof DEFAULT_VISIBLE_OFFERINGS = [
-  ...DEFAULT_VISIBLE_OFFERINGS,
-];
+let visibleOfferings: typeof DEFAULT_VISIBLE_OFFERINGS = [...DEFAULT_VISIBLE_OFFERINGS];
 const listVisibleOfferingsCalls: unknown[] = [];
 
 mock.module("@intx/db", () => ({
@@ -120,8 +107,7 @@ beforeEach(() => {
   listVisibleOfferingsCalls.length = 0;
 });
 
-const { createHubChatPlatform: buildHubChatPlatform } =
-  await import("../src/platform-adapter");
+const { createHubChatPlatform: buildHubChatPlatform } = await import("../src/platform-adapter");
 
 const PASSTHROUGH_CIPHER = {
   encrypt: async (plaintext: string) => plaintext,
@@ -143,10 +129,7 @@ function createFakeWorkflowAllocationService(): {
   const prepareCalls: unknown[] = [];
   return {
     prepareCalls,
-    async prepareProvisionedDeployment(args: {
-      anchorRunId: string;
-      deploymentDomain: string;
-    }) {
+    async prepareProvisionedDeployment(args: { anchorRunId: string; deploymentDomain: string }) {
       prepareCalls.push(args);
       return {
         anchorRunId: args.anchorRunId,
@@ -158,12 +141,9 @@ function createFakeWorkflowAllocationService(): {
   };
 }
 
-type FakeWorkflowAllocationService = ReturnType<
-  typeof createFakeWorkflowAllocationService
->;
+type FakeWorkflowAllocationService = ReturnType<typeof createFakeWorkflowAllocationService>;
 
-let lastAllocationService: FakeWorkflowAllocationService =
-  createFakeWorkflowAllocationService();
+let lastAllocationService: FakeWorkflowAllocationService = createFakeWorkflowAllocationService();
 
 function createFakeRepoStore(sha: string | null = "sha_test") {
   const resolveRefCalls: unknown[] = [];
@@ -196,17 +176,11 @@ function createHubChatPlatform(
 }
 
 function createPlatform(
-  deps: Omit<
-    Parameters<typeof createHubChatPlatform>[0],
-    "credentialCipher"
-  > & {
-    credentialCipher?: Parameters<
-      typeof createHubChatPlatform
-    >[0]["credentialCipher"];
+  deps: Omit<Parameters<typeof createHubChatPlatform>[0], "credentialCipher"> & {
+    credentialCipher?: Parameters<typeof createHubChatPlatform>[0]["credentialCipher"];
   },
 ) {
-  lastAllocationService =
-    deps.workflowAllocationService ?? createFakeWorkflowAllocationService();
+  lastAllocationService = deps.workflowAllocationService ?? createFakeWorkflowAllocationService();
   return createHubChatPlatform({
     ...deps,
     credentialCipher: deps.credentialCipher ?? PASSTHROUGH_CIPHER,
@@ -326,9 +300,7 @@ function createFakeDb(opts: {
    * `listInvitableDefinitions` performs. A row whose `parentId` is null
    * (or absent from this record) ends the chain.
    */
-  tenantRowsById?:
-    | Record<string, { id: string; parentId: string | null } | undefined>
-    | undefined;
+  tenantRowsById?: Record<string, { id: string; parentId: string | null } | undefined> | undefined;
   workbenchLaunchRow?:
     | {
         tenantId: string;
@@ -365,8 +337,7 @@ function createFakeDb(opts: {
    * fallback below derives one from that instead of touching every
    * call site.
    */
-  workflowRunLaunchSpecRow?:
-    { anchorRunId: string; sessionId: string } | undefined;
+  workflowRunLaunchSpecRow?: { anchorRunId: string; sessionId: string } | undefined;
 }) {
   const inserted: { table: unknown; values: unknown }[] = [];
   const updated: { table: unknown; values: unknown }[] = [];
@@ -382,10 +353,7 @@ function createFakeDb(opts: {
         // by reference (see below) — mutating it in place here is what lets a
         // test prove a write is actually visible to a later read, not just that
         // `update` was called with the right shape.
-        if (
-          table === workbenchLaunch &&
-          opts.workbenchLaunchRow !== undefined
-        ) {
+        if (table === workbenchLaunch && opts.workbenchLaunchRow !== undefined) {
           Object.assign(opts.workbenchLaunchRow, values as object);
         }
         return { where: async () => undefined };
@@ -413,21 +381,18 @@ function createFakeDb(opts: {
     query: {
       workflowRun: {
         findFirst: async (query?: { where?: unknown }) => {
-          const [id] =
-            query?.where !== undefined ? boundStringValues(query.where) : [];
+          const [id] = query?.where !== undefined ? boundStringValues(query.where) : [];
           if (
             opts.workflowRunRow !== undefined &&
             (id === undefined || id === opts.workflowRunRow.id)
           ) {
             return {
               ...opts.workflowRunRow,
-              definitionId:
-                opts.workflowRunRow.definitionId ?? opts.definitionId,
+              definitionId: opts.workflowRunRow.definitionId ?? opts.definitionId,
             };
           }
-          const insertedLaunch = inserted.findLast(
-            (row) => row.table === workbenchLaunch,
-          )?.values as
+          const insertedLaunch = inserted.findLast((row) => row.table === workbenchLaunch)
+            ?.values as
             | { currentRunId?: string; instanceId?: string; tenantId?: string }
             | undefined;
           const launch = (opts.workbenchLaunchRow ?? insertedLaunch) as
@@ -451,9 +416,9 @@ function createFakeDb(opts: {
               status: "pending",
             };
           }
-          const insertedRow = inserted.findLast(
-            (row) => row.table === workflowRun,
-          )?.values as typeof opts.workflowRunRow | undefined;
+          const insertedRow = inserted.findLast((row) => row.table === workflowRun)?.values as
+            | typeof opts.workflowRunRow
+            | undefined;
           if (insertedRow !== undefined) return insertedRow;
           // A run this fixture never configured: the freshly minted
           // `anchorRunId` a fake `prepareProvisionedDeployment` just
@@ -482,8 +447,7 @@ function createFakeDb(opts: {
       },
       agentSession: {
         findFirst: async (query?: { where?: unknown }) => {
-          const [id] =
-            query?.where !== undefined ? boundStringValues(query.where) : [];
+          const [id] = query?.where !== undefined ? boundStringValues(query.where) : [];
           return inserted.findLast(
             (row) =>
               row.table === agentSession &&
@@ -493,17 +457,15 @@ function createFakeDb(opts: {
       },
       workflowRunLaunchSpec: {
         findFirst: async (query?: { where?: unknown }) => {
-          const [id] =
-            query?.where !== undefined ? boundStringValues(query.where) : [];
+          const [id] = query?.where !== undefined ? boundStringValues(query.where) : [];
           if (opts.workflowRunLaunchSpecRow !== undefined) {
-            return id === undefined ||
-              id === opts.workflowRunLaunchSpecRow.anchorRunId
+            return id === undefined || id === opts.workflowRunLaunchSpecRow.anchorRunId
               ? opts.workflowRunLaunchSpecRow
               : undefined;
           }
-          const seededSession = inserted.find(
-            (row) => row.table === agentSession,
-          )?.values as { id: string } | undefined;
+          const seededSession = inserted.find((row) => row.table === agentSession)?.values as
+            | { id: string }
+            | undefined;
           if (seededSession === undefined) return undefined;
           return { anchorRunId: id, sessionId: seededSession.id };
         },
@@ -528,9 +490,7 @@ function createFakeDb(opts: {
         // least it — the single-row default mirrors that.
         findMany: async () =>
           opts.workflowDefinitionRows ??
-          (opts.workflowDefinitionRow !== undefined
-            ? [opts.workflowDefinitionRow]
-            : []),
+          (opts.workflowDefinitionRow !== undefined ? [opts.workflowDefinitionRow] : []),
       },
       tenant: {
         // `getAncestorChain` walks parent by parent, so a test that seeds
@@ -540,9 +500,7 @@ function createFakeDb(opts: {
         findFirst: async (args?: { where?: unknown }) => {
           if (opts.tenantRowsById === undefined) return opts.tenantRow;
           const [queriedId] = boundStringValues(args?.where);
-          return queriedId === undefined
-            ? undefined
-            : opts.tenantRowsById[queriedId];
+          return queriedId === undefined ? undefined : opts.tenantRowsById[queriedId];
         },
       },
     },
@@ -569,8 +527,7 @@ function createFakeDb(opts: {
           if (table === workflowDefinition) {
             return selectChain([
               {
-                assetId:
-                  opts.workflowDefinitionRow?.assetId ?? "ast_definition1",
+                assetId: opts.workflowDefinitionRow?.assetId ?? "ast_definition1",
               },
             ]);
           }
@@ -583,8 +540,7 @@ function createFakeDb(opts: {
                 const [definitionId] = boundStringValues(expression);
                 if (definitionId === undefined) return selectChain([]);
                 wireProjectionCalls.push(definitionId);
-                const projection =
-                  opts.wireProjectionsByDefinitionId?.[definitionId] ?? null;
+                const projection = opts.wireProjectionsByDefinitionId?.[definitionId] ?? null;
                 return selectChain([{ wireProjection: projection }]);
               },
             };
@@ -626,8 +582,7 @@ function createFakeDb(opts: {
             return selectChain([
               {
                 ...withCurrent,
-                currentRunId:
-                  withCurrent.currentRunId ?? withCurrent.instanceId,
+                currentRunId: withCurrent.currentRunId ?? withCurrent.instanceId,
                 priorRunIds: withCurrent.priorRunIds ?? [],
               },
             ]);
@@ -699,8 +654,7 @@ function createFakeEventCollectors(
     has: () => false,
     getStatus: () => undefined,
     getAccumulatedText: () => undefined,
-    getCurrentTurnId: (address: string) =>
-      busyAddresses.has(address) ? "turn_1" : null,
+    getCurrentTurnId: (address: string) => (busyAddresses.has(address) ? "turn_1" : null),
     getLastTurnId: () => undefined,
     dispatch: () => undefined,
   } as unknown as EventCollectorRegistry & {
@@ -740,9 +694,7 @@ function createFakeRunTrigger(): FakeRunTrigger {
   return fake;
 }
 
-function createFakeSidecarRouter(
-  opts: { routableAddresses?: string[] } = {},
-): SidecarRouter & {
+function createFakeSidecarRouter(opts: { routableAddresses?: string[] } = {}): SidecarRouter & {
   subscribeAgentCalls: { address: string }[];
   dispatchAgentEventCalls: { address: string; event: unknown }[];
   sendAgentUndeployCalls: { address: string; reason: string }[];
@@ -792,9 +744,7 @@ function createFakeSidecarRouter(
       if (index !== -1) routableAddresses.splice(index, 1);
     },
     getRoutableAddresses() {
-      return routableAll
-        ? ({ includes: () => true } as unknown as string[])
-        : routableAddresses;
+      return routableAll ? ({ includes: () => true } as unknown as string[]) : routableAddresses;
     },
     // Every launch and wake produces the run's `run.grants` frame before its
     // first mail. Always routable: the frame is sent after the deploy the
@@ -852,8 +802,7 @@ function inertProjection(
         agent: {
           systemPrompt,
           toolPackagePins,
-          modelSources:
-            model === null ? [] : [{ provider: "anthropic", model }],
+          modelSources: model === null ? [] : [{ provider: "anthropic", model }],
         },
       },
     },
@@ -930,9 +879,9 @@ describe("createHubChatPlatform", () => {
       workflowAllocationService: allocationService,
     });
 
-    await expect(
-      platform.ensureAwake("ins_workbench1@ten1.workbench.test"),
-    ).rejects.toThrow(deployError);
+    await expect(platform.ensureAwake("ins_workbench1@ten1.workbench.test")).rejects.toThrow(
+      deployError,
+    );
 
     // Interchange provisions on invite. The collector is Interchange's;
     // a failed prepare never opens one in chat.
@@ -1009,9 +958,9 @@ describe("createHubChatPlatform", () => {
       workflowAllocationService: allocationService,
     });
 
-    await expect(
-      platform.ensureAwake("ins_workbench1@ten1.workbench.test"),
-    ).rejects.toThrow(SessionLaunchError);
+    await expect(platform.ensureAwake("ins_workbench1@ten1.workbench.test")).rejects.toThrow(
+      SessionLaunchError,
+    );
 
     expect(db.deleted.some((row) => row.table === workflowRun)).toBe(false);
     const runUpdate = db.updated.find((row) => row.table === workflowRun);
@@ -1367,9 +1316,7 @@ describe("createHubChatPlatform", () => {
       deploymentDomain: string;
     };
     expect(prepared.anchorRunId).toBe(launched.instanceId);
-    expect(`${prepared.anchorRunId}@${prepared.deploymentDomain}`).toBe(
-      launched.address,
-    );
+    expect(`${prepared.anchorRunId}@${prepared.deploymentDomain}`).toBe(launched.address);
     expect(lastAllocationService.prepareCalls[0]).toMatchObject({
       entry: WORKFLOW_SOURCE_ENTRY,
       source: {
@@ -1379,12 +1326,8 @@ describe("createHubChatPlatform", () => {
       },
     });
 
-    expect(
-      db.inserted.find((row) => row.table === workflowRun),
-    ).toBeUndefined();
-    const launchInsert = db.inserted.find(
-      (row) => row.table === workbenchLaunch,
-    );
+    expect(db.inserted.find((row) => row.table === workflowRun)).toBeUndefined();
+    const launchInsert = db.inserted.find((row) => row.table === workbenchLaunch);
     expect(launchInsert?.values).toMatchObject({
       instanceId: launched.instanceId,
       currentRunId: launched.instanceId,
@@ -1429,9 +1372,7 @@ describe("createHubChatPlatform", () => {
     const launchInsertsAfterFirst = db.inserted.filter(
       (row) => row.table === workbenchLaunch,
     ).length;
-    const runInsertsAfterFirst = db.inserted.filter(
-      (row) => row.table === workflowRun,
-    ).length;
+    const runInsertsAfterFirst = db.inserted.filter((row) => row.table === workflowRun).length;
     expect(launchInsertsAfterFirst).toBe(1);
     expect(runInsertsAfterFirst).toBe(0);
 
@@ -1443,9 +1384,9 @@ describe("createHubChatPlatform", () => {
 
     expect(second.instanceId).toBe(first.instanceId);
     expect(second.address).toBe(first.address);
-    expect(
-      db.inserted.filter((row) => row.table === workbenchLaunch),
-    ).toHaveLength(launchInsertsAfterFirst);
+    expect(db.inserted.filter((row) => row.table === workbenchLaunch)).toHaveLength(
+      launchInsertsAfterFirst,
+    );
     expect(db.inserted.filter((row) => row.table === workflowRun)).toHaveLength(
       runInsertsAfterFirst,
     );
@@ -1712,12 +1653,9 @@ describe("createHubChatPlatform", () => {
       definitionId: "wfd_authored",
     });
 
-    const launchInsert = db.inserted.find(
-      (row) => row.table === workbenchLaunch,
-    );
+    const launchInsert = db.inserted.find((row) => row.table === workbenchLaunch);
     expect(
-      (launchInsert?.values as { foldedBody: { systemPrompt: string } })
-        .foldedBody.systemPrompt,
+      (launchInsert?.values as { foldedBody: { systemPrompt: string } }).foldedBody.systemPrompt,
     ).toBe("post-pin instructions");
   });
 
@@ -1990,9 +1928,7 @@ describe("createHubChatPlatform", () => {
     });
 
     const items = await platform.listInvitableDefinitions("ten_1");
-    expect(items).toEqual([
-      { id: "wfd_echo", name: "echo", description: "Echo" },
-    ]);
+    expect(items).toEqual([{ id: "wfd_echo", name: "echo", description: "Echo" }]);
   });
 
   test("listInvitableDefinitions walks the tenant ancestors, and a workbench's own definition shadows its parent's of the same name", async () => {
@@ -2087,12 +2023,9 @@ describe("createHubChatPlatform", () => {
     });
 
     const events: unknown[] = [];
-    const unsubscribe = platform.subscribeToWorkbench(
-      "ins_workbench1",
-      (event) => {
-        events.push(event);
-      },
-    );
+    const unsubscribe = platform.subscribeToWorkbench("ins_workbench1", (event) => {
+      events.push(event);
+    });
 
     // The lookup is async (`findFirst` resolves, then `.then` runs);
     // yield past both hops of the microtask queue.
@@ -2432,9 +2365,7 @@ describe("createHubChatPlatform", () => {
         eventCollectors: createFakeEventCollectors(),
       });
 
-      await expect(
-        platform.ensureAwake("ins_unknown@ten1.workbench.test"),
-      ).rejects.toThrow();
+      await expect(platform.ensureAwake("ins_unknown@ten1.workbench.test")).rejects.toThrow();
     });
   });
 
@@ -2623,9 +2554,7 @@ describe("createHubChatPlatform", () => {
           address: "agent1@ten1.workbench.test",
           principalId: "prin_agent1",
           definitionId: "wfd_agent1",
-          ...(workflowRunStatus !== undefined
-            ? { status: workflowRunStatus }
-            : {}),
+          ...(workflowRunStatus !== undefined ? { status: workflowRunStatus } : {}),
         },
         workflowDefinitionRow: {
           id: "wfd_agent1",
@@ -2665,12 +2594,9 @@ describe("createHubChatPlatform", () => {
         "agent1@ten1.workbench.test",
       );
 
-      const launchUpdate = db.updated.find(
-        (row) => row.table === workbenchLaunch,
-      );
+      const launchUpdate = db.updated.find((row) => row.table === workbenchLaunch);
       expect(
-        (launchUpdate?.values as { foldedBody: { systemPrompt: string } })
-          .foldedBody.systemPrompt,
+        (launchUpdate?.values as { foldedBody: { systemPrompt: string } }).foldedBody.systemPrompt,
       ).toBe("You are now a blunt, no-nonsense assistant.");
     });
 
@@ -2811,12 +2737,9 @@ describe("createHubChatPlatform", () => {
         "agent1@ten1.workbench.test",
       );
 
-      const launchUpdate = db.updated.find(
-        (row) => row.table === workbenchLaunch,
-      );
+      const launchUpdate = db.updated.find((row) => row.table === workbenchLaunch);
       expect(
-        (launchUpdate?.values as { foldedBody: { systemPrompt: string } })
-          .foldedBody.systemPrompt,
+        (launchUpdate?.values as { foldedBody: { systemPrompt: string } }).foldedBody.systemPrompt,
       ).toBe("You are now a blunt, no-nonsense assistant.");
     });
   });
@@ -2832,8 +2755,7 @@ describe("createHubChatPlatform", () => {
 // prove the automatic reconciliation added ahead of `wakeByAddress`'s
 // already-routable return and `sendMail`'s choke point.
 describe("createHubChatPlatform stale-definition reconciliation", () => {
-  const STALE_SYSTEM_PROMPT =
-    "the openai adapter: invalid quirks: default must be removed";
+  const STALE_SYSTEM_PROMPT = "the openai adapter: invalid quirks: default must be removed";
   const FIXED_SYSTEM_PROMPT = "I am working in this workbench.";
 
   // CL-6452: every deploy freezes a per-run clone of the agent's
@@ -3098,9 +3020,7 @@ describe("createHubChatPlatform stale-definition reconciliation", () => {
 
     await platform.ensureAwake("run_standalone@ten1.workbench.test");
 
-    expect(
-      db.updated.find((row) => row.table === workbenchLaunch),
-    ).toBeUndefined();
+    expect(db.updated.find((row) => row.table === workbenchLaunch)).toBeUndefined();
   });
 });
 
@@ -3346,9 +3266,7 @@ describe("createHubChatPlatform inference-source rotation reconciliation", () =>
         currentRunId: "run_live",
         foldedBody: FOLDED_BODY,
         sourcesDigest:
-          opts.deployedOfferingIds === null
-            ? null
-            : opts.deployedOfferingIds.join("\0"),
+          opts.deployedOfferingIds === null ? null : opts.deployedOfferingIds.join("\0"),
       },
       wireProjectionsByDefinitionId: {
         wfd_run_clone: inertProjection({
@@ -3377,7 +3295,8 @@ describe("createHubChatPlatform inference-source rotation reconciliation", () =>
 
   function repointedLaunch(db: ReturnType<typeof createFakeDb>) {
     return db.updated.find((row) => row.table === workbenchLaunch)?.values as
-      { currentRunId: string; sourcesDigest: string } | undefined;
+      | { currentRunId: string; sourcesDigest: string }
+      | undefined;
   }
 
   test("a routable run deployed with offerings the catalog has since rotated is relaunched on the new chain", async () => {
@@ -3413,9 +3332,7 @@ describe("createHubChatPlatform inference-source rotation reconciliation", () =>
 
     await platform.ensureAwake("run_live@ten1.workbench.test");
 
-    const launchWrites = db.updated.filter(
-      (row) => row.table === workbenchLaunch,
-    );
+    const launchWrites = db.updated.filter((row) => row.table === workbenchLaunch);
     expect(launchWrites).toHaveLength(1);
     expect(launchWrites[0]?.values).toEqual({
       sourcesDigest: "off_fresh",
@@ -3493,9 +3410,7 @@ describe("createHubChatPlatform pinned-tool-package connect reconciliation", ()
     defaultSource: "off_1",
   };
 
-  function createManusPinFixture(opts: {
-    toolPackagePins: { name: string; version: string }[];
-  }) {
+  function createManusPinFixture(opts: { toolPackagePins: { name: string; version: string }[] }) {
     resolveDefinitionSourcesResult = {
       ok: true,
       materials: [],
@@ -3606,7 +3521,8 @@ describe("createHubChatPlatform pinned-tool-package connect reconciliation", ()
 
   function repointedLaunch(db: ReturnType<typeof createFakeDb>) {
     return db.updated.find((row) => row.table === workbenchLaunch)?.values as
-      { currentRunId: string } | undefined;
+      | { currentRunId: string }
+      | undefined;
   }
 
   test("connecting manus after a live launch relaunches with the pin", async () => {
@@ -3618,9 +3534,7 @@ describe("createHubChatPlatform pinned-tool-package connect reconciliation", ()
     expect(repointedLaunch(db)).toBeUndefined();
     expect(lastAllocationService.prepareCalls).toHaveLength(0);
 
-    const swept = await platform.reconcilePinnedToolPackages("ten_1", [
-      "@corbits/manus-tools",
-    ]);
+    const swept = await platform.reconcilePinnedToolPackages("ten_1", ["@corbits/manus-tools"]);
 
     // Persist-only (stamp a pin onto the launch row and leave
     // `currentRunId` as `run_live`) is the bug: the sidecar keeps the
@@ -3645,9 +3559,7 @@ describe("createHubChatPlatform pinned-tool-package connect reconciliation", ()
       toolPackagePins: [],
     });
 
-    const swept = await platform.reconcilePinnedToolPackages("ten_1", [
-      "@corbits/manus-tools",
-    ]);
+    const swept = await platform.reconcilePinnedToolPackages("ten_1", ["@corbits/manus-tools"]);
 
     expect(swept).toEqual({ scanned: 1, relaunched: 0 });
     expect(repointedLaunch(db)).toBeUndefined();
diff --git a/packages/chat/test/reactions-routes.test.ts b/packages/chat/test/reactions-routes.test.ts
index 690510b624..651eba4363 100644
--- a/packages/chat/test/reactions-routes.test.ts
+++ b/packages/chat/test/reactions-routes.test.ts
@@ -59,17 +59,14 @@ describe("reaction routes — gating", () => {
     const store = createInMemoryReactionStore();
     const deps = buildDeps({
       reactions: store,
-      requireGrant: () => async (c) =>
-        c.json({ error: { code: "forbidden", message: "no" } }, 403),
+      requireGrant: () => async (c) => c.json({ error: { code: "forbidden", message: "no" } }, 403),
     });
     const app = mountAs(createChatRoutes(deps), "prn_alice");
     const workbenchId = "run_workbench1";
 
     const response = await toggle(app, workbenchId, "m1", "👍");
     expect(response.status).toBe(403);
-    expect(
-      await store.listReactionsForMessages("tnt_1", workbenchId, ["m1"]),
-    ).toHaveLength(0);
+    expect(await store.listReactionsForMessages("tnt_1", workbenchId, ["m1"])).toHaveLength(0);
   });
 
   test("an unknown workbench id 404s rather than accepting a reaction into nowhere", async () => {
@@ -119,9 +116,9 @@ describe("reaction routes — gating", () => {
 
     const response = await toggle(app, workbench.id, "m_ghost", "👍");
     expect(response.status).toBe(404);
-    expect(
-      await store.listReactionsForMessages("tnt_1", workbench.id, ["m_ghost"]),
-    ).toHaveLength(0);
+    expect(await store.listReactionsForMessages("tnt_1", workbench.id, ["m_ghost"])).toHaveLength(
+      0,
+    );
   });
 });
 
@@ -195,9 +192,7 @@ describe("reaction routes — the message wire type carries reactions", () => {
         reactions?: { emoji: string; count: number; reactedByMe: boolean }[];
       }[];
     };
-    expect(afterBody.items[0]?.reactions).toEqual([
-      { emoji: "👀", count: 1, reactedByMe: true },
-    ]);
+    expect(afterBody.items[0]?.reactions).toEqual([{ emoji: "👀", count: 1, reactedByMe: true }]);
   });
 
   test("without a reactions store, the reactions field is simply absent", async () => {
@@ -228,9 +223,7 @@ describe("reaction routes — chat.reaction SSE event", () => {
     const messageId = await sendAndGetMessageId(app, workbench.id);
 
     const received: ChatWorkbenchEvent[] = [];
-    workbenchSubscribers.subscribe(workbench.id, (event) =>
-      received.push(event),
-    );
+    workbenchSubscribers.subscribe(workbench.id, (event) => received.push(event));
 
     await toggle(app, workbench.id, messageId, "🚀");
 
diff --git a/packages/chat/test/reactions.drizzle.test.ts b/packages/chat/test/reactions.drizzle.test.ts
index 9095404597..4b297731c4 100644
--- a/packages/chat/test/reactions.drizzle.test.ts
+++ b/packages/chat/test/reactions.drizzle.test.ts
@@ -34,9 +34,7 @@ const TENANT = "tnt_1";
 const WORKBENCH = "run_workbench1";
 
 describeIfDb("createDrizzleReactionStore: concurrent toggleReaction", () => {
-  const scratchUrl = scratchUrlFor(
-    databaseUrl ?? "postgres://localhost:5432/unused",
-  );
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused");
   const scratchTarget = new URL(scratchUrl);
   const scratchDatabase = scratchTarget.pathname.replace(/^\//, "");
 
@@ -97,9 +95,7 @@ describeIfDb("createDrizzleReactionStore: concurrent toggleReaction", () => {
       const outcomes = [first.added, second.added].sort();
       expect(outcomes).toEqual([false, true]);
 
-      const rows = await store.listReactionsForMessages(TENANT, WORKBENCH, [
-        "m_race",
-      ]);
+      const rows = await store.listReactionsForMessages(TENANT, WORKBENCH, ["m_race"]);
       expect(rows).toHaveLength(0);
     } finally {
       await sql.end();
@@ -125,9 +121,7 @@ describeIfDb("createDrizzleReactionStore: concurrent toggleReaction", () => {
       );
       expect(results.every((result) => result.added)).toBe(true);
 
-      const rows = await store.listReactionsForMessages(TENANT, WORKBENCH, [
-        "m_race_multi",
-      ]);
+      const rows = await store.listReactionsForMessages(TENANT, WORKBENCH, ["m_race_multi"]);
       expect(rows).toHaveLength(5);
     } finally {
       await sql.end();
diff --git a/packages/chat/test/reactions.test.ts b/packages/chat/test/reactions.test.ts
index 90b5651c5c..6aa8b0ce53 100644
--- a/packages/chat/test/reactions.test.ts
+++ b/packages/chat/test/reactions.test.ts
@@ -26,9 +26,7 @@ describe("ReactionStore — toggle semantics", () => {
     });
     expect(result.added).toBe(true);
 
-    const rows = await store.listReactionsForMessages(TENANT, WORKBENCH, [
-      "m1",
-    ]);
+    const rows = await store.listReactionsForMessages(TENANT, WORKBENCH, ["m1"]);
     expect(rows).toHaveLength(1);
     expect(rows[0]).toMatchObject({ emoji: "👍", principalId: "prn_alice" });
   });
@@ -46,9 +44,7 @@ describe("ReactionStore — toggle semantics", () => {
     const second = await store.toggleReaction(input);
     expect(second.added).toBe(false);
 
-    const rows = await store.listReactionsForMessages(TENANT, WORKBENCH, [
-      "m1",
-    ]);
+    const rows = await store.listReactionsForMessages(TENANT, WORKBENCH, ["m1"]);
     expect(rows).toHaveLength(0);
   });
 
@@ -69,9 +65,7 @@ describe("ReactionStore — toggle semantics", () => {
       principalId: "prn_bob",
     });
 
-    const rows = await store.listReactionsForMessages(TENANT, WORKBENCH, [
-      "m1",
-    ]);
+    const rows = await store.listReactionsForMessages(TENANT, WORKBENCH, ["m1"]);
     expect(rows).toHaveLength(2);
   });
 
@@ -92,11 +86,7 @@ describe("ReactionStore — toggle semantics", () => {
       principalId: "prn_alice",
     });
 
-    const tenant1Rows = await store.listReactionsForMessages(
-      "tnt_1",
-      WORKBENCH,
-      ["m1"],
-    );
+    const tenant1Rows = await store.listReactionsForMessages("tnt_1", WORKBENCH, ["m1"]);
     expect(tenant1Rows).toHaveLength(1);
     expect(tenant1Rows[0]?.tenantId).toBe("tnt_1");
   });
@@ -118,11 +108,7 @@ describe("ReactionStore — toggle semantics", () => {
       principalId: "prn_bob",
     });
 
-    const rows = await store.listReactionsForMessages(TENANT, WORKBENCH, [
-      "m1",
-      "m2",
-      "m3",
-    ]);
+    const rows = await store.listReactionsForMessages(TENANT, WORKBENCH, ["m1", "m2", "m3"]);
     expect(rows.map((row) => row.messageId).sort()).toEqual(["m1", "m2"]);
   });
 
@@ -156,9 +142,7 @@ describe("ReactionStore — toggle semantics", () => {
     ]);
 
     expect([first.added, second.added]).toEqual([true, false]);
-    const rows = await store.listReactionsForMessages(TENANT, WORKBENCH, [
-      "m_race",
-    ]);
+    const rows = await store.listReactionsForMessages(TENANT, WORKBENCH, ["m_race"]);
     expect(rows).toHaveLength(0);
   });
 });
@@ -226,11 +210,7 @@ describe("aggregateReactions / aggregateReactionsByMessage", () => {
       },
     ];
     const byMessage = aggregateReactionsByMessage(rows, "prn_bob");
-    expect(byMessage.get("m1")).toEqual([
-      { emoji: "👍", count: 1, reactedByMe: false },
-    ]);
-    expect(byMessage.get("m2")).toEqual([
-      { emoji: "🚀", count: 1, reactedByMe: false },
-    ]);
+    expect(byMessage.get("m1")).toEqual([{ emoji: "👍", count: 1, reactedByMe: false }]);
+    expect(byMessage.get("m2")).toEqual([{ emoji: "🚀", count: 1, reactedByMe: false }]);
   });
 });
diff --git a/packages/chat/test/read-state.drizzle.test.ts b/packages/chat/test/read-state.drizzle.test.ts
index d4d7797034..e14d5d0033 100644
--- a/packages/chat/test/read-state.drizzle.test.ts
+++ b/packages/chat/test/read-state.drizzle.test.ts
@@ -31,9 +31,7 @@ const WORKBENCH = "run_workbench1";
 const PRINCIPAL = "prn_alice";
 
 describeIfDb("createDrizzleChatStore: putReadState monotonicity", () => {
-  const scratchUrl = scratchUrlFor(
-    databaseUrl ?? "postgres://localhost:5432/unused",
-  );
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused");
   const scratchTarget = new URL(scratchUrl);
   const scratchDatabase = scratchTarget.pathname.replace(/^\//, "");
 
@@ -89,9 +87,7 @@ describeIfDb("createDrizzleChatStore: putReadState monotonicity", () => {
       });
 
       expect(result.lastSeenId).toBe("mail_2");
-      expect(result.lastSeenCreatedAt).toEqual(
-        new Date("2026-01-02T00:00:00.000Z"),
-      );
+      expect(result.lastSeenCreatedAt).toEqual(new Date("2026-01-02T00:00:00.000Z"));
 
       const stored = await store.getReadState(TENANT, WORKBENCH, PRINCIPAL);
       expect(stored?.lastSeenId).toBe("mail_2");
diff --git a/packages/chat/test/relaunch-close.test.ts b/packages/chat/test/relaunch-close.test.ts
index d7bff0669e..513e114723 100644
--- a/packages/chat/test/relaunch-close.test.ts
+++ b/packages/chat/test/relaunch-close.test.ts
@@ -16,10 +16,7 @@ import { createCryptoProviderCache } from "../src/crypto-cache";
 import { agentSession } from "@intx/db/schema";
 import { workbenchLaunch } from "../src/schema";
 import { createHubChatPlatform } from "../src/platform-adapter";
-import {
-  createRelaunchNoticePoster,
-  relaunchNoticeText,
-} from "../src/relaunch-notice";
+import { createRelaunchNoticePoster, relaunchNoticeText } from "../src/relaunch-notice";
 
 const FOLDED_BODY = {
   systemPrompt: "be helpful",
@@ -73,9 +70,7 @@ function createFakeDb(opts: {
       sessionMail: {
         findFirst: async ({ where }: { where: unknown }) => {
           const [id, sessionId] = comparedValues(where);
-          return opts.mail.find(
-            (row) => row.id === id && row.sessionId === sessionId,
-          );
+          return opts.mail.find((row) => row.id === id && row.sessionId === sessionId);
         },
       },
       // CL-7481: `resolveRunSessionIdOrThrow` reads the launch spec by
@@ -111,8 +106,7 @@ function createFakeDb(opts: {
                   : [];
               }
               if (table !== workbenchLaunch) return [];
-              return value === opts.launch.instanceId ||
-                value === opts.launch.currentRunId
+              return value === opts.launch.instanceId || value === opts.launch.currentRunId
                 ? [opts.launch]
                 : [];
             },
@@ -193,14 +187,9 @@ describe("fetchBlob across a relaunch", () => {
       mail: [{ id: "mail_1", sessionId: "ses_prin_dead", raw: RAW_MAIL }],
     });
 
-    const body = await createPlatform(db).fetchBlob(
-      "ins_room1",
-      "blob_mail_1_1",
-    );
+    const body = await createPlatform(db).fetchBlob("ins_room1", "blob_mail_1_1");
 
-    expect(new TextDecoder().decode(body as Uint8Array)).toContain(
-      "the receipt you asked for",
-    );
+    expect(new TextDecoder().decode(body as Uint8Array)).toContain("the receipt you asked for");
   });
 
   test("a blob on no session this participant ever held is still refused", async () => {
@@ -210,9 +199,9 @@ describe("fetchBlob across a relaunch", () => {
       mail: [{ id: "mail_1", sessionId: "ses_prin_stranger", raw: RAW_MAIL }],
     });
 
-    await expect(
-      createPlatform(db).fetchBlob("ins_room1", "blob_mail_1_1"),
-    ).rejects.toThrow('No mail "mail_1"');
+    await expect(createPlatform(db).fetchBlob("ins_room1", "blob_mail_1_1")).rejects.toThrow(
+      'No mail "mail_1"',
+    );
   });
 
   test("a retired run whose row is gone is skipped, not fatal", async () => {
@@ -225,14 +214,9 @@ describe("fetchBlob across a relaunch", () => {
       mail: [{ id: "mail_1", sessionId: "ses_prin_dead", raw: RAW_MAIL }],
     });
 
-    const body = await createPlatform(db).fetchBlob(
-      "ins_room1",
-      "blob_mail_1_1",
-    );
+    const body = await createPlatform(db).fetchBlob("ins_room1", "blob_mail_1_1");
 
-    expect(new TextDecoder().decode(body as Uint8Array)).toContain(
-      "the receipt you asked for",
-    );
+    expect(new TextDecoder().decode(body as Uint8Array)).toContain("the receipt you asked for");
   });
 });
 
diff --git a/packages/chat/test/room-access.test.ts b/packages/chat/test/room-access.test.ts
index 962258bb99..e4516c78e8 100644
--- a/packages/chat/test/room-access.test.ts
+++ b/packages/chat/test/room-access.test.ts
@@ -9,13 +9,7 @@
 import { describe, expect, test } from "bun:test";
 
 import { createChatRoutes } from "../src/routes";
-import {
-  buildDeps,
-  createWorkbench,
-  mountAs,
-  sendText,
-  TENANT,
-} from "./test-support";
+import { buildDeps, createWorkbench, mountAs, sendText, TENANT } from "./test-support";
 
 describe("room access", () => {
   test("a bench member opens a bench-visible workbench with no explicit invite", async () => {
@@ -88,12 +82,8 @@ describe("room access", () => {
     const response = await sendText(app, body.id, "hello room");
 
     expect(response.status).toBe(201);
-    expect(grantChecks).toEqual([
-      { resource: `room:${body.id}`, action: "write" },
-    ]);
-    expect(
-      grantChecks.some((check) => check.resource.startsWith("workflow-run")),
-    ).toBe(false);
+    expect(grantChecks).toEqual([{ resource: `room:${body.id}`, action: "write" }]);
+    expect(grantChecks.some((check) => check.resource.startsWith("workflow-run"))).toBe(false);
   });
 
   test("inviting a person records them as a human participant, unblocking a members-only flip", async () => {
@@ -140,15 +130,11 @@ describe("room access", () => {
 
     // `chat/participants` still carries only the mention handle — the
     // access decision above never consulted it.
-    const settingsResponse = await asAlice.request(
-      `/workbenches/${body.id}/settings`,
-    );
+    const settingsResponse = await asAlice.request(`/workbenches/${body.id}/settings`);
     const settingsBody = (await settingsResponse.json()) as {
       participants: { address: string; handle: string }[];
     };
-    expect(settingsBody.participants).toEqual([
-      { address: "prn_bob", handle: "bob" },
-    ]);
+    expect(settingsBody.participants).toEqual([{ address: "prn_bob", handle: "bob" }]);
   });
 
   test("a bench member never invited into a members-only workbench is still denied after another person's invite", async () => {
diff --git a/packages/chat/test/room-activity.drizzle.test.ts b/packages/chat/test/room-activity.drizzle.test.ts
index ee45f9a6ea..51115ecf5f 100644
--- a/packages/chat/test/room-activity.drizzle.test.ts
+++ b/packages/chat/test/room-activity.drizzle.test.ts
@@ -35,14 +35,10 @@ const QUIET = "run_quiet";
 const EMPTY = "run_empty";
 
 describeIfDb("createDrizzleRoomMessageStore: listActivity", () => {
-  const scratchUrl = scratchUrlFor(
-    databaseUrl ?? "postgres://localhost:5432/unused",
-  );
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused");
   const scratchDatabase = new URL(scratchUrl).pathname.replace(/^\//, "");
 
-  async function withMaintenance(
-    run: (sql: postgres.Sql) => Promise<void>,
-  ): Promise<void> {
+  async function withMaintenance(run: (sql: postgres.Sql) => Promise<void>): Promise<void> {
     const maintenanceUrl = new URL(scratchUrl);
     maintenanceUrl.pathname = "/postgres";
     const maintenance = postgres(maintenanceUrl.toString(), {
@@ -74,12 +70,7 @@ describeIfDb("createDrizzleRoomMessageStore: listActivity", () => {
     const sql = postgres(scratchUrl, { max: 5, onnotice: () => undefined });
     try {
       const store = createDrizzleRoomMessageStore(drizzle(sql));
-      const post = (
-        tenantId: string,
-        workbenchId: string,
-        id: string,
-        text: string,
-      ) =>
+      const post = (tenantId: string, workbenchId: string, id: string, text: string) =>
         store.insertMessage({
           id,
           tenantId,
diff --git a/packages/chat/test/room-writes-direct.test.ts b/packages/chat/test/room-writes-direct.test.ts
index b6ab8dda4e..d441f369c2 100644
--- a/packages/chat/test/room-writes-direct.test.ts
+++ b/packages/chat/test/room-writes-direct.test.ts
@@ -33,9 +33,7 @@ async function chatWithAnAgent() {
       return (...args: unknown[]) => {
         calls.push(String(property));
         if (refuseCalls) {
-          throw new Error(
-            `the write path called the platform: ${String(property)}`,
-          );
+          throw new Error(`the write path called the platform: ${String(property)}`);
         }
         return (value as (...a: unknown[]) => unknown).apply(target, args);
       };
@@ -104,9 +102,7 @@ describe("a message POST", () => {
     // itself must not notice.
     await settleFanout();
 
-    const listed = await chat.app.request(
-      `/workbenches/${chat.workbenchId}/messages`,
-    );
+    const listed = await chat.app.request(`/workbenches/${chat.workbenchId}/messages`);
     const body = (await listed.json()) as {
       items: { id: string; parts: { kind: string; text?: string }[] }[];
     };
diff --git a/packages/chat/test/routes.test.ts b/packages/chat/test/routes.test.ts
index def629d97d..b6a83be4fb 100644
--- a/packages/chat/test/routes.test.ts
+++ b/packages/chat/test/routes.test.ts
@@ -117,8 +117,7 @@ describe("POST /workbenches", () => {
 
   test("a denied grant is rejected before any workbench is created", async () => {
     const deps = buildDeps({
-      requireGrant: () => async (c) =>
-        c.json({ error: { code: "forbidden", message: "no" } }, 403),
+      requireGrant: () => async (c) => c.json({ error: { code: "forbidden", message: "no" } }, 403),
     });
     const app = mountAs(createChatRoutes(deps), "prn_alice");
 
@@ -149,9 +148,7 @@ describe("POST /workbenches", () => {
     const deliveries: (() => Promise<void>)[] = [];
     const deps = buildDeps({
       platform: fakePlatform({
-        invitable: [
-          { id: "wfd_assist", name: "assistant", description: "Myra" },
-        ],
+        invitable: [{ id: "wfd_assist", name: "assistant", description: "Myra" }],
       }),
       runPostMintDelivery: (work) => {
         deliveries.push(work);
@@ -168,9 +165,7 @@ describe("POST /workbenches", () => {
     // are durable while timeline delivery and pre-warming remain queued.
     expect(response.status).toBe(201);
     expect(body.title).toBe("Myra");
-    expect(body.participants).toEqual([
-      { address: "ins_invited1@acme.example", handle: "myra" },
-    ]);
+    expect(body.participants).toEqual([{ address: "ins_invited1@acme.example", handle: "myra" }]);
     expect(deliveries).toHaveLength(1);
     await deliveries[0]?.();
 
@@ -197,9 +192,7 @@ describe("POST /workbenches", () => {
 
     expect(response.status).toBe(201);
     expect(body.kind).toBe("chat");
-    expect(body.participants).toEqual([
-      { address: "ins_invited1@acme.example", handle: "echo" },
-    ]);
+    expect(body.participants).toEqual([{ address: "ins_invited1@acme.example", handle: "echo" }]);
     await deliveries[0]?.();
 
     const settled = await deps.store.getWorkbenchSettings(TENANT.id, body.id);
@@ -227,9 +220,7 @@ describe("POST /workbenches", () => {
     // is posted straight onto the chat's own timeline under the agent's
     // run, so the room opens with a hello without waiting on an
     // inference turn.
-    const greeting = timeline.find((message) =>
-      message.parts.some((part) => part.kind === "text"),
-    );
+    const greeting = timeline.find((message) => message.parts.some((part) => part.kind === "text"));
     expect(greeting?.workbenchId).toBe(body.id);
     expect(greeting?.runId).toBe("ins_invited1");
     expect(greeting?.sender.address).toBe("ins_invited1@acme.example");
@@ -252,9 +243,7 @@ describe("POST /workbenches", () => {
       platform: fakePlatform({
         invitable: [], // the stale/pre-fetched snapshot misses it
         resolveDefinitionNameSource: async (definitionId) =>
-          definitionId === "wfd_echo"
-            ? { name: "echo", description: "Myra" }
-            : undefined,
+          definitionId === "wfd_echo" ? { name: "echo", description: "Myra" } : undefined,
       }),
       runPostMintDelivery: (work) => {
         deliveries.push(work);
@@ -312,9 +301,7 @@ describe("POST /workbenches", () => {
     // The 201 carries a joined agent, but nothing has been deployed for
     // it yet: host and invite are mints, and the pre-warm is deferred.
     expect(response.status).toBe(201);
-    expect(body.participants).toEqual([
-      { address: "ins_invited1@acme.example", handle: "echo" },
-    ]);
+    expect(body.participants).toEqual([{ address: "ins_invited1@acme.example", handle: "echo" }]);
     const platform = deps.platform as ReturnType<typeof fakePlatform>;
     expect(platform.ensureAwakeCalls).toEqual([]);
 
@@ -363,12 +350,8 @@ describe("POST /workbenches", () => {
       error: { code: string; userMessage: string };
     };
     expect(errorBody.error.code).toBe("not_launchable");
-    expect(errorBody.error.userMessage).toBe(
-      "This agent's model isn't available here.",
-    );
-    expect(errorBody.error.userMessage).not.toMatch(
-      /cannot resolve an inference/,
-    );
+    expect(errorBody.error.userMessage).toBe("This agent's model isn't available here.");
+    expect(errorBody.error.userMessage).not.toMatch(/cannot resolve an inference/);
     expect(errorBody.error.userMessage).not.toMatch(/HTTP/);
 
     // No server compensation: the tenant is client-minted through
@@ -416,8 +399,7 @@ describe("POST /workbenches", () => {
     const deps = buildDeps({
       platform: fakePlatform({
         invitable: [{ id: "wfd_echo", name: "Echo" }],
-        launchInvite: () =>
-          Promise.reject(new Error("blocked: too many @mentions; max 5")),
+        launchInvite: () => Promise.reject(new Error("blocked: too many @mentions; max 5")),
       }),
     });
     const app = mountAs(createChatRoutes(deps), "prn_alice");
@@ -579,9 +561,7 @@ describe("POST /workbenches — chat with a person (DM)", () => {
 
     expect(response.status).toBe(201);
     expect(body.title).toBe("prn_bob");
-    expect(body.participants).toEqual([
-      { address: "prn_bob", handle: "prn_bob" },
-    ]);
+    expect(body.participants).toEqual([{ address: "prn_bob", handle: "prn_bob" }]);
   });
 
   test("rejects a chat with both a definitionId and a principalId", async () => {
@@ -768,12 +748,8 @@ describe("POST /workbenches/:id/invite", () => {
       error: { code: string; userMessage: string };
     };
     expect(errorBody.error.code).toBe("not_launchable");
-    expect(errorBody.error.userMessage).toBe(
-      "This agent's model isn't available here.",
-    );
-    expect(errorBody.error.userMessage).not.toMatch(
-      /No launchable inference source/,
-    );
+    expect(errorBody.error.userMessage).toBe("This agent's model isn't available here.");
+    expect(errorBody.error.userMessage).not.toMatch(/No launchable inference source/);
   });
 
   test("a definition with no stored launch body returns 409, not 500", async () => {
@@ -930,15 +906,12 @@ describe("DELETE /workbenches/:id/participants/:address", () => {
       participants: ["prn_bob"],
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/participants/prn_bob`,
-      { method: "DELETE" },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/participants/prn_bob`, {
+      method: "DELETE",
+    });
 
     expect(response.status).toBe(200);
-    const settingsResponse = await app.request(
-      `/workbenches/${workbench.id}/settings`,
-    );
+    const settingsResponse = await app.request(`/workbenches/${workbench.id}/settings`);
     const settingsBody = (await settingsResponse.json()) as {
       participants: { address: string }[];
     };
@@ -975,9 +948,7 @@ describe("DELETE /workbenches/:id/participants/:address", () => {
     expect(released).toEqual([
       { address: "ins_invited1@acme.example", reason: "participant-removed" },
     ]);
-    const settingsResponse = await app.request(
-      `/workbenches/${workbench.id}/settings`,
-    );
+    const settingsResponse = await app.request(`/workbenches/${workbench.id}/settings`);
     const settingsBody = (await settingsResponse.json()) as {
       participants: { address: string }[];
     };
@@ -1011,10 +982,9 @@ describe("DELETE /workbenches/:id/participants/:address", () => {
 
   test("404s for an unknown workbench", async () => {
     const app = mountAs(createChatRoutes(buildDeps()), "prn_alice");
-    const response = await app.request(
-      "/workbenches/ins_missing/participants/prn_bob",
-      { method: "DELETE" },
-    );
+    const response = await app.request("/workbenches/ins_missing/participants/prn_bob", {
+      method: "DELETE",
+    });
     expect(response.status).toBe(404);
   });
 
@@ -1025,10 +995,9 @@ describe("DELETE /workbenches/:id/participants/:address", () => {
       name: "Test Workbench",
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/participants/%E0%A4%A`,
-      { method: "DELETE" },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/participants/%E0%A4%A`, {
+      method: "DELETE",
+    });
     expect(response.status).toBe(400);
   });
 
@@ -1039,10 +1008,9 @@ describe("DELETE /workbenches/:id/participants/:address", () => {
       name: "Test Workbench",
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/participants/prn_ghost`,
-      { method: "DELETE" },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/participants/prn_ghost`, {
+      method: "DELETE",
+    });
     expect(response.status).toBe(404);
   });
 
@@ -1057,9 +1025,7 @@ describe("DELETE /workbenches/:id/participants/:address", () => {
     });
 
     const response = await app.request(
-      `/workbenches/${chat.id}/participants/${encodeURIComponent(
-        "ins_invited1@acme.example",
-      )}`,
+      `/workbenches/${chat.id}/participants/${encodeURIComponent("ins_invited1@acme.example")}`,
       { method: "DELETE" },
     );
 
@@ -1082,25 +1048,22 @@ describe("DELETE /workbenches/:id/participants/:address", () => {
       principalId: "prn_bob",
     });
 
-    const response = await app.request(
-      `/workbenches/${chat.id}/participants/prn_bob`,
-      { method: "DELETE" },
-    );
+    const response = await app.request(`/workbenches/${chat.id}/participants/prn_bob`, {
+      method: "DELETE",
+    });
 
     expect(response.status).toBe(409);
   });
 
   test("a denied grant is rejected before any participant is removed", async () => {
     const deps = buildDeps({
-      requireGrant: () => async (c) =>
-        c.json({ error: { code: "forbidden", message: "no" } }, 403),
+      requireGrant: () => async (c) => c.json({ error: { code: "forbidden", message: "no" } }, 403),
     });
     const app = mountAs(createChatRoutes(deps), "prn_alice");
 
-    const response = await app.request(
-      "/workbenches/ins_whatever/participants/prn_bob",
-      { method: "DELETE" },
-    );
+    const response = await app.request("/workbenches/ins_whatever/participants/prn_bob", {
+      method: "DELETE",
+    });
     expect(response.status).toBe(403);
   });
 });
@@ -1145,9 +1108,7 @@ describe("GET /workbenches/:id/agents", () => {
   test("prefers the definition's display name over its slug (CL-6424)", async () => {
     const deps = buildDeps({
       platform: fakePlatform({
-        invitable: [
-          { id: "wfd_review", name: "code-review", description: "Reviewer" },
-        ],
+        invitable: [{ id: "wfd_review", name: "code-review", description: "Reviewer" }],
         resolveDefinitionIdByAddress: async (address) =>
           address === "ins_invited1@acme.example" ? "wfd_review" : undefined,
         resolveDefinitionAssetId: async (definitionId) => `ast_${definitionId}`,
@@ -1178,9 +1139,7 @@ describe("GET /workbenches/:id/agents", () => {
       platform: fakePlatform({
         invitable: [],
         resolveDefinitionNameSource: async (definitionId) =>
-          definitionId === "wfd_echo"
-            ? { name: "echo", description: "Myra" }
-            : undefined,
+          definitionId === "wfd_echo" ? { name: "echo", description: "Myra" } : undefined,
         resolveDefinitionIdByAddress: async (address) =>
           address === "ins_invited1@acme.example" ? "wfd_echo" : undefined,
         resolveDefinitionAssetId: async (definitionId) => `ast_${definitionId}`,
@@ -1275,10 +1234,7 @@ describe("GET /workbenches/:id/agents", () => {
     const body = (await response.json()) as {
       items: { address: string; definitionId: string }[];
     };
-    expect(body.items.map((item) => item.definitionId).sort()).toEqual([
-      "wfd_echo",
-      "wfd_other",
-    ]);
+    expect(body.items.map((item) => item.definitionId).sort()).toEqual(["wfd_echo", "wfd_other"]);
   });
 
   test("lists no agents (empty items) for a workbench with none", async () => {
@@ -1338,14 +1294,11 @@ describe("POST /workbenches/:id/agents/refresh", () => {
       body: JSON.stringify({ definitionId: "wfd_echo" }),
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/agents/refresh`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ address: "ins_invited1@acme.example" }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/agents/refresh`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ address: "ins_invited1@acme.example" }),
+    });
 
     expect(response.status).toBe(200);
     expect(platform.refreshCalls).toEqual([
@@ -1364,14 +1317,11 @@ describe("POST /workbenches/:id/agents/refresh", () => {
       name: "Test Workbench",
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/agents/refresh`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({}),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/agents/refresh`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({}),
+    });
     expect(response.status).toBe(400);
   });
 });
@@ -1426,9 +1376,7 @@ describe("GET /workbenches", () => {
     await sendText(appAlice, workbench.id, "hello");
     await sendText(appAlice, workbench.id, "world");
 
-    const bobList = (await (
-      await appBob.request("/workbenches?kind=workbench")
-    ).json()) as {
+    const bobList = (await (await appBob.request("/workbenches?kind=workbench")).json()) as {
       items: {
         id: string;
         unreadCount?: number;
@@ -1454,9 +1402,9 @@ describe("GET /workbenches", () => {
 
     await sendText(appAlice, workbench.id, "See you at the standup");
 
-    const bobList = (await (
-      await appBob.request("/workbenches?kind=workbench")
-    ).json()) as { items: { id: string; preview?: string }[] };
+    const bobList = (await (await appBob.request("/workbenches?kind=workbench")).json()) as {
+      items: { id: string; preview?: string }[];
+    };
     const bobRow = bobList.items.find((item) => item.id === workbench.id);
     expect(bobRow?.preview).toBe("See you at the standup");
   });
@@ -1487,9 +1435,9 @@ describe("GET /workbenches", () => {
       }),
     });
 
-    const bobList = (await (
-      await appBob.request("/workbenches?kind=workbench")
-    ).json()) as { items: { id: string; unreadCount?: number }[] };
+    const bobList = (await (await appBob.request("/workbenches?kind=workbench")).json()) as {
+      items: { id: string; unreadCount?: number }[];
+    };
     const bobRow = bobList.items.find((item) => item.id === workbench.id);
     expect(bobRow?.unreadCount).toBe(0);
   });
@@ -1504,14 +1452,11 @@ describe("messages", () => {
     });
 
     const parts: Part[] = [{ kind: "text", text: "hello" }];
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ parts }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ parts }),
+    });
 
     expect(response.status).toBe(201);
     const timeline = await timelineOf(deps, workbench.id);
@@ -1531,14 +1476,11 @@ describe("messages", () => {
       kind: "workbench",
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ parts: [{ kind: "not-a-real-part" }] }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ parts: [{ kind: "not-a-real-part" }] }),
+    });
 
     expect(response.status).toBe(400);
     const body = (await response.json()) as { error: { code: string } };
@@ -1586,17 +1528,14 @@ describe("POST /workbenches/:id/messages — invite pre-step (CL-5879 mention-pu
       name: "Test Workbench",
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          parts: [{ kind: "text", text: "@echo welcome!" }],
-          invite: [{ kind: "agent", definitionId: "wfd_echo" }],
-        }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        parts: [{ kind: "text", text: "@echo welcome!" }],
+        invite: [{ kind: "agent", definitionId: "wfd_echo" }],
+      }),
+    });
 
     expect(response.status).toBe(201);
 
@@ -1609,9 +1548,7 @@ describe("POST /workbenches/:id/messages — invite pre-step (CL-5879 mention-pu
       },
     ]);
 
-    const settingsResponse = await app.request(
-      `/workbenches/${workbench.id}/settings`,
-    );
+    const settingsResponse = await app.request(`/workbenches/${workbench.id}/settings`);
     const settingsBody = (await settingsResponse.json()) as {
       participants: { address: string; handle: string }[];
     };
@@ -1620,17 +1557,13 @@ describe("POST /workbenches/:id/messages — invite pre-step (CL-5879 mention-pu
     ]);
 
     // The message itself lands on the workbench's own timeline...
-    const messagesResponse = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-    );
+    const messagesResponse = await app.request(`/workbenches/${workbench.id}/messages`);
     const messagesBody = (await messagesResponse.json()) as {
       items: { parts: Part[] }[];
     };
     expect(
       messagesBody.items.some((item) =>
-        item.parts.some(
-          (part) => part.kind === "text" && part.text === "@echo welcome!",
-        ),
+        item.parts.some((part) => part.kind === "text" && part.text === "@echo welcome!"),
       ),
     ).toBe(true);
 
@@ -1638,9 +1571,7 @@ describe("POST /workbenches/:id/messages — invite pre-step (CL-5879 mention-pu
     // mention names its own freshly-assigned handle.
     expect(
       platform.sentMail.some(
-        (mail) =>
-          mail.workbenchId === "ins_invited1" &&
-          mail.fromWorkbenchId === workbench.id,
+        (mail) => mail.workbenchId === "ins_invited1" && mail.fromWorkbenchId === workbench.id,
       ),
     ).toBe(true);
   });
@@ -1659,41 +1590,30 @@ describe("POST /workbenches/:id/messages — invite pre-step (CL-5879 mention-pu
       name: "Test Workbench",
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          parts: [{ kind: "text", text: "@bob welcome!" }],
-          invite: [{ kind: "person", principalId: "prn_bob", name: "Bob" }],
-        }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        parts: [{ kind: "text", text: "@bob welcome!" }],
+        invite: [{ kind: "person", principalId: "prn_bob", name: "Bob" }],
+      }),
+    });
 
     expect(response.status).toBe(201);
 
-    const settingsResponse = await app.request(
-      `/workbenches/${workbench.id}/settings`,
-    );
+    const settingsResponse = await app.request(`/workbenches/${workbench.id}/settings`);
     const settingsBody = (await settingsResponse.json()) as {
       participants: { address: string; handle: string }[];
     };
-    expect(settingsBody.participants).toEqual([
-      { address: "prn_bob", handle: "bob" },
-    ]);
+    expect(settingsBody.participants).toEqual([{ address: "prn_bob", handle: "bob" }]);
 
-    const messagesResponse = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-    );
+    const messagesResponse = await app.request(`/workbenches/${workbench.id}/messages`);
     const messagesBody = (await messagesResponse.json()) as {
       items: { parts: Part[] }[];
     };
     expect(
       messagesBody.items.some((item) =>
-        item.parts.some(
-          (part) => part.kind === "text" && part.text === "@bob welcome!",
-        ),
+        item.parts.some((part) => part.kind === "text" && part.text === "@bob welcome!"),
       ),
     ).toBe(true);
   });
@@ -1706,17 +1626,14 @@ describe("POST /workbenches/:id/messages — invite pre-step (CL-5879 mention-pu
       name: "Test Workbench",
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          parts: [{ kind: "text", text: "@ghost welcome!" }],
-          invite: [{ kind: "person", principalId: "prn_ghost" }],
-        }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        parts: [{ kind: "text", text: "@ghost welcome!" }],
+        invite: [{ kind: "person", principalId: "prn_ghost" }],
+      }),
+    });
 
     expect(response.status).toBe(400);
     const platform = deps.platform as ReturnType<typeof fakePlatform>;
@@ -1742,31 +1659,24 @@ describe("POST /workbenches/:id/messages — invite pre-step (CL-5879 mention-pu
       name: "Test Workbench",
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          parts: [{ kind: "text", text: "@echo welcome!" }],
-          invite: [{ kind: "agent", definitionId: "wfd_echo" }],
-        }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        parts: [{ kind: "text", text: "@echo welcome!" }],
+        invite: [{ kind: "agent", definitionId: "wfd_echo" }],
+      }),
+    });
 
     expect(response.status).toBe(403);
     const body = (await response.json()) as {
       error: { code: string; userMessage: string };
     };
-    expect(body.error.userMessage).toBe(
-      "You can't add people to this workbench",
-    );
+    expect(body.error.userMessage).toBe("You can't add people to this workbench");
 
     const platform = deps.platform as ReturnType<typeof fakePlatform>;
     expect(platform.sentMail).toHaveLength(0);
-    const settingsResponse = await app.request(
-      `/workbenches/${workbench.id}/settings`,
-    );
+    const settingsResponse = await app.request(`/workbenches/${workbench.id}/settings`);
     const settingsBody = (await settingsResponse.json()) as {
       participants: unknown[];
     };
@@ -1782,28 +1692,21 @@ describe("POST /workbenches/:id/messages — invite pre-step (CL-5879 mention-pu
       participants: ["prn_bob"],
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          parts: [{ kind: "text", text: "@bob still here" }],
-          invite: [{ kind: "person", principalId: "prn_bob", name: "Bob" }],
-        }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        parts: [{ kind: "text", text: "@bob still here" }],
+        invite: [{ kind: "person", principalId: "prn_bob", name: "Bob" }],
+      }),
+    });
 
     expect(response.status).toBe(201);
-    const settingsResponse = await app.request(
-      `/workbenches/${workbench.id}/settings`,
-    );
+    const settingsResponse = await app.request(`/workbenches/${workbench.id}/settings`);
     const settingsBody = (await settingsResponse.json()) as {
       participants: { address: string }[];
     };
-    expect(settingsBody.participants.map((p) => p.address)).toEqual([
-      "prn_bob",
-    ]);
+    expect(settingsBody.participants.map((p) => p.address)).toEqual(["prn_bob"]);
   });
 
   // CL-7194: joinHumanParticipant no longer takes a caller-supplied
@@ -1831,25 +1734,20 @@ describe("POST /workbenches/:id/messages — invite pre-step (CL-5879 mention-pu
       name: "Test Workbench",
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          parts: [{ kind: "text", text: "welcome both!" }],
-          invite: [
-            { kind: "person", principalId: "prn_bob", name: "Bob" },
-            { kind: "person", principalId: "prn_carol", name: "Carol" },
-          ],
-        }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        parts: [{ kind: "text", text: "welcome both!" }],
+        invite: [
+          { kind: "person", principalId: "prn_bob", name: "Bob" },
+          { kind: "person", principalId: "prn_carol", name: "Carol" },
+        ],
+      }),
+    });
 
     expect(response.status).toBe(201);
-    const settingsResponse = await app.request(
-      `/workbenches/${workbench.id}/settings`,
-    );
+    const settingsResponse = await app.request(`/workbenches/${workbench.id}/settings`);
     const settingsBody = (await settingsResponse.json()) as {
       participants: { address: string }[];
     };
@@ -1872,24 +1770,18 @@ describe("GET /workbenches/:id/blobs/:blobId", () => {
       kind: "workbench",
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/blobs/blob_mail1_1`,
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/blobs/blob_mail1_1`);
 
     expect(response.status).toBe(200);
     const body = (await response.json()) as { contentBase64: string };
-    expect(Buffer.from(body.contentBase64, "base64").toString("utf-8")).toBe(
-      "hello attachment",
-    );
+    expect(Buffer.from(body.contentBase64, "base64").toString("utf-8")).toBe("hello attachment");
   });
 
   test("404s for a workbench outside the tenant", async () => {
     const deps = buildDeps();
     const app = mountAs(createChatRoutes(deps), "prn_alice");
 
-    const response = await app.request(
-      "/workbenches/no-such-workbench/blobs/x",
-    );
+    const response = await app.request("/workbenches/no-such-workbench/blobs/x");
 
     expect(response.status).toBe(404);
   });
@@ -1907,9 +1799,7 @@ describe("GET /workbenches/:id/blobs/:blobId", () => {
       kind: "workbench",
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/blobs/blob_missing_1`,
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/blobs/blob_missing_1`);
 
     expect(response.status).toBe(404);
   });
@@ -1923,40 +1813,31 @@ describe("POST /workbenches/:id/threads/fork — two-level cap (CL-5908, CL-5948
       kind: "workbench",
     });
 
-    const rootPost = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ parts: [{ kind: "text", text: "root note" }] }),
-      },
-    );
+    const rootPost = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ parts: [{ kind: "text", text: "root note" }] }),
+    });
     const rootSent = (await rootPost.json()) as { id: string };
 
-    const replyPost = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          parts: [{ kind: "text", text: "in the thread" }],
-          inReplyToMessageId: rootSent.id,
-        }),
-      },
-    );
+    const replyPost = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        parts: [{ kind: "text", text: "in the thread" }],
+        inReplyToMessageId: rootSent.id,
+      }),
+    });
     const replySent = (await replyPost.json()) as {
       id: string;
       threadId: string;
     };
 
-    const forkRes = await app.request(
-      `/workbenches/${workbench.id}/threads/fork`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ parentMessageId: replySent.id }),
-      },
-    );
+    const forkRes = await app.request(`/workbenches/${workbench.id}/threads/fork`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ parentMessageId: replySent.id }),
+    });
     expect(forkRes.status).toBe(201);
     const forked = (await forkRes.json()) as {
       id: string;
@@ -2015,14 +1896,11 @@ describe("POST /workbenches/:id/threads/fork — two-level cap (CL-5908, CL-5948
       })
     ).json()) as { id: string };
 
-    const siblingRes = await app.request(
-      `/workbenches/${workbench.id}/threads/fork`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ parentMessageId: subMessageSent.id }),
-      },
-    );
+    const siblingRes = await app.request(`/workbenches/${workbench.id}/threads/fork`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ parentMessageId: subMessageSent.id }),
+    });
     expect(siblingRes.status).toBe(201);
     const sibling = (await siblingRes.json()) as {
       id: string;
@@ -2080,17 +1958,14 @@ describe("POST /workbenches/:id/threads/fork — two-level cap (CL-5908, CL-5948
       })
     ).json()) as { id: string };
 
-    const blockedRes = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          parts: [{ kind: "text", text: "trying a third level" }],
-          inReplyToMessageId: subMessageSent.id,
-        }),
-      },
-    );
+    const blockedRes = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        parts: [{ kind: "text", text: "trying a third level" }],
+        inReplyToMessageId: subMessageSent.id,
+      }),
+    });
     expect(blockedRes.status).toBe(409);
     const blockedBody = (await blockedRes.json()) as {
       error: { code: string };
@@ -2165,9 +2040,7 @@ describe("GET /workbenches/:id/invitable", () => {
       kind: "workbench",
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/invitable`,
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/invitable`);
     expect(response.status).toBe(200);
     const body = (await response.json()) as {
       items: { id: string; name: string }[];
@@ -2198,22 +2071,17 @@ describe("GET /workbenches/:id/invitable", () => {
       body: JSON.stringify({ definitionId: "wfd_echo" }),
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/invitable`,
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/invitable`);
     expect(response.status).toBe(200);
     const body = (await response.json()) as {
       items: { id: string; name: string; description?: string }[];
     };
-    expect(body.items).toEqual([
-      { id: "wfd_myra", name: "assistant", description: "Myra" },
-    ]);
+    expect(body.items).toEqual([{ id: "wfd_myra", name: "assistant", description: "Myra" }]);
   });
 
   test("a denied grant is rejected", async () => {
     const deps = buildDeps({
-      requireGrant: () => async (c) =>
-        c.json({ error: { code: "forbidden", message: "no" } }, 403),
+      requireGrant: () => async (c) => c.json({ error: { code: "forbidden", message: "no" } }, 403),
     });
     const app = mountAs(createChatRoutes(deps), "prn_alice");
 
@@ -2259,8 +2127,7 @@ describe("GET /invitable-definitions", () => {
           { id: "wfd_digest", name: "workbench-digest" },
         ],
       }),
-      isInvitableDefinition: (definition) =>
-        definition.name !== "workbench-digest",
+      isInvitableDefinition: (definition) => definition.name !== "workbench-digest",
     });
     const app = mountAs(createChatRoutes(deps), "prn_alice");
 
@@ -2269,15 +2136,12 @@ describe("GET /invitable-definitions", () => {
     const body = (await response.json()) as {
       items: { id: string; name: string; description?: string }[];
     };
-    expect(body.items).toEqual([
-      { id: "wfd_assistant", name: "assistant", description: "Myra" },
-    ]);
+    expect(body.items).toEqual([{ id: "wfd_assistant", name: "assistant", description: "Myra" }]);
   });
 
   test("a denied grant is rejected", async () => {
     const deps = buildDeps({
-      requireGrant: () => async (c) =>
-        c.json({ error: { code: "forbidden", message: "no" } }, 403),
+      requireGrant: () => async (c) => c.json({ error: { code: "forbidden", message: "no" } }, 403),
     });
     const app = mountAs(createChatRoutes(deps), "prn_alice");
 
@@ -2299,10 +2163,7 @@ describe("typing", () => {
     });
 
     expect(response.status).toBe(202);
-    const settingsRow = await deps.store.getWorkbenchSettings(
-      TENANT.id,
-      workbench.id,
-    );
+    const settingsRow = await deps.store.getWorkbenchSettings(TENANT.id, workbench.id);
     expect(settingsRow?.settings).not.toHaveProperty("chat/typing");
     const platform = deps.platform as ReturnType<typeof fakePlatform>;
     expect(platform.sentMail).toHaveLength(0);
@@ -2412,9 +2273,7 @@ describe("chat hard cutover — no server tenancy", () => {
       items: { id: string; title: string }[];
     };
     expect(listA.items.map((item) => item.title)).toEqual(["Bench A Only"]);
-    expect(listA.items.map((item) => item.id)).not.toContain(
-      benchBWorkbench.id,
-    );
+    expect(listA.items.map((item) => item.id)).not.toContain(benchBWorkbench.id);
 
     const listB = (await (await appBenchB.request("/workbenches")).json()) as {
       items: { id: string; title: string }[];
@@ -2442,9 +2301,7 @@ describe("cross-tenant workbench isolation", () => {
       }),
     });
     expect(postB.status).toBe(404);
-    expect(
-      (deps.platform as ReturnType<typeof fakePlatform>).sentMail,
-    ).toHaveLength(0);
+    expect((deps.platform as ReturnType<typeof fakePlatform>).sentMail).toHaveLength(0);
 
     const getB = await appB.request(`/workbenches/${workbench.id}/messages`);
     expect(getB.status).toBe(404);
@@ -2479,27 +2336,20 @@ describe("cross-tenant workbench isolation", () => {
       kind: "workbench",
     });
 
-    const readGet = await appB.request(
-      `/workbenches/${workbench.id}/read-state`,
-    );
+    const readGet = await appB.request(`/workbenches/${workbench.id}/read-state`);
     expect(readGet.status).toBe(404);
 
-    const readPut = await appB.request(
-      `/workbenches/${workbench.id}/read-state`,
-      {
-        method: "PUT",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          lastSeenCreatedAt: "2026-01-01T00:00:00.000Z",
-          lastSeenId: "mail_x",
-        }),
-      },
-    );
+    const readPut = await appB.request(`/workbenches/${workbench.id}/read-state`, {
+      method: "PUT",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        lastSeenCreatedAt: "2026-01-01T00:00:00.000Z",
+        lastSeenId: "mail_x",
+      }),
+    });
     expect(readPut.status).toBe(404);
 
-    const invitable = await appB.request(
-      `/workbenches/${workbench.id}/invitable`,
-    );
+    const invitable = await appB.request(`/workbenches/${workbench.id}/invitable`);
     expect(invitable.status).toBe(404);
   });
 
@@ -2525,9 +2375,7 @@ describe("cross-tenant workbench isolation", () => {
 
     // Foreign tenant still 404s even with the same instance id shape.
     const other = mountAs(routes, "prn_bob", OTHER_TENANT);
-    const denied = await other.request(
-      `/workbenches/ins_agent_mailbox/messages`,
-    );
+    const denied = await other.request(`/workbenches/ins_agent_mailbox/messages`);
     expect(denied.status).toBe(404);
   });
 });
@@ -2546,30 +2394,24 @@ describe("GET /workbenches/:id/messages — thread membership on every item (CL-
       kind: "workbench",
     });
 
-    const rootPost = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ parts: [{ kind: "text", text: "root note" }] }),
-      },
-    );
+    const rootPost = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ parts: [{ kind: "text", text: "root note" }] }),
+    });
     const rootSent = (await rootPost.json()) as {
       id: string;
       threadId: string;
     };
 
-    const replyPost = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          parts: [{ kind: "text", text: "reply note" }],
-          inReplyToMessageId: rootSent.id,
-        }),
-      },
-    );
+    const replyPost = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        parts: [{ kind: "text", text: "reply note" }],
+        inReplyToMessageId: rootSent.id,
+      }),
+    });
     const replySent = (await replyPost.json()) as {
       id: string;
       threadId: string;
@@ -2631,45 +2473,36 @@ describe("GET /workbenches/:id/threads — reply activity on each row (CL-6313)"
       kind: "workbench",
     });
 
-    const rootPost = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ parts: [{ kind: "text", text: "parent" }] }),
-      },
-    );
+    const rootPost = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ parts: [{ kind: "text", text: "parent" }] }),
+    });
     const rootSent = (await rootPost.json()) as {
       id: string;
       threadId: string;
     };
 
-    const firstReply = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          parts: [{ kind: "text", text: "one" }],
-          inReplyToMessageId: rootSent.id,
-        }),
-      },
-    );
+    const firstReply = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        parts: [{ kind: "text", text: "one" }],
+        inReplyToMessageId: rootSent.id,
+      }),
+    });
     const replySent = (await firstReply.json()) as {
       id: string;
       threadId: string;
     };
-    const secondReply = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          parts: [{ kind: "text", text: "two" }],
-          threadId: replySent.threadId,
-        }),
-      },
-    );
+    const secondReply = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        parts: [{ kind: "text", text: "two" }],
+        threadId: replySent.threadId,
+      }),
+    });
     const lastSent = (await secondReply.json()) as { createdAt: string };
 
     const res = await app.request(`/workbenches/${workbench.id}/threads`);
@@ -2693,24 +2526,18 @@ describe("GET /workbenches/:id/threads — reply activity on each row (CL-6313)"
     const { body: workbench } = await createWorkbench(app, {
       kind: "workbench",
     });
-    const rootPost = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ parts: [{ kind: "text", text: "parent" }] }),
-      },
-    );
+    const rootPost = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ parts: [{ kind: "text", text: "parent" }] }),
+    });
     const rootSent = (await rootPost.json()) as { id: string };
 
-    const forked = await app.request(
-      `/workbenches/${workbench.id}/threads/fork`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ parentMessageId: rootSent.id }),
-      },
-    );
+    const forked = await app.request(`/workbenches/${workbench.id}/threads/fork`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ parentMessageId: rootSent.id }),
+    });
     const thread = (await forked.json()) as { id: string };
 
     const res = await app.request(`/workbenches/${workbench.id}/threads`);
diff --git a/packages/chat/test/settings-control.test.ts b/packages/chat/test/settings-control.test.ts
index c4d5036a54..4154bffa8b 100644
--- a/packages/chat/test/settings-control.test.ts
+++ b/packages/chat/test/settings-control.test.ts
@@ -20,23 +20,17 @@ const STATE_ABC: WorkbenchParticipantState = {
 };
 
 function controlMail(data: unknown): Part[] {
-  return [
-    { kind: "block", block: { type: WORKBENCH_CONTROL_NAMESPACE, data } },
-  ];
+  return [{ kind: "block", block: { type: WORKBENCH_CONTROL_NAMESPACE, data } }];
 }
 
 test("a control mail is structurally distinguished from an ordinary message", () => {
-  expect(
-    isControlMessage(controlMail({ namespace: WORKBENCH_CONTROL_NAMESPACE })),
-  ).toBe(true);
+  expect(isControlMessage(controlMail({ namespace: WORKBENCH_CONTROL_NAMESPACE }))).toBe(true);
   expect(isControlMessage([{ kind: "text", text: "hello" }])).toBe(false);
 });
 
 test("a block part in a different namespace is not a control message", () => {
   expect(
-    isControlMessage([
-      { kind: "block", block: { type: "some/other-namespace", data: {} } },
-    ]),
+    isControlMessage([{ kind: "block", block: { type: "some/other-namespace", data: {} } }]),
   ).toBe(false);
 });
 
@@ -137,13 +131,9 @@ test("malformed control payloads are rejected loudly", () => {
       }),
     ),
   ).toThrow();
-  expect(() =>
-    parseControlPayload(controlMail({ namespace: "wrong-namespace" })),
-  ).toThrow();
+  expect(() => parseControlPayload(controlMail({ namespace: "wrong-namespace" }))).toThrow();
 });
 
 test("parseControlPayload refuses a message that is not structurally control mail", () => {
-  expect(() => parseControlPayload([{ kind: "text", text: "hi" }])).toThrow(
-    /isControlMessage/,
-  );
+  expect(() => parseControlPayload([{ kind: "text", text: "hi" }])).toThrow(/isControlMessage/);
 });
diff --git a/packages/chat/test/settings-participants.drizzle.test.ts b/packages/chat/test/settings-participants.drizzle.test.ts
index fb5f0eb8ec..8929dcf2bb 100644
--- a/packages/chat/test/settings-participants.drizzle.test.ts
+++ b/packages/chat/test/settings-participants.drizzle.test.ts
@@ -37,9 +37,7 @@ const describeIfDb = dbGate(databaseUrl, import.meta.path);
 const TENANT = "tnt_1";
 
 describeIfDb("createDrizzleChatStore: mutateWorkbenchParticipants", () => {
-  const scratchUrl = scratchUrlFor(
-    databaseUrl ?? "postgres://localhost:5432/unused",
-  );
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused");
   const scratchTarget = new URL(scratchUrl);
   const scratchDatabase = scratchTarget.pathname.replace(/^\//, "");
 
@@ -93,15 +91,13 @@ describeIfDb("createDrizzleChatStore: mutateWorkbenchParticipants", () => {
           tenantId: TENANT,
           workbenchId,
           updatedBy: "prn_alice",
-          mutate: (participants) =>
-            addParticipant(participants, "prn_bob", "bob"),
+          mutate: (participants) => addParticipant(participants, "prn_bob", "bob"),
         }),
         store.mutateWorkbenchParticipants({
           tenantId: TENANT,
           workbenchId,
           updatedBy: "prn_carol",
-          mutate: (participants) =>
-            addParticipant(participants, "prn_dave", "dave"),
+          mutate: (participants) => addParticipant(participants, "prn_dave", "dave"),
         }),
       ]);
 
@@ -140,16 +136,13 @@ describeIfDb("createDrizzleChatStore: mutateWorkbenchParticipants", () => {
           workbenchId,
           updatedBy: "prn_alice",
           mutate: (participants) =>
-            participants.filter(
-              (participant) => participant.address !== "prn_bob",
-            ),
+            participants.filter((participant) => participant.address !== "prn_bob"),
         }),
         store.mutateWorkbenchParticipants({
           tenantId: TENANT,
           workbenchId,
           updatedBy: "prn_carol",
-          mutate: (participants) =>
-            addParticipant(participants, "prn_dave", "dave"),
+          mutate: (participants) => addParticipant(participants, "prn_dave", "dave"),
         }),
       ]);
 
diff --git a/packages/chat/test/settings-patch.drizzle.test.ts b/packages/chat/test/settings-patch.drizzle.test.ts
index 47e1c5e38d..5df684ad1f 100644
--- a/packages/chat/test/settings-patch.drizzle.test.ts
+++ b/packages/chat/test/settings-patch.drizzle.test.ts
@@ -27,9 +27,7 @@ const ALICE = { address: "prn_alice@acme.example", handle: "alice" };
 const BOB = { address: "prn_bob@acme.example", handle: "bob" };
 
 describeIfDb("createDrizzleChatStore: patchWorkbenchSettings", () => {
-  const scratchUrl = scratchUrlFor(
-    databaseUrl ?? "postgres://localhost:5432/unused",
-  );
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused");
   const scratchTarget = new URL(scratchUrl);
   const scratchDatabase = scratchTarget.pathname.replace(/^\//, "");
 
diff --git a/packages/chat/test/sse-message-headers.test.ts b/packages/chat/test/sse-message-headers.test.ts
index bc45a94b22..3d3eb7efda 100644
--- a/packages/chat/test/sse-message-headers.test.ts
+++ b/packages/chat/test/sse-message-headers.test.ts
@@ -72,24 +72,18 @@ function harness() {
     turnCancellation: createTurnCancelRegistry(),
     mailbox: {
       writer,
-      resolveKnownPrincipalIds: async (
-        _tenantId: string,
-        candidateIds: readonly string[],
-      ) => new Set(candidateIds.filter((id) => known.has(id))),
+      resolveKnownPrincipalIds: async (_tenantId: string, candidateIds: readonly string[]) =>
+        new Set(candidateIds.filter((id) => known.has(id))),
       resolveTenantDomain: async (_tenantId: string) => DOMAIN,
     },
   };
   return { deps, store, roomMessages, threads, events };
 }
 
-async function messageEventOf(
-  h: ReturnType<typeof harness>,
-  id: string,
-): Promise<unknown> {
+async function messageEventOf(h: ReturnType<typeof harness>, id: string): Promise<unknown> {
   const event = h.events.find(
     (candidate) =>
-      candidate.type === "chat.message" &&
-      (candidate.data as { id?: string }).id === id,
+      candidate.type === "chat.message" && (candidate.data as { id?: string }).id === id,
   );
   expect(event).toBeDefined();
   return event?.data;
@@ -103,11 +97,7 @@ describe("chat.message SSE event mail headers (CL-7448)", () => {
       workbenchId: WORKBENCH_ID,
       updatedBy: SENDER,
       settings: {
-        "chat/participants": participantsOf(
-          SENDER,
-          OTHER_HUMANS,
-          AGENT_ADDRESS,
-        ),
+        "chat/participants": participantsOf(SENDER, OTHER_HUMANS, AGENT_ADDRESS),
       },
     });
 
@@ -120,9 +110,7 @@ describe("chat.message SSE event mail headers (CL-7448)", () => {
     });
     await result.fanoutDelivered;
 
-    const parsed = ChatMessageEventData.assert(
-      await messageEventOf(h, result.id),
-    );
+    const parsed = ChatMessageEventData.assert(await messageEventOf(h, result.id));
     const headers = parsed as unknown as Record<string, unknown>;
     expect(headers["ref"]).toEqual({ kind: "workbench", id: WORKBENCH_ID });
     expect(headers["messageId"]).toBe(`<${result.id}@${DOMAIN}>`);
@@ -137,11 +125,7 @@ describe("chat.message SSE event mail headers (CL-7448)", () => {
       workbenchId: WORKBENCH_ID,
       updatedBy: SENDER,
       settings: {
-        "chat/participants": participantsOf(
-          SENDER,
-          OTHER_HUMANS,
-          AGENT_ADDRESS,
-        ),
+        "chat/participants": participantsOf(SENDER, OTHER_HUMANS, AGENT_ADDRESS),
       },
     });
 
@@ -175,9 +159,7 @@ describe("chat.message SSE event mail headers (CL-7448)", () => {
       messageId: reply.id,
     });
 
-    const parsed = ChatMessageEventData.assert(
-      await messageEventOf(h, reply.id),
-    );
+    const parsed = ChatMessageEventData.assert(await messageEventOf(h, reply.id));
     const headers = parsed as unknown as Record<string, unknown>;
     expect(headers["ref"]).toEqual({ kind: "workbench", id: WORKBENCH_ID });
     expect(headers["messageId"]).toBe(`<${reply.id}@${DOMAIN}>`);
@@ -199,9 +181,7 @@ describe("chat.message SSE event mail headers (CL-7448)", () => {
       },
     );
 
-    const parsed = ChatMessageEventData.assert(
-      await messageEventOf(h, posted.id),
-    );
+    const parsed = ChatMessageEventData.assert(await messageEventOf(h, posted.id));
     const headers = parsed as unknown as Record<string, unknown>;
     expect(headers["ref"]).toEqual({ kind: "workbench", id: WORKBENCH_ID });
     expect(headers["messageId"]).toBeUndefined();
diff --git a/packages/chat/test/start-workflow-command.test.ts b/packages/chat/test/start-workflow-command.test.ts
index 5db03dad19..0d0620d179 100644
--- a/packages/chat/test/start-workflow-command.test.ts
+++ b/packages/chat/test/start-workflow-command.test.ts
@@ -3,10 +3,7 @@
 // workflow-command registrar: invite-then-send, sharing the same
 // `launchAndJoinAgent` core as `POST .../invite`.
 import { describe, expect, test } from "bun:test";
-import {
-  KindIsChatError,
-  startWorkflowCommand,
-} from "../src/workbench-service";
+import { KindIsChatError, startWorkflowCommand } from "../src/workbench-service";
 import { createInMemoryChatStore } from "../src/store";
 import { createInMemoryRoomMessageStore } from "../src/room-messages";
 import { fakePlatform, TENANT } from "./test-support";
@@ -44,9 +41,7 @@ describe("startWorkflowCommand", () => {
       handle: "echo",
       address: "ins_invited1@acme.example",
     });
-    const opening = platform.sentMail.find(
-      (mail) => mail.workbenchId === "ins_invited1",
-    );
+    const opening = platform.sentMail.find((mail) => mail.workbenchId === "ins_invited1");
     expect(opening?.content.content).toBe("summarize this thread");
     expect(opening?.fromWorkbenchId).toBe("chan_1");
   });
@@ -79,9 +74,7 @@ describe("startWorkflowCommand", () => {
       },
     );
 
-    const opening = platform.sentMail.find(
-      (mail) => mail.workbenchId === "ins_invited1",
-    );
+    const opening = platform.sentMail.find((mail) => mail.workbenchId === "ins_invited1");
     expect(opening?.content.content).toBe("Continue.");
   });
 
@@ -125,9 +118,7 @@ describe("startWorkflowCommand", () => {
       workbenchId: "chan_3",
       settings: {
         "chat/kind": "workbench",
-        "chat/participants": [
-          { address: "ins_existing@acme.example", handle: "myra" },
-        ],
+        "chat/participants": [{ address: "ins_existing@acme.example", handle: "myra" }],
       },
       updatedBy: "prn_alice",
     });
@@ -153,9 +144,7 @@ describe("startWorkflowCommand", () => {
       handle: "myra",
       address: "ins_existing@acme.example",
     });
-    const opening = platform.sentMail.find(
-      (mail) => mail.workbenchId === "ins_existing",
-    );
+    const opening = platform.sentMail.find((mail) => mail.workbenchId === "ins_existing");
     expect(opening?.content.content).toBe("again please");
   });
 
@@ -166,18 +155,14 @@ describe("startWorkflowCommand", () => {
       resolveDefinitionIdByAddress: async (address) =>
         address === "ins_existing@acme.example" ? "wfd_echo_v1" : undefined,
       resolveDefinitionAssetId: async (definitionId) =>
-        definitionId === "wfd_echo_v1" || definitionId === "wfd_echo_v2"
-          ? "ast_echo"
-          : undefined,
+        definitionId === "wfd_echo_v1" || definitionId === "wfd_echo_v2" ? "ast_echo" : undefined,
     });
     await store.createWorkbenchSettings({
       tenantId: TENANT.id,
       workbenchId: "chan_4",
       settings: {
         "chat/kind": "workbench",
-        "chat/participants": [
-          { address: "ins_existing@acme.example", handle: "echo" },
-        ],
+        "chat/participants": [{ address: "ins_existing@acme.example", handle: "echo" }],
       },
       updatedBy: "prn_alice",
     });
@@ -213,9 +198,7 @@ describe("startWorkflowCommand", () => {
       settings: {
         "chat/kind": "chat",
         "chat/definitionId": "wfd_assistant",
-        "chat/participants": [
-          { address: "ins_myra@acme.example", handle: "myra" },
-        ],
+        "chat/participants": [{ address: "ins_myra@acme.example", handle: "myra" }],
       },
       updatedBy: "prn_alice",
     });
diff --git a/packages/chat/test/store.test.ts b/packages/chat/test/store.test.ts
index 48516760bc..e2bf602362 100644
--- a/packages/chat/test/store.test.ts
+++ b/packages/chat/test/store.test.ts
@@ -92,9 +92,7 @@ test("mutateWorkbenchParticipants folds `mutate` over the current list and write
     mutate: (participants) => addParticipant(participants, "prn_bob", "bob"),
   });
 
-  expect(row.settings["chat/participants"]).toEqual([
-    { address: "prn_bob", handle: "bob" },
-  ]);
+  expect(row.settings["chat/participants"]).toEqual([{ address: "prn_bob", handle: "bob" }]);
   // Untouched keys survive exactly as they were — this is the targeted
   // merge the whole-blob `updateWorkbenchSettings` never gave.
   expect(row.settings["chat/kind"]).toBe("workbench");
@@ -123,9 +121,7 @@ test("mutateWorkbenchParticipants removing a participant leaves the rest untouch
     mutate: (participants) => removeParticipant(participants, "prn_bob"),
   });
 
-  expect(row.settings["chat/participants"]).toEqual([
-    { address: "prn_carol", handle: "carol" },
-  ]);
+  expect(row.settings["chat/participants"]).toEqual([{ address: "prn_carol", handle: "carol" }]);
 });
 
 test("mutateWorkbenchParticipants rejects a missing workbench", async () => {
@@ -274,9 +270,7 @@ test("putReadState never moves the cursor backward when a stale write lands afte
   });
 
   expect(result.lastSeenId).toBe("mail_2");
-  expect(result.lastSeenCreatedAt).toEqual(
-    new Date("2026-01-02T00:00:00.000Z"),
-  );
+  expect(result.lastSeenCreatedAt).toEqual(new Date("2026-01-02T00:00:00.000Z"));
 
   const alice = await store.getReadState("tnt_1", "chn_1", "prn_alice");
   expect(alice?.lastSeenId).toBe("mail_2");
diff --git a/packages/chat/test/stream-event-payloads.test.ts b/packages/chat/test/stream-event-payloads.test.ts
index c382cb326b..bb38ff55f1 100644
--- a/packages/chat/test/stream-event-payloads.test.ts
+++ b/packages/chat/test/stream-event-payloads.test.ts
@@ -20,15 +20,11 @@ describe("chat.message — payload completeness", () => {
     });
 
     const received: ChatWorkbenchEvent[] = [];
-    workbenchSubscribers.subscribe(workbench.id, (event) =>
-      received.push(event),
-    );
+    workbenchSubscribers.subscribe(workbench.id, (event) => received.push(event));
 
     await sendText(app, workbench.id, "morning");
 
-    const messageEvents = received.filter(
-      (event) => event.type === "chat.message",
-    );
+    const messageEvents = received.filter((event) => event.type === "chat.message");
     expect(messageEvents).toHaveLength(1);
     const data = messageEvents[0]?.data as {
       id: string;
@@ -61,23 +57,16 @@ describe("chat.settings — payload completeness", () => {
     });
 
     const received: ChatWorkbenchEvent[] = [];
-    workbenchSubscribers.subscribe(workbench.id, (event) =>
-      received.push(event),
-    );
+    workbenchSubscribers.subscribe(workbench.id, (event) => received.push(event));
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/settings`,
-      {
-        method: "PATCH",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ "chat/name": "Renamed" }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/settings`, {
+      method: "PATCH",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ "chat/name": "Renamed" }),
+    });
     expect(response.status).toBe(200);
 
-    const settingsEvents = received.filter(
-      (event) => event.type === "chat.settings",
-    );
+    const settingsEvents = received.filter((event) => event.type === "chat.settings");
     expect(settingsEvents).toHaveLength(1);
     const data = settingsEvents[0]?.data as {
       updatedBy: string;
diff --git a/packages/chat/test/test-support.ts b/packages/chat/test/test-support.ts
index f665e9239b..3007859db7 100644
--- a/packages/chat/test/test-support.ts
+++ b/packages/chat/test/test-support.ts
@@ -9,10 +9,7 @@ import type { MiddlewareHandler } from "hono";
 import type { TenantEnv } from "@intx/hub-api";
 import type { ChatPlatform, CreateChatRoutesDeps } from "../src/routes";
 import { createInMemoryChatStore } from "../src/store";
-import {
-  createInMemoryRoomMessageStore,
-  type RoomMessage,
-} from "../src/room-messages";
+import { createInMemoryRoomMessageStore, type RoomMessage } from "../src/room-messages";
 import { createInMemoryNativePrincipalStore } from "../src/native-principal";
 import type { MailContent } from "../src/codec";
 import type { MailboxFanoutDeps } from "../src/mailbox-fanout";
@@ -57,21 +54,12 @@ export function fakePlatform(
       definitionId: string;
     }) => Promise<{ instanceId: string; address: string }>;
     ensureAwake?: (address: string) => Promise<void>;
-    fetchBlob?: (
-      workbenchId: string,
-      blobId: string,
-    ) => Promise<string | Uint8Array>;
-    resolveDefinitionAssetId?: (
-      definitionId: string,
-    ) => Promise<string | undefined>;
-    resolveDefinitionIdByAddress?: (
-      address: string,
-    ) => Promise<string | undefined>;
+    fetchBlob?: (workbenchId: string, blobId: string) => Promise<string | Uint8Array>;
+    resolveDefinitionAssetId?: (definitionId: string) => Promise<string | undefined>;
+    resolveDefinitionIdByAddress?: (address: string) => Promise<string | undefined>;
     resolveDefinitionNameSource?: (
       definitionId: string,
-    ) => Promise<
-      { readonly name: string; readonly description?: string } | undefined
-    >;
+    ) => Promise<{ readonly name: string; readonly description?: string } | undefined>;
     refreshAgentInstanceFromDefinition?: (
       tenantId: string,
       workbenchId: string,
@@ -112,10 +100,7 @@ export function fakePlatform(
     definitionId: string;
   }[] = [];
   const ensureAwakeCalls: string[] = [];
-  const mailByWorkbench = new Map<
-    string,
-    { id: string; createdAt: string; mail: unknown }[]
-  >();
+  const mailByWorkbench = new Map<string, { id: string; createdAt: string; mail: unknown }[]>();
   let mailCounter = 0;
   const refreshCalls: {
     tenantId: string;
@@ -164,11 +149,7 @@ export function fakePlatform(
     async refreshAgentInstanceFromDefinition(tenantId, workbenchId, address) {
       refreshCalls.push({ tenantId, workbenchId, address });
       if (opts.refreshAgentInstanceFromDefinition !== undefined) {
-        return opts.refreshAgentInstanceFromDefinition(
-          tenantId,
-          workbenchId,
-          address,
-        );
+        return opts.refreshAgentInstanceFromDefinition(tenantId, workbenchId, address);
       }
     },
     async sendMail(input) {
@@ -204,8 +185,7 @@ export function fakePlatform(
       return { id, createdAt };
     },
     async fetchBlob(workbenchId, blobId) {
-      if (opts.fetchBlob !== undefined)
-        return opts.fetchBlob(workbenchId, blobId);
+      if (opts.fetchBlob !== undefined) return opts.fetchBlob(workbenchId, blobId);
       return "";
     },
     subscribeToWorkbench() {
@@ -246,8 +226,7 @@ export function stubMailbox(domain: string = TENANT.domain): MailboxFanoutDeps {
         }));
       },
     },
-    resolveKnownPrincipalIds: async (_tenantId, candidateIds) =>
-      new Set(candidateIds),
+    resolveKnownPrincipalIds: async (_tenantId, candidateIds) => new Set(candidateIds),
     resolveTenantDomain: async () => domain,
   };
 }
@@ -256,9 +235,7 @@ export type TestDeps = Omit<CreateChatRoutesDeps, "principals"> & {
   principals: ReturnType<typeof createInMemoryNativePrincipalStore>;
 };
 
-export function buildDeps(
-  overrides: Partial<CreateChatRoutesDeps> = {},
-): TestDeps {
+export function buildDeps(overrides: Partial<CreateChatRoutesDeps> = {}): TestDeps {
   const deps: CreateChatRoutesDeps = {
     store: createInMemoryChatStore(),
     roomMessages: createInMemoryRoomMessageStore(),
@@ -320,9 +297,7 @@ export function timelineEvents(
   event: string,
 ): { kind: "event"; event: string; data: unknown }[] {
   return messages.flatMap((message) =>
-    message.parts.flatMap((part) =>
-      part.kind === "event" && part.event === event ? [part] : [],
-    ),
+    message.parts.flatMap((part) => (part.kind === "event" && part.event === event ? [part] : [])),
   );
 }
 
diff --git a/packages/chat/test/threads.drizzle.test.ts b/packages/chat/test/threads.drizzle.test.ts
index cdda6aa244..f53259d54e 100644
--- a/packages/chat/test/threads.drizzle.test.ts
+++ b/packages/chat/test/threads.drizzle.test.ts
@@ -35,9 +35,7 @@ const TENANT = "tnt_1";
 const WORKBENCH = "run_workbench1";
 
 describeIfDb("createDrizzleThreadStore: concurrent first writers", () => {
-  const scratchUrl = scratchUrlFor(
-    databaseUrl ?? "postgres://localhost:5432/unused",
-  );
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused");
   const scratchTarget = new URL(scratchUrl);
   const scratchDatabase = scratchTarget.pathname.replace(/^\//, "");
 
diff --git a/packages/chat/test/turn-cancel-route.test.ts b/packages/chat/test/turn-cancel-route.test.ts
index 067f85cc02..b4bcf719ab 100644
--- a/packages/chat/test/turn-cancel-route.test.ts
+++ b/packages/chat/test/turn-cancel-route.test.ts
@@ -7,12 +7,7 @@ import { describe, expect, test } from "bun:test";
 
 import { createInMemoryAgentTurnStore } from "@corbits/agent-runtime";
 import { createChatRoutes } from "../src/routes";
-import {
-  buildDeps,
-  createWorkbench,
-  fakePlatform,
-  mountAs,
-} from "./test-support";
+import { buildDeps, createWorkbench, fakePlatform, mountAs } from "./test-support";
 
 describe("POST /workbenches/:id/turns/cancel (CL-7201)", () => {
   test("cancels a stuck turn and clears it via the response body", async () => {
@@ -39,10 +34,9 @@ describe("POST /workbenches/:id/turns/cancel (CL-7201)", () => {
     });
     await Bun.sleep(5);
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/turns/cancel`,
-      { method: "POST" },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/turns/cancel`, {
+      method: "POST",
+    });
     expect(response.status).toBe(200);
     const body = await response.json();
     expect(body).toEqual({ cancelledCount: 1 });
@@ -52,18 +46,16 @@ describe("POST /workbenches/:id/turns/cancel (CL-7201)", () => {
     const deps = buildDeps();
     const app = mountAs(createChatRoutes(deps), "prn_alice");
 
-    const response = await app.request(
-      "/workbenches/run_does_not_exist/turns/cancel",
-      { method: "POST" },
-    );
+    const response = await app.request("/workbenches/run_does_not_exist/turns/cancel", {
+      method: "POST",
+    });
 
     expect(response.status).toBe(404);
   });
 
   test("denies the request when the write grant is refused", async () => {
     const deps = buildDeps({
-      requireGrant: () => async (c) =>
-        c.json({ error: { code: "forbidden" } }, 403),
+      requireGrant: () => async (c) => c.json({ error: { code: "forbidden" } }, 403),
     });
     const app = mountAs(createChatRoutes(deps), "prn_alice");
 
diff --git a/packages/chat/test/turn-cancellation-dispatch.test.ts b/packages/chat/test/turn-cancellation-dispatch.test.ts
index 6ac7503260..fc4fb7d557 100644
--- a/packages/chat/test/turn-cancellation-dispatch.test.ts
+++ b/packages/chat/test/turn-cancellation-dispatch.test.ts
@@ -90,16 +90,12 @@ describe("cancelWorkbenchTurn (CL-7201)", () => {
 
     const timeline = await timelineOf(deps, workbench.id);
     const cancelledNotices = timeline.filter((message) =>
-      message.parts.some(
-        (part) => part.kind === "text" && part.turnCancelled === true,
-      ),
+      message.parts.some((part) => part.kind === "text" && part.turnCancelled === true),
     );
     expect(cancelledNotices).toHaveLength(1);
 
     const undeliveredNotices = timeline.filter((message) =>
-      message.parts.some(
-        (part) => part.kind === "text" && part.turnFailed === true,
-      ),
+      message.parts.some((part) => part.kind === "text" && part.turnFailed === true),
     );
     expect(undeliveredNotices).toHaveLength(0);
   });
@@ -154,9 +150,7 @@ describe("cancelWorkbenchTurn (CL-7201)", () => {
 
     const timeline = await timelineOf(deps, workbench.id);
     const cancelledNotices = timeline.filter((message) =>
-      message.parts.some(
-        (part) => part.kind === "text" && part.turnCancelled === true,
-      ),
+      message.parts.some((part) => part.kind === "text" && part.turnCancelled === true),
     );
     expect(cancelledNotices).toHaveLength(1);
   });
@@ -293,16 +287,12 @@ describe("cancelWorkbenchTurn (CL-7201)", () => {
     const timeline = await timelineOf(deps, workbench.id);
     const notices = timeline.filter((message) =>
       message.parts.some(
-        (part) =>
-          part.kind === "text" &&
-          (part.turnCancelled === true || part.turnFailed === true),
+        (part) => part.kind === "text" && (part.turnCancelled === true || part.turnFailed === true),
       ),
     );
     expect(notices).toHaveLength(1);
     expect(
-      notices[0]?.parts.some(
-        (part) => part.kind === "text" && part.turnCancelled === true,
-      ),
+      notices[0]?.parts.some((part) => part.kind === "text" && part.turnCancelled === true),
     ).toBe(true);
   });
 });
diff --git a/packages/chat/test/turn-claim-failure.test.ts b/packages/chat/test/turn-claim-failure.test.ts
index e713bf9a98..c4af96afeb 100644
--- a/packages/chat/test/turn-claim-failure.test.ts
+++ b/packages/chat/test/turn-claim-failure.test.ts
@@ -9,13 +9,7 @@ import { describe, expect, test } from "bun:test";
 import { createChatRoutes } from "../src/routes";
 import type { TurnClaimStore } from "@corbits/agent-runtime";
 import { createWorkbenchTurnQueue } from "@corbits/agent-runtime";
-import {
-  buildDeps,
-  createWorkbench,
-  fakePlatform,
-  mountAs,
-  sendText,
-} from "./test-support";
+import { buildDeps, createWorkbench, fakePlatform, mountAs, sendText } from "./test-support";
 
 /** Healthy for the first turn, then a transient failure on every later
  * opening claim — the durable-I/O hiccup the in-memory store never
@@ -69,11 +63,7 @@ describe("CL-6167 sequential turn drops", () => {
 
     // Turn-2 meets the transient claim failure. It must still reach the
     // agent — pre-fix this send persisted fine but dispatched nothing.
-    const second = await sendText(
-      app,
-      workbench.id,
-      "are you there @ins_echo1",
-    );
+    const second = await sendText(app, workbench.id, "are you there @ins_echo1");
     expect(second.status).toBe(201);
     expect(sentMail).toHaveLength(2);
     expect(sentMail[1]?.workbenchId).toBe("ins_echo1");
diff --git a/packages/chat/test/turn-dispatch-deadline.test.ts b/packages/chat/test/turn-dispatch-deadline.test.ts
index 2d80f3c3eb..30412d4e9e 100644
--- a/packages/chat/test/turn-dispatch-deadline.test.ts
+++ b/packages/chat/test/turn-dispatch-deadline.test.ts
@@ -58,9 +58,7 @@ describe("dispatchTurnBatch's turn-level deadline (CL-6644)", () => {
     const notice = timeline.find(
       (message) =>
         message.sender.address === "ins_invited1@acme.example" &&
-        message.parts.some(
-          (part) => part.kind === "text" && part.turnFailed === true,
-        ),
+        message.parts.some((part) => part.kind === "text" && part.turnFailed === true),
     );
     const noticePart = notice?.parts.find((part) => part.kind === "text");
     expect(noticePart).toMatchObject({ kind: "text", turnFailed: true });
@@ -96,14 +94,11 @@ describe("dispatchTurnBatch's turn-level deadline (CL-6644)", () => {
     // dispatch immediately rather than queue behind a claim the TTL
     // (60s) hasn't released yet -- proving the deadline's rejection
     // released the claim itself, not just posted a notice.
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ parts: [{ kind: "text", text: "second" }] }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ parts: [{ kind: "text", text: "second" }] }),
+    });
     await settleFanout();
     expect(response.status).toBe(201);
 
@@ -111,9 +106,7 @@ describe("dispatchTurnBatch's turn-level deadline (CL-6644)", () => {
     const notices = timeline.filter(
       (message) =>
         message.sender.address === "ins_invited1@acme.example" &&
-        message.parts.some(
-          (part) => part.kind === "text" && part.turnFailed === true,
-        ),
+        message.parts.some((part) => part.kind === "text" && part.turnFailed === true),
     );
     // Both messages hit the same never-settling `sendMail`, so both
     // should have failed loud on their own -- neither queued silently
@@ -145,14 +138,11 @@ describe("dispatchTurnBatch's turn-level deadline (CL-6644)", () => {
       definitionId: "wfd_echo",
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ parts: [{ kind: "text", text: "hello" }] }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ parts: [{ kind: "text", text: "hello" }] }),
+    });
     await settleFanout();
     expect(response.status).toBe(201);
 
@@ -160,14 +150,10 @@ describe("dispatchTurnBatch's turn-level deadline (CL-6644)", () => {
     const notice = timeline.find(
       (message) =>
         message.sender.address === "ins_invited1@acme.example" &&
-        message.parts.some(
-          (part) => part.kind === "text" && part.turnFailed === true,
-        ),
+        message.parts.some((part) => part.kind === "text" && part.turnFailed === true),
     );
     expect(notice).toBeUndefined();
-    expect((platform as ReturnType<typeof fakePlatform>).sentMail).toHaveLength(
-      1,
-    );
+    expect((platform as ReturnType<typeof fakePlatform>).sentMail).toHaveLength(1);
   });
 
   // CL-7193: the timed-out `dispatchTurn` call used to be abandoned along
@@ -206,8 +192,7 @@ describe("dispatchTurnBatch's turn-level deadline (CL-6644)", () => {
   });
 
   test("the timeout message names the turn's run address and its elapsed budget", async () => {
-    const { turnDispatchTimeoutMessage } =
-      await import("../src/workbench-service");
+    const { turnDispatchTimeoutMessage } = await import("../src/workbench-service");
     expect(turnDispatchTimeoutMessage("ins_echo1@acme.example", 30_000)).toBe(
       'turn for "ins_echo1@acme.example" did not settle within 30000ms',
     );
diff --git a/packages/chat/test/turn-mail-correlation.drizzle.test.ts b/packages/chat/test/turn-mail-correlation.drizzle.test.ts
index 2d091ff856..240443ccd0 100644
--- a/packages/chat/test/turn-mail-correlation.drizzle.test.ts
+++ b/packages/chat/test/turn-mail-correlation.drizzle.test.ts
@@ -29,122 +29,113 @@ function scratchUrlFor(e2eUrl: string): string {
 const databaseUrl = e2eDatabaseUrl();
 const describeIfDb = dbGate(databaseUrl, import.meta.path);
 
-describeIfDb(
-  "createDrizzleTurnMailCorrelationStore: concurrent recordTurnMail",
-  () => {
-    const scratchUrl = scratchUrlFor(
-      databaseUrl ?? "postgres://localhost:5432/unused",
-    );
-    const scratchTarget = new URL(scratchUrl);
-    const scratchDatabase = scratchTarget.pathname.replace(/^\//, "");
+describeIfDb("createDrizzleTurnMailCorrelationStore: concurrent recordTurnMail", () => {
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused");
+  const scratchTarget = new URL(scratchUrl);
+  const scratchDatabase = scratchTarget.pathname.replace(/^\//, "");
 
-    beforeAll(async () => {
-      const maintenanceUrl = new URL(scratchUrl);
-      maintenanceUrl.pathname = "/postgres";
-      const maintenance = postgres(maintenanceUrl.toString(), {
-        max: 1,
-        onnotice: () => undefined,
-      });
-      try {
-        await maintenance.unsafe(
-          `DROP DATABASE IF EXISTS "${scratchDatabase}"`,
-        );
-        await maintenance.unsafe(`CREATE DATABASE "${scratchDatabase}"`);
-      } finally {
-        await maintenance.end();
-      }
-      await applyChatMigrations(scratchUrl);
+  beforeAll(async () => {
+    const maintenanceUrl = new URL(scratchUrl);
+    maintenanceUrl.pathname = "/postgres";
+    const maintenance = postgres(maintenanceUrl.toString(), {
+      max: 1,
+      onnotice: () => undefined,
     });
+    try {
+      await maintenance.unsafe(`DROP DATABASE IF EXISTS "${scratchDatabase}"`);
+      await maintenance.unsafe(`CREATE DATABASE "${scratchDatabase}"`);
+    } finally {
+      await maintenance.end();
+    }
+    await applyChatMigrations(scratchUrl);
+  });
 
-    afterAll(async () => {
-      const maintenanceUrl = new URL(scratchUrl);
-      maintenanceUrl.pathname = "/postgres";
-      const maintenance = postgres(maintenanceUrl.toString(), {
-        max: 1,
-        onnotice: () => undefined,
-      });
-      try {
-        await maintenance.unsafe(
-          `DROP DATABASE IF EXISTS "${scratchDatabase}"`,
-        );
-      } finally {
-        await maintenance.end();
-      }
+  afterAll(async () => {
+    const maintenanceUrl = new URL(scratchUrl);
+    maintenanceUrl.pathname = "/postgres";
+    const maintenance = postgres(maintenanceUrl.toString(), {
+      max: 1,
+      onnotice: () => undefined,
     });
+    try {
+      await maintenance.unsafe(`DROP DATABASE IF EXISTS "${scratchDatabase}"`);
+    } finally {
+      await maintenance.end();
+    }
+  });
 
-    test("two concurrent records for the same mail never throw, and the first source wins", async () => {
-      // `max: 5` — a real connection pool, so the two records below issue
-      // genuinely overlapping queries rather than being serialized onto
-      // one connection before either can race the other.
-      const sql = postgres(scratchUrl, { max: 5, onnotice: () => undefined });
-      try {
-        const store = createDrizzleTurnMailCorrelationStore(drizzle(sql));
-
-        await Promise.all([
-          store.recordTurnMail({
-            tenantId: "ten_1",
-            mailId: "mail_race_1",
-            workbenchId: "ins_workbench1",
-            sourceMessageId: "msg_first",
-          }),
-          store.recordTurnMail({
-            tenantId: "ten_1",
-            mailId: "mail_race_1",
-            workbenchId: "ins_workbench1",
-            sourceMessageId: "msg_second",
-          }),
-        ]);
-
-        const rows = await sql.unsafe(
-          `SELECT * FROM "chat"."turn_mail_correlation" WHERE "tenant_id" = 'ten_1' AND "mail_id" = 'mail_race_1'`,
-        );
-        expect(rows).toHaveLength(1);
+  test("two concurrent records for the same mail never throw, and the first source wins", async () => {
+    // `max: 5` — a real connection pool, so the two records below issue
+    // genuinely overlapping queries rather than being serialized onto
+    // one connection before either can race the other.
+    const sql = postgres(scratchUrl, { max: 5, onnotice: () => undefined });
+    try {
+      const store = createDrizzleTurnMailCorrelationStore(drizzle(sql));
 
-        // Either racer may win the insert — what matters is exactly one
-        // row survives, never two and never a thrown PK-violation.
-        const source = await store.findTurnMailSource({
+      await Promise.all([
+        store.recordTurnMail({
           tenantId: "ten_1",
           mailId: "mail_race_1",
-        });
-        if (source?.sourceMessageId === undefined) {
-          throw new Error("expected the raced mail to resolve to one source");
-        }
-        expect(["msg_first", "msg_second"]).toContain(source.sourceMessageId);
-      } finally {
-        await sql.end();
+          workbenchId: "ins_workbench1",
+          sourceMessageId: "msg_first",
+        }),
+        store.recordTurnMail({
+          tenantId: "ten_1",
+          mailId: "mail_race_1",
+          workbenchId: "ins_workbench1",
+          sourceMessageId: "msg_second",
+        }),
+      ]);
+
+      const rows = await sql.unsafe(
+        `SELECT * FROM "chat"."turn_mail_correlation" WHERE "tenant_id" = 'ten_1' AND "mail_id" = 'mail_race_1'`,
+      );
+      expect(rows).toHaveLength(1);
+
+      // Either racer may win the insert — what matters is exactly one
+      // row survives, never two and never a thrown PK-violation.
+      const source = await store.findTurnMailSource({
+        tenantId: "ten_1",
+        mailId: "mail_race_1",
+      });
+      if (source?.sourceMessageId === undefined) {
+        throw new Error("expected the raced mail to resolve to one source");
       }
-    });
+      expect(["msg_first", "msg_second"]).toContain(source.sourceMessageId);
+    } finally {
+      await sql.end();
+    }
+  });
 
-    test("record then find round-trips the source", async () => {
-      const sql = postgres(scratchUrl, { max: 5, onnotice: () => undefined });
-      try {
-        const store = createDrizzleTurnMailCorrelationStore(drizzle(sql));
-        await store.recordTurnMail({
+  test("record then find round-trips the source", async () => {
+    const sql = postgres(scratchUrl, { max: 5, onnotice: () => undefined });
+    try {
+      const store = createDrizzleTurnMailCorrelationStore(drizzle(sql));
+      await store.recordTurnMail({
+        tenantId: "ten_1",
+        mailId: "mail_roundtrip_1",
+        workbenchId: "ins_workbench1",
+        sourceMessageId: "msg_1",
+      });
+
+      expect(
+        await store.findTurnMailSource({
           tenantId: "ten_1",
           mailId: "mail_roundtrip_1",
-          workbenchId: "ins_workbench1",
-          sourceMessageId: "msg_1",
-        });
-
-        expect(
-          await store.findTurnMailSource({
-            tenantId: "ten_1",
-            mailId: "mail_roundtrip_1",
-          }),
-        ).toEqual({
+        }),
+      ).toEqual({
+        tenantId: "ten_1",
+        workbenchId: "ins_workbench1",
+        sourceMessageId: "msg_1",
+      });
+      expect(
+        await store.findTurnMailSource({
           tenantId: "ten_1",
-          workbenchId: "ins_workbench1",
-          sourceMessageId: "msg_1",
-        });
-        expect(
-          await store.findTurnMailSource({
-            tenantId: "ten_1",
-            mailId: "mail_missing",
-          }),
-        ).toBeUndefined();
-      } finally {
-        await sql.end();
-      }
-    });
-  },
-);
+          mailId: "mail_missing",
+        }),
+      ).toBeUndefined();
+    } finally {
+      await sql.end();
+    }
+  });
+});
diff --git a/packages/chat/test/workbench-context.test.ts b/packages/chat/test/workbench-context.test.ts
index 690d8d0922..050daa1630 100644
--- a/packages/chat/test/workbench-context.test.ts
+++ b/packages/chat/test/workbench-context.test.ts
@@ -1,8 +1,5 @@
 import { describe, expect, test } from "bun:test";
-import {
-  buildDroppedRecap,
-  renderWorkbenchContext,
-} from "../src/workbench-context";
+import { buildDroppedRecap, renderWorkbenchContext } from "../src/workbench-context";
 
 describe("renderWorkbenchContext", () => {
   test("renders a header followed by one line per item, oldest first", () => {
@@ -20,11 +17,7 @@ describe("renderWorkbenchContext", () => {
         "first. The actual message addressed to you follows after this " +
         "block.]",
     );
-    expect(lines.slice(1)).toEqual([
-      "@echo: hello",
-      "user: hi there",
-      "@assistant: on it",
-    ]);
+    expect(lines.slice(1)).toEqual(["@echo: hello", "user: hi there", "@assistant: on it"]);
   });
 
   test("truncates a message beyond ~500 chars with an ellipsis", () => {
@@ -136,9 +129,7 @@ describe("buildDroppedRecap", () => {
   });
 
   test("caps the total fold at ~1200 chars, tailing an honest count of what was left out", () => {
-    const humanTexts = Array.from({ length: 20 }, (_, i) =>
-      `msg-${i}-`.repeat(20),
-    );
+    const humanTexts = Array.from({ length: 20 }, (_, i) => `msg-${i}-`.repeat(20));
     const recap = buildDroppedRecap({
       droppedCount: 20,
       moreBeyondFold: false,
@@ -152,9 +143,7 @@ describe("buildDroppedRecap", () => {
   });
 
   test("never exceeds its cap regardless of how many messages are handed in", () => {
-    const humanTexts = Array.from({ length: 500 }, (_, i) =>
-      `fact number ${i} `.repeat(10),
-    );
+    const humanTexts = Array.from({ length: 500 }, (_, i) => `fact number ${i} `.repeat(10));
     const recap = buildDroppedRecap({
       droppedCount: 500,
       moreBeyondFold: false,
diff --git a/packages/chat/test/workbench-events.test.ts b/packages/chat/test/workbench-events.test.ts
index 997a09d47a..3de355b206 100644
--- a/packages/chat/test/workbench-events.test.ts
+++ b/packages/chat/test/workbench-events.test.ts
@@ -31,9 +31,7 @@ function fakeStream(
   writeSSE: (message: unknown) => Promise<void>,
   close: () => Promise<void> = () => Promise.resolve(),
 ) {
-  return { writeSSE, close } as unknown as Parameters<
-    typeof bridgeWorkbenchStream
-  >[0]["stream"];
+  return { writeSSE, close } as unknown as Parameters<typeof bridgeWorkbenchStream>[0]["stream"];
 }
 
 function noopPlatformEvents(): WorkbenchEvents {
@@ -57,17 +55,13 @@ describe("createWorkbenchSubscriberRegistry", () => {
 
   test("a workbench with no subscribers is a no-op publish", () => {
     const registry = createWorkbenchSubscriberRegistry();
-    expect(() =>
-      registry.publish("chan_none", { type: "chat.typing", data: {} }),
-    ).not.toThrow();
+    expect(() => registry.publish("chan_none", { type: "chat.typing", data: {} })).not.toThrow();
   });
 
   test("unsubscribing stops delivery", () => {
     const registry = createWorkbenchSubscriberRegistry();
     const received: ChatWorkbenchEvent[] = [];
-    const unsubscribe = registry.subscribe("chan_1", (event) =>
-      received.push(event),
-    );
+    const unsubscribe = registry.subscribe("chan_1", (event) => received.push(event));
     unsubscribe();
 
     registry.publish("chan_1", { type: "chat.typing", data: {} });
@@ -161,9 +155,7 @@ describe("bridgeWorkbenchStream", () => {
   afterEach(() => {
     // Some tests below stub `@corbits/error-sink`'s `reportError`; always
     // restore it so a mock from one test can't leak into the next.
-    (
-      errorSink.reportError as unknown as { mockRestore?: () => void }
-    ).mockRestore?.();
+    (errorSink.reportError as unknown as { mockRestore?: () => void }).mockRestore?.();
   });
 
   test("forwards a registry publish onto the stream as an SSE write", async () => {
@@ -354,9 +346,7 @@ describe("bridgeWorkbenchStream", () => {
 
     await Promise.race([
       closed,
-      new Promise((_, reject) =>
-        setTimeout(() => reject(new Error("hung on close()")), 200),
-      ),
+      new Promise((_, reject) => setTimeout(() => reject(new Error("hung on close()")), 200)),
     ]);
 
     expect(abortCount).toBe(1);
@@ -600,10 +590,7 @@ describe("bridgeWorkbenchStream", () => {
 
     await new Promise((resolve) => setTimeout(resolve, 50));
 
-    expect(writes.map((data) => JSON.parse(data) as string)).toEqual([
-      "A",
-      "B",
-    ]);
+    expect(writes.map((data) => JSON.parse(data) as string)).toEqual(["A", "B"]);
   });
 
   test("the presence snapshot is written before any event racing the setup window", async () => {
@@ -681,9 +668,7 @@ describe("bridgeWorkbenchStream", () => {
     });
 
     await new Promise((resolve) => setTimeout(resolve, 30));
-    const keepalivesBeforeTeardown = events.filter(
-      (event) => event === "keepalive",
-    ).length;
+    const keepalivesBeforeTeardown = events.filter((event) => event === "keepalive").length;
     expect(keepalivesBeforeTeardown).toBeGreaterThan(0);
 
     teardown();
@@ -714,22 +699,19 @@ describe("bridgeWorkbenchStream", () => {
       });
       await flush();
 
-      const snapshotWrite = writes.find(
-        (write) => write.event === "chat.presence.snapshot",
-      );
+      const snapshotWrite = writes.find((write) => write.event === "chat.presence.snapshot");
       expect(snapshotWrite).toBeDefined();
       const snapshot = JSON.parse(snapshotWrite?.data ?? "{}") as {
         members: { principalId: string }[];
       };
       // The connecting principal is already in the roster this stream
       // is handed — `connect` happens before the snapshot is read.
-      expect(
-        snapshot.members.map((member) => member.principalId).sort(),
-      ).toEqual(["prn_ada", "prn_bob"]);
+      expect(snapshot.members.map((member) => member.principalId).sort()).toEqual([
+        "prn_ada",
+        "prn_bob",
+      ]);
 
-      const onlineWrite = writes.find(
-        (write) => write.event === "chat.presence",
-      );
+      const onlineWrite = writes.find((write) => write.event === "chat.presence");
       expect(onlineWrite).toBeDefined();
       expect(JSON.parse(onlineWrite?.data ?? "{}")).toMatchObject({
         principalId: "prn_ada",
@@ -762,9 +744,7 @@ describe("bridgeWorkbenchStream", () => {
       await flush();
 
       expect(presenceRegistry.snapshot("chan_1")).toEqual([]);
-      const offlineEvent = observed.find(
-        (event) => event.type === "chat.presence",
-      );
+      const offlineEvent = observed.find((event) => event.type === "chat.presence");
       expect(offlineEvent).toBeDefined();
       expect(offlineEvent?.data).toMatchObject({
         principalId: "prn_ada",
@@ -809,12 +789,10 @@ describe("bridgeWorkbenchStream", () => {
       await flush();
 
       // Still connected via the second stream — no offline delta.
-      expect(
-        presenceRegistry.snapshot("chan_1").map((member) => member.principalId),
-      ).toEqual(["prn_ada"]);
-      expect(writesB.some((write) => write.event === "chat.presence")).toBe(
-        false,
-      );
+      expect(presenceRegistry.snapshot("chan_1").map((member) => member.principalId)).toEqual([
+        "prn_ada",
+      ]);
+      expect(writesB.some((write) => write.event === "chat.presence")).toBe(false);
     });
 
     test("no presence option: the original no-presence behavior is unchanged", async () => {
diff --git a/packages/chat/test/workbench-host-naming.test.ts b/packages/chat/test/workbench-host-naming.test.ts
index cd0d57d77d..c3120760e2 100644
--- a/packages/chat/test/workbench-host-naming.test.ts
+++ b/packages/chat/test/workbench-host-naming.test.ts
@@ -24,12 +24,8 @@ describe("workbenchHostAssetName", () => {
       const name = workbenchHostAssetName(id);
       expect(name).toMatch(ASSET_NAME_GRAMMAR);
     }
-    expect(workbenchHostAssetName(RUN_ID)).toBe(
-      "run-682bf127e22124c01b4b0996aabaab5f",
-    );
-    expect(workbenchHostAssetName(INSTANCE_ID)).toBe(
-      "ins-0f1e2d3c4b5a69788796a5b4c3d2e1f0",
-    );
+    expect(workbenchHostAssetName(RUN_ID)).toBe("run-682bf127e22124c01b4b0996aabaab5f");
+    expect(workbenchHostAssetName(INSTANCE_ID)).toBe("ins-0f1e2d3c4b5a69788796a5b4c3d2e1f0");
   });
 
   test("collapses runs of non-alphanumerics and trims edge dashes", () => {
@@ -39,12 +35,8 @@ describe("workbenchHostAssetName", () => {
 
 describe("isWorkbenchHostDefinitionName", () => {
   test("recognizes the slug of every generated workbench id shape", () => {
-    expect(isWorkbenchHostDefinitionName(workbenchHostAssetName(RUN_ID))).toBe(
-      true,
-    );
-    expect(
-      isWorkbenchHostDefinitionName(workbenchHostAssetName(INSTANCE_ID)),
-    ).toBe(true);
+    expect(isWorkbenchHostDefinitionName(workbenchHostAssetName(RUN_ID))).toBe(true);
+    expect(isWorkbenchHostDefinitionName(workbenchHostAssetName(INSTANCE_ID))).toBe(true);
   });
 
   test("leaves purpose-run and agent definition names alone", () => {
diff --git a/packages/chat/test/workbench-presence-routes.test.ts b/packages/chat/test/workbench-presence-routes.test.ts
index 4fd9699c90..637e249868 100644
--- a/packages/chat/test/workbench-presence-routes.test.ts
+++ b/packages/chat/test/workbench-presence-routes.test.ts
@@ -22,14 +22,8 @@ async function openStream(app: ReturnType<typeof mountAs>, url: string) {
     reader,
     async readChunk(timeoutMs = 2_000): Promise<string | undefined> {
       return Promise.race([
-        reader
-          .read()
-          .then((result) =>
-            result.done ? undefined : decoder.decode(result.value),
-          ),
-        new Promise<undefined>((resolve) =>
-          setTimeout(() => resolve(undefined), timeoutMs),
-        ),
+        reader.read().then((result) => (result.done ? undefined : decoder.decode(result.value))),
+        new Promise<undefined>((resolve) => setTimeout(() => resolve(undefined), timeoutMs)),
       ]);
     },
   };
@@ -44,10 +38,7 @@ describe("presence", () => {
       kind: "workbench",
     });
 
-    const { reader, readChunk } = await openStream(
-      app,
-      `/workbenches/${workbench.id}/stream`,
-    );
+    const { reader, readChunk } = await openStream(app, `/workbenches/${workbench.id}/stream`);
 
     const first = await readChunk();
     expect(first).toContain("chat.presence.snapshot");
@@ -57,9 +48,9 @@ describe("presence", () => {
     expect(second).toContain("chat.presence");
     expect(second).toContain('"state":"online"');
 
-    expect(
-      presence.snapshot(workbench.id).map((member) => member.principalId),
-    ).toEqual(["prn_alice"]);
+    expect(presence.snapshot(workbench.id).map((member) => member.principalId)).toEqual([
+      "prn_alice",
+    ]);
 
     await reader.cancel().catch(() => undefined);
   });
@@ -76,10 +67,7 @@ describe("presence", () => {
       kind: "workbench",
     });
 
-    const { reader, readChunk } = await openStream(
-      app,
-      `/workbenches/${workbench.id}/stream`,
-    );
+    const { reader, readChunk } = await openStream(app, `/workbenches/${workbench.id}/stream`);
     // Drain the connect-time snapshot and online delta.
     await readChunk();
     await readChunk();
@@ -117,20 +105,14 @@ describe("presence", () => {
       kind: "workbench",
     });
 
-    const { reader, readChunk } = await openStream(
-      app,
-      `/workbenches/${workbench.id}/stream`,
-    );
+    const { reader, readChunk } = await openStream(app, `/workbenches/${workbench.id}/stream`);
     await readChunk();
     await readChunk();
     await app.request(`/workbenches/${workbench.id}/presence`, {
       method: "POST",
     });
 
-    const settingsRow = await deps.store.getWorkbenchSettings(
-      "tnt_1",
-      workbench.id,
-    );
+    const settingsRow = await deps.store.getWorkbenchSettings("tnt_1", workbench.id);
     expect(settingsRow?.settings).not.toHaveProperty("chat/presence");
     const listed = await deps.roomMessages.listMessages({
       tenantId: "tnt_1",
diff --git a/packages/chat/test/workbench-reply-activity.test.ts b/packages/chat/test/workbench-reply-activity.test.ts
index 5e4f082363..61da466cda 100644
--- a/packages/chat/test/workbench-reply-activity.test.ts
+++ b/packages/chat/test/workbench-reply-activity.test.ts
@@ -1,8 +1,5 @@
 import { describe, expect, test } from "bun:test";
-import {
-  createInMemoryAgentTurnStore,
-  AGENT_TURN_STALE_MS,
-} from "@corbits/agent-runtime";
+import { createInMemoryAgentTurnStore, AGENT_TURN_STALE_MS } from "@corbits/agent-runtime";
 import { createInMemoryRoomMessageStore } from "../src/room-messages";
 import { listWorkbenchLiveState } from "../src/workbench-reply-activity";
 import { createChatRoutes } from "../src/routes";
@@ -171,8 +168,7 @@ describe("sidebar reply activity", () => {
       ...f.start,
       workbenchId: workbench.id,
     });
-    const readList = async () =>
-      (await app.request("/workbenches?kind=workbench")).json();
+    const readList = async () => (await app.request("/workbenches?kind=workbench")).json();
     expect(await readList()).toEqual({
       items: [expect.objectContaining({ id: workbench.id, live: "working" })],
     });
@@ -191,17 +187,14 @@ describe("sidebar reply activity", () => {
         }),
       ],
     });
-    const response = await app.request(
-      `/workbenches/${workbench.id}/read-state`,
-      {
-        method: "PUT",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          lastSeenCreatedAt: reply.createdAt,
-          lastSeenId: reply.id,
-        }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/read-state`, {
+      method: "PUT",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        lastSeenCreatedAt: reply.createdAt,
+        lastSeenId: reply.id,
+      }),
+    });
     expect(response.status).toBe(200);
     expect(await readList()).toEqual({
       items: [expect.objectContaining({ live: "idle" })],
diff --git a/packages/chat/test/workbench-service.test.ts b/packages/chat/test/workbench-service.test.ts
index 035fe18012..1e7f57cb93 100644
--- a/packages/chat/test/workbench-service.test.ts
+++ b/packages/chat/test/workbench-service.test.ts
@@ -30,10 +30,7 @@ import {
   timelineOf,
   timelineTexts,
 } from "./test-support";
-import {
-  createInMemoryRoomMessageStore,
-  postRoomMessage,
-} from "../src/room-messages";
+import { createInMemoryRoomMessageStore, postRoomMessage } from "../src/room-messages";
 import { createInMemoryTurnMailCorrelationStore } from "@corbits/agent-runtime";
 import { createWorkbenchSubscriberRegistry } from "../src/workbench-events";
 import type { ChatWorkbenchEvent } from "../src/platform-port";
@@ -117,9 +114,7 @@ describe("postCannedGreeting (CL-6126)", () => {
   test("different chats reach every variation", () => {
     const seeds = Array.from({ length: 32 }, (_, i) => `chan_${i}`);
     const variations = new Set(
-      seeds.map((workbenchId) =>
-        cannedGreeting({ workbenchId, agentName: "Myra" }),
-      ),
+      seeds.map((workbenchId) => cannedGreeting({ workbenchId, agentName: "Myra" })),
     );
     expect(variations.size).toBe(4);
   });
@@ -130,9 +125,7 @@ describe("postCannedGreeting (CL-6126)", () => {
       const unnamed = cannedGreeting({ workbenchId, agentName: "Myra" });
       expect(unnamed).not.toContain("undefined");
       expect(unnamed).not.toContain("  ");
-      expect(unnamed).toBe(
-        cannedGreeting({ workbenchId, agentName: "Myra", senderName: "" }),
-      );
+      expect(unnamed).toBe(cannedGreeting({ workbenchId, agentName: "Myra", senderName: "" }));
     },
   );
 
@@ -167,14 +160,11 @@ describe("message fan-out", () => {
     });
 
     const parts: Part[] = [{ kind: "text", text: "hi @ins_echo1" }];
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ parts }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ parts }),
+    });
 
     expect(response.status).toBe(201);
     await settleFanout();
@@ -187,9 +177,7 @@ describe("message fan-out", () => {
     const dispatch = platform.sentMail[0];
     expect(dispatch?.workbenchId).toBe("ins_echo1");
     expect(dispatch?.fromWorkbenchId).toBe(workbench.id);
-    expect(timelineTexts(await timelineOf(deps, workbench.id))).toEqual([
-      "hi @ins_echo1",
-    ]);
+    expect(timelineTexts(await timelineOf(deps, workbench.id))).toEqual(["hi @ins_echo1"]);
   });
 
   test("a turn dispatch stamps the row's Message-ID and records what it answers (CL-7104)", async () => {
@@ -209,16 +197,13 @@ describe("message fan-out", () => {
       participants: ["ins_echo1@acme.example"],
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          parts: [{ kind: "text", text: "hi @ins_echo1" }],
-        }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        parts: [{ kind: "text", text: "hi @ins_echo1" }],
+      }),
+    });
 
     expect(response.status).toBe(201);
     const sentBody = (await response.json()) as { id: string };
@@ -273,21 +258,16 @@ describe("message fan-out", () => {
       participants: ["ins_echo1@acme.example"],
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          parts: [{ kind: "text", text: "hi @ins_echo1" }],
-        }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        parts: [{ kind: "text", text: "hi @ins_echo1" }],
+      }),
+    });
 
     expect(response.status).toBe(201);
-    expect(timelineTexts(await timelineOf(deps, workbench.id))).toEqual([
-      "hi @ins_echo1",
-    ]);
+    expect(timelineTexts(await timelineOf(deps, workbench.id))).toEqual(["hi @ins_echo1"]);
     expect(platform.sentMail).toHaveLength(0);
 
     releaseDelivery();
@@ -312,16 +292,13 @@ describe("message fan-out", () => {
       participants: ["ins_echo1@acme.example"],
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          parts: [{ kind: "text", text: "hi @ins_echo1" }],
-        }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        parts: [{ kind: "text", text: "hi @ins_echo1" }],
+      }),
+    });
 
     // The sender's own message still stands — only its delivery failed.
     expect(response.status).toBe(201);
@@ -331,9 +308,7 @@ describe("message fan-out", () => {
     // voice and under its own address — never as mail to the agent that
     // could not be reached in the first place.
     const timeline = await timelineOf(deps, workbench.id);
-    const notice = timeline.find(
-      (message) => message.sender.address === "ins_echo1@acme.example",
-    );
+    const notice = timeline.find((message) => message.sender.address === "ins_echo1@acme.example");
     expect(notice?.workbenchId).toBe(workbench.id);
     expect(notice?.runId).toBe("ins_echo1");
     expect(notice?.parts).toEqual([
@@ -352,9 +327,7 @@ describe("message fan-out", () => {
   // takes: `InferenceResolutionError` (launch-time, no resolvable
   // source) and a runtime 401 `credential_failure`.
   describe("the undelivered notice is cause-aware", () => {
-    async function noticeTextFor(
-      dispatchFailure: unknown,
-    ): Promise<TextPart | undefined> {
+    async function noticeTextFor(dispatchFailure: unknown): Promise<TextPart | undefined> {
       const platform = fakePlatform();
       const deliverMail = platform.sendMail.bind(platform);
       platform.sendMail = async (input) => {
@@ -439,14 +412,11 @@ describe("message fan-out", () => {
     expect(platform.sentMail).toHaveLength(0); // the mint asks no agent for anything
 
     const parts: Part[] = [{ kind: "text", text: "hello, no mention here" }];
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ parts }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ parts }),
+    });
 
     expect(response.status).toBe(201);
     await settleFanout();
@@ -473,23 +443,18 @@ describe("message fan-out", () => {
     const platform = deps.platform as ReturnType<typeof fakePlatform>;
 
     const parts: Part[] = [{ kind: "text", text: "hey Bob" }];
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ parts }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ parts }),
+    });
 
     expect(response.status).toBe(201);
     await settleFanout();
     // Nobody to ask for a turn: the message is the whole event, and Bob
     // reads it off the chat's own timeline.
     expect(platform.sentMail).toHaveLength(0);
-    expect(timelineTexts(await timelineOf(deps, workbench.id))).toContain(
-      "hey Bob",
-    );
+    expect(timelineTexts(await timelineOf(deps, workbench.id))).toContain("hey Bob");
   });
 
   test("a no-mention message in a workbench routes to its host — the first agent participant", async () => {
@@ -503,14 +468,11 @@ describe("message fan-out", () => {
     });
 
     const parts: Part[] = [{ kind: "text", text: "no mention at all" }];
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ parts }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ parts }),
+    });
 
     expect(response.status).toBe(201);
     await settleFanout();
@@ -534,16 +496,13 @@ describe("message fan-out", () => {
       participants: ["ins_echo1@acme.example", "ins_echo2@acme.example"],
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          parts: [{ kind: "text", text: "no mention at all" }],
-        }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        parts: [{ kind: "text", text: "no mention at all" }],
+      }),
+    });
 
     expect(response.status).toBe(201);
     await settleFanout();
@@ -583,23 +542,18 @@ describe("message fan-out", () => {
       },
     );
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          parts: [{ kind: "text", text: "thanks, no mention here" }],
-          inReplyToMessageId: parent.id,
-        }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        parts: [{ kind: "text", text: "thanks, no mention here" }],
+        inReplyToMessageId: parent.id,
+      }),
+    });
 
     expect(response.status).toBe(201);
     await settleFanout();
-    expect(platform.sentMail.map((mail) => mail.workbenchId)).toEqual([
-      "ins_echo2",
-    ]);
+    expect(platform.sentMail.map((mail) => mail.workbenchId)).toEqual(["ins_echo2"]);
   });
 
   test("a mention fan-out carries the prior workbench conversation, excluding the just-sent message", async () => {
@@ -625,16 +579,13 @@ describe("message fan-out", () => {
         parts: [{ kind: "text", text: "second message" }],
       }),
     });
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          parts: [{ kind: "text", text: "hi @ins_echo1" }],
-        }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        parts: [{ kind: "text", text: "hi @ins_echo1" }],
+      }),
+    });
     expect(response.status).toBe(201);
 
     await settleFanout();
@@ -669,16 +620,13 @@ describe("message fan-out", () => {
       participants: ["ins_echo1@acme.example"],
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          parts: [{ kind: "text", text: "hi @ins_echo1" }],
-        }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        parts: [{ kind: "text", text: "hi @ins_echo1" }],
+      }),
+    });
     expect(response.status).toBe(201);
 
     await settleFanout();
@@ -743,9 +691,7 @@ describe("message fan-out", () => {
     await settleFanout();
 
     const platform = deps.platform as ReturnType<typeof fakePlatform>;
-    const roomBMail = platform.sentMail.filter(
-      (mail) => mail.fromWorkbenchId === roomB.id,
-    );
+    const roomBMail = platform.sentMail.filter((mail) => mail.fromWorkbenchId === roomB.id);
     const copy = roomBMail[roomBMail.length - 1];
     const [contextPart] = decodeParts(copy?.content ?? { content: "" });
     const contextText = contextPart?.kind === "text" ? contextPart.text : "";
@@ -771,16 +717,13 @@ describe("message fan-out", () => {
       headers: { "content-type": "application/json" },
       body: JSON.stringify({ parts: [{ kind: "text", text: "earlier turn" }] }),
     });
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          parts: [{ kind: "text", text: "hello, no mention here" }],
-        }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        parts: [{ kind: "text", text: "hello, no mention here" }],
+      }),
+    });
     expect(response.status).toBe(201);
     await settleFanout();
 
@@ -810,16 +753,13 @@ describe("message fan-out", () => {
       headers: { "content-type": "application/json" },
       body: JSON.stringify({ parts: [{ kind: "text", text: "one" }] }),
     });
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          parts: [{ kind: "text", text: "hi @ins_echo1" }],
-        }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        parts: [{ kind: "text", text: "hi @ins_echo1" }],
+      }),
+    });
     expect(response.status).toBe(201);
     await settleFanout();
 
@@ -865,16 +805,13 @@ describe("message fan-out", () => {
       body: JSON.stringify({ parts: [{ kind: "text", text: "kept two" }] }),
     });
     await nextTimelineMoment();
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          parts: [{ kind: "text", text: "hi @ins_echo1" }],
-        }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        parts: [{ kind: "text", text: "hi @ins_echo1" }],
+      }),
+    });
     expect(response.status).toBe(201);
     await settleFanout();
 
@@ -895,9 +832,7 @@ describe("message fan-out", () => {
     expect(contextText).toContain("user: kept two"); // still in-window
     // The recap line itself precedes the still-in-window items.
     const lines = contextText.split("\n");
-    const recapIndex = lines.findIndex((line) =>
-      line.includes("Earlier in this conversation"),
-    );
+    const recapIndex = lines.findIndex((line) => line.includes("Earlier in this conversation"));
     const keptIndex = lines.findIndex((line) => line === "user: kept two");
     expect(recapIndex).toBeGreaterThan(-1);
     expect(recapIndex).toBeLessThan(keptIndex);
@@ -929,9 +864,7 @@ describe("message fan-out", () => {
         workbenchId: workbench.id,
         sender: { name: null, address: "ins_echo2@acme.example" },
         runId: "ins_echo2",
-        parts: [
-          { kind: "text", text: "agent-only reply, no facts a human said" },
-        ],
+        parts: [{ kind: "text", text: "agent-only reply, no facts a human said" }],
       },
     );
     await nextTimelineMoment();
@@ -942,16 +875,13 @@ describe("message fan-out", () => {
     });
     await settleFanout();
     await nextTimelineMoment();
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          parts: [{ kind: "text", text: "hi @ins_echo1" }],
-        }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        parts: [{ kind: "text", text: "hi @ins_echo1" }],
+      }),
+    });
     expect(response.status).toBe(201);
     await settleFanout();
 
@@ -980,16 +910,13 @@ describe("message fan-out", () => {
       participants: ["ins_echo1@acme.example"],
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          parts: [{ kind: "text", text: "hi @ins_echo1" }],
-        }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        parts: [{ kind: "text", text: "hi @ins_echo1" }],
+      }),
+    });
 
     expect(response.status).toBe(201);
     await settleFanout();
@@ -1045,23 +972,18 @@ describe("message fan-out", () => {
     });
 
     const parts: Part[] = [{ kind: "text", text: "hello?" }];
-    const response = await app.request(
-      `/workbenches/${workbench.id}/messages`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ parts }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/messages`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ parts }),
+    });
 
     expect(response.status).toBe(201);
     await settleFanout();
 
     const timeline = await timelineOf(deps, workbench.id);
     expect(timelineTexts(timeline)).toContain("hello?");
-    const notice = timeline.find(
-      (message) => message.sender.address === "ins_echo1@acme.example",
-    );
+    const notice = timeline.find((message) => message.sender.address === "ins_echo1@acme.example");
     expect(notice?.parts).toEqual([
       {
         kind: "text",
@@ -1107,10 +1029,7 @@ describe("POST /workbenches/:id/invite", () => {
       },
     ]);
 
-    const settingsRow = await deps.store.getWorkbenchSettings(
-      TENANT.id,
-      workbench.id,
-    );
+    const settingsRow = await deps.store.getWorkbenchSettings(TENANT.id, workbench.id);
     // The handle is derived from the definition's own name ("Echo" ->
     // "echo") — never the run's own address local part, which is what
     // it fell back to before CL-6471's fix.
@@ -1169,10 +1088,7 @@ describe("POST /workbenches/:id/invite", () => {
     expect((await invite()).status).toBe(201);
 
     expect(platform.launchInviteCalls).toHaveLength(1);
-    const settingsRow = await deps.store.getWorkbenchSettings(
-      TENANT.id,
-      workbench.id,
-    );
+    const settingsRow = await deps.store.getWorkbenchSettings(TENANT.id, workbench.id);
     expect(settingsRow?.settings["chat/participants"]).toEqual([
       { address: "ins_invited1@acme.example", handle: "echo" },
     ]);
@@ -1202,14 +1118,8 @@ describe("POST /workbenches/:id/invite", () => {
     expect((await invite(second.id)).status).toBe(201);
 
     expect(platform.launchInviteCalls).toHaveLength(2);
-    const firstSettings = await deps.store.getWorkbenchSettings(
-      TENANT.id,
-      first.id,
-    );
-    const secondSettings = await deps.store.getWorkbenchSettings(
-      TENANT.id,
-      second.id,
-    );
+    const firstSettings = await deps.store.getWorkbenchSettings(TENANT.id, first.id);
+    const secondSettings = await deps.store.getWorkbenchSettings(TENANT.id, second.id);
     expect(firstSettings?.settings["chat/participants"]).toEqual([
       { address: "ins_sales@acme.example", handle: "sales" },
     ]);
@@ -1234,10 +1144,7 @@ describe("POST /workbenches/:id/invite", () => {
       body: JSON.stringify({ definitionId: "wfd_echo" }),
     });
 
-    const settingsRow = await deps.store.getWorkbenchSettings(
-      TENANT.id,
-      workbench.id,
-    );
+    const settingsRow = await deps.store.getWorkbenchSettings(TENANT.id, workbench.id);
     expect(settingsRow?.settings["chat/participants"]).toEqual([
       { address: "existing@acme.example", handle: "existing" },
       { address: "ins_invited1@acme.example", handle: "echo" },
@@ -1262,10 +1169,7 @@ describe("POST /workbenches/:id/invite", () => {
       body: JSON.stringify({ definitionId: "wfd_echo" }),
     });
 
-    const settingsRow = await deps.store.getWorkbenchSettings(
-      TENANT.id,
-      workbench.id,
-    );
+    const settingsRow = await deps.store.getWorkbenchSettings(TENANT.id, workbench.id);
     expect(settingsRow?.settings["chat/participants"]).toEqual([
       { address: "echo@acme.example", handle: "echo" },
       { address: "ins_invited1@acme.example", handle: "echo-2" },
@@ -1275,9 +1179,7 @@ describe("POST /workbenches/:id/invite", () => {
   test("derives the mention handle from the invited definition's display name (description) over its asset name", async () => {
     const deps = buildDeps({
       platform: fakePlatform({
-        invitable: [
-          { id: "wfd_assistant", name: "assistant", description: "Myra" },
-        ],
+        invitable: [{ id: "wfd_assistant", name: "assistant", description: "Myra" }],
       }),
     });
     const app = mountAs(createChatRoutes(deps), "prn_alice");
@@ -1291,10 +1193,7 @@ describe("POST /workbenches/:id/invite", () => {
       body: JSON.stringify({ definitionId: "wfd_assistant" }),
     });
 
-    const settingsRow = await deps.store.getWorkbenchSettings(
-      TENANT.id,
-      workbench.id,
-    );
+    const settingsRow = await deps.store.getWorkbenchSettings(TENANT.id, workbench.id);
     expect(settingsRow?.settings["chat/participants"]).toEqual([
       { address: "ins_invited1@acme.example", handle: "myra" },
     ]);
@@ -1329,10 +1228,7 @@ describe("POST /workbenches/:id/invite", () => {
     });
 
     expect(response.status).toBe(201);
-    const settingsRow = await deps.store.getWorkbenchSettings(
-      TENANT.id,
-      workbench.id,
-    );
+    const settingsRow = await deps.store.getWorkbenchSettings(TENANT.id, workbench.id);
     // Never "ins_invited1" (the raw address local part) and never
     // "run_..."/"ins_..." in any form — the real, humanized name.
     expect(settingsRow?.settings["chat/participants"]).toEqual([
@@ -1357,10 +1253,7 @@ describe("POST /workbenches/:id/invite", () => {
 
     // Never a 201 with a participant record carrying a leaked id.
     expect(response.status).not.toBe(201);
-    const settingsRow = await deps.store.getWorkbenchSettings(
-      TENANT.id,
-      workbench.id,
-    );
+    const settingsRow = await deps.store.getWorkbenchSettings(TENANT.id, workbench.id);
     expect(settingsRow?.settings["chat/participants"]).toEqual([]);
   });
 
@@ -1399,8 +1292,7 @@ describe("POST /workbenches/:id/invite", () => {
     const platform = fakePlatform();
     const deps = buildDeps({
       platform,
-      requireGrant: () => async (c) =>
-        c.json({ error: { code: "forbidden", message: "no" } }, 403),
+      requireGrant: () => async (c) => c.json({ error: { code: "forbidden", message: "no" } }, 403),
     });
     const app = mountAs(createChatRoutes(deps), "prn_alice");
 
@@ -1411,9 +1303,7 @@ describe("POST /workbenches/:id/invite", () => {
     });
 
     expect(response.status).toBe(403);
-    expect(
-      (platform as ReturnType<typeof fakePlatform>).launchInviteCalls,
-    ).toHaveLength(0);
+    expect((platform as ReturnType<typeof fakePlatform>).launchInviteCalls).toHaveLength(0);
   });
 
   test("re-inviting the same definition into a chat reuses the resident — no extra launch", async () => {
@@ -1501,9 +1391,7 @@ describe("launchAndJoinAgent 1:1 chats", () => {
           existingSettings: {
             "chat/kind": "chat",
             "chat/definitionId": "wfd_echo",
-            "chat/participants": [
-              { address: "ins_echo@acme.example", handle: "echo" },
-            ],
+            "chat/participants": [{ address: "ins_echo@acme.example", handle: "echo" }],
           },
           invitable,
         },
@@ -1533,9 +1421,7 @@ describe("launchAndJoinAgent 1:1 chats", () => {
         existingSettings: {
           "chat/kind": "chat",
           "chat/definitionId": "wfd_echo",
-          "chat/participants": [
-            { address: "ins_echo@acme.example", handle: "echo" },
-          ],
+          "chat/participants": [{ address: "ins_echo@acme.example", handle: "echo" }],
         },
         invitable,
       },
@@ -1571,9 +1457,7 @@ describe("joinHumanParticipant / removeWorkbenchParticipant (CL-7194)", () => {
     );
 
     expect(result.address).toBe("prn_bob");
-    expect(result.settings["chat/participants"]).toEqual([
-      { address: "prn_bob", handle: "bob" },
-    ]);
+    expect(result.settings["chat/participants"]).toEqual([{ address: "prn_bob", handle: "bob" }]);
   });
 
   // The in-memory store's mutateWorkbenchParticipants body has no
@@ -1615,9 +1499,7 @@ describe("joinHumanParticipant / removeWorkbenchParticipant (CL-7194)", () => {
     ]);
 
     const row = await store.getWorkbenchSettings(TENANT.id, "chan_1");
-    const addresses = (
-      row?.settings["chat/participants"] as { address: string }[]
-    )
+    const addresses = (row?.settings["chat/participants"] as { address: string }[])
       .map((participant) => participant.address)
       .sort();
     expect(addresses).toEqual(["prn_bob", "prn_carol"]);
@@ -1727,9 +1609,7 @@ describe("one in-flight turn per workbench (CL-6331)", () => {
     expect(testPlatform.sentMail).toHaveLength(0);
     expect(queuedEvents).toHaveLength(2);
     expect(
-      queuedEvents.map(
-        (event) => (event.data as { queueLength: number }).queueLength,
-      ),
+      queuedEvents.map((event) => (event.data as { queueLength: number }).queueLength),
     ).toEqual([1, 2]);
 
     releaseFirstDispatch();
@@ -1755,15 +1635,11 @@ describe("one in-flight turn per workbench (CL-6331)", () => {
         }
       ).attachments;
       const decoded = attachments
-        .map((attachment) =>
-          Buffer.from(attachment.data, "base64").toString("utf8"),
-        )
+        .map((attachment) => Buffer.from(attachment.data, "base64").toString("utf8"))
         .join("\n");
       expect(decoded).toContain("you too");
       expect(decoded).toContain("one more thing");
-      expect(
-        decoded.indexOf("you too") < decoded.indexOf("one more thing"),
-      ).toBe(true);
+      expect(decoded.indexOf("you too") < decoded.indexOf("one more thing")).toBe(true);
     }
   });
 });
diff --git a/packages/chat/test/workbench-settings.test.ts b/packages/chat/test/workbench-settings.test.ts
index 3836ff8ab9..a0d89b27d8 100644
--- a/packages/chat/test/workbench-settings.test.ts
+++ b/packages/chat/test/workbench-settings.test.ts
@@ -5,10 +5,7 @@
 import { describe, expect, test } from "bun:test";
 import { createChatRoutes } from "../src/routes";
 import { decodeParts } from "../src/codec";
-import {
-  benchContextWindowOf,
-  resolveContextWindow,
-} from "../src/workbench-settings";
+import { benchContextWindowOf, resolveContextWindow } from "../src/workbench-settings";
 import {
   buildDeps,
   createWorkbench,
@@ -169,20 +166,14 @@ describe("chat/contextWindow", () => {
       kind: "workbench",
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/settings`,
-      {
-        method: "PATCH",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ "chat/contextWindow": 5 }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/settings`, {
+      method: "PATCH",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ "chat/contextWindow": 5 }),
+    });
     expect(response.status).toBe(200);
 
-    const stored = await deps.store.getWorkbenchSettings(
-      TENANT.id,
-      workbench.id,
-    );
+    const stored = await deps.store.getWorkbenchSettings(TENANT.id, workbench.id);
     expect(stored?.settings["chat/contextWindow"]).toBe(5);
   });
 
@@ -193,14 +184,11 @@ describe("chat/contextWindow", () => {
       kind: "workbench",
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/settings`,
-      {
-        method: "PATCH",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ "chat/contextWindow": "lots" }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/settings`, {
+      method: "PATCH",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ "chat/contextWindow": "lots" }),
+    });
     expect(response.status).toBe(400);
   });
 });
@@ -280,17 +268,14 @@ describe("PATCH /workbenches/:id/settings", () => {
       kind: "workbench",
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/settings`,
-      {
-        method: "PATCH",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          "chat/pinned": false,
-          "acme-widget/color": "blue",
-        }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/settings`, {
+      method: "PATCH",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        "chat/pinned": false,
+        "acme-widget/color": "blue",
+      }),
+    });
 
     expect(response.status).toBe(200);
     const body = (await response.json()) as {
@@ -305,9 +290,7 @@ describe("PATCH /workbenches/:id/settings", () => {
     const platform = deps.platform as ReturnType<typeof fakePlatform>;
     expect(platform.sentMail).toHaveLength(0);
     const timeline = await timelineOf(deps, workbench.id);
-    expect(timelineEvents(timeline, "workbench.settings-changed")).toHaveLength(
-      1,
-    );
+    expect(timelineEvents(timeline, "workbench.settings-changed")).toHaveLength(1);
     expect(timeline[0]?.senderPrincipalId).toBe("prn_alice");
   });
 
@@ -318,14 +301,11 @@ describe("PATCH /workbenches/:id/settings", () => {
       kind: "workbench",
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/settings`,
-      {
-        method: "PATCH",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ "chat/nonexistent-field": true }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/settings`, {
+      method: "PATCH",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ "chat/nonexistent-field": true }),
+    });
 
     expect(response.status).toBe(400);
   });
@@ -337,14 +317,11 @@ describe("PATCH /workbenches/:id/settings", () => {
       kind: "workbench",
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/settings`,
-      {
-        method: "PATCH",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ "chat/pinned": "not-a-boolean" }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/settings`, {
+      method: "PATCH",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ "chat/pinned": "not-a-boolean" }),
+    });
 
     expect(response.status).toBe(400);
   });
@@ -359,18 +336,13 @@ describe("PATCH /workbenches/:id/settings", () => {
       definitionId: "wfd_echo",
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/settings`,
-      {
-        method: "PATCH",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          "chat/participants": [
-            { address: "ins_extra@acme.example", handle: "extra" },
-          ],
-        }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/settings`, {
+      method: "PATCH",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        "chat/participants": [{ address: "ins_extra@acme.example", handle: "extra" }],
+      }),
+    });
 
     expect(response.status).toBe(409);
     const body = (await response.json()) as { error: { code: string } };
@@ -384,24 +356,18 @@ describe("PATCH /workbenches/:id/settings", () => {
       kind: "workbench",
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/settings`,
-      {
-        method: "PATCH",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ "chat/purpose": "Launch planning" }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/settings`, {
+      method: "PATCH",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ "chat/purpose": "Launch planning" }),
+    });
     expect(response.status).toBe(200);
     const body = (await response.json()) as {
       settings: Record<string, unknown>;
     };
     expect(body.settings["chat/purpose"]).toBe("Launch planning");
 
-    const stored = await deps.store.getWorkbenchSettings(
-      TENANT.id,
-      workbench.id,
-    );
+    const stored = await deps.store.getWorkbenchSettings(TENANT.id, workbench.id);
     expect(stored?.settings["chat/purpose"]).toBe("Launch planning");
   });
 
@@ -412,14 +378,11 @@ describe("PATCH /workbenches/:id/settings", () => {
       kind: "workbench",
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/settings`,
-      {
-        method: "PATCH",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ "chat/purpose": 123 }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/settings`, {
+      method: "PATCH",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ "chat/purpose": 123 }),
+    });
     expect(response.status).toBe(400);
   });
 
@@ -444,14 +407,11 @@ describe("PATCH /workbenches/:id/settings", () => {
       kind: "workbench",
     });
 
-    const response = await app.request(
-      `/workbenches/${workbench.id}/settings`,
-      {
-        method: "PATCH",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ "chat/contextWindow": 7 }),
-      },
-    );
+    const response = await app.request(`/workbenches/${workbench.id}/settings`, {
+      method: "PATCH",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ "chat/contextWindow": 7 }),
+    });
     const body = (await response.json()) as {
       contextWindow: { value: number; source: string };
     };
@@ -471,27 +431,21 @@ describe("PATCH /workbenches/:id/settings", () => {
       body: JSON.stringify({ "chat/contextWindow": 7 }),
     });
 
-    const omittedResponse = await app.request(
-      `/workbenches/${workbench.id}/settings`,
-      {
-        method: "PATCH",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ "chat/pinned": true }),
-      },
-    );
+    const omittedResponse = await app.request(`/workbenches/${workbench.id}/settings`, {
+      method: "PATCH",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ "chat/pinned": true }),
+    });
     const omittedBody = (await omittedResponse.json()) as {
       contextWindow: { value: number; source: string };
     };
     expect(omittedBody.contextWindow).toEqual({ value: 7, source: "override" });
 
-    const clearedResponse = await app.request(
-      `/workbenches/${workbench.id}/settings`,
-      {
-        method: "PATCH",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ "chat/contextWindow": null }),
-      },
-    );
+    const clearedResponse = await app.request(`/workbenches/${workbench.id}/settings`, {
+      method: "PATCH",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ "chat/contextWindow": null }),
+    });
     const clearedBody = (await clearedResponse.json()) as {
       contextWindow: { value: number; source: string };
       settings: Record<string, unknown>;
@@ -507,10 +461,7 @@ describe("PATCH /workbenches/:id/settings", () => {
       kind: "workbench",
     });
 
-    const before = await deps.store.getWorkbenchSettings(
-      TENANT.id,
-      workbench.id,
-    );
+    const before = await deps.store.getWorkbenchSettings(TENANT.id, workbench.id);
     const existingParticipants = before?.settings["chat/participants"];
     const extra = {
       address: "ins_extra@acme.example",
@@ -528,9 +479,7 @@ describe("PATCH /workbenches/:id/settings", () => {
         headers: { "content-type": "application/json" },
         body: JSON.stringify({
           "chat/participants": [
-            ...(Array.isArray(existingParticipants)
-              ? existingParticipants
-              : []),
+            ...(Array.isArray(existingParticipants) ? existingParticipants : []),
             extra,
           ],
         }),
@@ -540,10 +489,7 @@ describe("PATCH /workbenches/:id/settings", () => {
     expect(pinnedResponse.status).toBe(200);
     expect(participantsResponse.status).toBe(200);
 
-    const stored = await deps.store.getWorkbenchSettings(
-      TENANT.id,
-      workbench.id,
-    );
+    const stored = await deps.store.getWorkbenchSettings(TENANT.id, workbench.id);
     expect(stored?.settings["chat/pinned"]).toBe(true);
     const participants = stored?.settings["chat/participants"];
     expect(Array.isArray(participants)).toBe(true);
@@ -577,9 +523,7 @@ describe("GET/PATCH /bench/settings", () => {
     const { body: workbench } = await createWorkbench(app, {
       kind: "workbench",
     });
-    const workbenchResponse = await app.request(
-      `/workbenches/${workbench.id}/settings`,
-    );
+    const workbenchResponse = await app.request(`/workbenches/${workbench.id}/settings`);
     const workbenchBody = (await workbenchResponse.json()) as {
       contextWindow: { value: number; source: string };
     };
diff --git a/packages/chat/test/workbench-share-routes.test.ts b/packages/chat/test/workbench-share-routes.test.ts
index e9841f104c..a8e0c8a137 100644
--- a/packages/chat/test/workbench-share-routes.test.ts
+++ b/packages/chat/test/workbench-share-routes.test.ts
@@ -17,13 +17,7 @@ import { createWorkbenchSubscriberRegistry } from "../src/workbench-events";
 import { createInMemoryBlockResponseStore } from "../src/block-responses";
 import { createInMemoryReactionStore } from "../src/reactions";
 import { createInMemoryPinStore } from "../src/pins";
-import {
-  buildDeps,
-  createWorkbench,
-  principal,
-  sendText,
-  TENANT,
-} from "./test-support";
+import { buildDeps, createWorkbench, principal, sendText, TENANT } from "./test-support";
 
 const TENANT_B = {
   id: "tnt_2",
@@ -77,14 +71,11 @@ describe("shared workbench projection", () => {
       kind: "workbench",
     });
 
-    const response = await owner.request(
-      `/workbenches/${workbench.id}/shares`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ projectedTenantId: TENANT_B.id }),
-      },
-    );
+    const response = await owner.request(`/workbenches/${workbench.id}/shares`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ projectedTenantId: TENANT_B.id }),
+    });
 
     expect(response.status).toBe(403);
     expect(await shares.getShare(workbench.id, TENANT_B.id)).toBeUndefined();
@@ -107,24 +98,18 @@ describe("shared workbench projection", () => {
     await trust.establishBilateralTrust(TENANT.id, TENANT_B.id);
     trust.seedDirectionalTrust(TENANT.id, TENANT_C.id, "outbound");
 
-    const okResponse = await owner.request(
-      `/workbenches/${workbench.id}/shares`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ projectedTenantId: TENANT_B.id }),
-      },
-    );
+    const okResponse = await owner.request(`/workbenches/${workbench.id}/shares`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ projectedTenantId: TENANT_B.id }),
+    });
     expect(okResponse.status).toBe(201);
 
-    const oneWayResponse = await owner.request(
-      `/workbenches/${workbench.id}/shares`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ projectedTenantId: TENANT_C.id }),
-      },
-    );
+    const oneWayResponse = await owner.request(`/workbenches/${workbench.id}/shares`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ projectedTenantId: TENANT_C.id }),
+    });
     expect(oneWayResponse.status).toBe(403);
   });
 
@@ -148,9 +133,7 @@ describe("shared workbench projection", () => {
       body: JSON.stringify({ projectedTenantId: TENANT_B.id }),
     });
 
-    const beforeMember = await (
-      await memberSide.request("/workbenches?kind=workbench")
-    ).json();
+    const beforeMember = await (await memberSide.request("/workbenches?kind=workbench")).json();
     expect(
       (beforeMember as { items: unknown[] }).items.some(
         (item) => (item as { id: string }).id === workbench.id,
@@ -196,14 +179,12 @@ describe("shared workbench projection", () => {
       body: JSON.stringify({ projectedTenantId: TENANT_B.id }),
     });
 
-    const list = (await (
-      await outsider.request("/workbenches?kind=workbench")
-    ).json()) as { items: { id: string }[] };
+    const list = (await (await outsider.request("/workbenches?kind=workbench")).json()) as {
+      items: { id: string }[];
+    };
     expect(list.items.some((item) => item.id === workbench.id)).toBe(false);
 
-    const direct = await outsider.request(
-      `/workbenches/${workbench.id}/messages`,
-    );
+    const direct = await outsider.request(`/workbenches/${workbench.id}/messages`);
     expect(direct.status).toBe(404);
   });
 
@@ -234,25 +215,19 @@ describe("shared workbench projection", () => {
     });
 
     const received: unknown[] = [];
-    workbenchSubscribers.subscribe(workbench.id, (event) =>
-      received.push(event),
-    );
+    workbenchSubscribers.subscribe(workbench.id, (event) => received.push(event));
 
     // Both an owning-tenant caller and a projected-member-tenant caller
     // can reach the same workbench's typing route (fan-out is keyed by
     // workbenchId only — see workbench-events.ts) once resolveWorkbenchAccess
     // lets the member-tenant request past the gate at all.
-    const ownerTyping = await owner.request(
-      `/workbenches/${workbench.id}/typing`,
-      {
-        method: "POST",
-      },
-    );
+    const ownerTyping = await owner.request(`/workbenches/${workbench.id}/typing`, {
+      method: "POST",
+    });
     expect(ownerTyping.status).toBe(202);
-    const memberTyping = await memberSide.request(
-      `/workbenches/${workbench.id}/typing`,
-      { method: "POST" },
-    );
+    const memberTyping = await memberSide.request(`/workbenches/${workbench.id}/typing`, {
+      method: "POST",
+    });
     expect(memberTyping.status).toBe(202);
 
     expect(received).toHaveLength(2);
@@ -283,11 +258,7 @@ describe("shared workbench projection", () => {
       body: JSON.stringify({ principalId: "prn_bob" }),
     });
 
-    const sendResponse = await sendText(
-      memberSide,
-      workbench.id,
-      "hi from beta",
-    );
+    const sendResponse = await sendText(memberSide, workbench.id, "hi from beta");
     expect(sendResponse.status).toBe(201);
     // The row is written under the OWNING tenant, never a copy
     // materialized under the projected one.
@@ -305,11 +276,9 @@ describe("shared workbench projection", () => {
     const ownerMessages = (await (
       await owner.request(`/workbenches/${workbench.id}/messages`)
     ).json()) as { items: { sender: { address: string } }[] };
-    expect(
-      ownerMessages.items.some((item) =>
-        item.sender.address.startsWith("prn_bob@"),
-      ),
-    ).toBe(true);
+    expect(ownerMessages.items.some((item) => item.sender.address.startsWith("prn_bob@"))).toBe(
+      true,
+    );
   });
 
   test("per-tenant membership isolation over HTTP: removing tenant B's member does not affect tenant C's", async () => {
@@ -354,12 +323,8 @@ describe("shared workbench projection", () => {
       method: "DELETE",
     });
 
-    expect(
-      await shares.isShareMember(TENANT_B.id, workbench.id, "prn_bob"),
-    ).toBe(false);
-    expect(
-      await shares.isShareMember(TENANT_C.id, workbench.id, "prn_carol"),
-    ).toBe(true);
+    expect(await shares.isShareMember(TENANT_B.id, workbench.id, "prn_bob")).toBe(false);
+    expect(await shares.isShareMember(TENANT_C.id, workbench.id, "prn_carol")).toBe(true);
   });
 
   test("revoking a share member's row is live on the real SSE stream: the next published event never reaches them", async () => {
@@ -388,9 +353,7 @@ describe("shared workbench projection", () => {
       body: JSON.stringify({ principalId: "prn_bob" }),
     });
 
-    const streamResponse = await memberSide.request(
-      `/workbenches/${workbench.id}/stream`,
-    );
+    const streamResponse = await memberSide.request(`/workbenches/${workbench.id}/stream`);
     expect(streamResponse.status).toBe(200);
     const body = streamResponse.body;
     if (body === null) throw new Error("stream has no body");
@@ -401,13 +364,9 @@ describe("shared workbench projection", () => {
       return Promise.race([
         reader
           .read()
-          .then((result) =>
-            result.done ? undefined : decoder.decode(result.value),
-          )
+          .then((result) => (result.done ? undefined : decoder.decode(result.value)))
           .catch(() => undefined),
-        new Promise<undefined>((resolve) =>
-          setTimeout(() => resolve(undefined), timeoutMs),
-        ),
+        new Promise<undefined>((resolve) => setTimeout(() => resolve(undefined), timeoutMs)),
       ]);
     }
 
@@ -415,9 +374,7 @@ describe("shared workbench projection", () => {
     // presence delta) before anything else — see `bridgeWorkbenchStream`'s
     // `presence` option — so this reads past those rather than assuming
     // `chat.typing` is the very first chunk.
-    async function readUntilContains(
-      needle: string,
-    ): Promise<string | undefined> {
+    async function readUntilContains(needle: string): Promise<string | undefined> {
       for (let attempt = 0; attempt < 5; attempt += 1) {
         const chunk = await readChunk(2_000);
         if (chunk === undefined) return undefined;
@@ -433,14 +390,11 @@ describe("shared workbench projection", () => {
     const beforeRevocation = await readUntilContains("chat.typing");
     expect(beforeRevocation).toContain("chat.typing");
 
-    const revoked = await memberSide.request(
-      `/workbenches/${workbench.id}/share-members/prn_bob`,
-      { method: "DELETE" },
-    );
+    const revoked = await memberSide.request(`/workbenches/${workbench.id}/share-members/prn_bob`, {
+      method: "DELETE",
+    });
     expect(revoked.status).toBe(204);
-    expect(
-      await shares.isShareMember(TENANT_B.id, workbench.id, "prn_bob"),
-    ).toBe(false);
+    expect(await shares.isShareMember(TENANT_B.id, workbench.id, "prn_bob")).toBe(false);
 
     workbenchSubscribers.publish(workbench.id, {
       type: "chat.typing",
@@ -454,11 +408,7 @@ describe("shared workbench projection", () => {
 });
 
 describe("shared workbench projection — block responses", () => {
-  function responsesUrl(
-    workbenchId: string,
-    messageId: string,
-    blockId: string,
-  ) {
+  function responsesUrl(workbenchId: string, messageId: string, blockId: string) {
     return `/workbenches/${workbenchId}/messages/${messageId}/blocks/${blockId}/responses`;
   }
 
@@ -488,19 +438,14 @@ describe("shared workbench projection — block responses", () => {
       body: JSON.stringify({ principalId: "prn_bob" }),
     });
 
-    const post = await memberSide.request(
-      responsesUrl(workbench.id, "m1", "blk_poll1"),
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ kind: "poll", choiceIds: ["tue"] }),
-      },
-    );
+    const post = await memberSide.request(responsesUrl(workbench.id, "m1", "blk_poll1"), {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ kind: "poll", choiceIds: ["tue"] }),
+    });
     expect(post.status).toBe(200);
 
-    const get = await memberSide.request(
-      responsesUrl(workbench.id, "m1", "blk_poll1"),
-    );
+    const get = await memberSide.request(responsesUrl(workbench.id, "m1", "blk_poll1"));
     expect(get.status).toBe(200);
     const body = (await get.json()) as {
       tally: Record<string, number>;
@@ -512,20 +457,13 @@ describe("shared workbench projection — block responses", () => {
 
     // The response is stored under the OWNING tenant, not the acting
     // (projected) tenant — the owner can read the very same tally back.
-    const ownerGet = await owner.request(
-      responsesUrl(workbench.id, "m1", "blk_poll1"),
-    );
+    const ownerGet = await owner.request(responsesUrl(workbench.id, "m1", "blk_poll1"));
     const ownerBody = (await ownerGet.json()) as {
       tally: Record<string, number>;
     };
     expect(ownerBody.tally).toEqual({ tue: 1 });
     expect(
-      await blockResponses.listBlockResponses(
-        TENANT.id,
-        workbench.id,
-        "m1",
-        "blk_poll1",
-      ),
+      await blockResponses.listBlockResponses(TENANT.id, workbench.id, "m1", "blk_poll1"),
     ).toHaveLength(1);
   });
 
@@ -544,19 +482,14 @@ describe("shared workbench projection — block responses", () => {
       kind: "workbench",
     });
 
-    const post = await outsider.request(
-      responsesUrl(workbench.id, "m1", "blk_poll1"),
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ kind: "poll", choiceIds: ["tue"] }),
-      },
-    );
+    const post = await outsider.request(responsesUrl(workbench.id, "m1", "blk_poll1"), {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ kind: "poll", choiceIds: ["tue"] }),
+    });
     expect(post.status).toBe(404);
 
-    const get = await outsider.request(
-      responsesUrl(workbench.id, "m1", "blk_poll1"),
-    );
+    const get = await outsider.request(responsesUrl(workbench.id, "m1", "blk_poll1"));
     expect(get.status).toBe(404);
   });
 });
@@ -608,20 +541,17 @@ describe("shared workbench projection — reactions and pins", () => {
     await establishShare(trust, owner, memberSide, workbench.id, "prn_bob");
 
     await sendText(owner, workbench.id, "hello from the owner");
-    const list = (await (
-      await owner.request(`/workbenches/${workbench.id}/messages`)
-    ).json()) as { items: { id: string }[] };
+    const list = (await (await owner.request(`/workbenches/${workbench.id}/messages`)).json()) as {
+      items: { id: string }[];
+    };
     const messageId = list.items[0]?.id;
     if (messageId === undefined) throw new Error("no message id");
 
-    const toggle = await memberSide.request(
-      toggleUrl(workbench.id, messageId),
-      {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ emoji: "👍" }),
-      },
-    );
+    const toggle = await memberSide.request(toggleUrl(workbench.id, messageId), {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ emoji: "👍" }),
+    });
     expect(toggle.status).toBe(200);
     const toggleBody = (await toggle.json()) as {
       emoji: string;
@@ -632,9 +562,7 @@ describe("shared workbench projection — reactions and pins", () => {
 
     // Stored under the OWNING tenant, not the acting (projected) tenant.
     expect(
-      await reactions.listReactionsForMessages(TENANT.id, workbench.id, [
-        messageId,
-      ]),
+      await reactions.listReactionsForMessages(TENANT.id, workbench.id, [messageId]),
     ).toHaveLength(1);
 
     const pin = await memberSide.request(pinUrl(workbench.id, messageId), {
@@ -675,9 +603,9 @@ describe("shared workbench projection — reactions and pins", () => {
       kind: "workbench",
     });
     await sendText(owner, workbench.id, "hello from the owner");
-    const list = (await (
-      await owner.request(`/workbenches/${workbench.id}/messages`)
-    ).json()) as { items: { id: string }[] };
+    const list = (await (await owner.request(`/workbenches/${workbench.id}/messages`)).json()) as {
+      items: { id: string }[];
+    };
     const messageId = list.items[0]?.id;
     if (messageId === undefined) throw new Error("no message id");
 
@@ -694,9 +622,7 @@ describe("shared workbench projection — reactions and pins", () => {
     expect(pin.status).toBe(404);
 
     expect(
-      await reactions.listReactionsForMessages(TENANT.id, workbench.id, [
-        messageId,
-      ]),
+      await reactions.listReactionsForMessages(TENANT.id, workbench.id, [messageId]),
     ).toHaveLength(0);
     expect(await pins.listPins(TENANT.id, workbench.id)).toHaveLength(0);
   });
diff --git a/packages/chat/test/workbench-share.test.ts b/packages/chat/test/workbench-share.test.ts
index c4b1a523af..5a819e3c1d 100644
--- a/packages/chat/test/workbench-share.test.ts
+++ b/packages/chat/test/workbench-share.test.ts
@@ -65,9 +65,7 @@ test("createShare reports already_shared on a repeat and does not duplicate the
   });
 
   expect(outcome).toEqual({ kind: "already_shared" });
-  expect(
-    (await shares.listSharesForWorkbench("tnt_a", "ins_general")).length,
-  ).toBe(1);
+  expect((await shares.listSharesForWorkbench("tnt_a", "ins_general")).length).toBe(1);
 });
 
 test("revoking trust after a share exists does not retroactively delete the share", async () => {
@@ -111,9 +109,7 @@ test("addShareMember fails closed with no_share when no share row exists", async
   });
 
   expect(outcome).toBe("no_share");
-  expect(await shares.isShareMember("tnt_b", "ins_general", "prn_carol")).toBe(
-    false,
-  );
+  expect(await shares.isShareMember("tnt_b", "ins_general", "prn_carol")).toBe(false);
 });
 
 test("addShareMember succeeds once a share exists", async () => {
@@ -134,12 +130,8 @@ test("addShareMember succeeds once a share exists", async () => {
   });
 
   expect(outcome).toBe("added");
-  expect(await shares.isShareMember("tnt_b", "ins_general", "prn_carol")).toBe(
-    true,
-  );
-  expect(await shares.listShareMembers("tnt_b", "ins_general")).toEqual([
-    "prn_carol",
-  ]);
+  expect(await shares.isShareMember("tnt_b", "ins_general", "prn_carol")).toBe(true);
+  expect(await shares.listShareMembers("tnt_b", "ins_general")).toEqual(["prn_carol"]);
 });
 
 test("per-tenant membership isolation: two projected tenants sharing the same workbench keep independent members", async () => {
@@ -171,21 +163,13 @@ test("per-tenant membership isolation: two projected tenants sharing the same wo
     addedBy: "prn_carol",
   });
 
-  expect(await shares.isShareMember("tnt_b", "ins_general", "prn_carol")).toBe(
-    true,
-  );
-  expect(await shares.isShareMember("tnt_c", "ins_general", "prn_carol")).toBe(
-    false,
-  );
+  expect(await shares.isShareMember("tnt_b", "ins_general", "prn_carol")).toBe(true);
+  expect(await shares.isShareMember("tnt_c", "ins_general", "prn_carol")).toBe(false);
 
   // Removing tenant B's member does not affect tenant C's.
   await shares.removeShareMember("tnt_b", "ins_general", "prn_carol");
-  expect(await shares.isShareMember("tnt_b", "ins_general", "prn_carol")).toBe(
-    false,
-  );
-  expect(await shares.isShareMember("tnt_c", "ins_general", "prn_dave")).toBe(
-    true,
-  );
+  expect(await shares.isShareMember("tnt_b", "ins_general", "prn_carol")).toBe(false);
+  expect(await shares.isShareMember("tnt_c", "ins_general", "prn_dave")).toBe(true);
 });
 
 test("listSharesProjectedInto returns every share made into that tenant", async () => {
diff --git a/packages/chat/test/workbench-subscribers-wiring.test.ts b/packages/chat/test/workbench-subscribers-wiring.test.ts
index 7ac99e8fa2..a535c2b566 100644
--- a/packages/chat/test/workbench-subscribers-wiring.test.ts
+++ b/packages/chat/test/workbench-subscribers-wiring.test.ts
@@ -8,18 +8,9 @@ import { describe, expect, test } from "bun:test";
 import { createChatRoutes } from "../src/routes";
 import { createWorkbenchSubscriberRegistry } from "../src/workbench-events";
 import { startWorkflowCommand } from "../src/workbench-service";
-import {
-  createCommandRegistry,
-  createWorkflowCommandPlugin,
-} from "@corbits/commands";
+import { createCommandRegistry, createWorkflowCommandPlugin } from "@corbits/commands";
 import type { ChatWorkbenchEvent } from "../src/platform-port";
-import {
-  buildDeps,
-  createWorkbench,
-  fakePlatform,
-  mountAs,
-  sendText,
-} from "./test-support";
+import { buildDeps, createWorkbench, fakePlatform, mountAs, sendText } from "./test-support";
 
 describe("workbench subscriber registry shared between chat routes and command dispatch", () => {
   test("a workflow started via a slash command publishes onto a subscriber already listening on that workbench", async () => {
@@ -31,8 +22,7 @@ describe("workbench subscriber registry shared between chat routes and command d
     const commands = createCommandRegistry();
     commands.registerCommandPlugin(
       createWorkflowCommandPlugin({
-        listInvitableDefinitions: (tenantId) =>
-          platform.listInvitableDefinitions(tenantId),
+        listInvitableDefinitions: (tenantId) => platform.listInvitableDefinitions(tenantId),
         startWorkflow: (input) =>
           startWorkflowCommand(
             {
@@ -57,9 +47,7 @@ describe("workbench subscriber registry shared between chat routes and command d
     });
 
     const received: ChatWorkbenchEvent[] = [];
-    workbenchSubscribers.subscribe(workbench.id, (event) =>
-      received.push(event),
-    );
+    workbenchSubscribers.subscribe(workbench.id, (event) => received.push(event));
 
     const response = await sendText(app, workbench.id, "/echo hello there");
     expect(response.status).toBe(201);
diff --git a/packages/chat/test/workflow-participant-routes.test.ts b/packages/chat/test/workflow-participant-routes.test.ts
index 48353e4a8f..14fb8c9d95 100644
--- a/packages/chat/test/workflow-participant-routes.test.ts
+++ b/packages/chat/test/workflow-participant-routes.test.ts
@@ -38,9 +38,7 @@ const authenticateAsRun: WorkflowRunAuthenticator = {
     ),
 };
 
-function buildApp(
-  overrides: Partial<CreateWorkflowParticipantRoutesDeps> = {},
-): Hono {
+function buildApp(overrides: Partial<CreateWorkflowParticipantRoutesDeps> = {}): Hono {
   const store = overrides.store ?? createInMemoryChatStore();
   const publish = overrides.publish ?? (() => undefined);
   return createWorkflowParticipantRoutes({
@@ -258,9 +256,7 @@ describe("POST /participants/messages", () => {
     expect(listed.items[0]?.sender.address).toBe(RUN_ADDRESS);
     expect(listed.items[0]?.senderPrincipalId).toBe("prn_1");
     expect(listed.items[0]?.parts).toEqual([questionBlock]);
-    expect(
-      platform.sentMail.every((mail) => mail.workbenchId !== "chan_1"),
-    ).toBe(true);
+    expect(platform.sentMail.every((mail) => mail.workbenchId !== "chan_1")).toBe(true);
   });
 
   test("re-posting a question block with the same questionId returns the existing card and does not insert a second message", async () => {
diff --git a/packages/chat/test/write-claims.drizzle.test.ts b/packages/chat/test/write-claims.drizzle.test.ts
index e4508b5e6f..614da26800 100644
--- a/packages/chat/test/write-claims.drizzle.test.ts
+++ b/packages/chat/test/write-claims.drizzle.test.ts
@@ -30,9 +30,7 @@ const databaseUrl = e2eDatabaseUrl();
 const describeIfDb = dbGate(databaseUrl, import.meta.path);
 
 describeIfDb("createDrizzleWriteClaimStore: concurrent tryClaim", () => {
-  const scratchUrl = scratchUrlFor(
-    databaseUrl ?? "postgres://localhost:5432/unused",
-  );
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused");
   const scratchTarget = new URL(scratchUrl);
   const scratchDatabase = scratchTarget.pathname.replace(/^\//, "");
 
@@ -79,10 +77,7 @@ describeIfDb("createDrizzleWriteClaimStore: concurrent tryClaim", () => {
         claimKey: "turn_race_1",
       };
 
-      const [first, second] = await Promise.all([
-        store.tryClaim(claim),
-        store.tryClaim(claim),
-      ]);
+      const [first, second] = await Promise.all([store.tryClaim(claim), store.tryClaim(claim)]);
 
       expect([first, second].sort()).toEqual([false, true]);
 
diff --git a/packages/client-log/package.json b/packages/client-log/package.json
index 90f82d20e9..4f92be63ce 100644
--- a/packages/client-log/package.json
+++ b/packages/client-log/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/client-log",
+  "version": "0.0.1",
   "private": true,
   "description": "The one browser-side logger apps/web and chat-ui use in place of raw console calls (CL-6359): category + level, a ring buffer a devtools panel or a future beacon can flush, and a console sink gated by level so noisy debug/info lines don't ship to a real user's console.",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/client-log/src/index.test.ts b/packages/client-log/src/index.test.ts
index 1b88fccd36..4bcd9e4e61 100644
--- a/packages/client-log/src/index.test.ts
+++ b/packages/client-log/src/index.test.ts
@@ -53,8 +53,7 @@ describe("client log", () => {
     const originalError = console.error;
     console.log = (...args: unknown[]) => calls.push({ level: "log", args });
     console.warn = (...args: unknown[]) => calls.push({ level: "warn", args });
-    console.error = (...args: unknown[]) =>
-      calls.push({ level: "error", args });
+    console.error = (...args: unknown[]) => calls.push({ level: "error", args });
 
     try {
       const log = getLogger("test");
diff --git a/packages/code-review/package.json b/packages/code-review/package.json
index e8830b93e6..e96eb2b890 100644
--- a/packages/code-review/package.json
+++ b/packages/code-review/package.json
@@ -1,24 +1,24 @@
 {
   "name": "@corbits/code-review",
-  "description": "Multi-reviewer pull-request review: three reviewer definitions, one aggregated review, posted to GitHub",
   "version": "0.0.2",
+  "description": "Multi-reviewer pull-request review: three reviewer definitions, one aggregated review, posted to GitHub",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "exports": {
-    ".": "./src/index.ts",
-    "./reviewers": "./src/reviewers.ts",
-    "./agent-requests": "./src/agent-requests.ts",
-    "./introductions": "./src/introductions.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "packages/code-review"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "packages/code-review"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts",
+    "./reviewers": "./src/reviewers.ts",
+    "./agent-requests": "./src/agent-requests.ts",
+    "./introductions": "./src/introductions.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -30,12 +30,12 @@
   "dependencies": {
     "arktype": "catalog:"
   },
-  "peerDependencies": {
-    "@corbits/github-tools": "0.0.10"
-  },
   "devDependencies": {
     "@corbits/agent-directory": "workspace:*",
     "@types/bun": "catalog:",
     "typescript": "catalog:"
+  },
+  "peerDependencies": {
+    "@corbits/github-tools": "0.0.11"
   }
 }
diff --git a/packages/code-review/src/aggregate.test.ts b/packages/code-review/src/aggregate.test.ts
index d1c328cc69..022ccd70b6 100644
--- a/packages/code-review/src/aggregate.test.ts
+++ b/packages/code-review/src/aggregate.test.ts
@@ -257,10 +257,7 @@ test("every finding carries its fingerprint as an HTML comment marker", () => {
     file: "a.ts",
     summary: "rename this",
   };
-  const review = aggregateReview(
-    [pass("correctness", { summary: "", findings: [finding] })],
-    DIFF,
-  );
+  const review = aggregateReview([pass("correctness", { summary: "", findings: [finding] })], DIFF);
   const fingerprint = fingerprintOf(finding);
   expect(review.body).toContain(`<!-- code-review:finding:${fingerprint} -->`);
 });
@@ -282,18 +279,15 @@ test("a fingerprint already posted is skipped on a re-run", () => {
 });
 
 test("an untruncated diff and comment page post no incompleteness note", () => {
-  const review = aggregateReview(
-    [pass("correctness", { summary: "read it", findings: [] })],
-    DIFF,
-  );
+  const review = aggregateReview([pass("correctness", { summary: "read it", findings: [] })], DIFF);
   expect(review.body).not.toContain("may be incomplete");
 });
 
 test("a truncated diff surfaces an incompleteness note in the review body", () => {
-  const review = aggregateReview(
-    [pass("correctness", { summary: "read it", findings: [] })],
-    { ...DIFF, truncated: true },
-  );
+  const review = aggregateReview([pass("correctness", { summary: "read it", findings: [] })], {
+    ...DIFF,
+    truncated: true,
+  });
   expect(review.body).toContain(
     "This review may be incomplete: the pull request has more changed " +
       "files or already-posted comments than one review pass reads",
diff --git a/packages/code-review/src/aggregate.ts b/packages/code-review/src/aggregate.ts
index fe36a10d8f..4c2cc378ce 100644
--- a/packages/code-review/src/aggregate.ts
+++ b/packages/code-review/src/aggregate.ts
@@ -73,10 +73,7 @@ function collect(
   passes: readonly ReviewerPass[],
   alreadyPosted: ReadonlySet<string>,
 ): CollectedPasses {
-  const byFingerprint = new Map<
-    string,
-    { finding: ReviewerFinding; who: string[] }
-  >();
+  const byFingerprint = new Map<string, { finding: ReviewerFinding; who: string[] }>();
   const summaries: { name: string; summary: string }[] = [];
   const silent: { name: string; reason: string }[] = [];
 
@@ -103,9 +100,7 @@ function collect(
         continue;
       }
       existing.who.push(name);
-      if (
-        severityRank(finding.severity) < severityRank(existing.finding.severity)
-      ) {
+      if (severityRank(finding.severity) < severityRank(existing.finding.severity)) {
         byFingerprint.set(fingerprint, { finding, who: existing.who });
       }
     }
@@ -118,17 +113,12 @@ function collect(
       reviewers: entry.who,
     }))
     .sort(
-      (left, right) =>
-        severityRank(left.finding.severity) -
-        severityRank(right.finding.severity),
+      (left, right) => severityRank(left.finding.severity) - severityRank(right.finding.severity),
     );
   return { findings, summaries, silent };
 }
 
-function anchorable(
-  finding: ReviewerFinding,
-  diff: PullRequestDiff,
-): number | undefined {
+function anchorable(finding: ReviewerFinding, diff: PullRequestDiff): number | undefined {
   if (finding.line === undefined) return undefined;
   const file = diff.files.find((entry) => entry.path === finding.file);
   if (file === undefined) return undefined;
@@ -149,16 +139,11 @@ function rightHandLines(patch: string): string {
   return patch
     .split("\n")
     .filter((line) => !line.startsWith("-") && !line.startsWith("@@"))
-    .map((line) =>
-      line.startsWith("+") || line.startsWith(" ") ? line.slice(1) : line,
-    )
+    .map((line) => (line.startsWith("+") || line.startsWith(" ") ? line.slice(1) : line))
     .join("\n");
 }
 
-function existingCodeAnchors(
-  finding: ReviewerFinding,
-  diff: PullRequestDiff,
-): boolean {
+function existingCodeAnchors(finding: ReviewerFinding, diff: PullRequestDiff): boolean {
   if (finding.existingCode === undefined) return false;
   const file = diff.files.find((entry) => entry.path === finding.file);
   if (file?.patch === undefined) return false;
@@ -167,10 +152,7 @@ function existingCodeAnchors(
 
 function bodyLine(entry: AggregatedFinding): string {
   const path = inlineCodeSafe(entry.finding.file);
-  const where =
-    entry.finding.line === undefined
-      ? path
-      : `${path}:${String(entry.finding.line)}`;
+  const where = entry.finding.line === undefined ? path : `${path}:${String(entry.finding.line)}`;
   return (
     `- \`${where}\` — ${singleLine(entry.finding.summary)} ` +
     `_(${attribution(entry.reviewers)})_ ` +
@@ -183,10 +165,7 @@ function commentBody(entry: AggregatedFinding, diff: PullRequestDiff): string {
     `**${SEVERITY_HEADING[entry.finding.severity]}** — ` +
     `${singleLine(entry.finding.summary)}\n\n_${attribution(entry.reviewers)}_`;
   const marker = fingerprintMarker(entry.fingerprint);
-  if (
-    entry.finding.suggestedFix === undefined ||
-    !existingCodeAnchors(entry.finding, diff)
-  ) {
+  if (entry.finding.suggestedFix === undefined || !existingCodeAnchors(entry.finding, diff)) {
     return `${head}\n\n${marker}`;
   }
   return (
@@ -210,12 +189,8 @@ function countLine(findings: readonly AggregatedFinding[]): string {
     return "No findings — the reviewers read the change and had nothing to raise.";
   }
   const counts = SEVERITY_ORDER.map((severity) => {
-    const total = findings.filter(
-      (entry) => entry.finding.severity === severity,
-    ).length;
-    return total === 0
-      ? undefined
-      : `${String(total)} ${SEVERITY_HEADING[severity].toLowerCase()}`;
+    const total = findings.filter((entry) => entry.finding.severity === severity).length;
+    return total === 0 ? undefined : `${String(total)} ${SEVERITY_HEADING[severity].toLowerCase()}`;
   }).filter((part): part is string => part !== undefined);
   return `${counts.join(", ")}.`;
 }
@@ -232,20 +207,14 @@ export function aggregateReview(
   commentsTruncated = false,
 ): PullRequestReviewDraft {
   const collected = collect(passes, alreadyPosted);
-  const sections: string[] = [
-    "## Code review",
-    "",
-    countLine(collected.findings),
-  ];
+  const sections: string[] = ["## Code review", "", countLine(collected.findings)];
 
   if (diff.truncated || commentsTruncated) {
     sections.push("", TRUNCATED_NOTE);
   }
 
   for (const severity of SEVERITY_ORDER) {
-    const forSeverity = collected.findings.filter(
-      (entry) => entry.finding.severity === severity,
-    );
+    const forSeverity = collected.findings.filter((entry) => entry.finding.severity === severity);
     if (forSeverity.length === 0) continue;
     sections.push("", `### ${SEVERITY_HEADING[severity]}`, "");
     sections.push(...forSeverity.map(bodyLine));
@@ -254,19 +223,13 @@ export function aggregateReview(
   if (collected.summaries.length > 0) {
     sections.push("", "### What each reviewer looked at", "");
     sections.push(
-      ...collected.summaries.map(
-        (entry) => `- **${entry.name}** — ${singleLine(entry.summary)}`,
-      ),
+      ...collected.summaries.map((entry) => `- **${entry.name}** — ${singleLine(entry.summary)}`),
     );
   }
 
   if (collected.silent.length > 0) {
     sections.push("", "### Reviewers that did not report", "");
-    sections.push(
-      ...collected.silent.map(
-        (entry) => `- **${entry.name}** — ${entry.reason}`,
-      ),
-    );
+    sections.push(...collected.silent.map((entry) => `- **${entry.name}** — ${entry.reason}`));
   }
 
   const comments: PullRequestReviewComment[] = [];
diff --git a/packages/code-review/src/bot-guard.ts b/packages/code-review/src/bot-guard.ts
index 8938f02ab7..5f26c1c71f 100644
--- a/packages/code-review/src/bot-guard.ts
+++ b/packages/code-review/src/bot-guard.ts
@@ -8,7 +8,5 @@ const BOT_LOGIN_INDICATORS = ["bot_", "bot-", "_bot", "-bot", "[bot]"];
 /** Whether a pull-request author's login reads as a bot, not a person. */
 export function isBotAuthor(login: string): boolean {
   const normalized = login.toLowerCase();
-  return BOT_LOGIN_INDICATORS.some((indicator) =>
-    normalized.includes(indicator),
-  );
+  return BOT_LOGIN_INDICATORS.some((indicator) => normalized.includes(indicator));
 }
diff --git a/packages/code-review/src/fingerprint.test.ts b/packages/code-review/src/fingerprint.test.ts
index 7250066709..da5419ebd0 100644
--- a/packages/code-review/src/fingerprint.test.ts
+++ b/packages/code-review/src/fingerprint.test.ts
@@ -1,10 +1,6 @@
 import { expect, test } from "bun:test";
 
-import {
-  fingerprintMarker,
-  fingerprintOf,
-  fingerprintsIn,
-} from "./fingerprint";
+import { fingerprintMarker, fingerprintOf, fingerprintsIn } from "./fingerprint";
 import type { ReviewerFinding } from "./report";
 
 function finding(overrides: Partial<ReviewerFinding> = {}): ReviewerFinding {
@@ -28,15 +24,11 @@ test("whitespace and case in the summary do not change the fingerprint", () => {
 });
 
 test("a different line changes the fingerprint", () => {
-  expect(fingerprintOf(finding({ line: 3 }))).not.toBe(
-    fingerprintOf(finding({ line: 2 })),
-  );
+  expect(fingerprintOf(finding({ line: 3 }))).not.toBe(fingerprintOf(finding({ line: 2 })));
 });
 
 test("a different file changes the fingerprint", () => {
-  expect(fingerprintOf(finding({ file: "other.ts" }))).not.toBe(
-    fingerprintOf(finding()),
-  );
+  expect(fingerprintOf(finding({ file: "other.ts" }))).not.toBe(fingerprintOf(finding()));
 });
 
 test("fingerprintsIn reads every marker out of posted comment bodies", () => {
@@ -51,7 +43,5 @@ test("fingerprintsIn reads every marker out of posted comment bodies", () => {
 });
 
 test("fingerprintsIn ignores text that only looks like a marker", () => {
-  expect(fingerprintsIn(["<!-- code-review:finding:not-a-hash -->"])).toEqual(
-    new Set(),
-  );
+  expect(fingerprintsIn(["<!-- code-review:finding:not-a-hash -->"])).toEqual(new Set());
 });
diff --git a/packages/code-review/src/github.ts b/packages/code-review/src/github.ts
index 4cc2277250..70511fc206 100644
--- a/packages/code-review/src/github.ts
+++ b/packages/code-review/src/github.ts
@@ -11,13 +11,10 @@ import {
 import type { CodeReviewGitHub } from "./review-run";
 
 /** The GitHub reach a review run needs, under a resolved credential. */
-export function createGitHubReviewClient(
-  config: GitHubClientConfig,
-): CodeReviewGitHub {
+export function createGitHubReviewClient(config: GitHubClientConfig): CodeReviewGitHub {
   return {
     fetchDiff: (ref) => fetchPullRequestDiff(config, ref),
-    postReview: (ref, headSha, review) =>
-      postPullRequestReview(config, ref, headSha, review),
+    postReview: (ref, headSha, review) => postPullRequestReview(config, ref, headSha, review),
     listPostedComments: (ref) => fetchPullRequestReviewComments(config, ref),
   };
 }
diff --git a/packages/code-review/src/index.ts b/packages/code-review/src/index.ts
index f00b9c365f..3bbf47b383 100644
--- a/packages/code-review/src/index.ts
+++ b/packages/code-review/src/index.ts
@@ -1,14 +1,7 @@
-export {
-  codeReviewAgentRequests,
-  type CodeReviewAgentRequest,
-} from "./agent-requests";
+export { codeReviewAgentRequests, type CodeReviewAgentRequest } from "./agent-requests";
 export { aggregateReview, type ReviewerPass } from "./aggregate";
 export { isBotAuthor } from "./bot-guard";
-export {
-  fingerprintMarker,
-  fingerprintOf,
-  fingerprintsIn,
-} from "./fingerprint";
+export { fingerprintMarker, fingerprintOf, fingerprintsIn } from "./fingerprint";
 export { createGitHubReviewClient } from "./github";
 export { renderReviewPrompt } from "./prompt";
 export {
@@ -24,10 +17,7 @@ export {
   reviewerById,
   type ReviewerDefinition,
 } from "./reviewers";
-export {
-  reviewerIntroductions,
-  type ReviewerIntroduction,
-} from "./introductions";
+export { reviewerIntroductions, type ReviewerIntroduction } from "./introductions";
 export {
   runPullRequestReview,
   type CodeReviewGitHub,
diff --git a/packages/code-review/src/prompt.test.ts b/packages/code-review/src/prompt.test.ts
index f9827fbd64..27799b75e0 100644
--- a/packages/code-review/src/prompt.test.ts
+++ b/packages/code-review/src/prompt.test.ts
@@ -1,8 +1,5 @@
 import { expect, test } from "bun:test";
-import type {
-  PullRequestDiff,
-  PullRequestFileDiff,
-} from "@corbits/github-tools";
+import type { PullRequestDiff, PullRequestFileDiff } from "@corbits/github-tools";
 
 import { renderReviewPrompt } from "./prompt";
 
diff --git a/packages/code-review/src/prompt.ts b/packages/code-review/src/prompt.ts
index 95aee0f67f..e1679b0192 100644
--- a/packages/code-review/src/prompt.ts
+++ b/packages/code-review/src/prompt.ts
@@ -29,9 +29,7 @@ export function renderReviewPrompt(diff: PullRequestDiff): string {
     `Files changed: ${String(diff.files.length)}`,
     "",
     "Description:",
-    diff.description.trim().length === 0
-      ? "(none given)"
-      : diff.description.trim(),
+    diff.description.trim().length === 0 ? "(none given)" : diff.description.trim(),
     "",
   ].join("\n");
 
@@ -47,9 +45,7 @@ export function renderReviewPrompt(diff: PullRequestDiff): string {
       continue;
     }
     const body =
-      file.patch === undefined
-        ? "(no patch available for this file)"
-        : renderPatch(file.patch);
+      file.patch === undefined ? "(no patch available for this file)" : renderPatch(file.patch);
     spent += body.length;
     rendered.push(`${heading}\n${body}`);
   }
diff --git a/packages/code-review/src/report.test.ts b/packages/code-review/src/report.test.ts
index 3d73b2129f..25092b8f0b 100644
--- a/packages/code-review/src/report.test.ts
+++ b/packages/code-review/src/report.test.ts
@@ -13,17 +13,13 @@ test("parses a bare JSON report", () => {
 });
 
 test("parses a report inside a JSON code fence", () => {
-  const parsed = parseReviewerReport(
-    '```json\n{"summary":"fine","findings":[]}\n```',
-  );
+  const parsed = parseReviewerReport('```json\n{"summary":"fine","findings":[]}\n```');
   if (!parsed.ok) throw new Error(parsed.reason);
   expect(parsed.report.findings).toEqual([]);
 });
 
 test("an empty findings list is a real report, not a failure", () => {
-  const parsed = parseReviewerReport(
-    '{"summary":"genuinely fine","findings":[]}',
-  );
+  const parsed = parseReviewerReport('{"summary":"genuinely fine","findings":[]}');
   expect(parsed.ok).toBe(true);
 });
 
@@ -41,8 +37,7 @@ test("an empty reply comes back as a named failure", () => {
 
 test("a wrong severity is rejected rather than coerced", () => {
   const parsed = parseReviewerReport(
-    '{"summary":"x","findings":[{"severity":"nit","file":"a.ts",' +
-      '"summary":"style"}]}',
+    '{"summary":"x","findings":[{"severity":"nit","file":"a.ts",' + '"summary":"style"}]}',
   );
   expect(parsed.ok).toBe(false);
 });
@@ -54,10 +49,6 @@ test("existingCode and suggestedFix parse as a before/after code pair", () => {
       'i <= n; i++) {","suggestedFix":"for (let i = 0; i < n; i++) {"}]}',
   );
   if (!parsed.ok) throw new Error(parsed.reason);
-  expect(parsed.report.findings[0]?.existingCode).toBe(
-    "for (let i = 0; i <= n; i++) {",
-  );
-  expect(parsed.report.findings[0]?.suggestedFix).toBe(
-    "for (let i = 0; i < n; i++) {",
-  );
+  expect(parsed.report.findings[0]?.existingCode).toBe("for (let i = 0; i <= n; i++) {");
+  expect(parsed.report.findings[0]?.suggestedFix).toBe("for (let i = 0; i < n; i++) {");
 });
diff --git a/packages/code-review/src/review-run.test.ts b/packages/code-review/src/review-run.test.ts
index 0c626507e3..a7c09ec064 100644
--- a/packages/code-review/src/review-run.test.ts
+++ b/packages/code-review/src/review-run.test.ts
@@ -112,9 +112,7 @@ test("every reviewer sees the same diff and the review is posted once", async ()
   );
 
   expect(github.diffReads).toEqual([REF]);
-  expect(seen.sort()).toEqual(
-    CODE_REVIEW_REVIEWERS.map((reviewer) => reviewer.id).sort(),
-  );
+  expect(seen.sort()).toEqual(CODE_REVIEW_REVIEWERS.map((reviewer) => reviewer.id).sort());
   expect(new Set(prompts).size).toBe(1);
   expect(prompts[0]).toContain("src/loop.ts");
   expect(github.posted.length).toBe(1);
@@ -214,8 +212,7 @@ test("a finding whose fingerprint was already posted is not raised again", async
   const result = await runPullRequestReview(
     {
       github: github.client,
-      runReviewerTurn: ({ reviewer }) =>
-        Promise.resolve(reportFor(reviewer.id)),
+      runReviewerTurn: ({ reviewer }) => Promise.resolve(reportFor(reviewer.id)),
     },
     REF,
   );
@@ -233,8 +230,7 @@ test("a truncated diff surfaces an incompleteness note in the posted review", as
   const result = await runPullRequestReview(
     {
       github: github.client,
-      runReviewerTurn: ({ reviewer }) =>
-        Promise.resolve(reportFor(reviewer.id)),
+      runReviewerTurn: ({ reviewer }) => Promise.resolve(reportFor(reviewer.id)),
     },
     REF,
   );
@@ -249,8 +245,7 @@ test("a truncated already-posted-comments page surfaces the same note", async ()
   const result = await runPullRequestReview(
     {
       github: github.client,
-      runReviewerTurn: ({ reviewer }) =>
-        Promise.resolve(reportFor(reviewer.id)),
+      runReviewerTurn: ({ reviewer }) => Promise.resolve(reportFor(reviewer.id)),
     },
     REF,
   );
diff --git a/packages/code-review/src/review-run.ts b/packages/code-review/src/review-run.ts
index 6a5d9ca4dd..274047be2f 100644
--- a/packages/code-review/src/review-run.ts
+++ b/packages/code-review/src/review-run.ts
@@ -29,11 +29,7 @@ import { aggregateReview, type ReviewerPass } from "./aggregate";
 import { isBotAuthor } from "./bot-guard";
 import { fingerprintsIn } from "./fingerprint";
 import { renderReviewPrompt } from "./prompt";
-import {
-  CODE_REVIEW_REVIEWERS,
-  reviewerReportPrompt,
-  type ReviewerDefinition,
-} from "./reviewers";
+import { CODE_REVIEW_REVIEWERS, reviewerReportPrompt, type ReviewerDefinition } from "./reviewers";
 
 /** The GitHub reach a review run needs, under the connection's credential. */
 export interface CodeReviewGitHub {
@@ -44,9 +40,7 @@ export interface CodeReviewGitHub {
     review: PullRequestReviewDraft,
   ): Promise<PostedPullRequestReview>;
   /** Bodies of every review comment already posted, for the fingerprint scan. */
-  listPostedComments(
-    ref: PullRequestRef,
-  ): Promise<PullRequestReviewCommentsPage>;
+  listPostedComments(ref: PullRequestRef): Promise<PullRequestReviewCommentsPage>;
 }
 
 /** Runs one reviewer's turn and returns its raw reply. `systemPrompt`
@@ -81,8 +75,7 @@ export interface PullRequestReviewSkipped {
   readonly reason: string;
 }
 
-export type PullRequestReviewResult =
-  PullRequestReviewRun | PullRequestReviewSkipped;
+export type PullRequestReviewResult = PullRequestReviewRun | PullRequestReviewSkipped;
 
 function reasonOf(err: unknown): string {
   return err instanceof Error ? err.message : String(err);
@@ -129,15 +122,8 @@ export async function runPullRequestReview(
   const prompt = renderReviewPrompt(diff);
   const postedComments = await deps.github.listPostedComments(ref);
   const alreadyPosted = fingerprintsIn(postedComments.comments);
-  const passes = await Promise.all(
-    reviewers.map((reviewer) => runOne(deps, reviewer, prompt)),
-  );
-  const review = aggregateReview(
-    passes,
-    diff,
-    alreadyPosted,
-    postedComments.truncated,
-  );
+  const passes = await Promise.all(reviewers.map((reviewer) => runOne(deps, reviewer, prompt)));
+  const review = aggregateReview(passes, diff, alreadyPosted, postedComments.truncated);
   const posted = await deps.github.postReview(ref, diff.headSha, review);
   return { skipped: false, diff, passes, review, posted };
 }
diff --git a/packages/code-review/src/reviewers.ts b/packages/code-review/src/reviewers.ts
index f929640118..91878ca918 100644
--- a/packages/code-review/src/reviewers.ts
+++ b/packages/code-review/src/reviewers.ts
@@ -114,8 +114,7 @@ const CORRECTNESS_REVIEWER: ReviewerDefinition = {
   handle: "correctness-reviewer",
   displayName: "Correctness reviewer",
   description:
-    "Finds defects with receipts: the file, the line, and the input " +
-    "that makes it go wrong",
+    "Finds defects with receipts: the file, the line, and the input " + "that makes it go wrong",
   systemPrompt:
     "You review a pull request for defects, with evidence.\n\n" +
     "Find defects; never rewrite the code. Every claim names the file " +
@@ -144,8 +143,7 @@ const RELEASE_RISK_REVIEWER: ReviewerDefinition = {
   handle: "release-risk-reviewer",
   displayName: "Release-risk reviewer",
   description:
-    "Says what actually blocks shipping, what ships with a note, and " +
-    "what is filed for later",
+    "Says what actually blocks shipping, what ships with a note, and " + "what is filed for later",
   systemPrompt:
     "You advise on the risk of shipping this pull request.\n\n" +
     "You are counsel, not a gate. You do not write product code, and " +
diff --git a/packages/codex-provider/package.json b/packages/codex-provider/package.json
index bec79e38c2..54c2981e36 100644
--- a/packages/codex-provider/package.json
+++ b/packages/codex-provider/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/codex-provider",
+  "version": "0.1.0",
   "private": true,
   "description": "OpenAI Codex (Login with ChatGPT) as an Interchange inference provider, with OAuth token exchange, a Responses-protocol adapter, and a content-type repair for the ChatGPT backend.",
-  "version": "0.1.0",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "sideEffects": false,
diff --git a/packages/codex-provider/src/content-type-repair.test.ts b/packages/codex-provider/src/content-type-repair.test.ts
index 57445195c1..1eb348b054 100644
--- a/packages/codex-provider/src/content-type-repair.test.ts
+++ b/packages/codex-provider/src/content-type-repair.test.ts
@@ -1,9 +1,5 @@
 import { describe, expect, test } from "bun:test";
-import {
-  withCodexContentTypeRepair,
-  CODEX_RESPONSES_PATH,
-  type FetchLike,
-} from "./index";
+import { withCodexContentTypeRepair, CODEX_RESPONSES_PATH, type FetchLike } from "./index";
 
 const url = `https://chatgpt.com/backend-api${CODEX_RESPONSES_PATH}`;
 
@@ -37,13 +33,9 @@ describe("Codex content-type repair — missing content-type on 2xx SSE response
     const declaredResponse = await declared(url, {
       headers: { accept: "text/event-stream" },
     });
-    expect(declaredResponse.headers.get("content-type")).toBe(
-      "application/json",
-    );
+    expect(declaredResponse.headers.get("content-type")).toBe("application/json");
 
-    const non2xx = withCodexContentTypeRepair(
-      fetchReturning(new Response("bad", { status: 400 })),
-    );
+    const non2xx = withCodexContentTypeRepair(fetchReturning(new Response("bad", { status: 400 })));
     const non2xxResponse = await non2xx(url, {
       headers: { accept: "text/event-stream" },
     });
@@ -60,12 +52,9 @@ describe("Codex content-type repair — missing content-type on 2xx SSE response
     const otherUrl = withCodexContentTypeRepair(
       fetchReturning(new Response("data: {}\n\n", { status: 200 })),
     );
-    const otherUrlResponse = await otherUrl(
-      "https://chatgpt.com/backend-api/other",
-      {
-        headers: { accept: "text/event-stream" },
-      },
-    );
+    const otherUrlResponse = await otherUrl("https://chatgpt.com/backend-api/other", {
+      headers: { accept: "text/event-stream" },
+    });
     expect(otherUrlResponse.headers.get("content-type")).toBeNull();
   });
 });
diff --git a/packages/codex-provider/src/content-type-repair.ts b/packages/codex-provider/src/content-type-repair.ts
index ec855a0d3e..766fe08fad 100644
--- a/packages/codex-provider/src/content-type-repair.ts
+++ b/packages/codex-provider/src/content-type-repair.ts
@@ -1,10 +1,7 @@
 import { CODEX_RESPONSES_PATH } from "./constants";
 
 /** The `fetch` shape {@link withCodexContentTypeRepair} wraps. */
-export type FetchLike = (
-  input: string | URL | Request,
-  init?: RequestInit,
-) => Promise<Response>;
+export type FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
 
 function requestURL(input: string | URL | Request): string {
   if (typeof input === "string") return input;
@@ -33,10 +30,8 @@ function acceptedContentType(
   const supported = new Set<string>();
   for (const entry of accept.toLowerCase().split(",")) {
     const media = entry.trim();
-    if (media.startsWith("text/event-stream"))
-      supported.add("text/event-stream");
-    else if (media.startsWith("application/json"))
-      supported.add("application/json");
+    if (media.startsWith("text/event-stream")) supported.add("text/event-stream");
+    else if (media.startsWith("application/json")) supported.add("application/json");
   }
   if (supported.size !== 1) return null;
   return [...supported][0] ?? null;
diff --git a/packages/codex-provider/src/index.ts b/packages/codex-provider/src/index.ts
index fe37b94979..86aff6aef4 100644
--- a/packages/codex-provider/src/index.ts
+++ b/packages/codex-provider/src/index.ts
@@ -33,7 +33,4 @@ export { CodexQuirks, CodexQuirksError, parseCodexQuirks } from "./quirks";
 
 export { createCodexResponsesAdapter } from "./responses-adapter";
 
-export {
-  withCodexContentTypeRepair,
-  type FetchLike,
-} from "./content-type-repair";
+export { withCodexContentTypeRepair, type FetchLike } from "./content-type-repair";
diff --git a/packages/codex-provider/src/oauth.test.ts b/packages/codex-provider/src/oauth.test.ts
index 1d5d3c81f9..8649bd5c4a 100644
--- a/packages/codex-provider/src/oauth.test.ts
+++ b/packages/codex-provider/src/oauth.test.ts
@@ -1,15 +1,9 @@
 import type { FetchLike, TokenResponse } from "@corbits/oauth-core";
 import { describe, expect, test } from "bun:test";
-import {
-  accountIdFromIdToken,
-  refreshCodexTokens,
-  type CodexTokens,
-} from "./index";
+import { accountIdFromIdToken, refreshCodexTokens, type CodexTokens } from "./index";
 
 function jwtWithPayload(payload: unknown): string {
-  const header = Buffer.from(JSON.stringify({ alg: "none" })).toString(
-    "base64url",
-  );
+  const header = Buffer.from(JSON.stringify({ alg: "none" })).toString("base64url");
   const body = Buffer.from(JSON.stringify(payload)).toString("base64url");
   return `${header}.${body}.`;
 }
@@ -31,9 +25,7 @@ describe("Codex oauth — account id decoding", () => {
     expect(accountIdFromIdToken(undefined)).toBeUndefined();
     expect(accountIdFromIdToken("not-a-jwt")).toBeUndefined();
     expect(accountIdFromIdToken("header.%%%not-base64%%%.sig")).toBeUndefined();
-    expect(
-      accountIdFromIdToken(jwtWithPayload({ sub: "user-1" })),
-    ).toBeUndefined();
+    expect(accountIdFromIdToken(jwtWithPayload({ sub: "user-1" }))).toBeUndefined();
   });
 });
 
diff --git a/packages/codex-provider/src/oauth.ts b/packages/codex-provider/src/oauth.ts
index fbd9872572..30b538704d 100644
--- a/packages/codex-provider/src/oauth.ts
+++ b/packages/codex-provider/src/oauth.ts
@@ -53,9 +53,7 @@ const IdTokenClaims = type({
  * throwing on any malformed input — a caller without an account id can
  * still function for flows that do not require the header.
  */
-export function accountIdFromIdToken(
-  idToken: string | undefined,
-): string | undefined {
+export function accountIdFromIdToken(idToken: string | undefined): string | undefined {
   if (idToken === undefined) return undefined;
   const payload = idToken.split(".")[1];
   if (payload === undefined) return undefined;
@@ -70,10 +68,7 @@ export function accountIdFromIdToken(
   }
   const parsed = IdTokenClaims(claims);
   if (parsed instanceof type.errors) return undefined;
-  return (
-    parsed.chatgpt_account_id ??
-    parsed["https://api.openai.com/auth"]?.chatgpt_account_id
-  );
+  return parsed.chatgpt_account_id ?? parsed["https://api.openai.com/auth"]?.chatgpt_account_id;
 }
 
 /** Maps a raw token endpoint response onto {@link CodexTokens}, decoding the account id from `id_token`. */
diff --git a/packages/codex-provider/src/quirks.ts b/packages/codex-provider/src/quirks.ts
index 025661ca98..d088ba4352 100644
--- a/packages/codex-provider/src/quirks.ts
+++ b/packages/codex-provider/src/quirks.ts
@@ -25,9 +25,7 @@ export class CodexQuirksError extends Error {
 export function parseCodexQuirks(raw: unknown): CodexQuirks {
   const validated = CodexQuirks(raw ?? {});
   if (validated instanceof type.errors) {
-    throw new CodexQuirksError(
-      `@corbits/codex-provider: invalid quirks: ${validated.summary}`,
-    );
+    throw new CodexQuirksError(`@corbits/codex-provider: invalid quirks: ${validated.summary}`);
   }
   return validated;
 }
diff --git a/packages/codex-provider/src/responses-adapter.test.ts b/packages/codex-provider/src/responses-adapter.test.ts
index a8fb53cc9b..6c99947e75 100644
--- a/packages/codex-provider/src/responses-adapter.test.ts
+++ b/packages/codex-provider/src/responses-adapter.test.ts
@@ -85,9 +85,7 @@ describe("Codex responses adapter — request shape", () => {
     expect(body.instructions).toBeUndefined();
     expect(body.input?.[0]?.role).toBe("developer");
     const bridgeText = body.input?.[0]?.content?.[0]?.text ?? "";
-    expect(bridgeText).toContain(
-      "Acme Code is the harness, not the Codex CLI.",
-    );
+    expect(bridgeText).toContain("Acme Code is the harness, not the Codex CLI.");
     expect(bridgeText).toContain("operate carefully");
   });
 
diff --git a/packages/codex-provider/src/responses-adapter.ts b/packages/codex-provider/src/responses-adapter.ts
index 5bd908a9f7..cbce3553fd 100644
--- a/packages/codex-provider/src/responses-adapter.ts
+++ b/packages/codex-provider/src/responses-adapter.ts
@@ -24,9 +24,7 @@ function codexResponsesQuirks(): ResponsesQuirks {
         "openai-beta": "responses=experimental",
         originator: CODEX_ORIGINATOR,
       },
-      fromOption: [
-        { optionKey: CODEX_ACCOUNT_ID_OPTION, header: "chatgpt-account-id" },
-      ],
+      fromOption: [{ optionKey: CODEX_ACCOUNT_ID_OPTION, header: "chatgpt-account-id" }],
     },
     sessionIdOption: CODEX_SESSION_ID_OPTION,
     sessionIdHeader: "session_id",
@@ -46,8 +44,7 @@ function codexResponsesQuirks(): ResponsesQuirks {
 // default reasoning summary is "none", so no `summary` field is sent at all.
 function codexResponsesHooks(quirks: CodexQuirks): ResponsesHooks {
   return {
-    wrapSystemPrompt: (systemPrompt: string) =>
-      wrapCodexBridgeMessage(systemPrompt, quirks),
+    wrapSystemPrompt: (systemPrompt: string) => wrapCodexBridgeMessage(systemPrompt, quirks),
     includeReasoningEffort: (effort: string) => effort !== "none",
   };
 }
@@ -63,8 +60,5 @@ function codexResponsesHooks(quirks: CodexQuirks): ResponsesHooks {
  */
 export const createCodexResponsesAdapter: AdapterFactory = (source, quirks) => {
   const parsed = parseCodexQuirks(quirks);
-  return responsesAdapterFactory(
-    codexResponsesQuirks(),
-    codexResponsesHooks(parsed),
-  )(source);
+  return responsesAdapterFactory(codexResponsesQuirks(), codexResponsesHooks(parsed))(source);
 };
diff --git a/packages/collections/package.json b/packages/collections/package.json
index ed99f953af..f5cfde0e7a 100644
--- a/packages/collections/package.json
+++ b/packages/collections/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/collections",
+  "version": "0.0.1",
   "private": true,
   "description": "Bounded, self-evicting in-memory collections for process-lifetime state (CL-7233) — a TTL map today, with orchestrator/crypto-cache callers (CL-7229, CL-7223) expected to consolidate onto it rather than growing their own",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/command-palette/package.json b/packages/command-palette/package.json
index 98466e918b..cf16b5ab34 100644
--- a/packages/command-palette/package.json
+++ b/packages/command-palette/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/command-palette",
+  "version": "0.0.1",
   "private": true,
   "description": "The global command-palette registry: static navigation commands and debounced, paginated entity search, so any surface can render them",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/command-palette/src/command-groups.ts b/packages/command-palette/src/command-groups.ts
index 3686641eb2..fbe23d7cf1 100644
--- a/packages/command-palette/src/command-groups.ts
+++ b/packages/command-palette/src/command-groups.ts
@@ -50,10 +50,7 @@ function filterItems(
 ): readonly PaletteResultItem[] {
   if (query === "") return items;
   return items.filter((item) =>
-    matchesQuery(
-      item.searchText ?? `${item.title} ${item.subtitle ?? ""}`,
-      query,
-    ),
+    matchesQuery(item.searchText ?? `${item.title} ${item.subtitle ?? ""}`, query),
   );
 }
 
diff --git a/packages/command-palette/src/detail-paths.test.ts b/packages/command-palette/src/detail-paths.test.ts
index 914d085adf..d4018a03a9 100644
--- a/packages/command-palette/src/detail-paths.test.ts
+++ b/packages/command-palette/src/detail-paths.test.ts
@@ -10,17 +10,11 @@ describe("detailPath", () => {
   });
 
   test("a slug is never derived from a display name", () => {
-    expect(detailPath("/agents", { slug: "Café Crème Bot", id: "wfd_2" })).toBe(
-      "/agents/wfd_2",
-    );
-    expect(detailPath("/skills", { slug: "", id: "skill_1" })).toBe(
-      "/skills/skill_1",
-    );
+    expect(detailPath("/agents", { slug: "Café Crème Bot", id: "wfd_2" })).toBe("/agents/wfd_2");
+    expect(detailPath("/skills", { slug: "", id: "skill_1" })).toBe("/skills/skill_1");
   });
 
   test("the id fallback survives a segment that needs escaping", () => {
-    expect(detailPath("/plugins", { slug: "Not A Slug", id: "a/b" })).toBe(
-      "/plugins/a%2Fb",
-    );
+    expect(detailPath("/plugins", { slug: "Not A Slug", id: "a/b" })).toBe("/plugins/a%2Fb");
   });
 });
diff --git a/packages/command-palette/src/detail-paths.ts b/packages/command-palette/src/detail-paths.ts
index 420e9f2d6b..58ad14c2f6 100644
--- a/packages/command-palette/src/detail-paths.ts
+++ b/packages/command-palette/src/detail-paths.ts
@@ -19,10 +19,7 @@ export type DetailAddressable = {
   readonly id: string;
 };
 
-export function detailPath(
-  rosterPath: string,
-  entity: DetailAddressable,
-): string {
+export function detailPath(rosterPath: string, entity: DetailAddressable): string {
   if (isValidSlug(entity.slug)) return `${rosterPath}/${entity.slug}`;
   return `${rosterPath}/${encodeURIComponent(entity.id)}`;
 }
diff --git a/packages/command-palette/src/index.ts b/packages/command-palette/src/index.ts
index fec52026e7..30e7ea0a3f 100644
--- a/packages/command-palette/src/index.ts
+++ b/packages/command-palette/src/index.ts
@@ -29,11 +29,7 @@ export type {
 } from "./use-entity-search";
 
 export { isBareScopeQuery, parsePaletteQuery, PALETTE_SCOPES } from "./scope";
-export type {
-  ParsedPaletteQuery,
-  PaletteScope,
-  PaletteScopeKind,
-} from "./scope";
+export type { ParsedPaletteQuery, PaletteScope, PaletteScopeKind } from "./scope";
 
 export { buildCommandPaletteGroups } from "./command-groups";
 export type {
@@ -46,9 +42,5 @@ export type {
 export { detailPath } from "./detail-paths";
 export type { DetailAddressable } from "./detail-paths";
 
-export {
-  addRecentEntry,
-  createRecentsStore,
-  removeRecentEntry,
-} from "./recents";
+export { addRecentEntry, createRecentsStore, removeRecentEntry } from "./recents";
 export type { RecentEntry, RecentsStorage, RecentsStore } from "./recents";
diff --git a/packages/command-palette/src/recents.ts b/packages/command-palette/src/recents.ts
index 1306ffdac1..27bc7e3995 100644
--- a/packages/command-palette/src/recents.ts
+++ b/packages/command-palette/src/recents.ts
@@ -21,9 +21,7 @@ export function addRecentEntry(
   entry: RecentEntry,
   max = MAX_RECENTS,
 ): readonly RecentEntry[] {
-  const withoutEntry = entries.filter(
-    (existing) => recentKey(existing) !== recentKey(entry),
-  );
+  const withoutEntry = entries.filter((existing) => recentKey(existing) !== recentKey(entry));
   return [entry, ...withoutEntry].slice(0, max);
 }
 
@@ -47,9 +45,7 @@ export type RecentsStorage = {
 export type RecentsStore = {
   readonly load: () => readonly RecentEntry[];
   readonly push: (entry: RecentEntry) => readonly RecentEntry[];
-  readonly remove: (
-    entry: Pick<RecentEntry, "kind" | "id">,
-  ) => readonly RecentEntry[];
+  readonly remove: (entry: Pick<RecentEntry, "kind" | "id">) => readonly RecentEntry[];
 };
 
 function isRecentEntry(value: unknown): value is RecentEntry {
@@ -99,9 +95,7 @@ export function createRecentsStore(
     return next;
   }
 
-  function remove(
-    entry: Pick<RecentEntry, "kind" | "id">,
-  ): readonly RecentEntry[] {
+  function remove(entry: Pick<RecentEntry, "kind" | "id">): readonly RecentEntry[] {
     const next = removeRecentEntry(load(), entry);
     try {
       storage.setItem(storageKey, JSON.stringify(next));
diff --git a/packages/command-palette/src/scope.ts b/packages/command-palette/src/scope.ts
index 349d0cedce..013f4fee3a 100644
--- a/packages/command-palette/src/scope.ts
+++ b/packages/command-palette/src/scope.ts
@@ -26,9 +26,7 @@ export type ParsedPaletteQuery = {
 /** Splits a raw palette input into its scope (if the first character is a
  * recognized prefix) and the remaining search text. Pure — no DOM, no state. */
 export function parsePaletteQuery(raw: string): ParsedPaletteQuery {
-  const scope =
-    PALETTE_SCOPES.find((candidate) => candidate.prefix === raw.slice(0, 1)) ??
-    null;
+  const scope = PALETTE_SCOPES.find((candidate) => candidate.prefix === raw.slice(0, 1)) ?? null;
   const query = (scope === null ? raw : raw.slice(scope.prefix.length)).trim();
   return { scope, query };
 }
diff --git a/packages/command-palette/src/static-commands.ts b/packages/command-palette/src/static-commands.ts
index d29f45deee..b97c1f6576 100644
--- a/packages/command-palette/src/static-commands.ts
+++ b/packages/command-palette/src/static-commands.ts
@@ -13,9 +13,7 @@ export type StaticRoute = {
   readonly label: string;
 };
 
-export function buildStaticCommands(
-  routes: readonly StaticRoute[],
-): readonly StaticCommand[] {
+export function buildStaticCommands(routes: readonly StaticRoute[]): readonly StaticCommand[] {
   return routes.map((route) => ({
     id: `route:${route.path}`,
     title: route.label,
diff --git a/packages/command-palette/src/use-entity-search.ts b/packages/command-palette/src/use-entity-search.ts
index c735a56c3e..c06a283fb4 100644
--- a/packages/command-palette/src/use-entity-search.ts
+++ b/packages/command-palette/src/use-entity-search.ts
@@ -57,10 +57,9 @@ export function useEntitySearch({
 }: UseEntitySearchOptions): UseEntitySearchResult {
   const [debouncedQuery, setDebouncedQuery] = useState("");
   const [offset, setOffset] = useState(0);
-  const [fetched, setFetched] = useState<ReadonlyMap<
-    string,
-    readonly SearchableEntity[]
-  > | null>(null);
+  const [fetched, setFetched] = useState<ReadonlyMap<string, readonly SearchableEntity[]> | null>(
+    null,
+  );
   const [fetching, setFetching] = useState(false);
   const [error, setError] = useState(false);
   const fetchToken = useRef(0);
@@ -73,8 +72,7 @@ export function useEntitySearch({
   // True the instant a keystroke outruns the debounce and stays true until
   // that query's fetch resolves — derived here so the spinner shows on the
   // render the keystroke caused, before any passive effect runs.
-  const pending =
-    enabled && query.trim().length > 0 && debouncedQuery !== query;
+  const pending = enabled && query.trim().length > 0 && debouncedQuery !== query;
 
   useEffect(() => {
     setOffset(0);
diff --git a/packages/command-palette/test/command-groups.test.ts b/packages/command-palette/test/command-groups.test.ts
index 6dd2475ed5..67ef8985e4 100644
--- a/packages/command-palette/test/command-groups.test.ts
+++ b/packages/command-palette/test/command-groups.test.ts
@@ -1,9 +1,6 @@
 import { describe, expect, test } from "bun:test";
 
-import {
-  buildCommandPaletteGroups,
-  type PaletteSource,
-} from "../src/command-groups";
+import { buildCommandPaletteGroups, type PaletteSource } from "../src/command-groups";
 
 const actions: PaletteSource = {
   id: "actions",
diff --git a/packages/command-palette/test/recents.test.ts b/packages/command-palette/test/recents.test.ts
index f0462e442c..75c84ae95b 100644
--- a/packages/command-palette/test/recents.test.ts
+++ b/packages/command-palette/test/recents.test.ts
@@ -38,10 +38,7 @@ describe("addRecentEntry", () => {
 
 describe("removeRecentEntry", () => {
   test("drops the entry matching kind+id", () => {
-    const result = removeRecentEntry(
-      [entry("a"), entry("b"), entry("c")],
-      entry("b"),
-    );
+    const result = removeRecentEntry([entry("a"), entry("b"), entry("c")], entry("b"));
     expect(result).toEqual([entry("a"), entry("c")]);
   });
 
@@ -145,10 +142,7 @@ describe("createRecentsStore", () => {
 
   test("stored entries missing required fields are dropped", () => {
     const storage = inMemoryStorage();
-    storage.setItem(
-      "bench:1",
-      JSON.stringify([entry("a"), { id: "bad" }, entry("b")]),
-    );
+    storage.setItem("bench:1", JSON.stringify([entry("a"), { id: "bad" }, entry("b")]));
     const store = createRecentsStore(storage, "bench:1");
     expect(store.load()).toEqual([entry("a"), entry("b")]);
   });
diff --git a/packages/command-palette/test/use-entity-search.test.tsx b/packages/command-palette/test/use-entity-search.test.tsx
index 605c15e5d8..dc94123a25 100644
--- a/packages/command-palette/test/use-entity-search.test.tsx
+++ b/packages/command-palette/test/use-entity-search.test.tsx
@@ -82,8 +82,7 @@ describe("useEntitySearch", () => {
     // as long as the test needs it: the hook only drops `loading` once the
     // search's fetches resolve, so a gated source makes that phase
     // deterministic instead of racing the 5ms debounce on a loaded runner.
-    let releaseWorkbenches:
-      ((entities: readonly SearchableEntity[]) => void) | undefined;
+    let releaseWorkbenches: ((entities: readonly SearchableEntity[]) => void) | undefined;
     const workbenches = new Promise<readonly SearchableEntity[]>((resolve) => {
       releaseWorkbenches = (entities) => resolve(entities);
     });
@@ -104,9 +103,7 @@ describe("useEntitySearch", () => {
     expect(
       titles.every(
         (title) =>
-          !title.startsWith("chan-") &&
-          !title.startsWith("rt-") &&
-          !title.startsWith("agent-"),
+          !title.startsWith("chan-") && !title.startsWith("rt-") && !title.startsWith("agent-"),
       ),
     ).toBe(true);
     expect(harness.get().hasMore).toBe(true);
@@ -141,9 +138,7 @@ describe("useEntitySearch", () => {
 
     await harness.setQuery("triage");
     await harness.settle();
-    expect(harness.get().results.map((result) => result.title)).toEqual([
-      "Support Triage",
-    ]);
+    expect(harness.get().results.map((result) => result.title)).toEqual(["Support Triage"]);
     harness.unmount();
   });
 
diff --git a/packages/commands/package.json b/packages/commands/package.json
index 5c8d9a2fe0..fdc601ed85 100644
--- a/packages/commands/package.json
+++ b/packages/commands/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/commands",
+  "version": "0.0.1",
   "private": true,
   "description": "The global \"/\" and \"@\" command system: a name/description/handler registry, slash grammar, dispatch, and the Hono route factory that lists and executes commands for a tenant",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/commands/src/dispatch.ts b/packages/commands/src/dispatch.ts
index 7b40f18925..628f8c4fc7 100644
--- a/packages/commands/src/dispatch.ts
+++ b/packages/commands/src/dispatch.ts
@@ -4,16 +4,8 @@
 // workbench message pipeline (`@corbits/chat`'s intercept of a leading
 // "/" or "@name") and the direct execute route in `./routes`, so the
 // two can never answer an unknown command differently.
-import {
-  parseAtCommand,
-  parseSlashCommand,
-  type ParsedCommand,
-} from "./grammar";
-import type {
-  CommandContext,
-  CommandRegistry,
-  CommandResult,
-} from "./registry";
+import { parseAtCommand, parseSlashCommand, type ParsedCommand } from "./grammar";
+import type { CommandContext, CommandRegistry, CommandResult } from "./registry";
 
 /**
  * Names what IS available rather than answering a miss with a bare
@@ -32,9 +24,7 @@ async function unknownCommandResult(
   const suffix =
     available.length === 0
       ? "No agent commands are available in this workbench yet."
-      : `Available: ${available
-          .map((command) => `${prefix}${command.name}`)
-          .join(", ")}.`;
+      : `Available: ${available.map((command) => `${prefix}${command.name}`).join(", ")}.`;
   return {
     type: "message",
     text: `Unknown command: ${prefix}${name}. ${suffix}`,
diff --git a/packages/commands/src/grammar.ts b/packages/commands/src/grammar.ts
index 72496472a8..9bf1781a2a 100644
--- a/packages/commands/src/grammar.ts
+++ b/packages/commands/src/grammar.ts
@@ -20,10 +20,7 @@ export interface ParsedCommand {
 // ordinary message and answer it with a command error instead.
 const NAME_PATTERN = /^[\w-]+$/;
 
-function parseWithPrefix(
-  text: string,
-  prefix: string,
-): ParsedCommand | undefined {
+function parseWithPrefix(text: string, prefix: string): ParsedCommand | undefined {
   if (!text.startsWith(prefix)) return undefined;
   const rest = text.slice(prefix.length);
   const spaceIndex = rest.indexOf(" ");
diff --git a/packages/commands/src/index.ts b/packages/commands/src/index.ts
index 34766da92c..ac6220f5f7 100644
--- a/packages/commands/src/index.ts
+++ b/packages/commands/src/index.ts
@@ -22,11 +22,7 @@ export type {
 export { parseAtCommand, parseSlashCommand } from "./grammar";
 export type { ParsedCommand } from "./grammar";
 
-export {
-  dispatchAtCommand,
-  dispatchSlashCommand,
-  resolveAtCommand,
-} from "./dispatch";
+export { dispatchAtCommand, dispatchSlashCommand, resolveAtCommand } from "./dispatch";
 
 export { createWorkflowCommandPlugin } from "./workflow-commands";
 export type {
diff --git a/packages/commands/src/registry.ts b/packages/commands/src/registry.ts
index d7fc81ef94..20e4d2d53d 100644
--- a/packages/commands/src/registry.ts
+++ b/packages/commands/src/registry.ts
@@ -40,19 +40,13 @@ export interface CommandDefinition {
   /** Registered but never listed or offered by name-prefix completion
    * — still resolvable and dispatchable directly. Defaults to false. */
   readonly hidden?: boolean;
-  readonly handler: (
-    args: string,
-    ctx: CommandContext,
-  ) => Promise<CommandResult> | CommandResult;
+  readonly handler: (args: string, ctx: CommandContext) => Promise<CommandResult> | CommandResult;
 }
 
 /** The autocomplete-facing projection of a command: no handler, since
  * a dropdown never calls one — see the package doc comment on why this
  * package stays UI-free. */
-export type CommandListing = Pick<
-  CommandDefinition,
-  "name" | "description" | "argumentHint"
->;
+export type CommandListing = Pick<CommandDefinition, "name" | "description" | "argumentHint">;
 
 export type CommandPlugin = (ctx: {
   readonly tenantId: string;
@@ -64,10 +58,7 @@ export interface CommandRegistry {
   /** Every non-hidden command available to `tenantId`, sorted by name. */
   listCommands(tenantId: string): Promise<readonly CommandDefinition[]>;
   /** A command by name, hidden or not, available to `tenantId`. */
-  getCommand(
-    name: string,
-    tenantId: string,
-  ): Promise<CommandDefinition | undefined>;
+  getCommand(name: string, tenantId: string): Promise<CommandDefinition | undefined>;
 }
 
 export function createCommandRegistry(): CommandRegistry {
diff --git a/packages/commands/src/routes.ts b/packages/commands/src/routes.ts
index f406e76772..977c09eee7 100644
--- a/packages/commands/src/routes.ts
+++ b/packages/commands/src/routes.ts
@@ -25,10 +25,7 @@ export type CreateCommandRoutesDeps = {
    * principal with a tenant-wide grant could run commands against
    * another tenant's workbench.
    */
-  workbenchBelongsToTenant: (
-    tenantId: string,
-    workbenchId: string,
-  ) => Promise<boolean>;
+  workbenchBelongsToTenant: (tenantId: string, workbenchId: string) => Promise<boolean>;
 };
 
 const ExecuteCommandBody = type({
@@ -37,78 +34,63 @@ const ExecuteCommandBody = type({
   workbenchId: "string",
 });
 
-export function createCommandRoutes(
-  deps: CreateCommandRoutesDeps,
-): Hono<TenantEnv> {
+export function createCommandRoutes(deps: CreateCommandRoutesDeps): Hono<TenantEnv> {
   const app = new Hono<TenantEnv>();
 
-  app.get(
-    "/commands",
-    deps.requireGrant("workflow-run:*", "read"),
-    async (c) => {
-      const tenant = c.get("tenant");
-      const commands = await deps.registry.listCommands(tenant.id);
-      const items: CommandListing[] = commands.map((command) => {
-        const listing = {
-          name: command.name,
-          description: command.description,
-        };
-        return command.argumentHint !== undefined
-          ? { ...listing, argumentHint: command.argumentHint }
-          : listing;
-      });
-      return c.json({ items });
-    },
-  );
+  app.get("/commands", deps.requireGrant("workflow-run:*", "read"), async (c) => {
+    const tenant = c.get("tenant");
+    const commands = await deps.registry.listCommands(tenant.id);
+    const items: CommandListing[] = commands.map((command) => {
+      const listing = {
+        name: command.name,
+        description: command.description,
+      };
+      return command.argumentHint !== undefined
+        ? { ...listing, argumentHint: command.argumentHint }
+        : listing;
+    });
+    return c.json({ items });
+  });
 
-  app.post(
-    "/commands/execute",
-    deps.requireGrant("workflow-run:*", "create"),
-    async (c) => {
-      const body = ExecuteCommandBody(
-        await c.req.json().catch(() => undefined),
+  app.post("/commands/execute", deps.requireGrant("workflow-run:*", "create"), async (c) => {
+    const body = ExecuteCommandBody(await c.req.json().catch(() => undefined));
+    if (body instanceof type.errors) {
+      return c.json(
+        makeErrorEnvelope({
+          code: "bad_request",
+          userMessage: `invalid command body: ${body.summary}`,
+        }),
+        400,
       );
-      if (body instanceof type.errors) {
-        return c.json(
-          makeErrorEnvelope({
-            code: "bad_request",
-            userMessage: `invalid command body: ${body.summary}`,
-          }),
-          400,
-        );
-      }
+    }
 
-      const tenant = c.get("tenant");
-      const principal = c.get("principal");
-      const belongs = await deps.workbenchBelongsToTenant(
-        tenant.id,
-        body.workbenchId,
+    const tenant = c.get("tenant");
+    const principal = c.get("principal");
+    const belongs = await deps.workbenchBelongsToTenant(tenant.id, body.workbenchId);
+    if (!belongs) {
+      return c.json(
+        makeErrorEnvelope({
+          code: "not_found",
+          userMessage: "workbench not found",
+        }),
+        404,
       );
-      if (!belongs) {
-        return c.json(
-          makeErrorEnvelope({
-            code: "not_found",
-            userMessage: "workbench not found",
-          }),
-          404,
-        );
-      }
+    }
 
-      const result = await dispatchSlashCommand(
-        deps.registry,
-        `/${body.name} ${body.args ?? ""}`.trimEnd(),
-        {
-          tenantId: tenant.id,
-          principalId: principal.id,
-          workbenchId: body.workbenchId,
-        },
-      );
-      // `dispatchSlashCommand` only returns `undefined` when its input
-      // is not slash-shaped, which is unreachable here since the text
-      // it is given is always synthesized with a leading "/" above.
-      return c.json(result ?? { type: "noop" }, 200);
-    },
-  );
+    const result = await dispatchSlashCommand(
+      deps.registry,
+      `/${body.name} ${body.args ?? ""}`.trimEnd(),
+      {
+        tenantId: tenant.id,
+        principalId: principal.id,
+        workbenchId: body.workbenchId,
+      },
+    );
+    // `dispatchSlashCommand` only returns `undefined` when its input
+    // is not slash-shaped, which is unreachable here since the text
+    // it is given is always synthesized with a leading "/" above.
+    return c.json(result ?? { type: "noop" }, 200);
+  });
 
   return app;
 }
diff --git a/packages/commands/src/workflow-commands.ts b/packages/commands/src/workflow-commands.ts
index 46a374fe07..eff284f186 100644
--- a/packages/commands/src/workflow-commands.ts
+++ b/packages/commands/src/workflow-commands.ts
@@ -22,9 +22,7 @@ export interface StartedWorkflowCommand {
 }
 
 export interface WorkflowCommandDeps {
-  listInvitableDefinitions(
-    tenantId: string,
-  ): Promise<readonly WorkflowCommandTarget[]>;
+  listInvitableDefinitions(tenantId: string): Promise<readonly WorkflowCommandTarget[]>;
   startWorkflow(input: {
     readonly tenantId: string;
     readonly principalId: string;
@@ -42,9 +40,7 @@ export interface WorkflowCommandDeps {
  * a definition deployed after boot becomes a command on the very next
  * listing, never requiring a re-registration step.
  */
-export function createWorkflowCommandPlugin(
-  deps: WorkflowCommandDeps,
-): CommandPlugin {
+export function createWorkflowCommandPlugin(deps: WorkflowCommandDeps): CommandPlugin {
   return async ({ tenantId }) => {
     const definitions = await deps.listInvitableDefinitions(tenantId);
     return definitions.map((definition): CommandDefinition => ({
diff --git a/packages/commands/test/dispatch.test.ts b/packages/commands/test/dispatch.test.ts
index 36849b6295..fe26d9c1dc 100644
--- a/packages/commands/test/dispatch.test.ts
+++ b/packages/commands/test/dispatch.test.ts
@@ -1,10 +1,6 @@
 import { describe, expect, test } from "bun:test";
 import { createCommandRegistry } from "../src/registry";
-import {
-  dispatchAtCommand,
-  dispatchSlashCommand,
-  resolveAtCommand,
-} from "../src/dispatch";
+import { dispatchAtCommand, dispatchSlashCommand, resolveAtCommand } from "../src/dispatch";
 
 const CTX = { tenantId: "t1", principalId: "p1", workbenchId: "c1" };
 
@@ -18,9 +14,7 @@ describe("dispatchSlashCommand", () => {
     const registry = createCommandRegistry();
     expect(await dispatchSlashCommand(registry, "/nope", CTX)).toEqual({
       type: "message",
-      text:
-        "Unknown command: /nope. No agent commands are available in this " +
-        "workbench yet.",
+      text: "Unknown command: /nope. No agent commands are available in this " + "workbench yet.",
     });
   });
 
@@ -49,9 +43,7 @@ describe("dispatchSlashCommand", () => {
       description: "Starts Jimmy",
       handler: () => ({ type: "noop" }),
     });
-    expect(
-      await dispatchSlashCommand(registry, "/usr/local/bin", CTX),
-    ).toBeUndefined();
+    expect(await dispatchSlashCommand(registry, "/usr/local/bin", CTX)).toBeUndefined();
   });
 
   test("runs the resolved command's handler with the parsed args and context", async () => {
@@ -78,9 +70,7 @@ describe("dispatchSlashCommand", () => {
 describe("resolveAtCommand / dispatchAtCommand", () => {
   test("resolveAtCommand is undefined when the name is not a registered command", async () => {
     const registry = createCommandRegistry();
-    expect(
-      await resolveAtCommand(registry, "@someone hi", "t1"),
-    ).toBeUndefined();
+    expect(await resolveAtCommand(registry, "@someone hi", "t1")).toBeUndefined();
   });
 
   test("resolveAtCommand finds a registered command's name and args", async () => {
@@ -108,11 +98,7 @@ describe("resolveAtCommand / dispatchAtCommand", () => {
         handle: "assistant",
       }),
     });
-    const result = await dispatchAtCommand(
-      registry,
-      "@assistant summarize this",
-      CTX,
-    );
+    const result = await dispatchAtCommand(registry, "@assistant summarize this", CTX);
     expect(result).toEqual({
       type: "workflow-started",
       definitionId: "def-1",
diff --git a/packages/commands/test/registry.test.ts b/packages/commands/test/registry.test.ts
index b339f0465a..b4c9701ce6 100644
--- a/packages/commands/test/registry.test.ts
+++ b/packages/commands/test/registry.test.ts
@@ -55,9 +55,7 @@ describe("createCommandRegistry", () => {
 
     const listed = await registry.listCommands(TENANT_A);
     expect(listed.map((c) => c.name)).toEqual(["visible"]);
-    expect((await registry.getCommand("secret", TENANT_A))?.name).toBe(
-      "secret",
-    );
+    expect((await registry.getCommand("secret", TENANT_A))?.name).toBe("secret");
   });
 
   test("a plugin's commands are scoped per tenant", async () => {
@@ -103,9 +101,6 @@ describe("createCommandRegistry", () => {
       description: "a",
       handler: noopHandler,
     });
-    expect((await registry.listCommands(TENANT_A)).map((c) => c.name)).toEqual([
-      "alpha",
-      "zeta",
-    ]);
+    expect((await registry.listCommands(TENANT_A)).map((c) => c.name)).toEqual(["alpha", "zeta"]);
   });
 });
diff --git a/packages/commands/test/workflow-commands.test.ts b/packages/commands/test/workflow-commands.test.ts
index 2b0579529b..2359340e61 100644
--- a/packages/commands/test/workflow-commands.test.ts
+++ b/packages/commands/test/workflow-commands.test.ts
@@ -35,9 +35,7 @@ describe("createWorkflowCommandPlugin", () => {
     const startCalls: unknown[] = [];
     registry.registerCommandPlugin(
       createWorkflowCommandPlugin({
-        listInvitableDefinitions: async () => [
-          { id: "def-echo", name: "echo" },
-        ],
+        listInvitableDefinitions: async () => [{ id: "def-echo", name: "echo" }],
         startWorkflow: async (input) => {
           startCalls.push(input);
           return { handle: "echo", address: "ins_1@tenant.test" };
@@ -45,11 +43,7 @@ describe("createWorkflowCommandPlugin", () => {
       }),
     );
 
-    const result = await dispatchSlashCommand(
-      registry,
-      "/echo summarize the thread",
-      CTX,
-    );
+    const result = await dispatchSlashCommand(registry, "/echo summarize the thread", CTX);
 
     expect(startCalls).toEqual([
       {
@@ -93,9 +87,7 @@ describe("createWorkflowCommandPlugin", () => {
     const startCalls: unknown[] = [];
     registry.registerCommandPlugin(
       createWorkflowCommandPlugin({
-        listInvitableDefinitions: async () => [
-          { id: "def-jimmy", name: "jimmy" },
-        ],
+        listInvitableDefinitions: async () => [{ id: "def-jimmy", name: "jimmy" }],
         startWorkflow: async (input) => {
           startCalls.push(input);
           return { handle: "jimmy", address: "ins_jimmy@tenant.test" };
diff --git a/packages/connections-tools/package.json b/packages/connections-tools/package.json
index 7ad3e678d9..50f1f063b0 100644
--- a/packages/connections-tools/package.json
+++ b/packages/connections-tools/package.json
@@ -1,21 +1,21 @@
 {
   "name": "@corbits/connections-tools",
+  "version": "0.0.12",
   "description": "The list_connections and request_connection tools as an @intx/agent tool bundle: an agent sees which third-party connections this workbench already has live and hands the human a deep link to connect one that isn't, reusing the existing connections plane and never inventing new state or completing OAuth itself",
-  "version": "0.0.11",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "packages/connections-tools"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "packages/connections-tools"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -27,12 +27,12 @@
   "dependencies": {
     "arktype": "catalog:"
   },
-  "peerDependencies": {
-    "@intx/agent": "0.3.0",
-    "@intx/types": "0.3.0"
-  },
   "devDependencies": {
     "@types/bun": "catalog:",
     "typescript": "catalog:"
+  },
+  "peerDependencies": {
+    "@intx/agent": "0.3.0",
+    "@intx/types": "0.3.0"
   }
 }
diff --git a/packages/connections-tools/src/client.test.ts b/packages/connections-tools/src/client.test.ts
index c1d65ff402..ec1c94a821 100644
--- a/packages/connections-tools/src/client.test.ts
+++ b/packages/connections-tools/src/client.test.ts
@@ -1,9 +1,6 @@
 import { expect, test } from "bun:test";
 
-import {
-  listConnectedProviders,
-  type ConnectionsToolClientConfig,
-} from "./client";
+import { listConnectedProviders, type ConnectionsToolClientConfig } from "./client";
 
 function testConfig(fetchImpl: typeof fetch): ConnectionsToolClientConfig {
   return {
@@ -55,14 +52,10 @@ test("a connector counts as connected only with an active credential against its
 
   expect([...live]).toEqual(["granola"]);
   expect(
-    urls.some((u) =>
-      u.startsWith("https://hub.example.com/api/tenants/ten_1/providers?"),
-    ),
+    urls.some((u) => u.startsWith("https://hub.example.com/api/tenants/ten_1/providers?")),
   ).toBe(true);
   expect(
-    urls.some((u) =>
-      u.startsWith("https://hub.example.com/api/tenants/ten_1/credentials?"),
-    ),
+    urls.some((u) => u.startsWith("https://hub.example.com/api/tenants/ten_1/credentials?")),
   ).toBe(true);
   expect(headers[0]?.["authorization"]).toBe("Bearer sc-token");
   expect(headers[0]?.["x-workflow-run-address"]).toBe("run_1@workflow");
@@ -89,9 +82,7 @@ test("a credential past the first page still counts as connected", async () => {
     });
   }) as unknown as typeof fetch;
 
-  expect([...(await listConnectedProviders(testConfig(fetchImpl)))]).toEqual([
-    "granola",
-  ]);
+  expect([...(await listConnectedProviders(testConfig(fetchImpl)))]).toEqual(["granola"]);
 });
 
 test("a non-ok HTTP response throws honestly, never fabricating a result", async () => {
@@ -101,20 +92,14 @@ test("a non-ok HTTP response throws honestly, never fabricating a result", async
       statusText: "Internal Server Error",
     })) as unknown as typeof fetch;
 
-  await expect(listConnectedProviders(testConfig(fetchImpl))).rejects.toThrow(
-    /500/,
-  );
+  await expect(listConnectedProviders(testConfig(fetchImpl))).rejects.toThrow(/500/);
 });
 
 test("a response that doesn't match the expected shape throws", async () => {
   const fetchImpl = (async () =>
-    new Response(
-      JSON.stringify({ nonsense: true }),
-    )) as unknown as typeof fetch;
+    new Response(JSON.stringify({ nonsense: true }))) as unknown as typeof fetch;
 
-  await expect(listConnectedProviders(testConfig(fetchImpl))).rejects.toThrow(
-    /unexpected shape/,
-  );
+  await expect(listConnectedProviders(testConfig(fetchImpl))).rejects.toThrow(/unexpected shape/);
 });
 
 test("an unreachable hub throws honestly", async () => {
@@ -122,7 +107,5 @@ test("an unreachable hub throws honestly", async () => {
     throw new Error("fetch failed: connection refused");
   }) as unknown as typeof fetch;
 
-  await expect(listConnectedProviders(testConfig(fetchImpl))).rejects.toThrow(
-    /connection refused/,
-  );
+  await expect(listConnectedProviders(testConfig(fetchImpl))).rejects.toThrow(/connection refused/);
 });
diff --git a/packages/connections-tools/src/client.ts b/packages/connections-tools/src/client.ts
index 8ec1580bf4..b2464a3a6a 100644
--- a/packages/connections-tools/src/client.ts
+++ b/packages/connections-tools/src/client.ts
@@ -45,9 +45,7 @@ const CredentialsPage = type({
 
 const PAGE_LIMIT = 100;
 
-function authHeaders(
-  config: ConnectionsToolClientConfig,
-): Record<string, string> {
+function authHeaders(config: ConnectionsToolClientConfig): Record<string, string> {
   return {
     authorization: `Bearer ${config.sidecarToken}`,
     "x-workflow-run-address": config.address,
@@ -66,9 +64,7 @@ async function readAllPages<T>(
   what: string,
   parse: (
     body: unknown,
-  ) =>
-    | { data: readonly T[]; nextCursor?: string | null | undefined }
-    | type.errors,
+  ) => { data: readonly T[]; nextCursor?: string | null | undefined } | type.errors,
 ): Promise<readonly T[]> {
   const doFetch = config.fetchImpl ?? fetch;
   const items: T[] = [];
@@ -76,20 +72,15 @@ async function readAllPages<T>(
   for (;;) {
     const params = new URLSearchParams({ limit: String(PAGE_LIMIT) });
     if (cursor !== undefined) params.set("cursor", cursor);
-    const response = await doFetch(
-      `${tenantBase(config)}${path}?${params.toString()}`,
-      { headers: authHeaders(config) },
-    );
+    const response = await doFetch(`${tenantBase(config)}${path}?${params.toString()}`, {
+      headers: authHeaders(config),
+    });
     if (!response.ok) {
-      throw new Error(
-        `${what} failed: ${response.status} ${response.statusText}`,
-      );
+      throw new Error(`${what} failed: ${response.status} ${response.statusText}`);
     }
     const parsed = parse(await response.json());
     if (parsed instanceof type.errors) {
-      throw new Error(
-        `${what} came back in an unexpected shape: ${parsed.summary}`,
-      );
+      throw new Error(`${what} came back in an unexpected shape: ${parsed.summary}`);
     }
     items.push(...parsed.data);
     const next = parsed.nextCursor;
@@ -109,23 +100,13 @@ export async function listConnectedProviders(
   config: ConnectionsToolClientConfig,
 ): Promise<ConnectedProviders> {
   const [providers, credentials] = await Promise.all([
-    readAllPages(config, "/providers", "Listing providers", (body) =>
-      ProvidersPage(body),
-    ),
-    readAllPages(config, "/credentials", "Listing credentials", (body) =>
-      CredentialsPage(body),
-    ),
+    readAllPages(config, "/providers", "Listing providers", (body) => ProvidersPage(body)),
+    readAllPages(config, "/credentials", "Listing credentials", (body) => CredentialsPage(body)),
   ]);
   const liveProviderIds = new Set(
-    credentials
-      .filter((row) => row.status === "active")
-      .map((row) => row.providerId),
-  );
-  return new Set(
-    providers
-      .filter((row) => liveProviderIds.has(row.id))
-      .map((row) => row.name),
+    credentials.filter((row) => row.status === "active").map((row) => row.providerId),
   );
+  return new Set(providers.filter((row) => liveProviderIds.has(row.id)).map((row) => row.name));
 }
 
 /** Thrown when the caller's run has no room of its own to post into —
@@ -177,16 +158,12 @@ export async function postConnectServiceBlock(
     throw new NoOwnRoomError("The caller has no room of its own to post into");
   }
   if (!response.ok) {
-    throw new Error(
-      `Posting the connect card failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`Posting the connect card failed: ${response.status} ${response.statusText}`);
   }
   const body: unknown = await response.json();
   const parsed = PostedMessageResponse(body);
   if (parsed instanceof type.errors) {
-    throw new Error(
-      `Post-message response did not match the expected shape: ${parsed.summary}`,
-    );
+    throw new Error(`Post-message response did not match the expected shape: ${parsed.summary}`);
   }
   return { messageId: parsed.id };
 }
diff --git a/packages/connections-tools/src/registry-shape.ts b/packages/connections-tools/src/registry-shape.ts
index 6d1a221f7b..34ff2f09f4 100644
--- a/packages/connections-tools/src/registry-shape.ts
+++ b/packages/connections-tools/src/registry-shape.ts
@@ -29,7 +29,6 @@ export function mcpPresetByName(
 ): McpPreset | undefined {
   const needle = name.trim().toLowerCase();
   return presets.find(
-    (preset) =>
-      preset.slug === needle || preset.displayName.toLowerCase() === needle,
+    (preset) => preset.slug === needle || preset.displayName.toLowerCase() === needle,
   );
 }
diff --git a/packages/connections-tools/src/tool.test.ts b/packages/connections-tools/src/tool.test.ts
index 755f413abd..7cf3033b61 100644
--- a/packages/connections-tools/src/tool.test.ts
+++ b/packages/connections-tools/src/tool.test.ts
@@ -83,15 +83,13 @@ function stubFetch(opts: {
     if (url.endsWith("/participants/messages")) {
       opts.posted?.push(JSON.parse(String(init?.body)));
       if (opts.postStatus !== undefined && opts.postStatus !== 201) {
-        return new Response(
-          JSON.stringify({ error: { message: "no channel" } }),
-          { status: opts.postStatus },
-        );
+        return new Response(JSON.stringify({ error: { message: "no channel" } }), {
+          status: opts.postStatus,
+        });
       }
-      return new Response(
-        JSON.stringify({ id: "msg_1", createdAt: "2026-08-20T00:00:00Z" }),
-        { status: 201 },
-      );
+      return new Response(JSON.stringify({ id: "msg_1", createdAt: "2026-08-20T00:00:00Z" }), {
+        status: 201,
+      });
     }
     if (url.includes("/providers")) {
       return Response.json({
diff --git a/packages/connections-tools/src/tool.ts b/packages/connections-tools/src/tool.ts
index 01374466dc..b9ea959c51 100644
--- a/packages/connections-tools/src/tool.ts
+++ b/packages/connections-tools/src/tool.ts
@@ -33,16 +33,8 @@ import type { BaseEnv } from "@intx/agent";
 import type { ToolCall, ToolResult } from "@intx/types/runtime";
 import { type } from "arktype";
 
-import {
-  listConnectedProviders,
-  NoOwnRoomError,
-  postConnectServiceBlock,
-} from "./client";
-import {
-  mcpPresetByName,
-  type ConnectorRegistry,
-  type McpPreset,
-} from "./registry-shape";
+import { listConnectedProviders, NoOwnRoomError, postConnectServiceBlock } from "./client";
+import { mcpPresetByName, type ConnectorRegistry, type McpPreset } from "./registry-shape";
 
 export const LIST_CONNECTIONS_TOOL = "list_connections";
 export const REQUEST_CONNECTION_TOOL = "request_connection";
@@ -127,10 +119,7 @@ function presetFrontedIds(mcpPresets: readonly McpPreset[]): Set<string> {
   return new Set(mcpPresets.map((preset) => preset.slug));
 }
 
-async function runListConnections(
-  env: WorkflowConnectionEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runListConnections(env: WorkflowConnectionEnv, call: ToolCall): Promise<ToolResult> {
   try {
     const live = await listConnectedProviders(clientConfig(env));
     const presetFronted = presetFrontedIds(env.mcpPresets);
@@ -142,12 +131,8 @@ async function runListConnections(
       }));
     const connected = registryEntries.filter((entry) => entry.connected);
     const notConnected = registryEntries.filter((entry) => !entry.connected);
-    const presetConnected = env.mcpPresets.filter((preset) =>
-      live.has(preset.slug),
-    );
-    const presetNotConnected = env.mcpPresets.filter(
-      (preset) => !live.has(preset.slug),
-    );
+    const presetConnected = env.mcpPresets.filter((preset) => live.has(preset.slug));
+    const presetNotConnected = env.mcpPresets.filter((preset) => !live.has(preset.slug));
 
     if (registryEntries.length === 0 && env.mcpPresets.length === 0) {
       return {
@@ -165,9 +150,7 @@ async function runListConnections(
       ...presetNotConnected.map((preset) => preset.displayName),
     ];
     const lines = [
-      connectedNames.length > 0
-        ? `Connected: ${connectedNames.join(", ")}.`
-        : "Connected: none.",
+      connectedNames.length > 0 ? `Connected: ${connectedNames.join(", ")}.` : "Connected: none.",
       notConnectedNames.length > 0
         ? `Not connected: ${notConnectedNames.join(", ")}.`
         : "Not connected: none.",
@@ -244,9 +227,7 @@ async function runRequestConnection(
       {
         connectorId: preset.slug,
         displayName: preset.displayName,
-        reason:
-          parsed.reason ??
-          `Connect ${preset.displayName} — ${preset.description}.`,
+        reason: parsed.reason ?? `Connect ${preset.displayName} — ${preset.description}.`,
       },
       presetDeepLink(preset.slug),
     );
@@ -255,9 +236,7 @@ async function runRequestConnection(
   const descriptor = env.connectorRegistry[parsed.connector];
   if (descriptor !== undefined) {
     try {
-      if (
-        (await listConnectedProviders(clientConfig(env))).has(descriptor.id)
-      ) {
+      if ((await listConnectedProviders(clientConfig(env))).has(descriptor.id)) {
         return {
           callId: call.id,
           isError: false,
@@ -273,9 +252,7 @@ async function runRequestConnection(
       {
         connectorId: descriptor.id,
         displayName: descriptor.displayName,
-        reason:
-          parsed.reason ??
-          `Connect ${descriptor.displayName} so I can pick this up for you.`,
+        reason: parsed.reason ?? `Connect ${descriptor.displayName} so I can pick this up for you.`,
       },
       connectDeepLink(descriptor.id),
     );
@@ -302,10 +279,7 @@ async function runRequestConnection(
 export const connectionsTools = defineTool<WorkflowConnectionEnv>({
   id: "@corbits/connections-tools/conn",
   requires: ["hubConnectionsUrl", "tenantId", "sidecarToken", "address"],
-  definitions: [
-    { name: LIST_CONNECTIONS_TOOL },
-    { name: REQUEST_CONNECTION_TOOL },
-  ],
+  definitions: [{ name: LIST_CONNECTIONS_TOOL }, { name: REQUEST_CONNECTION_TOOL }],
   factory: (env) => ({
     definitions: [
       {
@@ -360,9 +334,7 @@ export const connectionsTools = defineTool<WorkflowConnectionEnv>({
             return Promise.resolve(
               errorResult(
                 call.id,
-                new Error(
-                  `request_connection received invalid input: ${parsed.summary}`,
-                ),
+                new Error(`request_connection received invalid input: ${parsed.summary}`),
               ),
             );
           }
@@ -372,9 +344,7 @@ export const connectionsTools = defineTool<WorkflowConnectionEnv>({
           return Promise.resolve(
             errorResult(
               call.id,
-              new Error(
-                `@corbits/connections-tools: unknown tool "${call.name}"`,
-              ),
+              new Error(`@corbits/connections-tools: unknown tool "${call.name}"`),
             ),
           );
       }
diff --git a/packages/connections/package.json b/packages/connections/package.json
index bd11ec4e90..5fc8bcd4fc 100644
--- a/packages/connections/package.json
+++ b/packages/connections/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/connections",
+  "version": "0.0.1",
   "private": true,
   "description": "The Connections settings surface: shared PKCE/state primitives for OAuth connect flows, the connector registry (inference providers plus tool-credential connectors), and the route factory that tests and stores a connector's credential",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/connections/src/catalog-seed-data.ts b/packages/connections/src/catalog-seed-data.ts
index 12df69354b..7514222d61 100644
--- a/packages/connections/src/catalog-seed-data.ts
+++ b/packages/connections/src/catalog-seed-data.ts
@@ -52,9 +52,7 @@ export type CatalogProviderSeed = {
   readonly models: readonly CatalogModelSpec[];
 };
 
-export const CATALOG_SEEDS: Readonly<
-  Record<SupportedCredentialProvider, CatalogProviderSeed>
-> = {
+export const CATALOG_SEEDS: Readonly<Record<SupportedCredentialProvider, CatalogProviderSeed>> = {
   anthropic: {
     provider: {
       name: "anthropic",
diff --git a/packages/connections/src/connect-github-credential-link.test.ts b/packages/connections/src/connect-github-credential-link.test.ts
index 268bad0f85..61a3236613 100644
--- a/packages/connections/src/connect-github-credential-link.test.ts
+++ b/packages/connections/src/connect-github-credential-link.test.ts
@@ -141,10 +141,7 @@ describe("the room GitHub connect card reads what its own submit writes", () =>
     const routes = createConnectGithubRoutes({
       requireGrant: allowAll,
       log: () => {},
-      resolveGithubConfig: buildResolveGithubConfig(
-        store,
-        githubDescriptor.displayName,
-      ),
+      resolveGithubConfig: buildResolveGithubConfig(store, githubDescriptor.displayName),
       resolveCodeReviewDefinitionId: async () => "wfd_code_review",
       acquireRepoReviewLease: async () => true,
       releaseRepoReviewLease: async () => {},
diff --git a/packages/connections/src/connect-github-routes.test.ts b/packages/connections/src/connect-github-routes.test.ts
index fbe4debb0e..c9e097995f 100644
--- a/packages/connections/src/connect-github-routes.test.ts
+++ b/packages/connections/src/connect-github-routes.test.ts
@@ -8,15 +8,9 @@ import { Hono } from "hono";
 import type { MiddlewareHandler } from "hono";
 import type { RequireGrant, TenantEnv } from "@intx/hub-api";
 import * as errorSink from "@corbits/error-sink";
-import type {
-  GitHubClientConfig,
-  GitHubRepoSummary,
-} from "@corbits/github-tools";
+import type { GitHubClientConfig, GitHubRepoSummary } from "@corbits/github-tools";
 
-import {
-  createConnectGithubRoutes,
-  type ConnectGithubRoutesDeps,
-} from "./connect-github-routes";
+import { createConnectGithubRoutes, type ConnectGithubRoutesDeps } from "./connect-github-routes";
 
 const TENANT = {
   id: "tnt_1",
@@ -87,35 +81,20 @@ function buildApp(overrides: Partial<ConnectGithubRoutesDeps> = {}) {
     mintRepoGrant: async (tenantId, repo) => {
       grants.push({ tenantId, repo });
     },
-    createWebhookTrigger: async (
-      tenantId,
-      _principalId,
-      _definitionId,
-      repo,
-    ) => {
+    createWebhookTrigger: async (tenantId, _principalId, _definitionId, repo) => {
       triggers.push({ tenantId, repo });
       return { id: `trg_${repo.id}` };
     },
     hasWebhookTrigger: async (_tenantId, _definitionId, repo) =>
       triggers.some((t) => t.repo.id === repo.id),
     getTemplateSettings: async () => settings,
-    persistSelectedRepos: async (
-      _tenantId,
-      _workbenchId,
-      _principalId,
-      patch,
-    ) => {
+    persistSelectedRepos: async (_tenantId, _workbenchId, _principalId, patch) => {
       settings = {
         pendingConnections: patch["template/pendingConnections"],
         selectedRepos: patch["template/selectedRepos"],
       };
     },
-    onReviewingStarted: async (
-      tenantId,
-      workbenchId,
-      principalId,
-      introductions,
-    ) => {
+    onReviewingStarted: async (tenantId, workbenchId, principalId, introductions) => {
       introductionCalls.push({
         tenantId,
         workbenchId,
@@ -165,9 +144,7 @@ describe("GET /:workbenchId/github/state", () => {
   test("surfaces a consumer-language error, never the raw GitHub failure, on a listRepos throw", async () => {
     const { app } = buildApp({
       listReposFn: async () => {
-        throw new Error(
-          "GitHub request to /user/repos failed: 401 Bad credentials",
-        );
+        throw new Error("GitHub request to /user/repos failed: 401 Bad credentials");
       },
     });
     const response = await app.request("/wb_1/github/state");
@@ -189,14 +166,8 @@ describe("POST /:workbenchId/github/start-reviewing", () => {
     });
     expect(response.status).toBe(200);
     expect(await response.json()).toEqual({ startedTriggerCount: 2 });
-    expect(harness.grants.map((g) => g.repo.name)).toEqual([
-      "acme/widgets",
-      "acme/gadgets",
-    ]);
-    expect(harness.triggers.map((t) => t.repo.name)).toEqual([
-      "acme/widgets",
-      "acme/gadgets",
-    ]);
+    expect(harness.grants.map((g) => g.repo.name)).toEqual(["acme/widgets", "acme/gadgets"]);
+    expect(harness.triggers.map((t) => t.repo.name)).toEqual(["acme/widgets", "acme/gadgets"]);
     expect(harness.settingsNow()).toEqual({
       pendingConnections: [],
       selectedRepos: ["1", "2"],
@@ -220,9 +191,7 @@ describe("POST /:workbenchId/github/start-reviewing", () => {
     expect(call.introductions.length).toBe(3);
     for (const introduction of call.introductions) {
       expect(
-        ["acme/widgets", "acme/gadgets"].some((name) =>
-          introduction.text.includes(name),
-        ),
+        ["acme/widgets", "acme/gadgets"].some((name) => introduction.text.includes(name)),
       ).toBe(true);
     }
   });
@@ -293,9 +262,7 @@ describe("POST /:workbenchId/github/start-reviewing", () => {
   test("502s when GitHub cannot be read, without posting introductions", async () => {
     const harness = buildApp({
       listReposFn: async () => {
-        throw new Error(
-          "GitHub request to /user/repos failed: 401 Bad credentials",
-        );
+        throw new Error("GitHub request to /user/repos failed: 401 Bad credentials");
       },
     });
     const response = await harness.app.request("/wb_1/github/start-reviewing", {
diff --git a/packages/connections/src/connect-github-routes.ts b/packages/connections/src/connect-github-routes.ts
index bd7fff7a30..f9fddd7efa 100644
--- a/packages/connections/src/connect-github-routes.ts
+++ b/packages/connections/src/connect-github-routes.ts
@@ -48,8 +48,7 @@ import { templateReposSettingsPatch } from "./template-settings";
 // the CL-6360 idiom this route follows throughout via
 // `@corbits/error-sink`'s `makeErrorEnvelope`: log the real cause behind
 // a `refId`, answer with one honest, actionable `userMessage`.
-const REPOS_UNREADABLE_MESSAGE =
-  "Couldn't read your GitHub repositories. Try reconnecting.";
+const REPOS_UNREADABLE_MESSAGE = "Couldn't read your GitHub repositories. Try reconnecting.";
 const START_REVIEWING_FAILED_MESSAGE =
   "Couldn't start reviewing those repositories. Try again in a moment.";
 
@@ -77,9 +76,7 @@ export type ConnectGithubRoutesDeps = {
    * `CONNECTOR_REGISTRY` credential name, the same secret
    * `buildCredentialDelivery` decrypts for a tool binding — never a second,
    * bespoke credential store. */
-  resolveGithubConfig(
-    tenantId: string,
-  ): Promise<GitHubClientConfig | undefined>;
+  resolveGithubConfig(tenantId: string): Promise<GitHubClientConfig | undefined>;
   /** The tenant's deployed `code-review` workflow definition id —
    * `undefined` when the template's own workflow was never deployed for
    * this tenant (a create-flow bug, not something this route can fix). */
@@ -90,34 +87,20 @@ export type ConnectGithubRoutesDeps = {
    * the actual concurrency backstop, not `hasRepoGrant`/`hasWebhookTrigger`
    * below. A host binds this to `@corbits/webhook-triggers`'
    * `RepoReviewLeaseStore.acquire`. */
-  acquireRepoReviewLease(
-    tenantId: string,
-    repo: GitHubRepoSummary,
-  ): Promise<boolean>;
+  acquireRepoReviewLease(tenantId: string, repo: GitHubRepoSummary): Promise<boolean>;
   /** Releases a lease `acquireRepoReviewLease` won — see
    * `ConnectGithubSetupPorts.releaseRepoReviewLease`. A host binds
    * this to `RepoReviewLeaseStore.release`. */
-  releaseRepoReviewLease(
-    tenantId: string,
-    repo: GitHubRepoSummary,
-  ): Promise<void>;
+  releaseRepoReviewLease(tenantId: string, repo: GitHubRepoSummary): Promise<void>;
   /** True once this repo already has the `repo:<owner/name>` grant — see
    * `./connect-github-setup.ts`'s `ConnectGithubSetupPorts.hasRepoGrant`
    * for why this makes a retry between minting the grant and creating
    * the trigger safe. */
-  hasRepoGrant(
-    tenantId: string,
-    repo: GitHubRepoSummary,
-    cookies: string[],
-  ): Promise<boolean>;
+  hasRepoGrant(tenantId: string, repo: GitHubRepoSummary, cookies: string[]): Promise<boolean>;
   /** Mints the `repo:<owner/name>`-scoped grant a launched review run
    * needs to read this repo — see `./connect-github-setup.ts`'s
    * `ConnectGithubSetupPorts.mintRepoGrant` for the exact resource shape. */
-  mintRepoGrant(
-    tenantId: string,
-    repo: GitHubRepoSummary,
-    cookies: string[],
-  ): Promise<void>;
+  mintRepoGrant(tenantId: string, repo: GitHubRepoSummary, cookies: string[]): Promise<void>;
   /** Creates the live `webhook_trigger` row this repo's pull-request-opened
    * events fire, scoped to the resolved code-review definition. A host
    * binds this to `@corbits/webhook-triggers`' `WebhookTriggerStore.create`. */
@@ -176,13 +159,10 @@ export type ConnectGithubRoutesDeps = {
   fetchAuthenticatedLoginFn?: typeof fetchAuthenticatedLogin;
 };
 
-export function createConnectGithubRoutes(
-  deps: ConnectGithubRoutesDeps,
-): Hono<TenantEnv> {
+export function createConnectGithubRoutes(deps: ConnectGithubRoutesDeps): Hono<TenantEnv> {
   const app = new Hono<TenantEnv>();
   const runListRepos = deps.listReposFn ?? listRepos;
-  const runFetchAuthenticatedLogin =
-    deps.fetchAuthenticatedLoginFn ?? fetchAuthenticatedLogin;
+  const runFetchAuthenticatedLogin = deps.fetchAuthenticatedLoginFn ?? fetchAuthenticatedLogin;
 
   async function readGithubState(
     tenantId: string,
@@ -207,52 +187,41 @@ export function createConnectGithubRoutes(
       // token — see this module's own `REPOS_UNREADABLE_MESSAGE` comment
       // — so only the log line below carries the real cause.
       const message = cause instanceof Error ? cause.message : String(cause);
-      deps.log(
-        `connect-github: reading GitHub state failed for tenant ${tenantId}: ${message}`,
-      );
+      deps.log(`connect-github: reading GitHub state failed for tenant ${tenantId}: ${message}`);
       return { ok: false };
     }
   }
 
-  app.get(
-    "/:workbenchId/github/state",
-    deps.requireGrant("credential:*", "read"),
-    async (c) => {
-      const tenant = c.get("tenant");
-      const workbenchId = c.req.param("workbenchId");
-      const config = await deps.resolveGithubConfig(tenant.id);
-      if (config === undefined) {
-        return c.json({ kind: "disconnected" }, 200);
-      }
+  app.get("/:workbenchId/github/state", deps.requireGrant("credential:*", "read"), async (c) => {
+    const tenant = c.get("tenant");
+    const workbenchId = c.req.param("workbenchId");
+    const config = await deps.resolveGithubConfig(tenant.id);
+    if (config === undefined) {
+      return c.json({ kind: "disconnected" }, 200);
+    }
 
-      const state = await readGithubState(tenant.id, config);
-      if (!state.ok) {
-        return c.json(
-          { kind: "error", message: REPOS_UNREADABLE_MESSAGE },
-          200,
-        );
-      }
+    const state = await readGithubState(tenant.id, config);
+    if (!state.ok) {
+      return c.json({ kind: "error", message: REPOS_UNREADABLE_MESSAGE }, 200);
+    }
 
-      const settings = await deps.getTemplateSettings(tenant.id, workbenchId);
-      return c.json(
-        {
-          kind: "connected",
-          orgName: state.orgName,
-          repos: state.repos,
-          selectedRepoIds: settings.selectedRepos,
-        },
-        200,
-      );
-    },
-  );
+    const settings = await deps.getTemplateSettings(tenant.id, workbenchId);
+    return c.json(
+      {
+        kind: "connected",
+        orgName: state.orgName,
+        repos: state.repos,
+        selectedRepoIds: settings.selectedRepos,
+      },
+      200,
+    );
+  });
 
   app.post(
     "/:workbenchId/github/start-reviewing",
     deps.requireGrant("credential:*", "read"),
     async (c) => {
-      const body = StartReviewingBody(
-        await c.req.json().catch(() => undefined),
-      );
+      const body = StartReviewingBody(await c.req.json().catch(() => undefined));
       if (body instanceof type.errors) {
         return c.json(
           makeErrorEnvelope({
@@ -289,61 +258,34 @@ export function createConnectGithubRoutes(
         );
       }
 
-      const codeReviewDefinitionId = await deps.resolveCodeReviewDefinitionId(
-        tenant.id,
-      );
+      const codeReviewDefinitionId = await deps.resolveCodeReviewDefinitionId(tenant.id);
       if (codeReviewDefinitionId === undefined) {
         return c.json(
           makeErrorEnvelope({
             code: "not_found",
-            userMessage:
-              "This workbench's code-review workflow isn't set up yet.",
+            userMessage: "This workbench's code-review workflow isn't set up yet.",
           }),
           404,
         );
       }
 
       try {
-        const settingsBefore = await deps.getTemplateSettings(
-          tenant.id,
-          workbenchId,
-        );
-        const introductionsAlreadyPosted =
-          settingsBefore.selectedRepos.length > 0;
+        const settingsBefore = await deps.getTemplateSettings(tenant.id, workbenchId);
+        const introductionsAlreadyPosted = settingsBefore.selectedRepos.length > 0;
         const result = await startReviewingRepos(body.repoIds, state.repos, {
-          acquireRepoReviewLease: (repo) =>
-            deps.acquireRepoReviewLease(tenant.id, repo),
-          releaseRepoReviewLease: (repo) =>
-            deps.releaseRepoReviewLease(tenant.id, repo),
+          acquireRepoReviewLease: (repo) => deps.acquireRepoReviewLease(tenant.id, repo),
+          releaseRepoReviewLease: (repo) => deps.releaseRepoReviewLease(tenant.id, repo),
           hasRepoGrant: (repo) =>
-            deps.hasRepoGrant(
-              tenant.id,
-              repo,
-              cookiesFromHeader(c.req.header("cookie")),
-            ),
+            deps.hasRepoGrant(tenant.id, repo, cookiesFromHeader(c.req.header("cookie"))),
           mintRepoGrant: (repo) =>
-            deps.mintRepoGrant(
-              tenant.id,
-              repo,
-              cookiesFromHeader(c.req.header("cookie")),
-            ),
+            deps.mintRepoGrant(tenant.id, repo, cookiesFromHeader(c.req.header("cookie"))),
           createWebhookTrigger: (repo) =>
-            deps.createWebhookTrigger(
-              tenant.id,
-              principal.id,
-              codeReviewDefinitionId,
-              repo,
-            ),
+            deps.createWebhookTrigger(tenant.id, principal.id, codeReviewDefinitionId, repo),
           hasWebhookTrigger: (repo) =>
             deps.hasWebhookTrigger(tenant.id, codeReviewDefinitionId, repo),
           persistSelectedRepos: async (repoIds) => {
-            const settings = await deps.getTemplateSettings(
-              tenant.id,
-              workbenchId,
-            );
-            const pendingConnections = settings.pendingConnections.filter(
-              (id) => id !== "github",
-            );
+            const settings = await deps.getTemplateSettings(tenant.id, workbenchId);
+            const pendingConnections = settings.pendingConnections.filter((id) => id !== "github");
             await deps.persistSelectedRepos(
               tenant.id,
               workbenchId,
@@ -353,9 +295,7 @@ export function createConnectGithubRoutes(
           },
         });
 
-        const reposById = new Map(
-          state.repos.map((repo) => [repo.id, repo] as const),
-        );
+        const reposById = new Map(state.repos.map((repo) => [repo.id, repo] as const));
         const repoNames = body.repoIds
           .map((repoId) => reposById.get(repoId)?.name)
           .filter((name): name is string => name !== undefined);
@@ -376,10 +316,7 @@ export function createConnectGithubRoutes(
           }
         }
 
-        return c.json(
-          { startedTriggerCount: result.createdTriggerIds.length },
-          200,
-        );
+        return c.json({ startedTriggerCount: result.createdTriggerIds.length }, 200);
       } catch (cause) {
         // A repoId `state.repos` doesn't carry means the card's own
         // selection state is stale against a live re-list — never
diff --git a/packages/connections/src/connect-github-setup.race.test.ts b/packages/connections/src/connect-github-setup.race.test.ts
index b5f5ddbf16..ce94d59bcb 100644
--- a/packages/connections/src/connect-github-setup.race.test.ts
+++ b/packages/connections/src/connect-github-setup.race.test.ts
@@ -60,9 +60,7 @@ const TENANT_ID = "tnt_race";
 const DEFINITION_ID = "def_code_review";
 
 describeIfDb("startReviewingRepos under real concurrency (CL-7242)", () => {
-  const scratchUrl = scratchUrlFor(
-    databaseUrl ?? "postgres://localhost:5432/unused",
-  );
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused");
   const scratchTarget = new URL(scratchUrl);
   const scratchDatabase = scratchTarget.pathname.replace(/^\//, "");
 
@@ -114,10 +112,7 @@ describeIfDb("startReviewingRepos under real concurrency (CL-7242)", () => {
     });
     try {
       const db = drizzle(client, { schema: intxSchema });
-      const webhookStore = createDrizzleWebhookTriggerStore(
-        db,
-        createNoopCredentialCipher(),
-      );
+      const webhookStore = createDrizzleWebhookTriggerStore(db, createNoopCredentialCipher());
       const leaseStore = createDrizzleRepoReviewLeaseStore(db);
 
       const roleId = "role_race_member";
@@ -130,10 +125,8 @@ describeIfDb("startReviewingRepos under real concurrency (CL-7242)", () => {
       // ours on their table. Only the lease serializes the two racing
       // calls below.
       const buildPorts = (): ConnectGithubSetupPorts => ({
-        acquireRepoReviewLease: (repo) =>
-          leaseStore.acquire(TENANT_ID, repo.name),
-        releaseRepoReviewLease: (repo) =>
-          leaseStore.release(TENANT_ID, repo.name),
+        acquireRepoReviewLease: (repo) => leaseStore.acquire(TENANT_ID, repo.name),
+        releaseRepoReviewLease: (repo) => leaseStore.release(TENANT_ID, repo.name),
         hasRepoGrant: async (repo) => {
           const existing = await db.query.grant.findFirst({
             where: and(
@@ -147,10 +140,7 @@ describeIfDb("startReviewingRepos under real concurrency (CL-7242)", () => {
         },
         mintRepoGrant: async (repo) => {
           const memberRole = await db.query.role.findFirst({
-            where: and(
-              eq(roleTable.tenantId, TENANT_ID),
-              eq(roleTable.name, "member"),
-            ),
+            where: and(eq(roleTable.tenantId, TENANT_ID), eq(roleTable.name, "member")),
             columns: { id: true },
           });
           if (memberRole === undefined) throw new Error("no member role");
@@ -167,9 +157,7 @@ describeIfDb("startReviewingRepos under real concurrency (CL-7242)", () => {
         hasWebhookTrigger: async (repo) => {
           const triggers = await webhookStore.list(TENANT_ID);
           const name = webhookTriggerName(repo);
-          return triggers.some(
-            (t) => t.workflowDefinitionId === DEFINITION_ID && t.name === name,
-          );
+          return triggers.some((t) => t.workflowDefinitionId === DEFINITION_ID && t.name === name);
         },
         createWebhookTrigger: async (repo) => {
           const row = await webhookStore.ensure({
@@ -177,8 +165,7 @@ describeIfDb("startReviewingRepos under real concurrency (CL-7242)", () => {
             tenantId: TENANT_ID,
             name: webhookTriggerName(repo),
             workflowDefinitionId: DEFINITION_ID,
-            inputTemplate:
-              "Review the pull request at {{pull_request.html_url}}",
+            inputTemplate: "Review the pull request at {{pull_request.html_url}}",
             secret: crypto.randomUUID(),
             createdBy: "user_1",
           });
@@ -198,8 +185,7 @@ describeIfDb("startReviewingRepos under real concurrency (CL-7242)", () => {
       // round trips -- both are correct outcomes. The property this
       // test actually cares about is that at most one trigger is ever
       // created, and the database never ends up with a duplicate.
-      const totalCreated =
-        first.createdTriggerIds.length + second.createdTriggerIds.length;
+      const totalCreated = first.createdTriggerIds.length + second.createdTriggerIds.length;
       expect(totalCreated).toBe(1);
 
       const grantRows = await client`
diff --git a/packages/connections/src/connect-github-setup.test.ts b/packages/connections/src/connect-github-setup.test.ts
index bc8ebae6df..577d169937 100644
--- a/packages/connections/src/connect-github-setup.test.ts
+++ b/packages/connections/src/connect-github-setup.test.ts
@@ -101,10 +101,7 @@ describe("startReviewingRepos", () => {
     const result = await startReviewingRepos(["1", "3"], REPOS, fake.ports);
 
     expect(fake.grantedRepos).toEqual(["acme/widgets", "acme/sprockets"]);
-    expect(fake.createdTriggerRepos).toEqual([
-      "acme/widgets",
-      "acme/sprockets",
-    ]);
+    expect(fake.createdTriggerRepos).toEqual(["acme/widgets", "acme/sprockets"]);
     expect(result.createdTriggerIds).toEqual(["trg_1", "trg_3"]);
     expect(fake.persistedRepoIds()).toEqual(["1", "3"]);
   });
@@ -117,9 +114,9 @@ describe("startReviewingRepos", () => {
 
   test("throws rather than silently dropping a repoId the listed repos don't carry", async () => {
     const fake = fakePorts();
-    await expect(
-      startReviewingRepos(["not-a-real-repo"], REPOS, fake.ports),
-    ).rejects.toThrow(/not in the listed repos/);
+    await expect(startReviewingRepos(["not-a-real-repo"], REPOS, fake.ports)).rejects.toThrow(
+      /not in the listed repos/,
+    );
     expect(fake.grantedRepos).toEqual([]);
   });
 
@@ -135,9 +132,9 @@ describe("startReviewingRepos", () => {
       },
     };
 
-    await expect(
-      startReviewingRepos(["1", "2", "3"], REPOS, failingPorts),
-    ).rejects.toThrow(/mint failed/);
+    await expect(startReviewingRepos(["1", "2", "3"], REPOS, failingPorts)).rejects.toThrow(
+      /mint failed/,
+    );
 
     // The first repo made it through before the failure; the other two
     // never got a grant or a trigger.
@@ -146,22 +143,10 @@ describe("startReviewingRepos", () => {
 
     // Retrying the same selection (as the route's "Try again" does)
     // skips the repo that's already set up and only mints for the rest.
-    const result = await startReviewingRepos(
-      ["1", "2", "3"],
-      REPOS,
-      fake.ports,
-    );
+    const result = await startReviewingRepos(["1", "2", "3"], REPOS, fake.ports);
 
-    expect(fake.grantedRepos).toEqual([
-      "acme/widgets",
-      "acme/gadgets",
-      "acme/sprockets",
-    ]);
-    expect(fake.createdTriggerRepos).toEqual([
-      "acme/widgets",
-      "acme/gadgets",
-      "acme/sprockets",
-    ]);
+    expect(fake.grantedRepos).toEqual(["acme/widgets", "acme/gadgets", "acme/sprockets"]);
+    expect(fake.createdTriggerRepos).toEqual(["acme/widgets", "acme/gadgets", "acme/sprockets"]);
     expect(result.createdTriggerIds).toEqual(["trg_2", "trg_3"]);
   });
 
@@ -177,33 +162,21 @@ describe("startReviewingRepos", () => {
       },
     };
 
-    await expect(
-      startReviewingRepos(["1", "2", "3"], REPOS, failingPorts),
-    ).rejects.toThrow(/trigger create failed/);
+    await expect(startReviewingRepos(["1", "2", "3"], REPOS, failingPorts)).rejects.toThrow(
+      /trigger create failed/,
+    );
 
     // The failing repo's grant was minted before the trigger create blew
     // up; the repo after it was never reached at all.
     expect(fake.grantedRepos).toEqual(["acme/widgets", "acme/gadgets"]);
     expect(fake.createdTriggerRepos).toEqual(["acme/widgets"]);
 
-    const result = await startReviewingRepos(
-      ["1", "2", "3"],
-      REPOS,
-      fake.ports,
-    );
+    const result = await startReviewingRepos(["1", "2", "3"], REPOS, fake.ports);
 
     // acme/gadgets' grant is not re-minted on retry — only its missing
     // trigger is created.
-    expect(fake.grantedRepos).toEqual([
-      "acme/widgets",
-      "acme/gadgets",
-      "acme/sprockets",
-    ]);
-    expect(fake.createdTriggerRepos).toEqual([
-      "acme/widgets",
-      "acme/gadgets",
-      "acme/sprockets",
-    ]);
+    expect(fake.grantedRepos).toEqual(["acme/widgets", "acme/gadgets", "acme/sprockets"]);
+    expect(fake.createdTriggerRepos).toEqual(["acme/widgets", "acme/gadgets", "acme/sprockets"]);
     expect(result.createdTriggerIds).toEqual(["trg_2", "trg_3"]);
   });
 
@@ -227,12 +200,10 @@ describe("startReviewingRepos", () => {
     expect(fake.grantedRepos).toEqual(["acme/widgets"]);
     expect(fake.createdTriggerRepos).toEqual(["acme/widgets"]);
 
-    const totalCreated =
-      first.createdTriggerIds.length + second.createdTriggerIds.length;
+    const totalCreated = first.createdTriggerIds.length + second.createdTriggerIds.length;
     expect(totalCreated).toBe(1);
 
-    const totalSkipped =
-      first.skippedRepoIds.length + second.skippedRepoIds.length;
+    const totalSkipped = first.skippedRepoIds.length + second.skippedRepoIds.length;
     expect(totalSkipped).toBe(1);
   });
 });
diff --git a/packages/connections/src/connect-github-setup.ts b/packages/connections/src/connect-github-setup.ts
index c65fca7555..b3c6af9ca8 100644
--- a/packages/connections/src/connect-github-setup.ts
+++ b/packages/connections/src/connect-github-setup.ts
@@ -69,9 +69,7 @@ export interface ConnectGithubSetupPorts {
    * pure defense-in-depth — a lease bug degrades to a silent no-op
    * here instead of a hard failure or a real duplicate trigger.
    */
-  createWebhookTrigger(
-    repo: GitHubRepoSummary,
-  ): Promise<{ readonly id: string }>;
+  createWebhookTrigger(repo: GitHubRepoSummary): Promise<{ readonly id: string }>;
   /**
    * True once this repo already has a live webhook trigger — checked
    * before creating one, so a retry after a mid-loop failure (a repo
diff --git a/packages/connections/src/connected-hook.test.ts b/packages/connections/src/connected-hook.test.ts
index 8cbd205217..5bf1768c7f 100644
--- a/packages/connections/src/connected-hook.test.ts
+++ b/packages/connections/src/connected-hook.test.ts
@@ -29,9 +29,7 @@ function connectedInfo(): ServiceConnectedInfo {
 
 describe("fireConnectedHook", () => {
   test("does nothing when no hook is wired", async () => {
-    await expect(
-      fireConnectedHook(undefined, () => {}, connectedInfo()),
-    ).resolves.toBeUndefined();
+    await expect(fireConnectedHook(undefined, () => {}, connectedInfo())).resolves.toBeUndefined();
   });
 
   test("logs and reports a hook failure rather than breaking the connect", async () => {
diff --git a/packages/connections/src/connected-hook.ts b/packages/connections/src/connected-hook.ts
index 3b3372892e..858ba080dd 100644
--- a/packages/connections/src/connected-hook.ts
+++ b/packages/connections/src/connected-hook.ts
@@ -14,9 +14,7 @@ export type ServiceConnectedInfo = {
   readonly displayName: string;
 };
 
-export type ServiceConnectedHook = (
-  info: ServiceConnectedInfo,
-) => Promise<void>;
+export type ServiceConnectedHook = (info: ServiceConnectedInfo) => Promise<void>;
 
 export async function fireConnectedHook(
   hook: ServiceConnectedHook | undefined,
@@ -28,9 +26,7 @@ export async function fireConnectedHook(
     await hook(info);
   } catch (cause) {
     const message = cause instanceof Error ? cause.message : String(cause);
-    log(
-      `onConnected hook failed for ${info.connectorId} on tenant ${info.tenantId}: ${message}`,
-    );
+    log(`onConnected hook failed for ${info.connectorId} on tenant ${info.tenantId}: ${message}`);
     reportError(cause, {
       operation: "fire_connected_hook",
       tenantId: info.tenantId,
diff --git a/packages/connections/src/connections-shrink.test.ts b/packages/connections/src/connections-shrink.test.ts
index bffcd59569..2301fe444b 100644
--- a/packages/connections/src/connections-shrink.test.ts
+++ b/packages/connections/src/connections-shrink.test.ts
@@ -8,15 +8,11 @@ import { expect, test } from "bun:test";
 const here = new URL(".", import.meta.url);
 
 test("duplicate-grant reconcile entry point stays deleted", async () => {
-  expect(
-    await Bun.file(
-      new URL("./reconcile-duplicate-repo-grants.ts", here),
-    ).exists(),
-  ).toBe(false);
-  const pkg = JSON.parse(
-    await Bun.file(new URL("../package.json", here)).text(),
-  ) as { exports?: Record<string, string> };
-  expect(
-    Object.hasOwn(pkg.exports ?? {}, "./reconcile-duplicate-repo-grants"),
-  ).toBe(false);
+  expect(await Bun.file(new URL("./reconcile-duplicate-repo-grants.ts", here)).exists()).toBe(
+    false,
+  );
+  const pkg = JSON.parse(await Bun.file(new URL("../package.json", here)).text()) as {
+    exports?: Record<string, string>;
+  };
+  expect(Object.hasOwn(pkg.exports ?? {}, "./reconcile-duplicate-repo-grants")).toBe(false);
 });
diff --git a/packages/connections/src/credential-test.ts b/packages/connections/src/credential-test.ts
index 659207923c..b117100ae5 100644
--- a/packages/connections/src/credential-test.ts
+++ b/packages/connections/src/credential-test.ts
@@ -64,7 +64,8 @@ export type AdapterPluginId =
   | "openai-responses";
 
 export type CredentialTestResult =
-  { readonly ok: true } | { readonly ok: false; readonly message: string };
+  | { readonly ok: true }
+  | { readonly ok: false; readonly message: string };
 
 export type FetchLike = (
   url: string,
@@ -122,10 +123,7 @@ export type ProviderTestConfig = CommonProviderTestConfig &
          * `baseURL` is the resolved origin for this probe — `config.baseURL`
          * for every provider except `ollama`, which threads a caller-supplied
          * override through here (see `TestProviderCredentialArgs.baseURL`). */
-        readonly buildProbeRequest: (
-          apiKey: string,
-          baseURL: string,
-        ) => ProbeRequest;
+        readonly buildProbeRequest: (apiKey: string, baseURL: string) => ProbeRequest;
         /** Whether this status/body pair means "the provider rejected the key,"
          * as opposed to a network problem or some other failure — each
          * provider maps auth failures to its own status code. Only probed
@@ -194,9 +192,7 @@ function stripTrailingSlash(url: string): string {
  */
 export function ollamaApiRoot(baseURL: string): string {
   const trimmed = stripTrailingSlash(baseURL);
-  return trimmed.endsWith("/v1")
-    ? stripTrailingSlash(trimmed.slice(0, -"/v1".length))
-    : trimmed;
+  return trimmed.endsWith("/v1") ? stripTrailingSlash(trimmed.slice(0, -"/v1".length)) : trimmed;
 }
 
 /**
@@ -468,10 +464,7 @@ export function supportedCredentialProviders(): readonly {
   readonly displayName: string;
 }[] {
   return (
-    Object.entries(PROVIDER_TEST_CONFIG) as [
-      SupportedCredentialProvider,
-      ProviderTestConfig,
-    ][]
+    Object.entries(PROVIDER_TEST_CONFIG) as [SupportedCredentialProvider, ProviderTestConfig][]
   ).map(([id, config]) => ({ id, displayName: config.displayName }));
 }
 
@@ -496,11 +489,7 @@ function sanitizeProviderText(displayName: string, text: string): string {
     : text;
 }
 
-function providerErrorMessage(
-  displayName: string,
-  status: number,
-  body: string,
-): string {
+function providerErrorMessage(displayName: string, status: number, body: string): string {
   try {
     const parsedJson: unknown = JSON.parse(body);
     const nested = ErrorBody(parsedJson);
@@ -538,10 +527,7 @@ export async function testProviderCredential(
     return { ok: false, message: config.probeless };
   }
 
-  const probe = config.buildProbeRequest(
-    args.apiKey,
-    args.baseURL ?? config.baseURL,
-  );
+  const probe = config.buildProbeRequest(args.apiKey, args.baseURL ?? config.baseURL);
 
   const requestInitBase = {
     method: probe.method ?? "GET",
@@ -553,9 +539,7 @@ export async function testProviderCredential(
   try {
     response = await doFetch(
       probe.url,
-      probe.body !== undefined
-        ? { ...requestInitBase, body: probe.body }
-        : requestInitBase,
+      probe.body !== undefined ? { ...requestInitBase, body: probe.body } : requestInitBase,
     );
   } catch (cause) {
     return {
@@ -567,9 +551,7 @@ export async function testProviderCredential(
     };
   }
 
-  const accepted = config.isKeyAccepted
-    ? config.isKeyAccepted(response.status)
-    : response.ok;
+  const accepted = config.isKeyAccepted ? config.isKeyAccepted(response.status) : response.ok;
   if (accepted) return { ok: true };
 
   const body = await response.text();
@@ -628,9 +610,7 @@ const OLLAMA_CAPABILITY_MAP: Readonly<Record<string, readonly string[]>> = {
   vision: ["vision-input"],
 };
 
-function translateOllamaCapabilities(
-  ollamaCapabilities: readonly string[],
-): readonly string[] {
+function translateOllamaCapabilities(ollamaCapabilities: readonly string[]): readonly string[] {
   const translated = new Set<string>();
   for (const capability of ollamaCapabilities) {
     for (const wireCapability of OLLAMA_CAPABILITY_MAP[capability] ?? []) {
@@ -718,19 +698,13 @@ export async function fetchOllamaModelCatalog(
     if (parsed instanceof type.errors || parsed.models.length === 0) {
       return undefined;
     }
-    const localModels = parsed.models.filter(
-      (model) => !isCloudProxyModel(model.name),
-    );
+    const localModels = parsed.models.filter((model) => !isCloudProxyModel(model.name));
     if (localModels.length === 0) return undefined;
     return await Promise.all(
       localModels.map(async (model) => ({
         canonicalName: model.name,
         displayName: model.name,
-        capabilities: await fetchOllamaModelCapabilities(
-          baseURL,
-          model.name,
-          fetchImpl,
-        ),
+        capabilities: await fetchOllamaModelCapabilities(baseURL, model.name, fetchImpl),
       })),
     );
   } catch {
diff --git a/packages/connections/src/default-skills.test.ts b/packages/connections/src/default-skills.test.ts
index 2dd603d28b..98cd745954 100644
--- a/packages/connections/src/default-skills.test.ts
+++ b/packages/connections/src/default-skills.test.ts
@@ -4,9 +4,7 @@ import { DEFAULT_SKILLS } from "./default-skills";
 
 describe("DEFAULT_SKILLS", () => {
   test("keeps the writing-system-prompts slug as the registry id", () => {
-    expect(DEFAULT_SKILLS.map((skill) => skill.name)).toContain(
-      "writing-system-prompts",
-    );
+    expect(DEFAULT_SKILLS.map((skill) => skill.name)).toContain("writing-system-prompts");
   });
 
   test("descriptions are person-facing — no lab or intern captions", () => {
diff --git a/packages/connections/src/descriptor.ts b/packages/connections/src/descriptor.ts
index 23642e836d..9a7ecbed4f 100644
--- a/packages/connections/src/descriptor.ts
+++ b/packages/connections/src/descriptor.ts
@@ -71,18 +71,14 @@ export interface ConnectorOAuthConfig {
    * connect routes refuse the flow rather than round-trip a doomed
    * request, and the settings-ui card renders the muted "not
    * configured" state instead of a live Connect button. */
-  readonly clientId?: (
-    env: Readonly<Record<string, string | undefined>>,
-  ) => string | undefined;
+  readonly clientId?: (env: Readonly<Record<string, string | undefined>>) => string | undefined;
   /** Resolves this connector's registered OAuth app secret from the same
    * env bag `clientId` reads — present only for a confidential-client
    * `oauth-code` flow (GitHub's OAuth App token exchange requires one;
    * OpenRouter and Hugging Face are public clients and never set this).
    * `undefined` is treated the same as an absent client id: the flow
    * refuses rather than exchanging with a missing secret. */
-  readonly clientSecret?: (
-    env: Readonly<Record<string, string | undefined>>,
-  ) => string | undefined;
+  readonly clientSecret?: (env: Readonly<Record<string, string | undefined>>) => string | undefined;
   /** Builds the full authorize-page URL from the mechanics `oauth-routes.ts`
    * already computed — every provider names its query parameters
    * differently (OpenRouter: `callback_url`; Hugging Face:
diff --git a/packages/connections/src/github-connect.test.ts b/packages/connections/src/github-connect.test.ts
index cae07ddf1a..bd4c374874 100644
--- a/packages/connections/src/github-connect.test.ts
+++ b/packages/connections/src/github-connect.test.ts
@@ -5,20 +5,14 @@
 // field on a rejected code).
 import { describe, expect, spyOn, test } from "bun:test";
 import * as errorSink from "@corbits/error-sink";
-import {
-  exchangeCodeForGithubToken,
-  type ExchangeFetch,
-} from "./github-connect";
+import { exchangeCodeForGithubToken, type ExchangeFetch } from "./github-connect";
 
 describe("exchangeCodeForGithubToken", () => {
   test("posts code, client id/secret, and redirect uri to the exchange endpoint", async () => {
     const requests: { url: string; body: unknown }[] = [];
     const fetchImpl: ExchangeFetch = async (url, init) => {
       requests.push({ url, body: JSON.parse(init.body) });
-      return new Response(
-        JSON.stringify({ access_token: "gho_minted_token" }),
-        { status: 200 },
-      );
+      return new Response(JSON.stringify({ access_token: "gho_minted_token" }), { status: 200 });
     };
 
     const result = await exchangeCodeForGithubToken({
@@ -30,9 +24,7 @@ describe("exchangeCodeForGithubToken", () => {
     });
 
     expect(result).toEqual({ ok: true, key: "gho_minted_token" });
-    expect(requests[0]?.url).toBe(
-      "https://github.com/login/oauth/access_token",
-    );
+    expect(requests[0]?.url).toBe("https://github.com/login/oauth/access_token");
     expect(requests[0]?.body).toEqual({
       client_id: "client_1",
       client_secret: "secret_1",
diff --git a/packages/connections/src/github-connect.ts b/packages/connections/src/github-connect.ts
index bc85695e98..6947314e3a 100644
--- a/packages/connections/src/github-connect.ts
+++ b/packages/connections/src/github-connect.ts
@@ -14,14 +14,10 @@
 import { type } from "arktype";
 import { reportError } from "@corbits/error-sink";
 
-import {
-  postExchangeRequest,
-  type OAuthExchangeFetch,
-} from "./oauth-exchange-fetch";
+import { postExchangeRequest, type OAuthExchangeFetch } from "./oauth-exchange-fetch";
 
 export const GITHUB_AUTHORIZE_URL = "https://github.com/login/oauth/authorize";
-export const GITHUB_TOKEN_EXCHANGE_URL =
-  "https://github.com/login/oauth/access_token";
+export const GITHUB_TOKEN_EXCHANGE_URL = "https://github.com/login/oauth/access_token";
 
 const TokenExchangeResponse = type({
   "access_token?": "string > 0",
diff --git a/packages/connections/src/gmail-connect.test.ts b/packages/connections/src/gmail-connect.test.ts
index f4bb6f1168..ba247f68dd 100644
--- a/packages/connections/src/gmail-connect.test.ts
+++ b/packages/connections/src/gmail-connect.test.ts
@@ -11,11 +11,7 @@ import {
   type ExchangeFetch,
 } from "./gmail-connect";
 
-function stubFetch(
-  status: number,
-  body: unknown,
-  captured: { url?: string; body?: string },
-) {
+function stubFetch(status: number, body: unknown, captured: { url?: string; body?: string }) {
   return async (url: string, init: { body: string }) => {
     captured.url = url;
     captured.body = init.body;
diff --git a/packages/connections/src/gmail-connect.ts b/packages/connections/src/gmail-connect.ts
index f2b0c2e07f..4bd711f56b 100644
--- a/packages/connections/src/gmail-connect.ts
+++ b/packages/connections/src/gmail-connect.ts
@@ -13,13 +13,9 @@
 import { type } from "arktype";
 import { reportError } from "@corbits/error-sink";
 
-import {
-  postExchangeRequest,
-  type OAuthExchangeFetch,
-} from "./oauth-exchange-fetch";
+import { postExchangeRequest, type OAuthExchangeFetch } from "./oauth-exchange-fetch";
 
-export const GOOGLE_AUTHORIZE_URL =
-  "https://accounts.google.com/o/oauth2/v2/auth";
+export const GOOGLE_AUTHORIZE_URL = "https://accounts.google.com/o/oauth2/v2/auth";
 export const GOOGLE_TOKEN_EXCHANGE_URL = "https://oauth2.googleapis.com/token";
 
 /** Read, draft, and send — `gmail.modify` covers all three without
@@ -101,10 +97,7 @@ export async function exchangeCodeForGoogleToken(
   }
   if (parsed.access_token === undefined) {
     const error = parsed.error ?? `HTTP ${response.status}`;
-    const detail =
-      parsed.error_description !== undefined
-        ? `: ${parsed.error_description}`
-        : "";
+    const detail = parsed.error_description !== undefined ? `: ${parsed.error_description}` : "";
     return {
       ok: false,
       message: `Google token exchange failed (${error}${detail})`,
@@ -115,13 +108,9 @@ export async function exchangeCodeForGoogleToken(
     apiKey: parsed.access_token,
     ...(parsed.expires_in !== undefined
       ? {
-          expiresAt: new Date(
-            Date.now() + parsed.expires_in * 1000,
-          ).toISOString(),
+          expiresAt: new Date(Date.now() + parsed.expires_in * 1000).toISOString(),
         }
       : {}),
-    ...(parsed.refresh_token !== undefined
-      ? { refreshToken: parsed.refresh_token }
-      : {}),
+    ...(parsed.refresh_token !== undefined ? { refreshToken: parsed.refresh_token } : {}),
   };
 }
diff --git a/packages/connections/src/huggingface-connect.test.ts b/packages/connections/src/huggingface-connect.test.ts
index 30ef381bf1..e1dd0648ee 100644
--- a/packages/connections/src/huggingface-connect.test.ts
+++ b/packages/connections/src/huggingface-connect.test.ts
@@ -14,10 +14,9 @@ test("exchanges the code and verifier for an access token and expiry", async ()
   const requests: { url: string; body: string }[] = [];
   const fetchImpl: ExchangeFetch = async (url, init) => {
     requests.push({ url, body: init.body });
-    return new Response(
-      JSON.stringify({ access_token: "hf_minted_token", expires_in: 3600 }),
-      { status: 200 },
-    );
+    return new Response(JSON.stringify({ access_token: "hf_minted_token", expires_in: 3600 }), {
+      status: 200,
+    });
   };
 
   const result = await exchangeCodeForToken({
diff --git a/packages/connections/src/huggingface-connect.ts b/packages/connections/src/huggingface-connect.ts
index e253aa355a..7c02e2e792 100644
--- a/packages/connections/src/huggingface-connect.ts
+++ b/packages/connections/src/huggingface-connect.ts
@@ -16,13 +16,9 @@
 import { type } from "arktype";
 import { reportError } from "@corbits/error-sink";
 
-import {
-  postExchangeRequest,
-  type OAuthExchangeFetch,
-} from "./oauth-exchange-fetch";
+import { postExchangeRequest, type OAuthExchangeFetch } from "./oauth-exchange-fetch";
 
-export const HUGGINGFACE_AUTHORIZE_URL =
-  "https://huggingface.co/oauth/authorize";
+export const HUGGINGFACE_AUTHORIZE_URL = "https://huggingface.co/oauth/authorize";
 export const HUGGINGFACE_TOKEN_URL = "https://huggingface.co/oauth/token";
 
 /** `inference-api` is the one scope this flow needs: "make inference
diff --git a/packages/connections/src/index.ts b/packages/connections/src/index.ts
index d28c94242a..26f85b3925 100644
--- a/packages/connections/src/index.ts
+++ b/packages/connections/src/index.ts
@@ -19,11 +19,7 @@ export type {
   ConnectorOAuthConfig,
   OAuthExchangeResult,
 } from "./descriptor";
-export {
-  connectorDescriptors,
-  createConnectorRegistry,
-  type ConnectorRegistry,
-} from "./registry";
+export { connectorDescriptors, createConnectorRegistry, type ConnectorRegistry } from "./registry";
 export { MissingCredentialError } from "./credential-error";
 export {
   missingCredentialDetail,
@@ -38,10 +34,7 @@ export {
   testManusCredential,
   testScrapeCreatorsCredential,
 } from "./probes";
-export {
-  createConnectionRoutes,
-  type CreateConnectionRoutesDeps,
-} from "./routes";
+export { createConnectionRoutes, type CreateConnectionRoutesDeps } from "./routes";
 export {
   createMcpServerRoutes,
   providerName as mcpProviderName,
@@ -64,14 +57,8 @@ export {
   type McpOAuthRefreshResult,
   type McpOAuthSession,
 } from "./mcp-oauth";
-export {
-  createMcpOAuthRoutes,
-  type CreateMcpOAuthRoutesDeps,
-} from "./mcp-oauth-routes";
-export {
-  listMcpServerConnections,
-  type McpServerConnection,
-} from "./mcp-server-store";
+export { createMcpOAuthRoutes, type CreateMcpOAuthRoutesDeps } from "./mcp-oauth-routes";
+export { listMcpServerConnections, type McpServerConnection } from "./mcp-server-store";
 export {
   createWorkflowConnectionRoutes,
   type CreateWorkflowConnectionRoutesDeps,
diff --git a/packages/connections/src/mcp-oauth-routes.test.ts b/packages/connections/src/mcp-oauth-routes.test.ts
index ae06b280cd..91276df182 100644
--- a/packages/connections/src/mcp-oauth-routes.test.ts
+++ b/packages/connections/src/mcp-oauth-routes.test.ts
@@ -129,10 +129,7 @@ function startStubAuthorizationServer(
   issuedCodes: Map<string, { codeChallenge: string; clientId: string }>;
   registrationBodies: unknown[];
 } {
-  const issuedCodes = new Map<
-    string,
-    { codeChallenge: string; clientId: string }
-  >();
+  const issuedCodes = new Map<string, { codeChallenge: string; clientId: string }>();
   const registrationBodies: unknown[] = [];
   let nextClientId = 1;
   const clients = new Map<string, { redirectUris: string[] }>();
@@ -169,8 +166,7 @@ function startStubAuthorizationServer(
             status: tokenGrant.registrationError.status,
           });
         }
-        const redirectUris = (body as { redirect_uris: string[] })
-          .redirect_uris;
+        const redirectUris = (body as { redirect_uris: string[] }).redirect_uris;
         const clientId = `client_${nextClientId++}`;
         clients.set(clientId, { redirectUris });
         return Response.json({
@@ -221,9 +217,7 @@ function startStubAuthorizationServer(
           ...(tokenGrant.refreshToken !== undefined
             ? { refresh_token: tokenGrant.refreshToken }
             : {}),
-          ...(tokenGrant.expiresIn !== undefined
-            ? { expires_in: tokenGrant.expiresIn }
-            : {}),
+          ...(tokenGrant.expiresIn !== undefined ? { expires_in: tokenGrant.expiresIn } : {}),
         });
       }
       return new Response("not found", { status: 404 });
@@ -290,9 +284,7 @@ function fakeHub() {
         tenantId: TENANT.id,
         name: input.name,
         plugin: input.plugin,
-        ...(input.apiBaseUrl !== undefined
-          ? { apiBaseUrl: input.apiBaseUrl }
-          : {}),
+        ...(input.apiBaseUrl !== undefined ? { apiBaseUrl: input.apiBaseUrl } : {}),
         createdAt: new Date().toISOString(),
         updatedAt: new Date().toISOString(),
       };
@@ -315,12 +307,8 @@ function fakeHub() {
         name: input.name,
         type: input.type,
         secret: input.secret,
-        ...(input.refreshSecret !== undefined
-          ? { refreshSecret: input.refreshSecret }
-          : {}),
-        ...(input.expiresAt !== undefined
-          ? { expiresAt: input.expiresAt }
-          : {}),
+        ...(input.refreshSecret !== undefined ? { refreshSecret: input.refreshSecret } : {}),
+        ...(input.expiresAt !== undefined ? { expiresAt: input.expiresAt } : {}),
         status: "active" as const,
         createdAt: new Date().toISOString(),
         updatedAt: new Date().toISOString(),
@@ -393,14 +381,10 @@ describe("MCP OAuth connect flow", () => {
       // reject the redirect with "Missing state parameter."
       expect(params.get("state")).not.toBeNull();
       expect(params.get("state")).not.toBe("");
-      expect(response.headers.get("set-cookie") ?? "").toContain(
-        "workbench_mcp_oauth_exa=",
-      );
+      expect(response.headers.get("set-cookie") ?? "").toContain("workbench_mcp_oauth_exa=");
       expect(as.registrationBodies).toHaveLength(1);
       const dcrBody = as.registrationBodies[0];
-      expect(
-        dcrBody !== null && typeof dcrBody === "object" && "scope" in dcrBody,
-      ).toBe(false);
+      expect(dcrBody !== null && typeof dcrBody === "object" && "scope" in dcrBody).toBe(false);
     } finally {
       as.stop();
     }
@@ -414,34 +398,27 @@ describe("MCP OAuth connect flow", () => {
     // that host onto the stub AS (and rewrite advertised origins back) so
     // this stays a loopback test while still exercising the no-override
     // path that actually joins `preset.oauthScopes`.
-    globalThis.fetch = Object.assign(
-      async (input: string | URL | Request, init?: RequestInit) => {
-        const href =
-          typeof input === "string"
-            ? input
-            : input instanceof URL
-              ? input.href
-              : input.url;
-        if (!href.startsWith(canvaOrigin)) {
-          return originalFetch(input, init);
-        }
-        const rewritten = href.replace(canvaOrigin, as.origin);
-        const response =
-          input instanceof Request
-            ? await originalFetch(new Request(rewritten, input), init)
-            : await originalFetch(rewritten, init);
-        const contentType = response.headers.get("content-type") ?? "";
-        if (!contentType.includes("json")) {
-          return response;
-        }
-        const body = (await response.text()).replaceAll(as.origin, canvaOrigin);
-        return new Response(body, {
-          status: response.status,
-          headers: response.headers,
-        });
-      },
-      originalFetch,
-    );
+    globalThis.fetch = Object.assign(async (input: string | URL | Request, init?: RequestInit) => {
+      const href =
+        typeof input === "string" ? input : input instanceof URL ? input.href : input.url;
+      if (!href.startsWith(canvaOrigin)) {
+        return originalFetch(input, init);
+      }
+      const rewritten = href.replace(canvaOrigin, as.origin);
+      const response =
+        input instanceof Request
+          ? await originalFetch(new Request(rewritten, input), init)
+          : await originalFetch(rewritten, init);
+      const contentType = response.headers.get("content-type") ?? "";
+      if (!contentType.includes("json")) {
+        return response;
+      }
+      const body = (await response.text()).replaceAll(as.origin, canvaOrigin);
+      return new Response(body, {
+        status: response.status,
+        headers: response.headers,
+      });
+    }, originalFetch);
     try {
       const hub = fakeHub();
       const routes = createMcpOAuthRoutes({
@@ -488,34 +465,27 @@ describe("MCP OAuth connect flow", () => {
     });
     const originalFetch = globalThis.fetch;
     const canvaOrigin = "https://mcp.canva.com";
-    globalThis.fetch = Object.assign(
-      async (input: string | URL | Request, init?: RequestInit) => {
-        const href =
-          typeof input === "string"
-            ? input
-            : input instanceof URL
-              ? input.href
-              : input.url;
-        if (!href.startsWith(canvaOrigin)) {
-          return originalFetch(input, init);
-        }
-        const rewritten = href.replace(canvaOrigin, as.origin);
-        const response =
-          input instanceof Request
-            ? await originalFetch(new Request(rewritten, input), init)
-            : await originalFetch(rewritten, init);
-        const contentType = response.headers.get("content-type") ?? "";
-        if (!contentType.includes("json")) {
-          return response;
-        }
-        const body = (await response.text()).replaceAll(as.origin, canvaOrigin);
-        return new Response(body, {
-          status: response.status,
-          headers: response.headers,
-        });
-      },
-      originalFetch,
-    );
+    globalThis.fetch = Object.assign(async (input: string | URL | Request, init?: RequestInit) => {
+      const href =
+        typeof input === "string" ? input : input instanceof URL ? input.href : input.url;
+      if (!href.startsWith(canvaOrigin)) {
+        return originalFetch(input, init);
+      }
+      const rewritten = href.replace(canvaOrigin, as.origin);
+      const response =
+        input instanceof Request
+          ? await originalFetch(new Request(rewritten, input), init)
+          : await originalFetch(rewritten, init);
+      const contentType = response.headers.get("content-type") ?? "";
+      if (!contentType.includes("json")) {
+        return response;
+      }
+      const body = (await response.text()).replaceAll(as.origin, canvaOrigin);
+      return new Response(body, {
+        status: response.status,
+        headers: response.headers,
+      });
+    }, originalFetch);
     try {
       const hub = fakeHub();
       const routes = createMcpOAuthRoutes({
@@ -555,34 +525,27 @@ describe("MCP OAuth connect flow", () => {
     });
     const originalFetch = globalThis.fetch;
     const canvaOrigin = "https://mcp.canva.com";
-    globalThis.fetch = Object.assign(
-      async (input: string | URL | Request, init?: RequestInit) => {
-        const href =
-          typeof input === "string"
-            ? input
-            : input instanceof URL
-              ? input.href
-              : input.url;
-        if (!href.startsWith(canvaOrigin)) {
-          return originalFetch(input, init);
-        }
-        const rewritten = href.replace(canvaOrigin, as.origin);
-        const response =
-          input instanceof Request
-            ? await originalFetch(new Request(rewritten, input), init)
-            : await originalFetch(rewritten, init);
-        const contentType = response.headers.get("content-type") ?? "";
-        if (!contentType.includes("json")) {
-          return response;
-        }
-        const body = (await response.text()).replaceAll(as.origin, canvaOrigin);
-        return new Response(body, {
-          status: response.status,
-          headers: response.headers,
-        });
-      },
-      originalFetch,
-    );
+    globalThis.fetch = Object.assign(async (input: string | URL | Request, init?: RequestInit) => {
+      const href =
+        typeof input === "string" ? input : input instanceof URL ? input.href : input.url;
+      if (!href.startsWith(canvaOrigin)) {
+        return originalFetch(input, init);
+      }
+      const rewritten = href.replace(canvaOrigin, as.origin);
+      const response =
+        input instanceof Request
+          ? await originalFetch(new Request(rewritten, input), init)
+          : await originalFetch(rewritten, init);
+      const contentType = response.headers.get("content-type") ?? "";
+      if (!contentType.includes("json")) {
+        return response;
+      }
+      const body = (await response.text()).replaceAll(as.origin, canvaOrigin);
+      return new Response(body, {
+        status: response.status,
+        headers: response.headers,
+      });
+    }, originalFetch);
     try {
       const hub = fakeHub();
       const routes = createMcpOAuthRoutes({
@@ -621,34 +584,27 @@ describe("MCP OAuth connect flow", () => {
     });
     const originalFetch = globalThis.fetch;
     const canvaOrigin = "https://mcp.canva.com";
-    globalThis.fetch = Object.assign(
-      async (input: string | URL | Request, init?: RequestInit) => {
-        const href =
-          typeof input === "string"
-            ? input
-            : input instanceof URL
-              ? input.href
-              : input.url;
-        if (!href.startsWith(canvaOrigin)) {
-          return originalFetch(input, init);
-        }
-        const rewritten = href.replace(canvaOrigin, as.origin);
-        const response =
-          input instanceof Request
-            ? await originalFetch(new Request(rewritten, input), init)
-            : await originalFetch(rewritten, init);
-        const contentType = response.headers.get("content-type") ?? "";
-        if (!contentType.includes("json")) {
-          return response;
-        }
-        const body = (await response.text()).replaceAll(as.origin, canvaOrigin);
-        return new Response(body, {
-          status: response.status,
-          headers: response.headers,
-        });
-      },
-      originalFetch,
-    );
+    globalThis.fetch = Object.assign(async (input: string | URL | Request, init?: RequestInit) => {
+      const href =
+        typeof input === "string" ? input : input instanceof URL ? input.href : input.url;
+      if (!href.startsWith(canvaOrigin)) {
+        return originalFetch(input, init);
+      }
+      const rewritten = href.replace(canvaOrigin, as.origin);
+      const response =
+        input instanceof Request
+          ? await originalFetch(new Request(rewritten, input), init)
+          : await originalFetch(rewritten, init);
+      const contentType = response.headers.get("content-type") ?? "";
+      if (!contentType.includes("json")) {
+        return response;
+      }
+      const body = (await response.text()).replaceAll(as.origin, canvaOrigin);
+      return new Response(body, {
+        status: response.status,
+        headers: response.headers,
+      });
+    }, originalFetch);
     try {
       const hub = fakeHub();
       const routes = createMcpOAuthRoutes({
@@ -768,21 +724,18 @@ describe("MCP OAuth connect flow", () => {
       const authorizeResponse = await fetch(authorizeLocation, {
         redirect: "manual",
       });
-      const redirectToCallback =
-        authorizeResponse.headers.get("location") ?? "";
+      const redirectToCallback = authorizeResponse.headers.get("location") ?? "";
       const callbackUrl = new URL(redirectToCallback);
       // A code the stub server never issued: its /token endpoint 400s
       // with invalid_grant, which auth() surfaces as a throw.
       callbackUrl.searchParams.set("code", "code_never_issued");
 
-      const callbackResponse = await app.request(
-        `${callbackUrl.pathname}${callbackUrl.search}`,
-        { headers: { cookie }, redirect: "manual" },
-      );
+      const callbackResponse = await app.request(`${callbackUrl.pathname}${callbackUrl.search}`, {
+        headers: { cookie },
+        redirect: "manual",
+      });
 
-      expect(callbackResponse.headers.get("location") ?? "").toContain(
-        "code=exchange_failed",
-      );
+      expect(callbackResponse.headers.get("location") ?? "").toContain("code=exchange_failed");
       expect(report).toHaveBeenCalledTimes(1);
       expect(report.mock.calls[0]?.[0]).toBeInstanceOf(Error);
       expect(report.mock.calls[0]?.[1]).toMatchObject({
@@ -826,9 +779,7 @@ describe("MCP OAuth connect flow", () => {
 
       const callbackResponse = await runConnectFlow(app, as);
 
-      expect(callbackResponse.headers.get("location") ?? "").toContain(
-        "code=setup_failed",
-      );
+      expect(callbackResponse.headers.get("location") ?? "").toContain("code=setup_failed");
       expect(report).toHaveBeenCalledTimes(1);
       expect(report.mock.calls[0]?.[0]).toBeInstanceOf(Error);
       expect(report.mock.calls[0]?.[1]).toMatchObject({
@@ -836,8 +787,7 @@ describe("MCP OAuth connect flow", () => {
         tenantId: TENANT.id,
         extra: { slug: "exa" },
       });
-      const extra = report.mock.calls[0]?.[1]?.extra as
-        Record<string, unknown> | undefined;
+      const extra = report.mock.calls[0]?.[1]?.extra as Record<string, unknown> | undefined;
       expect(JSON.stringify(extra)).not.toContain("token_for_");
       report.mockRestore();
     } finally {
@@ -870,9 +820,7 @@ describe("MCP OAuth connect flow", () => {
       const callbackResponse = await runConnectFlow(app, as);
       const after = Date.now();
 
-      expect(callbackResponse.headers.get("location") ?? "").toContain(
-        "outcome=connected",
-      );
+      expect(callbackResponse.headers.get("location") ?? "").toContain("outcome=connected");
       expect(hub.credentials).toHaveLength(1);
       const stored = hub.credentials[0];
       expect(stored?.type).toBe("oauth_token");
@@ -906,9 +854,7 @@ describe("MCP OAuth connect flow", () => {
 
       const callbackResponse = await runConnectFlow(app, as);
 
-      expect(callbackResponse.headers.get("location") ?? "").toContain(
-        "outcome=connected",
-      );
+      expect(callbackResponse.headers.get("location") ?? "").toContain("outcome=connected");
       expect(hub.credentials).toHaveLength(1);
       const stored = hub.credentials[0];
       expect(stored?.type).toBe("oauth_token");
@@ -984,9 +930,7 @@ describe("MCP OAuth connect flow", () => {
       const callbackResponse = await runConnectFlow(app, as);
 
       expect(callbackResponse.status).toBe(302);
-      expect(callbackResponse.headers.get("location") ?? "").toContain(
-        "outcome=connected",
-      );
+      expect(callbackResponse.headers.get("location") ?? "").toContain("outcome=connected");
     } finally {
       as.stop();
     }
@@ -1050,22 +994,17 @@ describe("MCP OAuth connect flow", () => {
       );
       const cookieHeader = startResponse.headers.get("set-cookie") ?? "";
       const cookie = cookieHeader.split(";")[0] ?? "";
-      const authorizeResponse = await fetch(
-        startResponse.headers.get("location") ?? "",
-        { redirect: "manual" },
-      );
-      const callbackUrl = new URL(
-        authorizeResponse.headers.get("location") ?? "",
-      );
+      const authorizeResponse = await fetch(startResponse.headers.get("location") ?? "", {
+        redirect: "manual",
+      });
+      const callbackUrl = new URL(authorizeResponse.headers.get("location") ?? "");
       const replayableCallback = `${callbackUrl.pathname}${callbackUrl.search}`;
 
       const firstResponse = await app.request(replayableCallback, {
         headers: { cookie },
         redirect: "manual",
       });
-      expect(firstResponse.headers.get("location") ?? "").toContain(
-        "outcome=connected",
-      );
+      expect(firstResponse.headers.get("location") ?? "").toContain("outcome=connected");
 
       // A browser (or an attacker holding a stolen state cookie)
       // presenting the exact same callback again: the sealed state was
@@ -1076,9 +1015,7 @@ describe("MCP OAuth connect flow", () => {
         redirect: "manual",
       });
       expect(replayResponse.status).toBe(302);
-      expect(replayResponse.headers.get("location") ?? "").toContain(
-        "code=state_expired",
-      );
+      expect(replayResponse.headers.get("location") ?? "").toContain("code=state_expired");
       expect(hub.credentials).toHaveLength(1);
     } finally {
       as.stop();
@@ -1100,9 +1037,7 @@ describe("MCP OAuth connect flow", () => {
       redirect: "manual",
     });
     expect(response.status).toBe(302);
-    expect(response.headers.get("location") ?? "").toContain(
-      "code=state_expired",
-    );
+    expect(response.headers.get("location") ?? "").toContain("code=state_expired");
   });
 });
 
@@ -1131,9 +1066,7 @@ describe("onConnected hook", () => {
 
       const callbackResponse = await runConnectFlow(app, as);
 
-      expect(callbackResponse.headers.get("location") ?? "").toContain(
-        "outcome=connected",
-      );
+      expect(callbackResponse.headers.get("location") ?? "").toContain("outcome=connected");
       expect(events).toHaveLength(1);
       expect(events[0]).toMatchObject({
         tenantId: TENANT.id,
diff --git a/packages/connections/src/mcp-oauth-routes.ts b/packages/connections/src/mcp-oauth-routes.ts
index beb325610e..8bfc23c91b 100644
--- a/packages/connections/src/mcp-oauth-routes.ts
+++ b/packages/connections/src/mcp-oauth-routes.ts
@@ -23,11 +23,7 @@ import type { RequireGrant, TenantEnv } from "@intx/hub-api";
 import type { CredentialCipher } from "@intx/types";
 import { MCP_STREAMABLE_HTTP_PROVIDER_KEY } from "@corbits/credential-providers";
 import { ensureCredential, ensureProvider } from "./seed-catalog";
-import {
-  cookiesFromHeader,
-  createHubAPI,
-  type ApiCall,
-} from "@corbits/hub-api-client";
+import { cookiesFromHeader, createHubAPI, type ApiCall } from "@corbits/hub-api-client";
 import type { OAuthClientInformationMixed } from "@modelcontextprotocol/sdk/shared/auth.js";
 import { createMcpOAuthProvider, type McpOAuthSession } from "./mcp-oauth";
 import { createConnectStateStore, randomToken } from "./pkce";
@@ -35,17 +31,8 @@ import { fireConnectedHook, type ServiceConnectedHook } from "./connected-hook";
 import { mcpPresetBySlug, type McpPreset } from "./mcp-presets";
 import { probeMcpServer, type McpProbeResult } from "./mcp-probe";
 import { reportError } from "@corbits/error-sink";
-import {
-  listMcpProviders,
-  providerName,
-  slugOf,
-  slugify,
-  uniqueSlug,
-} from "./mcp-server-routes";
-import {
-  DEFAULT_RETURN_PATH_ALLOWLIST,
-  sanitizeReturnPath,
-} from "./oauth-routes";
+import { listMcpProviders, providerName, slugOf, slugify, uniqueSlug } from "./mcp-server-routes";
+import { DEFAULT_RETURN_PATH_ALLOWLIST, sanitizeReturnPath } from "./oauth-routes";
 
 const OAUTH_STATE_TTL_MS = 10 * 60 * 1000;
 
@@ -69,9 +56,7 @@ const McpOAuthStatePayload = type({
 });
 type McpOAuthStatePayload = typeof McpOAuthStatePayload.infer;
 
-function parseMcpOAuthStatePayload(
-  value: unknown,
-): McpOAuthStatePayload | undefined {
+function parseMcpOAuthStatePayload(value: unknown): McpOAuthStatePayload | undefined {
   const parsed = McpOAuthStatePayload(value);
   return parsed instanceof type.errors ? undefined : parsed;
 }
@@ -94,9 +79,7 @@ function isRecord(value: unknown): value is Record<string, unknown> {
 function readString(value: unknown, key: string): string | undefined {
   if (!isRecord(value)) return undefined;
   const candidate = value[key];
-  return typeof candidate === "string" && candidate.length > 0
-    ? candidate
-    : undefined;
+  return typeof candidate === "string" && candidate.length > 0 ? candidate : undefined;
 }
 
 /** Classify `/start` `auth()` throws: DCR/client rejection vs unreachable
@@ -110,11 +93,7 @@ function mcpOAuthStartErrorCode(
   cause: unknown,
   capturedCode: string | undefined,
 ): "discovery_failed" | "client_rejected" {
-  for (const code of [
-    capturedCode,
-    readString(cause, "errorCode"),
-    readString(cause, "error"),
-  ]) {
+  for (const code of [capturedCode, readString(cause, "errorCode"), readString(cause, "error")]) {
     if (code !== undefined && CLIENT_REJECTED_OAUTH_CODES.has(code)) {
       return "client_rejected";
     }
@@ -194,8 +173,7 @@ function resolveTarget(
   queryName: string | undefined,
 ): { slug: string; name: string; url: string } | undefined {
   if (queryUrl !== undefined && queryUrl.length > 0) {
-    const name =
-      queryName !== undefined && queryName.length > 0 ? queryName : slugParam;
+    const name = queryName !== undefined && queryName.length > 0 ? queryName : slugParam;
     return { slug: slugParam, name, url: queryUrl };
   }
   const preset = mcpPresetBySlug(presets, slugParam);
@@ -203,15 +181,12 @@ function resolveTarget(
   return { slug: preset.slug, name: preset.displayName, url: preset.url };
 }
 
-export function createMcpOAuthRoutes(
-  deps: CreateMcpOAuthRoutesDeps,
-): Hono<TenantEnv> {
+export function createMcpOAuthRoutes(deps: CreateMcpOAuthRoutesDeps): Hono<TenantEnv> {
   const app = new Hono<TenantEnv>();
   const api = deps.apiCall ?? createHubAPI(deps.hubUrl);
   const probe = deps.probe ?? probeMcpServer;
   const defaultReturnPath = deps.defaultReturnPath ?? "/plugins";
-  const returnPathAllowlist =
-    deps.returnPathAllowlist ?? DEFAULT_RETURN_PATH_ALLOWLIST;
+  const returnPathAllowlist = deps.returnPathAllowlist ?? DEFAULT_RETURN_PATH_ALLOWLIST;
   const secureCookies = deps.hubUrl.startsWith("https:");
   const stateStore = createConnectStateStore({
     cipher: deps.credentialCipher,
@@ -220,408 +195,366 @@ export function createMcpOAuthRoutes(
     ttlMs: OAUTH_STATE_TTL_MS,
   });
 
-  function redirectPath(
-    returnPath: string,
-    params: Record<string, string>,
-  ): string {
+  function redirectPath(returnPath: string, params: Record<string, string>): string {
     const query = new URLSearchParams(params);
     return `${returnPath}?${query.toString()}`;
   }
 
-  app.get(
-    "/:slug/start",
-    deps.requireGrant("credential:*", "create"),
-    async (c) => {
-      const slugParam = c.req.param("slug");
-      const target = resolveTarget(
-        deps.presets,
-        slugParam,
-        c.req.query("url"),
-        c.req.query("name"),
+  app.get("/:slug/start", deps.requireGrant("credential:*", "create"), async (c) => {
+    const slugParam = c.req.param("slug");
+    const target = resolveTarget(deps.presets, slugParam, c.req.query("url"), c.req.query("name"));
+    const returnPath = sanitizeReturnPath(
+      c.req.query("return"),
+      defaultReturnPath,
+      returnPathAllowlist,
+    );
+    if (target === undefined) {
+      return c.redirect(
+        redirectPath(returnPath, {
+          mcpOauth: slugParam,
+          outcome: "error",
+          code: "not_found",
+        }),
+        302,
       );
-      const returnPath = sanitizeReturnPath(
-        c.req.query("return"),
-        defaultReturnPath,
-        returnPathAllowlist,
+    }
+    const queryUrl = c.req.query("url");
+    const preset =
+      queryUrl === undefined || queryUrl.length === 0
+        ? mcpPresetBySlug(deps.presets, slugParam)
+        : undefined;
+    if (preset !== undefined && preset.connectionMode !== "oauth") {
+      // A keyless or token preset has no OAuth dance to start — refuse
+      // here rather than failing mid-dance at the provider (GitHub's
+      // MCP server, for one, offers no dynamic client registration).
+      return c.redirect(
+        redirectPath(returnPath, {
+          mcpOauth: preset.slug,
+          outcome: "error",
+          code: "bad_request",
+        }),
+        302,
       );
-      if (target === undefined) {
-        return c.redirect(
-          redirectPath(returnPath, {
-            mcpOauth: slugParam,
-            outcome: "error",
-            code: "not_found",
-          }),
-          302,
-        );
-      }
-      const queryUrl = c.req.query("url");
-      const preset =
-        queryUrl === undefined || queryUrl.length === 0
-          ? mcpPresetBySlug(deps.presets, slugParam)
-          : undefined;
-      if (preset !== undefined && preset.connectionMode !== "oauth") {
-        // A keyless or token preset has no OAuth dance to start — refuse
-        // here rather than failing mid-dance at the provider (GitHub's
-        // MCP server, for one, offers no dynamic client registration).
-        return c.redirect(
-          redirectPath(returnPath, {
-            mcpOauth: preset.slug,
-            outcome: "error",
-            code: "bad_request",
-          }),
-          302,
-        );
-      }
-
-      const principal = c.get("principal");
-      const callbackUrl = new URL(
-        c.req.path.replace(/\/start$/, "/callback"),
-        deps.hubUrl,
-      ).toString();
-      // Minted before `auth()` runs, not after: `auth()` reads it via
-      // `provider.state()` while building the authorize URL, so it must
-      // already be on the session by the time `redirectToAuthorization`
-      // fires. The same value is what `/callback` requires the provider's
-      // `?state=` to match.
-      const nonce = randomToken();
-      const session: McpOAuthSession = { state: nonce };
-      const provider = createMcpOAuthProvider({
-        callbackUrl,
-        clientName: "Corbits Workbench",
-        session,
-        ...(preset?.oauthScopes === undefined
-          ? {}
-          : { scope: preset.oauthScopes.join(" ") }),
-      });
+    }
 
-      let result: Awaited<ReturnType<typeof auth>>;
-      const capturedOAuthError: { code: string | undefined } = {
-        code: undefined,
-      };
-      try {
-        result = await auth(provider, {
-          serverUrl: target.url,
-          fetchFn: (url, init) =>
-            fetchCapturingOAuthError(capturedOAuthError, url, init),
-        });
-      } catch (cause) {
-        const message = cause instanceof Error ? cause.message : String(cause);
-        deps.log(`mcp oauth start failed for "${target.slug}": ${message}`);
-        reportError(cause, {
-          operation: "mcp_oauth_start",
-          tenantId: c.get("tenant").id,
-          extra: { slug: target.slug },
-        });
-        return c.redirect(
-          redirectPath(returnPath, {
-            mcpOauth: target.slug,
-            outcome: "error",
-            code: mcpOAuthStartErrorCode(cause, capturedOAuthError.code),
-          }),
-          302,
-        );
-      }
-      const authorizationUrl = (
-        provider as unknown as { capturedAuthorizationUrl?: URL }
-      ).capturedAuthorizationUrl;
-      if (result !== "REDIRECT" || authorizationUrl === undefined) {
-        return c.redirect(
-          redirectPath(returnPath, {
-            mcpOauth: target.slug,
-            outcome: "error",
-            code: "no_authorization_needed",
-          }),
-          302,
-        );
-      }
+    const principal = c.get("principal");
+    const callbackUrl = new URL(
+      c.req.path.replace(/\/start$/, "/callback"),
+      deps.hubUrl,
+    ).toString();
+    // Minted before `auth()` runs, not after: `auth()` reads it via
+    // `provider.state()` while building the authorize URL, so it must
+    // already be on the session by the time `redirectToAuthorization`
+    // fires. The same value is what `/callback` requires the provider's
+    // `?state=` to match.
+    const nonce = randomToken();
+    const session: McpOAuthSession = { state: nonce };
+    const provider = createMcpOAuthProvider({
+      callbackUrl,
+      clientName: "Corbits Workbench",
+      session,
+      ...(preset?.oauthScopes === undefined ? {} : { scope: preset.oauthScopes.join(" ") }),
+    });
 
-      const payload: McpOAuthStatePayload = {
-        slug: target.slug,
-        name: target.name,
-        url: target.url,
-        returnPath,
-        oauthState: nonce,
-        ...(session.codeVerifier !== undefined
-          ? { codeVerifier: session.codeVerifier }
-          : {}),
-        ...(session.clientInformation !== undefined
-          ? { clientInformation: session.clientInformation }
-          : {}),
-      };
-      const sealed = await stateStore.issue({
-        userId: principal.id,
-        payload,
+    let result: Awaited<ReturnType<typeof auth>>;
+    const capturedOAuthError: { code: string | undefined } = {
+      code: undefined,
+    };
+    try {
+      result = await auth(provider, {
+        serverUrl: target.url,
+        fetchFn: (url, init) => fetchCapturingOAuthError(capturedOAuthError, url, init),
       });
-      setCookie(c, cookieName(target.slug), sealed, {
-        httpOnly: true,
-        sameSite: "Lax",
-        secure: secureCookies,
-        path: "/",
-        maxAge: 600,
+    } catch (cause) {
+      const message = cause instanceof Error ? cause.message : String(cause);
+      deps.log(`mcp oauth start failed for "${target.slug}": ${message}`);
+      reportError(cause, {
+        operation: "mcp_oauth_start",
+        tenantId: c.get("tenant").id,
+        extra: { slug: target.slug },
       });
-      return c.redirect(authorizationUrl.toString(), 302);
-    },
-  );
+      return c.redirect(
+        redirectPath(returnPath, {
+          mcpOauth: target.slug,
+          outcome: "error",
+          code: mcpOAuthStartErrorCode(cause, capturedOAuthError.code),
+        }),
+        302,
+      );
+    }
+    const authorizationUrl = (provider as unknown as { capturedAuthorizationUrl?: URL })
+      .capturedAuthorizationUrl;
+    if (result !== "REDIRECT" || authorizationUrl === undefined) {
+      return c.redirect(
+        redirectPath(returnPath, {
+          mcpOauth: target.slug,
+          outcome: "error",
+          code: "no_authorization_needed",
+        }),
+        302,
+      );
+    }
 
-  app.get(
-    "/:slug/callback",
-    deps.requireGrant("credential:*", "create"),
-    async (c) => {
-      const slugParam = c.req.param("slug");
-      const sealed = getCookie(c, cookieName(slugParam));
-      deleteCookie(c, cookieName(slugParam), { path: "/" });
+    const payload: McpOAuthStatePayload = {
+      slug: target.slug,
+      name: target.name,
+      url: target.url,
+      returnPath,
+      oauthState: nonce,
+      ...(session.codeVerifier !== undefined ? { codeVerifier: session.codeVerifier } : {}),
+      ...(session.clientInformation !== undefined
+        ? { clientInformation: session.clientInformation }
+        : {}),
+    };
+    const sealed = await stateStore.issue({
+      userId: principal.id,
+      payload,
+    });
+    setCookie(c, cookieName(target.slug), sealed, {
+      httpOnly: true,
+      sameSite: "Lax",
+      secure: secureCookies,
+      path: "/",
+      maxAge: 600,
+    });
+    return c.redirect(authorizationUrl.toString(), 302);
+  });
 
-      const fallbackReturn = sanitizeReturnPath(
-        undefined,
-        defaultReturnPath,
-        returnPathAllowlist,
+  app.get("/:slug/callback", deps.requireGrant("credential:*", "create"), async (c) => {
+    const slugParam = c.req.param("slug");
+    const sealed = getCookie(c, cookieName(slugParam));
+    deleteCookie(c, cookieName(slugParam), { path: "/" });
+
+    const fallbackReturn = sanitizeReturnPath(undefined, defaultReturnPath, returnPathAllowlist);
+    if (sealed === undefined) {
+      return c.redirect(
+        redirectPath(fallbackReturn, {
+          mcpOauth: slugParam,
+          outcome: "error",
+          code: "state_expired",
+        }),
+        302,
       );
-      if (sealed === undefined) {
-        return c.redirect(
-          redirectPath(fallbackReturn, {
-            mcpOauth: slugParam,
-            outcome: "error",
-            code: "state_expired",
-          }),
-          302,
-        );
-      }
+    }
 
-      // One-shot: the shared store burns the sealed state on this
-      // attempt (decrypt + AAD + TTL + user binding + replay guard all
-      // inside `consume`), so a replayed callback dies here without a
-      // second token exchange.
-      const principal = c.get("principal");
-      const payload = await stateStore.consume({
-        state: sealed,
-        userId: principal.id,
-      });
-      if (payload === undefined) {
-        return c.redirect(
-          redirectPath(fallbackReturn, {
-            mcpOauth: slugParam,
-            outcome: "error",
-            code: "state_expired",
-          }),
-          302,
-        );
-      }
+    // One-shot: the shared store burns the sealed state on this
+    // attempt (decrypt + AAD + TTL + user binding + replay guard all
+    // inside `consume`), so a replayed callback dies here without a
+    // second token exchange.
+    const principal = c.get("principal");
+    const payload = await stateStore.consume({
+      state: sealed,
+      userId: principal.id,
+    });
+    if (payload === undefined) {
+      return c.redirect(
+        redirectPath(fallbackReturn, {
+          mcpOauth: slugParam,
+          outcome: "error",
+          code: "state_expired",
+        }),
+        302,
+      );
+    }
+
+    const returnPath = sanitizeReturnPath(
+      payload.returnPath,
+      defaultReturnPath,
+      returnPathAllowlist,
+    );
+    const code = c.req.query("code");
+    if (code === undefined || code === "") {
+      return c.redirect(
+        redirectPath(returnPath, {
+          mcpOauth: payload.slug,
+          outcome: "error",
+          code: "state_expired",
+        }),
+        302,
+      );
+    }
 
-      const returnPath = sanitizeReturnPath(
-        payload.returnPath,
-        defaultReturnPath,
-        returnPathAllowlist,
+    // CSRF check: `/start` always sends `state=<nonce>` on the
+    // authorize URL (see `mcp-oauth.ts`'s `state()`), so the provider
+    // must echo that exact value back -- never optional-when-absent.
+    // A missing or mismatched `state` means this callback did not
+    // originate from the authorize redirect this session minted.
+    if (c.req.query("state") !== payload.oauthState) {
+      return c.redirect(
+        redirectPath(returnPath, {
+          mcpOauth: payload.slug,
+          outcome: "error",
+          code: "state_mismatch",
+        }),
+        302,
       );
-      const code = c.req.query("code");
-      if (code === undefined || code === "") {
-        return c.redirect(
-          redirectPath(returnPath, {
-            mcpOauth: payload.slug,
-            outcome: "error",
-            code: "state_expired",
-          }),
-          302,
-        );
-      }
+    }
 
-      // CSRF check: `/start` always sends `state=<nonce>` on the
-      // authorize URL (see `mcp-oauth.ts`'s `state()`), so the provider
-      // must echo that exact value back -- never optional-when-absent.
-      // A missing or mismatched `state` means this callback did not
-      // originate from the authorize redirect this session minted.
-      if (c.req.query("state") !== payload.oauthState) {
-        return c.redirect(
-          redirectPath(returnPath, {
-            mcpOauth: payload.slug,
-            outcome: "error",
-            code: "state_mismatch",
-          }),
-          302,
-        );
-      }
+    const callbackUrl = new URL(c.req.path, deps.hubUrl).toString();
+    const session: McpOAuthSession = {
+      ...(payload.codeVerifier !== undefined ? { codeVerifier: payload.codeVerifier } : {}),
+      ...(payload.clientInformation !== undefined
+        ? {
+            clientInformation: payload.clientInformation as OAuthClientInformationMixed,
+          }
+        : {}),
+    };
+    const callbackPreset = mcpPresetBySlug(deps.presets, payload.slug);
+    const provider = createMcpOAuthProvider({
+      callbackUrl,
+      clientName: "Corbits Workbench",
+      session,
+      ...(callbackPreset?.oauthScopes === undefined
+        ? {}
+        : { scope: callbackPreset.oauthScopes.join(" ") }),
+    });
 
-      const callbackUrl = new URL(c.req.path, deps.hubUrl).toString();
-      const session: McpOAuthSession = {
-        ...(payload.codeVerifier !== undefined
-          ? { codeVerifier: payload.codeVerifier }
-          : {}),
-        ...(payload.clientInformation !== undefined
-          ? {
-              clientInformation:
-                payload.clientInformation as OAuthClientInformationMixed,
-            }
-          : {}),
-      };
-      const callbackPreset = mcpPresetBySlug(deps.presets, payload.slug);
-      const provider = createMcpOAuthProvider({
-        callbackUrl,
-        clientName: "Corbits Workbench",
-        session,
-        ...(callbackPreset?.oauthScopes === undefined
-          ? {}
-          : { scope: callbackPreset.oauthScopes.join(" ") }),
+    let result: Awaited<ReturnType<typeof auth>>;
+    try {
+      result = await auth(provider, {
+        serverUrl: payload.url,
+        authorizationCode: code,
       });
+    } catch (cause) {
+      const message = cause instanceof Error ? cause.message : String(cause);
+      deps.log(`mcp oauth token exchange failed for "${payload.slug}": ${message}`);
+      // Never widen extra beyond identifiers safe to print — the
+      // authorization `code` and any codeVerifier are in scope above.
+      reportError(cause, {
+        operation: "mcp_oauth_token_exchange",
+        tenantId: c.get("tenant").id,
+        extra: { slug: payload.slug },
+      });
+      return c.redirect(
+        redirectPath(returnPath, {
+          mcpOauth: payload.slug,
+          outcome: "error",
+          code: "exchange_failed",
+        }),
+        302,
+      );
+    }
+    if (result !== "AUTHORIZED" || session.tokens === undefined) {
+      return c.redirect(
+        redirectPath(returnPath, {
+          mcpOauth: payload.slug,
+          outcome: "error",
+          code: "exchange_failed",
+        }),
+        302,
+      );
+    }
 
-      let result: Awaited<ReturnType<typeof auth>>;
-      try {
-        result = await auth(provider, {
-          serverUrl: payload.url,
-          authorizationCode: code,
-        });
-      } catch (cause) {
-        const message = cause instanceof Error ? cause.message : String(cause);
-        deps.log(
-          `mcp oauth token exchange failed for "${payload.slug}": ${message}`,
-        );
-        // Never widen extra beyond identifiers safe to print — the
-        // authorization `code` and any codeVerifier are in scope above.
-        reportError(cause, {
-          operation: "mcp_oauth_token_exchange",
-          tenantId: c.get("tenant").id,
-          extra: { slug: payload.slug },
-        });
-        return c.redirect(
-          redirectPath(returnPath, {
-            mcpOauth: payload.slug,
-            outcome: "error",
-            code: "exchange_failed",
-          }),
-          302,
-        );
-      }
-      if (result !== "AUTHORIZED" || session.tokens === undefined) {
-        return c.redirect(
-          redirectPath(returnPath, {
-            mcpOauth: payload.slug,
-            outcome: "error",
-            code: "exchange_failed",
-          }),
-          302,
-        );
-      }
-
-      const accessToken = session.tokens.access_token;
-      const test: McpProbeResult = await probe(payload.url, accessToken);
-      if (!test.ok) {
-        deps.log(
-          `mcp oauth connect for "${payload.slug}" exchanged a token but the post-auth probe failed: ${test.message}`,
-        );
-        return c.redirect(
-          redirectPath(returnPath, {
-            mcpOauth: payload.slug,
-            outcome: "error",
-            code: "connect_failed",
-          }),
-          302,
-        );
-      }
+    const accessToken = session.tokens.access_token;
+    const test: McpProbeResult = await probe(payload.url, accessToken);
+    if (!test.ok) {
+      deps.log(
+        `mcp oauth connect for "${payload.slug}" exchanged a token but the post-auth probe failed: ${test.message}`,
+      );
+      return c.redirect(
+        redirectPath(returnPath, {
+          mcpOauth: payload.slug,
+          outcome: "error",
+          code: "connect_failed",
+        }),
+        302,
+      );
+    }
 
-      const tenant = c.get("tenant");
-      const cookies = cookiesFromHeader(c.req.header("cookie"));
-      try {
-        const existingProviders = await listMcpProviders(
-          api,
-          cookies,
-          tenant.id,
-        );
-        const takenSlugs = new Set(
-          existingProviders.map((p) => slugOf(p.name)),
-        );
-        const slug = takenSlugs.has(payload.slug)
-          ? payload.slug
-          : uniqueSlug(slugify(payload.name), takenSlugs);
-        // The FULL endpoint URL, matching the API-key connect path — the
-        // origin alone drops paths like `/mcp` and every downstream call
-        // dies at the CDN ("supports only cachable requests").
-        const providerId = await ensureProvider(
-          api,
-          cookies,
-          {
-            tenantId: tenant.id,
-            name: providerName(slug),
-            plugin: MCP_STREAMABLE_HTTP_PROVIDER_KEY,
-            apiBaseUrl: payload.url,
-          },
-          deps.log,
-        );
-        // Stored as `oauth_token` (CL-6207), not `api_key` — an MCP server
-        // that issued a refresh token gets one that actually refreshes at
-        // expiry instead of dying; one that didn't (mirroring the
-        // documented Hugging Face precedent) stores no refreshSecret/
-        // expiresAt at all, never a coerced empty value.
-        const { refresh_token: refreshToken, expires_in: expiresIn } =
-          session.tokens;
-        await ensureCredential(
-          api,
-          cookies,
-          {
-            tenantId: tenant.id,
-            providerId,
+    const tenant = c.get("tenant");
+    const cookies = cookiesFromHeader(c.req.header("cookie"));
+    try {
+      const existingProviders = await listMcpProviders(api, cookies, tenant.id);
+      const takenSlugs = new Set(existingProviders.map((p) => slugOf(p.name)));
+      const slug = takenSlugs.has(payload.slug)
+        ? payload.slug
+        : uniqueSlug(slugify(payload.name), takenSlugs);
+      // The FULL endpoint URL, matching the API-key connect path — the
+      // origin alone drops paths like `/mcp` and every downstream call
+      // dies at the CDN ("supports only cachable requests").
+      const providerId = await ensureProvider(
+        api,
+        cookies,
+        {
+          tenantId: tenant.id,
+          name: providerName(slug),
+          plugin: MCP_STREAMABLE_HTTP_PROVIDER_KEY,
+          apiBaseUrl: payload.url,
+        },
+        deps.log,
+      );
+      // Stored as `oauth_token` (CL-6207), not `api_key` — an MCP server
+      // that issued a refresh token gets one that actually refreshes at
+      // expiry instead of dying; one that didn't (mirroring the
+      // documented Hugging Face precedent) stores no refreshSecret/
+      // expiresAt at all, never a coerced empty value.
+      const { refresh_token: refreshToken, expires_in: expiresIn } = session.tokens;
+      await ensureCredential(
+        api,
+        cookies,
+        {
+          tenantId: tenant.id,
+          providerId,
+          name: payload.name,
+          secret: accessToken,
+          type: "oauth_token",
+          ...(refreshToken !== undefined ? { refreshSecret: refreshToken } : {}),
+          ...(expiresIn !== undefined
+            ? {
+                expiresAt: new Date(Date.now() + expiresIn * 1000).toISOString(),
+              }
+            : {}),
+          // `clientInformation` (when DCR minted one) lets a later
+          // refresh reuse the same registered client instead of the
+          // authorization server seeing a fresh dynamic registration
+          // every sweep tick.
+          metadata: {
+            url: payload.url,
             name: payload.name,
-            secret: accessToken,
-            type: "oauth_token",
-            ...(refreshToken !== undefined
-              ? { refreshSecret: refreshToken }
-              : {}),
-            ...(expiresIn !== undefined
-              ? {
-                  expiresAt: new Date(
-                    Date.now() + expiresIn * 1000,
-                  ).toISOString(),
-                }
+            ...(session.clientInformation !== undefined
+              ? { clientInformation: session.clientInformation }
               : {}),
-            // `clientInformation` (when DCR minted one) lets a later
-            // refresh reuse the same registered client instead of the
-            // authorization server seeing a fresh dynamic registration
-            // every sweep tick.
-            metadata: {
-              url: payload.url,
-              name: payload.name,
-              ...(session.clientInformation !== undefined
-                ? { clientInformation: session.clientInformation }
-                : {}),
-            },
-            verified: true,
           },
-          deps.log,
-        );
-        await fireConnectedHook(deps.onConnected, deps.log, {
-          tenantId: tenant.id,
-          principalId: principal.id,
-          connectorId: slug,
-          displayName: payload.name,
-        });
-        return c.redirect(
-          redirectPath(returnPath, {
-            mcpOauth: slug,
-            outcome: "connected",
-            toolCount: String(test.toolCount),
-          }),
-          302,
-        );
-      } catch (cause) {
-        const message = cause instanceof Error ? cause.message : String(cause);
-        deps.log(
-          `mcp oauth connect setup failed for tenant ${tenant.id}, slug ${payload.slug}: ${message}`,
-        );
-        // Never widen extra beyond identifiers safe to print — the
-        // exchanged access/refresh tokens are in scope above.
-        reportError(cause, {
-          operation: "persist_mcp_oauth_connection",
-          tenantId: tenant.id,
-          extra: { slug: payload.slug },
-        });
-        return c.redirect(
-          redirectPath(returnPath, {
-            mcpOauth: payload.slug,
-            outcome: "error",
-            code: "setup_failed",
-          }),
-          302,
-        );
-      }
-    },
-  );
+          verified: true,
+        },
+        deps.log,
+      );
+      await fireConnectedHook(deps.onConnected, deps.log, {
+        tenantId: tenant.id,
+        principalId: principal.id,
+        connectorId: slug,
+        displayName: payload.name,
+      });
+      return c.redirect(
+        redirectPath(returnPath, {
+          mcpOauth: slug,
+          outcome: "connected",
+          toolCount: String(test.toolCount),
+        }),
+        302,
+      );
+    } catch (cause) {
+      const message = cause instanceof Error ? cause.message : String(cause);
+      deps.log(
+        `mcp oauth connect setup failed for tenant ${tenant.id}, slug ${payload.slug}: ${message}`,
+      );
+      // Never widen extra beyond identifiers safe to print — the
+      // exchanged access/refresh tokens are in scope above.
+      reportError(cause, {
+        operation: "persist_mcp_oauth_connection",
+        tenantId: tenant.id,
+        extra: { slug: payload.slug },
+      });
+      return c.redirect(
+        redirectPath(returnPath, {
+          mcpOauth: payload.slug,
+          outcome: "error",
+          code: "setup_failed",
+        }),
+        302,
+      );
+    }
+  });
 
   return app;
 }
diff --git a/packages/connections/src/mcp-oauth.ts b/packages/connections/src/mcp-oauth.ts
index 7d6ef70456..2320c46e00 100644
--- a/packages/connections/src/mcp-oauth.ts
+++ b/packages/connections/src/mcp-oauth.ts
@@ -15,10 +15,7 @@
 // `./pkce.ts`'s `createConnectStateStore` already uses for the fixed-
 // registry OAuth connectors, so a state minted moments before a hub
 // restart survives it exactly like `./oauth-routes.ts`'s flows do.
-import {
-  auth,
-  type OAuthClientProvider,
-} from "@modelcontextprotocol/sdk/client/auth.js";
+import { auth, type OAuthClientProvider } from "@modelcontextprotocol/sdk/client/auth.js";
 import type {
   OAuthClientInformationMixed,
   OAuthClientMetadata,
@@ -97,9 +94,7 @@ export function createMcpOAuthProvider(args: {
     },
     codeVerifier(): string {
       if (session.codeVerifier === undefined) {
-        throw new Error(
-          "No PKCE code verifier saved for this MCP OAuth session",
-        );
+        throw new Error("No PKCE code verifier saved for this MCP OAuth session");
       }
       return session.codeVerifier;
     },
@@ -136,9 +131,7 @@ export async function refreshMcpOAuthTokens(args: {
 }): Promise<McpOAuthRefreshResult> {
   const session: McpOAuthSession = {
     tokens: args.tokens,
-    ...(args.clientInformation !== undefined
-      ? { clientInformation: args.clientInformation }
-      : {}),
+    ...(args.clientInformation !== undefined ? { clientInformation: args.clientInformation } : {}),
   };
   const provider = createMcpOAuthProvider({
     callbackUrl: args.callbackUrl,
diff --git a/packages/connections/src/mcp-presets.ts b/packages/connections/src/mcp-presets.ts
index f4cb0a5cb8..8367327b10 100644
--- a/packages/connections/src/mcp-presets.ts
+++ b/packages/connections/src/mcp-presets.ts
@@ -2,13 +2,7 @@
 // preset list, and Workbench's curated remote MCP servers — folded back in
 // here by CL-8156 from `templates/connectors.ts` (CL-7384 had split them
 // out) now that `@workbench/templates` no longer exists to own them.
-import {
-  siGithub,
-  siNotion,
-  siPosthog,
-  siRailway,
-  siSentry,
-} from "simple-icons";
+import { siGithub, siNotion, siPosthog, siRailway, siSentry } from "simple-icons";
 
 export type McpPresetConnectionMode = "oauth" | "keyless" | "token";
 
@@ -31,9 +25,7 @@ export type McpPreset = {
   readonly oauthScopes?: readonly string[];
 };
 
-export function mcpPresetConnectorIds(
-  presets: readonly McpPreset[],
-): readonly string[] {
+export function mcpPresetConnectorIds(presets: readonly McpPreset[]): readonly string[] {
   return presets.flatMap((preset) =>
     preset.nativeConnectorId === undefined ? [] : [preset.nativeConnectorId],
   );
@@ -52,8 +44,7 @@ export function mcpPresetByName(
 ): McpPreset | undefined {
   const needle = name.trim().toLowerCase();
   return presets.find(
-    (preset) =>
-      preset.slug === needle || preset.displayName.toLowerCase() === needle,
+    (preset) => preset.slug === needle || preset.displayName.toLowerCase() === needle,
   );
 }
 
@@ -195,5 +186,4 @@ export const MCP_PRESETS: readonly McpPreset[] = [
   },
 ];
 
-export const MCP_PRESET_CONNECTOR_IDS: readonly string[] =
-  mcpPresetConnectorIds(MCP_PRESETS);
+export const MCP_PRESET_CONNECTOR_IDS: readonly string[] = mcpPresetConnectorIds(MCP_PRESETS);
diff --git a/packages/connections/src/mcp-probe.ts b/packages/connections/src/mcp-probe.ts
index 32a24fce29..3ff92f9a9c 100644
--- a/packages/connections/src/mcp-probe.ts
+++ b/packages/connections/src/mcp-probe.ts
@@ -69,8 +69,7 @@ function probeFetch(url: string, token: string | undefined): typeof fetch {
   const pinnedOrigin = new URL(url).origin;
   return mcpOriginPinnedFetch({
     pinnedOrigin,
-    readToken: () =>
-      token === undefined || token.length === 0 ? undefined : token,
+    readToken: () => (token === undefined || token.length === 0 ? undefined : token),
   }) as typeof fetch;
 }
 
@@ -98,9 +97,8 @@ export async function probeMcpServer(
   }
 
   try {
-    const tools = await withMcpConnection(
-      { url, fetchImpl: probeFetch(url, token) },
-      (client) => listMcpTools(client),
+    const tools = await withMcpConnection({ url, fetchImpl: probeFetch(url, token) }, (client) =>
+      listMcpTools(client),
     );
     return { ok: true, toolCount: tools.length };
   } catch (cause) {
@@ -117,8 +115,7 @@ export async function probeMcpServer(
       if (discovered !== undefined) {
         return {
           ok: false,
-          message:
-            "This MCP server requires signing in via OAuth before it can be connected.",
+          message: "This MCP server requires signing in via OAuth before it can be connected.",
           requiresOAuth: true,
           authorizationServerUrl: discovered.authorizationServerUrl,
         };
diff --git a/packages/connections/src/mcp-server-routes.test.ts b/packages/connections/src/mcp-server-routes.test.ts
index 68c32e79a7..0469013aeb 100644
--- a/packages/connections/src/mcp-server-routes.test.ts
+++ b/packages/connections/src/mcp-server-routes.test.ts
@@ -154,9 +154,7 @@ function fakeHub(seed: {
         tenantId: TENANT.id,
         name: input.name,
         plugin: input.plugin,
-        ...(input.apiBaseUrl !== undefined
-          ? { apiBaseUrl: input.apiBaseUrl }
-          : {}),
+        ...(input.apiBaseUrl !== undefined ? { apiBaseUrl: input.apiBaseUrl } : {}),
         createdAt: new Date().toISOString(),
         updatedAt: new Date().toISOString(),
       };
@@ -227,9 +225,7 @@ function buildApp(opts: {
     presets: TEST_PRESETS,
     apiCall: opts.apiCall,
     probe: opts.probe ?? (async () => ({ ok: true, toolCount: 3 })),
-    ...(opts.onConnected !== undefined
-      ? { onConnected: opts.onConnected }
-      : {}),
+    ...(opts.onConnected !== undefined ? { onConnected: opts.onConnected } : {}),
   });
   return mountAs(routes);
 }
@@ -324,8 +320,7 @@ describe("POST /", () => {
       operation: "persist_mcp_server_connection",
       tenantId: TENANT.id,
     });
-    const extra = report.mock.calls[0]?.[1]?.extra as
-      Record<string, unknown> | undefined;
+    const extra = report.mock.calls[0]?.[1]?.extra as Record<string, unknown> | undefined;
     expect(JSON.stringify(extra)).not.toContain("secret-token");
     report.mockRestore();
   });
diff --git a/packages/connections/src/mcp-server-routes.ts b/packages/connections/src/mcp-server-routes.ts
index a6888b1e88..56b30e37b9 100644
--- a/packages/connections/src/mcp-server-routes.ts
+++ b/packages/connections/src/mcp-server-routes.ts
@@ -15,18 +15,9 @@
 import { Hono, type Context } from "hono";
 import { type } from "arktype";
 import type { RequireGrant, TenantEnv } from "@intx/hub-api";
-import {
-  CredentialResponse,
-  ProviderResponse,
-  paginatedSchema,
-} from "@intx/types";
+import { CredentialResponse, ProviderResponse, paginatedSchema } from "@intx/types";
 import { ensureCredential, ensureProvider } from "./seed-catalog";
-import {
-  cookiesFromHeader,
-  createHubAPI,
-  parseAs,
-  type ApiCall,
-} from "@corbits/hub-api-client";
+import { cookiesFromHeader, createHubAPI, parseAs, type ApiCall } from "@corbits/hub-api-client";
 import {
   MCP_NO_TOKEN_SENTINEL,
   MCP_STREAMABLE_HTTP_PROVIDER_KEY,
@@ -136,23 +127,11 @@ export async function listMcpCredentials(
   cookies: string[],
   tenantId: string,
 ): Promise<readonly CredentialRow[]> {
-  const listed = await api(
-    "GET",
-    `/api/tenants/${tenantId}/credentials`,
-    undefined,
-    cookies,
-  );
-  return parseAs(
-    paginatedSchema(CredentialResponse),
-    listed.data,
-    "credentials response",
-  ).data;
+  const listed = await api("GET", `/api/tenants/${tenantId}/credentials`, undefined, cookies);
+  return parseAs(paginatedSchema(CredentialResponse), listed.data, "credentials response").data;
 }
 
-export function uniqueSlug(
-  desired: string,
-  taken: ReadonlySet<string>,
-): string {
+export function uniqueSlug(desired: string, taken: ReadonlySet<string>): string {
   if (!taken.has(desired)) return desired;
   for (let suffix = 2; suffix < 1000; suffix += 1) {
     const candidate = `${desired}-${suffix}`;
@@ -161,9 +140,7 @@ export function uniqueSlug(
   throw new Error(`could not derive a unique slug from "${desired}"`);
 }
 
-export function createMcpServerRoutes(
-  deps: CreateMcpServerRoutesDeps,
-): Hono<TenantEnv> {
+export function createMcpServerRoutes(deps: CreateMcpServerRoutesDeps): Hono<TenantEnv> {
   const app = new Hono<TenantEnv>();
   const api = deps.apiCall ?? createHubAPI(deps.hubUrl);
   const probe = deps.probe ?? probeMcpServer;
@@ -175,9 +152,7 @@ export function createMcpServerRoutes(
       listMcpProviders(api, cookies, tenant.id),
       listMcpCredentials(api, cookies, tenant.id),
     ]);
-    const credentialByProviderId = new Map(
-      credentials.map((cred) => [cred.providerId, cred]),
-    );
+    const credentialByProviderId = new Map(credentials.map((cred) => [cred.providerId, cred]));
     const servers: McpServerSummary[] = providers.map((provider) => ({
       slug: slugOf(provider.name),
       name: credentialByProviderId.get(provider.id)?.name ?? provider.name,
@@ -193,18 +168,12 @@ export function createMcpServerRoutes(
       listMcpProviders(api, cookies, tenant.id),
       listMcpCredentials(api, cookies, tenant.id),
     ]);
-    const credentialByProviderId = new Map(
-      credentials.map((cred) => [cred.providerId, cred]),
-    );
-    const providerBySlug = new Map(
-      providers.map((provider) => [slugOf(provider.name), provider]),
-    );
+    const credentialByProviderId = new Map(credentials.map((cred) => [cred.providerId, cred]));
+    const providerBySlug = new Map(providers.map((provider) => [slugOf(provider.name), provider]));
     const presets = deps.presets.map((preset) => {
       const provider = providerBySlug.get(preset.slug);
       const credential =
-        provider === undefined
-          ? undefined
-          : credentialByProviderId.get(provider.id);
+        provider === undefined ? undefined : credentialByProviderId.get(provider.id);
       return {
         slug: preset.slug,
         displayName: preset.displayName,
@@ -213,9 +182,7 @@ export function createMcpServerRoutes(
         connectionMode: preset.connectionMode,
         docsUrl: preset.docsUrl,
         ...(preset.icon === undefined ? {} : { icon: preset.icon }),
-        ...(preset.tokenSteps === undefined
-          ? {}
-          : { tokenSteps: preset.tokenSteps }),
+        ...(preset.tokenSteps === undefined ? {} : { tokenSteps: preset.tokenSteps }),
         connected: credential !== undefined,
       };
     });
@@ -223,9 +190,7 @@ export function createMcpServerRoutes(
   });
 
   app.post("/", deps.requireGrant("credential:*", "create"), async (c) => {
-    const body: unknown = await (c as Context<TenantEnv>).req
-      .json()
-      .catch(() => null);
+    const body: unknown = await (c as Context<TenantEnv>).req.json().catch(() => null);
     const parsed = SubmitMcpServer(body);
     if (parsed instanceof type.errors) {
       return c.json(
@@ -268,8 +233,7 @@ export function createMcpServerRoutes(
       return c.json(
         makeErrorEnvelope({
           code: "bad_request",
-          userMessage:
-            "Invalid MCP server: provide either presetSlug, or both name and url.",
+          userMessage: "Invalid MCP server: provide either presetSlug, or both name and url.",
         }),
         400,
       );
@@ -324,10 +288,7 @@ export function createMcpServerRoutes(
           tenantId: tenant.id,
           providerId,
           name,
-          secret:
-            parsed.token && parsed.token.length > 0
-              ? parsed.token
-              : NO_TOKEN_SENTINEL,
+          secret: parsed.token && parsed.token.length > 0 ? parsed.token : NO_TOKEN_SENTINEL,
           type: "api_key",
           metadata: { url, name },
           verified: true,
@@ -349,9 +310,7 @@ export function createMcpServerRoutes(
       return c.json(connected, 200);
     } catch (cause) {
       const message = cause instanceof Error ? cause.message : String(cause);
-      deps.log(
-        `mcp server connect failed for tenant ${tenant.id}, slug ${slug}: ${message}`,
-      );
+      deps.log(`mcp server connect failed for tenant ${tenant.id}, slug ${slug}: ${message}`);
       // Never widen extra beyond identifiers safe to print — `cause` here
       // can carry the pasted bearer token in scope above.
       const refId = reportError(cause, {
@@ -371,76 +330,60 @@ export function createMcpServerRoutes(
     }
   });
 
-  app.delete(
-    "/:slug",
-    deps.requireGrant("credential:*", "create"),
-    async (c) => {
-      const slug = c.req.param("slug");
-      const tenant = c.get("tenant");
-      const cookies = cookiesFromHeader(c.req.header("cookie"));
-      const providers = await listMcpProviders(api, cookies, tenant.id);
-      const provider = providers.find((p) => p.name === providerName(slug));
-      if (provider === undefined) {
-        // The tenant's own list (own-tenant only, matching `GET /`) has
-        // no such slug — but CL-6191's inheritance means an ancestor's
-        // connection can still resolve for this tenant's tools, so a
-        // second, inherited-inclusive lookup distinguishes "no such
-        // server anywhere in the chain" from "it exists, but only at an
-        // ancestor" — the latter is refused with a specific, actionable
-        // error rather than a generic not-found, mirroring
-        // `@corbits/skills`' `requireOwnTenant`. Either way nothing is
-        // mutated: disconnecting an inherited connection is a hard cut,
-        // never a shadow-delete row.
-        const inheritedProviders = await listMcpProviders(
-          api,
-          cookies,
-          tenant.id,
-          { inherited: true },
-        );
-        const inheritedProvider = inheritedProviders.find(
-          (p) => p.name === providerName(slug),
-        );
-        if (inheritedProvider !== undefined) {
-          return c.json(
-            makeErrorEnvelope({
-              code: "forbidden",
-              userMessage: `"${slug}" is inherited from a parent workbench — disconnect it from the workbench that owns it, not from a child.`,
-            }),
-            403,
-          );
-        }
+  app.delete("/:slug", deps.requireGrant("credential:*", "create"), async (c) => {
+    const slug = c.req.param("slug");
+    const tenant = c.get("tenant");
+    const cookies = cookiesFromHeader(c.req.header("cookie"));
+    const providers = await listMcpProviders(api, cookies, tenant.id);
+    const provider = providers.find((p) => p.name === providerName(slug));
+    if (provider === undefined) {
+      // The tenant's own list (own-tenant only, matching `GET /`) has
+      // no such slug — but CL-6191's inheritance means an ancestor's
+      // connection can still resolve for this tenant's tools, so a
+      // second, inherited-inclusive lookup distinguishes "no such
+      // server anywhere in the chain" from "it exists, but only at an
+      // ancestor" — the latter is refused with a specific, actionable
+      // error rather than a generic not-found, mirroring
+      // `@corbits/skills`' `requireOwnTenant`. Either way nothing is
+      // mutated: disconnecting an inherited connection is a hard cut,
+      // never a shadow-delete row.
+      const inheritedProviders = await listMcpProviders(api, cookies, tenant.id, {
+        inherited: true,
+      });
+      const inheritedProvider = inheritedProviders.find((p) => p.name === providerName(slug));
+      if (inheritedProvider !== undefined) {
         return c.json(
           makeErrorEnvelope({
-            code: "not_found",
-            userMessage: `No MCP server connected at "${slug}"`,
+            code: "forbidden",
+            userMessage: `"${slug}" is inherited from a parent workbench — disconnect it from the workbench that owns it, not from a child.`,
           }),
-          404,
+          403,
         );
       }
-      const credentials = await listMcpCredentials(api, cookies, tenant.id);
-      const credential = credentials.find(
-        (cred) => cred.providerId === provider.id,
+      return c.json(
+        makeErrorEnvelope({
+          code: "not_found",
+          userMessage: `No MCP server connected at "${slug}"`,
+        }),
+        404,
       );
-      if (credential !== undefined) {
-        await api(
-          "DELETE",
-          `/api/tenants/${tenant.id}/credentials/${credential.id}`,
-          undefined,
-          cookies,
-        );
-      }
-      // The provider row is the connection as far as the listing is
-      // concerned — deleting only the credential left a ghost entry
-      // that re-listed forever.
+    }
+    const credentials = await listMcpCredentials(api, cookies, tenant.id);
+    const credential = credentials.find((cred) => cred.providerId === provider.id);
+    if (credential !== undefined) {
       await api(
         "DELETE",
-        `/api/tenants/${tenant.id}/providers/${provider.id}`,
+        `/api/tenants/${tenant.id}/credentials/${credential.id}`,
         undefined,
         cookies,
       );
-      return c.body(null, 204);
-    },
-  );
+    }
+    // The provider row is the connection as far as the listing is
+    // concerned — deleting only the credential left a ghost entry
+    // that re-listed forever.
+    await api("DELETE", `/api/tenants/${tenant.id}/providers/${provider.id}`, undefined, cookies);
+    return c.body(null, 204);
+  });
 
   return app;
 }
diff --git a/packages/connections/src/mcp-server-store.ts b/packages/connections/src/mcp-server-store.ts
index a75829d942..85cce828b6 100644
--- a/packages/connections/src/mcp-server-store.ts
+++ b/packages/connections/src/mcp-server-store.ts
@@ -38,18 +38,14 @@ export async function listMcpServerConnections(
     const providers = await db.query.provider.findMany({
       where: and(eq(schema.provider.tenantId, tid)),
     });
-    const mcpProviders = providers.filter((row) =>
-      row.name.startsWith(MCP_PROVIDER_PREFIX),
-    );
+    const mcpProviders = providers.filter((row) => row.name.startsWith(MCP_PROVIDER_PREFIX));
     if (mcpProviders.length === 0) continue;
 
     const credentials = await db.query.credential.findMany({
       where: eq(schema.credential.tenantId, tid),
     });
     const credentialByProviderId = new Map(
-      credentials
-        .filter((row) => row.status === "active")
-        .map((row) => [row.providerId, row]),
+      credentials.filter((row) => row.status === "active").map((row) => [row.providerId, row]),
     );
 
     for (const provider of mcpProviders) {
diff --git a/packages/connections/src/missing-credential-detail.test.ts b/packages/connections/src/missing-credential-detail.test.ts
index 82172dfed2..ca27aa979b 100644
--- a/packages/connections/src/missing-credential-detail.test.ts
+++ b/packages/connections/src/missing-credential-detail.test.ts
@@ -1,9 +1,6 @@
 import { describe, expect, test } from "bun:test";
 
-import {
-  missingCredentialDetail,
-  parseMissingCredentialDetail,
-} from "./missing-credential-detail";
+import { missingCredentialDetail, parseMissingCredentialDetail } from "./missing-credential-detail";
 
 describe("missingCredentialDetail / parseMissingCredentialDetail", () => {
   test("round-trips a connector id through the wire shape", () => {
@@ -17,11 +14,7 @@ describe("missingCredentialDetail / parseMissingCredentialDetail", () => {
   test("rejects a tool result's detail that isn't this shape", () => {
     expect(parseMissingCredentialDetail(undefined)).toBeUndefined();
     expect(parseMissingCredentialDetail("timed out")).toBeUndefined();
-    expect(
-      parseMissingCredentialDetail({ kind: "something-else" }),
-    ).toBeUndefined();
-    expect(
-      parseMissingCredentialDetail({ kind: "missing-credential" }),
-    ).toBeUndefined();
+    expect(parseMissingCredentialDetail({ kind: "something-else" })).toBeUndefined();
+    expect(parseMissingCredentialDetail({ kind: "missing-credential" })).toBeUndefined();
   });
 });
diff --git a/packages/connections/src/missing-credential-detail.ts b/packages/connections/src/missing-credential-detail.ts
index b52267de73..5a16b66297 100644
--- a/packages/connections/src/missing-credential-detail.ts
+++ b/packages/connections/src/missing-credential-detail.ts
@@ -16,15 +16,11 @@ export const MissingCredentialDetail = type({
 });
 export type MissingCredentialDetail = typeof MissingCredentialDetail.infer;
 
-export function missingCredentialDetail(
-  connectorId: string,
-): MissingCredentialDetail {
+export function missingCredentialDetail(connectorId: string): MissingCredentialDetail {
   return { kind: "missing-credential", connectorId };
 }
 
-export function parseMissingCredentialDetail(
-  detail: unknown,
-): MissingCredentialDetail | undefined {
+export function parseMissingCredentialDetail(detail: unknown): MissingCredentialDetail | undefined {
   const parsed = MissingCredentialDetail(detail);
   return parsed instanceof type.errors ? undefined : parsed;
 }
diff --git a/packages/connections/src/model-capability.test.ts b/packages/connections/src/model-capability.test.ts
index d9626b8580..4f28d8c8de 100644
--- a/packages/connections/src/model-capability.test.ts
+++ b/packages/connections/src/model-capability.test.ts
@@ -25,32 +25,24 @@ const nameOf = (o: Offering) => o.name;
 describe("preferCompletionCapable", () => {
   test("drops an uncataloged offering whose name looks like an embedding model, sorting first, when a completion offering exists", () => {
     const offerings = [noData("all-minilm"), completion("qwen3:8b")];
-    expect(
-      preferCompletionCapable(offerings, capabilitiesOf, nameOf).map(
-        (o) => o.name,
-      ),
-    ).toEqual(["qwen3:8b"]);
+    expect(preferCompletionCapable(offerings, capabilitiesOf, nameOf).map((o) => o.name)).toEqual([
+      "qwen3:8b",
+    ]);
   });
 
   test("keeps every offering when all are completion-capable", () => {
     const offerings = [completion("gpt-4o"), completion("claude-sonnet-4-5")];
-    expect(preferCompletionCapable(offerings, capabilitiesOf, nameOf)).toEqual(
-      offerings,
-    );
+    expect(preferCompletionCapable(offerings, capabilitiesOf, nameOf)).toEqual(offerings);
   });
 
   test("keeps an uncataloged offering whose name doesn't look like an embedding model", () => {
     const offerings = [noData("qwen3:8b"), noData("llama3.1:70b")];
-    expect(preferCompletionCapable(offerings, capabilitiesOf, nameOf)).toEqual(
-      offerings,
-    );
+    expect(preferCompletionCapable(offerings, capabilitiesOf, nameOf)).toEqual(offerings);
   });
 
   test("excludes every offering, never falling back, when all are uncataloged embedding-named models", () => {
     const offerings = [noData("all-minilm"), noData("nomic-embed-text")];
-    expect(preferCompletionCapable(offerings, capabilitiesOf, nameOf)).toEqual(
-      [],
-    );
+    expect(preferCompletionCapable(offerings, capabilitiesOf, nameOf)).toEqual([]);
   });
 
   // CL-6477: "embeddinggemma" has no delimiter between "embedding" and
@@ -62,11 +54,9 @@ describe("preferCompletionCapable", () => {
   // support chat".
   test("drops an uncataloged embeddinggemma offering even with no delimiter after 'embedding'", () => {
     const offerings = [noData("embeddinggemma:300m"), completion("qwen3:8b")];
-    expect(
-      preferCompletionCapable(offerings, capabilitiesOf, nameOf).map(
-        (o) => o.name,
-      ),
-    ).toEqual(["qwen3:8b"]);
+    expect(preferCompletionCapable(offerings, capabilitiesOf, nameOf).map((o) => o.name)).toEqual([
+      "qwen3:8b",
+    ]);
   });
 
   test("still filters the delimited embedding-model names (no regression)", () => {
@@ -78,11 +68,9 @@ describe("preferCompletionCapable", () => {
       noData("snowflake-arctic-embed"),
       completion("qwen3:8b"),
     ];
-    expect(
-      preferCompletionCapable(offerings, capabilitiesOf, nameOf).map(
-        (o) => o.name,
-      ),
-    ).toEqual(["qwen3:8b"]);
+    expect(preferCompletionCapable(offerings, capabilitiesOf, nameOf).map((o) => o.name)).toEqual([
+      "qwen3:8b",
+    ]);
   });
 
   test("prefers real capability data over the name fallback: a probed completion offering named like an embedding model is kept", () => {
@@ -91,11 +79,9 @@ describe("preferCompletionCapable", () => {
       capabilities: ["plain-text"],
     };
     expect(
-      preferCompletionCapable(
-        [probedCompletion, noData("all-minilm")],
-        capabilitiesOf,
-        nameOf,
-      ).map((o) => o.name),
+      preferCompletionCapable([probedCompletion, noData("all-minilm")], capabilitiesOf, nameOf).map(
+        (o) => o.name,
+      ),
     ).toEqual(["embeddinggemma:300m"]);
   });
 
@@ -105,28 +91,19 @@ describe("preferCompletionCapable", () => {
   test("CL-6744: drops hf.co and huggingface.co paths even with plain-text capabilities", () => {
     const offerings = [
       completion("hf.co/bartowski/Llama-3.2-1B-Instruct-GGUF:Q4_K_M"),
-      completion(
-        "huggingface.co/mlabonne/Meta-Llama-3.1-8B-Instruct-abliterated-GGUF",
-      ),
+      completion("huggingface.co/mlabonne/Meta-Llama-3.1-8B-Instruct-abliterated-GGUF"),
       completion("qwen3:8b"),
     ];
-    expect(
-      preferCompletionCapable(offerings, capabilitiesOf, nameOf).map(
-        (o) => o.name,
-      ),
-    ).toEqual(["qwen3:8b"]);
+    expect(preferCompletionCapable(offerings, capabilitiesOf, nameOf).map((o) => o.name)).toEqual([
+      "qwen3:8b",
+    ]);
   });
 
   test("CL-6744: drops bare .gguf path/tag names", () => {
-    const offerings = [
-      noData("Llama-3.2-3B-Instruct-IQ3_M.gguf"),
-      completion("qwen3:8b"),
-    ];
-    expect(
-      preferCompletionCapable(offerings, capabilitiesOf, nameOf).map(
-        (o) => o.name,
-      ),
-    ).toEqual(["qwen3:8b"]);
+    const offerings = [noData("Llama-3.2-3B-Instruct-IQ3_M.gguf"), completion("qwen3:8b")];
+    expect(preferCompletionCapable(offerings, capabilitiesOf, nameOf).map((o) => o.name)).toEqual([
+      "qwen3:8b",
+    ]);
   });
 });
 
@@ -138,11 +115,7 @@ describe("isChatPickerModelName / isGgufOrHuggingFacePath", () => {
     expect(isChatPickerModelName("nomic-embed-text")).toBe(false);
     expect(isChatPickerModelName("qwen3-embedding")).toBe(false);
     expect(isChatPickerModelName("snowflake-arctic-embed")).toBe(false);
-    expect(
-      isChatPickerModelName(
-        "hf.co/bartowski/Llama-3.2-1B-Instruct-GGUF:Q4_K_M",
-      ),
-    ).toBe(false);
+    expect(isChatPickerModelName("hf.co/bartowski/Llama-3.2-1B-Instruct-GGUF:Q4_K_M")).toBe(false);
     expect(isChatPickerModelName("model.Q4_K_M.gguf")).toBe(false);
     expect(isGgufOrHuggingFacePath("hf.co/org/repo")).toBe(true);
     expect(isGgufOrHuggingFacePath("qwen3:8b")).toBe(false);
@@ -171,22 +144,14 @@ describe("hasCompletionCapableModel", () => {
   });
 
   test("false when the only offering is an uncataloged embeddinggemma pull (CL-6477)", () => {
-    expect(
-      hasCompletionCapableModel(
-        [noData("embeddinggemma:300m")],
-        capabilitiesOf,
-        nameOf,
-      ),
-    ).toBe(false);
+    expect(hasCompletionCapableModel([noData("embeddinggemma:300m")], capabilitiesOf, nameOf)).toBe(
+      false,
+    );
   });
 
   test("a chat-capable model is selected as the default when both an embeddinggemma pull and a chat model are present", () => {
     const offerings = [noData("embeddinggemma:300m"), completion("qwen3:8b")];
-    const chatDefault = preferCompletionCapable(
-      offerings,
-      capabilitiesOf,
-      nameOf,
-    )[0];
+    const chatDefault = preferCompletionCapable(offerings, capabilitiesOf, nameOf)[0];
     expect(chatDefault?.name).toBe("qwen3:8b");
   });
 
@@ -195,11 +160,7 @@ describe("hasCompletionCapableModel", () => {
       completion("hf.co/bartowski/Llama-3.2-1B-Instruct-GGUF"),
       completion("qwen3:8b"),
     ];
-    const chatDefault = preferCompletionCapable(
-      offerings,
-      capabilitiesOf,
-      nameOf,
-    )[0];
+    const chatDefault = preferCompletionCapable(offerings, capabilitiesOf, nameOf)[0];
     expect(chatDefault?.name).toBe("qwen3:8b");
   });
 });
diff --git a/packages/connections/src/model-capability.ts b/packages/connections/src/model-capability.ts
index 9358819fac..f42dc7346f 100644
--- a/packages/connections/src/model-capability.ts
+++ b/packages/connections/src/model-capability.ts
@@ -59,10 +59,7 @@ function isEmbeddingModelName(canonicalName: string): boolean {
  * (CL-6744). */
 export function isGgufOrHuggingFacePath(canonicalName: string): boolean {
   const lower = canonicalName.toLowerCase();
-  return (
-    lower.includes(".gguf") ||
-    HUGGING_FACE_OR_GGUF_NAME_PATTERN.test(canonicalName)
-  );
+  return lower.includes(".gguf") || HUGGING_FACE_OR_GGUF_NAME_PATTERN.test(canonicalName);
 }
 
 /**
@@ -72,16 +69,10 @@ export function isGgufOrHuggingFacePath(canonicalName: string): boolean {
  * when real capability lists are available.
  */
 export function isChatPickerModelName(canonicalName: string): boolean {
-  return (
-    !isGgufOrHuggingFacePath(canonicalName) &&
-    !isEmbeddingModelName(canonicalName)
-  );
+  return !isGgufOrHuggingFacePath(canonicalName) && !isEmbeddingModelName(canonicalName);
 }
 
-function isCompletionCapable(
-  capabilities: readonly string[],
-  canonicalName: string,
-): boolean {
+function isCompletionCapable(capabilities: readonly string[], canonicalName: string): boolean {
   if (isGgufOrHuggingFacePath(canonicalName)) return false;
   return capabilities.length > 0
     ? capabilities.includes("plain-text")
diff --git a/packages/connections/src/oauth-loopback-routes.ts b/packages/connections/src/oauth-loopback-routes.ts
index 539d1fe2b5..820cc3a295 100644
--- a/packages/connections/src/oauth-loopback-routes.ts
+++ b/packages/connections/src/oauth-loopback-routes.ts
@@ -54,15 +54,11 @@ export type CreateOAuthLoopbackRoutesDeps = PersistConnectorCredentialFns & {
   }) => Promise<void> | void;
 };
 
-export function isLoopbackConnectorId(
-  connectorId: string,
-): connectorId is "codex" | "xai-oauth" {
+export function isLoopbackConnectorId(connectorId: string): connectorId is "codex" | "xai-oauth" {
   return connectorId === "codex" || connectorId === "xai-oauth";
 }
 
-export function createOAuthLoopbackRoutes(
-  deps: CreateOAuthLoopbackRoutesDeps,
-): Hono<TenantEnv> {
+export function createOAuthLoopbackRoutes(deps: CreateOAuthLoopbackRoutesDeps): Hono<TenantEnv> {
   const app = new Hono<TenantEnv>();
   const api = createHubAPI(deps.hubUrl);
 
@@ -106,16 +102,10 @@ export function createOAuthLoopbackRoutes(
       return c.json({ ok: false, reason: "error", message }, 502);
     }
     if (outcome.status === "gate") {
-      return c.json(
-        { ok: false, reason: "gate", message: outcome.message },
-        409,
-      );
+      return c.json({ ok: false, reason: "gate", message: outcome.message }, 409);
     }
     if (outcome.status === "error") {
-      return c.json(
-        { ok: false, reason: "error", message: outcome.message },
-        502,
-      );
+      return c.json({ ok: false, reason: "error", message: outcome.message }, 502);
     }
 
     // The terminal frame lands after this response: persist detached, but
@@ -135,9 +125,7 @@ export function createOAuthLoopbackRoutes(
         // id_token never goes there. The expiry is a first-class COLUMN
         // (serving-time refresh keys on it), never metadata.
         const credentialMetadata: Record<string, unknown> = {
-          ...(tokens.accountId !== undefined
-            ? { accountId: tokens.accountId }
-            : {}),
+          ...(tokens.accountId !== undefined ? { accountId: tokens.accountId } : {}),
         };
         await persistConnectorCredential({
           api,
@@ -146,9 +134,7 @@ export function createOAuthLoopbackRoutes(
           descriptor,
           secret: tokens.access,
           credentialMetadata,
-          ...(tokens.refresh !== undefined
-            ? { refreshSecret: tokens.refresh }
-            : {}),
+          ...(tokens.refresh !== undefined ? { refreshSecret: tokens.refresh } : {}),
           ...(tokens.expiresAt !== undefined
             ? { expiresAt: new Date(tokens.expiresAt).toISOString() }
             : {}),
@@ -158,9 +144,7 @@ export function createOAuthLoopbackRoutes(
           ...(deps.ensureCredentialFn !== undefined
             ? { ensureCredentialFn: deps.ensureCredentialFn }
             : {}),
-          ...(deps.seedCatalogFn !== undefined
-            ? { seedCatalogFn: deps.seedCatalogFn }
-            : {}),
+          ...(deps.seedCatalogFn !== undefined ? { seedCatalogFn: deps.seedCatalogFn } : {}),
           log: deps.log,
         });
         deps.providerHealth?.clear(tenant.id, connectorId);
diff --git a/packages/connections/src/oauth-routes.test.ts b/packages/connections/src/oauth-routes.test.ts
index 7d6660419c..cbcf309bc8 100644
--- a/packages/connections/src/oauth-routes.test.ts
+++ b/packages/connections/src/oauth-routes.test.ts
@@ -101,8 +101,7 @@ function connectRoutes(
   const deps: Mutable<CreateOAuthConnectRoutesDeps> = {
     hubUrl: overrides.hubUrl ?? "https://bench.example.com",
     log: overrides.log ?? (() => undefined),
-    credentialCipher:
-      overrides.credentialCipher ?? createNoopCredentialCipher(),
+    credentialCipher: overrides.credentialCipher ?? createNoopCredentialCipher(),
     registry: overrides.registry ?? registry,
     connectCredential:
       overrides.connectCredential ??
@@ -115,12 +114,10 @@ function connectRoutes(
       })),
   };
   if (overrides.oauthEnv !== undefined) deps.oauthEnv = overrides.oauthEnv;
-  if (overrides.onConnected !== undefined)
-    deps.onConnected = overrides.onConnected;
+  if (overrides.onConnected !== undefined) deps.onConnected = overrides.onConnected;
   if (overrides.recentlyConnected !== undefined)
     deps.recentlyConnected = overrides.recentlyConnected;
-  if (overrides.afterConnected !== undefined)
-    deps.afterConnected = overrides.afterConnected;
+  if (overrides.afterConnected !== undefined) deps.afterConnected = overrides.afterConnected;
   if (overrides.defaultReturnPath !== undefined)
     deps.defaultReturnPath = overrides.defaultReturnPath;
   return mountAuthenticated(createOAuthConnectRoutes(deps));
@@ -137,9 +134,7 @@ function allCookies(startResponse: Response): string {
 }
 
 async function startConnect(app: Hono<AppEnv>, query = "") {
-  const response = await app.request(
-    `/api/connections/oauth/widget/start${query}`,
-  );
+  const response = await app.request(`/api/connections/oauth/widget/start${query}`);
   expect(response.status).toBe(302);
   const location = new URL(response.headers.get("location") ?? "");
   return { response, location };
@@ -150,45 +145,31 @@ describe("sanitizeReturnPath", () => {
   const allowlist = DEFAULT_RETURN_PATH_ALLOWLIST;
 
   test("falls back to the default when no value was given", () => {
-    expect(sanitizeReturnPath(undefined, defaultReturnPath, allowlist)).toBe(
-      defaultReturnPath,
-    );
-    expect(sanitizeReturnPath("", defaultReturnPath, allowlist)).toBe(
-      defaultReturnPath,
-    );
+    expect(sanitizeReturnPath(undefined, defaultReturnPath, allowlist)).toBe(defaultReturnPath);
+    expect(sanitizeReturnPath("", defaultReturnPath, allowlist)).toBe(defaultReturnPath);
   });
 
   test("passes through a legitimate, allowlisted path", () => {
-    expect(
-      sanitizeReturnPath("/settings/connections", defaultReturnPath, allowlist),
-    ).toBe("/settings/connections");
-    expect(
-      sanitizeReturnPath("/onboarding", defaultReturnPath, allowlist),
-    ).toBe("/onboarding");
+    expect(sanitizeReturnPath("/settings/connections", defaultReturnPath, allowlist)).toBe(
+      "/settings/connections",
+    );
+    expect(sanitizeReturnPath("/onboarding", defaultReturnPath, allowlist)).toBe("/onboarding");
   });
 
   for (const { name, value } of MALICIOUS_RETURN_PATHS) {
     test(`falls back to the default on ${name} (${JSON.stringify(value)})`, () => {
-      expect(sanitizeReturnPath(value, defaultReturnPath, allowlist)).toBe(
-        defaultReturnPath,
-      );
+      expect(sanitizeReturnPath(value, defaultReturnPath, allowlist)).toBe(defaultReturnPath);
     });
   }
 
   test("a value that only matches the allowlist after decoding is still honored", () => {
-    expect(
-      sanitizeReturnPath(
-        "%2Fsettings%2Fconnections",
-        defaultReturnPath,
-        allowlist,
-      ),
-    ).toBe("/settings/connections");
+    expect(sanitizeReturnPath("%2Fsettings%2Fconnections", defaultReturnPath, allowlist)).toBe(
+      "/settings/connections",
+    );
   });
 
   test("malformed percent-encoding falls back to the default silently", () => {
-    expect(sanitizeReturnPath("%", defaultReturnPath, allowlist)).toBe(
-      defaultReturnPath,
-    );
+    expect(sanitizeReturnPath("%", defaultReturnPath, allowlist)).toBe(defaultReturnPath);
   });
 });
 
@@ -204,9 +185,7 @@ describe("GET /:connectorId/start", () => {
     const { location, response } = await startConnect(app);
 
     expect(location.origin).toBe("https://widget.example.com");
-    expect(location.searchParams.get("code_challenge")).toMatch(
-      /^[A-Za-z0-9_-]{43}$/,
-    );
+    expect(location.searchParams.get("code_challenge")).toMatch(/^[A-Za-z0-9_-]{43}$/);
     expect(location.searchParams.get("redirect_uri")).toBe(
       "https://bench.example.com/api/connections/oauth/widget/callback",
     );
@@ -216,10 +195,7 @@ describe("GET /:connectorId/start", () => {
 
   test("carries the ?return= path across to the callback redirect via a second cookie", async () => {
     const app = connectRoutes();
-    const { response } = await startConnect(
-      app,
-      "?return=%2Fsettings%2Fconnections",
-    );
+    const { response } = await startConnect(app, "?return=%2Fsettings%2Fconnections");
 
     const setCookie = response.headers.getSetCookie().join("; ");
     expect(setCookie).toContain("workbench_widget_connect_return=");
@@ -246,10 +222,7 @@ describe("GET /:connectorId/start", () => {
 
     const response = await app.request("/api/connections/oauth/widget/start");
     expect(response.status).toBe(302);
-    const location = new URL(
-      response.headers.get("location") ?? "",
-      "https://x",
-    );
+    const location = new URL(response.headers.get("location") ?? "", "https://x");
     expect(location.searchParams.get("code")).toBe("signed_out");
     expect(response.headers.get("set-cookie")).toBeNull();
   });
@@ -263,10 +236,7 @@ describe("GET /:connectorId/start", () => {
     );
 
     const response = await app.request("/api/connections/oauth/widget/start");
-    const location = new URL(
-      response.headers.get("location") ?? "",
-      "https://x",
-    );
+    const location = new URL(response.headers.get("location") ?? "", "https://x");
     expect(location.searchParams.get("code")).toBe("not_configured");
     expect(response.headers.get("set-cookie")).toBeNull();
   });
@@ -394,28 +364,19 @@ describe("GET /:connectorId/callback", () => {
         };
       },
     });
-    const { response: started } = await startConnect(
-      app,
-      "?return=%2Fsettings%2Fconnections",
-    );
+    const { response: started } = await startConnect(app, "?return=%2Fsettings%2Fconnections");
     const cookie = allCookies(started);
 
-    const response = await app.request(
-      "/api/connections/oauth/widget/callback?code=abc123",
-      { headers: { cookie } },
-    );
+    const response = await app.request("/api/connections/oauth/widget/callback?code=abc123", {
+      headers: { cookie },
+    });
 
     expect(response.status).toBe(302);
-    const redirect = new URL(
-      response.headers.get("location") ?? "",
-      "https://x",
-    );
+    const redirect = new URL(response.headers.get("location") ?? "", "https://x");
     expect(redirect.pathname).toBe("/settings/connections");
     expect(redirect.searchParams.get("connect")).toBe("widget");
     expect(redirect.searchParams.get("outcome")).toBe("connected");
-    expect(stored).toEqual([
-      { apiKey: "key-for-abc123", connectorId: "widget" },
-    ]);
+    expect(stored).toEqual([{ apiKey: "key-for-abc123", connectorId: "widget" }]);
   });
 
   test("a redirect-flow exchange's expiry lands on the first-class expiresAt field", async () => {
@@ -451,10 +412,9 @@ describe("GET /:connectorId/callback", () => {
       },
     );
     const { response: started } = await startConnect(app);
-    const response = await app.request(
-      "/api/connections/oauth/widget/callback?code=abc123",
-      { headers: { cookie: allCookies(started) } },
-    );
+    const response = await app.request("/api/connections/oauth/widget/callback?code=abc123", {
+      headers: { cookie: allCookies(started) },
+    });
     expect(response.status).toBe(302);
     // The column is what serving-time refresh keys on; the metadata
     // presence stays, since it is what types the row `oauth_token`.
@@ -471,15 +431,11 @@ describe("GET /:connectorId/callback", () => {
     const { response: started } = await startConnect(app);
     const cookie = allCookies(started);
 
-    const response = await app.request(
-      "/api/connections/oauth/widget/callback?code=abc123",
-      { headers: { cookie } },
-    );
+    const response = await app.request("/api/connections/oauth/widget/callback?code=abc123", {
+      headers: { cookie },
+    });
 
-    const redirect = new URL(
-      response.headers.get("location") ?? "",
-      "https://x",
-    );
+    const redirect = new URL(response.headers.get("location") ?? "", "https://x");
     expect(redirect.pathname).toBe("/onboarding");
   });
 
@@ -497,13 +453,8 @@ describe("GET /:connectorId/callback", () => {
       },
     );
 
-    const response = await app.request(
-      "/api/connections/oauth/widget/callback?code=abc123",
-    );
-    const redirect = new URL(
-      response.headers.get("location") ?? "",
-      "https://x",
-    );
+    const response = await app.request("/api/connections/oauth/widget/callback?code=abc123");
+    const redirect = new URL(response.headers.get("location") ?? "", "https://x");
     expect(redirect.searchParams.get("code")).toBe("state_expired");
     expect(exchanged).toBe(0);
   });
@@ -529,10 +480,7 @@ describe("GET /:connectorId/callback", () => {
       "/api/connections/oauth/widget/callback?code=abc123&state=not-the-real-state",
       { headers: { cookie } },
     );
-    const redirect = new URL(
-      response.headers.get("location") ?? "",
-      "https://x",
-    );
+    const redirect = new URL(response.headers.get("location") ?? "", "https://x");
     expect(redirect.searchParams.get("code")).toBe("state_expired");
     expect(exchanged).toBe(0);
   });
@@ -567,14 +515,10 @@ describe("GET /:connectorId/callback", () => {
     const cookie = allCookies(started);
 
     session.userId = "user_2";
-    const response = await app.request(
-      "/api/connections/oauth/widget/callback?code=abc123",
-      { headers: { cookie } },
-    );
-    const redirect = new URL(
-      response.headers.get("location") ?? "",
-      "https://x",
-    );
+    const response = await app.request("/api/connections/oauth/widget/callback?code=abc123", {
+      headers: { cookie },
+    });
+    const redirect = new URL(response.headers.get("location") ?? "", "https://x");
     expect(redirect.searchParams.get("code")).toBe("state_expired");
     expect(exchanged).toBe(0);
   });
@@ -595,16 +539,10 @@ describe("GET /:connectorId/callback", () => {
     const second = await app.request(path, { headers: { cookie } });
 
     expect(
-      new URL(
-        first.headers.get("location") ?? "",
-        "https://x",
-      ).searchParams.get("outcome"),
+      new URL(first.headers.get("location") ?? "", "https://x").searchParams.get("outcome"),
     ).toBe("connected");
     expect(
-      new URL(
-        second.headers.get("location") ?? "",
-        "https://x",
-      ).searchParams.get("outcome"),
+      new URL(second.headers.get("location") ?? "", "https://x").searchParams.get("outcome"),
     ).toBe("connected");
     expect(recoveryCalls).toBe(1);
   });
@@ -619,10 +557,7 @@ describe("GET /:connectorId/callback", () => {
     const second = await app.request(path, { headers: { cookie } });
 
     expect(
-      new URL(
-        second.headers.get("location") ?? "",
-        "https://x",
-      ).searchParams.get("code"),
+      new URL(second.headers.get("location") ?? "", "https://x").searchParams.get("code"),
     ).toBe("state_expired");
   });
 
@@ -650,14 +585,10 @@ describe("GET /:connectorId/callback", () => {
     const { response: started } = await startConnect(app);
     const cookie = allCookies(started);
 
-    const response = await app.request(
-      "/api/connections/oauth/widget/callback?code=abc123",
-      { headers: { cookie } },
-    );
-    const redirect = new URL(
-      response.headers.get("location") ?? "",
-      "https://x",
-    );
+    const response = await app.request("/api/connections/oauth/widget/callback?code=abc123", {
+      headers: { cookie },
+    });
+    const redirect = new URL(response.headers.get("location") ?? "", "https://x");
     expect(redirect.searchParams.get("code")).toBe("exchange_failed");
     expect(connected).toBe(0);
   });
@@ -672,14 +603,10 @@ describe("GET /:connectorId/callback", () => {
     const { response: started } = await startConnect(app);
     const cookie = allCookies(started);
 
-    const response = await app.request(
-      "/api/connections/oauth/widget/callback?code=abc123",
-      { headers: { cookie } },
-    );
-    const redirect = new URL(
-      response.headers.get("location") ?? "",
-      "https://x",
-    );
+    const response = await app.request("/api/connections/oauth/widget/callback?code=abc123", {
+      headers: { cookie },
+    });
+    const redirect = new URL(response.headers.get("location") ?? "", "https://x");
     expect(redirect.searchParams.get("code")).toBe("key_rejected");
   });
 
@@ -690,14 +617,10 @@ describe("GET /:connectorId/callback", () => {
     const { response: started } = await startConnect(app);
     const cookie = allCookies(started);
 
-    const response = await app.request(
-      "/api/connections/oauth/widget/callback?code=abc123",
-      { headers: { cookie } },
-    );
-    const redirect = new URL(
-      response.headers.get("location") ?? "",
-      "https://x",
-    );
+    const response = await app.request("/api/connections/oauth/widget/callback?code=abc123", {
+      headers: { cookie },
+    });
+    const redirect = new URL(response.headers.get("location") ?? "", "https://x");
     expect(redirect.searchParams.get("code")).toBe("no_bench");
   });
 
@@ -729,10 +652,9 @@ describe("GET /:connectorId/callback", () => {
     );
     const { response: deployStarted } = await startConnect(deployApp);
     const deployCookie = allCookies(deployStarted);
-    await deployApp.request(
-      "/api/connections/oauth/widget/callback?code=abc123",
-      { headers: { cookie: deployCookie } },
-    );
+    await deployApp.request("/api/connections/oauth/widget/callback?code=abc123", {
+      headers: { cookie: deployCookie },
+    });
     expect(calls).toBe(1);
   });
 
@@ -748,14 +670,10 @@ describe("GET /:connectorId/callback", () => {
     const { response: started } = await startConnect(app);
     const cookie = allCookies(started);
 
-    const response = await app.request(
-      "/api/connections/oauth/widget/callback?code=abc123",
-      { headers: { cookie } },
-    );
-    const redirect = new URL(
-      response.headers.get("location") ?? "",
-      "https://x",
-    );
+    const response = await app.request("/api/connections/oauth/widget/callback?code=abc123", {
+      headers: { cookie },
+    });
+    const redirect = new URL(response.headers.get("location") ?? "", "https://x");
     expect(redirect.searchParams.get("code")).toBe("setup_failed");
     expect(lines.join("\n")).not.toContain("key-for-abc123");
     expect(report).toHaveBeenCalledTimes(1);
@@ -764,8 +682,7 @@ describe("GET /:connectorId/callback", () => {
       operation: "oauth_connect_setup",
       extra: { connectorId: "widget" },
     });
-    const extra = report.mock.calls[0]?.[1]?.extra as
-      Record<string, unknown> | undefined;
+    const extra = report.mock.calls[0]?.[1]?.extra as Record<string, unknown> | undefined;
     expect(JSON.stringify(extra)).not.toContain("key-for-abc123");
     report.mockRestore();
   });
@@ -784,10 +701,9 @@ describe("GET /:connectorId/callback", () => {
         const app = connectRoutes();
         const forgedCookie = `workbench_widget_connect_return=${encodeURIComponent(value)}`;
 
-        const response = await app.request(
-          "/api/connections/oauth/widget/callback?code=abc123",
-          { headers: { cookie: forgedCookie } },
-        );
+        const response = await app.request("/api/connections/oauth/widget/callback?code=abc123", {
+          headers: { cookie: forgedCookie },
+        });
 
         expect(response.status).toBe(302);
         const location = response.headers.get("location") ?? "";
@@ -807,10 +723,7 @@ describe("GET /:connectorId/callback", () => {
             tenantDomain: "widget-tenant.bench.local",
           }),
         });
-        const { response: started } = await startConnect(
-          app,
-          "?return=%2Fsettings%2Fconnections",
-        );
+        const { response: started } = await startConnect(app, "?return=%2Fsettings%2Fconnections");
         // The state cookie is untouched (a real, valid connect in
         // progress); only the return cookie is swapped for the forged
         // value, simulating an attacker who can write cookies on this
@@ -818,10 +731,9 @@ describe("GET /:connectorId/callback", () => {
         // control the OAuth round trip.
         const forgedCookie = `${stateCookieOnly(started)}; workbench_widget_connect_return=${encodeURIComponent(value)}`;
 
-        const response = await app.request(
-          "/api/connections/oauth/widget/callback?code=abc123",
-          { headers: { cookie: forgedCookie } },
-        );
+        const response = await app.request("/api/connections/oauth/widget/callback?code=abc123", {
+          headers: { cookie: forgedCookie },
+        });
 
         expect(response.status).toBe(302);
         const location = response.headers.get("location") ?? "";
@@ -844,14 +756,11 @@ describe("onConnected hook", () => {
     });
     const { response: started } = await startConnect(app);
     const cookie = allCookies(started);
-    const response = await app.request(
-      "/api/connections/oauth/widget/callback?code=abc123",
-      { headers: { cookie } },
-    );
+    const response = await app.request("/api/connections/oauth/widget/callback?code=abc123", {
+      headers: { cookie },
+    });
     expect(response.status).toBe(302);
-    expect(response.headers.get("location") ?? "").toContain(
-      "outcome=connected",
-    );
+    expect(response.headers.get("location") ?? "").toContain("outcome=connected");
     expect(events).toEqual([
       {
         tenantId: "ten_1",
@@ -870,14 +779,11 @@ describe("onConnected hook", () => {
     });
     const { response: started } = await startConnect(app);
     const cookie = allCookies(started);
-    const response = await app.request(
-      "/api/connections/oauth/widget/callback?code=abc123",
-      { headers: { cookie } },
-    );
+    const response = await app.request("/api/connections/oauth/widget/callback?code=abc123", {
+      headers: { cookie },
+    });
     expect(response.status).toBe(302);
-    expect(response.headers.get("location") ?? "").toContain(
-      "outcome=connected",
-    );
+    expect(response.headers.get("location") ?? "").toContain("outcome=connected");
   });
 });
 
@@ -895,9 +801,7 @@ describe("oauth-loopback descriptors", () => {
 
   test("the callback route refuses them too", async () => {
     const app = connectRoutes({}, { loopback: loopbackDescriptor() });
-    const response = await app.request(
-      "/api/connections/oauth/loopback/callback?code=abc",
-    );
+    const response = await app.request("/api/connections/oauth/loopback/callback?code=abc");
     expect(response.status).toBe(409);
     const body = (await response.json()) as {
       error: { code: string };
diff --git a/packages/connections/src/oauth-routes.ts b/packages/connections/src/oauth-routes.ts
index 8668518ee3..5855d1721d 100644
--- a/packages/connections/src/oauth-routes.ts
+++ b/packages/connections/src/oauth-routes.ts
@@ -36,11 +36,7 @@ import { type } from "arktype";
 import type { AppEnv } from "@intx/hub-api";
 import type { CredentialCipher } from "@intx/types";
 import { cookiesFromHeader } from "@corbits/hub-api-client";
-import {
-  createConnectStateStore,
-  generatePKCEPair,
-  type ConnectStateStore,
-} from "./pkce";
+import { createConnectStateStore, generatePKCEPair, type ConnectStateStore } from "./pkce";
 import { fireConnectedHook, type ServiceConnectedHook } from "./connected-hook";
 import { reportError } from "@corbits/error-sink";
 import type { ConnectorDescriptor } from "./descriptor";
@@ -54,10 +50,7 @@ import type { ConnectorDescriptor } from "./descriptor";
  * `sanitizeReturnPath`'s own header for why an allowlist and not just
  * shape validation.
  */
-export const DEFAULT_RETURN_PATH_ALLOWLIST: readonly string[] = [
-  "/onboarding",
-  "/settings/",
-];
+export const DEFAULT_RETURN_PATH_ALLOWLIST: readonly string[] = ["/onboarding", "/settings/"];
 
 /**
  * Turns an untrusted `?return=` hint (or the cookie that carries it
@@ -132,9 +125,7 @@ export function sanitizeReturnPath(
   // target itself).
   if (candidate.includes("://")) return defaultReturnPath;
 
-  const allowed = allowlist.some(
-    (prefix) => candidate === prefix || candidate.startsWith(prefix),
-  );
+  const allowed = allowlist.some((prefix) => candidate === prefix || candidate.startsWith(prefix));
   return allowed ? candidate : defaultReturnPath;
 }
 
@@ -238,9 +229,7 @@ const VerifierStatePayload = type({
 });
 type VerifierStatePayload = typeof VerifierStatePayload.infer;
 
-function parseVerifierStatePayload(
-  value: unknown,
-): VerifierStatePayload | undefined {
+function parseVerifierStatePayload(value: unknown): VerifierStatePayload | undefined {
   const parsed = VerifierStatePayload(value);
   return parsed instanceof type.errors ? undefined : parsed;
 }
@@ -252,14 +241,10 @@ export function createOAuthConnectRoutes<E extends AppEnv = AppEnv>(
   const registry = deps.registry;
   const oauthEnv = deps.oauthEnv ?? {};
   const defaultReturnPath = deps.defaultReturnPath ?? "/onboarding";
-  const returnPathAllowlist =
-    deps.returnPathAllowlist ?? DEFAULT_RETURN_PATH_ALLOWLIST;
+  const returnPathAllowlist = deps.returnPathAllowlist ?? DEFAULT_RETURN_PATH_ALLOWLIST;
   const secureCookies = deps.hubUrl.startsWith("https:");
 
-  const stateStores = new Map<
-    string,
-    ConnectStateStore<VerifierStatePayload>
-  >();
+  const stateStores = new Map<string, ConnectStateStore<VerifierStatePayload>>();
   function stateStoreFor(connectorId: string) {
     let store = stateStores.get(connectorId);
     if (store === undefined) {
@@ -377,10 +362,7 @@ export function createOAuthConnectRoutes<E extends AppEnv = AppEnv>(
     const rateLimitKey = `${connectorId}:${user.id}`;
     const now = Date.now();
     const lastStart = lastStartByKey.get(rateLimitKey);
-    if (
-      lastStart !== undefined &&
-      now - lastStart < CONNECT_START_RATE_LIMIT_MS
-    ) {
+    if (lastStart !== undefined && now - lastStart < CONNECT_START_RATE_LIMIT_MS) {
       return c.redirect(
         redirectPath(returnPath, connectorId, {
           outcome: "error",
@@ -391,9 +373,7 @@ export function createOAuthConnectRoutes<E extends AppEnv = AppEnv>(
     }
     lastStartByKey.set(rateLimitKey, now);
 
-    const pkce = descriptor.oauth.usesPKCE
-      ? await generatePKCEPair()
-      : undefined;
+    const pkce = descriptor.oauth.usesPKCE ? await generatePKCEPair() : undefined;
     const state = await stateStoreFor(connectorId).issue({
       userId: user.id,
       payload: { codeVerifier: pkce?.codeVerifier ?? "" },
@@ -421,9 +401,7 @@ export function createOAuthConnectRoutes<E extends AppEnv = AppEnv>(
       c.req.path.replace(/\/start$/, "/callback"),
       deps.hubUrl,
     ).toString();
-    const authorizeUrlArgs: Parameters<
-      typeof descriptor.oauth.buildAuthorizeUrl
-    >[0] = {
+    const authorizeUrlArgs: Parameters<typeof descriptor.oauth.buildAuthorizeUrl>[0] = {
       callbackUrl,
       state,
       ...(pkce !== undefined ? { codeChallenge: pkce.codeChallenge } : {}),
@@ -486,10 +464,7 @@ export function createOAuthConnectRoutes<E extends AppEnv = AppEnv>(
       );
     }
     const clientSecret = descriptor.oauth.clientSecret?.(oauthEnv);
-    if (
-      descriptor.oauth.clientSecret !== undefined &&
-      clientSecret === undefined
-    ) {
+    if (descriptor.oauth.clientSecret !== undefined && clientSecret === undefined) {
       return c.redirect(
         redirectPath(returnPath, connectorId, {
           outcome: "error",
@@ -562,9 +537,7 @@ export function createOAuthConnectRoutes<E extends AppEnv = AppEnv>(
     const exchangeArgs: Parameters<typeof descriptor.oauth.exchange>[0] = {
       code,
       redirectUri: callbackUrl,
-      ...(descriptor.oauth.usesPKCE
-        ? { codeVerifier: statePayload.codeVerifier }
-        : {}),
+      ...(descriptor.oauth.usesPKCE ? { codeVerifier: statePayload.codeVerifier } : {}),
       ...(clientId !== undefined ? { clientId } : {}),
       ...(clientSecret !== undefined ? { clientSecret } : {}),
     };
@@ -583,9 +556,7 @@ export function createOAuthConnectRoutes<E extends AppEnv = AppEnv>(
     }
 
     try {
-      const connectCredentialArgs: Parameters<
-        typeof deps.connectCredential
-      >[0] = {
+      const connectCredentialArgs: Parameters<typeof deps.connectCredential>[0] = {
         c,
         connectorId,
         userId: user.id,
@@ -662,9 +633,7 @@ export function createOAuthConnectRoutes<E extends AppEnv = AppEnv>(
       );
     } catch (cause) {
       const message = cause instanceof Error ? cause.message : String(cause);
-      deps.log(
-        `${connectorId} connect setup failed for user ${user.id}: ${message}`,
-      );
+      deps.log(`${connectorId} connect setup failed for user ${user.id}: ${message}`);
       // Never widen `extra` beyond identifiers safe to print — `cause` here
       // can carry the exchanged material (apiKey/refreshToken) or the
       // connector's clientSecret in scope above; reportError's redaction
diff --git a/packages/connections/src/oauth-tenant-connect.test.ts b/packages/connections/src/oauth-tenant-connect.test.ts
index 9f2847ae03..5d68ae68f5 100644
--- a/packages/connections/src/oauth-tenant-connect.test.ts
+++ b/packages/connections/src/oauth-tenant-connect.test.ts
@@ -133,9 +133,7 @@ describe("createTenantConnectCredential, mounted through createOAuthConnectRoute
   test("full authorize -> callback -> credential-stored round trip", async () => {
     const { app, providers, credentials } = mountTenantScoped();
 
-    const started = await app.request(
-      "/api/tenants/tnt_1/connections/oauth/widget/start",
-    );
+    const started = await app.request("/api/tenants/tnt_1/connections/oauth/widget/start");
     expect(started.status).toBe(302);
     const authorizeUrl = new URL(started.headers.get("location") ?? "");
     expect(authorizeUrl.origin).toBe("https://widget.example.com");
@@ -146,16 +144,11 @@ describe("createTenantConnectCredential, mounted through createOAuthConnectRoute
       { headers: { cookie } },
     );
     expect(callback.status).toBe(302);
-    const redirect = new URL(
-      callback.headers.get("location") ?? "",
-      "https://x",
-    );
+    const redirect = new URL(callback.headers.get("location") ?? "", "https://x");
     expect(redirect.searchParams.get("outcome")).toBe("connected");
     expect(redirect.searchParams.get("tenantSlug")).toBe(TENANT.slug);
 
-    expect(providers).toEqual([
-      { tenantId: TENANT.id, name: "widget", plugin: "http" },
-    ]);
+    expect(providers).toEqual([{ tenantId: TENANT.id, name: "widget", plugin: "http" }]);
     expect(credentials).toEqual([
       {
         tenantId: TENANT.id,
@@ -178,8 +171,7 @@ describe("createTenantConnectCredential, mounted through createOAuthConnectRoute
 
     const result = await connectCredential({
       c: {
-        get: (key: string) =>
-          key === "tenant" ? TENANT : key === "principal" ? PRINCIPAL : null,
+        get: (key: string) => (key === "tenant" ? TENANT : key === "principal" ? PRINCIPAL : null),
       } as never,
       connectorId: "widget",
       userId: "user_1",
@@ -206,10 +198,7 @@ describe("createTenantConnectCredential, mounted through createOAuthConnectRoute
       "/api/tenants/tnt_1/connections/oauth/widget/callback?code=abc123&state=forged",
     );
     expect(callback.status).toBe(302);
-    const redirect = new URL(
-      callback.headers.get("location") ?? "",
-      "https://x",
-    );
+    const redirect = new URL(callback.headers.get("location") ?? "", "https://x");
     expect(redirect.searchParams.get("outcome")).toBe("error");
     expect(redirect.searchParams.get("code")).toBe("state_expired");
     expect(providers).toEqual([]);
@@ -219,9 +208,7 @@ describe("createTenantConnectCredential, mounted through createOAuthConnectRoute
   test("a tampered state cookie is rejected before anything is persisted", async () => {
     const { app, providers, credentials } = mountTenantScoped();
 
-    const started = await app.request(
-      "/api/tenants/tnt_1/connections/oauth/widget/start",
-    );
+    const started = await app.request("/api/tenants/tnt_1/connections/oauth/widget/start");
     // Same cookie *name*, garbage value: fails the sealed-state cipher
     // check the same way a forged or replayed cookie would, matching
     // the factory's own cross-user regression coverage in
@@ -236,10 +223,7 @@ describe("createTenantConnectCredential, mounted through createOAuthConnectRoute
       { headers: { cookie } },
     );
     expect(callback.status).toBe(302);
-    const redirect = new URL(
-      callback.headers.get("location") ?? "",
-      "https://x",
-    );
+    const redirect = new URL(callback.headers.get("location") ?? "", "https://x");
     expect(redirect.searchParams.get("code")).toBe("state_expired");
     expect(providers).toEqual([]);
     expect(credentials).toEqual([]);
@@ -257,14 +241,11 @@ describe("createTenantConnectCredential, mounted through createOAuthConnectRoute
       providerHealth,
     });
 
-    const started = await app.request(
-      "/api/tenants/tnt_1/connections/oauth/widget/start",
-    );
+    const started = await app.request("/api/tenants/tnt_1/connections/oauth/widget/start");
     const cookie = cookieHeaderFrom(started);
-    await app.request(
-      "/api/tenants/tnt_1/connections/oauth/widget/callback?code=abc123",
-      { headers: { cookie } },
-    );
+    await app.request("/api/tenants/tnt_1/connections/oauth/widget/callback?code=abc123", {
+      headers: { cookie },
+    });
 
     expect(providerHealth.listForTenant(TENANT.id)["widget"]).toBeUndefined();
   });
diff --git a/packages/connections/src/oauth-tenant-connect.ts b/packages/connections/src/oauth-tenant-connect.ts
index 3e51b98310..041fc0873a 100644
--- a/packages/connections/src/oauth-tenant-connect.ts
+++ b/packages/connections/src/oauth-tenant-connect.ts
@@ -28,17 +28,16 @@ import {
   type PersistConnectorCredentialFns,
 } from "./persist-credential";
 
-export type CreateTenantConnectCredentialDeps =
-  PersistConnectorCredentialFns & {
-    readonly hubUrl: string;
-    readonly log: (line: string) => void;
-    /** The connector set this build ships — this package carries none
-     * of its own (CL-7384), so a caller always supplies one. */
-    readonly registry: Readonly<Record<string, ConnectorDescriptor>>;
-    /** Cleared on a successful connect, same store `createConnectionRoutes`'
-     * `/complete` and `GET /provider-health` share (CL-6092). */
-    readonly providerHealth?: ProviderHealthStore;
-  };
+export type CreateTenantConnectCredentialDeps = PersistConnectorCredentialFns & {
+  readonly hubUrl: string;
+  readonly log: (line: string) => void;
+  /** The connector set this build ships — this package carries none
+   * of its own (CL-7384), so a caller always supplies one. */
+  readonly registry: Readonly<Record<string, ConnectorDescriptor>>;
+  /** Cleared on a successful connect, same store `createConnectionRoutes`'
+   * `/complete` and `GET /provider-health` share (CL-6092). */
+  readonly providerHealth?: ProviderHealthStore;
+};
 
 /**
  * Builds the `connectCredential` dep a `TenantEnv`-typed
@@ -74,18 +73,12 @@ export function createTenantConnectCredential(
           ? { credentialMetadata: args.credentialMetadata }
           : {}),
         ...(args.expiresAt !== undefined ? { expiresAt: args.expiresAt } : {}),
-        ...(args.refreshToken !== undefined
-          ? { refreshSecret: args.refreshToken }
-          : {}),
-        ...(deps.ensureProviderFn !== undefined
-          ? { ensureProviderFn: deps.ensureProviderFn }
-          : {}),
+        ...(args.refreshToken !== undefined ? { refreshSecret: args.refreshToken } : {}),
+        ...(deps.ensureProviderFn !== undefined ? { ensureProviderFn: deps.ensureProviderFn } : {}),
         ...(deps.ensureCredentialFn !== undefined
           ? { ensureCredentialFn: deps.ensureCredentialFn }
           : {}),
-        ...(deps.seedCatalogFn !== undefined
-          ? { seedCatalogFn: deps.seedCatalogFn }
-          : {}),
+        ...(deps.seedCatalogFn !== undefined ? { seedCatalogFn: deps.seedCatalogFn } : {}),
       };
       await persistConnectorCredential(persistArgs);
       deps.providerHealth?.clear(tenant.id, descriptor.id);
diff --git a/packages/connections/src/openrouter-connect.ts b/packages/connections/src/openrouter-connect.ts
index 45008c3d4d..d030fe3d9b 100644
--- a/packages/connections/src/openrouter-connect.ts
+++ b/packages/connections/src/openrouter-connect.ts
@@ -9,14 +9,10 @@
 import { type } from "arktype";
 import { reportError } from "@corbits/error-sink";
 
-import {
-  postExchangeRequest,
-  type OAuthExchangeFetch,
-} from "./oauth-exchange-fetch";
+import { postExchangeRequest, type OAuthExchangeFetch } from "./oauth-exchange-fetch";
 
 export const OPENROUTER_AUTH_URL = "https://openrouter.ai/auth";
-export const OPENROUTER_KEY_EXCHANGE_URL =
-  "https://openrouter.ai/api/v1/auth/keys";
+export const OPENROUTER_KEY_EXCHANGE_URL = "https://openrouter.ai/api/v1/auth/keys";
 
 /** OpenRouter authorization codes expire in 10 minutes; a pending
  * connect is worthless after that, so its state is too. */
@@ -42,9 +38,7 @@ export type ExchangeCodeForKeyArgs = {
  * the key — there is no path on which key material reaches a log line
  * or an error string.
  */
-export async function exchangeCodeForKey(
-  args: ExchangeCodeForKeyArgs,
-): Promise<ExchangeResult> {
+export async function exchangeCodeForKey(args: ExchangeCodeForKeyArgs): Promise<ExchangeResult> {
   const doFetch = args.fetchImpl ?? fetch;
   let response: Response;
   try {
diff --git a/packages/connections/src/persist-credential.test.ts b/packages/connections/src/persist-credential.test.ts
index b65acb40c2..192a1a9935 100644
--- a/packages/connections/src/persist-credential.test.ts
+++ b/packages/connections/src/persist-credential.test.ts
@@ -4,11 +4,7 @@
 // that crashed the hosted one-click connect when three parallel copies
 // of this sequence disagreed.
 import { describe, expect, test } from "bun:test";
-import type {
-  EnsureCredentialArgs,
-  EnsureProviderArgs,
-  SeedCatalogArgs,
-} from "./seed-catalog";
+import type { EnsureCredentialArgs, EnsureProviderArgs, SeedCatalogArgs } from "./seed-catalog";
 import type { ConnectorDescriptor } from "./descriptor";
 import {
   isInferenceProvider,
@@ -84,19 +80,11 @@ function recordingFns() {
     credentials,
     seeds,
     fns: {
-      ensureProviderFn: async (
-        _api: unknown,
-        _cookies: string[],
-        args: EnsureProviderArgs,
-      ) => {
+      ensureProviderFn: async (_api: unknown, _cookies: string[], args: EnsureProviderArgs) => {
         providers.push(args);
         return `prv_${args.name}`;
       },
-      ensureCredentialFn: async (
-        _api: unknown,
-        _cookies: string[],
-        args: EnsureCredentialArgs,
-      ) => {
+      ensureCredentialFn: async (_api: unknown, _cookies: string[], args: EnsureCredentialArgs) => {
         credentials.push(args);
         return `cred_${args.providerId}`;
       },
@@ -127,9 +115,7 @@ describe("persistConnectorCredential", () => {
       ...fns,
     });
 
-    expect(providers).toEqual([
-      { tenantId: "tnt_1", name: "github", plugin: "http" },
-    ]);
+    expect(providers).toEqual([{ tenantId: "tnt_1", name: "github", plugin: "http" }]);
     expect(credentials).toEqual([
       {
         tenantId: "tnt_1",
@@ -269,10 +255,9 @@ test("a refresh secret rides into the credential row alongside oauth_token typin
 });
 
 test("persist does not take a credentialCipher — wiring is asserted at tag construction and hub boot, not per persist", () => {
-  type PersistHasCipher =
-    "credentialCipher" extends keyof PersistConnectorCredentialArgs
-      ? true
-      : false;
+  type PersistHasCipher = "credentialCipher" extends keyof PersistConnectorCredentialArgs
+    ? true
+    : false;
   const persistHasCipher: PersistHasCipher = false;
   expect(persistHasCipher).toBe(false);
 });
diff --git a/packages/connections/src/persist-credential.ts b/packages/connections/src/persist-credential.ts
index 66c3166db2..ebc2d19a4a 100644
--- a/packages/connections/src/persist-credential.ts
+++ b/packages/connections/src/persist-credential.ts
@@ -14,10 +14,7 @@
 // Plugins gallery's resolver looks up. `seedCatalog` is passed that same
 // `credentialName` so its own internal `ensureCredential` resolves to
 // the row planted here rather than a second `<provider>-default` row.
-import {
-  PROVIDER_TEST_CONFIG,
-  type SupportedCredentialProvider,
-} from "./credential-test";
+import { PROVIDER_TEST_CONFIG, type SupportedCredentialProvider } from "./credential-test";
 import {
   ensureCredential,
   ensureProvider,
@@ -29,9 +26,7 @@ import {
 import type { ApiCall } from "@corbits/hub-api-client";
 import type { ConnectorDescriptor } from "./descriptor";
 
-export function isInferenceProvider(
-  id: string,
-): id is SupportedCredentialProvider {
+export function isInferenceProvider(id: string): id is SupportedCredentialProvider {
   return Object.hasOwn(PROVIDER_TEST_CONFIG, id);
 }
 
@@ -50,9 +45,7 @@ export type PersistConnectorCredentialFns = {
     args: EnsureCredentialArgs,
     log: (line: string) => void,
   ) => ReturnType<typeof ensureCredential>;
-  readonly seedCatalogFn?: (
-    args: SeedCatalogArgs,
-  ) => ReturnType<typeof seedCatalog>;
+  readonly seedCatalogFn?: (args: SeedCatalogArgs) => ReturnType<typeof seedCatalog>;
 };
 
 export type PersistConnectorCredentialArgs = PersistConnectorCredentialFns & {
@@ -87,9 +80,7 @@ export type PersistConnectorCredentialArgs = PersistConnectorCredentialFns & {
   readonly log: (line: string) => void;
 };
 
-export async function persistConnectorCredential(
-  args: PersistConnectorCredentialArgs,
-): Promise<{
+export async function persistConnectorCredential(args: PersistConnectorCredentialArgs): Promise<{
   credentialId: string;
   /** The catalog seed's own report (CL-6351's model-capability read
    * included) — absent for a non-inference connector, which never
@@ -100,9 +91,7 @@ export async function persistConnectorCredential(
   const runEnsureCredential = args.ensureCredentialFn ?? ensureCredential;
   const runSeedCatalog = args.seedCatalogFn ?? seedCatalog;
   const credentialType =
-    args.credentialMetadata !== undefined
-      ? ("oauth_token" as const)
-      : ("api_key" as const);
+    args.credentialMetadata !== undefined ? ("oauth_token" as const) : ("api_key" as const);
 
   const providerArgs: EnsureProviderArgs =
     args.baseURLOverride !== undefined
@@ -124,12 +113,7 @@ export async function persistConnectorCredential(
             name: args.descriptor.id,
             plugin: args.descriptor.credentialPlugin,
           };
-  const providerId = await runEnsureProvider(
-    args.api,
-    args.cookies,
-    providerArgs,
-    args.log,
-  );
+  const providerId = await runEnsureProvider(args.api, args.cookies, providerArgs, args.log);
 
   const credentialArgs: EnsureCredentialArgs =
     args.credentialMetadata !== undefined
@@ -141,12 +125,8 @@ export async function persistConnectorCredential(
           type: credentialType,
           verified: true,
           metadata: args.credentialMetadata,
-          ...(args.refreshSecret !== undefined
-            ? { refreshSecret: args.refreshSecret }
-            : {}),
-          ...(args.expiresAt !== undefined
-            ? { expiresAt: args.expiresAt }
-            : {}),
+          ...(args.refreshSecret !== undefined ? { refreshSecret: args.refreshSecret } : {}),
+          ...(args.expiresAt !== undefined ? { expiresAt: args.expiresAt } : {}),
         }
       : {
           tenantId: args.tenantId,
@@ -156,12 +136,7 @@ export async function persistConnectorCredential(
           type: credentialType,
           verified: true,
         };
-  const credentialId = await runEnsureCredential(
-    args.api,
-    args.cookies,
-    credentialArgs,
-    args.log,
-  );
+  const credentialId = await runEnsureCredential(args.api, args.cookies, credentialArgs, args.log);
 
   // An inference provider connected anywhere must become usable, not
   // just stored: plant its curated model catalog so the models show up
diff --git a/packages/connections/src/pkce.test.ts b/packages/connections/src/pkce.test.ts
index 8aa57c3c7c..52ceb09a1b 100644
--- a/packages/connections/src/pkce.test.ts
+++ b/packages/connections/src/pkce.test.ts
@@ -9,11 +9,7 @@ import { describe, expect, test } from "bun:test";
 import { type } from "arktype";
 import { createEnvKeyCredentialCipher } from "@intx/crypto";
 import type { CredentialCipher } from "@intx/types";
-import {
-  createConnectStateStore,
-  generatePKCEPair,
-  s256Challenge,
-} from "./pkce";
+import { createConnectStateStore, generatePKCEPair, s256Challenge } from "./pkce";
 
 // A stable 32-byte test key, standing in for `CREDENTIAL_ENCRYPTION_KEY`.
 // Two ciphers built from the same key bytes behave like one cipher
@@ -37,9 +33,9 @@ describe("generatePKCEPair", () => {
   });
 
   test("s256Challenge matches the RFC 7636 appendix vector", async () => {
-    expect(
-      await s256Challenge("dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk"),
-    ).toBe("E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM");
+    expect(await s256Challenge("dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk")).toBe(
+      "E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM",
+    );
   });
 
   test("every pair is fresh", async () => {
@@ -131,9 +127,7 @@ describe("createConnectStateStore", () => {
 
   test("an unknown state yields nothing", async () => {
     const store = verifierStore();
-    expect(
-      await store.consume({ state: "never-issued", userId: "user_1" }),
-    ).toBeUndefined();
+    expect(await store.consume({ state: "never-issued", userId: "user_1" })).toBeUndefined();
   });
 
   test("an expired state yields nothing", async () => {
@@ -165,9 +159,7 @@ describe("createConnectStateStore", () => {
       payload: { codeVerifier: "v1" },
     });
 
-    expect(
-      await huggingfaceStore.consume({ state, userId: "user_1" }),
-    ).toBeUndefined();
+    expect(await huggingfaceStore.consume({ state, userId: "user_1" })).toBeUndefined();
     // The rightful provider can still redeem it — the cross-provider
     // attempt didn't burn it (it never decrypted under that provider's
     // AAD in the first place).
diff --git a/packages/connections/src/pkce.ts b/packages/connections/src/pkce.ts
index 9817f92524..5ef3b3f8b0 100644
--- a/packages/connections/src/pkce.ts
+++ b/packages/connections/src/pkce.ts
@@ -30,10 +30,7 @@ import type { CredentialCipher } from "@intx/types";
 function base64url(bytes: Uint8Array): string {
   let binary = "";
   for (const byte of bytes) binary += String.fromCharCode(byte);
-  return btoa(binary)
-    .replaceAll("+", "-")
-    .replaceAll("/", "_")
-    .replace(/=+$/, "");
+  return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
 }
 
 /** 43 base64url chars from 32 random bytes — the entropy grade shared
@@ -57,10 +54,7 @@ export async function generatePKCEPair(): Promise<PKCEPair> {
 }
 
 export async function s256Challenge(codeVerifier: string): Promise<string> {
-  const digest = await crypto.subtle.digest(
-    "SHA-256",
-    new TextEncoder().encode(codeVerifier),
-  );
+  const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(codeVerifier));
   return base64url(new Uint8Array(digest));
 }
 
@@ -84,10 +78,7 @@ export type ConnectStateStore<Payload> = {
   /** Returns the payload exactly once; a second consume, a wrong user,
    * an expired state, a state sealed for a different provider, or a
    * payload `parsePayload` refuses all come back undefined. */
-  consume(args: {
-    state: string;
-    userId: string;
-  }): Promise<Payload | undefined>;
+  consume(args: { state: string; userId: string }): Promise<Payload | undefined>;
 };
 
 export function createConnectStateStore<Payload>(args: {
diff --git a/packages/connections/src/plugins.test.ts b/packages/connections/src/plugins.test.ts
index 6da8fc3646..e9230642be 100644
--- a/packages/connections/src/plugins.test.ts
+++ b/packages/connections/src/plugins.test.ts
@@ -42,9 +42,7 @@ const json = (body: unknown, status = 200) =>
     headers: { "content-type": "application/json" },
   });
 
-function stubFetch(
-  byName: Readonly<Record<string, Response | (() => Response)>>,
-): void {
+function stubFetch(byName: Readonly<Record<string, Response | (() => Response)>>): void {
   globalThis.fetch = (async (input: string) => {
     const url = new URL(input, "https://workbench.test");
     const match = /\/credentials\/resolve\/([^/]+)$/.exec(url.pathname);
@@ -142,8 +140,6 @@ describe("listPluginsForTenant", () => {
 
     const resolved = await listPluginsForTenant("bench_1", TEST_REGISTRY);
 
-    expect(
-      resolved.some((entry) => entry.descriptor.id === "granola-webhook"),
-    ).toBe(false);
+    expect(resolved.some((entry) => entry.descriptor.id === "granola-webhook")).toBe(false);
   });
 });
diff --git a/packages/connections/src/probes.test.ts b/packages/connections/src/probes.test.ts
index 27d1fce2a8..c8b16ae5db 100644
--- a/packages/connections/src/probes.test.ts
+++ b/packages/connections/src/probes.test.ts
@@ -70,10 +70,7 @@ describe("testExaCredential", () => {
 
 describe("testScrapeCreatorsCredential", () => {
   test("rejects a 401", async () => {
-    const result = await testScrapeCreatorsCredential(
-      "test-key",
-      fakeFetch(401),
-    );
+    const result = await testScrapeCreatorsCredential("test-key", fakeFetch(401));
     expect(result.ok).toBe(false);
   });
 
@@ -120,11 +117,7 @@ describe("testGitHubCredential", () => {
         status: 200,
       });
     };
-    const result = await testGitHubCredential(
-      "test-key",
-      fetchImpl,
-      "http://fake-github.test",
-    );
+    const result = await testGitHubCredential("test-key", fetchImpl, "http://fake-github.test");
     expect(requested).toEqual(["http://fake-github.test/user"]);
     expect(result.ok).toBe(true);
   });
@@ -164,16 +157,12 @@ describe("testManusCredential", () => {
     const fetchImpl: FetchLike = async (input, init) => {
       requested.push({
         url: String(input),
-        key:
-          (init?.headers as Headers | undefined)?.get("x-manus-api-key") ??
-          null,
+        key: (init?.headers as Headers | undefined)?.get("x-manus-api-key") ?? null,
       });
       return new Response(JSON.stringify({ ok: true }), { status: 200 });
     };
     const result = await testManusCredential("manus_key", fetchImpl);
     expect(result.ok).toBe(true);
-    expect(requested).toEqual([
-      { url: "https://api.manus.ai/v2/skill.list", key: "manus_key" },
-    ]);
+    expect(requested).toEqual([{ url: "https://api.manus.ai/v2/skill.list", key: "manus_key" }]);
   });
 });
diff --git a/packages/connections/src/provider-health.test.ts b/packages/connections/src/provider-health.test.ts
index c26e5f10ee..cf7437c7c9 100644
--- a/packages/connections/src/provider-health.test.ts
+++ b/packages/connections/src/provider-health.test.ts
@@ -34,9 +34,7 @@ describe("isClassifiedInferenceFailure", () => {
 
 describe("createProviderHealthStore", () => {
   test("report marks a provider needs_attention with the given category and time", () => {
-    const store = createProviderHealthStore(
-      () => new Date("2026-08-15T00:00:00.000Z"),
-    );
+    const store = createProviderHealthStore(() => new Date("2026-08-15T00:00:00.000Z"));
     store.report("bench_1", "anthropic", "credential_failure");
     expect(store.get("bench_1", "anthropic")).toEqual({
       status: "needs_attention",
@@ -63,9 +61,7 @@ describe("createProviderHealthStore", () => {
   });
 
   test("a later report overwrites an earlier one for the same provider", () => {
-    const store = createProviderHealthStore(
-      () => new Date("2026-08-15T00:00:00.000Z"),
-    );
+    const store = createProviderHealthStore(() => new Date("2026-08-15T00:00:00.000Z"));
     store.report("bench_1", "anthropic", "credential_failure");
     store.report("bench_1", "anthropic", "quota_exhausted");
     expect(store.get("bench_1", "anthropic")?.category).toBe("quota_exhausted");
@@ -82,10 +78,7 @@ describe("createProviderHealthStore", () => {
     store.report("bench_1", "anthropic", "credential_failure");
     store.report("bench_1", "openai", "quota_exhausted");
     store.report("bench_2", "xai", "credential_failure");
-    expect(Object.keys(store.listForTenant("bench_1")).sort()).toEqual([
-      "anthropic",
-      "openai",
-    ]);
+    expect(Object.keys(store.listForTenant("bench_1")).sort()).toEqual(["anthropic", "openai"]);
   });
 
   test("listForTenant is empty for a tenant with no records", () => {
@@ -128,18 +121,13 @@ describe("fetchProviderHealth", () => {
     }) as unknown as typeof fetch;
 
     const snapshot = await fetchProviderHealth("bench_1");
-    expect(requestedUrl).toBe(
-      "/api/tenants/bench_1/connections/provider-health",
-    );
+    expect(requestedUrl).toBe("/api/tenants/bench_1/connections/provider-health");
     expect(snapshot.connectedProviderCount).toBe(1);
-    expect(snapshot.providers["anthropic"]?.category).toBe(
-      "credential_failure",
-    );
+    expect(snapshot.providers["anthropic"]?.category).toBe("credential_failure");
   });
 
   test("throws on a non-ok response", async () => {
-    globalThis.fetch = (async () =>
-      new Response(null, { status: 500 })) as unknown as typeof fetch;
+    globalThis.fetch = (async () => new Response(null, { status: 500 })) as unknown as typeof fetch;
     await expect(fetchProviderHealth("bench_1")).rejects.toThrow();
   });
 
diff --git a/packages/connections/src/provider-health.ts b/packages/connections/src/provider-health.ts
index b0ba95b2dc..6f62e7d59c 100644
--- a/packages/connections/src/provider-health.ts
+++ b/packages/connections/src/provider-health.ts
@@ -40,8 +40,7 @@ import { type } from "arktype";
  * connection problem or not durable enough to guide someone to Plugins
  * over — those turns already show their own error bubble in chat and
  * need no health signal. */
-export type ClassifiedInferenceFailureCategory =
-  "credential_failure" | "quota_exhausted";
+export type ClassifiedInferenceFailureCategory = "credential_failure" | "quota_exhausted";
 
 const CLASSIFIED_CATEGORIES: ReadonlySet<string> = new Set([
   "credential_failure",
@@ -63,11 +62,7 @@ export type ProviderHealthRecord = {
 export type ProviderHealthStore = {
   /** Marks `provider` unhealthy for `tenantId`, overwriting any prior
    * record (a newer failure's category/time always wins). */
-  report(
-    tenantId: string,
-    provider: string,
-    category: ClassifiedInferenceFailureCategory,
-  ): void;
+  report(tenantId: string, provider: string, category: ClassifiedInferenceFailureCategory): void;
   /** Clears a provider's unhealthy record — call only after a passing
    * credential test, never from a reply's prose. A no-op when the
    * provider was not marked unhealthy. */
@@ -75,14 +70,10 @@ export type ProviderHealthStore = {
   get(tenantId: string, provider: string): ProviderHealthRecord | undefined;
   /** Every provider currently marked unhealthy for `tenantId`, keyed by
    * provider id. */
-  listForTenant(
-    tenantId: string,
-  ): Readonly<Record<string, ProviderHealthRecord>>;
+  listForTenant(tenantId: string): Readonly<Record<string, ProviderHealthRecord>>;
 };
 
-export function createProviderHealthStore(
-  now: () => Date = () => new Date(),
-): ProviderHealthStore {
+export function createProviderHealthStore(now: () => Date = () => new Date()): ProviderHealthStore {
   const byTenant = new Map<string, Map<string, ProviderHealthRecord>>();
 
   function tenantMap(tenantId: string): Map<string, ProviderHealthRecord> {
@@ -129,9 +120,7 @@ export type ProviderHealthPort = {
   }): void;
 };
 
-export function createProviderHealthPort(
-  store: ProviderHealthStore,
-): ProviderHealthPort {
+export function createProviderHealthPort(store: ProviderHealthStore): ProviderHealthPort {
   return {
     reportInferenceFailure({ tenantId, provider, category }) {
       store.report(tenantId, provider, category);
@@ -168,30 +157,23 @@ const ProviderHealthSnapshotEnvelope = type({
  * `report`/`ProviderHealthPort` write through, so a response that ever
  * carried a provider's raw prose (or anything else the enum doesn't
  * name) throws here instead of silently reaching the banner. */
-export async function fetchProviderHealth(
-  tenantId: string,
-): Promise<ProviderHealthSnapshot> {
-  const response = await fetch(
-    `/api/tenants/${tenantId}/connections/provider-health`,
-    { headers: { accept: "application/json" } },
-  );
+export async function fetchProviderHealth(tenantId: string): Promise<ProviderHealthSnapshot> {
+  const response = await fetch(`/api/tenants/${tenantId}/connections/provider-health`, {
+    headers: { accept: "application/json" },
+  });
   if (!response.ok) {
     throw new Error(`Failed to load provider health (${response.status})`);
   }
   const json: unknown = await response.json();
   const envelope = ProviderHealthSnapshotEnvelope(json);
   if (envelope instanceof type.errors) {
-    throw new Error(
-      `Unexpected provider-health response shape: ${envelope.summary}`,
-    );
+    throw new Error(`Unexpected provider-health response shape: ${envelope.summary}`);
   }
   const providers: Record<string, ProviderHealthRecord> = {};
   for (const [provider, value] of Object.entries(envelope.providers)) {
     const record = ProviderHealthRecordSchema(value);
     if (record instanceof type.errors) {
-      throw new Error(
-        `Unexpected provider-health record shape for ${provider}: ${record.summary}`,
-      );
+      throw new Error(`Unexpected provider-health record shape for ${provider}: ${record.summary}`);
     }
     providers[provider] = record;
   }
diff --git a/packages/connections/src/registry.test.ts b/packages/connections/src/registry.test.ts
index c34e835c2a..86f090f630 100644
--- a/packages/connections/src/registry.test.ts
+++ b/packages/connections/src/registry.test.ts
@@ -80,9 +80,7 @@ describe("CONNECTOR_REGISTRY", () => {
 
   test("only Hugging Face requires a configured client id", () => {
     expect(CONNECTOR_REGISTRY["openrouter"]?.oauth?.clientId).toBeUndefined();
-    expect(
-      CONNECTOR_REGISTRY["huggingface"]?.oauth?.clientId?.({}),
-    ).toBeUndefined();
+    expect(CONNECTOR_REGISTRY["huggingface"]?.oauth?.clientId?.({})).toBeUndefined();
     expect(
       CONNECTOR_REGISTRY["huggingface"]?.oauth?.clientId?.({
         huggingfaceClientId: "hf_1",
@@ -142,18 +140,14 @@ describe("CONNECTOR_REGISTRY", () => {
       clientId: "app_1",
     });
     expect(codexUrl?.origin).toBe("https://auth.openai.com");
-    expect(codexUrl?.searchParams.get("redirect_uri")).toBe(
-      "http://localhost:1455/auth/callback",
-    );
+    expect(codexUrl?.searchParams.get("redirect_uri")).toBe("http://localhost:1455/auth/callback");
     expect(codexUrl?.searchParams.get("originator")).toBe("codex_cli_rs");
     // Pinned against the upstream Codex CLI's scope grant — the
     // api.connectors.* scopes are what let the backend serve connector
     // tools to this client, and the authorization server issues them only
     // to the Codex client id. Asserted against the exported constant so
     // the descriptor cannot drift from the adapter's refresh path.
-    expect(codexUrl?.searchParams.get("scope")?.split(" ")).toEqual([
-      ...CODEX_SCOPES,
-    ]);
+    expect(codexUrl?.searchParams.get("scope")?.split(" ")).toEqual([...CODEX_SCOPES]);
 
     const xaiUrl = CONNECTOR_REGISTRY["xai-oauth"]?.oauth?.buildAuthorizeUrl({
       callbackUrl: "https://bench.example.com/ignored",
@@ -162,9 +156,7 @@ describe("CONNECTOR_REGISTRY", () => {
       clientId: "client_1",
     });
     expect(xaiUrl?.origin).toBe("https://auth.x.ai");
-    expect(xaiUrl?.searchParams.get("redirect_uri")).toBe(
-      "http://127.0.0.1:1456/callback",
-    );
+    expect(xaiUrl?.searchParams.get("redirect_uri")).toBe("http://127.0.0.1:1456/callback");
     expect(xaiUrl?.searchParams.get("scope")).toContain("grok-cli:access");
   });
 
@@ -219,32 +211,16 @@ describe("CONNECTOR_REGISTRY", () => {
   });
 
   test("includes the tool connectors with the right feedsTools", () => {
-    expect(CONNECTOR_REGISTRY["granola"]?.feedsTools).toEqual([
-      "@corbits/granola-tools",
-    ]);
-    expect(CONNECTOR_REGISTRY["manus"]?.feedsTools).toEqual([
-      "@corbits/manus-tools",
-    ]);
-    expect(CONNECTOR_REGISTRY["manus"]?.credentialPlugin).toBe(
-      "http-x-manus-api-key",
-    );
+    expect(CONNECTOR_REGISTRY["granola"]?.feedsTools).toEqual(["@corbits/granola-tools"]);
+    expect(CONNECTOR_REGISTRY["manus"]?.feedsTools).toEqual(["@corbits/manus-tools"]);
+    expect(CONNECTOR_REGISTRY["manus"]?.credentialPlugin).toBe("http-x-manus-api-key");
     expect(CONNECTOR_REGISTRY["manus"]?.authKind).toBe("api-key");
     expect(CONNECTOR_REGISTRY["manus"]?.icon).toBeUndefined();
-    expect(CONNECTOR_REGISTRY["exa"]?.feedsTools).toEqual([
-      "@corbits/web-search-tools",
-    ]);
-    expect(CONNECTOR_REGISTRY["scrapecreators"]?.feedsTools).toEqual([
-      "@corbits/reddit-tools",
-    ]);
-    expect(CONNECTOR_REGISTRY["scrapecreators"]?.displayName).toBe(
-      "ScrapeCreators",
-    );
-    expect(CONNECTOR_REGISTRY["linear"]?.feedsTools).toEqual([
-      "@corbits/linear-tools",
-    ]);
-    expect(CONNECTOR_REGISTRY["github"]?.feedsTools).toEqual([
-      "@corbits/github-tools",
-    ]);
+    expect(CONNECTOR_REGISTRY["exa"]?.feedsTools).toEqual(["@corbits/web-search-tools"]);
+    expect(CONNECTOR_REGISTRY["scrapecreators"]?.feedsTools).toEqual(["@corbits/reddit-tools"]);
+    expect(CONNECTOR_REGISTRY["scrapecreators"]?.displayName).toBe("ScrapeCreators");
+    expect(CONNECTOR_REGISTRY["linear"]?.feedsTools).toEqual(["@corbits/linear-tools"]);
+    expect(CONNECTOR_REGISTRY["github"]?.feedsTools).toEqual(["@corbits/github-tools"]);
   });
 });
 
@@ -267,16 +243,10 @@ describe("connectorDescriptors", () => {
   });
 
   test("each connector mediates through the header plugin its API actually expects", () => {
-    expect(CONNECTOR_REGISTRY["linear"]?.credentialPlugin).toBe(
-      "http-raw-authorization",
-    );
+    expect(CONNECTOR_REGISTRY["linear"]?.credentialPlugin).toBe("http-raw-authorization");
     expect(CONNECTOR_REGISTRY["exa"]?.credentialPlugin).toBe("http-x-api-key");
-    expect(CONNECTOR_REGISTRY["scrapecreators"]?.credentialPlugin).toBe(
-      "http-x-api-key",
-    );
-    expect(CONNECTOR_REGISTRY["manus"]?.credentialPlugin).toBe(
-      "http-x-manus-api-key",
-    );
+    expect(CONNECTOR_REGISTRY["scrapecreators"]?.credentialPlugin).toBe("http-x-api-key");
+    expect(CONNECTOR_REGISTRY["manus"]?.credentialPlugin).toBe("http-x-manus-api-key");
     const nonBearer = new Set(["linear", "exa", "scrapecreators", "manus"]);
     for (const [id, descriptor] of Object.entries(CONNECTOR_REGISTRY)) {
       if (nonBearer.has(id)) continue;
@@ -291,12 +261,8 @@ describe("gmail connector", () => {
     expect(descriptor?.authKind).toBe("oauth-code");
     expect(descriptor?.credentialPlugin).toBe("http");
     expect(descriptor?.oauth).toBeDefined();
-    expect(descriptor?.oauth?.clientId?.({ gmailClientId: "client-1" })).toBe(
-      "client-1",
-    );
-    expect(
-      descriptor?.oauth?.clientSecret?.({ gmailClientSecret: "secret-1" }),
-    ).toBe("secret-1");
+    expect(descriptor?.oauth?.clientId?.({ gmailClientId: "client-1" })).toBe("client-1");
+    expect(descriptor?.oauth?.clientSecret?.({ gmailClientSecret: "secret-1" })).toBe("secret-1");
     expect(descriptor?.oauth?.clientId?.({})).toBeUndefined();
   });
 
@@ -311,9 +277,7 @@ describe("gmail connector", () => {
     if (url === undefined) throw new Error("no authorize url");
     expect(url.origin).toBe("https://accounts.google.com");
     expect(url.searchParams.get("client_id")).toBe("client-1");
-    expect(url.searchParams.get("redirect_uri")).toBe(
-      "https://bench.example.com/callback",
-    );
+    expect(url.searchParams.get("redirect_uri")).toBe("https://bench.example.com/callback");
     expect(url.searchParams.get("response_type")).toBe("code");
     expect(url.searchParams.get("scope")).toContain("gmail");
     expect(url.searchParams.get("state")).toBe("state-1");
@@ -349,9 +313,7 @@ describe("MCP_PRESETS", () => {
 
   test("Exa is keyless, GitHub MCP is token, every other preset uses OAuth", () => {
     expect(mcpPresetBySlug(MCP_PRESETS, "exa")?.connectionMode).toBe("keyless");
-    expect(mcpPresetBySlug(MCP_PRESETS, "github-mcp")?.connectionMode).toBe(
-      "token",
-    );
+    expect(mcpPresetBySlug(MCP_PRESETS, "github-mcp")?.connectionMode).toBe("token");
     for (const preset of MCP_PRESETS) {
       if (preset.slug === "exa" || preset.slug === "github-mcp") continue;
       expect(preset.connectionMode).toBe("oauth");
@@ -378,20 +340,12 @@ describe("MCP_PRESETS", () => {
   });
 
   test("uses Sumble's OAuth MCP host, not its product-page URL", () => {
-    expect(mcpPresetBySlug(MCP_PRESETS, "sumble")?.url).toBe(
-      "https://mcp.sumble.com/",
-    );
-    expect(mcpPresetBySlug(MCP_PRESETS, "sumble")?.connectionMode).toBe(
-      "oauth",
-    );
+    expect(mcpPresetBySlug(MCP_PRESETS, "sumble")?.url).toBe("https://mcp.sumble.com/");
+    expect(mcpPresetBySlug(MCP_PRESETS, "sumble")?.connectionMode).toBe("oauth");
   });
 
   test("keeps every verified endpoint exact", () => {
-    expect(
-      Object.fromEntries(
-        MCP_PRESETS.map((preset) => [preset.slug, preset.url]),
-      ),
-    ).toEqual({
+    expect(Object.fromEntries(MCP_PRESETS.map((preset) => [preset.slug, preset.url]))).toEqual({
       granola: "https://mcp.granola.ai/mcp",
       exa: "https://mcp.exa.ai/mcp",
       "github-mcp": "https://api.githubcopilot.com/mcp/",
@@ -414,9 +368,7 @@ describe("MCP_PRESETS", () => {
   });
 
   test("MCP_PRESET_CONNECTOR_IDS matches the presets' native ids", () => {
-    expect(new Set(MCP_PRESET_CONNECTOR_IDS)).toEqual(
-      new Set(["granola", "exa", "linear"]),
-    );
+    expect(new Set(MCP_PRESET_CONNECTOR_IDS)).toEqual(new Set(["granola", "exa", "linear"]));
   });
 
   test("mcpPresetByName resolves by slug or display name, case-insensitively", () => {
diff --git a/packages/connections/src/registry.ts b/packages/connections/src/registry.ts
index 051bcf6615..03ad12bec3 100644
--- a/packages/connections/src/registry.ts
+++ b/packages/connections/src/registry.ts
@@ -36,11 +36,7 @@ import {
   HUGGINGFACE_AUTHORIZE_URL,
   HUGGINGFACE_SCOPE,
 } from "./huggingface-connect";
-import {
-  exchangeCodeForGoogleToken,
-  GMAIL_SCOPE,
-  GOOGLE_AUTHORIZE_URL,
-} from "./gmail-connect";
+import { exchangeCodeForGoogleToken, GMAIL_SCOPE, GOOGLE_AUTHORIZE_URL } from "./gmail-connect";
 // simple-icons ships one brand per named export, tree-shaken by any bundler
 // that respects its `sideEffects: false` — importing only the brands this
 // registry actually has a listing for pulls in only those icons' data, not
@@ -82,10 +78,7 @@ import {
   XAI_TOKEN_URL,
 } from "@corbits/xai-provider/constants";
 import { exchangeCodeForKey, OPENROUTER_AUTH_URL } from "./openrouter-connect";
-import {
-  exchangeCodeForGithubToken,
-  GITHUB_AUTHORIZE_URL,
-} from "./github-connect";
+import { exchangeCodeForGithubToken, GITHUB_AUTHORIZE_URL } from "./github-connect";
 import {
   testExaCredential,
   testGitHubCredential,
@@ -106,9 +99,7 @@ export function createConnectorRegistry(
   return connectors;
 }
 
-export function connectorDescriptors(
-  registry: ConnectorRegistry,
-): readonly ConnectorDescriptor[] {
+export function connectorDescriptors(registry: ConnectorRegistry): readonly ConnectorDescriptor[] {
   return Object.values(registry);
 }
 
@@ -123,9 +114,10 @@ function chatgptAccountIdFromIdToken(idToken: string): string | undefined {
   let claims: Record<string, unknown>;
   try {
     const base64 = payload.replaceAll("-", "+").replaceAll("_", "/");
-    claims = JSON.parse(
-      atob(base64.padEnd(Math.ceil(base64.length / 4) * 4, "=")),
-    ) as Record<string, unknown>;
+    claims = JSON.parse(atob(base64.padEnd(Math.ceil(base64.length / 4) * 4, "="))) as Record<
+      string,
+      unknown
+    >;
   } catch {
     // report-error-ignore: a malformed id_token payload degrades to "no
     // account id", never an incident.
@@ -135,20 +127,14 @@ function chatgptAccountIdFromIdToken(idToken: string): string | undefined {
     return claims.chatgpt_account_id;
   }
   const auth: unknown = claims["https://api.openai.com/auth"];
-  if (
-    typeof auth === "object" &&
-    auth !== null &&
-    "chatgpt_account_id" in auth
-  ) {
+  if (typeof auth === "object" && auth !== null && "chatgpt_account_id" in auth) {
     const nested = auth.chatgpt_account_id;
     if (typeof nested === "string") return nested;
   }
   return undefined;
 }
 
-const INFERENCE_PROVIDER_DOCS_URL: Readonly<
-  Record<SupportedCredentialProvider, string>
-> = {
+const INFERENCE_PROVIDER_DOCS_URL: Readonly<Record<SupportedCredentialProvider, string>> = {
   anthropic: "https://console.anthropic.com/settings/keys",
   openai: "https://platform.openai.com/api-keys",
   "google-genai": "https://aistudio.google.com/apikey",
@@ -180,10 +166,7 @@ const EXA_ICON = {
 // four fall through to the monochrome initial tile every iconless
 // descriptor already gets.
 const INFERENCE_PROVIDER_ICONS: Partial<
-  Record<
-    SupportedCredentialProvider,
-    { readonly path: string; readonly hex: string }
-  >
+  Record<SupportedCredentialProvider, { readonly path: string; readonly hex: string }>
 > = {
   anthropic: { path: siAnthropic.path, hex: siAnthropic.hex },
   "google-genai": { path: siGooglegemini.path, hex: siGooglegemini.hex },
@@ -231,8 +214,7 @@ function inferenceProviderDescriptors(): Record<string, ConnectorDescriptor> {
             credentialPlugin: "http",
             docsUrl: INFERENCE_PROVIDER_DOCS_URL[providerId],
             feedsTools: [],
-            probe: (apiKey) =>
-              testProviderCredential({ provider: providerId, apiKey }),
+            probe: (apiKey) => testProviderCredential({ provider: providerId, apiKey }),
             ...(icon !== undefined ? { icon } : {}),
           };
   }
@@ -359,9 +341,7 @@ function inferenceProviderDescriptors(): Record<string, ConnectorDescriptor> {
           url.searchParams.set("code_challenge", codeChallenge);
         }
         url.searchParams.set("code_challenge_method", "S256");
-        for (const [name, value] of Object.entries(
-          CODEX_AUTHORIZE_EXTRA_PARAMS,
-        )) {
+        for (const [name, value] of Object.entries(CODEX_AUTHORIZE_EXTRA_PARAMS)) {
           url.searchParams.set(name, value);
         }
         return url;
@@ -407,9 +387,7 @@ function inferenceProviderDescriptors(): Record<string, ConnectorDescriptor> {
               : {}),
             ...(typeof tokens.expires_in === "number"
               ? {
-                  expiresAt: new Date(
-                    Date.now() + tokens.expires_in * 1000,
-                  ).toISOString(),
+                  expiresAt: new Date(Date.now() + tokens.expires_in * 1000).toISOString(),
                 }
               : {}),
             ...(accountId !== undefined ? { accountId } : {}),
@@ -487,9 +465,7 @@ function inferenceProviderDescriptors(): Record<string, ConnectorDescriptor> {
               : {}),
             ...(typeof tokens.expires_in === "number"
               ? {
-                  expiresAt: new Date(
-                    Date.now() + tokens.expires_in * 1000,
-                  ).toISOString(),
+                  expiresAt: new Date(Date.now() + tokens.expires_in * 1000).toISOString(),
                 }
               : {}),
           };
@@ -527,8 +503,7 @@ export const CONNECTOR_REGISTRY: ConnectorRegistry = createConnectorRegistry({
     docsUrl: "https://open.manus.ai/docs/v2/introduction",
     feedsTools: ["@corbits/manus-tools"],
     probe: (apiKey) => testManusCredential(apiKey),
-    description:
-      "Have Manus run tasks and produce files — including slide decks.",
+    description: "Have Manus run tasks and produce files — including slide decks.",
   },
   exa: {
     id: "exa",
@@ -608,13 +583,7 @@ export const CONNECTOR_REGISTRY: ConnectorRegistry = createConnectorRegistry({
         }
         return url;
       },
-      exchange: async ({
-        code,
-        codeVerifier,
-        redirectUri,
-        clientId,
-        clientSecret,
-      }) => {
+      exchange: async ({ code, codeVerifier, redirectUri, clientId, clientSecret }) => {
         if (clientId === undefined || clientSecret === undefined) {
           return {
             ok: false,
@@ -649,8 +618,7 @@ export const CONNECTOR_REGISTRY: ConnectorRegistry = createConnectorRegistry({
     authKind: "api-key",
     docsUrl: "https://github.com/settings/tokens",
     feedsTools: ["@corbits/github-tools"],
-    probe: (apiKey, opts) =>
-      testGitHubCredential(apiKey, undefined, opts?.baseUrl),
+    probe: (apiKey, opts) => testGitHubCredential(apiKey, undefined, opts?.baseUrl),
     description: "Read repos, issues, and pull requests.",
     icon: { path: siGithub.path, hex: siGithub.hex },
     oauth: {
diff --git a/packages/connections/src/routes.test.ts b/packages/connections/src/routes.test.ts
index 222e11e454..ada5fa49e0 100644
--- a/packages/connections/src/routes.test.ts
+++ b/packages/connections/src/routes.test.ts
@@ -125,8 +125,7 @@ const FAKE_REGISTRY: Readonly<Record<string, ConnectorDescriptor>> = {
       echoesState: true,
       deploysDefaultWorkflows: true,
       clientId: () => "public-client-id",
-      buildAuthorizeUrl: ({ state }) =>
-        new URL(`https://example.test/authorize?state=${state}`),
+      buildAuthorizeUrl: ({ state }) => new URL(`https://example.test/authorize?state=${state}`),
       exchange: async () => ({ ok: true, apiKey: "unused" }),
     },
   },
@@ -148,32 +147,18 @@ function mountAs(routes: Hono<TenantEnv>): Hono<TenantEnv> {
 function buildApp(
   overrides: {
     requireGrant?: RequireGrant;
-    ensureProviderFn?: Parameters<
-      typeof createConnectionRoutes
-    >[0]["ensureProviderFn"];
-    ensureCredentialFn?: Parameters<
-      typeof createConnectionRoutes
-    >[0]["ensureCredentialFn"];
-    seedCatalogFn?: Parameters<
-      typeof createConnectionRoutes
-    >[0]["seedCatalogFn"];
-    disconnectConnectorFn?: Parameters<
-      typeof createConnectionRoutes
-    >[0]["disconnectConnectorFn"];
+    ensureProviderFn?: Parameters<typeof createConnectionRoutes>[0]["ensureProviderFn"];
+    ensureCredentialFn?: Parameters<typeof createConnectionRoutes>[0]["ensureCredentialFn"];
+    seedCatalogFn?: Parameters<typeof createConnectionRoutes>[0]["seedCatalogFn"];
+    disconnectConnectorFn?: Parameters<typeof createConnectionRoutes>[0]["disconnectConnectorFn"];
     oauthEnv?: Readonly<Record<string, string | undefined>>;
-    providerHealth?: Parameters<
-      typeof createConnectionRoutes
-    >[0]["providerHealth"];
-    listConnectedProviders?: Parameters<
-      typeof createConnectionRoutes
-    >[0]["listConnectedProviders"];
+    providerHealth?: Parameters<typeof createConnectionRoutes>[0]["providerHealth"];
+    listConnectedProviders?: Parameters<typeof createConnectionRoutes>[0]["listConnectedProviders"];
     onConnected?: Parameters<typeof createConnectionRoutes>[0]["onConnected"];
     onInferenceCredentialUsable?: Parameters<
       typeof createConnectionRoutes
     >[0]["onInferenceCredentialUsable"];
-    getResolvedCatalogFn?: Parameters<
-      typeof createConnectionRoutes
-    >[0]["getResolvedCatalogFn"];
+    getResolvedCatalogFn?: Parameters<typeof createConnectionRoutes>[0]["getResolvedCatalogFn"];
   } = {},
 ) {
   const routeArgs: Parameters<typeof createConnectionRoutes>[0] = {
@@ -186,20 +171,16 @@ function buildApp(
     routeArgs.ensureProviderFn = overrides.ensureProviderFn;
   if (overrides.ensureCredentialFn !== undefined)
     routeArgs.ensureCredentialFn = overrides.ensureCredentialFn;
-  if (overrides.seedCatalogFn !== undefined)
-    routeArgs.seedCatalogFn = overrides.seedCatalogFn;
+  if (overrides.seedCatalogFn !== undefined) routeArgs.seedCatalogFn = overrides.seedCatalogFn;
   if (overrides.disconnectConnectorFn !== undefined)
     routeArgs.disconnectConnectorFn = overrides.disconnectConnectorFn;
   if (overrides.oauthEnv !== undefined) routeArgs.oauthEnv = overrides.oauthEnv;
-  if (overrides.providerHealth !== undefined)
-    routeArgs.providerHealth = overrides.providerHealth;
+  if (overrides.providerHealth !== undefined) routeArgs.providerHealth = overrides.providerHealth;
   if (overrides.listConnectedProviders !== undefined)
     routeArgs.listConnectedProviders = overrides.listConnectedProviders;
-  if (overrides.onConnected !== undefined)
-    routeArgs.onConnected = overrides.onConnected;
+  if (overrides.onConnected !== undefined) routeArgs.onConnected = overrides.onConnected;
   if (overrides.onInferenceCredentialUsable !== undefined)
-    routeArgs.onInferenceCredentialUsable =
-      overrides.onInferenceCredentialUsable;
+    routeArgs.onInferenceCredentialUsable = overrides.onInferenceCredentialUsable;
   if (overrides.getResolvedCatalogFn !== undefined)
     routeArgs.getResolvedCatalogFn = overrides.getResolvedCatalogFn;
   const routes = createConnectionRoutes(routeArgs);
@@ -504,9 +485,7 @@ describe("POST /:connectorId/complete", () => {
       baseURLOverride?: string;
     };
     expect(args.provider).toBe("ollama");
-    expect(args.baseURLOverride).toBe(
-      "https://home-mac-studio.tail87f5aa.ts.net",
-    );
+    expect(args.baseURLOverride).toBe("https://home-mac-studio.tail87f5aa.ts.net");
     // Ollama has no auth layer of its own -- the fixed placeholder
     // secret is what gets stored/seeded, never the URL itself.
     expect(args.apiKey).toBe("ollama");
@@ -669,8 +648,7 @@ describe("POST /:connectorId/complete", () => {
       operation: "persist_api_key_connection",
       extra: { connectorId: "accepting-connector" },
     });
-    const extra = report.mock.calls[0]?.[1]?.extra as
-      Record<string, unknown> | undefined;
+    const extra = report.mock.calls[0]?.[1]?.extra as Record<string, unknown> | undefined;
     expect(JSON.stringify(extra)).not.toContain("good-key");
     report.mockRestore();
   });
@@ -739,11 +717,7 @@ describe("POST /:connectorId/complete", () => {
 
   test("a passing probe clears any needs_attention record for that connector", async () => {
     const providerHealth = createProviderHealthStore();
-    providerHealth.report(
-      TENANT.id,
-      "accepting-connector",
-      "credential_failure",
-    );
+    providerHealth.report(TENANT.id, "accepting-connector", "credential_failure");
     const app = buildApp({
       providerHealth,
       ensureProviderFn: async () => "prv_1",
@@ -754,9 +728,7 @@ describe("POST /:connectorId/complete", () => {
       headers: { "content-type": "application/json" },
       body: JSON.stringify({ apiKey: "good-key" }),
     });
-    expect(
-      providerHealth.get(TENANT.id, "accepting-connector"),
-    ).toBeUndefined();
+    expect(providerHealth.get(TENANT.id, "accepting-connector")).toBeUndefined();
   });
 
   // CL-6092: a storage failure after a passing probe must never clear a
@@ -764,11 +736,7 @@ describe("POST /:connectorId/complete", () => {
   // durable, so the record should survive for the next attempt to see.
   test("a storage failure after a passing probe leaves a prior needs_attention record standing", async () => {
     const providerHealth = createProviderHealthStore();
-    providerHealth.report(
-      TENANT.id,
-      "accepting-connector",
-      "credential_failure",
-    );
+    providerHealth.report(TENANT.id, "accepting-connector", "credential_failure");
     const app = buildApp({
       providerHealth,
       ensureProviderFn: async () => {
@@ -781,26 +749,19 @@ describe("POST /:connectorId/complete", () => {
       body: JSON.stringify({ apiKey: "good-key" }),
     });
     expect(response.status).toBe(500);
-    expect(providerHealth.get(TENANT.id, "accepting-connector")?.status).toBe(
-      "needs_attention",
-    );
+    expect(providerHealth.get(TENANT.id, "accepting-connector")?.status).toBe("needs_attention");
   });
 });
 
 describe("GET /provider-health", () => {
   test("reports every provider this tenant has marked needs_attention", async () => {
-    const providerHealth = createProviderHealthStore(
-      () => new Date("2026-08-15T00:00:00.000Z"),
-    );
+    const providerHealth = createProviderHealthStore(() => new Date("2026-08-15T00:00:00.000Z"));
     providerHealth.report(TENANT.id, "anthropic", "credential_failure");
     const app = buildApp({ providerHealth });
     const response = await app.request("/provider-health");
     expect(response.status).toBe(200);
     const body = (await response.json()) as {
-      providers: Record<
-        string,
-        { status: string; category: string; at: string }
-      >;
+      providers: Record<string, { status: string; category: string; at: string }>;
       connectedProviderCount?: number;
     };
     expect(body.providers["anthropic"]).toEqual({
@@ -903,28 +864,16 @@ describe("disconnectConnector", () => {
 
   test("an inference connector (catalog provider present) deletes the catalog provider before the credential provider, cascading offerings", async () => {
     const { api, calls } = fakeDisconnectAPI(({ method, path }) => {
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/catalog/providers`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/catalog/providers`) {
         return page([catalogProviderRow("mprv_1", "anthropic")]);
       }
-      if (
-        method === "DELETE" &&
-        path === `/api/tenants/${TENANT_ID}/catalog/providers/mprv_1`
-      ) {
+      if (method === "DELETE" && path === `/api/tenants/${TENANT_ID}/catalog/providers/mprv_1`) {
         return { status: 204, data: null };
       }
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/providers?inherited=false`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/providers?inherited=false`) {
         return page([providerRow("prv_1", "anthropic")]);
       }
-      if (
-        method === "DELETE" &&
-        path === `/api/tenants/${TENANT_ID}/providers/prv_1`
-      ) {
+      if (method === "DELETE" && path === `/api/tenants/${TENANT_ID}/providers/prv_1`) {
         return { status: 204, data: null };
       }
       return undefined;
@@ -939,8 +888,7 @@ describe("disconnectConnector", () => {
 
     expect(result.disconnected).toBe(true);
     const catalogDeleteIndex = calls.findIndex(
-      (call) =>
-        call.path === `/api/tenants/${TENANT_ID}/catalog/providers/mprv_1`,
+      (call) => call.path === `/api/tenants/${TENANT_ID}/catalog/providers/mprv_1`,
     );
     const providerDeleteIndex = calls.findIndex(
       (call) => call.path === `/api/tenants/${TENANT_ID}/providers/prv_1`,
@@ -951,22 +899,13 @@ describe("disconnectConnector", () => {
 
   test("a non-inference (MCP-style) connector with no catalog provider still removes its provider row", async () => {
     const { api } = fakeDisconnectAPI(({ method, path }) => {
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/catalog/providers`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/catalog/providers`) {
         return page([]);
       }
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/providers?inherited=false`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/providers?inherited=false`) {
         return page([providerRow("prv_exa", "exa")]);
       }
-      if (
-        method === "DELETE" &&
-        path === `/api/tenants/${TENANT_ID}/providers/prv_exa`
-      ) {
+      if (method === "DELETE" && path === `/api/tenants/${TENANT_ID}/providers/prv_exa`) {
         return { status: 204, data: null };
       }
       return undefined;
@@ -984,16 +923,10 @@ describe("disconnectConnector", () => {
 
   test("a connector with no provider row at all reports not disconnected, without attempting a delete", async () => {
     const { api, calls } = fakeDisconnectAPI(({ method, path }) => {
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/catalog/providers`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/catalog/providers`) {
         return page([]);
       }
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/providers?inherited=false`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/providers?inherited=false`) {
         return page([]);
       }
       return undefined;
@@ -1012,22 +945,13 @@ describe("disconnectConnector", () => {
 
   test("a concurrent disconnect (catalog provider DELETE 404s because a first call already removed it) resolves instead of throwing", async () => {
     const { api } = fakeDisconnectAPI(({ method, path }) => {
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/catalog/providers`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/catalog/providers`) {
         return page([catalogProviderRow("mprv_1", "anthropic")]);
       }
-      if (
-        method === "DELETE" &&
-        path === `/api/tenants/${TENANT_ID}/catalog/providers/mprv_1`
-      ) {
+      if (method === "DELETE" && path === `/api/tenants/${TENANT_ID}/catalog/providers/mprv_1`) {
         return { status: 404, data: { error: { code: "not_found" } } };
       }
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/providers?inherited=false`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/providers?inherited=false`) {
         return page([]);
       }
       return undefined;
@@ -1045,22 +969,13 @@ describe("disconnectConnector", () => {
 
   test("a concurrent disconnect (provider DELETE 404s because a first call already removed it) resolves instead of throwing", async () => {
     const { api } = fakeDisconnectAPI(({ method, path }) => {
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/catalog/providers`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/catalog/providers`) {
         return page([]);
       }
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/providers?inherited=false`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/providers?inherited=false`) {
         return page([providerRow("prv_1", "anthropic")]);
       }
-      if (
-        method === "DELETE" &&
-        path === `/api/tenants/${TENANT_ID}/providers/prv_1`
-      ) {
+      if (method === "DELETE" && path === `/api/tenants/${TENANT_ID}/providers/prv_1`) {
         return { status: 404, data: { error: { code: "not_found" } } };
       }
       return undefined;
diff --git a/packages/connections/src/routes.ts b/packages/connections/src/routes.ts
index 3e17918996..80b768777b 100644
--- a/packages/connections/src/routes.ts
+++ b/packages/connections/src/routes.ts
@@ -14,12 +14,7 @@
 // display-only in this ticket), is a 404.
 import { Hono, type Context } from "hono";
 import { type } from "arktype";
-import {
-  ModelInfo,
-  ModelProviderResponse,
-  ProviderResponse,
-  paginatedSchema,
-} from "@intx/types";
+import { ModelInfo, ModelProviderResponse, ProviderResponse, paginatedSchema } from "@intx/types";
 import type { RequireGrant, TenantEnv } from "@intx/hub-api";
 import { hasUsableModel } from "@corbits/inference-settings";
 import { makeErrorEnvelope, reportError } from "@corbits/error-sink";
@@ -32,12 +27,7 @@ import {
   type EnsureProviderArgs,
   type SeedCatalogArgs,
 } from "./seed-catalog";
-import {
-  cookiesFromHeader,
-  createHubAPI,
-  parseAs,
-  type ApiCall,
-} from "@corbits/hub-api-client";
+import { cookiesFromHeader, createHubAPI, parseAs, type ApiCall } from "@corbits/hub-api-client";
 import type { ConnectorDescriptor } from "./descriptor";
 import {
   fireConnectedHook,
@@ -45,10 +35,7 @@ import {
   type InferenceCredentialSeedableHook,
   type ServiceConnectedHook,
 } from "./connected-hook";
-import {
-  isInferenceProvider,
-  persistConnectorCredential,
-} from "./persist-credential";
+import { isInferenceProvider, persistConnectorCredential } from "./persist-credential";
 import type { ProviderHealthStore } from "./provider-health";
 
 export type DisconnectConnectorArgs = {
@@ -105,9 +92,7 @@ export async function disconnectConnector(
     catalogProviders.data,
     "catalog providers response",
   ).data;
-  const catalogProvider = catalogProviderRows.find(
-    (row) => row.name === args.connectorId,
-  );
+  const catalogProvider = catalogProviderRows.find((row) => row.name === args.connectorId);
   if (catalogProvider !== undefined) {
     const deletedCatalogProvider = await api(
       "DELETE",
@@ -121,9 +106,7 @@ export async function disconnectConnector(
           `couldn't remove the catalog provider for ${args.connectorId} (status ${String(deletedCatalogProvider.status)})`,
         );
       }
-      log(
-        `catalog provider ${args.connectorId} was already removed (concurrent disconnect)`,
-      );
+      log(`catalog provider ${args.connectorId} was already removed (concurrent disconnect)`);
     } else {
       log(`removed catalog provider ${args.connectorId} and its offerings`);
     }
@@ -157,9 +140,7 @@ export async function disconnectConnector(
         `couldn't remove the provider row for ${args.connectorId} (status ${String(deletedProvider.status)})`,
       );
     }
-    log(
-      `provider ${args.connectorId} was already removed (concurrent disconnect)`,
-    );
+    log(`provider ${args.connectorId} was already removed (concurrent disconnect)`);
     return { disconnected: false };
   }
   log(`removed provider ${args.connectorId} and its credentials`);
@@ -296,14 +277,11 @@ export type CreateConnectionRoutesDeps = {
   onInferenceCredentialUsable?: InferenceCredentialSeedableHook;
 };
 
-export function createConnectionRoutes(
-  deps: CreateConnectionRoutesDeps,
-): Hono<TenantEnv> {
+export function createConnectionRoutes(deps: CreateConnectionRoutesDeps): Hono<TenantEnv> {
   const app = new Hono<TenantEnv>();
   const api = createHubAPI(deps.hubUrl);
   const registry = deps.registry;
-  const runDisconnectConnector =
-    deps.disconnectConnectorFn ?? disconnectConnector;
+  const runDisconnectConnector = deps.disconnectConnectorFn ?? disconnectConnector;
   const runGetResolvedCatalog =
     deps.getResolvedCatalogFn ??
     (async (resolveApi: ApiCall, cookies: string[], tenantId: string) => {
@@ -313,11 +291,7 @@ export function createConnectionRoutes(
         undefined,
         cookies,
       );
-      return parseAs(
-        ModelInfo.array(),
-        response.data,
-        "resolved catalog response",
-      );
+      return parseAs(ModelInfo.array(), response.data, "resolved catalog response");
     });
 
   // Lets a settings-ui OAuth card tell "not configured" (an operator
@@ -326,29 +300,25 @@ export function createConnectionRoutes(
   // ever rendering a Connect button — see this route's own header. Read
   // access only; no `apiKey`/state to leak, so it needs no stronger a
   // grant than the rest of this tenant-scoped surface already requires.
-  app.get(
-    "/oauth-configured",
-    deps.requireGrant("credential:*", "create"),
-    (c) => {
-      const oauthEnv = deps.oauthEnv ?? {};
-      const configured: Record<string, boolean> = {};
-      for (const [id, descriptor] of Object.entries(registry)) {
-        if (descriptor.oauth === undefined) continue;
-        // A loopback connector is never reachable through this web flow
-        // (its start/callback routes refuse it), so it is never reported
-        // as configured here either.
-        if (descriptor.authKind === "oauth-loopback") continue;
-        const hasClientId =
-          descriptor.oauth.clientId === undefined ||
-          descriptor.oauth.clientId(oauthEnv) !== undefined;
-        const hasClientSecret =
-          descriptor.oauth.clientSecret === undefined ||
-          descriptor.oauth.clientSecret(oauthEnv) !== undefined;
-        configured[id] = hasClientId && hasClientSecret;
-      }
-      return c.json(configured, 200);
-    },
-  );
+  app.get("/oauth-configured", deps.requireGrant("credential:*", "create"), (c) => {
+    const oauthEnv = deps.oauthEnv ?? {};
+    const configured: Record<string, boolean> = {};
+    for (const [id, descriptor] of Object.entries(registry)) {
+      if (descriptor.oauth === undefined) continue;
+      // A loopback connector is never reachable through this web flow
+      // (its start/callback routes refuse it), so it is never reported
+      // as configured here either.
+      if (descriptor.authKind === "oauth-loopback") continue;
+      const hasClientId =
+        descriptor.oauth.clientId === undefined ||
+        descriptor.oauth.clientId(oauthEnv) !== undefined;
+      const hasClientSecret =
+        descriptor.oauth.clientSecret === undefined ||
+        descriptor.oauth.clientSecret(oauthEnv) !== undefined;
+      configured[id] = hasClientId && hasClientSecret;
+    }
+    return c.json(configured, 200);
+  });
 
   // The shell banner's read (CL-6092): every provider this tenant has
   // marked needs-attention, from either write path (`/complete`'s failing
@@ -356,19 +326,15 @@ export function createConnectionRoutes(
   // through `ProviderHealthPort` elsewhere in the hub process). Read-only,
   // so it asks for the grant's `"read"` action rather than the `"create"`
   // this file's other routes require.
-  app.get(
-    "/provider-health",
-    deps.requireGrant("credential:*", "read"),
-    async (c) => {
-      const tenant = c.get("tenant");
-      const providers = deps.providerHealth?.listForTenant(tenant.id) ?? {};
-      const connectedProviderCount =
-        deps.listConnectedProviders === undefined
-          ? undefined
-          : (await deps.listConnectedProviders(tenant.id)).length;
-      return c.json({ providers, connectedProviderCount }, 200);
-    },
-  );
+  app.get("/provider-health", deps.requireGrant("credential:*", "read"), async (c) => {
+    const tenant = c.get("tenant");
+    const providers = deps.providerHealth?.listForTenant(tenant.id) ?? {};
+    const connectedProviderCount =
+      deps.listConnectedProviders === undefined
+        ? undefined
+        : (await deps.listConnectedProviders(tenant.id)).length;
+    return c.json({ providers, connectedProviderCount }, 200);
+  });
 
   function findApiKeyDescriptor(connectorId: string) {
     const descriptor = registry[connectorId];
@@ -393,252 +359,225 @@ export function createConnectionRoutes(
   // inference provider here creates a second row rather than updating
   // the seeded one — accepted for this ticket, not silently papered
   // over.
-  app.post(
-    "/:connectorId/complete",
-    deps.requireGrant("credential:*", "create"),
-    async (c) => {
-      const connectorId = c.req.param("connectorId");
-      const descriptor = findApiKeyDescriptor(connectorId);
-      if (descriptor === undefined || descriptor.probe === undefined) {
-        return c.json(
-          makeErrorEnvelope({
-            code: "not_found",
-            userMessage: `Unknown connector: ${connectorId}`,
-          }),
-          404,
-        );
-      }
+  app.post("/:connectorId/complete", deps.requireGrant("credential:*", "create"), async (c) => {
+    const connectorId = c.req.param("connectorId");
+    const descriptor = findApiKeyDescriptor(connectorId);
+    if (descriptor === undefined || descriptor.probe === undefined) {
+      return c.json(
+        makeErrorEnvelope({
+          code: "not_found",
+          userMessage: `Unknown connector: ${connectorId}`,
+        }),
+        404,
+      );
+    }
 
-      const parsed = await parseApiKeyBody(c);
-      if (parsed instanceof type.errors) {
-        return c.json(
-          makeErrorEnvelope({
-            code: "bad_request",
-            userMessage: `An API key is required: ${parsed.summary}`,
-          }),
-          400,
-        );
-      }
+    const parsed = await parseApiKeyBody(c);
+    if (parsed instanceof type.errors) {
+      return c.json(
+        makeErrorEnvelope({
+          code: "bad_request",
+          userMessage: `An API key is required: ${parsed.summary}`,
+        }),
+        400,
+      );
+    }
 
-      const tenant = c.get("tenant");
-      const probeBaseUrl = deps.probeBaseUrls?.[connectorId];
-      const test = await descriptor.probe(
-        parsed.apiKey,
-        probeBaseUrl !== undefined ? { baseUrl: probeBaseUrl } : undefined,
+    const tenant = c.get("tenant");
+    const probeBaseUrl = deps.probeBaseUrls?.[connectorId];
+    const test = await descriptor.probe(
+      parsed.apiKey,
+      probeBaseUrl !== undefined ? { baseUrl: probeBaseUrl } : undefined,
+    );
+    if (!test.ok) {
+      deps.providerHealth?.report(tenant.id, descriptor.id, CREDENTIAL_TEST_FAILURE_CATEGORY);
+      return c.json(
+        makeErrorEnvelope({
+          code: "invalid_credential",
+          userMessage: test.message,
+        }),
+        422,
       );
-      if (!test.ok) {
-        deps.providerHealth?.report(
-          tenant.id,
-          descriptor.id,
-          CREDENTIAL_TEST_FAILURE_CATEGORY,
-        );
-        return c.json(
-          makeErrorEnvelope({
-            code: "invalid_credential",
-            userMessage: test.message,
-          }),
-          422,
-        );
-      }
+    }
 
-      const cookies = cookiesFromHeader(c.req.header("cookie"));
-      // A `credentialInputKind: "url"` connector (Ollama) collects a URL
-      // in the same wire field every other connector uses for a secret —
-      // it stores the fixed placeholder secret instead, and the URL
-      // itself as the provider row's `apiBaseUrl` (the same seam MCP
-      // servers use). The persist-and-seed sequence itself is the one
-      // shared `persistConnectorCredential` every connect surface runs
-      // (CL-6394).
-      const isUrlCredential = descriptor.credentialInputKind === "url";
-      try {
-        const { credentialId, seedResult } = await persistConnectorCredential({
-          api,
-          cookies,
-          tenantId: tenant.id,
-          descriptor,
-          // `test` above already proved `parsed.apiKey` against
-          // `descriptor.probe`, so a name conflict on the credential row
-          // (a regenerated key, or a retry after a bad paste) is safe to
-          // rotate rather than silently keeping the stale secret.
-          secret: isUrlCredential ? OLLAMA_PLACEHOLDER_SECRET : parsed.apiKey,
-          log: deps.log,
-          ...(isUrlCredential
-            ? { baseURLOverride: parsed.apiKey }
-            : probeBaseUrl !== undefined
-              ? { baseURLOverride: probeBaseUrl }
-              : {}),
-          ...(deps.ensureProviderFn !== undefined
-            ? { ensureProviderFn: deps.ensureProviderFn }
-            : {}),
-          ...(deps.ensureCredentialFn !== undefined
-            ? { ensureCredentialFn: deps.ensureCredentialFn }
-            : {}),
-          ...(deps.seedCatalogFn !== undefined
-            ? { seedCatalogFn: deps.seedCatalogFn }
+    const cookies = cookiesFromHeader(c.req.header("cookie"));
+    // A `credentialInputKind: "url"` connector (Ollama) collects a URL
+    // in the same wire field every other connector uses for a secret —
+    // it stores the fixed placeholder secret instead, and the URL
+    // itself as the provider row's `apiBaseUrl` (the same seam MCP
+    // servers use). The persist-and-seed sequence itself is the one
+    // shared `persistConnectorCredential` every connect surface runs
+    // (CL-6394).
+    const isUrlCredential = descriptor.credentialInputKind === "url";
+    try {
+      const { credentialId, seedResult } = await persistConnectorCredential({
+        api,
+        cookies,
+        tenantId: tenant.id,
+        descriptor,
+        // `test` above already proved `parsed.apiKey` against
+        // `descriptor.probe`, so a name conflict on the credential row
+        // (a regenerated key, or a retry after a bad paste) is safe to
+        // rotate rather than silently keeping the stale secret.
+        secret: isUrlCredential ? OLLAMA_PLACEHOLDER_SECRET : parsed.apiKey,
+        log: deps.log,
+        ...(isUrlCredential
+          ? { baseURLOverride: parsed.apiKey }
+          : probeBaseUrl !== undefined
+            ? { baseURLOverride: probeBaseUrl }
             : {}),
-        });
-        // CL-6351: a fresh Ollama connect whose instance serves no
-        // completion-capable model gets guided copy, not a silent dead
-        // end — read off the catalog seed the shared persist sequence
-        // just ran.
-        const modelGuidance =
-          descriptor.id === "ollama" &&
-          seedResult !== undefined &&
-          !seedResult.hasCompletionCapableModel
-            ? OLLAMA_NO_CHAT_MODEL_GUIDANCE
-            : undefined;
-        // Only clear once the credential is actually durable — a storage
-        // failure below (the `catch`) must leave a prior needs-attention
-        // record standing rather than clearing it on a test pass whose
-        // save then failed (CL-6092).
-        deps.providerHealth?.clear(tenant.id, descriptor.id);
-        await fireConnectedHook(deps.onConnected, deps.log, {
-          tenantId: tenant.id,
-          principalId: c.get("principal").id,
-          connectorId: descriptor.id,
-          displayName: descriptor.displayName,
-        });
-        // A tenant that just connected its own inference provider is an
-        // equally valid seed source as an operator-configured hub key —
-        // it must not sit unseeded forever waiting on one (CL-6568). Ask
-        // the same resolved-catalog question launch itself asks
-        // (`hasUsableModel`, `@corbits/inference-settings`) rather than
-        // trusting the credential row's mere presence, then hand the
-        // provisioning drain this connector's own provider and key —
-        // best-effort: a failure here never turns a stored, working
-        // credential into a failed connect response.
-        if (isInferenceProvider(descriptor.id) && seedResult !== undefined) {
-          const user = c.get("user");
-          if (user) {
-            try {
-              const models = await runGetResolvedCatalog(
-                api,
-                cookies,
-                tenant.id,
-              );
-              if (hasUsableModel(models)) {
-                await fireInferenceCredentialSeedableHook(
-                  deps.onInferenceCredentialUsable,
-                  deps.log,
-                  {
-                    userId: user.id,
-                    tenantId: tenant.id,
-                    tenantDomain: tenant.domain,
-                    principalId: c.get("principal").id,
-                    provider: descriptor.id,
-                    apiKey: isUrlCredential
-                      ? OLLAMA_PLACEHOLDER_SECRET
-                      : parsed.apiKey,
-                    ...(isUrlCredential
-                      ? { baseURLOverride: parsed.apiKey }
-                      : {}),
-                  },
-                );
-              }
-            } catch (cause) {
-              const message =
-                cause instanceof Error ? cause.message : String(cause);
-              deps.log(
-                `could not check tenant ${tenant.id}'s resolved catalog after connecting ${descriptor.id}; the bench stays as-is until its next reconcile: ${message}`,
+        ...(deps.ensureProviderFn !== undefined ? { ensureProviderFn: deps.ensureProviderFn } : {}),
+        ...(deps.ensureCredentialFn !== undefined
+          ? { ensureCredentialFn: deps.ensureCredentialFn }
+          : {}),
+        ...(deps.seedCatalogFn !== undefined ? { seedCatalogFn: deps.seedCatalogFn } : {}),
+      });
+      // CL-6351: a fresh Ollama connect whose instance serves no
+      // completion-capable model gets guided copy, not a silent dead
+      // end — read off the catalog seed the shared persist sequence
+      // just ran.
+      const modelGuidance =
+        descriptor.id === "ollama" &&
+        seedResult !== undefined &&
+        !seedResult.hasCompletionCapableModel
+          ? OLLAMA_NO_CHAT_MODEL_GUIDANCE
+          : undefined;
+      // Only clear once the credential is actually durable — a storage
+      // failure below (the `catch`) must leave a prior needs-attention
+      // record standing rather than clearing it on a test pass whose
+      // save then failed (CL-6092).
+      deps.providerHealth?.clear(tenant.id, descriptor.id);
+      await fireConnectedHook(deps.onConnected, deps.log, {
+        tenantId: tenant.id,
+        principalId: c.get("principal").id,
+        connectorId: descriptor.id,
+        displayName: descriptor.displayName,
+      });
+      // A tenant that just connected its own inference provider is an
+      // equally valid seed source as an operator-configured hub key —
+      // it must not sit unseeded forever waiting on one (CL-6568). Ask
+      // the same resolved-catalog question launch itself asks
+      // (`hasUsableModel`, `@corbits/inference-settings`) rather than
+      // trusting the credential row's mere presence, then hand the
+      // provisioning drain this connector's own provider and key —
+      // best-effort: a failure here never turns a stored, working
+      // credential into a failed connect response.
+      if (isInferenceProvider(descriptor.id) && seedResult !== undefined) {
+        const user = c.get("user");
+        if (user) {
+          try {
+            const models = await runGetResolvedCatalog(api, cookies, tenant.id);
+            if (hasUsableModel(models)) {
+              await fireInferenceCredentialSeedableHook(
+                deps.onInferenceCredentialUsable,
+                deps.log,
+                {
+                  userId: user.id,
+                  tenantId: tenant.id,
+                  tenantDomain: tenant.domain,
+                  principalId: c.get("principal").id,
+                  provider: descriptor.id,
+                  apiKey: isUrlCredential ? OLLAMA_PLACEHOLDER_SECRET : parsed.apiKey,
+                  ...(isUrlCredential ? { baseURLOverride: parsed.apiKey } : {}),
+                },
               );
-              reportError(cause, {
-                operation: "check_resolved_catalog_after_connect",
-                tenantId: tenant.id,
-                extra: { connectorId: descriptor.id },
-              });
             }
+          } catch (cause) {
+            const message = cause instanceof Error ? cause.message : String(cause);
+            deps.log(
+              `could not check tenant ${tenant.id}'s resolved catalog after connecting ${descriptor.id}; the bench stays as-is until its next reconcile: ${message}`,
+            );
+            reportError(cause, {
+              operation: "check_resolved_catalog_after_connect",
+              tenantId: tenant.id,
+              extra: { connectorId: descriptor.id },
+            });
           }
         }
-        return c.json(
-          modelGuidance !== undefined
-            ? { credentialId, status: "active" as const, modelGuidance }
-            : { credentialId, status: "active" as const },
-          200,
-        );
-      } catch (cause) {
-        const message = cause instanceof Error ? cause.message : String(cause);
-        deps.log(
-          `connection setup failed for connector ${connectorId} on tenant ${tenant.id}: ${message}`,
-        );
-        // Never widen extra beyond identifiers safe to print — the pasted
-        // `parsed.apiKey` is in scope above.
-        const refId = reportError(cause, {
-          operation: "persist_api_key_connection",
-          tenantId: tenant.id,
-          extra: { connectorId },
-        });
-        return c.json(
-          makeErrorEnvelope({
-            code: "connection_setup_failed",
-            userMessage:
-              "The key checked out, but saving the connection failed. Try again in a moment.",
-            refId,
-          }),
-          500,
-        );
       }
-    },
-  );
+      return c.json(
+        modelGuidance !== undefined
+          ? { credentialId, status: "active" as const, modelGuidance }
+          : { credentialId, status: "active" as const },
+        200,
+      );
+    } catch (cause) {
+      const message = cause instanceof Error ? cause.message : String(cause);
+      deps.log(
+        `connection setup failed for connector ${connectorId} on tenant ${tenant.id}: ${message}`,
+      );
+      // Never widen extra beyond identifiers safe to print — the pasted
+      // `parsed.apiKey` is in scope above.
+      const refId = reportError(cause, {
+        operation: "persist_api_key_connection",
+        tenantId: tenant.id,
+        extra: { connectorId },
+      });
+      return c.json(
+        makeErrorEnvelope({
+          code: "connection_setup_failed",
+          userMessage:
+            "The key checked out, but saving the connection failed. Try again in a moment.",
+          refId,
+        }),
+        500,
+      );
+    }
+  });
 
   // The one disconnect path every settings-ui card (api-key or OAuth)
   // calls — see `disconnectConnector`'s own header for why a direct
   // `DELETE /credentials/:id` from the browser can never do this safely
   // on its own.
-  app.delete(
-    "/:connectorId/disconnect",
-    deps.requireGrant("credential:*", "manage"),
-    async (c) => {
-      const connectorId = c.req.param("connectorId");
-      if (registry[connectorId] === undefined) {
+  app.delete("/:connectorId/disconnect", deps.requireGrant("credential:*", "manage"), async (c) => {
+    const connectorId = c.req.param("connectorId");
+    if (registry[connectorId] === undefined) {
+      return c.json(
+        makeErrorEnvelope({
+          code: "not_found",
+          userMessage: `Unknown connector: ${connectorId}`,
+        }),
+        404,
+      );
+    }
+
+    const tenant = c.get("tenant");
+    const cookies = cookiesFromHeader(c.req.header("cookie"));
+    try {
+      const result = await runDisconnectConnector(
+        api,
+        cookies,
+        { tenantId: tenant.id, connectorId },
+        deps.log,
+      );
+      if (!result.disconnected) {
         return c.json(
           makeErrorEnvelope({
             code: "not_found",
-            userMessage: `Unknown connector: ${connectorId}`,
+            userMessage: `${connectorId} is not connected`,
           }),
           404,
         );
       }
-
-      const tenant = c.get("tenant");
-      const cookies = cookiesFromHeader(c.req.header("cookie"));
-      try {
-        const result = await runDisconnectConnector(
-          api,
-          cookies,
-          { tenantId: tenant.id, connectorId },
-          deps.log,
-        );
-        if (!result.disconnected) {
-          return c.json(
-            makeErrorEnvelope({
-              code: "not_found",
-              userMessage: `${connectorId} is not connected`,
-            }),
-            404,
-          );
-        }
-        return c.body(null, 204);
-      } catch (cause) {
-        const message = cause instanceof Error ? cause.message : String(cause);
-        deps.log(
-          `disconnect failed for connector ${connectorId} on tenant ${tenant.id}: ${message}`,
-        );
-        const refId = reportError(cause, {
-          operation: "disconnect_connector",
-          tenantId: tenant.id,
-          extra: { connectorId },
-        });
-        return c.json(
-          makeErrorEnvelope({
-            code: "disconnect_failed",
-            userMessage: "Couldn't disconnect — try again.",
-            refId,
-          }),
-          500,
-        );
-      }
-    },
-  );
+      return c.body(null, 204);
+    } catch (cause) {
+      const message = cause instanceof Error ? cause.message : String(cause);
+      deps.log(`disconnect failed for connector ${connectorId} on tenant ${tenant.id}: ${message}`);
+      const refId = reportError(cause, {
+        operation: "disconnect_connector",
+        tenantId: tenant.id,
+        extra: { connectorId },
+      });
+      return c.json(
+        makeErrorEnvelope({
+          code: "disconnect_failed",
+          userMessage: "Couldn't disconnect — try again.",
+          refId,
+        }),
+        500,
+      );
+    }
+  });
 
   return app;
 }
diff --git a/packages/connections/src/seed-catalog.test.ts b/packages/connections/src/seed-catalog.test.ts
index 342b739843..025f6857a0 100644
--- a/packages/connections/src/seed-catalog.test.ts
+++ b/packages/connections/src/seed-catalog.test.ts
@@ -25,11 +25,7 @@ function stubHub() {
   const catalogProviders: { id: string; name: string }[] = [];
   const offerings: { id: string; modelId: string; providerId: string }[] = [];
 
-  const api = (async (
-    method: string,
-    path: string,
-    body: Record<string, unknown> | undefined,
-  ) => {
+  const api = (async (method: string, path: string, body: Record<string, unknown> | undefined) => {
     calls.push({ method, path });
     const row = (id: string, extra: Record<string, unknown> = {}) => ({
       id,
@@ -67,9 +63,7 @@ function stubHub() {
     if (method === "POST" && path.endsWith("/catalog/offerings")) {
       const modelId = body?.["modelId"] as string;
       const providerId = body?.["providerId"] as string;
-      const found = offerings.find(
-        (o) => o.modelId === modelId && o.providerId === providerId,
-      );
+      const found = offerings.find((o) => o.modelId === modelId && o.providerId === providerId);
       if (found) return { status: 409, data: {} };
       const created = {
         id: `off_${modelId}_${providerId}`,
@@ -83,10 +77,7 @@ function stubHub() {
       offerings.push(created);
       return { status: 201, data: row(created.id, created) };
     }
-    if (
-      method === "GET" &&
-      path.startsWith("/api/tenants/tnt_1/catalog/offerings")
-    ) {
+    if (method === "GET" && path.startsWith("/api/tenants/tnt_1/catalog/offerings")) {
       return {
         status: 200,
         data: { data: offerings.map((o) => row(o.id, o)), nextCursor: null },
@@ -174,9 +165,7 @@ describe("seedCatalog", () => {
     );
     expect(credentials.map((c) => c.name)).toEqual(["openai-default"]);
     expect(offerings).toHaveLength(CATALOG_SEEDS.openai.models.length);
-    expect(lines.join("\n")).toContain(
-      "catalog ready: openai/gpt-5.6-terra, gpt-4o-mini",
-    );
+    expect(lines.join("\n")).toContain("catalog ready: openai/gpt-5.6-terra, gpt-4o-mini");
     expect(result.hasCompletionCapableModel).toBe(true);
   });
 
@@ -193,10 +182,7 @@ describe("seedCatalog", () => {
       placeholderCredential: true,
     });
     const rows = () =>
-      stub.providers.length +
-      stub.credentials.length +
-      stub.models.length +
-      stub.offerings.length;
+      stub.providers.length + stub.credentials.length + stub.models.length + stub.offerings.length;
 
     const before = rows();
     const second: string[] = [];
diff --git a/packages/connections/src/seed-catalog.ts b/packages/connections/src/seed-catalog.ts
index 81947a2ab8..9d6b9bdd9c 100644
--- a/packages/connections/src/seed-catalog.ts
+++ b/packages/connections/src/seed-catalog.ts
@@ -66,11 +66,7 @@ export async function ensureProvider(
     cookies,
   );
   if (created.status === 201) {
-    const provider = parseAs(
-      ProviderResponse,
-      created.data,
-      "provider response",
-    );
+    const provider = parseAs(ProviderResponse, created.data, "provider response");
     log(`created provider ${args.name}`);
     return provider.id;
   }
@@ -170,11 +166,7 @@ export async function ensureCredential(
     cookies,
   );
   if (created.status === 201) {
-    const credential = parseAs(
-      CredentialResponse,
-      created.data,
-      "credential response",
-    );
+    const credential = parseAs(CredentialResponse, created.data, "credential response");
     log(`created credential ${args.name}`);
     return credential.id;
   }
@@ -185,12 +177,7 @@ export async function ensureCredential(
     );
   }
 
-  const listed = await api(
-    "GET",
-    `/api/tenants/${args.tenantId}/credentials`,
-    undefined,
-    cookies,
-  );
+  const listed = await api("GET", `/api/tenants/${args.tenantId}/credentials`, undefined, cookies);
   const credentials = parseAs(
     paginatedSchema(CredentialResponse),
     listed.data,
@@ -262,20 +249,12 @@ export async function ensureCredential(
         "check the hub logs for the underlying failure, then re-run: workbench seed",
       );
     }
-    const credential = parseAs(
-      CredentialResponse,
-      rotated.data,
-      "credential response",
-    );
-    log(
-      `rotated credential ${args.name} (reconnect refreshed the stored secret)`,
-    );
+    const credential = parseAs(CredentialResponse, rotated.data, "credential response");
+    log(`rotated credential ${args.name} (reconnect refreshed the stored secret)`);
     return credential.id;
   }
 
-  log(
-    `credential ${args.name} already exists (skipped; its secret is not updated by seeding)`,
-  );
+  log(`credential ${args.name} already exists (skipped; its secret is not updated by seeding)`);
   return existing.id;
 }
 
@@ -292,11 +271,7 @@ export async function ensureCatalogModel(
     cookies,
   );
   if (created.status === 201) {
-    const model = parseAs(
-      ModelResponse,
-      created.data,
-      "catalog model response",
-    );
+    const model = parseAs(ModelResponse, created.data, "catalog model response");
     log(`created catalog model ${args.canonicalName}`);
     return model.id;
   }
@@ -353,11 +328,7 @@ export async function ensureCatalogProvider(
     cookies,
   );
   if (created.status === 201) {
-    const provider = parseAs(
-      ModelProviderResponse,
-      created.data,
-      "catalog provider response",
-    );
+    const provider = parseAs(ModelProviderResponse, created.data, "catalog provider response");
     log(`created catalog provider ${args.name}`);
     return provider.id;
   }
@@ -417,11 +388,7 @@ export async function ensureCatalogOffering(
     cookies,
   );
   if (created.status === 201) {
-    const offering = parseAs(
-      ModelOfferingResponse,
-      created.data,
-      "catalog offering response",
-    );
+    const offering = parseAs(ModelOfferingResponse, created.data, "catalog offering response");
     log("created catalog offering");
     return offering.id;
   }
@@ -441,9 +408,7 @@ export async function ensureCatalogOffering(
         "catalog offerings response",
       );
       existing = page.data.find(
-        (offering) =>
-          offering.modelId === args.modelId &&
-          offering.providerId === args.providerId,
+        (offering) => offering.modelId === args.modelId && offering.providerId === args.providerId,
       );
       cursor = page.nextCursor;
     } while (existing === undefined && cursor !== null);
@@ -470,11 +435,7 @@ export async function ensureCatalogOffering(
         "check the hub logs for the underlying failure, then re-run: workbench seed",
       );
     }
-    const offering = parseAs(
-      ModelOfferingResponse,
-      updated.data,
-      "catalog offering response",
-    );
+    const offering = parseAs(ModelOfferingResponse, updated.data, "catalog offering response");
     log("updated catalog offering priority");
     return offering.id;
   }
@@ -504,8 +465,10 @@ export class PlaceholderCredentialError extends Error {
 /** Providers whose only credential is a real OAuth token —
  * `placeholderCredential: true` is a `PlaceholderCredentialError` for
  * these, never a planted fake. */
-const OAUTH_ONLY_CATALOG_PROVIDERS: ReadonlySet<SupportedCredentialProvider> =
-  new Set(["codex", "xai-oauth"]);
+const OAUTH_ONLY_CATALOG_PROVIDERS: ReadonlySet<SupportedCredentialProvider> = new Set([
+  "codex",
+  "xai-oauth",
+]);
 
 export type SeedCatalogArgs = {
   api: ApiCall;
@@ -613,16 +576,11 @@ export type SeedCatalogResult = {
  * so. Idempotent: an already seeded chain is detected by name and
  * skipped, never duplicated.
  */
-export async function seedCatalog(
-  args: SeedCatalogArgs,
-): Promise<SeedCatalogResult> {
+export async function seedCatalog(args: SeedCatalogArgs): Promise<SeedCatalogResult> {
   const { api, cookies, tenantId, log, provider = "anthropic" } = args;
   const seed = CATALOG_SEEDS[provider];
 
-  if (
-    args.placeholderCredential === true &&
-    OAUTH_ONLY_CATALOG_PROVIDERS.has(provider)
-  ) {
+  if (args.placeholderCredential === true && OAUTH_ONLY_CATALOG_PROVIDERS.has(provider)) {
     throw new PlaceholderCredentialError(
       `provider "${provider}" has no API-key credential path — a placeholder ` +
         `secret could never authenticate. Connect it through its OAuth login ` +
@@ -640,9 +598,7 @@ export async function seedCatalog(
   // hand) is only the fallback for an unreachable instance. Every other
   // provider's model list is fixed, so this never runs for them.
   const dynamicModels: readonly CatalogModelSpec[] | undefined =
-    provider === "ollama"
-      ? await fetchOllamaModelCatalog(providerBaseURL)
-      : undefined;
+    provider === "ollama" ? await fetchOllamaModelCatalog(providerBaseURL) : undefined;
   const models = dynamicModels ?? seed.models;
 
   const seededModels: {
@@ -669,10 +625,7 @@ export async function seedCatalog(
   }
 
   const credentialSecret =
-    args.apiKey ??
-    (args.placeholderCredential === true
-      ? PLACEHOLDER_CATALOG_API_KEY
-      : undefined);
+    args.apiKey ?? (args.placeholderCredential === true ? PLACEHOLDER_CATALOG_API_KEY : undefined);
 
   const providerArgs = {
     tenantId,
@@ -809,9 +762,7 @@ export async function seedCatalog(
     );
   }
 
-  log(
-    `catalog ready: ${seed.provider.name}/${models.map((m) => m.canonicalName).join(", ")}`,
-  );
+  log(`catalog ready: ${seed.provider.name}/${models.map((m) => m.canonicalName).join(", ")}`);
   return {
     hasCompletionCapableModel: hasCompletionCapableModel(
       offeredCapabilities,
diff --git a/packages/connections/src/template-settings.ts b/packages/connections/src/template-settings.ts
index e36c5c0d02..c4bf0c192e 100644
--- a/packages/connections/src/template-settings.ts
+++ b/packages/connections/src/template-settings.ts
@@ -49,8 +49,7 @@ export const TemplateReposSettingsPatch = type({
   "template/pendingConnections": "string[]",
   "template/selectedRepos": "string[]",
 });
-export type TemplateReposSettingsPatch =
-  typeof TemplateReposSettingsPatch.infer;
+export type TemplateReposSettingsPatch = typeof TemplateReposSettingsPatch.infer;
 
 /** Builds and validates the settings patch that records which repos a
  * room's GitHub connect card started reviewing. Throws on a malformed
diff --git a/packages/connections/src/token-session.test.ts b/packages/connections/src/token-session.test.ts
index 5ce6a6b079..5bd6915f86 100644
--- a/packages/connections/src/token-session.test.ts
+++ b/packages/connections/src/token-session.test.ts
@@ -70,9 +70,7 @@ function deps(
 describe("createCredentialTokenSession", () => {
   test("serves an api_key credential's secret untouched and never refreshes", async () => {
     const d = deps();
-    d.setCurrent(
-      row({ type: "api_key", refreshSecret: null, expiresAt: null }),
-    );
+    d.setCurrent(row({ type: "api_key", refreshSecret: null, expiresAt: null }));
     const result = await d.session.getValidToken("cred_1");
     expect(result).toEqual({ ok: true, secret: "access-1", refreshed: false });
     expect(d.grantCalls).toHaveLength(0);
@@ -91,9 +89,7 @@ describe("createCredentialTokenSession", () => {
     const result = await d.session.getValidToken("cred_1");
     expect(result).toEqual({ ok: true, secret: "access-2", refreshed: true });
     expect(d.grantCalls).toHaveLength(1);
-    expect(d.updates).toEqual([
-      { secret: "access-2", expiresAt: new Date(REFRESHED_EXPIRES_AT) },
-    ]);
+    expect(d.updates).toEqual([{ secret: "access-2", expiresAt: new Date(REFRESHED_EXPIRES_AT) }]);
   });
 
   test("coalesces concurrent refreshes into exactly one refresh grant", async () => {
diff --git a/packages/connections/src/token-session.ts b/packages/connections/src/token-session.ts
index c0713e389e..05c47e2d5a 100644
--- a/packages/connections/src/token-session.ts
+++ b/packages/connections/src/token-session.ts
@@ -44,16 +44,11 @@ export type RefreshedTokens = {
   readonly expiresAt: Date | null;
 };
 
-export type RefreshGrant = (
-  credential: CredentialTokenRow,
-) => Promise<RefreshedTokens>;
+export type RefreshGrant = (credential: CredentialTokenRow) => Promise<RefreshedTokens>;
 
 export type CredentialTokenSessionDeps = {
   loadProfile: (credentialId: string) => Promise<CredentialTokenRow | null>;
-  updateTokens: (
-    credentialId: string,
-    tokens: RefreshedTokens,
-  ) => Promise<void>;
+  updateTokens: (credentialId: string, tokens: RefreshedTokens) => Promise<void>;
   refresh: RefreshGrant;
   /** Epoch-ms clock; defaults to `Date.now`. Injectable for tests. */
   now?: () => number;
@@ -76,9 +71,9 @@ export type TokenResolution =
 
 const DEFAULT_SKEW_LEAD_MS = 60 * 1000;
 
-export function createCredentialTokenSession(
-  deps: CredentialTokenSessionDeps,
-): { getValidToken(credentialId: string): Promise<TokenResolution> } {
+export function createCredentialTokenSession(deps: CredentialTokenSessionDeps): {
+  getValidToken(credentialId: string): Promise<TokenResolution>;
+} {
   const now = deps.now ?? Date.now;
   const skewLeadMs = deps.skewLeadMs ?? DEFAULT_SKEW_LEAD_MS;
 
@@ -86,10 +81,7 @@ export function createCredentialTokenSession(
   // the credential id, so concurrent calls for one credential coalesce
   // into exactly one grant while different credentials refresh in
   // parallel.
-  const sessions = new Map<
-    string,
-    ReturnType<typeof createTokenSession<BaseTokens, string>>
-  >();
+  const sessions = new Map<string, ReturnType<typeof createTokenSession<BaseTokens, string>>>();
 
   function sessionFor(credentialId: string) {
     const existing = sessions.get(credentialId);
@@ -113,16 +105,13 @@ export function createCredentialTokenSession(
         // it; don't rewrite the column when nothing changed.
         const prior = await deps.loadProfile(id);
         const changedRefresh =
-          prior === null ||
-          tokens.refresh === undefined ||
-          tokens.refresh !== prior.refreshSecret;
+          prior === null || tokens.refresh === undefined || tokens.refresh !== prior.refreshSecret;
         await deps.updateTokens(id, {
           secret: tokens.access,
           ...(tokens.refresh !== undefined && changedRefresh
             ? { refreshSecret: tokens.refresh }
             : {}),
-          expiresAt:
-            tokens.expiresAt === undefined ? null : new Date(tokens.expiresAt),
+          expiresAt: tokens.expiresAt === undefined ? null : new Date(tokens.expiresAt),
         });
       },
       refreshTokens: async (refreshToken) => {
@@ -138,9 +127,7 @@ export function createCredentialTokenSession(
         return {
           access: refreshed.secret,
           refresh: refreshed.refreshSecret ?? refreshToken,
-          ...(refreshed.expiresAt === null
-            ? {}
-            : { expiresAt: refreshed.expiresAt.getTime() }),
+          ...(refreshed.expiresAt === null ? {} : { expiresAt: refreshed.expiresAt.getTime() }),
         };
       },
       toAccess: (tokens) => tokens.access,
@@ -163,9 +150,7 @@ export function createCredentialTokenSession(
         return { ok: true, secret: row.secret, refreshed: false };
       }
       if (row.refreshSecret === null) {
-        const expired =
-          row.expiresAt !== null &&
-          now() >= row.expiresAt.getTime() - skewLeadMs;
+        const expired = row.expiresAt !== null && now() >= row.expiresAt.getTime() - skewLeadMs;
         if (!expired) {
           return { ok: true, secret: row.secret, refreshed: false };
         }
@@ -176,10 +161,7 @@ export function createCredentialTokenSession(
         };
       }
       try {
-        const secret = await sessionFor(credentialId).getValidToken(
-          credentialId,
-          now(),
-        );
+        const secret = await sessionFor(credentialId).getValidToken(credentialId, now());
         return { ok: true, secret, refreshed: secret !== row.secret };
       } catch (cause) {
         reportError(cause, {
@@ -187,8 +169,7 @@ export function createCredentialTokenSession(
           extra: { credentialId },
         });
         const message =
-          cause instanceof OAuthRefreshFailedError ||
-          cause instanceof OAuthProfileNotFoundError
+          cause instanceof OAuthRefreshFailedError || cause instanceof OAuthProfileNotFoundError
             ? cause.cause instanceof Error
               ? cause.cause.message
               : cause.message
diff --git a/packages/connections/src/workflow-connection-routes.ts b/packages/connections/src/workflow-connection-routes.ts
index 9c042236b5..577f3c9709 100644
--- a/packages/connections/src/workflow-connection-routes.ts
+++ b/packages/connections/src/workflow-connection-routes.ts
@@ -37,10 +37,7 @@ export type WorkflowConnectionRunScope = {
 };
 
 export type WorkflowRunAuthenticator = {
-  resolve(
-    token: string,
-    runAddress: string,
-  ): Promise<WorkflowConnectionRunScope | null>;
+  resolve(token: string, runAddress: string): Promise<WorkflowConnectionRunScope | null>;
 };
 
 export type WorkflowConnectionsEnv = {
@@ -55,9 +52,7 @@ export type CreateWorkflowConnectionRoutesDeps = {
    * (`mcp-server-store.ts`) — a direct DB read, since this route has no
    * tenant-session cookies to reuse `./mcp-server-routes.ts`'s hub-HTTP
    * listing. */
-  readonly listMcpServers: (
-    tenantId: string,
-  ) => Promise<readonly McpServerConnection[]>;
+  readonly listMcpServers: (tenantId: string) => Promise<readonly McpServerConnection[]>;
 };
 
 export function createWorkflowConnectionRoutes(
@@ -67,9 +62,7 @@ export function createWorkflowConnectionRoutes(
 
   app.use("*", async (c, next) => {
     const authHeader = c.req.header("authorization") ?? "";
-    const token = authHeader.startsWith("Bearer ")
-      ? authHeader.slice("Bearer ".length)
-      : "";
+    const token = authHeader.startsWith("Bearer ") ? authHeader.slice("Bearer ".length) : "";
     const address = c.req.header("x-workflow-run-address") ?? "";
     const scope = await deps.authenticator.resolve(token, address);
     if (scope === null) {
@@ -77,8 +70,7 @@ export function createWorkflowConnectionRoutes(
         {
           error: {
             code: "unauthorized",
-            message:
-              "Missing or unrecognized sidecar bearer token / run address",
+            message: "Missing or unrecognized sidecar bearer token / run address",
           },
         },
         401,
diff --git a/packages/connections/src/workflow-push.test.ts b/packages/connections/src/workflow-push.test.ts
index 436b4e64c0..7a9272a860 100644
--- a/packages/connections/src/workflow-push.test.ts
+++ b/packages/connections/src/workflow-push.test.ts
@@ -7,15 +7,7 @@
 // re-seed force-repoints `main` to the canonical content rather than
 // dying on divergent history it never asked to reconcile.
 import { describe, expect, test } from "bun:test";
-import {
-  chmod,
-  mkdir,
-  mkdtemp,
-  readFile,
-  realpath,
-  rm,
-  writeFile,
-} from "node:fs/promises";
+import { chmod, mkdir, mkdtemp, readFile, realpath, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join, sep } from "node:path";
 import { installDisposableHubDataDir } from "../../../test/disposable-hub-data-dir";
@@ -71,15 +63,12 @@ async function git(args: string[], cwd: string): Promise<string> {
   delete env["GIT_DIR"];
   delete env["GIT_WORK_TREE"];
   delete env["GIT_INDEX_FILE"];
-  const child = Bun.spawn(
-    ["git", "-c", "core.hooksPath=", "-c", "commit.gpgsign=false", ...args],
-    {
-      cwd,
-      env,
-      stdout: "pipe",
-      stderr: "pipe",
-    },
-  );
+  const child = Bun.spawn(["git", "-c", "core.hooksPath=", "-c", "commit.gpgsign=false", ...args], {
+    cwd,
+    env,
+    stdout: "pipe",
+    stderr: "pipe",
+  });
   const [stdout, stderr, code] = await Promise.all([
     new Response(child.stdout).text(),
     new Response(child.stderr).text(),
@@ -110,15 +99,7 @@ describe("createGitWorkflowPusher", () => {
       await Bun.write(join(seeder, "workflow.js"), "export default {};\n");
       await git(["add", "workflow.js"], seeder);
       await git(
-        [
-          "-c",
-          "user.email=seed@test",
-          "-c",
-          "user.name=seed",
-          "commit",
-          "-m",
-          "seed v1",
-        ],
+        ["-c", "user.email=seed@test", "-c", "user.name=seed", "commit", "-m", "seed v1"],
         seeder,
       );
       await git(["push", remoteDir, "HEAD:refs/heads/main"], seeder);
@@ -202,11 +183,7 @@ describe("createGitWorkflowPusher", () => {
       );
       await chmod(hook, 0o755);
       const globalConfig = join(work, "gitconfig");
-      await writeFile(
-        globalConfig,
-        `[core]\nhooksPath = ${hooksDir}\n`,
-        "utf-8",
-      );
+      await writeFile(globalConfig, `[core]\nhooksPath = ${hooksDir}\n`, "utf-8");
       process.env.GIT_CONFIG_GLOBAL = globalConfig;
 
       const remoteDir = join(work, "remote.git");
@@ -281,15 +258,7 @@ describe("createGitWorkflowPusher", () => {
       await Bun.write(join(victim, "keep.txt"), "keep\n");
       await git(["add", "keep.txt"], victim);
       await git(
-        [
-          "-c",
-          "user.email=keep@test",
-          "-c",
-          "user.name=keep",
-          "commit",
-          "-m",
-          "keep",
-        ],
+        ["-c", "user.email=keep@test", "-c", "user.name=keep", "commit", "-m", "keep"],
         victim,
       );
 
diff --git a/packages/connections/src/workflow-push.ts b/packages/connections/src/workflow-push.ts
index af6a7625b2..8b860cb0ea 100644
--- a/packages/connections/src/workflow-push.ts
+++ b/packages/connections/src/workflow-push.ts
@@ -190,14 +190,7 @@ export function createGitWorkflowPusher(): WorkflowPusher {
           // path, in particular — which would otherwise fail the entire
           // seed on a re-run rather than repointing the ref it owns.
           label: "push",
-          args: [
-            "-c",
-            "credential.helper=",
-            "push",
-            "--force",
-            authRemote,
-            "HEAD:main",
-          ],
+          args: ["-c", "credential.helper=", "push", "--force", authRemote, "HEAD:main"],
         },
       ];
       for (const step of steps) {
diff --git a/packages/connections/test/credential-test.test.ts b/packages/connections/test/credential-test.test.ts
index c0a0832c4b..e25e07cc81 100644
--- a/packages/connections/test/credential-test.test.ts
+++ b/packages/connections/test/credential-test.test.ts
@@ -58,19 +58,16 @@ describe("providerModelSource", () => {
   });
 
   test("ollama's default baseURL resolves to the OpenAI-compatible /v1 form", () => {
-    expect(providerModelSource("ollama").baseURL).toBe(
-      "http://localhost:11434/v1",
-    );
+    expect(providerModelSource("ollama").baseURL).toBe("http://localhost:11434/v1");
   });
 
   test("ollama's baseURL override is normalized to the /v1 form regardless of shape", () => {
-    expect(
-      providerModelSource("ollama", "https://home-mac.example.ts.net").baseURL,
-    ).toBe("https://home-mac.example.ts.net/v1");
-    expect(
-      providerModelSource("ollama", "https://home-mac.example.ts.net/v1")
-        .baseURL,
-    ).toBe("https://home-mac.example.ts.net/v1");
+    expect(providerModelSource("ollama", "https://home-mac.example.ts.net").baseURL).toBe(
+      "https://home-mac.example.ts.net/v1",
+    );
+    expect(providerModelSource("ollama", "https://home-mac.example.ts.net/v1").baseURL).toBe(
+      "https://home-mac.example.ts.net/v1",
+    );
   });
 
   test("keeps anthropic, openai, and google-genai on their own adapters", () => {
@@ -82,13 +79,9 @@ describe("providerModelSource", () => {
   test("maps codex and xai-oauth to the openai-responses adapter", () => {
     expect(providerModelSource("codex").provider).toBe("openai-responses");
     expect(providerModelSource("codex").model).toBe("gpt-5.5");
-    expect(providerModelSource("codex").baseURL).toBe(
-      "https://chatgpt.com/backend-api",
-    );
+    expect(providerModelSource("codex").baseURL).toBe("https://chatgpt.com/backend-api");
     expect(providerModelSource("xai-oauth").provider).toBe("openai-responses");
-    expect(providerModelSource("xai-oauth").baseURL).toBe(
-      "https://cli-chat-proxy.grok.com/v1",
-    );
+    expect(providerModelSource("xai-oauth").baseURL).toBe("https://cli-chat-proxy.grok.com/v1");
   });
 });
 
@@ -113,9 +106,7 @@ describe("codex and xai-oauth probe posture", () => {
     let url = "";
     const fetchImpl: FetchLike = async (requested, init) => {
       url = requested;
-      expect((init.headers as Headers).get("authorization")).toBe(
-        "Bearer tok_1",
-      );
+      expect((init.headers as Headers).get("authorization")).toBe("Bearer tok_1");
       return new Response(JSON.stringify({ data: [] }), { status: 200 });
     };
     const accepted = await testProviderCredential({
@@ -129,8 +120,7 @@ describe("codex and xai-oauth probe posture", () => {
     const rejected = await testProviderCredential({
       provider: "xai-oauth",
       apiKey: "tok_stale",
-      fetchImpl: async () =>
-        new Response(JSON.stringify({ error: "expired" }), { status: 401 }),
+      fetchImpl: async () => new Response(JSON.stringify({ error: "expired" }), { status: 401 }),
     });
     expect(rejected.ok).toBe(false);
   });
@@ -153,9 +143,7 @@ describe("testProviderCredential", () => {
 
   // Google's list-models endpoint rejects a bad key with 400
   // INVALID_ARGUMENT rather than 401/403.
-  const rejectedKeyResponse = (
-    provider: SupportedCredentialProvider,
-  ): Response =>
+  const rejectedKeyResponse = (provider: SupportedCredentialProvider): Response =>
     provider === "google-genai"
       ? new Response(
           JSON.stringify({
@@ -167,10 +155,7 @@ describe("testProviderCredential", () => {
           }),
           { status: 400 },
         )
-      : new Response(
-          JSON.stringify({ error: { message: "invalid api key" } }),
-          { status: 401 },
-        );
+      : new Response(JSON.stringify({ error: { message: "invalid api key" } }), { status: 401 });
 
   for (const provider of providers) {
     test(`${provider}: reports ok when the key is accepted`, async () => {
@@ -205,10 +190,9 @@ describe("testProviderCredential", () => {
 
     test(`${provider}: distinguishes a non-auth provider error from a rejected key`, async () => {
       const fetchImpl: FetchLike = async () =>
-        new Response(
-          JSON.stringify({ error: { message: "internal server error" } }),
-          { status: 500 },
-        );
+        new Response(JSON.stringify({ error: { message: "internal server error" } }), {
+          status: 500,
+        });
 
       const result = await testProviderCredential({
         provider,
@@ -255,9 +239,7 @@ describe("testProviderCredential", () => {
 
       const carriesKey =
         seenUrl.includes("test-secret-key") ||
-        Object.values(seenHeaders).some((value) =>
-          value.includes("test-secret-key"),
-        );
+        Object.values(seenHeaders).some((value) => value.includes("test-secret-key"));
       expect(carriesKey).toBe(true);
     });
 
@@ -315,8 +297,7 @@ describe("testProviderCredential: xai", () => {
       new Response(
         JSON.stringify({
           code: "invalid-argument",
-          error:
-            "Incorrect API key provided. You can obtain an API key from https://console.x.ai.",
+          error: "Incorrect API key provided. You can obtain an API key from https://console.x.ai.",
         }),
         { status: 400 },
       );
@@ -337,10 +318,9 @@ describe("testProviderCredential: xai", () => {
 
   test("distinguishes a non-auth provider error from a rejected key", async () => {
     const fetchImpl: FetchLike = async () =>
-      new Response(
-        JSON.stringify({ code: "internal-error", error: "server exploded" }),
-        { status: 500 },
-      );
+      new Response(JSON.stringify({ code: "internal-error", error: "server exploded" }), {
+        status: 500,
+      });
 
     const result = await testProviderCredential({
       provider: "xai",
@@ -357,10 +337,9 @@ describe("testProviderCredential: xai", () => {
 
   test("a 400 that isn't the invalid-argument code is not treated as a rejected key", async () => {
     const fetchImpl: FetchLike = async () =>
-      new Response(
-        JSON.stringify({ code: "some-other-code", error: "unrelated" }),
-        { status: 400 },
-      );
+      new Response(JSON.stringify({ code: "some-other-code", error: "unrelated" }), {
+        status: 400,
+      });
 
     const result = await testProviderCredential({
       provider: "xai",
@@ -468,21 +447,13 @@ describe("testProviderCredential: ollama", () => {
 
 describe("ollamaApiRoot / ollamaOpenAICompatBaseURL", () => {
   test("strips a trailing /v1 to find the plain root", () => {
-    expect(ollamaApiRoot("http://localhost:11434/v1")).toBe(
-      "http://localhost:11434",
-    );
-    expect(ollamaApiRoot("http://localhost:11434")).toBe(
-      "http://localhost:11434",
-    );
-    expect(ollamaApiRoot("http://localhost:11434/")).toBe(
-      "http://localhost:11434",
-    );
+    expect(ollamaApiRoot("http://localhost:11434/v1")).toBe("http://localhost:11434");
+    expect(ollamaApiRoot("http://localhost:11434")).toBe("http://localhost:11434");
+    expect(ollamaApiRoot("http://localhost:11434/")).toBe("http://localhost:11434");
   });
 
   test("always appends exactly one /v1", () => {
-    expect(ollamaOpenAICompatBaseURL("http://localhost:11434")).toBe(
-      "http://localhost:11434/v1",
-    );
+    expect(ollamaOpenAICompatBaseURL("http://localhost:11434")).toBe("http://localhost:11434/v1");
     expect(ollamaOpenAICompatBaseURL("http://localhost:11434/v1")).toBe(
       "http://localhost:11434/v1",
     );
@@ -496,11 +467,7 @@ describe("fetchOllamaModelCapabilities", () => {
         status: 200,
       });
     expect(
-      await fetchOllamaModelCapabilities(
-        "http://localhost:11434",
-        "llama3.2",
-        fetchImpl,
-      ),
+      await fetchOllamaModelCapabilities("http://localhost:11434", "llama3.2", fetchImpl),
     ).toEqual([
       "plain-text",
       "plain-text-streaming",
@@ -518,11 +485,7 @@ describe("fetchOllamaModelCapabilities", () => {
         status: 200,
       });
     expect(
-      await fetchOllamaModelCapabilities(
-        "http://localhost:11434",
-        "all-minilm",
-        fetchImpl,
-      ),
+      await fetchOllamaModelCapabilities("http://localhost:11434", "all-minilm", fetchImpl),
     ).toEqual([]);
   });
 
@@ -531,23 +494,14 @@ describe("fetchOllamaModelCapabilities", () => {
       throw new Error("ECONNREFUSED");
     };
     expect(
-      await fetchOllamaModelCapabilities(
-        "http://localhost:11434",
-        "llama3.2",
-        fetchImpl,
-      ),
+      await fetchOllamaModelCapabilities("http://localhost:11434", "llama3.2", fetchImpl),
     ).toEqual([]);
   });
 
   test("returns an empty list when the instance predates the capabilities field", async () => {
-    const fetchImpl: FetchLike = async () =>
-      new Response(JSON.stringify({}), { status: 200 });
+    const fetchImpl: FetchLike = async () => new Response(JSON.stringify({}), { status: 200 });
     expect(
-      await fetchOllamaModelCapabilities(
-        "http://localhost:11434",
-        "llama3.2",
-        fetchImpl,
-      ),
+      await fetchOllamaModelCapabilities("http://localhost:11434", "llama3.2", fetchImpl),
     ).toEqual([]);
   });
 });
@@ -568,16 +522,12 @@ describe("fetchOllamaModelCatalog", () => {
         );
       }
       const body = JSON.parse(init.body as string) as { model: string };
-      return new Response(
-        JSON.stringify({ capabilities: showCapabilities[body.model] ?? [] }),
-        { status: 200 },
-      );
+      return new Response(JSON.stringify({ capabilities: showCapabilities[body.model] ?? [] }), {
+        status: 200,
+      });
     };
 
-    const models = await fetchOllamaModelCatalog(
-      "http://localhost:11434",
-      fetchImpl,
-    );
+    const models = await fetchOllamaModelCatalog("http://localhost:11434", fetchImpl);
     expect(models).toEqual([
       {
         canonicalName: "qwen3.8:27b",
@@ -616,47 +566,35 @@ describe("fetchOllamaModelCatalog", () => {
       });
     };
 
-    const models = await fetchOllamaModelCatalog(
-      "http://localhost:11434",
-      fetchImpl,
-    );
-    expect(models?.map((model) => model.canonicalName)).toEqual([
-      "gpt-oss:20b",
-    ]);
+    const models = await fetchOllamaModelCatalog("http://localhost:11434", fetchImpl);
+    expect(models?.map((model) => model.canonicalName)).toEqual(["gpt-oss:20b"]);
   });
 
   test("returns undefined when every model is a cloud-proxy model", async () => {
     const fetchImpl: FetchLike = async (url) => {
       if (url.toString().endsWith("/api/tags")) {
-        return new Response(
-          JSON.stringify({ models: [{ name: "minimax-m2:cloud" }] }),
-          { status: 200 },
-        );
+        return new Response(JSON.stringify({ models: [{ name: "minimax-m2:cloud" }] }), {
+          status: 200,
+        });
       }
       return new Response(JSON.stringify({ capabilities: ["completion"] }), {
         status: 200,
       });
     };
-    expect(
-      await fetchOllamaModelCatalog("http://localhost:11434", fetchImpl),
-    ).toBeUndefined();
+    expect(await fetchOllamaModelCatalog("http://localhost:11434", fetchImpl)).toBeUndefined();
   });
 
   test("returns undefined when the instance is unreachable", async () => {
     const fetchImpl: FetchLike = async () => {
       throw new Error("ECONNREFUSED");
     };
-    expect(
-      await fetchOllamaModelCatalog("http://localhost:11434", fetchImpl),
-    ).toBeUndefined();
+    expect(await fetchOllamaModelCatalog("http://localhost:11434", fetchImpl)).toBeUndefined();
   });
 
   test("returns undefined when the response carries zero models", async () => {
     const fetchImpl: FetchLike = async () =>
       new Response(JSON.stringify({ models: [] }), { status: 200 });
-    expect(
-      await fetchOllamaModelCatalog("http://localhost:11434", fetchImpl),
-    ).toBeUndefined();
+    expect(await fetchOllamaModelCatalog("http://localhost:11434", fetchImpl)).toBeUndefined();
   });
 });
 
@@ -714,10 +652,9 @@ describe("testProviderCredential: opencode-zen", () => {
       seenUrl = url;
       seenMethod = init.method;
       seenBody = init.body;
-      return new Response(
-        JSON.stringify({ error: { message: "messages is empty" } }),
-        { status: 400 },
-      );
+      return new Response(JSON.stringify({ error: { message: "messages is empty" } }), {
+        status: 400,
+      });
     };
 
     await testProviderCredential({
@@ -783,15 +720,13 @@ describe("testProviderCredential: opencode-zen", () => {
 
   test("tells a working key apart from a rejected one: same provider text, two different messages", async () => {
     const workingKeyOtherProblem: FetchLike = async () =>
-      new Response(
-        JSON.stringify({ error: { message: "temporarily unavailable" } }),
-        { status: 422 },
-      );
+      new Response(JSON.stringify({ error: { message: "temporarily unavailable" } }), {
+        status: 422,
+      });
     const rejectedKey: FetchLike = async () =>
-      new Response(
-        JSON.stringify({ error: { message: "temporarily unavailable" } }),
-        { status: 401 },
-      );
+      new Response(JSON.stringify({ error: { message: "temporarily unavailable" } }), {
+        status: 401,
+      });
 
     const workingResult = await testProviderCredential({
       provider: "opencode-zen",
diff --git a/packages/connections/test/github-oauth-connect.test.ts b/packages/connections/test/github-oauth-connect.test.ts
index c6da066b3b..d95a0755f6 100644
--- a/packages/connections/test/github-oauth-connect.test.ts
+++ b/packages/connections/test/github-oauth-connect.test.ts
@@ -26,10 +26,7 @@ import {
   GITHUB_AUTHORIZE_URL,
   GITHUB_TOKEN_EXCHANGE_URL,
 } from "../src/github-connect";
-import {
-  createOAuthConnectRoutes,
-  DEFAULT_RETURN_PATH_ALLOWLIST,
-} from "../src/oauth-routes";
+import { createOAuthConnectRoutes, DEFAULT_RETURN_PATH_ALLOWLIST } from "../src/oauth-routes";
 import { createTenantConnectCredential } from "../src/oauth-tenant-connect";
 
 /** A fixture standing in for the real `github` connector descriptor a
@@ -80,8 +77,7 @@ const REAL_GITHUB: ConnectorDescriptor = {
 
 // What `oauthStartHref("tnt_1", "github", "/plugins")` renders into the
 // plugins gallery's Connect link.
-const UI_START_URL =
-  "/api/tenants/tnt_1/connections/oauth/github/start?return=%2Fplugins";
+const UI_START_URL = "/api/tenants/tnt_1/connections/oauth/github/start?return=%2Fplugins";
 
 const TENANT = {
   id: "tnt_1",
@@ -201,8 +197,7 @@ function cookieHeaderFrom(response: Response): string {
 
 describe("hosted GitHub one-click connect through the UI's start URL", () => {
   test("start -> callback persists the exchanged token and lands back on /plugins", async () => {
-    const { app, providers, credentials, seeds, exchangeBodies } =
-      mountHubShaped();
+    const { app, providers, credentials, seeds, exchangeBodies } = mountHubShaped();
 
     const started = await app.request(UI_START_URL);
     expect(started.status).toBe(302);
@@ -222,10 +217,7 @@ describe("hosted GitHub one-click connect through the UI's start URL", () => {
       { headers: { cookie } },
     );
     expect(callback.status).toBe(302);
-    const redirect = new URL(
-      callback.headers.get("location") ?? "",
-      "https://x",
-    );
+    const redirect = new URL(callback.headers.get("location") ?? "", "https://x");
     expect(redirect.pathname).toBe("/plugins");
     expect(redirect.searchParams.get("outcome")).toBe("connected");
     expect(redirect.searchParams.get("tenantSlug")).toBe(TENANT.slug);
@@ -239,9 +231,7 @@ describe("hosted GitHub one-click connect through the UI's start URL", () => {
           "https://bench.example.com/api/tenants/tnt_1/connections/oauth/github/callback",
       },
     ]);
-    expect(providers).toEqual([
-      { tenantId: TENANT.id, name: "github", plugin: "http" },
-    ]);
+    expect(providers).toEqual([{ tenantId: TENANT.id, name: "github", plugin: "http" }]);
     expect(credentials).toEqual([
       {
         tenantId: TENANT.id,
diff --git a/packages/connections/test/mcp-server-store.drizzle.test.ts b/packages/connections/test/mcp-server-store.drizzle.test.ts
index 7b4ffc2b2f..889e42dee1 100644
--- a/packages/connections/test/mcp-server-store.drizzle.test.ts
+++ b/packages/connections/test/mcp-server-store.drizzle.test.ts
@@ -64,154 +64,140 @@ async function seedMcpServer(
   });
 }
 
-describeIfDb(
-  "listMcpServerConnections: tenant ancestor-chain inheritance",
-  () => {
-    const target = dbTargetFromUrl(
-      databaseUrl ?? "postgres://localhost:5432/unused",
-    );
-
-    beforeAll(async () => {
-      await runMigrations(target, { schema: SCHEMA });
-    });
-
-    afterAll(async () => {
-      await dropSchema(target, { schema: SCHEMA });
-    });
-
-    test("a child tenant sees a parent tenant's MCP server connection", async () => {
-      const { db, close } = createDB({ ...target, schema: SCHEMA });
-      try {
-        await seedTenant(db, { id: "tnt_sees_parent" });
-        await seedTenant(db, {
-          id: "tnt_sees_parent_child",
-          parentId: "tnt_sees_parent",
-        });
-        await seedMcpServer(db, {
-          tenantId: "tnt_sees_parent",
+describeIfDb("listMcpServerConnections: tenant ancestor-chain inheritance", () => {
+  const target = dbTargetFromUrl(databaseUrl ?? "postgres://localhost:5432/unused");
+
+  beforeAll(async () => {
+    await runMigrations(target, { schema: SCHEMA });
+  });
+
+  afterAll(async () => {
+    await dropSchema(target, { schema: SCHEMA });
+  });
+
+  test("a child tenant sees a parent tenant's MCP server connection", async () => {
+    const { db, close } = createDB({ ...target, schema: SCHEMA });
+    try {
+      await seedTenant(db, { id: "tnt_sees_parent" });
+      await seedTenant(db, {
+        id: "tnt_sees_parent_child",
+        parentId: "tnt_sees_parent",
+      });
+      await seedMcpServer(db, {
+        tenantId: "tnt_sees_parent",
+        slug: "granola",
+        providerId: "prov_sees_parent",
+        credentialId: "cred_sees_parent",
+        name: "Granola",
+        url: "https://mcp.granola.ai/mcp",
+      });
+
+      const connections = await listMcpServerConnections(db, "tnt_sees_parent_child");
+
+      expect(connections).toEqual([
+        {
           slug: "granola",
-          providerId: "prov_sees_parent",
-          credentialId: "cred_sees_parent",
           name: "Granola",
           url: "https://mcp.granola.ai/mcp",
-        });
-
-        const connections = await listMcpServerConnections(
-          db,
-          "tnt_sees_parent_child",
-        );
-
-        expect(connections).toEqual([
-          {
-            slug: "granola",
-            name: "Granola",
-            url: "https://mcp.granola.ai/mcp",
-          },
-        ]);
-      } finally {
-        await close();
-      }
-    });
-
-    test("a child's own connection shadows a parent's same-slug connection", async () => {
-      const { db, close } = createDB({ ...target, schema: SCHEMA });
-      try {
-        await seedTenant(db, { id: "tnt_shadow_parent" });
-        await seedTenant(db, {
-          id: "tnt_shadow_child",
-          parentId: "tnt_shadow_parent",
-        });
-        await seedMcpServer(db, {
-          tenantId: "tnt_shadow_parent",
-          slug: "exa",
-          providerId: "prov_shadow_parent",
-          credentialId: "cred_shadow_parent",
-          name: "Exa (parent)",
-          url: "https://mcp.exa.ai/parent",
-        });
-        await seedMcpServer(db, {
-          tenantId: "tnt_shadow_child",
-          slug: "exa",
-          providerId: "prov_shadow_child",
-          credentialId: "cred_shadow_child",
-          name: "Exa (child)",
-          url: "https://mcp.exa.ai/child",
-        });
-
-        const connections = await listMcpServerConnections(
-          db,
-          "tnt_shadow_child",
-        );
-
-        expect(connections).toEqual([
-          { slug: "exa", name: "Exa (child)", url: "https://mcp.exa.ai/child" },
-        ]);
-      } finally {
-        await close();
-      }
-    });
-
-    test("a grandchild tenant walks two levels to see a grandparent's connection", async () => {
-      const { db, close } = createDB({ ...target, schema: SCHEMA });
-      try {
-        await seedTenant(db, { id: "tnt_grandparent" });
-        await seedTenant(db, {
-          id: "tnt_parent_of_grandchild",
-          parentId: "tnt_grandparent",
-        });
-        await seedTenant(db, {
-          id: "tnt_grandchild",
-          parentId: "tnt_parent_of_grandchild",
-        });
-        await seedMcpServer(db, {
-          tenantId: "tnt_grandparent",
-          slug: "linear",
-          providerId: "prov_grandparent",
-          credentialId: "cred_grandparent",
-          name: "Linear",
-          url: "https://mcp.linear.app/mcp",
-        });
-
-        const connections = await listMcpServerConnections(
-          db,
-          "tnt_grandchild",
-        );
-
-        expect(connections).toEqual([
-          { slug: "linear", name: "Linear", url: "https://mcp.linear.app/mcp" },
-        ]);
-      } finally {
-        await close();
-      }
-    });
-
-    test("a sibling tenant never sees another sibling's connection", async () => {
-      const { db, close } = createDB({ ...target, schema: SCHEMA });
-      try {
-        await seedTenant(db, { id: "tnt_siblings_parent" });
-        await seedTenant(db, {
-          id: "tnt_sibling_a",
-          parentId: "tnt_siblings_parent",
-        });
-        await seedTenant(db, {
-          id: "tnt_sibling_b",
-          parentId: "tnt_siblings_parent",
-        });
-        await seedMcpServer(db, {
-          tenantId: "tnt_sibling_a",
-          slug: "notion",
-          providerId: "prov_sibling_a",
-          credentialId: "cred_sibling_a",
-          name: "Notion",
-          url: "https://mcp.notion.example/mcp",
-        });
-
-        const connections = await listMcpServerConnections(db, "tnt_sibling_b");
-
-        expect(connections).toEqual([]);
-      } finally {
-        await close();
-      }
-    });
-  },
-);
+        },
+      ]);
+    } finally {
+      await close();
+    }
+  });
+
+  test("a child's own connection shadows a parent's same-slug connection", async () => {
+    const { db, close } = createDB({ ...target, schema: SCHEMA });
+    try {
+      await seedTenant(db, { id: "tnt_shadow_parent" });
+      await seedTenant(db, {
+        id: "tnt_shadow_child",
+        parentId: "tnt_shadow_parent",
+      });
+      await seedMcpServer(db, {
+        tenantId: "tnt_shadow_parent",
+        slug: "exa",
+        providerId: "prov_shadow_parent",
+        credentialId: "cred_shadow_parent",
+        name: "Exa (parent)",
+        url: "https://mcp.exa.ai/parent",
+      });
+      await seedMcpServer(db, {
+        tenantId: "tnt_shadow_child",
+        slug: "exa",
+        providerId: "prov_shadow_child",
+        credentialId: "cred_shadow_child",
+        name: "Exa (child)",
+        url: "https://mcp.exa.ai/child",
+      });
+
+      const connections = await listMcpServerConnections(db, "tnt_shadow_child");
+
+      expect(connections).toEqual([
+        { slug: "exa", name: "Exa (child)", url: "https://mcp.exa.ai/child" },
+      ]);
+    } finally {
+      await close();
+    }
+  });
+
+  test("a grandchild tenant walks two levels to see a grandparent's connection", async () => {
+    const { db, close } = createDB({ ...target, schema: SCHEMA });
+    try {
+      await seedTenant(db, { id: "tnt_grandparent" });
+      await seedTenant(db, {
+        id: "tnt_parent_of_grandchild",
+        parentId: "tnt_grandparent",
+      });
+      await seedTenant(db, {
+        id: "tnt_grandchild",
+        parentId: "tnt_parent_of_grandchild",
+      });
+      await seedMcpServer(db, {
+        tenantId: "tnt_grandparent",
+        slug: "linear",
+        providerId: "prov_grandparent",
+        credentialId: "cred_grandparent",
+        name: "Linear",
+        url: "https://mcp.linear.app/mcp",
+      });
+
+      const connections = await listMcpServerConnections(db, "tnt_grandchild");
+
+      expect(connections).toEqual([
+        { slug: "linear", name: "Linear", url: "https://mcp.linear.app/mcp" },
+      ]);
+    } finally {
+      await close();
+    }
+  });
+
+  test("a sibling tenant never sees another sibling's connection", async () => {
+    const { db, close } = createDB({ ...target, schema: SCHEMA });
+    try {
+      await seedTenant(db, { id: "tnt_siblings_parent" });
+      await seedTenant(db, {
+        id: "tnt_sibling_a",
+        parentId: "tnt_siblings_parent",
+      });
+      await seedTenant(db, {
+        id: "tnt_sibling_b",
+        parentId: "tnt_siblings_parent",
+      });
+      await seedMcpServer(db, {
+        tenantId: "tnt_sibling_a",
+        slug: "notion",
+        providerId: "prov_sibling_a",
+        credentialId: "cred_sibling_a",
+        name: "Notion",
+        url: "https://mcp.notion.example/mcp",
+      });
+
+      const connections = await listMcpServerConnections(db, "tnt_sibling_b");
+
+      expect(connections).toEqual([]);
+    } finally {
+      await close();
+    }
+  });
+});
diff --git a/packages/context-menu/package.json b/packages/context-menu/package.json
index d43cb296a9..13f9c7fbd7 100644
--- a/packages/context-menu/package.json
+++ b/packages/context-menu/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/context-menu",
+  "version": "0.0.1",
   "private": true,
   "description": "The global right-click context-menu system: resolving a DOM event to a typed target, deciding whether a modal overlay should suppress it, and the open/position state a react-ui Menu renders from",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/context-menu/src/dialog-guard.ts b/packages/context-menu/src/dialog-guard.ts
index 2d73d97518..8e55aa1fcd 100644
--- a/packages/context-menu/src/dialog-guard.ts
+++ b/packages/context-menu/src/dialog-guard.ts
@@ -9,15 +9,12 @@
 // here: Dialog and the context menu's own Menu are both Radix primitives
 // sharing Radix's dismissable-layer stack, which already closes only the
 // topmost one.
-export function isBlockingOverlayOpen(
-  doc: Pick<Document, "querySelector"> = document,
-): boolean {
+export function isBlockingOverlayOpen(doc: Pick<Document, "querySelector"> = document): boolean {
   return doc.querySelector('[role="dialog"]') !== null;
 }
 
 export function isInsideInteractiveInput(target: EventTarget | null): boolean {
   return (
-    target instanceof Element &&
-    target.closest("input, textarea, [contenteditable=true]") !== null
+    target instanceof Element && target.closest("input, textarea, [contenteditable=true]") !== null
   );
 }
diff --git a/packages/context-menu/src/focus-restore.ts b/packages/context-menu/src/focus-restore.ts
index c6b8d5a902..7941dd92f9 100644
--- a/packages/context-menu/src/focus-restore.ts
+++ b/packages/context-menu/src/focus-restore.ts
@@ -4,8 +4,7 @@
 // element worth focusing instead: the right-clicked row itself, or its
 // nearest focusable ancestor.
 
-const FOCUSABLE_SELECTOR =
-  "a[href], button, input, select, textarea, [tabindex]";
+const FOCUSABLE_SELECTOR = "a[href], button, input, select, textarea, [tabindex]";
 
 export function findFocusable(element: Element | null): HTMLElement | null {
   if (element === null) return null;
diff --git a/packages/context-menu/src/index.ts b/packages/context-menu/src/index.ts
index 66169d4df5..10e765b1d3 100644
--- a/packages/context-menu/src/index.ts
+++ b/packages/context-menu/src/index.ts
@@ -12,24 +12,12 @@
 export { resolveTarget } from "./target-resolver";
 export type { TargetDefinition } from "./target-resolver";
 
-export {
-  isBlockingOverlayOpen,
-  isInsideInteractiveInput,
-} from "./dialog-guard";
+export { isBlockingOverlayOpen, isInsideInteractiveInput } from "./dialog-guard";
 
 export { findFocusable, restoreFocus } from "./focus-restore";
 
-export {
-  contextMenuItem,
-  contextMenuSeparator,
-  isContextMenuEmpty,
-} from "./menu";
-export type {
-  ContextMenu,
-  ContextMenuEntry,
-  ContextMenuItem,
-  ContextMenuSeparator,
-} from "./menu";
+export { contextMenuItem, contextMenuSeparator, isContextMenuEmpty } from "./menu";
+export type { ContextMenu, ContextMenuEntry, ContextMenuItem, ContextMenuSeparator } from "./menu";
 
 export { useContextMenuState } from "./use-context-menu-state";
 export type { ContextMenuState } from "./use-context-menu-state";
diff --git a/packages/context-menu/src/menu.test.ts b/packages/context-menu/src/menu.test.ts
index cf4f2944cd..b70cf88ae4 100644
--- a/packages/context-menu/src/menu.test.ts
+++ b/packages/context-menu/src/menu.test.ts
@@ -1,10 +1,6 @@
 import { describe, expect, test } from "bun:test";
 
-import {
-  contextMenuItem,
-  contextMenuSeparator,
-  isContextMenuEmpty,
-} from "./menu";
+import { contextMenuItem, contextMenuSeparator, isContextMenuEmpty } from "./menu";
 
 describe("contextMenuItem", () => {
   test("stamps the item kind", () => {
diff --git a/packages/context-menu/src/menu.ts b/packages/context-menu/src/menu.ts
index f673df6584..3e7075b068 100644
--- a/packages/context-menu/src/menu.ts
+++ b/packages/context-menu/src/menu.ts
@@ -25,9 +25,7 @@ export type ContextMenu = {
   readonly entries: readonly ContextMenuEntry[];
 };
 
-export function contextMenuItem(
-  item: Omit<ContextMenuItem, "kind">,
-): ContextMenuItem {
+export function contextMenuItem(item: Omit<ContextMenuItem, "kind">): ContextMenuItem {
   return { kind: "item", ...item };
 }
 
@@ -38,7 +36,5 @@ export const contextMenuSeparator: ContextMenuSeparator = {
 /** A menu with no items has nothing to show — the trigger hook uses this to
  * decide whether to intercept the native context menu at all. */
 export function isContextMenuEmpty(menu: ContextMenu | null): boolean {
-  return (
-    menu === null || menu.entries.every((entry) => entry.kind === "separator")
-  );
+  return menu === null || menu.entries.every((entry) => entry.kind === "separator");
 }
diff --git a/packages/context-menu/src/use-context-menu-state.ts b/packages/context-menu/src/use-context-menu-state.ts
index 4778fafa80..ffaa54e291 100644
--- a/packages/context-menu/src/use-context-menu-state.ts
+++ b/packages/context-menu/src/use-context-menu-state.ts
@@ -10,12 +10,7 @@ export type ContextMenuState = {
   /** The element that was right-clicked to open the current (or last-shown)
    * menu — where focus returns to once the menu closes. */
   readonly triggerElement: Element | null;
-  readonly show: (
-    x: number,
-    y: number,
-    menu: ContextMenu,
-    triggerElement?: Element | null,
-  ) => void;
+  readonly show: (x: number, y: number, menu: ContextMenu, triggerElement?: Element | null) => void;
   readonly hide: () => void;
 };
 
@@ -30,12 +25,7 @@ export function useContextMenuState(): ContextMenuState {
   const [triggerElement, setTriggerElement] = useState<Element | null>(null);
 
   const show = useCallback(
-    (
-      x: number,
-      y: number,
-      next: ContextMenu,
-      origin: Element | null = null,
-    ) => {
+    (x: number, y: number, next: ContextMenu, origin: Element | null = null) => {
       setPosition({ x, y });
       setMenu(next);
       setTriggerElement(origin);
diff --git a/packages/context-menu/src/use-document-context-menu-trigger.ts b/packages/context-menu/src/use-document-context-menu-trigger.ts
index fd2f44c9c8..4805c4f6fb 100644
--- a/packages/context-menu/src/use-document-context-menu-trigger.ts
+++ b/packages/context-menu/src/use-document-context-menu-trigger.ts
@@ -1,9 +1,6 @@
 import { useEffect } from "react";
 
-import {
-  isBlockingOverlayOpen,
-  isInsideInteractiveInput,
-} from "./dialog-guard";
+import { isBlockingOverlayOpen, isInsideInteractiveInput } from "./dialog-guard";
 import { isContextMenuEmpty } from "./menu";
 import type { ContextMenu } from "./menu";
 
@@ -13,12 +10,7 @@ export type ContextMenuTriggerOptions = {
   readonly resolve: (target: EventTarget | null) => ContextMenu | null;
   /** `origin` is the element the pointer event actually landed on — the
    * caller's cue for where to restore focus once the menu closes. */
-  readonly onOpen: (
-    x: number,
-    y: number,
-    menu: ContextMenu,
-    origin: Element | null,
-  ) => void;
+  readonly onOpen: (x: number, y: number, menu: ContextMenu, origin: Element | null) => void;
 };
 
 /**
@@ -33,9 +25,7 @@ export type ContextMenuTriggerOptions = {
  * click its native meaning (open in a new tab), so layering a second,
  * conflicting meaning onto it here would cost more than it gives back.
  */
-export function useDocumentContextMenuTrigger(
-  options: ContextMenuTriggerOptions,
-): void {
+export function useDocumentContextMenuTrigger(options: ContextMenuTriggerOptions): void {
   const { resolve, onOpen } = options;
   useEffect(() => {
     function handleContextMenu(event: MouseEvent): void {
diff --git a/packages/context-menu/test/context-menu-view.test.tsx b/packages/context-menu/test/context-menu-view.test.tsx
index 08ff333a45..66e8cad373 100644
--- a/packages/context-menu/test/context-menu-view.test.tsx
+++ b/packages/context-menu/test/context-menu-view.test.tsx
@@ -153,9 +153,7 @@ describe("ContextMenuView danger styling", () => {
     );
     await flush();
 
-    const items = document.querySelectorAll<HTMLElement>(
-      '[data-slot="menu-item"]',
-    );
+    const items = document.querySelectorAll<HTMLElement>('[data-slot="menu-item"]');
     expect(items).toHaveLength(2);
     expect(items[0]?.className).not.toContain("text-destructive");
     expect(items[1]?.className).toContain("text-destructive");
@@ -176,11 +174,7 @@ describe("ContextMenuView Esc precedence", () => {
         createElement(
           Dialog,
           { open: dialogOpen, onOpenChange: setDialogOpen },
-          createElement(
-            DialogContent,
-            null,
-            createElement(DialogTitle, null, "Rename channel"),
-          ),
+          createElement(DialogContent, null, createElement(DialogTitle, null, "Rename channel")),
         ),
         createElement(ContextMenuView, {
           x: 10,
diff --git a/packages/context-menu/test/dialog-guard.test.ts b/packages/context-menu/test/dialog-guard.test.ts
index e74cacc9a3..9f9872b65b 100644
--- a/packages/context-menu/test/dialog-guard.test.ts
+++ b/packages/context-menu/test/dialog-guard.test.ts
@@ -1,9 +1,6 @@
 import { afterEach, describe, expect, test } from "bun:test";
 
-import {
-  isBlockingOverlayOpen,
-  isInsideInteractiveInput,
-} from "../src/dialog-guard";
+import { isBlockingOverlayOpen, isInsideInteractiveInput } from "../src/dialog-guard";
 
 afterEach(() => {
   document.body.innerHTML = "";
diff --git a/packages/context-menu/test/target-resolver.test.ts b/packages/context-menu/test/target-resolver.test.ts
index d4f275385a..d2db373154 100644
--- a/packages/context-menu/test/target-resolver.test.ts
+++ b/packages/context-menu/test/target-resolver.test.ts
@@ -61,9 +61,7 @@ describe("resolveTarget", () => {
   });
 
   test("falls through when resolve opts out with null", () => {
-    const container = mountHTML(
-      '<div data-ctx-channel=""><span id="empty"></span></div>',
-    );
+    const container = mountHTML('<div data-ctx-channel=""><span id="empty"></span></div>');
     const empty = container.querySelector("#empty");
     // The attribute is present but empty; resolve() sees a real string ("")
     // and this fixture's resolver still builds a target from it — swap in a
diff --git a/packages/context-menu/test/use-document-context-menu-trigger.test.tsx b/packages/context-menu/test/use-document-context-menu-trigger.test.tsx
index c09ce6dffa..72f1e127bc 100644
--- a/packages/context-menu/test/use-document-context-menu-trigger.test.tsx
+++ b/packages/context-menu/test/use-document-context-menu-trigger.test.tsx
@@ -7,9 +7,7 @@ import { useDocumentContextMenuTrigger } from "../src/use-document-context-menu-
 import type { ContextMenu } from "../src/menu";
 
 const MENU: ContextMenu = {
-  entries: [
-    contextMenuItem({ id: "open", label: "Open", onSelect: () => undefined }),
-  ],
+  entries: [contextMenuItem({ id: "open", label: "Open", onSelect: () => undefined })],
 };
 
 function mount(resolve: (target: EventTarget | null) => ContextMenu | null) {
@@ -41,10 +39,7 @@ function mount(resolve: (target: EventTarget | null) => ContextMenu | null) {
   };
 }
 
-function fireContextMenu(
-  target: EventTarget,
-  coords: { x: number; y: number },
-) {
+function fireContextMenu(target: EventTarget, coords: { x: number; y: number }) {
   const event = new MouseEvent("contextmenu", {
     bubbles: true,
     cancelable: true,
diff --git a/packages/credential-providers/README.md b/packages/credential-providers/README.md
index 372b4b8c32..fad6aa179e 100644
--- a/packages/credential-providers/README.md
+++ b/packages/credential-providers/README.md
@@ -17,10 +17,7 @@ Register it alongside the vendored built-ins in the sidecar's
 `CredentialProviderRegistry`:
 
 ```ts
-import {
-  builtinCredentialProviders,
-  createCredentialProviderRegistry,
-} from "@intx/harness";
+import { builtinCredentialProviders, createCredentialProviderRegistry } from "@intx/harness";
 import { createHttpRawAuthorizationCredentialProvider } from "@corbits/credential-providers";
 
 const providers = createCredentialProviderRegistry([
diff --git a/packages/credential-providers/package.json b/packages/credential-providers/package.json
index a00a8f6f18..5b9b4e31c0 100644
--- a/packages/credential-providers/package.json
+++ b/packages/credential-providers/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/credential-providers",
+  "version": "0.0.1",
   "private": true,
   "description": "Workbench-owned CredentialProvider plugins beyond @intx/harness's built-ins, for auth schemes the vendored http provider doesn't cover",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/credential-providers/src/http-raw-authorization-provider.test.ts b/packages/credential-providers/src/http-raw-authorization-provider.test.ts
index df91297ed0..99c985fe5a 100644
--- a/packages/credential-providers/src/http-raw-authorization-provider.test.ts
+++ b/packages/credential-providers/src/http-raw-authorization-provider.test.ts
@@ -21,8 +21,7 @@ test("sends the raw secret in authorization, with no Bearer prefix", async () =>
   const captured: { auth: string | null } = { auth: null };
   const provider = createHttpRawAuthorizationCredentialProvider({
     fetch: async (_input, init) => {
-      captured.auth =
-        (init?.headers as Headers | undefined)?.get("authorization") ?? null;
+      captured.auth = (init?.headers as Headers | undefined)?.get("authorization") ?? null;
       return new Response("{}", { status: 200 });
     },
   });
@@ -42,9 +41,7 @@ test("re-reads the material source per call, reflecting a rotation", async () =>
   const material = materialSource("original-key");
   const provider = createHttpRawAuthorizationCredentialProvider({
     fetch: async (_input, init) => {
-      auths.push(
-        (init?.headers as Headers | undefined)?.get("authorization") ?? "",
-      );
+      auths.push((init?.headers as Headers | undefined)?.get("authorization") ?? "");
       return new Response("{}", { status: 200 });
     },
   });
@@ -69,9 +66,9 @@ test("refuses a cross-origin request rather than leaking the secret off the pinn
     readCurrentMaterial: () => ({ secret: "lin_api_key_real" }),
   });
 
-  await expect(
-    mediated.fetch("https://evil.example.com/graphql"),
-  ).rejects.toThrow(/refusing cross-origin request/);
+  await expect(mediated.fetch("https://evil.example.com/graphql")).rejects.toThrow(
+    /refusing cross-origin request/,
+  );
 });
 
 test("forces redirect: manual so a same-origin 3xx never auto-follows off the handle", async () => {
diff --git a/packages/credential-providers/src/http-raw-authorization-provider.ts b/packages/credential-providers/src/http-raw-authorization-provider.ts
index 66ba25ca3b..b437d0406c 100644
--- a/packages/credential-providers/src/http-raw-authorization-provider.ts
+++ b/packages/credential-providers/src/http-raw-authorization-provider.ts
@@ -27,10 +27,7 @@ import type {
  * `@intx/harness`'s `FetchLike` so a caller can inject a stub in tests
  * without pulling the full `fetch` type's extra members.
  */
-export type FetchLike = (
-  input: string | URL | Request,
-  init?: RequestInit,
-) => Promise<Response>;
+export type FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
 
 export interface HttpRawAuthorizationCredentialProviderOptions {
   /**
@@ -70,10 +67,7 @@ export function createHttpRawAuthorizationCredentialProvider(
 
       return {
         kind: "http",
-        async fetch(
-          input: string | URL | Request,
-          init?: RequestInit,
-        ): Promise<Response> {
+        async fetch(input: string | URL | Request, init?: RequestInit): Promise<Response> {
           const target = resolveTargetUrl(input, pinnedOrigin);
           if (target.origin !== pinnedOrigin) {
             throw new Error(
@@ -88,9 +82,7 @@ export function createHttpRawAuthorizationCredentialProvider(
           if (input instanceof Request) {
             const headers = new Headers(input.headers);
             headers.set("authorization", secret);
-            return fetchImpl(
-              new Request(input, { headers, redirect: "manual" }),
-            );
+            return fetchImpl(new Request(input, { headers, redirect: "manual" }));
           }
 
           const headers = new Headers(init?.headers);
@@ -112,10 +104,7 @@ export function createHttpRawAuthorizationCredentialProvider(
  * origin, an absolute string or URL keeps its own origin (refused above if
  * it differs), and a `Request` already carries an absolute URL.
  */
-function resolveTargetUrl(
-  input: string | URL | Request,
-  pinnedOrigin: string,
-): URL {
+function resolveTargetUrl(input: string | URL | Request, pinnedOrigin: string): URL {
   if (typeof input === "string") {
     return new URL(input, pinnedOrigin);
   }
diff --git a/packages/credential-providers/src/http-x-api-key-provider.test.ts b/packages/credential-providers/src/http-x-api-key-provider.test.ts
index 66e42e287e..1d2b85309f 100644
--- a/packages/credential-providers/src/http-x-api-key-provider.test.ts
+++ b/packages/credential-providers/src/http-x-api-key-provider.test.ts
@@ -12,9 +12,7 @@ function materialSource(secret: string): { current: string } {
 }
 
 test("key is http-x-api-key", () => {
-  expect(createHttpXApiKeyCredentialProvider().key).toBe(
-    HTTP_X_API_KEY_PROVIDER_KEY,
-  );
+  expect(createHttpXApiKeyCredentialProvider().key).toBe(HTTP_X_API_KEY_PROVIDER_KEY);
 });
 
 test("sends the secret in x-api-key, not authorization", async () => {
@@ -46,9 +44,7 @@ test("re-reads the material source per call, reflecting a rotation", async () =>
   const material = materialSource("original-key");
   const provider = createHttpXApiKeyCredentialProvider({
     fetch: async (_input, init) => {
-      apiKeys.push(
-        (init?.headers as Headers | undefined)?.get("x-api-key") ?? "",
-      );
+      apiKeys.push((init?.headers as Headers | undefined)?.get("x-api-key") ?? "");
       return new Response("{}", { status: 200 });
     },
   });
@@ -73,9 +69,9 @@ test("refuses a cross-origin request rather than leaking the secret off the pinn
     readCurrentMaterial: () => ({ secret: "exa_real_key" }),
   });
 
-  await expect(
-    mediated.fetch("https://evil.example.com/search"),
-  ).rejects.toThrow(/refusing cross-origin request/);
+  await expect(mediated.fetch("https://evil.example.com/search")).rejects.toThrow(
+    /refusing cross-origin request/,
+  );
 });
 
 test("forces redirect: manual so a same-origin 3xx never auto-follows off the handle", async () => {
diff --git a/packages/credential-providers/src/http-x-api-key-provider.ts b/packages/credential-providers/src/http-x-api-key-provider.ts
index 07686150d3..5389969b58 100644
--- a/packages/credential-providers/src/http-x-api-key-provider.ts
+++ b/packages/credential-providers/src/http-x-api-key-provider.ts
@@ -26,10 +26,7 @@ import type {
  * `@intx/harness`'s `FetchLike` so a caller can inject a stub in tests
  * without pulling the full `fetch` type's extra members.
  */
-export type FetchLike = (
-  input: string | URL | Request,
-  init?: RequestInit,
-) => Promise<Response>;
+export type FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
 
 export interface HttpXApiKeyCredentialProviderOptions {
   /**
@@ -68,10 +65,7 @@ export function createHttpXApiKeyCredentialProvider(
 
       return {
         kind: "http",
-        async fetch(
-          input: string | URL | Request,
-          init?: RequestInit,
-        ): Promise<Response> {
+        async fetch(input: string | URL | Request, init?: RequestInit): Promise<Response> {
           const target = resolveTargetUrl(input, pinnedOrigin);
           if (target.origin !== pinnedOrigin) {
             throw new Error(
@@ -86,9 +80,7 @@ export function createHttpXApiKeyCredentialProvider(
           if (input instanceof Request) {
             const headers = new Headers(input.headers);
             headers.set("x-api-key", secret);
-            return fetchImpl(
-              new Request(input, { headers, redirect: "manual" }),
-            );
+            return fetchImpl(new Request(input, { headers, redirect: "manual" }));
           }
 
           const headers = new Headers(init?.headers);
@@ -110,10 +102,7 @@ export function createHttpXApiKeyCredentialProvider(
  * origin, an absolute string or URL keeps its own origin (refused above if
  * it differs), and a `Request` already carries an absolute URL.
  */
-function resolveTargetUrl(
-  input: string | URL | Request,
-  pinnedOrigin: string,
-): URL {
+function resolveTargetUrl(input: string | URL | Request, pinnedOrigin: string): URL {
   if (typeof input === "string") {
     return new URL(input, pinnedOrigin);
   }
diff --git a/packages/credential-providers/src/http-x-manus-api-key-provider.test.ts b/packages/credential-providers/src/http-x-manus-api-key-provider.test.ts
index 7a7da95b95..aaaf0629d8 100644
--- a/packages/credential-providers/src/http-x-manus-api-key-provider.test.ts
+++ b/packages/credential-providers/src/http-x-manus-api-key-provider.test.ts
@@ -12,9 +12,7 @@ function materialSource(secret: string): { current: string } {
 }
 
 test("key is http-x-manus-api-key", () => {
-  expect(createHttpXManusApiKeyCredentialProvider().key).toBe(
-    HTTP_X_MANUS_API_KEY_PROVIDER_KEY,
-  );
+  expect(createHttpXManusApiKeyCredentialProvider().key).toBe(HTTP_X_MANUS_API_KEY_PROVIDER_KEY);
 });
 
 test("sends the secret in x-manus-api-key, not authorization or x-api-key", async () => {
@@ -53,9 +51,7 @@ test("re-reads the material source per call, reflecting a rotation", async () =>
   const material = materialSource("original-key");
   const provider = createHttpXManusApiKeyCredentialProvider({
     fetch: async (_input, init) => {
-      manusKeys.push(
-        (init?.headers as Headers | undefined)?.get("x-manus-api-key") ?? "",
-      );
+      manusKeys.push((init?.headers as Headers | undefined)?.get("x-manus-api-key") ?? "");
       return new Response("{}", { status: 200 });
     },
   });
@@ -80,9 +76,9 @@ test("refuses a cross-origin request rather than leaking the secret off the pinn
     readCurrentMaterial: () => ({ secret: "manus_real_key" }),
   });
 
-  await expect(
-    mediated.fetch("https://evil.example.com/v2/skill.list"),
-  ).rejects.toThrow(/refusing cross-origin request/);
+  await expect(mediated.fetch("https://evil.example.com/v2/skill.list")).rejects.toThrow(
+    /refusing cross-origin request/,
+  );
 });
 
 test("forces redirect: manual so a same-origin 3xx never auto-follows off the handle", async () => {
@@ -116,9 +112,7 @@ test("also mediates a Request input, preserving its own headers", async () => {
     readCurrentMaterial: () => ({ secret: "manus_real_key" }),
   });
 
-  await mediated.fetch(
-    new Request(`${ORIGIN}/v2/task.create`, { method: "POST" }),
-  );
+  await mediated.fetch(new Request(`${ORIGIN}/v2/task.create`, { method: "POST" }));
 
   expect(captured.manusKey).toBe("manus_real_key");
 });
diff --git a/packages/credential-providers/src/http-x-manus-api-key-provider.ts b/packages/credential-providers/src/http-x-manus-api-key-provider.ts
index 9ef5147a62..8c0223384d 100644
--- a/packages/credential-providers/src/http-x-manus-api-key-provider.ts
+++ b/packages/credential-providers/src/http-x-manus-api-key-provider.ts
@@ -23,10 +23,7 @@ import type {
  * `@intx/harness`'s `FetchLike` so a caller can inject a stub in tests
  * without pulling the full `fetch` type's extra members.
  */
-export type FetchLike = (
-  input: string | URL | Request,
-  init?: RequestInit,
-) => Promise<Response>;
+export type FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
 
 export interface HttpXManusApiKeyCredentialProviderOptions {
   /**
@@ -65,10 +62,7 @@ export function createHttpXManusApiKeyCredentialProvider(
 
       return {
         kind: "http",
-        async fetch(
-          input: string | URL | Request,
-          init?: RequestInit,
-        ): Promise<Response> {
+        async fetch(input: string | URL | Request, init?: RequestInit): Promise<Response> {
           const target = resolveTargetUrl(input, pinnedOrigin);
           if (target.origin !== pinnedOrigin) {
             throw new Error(
@@ -83,9 +77,7 @@ export function createHttpXManusApiKeyCredentialProvider(
           if (input instanceof Request) {
             const headers = new Headers(input.headers);
             headers.set("x-manus-api-key", secret);
-            return fetchImpl(
-              new Request(input, { headers, redirect: "manual" }),
-            );
+            return fetchImpl(new Request(input, { headers, redirect: "manual" }));
           }
 
           const headers = new Headers(init?.headers);
@@ -107,10 +99,7 @@ export function createHttpXManusApiKeyCredentialProvider(
  * origin, an absolute string or URL keeps its own origin (refused above if
  * it differs), and a `Request` already carries an absolute URL.
  */
-function resolveTargetUrl(
-  input: string | URL | Request,
-  pinnedOrigin: string,
-): URL {
+function resolveTargetUrl(input: string | URL | Request, pinnedOrigin: string): URL {
   if (typeof input === "string") {
     return new URL(input, pinnedOrigin);
   }
diff --git a/packages/credential-providers/src/mcp-origin-pinned-fetch.ts b/packages/credential-providers/src/mcp-origin-pinned-fetch.ts
index 645b0cce08..64cd4a1381 100644
--- a/packages/credential-providers/src/mcp-origin-pinned-fetch.ts
+++ b/packages/credential-providers/src/mcp-origin-pinned-fetch.ts
@@ -32,10 +32,7 @@ export interface McpOriginPinnedFetchArgs {
  * the pinned origin, an absolute string or URL keeps its own origin, and
  * a `Request` already carries an absolute URL.
  */
-export function resolveMcpTargetUrl(
-  input: string | URL | Request,
-  pinnedOrigin: string,
-): URL {
+export function resolveMcpTargetUrl(input: string | URL | Request, pinnedOrigin: string): URL {
   if (typeof input === "string") {
     return new URL(input, pinnedOrigin);
   }
@@ -72,15 +69,10 @@ function applyAuthorization(headers: Headers, token: string | undefined): void {
  * present, and forces `redirect: "manual"` so a 3xx never sends a token
  * (or a keyless handshake) to a foreign host.
  */
-export function mcpOriginPinnedFetch(
-  args: McpOriginPinnedFetchArgs,
-): FetchLike {
+export function mcpOriginPinnedFetch(args: McpOriginPinnedFetchArgs): FetchLike {
   const fetchImpl: FetchLike = args.fetch ?? globalThis.fetch;
 
-  return async (
-    input: string | URL | Request,
-    init?: RequestInit,
-  ): Promise<Response> => {
+  return async (input: string | URL | Request, init?: RequestInit): Promise<Response> => {
     const target = resolveMcpTargetUrl(input, args.pinnedOrigin);
     assertMcpPinnedTarget(target, args.pinnedOrigin);
     const token = args.readToken();
diff --git a/packages/credential-providers/src/mcp-streamable-http-provider.test.ts b/packages/credential-providers/src/mcp-streamable-http-provider.test.ts
index 0f5e31c832..b1f88d8732 100644
--- a/packages/credential-providers/src/mcp-streamable-http-provider.test.ts
+++ b/packages/credential-providers/src/mcp-streamable-http-provider.test.ts
@@ -24,9 +24,7 @@ function contextWith(
   } as CredentialShapeContext;
 }
 
-function capturingFetch(
-  respond?: (input: string | URL | Request, init?: RequestInit) => Response,
-) {
+function capturingFetch(respond?: (input: string | URL | Request, init?: RequestInit) => Response) {
   const seen: { url: string; headers: Headers; redirect?: string }[] = [];
   const fetchImpl = async (
     input: string | URL | Request,
@@ -81,9 +79,7 @@ describe(MCP_STREAMABLE_HTTP_PROVIDER_KEY, () => {
     });
     const shaped = provider.shape(contextWith("tok-123"));
     if (shaped.kind !== "http") throw new Error("expected http");
-    await expect(shaped.fetch("https://evil.example/steal")).rejects.toThrow(
-      /pinned to/,
-    );
+    await expect(shaped.fetch("https://evil.example/steal")).rejects.toThrow(/pinned to/);
     expect(seen).toHaveLength(0);
   });
 
@@ -108,9 +104,7 @@ describe(MCP_STREAMABLE_HTTP_PROVIDER_KEY, () => {
     const provider = createMcpStreamableHttpCredentialProvider({
       fetch: fetchImpl,
     });
-    const shaped = provider.shape(
-      contextWith("tok-canva", "https://mcp.canva.com/mcp"),
-    );
+    const shaped = provider.shape(contextWith("tok-canva", "https://mcp.canva.com/mcp"));
     if (shaped.kind !== "http") throw new Error("expected http");
     await shaped.fetch("https://canva.ai/mcp");
     expect(seen).toHaveLength(1);
@@ -124,9 +118,7 @@ describe(MCP_STREAMABLE_HTTP_PROVIDER_KEY, () => {
     const provider = createMcpStreamableHttpCredentialProvider({
       fetch: fetchImpl,
     });
-    const shaped = provider.shape(
-      contextWith("tok-canva", "https://mcp.canva.com/mcp"),
-    );
+    const shaped = provider.shape(contextWith("tok-canva", "https://mcp.canva.com/mcp"));
     if (shaped.kind !== "http") throw new Error("expected http");
     await expect(shaped.fetch("https://evil.example/steal")).rejects.toThrow(
       "mcp-streamable-http credential is pinned to https://mcp.canva.com; refusing cross-origin request to https://evil.example",
@@ -139,9 +131,7 @@ describe(MCP_STREAMABLE_HTTP_PROVIDER_KEY, () => {
     const provider = createMcpStreamableHttpCredentialProvider({
       fetch: fetchImpl,
     });
-    const shaped = provider.shape(
-      contextWith("tok-canva", "https://mcp.canva.com/mcp"),
-    );
+    const shaped = provider.shape(contextWith("tok-canva", "https://mcp.canva.com/mcp"));
     if (shaped.kind !== "http") throw new Error("expected http");
     await expect(shaped.fetch("https://notcanva.com/mcp")).rejects.toThrow(
       "mcp-streamable-http credential is pinned to https://mcp.canva.com; refusing cross-origin request to https://notcanva.com",
@@ -154,9 +144,7 @@ describe(MCP_STREAMABLE_HTTP_PROVIDER_KEY, () => {
     const provider = createMcpStreamableHttpCredentialProvider({
       fetch: fetchImpl,
     });
-    const shaped = provider.shape(
-      contextWith("tok-canva", "https://mcp.canva.com/mcp"),
-    );
+    const shaped = provider.shape(contextWith("tok-canva", "https://mcp.canva.com/mcp"));
     if (shaped.kind !== "http") throw new Error("expected http");
     await expect(shaped.fetch("https://media.canva.com/mcp")).rejects.toThrow(
       "mcp-streamable-http credential is pinned to https://mcp.canva.com; refusing cross-origin request to https://media.canva.com",
@@ -175,9 +163,7 @@ describe(MCP_STREAMABLE_HTTP_PROVIDER_KEY, () => {
     const provider = createMcpStreamableHttpCredentialProvider({
       fetch: fetchImpl,
     });
-    const shaped = provider.shape(
-      contextWith("tok-canva", "https://mcp.canva.com/mcp"),
-    );
+    const shaped = provider.shape(contextWith("tok-canva", "https://mcp.canva.com/mcp"));
     if (shaped.kind !== "http") throw new Error("expected http");
     const response = await shaped.fetch("https://mcp.canva.com/mcp");
     expect(response.status).toBe(302);
@@ -197,9 +183,7 @@ describe(MCP_STREAMABLE_HTTP_PROVIDER_KEY, () => {
     const provider = createMcpStreamableHttpCredentialProvider({
       fetch: fetchImpl,
     });
-    const shaped = provider.shape(
-      contextWith("tok-canva", "https://mcp.canva.com/mcp"),
-    );
+    const shaped = provider.shape(contextWith("tok-canva", "https://mcp.canva.com/mcp"));
     if (shaped.kind !== "http") throw new Error("expected http");
     const response = await shaped.fetch("https://mcp.canva.com/mcp");
     expect(response.status).toBe(302);
diff --git a/packages/docker-provisioner/package.json b/packages/docker-provisioner/package.json
index b4f10884f5..30aa1b9925 100644
--- a/packages/docker-provisioner/package.json
+++ b/packages/docker-provisioner/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/docker-provisioner",
+  "version": "0.0.1",
   "private": true,
   "description": "SidecarProvisioner plugin that runs sidecar containers with the local Docker CLI",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/docker-provisioner/src/config.ts b/packages/docker-provisioner/src/config.ts
index 46aac58a2c..7703462baa 100644
--- a/packages/docker-provisioner/src/config.ts
+++ b/packages/docker-provisioner/src/config.ts
@@ -24,13 +24,9 @@ export function readDockerProvisionerConfig(
 ): DockerProvisionerConfig {
   const parsed = Environment(env);
   if (parsed instanceof type.errors) {
-    throw new Error(
-      `invalid docker provisioner environment: ${parsed.summary}`,
-    );
+    throw new Error(`invalid docker provisioner environment: ${parsed.summary}`);
   }
-  const dataDir = resolve(
-    parsed.DOCKER_PROVISIONER_DATA_DIR ?? DEFAULT_DATA_DIR,
-  );
+  const dataDir = resolve(parsed.DOCKER_PROVISIONER_DATA_DIR ?? DEFAULT_DATA_DIR);
   return {
     image: parsed.DOCKER_PROVISIONER_IMAGE,
     stateFilePath: resolve(dataDir, "state.json"),
diff --git a/packages/docker-provisioner/src/docker-backend.ts b/packages/docker-provisioner/src/docker-backend.ts
index 88df8b7b01..ba3da461ac 100644
--- a/packages/docker-provisioner/src/docker-backend.ts
+++ b/packages/docker-provisioner/src/docker-backend.ts
@@ -65,9 +65,7 @@ export function createDockerBackend(
       }
     },
 
-    async findUnitsByAllocation(
-      allocationId: string,
-    ): Promise<readonly string[]> {
+    async findUnitsByAllocation(allocationId: string): Promise<readonly string[]> {
       const result = await commands.run([
         "ps",
         "-aq",
diff --git a/packages/docker-provisioner/src/fencing.test.ts b/packages/docker-provisioner/src/fencing.test.ts
index 47fe348a74..ed3e08a49d 100644
--- a/packages/docker-provisioner/src/fencing.test.ts
+++ b/packages/docker-provisioner/src/fencing.test.ts
@@ -90,10 +90,7 @@ describe("fencing edge cases", () => {
       }
       if (args[0] === "ps") {
         return {
-          stdout:
-            liveContainers.size > 0
-              ? `${Array.from(liveContainers).join("\n")}\n`
-              : "",
+          stdout: liveContainers.size > 0 ? `${Array.from(liveContainers).join("\n")}\n` : "",
           stderr: "",
           exitCode: 0,
         };
diff --git a/packages/docker-provisioner/src/index.ts b/packages/docker-provisioner/src/index.ts
index 790101aa17..a06541f45e 100644
--- a/packages/docker-provisioner/src/index.ts
+++ b/packages/docker-provisioner/src/index.ts
@@ -2,15 +2,8 @@ export {
   createDockerSidecarProvisioner,
   type CreateDockerSidecarProvisionerOpts,
 } from "./interchange-plugin";
-export {
-  createBunCommandRunner,
-  type CommandRunner,
-  type CommandResult,
-} from "./command-runner";
-export {
-  readDockerProvisionerConfig,
-  type DockerProvisionerConfig,
-} from "./config";
+export { createBunCommandRunner, type CommandRunner, type CommandResult } from "./command-runner";
+export { readDockerProvisionerConfig, type DockerProvisionerConfig } from "./config";
 export {
   createAllocationStateStore,
   type AllocationStateStore,
diff --git a/packages/docker-provisioner/src/interchange-plugin.test.ts b/packages/docker-provisioner/src/interchange-plugin.test.ts
index f6418fe449..ad2a3e7e23 100644
--- a/packages/docker-provisioner/src/interchange-plugin.test.ts
+++ b/packages/docker-provisioner/src/interchange-plugin.test.ts
@@ -3,15 +3,9 @@ import { mkdtemp, readFile, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 
-import {
-  createFakeCommandRunner,
-  type FakeCommandRunner,
-} from "./fake-command-runner";
+import { createFakeCommandRunner, type FakeCommandRunner } from "./fake-command-runner";
 import { createDockerSidecarProvisioner } from "./interchange-plugin";
-import {
-  createAllocationStateStore,
-  type AllocationStateStore,
-} from "@corbits/sandbox-sidecar";
+import { createAllocationStateStore, type AllocationStateStore } from "@corbits/sandbox-sidecar";
 
 const IMAGE = "ghcr.io/corbits/sidecar:latest";
 const TOKEN = "s3cr3t-bootstrap-token";
@@ -123,9 +117,7 @@ describe("ensure", () => {
     });
 
     await provisioner.ensure(baseEnsureRequest({ generation: 3 }));
-    const result = await provisioner.ensure(
-      baseEnsureRequest({ generation: 2 }),
-    );
+    const result = await provisioner.ensure(baseEnsureRequest({ generation: 2 }));
 
     expect(result).toMatchObject({
       kind: "rejected",
diff --git a/packages/docker-provisioner/src/interchange-plugin.ts b/packages/docker-provisioner/src/interchange-plugin.ts
index 552f810dfb..43a9dc8e87 100644
--- a/packages/docker-provisioner/src/interchange-plugin.ts
+++ b/packages/docker-provisioner/src/interchange-plugin.ts
@@ -7,10 +7,7 @@ import {
 import type { SidecarProvisioner } from "@intx/hub-sessions";
 
 import { createBunCommandRunner, type CommandRunner } from "./command-runner";
-import {
-  readDockerProvisionerConfig,
-  type DockerProvisionerConfig,
-} from "./config";
+import { readDockerProvisionerConfig, type DockerProvisionerConfig } from "./config";
 import { createDockerBackend } from "./docker-backend";
 
 const PROVISIONER_API_VERSION = 1 as const;
@@ -25,8 +22,7 @@ export type CreateDockerSidecarProvisionerOpts = {
 export function createDockerSidecarProvisioner(
   opts: CreateDockerSidecarProvisionerOpts = {},
 ): SidecarProvisioner {
-  const config =
-    opts.config ?? readDockerProvisionerConfig(opts.env ?? process.env);
+  const config = opts.config ?? readDockerProvisionerConfig(opts.env ?? process.env);
   const commands = opts.commands ?? createBunCommandRunner();
   const store = opts.store ?? createAllocationStateStore(config.stateFilePath);
 
diff --git a/packages/e2b-sandbox-sidecar/package.json b/packages/e2b-sandbox-sidecar/package.json
index ce93564051..9c28a88ab6 100644
--- a/packages/e2b-sandbox-sidecar/package.json
+++ b/packages/e2b-sandbox-sidecar/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/e2b-sandbox-sidecar",
+  "version": "0.0.1",
   "private": true,
   "description": "SidecarProvisioner plugin that runs sidecar sandboxes on E2B",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/e2b-sandbox-sidecar/src/config.test.ts b/packages/e2b-sandbox-sidecar/src/config.test.ts
index 17f960d890..23366b9765 100644
--- a/packages/e2b-sandbox-sidecar/src/config.test.ts
+++ b/packages/e2b-sandbox-sidecar/src/config.test.ts
@@ -31,9 +31,7 @@ describe("E2B provisioner configuration", () => {
       E2B_API_KEY: `e2b_${"a".repeat(32)}`,
       E2B_TEMPLATE: "template-one",
     };
-    expect(() => readProvisionerConfig(base, "relative-state")).toThrow(
-      /absolute path/,
-    );
+    expect(() => readProvisionerConfig(base, "relative-state")).toThrow(/absolute path/);
     expect(() =>
       readProvisionerConfig(
         {
diff --git a/packages/e2b-sandbox-sidecar/src/config.ts b/packages/e2b-sandbox-sidecar/src/config.ts
index 6078ebde10..ec947841e7 100644
--- a/packages/e2b-sandbox-sidecar/src/config.ts
+++ b/packages/e2b-sandbox-sidecar/src/config.ts
@@ -36,20 +36,14 @@ export function readProvisionerConfig(
   if (parsed instanceof type.errors) {
     throw new Error(`Invalid E2B provisioner configuration: ${parsed.summary}`);
   }
-  if (
-    !parsed.E2B_API_KEY.startsWith("e2b_") ||
-    parsed.E2B_API_KEY.length < 16
-  ) {
+  if (!parsed.E2B_API_KEY.startsWith("e2b_") || parsed.E2B_API_KEY.length < 16) {
     throw new Error("E2B_API_KEY must be a valid E2B API key");
   }
   if (!isAbsolute(dataDir)) {
     throw new Error("E2B provisioner data dir must be an absolute path");
   }
 
-  const sandboxTimeoutMs = readTimeout(
-    parsed.E2B_SANDBOX_TIMEOUT_MS,
-    15 * 60 * 1_000,
-  );
+  const sandboxTimeoutMs = readTimeout(parsed.E2B_SANDBOX_TIMEOUT_MS, 15 * 60 * 1_000);
   return {
     apiKey: parsed.E2B_API_KEY,
     template: parsed.E2B_TEMPLATE,
diff --git a/packages/e2b-sandbox-sidecar/src/e2b-backend.ts b/packages/e2b-sandbox-sidecar/src/e2b-backend.ts
index f1c034a087..eaa4feac8e 100644
--- a/packages/e2b-sandbox-sidecar/src/e2b-backend.ts
+++ b/packages/e2b-sandbox-sidecar/src/e2b-backend.ts
@@ -39,9 +39,7 @@ export function createE2BBackend(config: ProvisionerConfig): SidecarBackend {
     requestTimeoutMs: config.requestTimeoutMs,
   };
 
-  async function listAllocationSandboxIds(
-    allocationId: string,
-  ): Promise<readonly string[]> {
+  async function listAllocationSandboxIds(allocationId: string): Promise<readonly string[]> {
     const paginator = Sandbox.list({
       ...connection,
       query: {
@@ -125,11 +123,7 @@ export function createE2BBackend(config: ProvisionerConfig): SidecarBackend {
 
 function toBackendOperationError(error: unknown): BackendOperationError {
   const classified = classifyE2BError(error);
-  return new BackendOperationError(
-    classified.code,
-    classified.message,
-    classified.retryable,
-  );
+  return new BackendOperationError(classified.code, classified.message, classified.retryable);
 }
 
 export function classifyE2BError(error: unknown): SandboxOperationFailure {
diff --git a/packages/e2b-sandbox-sidecar/src/index.ts b/packages/e2b-sandbox-sidecar/src/index.ts
index fda7aeb0ee..bddff7a52d 100644
--- a/packages/e2b-sandbox-sidecar/src/index.ts
+++ b/packages/e2b-sandbox-sidecar/src/index.ts
@@ -1,10 +1,7 @@
 // Restructured from the private repo faremeter/interchange-e2b-provisioner
 // (github.com/faremeter/interchange-e2b-provisioner) at commit c1e3182. We
 // now own this code; it is not a vendored path.
-export {
-  createSidecarProvisioner,
-  type CreateSidecarProvisionerOpts,
-} from "./interchange-plugin";
+export { createSidecarProvisioner, type CreateSidecarProvisionerOpts } from "./interchange-plugin";
 export { createE2BBackend, classifyE2BError } from "./e2b-backend";
 export { readProvisionerConfig, type ProvisionerConfig } from "./config";
 export type {
diff --git a/packages/e2b-sandbox-sidecar/src/interchange-plugin.ts b/packages/e2b-sandbox-sidecar/src/interchange-plugin.ts
index 3a7b322cad..d55bf90a83 100644
--- a/packages/e2b-sandbox-sidecar/src/interchange-plugin.ts
+++ b/packages/e2b-sandbox-sidecar/src/interchange-plugin.ts
@@ -33,11 +33,7 @@ export function createSidecarProvisioner(
   opts: CreateSidecarProvisionerOpts = {},
 ): SidecarProvisioner {
   const config =
-    opts.config ??
-    readProvisionerConfig(
-      opts.env ?? process.env,
-      requireDataDir(opts.dataDir),
-    );
+    opts.config ?? readProvisionerConfig(opts.env ?? process.env, requireDataDir(opts.dataDir));
   return createCoreSidecarProvisioner({
     id: "e2b",
     apiVersion: PROVISIONER_API_VERSION,
@@ -47,7 +43,6 @@ export function createSidecarProvisioner(
     // Interchange replaced sidecar placement with capability selection.
     capabilities: sidecarCapabilityDeclarations("vm"),
     backend: createE2BBackend(config),
-    store:
-      opts.store ?? createAllocationStateStore(`${config.dataDir}/state.json`),
+    store: opts.store ?? createAllocationStateStore(`${config.dataDir}/state.json`),
   });
 }
diff --git a/packages/e2b-sandbox-sidecar/template/build-context.test.ts b/packages/e2b-sandbox-sidecar/template/build-context.test.ts
index ac8b7cad32..5d7264ee49 100644
--- a/packages/e2b-sandbox-sidecar/template/build-context.test.ts
+++ b/packages/e2b-sandbox-sidecar/template/build-context.test.ts
@@ -1,20 +1,9 @@
-import {
-  existsSync,
-  mkdtempSync,
-  readdirSync,
-  readFileSync,
-  rmSync,
-  statSync,
-} from "node:fs";
+import { existsSync, mkdtempSync, readdirSync, readFileSync, rmSync, statSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join, resolve } from "node:path";
 import { afterEach, describe, expect, test } from "bun:test";
 
-import {
-  SIDECAR_FULL_SOURCE_DIRS,
-  listWorkspaceMembers,
-  stageBuildContext,
-} from "./build-context";
+import { SIDECAR_FULL_SOURCE_DIRS, listWorkspaceMembers, stageBuildContext } from "./build-context";
 
 const repositoryRoot = resolve(import.meta.dir, "../../..");
 
@@ -66,10 +55,7 @@ describe("stageBuildContext", () => {
     // *inputs* the stager is allowed to read, not just its outputs, so a
     // future change that widens the scan (e.g. `readdirSync(repositoryRoot)`)
     // fails here even before it could copy anything sensitive.
-    const source = readFileSync(
-      resolve(import.meta.dir, "build-context.ts"),
-      "utf8",
-    );
+    const source = readFileSync(resolve(import.meta.dir, "build-context.ts"), "utf8");
     expect(source).not.toContain("readdirSync(repositoryRoot)");
   });
 
@@ -79,9 +65,7 @@ describe("stageBuildContext", () => {
       expect(existsSync(join(staged, dir, "package.json"))).toBe(true);
     }
     expect(existsSync(join(staged, "apps/sidecar/src/index.ts"))).toBe(true);
-    expect(
-      existsSync(join(staged, "vendor/intx/hub-sessions/src/index.ts")),
-    ).toBe(true);
+    expect(existsSync(join(staged, "vendor/intx/hub-sessions/src/index.ts"))).toBe(true);
   });
 
   test("ships root package.json and bun.lock", () => {
diff --git a/packages/e2b-sandbox-sidecar/template/build-context.ts b/packages/e2b-sandbox-sidecar/template/build-context.ts
index c14bbb3878..ed4dd95953 100644
--- a/packages/e2b-sandbox-sidecar/template/build-context.ts
+++ b/packages/e2b-sandbox-sidecar/template/build-context.ts
@@ -39,17 +39,9 @@ export const SIDECAR_FULL_SOURCE_DIRS = [
   "vendor/intx/workflow-host",
 ] as const;
 
-const FULL_SOURCE_COPY_EXCLUDES = new Set([
-  "node_modules",
-  "dist",
-  "coverage",
-  ".turbo",
-]);
+const FULL_SOURCE_COPY_EXCLUDES = new Set(["node_modules", "dist", "coverage", ".turbo"]);
 
-function listWorkspaceMemberDirs(
-  repositoryRoot: string,
-  globRoot: string,
-): string[] {
+function listWorkspaceMemberDirs(repositoryRoot: string, globRoot: string): string[] {
   const absoluteGlobRoot = join(repositoryRoot, ...globRoot.split("/"));
   if (!existsSync(absoluteGlobRoot)) {
     return [];
@@ -57,10 +49,7 @@ function listWorkspaceMemberDirs(
   return readdirSync(absoluteGlobRoot)
     .filter((entry) => {
       const entryPath = join(absoluteGlobRoot, entry);
-      return (
-        statSync(entryPath).isDirectory() &&
-        existsSync(join(entryPath, "package.json"))
-      );
+      return statSync(entryPath).isDirectory() && existsSync(join(entryPath, "package.json"));
     })
     .map((entry) => posix.join(globRoot, entry));
 }
@@ -71,11 +60,7 @@ export function listWorkspaceMembers(repositoryRoot: string): string[] {
   );
 }
 
-function copyFullSource(
-  repositoryRoot: string,
-  relativeDir: string,
-  destinationRoot: string,
-) {
+function copyFullSource(repositoryRoot: string, relativeDir: string, destinationRoot: string) {
   const src = join(repositoryRoot, ...relativeDir.split("/"));
   const dest = join(destinationRoot, ...relativeDir.split("/"));
   cpSync(src, dest, {
@@ -87,16 +72,8 @@ function copyFullSource(
   });
 }
 
-function copyManifestStub(
-  repositoryRoot: string,
-  relativeDir: string,
-  destinationRoot: string,
-) {
-  const srcManifest = join(
-    repositoryRoot,
-    ...relativeDir.split("/"),
-    "package.json",
-  );
+function copyManifestStub(repositoryRoot: string, relativeDir: string, destinationRoot: string) {
+  const srcManifest = join(repositoryRoot, ...relativeDir.split("/"), "package.json");
   const destDir = join(destinationRoot, ...relativeDir.split("/"));
   mkdirSync(destDir, { recursive: true });
   copyFileSync(srcManifest, join(destDir, "package.json"));
@@ -105,19 +82,10 @@ function copyManifestStub(
 // Stages the exact tree the image needs at `destinationDir`. Only ever
 // reads: repositoryRoot/package.json, repositoryRoot/bun.lock, and the
 // workspace glob roots above.
-export function stageBuildContext(
-  repositoryRoot: string,
-  destinationDir: string,
-) {
+export function stageBuildContext(repositoryRoot: string, destinationDir: string) {
   mkdirSync(destinationDir, { recursive: true });
-  copyFileSync(
-    join(repositoryRoot, "package.json"),
-    join(destinationDir, "package.json"),
-  );
-  copyFileSync(
-    join(repositoryRoot, "bun.lock"),
-    join(destinationDir, "bun.lock"),
-  );
+  copyFileSync(join(repositoryRoot, "package.json"), join(destinationDir, "package.json"));
+  copyFileSync(join(repositoryRoot, "bun.lock"), join(destinationDir, "bun.lock"));
 
   const fullSourceDirs = new Set<string>(SIDECAR_FULL_SOURCE_DIRS);
   for (const member of listWorkspaceMembers(repositoryRoot)) {
diff --git a/packages/e2b-sandbox-sidecar/template/definition.ts b/packages/e2b-sandbox-sidecar/template/definition.ts
index b1366de344..9fc76acd73 100644
--- a/packages/e2b-sandbox-sidecar/template/definition.ts
+++ b/packages/e2b-sandbox-sidecar/template/definition.ts
@@ -33,9 +33,7 @@ const BUN_IMAGE_VERSION = "1.3.9";
 /** The workspace whose dependency closure is the only one this image needs. */
 const SIDECAR_PACKAGE_NAME = "@workbench/sidecar";
 
-export function createSidecarTemplate(
-  repositoryRootValue = resolve(import.meta.dir, "../../.."),
-) {
+export function createSidecarTemplate(repositoryRootValue = resolve(import.meta.dir, "../../..")) {
   const repositoryRoot = resolve(repositoryRootValue);
   const packageTemplateDir = resolve(import.meta.dir);
 
diff --git a/packages/e2b-sandbox-sidecar/template/start-sidecar.ts b/packages/e2b-sandbox-sidecar/template/start-sidecar.ts
index 583be758e4..beb1a26540 100644
--- a/packages/e2b-sandbox-sidecar/template/start-sidecar.ts
+++ b/packages/e2b-sandbox-sidecar/template/start-sidecar.ts
@@ -15,16 +15,13 @@ function requireEnv(name: string): string {
 const dataDir = requireEnv("SIDECAR_DATA_DIR");
 await mkdir(dataDir, { recursive: true, mode: 0o700 });
 
-const child = Bun.spawn(
-  [process.execPath, "run", "/repo/apps/sidecar/src/index.ts"],
-  {
-    cwd: "/repo",
-    env: process.env,
-    stdin: "ignore",
-    stdout: "inherit",
-    stderr: "inherit",
-  },
-);
+const child = Bun.spawn([process.execPath, "run", "/repo/apps/sidecar/src/index.ts"], {
+  cwd: "/repo",
+  env: process.env,
+  stdin: "ignore",
+  stdout: "inherit",
+  stderr: "inherit",
+});
 
 for (const signal of ["SIGTERM", "SIGINT"] as const) {
   process.on(signal, () => child.kill(signal));
diff --git a/packages/error-sink/package.json b/packages/error-sink/package.json
index 242e724fca..ce79726f12 100644
--- a/packages/error-sink/package.json
+++ b/packages/error-sink/package.json
@@ -1,21 +1,21 @@
 {
   "name": "@corbits/error-sink",
-  "description": "The structured error-reporting convention every catch block calls instead of swallowing a failure (CL-6496): operation + tenant/room/agent context, a refId a person can quote to support, and secret redaction, all delivered through @intx/log so OTEL/Sentry attach later as a LogTape sink -- no call site changes",
   "version": "0.0.2",
+  "description": "The structured error-reporting convention every catch block calls instead of swallowing a failure (CL-6496): operation + tenant/room/agent context, a refId a person can quote to support, and secret redaction, all delivered through @intx/log so OTEL/Sentry attach later as a LogTape sink -- no call site changes",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "packages/error-sink"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "packages/error-sink"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -27,12 +27,12 @@
   "dependencies": {
     "arktype": "catalog:"
   },
-  "peerDependencies": {
-    "@intx/log": "0.3.0"
-  },
   "devDependencies": {
     "@logtape/logtape": "^2.2.4",
     "@types/bun": "catalog:",
     "typescript": "catalog:"
+  },
+  "peerDependencies": {
+    "@intx/log": "0.3.0"
   }
 }
diff --git a/packages/error-sink/src/error-envelope.test.ts b/packages/error-sink/src/error-envelope.test.ts
index 8d23971907..3413aed082 100644
--- a/packages/error-sink/src/error-envelope.test.ts
+++ b/packages/error-sink/src/error-envelope.test.ts
@@ -8,9 +8,7 @@ describe("error envelope", () => {
       userMessage: "We're on it. Try again in a moment.",
     });
     expect(envelope.error.code).toBe("provisioning_failed");
-    expect(envelope.error.userMessage).toBe(
-      "We're on it. Try again in a moment.",
-    );
+    expect(envelope.error.userMessage).toBe("We're on it. Try again in a moment.");
     expect(typeof envelope.error.refId).toBe("string");
     expect(envelope.error.refId.length).toBeGreaterThan(0);
   });
diff --git a/packages/error-sink/src/index.test.ts b/packages/error-sink/src/index.test.ts
index 8027b9d168..f6cb10a99e 100644
--- a/packages/error-sink/src/index.test.ts
+++ b/packages/error-sink/src/index.test.ts
@@ -123,15 +123,11 @@ describe("reportError never throws", () => {
       ],
     });
 
-    expect(() =>
-      reportError(new Error("boom"), { operation: "op" }),
-    ).not.toThrow();
+    expect(() => reportError(new Error("boom"), { operation: "op" })).not.toThrow();
   });
 
   test("survives a non-Error thrown value", () => {
-    expect(() =>
-      reportError("plain string failure", { operation: "op" }),
-    ).not.toThrow();
+    expect(() => reportError("plain string failure", { operation: "op" })).not.toThrow();
     expect(() => reportError(undefined, { operation: "op" })).not.toThrow();
   });
 });
diff --git a/packages/error-sink/src/index.ts b/packages/error-sink/src/index.ts
index 57bfe03856..e36f50826e 100644
--- a/packages/error-sink/src/index.ts
+++ b/packages/error-sink/src/index.ts
@@ -21,10 +21,7 @@
 // own try/catch is the last line of defense either way.
 import { getLogger } from "@intx/log";
 import { type } from "arktype";
-import {
-  ErrorContext,
-  type ErrorContext as ErrorContextInput,
-} from "./context";
+import { ErrorContext, type ErrorContext as ErrorContextInput } from "./context";
 import { redactExtra, redactText } from "./redact";
 import { generateRefId } from "./ref-id";
 
@@ -53,10 +50,7 @@ function redactedCopyOf(error: Error, depth = 0): Error {
  * show the person who hit it. Never throws, never blocks the caller's
  * control flow.
  */
-export function reportError(
-  error: unknown,
-  context: ErrorContextInput,
-): string {
+export function reportError(error: unknown, context: ErrorContextInput): string {
   try {
     const refId = context.refId ?? generateRefId();
     const parsed = ErrorContext(context);
@@ -87,9 +81,5 @@ export function reportError(
 
 export type { ErrorContext } from "./context";
 export { generateRefId } from "./ref-id";
-export {
-  ErrorEnvelopeShape,
-  makeErrorEnvelope,
-  parseErrorEnvelope,
-} from "./error-envelope";
+export { ErrorEnvelopeShape, makeErrorEnvelope, parseErrorEnvelope } from "./error-envelope";
 export type { ErrorEnvelope } from "./error-envelope";
diff --git a/packages/error-sink/src/redact.test.ts b/packages/error-sink/src/redact.test.ts
index e2d9dbe503..593acabf2f 100644
--- a/packages/error-sink/src/redact.test.ts
+++ b/packages/error-sink/src/redact.test.ts
@@ -9,9 +9,7 @@ describe("redactText", () => {
   });
 
   test("redacts an authorization header fragment", () => {
-    expect(redactText("Authorization: sk-live-abcdefgh1234")).toBe(
-      "[redacted]",
-    );
+    expect(redactText("Authorization: sk-live-abcdefgh1234")).toBe("[redacted]");
   });
 
   test("redacts a recognizable key-prefixed secret", () => {
@@ -21,9 +19,7 @@ describe("redactText", () => {
   });
 
   test("leaves ordinary text untouched", () => {
-    expect(redactText("could not reach the hub")).toBe(
-      "could not reach the hub",
-    );
+    expect(redactText("could not reach the hub")).toBe("could not reach the hub");
   });
 
   test("redacts sensitive query-param values in a URL while keeping it readable", () => {
@@ -43,51 +39,45 @@ describe("redactText", () => {
   });
 
   test("redacts a raw JWT with no keyword prefix", () => {
-    const jwt =
-      "eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMjM0NTY3ODkwIn0.dGhpc2lzbm90YXJlYWxzaWc";
+    const jwt = "eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMjM0NTY3ODkwIn0.dGhpc2lzbm90YXJlYWxzaWc";
     expect(redactText(`session restore failed for ${jwt}`)).toBe(
       "session restore failed for [redacted]",
     );
   });
 
   test("redacts code=/key= only in query-string position, not free text", () => {
-    expect(redactText('code=404 message="Not Found"')).toBe(
-      'code=404 message="Not Found"',
+    expect(redactText('code=404 message="Not Found"')).toBe('code=404 message="Not Found"');
+    expect(redactText('level=error msg="db timeout" code=DB_TIMEOUT retries=3')).toBe(
+      'level=error msg="db timeout" code=DB_TIMEOUT retries=3',
     );
-    expect(
-      redactText('level=error msg="db timeout" code=DB_TIMEOUT retries=3'),
-    ).toBe('level=error msg="db timeout" code=DB_TIMEOUT retries=3');
     expect(redactText("cache miss for key=user:1234:profile")).toBe(
       "cache miss for key=user:1234:profile",
     );
-    expect(redactText("at /routes/key=handler.ts:12:5)")).toBe(
-      "at /routes/key=handler.ts:12:5)",
-    );
+    expect(redactText("at /routes/key=handler.ts:12:5)")).toBe("at /routes/key=handler.ts:12:5)");
   });
 
   test("redacts code=/key= when they appear as a URL query param", () => {
-    expect(
-      redactText(
-        "https://api.example.com/authorize?client_id=abc&code=SECRETCODE",
-      ),
-    ).toBe("https://api.example.com/authorize?client_id=abc&code=[redacted]");
-    expect(
-      redactText("https://api.example.com/data?key=APIKEYVALUE&format=json"),
-    ).toBe("https://api.example.com/data?key=[redacted]&format=json");
+    expect(redactText("https://api.example.com/authorize?client_id=abc&code=SECRETCODE")).toBe(
+      "https://api.example.com/authorize?client_id=abc&code=[redacted]",
+    );
+    expect(redactText("https://api.example.com/data?key=APIKEYVALUE&format=json")).toBe(
+      "https://api.example.com/data?key=[redacted]&format=json",
+    );
   });
 
   test("does not let the value group run past a stack-frame's trailing text", () => {
-    expect(
-      redactText("auth failed token=abc123).authenticate() at line 4"),
-    ).toBe("auth failed token=[redacted]).authenticate() at line 4");
+    expect(redactText("auth failed token=abc123).authenticate() at line 4")).toBe(
+      "auth failed token=[redacted]).authenticate() at line 4",
+    );
   });
 });
 
 describe("redactExtra", () => {
   test("redacts a value whose key looks like a credential", () => {
-    expect(
-      redactExtra({ apiKey: "sk-abcdefgh1234", userId: "user_1" }),
-    ).toEqual({ apiKey: "[redacted]", userId: "user_1" });
+    expect(redactExtra({ apiKey: "sk-abcdefgh1234", userId: "user_1" })).toEqual({
+      apiKey: "[redacted]",
+      userId: "user_1",
+    });
   });
 
   test("redacts nested objects by key", () => {
@@ -122,8 +112,7 @@ describe("redactExtra", () => {
   });
 
   test("redacts a raw secret string inside an array under a non-secret key", () => {
-    const jwt =
-      "eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMjM0NTY3ODkwIn0.dGhpc2lzbm90YXJlYWxzaWc";
+    const jwt = "eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMjM0NTY3ODkwIn0.dGhpc2lzbm90YXJlYWxzaWc";
     expect(redactExtra({ sessions: [jwt, "plain-session-id"] })).toEqual({
       sessions: ["[redacted]", "plain-session-id"],
     });
diff --git a/packages/error-sink/src/redact.ts b/packages/error-sink/src/redact.ts
index fd76667f59..47628576ba 100644
--- a/packages/error-sink/src/redact.ts
+++ b/packages/error-sink/src/redact.ts
@@ -52,8 +52,7 @@ export function redactText(text: string): string {
   }
   redacted = redacted.replace(
     SENSITIVE_ASSIGNMENT_PATTERN,
-    (_match, name: string, separator: string) =>
-      `${name}${separator}[redacted]`,
+    (_match, name: string, separator: string) => `${name}${separator}[redacted]`,
   );
   redacted = redacted.replace(
     QUERY_PARAM_SENSITIVE_ASSIGNMENT_PATTERN,
@@ -75,9 +74,7 @@ function redactValue(key: string, value: unknown): unknown {
   return value;
 }
 
-function redactRecord(
-  record: Record<string, unknown>,
-): Record<string, unknown> {
+function redactRecord(record: Record<string, unknown>): Record<string, unknown> {
   const redacted: Record<string, unknown> = {};
   for (const [key, value] of Object.entries(record)) {
     redacted[key] = redactValue(key, value);
diff --git a/packages/evals/package.json b/packages/evals/package.json
index a05946e36b..3e84a310a2 100644
--- a/packages/evals/package.json
+++ b/packages/evals/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/evals",
+  "version": "0.0.1",
   "private": true,
   "description": "Myra evals (CL-6143): a first-class eval library — defineEval/runEval, composable scorers, and a persisted evals.run store — that plays a hardcoded scripted scenario against a real Myra deployment (real hub + sidecar) and grades what she actually did, not what a prompt merely claims.",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
@@ -15,9 +15,12 @@
   "dependencies": {
     "@corbits/agent-directory": "workspace:*",
     "@corbits/assistant-workflow": "workspace:*",
+    "@corbits/connections": "workspace:*",
     "@corbits/error-sink": "workspace:*",
+    "@corbits/hub-api-client": "workspace:*",
     "@corbits/migration-runner": "workspace:*",
     "@corbits/webhook-triggers": "workspace:*",
+    "@corbits/workflows": "workspace:*",
     "@intx/agent": "workspace:*",
     "@intx/db": "workspace:*",
     "@intx/hub-sessions": "workspace:*",
@@ -25,9 +28,6 @@
     "@intx/types": "workspace:*",
     "@intx/workflow": "workspace:*",
     "@modelcontextprotocol/sdk": "catalog:",
-    "@corbits/connections": "workspace:*",
-    "@corbits/hub-api-client": "workspace:*",
-    "@corbits/workflows": "workspace:*",
     "@workbench/onboarding": "workspace:*",
     "arktype": "catalog:",
     "drizzle-orm": "catalog:",
diff --git a/packages/evals/src/cases/ai-daily-research.ts b/packages/evals/src/cases/ai-daily-research.ts
index 9f60484c26..0b1a30091d 100644
--- a/packages/evals/src/cases/ai-daily-research.ts
+++ b/packages/evals/src/cases/ai-daily-research.ts
@@ -18,10 +18,7 @@ import {
   routineCreated,
   routineCreatedOnlyAfterOk,
 } from "../scorers/scorers.ts";
-import {
-  CREATE_AGENT_TOOL,
-  ROUTINE_CREATE_TOOL,
-} from "../scorers/tool-names.ts";
+import { CREATE_AGENT_TOOL, ROUTINE_CREATE_TOOL } from "../scorers/tool-names.ts";
 
 export const aiDailyResearchEval = defineEval({
   name: "ai-daily-research",
diff --git a/packages/evals/src/cases/docs-on-sdk-change.ts b/packages/evals/src/cases/docs-on-sdk-change.ts
index 4b6a0fe2bf..e486bda8c4 100644
--- a/packages/evals/src/cases/docs-on-sdk-change.ts
+++ b/packages/evals/src/cases/docs-on-sdk-change.ts
@@ -17,10 +17,7 @@ import {
   routineCreated,
   routineCreatedOnlyAfterOk,
 } from "../scorers/scorers.ts";
-import {
-  CREATE_AGENT_TOOL,
-  ROUTINE_CREATE_TOOL,
-} from "../scorers/tool-names.ts";
+import { CREATE_AGENT_TOOL, ROUTINE_CREATE_TOOL } from "../scorers/tool-names.ts";
 
 export const docsOnSdkChangeEval = defineEval({
   name: "docs-on-sdk-change",
diff --git a/packages/evals/src/cases/exa-topic-digest.ts b/packages/evals/src/cases/exa-topic-digest.ts
index 3009b2977d..34354abff6 100644
--- a/packages/evals/src/cases/exa-topic-digest.ts
+++ b/packages/evals/src/cases/exa-topic-digest.ts
@@ -16,10 +16,7 @@ import {
   routineCreated,
   routineCreatedOnlyAfterOk,
 } from "../scorers/scorers.ts";
-import {
-  CREATE_AGENT_TOOL,
-  ROUTINE_CREATE_TOOL,
-} from "../scorers/tool-names.ts";
+import { CREATE_AGENT_TOOL, ROUTINE_CREATE_TOOL } from "../scorers/tool-names.ts";
 
 export const exaTopicDigestEval = defineEval({
   name: "exa-topic-digest",
@@ -29,9 +26,7 @@ export const exaTopicDigestEval = defineEval({
     "watches Exa -> routine posting the digest here",
   steps: [
     {
-      human:
-        "we need someone to watch our Exa topics and post a digest to " +
-        "this bench",
+      human: "we need someone to watch our Exa topics and post a digest to " + "this bench",
       expect: [
         asksQuestions({ max: 4 }),
         noToolCalls(["create_agent", "routine_create", "routine_run_now"]),
diff --git a/packages/evals/src/fakes/mcp-fake-server.test.ts b/packages/evals/src/fakes/mcp-fake-server.test.ts
index 550e65ddf9..5357c8953a 100644
--- a/packages/evals/src/fakes/mcp-fake-server.test.ts
+++ b/packages/evals/src/fakes/mcp-fake-server.test.ts
@@ -1,9 +1,5 @@
 import { afterEach, expect, test } from "bun:test";
-import {
-  callMcpTool,
-  listMcpTools,
-  withMcpConnection,
-} from "@corbits/mcp-tools";
+import { callMcpTool, listMcpTools, withMcpConnection } from "@corbits/mcp-tools";
 
 import githubFixture from "./recordings/github.json";
 import { parseMcpFakeRecording } from "./recording.ts";
@@ -20,22 +16,19 @@ afterEach(() => {
 
 test("tools/list surfaces exactly the fixture's tools", async () => {
   handle = startMcpFake(recording);
-  const tools = await withMcpConnection(
-    { url: handle.url, fetchImpl: fetch },
-    (client) => listMcpTools(client),
+  const tools = await withMcpConnection({ url: handle.url, fetchImpl: fetch }, (client) =>
+    listMcpTools(client),
   );
   expect(tools.map((tool) => tool.name)).toEqual(["list_pull_requests"]);
 });
 
 test("tools/call replays the recorded response and logs a receipt", async () => {
   handle = startMcpFake(recording);
-  const result = await withMcpConnection(
-    { url: handle.url, fetchImpl: fetch },
-    (client) =>
-      callMcpTool(client, {
-        name: "list_pull_requests",
-        arguments: { owner: "acme-corp", repo: "widget-service" },
-      }),
+  const result = await withMcpConnection({ url: handle.url, fetchImpl: fetch }, (client) =>
+    callMcpTool(client, {
+      name: "list_pull_requests",
+      arguments: { owner: "acme-corp", repo: "widget-service" },
+    }),
   );
   expect(result.isError).toBe(false);
   expect(JSON.stringify(result.content)).toContain("Fix flaky checkout test");
@@ -63,13 +56,11 @@ test("an unrecorded call fails loudly instead of silently defaulting", async ()
 
 test("argument key order does not affect matching", async () => {
   handle = startMcpFake(recording);
-  const result = await withMcpConnection(
-    { url: handle.url, fetchImpl: fetch },
-    (client) =>
-      callMcpTool(client, {
-        name: "list_pull_requests",
-        arguments: { repo: "widget-service", owner: "acme-corp" },
-      }),
+  const result = await withMcpConnection({ url: handle.url, fetchImpl: fetch }, (client) =>
+    callMcpTool(client, {
+      name: "list_pull_requests",
+      arguments: { repo: "widget-service", owner: "acme-corp" },
+    }),
   );
   expect(result.isError).toBe(false);
 });
diff --git a/packages/evals/src/fakes/mcp-fake-server.ts b/packages/evals/src/fakes/mcp-fake-server.ts
index 266e217ba0..06bf2926fd 100644
--- a/packages/evals/src/fakes/mcp-fake-server.ts
+++ b/packages/evals/src/fakes/mcp-fake-server.ts
@@ -8,10 +8,7 @@
 // serves the wire protocol, it never fakes the connect mechanism.
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
-import {
-  CallToolRequestSchema,
-  ListToolsRequestSchema,
-} from "@modelcontextprotocol/sdk/types.js";
+import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
 
 import type { FakeReceipt } from "../types.ts";
 import type { McpFakeRecording, RecordedCall } from "./recording.ts";
@@ -28,8 +25,8 @@ export interface McpFakeHandle {
 function canonical(value: unknown): string {
   if (Array.isArray(value)) return `[${value.map(canonical).join(",")}]`;
   if (typeof value === "object" && value !== null) {
-    const entries = Object.entries(value as Record<string, unknown>).sort(
-      ([a], [b]) => (a < b ? -1 : a > b ? 1 : 0),
+    const entries = Object.entries(value as Record<string, unknown>).sort(([a], [b]) =>
+      a < b ? -1 : a > b ? 1 : 0,
     );
     return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${canonical(v)}`).join(",")}}`;
   }
@@ -42,15 +39,10 @@ function findRecordedCall(
   args: Record<string, unknown>,
 ): RecordedCall | undefined {
   const wanted = canonical(args);
-  return recording.calls.find(
-    (call) => call.tool === tool && canonical(call.arguments) === wanted,
-  );
+  return recording.calls.find((call) => call.tool === tool && canonical(call.arguments) === wanted);
 }
 
-function buildServer(
-  recording: McpFakeRecording,
-  receipts: FakeReceipt[],
-): Server {
+function buildServer(recording: McpFakeRecording, receipts: FakeReceipt[]): Server {
   const server = new Server(
     { name: `${recording.server}-fake`, version: "0.0.1" },
     { capabilities: { tools: {} } },
@@ -59,9 +51,7 @@ function buildServer(
   server.setRequestHandler(ListToolsRequestSchema, () => ({
     tools: recording.tools.map((tool) => ({
       name: tool.name,
-      ...(tool.description !== undefined
-        ? { description: tool.description }
-        : {}),
+      ...(tool.description !== undefined ? { description: tool.description } : {}),
       inputSchema: tool.inputSchema,
     })),
   }));
@@ -92,10 +82,7 @@ function buildServer(
  * per-session-map pattern `stub-mcp-server.ts` establishes, needed
  * because this SDK's `Server` cannot outlive one `initialize` handshake.
  */
-export function startMcpFake(
-  recording: McpFakeRecording,
-  port = 0,
-): McpFakeHandle {
+export function startMcpFake(recording: McpFakeRecording, port = 0): McpFakeHandle {
   const receipts: FakeReceipt[] = [];
   const sessions = new Map<string, WebStandardStreamableHTTPServerTransport>();
 
diff --git a/packages/evals/src/fakes/recording.test.ts b/packages/evals/src/fakes/recording.test.ts
index abf164485c..582d73bfd3 100644
--- a/packages/evals/src/fakes/recording.test.ts
+++ b/packages/evals/src/fakes/recording.test.ts
@@ -26,19 +26,13 @@ test("parses a well-formed recording", () => {
 });
 
 test("rejects a recording missing required fields", () => {
-  expect(() => parseMcpFakeRecording({ server: "github" })).toThrow(
-    /invalid MCP fake recording/,
-  );
+  expect(() => parseMcpFakeRecording({ server: "github" })).toThrow(/invalid MCP fake recording/);
 });
 
 test("rejects a call whose response is missing isError", () => {
   const broken = {
     ...valid,
-    calls: [
-      { tool: "list_pull_requests", arguments: {}, response: { content: "x" } },
-    ],
+    calls: [{ tool: "list_pull_requests", arguments: {}, response: { content: "x" } }],
   };
-  expect(() => parseMcpFakeRecording(broken)).toThrow(
-    /invalid MCP fake recording/,
-  );
+  expect(() => parseMcpFakeRecording(broken)).toThrow(/invalid MCP fake recording/);
 });
diff --git a/packages/evals/src/fakes/recordings.ts b/packages/evals/src/fakes/recordings.ts
index f8e05a5843..654bd132fb 100644
--- a/packages/evals/src/fakes/recordings.ts
+++ b/packages/evals/src/fakes/recordings.ts
@@ -5,5 +5,4 @@ import githubJson from "./recordings/github.json";
 
 import { parseMcpFakeRecording, type McpFakeRecording } from "./recording.ts";
 
-export const GITHUB_MCP_FAKE_RECORDING: McpFakeRecording =
-  parseMcpFakeRecording(githubJson);
+export const GITHUB_MCP_FAKE_RECORDING: McpFakeRecording = parseMcpFakeRecording(githubJson);
diff --git a/packages/evals/src/index.ts b/packages/evals/src/index.ts
index 48464dafe4..d762e5a803 100644
--- a/packages/evals/src/index.ts
+++ b/packages/evals/src/index.ts
@@ -47,11 +47,7 @@ export {
   triggerIsWebhookPerPr,
   wholeRunInspectable,
 } from "./scorers/scorers.ts";
-export {
-  agentHasTools,
-  connectionIsLive,
-  fakeReceived,
-} from "./scorers/world-scorers.ts";
+export { agentHasTools, connectionIsLive, fakeReceived } from "./scorers/world-scorers.ts";
 export {
   parseMcpFakeRecording,
   type McpFakeRecording,
diff --git a/packages/evals/src/model-call.test.ts b/packages/evals/src/model-call.test.ts
index 594b61bedf..f4851a5ae5 100644
--- a/packages/evals/src/model-call.test.ts
+++ b/packages/evals/src/model-call.test.ts
@@ -7,18 +7,12 @@ test("callEvalModel posts to the Anthropic Messages API and extracts the text bl
   const calls: { url: string; init: RequestInit }[] = [];
   const fetchImpl: FetchLike = async (url, init) => {
     calls.push({ url, init });
-    return new Response(
-      JSON.stringify({ content: [{ type: "text", text: "hello there" }] }),
-      { status: 200 },
-    );
+    return new Response(JSON.stringify({ content: [{ type: "text", text: "hello there" }] }), {
+      status: 200,
+    });
   };
 
-  const result = await callEvalModel(
-    "say hi",
-    "test-key",
-    undefined,
-    fetchImpl,
-  );
+  const result = await callEvalModel("say hi", "test-key", undefined, fetchImpl);
 
   expect(result.text).toBe("hello there");
   expect(calls).toHaveLength(1);
@@ -36,23 +30,13 @@ test("callEvalModel honors an explicit model override", async () => {
     new Response(JSON.stringify({ content: [{ type: "text", text: "ok" }] }), {
       status: 200,
     });
-  const result = await callEvalModel(
-    "prompt",
-    "test-key",
-    "claude-3-opus-20240229",
-    fetchImpl,
-  );
+  const result = await callEvalModel("prompt", "test-key", "claude-3-opus-20240229", fetchImpl);
   expect(result.text).toBe("ok");
 });
 
 test("callEvalModel returns empty text when no text block is present", async () => {
   const fetchImpl: FetchLike = async () =>
     new Response(JSON.stringify({ content: [] }), { status: 200 });
-  const result = await callEvalModel(
-    "prompt",
-    "test-key",
-    undefined,
-    fetchImpl,
-  );
+  const result = await callEvalModel("prompt", "test-key", undefined, fetchImpl);
   expect(result.text).toBe("");
 });
diff --git a/packages/evals/src/persona-runner.ts b/packages/evals/src/persona-runner.ts
index a6ae3198ec..90dec0683b 100644
--- a/packages/evals/src/persona-runner.ts
+++ b/packages/evals/src/persona-runner.ts
@@ -31,12 +31,7 @@ export async function runPersonaStep(
     if (!stillAsking(turn.replyText)) {
       break;
     }
-    const reply = await personaAnswer(
-      step.persona,
-      turn.replyText,
-      history,
-      call,
-    );
+    const reply = await personaAnswer(step.persona, turn.replyText, history, call);
     if (reply.kind === "done") {
       break;
     }
diff --git a/packages/evals/src/persona.test.ts b/packages/evals/src/persona.test.ts
index 015c5f4410..aa23065e6d 100644
--- a/packages/evals/src/persona.test.ts
+++ b/packages/evals/src/persona.test.ts
@@ -19,9 +19,7 @@ test("personaAnswer builds a prompt from only the brief and the last agent reply
     seenPrompt = prompt;
     return { text: "every weekday morning at 8am" };
   };
-  const history = [
-    { human: "set up my digest", agentReply: "Happy to help — what topic?" },
-  ];
+  const history = [{ human: "set up my digest", agentReply: "Happy to help — what topic?" }];
 
   await personaAnswer(brief, "What cadence works for you?", history, call);
 
@@ -35,12 +33,7 @@ test("personaAnswer builds a prompt from only the brief and the last agent reply
 
 test("personaAnswer returns the persona's reply text as a message", async () => {
   const call = async () => ({ text: "every weekday morning at 8am" });
-  const reply = await personaAnswer(
-    brief,
-    "What cadence works for you?",
-    [],
-    call,
-  );
+  const reply = await personaAnswer(brief, "What cadence works for you?", [], call);
   expect(reply).toEqual({
     kind: "message",
     text: "every weekday morning at 8am",
@@ -49,22 +42,12 @@ test("personaAnswer returns the persona's reply text as a message", async () =>
 
 test("personaAnswer maps an exact DONE response to a done reply", async () => {
   const call = async () => ({ text: "DONE" });
-  const reply = await personaAnswer(
-    brief,
-    "Great, I'll set that up now.",
-    [],
-    call,
-  );
+  const reply = await personaAnswer(brief, "Great, I'll set that up now.", [], call);
   expect(reply).toEqual({ kind: "done" });
 });
 
 test("personaAnswer maps a DONE response with surrounding whitespace to a done reply", async () => {
   const call = async () => ({ text: "  DONE\n" });
-  const reply = await personaAnswer(
-    brief,
-    "All set, running it now.",
-    [],
-    call,
-  );
+  const reply = await personaAnswer(brief, "All set, running it now.", [], call);
   expect(reply).toEqual({ kind: "done" });
 });
diff --git a/packages/evals/src/persona.ts b/packages/evals/src/persona.ts
index bb1afc1174..0b19667c2c 100644
--- a/packages/evals/src/persona.ts
+++ b/packages/evals/src/persona.ts
@@ -65,9 +65,7 @@ export function personaAnswer(
 async function defaultCall(prompt: string): Promise<{ text: string }> {
   const key = process.env["EVAL_PROVIDER_API_KEY"];
   if (key === undefined || key === "") {
-    throw new Error(
-      "personaAnswer: EVAL_PROVIDER_API_KEY not set and no call() was injected",
-    );
+    throw new Error("personaAnswer: EVAL_PROVIDER_API_KEY not set and no call() was injected");
   }
   return callEvalModel(prompt, key);
 }
diff --git a/packages/evals/src/report.test.ts b/packages/evals/src/report.test.ts
index 33aad2ab43..8649752a4a 100644
--- a/packages/evals/src/report.test.ts
+++ b/packages/evals/src/report.test.ts
@@ -56,9 +56,7 @@ test("marks a failing scorer distinctly from a passing one", () => {
         {
           stepIndex: 0,
           turn: { human: "h", replyText: "r", toolCalls: [] },
-          scorerReports: [
-            { name: "g", pass: false, score: 0, reason: "nope", stepIndex: 0 },
-          ],
+          scorerReports: [{ name: "g", pass: false, score: 0, reason: "nope", stepIndex: 0 }],
         },
       ],
     },
diff --git a/packages/evals/src/report.ts b/packages/evals/src/report.ts
index e6496b13a7..f1778c9093 100644
--- a/packages/evals/src/report.ts
+++ b/packages/evals/src/report.ts
@@ -32,9 +32,7 @@ export function renderResultsMarkdown(
   const header = `| Eval | ${configNames.join(" | ")} |`;
   const divider = `| --- | ${configNames.map(() => "---").join(" | ")} |`;
   const rows = evalNames.map((evalName) => {
-    const cells = configNames.map((configName) =>
-      cell(byKey.get(`${evalName} ${configName}`)),
-    );
+    const cells = configNames.map((configName) => cell(byKey.get(`${evalName} ${configName}`)));
     return `| ${evalName} | ${cells.join(" | ")} |`;
   });
   return [header, divider, ...rows].join("\n") + "\n";
diff --git a/packages/evals/src/runner.test.ts b/packages/evals/src/runner.test.ts
index d562135f73..a849d2cde1 100644
--- a/packages/evals/src/runner.test.ts
+++ b/packages/evals/src/runner.test.ts
@@ -215,9 +215,7 @@ test("runEval throws rather than record a corrupted step if a persona sub-loop y
     async close() {},
   };
 
-  await expect(runEval(evalDef, target)).rejects.toThrow(
-    "runEval: step 0 produced no turns",
-  );
+  await expect(runEval(evalDef, target)).rejects.toThrow("runEval: step 0 produced no turns");
 });
 
 test("runMatrix still closes the target when a run throws", async () => {
@@ -293,9 +291,7 @@ test("runEval fires a fire-webhook step against the snapshot's enabled trigger",
   };
 
   const result = await runEval(evalDef, target);
-  expect(fired).toEqual([
-    { triggerId: "wt_live", payload: { action: "opened" } },
-  ]);
+  expect(fired).toEqual([{ triggerId: "wt_live", payload: { action: "opened" } }]);
   expect(result.steps[0]?.turn.replyText).toContain("accepted");
 });
 
@@ -316,7 +312,5 @@ test("runEval records an honest miss when a fire-webhook step finds no enabled t
     async close() {},
   };
   const result = await runEval(evalDef, target);
-  expect(result.steps[0]?.turn.replyText).toContain(
-    "no enabled webhook_trigger",
-  );
+  expect(result.steps[0]?.turn.replyText).toContain("no enabled webhook_trigger");
 });
diff --git a/packages/evals/src/scorers/scorers.test.ts b/packages/evals/src/scorers/scorers.test.ts
index 8a7b0b0bac..10c7023398 100644
--- a/packages/evals/src/scorers/scorers.test.ts
+++ b/packages/evals/src/scorers/scorers.test.ts
@@ -35,11 +35,7 @@ function call(
   };
 }
 
-function turn(
-  human: string,
-  replyText: string,
-  toolCalls: ToolCall[] = [],
-): Turn {
+function turn(human: string, replyText: string, toolCalls: ToolCall[] = []): Turn {
   return { human, replyText, toolCalls };
 }
 
@@ -65,9 +61,7 @@ function ctxWithSnapshot(
 
 describe("asksQuestions", () => {
   test("passes at or under the max", () => {
-    const transcript = [
-      turn("hi", "What topics? What cadence? What delivery channel?"),
-    ];
+    const transcript = [turn("hi", "What topics? What cadence? What delivery channel?")];
     const r = asksQuestions({ max: 4 })(ctxAt(transcript, 0));
     expect(r.pass).toBe(true);
   });
@@ -88,17 +82,13 @@ describe("asksQuestions", () => {
 describe("noToolCalls", () => {
   test("passes when none of the listed tools ran this step", () => {
     const transcript = [turn("do research", "A few questions first...")];
-    const r = noToolCalls(["create_agent", "routine_create"])(
-      ctxAt(transcript, 0),
-    );
+    const r = noToolCalls(["create_agent", "routine_create"])(ctxAt(transcript, 0));
     expect(r.pass).toBe(true);
   });
 
   test("fails when a listed tool ran this step", () => {
     const transcript = [turn("do research", "Done.", [call("create_agent")])];
-    const r = noToolCalls(["create_agent", "routine_create"])(
-      ctxAt(transcript, 0),
-    );
+    const r = noToolCalls(["create_agent", "routine_create"])(ctxAt(transcript, 0));
     expect(r.pass).toBe(false);
   });
 });
@@ -107,9 +97,7 @@ describe("noBuildBeforeAnswers", () => {
   test("passes when no build tool ran before the interview step", () => {
     const transcript = [
       turn("build me a research bot", "Sure — a few questions first..."),
-      turn("topics: AI, daily", "Great, standing that up now.", [
-        call("create_agent"),
-      ]),
+      turn("topics: AI, daily", "Great, standing that up now.", [call("create_agent")]),
     ];
     const r = noBuildBeforeAnswers(1)(ctxAt(transcript, 1));
     expect(r.pass).toBe(true);
@@ -128,20 +116,14 @@ describe("noBuildBeforeAnswers", () => {
 
 describe("namesRequiredTools", () => {
   test("passes once every named tool has been called", () => {
-    const transcript = [
-      turn("go", "ok", [call("list_connections"), call("create_agent")]),
-    ];
-    const r = namesRequiredTools(["list_connections", "create_agent"])(
-      ctxAt(transcript, 0),
-    );
+    const transcript = [turn("go", "ok", [call("list_connections"), call("create_agent")])];
+    const r = namesRequiredTools(["list_connections", "create_agent"])(ctxAt(transcript, 0));
     expect(r.pass).toBe(true);
   });
 
   test("fails when a required tool never ran", () => {
     const transcript = [turn("go", "ok", [call("list_connections")])];
-    const r = namesRequiredTools(["list_connections", "create_agent"])(
-      ctxAt(transcript, 0),
-    );
+    const r = namesRequiredTools(["list_connections", "create_agent"])(ctxAt(transcript, 0));
     expect(r.pass).toBe(false);
     expect(r.reason).toContain("create_agent");
   });
@@ -159,17 +141,13 @@ describe("memoryWritten", () => {
   });
 
   test("fails when no memory_add call happened", () => {
-    const r = memoryWritten(["example.com"])(
-      ctxAt([turn("remember this", "ok")], 0),
-    );
+    const r = memoryWritten(["example.com"])(ctxAt([turn("remember this", "ok")], 0));
     expect(r.pass).toBe(false);
   });
 
   test("fails when memory_add ran but missed the expected content", () => {
     const transcript = [
-      turn("remember this", "ok", [
-        call("memory_add", { content: "unrelated" }),
-      ]),
+      turn("remember this", "ok", [call("memory_add", { content: "unrelated" })]),
     ];
     const r = memoryWritten(["example.com"])(ctxAt(transcript, 0));
     expect(r.pass).toBe(false);
@@ -222,9 +200,7 @@ describe("agentCreatedInWorkbench", () => {
 
   test("fails when create_agent succeeded but its result shows no own chat", () => {
     const transcript = [
-      turn("make a researcher", "Done.", [
-        call("create_agent", {}, { result: "created" }),
-      ]),
+      turn("make a researcher", "Done.", [call("create_agent", {}, { result: "created" })]),
     ];
     const r = agentCreatedInWorkbench()(ctxAt(transcript, 0));
     expect(r.pass).toBe(false);
@@ -275,9 +251,7 @@ describe("routineCreated", () => {
   });
 
   test("fails when routine_create never ran", () => {
-    const r = routineCreated({ trigger: "daily" })(
-      ctxAt([turn("hi", "hi")], 0),
-    );
+    const r = routineCreated({ trigger: "daily" })(ctxAt([turn("hi", "hi")], 0));
     expect(r.pass).toBe(false);
   });
 });
@@ -313,9 +287,7 @@ describe("approvalGated", () => {
   });
 
   test("fails when the gated tool runs with no prior approval", () => {
-    const transcript = [
-      turn("update docs on SDK change", "Wired up.", [call("routine_create")]),
-    ];
+    const transcript = [turn("update docs on SDK change", "Wired up.", [call("routine_create")])];
     const r = approvalGated(["routine_create"])(ctxAt(transcript, 0));
     expect(r.pass).toBe(false);
   });
@@ -323,9 +295,7 @@ describe("approvalGated", () => {
 
 describe("githubConnectedViaConnectionsLayer", () => {
   test("fails when the world snapshot has no github connection", () => {
-    const r = githubConnectedViaConnectionsLayer()(
-      ctxAt([turn("connect github", "ok")], 0),
-    );
+    const r = githubConnectedViaConnectionsLayer()(ctxAt([turn("connect github", "ok")], 0));
     expect(r.pass).toBe(false);
     expect(r.skipped).toBeUndefined();
   });
@@ -366,9 +336,7 @@ describe("githubConnectedViaConnectionsLayer", () => {
 
 describe("agentDefinitionsHaveToolGrants", () => {
   test("fails when the world snapshot has no agent definitions", () => {
-    const r = agentDefinitionsHaveToolGrants(["greybeard"])(
-      ctxAt([turn("go", "ok")], 0),
-    );
+    const r = agentDefinitionsHaveToolGrants(["greybeard"])(ctxAt([turn("go", "ok")], 0));
     expect(r.pass).toBe(false);
   });
 
@@ -459,9 +427,7 @@ describe("triggerIsWebhookPerPr", () => {
 
 describe("reviewCommentsAttributable", () => {
   test("skips — WorldSnapshot has no reviewComments field", () => {
-    const r = reviewCommentsAttributable(["greybeard"])(
-      ctxAt([turn("pr fired", "ok")], 0),
-    );
+    const r = reviewCommentsAttributable(["greybeard"])(ctxAt([turn("pr fired", "ok")], 0));
     expect(r.skipped).toBe(true);
     expect(r.reason).toContain("reviewComments");
   });
@@ -469,9 +435,7 @@ describe("reviewCommentsAttributable", () => {
 
 describe("suggestedFixesStructurallyValid", () => {
   test("fails when the posting tool never ran", () => {
-    const r = suggestedFixesStructurallyValid()(
-      ctxAt([turn("pr fired", "ok")], 0),
-    );
+    const r = suggestedFixesStructurallyValid()(ctxAt([turn("pr fired", "ok")], 0));
     expect(r.pass).toBe(false);
     expect(r.reason).toContain("github_post_pr_review");
   });
@@ -530,11 +494,10 @@ describe("suggestedFixesStructurallyValid", () => {
 
 describe("outwardGitHubActionsRespectGrantBoundary", () => {
   const scorer = () =>
-    outwardGitHubActionsRespectGrantBoundary(
-      "abklabs/workbench",
-      "github_merge_pull_request",
-      ["Architecture reviewer", "Correctness reviewer"],
-    );
+    outwardGitHubActionsRespectGrantBoundary("abklabs/workbench", "github_merge_pull_request", [
+      "Architecture reviewer",
+      "Correctness reviewer",
+    ]);
   const attributedPost = () =>
     call("github_post_pr_review", {
       pullRequestUrl: "https://github.com/abklabs/workbench/pull/101",
@@ -584,10 +547,7 @@ describe("outwardGitHubActionsRespectGrantBoundary", () => {
 
   test("fails when the merge tool ran with no prior approval phrase", () => {
     const transcript = [
-      turn("pr fired", "ok", [
-        attributedPost(),
-        call("github_merge_pull_request"),
-      ]),
+      turn("pr fired", "ok", [attributedPost(), call("github_merge_pull_request")]),
     ];
     const r = scorer()(ctxAt(transcript, 0));
     expect(r.pass).toBe(false);
@@ -596,9 +556,7 @@ describe("outwardGitHubActionsRespectGrantBoundary", () => {
   test("passes when the merge tool only ran after an approval phrase", () => {
     const transcript = [
       turn("pr fired", "ok", [attributedPost()]),
-      turn("yes go ahead and merge it", "merged.", [
-        call("github_merge_pull_request"),
-      ]),
+      turn("yes go ahead and merge it", "merged.", [call("github_merge_pull_request")]),
     ];
     const r = scorer()(ctxAt(transcript, 1));
     expect(r.pass).toBe(true);
diff --git a/packages/evals/src/scorers/scorers.ts b/packages/evals/src/scorers/scorers.ts
index beff88f13c..3af35ec78d 100644
--- a/packages/evals/src/scorers/scorers.ts
+++ b/packages/evals/src/scorers/scorers.ts
@@ -18,19 +18,11 @@ function allToolCalls(transcript: readonly Turn[]): ToolCall[] {
   return transcript.flatMap((turn) => turn.toolCalls);
 }
 
-function toolCallsUpTo(
-  transcript: readonly Turn[],
-  turnIndex: number,
-): ToolCall[] {
+function toolCallsUpTo(transcript: readonly Turn[], turnIndex: number): ToolCall[] {
   return transcript.slice(0, turnIndex).flatMap((turn) => turn.toolCalls);
 }
 
-function result(
-  name: string,
-  pass: boolean,
-  reason: string,
-  score = pass ? 1 : 0,
-): ScorerResult {
+function result(name: string, pass: boolean, reason: string, score = pass ? 1 : 0): ScorerResult {
   return { name, pass, reason, score };
 }
 
@@ -54,8 +46,8 @@ export function asksQuestions(options: { max: number }) {
  * `noToolCalls(["create_agent"])`). */
 export function noToolCalls(tools: readonly string[]) {
   return function noToolCallsScorer(ctx: ScorerContext): ScorerResult {
-    const called = (ctx.transcript[ctx.turnIndex]?.toolCalls ?? []).filter(
-      (call) => tools.includes(call.name),
+    const called = (ctx.transcript[ctx.turnIndex]?.toolCalls ?? []).filter((call) =>
+      tools.includes(call.name),
     );
     return result(
       "noToolCalls",
@@ -93,9 +85,7 @@ export function noBuildBeforeAnswers(interviewAnsweredAtStep: number) {
 export function namesRequiredTools(tools: readonly string[]) {
   return function namesRequiredToolsScorer(ctx: ScorerContext): ScorerResult {
     const called = new Set(
-      allToolCalls(ctx.transcript.slice(0, ctx.turnIndex + 1)).map(
-        (call) => call.name,
-      ),
+      allToolCalls(ctx.transcript.slice(0, ctx.turnIndex + 1)).map((call) => call.name),
     );
     const missing = tools.filter((tool) => !called.has(tool));
     return result(
@@ -113,9 +103,9 @@ export function namesRequiredTools(tools: readonly string[]) {
  * was actually written, not just that the tool fired. */
 export function memoryWritten(keys: readonly string[]) {
   return function memoryWrittenScorer(ctx: ScorerContext): ScorerResult {
-    const writes = allToolCalls(
-      ctx.transcript.slice(0, ctx.turnIndex + 1),
-    ).filter((call) => call.name === MEMORY_ADD_TOOL && !call.isError);
+    const writes = allToolCalls(ctx.transcript.slice(0, ctx.turnIndex + 1)).filter(
+      (call) => call.name === MEMORY_ADD_TOOL && !call.isError,
+    );
     const blob = JSON.stringify(writes.map((w) => w.arguments));
     const missing = keys.filter((key) => !blob.includes(key));
     return result(
@@ -141,8 +131,7 @@ export function memoryWritten(keys: readonly string[]) {
  * was created but its own chat could not be opened is a fail — the
  * minted-chat wording would otherwise match `/own chats?/`.
  */
-const DEFINITION_CREATED_SIGNAL =
-  /Created\s+"|use this id for routines\/dispatch:|"id"\s*:/i;
+const DEFINITION_CREATED_SIGNAL = /Created\s+"|use this id for routines\/dispatch:|"id"\s*:/i;
 
 const MINTED_OWN_CHAT_SIGNAL =
   /workbenchId|chatId|chat_id|"created"\s*:|own chats?|minted|reopened/i;
@@ -159,12 +148,10 @@ function createAgentMintedOwnChat(call: ToolCall): boolean {
 }
 
 export function agentCreatedInWorkbench() {
-  return function agentCreatedInWorkbenchScorer(
-    ctx: ScorerContext,
-  ): ScorerResult {
-    const creates = allToolCalls(
-      ctx.transcript.slice(0, ctx.turnIndex + 1),
-    ).filter((call) => call.name === "create_agent");
+  return function agentCreatedInWorkbenchScorer(ctx: ScorerContext): ScorerResult {
+    const creates = allToolCalls(ctx.transcript.slice(0, ctx.turnIndex + 1)).filter(
+      (call) => call.name === "create_agent",
+    );
     const minted = creates.filter(createAgentMintedOwnChat);
     return result(
       "agentCreatedInWorkbench",
@@ -182,9 +169,9 @@ export function agentCreatedInWorkbench() {
  * `kind` ("daily" | "weekly" | "cron" | "webhook"). */
 export function routineCreated(options: { trigger: string }) {
   return function routineCreatedScorer(ctx: ScorerContext): ScorerResult {
-    const creates = allToolCalls(
-      ctx.transcript.slice(0, ctx.turnIndex + 1),
-    ).filter((call) => call.name === ROUTINE_CREATE_TOOL && !call.isError);
+    const creates = allToolCalls(ctx.transcript.slice(0, ctx.turnIndex + 1)).filter(
+      (call) => call.name === ROUTINE_CREATE_TOOL && !call.isError,
+    );
     const matching = creates.filter((call) => {
       const trigger = call.arguments["trigger"];
       return (
@@ -209,13 +196,10 @@ export function routineCreated(options: { trigger: string }) {
  * rule that a routine is only ever created after explicit human OK
  * (step 6). */
 export function routineCreatedOnlyAfterOk(okAtStep: number) {
-  return function routineCreatedOnlyAfterOkScorer(
-    ctx: ScorerContext,
-  ): ScorerResult {
-    const early = toolCallsUpTo(
-      ctx.transcript,
-      Math.min(okAtStep, ctx.turnIndex + 1),
-    ).filter((call) => call.name === ROUTINE_CREATE_TOOL);
+  return function routineCreatedOnlyAfterOkScorer(ctx: ScorerContext): ScorerResult {
+    const early = toolCallsUpTo(ctx.transcript, Math.min(okAtStep, ctx.turnIndex + 1)).filter(
+      (call) => call.name === ROUTINE_CREATE_TOOL,
+    );
     return result(
       "routineCreatedOnlyAfterOk",
       early.length === 0,
@@ -263,16 +247,9 @@ export function approvalGated(tools: readonly string[]) {
     }
     const violations: string[] = [];
     for (const [index, turn] of transcript.entries()) {
-      const gatedCalls = turn.toolCalls.filter((call) =>
-        tools.includes(call.name),
-      );
-      if (
-        gatedCalls.length > 0 &&
-        (approvedByStep === -1 || index < approvedByStep)
-      ) {
-        violations.push(
-          `step ${String(index)}: ${gatedCalls.map((c) => c.name).join(", ")}`,
-        );
+      const gatedCalls = turn.toolCalls.filter((call) => tools.includes(call.name));
+      if (gatedCalls.length > 0 && (approvedByStep === -1 || index < approvedByStep)) {
+        violations.push(`step ${String(index)}: ${gatedCalls.map((c) => c.name).join(", ")}`);
       }
     }
     return result(
@@ -352,12 +329,8 @@ function worldSnapshotFieldMissing(name: string, needs: string): ScorerResult {
  * the connection went through `@corbits/connections`, not a
  * hand-rolled token stashed some other way. */
 export function githubConnectedViaConnectionsLayer() {
-  return function githubConnectedViaConnectionsLayerScorer(
-    ctx: ScorerContext,
-  ): ScorerResult {
-    const github = ctx.world.connections.find(
-      (connection) => connection.slug === "github",
-    );
+  return function githubConnectedViaConnectionsLayerScorer(ctx: ScorerContext): ScorerResult {
+    const github = ctx.world.connections.find((connection) => connection.slug === "github");
     const connected = github?.live === true;
     return result(
       "githubConnectedViaConnectionsLayer",
@@ -377,9 +350,7 @@ export function githubConnectedViaConnectionsLayer() {
  * reach lives on the one `code-review` workflow the template's blocks
  * install — the reviewers themselves never carry a github pin. */
 export function agentDefinitionsHaveToolGrants(handles: readonly string[]) {
-  return function agentDefinitionsHaveToolGrantsScorer(
-    ctx: ScorerContext,
-  ): ScorerResult {
+  return function agentDefinitionsHaveToolGrantsScorer(ctx: ScorerContext): ScorerResult {
     const definitions = ctx.world.agentDefinitions;
     const missing = handles.filter(
       (handle) => !definitions.some((definition) => definition.name === handle),
@@ -407,9 +378,7 @@ export function agentDefinitionsHaveToolGrants(handles: readonly string[]) {
  * per selected repo, bound to the deployed code-review definition),
  * not a chat-driven `routine_create` with a webhook trigger kind. */
 export function triggerIsWebhookPerPr() {
-  return function triggerIsWebhookPerPrScorer(
-    ctx: ScorerContext,
-  ): ScorerResult {
+  return function triggerIsWebhookPerPrScorer(ctx: ScorerContext): ScorerResult {
     const live = ctx.world.webhookTriggers.find((trigger) => trigger.enabled);
     return result(
       "triggerIsWebhookPerPr",
@@ -427,15 +396,10 @@ export function triggerIsWebhookPerPr() {
  * adoption) is meant to produce. `WorldSnapshot` has no
  * `reviewComments` field today, so this always skips naming that gap. */
 export function reviewCommentsAttributable(handles: readonly string[]) {
-  return function reviewCommentsAttributableScorer(
-    ctx: ScorerContext,
-  ): ScorerResult {
+  return function reviewCommentsAttributableScorer(ctx: ScorerContext): ScorerResult {
     void ctx;
     void handles;
-    return worldSnapshotFieldMissing(
-      "reviewCommentsAttributable",
-      "reviewComments",
-    );
+    return worldSnapshotFieldMissing("reviewCommentsAttributable", "reviewComments");
   };
 }
 
@@ -446,12 +410,8 @@ export function reviewCommentsAttributable(handles: readonly string[]) {
  * least one GitHub `suggestion` fence somewhere in the review, the
  * form `aggregateReview` renders a reviewer's `suggestedFix` into. */
 export function suggestedFixesStructurallyValid() {
-  return function suggestedFixesStructurallyValidScorer(
-    ctx: ScorerContext,
-  ): ScorerResult {
-    const calls = allToolCalls(
-      ctx.transcript.slice(0, ctx.turnIndex + 1),
-    ).filter(
+  return function suggestedFixesStructurallyValidScorer(ctx: ScorerContext): ScorerResult {
+    const calls = allToolCalls(ctx.transcript.slice(0, ctx.turnIndex + 1)).filter(
       (call) => call.name === GITHUB_POST_PR_REVIEW_TOOL && !call.isError,
     );
     if (calls.length === 0) {
@@ -489,9 +449,7 @@ export function suggestedFixesStructurallyValid() {
       }
       const allText = [
         typeof body === "string" ? body : "",
-        ...commentList.map((comment) =>
-          String((comment as Record<string, unknown>)["body"] ?? ""),
-        ),
+        ...commentList.map((comment) => String((comment as Record<string, unknown>)["body"] ?? "")),
       ].join("\n");
       if (allText.includes("```suggestion")) sawSuggestionFence = true;
     }
@@ -532,9 +490,7 @@ export function outwardGitHubActionsRespectGrantBoundary(
   mergeTool: string,
   attributionMarkers: readonly string[],
 ) {
-  return function outwardGitHubActionsRespectGrantBoundaryScorer(
-    ctx: ScorerContext,
-  ): ScorerResult {
+  return function outwardGitHubActionsRespectGrantBoundaryScorer(ctx: ScorerContext): ScorerResult {
     const transcript = ctx.transcript.slice(0, ctx.turnIndex + 1);
     const postCalls = allToolCalls(transcript).filter(
       (call) => call.name === GITHUB_POST_PR_REVIEW_TOOL && !call.isError,
@@ -568,18 +524,13 @@ export function outwardGitHubActionsRespectGrantBoundary(
     const mergedBeforeApproval: string[] = [];
     for (const [index, turn] of transcript.entries()) {
       const gated = turn.toolCalls.filter((call) => call.name === mergeTool);
-      if (
-        gated.length > 0 &&
-        (approvedByStep === -1 || index < approvedByStep)
-      ) {
+      if (gated.length > 0 && (approvedByStep === -1 || index < approvedByStep)) {
         mergedBeforeApproval.push(`step ${String(index)}`);
       }
     }
 
     const pass =
-      offRepo.length === 0 &&
-      unattributed.length === 0 &&
-      mergedBeforeApproval.length === 0;
+      offRepo.length === 0 && unattributed.length === 0 && mergedBeforeApproval.length === 0;
     return result(
       "outwardGitHubActionsRespectGrantBoundary",
       pass,
diff --git a/packages/evals/src/scorers/tool-names.test.ts b/packages/evals/src/scorers/tool-names.test.ts
index 16db0919cb..1c70b7ae70 100644
--- a/packages/evals/src/scorers/tool-names.test.ts
+++ b/packages/evals/src/scorers/tool-names.test.ts
@@ -25,9 +25,7 @@ test("eval tool-name constants match the real manager-tools bundles", () => {
 });
 
 test("GitHub tool-name constants match the real @corbits/github-tools bundle", () => {
-  expect(GITHUB_PULL_REQUEST_DIFF_TOOL).toBe(
-    REAL_GITHUB_PULL_REQUEST_DIFF_TOOL,
-  );
+  expect(GITHUB_PULL_REQUEST_DIFF_TOOL).toBe(REAL_GITHUB_PULL_REQUEST_DIFF_TOOL);
   expect(GITHUB_POST_PR_REVIEW_TOOL).toBe(REAL_GITHUB_POST_PR_REVIEW_TOOL);
 });
 
diff --git a/packages/evals/src/scorers/world-scorers.test.ts b/packages/evals/src/scorers/world-scorers.test.ts
index 4f3af204e0..795625fff5 100644
--- a/packages/evals/src/scorers/world-scorers.test.ts
+++ b/packages/evals/src/scorers/world-scorers.test.ts
@@ -1,11 +1,7 @@
 import { describe, expect, test } from "bun:test";
 
 import type { ScorerContext, WorldSnapshot } from "../types.ts";
-import {
-  agentHasTools,
-  connectionIsLive,
-  fakeReceived,
-} from "./world-scorers.ts";
+import { agentHasTools, connectionIsLive, fakeReceived } from "./world-scorers.ts";
 
 function worldCtx(world: Partial<WorldSnapshot>): ScorerContext {
   return {
@@ -36,9 +32,7 @@ describe("agentHasTools", () => {
         },
       ],
     });
-    const r = agentHasTools("AI Daily researcher", [
-      "@corbits/web-search-tools",
-    ])(ctx);
+    const r = agentHasTools("AI Daily researcher", ["@corbits/web-search-tools"])(ctx);
     expect(r.pass).toBe(true);
   });
 
@@ -55,9 +49,7 @@ describe("agentHasTools", () => {
         },
       ],
     });
-    const r = agentHasTools("AI Daily researcher", [
-      "@corbits/web-search-tools",
-    ])(ctx);
+    const r = agentHasTools("AI Daily researcher", ["@corbits/web-search-tools"])(ctx);
     expect(r.pass).toBe(false);
     expect(r.reason).toContain("@corbits/web-search-tools");
   });
@@ -71,9 +63,7 @@ describe("agentHasTools", () => {
 describe("connectionIsLive", () => {
   test("passes for a live connection, fails for none found", () => {
     const ctx = worldCtx({
-      connections: [
-        { slug: "github", name: "GitHub", url: "https://x", live: true },
-      ],
+      connections: [{ slug: "github", name: "GitHub", url: "https://x", live: true }],
     });
     expect(connectionIsLive("github")(ctx).pass).toBe(true);
     expect(connectionIsLive("attio")(ctx).pass).toBe(false);
@@ -81,9 +71,7 @@ describe("connectionIsLive", () => {
 
   test("fails for a connection that exists but isn't live", () => {
     const ctx = worldCtx({
-      connections: [
-        { slug: "github", name: "GitHub", url: "https://x", live: false },
-      ],
+      connections: [{ slug: "github", name: "GitHub", url: "https://x", live: false }],
     });
     expect(connectionIsLive("github")(ctx).pass).toBe(false);
   });
@@ -114,19 +102,11 @@ describe("fakeReceived", () => {
         },
       ],
     });
-    expect(
-      fakeReceived(
-        "github",
-        "create_issue",
-        (args) => args["repo"] === "b",
-      )(ctx).pass,
-    ).toBe(false);
-    expect(
-      fakeReceived(
-        "github",
-        "create_issue",
-        (args) => args["repo"] === "a",
-      )(ctx).pass,
-    ).toBe(true);
+    expect(fakeReceived("github", "create_issue", (args) => args["repo"] === "b")(ctx).pass).toBe(
+      false,
+    );
+    expect(fakeReceived("github", "create_issue", (args) => args["repo"] === "a")(ctx).pass).toBe(
+      true,
+    );
   });
 });
diff --git a/packages/evals/src/scorers/world-scorers.ts b/packages/evals/src/scorers/world-scorers.ts
index a9958aeca1..7edeba9d5b 100644
--- a/packages/evals/src/scorers/world-scorers.ts
+++ b/packages/evals/src/scorers/world-scorers.ts
@@ -5,12 +5,7 @@
 // hand-built `WorldSnapshot` (see world-scorers.test.ts).
 import type { FakeReceipt, ScorerContext, ScorerResult } from "../types.ts";
 
-function result(
-  name: string,
-  pass: boolean,
-  reason: string,
-  score = pass ? 1 : 0,
-): ScorerResult {
+function result(name: string, pass: boolean, reason: string, score = pass ? 1 : 0): ScorerResult {
   return { name, pass, reason, score };
 }
 
@@ -18,19 +13,11 @@ function result(
  * every one of `tools` among its pinned tool packages. */
 export function agentHasTools(agentName: string, tools: readonly string[]) {
   return function agentHasToolsScorer(ctx: ScorerContext): ScorerResult {
-    const agent = ctx.world.agentDefinitions.find(
-      (definition) => definition.name === agentName,
-    );
+    const agent = ctx.world.agentDefinitions.find((definition) => definition.name === agentName);
     if (agent === undefined) {
-      return result(
-        "agentHasTools",
-        false,
-        `no agent definition named "${agentName}" exists yet`,
-      );
+      return result("agentHasTools", false, `no agent definition named "${agentName}" exists yet`);
     }
-    const missing = tools.filter(
-      (tool) => !agent.toolPackagePins.includes(tool),
-    );
+    const missing = tools.filter((tool) => !agent.toolPackagePins.includes(tool));
     return result(
       "agentHasTools",
       missing.length === 0,
@@ -52,9 +39,7 @@ export function connectionIsLive(slug: string) {
     return result(
       "connectionIsLive",
       connection.live,
-      connection.live
-        ? `"${slug}" is live`
-        : `"${slug}" is connected but not live`,
+      connection.live ? `"${slug}" is live` : `"${slug}" is connected but not live`,
     );
   };
 }
diff --git a/packages/evals/src/store/schema.ts b/packages/evals/src/store/schema.ts
index 4573d133a4..e5e3840ac4 100644
--- a/packages/evals/src/store/schema.ts
+++ b/packages/evals/src/store/schema.ts
@@ -22,9 +22,7 @@ export const evalRun = evalsSchema.table("run", {
   finishedAt: timestamp("finished_at", { withTimezone: true }).notNull(),
   /** The run's `EvalStepRecord[]` — see ../types.ts — verbatim. */
   steps: jsonb("steps").notNull(),
-  recordedAt: timestamp("recorded_at", { withTimezone: true })
-    .notNull()
-    .defaultNow(),
+  recordedAt: timestamp("recorded_at", { withTimezone: true }).notNull().defaultNow(),
 });
 
 export type EvalRunRow = typeof evalRun.$inferSelect;
diff --git a/packages/evals/src/store/store.test.ts b/packages/evals/src/store/store.test.ts
index 9e3863d380..58775a7ae7 100644
--- a/packages/evals/src/store/store.test.ts
+++ b/packages/evals/src/store/store.test.ts
@@ -100,9 +100,7 @@ describe.skipIf(databaseUrl === undefined)(
         const other = await store.recent("docs-on-sdk-change", 5);
         expect(other).toHaveLength(0);
 
-        const second = await store.save(
-          fixtureResult({ evalName: "docs-on-sdk-change" }),
-        );
+        const second = await store.save(fixtureResult({ evalName: "docs-on-sdk-change" }));
         const across = await store.recentAcrossEvals(10);
         expect(across.map((r) => r.id).sort()).toEqual([id, second].sort());
 
diff --git a/packages/evals/src/targets/git-workflow-push.ts b/packages/evals/src/targets/git-workflow-push.ts
index ef425ab593..f81635cacc 100644
--- a/packages/evals/src/targets/git-workflow-push.ts
+++ b/packages/evals/src/targets/git-workflow-push.ts
@@ -195,14 +195,7 @@ export function createGitWorkflowPusher(): WorkflowPusher {
           // otherwise fail the entire setup on a re-run rather than
           // repointing the ref it owns.
           label: "push",
-          args: [
-            "-c",
-            "credential.helper=",
-            "push",
-            "--force",
-            authRemote,
-            "HEAD:main",
-          ],
+          args: ["-c", "credential.helper=", "push", "--force", authRemote, "HEAD:main"],
         },
       ];
       for (const step of steps) {
diff --git a/packages/evals/src/targets/json-fields.ts b/packages/evals/src/targets/json-fields.ts
index de5c793d78..73d901d4f3 100644
--- a/packages/evals/src/targets/json-fields.ts
+++ b/packages/evals/src/targets/json-fields.ts
@@ -1,30 +1,18 @@
 // Shared field readers for parsing hub API JSON responses — both
 // real-target.ts and fire-routine.ts read fields off `unknown` response
 // bodies and need the same loud-on-missing behavior.
-export function stringField(
-  data: unknown,
-  field: string,
-  what: string,
-): string {
+export function stringField(data: unknown, field: string, what: string): string {
   if (typeof data === "object" && data !== null && field in data) {
     const value = (data as Record<string, unknown>)[field];
     if (typeof value === "string" && value !== "") return value;
   }
-  throw new Error(
-    `${what}: missing string field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing string field "${field}": ${JSON.stringify(data)}`);
 }
 
-export function arrayField(
-  data: unknown,
-  field: string,
-  what: string,
-): unknown[] {
+export function arrayField(data: unknown, field: string, what: string): unknown[] {
   if (typeof data === "object" && data !== null && field in data) {
     const value = (data as Record<string, unknown>)[field];
     if (Array.isArray(value)) return value;
   }
-  throw new Error(
-    `${what}: missing array field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing array field "${field}": ${JSON.stringify(data)}`);
 }
diff --git a/packages/evals/src/targets/real-target.test.ts b/packages/evals/src/targets/real-target.test.ts
index 24aa3c0833..4f380d78d6 100644
--- a/packages/evals/src/targets/real-target.test.ts
+++ b/packages/evals/src/targets/real-target.test.ts
@@ -7,10 +7,7 @@ function textMessage(id: string, address: string, text: string) {
 }
 
 test("finds a fresh agent-authored text message not yet seen", () => {
-  const items = [
-    textMessage("m1", "user:1", "hello"),
-    textMessage("m2", "agent:myra", "hi there"),
-  ];
+  const items = [textMessage("m1", "user:1", "hello"), textMessage("m2", "agent:myra", "hi there")];
   const found = findNewAgentReply(items, "agent:myra", new Set());
   expect(found?.id).toBe("m2");
 });
diff --git a/packages/evals/src/targets/real-target.ts b/packages/evals/src/targets/real-target.ts
index 61fd0811da..4c58b633d3 100644
--- a/packages/evals/src/targets/real-target.ts
+++ b/packages/evals/src/targets/real-target.ts
@@ -32,22 +32,12 @@ import {
   WEBHOOK_TIMESTAMP_HEADER,
 } from "@corbits/webhook-triggers";
 
-import type {
-  FakeReceipt,
-  RunConfig,
-  Target,
-  Turn,
-  WorldSnapshot,
-} from "../types.ts";
+import type { FakeReceipt, RunConfig, Target, Turn, WorldSnapshot } from "../types.ts";
 import type { McpFakeRecording } from "../fakes/recording.ts";
 import { startMcpFake } from "../fakes/mcp-fake-server.ts";
 import { startGithubRestFake } from "../fakes/github-rest-fake.ts";
 import { arrayField, stringField } from "./json-fields.ts";
-import {
-  newToolCallsSince,
-  readAllToolCalls,
-  type SqlClientLike,
-} from "./trace.ts";
+import { newToolCallsSince, readAllToolCalls, type SqlClientLike } from "./trace.ts";
 
 /** One recorded MCP fake (packages/evals/src/fakes) to stand up and
  * connect into the tenant before the target is handed back — connected
@@ -85,11 +75,7 @@ export interface MyraTargetInfra {
   e2eDatabaseUrl(): string | undefined;
   resetSchema(databaseUrl: string): Promise<void>;
   setupDatabase(databaseUrl: string): Promise<{ action: string }>;
-  provisionSidecar(
-    databaseUrl: string,
-    sidecarId: string,
-    token: string,
-  ): Promise<void>;
+  provisionSidecar(databaseUrl: string, sidecarId: string, token: string): Promise<void>;
   startHub(options: {
     databaseUrl: string;
     port: number;
@@ -114,9 +100,7 @@ export interface MyraTargetInfra {
     cookies?: string[],
   ): Promise<EvalApiResult>;
   expectStatus(what: string, result: EvalApiResult, expected: number): void;
-  connectE2eDb(
-    databaseUrl: string,
-  ): Promise<SqlClientLike & { end(): Promise<void> }>;
+  connectE2eDb(databaseUrl: string): Promise<SqlClientLike & { end(): Promise<void> }>;
   freePort(): number;
   /** Optional world-snapshot capability (targets/world-snapshot.ts):
    * when the caller supplies this, the returned `Target` gains
@@ -169,9 +153,7 @@ export function findNewAgentReply(
     (item) =>
       !seenIds.has(item.id) &&
       item.sender.address === agentAddress &&
-      item.parts.some(
-        (part) => part.kind === "text" && (part.text ?? "") !== "",
-      ),
+      item.parts.some((part) => part.kind === "text" && (part.text ?? "") !== ""),
   );
 }
 
@@ -222,10 +204,7 @@ export async function bootMyraTarget(
     startHub,
     startSidecar,
   } = infra;
-  if (
-    config.systemPromptOverride !== undefined ||
-    config.toolPins !== undefined
-  ) {
+  if (config.systemPromptOverride !== undefined || config.toolPins !== undefined) {
     // [Gap worth flagging: the live target has no wiring today to push a
     // matrix entry's systemPromptOverride/toolPins into the deployed
     // "assistant" workflow before minting a chat — `ensureSeeded`
@@ -283,18 +262,14 @@ export async function bootMyraTarget(
     const hub: EvalHubHandle = await startHub({
       databaseUrl,
       port: freePort(),
-      sessionSecret: Buffer.from(
-        crypto.getRandomValues(new Uint8Array(32)),
-      ).toString("hex"),
+      sessionSecret: Buffer.from(crypto.getRandomValues(new Uint8Array(32))).toString("hex"),
       dataDir: hubDataDir,
       extraEnv: { GITHUB_API_BASE_URL: githubRest.url },
     });
     cleanups.push(() => hub.stop());
     cleanups.push(() => rm(hubDataDir, { recursive: true, force: true }));
 
-    const sidecarDataDir = await mkdtemp(
-      path.join(tmpdir(), "evals-sidecar-data-"),
-    );
+    const sidecarDataDir = await mkdtemp(path.join(tmpdir(), "evals-sidecar-data-"));
     const sidecar: EvalSpawnedApp = startSidecar({
       hubPort: Number(new URL(hub.baseUrl).port || "80"),
       sidecarId,
@@ -309,16 +284,11 @@ export async function bootMyraTarget(
 
     const email = `evals-${config.name}-${crypto.randomUUID()}@example.invalid`;
     const password = `pw-${crypto.randomUUID()}`;
-    const signUpRes = await api(
-      hub.baseUrl,
-      "POST",
-      "/api/auth/sign-up/email",
-      {
-        name: `Evals ${config.name}`,
-        email,
-        password,
-      },
-    );
+    const signUpRes = await api(hub.baseUrl, "POST", "/api/auth/sign-up/email", {
+      name: `Evals ${config.name}`,
+      email,
+      password,
+    });
     expectStatus(`sign-up for ${config.name}`, signUpRes, 200);
     if (signUpRes.cookies.length === 0) {
       throw new Error(`sign-up for ${config.name} returned no session cookie`);
@@ -337,15 +307,9 @@ export async function bootMyraTarget(
       { name: `Evals ${config.name}'s Bench` },
       cookies,
     );
-    expectStatus(
-      `provision personal bench for ${config.name}`,
-      provisionRes,
-      200,
-    );
+    expectStatus(`provision personal bench for ${config.name}`, provisionRes, 200);
 
-    const startedFakes = mcpFakes.map(({ recording }) =>
-      startMcpFake(recording, freePort()),
-    );
+    const startedFakes = mcpFakes.map(({ recording }) => startMcpFake(recording, freePort()));
     for (const fake of startedFakes) {
       cleanups.push(() => {
         fake.stop();
@@ -356,8 +320,7 @@ export async function bootMyraTarget(
     // EVAL_PROVIDER=ollama + OLLAMA_BASE_URL runs against a local Ollama
     // (no key: the fixed placeholder secret); otherwise an Anthropic key.
     const ollamaBaseUrl = process.env["OLLAMA_BASE_URL"];
-    const useOllama =
-      process.env["EVAL_PROVIDER"] === "ollama" && ollamaBaseUrl !== undefined;
+    const useOllama = process.env["EVAL_PROVIDER"] === "ollama" && ollamaBaseUrl !== undefined;
     const provider = useOllama ? ("ollama" as const) : ("anthropic" as const);
     const apiKey = useOllama
       ? OLLAMA_PLACEHOLDER_SECRET
@@ -378,22 +341,17 @@ export async function bootMyraTarget(
             apiKey,
             pushWorkflow,
             log: () => undefined,
-            ...(useOllama && ollamaBaseUrl !== undefined
-              ? { baseURLOverride: ollamaBaseUrl }
-              : {}),
+            ...(useOllama && ollamaBaseUrl !== undefined ? { baseURLOverride: ollamaBaseUrl } : {}),
           });
           if (outcome.kind !== "seeded") {
-            throw new Error(
-              `expected "seeded", got: ${JSON.stringify(outcome)}`,
-            );
+            throw new Error(`expected "seeded", got: ${JSON.stringify(outcome)}`);
           }
           return outcome;
         } catch (cause) {
           if (sidecar.exited()) {
-            throw new Error(
-              `sidecar exited while seeding; output:\n${sidecar.output()}`,
-              { cause },
-            );
+            throw new Error(`sidecar exited while seeding; output:\n${sidecar.output()}`, {
+              cause,
+            });
           }
           if (process.env["EVALS_DEBUG"] === "1") {
             log.error`seeding attempt failed, retrying: ${cause instanceof Error ? cause.message : String(cause)}`;
@@ -413,11 +371,7 @@ export async function bootMyraTarget(
         { name: mcpFakes[index]?.server, url: fake.url },
         cookies,
       );
-      expectStatus(
-        `connect MCP fake "${mcpFakes[index]?.server ?? "?"}"`,
-        connectRes,
-        200,
-      );
+      expectStatus(`connect MCP fake "${mcpFakes[index]?.server ?? "?"}"`, connectRes, 200);
     }
 
     // The Plugins-PAT half of a GitHub connect (CL-6403's seam, closed
@@ -433,11 +387,7 @@ export async function bootMyraTarget(
       { apiKey: GITHUB_REST_FAKE_PAT },
       cookies,
     );
-    expectStatus(
-      "connect the GitHub PAT against the REST fake",
-      completeRes,
-      200,
-    );
+    expectStatus("connect the GitHub PAT against the REST fake", completeRes, 200);
 
     const assistantDefinitionId = await pollUntil(
       '"assistant" becoming invitable',
@@ -451,11 +401,7 @@ export async function bootMyraTarget(
           cookies,
         );
         if (res.status !== 200) return undefined;
-        const items = arrayField(
-          res.data,
-          "items",
-          "list invitable definitions",
-        ) as {
+        const items = arrayField(res.data, "items", "list invitable definitions") as {
           id: string;
           name: string;
         }[];
@@ -468,9 +414,7 @@ export async function bootMyraTarget(
       60_000,
       async () => {
         if (sidecar.exited()) {
-          throw new Error(
-            `sidecar exited before chat creation; output:\n${sidecar.output()}`,
-          );
+          throw new Error(`sidecar exited before chat creation; output:\n${sidecar.output()}`);
         }
         const res: EvalApiResult = await api(
           hub.baseUrl,
@@ -482,21 +426,13 @@ export async function bootMyraTarget(
         if (res.status === 500) return undefined;
         expectStatus("create chat", res, 201);
         const id = stringField(res.data, "id", "create chat");
-        const participants = arrayField(
-          res.data,
-          "participants",
-          "create chat",
-        ) as {
+        const participants = arrayField(res.data, "participants", "create chat") as {
           address: string;
           handle: string;
         }[];
-        const agent = participants.find(
-          (participant) => participant.handle === "myra",
-        );
+        const agent = participants.find((participant) => participant.handle === "myra");
         if (agent === undefined) {
-          throw new Error(
-            `chat has no "myra" agent participant: ${JSON.stringify(participants)}`,
-          );
+          throw new Error(`chat has no "myra" agent participant: ${JSON.stringify(participants)}`);
         }
         return { chatId: id, agentAddress: agent.address };
       },
@@ -533,9 +469,7 @@ export async function bootMyraTarget(
       300_000,
       async () => {
         if (sidecar.exited()) {
-          throw new Error(
-            `sidecar exited waiting for the greeting; ${bootFailureOutput()}`,
-          );
+          throw new Error(`sidecar exited waiting for the greeting; ${bootFailureOutput()}`);
         }
         const res = await api(
           hub.baseUrl,
@@ -553,25 +487,15 @@ export async function bootMyraTarget(
         return findNewAgentReply(items, agentAddress, seenMessageIds);
       },
     ).catch((cause) => {
-      throw new Error(
-        `no unprompted greeting within 300s; ${bootFailureOutput()}`,
-        { cause },
-      );
+      throw new Error(`no unprompted greeting within 300s; ${bootFailureOutput()}`, { cause });
     });
     seenMessageIds.add(greeting.id);
     // See the settle-window comment in `sendTurn` below — the greeting's
     // own record-mail into the channel host needs the same room to land
     // before the first scripted turn posts.
     await Bun.sleep(3_000);
-    const greetingToolCalls = await readAllToolCalls(
-      sqlClient,
-      seeded.tenantId,
-      chatId,
-    );
-    toolCallsConsumed = newToolCallsSince(
-      greetingToolCalls,
-      toolCallsConsumed,
-    ).consumed;
+    const greetingToolCalls = await readAllToolCalls(sqlClient, seeded.tenantId, chatId);
+    toolCallsConsumed = newToolCallsSince(greetingToolCalls, toolCallsConsumed).consumed;
 
     async function sendTurn(human: string): Promise<Turn> {
       const postRes = await api(
@@ -604,32 +528,22 @@ export async function bootMyraTarget(
       // genuine hang (the sidecar-exited check above still fails fast
       // on that).
       let lastItems: ChatMessage[] = [];
-      const reply = await pollUntil(
-        `Myra's reply to "${human}"`,
-        300_000,
-        async () => {
-          if (sidecar.exited()) {
-            throw new Error(
-              `sidecar exited waiting for a reply; ${bootFailureOutput()}`,
-            );
-          }
-          const res = await api(
-            hub.baseUrl,
-            "GET",
-            `/api/tenants/${seeded.tenantId}/chat/workbenches/${chatId}/messages`,
-            undefined,
-            cookies,
-          );
-          expectStatus("list messages", res, 200);
-          const items = arrayField(
-            res.data,
-            "items",
-            "list messages",
-          ) as ChatMessage[];
-          lastItems = items;
-          return findNewAgentReply(items, agentAddress, seenMessageIds);
-        },
-      ).catch((cause) => {
+      const reply = await pollUntil(`Myra's reply to "${human}"`, 300_000, async () => {
+        if (sidecar.exited()) {
+          throw new Error(`sidecar exited waiting for a reply; ${bootFailureOutput()}`);
+        }
+        const res = await api(
+          hub.baseUrl,
+          "GET",
+          `/api/tenants/${seeded.tenantId}/chat/workbenches/${chatId}/messages`,
+          undefined,
+          cookies,
+        );
+        expectStatus("list messages", res, 200);
+        const items = arrayField(res.data, "items", "list messages") as ChatMessage[];
+        lastItems = items;
+        return findNewAgentReply(items, agentAddress, seenMessageIds);
+      }).catch((cause) => {
         throw new Error(
           `no reply within 300s; last-seen messages: ${JSON.stringify(lastItems)}\n` +
             bootFailureOutput(),
@@ -648,25 +562,15 @@ export async function bootMyraTarget(
       // `greeting-delivery.test.ts` reaches for via `E2E_TURN2_DELAY_MS`.
       await Bun.sleep(3_000);
 
-      const allToolCalls = await readAllToolCalls(
-        sqlClient,
-        seeded.tenantId,
-        chatId,
-      );
-      const { newCalls, consumed } = newToolCallsSince(
-        allToolCalls,
-        toolCallsConsumed,
-      );
+      const allToolCalls = await readAllToolCalls(sqlClient, seeded.tenantId, chatId);
+      const { newCalls, consumed } = newToolCallsSince(allToolCalls, toolCallsConsumed);
       toolCallsConsumed = consumed;
 
       return { human, replyText: replyTextOf(reply), toolCalls: newCalls };
     }
 
     function fakeReceipts(): readonly FakeReceipt[] {
-      return [
-        ...startedFakes.flatMap((fake) => fake.receipts()),
-        ...githubRest.receipts(),
-      ];
+      return [...startedFakes.flatMap((fake) => fake.receipts()), ...githubRest.receipts()];
     }
 
     // Fires a trigger through the REAL ingress route
@@ -675,10 +579,7 @@ export async function bootMyraTarget(
     // platform's own table (the trace.ts convention) — the eval hub
     // boots with ALLOW_PLAINTEXT_SECRETS, so the scratch row carries it
     // readable; the route itself still verifies the signature for real.
-    async function fireWebhook(
-      triggerId: string,
-      payload: unknown,
-    ): Promise<Turn> {
+    async function fireWebhook(triggerId: string, payload: unknown): Promise<Turn> {
       const rows = await sqlClient.unsafe(
         "select secret from webhook_triggers.webhook_trigger where id = $1",
         [triggerId],
@@ -691,18 +592,15 @@ export async function bootMyraTarget(
       }
       const rawBody = JSON.stringify(payload);
       const timestamp = String(Math.floor(Date.now() / 1000));
-      const response = await fetch(
-        new URL(`/api/webhooks/${triggerId}`, hub.baseUrl),
-        {
-          method: "POST",
-          headers: {
-            "content-type": "application/json",
-            [WEBHOOK_TIMESTAMP_HEADER]: timestamp,
-            [WEBHOOK_SIGNATURE_HEADER]: signPayload(secret, timestamp, rawBody),
-          },
-          body: rawBody,
+      const response = await fetch(new URL(`/api/webhooks/${triggerId}`, hub.baseUrl), {
+        method: "POST",
+        headers: {
+          "content-type": "application/json",
+          [WEBHOOK_TIMESTAMP_HEADER]: timestamp,
+          [WEBHOOK_SIGNATURE_HEADER]: signPayload(secret, timestamp, rawBody),
         },
-      );
+        body: rawBody,
+      });
       // Read as text first: a failed launch surfaces as the hub's own
       // non-JSON 500 body, which must land in the recorded turn rather
       // than die as a JSON parse crash that hides the status. A non-202
diff --git a/packages/evals/src/targets/trace.test.ts b/packages/evals/src/targets/trace.test.ts
index 9e68b38b28..5dfb43319b 100644
--- a/packages/evals/src/targets/trace.test.ts
+++ b/packages/evals/src/targets/trace.test.ts
@@ -1,10 +1,6 @@
 import { expect, test } from "bun:test";
 
-import {
-  newToolCallsSince,
-  readAllToolCalls,
-  type SqlClientLike,
-} from "./trace.ts";
+import { newToolCallsSince, readAllToolCalls, type SqlClientLike } from "./trace.ts";
 
 function fakeSql(rows: Record<string, unknown>[]): SqlClientLike {
   return { unsafe: async () => rows };
@@ -18,12 +14,7 @@ function callRow(ordinal: number, callId: string, name: string, args: unknown) {
   };
 }
 
-function resultRow(
-  ordinal: number,
-  callId: string,
-  content: unknown,
-  isError: boolean,
-) {
+function resultRow(ordinal: number, callId: string, content: unknown, isError: boolean) {
   return {
     metadata: { kind: "result", callId, content, isError },
     ordinal,
@@ -48,9 +39,7 @@ test("pairs a call with its result into one ToolCall", async () => {
 });
 
 test("omits a call with no result yet (turn still in flight)", async () => {
-  const sql = fakeSql([
-    callRow(0, "c1", "create_agent", { name: "Researcher" }),
-  ]);
+  const sql = fakeSql([callRow(0, "c1", "create_agent", { name: "Researcher" })]);
   const calls = await readAllToolCalls(sql, "tenant-1", "run-1");
   expect(calls).toEqual([]);
 });
@@ -63,10 +52,7 @@ test("preserves call order and marks a failed result", async () => {
     resultRow(3, "c2", "Connected: none.", false),
   ]);
   const calls = await readAllToolCalls(sql, "tenant-1", "run-1");
-  expect(calls.map((c) => c.name)).toEqual([
-    "request_connection",
-    "list_connections",
-  ]);
+  expect(calls.map((c) => c.name)).toEqual(["request_connection", "list_connections"]);
   expect(calls[0]?.isError).toBe(true);
   expect(calls[1]?.isError).toBe(false);
 });
diff --git a/packages/evals/src/targets/trace.ts b/packages/evals/src/targets/trace.ts
index 897f751629..54fadfeff9 100644
--- a/packages/evals/src/targets/trace.ts
+++ b/packages/evals/src/targets/trace.ts
@@ -46,9 +46,7 @@ function isToolPartMetadata(value: unknown): value is ToolPartMetadata {
 }
 
 function asRecord(value: unknown): Record<string, unknown> {
-  return typeof value === "object" && value !== null
-    ? (value as Record<string, unknown>)
-    : {};
+  return typeof value === "object" && value !== null ? (value as Record<string, unknown>) : {};
 }
 
 /**
@@ -71,18 +69,13 @@ export async function readAllToolCalls(
     [runId, tenantId],
   );
 
-  const calls = new Map<
-    string,
-    { name: string; arguments: Record<string, unknown> }
-  >();
+  const calls = new Map<string, { name: string; arguments: Record<string, unknown> }>();
   const results = new Map<string, { content: unknown; isError: boolean }>();
   const order: string[] = [];
 
   for (const row of rows) {
     const metadata: unknown =
-      typeof row["metadata"] === "string"
-        ? JSON.parse(row["metadata"] as string)
-        : row["metadata"];
+      typeof row["metadata"] === "string" ? JSON.parse(row["metadata"] as string) : row["metadata"];
     if (!isToolPartMetadata(metadata)) continue;
     if (metadata.kind === "call") {
       calls.set(metadata.callId, {
diff --git a/packages/evals/src/targets/world-snapshot.test.ts b/packages/evals/src/targets/world-snapshot.test.ts
index 019b70a6b9..f70baabc47 100644
--- a/packages/evals/src/targets/world-snapshot.test.ts
+++ b/packages/evals/src/targets/world-snapshot.test.ts
@@ -6,10 +6,7 @@ import type { AssetService } from "@intx/hub-sessions";
 import { agentDefinitionSourceTree } from "@corbits/agent-directory";
 import { webhookTrigger as webhookTriggerTable } from "@corbits/webhook-triggers";
 
-import {
-  captureWorldSnapshot,
-  type WorldSnapshotInfra,
-} from "./world-snapshot.ts";
+import { captureWorldSnapshot, type WorldSnapshotInfra } from "./world-snapshot.ts";
 
 type FakeTables = {
   workflowDefinitions: {
@@ -59,8 +56,7 @@ function fakeDb(tables: FakeTables): DB["db"] {
     },
     select: () => ({
       from: (table: unknown) => ({
-        where: async () =>
-          table === webhookTriggerTable ? tables.webhookTriggers : [],
+        where: async () => (table === webhookTriggerTable ? tables.webhookTriggers : []),
       }),
     }),
   } as unknown as DB["db"];
@@ -71,22 +67,14 @@ function fakeDb(tables: FakeTables): DB["db"] {
 function fakeResolveCredentialByName(tables: FakeTables) {
   return (async (_db: unknown, _tenantId: string, name: string) =>
     tables.credentials.find((credential) => credential.name === name) ??
-    null) as unknown as NonNullable<
-    WorldSnapshotInfra["resolveCredentialByNameFn"]
-  >;
+    null) as unknown as NonNullable<WorldSnapshotInfra["resolveCredentialByNameFn"]>;
 }
 
 /** Answers each asset's entry module out of the source tree its
  * definition renders into — the shape the snapshot reads through. */
 function fakeAssetService(blobs: Record<string, string>): AssetService {
   return {
-    readAssetBlob: async ({
-      assetId,
-      path,
-    }: {
-      assetId: string;
-      path: string;
-    }) =>
+    readAssetBlob: async ({ assetId, path }: { assetId: string; path: string }) =>
       new TextEncoder().encode(
         agentDefinitionSourceTree({
           handle: assetId,
@@ -96,10 +84,7 @@ function fakeAssetService(blobs: Record<string, string>): AssetService {
   } as unknown as AssetService;
 }
 
-function workflowJsonWith(
-  toolPackagePins: { name: string; version: string }[],
-  model?: string,
-) {
+function workflowJsonWith(toolPackagePins: { name: string; version: string }[], model?: string) {
   return JSON.stringify({
     steps: {
       agent: {
@@ -160,9 +145,7 @@ test("captureWorldSnapshot reads agent definitions with their capabilities", asy
 
 test("captureWorldSnapshot skips a definition with no materialized asset", async () => {
   const tables = emptyTables();
-  tables.workflowDefinitions = [
-    { id: "def-1", name: "draft", description: null, assetId: null },
-  ];
+  tables.workflowDefinitions = [{ id: "def-1", name: "draft", description: null, assetId: null }];
   const infra: WorldSnapshotInfra = {
     db: fakeDb(tables),
     resolveCredentialByNameFn: fakeResolveCredentialByName(tables),
@@ -219,9 +202,7 @@ test("captureWorldSnapshot reads a connector credential (a GitHub PAT) as a live
     assetService: fakeAssetService({}),
   };
   const world = await captureWorldSnapshot(infra, "tenant-1");
-  expect(world.connections).toEqual([
-    { slug: "github", name: "GitHub", url: "", live: true },
-  ]);
+  expect(world.connections).toEqual([{ slug: "github", name: "GitHub", url: "", live: true }]);
 });
 
 test("captureWorldSnapshot reads webhook trigger rows", async () => {
@@ -257,9 +238,7 @@ test("captureWorldSnapshot folds in fake receipts from the injected reader", asy
     db: fakeDb(tables),
     resolveCredentialByNameFn: fakeResolveCredentialByName(tables),
     assetService: fakeAssetService({}),
-    fakeReceiptsReader: () => [
-      { server: "github", toolName: "list_pull_requests", arguments: {} },
-    ],
+    fakeReceiptsReader: () => [{ server: "github", toolName: "list_pull_requests", arguments: {} }],
   };
   const world = await captureWorldSnapshot(infra, "tenant-1");
   expect(world.fakeReceipts).toEqual([
diff --git a/packages/evals/src/targets/world-snapshot.ts b/packages/evals/src/targets/world-snapshot.ts
index 0263bf4069..438c31f773 100644
--- a/packages/evals/src/targets/world-snapshot.ts
+++ b/packages/evals/src/targets/world-snapshot.ts
@@ -22,15 +22,9 @@ import { and, eq } from "drizzle-orm";
 import type { DB } from "@intx/db";
 import { resolveCredentialByName, schema } from "@intx/db";
 import type { AssetService } from "@intx/hub-sessions";
-import {
-  readAgentCapabilities,
-  readAgentDefinitionWorkflowJson,
-} from "@corbits/agent-directory";
+import { readAgentCapabilities, readAgentDefinitionWorkflowJson } from "@corbits/agent-directory";
 import { webhookTrigger as webhookTriggerTable } from "@corbits/webhook-triggers";
-import {
-  connectorDescriptors,
-  listMcpServerConnections,
-} from "@corbits/connections";
+import { connectorDescriptors, listMcpServerConnections } from "@corbits/connections";
 import { CONNECTOR_REGISTRY } from "@corbits/connections/registry";
 
 import type { FakeReceipt, WorldSnapshot } from "../types.ts";
@@ -51,11 +45,7 @@ export interface WorldSnapshotInfra {
   readonly resolveCredentialByNameFn?: typeof resolveCredentialByName;
 }
 
-async function readAgentDefinitions(
-  db: DB["db"],
-  assetService: AssetService,
-  tenantId: string,
-) {
+async function readAgentDefinitions(db: DB["db"], assetService: AssetService, tenantId: string) {
   const rows = await db.query.workflowDefinition.findMany({
     where: and(
       eq(schema.workflowDefinition.tenantId, tenantId),
@@ -68,10 +58,7 @@ async function readAgentDefinitions(
   );
   return Promise.all(
     deployable.map(async (row) => {
-      const workflowJson = await readAgentDefinitionWorkflowJson(
-        assetService,
-        row.assetId,
-      );
+      const workflowJson = await readAgentDefinitionWorkflowJson(assetService, row.assetId);
       const capabilities = readAgentCapabilities(workflowJson);
       return {
         id: row.id,
@@ -144,11 +131,7 @@ export async function captureWorldSnapshot(
 ): Promise<WorldSnapshot> {
   const [agentDefinitions, connections, webhookTriggers] = await Promise.all([
     readAgentDefinitions(infra.db, infra.assetService, tenantId),
-    readConnections(
-      infra.db,
-      tenantId,
-      infra.resolveCredentialByNameFn ?? resolveCredentialByName,
-    ),
+    readConnections(infra.db, tenantId, infra.resolveCredentialByNameFn ?? resolveCredentialByName),
     readWebhookTriggers(infra.db, tenantId),
   ]);
   return {
diff --git a/packages/evals/src/types.ts b/packages/evals/src/types.ts
index 6a9659900b..2ddac1928d 100644
--- a/packages/evals/src/types.ts
+++ b/packages/evals/src/types.ts
@@ -107,9 +107,7 @@ export interface ScorerResult {
   readonly skipped?: boolean;
 }
 
-export type Scorer = (
-  ctx: ScorerContext,
-) => ScorerResult | Promise<ScorerResult>;
+export type Scorer = (ctx: ScorerContext) => ScorerResult | Promise<ScorerResult>;
 
 /** A step whose human message is fixed in advance. `kind` defaults to
  * `"scripted"` — `defineEval` fills it in, so every existing case file
diff --git a/packages/github-tools/package.json b/packages/github-tools/package.json
index 578e6dbd54..07c852ce14 100644
--- a/packages/github-tools/package.json
+++ b/packages/github-tools/package.json
@@ -1,28 +1,21 @@
 {
   "name": "@corbits/github-tools",
+  "version": "0.0.11",
   "description": "GitHub search integration: a minimal REST client and an @intx/agent tool bundle exposing github_activity",
-  "version": "0.0.10",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "interchange": {
-    "credentials": [
-      {
-        "handle": "github"
-      }
-    ]
-  },
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "packages/github-tools"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "packages/github-tools"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -34,12 +27,19 @@
   "dependencies": {
     "arktype": "catalog:"
   },
+  "devDependencies": {
+    "@types/bun": "catalog:",
+    "typescript": "catalog:"
+  },
   "peerDependencies": {
     "@intx/agent": "0.3.0",
     "@intx/types": "0.3.0"
   },
-  "devDependencies": {
-    "@types/bun": "catalog:",
-    "typescript": "catalog:"
+  "interchange": {
+    "credentials": [
+      {
+        "handle": "github"
+      }
+    ]
   }
 }
diff --git a/packages/github-tools/src/client.test.ts b/packages/github-tools/src/client.test.ts
index 904e98a0ba..e6f691cf1c 100644
--- a/packages/github-tools/src/client.test.ts
+++ b/packages/github-tools/src/client.test.ts
@@ -52,10 +52,7 @@ function threeCallFetch(bodies: readonly unknown[]) {
 
 test("merges repos, issues, and PRs into one normalized list", async () => {
   const { fetchImpl } = threeCallFetch([REPOS, ISSUES, PRS]);
-  const items = await searchGitHubActivity(
-    { fetchImpl },
-    { query: "agent workflows" },
-  );
+  const items = await searchGitHubActivity({ fetchImpl }, { query: "agent workflows" });
   expect(items).toEqual([
     {
       url: "https://github.com/acme/agentkit",
@@ -102,25 +99,15 @@ test("sends a bearer authorization header when an apiKey is given", async () =>
     return new Response(JSON.stringify({ items: [] }), { status: 200 });
   }) as unknown as typeof fetch;
 
-  await searchGitHubActivity(
-    { apiKey: "ghp_test", fetchImpl },
-    { query: "topic" },
-  );
+  await searchGitHubActivity({ apiKey: "ghp_test", fetchImpl }, { query: "topic" });
   for (const headers of captured) {
     expect(headers?.authorization).toBe("Bearer ghp_test");
   }
 });
 
 test("scopes each query with the days cutoff and per_page limit", async () => {
-  const { fetchImpl, captured } = threeCallFetch([
-    { items: [] },
-    { items: [] },
-    { items: [] },
-  ]);
-  await searchGitHubActivity(
-    { fetchImpl },
-    { query: "vector db", days: 7, limit: 3 },
-  );
+  const { fetchImpl, captured } = threeCallFetch([{ items: [] }, { items: [] }, { items: [] }]);
+  await searchGitHubActivity({ fetchImpl }, { query: "vector db", days: 7, limit: 3 });
   expect(captured[0]).toContain("search/repositories");
   expect(captured[0]).toContain("per_page=3");
   expect(captured[1]).toContain("is%3Aissue");
@@ -128,20 +115,13 @@ test("scopes each query with the days cutoff and per_page limit", async () => {
 });
 
 test("throws on a non-ok HTTP response from any of the three calls", async () => {
-  const fetchImpl = (async () =>
-    new Response("nope", { status: 403 })) as unknown as typeof fetch;
-  await expect(
-    searchGitHubActivity({ fetchImpl }, { query: "topic" }),
-  ).rejects.toThrow(/403/);
+  const fetchImpl = (async () => new Response("nope", { status: 403 })) as unknown as typeof fetch;
+  await expect(searchGitHubActivity({ fetchImpl }, { query: "topic" })).rejects.toThrow(/403/);
 });
 
 test("throws when a response body does not match the expected shape", async () => {
-  const { fetchImpl } = threeCallFetch([
-    { items: [{ bad: true }] },
-    ISSUES,
-    PRS,
-  ]);
-  await expect(
-    searchGitHubActivity({ fetchImpl }, { query: "topic" }),
-  ).rejects.toThrow(/did not match the expected shape/);
+  const { fetchImpl } = threeCallFetch([{ items: [{ bad: true }] }, ISSUES, PRS]);
+  await expect(searchGitHubActivity({ fetchImpl }, { query: "topic" })).rejects.toThrow(
+    /did not match the expected shape/,
+  );
 });
diff --git a/packages/github-tools/src/client.ts b/packages/github-tools/src/client.ts
index 401b1ae6c6..1ae5bbe3bd 100644
--- a/packages/github-tools/src/client.ts
+++ b/packages/github-tools/src/client.ts
@@ -62,16 +62,11 @@ function buildHeaders(apiKey: string | undefined): Record<string, string> {
   return headers;
 }
 
-async function fetchGitHubJSON(
-  url: URL,
-  config: GitHubClientConfig,
-): Promise<unknown> {
+async function fetchGitHubJSON(url: URL, config: GitHubClientConfig): Promise<unknown> {
   const doFetch = config.fetchImpl ?? fetch;
   const response = await doFetch(url, { headers: buildHeaders(config.apiKey) });
   if (!response.ok) {
-    throw new Error(
-      `GitHub search request failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`GitHub search request failed: ${response.status} ${response.statusText}`);
   }
   return response.json();
 }
@@ -87,9 +82,7 @@ function normalizeRepo(repo: typeof GitHubRepo.infer): GitHubActivityItem {
   };
 }
 
-function normalizeIssueOrPR(
-  item: typeof GitHubIssueOrPR.infer,
-): GitHubActivityItem {
+function normalizeIssueOrPR(item: typeof GitHubIssueOrPR.infer): GitHubActivityItem {
   return {
     url: item.html_url,
     title: item.title,
@@ -103,11 +96,7 @@ function normalizeIssueOrPR(
 }
 
 function clampPerList(requested: number | undefined): number {
-  if (
-    requested === undefined ||
-    !Number.isInteger(requested) ||
-    requested <= 0
-  ) {
+  if (requested === undefined || !Number.isInteger(requested) || requested <= 0) {
     return DEFAULT_PER_LIST;
   }
   return Math.min(requested, MAX_PER_LIST);
@@ -128,9 +117,7 @@ export async function searchGitHubActivity(
   },
 ): Promise<readonly GitHubActivityItem[]> {
   const days =
-    typeof params.days === "number" && params.days > 0
-      ? Math.floor(params.days)
-      : DEFAULT_DAYS;
+    typeof params.days === "number" && params.days > 0 ? Math.floor(params.days) : DEFAULT_DAYS;
   const cutoff = new Date(Date.now() - days * 86400 * 1000);
   const cutoffDate = cutoff.toISOString().slice(0, 10);
   const perPage = String(clampPerList(params.limit));
@@ -142,10 +129,7 @@ export async function searchGitHubActivity(
   reposUrl.searchParams.set("per_page", perPage);
 
   const issuesUrl = new URL(`${base}/search/issues`);
-  issuesUrl.searchParams.set(
-    "q",
-    `${params.query} is:issue updated:>=${cutoffDate}`,
-  );
+  issuesUrl.searchParams.set("q", `${params.query} is:issue updated:>=${cutoffDate}`);
   issuesUrl.searchParams.set("sort", "reactions");
   issuesUrl.searchParams.set("per_page", perPage);
 
@@ -174,9 +158,7 @@ export async function searchGitHubActivity(
     );
   }
   if (prs instanceof type.errors) {
-    throw new Error(
-      `GitHub PR search response did not match the expected shape: ${prs.summary}`,
-    );
+    throw new Error(`GitHub PR search response did not match the expected shape: ${prs.summary}`);
   }
 
   return [
diff --git a/packages/github-tools/src/pull-request-tools.test.ts b/packages/github-tools/src/pull-request-tools.test.ts
index 2df3063596..924e51d6f9 100644
--- a/packages/github-tools/src/pull-request-tools.test.ts
+++ b/packages/github-tools/src/pull-request-tools.test.ts
@@ -30,10 +30,7 @@ function respond(url: string): Response {
     );
   }
   if (url.includes("/reviews")) {
-    return new Response(
-      JSON.stringify({ id: 5, html_url: `${PULL_URL}#review` }),
-      { status: 200 },
-    );
+    return new Response(JSON.stringify({ id: 5, html_url: `${PULL_URL}#review` }), { status: 200 });
   }
   return new Response(
     JSON.stringify({
@@ -52,9 +49,7 @@ function fakeCredentials(bound: boolean): CredentialCapability {
   return {
     resolve(handle: string): Promise<MediatedCredential> {
       if (!bound) {
-        return Promise.reject(
-          new Error(`no credential is bound to handle "${handle}"`),
-        );
+        return Promise.reject(new Error(`no credential is bound to handle "${handle}"`));
       }
       return Promise.resolve({
         kind: "http",
diff --git a/packages/github-tools/src/pull-request-tools.ts b/packages/github-tools/src/pull-request-tools.ts
index 63f05f487c..2bbb7ed0e0 100644
--- a/packages/github-tools/src/pull-request-tools.ts
+++ b/packages/github-tools/src/pull-request-tools.ts
@@ -14,11 +14,7 @@ import type { CredentialCapability } from "@intx/types";
 import type { ToolCall, ToolResult } from "@intx/types/runtime";
 import { type } from "arktype";
 
-import {
-  fetchPullRequestDiff,
-  parsePullRequestUrl,
-  postPullRequestReview,
-} from "./pull-requests";
+import { fetchPullRequestDiff, parsePullRequestUrl, postPullRequestReview } from "./pull-requests";
 
 export const GITHUB_PULL_REQUEST_DIFF_TOOL = "github_pull_request_diff";
 export const GITHUB_POST_PULL_REQUEST_REVIEW_TOOL = "github_post_pr_review";
@@ -43,11 +39,7 @@ const ReviewArguments = type({
   }).array(),
 });
 
-function errorResult(
-  callId: string,
-  message: string,
-  detail?: unknown,
-): ToolResult {
+function errorResult(callId: string, message: string, detail?: unknown): ToolResult {
   return {
     callId,
     content: message,
@@ -91,24 +83,14 @@ const NOT_CONNECTED =
   "GitHub is not connected for this run, so the pull request cannot be " +
   "read or reviewed. Say so plainly instead of guessing at the change.";
 
-async function runDiff(
-  env: GitHubPullRequestEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runDiff(env: GitHubPullRequestEnv, call: ToolCall): Promise<ToolResult> {
   const args = DiffArguments(call.arguments);
   if (args instanceof type.errors) {
-    return errorResult(
-      call.id,
-      `${GITHUB_PULL_REQUEST_DIFF_TOOL}: ${args.summary}`,
-    );
+    return errorResult(call.id, `${GITHUB_PULL_REQUEST_DIFF_TOOL}: ${args.summary}`);
   }
   const config = await resolveConfig(env);
   if (config === null) {
-    return errorResult(
-      call.id,
-      NOT_CONNECTED,
-      missingCredentialDetail(GITHUB_CREDENTIAL_HANDLE),
-    );
+    return errorResult(call.id, NOT_CONNECTED, missingCredentialDetail(GITHUB_CREDENTIAL_HANDLE));
   }
   try {
     const ref = parsePullRequestUrl(args.pullRequestUrl);
@@ -119,24 +101,14 @@ async function runDiff(
   }
 }
 
-async function runPostReview(
-  env: GitHubPullRequestEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runPostReview(env: GitHubPullRequestEnv, call: ToolCall): Promise<ToolResult> {
   const args = ReviewArguments(call.arguments);
   if (args instanceof type.errors) {
-    return errorResult(
-      call.id,
-      `${GITHUB_POST_PULL_REQUEST_REVIEW_TOOL}: ${args.summary}`,
-    );
+    return errorResult(call.id, `${GITHUB_POST_PULL_REQUEST_REVIEW_TOOL}: ${args.summary}`);
   }
   const config = await resolveConfig(env);
   if (config === null) {
-    return errorResult(
-      call.id,
-      NOT_CONNECTED,
-      missingCredentialDetail(GITHUB_CREDENTIAL_HANDLE),
-    );
+    return errorResult(call.id, NOT_CONNECTED, missingCredentialDetail(GITHUB_CREDENTIAL_HANDLE));
   }
   try {
     const ref = parsePullRequestUrl(args.pullRequestUrl);
@@ -176,8 +148,7 @@ export const githubPullRequestTools = defineTool<GitHubPullRequestEnv>({
             pullRequestUrl: {
               type: "string",
               description:
-                "The pull request's URL, e.g. " +
-                "https://github.com/owner/repo/pull/123.",
+                "The pull request's URL, e.g. " + "https://github.com/owner/repo/pull/123.",
             },
           },
           required: ["pullRequestUrl"],
@@ -201,8 +172,7 @@ export const githubPullRequestTools = defineTool<GitHubPullRequestEnv>({
             headSha: {
               type: "string",
               description:
-                "The head commit sha the diff reported, which the review " +
-                "is anchored to.",
+                "The head commit sha the diff reported, which the review " + "is anchored to.",
             },
             body: {
               type: "string",
@@ -227,8 +197,6 @@ export const githubPullRequestTools = defineTool<GitHubPullRequestEnv>({
       },
     ],
     run: (call, _signal) =>
-      call.name === GITHUB_PULL_REQUEST_DIFF_TOOL
-        ? runDiff(env, call)
-        : runPostReview(env, call),
+      call.name === GITHUB_PULL_REQUEST_DIFF_TOOL ? runDiff(env, call) : runPostReview(env, call),
   }),
 });
diff --git a/packages/github-tools/src/pull-requests.test.ts b/packages/github-tools/src/pull-requests.test.ts
index 995b5341eb..92537d1dd4 100644
--- a/packages/github-tools/src/pull-requests.test.ts
+++ b/packages/github-tools/src/pull-requests.test.ts
@@ -30,18 +30,14 @@ const PULL_BODY = {
   html_url: "https://github.com/acme/widgets/pull/7",
 };
 
-const PATCH = [
-  "@@ -1,3 +1,4 @@",
-  " context",
-  "-removed",
-  "+added",
-  "+also added",
-].join("\n");
+const PATCH = ["@@ -1,3 +1,4 @@", " context", "-removed", "+added", "+also added"].join("\n");
 
 test("parsePullRequestUrl reads owner, repo, and number", () => {
-  expect(
-    parsePullRequestUrl("https://github.com/acme/widgets/pull/42"),
-  ).toEqual({ owner: "acme", repo: "widgets", number: 42 });
+  expect(parsePullRequestUrl("https://github.com/acme/widgets/pull/42")).toEqual({
+    owner: "acme",
+    repo: "widgets",
+    number: 42,
+  });
 });
 
 test("parsePullRequestUrl rejects a URL that is not a pull request", () => {
@@ -101,9 +97,7 @@ test("fetchPullRequestDiff sends a bearer header only when given a token", async
       fetchImpl: fakeFetch((input, init) => {
         sent.push(init?.headers as Record<string, string> | undefined);
         return Promise.resolve(
-          String(input).includes("/files")
-            ? jsonResponse([])
-            : jsonResponse(PULL_BODY),
+          String(input).includes("/files") ? jsonResponse([]) : jsonResponse(PULL_BODY),
         );
       }),
     },
@@ -169,9 +163,7 @@ test("postPullRequestReview posts one comment-only review at the head sha", asyn
     commit_id: "headsha",
     body: "One review.",
     event: "COMMENT",
-    comments: [
-      { path: "src/loop.ts", line: 2, side: "RIGHT", body: "This breaks." },
-    ],
+    comments: [{ path: "src/loop.ts", line: 2, side: "RIGHT", body: "This breaks." }],
   });
 });
 
@@ -217,9 +209,7 @@ test('fetchPullRequestReviewComments follows a Link: rel="next" header across pa
         if (url.includes("page=2")) {
           return Promise.resolve(shortPage(["third", "fourth"]));
         }
-        return Promise.resolve(
-          shortPage(["first", "second"], `<${BASE}/next?page=2>; rel="next"`),
-        );
+        return Promise.resolve(shortPage(["first", "second"], `<${BASE}/next?page=2>; rel="next"`));
       }),
     },
     { owner: "acme", repo: "widgets", number: 7 },
@@ -239,9 +229,7 @@ test("fetchPullRequestReviewComments falls back to page= when no Link header is
       baseUrl: BASE,
       fetchImpl: fakeFetch(() => {
         calls += 1;
-        return Promise.resolve(
-          calls === 1 ? fullPage("p1") : shortPage(["last"]),
-        );
+        return Promise.resolve(calls === 1 ? fullPage("p1") : shortPage(["last"]));
       }),
     },
     { owner: "acme", repo: "widgets", number: 7 },
@@ -311,9 +299,7 @@ test("fetchPullRequestDiff merges every page of changed files", async () => {
       fetchImpl: fakeFetch((input) => {
         const url = String(input);
         if (url.includes("page=2")) {
-          return Promise.resolve(
-            new Response(JSON.stringify([fileAt(100)]), { status: 200 }),
-          );
+          return Promise.resolve(new Response(JSON.stringify([fileAt(100)]), { status: 200 }));
         }
         if (url.includes("/files")) {
           const files = Array.from({ length: 100 }, (_, i) => fileAt(i));
diff --git a/packages/github-tools/src/pull-requests.ts b/packages/github-tools/src/pull-requests.ts
index d47ec42405..4e0fe9f501 100644
--- a/packages/github-tools/src/pull-requests.ts
+++ b/packages/github-tools/src/pull-requests.ts
@@ -106,8 +106,7 @@ export interface PullRequestReviewCommentsPage {
   readonly truncated: boolean;
 }
 
-const PULL_REQUEST_URL =
-  /^https?:\/\/github\.com\/([^/\s]+)\/([^/\s]+)\/pull\/(\d+)(?:[/?#].*)?$/;
+const PULL_REQUEST_URL = /^https?:\/\/github\.com\/([^/\s]+)\/([^/\s]+)\/pull\/(\d+)(?:[/?#].*)?$/;
 
 /**
  * Reads a `PullRequestRef` out of a pull-request URL. The URL arrives
@@ -251,9 +250,7 @@ async function fetchAllPages(
       throw new Error(`GitHub GET ${url.pathname} returned a non-array page`);
     }
     items.push(...page);
-    url =
-      nextPageUrl(response.headers.get("link")) ??
-      fallbackNextPage(url, page.length);
+    url = nextPageUrl(response.headers.get("link")) ?? fallbackNextPage(url, page.length);
   }
 
   return { items, truncated };
@@ -267,9 +264,7 @@ function pullPath(ref: PullRequestRef): string {
   return `/repos/${ref.owner}/${ref.repo}/pulls/${String(ref.number)}`;
 }
 
-function toFileDiff(
-  file: typeof PullRequestFileResponse.infer,
-): PullRequestFileDiff {
+function toFileDiff(file: typeof PullRequestFileResponse.infer): PullRequestFileDiff {
   const patch = file.patch;
   return {
     path: file.filename,
@@ -385,9 +380,7 @@ export async function postPullRequestReview(
   });
   const posted = PostedReviewResponse(raw);
   if (posted instanceof type.errors) {
-    throw new Error(
-      `GitHub review response did not match the expected shape: ${posted.summary}`,
-    );
+    throw new Error(`GitHub review response did not match the expected shape: ${posted.summary}`);
   }
   return { id: posted.id, url: posted.html_url };
 }
diff --git a/packages/github-tools/src/repos.test.ts b/packages/github-tools/src/repos.test.ts
index 94e52c8434..25ce14e3ad 100644
--- a/packages/github-tools/src/repos.test.ts
+++ b/packages/github-tools/src/repos.test.ts
@@ -9,8 +9,7 @@ function jsonResponse(body: unknown): Response {
 }
 
 function fakeFetch(handler: (url: string) => Promise<Response>): typeof fetch {
-  return ((input: URL | string) =>
-    handler(String(input))) as unknown as typeof fetch;
+  return ((input: URL | string) => handler(String(input))) as unknown as typeof fetch;
 }
 
 test("listRepos reads the whole picker from one list call, never a per-repo search", async () => {
@@ -47,9 +46,7 @@ test("listRepos reads the whole picker from one list call, never a per-repo sear
 });
 
 test("listRepos throws when the repos response doesn't match the expected shape", async () => {
-  const fetchImpl = fakeFetch(() =>
-    Promise.resolve(jsonResponse([{ id: "not-a-number" }])),
-  );
+  const fetchImpl = fakeFetch(() => Promise.resolve(jsonResponse([{ id: "not-a-number" }])));
   await expect(listRepos({ baseUrl: BASE, fetchImpl })).rejects.toThrow(
     /did not match the expected shape/,
   );
@@ -57,13 +54,9 @@ test("listRepos throws when the repos response doesn't match the expected shape"
 
 test("listRepos names the status when GitHub rejects the list call", async () => {
   const fetchImpl = fakeFetch(() =>
-    Promise.resolve(
-      new Response("nope", { status: 403, statusText: "Forbidden" }),
-    ),
-  );
-  await expect(listRepos({ baseUrl: BASE, fetchImpl })).rejects.toThrow(
-    /403 Forbidden/,
+    Promise.resolve(new Response("nope", { status: 403, statusText: "Forbidden" })),
   );
+  await expect(listRepos({ baseUrl: BASE, fetchImpl })).rejects.toThrow(/403 Forbidden/);
 });
 
 test("fetchAuthenticatedLogin reads the PAT's own login", async () => {
@@ -71,7 +64,5 @@ test("fetchAuthenticatedLogin reads the PAT's own login", async () => {
     expect(url).toContain("/user");
     return Promise.resolve(jsonResponse({ login: "octocat" }));
   });
-  expect(await fetchAuthenticatedLogin({ baseUrl: BASE, fetchImpl })).toBe(
-    "octocat",
-  );
+  expect(await fetchAuthenticatedLogin({ baseUrl: BASE, fetchImpl })).toBe("octocat");
 });
diff --git a/packages/github-tools/src/repos.ts b/packages/github-tools/src/repos.ts
index c0401f5256..0f46d6ca68 100644
--- a/packages/github-tools/src/repos.ts
+++ b/packages/github-tools/src/repos.ts
@@ -41,10 +41,7 @@ function headers(apiKey: string | undefined): Record<string, string> {
   return base;
 }
 
-async function fetchJSON(
-  config: GitHubClientConfig,
-  url: URL,
-): Promise<unknown> {
+async function fetchJSON(config: GitHubClientConfig, url: URL): Promise<unknown> {
   const doFetch = config.fetchImpl ?? fetch;
   const response = await doFetch(url, { headers: headers(config.apiKey) });
   if (!response.ok) {
@@ -62,9 +59,7 @@ async function fetchJSON(
  * failure; the connect-github card's own host catches at its render
  * boundary.
  */
-export async function listRepos(
-  config: GitHubClientConfig,
-): Promise<readonly GitHubRepoSummary[]> {
+export async function listRepos(config: GitHubClientConfig): Promise<readonly GitHubRepoSummary[]> {
   const base = config.baseUrl ?? DEFAULT_BASE_URL;
   const url = new URL(`${base}/user/repos`);
   url.searchParams.set("per_page", String(PER_PAGE));
@@ -73,17 +68,13 @@ export async function listRepos(
   const raw = await fetchJSON(config, url);
   const repos = GitHubUserReposResponse(raw);
   if (repos instanceof type.errors) {
-    throw new Error(
-      `GitHub repos response did not match the expected shape: ${repos.summary}`,
-    );
+    throw new Error(`GitHub repos response did not match the expected shape: ${repos.summary}`);
   }
 
   return repos.map((repo) => ({
     id: String(repo.id),
     name: repo.full_name,
-    ...(typeof repo.pushed_at === "string"
-      ? { lastPushedAt: repo.pushed_at }
-      : {}),
+    ...(typeof repo.pushed_at === "string" ? { lastPushedAt: repo.pushed_at } : {}),
   }));
 }
 
@@ -95,9 +86,7 @@ const GitHubAuthenticatedUser = type({ login: "string" });
  * CL-6343, not built here), so a caller showing "connected as" shows
  * this login, not an org name.
  */
-export async function fetchAuthenticatedLogin(
-  config: GitHubClientConfig,
-): Promise<string> {
+export async function fetchAuthenticatedLogin(config: GitHubClientConfig): Promise<string> {
   const base = config.baseUrl ?? DEFAULT_BASE_URL;
   const raw = await fetchJSON(config, new URL(`${base}/user`));
   const parsed = GitHubAuthenticatedUser(raw);
diff --git a/packages/github-tools/src/tool.test.ts b/packages/github-tools/src/tool.test.ts
index 6fe2972c34..57d05ec133 100644
--- a/packages/github-tools/src/tool.test.ts
+++ b/packages/github-tools/src/tool.test.ts
@@ -22,9 +22,7 @@ function fakeCredentials(secret: string | undefined): CredentialCapability {
   return {
     resolve(handle: string): Promise<MediatedCredential> {
       if (secret === undefined) {
-        return Promise.reject(
-          new Error(`no credential is bound to handle "${handle}"`),
-        );
+        return Promise.reject(new Error(`no credential is bound to handle "${handle}"`));
       }
       return Promise.resolve({
         kind: "http",
@@ -133,8 +131,7 @@ test("uses the mediated fetch (authenticated) when a credential resolves", async
 
 test("degrades to an error result (never throws) when the underlying call fails", async () => {
   const originalFetch = globalThis.fetch;
-  globalThis.fetch = (async () =>
-    new Response("nope", { status: 403 })) as unknown as typeof fetch;
+  globalThis.fetch = (async () => new Response("nope", { status: 403 })) as unknown as typeof fetch;
   try {
     const bundle = githubTools(fakeEnv(undefined));
     const result = await bundle.run(CALL, new AbortController().signal);
@@ -146,8 +143,7 @@ test("degrades to an error result (never throws) when the underlying call fails"
 
 test("degrades to an error result the same way with a credential resolving", async () => {
   const originalFetch = globalThis.fetch;
-  globalThis.fetch = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  globalThis.fetch = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
   try {
     const bundle = githubTools(fakeEnv(fakeCredentials("ghp_test")));
     const result = await bundle.run(CALL, new AbortController().signal);
diff --git a/packages/github-tools/src/tool.ts b/packages/github-tools/src/tool.ts
index 213584d9e1..b90e68bff8 100644
--- a/packages/github-tools/src/tool.ts
+++ b/packages/github-tools/src/tool.ts
@@ -50,10 +50,7 @@ async function resolveGitHubCredential(
   }
 }
 
-async function runGitHubActivity(
-  env: GitHubEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runGitHubActivity(env: GitHubEnv, call: ToolCall): Promise<ToolResult> {
   const query = call.arguments["query"];
   if (typeof query !== "string" || query.trim().length === 0) {
     return {
@@ -66,11 +63,9 @@ async function runGitHubActivity(
   const days = call.arguments["days"];
   const limit = call.arguments["limit"];
   try {
-    const clientConfig =
-      credential !== null ? { fetchImpl: credential.fetchImpl } : {};
+    const clientConfig = credential !== null ? { fetchImpl: credential.fetchImpl } : {};
     const withDays = typeof days === "number" ? { query, days } : { query };
-    const params =
-      typeof limit === "number" ? { ...withDays, limit } : withDays;
+    const params = typeof limit === "number" ? { ...withDays, limit } : withDays;
     const items = await searchGitHubActivity(clientConfig, params);
     return { callId: call.id, content: JSON.stringify({ items }) };
   } catch (err) {
diff --git a/packages/gotenberg-render/package.json b/packages/gotenberg-render/package.json
index adcde5a3ac..60d144d5f3 100644
--- a/packages/gotenberg-render/package.json
+++ b/packages/gotenberg-render/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/gotenberg-render",
+  "version": "0.0.1",
   "private": true,
   "description": "Renders a Markdown Library artifact to PDF via an operator-configured Gotenberg server (CL-6499): config resolution that treats an unset endpoint as an absent capability, a thin Gotenberg HTTP client, and an orchestration step that reports failures through @corbits/error-sink",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/gotenberg-render/src/client.test.ts b/packages/gotenberg-render/src/client.test.ts
index 30a74c92ee..739f081408 100644
--- a/packages/gotenberg-render/src/client.test.ts
+++ b/packages/gotenberg-render/src/client.test.ts
@@ -8,10 +8,7 @@ describe("renderMarkdownToPdf", () => {
     const pdfBytes = new Uint8Array([0x25, 0x50, 0x44, 0x46]);
     let capturedUrl: string | undefined;
     let capturedForm: FormData | undefined;
-    const fetchStub = (async (
-      url: string | URL | Request,
-      init?: RequestInit,
-    ) => {
+    const fetchStub = (async (url: string | URL | Request, init?: RequestInit) => {
       capturedUrl = String(url);
       capturedForm = init?.body as FormData;
       return new Response(pdfBytes, { status: 200 });
@@ -24,9 +21,7 @@ describe("renderMarkdownToPdf", () => {
     );
 
     expect(result).toEqual(pdfBytes);
-    expect(capturedUrl).toBe(
-      "http://gotenberg.internal:3000/forms/chromium/convert/markdown",
-    );
+    expect(capturedUrl).toBe("http://gotenberg.internal:3000/forms/chromium/convert/markdown");
     const files = capturedForm?.getAll("files") ?? [];
     expect(files).toHaveLength(2);
   });
diff --git a/packages/gotenberg-render/src/client.ts b/packages/gotenberg-render/src/client.ts
index 4ac9031db0..1d88b7324b 100644
--- a/packages/gotenberg-render/src/client.ts
+++ b/packages/gotenberg-render/src/client.ts
@@ -41,11 +41,7 @@ export async function renderMarkdownToPdf(
     new Blob([indexTemplateFor(input.title)], { type: "text/html" }),
     "index.html",
   );
-  form.append(
-    "files",
-    new Blob([input.markdown], { type: "text/markdown" }),
-    "body.md",
-  );
+  form.append("files", new Blob([input.markdown], { type: "text/markdown" }), "body.md");
 
   let response: Response;
   try {
diff --git a/packages/gotenberg-render/src/config.test.ts b/packages/gotenberg-render/src/config.test.ts
index 5262d25df7..a1fa70dcee 100644
--- a/packages/gotenberg-render/src/config.test.ts
+++ b/packages/gotenberg-render/src/config.test.ts
@@ -11,14 +11,12 @@ describe("resolveGotenbergConfig", () => {
   });
 
   test("resolves a configured URL, trimming a trailing slash", () => {
-    expect(
-      resolveGotenbergConfig({ GOTENBERG_URL: "http://gotenberg:3000/" }),
-    ).toEqual({ baseUrl: "http://gotenberg:3000" });
+    expect(resolveGotenbergConfig({ GOTENBERG_URL: "http://gotenberg:3000/" })).toEqual({
+      baseUrl: "http://gotenberg:3000",
+    });
   });
 
   test("throws on a value that isn't a URL", () => {
-    expect(() =>
-      resolveGotenbergConfig({ GOTENBERG_URL: "not-a-url" }),
-    ).toThrow();
+    expect(() => resolveGotenbergConfig({ GOTENBERG_URL: "not-a-url" })).toThrow();
   });
 });
diff --git a/packages/granola-tools/package.json b/packages/granola-tools/package.json
index d7f7d3f728..1a017345ae 100644
--- a/packages/granola-tools/package.json
+++ b/packages/granola-tools/package.json
@@ -1,28 +1,21 @@
 {
   "name": "@corbits/granola-tools",
+  "version": "0.0.5",
   "description": "Granola integration: a minimal client and an @intx/agent tool bundle for listing a user's recent call notes",
-  "version": "0.0.4",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "interchange": {
-    "credentials": [
-      {
-        "handle": "granola"
-      }
-    ]
-  },
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "packages/granola-tools"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "packages/granola-tools"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -34,10 +27,6 @@
   "dependencies": {
     "arktype": "catalog:"
   },
-  "peerDependencies": {
-    "@intx/agent": "0.3.0",
-    "@intx/types": "0.3.0"
-  },
   "devDependencies": {
     "@corbits/credential-providers": "workspace:*",
     "@intx/authz": "0.3.0",
@@ -46,5 +35,16 @@
     "@intx/harness": "workspace:*",
     "@types/bun": "catalog:",
     "typescript": "catalog:"
+  },
+  "peerDependencies": {
+    "@intx/agent": "0.3.0",
+    "@intx/types": "0.3.0"
+  },
+  "interchange": {
+    "credentials": [
+      {
+        "handle": "granola"
+      }
+    ]
   }
 }
diff --git a/packages/granola-tools/src/client.test.ts b/packages/granola-tools/src/client.test.ts
index f2b1cb721c..6134786fe2 100644
--- a/packages/granola-tools/src/client.test.ts
+++ b/packages/granola-tools/src/client.test.ts
@@ -30,9 +30,7 @@ test("carries the since parameter and bearer auth header", async () => {
   const fetchImpl = (async (input: URL | string, init?: RequestInit) => {
     captured.url = String(input);
     captured.auth =
-      (init?.headers as Record<string, string> | undefined)?.[
-        "authorization"
-      ] ?? null;
+      (init?.headers as Record<string, string> | undefined)?.["authorization"] ?? null;
     return new Response(JSON.stringify({ notes: [] }), { status: 200 });
   }) as unknown as typeof fetch;
 
@@ -40,19 +38,14 @@ test("carries the since parameter and bearer auth header", async () => {
     { apiKey: "secret", fetchImpl },
     { since: "2026-08-01T00:00:00.000Z" },
   );
-  expect(captured.url).toBe(
-    "https://api.granola.ai/v1/notes?since=2026-08-01T00%3A00%3A00.000Z",
-  );
+  expect(captured.url).toBe("https://api.granola.ai/v1/notes?since=2026-08-01T00%3A00%3A00.000Z");
   expect(captured.auth).toBe("Bearer secret");
 });
 
 test("throws on a non-ok HTTP response", async () => {
-  const fetchImpl = (async () =>
-    new Response("nope", { status: 401 })) as unknown as typeof fetch;
+  const fetchImpl = (async () => new Response("nope", { status: 401 })) as unknown as typeof fetch;
 
-  await expect(
-    listRecentGranolaNotes({ apiKey: "bad", fetchImpl }),
-  ).rejects.toThrow(/401/);
+  await expect(listRecentGranolaNotes({ apiKey: "bad", fetchImpl })).rejects.toThrow(/401/);
 });
 
 test("throws when the response body does not match the expected shape", async () => {
@@ -61,9 +54,9 @@ test("throws when the response body does not match the expected shape", async ()
       status: 200,
     })) as unknown as typeof fetch;
 
-  await expect(
-    listRecentGranolaNotes({ apiKey: "test-key", fetchImpl }),
-  ).rejects.toThrow(/did not match the expected shape/);
+  await expect(listRecentGranolaNotes({ apiKey: "test-key", fetchImpl })).rejects.toThrow(
+    /did not match the expected shape/,
+  );
 });
 
 test("getGranolaNote fetches one note by id with its transcript", async () => {
@@ -81,19 +74,12 @@ test("getGranolaNote fetches one note by id with its transcript", async () => {
   const fetchImpl = (async (input: URL | string, init?: RequestInit) => {
     captured.url = String(input);
     captured.auth =
-      (init?.headers as Record<string, string> | undefined)?.[
-        "authorization"
-      ] ?? null;
+      (init?.headers as Record<string, string> | undefined)?.["authorization"] ?? null;
     return new Response(JSON.stringify(noteWithTranscript), { status: 200 });
   }) as unknown as typeof fetch;
 
-  const note = await getGranolaNote(
-    { apiKey: "test-key", fetchImpl },
-    { noteId: "note_1" },
-  );
-  expect(captured.url).toBe(
-    "https://api.granola.ai/v1/notes/note_1?include=transcript",
-  );
+  const note = await getGranolaNote({ apiKey: "test-key", fetchImpl }, { noteId: "note_1" });
+  expect(captured.url).toBe("https://api.granola.ai/v1/notes/note_1?include=transcript");
   expect(captured.auth).toBe("Bearer test-key");
   expect(note).toEqual(noteWithTranscript);
 });
diff --git a/packages/granola-tools/src/client.ts b/packages/granola-tools/src/client.ts
index 91cbda18cf..58889dff22 100644
--- a/packages/granola-tools/src/client.ts
+++ b/packages/granola-tools/src/client.ts
@@ -35,12 +35,8 @@ export interface GranolaClientConfig {
   readonly fetchImpl?: typeof fetch;
 }
 
-function authHeaders(
-  apiKey: string | undefined,
-): Record<string, string> | undefined {
-  return apiKey === undefined
-    ? undefined
-    : { authorization: `Bearer ${apiKey}` };
+function authHeaders(apiKey: string | undefined): Record<string, string> | undefined {
+  return apiKey === undefined ? undefined : { authorization: `Bearer ${apiKey}` };
 }
 
 const DEFAULT_BASE_URL = "https://api.granola.ai";
@@ -64,9 +60,7 @@ export async function listRecentGranolaNotes(
     headers: authHeaders(config.apiKey),
   });
   if (!response.ok) {
-    throw new Error(
-      `Granola list-notes request failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`Granola list-notes request failed: ${response.status} ${response.statusText}`);
   }
   const body: unknown = await response.json();
   const parsed = GranolaListNotesResponse(body);
@@ -98,9 +92,7 @@ export async function getGranolaNote(
     headers: authHeaders(config.apiKey),
   });
   if (!response.ok) {
-    throw new Error(
-      `Granola get-note request failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`Granola get-note request failed: ${response.status} ${response.statusText}`);
   }
   const body: unknown = await response.json();
   const parsed = GranolaNote(body);
diff --git a/packages/granola-tools/src/index.ts b/packages/granola-tools/src/index.ts
index 7e60652331..5c4ed8a1e9 100644
--- a/packages/granola-tools/src/index.ts
+++ b/packages/granola-tools/src/index.ts
@@ -1,8 +1,4 @@
 export { GranolaNote, getGranolaNote, listRecentGranolaNotes } from "./client";
 export type { GranolaClientConfig, GranolaTranscriptLine } from "./client";
-export {
-  GRANOLA_GET_NOTE_TOOL,
-  GRANOLA_LIST_RECENT_NOTES_TOOL,
-  granolaTools,
-} from "./tool";
+export { GRANOLA_GET_NOTE_TOOL, GRANOLA_LIST_RECENT_NOTES_TOOL, granolaTools } from "./tool";
 export type { GranolaEnv } from "./tool";
diff --git a/packages/granola-tools/src/tool.test.ts b/packages/granola-tools/src/tool.test.ts
index b5870392fc..ee4e567096 100644
--- a/packages/granola-tools/src/tool.test.ts
+++ b/packages/granola-tools/src/tool.test.ts
@@ -2,11 +2,7 @@ import { expect, test } from "bun:test";
 import type { ToolCall } from "@intx/types/runtime";
 import type { CredentialCapability, MediatedCredential } from "@intx/types";
 
-import {
-  GRANOLA_GET_NOTE_TOOL,
-  GRANOLA_LIST_RECENT_NOTES_TOOL,
-  granolaTools,
-} from "./tool";
+import { GRANOLA_GET_NOTE_TOOL, GRANOLA_LIST_RECENT_NOTES_TOOL, granolaTools } from "./tool";
 import type { GranolaEnv } from "./tool";
 
 const CALL: ToolCall = {
@@ -32,9 +28,7 @@ function fakeCredentials(secret: string | undefined): CredentialCapability {
   return {
     resolve(handle: string): Promise<MediatedCredential> {
       if (secret === undefined) {
-        return Promise.reject(
-          new Error(`no credential is bound to handle "${handle}"`),
-        );
+        return Promise.reject(new Error(`no credential is bound to handle "${handle}"`));
       }
       return Promise.resolve({
         kind: "http",
@@ -78,9 +72,7 @@ test("degrades the same way when the step carries no credentials capability at a
 test("returns the notes as JSON content on a successful call", async () => {
   const originalFetch = globalThis.fetch;
   globalThis.fetch = (async (_input: unknown, init?: RequestInit) => {
-    expect((init?.headers as Headers | undefined)?.get("authorization")).toBe(
-      "Bearer key",
-    );
+    expect((init?.headers as Headers | undefined)?.get("authorization")).toBe("Bearer key");
     return new Response(
       JSON.stringify({
         notes: [
@@ -114,8 +106,7 @@ test("returns the notes as JSON content on a successful call", async () => {
 
 test("degrades to an error result (never throws) when the underlying call fails", async () => {
   const originalFetch = globalThis.fetch;
-  globalThis.fetch = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  globalThis.fetch = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
   try {
     const bundle = granolaTools(fakeEnv(fakeCredentials("key")));
     const result = await bundle.run(CALL, new AbortController().signal);
@@ -167,10 +158,7 @@ test("granola_get_note returns the note as JSON content on a successful call", a
     )) as unknown as typeof fetch;
   try {
     const bundle = granolaTools(fakeEnv(fakeCredentials("key")));
-    const result = await bundle.run(
-      GET_NOTE_CALL,
-      new AbortController().signal,
-    );
+    const result = await bundle.run(GET_NOTE_CALL, new AbortController().signal);
     expect(result.isError).toBeUndefined();
     const parsed = JSON.parse(result.content as string) as {
       note: { id: string; transcript: unknown[] };
@@ -184,14 +172,10 @@ test("granola_get_note returns the note as JSON content on a successful call", a
 
 test("granola_get_note degrades to an error result (never throws) when the underlying call fails", async () => {
   const originalFetch = globalThis.fetch;
-  globalThis.fetch = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  globalThis.fetch = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
   try {
     const bundle = granolaTools(fakeEnv(fakeCredentials("key")));
-    const result = await bundle.run(
-      GET_NOTE_CALL,
-      new AbortController().signal,
-    );
+    const result = await bundle.run(GET_NOTE_CALL, new AbortController().signal);
     expect(result.isError).toBe(true);
   } finally {
     globalThis.fetch = originalFetch;
diff --git a/packages/granola-tools/src/tool.ts b/packages/granola-tools/src/tool.ts
index e29539cb1d..65326684be 100644
--- a/packages/granola-tools/src/tool.ts
+++ b/packages/granola-tools/src/tool.ts
@@ -65,10 +65,7 @@ async function resolveGranolaCredential(
   }
 }
 
-async function runGranolaListRecentNotes(
-  env: GranolaEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runGranolaListRecentNotes(env: GranolaEnv, call: ToolCall): Promise<ToolResult> {
   const credential = await resolveGranolaCredential(env);
   if (credential === null) {
     return notConnectedResult(call.id);
@@ -89,10 +86,7 @@ async function runGranolaListRecentNotes(
   }
 }
 
-async function runGranolaGetNote(
-  env: GranolaEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runGranolaGetNote(env: GranolaEnv, call: ToolCall): Promise<ToolResult> {
   const credential = await resolveGranolaCredential(env);
   if (credential === null) {
     return notConnectedResult(call.id);
@@ -106,10 +100,7 @@ async function runGranolaGetNote(
     };
   }
   try {
-    const note = await getGranolaNote(
-      { fetchImpl: credential.fetchImpl },
-      { noteId },
-    );
+    const note = await getGranolaNote({ fetchImpl: credential.fetchImpl }, { noteId });
     return { callId: call.id, content: JSON.stringify({ note }) };
   } catch (err) {
     return {
@@ -132,10 +123,7 @@ async function runGranolaGetNote(
 export const granolaTools = defineTool<GranolaEnv>({
   id: "@corbits/granola-tools/gr",
   requires: ["credentials"],
-  definitions: [
-    { name: GRANOLA_LIST_RECENT_NOTES_TOOL },
-    { name: GRANOLA_GET_NOTE_TOOL },
-  ],
+  definitions: [{ name: GRANOLA_LIST_RECENT_NOTES_TOOL }, { name: GRANOLA_GET_NOTE_TOOL }],
   factory: (env) => ({
     definitions: [
       {
@@ -150,8 +138,7 @@ export const granolaTools = defineTool<GranolaEnv>({
           properties: {
             since: {
               type: "string",
-              description:
-                "ISO 8601 timestamp; only notes created after this are returned",
+              description: "ISO 8601 timestamp; only notes created after this are returned",
             },
           },
         },
diff --git a/packages/granola-tools/test/credential-delivery.drizzle.test.ts b/packages/granola-tools/test/credential-delivery.drizzle.test.ts
index 12ab891ca5..6f97c3b195 100644
--- a/packages/granola-tools/test/credential-delivery.drizzle.test.ts
+++ b/packages/granola-tools/test/credential-delivery.drizzle.test.ts
@@ -15,12 +15,7 @@
 //   - the same binding fails closed (`unresolved`) when no credential
 //     exists for the provider, rather than delivering nothing silently.
 import { afterAll, beforeAll, expect, test } from "bun:test";
-import {
-  buildCredentialDelivery,
-  createDB,
-  runMigrations,
-  dropSchema,
-} from "@intx/db";
+import { buildCredentialDelivery, createDB, runMigrations, dropSchema } from "@intx/db";
 import { schema } from "@intx/db";
 import { createEnvKeyCredentialCipher } from "@intx/crypto";
 import { credentialAad } from "@intx/types";
@@ -45,9 +40,7 @@ const GRANOLA_BINDING: CredentialBinding = {
 };
 
 describeIfDb("buildCredentialDelivery: the granola handle binding", () => {
-  const target = dbTargetFromUrl(
-    databaseUrl ?? "postgres://localhost:5432/unused",
-  );
+  const target = dbTargetFromUrl(databaseUrl ?? "postgres://localhost:5432/unused");
 
   beforeAll(async () => {
     await runMigrations(target, { schema: SCHEMA });
diff --git a/packages/granola-tools/test/credential-wiring-e2e.drizzle.test.ts b/packages/granola-tools/test/credential-wiring-e2e.drizzle.test.ts
index 6f6c905b51..2c58381c76 100644
--- a/packages/granola-tools/test/credential-wiring-e2e.drizzle.test.ts
+++ b/packages/granola-tools/test/credential-wiring-e2e.drizzle.test.ts
@@ -34,12 +34,7 @@
 // does, so what's new here is steps 1-3: a REAL seeded credential
 // reaching the tool through the REAL substrate composition.
 import { afterAll, beforeAll, expect, test } from "bun:test";
-import {
-  buildCredentialDelivery,
-  createDB,
-  runMigrations,
-  dropSchema,
-} from "@intx/db";
+import { buildCredentialDelivery, createDB, runMigrations, dropSchema } from "@intx/db";
 import { schema } from "@intx/db";
 import { createEnvKeyCredentialCipher } from "@intx/crypto";
 import { credentialAad } from "@intx/types";
@@ -76,10 +71,7 @@ const GRANOLA_BINDING: CredentialBinding = {
 };
 
 /** A delivered binding descriptor, reshaped into the launch-time `GrantRule`. */
-function toGrantRule(descriptor: {
-  credentialId: string;
-  consumer: string;
-}): GrantRule {
+function toGrantRule(descriptor: { credentialId: string; consumer: string }): GrantRule {
   return {
     id: "grant_launch_1",
     resource: `credential:${descriptor.credentialId}`,
@@ -93,128 +85,121 @@ function toGrantRule(descriptor: {
   };
 }
 
-describeIfDb(
-  "credential wiring end to end: seed -> delivery -> capability -> tool",
-  () => {
-    const target = dbTargetFromUrl(
-      databaseUrl ?? "postgres://localhost:5432/unused",
-    );
+describeIfDb("credential wiring end to end: seed -> delivery -> capability -> tool", () => {
+  const target = dbTargetFromUrl(databaseUrl ?? "postgres://localhost:5432/unused");
 
-    beforeAll(async () => {
-      await runMigrations(target, { schema: SCHEMA });
-    });
+  beforeAll(async () => {
+    await runMigrations(target, { schema: SCHEMA });
+  });
 
-    afterAll(async () => {
-      await dropSchema(target, { schema: SCHEMA });
-    });
+  afterAll(async () => {
+    await dropSchema(target, { schema: SCHEMA });
+  });
 
-    test("a tenant-seeded credential reaches granolaTools's tool call as a bearer secret", async () => {
-      const { db, close } = createDB({ ...target, schema: SCHEMA });
-      try {
-        await db.insert(schema.tenant).values({
-          id: "tnt_credential_wiring_e2e",
-          name: "Credential Wiring E2E Tenant",
-          slug: "credential-wiring-e2e-tenant",
-          domain: "credential-wiring-e2e.workbench.test",
-        });
-        // Seeded with `plugin: "http"`: the ONLY credential provider the
-        // sidecar's `createSidecarSubstrateFactory` registers
-        // (`createCredentialProviderRegistry(builtinCredentialProviders())`,
-        // `@intx/harness`'s single built-in origin-pinned bearer plugin).
-        await db.insert(schema.provider).values({
-          id: "prov_granola_e2e",
-          tenantId: "tnt_credential_wiring_e2e",
-          name: "granola",
-          plugin: "http",
-          apiBaseUrl: "https://api.granola.ai",
-        });
-        const credentialId = "cred_granola_e2e";
-        await db.insert(schema.credential).values({
-          id: credentialId,
-          tenantId: "tnt_credential_wiring_e2e",
-          providerId: "prov_granola_e2e",
-          name: "granola-key",
-          type: "api_key",
-          secret: await CIPHER.encrypt(
-            "seeded-granola-secret",
-            credentialAad(credentialId, "secret"),
-          ),
-          status: "active",
-        });
+  test("a tenant-seeded credential reaches granolaTools's tool call as a bearer secret", async () => {
+    const { db, close } = createDB({ ...target, schema: SCHEMA });
+    try {
+      await db.insert(schema.tenant).values({
+        id: "tnt_credential_wiring_e2e",
+        name: "Credential Wiring E2E Tenant",
+        slug: "credential-wiring-e2e-tenant",
+        domain: "credential-wiring-e2e.workbench.test",
+      });
+      // Seeded with `plugin: "http"`: the ONLY credential provider the
+      // sidecar's `createSidecarSubstrateFactory` registers
+      // (`createCredentialProviderRegistry(builtinCredentialProviders())`,
+      // `@intx/harness`'s single built-in origin-pinned bearer plugin).
+      await db.insert(schema.provider).values({
+        id: "prov_granola_e2e",
+        tenantId: "tnt_credential_wiring_e2e",
+        name: "granola",
+        plugin: "http",
+        apiBaseUrl: "https://api.granola.ai",
+      });
+      const credentialId = "cred_granola_e2e";
+      await db.insert(schema.credential).values({
+        id: credentialId,
+        tenantId: "tnt_credential_wiring_e2e",
+        providerId: "prov_granola_e2e",
+        name: "granola-key",
+        type: "api_key",
+        secret: await CIPHER.encrypt(
+          "seeded-granola-secret",
+          credentialAad(credentialId, "secret"),
+        ),
+        status: "active",
+      });
 
-        // Step 2: launch-time resolution, unmodified platform function.
-        const result = await buildCredentialDelivery({
-          db,
-          tenantId: "tnt_credential_wiring_e2e",
-          bindings: [GRANOLA_BINDING],
-          creatorPrincipalId: null,
-          invokerPrincipalId: null,
-          credentialCipher: CIPHER,
-        });
-        expect(result.ok).toBe(true);
-        if (!result.ok) throw new Error("expected delivery to resolve");
-        const delivery = result.delivery;
-        if (delivery === undefined) throw new Error("expected a delivery");
+      // Step 2: launch-time resolution, unmodified platform function.
+      const result = await buildCredentialDelivery({
+        db,
+        tenantId: "tnt_credential_wiring_e2e",
+        bindings: [GRANOLA_BINDING],
+        creatorPrincipalId: null,
+        invokerPrincipalId: null,
+        credentialCipher: CIPHER,
+      });
+      expect(result.ok).toBe(true);
+      if (!result.ok) throw new Error("expected delivery to resolve");
+      const delivery = result.delivery;
+      if (delivery === undefined) throw new Error("expected a delivery");
 
-        // Step 3: the exact composition
-        // `createToolBearingAgentFactory`'s `credentialCapabilityFor`
-        // performs at a real step build.
-        const captured: { auth: string | null } = { auth: null };
-        const providers = createCredentialProviderRegistry([
-          createHttpCredentialProvider({
-            fetch: async (_input, init) => {
-              captured.auth =
-                (init?.headers as Headers | undefined)?.get("authorization") ??
-                null;
-              return new Response(
-                JSON.stringify({
-                  notes: [
-                    {
-                      id: "note_1",
-                      title: "Weekly sync",
-                      createdAt: "2026-08-12T09:00:00.000Z",
-                    },
-                  ],
-                }),
-                { status: 200 },
-              );
-            },
-          }),
-        ]);
-        const capability = createCredentialCapability({
-          consumer: CONSUMER,
-          bindings: deriveResolvedBindings(delivery, CONSUMER),
-          providers,
-          grants: delivery.bindings.map(toGrantRule),
-        });
+      // Step 3: the exact composition
+      // `createToolBearingAgentFactory`'s `credentialCapabilityFor`
+      // performs at a real step build.
+      const captured: { auth: string | null } = { auth: null };
+      const providers = createCredentialProviderRegistry([
+        createHttpCredentialProvider({
+          fetch: async (_input, init) => {
+            captured.auth = (init?.headers as Headers | undefined)?.get("authorization") ?? null;
+            return new Response(
+              JSON.stringify({
+                notes: [
+                  {
+                    id: "note_1",
+                    title: "Weekly sync",
+                    createdAt: "2026-08-12T09:00:00.000Z",
+                  },
+                ],
+              }),
+              { status: 200 },
+            );
+          },
+        }),
+      ]);
+      const capability = createCredentialCapability({
+        consumer: CONSUMER,
+        bindings: deriveResolvedBindings(delivery, CONSUMER),
+        providers,
+        grants: delivery.bindings.map(toGrantRule),
+      });
 
-        // Step 4: the real tool bundle, driven exactly as
-        // `../src/tool.test.ts` drives it, sees the seeded secret.
-        const env = { credentials: capability } as unknown as GranolaEnv;
-        const bundle = granolaTools(env);
-        const call: ToolCall = {
-          id: "call_1",
-          name: GRANOLA_LIST_RECENT_NOTES_TOOL,
-          arguments: {},
-        };
-        const callResult = await bundle.run(call, new AbortController().signal);
+      // Step 4: the real tool bundle, driven exactly as
+      // `../src/tool.test.ts` drives it, sees the seeded secret.
+      const env = { credentials: capability } as unknown as GranolaEnv;
+      const bundle = granolaTools(env);
+      const call: ToolCall = {
+        id: "call_1",
+        name: GRANOLA_LIST_RECENT_NOTES_TOOL,
+        arguments: {},
+      };
+      const callResult = await bundle.run(call, new AbortController().signal);
 
-        expect(callResult.isError).toBeUndefined();
-        expect(captured.auth).toBe("Bearer seeded-granola-secret");
-        expect(JSON.parse(callResult.content as string)).toEqual({
-          notes: [
-            {
-              id: "note_1",
-              title: "Weekly sync",
-              createdAt: "2026-08-12T09:00:00.000Z",
-            },
-          ],
-        });
+      expect(callResult.isError).toBeUndefined();
+      expect(captured.auth).toBe("Bearer seeded-granola-secret");
+      expect(JSON.parse(callResult.content as string)).toEqual({
+        notes: [
+          {
+            id: "note_1",
+            title: "Weekly sync",
+            createdAt: "2026-08-12T09:00:00.000Z",
+          },
+        ],
+      });
 
-        await capability.dispose();
-      } finally {
-        await close();
-      }
-    });
-  },
-);
+      await capability.dispose();
+    } finally {
+      await close();
+    }
+  });
+});
diff --git a/packages/hub-api-client/package.json b/packages/hub-api-client/package.json
index b73175908a..bfab9701da 100644
--- a/packages/hub-api-client/package.json
+++ b/packages/hub-api-client/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/hub-api-client",
+  "version": "0.0.1",
   "private": true,
   "description": "The hub's native HTTP API as a typed client: authenticate, sign in, and call any route with a validated response",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/hub-api-client/src/errors.test.ts b/packages/hub-api-client/src/errors.test.ts
index 00adae8c4b..6c9e4cc722 100644
--- a/packages/hub-api-client/src/errors.test.ts
+++ b/packages/hub-api-client/src/errors.test.ts
@@ -30,9 +30,7 @@ describe("SidecarUnavailableError", () => {
   });
 
   test("isSidecarUnavailableError rejects a generic HubApiError", () => {
-    expect(
-      isSidecarUnavailableError(new SidecarUnavailableError("x", "y")),
-    ).toBe(true);
+    expect(isSidecarUnavailableError(new SidecarUnavailableError("x", "y"))).toBe(true);
     expect(isSidecarUnavailableError(new HubApiError("x", "y"))).toBe(false);
   });
 });
diff --git a/packages/hub-api-client/src/errors.ts b/packages/hub-api-client/src/errors.ts
index d24bef2ae5..9afb0331ec 100644
--- a/packages/hub-api-client/src/errors.ts
+++ b/packages/hub-api-client/src/errors.ts
@@ -35,8 +35,6 @@ export class SidecarUnavailableError extends HubApiError {
   }
 }
 
-export function isSidecarUnavailableError(
-  value: unknown,
-): value is SidecarUnavailableError {
+export function isSidecarUnavailableError(value: unknown): value is SidecarUnavailableError {
   return value instanceof SidecarUnavailableError;
 }
diff --git a/packages/hub-api-client/src/hub.test.ts b/packages/hub-api-client/src/hub.test.ts
index 0c5d47cbf4..de3d4613b3 100644
--- a/packages/hub-api-client/src/hub.test.ts
+++ b/packages/hub-api-client/src/hub.test.ts
@@ -5,9 +5,7 @@ import { describe, expect, test } from "bun:test";
 import { HubApiError } from "./errors";
 import { authenticate, signIn, type ApiCall, type ApiResult } from "./hub";
 
-function stubApi(
-  handler: (method: string, path: string) => ApiResult,
-): ApiCall {
+function stubApi(handler: (method: string, path: string) => ApiResult): ApiCall {
   return (method, path) => Promise.resolve(handler(method, path));
 }
 
@@ -38,8 +36,7 @@ describe("authenticate", () => {
 
   test("a missing account signs up after sign-in fails", async () => {
     const api = stubApi((_, path) => {
-      if (path === "/api/auth/sign-in/email")
-        return { status: 401, data: null, cookies: [] };
+      if (path === "/api/auth/sign-in/email") return { status: 401, data: null, cookies: [] };
       return {
         status: 200,
         data: { user: { id: "user_2" } },
@@ -56,8 +53,7 @@ describe("authenticate", () => {
 
   test("a 422 sign-up means the address exists with a different password", async () => {
     const api = stubApi((_, path) => {
-      if (path === "/api/auth/sign-in/email")
-        return { status: 401, data: null, cookies: [] };
+      if (path === "/api/auth/sign-in/email") return { status: 401, data: null, cookies: [] };
       return { status: 422, data: null, cookies: [] };
     });
     const error = await authenticate(api, {
@@ -70,8 +66,7 @@ describe("authenticate", () => {
 
   test("a rejected sign-up never prescribes a signup env key", async () => {
     const api = stubApi((_, path) => {
-      if (path === "/api/auth/sign-in/email")
-        return { status: 401, data: null, cookies: [] };
+      if (path === "/api/auth/sign-in/email") return { status: 401, data: null, cookies: [] };
       return {
         status: 403,
         data: { error: "signup_closed" },
diff --git a/packages/hub-api-client/src/hub.ts b/packages/hub-api-client/src/hub.ts
index de24255d7f..077d0068a2 100644
--- a/packages/hub-api-client/src/hub.ts
+++ b/packages/hub-api-client/src/hub.ts
@@ -25,10 +25,7 @@ export type ApiCall = (
  * network-level failure is a fresh-user failure, so it is reported as
  * one: the hub is not running, and the fix is to start it.
  */
-export function createHubAPI(
-  baseUrl: string,
-  fetchImpl: typeof fetch = fetch,
-): ApiCall {
+export function createHubAPI(baseUrl: string, fetchImpl: typeof fetch = fetch): ApiCall {
   return async (method, path, body, cookies = []) => {
     const headers: Record<string, string> = {
       "Content-Type": "application/json",
@@ -75,11 +72,7 @@ export function createHubAPI(
  * the fix is to bring them back in sync — never to limp on with data
  * of an unknown shape.
  */
-export function parseAs<T extends Type>(
-  schema: T,
-  data: unknown,
-  label: string,
-): T["infer"] {
+export function parseAs<T extends Type>(schema: T, data: unknown, label: string): T["infer"] {
   const result = schema(data);
   if (result instanceof type.errors) {
     throw new HubApiError(
diff --git a/packages/icons/README.md b/packages/icons/README.md
index a4fc956903..1817bafa5e 100644
--- a/packages/icons/README.md
+++ b/packages/icons/README.md
@@ -10,7 +10,10 @@ banned outright.
   wrapper that defaults every icon under it to `weight="bold"`. Mounted
   once at each app's root (`apps/web/src/app.tsx`).
 - Nothing else imports `@phosphor-icons/react` or `lucide-react` directly —
-  enforced by the `no-restricted-imports` ESLint rule in `eslint.config.ts`.
+  enforced by the `no-restricted-imports` oxlint rule in `.oxlintrc.json`.
+  The Sparkle/Sparkles glyph ban (previously an ESLint `no-restricted-syntax`
+  selector, which oxlint has no equivalent for) is unenforced by tooling for
+  now — reviewers should still reject it by eye.
 
 Extraction-ready: this package is deliberately just re-exports plus one
 context provider, no app-specific logic, so it can move into
diff --git a/packages/icons/package.json b/packages/icons/package.json
index c7d8e5448b..fec5f3bb37 100644
--- a/packages/icons/package.json
+++ b/packages/icons/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/icons",
+  "version": "0.0.1",
   "private": true,
   "description": "The one Phosphor icon surface every app/package imports glyphs through — bold weight, curated names, no lucide-react and no Sparkle anywhere",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "sideEffects": false,
diff --git a/packages/icons/src/index.tsx b/packages/icons/src/index.tsx
index eb2b4b05de..4512f67522 100644
--- a/packages/icons/src/index.tsx
+++ b/packages/icons/src/index.tsx
@@ -98,9 +98,5 @@ export const boldIconContextValue = { size: "1em", weight: "bold" } as const;
  * without repeating `weight="bold"` at each call site. Mounted once at each
  * app's root (see `apps/web/src/app.tsx`). */
 export function BoldIconProvider({ children }: { children: ReactNode }) {
-  return (
-    <IconContext.Provider value={boldIconContextValue}>
-      {children}
-    </IconContext.Provider>
-  );
+  return <IconContext.Provider value={boldIconContextValue}>{children}</IconContext.Provider>;
 }
diff --git a/packages/inbox/package.json b/packages/inbox/package.json
index 2d596659b0..b5a2e55136 100644
--- a/packages/inbox/package.json
+++ b/packages/inbox/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/inbox",
+  "version": "0.0.1",
   "private": true,
   "description": "Workbench product inbox over @corbits/mailbox: three groups, mark-all-read, clear-done",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/inbox/src/bulk-run.ts b/packages/inbox/src/bulk-run.ts
index ec64a35e3d..83781106bb 100644
--- a/packages/inbox/src/bulk-run.ts
+++ b/packages/inbox/src/bulk-run.ts
@@ -47,9 +47,7 @@ export async function runBulkOperation<T>(
       const extra = options?.extraFor?.(item) ?? options?.extra;
       reportError(error, {
         operation: options?.operation ?? "inbox.bulk",
-        ...(options?.tenantId !== undefined
-          ? { tenantId: options.tenantId }
-          : {}),
+        ...(options?.tenantId !== undefined ? { tenantId: options.tenantId } : {}),
         ...(extra !== undefined ? { extra } : {}),
       });
       options?.onError?.(item, error);
diff --git a/packages/inbox/src/bulk.ts b/packages/inbox/src/bulk.ts
index ec50d7fbc8..e78a452da4 100644
--- a/packages/inbox/src/bulk.ts
+++ b/packages/inbox/src/bulk.ts
@@ -10,17 +10,11 @@ import type { InboxItem } from "./project";
  * Mentions and deliveries that are still open — never action items.
  * Action rows require an explicit decision and must not be bulk-cleared.
  */
-export function itemsEligibleForMarkAllRead(
-  items: readonly InboxItem[],
-): InboxItem[] {
-  return items.filter(
-    (item) => item.group !== "action" && item.status === "open",
-  );
+export function itemsEligibleForMarkAllRead(items: readonly InboxItem[]): InboxItem[] {
+  return items.filter((item) => item.group !== "action" && item.status === "open");
 }
 
 /** Rows whose status is `done` — open rows stay. */
-export function itemsEligibleForClearDone(
-  items: readonly InboxItem[],
-): InboxItem[] {
+export function itemsEligibleForClearDone(items: readonly InboxItem[]): InboxItem[] {
   return items.filter((item) => item.status === "done");
 }
diff --git a/packages/inbox/src/delivery.ts b/packages/inbox/src/delivery.ts
index 8141c14502..4c79c5d814 100644
--- a/packages/inbox/src/delivery.ts
+++ b/packages/inbox/src/delivery.ts
@@ -93,9 +93,7 @@ export function createWorkbenchMailboxDelivery(
  * exists; the dispatch store dedupes by (mail row, sink), so a benign
  * redelivery's repair never double-queues.
  */
-export function createResolveExistingMailIds(
-  db: MailboxDb,
-): ResolveExistingMailIds {
+export function createResolveExistingMailIds(db: MailboxDb): ResolveExistingMailIds {
   return async (items) => {
     if (items.length === 0) return [];
     const keyed = items.map((item) => ({
@@ -123,16 +121,10 @@ export function createResolveExistingMailIds(
         ),
       );
     const idsByKey = new Map(
-      rows.map((row) => [
-        `${row.tenantId}\n${row.principalId}\n${row.messageKey}`,
-        row.id,
-      ]),
+      rows.map((row) => [`${row.tenantId}\n${row.principalId}\n${row.messageKey}`, row.id]),
     );
     return keyed.map(
-      (key) =>
-        idsByKey.get(
-          `${key.tenantId}\n${key.principalId}\n${key.messageKey}`,
-        ) ?? null,
+      (key) => idsByKey.get(`${key.tenantId}\n${key.principalId}\n${key.messageKey}`) ?? null,
     );
   };
 }
diff --git a/packages/inbox/src/group.ts b/packages/inbox/src/group.ts
index 5c87e5f1a7..d972565d68 100644
--- a/packages/inbox/src/group.ts
+++ b/packages/inbox/src/group.ts
@@ -37,8 +37,6 @@ export function inboxGroupOf(message: {
  * Classification to stamp on a new write from the item's refs, so later
  * list filters (`?classification=`) hit the product group without re-deriving.
  */
-export function classificationFromRefs(
-  refs: readonly { kind: string }[] | undefined,
-): InboxGroup {
+export function classificationFromRefs(refs: readonly { kind: string }[] | undefined): InboxGroup {
   return inboxGroupOf({ refs });
 }
diff --git a/packages/inbox/src/project.ts b/packages/inbox/src/project.ts
index a3008f81fd..37d2c35c6b 100644
--- a/packages/inbox/src/project.ts
+++ b/packages/inbox/src/project.ts
@@ -72,9 +72,7 @@ export function projectInboxItem(message: MailboxMessage): InboxItem {
   return item;
 }
 
-export function projectInboxItemDetail(
-  message: MailboxMessageDetail,
-): InboxItemDetail {
+export function projectInboxItemDetail(message: MailboxMessageDetail): InboxItemDetail {
   return {
     ...projectInboxItem(message),
     body: message.body,
diff --git a/packages/inbox/src/routes.ts b/packages/inbox/src/routes.ts
index eddfd7470d..40264953b2 100644
--- a/packages/inbox/src/routes.ts
+++ b/packages/inbox/src/routes.ts
@@ -87,14 +87,10 @@ async function listAllOpen(
       priorities: WORKBENCH_INBOX_PRIORITIES,
     };
     const listOptsWithCursor =
-      page.cursor !== undefined
-        ? { ...listOpts, cursor: page.cursor }
-        : listOpts;
+      page.cursor !== undefined ? { ...listOpts, cursor: page.cursor } : listOpts;
     return listUserMailbox(
       db,
-      filter !== undefined
-        ? { ...listOptsWithCursor, filter }
-        : listOptsWithCursor,
+      filter !== undefined ? { ...listOptsWithCursor, filter } : listOptsWithCursor,
     );
   });
 }
@@ -104,9 +100,7 @@ async function listAllOpen(
  * `/api/tenants/:tenantId/inbox` inside the hub's tenant middleware so
  * `c.get("principal")` and `c.get("tenant")` are already resolved.
  */
-export function createInboxRoutes(
-  deps: CreateInboxRoutesDeps,
-): Hono<TenantEnv> {
+export function createInboxRoutes(deps: CreateInboxRoutesDeps): Hono<TenantEnv> {
   const { db, bus } = deps;
   const app = new Hono<TenantEnv>();
 
@@ -157,12 +151,7 @@ export function createInboxRoutes(
     const tenant = c.get("tenant");
     const principal = c.get("principal");
     const scope = { tenantId: tenant.id, principalId: principal.id };
-    const items = await listAllOpenOrReport(
-      c,
-      tenant.id,
-      "inbox_mark_all_read_walk",
-      scope,
-    );
+    const items = await listAllOpenOrReport(c, tenant.id, "inbox_mark_all_read_walk", scope);
     if (items instanceof Response) return items;
     const { succeeded: marked, failed } = await runBulkOperation(
       itemsEligibleForMarkAllRead(items),
@@ -170,11 +159,7 @@ export function createInboxRoutes(
         // Atomic: a throw between the status flip and the read flip must
         // never leave a row done-but-unread (CL-7207).
         await db.transaction(async (tx) => {
-          await enrichMailboxMessage(
-            tx,
-            { ...scope, id: item.id },
-            { status: "done" },
-          );
+          await enrichMailboxMessage(tx, { ...scope, id: item.id }, { status: "done" });
           await markMailboxMessageRead(tx, { ...scope, id: item.id });
         });
         publish(bus, scope, item.id, "mark_read");
@@ -188,22 +173,14 @@ export function createInboxRoutes(
     // A 200 must mean "every eligible item was marked" — a partial result
     // is reported as 207 so a caller that only checks the status code (not
     // the body) can't mistake "half the inbox" for "success" (CL-7207).
-    return c.json(
-      { marked, failed, complete: failed === 0 },
-      failed === 0 ? 200 : 207,
-    );
+    return c.json({ marked, failed, complete: failed === 0 }, failed === 0 ? 200 : 207);
   });
 
   app.post("/clear-done", async (c) => {
     const tenant = c.get("tenant");
     const principal = c.get("principal");
     const scope = { tenantId: tenant.id, principalId: principal.id };
-    const items = await listAllOpenOrReport(
-      c,
-      tenant.id,
-      "inbox_clear_done_walk",
-      scope,
-    );
+    const items = await listAllOpenOrReport(c, tenant.id, "inbox_clear_done_walk", scope);
     if (items instanceof Response) return items;
     const { succeeded: cleared, failed } = await runBulkOperation(
       itemsEligibleForClearDone(items),
@@ -220,10 +197,7 @@ export function createInboxRoutes(
     );
     // Same partial-vs-complete signal as mark-all-read: 207 whenever any
     // item failed, so a status-code-only caller can't read it as success.
-    return c.json(
-      { cleared, failed, complete: failed === 0 },
-      failed === 0 ? 200 : 207,
-    );
+    return c.json({ cleared, failed, complete: failed === 0 }, failed === 0 ? 200 : 207);
   });
 
   app.get("/", async (c) => {
@@ -274,10 +248,7 @@ export function createInboxRoutes(
         filter,
       });
       if (mismatch !== null) {
-        return c.json(
-          { error: `cursor does not match inbox ${mismatch}` },
-          400,
-        );
+        return c.json({ error: `cursor does not match inbox ${mismatch}` }, 400);
       }
       cursor = decoded;
     }
@@ -328,12 +299,7 @@ export function createInboxRoutes(
       id,
     });
     if (!ok) return c.json({ error: "not found" }, 404);
-    publish(
-      bus,
-      { tenantId: tenant.id, principalId: principal.id },
-      id,
-      "mark_read",
-    );
+    publish(bus, { tenantId: tenant.id, principalId: principal.id }, id, "mark_read");
     return c.json({ ok: true });
   });
 
@@ -347,12 +313,7 @@ export function createInboxRoutes(
       id,
     });
     if (!ok) return c.json({ error: "not found" }, 404);
-    publish(
-      bus,
-      { tenantId: tenant.id, principalId: principal.id },
-      id,
-      "mark_unread",
-    );
+    publish(bus, { tenantId: tenant.id, principalId: principal.id }, id, "mark_unread");
     return c.json({ ok: true });
   });
 
@@ -368,12 +329,7 @@ export function createInboxRoutes(
     const ok = await enrichMailboxMessage(db, scope, { status: "done" });
     if (!ok) return c.json({ error: "not found" }, 404);
     await markMailboxMessageRead(db, scope);
-    publish(
-      bus,
-      { tenantId: tenant.id, principalId: principal.id },
-      id,
-      "enrich",
-    );
+    publish(bus, { tenantId: tenant.id, principalId: principal.id }, id, "enrich");
     return c.json({ ok: true });
   });
 
@@ -387,12 +343,7 @@ export function createInboxRoutes(
       { status: "open" },
     );
     if (!ok) return c.json({ error: "not found" }, 404);
-    publish(
-      bus,
-      { tenantId: tenant.id, principalId: principal.id },
-      id,
-      "enrich",
-    );
+    publish(bus, { tenantId: tenant.id, principalId: principal.id }, id, "enrich");
     return c.json({ ok: true });
   });
 
diff --git a/packages/inbox/src/thread-client.ts b/packages/inbox/src/thread-client.ts
index d22e4f453f..eba941db8c 100644
--- a/packages/inbox/src/thread-client.ts
+++ b/packages/inbox/src/thread-client.ts
@@ -27,8 +27,7 @@ export class MailboxThreadFetchError extends Error {
   }
 }
 
-export type MailboxThreadListResult =
-  typeof MailboxThreadListResponseSchema.infer;
+export type MailboxThreadListResult = typeof MailboxThreadListResponseSchema.infer;
 
 export type MailboxThreadResult = typeof MailboxThreadResponseSchema.infer;
 
@@ -92,11 +91,7 @@ export function listMailboxThreadsClient(
   if (args.limit !== undefined) params.set("limit", String(args.limit));
   const query = params.toString();
   const path = `${mailboxBasePath}/me/threads${query === "" ? "" : `?${query}`}`;
-  return requestMailboxThreadJSON(
-    path,
-    MailboxThreadListResponseSchema,
-    fetchImpl,
-  );
+  return requestMailboxThreadJSON(path, MailboxThreadListResponseSchema, fetchImpl);
 }
 
 /**
diff --git a/packages/inbox/src/vocabulary.ts b/packages/inbox/src/vocabulary.ts
index b6ac208dc6..e064b56c09 100644
--- a/packages/inbox/src/vocabulary.ts
+++ b/packages/inbox/src/vocabulary.ts
@@ -5,12 +5,7 @@
 
 import type { MailboxVocabulary } from "@corbits/mailbox";
 
-export const WORKBENCH_INBOX_PRIORITIES = [
-  "urgent",
-  "high",
-  "normal",
-  "low",
-] as const;
+export const WORKBENCH_INBOX_PRIORITIES = ["urgent", "high", "normal", "low"] as const;
 
 export const WORKBENCH_INBOX_STATUSES = ["open", "done"] as const;
 
diff --git a/packages/inbox/src/walk.ts b/packages/inbox/src/walk.ts
index 60dba98965..743bb71080 100644
--- a/packages/inbox/src/walk.ts
+++ b/packages/inbox/src/walk.ts
@@ -27,9 +27,7 @@ import type { InboxItem } from "./project";
 // of forever.
 export const MAX_WALK_PAGES = 1000;
 
-export type ListPageFn = (opts: {
-  cursor?: MailboxListCursor;
-}) => Promise<MailboxPage>;
+export type ListPageFn = (opts: { cursor?: MailboxListCursor }) => Promise<MailboxPage>;
 
 /** The walk stopped before covering the whole inbox. `message` says why. */
 export class IncompleteWalkError extends Error {}
@@ -45,24 +43,16 @@ export async function walkAllOpen(
   for (;;) {
     pages += 1;
     if (pages > maxPages) {
-      throw new IncompleteWalkError(
-        `inbox walk exceeded ${maxPages} pages without finishing`,
-      );
+      throw new IncompleteWalkError(`inbox walk exceeded ${maxPages} pages without finishing`);
     }
     const page = await listPage(cursor !== undefined ? { cursor } : {});
     for (const message of page.items) out.push(projectInboxItem(message));
     if (page.nextCursor === undefined) break;
     const next = decodeMailboxListCursor(page.nextCursor);
     if (next === null) {
-      throw new IncompleteWalkError(
-        "inbox walk received an undecodable cursor mid-walk",
-      );
+      throw new IncompleteWalkError("inbox walk received an undecodable cursor mid-walk");
     }
-    if (
-      cursor !== undefined &&
-      next.createdAt === cursor.createdAt &&
-      next.id === cursor.id
-    ) {
+    if (cursor !== undefined && next.createdAt === cursor.createdAt && next.id === cursor.id) {
       throw new IncompleteWalkError("inbox walk cursor did not advance");
     }
     cursor = next;
diff --git a/packages/inbox/test/bulk-report-error.test.ts b/packages/inbox/test/bulk-report-error.test.ts
index d0ed8be340..c7e37bf58f 100644
--- a/packages/inbox/test/bulk-report-error.test.ts
+++ b/packages/inbox/test/bulk-report-error.test.ts
@@ -14,11 +14,7 @@ mock.module("@corbits/error-sink", () => ({
     return "ref_test";
   },
   generateRefId: () => "ref_test",
-  makeErrorEnvelope: (args: {
-    code: string;
-    userMessage: string;
-    refId?: string;
-  }) => ({
+  makeErrorEnvelope: (args: { code: string; userMessage: string; refId?: string }) => ({
     error: {
       code: args.code,
       message: args.userMessage,
diff --git a/packages/inbox/test/bulk.test.ts b/packages/inbox/test/bulk.test.ts
index 251c3d0a5e..5b6a693678 100644
--- a/packages/inbox/test/bulk.test.ts
+++ b/packages/inbox/test/bulk.test.ts
@@ -1,15 +1,10 @@
 import { describe, expect, test } from "bun:test";
 
-import {
-  itemsEligibleForClearDone,
-  itemsEligibleForMarkAllRead,
-} from "../src/bulk";
+import { itemsEligibleForClearDone, itemsEligibleForMarkAllRead } from "../src/bulk";
 import { runBulkOperation } from "../src/bulk-run";
 import type { InboxItem } from "../src/project";
 
-function item(
-  over: Partial<InboxItem> & Pick<InboxItem, "id" | "group">,
-): InboxItem {
+function item(over: Partial<InboxItem> & Pick<InboxItem, "id" | "group">): InboxItem {
   return {
     from: "agent:ops",
     date: "2026-08-10T12:00:00.000Z",
@@ -62,9 +57,7 @@ describe("runBulkOperation", () => {
     expect(result).toEqual({ succeeded: 2, failed: 1 });
     expect(failures).toHaveLength(1);
     expect(failures[0]?.id).toBe("b");
-    expect((failures[0]?.error as Error).message).toBe(
-      "transient write failure",
-    );
+    expect((failures[0]?.error as Error).message).toBe("transient write failure");
   });
 
   test("every item succeeding reports zero failures", async () => {
diff --git a/packages/inbox/test/delivery.test.ts b/packages/inbox/test/delivery.test.ts
index 1d32ced1d7..4c10887b7c 100644
--- a/packages/inbox/test/delivery.test.ts
+++ b/packages/inbox/test/delivery.test.ts
@@ -28,10 +28,7 @@ import {
 
 import { setupDatabase } from "../../../scripts/db-setup";
 import { e2eDatabaseUrl } from "../../../scripts/e2e/database-url";
-import {
-  createResolveExistingMailIds,
-  createWorkbenchMailboxDelivery,
-} from "../src/delivery";
+import { createResolveExistingMailIds, createWorkbenchMailboxDelivery } from "../src/delivery";
 import { inboxGroupOf } from "../src/group";
 import { WORKBENCH_INBOX_PRIORITIES } from "../src/vocabulary";
 import { dbGate } from "../../../scripts/e2e/db-gate";
@@ -59,251 +56,237 @@ function dbConfigFromUrl(databaseUrl: string) {
 const databaseUrl = e2eDatabaseUrl();
 const describeIfDb = dbGate(databaseUrl, import.meta.path);
 
-describeIfDb(
-  "notify delivery writes a real mailbox row for every notification kind",
-  () => {
-    const scratchUrl = scratchUrlFor(
-      databaseUrl ?? "postgres://localhost:5432/unused",
-    );
-    const scratchDatabase = new URL(scratchUrl).pathname.replace(/^\//, "");
+describeIfDb("notify delivery writes a real mailbox row for every notification kind", () => {
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused");
+  const scratchDatabase = new URL(scratchUrl).pathname.replace(/^\//, "");
+
+  const tenantId = generateId("tenant");
+  const principalId = generateId("principal");
 
-    const tenantId = generateId("tenant");
-    const principalId = generateId("principal");
+  beforeAll(async () => {
+    const maintenanceUrl = new URL(scratchUrl);
+    maintenanceUrl.pathname = "/postgres";
+    const maintenance = postgres(maintenanceUrl.toString(), {
+      max: 1,
+      onnotice: () => undefined,
+    });
+    try {
+      await maintenance.unsafe(`DROP DATABASE IF EXISTS "${scratchDatabase}"`);
+      await maintenance.unsafe(`CREATE DATABASE "${scratchDatabase}"`);
+    } finally {
+      await maintenance.end();
+    }
 
-    beforeAll(async () => {
-      const maintenanceUrl = new URL(scratchUrl);
-      maintenanceUrl.pathname = "/postgres";
-      const maintenance = postgres(maintenanceUrl.toString(), {
-        max: 1,
-        onnotice: () => undefined,
+    // The same path the hub boots with: the platform's own migrations,
+    // then every installed package's, including `@corbits/notify` and
+    // `@corbits/mailbox` — the thing CL-6002 makes true.
+    await setupDatabase(scratchUrl);
+
+    const { db, close } = createDB(dbConfigFromUrl(scratchUrl));
+    try {
+      await db.insert(schema.tenant).values({
+        id: tenantId,
+        name: "Delivery Test Bench",
+        slug: `delivery-${tenantId}`,
+        domain: `delivery-${tenantId}.localhost`,
       });
-      try {
-        await maintenance.unsafe(
-          `DROP DATABASE IF EXISTS "${scratchDatabase}"`,
-        );
-        await maintenance.unsafe(`CREATE DATABASE "${scratchDatabase}"`);
-      } finally {
-        await maintenance.end();
-      }
+      await db.insert(schema.principal).values({
+        id: principalId,
+        tenantId,
+        kind: "agent",
+        refId: "not-a-real-agent-instance",
+        status: "active",
+      });
+    } finally {
+      await close();
+    }
+    // `setupDatabase` applies the platform's migrations plus every
+    // installed package's (six of them); under `bun run test`'s
+    // cross-package concurrency that comfortably exceeds bun:test's
+    // default 5s hook timeout, so it gets an explicit one here rather
+    // than a flaky suite.
+  }, 30000);
+
+  afterAll(async () => {
+    const maintenanceUrl = new URL(scratchUrl);
+    maintenanceUrl.pathname = "/postgres";
+    const maintenance = postgres(maintenanceUrl.toString(), {
+      max: 1,
+      onnotice: () => undefined,
+    });
+    try {
+      await maintenance.unsafe(`DROP DATABASE IF EXISTS "${scratchDatabase}"`);
+    } finally {
+      await maintenance.end();
+    }
+  });
 
-      // The same path the hub boots with: the platform's own migrations,
-      // then every installed package's, including `@corbits/notify` and
-      // `@corbits/mailbox` — the thing CL-6002 makes true.
-      await setupDatabase(scratchUrl);
+  test("approval, run-failure, mention, and credential-expired each land a row the inbox read path lists", async () => {
+    const mailboxDb = createMailboxDb(scratchUrl);
+    const deps: NotifyDeliveryDeps = {
+      mail: createWorkbenchMailboxDelivery({ db: mailboxDb.db }),
+      addressing: {
+        inbox: (recipient) => `${recipient.principalId}@inbox.test`,
+        from: (kind) => `${kind}@notify.test`,
+      },
+      dispatch: createInMemoryNotifyDispatchStore(),
+      sinks: createSinkRegistry(),
+    };
 
-      const { db, close } = createDB(dbConfigFromUrl(scratchUrl));
-      try {
-        await db.insert(schema.tenant).values({
-          id: tenantId,
-          name: "Delivery Test Bench",
-          slug: `delivery-${tenantId}`,
-          domain: `delivery-${tenantId}.localhost`,
-        });
-        await db.insert(schema.principal).values({
-          id: principalId,
-          tenantId,
-          kind: "agent",
-          refId: "not-a-real-agent-instance",
-          status: "active",
-        });
-      } finally {
-        await close();
-      }
-      // `setupDatabase` applies the platform's migrations plus every
-      // installed package's (six of them); under `bun run test`'s
-      // cross-package concurrency that comfortably exceeds bun:test's
-      // default 5s hook timeout, so it gets an explicit one here rather
-      // than a flaky suite.
-    }, 30000);
+    const createdAt = new Date().toISOString();
+    const recipients = [{ tenantId, principalId }];
 
-    afterAll(async () => {
-      const maintenanceUrl = new URL(scratchUrl);
-      maintenanceUrl.pathname = "/postgres";
-      const maintenance = postgres(maintenanceUrl.toString(), {
-        max: 1,
-        onnotice: () => undefined,
+    try {
+      const approval = await deliverApprovalMail(deps, {
+        kind: "approval",
+        approvalId: generateId("approval"),
+        tenantId,
+        runId: generateId("workflowRun"),
+        deploymentId: generateId("workflowRun"),
+        toolName: "delete_repo",
+        toolArguments: { repo: "corbitsdev/workbench" },
+        recipients,
+        createdAt,
       });
-      try {
-        await maintenance.unsafe(
-          `DROP DATABASE IF EXISTS "${scratchDatabase}"`,
-        );
-      } finally {
-        await maintenance.end();
+      const runFailure = await deliverRunFailureMail(deps, {
+        kind: "run-failure",
+        tenantId,
+        runId: generateId("workflowRun"),
+        deploymentId: generateId("workflowRun"),
+        runLabel: "Nightly sync",
+        error: "timed out",
+        recipients,
+        createdAt,
+      });
+      const mention = await deliverMentionMail(deps, {
+        kind: "mention",
+        tenantId,
+        threadId: `chn_${crypto.randomUUID()}`,
+        threadLabel: "#growth",
+        mentionedBy: "prn_someone",
+        excerpt: "@you can you take a look?",
+        recipients,
+        createdAt,
+      });
+      const credential = await deliverCredentialMail(deps, {
+        kind: "credential-expired",
+        tenantId,
+        credentialId: generateId("credential"),
+        providerId: "huggingface",
+        providerLabel: "Hugging Face",
+        recipients,
+        createdAt,
+      });
+
+      for (const report of [approval, runFailure, mention, credential]) {
+        expect(report.deliveredMailboxRowIds).toHaveLength(1);
       }
-    });
 
-    test("approval, run-failure, mention, and credential-expired each land a row the inbox read path lists", async () => {
-      const mailboxDb = createMailboxDb(scratchUrl);
+      const page = await listUserMailbox(mailboxDb.db, {
+        tenantId,
+        principalId,
+        limit: 10,
+        view: "all",
+        priorities: WORKBENCH_INBOX_PRIORITIES,
+      });
+      expect(page.items).toHaveLength(4);
+
+      const groupBySubject = (needle: string): string | undefined => {
+        const item = page.items.find((i) => (i.subject ?? "").includes(needle));
+        expect(item).toBeDefined();
+        return item === undefined ? undefined : inboxGroupOf(item);
+      };
+      expect(groupBySubject("delete_repo")).toBe("action");
+      expect(groupBySubject("failed")).toBe("delivery");
+      expect(groupBySubject("mentioned you")).toBe("mention");
+      expect(groupBySubject("Reconnect")).toBe("action");
+
+      expect(page.items.every((item) => item.read === false)).toBe(true);
+    } finally {
+      await mailboxDb.close();
+    }
+  }, 15000);
+
+  test("a crash between mail write and dispatch enqueue is repaired on redelivery without doubles (CL-7238)", async () => {
+    const mailboxDb = createMailboxDb(scratchUrl);
+    try {
+      const innerDispatch = createInMemoryNotifyDispatchStore();
+      let crashNext = true;
+      const dispatch: NotifyDispatchStore = {
+        ...innerDispatch,
+        enqueue: async (inputs) => {
+          if (crashNext) {
+            crashNext = false;
+            throw new Error("boom: crash between the mail write and the dispatch enqueue");
+          }
+          await innerDispatch.enqueue(inputs);
+        },
+      };
+      const delivered: SinkDeliveryResult = { status: "delivered" };
+      const sinks = createSinkRegistry();
+      sinks.register({
+        name: "always",
+        isEnabledFor: async () => true,
+        deliver: async () => delivered,
+      });
       const deps: NotifyDeliveryDeps = {
         mail: createWorkbenchMailboxDelivery({ db: mailboxDb.db }),
         addressing: {
           inbox: (recipient) => `${recipient.principalId}@inbox.test`,
           from: (kind) => `${kind}@notify.test`,
         },
-        dispatch: createInMemoryNotifyDispatchStore(),
-        sinks: createSinkRegistry(),
+        dispatch,
+        resolveExistingMailIds: createResolveExistingMailIds(mailboxDb.db),
+        sinks,
+      };
+      const event: ApprovalNotification = {
+        kind: "approval",
+        approvalId: generateId("approval"),
+        tenantId,
+        runId: generateId("workflowRun"),
+        deploymentId: generateId("workflowRun"),
+        toolName: "quarantine_token",
+        toolArguments: { repo: "corbitsdev/workbench" },
+        recipients: [{ tenantId, principalId }],
+        createdAt: new Date().toISOString(),
       };
 
-      const createdAt = new Date().toISOString();
-      const recipients = [{ tenantId, principalId }];
-
-      try {
-        const approval = await deliverApprovalMail(deps, {
-          kind: "approval",
-          approvalId: generateId("approval"),
-          tenantId,
-          runId: generateId("workflowRun"),
-          deploymentId: generateId("workflowRun"),
-          toolName: "delete_repo",
-          toolArguments: { repo: "corbitsdev/workbench" },
-          recipients,
-          createdAt,
-        });
-        const runFailure = await deliverRunFailureMail(deps, {
-          kind: "run-failure",
-          tenantId,
-          runId: generateId("workflowRun"),
-          deploymentId: generateId("workflowRun"),
-          runLabel: "Nightly sync",
-          error: "timed out",
-          recipients,
-          createdAt,
-        });
-        const mention = await deliverMentionMail(deps, {
-          kind: "mention",
-          tenantId,
-          threadId: `chn_${crypto.randomUUID()}`,
-          threadLabel: "#growth",
-          mentionedBy: "prn_someone",
-          excerpt: "@you can you take a look?",
-          recipients,
-          createdAt,
-        });
-        const credential = await deliverCredentialMail(deps, {
-          kind: "credential-expired",
-          tenantId,
-          credentialId: generateId("credential"),
-          providerId: "huggingface",
-          providerLabel: "Hugging Face",
-          recipients,
-          createdAt,
-        });
-
-        for (const report of [approval, runFailure, mention, credential]) {
-          expect(report.deliveredMailboxRowIds).toHaveLength(1);
-        }
-
-        const page = await listUserMailbox(mailboxDb.db, {
-          tenantId,
-          principalId,
-          limit: 10,
-          view: "all",
-          priorities: WORKBENCH_INBOX_PRIORITIES,
-        });
-        expect(page.items).toHaveLength(4);
-
-        const groupBySubject = (needle: string): string | undefined => {
-          const item = page.items.find((i) =>
-            (i.subject ?? "").includes(needle),
-          );
-          expect(item).toBeDefined();
-          return item === undefined ? undefined : inboxGroupOf(item);
-        };
-        expect(groupBySubject("delete_repo")).toBe("action");
-        expect(groupBySubject("failed")).toBe("delivery");
-        expect(groupBySubject("mentioned you")).toBe("mention");
-        expect(groupBySubject("Reconnect")).toBe("action");
-
-        expect(page.items.every((item) => item.read === false)).toBe(true);
-      } finally {
-        await mailboxDb.close();
-      }
-    }, 15000);
-
-    test("a crash between mail write and dispatch enqueue is repaired on redelivery without doubles (CL-7238)", async () => {
-      const mailboxDb = createMailboxDb(scratchUrl);
-      try {
-        const innerDispatch = createInMemoryNotifyDispatchStore();
-        let crashNext = true;
-        const dispatch: NotifyDispatchStore = {
-          ...innerDispatch,
-          enqueue: async (inputs) => {
-            if (crashNext) {
-              crashNext = false;
-              throw new Error(
-                "boom: crash between the mail write and the dispatch enqueue",
-              );
-            }
-            await innerDispatch.enqueue(inputs);
-          },
-        };
-        const delivered: SinkDeliveryResult = { status: "delivered" };
-        const sinks = createSinkRegistry();
-        sinks.register({
-          name: "always",
-          isEnabledFor: async () => true,
-          deliver: async () => delivered,
-        });
-        const deps: NotifyDeliveryDeps = {
-          mail: createWorkbenchMailboxDelivery({ db: mailboxDb.db }),
-          addressing: {
-            inbox: (recipient) => `${recipient.principalId}@inbox.test`,
-            from: (kind) => `${kind}@notify.test`,
-          },
-          dispatch,
-          resolveExistingMailIds: createResolveExistingMailIds(mailboxDb.db),
-          sinks,
-        };
-        const event: ApprovalNotification = {
-          kind: "approval",
-          approvalId: generateId("approval"),
-          tenantId,
-          runId: generateId("workflowRun"),
-          deploymentId: generateId("workflowRun"),
-          toolName: "quarantine_token",
-          toolArguments: { repo: "corbitsdev/workbench" },
-          recipients: [{ tenantId, principalId }],
-          createdAt: new Date().toISOString(),
-        };
-
-        // The first attempt commits its mail row through the real adapter,
-        // then dies before the dispatch enqueue — the crash window.
-        await expect(deliverApprovalMail(deps, event)).rejects.toThrow("boom");
+      // The first attempt commits its mail row through the real adapter,
+      // then dies before the dispatch enqueue — the crash window.
+      await expect(deliverApprovalMail(deps, event)).rejects.toThrow("boom");
 
-        // The redelivery dedupes on the mail key (no new row), resolves the
-        // committed row's id through the adapter read-back, and queues the
-        // dispatch the crash swallowed.
-        const redelivery = await deliverApprovalMail(deps, event);
-        expect(redelivery.deliveredMailboxRowIds).toEqual([]);
-        expect(redelivery.queuedDispatchCount).toBe(1);
+      // The redelivery dedupes on the mail key (no new row), resolves the
+      // committed row's id through the adapter read-back, and queues the
+      // dispatch the crash swallowed.
+      const redelivery = await deliverApprovalMail(deps, event);
+      expect(redelivery.deliveredMailboxRowIds).toEqual([]);
+      expect(redelivery.queuedDispatchCount).toBe(1);
 
-        const page = await listUserMailbox(mailboxDb.db, {
-          tenantId,
-          principalId,
-          limit: 10,
-          view: "all",
-          priorities: WORKBENCH_INBOX_PRIORITIES,
-        });
-        // Exactly one mail row for the redelivered event — the crash and
-        // both redeliveries deduped onto the first attempt's row.
-        const matching = page.items.filter((item) =>
-          (item.subject ?? "").includes("quarantine_token"),
-        );
-        expect(matching).toHaveLength(1);
-        const mailId = matching[0]?.id;
-        if (mailId === undefined)
-          throw new Error("expected the redelivered mail row to list");
-        expect(await dispatch.listFor(mailId)).toHaveLength(1);
+      const page = await listUserMailbox(mailboxDb.db, {
+        tenantId,
+        principalId,
+        limit: 10,
+        view: "all",
+        priorities: WORKBENCH_INBOX_PRIORITIES,
+      });
+      // Exactly one mail row for the redelivered event — the crash and
+      // both redeliveries deduped onto the first attempt's row.
+      const matching = page.items.filter((item) =>
+        (item.subject ?? "").includes("quarantine_token"),
+      );
+      expect(matching).toHaveLength(1);
+      const mailId = matching[0]?.id;
+      if (mailId === undefined) throw new Error("expected the redelivered mail row to list");
+      expect(await dispatch.listFor(mailId)).toHaveLength(1);
 
-        // A further benign redelivery repairs the same row again, and the
-        // dispatch store's (mail row, sink) dedupe holds it to one row.
-        const third = await deliverApprovalMail(deps, event);
-        expect(third.deliveredMailboxRowIds).toEqual([]);
-        expect(third.queuedDispatchCount).toBe(1);
-        expect(await dispatch.listFor(mailId)).toHaveLength(1);
-      } finally {
-        await mailboxDb.close();
-      }
-    }, 15000);
-  },
-);
+      // A further benign redelivery repairs the same row again, and the
+      // dispatch store's (mail row, sink) dedupe holds it to one row.
+      const third = await deliverApprovalMail(deps, event);
+      expect(third.deliveredMailboxRowIds).toEqual([]);
+      expect(third.queuedDispatchCount).toBe(1);
+      expect(await dispatch.listFor(mailId)).toHaveLength(1);
+    } finally {
+      await mailboxDb.close();
+    }
+  }, 15000);
+});
diff --git a/packages/inbox/test/group.test.ts b/packages/inbox/test/group.test.ts
index 9631d342e2..7cb38235c8 100644
--- a/packages/inbox/test/group.test.ts
+++ b/packages/inbox/test/group.test.ts
@@ -1,10 +1,6 @@
 import { describe, expect, test } from "bun:test";
 
-import {
-  classificationFromRefs,
-  inboxGroupOf,
-  isInboxGroup,
-} from "../src/group";
+import { classificationFromRefs, inboxGroupOf, isInboxGroup } from "../src/group";
 
 describe("inboxGroupOf", () => {
   test("honors an explicit classification", () => {
diff --git a/packages/inbox/test/project.test.ts b/packages/inbox/test/project.test.ts
index 937ddadd87..df87d6a3db 100644
--- a/packages/inbox/test/project.test.ts
+++ b/packages/inbox/test/project.test.ts
@@ -32,9 +32,7 @@ describe("projectInboxItem", () => {
   });
 
   test("maps classification delivery + open status", () => {
-    const item = projectInboxItem(
-      message({ classification: "delivery", status: "open" }),
-    );
+    const item = projectInboxItem(message({ classification: "delivery", status: "open" }));
     expect(item.group).toBe("delivery");
     expect(item.status).toBe("open");
   });
diff --git a/packages/inbox/test/routes.test.ts b/packages/inbox/test/routes.test.ts
index ac1bab7189..483b7c8ee7 100644
--- a/packages/inbox/test/routes.test.ts
+++ b/packages/inbox/test/routes.test.ts
@@ -5,10 +5,7 @@
 import { describe, expect, test } from "bun:test";
 import { Hono } from "hono";
 import type { TenantEnv } from "@intx/hub-api";
-import {
-  createInMemoryMailboxEventBus,
-  type MailboxDb,
-} from "@corbits/mailbox";
+import { createInMemoryMailboxEventBus, type MailboxDb } from "@corbits/mailbox";
 import { createInboxRoutes } from "../src/routes";
 
 const TENANT = { id: "tnt_1" };
@@ -65,9 +62,7 @@ describe("GET / cursor/filter cross-check", () => {
     };
     const cursor = Buffer.from(JSON.stringify(payload)).toString("base64url");
 
-    const response = await app.request(
-      `/?group=mention&cursor=${encodeURIComponent(cursor)}`,
-    );
+    const response = await app.request(`/?group=mention&cursor=${encodeURIComponent(cursor)}`);
 
     expect(response.status).toBe(400);
     const body = (await response.json()) as { error: string };
diff --git a/packages/inbox/test/walk.test.ts b/packages/inbox/test/walk.test.ts
index 7587397e97..3111eb6ff8 100644
--- a/packages/inbox/test/walk.test.ts
+++ b/packages/inbox/test/walk.test.ts
@@ -58,9 +58,7 @@ describe("walkAllOpen", () => {
       items: [message("msg_1", "2026-01-01T00:00:00.000000Z")],
       nextCursor: "not-a-valid-cursor",
     };
-    await expect(walkAllOpen(async () => page)).rejects.toBeInstanceOf(
-      IncompleteWalkError,
-    );
+    await expect(walkAllOpen(async () => page)).rejects.toBeInstanceOf(IncompleteWalkError);
   });
 
   test("throws IncompleteWalkError when the cursor does not advance", async () => {
@@ -74,9 +72,7 @@ describe("walkAllOpen", () => {
     };
     // Every call returns the exact same page/cursor — an infinite loop
     // without the advance guard.
-    await expect(walkAllOpen(async () => page)).rejects.toBeInstanceOf(
-      IncompleteWalkError,
-    );
+    await expect(walkAllOpen(async () => page)).rejects.toBeInstanceOf(IncompleteWalkError);
   });
 
   test("throws IncompleteWalkError once maxPages is exceeded", async () => {
diff --git a/packages/inference-catalog/package.json b/packages/inference-catalog/package.json
index 2c2ae5b15f..9b4a13e95d 100644
--- a/packages/inference-catalog/package.json
+++ b/packages/inference-catalog/package.json
@@ -1,8 +1,18 @@
 {
   "name": "@corbits/inference-catalog",
-  "description": "Model concepts and chain resolution: agents ask for what the work needs (a concept or a capability set) and get an ordered, priced fallback chain of the models this bench can actually reach — never a single model, never a model named by hand.",
   "version": "0.1.0",
+  "description": "Model concepts and chain resolution: agents ask for what the work needs (a concept or a capability set) and get an ordered, priced fallback chain of the models this bench can actually reach — never a single model, never a model named by hand.",
   "license": "LGPL-2.1-or-later",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "packages/inference-catalog"
+  },
+  "files": [
+    "src",
+    "LICENSE",
+    "README.md"
+  ],
   "type": "module",
   "exports": {
     ".": "./src/index.ts",
@@ -14,16 +24,6 @@
     "./offering-capabilities": "./src/offering-capabilities.ts",
     "./ollama-context-defaults": "./src/ollama-context-defaults.ts"
   },
-  "files": [
-    "src",
-    "LICENSE",
-    "README.md"
-  ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "packages/inference-catalog"
-  },
   "publishConfig": {
     "access": "public"
   },
@@ -36,11 +36,11 @@
     "@intx/inference-catalog": "0.3.0",
     "arktype": "catalog:"
   },
-  "peerDependencies": {
-    "@intx/types": "0.3.0"
-  },
   "devDependencies": {
     "@types/bun": "catalog:",
     "typescript": "catalog:"
+  },
+  "peerDependencies": {
+    "@intx/types": "0.3.0"
   }
 }
diff --git a/packages/inference-catalog/src/concepts.ts b/packages/inference-catalog/src/concepts.ts
index 3e03d01650..6cf922a671 100644
--- a/packages/inference-catalog/src/concepts.ts
+++ b/packages/inference-catalog/src/concepts.ts
@@ -165,9 +165,7 @@ export const CONCEPTS: readonly ConceptSpec[] = [
   },
 ];
 
-export const CONCEPT_IDS: readonly string[] = CONCEPTS.map(
-  (concept) => concept.id,
-);
+export const CONCEPT_IDS: readonly string[] = CONCEPTS.map((concept) => concept.id);
 
 export function conceptById(id: string): ConceptSpec | undefined {
   return CONCEPTS.find((concept) => concept.id === id);
diff --git a/packages/inference-catalog/src/offering-capabilities.test.ts b/packages/inference-catalog/src/offering-capabilities.test.ts
index 6d1cb2c758..9e1df6e59c 100644
--- a/packages/inference-catalog/src/offering-capabilities.test.ts
+++ b/packages/inference-catalog/src/offering-capabilities.test.ts
@@ -69,8 +69,7 @@ describe("capabilitiesForDeployment", () => {
         canonicalName: "grok-4.6",
       },
     ]) {
-      for (const capability of capabilitiesForDeployment(deployment)
-        .capabilities) {
+      for (const capability of capabilitiesForDeployment(deployment).capabilities) {
         expect(vocabulary.has(capability)).toBe(true);
       }
     }
diff --git a/packages/inference-catalog/src/offering-capabilities.ts b/packages/inference-catalog/src/offering-capabilities.ts
index d5bdd52aaa..9a03a7ec8b 100644
--- a/packages/inference-catalog/src/offering-capabilities.ts
+++ b/packages/inference-catalog/src/offering-capabilities.ts
@@ -29,8 +29,7 @@
 import { catalogProviders } from "@intx/inference-catalog";
 import { WIRE_CAPABILITIES, type Capability } from "@intx/types";
 
-export type CapabilityProvenance =
-  "exact-deployment" | "same-model-wire" | "unknown";
+export type CapabilityProvenance = "exact-deployment" | "same-model-wire" | "unknown";
 
 export type OfferingCapabilities = {
   readonly capabilities: readonly Capability[];
@@ -50,9 +49,7 @@ export type DeploymentIdentity = {
  * over the OpenAI wire genuinely offers less than the native adapter does, so
  * their probes never carry across. */
 function wireFamily(plugin: string): string {
-  return plugin === "openai" || plugin === "openai-compatible"
-    ? "openai-wire"
-    : plugin;
+  return plugin === "openai" || plugin === "openai-compatible" ? "openai-wire" : plugin;
 }
 
 /** Relays namespace a model by its originating vendor (`openai/gpt-5.6-sol`,
@@ -66,17 +63,13 @@ function relayModelName(canonicalName: string): string {
 function intersect(lists: readonly (readonly string[])[]): readonly string[] {
   const [first, ...rest] = lists;
   if (first === undefined) return [];
-  return first.filter((capability) =>
-    rest.every((list) => list.includes(capability)),
-  );
+  return first.filter((capability) => rest.every((list) => list.includes(capability)));
 }
 
 const STORABLE = new Set<string>(WIRE_CAPABILITIES);
 
 function storable(capabilities: readonly string[]): readonly Capability[] {
-  return capabilities.filter((capability): capability is Capability =>
-    STORABLE.has(capability),
-  );
+  return capabilities.filter((capability): capability is Capability => STORABLE.has(capability));
 }
 
 /**
@@ -84,9 +77,7 @@ function storable(capabilities: readonly string[]): readonly Capability[] {
  * dependency-free: it reads the pinned catalog literals only, never a
  * network probe.
  */
-export function capabilitiesForDeployment(
-  deployment: DeploymentIdentity,
-): OfferingCapabilities {
+export function capabilitiesForDeployment(deployment: DeploymentIdentity): OfferingCapabilities {
   for (const provider of catalogProviders) {
     if (provider.baseURL !== deployment.baseURL) continue;
     const offering = provider.offerings.find(
diff --git a/packages/inference-catalog/src/ollama-context-defaults.test.ts b/packages/inference-catalog/src/ollama-context-defaults.test.ts
index e002c4b9c9..9968d3be8f 100644
--- a/packages/inference-catalog/src/ollama-context-defaults.test.ts
+++ b/packages/inference-catalog/src/ollama-context-defaults.test.ts
@@ -3,10 +3,7 @@ import { createOllamaAdapter } from "@corbits/ollama-adapter";
 import type { LastCycleSource } from "@intx/types/runtime";
 import type { ConversationTurn, InferenceOptions } from "@intx/types/runtime";
 
-import {
-  OLLAMA_MODEL_DEFAULTS,
-  quirksForDeployment,
-} from "./ollama-context-defaults";
+import { OLLAMA_MODEL_DEFAULTS, quirksForDeployment } from "./ollama-context-defaults";
 
 describe("quirksForDeployment", () => {
   test("a curated Ollama model resolves its advertised native context window", () => {
@@ -31,9 +28,7 @@ describe("quirksForDeployment", () => {
     });
     expect(bigModel?.default?.numCtx).toBe(131_072);
     expect(smallerModel?.default?.numCtx).toBe(32_768);
-    expect(smallerModel?.default?.numCtx).toBeLessThan(
-      bigModel?.default?.numCtx ?? 0,
-    );
+    expect(smallerModel?.default?.numCtx).toBeLessThan(bigModel?.default?.numCtx ?? 0);
   });
 
   test("a caller-supplied override wins over the built-in table", () => {
diff --git a/packages/inference-catalog/src/ollama-context-defaults.ts b/packages/inference-catalog/src/ollama-context-defaults.ts
index 4109eece9c..71276417af 100644
--- a/packages/inference-catalog/src/ollama-context-defaults.ts
+++ b/packages/inference-catalog/src/ollama-context-defaults.ts
@@ -23,14 +23,9 @@
 // convention to enforce. A model absent from this table gets no override at
 // all -- Ollama's own model-specific default stands, rather than this
 // module guessing at a ceiling it cannot back up.
-import type {
-  OllamaAdapterConfig,
-  OllamaAdapterOverride,
-} from "@corbits/ollama-adapter";
+import type { OllamaAdapterConfig, OllamaAdapterOverride } from "@corbits/ollama-adapter";
 
-export type OllamaModelDefaults = Readonly<
-  Record<string, OllamaAdapterOverride>
->;
+export type OllamaModelDefaults = Readonly<Record<string, OllamaAdapterOverride>>;
 
 export const OLLAMA_MODEL_DEFAULTS: OllamaModelDefaults = {
   // OpenAI gpt-oss: 128K native context window.
@@ -74,8 +69,7 @@ export function quirksForDeployment(
 ): OllamaAdapterConfig | undefined {
   if (deployment.providerName !== "ollama") return undefined;
   const resolved =
-    overrides[deployment.canonicalName] ??
-    OLLAMA_MODEL_DEFAULTS[deployment.canonicalName];
+    overrides[deployment.canonicalName] ?? OLLAMA_MODEL_DEFAULTS[deployment.canonicalName];
   if (resolved === undefined) return undefined;
   return { default: resolved };
 }
diff --git a/packages/inference-catalog/src/price.test.ts b/packages/inference-catalog/src/price.test.ts
index ae23811ce0..010b5ba3d6 100644
--- a/packages/inference-catalog/src/price.test.ts
+++ b/packages/inference-catalog/src/price.test.ts
@@ -1,12 +1,7 @@
 import { describe, expect, test } from "bun:test";
 
 import { pricing } from "../test/fixtures";
-import {
-  groupPricingByOffering,
-  perMTok,
-  priceForOffering,
-  referenceCostUsd,
-} from "./price";
+import { groupPricingByOffering, perMTok, priceForOffering, referenceCostUsd } from "./price";
 
 describe("perMTok", () => {
   test("scales a per-token decimal string to USD per million tokens", () => {
@@ -80,9 +75,7 @@ describe("referenceCostUsd", () => {
       [pricing({ offeringId: "o1", inputUsdPerMTok: 3, outputUsdPerMTok: 15 })],
       "USD",
     );
-    expect(
-      referenceCostUsd(price, { inputMTok: 2, outputMTok: 0.5 }),
-    ).toBeCloseTo(13.5, 6);
+    expect(referenceCostUsd(price, { inputMTok: 2, outputMTok: 0.5 })).toBeCloseTo(13.5, 6);
   });
 
   test("an unknown price has no reference cost", () => {
diff --git a/packages/inference-catalog/src/price.ts b/packages/inference-catalog/src/price.ts
index 9b1a35ca64..69ef294401 100644
--- a/packages/inference-catalog/src/price.ts
+++ b/packages/inference-catalog/src/price.ts
@@ -76,10 +76,7 @@ export function referenceCostUsd(
   if (price.inputUsdPerMTok === null || price.outputUsdPerMTok === null) {
     return null;
   }
-  return (
-    price.inputUsdPerMTok * mix.inputMTok +
-    price.outputUsdPerMTok * mix.outputMTok
-  );
+  return price.inputUsdPerMTok * mix.inputMTok + price.outputUsdPerMTok * mix.outputMTok;
 }
 
 /** What a run of the given size would cost at this price, in USD. Null
diff --git a/packages/inference-catalog/src/resolve-chain.test.ts b/packages/inference-catalog/src/resolve-chain.test.ts
index e72a49e1e5..728bffc349 100644
--- a/packages/inference-catalog/src/resolve-chain.test.ts
+++ b/packages/inference-catalog/src/resolve-chain.test.ts
@@ -28,9 +28,9 @@ function policy(overrides: Partial<BenchModelPolicy>): BenchModelPolicy {
 
 describe("resolveModelChain: the need", () => {
   test("a concept nobody shipped is an error that names the real ones", () => {
-    expect(() =>
-      resolveModelChain(input({ need: { concept: "vibes-based" } })),
-    ).toThrow(UnknownConceptError);
+    expect(() => resolveModelChain(input({ need: { concept: "vibes-based" } }))).toThrow(
+      UnknownConceptError,
+    );
     try {
       resolveModelChain(input({ need: { concept: "vibes-based" } }));
     } catch (err) {
@@ -60,9 +60,7 @@ describe("resolveModelChain: the need", () => {
     );
     expect(chain.concept).toBeNull();
     expect(chain.entries.map((entry) => entry.offeringId)).toEqual(["o1"]);
-    expect(chain.excluded).toEqual([
-      { offeringId: "o2", reason: "missing-capabilities" },
-    ]);
+    expect(chain.excluded).toEqual([{ offeringId: "o2", reason: "missing-capabilities" }]);
   });
 });
 
@@ -82,9 +80,7 @@ describe("resolveModelChain: what qualifies", () => {
       }),
     );
     expect(chain.entries).toEqual([]);
-    expect(chain.excluded).toEqual([
-      { offeringId: "o1", reason: "missing-capabilities" },
-    ]);
+    expect(chain.excluded).toEqual([{ offeringId: "o1", reason: "missing-capabilities" }]);
   });
 });
 
@@ -105,9 +101,7 @@ describe("resolveModelChain: policy selectors", () => {
   ];
 
   test("deny by exact model name", () => {
-    const chain = resolveModelChain(
-      input({ offerings, policy: policy({ deny: ["alpha"] }) }),
-    );
+    const chain = resolveModelChain(input({ offerings, policy: policy({ deny: ["alpha"] }) }));
     expect(chain.entries.map((entry) => entry.canonicalName)).toEqual(["beta"]);
     expect(chain.policyApplied.deny).toBe(true);
   });
@@ -116,26 +110,18 @@ describe("resolveModelChain: policy selectors", () => {
     const chain = resolveModelChain(
       input({ offerings, policy: policy({ deny: ["provider:globex"] }) }),
     );
-    expect(chain.entries.map((entry) => entry.canonicalName)).toEqual([
-      "alpha",
-    ]);
+    expect(chain.entries.map((entry) => entry.canonicalName)).toEqual(["alpha"]);
   });
 
   test("deny one deployment of a model, by provider/model", () => {
-    const chain = resolveModelChain(
-      input({ offerings, policy: policy({ deny: ["acme/alpha"] }) }),
-    );
+    const chain = resolveModelChain(input({ offerings, policy: policy({ deny: ["acme/alpha"] }) }));
     expect(chain.entries.map((entry) => entry.offeringId)).toEqual(["o2"]);
   });
 
   test("a non-empty allow list is the whole world", () => {
-    const chain = resolveModelChain(
-      input({ offerings, policy: policy({ allow: ["beta"] }) }),
-    );
+    const chain = resolveModelChain(input({ offerings, policy: policy({ allow: ["beta"] }) }));
     expect(chain.entries.map((entry) => entry.canonicalName)).toEqual(["beta"]);
-    expect(chain.excluded).toEqual([
-      { offeringId: "o1", reason: "outside-policy-allow" },
-    ]);
+    expect(chain.excluded).toEqual([{ offeringId: "o1", reason: "outside-policy-allow" }]);
   });
 
   test("an empty allow list constrains nothing", () => {
@@ -177,22 +163,14 @@ describe("resolveModelChain: price and ordering", () => {
 
   test("cheapest first uses the concept's own token mix", () => {
     const chain = resolveModelChain(input({ offerings, pricing: prices }));
-    expect(chain.entries.map((entry) => entry.offeringId)).toEqual([
-      "cheap",
-      "expensive",
-    ]);
+    expect(chain.entries.map((entry) => entry.offeringId)).toEqual(["cheap", "expensive"]);
     expect(chain.entries[0]?.price.inputUsdPerMTok).toBeCloseTo(0.05, 8);
     expect(chain.entries[0]?.referenceCostUsd).toBeCloseTo(0.06, 8);
   });
 
   test("catalog order puts the catalog's own priority first", () => {
-    const chain = resolveModelChain(
-      input({ offerings, pricing: prices, order: "catalog" }),
-    );
-    expect(chain.entries.map((entry) => entry.offeringId)).toEqual([
-      "expensive",
-      "cheap",
-    ]);
+    const chain = resolveModelChain(input({ offerings, pricing: prices, order: "catalog" }));
+    expect(chain.entries.map((entry) => entry.offeringId)).toEqual(["expensive", "cheap"]);
   });
 
   test("an unpriced model sorts behind every priced one and is never called free", () => {
@@ -262,11 +240,7 @@ describe("resolveModelChain: price and ordering", () => {
         ],
       }),
     );
-    expect(chain.entries.map((entry) => entry.offeringId)).toEqual([
-      "m",
-      "a",
-      "z",
-    ]);
+    expect(chain.entries.map((entry) => entry.offeringId)).toEqual(["m", "a", "z"]);
   });
 });
 
@@ -300,18 +274,13 @@ describe("resolveModelChain: ceilings", () => {
     const chain = resolveModelChain(
       input({ offerings: [overCeiling, withinCeiling], pricing: prices }),
     );
-    expect(chain.entries.map((entry) => entry.offeringId)).toEqual([
-      "thrifty",
-      "lavish",
-    ]);
+    expect(chain.entries.map((entry) => entry.offeringId)).toEqual(["thrifty", "lavish"]);
     expect(chain.entries[0]?.overCeiling).toBe(false);
     expect(chain.entries[1]?.overCeiling).toBe(true);
   });
 
   test("a bench with only an over-ceiling model still gets a chain", () => {
-    const chain = resolveModelChain(
-      input({ offerings: [overCeiling], pricing: prices }),
-    );
+    const chain = resolveModelChain(input({ offerings: [overCeiling], pricing: prices }));
     expect(chain.entries.map((entry) => entry.offeringId)).toEqual(["lavish"]);
     expect(chain.entries[0]?.overCeiling).toBe(true);
   });
@@ -329,9 +298,7 @@ describe("resolveModelChain: ceilings", () => {
       }),
     );
     expect(chain.entries.map((entry) => entry.offeringId)).toEqual(["thrifty"]);
-    expect(chain.excluded).toEqual([
-      { offeringId: "lavish", reason: "over-bench-ceiling" },
-    ]);
+    expect(chain.excluded).toEqual([{ offeringId: "lavish", reason: "over-bench-ceiling" }]);
     expect(chain.policyApplied.ceiling).toBe("hard");
   });
 
@@ -394,9 +361,7 @@ describe("resolveModelChain: provider preference", () => {
         }),
       }),
     );
-    expect(chain.entries.map((entry) => entry.providerName)).toEqual([
-      "globex",
-    ]);
+    expect(chain.entries.map((entry) => entry.providerName)).toEqual(["globex"]);
     expect(chain.policyApplied.providerPreference).toBe("pin");
   });
 
@@ -409,10 +374,7 @@ describe("resolveModelChain: provider preference", () => {
         }),
       }),
     );
-    expect(chain.entries.map((entry) => entry.providerName)).toEqual([
-      "globex",
-      "acme",
-    ]);
+    expect(chain.entries.map((entry) => entry.providerName)).toEqual(["globex", "acme"]);
   });
 });
 
@@ -447,10 +409,7 @@ describe("resolveModelChain: the chain itself", () => {
       }),
     );
     expect(chain.diversified).toBe(true);
-    expect(chain.entries.map((entry) => entry.providerName)).toEqual([
-      "acme",
-      "globex",
-    ]);
+    expect(chain.entries.map((entry) => entry.providerName)).toEqual(["acme", "globex"]);
   });
 
   test("a single-provider bench is not falsely diversified", () => {
@@ -492,9 +451,7 @@ describe("resolveModelChain: the chain itself", () => {
       pricing: [],
       policy: EMPTY_POLICY,
     });
-    expect(chain.entries.map((entry) => entry.canonicalName)).toEqual([
-      "only-model",
-    ]);
+    expect(chain.entries.map((entry) => entry.canonicalName)).toEqual(["only-model"]);
     expect(chain.policyApplied).toEqual({
       allow: false,
       deny: false,
@@ -518,9 +475,7 @@ describe("resolveModelChain: the chain itself", () => {
       }),
     );
     expect(chain.entries).toEqual([]);
-    expect(chain.excluded).toEqual([
-      { offeringId: "o1", reason: "missing-capabilities" },
-    ]);
+    expect(chain.excluded).toEqual([{ offeringId: "o1", reason: "missing-capabilities" }]);
   });
 });
 
@@ -551,10 +506,7 @@ describe("chainToModelRequirements", () => {
       }),
     );
     const requirements = chainToModelRequirements(chain, null);
-    expect(requirements.map((requirement) => requirement.model)).toEqual([
-      "other",
-      "shared",
-    ]);
+    expect(requirements.map((requirement) => requirement.model)).toEqual(["other", "shared"]);
     expect(requirements[0]?.capabilities).toEqual(["plain-text"]);
   });
 
diff --git a/packages/inference-catalog/src/resolve-chain.ts b/packages/inference-catalog/src/resolve-chain.ts
index 3106e3ffe9..8fd4671dc6 100644
--- a/packages/inference-catalog/src/resolve-chain.ts
+++ b/packages/inference-catalog/src/resolve-chain.ts
@@ -127,10 +127,8 @@ function resolveNeed(need: ChainNeed, policy: BenchModelPolicy): Need {
     override === undefined
       ? concept.ceiling
       : {
-          maxInputUsdPerMTok:
-            override.maxInputUsdPerMTok ?? concept.ceiling.maxInputUsdPerMTok,
-          maxOutputUsdPerMTok:
-            override.maxOutputUsdPerMTok ?? concept.ceiling.maxOutputUsdPerMTok,
+          maxInputUsdPerMTok: override.maxInputUsdPerMTok ?? concept.ceiling.maxInputUsdPerMTok,
+          maxOutputUsdPerMTok: override.maxOutputUsdPerMTok ?? concept.ceiling.maxOutputUsdPerMTok,
         };
   return {
     conceptId: concept.id,
@@ -147,17 +145,11 @@ function overCeiling(
   maxOutput: number | null,
 ): boolean {
   if (!price.known) return false;
-  if (
-    maxInput !== null &&
-    price.inputUsdPerMTok !== null &&
-    price.inputUsdPerMTok > maxInput
-  ) {
+  if (maxInput !== null && price.inputUsdPerMTok !== null && price.inputUsdPerMTok > maxInput) {
     return true;
   }
   return (
-    maxOutput !== null &&
-    price.outputUsdPerMTok !== null &&
-    price.outputUsdPerMTok > maxOutput
+    maxOutput !== null && price.outputUsdPerMTok !== null && price.outputUsdPerMTok > maxOutput
   );
 }
 
@@ -173,12 +165,10 @@ function compareCandidates(order: ChainOrder) {
   return (left: Candidate, right: Candidate): number => {
     const leftCost = left.entry.referenceCostUsd;
     const rightCost = right.entry.referenceCostUsd;
-    const byCost =
-      leftCost === null || rightCost === null ? 0 : leftCost - rightCost;
+    const byCost = leftCost === null || rightCost === null ? 0 : leftCost - rightCost;
     const byPriority = left.entry.priority - right.entry.priority;
     const byPreferred = right.preferScore - left.preferScore;
-    const primary =
-      order === "cheapest" ? byCost || byPriority : byPriority || byCost;
+    const primary = order === "cheapest" ? byCost || byPriority : byPriority || byCost;
     return primary || byPreferred || compareStrings(left.entry, right.entry);
   };
 }
@@ -199,8 +189,7 @@ function applyProviderPreference(
   const named = entries.filter((entry) => rank.has(entry.providerName));
   const rest = entries.filter((entry) => !rank.has(entry.providerName));
   const ordered = [...named].sort(
-    (left, right) =>
-      (rank.get(left.providerName) ?? 0) - (rank.get(right.providerName) ?? 0),
+    (left, right) => (rank.get(left.providerName) ?? 0) - (rank.get(right.providerName) ?? 0),
   );
   return [...ordered, ...rest];
 }
@@ -240,10 +229,7 @@ export function resolveModelChain(input: ResolveChainInput): ModelChain {
       continue;
     }
 
-    const price = priceForOffering(
-      pricingByOffering.get(offeringId) ?? [],
-      currency,
-    );
+    const price = priceForOffering(pricingByOffering.get(offeringId) ?? [], currency);
     const overBenchCeiling = overCeiling(
       price,
       policy.maxInputUsdPerMTok,
@@ -276,9 +262,7 @@ export function resolveModelChain(input: ResolveChainInput): ModelChain {
     };
     const candidate: Candidate = {
       entry,
-      preferScore: need.preferred.filter((wanted) =>
-        capabilities.includes(wanted),
-      ).length,
+      preferScore: need.preferred.filter((wanted) => capabilities.includes(wanted)).length,
     };
 
     if (!price.known) unpriced.push(candidate);
@@ -315,8 +299,7 @@ export function resolveModelChain(input: ResolveChainInput): ModelChain {
 }
 
 function ceilingMode(policy: BenchModelPolicy): "none" | "soft" | "hard" {
-  const hasCeiling =
-    policy.maxInputUsdPerMTok !== null || policy.maxOutputUsdPerMTok !== null;
+  const hasCeiling = policy.maxInputUsdPerMTok !== null || policy.maxOutputUsdPerMTok !== null;
   if (!hasCeiling) return "none";
   return policy.ceilingIsHard ? "hard" : "soft";
 }
@@ -324,10 +307,7 @@ function ceilingMode(policy: BenchModelPolicy): "none" | "soft" | "hard" {
 /** A chain whose every entry sits behind one provider fails whenever that
  * provider does. When the bench has another provider that qualifies, the
  * last slot goes to it. */
-function shouldDiversify(
-  capped: readonly ChainEntry[],
-  ranked: readonly ChainEntry[],
-): boolean {
+function shouldDiversify(capped: readonly ChainEntry[], ranked: readonly ChainEntry[]): boolean {
   if (capped.length < 2) return false;
   const soleProvider = capped[0]?.providerName;
   if (capped.some((entry) => entry.providerName !== soleProvider)) return false;
@@ -339,9 +319,7 @@ function diversify(
   ranked: readonly ChainEntry[],
 ): readonly ChainEntry[] {
   const soleProvider = capped[0]?.providerName;
-  const alternative = ranked.find(
-    (entry) => entry.providerName !== soleProvider,
-  );
+  const alternative = ranked.find((entry) => entry.providerName !== soleProvider);
   if (alternative === undefined) return capped;
   return [...capped.slice(0, capped.length - 1), alternative];
 }
diff --git a/packages/inference-settings/package.json b/packages/inference-settings/package.json
index 463ddfdae9..275dc459ed 100644
--- a/packages/inference-settings/package.json
+++ b/packages/inference-settings/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/inference-settings",
+  "version": "0.0.1",
   "private": true,
   "description": "Per-workbench inference settings: the effective ordered model/provider catalog with inherited-vs-set-here provenance, and the native catalog writes (priority reorder, restrict, bring-your-own-key shadowing) a workbench tenant can make against it.",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
@@ -15,8 +15,8 @@
     "test": "bun test"
   },
   "dependencies": {
-    "@intx/types": "workspace:*",
     "@corbits/connections": "workspace:*",
+    "@intx/types": "workspace:*",
     "arktype": "catalog:"
   },
   "devDependencies": {
diff --git a/packages/inference-settings/src/api.test.ts b/packages/inference-settings/src/api.test.ts
index f3e4c64b78..51234a628d 100644
--- a/packages/inference-settings/src/api.test.ts
+++ b/packages/inference-settings/src/api.test.ts
@@ -52,9 +52,7 @@ function modelResponse(overrides: Partial<Record<string, unknown>> = {}) {
   };
 }
 
-function credentialProviderResponse(
-  overrides: Partial<Record<string, unknown>> = {},
-) {
+function credentialProviderResponse(overrides: Partial<Record<string, unknown>> = {}) {
   return {
     id: "provider_1",
     tenantId: TENANT_ID,
@@ -80,9 +78,7 @@ function credentialResponse(overrides: Partial<Record<string, unknown>> = {}) {
   };
 }
 
-function modelProviderResponse(
-  overrides: Partial<Record<string, unknown>> = {},
-) {
+function modelProviderResponse(overrides: Partial<Record<string, unknown>> = {}) {
   return {
     id: "mp_1",
     tenantId: TENANT_ID,
@@ -121,10 +117,7 @@ function paginated(data: readonly unknown[]) {
 describe("shadowOffering mint chain", () => {
   test("mints model, credential-provider, credential, model-provider, offering, in that order", async () => {
     const calls: Call[] = [];
-    globalThis.fetch = (async (
-      input: RequestInfo | URL,
-      init?: RequestInit,
-    ) => {
+    globalThis.fetch = (async (input: RequestInfo | URL, init?: RequestInit) => {
       const path = pathOf(input);
       const method = init?.method ?? "GET";
       calls.push({ method, path });
@@ -170,10 +163,7 @@ describe("shadowOffering mint chain", () => {
 
   test("shadows at the exact priority of the offering being shadowed, not a row count", async () => {
     let offeringBody: unknown;
-    globalThis.fetch = (async (
-      input: RequestInfo | URL,
-      init?: RequestInit,
-    ) => {
+    globalThis.fetch = (async (input: RequestInfo | URL, init?: RequestInit) => {
       const path = pathOf(input);
       if (path === `/api/tenants/${TENANT_ID}/catalog/models`) {
         return Response.json(modelResponse(), { status: 201 });
@@ -188,8 +178,7 @@ describe("shadowOffering mint chain", () => {
         return Response.json(modelProviderResponse(), { status: 201 });
       }
       if (path === `/api/tenants/${TENANT_ID}/catalog/offerings`) {
-        offeringBody =
-          init?.body !== undefined ? JSON.parse(String(init.body)) : undefined;
+        offeringBody = init?.body !== undefined ? JSON.parse(String(init.body)) : undefined;
         return Response.json(offeringResponse(), { status: 201 });
       }
       throw new Error(`unexpected fetch: ${path}`);
@@ -202,10 +191,7 @@ describe("shadowOffering mint chain", () => {
 
   test("tolerates a 409 on every ensure* step, including the credential POST itself", async () => {
     const calls: Call[] = [];
-    globalThis.fetch = (async (
-      input: RequestInfo | URL,
-      init?: RequestInit,
-    ) => {
+    globalThis.fetch = (async (input: RequestInfo | URL, init?: RequestInit) => {
       const path = pathOf(input);
       const method = init?.method ?? "GET";
       calls.push({ method, path });
@@ -229,9 +215,7 @@ describe("shadowOffering mint chain", () => {
       if (path === `/api/tenants/${TENANT_ID}/catalog/offerings`) {
         if (method === "POST") return new Response(null, { status: 409 });
         return Response.json(
-          paginated([
-            offeringResponse({ modelId: "model_1", providerId: "mp_1" }),
-          ]),
+          paginated([offeringResponse({ modelId: "model_1", providerId: "mp_1" })]),
         );
       }
       throw new Error(`unexpected fetch: ${method} ${path}`);
@@ -250,10 +234,7 @@ describe("shadowOffering mint chain", () => {
 
   test("rolls back a freshly-minted model-provider when the offering step then fails", async () => {
     const calls: Call[] = [];
-    globalThis.fetch = (async (
-      input: RequestInfo | URL,
-      init?: RequestInit,
-    ) => {
+    globalThis.fetch = (async (input: RequestInfo | URL, init?: RequestInit) => {
       const path = pathOf(input);
       const method = init?.method ?? "GET";
       calls.push({ method, path });
@@ -275,10 +256,9 @@ describe("shadowOffering mint chain", () => {
         if (method === "DELETE") return new Response(null, { status: 204 });
       }
       if (path === `/api/tenants/${TENANT_ID}/catalog/offerings`) {
-        return new Response(
-          JSON.stringify({ error: { message: "server exploded" } }),
-          { status: 500 },
-        );
+        return new Response(JSON.stringify({ error: { message: "server exploded" } }), {
+          status: 500,
+        });
       }
       throw new Error(`unexpected fetch: ${method} ${path}`);
     }) as typeof fetch;
@@ -294,16 +274,11 @@ describe("shadowOffering mint chain", () => {
 
   test("threads an explicit fetchImpl through every call, including the rollback DELETE, never touching the global fetch", async () => {
     globalThis.fetch = (() => {
-      throw new Error(
-        "global fetch must not be called when fetchImpl is passed",
-      );
+      throw new Error("global fetch must not be called when fetchImpl is passed");
     }) as unknown as typeof fetch;
 
     const calls: Call[] = [];
-    const fakeFetch: typeof fetch = (async (
-      input: RequestInfo | URL,
-      init?: RequestInit,
-    ) => {
+    const fakeFetch: typeof fetch = (async (input: RequestInfo | URL, init?: RequestInit) => {
       const path = pathOf(input);
       const method = init?.method ?? "GET";
       calls.push({ method, path });
@@ -324,10 +299,9 @@ describe("shadowOffering mint chain", () => {
         if (method === "DELETE") return new Response(null, { status: 204 });
       }
       if (path === `/api/tenants/${TENANT_ID}/catalog/offerings`) {
-        return new Response(
-          JSON.stringify({ error: { message: "server exploded" } }),
-          { status: 500 },
-        );
+        return new Response(JSON.stringify({ error: { message: "server exploded" } }), {
+          status: 500,
+        });
       }
       throw new Error(`unexpected fetch: ${method} ${path}`);
     }) as typeof fetch;
@@ -343,10 +317,7 @@ describe("shadowOffering mint chain", () => {
 
   test("does not roll back an already-existing model-provider (resolved via 409) when the offering step fails", async () => {
     const calls: Call[] = [];
-    globalThis.fetch = (async (
-      input: RequestInfo | URL,
-      init?: RequestInit,
-    ) => {
+    globalThis.fetch = (async (input: RequestInfo | URL, init?: RequestInit) => {
       const path = pathOf(input);
       const method = init?.method ?? "GET";
       calls.push({ method, path });
@@ -365,10 +336,9 @@ describe("shadowOffering mint chain", () => {
         return Response.json(paginated([modelProviderResponse()]));
       }
       if (path === `/api/tenants/${TENANT_ID}/catalog/offerings`) {
-        return new Response(
-          JSON.stringify({ error: { message: "server exploded" } }),
-          { status: 500 },
-        );
+        return new Response(JSON.stringify({ error: { message: "server exploded" } }), {
+          status: 500,
+        });
       }
       throw new Error(`unexpected fetch: ${method} ${path}`);
     }) as typeof fetch;
diff --git a/packages/inference-settings/src/api.ts b/packages/inference-settings/src/api.ts
index b042dec6c5..583c28868a 100644
--- a/packages/inference-settings/src/api.ts
+++ b/packages/inference-settings/src/api.ts
@@ -74,10 +74,7 @@ type Validator<T> = (data: unknown) => T | type.errors;
 // carries `"lib": ["DOM"]` — see `@corbits/config-profiles`' own
 // `index.ts` module doc for why a server-only package deliberately never
 // adds that lib.
-export type FetchImpl = (
-  input: string | URL | Request,
-  init?: RequestInit,
-) => Promise<Response>;
+export type FetchImpl = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
 
 async function request<T>(
   path: string,
@@ -93,9 +90,7 @@ async function request<T>(
       headers: { "content-type": "application/json", ...init?.headers },
     });
   } catch (cause) {
-    throw new InferenceSettingsApiError(
-      cause instanceof Error ? cause.message : String(cause),
-    );
+    throw new InferenceSettingsApiError(cause instanceof Error ? cause.message : String(cause));
   }
   if (!response.ok) {
     const body: unknown = await response.json().catch(() => undefined);
@@ -136,9 +131,7 @@ async function requestVoid(
       headers: { "content-type": "application/json", ...init?.headers },
     });
   } catch (cause) {
-    throw new InferenceSettingsApiError(
-      cause instanceof Error ? cause.message : String(cause),
-    );
+    throw new InferenceSettingsApiError(cause instanceof Error ? cause.message : String(cause));
   }
   if (!response.ok) {
     const body: unknown = await response.json().catch(() => undefined);
@@ -300,13 +293,7 @@ export async function shadowOffering(
     fetchImpl,
   );
   try {
-    return await ensureOffering(
-      tenantId,
-      modelId,
-      providerId,
-      input.priority,
-      fetchImpl,
-    );
+    return await ensureOffering(tenantId, modelId, providerId, input.priority, fetchImpl);
   } catch (cause) {
     if (minted) {
       await requestVoid(
@@ -362,11 +349,7 @@ async function ensureCredential(
   input: ShadowOfferingInput,
   fetchImpl: FetchImpl,
 ): Promise<string> {
-  const providerRow = await ensureCredentialProvider(
-    tenantId,
-    input,
-    fetchImpl,
-  );
+  const providerRow = await ensureCredentialProvider(tenantId, input, fetchImpl);
   const credentialName = `${input.providerName}-workbench`;
   const created = await fetchImpl(`/api/tenants/${tenantId}/credentials`, {
     method: "POST",
@@ -467,21 +450,18 @@ async function ensureModelProvider(
   credentialId: string,
   fetchImpl: FetchImpl,
 ): Promise<EnsureModelProviderResult> {
-  const created = await fetchImpl(
-    `/api/tenants/${tenantId}/catalog/providers`,
-    {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify(
-        CreateModelProvider.assert({
-          name: input.providerName,
-          plugin: input.plugin,
-          baseURL: input.baseURL,
-          credentialId,
-        }),
-      ),
-    },
-  );
+  const created = await fetchImpl(`/api/tenants/${tenantId}/catalog/providers`, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify(
+      CreateModelProvider.assert({
+        name: input.providerName,
+        plugin: input.plugin,
+        baseURL: input.baseURL,
+        credentialId,
+      }),
+    ),
+  });
   if (created.status === 201) {
     const body: unknown = await created.json();
     return { providerId: ModelProviderResponse.assert(body).id, minted: true };
@@ -515,16 +495,11 @@ async function ensureOffering(
   priority: number,
   fetchImpl: FetchImpl,
 ): Promise<typeof ModelOfferingResponse.infer> {
-  const created = await fetchImpl(
-    `/api/tenants/${tenantId}/catalog/offerings`,
-    {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify(
-        CreateModelOffering.assert({ modelId, providerId, priority }),
-      ),
-    },
-  );
+  const created = await fetchImpl(`/api/tenants/${tenantId}/catalog/offerings`, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify(CreateModelOffering.assert({ modelId, providerId, priority })),
+  });
   if (created.status === 201) {
     const body: unknown = await created.json();
     return ModelOfferingResponse.assert(body);
diff --git a/packages/inference-settings/src/effective-list.test.ts b/packages/inference-settings/src/effective-list.test.ts
index e393a2c4ed..e5acc39fe9 100644
--- a/packages/inference-settings/src/effective-list.test.ts
+++ b/packages/inference-settings/src/effective-list.test.ts
@@ -26,9 +26,7 @@ describe("providerDisplayName", () => {
   });
 
   test("falls back to the raw slug for an unrecognized provider", () => {
-    expect(providerDisplayName("some-custom-provider")).toBe(
-      "some-custom-provider",
-    );
+    expect(providerDisplayName("some-custom-provider")).toBe("some-custom-provider");
   });
 });
 
@@ -370,18 +368,13 @@ describe("chatCapableModels", () => {
         ],
       }),
     ];
-    expect(
-      chatCapableModels(models).map((entry) => entry.canonicalName),
-    ).toEqual(["qwen3:8b"]);
+    expect(chatCapableModels(models).map((entry) => entry.canonicalName)).toEqual(["qwen3:8b"]);
   });
 });
 
 describe("buildEffectiveInferenceRows", () => {
   test("marks an owned offering id set-here and everything else inherited", () => {
-    const rows = buildEffectiveInferenceRows(
-      [model()],
-      new Set(["offering-b"]),
-    );
+    const rows = buildEffectiveInferenceRows([model()], new Set(["offering-b"]));
     expect(rows).toHaveLength(2);
     expect(rows[0]?.offeringId).toBe("offering-a");
     expect(rows[0]?.provenance).toBe("inherited");
@@ -413,11 +406,7 @@ describe("buildEffectiveInferenceRows", () => {
       ],
       new Set(),
     );
-    expect(rows.map((row) => row.offeringId)).toEqual([
-      "offering-a",
-      "offering-b",
-      "offering-c",
-    ]);
+    expect(rows.map((row) => row.offeringId)).toEqual(["offering-a", "offering-b", "offering-c"]);
   });
 
   test("an empty catalog yields no rows", () => {
@@ -506,17 +495,15 @@ describe("global inference route", () => {
       { ...row("xai", 1), canonicalName: "grok-4.6" },
     ];
 
-    expect(
-      orderedGlobalInferenceRows(rows).map((entry) => entry.offeringId),
-    ).toEqual(["anthropic", "xai", "openai"]);
+    expect(orderedGlobalInferenceRows(rows).map((entry) => entry.offeringId)).toEqual([
+      "anthropic",
+      "xai",
+      "openai",
+    ]);
   });
 
   test("moving a fallback to primary normalizes the entire route", () => {
-    const rows: EffectiveInferenceRow[] = [
-      row("anthropic", 0),
-      row("xai", 1),
-      row("openai", 2),
-    ];
+    const rows: EffectiveInferenceRow[] = [row("anthropic", 0), row("xai", 1), row("openai", 2)];
 
     expect(computeGlobalRoutePatches(rows, "openai", "first")).toEqual([
       { offeringId: "openai", priority: 0 },
@@ -526,10 +513,7 @@ describe("global inference route", () => {
   });
 
   test("does not pretend an inherited route can be rewritten here", () => {
-    const rows: EffectiveInferenceRow[] = [
-      row("anthropic", 0, "inherited"),
-      row("openai", 1),
-    ];
+    const rows: EffectiveInferenceRow[] = [row("anthropic", 0, "inherited"), row("openai", 1)];
 
     expect(computeGlobalRoutePatches(rows, "openai", "up")).toBeNull();
   });
@@ -552,13 +536,8 @@ function expectPatches(
 
 describe("computeReorderPatches", () => {
   test("swaps two distinctly-prioritized adjacent rows", () => {
-    const rows = buildEffectiveInferenceRows(
-      [model()],
-      new Set(["offering-a", "offering-b"]),
-    );
-    const [earlier, later] = expectPatches(
-      computeReorderPatches(rows, 1, "up"),
-    );
+    const rows = buildEffectiveInferenceRows([model()], new Set(["offering-a", "offering-b"]));
+    const [earlier, later] = expectPatches(computeReorderPatches(rows, 1, "up"));
     expect(earlier.offeringId).toBe("offering-b");
     expect(later.offeringId).toBe("offering-a");
     expect(earlier.priority).toBeLessThan(later.priority);
@@ -570,9 +549,7 @@ describe("computeReorderPatches", () => {
   // pair — a plain value-swap (0, 0) would leave both unchanged.
   test("swapping two equal-priority rows still produces distinct, correctly ordered priorities", () => {
     const rows: EffectiveInferenceRow[] = [row("a", 0), row("b", 0)];
-    const [earlier, later] = expectPatches(
-      computeReorderPatches(rows, 1, "up"),
-    );
+    const [earlier, later] = expectPatches(computeReorderPatches(rows, 1, "up"));
     expect(earlier.offeringId).toBe("b");
     expect(later.offeringId).toBe("a");
     expect(earlier.priority).not.toBe(later.priority);
@@ -586,27 +563,19 @@ describe("computeReorderPatches", () => {
       row("b", 0),
       row("fixed-high", 1, "inherited"),
     ];
-    const [earlier, later] = expectPatches(
-      computeReorderPatches(rows, 2, "up"),
-    );
+    const [earlier, later] = expectPatches(computeReorderPatches(rows, 2, "up"));
     expect(earlier.priority).toBeGreaterThanOrEqual(0);
     expect(later.priority).toBeLessThanOrEqual(1);
     expect(earlier.priority).toBeLessThan(later.priority);
   });
 
   test("returns null when the move would run off the edge of the list", () => {
-    const rows = buildEffectiveInferenceRows(
-      [model()],
-      new Set(["offering-a", "offering-b"]),
-    );
+    const rows = buildEffectiveInferenceRows([model()], new Set(["offering-a", "offering-b"]));
     expect(computeReorderPatches(rows, 0, "up")).toBeNull();
   });
 
   test("returns null when the neighbor is inherited (not shadowed yet)", () => {
-    const rows = buildEffectiveInferenceRows(
-      [model()],
-      new Set(["offering-b"]),
-    );
+    const rows = buildEffectiveInferenceRows([model()], new Set(["offering-b"]));
     expect(computeReorderPatches(rows, 1, "up")).toBeNull();
   });
 });
@@ -625,24 +594,14 @@ describe("computeReorderPatches", () => {
 // tiebreak never engages.
 describe("resolution-order truth", () => {
   test("with distinct priorities, row order matches priority-ascending regardless of tiebreak", () => {
-    const rows: EffectiveInferenceRow[] = [
-      row("c", 5),
-      row("a", 1),
-      row("b", 3),
-    ];
+    const rows: EffectiveInferenceRow[] = [row("c", 5), row("a", 1), row("b", 3)];
     const byPriorityIdTiebreak = [...rows].sort(
-      (x, y) =>
-        x.priority - y.priority || (x.offeringId < y.offeringId ? -1 : 1),
+      (x, y) => x.priority - y.priority || (x.offeringId < y.offeringId ? -1 : 1),
     );
     const byPriorityNameTiebreak = [...rows].sort(
-      (x, y) =>
-        x.priority - y.priority || x.providerName.localeCompare(y.providerName),
+      (x, y) => x.priority - y.priority || x.providerName.localeCompare(y.providerName),
     );
-    expect(byPriorityIdTiebreak.map((r) => r.offeringId)).toEqual([
-      "a",
-      "b",
-      "c",
-    ]);
+    expect(byPriorityIdTiebreak.map((r) => r.offeringId)).toEqual(["a", "b", "c"]);
     expect(byPriorityNameTiebreak.map((r) => r.offeringId)).toEqual(
       byPriorityIdTiebreak.map((r) => r.offeringId),
     );
@@ -685,9 +644,7 @@ describe("restrictedOfferings", () => {
 describe("computeMakeDefaultPatches", () => {
   test("lowers the target strictly below the current lowest other priority", () => {
     const rows = [row("a", 5), row("b", 2), row("c", 8)];
-    expect(computeMakeDefaultPatches(rows, "c")).toEqual([
-      { offeringId: "c", priority: 1 },
-    ]);
+    expect(computeMakeDefaultPatches(rows, "c")).toEqual([{ offeringId: "c", priority: 1 }]);
   });
 
   // Regression for the tie case: `defaultModelForProvider` breaks ties by
@@ -695,9 +652,7 @@ describe("computeMakeDefaultPatches", () => {
   // the target must land strictly below it.
   test("breaks a tie with the current minimum by going strictly below it", () => {
     const rows = [row("a", 0), row("b", 0)];
-    expect(computeMakeDefaultPatches(rows, "b")).toEqual([
-      { offeringId: "b", priority: -1 },
-    ]);
+    expect(computeMakeDefaultPatches(rows, "b")).toEqual([{ offeringId: "b", priority: -1 }]);
   });
 
   test("is a no-op when the target is already strictly ahead of every other offering", () => {
diff --git a/packages/inference-settings/src/effective-list.ts b/packages/inference-settings/src/effective-list.ts
index eb20fdbf31..9256bba3c5 100644
--- a/packages/inference-settings/src/effective-list.ts
+++ b/packages/inference-settings/src/effective-list.ts
@@ -19,9 +19,9 @@ import { preferCompletionCapable } from "@corbits/connections/model-capability";
  * than nothing.
  */
 export function providerDisplayName(providerName: string): string {
-  const config = (
-    PROVIDER_TEST_CONFIG as Readonly<Record<string, { displayName: string }>>
-  )[providerName];
+  const config = (PROVIDER_TEST_CONFIG as Readonly<Record<string, { displayName: string }>>)[
+    providerName
+  ];
   return config?.displayName ?? providerName;
 }
 
@@ -121,9 +121,7 @@ export function buildEffectiveInferenceRows(
         providerName: offering.providerName,
         plugin: offering.plugin,
         priority: offering.priority,
-        provenance: ownOfferingIds.has(offering.offeringId)
-          ? "set-here"
-          : "inherited",
+        provenance: ownOfferingIds.has(offering.offeringId) ? "set-here" : "inherited",
       });
     }
   }
@@ -137,9 +135,7 @@ export function buildEffectiveInferenceRows(
  * Hugging Face Hub paths (`hf.co/...`), and bare `.gguf` names drop out.
  * When every offering on a model is excluded the model itself is omitted.
  */
-export function chatCapableModels(
-  models: readonly ModelInfo[],
-): readonly ModelInfo[] {
+export function chatCapableModels(models: readonly ModelInfo[]): readonly ModelInfo[] {
   const kept: ModelInfo[] = [];
   for (const model of models) {
     const offerings = preferCompletionCapable(
@@ -208,16 +204,10 @@ export function computeGlobalRoutePatches(
   const ordered = orderedGlobalInferenceRows(rows);
   if (ordered.some((row) => row.provenance !== "set-here")) return null;
   if (new Set(ordered.map((row) => row.canonicalName)).size > 1) return null;
-  const currentIndex = ordered.findIndex(
-    (row) => row.offeringId === targetOfferingId,
-  );
+  const currentIndex = ordered.findIndex((row) => row.offeringId === targetOfferingId);
   if (currentIndex < 0) return null;
   const destination =
-    direction === "first"
-      ? 0
-      : direction === "up"
-        ? currentIndex - 1
-        : currentIndex + 1;
+    direction === "first" ? 0 : direction === "up" ? currentIndex - 1 : currentIndex + 1;
   if (destination < 0 || destination >= ordered.length) return [];
 
   const next = [...ordered];
@@ -269,8 +259,7 @@ export function computeReorderPatches(
 
   // After the swap, whichever row now sits in the earlier position needs
   // the smaller priority; the other, the larger one.
-  const [earlier, later] =
-    direction === "up" ? [moved, neighbor] : [neighbor, moved];
+  const [earlier, later] = direction === "up" ? [moved, neighbor] : [neighbor, moved];
 
   let earlierPriority: number;
   let laterPriority: number;
@@ -330,14 +319,10 @@ export function computeMakeDefaultPatches(
   providerOfferings: readonly EffectiveInferenceRow[],
   targetOfferingId: string,
 ): readonly PriorityPatch[] | null {
-  const target = providerOfferings.find(
-    (row) => row.offeringId === targetOfferingId,
-  );
+  const target = providerOfferings.find((row) => row.offeringId === targetOfferingId);
   if (target === undefined || target.provenance !== "set-here") return null;
 
-  const others = providerOfferings.filter(
-    (row) => row.offeringId !== targetOfferingId,
-  );
+  const others = providerOfferings.filter((row) => row.offeringId !== targetOfferingId);
   if (others.length === 0) return [];
 
   const minOtherPriority = Math.min(...others.map((row) => row.priority));
diff --git a/packages/inference-settings/src/index.ts b/packages/inference-settings/src/index.ts
index 0cadb5ba51..106ade59a6 100644
--- a/packages/inference-settings/src/index.ts
+++ b/packages/inference-settings/src/index.ts
@@ -20,9 +20,5 @@ export {
   restrictedOfferings,
   rowsByModel,
 } from "./effective-list";
-export type {
-  DefaultProviderModel,
-  EffectiveInferenceRow,
-  PriorityPatch,
-} from "./effective-list";
+export type { DefaultProviderModel, EffectiveInferenceRow, PriorityPatch } from "./effective-list";
 export { hasUsableModel } from "./usable-model";
diff --git a/packages/interaction-tools/package.json b/packages/interaction-tools/package.json
index 2fbf2decb2..9cec3114bb 100644
--- a/packages/interaction-tools/package.json
+++ b/packages/interaction-tools/package.json
@@ -1,21 +1,21 @@
 {
   "name": "@corbits/interaction-tools",
+  "version": "0.0.10",
   "description": "The ask_user tool: an @intx/agent bundle that poses an interview question in-thread as a question block, then ends the turn — the user's answer arrives as the agent's next message, not this call's result",
-  "version": "0.0.9",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "packages/interaction-tools"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "packages/interaction-tools"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -27,13 +27,13 @@
   "dependencies": {
     "arktype": "catalog:"
   },
+  "devDependencies": {
+    "@types/bun": "catalog:",
+    "typescript": "catalog:"
+  },
   "peerDependencies": {
     "@corbits/error-sink": "0.0.2",
     "@intx/agent": "0.3.0",
     "@intx/types": "0.3.0"
-  },
-  "devDependencies": {
-    "@types/bun": "catalog:",
-    "typescript": "catalog:"
   }
 }
diff --git a/packages/interaction-tools/src/client.test.ts b/packages/interaction-tools/src/client.test.ts
index 2f73fb05df..e4143da04e 100644
--- a/packages/interaction-tools/src/client.test.ts
+++ b/packages/interaction-tools/src/client.test.ts
@@ -37,9 +37,7 @@ test("postQuestion posts a question block to the workflow-chat participants/mess
     allowFreeText: true,
   });
 
-  expect(seenUrl).toBe(
-    "https://hub.example.com/api/workflow-chat/participants/messages",
-  );
+  expect(seenUrl).toBe("https://hub.example.com/api/workflow-chat/participants/messages");
   expect(seenHeaders?.["authorization"]).toBe("Bearer sc-token");
   expect(seenHeaders?.["x-workflow-run-address"]).toBe("run_1@workflow");
   const body = seenBody as {
@@ -53,16 +51,11 @@ test("postQuestion posts a question block to the workflow-chat participants/mess
   expect(body.parts[0]?.block.type).toBe("question");
   expect(body.parts[0]?.block.data["question"]).toBe("Which environment?");
   expect(body.parts[0]?.block.data["subtitle"]).toBe("Pick the closest match.");
-  expect(body.parts[0]?.block.data["options"]).toEqual([
-    "Staging",
-    "Production",
-  ]);
+  expect(body.parts[0]?.block.data["options"]).toEqual(["Staging", "Production"]);
   expect(body.parts[0]?.block.data["allowFreeText"]).toBe(true);
   expect(typeof body.parts[0]?.block.data["questionId"]).toBe("string");
   expect(result.messageId).toBe("msg_1");
-  expect(result.questionId).toBe(
-    body.parts[0]?.block.data["questionId"] as string,
-  );
+  expect(result.questionId).toBe(body.parts[0]?.block.data["questionId"] as string);
 });
 
 test("postQuestion stamps a caller-supplied questionId on the card instead of minting", async () => {
@@ -91,9 +84,7 @@ test("postQuestion stamps a caller-supplied questionId on the card instead of mi
       block: { type: string; data: Record<string, unknown> };
     }[];
   };
-  expect(body.parts[0]?.block.data["questionId"]).toBe(
-    "q_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
-  );
+  expect(body.parts[0]?.block.data["questionId"]).toBe("q_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa");
   expect(result.questionId).toBe("q_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa");
   expect(result.messageId).toBe("msg_1");
 });
@@ -165,9 +156,7 @@ test("reads userMessage even when a legacy message field is also present", async
     });
     throw new Error("expected postQuestion to throw");
   } catch (error) {
-    expect((error as Error).message).toBe(
-      "Posting the question failed: canonical",
-    );
+    expect((error as Error).message).toBe("Posting the question failed: canonical");
   }
 });
 
@@ -188,9 +177,7 @@ test("a 404 envelope with only error.message falls back, never the legacy field"
     throw new Error("expected NoOwnChannelError");
   } catch (error) {
     expect(error).toBeInstanceOf(NoOwnChannelError);
-    expect((error as Error).message).toBe(
-      "The caller has no channel of its own to post into",
-    );
+    expect((error as Error).message).toBe("The caller has no channel of its own to post into");
   }
 });
 
@@ -208,8 +195,6 @@ test("a non-ok, non-envelope response falls back to status text", async () => {
     });
     throw new Error("expected postQuestion to throw");
   } catch (error) {
-    expect((error as Error).message).toBe(
-      "Posting the question failed: 500 Internal Server Error",
-    );
+    expect((error as Error).message).toBe("Posting the question failed: 500 Internal Server Error");
   }
 });
diff --git a/packages/interaction-tools/src/client.ts b/packages/interaction-tools/src/client.ts
index 692276d848..6d07594cdd 100644
--- a/packages/interaction-tools/src/client.ts
+++ b/packages/interaction-tools/src/client.ts
@@ -44,21 +44,14 @@ function errorMessageFrom(body: unknown): string | undefined {
     return undefined;
   }
   const error = (body as { error: unknown }).error;
-  if (
-    error === null ||
-    typeof error !== "object" ||
-    !("userMessage" in error)
-  ) {
+  if (error === null || typeof error !== "object" || !("userMessage" in error)) {
     return undefined;
   }
   const userMessage = (error as { userMessage: unknown }).userMessage;
   return typeof userMessage === "string" ? userMessage : undefined;
 }
 
-async function readErrorMessage(
-  response: Response,
-  fallback: string,
-): Promise<string> {
+async function readErrorMessage(response: Response, fallback: string): Promise<string> {
   const body: unknown = await response.json().catch(() => undefined);
   return errorMessageFrom(body) ?? fallback;
 }
@@ -103,42 +96,33 @@ export async function postQuestion(
   question: AskUserQuestion,
 ): Promise<{ readonly messageId: string; readonly questionId: string }> {
   const doFetch = config.fetchImpl ?? fetch;
-  const questionId =
-    question.questionId ?? `q_${crypto.randomUUID().replace(/-/g, "")}`;
-  const response = await doFetch(
-    `${config.hubChatUrl}/api/workflow-chat/participants/messages`,
-    {
-      method: "POST",
-      headers: { ...authHeaders(config), "content-type": "application/json" },
-      body: JSON.stringify({
-        parts: [
-          {
-            kind: "block",
-            block: {
-              type: "question",
-              data: {
-                questionId,
-                question: question.question,
-                ...(question.subtitle !== undefined
-                  ? { subtitle: question.subtitle }
-                  : {}),
-                options: question.options,
-                ...(question.allowFreeText !== undefined
-                  ? { allowFreeText: question.allowFreeText }
-                  : {}),
-              },
+  const questionId = question.questionId ?? `q_${crypto.randomUUID().replace(/-/g, "")}`;
+  const response = await doFetch(`${config.hubChatUrl}/api/workflow-chat/participants/messages`, {
+    method: "POST",
+    headers: { ...authHeaders(config), "content-type": "application/json" },
+    body: JSON.stringify({
+      parts: [
+        {
+          kind: "block",
+          block: {
+            type: "question",
+            data: {
+              questionId,
+              question: question.question,
+              ...(question.subtitle !== undefined ? { subtitle: question.subtitle } : {}),
+              options: question.options,
+              ...(question.allowFreeText !== undefined
+                ? { allowFreeText: question.allowFreeText }
+                : {}),
             },
           },
-        ],
-      }),
-    },
-  );
+        },
+      ],
+    }),
+  });
   if (response.status === 404) {
     throw new NoOwnChannelError(
-      await readErrorMessage(
-        response,
-        "The caller has no channel of its own to post into",
-      ),
+      await readErrorMessage(response, "The caller has no channel of its own to post into"),
     );
   }
   if (!response.ok) {
@@ -152,9 +136,7 @@ export async function postQuestion(
   const body: unknown = await response.json();
   const parsed = PostedMessageResponse(body);
   if (parsed instanceof type.errors) {
-    throw new Error(
-      `Post-message response did not match the expected shape: ${parsed.summary}`,
-    );
+    throw new Error(`Post-message response did not match the expected shape: ${parsed.summary}`);
   }
   return { messageId: parsed.id, questionId };
 }
diff --git a/packages/interaction-tools/src/tool.test.ts b/packages/interaction-tools/src/tool.test.ts
index c700f109ea..371d802932 100644
--- a/packages/interaction-tools/src/tool.test.ts
+++ b/packages/interaction-tools/src/tool.test.ts
@@ -11,10 +11,7 @@ function testEnv(): AskUserEnv {
   } as unknown as AskUserEnv;
 }
 
-async function withFetch<T>(
-  fetchImpl: typeof fetch,
-  run: () => Promise<T>,
-): Promise<T> {
+async function withFetch<T>(fetchImpl: typeof fetch, run: () => Promise<T>): Promise<T> {
   const original = globalThis.fetch;
   globalThis.fetch = fetchImpl;
   try {
@@ -29,11 +26,7 @@ test("declares exactly ask_user, with no approval gate", () => {
 });
 
 test("requires the sanctioned env keys", () => {
-  expect(interactionTools.requires).toEqual([
-    "hubChatUrl",
-    "sidecarToken",
-    "address",
-  ]);
+  expect(interactionTools.requires).toEqual(["hubChatUrl", "sidecarToken", "address"]);
 });
 
 test("interactionTools contributes no beforeToolExtension: ask_user never suspends", () => {
@@ -64,9 +57,7 @@ test("ask_user posts a question block and ends the turn with the answer arriving
       options: ["Staging", "Production"],
     },
   };
-  const result = await withFetch(fetchImpl, () =>
-    bundle.run(call, new AbortController().signal),
-  );
+  const result = await withFetch(fetchImpl, () => bundle.run(call, new AbortController().signal));
 
   expect(posted).toBe(true);
   expect(result.isError).toBeFalsy();
@@ -77,10 +68,9 @@ test("ask_user posts a question block and ends the turn with the answer arriving
 
 test("ask_user's result text tells the model to stop, not to wait for a reply here", async () => {
   const fetchImpl = (async () =>
-    new Response(
-      JSON.stringify({ id: "msg_1", createdAt: "2026-08-17T00:00:00.000Z" }),
-      { status: 201 },
-    )) as unknown as typeof fetch;
+    new Response(JSON.stringify({ id: "msg_1", createdAt: "2026-08-17T00:00:00.000Z" }), {
+      status: 201,
+    })) as unknown as typeof fetch;
 
   const bundle = interactionTools(testEnv());
   const result = await withFetch(fetchImpl, () =>
@@ -131,12 +121,8 @@ test("retrying ask_user for the same call reuses the questionId so a crash betwe
     },
   };
 
-  await withFetch(fetchImpl, () =>
-    bundle.run(call, new AbortController().signal),
-  );
-  await withFetch(fetchImpl, () =>
-    bundle.run(call, new AbortController().signal),
-  );
+  await withFetch(fetchImpl, () => bundle.run(call, new AbortController().signal));
+  await withFetch(fetchImpl, () => bundle.run(call, new AbortController().signal));
 
   expect(postedQuestionIds).toHaveLength(2);
   const reusedId = postedQuestionIds[0];
diff --git a/packages/interaction-tools/src/tool.ts b/packages/interaction-tools/src/tool.ts
index 47ce5736e9..4317cc997a 100644
--- a/packages/interaction-tools/src/tool.ts
+++ b/packages/interaction-tools/src/tool.ts
@@ -61,10 +61,7 @@ function clientConfig(env: AskUserEnv): AskUserClientConfig {
  * crash-retry of the same call re-posts the same id and the write path
  * returns the existing card rather than a duplicate (CL-7248).
  */
-async function runAskUser(
-  env: AskUserEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runAskUser(env: AskUserEnv, call: ToolCall): Promise<ToolResult> {
   const parsed = AskUserInput(call.arguments);
   if (parsed instanceof type.errors) {
     return errorResult(
@@ -140,8 +137,7 @@ export const interactionTools = defineTool<AskUserEnv>({
             allowFreeText: {
               type: "boolean",
               description:
-                'Whether to also show a "Type your own answer" field. ' +
-                "Defaults to false.",
+                'Whether to also show a "Type your own answer" field. ' + "Defaults to false.",
             },
           },
           required: ["question", "options"],
@@ -153,10 +149,7 @@ export const interactionTools = defineTool<AskUserEnv>({
         return runAskUser(env, call);
       }
       return Promise.resolve(
-        errorResult(
-          call.id,
-          new Error(`@corbits/interaction-tools: unknown tool "${call.name}"`),
-        ),
+        errorResult(call.id, new Error(`@corbits/interaction-tools: unknown tool "${call.name}"`)),
       );
     },
   }),
diff --git a/packages/jimmy-agent/package.json b/packages/jimmy-agent/package.json
index 469e26749d..be7c759f3f 100644
--- a/packages/jimmy-agent/package.json
+++ b/packages/jimmy-agent/package.json
@@ -1,17 +1,10 @@
 {
   "name": "@corbits/jimmy-agent",
+  "version": "0.0.3",
   "private": true,
   "description": "Jimmy: a one-shot chat agent that searches Giphy and replies with a GIF",
-  "version": "0.0.2",
   "license": "LGPL-2.1-or-later",
   "type": "module",
-  "interchange": {
-    "credentials": [
-      {
-        "handle": "giphy"
-      }
-    ]
-  },
   "exports": {
     ".": "./src/index.ts",
     "./metadata": "./src/metadata.ts"
@@ -28,5 +21,12 @@
   "devDependencies": {
     "@types/bun": "catalog:",
     "typescript": "catalog:"
+  },
+  "interchange": {
+    "credentials": [
+      {
+        "handle": "giphy"
+      }
+    ]
   }
 }
diff --git a/packages/jimmy-agent/src/agent.ts b/packages/jimmy-agent/src/agent.ts
index 1d44cdf164..63b63918da 100644
--- a/packages/jimmy-agent/src/agent.ts
+++ b/packages/jimmy-agent/src/agent.ts
@@ -10,11 +10,7 @@
 // this package's README for what that leaves deferred.
 import type { AgentDefinition, InferencePreference } from "@intx/agent";
 
-import {
-  JIMMY_AGENT_ID,
-  JIMMY_SYSTEM_PROMPT,
-  JIMMY_TOOL_PACKAGE_PINS,
-} from "./metadata";
+import { JIMMY_AGENT_ID, JIMMY_SYSTEM_PROMPT, JIMMY_TOOL_PACKAGE_PINS } from "./metadata";
 
 export interface BuildJimmyAgentInput {
   /** Provider/model preferences, in order; resolved at deploy time. */
diff --git a/packages/jimmy-agent/src/gif-search-tool.test.ts b/packages/jimmy-agent/src/gif-search-tool.test.ts
index 2a47a33ef8..96c976ec36 100644
--- a/packages/jimmy-agent/src/gif-search-tool.test.ts
+++ b/packages/jimmy-agent/src/gif-search-tool.test.ts
@@ -22,9 +22,7 @@ function fakeCredentials(secret: string | undefined): CredentialCapability {
   return {
     resolve(handle: string): Promise<MediatedCredential> {
       if (secret === undefined) {
-        return Promise.reject(
-          new Error(`no credential is bound to handle "${handle}"`),
-        );
+        return Promise.reject(new Error(`no credential is bound to handle "${handle}"`));
       }
       return Promise.resolve({
         kind: "http",
@@ -67,9 +65,7 @@ test("returns a gif CDN url for a stubbed Giphy search", async () => {
     const bundle = gifSearchTool(fakeEnv(fakeCredentials("key")));
     const result = await bundle.run(CALL, new AbortController().signal);
     expect(result.isError).toBeUndefined();
-    expect(result.content).toContain(
-      "https://media.giphy.com/media/abc123/giphy.gif",
-    );
+    expect(result.content).toContain("https://media.giphy.com/media/abc123/giphy.gif");
   } finally {
     globalThis.fetch = originalFetch;
   }
@@ -123,8 +119,7 @@ test("rejects a missing query without calling the network", async () => {
 
 test("degrades to an error result (never throws) when Giphy rejects the key", async () => {
   const originalFetch = globalThis.fetch;
-  globalThis.fetch = (async () =>
-    new Response("nope", { status: 401 })) as unknown as typeof fetch;
+  globalThis.fetch = (async () => new Response("nope", { status: 401 })) as unknown as typeof fetch;
   try {
     const bundle = gifSearchTool(fakeEnv(fakeCredentials("key")));
     const result = await bundle.run(CALL, new AbortController().signal);
diff --git a/packages/jimmy-agent/src/gif-search-tool.ts b/packages/jimmy-agent/src/gif-search-tool.ts
index fcd2d81a4d..23b3482e2f 100644
--- a/packages/jimmy-agent/src/gif-search-tool.ts
+++ b/packages/jimmy-agent/src/gif-search-tool.ts
@@ -128,8 +128,7 @@ function pickCdnUrl(item: GiphyItem): string | undefined {
   ];
   for (const rendition of renditions) {
     const url = rendition?.url?.trim();
-    if (url !== undefined && url !== "" && isAllowedGiphyHostURL(url))
-      return url;
+    if (url !== undefined && url !== "" && isAllowedGiphyHostURL(url)) return url;
   }
   return undefined;
 }
@@ -167,9 +166,7 @@ async function searchGiphy(
   });
 
   if (!response.ok) {
-    throw new Error(
-      `Giphy search failed: ${String(response.status)} ${response.statusText}`,
-    );
+    throw new Error(`Giphy search failed: ${String(response.status)} ${response.statusText}`);
   }
 
   const raw: unknown = await response.json();
@@ -182,9 +179,7 @@ async function searchGiphy(
   }
   const status = envelope.meta?.status;
   if (status !== undefined && status !== 200) {
-    throw new Error(
-      `Giphy rejected the request: ${envelope.meta?.msg ?? String(status)}`,
-    );
+    throw new Error(`Giphy rejected the request: ${envelope.meta?.msg ?? String(status)}`);
   }
   if (!Array.isArray(envelope.data)) {
     throw new Error("Giphy search failed: response has no data array");
@@ -201,9 +196,7 @@ async function searchGiphy(
     mapped.push({
       title: sanitizeGifTitle(item.title ?? ""),
       cdnUrl,
-      ...(pageUrl !== undefined &&
-      pageUrl !== "" &&
-      isAllowedGiphyHostURL(pageUrl)
+      ...(pageUrl !== undefined && pageUrl !== "" && isAllowedGiphyHostURL(pageUrl)
         ? { pageUrl }
         : {}),
     });
@@ -224,10 +217,7 @@ function formatResults(results: GifResult[]): string {
     .join("\n\n");
 }
 
-async function runGifSearch(
-  env: GifSearchEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runGifSearch(env: GifSearchEnv, call: ToolCall): Promise<ToolResult> {
   const credential = await resolveGiphyCredential(env);
   if (credential === null) {
     return notConnectedResult(call.id);
@@ -241,16 +231,10 @@ async function runGifSearch(
     };
   }
   const limit = clampLimit(
-    typeof call.arguments["limit"] === "number"
-      ? (call.arguments["limit"] as number)
-      : undefined,
+    typeof call.arguments["limit"] === "number" ? (call.arguments["limit"] as number) : undefined,
   );
   try {
-    const results = await searchGiphy(
-      credential.fetchImpl,
-      query.trim(),
-      limit,
-    );
+    const results = await searchGiphy(credential.fetchImpl, query.trim(), limit);
     return { callId: call.id, content: formatResults(results) };
   } catch (err) {
     return {
diff --git a/packages/jimmy-agent/src/index.ts b/packages/jimmy-agent/src/index.ts
index 5098938616..010cf18636 100644
--- a/packages/jimmy-agent/src/index.ts
+++ b/packages/jimmy-agent/src/index.ts
@@ -1,8 +1,4 @@
-export {
-  gifSearchTool,
-  type GifResult,
-  type GifSearchEnv,
-} from "./gif-search-tool";
+export { gifSearchTool, type GifResult, type GifSearchEnv } from "./gif-search-tool";
 
 export { buildJimmyAgent, type BuildJimmyAgentInput } from "./agent";
 
diff --git a/packages/jimmy-agent/src/metadata.ts b/packages/jimmy-agent/src/metadata.ts
index ae3a2d4932..1203ac50c9 100644
--- a/packages/jimmy-agent/src/metadata.ts
+++ b/packages/jimmy-agent/src/metadata.ts
@@ -16,7 +16,7 @@ export const GIF_SEARCH_TOOL = "gif_search";
 
 /** This definition pins itself: the package that carries `gif_search` is this one. */
 export const JIMMY_TOOL_PACKAGE_PINS: readonly ToolPackagePin[] = [
-  { name: "@corbits/jimmy-agent", version: "0.0.2" },
+  { name: "@corbits/jimmy-agent", version: "0.0.3" },
 ];
 
 export const JIMMY_SYSTEM_PROMPT =
diff --git a/packages/linear-tools/package.json b/packages/linear-tools/package.json
index 1f2a2746a2..43179ad0f6 100644
--- a/packages/linear-tools/package.json
+++ b/packages/linear-tools/package.json
@@ -1,28 +1,21 @@
 {
   "name": "@corbits/linear-tools",
+  "version": "0.0.5",
   "description": "Linear integration: a minimal client and an @intx/agent tool bundle for listing a user's recently updated issues",
-  "version": "0.0.4",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "interchange": {
-    "credentials": [
-      {
-        "handle": "linear"
-      }
-    ]
-  },
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "packages/linear-tools"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "packages/linear-tools"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -34,10 +27,6 @@
   "dependencies": {
     "arktype": "catalog:"
   },
-  "peerDependencies": {
-    "@intx/agent": "0.3.0",
-    "@intx/types": "0.3.0"
-  },
   "devDependencies": {
     "@corbits/credential-providers": "workspace:*",
     "@intx/authz": "0.3.0",
@@ -46,5 +35,16 @@
     "@intx/harness": "workspace:*",
     "@types/bun": "catalog:",
     "typescript": "catalog:"
+  },
+  "peerDependencies": {
+    "@intx/agent": "0.3.0",
+    "@intx/types": "0.3.0"
+  },
+  "interchange": {
+    "credentials": [
+      {
+        "handle": "linear"
+      }
+    ]
   }
 }
diff --git a/packages/linear-tools/src/client.test.ts b/packages/linear-tools/src/client.test.ts
index 33765d41b3..aae2b0dce2 100644
--- a/packages/linear-tools/src/client.test.ts
+++ b/packages/linear-tools/src/client.test.ts
@@ -37,9 +37,7 @@ test("posts the api key as the authorization header", async () => {
   const captured: { auth: string | null } = { auth: null };
   const fetchImpl = (async (_input: URL | string, init?: RequestInit) => {
     captured.auth =
-      (init?.headers as Record<string, string> | undefined)?.[
-        "authorization"
-      ] ?? null;
+      (init?.headers as Record<string, string> | undefined)?.["authorization"] ?? null;
     return new Response(JSON.stringify({ data: { issues: { nodes: [] } } }), {
       status: 200,
     });
@@ -50,34 +48,29 @@ test("posts the api key as the authorization header", async () => {
 });
 
 test("throws on a non-ok HTTP response", async () => {
-  const fetchImpl = (async () =>
-    new Response("nope", { status: 401 })) as unknown as typeof fetch;
+  const fetchImpl = (async () => new Response("nope", { status: 401 })) as unknown as typeof fetch;
 
-  await expect(
-    listRecentLinearIssues({ apiKey: "bad", fetchImpl }),
-  ).rejects.toThrow(/401/);
+  await expect(listRecentLinearIssues({ apiKey: "bad", fetchImpl })).rejects.toThrow(/401/);
 });
 
 test("throws on a GraphQL error envelope", async () => {
   const fetchImpl = (async () =>
-    new Response(
-      JSON.stringify({ errors: [{ message: "not authenticated" }] }),
-      { status: 200 },
-    )) as unknown as typeof fetch;
+    new Response(JSON.stringify({ errors: [{ message: "not authenticated" }] }), {
+      status: 200,
+    })) as unknown as typeof fetch;
 
-  await expect(
-    listRecentLinearIssues({ apiKey: "bad", fetchImpl }),
-  ).rejects.toThrow(/GraphQL errors/);
+  await expect(listRecentLinearIssues({ apiKey: "bad", fetchImpl })).rejects.toThrow(
+    /GraphQL errors/,
+  );
 });
 
 test("throws when a node does not match the expected issue shape", async () => {
   const fetchImpl = (async () =>
-    new Response(
-      JSON.stringify({ data: { issues: { nodes: [{ id: "issue_1" }] } } }),
-      { status: 200 },
-    )) as unknown as typeof fetch;
+    new Response(JSON.stringify({ data: { issues: { nodes: [{ id: "issue_1" }] } } }), {
+      status: 200,
+    })) as unknown as typeof fetch;
 
-  await expect(
-    listRecentLinearIssues({ apiKey: "test-key", fetchImpl }),
-  ).rejects.toThrow(/did not match the expected shape/);
+  await expect(listRecentLinearIssues({ apiKey: "test-key", fetchImpl })).rejects.toThrow(
+    /did not match the expected shape/,
+  );
 });
diff --git a/packages/linear-tools/src/client.ts b/packages/linear-tools/src/client.ts
index 28e89f9736..b47c7d45ea 100644
--- a/packages/linear-tools/src/client.ts
+++ b/packages/linear-tools/src/client.ts
@@ -92,9 +92,7 @@ export async function listRecentLinearIssues(
     }),
   });
   if (!response.ok) {
-    throw new Error(
-      `Linear list-issues request failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`Linear list-issues request failed: ${response.status} ${response.statusText}`);
   }
   const body: unknown = await response.json();
   const parsed = LinearGraphQlResponse(body);
@@ -104,9 +102,7 @@ export async function listRecentLinearIssues(
     );
   }
   if (parsed.errors !== undefined && parsed.errors.length > 0) {
-    throw new Error(
-      `Linear list-issues returned GraphQL errors: ${JSON.stringify(parsed.errors)}`,
-    );
+    throw new Error(`Linear list-issues returned GraphQL errors: ${JSON.stringify(parsed.errors)}`);
   }
   const nodes = (parsed.data?.issues?.nodes ?? []) as LinearGraphQlIssueNode[];
   return nodes.map((node) => {
diff --git a/packages/linear-tools/src/tool.test.ts b/packages/linear-tools/src/tool.test.ts
index ccb0ec920e..f16a60e87a 100644
--- a/packages/linear-tools/src/tool.test.ts
+++ b/packages/linear-tools/src/tool.test.ts
@@ -27,9 +27,7 @@ function fakeCredentials(secret: string | undefined): CredentialCapability {
   return {
     resolve(handle: string): Promise<MediatedCredential> {
       if (secret === undefined) {
-        return Promise.reject(
-          new Error(`no credential is bound to handle "${handle}"`),
-        );
+        return Promise.reject(new Error(`no credential is bound to handle "${handle}"`));
       }
       return Promise.resolve({
         kind: "http",
@@ -50,9 +48,7 @@ function fakeEnv(credentials: CredentialCapability | undefined): LinearEnv {
 
 test("declares the linear_list_recent_issues tool", () => {
   const bundle = linearTools(fakeEnv(fakeCredentials("key")));
-  expect(bundle.definitions.map((d) => d.name)).toEqual([
-    LINEAR_LIST_RECENT_ISSUES_TOOL,
-  ]);
+  expect(bundle.definitions.map((d) => d.name)).toEqual([LINEAR_LIST_RECENT_ISSUES_TOOL]);
 });
 
 test("degrades to a non-throwing 'not connected' error when no credential is bound", async () => {
@@ -72,9 +68,7 @@ test("degrades the same way when the step carries no credentials capability at a
 test("returns the issues as JSON content on a successful call", async () => {
   const originalFetch = globalThis.fetch;
   globalThis.fetch = (async (_input: unknown, init?: RequestInit) => {
-    expect((init?.headers as Headers | undefined)?.get("authorization")).toBe(
-      "key",
-    );
+    expect((init?.headers as Headers | undefined)?.get("authorization")).toBe("key");
     return new Response(
       JSON.stringify({
         data: {
@@ -114,8 +108,7 @@ test("returns the issues as JSON content on a successful call", async () => {
 
 test("degrades to an error result (never throws) when the underlying call fails", async () => {
   const originalFetch = globalThis.fetch;
-  globalThis.fetch = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  globalThis.fetch = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
   try {
     const bundle = linearTools(fakeEnv(fakeCredentials("key")));
     const result = await bundle.run(CALL, new AbortController().signal);
diff --git a/packages/linear-tools/src/tool.ts b/packages/linear-tools/src/tool.ts
index 085891b9b2..b44b8598ec 100644
--- a/packages/linear-tools/src/tool.ts
+++ b/packages/linear-tools/src/tool.ts
@@ -64,10 +64,7 @@ async function resolveLinearCredential(
   }
 }
 
-async function runLinearListRecentIssues(
-  env: LinearEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runLinearListRecentIssues(env: LinearEnv, call: ToolCall): Promise<ToolResult> {
   const credential = await resolveLinearCredential(env);
   if (credential === null) {
     return notConnectedResult(call.id);
@@ -113,8 +110,7 @@ export const linearTools = defineTool<LinearEnv>({
           properties: {
             since: {
               type: "string",
-              description:
-                "ISO 8601 timestamp; only issues updated after this are returned",
+              description: "ISO 8601 timestamp; only issues updated after this are returned",
             },
           },
         },
diff --git a/packages/linear-tools/test/credential-delivery.drizzle.test.ts b/packages/linear-tools/test/credential-delivery.drizzle.test.ts
index f9d2b1c2cc..ff2068baa1 100644
--- a/packages/linear-tools/test/credential-delivery.drizzle.test.ts
+++ b/packages/linear-tools/test/credential-delivery.drizzle.test.ts
@@ -15,12 +15,7 @@
 //   - the same binding fails closed (`unresolved`) when no credential
 //     exists for the provider, rather than delivering nothing silently.
 import { afterAll, beforeAll, expect, test } from "bun:test";
-import {
-  buildCredentialDelivery,
-  createDB,
-  runMigrations,
-  dropSchema,
-} from "@intx/db";
+import { buildCredentialDelivery, createDB, runMigrations, dropSchema } from "@intx/db";
 import { schema } from "@intx/db";
 import { createEnvKeyCredentialCipher } from "@intx/crypto";
 import { credentialAad } from "@intx/types";
@@ -45,9 +40,7 @@ const LINEAR_BINDING: CredentialBinding = {
 };
 
 describeIfDb("buildCredentialDelivery: the linear handle binding", () => {
-  const target = dbTargetFromUrl(
-    databaseUrl ?? "postgres://localhost:5432/unused",
-  );
+  const target = dbTargetFromUrl(databaseUrl ?? "postgres://localhost:5432/unused");
 
   beforeAll(async () => {
     await runMigrations(target, { schema: SCHEMA });
diff --git a/packages/linear-tools/test/credential-wiring-e2e.drizzle.test.ts b/packages/linear-tools/test/credential-wiring-e2e.drizzle.test.ts
index 2e8b3d1bf8..e718be2092 100644
--- a/packages/linear-tools/test/credential-wiring-e2e.drizzle.test.ts
+++ b/packages/linear-tools/test/credential-wiring-e2e.drizzle.test.ts
@@ -37,22 +37,14 @@
 // for why (no scripted tool-call inference adapter exists anywhere in
 // this repo today).
 import { afterAll, beforeAll, expect, test } from "bun:test";
-import {
-  buildCredentialDelivery,
-  createDB,
-  runMigrations,
-  dropSchema,
-} from "@intx/db";
+import { buildCredentialDelivery, createDB, runMigrations, dropSchema } from "@intx/db";
 import { schema } from "@intx/db";
 import { createEnvKeyCredentialCipher } from "@intx/crypto";
 import { credentialAad } from "@intx/types";
 import type { CredentialBinding } from "@intx/types";
 import { toolConsumer } from "@intx/authz";
 import type { GrantRule } from "@intx/authz";
-import {
-  createCredentialCapability,
-  createCredentialProviderRegistry,
-} from "@intx/harness";
+import { createCredentialCapability, createCredentialProviderRegistry } from "@intx/harness";
 import {
   createHttpRawAuthorizationCredentialProvider,
   deriveResolvedBindings,
@@ -82,10 +74,7 @@ const LINEAR_BINDING: CredentialBinding = {
 };
 
 /** A delivered binding descriptor, reshaped into the launch-time `GrantRule`. */
-function toGrantRule(descriptor: {
-  credentialId: string;
-  consumer: string;
-}): GrantRule {
+function toGrantRule(descriptor: { credentialId: string; consumer: string }): GrantRule {
   return {
     id: "grant_launch_1",
     resource: `credential:${descriptor.credentialId}`,
@@ -99,138 +88,128 @@ function toGrantRule(descriptor: {
   };
 }
 
-describeIfDb(
-  "credential wiring end to end: seed -> delivery -> capability -> tool",
-  () => {
-    const target = dbTargetFromUrl(
-      databaseUrl ?? "postgres://localhost:5432/unused",
-    );
+describeIfDb("credential wiring end to end: seed -> delivery -> capability -> tool", () => {
+  const target = dbTargetFromUrl(databaseUrl ?? "postgres://localhost:5432/unused");
 
-    beforeAll(async () => {
-      await runMigrations(target, { schema: SCHEMA });
-    });
+  beforeAll(async () => {
+    await runMigrations(target, { schema: SCHEMA });
+  });
 
-    afterAll(async () => {
-      await dropSchema(target, { schema: SCHEMA });
-    });
+  afterAll(async () => {
+    await dropSchema(target, { schema: SCHEMA });
+  });
 
-    test("a tenant-seeded credential reaches linearTools's tool call as Linear's raw-key header", async () => {
-      const { db, close } = createDB({ ...target, schema: SCHEMA });
-      try {
-        await db.insert(schema.tenant).values({
-          id: "tnt_credential_wiring_e2e_linear",
-          name: "Credential Wiring E2E Tenant (Linear)",
-          slug: "credential-wiring-e2e-tenant-linear",
-          domain: "credential-wiring-e2e-linear.workbench.test",
-        });
-        // Seeded with `plugin: "http-raw-authorization"`: Linear's API
-        // expects the raw key in `authorization`, not a Bearer token, so
-        // its provider row must opt into
-        // `@corbits/credential-providers`'s plugin rather than the
-        // vendored `http` default other connectors use (see
-        // `docs/credential-wiring.md`).
-        await db.insert(schema.provider).values({
-          id: "prov_linear_e2e",
-          tenantId: "tnt_credential_wiring_e2e_linear",
-          name: "linear",
-          plugin: HTTP_RAW_AUTHORIZATION_PROVIDER_KEY,
-          apiBaseUrl: "https://api.linear.app",
-        });
-        const credentialId = "cred_linear_e2e";
-        await db.insert(schema.credential).values({
-          id: credentialId,
-          tenantId: "tnt_credential_wiring_e2e_linear",
-          providerId: "prov_linear_e2e",
-          name: "linear-key",
-          type: "api_key",
-          secret: await CIPHER.encrypt(
-            "seeded-linear-secret",
-            credentialAad(credentialId, "secret"),
-          ),
-          status: "active",
-        });
+  test("a tenant-seeded credential reaches linearTools's tool call as Linear's raw-key header", async () => {
+    const { db, close } = createDB({ ...target, schema: SCHEMA });
+    try {
+      await db.insert(schema.tenant).values({
+        id: "tnt_credential_wiring_e2e_linear",
+        name: "Credential Wiring E2E Tenant (Linear)",
+        slug: "credential-wiring-e2e-tenant-linear",
+        domain: "credential-wiring-e2e-linear.workbench.test",
+      });
+      // Seeded with `plugin: "http-raw-authorization"`: Linear's API
+      // expects the raw key in `authorization`, not a Bearer token, so
+      // its provider row must opt into
+      // `@corbits/credential-providers`'s plugin rather than the
+      // vendored `http` default other connectors use (see
+      // `docs/credential-wiring.md`).
+      await db.insert(schema.provider).values({
+        id: "prov_linear_e2e",
+        tenantId: "tnt_credential_wiring_e2e_linear",
+        name: "linear",
+        plugin: HTTP_RAW_AUTHORIZATION_PROVIDER_KEY,
+        apiBaseUrl: "https://api.linear.app",
+      });
+      const credentialId = "cred_linear_e2e";
+      await db.insert(schema.credential).values({
+        id: credentialId,
+        tenantId: "tnt_credential_wiring_e2e_linear",
+        providerId: "prov_linear_e2e",
+        name: "linear-key",
+        type: "api_key",
+        secret: await CIPHER.encrypt("seeded-linear-secret", credentialAad(credentialId, "secret")),
+        status: "active",
+      });
 
-        // Step 2: launch-time resolution, unmodified platform function.
-        const result = await buildCredentialDelivery({
-          db,
-          tenantId: "tnt_credential_wiring_e2e_linear",
-          bindings: [LINEAR_BINDING],
-          creatorPrincipalId: null,
-          invokerPrincipalId: null,
-          credentialCipher: CIPHER,
-        });
-        expect(result.ok).toBe(true);
-        if (!result.ok) throw new Error("expected delivery to resolve");
-        const delivery = result.delivery;
-        if (delivery === undefined) throw new Error("expected a delivery");
+      // Step 2: launch-time resolution, unmodified platform function.
+      const result = await buildCredentialDelivery({
+        db,
+        tenantId: "tnt_credential_wiring_e2e_linear",
+        bindings: [LINEAR_BINDING],
+        creatorPrincipalId: null,
+        invokerPrincipalId: null,
+        credentialCipher: CIPHER,
+      });
+      expect(result.ok).toBe(true);
+      if (!result.ok) throw new Error("expected delivery to resolve");
+      const delivery = result.delivery;
+      if (delivery === undefined) throw new Error("expected a delivery");
 
-        // Step 3: the exact composition
-        // `createToolBearingAgentFactory`'s `credentialCapabilityFor`
-        // performs at a real step build.
-        const captured: { auth: string | null } = { auth: null };
-        const providers = createCredentialProviderRegistry([
-          createHttpRawAuthorizationCredentialProvider({
-            fetch: async (_input, init) => {
-              captured.auth =
-                (init?.headers as Headers | undefined)?.get("authorization") ??
-                null;
-              return new Response(
-                JSON.stringify({
-                  data: {
-                    issues: {
-                      nodes: [
-                        {
-                          id: "issue_1",
-                          identifier: "CL-1",
-                          title: "Fix the thing",
-                          updatedAt: "2026-08-12T09:00:00.000Z",
-                        },
-                      ],
-                    },
+      // Step 3: the exact composition
+      // `createToolBearingAgentFactory`'s `credentialCapabilityFor`
+      // performs at a real step build.
+      const captured: { auth: string | null } = { auth: null };
+      const providers = createCredentialProviderRegistry([
+        createHttpRawAuthorizationCredentialProvider({
+          fetch: async (_input, init) => {
+            captured.auth = (init?.headers as Headers | undefined)?.get("authorization") ?? null;
+            return new Response(
+              JSON.stringify({
+                data: {
+                  issues: {
+                    nodes: [
+                      {
+                        id: "issue_1",
+                        identifier: "CL-1",
+                        title: "Fix the thing",
+                        updatedAt: "2026-08-12T09:00:00.000Z",
+                      },
+                    ],
                   },
-                }),
-                { status: 200 },
-              );
-            },
-          }),
-        ]);
-        const capability = createCredentialCapability({
-          consumer: CONSUMER,
-          bindings: deriveResolvedBindings(delivery, CONSUMER),
-          providers,
-          grants: delivery.bindings.map(toGrantRule),
-        });
+                },
+              }),
+              { status: 200 },
+            );
+          },
+        }),
+      ]);
+      const capability = createCredentialCapability({
+        consumer: CONSUMER,
+        bindings: deriveResolvedBindings(delivery, CONSUMER),
+        providers,
+        grants: delivery.bindings.map(toGrantRule),
+      });
 
-        // Step 4: the real tool bundle, driven exactly as
-        // `../src/tool.test.ts` drives it, sees the seeded secret in
-        // Linear's expected header shape.
-        const env = { credentials: capability } as unknown as LinearEnv;
-        const bundle = linearTools(env);
-        const call: ToolCall = {
-          id: "call_1",
-          name: LINEAR_LIST_RECENT_ISSUES_TOOL,
-          arguments: {},
-        };
-        const callResult = await bundle.run(call, new AbortController().signal);
+      // Step 4: the real tool bundle, driven exactly as
+      // `../src/tool.test.ts` drives it, sees the seeded secret in
+      // Linear's expected header shape.
+      const env = { credentials: capability } as unknown as LinearEnv;
+      const bundle = linearTools(env);
+      const call: ToolCall = {
+        id: "call_1",
+        name: LINEAR_LIST_RECENT_ISSUES_TOOL,
+        arguments: {},
+      };
+      const callResult = await bundle.run(call, new AbortController().signal);
 
-        expect(callResult.isError).toBeUndefined();
-        expect(captured.auth).toBe("seeded-linear-secret");
-        expect(captured.auth).not.toBe("Bearer seeded-linear-secret");
-        expect(JSON.parse(callResult.content as string)).toEqual({
-          issues: [
-            {
-              id: "issue_1",
-              identifier: "CL-1",
-              title: "Fix the thing",
-              updatedAt: "2026-08-12T09:00:00.000Z",
-            },
-          ],
-        });
+      expect(callResult.isError).toBeUndefined();
+      expect(captured.auth).toBe("seeded-linear-secret");
+      expect(captured.auth).not.toBe("Bearer seeded-linear-secret");
+      expect(JSON.parse(callResult.content as string)).toEqual({
+        issues: [
+          {
+            id: "issue_1",
+            identifier: "CL-1",
+            title: "Fix the thing",
+            updatedAt: "2026-08-12T09:00:00.000Z",
+          },
+        ],
+      });
 
-        await capability.dispose();
-      } finally {
-        await close();
-      }
-    });
-  },
-);
+      await capability.dispose();
+    } finally {
+      await close();
+    }
+  });
+});
diff --git a/packages/linear-tools/test/linear-raw-authorization-regression.test.ts b/packages/linear-tools/test/linear-raw-authorization-regression.test.ts
index 9c84976d0e..884378b481 100644
--- a/packages/linear-tools/test/linear-raw-authorization-regression.test.ts
+++ b/packages/linear-tools/test/linear-raw-authorization-regression.test.ts
@@ -10,10 +10,7 @@
 // package's own `tool.test.ts` fake) end to end and asserting the header
 // Linear actually expects.
 import { expect, test } from "bun:test";
-import {
-  createCredentialCapability,
-  createCredentialProviderRegistry,
-} from "@intx/harness";
+import { createCredentialCapability, createCredentialProviderRegistry } from "@intx/harness";
 import { toolConsumer } from "@intx/authz";
 import {
   createHttpRawAuthorizationCredentialProvider,
@@ -27,14 +24,10 @@ test("the real http-raw-authorization provider sends Linear's raw-key convention
   const providers = createCredentialProviderRegistry([
     createHttpRawAuthorizationCredentialProvider({
       fetch: async (_input, init) => {
-        captured.auth =
-          (init?.headers as Headers | undefined)?.get("authorization") ?? null;
-        return new Response(
-          JSON.stringify({ data: { issues: { nodes: [] } } }),
-          {
-            status: 200,
-          },
-        );
+        captured.auth = (init?.headers as Headers | undefined)?.get("authorization") ?? null;
+        return new Response(JSON.stringify({ data: { issues: { nodes: [] } } }), {
+          status: 200,
+        });
       },
     }),
   ]);
diff --git a/packages/manus-tools/package.json b/packages/manus-tools/package.json
index a91c721d8b..e3e31e1a30 100644
--- a/packages/manus-tools/package.json
+++ b/packages/manus-tools/package.json
@@ -1,28 +1,21 @@
 {
   "name": "@corbits/manus-tools",
+  "version": "0.0.12",
   "description": "Manus integration: a v2 API client and an @intx/agent tool bundle for running tasks and retrieving files",
-  "version": "0.0.11",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "interchange": {
-    "credentials": [
-      {
-        "handle": "manus"
-      }
-    ]
-  },
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "packages/manus-tools"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "packages/manus-tools"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -34,12 +27,19 @@
   "dependencies": {
     "arktype": "catalog:"
   },
+  "devDependencies": {
+    "@types/bun": "catalog:",
+    "typescript": "catalog:"
+  },
   "peerDependencies": {
     "@intx/agent": "0.3.0",
     "@intx/types": "0.3.0"
   },
-  "devDependencies": {
-    "@types/bun": "catalog:",
-    "typescript": "catalog:"
+  "interchange": {
+    "credentials": [
+      {
+        "handle": "manus"
+      }
+    ]
   }
 }
diff --git a/packages/manus-tools/src/client.test.ts b/packages/manus-tools/src/client.test.ts
index 992018ac76..797094b40a 100644
--- a/packages/manus-tools/src/client.test.ts
+++ b/packages/manus-tools/src/client.test.ts
@@ -21,10 +21,7 @@ test("createTask posts to /v2/task.create and parses the ok envelope", async ()
   };
   const fetchImpl = (async (input: URL | string, init?: RequestInit) => {
     captured.url = String(input);
-    captured.headers =
-      init?.headers instanceof Headers
-        ? init.headers
-        : new Headers(init?.headers);
+    captured.headers = init?.headers instanceof Headers ? init.headers : new Headers(init?.headers);
     captured.body = typeof init?.body === "string" ? init.body : "";
     return new Response(
       JSON.stringify({
@@ -142,9 +139,7 @@ test("listTaskMessages GETs /v2/task.listMessages without an auth header", async
   }) as unknown as typeof fetch;
 
   const listed = await listTaskMessages({ fetchImpl }, { task_id: "task_1" });
-  expect(captured.url).toBe(
-    "https://api.manus.ai/v2/task.listMessages?task_id=task_1",
-  );
+  expect(captured.url).toBe("https://api.manus.ai/v2/task.listMessages?task_id=task_1");
   expect(captured.headers?.get("x-manus-api-key") ?? null).toBeNull();
   expect(listed.messages?.[0]?.status_update?.agent_status).toBe("stopped");
 });
@@ -252,9 +247,7 @@ test("createSlideDeck treats mixed [stopped, running] desc as terminal", async (
   const fetchImpl = (async (input: URL | string, init?: RequestInit) => {
     const url = String(input);
     if (url.includes("/v2/task.create")) {
-      expect(
-        JSON.parse(typeof init?.body === "string" ? init.body : ""),
-      ).toEqual({
+      expect(JSON.parse(typeof init?.body === "string" ? init.body : "")).toEqual({
         message: {
           content: [
             {
@@ -327,10 +320,7 @@ test("createSlideDeck throws when the agent is still running after the poll budg
   }) as unknown as typeof fetch;
 
   await expect(
-    createSlideDeck(
-      { fetchImpl },
-      { content: "Onboarding", pollIntervalMs: 0, maxPolls: 2 },
-    ),
+    createSlideDeck({ fetchImpl }, { content: "Onboarding", pollIntervalMs: 0, maxPolls: 2 }),
   ).rejects.toThrow(/did not stop in time \(agent_status: running\)/);
 });
 
@@ -358,10 +348,7 @@ test("createSlideDeck throws when the agent is waiting", async () => {
   }) as unknown as typeof fetch;
 
   await expect(
-    createSlideDeck(
-      { fetchImpl },
-      { content: "Onboarding", pollIntervalMs: 0, maxPolls: 5 },
-    ),
+    createSlideDeck({ fetchImpl }, { content: "Onboarding", pollIntervalMs: 0, maxPolls: 5 }),
   ).rejects.toThrow(/waiting for confirmation/);
 });
 
@@ -389,10 +376,7 @@ test("createSlideDeck throws when the agent_status is error", async () => {
   }) as unknown as typeof fetch;
 
   await expect(
-    createSlideDeck(
-      { fetchImpl },
-      { content: "Onboarding", pollIntervalMs: 0, maxPolls: 5 },
-    ),
+    createSlideDeck({ fetchImpl }, { content: "Onboarding", pollIntervalMs: 0, maxPolls: 5 }),
   ).rejects.toThrow(/agent_status error/);
 });
 
@@ -434,12 +418,8 @@ test("createSlideDeck aborts polling instead of waiting out the timeout", async
 });
 
 test("default slide-deck wait is several minutes", () => {
-  expect(
-    DEFAULT_SLIDE_MAX_POLLS * DEFAULT_SLIDE_POLL_INTERVAL_MS,
-  ).toBeGreaterThan(60_000);
-  expect(DEFAULT_SLIDE_MAX_POLLS * DEFAULT_SLIDE_POLL_INTERVAL_MS).toBe(
-    5 * 60 * 1000,
-  );
+  expect(DEFAULT_SLIDE_MAX_POLLS * DEFAULT_SLIDE_POLL_INTERVAL_MS).toBeGreaterThan(60_000);
+  expect(DEFAULT_SLIDE_MAX_POLLS * DEFAULT_SLIDE_POLL_INTERVAL_MS).toBe(5 * 60 * 1000);
 });
 
 test("createSlideDeck forwards optional skill fields on create", async () => {
@@ -514,10 +494,7 @@ test("createTask keeps a caller-supplied agent_profile", async () => {
     });
   }) as unknown as typeof fetch;
 
-  await createTask(
-    { fetchImpl },
-    { content: "Hello", agent_profile: "manus-1.6-max" },
-  );
+  await createTask({ fetchImpl }, { content: "Hello", agent_profile: "manus-1.6-max" });
   expect(JSON.parse(captured.body)).toEqual({
     message: { content: [{ type: "text", text: "Hello" }] },
     agent_profile: "manus-1.6-max",
@@ -674,10 +651,7 @@ test("createSlideDeck still throws unrelated listMessages errors", async () => {
   }) as unknown as typeof fetch;
 
   await expect(
-    createSlideDeck(
-      { fetchImpl },
-      { content: "Onboarding", pollIntervalMs: 0, maxPolls: 3 },
-    ),
+    createSlideDeck({ fetchImpl }, { content: "Onboarding", pollIntervalMs: 0, maxPolls: 3 }),
   ).rejects.toThrow(/permission_denied: bad key/);
   expect(listCalls).toBe(1);
 });
@@ -705,10 +679,7 @@ test("createSlideDeck throws when listMessages stays not_found through the poll
   }) as unknown as typeof fetch;
 
   await expect(
-    createSlideDeck(
-      { fetchImpl },
-      { content: "Onboarding", pollIntervalMs: 0, maxPolls: 2 },
-    ),
+    createSlideDeck({ fetchImpl }, { content: "Onboarding", pollIntervalMs: 0, maxPolls: 2 }),
   ).rejects.toThrow(/did not stop in time|not_found: Task not found/);
   expect(listCalls).toBe(2);
 });
diff --git a/packages/manus-tools/src/client.ts b/packages/manus-tools/src/client.ts
index 900a300e3e..f34cc8ef3a 100644
--- a/packages/manus-tools/src/client.ts
+++ b/packages/manus-tools/src/client.ts
@@ -122,16 +122,10 @@ function jsonHeaders(): Record<string, string> {
   return { "content-type": "application/json" };
 }
 
-function throwManusFailure(
-  status: number,
-  statusText: string,
-  body: unknown,
-): never {
+function throwManusFailure(status: number, statusText: string, body: unknown): never {
   const parsed = ManusErrorEnvelope(body);
   if (!(parsed instanceof type.errors)) {
-    throw new Error(
-      `Manus request failed: ${parsed.error.code}: ${parsed.error.message}`,
-    );
+    throw new Error(`Manus request failed: ${parsed.error.code}: ${parsed.error.message}`);
   }
   throw new Error(`Manus request failed: ${status} ${statusText}`);
 }
@@ -139,20 +133,14 @@ function throwManusFailure(
 function parseOkBody(body: unknown): Record<string, unknown> {
   const error = ManusErrorEnvelope(body);
   if (!(error instanceof type.errors)) {
-    throw new Error(
-      `Manus request failed: ${error.error.code}: ${error.error.message}`,
-    );
+    throw new Error(`Manus request failed: ${error.error.code}: ${error.error.message}`);
   }
   const parsed = ManusOkEnvelope(body);
   if (parsed instanceof type.errors) {
-    throw new Error(
-      `Manus response did not match the expected shape: ${parsed.summary}`,
-    );
+    throw new Error(`Manus response did not match the expected shape: ${parsed.summary}`);
   }
   if (typeof body !== "object" || body === null || Array.isArray(body)) {
-    throw new Error(
-      "Manus response did not match the expected shape: not an object",
-    );
+    throw new Error("Manus response did not match the expected shape: not an object");
   }
   return body as Record<string, unknown>;
 }
@@ -161,11 +149,7 @@ function queryString(params: Readonly<Record<string, unknown>>): string {
   const search = new URLSearchParams();
   for (const [key, value] of Object.entries(params)) {
     if (value === undefined || value === null) continue;
-    if (
-      typeof value === "string" ||
-      typeof value === "number" ||
-      typeof value === "boolean"
-    ) {
+    if (typeof value === "string" || typeof value === "number" || typeof value === "boolean") {
       search.set(key, String(value));
     }
   }
@@ -190,9 +174,7 @@ export async function manusRequest(
   const base = config.baseUrl ?? DEFAULT_MANUS_BASE_URL;
   const params = args.params ?? {};
   const url =
-    args.method === "GET"
-      ? `${base}${args.path}${queryString(params)}`
-      : `${base}${args.path}`;
+    args.method === "GET" ? `${base}${args.path}${queryString(params)}` : `${base}${args.path}`;
   const response =
     args.method === "GET"
       ? await doFetch(url, { method: "GET" })
@@ -205,10 +187,7 @@ export async function manusRequest(
   try {
     body = await response.json();
   } catch (cause) {
-    throw new Error(
-      `Manus request failed: ${response.status} ${response.statusText}`,
-      { cause },
-    );
+    throw new Error(`Manus request failed: ${response.status} ${response.statusText}`, { cause });
   }
   if (!response.ok) {
     throwManusFailure(response.status, response.statusText, body);
@@ -373,9 +352,7 @@ export async function listTaskMessages(
   return parsed;
 }
 
-export function latestAgentStatus(
-  messages: readonly TaskEvent[] | undefined,
-): string | undefined {
+export function latestAgentStatus(messages: readonly TaskEvent[] | undefined): string | undefined {
   if (messages === undefined) return undefined;
   // task.listMessages defaults to desc (newest first). The first
   // status_update is the current agent_status; walking to the last
@@ -409,8 +386,7 @@ export function extractOutputFiles(
         type?: string;
         content_type?: string;
       } = {};
-      if (attachment.filename !== undefined)
-        file.filename = attachment.filename;
+      if (attachment.filename !== undefined) file.filename = attachment.filename;
       if (attachment.url !== undefined) file.url = attachment.url;
       if (attachment.id !== undefined) file.id = attachment.id;
       if (attachment.type !== undefined) file.type = attachment.type;
@@ -504,9 +480,7 @@ export async function createSlideDeck(
     ...taskParams,
     content: `${SLIDE_DECK_PROMPT_PREFIX}${taskParams.content}`,
     agent_profile:
-      taskParams.agent_profile !== undefined
-        ? taskParams.agent_profile
-        : SLIDE_DECK_AGENT_PROFILE,
+      taskParams.agent_profile !== undefined ? taskParams.agent_profile : SLIDE_DECK_AGENT_PROFILE,
   });
   const intervalMs = pollIntervalMs ?? DEFAULT_SLIDE_POLL_INTERVAL_MS;
   const polls = maxPolls ?? DEFAULT_SLIDE_MAX_POLLS;
diff --git a/packages/manus-tools/src/tool.test.ts b/packages/manus-tools/src/tool.test.ts
index ec66e6e69b..add5d768a5 100644
--- a/packages/manus-tools/src/tool.test.ts
+++ b/packages/manus-tools/src/tool.test.ts
@@ -2,12 +2,7 @@ import { expect, test } from "bun:test";
 import type { ToolCall } from "@intx/types/runtime";
 import type { CredentialCapability, MediatedCredential } from "@intx/types";
 
-import {
-  CREATE_SLIDES_TOOL,
-  MANUS_ENDPOINTS,
-  MANUS_NOT_CONNECTED,
-  manusTools,
-} from "./tool";
+import { CREATE_SLIDES_TOOL, MANUS_ENDPOINTS, MANUS_NOT_CONNECTED, manusTools } from "./tool";
 import type { ManusEnv } from "./tool";
 
 const CREATE_SLIDES_CALL: ToolCall = {
@@ -20,9 +15,7 @@ function fakeCredentials(secret: string | undefined): CredentialCapability {
   return {
     resolve(handle: string): Promise<MediatedCredential> {
       if (secret === undefined) {
-        return Promise.reject(
-          new Error(`no credential is bound to handle "${handle}"`),
-        );
+        return Promise.reject(new Error(`no credential is bound to handle "${handle}"`));
       }
       return Promise.resolve({
         kind: "http",
@@ -103,32 +96,22 @@ test("mutating admin tools declare approval ask; create_slides and read-ish tool
 });
 
 test("task_list_msgs describes slides_format as pptx or html, never pdf", () => {
-  const listMsgs = MANUS_ENDPOINTS.find(
-    (spec) => spec.name === "task_list_msgs",
-  );
+  const listMsgs = MANUS_ENDPOINTS.find((spec) => spec.name === "task_list_msgs");
   expect(listMsgs?.properties["slides_format"]?.description).toContain("pptx");
   expect(listMsgs?.properties["slides_format"]?.description).toContain("html");
-  expect(listMsgs?.properties["slides_format"]?.description).not.toMatch(
-    /pdf/i,
-  );
+  expect(listMsgs?.properties["slides_format"]?.description).not.toMatch(/pdf/i);
 });
 
 test("degrades to a non-throwing 'not connected' error when no credential is bound", async () => {
   const bundle = manusTools(fakeEnv(fakeCredentials(undefined)));
-  const result = await bundle.run(
-    CREATE_SLIDES_CALL,
-    new AbortController().signal,
-  );
+  const result = await bundle.run(CREATE_SLIDES_CALL, new AbortController().signal);
   expect(result.isError).toBe(true);
   expect(result.content).toBe(MANUS_NOT_CONNECTED);
 });
 
 test("degrades the same way when the step carries no credentials capability at all", async () => {
   const bundle = manusTools(fakeEnv(undefined));
-  const result = await bundle.run(
-    CREATE_SLIDES_CALL,
-    new AbortController().signal,
-  );
+  const result = await bundle.run(CREATE_SLIDES_CALL, new AbortController().signal);
   expect(result.isError).toBe(true);
   expect(result.content).toBe(MANUS_NOT_CONNECTED);
 });
@@ -149,9 +132,7 @@ test("create_slides creates a task, polls messages, and surfaces the presentatio
       ]);
       expect(body.message.content[0].text).toContain("slide presentation");
       expect(body.message.content[0].text).toContain("pptx");
-      expect(body.message.content[0].text).toContain(
-        "Make a five-slide deck about onboarding",
-      );
+      expect(body.message.content[0].text).toContain("Make a five-slide deck about onboarding");
       expect(body.message.enable_skills).toBeUndefined();
       expect(body.message.force_skills).toBeUndefined();
       expect(body.agent_profile).toBe("manus-1.6-lite");
@@ -174,10 +155,7 @@ test("create_slides creates a task, polls messages, and surfaces the presentatio
   }) as unknown as typeof fetch;
   try {
     const bundle = manusTools(fakeEnv(fakeCredentials("key")));
-    const result = await bundle.run(
-      CREATE_SLIDES_CALL,
-      new AbortController().signal,
-    );
+    const result = await bundle.run(CREATE_SLIDES_CALL, new AbortController().signal);
     expect(result.isError).toBeUndefined();
     const parsed = JSON.parse(result.content as string) as {
       task_id: string;
@@ -198,14 +176,11 @@ test("create_slides creates a task, polls messages, and surfaces the presentatio
         url: "https://files.manus.ai/onboarding.pptx",
         id: "file_deck_1",
         type: "slides",
-        content_type:
-          "application/vnd.openxmlformats-officedocument.presentationml.presentation",
+        content_type: "application/vnd.openxmlformats-officedocument.presentationml.presentation",
       },
     ]);
     expect(urls.some((url) => url.includes("/v2/task.create"))).toBe(true);
-    expect(urls.some((url) => url.includes("/v2/task.listMessages"))).toBe(
-      true,
-    );
+    expect(urls.some((url) => url.includes("/v2/task.listMessages"))).toBe(true);
   } finally {
     globalThis.fetch = originalFetch;
   }
@@ -236,10 +211,7 @@ test("create_slides returns isError when the agent is waiting", async () => {
   }) as unknown as typeof fetch;
   try {
     const bundle = manusTools(fakeEnv(fakeCredentials("key")));
-    const result = await bundle.run(
-      CREATE_SLIDES_CALL,
-      new AbortController().signal,
-    );
+    const result = await bundle.run(CREATE_SLIDES_CALL, new AbortController().signal);
     expect(result.isError).toBe(true);
     expect(result.content).toMatch(/waiting for confirmation/);
   } finally {
@@ -272,10 +244,7 @@ test("create_slides returns isError when the agent_status is error", async () =>
   }) as unknown as typeof fetch;
   try {
     const bundle = manusTools(fakeEnv(fakeCredentials("key")));
-    const result = await bundle.run(
-      CREATE_SLIDES_CALL,
-      new AbortController().signal,
-    );
+    const result = await bundle.run(CREATE_SLIDES_CALL, new AbortController().signal);
     expect(result.isError).toBe(true);
     expect(result.content).toMatch(/agent_status error/);
   } finally {
@@ -285,14 +254,10 @@ test("create_slides returns isError when the agent_status is error", async () =>
 
 test("degrades to an error result (never throws) when the underlying call fails", async () => {
   const originalFetch = globalThis.fetch;
-  globalThis.fetch = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  globalThis.fetch = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
   try {
     const bundle = manusTools(fakeEnv(fakeCredentials("key")));
-    const result = await bundle.run(
-      CREATE_SLIDES_CALL,
-      new AbortController().signal,
-    );
+    const result = await bundle.run(CREATE_SLIDES_CALL, new AbortController().signal);
     expect(result.isError).toBe(true);
   } finally {
     globalThis.fetch = originalFetch;
@@ -310,9 +275,7 @@ test("task_create and task_send_msg expose skill and connector fields", () => {
   }
   expect(create?.properties["structured_output_schema"]?.type).toBe("object");
   expect(send?.properties["structured_output_schema"]).toBeUndefined();
-  expect(create?.properties["agent_profile"]?.description).toContain(
-    "manus-1.6-lite",
-  );
+  expect(create?.properties["agent_profile"]?.description).toContain("manus-1.6-lite");
   expect(create?.properties["agent_profile"]?.description).toMatch(/default/i);
 });
 
@@ -348,14 +311,9 @@ test("task_create result feeds task_detail through the validated GET boundary",
   globalThis.fetch = (async (input: unknown, init?: RequestInit) => {
     const url = String(input);
     if (url === "https://api.manus.ai/v2/task.create") {
-      return new Response(
-        JSON.stringify({ ok: true, task_id: createdTaskId }),
-        { status: 200 },
-      );
+      return new Response(JSON.stringify({ ok: true, task_id: createdTaskId }), { status: 200 });
     }
-    expect(url).toBe(
-      `https://api.manus.ai/v2/task.detail?task_id=${createdTaskId}`,
-    );
+    expect(url).toBe(`https://api.manus.ai/v2/task.detail?task_id=${createdTaskId}`);
     expect(init?.method).toBe("GET");
     return new Response(
       JSON.stringify({
diff --git a/packages/manus-tools/src/tool.ts b/packages/manus-tools/src/tool.ts
index 68730af10b..08a689c665 100644
--- a/packages/manus-tools/src/tool.ts
+++ b/packages/manus-tools/src/tool.ts
@@ -69,9 +69,7 @@ const MESSAGE_SKILL_PROPERTIES = {
   force_skills: STRING_ARRAY(
     "Skill ids the agent must invoke. Forced skills are available even when not listed in enable_skills.",
   ),
-  connectors: STRING_ARRAY(
-    "Connector ids from connector_list to attach to this message.",
-  ),
+  connectors: STRING_ARRAY("Connector ids from connector_list to attach to this message."),
   task_references: STRING_ARRAY(
     "Task ids (up to 20) the agent may browse. Pass the 22-character id, not a URL.",
   ),
@@ -90,16 +88,10 @@ export const MANUS_ENDPOINTS: readonly EndpointSpec[] = [
       title: STRING("Optional custom task title."),
       project_id: STRING("Project to associate this task with."),
       locale: STRING("Output locale, e.g. en or zh-CN."),
-      interactive_mode: BOOLEAN(
-        "When true, the agent may pause to ask questions.",
-      ),
-      hide_in_task_list: BOOLEAN(
-        "When true, hide the task from the Manus task list.",
-      ),
+      interactive_mode: BOOLEAN("When true, the agent may pause to ask questions."),
+      hide_in_task_list: BOOLEAN("When true, hide the task from the Manus task list."),
       share_visibility: STRING("private, team, or public."),
-      agent_profile: STRING(
-        "Defaults to manus-1.6-lite. Other values: manus-1.6, manus-1.6-max.",
-      ),
+      agent_profile: STRING("Defaults to manus-1.6-lite. Other values: manus-1.6, manus-1.6-max."),
       ...MESSAGE_SKILL_PROPERTIES,
       structured_output_schema: OBJECT(
         "JSON Schema for structured output extraction. Sent on the create body, not inside message.",
@@ -133,16 +125,13 @@ export const MANUS_ENDPOINTS: readonly EndpointSpec[] = [
     name: "task_update",
     method: "POST",
     path: "/v2/task.update",
-    description:
-      "Updates a Manus task's title, visibility, or list visibility.",
+    description: "Updates a Manus task's title, visibility, or list visibility.",
     required: ["task_id"],
     properties: {
       task_id: STRING("Task id."),
       title: STRING("New title."),
       share_visibility: STRING("private, team, or public."),
-      enable_visible_in_task_list: BOOLEAN(
-        "Show the task in the Manus task list.",
-      ),
+      enable_visible_in_task_list: BOOLEAN("Show the task in the Manus task list."),
     },
   },
   {
@@ -171,9 +160,7 @@ export const MANUS_ENDPOINTS: readonly EndpointSpec[] = [
     required: ["task_id", "content"],
     properties: {
       task_id: STRING("Task id."),
-      content: STRING(
-        "Follow-up prompt text (sent as message.content ContentPart text).",
-      ),
+      content: STRING("Follow-up prompt text (sent as message.content ContentPart text)."),
       agent_profile: STRING("Optional agent profile override."),
       ...MESSAGE_SKILL_PROPERTIES,
     },
@@ -198,8 +185,7 @@ export const MANUS_ENDPOINTS: readonly EndpointSpec[] = [
     name: "task_confirm",
     method: "POST",
     path: "/v2/task.confirmAction",
-    description:
-      "Confirms a waiting Manus task action (event_id from a waiting status).",
+    description: "Confirms a waiting Manus task action (event_id from a waiting status).",
     required: ["task_id", "event_id"],
     properties: {
       task_id: STRING("Task id."),
@@ -448,9 +434,7 @@ function notConnectedResult(callId: string): ToolResult {
   };
 }
 
-async function resolveManusCredential(
-  env: ManusEnv,
-): Promise<{ fetchImpl: typeof fetch } | null> {
+async function resolveManusCredential(env: ManusEnv): Promise<{ fetchImpl: typeof fetch } | null> {
   if (env.credentials === undefined) return null;
   try {
     const mediated = await env.credentials.resolve(MANUS_CREDENTIAL_HANDLE);
@@ -460,9 +444,7 @@ async function resolveManusCredential(
   }
 }
 
-function asClientConfig(credential: {
-  fetchImpl: typeof fetch;
-}): ManusClientConfig {
+function asClientConfig(credential: { fetchImpl: typeof fetch }): ManusClientConfig {
   return { fetchImpl: credential.fetchImpl };
 }
 
@@ -471,10 +453,7 @@ function stringArg(call: ToolCall, key: string): string | undefined {
   return typeof value === "string" ? value : undefined;
 }
 
-function pickParams(
-  call: ToolCall,
-  keys: readonly string[],
-): Record<string, unknown> {
+function pickParams(call: ToolCall, keys: readonly string[]): Record<string, unknown> {
   const params: Record<string, unknown> = {};
   for (const key of keys) {
     const value = call.arguments[key];
@@ -483,10 +462,7 @@ function pickParams(
   return params;
 }
 
-function missingRequired(
-  call: ToolCall,
-  required: readonly string[],
-): string | undefined {
+function missingRequired(call: ToolCall, required: readonly string[]): string | undefined {
   for (const key of required) {
     const value = call.arguments[key];
     if (value === undefined || value === "") return key;
@@ -502,11 +478,7 @@ function errorResult(callId: string, err: unknown): ToolResult {
   };
 }
 
-async function runEndpoint(
-  env: ManusEnv,
-  call: ToolCall,
-  spec: EndpointSpec,
-): Promise<ToolResult> {
+async function runEndpoint(env: ManusEnv, call: ToolCall, spec: EndpointSpec): Promise<ToolResult> {
   const credential = await resolveManusCredential(env);
   if (credential === null) return notConnectedResult(call.id);
   const missing = missingRequired(call, spec.required);
@@ -673,20 +645,14 @@ function optionalCreateFields(call: ToolCall): {
   return fields;
 }
 
-function stringArrayArg(
-  call: ToolCall,
-  key: string,
-): readonly string[] | undefined {
+function stringArrayArg(call: ToolCall, key: string): readonly string[] | undefined {
   const value = call.arguments[key];
   if (!Array.isArray(value)) return undefined;
   if (!value.every((item) => typeof item === "string")) return undefined;
   return value;
 }
 
-function objectArg(
-  call: ToolCall,
-  key: string,
-): Readonly<Record<string, unknown>> | undefined {
+function objectArg(call: ToolCall, key: string): Readonly<Record<string, unknown>> | undefined {
   const value = call.arguments[key];
   if (typeof value !== "object" || value === null || Array.isArray(value)) {
     return undefined;
@@ -809,9 +775,7 @@ export const manusTools = defineTool<ManusEnv>({
   definitions: [
     { name: CREATE_SLIDES_TOOL },
     ...MANUS_ENDPOINTS.map((spec) =>
-      spec.approval === "ask"
-        ? { name: spec.name, approval: "ask" as const }
-        : { name: spec.name },
+      spec.approval === "ask" ? { name: spec.name, approval: "ask" as const } : { name: spec.name },
     ),
   ],
   factory: (env) => ({
diff --git a/packages/mcp-tools/package.json b/packages/mcp-tools/package.json
index 9fd066c7d3..ccfcdd1bf4 100644
--- a/packages/mcp-tools/package.json
+++ b/packages/mcp-tools/package.json
@@ -1,21 +1,21 @@
 {
   "name": "@corbits/mcp-tools",
+  "version": "0.0.12",
   "description": "Generic MCP server integration: connect any Streamable HTTP MCP server through Plugins and its tools become reachable by any agent via mcp_list_servers/mcp_list_tools/mcp_call",
-  "version": "0.0.11",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "packages/mcp-tools"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "packages/mcp-tools"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -28,12 +28,12 @@
     "@modelcontextprotocol/sdk": "catalog:",
     "arktype": "catalog:"
   },
-  "peerDependencies": {
-    "@intx/agent": "0.3.0",
-    "@intx/types": "0.3.0"
-  },
   "devDependencies": {
     "@types/bun": "catalog:",
     "typescript": "catalog:"
+  },
+  "peerDependencies": {
+    "@intx/agent": "0.3.0",
+    "@intx/types": "0.3.0"
   }
 }
diff --git a/packages/mcp-tools/src/allowance.test.ts b/packages/mcp-tools/src/allowance.test.ts
index a9dae0bb9f..f5e348527a 100644
--- a/packages/mcp-tools/src/allowance.test.ts
+++ b/packages/mcp-tools/src/allowance.test.ts
@@ -24,27 +24,28 @@ const classify = createMcpCallClassifier((_tenantId, slug) =>
 
 describe("createMcpCallClassifier", () => {
   test("a server-verified read-only tool classifies with the connection resource", async () => {
-    expect(
-      await classify("tenant_1", { server: "attio", tool: "search_records" }),
-    ).toEqual({ readOnly: true, resource: mcpServerResource("attio") });
+    expect(await classify("tenant_1", { server: "attio", tool: "search_records" })).toEqual({
+      readOnly: true,
+      resource: mcpServerResource("attio"),
+    });
   });
 
   test("a write tool classifies not read-only", async () => {
-    expect(
-      await classify("tenant_1", { server: "attio", tool: "create_record" }),
-    ).toEqual({ readOnly: false });
+    expect(await classify("tenant_1", { server: "attio", tool: "create_record" })).toEqual({
+      readOnly: false,
+    });
   });
 
   test("an unknown downstream tool fails closed", async () => {
-    expect(
-      await classify("tenant_1", { server: "attio", tool: "drop_everything" }),
-    ).toEqual({ readOnly: false });
+    expect(await classify("tenant_1", { server: "attio", tool: "drop_everything" })).toEqual({
+      readOnly: false,
+    });
   });
 
   test("an unreachable or unconnected server fails closed", async () => {
-    expect(
-      await classify("tenant_1", { server: "ghost", tool: "search_records" }),
-    ).toEqual({ readOnly: false });
+    expect(await classify("tenant_1", { server: "ghost", tool: "search_records" })).toEqual({
+      readOnly: false,
+    });
   });
 
   test("malformed arguments fail closed", async () => {
@@ -96,22 +97,19 @@ describe("GitHub MCP server classification", () => {
   );
 
   test("server-annotated reads classify read-only on the github-mcp resource", async () => {
-    for (const tool of [
-      "search_code",
-      "get_file_contents",
-      "list_pull_requests",
-    ]) {
-      expect(
-        await classifyGithub("tenant_1", { server: "github-mcp", tool }),
-      ).toEqual({ readOnly: true, resource: mcpServerResource("github-mcp") });
+    for (const tool of ["search_code", "get_file_contents", "list_pull_requests"]) {
+      expect(await classifyGithub("tenant_1", { server: "github-mcp", tool })).toEqual({
+        readOnly: true,
+        resource: mcpServerResource("github-mcp"),
+      });
     }
   });
 
   test("writes and unannotated tools never classify read-only", async () => {
     for (const tool of ["create_issue", "merge_pull_request"]) {
-      expect(
-        await classifyGithub("tenant_1", { server: "github-mcp", tool }),
-      ).toEqual({ readOnly: false });
+      expect(await classifyGithub("tenant_1", { server: "github-mcp", tool })).toEqual({
+        readOnly: false,
+      });
     }
   });
 });
diff --git a/packages/mcp-tools/src/allowance.ts b/packages/mcp-tools/src/allowance.ts
index d99ae185d9..2fb9d575a1 100644
--- a/packages/mcp-tools/src/allowance.ts
+++ b/packages/mcp-tools/src/allowance.ts
@@ -39,10 +39,7 @@ export type McpCallClassification =
  */
 export function createMcpCallClassifier(
   loadServerTools: McpServerToolsLoader,
-): (
-  tenantId: string,
-  toolArguments: Record<string, unknown>,
-) => Promise<McpCallClassification> {
+): (tenantId: string, toolArguments: Record<string, unknown>) => Promise<McpCallClassification> {
   return async (tenantId, toolArguments) => {
     const server = toolArguments["server"];
     const tool = toolArguments["tool"];
diff --git a/packages/mcp-tools/src/index.ts b/packages/mcp-tools/src/index.ts
index eb891b5420..3d93d3608c 100644
--- a/packages/mcp-tools/src/index.ts
+++ b/packages/mcp-tools/src/index.ts
@@ -6,17 +6,10 @@ export {
   MCP_CLIENT_VERSION,
   MCP_REQUEST_TIMEOUT_MS,
 } from "./mcp-client";
-export type {
-  McpCallResult,
-  McpToolAnnotations,
-  McpToolInfo,
-} from "./mcp-client";
+export type { McpCallResult, McpToolAnnotations, McpToolInfo } from "./mcp-client";
 
 export { listMcpServers } from "./registry-client";
-export type {
-  McpRegistryClientConfig,
-  McpServerListing,
-} from "./registry-client";
+export type { McpRegistryClientConfig, McpServerListing } from "./registry-client";
 
 export { createMcpCallClassifier, mcpServerResource } from "./allowance";
 export type { McpCallClassification, McpServerToolsLoader } from "./allowance";
diff --git a/packages/mcp-tools/src/mcp-client.test.ts b/packages/mcp-tools/src/mcp-client.test.ts
index 0960a97e4c..f7fb13561b 100644
--- a/packages/mcp-tools/src/mcp-client.test.ts
+++ b/packages/mcp-tools/src/mcp-client.test.ts
@@ -1,11 +1,7 @@
 import { expect, test } from "bun:test";
 import type { Client } from "@modelcontextprotocol/sdk/client/index.js";
 
-import {
-  callMcpTool,
-  listMcpTools,
-  MCP_REQUEST_TIMEOUT_MS,
-} from "./mcp-client";
+import { callMcpTool, listMcpTools, MCP_REQUEST_TIMEOUT_MS } from "./mcp-client";
 
 test("MCP_REQUEST_TIMEOUT_MS is above the SDK 60s default and under a 5 minute chat turn", () => {
   expect(MCP_REQUEST_TIMEOUT_MS).toBe(2 * 60 * 1000);
@@ -14,11 +10,7 @@ test("MCP_REQUEST_TIMEOUT_MS is above the SDK 60s default and under a 5 minute c
 test("callMcpTool passes the request timeout as callTool options", async () => {
   const options: unknown[] = [];
   const client = {
-    callTool: async (
-      _params: unknown,
-      _schema: unknown,
-      requestOptions: unknown,
-    ) => {
+    callTool: async (_params: unknown, _schema: unknown, requestOptions: unknown) => {
       options.push(requestOptions);
       return { content: [], isError: false };
     },
diff --git a/packages/mcp-tools/src/mcp-client.ts b/packages/mcp-tools/src/mcp-client.ts
index 908b1b9143..43b12eac4c 100644
--- a/packages/mcp-tools/src/mcp-client.ts
+++ b/packages/mcp-tools/src/mcp-client.ts
@@ -11,10 +11,7 @@
 // a stale session across calls that may be minutes apart.
 import { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
-import type {
-  FetchLike,
-  Transport,
-} from "@modelcontextprotocol/sdk/shared/transport.js";
+import type { FetchLike, Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
 
 export const MCP_CLIENT_NAME = "corbits-workbench";
 export const MCP_CLIENT_VERSION = "0.0.1";
@@ -79,9 +76,7 @@ export async function withMcpConnection<T>(
 
 /** `tools/list` against an already-open connection, normalized to the
  * shape `mcp_list_tools` reports. */
-export async function listMcpTools(
-  client: Client,
-): Promise<readonly McpToolInfo[]> {
+export async function listMcpTools(client: Client): Promise<readonly McpToolInfo[]> {
   const result = await client.listTools(undefined, MCP_REQUEST_OPTIONS);
   return result.tools.map((tool) => {
     const base: McpToolInfo = {
@@ -89,9 +84,7 @@ export async function listMcpTools(
       inputSchema: tool.inputSchema as Record<string, unknown>,
     };
     const withDescription =
-      tool.description !== undefined
-        ? { ...base, description: tool.description }
-        : base;
+      tool.description !== undefined ? { ...base, description: tool.description } : base;
     return tool.annotations !== undefined
       ? { ...withDescription, annotations: tool.annotations }
       : withDescription;
diff --git a/packages/mcp-tools/src/registry-client.test.ts b/packages/mcp-tools/src/registry-client.test.ts
index 6575487089..e87a66d0c4 100644
--- a/packages/mcp-tools/src/registry-client.test.ts
+++ b/packages/mcp-tools/src/registry-client.test.ts
@@ -11,9 +11,7 @@ test("lists connected MCP servers, sending the workflow-run auth headers", async
     };
     return new Response(
       JSON.stringify({
-        data: [
-          { slug: "notion", name: "Notion", url: "https://notion.example/mcp" },
-        ],
+        data: [{ slug: "notion", name: "Notion", url: "https://notion.example/mcp" }],
       }),
       { status: 200, headers: { "content-type": "application/json" } },
     );
@@ -26,21 +24,15 @@ test("lists connected MCP servers, sending the workflow-run auth headers", async
     fetchImpl,
   });
 
-  expect(servers).toEqual([
-    { slug: "notion", name: "Notion", url: "https://notion.example/mcp" },
-  ]);
-  expect(received?.url).toBe(
-    "https://hub.internal/api/workflow-connections/mcp-servers",
-  );
+  expect(servers).toEqual([{ slug: "notion", name: "Notion", url: "https://notion.example/mcp" }]);
+  expect(received?.url).toBe("https://hub.internal/api/workflow-connections/mcp-servers");
   expect(received?.headers["authorization"]).toBe("Bearer tok");
   expect(received?.headers["x-workflow-run-address"]).toBe("run-1@workbench");
 });
 
 test("throws on a non-ok response", async () => {
   const fetchImpl = (() =>
-    Promise.resolve(
-      new Response("nope", { status: 500 }),
-    )) as unknown as typeof fetch;
+    Promise.resolve(new Response("nope", { status: 500 }))) as unknown as typeof fetch;
   await expect(
     listMcpServers({
       hubConnectionsUrl: "https://hub.internal",
diff --git a/packages/mcp-tools/src/registry-client.ts b/packages/mcp-tools/src/registry-client.ts
index 3301f7580f..d693d6baeb 100644
--- a/packages/mcp-tools/src/registry-client.ts
+++ b/packages/mcp-tools/src/registry-client.ts
@@ -58,16 +58,12 @@ export async function listMcpServers(
     { headers: authHeaders(config) },
   );
   if (!response.ok) {
-    throw new Error(
-      `Fetching MCP servers failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`Fetching MCP servers failed: ${response.status} ${response.statusText}`);
   }
   const body: unknown = await response.json();
   const parsed = McpServersResponse(body);
   if (parsed instanceof type.errors) {
-    throw new Error(
-      `MCP servers response did not match the expected shape: ${parsed.summary}`,
-    );
+    throw new Error(`MCP servers response did not match the expected shape: ${parsed.summary}`);
   }
   return parsed.data;
 }
diff --git a/packages/mcp-tools/src/tool.test.ts b/packages/mcp-tools/src/tool.test.ts
index 57718ba400..50fcb5ae81 100644
--- a/packages/mcp-tools/src/tool.test.ts
+++ b/packages/mcp-tools/src/tool.test.ts
@@ -53,9 +53,7 @@ test("readOnlyGate allows a tool the live tools/list marks readOnlyHint: true",
 });
 
 test("readOnlyGate refuses a tool without readOnlyHint, pointing to mcp_call", () => {
-  const tools: readonly McpToolInfo[] = [
-    { name: "delete_row", inputSchema: {} },
-  ];
+  const tools: readonly McpToolInfo[] = [{ name: "delete_row", inputSchema: {} }];
   const gate = readOnlyGate(tools, "delete_row");
   expect(gate.allowed).toBe(false);
   if (!gate.allowed) {
@@ -70,8 +68,7 @@ test("readOnlyGate never trusts a model's claim about a tool it can't find", ()
 
 test("mcp_list_servers degrades to an honest error when the hub is unreachable, never a fabricated empty list", async () => {
   const originalFetch = globalThis.fetch;
-  globalThis.fetch = (() =>
-    Promise.reject(new Error("network down"))) as unknown as typeof fetch;
+  globalThis.fetch = (() => Promise.reject(new Error("network down"))) as unknown as typeof fetch;
   try {
     const bundle = mcpTools(fakeEnv());
     const result = await bundle.run(
@@ -174,9 +171,7 @@ test("mcp_call against a server with no bound credential degrades honestly", asy
     Promise.resolve(
       new Response(
         JSON.stringify({
-          data: [
-            { slug: "notion", name: "Notion", url: "https://example.test/mcp" },
-          ],
+          data: [{ slug: "notion", name: "Notion", url: "https://example.test/mcp" }],
         }),
         { status: 200, headers: { "content-type": "application/json" } },
       ),
@@ -219,9 +214,7 @@ test("mcp_list_tools {server} surfaces the credential resolve reason instead of
     Promise.resolve(
       new Response(
         JSON.stringify({
-          data: [
-            { slug: "notion", name: "Notion", url: "https://example.test/mcp" },
-          ],
+          data: [{ slug: "notion", name: "Notion", url: "https://example.test/mcp" }],
         }),
         { status: 200, headers: { "content-type": "application/json" } },
       ),
@@ -285,9 +278,7 @@ test("mint -> bind -> resolve round trip: mcp_call resolves credentials by the e
       resolve(handle: string): Promise<MediatedCredential> {
         resolvedWithHandle = handle;
         if (handle !== boundHandle) {
-          return Promise.reject(
-            new Error(`no credential is bound to handle "${handle}"`),
-          );
+          return Promise.reject(new Error(`no credential is bound to handle "${handle}"`));
         }
         return Promise.reject(new Error("server not reachable in this fake"));
       },
diff --git a/packages/mcp-tools/src/tool.ts b/packages/mcp-tools/src/tool.ts
index 3a0eba5f62..d537db8a34 100644
--- a/packages/mcp-tools/src/tool.ts
+++ b/packages/mcp-tools/src/tool.ts
@@ -52,12 +52,7 @@ import type { CredentialCapability, MediatedCredential } from "@intx/types";
 import type { ToolCall, ToolResult } from "@intx/types/runtime";
 import { type } from "arktype";
 
-import {
-  callMcpTool,
-  listMcpTools,
-  withMcpConnection,
-  type McpToolInfo,
-} from "./mcp-client";
+import { callMcpTool, listMcpTools, withMcpConnection, type McpToolInfo } from "./mcp-client";
 import { listMcpServers, type McpServerListing } from "./registry-client";
 
 export const MCP_LIST_SERVERS_TOOL = "mcp_list_servers";
@@ -101,10 +96,7 @@ function registryConfig(env: McpToolsEnv) {
   };
 }
 
-async function findServer(
-  env: McpToolsEnv,
-  slug: string,
-): Promise<McpServerListing | null> {
+async function findServer(env: McpToolsEnv, slug: string): Promise<McpServerListing | null> {
   const servers = await listMcpServers(registryConfig(env));
   return servers.find((server) => server.slug === slug) ?? null;
 }
@@ -121,9 +113,7 @@ async function resolveMcpFetch(
     return { fetch: null, reason: "the run has no credential capability" };
   }
   try {
-    const mediated: MediatedCredential = await env.credentials.resolve(
-      mcpCredentialHandle(slug),
-    );
+    const mediated: MediatedCredential = await env.credentials.resolve(mcpCredentialHandle(slug));
     if (mediated.kind !== "http") {
       return {
         fetch: null,
@@ -139,10 +129,7 @@ async function resolveMcpFetch(
   }
 }
 
-async function runListServers(
-  env: McpToolsEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runListServers(env: McpToolsEnv, call: ToolCall): Promise<ToolResult> {
   try {
     const servers = await listMcpServers(registryConfig(env));
     if (servers.length === 0) {
@@ -215,15 +202,12 @@ function toolSummary(tool: McpToolInfo) {
 async function loadServerTools(
   env: McpToolsEnv,
   server: McpServerListing,
-): Promise<
-  { tools: readonly McpToolInfo[] } | { tools: null; reason: string }
-> {
+): Promise<{ tools: readonly McpToolInfo[] } | { tools: null; reason: string }> {
   const resolved = await resolveMcpFetch(env, server.slug);
   if (resolved.fetch === null) return { tools: null, reason: resolved.reason };
   const fetchImpl = resolved.fetch;
-  const tools = await withMcpConnection(
-    { url: server.url, fetchImpl },
-    (client) => listMcpTools(client),
+  const tools = await withMcpConnection({ url: server.url, fetchImpl }, (client) =>
+    listMcpTools(client),
   );
   return { tools };
 }
@@ -248,9 +232,7 @@ async function runListToolsForServer(
   if (loaded.tools === null) {
     return errorResult(
       call.id,
-      new Error(
-        `MCP server "${slug}" is not reachable from this run: ${loaded.reason}`,
-      ),
+      new Error(`MCP server "${slug}" is not reachable from this run: ${loaded.reason}`),
     );
   }
   return {
@@ -284,9 +266,7 @@ async function runListToolsForTool(
   if (loaded.tools === null) {
     return errorResult(
       call.id,
-      new Error(
-        `MCP server "${slug}" is not reachable from this run: ${loaded.reason}`,
-      ),
+      new Error(`MCP server "${slug}" is not reachable from this run: ${loaded.reason}`),
     );
   }
   const tool = loaded.tools.find((candidate) => candidate.name === toolName);
@@ -317,10 +297,7 @@ async function runListToolsForPattern(
   try {
     regex = new RegExp(pattern, "i");
   } catch (err) {
-    return errorResult(
-      call.id,
-      new Error(`"${pattern}" is not a valid regex: ${String(err)}`),
-    );
+    return errorResult(call.id, new Error(`"${pattern}" is not a valid regex: ${String(err)}`));
   }
   const servers = await listMcpServers(registryConfig(env));
   const matches: {
@@ -345,19 +322,14 @@ async function runListToolsForPattern(
     callId: call.id,
     isError: false,
     content: JSON.stringify(
-      unreachable.length > 0
-        ? { pattern, matches, unreachable }
-        : { pattern, matches },
+      unreachable.length > 0 ? { pattern, matches, unreachable } : { pattern, matches },
     ),
   };
 }
 
 /** No args -- a catalog of every connected server with tool names and
  * truncated descriptions, cheap enough to skim before drilling in. */
-async function runListToolsCatalog(
-  env: McpToolsEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runListToolsCatalog(env: McpToolsEnv, call: ToolCall): Promise<ToolResult> {
   const servers = await listMcpServers(registryConfig(env));
   const catalog = [];
   for (const server of servers) {
@@ -383,17 +355,12 @@ async function runListToolsCatalog(
   };
 }
 
-async function runListTools(
-  env: McpToolsEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runListTools(env: McpToolsEnv, call: ToolCall): Promise<ToolResult> {
   const parsed = ListToolsInput(call.arguments);
   if (parsed instanceof type.errors) {
     return errorResult(
       call.id,
-      new Error(
-        `${MCP_LIST_TOOLS_TOOL} received invalid input: ${parsed.summary}`,
-      ),
+      new Error(`${MCP_LIST_TOOLS_TOOL} received invalid input: ${parsed.summary}`),
     );
   }
   if (parsed.toolName !== undefined && parsed.server === undefined) {
@@ -490,9 +457,7 @@ async function runRead(env: McpToolsEnv, call: ToolCall): Promise<ToolResult> {
       callId: call.id,
       isError: result.isError,
       content: boundReadContent(
-        typeof result.content === "string"
-          ? result.content
-          : JSON.stringify(result.content),
+        typeof result.content === "string" ? result.content : JSON.stringify(result.content),
       ),
     };
   } catch (err) {
@@ -688,10 +653,7 @@ export const mcpTools = defineTool<McpToolsEnv>({
           return runCall(env, call);
         default:
           return Promise.resolve(
-            errorResult(
-              call.id,
-              new Error(`@corbits/mcp-tools: unknown tool "${call.name}"`),
-            ),
+            errorResult(call.id, new Error(`@corbits/mcp-tools: unknown tool "${call.name}"`)),
           );
       }
     },
diff --git a/packages/mcp-tools/test/scenario.test.ts b/packages/mcp-tools/test/scenario.test.ts
index 041d86e116..f83cc6db77 100644
--- a/packages/mcp-tools/test/scenario.test.ts
+++ b/packages/mcp-tools/test/scenario.test.ts
@@ -19,10 +19,7 @@ import {
   mcpTools,
 } from "../src/tool";
 import type { McpToolsEnv } from "../src/tool";
-import {
-  startStubMcpServer,
-  type StubMcpServerHandle,
-} from "./stub-mcp-server";
+import { startStubMcpServer, type StubMcpServerHandle } from "./stub-mcp-server";
 
 let stub: StubMcpServerHandle;
 const TOKEN = "test-bearer-token";
@@ -42,9 +39,7 @@ function fakeCredentials(): CredentialCapability {
   return {
     resolve(handle: string): Promise<MediatedCredential> {
       if (handle !== mcpCredentialHandle("notion")) {
-        return Promise.reject(
-          new Error(`no credential is bound to handle "${handle}"`),
-        );
+        return Promise.reject(new Error(`no credential is bound to handle "${handle}"`));
       }
       return Promise.resolve({
         kind: "http",
@@ -87,12 +82,8 @@ test("mcp_call declares approval: ask, unconditionally", () => {
   expect(callDecl).toBeDefined();
 
   expect(toolApprovalEffect(findDeclaration(MCP_CALL_TOOL))).toBe("ask");
-  expect(toolApprovalEffect(findDeclaration(MCP_LIST_SERVERS_TOOL))).toBe(
-    "allow",
-  );
-  expect(toolApprovalEffect(findDeclaration(MCP_LIST_TOOLS_TOOL))).toBe(
-    "allow",
-  );
+  expect(toolApprovalEffect(findDeclaration(MCP_LIST_SERVERS_TOOL))).toBe("allow");
+  expect(toolApprovalEffect(findDeclaration(MCP_LIST_TOOLS_TOOL))).toBe("allow");
   expect(toolApprovalEffect(findDeclaration(MCP_READ_TOOL))).toBe("allow");
 });
 
@@ -128,9 +119,7 @@ test("mcp_read executes a readOnlyHint tool without approval", async () => {
       new AbortController().signal,
     );
     expect(result.isError).toBeFalsy();
-    expect(JSON.parse(result.content as string)).toEqual([
-      { type: "text", text: "hi" },
-    ]);
+    expect(JSON.parse(result.content as string)).toEqual([{ type: "text", text: "hi" }]);
   } finally {
     globalThis.fetch = originalFetch;
   }
@@ -215,9 +204,7 @@ test("connect -> list servers -> list tools -> call, end to end", async () => {
       tools: { name: string; readOnly: boolean }[];
     };
     expect(toolsBody.server).toBe("notion");
-    const byName = Object.fromEntries(
-      toolsBody.tools.map((t) => [t.name, t.readOnly]),
-    );
+    const byName = Object.fromEntries(toolsBody.tools.map((t) => [t.name, t.readOnly]));
     expect(byName["echo"]).toBe(true);
     expect(byName["write_note"]).toBe(false);
 
@@ -234,9 +221,7 @@ test("connect -> list servers -> list tools -> call, end to end", async () => {
       signal,
     );
     expect(called.isError).toBeFalsy();
-    expect(JSON.parse(called.content as string)).toEqual([
-      { type: "text", text: "hi" },
-    ]);
+    expect(JSON.parse(called.content as string)).toEqual([{ type: "text", text: "hi" }]);
     expect(stub.calls).toEqual([{ name: "echo", args: { text: "hi" } }]);
   } finally {
     globalThis.fetch = originalFetch;
@@ -326,9 +311,7 @@ test("mcp_list_tools truncates long descriptions and schemas like the catalog",
     expect(echo?.description.length ?? 0).toBeLessThanOrEqual(120);
     expect(echo?.description).toContain("[truncated]");
     const schemaText =
-      typeof echo?.inputSchema === "string"
-        ? echo.inputSchema
-        : JSON.stringify(echo?.inputSchema);
+      typeof echo?.inputSchema === "string" ? echo.inputSchema : JSON.stringify(echo?.inputSchema);
     expect(schemaText.length).toBeLessThanOrEqual(120);
     expect(schemaText).toContain("[truncated]");
   } finally {
diff --git a/packages/mcp-tools/test/stub-mcp-server.ts b/packages/mcp-tools/test/stub-mcp-server.ts
index ff10aeefb2..3dff8500be 100644
--- a/packages/mcp-tools/test/stub-mcp-server.ts
+++ b/packages/mcp-tools/test/stub-mcp-server.ts
@@ -10,10 +10,7 @@
 // SDK's own, already a transitive dependency.
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
-import {
-  CallToolRequestSchema,
-  ListToolsRequestSchema,
-} from "@modelcontextprotocol/sdk/types.js";
+import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
 
 export interface StubMcpServerHandle {
   readonly url: string;
@@ -72,8 +69,7 @@ function buildServer(
     const args = (request.params.arguments ?? {}) as Record<string, unknown>;
     calls.push({ name: request.params.name, args });
     if (request.params.name === "echo") {
-      const text =
-        opts?.echoResult !== undefined ? opts.echoResult : String(args["text"]);
+      const text = opts?.echoResult !== undefined ? opts.echoResult : String(args["text"]);
       return { content: [{ type: "text", text }] };
     }
     if (request.params.name === "write_note") {
diff --git a/packages/migration-runner/package.json b/packages/migration-runner/package.json
index 3aff768d7f..3faec80e39 100644
--- a/packages/migration-runner/package.json
+++ b/packages/migration-runner/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/migration-runner",
+  "version": "0.0.1",
   "private": true,
   "description": "Shared runner for package-owned Postgres migrations: schema/ledger bootstrap, per-migration transactional apply, and a session-level advisory lock around the whole run so concurrent hub replicas race-check the ledger safely instead of crashing on a duplicate insert.",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/migration-runner/src/index.ts b/packages/migration-runner/src/index.ts
index 62a8c41459..91f4782c4e 100644
--- a/packages/migration-runner/src/index.ts
+++ b/packages/migration-runner/src/index.ts
@@ -38,15 +38,12 @@ function quoteQualified(schema: string, name: string): string {
 export async function applyPackageMigrations(
   options: ApplyPackageMigrationsOptions,
 ): Promise<ApplyPackageMigrationsReport> {
-  const { databaseUrl, schema, ledgerTable, migrations, packageLabel } =
-    options;
+  const { databaseUrl, schema, ledgerTable, migrations, packageLabel } = options;
   const sql = postgres(databaseUrl, { max: 1, onnotice: () => undefined });
   let holdsLock = false;
   try {
     log.info`waiting for the ${packageLabel} migration lock (${ledgerTable})`;
-    await sql.unsafe(`SELECT pg_advisory_lock(hashtext($1)::bigint)`, [
-      ledgerTable,
-    ]);
+    await sql.unsafe(`SELECT pg_advisory_lock(hashtext($1)::bigint)`, [ledgerTable]);
     holdsLock = true;
 
     await sql.unsafe(`CREATE SCHEMA IF NOT EXISTS ${quoteIdentifier(schema)}`);
@@ -70,18 +67,16 @@ export async function applyPackageMigrations(
       try {
         await sql.begin(async (tx) => {
           await tx.unsafe(migration.sql);
-          await tx.unsafe(
-            `INSERT INTO ${quoteQualified(schema, ledgerTable)} (name) VALUES ($1)`,
-            [migration.name],
-          );
+          await tx.unsafe(`INSERT INTO ${quoteQualified(schema, ledgerTable)} (name) VALUES ($1)`, [
+            migration.name,
+          ]);
         });
         applied.push(migration.name);
       } catch (err) {
         const message = err instanceof Error ? err.message : String(err);
-        throw new Error(
-          `${packageLabel} migration ${migration.name} failed: ${message}`,
-          { cause: err },
-        );
+        throw new Error(`${packageLabel} migration ${migration.name} failed: ${message}`, {
+          cause: err,
+        });
       }
     }
 
@@ -89,9 +84,7 @@ export async function applyPackageMigrations(
   } finally {
     try {
       if (holdsLock) {
-        await sql.unsafe(`SELECT pg_advisory_unlock(hashtext($1)::bigint)`, [
-          ledgerTable,
-        ]);
+        await sql.unsafe(`SELECT pg_advisory_unlock(hashtext($1)::bigint)`, [ledgerTable]);
       }
     } finally {
       await sql.end({ timeout: 5 });
diff --git a/packages/migration-runner/test/migration-runner.test.ts b/packages/migration-runner/test/migration-runner.test.ts
index cc0dd50cef..ddffa16945 100644
--- a/packages/migration-runner/test/migration-runner.test.ts
+++ b/packages/migration-runner/test/migration-runner.test.ts
@@ -41,14 +41,10 @@ const migrations: readonly PackageMigration[] = [
 ];
 
 describeIfDb("applyPackageMigrations", () => {
-  const scratchUrl = scratchUrlFor(
-    databaseUrl ?? "postgres://localhost:5432/unused",
-  );
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused");
   const scratchDatabase = new URL(scratchUrl).pathname.replace(/^\//, "");
 
-  async function withMaintenanceConnection<T>(
-    run: (sql: postgres.Sql) => Promise<T>,
-  ): Promise<T> {
+  async function withMaintenanceConnection<T>(run: (sql: postgres.Sql) => Promise<T>): Promise<T> {
     const maintenanceUrl = new URL(scratchUrl);
     maintenanceUrl.pathname = "/postgres";
     const maintenance = postgres(maintenanceUrl.toString(), {
@@ -94,9 +90,7 @@ describeIfDb("applyPackageMigrations", () => {
       packageLabel: "migration-runner-test",
     });
     expect(second.applied).toEqual([]);
-    expect(second.alreadyApplied.sort()).toEqual(
-      ["0001_widget", "0002_widget_label"].sort(),
-    );
+    expect(second.alreadyApplied.sort()).toEqual(["0001_widget", "0002_widget_label"].sort());
   });
 
   test("two replicas booting concurrently both complete without either crashing on a duplicate ledger insert", async () => {
@@ -116,10 +110,7 @@ describeIfDb("applyPackageMigrations", () => {
     ]);
 
     const appliedNames = [...first.applied, ...second.applied].sort();
-    const alreadyAppliedNames = [
-      ...first.alreadyApplied,
-      ...second.alreadyApplied,
-    ].sort();
+    const alreadyAppliedNames = [...first.alreadyApplied, ...second.alreadyApplied].sort();
 
     expect(new Set(appliedNames).size).toBe(appliedNames.length);
     expect([...appliedNames, ...alreadyAppliedNames].sort()).toEqual(
@@ -145,9 +136,7 @@ describeIfDb("applyPackageMigrations", () => {
     const crashLedger = `${LEDGER_TABLE}_crash`;
 
     const holder = postgres(scratchUrl, { max: 1, onnotice: () => undefined });
-    await holder.unsafe(`SELECT pg_advisory_lock(hashtext($1)::bigint)`, [
-      crashLedger,
-    ]);
+    await holder.unsafe(`SELECT pg_advisory_lock(hashtext($1)::bigint)`, [crashLedger]);
     await holder.end({ timeout: 0 });
 
     const result = await applyPackageMigrations({
@@ -176,9 +165,7 @@ describeIfDb("applyPackageMigrations", () => {
         migrations: brokenMigrations,
         packageLabel: "migration-runner-fail-test",
       }),
-    ).rejects.toThrow(
-      /migration-runner-fail-test migration 0001_broken failed/,
-    );
+    ).rejects.toThrow(/migration-runner-fail-test migration 0001_broken failed/);
 
     // A second run reaching the same lock immediately (rather than hanging
     // behind the first run's connection) proves the failed run's `finally`
diff --git a/packages/mocks/package.json b/packages/mocks/package.json
index 9102485412..475e7609db 100644
--- a/packages/mocks/package.json
+++ b/packages/mocks/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/mocks",
+  "version": "0.0.1",
   "private": true,
   "description": "Deterministic mocks of the inference boundary — local providers first — for tests that need a scriptable model and a record of exactly what was sent",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/mocks/src/ollama/capture.ts b/packages/mocks/src/ollama/capture.ts
index b4752f9472..c7cd31d4dc 100644
--- a/packages/mocks/src/ollama/capture.ts
+++ b/packages/mocks/src/ollama/capture.ts
@@ -19,9 +19,7 @@ function toCapturedMessage(
   return {
     role: message.role,
     content: message.content ?? "",
-    ...(message.tool_call_id !== undefined
-      ? { toolCallId: message.tool_call_id }
-      : {}),
+    ...(message.tool_call_id !== undefined ? { toolCallId: message.tool_call_id } : {}),
     ...(message.tool_calls !== undefined
       ? {
           toolCalls: message.tool_calls.map((call) => ({
@@ -51,12 +49,8 @@ export class CapturedChatRequest {
     this.stream = body.stream ?? false;
     this.tools = (body.tools ?? []).map((t) => ({
       name: t.function.name,
-      ...(t.function.description !== undefined
-        ? { description: t.function.description }
-        : {}),
-      ...(t.function.parameters !== undefined
-        ? { parameters: t.function.parameters }
-        : {}),
+      ...(t.function.description !== undefined ? { description: t.function.description } : {}),
+      ...(t.function.parameters !== undefined ? { parameters: t.function.parameters } : {}),
     }));
     this.messages = body.messages.map(toCapturedMessage);
   }
@@ -73,9 +67,7 @@ export class CapturedChatRequest {
    * a request silently falling back to whatever the adapter defaults to. */
   expectModel(model: string): void {
     if (this.model !== model) {
-      throw new Error(
-        `expected request to be pinned to model "${model}", got "${this.model}"`,
-      );
+      throw new Error(`expected request to be pinned to model "${model}", got "${this.model}"`);
     }
   }
 
@@ -110,9 +102,7 @@ export class CapturedChatRequest {
    * (CL-6448's other half). */
   expectMessageRoles(roles: readonly CapturedMessageRole[]): void {
     const actual = this.roles();
-    const matches =
-      actual.length === roles.length &&
-      actual.every((role, i) => role === roles[i]);
+    const matches = actual.length === roles.length && actual.every((role, i) => role === roles[i]);
     if (!matches) {
       throw new Error(
         `expected message roles ${JSON.stringify(roles)}, got ${JSON.stringify(actual)}`,
@@ -135,10 +125,7 @@ export class CapturedChatRequest {
       const foundAt = this.messages.findIndex((message, i) => {
         if (i < cursor) return false;
         if (message.role !== want.role) return false;
-        if (
-          want.content !== undefined &&
-          !message.content.includes(want.content)
-        ) {
+        if (want.content !== undefined && !message.content.includes(want.content)) {
           return false;
         }
         return true;
diff --git a/packages/mocks/src/ollama/cl-6448-demo.test.ts b/packages/mocks/src/ollama/cl-6448-demo.test.ts
index 809e48c791..dd696da845 100644
--- a/packages/mocks/src/ollama/cl-6448-demo.test.ts
+++ b/packages/mocks/src/ollama/cl-6448-demo.test.ts
@@ -79,10 +79,7 @@ describe("CL-6448 regression shape", () => {
     expect(() =>
       ollama.requests
         .last()
-        .expectHistoryContains([
-          { role: "system" },
-          { role: "user", content: "turn 1" },
-        ]),
+        .expectHistoryContains([{ role: "system" }, { role: "user", content: "turn 1" }]),
     ).toThrow(/expected history to contain/);
   });
 
@@ -93,9 +90,7 @@ describe("CL-6448 regression shape", () => {
     await assembleAndSendCorrectTurn(ollama.fetch, "http://mock-ollama");
 
     const request = ollama.requests.last();
-    expect(() =>
-      request.expectToolsDeclared(["create_agent", "send_message"]),
-    ).not.toThrow();
+    expect(() => request.expectToolsDeclared(["create_agent", "send_message"])).not.toThrow();
     expect(() =>
       request.expectHistoryContains([
         { role: "system" },
diff --git a/packages/mocks/src/ollama/cl-6478-demo.test.ts b/packages/mocks/src/ollama/cl-6478-demo.test.ts
index 27399a9bd4..b3b92c227f 100644
--- a/packages/mocks/src/ollama/cl-6478-demo.test.ts
+++ b/packages/mocks/src/ollama/cl-6478-demo.test.ts
@@ -62,10 +62,7 @@ describe("CL-6478 regression shape", () => {
   test("a turn assembler that persists the malformed name unchanged carries it into every following turn's history", async () => {
     const ollama = createOllamaMock();
     ollama.onChat(
-      sequence([
-        ollama.reply.malformedToolName(),
-        ollama.reply.text("turn 2, room still alive"),
-      ]),
+      sequence([ollama.reply.malformedToolName(), ollama.reply.text("turn 2, room still alive")]),
     );
 
     const turn1Response = await chat(ollama.fetch, {
@@ -115,10 +112,7 @@ describe("CL-6478 regression shape", () => {
   test("with the room's history sanitized (CL-6478's fix applied), the next turn survives with a normal reply", async () => {
     const ollama = createOllamaMock();
     ollama.onChat(
-      sequence([
-        ollama.reply.malformedToolName(),
-        ollama.reply.text("turn 2, room still alive"),
-      ]),
+      sequence([ollama.reply.malformedToolName(), ollama.reply.text("turn 2, room still alive")]),
     );
 
     await chat(ollama.fetch, {
@@ -153,16 +147,12 @@ describe("CL-6478 regression shape", () => {
     );
     const turn2Body = (await turn2Response.json()) as ChatCompletionBody;
 
-    expect(turn2Body.choices[0]?.message.content).toBe(
-      "turn 2, room still alive",
-    );
+    expect(turn2Body.choices[0]?.message.content).toBe("turn 2, room still alive");
     expect(
       ollama.requests
         .last()
         .messages.some((message) =>
-          message.toolCalls?.some((call) =>
-            call.name.includes("\n</parameter"),
-          ),
+          message.toolCalls?.some((call) => call.name.includes("\n</parameter")),
         ),
     ).toBe(false);
   });
diff --git a/packages/mocks/src/ollama/connections-consumer.test.ts b/packages/mocks/src/ollama/connections-consumer.test.ts
index ef38449840..f6f21d2d8c 100644
--- a/packages/mocks/src/ollama/connections-consumer.test.ts
+++ b/packages/mocks/src/ollama/connections-consumer.test.ts
@@ -51,10 +51,7 @@ describe("OllamaMock as a real connections FetchLike consumer", () => {
 
     const catalog = await fetchOllamaModelCatalog(BASE_URL, ollama.fetch);
     expect(catalog).toBeDefined();
-    expect(catalog?.map((m) => m.canonicalName)).toEqual([
-      "embeddinggemma:300m",
-      "qwen3.8:27b",
-    ]);
+    expect(catalog?.map((m) => m.canonicalName)).toEqual(["embeddinggemma:300m", "qwen3.8:27b"]);
 
     const chatCapable = preferCompletionCapable(
       catalog ?? [],
diff --git a/packages/mocks/src/ollama/index.ts b/packages/mocks/src/ollama/index.ts
index bb94b60a3a..35e281b9b7 100644
--- a/packages/mocks/src/ollama/index.ts
+++ b/packages/mocks/src/ollama/index.ts
@@ -1,9 +1,5 @@
 export { createOllamaMock, OllamaMock } from "./mock";
-export type {
-  OllamaChatHandler,
-  CreateOllamaMockOptions,
-  OllamaMockServer,
-} from "./mock";
+export type { OllamaChatHandler, CreateOllamaMockOptions, OllamaMockServer } from "./mock";
 export { sequence } from "./scenarios";
 export type { AdversarialReplies } from "./scenarios";
 export { CapturedChatRequest, CapturedRequestLog } from "./capture";
diff --git a/packages/mocks/src/ollama/mock.test.ts b/packages/mocks/src/ollama/mock.test.ts
index b84ab1d7f2..b4d7458bbd 100644
--- a/packages/mocks/src/ollama/mock.test.ts
+++ b/packages/mocks/src/ollama/mock.test.ts
@@ -23,25 +23,18 @@ describe("createOllamaMock: model catalogue", () => {
       ],
     });
 
-    const response = await ollama.fetch(
-      new Request("http://mock-ollama/api/tags"),
-    );
+    const response = await ollama.fetch(new Request("http://mock-ollama/api/tags"));
     const body = (await response.json()) as { models: { name: string }[] };
 
     expect(response.status).toBe(200);
-    expect(body.models.map((m) => m.name)).toEqual([
-      "qwen3.8:27b",
-      "embeddinggemma:300m",
-    ]);
+    expect(body.models.map((m) => m.name)).toEqual(["qwen3.8:27b", "embeddinggemma:300m"]);
   });
 
   test("setModels updates the catalogue a test connects against mid-run", async () => {
     const ollama = createOllamaMock({ models: [] });
     ollama.setModels([{ name: "qwen3.8:27b" }]);
 
-    const response = await ollama.fetch(
-      new Request("http://mock-ollama/api/tags"),
-    );
+    const response = await ollama.fetch(new Request("http://mock-ollama/api/tags"));
     const body = (await response.json()) as { models: { name: string }[] };
     expect(body.models).toHaveLength(1);
   });
@@ -99,9 +92,7 @@ describe("createOllamaMock: chat completions", () => {
 
   test("tool-call reply carries function name and JSON-encoded arguments", async () => {
     const ollama = createOllamaMock();
-    ollama.onChat(() =>
-      ollama.reply.toolCall("create_agent", { name: "researcher" }),
-    );
+    ollama.onChat(() => ollama.reply.toolCall("create_agent", { name: "researcher" }));
 
     const response = await chat(ollama.fetch, {
       model: "qwen3.8:27b",
@@ -167,12 +158,8 @@ describe("CapturedChatRequest assertions", () => {
       messages: [{ role: "user", content: "hi" }],
     });
 
-    expect(() =>
-      ollama.requests.last().expectModel("qwen3.8:27b"),
-    ).not.toThrow();
-    expect(() => ollama.requests.last().expectModel("other-model")).toThrow(
-      /qwen3\.8:27b/,
-    );
+    expect(() => ollama.requests.last().expectModel("qwen3.8:27b")).not.toThrow();
+    expect(() => ollama.requests.last().expectModel("other-model")).toThrow(/qwen3\.8:27b/);
   });
 
   test("expectToolsDeclared(names) enforces the exact declared set", async () => {
@@ -203,9 +190,7 @@ describe("CapturedChatRequest assertions", () => {
     });
 
     const request = ollama.requests.last();
-    expect(() =>
-      request.expectMessageRoles(["system", "user", "assistant", "user"]),
-    ).not.toThrow();
+    expect(() => request.expectMessageRoles(["system", "user", "assistant", "user"])).not.toThrow();
     expect(() => request.expectMessageRoles(["system", "user"])).toThrow();
   });
 
diff --git a/packages/mocks/src/ollama/mock.ts b/packages/mocks/src/ollama/mock.ts
index c74340f05c..f152d4db49 100644
--- a/packages/mocks/src/ollama/mock.ts
+++ b/packages/mocks/src/ollama/mock.ts
@@ -8,9 +8,7 @@ import {
   type OllamaToolCall,
 } from "./types";
 
-export type OllamaChatHandler = (
-  request: CapturedChatRequest,
-) => OllamaChatReply;
+export type OllamaChatHandler = (request: CapturedChatRequest) => OllamaChatReply;
 
 export type CreateOllamaMockOptions = {
   /** The `/api/tags` catalogue served before any `onChat` handler runs.
@@ -51,9 +49,7 @@ function replyMessage(reply: OllamaChatReply) {
 function finishReasonOf(reply: OllamaChatReply): string {
   return (
     reply.finishReason ??
-    (reply.toolCalls !== undefined && reply.toolCalls.length > 0
-      ? "tool_calls"
-      : "stop")
+    (reply.toolCalls !== undefined && reply.toolCalls.length > 0 ? "tool_calls" : "stop")
   );
 }
 
@@ -162,10 +158,7 @@ export class OllamaMock {
    * (`ollama.fetch(new Request(...))`) still works; the common case is a
    * URL string plus an init object, exactly what those functions build.
    */
-  fetch = async (
-    input: string | Request,
-    init?: RequestInit,
-  ): Promise<Response> => {
+  fetch = async (input: string | Request, init?: RequestInit): Promise<Response> => {
     const request =
       input instanceof Request
         ? init === undefined
@@ -218,10 +211,10 @@ export class OllamaMock {
       });
     }
     const entry = this.models.find((m) => m.name === parsed.model);
-    return new Response(
-      JSON.stringify({ capabilities: entry?.capabilities ?? [] }),
-      { status: 200, headers: { "content-type": "application/json" } },
-    );
+    return new Response(JSON.stringify({ capabilities: entry?.capabilities ?? [] }), {
+      status: 200,
+      headers: { "content-type": "application/json" },
+    });
   }
 
   private handleChatCompletions(rawBody: unknown): Response {
@@ -256,8 +249,6 @@ export class OllamaMock {
   }
 }
 
-export function createOllamaMock(
-  options?: CreateOllamaMockOptions,
-): OllamaMock {
+export function createOllamaMock(options?: CreateOllamaMockOptions): OllamaMock {
   return new OllamaMock(options);
 }
diff --git a/packages/mocks/src/ollama/scenarios.test.ts b/packages/mocks/src/ollama/scenarios.test.ts
index 53c21ec3c3..f12b5b3c5d 100644
--- a/packages/mocks/src/ollama/scenarios.test.ts
+++ b/packages/mocks/src/ollama/scenarios.test.ts
@@ -61,9 +61,7 @@ describe("ollama.reply adversarial scenarios", () => {
 
   test("textlessToolCall carries no text, only a tool call -- a tool-only round, not an empty reply", async () => {
     const ollama = createOllamaMock();
-    ollama.onChat(() =>
-      ollama.reply.textlessToolCall("create_agent", { name: "researcher" }),
-    );
+    ollama.onChat(() => ollama.reply.textlessToolCall("create_agent", { name: "researcher" }));
 
     const response = await chat(ollama.fetch, {
       model: "qwen3.8:27b",
@@ -90,8 +88,7 @@ describe("ollama.reply adversarial scenarios", () => {
       messages: [{ role: "user", content: "book me a flight" }],
     });
     const body = (await response.json()) as ChatCompletionBody;
-    const rawArgs =
-      body.choices[0]?.message.tool_calls?.[0]?.function.arguments;
+    const rawArgs = body.choices[0]?.message.tool_calls?.[0]?.function.arguments;
 
     expect(() => JSON.parse(rawArgs ?? "")).not.toThrow();
     expect(JSON.parse(rawArgs ?? "{}")).toEqual({
@@ -102,17 +99,14 @@ describe("ollama.reply adversarial scenarios", () => {
 
   test("truncatedToolArgs reaches the wire byte-for-byte and is NOT valid JSON", async () => {
     const ollama = createOllamaMock();
-    ollama.onChat(() =>
-      ollama.reply.truncatedToolArgs("search_flights", '{"origin": "SFO"'),
-    );
+    ollama.onChat(() => ollama.reply.truncatedToolArgs("search_flights", '{"origin": "SFO"'));
 
     const response = await chat(ollama.fetch, {
       model: "qwen3.8:27b",
       messages: [{ role: "user", content: "book me a flight" }],
     });
     const body = (await response.json()) as ChatCompletionBody;
-    const rawArgs =
-      body.choices[0]?.message.tool_calls?.[0]?.function.arguments;
+    const rawArgs = body.choices[0]?.message.tool_calls?.[0]?.function.arguments;
 
     expect(rawArgs).toBe('{"origin": "SFO"');
     expect(() => JSON.parse(rawArgs ?? "")).toThrow();
@@ -166,9 +160,7 @@ describe("ollama.reply adversarial scenarios", () => {
 describe("sequence", () => {
   test("scripts one reply per turn, then repeats the last one", async () => {
     const ollama = createOllamaMock();
-    ollama.onChat(
-      sequence([ollama.reply.malformedToolName(), ollama.reply.text("turn 2")]),
-    );
+    ollama.onChat(sequence([ollama.reply.malformedToolName(), ollama.reply.text("turn 2")]));
 
     const turn1 = (await (
       await chat(ollama.fetch, {
@@ -189,9 +181,7 @@ describe("sequence", () => {
       })
     ).json()) as ChatCompletionBody;
 
-    expect(turn1.choices[0]?.message.tool_calls?.[0]?.function.name).toContain(
-      "\n</parameter",
-    );
+    expect(turn1.choices[0]?.message.tool_calls?.[0]?.function.name).toContain("\n</parameter");
     expect(turn2.choices[0]?.message.content).toBe("turn 2");
     // sequence exhausted -- turn 3 repeats the last scripted reply rather
     // than throwing or falling back to a default.
diff --git a/packages/mocks/src/ollama/scenarios.ts b/packages/mocks/src/ollama/scenarios.ts
index e2012f7a47..c11a39d56c 100644
--- a/packages/mocks/src/ollama/scenarios.ts
+++ b/packages/mocks/src/ollama/scenarios.ts
@@ -9,8 +9,7 @@ import type { OllamaChatReply } from "./types";
 // (sanitizeToolNameForPersistence, MALFORMED_TOOL_NAME) -- this is the
 // exact shape it guards against, reproducible here with no GPU. See
 // cl-6478-demo.test.ts for the regression-guard shape.
-const CL_6478_MALFORMED_TOOL_NAME =
-  "@intx/tools-posix/sidecar-bundle:run_shell\n</parameter";
+const CL_6478_MALFORMED_TOOL_NAME = "@intx/tools-posix/sidecar-bundle:run_shell\n</parameter";
 
 // A model calling the tool by its old, retired name instead of the
 // canonical `skills_load` (packages/tools-skills/src/tool.ts). `load_skill`
diff --git a/packages/mocks/src/ollama/types.ts b/packages/mocks/src/ollama/types.ts
index d8f2762366..a29db24c51 100644
--- a/packages/mocks/src/ollama/types.ts
+++ b/packages/mocks/src/ollama/types.ts
@@ -6,8 +6,7 @@ import { type } from "arktype";
 // (`preferCompletionCapable`, capability probing) is testable against the
 // exact values the real instance would answer, with no translation layer
 // duplicated in the mock.
-export type OllamaCapability =
-  "completion" | "embedding" | "tools" | "vision" | "insert";
+export type OllamaCapability = "completion" | "embedding" | "tools" | "vision" | "insert";
 
 export type OllamaCatalogEntry = {
   readonly name: string;
diff --git a/packages/notify/package.json b/packages/notify/package.json
index 5361c6448c..25d274f453 100644
--- a/packages/notify/package.json
+++ b/packages/notify/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/notify",
+  "version": "0.0.1",
   "private": true,
   "description": "Turns things that need a human — a parked approval, a failed run, a mention — into mail in the recipient's mailbox, and fans that mail out to registered sinks",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/notify/src/approval-bridge.ts b/packages/notify/src/approval-bridge.ts
index 90b247865d..7dbf1a2946 100644
--- a/packages/notify/src/approval-bridge.ts
+++ b/packages/notify/src/approval-bridge.ts
@@ -22,18 +22,12 @@ export interface ParkedApproval {
 
 export interface ApprovalNotificationBridgeDeps {
   readonly delivery: NotifyDeliveryDeps;
-  readonly findParkedApproval: (
-    correlationId: string,
-  ) => Promise<ParkedApproval | null>;
+  readonly findParkedApproval: (correlationId: string) => Promise<ParkedApproval | null>;
   /** Who may resolve this approval, and therefore who should hear about it. */
-  readonly listApprovers: (
-    approval: ParkedApproval,
-  ) => Promise<readonly NotifyRecipient[]>;
+  readonly listApprovers: (approval: ParkedApproval) => Promise<readonly NotifyRecipient[]>;
 }
 
-export type ApprovalNotificationBridge = (
-  correlationId: string,
-) => Promise<void>;
+export type ApprovalNotificationBridge = (correlationId: string) => Promise<void>;
 
 /**
  * Build the "an approval was created, so mail it" step. A correlation with no
diff --git a/packages/notify/src/context.ts b/packages/notify/src/context.ts
index 6144f32187..931cd36366 100644
--- a/packages/notify/src/context.ts
+++ b/packages/notify/src/context.ts
@@ -97,11 +97,7 @@ export async function resolveNotifyContext(
     throw new NotifySinkNotConfiguredError(args.sinkName);
   }
   if (credential.kind !== args.credentialKind) {
-    throw new NotifySinkCredentialInvalidError(
-      args.sinkName,
-      args.credentialKind,
-      credential.kind,
-    );
+    throw new NotifySinkCredentialInvalidError(args.sinkName, args.credentialKind, credential.kind);
   }
   return {
     tenantId: args.tenantId,
diff --git a/packages/notify/src/deliver.ts b/packages/notify/src/deliver.ts
index 3a1069b2bf..b0246bd0e2 100644
--- a/packages/notify/src/deliver.ts
+++ b/packages/notify/src/deliver.ts
@@ -58,10 +58,7 @@ export interface NotifyDeliveryReport {
   readonly queuedDispatchCount: number;
 }
 
-function toInboxItems(
-  event: NotificationEvent,
-  addressing: NotifyAddressing,
-): NotifyInboxItem[] {
+function toInboxItems(event: NotificationEvent, addressing: NotifyAddressing): NotifyInboxItem[] {
   const rendered = renderNotification(event);
   const externalId = notificationExternalId(event);
   return event.recipients.map((recipient) => ({
@@ -102,9 +99,7 @@ export async function deliverNotification(
   // that died before its dispatch enqueue (or a benign redelivery).
   // Resolve those ids so the enqueue below repairs the missing rows;
   // without the read-back there is nothing to enqueue for them.
-  const deduped = items.filter(
-    (_, index) => (results[index]?.id ?? null) === null,
-  );
+  const deduped = items.filter((_, index) => (results[index]?.id ?? null) === null);
   const repaired: { id: string; tenantId: string; principalId: string }[] = [];
   if (deduped.length > 0 && deps.resolveExistingMailIds !== undefined) {
     const resolved = await deps.resolveExistingMailIds(deduped);
diff --git a/packages/notify/src/dispatcher.ts b/packages/notify/src/dispatcher.ts
index feb0a01ea2..ba870c3e40 100644
--- a/packages/notify/src/dispatcher.ts
+++ b/packages/notify/src/dispatcher.ts
@@ -16,9 +16,7 @@ export interface NotifyDispatcherDeps {
   readonly sinks: SinkRegistry;
   readonly log: NotifyDispatchLogger;
   /** Rebuilds the event a mail row came from, so a sink renders the same thing the mailbox shows. */
-  readonly loadEvent: (
-    row: NotifyDispatchRow,
-  ) => Promise<NotificationEvent | null>;
+  readonly loadEvent: (row: NotifyDispatchRow) => Promise<NotificationEvent | null>;
   readonly tickIntervalMs: number;
   readonly batchSize: number;
   readonly maxAttempts: number;
@@ -36,9 +34,7 @@ function backoffFrom(now: Date, attempts: number, baseMs: number): Date {
   return new Date(now.getTime() + baseMs * 2 ** (attempts - 1));
 }
 
-export function createNotifyDispatcher(
-  deps: NotifyDispatcherDeps,
-): NotifyDispatcher {
+export function createNotifyDispatcher(deps: NotifyDispatcherDeps): NotifyDispatcher {
   let timer: ReturnType<typeof setInterval> | undefined;
 
   async function settleOne(row: NotifyDispatchRow, now: Date): Promise<void> {
@@ -113,9 +109,7 @@ export function createNotifyDispatcher(
       status: exhausted ? "dead" : "failed",
       attempts,
       lastError: result.error,
-      nextAttemptAt: exhausted
-        ? now
-        : backoffFrom(now, attempts, deps.retryBackoffMs),
+      nextAttemptAt: exhausted ? now : backoffFrom(now, attempts, deps.retryBackoffMs),
     });
   }
 
diff --git a/packages/notify/src/events.ts b/packages/notify/src/events.ts
index df952e058e..1ca47968a5 100644
--- a/packages/notify/src/events.ts
+++ b/packages/notify/src/events.ts
@@ -68,8 +68,7 @@ export type NotifyRecipient = typeof NotifyRecipient.infer;
 export type ApprovalNotification = typeof ApprovalNotification.infer;
 export type RunFailureNotification = typeof RunFailureNotification.infer;
 export type MentionNotification = typeof MentionNotification.infer;
-export type CredentialExpiredNotification =
-  typeof CredentialExpiredNotification.infer;
+export type CredentialExpiredNotification = typeof CredentialExpiredNotification.infer;
 export type NotificationEvent = typeof NotificationEvent.infer;
 
 export class InvalidNotificationEventError extends Error {
diff --git a/packages/notify/src/index.ts b/packages/notify/src/index.ts
index c4e14bae31..b502bf171e 100644
--- a/packages/notify/src/index.ts
+++ b/packages/notify/src/index.ts
@@ -67,11 +67,7 @@ export {
   type ResolveNotifyContextArgs,
   type ResolveNotifyContextDeps,
 } from "./context";
-export {
-  notificationExternalId,
-  renderNotification,
-  type RenderedNotification,
-} from "./render";
+export { notificationExternalId, renderNotification, type RenderedNotification } from "./render";
 export type {
   MailboxDelivery,
   NotifyAddressing,
diff --git a/packages/notify/src/migrations.ts b/packages/notify/src/migrations.ts
index 8b39ecb2af..64b14d8618 100644
--- a/packages/notify/src/migrations.ts
+++ b/packages/notify/src/migrations.ts
@@ -67,9 +67,7 @@ export async function applyNotifyMigrations(
       `CREATE TABLE IF NOT EXISTS ${quoteQualified(SCHEMA, LEDGER_TABLE)} (` +
         `name text PRIMARY KEY, applied_at timestamptz NOT NULL DEFAULT now())`,
     );
-    const rows = await sql.unsafe(
-      `SELECT name FROM ${quoteQualified(SCHEMA, LEDGER_TABLE)}`,
-    );
+    const rows = await sql.unsafe(`SELECT name FROM ${quoteQualified(SCHEMA, LEDGER_TABLE)}`);
     const alreadyApplied = new Set(rows.map((row) => String(row["name"])));
     const applied: string[] = [];
     for (const migration of notifyMigrations) {
diff --git a/packages/notify/src/render.ts b/packages/notify/src/render.ts
index 71bed63ae9..4794fda707 100644
--- a/packages/notify/src/render.ts
+++ b/packages/notify/src/render.ts
@@ -29,9 +29,7 @@ function format(value: unknown): string {
   return JSON.stringify(value) ?? String(value);
 }
 
-export function renderNotification(
-  event: NotificationEvent,
-): RenderedNotification {
+export function renderNotification(event: NotificationEvent): RenderedNotification {
   if (event.kind === "approval") {
     return {
       subject: `Approve “${event.toolName}”?`,
diff --git a/packages/notify/src/schema.ts b/packages/notify/src/schema.ts
index 23846a13f8..b051d5d332 100644
--- a/packages/notify/src/schema.ts
+++ b/packages/notify/src/schema.ts
@@ -21,15 +21,9 @@ export const notifyDispatch = notifySchema.table(
     }).notNull(),
     attempts: integer("attempts").notNull().default(0),
     lastError: text("last_error"),
-    nextAttemptAt: timestamp("next_attempt_at", { withTimezone: true })
-      .notNull()
-      .defaultNow(),
-    createdAt: timestamp("created_at", { withTimezone: true })
-      .notNull()
-      .defaultNow(),
-    updatedAt: timestamp("updated_at", { withTimezone: true })
-      .notNull()
-      .defaultNow(),
+    nextAttemptAt: timestamp("next_attempt_at", { withTimezone: true }).notNull().defaultNow(),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow(),
   },
   (t) => [index("notify_dispatch_due_idx").on(t.status, t.nextAttemptAt)],
 );
diff --git a/packages/notify/src/sinks.ts b/packages/notify/src/sinks.ts
index 6c726fd0a5..2647a9f9b6 100644
--- a/packages/notify/src/sinks.ts
+++ b/packages/notify/src/sinks.ts
@@ -55,8 +55,7 @@ export function createSinkRegistry(): SinkRegistry {
   const plugins = new Map<string, NotificationSinkPlugin>();
   return {
     register(plugin) {
-      if (plugins.has(plugin.name))
-        throw new DuplicateSinkNameError(plugin.name);
+      if (plugins.has(plugin.name)) throw new DuplicateSinkNameError(plugin.name);
       plugins.set(plugin.name, plugin);
     },
     get(name) {
diff --git a/packages/notify/src/store.ts b/packages/notify/src/store.ts
index e6a9a5a2ab..ccc0d3fa2d 100644
--- a/packages/notify/src/store.ts
+++ b/packages/notify/src/store.ts
@@ -7,9 +7,8 @@ import { generateId } from "@intx/hub-common";
 
 import { notifyDispatch } from "./schema";
 
-export type NotifyDb<
-  TSchema extends Record<string, unknown> = Record<string, never>,
-> = PostgresJsDatabase<TSchema>;
+export type NotifyDb<TSchema extends Record<string, unknown> = Record<string, never>> =
+  PostgresJsDatabase<TSchema>;
 
 export type NotifyDispatchStatus = "pending" | "delivered" | "failed" | "dead";
 
@@ -51,9 +50,7 @@ export interface NotifyDispatchStore {
 
 const ACTIVE_STATUSES: NotifyDispatchStatus[] = ["pending", "failed"];
 
-export function createDrizzleNotifyDispatchStore(
-  db: NotifyDb,
-): NotifyDispatchStore {
+export function createDrizzleNotifyDispatchStore(db: NotifyDb): NotifyDispatchStore {
   return {
     async enqueue(inputs) {
       if (inputs.length === 0) return;
@@ -126,8 +123,7 @@ function toRow(row: typeof notifyDispatch.$inferSelect): NotifyDispatchRow {
 
 export function createInMemoryNotifyDispatchStore(): NotifyDispatchStore {
   const rows = new Map<string, NotifyDispatchRow>();
-  const keyOf = (mailboxRowId: string, sinkName: string) =>
-    `${mailboxRowId}\u0000${sinkName}`;
+  const keyOf = (mailboxRowId: string, sinkName: string) => `${mailboxRowId}\u0000${sinkName}`;
   return {
     async enqueue(inputs) {
       for (const input of inputs) {
@@ -148,10 +144,7 @@ export function createInMemoryNotifyDispatchStore(): NotifyDispatchStore {
     },
     async findDue(now, limit) {
       return [...rows.values()]
-        .filter(
-          (row) =>
-            ACTIVE_STATUSES.includes(row.status) && row.nextAttemptAt <= now,
-        )
+        .filter((row) => ACTIVE_STATUSES.includes(row.status) && row.nextAttemptAt <= now)
         .sort((a, b) => a.nextAttemptAt.getTime() - b.nextAttemptAt.getTime())
         .slice(0, limit);
     },
@@ -172,9 +165,7 @@ export function createInMemoryNotifyDispatchStore(): NotifyDispatchStore {
       }
     },
     async listFor(mailboxRowId) {
-      return [...rows.values()].filter(
-        (row) => row.mailboxRowId === mailboxRowId,
-      );
+      return [...rows.values()].filter((row) => row.mailboxRowId === mailboxRowId);
     },
   };
 }
diff --git a/packages/notify/test/deliver.test.ts b/packages/notify/test/deliver.test.ts
index ffa8e5f307..ef6edf77bf 100644
--- a/packages/notify/test/deliver.test.ts
+++ b/packages/notify/test/deliver.test.ts
@@ -43,8 +43,7 @@ function recordingMailbox(): {
 }
 
 function dedupingMailbox(): MailboxDelivery {
-  return async (items) =>
-    items.map((item) => ({ messageKey: item.externalId, id: null }));
+  return async (items) => items.map((item) => ({ messageKey: item.externalId, id: null }));
 }
 
 function depsWith(mail: MailboxDelivery): NotifyDeliveryDeps {
@@ -140,10 +139,7 @@ describe("deliverNotification", () => {
       deliver: async () => delivered,
     });
 
-    const report = await deliverNotification(
-      { mail, addressing, dispatch, sinks },
-      approval,
-    );
+    const report = await deliverNotification({ mail, addressing, dispatch, sinks }, approval);
 
     expect(report.queuedDispatchCount).toBe(1);
     const rows = await dispatch.listFor("mail-1");
@@ -197,9 +193,7 @@ describe("deliverNotification", () => {
       createdAt: "2026-08-13T09:00:00.000Z",
     });
 
-    expect(written[0]?.subject).toBe(
-      "Reconnect Hugging Face — your token expired",
-    );
+    expect(written[0]?.subject).toBe("Reconnect Hugging Face — your token expired");
     expect(written[0]?.body).toContain("personal access token");
     expect(written[0]?.externalId).toBe("cred_hf_1");
     expect(written[0]?.refs).toContainEqual({
@@ -266,8 +260,7 @@ describe("deliverNotification crash window (CL-7238)", () => {
     const mail: MailboxDelivery = async (items, opts) =>
       items.map((item) => {
         const existing = rows.get(keyOf(item));
-        if (existing !== undefined)
-          return { messageKey: item.externalId, id: null };
+        if (existing !== undefined) return { messageKey: item.externalId, id: null };
         next += 1;
         const id = `mail-${next}`;
         rows.set(keyOf(item), id);
@@ -290,9 +283,7 @@ describe("deliverNotification crash window (CL-7238)", () => {
       enqueue: async (inputs) => {
         if (crashNext) {
           crashNext = false;
-          throw new Error(
-            "boom: crash between the mail write and the dispatch enqueue",
-          );
+          throw new Error("boom: crash between the mail write and the dispatch enqueue");
         }
         await inner.enqueue(inputs);
       },
@@ -318,9 +309,7 @@ describe("deliverNotification crash window (CL-7238)", () => {
       deliver: async () => delivered,
     });
     const deps: NotifyDeliveryDeps = { mail, addressing, dispatch, sinks };
-    return resolveExistingMailIds === undefined
-      ? deps
-      : { ...deps, resolveExistingMailIds };
+    return resolveExistingMailIds === undefined ? deps : { ...deps, resolveExistingMailIds };
   }
 
   test("a redelivery repairs the crash window without double-queueing", async () => {
diff --git a/packages/notify/test/migrations.test.ts b/packages/notify/test/migrations.test.ts
index 67d4682f35..72dbda8ae3 100644
--- a/packages/notify/test/migrations.test.ts
+++ b/packages/notify/test/migrations.test.ts
@@ -20,9 +20,7 @@ const databaseUrl = e2eDatabaseUrl();
 const describeIfDb = dbGate(databaseUrl, import.meta.path);
 
 describeIfDb("applyNotifyMigrations", () => {
-  const scratchUrl = scratchUrlFor(
-    databaseUrl ?? "postgres://localhost:5432/unused",
-  );
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused");
   const scratchDatabase = new URL(scratchUrl).pathname.replace(/^\//, "");
 
   beforeAll(async () => {
diff --git a/packages/ollama-adapter/package.json b/packages/ollama-adapter/package.json
index a9cb5f86c2..e10b443476 100644
--- a/packages/ollama-adapter/package.json
+++ b/packages/ollama-adapter/package.json
@@ -1,22 +1,22 @@
 {
   "name": "@corbits/ollama-adapter",
-  "description": "Custom Interchange inference adapter for the Ollama openai-compatible provider: operator-configured context-window (num_ctx), max-output-token, and reasoning-effort overrides, general or per model, wrapping the built-in OpenAI adapter's request/response handling rather than reimplementing it.",
   "version": "0.0.2",
+  "description": "Custom Interchange inference adapter for the Ollama openai-compatible provider: operator-configured context-window (num_ctx), max-output-token, and reasoning-effort overrides, general or per model, wrapping the built-in OpenAI adapter's request/response handling rather than reimplementing it.",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "exports": {
-    ".": "./src/index.ts",
-    "./overrides": "./src/overrides.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "packages/ollama-adapter"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "packages/ollama-adapter"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts",
+    "./overrides": "./src/overrides.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -28,12 +28,12 @@
   "dependencies": {
     "arktype": "catalog:"
   },
-  "peerDependencies": {
-    "@intx/inference": "0.3.0",
-    "@intx/types": "0.3.0"
-  },
   "devDependencies": {
     "@types/bun": "catalog:",
     "typescript": "catalog:"
+  },
+  "peerDependencies": {
+    "@intx/inference": "0.3.0",
+    "@intx/types": "0.3.0"
   }
 }
diff --git a/packages/ollama-adapter/src/adapter.test.ts b/packages/ollama-adapter/src/adapter.test.ts
index b25dc73c5f..6c3cee8371 100644
--- a/packages/ollama-adapter/src/adapter.test.ts
+++ b/packages/ollama-adapter/src/adapter.test.ts
@@ -32,8 +32,7 @@ const memorySearchTool: ToolDefinition = {
   inputSchema: { type: "object" },
 };
 
-const CL_7186_PAYLOAD =
-  '{"name":"memory_search","parameters":{"query":"this person"}}';
+const CL_7186_PAYLOAD = '{"name":"memory_search","parameters":{"query":"this person"}}';
 
 function bodyOf(built: { body: string }): Record<string, unknown> {
   return JSON.parse(built.body) as Record<string, unknown>;
@@ -50,9 +49,7 @@ function textDeltas(events: readonly InferenceEvent[]): InferenceEvent[] {
 function argumentFragments(events: readonly InferenceEvent[]): string {
   return events
     .filter((event) => event.type === "inference.tool_call.delta")
-    .map(
-      (event) => (event.data as { argumentFragment: string }).argumentFragment,
-    )
+    .map((event) => (event.data as { argumentFragment: string }).argumentFragment)
     .join("");
 }
 
@@ -60,8 +57,7 @@ function expectSharedToolCallId(events: readonly InferenceEvent[]): void {
   const ids = events
     .filter(
       (event) =>
-        event.type === "inference.tool_call.start" ||
-        event.type === "inference.tool_call.delta",
+        event.type === "inference.tool_call.start" || event.type === "inference.tool_call.delta",
     )
     .map((event) => (event.data as { callId: string }).callId);
   expect(ids.length).toBeGreaterThan(0);
@@ -104,12 +100,8 @@ describe("createOllamaAdapter", () => {
       default: { numCtx: 8192 },
       perModel: { "gpt-oss:20b": { numCtx: 65536 } },
     });
-    const forOverriddenModel = bodyOf(
-      wrapped.buildRequest(messages, "gpt-oss:20b", options),
-    );
-    const forOtherModel = bodyOf(
-      wrapped.buildRequest(messages, "qwen3.8:27b", options),
-    );
+    const forOverriddenModel = bodyOf(wrapped.buildRequest(messages, "gpt-oss:20b", options));
+    const forOtherModel = bodyOf(wrapped.buildRequest(messages, "qwen3.8:27b", options));
     expect(forOverriddenModel["options"]).toEqual({ num_ctx: 65536 });
     expect(forOtherModel["options"]).toEqual({ num_ctx: 8192 });
   });
@@ -148,9 +140,7 @@ describe("createOllamaAdapter", () => {
       ),
     ];
     expect(textDeltas(events)).toEqual([]);
-    expect((toolStarts(events)[0]?.data as { name: string }).name).toBe(
-      "memory_search",
-    );
+    expect((toolStarts(events)[0]?.data as { name: string }).name).toBe("memory_search");
     expectSharedToolCallId(events);
     expect(JSON.parse(argumentFragments(events))).toEqual({
       query: "this person",
@@ -174,9 +164,7 @@ describe("createOllamaAdapter", () => {
       }),
     );
     expect(textDeltas(events)).toEqual([]);
-    expect((toolStarts(events)[0]?.data as { name: string }).name).toBe(
-      "memory_search",
-    );
+    expect((toolStarts(events)[0]?.data as { name: string }).name).toBe("memory_search");
     expectSharedToolCallId(events);
     expect(JSON.parse(argumentFragments(events))).toEqual({
       query: "this person",
diff --git a/packages/ollama-adapter/src/adapter.ts b/packages/ollama-adapter/src/adapter.ts
index bead8d88d9..b9391a0f00 100644
--- a/packages/ollama-adapter/src/adapter.ts
+++ b/packages/ollama-adapter/src/adapter.ts
@@ -13,22 +13,10 @@
 // same `reasoning_effort` field Ollama already recognizes for gpt-oss
 // models on this endpoint.
 import { createOpenAIAdapter } from "@intx/inference/providers";
-import type {
-  AdapterFactory,
-  BuiltRequest,
-  ProviderAdapter,
-} from "@intx/inference";
-import type {
-  InferenceEvent,
-  LastCycleSource,
-  TokenUsage,
-} from "@intx/types/runtime";
+import type { AdapterFactory, BuiltRequest, ProviderAdapter } from "@intx/inference";
+import type { InferenceEvent, LastCycleSource, TokenUsage } from "@intx/types/runtime";
 
-import {
-  parseOllamaAdapterConfig,
-  resolveOverride,
-  type OllamaAdapterOverride,
-} from "./overrides";
+import { parseOllamaAdapterConfig, resolveOverride, type OllamaAdapterOverride } from "./overrides";
 import { createThinkSplitState, reclassifyThinkingEvents } from "./think-tags";
 import {
   createInlineToolJsonState,
@@ -45,10 +33,7 @@ type OllamaChatBody = {
   stream_options?: { include_usage: boolean };
 };
 
-function applyOverride(
-  built: BuiltRequest,
-  override: OllamaAdapterOverride,
-): BuiltRequest {
+function applyOverride(built: BuiltRequest, override: OllamaAdapterOverride): BuiltRequest {
   const body = JSON.parse(built.body) as OllamaChatBody;
   // Without include_usage, Ollama's OpenAI-compat stream often ends with no
   // usage object; the harness then synthesizes zero token counts that Insights
@@ -78,9 +63,7 @@ function isPlainObject(value: unknown): value is Record<string, unknown> {
 }
 
 function asNonNegativeInt(value: unknown): number | null {
-  return typeof value === "number" && Number.isInteger(value) && value >= 0
-    ? value
-    : null;
+  return typeof value === "number" && Number.isInteger(value) && value >= 0 ? value : null;
 }
 
 function openaiShapedUsage(value: unknown): TokenUsage | null {
@@ -90,9 +73,7 @@ function openaiShapedUsage(value: unknown): TokenUsage | null {
   if (input === null && output === null) return null;
   const details = value["prompt_tokens_details"];
   const completionDetails = value["completion_tokens_details"];
-  const cacheRead = isPlainObject(details)
-    ? asNonNegativeInt(details["cached_tokens"])
-    : null;
+  const cacheRead = isPlainObject(details) ? asNonNegativeInt(details["cached_tokens"]) : null;
   const thinking = isPlainObject(completionDetails)
     ? asNonNegativeInt(completionDetails["reasoning_tokens"])
     : null;
@@ -183,10 +164,7 @@ export const createOllamaAdapter: AdapterFactory = (
     parseResponse: (sseData) =>
       withOllamaUsage(
         reclassifyInlineToolJsonEvents(
-          reclassifyThinkingEvents(
-            inner.parseResponse(sseData),
-            streamThinkState,
-          ),
+          reclassifyThinkingEvents(inner.parseResponse(sseData), streamThinkState),
           streamInlineState,
           { flush: responseChunkIsTerminal(sseData) },
         ),
@@ -196,10 +174,7 @@ export const createOllamaAdapter: AdapterFactory = (
     parseJSONResponse: (body) =>
       withOllamaUsage(
         reclassifyInlineToolJsonEvents(
-          reclassifyThinkingEvents(
-            inner.parseJSONResponse(body),
-            jsonThinkState,
-          ),
+          reclassifyThinkingEvents(inner.parseJSONResponse(body), jsonThinkState),
           jsonInlineState,
           { flush: true },
         ),
diff --git a/packages/ollama-adapter/src/inline-tool-json.test.ts b/packages/ollama-adapter/src/inline-tool-json.test.ts
index 3e131a7409..2b201989f5 100644
--- a/packages/ollama-adapter/src/inline-tool-json.test.ts
+++ b/packages/ollama-adapter/src/inline-tool-json.test.ts
@@ -1,13 +1,9 @@
 import { describe, expect, test } from "bun:test";
 import type { InferenceEvent } from "@intx/types/runtime";
 
-import {
-  createInlineToolJsonState,
-  reclassifyInlineToolJsonEvents,
-} from "./inline-tool-json";
+import { createInlineToolJsonState, reclassifyInlineToolJsonEvents } from "./inline-tool-json";
 
-const CL_7186_PAYLOAD =
-  '{"name":"memory_search","parameters":{"query":"this person"}}';
+const CL_7186_PAYLOAD = '{"name":"memory_search","parameters":{"query":"this person"}}';
 
 function textDelta(token: string, seq = 1): InferenceEvent {
   return {
@@ -39,11 +35,7 @@ function reclassify(
   declaredNames: Iterable<string>,
   opts?: { flush?: boolean },
 ): InferenceEvent[] {
-  return reclassifyInlineToolJsonEvents(
-    events,
-    createInlineToolJsonState(declaredNames),
-    opts,
-  );
+  return reclassifyInlineToolJsonEvents(events, createInlineToolJsonState(declaredNames), opts);
 }
 
 function toolStarts(events: readonly InferenceEvent[]): InferenceEvent[] {
@@ -58,8 +50,7 @@ function toolCallIds(events: readonly InferenceEvent[]): string[] {
   return events
     .filter(
       (event) =>
-        event.type === "inference.tool_call.start" ||
-        event.type === "inference.tool_call.delta",
+        event.type === "inference.tool_call.start" || event.type === "inference.tool_call.delta",
     )
     .map((event) => (event.data as { callId: string }).callId);
 }
@@ -73,18 +64,13 @@ function expectSharedToolCallId(events: readonly InferenceEvent[]): void {
 function argumentFragments(events: readonly InferenceEvent[]): string {
   return events
     .filter((event) => event.type === "inference.tool_call.delta")
-    .map(
-      (event) => (event.data as { argumentFragment: string }).argumentFragment,
-    )
+    .map((event) => (event.data as { argumentFragment: string }).argumentFragment)
     .join("");
 }
 
 describe("reclassifyInlineToolJsonEvents", () => {
   test("the CL-7186 memory_search JSON becomes a tool_call.start with no text", () => {
-    const out = reclassify(
-      [textDelta(CL_7186_PAYLOAD), usageEvent()],
-      ["memory_search"],
-    );
+    const out = reclassify([textDelta(CL_7186_PAYLOAD), usageEvent()], ["memory_search"]);
     expect(textDeltas(out)).toEqual([]);
     const starts = toolStarts(out);
     expect(starts).toHaveLength(1);
@@ -114,9 +100,7 @@ describe("reclassifyInlineToolJsonEvents", () => {
 
     const flushed = reclassifyInlineToolJsonEvents([], state, { flush: true });
     expect(textDeltas(flushed)).toEqual([]);
-    expect((toolStarts(flushed)[0]?.data as { name: string }).name).toBe(
-      "memory_search",
-    );
+    expect((toolStarts(flushed)[0]?.data as { name: string }).name).toBe("memory_search");
     expectSharedToolCallId(flushed);
     expect(JSON.parse(argumentFragments(flushed))).toEqual({
       query: "this person",
@@ -124,8 +108,7 @@ describe("reclassifyInlineToolJsonEvents", () => {
   });
 
   test("arguments is accepted as the args object, same as parameters", () => {
-    const payload =
-      '{"name":"memory_search","arguments":{"query":"this person"}}';
+    const payload = '{"name":"memory_search","arguments":{"query":"this person"}}';
     const out = reclassify([textDelta(payload)], ["memory_search"], {
       flush: true,
     });
@@ -137,8 +120,7 @@ describe("reclassifyInlineToolJsonEvents", () => {
   });
 
   test("an unknown name stays text even when the JSON shape matches", () => {
-    const payload =
-      '{"name":"not_a_tool","parameters":{"query":"this person"}}';
+    const payload = '{"name":"not_a_tool","parameters":{"query":"this person"}}';
     const original = [textDelta(payload)];
     const out = reclassify(original, ["memory_search"], { flush: true });
     expect(out).toEqual(original);
diff --git a/packages/ollama-adapter/src/inline-tool-json.ts b/packages/ollama-adapter/src/inline-tool-json.ts
index 0a6edc3072..b377150f34 100644
--- a/packages/ollama-adapter/src/inline-tool-json.ts
+++ b/packages/ollama-adapter/src/inline-tool-json.ts
@@ -36,11 +36,7 @@ const INLINE_TOOL_CALL_ID = "ollama-inline-0";
 const EMPTY_PARTIAL = { text: "" };
 
 function isPlainObject(value: unknown): value is Record<string, unknown> {
-  return (
-    typeof value === "object" &&
-    value !== null &&
-    Array.isArray(value) === false
-  );
+  return typeof value === "object" && value !== null && Array.isArray(value) === false;
 }
 
 type ParseResult =
@@ -72,12 +68,7 @@ function salvageToolCall(
   declaredNames: ReadonlySet<string>,
 ): { name: string; args: Record<string, unknown> } | null {
   for (const key of Object.keys(value)) {
-    if (
-      key !== "name" &&
-      key !== "parameters" &&
-      key !== "arguments" &&
-      key !== "id"
-    ) {
+    if (key !== "name" && key !== "parameters" && key !== "arguments" && key !== "id") {
       return null;
     }
   }
@@ -101,9 +92,7 @@ function salvageToolCall(
   return { name, args: raw };
 }
 
-function lastHeldText(
-  held: readonly InferenceEvent[],
-): InferenceEvent | undefined {
+function lastHeldText(held: readonly InferenceEvent[]): InferenceEvent | undefined {
   for (let i = held.length - 1; i >= 0; i--) {
     const event = held[i];
     if (event?.type === "inference.text.delta") {
@@ -119,8 +108,7 @@ function emitToolCallEvents(
 ): InferenceEvent[] {
   const seq = template?.seq ?? 0;
   const index =
-    template?.type === "inference.text.delta" &&
-    template.data.index !== undefined
+    template?.type === "inference.text.delta" && template.data.index !== undefined
       ? template.data.index
       : 0;
   return [
@@ -162,19 +150,13 @@ function matchingSalvage(
   return salvageToolCall(parsed.value, state.declaredNames);
 }
 
-function releaseHeldAsText(
-  output: InferenceEvent[],
-  state: InlineToolJsonState,
-): void {
+function releaseHeldAsText(output: InferenceEvent[], state: InlineToolJsonState): void {
   output.push(...state.held);
   state.held = [];
   state.verdict = "text";
 }
 
-function flushPending(
-  output: InferenceEvent[],
-  state: InlineToolJsonState,
-): void {
+function flushPending(output: InferenceEvent[], state: InlineToolJsonState): void {
   if (state.verdict !== "pending") {
     return;
   }
@@ -191,10 +173,7 @@ function flushPending(
   releaseHeldAsText(output, state);
 }
 
-function inspectHeldText(
-  output: InferenceEvent[],
-  state: InlineToolJsonState,
-): void {
+function inspectHeldText(output: InferenceEvent[], state: InlineToolJsonState): void {
   const parsed = parseExactObject(state.acc);
   if (parsed.kind === "incomplete") {
     return;
diff --git a/packages/ollama-adapter/src/overrides.test.ts b/packages/ollama-adapter/src/overrides.test.ts
index c59d935ad9..be8afb97d7 100644
--- a/packages/ollama-adapter/src/overrides.test.ts
+++ b/packages/ollama-adapter/src/overrides.test.ts
@@ -1,9 +1,5 @@
 import { describe, expect, test } from "bun:test";
-import {
-  OllamaAdapterConfig,
-  parseOllamaAdapterConfig,
-  resolveOverride,
-} from "./overrides";
+import { OllamaAdapterConfig, parseOllamaAdapterConfig, resolveOverride } from "./overrides";
 
 describe("parseOllamaAdapterConfig", () => {
   test("undefined quirks resolve to an empty config", () => {
@@ -15,15 +11,11 @@ describe("parseOllamaAdapterConfig", () => {
   });
 
   test("rejects a non-positive numCtx", () => {
-    expect(() =>
-      parseOllamaAdapterConfig({ default: { numCtx: 0 } }),
-    ).toThrow();
+    expect(() => parseOllamaAdapterConfig({ default: { numCtx: 0 } })).toThrow();
   });
 
   test("rejects a reasoningEffort outside the closed set", () => {
-    expect(() =>
-      parseOllamaAdapterConfig({ default: { reasoningEffort: "extreme" } }),
-    ).toThrow();
+    expect(() => parseOllamaAdapterConfig({ default: { reasoningEffort: "extreme" } })).toThrow();
   });
 
   test("accepts a well-formed default and perModel config", () => {
diff --git a/packages/ollama-adapter/src/overrides.ts b/packages/ollama-adapter/src/overrides.ts
index 907a5631d3..306052b19f 100644
--- a/packages/ollama-adapter/src/overrides.ts
+++ b/packages/ollama-adapter/src/overrides.ts
@@ -34,9 +34,7 @@ export type OllamaAdapterConfig = typeof OllamaAdapterConfig.infer;
 export function parseOllamaAdapterConfig(raw: unknown): OllamaAdapterConfig {
   const validated = OllamaAdapterConfig(raw ?? {});
   if (validated instanceof type.errors) {
-    throw new Error(
-      `@corbits/ollama-adapter: invalid adapter config: ${validated.summary}`,
-    );
+    throw new Error(`@corbits/ollama-adapter: invalid adapter config: ${validated.summary}`);
   }
   return validated;
 }
@@ -46,10 +44,7 @@ export function parseOllamaAdapterConfig(raw: unknown): OllamaAdapterConfig {
  * field-by-field over the general `default`, and an unconfigured field
  * resolves to `undefined` (no override, built-in adapter behavior).
  */
-export function resolveOverride(
-  config: OllamaAdapterConfig,
-  model: string,
-): OllamaAdapterOverride {
+export function resolveOverride(config: OllamaAdapterConfig, model: string): OllamaAdapterOverride {
   const base = config.default ?? {};
   const perModel = config.perModel?.[model] ?? {};
   const resolved: OllamaAdapterOverride = {};
diff --git a/packages/ollama-adapter/src/think-tags.test.ts b/packages/ollama-adapter/src/think-tags.test.ts
index 24611f8d2c..4ba0d84f93 100644
--- a/packages/ollama-adapter/src/think-tags.test.ts
+++ b/packages/ollama-adapter/src/think-tags.test.ts
@@ -22,21 +22,13 @@ describe("reclassifyThinkingEvents", () => {
     expect(out[0]?.type).toBe("inference.thinking.delta");
     expect((out[0]?.data as { token: string }).token).toBe("plan the approach");
     expect(out[1]?.type).toBe("inference.text.delta");
-    expect((out[1]?.data as { token: string }).token).toBe(
-      "Here is the answer.",
-    );
+    expect((out[1]?.data as { token: string }).token).toBe("Here is the answer.");
   });
 
   test("a <think> span split across multiple chunks stays classified as thinking across the boundary", () => {
     const state = createThinkSplitState();
-    const first = reclassifyThinkingEvents(
-      [textDelta("<think>step one, ")],
-      state,
-    );
-    const second = reclassifyThinkingEvents(
-      [textDelta("step two</think>final reply")],
-      state,
-    );
+    const first = reclassifyThinkingEvents([textDelta("<think>step one, ")], state);
+    const second = reclassifyThinkingEvents([textDelta("step two</think>final reply")], state);
 
     expect(first).toHaveLength(1);
     expect(first[0]?.type).toBe("inference.thinking.delta");
@@ -49,10 +41,7 @@ describe("reclassifyThinkingEvents", () => {
 
   test("ordinary text with no <think> tag passes through as text-delta unchanged", () => {
     const state = createThinkSplitState();
-    const out = reclassifyThinkingEvents(
-      [textDelta("just a normal reply")],
-      state,
-    );
+    const out = reclassifyThinkingEvents([textDelta("just a normal reply")], state);
     expect(out).toEqual([textDelta("just a normal reply")]);
   });
 
@@ -77,12 +66,8 @@ describe("reclassifyThinkingEvents", () => {
       [textDelta("<think>internal notes</think>visible reply", 3)],
       state,
     );
-    const thinkingEvent = out.find(
-      (event) => event.type === "inference.thinking.delta",
-    );
-    const textEvent = out.find(
-      (event) => event.type === "inference.text.delta",
-    );
+    const thinkingEvent = out.find((event) => event.type === "inference.thinking.delta");
+    const textEvent = out.find((event) => event.type === "inference.text.delta");
     expect((thinkingEvent?.data as { index?: number }).index).not.toBe(
       (textEvent?.data as { index?: number }).index,
     );
@@ -95,21 +80,14 @@ describe("reclassifyThinkingEvents", () => {
       [textDelta("<think>internal notes</think>visible reply")],
       state,
     );
-    const thinkingEvent = out.find(
-      (event) => event.type === "inference.thinking.delta",
+    const thinkingEvent = out.find((event) => event.type === "inference.thinking.delta");
+    const textEvent = out.find((event) => event.type === "inference.text.delta");
+    expect((thinkingEvent?.data as { partial: { thinking?: string } }).partial.thinking).toBe(
+      "internal notes",
     );
-    const textEvent = out.find(
-      (event) => event.type === "inference.text.delta",
+    expect((textEvent?.data as { partial: { text: string } }).partial.text).toBe("visible reply");
+    expect((textEvent?.data as { partial: { text: string } }).partial.text).not.toContain(
+      "<think>",
     );
-    expect(
-      (thinkingEvent?.data as { partial: { thinking?: string } }).partial
-        .thinking,
-    ).toBe("internal notes");
-    expect(
-      (textEvent?.data as { partial: { text: string } }).partial.text,
-    ).toBe("visible reply");
-    expect(
-      (textEvent?.data as { partial: { text: string } }).partial.text,
-    ).not.toContain("<think>");
   });
 });
diff --git a/packages/ollama-adapter/src/think-tags.ts b/packages/ollama-adapter/src/think-tags.ts
index 830693e9b9..bf6bf00ff0 100644
--- a/packages/ollama-adapter/src/think-tags.ts
+++ b/packages/ollama-adapter/src/think-tags.ts
@@ -135,9 +135,7 @@ export function reclassifyThinkingEvents(
         data: {
           token: textToken,
           partial,
-          ...(event.data.index !== undefined
-            ? { index: event.data.index }
-            : {}),
+          ...(event.data.index !== undefined ? { index: event.data.index } : {}),
         },
       });
     }
diff --git a/packages/onboarding/package.json b/packages/onboarding/package.json
index b4b53cdeeb..710cf8dbc8 100644
--- a/packages/onboarding/package.json
+++ b/packages/onboarding/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@workbench/onboarding",
+  "version": "0.0.1",
   "private": true,
   "description": "First-login provisioning for the hub: the onboarding route and the decision behind it",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
@@ -21,16 +21,19 @@
     "@corbits/code-review-workflow": "workspace:*",
     "@corbits/collateral-generation-workflow": "workspace:*",
     "@corbits/collections": "workspace:*",
+    "@corbits/connections": "workspace:*",
     "@corbits/diligence-brief-workflow": "workspace:*",
     "@corbits/echo-workflow": "workspace:*",
     "@corbits/error-sink": "workspace:*",
     "@corbits/exa-topic-watch-workflow": "workspace:*",
     "@corbits/granola-call-workflow": "workspace:*",
+    "@corbits/hub-api-client": "workspace:*",
     "@corbits/last-30-days-research-workflow": "workspace:*",
     "@corbits/morning-brief-workflow": "workspace:*",
     "@corbits/pain-point-collateral-workflow": "workspace:*",
     "@corbits/process-granola-call-workflow": "workspace:*",
     "@corbits/reddit-opportunity-scanner-workflow": "workspace:*",
+    "@corbits/tool-registry-publish": "workspace:*",
     "@corbits/workbench-digest-workflow": "workspace:*",
     "@corbits/workflows": "workspace:*",
     "@intx/agent": "workspace:*",
@@ -38,9 +41,6 @@
     "@intx/hub-api": "workspace:*",
     "@intx/hub-common": "workspace:*",
     "@intx/types": "workspace:*",
-    "@corbits/connections": "workspace:*",
-    "@corbits/hub-api-client": "workspace:*",
-    "@corbits/tool-registry-publish": "workspace:*",
     "arktype": "catalog:",
     "drizzle-orm": "catalog:",
     "hono": "catalog:",
diff --git a/packages/onboarding/src/bench-provisioning.ts b/packages/onboarding/src/bench-provisioning.ts
index 64fccd9622..14ccac84a3 100644
--- a/packages/onboarding/src/bench-provisioning.ts
+++ b/packages/onboarding/src/bench-provisioning.ts
@@ -108,9 +108,7 @@ export type DrainReport = {
 export type BenchProvisioner = {
   /** One bench, start to finish. Exposed so a connect can kick its own
    * bench immediately instead of waiting out a poll interval. */
-  provisionBench(
-    seed: PendingSeed,
-  ): Promise<BenchProvisionOutcome | "deferred">;
+  provisionBench(seed: PendingSeed): Promise<BenchProvisionOutcome | "deferred">;
   drainOnce(args?: { ignoreBackoff?: boolean }): Promise<DrainReport>;
   /** Fire-and-forget drain for callers that must not wait on it — a
    * route that just wrote a pending row, or hub boot. Never rejects. */
@@ -123,9 +121,7 @@ function benchKey(seed: { userId: string; tenantId: string }): string {
   return `${seed.userId}:${seed.tenantId}`;
 }
 
-export function createBenchProvisioner(
-  deps: BenchProvisionerDeps,
-): BenchProvisioner {
+export function createBenchProvisioner(deps: BenchProvisionerDeps): BenchProvisioner {
   const now = deps.now ?? Date.now;
   const logError = deps.logError ?? deps.log;
 
@@ -172,10 +168,7 @@ export function createBenchProvisioner(
   function holdOff(seed: { userId: string; tenantId: string }): void {
     const key = benchKey(seed);
     const failures = (holds.get(key)?.failureCount ?? 0) + 1;
-    const backoff = Math.min(
-      RETRY_BACKOFF_BASE_MS * 2 ** (failures - 1),
-      RETRY_BACKOFF_CEILING_MS,
-    );
+    const backoff = Math.min(RETRY_BACKOFF_BASE_MS * 2 ** (failures - 1), RETRY_BACKOFF_CEILING_MS);
     holds.set(key, {
       retryAfter: now() + backoff,
       failureCount: failures,
@@ -198,9 +191,7 @@ export function createBenchProvisioner(
    * is read past its TTL, so `undefined` here means the row is truly
    * gone, not just off this tick's page.
    */
-  async function pruneOrphanedHolds(
-    due: readonly PendingSeed[],
-  ): Promise<void> {
+  async function pruneOrphanedHolds(due: readonly PendingSeed[]): Promise<void> {
     const dueKeys = new Set(due.map(benchKey));
     for (const [key, hold] of holds) {
       if (dueKeys.has(key)) continue;
@@ -255,9 +246,7 @@ export function createBenchProvisioner(
 
     if (report.ready) {
       await deps.store.clear({ userId: seed.userId, tenantId: seed.tenantId });
-      deps.log(
-        `bench ${seed.tenantId} finished provisioning (${report.pins.length} pins present)`,
-      );
+      deps.log(`bench ${seed.tenantId} finished provisioning (${report.pins.length} pins present)`);
       return "converged";
     }
 
@@ -274,9 +263,7 @@ export function createBenchProvisioner(
     return "pending";
   }
 
-  async function provisionBench(
-    seed: PendingSeed,
-  ): Promise<BenchProvisionOutcome | "deferred"> {
+  async function provisionBench(seed: PendingSeed): Promise<BenchProvisionOutcome | "deferred"> {
     const key = benchKey(seed);
     const running = inFlight.get(key);
     if (running !== undefined) return "deferred";
@@ -307,9 +294,7 @@ export function createBenchProvisioner(
     }
   }
 
-  async function drainOnce(
-    args: { ignoreBackoff?: boolean } = {},
-  ): Promise<DrainReport> {
+  async function drainOnce(args: { ignoreBackoff?: boolean } = {}): Promise<DrainReport> {
     const page = await deps.store.listDue({
       limit: PENDING_SEED_SCAN_LIMIT,
       ...(scanAfter !== undefined ? { after: scanAfter } : {}),
@@ -322,11 +307,7 @@ export function createBenchProvisioner(
     for (const seed of page.seeds) {
       const key = benchKey(seed);
       const heldUntil = holds.get(key)?.retryAfter;
-      if (
-        args.ignoreBackoff !== true &&
-        heldUntil !== undefined &&
-        heldUntil > now()
-      ) {
+      if (args.ignoreBackoff !== true && heldUntil !== undefined && heldUntil > now()) {
         deferred += 1;
         continue;
       }
@@ -374,10 +355,7 @@ export function createBenchProvisioner(
     wake,
     start(args = {}) {
       if (timer !== undefined) return;
-      timer = setInterval(
-        wake,
-        args.intervalMs ?? PROVISIONING_POLL_INTERVAL_MS,
-      );
+      timer = setInterval(wake, args.intervalMs ?? PROVISIONING_POLL_INTERVAL_MS);
       timer.unref?.();
       wake();
     },
diff --git a/packages/onboarding/src/complete-credential.ts b/packages/onboarding/src/complete-credential.ts
index 8da944cfaa..5c236aca1b 100644
--- a/packages/onboarding/src/complete-credential.ts
+++ b/packages/onboarding/src/complete-credential.ts
@@ -70,11 +70,7 @@ import {
   type SeedTenantArgs,
 } from "./tenant-seed";
 import type { WorkflowPusher } from "@corbits/connections/workflow-push";
-import {
-  isSidecarUnavailableError,
-  parseAs,
-  type ApiCall,
-} from "@corbits/hub-api-client";
+import { isSidecarUnavailableError, parseAs, type ApiCall } from "@corbits/hub-api-client";
 import {
   persistConnectorCredential,
   type PersistConnectorCredentialFns,
@@ -89,8 +85,7 @@ import { personalTenantSlug } from "./provision";
  * account's onboarding page reads `POST /complete-setup` — see
  * `ensureSeeded`'s own doc comment below for the sidecar-unavailable
  * class this covers. */
-export const AGENTS_PENDING_MESSAGE =
-  "Your workbench is ready — agents will come online shortly.";
+export const AGENTS_PENDING_MESSAGE = "Your workbench is ready — agents will come online shortly.";
 
 export type PersonalTenant = {
   readonly tenantId: string;
@@ -237,27 +232,14 @@ export async function findPersonalTenant(
   opts: { fallbackToFirstPrincipal?: boolean } = {},
 ): Promise<PersonalTenant | undefined> {
   const response = await api("GET", "/api/me/principals", undefined, cookies);
-  const summary = parseAs(
-    paginatedSchema(PrincipalSummary),
-    response.data,
-    "principals response",
-  );
+  const summary = parseAs(paginatedSchema(PrincipalSummary), response.data, "principals response");
   const own =
     summary.data.find((p) => p.tenantSlug === expectedSlug) ??
     (opts.fallbackToFirstPrincipal ? summary.data[0] : undefined);
   if (!own) return undefined;
 
-  const tenantResponse = await api(
-    "GET",
-    `/api/tenants/${own.tenantId}`,
-    undefined,
-    cookies,
-  );
-  const tenant = parseAs(
-    TenantResponse,
-    tenantResponse.data,
-    "tenant response",
-  );
+  const tenantResponse = await api("GET", `/api/tenants/${own.tenantId}`, undefined, cookies);
+  const tenant = parseAs(TenantResponse, tenantResponse.data, "tenant response");
   return {
     tenantId: own.tenantId,
     tenantSlug: own.tenantSlug,
@@ -315,17 +297,8 @@ async function resolveOllamaModelSource(
 ): Promise<ModelSource> {
   const catalogSeed = CATALOG_SEEDS.ollama;
 
-  const response = await api(
-    "GET",
-    `/api/tenants/${tenantId}/models`,
-    undefined,
-    cookies,
-  );
-  const models = parseAs(
-    ModelInfo.array(),
-    response.data,
-    "resolved catalog response",
-  );
+  const response = await api("GET", `/api/tenants/${tenantId}/models`, undefined, cookies);
+  const models = parseAs(ModelInfo.array(), response.data, "resolved catalog response");
   const candidates: CatalogOfferingCandidate[] = [];
   for (const model of models) {
     for (const offering of model.offerings) {
@@ -353,9 +326,7 @@ async function resolveOllamaModelSource(
   let pool = completionCapable;
   if (
     curatedName !== undefined &&
-    completionCapable.some(
-      (candidate) => candidate.canonicalName === curatedName,
-    )
+    completionCapable.some((candidate) => candidate.canonicalName === curatedName)
   ) {
     const ownedResponse = await api(
       "GET",
@@ -370,9 +341,7 @@ async function resolveOllamaModelSource(
     ).data;
     if (owned.length > 0) {
       const ownedNames = new Set(owned.map((model) => model.canonicalName));
-      pool = completionCapable.filter((candidate) =>
-        ownedNames.has(candidate.canonicalName),
-      );
+      pool = completionCapable.filter((candidate) => ownedNames.has(candidate.canonicalName));
     }
   }
   const preferred =
@@ -383,13 +352,10 @@ async function resolveOllamaModelSource(
     preferred ??
     [...pool].sort(
       (left, right) =>
-        left.priority - right.priority ||
-        left.canonicalName.localeCompare(right.canonicalName),
+        left.priority - right.priority || left.canonicalName.localeCompare(right.canonicalName),
     )[0];
   if (winner === undefined) {
-    throw new Error(
-      `tenant ${tenantId}'s seeded ollama catalog resolved to no candidate model`,
-    );
+    throw new Error(`tenant ${tenantId}'s seeded ollama catalog resolved to no candidate model`);
   }
 
   return {
@@ -421,9 +387,7 @@ export async function modelSourceFor(
   const catalogSeed = CATALOG_SEEDS[provider];
   const defaultModel = catalogSeed.models[0];
   if (defaultModel === undefined) {
-    throw new Error(
-      `catalog seed for provider ${provider} has no default model`,
-    );
+    throw new Error(`catalog seed for provider ${provider} has no default model`);
   }
   return {
     provider: catalogSeed.provider.plugin,
@@ -443,21 +407,14 @@ export async function testAndPersistCredential(
   args: TestAndPersistCredentialArgs,
 ): Promise<TestAndPersistCredentialResult> {
   const expectedSlug = personalTenantSlug(args.userEmail, args.userId);
-  const tenant = await findPersonalTenant(
-    args.api,
-    args.cookies,
-    expectedSlug,
-    {
-      fallbackToFirstPrincipal: true,
-    },
-  );
+  const tenant = await findPersonalTenant(args.api, args.cookies, expectedSlug, {
+    fallbackToFirstPrincipal: true,
+  });
   if (!tenant) return { kind: "no-personal-bench" };
 
   const descriptor = CONNECTOR_REGISTRY[args.provider];
   if (descriptor === undefined) {
-    throw new Error(
-      `no connector descriptor registered for provider ${args.provider}`,
-    );
+    throw new Error(`no connector descriptor registered for provider ${args.provider}`);
   }
 
   // The one shared persist-and-seed sequence (CL-6394): provider +
@@ -479,18 +436,12 @@ export async function testAndPersistCredential(
     ...(args.credentialMetadata !== undefined
       ? { credentialMetadata: args.credentialMetadata }
       : {}),
-    ...(args.baseURLOverride !== undefined
-      ? { baseURLOverride: args.baseURLOverride }
-      : {}),
-    ...(args.ensureProviderFn !== undefined
-      ? { ensureProviderFn: args.ensureProviderFn }
-      : {}),
+    ...(args.baseURLOverride !== undefined ? { baseURLOverride: args.baseURLOverride } : {}),
+    ...(args.ensureProviderFn !== undefined ? { ensureProviderFn: args.ensureProviderFn } : {}),
     ...(args.ensureCredentialFn !== undefined
       ? { ensureCredentialFn: args.ensureCredentialFn }
       : {}),
-    ...(args.seedCatalogFn !== undefined
-      ? { seedCatalogFn: args.seedCatalogFn }
-      : {}),
+    ...(args.seedCatalogFn !== undefined ? { seedCatalogFn: args.seedCatalogFn } : {}),
   });
 
   return { kind: "connected", ...tenant };
@@ -515,9 +466,7 @@ export async function testAndPersistCredential(
  * default workflows made it live and which are still pending. Any other
  * error out of `seedTenant` still throws, unchanged.
  */
-export async function ensureSeeded(
-  args: EnsureSeededArgs,
-): Promise<EnsureSeededResult> {
+export async function ensureSeeded(args: EnsureSeededArgs): Promise<EnsureSeededResult> {
   const runSeedTenant = args.seedTenantFn ?? seedTenant;
 
   const seedTenantArgs = {
@@ -529,12 +478,7 @@ export async function ensureSeeded(
       principalId: args.tenant.principalId,
       domain: args.tenant.tenantDomain,
     },
-    model: await modelSourceFor(
-      args.api,
-      args.cookies,
-      args.tenant.tenantId,
-      args.provider,
-    ),
+    model: await modelSourceFor(args.api, args.cookies, args.tenant.tenantId, args.provider),
     pushWorkflow: args.pushWorkflow,
     log: args.log,
     workflows: DEFAULT_WORKFLOWS,
diff --git a/packages/onboarding/src/desired-state.ts b/packages/onboarding/src/desired-state.ts
index 0bf8d2a505..8838d6dba8 100644
--- a/packages/onboarding/src/desired-state.ts
+++ b/packages/onboarding/src/desired-state.ts
@@ -40,11 +40,7 @@ import {
 } from "@corbits/tool-registry-publish";
 import type { WorkflowPusher } from "@corbits/connections/workflow-push";
 import { reportError } from "@corbits/error-sink";
-import {
-  isSidecarUnavailableError,
-  parseAs,
-  type ApiCall,
-} from "@corbits/hub-api-client";
+import { isSidecarUnavailableError, parseAs, type ApiCall } from "@corbits/hub-api-client";
 
 export type WorkflowPin = {
   readonly assetName: string;
@@ -133,11 +129,7 @@ export async function seededWorkflowNames(
     undefined,
     cookies,
   );
-  const assets = parseAs(
-    AssetWithOriginResponse.array(),
-    assetsResponse.data,
-    "assets response",
-  );
+  const assets = parseAs(AssetWithOriginResponse.array(), assetsResponse.data, "assets response");
 
   const deploymentsResponse = await api(
     "GET",
@@ -157,10 +149,7 @@ export async function seededWorkflowNames(
     const asset = assets.find((a) => a.name === pin.assetName);
     const isDeployed =
       asset !== undefined &&
-      deployments.some(
-        (d) =>
-          d.definitionAssetId === asset.id && isLiveDeploymentStatus(d.status),
-      );
+      deployments.some((d) => d.definitionAssetId === asset.id && isLiveDeploymentStatus(d.status));
     (isDeployed ? deployed : pending).push(pin.assetName);
   }
   return { deployed, pending };
@@ -172,9 +161,7 @@ async function readToolsState(
   tenantId: string,
 ): Promise<PinState> {
   try {
-    return (await isCorbitsToolsRegistrySeeded(api, cookies, tenantId))
-      ? "present"
-      : "pending";
+    return (await isCorbitsToolsRegistrySeeded(api, cookies, tenantId)) ? "present" : "pending";
   } catch (cause) {
     if (isSidecarUnavailableError(cause)) return "blocked";
     throw cause;
@@ -195,14 +182,8 @@ async function readSkillState(
       cookies,
     );
     if (response.status >= 500) return "blocked";
-    const assets = parseAs(
-      AssetWithOriginResponse.array(),
-      response.data,
-      "assets response",
-    );
-    return assets.some((asset) => asset.name === skill.name)
-      ? "present"
-      : "pending";
+    const assets = parseAs(AssetWithOriginResponse.array(), response.data, "assets response");
+    return assets.some((asset) => asset.name === skill.name) ? "present" : "pending";
   } catch (cause) {
     if (isSidecarUnavailableError(cause)) return "blocked";
     throw cause;
@@ -226,9 +207,7 @@ export async function readTenantDesiredStateStatus(
   );
   const workflows: Record<string, PinState> = {};
   for (const pin of TENANT_DESIRED_STATE.workflows) {
-    workflows[pin.assetName] = deployed.includes(pin.assetName)
-      ? "present"
-      : "pending";
+    workflows[pin.assetName] = deployed.includes(pin.assetName) ? "present" : "pending";
   }
   const tools = await readToolsState(api, cookies, tenantId);
   const skills: Record<string, PinState> = {};
@@ -264,9 +243,7 @@ export type DesiredStateStep = {
 /** Labeled, doc-ordered step list for a waiting surface (the
  * onboarding page's finishing-setup view), derived from a status read
  * plus the doc's own labels. */
-export function desiredStateSteps(
-  status: DesiredStateStatus,
-): readonly DesiredStateStep[] {
+export function desiredStateSteps(status: DesiredStateStatus): readonly DesiredStateStep[] {
   return [
     ...TENANT_DESIRED_STATE.workflows.map((pin) => ({
       name: pin.assetName,
@@ -290,8 +267,7 @@ export function desiredStateSteps(
 // Reconcile
 // ---------------------------------------------------------------------------
 
-export type ReconcilePinStatus =
-  "present" | "installed" | "reinstalled" | "blocked" | "failed";
+export type ReconcilePinStatus = "present" | "installed" | "reinstalled" | "blocked" | "failed";
 
 export type ReconcilePin = {
   readonly name: string;
@@ -338,17 +314,8 @@ export async function resolveTenantModelSource(
   cookies: string[],
   tenantId: string,
 ): Promise<ModelSource | undefined> {
-  const response = await api(
-    "GET",
-    `/api/tenants/${tenantId}/models`,
-    undefined,
-    cookies,
-  );
-  const models = parseAs(
-    ModelInfo.array(),
-    response.data,
-    "resolved catalog response",
-  );
+  const response = await api("GET", `/api/tenants/${tenantId}/models`, undefined, cookies);
+  const models = parseAs(ModelInfo.array(), response.data, "resolved catalog response");
   let best: { provider: string; model: string; priority: number } | undefined;
   for (const model of models) {
     for (const offering of model.offerings) {
@@ -361,9 +328,7 @@ export async function resolveTenantModelSource(
       }
     }
   }
-  return best === undefined
-    ? undefined
-    : { provider: best.provider, model: best.model };
+  return best === undefined ? undefined : { provider: best.provider, model: best.model };
 }
 
 export type TenantDeployer = {
@@ -390,28 +355,14 @@ export async function resolveTenantDeployer(
   tenantId: string,
 ): Promise<TenantDeployer | undefined> {
   const response = await api("GET", "/api/me/principals", undefined, cookies);
-  const summary = parseAs(
-    paginatedSchema(PrincipalSummary),
-    response.data,
-    "principals response",
-  );
+  const summary = parseAs(paginatedSchema(PrincipalSummary), response.data, "principals response");
   const own = summary.data.find(
-    (p) =>
-      p.tenantId === tenantId && p.kind === "user" && p.status === "active",
+    (p) => p.tenantId === tenantId && p.kind === "user" && p.status === "active",
   );
   if (!own) return undefined;
 
-  const tenantResponse = await api(
-    "GET",
-    `/api/tenants/${tenantId}`,
-    undefined,
-    cookies,
-  );
-  const tenant = parseAs(
-    TenantResponse,
-    tenantResponse.data,
-    "tenant response",
-  );
+  const tenantResponse = await api("GET", `/api/tenants/${tenantId}`, undefined, cookies);
+  const tenant = parseAs(TenantResponse, tenantResponse.data, "tenant response");
   return {
     tenantId,
     principalId: own.principalId,
@@ -437,9 +388,7 @@ export async function resolveTenantDeployer(
  * 404-tolerant plant writes nothing) reports `blocked`, never
  * `installed`.
  */
-export async function reconcileTenantDesiredState(
-  args: ReconcileArgs,
-): Promise<ReconcileReport> {
+export async function reconcileTenantDesiredState(args: ReconcileArgs): Promise<ReconcileReport> {
   const { api, cookies, tenantId } = {
     ...args,
     tenantId: args.tenant.tenantId,
@@ -537,12 +486,8 @@ export async function reconcileTenantDesiredState(
   // Skills + grants + workflows together, via the one seeder. Entered
   // only when at least one workflow OR skill pin is pending; with all
   // present this whole function stays read-only.
-  const workflowPending = Object.values(status.workflows).some(
-    (s) => s !== "present",
-  );
-  const skillPending = Object.values(status.skills).some(
-    (s) => s !== "present",
-  );
+  const workflowPending = Object.values(status.workflows).some((s) => s !== "present");
+  const skillPending = Object.values(status.skills).some((s) => s !== "present");
 
   if (!workflowPending && !skillPending) {
     for (const pin of TENANT_DESIRED_STATE.workflows) {
@@ -554,15 +499,11 @@ export async function reconcileTenantDesiredState(
   } else {
     const model = args.model;
     const seedWorkflows = DEFAULT_WORKFLOWS.filter((workflow) =>
-      TENANT_DESIRED_STATE.workflows.some(
-        (pin) => pin.assetName === workflow.assetName,
-      ),
+      TENANT_DESIRED_STATE.workflows.some((pin) => pin.assetName === workflow.assetName),
     );
     try {
       if (model === undefined) {
-        throw new Error(
-          `tenant ${tenantId} has no catalog offerings to deploy against`,
-        );
+        throw new Error(`tenant ${tenantId} has no catalog offerings to deploy against`);
       }
       await (args.seedTenantFn ?? seedTenant)({
         api,
@@ -650,8 +591,7 @@ export async function reconcileTenantDesiredState(
           pins.push({
             name: pin.name,
             kind: "skill",
-            status:
-              status.skills[pin.name] === "present" ? "present" : "failed",
+            status: status.skills[pin.name] === "present" ? "present" : "failed",
           });
         }
         log(
diff --git a/packages/onboarding/src/genesis.ts b/packages/onboarding/src/genesis.ts
index a62ce35c5c..4a46878946 100644
--- a/packages/onboarding/src/genesis.ts
+++ b/packages/onboarding/src/genesis.ts
@@ -61,11 +61,7 @@ async function fetchPrincipals(
   cookies: string[],
 ): Promise<{ tenantId: string; tenantSlug: string; principalId: string }[]> {
   const response = await api("GET", "/api/me/principals", undefined, cookies);
-  const summary = parseAs(
-    paginatedSchema(PrincipalSummary),
-    response.data,
-    "principals response",
-  );
+  const summary = parseAs(paginatedSchema(PrincipalSummary), response.data, "principals response");
   return summary.data.map((p) => ({
     tenantId: p.tenantId,
     tenantSlug: p.tenantSlug,
@@ -164,9 +160,7 @@ export async function genesisOrJoinHubSignup(
       "transient",
     );
   }
-  args.log(
-    `genesis tenant ${tenant.slug} (${tenant.id}) minted for ${args.userEmail}`,
-  );
+  args.log(`genesis tenant ${tenant.slug} (${tenant.id}) minted for ${args.userEmail}`);
   return {
     kind: "genesis",
     tenantId: tenant.id,
diff --git a/packages/onboarding/src/huggingface-connect.test.ts b/packages/onboarding/src/huggingface-connect.test.ts
index 4e4ee59ecd..9ab9fc2875 100644
--- a/packages/onboarding/src/huggingface-connect.test.ts
+++ b/packages/onboarding/src/huggingface-connect.test.ts
@@ -22,26 +22,22 @@ describe("exchangeCodeForToken", () => {
     }[] = [];
     const fetchImpl: ExchangeFetch = async (url, init) => {
       requests.push({ url, body: init.body, headers: init.headers });
-      return new Response(
-        JSON.stringify({ access_token: "hf_oauth_minted", expires_in: 28800 }),
-        { status: 200 },
-      );
+      return new Response(JSON.stringify({ access_token: "hf_oauth_minted", expires_in: 28800 }), {
+        status: 200,
+      });
     };
 
     const result = await exchangeCodeForToken({
       code: "auth_code_1",
       codeVerifier: "verifier_1",
-      redirectUri:
-        "https://bench.example.com/api/onboarding/oauth/huggingface/callback",
+      redirectUri: "https://bench.example.com/api/onboarding/oauth/huggingface/callback",
       clientId: "client_1",
       fetchImpl,
       now: () => Date.parse("2026-08-13T12:00:00.000Z"),
     });
 
     expect(requests[0]?.url).toBe(HUGGINGFACE_TOKEN_URL);
-    expect(requests[0]?.headers["content-type"]).toBe(
-      "application/x-www-form-urlencoded",
-    );
+    expect(requests[0]?.headers["content-type"]).toBe("application/x-www-form-urlencoded");
     const body = new URLSearchParams(requests[0]?.body ?? "");
     expect(body.get("grant_type")).toBe("authorization_code");
     expect(body.get("code")).toBe("auth_code_1");
@@ -106,8 +102,7 @@ describe("exchangeCodeForToken", () => {
     });
 
     expect(result.ok).toBe(false);
-    if (!result.ok)
-      expect(result.message).toContain("did not carry an access token");
+    if (!result.ok) expect(result.message).toContain("did not carry an access token");
   });
 
   test("a transport failure is reported honestly", async () => {
@@ -142,7 +137,6 @@ describe("exchangeCodeForToken", () => {
     });
 
     expect(result.ok).toBe(false);
-    if (!result.ok)
-      expect(result.message).not.toContain("hf_oauth_super_secret");
+    if (!result.ok) expect(result.message).not.toContain("hf_oauth_super_secret");
   });
 });
diff --git a/packages/onboarding/src/index.ts b/packages/onboarding/src/index.ts
index 8db4158df1..60e0168b33 100644
--- a/packages/onboarding/src/index.ts
+++ b/packages/onboarding/src/index.ts
@@ -1,7 +1,4 @@
-export {
-  personalTenantSlug,
-  provisionPersonalTenantIfNeeded,
-} from "./provision";
+export { personalTenantSlug, provisionPersonalTenantIfNeeded } from "./provision";
 export type { ProvisionArgs, ProvisionResult } from "./provision";
 export { genesisOrJoinHubSignup, ProvisionError } from "./genesis";
 export type {
@@ -10,10 +7,7 @@ export type {
   HubSignupTenancy,
   ProvisionErrorKind,
 } from "./genesis";
-export {
-  completeCredentialSetup,
-  findPersonalTenant,
-} from "./complete-credential";
+export { completeCredentialSetup, findPersonalTenant } from "./complete-credential";
 export type {
   CompleteCredentialArgs,
   CompleteCredentialResult,
@@ -25,11 +19,7 @@ export {
   generatePKCEPair,
   s256Challenge,
 } from "./openrouter-connect";
-export type {
-  ConnectStateStore,
-  ExchangeResult,
-  PKCEPair,
-} from "./openrouter-connect";
+export type { ConnectStateStore, ExchangeResult, PKCEPair } from "./openrouter-connect";
 export { createOnboardingRoutes } from "./routes";
 export type { CreateOnboardingRoutesDeps } from "./routes";
 export {
@@ -54,10 +44,7 @@ export type {
   ToolPackagePin,
   WorkflowPin,
 } from "./desired-state";
-export {
-  createBenchProvisioner,
-  PROVISIONING_POLL_INTERVAL_MS,
-} from "./bench-provisioning";
+export { createBenchProvisioner, PROVISIONING_POLL_INTERVAL_MS } from "./bench-provisioning";
 export type {
   BenchProvisioner,
   BenchProvisionerDeps,
diff --git a/packages/onboarding/src/migrations.ts b/packages/onboarding/src/migrations.ts
index 3dc9a69502..99ebad80fc 100644
--- a/packages/onboarding/src/migrations.ts
+++ b/packages/onboarding/src/migrations.ts
@@ -79,10 +79,9 @@ export async function applyOnboardingMigrations(
         applied.push(migration.name);
       } catch (err) {
         const message = err instanceof Error ? err.message : String(err);
-        throw new Error(
-          `onboarding migration ${migration.name} failed: ${message}`,
-          { cause: err },
-        );
+        throw new Error(`onboarding migration ${migration.name} failed: ${message}`, {
+          cause: err,
+        });
       }
     }
 
diff --git a/packages/onboarding/src/pending-seed.test.ts b/packages/onboarding/src/pending-seed.test.ts
index 6d64f0d9b9..92f5359422 100644
--- a/packages/onboarding/src/pending-seed.test.ts
+++ b/packages/onboarding/src/pending-seed.test.ts
@@ -165,13 +165,9 @@ describe("createInMemoryPendingSeedStore", () => {
     const due = await store.listDue({ now: () => clock });
 
     expect(due.truncated).toBe(false);
-    expect(due.seeds).toEqual([
-      { ...SEED, userId: "user_2", tenantId: "ten_2" },
-    ]);
+    expect(due.seeds).toEqual([{ ...SEED, userId: "user_2", tenantId: "ten_2" }]);
     // Swept, not merely skipped — the expired row is gone for good.
-    expect(
-      await store.read({ userId: "user_1", tenantId: "ten_1", now: () => 0 }),
-    ).toBeUndefined();
+    expect(await store.read({ userId: "user_1", tenantId: "ten_1", now: () => 0 })).toBeUndefined();
   });
 
   test("listDue honors its limit so one drain tick can never scan the whole table", async () => {
@@ -210,10 +206,7 @@ describe("createInMemoryPendingSeedStore", () => {
     }
 
     const first = await store.listDue({ limit: 2, now: () => clock });
-    expect(first.seeds.map((seed) => seed.userId)).toEqual([
-      "user_4",
-      "user_3",
-    ]);
+    expect(first.seeds.map((seed) => seed.userId)).toEqual(["user_4", "user_3"]);
     expect(first.truncated).toBe(true);
 
     const second = await store.listDue({
@@ -221,10 +214,7 @@ describe("createInMemoryPendingSeedStore", () => {
       now: () => clock,
       ...(first.next !== undefined ? { after: first.next } : {}),
     });
-    expect(second.seeds.map((seed) => seed.userId)).toEqual([
-      "user_2",
-      "user_1",
-    ]);
+    expect(second.seeds.map((seed) => seed.userId)).toEqual(["user_2", "user_1"]);
     expect(second.truncated).toBe(true);
 
     const third = await store.listDue({
@@ -249,9 +239,7 @@ describe("createInMemoryPendingSeedStore", () => {
 
   test("clearing a row that was never written is a harmless no-op", async () => {
     const store = createInMemoryPendingSeedStore(testCipher());
-    await expect(
-      store.clear({ userId: "user_1", tenantId: "ten_1" }),
-    ).resolves.toBeUndefined();
+    await expect(store.clear({ userId: "user_1", tenantId: "ten_1" })).resolves.toBeUndefined();
   });
 
   test("round-trips baseURLOverride for an ollama-shaped seed — the drain needs the real instance URL, not a curated default", async () => {
@@ -289,14 +277,8 @@ describe("createInMemoryPendingSeedStore", () => {
 
   test("domain separation: a ciphertext sealed for one provider's AAD cannot decrypt under another's", async () => {
     const cipher = testCipher();
-    const openrouterAad = JSON.stringify([
-      "onboarding-pending-seed",
-      "openrouter",
-    ]);
-    const huggingfaceAad = JSON.stringify([
-      "onboarding-pending-seed",
-      "huggingface",
-    ]);
+    const openrouterAad = JSON.stringify(["onboarding-pending-seed", "openrouter"]);
+    const huggingfaceAad = JSON.stringify(["onboarding-pending-seed", "huggingface"]);
     const payload = await cipher.encrypt(
       JSON.stringify({
         principalId: SEED.principalId,
diff --git a/packages/onboarding/src/pending-seed.ts b/packages/onboarding/src/pending-seed.ts
index 5ab12155dc..2739c4a3cd 100644
--- a/packages/onboarding/src/pending-seed.ts
+++ b/packages/onboarding/src/pending-seed.ts
@@ -110,9 +110,8 @@ export type PendingSeed = {
   readonly baseURLOverride?: string;
 };
 
-export type PendingSeedDb<
-  TSchema extends Record<string, unknown> = Record<string, never>,
-> = PostgresJsDatabase<TSchema>;
+export type PendingSeedDb<TSchema extends Record<string, unknown> = Record<string, never>> =
+  PostgresJsDatabase<TSchema>;
 
 /** Domain separation on top of the AEAD tag, mirroring `pkce.ts`'s
  * `connectStateAad`: a row sealed for one provider's connect flow
@@ -124,10 +123,7 @@ function pendingSeedAad(provider: string): string {
 export interface PendingSeedStore {
   /** Upserts the single active row for (userId, tenantId) — a fresh
    * connect always replaces whatever pending seed came before it. */
-  put(
-    seed: PendingSeed,
-    args?: { ttlMs?: number; now?: () => number },
-  ): Promise<void>;
+  put(seed: PendingSeed, args?: { ttlMs?: number; now?: () => number }): Promise<void>;
   /**
    * Reads and validates the row for exactly the signed-in user and
    * tenant this request already resolved — a row belonging to a
@@ -199,16 +195,10 @@ interface RowAccess {
   get(userId: string, tenantId: string): Promise<StoredRow | undefined>;
   put(userId: string, tenantId: string, row: StoredRow): Promise<void>;
   delete(userId: string, tenantId: string): Promise<void>;
-  list(args: {
-    limit: number;
-    after?: PendingSeedListCursor;
-  }): Promise<IdentifiedRow[]>;
+  list(args: { limit: number; after?: PendingSeedListCursor }): Promise<IdentifiedRow[]>;
 }
 
-function comparePendingSeedCursor(
-  a: PendingSeedListCursor,
-  b: PendingSeedListCursor,
-): number {
+function comparePendingSeedCursor(a: PendingSeedListCursor, b: PendingSeedListCursor): number {
   const byExpires = a.expiresAt.getTime() - b.expiresAt.getTime();
   if (byExpires !== 0) return byExpires;
   if (a.userId < b.userId) return -1;
@@ -218,20 +208,14 @@ function comparePendingSeedCursor(
   return 0;
 }
 
-function createPendingSeedStore(
-  access: RowAccess,
-  cipher: CredentialCipher,
-): PendingSeedStore {
+function createPendingSeedStore(access: RowAccess, cipher: CredentialCipher): PendingSeedStore {
   /**
    * The single validity rule both readers apply: a row that is expired,
    * sealed for an unsupported provider, or undecryptable under the
    * current key is dead weight — deleted here and reported as absent,
    * rather than left to linger or handed onward as a usable seed.
    */
-  async function decodeRow(
-    row: IdentifiedRow,
-    nowMs: number,
-  ): Promise<PendingSeed | undefined> {
+  async function decodeRow(row: IdentifiedRow, nowMs: number): Promise<PendingSeed | undefined> {
     const drop = async (): Promise<undefined> => {
       await access.delete(row.userId, row.tenantId);
       return undefined;
@@ -244,10 +228,7 @@ function createPendingSeedStore(
     const provider = row.provider as SupportedCredentialProvider;
 
     try {
-      const plaintext = await cipher.decrypt(
-        row.payload,
-        pendingSeedAad(provider),
-      );
+      const plaintext = await cipher.decrypt(row.payload, pendingSeedAad(provider));
       const parsed = PendingSeedSecret(JSON.parse(plaintext));
       if (parsed instanceof type.errors) return drop();
       return {
@@ -275,9 +256,7 @@ function createPendingSeedStore(
           principalId: seed.principalId,
           tenantDomain: seed.tenantDomain,
           apiKey: seed.apiKey,
-          ...(seed.baseURLOverride !== undefined
-            ? { baseURLOverride: seed.baseURLOverride }
-            : {}),
+          ...(seed.baseURLOverride !== undefined ? { baseURLOverride: seed.baseURLOverride } : {}),
         }),
         pendingSeedAad(seed.provider),
       );
@@ -292,10 +271,7 @@ function createPendingSeedStore(
       const now = args.now ?? Date.now;
       const row = await access.get(args.userId, args.tenantId);
       if (row === undefined) return undefined;
-      return decodeRow(
-        { ...row, userId: args.userId, tenantId: args.tenantId },
-        now(),
-      );
+      return decodeRow({ ...row, userId: args.userId, tenantId: args.tenantId }, now());
     },
 
     async listDue(args) {
@@ -335,21 +311,17 @@ function createPendingSeedStore(
   };
 }
 
-export function createDrizzlePendingSeedStore<
-  TSchema extends Record<string, unknown>,
->(db: PendingSeedDb<TSchema>, cipher: CredentialCipher): PendingSeedStore {
+export function createDrizzlePendingSeedStore<TSchema extends Record<string, unknown>>(
+  db: PendingSeedDb<TSchema>,
+  cipher: CredentialCipher,
+): PendingSeedStore {
   return createPendingSeedStore(
     {
       async get(userId, tenantId) {
         const [row] = await db
           .select()
           .from(pendingSeed)
-          .where(
-            and(
-              eq(pendingSeed.userId, userId),
-              eq(pendingSeed.tenantId, tenantId),
-            ),
-          );
+          .where(and(eq(pendingSeed.userId, userId), eq(pendingSeed.tenantId, tenantId)));
         return row === undefined
           ? undefined
           : {
@@ -380,12 +352,7 @@ export function createDrizzlePendingSeedStore<
       async delete(userId, tenantId) {
         await db
           .delete(pendingSeed)
-          .where(
-            and(
-              eq(pendingSeed.userId, userId),
-              eq(pendingSeed.tenantId, tenantId),
-            ),
-          );
+          .where(and(eq(pendingSeed.userId, userId), eq(pendingSeed.tenantId, tenantId)));
       },
       async list({ limit, after }) {
         const rows =
@@ -438,9 +405,7 @@ export function createDrizzlePendingSeedStore<
 /** The fake this package's own tests drive routes through — no
  * Postgres required, same encrypt/validate/TTL semantics as the real
  * store. */
-export function createInMemoryPendingSeedStore(
-  cipher: CredentialCipher,
-): PendingSeedStore {
+export function createInMemoryPendingSeedStore(cipher: CredentialCipher): PendingSeedStore {
   const rows = new Map<string, StoredRow>();
   const keyOf = (userId: string, tenantId: string) => `${userId}:${tenantId}`;
   return createPendingSeedStore(
@@ -463,9 +428,7 @@ export function createInMemoryPendingSeedStore(
         const filtered =
           after === undefined
             ? identified
-            : identified.filter(
-                (row) => comparePendingSeedCursor(row, after) > 0,
-              );
+            : identified.filter((row) => comparePendingSeedCursor(row, after) > 0);
         return filtered.slice(0, limit);
       },
     },
diff --git a/packages/onboarding/src/plant-env-credentials.ts b/packages/onboarding/src/plant-env-credentials.ts
index 9d0ef8f8c7..5b7033121f 100644
--- a/packages/onboarding/src/plant-env-credentials.ts
+++ b/packages/onboarding/src/plant-env-credentials.ts
@@ -18,11 +18,7 @@
 // failure into a log line instead of an exception — one bad or
 // rate-limited key must never stop every other provider from planting.
 
-import {
-  CredentialResponse,
-  paginatedSchema,
-  ProviderResponse,
-} from "@intx/types";
+import { CredentialResponse, paginatedSchema, ProviderResponse } from "@intx/types";
 import { reportError } from "@corbits/error-sink";
 import {
   OLLAMA_PLACEHOLDER_SECRET,
@@ -47,9 +43,7 @@ import { parseAs, type ApiCall } from "@corbits/hub-api-client";
  * falling back to `GOOGLE_API_KEY` — rather than picking one and
  * silently ignoring whichever an operator happens to already have set.
  */
-export const PROVIDER_ENV_VARS: Readonly<
-  Record<SupportedCredentialProvider, readonly string[]>
-> = {
+export const PROVIDER_ENV_VARS: Readonly<Record<SupportedCredentialProvider, readonly string[]>> = {
   anthropic: ["ANTHROPIC_API_KEY"],
   openai: ["OPENAI_API_KEY"],
   "google-genai": ["GEMINI_API_KEY", "GOOGLE_API_KEY"],
@@ -95,8 +89,7 @@ export function envProviderKeysFrom(
     for (const name of names) {
       const value = env[name];
       if (value !== undefined && value.length > 0) {
-        keys[provider] =
-          provider === "ollama" ? OLLAMA_PLACEHOLDER_SECRET : value;
+        keys[provider] = provider === "ollama" ? OLLAMA_PLACEHOLDER_SECRET : value;
         break;
       }
     }
@@ -137,10 +130,7 @@ export type PlantEnvProviderCredentialsOutcome = {
  * log line.
  */
 function sanitizeProviderMessage(message: string): string {
-  return message.replace(
-    /\b(sk|pk|xai|gsk|hf|or)[-_][A-Za-z0-9_-]{6,}\b/g,
-    "[redacted]",
-  );
+  return message.replace(/\b(sk|pk|xai|gsk|hf|or)[-_][A-Za-z0-9_-]{6,}\b/g, "[redacted]");
 }
 
 export type PlantEnvProviderCredentialsArgs = {
@@ -157,9 +147,7 @@ export type PlantEnvProviderCredentialsArgs = {
   /** One line per provider: name, outcome, and (on failure) a probe
    * error summary — never the key. */
   log: (line: string) => void;
-  testCredential?: (
-    args: TestProviderCredentialArgs,
-  ) => ReturnType<typeof testProviderCredential>;
+  testCredential?: (args: TestProviderCredentialArgs) => ReturnType<typeof testProviderCredential>;
   seedCatalogFn?: (args: SeedCatalogArgs) => ReturnType<typeof seedCatalog>;
 };
 
@@ -189,11 +177,7 @@ async function findProviderId(
         ? `/api/tenants/${tenantId}/providers?inherited=false`
         : `/api/tenants/${tenantId}/providers?inherited=false&cursor=${encodeURIComponent(cursor)}`;
     const listed = await api("GET", path, undefined, cookies);
-    const page = parseAs(
-      paginatedSchema(ProviderResponse),
-      listed.data,
-      "providers response",
-    );
+    const page = parseAs(paginatedSchema(ProviderResponse), listed.data, "providers response");
     const match = page.data.find((p) => p.name === provider);
     if (match !== undefined) return match.id;
     cursor = page.nextCursor ?? undefined;
@@ -228,11 +212,7 @@ async function findActiveCredential(
         ? `/api/tenants/${tenantId}/credentials`
         : `/api/tenants/${tenantId}/credentials?cursor=${encodeURIComponent(cursor)}`;
     const listed = await api("GET", path, undefined, cookies);
-    const page = parseAs(
-      paginatedSchema(CredentialResponse),
-      listed.data,
-      "credentials response",
-    );
+    const page = parseAs(paginatedSchema(CredentialResponse), listed.data, "credentials response");
     const match = page.data.find(
       (c) =>
         c.providerId === providerId &&
@@ -288,8 +268,7 @@ export async function plantEnvProviderCredentials(
 
   function catalogSeedArgs(
     provider: SupportedCredentialProvider,
-    extra:
-      { readonly apiKey: string } | { readonly existingCredentialId: string },
+    extra: { readonly apiKey: string } | { readonly existingCredentialId: string },
   ): SeedCatalogArgs {
     const baseURL = args.envProviderBaseUrls?.[provider];
     return {
@@ -307,20 +286,10 @@ export async function plantEnvProviderCredentials(
     SupportedCredentialProvider,
     string,
   ][]) {
-    const providerId = await findProviderId(
-      args.api,
-      args.cookies,
-      args.tenantId,
-      provider,
-    );
+    const providerId = await findProviderId(args.api, args.cookies, args.tenantId, provider);
     const alreadyActive =
       providerId !== undefined
-        ? await findActiveCredential(
-            args.api,
-            args.cookies,
-            args.tenantId,
-            providerId,
-          )
+        ? await findActiveCredential(args.api, args.cookies, args.tenantId, providerId)
         : undefined;
     if (alreadyActive) {
       const name = alreadyActive.name;
@@ -342,9 +311,7 @@ export async function plantEnvProviderCredentials(
         const message = sanitizeProviderMessage(
           cause instanceof Error ? cause.message : String(cause),
         );
-        args.log(
-          `env credential plant: ${provider} failed to backfill catalog: ${message}`,
-        );
+        args.log(`env credential plant: ${provider} failed to backfill catalog: ${message}`);
         outcomes.push({ provider, status: "failed", message });
         continue;
       }
@@ -357,9 +324,7 @@ export async function plantEnvProviderCredentials(
 
     const baseURL = args.envProviderBaseUrls?.[provider];
     const probe = await testCredential(
-      baseURL !== undefined
-        ? { provider, apiKey, baseURL }
-        : { provider, apiKey },
+      baseURL !== undefined ? { provider, apiKey, baseURL } : { provider, apiKey },
     );
     if (!probe.ok) {
       const sanitized = sanitizeProviderMessage(probe.message);
@@ -395,20 +360,10 @@ export async function plantEnvProviderCredentials(
     // tell "planted" apart from "409-skipped against a dead row". The
     // provider row is guaranteed to exist by now — `seedCatalog` just
     // `ensureProvider`d it while planting.
-    const nowProviderId = await findProviderId(
-      args.api,
-      args.cookies,
-      args.tenantId,
-      provider,
-    );
+    const nowProviderId = await findProviderId(args.api, args.cookies, args.tenantId, provider);
     const nowActive =
       nowProviderId !== undefined
-        ? await findActiveCredential(
-            args.api,
-            args.cookies,
-            args.tenantId,
-            nowProviderId,
-          )
+        ? await findActiveCredential(args.api, args.cookies, args.tenantId, nowProviderId)
         : undefined;
     if (!nowActive) {
       const name = inferenceCredentialName(provider);
diff --git a/packages/onboarding/src/provision.ts b/packages/onboarding/src/provision.ts
index d4df0623af..4cdc0808b9 100644
--- a/packages/onboarding/src/provision.ts
+++ b/packages/onboarding/src/provision.ts
@@ -85,9 +85,7 @@ export async function provisionPersonalTenantIfNeeded(
     defaultTenantSlug: args.defaultTenantSlug,
     tenancy: args.tenancy,
     log: args.log,
-    ...(args.displayName !== undefined
-      ? { displayName: args.displayName }
-      : {}),
+    ...(args.displayName !== undefined ? { displayName: args.displayName } : {}),
   });
   if (result.kind === "genesis") {
     return {
diff --git a/packages/onboarding/src/routes.ts b/packages/onboarding/src/routes.ts
index 9d006fec11..5dfb3e8d06 100644
--- a/packages/onboarding/src/routes.ts
+++ b/packages/onboarding/src/routes.ts
@@ -7,11 +7,7 @@
 import type { AppEnv } from "@intx/hub-api";
 import { createExpiringMap } from "@corbits/collections";
 import { createNoopCredentialCipher } from "@intx/crypto";
-import {
-  CredentialResponse,
-  PrincipalSummary,
-  paginatedSchema,
-} from "@intx/types";
+import { CredentialResponse, PrincipalSummary, paginatedSchema } from "@intx/types";
 import type { CredentialCipher } from "@intx/types";
 import {
   supportedCredentialProviders,
@@ -20,25 +16,12 @@ import {
 import { inferenceCredentialName } from "@corbits/connections/seed-catalog";
 import { SETUP_AGENT_ASSET_NAME } from "./tenant-seed";
 import type { WorkflowPusher } from "@corbits/connections/workflow-push";
-import {
-  cookiesFromHeader,
-  createHubAPI,
-  parseAs,
-  type ApiCall,
-} from "@corbits/hub-api-client";
+import { cookiesFromHeader, createHubAPI, parseAs, type ApiCall } from "@corbits/hub-api-client";
 import { Hono } from "hono";
 import { type } from "arktype";
-import {
-  generateRefId,
-  makeErrorEnvelope,
-  reportError,
-} from "@corbits/error-sink";
+import { generateRefId, makeErrorEnvelope, reportError } from "@corbits/error-sink";
 
-import {
-  personalTenantSlug,
-  provisionPersonalTenantIfNeeded,
-  ProvisionError,
-} from "./provision";
+import { personalTenantSlug, provisionPersonalTenantIfNeeded, ProvisionError } from "./provision";
 import {
   desiredStateSteps,
   readTenantDesiredStateStatus,
@@ -103,8 +86,7 @@ function reportOnboardingError(
   },
 ): ReturnType<typeof makeErrorEnvelope> {
   const refId = generateRefId();
-  const detail =
-    args.cause instanceof Error ? args.cause.message : String(args.cause);
+  const detail = args.cause instanceof Error ? args.cause.message : String(args.cause);
   logError(`[${refId}] ${args.userAction} failed (${args.code}): ${detail}`);
   reportError(args.cause, {
     operation: args.operation,
@@ -320,20 +302,15 @@ async function recentlyConnectedCredential(
       operation: "onboarding_duplicate_callback_recovery",
       extra: { userId: args.userId },
     });
-    args.log(
-      `duplicate-callback recovery check failed for user ${args.userId} [${refId}]`,
-    );
+    args.log(`duplicate-callback recovery check failed for user ${args.userId} [${refId}]`);
     return undefined;
   }
 }
 
-export function createOnboardingRoutes(
-  deps: CreateOnboardingRoutesDeps,
-): Hono<AppEnv> {
+export function createOnboardingRoutes(deps: CreateOnboardingRoutesDeps): Hono<AppEnv> {
   const app = new Hono<AppEnv>();
   const api = createHubAPI(deps.hubUrl);
-  const credentialCipher =
-    deps.credentialCipher ?? createNoopCredentialCipher();
+  const credentialCipher = deps.credentialCipher ?? createNoopCredentialCipher();
 
   // A simple in-process per-user provision rate limiter. Provisioning is
   // idempotent and safe to retry, but a client stuck in a tight retry loop
@@ -362,11 +339,7 @@ export function createOnboardingRoutes(
     cookies: string[],
     tenant: Pick<PersonalTenant, "tenantId" | "tenantSlug">,
   ): Promise<ProvisioningStatusBody> {
-    const status = await readTenantDesiredStateStatus(
-      api,
-      cookies,
-      tenant.tenantId,
-    );
+    const status = await readTenantDesiredStateStatus(api, cookies, tenant.tenantId);
     const steps = desiredStateSteps(status);
     const deployed = TENANT_DESIRED_STATE.workflows
       .filter((pin) => status.workflows[pin.assetName] === "present")
@@ -451,8 +424,7 @@ export function createOnboardingRoutes(
             error: {
               ...makeErrorEnvelope({
                 code: "rate_limited",
-                userMessage:
-                  "Too many attempts. Wait a moment, then try again.",
+                userMessage: "Too many attempts. Wait a moment, then try again.",
               }).error,
               kind: "transient" as const,
             },
@@ -465,9 +437,7 @@ export function createOnboardingRoutes(
 
     const cookies = cookiesFromHeader(c.req.header("cookie"));
     try {
-      const provisionArgs: Parameters<
-        typeof provisionPersonalTenantIfNeeded
-      >[0] = {
+      const provisionArgs: Parameters<typeof provisionPersonalTenantIfNeeded>[0] = {
         api,
         cookies,
         userId: user.id,
@@ -542,11 +512,7 @@ export function createOnboardingRoutes(
       // reportOnboardingError, this package's reportError wrapper.
       if (cause instanceof ProvisionError) {
         const status =
-          cause.code === "signup_not_allowed"
-            ? 403
-            : cause.errorKind === "transient"
-              ? 503
-              : 500;
+          cause.code === "signup_not_allowed" ? 403 : cause.errorKind === "transient" ? 503 : 500;
         const userMessage =
           cause.code === "signup_not_allowed"
             ? "Sign-ups aren't open for this account yet. Contact your workspace admin for access."
@@ -573,15 +539,11 @@ export function createOnboardingRoutes(
         operation: "onboarding_provision",
         userAction: `first-login provisioning for user ${user.id}`,
         code: "provisioning_failed",
-        userMessage:
-          "Setting up your workbench hit a snag — we're on it. Try again in a moment.",
+        userMessage: "Setting up your workbench hit a snag — we're on it. Try again in a moment.",
         cause,
         extra: { userId: user.id },
       });
-      return c.json(
-        { error: { ...envelope.error, kind: "transient" as const } },
-        503,
-      );
+      return c.json({ error: { ...envelope.error, kind: "transient" as const } }, 503);
     }
   });
 
@@ -607,8 +569,7 @@ export function createOnboardingRoutes(
    * `ConnectorOAuthConfig.exchange`'s generalized shape.
    */
   function adaptOpenRouterExchange(
-    exchange: typeof exchangeCodeForKey = deps.openrouterConnect?.exchange ??
-      exchangeCodeForKey,
+    exchange: typeof exchangeCodeForKey = deps.openrouterConnect?.exchange ?? exchangeCodeForKey,
   ) {
     return async (args: {
       code: string;
@@ -625,8 +586,8 @@ export function createOnboardingRoutes(
   }
 
   function adaptHuggingFaceExchange(
-    exchange: typeof exchangeHuggingFaceCodeForToken = deps.huggingfaceConnect
-      ?.exchange ?? exchangeHuggingFaceCodeForToken,
+    exchange: typeof exchangeHuggingFaceCodeForToken = deps.huggingfaceConnect?.exchange ??
+      exchangeHuggingFaceCodeForToken,
   ) {
     return async (args: {
       code: string;
@@ -656,14 +617,10 @@ export function createOnboardingRoutes(
   const openrouterDescriptor = CONNECTOR_REGISTRY["openrouter"];
   const huggingfaceDescriptor = CONNECTOR_REGISTRY["huggingface"];
   if (openrouterDescriptor?.oauth === undefined) {
-    throw new Error(
-      "@corbits/connections' registry is missing the openrouter oauth-pkce entry",
-    );
+    throw new Error("@corbits/connections' registry is missing the openrouter oauth-pkce entry");
   }
   if (huggingfaceDescriptor?.oauth === undefined) {
-    throw new Error(
-      "@corbits/connections' registry is missing the huggingface oauth-pkce entry",
-    );
+    throw new Error("@corbits/connections' registry is missing the huggingface oauth-pkce entry");
   }
   // ONLY the two providers onboarding's own first-login flow offers.
   // Every other OAuth-capable connector (the GitHub App connect
@@ -693,9 +650,7 @@ export function createOnboardingRoutes(
    * even starting a flow here (a loud 404), and this narrowing refuses
    * one that somehow reached persistence anyway, instead of an `as`
    * cast letting it fall into inference-only seeding (CL-6394). */
-  function onboardingOAuthProvider(
-    connectorId: string,
-  ): "openrouter" | "huggingface" | undefined {
+  function onboardingOAuthProvider(connectorId: string): "openrouter" | "huggingface" | undefined {
     if (connectorId === "openrouter" || connectorId === "huggingface") {
       return connectorId;
     }
@@ -724,10 +679,8 @@ export function createOnboardingRoutes(
     }
     const impl =
       provider === "openrouter"
-        ? (deps.openrouterConnect?.connectCredential ??
-          testAndPersistCredential)
-        : (deps.huggingfaceConnect?.connectCredential ??
-          testAndPersistCredential);
+        ? (deps.openrouterConnect?.connectCredential ?? testAndPersistCredential)
+        : (deps.huggingfaceConnect?.connectCredential ?? testAndPersistCredential);
     const connectCredentialArgs = {
       api,
       cookies: args.cookies,
@@ -846,8 +799,7 @@ export function createOnboardingRoutes(
     }
 
     const cookies = cookiesFromHeader(c.req.header("cookie"));
-    const runTestAndPersistCredential =
-      deps.testAndPersistCredentialFn ?? testAndPersistCredential;
+    const runTestAndPersistCredential = deps.testAndPersistCredentialFn ?? testAndPersistCredential;
     const baseCompleteCredentialArgs = {
       api,
       cookies,
@@ -890,8 +842,7 @@ export function createOnboardingRoutes(
         return c.json(
           makeErrorEnvelope({
             code: "no_personal_bench",
-            userMessage:
-              "No personal bench was found for this account yet. Reload and try again.",
+            userMessage: "No personal bench was found for this account yet. Reload and try again.",
           }),
           409,
         );
@@ -923,9 +874,7 @@ export function createOnboardingRoutes(
         tenantDomain: result.tenantDomain,
         provider: parsed.provider,
         apiKey: parsed.apiKey,
-        ...(parsed.baseURL !== undefined
-          ? { baseURLOverride: parsed.baseURL }
-          : {}),
+        ...(parsed.baseURL !== undefined ? { baseURLOverride: parsed.baseURL } : {}),
       });
       deps.benchProvisioner?.wake();
       return c.json(status, 200);
@@ -985,8 +934,7 @@ export function createOnboardingRoutes(
         return c.json(
           makeErrorEnvelope({
             code: "no_personal_bench",
-            userMessage:
-              "No personal bench was found for this account yet. Reload and try again.",
+            userMessage: "No personal bench was found for this account yet. Reload and try again.",
           }),
           409,
         );
@@ -1062,28 +1010,20 @@ export function createOnboardingRoutes(
     // itself has no tenant yet.
     let tenantId: string | undefined;
     try {
-      const response = await api(
-        "GET",
-        "/api/me/principals",
-        undefined,
-        cookies,
-      );
+      const response = await api("GET", "/api/me/principals", undefined, cookies);
       const principals = parseAs(
         paginatedSchema(PrincipalSummary),
         response.data,
         "principals response",
       );
       const tenant = principals.data.find(
-        (principal) =>
-          principal.tenantId === query.tenantId &&
-          principal.status === "active",
+        (principal) => principal.tenantId === query.tenantId && principal.status === "active",
       );
       if (!tenant) {
         return c.json(
           makeErrorEnvelope({
             code: "bench_unavailable",
-            userMessage:
-              "You no longer have access to this workspace. Select another workspace.",
+            userMessage: "You no longer have access to this workspace. Select another workspace.",
           }),
           403,
         );
@@ -1098,8 +1038,7 @@ export function createOnboardingRoutes(
         operation: "onboarding_provisioning_status",
         userAction: `provisioning status for user ${user.id}`,
         code: "provisioning_status_failed",
-        userMessage:
-          "Checking on your agents hit a snag — we're on it. Try again in a moment.",
+        userMessage: "Checking on your agents hit a snag — we're on it. Try again in a moment.",
         cause,
         ...(tenantId !== undefined ? { tenantId } : {}),
         extra: { userId: user.id },
diff --git a/packages/onboarding/src/tenant-seed.ts b/packages/onboarding/src/tenant-seed.ts
index d1b97296c6..a514c2da15 100644
--- a/packages/onboarding/src/tenant-seed.ts
+++ b/packages/onboarding/src/tenant-seed.ts
@@ -39,10 +39,7 @@ import {
 import { type } from "arktype";
 import { deriveRunPrincipalId } from "@intx/hub-common";
 import type { InferencePreference } from "@intx/agent";
-import {
-  buildAssistantWorkflow,
-  serializeAssistantWorkflow,
-} from "@corbits/assistant-workflow";
+import { buildAssistantWorkflow, serializeAssistantWorkflow } from "@corbits/assistant-workflow";
 import {
   buildCodeReviewWorkflow,
   serializeCodeReviewWorkflow,
@@ -51,10 +48,7 @@ import {
   buildWorkbenchDigestWorkflow,
   serializeWorkbenchDigestWorkflow,
 } from "@corbits/workbench-digest-workflow";
-import {
-  buildEchoWorkflow,
-  serializeEchoWorkflow,
-} from "@corbits/echo-workflow";
+import { buildEchoWorkflow, serializeEchoWorkflow } from "@corbits/echo-workflow";
 import {
   buildLast30DaysResearchWorkflow,
   serializeLast30DaysResearchWorkflow,
@@ -196,10 +190,7 @@ export type DefaultWorkflow = {
    * (`apps/hub/src/templates/block-workflows.ts`) that only ever has the
    * tenant's real, possibly multi-entry inference preferences on hand.
    */
-  buildJson: (
-    tenantDomain: string,
-    inferencePreferences: readonly InferencePreference[],
-  ) => string;
+  buildJson: (tenantDomain: string, inferencePreferences: readonly InferencePreference[]) => string;
   /**
    * When true, PUT the authored definition to `stopped` after deploy so
    * a native ScheduleTrigger does not fire every tenant at the next
@@ -209,17 +200,11 @@ export type DefaultWorkflow = {
 };
 
 function catalogDisplayName(assetName: string): string {
-  return (
-    WORKFLOW_CATALOG.find((entry) => entry.assetName === assetName)
-      ?.displayName ?? assetName
-  );
+  return WORKFLOW_CATALOG.find((entry) => entry.assetName === assetName)?.displayName ?? assetName;
 }
 
 function catalogAutomatable(assetName: string): boolean {
-  return (
-    WORKFLOW_CATALOG.find((entry) => entry.assetName === assetName)
-      ?.automatable ?? false
-  );
+  return WORKFLOW_CATALOG.find((entry) => entry.assetName === assetName)?.automatable ?? false;
 }
 
 /**
@@ -467,8 +452,9 @@ export const CATALOG_WORKFLOWS: readonly DefaultWorkflow[] = [
  * rather than `CATALOG_WORKFLOWS` itself, so no per-workflow `buildJson`
  * closure crosses into their code.
  */
-export const CATALOG_WORKFLOW_ASSET_NAMES: readonly string[] =
-  CATALOG_WORKFLOWS.map((workflow) => workflow.assetName);
+export const CATALOG_WORKFLOW_ASSET_NAMES: readonly string[] = CATALOG_WORKFLOWS.map(
+  (workflow) => workflow.assetName,
+);
 
 /**
  * The deployable-through-the-catalog-instantiate-route entry for one
@@ -478,9 +464,7 @@ export const CATALOG_WORKFLOW_ASSET_NAMES: readonly string[] =
  * (seeded already, never re-deployed through this path) answers
  * `undefined` here on purpose.
  */
-export function deployableCatalogWorkflow(
-  assetName: string,
-): DefaultWorkflow | undefined {
+export function deployableCatalogWorkflow(assetName: string): DefaultWorkflow | undefined {
   return CATALOG_WORKFLOWS.find((workflow) => workflow.assetName === assetName);
 }
 
@@ -593,11 +577,7 @@ async function plantGrant(
     undefined,
     cookies,
   );
-  const grants = parseAs(
-    paginatedSchema(GrantResponse),
-    listed.data,
-    "grants response",
-  ).data;
+  const grants = parseAs(paginatedSchema(GrantResponse), listed.data, "grants response").data;
   const existing = grants.find(
     (g) =>
       g.resource === args.resource &&
@@ -679,10 +659,7 @@ async function plantAssistantRunPrincipalGrants(
   args: { tenantId: string; deploymentId: string },
   log: (line: string) => void,
 ): Promise<void> {
-  const runPrincipalId = await deriveRunPrincipalId(
-    args.tenantId,
-    args.deploymentId,
-  );
+  const runPrincipalId = await deriveRunPrincipalId(args.tenantId, args.deploymentId);
   for (const grant of ASSISTANT_RUN_PRINCIPAL_GRANTS) {
     await plantGrant(
       api,
@@ -790,11 +767,7 @@ async function ensureWorkflowAsset(
     undefined,
     cookies,
   );
-  const assets = parseAs(
-    AssetWithOriginResponse.array(),
-    listed.data,
-    "assets response",
-  );
+  const assets = parseAs(AssetWithOriginResponse.array(), listed.data, "assets response");
   const existing = assets.find((a) => a.name === args.assetName);
   if (!existing) {
     throw new HubApiError(
@@ -806,11 +779,7 @@ async function ensureWorkflowAsset(
   return existing.id;
 }
 
-async function mintGitToken(
-  api: ApiCall,
-  cookies: string[],
-  tenantId: string,
-): Promise<string> {
+async function mintGitToken(api: ApiCall, cookies: string[], tenantId: string): Promise<string> {
   const minted = await api(
     "POST",
     `/api/tenants/${tenantId}/git-tokens`,
@@ -833,8 +802,7 @@ async function mintGitToken(
       "check the hub logs for the underlying failure, then re-run: workbench seed",
     );
   }
-  return parseAs(GitTokenMintResponse, minted.data, "git token response")
-    .secret;
+  return parseAs(GitTokenMintResponse, minted.data, "git token response").secret;
 }
 
 async function listRunIds(
@@ -882,10 +850,7 @@ async function isDeploymentRoutable(
       "check the hub logs for the underlying failure, then re-run: workbench seed",
     );
   }
-  return (
-    parseAs(WorkflowRunHealth, health.data, "run health response").liveness ===
-    "ok"
-  );
+  return parseAs(WorkflowRunHealth, health.data, "run health response").liveness === "ok";
 }
 
 async function ensureDeployment(
@@ -913,14 +878,11 @@ async function ensureDeployment(
     "deployments response",
   );
   const active = deployments.find(
-    (d) =>
-      d.definitionAssetId === args.assetId && isLiveDeploymentStatus(d.status),
+    (d) => d.definitionAssetId === args.assetId && isLiveDeploymentStatus(d.status),
   );
   if (active) {
     if (await isDeploymentRoutable(api, cookies, args.tenantId, active.id)) {
-      log(
-        `workflow ${args.assetName} already deployed as ${active.id} (skipped)`,
-      );
+      log(`workflow ${args.assetName} already deployed as ${active.id} (skipped)`);
       return active.id;
     }
     // The DB row survives a stack restart; the in-memory sidecar
@@ -963,11 +925,7 @@ async function ensureDeployment(
       "re-run: workbench seed (it re-pushes the workflow definition); if this persists, check the hub logs for the hydration failure",
     );
   }
-  const deployment = parseAs(
-    WorkflowDeploymentResponse,
-    deployed.data,
-    "deployment response",
-  );
+  const deployment = parseAs(WorkflowDeploymentResponse, deployed.data, "deployment response");
   log(`deployed workflow ${args.assetName} as ${deployment.id}`);
   return deployment.id;
 }
@@ -988,17 +946,8 @@ async function listDiscoveredModelOfferings(
   cookies: string[],
   tenantId: string,
 ): Promise<{ id: string; priority: number }[]> {
-  const listed = await api(
-    "GET",
-    `/api/tenants/${tenantId}/models`,
-    undefined,
-    cookies,
-  );
-  const models = parseAs(
-    DiscoveredModelsResponse,
-    listed.data,
-    "discovered models response",
-  );
+  const listed = await api("GET", `/api/tenants/${tenantId}/models`, undefined, cookies);
+  const models = parseAs(DiscoveredModelsResponse, listed.data, "discovered models response");
   return models.flatMap((model) =>
     model.offerings.map((offering) => ({
       id: offering.offeringId,
@@ -1029,9 +978,9 @@ async function resolveRealSourceOfferingIds(
   sourceOfferingIds: readonly string[];
   defaultSourceOfferingId: string;
 }> {
-  const offerings = (
-    await listDiscoveredModelOfferings(api, cookies, tenantId)
-  ).sort((a, b) => a.priority - b.priority);
+  const offerings = (await listDiscoveredModelOfferings(api, cookies, tenantId)).sort(
+    (a, b) => a.priority - b.priority,
+  );
   const defaultSourceOfferingId = offerings[0]?.id;
   if (defaultSourceOfferingId === undefined) {
     throw new HubApiError(
@@ -1173,8 +1122,7 @@ export async function seedTenant(args: SeedTenantArgs): Promise<void> {
     workflows = DEFAULT_WORKFLOWS,
     confirmDeployments = true,
   } = args;
-  const sleep =
-    args.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+  const sleep = args.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
   const timeoutMs = args.runStartTimeoutMs ?? RUN_START_TIMEOUT_MS;
   const intervalMs = args.runPollIntervalMs ?? RUN_POLL_INTERVAL_MS;
 
@@ -1185,13 +1133,7 @@ export async function seedTenant(args: SeedTenantArgs): Promise<void> {
     );
   }
 
-  await reconcileSeedGrants(
-    api,
-    cookies,
-    tenant.tenantId,
-    tenant.principalId,
-    log,
-  );
+  await reconcileSeedGrants(api, cookies, tenant.tenantId, tenant.principalId, log);
 
   await plantDefaultSkills(api, cookies, tenant.tenantId, log);
 
@@ -1207,11 +1149,7 @@ export async function seedTenant(args: SeedTenantArgs): Promise<void> {
   for (const workflow of workflows) {
     const workflowModel = model;
 
-    realOfferings ??= await resolveRealSourceOfferingIds(
-      api,
-      cookies,
-      tenant.tenantId,
-    );
+    realOfferings ??= await resolveRealSourceOfferingIds(api, cookies, tenant.tenantId);
     const { sourceOfferingIds, defaultSourceOfferingId } = realOfferings;
 
     const assetId = await ensureWorkflowAsset(
diff --git a/packages/onboarding/test/bench-provisioning.test.ts b/packages/onboarding/test/bench-provisioning.test.ts
index d67309a80f..1b5c1aebff 100644
--- a/packages/onboarding/test/bench-provisioning.test.ts
+++ b/packages/onboarding/test/bench-provisioning.test.ts
@@ -11,10 +11,7 @@ import { describe, expect, test } from "bun:test";
 import { createEnvKeyCredentialCipher } from "@intx/crypto";
 import type { CredentialCipher } from "@intx/types";
 import { DEFAULT_WORKFLOWS } from "../src/tenant-seed";
-import {
-  createBenchProvisioner,
-  type BenchProvisionerDeps,
-} from "../src/bench-provisioning";
+import { createBenchProvisioner, type BenchProvisionerDeps } from "../src/bench-provisioning";
 import {
   createInMemoryPendingSeedStore,
   PENDING_SEED_SCAN_LIMIT,
@@ -22,9 +19,7 @@ import {
   type PendingSeedStore,
 } from "../src/pending-seed";
 
-type ReconcileArgsLike = Parameters<
-  NonNullable<BenchProvisionerDeps["reconcileFn"]>
->[0];
+type ReconcileArgsLike = Parameters<NonNullable<BenchProvisionerDeps["reconcileFn"]>>[0];
 
 const TEST_KEY = Buffer.alloc(32, 33);
 function testCipher(): CredentialCipher {
@@ -86,9 +81,7 @@ function failedReport(tenantId: string) {
  * push. `deployedByTenant` is the fake bench state the reconcile seam
  * reads and writes, so idempotence and convergence are observable as
  * call counts rather than asserted by inspection. */
-function harness(
-  overrides: Partial<BenchProvisionerDeps> & { store?: PendingSeedStore } = {},
-) {
+function harness(overrides: Partial<BenchProvisionerDeps> & { store?: PendingSeedStore } = {}) {
   const store = overrides.store ?? createInMemoryPendingSeedStore(testCipher());
   const deployedByTenant = new Map<string, string[]>();
   const calls = {
@@ -139,9 +132,7 @@ describe("createBenchProvisioner", () => {
     expect(calls.reconcile).toBe(1);
     expect(deployedByTenant.get("ten_1")).toEqual(ALL_WORKFLOWS);
     expect(report).toMatchObject({ converged: 1, truncated: false });
-    expect(
-      await store.read({ userId: "user_1", tenantId: "ten_1" }),
-    ).toBeUndefined();
+    expect(await store.read({ userId: "user_1", tenantId: "ten_1" })).toBeUndefined();
   });
 
   test("is idempotent: a second drain over an already-seeded bench installs nothing", async () => {
@@ -164,9 +155,7 @@ describe("createBenchProvisioner", () => {
     const report = await provisioner.drainOnce();
 
     expect(report).toMatchObject({ converged: 1, truncated: false });
-    expect(
-      await store.read({ userId: "user_1", tenantId: "ten_1" }),
-    ).toBeUndefined();
+    expect(await store.read({ userId: "user_1", tenantId: "ten_1" })).toBeUndefined();
   });
 
   test("a blocked bench keeps its row and converges on a later pass", async () => {
@@ -185,15 +174,11 @@ describe("createBenchProvisioner", () => {
     const first = await provisioner.drainOnce();
     expect(first).toMatchObject({ pending: 1 });
     // The row survives precisely so the next pass can finish the job.
-    expect(await store.read({ userId: "user_1", tenantId: "ten_1" })).toEqual(
-      SEED,
-    );
+    expect(await store.read({ userId: "user_1", tenantId: "ten_1" })).toEqual(SEED);
 
     const second = await provisioner.drainOnce({ ignoreBackoff: true });
     expect(second).toMatchObject({ converged: 1 });
-    expect(
-      await store.read({ userId: "user_1", tenantId: "ten_1" }),
-    ).toBeUndefined();
+    expect(await store.read({ userId: "user_1", tenantId: "ten_1" })).toBeUndefined();
   });
 
   test("a reconcile failure leaves the row for the next pass rather than losing the bench", async () => {
@@ -209,9 +194,7 @@ describe("createBenchProvisioner", () => {
 
     const first = await provisioner.drainOnce();
     expect(first).toMatchObject({ failed: 1 });
-    expect(await store.read({ userId: "user_1", tenantId: "ten_1" })).toEqual(
-      SEED,
-    );
+    expect(await store.read({ userId: "user_1", tenantId: "ten_1" })).toEqual(SEED);
     expect(logged.some((line) => line.includes("sidecar exploded"))).toBe(true);
 
     const second = await provisioner.drainOnce({ ignoreBackoff: true });
@@ -228,9 +211,7 @@ describe("createBenchProvisioner", () => {
     const held = await provisioner.drainOnce();
 
     expect(held).toMatchObject({ deferred: 1 });
-    expect(await store.read({ userId: "user_1", tenantId: "ten_1" })).toEqual(
-      SEED,
-    );
+    expect(await store.read({ userId: "user_1", tenantId: "ten_1" })).toEqual(SEED);
   });
 
   test("restart-resume: a fresh provisioner with empty memory finishes what a crashed one left behind", async () => {
@@ -280,9 +261,7 @@ describe("createBenchProvisioner", () => {
     const report = await provisioner.drainOnce();
 
     expect(report).toMatchObject({ pending: 1, failed: 0 });
-    expect(await store.read({ userId: "user_1", tenantId: "ten_1" })).toEqual(
-      SEED,
-    );
+    expect(await store.read({ userId: "user_1", tenantId: "ten_1" })).toEqual(SEED);
   });
 
   test("a bench whose user has no mintable session is left alone, not dropped", async () => {
@@ -295,9 +274,7 @@ describe("createBenchProvisioner", () => {
 
     expect(calls.reconcile).toBe(0);
     expect(report).toMatchObject({ failed: 1 });
-    expect(await store.read({ userId: "user_1", tenantId: "ten_1" })).toEqual(
-      SEED,
-    );
+    expect(await store.read({ userId: "user_1", tenantId: "ten_1" })).toEqual(SEED);
   });
 
   test("a permanently-failing bench's backoff is reclaimed once its row is gone, not only on success", async () => {
diff --git a/packages/onboarding/test/complete-credential.test.ts b/packages/onboarding/test/complete-credential.test.ts
index a1e4b94bea..86f3673717 100644
--- a/packages/onboarding/test/complete-credential.test.ts
+++ b/packages/onboarding/test/complete-credential.test.ts
@@ -2,11 +2,7 @@ import { describe, expect, test } from "bun:test";
 import type { WorkflowPusher } from "@corbits/connections/workflow-push";
 import { CATALOG_SEEDS } from "@corbits/connections/catalog-seed-data";
 import { SETUP_AGENT_ASSET_NAME } from "../src/tenant-seed";
-import {
-  type ApiCall,
-  type ApiResult,
-  SidecarUnavailableError,
-} from "@corbits/hub-api-client";
+import { type ApiCall, type ApiResult, SidecarUnavailableError } from "@corbits/hub-api-client";
 import {
   completeCredentialSetup,
   ensureSeeded,
@@ -20,9 +16,7 @@ import {
 // confirmDeployments: false so a valid, credit-less account is not
 // turned into a false "setup failed" by a workflow trigger it never
 // asked for.
-function expectNoConfirmation(
-  seedTenantCalls: { confirmDeployments?: boolean }[],
-) {
+function expectNoConfirmation(seedTenantCalls: { confirmDeployments?: boolean }[]) {
   expect(seedTenantCalls).toHaveLength(1);
   expect(seedTenantCalls[0]?.confirmDeployments).toBe(false);
 }
@@ -41,16 +35,10 @@ const noopPush: WorkflowPusher = async () => ({
 // test that fakes the catalog side never dials the real credential
 // endpoints either.
 const stubPersistFns = {
-  ensureProviderFn: async (
-    _api: unknown,
-    _cookies: string[],
-    args: { name: string },
-  ) => `prv_${args.name}`,
-  ensureCredentialFn: async (
-    _api: unknown,
-    _cookies: string[],
-    args: { providerId: string },
-  ) => `cred_${args.providerId}`,
+  ensureProviderFn: async (_api: unknown, _cookies: string[], args: { name: string }) =>
+    `prv_${args.name}`,
+  ensureCredentialFn: async (_api: unknown, _cookies: string[], args: { providerId: string }) =>
+    `cred_${args.providerId}`,
 };
 
 function collector() {
@@ -235,9 +223,7 @@ describe("modelSourceFor", () => {
     const api: ApiCall = (async () => {
       throw new Error("must not be called for a fixed curated provider");
     }) as ApiCall;
-    expect(
-      await modelSourceFor(api, ["session=abc"], TENANT_ID, "anthropic"),
-    ).toEqual({
+    expect(await modelSourceFor(api, ["session=abc"], TENANT_ID, "anthropic")).toEqual({
       provider: "anthropic",
       model: "claude-sonnet-5",
     });
@@ -260,9 +246,7 @@ describe("modelSourceFor", () => {
       throw new Error(`unexpected call: ${method} ${path}`);
     };
 
-    expect(
-      await modelSourceFor(api, ["session=abc"], TENANT_ID, "ollama"),
-    ).toEqual({
+    expect(await modelSourceFor(api, ["session=abc"], TENANT_ID, "ollama")).toEqual({
       provider: "openai-compatible",
       model: "llama3.2",
     });
@@ -290,12 +274,7 @@ describe("modelSourceFor", () => {
       throw new Error(`unexpected call: ${method} ${path}`);
     };
 
-    const result = await modelSourceFor(
-      api,
-      ["session=abc"],
-      TENANT_ID,
-      "ollama",
-    );
+    const result = await modelSourceFor(api, ["session=abc"], TENANT_ID, "ollama");
     expect(result.model).toBe("llama3.2");
   });
 
@@ -315,21 +294,13 @@ describe("modelSourceFor", () => {
           },
         ]);
       }
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/catalog/models`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/catalog/models`) {
         return ownedCatalogModelsResponse(["llama3.2", "gpt-oss:20b"]);
       }
       throw new Error(`unexpected call: ${method} ${path}`);
     };
 
-    const result = await modelSourceFor(
-      api,
-      ["session=abc"],
-      TENANT_ID,
-      "ollama",
-    );
+    const result = await modelSourceFor(api, ["session=abc"], TENANT_ID, "ollama");
     expect(result.model).toBe("gpt-oss:20b");
   });
 
@@ -352,21 +323,13 @@ describe("modelSourceFor", () => {
           },
         ]);
       }
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/catalog/models`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/catalog/models`) {
         return ownedCatalogModelsResponse(["llama3.2"]);
       }
       throw new Error(`unexpected call: ${method} ${path}`);
     };
 
-    const result = await modelSourceFor(
-      api,
-      ["session=abc"],
-      TENANT_ID,
-      "ollama",
-    );
+    const result = await modelSourceFor(api, ["session=abc"], TENANT_ID, "ollama");
     expect(result.model).toBe("llama3.2");
   });
 
@@ -388,21 +351,13 @@ describe("modelSourceFor", () => {
           },
         ]);
       }
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/catalog/models`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/catalog/models`) {
         return ownedCatalogModelsResponse([]);
       }
       throw new Error(`unexpected call: ${method} ${path}`);
     };
 
-    const result = await modelSourceFor(
-      api,
-      ["session=abc"],
-      TENANT_ID,
-      "ollama",
-    );
+    const result = await modelSourceFor(api, ["session=abc"], TENANT_ID, "ollama");
     expect(result.model).toBe("gpt-oss:20b");
   });
 });
@@ -523,8 +478,7 @@ describe("completeCredentialSetup", () => {
 
   test("a valid OpenAI key seeds its own catalog and routines", async () => {
     const seedCatalogCalls: unknown[] = [];
-    const seedTenantCalls: { model: { provider: string; model: string } }[] =
-      [];
+    const seedTenantCalls: { model: { provider: string; model: string } }[] = [];
     const api: ApiCall = async (method, path) => {
       if (method === "GET" && path === "/api/me/principals") {
         return principalsResponse();
@@ -568,8 +522,7 @@ describe("completeCredentialSetup", () => {
 
   test("a valid Groq key seeds the shared OpenAI-compatible catalog and routines", async () => {
     const seedCatalogCalls: { provider?: string }[] = [];
-    const seedTenantCalls: { model: { provider: string; model: string } }[] =
-      [];
+    const seedTenantCalls: { model: { provider: string; model: string } }[] = [];
     const api: ApiCall = async (method, path) => {
       if (method === "GET" && path === "/api/me/principals") {
         return principalsResponse();
@@ -766,26 +719,17 @@ describe("completeCredentialSetup", () => {
           cookies: [],
         };
       }
-      if (
-        method === "POST" &&
-        path === `/api/tenants/${TENANT_ID}/credentials`
-      ) {
+      if (method === "POST" && path === `/api/tenants/${TENANT_ID}/credentials`) {
         return { status: 409, data: { error: "name taken" }, cookies: [] };
       }
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/credentials`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/credentials`) {
         return {
           status: 200,
           data: { data: [staleCredentialRow()], nextCursor: null },
           cookies: [],
         };
       }
-      if (
-        method === "PATCH" &&
-        path === `/api/tenants/${TENANT_ID}/credentials/cre_old`
-      ) {
+      if (method === "PATCH" && path === `/api/tenants/${TENANT_ID}/credentials/cre_old`) {
         patchCalls += 1;
         patchBody = body;
         return {
@@ -798,10 +742,7 @@ describe("completeCredentialSetup", () => {
           cookies: [],
         };
       }
-      if (
-        method === "POST" &&
-        path === `/api/tenants/${TENANT_ID}/catalog/models`
-      ) {
+      if (method === "POST" && path === `/api/tenants/${TENANT_ID}/catalog/models`) {
         return {
           status: 201,
           data: {
@@ -815,10 +756,7 @@ describe("completeCredentialSetup", () => {
           cookies: [],
         };
       }
-      if (
-        method === "POST" &&
-        path === `/api/tenants/${TENANT_ID}/catalog/providers`
-      ) {
+      if (method === "POST" && path === `/api/tenants/${TENANT_ID}/catalog/providers`) {
         return {
           status: 201,
           data: {
@@ -835,10 +773,7 @@ describe("completeCredentialSetup", () => {
           cookies: [],
         };
       }
-      if (
-        method === "POST" &&
-        path === `/api/tenants/${TENANT_ID}/catalog/offerings`
-      ) {
+      if (method === "POST" && path === `/api/tenants/${TENANT_ID}/catalog/offerings`) {
         return {
           status: 201,
           data: {
@@ -915,10 +850,7 @@ describe("completeCredentialSetup", () => {
       if (method === "GET" && path === `/api/tenants/${TENANT_ID}/models`) {
         return fixedDiscoveredModelsResponse();
       }
-      if (
-        method === "GET" &&
-        path.startsWith(`/api/tenants/${TENANT_ID}/grants?`)
-      ) {
+      if (method === "GET" && path.startsWith(`/api/tenants/${TENANT_ID}/grants?`)) {
         return {
           status: 200,
           data: { data: [], nextCursor: null },
@@ -949,8 +881,7 @@ describe("completeCredentialSetup", () => {
       }
       if (
         method === "GET" &&
-        path ===
-          `/api/tenants/${TENANT_ID}/assets?kind=workflow&inherited=false`
+        path === `/api/tenants/${TENANT_ID}/assets?kind=workflow&inherited=false`
       ) {
         return {
           status: 200,
@@ -968,20 +899,14 @@ describe("completeCredentialSetup", () => {
           cookies: [],
         };
       }
-      if (
-        method === "POST" &&
-        path === `/api/tenants/${TENANT_ID}/git-tokens`
-      ) {
+      if (method === "POST" && path === `/api/tenants/${TENANT_ID}/git-tokens`) {
         return {
           status: 201,
           data: { id: "tok_1", secret: "s3cret" },
           cookies: [],
         };
       }
-      if (
-        method === "GET" &&
-        path.startsWith(`/api/tenants/${TENANT_ID}/skills/`)
-      ) {
+      if (method === "GET" && path.startsWith(`/api/tenants/${TENANT_ID}/skills/`)) {
         return { status: 404, data: {}, cookies: [] };
       }
       if (method === "POST" && path === `/api/tenants/${TENANT_ID}/skills`) {
@@ -989,10 +914,7 @@ describe("completeCredentialSetup", () => {
       }
       const handshake = seedHandshake(method, path);
       if (handshake) return handshake;
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/workflows/deployments`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/workflows/deployments`) {
         return {
           status: 200,
           data: deployments.map((d) => ({
@@ -1005,12 +927,8 @@ describe("completeCredentialSetup", () => {
           cookies: [],
         };
       }
-      if (
-        method === "POST" &&
-        path === `/api/tenants/${TENANT_ID}/workflows/deployments`
-      ) {
-        const assetId = (body as { source: { assetId: string } }).source
-          .assetId;
+      if (method === "POST" && path === `/api/tenants/${TENANT_ID}/workflows/deployments`) {
+        const assetId = (body as { source: { assetId: string } }).source.assetId;
         const id = `dep_${assetId}`;
         deployments.push({ definitionAssetId: assetId, id });
         return {
@@ -1025,20 +943,12 @@ describe("completeCredentialSetup", () => {
           cookies: [],
         };
       }
-      if (
-        method === "GET" &&
-        path.includes("/workflows/") &&
-        path.endsWith("/runs")
-      ) {
+      if (method === "GET" && path.includes("/workflows/") && path.endsWith("/runs")) {
         throw new Error(
           `unexpected run-listing call for an unproven, never-triggered key: ${method} ${path}`,
         );
       }
-      if (
-        method === "POST" &&
-        path.includes("/workflows/") &&
-        path.endsWith("/mail")
-      ) {
+      if (method === "POST" && path.includes("/workflows/") && path.endsWith("/mail")) {
         throw new Error(
           `unexpected workflow trigger call for an unproven, never-triggered key: ${method} ${path}`,
         );
@@ -1104,10 +1014,7 @@ describe("completeCredentialSetup", () => {
       if (method === "GET" && path === `/api/tenants/${TENANT_ID}`) {
         return tenantResponse();
       }
-      if (
-        method === "GET" &&
-        path.startsWith(`/api/tenants/${TENANT_ID}/grants?`)
-      ) {
+      if (method === "GET" && path.startsWith(`/api/tenants/${TENANT_ID}/grants?`)) {
         return {
           status: 200,
           data: {
@@ -1156,8 +1063,7 @@ describe("completeCredentialSetup", () => {
       }
       if (
         method === "GET" &&
-        path ===
-          `/api/tenants/${TENANT_ID}/assets?kind=workflow&inherited=false`
+        path === `/api/tenants/${TENANT_ID}/assets?kind=workflow&inherited=false`
       ) {
         return {
           status: 200,
@@ -1175,20 +1081,14 @@ describe("completeCredentialSetup", () => {
           cookies: [],
         };
       }
-      if (
-        method === "POST" &&
-        path === `/api/tenants/${TENANT_ID}/git-tokens`
-      ) {
+      if (method === "POST" && path === `/api/tenants/${TENANT_ID}/git-tokens`) {
         return {
           status: 201,
           data: { id: "tok_1", secret: "s3cret" },
           cookies: [],
         };
       }
-      if (
-        method === "GET" &&
-        path.startsWith(`/api/tenants/${TENANT_ID}/skills/`)
-      ) {
+      if (method === "GET" && path.startsWith(`/api/tenants/${TENANT_ID}/skills/`)) {
         return { status: 404, data: {}, cookies: [] };
       }
       if (method === "POST" && path === `/api/tenants/${TENANT_ID}/skills`) {
@@ -1196,10 +1096,7 @@ describe("completeCredentialSetup", () => {
       }
       const handshake = seedHandshake(method, path);
       if (handshake) return handshake;
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/workflows/deployments`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/workflows/deployments`) {
         return {
           status: 200,
           data: deployments.map((d) => ({
@@ -1212,13 +1109,9 @@ describe("completeCredentialSetup", () => {
           cookies: [],
         };
       }
-      if (
-        method === "POST" &&
-        path === `/api/tenants/${TENANT_ID}/workflows/deployments`
-      ) {
+      if (method === "POST" && path === `/api/tenants/${TENANT_ID}/workflows/deployments`) {
         deploymentCreatePosts += 1;
-        const assetId = (body as { source: { assetId: string } }).source
-          .assetId;
+        const assetId = (body as { source: { assetId: string } }).source.assetId;
         const id = `dep_${assetId}`;
         deployments.push({ definitionAssetId: assetId, id });
         return {
@@ -1267,13 +1160,9 @@ describe("completeCredentialSetup", () => {
           cookies: [],
         };
       }
-      if (
-        method === "PATCH" &&
-        path === `/api/tenants/${TENANT_ID}/providers/prv_anthropic`
-      ) {
+      if (method === "PATCH" && path === `/api/tenants/${TENANT_ID}/providers/prv_anthropic`) {
         const provider = providers.find((p) => p.id === "prv_anthropic");
-        if (provider === undefined)
-          throw new Error("provider must exist before updating it");
+        if (provider === undefined) throw new Error("provider must exist before updating it");
         provider.apiBaseUrl = (body as { apiBaseUrl: string }).apiBaseUrl;
         return {
           status: 200,
@@ -1289,10 +1178,7 @@ describe("completeCredentialSetup", () => {
           cookies: [],
         };
       }
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/providers?inherited=false`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/providers?inherited=false`) {
         return {
           status: 200,
           data: {
@@ -1310,10 +1196,7 @@ describe("completeCredentialSetup", () => {
           cookies: [],
         };
       }
-      if (
-        method === "POST" &&
-        path === `/api/tenants/${TENANT_ID}/credentials`
-      ) {
+      if (method === "POST" && path === `/api/tenants/${TENANT_ID}/credentials`) {
         const name = (body as { name: string }).name;
         const existing = credentials.find((c) => c.name === name);
         if (existing) return { status: 409, data: {}, cookies: [] };
@@ -1336,10 +1219,7 @@ describe("completeCredentialSetup", () => {
           cookies: [],
         };
       }
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/credentials`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/credentials`) {
         return {
           status: 200,
           data: {
@@ -1359,10 +1239,7 @@ describe("completeCredentialSetup", () => {
           cookies: [],
         };
       }
-      if (
-        method === "PATCH" &&
-        path.startsWith(`/api/tenants/${TENANT_ID}/credentials/`)
-      ) {
+      if (method === "PATCH" && path.startsWith(`/api/tenants/${TENANT_ID}/credentials/`)) {
         // The second `completeCredentialSetup` call is itself an
         // explicit user submission (`testAndPersistCredential` always
         // sets `credentialVerified: true`, no probe required — CL-6123),
@@ -1388,10 +1265,7 @@ describe("completeCredentialSetup", () => {
           cookies: [],
         };
       }
-      if (
-        method === "POST" &&
-        path === `/api/tenants/${TENANT_ID}/catalog/models`
-      ) {
+      if (method === "POST" && path === `/api/tenants/${TENANT_ID}/catalog/models`) {
         const canonicalName = (body as { canonicalName: string }).canonicalName;
         const existing = catalogModels.find((m) => m.name === canonicalName);
         if (existing) return { status: 409, data: {}, cookies: [] };
@@ -1411,10 +1285,7 @@ describe("completeCredentialSetup", () => {
           cookies: [],
         };
       }
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/catalog/models`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/catalog/models`) {
         return {
           status: 200,
           data: {
@@ -1431,10 +1302,7 @@ describe("completeCredentialSetup", () => {
           cookies: [],
         };
       }
-      if (
-        method === "POST" &&
-        path === `/api/tenants/${TENANT_ID}/catalog/providers`
-      ) {
+      if (method === "POST" && path === `/api/tenants/${TENANT_ID}/catalog/providers`) {
         const name = (body as { name: string }).name;
         const existing = catalogProviders.find((p) => p.name === name);
         if (existing) return { status: 409, data: {}, cookies: [] };
@@ -1457,10 +1325,7 @@ describe("completeCredentialSetup", () => {
           cookies: [],
         };
       }
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/catalog/providers`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/catalog/providers`) {
         return {
           status: 200,
           data: {
@@ -1480,10 +1345,7 @@ describe("completeCredentialSetup", () => {
           cookies: [],
         };
       }
-      if (
-        method === "POST" &&
-        path === `/api/tenants/${TENANT_ID}/catalog/offerings`
-      ) {
+      if (method === "POST" && path === `/api/tenants/${TENANT_ID}/catalog/offerings`) {
         const b = body as {
           modelId: string;
           providerId: string;
@@ -1519,10 +1381,7 @@ describe("completeCredentialSetup", () => {
           cookies: [],
         };
       }
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/catalog/offerings`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/catalog/offerings`) {
         return {
           status: 200,
           data: {
@@ -1639,9 +1498,7 @@ describe("completeCredentialSetup", () => {
       seedTenantFn: async () => {},
     });
 
-    expect(seedCatalogCalls).toEqual([
-      expect.objectContaining({ credentialType: "api_key" }),
-    ]);
+    expect(seedCatalogCalls).toEqual([expect.objectContaining({ credentialType: "api_key" })]);
   });
 
   // CL-6264: the credential-persist half already succeeded (the tenant,
@@ -1659,15 +1516,11 @@ describe("completeCredentialSetup", () => {
       }
       if (
         method === "GET" &&
-        path ===
-          `/api/tenants/${TENANT_ID}/assets?kind=workflow&inherited=false`
+        path === `/api/tenants/${TENANT_ID}/assets?kind=workflow&inherited=false`
       ) {
         return { status: 200, data: [], cookies: [] };
       }
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/workflows/deployments`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/workflows/deployments`) {
         return { status: 200, data: [], cookies: [] };
       }
       throw new Error(`unexpected call: ${method} ${path}`);
@@ -1881,9 +1734,7 @@ describe("ensureSeeded (the slow half)", () => {
 
     const result = await ensureSeeded({
       api: (async () => {
-        throw new Error(
-          "the real api must not be called — seedTenantFn is stubbed",
-        );
+        throw new Error("the real api must not be called — seedTenantFn is stubbed");
       }) as ApiCall,
       cookies: ["session=abc"],
       hubUrl: "http://localhost:3000",
@@ -1917,9 +1768,7 @@ describe("ensureSeeded (the slow half)", () => {
 
     await ensureSeeded({
       api: (async () => {
-        throw new Error(
-          "the real api must not be called — seedTenantFn is stubbed",
-        );
+        throw new Error("the real api must not be called — seedTenantFn is stubbed");
       }) as ApiCall,
       cookies: ["session=abc"],
       hubUrl: "http://localhost:3000",
@@ -1951,10 +1800,7 @@ describe("ensureSeeded (the slow half)", () => {
       if (method === "GET" && path === `/api/tenants/${TENANT_ID}/models`) {
         return fixedDiscoveredModelsResponse();
       }
-      if (
-        method === "GET" &&
-        path.startsWith(`/api/tenants/${TENANT_ID}/grants?`)
-      ) {
+      if (method === "GET" && path.startsWith(`/api/tenants/${TENANT_ID}/grants?`)) {
         return {
           status: 200,
           data: {
@@ -2003,8 +1849,7 @@ describe("ensureSeeded (the slow half)", () => {
       }
       if (
         method === "GET" &&
-        path ===
-          `/api/tenants/${TENANT_ID}/assets?kind=workflow&inherited=false`
+        path === `/api/tenants/${TENANT_ID}/assets?kind=workflow&inherited=false`
       ) {
         return {
           status: 200,
@@ -2022,20 +1867,14 @@ describe("ensureSeeded (the slow half)", () => {
           cookies: [],
         };
       }
-      if (
-        method === "POST" &&
-        path === `/api/tenants/${TENANT_ID}/git-tokens`
-      ) {
+      if (method === "POST" && path === `/api/tenants/${TENANT_ID}/git-tokens`) {
         return {
           status: 201,
           data: { id: "tok_1", secret: "s3cret" },
           cookies: [],
         };
       }
-      if (
-        method === "GET" &&
-        path.startsWith(`/api/tenants/${TENANT_ID}/skills/`)
-      ) {
+      if (method === "GET" && path.startsWith(`/api/tenants/${TENANT_ID}/skills/`)) {
         return { status: 404, data: {}, cookies: [] };
       }
       if (method === "POST" && path === `/api/tenants/${TENANT_ID}/skills`) {
@@ -2043,10 +1882,7 @@ describe("ensureSeeded (the slow half)", () => {
       }
       const handshake = seedHandshake(method, path);
       if (handshake) return handshake;
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/workflows/deployments`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/workflows/deployments`) {
         return {
           status: 200,
           data: deployments.map((d) => ({
@@ -2070,13 +1906,9 @@ describe("ensureSeeded (the slow half)", () => {
           cookies: [],
         };
       }
-      if (
-        method === "POST" &&
-        path === `/api/tenants/${TENANT_ID}/workflows/deployments`
-      ) {
+      if (method === "POST" && path === `/api/tenants/${TENANT_ID}/workflows/deployments`) {
         deploymentCreatePosts += 1;
-        const assetId = (body as { source: { assetId: string } }).source
-          .assetId;
+        const assetId = (body as { source: { assetId: string } }).source.assetId;
         const id = `dep_${assetId}`;
         deployments.push({ definitionAssetId: assetId, id });
         return {
@@ -2109,10 +1941,7 @@ describe("ensureSeeded (the slow half)", () => {
     // Two overlapping calls, exactly like two concurrent
     // `/complete-setup` requests reading the same still-valid pending
     // token, running back to back against the same stateful fake hub.
-    const [first, second] = await Promise.all([
-      runEnsureSeeded(),
-      runEnsureSeeded(),
-    ]);
+    const [first, second] = await Promise.all([runEnsureSeeded(), runEnsureSeeded()]);
 
     expect(first.kind).toBe("seeded");
     expect(second.kind).toBe("seeded");
@@ -2144,8 +1973,7 @@ describe("ensureSeeded (the slow half)", () => {
     const api: ApiCall = async (method, path) => {
       if (
         method === "GET" &&
-        path ===
-          `/api/tenants/${TENANT_ID}/assets?kind=workflow&inherited=false`
+        path === `/api/tenants/${TENANT_ID}/assets?kind=workflow&inherited=false`
       ) {
         return {
           status: 200,
@@ -2153,10 +1981,7 @@ describe("ensureSeeded (the slow half)", () => {
           cookies: [],
         };
       }
-      if (
-        method === "GET" &&
-        path === `/api/tenants/${TENANT_ID}/workflows/deployments`
-      ) {
+      if (method === "GET" && path === `/api/tenants/${TENANT_ID}/workflows/deployments`) {
         return {
           status: 200,
           data: [
@@ -2309,9 +2134,7 @@ describe("findPersonalTenant", () => {
       throw new Error(`unexpected call: ${method} ${path}`);
     };
 
-    expect(
-      await findPersonalTenant(api, ["session=abc"], "alice-user1"),
-    ).toBeUndefined();
+    expect(await findPersonalTenant(api, ["session=abc"], "alice-user1")).toBeUndefined();
     expect(
       await findPersonalTenant(api, ["session=abc"], "alice-user1", {
         fallbackToFirstPrincipal: true,
@@ -2341,14 +2164,12 @@ describe("findPersonalTenant", () => {
       throw new Error(`unexpected call: ${method} ${path}`);
     };
 
-    expect(await findPersonalTenant(api, ["session=abc"], TENANT_SLUG)).toEqual(
-      {
-        tenantId: TENANT_ID,
-        tenantSlug: TENANT_SLUG,
-        principalId: PRINCIPAL_ID,
-        tenantDomain: "alice-user1.bench.local",
-      },
-    );
+    expect(await findPersonalTenant(api, ["session=abc"], TENANT_SLUG)).toEqual({
+      tenantId: TENANT_ID,
+      tenantSlug: TENANT_SLUG,
+      principalId: PRINCIPAL_ID,
+      tenantDomain: "alice-user1.bench.local",
+    });
   });
 
   test("the fallback pick is the first principal in page order", async () => {
diff --git a/packages/onboarding/test/complete-setup-routes.test.ts b/packages/onboarding/test/complete-setup-routes.test.ts
index 25cdc27475..836476b5a6 100644
--- a/packages/onboarding/test/complete-setup-routes.test.ts
+++ b/packages/onboarding/test/complete-setup-routes.test.ts
@@ -30,10 +30,7 @@ import { createEnvKeyCredentialCipher } from "@intx/crypto";
 import type { CredentialCipher } from "@intx/types";
 import { DEFAULT_WORKFLOWS } from "../src/tenant-seed";
 import { createOnboardingRoutes } from "../src/routes";
-import {
-  createInMemoryPendingSeedStore,
-  type PendingSeedStore,
-} from "../src/pending-seed";
+import { createInMemoryPendingSeedStore, type PendingSeedStore } from "../src/pending-seed";
 
 const TEST_KEY = Buffer.alloc(32, 21);
 function testCipher(): CredentialCipher {
@@ -145,9 +142,7 @@ describe("POST /complete-setup", () => {
 
   test("no personal bench yet reports 409, not a fabricated seed", async () => {
     const hub = new Hono();
-    hub.get("/api/me/principals", (c) =>
-      c.json({ data: [], nextCursor: null }),
-    );
+    hub.get("/api/me/principals", (c) => c.json({ data: [], nextCursor: null }));
     const server = Bun.serve({ port: 0, fetch: hub.fetch });
     try {
       const app = mountAuthenticated(
@@ -301,9 +296,7 @@ describe("POST /complete-setup", () => {
       };
       expect(body.kind).toBe("ready");
       expect(body.tenantSlug).toBe(TENANT_SLUG);
-      expect(body.deployed.sort()).toEqual(
-        DEFAULT_WORKFLOWS.map((w) => w.assetName).sort(),
-      );
+      expect(body.deployed.sort()).toEqual(DEFAULT_WORKFLOWS.map((w) => w.assetName).sort());
       expect(body.pending).toEqual([]);
       expect(ensureSeededCalls).toBe(0);
     } finally {
@@ -315,9 +308,7 @@ describe("POST /complete-setup", () => {
     const hub = new Hono();
     principalsRoute(hub);
     hub.get(`/api/tenants/${TENANT_ID}/assets`, (c) => c.json([]));
-    hub.get(`/api/tenants/${TENANT_ID}/workflows/deployments`, (c) =>
-      c.json([]),
-    );
+    hub.get(`/api/tenants/${TENANT_ID}/workflows/deployments`, (c) => c.json([]));
     const server = Bun.serve({ port: 0, fetch: hub.fetch });
     try {
       const app = mountAuthenticated(
@@ -350,9 +341,7 @@ describe("POST /complete-setup", () => {
     const hub = new Hono();
     principalsRoute(hub);
     hub.get(`/api/tenants/${TENANT_ID}/assets`, (c) => c.json([]));
-    hub.get(`/api/tenants/${TENANT_ID}/workflows/deployments`, (c) =>
-      c.json([]),
-    );
+    hub.get(`/api/tenants/${TENANT_ID}/workflows/deployments`, (c) => c.json([]));
     const server = Bun.serve({ port: 0, fetch: hub.fetch });
     const pendingSeedStore = createInMemoryPendingSeedStore(testCipher());
     try {
@@ -419,9 +408,7 @@ describe("POST /complete-setup", () => {
     const hub = new Hono();
     principalsRoute(hub);
     hub.get(`/api/tenants/${TENANT_ID}/assets`, (c) => c.json([]));
-    hub.get(`/api/tenants/${TENANT_ID}/workflows/deployments`, (c) =>
-      c.json([]),
-    );
+    hub.get(`/api/tenants/${TENANT_ID}/workflows/deployments`, (c) => c.json([]));
     const server = Bun.serve({ port: 0, fetch: hub.fetch });
     const pendingSeedStore = createInMemoryPendingSeedStore(testCipher());
     try {
@@ -534,9 +521,7 @@ describe("POST /complete-setup", () => {
     const hub = new Hono();
     principalsRoute(hub);
     hub.get(`/api/tenants/${TENANT_ID}/assets`, (c) => c.json([]));
-    hub.get(`/api/tenants/${TENANT_ID}/workflows/deployments`, (c) =>
-      c.json([]),
-    );
+    hub.get(`/api/tenants/${TENANT_ID}/workflows/deployments`, (c) => c.json([]));
     const server = Bun.serve({ port: 0, fetch: hub.fetch });
     const pendingSeedStore = createInMemoryPendingSeedStore(testCipher());
     try {
@@ -576,9 +561,7 @@ describe("POST /complete-setup", () => {
     const hub = new Hono();
     principalsRoute(hub);
     hub.get(`/api/tenants/${TENANT_ID}/assets`, (c) => c.json([]));
-    hub.get(`/api/tenants/${TENANT_ID}/workflows/deployments`, (c) =>
-      c.json([]),
-    );
+    hub.get(`/api/tenants/${TENANT_ID}/workflows/deployments`, (c) => c.json([]));
     const server = Bun.serve({ port: 0, fetch: hub.fetch });
     const pendingSeedStore = createInMemoryPendingSeedStore(testCipher());
     try {
@@ -667,9 +650,7 @@ describe("POST /complete-setup", () => {
       }),
     );
     hub.get(`/api/tenants/${TENANT_ID}/assets`, (c) => c.json([]));
-    hub.get(`/api/tenants/${TENANT_ID}/workflows/deployments`, (c) =>
-      c.json([]),
-    );
+    hub.get(`/api/tenants/${TENANT_ID}/workflows/deployments`, (c) => c.json([]));
     const server = Bun.serve({ port: 0, fetch: hub.fetch });
     const pendingSeedStore = createInMemoryPendingSeedStore(testCipher());
     try {
@@ -756,9 +737,7 @@ describe("POST /complete-setup", () => {
       ),
     );
     // The asset exists, but no deployment has gone live yet.
-    hub.get(`/api/tenants/${TENANT_ID}/workflows/deployments`, (c) =>
-      c.json([]),
-    );
+    hub.get(`/api/tenants/${TENANT_ID}/workflows/deployments`, (c) => c.json([]));
     const server = Bun.serve({ port: 0, fetch: hub.fetch });
     const pendingSeedStore = createInMemoryPendingSeedStore(testCipher());
     try {
diff --git a/packages/onboarding/test/connect-deploys-nothing.test.ts b/packages/onboarding/test/connect-deploys-nothing.test.ts
index f6fbb83417..66c78691d9 100644
--- a/packages/onboarding/test/connect-deploys-nothing.test.ts
+++ b/packages/onboarding/test/connect-deploys-nothing.test.ts
@@ -14,10 +14,7 @@ import { createEnvKeyCredentialCipher } from "@intx/crypto";
 import type { CredentialCipher } from "@intx/types";
 import { DEFAULT_WORKFLOWS, SETUP_AGENT_ASSET_NAME } from "../src/tenant-seed";
 import { createOnboardingRoutes } from "../src/routes";
-import {
-  createInMemoryPendingSeedStore,
-  type PendingSeedStore,
-} from "../src/pending-seed";
+import { createInMemoryPendingSeedStore, type PendingSeedStore } from "../src/pending-seed";
 
 const TEST_KEY = Buffer.alloc(32, 44);
 function testCipher(): CredentialCipher {
@@ -40,9 +37,7 @@ function asUser(): MiddlewareHandler<AppEnv> {
 /** A hub that answers only the reads the fast half performs. Any deploy
  * traffic would have to go somewhere else entirely — and the deploy seam
  * below proves it never even starts. */
-function fakeHub(
-  args: { seededWorkflows?: string[]; tenantSlug?: string } = {},
-) {
+function fakeHub(args: { seededWorkflows?: string[]; tenantSlug?: string } = {}) {
   const seeded = args.seededWorkflows ?? [];
   const hub = new Hono();
   const requests: string[] = [];
@@ -118,9 +113,7 @@ function fakeHub(
       },
     ]),
   );
-  hub.get("/api/tenants/:id/skills/:name", (c) =>
-    c.json({ name: c.req.param("name") }),
-  );
+  hub.get("/api/tenants/:id/skills/:name", (c) => c.json({ name: c.req.param("name") }));
   hub.get("/api/tenants/:id/workflows/deployments", (c) =>
     c.json(
       seeded.map((_name, index) => ({
@@ -166,9 +159,7 @@ function routeDeps(args: {
     }),
     ensureSeededFn: async () => {
       args.onDeploy?.();
-      await new Promise((resolve) =>
-        setTimeout(resolve, args.deployDelayMs ?? 0),
-      );
+      await new Promise((resolve) => setTimeout(resolve, args.deployDelayMs ?? 0));
       return { kind: "seeded" as const, workflows: ALL_WORKFLOWS };
     },
   };
@@ -216,15 +207,12 @@ describe("POST /complete — connecting deploys nothing", () => {
       // And nothing deploy-shaped was even attempted against the hub.
       expect(
         requests.filter(
-          (line) =>
-            line.includes("/workflows/deployments") && line.startsWith("POST"),
-        ),
-      ).toEqual([]);
-      expect(
-        requests.filter((line) =>
-          line.startsWith("POST /api/tenants/ten_1/assets"),
+          (line) => line.includes("/workflows/deployments") && line.startsWith("POST"),
         ),
       ).toEqual([]);
+      expect(requests.filter((line) => line.startsWith("POST /api/tenants/ten_1/assets"))).toEqual(
+        [],
+      );
     } finally {
       server.stop(true);
     }
@@ -236,9 +224,7 @@ describe("POST /complete — connecting deploys nothing", () => {
     const store = createInMemoryPendingSeedStore(testCipher());
     try {
       const app = mountAuthenticated(
-        createOnboardingRoutes(
-          routeDeps({ hubUrl: `http://localhost:${server.port}`, store }),
-        ),
+        createOnboardingRoutes(routeDeps({ hubUrl: `http://localhost:${server.port}`, store })),
       );
 
       const response = await app.request("/api/onboarding/complete", {
@@ -268,9 +254,7 @@ describe("POST /complete — connecting deploys nothing", () => {
     const store = createInMemoryPendingSeedStore(testCipher());
     try {
       const app = mountAuthenticated(
-        createOnboardingRoutes(
-          routeDeps({ hubUrl: `http://localhost:${server.port}`, store }),
-        ),
+        createOnboardingRoutes(routeDeps({ hubUrl: `http://localhost:${server.port}`, store })),
       );
 
       await app.request("/api/onboarding/complete", {
@@ -279,9 +263,7 @@ describe("POST /complete — connecting deploys nothing", () => {
         headers: { "content-type": "application/json" },
       });
 
-      expect(
-        await store.read({ userId: "user_1", tenantId: TENANT_ID }),
-      ).toEqual({
+      expect(await store.read({ userId: "user_1", tenantId: TENANT_ID })).toEqual({
         userId: "user_1",
         tenantId: TENANT_ID,
         principalId: PRINCIPAL_ID,
@@ -300,9 +282,7 @@ describe("POST /complete — connecting deploys nothing", () => {
     const store = createInMemoryPendingSeedStore(testCipher());
     try {
       const app = mountAuthenticated(
-        createOnboardingRoutes(
-          routeDeps({ hubUrl: `http://localhost:${server.port}`, store }),
-        ),
+        createOnboardingRoutes(routeDeps({ hubUrl: `http://localhost:${server.port}`, store })),
       );
 
       const response = await app.request("/api/onboarding/complete", {
@@ -328,30 +308,21 @@ describe("GET /provisioning-status", () => {
     ["", 400],
     ["?tenantId=", 400],
     ["?tenantId=someone-elses-bench", 403],
-  ])(
-    "rejects invalid or inaccessible selected benches: %s",
-    async (query, expectedStatus) => {
-      const { hub, requests } = fakeHub();
-      const server = Bun.serve({ port: 0, fetch: hub.fetch });
-      const store = createInMemoryPendingSeedStore(testCipher());
-      try {
-        const app = mountAuthenticated(
-          createOnboardingRoutes(
-            routeDeps({ hubUrl: `http://localhost:${server.port}`, store }),
-          ),
-        );
-        const response = await app.request(
-          `/api/onboarding/provisioning-status${query}`,
-        );
-        expect(response.status).toBe(expectedStatus);
-        expect(requests.some((request) => request.includes("/assets"))).toBe(
-          false,
-        );
-      } finally {
-        server.stop(true);
-      }
-    },
-  );
+  ])("rejects invalid or inaccessible selected benches: %s", async (query, expectedStatus) => {
+    const { hub, requests } = fakeHub();
+    const server = Bun.serve({ port: 0, fetch: hub.fetch });
+    const store = createInMemoryPendingSeedStore(testCipher());
+    try {
+      const app = mountAuthenticated(
+        createOnboardingRoutes(routeDeps({ hubUrl: `http://localhost:${server.port}`, store })),
+      );
+      const response = await app.request(`/api/onboarding/provisioning-status${query}`);
+      expect(response.status).toBe(expectedStatus);
+      expect(requests.some((request) => request.includes("/assets"))).toBe(false);
+    } finally {
+      server.stop(true);
+    }
+  });
 
   // CL-7074 narrowed DEFAULT_WORKFLOWS to just the setup agent, so the
   // "some deployed, some still pending" progress bar this route used to
@@ -368,9 +339,7 @@ describe("GET /provisioning-status", () => {
     const store = createInMemoryPendingSeedStore(testCipher());
     try {
       const app = mountAuthenticated(
-        createOnboardingRoutes(
-          routeDeps({ hubUrl: `http://localhost:${server.port}`, store }),
-        ),
+        createOnboardingRoutes(routeDeps({ hubUrl: `http://localhost:${server.port}`, store })),
       );
 
       const response = await app.request(
@@ -394,17 +363,13 @@ describe("GET /provisioning-status", () => {
   });
 
   test("a bench whose other workflows landed first is not reported as chat-ready", async () => {
-    const others = ALL_WORKFLOWS.filter(
-      (name) => name !== SETUP_AGENT_ASSET_NAME,
-    );
+    const others = ALL_WORKFLOWS.filter((name) => name !== SETUP_AGENT_ASSET_NAME);
     const { hub } = fakeHub({ seededWorkflows: others });
     const server = Bun.serve({ port: 0, fetch: hub.fetch });
     const store = createInMemoryPendingSeedStore(testCipher());
     try {
       const app = mountAuthenticated(
-        createOnboardingRoutes(
-          routeDeps({ hubUrl: `http://localhost:${server.port}`, store }),
-        ),
+        createOnboardingRoutes(routeDeps({ hubUrl: `http://localhost:${server.port}`, store })),
       );
 
       const response = await app.request(
@@ -427,9 +392,7 @@ describe("GET /provisioning-status", () => {
     const store = createInMemoryPendingSeedStore(testCipher());
     try {
       const app = mountAuthenticated(
-        createOnboardingRoutes(
-          routeDeps({ hubUrl: `http://localhost:${server.port}`, store }),
-        ),
+        createOnboardingRoutes(routeDeps({ hubUrl: `http://localhost:${server.port}`, store })),
       );
 
       const response = await app.request(
@@ -484,9 +447,7 @@ describe("POST /complete-setup — no longer deploys inline either", () => {
       expect(deployStarted).toBe(false);
       expect(body.kind).toBe("provisioning");
       // The row stays: it is the drain's work item, not a spent token.
-      expect(
-        await store.read({ userId: "user_1", tenantId: TENANT_ID }),
-      ).toBeDefined();
+      expect(await store.read({ userId: "user_1", tenantId: TENANT_ID })).toBeDefined();
     } finally {
       server.stop(true);
     }
@@ -498,9 +459,7 @@ describe("POST /complete-setup — no longer deploys inline either", () => {
     const store = createInMemoryPendingSeedStore(testCipher());
     try {
       const app = mountAuthenticated(
-        createOnboardingRoutes(
-          routeDeps({ hubUrl: `http://localhost:${server.port}`, store }),
-        ),
+        createOnboardingRoutes(routeDeps({ hubUrl: `http://localhost:${server.port}`, store })),
       );
 
       const response = await app.request("/api/onboarding/complete-setup", {
diff --git a/packages/onboarding/test/desired-state-reconcile.test.ts b/packages/onboarding/test/desired-state-reconcile.test.ts
index f6eab0630c..31a6020d03 100644
--- a/packages/onboarding/test/desired-state-reconcile.test.ts
+++ b/packages/onboarding/test/desired-state-reconcile.test.ts
@@ -61,10 +61,7 @@ function harness(state: Stub) {
         cookies: [],
       };
     }
-    if (
-      method === "GET" &&
-      path === `/api/tenants/${TENANT_ID}/workflows/deployments`
-    ) {
+    if (method === "GET" && path === `/api/tenants/${TENANT_ID}/workflows/deployments`) {
       return {
         status: 200,
         data:
@@ -76,10 +73,8 @@ function harness(state: Stub) {
     }
     if (
       method === "GET" &&
-      (path ===
-        `/api/tenants/${TENANT_ID}/assets?kind=package-registry&inherited=true` ||
-        path ===
-          `/api/tenants/${TENANT_ID}/assets?kind=package-registry&inherited=false`)
+      (path === `/api/tenants/${TENANT_ID}/assets?kind=package-registry&inherited=true` ||
+        path === `/api/tenants/${TENANT_ID}/assets?kind=package-registry&inherited=false`)
     ) {
       return {
         status: 200,
@@ -267,9 +262,7 @@ describe("reconcileTenantDesiredState", () => {
     const report = await reconcileTenantDesiredState(h.args);
     expect(report.ready).toBe(false);
     expect(
-      report.pins
-        .filter((p) => p.kind === "workflow")
-        .every((p) => p.status === "blocked"),
+      report.pins.filter((p) => p.kind === "workflow").every((p) => p.status === "blocked"),
     ).toBe(true);
   });
 
@@ -287,9 +280,7 @@ describe("reconcileTenantDesiredState", () => {
     const report = await reconcileTenantDesiredState(h.args);
     expect(report.ready).toBe(false);
     expect(
-      report.pins
-        .filter((p) => p.kind === "workflow")
-        .every((p) => p.status === "blocked"),
+      report.pins.filter((p) => p.kind === "workflow").every((p) => p.status === "blocked"),
     ).toBe(true);
     expect(h.seedTenantCalls()).toBe(0);
   });
@@ -453,9 +444,7 @@ describe("resolveTenantDeployer", () => {
       throw new Error(`unexpected call: ${method} ${path}`);
     }) as unknown as ApiCall;
 
-    await expect(
-      resolveTenantDeployer(api, ["session=abc"], "ten_child"),
-    ).resolves.toEqual({
+    await expect(resolveTenantDeployer(api, ["session=abc"], "ten_child")).resolves.toEqual({
       tenantId: "ten_child",
       principalId: "prn_child",
       tenantDomain: "second.localhost",
@@ -478,9 +467,7 @@ describe("resolveTenantDeployer", () => {
       throw new Error(`unexpected call: ${method} ${path}`);
     }) as unknown as ApiCall;
 
-    await expect(
-      resolveTenantDeployer(api, ["session=abc"], "ten_child"),
-    ).resolves.toBeUndefined();
+    await expect(resolveTenantDeployer(api, ["session=abc"], "ten_child")).resolves.toBeUndefined();
   });
 
   test("zero principals resolves to nothing without reading the tenant", async () => {
@@ -491,8 +478,6 @@ describe("resolveTenantDeployer", () => {
       throw new Error(`unexpected call: ${method} ${path}`);
     }) as unknown as ApiCall;
 
-    await expect(
-      resolveTenantDeployer(api, ["session=abc"], "ten_child"),
-    ).resolves.toBeUndefined();
+    await expect(resolveTenantDeployer(api, ["session=abc"], "ten_child")).resolves.toBeUndefined();
   });
 });
diff --git a/packages/onboarding/test/desired-state.test.ts b/packages/onboarding/test/desired-state.test.ts
index 30a0cc6efd..ca4ec18d6d 100644
--- a/packages/onboarding/test/desired-state.test.ts
+++ b/packages/onboarding/test/desired-state.test.ts
@@ -46,16 +46,11 @@ function stubApi(state: StubState): ApiCall & { calls: [string, string][] } {
     ) {
       return {
         status: 200,
-        data: state.workflowAssets
-          ? [assetRow(TENANT_ID, "workflow", SETUP_AGENT_ASSET_NAME)]
-          : [],
+        data: state.workflowAssets ? [assetRow(TENANT_ID, "workflow", SETUP_AGENT_ASSET_NAME)] : [],
         cookies: [],
       };
     }
-    if (
-      method === "GET" &&
-      path === `/api/tenants/${TENANT_ID}/workflows/deployments`
-    ) {
+    if (method === "GET" && path === `/api/tenants/${TENANT_ID}/workflows/deployments`) {
       return {
         status: 200,
         data:
@@ -72,8 +67,7 @@ function stubApi(state: StubState): ApiCall & { calls: [string, string][] } {
     }
     if (
       method === "GET" &&
-      path ===
-        `/api/tenants/${TENANT_ID}/assets?kind=package-registry&inherited=true`
+      path === `/api/tenants/${TENANT_ID}/assets?kind=package-registry&inherited=true`
     ) {
       return {
         status: 200,
@@ -112,9 +106,7 @@ function stubApi(state: StubState): ApiCall & { calls: [string, string][] } {
         status: 200,
         data:
           state.skills === true
-            ? TENANT_DESIRED_STATE.skills.map((skill) =>
-                assetRow(TENANT_ID, "skill", skill.name),
-              )
+            ? TENANT_DESIRED_STATE.skills.map((skill) => assetRow(TENANT_ID, "skill", skill.name))
             : [],
         cookies: [],
       };
@@ -128,9 +120,7 @@ function stubApi(state: StubState): ApiCall & { calls: [string, string][] } {
 describe("TENANT_DESIRED_STATE", () => {
   test("is a plain const composed by reference: Myra first, no DB in sight", () => {
     expect(TENANT_DESIRED_STATE.workflows.length).toBeGreaterThan(0);
-    expect(TENANT_DESIRED_STATE.workflows[0]?.assetName).toBe(
-      SETUP_AGENT_ASSET_NAME,
-    );
+    expect(TENANT_DESIRED_STATE.workflows[0]?.assetName).toBe(SETUP_AGENT_ASSET_NAME);
     for (const pin of TENANT_DESIRED_STATE.workflows) {
       expect(typeof pin.assetName).toBe("string");
       expect(typeof pin.version).toBe("string");
@@ -203,8 +193,6 @@ describe("desiredStateSteps", () => {
     expect(steps[0]?.name).toBe(SETUP_AGENT_ASSET_NAME);
     expect(steps[0]?.status).toBe("pending");
     expect(typeof steps[0]?.label).toBe("string");
-    expect(
-      steps.every((s) => ["present", "pending", "blocked"].includes(s.status)),
-    ).toBe(true);
+    expect(steps.every((s) => ["present", "pending", "blocked"].includes(s.status))).toBe(true);
   });
 });
diff --git a/packages/onboarding/test/genesis.test.ts b/packages/onboarding/test/genesis.test.ts
index e8d3889d7a..825bb25270 100644
--- a/packages/onboarding/test/genesis.test.ts
+++ b/packages/onboarding/test/genesis.test.ts
@@ -152,9 +152,7 @@ describe("genesisOrJoinHubSignup", () => {
       tenantSlug: TENANT_SLUG,
       principalId: MEMBER_PRINCIPAL_ID,
     });
-    expect(joins).toEqual([
-      { tenantId: TENANT_ID, userId: "user_1", roleName: "member" },
-    ]);
+    expect(joins).toEqual([{ tenantId: TENANT_ID, userId: "user_1", roleName: "member" }]);
   });
 
   test("countUsers > 1 with zero tenants still lets the caller genesis", async () => {
diff --git a/packages/onboarding/test/huggingface-connect-routes.test.ts b/packages/onboarding/test/huggingface-connect-routes.test.ts
index 62ad959212..11cbf192b1 100644
--- a/packages/onboarding/test/huggingface-connect-routes.test.ts
+++ b/packages/onboarding/test/huggingface-connect-routes.test.ts
@@ -12,18 +12,12 @@ import { describe, expect, test } from "bun:test";
 import type { AppEnv } from "@intx/hub-api";
 import type { MiddlewareHandler } from "hono";
 import { Hono } from "hono";
-import {
-  createEnvKeyCredentialCipher,
-  createNoopCredentialCipher,
-} from "@intx/crypto";
+import { createEnvKeyCredentialCipher, createNoopCredentialCipher } from "@intx/crypto";
 import { createOnboardingRoutes } from "../src/routes";
 import type { CreateOnboardingRoutesDeps } from "../src/routes";
 import { testAndPersistCredential } from "../src/complete-credential";
 import { s256Challenge } from "@corbits/connections";
-import {
-  createInMemoryPendingSeedStore,
-  type PendingSeedStore,
-} from "../src/pending-seed";
+import { createInMemoryPendingSeedStore, type PendingSeedStore } from "../src/pending-seed";
 
 // Stands in for a stable `CREDENTIAL_ENCRYPTION_KEY`: a fresh cipher
 // built from these same bytes is indistinguishable, to the state store,
@@ -119,9 +113,7 @@ function mockHub() {
     credentials.push(row);
     return c.json(row, 201);
   });
-  hub.get("/api/tenants/ten_1/credentials", (c) =>
-    c.json({ data: credentials, nextCursor: null }),
-  );
+  hub.get("/api/tenants/ten_1/credentials", (c) => c.json({ data: credentials, nextCursor: null }));
   hub.post("/api/tenants/ten_1/catalog/providers", (c) =>
     c.json(
       {
@@ -156,9 +148,7 @@ function mockHub() {
       201,
     ),
   );
-  hub.get("/api/tenants/ten_1/catalog/offerings", (c) =>
-    c.json({ data: [], nextCursor: null }),
-  );
+  hub.get("/api/tenants/ten_1/catalog/offerings", (c) => c.json({ data: [], nextCursor: null }));
   return hub;
 }
 
@@ -166,9 +156,7 @@ function mockHub() {
  * need stubbing out here, so this now just forwards to the real
  * `testAndPersistCredential` unchanged. */
 const connectCredentialAgainstMockHub: NonNullable<
-  NonNullable<
-    CreateOnboardingRoutesDeps["huggingfaceConnect"]
-  >["connectCredential"]
+  NonNullable<CreateOnboardingRoutesDeps["huggingfaceConnect"]>["connectCredential"]
 > = (args) => testAndPersistCredential(args);
 
 function asUser(session: { userId: string }): MiddlewareHandler<AppEnv> {
@@ -181,10 +169,7 @@ function asUser(session: { userId: string }): MiddlewareHandler<AppEnv> {
   };
 }
 
-function mountAuthenticated(
-  routes: Hono<AppEnv>,
-  session: { userId: string },
-): Hono<AppEnv> {
+function mountAuthenticated(routes: Hono<AppEnv>, session: { userId: string }): Hono<AppEnv> {
   const app = new Hono<AppEnv>();
   app.use("*", asUser(session));
   app.route("/api/onboarding", routes);
@@ -215,16 +200,14 @@ function connectRoutes(
       (async () => ({ outcome: "pushed" as const, commitSha: "a".repeat(40) })),
     log: overrides.log ?? (() => undefined),
     pendingSeedStore:
-      overrides.pendingSeedStore ??
-      createInMemoryPendingSeedStore(createNoopCredentialCipher()),
+      overrides.pendingSeedStore ?? createInMemoryPendingSeedStore(createNoopCredentialCipher()),
   };
   if (overrides.omitClientId !== true) {
     deps.huggingfaceClientId = overrides.huggingfaceClientId ?? "hf_client_1";
   }
   if (overrides.huggingfaceConnect !== undefined)
     deps.huggingfaceConnect = overrides.huggingfaceConnect;
-  if (overrides.credentialCipher !== undefined)
-    deps.credentialCipher = overrides.credentialCipher;
+  if (overrides.credentialCipher !== undefined) deps.credentialCipher = overrides.credentialCipher;
   return mountAuthenticated(createOnboardingRoutes(deps), session);
 }
 
@@ -253,9 +236,7 @@ describe("GET /oauth/huggingface/start", () => {
     expect(location.searchParams.get("client_id")).toBe("hf_client_1");
     expect(location.searchParams.get("scope")).toBe("openid inference-api");
     expect(location.searchParams.get("code_challenge_method")).toBe("S256");
-    expect(location.searchParams.get("code_challenge")).toMatch(
-      /^[A-Za-z0-9_-]{43}$/,
-    );
+    expect(location.searchParams.get("code_challenge")).toMatch(/^[A-Za-z0-9_-]{43}$/);
     expect(location.searchParams.get("redirect_uri")).toBe(
       "https://bench.example.com/api/onboarding/oauth/huggingface/callback",
     );
@@ -266,26 +247,19 @@ describe("GET /oauth/huggingface/start", () => {
     // percent-encodes it in `Set-Cookie`, so compare decoded rather than
     // as a raw substring.
     const cookieMatch = /workbench_huggingface_connect=([^;]+)/.exec(setCookie);
-    expect(
-      cookieMatch?.[1] !== undefined
-        ? decodeURIComponent(cookieMatch[1])
-        : undefined,
-    ).toBe(state ?? undefined);
+    expect(cookieMatch?.[1] !== undefined ? decodeURIComponent(cookieMatch[1]) : undefined).toBe(
+      state ?? undefined,
+    );
     expect(setCookie).toContain("HttpOnly");
   });
 
   test("without a configured client id, the flow reports not_configured and parks nothing", async () => {
     const app = connectRoutes({ omitClientId: true });
 
-    const response = await app.request(
-      "/api/onboarding/oauth/huggingface/start",
-    );
+    const response = await app.request("/api/onboarding/oauth/huggingface/start");
 
     expect(response.status).toBe(302);
-    const redirect = new URL(
-      response.headers.get("location") ?? "",
-      "https://x",
-    );
+    const redirect = new URL(response.headers.get("location") ?? "", "https://x");
     expect(redirect.searchParams.get("connect")).toBe("huggingface");
     expect(redirect.searchParams.get("outcome")).toBe("error");
     expect(redirect.searchParams.get("code")).toBe("not_configured");
@@ -299,10 +273,7 @@ describe("GET /oauth/huggingface/start", () => {
     const second = await app.request("/api/onboarding/oauth/huggingface/start");
 
     expect(second.status).toBe(302);
-    const redirect = new URL(
-      second.headers.get("location") ?? "",
-      "https://bench.example.com",
-    );
+    const redirect = new URL(second.headers.get("location") ?? "", "https://bench.example.com");
     expect(redirect.searchParams.get("outcome")).toBe("error");
     expect(redirect.searchParams.get("code")).toBe("rate_limited");
   });
@@ -342,9 +313,7 @@ describe("GET /oauth/huggingface/callback", () => {
             provider: args.provider,
             apiKey: args.apiKey,
             userId: args.userId,
-            ...(args.expiresAt !== undefined
-              ? { expiresAt: args.expiresAt }
-              : {}),
+            ...(args.expiresAt !== undefined ? { expiresAt: args.expiresAt } : {}),
           };
           connections.push(
             args.credentialMetadata !== undefined
@@ -372,10 +341,7 @@ describe("GET /oauth/huggingface/callback", () => {
     );
 
     expect(response.status).toBe(302);
-    const redirect = new URL(
-      response.headers.get("location") ?? "",
-      "https://bench.example.com",
-    );
+    const redirect = new URL(response.headers.get("location") ?? "", "https://bench.example.com");
     expect(redirect.pathname).toBe("/onboarding");
     expect(redirect.searchParams.get("connect")).toBe("huggingface");
     expect(redirect.searchParams.get("outcome")).toBe("connected");
@@ -389,9 +355,9 @@ describe("GET /oauth/huggingface/callback", () => {
     expect(exchanges[0]?.redirectUri).toBe(
       "https://bench.example.com/api/onboarding/oauth/huggingface/callback",
     );
-    expect(
-      exchanges[0] && (await s256Challenge(exchanges[0].codeVerifier)),
-    ).toBe(location.searchParams.get("code_challenge") ?? "");
+    expect(exchanges[0] && (await s256Challenge(exchanges[0].codeVerifier))).toBe(
+      location.searchParams.get("code_challenge") ?? "",
+    );
 
     expect(connections).toEqual([
       {
@@ -445,10 +411,7 @@ describe("GET /oauth/huggingface/callback", () => {
       { headers: { cookie } },
     );
 
-    const redirect = new URL(
-      response.headers.get("location") ?? "",
-      "https://x",
-    );
+    const redirect = new URL(response.headers.get("location") ?? "", "https://x");
     expect(redirect.searchParams.get("outcome")).toBe("error");
     expect(redirect.searchParams.get("code")).toBe("state_expired");
     expect(exchanged).toBe(0);
@@ -489,10 +452,7 @@ describe("GET /oauth/huggingface/callback", () => {
       { headers: { cookie } },
     );
 
-    const redirect = new URL(
-      response.headers.get("location") ?? "",
-      "https://x",
-    );
+    const redirect = new URL(response.headers.get("location") ?? "", "https://x");
     expect(redirect.searchParams.get("outcome")).toBe("error");
     expect(redirect.searchParams.get("code")).toBe("state_expired");
     expect(exchanged).toBe(0);
@@ -521,19 +481,11 @@ describe("GET /oauth/huggingface/callback", () => {
       const second = await app.request(path, { headers: { cookie } });
 
       expect(
-        new URL(
-          first.headers.get("location") ?? "",
-          "https://x",
-        ).searchParams.get("outcome"),
+        new URL(first.headers.get("location") ?? "", "https://x").searchParams.get("outcome"),
       ).toBe("connected");
-      const secondRedirect = new URL(
-        second.headers.get("location") ?? "",
-        "https://x",
-      );
+      const secondRedirect = new URL(second.headers.get("location") ?? "", "https://x");
       expect(secondRedirect.searchParams.get("outcome")).toBe("connected");
-      expect(secondRedirect.searchParams.get("tenantSlug")).toBe(
-        "user-1-user1",
-      );
+      expect(secondRedirect.searchParams.get("tenantSlug")).toBe("user-1-user1");
     } finally {
       server.stop(true);
     }
@@ -566,10 +518,7 @@ describe("GET /oauth/huggingface/callback", () => {
 
       const first = await afterRestart.request(path, { headers: { cookie } });
       expect(
-        new URL(
-          first.headers.get("location") ?? "",
-          "https://x",
-        ).searchParams.get("outcome"),
+        new URL(first.headers.get("location") ?? "", "https://x").searchParams.get("outcome"),
       ).toBe("connected");
 
       // Replaying the same cookie and query state against the
@@ -578,10 +527,7 @@ describe("GET /oauth/huggingface/callback", () => {
       // credential.
       const replay = await afterRestart.request(path, { headers: { cookie } });
       expect(
-        new URL(
-          replay.headers.get("location") ?? "",
-          "https://x",
-        ).searchParams.get("outcome"),
+        new URL(replay.headers.get("location") ?? "", "https://x").searchParams.get("outcome"),
       ).toBe("connected");
     } finally {
       server.stop(true);
@@ -618,16 +564,11 @@ describe("GET /oauth/huggingface/callback", () => {
       { headers: { cookie: stateCookie(started) } },
     );
 
-    const redirect = new URL(
-      response.headers.get("location") ?? "",
-      "https://x",
-    );
+    const redirect = new URL(response.headers.get("location") ?? "", "https://x");
     expect(redirect.searchParams.get("outcome")).toBe("error");
     expect(redirect.searchParams.get("code")).toBe("exchange_failed");
     expect(connected).toBe(0);
-    expect(lines.some((line) => line.includes("code exchange failed"))).toBe(
-      true,
-    );
+    expect(lines.some((line) => line.includes("code exchange failed"))).toBe(true);
   });
 
   test("a minted token that fails its probe is a key_rejected ending, not a success", async () => {
@@ -648,10 +589,7 @@ describe("GET /oauth/huggingface/callback", () => {
       { headers: { cookie: stateCookie(started) } },
     );
 
-    const redirect = new URL(
-      response.headers.get("location") ?? "",
-      "https://x",
-    );
+    const redirect = new URL(response.headers.get("location") ?? "", "https://x");
     expect(redirect.searchParams.get("outcome")).toBe("error");
     expect(redirect.searchParams.get("code")).toBe("key_rejected");
   });
@@ -675,10 +613,7 @@ describe("GET /oauth/huggingface/callback", () => {
       { headers: { cookie: stateCookie(started) } },
     );
 
-    const redirect = new URL(
-      response.headers.get("location") ?? "",
-      "https://x",
-    );
+    const redirect = new URL(response.headers.get("location") ?? "", "https://x");
     expect(redirect.searchParams.get("code")).toBe("setup_failed");
     expect(lines.join("\n")).not.toContain("hf_oauth_minted");
   });
@@ -711,10 +646,7 @@ describe("GET /oauth/huggingface/callback", () => {
         { headers: { cookie: stateCookie(started) } },
       );
 
-      const redirect = new URL(
-        response.headers.get("location") ?? "",
-        "https://x",
-      );
+      const redirect = new URL(response.headers.get("location") ?? "", "https://x");
       expect(redirect.searchParams.get("outcome")).toBe("connected");
       expect(deployPosts).toBe(0);
     } finally {
diff --git a/packages/onboarding/test/migrations.test.ts b/packages/onboarding/test/migrations.test.ts
index 8514f268e2..ace4670f49 100644
--- a/packages/onboarding/test/migrations.test.ts
+++ b/packages/onboarding/test/migrations.test.ts
@@ -22,9 +22,7 @@ const describeIfDb = dbGate(databaseUrl, import.meta.path);
 const migrationNames = ["0001_pending_seed"];
 
 describeIfDb("applyOnboardingMigrations", () => {
-  const scratchUrl = scratchUrlFor(
-    databaseUrl ?? "postgres://localhost:5432/unused",
-  );
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused");
   const scratchDatabase = new URL(scratchUrl).pathname.replace(/^\//, "");
 
   beforeAll(async () => {
@@ -70,9 +68,7 @@ describeIfDb("applyOnboardingMigrations", () => {
         `SELECT table_name FROM information_schema.tables ` +
           `WHERE table_schema = 'onboarding' AND table_name = 'pending_seed'`,
       );
-      expect(tables.map((row) => String(row["table_name"]))).toEqual([
-        "pending_seed",
-      ]);
+      expect(tables.map((row) => String(row["table_name"]))).toEqual(["pending_seed"]);
 
       const inPublic = await sql.unsafe(
         `SELECT table_name FROM information_schema.tables ` +
@@ -85,9 +81,10 @@ describeIfDb("applyOnboardingMigrations", () => {
           `JOIN pg_attribute a ON a.attrelid = i.indrelid AND a.attnum = ANY(i.indkey) ` +
           `WHERE i.indrelid = 'onboarding.pending_seed'::regclass AND i.indisprimary`,
       );
-      expect(
-        primaryKeyColumns.map((row) => String(row["attname"])).sort(),
-      ).toEqual(["tenant_id", "user_id"]);
+      expect(primaryKeyColumns.map((row) => String(row["attname"])).sort()).toEqual([
+        "tenant_id",
+        "user_id",
+      ]);
     } finally {
       await sql.end();
     }
diff --git a/packages/onboarding/test/openrouter-connect-routes.test.ts b/packages/onboarding/test/openrouter-connect-routes.test.ts
index 33ed954c45..7fee04d13a 100644
--- a/packages/onboarding/test/openrouter-connect-routes.test.ts
+++ b/packages/onboarding/test/openrouter-connect-routes.test.ts
@@ -11,18 +11,12 @@ import { describe, expect, test } from "bun:test";
 import type { AppEnv } from "@intx/hub-api";
 import type { MiddlewareHandler } from "hono";
 import { Hono } from "hono";
-import {
-  createEnvKeyCredentialCipher,
-  createNoopCredentialCipher,
-} from "@intx/crypto";
+import { createEnvKeyCredentialCipher, createNoopCredentialCipher } from "@intx/crypto";
 import { createOnboardingRoutes } from "../src/routes";
 import type { CreateOnboardingRoutesDeps } from "../src/routes";
 import { testAndPersistCredential } from "../src/complete-credential";
 import { s256Challenge } from "../src/openrouter-connect";
-import {
-  createInMemoryPendingSeedStore,
-  type PendingSeedStore,
-} from "../src/pending-seed";
+import { createInMemoryPendingSeedStore, type PendingSeedStore } from "../src/pending-seed";
 
 const MOCK_TIMESTAMP = "2026-01-01T00:00:00.000Z";
 
@@ -122,9 +116,7 @@ function mockHub(args: { tenantSlug?: string } = {}) {
     credentials.push(row);
     return c.json(row, 201);
   });
-  hub.get("/api/tenants/ten_1/credentials", (c) =>
-    c.json({ data: credentials, nextCursor: null }),
-  );
+  hub.get("/api/tenants/ten_1/credentials", (c) => c.json({ data: credentials, nextCursor: null }));
   hub.post("/api/tenants/ten_1/catalog/providers", (c) =>
     c.json(
       {
@@ -159,9 +151,7 @@ function mockHub(args: { tenantSlug?: string } = {}) {
       201,
     ),
   );
-  hub.get("/api/tenants/ten_1/catalog/offerings", (c) =>
-    c.json({ data: [], nextCursor: null }),
-  );
+  hub.get("/api/tenants/ten_1/catalog/offerings", (c) => c.json({ data: [], nextCursor: null }));
   return hub;
 }
 
@@ -169,9 +159,7 @@ function mockHub(args: { tenantSlug?: string } = {}) {
  * need stubbing out here, so this now just forwards to the real
  * `testAndPersistCredential` unchanged. */
 const connectCredentialAgainstMockHub: NonNullable<
-  NonNullable<
-    CreateOnboardingRoutesDeps["openrouterConnect"]
-  >["connectCredential"]
+  NonNullable<CreateOnboardingRoutesDeps["openrouterConnect"]>["connectCredential"]
 > = (args) => testAndPersistCredential(args);
 
 // Stands in for a stable `CREDENTIAL_ENCRYPTION_KEY`: a fresh cipher
@@ -193,10 +181,7 @@ function asUser(session: { userId: string }): MiddlewareHandler<AppEnv> {
   };
 }
 
-function mountAuthenticated(
-  routes: Hono<AppEnv>,
-  session: { userId: string },
-): Hono<AppEnv> {
+function mountAuthenticated(routes: Hono<AppEnv>, session: { userId: string }): Hono<AppEnv> {
   const app = new Hono<AppEnv>();
   app.use("*", asUser(session));
   app.route("/api/onboarding", routes);
@@ -225,13 +210,11 @@ function connectRoutes(
       (async () => ({ outcome: "pushed" as const, commitSha: "a".repeat(40) })),
     log: overrides.log ?? (() => undefined),
     pendingSeedStore:
-      overrides.pendingSeedStore ??
-      createInMemoryPendingSeedStore(createNoopCredentialCipher()),
+      overrides.pendingSeedStore ?? createInMemoryPendingSeedStore(createNoopCredentialCipher()),
   };
   if (overrides.openrouterConnect !== undefined)
     deps.openrouterConnect = overrides.openrouterConnect;
-  if (overrides.credentialCipher !== undefined)
-    deps.credentialCipher = overrides.credentialCipher;
+  if (overrides.credentialCipher !== undefined) deps.credentialCipher = overrides.credentialCipher;
   return mountAuthenticated(createOnboardingRoutes(deps), session);
 }
 
@@ -258,9 +241,7 @@ describe("GET /oauth/openrouter/start", () => {
     expect(location.origin).toBe("https://openrouter.ai");
     expect(location.pathname).toBe("/auth");
     expect(location.searchParams.get("code_challenge_method")).toBe("S256");
-    expect(location.searchParams.get("code_challenge")).toMatch(
-      /^[A-Za-z0-9_-]{43}$/,
-    );
+    expect(location.searchParams.get("code_challenge")).toMatch(/^[A-Za-z0-9_-]{43}$/);
     expect(location.searchParams.get("callback_url")).toBe(
       "https://bench.example.com/api/onboarding/oauth/openrouter/callback",
     );
@@ -303,10 +284,7 @@ describe("GET /oauth/openrouter/start", () => {
     const second = await app.request("/api/onboarding/oauth/openrouter/start");
 
     expect(second.status).toBe(302);
-    const redirect = new URL(
-      second.headers.get("location") ?? "",
-      "https://bench.example.com",
-    );
+    const redirect = new URL(second.headers.get("location") ?? "", "https://bench.example.com");
     expect(redirect.pathname).toBe("/onboarding");
     expect(redirect.searchParams.get("outcome")).toBe("error");
     expect(redirect.searchParams.get("code")).toBe("rate_limited");
@@ -359,10 +337,7 @@ describe("GET /oauth/openrouter/callback", () => {
     );
 
     expect(response.status).toBe(302);
-    const redirect = new URL(
-      response.headers.get("location") ?? "",
-      "https://bench.example.com",
-    );
+    const redirect = new URL(response.headers.get("location") ?? "", "https://bench.example.com");
     expect(redirect.pathname).toBe("/onboarding");
     expect(redirect.searchParams.get("connect")).toBe("openrouter");
     expect(redirect.searchParams.get("outcome")).toBe("connected");
@@ -374,9 +349,9 @@ describe("GET /oauth/openrouter/callback", () => {
     expect(exchanges[0]?.code).toBe("auth_code_1");
     // The verifier handed to the exchange is the one whose S256 was
     // sent to OpenRouter at /start — the round trip is real PKCE.
-    expect(
-      exchanges[0] && (await s256Challenge(exchanges[0].codeVerifier)),
-    ).toBe(location.searchParams.get("code_challenge") ?? "");
+    expect(exchanges[0] && (await s256Challenge(exchanges[0].codeVerifier))).toBe(
+      location.searchParams.get("code_challenge") ?? "",
+    );
 
     // The minted key connects as an ordinary openrouter credential —
     // the same generalized path a pasted key takes.
@@ -422,10 +397,7 @@ describe("GET /oauth/openrouter/callback", () => {
     );
 
     expect(response.status).toBe(302);
-    const redirect = new URL(
-      response.headers.get("location") ?? "",
-      "https://bench.example.com",
-    );
+    const redirect = new URL(response.headers.get("location") ?? "", "https://bench.example.com");
     expect(redirect.searchParams.get("outcome")).toBe("error");
     expect(redirect.searchParams.get("code")).toBe("state_expired");
     expect(exchanged).toBe(0);
@@ -472,10 +444,7 @@ describe("GET /oauth/openrouter/callback", () => {
     );
 
     expect(response.status).toBe(302);
-    const redirect = new URL(
-      response.headers.get("location") ?? "",
-      "https://x",
-    );
+    const redirect = new URL(response.headers.get("location") ?? "", "https://x");
     expect(redirect.searchParams.get("outcome")).toBe("error");
     expect(redirect.searchParams.get("code")).toBe("state_expired");
     expect(exchanged).toBe(0);
@@ -506,19 +475,11 @@ describe("GET /oauth/openrouter/callback", () => {
       const second = await app.request(path, { headers: { cookie } });
 
       expect(
-        new URL(
-          first.headers.get("location") ?? "",
-          "https://x",
-        ).searchParams.get("outcome"),
+        new URL(first.headers.get("location") ?? "", "https://x").searchParams.get("outcome"),
       ).toBe("connected");
-      const secondRedirect = new URL(
-        second.headers.get("location") ?? "",
-        "https://x",
-      );
+      const secondRedirect = new URL(second.headers.get("location") ?? "", "https://x");
       expect(secondRedirect.searchParams.get("outcome")).toBe("connected");
-      expect(secondRedirect.searchParams.get("tenantSlug")).toBe(
-        "user-1-user1",
-      );
+      expect(secondRedirect.searchParams.get("tenantSlug")).toBe("user-1-user1");
     } finally {
       server.stop(true);
     }
@@ -549,10 +510,7 @@ describe("GET /oauth/openrouter/callback", () => {
       await app.request(path, { headers: { cookie } });
       const second = await app.request(path, { headers: { cookie } });
 
-      const secondRedirect = new URL(
-        second.headers.get("location") ?? "",
-        "https://x",
-      );
+      const secondRedirect = new URL(second.headers.get("location") ?? "", "https://x");
       expect(secondRedirect.searchParams.get("outcome")).toBe("connected");
       expect(secondRedirect.searchParams.get("tenantSlug")).toBe("acme");
     } finally {
@@ -585,10 +543,7 @@ describe("GET /oauth/openrouter/callback", () => {
     });
 
     expect(
-      new URL(
-        replayed.headers.get("location") ?? "",
-        "https://x",
-      ).searchParams.get("code"),
+      new URL(replayed.headers.get("location") ?? "", "https://x").searchParams.get("code"),
     ).toBe("state_expired");
   });
 
@@ -618,10 +573,7 @@ describe("GET /oauth/openrouter/callback", () => {
 
       const first = await afterRestart.request(path, { headers: { cookie } });
       expect(
-        new URL(
-          first.headers.get("location") ?? "",
-          "https://x",
-        ).searchParams.get("outcome"),
+        new URL(first.headers.get("location") ?? "", "https://x").searchParams.get("outcome"),
       ).toBe("connected");
 
       // Replaying the same cookie against the post-restart app — no new
@@ -629,10 +581,7 @@ describe("GET /oauth/openrouter/callback", () => {
       // request's connect already persisted the credential.
       const replay = await afterRestart.request(path, { headers: { cookie } });
       expect(
-        new URL(
-          replay.headers.get("location") ?? "",
-          "https://x",
-        ).searchParams.get("outcome"),
+        new URL(replay.headers.get("location") ?? "", "https://x").searchParams.get("outcome"),
       ).toBe("connected");
     } finally {
       server.stop(true);
@@ -668,16 +617,11 @@ describe("GET /oauth/openrouter/callback", () => {
       { headers: { cookie: stateCookie(started) } },
     );
 
-    const redirect = new URL(
-      response.headers.get("location") ?? "",
-      "https://x",
-    );
+    const redirect = new URL(response.headers.get("location") ?? "", "https://x");
     expect(redirect.searchParams.get("outcome")).toBe("error");
     expect(redirect.searchParams.get("code")).toBe("exchange_failed");
     expect(connected).toBe(0);
-    expect(lines.some((line) => line.includes("code exchange failed"))).toBe(
-      true,
-    );
+    expect(lines.some((line) => line.includes("code exchange failed"))).toBe(true);
   });
 
   test("a minted key that fails its probe is a key_rejected ending, not a success", async () => {
@@ -697,10 +641,7 @@ describe("GET /oauth/openrouter/callback", () => {
       { headers: { cookie: stateCookie(started) } },
     );
 
-    const redirect = new URL(
-      response.headers.get("location") ?? "",
-      "https://x",
-    );
+    const redirect = new URL(response.headers.get("location") ?? "", "https://x");
     expect(redirect.searchParams.get("outcome")).toBe("error");
     expect(redirect.searchParams.get("code")).toBe("key_rejected");
   });
@@ -723,10 +664,7 @@ describe("GET /oauth/openrouter/callback", () => {
       { headers: { cookie: stateCookie(started) } },
     );
 
-    const redirect = new URL(
-      response.headers.get("location") ?? "",
-      "https://x",
-    );
+    const redirect = new URL(response.headers.get("location") ?? "", "https://x");
     expect(redirect.searchParams.get("code")).toBe("setup_failed");
     expect(lines.join("\n")).not.toContain("sk-or-v1-minted");
   });
@@ -765,10 +703,7 @@ describe("GET /oauth/openrouter/callback", () => {
         { headers: { cookie: stateCookie(started) } },
       );
 
-      const redirect = new URL(
-        response.headers.get("location") ?? "",
-        "https://x",
-      );
+      const redirect = new URL(response.headers.get("location") ?? "", "https://x");
       expect(redirect.searchParams.get("outcome")).toBe("connected");
       expect(deployPosts).toBe(0);
     } finally {
diff --git a/packages/onboarding/test/pending-seed-store.drizzle.test.ts b/packages/onboarding/test/pending-seed-store.drizzle.test.ts
index e6a33cd0d8..7dbbdb0a72 100644
--- a/packages/onboarding/test/pending-seed-store.drizzle.test.ts
+++ b/packages/onboarding/test/pending-seed-store.drizzle.test.ts
@@ -18,18 +18,12 @@
 import { afterAll, beforeAll, expect, test } from "bun:test";
 import { drizzle } from "drizzle-orm/postgres-js";
 import postgres from "postgres";
-import {
-  createEnvKeyCredentialCipher,
-  createNoopCredentialCipher,
-} from "@intx/crypto";
+import { createEnvKeyCredentialCipher, createNoopCredentialCipher } from "@intx/crypto";
 
 import { e2eDatabaseUrl } from "../../../scripts/e2e/database-url";
 import { applyOnboardingMigrations } from "../src/migrations";
 import { dbGate } from "../../../scripts/e2e/db-gate";
-import {
-  createDrizzlePendingSeedStore,
-  type PendingSeed,
-} from "../src/pending-seed";
+import { createDrizzlePendingSeedStore, type PendingSeed } from "../src/pending-seed";
 
 function scratchUrlFor(e2eUrl: string): string {
   const url = new URL(e2eUrl);
@@ -53,9 +47,7 @@ const SEED: PendingSeed = {
 };
 
 describeIfDb("createDrizzlePendingSeedStore", () => {
-  const scratchUrl = scratchUrlFor(
-    databaseUrl ?? "postgres://localhost:5432/unused",
-  );
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused");
   const scratchDatabase = new URL(scratchUrl).pathname.replace(/^\//, "");
 
   beforeAll(async () => {
@@ -116,10 +108,7 @@ describeIfDb("createDrizzlePendingSeedStore", () => {
     const sql = postgres(scratchUrl, { max: 1 });
     try {
       const db = drizzle(sql);
-      const store = createDrizzlePendingSeedStore(
-        db,
-        createNoopCredentialCipher(),
-      );
+      const store = createDrizzlePendingSeedStore(db, createNoopCredentialCipher());
       const seed: PendingSeed = { ...SEED, userId: "user_noop" };
 
       await store.put(seed);
@@ -175,10 +164,7 @@ describeIfDb("createDrizzlePendingSeedStore", () => {
 
     const writeSql = postgres(scratchUrl, { max: 1 });
     try {
-      const writeStore = createDrizzlePendingSeedStore(
-        drizzle(writeSql),
-        cipher,
-      );
+      const writeStore = createDrizzlePendingSeedStore(drizzle(writeSql), cipher);
       await writeStore.put(seed);
     } finally {
       await writeSql.end();
diff --git a/packages/onboarding/test/plant-env-credentials.test.ts b/packages/onboarding/test/plant-env-credentials.test.ts
index a374b3da3d..70355ce058 100644
--- a/packages/onboarding/test/plant-env-credentials.test.ts
+++ b/packages/onboarding/test/plant-env-credentials.test.ts
@@ -47,11 +47,7 @@ function providerRow(providerKey: string) {
   };
 }
 
-function credentialRow(
-  fixture: CredentialFixture,
-  status: "active" | "revoked",
-  idPrefix: string,
-) {
+function credentialRow(fixture: CredentialFixture, status: "active" | "revoked", idPrefix: string) {
   const providerKey = fixture.providerKey ?? providerKeyOf(fixture.name);
   return {
     id: `${idPrefix}${fixture.name}`,
@@ -73,35 +69,23 @@ function credentialRow(
  * itself (the plant/probe indirections are always passed as fakes in
  * these tests). */
 function credentialsApi(
-  active:
-    ReadonlySet<string | CredentialFixture> | readonly CredentialFixture[],
-  revoked:
-    ReadonlySet<string | CredentialFixture> | readonly CredentialFixture[] = [],
+  active: ReadonlySet<string | CredentialFixture> | readonly CredentialFixture[],
+  revoked: ReadonlySet<string | CredentialFixture> | readonly CredentialFixture[] = [],
 ): ApiCall {
   // Read `active`/`revoked` fresh on every call rather than snapshotting
   // once: several tests mutate the `Set` they passed in (mirroring a
   // real `seedCatalog`'s side effect) after the fake is built, and rely
   // on the next call seeing that mutation.
   function currentFixtures(
-    entries:
-      ReadonlySet<string | CredentialFixture> | readonly CredentialFixture[],
+    entries: ReadonlySet<string | CredentialFixture> | readonly CredentialFixture[],
   ): CredentialFixture[] {
-    return [...entries].map((entry) =>
-      typeof entry === "string" ? fixture(entry) : entry,
-    );
+    return [...entries].map((entry) => (typeof entry === "string" ? fixture(entry) : entry));
   }
   return async (method, path) => {
-    if (
-      method === "GET" &&
-      path.startsWith(`/api/tenants/${TENANT_ID}/credentials`)
-    ) {
+    if (method === "GET" && path.startsWith(`/api/tenants/${TENANT_ID}/credentials`)) {
       const rows = [
-        ...currentFixtures(active).map((f) =>
-          credentialRow(f, "active", "cred_"),
-        ),
-        ...currentFixtures(revoked).map((f) =>
-          credentialRow(f, "revoked", "cred_revoked_"),
-        ),
+        ...currentFixtures(active).map((f) => credentialRow(f, "active", "cred_")),
+        ...currentFixtures(revoked).map((f) => credentialRow(f, "revoked", "cred_revoked_")),
       ];
       return {
         status: 200,
@@ -109,10 +93,7 @@ function credentialsApi(
         cookies: [],
       };
     }
-    if (
-      method === "GET" &&
-      path.startsWith(`/api/tenants/${TENANT_ID}/providers`)
-    ) {
+    if (method === "GET" && path.startsWith(`/api/tenants/${TENANT_ID}/providers`)) {
       const providerKeys = new Set(
         [...currentFixtures(active), ...currentFixtures(revoked)].map(
           (f) => f.providerKey ?? providerKeyOf(f.name),
@@ -137,10 +118,7 @@ function credentialsApi(
 function paginatedCredentialsApi(pages: string[][]): ApiCall {
   const providerKeys = new Set(pages.flat().map(providerKeyOf));
   return async (method, path) => {
-    if (
-      method === "GET" &&
-      path.startsWith(`/api/tenants/${TENANT_ID}/providers`)
-    ) {
+    if (method === "GET" && path.startsWith(`/api/tenants/${TENANT_ID}/providers`)) {
       return {
         status: 200,
         data: {
@@ -150,24 +128,18 @@ function paginatedCredentialsApi(pages: string[][]): ApiCall {
         cookies: [],
       };
     }
-    if (!(
-      method === "GET" &&
-      path.startsWith(`/api/tenants/${TENANT_ID}/credentials`)
-    )) {
+    if (!(method === "GET" && path.startsWith(`/api/tenants/${TENANT_ID}/credentials`))) {
       throw new Error(`unexpected call: ${method} ${path}`);
     }
     const url = new URL(path, "http://hub.test");
     const cursor = url.searchParams.get("cursor");
     const pageIndex = cursor === null ? 0 : Number(cursor);
     const names = pages[pageIndex] ?? [];
-    const nextCursor =
-      pageIndex + 1 < pages.length ? String(pageIndex + 1) : null;
+    const nextCursor = pageIndex + 1 < pages.length ? String(pageIndex + 1) : null;
     return {
       status: 200,
       data: {
-        data: names.map((name) =>
-          credentialRow(fixture(name), "active", "cred_"),
-        ),
+        data: names.map((name) => credentialRow(fixture(name), "active", "cred_")),
         nextCursor,
       },
       cookies: [],
@@ -179,21 +151,14 @@ function paginatedCredentialsApi(pages: string[][]): ApiCall {
  * follow-nextCursor test: the target provider row lives on page two,
  * paired with a single active credential already sitting on that
  * provider so the test can assert the plant is recognized. */
-function paginatedProvidersApi(
-  pages: string[][],
-  activeCredentialName: string,
-): ApiCall {
+function paginatedProvidersApi(pages: string[][], activeCredentialName: string): ApiCall {
   return async (method, path) => {
-    if (
-      method === "GET" &&
-      path.startsWith(`/api/tenants/${TENANT_ID}/providers`)
-    ) {
+    if (method === "GET" && path.startsWith(`/api/tenants/${TENANT_ID}/providers`)) {
       const url = new URL(path, "http://hub.test");
       const cursor = url.searchParams.get("cursor");
       const pageIndex = cursor === null ? 0 : Number(cursor);
       const names = pages[pageIndex] ?? [];
-      const nextCursor =
-        pageIndex + 1 < pages.length ? String(pageIndex + 1) : null;
+      const nextCursor = pageIndex + 1 < pages.length ? String(pageIndex + 1) : null;
       return {
         status: 200,
         data: {
@@ -203,16 +168,11 @@ function paginatedProvidersApi(
         cookies: [],
       };
     }
-    if (
-      method === "GET" &&
-      path.startsWith(`/api/tenants/${TENANT_ID}/credentials`)
-    ) {
+    if (method === "GET" && path.startsWith(`/api/tenants/${TENANT_ID}/credentials`)) {
       return {
         status: 200,
         data: {
-          data: [
-            credentialRow(fixture(activeCredentialName), "active", "cred_"),
-          ],
+          data: [credentialRow(fixture(activeCredentialName), "active", "cred_")],
           nextCursor: null,
         },
         cookies: [],
@@ -358,9 +318,7 @@ describe("plantEnvProviderCredentials", () => {
     expect(outcomes).toEqual([{ provider: "anthropic", status: "skipped" }]);
     expect(probed).toBe(false);
     expect(seedCatalogCalls).toHaveLength(1);
-    expect(seedCatalogCalls[0]?.existingCredentialId).toBe(
-      "cred_anthropic-default",
-    );
+    expect(seedCatalogCalls[0]?.existingCredentialId).toBe("cred_anthropic-default");
     expect(seedCatalogCalls[0]?.apiKey).toBeUndefined();
     expect(lines).toHaveLength(1);
     expect(lines[0]).toContain("skipped");
@@ -489,9 +447,7 @@ describe("plantEnvProviderCredentials", () => {
     });
 
     expect(outcomes).toEqual([{ provider: "ollama", status: "planted" }]);
-    expect(seedCatalogCalls[0]?.baseURLOverride).toBe(
-      "https://home-mac.example.ts.net",
-    );
+    expect(seedCatalogCalls[0]?.baseURLOverride).toBe("https://home-mac.example.ts.net");
   });
 
   test("an already-active ollama credential still threads its base URL into the catalog backfill", async () => {
@@ -514,13 +470,9 @@ describe("plantEnvProviderCredentials", () => {
     });
 
     expect(outcomes).toEqual([{ provider: "ollama", status: "skipped" }]);
-    expect(seedCatalogCalls[0]?.existingCredentialId).toBe(
-      "cred_ollama-default",
-    );
+    expect(seedCatalogCalls[0]?.existingCredentialId).toBe("cred_ollama-default");
     expect(seedCatalogCalls[0]?.apiKey).toBeUndefined();
-    expect(seedCatalogCalls[0]?.baseURLOverride).toBe(
-      "https://home-mac.example.ts.net",
-    );
+    expect(seedCatalogCalls[0]?.baseURLOverride).toBe("https://home-mac.example.ts.net");
   });
 
   test("one provider's failed probe never blocks another provider's plant", async () => {
@@ -629,8 +581,7 @@ describe("plantEnvProviderCredentials", () => {
       log,
       testCredential: async () => ({
         ok: false,
-        message:
-          "OpenAI rejected key sk-oai-real-secret-value-echoed-back: invalid_api_key",
+        message: "OpenAI rejected key sk-oai-real-secret-value-echoed-back: invalid_api_key",
       }),
     });
 
@@ -648,10 +599,7 @@ describe("plantEnvProviderCredentials", () => {
     const seedCatalogCalls: SeedCatalogArgs[] = [];
     const outcomes = await plantEnvProviderCredentials({
       // The active "anthropic-default" row lives on page two only.
-      api: paginatedCredentialsApi([
-        ["other-provider-default"],
-        ["anthropic-default"],
-      ]),
+      api: paginatedCredentialsApi([["other-provider-default"], ["anthropic-default"]]),
       cookies: [],
       tenantId: TENANT_ID,
       envProviderKeys: { anthropic: "sk-ant-real" },
@@ -668,9 +616,7 @@ describe("plantEnvProviderCredentials", () => {
 
     expect(outcomes).toEqual([{ provider: "anthropic", status: "skipped" }]);
     expect(probed).toBe(false);
-    expect(seedCatalogCalls[0]?.existingCredentialId).toBe(
-      "cred_anthropic-default",
-    );
+    expect(seedCatalogCalls[0]?.existingCredentialId).toBe("cred_anthropic-default");
   });
 
   test("findProviderId follows nextCursor instead of reading only page one", async () => {
@@ -679,10 +625,7 @@ describe("plantEnvProviderCredentials", () => {
     const seedCatalogCalls: SeedCatalogArgs[] = [];
     const outcomes = await plantEnvProviderCredentials({
       // The "anthropic" provider row lives on page two only.
-      api: paginatedProvidersApi(
-        [["other-provider"], ["anthropic"]],
-        "anthropic-default",
-      ),
+      api: paginatedProvidersApi([["other-provider"], ["anthropic"]], "anthropic-default"),
       cookies: [],
       tenantId: TENANT_ID,
       envProviderKeys: { anthropic: "sk-ant-real" },
@@ -699,9 +642,7 @@ describe("plantEnvProviderCredentials", () => {
 
     expect(outcomes).toEqual([{ provider: "anthropic", status: "skipped" }]);
     expect(probed).toBe(false);
-    expect(seedCatalogCalls[0]?.existingCredentialId).toBe(
-      "cred_anthropic-default",
-    );
+    expect(seedCatalogCalls[0]?.existingCredentialId).toBe("cred_anthropic-default");
   });
 
   test("a non-inference credential type on the same provider is not recognized as the plant", async () => {
diff --git a/packages/onboarding/test/provision.test.ts b/packages/onboarding/test/provision.test.ts
index e1e1335186..c92b5371bd 100644
--- a/packages/onboarding/test/provision.test.ts
+++ b/packages/onboarding/test/provision.test.ts
@@ -1,10 +1,7 @@
 import { describe, expect, test } from "bun:test";
 import type { ApiCall } from "@corbits/hub-api-client";
 import type { HubSignupTenancy } from "../src/genesis";
-import {
-  personalTenantSlug,
-  provisionPersonalTenantIfNeeded,
-} from "../src/provision";
+import { personalTenantSlug, provisionPersonalTenantIfNeeded } from "../src/provision";
 
 const TENANT_ID = "ten_new";
 const PRINCIPAL_ID = "prn_new";
@@ -80,9 +77,7 @@ function argsFor(partial: {
 
 describe("personalTenantSlug", () => {
   test("derives a lowercase-kebab slug from the email and a user-id fragment", () => {
-    expect(personalTenantSlug("Alice.Smith@example.com", "user_id_1")).toBe(
-      "alice-smith-userid1",
-    );
+    expect(personalTenantSlug("Alice.Smith@example.com", "user_id_1")).toBe("alice-smith-userid1");
   });
 
   test("never produces an empty component", () => {
@@ -213,9 +208,7 @@ describe("provisionPersonalTenantIfNeeded", () => {
       }),
     );
 
-    expect(joins).toEqual([
-      { tenantId: TENANT_ID, userId: "user_1", roleName: "member" },
-    ]);
+    expect(joins).toEqual([{ tenantId: TENANT_ID, userId: "user_1", roleName: "member" }]);
     expect(result).toEqual({
       kind: "existing-member",
       tenantId: TENANT_ID,
diff --git a/packages/onboarding/test/report-error-routing.test.ts b/packages/onboarding/test/report-error-routing.test.ts
index 66b42461a7..3953876968 100644
--- a/packages/onboarding/test/report-error-routing.test.ts
+++ b/packages/onboarding/test/report-error-routing.test.ts
@@ -30,12 +30,9 @@ afterEach(() => {
 const { createOnboardingRoutes } = await import("../src/routes");
 const { createInMemoryPendingSeedStore } = await import("../src/pending-seed");
 const { createBenchProvisioner } = await import("../src/bench-provisioning");
-const { plantEnvProviderCredentials } =
-  await import("../src/plant-env-credentials");
+const { plantEnvProviderCredentials } = await import("../src/plant-env-credentials");
 
-const pendingSeedStore = createInMemoryPendingSeedStore(
-  createNoopCredentialCipher(),
-);
+const pendingSeedStore = createInMemoryPendingSeedStore(createNoopCredentialCipher());
 
 // These tests never exercise the genesis-or-join join path — the stub
 // satisfies the required tenancy wiring without standing up a DB.
@@ -79,10 +76,7 @@ describe("routes.ts routes caught errors through reportError", () => {
 
     expect(response.status).toBe(503);
     expect(reportErrorCalls).toHaveLength(1);
-    const [, context] = reportErrorCalls[0] as [
-      unknown,
-      Record<string, unknown>,
-    ];
+    const [, context] = reportErrorCalls[0] as [unknown, Record<string, unknown>];
     expect(context.operation).toBe("onboarding_provision");
     expect(context.tenantId).toBeUndefined();
     expect((context.extra as { userId: string }).userId).toBe("user_1");
@@ -123,9 +117,7 @@ describe("routes.ts routes caught errors through reportError", () => {
     );
     // Malformed on purpose: seededWorkflowNames' own parseAs rejects this,
     // throwing well after tenantId is already known.
-    hub.get(`/api/tenants/${TENANT_ID}/assets`, (c) =>
-      c.json({ notAnArray: true }),
-    );
+    hub.get(`/api/tenants/${TENANT_ID}/assets`, (c) => c.json({ notAnArray: true }));
     const server = Bun.serve({ port: 0, fetch: hub.fetch });
     try {
       const routes = createOnboardingRoutes({
@@ -141,16 +133,11 @@ describe("routes.ts routes caught errors through reportError", () => {
       });
       const app = mountAuthenticated(routes);
 
-      const response = await app.request(
-        `/provisioning-status?tenantId=${TENANT_ID}`,
-      );
+      const response = await app.request(`/provisioning-status?tenantId=${TENANT_ID}`);
 
       expect(response.status).toBe(500);
       expect(reportErrorCalls).toHaveLength(1);
-      const [, context] = reportErrorCalls[0] as [
-        unknown,
-        Record<string, unknown>,
-      ];
+      const [, context] = reportErrorCalls[0] as [unknown, Record<string, unknown>];
       expect(context.operation).toBe("onboarding_provisioning_status");
       expect(context.tenantId).toBe(TENANT_ID);
       expect((context.extra as { userId: string }).userId).toBe("user_1");
@@ -189,10 +176,7 @@ describe("bench-provisioning.ts's whole-drain failure reports through reportErro
     await new Promise((resolve) => setTimeout(resolve, 10));
 
     expect(reportErrorCalls).toHaveLength(1);
-    const [, context] = reportErrorCalls[0] as [
-      unknown,
-      Record<string, unknown>,
-    ];
+    const [, context] = reportErrorCalls[0] as [unknown, Record<string, unknown>];
     expect(context.operation).toBe("bench_provisioning_drain");
     expect(context.tenantId).toBeUndefined();
   });
@@ -203,9 +187,10 @@ describe("plant-env-credentials.ts catches report through reportError and never
   // real network calls `findProviderId`/`findActiveCredential` make
   // aren't overridable test seams, so the fake `api` has to answer them
   // honestly (empty pages) to reach the seedCatalogFn override at all.
-  const noExistingProvidersApi: Parameters<
-    typeof plantEnvProviderCredentials
-  >[0]["api"] = async (_method, path) => {
+  const noExistingProvidersApi: Parameters<typeof plantEnvProviderCredentials>[0]["api"] = async (
+    _method,
+    path,
+  ) => {
     if (path.includes("/providers")) {
       return { status: 200, data: { data: [], nextCursor: null }, cookies: [] };
     }
@@ -235,10 +220,7 @@ describe("plant-env-credentials.ts catches report through reportError and never
     expect(outcomes[0]?.message).not.toContain("sk-ant-real-secret-value");
 
     expect(reportErrorCalls).toHaveLength(1);
-    const [cause, context] = reportErrorCalls[0] as [
-      unknown,
-      Record<string, unknown>,
-    ];
+    const [cause, context] = reportErrorCalls[0] as [unknown, Record<string, unknown>];
     expect(context.operation).toBe("env_credential_plant");
     expect(context.tenantId).toBe("tnt_env");
     expect(context.extra).toEqual({ provider: "anthropic" });
@@ -291,36 +273,26 @@ describe("recentlyConnectedCredential reports through reportError and still find
       });
       const app = mountAuthenticated(routes);
 
-      const response = await app.request(
-        "/oauth/openrouter/callback?code=auth_code_1",
-        {
-          headers: {
-            cookie: "workbench_openrouter_connect=not-a-real-state",
-          },
+      const response = await app.request("/oauth/openrouter/callback?code=auth_code_1", {
+        headers: {
+          cookie: "workbench_openrouter_connect=not-a-real-state",
         },
-      );
+      });
 
       expect(response.status).toBe(302);
-      const redirect = new URL(
-        response.headers.get("location") ?? "",
-        "https://x",
-      );
+      const redirect = new URL(response.headers.get("location") ?? "", "https://x");
       expect(redirect.searchParams.get("outcome")).toBe("error");
       expect(redirect.searchParams.get("code")).toBe("state_expired");
 
       expect(reportErrorCalls).toHaveLength(1);
-      const [cause, context] = reportErrorCalls[0] as [
-        unknown,
-        Record<string, unknown>,
-      ];
+      const [cause, context] = reportErrorCalls[0] as [unknown, Record<string, unknown>];
       expect(context.operation).toBe("onboarding_duplicate_callback_recovery");
       expect(context.tenantId).toBeUndefined();
       expect((context.extra as { userId: string }).userId).toBe("user_1");
       // reportError is the one place the unredacted cause may travel —
       // error-sink redacts before anything reaches a log sink.
       expect(cause).toBeInstanceOf(Error);
-      const causeMessage =
-        cause instanceof Error ? cause.message : String(cause);
+      const causeMessage = cause instanceof Error ? cause.message : String(cause);
       expect(causeMessage).toContain(SECRET);
       expect(JSON.stringify({ logs, context })).not.toContain(SECRET);
     } finally {
diff --git a/packages/onboarding/test/routes.test.ts b/packages/onboarding/test/routes.test.ts
index 2db6289204..91ee0318fb 100644
--- a/packages/onboarding/test/routes.test.ts
+++ b/packages/onboarding/test/routes.test.ts
@@ -19,9 +19,7 @@ import { HubApiError } from "@corbits/hub-api-client";
 // wiring for `createOnboardingRoutes`, and its dedicated coverage lives
 // in `./complete-setup-routes.test.ts`, `./connect-deploys-nothing.test.ts`
 // and `../src/pending-seed.test.ts`.
-const pendingSeedStore = createInMemoryPendingSeedStore(
-  createNoopCredentialCipher(),
-);
+const pendingSeedStore = createInMemoryPendingSeedStore(createNoopCredentialCipher());
 
 // These tests never exercise the genesis-or-join join path — the stub
 // satisfies the required tenancy wiring without standing up a DB.
@@ -89,9 +87,7 @@ describe("POST /provision", () => {
     // Body must include a name so provision enters the create path; without
     // a name the route returns needs-onboarding and never hits the hub.
     const hub = new Hono();
-    hub.get("/api/me/principals", (c) =>
-      c.json({ data: [], nextCursor: null }),
-    );
+    hub.get("/api/me/principals", (c) => c.json({ data: [], nextCursor: null }));
     hub.post("/api/tenants", (c) =>
       c.json({ error: { code: "conflict", message: "Slug taken" } }, 409),
     );
@@ -130,9 +126,7 @@ describe("POST /provision", () => {
   test("a nameless membership probe returns needs-onboarding without creating", async () => {
     const creates: unknown[] = [];
     const hub = new Hono();
-    hub.get("/api/me/principals", (c) =>
-      c.json({ data: [], nextCursor: null }),
-    );
+    hub.get("/api/me/principals", (c) => c.json({ data: [], nextCursor: null }));
     hub.post("/api/tenants", async (c) => {
       creates.push(await c.req.json());
       return c.json({ id: "tnt_x" }, 201);
@@ -203,9 +197,7 @@ describe("POST /provision", () => {
     // Two-step first-login: shell probe (no name) then naming submit (with name).
     // The probe must not consume the create rate-limit slot.
     const hub = new Hono();
-    hub.get("/api/me/principals", (c) =>
-      c.json({ data: [], nextCursor: null }),
-    );
+    hub.get("/api/me/principals", (c) => c.json({ data: [], nextCursor: null }));
     const server = Bun.serve({ port: 0, fetch: hub.fetch });
     try {
       const routes = createOnboardingRoutes({
@@ -223,9 +215,7 @@ describe("POST /provision", () => {
 
       const probe = await app.request("/provision", { method: "POST" });
       expect(probe.status).toBe(200);
-      expect(((await probe.json()) as { kind: string }).kind).toBe(
-        "needs-onboarding",
-      );
+      expect(((await probe.json()) as { kind: string }).kind).toBe("needs-onboarding");
 
       // Named create reaches the hub (503/500 from incomplete mock is fine);
       // the only failure mode this test forbids is 429 from the probe.
@@ -244,9 +234,7 @@ describe("POST /provision", () => {
   test("malformed JSON on /provision is 400, not a silent membership probe", async () => {
     const creates: unknown[] = [];
     const hub = new Hono();
-    hub.get("/api/me/principals", (c) =>
-      c.json({ data: [], nextCursor: null }),
-    );
+    hub.get("/api/me/principals", (c) => c.json({ data: [], nextCursor: null }));
     hub.post("/api/tenants", async (c) => {
       creates.push(await c.req.json());
       return c.json({ id: "tnt_x" }, 201);
@@ -285,9 +273,7 @@ describe("POST /provision", () => {
 
   test("schema-invalid provision body is 400, not a silent membership probe", async () => {
     const hub = new Hono();
-    hub.get("/api/me/principals", (c) =>
-      c.json({ data: [], nextCursor: null }),
-    );
+    hub.get("/api/me/principals", (c) => c.json({ data: [], nextCursor: null }));
     const server = Bun.serve({ port: 0, fetch: hub.fetch });
     try {
       const routes = createOnboardingRoutes({
@@ -478,9 +464,7 @@ describe("POST /complete", () => {
     });
 
     expect(response.status).toBe(422);
-    expect(providerHealth.get("tnt_own", "anthropic")?.status).toBe(
-      "needs_attention",
-    );
+    expect(providerHealth.get("tnt_own", "anthropic")?.status).toBe("needs_attention");
   });
 
   // CL-6457 moved partial-deploy convergence off this route entirely:
@@ -572,9 +556,7 @@ describe("POST /complete", () => {
       lines.some(
         (line) =>
           line.includes(body.error.refId) &&
-          line.includes(
-            "/Users/alice/abklabs/workbench/packages/capability-tools",
-          ),
+          line.includes("/Users/alice/abklabs/workbench/packages/capability-tools"),
       ),
     ).toBe(true);
   });
@@ -633,8 +615,7 @@ describe("POST /complete — seeded-admin fallback", () => {
         testAndPersistCredentialFn: (args) =>
           testAndPersistCredential({
             ...args,
-            ensureProviderFn: async (_api, _cookies, seedArgs) =>
-              `prv_${seedArgs.name}`,
+            ensureProviderFn: async (_api, _cookies, seedArgs) => `prv_${seedArgs.name}`,
             ensureCredentialFn: async (_api, _cookies, persistArgs) =>
               `cred_${persistArgs.providerId}`,
             seedCatalogFn: async () => ({ hasCompletionCapableModel: true }),
@@ -730,18 +711,12 @@ describe("CL-7584 desired-state kicks and steps", () => {
         return c.json(state.seeded ? [assetRow("assistant", "workflow")] : []);
       }
       if (c.req.query("kind") === "package-registry") {
-        return c.json(
-          state.seeded ? [assetRow("corbits-tools", "package-registry")] : [],
-        );
+        return c.json(state.seeded ? [assetRow("corbits-tools", "package-registry")] : []);
       }
       return c.json([]);
     });
     hub.get("/api/tenants/ten_root/workflows/deployments", (c) =>
-      c.json(
-        state.seeded
-          ? [{ definitionAssetId: "ast_assistant", status: "deployed" }]
-          : [],
-      ),
+      c.json(state.seeded ? [{ definitionAssetId: "ast_assistant", status: "deployed" }] : []),
     );
     hub.get("/api/tenants/ten_root/assets/ast_corbits-tools/tarballs", (c) =>
       c.json(
@@ -757,9 +732,7 @@ describe("CL-7584 desired-state kicks and steps", () => {
       ),
     );
     hub.get("/api/tenants/ten_root/skills/:name", (c) =>
-      state.seeded
-        ? c.json({ name: c.req.param("name") })
-        : c.json({ error: "none" }, 404),
+      state.seeded ? c.json({ name: c.req.param("name") }) : c.json({ error: "none" }, 404),
     );
     return hub;
   }
@@ -870,9 +843,7 @@ describe("CL-7584 desired-state kicks and steps", () => {
     const hub = mountHub({ seeded: false });
     const { server, app } = routesWithKick(hub, []);
     try {
-      const response = await app.request(
-        "/provisioning-status?tenantId=ten_root",
-      );
+      const response = await app.request("/provisioning-status?tenantId=ten_root");
       expect(response.status).toBe(200);
       const body = (await response.json()) as {
         kind: string;
diff --git a/packages/onboarding/test/tenant-seed-catalog.test.ts b/packages/onboarding/test/tenant-seed-catalog.test.ts
index 36afde7d72..a801b17b36 100644
--- a/packages/onboarding/test/tenant-seed-catalog.test.ts
+++ b/packages/onboarding/test/tenant-seed-catalog.test.ts
@@ -32,9 +32,7 @@ describe("catalog workflow names", () => {
     // provisionPersonalTenantIfNeeded deploys DEFAULT_WORKFLOWS for
     // every real signup (CL-7074: Myra only). Everything else deploys
     // on demand (CL-7073) from CATALOG_WORKFLOWS, never automatically.
-    expect(DEFAULT_WORKFLOWS.map((w) => w.assetName)).toEqual([
-      SETUP_AGENT_ASSET_NAME,
-    ]);
+    expect(DEFAULT_WORKFLOWS.map((w) => w.assetName)).toEqual([SETUP_AGENT_ASSET_NAME]);
     expect([...CATALOG_WORKFLOW_ASSET_NAMES]).toEqual([
       "echo",
       "workbench-digest",
@@ -69,10 +67,7 @@ describe("deployableCatalogWorkflow", () => {
   test("every catalog entry answers with a builder rendering its own definition", () => {
     for (const workflow of CATALOG_WORKFLOWS) {
       const found = deployableCatalogWorkflow(workflow.assetName);
-      expect(
-        found,
-        `catalog workflow ${workflow.assetName} answers`,
-      ).toBeDefined();
+      expect(found, `catalog workflow ${workflow.assetName} answers`).toBeDefined();
       const json = found?.buildJson("acme.example", FAKE_INFERENCE_PREFERENCES);
       // A real rendered definition for THIS workflow: it parses, it
       // has steps to launch, and it names its own asset. (Not every
diff --git a/packages/plugins-ui/package.json b/packages/plugins-ui/package.json
index 13f586b2d6..5e2f893f24 100644
--- a/packages/plugins-ui/package.json
+++ b/packages/plugins-ui/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/plugins-ui",
+  "version": "0.0.1",
   "private": true,
   "description": "The Plugins gallery: connector and skill cards, search, the installed strip, and the one-flow connect panel — composed from the connections registry and skill registry the Settings surfaces already read.",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
@@ -13,12 +13,12 @@
     "test": "bun test"
   },
   "dependencies": {
+    "@corbits/connections": "workspace:*",
     "@corbits/error-sink": "workspace:*",
+    "@corbits/icons": "workspace:*",
     "@corbits/react-ui": "github:corbitsdev/react-ui#3b122812a307ccb35be31386f7696020c5a84635",
     "@corbits/settings-ui": "workspace:*",
-    "@corbits/connections": "workspace:*",
     "arktype": "catalog:",
-    "@corbits/icons": "workspace:*",
     "react": "^19.2.0",
     "react-dom": "^19.2.0"
   },
diff --git a/packages/plugins-ui/src/index.ts b/packages/plugins-ui/src/index.ts
index b42468211a..265ef9bb16 100644
--- a/packages/plugins-ui/src/index.ts
+++ b/packages/plugins-ui/src/index.ts
@@ -5,10 +5,7 @@ export { PluginCard } from "./plugin-card";
 export { SkillCard } from "./skill-card";
 export type { SkillCardData } from "./skill-card";
 export { InstalledStrip } from "./installed-strip";
-export {
-  PluginConnectPanel,
-  type PluginPanelSubject,
-} from "./plugin-connect-panel";
+export { PluginConnectPanel, type PluginPanelSubject } from "./plugin-connect-panel";
 export { McpServersSection } from "./mcp-servers-section";
 
 export { PLUGINS_STRINGS } from "./strings";
@@ -22,16 +19,7 @@ export {
   connectMcpPreset,
   mcpOAuthStartPath,
 } from "./mcp-servers-api";
-export type {
-  McpServer,
-  McpServerConnected,
-  McpPreset,
-} from "./mcp-servers-api";
+export type { McpServer, McpServerConnected, McpPreset } from "./mcp-servers-api";
 
-export {
-  PLUGIN_CATEGORY_ORDER,
-  pluginCategory,
-  pluginIcon,
-  pluginOutcome,
-} from "./plugin-meta";
+export { PLUGIN_CATEGORY_ORDER, pluginCategory, pluginIcon, pluginOutcome } from "./plugin-meta";
 export type { PluginCategory } from "./plugin-meta";
diff --git a/packages/plugins-ui/src/installed-strip.tsx b/packages/plugins-ui/src/installed-strip.tsx
index f37b404bd8..5b94f6e490 100644
--- a/packages/plugins-ui/src/installed-strip.tsx
+++ b/packages/plugins-ui/src/installed-strip.tsx
@@ -32,9 +32,7 @@ export function InstalledStrip({
         <h3 className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">
           Connected
         </h3>
-        <span className="text-xs text-muted-foreground">
-          {installed.length} active
-        </span>
+        <span className="text-xs text-muted-foreground">{installed.length} active</span>
       </div>
       <div
         className="flex flex-wrap items-center gap-2"
diff --git a/packages/plugins-ui/src/mcp-preset-cards.tsx b/packages/plugins-ui/src/mcp-preset-cards.tsx
index e7384a12ce..99fff3fcfa 100644
--- a/packages/plugins-ui/src/mcp-preset-cards.tsx
+++ b/packages/plugins-ui/src/mcp-preset-cards.tsx
@@ -24,15 +24,12 @@ const MCP_OAUTH_ERROR_COPY: Readonly<Record<string, string>> = {
   discovery_failed: "Couldn't reach that app's sign-in. Try connecting again.",
   client_rejected:
     "That app didn't accept Workbench as a client (redirect URL or registration). Try connecting again.",
-  no_authorization_needed:
-    "That app didn't start a sign-in. Try connecting again.",
-  state_expired:
-    "The connection took too long or was already used. Try connecting again.",
+  no_authorization_needed: "That app didn't start a sign-in. Try connecting again.",
+  state_expired: "The connection took too long or was already used. Try connecting again.",
   state_mismatch: "The connection was interrupted. Try connecting again.",
   exchange_failed: "That app didn't hand back a token. Try connecting again.",
   connect_failed: "Couldn't finish connecting. Try connecting again.",
-  setup_failed:
-    "The sign-in worked, but storing the connection failed. Try connecting again.",
+  setup_failed: "The sign-in worked, but storing the connection failed. Try connecting again.",
   not_found: "That app isn't in this catalog.",
   bad_request: "This app doesn't connect with a sign-in here.",
 };
@@ -49,7 +46,8 @@ function mcpOauthReturnError(slug: string): string | null {
 }
 
 function mcpOauthConnectedReturn():
-  { readonly slug: string; readonly toolCount: number } | undefined {
+  | { readonly slug: string; readonly toolCount: number }
+  | undefined {
   const params = new URLSearchParams(window.location.search);
   if (params.get("outcome") !== "connected") return undefined;
   const slug = params.get("mcpOauth");
@@ -76,9 +74,7 @@ export function McpPresetCard({
   readonly onOpen: (trigger: HTMLButtonElement) => void;
 }) {
   const [busy, setBusy] = useState(false);
-  const [error, setError] = useState<string | null>(() =>
-    mcpOauthReturnError(preset.slug),
-  );
+  const [error, setError] = useState<string | null>(() => mcpOauthReturnError(preset.slug));
   function submitConnect() {
     setBusy(true);
     setError(null);
@@ -105,9 +101,7 @@ export function McpPresetCard({
     submitConnect();
   }
 
-  const presetDefinition = MCP_PRESETS.find(
-    (definition) => definition.slug === preset.slug,
-  );
+  const presetDefinition = MCP_PRESETS.find((definition) => definition.slug === preset.slug);
   const connector =
     presetDefinition?.nativeConnectorId === undefined
       ? undefined
@@ -126,17 +120,10 @@ export function McpPresetCard({
       data-plugin-slug={preset.slug}
     >
       <div className="flex min-h-11 min-w-0 items-center gap-3">
-        <PluginLogo
-          name={preset.displayName}
-          icon={preset.icon ?? connector?.icon}
-        />
+        <PluginLogo name={preset.displayName} icon={preset.icon ?? connector?.icon} />
         <div className="flex min-w-0 flex-1 flex-col gap-0.5">
-          <span className="truncate text-sm font-medium">
-            {preset.displayName}
-          </span>
-          <span className="truncate text-xs text-muted-foreground">
-            {preset.description}
-          </span>
+          <span className="truncate text-sm font-medium">{preset.displayName}</span>
+          <span className="truncate text-xs text-muted-foreground">{preset.description}</span>
           {error !== null ? (
             <span className="truncate text-xs text-destructive" role="alert">
               {error}
@@ -176,14 +163,10 @@ export function McpPresetCard({
 
 export function useMcpPresetCatalog(tenantId: string) {
   const [presets, setPresets] = useState<readonly McpPreset[]>([]);
-  const [toolCounts, setToolCounts] = useState<ReadonlyMap<string, number>>(
-    () => {
-      const returned = mcpOauthConnectedReturn();
-      return returned === undefined
-        ? new Map()
-        : new Map([[returned.slug, returned.toolCount]]);
-    },
-  );
+  const [toolCounts, setToolCounts] = useState<ReadonlyMap<string, number>>(() => {
+    const returned = mcpOauthConnectedReturn();
+    return returned === undefined ? new Map() : new Map([[returned.slug, returned.toolCount]]);
+  });
   const [loadError, setLoadError] = useState<string | null>(null);
   const [loaded, setLoaded] = useState(false);
   const [reloadKey, setReloadKey] = useState(0);
diff --git a/packages/plugins-ui/src/mcp-servers-api.ts b/packages/plugins-ui/src/mcp-servers-api.ts
index 9b126a7549..fcb4e10540 100644
--- a/packages/plugins-ui/src/mcp-servers-api.ts
+++ b/packages/plugins-ui/src/mcp-servers-api.ts
@@ -95,16 +95,11 @@ async function readError(
   };
 }
 
-async function readErrorMessage(
-  response: Response,
-  verb: string,
-): Promise<string> {
+async function readErrorMessage(response: Response, verb: string): Promise<string> {
   return (await readError(response, verb)).message;
 }
 
-export async function listMcpServers(
-  tenantId: string,
-): Promise<readonly McpServer[]> {
+export async function listMcpServers(tenantId: string): Promise<readonly McpServer[]> {
   const response = await fetch(mcpServersPath(tenantId));
   if (!response.ok) {
     throw new McpServersApiError(
@@ -151,9 +146,7 @@ export async function connectMcpServer(
   return parsed;
 }
 
-export async function listMcpPresets(
-  tenantId: string,
-): Promise<readonly McpPreset[]> {
+export async function listMcpPresets(tenantId: string): Promise<readonly McpPreset[]> {
   const response = await fetch(`${mcpServersPath(tenantId)}/presets`);
   if (!response.ok) {
     throw new McpServersApiError(
@@ -182,10 +175,7 @@ export async function connectMcpPreset(
     body: JSON.stringify({ presetSlug, token }),
   });
   if (!response.ok) {
-    const { message, code } = await readError(
-      response,
-      "connecting that MCP server",
-    );
+    const { message, code } = await readError(response, "connecting that MCP server");
     throw new McpServersApiError(message, response.status, code);
   }
   const body: unknown = await response.json().catch(() => undefined);
@@ -198,10 +188,7 @@ export async function connectMcpPreset(
   return parsed;
 }
 
-export async function disconnectMcpServer(
-  tenantId: string,
-  slug: string,
-): Promise<void> {
+export async function disconnectMcpServer(tenantId: string, slug: string): Promise<void> {
   const response = await fetch(`${mcpServersPath(tenantId)}/${slug}`, {
     method: "DELETE",
   });
diff --git a/packages/plugins-ui/src/mcp-servers-section.tsx b/packages/plugins-ui/src/mcp-servers-section.tsx
index ac62f871b0..b69e93e0c7 100644
--- a/packages/plugins-ui/src/mcp-servers-section.tsx
+++ b/packages/plugins-ui/src/mcp-servers-section.tsx
@@ -13,11 +13,7 @@ import { MCP_PRESETS } from "@corbits/connections/mcp-presets";
 import { PuzzlePiece } from "@corbits/icons";
 import { useEffect, useState } from "react";
 
-import {
-  disconnectMcpServer,
-  listMcpServers,
-  type McpServer,
-} from "./mcp-servers-api";
+import { disconnectMcpServer, listMcpServers, type McpServer } from "./mcp-servers-api";
 import { PLUGINS_STRINGS } from "./strings";
 
 function messageOf(cause: unknown): string {
@@ -100,9 +96,7 @@ export function McpServersSection({ tenantId }: { readonly tenantId: string }) {
   }, [tenantId]);
 
   const presetSlugs = new Set(MCP_PRESETS.map((preset) => preset.slug));
-  const customServers = servers.filter(
-    (server) => !presetSlugs.has(server.slug),
-  );
+  const customServers = servers.filter((server) => !presetSlugs.has(server.slug));
 
   if (customServers.length === 0 && loadError === null) return null;
 
diff --git a/packages/plugins-ui/src/plugin-card.tsx b/packages/plugins-ui/src/plugin-card.tsx
index 4d6d2c973c..f53baedb3f 100644
--- a/packages/plugins-ui/src/plugin-card.tsx
+++ b/packages/plugins-ui/src/plugin-card.tsx
@@ -41,8 +41,7 @@ export function PluginCard({
       : STATUS_CAPTION[plugin.status];
   const isDirectOAuthConnect =
     plugin.status === "not_connected" &&
-    (plugin.descriptor.authKind === "oauth-pkce" ||
-      plugin.descriptor.authKind === "oauth-code");
+    (plugin.descriptor.authKind === "oauth-pkce" || plugin.descriptor.authKind === "oauth-code");
 
   return (
     <div
@@ -56,9 +55,7 @@ export function PluginCard({
         fallbackIcon={Icon}
       />
       <div className="flex min-w-0 flex-1 flex-col gap-0.5">
-        <span className="truncate text-sm font-medium">
-          {plugin.descriptor.displayName}
-        </span>
+        <span className="truncate text-sm font-medium">{plugin.descriptor.displayName}</span>
         <span className="truncate text-xs text-muted-foreground">
           {pluginOutcome(plugin.descriptor.id, plugin.descriptor.displayName)}
         </span>
diff --git a/packages/plugins-ui/src/plugin-connect-panel.tsx b/packages/plugins-ui/src/plugin-connect-panel.tsx
index c1daa20822..c92b89ec8b 100644
--- a/packages/plugins-ui/src/plugin-connect-panel.tsx
+++ b/packages/plugins-ui/src/plugin-connect-panel.tsx
@@ -36,11 +36,7 @@ import type { ResolvedPlugin } from "@corbits/connections/plugins";
 import { useEffect, useState } from "react";
 
 import { pluginOutcome } from "./plugin-meta";
-import {
-  connectMcpPreset,
-  disconnectMcpServer,
-  type McpPreset,
-} from "./mcp-servers-api";
+import { connectMcpPreset, disconnectMcpServer, type McpPreset } from "./mcp-servers-api";
 import { PLUGINS_STRINGS } from "./strings";
 
 const PLUGINS_RETURN_PATH = "/plugins";
@@ -98,9 +94,7 @@ function ApiKeyConnectForm({
         setValue(isUrl ? (fieldPlaceholder ?? "") : "");
         onConnected();
       })
-      .catch((cause: unknown) =>
-        setError(cause instanceof Error ? cause.message : String(cause)),
-      )
+      .catch((cause: unknown) => setError(cause instanceof Error ? cause.message : String(cause)))
       .finally(() => setSubmitting(false));
   }
 
@@ -142,10 +136,7 @@ function ConnectedSummary({
   onChanged,
 }: {
   readonly tenantId: string;
-  readonly plugin: Extract<
-    ResolvedPlugin,
-    { readonly status: "connected" | "needs_attention" }
-  >;
+  readonly plugin: Extract<ResolvedPlugin, { readonly status: "connected" | "needs_attention" }>;
   readonly onChanged: () => void;
 }) {
   const [busy, setBusy] = useState(false);
@@ -166,20 +157,15 @@ function ConnectedSummary({
   return (
     <div className="flex flex-col gap-4">
       <div className="flex flex-col gap-2">
-        <Badge
-          className="self-start"
-          tone={plugin.status === "connected" ? "success" : "danger"}
-        >
+        <Badge className="self-start" tone={plugin.status === "connected" ? "success" : "danger"}>
           {plugin.status === "connected" ? "Connected" : "Needs attention"}
         </Badge>
-        <span className="text-sm text-muted-foreground">
-          {plugin.credentialName}
-        </span>
+        <span className="text-sm text-muted-foreground">{plugin.credentialName}</span>
       </div>
       {plugin.provenance === "inherited" ? (
         <p className="text-sm text-muted-foreground">
-          Connected by a parent workbench — reconnecting or disconnecting here
-          creates a connection of your own instead of changing theirs.
+          Connected by a parent workbench — reconnecting or disconnecting here creates a connection
+          of your own instead of changing theirs.
         </p>
       ) : null}
       {plugin.provenance === "this-workbench" ? (
@@ -263,9 +249,7 @@ function McpPresetPanelContent({
     return (
       <div className="flex flex-col gap-4">
         <Badge className="self-start" tone="success">
-          {toolCount === undefined
-            ? "Connected"
-            : `${toolCount} tool${toolCount === 1 ? "" : "s"}`}
+          {toolCount === undefined ? "Connected" : `${toolCount} tool${toolCount === 1 ? "" : "s"}`}
         </Badge>
         <div className="flex flex-col gap-3 border-t border-border pt-4">
           <p className="text-sm text-muted-foreground">
@@ -308,10 +292,7 @@ function McpPresetPanelContent({
       >
         Create your token
       </a>
-      <label
-        className="flex flex-col gap-1.5 text-sm font-medium"
-        htmlFor={tokenFieldId}
-      >
+      <label className="flex flex-col gap-1.5 text-sm font-medium" htmlFor={tokenFieldId}>
         Personal access token
         <Input
           id={tokenFieldId}
@@ -357,8 +338,7 @@ export function PluginConnectPanel({
   const open = subject !== null;
   const plugin = subject?.kind === "connector" ? subject.plugin : null;
   const preset = subject?.kind === "mcp-preset" ? subject.preset : null;
-  const toolCount =
-    subject?.kind === "mcp-preset" ? subject.toolCount : undefined;
+  const toolCount = subject?.kind === "mcp-preset" ? subject.toolCount : undefined;
   // CL-6830: probe is tri-state — never fold a failure into `{}`, which
   // reads as "hosted app absent" and hides one-click connect behind the
   // not-configured token paste.
@@ -406,37 +386,22 @@ export function PluginConnectPanel({
         key={plugin?.descriptor.id ?? preset?.slug}
       >
         <DialogHeader>
-          <DialogTitle>
-            {plugin?.descriptor.displayName ?? preset?.displayName ?? ""}
-          </DialogTitle>
+          <DialogTitle>{plugin?.descriptor.displayName ?? preset?.displayName ?? ""}</DialogTitle>
           <DialogDescription>
             {plugin !== null
-              ? pluginOutcome(
-                  plugin.descriptor.id,
-                  plugin.descriptor.displayName,
-                )
+              ? pluginOutcome(plugin.descriptor.id, plugin.descriptor.displayName)
               : (preset?.description ?? "")}
           </DialogDescription>
         </DialogHeader>
         {plugin !== null ? (
           <DialogBody className="max-h-[calc(100dvh-8rem)] flex-none flex flex-col gap-5">
             {plugin.status !== "not_connected" ? (
-              <ConnectedSummary
-                tenantId={tenantId}
-                plugin={plugin}
-                onChanged={onChanged}
-              />
+              <ConnectedSummary tenantId={tenantId} plugin={plugin} onChanged={onChanged} />
             ) : plugin.descriptor.authKind === "oauth-pkce" ||
               plugin.descriptor.authKind === "oauth-code" ||
               hostedAppAvailable ? (
               <Button variant="primary" asChild>
-                <a
-                  href={oauthStartHref(
-                    tenantId,
-                    plugin.descriptor.id,
-                    PLUGINS_RETURN_PATH,
-                  )}
-                >
+                <a href={oauthStartHref(tenantId, plugin.descriptor.id, PLUGINS_RETURN_PATH)}>
                   Connect with {plugin.descriptor.displayName}
                 </a>
               </Button>
@@ -457,9 +422,9 @@ export function PluginConnectPanel({
               ) : oauthProbe.status === "loading" ? null : (
                 <div className="flex flex-col gap-3">
                   <p className="text-sm text-muted-foreground">
-                    This workbench isn&apos;t set up with the one-click GitHub
-                    app, so connect with a token instead. Create a token with{" "}
-                    <code className="text-xs">repo</code> scope at{" "}
+                    This workbench isn&apos;t set up with the one-click GitHub app, so connect with
+                    a token instead. Create a token with <code className="text-xs">repo</code> scope
+                    at{" "}
                     <a
                       className="underline"
                       href={plugin.descriptor.docsUrl}
@@ -499,8 +464,8 @@ export function PluginConnectPanel({
               <div className="flex flex-col gap-2 border-t border-border pt-4">
                 <p className="text-sm font-medium">Inbound webhook</p>
                 <p className="text-sm text-muted-foreground">
-                  Granola posts finished call notes here — set up or manage the
-                  webhook without leaving this panel.
+                  Granola posts finished call notes here — set up or manage the webhook without
+                  leaving this panel.
                 </p>
                 {CONNECTOR_REGISTRY["granola-webhook"] !== undefined ? (
                   <GranolaWebhookCard
diff --git a/packages/plugins-ui/src/plugin-logo.tsx b/packages/plugins-ui/src/plugin-logo.tsx
index b7fdc1f16d..38ace2de20 100644
--- a/packages/plugins-ui/src/plugin-logo.tsx
+++ b/packages/plugins-ui/src/plugin-logo.tsx
@@ -21,11 +21,7 @@ export function PluginLogo({
       className="flex size-9 shrink-0 items-center justify-center border border-border bg-background text-muted-foreground"
     >
       {icon !== undefined ? (
-        <svg
-          className="size-5"
-          viewBox={icon.viewBox ?? "0 0 24 24"}
-          fill={`#${icon.hex}`}
-        >
+        <svg className="size-5" viewBox={icon.viewBox ?? "0 0 24 24"} fill={`#${icon.hex}`}>
           <path d={icon.path} />
         </svg>
       ) : FallbackIcon !== undefined ? (
diff --git a/packages/plugins-ui/src/plugin-meta.ts b/packages/plugins-ui/src/plugin-meta.ts
index 1d234615a8..f71a3185a5 100644
--- a/packages/plugins-ui/src/plugin-meta.ts
+++ b/packages/plugins-ui/src/plugin-meta.ts
@@ -67,13 +67,10 @@ const OUTCOME_BY_ID: Readonly<Record<string, string>> = {
   groq: "Powers your agents' fast Groq-hosted inference.",
   deepseek: "Powers your agents' DeepSeek-based inference.",
   mistral: "Powers your agents' Mistral-based inference.",
-  openrouter:
-    "Routes your agents' inference through OpenRouter's model catalog.",
-  huggingface:
-    "Routes your agents' inference through Hugging Face-hosted models.",
+  openrouter: "Routes your agents' inference through OpenRouter's model catalog.",
+  huggingface: "Routes your agents' inference through Hugging Face-hosted models.",
   granola: "Lets agents read your Granola call notes and post-call summaries.",
-  manus:
-    "Lets agents run Manus tasks and retrieve files — including slide decks.",
+  manus: "Lets agents run Manus tasks and retrieve files — including slide decks.",
   exa: "Lets agents run live web search and research lookups.",
   scrapecreators: "Lets agents pull Reddit threads and creator content.",
   linear: "Lets agents read and update your Linear issues.",
@@ -96,13 +93,8 @@ export function pluginCategory(catalogId: string): PluginCategory | undefined {
   return CATEGORY_BY_ID[catalogId];
 }
 
-export function pluginOutcome(
-  connectorId: string,
-  displayName: string,
-): string {
-  return (
-    OUTCOME_BY_ID[connectorId] ?? `Connects ${displayName} to your agents.`
-  );
+export function pluginOutcome(connectorId: string, displayName: string): string {
+  return OUTCOME_BY_ID[connectorId] ?? `Connects ${displayName} to your agents.`;
 }
 
 /** Every connector renders an icon glyph — the eight inference providers
diff --git a/packages/plugins-ui/src/plugins-gallery.tsx b/packages/plugins-ui/src/plugins-gallery.tsx
index ac2428b578..fc7b6f5d78 100644
--- a/packages/plugins-ui/src/plugins-gallery.tsx
+++ b/packages/plugins-ui/src/plugins-gallery.tsx
@@ -4,10 +4,7 @@ import { Lightning } from "@corbits/icons";
 import { EmptyState, FilterChip, Tabs } from "@corbits/react-ui";
 import type { ConnectorDescriptor } from "@corbits/connections/registry";
 import type { ResolvedPlugin } from "@corbits/connections/plugins";
-import {
-  MCP_PRESETS,
-  MCP_PRESET_CONNECTOR_IDS,
-} from "@corbits/connections/mcp-presets";
+import { MCP_PRESETS, MCP_PRESET_CONNECTOR_IDS } from "@corbits/connections/mcp-presets";
 
 import { McpServersSection } from "./mcp-servers-section";
 import { McpPresetCard, useMcpPresetCatalog } from "./mcp-preset-cards";
@@ -56,13 +53,8 @@ const MCP_PRESET_CATALOG_IDS = new Set([
   ...MCP_PRESET_CONNECTOR_IDS,
 ]);
 
-export function isNativePluginCatalogDescriptor(
-  descriptor: ConnectorDescriptor,
-): boolean {
-  return (
-    descriptor.feedsTools.length > 0 &&
-    !MCP_PRESET_CATALOG_IDS.has(descriptor.id)
-  );
+export function isNativePluginCatalogDescriptor(descriptor: ConnectorDescriptor): boolean {
+  return descriptor.feedsTools.length > 0 && !MCP_PRESET_CATALOG_IDS.has(descriptor.id);
 }
 
 function matchesQuery(haystacks: readonly string[], query: string): boolean {
@@ -71,10 +63,7 @@ function matchesQuery(haystacks: readonly string[], query: string): boolean {
   return haystacks.some((value) => value.toLowerCase().includes(needle));
 }
 
-function matchesFilter(
-  entry: PluginCatalogEntry,
-  filter: PluginCatalogFilter,
-): boolean {
+function matchesFilter(entry: PluginCatalogEntry, filter: PluginCatalogFilter): boolean {
   if (filter === "All") return true;
   if (filter === "Connected") return entry.connected;
   return entry.category === filter;
@@ -90,11 +79,7 @@ function PluginFilterBar({
   readonly onChange: (filter: PluginCatalogFilter) => void;
 }) {
   return (
-    <div
-      className="flex flex-wrap gap-2"
-      role="group"
-      aria-label="Plugin catalog filters"
-    >
+    <div className="flex flex-wrap gap-2" role="group" aria-label="Plugin catalog filters">
       {PLUGIN_FILTERS.map((filter) => (
         <FilterChip
           key={filter}
@@ -126,10 +111,7 @@ function PluginCatalogPanel({
   readonly activeFilter: PluginCatalogFilter;
   readonly onFilterChange: (filter: PluginCatalogFilter) => void;
   readonly toolCounts: ReadonlyMap<string, number>;
-  readonly onPresetChanged: (
-    slug: string,
-    toolCount: number | undefined,
-  ) => void;
+  readonly onPresetChanged: (slug: string, toolCount: number | undefined) => void;
   readonly onOpenPreset: (
     preset: McpPreset,
     toolCount: number | undefined,
@@ -139,25 +121,15 @@ function PluginCatalogPanel({
 }) {
   const queryMatches = entries.filter((entry) =>
     matchesQuery(
-      [
-        entry.name,
-        entry.outcome,
-        ...(entry.category === undefined ? [] : [entry.category]),
-      ],
+      [entry.name, entry.outcome, ...(entry.category === undefined ? [] : [entry.category])],
       query,
     ),
   );
-  const visibleEntries = queryMatches.filter((entry) =>
-    matchesFilter(entry, activeFilter),
-  );
+  const visibleEntries = queryMatches.filter((entry) => matchesFilter(entry, activeFilter));
 
   return (
     <div className="flex flex-col gap-4">
-      <PluginFilterBar
-        entries={queryMatches}
-        active={activeFilter}
-        onChange={onFilterChange}
-      />
+      <PluginFilterBar entries={queryMatches} active={activeFilter} onChange={onFilterChange} />
       {visibleEntries.length === 0 ? (
         <EmptyState
           icon={<Lightning />}
@@ -182,9 +154,7 @@ function PluginCatalogPanel({
                 preset={entry.preset}
                 toolCount={toolCounts.get(entry.id)}
                 onChanged={(toolCount) => onPresetChanged(entry.id, toolCount)}
-                onOpen={(trigger) =>
-                  onOpenPreset(entry.preset, toolCounts.get(entry.id), trigger)
-                }
+                onOpen={(trigger) => onOpenPreset(entry.preset, toolCounts.get(entry.id), trigger)}
               />
             ) : (
               <PluginCard
@@ -210,9 +180,7 @@ function SkillsTabPanel({
   readonly query: string;
   readonly onOpen: (skill: SkillCardData) => void;
 }) {
-  const filtered = skills.filter((skill) =>
-    matchesQuery([skill.name, skill.description], query),
-  );
+  const filtered = skills.filter((skill) => matchesQuery([skill.name, skill.description], query));
 
   if (skills.length === 0) {
     return (
@@ -239,11 +207,7 @@ function SkillsTabPanel({
   return (
     <div className="border border-border [&>*:last-child]:border-b-0">
       {filtered.map((skill) => (
-        <SkillCard
-          key={skill.assetId}
-          skill={skill}
-          onOpen={() => onOpen(skill)}
-        />
+        <SkillCard key={skill.assetId} skill={skill} onOpen={() => onOpen(skill)} />
       ))}
     </div>
   );
@@ -303,10 +267,7 @@ export function PluginsGallery({
           kind: "native",
           id: plugin.descriptor.id,
           name: plugin.descriptor.displayName,
-          outcome: pluginOutcome(
-            plugin.descriptor.id,
-            plugin.descriptor.displayName,
-          ),
+          outcome: pluginOutcome(plugin.descriptor.id, plugin.descriptor.displayName),
           category: pluginCategory(plugin.descriptor.id),
           connected: plugin.status !== "not_connected",
           plugin,
@@ -331,9 +292,9 @@ export function PluginsGallery({
 
   useEffect(() => {
     if (!presetCatalog.loaded || autoConnectPresetSlug === null) return;
-    const row = Array.from(
-      document.querySelectorAll<HTMLElement>("[data-plugin-slug]"),
-    ).find((element) => element.dataset.pluginSlug === autoConnectPresetSlug);
+    const row = Array.from(document.querySelectorAll<HTMLElement>("[data-plugin-slug]")).find(
+      (element) => element.dataset.pluginSlug === autoConnectPresetSlug,
+    );
     row?.querySelector<HTMLButtonElement>("button")?.focus();
     onAutoConnectPresetHandled?.();
   }, [
@@ -350,28 +311,16 @@ export function PluginsGallery({
         label: "Plugins",
         count:
           nativeEntries.length +
-          (presetCatalog.loaded
-            ? presetCatalog.presets.length
-            : MCP_PRESETS.length),
+          (presetCatalog.loaded ? presetCatalog.presets.length : MCP_PRESETS.length),
       },
       { id: "skills" as const, label: "Skills", count: skills.length },
     ],
-    [
-      nativeEntries.length,
-      presetCatalog.loaded,
-      presetCatalog.presets.length,
-      skills.length,
-    ],
+    [nativeEntries.length, presetCatalog.loaded, presetCatalog.presets.length, skills.length],
   );
 
   return (
     <div className="mx-auto flex w-full max-w-[100rem] flex-col gap-4">
-      <Tabs
-        tabs={tabs}
-        active={activeTab}
-        onChange={onTabChange}
-        label="Plugins gallery sections"
-      >
+      <Tabs tabs={tabs} active={activeTab} onChange={onTabChange} label="Plugins gallery sections">
         {(active) => (
           <div className="flex flex-col gap-4 pt-3">
             {active === "plugins" ? (
@@ -403,11 +352,7 @@ export function PluginsGallery({
                 <McpServersSection tenantId={tenantId} />
               </>
             ) : (
-              <SkillsTabPanel
-                skills={skills}
-                query={query}
-                onOpen={onOpenSkill}
-              />
+              <SkillsTabPanel skills={skills} query={query} onOpen={onOpenSkill} />
             )}
           </div>
         )}
diff --git a/packages/plugins-ui/src/skill-card.tsx b/packages/plugins-ui/src/skill-card.tsx
index f850bf7227..d7362c6280 100644
--- a/packages/plugins-ui/src/skill-card.tsx
+++ b/packages/plugins-ui/src/skill-card.tsx
@@ -44,9 +44,7 @@ export function SkillCard({
       </span>
       <div className="flex min-w-0 flex-1 flex-col gap-0.5">
         <span className="truncate text-sm font-medium">{skill.name}</span>
-        <span className="truncate text-xs text-muted-foreground">
-          {skill.description}
-        </span>
+        <span className="truncate text-xs text-muted-foreground">{skill.description}</span>
       </div>
       <Button type="button" size="sm" variant="ghost" onClick={onOpen}>
         View
diff --git a/packages/plugins-ui/test/mcp-preset-cards.test.tsx b/packages/plugins-ui/test/mcp-preset-cards.test.tsx
index 5b6653bd53..b4c1d2378f 100644
--- a/packages/plugins-ui/test/mcp-preset-cards.test.tsx
+++ b/packages/plugins-ui/test/mcp-preset-cards.test.tsx
@@ -22,8 +22,7 @@ afterEach(() => {
   mountedRoots = [];
 });
 
-const settle = () =>
-  act(() => new Promise((resolve) => setTimeout(resolve, 10)));
+const settle = () => act(() => new Promise((resolve) => setTimeout(resolve, 10)));
 
 function mountSection(onOpen: (preset: McpPreset) => void = () => {}) {
   const container = document.createElement("div");
@@ -36,11 +35,7 @@ function mountSection(onOpen: (preset: McpPreset) => void = () => {}) {
   return container;
 }
 
-function PresetCatalogHarness({
-  onOpen,
-}: {
-  readonly onOpen: (preset: McpPreset) => void;
-}) {
+function PresetCatalogHarness({ onOpen }: { readonly onOpen: (preset: McpPreset) => void }) {
   const catalog = useMcpPresetCatalog("tenant_test");
   if (!catalog.loaded) return null;
   if (catalog.loadError !== null) {
@@ -54,9 +49,7 @@ function PresetCatalogHarness({
           tenantId="tenant_test"
           preset={preset}
           toolCount={catalog.toolCounts.get(preset.slug)}
-          onChanged={(toolCount) =>
-            catalog.handleChanged(preset.slug, toolCount)
-          }
+          onChanged={(toolCount) => catalog.handleChanged(preset.slug, toolCount)}
           onOpen={() => onOpen(preset)}
         />
       ))}
@@ -102,25 +95,19 @@ const PRESETS = [
 describe("MCP preset catalog", () => {
   test("renders one compact row per preset with its outcome sentence", async () => {
     globalThis.fetch = (async () =>
-      new Response(
-        JSON.stringify({ data: PRESETS }),
-      )) as unknown as typeof fetch;
+      new Response(JSON.stringify({ data: PRESETS }))) as unknown as typeof fetch;
 
     const container = mountSection();
     await settle();
 
     expect(container.textContent).toContain("Granola");
     expect(container.textContent).toContain("Exa");
-    expect(container.textContent).toContain(
-      "Search the web (Exa) — no key needed.",
-    );
+    expect(container.textContent).toContain("Search the web (Exa) — no key needed.");
     expect(container.textContent).toContain("Not connected");
     expect(container.querySelectorAll("[data-plugin-slug]")).toHaveLength(3);
-    expect(
-      container
-        .querySelector('[data-plugin-slug="exa"] svg')
-        ?.getAttribute("viewBox"),
-    ).toBe("0 0 151 182");
+    expect(container.querySelector('[data-plugin-slug="exa"] svg')?.getAttribute("viewBox")).toBe(
+      "0 0 151 182",
+    );
   });
 
   // CL-6794: Connect's accessible name must name the preset so a gallery of
@@ -128,9 +115,7 @@ describe("MCP preset catalog", () => {
   // visible label stays the single verb.
   test("Connect's accessible name includes the preset display name (CL-6794)", async () => {
     globalThis.fetch = (async () =>
-      new Response(
-        JSON.stringify({ data: PRESETS }),
-      )) as unknown as typeof fetch;
+      new Response(JSON.stringify({ data: PRESETS }))) as unknown as typeof fetch;
 
     const container = mountSection();
     await settle();
@@ -139,9 +124,7 @@ describe("MCP preset catalog", () => {
     expect(connectExa).not.toBeNull();
     expect(connectExa?.textContent?.trim()).toBe("Connect");
 
-    const connectGranola = container.querySelector(
-      '[aria-label="Connect Granola"]',
-    );
+    const connectGranola = container.querySelector('[aria-label="Connect Granola"]');
     expect(connectGranola).not.toBeNull();
     expect(connectGranola?.textContent?.trim()).toBe("Connect");
   });
@@ -154,17 +137,11 @@ describe("MCP preset catalog", () => {
     }) as unknown as typeof fetch;
 
     const assigned: string[] = [];
-    const hrefDescriptor = Object.getOwnPropertyDescriptor(
-      window.location,
-      "href",
-    );
+    const hrefDescriptor = Object.getOwnPropertyDescriptor(window.location, "href");
     Object.defineProperty(window.location, "href", {
       configurable: true,
       get() {
-        return (
-          hrefDescriptor?.get?.call(window.location) ??
-          "https://workbench.test/"
-        );
+        return hrefDescriptor?.get?.call(window.location) ?? "https://workbench.test/";
       },
       set(value: string) {
         assigned.push(value);
@@ -175,11 +152,9 @@ describe("MCP preset catalog", () => {
       const container = mountSection();
       await settle();
 
-      const granolaCard = container.querySelector(
-        '[data-plugin-slug="granola"]',
-      ) as HTMLElement;
-      const connectButton = [...granolaCard.querySelectorAll("button")].find(
-        (button) => button.textContent?.includes("Connect"),
+      const granolaCard = container.querySelector('[data-plugin-slug="granola"]') as HTMLElement;
+      const connectButton = [...granolaCard.querySelectorAll("button")].find((button) =>
+        button.textContent?.includes("Connect"),
       ) as HTMLButtonElement;
 
       await act(async () => {
@@ -187,9 +162,7 @@ describe("MCP preset catalog", () => {
         await new Promise((resolve) => setTimeout(resolve, 10));
       });
 
-      expect(assigned).toEqual([
-        "/api/tenants/tenant_test/mcp-servers/oauth/granola/start",
-      ]);
+      expect(assigned).toEqual(["/api/tenants/tenant_test/mcp-servers/oauth/granola/start"]);
       expect(calls.some((url) => url.includes("/start"))).toBe(false);
     } finally {
       if (hrefDescriptor !== undefined) {
@@ -201,43 +174,27 @@ describe("MCP preset catalog", () => {
   });
 
   test("an OAuth error return surfaces a sentence on that preset row and leaves Connect as retry", async () => {
-    window.history.replaceState(
-      null,
-      "",
-      "/?mcpOauth=granola&outcome=error&code=discovery_failed",
-    );
+    window.history.replaceState(null, "", "/?mcpOauth=granola&outcome=error&code=discovery_failed");
     globalThis.fetch = (async () =>
-      new Response(
-        JSON.stringify({ data: PRESETS }),
-      )) as unknown as typeof fetch;
+      new Response(JSON.stringify({ data: PRESETS }))) as unknown as typeof fetch;
 
     const container = mountSection();
     await settle();
 
-    const granolaCard = container.querySelector(
-      '[data-plugin-slug="granola"]',
-    ) as HTMLElement;
+    const granolaCard = container.querySelector('[data-plugin-slug="granola"]') as HTMLElement;
     expect(granolaCard.textContent).toContain(
       "Couldn't reach that app's sign-in. Try connecting again.",
     );
-    expect(
-      granolaCard.querySelector('[aria-label="Connect Granola"]'),
-    ).not.toBeNull();
+    expect(granolaCard.querySelector('[aria-label="Connect Granola"]')).not.toBeNull();
 
-    const exaCard = container.querySelector(
-      '[data-plugin-slug="exa"]',
-    ) as HTMLElement;
+    const exaCard = container.querySelector('[data-plugin-slug="exa"]') as HTMLElement;
     expect(exaCard.textContent).not.toContain(
       "Couldn't reach that app's sign-in. Try connecting again.",
     );
   });
 
   test("a client_rejected OAuth return names the registration failure, not unreachable sign-in", async () => {
-    window.history.replaceState(
-      null,
-      "",
-      "/?mcpOauth=canva&outcome=error&code=client_rejected",
-    );
+    window.history.replaceState(null, "", "/?mcpOauth=canva&outcome=error&code=client_rejected");
     globalThis.fetch = (async () =>
       new Response(
         JSON.stringify({
@@ -259,33 +216,23 @@ describe("MCP preset catalog", () => {
     const container = mountSection();
     await settle();
 
-    const canvaCard = container.querySelector(
-      '[data-plugin-slug="canva"]',
-    ) as HTMLElement;
+    const canvaCard = container.querySelector('[data-plugin-slug="canva"]') as HTMLElement;
     expect(canvaCard.textContent).toContain(
       "That app didn't accept Workbench as a client (redirect URL or registration). Try connecting again.",
     );
     expect(canvaCard.textContent).not.toContain(
       "Couldn't reach that app's sign-in. Try connecting again.",
     );
-    expect(
-      canvaCard.querySelector('[aria-label="Connect Canva"]'),
-    ).not.toBeNull();
+    expect(canvaCard.querySelector('[aria-label="Connect Canva"]')).not.toBeNull();
 
-    const granolaCard = container.querySelector(
-      '[data-plugin-slug="granola"]',
-    ) as HTMLElement;
+    const granolaCard = container.querySelector('[data-plugin-slug="granola"]') as HTMLElement;
     expect(granolaCard.textContent).not.toContain(
       "That app didn't accept Workbench as a client (redirect URL or registration). Try connecting again.",
     );
   });
 
   test("an OAuth connected return shows the probe tool count on that preset row", async () => {
-    window.history.replaceState(
-      null,
-      "",
-      "/?mcpOauth=canva&outcome=connected&toolCount=40",
-    );
+    window.history.replaceState(null, "", "/?mcpOauth=canva&outcome=connected&toolCount=40");
     globalThis.fetch = (async () =>
       new Response(
         JSON.stringify({
@@ -307,25 +254,17 @@ describe("MCP preset catalog", () => {
     const container = mountSection();
     await settle();
 
-    const canvaCard = container.querySelector(
-      '[data-plugin-slug="canva"]',
-    ) as HTMLElement;
+    const canvaCard = container.querySelector('[data-plugin-slug="canva"]') as HTMLElement;
     expect(canvaCard.textContent).toContain("40 tools");
     expect(canvaCard.textContent).not.toContain("Not connected");
     expect(canvaCard.textContent).toContain("Manage");
 
-    const granolaCard = container.querySelector(
-      '[data-plugin-slug="granola"]',
-    ) as HTMLElement;
+    const granolaCard = container.querySelector('[data-plugin-slug="granola"]') as HTMLElement;
     expect(granolaCard.textContent).not.toContain("40 tools");
   });
 
   test("an OAuth connected return with a non-integer toolCount stays a bare Connected", async () => {
-    window.history.replaceState(
-      null,
-      "",
-      "/?mcpOauth=canva&outcome=connected&toolCount=abc",
-    );
+    window.history.replaceState(null, "", "/?mcpOauth=canva&outcome=connected&toolCount=abc");
     globalThis.fetch = (async () =>
       new Response(
         JSON.stringify({
@@ -347,9 +286,7 @@ describe("MCP preset catalog", () => {
     const container = mountSection();
     await settle();
 
-    const canvaCard = container.querySelector(
-      '[data-plugin-slug="canva"]',
-    ) as HTMLElement;
+    const canvaCard = container.querySelector('[data-plugin-slug="canva"]') as HTMLElement;
     expect(canvaCard.textContent).toContain("Connected");
     expect(canvaCard.textContent).not.toContain("abc");
     expect(canvaCard.textContent).not.toContain("NaN");
@@ -360,9 +297,7 @@ describe("MCP preset catalog", () => {
     globalThis.fetch = (async () =>
       new Response(
         JSON.stringify({
-          data: PRESETS.map((p) =>
-            p.slug === "exa" ? { ...p, connected: true } : p,
-          ),
+          data: PRESETS.map((p) => (p.slug === "exa" ? { ...p, connected: true } : p)),
         }),
       )) as unknown as typeof fetch;
 
@@ -370,9 +305,7 @@ describe("MCP preset catalog", () => {
     const container = mountSection((preset) => opened.push(preset.slug));
     await settle();
 
-    const exaCard = container.querySelector(
-      '[data-plugin-slug="exa"]',
-    ) as HTMLElement;
+    const exaCard = container.querySelector('[data-plugin-slug="exa"]') as HTMLElement;
     const manageExa = [...exaCard.querySelectorAll("button")].find(
       (button) => button.textContent?.includes("Manage") === true,
     );
@@ -404,9 +337,7 @@ describe("MCP preset catalog", () => {
       }
       return new Response(
         JSON.stringify({
-          data: PRESETS.map((p) =>
-            p.slug === "exa" ? { ...p, connected } : p,
-          ),
+          data: PRESETS.map((p) => (p.slug === "exa" ? { ...p, connected } : p)),
         }),
       );
     }) as unknown as typeof fetch;
@@ -414,11 +345,9 @@ describe("MCP preset catalog", () => {
     const container = mountSection();
     await settle();
 
-    const exaCard = container.querySelector(
-      '[data-plugin-slug="exa"]',
-    ) as HTMLElement;
-    const connectButton = [...exaCard.querySelectorAll("button")].find(
-      (button) => button.textContent?.includes("Connect"),
+    const exaCard = container.querySelector('[data-plugin-slug="exa"]') as HTMLElement;
+    const connectButton = [...exaCard.querySelectorAll("button")].find((button) =>
+      button.textContent?.includes("Connect"),
     ) as HTMLButtonElement;
 
     await act(async () => {
@@ -450,9 +379,7 @@ describe("MCP preset catalog", () => {
     const container = mountSection((preset) => opened.push(preset.slug));
     await settle();
 
-    const card = container.querySelector(
-      '[data-plugin-slug="github-mcp"]',
-    ) as HTMLElement;
+    const card = container.querySelector('[data-plugin-slug="github-mcp"]') as HTMLElement;
     const connectButton = [...card.querySelectorAll("button")].find((button) =>
       button.textContent?.includes("Connect"),
     ) as HTMLButtonElement;
@@ -483,9 +410,7 @@ describe("MCP preset catalog", () => {
             connectionMode: preset.connectionMode,
             docsUrl: preset.docsUrl,
             ...(preset.icon === undefined ? {} : { icon: preset.icon }),
-            ...(preset.tokenSteps === undefined
-              ? {}
-              : { tokenSteps: preset.tokenSteps }),
+            ...(preset.tokenSteps === undefined ? {} : { tokenSteps: preset.tokenSteps }),
             connected: false,
           })),
         }),
@@ -494,9 +419,7 @@ describe("MCP preset catalog", () => {
     const container = mountSection();
     await settle();
 
-    expect(container.querySelectorAll("[data-plugin-slug]")).toHaveLength(
-      MCP_PRESETS.length,
-    );
+    expect(container.querySelectorAll("[data-plugin-slug]")).toHaveLength(MCP_PRESETS.length);
     for (const preset of MCP_PRESETS) {
       expect(container.textContent).toContain(preset.displayName);
     }
diff --git a/packages/plugins-ui/test/mcp-servers-section.test.tsx b/packages/plugins-ui/test/mcp-servers-section.test.tsx
index e00b6e1450..45652c7663 100644
--- a/packages/plugins-ui/test/mcp-servers-section.test.tsx
+++ b/packages/plugins-ui/test/mcp-servers-section.test.tsx
@@ -18,8 +18,7 @@ afterEach(() => {
   mountedRoots = [];
 });
 
-const settle = () =>
-  act(() => new Promise((resolve) => setTimeout(resolve, 10)));
+const settle = () => act(() => new Promise((resolve) => setTimeout(resolve, 10)));
 
 function mountSection() {
   const container = document.createElement("div");
@@ -50,9 +49,7 @@ describe("McpServersSection", () => {
     const container = mountSection();
     await settle();
 
-    const disconnect = container.querySelector(
-      '[aria-label="Disconnect My Custom MCP"]',
-    );
+    const disconnect = container.querySelector('[aria-label="Disconnect My Custom MCP"]');
     expect(disconnect).not.toBeNull();
     expect(disconnect?.textContent?.trim()).toBe("Disconnect");
   });
diff --git a/packages/plugins-ui/test/plugin-connect-panel.test.tsx b/packages/plugins-ui/test/plugin-connect-panel.test.tsx
index e06af2cba4..0dd83e4f63 100644
--- a/packages/plugins-ui/test/plugin-connect-panel.test.tsx
+++ b/packages/plugins-ui/test/plugin-connect-panel.test.tsx
@@ -12,10 +12,7 @@ import type { Root } from "react-dom/client";
 import type { ConnectorDescriptor } from "@corbits/connections/registry";
 import type { ResolvedPlugin } from "@corbits/connections/plugins";
 
-import {
-  PluginConnectPanel,
-  type PluginPanelSubject,
-} from "../src/plugin-connect-panel";
+import { PluginConnectPanel, type PluginPanelSubject } from "../src/plugin-connect-panel";
 import type { McpPreset } from "../src/mcp-servers-api";
 import { PLUGINS_STRINGS } from "../src/strings";
 
@@ -64,8 +61,7 @@ function notConnected(d: ConnectorDescriptor): ResolvedPlugin {
   };
 }
 
-const settle = () =>
-  act(() => new Promise((resolve) => setTimeout(resolve, 10)));
+const settle = () => act(() => new Promise((resolve) => setTimeout(resolve, 10)));
 
 // Dialog content renders through a Radix portal appended to
 // `document.body`, not inside the mount container — every assertion below
@@ -98,9 +94,7 @@ function render(
 describe("PluginConnectPanel", () => {
   test("an oauth-pkce connector shows an OAuth connect link, not a key form", () => {
     const container = render(
-      connectorSubject(
-        notConnected(descriptor("huggingface", "Hugging Face", "oauth-pkce")),
-      ),
+      connectorSubject(notConnected(descriptor("huggingface", "Hugging Face", "oauth-pkce"))),
     );
 
     const link = container.querySelector("a");
@@ -112,9 +106,7 @@ describe("PluginConnectPanel", () => {
 
   // CL-6377: one Connect action — no separate test step or "Test" copy.
   test("an api-key connector shows the connect form", () => {
-    const container = render(
-      connectorSubject(notConnected(descriptor("exa", "Exa", "api-key"))),
-    );
+    const container = render(connectorSubject(notConnected(descriptor("exa", "Exa", "api-key"))));
 
     expect(container.querySelector('input[type="password"]')).not.toBeNull();
     expect(container.textContent).toContain("Connect");
@@ -146,9 +138,7 @@ describe("PluginConnectPanel", () => {
     }) as unknown as typeof fetch;
 
     const container = render(
-      connectorSubject(
-        notConnected(descriptor("granola", "Granola", "api-key")),
-      ),
+      connectorSubject(notConnected(descriptor("granola", "Granola", "api-key"))),
     );
     await settle();
 
@@ -181,14 +171,10 @@ describe("PluginConnectPanel", () => {
     expect(container.textContent).not.toContain("Close");
 
     act(() => {
-      disconnectButton?.dispatchEvent(
-        new MouseEvent("click", { bubbles: true }),
-      );
+      disconnectButton?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
     });
     act(() => {
-      disconnectButton?.dispatchEvent(
-        new MouseEvent("click", { bubbles: true }),
-      );
+      disconnectButton?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
     });
     await settle();
 
@@ -217,9 +203,7 @@ describe("PluginConnectPanel", () => {
         headers: { "content-type": "application/json" },
       })) as unknown as typeof fetch;
 
-    const container = render(
-      connectorSubject(notConnected(githubDescriptor())),
-    );
+    const container = render(connectorSubject(notConnected(githubDescriptor())));
     await settle();
 
     const link = container.querySelector("a");
@@ -234,9 +218,7 @@ describe("PluginConnectPanel", () => {
         headers: { "content-type": "application/json" },
       })) as unknown as typeof fetch;
 
-    const container = render(
-      connectorSubject(notConnected(githubDescriptor())),
-    );
+    const container = render(connectorSubject(notConnected(githubDescriptor())));
     await settle();
 
     expect(container.textContent).toContain(
@@ -248,12 +230,9 @@ describe("PluginConnectPanel", () => {
   // CL-6830: a failed oauth-configured probe must not collapse into `{}`
   // (which reads as "hosted app absent" and hides one-click connect).
   test("GitHub when the oauth-configured probe fails shows error and retry, not the not-configured token paste", async () => {
-    globalThis.fetch = (() =>
-      Promise.reject(new Error("network down"))) as unknown as typeof fetch;
+    globalThis.fetch = (() => Promise.reject(new Error("network down"))) as unknown as typeof fetch;
 
-    const container = render(
-      connectorSubject(notConnected(githubDescriptor())),
-    );
+    const container = render(connectorSubject(notConnected(githubDescriptor())));
     await settle();
 
     expect(container.textContent).toContain("Couldn't check");
@@ -277,9 +256,7 @@ describe("PluginConnectPanel", () => {
       });
     }) as unknown as typeof fetch;
 
-    const container = render(
-      connectorSubject(notConnected(githubDescriptor())),
-    );
+    const container = render(connectorSubject(notConnected(githubDescriptor())));
     await settle();
 
     const retry = [...container.querySelectorAll("button")].find(
@@ -328,23 +305,15 @@ describe("PluginConnectPanel", () => {
     }) as unknown as typeof fetch;
 
     const changed: number[] = [];
-    const container = render(
-      { kind: "mcp-preset", preset, toolCount: undefined },
-      (toolCount) => {
-        if (toolCount !== undefined) changed.push(toolCount);
-      },
+    const container = render({ kind: "mcp-preset", preset, toolCount: undefined }, (toolCount) => {
+      if (toolCount !== undefined) changed.push(toolCount);
+    });
+    const field = container.querySelector("#mcp-preset-token-github-mcp") as HTMLInputElement;
+    expect(container.querySelector(`label[for="${field.id}"]`)?.textContent).toContain(
+      "Personal access token",
     );
-    const field = container.querySelector(
-      "#mcp-preset-token-github-mcp",
-    ) as HTMLInputElement;
-    expect(
-      container.querySelector(`label[for="${field.id}"]`)?.textContent,
-    ).toContain("Personal access token");
     expect(field.autocomplete).toBe("new-password");
-    const setter = Object.getOwnPropertyDescriptor(
-      HTMLInputElement.prototype,
-      "value",
-    )?.set;
+    const setter = Object.getOwnPropertyDescriptor(HTMLInputElement.prototype, "value")?.set;
     await act(async () => {
       setter?.call(field, "ghp_pasted");
       field.dispatchEvent(new Event("input", { bubbles: true }));
diff --git a/packages/plugins-ui/test/plugin-meta.test.ts b/packages/plugins-ui/test/plugin-meta.test.ts
index 59171571a5..5404303a94 100644
--- a/packages/plugins-ui/test/plugin-meta.test.ts
+++ b/packages/plugins-ui/test/plugin-meta.test.ts
@@ -1,9 +1,6 @@
 import { expect, test } from "bun:test";
 import { Stack } from "@corbits/icons";
-import {
-  connectorDescriptors,
-  CONNECTOR_REGISTRY,
-} from "@corbits/connections/registry";
+import { connectorDescriptors, CONNECTOR_REGISTRY } from "@corbits/connections/registry";
 import { MCP_PRESETS } from "@corbits/connections/mcp-presets";
 
 import { pluginCategory, pluginIcon, pluginOutcome } from "../src/plugin-meta";
diff --git a/packages/plugins-ui/test/plugins-gallery.test.tsx b/packages/plugins-ui/test/plugins-gallery.test.tsx
index f9ec53cf4c..06e28e6419 100644
--- a/packages/plugins-ui/test/plugins-gallery.test.tsx
+++ b/packages/plugins-ui/test/plugins-gallery.test.tsx
@@ -147,18 +147,13 @@ function GalleryHarness({
   );
 }
 
-async function renderGallery(
-  plugins: readonly ResolvedPlugin[] = PLUGINS,
-  initialQuery = "",
-) {
+async function renderGallery(plugins: readonly ResolvedPlugin[] = PLUGINS, initialQuery = "") {
   const container = document.createElement("div");
   document.body.appendChild(container);
   const root: Root = createRoot(container);
   mountedRoots.push(root);
   act(() => {
-    root.render(
-      <GalleryHarness plugins={plugins} initialQuery={initialQuery} />,
-    );
+    root.render(<GalleryHarness plugins={plugins} initialQuery={initialQuery} />);
   });
   await act(() => new Promise((resolve) => setTimeout(resolve, 20)));
   return { container, root };
@@ -185,15 +180,11 @@ describe("PluginsGallery", () => {
     expect(container.querySelectorAll('[role="tablist"]')).toHaveLength(1);
     expect(container.querySelectorAll('[role="tab"]')).toHaveLength(2);
     expect(
-      container.querySelectorAll(
-        '[aria-label="Plugin catalog filters"] [role="tab"]',
-      ),
+      container.querySelectorAll('[aria-label="Plugin catalog filters"] [role="tab"]'),
     ).toHaveLength(0);
     expect(container.querySelector('[aria-label="Filter plugins"]')).toBeNull();
     expect(chip(container, "All").getAttribute("aria-pressed")).toBe("true");
-    expect(
-      chip(container, "Research & data").getAttribute("aria-pressed"),
-    ).toBe("false");
+    expect(chip(container, "Research & data").getAttribute("aria-pressed")).toBe("false");
   });
 
   test("chip counts describe the query-matched catalog", async () => {
@@ -215,14 +206,8 @@ describe("PluginsGallery", () => {
       chip(container, "Research & data").click();
     });
 
-    expect(catalogNames(container)).toEqual([
-      "Exa",
-      "Sumble",
-      "ScrapeCreators",
-    ]);
-    expect(
-      container.querySelectorAll('[aria-label="Plugin catalog"]'),
-    ).toHaveLength(1);
+    expect(catalogNames(container)).toEqual(["Exa", "Sumble", "ScrapeCreators"]);
+    expect(container.querySelectorAll('[aria-label="Plugin catalog"]')).toHaveLength(1);
   });
 
   test("search and a chip filter intersect instead of replacing each other", async () => {
@@ -240,21 +225,14 @@ describe("PluginsGallery", () => {
     const { container } = await renderGallery();
 
     act(() => chip(container, "Productivity").click());
-    expect(catalogNames(container)).toEqual([
-      "Granola",
-      "Notion",
-      "Canva",
-      "Manus",
-    ]);
+    expect(catalogNames(container)).toEqual(["Granola", "Notion", "Canva", "Manus"]);
 
     act(() => chip(container, "Sales & customer").click());
     expect(catalogNames(container)).toEqual(["Attio"]);
 
     act(() => chip(container, "Communication").click());
     expect(catalogNames(container)).toEqual([]);
-    expect(container.textContent).toContain(
-      "No plugins are available in this filter.",
-    );
+    expect(container.textContent).toContain("No plugins are available in this filter.");
   });
 
   test("search matches the original category labels", async () => {
@@ -282,12 +260,8 @@ describe("PluginsGallery", () => {
   test("connected and disconnected entries preserve Manage and Connect flows", async () => {
     const { container } = await renderGallery();
 
-    expect(
-      container.querySelector('[aria-label="Manage GitHub"]'),
-    ).not.toBeNull();
-    expect(
-      container.querySelector('[aria-label="Connect Manus"]'),
-    ).not.toBeNull();
+    expect(container.querySelector('[aria-label="Manage GitHub"]')).not.toBeNull();
+    expect(container.querySelector('[aria-label="Connect Manus"]')).not.toBeNull();
     const exa = container.querySelector('[data-plugin-slug="exa"]');
     expect(exa?.textContent).toContain("Connected");
     expect(exa?.textContent).toContain("Manage");
@@ -298,9 +272,7 @@ describe("PluginsGallery", () => {
       plugin("huggingface", "Hugging Face", "not_connected", "oauth-pkce"),
     ]);
 
-    const connect = container.querySelector(
-      '[aria-label="Connect Hugging Face"]',
-    );
+    const connect = container.querySelector('[aria-label="Connect Hugging Face"]');
     expect(connect?.tagName).toBe("A");
     expect(connect?.getAttribute("href")).toBe(
       "/api/tenants/tenant_test/connections/oauth/huggingface/start?return=%2Fplugins",
@@ -310,9 +282,7 @@ describe("PluginsGallery", () => {
 
   test("a token preset keeps its catalog row compact and collects credentials in a drawer", async () => {
     const { container } = await renderGallery();
-    const githubMcp = container.querySelector(
-      '[data-plugin-slug="github-mcp"]',
-    );
+    const githubMcp = container.querySelector('[data-plugin-slug="github-mcp"]');
     const connect = githubMcp?.querySelector(
       '[aria-label="Connect GitHub MCP"]',
     ) as HTMLButtonElement | null;
@@ -322,9 +292,7 @@ describe("PluginsGallery", () => {
     expect(githubMcp?.querySelector("input")).toBeNull();
     const dialog = document.body.querySelector('[role="dialog"]');
     expect(dialog?.textContent).toContain("GitHub MCP");
-    expect(
-      dialog?.querySelector("#mcp-preset-token-github-mcp"),
-    ).not.toBeNull();
+    expect(dialog?.querySelector("#mcp-preset-token-github-mcp")).not.toBeNull();
   });
 
   test("dismissing a token drawer discards its pasted token before reopening", async () => {
@@ -335,13 +303,8 @@ describe("PluginsGallery", () => {
 
     connect.focus();
     act(() => connect.click());
-    const field = document.body.querySelector(
-      "#mcp-preset-token-github-mcp",
-    ) as HTMLInputElement;
-    const setter = Object.getOwnPropertyDescriptor(
-      HTMLInputElement.prototype,
-      "value",
-    )?.set;
+    const field = document.body.querySelector("#mcp-preset-token-github-mcp") as HTMLInputElement;
+    const setter = Object.getOwnPropertyDescriptor(HTMLInputElement.prototype, "value")?.set;
     await act(async () => {
       setter?.call(field, "ghp_unsubmitted");
       field.dispatchEvent(new Event("input", { bubbles: true }));
@@ -359,11 +322,7 @@ describe("PluginsGallery", () => {
 
     act(() => connect.click());
     expect(
-      (
-        document.body.querySelector(
-          "#mcp-preset-token-github-mcp",
-        ) as HTMLInputElement
-      ).value,
+      (document.body.querySelector("#mcp-preset-token-github-mcp") as HTMLInputElement).value,
     ).toBe("");
   });
 
@@ -398,9 +357,7 @@ describe("PluginsGallery", () => {
   test("every preset returned by the route reaches a fresh catalog", async () => {
     const { container } = await renderGallery([]);
 
-    expect(container.querySelectorAll("[data-plugin-slug]")).toHaveLength(
-      MCP_PRESETS.length,
-    );
+    expect(container.querySelectorAll("[data-plugin-slug]")).toHaveLength(MCP_PRESETS.length);
     for (const preset of MCP_PRESETS) {
       expect(container.textContent).toContain(preset.displayName);
     }
diff --git a/packages/process-provisioner/package.json b/packages/process-provisioner/package.json
index 84967e1380..8f57c675f0 100644
--- a/packages/process-provisioner/package.json
+++ b/packages/process-provisioner/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/process-provisioner",
+  "version": "0.0.1",
   "private": true,
   "description": "SidecarProvisioner plugin that runs each sidecar allocation as a child process on the hub host",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/process-provisioner/src/config.test.ts b/packages/process-provisioner/src/config.test.ts
index 2697b45ab6..3d9bbf3581 100644
--- a/packages/process-provisioner/src/config.test.ts
+++ b/packages/process-provisioner/src/config.test.ts
@@ -14,12 +14,8 @@ describe("readProcessProvisionerConfig", () => {
 
     expect(config.sidecarEntryPath).toEndWith("/apps/sidecar/src/index.ts");
     expect(config.runtimePath).toBe(process.execPath);
-    expect(config.allocationsDir).toBe(
-      "/srv/hub-data/process-provisioner/allocations",
-    );
-    expect(config.stateFilePath).toBe(
-      "/srv/hub-data/process-provisioner/state.json",
-    );
+    expect(config.allocationsDir).toBe("/srv/hub-data/process-provisioner/allocations");
+    expect(config.stateFilePath).toBe("/srv/hub-data/process-provisioner/state.json");
     expect(config.hubWebSocketUrl).toBe(HUB_WS_URL);
   });
 
diff --git a/packages/process-provisioner/src/config.ts b/packages/process-provisioner/src/config.ts
index 495eec0537..533c6a2666 100644
--- a/packages/process-provisioner/src/config.ts
+++ b/packages/process-provisioner/src/config.ts
@@ -66,14 +66,11 @@ export function readProcessProvisionerConfig(
 ): ProcessProvisionerConfig {
   const parsed = Environment(args.env);
   if (parsed instanceof type.errors) {
-    throw new Error(
-      `invalid process provisioner environment: ${parsed.summary}`,
-    );
+    throw new Error(`invalid process provisioner environment: ${parsed.summary}`);
   }
   if (!isAbsolute(args.dataDir)) {
     throw new Error(
-      "process provisioner data dir must be an absolute path; got " +
-        JSON.stringify(args.dataDir),
+      "process provisioner data dir must be an absolute path; got " + JSON.stringify(args.dataDir),
     );
   }
   const sidecarEntryPath = resolve(
diff --git a/packages/process-provisioner/src/fake-process-runner.ts b/packages/process-provisioner/src/fake-process-runner.ts
index d3fa1ec3c8..1dc812b494 100644
--- a/packages/process-provisioner/src/fake-process-runner.ts
+++ b/packages/process-provisioner/src/fake-process-runner.ts
@@ -1,7 +1,4 @@
-import type {
-  SidecarProcessRunner,
-  SpawnSidecarProcessArgs,
-} from "./process-runner";
+import type { SidecarProcessRunner, SpawnSidecarProcessArgs } from "./process-runner";
 
 export type FakeSidecarProcessRunner = SidecarProcessRunner & {
   readonly spawns: SpawnSidecarProcessArgs[];
diff --git a/packages/process-provisioner/src/interchange-plugin.test.ts b/packages/process-provisioner/src/interchange-plugin.test.ts
index 7888ebf56e..7b2c2730a4 100644
--- a/packages/process-provisioner/src/interchange-plugin.test.ts
+++ b/packages/process-provisioner/src/interchange-plugin.test.ts
@@ -26,9 +26,7 @@ async function configIn(dataDir: string): Promise<ProcessProvisionerConfig> {
   };
 }
 
-async function harness(
-  opts: Parameters<typeof createFakeSidecarProcessRunner>[0] = {},
-): Promise<{
+async function harness(opts: Parameters<typeof createFakeSidecarProcessRunner>[0] = {}): Promise<{
   provisioner: ReturnType<typeof createProcessSidecarProvisioner>;
   runner: FakeSidecarProcessRunner;
   config: ProcessProvisionerConfig;
@@ -47,9 +45,7 @@ async function harness(
   };
 }
 
-function ensureRequest(
-  overrides: Partial<EnsureSidecarRequest> = {},
-): EnsureSidecarRequest {
+function ensureRequest(overrides: Partial<EnsureSidecarRequest> = {}): EnsureSidecarRequest {
   return {
     allocationId: "alloc-1",
     generation: 1,
@@ -193,9 +189,7 @@ describe("createProcessSidecarProvisioner", () => {
   test("an allocation id that is not a safe directory name is rejected outright", async () => {
     const { provisioner, runner } = await harness();
 
-    const result = await provisioner.ensure(
-      ensureRequest({ allocationId: "../escape" }),
-    );
+    const result = await provisioner.ensure(ensureRequest({ allocationId: "../escape" }));
 
     expect(result).toMatchObject({
       kind: "rejected",
diff --git a/packages/process-provisioner/src/interchange-plugin.ts b/packages/process-provisioner/src/interchange-plugin.ts
index 17cb13ea5d..28beec5530 100644
--- a/packages/process-provisioner/src/interchange-plugin.ts
+++ b/packages/process-provisioner/src/interchange-plugin.ts
@@ -8,10 +8,7 @@ import type { SidecarProvisioner } from "@intx/hub-sessions";
 
 import type { ProcessProvisionerConfig } from "./config";
 import { createProcessBackend } from "./process-backend";
-import {
-  createBunSidecarProcessRunner,
-  type SidecarProcessRunner,
-} from "./process-runner";
+import { createBunSidecarProcessRunner, type SidecarProcessRunner } from "./process-runner";
 
 const PROVISIONER_API_VERSION = 1 as const;
 
diff --git a/packages/process-provisioner/src/process-backend.ts b/packages/process-provisioner/src/process-backend.ts
index 0013fb0e0c..ce332199bf 100644
--- a/packages/process-provisioner/src/process-backend.ts
+++ b/packages/process-provisioner/src/process-backend.ts
@@ -1,11 +1,4 @@
-import {
-  mkdir,
-  readFile,
-  readdir,
-  rm,
-  rmdir,
-  writeFile,
-} from "node:fs/promises";
+import { mkdir, readFile, readdir, rm, rmdir, writeFile } from "node:fs/promises";
 import { dirname, resolve } from "node:path";
 
 import { reportError } from "@corbits/error-sink";
@@ -64,10 +57,7 @@ export function createProcessBackend(
   }
 
   function unitDirOf(allocationId: string, generation: number): string {
-    return resolve(
-      allocationDirOf(allocationId),
-      `${UNIT_DIR_PREFIX}${String(generation)}`,
-    );
+    return resolve(allocationDirOf(allocationId), `${UNIT_DIR_PREFIX}${String(generation)}`);
   }
 
   return {
@@ -143,9 +133,7 @@ export function createProcessBackend(
         // The allocation's own directory goes once its last unit does;
         // a still-running newer generation keeps it, which is why this
         // is an rmdir and not a recursive remove.
-        await rmdir(allocationDirOf(unit.allocationId)).catch(
-          ignoreNonEmptyOrMissing,
-        );
+        await rmdir(allocationDirOf(unit.allocationId)).catch(ignoreNonEmptyOrMissing);
       } catch (error) {
         throw operationalFailure(
           error,
@@ -156,9 +144,7 @@ export function createProcessBackend(
       }
     },
 
-    async findUnitsByAllocation(
-      allocationId: string,
-    ): Promise<readonly string[]> {
+    async findUnitsByAllocation(allocationId: string): Promise<readonly string[]> {
       const allocationDir = allocationDirOf(allocationId);
       let entries: string[];
       try {
@@ -177,10 +163,7 @@ export function createProcessBackend(
       for (const entry of entries) {
         const generation = generationOf(entry);
         if (generation === null) continue;
-        const pid = await readPidFile(
-          resolve(allocationDir, entry),
-          allocationId,
-        );
+        const pid = await readPidFile(resolve(allocationDir, entry), allocationId);
         if (pid === null || !runner.isAlive(pid)) continue;
         refs.push(externalRefOf(allocationId, generation, pid));
       }
@@ -196,10 +179,7 @@ export function createProcessBackend(
  * Nothing else of the hub's environment is inherited: a sidecar learns
  * everything else over the wire.
  */
-function sidecarEnvFor(
-  args: StartUnitArgs,
-  sidecarDataDir: string,
-): Record<string, string> {
+function sidecarEnvFor(args: StartUnitArgs, sidecarDataDir: string): Record<string, string> {
   const path = process.env["PATH"];
   if (path === undefined || path === "") {
     const error = new Error(
@@ -229,10 +209,7 @@ function sidecarEnvFor(
  * its own state, escalating to SIGKILL only if it is still alive. A pid
  * that is already gone is success — destroy has to stay idempotent.
  */
-async function terminate(
-  runner: SidecarProcessRunner,
-  pid: number,
-): Promise<void> {
+async function terminate(runner: SidecarProcessRunner, pid: number): Promise<void> {
   if (!runner.isAlive(pid)) return;
   runner.signal(pid, "SIGTERM");
   const deadline = Date.now() + TERMINATION_GRACE_MS;
@@ -246,10 +223,7 @@ function sleep(ms: number): Promise<void> {
   return new Promise((done) => setTimeout(done, ms));
 }
 
-async function readPidFile(
-  unitDir: string,
-  allocationId: string,
-): Promise<number | null> {
+async function readPidFile(unitDir: string, allocationId: string): Promise<number | null> {
   let raw: string;
   try {
     raw = await readFile(resolve(unitDir, PID_FILE_NAME), "utf8");
@@ -266,11 +240,7 @@ async function readPidFile(
   return Number.isInteger(pid) && pid > 0 ? pid : null;
 }
 
-function externalRefOf(
-  allocationId: string,
-  generation: number,
-  pid: number,
-): string {
+function externalRefOf(allocationId: string, generation: number, pid: number): string {
   return `${allocationId}:${String(generation)}:${String(pid)}`;
 }
 
@@ -324,11 +294,7 @@ function operationalFailure(
     extra: { allocationId },
   });
   const detail = error instanceof Error ? error.message : String(error);
-  return new BackendOperationError(
-    code,
-    `${message}: ${detail} (${refId})`,
-    true,
-  );
+  return new BackendOperationError(code, `${message}: ${detail} (${refId})`, true);
 }
 
 function isErrnoCode(error: unknown, code: string): boolean {
diff --git a/packages/provider-pricing/package.json b/packages/provider-pricing/package.json
index eb85ec03a5..a36ee72afb 100644
--- a/packages/provider-pricing/package.json
+++ b/packages/provider-pricing/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/provider-pricing",
+  "version": "0.0.1",
   "private": true,
   "description": "Static (provider, model) token rates and cost math for the catalog seed set. Insights looks up a turn here when the provider did not report a dollar cost.",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
@@ -13,8 +13,8 @@
     "test": "bun test"
   },
   "dependencies": {
-    "@intx/inference-catalog": "0.3.0",
-    "@corbits/connections": "workspace:*"
+    "@corbits/connections": "workspace:*",
+    "@intx/inference-catalog": "0.3.0"
   },
   "devDependencies": {
     "@types/bun": "catalog:",
diff --git a/packages/provider-pricing/src/cost.ts b/packages/provider-pricing/src/cost.ts
index ae0373064c..e138f84c24 100644
--- a/packages/provider-pricing/src/cost.ts
+++ b/packages/provider-pricing/src/cost.ts
@@ -6,10 +6,7 @@ import type { CostBreakdown, TokenClasses, TokenRates } from "./types";
  * that class — and therefore the total — absent (null). Never invents
  * a zero cost for an unknown rate.
  */
-export function computeCost(
-  tokens: TokenClasses,
-  rates: TokenRates,
-): CostBreakdown {
+export function computeCost(tokens: TokenClasses, rates: TokenRates): CostBreakdown {
   const input = classCost(tokens.input, rates.inputPerMTok);
   const cacheRead = classCost(tokens.cacheRead, rates.cacheReadPerMTok);
   const cacheWrite = classCost(tokens.cacheWrite, rates.cacheWritePerMTok);
@@ -35,13 +32,7 @@ function classCost(tokens: number, ratePerMTok: number | null): number | null {
 
 /** Sum token classes from a row-shaped object. */
 export function totalTokens(tokens: TokenClasses): number {
-  return (
-    tokens.input +
-    tokens.cacheRead +
-    tokens.cacheWrite +
-    tokens.output +
-    tokens.thinking
-  );
+  return tokens.input + tokens.cacheRead + tokens.cacheWrite + tokens.output + tokens.thinking;
 }
 
 /** Prompt-side tokens used to pick a context-size rate tier. */
diff --git a/packages/provider-pricing/src/rates.ts b/packages/provider-pricing/src/rates.ts
index 210c98f4cc..53336e6111 100644
--- a/packages/provider-pricing/src/rates.ts
+++ b/packages/provider-pricing/src/rates.ts
@@ -110,37 +110,23 @@ export const PROVIDER_PRICES: readonly ModelPrice[] = [
     { minContextTokens: 200_000, rates: usd(4, 12, 0.4, 5) },
   ]),
 
-  unpriced(
-    "openrouter",
-    "qwen/qwen3.8-27b",
-    NOT_IN_PINNED_CATALOG,
-    usd(0.09, 0.29, 0.018, 0.1125),
-  ),
+  unpriced("openrouter", "qwen/qwen3.8-27b", NOT_IN_PINNED_CATALOG, usd(0.09, 0.29, 0.018, 0.1125)),
   unpriced(
     "openrouter",
     "anthropic/claude-sonnet-5",
     OPENROUTER_NAMESPACED,
     usd(2, 10, 0.2, 3.125),
   ),
-  unpriced(
-    "openrouter",
-    "openai/gpt-5.6-sol",
-    OPENROUTER_NAMESPACED,
-    usd(2, 12, 0.2, 2.5),
-    [{ minContextTokens: 272_000, rates: usd(4, 18, 0.4, 5) }],
-  ),
+  unpriced("openrouter", "openai/gpt-5.6-sol", OPENROUTER_NAMESPACED, usd(2, 12, 0.2, 2.5), [
+    { minContextTokens: 272_000, rates: usd(4, 18, 0.4, 5) },
+  ]),
   unpriced(
     "openrouter",
     "meta-llama/llama-3.3-70b-instruct",
     NOT_IN_PINNED_CATALOG,
     usd(0.1, 0.32, 0.02, 0.125),
   ),
-  unpriced(
-    "openrouter",
-    "google/gemma-4-26b-a4b-it:free",
-    NOT_IN_PINNED_CATALOG,
-    FREE,
-  ),
+  unpriced("openrouter", "google/gemma-4-26b-a4b-it:free", NOT_IN_PINNED_CATALOG, FREE),
 
   priced("opencode-zen", "qwen3.7-plus", usd(0.32, 1.28, 0.064, 0.4), [
     { minContextTokens: 256_000, rates: usd(0.96, 3.84, 0.192, 1.2) },
@@ -150,46 +136,16 @@ export const PROVIDER_PRICES: readonly ModelPrice[] = [
   priced("opencode-zen", "deepseek-v4-flash", usd(0.14, 0.28, 0.028, 0.175)),
   priced("opencode-zen", "kimi-k2.6", usd(0.5, 2.8, 0.1, 0.625)),
 
-  unpriced(
-    "groq",
-    "llama-3.3-70b-versatile",
-    NOT_IN_PINNED_CATALOG,
-    usd(0.59, 0.79, null, null),
-  ),
-  unpriced(
-    "groq",
-    "llama-3.1-8b-instant",
-    NOT_IN_PINNED_CATALOG,
-    usd(0.05, 0.08, null, null),
-  ),
-  unpriced(
-    "groq",
-    "openai/gpt-oss-120b",
-    NOT_IN_PINNED_CATALOG,
-    usd(0.15, 0.6, 0.075, null),
-  ),
+  unpriced("groq", "llama-3.3-70b-versatile", NOT_IN_PINNED_CATALOG, usd(0.59, 0.79, null, null)),
+  unpriced("groq", "llama-3.1-8b-instant", NOT_IN_PINNED_CATALOG, usd(0.05, 0.08, null, null)),
+  unpriced("groq", "openai/gpt-oss-120b", NOT_IN_PINNED_CATALOG, usd(0.15, 0.6, 0.075, null)),
 
   priced("deepseek", "deepseek-v4-flash", usd(0.14, 0.28, 0.028, 0.175)),
   priced("deepseek", "deepseek-v4-pro", usd(1.74, 3.48, 0.145, 2.175)),
 
-  unpriced(
-    "mistral",
-    "mistral-small-2603",
-    NOT_IN_PINNED_CATALOG,
-    usd(0.15, 0.6, 0.03, 0.1875),
-  ),
-  unpriced(
-    "mistral",
-    "mistral-large-2512",
-    NOT_IN_PINNED_CATALOG,
-    usd(0.5, 1.5, 0.05, 0.625, 1.5),
-  ),
-  unpriced(
-    "mistral",
-    "codestral-2508",
-    NOT_IN_PINNED_CATALOG,
-    usd(0.3, 0.9, null, null),
-  ),
+  unpriced("mistral", "mistral-small-2603", NOT_IN_PINNED_CATALOG, usd(0.15, 0.6, 0.03, 0.1875)),
+  unpriced("mistral", "mistral-large-2512", NOT_IN_PINNED_CATALOG, usd(0.5, 1.5, 0.05, 0.625, 1.5)),
+  unpriced("mistral", "codestral-2508", NOT_IN_PINNED_CATALOG, usd(0.3, 0.9, null, null)),
 
   unpriced(
     "huggingface",
diff --git a/packages/reddit-tools/package.json b/packages/reddit-tools/package.json
index 0bc7273ba2..237ecfaa58 100644
--- a/packages/reddit-tools/package.json
+++ b/packages/reddit-tools/package.json
@@ -1,28 +1,21 @@
 {
   "name": "@corbits/reddit-tools",
-  "description": "Reddit integration (via ScrapeCreators): a minimal client and an @intx/agent tool bundle for searching Reddit sitewide or within one subreddit",
   "version": "0.0.2",
+  "description": "Reddit integration (via ScrapeCreators): a minimal client and an @intx/agent tool bundle for searching Reddit sitewide or within one subreddit",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "interchange": {
-    "credentials": [
-      {
-        "handle": "scrapecreators"
-      }
-    ]
-  },
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "packages/reddit-tools"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "packages/reddit-tools"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -34,12 +27,19 @@
   "dependencies": {
     "arktype": "catalog:"
   },
+  "devDependencies": {
+    "@types/bun": "catalog:",
+    "typescript": "catalog:"
+  },
   "peerDependencies": {
     "@intx/agent": "0.3.0",
     "@intx/types": "0.3.0"
   },
-  "devDependencies": {
-    "@types/bun": "catalog:",
-    "typescript": "catalog:"
+  "interchange": {
+    "credentials": [
+      {
+        "handle": "scrapecreators"
+      }
+    ]
   }
 }
diff --git a/packages/reddit-tools/src/client.test.ts b/packages/reddit-tools/src/client.test.ts
index 8ce81f0582..62e717cb2c 100644
--- a/packages/reddit-tools/src/client.test.ts
+++ b/packages/reddit-tools/src/client.test.ts
@@ -28,10 +28,7 @@ test("searchReddit returns parsed posts, tolerating the epoch created_utc shape"
       status: 200,
     })) as unknown as typeof fetch;
 
-  const posts = await searchReddit(
-    { apiKey: "test-key", fetchImpl },
-    { query: "workflow tool" },
-  );
+  const posts = await searchReddit({ apiKey: "test-key", fetchImpl }, { query: "workflow tool" });
   expect(posts).toEqual([
     {
       title: "Anyone using a tool for this?",
@@ -71,9 +68,7 @@ test("searchSubreddit returns parsed posts, tolerating the ISO created_at shape"
 test("posts the api key as the x-api-key header", async () => {
   const captured: { key: string | null } = { key: null };
   const fetchImpl = (async (_input: URL | string, init?: RequestInit) => {
-    captured.key =
-      (init?.headers as Record<string, string> | undefined)?.["x-api-key"] ??
-      null;
+    captured.key = (init?.headers as Record<string, string> | undefined)?.["x-api-key"] ?? null;
     return new Response(JSON.stringify({ posts: [] }), { status: 200 });
   }) as unknown as typeof fetch;
 
@@ -82,12 +77,11 @@ test("posts the api key as the x-api-key header", async () => {
 });
 
 test("throws on a non-ok HTTP response", async () => {
-  const fetchImpl = (async () =>
-    new Response("nope", { status: 401 })) as unknown as typeof fetch;
+  const fetchImpl = (async () => new Response("nope", { status: 401 })) as unknown as typeof fetch;
 
-  await expect(
-    searchReddit({ apiKey: "bad", fetchImpl }, { query: "anything" }),
-  ).rejects.toThrow(/401/);
+  await expect(searchReddit({ apiKey: "bad", fetchImpl }, { query: "anything" })).rejects.toThrow(
+    /401/,
+  );
 });
 
 test("drops posts that do not match the expected shape rather than throwing", async () => {
@@ -96,10 +90,7 @@ test("drops posts that do not match the expected shape rather than throwing", as
       status: 200,
     })) as unknown as typeof fetch;
 
-  const posts = await searchReddit(
-    { apiKey: "test-key", fetchImpl },
-    { query: "anything" },
-  );
+  const posts = await searchReddit({ apiKey: "test-key", fetchImpl }, { query: "anything" });
   expect(posts).toEqual([]);
 });
 
diff --git a/packages/reddit-tools/src/client.ts b/packages/reddit-tools/src/client.ts
index da5de97182..ca7a5f0463 100644
--- a/packages/reddit-tools/src/client.ts
+++ b/packages/reddit-tools/src/client.ts
@@ -118,8 +118,7 @@ async function fetchPosts(
   });
   if (!response.ok) {
     const body = await response.text().catch(() => "");
-    const detail =
-      body.length > 0 ? `: ${body.slice(0, MAX_ERROR_BODY_LENGTH)}` : "";
+    const detail = body.length > 0 ? `: ${body.slice(0, MAX_ERROR_BODY_LENGTH)}` : "";
     throw new Error(
       `ScrapeCreators Reddit request failed: ${response.status} ${response.statusText}${detail}`,
     );
diff --git a/packages/reddit-tools/src/index.ts b/packages/reddit-tools/src/index.ts
index 345b6f4284..48fcd0ac19 100644
--- a/packages/reddit-tools/src/index.ts
+++ b/packages/reddit-tools/src/index.ts
@@ -1,12 +1,4 @@
 export { RedditPost, searchReddit, searchSubreddit } from "./client";
-export type {
-  RedditClientConfig,
-  RedditSearchParams,
-  RedditSubredditSearchParams,
-} from "./client";
-export {
-  REDDIT_SEARCH_TOOL,
-  REDDIT_SUBREDDIT_SEARCH_TOOL,
-  redditTools,
-} from "./tool";
+export type { RedditClientConfig, RedditSearchParams, RedditSubredditSearchParams } from "./client";
+export { REDDIT_SEARCH_TOOL, REDDIT_SUBREDDIT_SEARCH_TOOL, redditTools } from "./tool";
 export type { RedditEnv } from "./tool";
diff --git a/packages/reddit-tools/src/manifest.test.ts b/packages/reddit-tools/src/manifest.test.ts
index d8f0266bfb..850b6553a1 100644
--- a/packages/reddit-tools/src/manifest.test.ts
+++ b/packages/reddit-tools/src/manifest.test.ts
@@ -21,7 +21,5 @@ test("declares exactly one credential handle: scrapecreators", () => {
   if (parsed instanceof type.errors) {
     throw new Error(parsed.summary);
   }
-  expect(parsed.interchange?.credentials).toEqual([
-    { handle: "scrapecreators" },
-  ]);
+  expect(parsed.interchange?.credentials).toEqual([{ handle: "scrapecreators" }]);
 });
diff --git a/packages/reddit-tools/src/tool.test.ts b/packages/reddit-tools/src/tool.test.ts
index 5a47e355dc..5155eee534 100644
--- a/packages/reddit-tools/src/tool.test.ts
+++ b/packages/reddit-tools/src/tool.test.ts
@@ -2,11 +2,7 @@ import { expect, test } from "bun:test";
 import type { ToolCall } from "@intx/types/runtime";
 import type { CredentialCapability, MediatedCredential } from "@intx/types";
 
-import {
-  REDDIT_SEARCH_TOOL,
-  REDDIT_SUBREDDIT_SEARCH_TOOL,
-  redditTools,
-} from "./tool";
+import { REDDIT_SEARCH_TOOL, REDDIT_SUBREDDIT_SEARCH_TOOL, redditTools } from "./tool";
 import type { RedditEnv } from "./tool";
 
 const SEARCH_CALL: ToolCall = {
@@ -32,9 +28,7 @@ function fakeCredentials(secret: string | undefined): CredentialCapability {
   return {
     resolve(handle: string): Promise<MediatedCredential> {
       if (secret === undefined) {
-        return Promise.reject(
-          new Error(`no credential is bound to handle "${handle}"`),
-        );
+        return Promise.reject(new Error(`no credential is bound to handle "${handle}"`));
       }
       return Promise.resolve({
         kind: "http",
@@ -70,10 +64,7 @@ test("degrades to a non-throwing 'not connected' error when no credential is bou
 
 test("degrades the same way when the step carries no credentials capability at all", async () => {
   const bundle = redditTools(fakeEnv(undefined));
-  const result = await bundle.run(
-    SUBREDDIT_SEARCH_CALL,
-    new AbortController().signal,
-  );
+  const result = await bundle.run(SUBREDDIT_SEARCH_CALL, new AbortController().signal);
   expect(result.isError).toBe(true);
   expect(result.content).toMatch(/not connected/i);
 });
@@ -105,9 +96,7 @@ test("rejects a subreddit search call with no subreddit, without throwing", asyn
 test("returns posts as JSON content on a successful search call", async () => {
   const originalFetch = globalThis.fetch;
   globalThis.fetch = (async (_input: unknown, init?: RequestInit) => {
-    expect((init?.headers as Headers | undefined)?.get("x-api-key")).toBe(
-      "key",
-    );
+    expect((init?.headers as Headers | undefined)?.get("x-api-key")).toBe("key");
     return new Response(
       JSON.stringify({
         posts: [
@@ -149,14 +138,10 @@ test("returns posts as JSON content on a successful search call", async () => {
 
 test("degrades to an error result (never throws) when the underlying call fails", async () => {
   const originalFetch = globalThis.fetch;
-  globalThis.fetch = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  globalThis.fetch = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
   try {
     const bundle = redditTools(fakeEnv(fakeCredentials("key")));
-    const result = await bundle.run(
-      SUBREDDIT_SEARCH_CALL,
-      new AbortController().signal,
-    );
+    const result = await bundle.run(SUBREDDIT_SEARCH_CALL, new AbortController().signal);
     expect(result.isError).toBe(true);
   } finally {
     globalThis.fetch = originalFetch;
diff --git a/packages/reddit-tools/src/tool.ts b/packages/reddit-tools/src/tool.ts
index 2f926b97c3..11f7694b9b 100644
--- a/packages/reddit-tools/src/tool.ts
+++ b/packages/reddit-tools/src/tool.ts
@@ -51,9 +51,7 @@ async function resolveRedditCredential(
 ): Promise<{ fetchImpl: typeof fetch } | null> {
   if (env.credentials === undefined) return null;
   try {
-    const mediated = await env.credentials.resolve(
-      SCRAPECREATORS_CREDENTIAL_HANDLE,
-    );
+    const mediated = await env.credentials.resolve(SCRAPECREATORS_CREDENTIAL_HANDLE);
     return { fetchImpl: mediated.fetch as unknown as typeof fetch };
   } catch {
     return null;
@@ -70,9 +68,7 @@ function optionalStringArg(call: ToolCall, name: string): string | undefined {
   return typeof value === "string" ? value : undefined;
 }
 
-function searchOptions(
-  call: ToolCall,
-): Pick<RedditSearchParams, "sort" | "timeframe"> {
+function searchOptions(call: ToolCall): Pick<RedditSearchParams, "sort" | "timeframe"> {
   const options: { sort?: string; timeframe?: string } = {};
   const sort = optionalStringArg(call, "sort");
   const timeframe = optionalStringArg(call, "timeframe");
@@ -81,10 +77,7 @@ function searchOptions(
   return options;
 }
 
-async function runRedditSearch(
-  env: RedditEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runRedditSearch(env: RedditEnv, call: ToolCall): Promise<ToolResult> {
   const credential = await resolveRedditCredential(env);
   if (credential === null) {
     return notConnectedResult(call.id);
@@ -112,10 +105,7 @@ async function runRedditSearch(
   }
 }
 
-async function runRedditSubredditSearch(
-  env: RedditEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runRedditSubredditSearch(env: RedditEnv, call: ToolCall): Promise<ToolResult> {
   const credential = await resolveRedditCredential(env);
   if (credential === null) {
     return notConnectedResult(call.id);
@@ -153,10 +143,7 @@ async function runRedditSubredditSearch(
 export const redditTools = defineTool<RedditEnv>({
   id: "@corbits/reddit-tools/reddit",
   requires: ["credentials"],
-  definitions: [
-    { name: REDDIT_SEARCH_TOOL },
-    { name: REDDIT_SUBREDDIT_SEARCH_TOOL },
-  ],
+  definitions: [{ name: REDDIT_SEARCH_TOOL }, { name: REDDIT_SUBREDDIT_SEARCH_TOOL }],
   factory: (env) => ({
     definitions: [
       {
diff --git a/packages/sandbox-sidecar/package.json b/packages/sandbox-sidecar/package.json
index 33db7b5503..75c85f7f8f 100644
--- a/packages/sandbox-sidecar/package.json
+++ b/packages/sandbox-sidecar/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/sandbox-sidecar",
+  "version": "0.0.1",
   "private": true,
   "description": "Backend-agnostic sidecar allocation lifecycle: state store and ensure/destroy convergence for a SidecarProvisioner",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/sandbox-sidecar/src/capabilities.test.ts b/packages/sandbox-sidecar/src/capabilities.test.ts
index 8ba7d80c0a..a108b99557 100644
--- a/packages/sandbox-sidecar/src/capabilities.test.ts
+++ b/packages/sandbox-sidecar/src/capabilities.test.ts
@@ -7,9 +7,7 @@ import { sidecarCapabilityDeclarations } from "./capabilities";
 describe("sidecarCapabilityDeclarations", () => {
   test("every backend's declarations parse as Interchange declarations", () => {
     for (const isolation of ["process", "container", "vm"] as const) {
-      const parsed = SidecarCapabilityDeclaration.array()(
-        sidecarCapabilityDeclarations(isolation),
-      );
+      const parsed = SidecarCapabilityDeclaration.array()(sidecarCapabilityDeclarations(isolation));
       expect(parsed instanceof type.errors).toBe(false);
     }
   });
@@ -33,10 +31,8 @@ describe("sidecarCapabilityDeclarations", () => {
   });
 
   test("a vm reaches every rung of the ladder", () => {
-    expect(
-      sidecarCapabilityDeclarations("vm").every(
-        ({ state }) => state === "available",
-      ),
-    ).toBe(true);
+    expect(sidecarCapabilityDeclarations("vm").every(({ state }) => state === "available")).toBe(
+      true,
+    );
   });
 });
diff --git a/packages/sandbox-sidecar/src/index.ts b/packages/sandbox-sidecar/src/index.ts
index f05d29d70e..2ba3d46484 100644
--- a/packages/sandbox-sidecar/src/index.ts
+++ b/packages/sandbox-sidecar/src/index.ts
@@ -1,18 +1,11 @@
-export {
-  createSidecarProvisioner,
-  type CreateSidecarProvisionerOpts,
-} from "./provisioner";
+export { createSidecarProvisioner, type CreateSidecarProvisionerOpts } from "./provisioner";
 export {
   sidecarCapabilityDeclarations,
   SIDECAR_ISOLATION_LEVELS,
   SIDECAR_RUNTIME_CAPABILITY,
   type SidecarIsolationLevel,
 } from "./capabilities";
-export {
-  BackendOperationError,
-  type SidecarBackend,
-  type StartUnitArgs,
-} from "./backend";
+export { BackendOperationError, type SidecarBackend, type StartUnitArgs } from "./backend";
 export {
   createAllocationStateStore,
   type AllocationStateStore,
diff --git a/packages/sandbox-sidecar/src/provisioner.test.ts b/packages/sandbox-sidecar/src/provisioner.test.ts
index ffa17cd273..e30a632226 100644
--- a/packages/sandbox-sidecar/src/provisioner.test.ts
+++ b/packages/sandbox-sidecar/src/provisioner.test.ts
@@ -3,10 +3,7 @@ import { mkdtemp, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 
-import {
-  createAllocationStateStore,
-  type AllocationStateStore,
-} from "./state-store";
+import { createAllocationStateStore, type AllocationStateStore } from "./state-store";
 import { createSidecarProvisioner } from "./provisioner";
 import type { SidecarBackend } from "./backend";
 
@@ -70,9 +67,7 @@ describe("ensure request validation", () => {
   test("accepts generation 0, the allocation service's initial generation", async () => {
     const provisioner = makeProvisioner();
 
-    const result = await provisioner.ensure(
-      baseEnsureRequest({ generation: 0 }),
-    );
+    const result = await provisioner.ensure(baseEnsureRequest({ generation: 0 }));
 
     expect(result).toEqual({ kind: "accepted", externalRef: "unit-1" });
   });
@@ -81,9 +76,7 @@ describe("ensure request validation", () => {
     const provisioner = makeProvisioner();
 
     await provisioner.ensure(baseEnsureRequest({ generation: 0 }));
-    const result = await provisioner.ensure(
-      baseEnsureRequest({ generation: 1 }),
-    );
+    const result = await provisioner.ensure(baseEnsureRequest({ generation: 1 }));
 
     expect(result).toEqual({ kind: "accepted", externalRef: "unit-2" });
   });
@@ -92,9 +85,7 @@ describe("ensure request validation", () => {
     const provisioner = makeProvisioner();
 
     await provisioner.ensure(baseEnsureRequest({ generation: 1 }));
-    const result = await provisioner.ensure(
-      baseEnsureRequest({ generation: 0 }),
-    );
+    const result = await provisioner.ensure(baseEnsureRequest({ generation: 0 }));
 
     expect(result).toMatchObject({
       kind: "rejected",
diff --git a/packages/sandbox-sidecar/src/provisioner.ts b/packages/sandbox-sidecar/src/provisioner.ts
index 9771be3198..b6c6b7221d 100644
--- a/packages/sandbox-sidecar/src/provisioner.ts
+++ b/packages/sandbox-sidecar/src/provisioner.ts
@@ -37,9 +37,7 @@ export type CreateSidecarProvisionerOpts = {
   readonly store: AllocationStateStore;
 };
 
-export function createSidecarProvisioner(
-  opts: CreateSidecarProvisionerOpts,
-): SidecarProvisioner {
+export function createSidecarProvisioner(opts: CreateSidecarProvisionerOpts): SidecarProvisioner {
   const { backend, store } = opts;
 
   // Coalesces concurrent ensure() calls for the same allocation so two
@@ -48,9 +46,7 @@ export function createSidecarProvisioner(
   // own compute unit.
   const inFlightEnsures = new Map<string, Promise<EnsureSidecarResult>>();
 
-  async function ensureOnce(
-    request: EnsureSidecarRequest,
-  ): Promise<EnsureSidecarResult> {
+  async function ensureOnce(request: EnsureSidecarRequest): Promise<EnsureSidecarResult> {
     const validation = validateEnsureRequest(request);
     if (validation !== null) {
       return rejected("invalid_ensure_request", validation, false);
@@ -65,11 +61,7 @@ export function createSidecarProvisioner(
       return rejected(observation.code, observation.message, false);
     }
     if (observation.record.externalRef !== null) {
-      await sweepObsoleteUnits(
-        backend,
-        request.allocationId,
-        observation.record.externalRef,
-      );
+      await sweepObsoleteUnits(backend, request.allocationId, observation.record.externalRef);
       return {
         kind: "accepted",
         externalRef: observation.record.externalRef,
@@ -138,9 +130,7 @@ export function createSidecarProvisioner(
       return operation;
     },
 
-    async destroy(
-      request: DestroySidecarRequest,
-    ): Promise<DestroySidecarResult> {
+    async destroy(request: DestroySidecarRequest): Promise<DestroySidecarResult> {
       const validation = validateDestroyRequest(request);
       if (validation !== null) {
         return rejected("invalid_destroy_request", validation, false);
@@ -161,9 +151,7 @@ export function createSidecarProvisioner(
       } else if (observation.record.externalRef !== null) {
         externalRefs.add(observation.record.externalRef);
       } else {
-        for (const externalRef of await backend.findUnitsByAllocation(
-          request.allocationId,
-        )) {
+        for (const externalRef of await backend.findUnitsByAllocation(request.allocationId)) {
           externalRefs.add(externalRef);
         }
       }
@@ -193,9 +181,7 @@ async function sweepObsoleteUnits(
   keepExternalRef: string,
 ): Promise<void> {
   const candidates = await backend.findUnitsByAllocation(allocationId);
-  const obsolete = candidates.filter(
-    (externalRef) => externalRef !== keepExternalRef,
-  );
+  const obsolete = candidates.filter((externalRef) => externalRef !== keepExternalRef);
   for (const externalRef of obsolete) {
     try {
       await backend.stopUnit(externalRef);
@@ -216,8 +202,7 @@ function validateEnsureRequest(request: EnsureSidecarRequest): string | null {
   if (request.allocationId === "") return "allocationId must not be empty";
   if (request.sidecarId === "") return "sidecarId must not be empty";
   if (request.token === "") return "token must not be empty";
-  if (request.hubWebSocketUrl === "")
-    return "hubWebSocketUrl must not be empty";
+  if (request.hubWebSocketUrl === "") return "hubWebSocketUrl must not be empty";
   if (!Number.isInteger(request.generation) || request.generation < 0) {
     return "generation must be a non-negative integer";
   }
@@ -244,9 +229,5 @@ function classify(
   if (error instanceof BackendOperationError) {
     return [error.code, error.message, error.retryable];
   }
-  return [
-    defaultCode,
-    error instanceof Error ? error.message : String(error),
-    true,
-  ];
+  return [defaultCode, error instanceof Error ? error.message : String(error), true];
 }
diff --git a/packages/sandbox-sidecar/src/state-store.ts b/packages/sandbox-sidecar/src/state-store.ts
index 9e600e2286..ff46804a3f 100644
--- a/packages/sandbox-sidecar/src/state-store.ts
+++ b/packages/sandbox-sidecar/src/state-store.ts
@@ -29,8 +29,7 @@ type ObserveEnsureResult =
   | { readonly kind: "observed"; readonly record: AllocationRecord }
   | {
       readonly kind: "rejected";
-      readonly code:
-        "stale_generation" | "generation_destroyed" | "request_conflict";
+      readonly code: "stale_generation" | "generation_destroyed" | "request_conflict";
       readonly message: string;
     };
 
@@ -129,18 +128,14 @@ export function createAllocationStateStore(
     }
     for (const record of parsed.records) {
       if (records.has(record.allocationId)) {
-        throw new Error(
-          `Duplicate sidecar allocation state for ${record.allocationId}`,
-        );
+        throw new Error(`Duplicate sidecar allocation state for ${record.allocationId}`);
       }
       records.set(record.allocationId, record);
     }
     initialized = true;
   }
 
-  async function persist(
-    nextRecords: ReadonlyMap<string, AllocationRecord>,
-  ): Promise<void> {
+  async function persist(nextRecords: ReadonlyMap<string, AllocationRecord>): Promise<void> {
     const contents = `${JSON.stringify(
       { version: 1, records: Array.from(nextRecords.values()) },
       null,
@@ -215,10 +210,7 @@ export function createAllocationStateStore(
               message: `Generation ${String(args.generation)} is older than ${String(existing.generation)}`,
             };
           }
-          if (
-            existing.generation === args.generation &&
-            existing.desiredState === "destroyed"
-          ) {
+          if (existing.generation === args.generation && existing.desiredState === "destroyed") {
             return { kind: "observed", record: existing };
           }
         }
diff --git a/packages/scout-agent/package.json b/packages/scout-agent/package.json
index b42fdfe638..05efb1dee9 100644
--- a/packages/scout-agent/package.json
+++ b/packages/scout-agent/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/scout-agent",
+  "version": "0.0.5",
   "private": true,
   "description": "Scout, the research/due-diligence agent: a ported system prompt plus its firm-memory, web-research, and Library-artifact tool declarations for a workbench chat agent",
-  "version": "0.0.4",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/scout-agent/src/artifact-client.test.ts b/packages/scout-agent/src/artifact-client.test.ts
index 6378438ae3..27639daabe 100644
--- a/packages/scout-agent/src/artifact-client.test.ts
+++ b/packages/scout-agent/src/artifact-client.test.ts
@@ -1,8 +1,5 @@
 import { describe, expect, test } from "bun:test";
-import {
-  createScoutArtifact,
-  listRecentScoutArtifacts,
-} from "./artifact-client";
+import { createScoutArtifact, listRecentScoutArtifacts } from "./artifact-client";
 
 const CONFIG = {
   hubArtifactsUrl: "https://hub.example",
@@ -17,12 +14,9 @@ describe("createScoutArtifact", () => {
     const fetchImpl = (async (url: string, init?: RequestInit) => {
       capturedUrl = url;
       capturedInit = init;
-      return new Response(
-        JSON.stringify({ data: { id: "art_1", version: 1 } }),
-        {
-          status: 201,
-        },
-      );
+      return new Response(JSON.stringify({ data: { id: "art_1", version: 1 } }), {
+        status: 201,
+      });
     }) as unknown as typeof fetch;
 
     const result = await createScoutArtifact(
@@ -31,9 +25,7 @@ describe("createScoutArtifact", () => {
     );
 
     expect(result).toEqual({ id: "art_1", version: 1 });
-    expect(capturedUrl).toBe(
-      "https://hub.example/api/workflow-artifacts/artifacts",
-    );
+    expect(capturedUrl).toBe("https://hub.example/api/workflow-artifacts/artifacts");
     expect(capturedInit?.method).toBe("POST");
     expect(JSON.parse(String(capturedInit?.body))).toEqual({
       title: "Diligence note",
@@ -47,10 +39,7 @@ describe("createScoutArtifact", () => {
       new Response("nope", { status: 500 })) as unknown as typeof fetch;
 
     await expect(
-      createScoutArtifact(
-        { ...CONFIG, fetchImpl },
-        { title: "x", kind: "text", content: "y" },
-      ),
+      createScoutArtifact({ ...CONFIG, fetchImpl }, { title: "x", kind: "text", content: "y" }),
     ).rejects.toThrow(/Scout artifact create failed/);
   });
 });
@@ -89,8 +78,8 @@ describe("listRecentScoutArtifacts", () => {
         status: 200,
       })) as unknown as typeof fetch;
 
-    await expect(
-      listRecentScoutArtifacts({ ...CONFIG, fetchImpl }),
-    ).rejects.toThrow(/did not match the expected shape/);
+    await expect(listRecentScoutArtifacts({ ...CONFIG, fetchImpl })).rejects.toThrow(
+      /did not match the expected shape/,
+    );
   });
 });
diff --git a/packages/scout-agent/src/artifact-client.ts b/packages/scout-agent/src/artifact-client.ts
index db1ca58a7c..e78c027a6b 100644
--- a/packages/scout-agent/src/artifact-client.ts
+++ b/packages/scout-agent/src/artifact-client.ts
@@ -48,9 +48,7 @@ const ScoutArtifactListResponse = type({
   }).array(),
 });
 
-function authHeaders(
-  config: ScoutArtifactClientConfig,
-): Record<string, string> {
+function authHeaders(config: ScoutArtifactClientConfig): Record<string, string> {
   return {
     authorization: `Bearer ${config.sidecarToken}`,
     "x-workflow-run-address": config.runAddress,
@@ -63,18 +61,13 @@ export async function createScoutArtifact(
   input: CreateScoutArtifactInput,
 ): Promise<CreatedScoutArtifact> {
   const doFetch = config.fetchImpl ?? fetch;
-  const response = await doFetch(
-    `${config.hubArtifactsUrl}/api/workflow-artifacts/artifacts`,
-    {
-      method: "POST",
-      headers: { ...authHeaders(config), "content-type": "application/json" },
-      body: JSON.stringify(input),
-    },
-  );
+  const response = await doFetch(`${config.hubArtifactsUrl}/api/workflow-artifacts/artifacts`, {
+    method: "POST",
+    headers: { ...authHeaders(config), "content-type": "application/json" },
+    body: JSON.stringify(input),
+  });
   if (!response.ok) {
-    throw new Error(
-      `Scout artifact create failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`Scout artifact create failed: ${response.status} ${response.statusText}`);
   }
   const body: unknown = await response.json();
   const parsed = CreatedScoutArtifactResponse(body);
@@ -92,16 +85,13 @@ export async function listRecentScoutArtifacts(
   params: { readonly limit?: number } = {},
 ): Promise<readonly ScoutArtifactListItem[]> {
   const doFetch = config.fetchImpl ?? fetch;
-  const query =
-    params.limit !== undefined ? `?limit=${String(params.limit)}` : "";
+  const query = params.limit !== undefined ? `?limit=${String(params.limit)}` : "";
   const response = await doFetch(
     `${config.hubArtifactsUrl}/api/workflow-artifacts/artifacts/recent${query}`,
     { headers: authHeaders(config) },
   );
   if (!response.ok) {
-    throw new Error(
-      `Scout artifact list failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`Scout artifact list failed: ${response.status} ${response.statusText}`);
   }
   const body: unknown = await response.json();
   const parsed = ScoutArtifactListResponse(body);
diff --git a/packages/scout-agent/src/artifact-tool.test.ts b/packages/scout-agent/src/artifact-tool.test.ts
index 357527b80c..03e8233538 100644
--- a/packages/scout-agent/src/artifact-tool.test.ts
+++ b/packages/scout-agent/src/artifact-tool.test.ts
@@ -14,10 +14,7 @@ function testEnv(): ScoutArtifactEnv {
   } as unknown as ScoutArtifactEnv;
 }
 
-async function withMockFetch<T>(
-  response: () => Response,
-  run: () => Promise<T>,
-): Promise<T> {
+async function withMockFetch<T>(response: () => Response, run: () => Promise<T>): Promise<T> {
   const originalFetch = globalThis.fetch;
   globalThis.fetch = (async () => response()) as unknown as typeof fetch;
   try {
@@ -29,9 +26,7 @@ async function withMockFetch<T>(
 
 describe("scoutArtifactTools", () => {
   test("declares the save tool with approval: ask", () => {
-    const saveDef = scoutArtifactTools.definitions.find(
-      (d) => d.name === SCOUT_ARTIFACT_SAVE_TOOL,
-    );
+    const saveDef = scoutArtifactTools.definitions.find((d) => d.name === SCOUT_ARTIFACT_SAVE_TOOL);
     expect(saveDef?.approval).toBe("ask");
   });
 
diff --git a/packages/scout-agent/src/artifact-tool.ts b/packages/scout-agent/src/artifact-tool.ts
index cb3035cb89..6344dd2d00 100644
--- a/packages/scout-agent/src/artifact-tool.ts
+++ b/packages/scout-agent/src/artifact-tool.ts
@@ -13,10 +13,7 @@
 // see this package's README for the gap.
 import { type } from "arktype";
 import { defineTool, type BaseEnv } from "@intx/agent";
-import {
-  createScoutArtifact,
-  listRecentScoutArtifacts,
-} from "./artifact-client";
+import { createScoutArtifact, listRecentScoutArtifacts } from "./artifact-client";
 
 export const SCOUT_ARTIFACT_SAVE_TOOL = "save_artifact";
 export const SCOUT_ARTIFACT_LIST_TOOL = "list_artifacts";
@@ -75,8 +72,7 @@ export const scoutArtifactTools = defineTool<ScoutArtifactEnv>({
       {
         name: SCOUT_ARTIFACT_LIST_TOOL,
         description:
-          "Lists the tenant's most recently saved Library artifacts, " +
-          "most recent first.",
+          "Lists the tenant's most recently saved Library artifacts, " + "most recent first.",
         inputSchema: {
           type: "object",
           properties: {
diff --git a/packages/scout-agent/src/definition.ts b/packages/scout-agent/src/definition.ts
index f371916f06..bafac19314 100644
--- a/packages/scout-agent/src/definition.ts
+++ b/packages/scout-agent/src/definition.ts
@@ -33,8 +33,8 @@ export const SCOUT_AGENT_DESCRIPTION =
 
 export const SCOUT_TOOL_PACKAGE_PINS: readonly ToolPackagePin[] = [
   { name: "@corbits/memory", version: "0.1.2" },
-  { name: "@corbits/web-search-tools", version: "0.0.3" },
-  { name: "@corbits/scout-agent", version: "0.0.4" },
+  { name: "@corbits/web-search-tools", version: "0.0.4" },
+  { name: "@corbits/scout-agent", version: "0.0.5" },
 ];
 
 /** The plain-data shape the agent-directory create path takes. */
diff --git a/packages/settings-ui/package.json b/packages/settings-ui/package.json
index a11aeb91f4..8238e1b071 100644
--- a/packages/settings-ui/package.json
+++ b/packages/settings-ui/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/settings-ui",
+  "version": "0.0.1",
   "private": true,
   "description": "The settings surface's shell: a section-nav layout that packages contribute sections into, plus the Bench, Chats & channels, and Account sections shipped today",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "sideEffects": [
@@ -20,14 +20,14 @@
     "@corbits/api-query": "workspace:*",
     "@corbits/bench-ui": "workspace:*",
     "@corbits/chat-ui": "workspace:*",
+    "@corbits/connections": "workspace:*",
     "@corbits/error-sink": "workspace:*",
+    "@corbits/icons": "workspace:*",
     "@corbits/inference-settings": "workspace:*",
     "@corbits/react-ui": "github:corbitsdev/react-ui#3b122812a307ccb35be31386f7696020c5a84635",
-    "@intx/types": "workspace:*",
-    "@corbits/connections": "workspace:*",
     "@corbits/workflows": "workspace:*",
+    "@intx/types": "workspace:*",
     "arktype": "catalog:",
-    "@corbits/icons": "workspace:*",
     "react": "^19.2.0",
     "react-dom": "^19.2.0"
   },
diff --git a/packages/settings-ui/src/access.ts b/packages/settings-ui/src/access.ts
index c397f38da8..451118f3ea 100644
--- a/packages/settings-ui/src/access.ts
+++ b/packages/settings-ui/src/access.ts
@@ -41,10 +41,7 @@ export async function probeSectionAccess(
 /** A failed probe must not clobber a prior allow/deny — only an unresolved
  *  gate becomes `error`. That keeps last-known nav and avoids flashing
  *  gated sections that a later successful deny would hide. */
-export function coalesceSectionAccess(
-  previous: SectionAccess,
-  next: SectionAccess,
-): SectionAccess {
+export function coalesceSectionAccess(previous: SectionAccess, next: SectionAccess): SectionAccess {
   if (next === "error" && (previous === "allowed" || previous === "denied")) {
     return previous;
   }
diff --git a/packages/settings-ui/src/account-section.tsx b/packages/settings-ui/src/account-section.tsx
index 323fd20f41..ddb111f4da 100644
--- a/packages/settings-ui/src/account-section.tsx
+++ b/packages/settings-ui/src/account-section.tsx
@@ -21,20 +21,12 @@ import { Copy, SignOut } from "@corbits/icons";
 import { useCallback, useEffect, useState } from "react";
 
 import type { APIQuery } from "@corbits/api-query";
-import {
-  QueryView,
-  UnauthenticatedError,
-  describeQueryError,
-} from "@corbits/api-query";
+import { QueryView, UnauthenticatedError, describeQueryError } from "@corbits/api-query";
 import { resolveAvatarFill } from "@corbits/chat-ui";
 import { getAccount, type Account } from "./api";
 import { SETTINGS_STRINGS } from "./strings";
 
-export function AccountSection({
-  onSignOut,
-}: {
-  readonly onSignOut?: () => void;
-}) {
+export function AccountSection({ onSignOut }: { readonly onSignOut?: () => void }) {
   const [query, setQuery] = useState<APIQuery<Account>>({ kind: "loading" });
 
   const load = useCallback(() => {
@@ -139,12 +131,7 @@ export function AccountSectionView({
               height={40}
             />
           ) : (
-            <Avatar
-              initials={initialsOf(name)}
-              label={name}
-              size="lg"
-              className={fill.className}
-            />
+            <Avatar initials={initialsOf(name)} label={name} size="lg" className={fill.className} />
           )}
           <div className="settings-account-identity-text">
             <span className="settings-account-name">{name}</span>
@@ -164,11 +151,7 @@ export function AccountSectionView({
           </div>
         </div>
         {onSignOut !== undefined ? (
-          <Button
-            variant="outline"
-            className="settings-account-signout"
-            onClick={onSignOut}
-          >
+          <Button variant="outline" className="settings-account-signout" onClick={onSignOut}>
             <SignOut /> {SETTINGS_STRINGS.accountSignOutAction}
           </Button>
         ) : null}
@@ -189,9 +172,7 @@ export function AccountSectionView({
             </Badge>
           </dd>
         </dl>
-        <p className="settings-field-hint">
-          {SETTINGS_STRINGS.accountReadOnlyNote}
-        </p>
+        <p className="settings-field-hint">{SETTINGS_STRINGS.accountReadOnlyNote}</p>
       </div>
     </SettingsPanel>
   );
diff --git a/packages/settings-ui/src/api-request.ts b/packages/settings-ui/src/api-request.ts
index de5ef6bcd6..7a42a6b8ac 100644
--- a/packages/settings-ui/src/api-request.ts
+++ b/packages/settings-ui/src/api-request.ts
@@ -21,11 +21,7 @@ const ErrorEnvelope = type({
  * `userMessage` when the body carries one, otherwise a generic, path-free
  * sentence naming the status and what the caller was doing.
  */
-export function readErrorEnvelope(
-  status: number,
-  body: unknown,
-  verb: string,
-): string {
+export function readErrorEnvelope(status: number, body: unknown, verb: string): string {
   const envelope = ErrorEnvelope(body);
   return envelope instanceof type.errors
     ? `The server answered ${status} while ${verb}.`
@@ -54,18 +50,13 @@ export async function apiRequest<T>(
   }
   if (!response.ok) {
     const body: unknown = await response.json().catch(() => undefined);
-    throw new ErrorCtor(
-      readErrorEnvelope(response.status, body, verb),
-      response.status,
-    );
+    throw new ErrorCtor(readErrorEnvelope(response.status, body, verb), response.status);
   }
   if (response.status === 204) return undefined as T;
   const body: unknown = await response.json().catch(() => undefined);
   const parsed = schema(body);
   if (parsed instanceof type.errors) {
-    throw new ErrorCtor(
-      `Unexpected response shape while ${verb}: ${parsed.summary}`,
-    );
+    throw new ErrorCtor(`Unexpected response shape while ${verb}: ${parsed.summary}`);
   }
   return parsed;
 }
diff --git a/packages/settings-ui/src/api.ts b/packages/settings-ui/src/api.ts
index 5f1182c76c..959256e7da 100644
--- a/packages/settings-ui/src/api.ts
+++ b/packages/settings-ui/src/api.ts
@@ -25,11 +25,7 @@ export class SettingsApiError extends Error {
 
 type Validator<T> = (data: unknown) => T | ArkErrors;
 
-async function request<T>(
-  path: string,
-  schema: Validator<T>,
-  init?: RequestInit,
-): Promise<T> {
+async function request<T>(path: string, schema: Validator<T>, init?: RequestInit): Promise<T> {
   let response: Response;
   try {
     response = await fetch(path, {
@@ -37,25 +33,18 @@ async function request<T>(
       headers: { "content-type": "application/json", ...init?.headers },
     });
   } catch (cause) {
-    throw new SettingsApiError(
-      cause instanceof Error ? cause.message : String(cause),
-    );
+    throw new SettingsApiError(cause instanceof Error ? cause.message : String(cause));
   }
   if (response.status === 401) {
     throw new UnauthenticatedError();
   }
   if (!response.ok) {
-    throw new SettingsApiError(
-      `The hub answered ${response.status} for ${path}.`,
-      response.status,
-    );
+    throw new SettingsApiError(`The hub answered ${response.status} for ${path}.`, response.status);
   }
   const body: unknown = await response.json().catch(() => undefined);
   const parsed = schema(body);
   if (parsed instanceof type.errors) {
-    throw new SettingsApiError(
-      `Unexpected response shape from ${path}: ${parsed.summary}`,
-    );
+    throw new SettingsApiError(`Unexpected response shape from ${path}: ${parsed.summary}`);
   }
   return parsed;
 }
diff --git a/packages/settings-ui/src/connections-api.ts b/packages/settings-ui/src/connections-api.ts
index 32065add65..8d32b91876 100644
--- a/packages/settings-ui/src/connections-api.ts
+++ b/packages/settings-ui/src/connections-api.ts
@@ -40,9 +40,7 @@ function request<T>(
  * the muted "Not configured" state instead of a button that would
  * round-trip into the provider's own consent screen and dead-end.
  */
-export function fetchOAuthConfigured(
-  tenantId: string,
-): Promise<Record<string, boolean>> {
+export function fetchOAuthConfigured(tenantId: string): Promise<Record<string, boolean>> {
   return request(
     `/api/tenants/${tenantId}/connections/oauth-configured`,
     OAuthConfiguredResult,
@@ -88,10 +86,7 @@ export function completeConnectorCredential(
  * credentials) — see `@corbits/connections`' `disconnectConnector` for
  * the full ordering and why (CL-6258).
  */
-export function disconnectConnector(
-  tenantId: string,
-  connectorId: string,
-): Promise<void> {
+export function disconnectConnector(tenantId: string, connectorId: string): Promise<void> {
   return request<void>(
     `/api/tenants/${tenantId}/connections/${connectorId}/disconnect`,
     (data) => data as void,
diff --git a/packages/settings-ui/src/connections-pinned-by.test.ts b/packages/settings-ui/src/connections-pinned-by.test.ts
index 1e5a1bd0ee..fac81b936e 100644
--- a/packages/settings-ui/src/connections-pinned-by.test.ts
+++ b/packages/settings-ui/src/connections-pinned-by.test.ts
@@ -7,9 +7,10 @@ import { CONNECTOR_PINNED_WORKFLOWS } from "./connections-pinned-by";
 describe("connections pinned-by", () => {
   test("pins every workflow-catalog entry to the same connectors its own requiredConnections list names", () => {
     const pinnedAssetNamesByConnector = new Map(
-      Object.entries(CONNECTOR_PINNED_WORKFLOWS).map(
-        ([connectorId, assetNames]) => [connectorId, new Set(assetNames)],
-      ),
+      Object.entries(CONNECTOR_PINNED_WORKFLOWS).map(([connectorId, assetNames]) => [
+        connectorId,
+        new Set(assetNames),
+      ]),
     );
     for (const entry of WORKFLOW_CATALOG) {
       for (const connectorId of entry.requiredConnections) {
@@ -50,9 +51,7 @@ describe("connections pinned-by", () => {
   });
 
   test("scrapecreators pins reddit-opportunity-scanner", () => {
-    expect(CONNECTOR_PINNED_WORKFLOWS.scrapecreators).toEqual([
-      "reddit-opportunity-scanner",
-    ]);
+    expect(CONNECTOR_PINNED_WORKFLOWS.scrapecreators).toEqual(["reddit-opportunity-scanner"]);
   });
 
   test("manus pins the assistant", () => {
diff --git a/packages/settings-ui/src/connections-pinned-by.ts b/packages/settings-ui/src/connections-pinned-by.ts
index a14777a5bd..2906b56412 100644
--- a/packages/settings-ui/src/connections-pinned-by.ts
+++ b/packages/settings-ui/src/connections-pinned-by.ts
@@ -7,9 +7,7 @@
 // (connectionsPinnedByApproximationNote) rather than baking it into the
 // label itself, until CL-6028's item 9 (tool-package credential-binding
 // adoption) makes it exact.
-export const CONNECTOR_PINNED_WORKFLOWS: Readonly<
-  Record<string, readonly string[]>
-> = {
+export const CONNECTOR_PINNED_WORKFLOWS: Readonly<Record<string, readonly string[]>> = {
   granola: [
     "granola-call",
     "process-granola-call",
diff --git a/packages/settings-ui/src/connections-section.tsx b/packages/settings-ui/src/connections-section.tsx
index 16ecbf97c6..18d02fe4ef 100644
--- a/packages/settings-ui/src/connections-section.tsx
+++ b/packages/settings-ui/src/connections-section.tsx
@@ -43,11 +43,7 @@ import { ArrowDown, ArrowUp, Cpu, Plugs, Robot } from "@corbits/icons";
 import { useEffect, useState } from "react";
 
 import type { APIQuery } from "@corbits/api-query";
-import {
-  QueryView,
-  UnauthenticatedError,
-  describeQueryError,
-} from "@corbits/api-query";
+import { QueryView, UnauthenticatedError, describeQueryError } from "@corbits/api-query";
 import {
   ConnectionsApiError,
   completeConnectorCredential,
@@ -55,16 +51,8 @@ import {
   fetchOAuthConfigured,
 } from "./connections-api";
 import { CONNECTOR_PINNED_WORKFLOWS } from "./connections-pinned-by";
-import {
-  connectorStatus,
-  type ConnectorStatusResult,
-} from "./connections-status";
-import {
-  listCredentials,
-  listProviders,
-  type Credential,
-  type Provider,
-} from "./credentials-api";
+import { connectorStatus, type ConnectorStatusResult } from "./connections-status";
+import { listCredentials, listProviders, type Credential, type Provider } from "./credentials-api";
 import { SETTINGS_STRINGS } from "./strings";
 
 // `@corbits/connections/registry` is the only subpath this browser
@@ -155,11 +143,8 @@ export function ConnectorRowList({
    * session" from "the list changed." */
   readonly onConnected?: () => void;
 }) {
-  const [dialogDescriptor, setDialogDescriptor] =
-    useState<ConnectorDescriptor | null>(null);
-  const [dialogMode, setDialogMode] = useState<"connect" | "reconnect">(
-    "connect",
-  );
+  const [dialogDescriptor, setDialogDescriptor] = useState<ConnectorDescriptor | null>(null);
+  const [dialogMode, setDialogMode] = useState<"connect" | "reconnect">("connect");
 
   function handleDisconnect(connectorId: string) {
     onError?.(null);
@@ -218,11 +203,7 @@ export function ConnectorRowList({
   );
 }
 
-export function ConnectionsSection({
-  tenantId,
-}: {
-  readonly tenantId: string | null;
-}) {
+export function ConnectionsSection({ tenantId }: { readonly tenantId: string | null }) {
   const [query, setQuery] = useState<APIQuery<ConnectionsData>>({
     kind: "loading",
   });
@@ -244,23 +225,19 @@ export function ConnectionsSection({
       getResolvedCatalog(tenantId),
       listOwnOfferings(tenantId),
     ])
-      .then(
-        ([credentials, providers, oauthConfigured, models, ownOfferings]) => {
-          if (!cancelled)
-            setQuery({
-              kind: "ready",
-              data: {
-                credentials,
-                providers,
-                oauthConfigured,
-                models,
-                ownOfferingIds: new Set(
-                  ownOfferings.map((offering) => offering.id),
-                ),
-              },
-            });
-        },
-      )
+      .then(([credentials, providers, oauthConfigured, models, ownOfferings]) => {
+        if (!cancelled)
+          setQuery({
+            kind: "ready",
+            data: {
+              credentials,
+              providers,
+              oauthConfigured,
+              models,
+              ownOfferingIds: new Set(ownOfferings.map((offering) => offering.id)),
+            },
+          });
+      })
       .catch((cause: unknown) => {
         if (cancelled) return;
         if (cause instanceof UnauthenticatedError) {
@@ -276,7 +253,6 @@ export function ConnectionsSection({
     return () => {
       cancelled = true;
     };
-    // eslint-disable-next-line react-hooks/exhaustive-deps
   }, [tenantId, reloadKey]);
 
   // Connections can change elsewhere (another tab, the Plugins gallery's
@@ -338,17 +314,8 @@ export function ConnectionsSection({
 
   return (
     <QueryView query={query} label={SETTINGS_STRINGS.connectionsLoadError}>
-      {({
-        credentials,
-        providers,
-        oauthConfigured,
-        models,
-        ownOfferingIds,
-      }) => {
-        const effectiveRows = buildEffectiveInferenceRows(
-          models,
-          ownOfferingIds,
-        );
+      {({ credentials, providers, oauthConfigured, models, ownOfferingIds }) => {
+        const effectiveRows = buildEffectiveInferenceRows(models, ownOfferingIds);
         return (
           <SettingsPanel
             title={SETTINGS_STRINGS.connectionsSectionTitle}
@@ -391,11 +358,7 @@ export function ConnectionsSection({
                     key={card.id}
                     tenantId={currentTenantId}
                     card={card}
-                    statusResult={connectorStatus(
-                      card.id,
-                      credentials,
-                      providers,
-                    )}
+                    statusResult={connectorStatus(card.id, credentials, providers)}
                     modelCount={
                       new Set(
                         effectiveRows
@@ -435,16 +398,12 @@ function ModelRoutePanel({
   const currentModel = ordered[0]?.canonicalName ?? "";
   const models = ordered.filter(
     (row, index, all) =>
-      all.findIndex(
-        (candidate) => candidate.canonicalName === row.canonicalName,
-      ) === index,
+      all.findIndex((candidate) => candidate.canonicalName === row.canonicalName) === index,
   );
   const route = ordered.filter((row) => row.canonicalName === currentModel);
 
   function applyPatches(
-    patches:
-      | readonly { readonly offeringId: string; readonly priority: number }[]
-      | null,
+    patches: readonly { readonly offeringId: string; readonly priority: number }[] | null,
   ) {
     if (patches === null) {
       onError(SETTINGS_STRINGS.connectionsSetDefaultModelError);
@@ -468,18 +427,11 @@ function ModelRoutePanel({
     // agents may still pick up the default at create. Never PATCH
     // `/agent-definitions`.
     const target = ordered.find((row) => row.canonicalName === canonicalName);
-    applyPatches(
-      target === undefined
-        ? null
-        : computeMakeDefaultPatches(rows, target.offeringId),
-    );
+    applyPatches(target === undefined ? null : computeMakeDefaultPatches(rows, target.offeringId));
   }
 
   return (
-    <section
-      className="settings-model-route"
-      aria-labelledby="model-route-title"
-    >
+    <section className="settings-model-route" aria-labelledby="model-route-title">
       <div className="settings-model-route-heading">
         <span className="settings-model-route-icon" aria-hidden>
           <Cpu />
@@ -487,8 +439,8 @@ function ModelRoutePanel({
         <div>
           <h3 id="model-route-title">Default model & fallbacks</h3>
           <p>
-            Used by Myra and new agents. Changing the default does not rewrite
-            models already stored on existing agents.
+            Used by Myra and new agents. Changing the default does not rewrite models already stored
+            on existing agents.
           </p>
         </div>
       </div>
@@ -513,10 +465,7 @@ function ModelRoutePanel({
               ))}
             </select>
           </label>
-          <div
-            className="settings-model-route-list"
-            aria-label="Fallback order"
-          >
+          <div className="settings-model-route-list" aria-label="Fallback order">
             <p className="settings-model-route-list-label">Fallback order</p>
             {route.map((row, index) => (
               <div className="settings-model-route-row" key={row.offeringId}>
@@ -536,9 +485,7 @@ function ModelRoutePanel({
                     aria-label={`Move ${providerDisplayName(row.providerName)} up`}
                     disabled={index === 0 || row.provenance === "inherited"}
                     onClick={() =>
-                      applyPatches(
-                        computeGlobalRoutePatches(route, row.offeringId, "up"),
-                      )
+                      applyPatches(computeGlobalRoutePatches(route, row.offeringId, "up"))
                     }
                   >
                     <ArrowUp />
@@ -547,18 +494,9 @@ function ModelRoutePanel({
                     variant="ghost"
                     size="icon"
                     aria-label={`Move ${providerDisplayName(row.providerName)} down`}
-                    disabled={
-                      index === route.length - 1 ||
-                      row.provenance === "inherited"
-                    }
+                    disabled={index === route.length - 1 || row.provenance === "inherited"}
                     onClick={() =>
-                      applyPatches(
-                        computeGlobalRoutePatches(
-                          route,
-                          row.offeringId,
-                          "down",
-                        ),
-                      )
+                      applyPatches(computeGlobalRoutePatches(route, row.offeringId, "down"))
                     }
                   >
                     <ArrowDown />
@@ -585,11 +523,7 @@ function pinnedByLine(connectorId: string): string {
  * for text/structure, the accent color only ever marks something to act
  * on), matching the plugins directory's own `plugins-directory-needs-
  * attention` convention. */
-function StatusCaption({
-  statusResult,
-}: {
-  readonly statusResult: ConnectorStatusResult;
-}) {
+function StatusCaption({ statusResult }: { readonly statusResult: ConnectorStatusResult }) {
   if (statusResult.status === "connected") {
     return (
       <span className="settings-connection-row-status">
@@ -630,12 +564,7 @@ function ConnectorLogo({
   if (icon !== undefined) {
     return (
       <span className="settings-connection-row-logo" aria-hidden="true">
-        <svg
-          viewBox={icon.viewBox ?? "0 0 24 24"}
-          width="16"
-          height="16"
-          fill={`#${icon.hex}`}
-        >
+        <svg viewBox={icon.viewBox ?? "0 0 24 24"} width="16" height="16" fill={`#${icon.hex}`}>
           <path d={icon.path} />
         </svg>
       </span>
@@ -674,9 +603,7 @@ function ConnectorRow({
       />
       <div className="settings-connection-row-text">
         <div className="settings-connection-row-name-row">
-          <span className="settings-connection-row-name">
-            {descriptor.displayName}
-          </span>
+          <span className="settings-connection-row-name">{descriptor.displayName}</span>
           <StatusCaption statusResult={statusResult} />
         </div>
         {statusResult.status === "connected" && modelCount > 0 ? (
@@ -686,9 +613,7 @@ function ConnectorRow({
         ) : null}
         {descriptor.feedsTools.length > 0 && (
           <span className="settings-connection-row-pinned-row">
-            <span className="settings-connection-row-caption">
-              {pinnedByLine(descriptor.id)}
-            </span>
+            <span className="settings-connection-row-caption">{pinnedByLine(descriptor.id)}</span>
             {(CONNECTOR_PINNED_WORKFLOWS[descriptor.id]?.length ?? 0) > 0 && (
               <InfoTooltip
                 label={SETTINGS_STRINGS.connectionsPinnedByApproximationNote}
@@ -763,15 +688,10 @@ function OAuthConnectorRow({
   if (!configured) {
     return (
       <div className="settings-connection-row settings-connection-row-muted">
-        <ConnectorLogo
-          displayName={card.displayName}
-          {...(icon !== undefined ? { icon } : {})}
-        />
+        <ConnectorLogo displayName={card.displayName} {...(icon !== undefined ? { icon } : {})} />
         <div className="settings-connection-row-text">
           <div className="settings-connection-row-name-row">
-            <span className="settings-connection-row-name">
-              {card.displayName}
-            </span>
+            <span className="settings-connection-row-name">{card.displayName}</span>
             <span className="settings-connection-row-status">
               {SETTINGS_STRINGS.connectionsStatusNotConfigured}
             </span>
@@ -786,15 +706,10 @@ function OAuthConnectorRow({
 
   return (
     <div className="settings-connection-row">
-      <ConnectorLogo
-        displayName={card.displayName}
-        {...(icon !== undefined ? { icon } : {})}
-      />
+      <ConnectorLogo displayName={card.displayName} {...(icon !== undefined ? { icon } : {})} />
       <div className="settings-connection-row-text">
         <div className="settings-connection-row-name-row">
-          <span className="settings-connection-row-name">
-            {card.displayName}
-          </span>
+          <span className="settings-connection-row-name">{card.displayName}</span>
           <StatusCaption statusResult={statusResult} />
         </div>
         {statusResult.status === "connected" && modelCount > 0 ? (
@@ -855,9 +770,7 @@ export function ConnectorCredentialDialog({
 
   useEffect(() => {
     setApiKey(
-      descriptor?.credentialInputKind === "url"
-        ? (descriptor.credentialPlaceholder ?? "")
-        : "",
+      descriptor?.credentialInputKind === "url" ? (descriptor.credentialPlaceholder ?? "") : "",
     );
     setShowKey(false);
     setSubmitting(false);
@@ -910,12 +823,8 @@ export function ConnectorCredentialDialog({
             {descriptor === null
               ? ""
               : mode === "reconnect"
-                ? SETTINGS_STRINGS.connectionsDialogReconnectTitle(
-                    descriptor.displayName,
-                  )
-                : SETTINGS_STRINGS.connectionsDialogConnectTitle(
-                    descriptor.displayName,
-                  )}
+                ? SETTINGS_STRINGS.connectionsDialogReconnectTitle(descriptor.displayName)
+                : SETTINGS_STRINGS.connectionsDialogConnectTitle(descriptor.displayName)}
           </DialogTitle>
           <DialogDescription>
             {isUrlField
@@ -973,11 +882,7 @@ export function ConnectorCredentialDialog({
           <Button variant="ghost" onClick={onClose}>
             {SETTINGS_STRINGS.connectionsCancel}
           </Button>
-          <Button
-            variant="primary"
-            disabled={!canSubmit}
-            onClick={handleSubmit}
-          >
+          <Button variant="primary" disabled={!canSubmit} onClick={handleSubmit}>
             {submitting
               ? SETTINGS_STRINGS.connectionsConnecting
               : SETTINGS_STRINGS.connectionsConnectDialogAction}
diff --git a/packages/settings-ui/src/connections-status.test.ts b/packages/settings-ui/src/connections-status.test.ts
index 100f6fecde..124af73ea7 100644
--- a/packages/settings-ui/src/connections-status.test.ts
+++ b/packages/settings-ui/src/connections-status.test.ts
@@ -51,38 +51,22 @@ describe("connectorStatus", () => {
   });
 
   test("connected when the newest credential is active", () => {
-    const result = connectorStatus(
-      "linear",
-      [credential({ status: "active" })],
-      [provider()],
-    );
+    const result = connectorStatus("linear", [credential({ status: "active" })], [provider()]);
     expect(result.status).toBe("connected");
   });
 
   test("needs_attention when the newest credential is expired", () => {
-    const result = connectorStatus(
-      "linear",
-      [credential({ status: "expired" })],
-      [provider()],
-    );
+    const result = connectorStatus("linear", [credential({ status: "expired" })], [provider()]);
     expect(result.status).toBe("needs_attention");
   });
 
   test("needs_attention when the newest credential is in error", () => {
-    const result = connectorStatus(
-      "linear",
-      [credential({ status: "error" })],
-      [provider()],
-    );
+    const result = connectorStatus("linear", [credential({ status: "error" })], [provider()]);
     expect(result.status).toBe("needs_attention");
   });
 
   test("not_connected when the newest credential is revoked", () => {
-    const result = connectorStatus(
-      "linear",
-      [credential({ status: "revoked" })],
-      [provider()],
-    );
+    const result = connectorStatus("linear", [credential({ status: "revoked" })], [provider()]);
     expect(result.status).toBe("not_connected");
   });
 
@@ -117,11 +101,7 @@ describe("connectorStatus", () => {
   // reconnected. A caller passing the display label instead of the id
   // must never match.
   test("a connector's display name never matches its own provider row", () => {
-    const result = connectorStatus(
-      "Linear",
-      [credential({ status: "active" })],
-      [provider()],
-    );
+    const result = connectorStatus("Linear", [credential({ status: "active" })], [provider()]);
     expect(result.status).toBe("not_connected");
   });
 });
diff --git a/packages/settings-ui/src/credentials-api.ts b/packages/settings-ui/src/credentials-api.ts
index ce7b19b8bc..e396e19638 100644
--- a/packages/settings-ui/src/credentials-api.ts
+++ b/packages/settings-ui/src/credentials-api.ts
@@ -35,9 +35,7 @@ function request<T>(
   return apiRequest(path, schema, verb, CredentialsApiError, init);
 }
 
-export function listCredentials(
-  tenantId: string,
-): Promise<readonly Credential[]> {
+export function listCredentials(tenantId: string): Promise<readonly Credential[]> {
   return request(
     `/api/tenants/${tenantId}/credentials`,
     CredentialsPage,
@@ -46,11 +44,9 @@ export function listCredentials(
 }
 
 export function listProviders(tenantId: string): Promise<readonly Provider[]> {
-  return request(
-    `/api/tenants/${tenantId}/providers`,
-    ProvidersPage,
-    "loading providers",
-  ).then((page) => page.data);
+  return request(`/api/tenants/${tenantId}/providers`, ProvidersPage, "loading providers").then(
+    (page) => page.data,
+  );
 }
 
 export type CreateCredentialInput = {
@@ -73,10 +69,7 @@ export function createCredential(
   );
 }
 
-export function deleteCredential(
-  tenantId: string,
-  credentialId: string,
-): Promise<void> {
+export function deleteCredential(tenantId: string, credentialId: string): Promise<void> {
   return request<void>(
     `/api/tenants/${tenantId}/credentials/${credentialId}`,
     (data) => data as void,
diff --git a/packages/settings-ui/src/granola-webhook-api.ts b/packages/settings-ui/src/granola-webhook-api.ts
index f7ece84acd..00099c30fe 100644
--- a/packages/settings-ui/src/granola-webhook-api.ts
+++ b/packages/settings-ui/src/granola-webhook-api.ts
@@ -51,8 +51,7 @@ const GranolaWebhookTriggerWithSecret = type({
   ...WebhookTriggerFields,
   secret: "string",
 });
-export type GranolaWebhookTriggerWithSecret =
-  typeof GranolaWebhookTriggerWithSecret.infer;
+export type GranolaWebhookTriggerWithSecret = typeof GranolaWebhookTriggerWithSecret.infer;
 
 export function listGranolaWebhookTriggers(
   tenantId: string,
@@ -116,11 +115,7 @@ export function webhookTriggerUrl(triggerId: string): string {
  * `sampleWebhookPayload`. `@corbits/webhook-triggers` places no
  * constraint on payload shape beyond "valid JSON". */
 export function sampleGranolaWebhookPayload(): string {
-  return JSON.stringify(
-    { event: "call.completed", data: { callId: "call_123" } },
-    null,
-    2,
-  );
+  return JSON.stringify({ event: "call.completed", data: { callId: "call_123" } }, null, 2);
 }
 
 const WorkflowDefinitionSummary = type({
diff --git a/packages/settings-ui/src/granola-webhook-card.tsx b/packages/settings-ui/src/granola-webhook-card.tsx
index 8b39a36b38..e9812cef50 100644
--- a/packages/settings-ui/src/granola-webhook-card.tsx
+++ b/packages/settings-ui/src/granola-webhook-card.tsx
@@ -28,11 +28,7 @@ import type { ConnectorDescriptor } from "@corbits/connections/registry";
 import { useEffect, useRef, useState } from "react";
 
 import type { APIQuery } from "@corbits/api-query";
-import {
-  QueryView,
-  UnauthenticatedError,
-  describeQueryError,
-} from "@corbits/api-query";
+import { QueryView, UnauthenticatedError, describeQueryError } from "@corbits/api-query";
 import {
   createGranolaWebhookTrigger,
   listGranolaWebhookTriggers,
@@ -58,17 +54,13 @@ type GranolaWebhookData = {
   readonly bindings: readonly GranolaBinding[];
 };
 
-function boundTriggers(
-  bindings: readonly GranolaBinding[],
-): readonly GranolaWebhookTrigger[] {
+function boundTriggers(bindings: readonly GranolaBinding[]): readonly GranolaWebhookTrigger[] {
   return bindings
     .map((binding) => binding.webhookTrigger)
     .filter((trigger): trigger is GranolaWebhookTrigger => trigger !== null);
 }
 
-function mostRecentFiredAt(
-  triggers: readonly GranolaWebhookTrigger[],
-): string | null {
+function mostRecentFiredAt(triggers: readonly GranolaWebhookTrigger[]): string | null {
   const fired = triggers
     .map((trigger) => trigger.lastFiredAt)
     .filter((value): value is string => value !== null)
@@ -76,9 +68,7 @@ function mostRecentFiredAt(
   return fired.length === 0 ? null : (fired[fired.length - 1] ?? null);
 }
 
-async function loadGranolaWebhookData(
-  tenantId: string,
-): Promise<GranolaWebhookData> {
+async function loadGranolaWebhookData(tenantId: string): Promise<GranolaWebhookData> {
   const [definitions, triggers] = await Promise.all([
     listGranolaWorkflowDefinitions(tenantId),
     listGranolaWebhookTriggers(tenantId),
@@ -89,9 +79,7 @@ async function loadGranolaWebhookData(
   const bindings = granolaDefinitions.map((definition) => ({
     definition,
     webhookTrigger:
-      triggers.find(
-        (trigger) => trigger.workflowDefinitionId === definition.id,
-      ) ?? null,
+      triggers.find((trigger) => trigger.workflowDefinitionId === definition.id) ?? null,
   }));
   return { bindings };
 }
@@ -146,14 +134,10 @@ export function GranolaWebhookCard({
     return () => {
       cancelled = true;
     };
-    // eslint-disable-next-line react-hooks/exhaustive-deps
   }, [tenantId, reloadKey]);
 
   return (
-    <QueryView
-      query={query}
-      label={SETTINGS_STRINGS.connectionsWebhookLoadError}
-    >
+    <QueryView query={query} label={SETTINGS_STRINGS.connectionsWebhookLoadError}>
       {({ bindings }) => {
         const triggers = boundTriggers(bindings);
         const connected = triggers.length > 0;
@@ -169,9 +153,7 @@ export function GranolaWebhookCard({
               </span>
               <div className="settings-connection-row-text">
                 <div className="settings-connection-row-name-row">
-                  <span className="settings-connection-row-name">
-                    {descriptor.displayName}
-                  </span>
+                  <span className="settings-connection-row-name">{descriptor.displayName}</span>
                   <span className="settings-connection-row-status">
                     {connected
                       ? SETTINGS_STRINGS.connectionsStatusConnected
@@ -180,10 +162,7 @@ export function GranolaWebhookCard({
                 </div>
                 {connected && (
                   <p className="settings-connection-row-caption">
-                    {SETTINGS_STRINGS.connectionsWebhookTriggerCount(
-                      triggers.length,
-                    )}{" "}
-                    ·{" "}
+                    {SETTINGS_STRINGS.connectionsWebhookTriggerCount(triggers.length)} ·{" "}
                     {lastFiredAt !== null
                       ? SETTINGS_STRINGS.connectionsWebhookLastDelivery(
                           formatRelativeTime(lastFiredAt),
@@ -296,35 +275,24 @@ function GranolaWebhookDialog({
     >
       <DialogContent>
         <DialogHeader>
-          <DialogTitle>
-            {SETTINGS_STRINGS.connectionsWebhookDialogTitle}
-          </DialogTitle>
+          <DialogTitle>{SETTINGS_STRINGS.connectionsWebhookDialogTitle}</DialogTitle>
           <DialogDescription>
             {SETTINGS_STRINGS.connectionsWebhookDialogDescription}
           </DialogDescription>
         </DialogHeader>
         <DialogBody className="settings-form-stack">
           {bindings.length === 0 ? (
-            <p className="settings-inline-hint">
-              {SETTINGS_STRINGS.connectionsWebhookNoRoutine}
-            </p>
+            <p className="settings-inline-hint">{SETTINGS_STRINGS.connectionsWebhookNoRoutine}</p>
           ) : (
             bindings.map((binding) => (
-              <div
-                key={binding.definition.id}
-                className="settings-webhook-routine-row"
-              >
+              <div key={binding.definition.id} className="settings-webhook-routine-row">
                 <div className="settings-webhook-routine-row-header">
-                  <span className="settings-connection-row-name">
-                    {binding.definition.name}
-                  </span>
+                  <span className="settings-connection-row-name">{binding.definition.name}</span>
                   {binding.webhookTrigger !== null && (
                     <span className="settings-connection-row-caption">
                       {binding.webhookTrigger.lastFiredAt !== null
                         ? SETTINGS_STRINGS.connectionsWebhookLastDelivery(
-                            formatRelativeTime(
-                              binding.webhookTrigger.lastFiredAt,
-                            ),
+                            formatRelativeTime(binding.webhookTrigger.lastFiredAt),
                           )
                         : SETTINGS_STRINGS.connectionsWebhookNoDeliveries}
                     </span>
diff --git a/packages/settings-ui/src/grant-preview.ts b/packages/settings-ui/src/grant-preview.ts
index b96181c909..8ae3d3e2a8 100644
--- a/packages/settings-ui/src/grant-preview.ts
+++ b/packages/settings-ui/src/grant-preview.ts
@@ -42,9 +42,7 @@ export function expiryIsoFromPreset(
   return new Date(now.getTime() + ms).toISOString();
 }
 
-export function expiryLabelFromPreset(
-  preset: "never" | "24h" | "7d" | "30d",
-): string | null {
+export function expiryLabelFromPreset(preset: "never" | "24h" | "7d" | "30d"): string | null {
   if (preset === "never") return null;
   if (preset === "24h") return "in 24 hours";
   if (preset === "7d") return "in 7 days";
diff --git a/packages/settings-ui/src/grants-section.tsx b/packages/settings-ui/src/grants-section.tsx
index 3bc29ac71a..7371dff6a9 100644
--- a/packages/settings-ui/src/grants-section.tsx
+++ b/packages/settings-ui/src/grants-section.tsx
@@ -31,21 +31,9 @@ import type { GrantEffect, GrantOrigin } from "@intx/types";
 import { useEffect, useMemo, useState } from "react";
 
 import type { APIQuery } from "@corbits/api-query";
-import {
-  QueryView,
-  UnauthenticatedError,
-  describeQueryError,
-} from "@corbits/api-query";
-import {
-  PRINCIPAL_KIND_LABEL,
-  PRINCIPAL_KIND_ORDER,
-  principalLabel,
-} from "./identity";
-import {
-  expiryIsoFromPreset,
-  expiryLabelFromPreset,
-  grantPreviewSentence,
-} from "./grant-preview";
+import { QueryView, UnauthenticatedError, describeQueryError } from "@corbits/api-query";
+import { PRINCIPAL_KIND_LABEL, PRINCIPAL_KIND_ORDER, principalLabel } from "./identity";
+import { expiryIsoFromPreset, expiryLabelFromPreset, grantPreviewSentence } from "./grant-preview";
 import { KindCards } from "./kind-cards";
 import {
   GRANT_ACTIONS,
@@ -95,11 +83,7 @@ type GrantsData = {
   readonly principals: readonly Principal[];
 };
 
-export function GrantsSection({
-  tenantId,
-}: {
-  readonly tenantId: string | null;
-}) {
+export function GrantsSection({ tenantId }: { readonly tenantId: string | null }) {
   const [filters, setFilters] = useState<GrantFilters>({});
   const [query, setQuery] = useState<APIQuery<GrantsData>>({
     kind: "loading",
@@ -119,14 +103,9 @@ export function GrantsSection({
     if (tenantId === null) return;
     let cancelled = false;
     setQuery({ kind: "loading" });
-    Promise.all([
-      listGrants(tenantId, filters),
-      listRoles(tenantId),
-      listPrincipals(tenantId),
-    ])
+    Promise.all([listGrants(tenantId, filters), listRoles(tenantId), listPrincipals(tenantId)])
       .then(([grants, roles, principals]) => {
-        if (!cancelled)
-          setQuery({ kind: "ready", data: { grants, roles, principals } });
+        if (!cancelled) setQuery({ kind: "ready", data: { grants, roles, principals } });
       })
       .catch((cause: unknown) => {
         if (cancelled) return;
@@ -143,7 +122,6 @@ export function GrantsSection({
     return () => {
       cancelled = true;
     };
-    // eslint-disable-next-line react-hooks/exhaustive-deps
   }, [tenantId, reloadKey, filtersKey]);
 
   if (tenantId === null) {
@@ -179,9 +157,7 @@ export function GrantsSection({
         : { ...shared, principalId: input.targetId };
     createGrant(
       tenantId,
-      input.expiresAt !== null
-        ? { ...target, expiresAt: input.expiresAt }
-        : target,
+      input.expiresAt !== null ? { ...target, expiresAt: input.expiresAt } : target,
     )
       .then(() => {
         setCreateOpen(false);
@@ -335,24 +311,16 @@ export function GrantsTable({
       <TableBody>
         {grants.map((grant) => (
           <TableRow key={grant.id}>
+            <TableCell>{grant.roleName ?? grant.principalName ?? "—"}</TableCell>
             <TableCell>
-              {grant.roleName ?? grant.principalName ?? "—"}
-            </TableCell>
-            <TableCell>
-              <span title={grant.resource}>
-                {resourceLabel(grant.resource)}
-              </span>
+              <span title={grant.resource}>{resourceLabel(grant.resource)}</span>
             </TableCell>
             <TableCell>{grant.action}</TableCell>
             <TableCell>
-              <Badge tone={EFFECT_TONE[grant.effect]}>
-                {EFFECT_LABEL[grant.effect]}
-              </Badge>
+              <Badge tone={EFFECT_TONE[grant.effect]}>{EFFECT_LABEL[grant.effect]}</Badge>
             </TableCell>
             <TableCell>{grant.origin}</TableCell>
-            <TableCell>
-              {grant.expiresAt ?? SETTINGS_STRINGS.grantsNoExpiry}
-            </TableCell>
+            <TableCell>{grant.expiresAt ?? SETTINGS_STRINGS.grantsNoExpiry}</TableCell>
             <TableCell>
               <ConfirmButton
                 variant="destructive"
@@ -402,9 +370,7 @@ export function CreateGrantDialog({
   // Default to Require approval (ask) — the safer first choice for new grants.
   const [effect, setEffect] = useState<GrantEffect>("ask");
   const [origin, setOrigin] = useState<GrantOrigin>("role");
-  const [expiryPreset, setExpiryPreset] = useState<
-    "never" | "24h" | "7d" | "30d"
-  >("never");
+  const [expiryPreset, setExpiryPreset] = useState<"never" | "24h" | "7d" | "30d">("never");
 
   const targetOptions = useMemo(
     () =>
@@ -422,8 +388,7 @@ export function CreateGrantDialog({
     [targetType, roles, principals],
   );
 
-  const targetLabel =
-    targetOptions.find((option) => option.id === targetId)?.label ?? null;
+  const targetLabel = targetOptions.find((option) => option.id === targetId)?.label ?? null;
   const preview = grantPreviewSentence({
     targetLabel,
     resource: resourceLabel(resource),
@@ -455,9 +420,7 @@ export function CreateGrantDialog({
       <DialogContent>
         <DialogHeader>
           <DialogTitle>{SETTINGS_STRINGS.grantsCreateDialogTitle}</DialogTitle>
-          <DialogDescription>
-            {SETTINGS_STRINGS.grantsCreateDialogDescription}
-          </DialogDescription>
+          <DialogDescription>{SETTINGS_STRINGS.grantsCreateDialogDescription}</DialogDescription>
         </DialogHeader>
         <DialogBody>
           <form
@@ -492,14 +455,12 @@ export function CreateGrantDialog({
                   {
                     id: "role",
                     title: SETTINGS_STRINGS.grantsTargetTypeRole,
-                    description:
-                      SETTINGS_STRINGS.grantsTargetTypeRoleDescription,
+                    description: SETTINGS_STRINGS.grantsTargetTypeRoleDescription,
                   },
                   {
                     id: "principal",
                     title: SETTINGS_STRINGS.grantsTargetTypePrincipal,
-                    description:
-                      SETTINGS_STRINGS.grantsTargetTypePrincipalDescription,
+                    description: SETTINGS_STRINGS.grantsTargetTypePrincipalDescription,
                   },
                 ]}
               />
@@ -520,9 +481,7 @@ export function CreateGrantDialog({
                       </option>
                     ))
                   : PRINCIPAL_KIND_ORDER.map((kind) => {
-                      const kindOptions = targetOptions.filter(
-                        (option) => option.kind === kind,
-                      );
+                      const kindOptions = targetOptions.filter((option) => option.kind === kind);
                       if (kindOptions.length === 0) return null;
                       return (
                         <optgroup key={kind} label={PRINCIPAL_KIND_LABEL[kind]}>
@@ -595,9 +554,7 @@ export function CreateGrantDialog({
               <select
                 className="settings-select"
                 value={origin}
-                onChange={(event) =>
-                  setOrigin(event.target.value as GrantOrigin)
-                }
+                onChange={(event) => setOrigin(event.target.value as GrantOrigin)}
               >
                 {grantOrigins.map((value) => (
                   <option key={value} value={value}>
@@ -612,9 +569,7 @@ export function CreateGrantDialog({
                 label={SETTINGS_STRINGS.grantsExpiresLabel}
                 columns={2}
                 value={expiryPreset}
-                onChange={(id) =>
-                  setExpiryPreset(id as "never" | "24h" | "7d" | "30d")
-                }
+                onChange={(id) => setExpiryPreset(id as "never" | "24h" | "7d" | "30d")}
                 options={[
                   { id: "never", title: "Never", description: "No expiry." },
                   { id: "24h", title: "24 hours" },
diff --git a/packages/settings-ui/src/index.ts b/packages/settings-ui/src/index.ts
index 4e93cf7cc1..9093e0bd3c 100644
--- a/packages/settings-ui/src/index.ts
+++ b/packages/settings-ui/src/index.ts
@@ -1,18 +1,7 @@
-export {
-  SettingsShell,
-  resolveActiveSection,
-  flattenSettingsSections,
-} from "./shell";
-export type {
-  SettingsContext,
-  SettingsSection,
-  SettingsSectionGroup,
-} from "./shell";
+export { SettingsShell, resolveActiveSection, flattenSettingsSections } from "./shell";
+export type { SettingsContext, SettingsSection, SettingsSectionGroup } from "./shell";
 
-export {
-  resolveSettingsSectionGroups,
-  insertEveryoneSections,
-} from "./section-registry";
+export { resolveSettingsSectionGroups, insertEveryoneSections } from "./section-registry";
 
 export {
   AccountSection,
@@ -24,17 +13,8 @@ export {
 // registry (CL-6843). Re-export when a preference store backs it.
 export { AuditSection } from "./audit-section";
 export { PeopleSection, PeopleTable } from "./people-section";
-export {
-  RolesSection,
-  RolesTable,
-  RoleAssignments,
-  CreateRoleDialog,
-} from "./roles-section";
-export {
-  GrantsSection,
-  GrantsTable,
-  CreateGrantDialog,
-} from "./grants-section";
+export { RolesSection, RolesTable, RoleAssignments, CreateRoleDialog } from "./roles-section";
+export { GrantsSection, GrantsTable, CreateGrantDialog } from "./grants-section";
 export {
   ConnectionsSection,
   ConnectorRowList,
@@ -44,17 +24,9 @@ export {
 
 export { GranolaWebhookCard } from "./granola-webhook-card";
 
-export {
-  CopyButton,
-  CopyableCodeRow,
-  WebhookSecretPanel,
-} from "./webhook-secret-panel";
+export { CopyButton, CopyableCodeRow, WebhookSecretPanel } from "./webhook-secret-panel";
 
-export {
-  grantPreviewSentence,
-  expiryIsoFromPreset,
-  expiryLabelFromPreset,
-} from "./grant-preview";
+export { grantPreviewSentence, expiryIsoFromPreset, expiryLabelFromPreset } from "./grant-preview";
 export type { GrantPreviewInput } from "./grant-preview";
 export { KindCards } from "./kind-cards";
 export type { KindCardOption } from "./kind-cards";
@@ -65,11 +37,7 @@ export type { PrincipalLabel } from "./identity";
 export { GRANT_RESOURCES, GRANT_ACTIONS } from "./resource-vocabulary";
 export type { GrantResource, GrantAction } from "./resource-vocabulary";
 
-export {
-  useTenancyAccess,
-  probeSectionAccess,
-  coalesceSectionAccess,
-} from "./access";
+export { useTenancyAccess, probeSectionAccess, coalesceSectionAccess } from "./access";
 export type { SectionAccess, TenancyAccess } from "./access";
 
 export {
@@ -88,13 +56,7 @@ export {
   revokeGrant,
   evaluate,
 } from "./tenancy-api";
-export type {
-  Principal,
-  Role,
-  Grant,
-  GrantFilters,
-  CreateGrantInput,
-} from "./tenancy-api";
+export type { Principal, Role, Grant, GrantFilters, CreateGrantInput } from "./tenancy-api";
 
 export {
   CredentialsApiError,
@@ -103,11 +65,7 @@ export {
   createCredential,
   deleteCredential,
 } from "./credentials-api";
-export type {
-  Credential,
-  Provider,
-  CreateCredentialInput,
-} from "./credentials-api";
+export type { Credential, Provider, CreateCredentialInput } from "./credentials-api";
 
 export {
   ConnectionsApiError,
@@ -117,10 +75,7 @@ export {
 } from "./connections-api";
 
 export { connectorStatus } from "./connections-status";
-export type {
-  ConnectorStatus,
-  ConnectorStatusResult,
-} from "./connections-status";
+export type { ConnectorStatus, ConnectorStatusResult } from "./connections-status";
 
 export { CONNECTOR_PINNED_WORKFLOWS } from "./connections-pinned-by";
 
diff --git a/packages/settings-ui/src/kind-cards.tsx b/packages/settings-ui/src/kind-cards.tsx
index cd0abc4265..7cf295cae2 100644
--- a/packages/settings-ui/src/kind-cards.tsx
+++ b/packages/settings-ui/src/kind-cards.tsx
@@ -30,9 +30,7 @@ export function KindCards({
     <div
       role="group"
       aria-label={label}
-      className={
-        columns === 3 ? "settings-kind-grid cols-3" : "settings-kind-grid"
-      }
+      className={columns === 3 ? "settings-kind-grid cols-3" : "settings-kind-grid"}
     >
       {options.map((option) => {
         const selected = value === option.id;
@@ -52,9 +50,7 @@ export function KindCards({
             )}
             <span className="settings-kind-card-title">{option.title}</span>
             {option.description === undefined ? null : (
-              <span className="settings-kind-card-desc">
-                {option.description}
-              </span>
+              <span className="settings-kind-card-desc">{option.description}</span>
             )}
           </button>
         );
diff --git a/packages/settings-ui/src/people-section.tsx b/packages/settings-ui/src/people-section.tsx
index 34be9b2e9b..057ae58a8c 100644
--- a/packages/settings-ui/src/people-section.tsx
+++ b/packages/settings-ui/src/people-section.tsx
@@ -23,11 +23,7 @@ import {
 import { useEffect, useState } from "react";
 
 import type { APIQuery } from "@corbits/api-query";
-import {
-  QueryView,
-  UnauthenticatedError,
-  describeQueryError,
-} from "@corbits/api-query";
+import { QueryView, UnauthenticatedError, describeQueryError } from "@corbits/api-query";
 import { reportError } from "@corbits/error-sink";
 import { PRINCIPAL_KIND_LABEL, principalLabel } from "./identity";
 
@@ -43,21 +39,17 @@ import {
   type Role,
 } from "./tenancy-api";
 
-const STATUS_TONE: Record<Principal["status"], "success" | "info" | "neutral"> =
-  {
-    active: "success",
-    invited: "info",
-    suspended: "neutral",
-    deactivated: "neutral",
-  };
+const STATUS_TONE: Record<Principal["status"], "success" | "info" | "neutral"> = {
+  active: "success",
+  invited: "info",
+  suspended: "neutral",
+  deactivated: "neutral",
+};
 
 /** The two system roles this section's simplified role picker maps onto —
  * discovered by name from this tenant's actual roles rather than assumed,
  * since role ids are minted per tenant. */
-function findSystemRole(
-  roles: readonly Role[],
-  name: "owner" | "member",
-): Role | undefined {
+function findSystemRole(roles: readonly Role[], name: "owner" | "member"): Role | undefined {
   return roles.find((role) => role.name.toLowerCase() === name);
 }
 
@@ -66,11 +58,7 @@ type PeopleData = {
   readonly roles: readonly Role[];
 };
 
-export function PeopleSection({
-  tenantId,
-}: {
-  readonly tenantId: string | null;
-}) {
+export function PeopleSection({ tenantId }: { readonly tenantId: string | null }) {
   const [query, setQuery] = useState<APIQuery<PeopleData>>({
     kind: "loading",
   });
@@ -111,7 +99,6 @@ export function PeopleSection({
     return () => {
       cancelled = true;
     };
-    // eslint-disable-next-line react-hooks/exhaustive-deps
   }, [tenantId, reloadKey]);
 
   if (tenantId === null) {
@@ -123,10 +110,7 @@ export function PeopleSection({
     );
   }
 
-  function handleStatusChange(
-    principal: Principal,
-    status: "active" | "suspended",
-  ) {
+  function handleStatusChange(principal: Principal, status: "active" | "suspended") {
     if (tenantId === null) return;
     setRowError(null);
     updatePrincipalStatus(tenantId, principal.id, status)
@@ -173,12 +157,8 @@ export function PeopleSection({
       return;
     }
 
-    const toUnassign = principal.roles.filter((r) =>
-      roles.some((role) => role.id === r.id),
-    );
-    Promise.all(
-      toUnassign.map((r) => unassignRole(tenantId, principal.id, r.id)),
-    )
+    const toUnassign = principal.roles.filter((r) => roles.some((role) => role.id === r.id));
+    Promise.all(toUnassign.map((r) => unassignRole(tenantId, principal.id, r.id)))
       .then(() => assignRole(tenantId, principal.id, newRoleId))
       .then(reload)
       .catch((cause: unknown) => {
@@ -208,9 +188,7 @@ export function PeopleSection({
             onSuspend={(p) => handleStatusChange(p, "suspended")}
             onReactivate={(p) => handleStatusChange(p, "active")}
             onRemove={handleRemove}
-            onRoleChange={(p, roleId) =>
-              handleRoleChange(p, roleId, people, roles)
-            }
+            onRoleChange={(p, roleId) => handleRoleChange(p, roleId, people, roles)}
           />
         </SettingsPanel>
       )}
@@ -218,10 +196,7 @@ export function PeopleSection({
   );
 }
 
-function countHoldingRole(
-  people: readonly Principal[],
-  roleId: string,
-): number {
+function countHoldingRole(people: readonly Principal[], roleId: string): number {
   return people.filter((p) => p.roles.some((r) => r.id === roleId)).length;
 }
 
@@ -265,13 +240,10 @@ export function PeopleTable({
       <TableBody>
         {people.map((person) => {
           const identity = principalLabel(person.displayName);
-          const selectableRoles = [ownerRole, memberRole].filter(
-            (r): r is Role => r !== undefined,
-          );
+          const selectableRoles = [ownerRole, memberRole].filter((r): r is Role => r !== undefined);
           const currentRoleId =
-            person.roles.find((r) =>
-              selectableRoles.some((role) => role.id === r.id),
-            )?.id ?? memberRole?.id;
+            person.roles.find((r) => selectableRoles.some((role) => role.id === r.id))?.id ??
+            memberRole?.id;
 
           return (
             <TableRow key={person.id}>
@@ -291,9 +263,7 @@ export function PeopleTable({
                     className="settings-select"
                     aria-label={`${SETTINGS_STRINGS.peopleInviteRoleLabel} — ${identity.label}`}
                     value={currentRoleId}
-                    onChange={(event) =>
-                      onRoleChange(person, event.target.value)
-                    }
+                    onChange={(event) => onRoleChange(person, event.target.value)}
                   >
                     {selectableRoles.map((role) => (
                       <option key={role.id} value={role.id}>
@@ -316,19 +286,11 @@ export function PeopleTable({
               <TableCell className="settings-actions-cell">
                 <div className="settings-row-actions">
                   {person.status === "suspended" ? (
-                    <Button
-                      variant="outline"
-                      size="sm"
-                      onClick={() => onReactivate(person)}
-                    >
+                    <Button variant="outline" size="sm" onClick={() => onReactivate(person)}>
                       {SETTINGS_STRINGS.peopleReactivate}
                     </Button>
                   ) : (
-                    <Button
-                      variant="outline"
-                      size="sm"
-                      onClick={() => onSuspend(person)}
-                    >
+                    <Button variant="outline" size="sm" onClick={() => onSuspend(person)}>
                       {SETTINGS_STRINGS.peopleSuspend}
                     </Button>
                   )}
diff --git a/packages/settings-ui/src/resource-vocabulary.ts b/packages/settings-ui/src/resource-vocabulary.ts
index 4e62524974..8d411f7ed8 100644
--- a/packages/settings-ui/src/resource-vocabulary.ts
+++ b/packages/settings-ui/src/resource-vocabulary.ts
@@ -60,11 +60,5 @@ export const GRANT_RESOURCE_LABEL: Record<GrantResource, string> = {
   observability: "observability data",
 };
 
-export const GRANT_ACTIONS = [
-  "read",
-  "create",
-  "manage",
-  "write",
-  "use",
-] as const;
+export const GRANT_ACTIONS = ["read", "create", "manage", "write", "use"] as const;
 export type GrantAction = (typeof GRANT_ACTIONS)[number];
diff --git a/packages/settings-ui/src/roles-section.tsx b/packages/settings-ui/src/roles-section.tsx
index c86d60c27a..1dab910b6f 100644
--- a/packages/settings-ui/src/roles-section.tsx
+++ b/packages/settings-ui/src/roles-section.tsx
@@ -27,11 +27,7 @@ import {
 import { useEffect, useState } from "react";
 
 import type { APIQuery } from "@corbits/api-query";
-import {
-  QueryView,
-  UnauthenticatedError,
-  describeQueryError,
-} from "@corbits/api-query";
+import { QueryView, UnauthenticatedError, describeQueryError } from "@corbits/api-query";
 import { principalLabel } from "./identity";
 import { SETTINGS_STRINGS } from "./strings";
 import {
@@ -51,11 +47,7 @@ type RolesData = {
   readonly principals: readonly Principal[];
 };
 
-export function RolesSection({
-  tenantId,
-}: {
-  readonly tenantId: string | null;
-}) {
+export function RolesSection({ tenantId }: { readonly tenantId: string | null }) {
   const [query, setQuery] = useState<APIQuery<RolesData>>({ kind: "loading" });
   const [reloadKey, setReloadKey] = useState(0);
   const [createOpen, setCreateOpen] = useState(false);
@@ -73,8 +65,7 @@ export function RolesSection({
     setQuery({ kind: "loading" });
     Promise.all([listRoles(tenantId), listPrincipals(tenantId)])
       .then(([roles, principals]) => {
-        if (!cancelled)
-          setQuery({ kind: "ready", data: { roles, principals } });
+        if (!cancelled) setQuery({ kind: "ready", data: { roles, principals } });
       })
       .catch((cause: unknown) => {
         if (cancelled) return;
@@ -91,7 +82,6 @@ export function RolesSection({
     return () => {
       cancelled = true;
     };
-    // eslint-disable-next-line react-hooks/exhaustive-deps
   }, [tenantId, reloadKey]);
 
   if (tenantId === null) {
@@ -107,10 +97,7 @@ export function RolesSection({
     if (tenantId === null) return;
     setCreating(true);
     setCreateError(null);
-    createRole(
-      tenantId,
-      description.length > 0 ? { name, description } : { name },
-    )
+    createRole(tenantId, description.length > 0 ? { name, description } : { name })
       .then(() => {
         setCreateOpen(false);
         reload();
@@ -168,11 +155,7 @@ export function RolesSection({
               {rowError}
             </p>
           )}
-          <RolesTable
-            roles={roles}
-            onDelete={handleDelete}
-            onRename={handleRename}
-          />
+          <RolesTable roles={roles} onDelete={handleDelete} onRename={handleRename} />
           <RoleAssignments
             roles={roles}
             principals={principals}
@@ -235,9 +218,7 @@ export function RolesTable({
                 <>
                   {role.name}{" "}
                   {role.isSystem && (
-                    <Badge tone="neutral">
-                      {SETTINGS_STRINGS.rolesSystemBadge}
-                    </Badge>
+                    <Badge tone="neutral">{SETTINGS_STRINGS.rolesSystemBadge}</Badge>
                   )}
                 </>
               )}
@@ -261,11 +242,7 @@ export function RolesTable({
                   >
                     {SETTINGS_STRINGS.rolesRenameSave}
                   </Button>
-                  <Button
-                    variant="outline"
-                    size="sm"
-                    onClick={() => setEditingId(null)}
-                  >
+                  <Button variant="outline" size="sm" onClick={() => setEditingId(null)}>
                     {SETTINGS_STRINGS.rolesRenameCancel}
                   </Button>
                 </div>
@@ -367,9 +344,7 @@ export function RoleAssignments({
       </div>
       <h4>{SETTINGS_STRINGS.rolesAssignmentsTitle}</h4>
       {assignments.length === 0 ? (
-        <p className="settings-field-hint">
-          {SETTINGS_STRINGS.rolesAssignmentsEmpty}
-        </p>
+        <p className="settings-field-hint">{SETTINGS_STRINGS.rolesAssignmentsEmpty}</p>
       ) : (
         <Table>
           <TableHeader>
@@ -382,9 +357,7 @@ export function RoleAssignments({
           <TableBody>
             {assignments.map(({ principal, role }) => (
               <TableRow key={`${principal.id}-${role.id}`}>
-                <TableCell>
-                  {principalLabel(principal.displayName).label}
-                </TableCell>
+                <TableCell>{principalLabel(principal.displayName).label}</TableCell>
                 <TableCell>{role.name}</TableCell>
                 <TableCell>
                   <Button
@@ -437,9 +410,7 @@ export function CreateRoleDialog({
       <DialogContent>
         <DialogHeader>
           <DialogTitle>{SETTINGS_STRINGS.rolesCreateDialogTitle}</DialogTitle>
-          <DialogDescription>
-            {SETTINGS_STRINGS.rolesCreateDialogDescription}
-          </DialogDescription>
+          <DialogDescription>{SETTINGS_STRINGS.rolesCreateDialogDescription}</DialogDescription>
         </DialogHeader>
         <DialogBody>
           <form
@@ -461,10 +432,7 @@ export function CreateRoleDialog({
             </label>
             <label className="settings-form-field">
               <span>{SETTINGS_STRINGS.rolesDescriptionLabel}</span>
-              <Input
-                value={description}
-                onChange={(event) => setDescription(event.target.value)}
-              />
+              <Input value={description} onChange={(event) => setDescription(event.target.value)} />
             </label>
             {error !== null && (
               <p className="settings-inline-error" role="alert">
diff --git a/packages/settings-ui/src/section-registry.tsx b/packages/settings-ui/src/section-registry.tsx
index ac34338fa1..b4c413c269 100644
--- a/packages/settings-ui/src/section-registry.tsx
+++ b/packages/settings-ui/src/section-registry.tsx
@@ -58,11 +58,7 @@ const SETTINGS_SECTION_GROUPS: readonly SettingsSectionGroupDef[] = [
         title: SETTINGS_STRINGS.accountSectionTitle,
         icon: User,
         render: (ctx) => (
-          <AccountSection
-            {...(ctx.onSignOut !== undefined
-              ? { onSignOut: ctx.onSignOut }
-              : {})}
-          />
+          <AccountSection {...(ctx.onSignOut !== undefined ? { onSignOut: ctx.onSignOut } : {})} />
         ),
       },
     ],
@@ -133,17 +129,13 @@ export function resolveSettingsSectionGroups(
 ): readonly SettingsSectionGroup[] {
   return SETTINGS_SECTION_GROUPS.map((group) => {
     const accessProbeFailed = group.sections.some(
-      (section) =>
-        section.gate !== undefined && access[section.gate] === "error",
+      (section) => section.gate !== undefined && access[section.gate] === "error",
     );
     return {
       id: group.id,
       label: group.label,
       sections: group.sections
-        .filter(
-          (section) =>
-            section.gate === undefined || access[section.gate] === "allowed",
-        )
+        .filter((section) => section.gate === undefined || access[section.gate] === "allowed")
         .map(({ gate: _gate, ...section }) => section),
       ...(accessProbeFailed ? { accessProbeFailed: true as const } : {}),
     };
diff --git a/packages/settings-ui/src/shell.tsx b/packages/settings-ui/src/shell.tsx
index 647f1236da..70b3585639 100644
--- a/packages/settings-ui/src/shell.tsx
+++ b/packages/settings-ui/src/shell.tsx
@@ -100,17 +100,14 @@ export function SettingsShell({
     );
   }
 
-  const activeSection =
-    resolveActiveSection(sections, activeId) ?? firstSection;
+  const activeSection = resolveActiveSection(sections, activeId) ?? firstSection;
 
   return (
     <div className="settings-shell">
       {/* No repeated "Settings · Section" heading here — the host's stage
           top bar already carries it, and every section card names itself. */}
       <div className="settings-stage" key={activeSection.id}>
-        <div className="settings-stage-body">
-          {activeSection.render(context)}
-        </div>
+        <div className="settings-stage-body">{activeSection.render(context)}</div>
       </div>
     </div>
   );
diff --git a/packages/settings-ui/src/strings.ts b/packages/settings-ui/src/strings.ts
index ce3e1ce3ba..4d5b041691 100644
--- a/packages/settings-ui/src/strings.ts
+++ b/packages/settings-ui/src/strings.ts
@@ -20,8 +20,7 @@ export const SETTINGS_STRINGS = {
   notificationsApprovals: "Approvals",
   notificationsRoutineFail: "Failed deliveries",
   notificationsSaveAction: "Save",
-  notificationsSaveHonesty:
-    "Draft only — notification choices aren't saved yet.",
+  notificationsSaveHonesty: "Draft only — notification choices aren't saved yet.",
 
   settingsSavedToast: "Settings saved",
 
@@ -75,15 +74,13 @@ export const SETTINGS_STRINGS = {
     "This workbench needs at least one owner — make someone else an owner first.",
 
   rolesSectionTitle: "Roles",
-  rolesSectionDescription:
-    "This workbench's roles and who they're assigned to.",
+  rolesSectionDescription: "This workbench's roles and who they're assigned to.",
   rolesLoadError: "this workbench's roles",
   rolesEmptyTitle: "No roles yet",
   rolesEmptyDescription: "Create a custom role to get started.",
   rolesCreateAction: "New role",
   rolesCreateDialogTitle: "New role",
-  rolesCreateDialogDescription:
-    "Custom roles start with no grants of their own.",
+  rolesCreateDialogDescription: "Custom roles start with no grants of their own.",
   rolesNameLabel: "Name",
   rolesNamePlaceholder: "e.g. Billing",
   rolesDescriptionLabel: "Description",
@@ -91,8 +88,7 @@ export const SETTINGS_STRINGS = {
   rolesCreateCancel: "Cancel",
   rolesCreateError: "Couldn't create that role — try again.",
   rolesRenameError: "Couldn't rename that role — try again.",
-  rolesDeleteError:
-    "Couldn't delete that role — it may still be assigned to someone.",
+  rolesDeleteError: "Couldn't delete that role — it may still be assigned to someone.",
   rolesSystemBadge: "system",
   rolesSystemImmutableNote: "System roles can't be renamed or deleted.",
   rolesRenameAction: "Rename",
@@ -118,14 +114,12 @@ export const SETTINGS_STRINGS = {
   grantsEmptyDescription: "Try clearing a filter, or create a new rule.",
   grantsCreateAction: "New rule",
   grantsCreateDialogTitle: "New rule",
-  grantsCreateDialogDescription:
-    "Set exactly one role or one person a resource and action.",
+  grantsCreateDialogDescription: "Set exactly one role or one person a resource and action.",
   grantsTargetTypeLabel: "Applies to",
   grantsTargetTypeRole: "A role",
   grantsTargetTypeRoleDescription: "Everyone assigned this role.",
   grantsTargetTypePrincipal: "A person, agent, or workflow",
-  grantsTargetTypePrincipalDescription:
-    "One specific account — human or machine.",
+  grantsTargetTypePrincipalDescription: "One specific account — human or machine.",
   grantsTargetLabel: "Target",
   grantsResourceLabel: "Resource",
   grantsActionLabel: "Action",
@@ -166,8 +160,7 @@ export const SETTINGS_STRINGS = {
   connectionsDisconnectError: "Couldn't disconnect — try again.",
   connectionsDefaultModelLine: (model: string) => `Default model: ${model}`,
   connectionsDefaultModelLabel: "Default model:",
-  connectionsSetDefaultModelError:
-    "Couldn't set the default model — try again.",
+  connectionsSetDefaultModelError: "Couldn't set the default model — try again.",
   connectionsPinnedByPrefix: "Used by: ",
   connectionsPinnedByNone: "Not pinned by any workflow",
   connectionsPinnedByApproximationNote:
@@ -185,8 +178,7 @@ export const SETTINGS_STRINGS = {
   connectionsSaving: "Saving…",
   connectionsCancel: "Cancel",
   connectionsConnectedToast: (name: string) => `${name} connected`,
-  connectionsAdvancedSummary:
-    "All credentials — including certificates and other types",
+  connectionsAdvancedSummary: "All credentials — including certificates and other types",
   connectionsWebhookLoadError: "Couldn't load the Granola webhook",
   connectionsWebhookNotSetUp: "Not set up",
   connectionsWebhookSetUpAction: "Set up",
@@ -195,8 +187,7 @@ export const SETTINGS_STRINGS = {
     `${count} webhook${count === 1 ? "" : "s"} wired`,
   connectionsWebhookLastDelivery: (when: string) => `Last delivery ${when}`,
   connectionsWebhookNoDeliveries: "No deliveries yet",
-  connectionsWebhookDirectionNote:
-    "Workbench gives you a signed webhook address Granola calls.",
+  connectionsWebhookDirectionNote: "Workbench gives you a signed webhook address Granola calls.",
   connectionsWebhookDialogTitle: "Granola inbound webhook",
   connectionsWebhookDialogDescription:
     "This address is yours to give to Granola — nothing to paste from Granola's side. The signing secret proves a delivery really came from Granola; it's shown once, right after you create or rotate it.",
diff --git a/packages/settings-ui/src/styles.css b/packages/settings-ui/src/styles.css
index acbabb6286..688426be78 100644
--- a/packages/settings-ui/src/styles.css
+++ b/packages/settings-ui/src/styles.css
@@ -479,8 +479,7 @@
   align-items: center;
   gap: 0.75rem;
   padding: 0.6rem 0.125rem;
-  border-bottom: 1px solid
-    color-mix(in srgb, var(--foreground) 10%, transparent);
+  border-bottom: 1px solid color-mix(in srgb, var(--foreground) 10%, transparent);
 }
 
 .settings-connections-list > .settings-connection-row:last-child {
@@ -662,9 +661,7 @@
   transition: transform 0.15s ease;
 }
 
-.settings-advanced-disclosure[open]
-  > summary
-  .settings-advanced-disclosure-chevron {
+.settings-advanced-disclosure[open] > summary .settings-advanced-disclosure-chevron {
   transform: rotate(90deg);
 }
 
diff --git a/packages/settings-ui/src/tenancy-api.ts b/packages/settings-ui/src/tenancy-api.ts
index 4aeedbefa3..bbb237c9ce 100644
--- a/packages/settings-ui/src/tenancy-api.ts
+++ b/packages/settings-ui/src/tenancy-api.ts
@@ -37,11 +37,7 @@ export class TenancyApiError extends Error {
 
 type Validator<T> = (data: unknown) => T | ArkErrors;
 
-async function request<T>(
-  path: string,
-  schema: Validator<T>,
-  init?: RequestInit,
-): Promise<T> {
+async function request<T>(path: string, schema: Validator<T>, init?: RequestInit): Promise<T> {
   let response: Response;
   try {
     response = await fetch(path, {
@@ -49,9 +45,7 @@ async function request<T>(
       headers: { "content-type": "application/json", ...init?.headers },
     });
   } catch (cause) {
-    throw new TenancyApiError(
-      cause instanceof Error ? cause.message : String(cause),
-    );
+    throw new TenancyApiError(cause instanceof Error ? cause.message : String(cause));
   }
   if (response.status === 401) {
     throw new UnauthenticatedError();
@@ -60,30 +54,21 @@ async function request<T>(
     throw new TenancyApiError(`Not permitted to view ${path}.`, 403);
   }
   if (!response.ok) {
-    throw new TenancyApiError(
-      `The hub answered ${response.status} for ${path}.`,
-      response.status,
-    );
+    throw new TenancyApiError(`The hub answered ${response.status} for ${path}.`, response.status);
   }
   if (response.status === 204) return undefined as T;
   const body: unknown = await response.json().catch(() => undefined);
   const parsed = schema(body);
   if (parsed instanceof type.errors) {
-    throw new TenancyApiError(
-      `Unexpected response shape from ${path}: ${parsed.summary}`,
-    );
+    throw new TenancyApiError(`Unexpected response shape from ${path}: ${parsed.summary}`);
   }
   return parsed;
 }
 
 // -- Principals --------------------------------------------------------
 
-export function listPrincipals(
-  tenantId: string,
-): Promise<readonly Principal[]> {
-  return request(`/api/tenants/${tenantId}/principals`, PrincipalsPage).then(
-    (page) => page.data,
-  );
+export function listPrincipals(tenantId: string): Promise<readonly Principal[]> {
+  return request(`/api/tenants/${tenantId}/principals`, PrincipalsPage).then((page) => page.data);
 }
 
 export function updatePrincipalStatus(
@@ -91,17 +76,13 @@ export function updatePrincipalStatus(
   principalId: string,
   status: UpdatablePrincipalStatus,
 ): Promise<Principal> {
-  return request(
-    `/api/tenants/${tenantId}/principals/${principalId}`,
-    PrincipalResponse,
-    { method: "PATCH", body: JSON.stringify({ status }) },
-  );
+  return request(`/api/tenants/${tenantId}/principals/${principalId}`, PrincipalResponse, {
+    method: "PATCH",
+    body: JSON.stringify({ status }),
+  });
 }
 
-export function removePrincipal(
-  tenantId: string,
-  principalId: string,
-): Promise<void> {
+export function removePrincipal(tenantId: string, principalId: string): Promise<void> {
   return request<void>(
     `/api/tenants/${tenantId}/principals/${principalId}`,
     (data) => data as void,
@@ -112,9 +93,7 @@ export function removePrincipal(
 // -- Roles ---------------------------------------------------------------
 
 export function listRoles(tenantId: string): Promise<readonly Role[]> {
-  return request(`/api/tenants/${tenantId}/roles`, RolesPage).then(
-    (page) => page.data,
-  );
+  return request(`/api/tenants/${tenantId}/roles`, RolesPage).then((page) => page.data);
 }
 
 export function createRole(
@@ -139,18 +118,12 @@ export function renameRole(
 }
 
 export function deleteRole(tenantId: string, roleId: string): Promise<void> {
-  return request<void>(
-    `/api/tenants/${tenantId}/roles/${roleId}`,
-    (data) => data as void,
-    { method: "DELETE" },
-  );
+  return request<void>(`/api/tenants/${tenantId}/roles/${roleId}`, (data) => data as void, {
+    method: "DELETE",
+  });
 }
 
-export function assignRole(
-  tenantId: string,
-  principalId: string,
-  roleId: string,
-): Promise<void> {
+export function assignRole(tenantId: string, principalId: string, roleId: string): Promise<void> {
   return request<void>(
     `/api/tenants/${tenantId}/principals/${principalId}/roles/${roleId}`,
     (data) => data as void,
@@ -158,11 +131,7 @@ export function assignRole(
   );
 }
 
-export function unassignRole(
-  tenantId: string,
-  principalId: string,
-  roleId: string,
-): Promise<void> {
+export function unassignRole(tenantId: string, principalId: string, roleId: string): Promise<void> {
   return request<void>(
     `/api/tenants/${tenantId}/principals/${principalId}/roles/${roleId}`,
     (data) => data as void,
@@ -181,8 +150,7 @@ export type GrantFilters = {
 
 function grantQuery(filters: GrantFilters): string {
   const params = new URLSearchParams();
-  if (filters.principalId !== undefined)
-    params.set("principalId", filters.principalId);
+  if (filters.principalId !== undefined) params.set("principalId", filters.principalId);
   if (filters.roleId !== undefined) params.set("roleId", filters.roleId);
   if (filters.resource !== undefined) params.set("resource", filters.resource);
   if (filters.effect !== undefined) params.set("effect", filters.effect);
@@ -194,10 +162,9 @@ export function listGrants(
   tenantId: string,
   filters: GrantFilters = {},
 ): Promise<readonly Grant[]> {
-  return request(
-    `/api/tenants/${tenantId}/grants${grantQuery(filters)}`,
-    GrantsPage,
-  ).then((page) => page.data);
+  return request(`/api/tenants/${tenantId}/grants${grantQuery(filters)}`, GrantsPage).then(
+    (page) => page.data,
+  );
 }
 
 export type CreateGrantInput = {
@@ -210,10 +177,7 @@ export type CreateGrantInput = {
   readonly expiresAt?: string;
 };
 
-export function createGrant(
-  tenantId: string,
-  input: CreateGrantInput,
-): Promise<Grant> {
+export function createGrant(tenantId: string, input: CreateGrantInput): Promise<Grant> {
   return request(`/api/tenants/${tenantId}/grants`, GrantResponse, {
     method: "POST",
     body: JSON.stringify(input),
@@ -221,11 +185,9 @@ export function createGrant(
 }
 
 export function revokeGrant(tenantId: string, grantId: string): Promise<void> {
-  return request<void>(
-    `/api/tenants/${tenantId}/grants/${grantId}`,
-    (data) => data as void,
-    { method: "DELETE" },
-  );
+  return request<void>(`/api/tenants/${tenantId}/grants/${grantId}`, (data) => data as void, {
+    method: "DELETE",
+  });
 }
 
 /**
@@ -240,9 +202,8 @@ export function evaluate(
   resource: string,
   action: string,
 ): Promise<typeof EvaluateResult.infer> {
-  return request(
-    `/api/tenants/${tenantId}/principals/${principalId}/evaluate`,
-    EvaluateResult,
-    { method: "POST", body: JSON.stringify({ resource, action }) },
-  );
+  return request(`/api/tenants/${tenantId}/principals/${principalId}/evaluate`, EvaluateResult, {
+    method: "POST",
+    body: JSON.stringify({ resource, action }),
+  });
 }
diff --git a/packages/settings-ui/src/webhook-secret-panel.tsx b/packages/settings-ui/src/webhook-secret-panel.tsx
index 6b8dcd7c85..7e17b89cb9 100644
--- a/packages/settings-ui/src/webhook-secret-panel.tsx
+++ b/packages/settings-ui/src/webhook-secret-panel.tsx
@@ -13,13 +13,7 @@ import { Copy } from "@corbits/icons";
 import { useEffect, useRef, useState } from "react";
 
 /** Copies `value` to the clipboard, showing "Copied" for 1.5s. */
-export function CopyButton({
-  value,
-  label,
-}: {
-  readonly value: string;
-  readonly label: string;
-}) {
+export function CopyButton({ value, label }: { readonly value: string; readonly label: string }) {
   const [copied, setCopied] = useState(false);
   const resetTimer = useRef<ReturnType<typeof setTimeout> | null>(null);
   useEffect(() => {
@@ -95,15 +89,11 @@ export function WebhookSecretPanel({
   return (
     <div className="flex flex-col gap-3">
       <p className="text-xs text-[var(--ui-fg-muted)]" role="status">
-        This secret is shown once — copy it now. It signs every delivery to this
-        URL; losing it means rotating for a new one.
+        This secret is shown once — copy it now. It signs every delivery to this URL; losing it
+        means rotating for a new one.
       </p>
       <CopyableCodeRow label="Hook URL" value={url} copyLabel="Copy hook URL" />
-      <CopyableCodeRow
-        label="Signing secret"
-        value={secret}
-        copyLabel="Copy signing secret"
-      />
+      <CopyableCodeRow label="Signing secret" value={secret} copyLabel="Copy signing secret" />
       {samplePayload !== undefined && (
         <div className="flex flex-col gap-1">
           <span className="text-xs font-medium">Example payload</span>
@@ -112,8 +102,7 @@ export function WebhookSecretPanel({
           </pre>
           <p className="text-xs text-[var(--ui-fg-muted)]">
             Any valid JSON body with a matching{" "}
-            <code className="font-mono">X-Webhook-Signature</code> header starts
-            a run.
+            <code className="font-mono">X-Webhook-Signature</code> header starts a run.
           </p>
         </div>
       )}
diff --git a/packages/settings-ui/test/access.test.ts b/packages/settings-ui/test/access.test.ts
index bfe80e67ef..f51421d8bc 100644
--- a/packages/settings-ui/test/access.test.ts
+++ b/packages/settings-ui/test/access.test.ts
@@ -19,12 +19,9 @@ const json = (body: unknown, status = 200) =>
     headers: { "content-type": "application/json" },
   });
 
-function stubFetch(
-  respond: (path: string) => Response | Promise<Response>,
-): void {
+function stubFetch(respond: (path: string) => Response | Promise<Response>): void {
   globalThis.fetch = ((input: RequestInfo | URL) => {
-    const path =
-      typeof input === "string" ? input : new URL(String(input)).pathname;
+    const path = typeof input === "string" ? input : new URL(String(input)).pathname;
     return Promise.resolve(respond(path));
   }) as typeof fetch;
 }
@@ -32,40 +29,28 @@ function stubFetch(
 describe("probeSectionAccess", () => {
   test("an allow effect is allowed", async () => {
     stubFetch(() => json({ effect: "allow", matchingGrants: [] }));
-    await expect(
-      probeSectionAccess("tnt_1", "prn_1", "principal"),
-    ).resolves.toBe("allowed");
+    await expect(probeSectionAccess("tnt_1", "prn_1", "principal")).resolves.toBe("allowed");
   });
 
   test("a deny effect is denied", async () => {
     stubFetch(() => json({ effect: "deny", matchingGrants: [] }));
-    await expect(
-      probeSectionAccess("tnt_1", "prn_1", "principal"),
-    ).resolves.toBe("denied");
+    await expect(probeSectionAccess("tnt_1", "prn_1", "principal")).resolves.toBe("denied");
   });
 
   test("an ask effect is denied — only allow is allowed", async () => {
     stubFetch(() => json({ effect: "ask", matchingGrants: [] }));
-    await expect(probeSectionAccess("tnt_1", "prn_1", "role")).resolves.toBe(
-      "denied",
-    );
+    await expect(probeSectionAccess("tnt_1", "prn_1", "role")).resolves.toBe("denied");
   });
 
   test("a 5xx is error, not denied", async () => {
     stubFetch(() => json({}, 500));
-    await expect(probeSectionAccess("tnt_1", "prn_1", "grant")).resolves.toBe(
-      "error",
-    );
+    await expect(probeSectionAccess("tnt_1", "prn_1", "grant")).resolves.toBe("error");
   });
 
   test("a network failure is error, not denied", async () => {
     globalThis.fetch = (() =>
-      Promise.reject(
-        new TypeError("Failed to fetch"),
-      )) as unknown as typeof fetch;
-    await expect(
-      probeSectionAccess("tnt_1", "prn_1", "credential"),
-    ).resolves.toBe("error");
+      Promise.reject(new TypeError("Failed to fetch"))) as unknown as typeof fetch;
+    await expect(probeSectionAccess("tnt_1", "prn_1", "credential")).resolves.toBe("error");
   });
 });
 
diff --git a/packages/settings-ui/test/account-section.test.tsx b/packages/settings-ui/test/account-section.test.tsx
index 9e24aa145b..523eced0bb 100644
--- a/packages/settings-ui/test/account-section.test.tsx
+++ b/packages/settings-ui/test/account-section.test.tsx
@@ -81,9 +81,7 @@ describe("AccountSectionView", () => {
         emailVerified={true}
       />,
     );
-    expect(el.querySelector('[role="img"]')?.getAttribute("aria-label")).toBe(
-      "Ada Lovelace",
-    );
+    expect(el.querySelector('[role="img"]')?.getAttribute("aria-label")).toBe("Ada Lovelace");
     expect(el.textContent).toContain("Ada Lovelace");
     expect(el.textContent).toContain("Account details");
     expect(el.textContent).toContain("verified");
@@ -135,9 +133,7 @@ describe("AppearanceSection", () => {
     );
     const select = el.querySelector("select") as HTMLSelectElement | null;
     expect(select?.value).toBe("system");
-    const optionValues = [...(select?.options ?? [])].map(
-      (option) => option.value,
-    );
+    const optionValues = [...(select?.options ?? [])].map((option) => option.value);
     expect(optionValues).toEqual(["system", "light", "dark"]);
   });
 
diff --git a/packages/settings-ui/test/api-request.test.ts b/packages/settings-ui/test/api-request.test.ts
index a162fd74db..f0062b67aa 100644
--- a/packages/settings-ui/test/api-request.test.ts
+++ b/packages/settings-ui/test/api-request.test.ts
@@ -39,9 +39,9 @@ describe("readErrorEnvelope", () => {
   });
 
   test("falls back when the body has no usable envelope shape", () => {
-    expect(
-      readErrorEnvelope(500, { error: "boom" }, "saving that connection"),
-    ).toBe("The server answered 500 while saving that connection.");
+    expect(readErrorEnvelope(500, { error: "boom" }, "saving that connection")).toBe(
+      "The server answered 500 while saving that connection.",
+    );
   });
 });
 
diff --git a/packages/settings-ui/test/api.test.ts b/packages/settings-ui/test/api.test.ts
index eed87d2f67..1d775bc86a 100644
--- a/packages/settings-ui/test/api.test.ts
+++ b/packages/settings-ui/test/api.test.ts
@@ -18,8 +18,7 @@ type RecordedCall = { readonly path: string; readonly init?: RequestInit };
 function stubFetch(respond: (path: string) => Response): RecordedCall[] {
   const calls: RecordedCall[] = [];
   globalThis.fetch = ((input: RequestInfo | URL, init?: RequestInit) => {
-    const path =
-      typeof input === "string" ? input : new URL(String(input)).pathname;
+    const path = typeof input === "string" ? input : new URL(String(input)).pathname;
     calls.push(init === undefined ? { path } : { path, init });
     return Promise.resolve(respond(path));
   }) as typeof fetch;
@@ -78,8 +77,6 @@ describe("renameBench", () => {
 
   test("throws a SettingsApiError on a malformed response", async () => {
     stubFetch(() => json({ id: "tnt_1" }));
-    await expect(renameBench("tnt_1", "New name")).rejects.toBeInstanceOf(
-      SettingsApiError,
-    );
+    await expect(renameBench("tnt_1", "New name")).rejects.toBeInstanceOf(SettingsApiError);
   });
 });
diff --git a/packages/settings-ui/test/connections-api.test.ts b/packages/settings-ui/test/connections-api.test.ts
index 468314c383..99f019aabd 100644
--- a/packages/settings-ui/test/connections-api.test.ts
+++ b/packages/settings-ui/test/connections-api.test.ts
@@ -21,8 +21,7 @@ type RecordedCall = { readonly path: string; readonly init?: RequestInit };
 function stubFetch(respond: (path: string) => Response): RecordedCall[] {
   const calls: RecordedCall[] = [];
   globalThis.fetch = ((input: RequestInfo | URL, init?: RequestInit) => {
-    const path =
-      typeof input === "string" ? input : new URL(String(input)).pathname;
+    const path = typeof input === "string" ? input : new URL(String(input)).pathname;
     calls.push(init === undefined ? { path } : { path, init });
     return Promise.resolve(respond(path));
   }) as typeof fetch;
@@ -37,34 +36,24 @@ const json = (body: unknown, status = 200) =>
 
 describe("fetchOAuthConfigured", () => {
   test("requests the tenant-scoped oauth-configured route and parses the map", async () => {
-    const calls = stubFetch(() =>
-      json({ openrouter: true, huggingface: false }),
-    );
+    const calls = stubFetch(() => json({ openrouter: true, huggingface: false }));
 
     const result = await fetchOAuthConfigured("tnt_1");
 
-    expect(calls[0]?.path).toBe(
-      "/api/tenants/tnt_1/connections/oauth-configured",
-    );
+    expect(calls[0]?.path).toBe("/api/tenants/tnt_1/connections/oauth-configured");
     expect(result).toEqual({ openrouter: true, huggingface: false });
   });
 
   test("throws ConnectionsApiError on a malformed response", async () => {
     stubFetch(() => json({ openrouter: "not-a-boolean" }));
 
-    await expect(fetchOAuthConfigured("tnt_1")).rejects.toBeInstanceOf(
-      ConnectionsApiError,
-    );
+    await expect(fetchOAuthConfigured("tnt_1")).rejects.toBeInstanceOf(ConnectionsApiError);
   });
 
   test("throws ConnectionsApiError with the envelope message on a non-2xx", async () => {
-    stubFetch(() =>
-      json({ error: { code: "forbidden", message: "nope" } }, 403),
-    );
+    stubFetch(() => json({ error: { code: "forbidden", message: "nope" } }, 403));
 
-    await expect(fetchOAuthConfigured("tnt_1")).rejects.toBeInstanceOf(
-      ConnectionsApiError,
-    );
+    await expect(fetchOAuthConfigured("tnt_1")).rejects.toBeInstanceOf(ConnectionsApiError);
   });
 
   test("falls back to a path-free message when the body has no envelope", async () => {
@@ -84,22 +73,16 @@ describe("fetchOAuthConfigured", () => {
 
 describe("completeConnectorCredential", () => {
   test("posts the api key and returns the stored credential id", async () => {
-    const calls = stubFetch(() =>
-      json({ credentialId: "cred_1", status: "active" }, 200),
-    );
+    const calls = stubFetch(() => json({ credentialId: "cred_1", status: "active" }, 200));
     const result = await completeConnectorCredential("tnt_1", "granola", "key");
-    expect(calls[0]?.path).toBe(
-      "/api/tenants/tnt_1/connections/granola/complete",
-    );
+    expect(calls[0]?.path).toBe("/api/tenants/tnt_1/connections/granola/complete");
     expect(result).toEqual({ credentialId: "cred_1", status: "active" });
   });
 
   // CL-6682: a key copied from a provider console often carries a
   // trailing newline; sent verbatim it 401s a perfectly valid key.
   test("strips leading/trailing whitespace from the pasted key", async () => {
-    const calls = stubFetch(() =>
-      json({ credentialId: "cred_1", status: "active" }, 200),
-    );
+    const calls = stubFetch(() => json({ credentialId: "cred_1", status: "active" }, 200));
     await completeConnectorCredential("tnt_1", "granola", " sk-good\n");
     const body = JSON.parse(String(calls[0]?.init?.body));
     expect(body).toEqual({ apiKey: "sk-good" });
@@ -120,9 +103,7 @@ describe("completeConnectorCredential", () => {
         422,
       ),
     );
-    await expect(
-      completeConnectorCredential("tnt_1", "granola", "key"),
-    ).rejects.toThrow("bad key");
+    await expect(completeConnectorCredential("tnt_1", "granola", "key")).rejects.toThrow("bad key");
   });
 });
 
@@ -130,9 +111,7 @@ describe("disconnectConnector", () => {
   test("DELETEs the connector's disconnect route", async () => {
     const calls = stubFetch(() => json(undefined, 204));
     await disconnectConnector("tnt_1", "granola");
-    expect(calls[0]?.path).toBe(
-      "/api/tenants/tnt_1/connections/granola/disconnect",
-    );
+    expect(calls[0]?.path).toBe("/api/tenants/tnt_1/connections/granola/disconnect");
     expect(calls[0]?.init?.method).toBe("DELETE");
   });
 
@@ -149,8 +128,6 @@ describe("disconnectConnector", () => {
         500,
       ),
     );
-    await expect(disconnectConnector("tnt_1", "granola")).rejects.toThrow(
-      "try again",
-    );
+    await expect(disconnectConnector("tnt_1", "granola")).rejects.toThrow("try again");
   });
 });
diff --git a/packages/settings-ui/test/connections-default-model-pick.test.tsx b/packages/settings-ui/test/connections-default-model-pick.test.tsx
index 8424e232fb..ea805ee478 100644
--- a/packages/settings-ui/test/connections-default-model-pick.test.tsx
+++ b/packages/settings-ui/test/connections-default-model-pick.test.tsx
@@ -22,8 +22,7 @@ const json = (body: unknown, status = 200) =>
     headers: { "content-type": "application/json" },
   });
 
-const settle = () =>
-  act(() => new Promise((resolve) => setTimeout(resolve, 10)));
+const settle = () => act(() => new Promise((resolve) => setTimeout(resolve, 10)));
 
 const STAMP = "2026-01-01T00:00:00.000Z";
 
@@ -137,22 +136,16 @@ describe("Global model route", () => {
         ...(init?.body !== undefined ? { body: String(init.body) } : {}),
       });
       if (url === "/api/tenants/ten_1/credentials") {
-        return Promise.resolve(
-          json({ data: [ANTHROPIC_CREDENTIAL], nextCursor: null }),
-        );
+        return Promise.resolve(json({ data: [ANTHROPIC_CREDENTIAL], nextCursor: null }));
       }
       if (url === "/api/tenants/ten_1/providers") {
-        return Promise.resolve(
-          json({ data: [ANTHROPIC_PROVIDER], nextCursor: null }),
-        );
+        return Promise.resolve(json({ data: [ANTHROPIC_PROVIDER], nextCursor: null }));
       }
       if (url === "/api/tenants/ten_1/connections/oauth-configured") {
         return Promise.resolve(json({}));
       }
       if (url === "/api/tenants/ten_1/models") {
-        return Promise.resolve(
-          json(resolvedModels(patched ? 0 : 0, patched ? -1 : 1)),
-        );
+        return Promise.resolve(json(resolvedModels(patched ? 0 : 0, patched ? -1 : 1)));
       }
       if (url === "/api/tenants/ten_1/catalog/offerings") {
         return Promise.resolve(json({ data: OWN_OFFERINGS, nextCursor: null }));
@@ -187,8 +180,7 @@ describe("Global model route", () => {
       await settle();
 
       const patchCall = calls.find(
-        (call) =>
-          call.url === "/api/tenants/ten_1/catalog/offerings/offering_haiku",
+        (call) => call.url === "/api/tenants/ten_1/catalog/offerings/offering_haiku",
       );
       expect(patchCall?.method).toBe("PATCH");
       expect(JSON.parse(patchCall?.body ?? "{}")).toEqual({ priority: -1 });
@@ -213,22 +205,16 @@ describe("Global model route", () => {
         method: init?.method ?? "GET",
       });
       if (url === "/api/tenants/ten_1/credentials") {
-        return Promise.resolve(
-          json({ data: [ANTHROPIC_CREDENTIAL], nextCursor: null }),
-        );
+        return Promise.resolve(json({ data: [ANTHROPIC_CREDENTIAL], nextCursor: null }));
       }
       if (url === "/api/tenants/ten_1/providers") {
-        return Promise.resolve(
-          json({ data: [ANTHROPIC_PROVIDER], nextCursor: null }),
-        );
+        return Promise.resolve(json({ data: [ANTHROPIC_PROVIDER], nextCursor: null }));
       }
       if (url === "/api/tenants/ten_1/connections/oauth-configured") {
         return Promise.resolve(json({}));
       }
       if (url === "/api/tenants/ten_1/models") {
-        return Promise.resolve(
-          json(resolvedModels(patched ? 0 : 0, patched ? -1 : 1)),
-        );
+        return Promise.resolve(json(resolvedModels(patched ? 0 : 0, patched ? -1 : 1)));
       }
       if (url === "/api/tenants/ten_1/catalog/offerings") {
         return Promise.resolve(json({ data: OWN_OFFERINGS, nextCursor: null }));
@@ -259,18 +245,12 @@ describe("Global model route", () => {
       });
       await settle();
 
-      const writes = calls.filter(
-        (call) => call.method !== "GET" && call.method !== "HEAD",
-      );
+      const writes = calls.filter((call) => call.method !== "GET" && call.method !== "HEAD");
       expect(writes.length).toBeGreaterThan(0);
       expect(
-        writes.every((call) =>
-          call.url.startsWith("/api/tenants/ten_1/catalog/offerings/"),
-        ),
+        writes.every((call) => call.url.startsWith("/api/tenants/ten_1/catalog/offerings/")),
       ).toBe(true);
-      expect(
-        calls.some((call) => call.url.includes("/agent-definitions")),
-      ).toBe(false);
+      expect(calls.some((call) => call.url.includes("/agent-definitions"))).toBe(false);
     } finally {
       act(() => root.unmount());
       container.remove();
diff --git a/packages/settings-ui/test/connections-disconnect-flow.test.tsx b/packages/settings-ui/test/connections-disconnect-flow.test.tsx
index b9d683c414..203c50e4cf 100644
--- a/packages/settings-ui/test/connections-disconnect-flow.test.tsx
+++ b/packages/settings-ui/test/connections-disconnect-flow.test.tsx
@@ -24,8 +24,7 @@ const json = (body: unknown, status = 200) =>
     headers: { "content-type": "application/json" },
   });
 
-const settle = () =>
-  act(() => new Promise((resolve) => setTimeout(resolve, 10)));
+const settle = () => act(() => new Promise((resolve) => setTimeout(resolve, 10)));
 
 const STAMP = "2026-01-01T00:00:00.000Z";
 
@@ -96,14 +95,10 @@ describe("Connections disconnect", () => {
     globalThis.fetch = ((url: string, init?: RequestInit) => {
       calls.push({ url, method: init?.method ?? "GET" });
       if (url === "/api/tenants/ten_1/credentials") {
-        return Promise.resolve(
-          json({ data: [ANTHROPIC_CREDENTIAL], nextCursor: null }),
-        );
+        return Promise.resolve(json({ data: [ANTHROPIC_CREDENTIAL], nextCursor: null }));
       }
       if (url === "/api/tenants/ten_1/providers") {
-        return Promise.resolve(
-          json({ data: [ANTHROPIC_PROVIDER], nextCursor: null }),
-        );
+        return Promise.resolve(json({ data: [ANTHROPIC_PROVIDER], nextCursor: null }));
       }
       if (url === "/api/tenants/ten_1/connections/oauth-configured") {
         return Promise.resolve(json({}));
@@ -130,9 +125,7 @@ describe("Connections disconnect", () => {
       expect(defaultModel?.value).toBe("claude-sonnet-5");
 
       const rows = [...container.querySelectorAll(".settings-connection-row")];
-      const anthropicRow = rows.find((row) =>
-        row.textContent?.includes("Anthropic"),
-      );
+      const anthropicRow = rows.find((row) => row.textContent?.includes("Anthropic"));
       expect(anthropicRow).not.toBeUndefined();
       const disconnectButton = anthropicRow?.querySelector(
         ".settings-connection-row-disconnect-action",
@@ -141,28 +134,20 @@ describe("Connections disconnect", () => {
 
       // ConfirmButton: arm, then confirm.
       act(() => {
-        disconnectButton?.dispatchEvent(
-          new MouseEvent("click", { bubbles: true }),
-        );
+        disconnectButton?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
       });
       act(() => {
-        disconnectButton?.dispatchEvent(
-          new MouseEvent("click", { bubbles: true }),
-        );
+        disconnectButton?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
       });
       await settle();
 
-      const disconnectCall = calls.find((call) =>
-        call.url.includes("/disconnect"),
-      );
+      const disconnectCall = calls.find((call) => call.url.includes("/disconnect"));
       expect(disconnectCall).toEqual({
         url: "/api/tenants/ten_1/connections/anthropic/disconnect",
         method: "DELETE",
       });
       expect(
-        calls.some(
-          (call) => call.url === "/api/tenants/ten_1/credentials/crd_anthropic",
-        ),
+        calls.some((call) => call.url === "/api/tenants/ten_1/credentials/crd_anthropic"),
       ).toBe(false);
     } finally {
       act(() => root.unmount());
@@ -203,22 +188,16 @@ describe("Connections disconnect", () => {
     try {
       await settle();
       const rows = [...container.querySelectorAll(".settings-connection-row")];
-      const anthropicRow = rows.find((row) =>
-        row.textContent?.includes("Anthropic"),
-      );
+      const anthropicRow = rows.find((row) => row.textContent?.includes("Anthropic"));
       const disconnectButton = anthropicRow?.querySelector(
         ".settings-connection-row-disconnect-action",
       ) as HTMLButtonElement | null;
 
       act(() => {
-        disconnectButton?.dispatchEvent(
-          new MouseEvent("click", { bubbles: true }),
-        );
+        disconnectButton?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
       });
       act(() => {
-        disconnectButton?.dispatchEvent(
-          new MouseEvent("click", { bubbles: true }),
-        );
+        disconnectButton?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
       });
       await settle();
 
diff --git a/packages/settings-ui/test/connections-pinned-tooltip.test.tsx b/packages/settings-ui/test/connections-pinned-tooltip.test.tsx
index eabc41704b..cc2a6a518f 100644
--- a/packages/settings-ui/test/connections-pinned-tooltip.test.tsx
+++ b/packages/settings-ui/test/connections-pinned-tooltip.test.tsx
@@ -19,8 +19,7 @@ const json = (body: unknown) =>
     headers: { "content-type": "application/json" },
   });
 
-const settle = () =>
-  act(() => new Promise((resolve) => setTimeout(resolve, 10)));
+const settle = () => act(() => new Promise((resolve) => setTimeout(resolve, 10)));
 
 function mockFetch() {
   globalThis.fetch = (async (url: string) => {
@@ -65,9 +64,7 @@ describe("AI provider scope", () => {
       await settle();
 
       const cards = [...container.querySelectorAll(".settings-connection-row")];
-      const githubCard = cards.find((card) =>
-        card.textContent?.includes("GitHub"),
-      );
+      const githubCard = cards.find((card) => card.textContent?.includes("GitHub"));
       expect(githubCard).toBeUndefined();
     } finally {
       act(() => root.unmount());
diff --git a/packages/settings-ui/test/connections-refresh-on-visibility.test.tsx b/packages/settings-ui/test/connections-refresh-on-visibility.test.tsx
index b467852f0c..c651ede139 100644
--- a/packages/settings-ui/test/connections-refresh-on-visibility.test.tsx
+++ b/packages/settings-ui/test/connections-refresh-on-visibility.test.tsx
@@ -21,8 +21,7 @@ const json = (body: unknown, status = 200) =>
     headers: { "content-type": "application/json" },
   });
 
-const settle = () =>
-  act(() => new Promise((resolve) => setTimeout(resolve, 10)));
+const settle = () => act(() => new Promise((resolve) => setTimeout(resolve, 10)));
 
 function renderSection(tenantId: string | null) {
   const container = document.createElement("div");
@@ -40,13 +39,10 @@ function stubFetch(onCredentialsFetch: () => void): typeof fetch {
       onCredentialsFetch();
       return json({ data: [], nextCursor: null });
     }
-    if (url === "/api/tenants/ten_1/providers")
-      return json({ data: [], nextCursor: null });
-    if (url === "/api/tenants/ten_1/connections/oauth-configured")
-      return json({});
+    if (url === "/api/tenants/ten_1/providers") return json({ data: [], nextCursor: null });
+    if (url === "/api/tenants/ten_1/connections/oauth-configured") return json({});
     if (url === "/api/tenants/ten_1/models") return json([]);
-    if (url === "/api/tenants/ten_1/catalog/offerings")
-      return json({ data: [], nextCursor: null });
+    if (url === "/api/tenants/ten_1/catalog/offerings") return json({ data: [], nextCursor: null });
     throw new Error(`unexpected fetch: ${url}`);
   }) as unknown as typeof fetch;
 }
@@ -92,10 +88,7 @@ describe("ConnectionsSection refresh-on-visibility effect", () => {
 
       act(() => root.unmount());
 
-      expect(documentRemoveSpy).toHaveBeenCalledWith(
-        "visibilitychange",
-        visibilityHandler,
-      );
+      expect(documentRemoveSpy).toHaveBeenCalledWith("visibilitychange", visibilityHandler);
       expect(windowRemoveSpy).toHaveBeenCalledWith("focus", focusHandler);
     } finally {
       container.remove();
@@ -116,14 +109,8 @@ describe("ConnectionsSection refresh-on-visibility effect", () => {
     try {
       await settle();
 
-      expect(
-        documentAddSpy.mock.calls.some(
-          (call) => call[0] === "visibilitychange",
-        ),
-      ).toBe(false);
-      expect(windowAddSpy.mock.calls.some((call) => call[0] === "focus")).toBe(
-        false,
-      );
+      expect(documentAddSpy.mock.calls.some((call) => call[0] === "visibilitychange")).toBe(false);
+      expect(windowAddSpy.mock.calls.some((call) => call[0] === "focus")).toBe(false);
     } finally {
       act(() => root.unmount());
       container.remove();
diff --git a/packages/settings-ui/test/connections-status-visuals.test.tsx b/packages/settings-ui/test/connections-status-visuals.test.tsx
index e4e0165468..293ab6611e 100644
--- a/packages/settings-ui/test/connections-status-visuals.test.tsx
+++ b/packages/settings-ui/test/connections-status-visuals.test.tsx
@@ -21,8 +21,7 @@ const json = (body: unknown) =>
     headers: { "content-type": "application/json" },
   });
 
-const settle = () =>
-  act(() => new Promise((resolve) => setTimeout(resolve, 10)));
+const settle = () => act(() => new Promise((resolve) => setTimeout(resolve, 10)));
 
 describe("Connections status chips", () => {
   test("an unconfigured OAuth connector reads distinctly from a not-connected api-key one", async () => {
@@ -57,9 +56,7 @@ describe("Connections status chips", () => {
       expect(container.textContent).toContain("Needs setup");
       expect(container.textContent).toContain("Not connected");
 
-      const statusCaptions = [
-        ...container.querySelectorAll(".settings-connection-row-status"),
-      ];
+      const statusCaptions = [...container.querySelectorAll(".settings-connection-row-status")];
       const needsSetupCaption = statusCaptions.find(
         (caption) => caption.textContent === "Needs setup",
       );
@@ -72,12 +69,8 @@ describe("Connections status chips", () => {
       // is not a colored-accent state -- but they're still rendered from
       // distinct branches (the muted, no-Connect-button OAuth row vs. an
       // ordinary api-key row), each identifiable by its own row wrapper.
-      expect(
-        needsSetupCaption?.closest(".settings-connection-row-muted"),
-      ).not.toBeNull();
-      expect(
-        notConnectedCaption?.closest(".settings-connection-row-muted"),
-      ).toBeNull();
+      expect(needsSetupCaption?.closest(".settings-connection-row-muted")).not.toBeNull();
+      expect(notConnectedCaption?.closest(".settings-connection-row-muted")).toBeNull();
     } finally {
       act(() => root.unmount());
       container.remove();
diff --git a/packages/settings-ui/test/connector-credential-dialog.test.tsx b/packages/settings-ui/test/connector-credential-dialog.test.tsx
index cdae01c9a1..8c14b36c5b 100644
--- a/packages/settings-ui/test/connector-credential-dialog.test.tsx
+++ b/packages/settings-ui/test/connector-credential-dialog.test.tsx
@@ -78,14 +78,11 @@ function mount(
   return { container, root };
 }
 
-const settle = () =>
-  act(() => new Promise((resolve) => setTimeout(resolve, 10)));
+const settle = () => act(() => new Promise((resolve) => setTimeout(resolve, 10)));
 
 function primaryButton(): HTMLButtonElement {
   const button = [...document.body.querySelectorAll("button")].find(
-    (candidate) =>
-      candidate.textContent === "Connect" ||
-      candidate.textContent === "Connecting…",
+    (candidate) => candidate.textContent === "Connect" || candidate.textContent === "Connecting…",
   );
   expect(button).not.toBeUndefined();
   return button as HTMLButtonElement;
@@ -114,10 +111,10 @@ describe("ConnectorCredentialDialog", () => {
     globalThis.fetch = (async (input: RequestInfo | URL) => {
       const path = String(input);
       calls.push(path);
-      return new Response(
-        JSON.stringify({ credentialId: "cred_1", status: "active" }),
-        { status: 200, headers: { "content-type": "application/json" } },
-      );
+      return new Response(JSON.stringify({ credentialId: "cred_1", status: "active" }), {
+        status: 200,
+        headers: { "content-type": "application/json" },
+      });
     }) as unknown as typeof fetch;
 
     let connected = false;
@@ -183,8 +180,7 @@ describe("ConnectorCredentialDialog", () => {
       expect(body).not.toContain("A bad key never gets saved");
       expect(document.body.querySelector("input[type=password]")).toBeNull();
       expect(
-        (document.body.querySelector("input[type=text]") as HTMLInputElement)
-          .placeholder,
+        (document.body.querySelector("input[type=text]") as HTMLInputElement).placeholder,
       ).toBe("http://localhost:11434");
     } finally {
       act(() => root.unmount());
@@ -199,12 +195,8 @@ describe("ConnectorCredentialDialog", () => {
       expect(body).toContain(SETTINGS_STRINGS.connectionsDialogDescription);
       expect(body).toContain(SETTINGS_STRINGS.connectionsKeyLabel);
       expect(body).toContain("Sealed on save");
-      expect(body).not.toContain(
-        SETTINGS_STRINGS.connectionsDialogUrlDescription,
-      );
-      expect(
-        document.body.querySelector("input[type=password]"),
-      ).not.toBeNull();
+      expect(body).not.toContain(SETTINGS_STRINGS.connectionsDialogUrlDescription);
+      expect(document.body.querySelector("input[type=password]")).not.toBeNull();
     } finally {
       act(() => root.unmount());
       container.remove();
diff --git a/packages/settings-ui/test/credentials-api.test.ts b/packages/settings-ui/test/credentials-api.test.ts
index 26c83796de..5e3fbd9c27 100644
--- a/packages/settings-ui/test/credentials-api.test.ts
+++ b/packages/settings-ui/test/credentials-api.test.ts
@@ -21,8 +21,7 @@ type RecordedCall = { readonly path: string; readonly init?: RequestInit };
 function stubFetch(respond: (path: string) => Response): RecordedCall[] {
   const calls: RecordedCall[] = [];
   globalThis.fetch = ((input: RequestInfo | URL, init?: RequestInit) => {
-    const path =
-      typeof input === "string" ? input : new URL(String(input)).pathname;
+    const path = typeof input === "string" ? input : new URL(String(input)).pathname;
     calls.push(init === undefined ? { path } : { path, init });
     return Promise.resolve(respond(path));
   }) as typeof fetch;
@@ -60,9 +59,7 @@ const providerRow = {
 
 describe("listCredentials", () => {
   test("fetches the tenant's credentials page", async () => {
-    const calls = stubFetch(() =>
-      json({ data: [credentialRow], nextCursor: null }),
-    );
+    const calls = stubFetch(() => json({ data: [credentialRow], nextCursor: null }));
     const rows = await listCredentials("tnt_1");
     expect(calls[0]?.path).toBe("/api/tenants/tnt_1/credentials");
     expect(rows).toHaveLength(1);
@@ -71,9 +68,7 @@ describe("listCredentials", () => {
 
   test("throws CredentialsApiError on 403", async () => {
     stubFetch(() => json({ error: "nope" }, 403));
-    await expect(listCredentials("tnt_1")).rejects.toBeInstanceOf(
-      CredentialsApiError,
-    );
+    await expect(listCredentials("tnt_1")).rejects.toBeInstanceOf(CredentialsApiError);
   });
 
   test("a fallback error message never leaks the raw route", async () => {
@@ -84,18 +79,14 @@ describe("listCredentials", () => {
     } catch (cause) {
       expect(cause).toBeInstanceOf(CredentialsApiError);
       expect((cause as Error).message).not.toContain("/api/");
-      expect((cause as Error).message).toBe(
-        "The server answered 401 while loading credentials.",
-      );
+      expect((cause as Error).message).toBe("The server answered 401 while loading credentials.");
     }
   });
 });
 
 describe("listProviders", () => {
   test("fetches the tenant's providers page", async () => {
-    const calls = stubFetch(() =>
-      json({ data: [providerRow], nextCursor: null }),
-    );
+    const calls = stubFetch(() => json({ data: [providerRow], nextCursor: null }));
     const rows = await listProviders("tnt_1");
     expect(calls[0]?.path).toBe("/api/tenants/tnt_1/providers");
     expect(rows[0]?.plugin).toBe("openai");
diff --git a/packages/settings-ui/test/granola-webhook-api.test.ts b/packages/settings-ui/test/granola-webhook-api.test.ts
index e954a3b81a..d27af3d925 100644
--- a/packages/settings-ui/test/granola-webhook-api.test.ts
+++ b/packages/settings-ui/test/granola-webhook-api.test.ts
@@ -75,16 +75,13 @@ describe("listGranolaWebhookTriggers", () => {
   });
 
   test("falls back to a path-free message when the body has no envelope", async () => {
-    globalThis.fetch = (async () =>
-      jsonResponse(401, {})) as unknown as typeof fetch;
+    globalThis.fetch = (async () => jsonResponse(401, {})) as unknown as typeof fetch;
     try {
       await listGranolaWebhookTriggers("ten_1");
       throw new Error("expected listGranolaWebhookTriggers to reject");
     } catch (cause) {
       expect(cause).toBeInstanceOf(GranolaWebhookApiError);
-      expect((cause as Error).message).toBe(
-        "The server answered 401 while loading webhooks.",
-      );
+      expect((cause as Error).message).toBe("The server answered 401 while loading webhooks.");
       expect((cause as Error).message).not.toContain("/api/");
     }
   });
@@ -94,13 +91,9 @@ describe("createGranolaWebhookTrigger", () => {
   test("posts name + workflowDefinitionId and returns the once-shown secret", async () => {
     let requestedPath = "";
     let requestedBody: unknown;
-    globalThis.fetch = (async (
-      input: RequestInfo | URL,
-      init?: RequestInit,
-    ) => {
+    globalThis.fetch = (async (input: RequestInfo | URL, init?: RequestInit) => {
       requestedPath = String(input);
-      requestedBody =
-        init?.body !== undefined ? JSON.parse(String(init.body)) : undefined;
+      requestedBody = init?.body !== undefined ? JSON.parse(String(init.body)) : undefined;
       return jsonResponse(201, {
         id: "wht_2",
         tenantId: "ten_1",
@@ -115,11 +108,7 @@ describe("createGranolaWebhookTrigger", () => {
       });
     }) as unknown as typeof fetch;
 
-    const created = await createGranolaWebhookTrigger(
-      "ten_1",
-      "def_1",
-      "granola-call webhook",
-    );
+    const created = await createGranolaWebhookTrigger("ten_1", "def_1", "granola-call webhook");
     expect(requestedPath).toBe("/api/tenants/ten_1/webhook-triggers");
     expect(requestedBody).toEqual({
       name: "granola-call webhook",
@@ -151,9 +140,7 @@ describe("rotateGranolaWebhookTriggerSecret", () => {
     }) as unknown as typeof fetch;
 
     const rotated = await rotateGranolaWebhookTriggerSecret("ten_1", "wht_2");
-    expect(requestedPath).toBe(
-      "/api/tenants/ten_1/webhook-triggers/wht_2/rotate-secret",
-    );
+    expect(requestedPath).toBe("/api/tenants/ten_1/webhook-triggers/wht_2/rotate-secret");
     expect(rotated.secret).toBe("sec_rotated");
   });
 });
diff --git a/packages/settings-ui/test/granola-webhook-card.test.tsx b/packages/settings-ui/test/granola-webhook-card.test.tsx
index 4c2683dabb..f7285d8187 100644
--- a/packages/settings-ui/test/granola-webhook-card.test.tsx
+++ b/packages/settings-ui/test/granola-webhook-card.test.tsx
@@ -23,8 +23,7 @@ const json = (status: number, body: unknown) =>
     headers: { "content-type": "application/json" },
   });
 
-const settle = () =>
-  act(() => new Promise((resolve) => setTimeout(resolve, 10)));
+const settle = () => act(() => new Promise((resolve) => setTimeout(resolve, 10)));
 
 const descriptor: ConnectorDescriptor = {
   id: "granola-webhook",
@@ -35,9 +34,7 @@ const descriptor: ConnectorDescriptor = {
   feedsTools: [],
 };
 
-function definitionsResponse(
-  definitions: readonly { id: string; name: string }[],
-) {
+function definitionsResponse(definitions: readonly { id: string; name: string }[]) {
   return json(200, {
     data: definitions.map((d) => ({ ...d, status: "active" })),
     nextCursor: null,
@@ -49,9 +46,7 @@ function mount(): { container: HTMLDivElement; root: Root } {
   document.body.appendChild(container);
   const root = createRoot(container);
   act(() => {
-    root.render(
-      <GranolaWebhookCard tenantId="ten_1" descriptor={descriptor} />,
-    );
+    root.render(<GranolaWebhookCard tenantId="ten_1" descriptor={descriptor} />);
   });
   return { container, root };
 }
@@ -122,10 +117,7 @@ describe("GranolaWebhookCard", () => {
       if (url.startsWith("/api/tenants/ten_1/workflows/definitions")) {
         return definitionsResponse([{ id: "def_1", name: "granola-call" }]);
       }
-      if (
-        url === "/api/tenants/ten_1/webhook-triggers" &&
-        init?.method === "POST"
-      ) {
+      if (url === "/api/tenants/ten_1/webhook-triggers" && init?.method === "POST") {
         createBody = JSON.parse(String(init.body));
         return json(201, {
           id: "wht_new",
@@ -222,9 +214,7 @@ describe("GranolaWebhookCard", () => {
 
       // The invalidation warning must be visible before the destructive
       // click, not only after — this is the regression the review flagged.
-      expect(document.body.textContent?.toLowerCase()).toContain(
-        "stops verifying immediately",
-      );
+      expect(document.body.textContent?.toLowerCase()).toContain("stops verifying immediately");
 
       // The bound-and-hidden state reuses the same react-ui-backed field
       // row the rest of the dialog uses (see webhook-secret-panel.tsx),
diff --git a/packages/settings-ui/test/granola-webhook-manage-state.test.tsx b/packages/settings-ui/test/granola-webhook-manage-state.test.tsx
index 6aa9f64992..51fbc7d196 100644
--- a/packages/settings-ui/test/granola-webhook-manage-state.test.tsx
+++ b/packages/settings-ui/test/granola-webhook-manage-state.test.tsx
@@ -23,8 +23,7 @@ const json = (status: number, body: unknown) =>
     headers: { "content-type": "application/json" },
   });
 
-const settle = () =>
-  act(() => new Promise((resolve) => setTimeout(resolve, 10)));
+const settle = () => act(() => new Promise((resolve) => setTimeout(resolve, 10)));
 
 const descriptor: ConnectorDescriptor = {
   id: "granola-webhook",
@@ -40,9 +39,7 @@ function mount(): { container: HTMLDivElement; root: Root } {
   document.body.appendChild(container);
   const root = createRoot(container);
   act(() => {
-    root.render(
-      <GranolaWebhookCard tenantId="ten_1" descriptor={descriptor} />,
-    );
+    root.render(<GranolaWebhookCard tenantId="ten_1" descriptor={descriptor} />);
   });
   return { container, root };
 }
@@ -88,9 +85,7 @@ describe("GranolaWebhookCard Manage dialog (already connected)", () => {
       expect(document.body.textContent).toContain("/api/webhooks/wht_1");
       // Rotating should be flagged as immediately invalidating the old
       // secret, mirroring routines-page's WebhookTriggerPanel copy.
-      expect(document.body.textContent?.toLowerCase()).toContain(
-        "stops verifying immediately",
-      );
+      expect(document.body.textContent?.toLowerCase()).toContain("stops verifying immediately");
     } finally {
       act(() => root.unmount());
       container.remove();
diff --git a/packages/settings-ui/test/grants-section.test.tsx b/packages/settings-ui/test/grants-section.test.tsx
index 6744d9c753..e9e1254b3f 100644
--- a/packages/settings-ui/test/grants-section.test.tsx
+++ b/packages/settings-ui/test/grants-section.test.tsx
@@ -23,11 +23,7 @@ const timestamps = {
   updatedAt: "2026-01-01T00:00:00.000Z",
 };
 
-function principal(
-  kind: "user" | "agent" | "workflow",
-  id: string,
-  name: string,
-) {
+function principal(kind: "user" | "agent" | "workflow", id: string, name: string) {
   return {
     id,
     tenantId: "tnt_1",
@@ -40,9 +36,10 @@ function principal(
   };
 }
 
-function mountDialog(
-  principals: Parameters<typeof CreateGrantDialog>[0]["principals"] = [],
-): { container: HTMLDivElement; root: Root } {
+function mountDialog(principals: Parameters<typeof CreateGrantDialog>[0]["principals"] = []): {
+  container: HTMLDivElement;
+  root: Root;
+} {
   const container = document.createElement("div");
   document.body.appendChild(container);
   const root = createRoot(container);
@@ -65,9 +62,9 @@ describe("CreateGrantDialog", () => {
   test("renames the principal target-type option to name every kind it covers", () => {
     const { container, root } = mountDialog();
     try {
-      const cardTitles = [
-        ...document.body.querySelectorAll(".settings-kind-card-title"),
-      ].map((node) => node.textContent);
+      const cardTitles = [...document.body.querySelectorAll(".settings-kind-card-title")].map(
+        (node) => node.textContent,
+      );
       expect(cardTitles).not.toContain("A person");
       expect(cardTitles).toContain("A person, agent, or workflow");
     } finally {
@@ -80,19 +77,13 @@ describe("CreateGrantDialog", () => {
     const { container, root } = mountDialog();
     try {
       // KindCards renders a role="group" of pressable buttons, not <select>.
-      expect(
-        document.body.querySelector('[role=group][aria-label="Applies to"]'),
-      ).not.toBeNull();
-      expect(
-        document.body.querySelector('[role=group][aria-label="Resource"]'),
-      ).not.toBeNull();
+      expect(document.body.querySelector('[role=group][aria-label="Applies to"]')).not.toBeNull();
+      expect(document.body.querySelector('[role=group][aria-label="Resource"]')).not.toBeNull();
       // The plain-language resource label is the card's visible title; the
       // raw slug, if shown at all, is secondary card detail — never the
       // preview sentence's wording.
       expect(document.body.textContent).toContain("agent workflows");
-      const preview = document.body.querySelector(
-        '[data-testid="grant-preview"]',
-      );
+      const preview = document.body.querySelector('[data-testid="grant-preview"]');
       expect(preview?.textContent).not.toContain("workflow-definition");
     } finally {
       act(() => root.unmount());
@@ -122,10 +113,8 @@ describe("CreateGrantDialog", () => {
         );
       });
 
-      const principalCard = [
-        ...document.body.querySelectorAll("[role=group] button"),
-      ].find((button) =>
-        button.textContent?.includes("A person, agent, or workflow"),
+      const principalCard = [...document.body.querySelectorAll("[role=group] button")].find(
+        (button) => button.textContent?.includes("A person, agent, or workflow"),
       );
       expect(principalCard).not.toBeUndefined();
       act(() => (principalCard as HTMLButtonElement).click());
@@ -134,9 +123,7 @@ describe("CreateGrantDialog", () => {
       expect(optgroups.map((group) => group.label)).toEqual(
         PRINCIPAL_KIND_ORDER.map((kind) => PRINCIPAL_KIND_LABEL[kind]),
       );
-      expect(optgroups.map((group) => group.label)).not.toEqual([
-        ...PRINCIPAL_KIND_ORDER,
-      ]);
+      expect(optgroups.map((group) => group.label)).not.toEqual([...PRINCIPAL_KIND_ORDER]);
     } finally {
       act(() => root.unmount());
       container.remove();
diff --git a/packages/settings-ui/test/identity.test.ts b/packages/settings-ui/test/identity.test.ts
index c36379abde..3c29820377 100644
--- a/packages/settings-ui/test/identity.test.ts
+++ b/packages/settings-ui/test/identity.test.ts
@@ -3,11 +3,7 @@
 
 import { describe, expect, test } from "bun:test";
 
-import {
-  PRINCIPAL_KIND_LABEL,
-  PRINCIPAL_KIND_ORDER,
-  principalLabel,
-} from "../src/identity";
+import { PRINCIPAL_KIND_LABEL, PRINCIPAL_KIND_ORDER, principalLabel } from "../src/identity";
 
 describe("principalLabel", () => {
   test("passes through an already-humane display name unchanged", () => {
@@ -39,9 +35,7 @@ describe("principalLabel", () => {
   // scheme/host down to the last segment, which drags the wrapper's
   // trailing ")" along for the ride unless parens are stripped too.
   test("strips a trailing paren from a workflow principal's wrapped address", () => {
-    const result = principalLabel(
-      "Workflow (run_9f3a7c2e@alice-0ufqkxuy.localhost)",
-    );
+    const result = principalLabel("Workflow (run_9f3a7c2e@alice-0ufqkxuy.localhost)");
     expect(result.label).not.toContain("(");
     expect(result.label).not.toContain(")");
     expect(result.label).toBe("Alice 0ufqkxuy Localhost");
@@ -54,9 +48,7 @@ describe("principalLabel", () => {
 describe("PRINCIPAL_KIND_LABEL", () => {
   test("covers every kind in PRINCIPAL_KIND_ORDER with a distinct, honest label", () => {
     expect(PRINCIPAL_KIND_ORDER).toEqual(["user", "agent", "workflow"]);
-    const labels = PRINCIPAL_KIND_ORDER.map(
-      (kind) => PRINCIPAL_KIND_LABEL[kind],
-    );
+    const labels = PRINCIPAL_KIND_ORDER.map((kind) => PRINCIPAL_KIND_LABEL[kind]);
     expect(labels).toHaveLength(PRINCIPAL_KIND_ORDER.length);
     expect(new Set(labels).size).toBe(labels.length);
     expect(labels).toEqual(["Person", "Agent", "Workflow"]);
diff --git a/packages/settings-ui/test/oauth-start-href.test.ts b/packages/settings-ui/test/oauth-start-href.test.ts
index e36cb1c3cd..d331a98a4c 100644
--- a/packages/settings-ui/test/oauth-start-href.test.ts
+++ b/packages/settings-ui/test/oauth-start-href.test.ts
@@ -21,8 +21,6 @@ describe("oauthStartHref", () => {
   });
 
   test("never targets the onboarding mount", () => {
-    expect(oauthStartHref("tnt_1", "huggingface")).not.toContain(
-      "/api/onboarding/",
-    );
+    expect(oauthStartHref("tnt_1", "huggingface")).not.toContain("/api/onboarding/");
   });
 });
diff --git a/packages/settings-ui/test/people-section.test.tsx b/packages/settings-ui/test/people-section.test.tsx
index 9163334578..3ec91c0bf6 100644
--- a/packages/settings-ui/test/people-section.test.tsx
+++ b/packages/settings-ui/test/people-section.test.tsx
@@ -40,8 +40,7 @@ const json = (status: number, body: unknown) =>
     headers: { "content-type": "application/json" },
   });
 
-const settle = () =>
-  act(() => new Promise((resolve) => setTimeout(resolve, 10)));
+const settle = () => act(() => new Promise((resolve) => setTimeout(resolve, 10)));
 
 const timestamps = {
   createdAt: "2026-01-01T00:00:00.000Z",
@@ -193,9 +192,7 @@ describe("PeopleSection", () => {
       await settle();
       expect(container.textContent).toContain("Alice Anderson");
       expect(container.textContent).not.toContain("Invite someone");
-      expect(
-        calls.some((c) => c.url.includes("/access-policy/pending-invites")),
-      ).toBe(false);
+      expect(calls.some((c) => c.url.includes("/access-policy/pending-invites"))).toBe(false);
     } finally {
       act(() => root.unmount());
       container.remove();
@@ -219,10 +216,9 @@ describe("PeopleSection", () => {
           nextCursor: null,
         },
         "/api/tenants/tnt_1/roles": rolesPage,
-        "POST /api/tenants/tnt_1/principals/prn_human_2/roles/role_owner": () =>
-          json(200, {}),
-        "DELETE /api/tenants/tnt_1/principals/prn_human_2/roles/role_member":
-          () => json(204, undefined),
+        "POST /api/tenants/tnt_1/principals/prn_human_2/roles/role_owner": () => json(200, {}),
+        "DELETE /api/tenants/tnt_1/principals/prn_human_2/roles/role_member": () =>
+          json(204, undefined),
       },
       calls,
     );
@@ -245,16 +241,14 @@ describe("PeopleSection", () => {
       expect(
         calls.some(
           (c) =>
-            c.url ===
-              "/api/tenants/tnt_1/principals/prn_human_2/roles/role_member" &&
+            c.url === "/api/tenants/tnt_1/principals/prn_human_2/roles/role_member" &&
             c.init?.method === "DELETE",
         ),
       ).toBe(true);
       expect(
         calls.some(
           (c) =>
-            c.url ===
-              "/api/tenants/tnt_1/principals/prn_human_2/roles/role_owner" &&
+            c.url === "/api/tenants/tnt_1/principals/prn_human_2/roles/role_owner" &&
             c.init?.method === "POST",
         ),
       ).toBe(true);
@@ -280,9 +274,7 @@ describe("PeopleSection", () => {
     const { container, root } = mount();
     try {
       await settle();
-      const select = container.querySelector(
-        "tbody select",
-      ) as HTMLSelectElement;
+      const select = container.querySelector("tbody select") as HTMLSelectElement;
       expect(select.value).toBe("role_owner");
 
       act(() => {
@@ -294,13 +286,10 @@ describe("PeopleSection", () => {
       expect(
         calls.some(
           (c) =>
-            c.init?.method === "DELETE" ||
-            (c.init?.method === "POST" && c.url.includes("/roles/")),
+            c.init?.method === "DELETE" || (c.init?.method === "POST" && c.url.includes("/roles/")),
         ),
       ).toBe(false);
-      expect(container.textContent).toContain(
-        "This workbench needs at least one owner",
-      );
+      expect(container.textContent).toContain("This workbench needs at least one owner");
     } finally {
       act(() => root.unmount());
       container.remove();
@@ -321,18 +310,13 @@ describe("PeopleSection", () => {
       operation: "settings.people.updateStatus",
       principals: [humanPrincipal()],
       failingHandler: {
-        "PATCH /api/tenants/tnt_1/principals/prn_human_1": () =>
-          json(500, { error: "boom" }),
+        "PATCH /api/tenants/tnt_1/principals/prn_human_1": () => json(500, { error: "boom" }),
       },
       trigger: async (container) => {
-        const suspendButton = Array.from(
-          container.querySelectorAll("button"),
-        ).find((b) => b.textContent === "Suspend");
-        act(() =>
-          suspendButton?.dispatchEvent(
-            new MouseEvent("click", { bubbles: true }),
-          ),
+        const suspendButton = Array.from(container.querySelectorAll("button")).find(
+          (b) => b.textContent === "Suspend",
         );
+        act(() => suspendButton?.dispatchEvent(new MouseEvent("click", { bubbles: true })));
         await settle();
       },
     },
@@ -341,27 +325,18 @@ describe("PeopleSection", () => {
       operation: "settings.people.remove",
       principals: [humanPrincipal()],
       failingHandler: {
-        "DELETE /api/tenants/tnt_1/principals/prn_human_1": () =>
-          json(500, { error: "boom" }),
+        "DELETE /api/tenants/tnt_1/principals/prn_human_1": () => json(500, { error: "boom" }),
       },
       trigger: async (container) => {
-        const removeButton = Array.from(
-          container.querySelectorAll("button"),
-        ).find((b) => b.textContent === "Remove");
-        act(() =>
-          removeButton?.dispatchEvent(
-            new MouseEvent("click", { bubbles: true }),
-          ),
+        const removeButton = Array.from(container.querySelectorAll("button")).find(
+          (b) => b.textContent === "Remove",
         );
+        act(() => removeButton?.dispatchEvent(new MouseEvent("click", { bubbles: true })));
         await settle();
-        const confirmButton = Array.from(
-          container.querySelectorAll("button"),
-        ).find((b) => b.textContent === "Remove for good?");
-        act(() =>
-          confirmButton?.dispatchEvent(
-            new MouseEvent("click", { bubbles: true }),
-          ),
+        const confirmButton = Array.from(container.querySelectorAll("button")).find(
+          (b) => b.textContent === "Remove for good?",
         );
+        act(() => confirmButton?.dispatchEvent(new MouseEvent("click", { bubbles: true })));
         await settle();
       },
     },
@@ -378,8 +353,8 @@ describe("PeopleSection", () => {
         }),
       ],
       failingHandler: {
-        "DELETE /api/tenants/tnt_1/principals/prn_human_2/roles/role_member":
-          () => json(500, { error: "boom" }),
+        "DELETE /api/tenants/tnt_1/principals/prn_human_2/roles/role_member": () =>
+          json(500, { error: "boom" }),
       },
       trigger: async (container) => {
         const selects = container.querySelectorAll("tbody select");
@@ -419,8 +394,7 @@ describe("PeopleSection", () => {
         expect(
           reportErrorCalls.some(
             (call) =>
-              call.context.operation === testCase.operation &&
-              call.context.tenantId === "tnt_1",
+              call.context.operation === testCase.operation && call.context.tenantId === "tnt_1",
           ),
         ).toBe(true);
       } finally {
@@ -466,10 +440,7 @@ describe("PeopleTable Actions column", () => {
     expect(actionsCellOpenTag(markup)).toContain("settings-actions-cell");
     expect(markup).toContain("Remove");
 
-    const css = readFileSync(
-      new URL("../src/styles.css", import.meta.url),
-      "utf8",
-    );
+    const css = readFileSync(new URL("../src/styles.css", import.meta.url), "utf8");
     const cell = ruleFor(css, "settings-actions-cell");
     expect(cell).toContain("overflow: visible");
     expect(cell).toContain("min-width");
diff --git a/packages/settings-ui/test/query-retry.test.tsx b/packages/settings-ui/test/query-retry.test.tsx
index 6c70bcb878..77b52806ca 100644
--- a/packages/settings-ui/test/query-retry.test.tsx
+++ b/packages/settings-ui/test/query-retry.test.tsx
@@ -23,8 +23,7 @@ const json = (status: number, body: unknown) =>
     headers: { "content-type": "application/json" },
   });
 
-const settle = () =>
-  act(() => new Promise((resolve) => setTimeout(resolve, 10)));
+const settle = () => act(() => new Promise((resolve) => setTimeout(resolve, 10)));
 
 function mount(): { container: HTMLDivElement; root: Root } {
   const container = document.createElement("div");
diff --git a/packages/settings-ui/test/raw-id-sweep.test.tsx b/packages/settings-ui/test/raw-id-sweep.test.tsx
index d0227138d6..9110b6cebe 100644
--- a/packages/settings-ui/test/raw-id-sweep.test.tsx
+++ b/packages/settings-ui/test/raw-id-sweep.test.tsx
@@ -15,8 +15,7 @@ import { PeopleTable } from "../src/people-section";
 import { RolesTable } from "../src/roles-section";
 
 const AGENT_REF_ID = "agt_8f14e45fceea167a5a36dedd4bea2543";
-const UUID_PATTERN =
-  /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i;
+const UUID_PATTERN = /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i;
 
 function visibleText(markup: string): string {
   return markup.replace(/<[^>]*>/g, " ");
diff --git a/packages/settings-ui/test/resource-vocabulary.test.ts b/packages/settings-ui/test/resource-vocabulary.test.ts
index 97834142ce..c21d9a8234 100644
--- a/packages/settings-ui/test/resource-vocabulary.test.ts
+++ b/packages/settings-ui/test/resource-vocabulary.test.ts
@@ -5,10 +5,7 @@
 
 import { describe, expect, test } from "bun:test";
 
-import {
-  GRANT_RESOURCES,
-  GRANT_RESOURCE_LABEL,
-} from "../src/resource-vocabulary";
+import { GRANT_RESOURCES, GRANT_RESOURCE_LABEL } from "../src/resource-vocabulary";
 
 describe("GRANT_RESOURCE_LABEL", () => {
   test("covers every resource in GRANT_RESOURCES with a distinct, plain-language label", () => {
@@ -16,9 +13,7 @@ describe("GRANT_RESOURCE_LABEL", () => {
       expect(GRANT_RESOURCE_LABEL[resource]).toBeDefined();
       expect(GRANT_RESOURCE_LABEL[resource].length).toBeGreaterThan(0);
     }
-    const labels = GRANT_RESOURCES.map(
-      (resource) => GRANT_RESOURCE_LABEL[resource],
-    );
+    const labels = GRANT_RESOURCES.map((resource) => GRANT_RESOURCE_LABEL[resource]);
     expect(new Set(labels).size).toBe(labels.length);
   });
 
diff --git a/packages/settings-ui/test/roles-section.test.tsx b/packages/settings-ui/test/roles-section.test.tsx
index b04de79d25..820cf5a9b5 100644
--- a/packages/settings-ui/test/roles-section.test.tsx
+++ b/packages/settings-ui/test/roles-section.test.tsx
@@ -18,11 +18,7 @@ const timestamps = {
   updatedAt: "2026-01-01T00:00:00.000Z",
 };
 
-function principal(
-  kind: "user" | "agent" | "workflow",
-  id: string,
-  name: string,
-) {
+function principal(kind: "user" | "agent" | "workflow", id: string, name: string) {
   return {
     id,
     tenantId: "tnt_1",
@@ -158,10 +154,7 @@ describe("RolesTable Actions column", () => {
 
     expect(actionsCellOpenTag(markup)).toContain("settings-actions-cell");
 
-    const css = readFileSync(
-      new URL("../src/styles.css", import.meta.url),
-      "utf8",
-    );
+    const css = readFileSync(new URL("../src/styles.css", import.meta.url), "utf8");
     const cell = ruleFor(css, "settings-actions-cell");
     expect(cell).toContain("overflow: visible");
     expect(cell).toContain("min-width");
diff --git a/packages/settings-ui/test/section-registry.test.tsx b/packages/settings-ui/test/section-registry.test.tsx
index d81797bd7e..ee07e4b764 100644
--- a/packages/settings-ui/test/section-registry.test.tsx
+++ b/packages/settings-ui/test/section-registry.test.tsx
@@ -11,10 +11,7 @@
 import { describe, expect, test } from "bun:test";
 import { Robot } from "@corbits/icons";
 
-import {
-  insertEveryoneSections,
-  resolveSettingsSectionGroups,
-} from "../src/section-registry";
+import { insertEveryoneSections, resolveSettingsSectionGroups } from "../src/section-registry";
 import type { TenancyAccess } from "../src/access";
 import type { SettingsSection } from "../src/shell";
 
@@ -69,9 +66,7 @@ describe("resolveSettingsSectionGroups", () => {
       { id: "account", sections: ["account"] },
       { id: "everyone", sections: ["grants", "audit"] },
     ]);
-    expect(
-      groups.find((group) => group.id === "everyone")?.accessProbeFailed,
-    ).toBe(undefined);
+    expect(groups.find((group) => group.id === "everyone")?.accessProbeFailed).toBe(undefined);
   });
 
   test("a probe error withholds gated sections but is not an authenticated deny", () => {
@@ -86,16 +81,11 @@ describe("resolveSettingsSectionGroups", () => {
       { id: "account", sections: ["account"] },
       { id: "everyone", sections: ["audit"] },
     ]);
+    expect(groups.find((group) => group.id === "account")?.accessProbeFailed).toBe(undefined);
+    expect(groups.find((group) => group.id === "everyone")?.accessProbeFailed).toBe(true);
     expect(
-      groups.find((group) => group.id === "account")?.accessProbeFailed,
-    ).toBe(undefined);
-    expect(
-      groups.find((group) => group.id === "everyone")?.accessProbeFailed,
-    ).toBe(true);
-    expect(
-      resolveSettingsSectionGroups(denied).find(
-        (group) => group.id === "everyone",
-      )?.accessProbeFailed,
+      resolveSettingsSectionGroups(denied).find((group) => group.id === "everyone")
+        ?.accessProbeFailed,
     ).toBe(undefined);
   });
 
@@ -114,42 +104,35 @@ describe("resolveSettingsSectionGroups", () => {
         sections: ["connections", "roles", "grants", "audit"],
       },
     ]);
-    expect(
-      groups.find((group) => group.id === "everyone")?.accessProbeFailed,
-    ).toBe(true);
+    expect(groups.find((group) => group.id === "everyone")?.accessProbeFailed).toBe(true);
   });
 
   test("Roles, Grants, and Audit are tucked under Advanced; Connections and People are not", () => {
     const sections = resolveSettingsSectionGroups(allowed).find(
       (group) => group.id === "everyone",
     )?.sections;
-    expect(
-      sections?.filter((section) => section.advanced === true).map((s) => s.id),
-    ).toEqual(["roles", "grants", "audit"]);
-    expect(
-      sections?.filter((section) => section.advanced !== true).map((s) => s.id),
-    ).toEqual(["connections", "people"]);
+    expect(sections?.filter((section) => section.advanced === true).map((s) => s.id)).toEqual([
+      "roles",
+      "grants",
+      "audit",
+    ]);
+    expect(sections?.filter((section) => section.advanced !== true).map((s) => s.id)).toEqual([
+      "connections",
+      "people",
+    ]);
   });
 
   test("never registers the personal agent section — no preference store exists to back it yet", () => {
     for (const access of [denied, allowed]) {
-      const account = resolveSettingsSectionGroups(access).find(
-        (group) => group.id === "account",
-      );
-      expect(account?.sections.map((section) => section.id)).not.toContain(
-        "agent",
-      );
+      const account = resolveSettingsSectionGroups(access).find((group) => group.id === "account");
+      expect(account?.sections.map((section) => section.id)).not.toContain("agent");
     }
   });
 
   test("never registers the notifications section — no preference store exists to back it yet", () => {
     for (const access of [denied, allowed]) {
-      const account = resolveSettingsSectionGroups(access).find(
-        (group) => group.id === "account",
-      );
-      expect(account?.sections.map((section) => section.id)).not.toContain(
-        "chat",
-      );
+      const account = resolveSettingsSectionGroups(access).find((group) => group.id === "account");
+      expect(account?.sections.map((section) => section.id)).not.toContain("chat");
     }
   });
 
@@ -169,10 +152,7 @@ describe("insertEveryoneSections", () => {
   ];
 
   test("splices host sections into Everyone, at its front", () => {
-    const groups = insertEveryoneSections(
-      resolveSettingsSectionGroups(denied),
-      extra,
-    );
+    const groups = insertEveryoneSections(resolveSettingsSectionGroups(denied), extra);
     expect(ids(groups)).toEqual([
       { id: "account", sections: ["account"] },
       { id: "everyone", sections: ["agents", "skills", "audit"] },
@@ -180,10 +160,7 @@ describe("insertEveryoneSections", () => {
   });
 
   test("leaves Account untouched", () => {
-    const groups = insertEveryoneSections(
-      resolveSettingsSectionGroups(allowed),
-      extra,
-    );
+    const groups = insertEveryoneSections(resolveSettingsSectionGroups(allowed), extra);
     const account = groups.find((group) => group.id === "account");
     expect(account?.sections.map((section) => section.id)).toEqual(["account"]);
   });
diff --git a/packages/settings-ui/test/tenancy-api.test.ts b/packages/settings-ui/test/tenancy-api.test.ts
index d382e82ead..e151589016 100644
--- a/packages/settings-ui/test/tenancy-api.test.ts
+++ b/packages/settings-ui/test/tenancy-api.test.ts
@@ -31,8 +31,7 @@ type RecordedCall = { readonly path: string; readonly init?: RequestInit };
 function stubFetch(respond: (path: string) => Response): RecordedCall[] {
   const calls: RecordedCall[] = [];
   globalThis.fetch = ((input: RequestInfo | URL, init?: RequestInit) => {
-    const path =
-      typeof input === "string" ? input : new URL(String(input)).pathname;
+    const path = typeof input === "string" ? input : new URL(String(input)).pathname;
     calls.push(init === undefined ? { path } : { path, init });
     return Promise.resolve(respond(path));
   }) as typeof fetch;
@@ -76,16 +75,12 @@ describe("listPrincipals", () => {
 
   test("throws an UnauthenticatedError on 401", async () => {
     stubFetch(() => json(undefined, 401));
-    await expect(listPrincipals("tnt_1")).rejects.toBeInstanceOf(
-      UnauthenticatedError,
-    );
+    await expect(listPrincipals("tnt_1")).rejects.toBeInstanceOf(UnauthenticatedError);
   });
 
   test("throws a TenancyApiError on 403", async () => {
     stubFetch(() => json(undefined, 403));
-    await expect(listPrincipals("tnt_1")).rejects.toBeInstanceOf(
-      TenancyApiError,
-    );
+    await expect(listPrincipals("tnt_1")).rejects.toBeInstanceOf(TenancyApiError);
   });
 });
 
@@ -140,9 +135,7 @@ describe("roles", () => {
     const calls = stubFetch(() => json(undefined, 204));
     await assignRole("tnt_1", "prn_1", "role_1");
     await unassignRole("tnt_1", "prn_1", "role_1");
-    expect(calls[0]?.path).toBe(
-      "/api/tenants/tnt_1/principals/prn_1/roles/role_1",
-    );
+    expect(calls[0]?.path).toBe("/api/tenants/tnt_1/principals/prn_1/roles/role_1");
     expect(calls[0]?.init?.method).toBe("POST");
     expect(calls[1]?.init?.method).toBe("DELETE");
   });
@@ -201,9 +194,7 @@ describe("grants", () => {
 
 describe("evaluate", () => {
   test("POSTs resource/action and returns the resolved effect", async () => {
-    const calls = stubFetch(() =>
-      json({ effect: "allow", matchingGrants: [] }),
-    );
+    const calls = stubFetch(() => json({ effect: "allow", matchingGrants: [] }));
     const result = await evaluate("tnt_1", "prn_1", "principal", "read");
     expect(calls[0]?.path).toBe("/api/tenants/tnt_1/principals/prn_1/evaluate");
     expect(result.effect).toBe("allow");
diff --git a/packages/settings-ui/test/webhook-secret-panel.test.tsx b/packages/settings-ui/test/webhook-secret-panel.test.tsx
index 6f85558029..c70394c082 100644
--- a/packages/settings-ui/test/webhook-secret-panel.test.tsx
+++ b/packages/settings-ui/test/webhook-secret-panel.test.tsx
@@ -35,22 +35,15 @@ afterEach(() => {
 describe("WebhookSecretPanel", () => {
   test("shows the hook URL, the secret, and a shown-once warning", () => {
     mounted = mount(
-      <WebhookSecretPanel
-        url="https://bench.example.com/api/webhooks/wht_1"
-        secret="sec_abc123"
-      />,
-    );
-    expect(document.body.textContent).toContain(
-      "https://bench.example.com/api/webhooks/wht_1",
+      <WebhookSecretPanel url="https://bench.example.com/api/webhooks/wht_1" secret="sec_abc123" />,
     );
+    expect(document.body.textContent).toContain("https://bench.example.com/api/webhooks/wht_1");
     expect(document.body.textContent).toContain("sec_abc123");
     expect(document.body.textContent).toContain("shown once");
   });
 
   test("omits the sample payload block when none is given", () => {
-    mounted = mount(
-      <WebhookSecretPanel url="https://x/api/webhooks/wht_1" secret="s" />,
-    );
+    mounted = mount(<WebhookSecretPanel url="https://x/api/webhooks/wht_1" secret="s" />);
     expect(document.body.textContent).not.toContain("Example payload");
   });
 
@@ -79,14 +72,9 @@ describe("WebhookSecretPanel", () => {
       },
     });
     try {
-      mounted = mount(
-        <WebhookSecretPanel
-          url="https://x/api/webhooks/wht_1"
-          secret="sec_xyz"
-        />,
-      );
-      const copyButtons = [...document.body.querySelectorAll("button")].filter(
-        (button) => button.textContent?.includes("Copy"),
+      mounted = mount(<WebhookSecretPanel url="https://x/api/webhooks/wht_1" secret="sec_xyz" />);
+      const copyButtons = [...document.body.querySelectorAll("button")].filter((button) =>
+        button.textContent?.includes("Copy"),
       );
       expect(copyButtons.length).toBe(2);
       act(() => copyButtons[0]?.click());
diff --git a/packages/shell-layout/README.md b/packages/shell-layout/README.md
index 4f2415e953..6b3c904710 100644
--- a/packages/shell-layout/README.md
+++ b/packages/shell-layout/README.md
@@ -14,17 +14,14 @@ TArtifact>` and its transition functions (`openProfileInCanvas`,
 generic over whatever a host's canvas renders:
 
 ```ts
-import {
-  initialCanvasColumnState,
-  type CanvasColumnState,
-} from "@corbits/shell-layout";
+import { initialCanvasColumnState, type CanvasColumnState } from "@corbits/shell-layout";
 
 type HostProfile = { id: string; displayName: string };
 type HostArtifact = { id: string; title: string; body: string };
 
-const [state, setState] = useState<
-  CanvasColumnState<HostProfile, HostArtifact>
->(initialCanvasColumnState<HostProfile, HostArtifact>);
+const [state, setState] = useState<CanvasColumnState<HostProfile, HostArtifact>>(
+  initialCanvasColumnState<HostProfile, HostArtifact>,
+);
 ```
 
 This package never imports the host's concrete subject or artifact
diff --git a/packages/shell-layout/package.json b/packages/shell-layout/package.json
index b6f1b1f2b4..3bb2698a4b 100644
--- a/packages/shell-layout/package.json
+++ b/packages/shell-layout/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/shell-layout",
+  "version": "0.0.1",
   "private": true,
   "description": "The generic shell layout mechanics a second Interchange deployment needs: responsive breakpoints, the canvas column state machine, per-route scroll reset, and the pending-dialog-request pattern. Composition (routes, sidebar content, app policy) stays in the consuming app.",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/shell-layout/src/breakpoints.ts b/packages/shell-layout/src/breakpoints.ts
index 7783373d5b..be833cdf9b 100644
--- a/packages/shell-layout/src/breakpoints.ts
+++ b/packages/shell-layout/src/breakpoints.ts
@@ -9,18 +9,12 @@ export const COMPACT_MAX_WIDTH = 1100;
 export const NARROW_MAX_WIDTH = 700;
 
 export function shellLayoutModeForWidth(width: number): ShellLayoutMode {
-  return shellLayoutModeFromMatches(
-    width < NARROW_MAX_WIDTH,
-    width < COMPACT_MAX_WIDTH,
-  );
+  return shellLayoutModeFromMatches(width < NARROW_MAX_WIDTH, width < COMPACT_MAX_WIDTH);
 }
 
 /** The same rule expressed over media-query results, which is what the shell
  * actually subscribes to at runtime. */
-export function shellLayoutModeFromMatches(
-  narrow: boolean,
-  compact: boolean,
-): ShellLayoutMode {
+export function shellLayoutModeFromMatches(narrow: boolean, compact: boolean): ShellLayoutMode {
   if (narrow) return "narrow";
   if (compact) return "compact";
   return "expanded";
diff --git a/packages/shell-layout/src/canvas-column-state.test.ts b/packages/shell-layout/src/canvas-column-state.test.ts
index 5848562386..216741fb8d 100644
--- a/packages/shell-layout/src/canvas-column-state.test.ts
+++ b/packages/shell-layout/src/canvas-column-state.test.ts
@@ -74,9 +74,7 @@ describe("canvas column state", () => {
   });
 
   test("clearing a profile closes the canvas and drops focus", () => {
-    const withProfile = focusCanvas(
-      openProfileInCanvas(initial(), sampleProfile),
-    );
+    const withProfile = focusCanvas(openProfileInCanvas(initial(), sampleProfile));
     expect(clearProfileInCanvas(withProfile)).toEqual({
       open: false,
       profile: null,
@@ -107,9 +105,7 @@ describe("canvas column state", () => {
   });
 
   test("clearing an artifact closes the canvas and drops focus", () => {
-    const withArtifact = focusCanvas(
-      openArtifactInCanvas(initial(), sampleArtifact),
-    );
+    const withArtifact = focusCanvas(openArtifactInCanvas(initial(), sampleArtifact));
     expect(clearArtifactInCanvas(withArtifact)).toEqual({
       open: false,
       profile: null,
@@ -140,9 +136,7 @@ describe("canvas column state", () => {
   });
 
   test("clearing a routine closes the canvas and drops focus", () => {
-    const withRoutine = focusCanvas(
-      openRoutineInCanvas(initial(), sampleRoutine),
-    );
+    const withRoutine = focusCanvas(openRoutineInCanvas(initial(), sampleRoutine));
     expect(clearRoutineInCanvas(withRoutine)).toEqual({
       open: false,
       profile: null,
@@ -211,13 +205,8 @@ describe("canvas column state", () => {
 
   test("workbench switch clears profile, artifact, routine, and open flag", () => {
     const open = openProfileInCanvas(initial(), sampleProfile);
-    expect(
-      clearCanvasForTenantSwitch<TestProfile, TestArtifact, TestRoutine>(),
-    ).toEqual(initial());
+    expect(clearCanvasForTenantSwitch<TestProfile, TestArtifact, TestRoutine>()).toEqual(initial());
     expect(open.profile).toEqual(sampleProfile);
-    expect(
-      clearCanvasForTenantSwitch<TestProfile, TestArtifact, TestRoutine>()
-        .profile,
-    ).toBeNull();
+    expect(clearCanvasForTenantSwitch<TestProfile, TestArtifact, TestRoutine>().profile).toBeNull();
   });
 });
diff --git a/packages/shell-layout/src/canvas-column-state.ts b/packages/shell-layout/src/canvas-column-state.ts
index f32274e683..6c9b8f291c 100644
--- a/packages/shell-layout/src/canvas-column-state.ts
+++ b/packages/shell-layout/src/canvas-column-state.ts
@@ -32,11 +32,11 @@ export type CanvasColumnState<TProfile, TArtifact, TRoutine> = {
   readonly focus: boolean;
 };
 
-export function initialCanvasColumnState<
+export function initialCanvasColumnState<TProfile, TArtifact, TRoutine>(): CanvasColumnState<
   TProfile,
   TArtifact,
-  TRoutine,
->(): CanvasColumnState<TProfile, TArtifact, TRoutine> {
+  TRoutine
+> {
   return {
     open: false,
     profile: null,
@@ -47,11 +47,11 @@ export function initialCanvasColumnState<
 }
 
 /** Drop profile/artifact/routine and close (workbench switch). */
-export function clearCanvasForTenantSwitch<
+export function clearCanvasForTenantSwitch<TProfile, TArtifact, TRoutine>(): CanvasColumnState<
   TProfile,
   TArtifact,
-  TRoutine,
->(): CanvasColumnState<TProfile, TArtifact, TRoutine> {
+  TRoutine
+> {
   return initialCanvasColumnState<TProfile, TArtifact, TRoutine>();
 }
 
diff --git a/packages/shell-layout/src/use-scroll-reset.ts b/packages/shell-layout/src/use-scroll-reset.ts
index a58236e544..6ffc6d6369 100644
--- a/packages/shell-layout/src/use-scroll-reset.ts
+++ b/packages/shell-layout/src/use-scroll-reset.ts
@@ -8,10 +8,7 @@ import { useEffect, type RefObject } from "react";
 
 /** Scrolls `ref` back to the top whenever `dep` changes. No-op while the
  * ref is unattached. */
-export function useScrollReset<T extends Element>(
-  ref: RefObject<T | null>,
-  dep: unknown,
-): void {
+export function useScrollReset<T extends Element>(ref: RefObject<T | null>, dep: unknown): void {
   useEffect(() => {
     if (ref.current !== null) ref.current.scrollTop = 0;
     // `ref` is a stable identity; `dep` is what actually triggers a reset.
diff --git a/packages/shell-layout/src/use-shell-layout.ts b/packages/shell-layout/src/use-shell-layout.ts
index 9de33790d0..e64bce6731 100644
--- a/packages/shell-layout/src/use-shell-layout.ts
+++ b/packages/shell-layout/src/use-shell-layout.ts
@@ -25,8 +25,7 @@ export function useShellLayoutMode(): ShellLayoutMode {
   useEffect(() => {
     const narrow = window.matchMedia(NARROW_QUERY);
     const compact = window.matchMedia(COMPACT_QUERY);
-    const sync = () =>
-      setMode(shellLayoutModeFromMatches(narrow.matches, compact.matches));
+    const sync = () => setMode(shellLayoutModeFromMatches(narrow.matches, compact.matches));
     sync();
     narrow.addEventListener("change", sync);
     compact.addEventListener("change", sync);
diff --git a/packages/shell-layout/test/shell-layout-hook.test.tsx b/packages/shell-layout/test/shell-layout-hook.test.tsx
index e95827050e..9bf69592f1 100644
--- a/packages/shell-layout/test/shell-layout-hook.test.tsx
+++ b/packages/shell-layout/test/shell-layout-hook.test.tsx
@@ -10,11 +10,7 @@ import { afterEach, beforeEach, describe, expect, test } from "bun:test";
 import { act } from "react";
 import { createRoot, type Root } from "react-dom/client";
 
-import {
-  COMPACT_MAX_WIDTH,
-  NARROW_MAX_WIDTH,
-  type ShellLayoutMode,
-} from "../src/breakpoints";
+import { COMPACT_MAX_WIDTH, NARROW_MAX_WIDTH, type ShellLayoutMode } from "../src/breakpoints";
 import { useShellLayoutMode } from "../src/use-shell-layout";
 
 type StubQuery = {
diff --git a/packages/skills-tools/package.json b/packages/skills-tools/package.json
index 6d90eefbad..7e4389f0d5 100644
--- a/packages/skills-tools/package.json
+++ b/packages/skills-tools/package.json
@@ -1,21 +1,21 @@
 {
   "name": "@corbits/skills-tools",
+  "version": "0.0.8",
   "description": "The list_skills/create_skill/update_skill/pin_skill @intx/agent tool bundle: Myra's in-chat way to capture repeatable know-how as a workbench skill and pin an existing one onto an agent definition, over @corbits/skills' asset store and @corbits/agent-directory's definition_skills store",
-  "version": "0.0.7",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "packages/skills-tools"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "packages/skills-tools"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -27,12 +27,12 @@
   "dependencies": {
     "arktype": "catalog:"
   },
-  "peerDependencies": {
-    "@intx/agent": "0.3.0",
-    "@intx/types": "0.3.0"
-  },
   "devDependencies": {
     "@types/bun": "catalog:",
     "typescript": "catalog:"
+  },
+  "peerDependencies": {
+    "@intx/agent": "0.3.0",
+    "@intx/types": "0.3.0"
   }
 }
diff --git a/packages/skills-tools/src/client.test.ts b/packages/skills-tools/src/client.test.ts
index a255a51dda..24cd199dc2 100644
--- a/packages/skills-tools/src/client.test.ts
+++ b/packages/skills-tools/src/client.test.ts
@@ -34,9 +34,9 @@ test("listSkills fails closed naming the missing stock route", async () => {
 });
 
 test("loadSkill fails closed naming the missing stock route", async () => {
-  await expect(
-    loadSkill(testConfig(unreachableFetch), "triage"),
-  ).rejects.toThrow(/no stock Interchange HTTP route/);
+  await expect(loadSkill(testConfig(unreachableFetch), "triage")).rejects.toThrow(
+    /no stock Interchange HTTP route/,
+  );
 });
 
 test("createSkill fails closed naming the missing stock route", async () => {
@@ -76,9 +76,7 @@ test("pinSkill posts to the agent-directory workflow-skill-pins surface", async
 
 test("pinSkill throws on a response that doesn't match the expected shape", async () => {
   const fetchImpl = (async () =>
-    new Response(
-      JSON.stringify({ nonsense: true }),
-    )) as unknown as typeof fetch;
+    new Response(JSON.stringify({ nonsense: true }))) as unknown as typeof fetch;
 
   await expect(
     pinSkill(testConfig(fetchImpl), {
diff --git a/packages/skills-tools/src/client.ts b/packages/skills-tools/src/client.ts
index 45b8d5456f..2337683808 100644
--- a/packages/skills-tools/src/client.ts
+++ b/packages/skills-tools/src/client.ts
@@ -86,10 +86,7 @@ async function postJson(
   return response.json();
 }
 
-function skillPinEndpoint(
-  config: SkillsToolClientConfig,
-  path: string,
-): string {
+function skillPinEndpoint(config: SkillsToolClientConfig, path: string): string {
   return `${config.hubAgentDirectoryUrl}/api/workflow-skill-pins${path}`;
 }
 
@@ -102,19 +99,14 @@ const NO_STOCK_SKILL_CONTENT_ROUTE =
  * body). No stock Interchange route serves this yet (CL-8086); fails
  * closed rather than reaching a dead route or reading as an empty
  * registry. */
-export function listSkills(
-  _config: SkillsToolClientConfig,
-): Promise<readonly SkillIndexEntry[]> {
+export function listSkills(_config: SkillsToolClientConfig): Promise<readonly SkillIndexEntry[]> {
   return Promise.reject(new Error(NO_STOCK_SKILL_CONTENT_ROUTE));
 }
 
 /** Loads one skill's full body by name. No stock Interchange route
  * serves this yet (CL-8086); fails closed rather than fabricating
  * content. */
-export function loadSkill(
-  _config: SkillsToolClientConfig,
-  _name: string,
-): Promise<SkillDetail> {
+export function loadSkill(_config: SkillsToolClientConfig, _name: string): Promise<SkillDetail> {
   return Promise.reject(new Error(NO_STOCK_SKILL_CONTENT_ROUTE));
 }
 
@@ -155,9 +147,7 @@ export async function pinSkill(
   const body = await postJson(config, skillPinEndpoint(config, "/pin"), input);
   const parsed = PinResponse(body);
   if (parsed instanceof type.errors) {
-    throw new Error(
-      `Pin-skill response did not match the expected shape: ${parsed.summary}`,
-    );
+    throw new Error(`Pin-skill response did not match the expected shape: ${parsed.summary}`);
   }
   return parsed.skills;
 }
diff --git a/packages/skills-tools/src/tool.test.ts b/packages/skills-tools/src/tool.test.ts
index 07b3118982..a124789149 100644
--- a/packages/skills-tools/src/tool.test.ts
+++ b/packages/skills-tools/src/tool.test.ts
@@ -24,10 +24,7 @@ function callFor(name: string, args: Record<string, unknown>): ToolCall {
   return { id: "call_1", name, arguments: args };
 }
 
-async function withFetch<T>(
-  impl: typeof fetch,
-  run: () => Promise<T>,
-): Promise<T> {
+async function withFetch<T>(impl: typeof fetch, run: () => Promise<T>): Promise<T> {
   const original = globalThis.fetch;
   globalThis.fetch = impl;
   try {
@@ -69,10 +66,7 @@ test('the two reads and the two grant-free writes (create_skill, update_skill) c
 
 test("read_skill rejects a call missing the name without calling out", async () => {
   const bundle = skillsTools(testEnv());
-  const result = await bundle.run(
-    callFor(READ_SKILL_TOOL, {}),
-    new AbortController().signal,
-  );
+  const result = await bundle.run(callFor(READ_SKILL_TOOL, {}), new AbortController().signal);
   expect(result.isError).toBe(true);
   expect(result.content).toMatch(/invalid input/);
 });
@@ -93,10 +87,7 @@ test("read_skill surfaces the missing stock route as an honest tool error", asyn
 
 test("list_skills surfaces the missing stock route as an honest tool error, never an empty list", async () => {
   const bundle = skillsTools(testEnv());
-  const result = await bundle.run(
-    callFor(LIST_SKILLS_TOOL, {}),
-    new AbortController().signal,
-  );
+  const result = await bundle.run(callFor(LIST_SKILLS_TOOL, {}), new AbortController().signal);
   expect(result.isError).toBe(true);
   expect(result.content).toMatch(/no stock Interchange HTTP route/);
 });
@@ -157,9 +148,7 @@ test("pin_skill reports the definition's full pinned-skill list after the pin",
   expect(seenUrl).toBe("https://hub.example.com/api/workflow-skill-pins/pin");
   expect(seenBody).toEqual({ definitionId: "def_1", skillName: "research" });
   expect(result.isError).toBeFalsy();
-  expect(result.content).toBe(
-    'Pinned "research" — this definition now carries: triage, research.',
-  );
+  expect(result.content).toBe('Pinned "research" — this definition now carries: triage, research.');
 });
 
 test("pin_skill rejects a call missing skillName without calling out", async () => {
diff --git a/packages/skills-tools/src/tool.ts b/packages/skills-tools/src/tool.ts
index 5034305c58..67a4f46774 100644
--- a/packages/skills-tools/src/tool.ts
+++ b/packages/skills-tools/src/tool.ts
@@ -90,16 +90,10 @@ const ReadSkillInput = type({
   name: "string > 0",
 });
 
-async function runReadSkill(
-  env: WorkflowSkillsWriteEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runReadSkill(env: WorkflowSkillsWriteEnv, call: ToolCall): Promise<ToolResult> {
   const parsed = ReadSkillInput(call.arguments);
   if (parsed instanceof type.errors) {
-    return errorResult(
-      call.id,
-      new Error(`read_skill received invalid input: ${parsed.summary}`),
-    );
+    return errorResult(call.id, new Error(`read_skill received invalid input: ${parsed.summary}`));
   }
   try {
     const skill = await loadSkill(clientConfig(env), parsed.name);
@@ -113,10 +107,7 @@ async function runReadSkill(
   }
 }
 
-async function runListSkills(
-  env: WorkflowSkillsWriteEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runListSkills(env: WorkflowSkillsWriteEnv, call: ToolCall): Promise<ToolResult> {
   try {
     const skills = await listSkills(clientConfig(env));
     return {
@@ -125,19 +116,14 @@ async function runListSkills(
       content:
         skills.length === 0
           ? "No skills exist in this workbench yet."
-          : skills
-              .map((skill) => `${skill.name}: ${skill.description}`)
-              .join("\n"),
+          : skills.map((skill) => `${skill.name}: ${skill.description}`).join("\n"),
     };
   } catch (err) {
     return errorResult(call.id, err);
   }
 }
 
-async function runCreateSkill(
-  env: WorkflowSkillsWriteEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runCreateSkill(env: WorkflowSkillsWriteEnv, call: ToolCall): Promise<ToolResult> {
   const parsed = CreateSkillInput(call.arguments);
   if (parsed instanceof type.errors) {
     return errorResult(
@@ -157,10 +143,7 @@ async function runCreateSkill(
   }
 }
 
-async function runUpdateSkill(
-  env: WorkflowSkillsWriteEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runUpdateSkill(env: WorkflowSkillsWriteEnv, call: ToolCall): Promise<ToolResult> {
   const parsed = UpdateSkillInput(call.arguments);
   if (parsed instanceof type.errors) {
     return errorResult(
@@ -180,16 +163,10 @@ async function runUpdateSkill(
   }
 }
 
-async function runPinSkill(
-  env: WorkflowSkillsWriteEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runPinSkill(env: WorkflowSkillsWriteEnv, call: ToolCall): Promise<ToolResult> {
   const parsed = PinSkillInput(call.arguments);
   if (parsed instanceof type.errors) {
-    return errorResult(
-      call.id,
-      new Error(`pin_skill received invalid input: ${parsed.summary}`),
-    );
+    return errorResult(call.id, new Error(`pin_skill received invalid input: ${parsed.summary}`));
   }
   try {
     const skills = await pinSkill(clientConfig(env), parsed);
@@ -255,13 +232,11 @@ export const skillsTools = defineTool<WorkflowSkillsWriteEnv>({
           properties: {
             name: {
               type: "string",
-              description:
-                'A lowercase, hyphenated skill name (e.g. "triage-bugs").',
+              description: 'A lowercase, hyphenated skill name (e.g. "triage-bugs").',
             },
             description: {
               type: "string",
-              description:
-                "One sentence on what the skill does and when to use it.",
+              description: "One sentence on what the skill does and when to use it.",
             },
             body: {
               type: "string",
@@ -286,8 +261,7 @@ export const skillsTools = defineTool<WorkflowSkillsWriteEnv>({
             },
             body: {
               type: "string",
-              description:
-                "The skill's full, replacement instructions, in Markdown.",
+              description: "The skill's full, replacement instructions, in Markdown.",
             },
             description: {
               type: "string",
@@ -312,8 +286,7 @@ export const skillsTools = defineTool<WorkflowSkillsWriteEnv>({
           properties: {
             definitionId: {
               type: "string",
-              description:
-                "The id of the agent definition to pin the skill onto.",
+              description: "The id of the agent definition to pin the skill onto.",
             },
             skillName: {
               type: "string",
@@ -338,10 +311,7 @@ export const skillsTools = defineTool<WorkflowSkillsWriteEnv>({
           return runPinSkill(env, call);
         default:
           return Promise.resolve(
-            errorResult(
-              call.id,
-              new Error(`@corbits/skills-tools: unknown tool "${call.name}"`),
-            ),
+            errorResult(call.id, new Error(`@corbits/skills-tools: unknown tool "${call.name}"`)),
           );
       }
     },
diff --git a/packages/skills/package.json b/packages/skills/package.json
index b24b199a94..c0e2444aee 100644
--- a/packages/skills/package.json
+++ b/packages/skills/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/skills",
+  "version": "0.0.2",
   "private": true,
   "description": "SKILL.md authoring (parse/build against native kind:\"skill\" hub assets) and the pinned-skills prompt index. Storage, listing, and access to skill assets themselves are native Interchange asset routes, not this package.",
-  "version": "0.0.2",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/skills/src/prompt.ts b/packages/skills/src/prompt.ts
index 4338f8556d..d338350cf3 100644
--- a/packages/skills/src/prompt.ts
+++ b/packages/skills/src/prompt.ts
@@ -22,9 +22,7 @@ export type PinnedSkillIndexEntry = {
  * so a definition with no skills carries no stanza at all rather than an
  * empty one the model has to reason about.
  */
-export function buildAvailableSkillsStanza(
-  entries: readonly PinnedSkillIndexEntry[],
-): string {
+export function buildAvailableSkillsStanza(entries: readonly PinnedSkillIndexEntry[]): string {
   if (entries.length === 0) return "";
   const lines = entries.map((entry) => `- ${entry.name}: ${entry.description}`);
   return [
diff --git a/packages/skills/src/skill-md.test.ts b/packages/skills/src/skill-md.test.ts
index ec32d322e1..961a0e5411 100644
--- a/packages/skills/src/skill-md.test.ts
+++ b/packages/skills/src/skill-md.test.ts
@@ -1,11 +1,6 @@
 import { describe, expect, test } from "bun:test";
 
-import {
-  buildSkillMd,
-  parseSkillMd,
-  SkillContentError,
-  decodeSkillMd,
-} from "./skill-md";
+import { buildSkillMd, parseSkillMd, SkillContentError, decodeSkillMd } from "./skill-md";
 
 describe("buildSkillMd", () => {
   test("round-trips name, description, scope, and body", () => {
@@ -17,13 +12,9 @@ describe("buildSkillMd", () => {
     });
     const parsed = parseSkillMd(md);
     expect(parsed.name).toBe("summarize-transcript");
-    expect(parsed.description).toBe(
-      "Condenses a meeting transcript into decisions and owners.",
-    );
+    expect(parsed.description).toBe("Condenses a meeting transcript into decisions and owners.");
     expect(parsed.scope).toBe("tenant");
-    expect(parsed.body).toBe(
-      "1. Read the transcript.\n2. List every decision.",
-    );
+    expect(parsed.body).toBe("1. Read the transcript.\n2. List every decision.");
   });
 
   test("a private scope survives the round trip", () => {
@@ -54,9 +45,7 @@ describe("buildSkillMd", () => {
       body: "Sort them.",
       scope: "private",
     });
-    expect(parseSkillMd(md).description).toBe(
-      "Sorts issues: bug, question, or feature.",
-    );
+    expect(parseSkillMd(md).description).toBe("Sorts issues: bug, question, or feature.");
   });
 
   test("preserves an apostrophe through the single-quoted scalar", () => {
@@ -66,9 +55,7 @@ describe("buildSkillMd", () => {
       body: "Sort them.",
       scope: "private",
     });
-    expect(parseSkillMd(md).description).toBe(
-      "Reads the reporter's own words first.",
-    );
+    expect(parseSkillMd(md).description).toBe("Reads the reporter's own words first.");
   });
 
   test("rejects a name the hub's skill kind handler would reject", () => {
@@ -122,21 +109,15 @@ describe("parseSkillMd", () => {
   });
 
   test("rejects frontmatter with no closing delimiter", () => {
-    expect(() => parseSkillMd("---\nname: triage\n")).toThrow(
-      SkillContentError,
-    );
+    expect(() => parseSkillMd("---\nname: triage\n")).toThrow(SkillContentError);
   });
 
   test("rejects frontmatter missing a description", () => {
-    expect(() => parseSkillMd("---\nname: triage\n---\nBody")).toThrow(
-      SkillContentError,
-    );
+    expect(() => parseSkillMd("---\nname: triage\n---\nBody")).toThrow(SkillContentError);
   });
 
   test("a SKILL.md written before scope moved into frontmatter reads as private", () => {
-    const parsed = parseSkillMd(
-      "---\nname: triage\ndescription: Sorts issues.\n---\nBody",
-    );
+    const parsed = parseSkillMd("---\nname: triage\ndescription: Sorts issues.\n---\nBody");
     expect(parsed.scope).toBe("private");
   });
 
diff --git a/packages/skills/src/skill-md.ts b/packages/skills/src/skill-md.ts
index 6916b37481..f6cd066a2d 100644
--- a/packages/skills/src/skill-md.ts
+++ b/packages/skills/src/skill-md.ts
@@ -31,9 +31,7 @@ export const skillNameSchema = type(/^[a-z0-9]+(-[a-z0-9]+)*$/)
     return true;
   });
 
-export const skillDescriptionSchema = type("1 <= string <= 1024").and(
-  type(/^(?!.*<[^>]+>).*$/s),
-);
+export const skillDescriptionSchema = type("1 <= string <= 1024").and(type(/^(?!.*<[^>]+>).*$/s));
 
 /** Who may see a skill: `private` (only its creator) or `tenant` (every
  * principal in the owning workbench). Lives in the SKILL.md frontmatter —
@@ -85,9 +83,7 @@ export function buildSkillMd(input: {
     scope: input.scope,
   });
   if (frontmatter instanceof type.errors) {
-    throw new SkillContentError(
-      `skill frontmatter is invalid: ${frontmatter.summary}`,
-    );
+    throw new SkillContentError(`skill frontmatter is invalid: ${frontmatter.summary}`);
   }
   const body = input.body.trim();
   if (body === "") {
@@ -124,9 +120,7 @@ export function buildSkillMd(input: {
 export function parseSkillMd(text_: string): ParsedSkillMd {
   const lines = text_.split(/\r?\n/);
   if (lines[0] !== FRONTMATTER_DELIMITER) {
-    throw new SkillContentError(
-      `${SKILL_MD_FILENAME} is missing its YAML frontmatter delimiter`,
-    );
+    throw new SkillContentError(`${SKILL_MD_FILENAME} is missing its YAML frontmatter delimiter`);
   }
   let endIdx = -1;
   for (let i = 1; i < lines.length; i += 1) {
@@ -136,9 +130,7 @@ export function parseSkillMd(text_: string): ParsedSkillMd {
     }
   }
   if (endIdx === -1) {
-    throw new SkillContentError(
-      `${SKILL_MD_FILENAME} frontmatter has no closing delimiter`,
-    );
+    throw new SkillContentError(`${SKILL_MD_FILENAME} frontmatter has no closing delimiter`);
   }
   const yamlText = lines.slice(1, endIdx).join("\n");
   let rawFrontmatter: unknown;
diff --git a/packages/slug/package.json b/packages/slug/package.json
index aada6cbddd..5f510dd297 100644
--- a/packages/slug/package.json
+++ b/packages/slug/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/slug",
+  "version": "0.0.1",
   "private": true,
   "description": "Human-readable URL slugs for named entities: slugify a display name, validate a slug read off a URL",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/slug/src/slug.ts b/packages/slug/src/slug.ts
index 236ed3f987..e92c249b4d 100644
--- a/packages/slug/src/slug.ts
+++ b/packages/slug/src/slug.ts
@@ -14,7 +14,10 @@ const SLUG_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
  * name that cannot name a URL.
  */
 export function slugify(name: string): string {
-  const ascii = name.normalize("NFKD").replace(/[̀-ͯ]/g, "").toLowerCase();
+  const ascii = name
+    .normalize("NFKD")
+    .replace(/[̀-ͯ]/g, "")
+    .toLowerCase();
   const hyphenated = ascii.replace(/[^a-z0-9]+/g, "-");
   return hyphenated.slice(0, SLUG_MAX_LENGTH).replace(/^-+|-+$/g, "");
 }
diff --git a/packages/text-diff/package.json b/packages/text-diff/package.json
index 5c0423abc0..810f604c9d 100644
--- a/packages/text-diff/package.json
+++ b/packages/text-diff/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/text-diff",
+  "version": "0.0.1",
   "private": true,
   "description": "Line-level text diff: the shortest add/remove script between two revisions of a document, for review surfaces that show what a save is about to change",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/text-diff/src/line-diff.test.ts b/packages/text-diff/src/line-diff.test.ts
index a1963acd2e..420a4ff3a2 100644
--- a/packages/text-diff/src/line-diff.test.ts
+++ b/packages/text-diff/src/line-diff.test.ts
@@ -19,16 +19,13 @@ function diffed(before: string, after: string, limits = DEFAULT_DIFF_LIMITS) {
 function render(before: string, after: string): string[] {
   return diffed(before, after).lines.map((line: DiffLine) => {
     if (line.kind === "skipped") return `~${line.text}`;
-    const marker =
-      line.kind === "added" ? "+" : line.kind === "removed" ? "-" : " ";
+    const marker = line.kind === "added" ? "+" : line.kind === "removed" ? "-" : " ";
     return `${marker}${line.text}`;
   });
 }
 
 function lines(count: number, prefix = "line"): string {
-  return Array.from({ length: count }, (_, i) => `${prefix} ${String(i)}`).join(
-    "\n",
-  );
+  return Array.from({ length: count }, (_, i) => `${prefix} ${String(i)}`).join("\n");
 }
 
 describe("diffText", () => {
@@ -47,11 +44,7 @@ describe("diffText", () => {
   });
 
   test("an inserted line is the only change", () => {
-    expect(render("one\nthree", "one\ntwo\nthree")).toEqual([
-      " one",
-      "+two",
-      " three",
-    ]);
+    expect(render("one\nthree", "one\ntwo\nthree")).toEqual([" one", "+two", " three"]);
     expect(diffed("one\nthree", "one\ntwo\nthree").totals).toEqual({
       added: 1,
       removed: 0,
@@ -59,11 +52,7 @@ describe("diffText", () => {
   });
 
   test("a removed line is the only change", () => {
-    expect(render("one\ntwo\nthree", "one\nthree")).toEqual([
-      " one",
-      "-two",
-      " three",
-    ]);
+    expect(render("one\ntwo\nthree", "one\nthree")).toEqual([" one", "-two", " three"]);
   });
 
   test("line numbers point at each side's own revision", () => {
@@ -91,23 +80,14 @@ describe("diffText", () => {
   });
 
   test("a rewritten block reads as its removals then its additions", () => {
-    expect(render("a\nb\nc\nd", "a\nx\ny\nd")).toEqual([
-      " a",
-      "-b",
-      "-c",
-      "+x",
-      "+y",
-      " d",
-    ]);
+    expect(render("a\nb\nc\nd", "a\nx\ny\nd")).toEqual([" a", "-b", "-c", "+x", "+y", " d"]);
   });
 
   test("a moved line is not reported as unchanged in both places", () => {
     const diff = diffed("header\nbody", "body\nheader");
     expect(diff.totals.added).toBeGreaterThan(0);
     expect(diff.totals.removed).toBeGreaterThan(0);
-    expect(diff.lines.filter((line) => line.kind === "context")).toHaveLength(
-      1,
-    );
+    expect(diff.lines.filter((line) => line.kind === "context")).toHaveLength(1);
   });
 });
 
diff --git a/packages/text-diff/src/line-diff.ts b/packages/text-diff/src/line-diff.ts
index cc126e13fd..386a1fb721 100644
--- a/packages/text-diff/src/line-diff.ts
+++ b/packages/text-diff/src/line-diff.ts
@@ -109,9 +109,7 @@ function commonSuffixLengths(
     if (row === undefined || next === undefined) continue;
     for (let j = after.length - 1; j >= 0; j -= 1) {
       row[j] =
-        before[i] === after[j]
-          ? (next[j + 1] ?? 0) + 1
-          : Math.max(next[j] ?? 0, row[j + 1] ?? 0);
+        before[i] === after[j] ? (next[j + 1] ?? 0) + 1 : Math.max(next[j] ?? 0, row[j + 1] ?? 0);
     }
   }
   return table;
@@ -196,10 +194,7 @@ function contextRun(
 
 /** Collapses every run of unchanged lines longer than `2 * contextLines`
  * into the lines nearest the changes around it plus one "skipped" row. */
-function collapseContext(
-  lines: readonly DiffLine[],
-  contextLines: number,
-): readonly DiffLine[] {
+function collapseContext(lines: readonly DiffLine[], contextLines: number): readonly DiffLine[] {
   const out: DiffLine[] = [];
   let index = 0;
   while (index < lines.length) {
@@ -275,8 +270,7 @@ export function diffText(
   while (
     suffix < beforeLines.length - prefix &&
     suffix < afterLines.length - prefix &&
-    beforeLines[beforeLines.length - 1 - suffix] ===
-      afterLines[afterLines.length - 1 - suffix]
+    beforeLines[beforeLines.length - 1 - suffix] === afterLines[afterLines.length - 1 - suffix]
   ) {
     suffix += 1;
   }
@@ -287,8 +281,7 @@ export function diffText(
   if (
     changedBefore.length > limits.maxLines ||
     changedAfter.length > limits.maxLines ||
-    characterCount(changedBefore) + characterCount(changedAfter) >
-      limits.maxCharacters
+    characterCount(changedBefore) + characterCount(changedAfter) > limits.maxCharacters
   ) {
     return {
       status: "too-large",
diff --git a/packages/tool-registry-publish/package.json b/packages/tool-registry-publish/package.json
index b2f399a6b4..63c03753b2 100644
--- a/packages/tool-registry-publish/package.json
+++ b/packages/tool-registry-publish/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/tool-registry-publish",
+  "version": "0.0.1",
   "private": true,
   "description": "Packs workbench @corbits/*-tools packages into self-contained npm-style tarballs and publishes them into a tenant's corbits-tools package-registry asset, so tool-package pins under the @corbits scope resolve at agent launch",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/tool-registry-publish/src/freshness-check.test.ts b/packages/tool-registry-publish/src/freshness-check.test.ts
index 064841abbf..cdea1c3094 100644
--- a/packages/tool-registry-publish/src/freshness-check.test.ts
+++ b/packages/tool-registry-publish/src/freshness-check.test.ts
@@ -6,14 +6,7 @@
 // written with plumbing (`commit-tree`) under a test-owned git config
 // so a developer `core.hooksPath` cannot fail the suite.
 import { afterAll, describe, expect, test } from "bun:test";
-import {
-  chmod,
-  mkdir,
-  mkdtemp,
-  realpath,
-  rm,
-  writeFile,
-} from "node:fs/promises";
+import { chmod, mkdir, mkdtemp, realpath, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import path from "node:path";
 import { CORBITS_TOOL_PACKAGE_DIRS } from "./registry";
@@ -30,9 +23,7 @@ let fixtureGitConfig: string | undefined;
 let repositoryRoot: string | undefined;
 
 afterAll(async () => {
-  await Promise.all(
-    scratchDirs.map((dir) => rm(dir, { recursive: true, force: true })),
-  );
+  await Promise.all(scratchDirs.map((dir) => rm(dir, { recursive: true, force: true })));
 });
 
 async function findRepositoryRoot(): Promise<string> {
@@ -185,19 +176,11 @@ async function commitAll(
   const sha =
     parent === undefined
       ? await git(root, ["commit-tree", tree, "-m", message], env)
-      : await git(
-          root,
-          ["commit-tree", tree, "-p", parent, "-m", message],
-          env,
-        );
+      : await git(root, ["commit-tree", tree, "-p", parent, "-m", message], env);
   await git(root, ["update-ref", "HEAD", sha], env);
 }
 
-async function writePkg(
-  pkg: string,
-  version: string,
-  src: string,
-): Promise<void> {
+async function writePkg(pkg: string, version: string, src: string): Promise<void> {
   await mkdir(path.join(pkg, "src"), { recursive: true });
   await writeFile(
     path.join(pkg, "package.json"),
@@ -317,9 +300,7 @@ describe("assertToolPackagesFresh", () => {
       },
     ] as const;
 
-    expect(() => assertToolPackagesFresh(snapshots)).toThrow(
-      StaleToolPackageError,
-    );
+    expect(() => assertToolPackagesFresh(snapshots)).toThrow(StaleToolPackageError);
 
     try {
       assertToolPackagesFresh(snapshots);
@@ -358,14 +339,11 @@ describe("checkToolPackageFreshness", () => {
 
   test("a new untracked src file without a bump is loud", async () => {
     const { pkg } = await committedPackage("export const n = 1;\n");
-    await writeFile(
-      path.join(pkg, "src", "extra.ts"),
-      "export const extra = 1;\n",
-    );
+    await writeFile(path.join(pkg, "src", "extra.ts"), "export const extra = 1;\n");
 
-    await expect(
-      checkToolPackageFreshness({ packageDirs: [pkg] }),
-    ).rejects.toBeInstanceOf(StaleToolPackageError);
+    await expect(checkToolPackageFreshness({ packageDirs: [pkg] })).rejects.toBeInstanceOf(
+      StaleToolPackageError,
+    );
   });
 
   test("src changed together with a version bump is fresh", async () => {
@@ -385,43 +363,40 @@ describe("checkToolPackageFreshness", () => {
     ["GIT_WORK_TREE", "."],
     ["GIT_COMMON_DIR", ".git"],
     ["GIT_OBJECT_DIRECTORY", ".git/objects"],
-  ])(
-    "ignores a foreign %s while detecting real source changes",
-    async (key, suffix) => {
-      const foreign = await committedPackage("export const n = 99;\n");
-      const { pkg } = await committedPackage("export const n = 1;\n");
-      const inherited = process.env;
-      process.env = { ...inherited, [key]: path.join(foreign.root, suffix) };
-      try {
-        const snapshots = await snapshotToolPackages([pkg]);
-        expect(snapshots).toEqual([
-          {
-            name: "@corbits/fake-tools",
-            dir: pkg,
-            currentVersion: "0.0.1",
-            publishedVersion: "0.0.1",
-            srcChangedSincePublished: false,
-          },
-        ]);
-        await checkToolPackageFreshness({ packageDirs: [pkg] });
-        await writePkg(pkg, "0.0.1", "export const n = 2;\n");
-        await expect(
-          checkToolPackageFreshness({ packageDirs: [pkg] }),
-        ).rejects.toBeInstanceOf(StaleToolPackageError);
-      } finally {
-        process.env = inherited;
-      }
-    },
-  );
+  ])("ignores a foreign %s while detecting real source changes", async (key, suffix) => {
+    const foreign = await committedPackage("export const n = 99;\n");
+    const { pkg } = await committedPackage("export const n = 1;\n");
+    const inherited = process.env;
+    process.env = { ...inherited, [key]: path.join(foreign.root, suffix) };
+    try {
+      const snapshots = await snapshotToolPackages([pkg]);
+      expect(snapshots).toEqual([
+        {
+          name: "@corbits/fake-tools",
+          dir: pkg,
+          currentVersion: "0.0.1",
+          publishedVersion: "0.0.1",
+          srcChangedSincePublished: false,
+        },
+      ]);
+      await checkToolPackageFreshness({ packageDirs: [pkg] });
+      await writePkg(pkg, "0.0.1", "export const n = 2;\n");
+      await expect(checkToolPackageFreshness({ packageDirs: [pkg] })).rejects.toBeInstanceOf(
+        StaleToolPackageError,
+      );
+    } finally {
+      process.env = inherited;
+    }
+  });
 
   test("committed src change after the version-introducing commit is loud", async () => {
     const { root, pkg } = await committedPackage("export const n = 1;\n");
     await writePkg(pkg, "0.0.1", "export const n = 2;\n");
     await commitAll(root, "src change, forgot the bump");
 
-    await expect(
-      checkToolPackageFreshness({ packageDirs: [pkg] }),
-    ).rejects.toBeInstanceOf(StaleToolPackageError);
+    await expect(checkToolPackageFreshness({ packageDirs: [pkg] })).rejects.toBeInstanceOf(
+      StaleToolPackageError,
+    );
   });
 
   test("fixture history is written even when a global author hook would reject git commit", async () => {
@@ -439,15 +414,7 @@ describe("checkToolPackageFreshness", () => {
     const victim = await scratchDir("corbits-tools-freshness-victim-");
     await rawGit(
       victim,
-      [
-        "-c",
-        "user.email=freshness@test",
-        "-c",
-        "user.name=Freshness",
-        "init",
-        "-b",
-        "main",
-      ],
+      ["-c", "user.email=freshness@test", "-c", "user.name=Freshness", "init", "-b", "main"],
       hostileEnv,
     );
     await writeFile(path.join(victim, "README"), "victim\n");
@@ -481,9 +448,7 @@ describe("checkToolPackageFreshness", () => {
 describe("snapshotToolPackages", () => {
   test("defaults to the publish map", async () => {
     const snapshots = await snapshotToolPackages();
-    expect(snapshots.map((snapshot) => snapshot.dir)).toEqual([
-      ...CORBITS_TOOL_PACKAGE_DIRS,
-    ]);
+    expect(snapshots.map((snapshot) => snapshot.dir)).toEqual([...CORBITS_TOOL_PACKAGE_DIRS]);
     expect(snapshots.length).toBe(CORBITS_TOOL_PACKAGE_DIRS.length);
     for (const snapshot of snapshots) {
       expect(snapshot.name.startsWith("@corbits/")).toBe(true);
diff --git a/packages/tool-registry-publish/src/freshness-check.ts b/packages/tool-registry-publish/src/freshness-check.ts
index d6fa85d270..33875a792a 100644
--- a/packages/tool-registry-publish/src/freshness-check.ts
+++ b/packages/tool-registry-publish/src/freshness-check.ts
@@ -44,9 +44,7 @@ export type CheckToolPackageFreshnessArgs = {
  * clears the finding — that is the only supported way to ship new
  * tool-package bytes.
  */
-export function staleToolPackages(
-  snapshots: readonly ToolPackageSnapshot[],
-): StaleToolPackage[] {
+export function staleToolPackages(snapshots: readonly ToolPackageSnapshot[]): StaleToolPackage[] {
   const stale: StaleToolPackage[] = [];
   for (const snapshot of snapshots) {
     if (snapshot.publishedVersion === undefined) continue;
@@ -78,9 +76,7 @@ export class StaleToolPackageError extends Error {
   }
 }
 
-export function assertToolPackagesFresh(
-  snapshots: readonly ToolPackageSnapshot[],
-): void {
+export function assertToolPackagesFresh(snapshots: readonly ToolPackageSnapshot[]): void {
   const stale = staleToolPackages(snapshots);
   if (stale.length > 0) throw new StaleToolPackageError(stale);
 }
@@ -100,9 +96,7 @@ export async function snapshotToolPackages(
 export async function checkToolPackageFreshness(
   args: CheckToolPackageFreshnessArgs = {},
 ): Promise<void> {
-  const snapshots = await snapshotToolPackages(
-    args.packageDirs ?? CORBITS_TOOL_PACKAGE_DIRS,
-  );
+  const snapshots = await snapshotToolPackages(args.packageDirs ?? CORBITS_TOOL_PACKAGE_DIRS);
   assertToolPackagesFresh(snapshots);
 }
 
@@ -118,10 +112,7 @@ async function snapshotOnePackage(dir: string): Promise<ToolPackageSnapshot> {
   }
 
   const resolvedRoot = await realpath(root);
-  const relManifest = gitPath(
-    resolvedRoot,
-    path.join(resolvedDir, "package.json"),
-  );
+  const relManifest = gitPath(resolvedRoot, path.join(resolvedDir, "package.json"));
   const relSrc = gitPath(resolvedRoot, path.join(resolvedDir, "src"));
   const publishedVersion = await committedVersion(root, relManifest);
   const srcChangedSincePublished =
@@ -138,38 +129,27 @@ async function snapshotOnePackage(dir: string): Promise<ToolPackageSnapshot> {
   };
 }
 
-async function readManifest(
-  manifestPath: string,
-): Promise<{ name: string; version: string }> {
+async function readManifest(manifestPath: string): Promise<{ name: string; version: string }> {
   return parseManifest(await readFile(manifestPath, "utf8"), manifestPath);
 }
 
-function parseManifest(
-  jsonText: string,
-  label: string,
-): { name: string; version: string } {
+function parseManifest(jsonText: string, label: string): { name: string; version: string } {
   let raw: unknown;
   try {
     raw = JSON.parse(jsonText);
   } catch (err) {
-    throw new Error(
-      `tool-package freshness: ${label} is not valid JSON: ${String(err)}`,
-      { cause: err },
-    );
+    throw new Error(`tool-package freshness: ${label} is not valid JSON: ${String(err)}`, {
+      cause: err,
+    });
   }
   const parsed = PackageManifest(raw);
   if (parsed instanceof type.errors) {
-    throw new Error(
-      `tool-package freshness: ${label} failed validation: ${parsed.summary}`,
-    );
+    throw new Error(`tool-package freshness: ${label} failed validation: ${parsed.summary}`);
   }
   return parsed;
 }
 
-async function committedVersion(
-  root: string,
-  relManifest: string,
-): Promise<string | undefined> {
+async function committedVersion(root: string, relManifest: string): Promise<string | undefined> {
   const shown = await git(root, ["show", `HEAD:${relManifest}`]);
   if (shown.code !== 0) return undefined;
   return parseManifest(shown.stdout, `HEAD:${relManifest}`).version;
@@ -192,13 +172,7 @@ async function srcChangedSinceVersion(
   if (since === undefined) return false;
   const diff = await git(root, ["diff", "--name-only", since, "--", relSrc]);
   if (diff.stdout.trim() !== "") return true;
-  const untracked = await git(root, [
-    "ls-files",
-    "--others",
-    "--exclude-standard",
-    "--",
-    relSrc,
-  ]);
+  const untracked = await git(root, ["ls-files", "--others", "--exclude-standard", "--", relSrc]);
   return untracked.stdout.trim() !== "";
 }
 
diff --git a/packages/tool-registry-publish/src/index.ts b/packages/tool-registry-publish/src/index.ts
index ba7b34ae13..f3bdcddf2a 100644
--- a/packages/tool-registry-publish/src/index.ts
+++ b/packages/tool-registry-publish/src/index.ts
@@ -5,16 +5,9 @@ export {
   tarballCoversPackage,
   tarballsCoverRequiredSeedPackages,
 } from "./registry";
-export {
-  packToolPackageTarball,
-  tarballFilenameFor,
-  type PackedTarball,
-} from "./pack";
+export { packToolPackageTarball, tarballFilenameFor, type PackedTarball } from "./pack";
 export { ToolSurfaceEntry, ToolSurfaceManifest } from "./manifest";
-export {
-  readToolSurfaceManifests,
-  type ToolSurfaceBlobSource,
-} from "./surface-reader";
+export { readToolSurfaceManifests, type ToolSurfaceBlobSource } from "./surface-reader";
 export {
   shouldPublishTarball,
   publishCorbitsToolsRegistry,
diff --git a/packages/tool-registry-publish/src/manifest.test.ts b/packages/tool-registry-publish/src/manifest.test.ts
index c6afbb49b6..f1a4e21873 100644
--- a/packages/tool-registry-publish/src/manifest.test.ts
+++ b/packages/tool-registry-publish/src/manifest.test.ts
@@ -45,20 +45,16 @@ describe("ToolSurfaceManifest", () => {
         surface: [{ qualifiedId: "x", kind: "widget" }],
       }),
     ).toBeInstanceOf(type.errors);
-    expect(
-      ToolSurfaceManifest({ ...valid, surface: [{ kind: "tool" }] }),
-    ).toBeInstanceOf(type.errors);
-    expect(ToolSurfaceManifest({ ...valid, surface: "nope" })).toBeInstanceOf(
+    expect(ToolSurfaceManifest({ ...valid, surface: [{ kind: "tool" }] })).toBeInstanceOf(
       type.errors,
     );
+    expect(ToolSurfaceManifest({ ...valid, surface: "nope" })).toBeInstanceOf(type.errors);
   });
 
   test("accepts a skill-kind entry (manifest headroom)", () => {
     const manifest = ToolSurfaceManifest({
       ...valid,
-      surface: [
-        { qualifiedId: "@corbits/skills/s:skills_load", kind: "skill" },
-      ],
+      surface: [{ qualifiedId: "@corbits/skills/s:skills_load", kind: "skill" }],
     });
     expect(manifest).not.toBeInstanceOf(type.errors);
   });
diff --git a/packages/tool-registry-publish/src/materialize.test.ts b/packages/tool-registry-publish/src/materialize.test.ts
index 87a97ca081..6cb957fc93 100644
--- a/packages/tool-registry-publish/src/materialize.test.ts
+++ b/packages/tool-registry-publish/src/materialize.test.ts
@@ -62,9 +62,7 @@ describe("materializePackages", () => {
 
   test("skips a package whose content hash already matches the on-disk materialize", async () => {
     const encoder = new TextEncoder();
-    const onDisk = new Map([
-      ["unchanged", sha512Integrity(encoder.encode("same-bytes"))],
-    ]);
+    const onDisk = new Map([["unchanged", sha512Integrity(encoder.encode("same-bytes"))]]);
     const current = new Map([
       ["unchanged", sha512Integrity(encoder.encode("same-bytes"))],
       ["changed", sha512Integrity(encoder.encode("new-bytes"))],
@@ -80,9 +78,7 @@ describe("materializePackages", () => {
       shouldSkip: (packageDir) => {
         const existing = onDisk.get(packageDir);
         const next = current.get(packageDir);
-        return (
-          existing !== undefined && next !== undefined && existing === next
-        );
+        return existing !== undefined && next !== undefined && existing === next;
       },
     });
 
@@ -105,9 +101,7 @@ describe("materializePackages", () => {
       shouldSkip: () => existing === next,
     });
 
-    expect(results).toEqual([
-      { packageDir: "pkg", status: "ok", value: "rematerialized" },
-    ]);
+    expect(results).toEqual([{ packageDir: "pkg", status: "ok", value: "rematerialized" }]);
   });
 
   test("rejects when one materialize fails and does not swallow siblings", async () => {
diff --git a/packages/tool-registry-publish/src/materialize.ts b/packages/tool-registry-publish/src/materialize.ts
index a18e2f9d68..6639f86673 100644
--- a/packages/tool-registry-publish/src/materialize.ts
+++ b/packages/tool-registry-publish/src/materialize.ts
@@ -27,9 +27,7 @@ export async function materializePackages<T>(
   if (args.packageDirs.length === 0) return [];
   const concurrency = args.concurrency ?? args.packageDirs.length;
   if (concurrency < 1) {
-    throw new Error(
-      `materializePackages: concurrency must be >= 1, got ${String(concurrency)}`,
-    );
+    throw new Error(`materializePackages: concurrency must be >= 1, got ${String(concurrency)}`);
   }
   return mapPool(args.packageDirs, concurrency, async (packageDir) => {
     if (args.shouldSkip !== undefined && (await args.shouldSkip(packageDir))) {
diff --git a/packages/tool-registry-publish/src/pack.test.ts b/packages/tool-registry-publish/src/pack.test.ts
index ae8b796cdd..2df7fe5ecb 100644
--- a/packages/tool-registry-publish/src/pack.test.ts
+++ b/packages/tool-registry-publish/src/pack.test.ts
@@ -32,20 +32,13 @@ describe("packToolPackageTarball", () => {
     test(`packs ${path.basename(packageDir)} into a self-contained, validating tarball`, async () => {
       const tarball = await packToolPackageTarball(packageDir);
 
-      expect(tarball.filename).toBe(
-        tarballFilenameFor(tarball.name, tarball.version),
-      );
+      expect(tarball.filename).toBe(tarballFilenameFor(tarball.name, tarball.version));
       expect(TARBALL_FILENAME_PATTERN.test(tarball.filename)).toBe(true);
       expect(tarball.bytes.byteLength).toBeGreaterThan(0);
 
-      const extractDir = await mkdtemp(
-        path.join(tmpdir(), "corbits-tools-pack-test-"),
-      );
+      const extractDir = await mkdtemp(path.join(tmpdir(), "corbits-tools-pack-test-"));
       try {
-        await Bun.write(
-          path.join(extractDir, "out.tgz"),
-          Buffer.from(tarball.bytes),
-        );
+        await Bun.write(path.join(extractDir, "out.tgz"), Buffer.from(tarball.bytes));
         await tar.extract({
           cwd: extractDir,
           file: path.join(extractDir, "out.tgz"),
@@ -89,8 +82,7 @@ describe("packToolPackageTarball", () => {
                 definitions: { name: string }[];
               }
             ).definitions.map(
-              (definition) =>
-                `${(factory as { id: string }).id}:${definition.name}`,
+              (definition) => `${(factory as { id: string }).id}:${definition.name}`,
             ),
           );
           expect([...surface.surface.map((e) => e.qualifiedId)].sort()).toEqual(
@@ -105,9 +97,7 @@ describe("packToolPackageTarball", () => {
           // `./index.ts`'s re-exports would still leave
           // `factories.length` above 0. Catalog administration is UI-only
           // (CL-7588), so there is no second bundle anymore.
-          const ids = factories.map(
-            (factory) => (factory as { id: string }).id,
-          );
+          const ids = factories.map((factory) => (factory as { id: string }).id);
           expect(ids).toContain("@corbits/catalog-tools/catalog");
           expect(ids).not.toContain("@corbits/catalog-tools/off");
         }
diff --git a/packages/tool-registry-publish/src/pack.ts b/packages/tool-registry-publish/src/pack.ts
index 55bc863cf3..c463693669 100644
--- a/packages/tool-registry-publish/src/pack.ts
+++ b/packages/tool-registry-publish/src/pack.ts
@@ -72,19 +72,15 @@ const packCache = new Map<string, Promise<PackedTarball>>();
  * matching the layout `extractTarballPackageJSON` and npm itself
  * expect.
  */
-export async function packToolPackageTarball(
-  packageDir: string,
-): Promise<PackedTarball> {
+export async function packToolPackageTarball(packageDir: string): Promise<PackedTarball> {
   const cached = packCache.get(packageDir);
   if (cached !== undefined) return cached;
-  const pending = packToolPackageTarballUncached(packageDir).catch(
-    (err: unknown) => {
-      // A failed build must not poison future calls — only a
-      // successful, reusable result stays cached.
-      packCache.delete(packageDir);
-      throw err;
-    },
-  );
+  const pending = packToolPackageTarballUncached(packageDir).catch((err: unknown) => {
+    // A failed build must not poison future calls — only a
+    // successful, reusable result stays cached.
+    packCache.delete(packageDir);
+    throw err;
+  });
   packCache.set(packageDir, pending);
   return pending;
 }
@@ -106,20 +102,10 @@ async function runBunBuild(
   packageName: string,
 ): Promise<void> {
   const proc = Bun.spawn(
-    [
-      "bun",
-      "build",
-      entrypoint,
-      "--target=bun",
-      "--format=esm",
-      `--outfile=${outfile}`,
-    ],
+    ["bun", "build", entrypoint, "--target=bun", "--format=esm", `--outfile=${outfile}`],
     { stdout: "pipe", stderr: "pipe" },
   );
-  const [exitCode, stderr] = await Promise.all([
-    proc.exited,
-    new Response(proc.stderr).text(),
-  ]);
+  const [exitCode, stderr] = await Promise.all([proc.exited, new Response(proc.stderr).text()]);
   if (exitCode !== 0) {
     throw new Error(
       `packToolPackageTarball: "bun build" failed for ${packageName} (exit ${String(exitCode)}): ${stderr}`,
@@ -147,10 +133,7 @@ function isBundle(value: unknown): value is Bundle {
   );
 }
 
-async function surfaceFor(
-  entryFile: string,
-  packageName: string,
-): Promise<ToolSurfaceEntry[]> {
+async function surfaceFor(entryFile: string, packageName: string): Promise<ToolSurfaceEntry[]> {
   const mod = (await import(entryFile)) as Record<string, unknown>;
   const surface: ToolSurfaceEntry[] = [];
   for (const value of Object.values(mod)) {
@@ -159,9 +142,7 @@ async function surfaceFor(
       surface.push({
         qualifiedId: `${value.id}:${definition.name}`,
         kind: "tool",
-        ...(definition.approval !== undefined
-          ? { approval: definition.approval }
-          : {}),
+        ...(definition.approval !== undefined ? { approval: definition.approval } : {}),
       });
     }
   }
@@ -178,9 +159,7 @@ async function surfaceFor(
   return manifest.surface;
 }
 
-async function packToolPackageTarballUncached(
-  packageDir: string,
-): Promise<PackedTarball> {
+async function packToolPackageTarballUncached(packageDir: string): Promise<PackedTarball> {
   const manifestJson: unknown = JSON.parse(
     await readFile(path.join(packageDir, "package.json"), "utf8"),
   );
@@ -194,9 +173,7 @@ async function packToolPackageTarballUncached(
   const entryFile = entryFileFor(manifest, packageDir);
   const surface = await surfaceFor(entryFile, manifest.name);
 
-  const bundleStagingDir = await mkdtemp(
-    path.join(tmpdir(), "corbits-tools-bundle-"),
-  );
+  const bundleStagingDir = await mkdtemp(path.join(tmpdir(), "corbits-tools-bundle-"));
   let bundleBytes: Uint8Array;
   try {
     const outfile = path.join(bundleStagingDir, BUNDLE_ENTRY_FILENAME);
@@ -221,15 +198,10 @@ async function packToolPackageTarballUncached(
       path.join(packageStagingDir, "package.json"),
       JSON.stringify(tarballPackageJSON, null, 2),
     );
-    await writeFile(
-      path.join(packageStagingDir, BUNDLE_ENTRY_FILENAME),
-      bundleBytes,
-    );
+    await writeFile(path.join(packageStagingDir, BUNDLE_ENTRY_FILENAME), bundleBytes);
 
     const tarballPath = path.join(stagingRoot, "out.tgz");
-    await tar.create({ cwd: stagingRoot, gzip: true, file: tarballPath }, [
-      "package",
-    ]);
+    await tar.create({ cwd: stagingRoot, gzip: true, file: tarballPath }, ["package"]);
     const bytes = new Uint8Array(await readFile(tarballPath));
     return {
       name: manifest.name,
diff --git a/packages/tool-registry-publish/src/publish.test.ts b/packages/tool-registry-publish/src/publish.test.ts
index 40fee0792e..97f0551b4c 100644
--- a/packages/tool-registry-publish/src/publish.test.ts
+++ b/packages/tool-registry-publish/src/publish.test.ts
@@ -15,16 +15,12 @@ import { tarballsCoverRequiredSeedPackages } from "./registry";
 
 describe("shouldPublishTarball", () => {
   test("a brand-new filename publishes", () => {
-    expect(shouldPublishTarball("corbits-x-tools-0.0.2.tgz", undefined)).toBe(
-      true,
-    );
+    expect(shouldPublishTarball("corbits-x-tools-0.0.2.tgz", undefined)).toBe(true);
   });
 
   test("an already-published filename is skipped, whatever its bytes", () => {
     const existing = sha512Integrity(new TextEncoder().encode("old bytes"));
-    expect(shouldPublishTarball("corbits-x-tools-0.0.2.tgz", existing)).toBe(
-      false,
-    );
+    expect(shouldPublishTarball("corbits-x-tools-0.0.2.tgz", existing)).toBe(false);
   });
 });
 
@@ -42,15 +38,11 @@ describe("tarballsCoverRequiredSeedPackages", () => {
   });
 
   test("covers @corbits/capability-tools at any version", () => {
-    expect(
-      tarballsCoverRequiredSeedPackages(["corbits-capability-tools-0.0.6.tgz"]),
-    ).toBe(true);
+    expect(tarballsCoverRequiredSeedPackages(["corbits-capability-tools-0.0.6.tgz"])).toBe(true);
   });
 
   test("a dangling registry with unrelated tarballs is not seeded", () => {
-    expect(
-      tarballsCoverRequiredSeedPackages(["corbits-other-tools-1.0.0.tgz"]),
-    ).toBe(false);
+    expect(tarballsCoverRequiredSeedPackages(["corbits-other-tools-1.0.0.tgz"])).toBe(false);
   });
 });
 
@@ -85,9 +77,7 @@ describe("publishCorbitsToolsRegistry", () => {
     } catch (cause) {
       expect(cause).toBeInstanceOf(EmptyRegistryPublishError);
       expect((cause as EmptyRegistryPublishError).success).toBe(false);
-      expect((cause as EmptyRegistryPublishError).message).toContain(
-        "uploaded none",
-      );
+      expect((cause as EmptyRegistryPublishError).message).toContain("uploaded none");
       expect((cause as EmptyRegistryPublishError).message).toContain(
         "still missing @corbits/capability-tools",
       );
@@ -138,13 +128,10 @@ describe("publishCorbitsToolsRegistry", () => {
           bytes: new Uint8Array([1, 2, 3]),
         }),
         fetchImpl: (async () =>
-          new Response(
-            JSON.stringify({ commit: "abc", integrity: "sha512-x" }),
-            {
-              status: 200,
-              headers: { "Content-Type": "application/json" },
-            },
-          )) satisfies FetchTarballPut,
+          new Response(JSON.stringify({ commit: "abc", integrity: "sha512-x" }), {
+            status: 200,
+            headers: { "Content-Type": "application/json" },
+          })) satisfies FetchTarballPut,
       });
       throw new Error("expected EmptyRegistryPublishError");
     } catch (cause) {
@@ -155,9 +142,7 @@ describe("publishCorbitsToolsRegistry", () => {
       expect((cause as EmptyRegistryPublishError).message).toContain(
         "still missing @corbits/capability-tools",
       );
-      expect((cause as EmptyRegistryPublishError).message).not.toContain(
-        "uploaded none",
-      );
+      expect((cause as EmptyRegistryPublishError).message).not.toContain("uploaded none");
     }
   });
 });
diff --git a/packages/tool-registry-publish/src/publish.ts b/packages/tool-registry-publish/src/publish.ts
index 8aa84a02b2..1b4926218f 100644
--- a/packages/tool-registry-publish/src/publish.ts
+++ b/packages/tool-registry-publish/src/publish.ts
@@ -49,11 +49,7 @@ export type PublishSummary = {
   integrity: string;
 };
 
-function parseSchema<T extends Type>(
-  schema: T,
-  data: unknown,
-  label: string,
-): T["infer"] {
+function parseSchema<T extends Type>(schema: T, data: unknown, label: string): T["infer"] {
   const result = schema(data);
   if (result instanceof type.errors) {
     throw new Error(
@@ -75,15 +71,9 @@ async function listRegistryAsset(
     cookies,
   );
   if (listed.status !== 200) {
-    throw new Error(
-      `publishCorbitsToolsRegistry: failed to list assets: ${String(listed.status)}`,
-    );
+    throw new Error(`publishCorbitsToolsRegistry: failed to list assets: ${String(listed.status)}`);
   }
-  const rows = parseSchema(
-    AssetWithOriginResponse.array(),
-    listed.data,
-    "list assets response",
-  );
+  const rows = parseSchema(AssetWithOriginResponse.array(), listed.data, "list assets response");
   return rows.find((row) => row.name === CORBITS_TOOLS_REGISTRY)?.id;
 }
 
@@ -120,8 +110,7 @@ async function ensureRegistryAsset(
   // generic 500 instead, so the loser still resolves the winner's row
   // rather than throwing on a race this ensure is meant to tolerate.
   const isNameCollision =
-    created.status === 409 ||
-    JSON.stringify(created.data).includes("asset_tenant_kind_name");
+    created.status === 409 || JSON.stringify(created.data).includes("asset_tenant_kind_name");
   if (!isNameCollision) {
     throw new Error(
       `publishCorbitsToolsRegistry: failed to create the ${CORBITS_TOOLS_REGISTRY} asset: ${String(created.status)}`,
@@ -153,14 +142,9 @@ const TarballListResponse = TarballSummary.array();
  */
 export class EmptyRegistryPublishError extends Error {
   readonly success = false as const;
-  constructor(detail: {
-    uploaded: readonly string[];
-    missing: readonly string[];
-  }) {
+  constructor(detail: { uploaded: readonly string[]; missing: readonly string[] }) {
     const uploadedBit =
-      detail.uploaded.length === 0
-        ? "uploaded none"
-        : `uploaded ${detail.uploaded.join(", ")}`;
+      detail.uploaded.length === 0 ? "uploaded none" : `uploaded ${detail.uploaded.join(", ")}`;
     super(
       `publishCorbitsToolsRegistry: the ${CORBITS_TOOLS_REGISTRY} registry is missing the expected tool-package tarballs (${uploadedBit}; still missing ${detail.missing.join(", ")})`,
     );
@@ -209,11 +193,7 @@ async function listExistingTarballs(
       `publishCorbitsToolsRegistry: failed to list existing tarballs: ${String(listed.status)}`,
     );
   }
-  const rows = parseSchema(
-    TarballListResponse,
-    listed.data,
-    "list tarballs response",
-  );
+  const rows = parseSchema(TarballListResponse, listed.data, "list tarballs response");
   return new Map(rows.map((row) => [row.filename, row.integrity]));
 }
 
@@ -235,18 +215,10 @@ export async function isCorbitsToolsRegistrySeeded(
     cookies,
   );
   if (listed.status !== 200) {
-    throw new Error(
-      `publishCorbitsToolsRegistry: failed to list assets: ${String(listed.status)}`,
-    );
+    throw new Error(`publishCorbitsToolsRegistry: failed to list assets: ${String(listed.status)}`);
   }
-  const rows = parseSchema(
-    AssetWithOriginResponse.array(),
-    listed.data,
-    "list assets response",
-  );
-  const local = rows.find(
-    (row) => row.name === CORBITS_TOOLS_REGISTRY && row.origin.direct,
-  );
+  const rows = parseSchema(AssetWithOriginResponse.array(), listed.data, "list assets response");
+  const local = rows.find((row) => row.name === CORBITS_TOOLS_REGISTRY && row.origin.direct);
   const inherited = rows.find((row) => row.name === CORBITS_TOOLS_REGISTRY);
   const asset = local ?? inherited;
   if (asset === undefined) return false;
@@ -258,20 +230,11 @@ export async function isCorbitsToolsRegistrySeeded(
     cookies,
   );
   if (tarballs.status !== 200) return false;
-  const tarballRows = parseSchema(
-    TarballListResponse,
-    tarballs.data,
-    "list tarballs response",
-  );
-  return tarballsCoverRequiredSeedPackages(
-    tarballRows.map((row) => row.filename),
-  );
+  const tarballRows = parseSchema(TarballListResponse, tarballs.data, "list tarballs response");
+  return tarballsCoverRequiredSeedPackages(tarballRows.map((row) => row.filename));
 }
 
-export type FetchTarballPut = (
-  input: string,
-  init: RequestInit,
-) => Promise<Response>;
+export type FetchTarballPut = (input: string, init: RequestInit) => Promise<Response>;
 
 async function putTarball(
   hubUrl: string,
@@ -300,11 +263,7 @@ async function putTarball(
       `publishCorbitsToolsRegistry: upload failed for ${tarball.filename}: ${String(response.status)} ${text}`,
     );
   }
-  const parsed = parseSchema(
-    TarballPutResponse,
-    await response.json(),
-    `PUT ${tarball.filename}`,
-  );
+  const parsed = parseSchema(TarballPutResponse, await response.json(), `PUT ${tarball.filename}`);
   return { filename: tarball.filename, ...parsed };
 }
 
@@ -323,10 +282,7 @@ export type PublishCorbitsToolsRegistryArgs = {
   pack?: (packageDir: string) => Promise<PackedTarball>;
 };
 
-export type FetchTarballSource = (
-  url: string,
-  init?: RequestInit,
-) => Promise<Response>;
+export type FetchTarballSource = (url: string, init?: RequestInit) => Promise<Response>;
 
 /**
  * Fetches a prebuilt tarball from a `tarball-url` pin's URL and verifies
@@ -343,9 +299,7 @@ export async function fetchRegistryTarballSource(args: {
   const fetchImpl = args.fetchImpl ?? fetch;
   const response = await fetchImpl(args.url, { redirect: "follow" });
   if (!response.ok) {
-    throw new Error(
-      `fetchRegistryTarballSource: ${args.url} responded ${String(response.status)}`,
-    );
+    throw new Error(`fetchRegistryTarballSource: ${args.url} responded ${String(response.status)}`);
   }
   const bytes = new Uint8Array(await response.arrayBuffer());
   const actual = sha512Integrity(bytes);
@@ -380,17 +334,8 @@ export async function installRegistryTarball(args: {
   log?: (line: string) => void;
 }): Promise<"installed" | "present"> {
   const filename = `${args.name.replace(/^@/, "").replace("/", "-")}-${args.version}.tgz`;
-  const assetId = await ensureRegistryAsset(
-    args.api,
-    args.cookies,
-    args.tenantId,
-  );
-  const existing = await listExistingTarballs(
-    args.api,
-    args.cookies,
-    args.tenantId,
-    assetId,
-  );
+  const assetId = await ensureRegistryAsset(args.api, args.cookies, args.tenantId);
+  const existing = await listExistingTarballs(args.api, args.cookies, args.tenantId, assetId);
   if (!shouldPublishTarball(filename, existing.get(filename))) {
     args.log?.(`${filename} already published (skipped)`);
     return "present";
@@ -410,8 +355,7 @@ export async function installRegistryTarball(args: {
 
 function missingRequiredSeedPackages(filenames: readonly string[]): string[] {
   return REQUIRED_SEED_TOOL_PACKAGES.filter(
-    (name) =>
-      !filenames.some((filename) => tarballCoversPackage(filename, name)),
+    (name) => !filenames.some((filename) => tarballCoversPackage(filename, name)),
   );
 }
 
@@ -443,19 +387,10 @@ export async function publishCorbitsToolsRegistry(
   // bump would otherwise ship nothing and leave running agents on old tools.
   await checkFreshness();
 
-  const existingId = await listRegistryAsset(
-    args.api,
-    args.cookies,
-    args.tenantId,
-  );
+  const existingId = await listRegistryAsset(args.api, args.cookies, args.tenantId);
   const existingIntegrityByFilename =
     existingId !== undefined
-      ? await listExistingTarballs(
-          args.api,
-          args.cookies,
-          args.tenantId,
-          existingId,
-        )
+      ? await listExistingTarballs(args.api, args.cookies, args.tenantId, existingId)
       : new Map<string, string>();
 
   // Packs are independent; PUTs stay serial because they mutate one
@@ -471,10 +406,7 @@ export async function publishCorbitsToolsRegistry(
     if (item.status !== "ok") continue;
     const tarball = item.value;
     if (
-      !shouldPublishTarball(
-        tarball.filename,
-        existingIntegrityByFilename.get(tarball.filename),
-      )
+      !shouldPublishTarball(tarball.filename, existingIntegrityByFilename.get(tarball.filename))
     ) {
       args.log?.(
         `${tarball.filename} already published — versions are immutable; bump the version to ship changes (skipped)`,
@@ -495,9 +427,7 @@ export async function publishCorbitsToolsRegistry(
     return { success: true, summaries: [] };
   }
 
-  const assetId =
-    existingId ??
-    (await ensureRegistryAsset(args.api, args.cookies, args.tenantId));
+  const assetId = existingId ?? (await ensureRegistryAsset(args.api, args.cookies, args.tenantId));
 
   const summaries: PublishSummary[] = [];
   for (const tarball of toUpload) {
diff --git a/packages/tool-registry-publish/src/registry.ts b/packages/tool-registry-publish/src/registry.ts
index 641e83b00e..0a7dc49943 100644
--- a/packages/tool-registry-publish/src/registry.ts
+++ b/packages/tool-registry-publish/src/registry.ts
@@ -24,15 +24,10 @@ export const CORBITS_TOOLS_REGISTRY = "corbits-tools";
  * registry itself, not one of the workspace `packages/*-tools` this
  * publisher packs.
  */
-export const REQUIRED_SEED_TOOL_PACKAGES = [
-  "@corbits/capability-tools",
-] as const;
+export const REQUIRED_SEED_TOOL_PACKAGES = ["@corbits/capability-tools"] as const;
 
 /** True when `filename` is an npm-style tarball for `packageName` (any version). */
-export function tarballCoversPackage(
-  filename: string,
-  packageName: string,
-): boolean {
+export function tarballCoversPackage(filename: string, packageName: string): boolean {
   const prefix = `${packageName.replace(/^@/, "").replace("/", "-")}-`;
   return filename.startsWith(prefix) && filename.endsWith(".tgz");
 }
@@ -43,9 +38,7 @@ export function tarballCoversPackage(
  * is the dangling-asset case (`GET tarballs` → `[]` after git init with
  * no commit).
  */
-export function tarballsCoverRequiredSeedPackages(
-  filenames: Iterable<string>,
-): boolean {
+export function tarballsCoverRequiredSeedPackages(filenames: Iterable<string>): boolean {
   const list = [...filenames];
   if (list.length === 0) return false;
   return REQUIRED_SEED_TOOL_PACKAGES.every((name) =>
diff --git a/packages/tool-registry-publish/src/surface-reader.test.ts b/packages/tool-registry-publish/src/surface-reader.test.ts
index 25306276c2..c4ac3e90c7 100644
--- a/packages/tool-registry-publish/src/surface-reader.test.ts
+++ b/packages/tool-registry-publish/src/surface-reader.test.ts
@@ -27,9 +27,7 @@ async function legacyTarball(): Promise<Uint8Array> {
 function memorySource(files: Map<string, Uint8Array>) {
   return {
     listBlobs: (dir: string) =>
-      Promise.resolve(
-        [...files.keys()].filter((path) => path.startsWith(`${dir}/`)),
-      ),
+      Promise.resolve([...files.keys()].filter((path) => path.startsWith(`${dir}/`))),
     readBlob: (path: string) => {
       const bytes = files.get(path);
       if (bytes === undefined) return Promise.reject(new Error(`no ${path}`));
@@ -43,9 +41,7 @@ describe("readToolSurfaceManifests", () => {
     const tarball = await packToolPackageTarball(
       new URL("../../capability-tools", import.meta.url).pathname,
     );
-    const source = memorySource(
-      new Map([[`tarballs/${tarball.filename}`, tarball.bytes]]),
-    );
+    const source = memorySource(new Map([[`tarballs/${tarball.filename}`, tarball.bytes]]));
     const manifests = await readToolSurfaceManifests({
       ...source,
       rootDir: "tarballs",
@@ -55,18 +51,12 @@ describe("readToolSurfaceManifests", () => {
     expect(manifests[0]?.surface.map((entry) => entry.qualifiedId)).toContain(
       "@corbits/capability-tools/cap:request_capability",
     );
-    expect(manifests[0]?.surface.every((entry) => entry.kind === "tool")).toBe(
-      true,
-    );
+    expect(manifests[0]?.surface.every((entry) => entry.kind === "tool")).toBe(true);
   });
 
   test("ignores non-tarball blobs and reports none when the registry is empty", async () => {
-    const source = memorySource(
-      new Map([["tarballs/README.md", new TextEncoder().encode("hi")]]),
-    );
-    expect(
-      await readToolSurfaceManifests({ ...source, rootDir: "tarballs" }),
-    ).toEqual([]);
+    const source = memorySource(new Map([["tarballs/README.md", new TextEncoder().encode("hi")]]));
+    expect(await readToolSurfaceManifests({ ...source, rootDir: "tarballs" })).toEqual([]);
   });
 
   test("skips a tarball whose package.json is not a valid manifest", async () => {
@@ -80,9 +70,7 @@ describe("readToolSurfaceManifests", () => {
     // never re-uploads an existing name@version to heal them.
     const truncated = tarball.bytes.slice(0, 64);
     const source = memorySource(new Map([["tarballs/broken.tgz", truncated]]));
-    expect(
-      await readToolSurfaceManifests({ ...source, rootDir: "tarballs" }),
-    ).toEqual([]);
+    expect(await readToolSurfaceManifests({ ...source, rootDir: "tarballs" })).toEqual([]);
   });
 
   test("returns the valid manifests and skips the manifest-less legacy ones", async () => {
diff --git a/packages/tool-registry-publish/src/tool-name-limits.test.ts b/packages/tool-registry-publish/src/tool-name-limits.test.ts
index 903bcde405..25d4715675 100644
--- a/packages/tool-registry-publish/src/tool-name-limits.test.ts
+++ b/packages/tool-registry-publish/src/tool-name-limits.test.ts
@@ -27,10 +27,7 @@ function isBundle(value: unknown): value is Bundle {
 describe("corbits tool packages fit the 64-char OpenAI-compatible tool-name cap", () => {
   for (const dir of CORBITS_TOOL_PACKAGE_DIRS) {
     test(path.basename(dir), async () => {
-      const mod = (await import(path.join(dir, "src", "index.ts"))) as Record<
-        string,
-        unknown
-      >;
+      const mod = (await import(path.join(dir, "src", "index.ts"))) as Record<string, unknown>;
       const bundles = Object.values(mod).filter(isBundle);
       expect(bundles.length).toBeGreaterThan(0);
       for (const bundle of bundles) {
diff --git a/packages/tools-skills/package.json b/packages/tools-skills/package.json
index b1c8384e5b..0d2b4fc302 100644
--- a/packages/tools-skills/package.json
+++ b/packages/tools-skills/package.json
@@ -1,21 +1,21 @@
 {
   "name": "@corbits/tools-skills",
+  "version": "0.0.4",
   "description": "skills_list / skills_search / skills_load as an @intx/agent tool bundle: calls the sanctioned workflow-skills HTTP surface (@corbits/skills) with the sidecar's own bearer token and the run's own address, and fails closed rather than returning an empty registry",
-  "version": "0.0.3",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "packages/tools-skills"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "packages/tools-skills"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -27,12 +27,12 @@
   "dependencies": {
     "arktype": "catalog:"
   },
-  "peerDependencies": {
-    "@intx/agent": "0.3.0",
-    "@intx/types": "0.3.0"
-  },
   "devDependencies": {
     "@types/bun": "catalog:",
     "typescript": "catalog:"
+  },
+  "peerDependencies": {
+    "@intx/agent": "0.3.0",
+    "@intx/types": "0.3.0"
   }
 }
diff --git a/packages/tools-skills/src/client.test.ts b/packages/tools-skills/src/client.test.ts
index bbcf012ed5..1e21e1b267 100644
--- a/packages/tools-skills/src/client.test.ts
+++ b/packages/tools-skills/src/client.test.ts
@@ -14,24 +14,18 @@ const CONFIG = {
 // empty registry.
 describe("listSkills", () => {
   test("fails closed naming the missing stock route", () => {
-    expect(listSkills(CONFIG)).rejects.toThrow(
-      /no stock Interchange HTTP route/,
-    );
+    expect(listSkills(CONFIG)).rejects.toThrow(/no stock Interchange HTTP route/);
   });
 });
 
 describe("searchSkills", () => {
   test("fails closed naming the missing stock route", () => {
-    expect(searchSkills(CONFIG, "issues")).rejects.toThrow(
-      /no stock Interchange HTTP route/,
-    );
+    expect(searchSkills(CONFIG, "issues")).rejects.toThrow(/no stock Interchange HTTP route/);
   });
 });
 
 describe("loadSkill", () => {
   test("fails closed naming the missing stock route", () => {
-    expect(loadSkill(CONFIG, "triage")).rejects.toThrow(
-      /no stock Interchange HTTP route/,
-    );
+    expect(loadSkill(CONFIG, "triage")).rejects.toThrow(/no stock Interchange HTTP route/);
   });
 });
diff --git a/packages/tools-skills/src/tool.test.ts b/packages/tools-skills/src/tool.test.ts
index ccd4d8c589..2029c16c6c 100644
--- a/packages/tools-skills/src/tool.test.ts
+++ b/packages/tools-skills/src/tool.test.ts
@@ -1,12 +1,7 @@
 import { expect, test } from "bun:test";
 import type { ToolCall } from "@intx/types/runtime";
 
-import {
-  SKILLS_LIST_TOOL,
-  SKILLS_LOAD_TOOL,
-  SKILLS_SEARCH_TOOL,
-  skillsTools,
-} from "./tool";
+import { SKILLS_LIST_TOOL, SKILLS_LOAD_TOOL, SKILLS_SEARCH_TOOL, skillsTools } from "./tool";
 import type { WorkflowSkillsToolEnv } from "./tool";
 
 function testEnv(): WorkflowSkillsToolEnv {
@@ -31,11 +26,7 @@ test("declares skills_list, skills_search, and skills_load", () => {
 });
 
 test("requires the sanctioned workflow-skills env keys, not a per-user credential", () => {
-  expect(skillsTools.requires).toEqual([
-    "hubSkillsUrl",
-    "sidecarToken",
-    "address",
-  ]);
+  expect(skillsTools.requires).toEqual(["hubSkillsUrl", "sidecarToken", "address"]);
 });
 
 test("no tool's input schema accepts a tenant or principal argument", () => {
diff --git a/packages/tools-skills/src/tool.ts b/packages/tools-skills/src/tool.ts
index 6c94ad5e13..c024a1b23c 100644
--- a/packages/tools-skills/src/tool.ts
+++ b/packages/tools-skills/src/tool.ts
@@ -44,10 +44,7 @@ function clientConfig(env: WorkflowSkillsToolEnv) {
   };
 }
 
-async function runSkillsList(
-  env: WorkflowSkillsToolEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runSkillsList(env: WorkflowSkillsToolEnv, call: ToolCall): Promise<ToolResult> {
   try {
     const skills = await listSkills(clientConfig(env));
     return {
@@ -60,10 +57,7 @@ async function runSkillsList(
   }
 }
 
-async function runSkillsSearch(
-  env: WorkflowSkillsToolEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runSkillsSearch(env: WorkflowSkillsToolEnv, call: ToolCall): Promise<ToolResult> {
   const query = call.arguments["query"];
   if (typeof query !== "string" || query === "") {
     return errorResult(call.id, new Error("skills_search requires a query"));
@@ -80,10 +74,7 @@ async function runSkillsSearch(
   }
 }
 
-async function runSkillsLoad(
-  env: WorkflowSkillsToolEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runSkillsLoad(env: WorkflowSkillsToolEnv, call: ToolCall): Promise<ToolResult> {
   const name = call.arguments["name"];
   if (typeof name !== "string" || name === "") {
     return errorResult(call.id, new Error("skills_load requires a skill name"));
@@ -158,10 +149,7 @@ export const skillsTools = defineTool<WorkflowSkillsToolEnv>({
           return runSkillsLoad(env, call);
         default:
           return Promise.resolve(
-            errorResult(
-              call.id,
-              new Error(`@corbits/tools-skills: unknown tool "${call.name}"`),
-            ),
+            errorResult(call.id, new Error(`@corbits/tools-skills: unknown tool "${call.name}"`)),
           );
       }
     },
diff --git a/packages/turn-artifacts/package.json b/packages/turn-artifacts/package.json
index 259a1f1ea8..b93b2411d9 100644
--- a/packages/turn-artifacts/package.json
+++ b/packages/turn-artifacts/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/turn-artifacts",
+  "version": "0.0.1",
   "private": true,
   "description": "Parses persisted-Library-artifact facts out of a finalized turn's tool-call results — the one shape a workflow's finalize tool reports, shared by every surface that delivers those artifacts (chat messages, task results).",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/turn-artifacts/src/index.test.ts b/packages/turn-artifacts/src/index.test.ts
index 0d1028468d..bc335291c3 100644
--- a/packages/turn-artifacts/src/index.test.ts
+++ b/packages/turn-artifacts/src/index.test.ts
@@ -1,9 +1,6 @@
 import { describe, expect, test } from "bun:test";
 
-import {
-  persistedArtifactsForFinalizedTurn,
-  persistedArtifactsForToolCall,
-} from "./index";
+import { persistedArtifactsForFinalizedTurn, persistedArtifactsForToolCall } from "./index";
 
 describe("persistedArtifactsForToolCall", () => {
   test("parses a single persisted-artifact result", () => {
@@ -34,10 +31,7 @@ describe("persistedArtifactsForToolCall", () => {
         ],
       }),
     });
-    expect(artifacts.map((artifact) => artifact.id)).toEqual([
-      "art_1",
-      "art_2",
-    ]);
+    expect(artifacts.map((artifact) => artifact.id)).toEqual(["art_1", "art_2"]);
   });
 
   test("an errored call yields nothing", () => {
@@ -55,9 +49,7 @@ describe("persistedArtifactsForToolCall", () => {
   });
 
   test("unparseable JSON yields nothing", () => {
-    expect(
-      persistedArtifactsForToolCall({ isError: false, result: "not json" }),
-    ).toEqual([]);
+    expect(persistedArtifactsForToolCall({ isError: false, result: "not json" })).toEqual([]);
   });
 
   test("an unrecognized shape yields nothing — never a guess", () => {
@@ -86,15 +78,10 @@ describe("persistedArtifactsForFinalizedTurn", () => {
       {
         isError: false,
         result: JSON.stringify({
-          artifacts: [
-            { id: "art_2", title: "Two", kind: "text", persisted: true },
-          ],
+          artifacts: [{ id: "art_2", title: "Two", kind: "text", persisted: true }],
         }),
       },
     ]);
-    expect(artifacts.map((artifact) => artifact.id)).toEqual([
-      "art_1",
-      "art_2",
-    ]);
+    expect(artifacts.map((artifact) => artifact.id)).toEqual(["art_1", "art_2"]);
   });
 });
diff --git a/packages/url-path/package.json b/packages/url-path/package.json
index 811fc8f0e5..a3dfa2f36e 100644
--- a/packages/url-path/package.json
+++ b/packages/url-path/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/url-path",
+  "version": "0.0.1",
   "private": true,
   "description": "The one guarded decode for a URL path segment or param — decodeURIComponent throws on a malformed escape, so every route/deep-link parser that reads a path shares this instead of decoding raw",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/web-search-tools/package.json b/packages/web-search-tools/package.json
index bcaf0d4179..70ba114721 100644
--- a/packages/web-search-tools/package.json
+++ b/packages/web-search-tools/package.json
@@ -1,28 +1,21 @@
 {
   "name": "@corbits/web-search-tools",
+  "version": "0.0.4",
   "description": "Web search integration: a minimal Exa client and an @intx/agent tool bundle exposing web_search",
-  "version": "0.0.3",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "interchange": {
-    "credentials": [
-      {
-        "handle": "exa"
-      }
-    ]
-  },
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "packages/web-search-tools"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "packages/web-search-tools"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -34,12 +27,19 @@
   "dependencies": {
     "arktype": "catalog:"
   },
+  "devDependencies": {
+    "@types/bun": "catalog:",
+    "typescript": "catalog:"
+  },
   "peerDependencies": {
     "@intx/agent": "0.3.0",
     "@intx/types": "0.3.0"
   },
-  "devDependencies": {
-    "@types/bun": "catalog:",
-    "typescript": "catalog:"
+  "interchange": {
+    "credentials": [
+      {
+        "handle": "exa"
+      }
+    ]
   }
 }
diff --git a/packages/web-search-tools/src/client.test.ts b/packages/web-search-tools/src/client.test.ts
index c0a8947b44..932d82fbbe 100644
--- a/packages/web-search-tools/src/client.test.ts
+++ b/packages/web-search-tools/src/client.test.ts
@@ -6,9 +6,7 @@ test("returns normalized results on a successful call", async () => {
   const fetchImpl = (async (input: URL | string, init?: RequestInit) => {
     expect(String(input)).toBe("https://api.exa.ai/search");
     expect(init?.method).toBe("POST");
-    expect(
-      (init?.headers as Record<string, string> | undefined)?.["x-api-key"],
-    ).toBe("test-key");
+    expect((init?.headers as Record<string, string> | undefined)?.["x-api-key"]).toBe("test-key");
     const body: unknown = JSON.parse(String(init?.body));
     expect(body).toEqual({ query: "agent workflows", numResults: 5 });
     return new Response(
@@ -26,10 +24,7 @@ test("returns normalized results on a successful call", async () => {
     );
   }) as unknown as typeof fetch;
 
-  const results = await searchWeb(
-    { apiKey: "test-key", fetchImpl },
-    { query: "agent workflows" },
-  );
+  const results = await searchWeb({ apiKey: "test-key", fetchImpl }, { query: "agent workflows" });
   expect(results).toEqual([
     {
       url: "https://example.test/a",
@@ -50,10 +45,7 @@ test("falls back to fetch time and marks provenance degraded when a result has n
       { status: 200 },
     )) as unknown as typeof fetch;
 
-  const results = await searchWeb(
-    { apiKey: "test-key", fetchImpl },
-    { query: "topic" },
-  );
+  const results = await searchWeb({ apiKey: "test-key", fetchImpl }, { query: "topic" });
   expect(results).toHaveLength(1);
   expect(results[0]?.provenance).toBe("degraded");
   expect(typeof results[0]?.publishedAt).toBe("string");
@@ -65,10 +57,7 @@ test("drops results with no url", async () => {
       status: 200,
     })) as unknown as typeof fetch;
 
-  const results = await searchWeb(
-    { apiKey: "test-key", fetchImpl },
-    { query: "topic" },
-  );
+  const results = await searchWeb({ apiKey: "test-key", fetchImpl }, { query: "topic" });
   expect(results).toEqual([]);
 });
 
@@ -79,14 +68,8 @@ test("clamps numResults to the 1-25 range, defaulting to 5", async () => {
     return new Response(JSON.stringify({ results: [] }), { status: 200 });
   }) as unknown as typeof fetch;
 
-  await searchWeb(
-    { apiKey: "test-key", fetchImpl },
-    { query: "topic", numResults: 999 },
-  );
-  await searchWeb(
-    { apiKey: "test-key", fetchImpl },
-    { query: "topic", numResults: -1 },
-  );
+  await searchWeb({ apiKey: "test-key", fetchImpl }, { query: "topic", numResults: 999 });
+  await searchWeb({ apiKey: "test-key", fetchImpl }, { query: "topic", numResults: -1 });
   expect(captured).toEqual([
     { query: "topic", numResults: 25 },
     { query: "topic", numResults: 5 },
@@ -94,12 +77,9 @@ test("clamps numResults to the 1-25 range, defaulting to 5", async () => {
 });
 
 test("throws on a non-ok HTTP response", async () => {
-  const fetchImpl = (async () =>
-    new Response("nope", { status: 401 })) as unknown as typeof fetch;
+  const fetchImpl = (async () => new Response("nope", { status: 401 })) as unknown as typeof fetch;
 
-  await expect(
-    searchWeb({ apiKey: "bad", fetchImpl }, { query: "topic" }),
-  ).rejects.toThrow(/401/);
+  await expect(searchWeb({ apiKey: "bad", fetchImpl }, { query: "topic" })).rejects.toThrow(/401/);
 });
 
 test("throws when the response body does not match the expected shape", async () => {
@@ -108,7 +88,7 @@ test("throws when the response body does not match the expected shape", async ()
       status: 200,
     })) as unknown as typeof fetch;
 
-  await expect(
-    searchWeb({ apiKey: "test-key", fetchImpl }, { query: "topic" }),
-  ).rejects.toThrow(/did not match the expected shape/);
+  await expect(searchWeb({ apiKey: "test-key", fetchImpl }, { query: "topic" })).rejects.toThrow(
+    /did not match the expected shape/,
+  );
 });
diff --git a/packages/web-search-tools/src/client.ts b/packages/web-search-tools/src/client.ts
index e8ae051baa..47e1c8112c 100644
--- a/packages/web-search-tools/src/client.ts
+++ b/packages/web-search-tools/src/client.ts
@@ -44,20 +44,13 @@ const DEFAULT_NUM_RESULTS = 5;
 const MAX_NUM_RESULTS = 25;
 
 function clampNumResults(requested: number | undefined): number {
-  if (
-    requested === undefined ||
-    !Number.isInteger(requested) ||
-    requested <= 0
-  ) {
+  if (requested === undefined || !Number.isInteger(requested) || requested <= 0) {
     return DEFAULT_NUM_RESULTS;
   }
   return Math.min(requested, MAX_NUM_RESULTS);
 }
 
-function normalizeResult(
-  result: ExaSearchResult,
-  retrievedAt: string,
-): WebSearchResult | null {
+function normalizeResult(result: ExaSearchResult, retrievedAt: string): WebSearchResult | null {
   const url = result.url ?? "";
   if (url.length === 0) return null;
   const base = {
@@ -66,8 +59,7 @@ function normalizeResult(
     publishedAt: result.publishedDate ?? retrievedAt,
     source: "web" as const,
   };
-  const withAuthor =
-    result.author !== undefined ? { ...base, author: result.author } : base;
+  const withAuthor = result.author !== undefined ? { ...base, author: result.author } : base;
   const item: WebSearchResult =
     result.publishedDate === undefined
       ? { ...withAuthor, provenance: "degraded" as const }
@@ -88,9 +80,7 @@ export async function searchWeb(
   const url = new URL("/search", config.baseUrl ?? DEFAULT_BASE_URL);
   const baseHeaders = { "content-type": "application/json" };
   const headers =
-    config.apiKey !== undefined
-      ? { ...baseHeaders, "x-api-key": config.apiKey }
-      : baseHeaders;
+    config.apiKey !== undefined ? { ...baseHeaders, "x-api-key": config.apiKey } : baseHeaders;
   const response = await doFetch(url, {
     method: "POST",
     headers,
@@ -100,16 +90,12 @@ export async function searchWeb(
     }),
   });
   if (!response.ok) {
-    throw new Error(
-      `Exa search request failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`Exa search request failed: ${response.status} ${response.statusText}`);
   }
   const body: unknown = await response.json();
   const parsed = ExaSearchResponse(body);
   if (parsed instanceof type.errors) {
-    throw new Error(
-      `Exa search response did not match the expected shape: ${parsed.summary}`,
-    );
+    throw new Error(`Exa search response did not match the expected shape: ${parsed.summary}`);
   }
   const retrievedAt = new Date().toISOString();
   return parsed.results
diff --git a/packages/web-search-tools/src/tool.test.ts b/packages/web-search-tools/src/tool.test.ts
index eff50a9b7b..b06d2512ac 100644
--- a/packages/web-search-tools/src/tool.test.ts
+++ b/packages/web-search-tools/src/tool.test.ts
@@ -22,9 +22,7 @@ function fakeCredentials(secret: string | undefined): CredentialCapability {
   return {
     resolve(handle: string): Promise<MediatedCredential> {
       if (secret === undefined) {
-        return Promise.reject(
-          new Error(`no credential is bound to handle "${handle}"`),
-        );
+        return Promise.reject(new Error(`no credential is bound to handle "${handle}"`));
       }
       return Promise.resolve({
         kind: "http",
@@ -86,9 +84,7 @@ test("rejects a missing query without calling the network", async () => {
 test("returns results as JSON content on a successful call", async () => {
   const originalFetch = globalThis.fetch;
   globalThis.fetch = (async (_input: unknown, init?: RequestInit) => {
-    expect((init?.headers as Headers | undefined)?.get("x-api-key")).toBe(
-      "key",
-    );
+    expect((init?.headers as Headers | undefined)?.get("x-api-key")).toBe("key");
     return new Response(
       JSON.stringify({
         results: [
@@ -117,8 +113,7 @@ test("returns results as JSON content on a successful call", async () => {
 
 test("degrades to an error result (never throws) when the underlying call fails", async () => {
   const originalFetch = globalThis.fetch;
-  globalThis.fetch = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  globalThis.fetch = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
   try {
     const bundle = webSearchTools(fakeEnv(fakeCredentials("key")));
     const result = await bundle.run(CALL, new AbortController().signal);
diff --git a/packages/web-search-tools/src/tool.ts b/packages/web-search-tools/src/tool.ts
index 5dbe373810..fc9837194a 100644
--- a/packages/web-search-tools/src/tool.ts
+++ b/packages/web-search-tools/src/tool.ts
@@ -48,10 +48,7 @@ async function resolveWebSearchCredential(
   }
 }
 
-async function runWebSearch(
-  env: WebSearchEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runWebSearch(env: WebSearchEnv, call: ToolCall): Promise<ToolResult> {
   const credential = await resolveWebSearchCredential(env);
   if (credential === null) {
     return notConnectedResult(call.id);
@@ -66,12 +63,8 @@ async function runWebSearch(
   }
   const numResults = call.arguments["numResults"];
   try {
-    const params =
-      typeof numResults === "number" ? { query, numResults } : { query };
-    const results = await searchWeb(
-      { fetchImpl: credential.fetchImpl },
-      params,
-    );
+    const params = typeof numResults === "number" ? { query, numResults } : { query };
+    const results = await searchWeb({ fetchImpl: credential.fetchImpl }, params);
     return { callId: call.id, content: JSON.stringify({ results }) };
   } catch (err) {
     return {
diff --git a/packages/webhook-triggers/package.json b/packages/webhook-triggers/package.json
index b2f7ba01f8..0097d1b101 100644
--- a/packages/webhook-triggers/package.json
+++ b/packages/webhook-triggers/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/webhook-triggers",
+  "version": "0.0.1",
   "private": true,
   "description": "Webhook-triggered workflow launches: an external service (e.g. Granola) posts a payload that maps to input for an existing tenant workflow definition, launched through Interchange's prepareProvisionedDeployment.",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/webhook-triggers/src/index.ts b/packages/webhook-triggers/src/index.ts
index c17ee0e9cc..072484ae94 100644
--- a/packages/webhook-triggers/src/index.ts
+++ b/packages/webhook-triggers/src/index.ts
@@ -34,10 +34,7 @@ export {
   type LaunchWebhookTriggerDeps,
   type LaunchedWebhookTrigger,
 } from "./launch";
-export {
-  createWebhookIngressRoutes,
-  type CreateWebhookIngressRoutesDeps,
-} from "./ingress-routes";
+export { createWebhookIngressRoutes, type CreateWebhookIngressRoutesDeps } from "./ingress-routes";
 export {
   createWebhookTriggerRoutes,
   type CreateWebhookTriggerRoutesDeps,
diff --git a/packages/webhook-triggers/src/ingress-routes.ts b/packages/webhook-triggers/src/ingress-routes.ts
index e3a0cde636..d32480b817 100644
--- a/packages/webhook-triggers/src/ingress-routes.ts
+++ b/packages/webhook-triggers/src/ingress-routes.ts
@@ -44,10 +44,7 @@ export type CreateWebhookIngressRoutesDeps = {
    * route's own parsing/signature/lookup logic is testable without a
    * database or the launch machinery.
    */
-  launch: (
-    trigger: WebhookTriggerRow,
-    payload: unknown,
-  ) => Promise<LaunchedWebhookTrigger>;
+  launch: (trigger: WebhookTriggerRow, payload: unknown) => Promise<LaunchedWebhookTrigger>;
 };
 
 /**
@@ -56,9 +53,7 @@ export type CreateWebhookIngressRoutesDeps = {
  * route resolves its own tenant scope by looking the trigger up by
  * id, since the caller carries no session and no tenant path segment.
  */
-export function createWebhookIngressRoutes(
-  deps: CreateWebhookIngressRoutesDeps,
-): Hono<Env> {
+export function createWebhookIngressRoutes(deps: CreateWebhookIngressRoutesDeps): Hono<Env> {
   const app = new Hono<Env>();
 
   app.post("/:triggerId", async (c) => {
@@ -81,14 +76,7 @@ export function createWebhookIngressRoutes(
     const rawBody = await c.req.text();
     const signatureHeader = c.req.header(WEBHOOK_SIGNATURE_HEADER);
     const timestampHeader = c.req.header(WEBHOOK_TIMESTAMP_HEADER);
-    if (
-      !verifySignature(
-        trigger.secret,
-        timestampHeader,
-        rawBody,
-        signatureHeader,
-      )
-    ) {
+    if (!verifySignature(trigger.secret, timestampHeader, rawBody, signatureHeader)) {
       const reason = isFreshTimestamp(timestampHeader)
         ? "bad signature"
         : "missing or stale timestamp";
@@ -115,10 +103,7 @@ export function createWebhookIngressRoutes(
     const launched = await deps.launch(trigger, payload);
     await deps.store.recordFired(trigger.id, new Date());
 
-    return c.json(
-      { instanceId: launched.instanceId, address: launched.triggerAddress },
-      202,
-    );
+    return c.json({ instanceId: launched.instanceId, address: launched.triggerAddress }, 202);
   });
 
   return app;
diff --git a/packages/webhook-triggers/src/launch.ts b/packages/webhook-triggers/src/launch.ts
index dbd90c520a..36981a06b8 100644
--- a/packages/webhook-triggers/src/launch.ts
+++ b/packages/webhook-triggers/src/launch.ts
@@ -44,10 +44,7 @@ export type CryptoProviderCache = {
 export type LaunchWebhookTriggerDeps = {
   db: DB["db"];
   repoStore: Pick<RepoStore, "resolveRef">;
-  workflowAllocationService: Pick<
-    WorkflowAllocationService,
-    "prepareProvisionedDeployment"
-  >;
+  workflowAllocationService: Pick<WorkflowAllocationService, "prepareProvisionedDeployment">;
   sessionService: Pick<SessionService, "sendUserMessage">;
   /**
    * The same wrapped `EventCollectorRegistry` every native launcher
@@ -112,8 +109,7 @@ export async function launchWebhookTrigger(
   }
   if (definitionRow.assetId === null) {
     throw new Error(
-      `workflow definition "${trigger.workflowDefinitionId}" has not been ` +
-        "materialized",
+      `workflow definition "${trigger.workflowDefinitionId}" has not been ` + "materialized",
     );
   }
 
@@ -125,10 +121,7 @@ export async function launchWebhookTrigger(
   }
 
   const projection = await readDefinitionProjection(deps.db, definitionRow);
-  const foldedBody = readFoldedBody(
-    projection,
-    definitionRow.grantRequirements,
-  );
+  const foldedBody = readFoldedBody(projection, definitionRow.grantRequirements);
   if (foldedBody.systemPrompt === "") {
     throw new Error(
       `workflow definition "${trigger.workflowDefinitionId}" cannot be ` +
@@ -136,15 +129,13 @@ export async function launchWebhookTrigger(
     );
   }
 
-  const offerings = [
-    ...(await listVisibleOfferings(deps.db, trigger.tenantId)),
-  ].sort((a, b) => a.offering.priority - b.offering.priority);
+  const offerings = [...(await listVisibleOfferings(deps.db, trigger.tenantId))].sort(
+    (a, b) => a.offering.priority - b.offering.priority,
+  );
   const sourceOfferingIds = offerings.map((o) => o.offering.id);
   const defaultSourceOfferingId = sourceOfferingIds[0];
   if (defaultSourceOfferingId === undefined) {
-    throw new Error(
-      `no catalog offerings visible to tenant "${trigger.tenantId}"`,
-    );
+    throw new Error(`no catalog offerings visible to tenant "${trigger.tenantId}"`);
   }
 
   const assetId = definitionRow.assetId;
@@ -159,27 +150,26 @@ export async function launchWebhookTrigger(
   const anchorRunId = generateId("workflowRun");
   const sessionId = generateId("session");
 
-  const prepared =
-    await deps.workflowAllocationService.prepareProvisionedDeployment({
-      tenantId: trigger.tenantId,
-      anchorRunId,
-      sessionId,
-      deploymentDomain: tenantRow.domain,
-      source: {
-        kind: "asset",
-        assetId,
-        package: { format: "source", commitSha },
-      },
-      entry: WORKFLOW_SOURCE_ENTRY,
-      definitionAssetId: assetId,
-      sourceAuthorityPrincipalId: trigger.createdBy,
-      sourceOfferingIds,
-      defaultSourceOfferingId,
-      deployContent: { systemPrompt: "" },
-      ...(foldedBody.toolPackagePins.length > 0
-        ? { toolPackagePins: foldedBody.toolPackagePins }
-        : {}),
-    });
+  const prepared = await deps.workflowAllocationService.prepareProvisionedDeployment({
+    tenantId: trigger.tenantId,
+    anchorRunId,
+    sessionId,
+    deploymentDomain: tenantRow.domain,
+    source: {
+      kind: "asset",
+      assetId,
+      package: { format: "source", commitSha },
+    },
+    entry: WORKFLOW_SOURCE_ENTRY,
+    definitionAssetId: assetId,
+    sourceAuthorityPrincipalId: trigger.createdBy,
+    sourceOfferingIds,
+    defaultSourceOfferingId,
+    deployContent: { systemPrompt: "" },
+    ...(foldedBody.toolPackagePins.length > 0
+      ? { toolPackagePins: foldedBody.toolPackagePins }
+      : {}),
+  });
 
   await recordAgentSessionAtProvision({
     db: deps.db,
@@ -190,9 +180,7 @@ export async function launchWebhookTrigger(
   });
 
   const content = renderInputTemplate(trigger.inputTemplate, payload);
-  const cryptoProvider = await deps.cryptoProviderCache.get(
-    prepared.anchorRunId,
-  );
+  const cryptoProvider = await deps.cryptoProviderCache.get(prepared.anchorRunId);
   try {
     await deliverWhenRoutable({
       send: () =>
diff --git a/packages/webhook-triggers/src/management-routes.ts b/packages/webhook-triggers/src/management-routes.ts
index 544a91568d..11815ae44e 100644
--- a/packages/webhook-triggers/src/management-routes.ts
+++ b/packages/webhook-triggers/src/management-routes.ts
@@ -73,15 +73,10 @@ export type CreateWebhookTriggerRoutesDeps = {
    * When provided, `POST /` rejects with 404 if the workflow definition
    * is not in the request tenant. Tests may omit (always-allow).
    */
-  workflowDefinitionInTenant?: (
-    tenantId: string,
-    definitionId: string,
-  ) => Promise<boolean>;
+  workflowDefinitionInTenant?: (tenantId: string, definitionId: string) => Promise<boolean>;
 };
 
-export function createWebhookTriggerRoutes(
-  deps: CreateWebhookTriggerRoutesDeps,
-): Hono<TenantEnv> {
+export function createWebhookTriggerRoutes(deps: CreateWebhookTriggerRoutesDeps): Hono<TenantEnv> {
   const app = new Hono<TenantEnv>();
 
   app.post("/", deps.requireGrant("webhook-trigger:*", "create"), async (c) => {
@@ -100,10 +95,7 @@ export function createWebhookTriggerRoutes(
     const principal = c.get("principal");
 
     if (deps.workflowDefinitionInTenant !== undefined) {
-      const owned = await deps.workflowDefinitionInTenant(
-        tenant.id,
-        body.workflowDefinitionId,
-      );
+      const owned = await deps.workflowDefinitionInTenant(tenant.id, body.workflowDefinitionId);
       if (!owned) {
         return c.json(
           makeErrorEnvelope({
@@ -133,8 +125,7 @@ export function createWebhookTriggerRoutes(
         return c.json(
           makeErrorEnvelope({
             code: "conflict",
-            userMessage:
-              "a trigger with this name already exists for this workflow definition",
+            userMessage: "a trigger with this name already exists for this workflow definition",
           }),
           409,
         );
@@ -151,24 +142,20 @@ export function createWebhookTriggerRoutes(
     return c.json({ items: rows.map(publicView) });
   });
 
-  app.get(
-    "/:id",
-    deps.requireGrant(idResource("webhook-trigger", "id"), "read"),
-    async (c) => {
-      const tenant = c.get("tenant");
-      const row = await deps.store.get(tenant.id, c.req.param("id"));
-      if (row === undefined) {
-        return c.json(
-          makeErrorEnvelope({
-            code: "not_found",
-            userMessage: "trigger not found",
-          }),
-          404,
-        );
-      }
-      return c.json(publicView(row));
-    },
-  );
+  app.get("/:id", deps.requireGrant(idResource("webhook-trigger", "id"), "read"), async (c) => {
+    const tenant = c.get("tenant");
+    const row = await deps.store.get(tenant.id, c.req.param("id"));
+    if (row === undefined) {
+      return c.json(
+        makeErrorEnvelope({
+          code: "not_found",
+          userMessage: "trigger not found",
+        }),
+        404,
+      );
+    }
+    return c.json(publicView(row));
+  });
 
   app.post(
     "/:id/rotate-secret",
@@ -176,11 +163,7 @@ export function createWebhookTriggerRoutes(
     async (c) => {
       const tenant = c.get("tenant");
       const secret = generateWebhookSecret();
-      const row = await deps.store.rotateSecret(
-        tenant.id,
-        c.req.param("id"),
-        secret,
-      );
+      const row = await deps.store.rotateSecret(tenant.id, c.req.param("id"), secret);
       if (row === undefined) {
         return c.json(
           makeErrorEnvelope({
@@ -209,11 +192,7 @@ export function createWebhookTriggerRoutes(
         );
       }
       const tenant = c.get("tenant");
-      const row = await deps.store.setEnabled(
-        tenant.id,
-        c.req.param("id"),
-        body.enabled,
-      );
+      const row = await deps.store.setEnabled(tenant.id, c.req.param("id"), body.enabled);
       if (row === undefined) {
         return c.json(
           makeErrorEnvelope({
diff --git a/packages/webhook-triggers/src/mapping.ts b/packages/webhook-triggers/src/mapping.ts
index d6eb55258f..59588584d3 100644
--- a/packages/webhook-triggers/src/mapping.ts
+++ b/packages/webhook-triggers/src/mapping.ts
@@ -27,10 +27,7 @@ function stringify(value: unknown): string {
  * Applies `template`'s `{{path.to.field}}` placeholders against
  * `payload`, producing the message content sent to the launched run.
  */
-export function renderInputTemplate(
-  template: string,
-  payload: unknown,
-): string {
+export function renderInputTemplate(template: string, payload: unknown): string {
   return template.replace(PLACEHOLDER, (_match, dottedPath: string) =>
     stringify(readPath(payload, dottedPath)),
   );
diff --git a/packages/webhook-triggers/src/repo-review-lease.ts b/packages/webhook-triggers/src/repo-review-lease.ts
index 10fa9f89b4..7485ce76e7 100644
--- a/packages/webhook-triggers/src/repo-review-lease.ts
+++ b/packages/webhook-triggers/src/repo-review-lease.ts
@@ -33,9 +33,8 @@ import type { PostgresJsDatabase } from "drizzle-orm/postgres-js";
 
 import { repoReviewLease } from "./schema";
 
-export type RepoReviewLeaseDb<
-  TSchema extends Record<string, unknown> = Record<string, never>,
-> = PostgresJsDatabase<TSchema>;
+export type RepoReviewLeaseDb<TSchema extends Record<string, unknown> = Record<string, never>> =
+  PostgresJsDatabase<TSchema>;
 
 /** Comfortably longer than a single repo's synchronous mint-and-create
  * work should ever take, so a live lease is never mistaken for stale;
@@ -59,9 +58,9 @@ export interface RepoReviewLeaseStore {
   release(tenantId: string, repo: string): Promise<void>;
 }
 
-export function createDrizzleRepoReviewLeaseStore<
-  TSchema extends Record<string, unknown>,
->(db: RepoReviewLeaseDb<TSchema>): RepoReviewLeaseStore {
+export function createDrizzleRepoReviewLeaseStore<TSchema extends Record<string, unknown>>(
+  db: RepoReviewLeaseDb<TSchema>,
+): RepoReviewLeaseStore {
   return {
     async acquire(tenantId, repo) {
       const now = new Date();
@@ -93,12 +92,7 @@ export function createDrizzleRepoReviewLeaseStore<
     async release(tenantId, repo) {
       await db
         .delete(repoReviewLease)
-        .where(
-          and(
-            eq(repoReviewLease.tenantId, tenantId),
-            eq(repoReviewLease.repo, repo),
-          ),
-        );
+        .where(and(eq(repoReviewLease.tenantId, tenantId), eq(repoReviewLease.repo, repo)));
     },
   };
 }
diff --git a/packages/webhook-triggers/src/schema.ts b/packages/webhook-triggers/src/schema.ts
index 3e30c24c40..4744ef685c 100644
--- a/packages/webhook-triggers/src/schema.ts
+++ b/packages/webhook-triggers/src/schema.ts
@@ -14,13 +14,7 @@
 // `CredentialCipher` seam — see `./store.ts` for the encrypt/decrypt
 // wiring and `./signature.ts` for the security-model note on what that
 // does and does not close.
-import {
-  boolean,
-  pgSchema,
-  text,
-  timestamp,
-  uniqueIndex,
-} from "drizzle-orm/pg-core";
+import { boolean, pgSchema, text, timestamp, uniqueIndex } from "drizzle-orm/pg-core";
 
 export const webhookTriggersSchema = pgSchema("webhook_triggers");
 
@@ -46,9 +40,7 @@ export const webhookTrigger = webhookTriggersSchema.table("webhook_trigger", {
   secret: text("secret").notNull(),
   enabled: boolean("enabled").notNull().default(true),
   createdBy: text("created_by").notNull(),
-  createdAt: timestamp("created_at", { withTimezone: true })
-    .notNull()
-    .defaultNow(),
+  createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
   lastFiredAt: timestamp("last_fired_at", { withTimezone: true }),
 });
 
@@ -72,13 +64,9 @@ export const repoReviewLease = webhookTriggersSchema.table(
     id: text("id").primaryKey(),
     tenantId: text("tenant_id").notNull(),
     repo: text("repo").notNull(),
-    leasedAt: timestamp("leased_at", { withTimezone: true })
-      .notNull()
-      .defaultNow(),
+    leasedAt: timestamp("leased_at", { withTimezone: true }).notNull().defaultNow(),
   },
-  (t) => [
-    uniqueIndex("repo_review_lease_tenant_repo_unique").on(t.tenantId, t.repo),
-  ],
+  (t) => [uniqueIndex("repo_review_lease_tenant_repo_unique").on(t.tenantId, t.repo)],
 );
 
 export type RepoReviewLeaseRow = typeof repoReviewLease.$inferSelect;
diff --git a/packages/webhook-triggers/src/signature.ts b/packages/webhook-triggers/src/signature.ts
index 90c96a0123..095adbad76 100644
--- a/packages/webhook-triggers/src/signature.ts
+++ b/packages/webhook-triggers/src/signature.ts
@@ -48,11 +48,7 @@ function signedMaterial(timestamp: string, rawBody: string): string {
 }
 
 /** The HMAC-SHA256 hex digest of `timestamp.rawBody` under `secret`. */
-export function signPayload(
-  secret: string,
-  timestamp: string,
-  rawBody: string,
-): string {
+export function signPayload(secret: string, timestamp: string, rawBody: string): string {
   return createHmac("sha256", secret)
     .update(signedMaterial(timestamp, rawBody), "utf8")
     .digest("hex");
@@ -63,9 +59,7 @@ export function signPayload(
  * for a rejected delivery than "bad signature" — the HTTP response
  * stays the same generic 401 either way (see the module doc comment).
  */
-export function isFreshTimestamp(
-  timestampHeader: string | undefined,
-): timestampHeader is string {
+export function isFreshTimestamp(timestampHeader: string | undefined): timestampHeader is string {
   if (timestampHeader === undefined || timestampHeader === "") return false;
   const seconds = Number(timestampHeader);
   if (!Number.isFinite(seconds)) return false;
@@ -103,10 +97,7 @@ export function verifySignature(
   } catch {
     return false;
   }
-  if (
-    expectedBuffer.length !== providedBuffer.length ||
-    expectedBuffer.length === 0
-  ) {
+  if (expectedBuffer.length !== providedBuffer.length || expectedBuffer.length === 0) {
     return false;
   }
   return timingSafeEqual(expectedBuffer, providedBuffer);
diff --git a/packages/webhook-triggers/src/store.ts b/packages/webhook-triggers/src/store.ts
index 50557dfd33..8897d91a79 100644
--- a/packages/webhook-triggers/src/store.ts
+++ b/packages/webhook-triggers/src/store.ts
@@ -21,9 +21,8 @@ import { credentialAad, type CredentialCipher } from "@intx/types";
 
 import { webhookTrigger, type WebhookTriggerRow } from "./schema";
 
-export type WebhookTriggersDb<
-  TSchema extends Record<string, unknown> = Record<string, never>,
-> = PostgresJsDatabase<TSchema>;
+export type WebhookTriggersDb<TSchema extends Record<string, unknown> = Record<string, never>> =
+  PostgresJsDatabase<TSchema>;
 
 export interface CreateWebhookTriggerInput {
   readonly id: string;
@@ -57,10 +56,7 @@ export interface WebhookTriggerStore {
    * trigger.
    */
   ensure(input: CreateWebhookTriggerInput): Promise<WebhookTriggerRow>;
-  get(
-    tenantId: string,
-    triggerId: string,
-  ): Promise<WebhookTriggerRow | undefined>;
+  get(tenantId: string, triggerId: string): Promise<WebhookTriggerRow | undefined>;
   /** Looked up by the ingress route, which has no tenant scope of its own. */
   getById(triggerId: string): Promise<WebhookTriggerRow | undefined>;
   list(tenantId: string): Promise<WebhookTriggerRow[]>;
@@ -78,17 +74,12 @@ export interface WebhookTriggerStore {
   remove(tenantId: string, triggerId: string): Promise<boolean>;
 }
 
-export function createDrizzleWebhookTriggerStore<
-  TSchema extends Record<string, unknown>,
->(
+export function createDrizzleWebhookTriggerStore<TSchema extends Record<string, unknown>>(
   db: WebhookTriggersDb<TSchema>,
   credentialCipher: CredentialCipher,
 ): WebhookTriggerStore {
   async function decrypted(row: WebhookTriggerRow): Promise<WebhookTriggerRow> {
-    const secret = await credentialCipher.decrypt(
-      row.secret,
-      credentialAad(row.id, "secret"),
-    );
+    const secret = await credentialCipher.decrypt(row.secret, credentialAad(row.id, "secret"));
     return { ...row, secret };
   }
 
@@ -168,9 +159,7 @@ export function createDrizzleWebhookTriggerStore<
         )
         .limit(1);
       if (existing === undefined) {
-        throw new Error(
-          "expected webhook trigger row after conflicting insert",
-        );
+        throw new Error("expected webhook trigger row after conflicting insert");
       }
       // The winner's real, already-persisted secret — never the
       // freshly generated plaintext this call never actually stored.
@@ -181,20 +170,12 @@ export function createDrizzleWebhookTriggerStore<
       const [row] = await db
         .select()
         .from(webhookTrigger)
-        .where(
-          and(
-            eq(webhookTrigger.id, triggerId),
-            eq(webhookTrigger.tenantId, tenantId),
-          ),
-        );
+        .where(and(eq(webhookTrigger.id, triggerId), eq(webhookTrigger.tenantId, tenantId)));
       return row !== undefined ? decrypted(row) : undefined;
     },
 
     async getById(triggerId) {
-      const [row] = await db
-        .select()
-        .from(webhookTrigger)
-        .where(eq(webhookTrigger.id, triggerId));
+      const [row] = await db.select().from(webhookTrigger).where(eq(webhookTrigger.id, triggerId));
       return row !== undefined ? decrypted(row) : undefined;
     },
 
@@ -202,10 +183,7 @@ export function createDrizzleWebhookTriggerStore<
       // Never decrypted: `publicView` (management-routes.ts) never reads
       // `secret` off a listed row, so paying for N decrypts here would be
       // pure waste.
-      return db
-        .select()
-        .from(webhookTrigger)
-        .where(eq(webhookTrigger.tenantId, tenantId));
+      return db.select().from(webhookTrigger).where(eq(webhookTrigger.tenantId, tenantId));
     },
 
     async rotateSecret(tenantId, triggerId, secret) {
@@ -216,12 +194,7 @@ export function createDrizzleWebhookTriggerStore<
       const [row] = await db
         .update(webhookTrigger)
         .set({ secret: encryptedSecret })
-        .where(
-          and(
-            eq(webhookTrigger.id, triggerId),
-            eq(webhookTrigger.tenantId, tenantId),
-          ),
-        )
+        .where(and(eq(webhookTrigger.id, triggerId), eq(webhookTrigger.tenantId, tenantId)))
         .returning();
       // As in `create`, the plaintext is already known — return it
       // directly instead of decrypting what was just encrypted.
@@ -232,12 +205,7 @@ export function createDrizzleWebhookTriggerStore<
       const [row] = await db
         .update(webhookTrigger)
         .set({ enabled })
-        .where(
-          and(
-            eq(webhookTrigger.id, triggerId),
-            eq(webhookTrigger.tenantId, tenantId),
-          ),
-        )
+        .where(and(eq(webhookTrigger.id, triggerId), eq(webhookTrigger.tenantId, tenantId)))
         .returning();
       return row;
     },
@@ -252,12 +220,7 @@ export function createDrizzleWebhookTriggerStore<
     async remove(tenantId, triggerId) {
       const deleted = await db
         .delete(webhookTrigger)
-        .where(
-          and(
-            eq(webhookTrigger.id, triggerId),
-            eq(webhookTrigger.tenantId, tenantId),
-          ),
-        )
+        .where(and(eq(webhookTrigger.id, triggerId), eq(webhookTrigger.tenantId, tenantId)))
         .returning({ id: webhookTrigger.id });
       return deleted.length > 0;
     },
diff --git a/packages/webhook-triggers/test/ingress-routes.test.ts b/packages/webhook-triggers/test/ingress-routes.test.ts
index 0924845b16..bbce19f4e9 100644
--- a/packages/webhook-triggers/test/ingress-routes.test.ts
+++ b/packages/webhook-triggers/test/ingress-routes.test.ts
@@ -8,11 +8,7 @@
 // can't tell them apart.
 import { describe, expect, test } from "bun:test";
 import { createWebhookIngressRoutes } from "../src/ingress-routes";
-import {
-  signPayload,
-  WEBHOOK_SIGNATURE_HEADER,
-  WEBHOOK_TIMESTAMP_HEADER,
-} from "../src/signature";
+import { signPayload, WEBHOOK_SIGNATURE_HEADER, WEBHOOK_TIMESTAMP_HEADER } from "../src/signature";
 import { createInMemoryWebhookTriggerStore } from "./test-support";
 
 function nowSeconds(): string {
@@ -39,9 +35,7 @@ async function seedTrigger(
 }
 
 function buildApp(
-  launch: Parameters<
-    typeof createWebhookIngressRoutes
-  >[0]["launch"] = async () => ({
+  launch: Parameters<typeof createWebhookIngressRoutes>[0]["launch"] = async () => ({
     instanceId: "ins_x",
     triggerAddress: "ins_x@acme.example",
   }),
@@ -154,11 +148,7 @@ describe("POST /:triggerId", () => {
       headers: {
         "content-type": "application/json",
         [WEBHOOK_TIMESTAMP_HEADER]: timestamp,
-        [WEBHOOK_SIGNATURE_HEADER]: signPayload(
-          "wrong-secret",
-          timestamp,
-          body,
-        ),
+        [WEBHOOK_SIGNATURE_HEADER]: signPayload("wrong-secret", timestamp, body),
       },
       body,
     });
diff --git a/packages/webhook-triggers/test/launch.test.ts b/packages/webhook-triggers/test/launch.test.ts
index fc574f79d6..56c3999886 100644
--- a/packages/webhook-triggers/test/launch.test.ts
+++ b/packages/webhook-triggers/test/launch.test.ts
@@ -39,9 +39,7 @@ const DEFAULT_VISIBLE_OFFERINGS = [
   },
 ];
 
-let visibleOfferings: typeof DEFAULT_VISIBLE_OFFERINGS = [
-  ...DEFAULT_VISIBLE_OFFERINGS,
-];
+let visibleOfferings: typeof DEFAULT_VISIBLE_OFFERINGS = [...DEFAULT_VISIBLE_OFFERINGS];
 let frozenProjection: unknown = INERT_PROJECTION;
 
 mock.module("@intx/db", () => ({
@@ -149,8 +147,7 @@ type PrepareArgs = {
 let resolveRefCalls: unknown[] = [];
 let prepareCalls: PrepareArgs[] = [];
 let sendUserMessageCalls: unknown[] = [];
-let sendUserMessageImpl: () => Promise<Uint8Array> = async () =>
-  new Uint8Array([1]);
+let sendUserMessageImpl: () => Promise<Uint8Array> = async () => new Uint8Array([1]);
 let cryptoGetKeys: string[] = [];
 let isRoutableForTest = true;
 
@@ -332,11 +329,7 @@ describe("launchWebhookTrigger", () => {
     await launchWebhookTrigger(baseDeps(), TRIGGER, { status: "ok" });
 
     expect(resolveRefCalls).toEqual([
-      [
-        { kind: "hub" },
-        { kind: "workflow", id: DEFINITION_ROW.assetId },
-        DEFAULT_ASSET_REF,
-      ],
+      [{ kind: "hub" }, { kind: "workflow", id: DEFINITION_ROW.assetId }, DEFAULT_ASSET_REF],
     ]);
 
     expect(prepareCalls).toHaveLength(1);
diff --git a/packages/webhook-triggers/test/management-routes.test.ts b/packages/webhook-triggers/test/management-routes.test.ts
index 508cdba255..7379588650 100644
--- a/packages/webhook-triggers/test/management-routes.test.ts
+++ b/packages/webhook-triggers/test/management-routes.test.ts
@@ -14,10 +14,7 @@ const allowAll: RequireGrant = () => async (_c, next) => {
 function buildApp(overrides: { requireGrant?: RequireGrant } = {}) {
   const store = createInMemoryWebhookTriggerStore();
   const requireGrant = overrides.requireGrant ?? allowAll;
-  const app = mountAs(
-    createWebhookTriggerRoutes({ store, requireGrant }),
-    "prn_alice",
-  );
+  const app = mountAs(createWebhookTriggerRoutes({ store, requireGrant }), "prn_alice");
   return { app, store };
 }
 
@@ -174,8 +171,7 @@ describe("POST /:id/enabled and DELETE /:id", () => {
 
   test("a denied grant is rejected before any store mutation", async () => {
     const { app, store } = buildApp({
-      requireGrant: () => async (c) =>
-        c.json({ error: { code: "forbidden", message: "no" } }, 403),
+      requireGrant: () => async (c) => c.json({ error: { code: "forbidden", message: "no" } }, 403),
     });
 
     const response = await app.request("/", {
diff --git a/packages/webhook-triggers/test/mapping.test.ts b/packages/webhook-triggers/test/mapping.test.ts
index ad377ffe5f..48e93ad69a 100644
--- a/packages/webhook-triggers/test/mapping.test.ts
+++ b/packages/webhook-triggers/test/mapping.test.ts
@@ -3,9 +3,7 @@ import { renderInputTemplate } from "../src/mapping";
 
 describe("renderInputTemplate", () => {
   test("substitutes a top-level field", () => {
-    expect(renderInputTemplate("hello {{name}}", { name: "granola" })).toBe(
-      "hello granola",
-    );
+    expect(renderInputTemplate("hello {{name}}", { name: "granola" })).toBe("hello granola");
   });
 
   test("substitutes a nested dotted path", () => {
@@ -32,14 +30,10 @@ describe("renderInputTemplate", () => {
   });
 
   test("renders an object leaf as JSON", () => {
-    expect(renderInputTemplate("data={{payload}}", { payload: { a: 1 } })).toBe(
-      'data={"a":1}',
-    );
+    expect(renderInputTemplate("data={{payload}}", { payload: { a: 1 } })).toBe('data={"a":1}');
   });
 
   test("leaves a template with no placeholders untouched", () => {
-    expect(renderInputTemplate("no placeholders here", { a: 1 })).toBe(
-      "no placeholders here",
-    );
+    expect(renderInputTemplate("no placeholders here", { a: 1 })).toBe("no placeholders here");
   });
 });
diff --git a/packages/webhook-triggers/test/migrations.test.ts b/packages/webhook-triggers/test/migrations.test.ts
index 3550148d46..92ae9f08f2 100644
--- a/packages/webhook-triggers/test/migrations.test.ts
+++ b/packages/webhook-triggers/test/migrations.test.ts
@@ -29,9 +29,7 @@ const migrationNames = [
 ];
 
 describeIfDb("applyWebhookTriggersMigrations", () => {
-  const scratchUrl = scratchUrlFor(
-    databaseUrl ?? "postgres://localhost:5432/unused",
-  );
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused");
   const scratchTarget = new URL(scratchUrl);
   const scratchDatabase = scratchTarget.pathname.replace(/^\//, "");
 
@@ -78,9 +76,7 @@ describeIfDb("applyWebhookTriggersMigrations", () => {
         `SELECT table_name FROM information_schema.tables ` +
           `WHERE table_schema = 'webhook_triggers' AND table_name = 'webhook_trigger'`,
       );
-      expect(tables.map((row) => String(row["table_name"]))).toEqual([
-        "webhook_trigger",
-      ]);
+      expect(tables.map((row) => String(row["table_name"]))).toEqual(["webhook_trigger"]);
 
       const inPublic = await sql.unsafe(
         `SELECT 1 FROM information_schema.tables ` +
@@ -98,9 +94,7 @@ describeIfDb("applyWebhookTriggersMigrations", () => {
 // rows, and must start from a schema that has never seen this migration
 // set before.
 describeIfDb("applyWebhookTriggersMigrations concurrency", () => {
-  const scratchUrl = scratchUrlFor(
-    databaseUrl ?? "postgres://localhost:5432/unused",
-  ).replace(
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused").replace(
     "_webhook_triggers_migrations_test",
     "_webhook_triggers_migrations_concurrent_test",
   );
@@ -143,22 +137,16 @@ describeIfDb("applyWebhookTriggersMigrations concurrency", () => {
 
     const appliedNames = [...first.applied, ...second.applied].sort();
     expect(new Set(appliedNames).size).toBe(appliedNames.length);
-    expect(
-      [
-        ...appliedNames,
-        ...first.alreadyApplied,
-        ...second.alreadyApplied,
-      ].sort(),
-    ).toEqual(migrationNames.flatMap((name) => [name, name]).sort());
+    expect([...appliedNames, ...first.alreadyApplied, ...second.alreadyApplied].sort()).toEqual(
+      migrationNames.flatMap((name) => [name, name]).sort(),
+    );
 
     const sql = postgres(scratchUrl, { max: 1, onnotice: () => undefined });
     try {
       const ledgerRows = await sql.unsafe(
         `SELECT name FROM "webhook_triggers"."webhook_triggers_migrations" ORDER BY name`,
       );
-      expect(ledgerRows.map((row) => String(row["name"]))).toEqual(
-        migrationNames,
-      );
+      expect(ledgerRows.map((row) => String(row["name"]))).toEqual(migrationNames);
     } finally {
       await sql.end();
     }
diff --git a/packages/webhook-triggers/test/repo-review-lease.drizzle.test.ts b/packages/webhook-triggers/test/repo-review-lease.drizzle.test.ts
index 577e2aac62..5e3bc56146 100644
--- a/packages/webhook-triggers/test/repo-review-lease.drizzle.test.ts
+++ b/packages/webhook-triggers/test/repo-review-lease.drizzle.test.ts
@@ -27,9 +27,7 @@ const describeIfDb = dbGate(databaseUrl, import.meta.path);
 const TENANT_ID = "tnt_1";
 
 describeIfDb("createDrizzleRepoReviewLeaseStore", () => {
-  const scratchUrl = scratchUrlFor(
-    databaseUrl || "postgres://localhost:5432/unused",
-  );
+  const scratchUrl = scratchUrlFor(databaseUrl || "postgres://localhost:5432/unused");
   const scratchTarget = new URL(scratchUrl);
   const scratchDatabase = scratchTarget.pathname.replace(/^\//, "");
 
@@ -153,9 +151,7 @@ describeIfDb("createDrizzleRepoReviewLeaseStore", () => {
     try {
       const db = drizzle(sql);
       const store = createDrizzleRepoReviewLeaseStore(db);
-      await expect(
-        store.release(TENANT_ID, "acme/never-leased"),
-      ).resolves.toBeUndefined();
+      await expect(store.release(TENANT_ID, "acme/never-leased")).resolves.toBeUndefined();
     } finally {
       await sql.end();
     }
diff --git a/packages/webhook-triggers/test/signature.test.ts b/packages/webhook-triggers/test/signature.test.ts
index 6ebb697e2a..97f6ff0cd5 100644
--- a/packages/webhook-triggers/test/signature.test.ts
+++ b/packages/webhook-triggers/test/signature.test.ts
@@ -1,9 +1,5 @@
 import { describe, expect, test } from "bun:test";
-import {
-  generateWebhookSecret,
-  signPayload,
-  verifySignature,
-} from "../src/signature";
+import { generateWebhookSecret, signPayload, verifySignature } from "../src/signature";
 
 function nowSeconds(): string {
   return String(Math.floor(Date.now() / 1000));
@@ -30,23 +26,15 @@ describe("verifySignature", () => {
 
   test("rejects a payload signed with a different secret", () => {
     const timestamp = nowSeconds();
-    const wrongSignature = signPayload(
-      generateWebhookSecret(),
-      timestamp,
-      body,
-    );
-    expect(verifySignature(secret, timestamp, body, wrongSignature)).toBe(
-      false,
-    );
+    const wrongSignature = signPayload(generateWebhookSecret(), timestamp, body);
+    expect(verifySignature(secret, timestamp, body, wrongSignature)).toBe(false);
   });
 
   test("rejects a tampered body against the original signature", () => {
     const timestamp = nowSeconds();
     const signature = signPayload(secret, timestamp, body);
     const tamperedBody = JSON.stringify({ hello: "mallory" });
-    expect(verifySignature(secret, timestamp, tamperedBody, signature)).toBe(
-      false,
-    );
+    expect(verifySignature(secret, timestamp, tamperedBody, signature)).toBe(false);
   });
 
   test("rejects a missing signature header", () => {
@@ -57,9 +45,7 @@ describe("verifySignature", () => {
 
   test("rejects a non-hex signature without throwing", () => {
     const timestamp = nowSeconds();
-    expect(verifySignature(secret, timestamp, body, "not-hex-at-all!!")).toBe(
-      false,
-    );
+    expect(verifySignature(secret, timestamp, body, "not-hex-at-all!!")).toBe(false);
   });
 
   test("rejects a well-formed-but-wrong-length hex signature", () => {
@@ -71,17 +57,13 @@ describe("verifySignature", () => {
     const timestamp = nowSeconds();
     const signature = signPayload(secret, timestamp, body);
     const laterTimestamp = String(Number(timestamp) + 1);
-    expect(verifySignature(secret, laterTimestamp, body, signature)).toBe(
-      false,
-    );
+    expect(verifySignature(secret, laterTimestamp, body, signature)).toBe(false);
   });
 
   test("rejects a replayed delivery once its timestamp is outside the tolerance window", () => {
     const staleTimestamp = String(Math.floor(Date.now() / 1000) - 301);
     const signature = signPayload(secret, staleTimestamp, body);
-    expect(verifySignature(secret, staleTimestamp, body, signature)).toBe(
-      false,
-    );
+    expect(verifySignature(secret, staleTimestamp, body, signature)).toBe(false);
   });
 
   test("accepts a timestamp comfortably inside the tolerance window", () => {
@@ -95,9 +77,7 @@ describe("verifySignature", () => {
   test("rejects a timestamp forged too far into the future", () => {
     const futureTimestamp = String(Math.floor(Date.now() / 1000) + 301);
     const signature = signPayload(secret, futureTimestamp, body);
-    expect(verifySignature(secret, futureTimestamp, body, signature)).toBe(
-      false,
-    );
+    expect(verifySignature(secret, futureTimestamp, body, signature)).toBe(false);
   });
 
   test("rejects a missing timestamp header", () => {
@@ -108,8 +88,6 @@ describe("verifySignature", () => {
 
   test("rejects a non-numeric timestamp header without treating it as fresh", () => {
     const signature = signPayload(secret, "not-a-number", body);
-    expect(verifySignature(secret, "not-a-number", body, signature)).toBe(
-      false,
-    );
+    expect(verifySignature(secret, "not-a-number", body, signature)).toBe(false);
   });
 });
diff --git a/packages/webhook-triggers/test/store.drizzle.test.ts b/packages/webhook-triggers/test/store.drizzle.test.ts
index e31d25a5ad..8a5782bde4 100644
--- a/packages/webhook-triggers/test/store.drizzle.test.ts
+++ b/packages/webhook-triggers/test/store.drizzle.test.ts
@@ -12,10 +12,7 @@
 import { afterAll, beforeAll, expect, test } from "bun:test";
 import { drizzle } from "drizzle-orm/postgres-js";
 import postgres from "postgres";
-import {
-  createEnvKeyCredentialCipher,
-  createNoopCredentialCipher,
-} from "@intx/crypto";
+import { createEnvKeyCredentialCipher, createNoopCredentialCipher } from "@intx/crypto";
 
 import { e2eDatabaseUrl } from "../../../scripts/e2e/database-url";
 import { applyWebhookTriggersMigrations } from "../src/migrations";
@@ -35,189 +32,173 @@ const describeIfDb = dbGate(databaseUrl, import.meta.path);
 const TENANT_ID = "tnt_1";
 const KEY = new Uint8Array(32).fill(7);
 
-describeIfDb(
-  "createDrizzleWebhookTriggerStore: secret encryption at rest",
-  () => {
-    const scratchUrl = scratchUrlFor(
-      databaseUrl ?? "postgres://localhost:5432/unused",
-    );
-    const scratchTarget = new URL(scratchUrl);
-    const scratchDatabase = scratchTarget.pathname.replace(/^\//, "");
-
-    beforeAll(async () => {
-      const maintenanceUrl = new URL(scratchUrl);
-      maintenanceUrl.pathname = "/postgres";
-      const maintenance = postgres(maintenanceUrl.toString(), {
-        max: 1,
-        onnotice: () => undefined,
-      });
-      try {
-        await maintenance.unsafe(
-          `DROP DATABASE IF EXISTS "${scratchDatabase}"`,
-        );
-        await maintenance.unsafe(`CREATE DATABASE "${scratchDatabase}"`);
-      } finally {
-        await maintenance.end();
-      }
-      await applyWebhookTriggersMigrations(scratchUrl);
+describeIfDb("createDrizzleWebhookTriggerStore: secret encryption at rest", () => {
+  const scratchUrl = scratchUrlFor(databaseUrl ?? "postgres://localhost:5432/unused");
+  const scratchTarget = new URL(scratchUrl);
+  const scratchDatabase = scratchTarget.pathname.replace(/^\//, "");
+
+  beforeAll(async () => {
+    const maintenanceUrl = new URL(scratchUrl);
+    maintenanceUrl.pathname = "/postgres";
+    const maintenance = postgres(maintenanceUrl.toString(), {
+      max: 1,
+      onnotice: () => undefined,
+    });
+    try {
+      await maintenance.unsafe(`DROP DATABASE IF EXISTS "${scratchDatabase}"`);
+      await maintenance.unsafe(`CREATE DATABASE "${scratchDatabase}"`);
+    } finally {
+      await maintenance.end();
+    }
+    await applyWebhookTriggersMigrations(scratchUrl);
+  });
+
+  afterAll(async () => {
+    const maintenanceUrl = new URL(scratchUrl);
+    maintenanceUrl.pathname = "/postgres";
+    const maintenance = postgres(maintenanceUrl.toString(), {
+      max: 1,
+      onnotice: () => undefined,
     });
+    try {
+      await maintenance.unsafe(`DROP DATABASE IF EXISTS "${scratchDatabase}"`);
+    } finally {
+      await maintenance.end();
+    }
+  });
+
+  test("a real cipher's stored secret is not the plaintext, and round-trips correctly", async () => {
+    const sql = postgres(scratchUrl, { max: 1 });
+    try {
+      const db = drizzle(sql);
+      const cipher = createEnvKeyCredentialCipher(KEY);
+      const store = createDrizzleWebhookTriggerStore(db, cipher);
+
+      const created = await store.create({
+        id: "wht_encrypted",
+        tenantId: TENANT_ID,
+        name: "Support digest",
+        workflowDefinitionId: "def_1",
+        inputTemplate: "New delivery.",
+        secret: "the-plaintext-secret",
+        createdBy: "user_1",
+      });
+      expect(created.secret).toBe("the-plaintext-secret");
+
+      const [rawRow] =
+        await sql`select secret from webhook_triggers.webhook_trigger where id = ${created.id}`;
+      expect(rawRow?.["secret"]).not.toBe("the-plaintext-secret");
+      expect(String(rawRow?.["secret"])).toContain("enc:");
+
+      const fetched = await store.get(TENANT_ID, created.id);
+      expect(fetched?.secret).toBe("the-plaintext-secret");
+
+      const fetchedById = await store.getById(created.id);
+      expect(fetchedById?.secret).toBe("the-plaintext-secret");
+    } finally {
+      await sql.end();
+    }
+  });
+
+  test("rotateSecret re-encrypts and the new secret round-trips", async () => {
+    const sql = postgres(scratchUrl, { max: 1 });
+    try {
+      const db = drizzle(sql);
+      const cipher = createEnvKeyCredentialCipher(KEY);
+      const store = createDrizzleWebhookTriggerStore(db, cipher);
+
+      const created = await store.create({
+        id: "wht_rotate",
+        tenantId: TENANT_ID,
+        name: "Rotation test",
+        workflowDefinitionId: "def_1",
+        inputTemplate: "New delivery.",
+        secret: "original-secret",
+        createdBy: "user_1",
+      });
 
-    afterAll(async () => {
-      const maintenanceUrl = new URL(scratchUrl);
-      maintenanceUrl.pathname = "/postgres";
-      const maintenance = postgres(maintenanceUrl.toString(), {
-        max: 1,
-        onnotice: () => undefined,
+      const rotated = await store.rotateSecret(TENANT_ID, created.id, "rotated-secret");
+      expect(rotated?.secret).toBe("rotated-secret");
+
+      const [rawRow] =
+        await sql`select secret from webhook_triggers.webhook_trigger where id = ${created.id}`;
+      expect(rawRow?.["secret"]).not.toBe("rotated-secret");
+
+      const fetched = await store.get(TENANT_ID, created.id);
+      expect(fetched?.secret).toBe("rotated-secret");
+    } finally {
+      await sql.end();
+    }
+  });
+
+  test("a noop cipher (dev/test default) round-trips as plaintext identity", async () => {
+    const sql = postgres(scratchUrl, { max: 1 });
+    try {
+      const db = drizzle(sql);
+      const store = createDrizzleWebhookTriggerStore(db, createNoopCredentialCipher());
+
+      const created = await store.create({
+        id: "wht_noop",
+        tenantId: TENANT_ID,
+        name: "Noop cipher test",
+        workflowDefinitionId: "def_1",
+        inputTemplate: "New delivery.",
+        secret: "plain-secret",
+        createdBy: "user_1",
       });
-      try {
-        await maintenance.unsafe(
-          `DROP DATABASE IF EXISTS "${scratchDatabase}"`,
-        );
-      } finally {
-        await maintenance.end();
-      }
-    });
 
-    test("a real cipher's stored secret is not the plaintext, and round-trips correctly", async () => {
-      const sql = postgres(scratchUrl, { max: 1 });
-      try {
-        const db = drizzle(sql);
-        const cipher = createEnvKeyCredentialCipher(KEY);
-        const store = createDrizzleWebhookTriggerStore(db, cipher);
-
-        const created = await store.create({
-          id: "wht_encrypted",
-          tenantId: TENANT_ID,
-          name: "Support digest",
-          workflowDefinitionId: "def_1",
-          inputTemplate: "New delivery.",
-          secret: "the-plaintext-secret",
-          createdBy: "user_1",
-        });
-        expect(created.secret).toBe("the-plaintext-secret");
-
-        const [rawRow] =
-          await sql`select secret from webhook_triggers.webhook_trigger where id = ${created.id}`;
-        expect(rawRow?.["secret"]).not.toBe("the-plaintext-secret");
-        expect(String(rawRow?.["secret"])).toContain("enc:");
-
-        const fetched = await store.get(TENANT_ID, created.id);
-        expect(fetched?.secret).toBe("the-plaintext-secret");
-
-        const fetchedById = await store.getById(created.id);
-        expect(fetchedById?.secret).toBe("the-plaintext-secret");
-      } finally {
-        await sql.end();
-      }
-    });
+      const [rawRow] =
+        await sql`select secret from webhook_triggers.webhook_trigger where id = ${created.id}`;
+      expect(rawRow?.["secret"]).toBe("plain-secret");
+
+      const fetched = await store.get(TENANT_ID, created.id);
+      expect(fetched?.secret).toBe("plain-secret");
+    } finally {
+      await sql.end();
+    }
+  });
+
+  // CL-7242: `startReviewingRepos`'s check-then-act
+  // (hasWebhookTrigger then createWebhookTrigger) can race two
+  // concurrent "start reviewing" calls for the same repo past the
+  // read before either write lands. `ensure` is the actual backstop
+  // apps/hub's `createWebhookTrigger` port binds to instead of
+  // `create` — reconstructs the audit's finding (2 live triggers for
+  // one repo) against the real `webhook_trigger_tenant_definition_name_unique`
+  // index (migration 0003).
+  test("two concurrent ensure() calls for the same tenant/definition/name settle on exactly one trigger", async () => {
+    const sql = postgres(scratchUrl, { max: 5 });
+    try {
+      const db = drizzle(sql);
+      const cipher = createEnvKeyCredentialCipher(KEY);
+      const store = createDrizzleWebhookTriggerStore(db, cipher);
+
+      const input = (id: string) => ({
+        id,
+        tenantId: TENANT_ID,
+        name: "acme/widgets pull-request-opened",
+        workflowDefinitionId: "def_code_review",
+        inputTemplate: "Review the pull request at {{pull_request.html_url}}",
+        secret: `secret-${id}`,
+        createdBy: "user_1",
+      });
 
-    test("rotateSecret re-encrypts and the new secret round-trips", async () => {
-      const sql = postgres(scratchUrl, { max: 1 });
-      try {
-        const db = drizzle(sql);
-        const cipher = createEnvKeyCredentialCipher(KEY);
-        const store = createDrizzleWebhookTriggerStore(db, cipher);
-
-        const created = await store.create({
-          id: "wht_rotate",
-          tenantId: TENANT_ID,
-          name: "Rotation test",
-          workflowDefinitionId: "def_1",
-          inputTemplate: "New delivery.",
-          secret: "original-secret",
-          createdBy: "user_1",
-        });
-
-        const rotated = await store.rotateSecret(
-          TENANT_ID,
-          created.id,
-          "rotated-secret",
-        );
-        expect(rotated?.secret).toBe("rotated-secret");
-
-        const [rawRow] =
-          await sql`select secret from webhook_triggers.webhook_trigger where id = ${created.id}`;
-        expect(rawRow?.["secret"]).not.toBe("rotated-secret");
-
-        const fetched = await store.get(TENANT_ID, created.id);
-        expect(fetched?.secret).toBe("rotated-secret");
-      } finally {
-        await sql.end();
-      }
-    });
+      const [first, second] = await Promise.all([
+        store.ensure(input("wht_race_1")),
+        store.ensure(input("wht_race_2")),
+      ]);
 
-    test("a noop cipher (dev/test default) round-trips as plaintext identity", async () => {
-      const sql = postgres(scratchUrl, { max: 1 });
-      try {
-        const db = drizzle(sql);
-        const store = createDrizzleWebhookTriggerStore(
-          db,
-          createNoopCredentialCipher(),
-        );
-
-        const created = await store.create({
-          id: "wht_noop",
-          tenantId: TENANT_ID,
-          name: "Noop cipher test",
-          workflowDefinitionId: "def_1",
-          inputTemplate: "New delivery.",
-          secret: "plain-secret",
-          createdBy: "user_1",
-        });
-
-        const [rawRow] =
-          await sql`select secret from webhook_triggers.webhook_trigger where id = ${created.id}`;
-        expect(rawRow?.["secret"]).toBe("plain-secret");
-
-        const fetched = await store.get(TENANT_ID, created.id);
-        expect(fetched?.secret).toBe("plain-secret");
-      } finally {
-        await sql.end();
-      }
-    });
+      expect(first.id).toBe(second.id);
+      expect(first.secret).toBe(second.secret);
 
-    // CL-7242: `startReviewingRepos`'s check-then-act
-    // (hasWebhookTrigger then createWebhookTrigger) can race two
-    // concurrent "start reviewing" calls for the same repo past the
-    // read before either write lands. `ensure` is the actual backstop
-    // apps/hub's `createWebhookTrigger` port binds to instead of
-    // `create` — reconstructs the audit's finding (2 live triggers for
-    // one repo) against the real `webhook_trigger_tenant_definition_name_unique`
-    // index (migration 0003).
-    test("two concurrent ensure() calls for the same tenant/definition/name settle on exactly one trigger", async () => {
-      const sql = postgres(scratchUrl, { max: 5 });
-      try {
-        const db = drizzle(sql);
-        const cipher = createEnvKeyCredentialCipher(KEY);
-        const store = createDrizzleWebhookTriggerStore(db, cipher);
-
-        const input = (id: string) => ({
-          id,
-          tenantId: TENANT_ID,
-          name: "acme/widgets pull-request-opened",
-          workflowDefinitionId: "def_code_review",
-          inputTemplate: "Review the pull request at {{pull_request.html_url}}",
-          secret: `secret-${id}`,
-          createdBy: "user_1",
-        });
-
-        const [first, second] = await Promise.all([
-          store.ensure(input("wht_race_1")),
-          store.ensure(input("wht_race_2")),
-        ]);
-
-        expect(first.id).toBe(second.id);
-        expect(first.secret).toBe(second.secret);
-
-        const rows = await sql`
+      const rows = await sql`
           select id from webhook_triggers.webhook_trigger
           where tenant_id = ${TENANT_ID} and workflow_definition_id = 'def_code_review'
             and name = 'acme/widgets pull-request-opened'
         `;
-        expect(rows).toHaveLength(1);
-      } finally {
-        await sql.end();
-      }
-    });
-  },
-);
+      expect(rows).toHaveLength(1);
+    } finally {
+      await sql.end();
+    }
+  });
+});
diff --git a/packages/webhook-triggers/test/test-support.ts b/packages/webhook-triggers/test/test-support.ts
index 398dce0d8c..64e74bba42 100644
--- a/packages/webhook-triggers/test/test-support.ts
+++ b/packages/webhook-triggers/test/test-support.ts
@@ -7,10 +7,7 @@ import type { MiddlewareHandler } from "hono";
 
 import type { TenantEnv } from "@intx/hub-api";
 import type { WebhookTriggerRow } from "../src/schema";
-import type {
-  CreateWebhookTriggerInput,
-  WebhookTriggerStore,
-} from "../src/store";
+import type { CreateWebhookTriggerInput, WebhookTriggerStore } from "../src/store";
 
 export const TENANT = {
   id: "tnt_1",
@@ -73,9 +70,7 @@ export function createInMemoryWebhookTriggerStore(): WebhookTriggerStore {
         // violation, so callers exercising `isUniqueViolation`-style
         // handling against this fake see the same thing production does.
         throw Object.assign(
-          new Error(
-            `webhook trigger ${input.name} already exists for this workflow definition`,
-          ),
+          new Error(`webhook trigger ${input.name} already exists for this workflow definition`),
           { code: "23505" },
         );
       }
@@ -84,11 +79,7 @@ export function createInMemoryWebhookTriggerStore(): WebhookTriggerStore {
       return row;
     },
     async ensure(input: CreateWebhookTriggerInput) {
-      const existing = findByName(
-        input.tenantId,
-        input.workflowDefinitionId,
-        input.name,
-      );
+      const existing = findByName(input.tenantId, input.workflowDefinitionId, input.name);
       if (existing) return existing;
       const row = newRow(input);
       rows.set(row.id, row);
@@ -132,10 +123,7 @@ export function createInMemoryWebhookTriggerStore(): WebhookTriggerStore {
   };
 }
 
-export function mountAs(
-  routes: Hono<TenantEnv>,
-  principalId: string,
-): Hono<TenantEnv> {
+export function mountAs(routes: Hono<TenantEnv>, principalId: string): Hono<TenantEnv> {
   const asPrincipal: MiddlewareHandler<TenantEnv> = async (c, next) => {
     c.set("tenant", TENANT);
     c.set("principal", principal(principalId));
diff --git a/packages/workflow-authoring-tools/package.json b/packages/workflow-authoring-tools/package.json
index 5b0f4b2935..98d6ebe01f 100644
--- a/packages/workflow-authoring-tools/package.json
+++ b/packages/workflow-authoring-tools/package.json
@@ -1,21 +1,21 @@
 {
   "name": "@corbits/workflow-authoring-tools",
+  "version": "0.0.8",
   "description": "Myra's workflow-authoring tool bundle (workflow_author, workflow_republish, workflow_source_read, workflow_deploy_preview, workflow_deploy): an @intx/agent tool bundle that writes a workflow code package into a kind:\"workflow\" hub asset, reads it back and previews a deploy's grant surface through @corbits/workflows's `./authoring`'s workflow-run-authenticated routes, and deploys it behind a human approval through Interchange's stock POST /api/tenants/:tenantId/workflows/deployments route",
-  "version": "0.0.7",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "packages/workflow-authoring-tools"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "packages/workflow-authoring-tools"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -27,12 +27,12 @@
   "dependencies": {
     "arktype": "catalog:"
   },
-  "peerDependencies": {
-    "@intx/agent": "0.3.0",
-    "@intx/types": "0.3.0"
-  },
   "devDependencies": {
     "@types/bun": "catalog:",
     "typescript": "catalog:"
+  },
+  "peerDependencies": {
+    "@intx/agent": "0.3.0",
+    "@intx/types": "0.3.0"
   }
 }
diff --git a/packages/workflow-authoring-tools/src/client.test.ts b/packages/workflow-authoring-tools/src/client.test.ts
index 2e481e9b5e..34540d8cea 100644
--- a/packages/workflow-authoring-tools/src/client.test.ts
+++ b/packages/workflow-authoring-tools/src/client.test.ts
@@ -59,9 +59,7 @@ test("authorWorkflow posts the tree to /author with the run's bearer token and a
     commitSha: "sha_1",
   });
   const [request] = seen;
-  expect(request?.url).toBe(
-    "https://hub.example.com/api/workflow-workflow-authoring/author",
-  );
+  expect(request?.url).toBe("https://hub.example.com/api/workflow-workflow-authoring/author");
   const headers = request?.init?.headers as Record<string, string>;
   expect(headers["authorization"]).toBe("Bearer sc-token");
   expect(headers["x-workflow-run-address"]).toBe("run_1@workflow");
@@ -93,9 +91,7 @@ test("republishWorkflow forwards expectedHeadSha and surfaces a 409 with the cur
   }).catch((e: unknown) => e);
   expect(err).toBeInstanceOf(WorkflowAuthoringRequestError);
   expect((err as WorkflowAuthoringRequestError).code).toBe("conflict");
-  expect((err as WorkflowAuthoringRequestError).currentHeadSha).toBe(
-    "sha_current",
-  );
+  expect((err as WorkflowAuthoringRequestError).currentHeadSha).toBe("sha_current");
   expect(JSON.parse(String(seen[0]?.init?.body))).toMatchObject({
     expectedHeadSha: "sha_stale",
   });
@@ -147,19 +143,15 @@ test("a hub rejection with an error envelope becomes a WorkflowAuthoringRequestE
 });
 
 test("a non-envelope failure is an honest error naming the status, never a fabricated result", async () => {
-  const { config } = capture(
-    () => new Response("", { status: 502, statusText: "Bad Gateway" }),
-  );
+  const { config } = capture(() => new Response("", { status: 502, statusText: "Bad Gateway" }));
   await expect(readWorkflowSource(config, "asset_1")).rejects.toThrow(/502/);
 });
 
 test("a success body of the wrong shape is rejected", async () => {
-  const { config } = capture(
-    () => new Response(JSON.stringify({ nonsense: true })),
+  const { config } = capture(() => new Response(JSON.stringify({ nonsense: true })));
+  await expect(authorWorkflow(config, { name: "x", files: FILES })).rejects.toThrow(
+    /expected shape/,
   );
-  await expect(
-    authorWorkflow(config, { name: "x", files: FILES }),
-  ).rejects.toThrow(/expected shape/);
 });
 
 // The deleted `/api/workflow-workflow-authoring/:assetId/deploy` mirror
@@ -223,12 +215,8 @@ test("deployWorkflow reads the stock catalog, then posts an asset/source deploy
     definitionAssetId: "asset_1",
     status: "pending",
   });
-  expect(seen[0]?.url).toBe(
-    "https://hub.example.com/api/tenants/tenant_1/models",
-  );
-  expect(seen[1]?.url).toBe(
-    "https://hub.example.com/api/tenants/tenant_1/workflows/deployments",
-  );
+  expect(seen[0]?.url).toBe("https://hub.example.com/api/tenants/tenant_1/models");
+  expect(seen[1]?.url).toBe("https://hub.example.com/api/tenants/tenant_1/workflows/deployments");
   expect(JSON.parse(String(seen[1]?.init?.body))).toEqual({
     source: {
       kind: "asset",
@@ -247,11 +235,7 @@ test("deployWorkflow reads the stock catalog, then posts an asset/source deploy
 test("deployWorkflow surfaces the stock error envelope's message", async () => {
   const fetchImpl = (async (url: string | URL) =>
     String(url).endsWith("/models")
-      ? new Response(
-          JSON.stringify([
-            { offerings: [{ offeringId: "off_1", priority: 1 }] },
-          ]),
-        )
+      ? new Response(JSON.stringify([{ offerings: [{ offeringId: "off_1", priority: 1 }] }]))
       : new Response(
           JSON.stringify({
             error: { code: "invalid_workflow", message: "entry not found" },
diff --git a/packages/workflow-authoring-tools/src/client.ts b/packages/workflow-authoring-tools/src/client.ts
index 37fa2b5386..aeb33c51d8 100644
--- a/packages/workflow-authoring-tools/src/client.ts
+++ b/packages/workflow-authoring-tools/src/client.ts
@@ -19,11 +19,7 @@
 // session. See CL-8171 for the upstream ask that would let these four
 // follow `deploy` onto stock routes.
 import { type } from "arktype";
-import {
-  runBearerHeaders,
-  runBearerFetch,
-  type RunBearerClientConfig,
-} from "./run-bearer";
+import { runBearerHeaders, runBearerFetch, type RunBearerClientConfig } from "./run-bearer";
 
 export interface WorkflowAuthoringClientConfig extends RunBearerClientConfig {
   /** The hub's plain HTTP origin, the same value every other tool
@@ -100,12 +96,7 @@ export class WorkflowAuthoringRequestError extends Error {
   readonly status: number;
   readonly code: string;
   readonly currentHeadSha?: string;
-  constructor(
-    status: number,
-    code: string,
-    message: string,
-    currentHeadSha?: string,
-  ) {
+  constructor(status: number, code: string, message: string, currentHeadSha?: string) {
     super(message);
     this.name = "WorkflowAuthoringRequestError";
     this.status = status;
@@ -166,29 +157,17 @@ function endpoint(config: WorkflowAuthoringClientConfig, path: string): string {
   return `${config.hubWorkflowAuthoringUrl}/api/workflow-workflow-authoring${path}`;
 }
 
-function stockEndpoint(
-  config: WorkflowAuthoringClientConfig,
-  path: string,
-): string {
+function stockEndpoint(config: WorkflowAuthoringClientConfig, path: string): string {
   return `${config.hubWorkflowAuthoringUrl}/api/tenants/${encodeURIComponent(config.tenantId)}${path}`;
 }
 
-async function throwForStockFailure(
-  response: Response,
-  operation: string,
-): Promise<never> {
+async function throwForStockFailure(response: Response, operation: string): Promise<never> {
   const body: unknown = await response.json().catch(() => undefined);
   const parsed = StockErrorResponse(body);
   if (parsed instanceof type.errors) {
-    throw new Error(
-      `${operation} failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`${operation} failed: ${response.status} ${response.statusText}`);
   }
-  throw new WorkflowAuthoringRequestError(
-    response.status,
-    parsed.error.code,
-    parsed.error.message,
-  );
+  throw new WorkflowAuthoringRequestError(response.status, parsed.error.code, parsed.error.message);
 }
 
 /**
@@ -208,10 +187,7 @@ export function orderedSourceOfferingIds(
   models: readonly { readonly offerings: readonly OfferingOrdering[] }[],
 ): readonly string[] {
   const flattened = models.flatMap((m) => [...m.offerings]);
-  flattened.sort(
-    (a, b) =>
-      a.priority - b.priority || a.offeringId.localeCompare(b.offeringId),
-  );
+  flattened.sort((a, b) => a.priority - b.priority || a.offeringId.localeCompare(b.offeringId));
   return [...new Set(flattened.map((o) => o.offeringId))];
 }
 
@@ -220,16 +196,11 @@ export type OfferingOrdering = {
   readonly priority: number;
 };
 
-async function throwForFailure(
-  response: Response,
-  operation: string,
-): Promise<never> {
+async function throwForFailure(response: Response, operation: string): Promise<never> {
   const body: unknown = await response.json().catch(() => undefined);
   const parsed = ErrorResponse(body);
   if (parsed instanceof type.errors) {
-    throw new Error(
-      `${operation} failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`${operation} failed: ${response.status} ${response.statusText}`);
   }
   throw new WorkflowAuthoringRequestError(
     response.status,
@@ -246,9 +217,7 @@ function parseOrThrow<T>(
 ): T {
   const parsed = schema(body);
   if (parsed instanceof type.errors) {
-    throw new Error(
-      `${operation} response did not match the expected shape: ${parsed.summary}`,
-    );
+    throw new Error(`${operation} response did not match the expected shape: ${parsed.summary}`);
   }
   return parsed;
 }
@@ -267,11 +236,7 @@ export async function authorWorkflow(
     body: JSON.stringify(input),
   });
   if (!response.ok) await throwForFailure(response, "Authoring a workflow");
-  return parseOrThrow(
-    SummaryResponse,
-    await response.json(),
-    "Authoring a workflow",
-  ).data;
+  return parseOrThrow(SummaryResponse, await response.json(), "Authoring a workflow").data;
 }
 
 export async function republishWorkflow(
@@ -290,11 +255,7 @@ export async function republishWorkflow(
   if (!response.ok) {
     await throwForFailure(response, "Republishing a workflow");
   }
-  return parseOrThrow(
-    SummaryResponse,
-    await response.json(),
-    "Republishing a workflow",
-  ).data;
+  return parseOrThrow(SummaryResponse, await response.json(), "Republishing a workflow").data;
 }
 
 export async function deployWorkflow(
@@ -307,10 +268,7 @@ export async function deployWorkflow(
     headers: runBearerHeaders(config),
   });
   if (!catalogResponse.ok) {
-    await throwForStockFailure(
-      catalogResponse,
-      "Reading the workbench's inference catalog",
-    );
+    await throwForStockFailure(catalogResponse, "Reading the workbench's inference catalog");
   }
   const models = parseOrThrow(
     DiscoveredModels,
@@ -327,26 +285,23 @@ export async function deployWorkflow(
     );
   }
 
-  const response = await doFetch(
-    stockEndpoint(config, "/workflows/deployments"),
-    {
-      method: "POST",
-      headers: {
-        ...runBearerHeaders(config),
-        "content-type": "application/json",
-      },
-      body: JSON.stringify({
-        source: {
-          kind: "asset",
-          assetId: input.assetId,
-          package: { format: "source", commitSha: input.commitSha },
-        },
-        entry: input.entry,
-        sourceOfferingIds,
-        defaultSourceOfferingId,
-      }),
+  const response = await doFetch(stockEndpoint(config, "/workflows/deployments"), {
+    method: "POST",
+    headers: {
+      ...runBearerHeaders(config),
+      "content-type": "application/json",
     },
-  );
+    body: JSON.stringify({
+      source: {
+        kind: "asset",
+        assetId: input.assetId,
+        package: { format: "source", commitSha: input.commitSha },
+      },
+      entry: input.entry,
+      sourceOfferingIds,
+      defaultSourceOfferingId,
+    }),
+  });
   if (!response.ok) {
     await throwForStockFailure(response, "Deploying a workflow");
   }
@@ -384,11 +339,8 @@ export async function previewDeployWorkflow(
   if (!response.ok) {
     await throwForFailure(response, "Previewing a workflow deploy");
   }
-  return parseOrThrow(
-    DeployPreviewResponse,
-    await response.json(),
-    "Previewing a workflow deploy",
-  ).data;
+  return parseOrThrow(DeployPreviewResponse, await response.json(), "Previewing a workflow deploy")
+    .data;
 }
 
 export async function readWorkflowSource(
@@ -396,16 +348,11 @@ export async function readWorkflowSource(
   assetId: string,
 ): Promise<WorkflowSourceSnapshot> {
   const doFetch = runBearerFetch(config);
-  const response = await doFetch(
-    endpoint(config, `/${encodeURIComponent(assetId)}/source`),
-    { headers: runBearerHeaders(config) },
-  );
+  const response = await doFetch(endpoint(config, `/${encodeURIComponent(assetId)}/source`), {
+    headers: runBearerHeaders(config),
+  });
   if (!response.ok) {
     await throwForFailure(response, "Reading a workflow's source");
   }
-  return parseOrThrow(
-    SnapshotResponse,
-    await response.json(),
-    "Reading a workflow's source",
-  ).data;
+  return parseOrThrow(SnapshotResponse, await response.json(), "Reading a workflow's source").data;
 }
diff --git a/packages/workflow-authoring-tools/src/run-bearer.ts b/packages/workflow-authoring-tools/src/run-bearer.ts
index ca98c4882b..c2a9e081ec 100644
--- a/packages/workflow-authoring-tools/src/run-bearer.ts
+++ b/packages/workflow-authoring-tools/src/run-bearer.ts
@@ -14,9 +14,7 @@ export interface RunBearerClientConfig {
 
 /** The two headers every run-authenticated route resolves tenant and
  * principal from — identity never rides in a request body. */
-export function runBearerHeaders(
-  config: RunBearerClientConfig,
-): Record<string, string> {
+export function runBearerHeaders(config: RunBearerClientConfig): Record<string, string> {
   return {
     authorization: `Bearer ${config.sidecarToken}`,
     "x-workflow-run-address": config.address,
diff --git a/packages/workflow-authoring-tools/src/tool.test.ts b/packages/workflow-authoring-tools/src/tool.test.ts
index bec269dd81..6625ecfdd9 100644
--- a/packages/workflow-authoring-tools/src/tool.test.ts
+++ b/packages/workflow-authoring-tools/src/tool.test.ts
@@ -114,9 +114,7 @@ test("workflow_author posts to the authoring route and reports asset id and comm
         new AbortController().signal,
       ),
   );
-  expect(seenUrl).toBe(
-    "https://hub.example.com/api/workflow-workflow-authoring/author",
-  );
+  expect(seenUrl).toBe("https://hub.example.com/api/workflow-workflow-authoring/author");
   expect(result.isError).toBe(false);
   expect(result.content).toContain("asset_1");
   expect(result.content).toContain("sha_1");
@@ -164,9 +162,7 @@ test("workflow_source_read returns the snapshot as JSON the model can parse", as
   };
   const result = await withFetch(
     (url) => {
-      expect(url).toBe(
-        "https://hub.example.com/api/workflow-workflow-authoring/asset_1/source",
-      );
+      expect(url).toBe("https://hub.example.com/api/workflow-workflow-authoring/asset_1/source");
       return new Response(JSON.stringify({ data: snapshot }));
     },
     () =>
@@ -185,15 +181,10 @@ test("workflow_deploy posts an asset/source deploy to the stock tenant route —
     (url, init) => {
       seen.push({
         url,
-        body:
-          init?.body !== undefined ? JSON.parse(String(init.body)) : undefined,
+        body: init?.body !== undefined ? JSON.parse(String(init.body)) : undefined,
       });
       return url.endsWith("/models")
-        ? new Response(
-            JSON.stringify([
-              { offerings: [{ offeringId: "off_1", priority: 10 }] },
-            ]),
-          )
+        ? new Response(JSON.stringify([{ offerings: [{ offeringId: "off_1", priority: 10 }] }]))
         : new Response(
             JSON.stringify({
               id: "run_1",
@@ -217,9 +208,7 @@ test("workflow_deploy posts an asset/source deploy to the stock tenant route —
         new AbortController().signal,
       ),
   );
-  expect(seen[1]?.url).toBe(
-    "https://hub.example.com/api/tenants/tenant_1/workflows/deployments",
-  );
+  expect(seen[1]?.url).toBe("https://hub.example.com/api/tenants/tenant_1/workflows/deployments");
   // `packageName`/`toolPackagePins` are carried on the approval card via
   // the tool call's own arguments (see @corbits/approvals' headline.ts),
   // not re-sent to the hub — the stock deploy route names the commit
@@ -299,9 +288,8 @@ test("wf_deploy_preview posts assetId, commitSha, and entry to the preview route
     packageName: "daily-digest",
   });
   expect(
-    workflowAuthoringTools.definitions.find(
-      (d) => d.name === WORKFLOW_DEPLOY_PREVIEW_TOOL,
-    )?.approval,
+    workflowAuthoringTools.definitions.find((d) => d.name === WORKFLOW_DEPLOY_PREVIEW_TOOL)
+      ?.approval,
   ).toBeUndefined();
 });
 
diff --git a/packages/workflow-authoring-tools/src/tool.ts b/packages/workflow-authoring-tools/src/tool.ts
index 3c1c7b4176..7518684f13 100644
--- a/packages/workflow-authoring-tools/src/tool.ts
+++ b/packages/workflow-authoring-tools/src/tool.ts
@@ -97,9 +97,7 @@ const FILES_PROPERTY = {
     '{ "package.json": "...", "workflow.ts": "..." }.',
 } as const;
 
-function clientConfig(
-  env: WorkflowAuthoringEnv,
-): WorkflowAuthoringClientConfig {
+function clientConfig(env: WorkflowAuthoringEnv): WorkflowAuthoringClientConfig {
   return {
     hubWorkflowAuthoringUrl: env.hubWorkflowAuthoringUrl,
     tenantId: env.tenantId,
@@ -116,10 +114,7 @@ function textResult(callId: string, content: string): ToolResult {
   return { callId, isError: false, content };
 }
 
-async function runAuthor(
-  env: WorkflowAuthoringEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runAuthor(env: WorkflowAuthoringEnv, call: ToolCall): Promise<ToolResult> {
   const input = AuthorInput(call.arguments);
   if (input instanceof type.errors) {
     throw invalidInput(WORKFLOW_AUTHOR_TOOL, input);
@@ -132,10 +127,7 @@ async function runAuthor(
   );
 }
 
-async function runRepublish(
-  env: WorkflowAuthoringEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runRepublish(env: WorkflowAuthoringEnv, call: ToolCall): Promise<ToolResult> {
   const input = RepublishInput(call.arguments);
   if (input instanceof type.errors) {
     throw invalidInput(WORKFLOW_REPUBLISH_TOOL, input);
@@ -148,10 +140,7 @@ async function runRepublish(
   );
 }
 
-async function runSourceRead(
-  env: WorkflowAuthoringEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runSourceRead(env: WorkflowAuthoringEnv, call: ToolCall): Promise<ToolResult> {
   const input = SourceReadInput(call.arguments);
   if (input instanceof type.errors) {
     throw invalidInput(WORKFLOW_SOURCE_READ_TOOL, input);
@@ -160,10 +149,7 @@ async function runSourceRead(
   return textResult(call.id, JSON.stringify(snapshot));
 }
 
-async function runDeployPreview(
-  env: WorkflowAuthoringEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runDeployPreview(env: WorkflowAuthoringEnv, call: ToolCall): Promise<ToolResult> {
   const input = DeployPreviewInput(call.arguments);
   if (input instanceof type.errors) {
     throw invalidInput(WORKFLOW_DEPLOY_PREVIEW_TOOL, input);
@@ -172,10 +158,7 @@ async function runDeployPreview(
   return textResult(call.id, JSON.stringify(result));
 }
 
-async function runDeploy(
-  env: WorkflowAuthoringEnv,
-  call: ToolCall,
-): Promise<ToolResult> {
+async function runDeploy(env: WorkflowAuthoringEnv, call: ToolCall): Promise<ToolResult> {
   const input = DeployInput(call.arguments);
   if (input instanceof type.errors) {
     throw invalidInput(WORKFLOW_DEPLOY_TOOL, input);
@@ -231,8 +214,7 @@ export const workflowAuthoringTools = defineTool<WorkflowAuthoringEnv>({
             name: {
               type: "string",
               description:
-                "Lowercase-kebab asset name (letters, digits, hyphens), " +
-                'e.g. "daily-digest".',
+                "Lowercase-kebab asset name (letters, digits, hyphens), " + 'e.g. "daily-digest".',
             },
             files: FILES_PROPERTY,
             message: {
@@ -324,8 +306,7 @@ export const workflowAuthoringTools = defineTool<WorkflowAuthoringEnv>({
             },
             entry: {
               type: "string",
-              description:
-                'The interchange.workflow entry module path, e.g. "./workflow.ts".',
+              description: 'The interchange.workflow entry module path, e.g. "./workflow.ts".',
             },
           },
           required: ["assetId", "commitSha", "entry"],
@@ -363,8 +344,7 @@ export const workflowAuthoringTools = defineTool<WorkflowAuthoringEnv>({
             },
             entry: {
               type: "string",
-              description:
-                'The interchange.workflow entry module path, e.g. "./workflow.ts".',
+              description: 'The interchange.workflow entry module path, e.g. "./workflow.ts".',
             },
             packageName: {
               type: "string",
@@ -405,9 +385,7 @@ export const workflowAuthoringTools = defineTool<WorkflowAuthoringEnv>({
           return runDeploy(env, call);
         default:
           return Promise.reject(
-            new Error(
-              `@corbits/workflow-authoring-tools: unknown tool "${call.name}"`,
-            ),
+            new Error(`@corbits/workflow-authoring-tools: unknown tool "${call.name}"`),
           );
       }
     },
diff --git a/packages/workflow-schedule/package.json b/packages/workflow-schedule/package.json
index 6714ee859b..e98f8f2d08 100644
--- a/packages/workflow-schedule/package.json
+++ b/packages/workflow-schedule/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/workflow-schedule",
+  "version": "0.0.1",
   "private": true,
   "description": "Cron grammar and the native TimerSet re-arm helper a schedule-triggered workflow uses to own its own cron: the next fire time for a ScheduleTrigger expression, and the cron-flagged TimerSet the @intx/workflow-host scheduler seam fires and the run re-arms on every tick",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
diff --git a/packages/workflow-schedule/src/cron.test.ts b/packages/workflow-schedule/src/cron.test.ts
index a9ced44067..6840184235 100644
--- a/packages/workflow-schedule/src/cron.test.ts
+++ b/packages/workflow-schedule/src/cron.test.ts
@@ -120,89 +120,63 @@ describe("DOM / DOW OR when both restricted (POSIX/Vixie)", () => {
 
   test("matches the 13th even when it is not Friday", () => {
     // 2026-01-13 is a Tuesday.
-    expect(
-      cronMatchesMinute(expression, new Date("2026-01-13T00:00:00Z")),
-    ).toBe(true);
+    expect(cronMatchesMinute(expression, new Date("2026-01-13T00:00:00Z"))).toBe(true);
   });
 
   test("matches a Friday that is not the 13th", () => {
     // 2026-01-16 is a Friday.
-    expect(
-      cronMatchesMinute(expression, new Date("2026-01-16T00:00:00Z")),
-    ).toBe(true);
+    expect(cronMatchesMinute(expression, new Date("2026-01-16T00:00:00Z"))).toBe(true);
   });
 
   test("does not match a day that is neither the 13th nor Friday", () => {
     // 2026-01-14 is a Wednesday.
-    expect(
-      cronMatchesMinute(expression, new Date("2026-01-14T00:00:00Z")),
-    ).toBe(false);
+    expect(cronMatchesMinute(expression, new Date("2026-01-14T00:00:00Z"))).toBe(false);
   });
 
   test("when only DOM is restricted, DOW is ignored (AND with *)", () => {
     // Only the 15th, any weekday.
-    expect(
-      cronMatchesMinute("0 0 15 * *", new Date("2026-01-15T00:00:00Z")),
-    ).toBe(true);
-    expect(
-      cronMatchesMinute("0 0 15 * *", new Date("2026-01-16T00:00:00Z")),
-    ).toBe(false);
+    expect(cronMatchesMinute("0 0 15 * *", new Date("2026-01-15T00:00:00Z"))).toBe(true);
+    expect(cronMatchesMinute("0 0 15 * *", new Date("2026-01-16T00:00:00Z"))).toBe(false);
   });
 
   test("when only DOW is restricted, DOM is ignored", () => {
     // Every Monday at midnight.
-    expect(
-      cronMatchesMinute("0 0 * * 1", new Date("2026-01-12T00:00:00Z")),
-    ).toBe(true);
-    expect(
-      cronMatchesMinute("0 0 * * 1", new Date("2026-01-13T00:00:00Z")),
-    ).toBe(false);
+    expect(cronMatchesMinute("0 0 * * 1", new Date("2026-01-12T00:00:00Z"))).toBe(true);
+    expect(cronMatchesMinute("0 0 * * 1", new Date("2026-01-13T00:00:00Z"))).toBe(false);
   });
 });
 
 describe("day-of-week 0 and 7 are both Sunday", () => {
   test("expression with 7 matches a Sunday Date (day 0)", () => {
     // 2026-01-04 is a Sunday.
-    expect(
-      cronMatchesMinute("0 0 * * 7", new Date("2026-01-04T00:00:00Z")),
-    ).toBe(true);
+    expect(cronMatchesMinute("0 0 * * 7", new Date("2026-01-04T00:00:00Z"))).toBe(true);
   });
 
   test("expression with 0 matches the same Sunday", () => {
-    expect(
-      cronMatchesMinute("0 0 * * 0", new Date("2026-01-04T00:00:00Z")),
-    ).toBe(true);
+    expect(cronMatchesMinute("0 0 * * 0", new Date("2026-01-04T00:00:00Z"))).toBe(true);
   });
 
   test("neither matches a Monday", () => {
-    expect(
-      cronMatchesMinute("0 0 * * 7", new Date("2026-01-05T00:00:00Z")),
-    ).toBe(false);
+    expect(cronMatchesMinute("0 0 * * 7", new Date("2026-01-05T00:00:00Z"))).toBe(false);
   });
 });
 
 describe("nextCronFireAfter + canFire bounds", () => {
   test("finds the next matching minute", () => {
-    const next = nextCronFireAfter(
-      "0-5 * * * *",
-      new Date("2026-01-01T00:00:00Z"),
-    );
+    const next = nextCronFireAfter("0-5 * * * *", new Date("2026-01-01T00:00:00Z"));
     expect(next.toISOString()).toBe("2026-01-01T00:01:00.000Z");
   });
 
   test("impossible Feb 31 fails canFire and nextCronFireAfter", () => {
     expect(cronExpressionCanFire("0 0 31 2 *")).toBe(false);
-    expect(() =>
-      nextCronFireAfter("0 0 31 2 *", new Date("2026-01-01T00:00:00Z")),
-    ).toThrow(/no fire time within the lookahead window/);
+    expect(() => nextCronFireAfter("0 0 31 2 *", new Date("2026-01-01T00:00:00Z"))).toThrow(
+      /no fire time within the lookahead window/,
+    );
   });
 
   test("a once-a-year expression still finds its fire", () => {
     // Jan 1 at 00:00 — after Dec 31, next is next year.
-    const next = nextCronFireAfter(
-      "0 0 1 1 *",
-      new Date("2026-06-01T00:00:00Z"),
-    );
+    const next = nextCronFireAfter("0 0 1 1 *", new Date("2026-06-01T00:00:00Z"));
     expect(next.toISOString()).toBe("2027-01-01T00:00:00.000Z");
   });
 });
@@ -225,9 +199,7 @@ describe("timezone matching and DST", () => {
       day: 15,
       month: 1,
     });
-    expect(cronMatchesMinute("0 9 * * *", at, "America/Los_Angeles")).toBe(
-      true,
-    );
+    expect(cronMatchesMinute("0 9 * * *", at, "America/Los_Angeles")).toBe(true);
     expect(cronMatchesMinute("0 9 * * *", at, "UTC")).toBe(false);
   });
 
@@ -236,21 +208,13 @@ describe("timezone matching and DST", () => {
     // Before the transition (March 7 12:00 UTC = March 7 04:00 PST):
     // next 09:00 local is March 7 09:00 PST = March 7 17:00 UTC.
     const before = new Date("2026-03-07T12:00:00Z");
-    const nextBefore = nextCronFireAfter(
-      "0 9 * * *",
-      before,
-      "America/Los_Angeles",
-    );
+    const nextBefore = nextCronFireAfter("0 9 * * *", before, "America/Los_Angeles");
     expect(nextBefore.toISOString()).toBe("2026-03-07T17:00:00.000Z");
     expect(zonedParts(nextBefore, "America/Los_Angeles").hour).toBe(9);
 
     // After spring-forward, 09:00 PDT = UTC-7 → 16:00 UTC.
     const afterTransition = new Date("2026-03-09T12:00:00Z");
-    const nextAfter = nextCronFireAfter(
-      "0 9 * * *",
-      afterTransition,
-      "America/Los_Angeles",
-    );
+    const nextAfter = nextCronFireAfter("0 9 * * *", afterTransition, "America/Los_Angeles");
     expect(nextAfter.toISOString()).toBe("2026-03-09T16:00:00.000Z");
     expect(zonedParts(nextAfter, "America/Los_Angeles").hour).toBe(9);
   });
@@ -259,11 +223,7 @@ describe("timezone matching and DST", () => {
     // US Pacific fall back 2026: 2026-11-01 02:00 → 01:00 local.
     // After the transition, 09:00 PST = UTC-8 → 17:00 UTC.
     const afterFallback = new Date("2026-11-02T12:00:00Z");
-    const next = nextCronFireAfter(
-      "0 9 * * *",
-      afterFallback,
-      "America/Los_Angeles",
-    );
+    const next = nextCronFireAfter("0 9 * * *", afterFallback, "America/Los_Angeles");
     expect(next.toISOString()).toBe("2026-11-02T17:00:00.000Z");
     expect(zonedParts(next, "America/Los_Angeles").hour).toBe(9);
   });
diff --git a/packages/workflow-schedule/src/cron.ts b/packages/workflow-schedule/src/cron.ts
index 83df3b626b..f7d27dc407 100644
--- a/packages/workflow-schedule/src/cron.ts
+++ b/packages/workflow-schedule/src/cron.ts
@@ -16,13 +16,10 @@
 // - Day-of-week accepts both 0 and 7 as Sunday.
 // - Matching can be evaluated in an IANA timezone; `nextFireAt` is still
 //   stored as a UTC instant.
-export type CronField =
-  "minute" | "hour" | "dayOfMonth" | "month" | "dayOfWeek";
+export type CronField = "minute" | "hour" | "dayOfMonth" | "month" | "dayOfWeek";
 
 /** Field order in a 5-field cron expression, paired with its valid range. */
-export const CRON_FIELD_RANGES: Readonly<
-  Record<CronField, readonly [number, number]>
-> = {
+export const CRON_FIELD_RANGES: Readonly<Record<CronField, readonly [number, number]>> = {
   minute: [0, 59],
   hour: [0, 23],
   dayOfMonth: [1, 31],
@@ -58,12 +55,8 @@ function parseCronClause(raw: string): CronClause | undefined {
   const [, base, rangeEnd, step] = match;
   const clauseBase: CronClause = { base: base === "*" ? "*" : Number(base) };
   const withRangeEnd =
-    rangeEnd !== undefined
-      ? { ...clauseBase, rangeEnd: Number(rangeEnd) }
-      : clauseBase;
-  return step !== undefined
-    ? { ...withRangeEnd, step: Number(step) }
-    : withRangeEnd;
+    rangeEnd !== undefined ? { ...clauseBase, rangeEnd: Number(rangeEnd) } : clauseBase;
+  return step !== undefined ? { ...withRangeEnd, step: Number(step) } : withRangeEnd;
 }
 
 /**
@@ -73,10 +66,7 @@ function parseCronClause(raw: string): CronClause | undefined {
  * rather than accepted as an expression that is syntactically fine and
  * unconditionally never true.
  */
-function clauseInRange(
-  clause: CronClause,
-  [min, max]: readonly [number, number],
-): boolean {
+function clauseInRange(clause: CronClause, [min, max]: readonly [number, number]): boolean {
   if (clause.step !== undefined && clause.step <= 0) return false;
   if (clause.base === "*") return true;
   if (clause.base < min || clause.base > max) return false;
@@ -90,11 +80,7 @@ function clauseInRange(
  * Star-with-step (asterisk-slash-N) steps from `min`, not from zero — so on a
  * 1-based day-of-month, that pattern yields 1,3,5… rather than 2,4,6….
  */
-function clauseMatches(
-  clause: CronClause,
-  value: number,
-  min: number,
-): boolean {
+function clauseMatches(clause: CronClause, value: number, min: number): boolean {
   if (clause.base === "*") {
     return clause.step === undefined ? true : (value - min) % clause.step === 0;
   }
@@ -107,19 +93,13 @@ function clauseMatches(
   return (value - clause.base) % clause.step === 0;
 }
 
-function everyClause(
-  field: string,
-  test: (clause: CronClause) => boolean,
-): boolean {
+function everyClause(field: string, test: (clause: CronClause) => boolean): boolean {
   const clauses = field.split(",").map(parseCronClause);
   if (clauses.length === 0) return false;
   return clauses.every((clause) => clause !== undefined && test(clause));
 }
 
-function someClause(
-  field: string,
-  test: (clause: CronClause) => boolean,
-): boolean {
+function someClause(field: string, test: (clause: CronClause) => boolean): boolean {
   return field.split(",").some((raw) => {
     const clause = parseCronClause(raw);
     return clause !== undefined && test(clause);
@@ -142,9 +122,7 @@ export function isValidCronExpression(expression: string): boolean {
   return fields.every((field, index) => {
     const cronField = CRON_FIELD_ORDER[index];
     if (cronField === undefined) return false;
-    return everyClause(field, (clause) =>
-      clauseInRange(clause, CRON_FIELD_RANGES[cronField]),
-    );
+    return everyClause(field, (clause) => clauseInRange(clause, CRON_FIELD_RANGES[cronField]));
   });
 }
 
@@ -241,9 +219,7 @@ export function zonedParts(at: Date, timeZone: string = "UTC"): ZonedParts {
   };
   const dayOfWeek = dowMap[weekday];
   if (dayOfWeek === undefined) {
-    throw new Error(
-      `zonedParts: could not resolve weekday "${weekday}" in ${timeZone}`,
-    );
+    throw new Error(`zonedParts: could not resolve weekday "${weekday}" in ${timeZone}`);
   }
   return { year, month, day, hour, minute, dayOfWeek };
 }
@@ -266,11 +242,7 @@ export function isValidTimeZone(timeZone: string): boolean {
  * in `timeZone` (default UTC). DOM and DOW OR when both are restricted
  * (Vixie/POSIX); otherwise AND.
  */
-export function cronMatchesMinute(
-  expression: string,
-  at: Date,
-  timeZone: string = "UTC",
-): boolean {
+export function cronMatchesMinute(expression: string, at: Date, timeZone: string = "UTC"): boolean {
   const fields = expression.trim().split(/\s+/);
   const [minute, hour, dayOfMonth, month, dayOfWeek] = fields;
   if (
@@ -290,11 +262,7 @@ export function cronMatchesMinute(
     fieldMatches(month, parts.month, CRON_FIELD_RANGES.month[0]);
   if (!timeAndMonth) return false;
 
-  const domOk = fieldMatches(
-    dayOfMonth,
-    parts.day,
-    CRON_FIELD_RANGES.dayOfMonth[0],
-  );
+  const domOk = fieldMatches(dayOfMonth, parts.day, CRON_FIELD_RANGES.dayOfMonth[0]);
   const dowOk = dayOfWeekMatches(dayOfWeek, parts.dayOfWeek);
 
   if (isDayFieldRestricted(dayOfMonth) && isDayFieldRestricted(dayOfWeek)) {
@@ -326,11 +294,7 @@ export const MAX_LOOKAHEAD_MINUTES = 366 * 24 * 60;
  * fire it. `nextFireAt` is always a UTC instant even when matching is
  * zoned.
  */
-export function nextCronFireAfter(
-  expression: string,
-  after: Date,
-  timeZone: string = "UTC",
-): Date {
+export function nextCronFireAfter(expression: string, after: Date, timeZone: string = "UTC"): Date {
   const start = minuteKey(after) + 1;
   for (let minute = start; minute - start <= MAX_LOOKAHEAD_MINUTES; minute++) {
     const candidate = new Date(minute * 60_000);
diff --git a/packages/workflow-schedule/src/emitter.test.ts b/packages/workflow-schedule/src/emitter.test.ts
index 28c77fe9cc..afa6ef5cd6 100644
--- a/packages/workflow-schedule/src/emitter.test.ts
+++ b/packages/workflow-schedule/src/emitter.test.ts
@@ -3,11 +3,7 @@
 // ran, and never at a tick that fell during a slow fire.
 import { describe, expect, test } from "bun:test";
 
-import {
-  createCronEmitter,
-  timerIdForTick,
-  type CronDeployment,
-} from "./emitter";
+import { createCronEmitter, timerIdForTick, type CronDeployment } from "./emitter";
 
 const deployment: CronDeployment = {
   deploymentId: "def_digest",
@@ -39,10 +35,7 @@ describe("createCronEmitter re-arm", () => {
       {
         deploymentId: "def_digest",
         tick: {
-          timerId: timerIdForTick(
-            "def_digest",
-            new Date("2026-01-01T09:01:00.000Z"),
-          ),
+          timerId: timerIdForTick("def_digest", new Date("2026-01-01T09:01:00.000Z")),
           fireAt: "2026-01-01T09:01:00.000Z",
           cron: "* * * * *",
         },
diff --git a/packages/workflow-schedule/src/emitter.ts b/packages/workflow-schedule/src/emitter.ts
index 67fd578791..56bb4db21d 100644
--- a/packages/workflow-schedule/src/emitter.ts
+++ b/packages/workflow-schedule/src/emitter.ts
@@ -88,9 +88,7 @@ export function createCronEmitter<D extends CronDeployment = CronDeployment>(
         cron: deployment.cron,
         now,
         ...(firedAt !== undefined ? { firedAt } : {}),
-        ...(deployment.timeZone !== undefined
-          ? { timeZone: deployment.timeZone }
-          : {}),
+        ...(deployment.timeZone !== undefined ? { timeZone: deployment.timeZone } : {}),
         newTimerId: (fireAt) => timerIdForTick(deployment.deploymentId, fireAt),
       });
     } catch (error) {
diff --git a/packages/workflows/package.json b/packages/workflows/package.json
index 0a024a69a0..3c19a94217 100644
--- a/packages/workflows/package.json
+++ b/packages/workflows/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/workflows",
+  "version": "0.0.1",
   "private": true,
   "description": "The workflow domain package: the two-file source codebase every authoring path renders/reads (`./source`), the definition detail read a workflow's own page uses (`./detail`), and letting an agent author/republish/deploy a workflow through Interchange's native source pipeline (`./authoring`)",
-  "version": "0.0.1",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "exports": {
@@ -30,8 +30,8 @@
     "hono": "catalog:"
   },
   "devDependencies": {
-    "@types/bun": "catalog:",
     "@corbits/connections": "workspace:*",
+    "@types/bun": "catalog:",
     "typescript": "catalog:"
   }
 }
diff --git a/packages/workflows/src/authoring/errors.ts b/packages/workflows/src/authoring/errors.ts
index aa95fc7d7d..bbeee35f1b 100644
--- a/packages/workflows/src/authoring/errors.ts
+++ b/packages/workflows/src/authoring/errors.ts
@@ -1,5 +1,9 @@
 export type WorkflowAuthorErrorReason =
-  "forbidden" | "not_found" | "conflict" | "invalid" | "unavailable";
+  | "forbidden"
+  | "not_found"
+  | "conflict"
+  | "invalid"
+  | "unavailable";
 
 export class WorkflowAuthorError extends Error {
   readonly reason: WorkflowAuthorErrorReason;
diff --git a/packages/workflows/src/authoring/registry.test.ts b/packages/workflows/src/authoring/registry.test.ts
index 3d861568d7..e49c3f463e 100644
--- a/packages/workflows/src/authoring/registry.test.ts
+++ b/packages/workflows/src/authoring/registry.test.ts
@@ -1,9 +1,5 @@
 import { expect, test } from "bun:test";
-import type {
-  ConditionRegistry,
-  GrantStore,
-  GrantRule,
-} from "@intx/types/authz";
+import type { ConditionRegistry, GrantStore, GrantRule } from "@intx/types/authz";
 import { AssetServiceError, type AssetService } from "@intx/hub-sessions";
 import type { DB } from "@intx/db";
 
@@ -23,15 +19,11 @@ const MANIFEST = JSON.stringify({
 
 const ENTRY = "export default {};\n";
 
-function sourceTree(
-  extra: Record<string, string> = {},
-): Record<string, string> {
+function sourceTree(extra: Record<string, string> = {}): Record<string, string> {
   return { "package.json": MANIFEST, "workflow.ts": ENTRY, ...extra };
 }
 
-function fakeRepoStore(
-  overrides: Partial<WorkflowAuthorRepoReads> = {},
-): WorkflowAuthorRepoReads {
+function fakeRepoStore(overrides: Partial<WorkflowAuthorRepoReads> = {}): WorkflowAuthorRepoReads {
   return {
     resolveRef: async () => "sha_head",
     openCommittedReads: async () => null,
@@ -114,11 +106,7 @@ function deps(
     db: fakeDb(undefined),
     assetService: fakeAssetService(),
     repoStore: fakeRepoStore(),
-    grantStore: fakeGrantStore([
-      allowGrant("create"),
-      allowGrant("write"),
-      allowGrant("read"),
-    ]),
+    grantStore: fakeGrantStore([allowGrant("create"), allowGrant("write"), allowGrant("read")]),
     conditionRegistry,
     ...overrides,
   };
@@ -265,9 +253,7 @@ test("republish refuses an asset id that does not resolve in the caller's own te
   });
   // No row resolves — the same outcome the real tenant-scoped query
   // produces for another tenant's asset id, or an id that never existed.
-  const registry = createWorkflowAuthorRegistry(
-    deps({ assetService, db: fakeDb(undefined) }),
-  );
+  const registry = createWorkflowAuthorRegistry(deps({ assetService, db: fakeDb(undefined) }));
 
   const err = await registry
     .republish(caller, "asset_from_another_tenant", { files: sourceTree() })
@@ -291,9 +277,7 @@ test("republish writes a new commit once the asset resolves in-tenant and the gr
       return { commitSha: "sha_new" };
     },
   });
-  const registry = createWorkflowAuthorRegistry(
-    deps({ assetService, db: fakeDb(row) }),
-  );
+  const registry = createWorkflowAuthorRegistry(deps({ assetService, db: fakeDb(row) }));
 
   const summary = await registry.republish(caller, "asset_1", {
     files: sourceTree(),
@@ -431,8 +415,7 @@ test("readSource walks the whole committed tree, including subdirectories, and r
               : dir === "lib"
                 ? [{ name: "helper.ts", oid: "oid_helper", type: "blob" }]
                 : [],
-          readBlobByOid: async (oid) =>
-            new TextEncoder().encode(blobs[oid] ?? ""),
+          readBlobByOid: async (oid) => new TextEncoder().encode(blobs[oid] ?? ""),
           treeOid: async () => null,
         }),
       }),
@@ -459,9 +442,7 @@ test("readSource refuses without an asset read grant", async () => {
       grantStore: fakeGrantStore([allowGrant("write")]),
     }),
   );
-  const err = await registry
-    .readSource(caller, "asset_1")
-    .catch((e: unknown) => e);
+  const err = await registry.readSource(caller, "asset_1").catch((e: unknown) => e);
   expect((err as WorkflowAuthorError).reason).toBe("forbidden");
 });
 
@@ -487,8 +468,7 @@ test("previewDeploy is a static read of the committed source at commitSha: file
                         { name: "workflow.ts", oid: "oid_entry", type: "blob" },
                       ]
                     : [],
-                readBlobByOid: async (oid) =>
-                  new TextEncoder().encode(blobs[oid] ?? ""),
+                readBlobByOid: async (oid) => new TextEncoder().encode(blobs[oid] ?? ""),
                 treeOid: async () => null,
               }
             : null,
@@ -525,8 +505,7 @@ test("previewDeploy lists files only, with no tool pins, when the entry is not a
                   { name: "workflow.ts", oid: "oid_entry", type: "blob" },
                 ]
               : [],
-          readBlobByOid: async (oid) =>
-            new TextEncoder().encode(blobs[oid] ?? ""),
+          readBlobByOid: async (oid) => new TextEncoder().encode(blobs[oid] ?? ""),
           treeOid: async () => null,
         }),
       }),
diff --git a/packages/workflows/src/authoring/registry.ts b/packages/workflows/src/authoring/registry.ts
index 72d4b7d9ad..9c8057f142 100644
--- a/packages/workflows/src/authoring/registry.ts
+++ b/packages/workflows/src/authoring/registry.ts
@@ -46,11 +46,7 @@ import { type } from "arktype";
 import { PackageJSON } from "@intx/types/package-json";
 
 import { WorkflowAuthorError } from "./errors";
-import {
-  normalizeEntryPath,
-  PACKAGE_JSON_PATH,
-  validateWorkflowSourceTree,
-} from "./source-tree";
+import { normalizeEntryPath, PACKAGE_JSON_PATH, validateWorkflowSourceTree } from "./source-tree";
 
 const WORKFLOW_ASSET_KIND = "workflow";
 const HUB_PRINCIPAL = { kind: "hub" } as const;
@@ -140,19 +136,13 @@ export type WorkflowDeployPreviewResult = {
 };
 
 export type WorkflowAuthorRegistry = {
-  author(
-    caller: WorkflowAuthorCaller,
-    input: AuthorWorkflowInput,
-  ): Promise<WorkflowAssetSummary>;
+  author(caller: WorkflowAuthorCaller, input: AuthorWorkflowInput): Promise<WorkflowAssetSummary>;
   republish(
     caller: WorkflowAuthorCaller,
     assetId: string,
     input: RepublishWorkflowInput,
   ): Promise<WorkflowAssetSummary>;
-  readSource(
-    caller: WorkflowAuthorCaller,
-    assetId: string,
-  ): Promise<WorkflowSourceSnapshot>;
+  readSource(caller: WorkflowAuthorCaller, assetId: string): Promise<WorkflowSourceSnapshot>;
   previewDeploy(
     caller: WorkflowAuthorCaller,
     assetId: string,
@@ -174,10 +164,7 @@ export type CreateWorkflowAuthorRegistryDeps = {
 };
 
 async function requireAuthorized(
-  deps: Pick<
-    CreateWorkflowAuthorRegistryDeps,
-    "grantStore" | "conditionRegistry"
-  >,
+  deps: Pick<CreateWorkflowAuthorRegistryDeps, "grantStore" | "conditionRegistry">,
   caller: WorkflowAuthorCaller,
   resource: string,
   action: "create" | "write" | "read",
@@ -275,10 +262,7 @@ function tryReadInertDefaultExport(source: string): unknown {
   const trimmed = source.trim();
   const match = /^export\s+default\s+([\s\S]*?);?\s*$/.exec(trimmed);
   if (match === null || match[1] === undefined) return undefined;
-  const quotedKeys = match[1].replace(
-    /([{,]\s*)([A-Za-z_$][A-Za-z0-9_$]*)(\s*:)/g,
-    '$1"$2"$3',
-  );
+  const quotedKeys = match[1].replace(/([{,]\s*)([A-Za-z_$][A-Za-z0-9_$]*)(\s*:)/g, '$1"$2"$3');
   try {
     return JSON.parse(quotedKeys);
   } catch {
@@ -292,11 +276,7 @@ function tryReadInertDefaultExport(source: string): unknown {
 function extractToolPackagePins(
   literal: unknown,
 ): readonly { readonly name: string; readonly version: string }[] {
-  if (
-    literal === undefined ||
-    literal === null ||
-    typeof literal !== "object"
-  ) {
+  if (literal === undefined || literal === null || typeof literal !== "object") {
     return [];
   }
   const pins = (literal as Record<string, unknown>).toolPackagePins;
@@ -338,10 +318,7 @@ export function createWorkflowAuthorRegistry(
       ),
     });
     if (row === undefined) {
-      throw new WorkflowAuthorError(
-        "not_found",
-        `no workflow asset ${assetId} in this tenant`,
-      );
+      throw new WorkflowAuthorError("not_found", `no workflow asset ${assetId} in this tenant`);
     }
     return { id: row.id, name: row.name };
   }
diff --git a/packages/workflows/src/authoring/run-client.ts b/packages/workflows/src/authoring/run-client.ts
index 2d42b96c07..30a76eacda 100644
--- a/packages/workflows/src/authoring/run-client.ts
+++ b/packages/workflows/src/authoring/run-client.ts
@@ -22,9 +22,7 @@ export interface RunBearerClientConfig {
 
 /** The two headers every run-authenticated route resolves tenant and
  * principal from — identity never rides in a request body. */
-export function runBearerHeaders(
-  config: RunBearerClientConfig,
-): Record<string, string> {
+export function runBearerHeaders(config: RunBearerClientConfig): Record<string, string> {
   return {
     authorization: `Bearer ${config.sidecarToken}`,
     "x-workflow-run-address": config.address,
diff --git a/packages/workflows/src/authoring/source-tree.ts b/packages/workflows/src/authoring/source-tree.ts
index 43c52d1da3..c9614da630 100644
--- a/packages/workflows/src/authoring/source-tree.ts
+++ b/packages/workflows/src/authoring/source-tree.ts
@@ -97,9 +97,7 @@ function parsePackageJson(raw: string): {
   }
   const manifest = PackageJSON(parsed);
   if (manifest instanceof type.errors) {
-    throw invalid(
-      `${PACKAGE_JSON_PATH} failed validation: ${manifest.summary}`,
-    );
+    throw invalid(`${PACKAGE_JSON_PATH} failed validation: ${manifest.summary}`);
   }
   return manifest;
 }
@@ -147,9 +145,7 @@ export function validateWorkflowSourceTree(
   const manifest = parsePackageJson(manifestSource);
   const declaredEntry = manifest.interchange?.workflow;
   if (declaredEntry === undefined || declaredEntry === "") {
-    throw invalid(
-      `${PACKAGE_JSON_PATH} must declare a non-empty "interchange.workflow" entry`,
-    );
+    throw invalid(`${PACKAGE_JSON_PATH} must declare a non-empty "interchange.workflow" entry`);
   }
   if (!isContainedEntryPath(declaredEntry)) {
     throw invalid(
diff --git a/packages/workflows/src/authoring/workflow-routes.test.ts b/packages/workflows/src/authoring/workflow-routes.test.ts
index 40d8aa97c5..ac4181960a 100644
--- a/packages/workflows/src/authoring/workflow-routes.test.ts
+++ b/packages/workflows/src/authoring/workflow-routes.test.ts
@@ -8,15 +8,11 @@ import {
 import { WorkflowAuthorError } from "./errors";
 import type { WorkflowAuthorRegistry } from "./registry";
 
-function fakeAuthenticator(
-  scope: WorkflowRunScope | null,
-): WorkflowRunAuthenticator {
+function fakeAuthenticator(scope: WorkflowRunScope | null): WorkflowRunAuthenticator {
   return { resolve: async () => scope };
 }
 
-function fakeRegistry(
-  overrides: Partial<WorkflowAuthorRegistry> = {},
-): WorkflowAuthorRegistry {
+function fakeRegistry(overrides: Partial<WorkflowAuthorRegistry> = {}): WorkflowAuthorRegistry {
   return {
     author: async () => {
       throw new Error("author not stubbed");
diff --git a/packages/workflows/src/authoring/workflow-routes.ts b/packages/workflows/src/authoring/workflow-routes.ts
index dc7b091a89..73858301fe 100644
--- a/packages/workflows/src/authoring/workflow-routes.ts
+++ b/packages/workflows/src/authoring/workflow-routes.ts
@@ -56,9 +56,7 @@ const DeployPreviewBody = type({
   entry: "string",
 });
 
-function statusFor(
-  reason: WorkflowAuthorError["reason"],
-): 400 | 403 | 404 | 409 | 502 {
+function statusFor(reason: WorkflowAuthorError["reason"]): 400 | 403 | 404 | 409 | 502 {
   switch (reason) {
     case "not_found":
       return 404;
@@ -101,17 +99,14 @@ export function createWorkflowAuthorRoutes(
 
   app.use("*", async (c, next) => {
     const authHeader = c.req.header("authorization") ?? "";
-    const token = authHeader.startsWith("Bearer ")
-      ? authHeader.slice("Bearer ".length)
-      : "";
+    const token = authHeader.startsWith("Bearer ") ? authHeader.slice("Bearer ".length) : "";
     const address = c.req.header("x-workflow-run-address") ?? "";
     const scope = await deps.authenticator.resolve(token, address);
     if (scope === null) {
       return c.json(
         makeErrorEnvelope({
           code: "unauthorized",
-          userMessage:
-            "Missing or unrecognized sidecar bearer token / run address",
+          userMessage: "Missing or unrecognized sidecar bearer token / run address",
         }),
         401,
       );
@@ -154,10 +149,7 @@ export function createWorkflowAuthorRoutes(
 
   app.get("/:assetId/source", async (c) => {
     const scope = c.get("workflowRunScope");
-    const snapshot = await deps.registry.readSource(
-      scope,
-      c.req.param("assetId"),
-    );
+    const snapshot = await deps.registry.readSource(scope, c.req.param("assetId"));
     return c.json({ data: snapshot });
   });
 
@@ -178,11 +170,7 @@ export function createWorkflowAuthorRoutes(
       );
     }
     const scope = c.get("workflowRunScope");
-    const result = await deps.registry.previewDeploy(
-      scope,
-      c.req.param("assetId"),
-      body,
-    );
+    const result = await deps.registry.previewDeploy(scope, c.req.param("assetId"), body);
     return c.json({ data: result });
   });
 
diff --git a/packages/workflows/src/catalog.test.ts b/packages/workflows/src/catalog.test.ts
index eab4edc01e..aab32de7b6 100644
--- a/packages/workflows/src/catalog.test.ts
+++ b/packages/workflows/src/catalog.test.ts
@@ -33,37 +33,27 @@ describe("workflow catalog", () => {
 
   test("prefers the catalog display name for the granola-call workflows", () => {
     expect(workflowDisplayName("granola-call")).toBe("Granola call notes");
-    expect(workflowDisplayName("process-granola-call")).toBe(
-      "Process Granola call",
-    );
+    expect(workflowDisplayName("process-granola-call")).toBe("Process Granola call");
   });
 
   test("does not mark pain-point-collateral automatable — its approval gate is a poor fit for unattended scheduling", () => {
     expect(isAutomatableWorkflowName("pain-point-collateral")).toBe(false);
-    expect(workflowDisplayName("pain-point-collateral")).toBe(
-      "Pain-point collateral",
-    );
+    expect(workflowDisplayName("pain-point-collateral")).toBe("Pain-point collateral");
   });
 
   test("does not mark collateral-generation automatable — on-demand only, gated behind its final approval", () => {
     expect(isAutomatableWorkflowName("collateral-generation")).toBe(false);
-    expect(workflowDisplayName("collateral-generation")).toBe(
-      "Collateral generation",
-    );
+    expect(workflowDisplayName("collateral-generation")).toBe("Collateral generation");
   });
 
   test("marks reddit-opportunity-scanner on-demand — its approval gates make it a poor unattended fit", () => {
     expect(isAutomatableWorkflowName("reddit-opportunity-scanner")).toBe(false);
-    expect(workflowDisplayName("reddit-opportunity-scanner")).toBe(
-      "Reddit opportunity scanner",
-    );
+    expect(workflowDisplayName("reddit-opportunity-scanner")).toBe("Reddit opportunity scanner");
   });
 
   test("does not mark last-30-days-research automatable — on-demand only, gated behind a human-supplied topic per run", () => {
     expect(isAutomatableWorkflowName("last-30-days-research")).toBe(false);
-    expect(workflowDisplayName("last-30-days-research")).toBe(
-      "Last 30 days research report",
-    );
+    expect(workflowDisplayName("last-30-days-research")).toBe("Last 30 days research report");
   });
 
   test("rejects agent handles and workbench-host names as automatable", () => {
@@ -91,9 +81,7 @@ describe("workflow catalog", () => {
   });
 
   test("falls back to description, then humanized name — never blank", () => {
-    expect(workflowDisplayName("unknown-flow", "  Weekly brief  ")).toBe(
-      "Weekly brief",
-    );
+    expect(workflowDisplayName("unknown-flow", "  Weekly brief  ")).toBe("Weekly brief");
     expect(workflowDisplayName("last-30-days")).toBe("Last 30 Days");
   });
 
@@ -149,24 +137,18 @@ describe("workflow catalog", () => {
     });
 
     test("no catalog entry currently delivers to inbox", () => {
-      const inboxEntries = WORKFLOW_CATALOG.filter(
-        (entry) => entry.deliveryMode === "inbox",
-      );
+      const inboxEntries = WORKFLOW_CATALOG.filter((entry) => entry.deliveryMode === "inbox");
       expect(inboxEntries).toEqual([]);
     });
 
     test("deliveryWorkbenchRequiredForWorkflowName is true for every known catalog entry", () => {
       for (const entry of WORKFLOW_CATALOG) {
-        expect(deliveryWorkbenchRequiredForWorkflowName(entry.assetName)).toBe(
-          true,
-        );
+        expect(deliveryWorkbenchRequiredForWorkflowName(entry.assetName)).toBe(true);
       }
     });
 
     test("an unknown workflow name defaults to workbench-required", () => {
-      expect(deliveryWorkbenchRequiredForWorkflowName("unknown-workflow")).toBe(
-        true,
-      );
+      expect(deliveryWorkbenchRequiredForWorkflowName("unknown-workflow")).toBe(true);
     });
   });
 
@@ -184,9 +166,7 @@ describe("workflow catalog", () => {
     for (const entry of WORKFLOW_CATALOG) {
       expect(entry.exampleOutput).not.toContain("\n");
       expect(entry.exampleOutput.endsWith(".")).toBe(false);
-      expect(entry.exampleOutput[0]).toBe(
-        entry.exampleOutput[0]?.toUpperCase(),
-      );
+      expect(entry.exampleOutput[0]).toBe(entry.exampleOutput[0]?.toUpperCase());
     }
   });
 
@@ -206,43 +186,27 @@ describe("workflow catalog", () => {
   });
 
   test("pins the GTM ports to the connectors their tool packages actually need", () => {
-    const byAssetName = new Map(
-      WORKFLOW_CATALOG.map((entry) => [entry.assetName, entry]),
-    );
-    expect(byAssetName.get("granola-call")?.requiredConnections).toEqual([
-      "granola",
-    ]);
-    expect(
-      byAssetName.get("process-granola-call")?.requiredConnections,
-    ).toEqual(["granola"]);
-    expect(byAssetName.get("morning-brief")?.requiredConnections).toEqual([
+    const byAssetName = new Map(WORKFLOW_CATALOG.map((entry) => [entry.assetName, entry]));
+    expect(byAssetName.get("granola-call")?.requiredConnections).toEqual(["granola"]);
+    expect(byAssetName.get("process-granola-call")?.requiredConnections).toEqual(["granola"]);
+    expect(byAssetName.get("morning-brief")?.requiredConnections).toEqual(["granola", "linear"]);
+    expect(byAssetName.get("pain-point-collateral")?.requiredConnections).toEqual(["granola"]);
+    expect(byAssetName.get("collateral-generation")?.requiredConnections).toEqual([
       "granola",
       "linear",
     ]);
-    expect(
-      byAssetName.get("pain-point-collateral")?.requiredConnections,
-    ).toEqual(["granola"]);
-    expect(
-      byAssetName.get("collateral-generation")?.requiredConnections,
-    ).toEqual(["granola", "linear"]);
-    expect(
-      byAssetName.get("reddit-opportunity-scanner")?.requiredConnections,
-    ).toEqual(["scrapecreators"]);
-    expect(
-      byAssetName.get("last-30-days-research")?.requiredConnections,
-    ).toEqual(["exa"]);
+    expect(byAssetName.get("reddit-opportunity-scanner")?.requiredConnections).toEqual([
+      "scrapecreators",
+    ]);
+    expect(byAssetName.get("last-30-days-research")?.requiredConnections).toEqual(["exa"]);
   });
 
   test("workflows with no external connector requirement declare an empty list", () => {
-    const byAssetName = new Map(
-      WORKFLOW_CATALOG.map((entry) => [entry.assetName, entry]),
-    );
+    const byAssetName = new Map(WORKFLOW_CATALOG.map((entry) => [entry.assetName, entry]));
     expect(byAssetName.get("echo")?.requiredConnections).toEqual([]);
     expect(byAssetName.get("assistant")?.requiredConnections).toEqual([]);
     expect(byAssetName.get("heartbeat")?.requiredConnections).toEqual([]);
-    expect(byAssetName.get("workbench-digest")?.requiredConnections).toEqual(
-      [],
-    );
+    expect(byAssetName.get("workbench-digest")?.requiredConnections).toEqual([]);
   });
 
   describe("triggerFields", () => {
@@ -292,10 +256,7 @@ describe("workflow catalog", () => {
       // accepts either one (or neither, and teaches what to send next); see
       // workflows/pain-point-collateral/src/intake-tool.ts's IntakeArgs.
       const entry = workflowCatalogEntry("pain-point-collateral");
-      expect(entry?.triggerFields?.map((f) => f.key)).toEqual([
-        "transcript",
-        "noteId",
-      ]);
+      expect(entry?.triggerFields?.map((f) => f.key)).toEqual(["transcript", "noteId"]);
       for (const field of entry?.triggerFields ?? []) {
         expect(field.required).toBe(false);
       }
@@ -307,9 +268,7 @@ describe("workflow catalog", () => {
       // workbench-digest's content is computed server-side by the scheduler,
       // not typed in by a person.
       expect(workflowCatalogEntry("heartbeat")?.triggerFields).toBeUndefined();
-      expect(
-        workflowCatalogEntry("workbench-digest")?.triggerFields,
-      ).toBeUndefined();
+      expect(workflowCatalogEntry("workbench-digest")?.triggerFields).toBeUndefined();
     });
   });
 
@@ -332,9 +291,7 @@ describe("workflow catalog", () => {
     const fields = AGENT_AND_PROMPT_FIELDS;
 
     test("a required field left entirely unbound passes at create time", () => {
-      expect(
-        validateTriggerFieldsAtCreate(fields, { prompt: "Do it" }),
-      ).toEqual({ ok: true });
+      expect(validateTriggerFieldsAtCreate(fields, { prompt: "Do it" })).toEqual({ ok: true });
     });
 
     test("last-30-days-research seeds with Topic unbound", () => {
diff --git a/packages/workflows/src/catalog.ts b/packages/workflows/src/catalog.ts
index 111f8d1b1a..924b929b39 100644
--- a/packages/workflows/src/catalog.ts
+++ b/packages/workflows/src/catalog.ts
@@ -213,8 +213,7 @@ export const WORKFLOW_CATALOG: readonly WorkflowCatalogEntry[] = [
     whatItDoes:
       "Fetches one call's transcript and publishes five-section working notes — Participants, Summary, Pain points, Decisions, Action items — grounded in the transcript.",
     requiredConnections: ["granola"],
-    exampleOutput:
-      "Participants, summary, and action items from the call transcript",
+    exampleOutput: "Participants, summary, and action items from the call transcript",
     typicalDuration: "1-2 minutes",
   },
   {
@@ -224,8 +223,7 @@ export const WORKFLOW_CATALOG: readonly WorkflowCatalogEntry[] = [
     whatItDoes:
       "Pulls the sender's recent Granola calls and Linear issues and writes a three-section daily brief: what happened, what needs attention, and suggested next actions.",
     requiredConnections: ["granola", "linear"],
-    exampleOutput:
-      "Brief covering 2 calls, 3 issue updates, one blocked review",
+    exampleOutput: "Brief covering 2 calls, 3 issue updates, one blocked review",
     typicalDuration: "under a minute",
   },
   {
@@ -270,8 +268,7 @@ export const WORKFLOW_CATALOG: readonly WorkflowCatalogEntry[] = [
     whatItDoes:
       "Drafts marketing collateral across picked content types from Granola notes, Linear issues, or pasted text, with a swipe review on every draft and one approval on the final set.",
     requiredConnections: ["granola", "linear"],
-    exampleOutput:
-      "Drafts ready to review: LinkedIn post, blog, Twitter thread",
+    exampleOutput: "Drafts ready to review: LinkedIn post, blog, Twitter thread",
     typicalDuration: "several minutes, plus review and approval time",
   },
   {
@@ -323,8 +320,7 @@ export const WORKFLOW_CATALOG: readonly WorkflowCatalogEntry[] = [
     whatItDoes:
       "Researches a company across web search and firm memory, and writes a cited diligence brief across five fixed sections, held for approval before it's saved.",
     requiredConnections: ["exa"],
-    exampleOutput:
-      "Diligence brief: 5 sections, 2 flagged as insufficient evidence",
+    exampleOutput: "Diligence brief: 5 sections, 2 flagged as insufficient evidence",
     typicalDuration: "1-2 minutes, plus review and approval time",
     // Mirrors workflows/diligence-brief/src/index.ts's system prompt
     // exactly: "the trigger carries a `company` and an optional `focus`" —
@@ -379,8 +375,7 @@ export const WORKFLOW_CATALOG: readonly WorkflowCatalogEntry[] = [
     whatItDoes:
       "Works one Attio task: reads the record and the surrounding context, drafts what the task needs, and writes back to Attio only once you approve it.",
     requiredConnections: ["attio"],
-    exampleOutput:
-      "Two drafts ready to review, plus a CRM note awaiting your OK",
+    exampleOutput: "Two drafts ready to review, plus a CRM note awaiting your OK",
     typicalDuration: "a few minutes, plus review and approval time",
     // Mirrors workflows/attio-task-agent/src/index.ts's system prompt:
     // the trigger names the task by id, or names whose task list to look
@@ -419,9 +414,7 @@ for (const entry of WORKFLOW_CATALOG) {
   }
 }
 
-const byAssetName = new Map(
-  WORKFLOW_CATALOG.map((entry) => [entry.assetName, entry]),
-);
+const byAssetName = new Map(WORKFLOW_CATALOG.map((entry) => [entry.assetName, entry]));
 
 export function isAutomatableWorkflowName(name: string): boolean {
   return byAssetName.get(name)?.automatable === true;
@@ -448,18 +441,14 @@ export function isConversationalWorkflowName(name: string): boolean {
  * (workbench required): the safe, prior-behavior default when a workflow
  * isn't catalog-known at all.
  */
-export function deliveryWorkbenchRequiredForWorkflowName(
-  name: string,
-): boolean {
+export function deliveryWorkbenchRequiredForWorkflowName(name: string): boolean {
   return byAssetName.get(name)?.deliveryMode !== "inbox";
 }
 
 /** The full catalog entry for an asset name, or `undefined` if it isn't
  * a known workflow — the demo-card fields (`whatItDoes`, `exampleOutput`,
  * etc.) live here alongside the display name. */
-export function workflowCatalogEntry(
-  name: string,
-): WorkflowCatalogEntry | undefined {
+export function workflowCatalogEntry(name: string): WorkflowCatalogEntry | undefined {
   return byAssetName.get(name);
 }
 
@@ -468,10 +457,7 @@ export function workflowCatalogEntry(
  * name, then a non-empty description, then a humanized asset name — never
  * a raw definition id.
  */
-export function workflowDisplayName(
-  name: string,
-  description?: string | null,
-): string {
+export function workflowDisplayName(name: string, description?: string | null): string {
   const entry = byAssetName.get(name);
   if (entry !== undefined) return entry.displayName;
   if (description !== undefined && description !== null) {
@@ -490,7 +476,8 @@ function humanizeAssetName(name: string): string {
 }
 
 export type TriggerFieldsValidation =
-  { readonly ok: true } | { readonly ok: false; readonly message: string };
+  | { readonly ok: true }
+  | { readonly ok: false; readonly message: string };
 
 /**
  * The create-time boundary check for a routine's stored `input`
diff --git a/packages/workflows/src/definition-projection.test.ts b/packages/workflows/src/definition-projection.test.ts
index c47d0300ea..a2edd9321e 100644
--- a/packages/workflows/src/definition-projection.test.ts
+++ b/packages/workflows/src/definition-projection.test.ts
@@ -10,28 +10,16 @@
 // CL-6357's asset-drift walk: a pre-cutover sibling carrying no stored
 // projection must never win over a healthy newer one, and exhausting
 // every candidate raises the named `DefinitionProjectionMissingError`.
-import {
-  afterEach,
-  beforeEach,
-  describe,
-  expect,
-  mock,
-  spyOn,
-  test,
-} from "bun:test";
+import { afterEach, beforeEach, describe, expect, mock, spyOn, test } from "bun:test";
 import * as intxDb from "@intx/db";
 import { WorkflowProjectionDefinition } from "@intx/types/sidecar";
 
 const projectionsById: Record<string, unknown> = {};
 beforeEach(() => {
-  spyOn(intxDb, "loadFrozenWireProjection").mockImplementation(
-    async (_db, definitionId) => {
-      const projection = projectionsById[definitionId];
-      return projection === undefined
-        ? null
-        : WorkflowProjectionDefinition.assert(projection);
-    },
-  );
+  spyOn(intxDb, "loadFrozenWireProjection").mockImplementation(async (_db, definitionId) => {
+    const projection = projectionsById[definitionId];
+    return projection === undefined ? null : WorkflowProjectionDefinition.assert(projection);
+  });
 });
 afterEach(() => mock.restore());
 
@@ -145,9 +133,9 @@ describe("readFoldedBody", () => {
   });
 
   test("fails loud on a multi-step projection", () => {
-    expect(() =>
-      readFoldedBody(inertProjection({ stepOrder: ["host", "second"] }), []),
-    ).toThrow(/not single-step/);
+    expect(() => readFoldedBody(inertProjection({ stepOrder: ["host", "second"] }), [])).toThrow(
+      /not single-step/,
+    );
   });
 
   // The launch target (`@corbits/agent-runtime`'s
@@ -171,17 +159,12 @@ describe("readFoldedBody", () => {
 
   test("fails loud when the named step is not a step primitive", () => {
     expect(() =>
-      readFoldedBody(
-        inertProjection({ steps: { host: { kind: "not-a-step" } } }),
-        [],
-      ),
+      readFoldedBody(inertProjection({ steps: { host: { kind: "not-a-step" } } }), []),
     ).toThrow(/is not a step primitive/);
   });
 
   test("rejects a LIVE definition, whose inference chain the projection flattens away", () => {
-    expect(() => readFoldedBody(liveDefinition(), [])).toThrow(
-      /is not a step primitive/,
-    );
+    expect(() => readFoldedBody(liveDefinition(), [])).toThrow(/is not a step primitive/);
   });
 
   test("extracts the launch body from a section-shaped (CL-6329 onTrigger) projection", () => {
@@ -303,9 +286,9 @@ describe("resolveNewestProjectedDefinition", () => {
   });
 
   test("raises with consumer-language recovery guidance when there are no candidates at all", async () => {
-    await expect(
-      resolveNewestProjectedDefinition({} as never, []),
-    ).rejects.toThrow(/save its instructions/);
+    await expect(resolveNewestProjectedDefinition({} as never, [])).rejects.toThrow(
+      /save its instructions/,
+    );
   });
 });
 
diff --git a/packages/workflows/src/definition-projection.ts b/packages/workflows/src/definition-projection.ts
index 4a4b8a3a96..0a7f24102d 100644
--- a/packages/workflows/src/definition-projection.ts
+++ b/packages/workflows/src/definition-projection.ts
@@ -38,9 +38,7 @@ export class DefinitionProjectionMissingError extends Error {
     const guidance =
       "This agent isn't finished setting up. Open it in Agents, save " +
       "its instructions, and try again — or recreate it.";
-    super(
-      `No stored launch body for definition "${definitionName}" (${guidance})`,
-    );
+    super(`No stored launch body for definition "${definitionName}" (${guidance})`);
     this.name = "DefinitionProjectionMissingError";
     this.definitionName = definitionName;
     this.guidance = guidance;
@@ -77,9 +75,9 @@ export type DefinitionCandidate = {
  * wire hash — a frozen deploy record carrying whatever projection was
  * current at that deploy, which must never resolve a launch (CL-6452).
  */
-export function authoredDefinitionCandidates<
-  T extends { readonly origin: "authored" | "run" },
->(rows: readonly T[]): T[] {
+export function authoredDefinitionCandidates<T extends { readonly origin: "authored" | "run" }>(
+  rows: readonly T[],
+): T[] {
   return rows.filter((row) => row.origin === "authored");
 }
 
@@ -106,9 +104,7 @@ export class MultiStepFoldUnsupportedError extends Error {
       "does not yet support — only its first step would run. Reduce it " +
       "to a single step, or wait for multi-step routine launch support.";
     super(
-      `definition ${definitionId} is not single-step (${String(
-        stepCount,
-      )} steps) (${guidance})`,
+      `definition ${definitionId} is not single-step (${String(stepCount)} steps) (${guidance})`,
     );
     this.name = "MultiStepFoldUnsupportedError";
     this.definitionId = definitionId;
@@ -239,26 +235,16 @@ export const FoldedBodySchema = type({
  * the definition row because the projector drops it (see the module
  * header).
  */
-export function readFoldedBody(
-  projection: unknown,
-  grantRequirements: unknown,
-): FoldedBody {
+export function readFoldedBody(projection: unknown, grantRequirements: unknown): FoldedBody {
   const definition = InertWorkflowDefinitionSchema(projection);
   if (definition instanceof type.errors) {
     throw new Error(`inert projection is malformed: ${definition.summary}`);
   }
   const [stepId, ...rest] = definition.stepOrder;
   if (stepId === undefined || rest.length > 0) {
-    throw new MultiStepFoldUnsupportedError(
-      definition.id,
-      definition.stepOrder.length,
-    );
+    throw new MultiStepFoldUnsupportedError(definition.id, definition.stepOrder.length);
   }
-  const step = extractAgentBearingStep(
-    definition.steps[stepId],
-    definition.id,
-    stepId,
-  );
+  const step = extractAgentBearingStep(definition.steps[stepId], definition.id, stepId);
   const foldedBody = FoldedBodySchema({
     systemPrompt: step.agent.systemPrompt,
     toolPackagePins: step.agent.toolPackagePins ?? [],
diff --git a/packages/workflows/src/deliver-when-routable.ts b/packages/workflows/src/deliver-when-routable.ts
index cee443ed92..78c6f000d4 100644
--- a/packages/workflows/src/deliver-when-routable.ts
+++ b/packages/workflows/src/deliver-when-routable.ts
@@ -38,9 +38,7 @@ function defaultSleep(ms: number): Promise<void> {
  * failure that never resolves before the deadline, is rethrown as-is —
  * this never swallows the original error or retries indefinitely.
  */
-export async function deliverWhenRoutable<T>(
-  opts: DeliverWhenRoutableOptions<T>,
-): Promise<T> {
+export async function deliverWhenRoutable<T>(opts: DeliverWhenRoutableOptions<T>): Promise<T> {
   const isUnreachable = opts.isUnreachable ?? isAgentUnreachableError;
   try {
     return await opts.send();
@@ -48,8 +46,7 @@ export async function deliverWhenRoutable<T>(
     if (!isUnreachable(err)) {
       throw err;
     }
-    const deadline =
-      Date.now() + (opts.deadlineMs ?? DEFAULT_ROUTABLE_DEADLINE_MS);
+    const deadline = Date.now() + (opts.deadlineMs ?? DEFAULT_ROUTABLE_DEADLINE_MS);
     const pollIntervalMs = opts.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
     const sleep = opts.sleep ?? defaultSleep;
     while (!opts.isRoutable()) {
diff --git a/packages/workflows/src/launch/agent-session.ts b/packages/workflows/src/launch/agent-session.ts
index e4c972ef4c..c8732778c1 100644
--- a/packages/workflows/src/launch/agent-session.ts
+++ b/packages/workflows/src/launch/agent-session.ts
@@ -46,11 +46,7 @@
 // created rather than treated as a bug.
 import { eq } from "drizzle-orm";
 import type { DB } from "@intx/db";
-import {
-  agentSession,
-  workflowRun,
-  workflowRunLaunchSpec,
-} from "@intx/db/schema";
+import { agentSession, workflowRun, workflowRunLaunchSpec } from "@intx/db/schema";
 import type { EventCollectorRegistry } from "@intx/hub-sessions";
 
 /**
@@ -63,10 +59,7 @@ import type { EventCollectorRegistry } from "@intx/hub-sessions";
  * ends; `has` lets a caller check whether a collector already exists
  * before creating a second one.
  */
-export type EventCollectorPort = Pick<
-  EventCollectorRegistry,
-  "create" | "abandon" | "has"
->;
+export type EventCollectorPort = Pick<EventCollectorRegistry, "create" | "abandon" | "has">;
 
 /**
  * The one shared write every native launcher calls right after its own
@@ -90,8 +83,7 @@ export async function recordAgentSessionAtProvision(params: {
   readonly sessionId: string;
   readonly sourceAuthorityPrincipalId: string;
 }): Promise<void> {
-  const { db, eventCollectors, runId, sessionId, sourceAuthorityPrincipalId } =
-    params;
+  const { db, eventCollectors, runId, sessionId, sourceAuthorityPrincipalId } = params;
   const runRow = await db.query.workflowRun.findFirst({
     where: eq(workflowRun.id, runId),
   });
@@ -116,12 +108,7 @@ export async function recordAgentSessionAtProvision(params: {
     .onConflictDoNothing({ target: agentSession.id });
 
   if (runRow.address !== null && !eventCollectors.has(runRow.address)) {
-    eventCollectors.create(
-      runRow.address,
-      runRow.tenantId,
-      sessionId,
-      runRow.id,
-    );
+    eventCollectors.create(runRow.address, runRow.tenantId, sessionId, runRow.id);
   }
 }
 
@@ -195,12 +182,7 @@ export async function ensureRunSession(params: {
   }
 
   if (runRow.address !== null && !eventCollectors.has(runRow.address)) {
-    eventCollectors.create(
-      runRow.address,
-      runRow.tenantId,
-      sessionId,
-      runRow.id,
-    );
+    eventCollectors.create(runRow.address, runRow.tenantId, sessionId, runRow.id);
   }
   return sessionId;
 }
diff --git a/packages/workflows/src/launchable/target-rule.ts b/packages/workflows/src/launchable/target-rule.ts
index 00242bb06e..eef8273e8f 100644
--- a/packages/workflows/src/launchable/target-rule.ts
+++ b/packages/workflows/src/launchable/target-rule.ts
@@ -4,7 +4,10 @@
 // (`resolveLaunchableDefinition`) that queries rows and hands them to
 // `pickLaunchableDefinition` below.
 export type LaunchableDefinitionRejection =
-  "not_found" | "unfrozen" | "not_deployed" | "cross_tenant";
+  | "not_found"
+  | "unfrozen"
+  | "not_deployed"
+  | "cross_tenant";
 
 export type LaunchableDefinitionResolution =
   | {
@@ -142,10 +145,7 @@ export function routineTargetRejection(reason: LaunchableDefinitionRejection): {
 export class RoutineTargetUnresolvableError extends Error {
   readonly reason: LaunchableDefinitionRejection;
   readonly definitionAssetId: string;
-  constructor(
-    definitionAssetId: string,
-    reason: LaunchableDefinitionRejection,
-  ) {
+  constructor(definitionAssetId: string, reason: LaunchableDefinitionRejection) {
     super(
       `routine target ${definitionAssetId} has no launchable definition (${reason}): ${
         routineTargetRejection(reason).userMessage
diff --git a/packages/workflows/src/launchable/target.test.ts b/packages/workflows/src/launchable/target.test.ts
index 4f632765a8..77cf1a332e 100644
--- a/packages/workflows/src/launchable/target.test.ts
+++ b/packages/workflows/src/launchable/target.test.ts
@@ -66,10 +66,7 @@ describe("pickLaunchableDefinition", () => {
       createdAt: new Date("2026-08-20T00:00:00Z"),
       wireProjection: null,
     });
-    const picked = pickLaunchableDefinition(
-      [unfrozenNewer, frozen, partiallyFrozenNewer],
-      TENANT,
-    );
+    const picked = pickLaunchableDefinition([unfrozenNewer, frozen, partiallyFrozenNewer], TENANT);
     expect(picked).toEqual({
       ok: true,
       definitionId: "wfd_v1",
@@ -100,10 +97,7 @@ describe("pickLaunchableDefinition", () => {
       reason: "not_found",
     });
     expect(
-      pickLaunchableDefinition(
-        [candidate({ id: "wfd_theirs", tenantId: "tnt_other" })],
-        TENANT,
-      ),
+      pickLaunchableDefinition([candidate({ id: "wfd_theirs", tenantId: "tnt_other" })], TENANT),
     ).toEqual({ ok: false, reason: "cross_tenant" });
     expect(
       pickLaunchableDefinition(
@@ -128,9 +122,7 @@ describe("pickLaunchableDefinition", () => {
 
 describe("routineTargetRejection", () => {
   test("a cross-tenant asset is reported exactly like a missing one", () => {
-    expect(routineTargetRejection("cross_tenant")).toEqual(
-      routineTargetRejection("not_found"),
-    );
+    expect(routineTargetRejection("cross_tenant")).toEqual(routineTargetRejection("not_found"));
     expect(routineTargetRejection("not_found").status).toBe(404);
   });
 
diff --git a/packages/workflows/src/launchable/target.ts b/packages/workflows/src/launchable/target.ts
index ac18ca7fd2..9ba88d7898 100644
--- a/packages/workflows/src/launchable/target.ts
+++ b/packages/workflows/src/launchable/target.ts
@@ -20,10 +20,7 @@ import type { PostgresJsDatabase } from "drizzle-orm/postgres-js";
 import { workflowDefinition, workflowDefinitionVersion } from "@intx/db/schema";
 
 import { pickLaunchableDefinition } from "./target-rule";
-import type {
-  LaunchableDefinitionCandidate,
-  LaunchableDefinitionResolution,
-} from "./target-rule";
+import type { LaunchableDefinitionCandidate, LaunchableDefinitionResolution } from "./target-rule";
 
 export * from "./target-rule";
 
@@ -78,10 +75,7 @@ async function fetchLaunchableRows(
       workflowDefinitionVersion,
       and(
         eq(workflowDefinitionVersion.definitionId, workflowDefinition.id),
-        eq(
-          workflowDefinitionVersion.version,
-          workflowDefinition.currentVersion,
-        ),
+        eq(workflowDefinitionVersion.version, workflowDefinition.currentVersion),
       ),
     )
     .where(and(eq(workflowDefinition.origin, "authored"), extraWhere))
@@ -122,10 +116,7 @@ export async function listLaunchableDefinitions(
   db: LaunchableDb,
   tenantId: string,
 ): Promise<readonly LaunchableDefinition[]> {
-  const rows = await fetchLaunchableRows(
-    db,
-    eq(workflowDefinition.tenantId, tenantId),
-  );
+  const rows = await fetchLaunchableRows(db, eq(workflowDefinition.tenantId, tenantId));
   const byAsset = new Map<string, LaunchableRow[]>();
   for (const row of rows) {
     if (row.definitionAssetId === null) continue;
diff --git a/packages/workflows/src/schedule/available-catalog.drizzle.test.ts b/packages/workflows/src/schedule/available-catalog.drizzle.test.ts
index f1ec5e3f06..134f6978ef 100644
--- a/packages/workflows/src/schedule/available-catalog.drizzle.test.ts
+++ b/packages/workflows/src/schedule/available-catalog.drizzle.test.ts
@@ -23,93 +23,84 @@ const describeIfDb = dbGate(databaseUrl, import.meta.path);
 
 const SCHEMA = "workflows_available_catalog_test";
 
-describeIfDb(
-  "listAvailableCatalogWorkflows: ancestor-chain connection satisfaction",
-  () => {
-    const target = dbTargetFromUrl(
-      databaseUrl ?? "postgres://localhost:5432/unused",
-    );
+describeIfDb("listAvailableCatalogWorkflows: ancestor-chain connection satisfaction", () => {
+  const target = dbTargetFromUrl(databaseUrl ?? "postgres://localhost:5432/unused");
 
-    beforeAll(async () => {
-      await runMigrations(target, { schema: SCHEMA });
-    });
+  beforeAll(async () => {
+    await runMigrations(target, { schema: SCHEMA });
+  });
 
-    afterAll(async () => {
-      await dropSchema(target, { schema: SCHEMA });
-    });
+  afterAll(async () => {
+    await dropSchema(target, { schema: SCHEMA });
+  });
 
-    test("a child workbench sees code-review as connected via its parent bench's github connection", async () => {
-      const { db, close } = createDB({ ...target, schema: SCHEMA });
-      try {
-        await db.insert(schema.tenant).values({
-          id: "tnt_parent_bench",
-          name: "Parent Bench",
-          slug: "parent-bench",
-          domain: "parent-bench.workbench.test",
-        });
-        await db.insert(schema.tenant).values({
-          id: "tnt_child_workbench",
-          name: "Child Workbench",
-          slug: "child-workbench",
-          domain: "child-workbench.workbench.test",
-          parentId: "tnt_parent_bench",
-        });
-        await db.insert(schema.provider).values({
-          id: "prov_parent_github",
-          tenantId: "tnt_parent_bench",
-          name: "github",
-          plugin: "github",
-        });
-        await db.insert(schema.credential).values({
-          id: "cred_parent_github",
-          tenantId: "tnt_parent_bench",
-          providerId: "prov_parent_github",
-          name: "github-default",
-          type: "oauth_token",
-          secret: "encrypted-not-decrypted-by-this-path",
-          status: "active",
-        });
+  test("a child workbench sees code-review as connected via its parent bench's github connection", async () => {
+    const { db, close } = createDB({ ...target, schema: SCHEMA });
+    try {
+      await db.insert(schema.tenant).values({
+        id: "tnt_parent_bench",
+        name: "Parent Bench",
+        slug: "parent-bench",
+        domain: "parent-bench.workbench.test",
+      });
+      await db.insert(schema.tenant).values({
+        id: "tnt_child_workbench",
+        name: "Child Workbench",
+        slug: "child-workbench",
+        domain: "child-workbench.workbench.test",
+        parentId: "tnt_parent_bench",
+      });
+      await db.insert(schema.provider).values({
+        id: "prov_parent_github",
+        tenantId: "tnt_parent_bench",
+        name: "github",
+        plugin: "github",
+      });
+      await db.insert(schema.credential).values({
+        id: "cred_parent_github",
+        tenantId: "tnt_parent_bench",
+        providerId: "prov_parent_github",
+        name: "github-default",
+        type: "oauth_token",
+        secret: "encrypted-not-decrypted-by-this-path",
+        status: "active",
+      });
 
-        const result = await listAvailableCatalogWorkflows({
-          db,
-          tenantId: "tnt_child_workbench",
-          catalogAssetNames: ["code-review"],
-        });
+      const result = await listAvailableCatalogWorkflows({
+        db,
+        tenantId: "tnt_child_workbench",
+        catalogAssetNames: ["code-review"],
+      });
 
-        const codeReview = result.find(
-          (entry) => entry.assetName === "code-review",
-        );
-        expect(codeReview?.connectionsSatisfied).toBe(true);
-        expect(codeReview?.missingConnections).toEqual([]);
-      } finally {
-        await close();
-      }
-    });
+      const codeReview = result.find((entry) => entry.assetName === "code-review");
+      expect(codeReview?.connectionsSatisfied).toBe(true);
+      expect(codeReview?.missingConnections).toEqual([]);
+    } finally {
+      await close();
+    }
+  });
 
-    test("a bench with no ancestor connection sees code-review as not yet connected", async () => {
-      const { db, close } = createDB({ ...target, schema: SCHEMA });
-      try {
-        await db.insert(schema.tenant).values({
-          id: "tnt_unconnected_bench",
-          name: "Unconnected Bench",
-          slug: "unconnected-bench",
-          domain: "unconnected-bench.workbench.test",
-        });
+  test("a bench with no ancestor connection sees code-review as not yet connected", async () => {
+    const { db, close } = createDB({ ...target, schema: SCHEMA });
+    try {
+      await db.insert(schema.tenant).values({
+        id: "tnt_unconnected_bench",
+        name: "Unconnected Bench",
+        slug: "unconnected-bench",
+        domain: "unconnected-bench.workbench.test",
+      });
 
-        const result = await listAvailableCatalogWorkflows({
-          db,
-          tenantId: "tnt_unconnected_bench",
-          catalogAssetNames: ["code-review"],
-        });
+      const result = await listAvailableCatalogWorkflows({
+        db,
+        tenantId: "tnt_unconnected_bench",
+        catalogAssetNames: ["code-review"],
+      });
 
-        const codeReview = result.find(
-          (entry) => entry.assetName === "code-review",
-        );
-        expect(codeReview?.connectionsSatisfied).toBe(false);
-        expect(codeReview?.missingConnections).toEqual(["github"]);
-      } finally {
-        await close();
-      }
-    });
-  },
-);
+      const codeReview = result.find((entry) => entry.assetName === "code-review");
+      expect(codeReview?.connectionsSatisfied).toBe(false);
+      expect(codeReview?.missingConnections).toEqual(["github"]);
+    } finally {
+      await close();
+    }
+  });
+});
diff --git a/packages/workflows/src/schedule/available-catalog.ts b/packages/workflows/src/schedule/available-catalog.ts
index 7691ca06eb..3385b8e342 100644
--- a/packages/workflows/src/schedule/available-catalog.ts
+++ b/packages/workflows/src/schedule/available-catalog.ts
@@ -86,10 +86,7 @@ async function connectionSatisfactionByConnector(
 
   const chain = await getAncestorChain(db, tenantId);
   const providerRows = await db.query.provider.findMany({
-    where: and(
-      inArray(provider.tenantId, chain),
-      inArray(provider.name, [...connectorIds]),
-    ),
+    where: and(inArray(provider.tenantId, chain), inArray(provider.name, [...connectorIds])),
     columns: { id: true, tenantId: true, name: true },
   });
 
@@ -104,10 +101,7 @@ async function connectionSatisfactionByConnector(
           columns: { providerId: true, status: true, createdAt: true },
           orderBy: [desc(credential.createdAt)],
         });
-  const newestCredentialByProviderId = new Map<
-    string,
-    (typeof credentialRows)[number]
-  >();
+  const newestCredentialByProviderId = new Map<string, (typeof credentialRows)[number]>();
   for (const row of credentialRows) {
     if (!newestCredentialByProviderId.has(row.providerId)) {
       newestCredentialByProviderId.set(row.providerId, row);
@@ -175,7 +169,6 @@ export async function listAvailableCatalogWorkflows(args: {
   return availableCatalogWorkflowsFrom({
     catalogAssetNames,
     deployedNames,
-    isConnectorSatisfied: (connectorId) =>
-      connectorSatisfaction.get(connectorId) ?? false,
+    isConnectorSatisfied: (connectorId) => connectorSatisfaction.get(connectorId) ?? false,
   });
 }
diff --git a/packages/workflows/src/schedule/cron-sentence.test.ts b/packages/workflows/src/schedule/cron-sentence.test.ts
index 9576a2001f..99501a69e8 100644
--- a/packages/workflows/src/schedule/cron-sentence.test.ts
+++ b/packages/workflows/src/schedule/cron-sentence.test.ts
@@ -37,9 +37,7 @@ describe("cronSentence", () => {
   });
 
   test("the named zone is the one the wall clock is read in", () => {
-    expect(cronSentence("30 14 * * *", "America/Los_Angeles")).toEndWith(
-      "(America/Los_Angeles)",
-    );
+    expect(cronSentence("30 14 * * *", "America/Los_Angeles")).toEndWith("(America/Los_Angeles)");
   });
 
   test("a pure cadence names no zone — it is the same in every zone", () => {
diff --git a/packages/workflows/src/schedule/cron-sentence.ts b/packages/workflows/src/schedule/cron-sentence.ts
index 1b698608ff..cbfc64dbdb 100644
--- a/packages/workflows/src/schedule/cron-sentence.ts
+++ b/packages/workflows/src/schedule/cron-sentence.ts
@@ -33,10 +33,7 @@ export function cronHasWallClock(expression: string): boolean {
  * their own invalid input instead of a confident sentence about a
  * schedule that will never fire.
  */
-export function cronSentence(
-  expression: string,
-  timezone: string = "UTC",
-): string | null {
+export function cronSentence(expression: string, timezone: string = "UTC"): string | null {
   let described: string;
   try {
     described = describeCronExpression(expression, {
@@ -50,7 +47,5 @@ export function cronSentence(
     return null;
   }
   if (described === "") return null;
-  return cronHasWallClock(expression)
-    ? `${described} (${timezone})`
-    : described;
+  return cronHasWallClock(expression) ? `${described} (${timezone})` : described;
 }
diff --git a/packages/workflows/src/schedule/deployed-cron-deployments.ts b/packages/workflows/src/schedule/deployed-cron-deployments.ts
index b1e25f0ee2..eaf42786ce 100644
--- a/packages/workflows/src/schedule/deployed-cron-deployments.ts
+++ b/packages/workflows/src/schedule/deployed-cron-deployments.ts
@@ -43,18 +43,12 @@ export async function listDeployedCronDefinitions(
       workflowDefinitionVersion,
       and(
         eq(workflowDefinitionVersion.definitionId, workflowDefinition.id),
-        eq(
-          workflowDefinitionVersion.version,
-          workflowDefinition.currentVersion,
-        ),
+        eq(workflowDefinitionVersion.version, workflowDefinition.currentVersion),
       ),
     )
     .innerJoin(tenantTable, eq(tenantTable.id, workflowDefinition.tenantId))
     .where(
-      and(
-        eq(workflowDefinition.origin, "authored"),
-        eq(workflowDefinition.status, "deployed"),
-      ),
+      and(eq(workflowDefinition.origin, "authored"), eq(workflowDefinition.status, "deployed")),
     );
 
   const deployed: DeployedCronDefinition[] = [];
diff --git a/packages/workflows/src/schedule/from-projection.ts b/packages/workflows/src/schedule/from-projection.ts
index 4542173ad7..18716317a1 100644
--- a/packages/workflows/src/schedule/from-projection.ts
+++ b/packages/workflows/src/schedule/from-projection.ts
@@ -12,9 +12,7 @@ const ScheduleTrigger = type({
   cron: "string",
 });
 
-export function scheduleCronFromProjection(
-  wireProjection: unknown,
-): string | undefined {
+export function scheduleCronFromProjection(wireProjection: unknown): string | undefined {
   const projection = WorkflowProjectionDefinition(wireProjection);
   if (projection instanceof type.errors) return undefined;
   for (const trigger of projection.triggers) {
diff --git a/packages/workflows/src/schedule/list-scheduled.ts b/packages/workflows/src/schedule/list-scheduled.ts
index 31f285c06e..441fdab859 100644
--- a/packages/workflows/src/schedule/list-scheduled.ts
+++ b/packages/workflows/src/schedule/list-scheduled.ts
@@ -78,17 +78,11 @@ export async function listScheduledWorkflowDefinitions(
       workflowDefinitionVersion,
       and(
         eq(workflowDefinitionVersion.definitionId, workflowDefinition.id),
-        eq(
-          workflowDefinitionVersion.version,
-          workflowDefinition.currentVersion,
-        ),
+        eq(workflowDefinitionVersion.version, workflowDefinition.currentVersion),
       ),
     )
     .where(
-      and(
-        eq(workflowDefinition.tenantId, tenantId),
-        eq(workflowDefinition.origin, "authored"),
-      ),
+      and(eq(workflowDefinition.tenantId, tenantId), eq(workflowDefinition.origin, "authored")),
     );
 
   return scheduledDefinitionsFromRows(rows);
diff --git a/packages/workflows/src/schedule/run-outcome.test.ts b/packages/workflows/src/schedule/run-outcome.test.ts
index 2e49b88cd9..c90bbde7a4 100644
--- a/packages/workflows/src/schedule/run-outcome.test.ts
+++ b/packages/workflows/src/schedule/run-outcome.test.ts
@@ -14,10 +14,7 @@ const FRESH = new Date(NOW - 1_000).toISOString();
 describe("warm-kept scheduled fire settling (CL-7418)", () => {
   test("a fire with no in-flight turn past the window reads completed", () => {
     expect(
-      runOutcomeStatus(
-        { createdAt: OLD, status: "running", endedAt: null, turns: [] },
-        NOW,
-      ),
+      runOutcomeStatus({ createdAt: OLD, status: "running", endedAt: null, turns: [] }, NOW),
     ).toBe("completed");
   });
 
@@ -37,10 +34,7 @@ describe("warm-kept scheduled fire settling (CL-7418)", () => {
 
   test("a fresh scheduled tick inside the window stays running", () => {
     expect(
-      runOutcomeStatus(
-        { createdAt: FRESH, status: "running", endedAt: null, turns: [] },
-        NOW,
-      ),
+      runOutcomeStatus({ createdAt: FRESH, status: "running", endedAt: null, turns: [] }, NOW),
     ).toBe("running");
   });
 
@@ -60,19 +54,13 @@ describe("warm-kept scheduled fire settling (CL-7418)", () => {
 
   test("an endedAt stamp reads completed even inside the window", () => {
     expect(
-      runOutcomeStatus(
-        { createdAt: FRESH, status: "running", endedAt: FRESH, turns: [] },
-        NOW,
-      ),
+      runOutcomeStatus({ createdAt: FRESH, status: "running", endedAt: FRESH, turns: [] }, NOW),
     ).toBe("completed");
   });
 
   test("non-running statuses pass through untouched", () => {
     expect(
-      runOutcomeStatus(
-        { createdAt: OLD, status: "failed", endedAt: null, turns: [] },
-        NOW,
-      ),
+      runOutcomeStatus({ createdAt: OLD, status: "failed", endedAt: null, turns: [] }, NOW),
     ).toBe("failed");
   });
 });
diff --git a/packages/workflows/src/schedule/run-outcome.ts b/packages/workflows/src/schedule/run-outcome.ts
index 82b79f5b1d..6917530f5f 100644
--- a/packages/workflows/src/schedule/run-outcome.ts
+++ b/packages/workflows/src/schedule/run-outcome.ts
@@ -35,9 +35,7 @@ function isInFlightTurn(turn: unknown): boolean {
   return endedAt === undefined || endedAt === null || endedAt === "";
 }
 
-function nestedTurns(
-  run: Record<string, unknown> | undefined,
-): readonly unknown[] | undefined {
+function nestedTurns(run: Record<string, unknown> | undefined): readonly unknown[] | undefined {
   const turns = run?.turns;
   return Array.isArray(turns) ? turns : undefined;
 }
@@ -59,9 +57,7 @@ function runHasInFlightTurn(run: Record<string, unknown> | undefined): boolean {
   return run?.hasInFlightTurn === true;
 }
 
-function runHasNoInFlightTurn(
-  run: Record<string, unknown> | undefined,
-): boolean {
+function runHasNoInFlightTurn(run: Record<string, unknown> | undefined): boolean {
   return run?.hasInFlightTurn === false;
 }
 
@@ -109,10 +105,7 @@ export function listingAbandoned(listing: ListingRun, now: number): boolean {
 }
 
 /** Pass `abandoned: true` into outcome helpers when the listing is abandoned. */
-export function withListingAbandoned<T extends ListingRun>(
-  listing: T,
-  now: number,
-): T {
+export function withListingAbandoned<T extends ListingRun>(listing: T, now: number): T {
   if (!listingAbandoned(listing, now)) return listing;
   return { ...listing, abandoned: true };
 }
diff --git a/packages/workflows/src/source.test.ts b/packages/workflows/src/source.test.ts
index 4779f0e31a..e02f78410d 100644
--- a/packages/workflows/src/source.test.ts
+++ b/packages/workflows/src/source.test.ts
@@ -31,9 +31,7 @@ test("the definition round-trips through the entry module", () => {
     workflowJson: WORKFLOW_JSON,
   });
 
-  expect(parseWorkflowSourceEntry(tree["workflow.js"] as string, "ast_1")).toBe(
-    WORKFLOW_JSON,
-  );
+  expect(parseWorkflowSourceEntry(tree["workflow.js"] as string, "ast_1")).toBe(WORKFLOW_JSON);
 });
 
 test("a bare workflow.json envelope parses as the named retirement error", () => {
@@ -45,9 +43,7 @@ test("a bare workflow.json envelope parses as the named retirement error", () =>
 test("an asset with no entry module reads as the named retirement error", async () => {
   const reader = {
     readAssetBlob: (params: { assetId: string; path: string }) =>
-      Promise.reject(
-        new Error(`asset ${params.assetId} has no blob at ${params.path}`),
-      ),
+      Promise.reject(new Error(`asset ${params.assetId} has no blob at ${params.path}`)),
   };
 
   await expect(readWorkflowSourceDefinition(reader, "ast_1")).rejects.toThrow(
@@ -65,7 +61,5 @@ test("reading a source-form asset answers its serialized definition", async () =
       Promise.resolve(new TextEncoder().encode(tree[params.path] as string)),
   };
 
-  expect(await readWorkflowSourceDefinition(reader, "ast_1")).toBe(
-    WORKFLOW_JSON,
-  );
+  expect(await readWorkflowSourceDefinition(reader, "ast_1")).toBe(WORKFLOW_JSON);
 });
diff --git a/packages/workflows/src/source.ts b/packages/workflows/src/source.ts
index c4c69a3ce1..9f854bb453 100644
--- a/packages/workflows/src/source.ts
+++ b/packages/workflows/src/source.ts
@@ -81,20 +81,11 @@ export class RetiredWorkflowEnvelopeError extends Error {
  * an evaluation: anything else is an asset this lineage did not author
  * in its current form.
  */
-export function parseWorkflowSourceEntry(
-  entryModule: string,
-  assetId: string,
-): string {
-  if (
-    !entryModule.startsWith(ENTRY_PREFIX) ||
-    !entryModule.endsWith(ENTRY_SUFFIX)
-  ) {
+export function parseWorkflowSourceEntry(entryModule: string, assetId: string): string {
+  if (!entryModule.startsWith(ENTRY_PREFIX) || !entryModule.endsWith(ENTRY_SUFFIX)) {
     throw new RetiredWorkflowEnvelopeError(assetId);
   }
-  return entryModule.slice(
-    ENTRY_PREFIX.length,
-    entryModule.length - ENTRY_SUFFIX.length,
-  );
+  return entryModule.slice(ENTRY_PREFIX.length, entryModule.length - ENTRY_SUFFIX.length);
 }
 
 /**
@@ -125,8 +116,5 @@ export async function readWorkflowSourceDefinition(
   } catch (cause) {
     throw new RetiredWorkflowEnvelopeError(assetId, { cause });
   }
-  return parseWorkflowSourceEntry(
-    new TextDecoder().decode(entryBytes),
-    assetId,
-  );
+  return parseWorkflowSourceEntry(new TextDecoder().decode(entryBytes), assetId);
 }
diff --git a/packages/workflows/src/validate-push.test.ts b/packages/workflows/src/validate-push.test.ts
index 6f5b436ea6..fecc66e74e 100644
--- a/packages/workflows/src/validate-push.test.ts
+++ b/packages/workflows/src/validate-push.test.ts
@@ -100,7 +100,5 @@ test("a tree missing package.json is rejected, matching the retired-envelope err
 
   expect(result.ok).toBe(false);
   if (result.ok) return;
-  expect(result.reason).toContain(
-    "workflow.json envelope form is no longer supported",
-  );
+  expect(result.reason).toContain("workflow.json envelope form is no longer supported");
 });
diff --git a/packages/workflows/test/agent-session.test.ts b/packages/workflows/test/agent-session.test.ts
index 7837ec3cb7..5a377998fc 100644
--- a/packages/workflows/test/agent-session.test.ts
+++ b/packages/workflows/test/agent-session.test.ts
@@ -23,10 +23,7 @@ import { generateId } from "@intx/hub-common";
 import { resolveRunSessionId } from "@intx/hub-sessions";
 import { dbGate } from "../../../scripts/e2e/db-gate";
 
-import {
-  ensureRunSession,
-  recordAgentSessionAtProvision,
-} from "../src/launch/agent-session";
+import { ensureRunSession, recordAgentSessionAtProvision } from "../src/launch/agent-session";
 
 function dbConfigFromUrl(databaseUrl: string) {
   const url = new URL(databaseUrl);
@@ -167,39 +164,23 @@ describeIfDb("recordAgentSessionAtProvision / ensureRunSession", () => {
 
   afterAll(async () => {
     if (databaseUrl === undefined) return;
-    await db.db
-      .delete(schema.agentSession)
-      .where(eq(schema.agentSession.id, sessionId));
+    await db.db.delete(schema.agentSession).where(eq(schema.agentSession.id, sessionId));
     await db.db
       .delete(schema.workflowRunLaunchSpec)
       .where(eq(schema.workflowRunLaunchSpec.anchorRunId, provisionedRunId));
-    await db.db
-      .delete(schema.workflowRun)
-      .where(eq(schema.workflowRun.id, provisionedRunId));
-    await db.db
-      .delete(schema.workflowRun)
-      .where(eq(schema.workflowRun.id, noLaunchSpecRunId));
-    await db.db
-      .delete(schema.agentSession)
-      .where(eq(schema.agentSession.id, apiDeployedSessionId));
+    await db.db.delete(schema.workflowRun).where(eq(schema.workflowRun.id, provisionedRunId));
+    await db.db.delete(schema.workflowRun).where(eq(schema.workflowRun.id, noLaunchSpecRunId));
+    await db.db.delete(schema.agentSession).where(eq(schema.agentSession.id, apiDeployedSessionId));
     await db.db
       .delete(schema.workflowRunLaunchSpec)
       .where(eq(schema.workflowRunLaunchSpec.anchorRunId, apiDeployedRunId));
-    await db.db
-      .delete(schema.workflowRun)
-      .where(eq(schema.workflowRun.id, apiDeployedRunId));
+    await db.db.delete(schema.workflowRun).where(eq(schema.workflowRun.id, apiDeployedRunId));
     await db.db
       .delete(schema.workflowDefinition)
       .where(eq(schema.workflowDefinition.id, definitionId));
-    await db.db
-      .delete(schema.principal)
-      .where(eq(schema.principal.id, runPrincipalId));
-    await db.db
-      .delete(schema.principal)
-      .where(eq(schema.principal.id, apiDeployedPrincipalId));
-    await db.db
-      .delete(schema.principal)
-      .where(eq(schema.principal.id, deployingPrincipalId));
+    await db.db.delete(schema.principal).where(eq(schema.principal.id, runPrincipalId));
+    await db.db.delete(schema.principal).where(eq(schema.principal.id, apiDeployedPrincipalId));
+    await db.db.delete(schema.principal).where(eq(schema.principal.id, deployingPrincipalId));
     await db.db.delete(schema.tenant).where(eq(schema.tenant.id, tenantId));
   });
 
@@ -285,12 +266,7 @@ describeIfDb("recordAgentSessionAtProvision / ensureRunSession", () => {
 
     expect(resolved).toBe(apiDeployedSessionId);
     expect(createCalls).toEqual([
-      [
-        `${apiDeployedRunId}@${domain}`,
-        tenantId,
-        apiDeployedSessionId,
-        apiDeployedRunId,
-      ],
+      [`${apiDeployedRunId}@${domain}`, tenantId, apiDeployedSessionId, apiDeployedRunId],
     ]);
 
     const sessionRow = await db.db.query.agentSession.findFirst({
diff --git a/packages/workflows/test/unreachable-message-contract.test.ts b/packages/workflows/test/unreachable-message-contract.test.ts
index d132f5ab10..8cae358456 100644
--- a/packages/workflows/test/unreachable-message-contract.test.ts
+++ b/packages/workflows/test/unreachable-message-contract.test.ts
@@ -9,10 +9,7 @@ import { describe, expect, test } from "bun:test";
 import { readFileSync } from "node:fs";
 import path from "node:path";
 
-const HELPER_SOURCE = path.join(
-  import.meta.dir,
-  "../src/deliver-when-routable.ts",
-);
+const HELPER_SOURCE = path.join(import.meta.dir, "../src/deliver-when-routable.ts");
 const VENDOR_SESSION_SERVICE = path.join(
   import.meta.dir,
   "../../../vendor/intx/hub-sessions/src/session-service.ts",
diff --git a/packages/xai-provider/package.json b/packages/xai-provider/package.json
index ce24db8526..a7030e81fe 100644
--- a/packages/xai-provider/package.json
+++ b/packages/xai-provider/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@corbits/xai-provider",
+  "version": "0.1.0",
   "private": true,
   "description": "xAI (Grok) OAuth config, token mapping, and a Responses adapter configured for xAI's CLI chat proxy.",
-  "version": "0.1.0",
   "license": "LGPL-2.1-or-later",
   "type": "module",
   "sideEffects": false,
diff --git a/packages/xai-provider/src/constants.ts b/packages/xai-provider/src/constants.ts
index da66cf33a7..8ee7f91c00 100644
--- a/packages/xai-provider/src/constants.ts
+++ b/packages/xai-provider/src/constants.ts
@@ -29,11 +29,7 @@ export const XAI_API_KEY_BASE_URL = "https://api.x.ai/v1";
 
 // Grok-cli OAuth credentials only accept model ids the CLI chat proxy serves;
 // keep the catalog aligned with the CLI's own listing.
-export const XAI_DEFAULT_MODELS = [
-  "grok-4.5",
-  "grok-4.6",
-  "grok-composer-2.5-fast",
-] as const;
+export const XAI_DEFAULT_MODELS = ["grok-4.5", "grok-4.6", "grok-composer-2.5-fast"] as const;
 
 export const XAI_RESPONSES_PATH = "/responses";
 
diff --git a/packages/xai-provider/src/index.ts b/packages/xai-provider/src/index.ts
index 9242e83a40..59e4a6c71b 100644
--- a/packages/xai-provider/src/index.ts
+++ b/packages/xai-provider/src/index.ts
@@ -19,7 +19,4 @@ export {
   type XaiTokens,
 } from "./oauth";
 
-export {
-  createXaiResponsesAdapter,
-  xaiResponsesQuirks,
-} from "./responses-adapter";
+export { createXaiResponsesAdapter, xaiResponsesQuirks } from "./responses-adapter";
diff --git a/packages/xai-provider/src/oauth.test.ts b/packages/xai-provider/src/oauth.test.ts
index 87769e0e80..00d4533871 100644
--- a/packages/xai-provider/src/oauth.test.ts
+++ b/packages/xai-provider/src/oauth.test.ts
@@ -2,9 +2,7 @@ import { describe, expect, test } from "bun:test";
 import { xaiUserIdFromAccessToken } from "./index";
 
 function jwtWithPayload(payload: unknown): string {
-  const header = Buffer.from(JSON.stringify({ alg: "none" })).toString(
-    "base64url",
-  );
+  const header = Buffer.from(JSON.stringify({ alg: "none" })).toString("base64url");
   const body = Buffer.from(JSON.stringify(payload)).toString("base64url");
   return `${header}.${body}.`;
 }
@@ -16,11 +14,7 @@ describe("xAI oauth — user id decoding", () => {
     // JWTs must not throw on the request path — a throw would abort a turn
     // that can still authenticate via Bearer.
     expect(xaiUserIdFromAccessToken("not-a-jwt")).toBeUndefined();
-    expect(
-      xaiUserIdFromAccessToken("header.%%%not-base64%%%.sig"),
-    ).toBeUndefined();
-    expect(
-      xaiUserIdFromAccessToken(jwtWithPayload({ sub: 123 })),
-    ).toBeUndefined();
+    expect(xaiUserIdFromAccessToken("header.%%%not-base64%%%.sig")).toBeUndefined();
+    expect(xaiUserIdFromAccessToken(jwtWithPayload({ sub: 123 }))).toBeUndefined();
   });
 });
diff --git a/packages/xai-provider/src/responses-adapter.ts b/packages/xai-provider/src/responses-adapter.ts
index 47a6ac4989..c24f0a328e 100644
--- a/packages/xai-provider/src/responses-adapter.ts
+++ b/packages/xai-provider/src/responses-adapter.ts
@@ -1,7 +1,4 @@
-import {
-  responsesAdapterFactory,
-  type ResponsesQuirks,
-} from "@corbits/openai-responses";
+import { responsesAdapterFactory, type ResponsesQuirks } from "@corbits/openai-responses";
 import type { AdapterFactory } from "@intx/inference";
 import {
   XAI_CLIENT_IDENTIFIER,
diff --git a/scripts/backfill-principal-keys.ts b/scripts/backfill-principal-keys.ts
index 81faa19b05..053f01058a 100644
--- a/scripts/backfill-principal-keys.ts
+++ b/scripts/backfill-principal-keys.ts
@@ -19,11 +19,7 @@
 // uses. The key is required: the seeds must be sealed under the same cipher
 // the hub decrypts with, so there is no noop fallback.
 
-import {
-  backfillPrincipalKeys,
-  createDB,
-  createPrincipalKeyStore,
-} from "@intx/db";
+import { backfillPrincipalKeys, createDB, createPrincipalKeyStore } from "@intx/db";
 import { createEnvKeyCredentialCipher } from "@intx/crypto";
 import { getLogger, setup } from "@intx/log";
 
@@ -32,9 +28,7 @@ const log = getLogger(["backfill-principal-keys"]);
 
 const keyHex = process.env["PRINCIPAL_KEY_ENCRYPTION_KEY"];
 if (keyHex === undefined || keyHex.trim() === "") {
-  throw new Error(
-    "PRINCIPAL_KEY_ENCRYPTION_KEY environment variable is required",
-  );
+  throw new Error("PRINCIPAL_KEY_ENCRYPTION_KEY environment variable is required");
 }
 const cipher = createEnvKeyCredentialCipher(Buffer.from(keyHex, "hex"));
 
diff --git a/scripts/checks/browser-safe-subpaths.ts b/scripts/checks/browser-safe-subpaths.ts
index c34879213b..e6c372ad27 100644
--- a/scripts/checks/browser-safe-subpaths.ts
+++ b/scripts/checks/browser-safe-subpaths.ts
@@ -24,12 +24,7 @@
 // still needs to be added to ENTRIES by hand.
 import { Glob } from "bun";
 import path from "node:path";
-import {
-  emptyReport,
-  reportAndExit,
-  rootFromArgs,
-  type CheckReport,
-} from "./lib/repo";
+import { emptyReport, reportAndExit, rootFromArgs, type CheckReport } from "./lib/repo";
 
 const SCAN_GLOB = "packages/**/*.{ts,tsx}";
 
@@ -123,8 +118,7 @@ export function parseImportSpecifiers(source: string): ImportSpecifier[] {
   const contents = stripComments(source);
   const results: ImportSpecifier[] = [];
 
-  const fromPattern =
-    /\b(import|export)\s+(type\s+)?[^;]*?\bfrom\s+["']([^"']+)["']/g;
+  const fromPattern = /\b(import|export)\s+(type\s+)?[^;]*?\bfrom\s+["']([^"']+)["']/g;
   for (const match of contents.matchAll(fromPattern)) {
     const specifier = match[3];
     if (specifier === undefined) continue;
@@ -155,13 +149,7 @@ function resolveRelative(
 ): string | undefined {
   const dir = path.posix.dirname(fromRelPath);
   const base = path.posix.normalize(path.posix.join(dir, specifier));
-  const candidates = [
-    base,
-    `${base}.ts`,
-    `${base}.tsx`,
-    `${base}/index.ts`,
-    `${base}/index.tsx`,
-  ];
+  const candidates = [base, `${base}.ts`, `${base}.tsx`, `${base}/index.ts`, `${base}/index.tsx`];
   return candidates.find((candidate) => files.has(candidate));
 }
 
@@ -189,9 +177,7 @@ function findUnruledClientExports(
   entries: readonly BrowserSafeEntry[],
   packages: readonly PackageManifest[],
 ): string[] {
-  const ruled = new Set(
-    entries.map((entry) => `${entry.package}${entry.subpath}`),
-  );
+  const ruled = new Set(entries.map((entry) => `${entry.package}${entry.subpath}`));
   const violations: string[] = [];
   for (const pkg of packages) {
     if (pkg.exports[CONVENTIONAL_SUBPATH] === undefined) continue;
@@ -226,16 +212,12 @@ export function auditBrowserSafeSubpaths(
     const label = entryLabel(entry);
     const manifest = packages.find((pkg) => pkg.name === entry.package);
     if (manifest === undefined) {
-      report.violations.push(
-        `${label}: no package named "${entry.package}" found.`,
-      );
+      report.violations.push(`${label}: no package named "${entry.package}" found.`);
       continue;
     }
     const entryRelPath = manifest.exports[entry.subpath];
     if (entryRelPath === undefined) {
-      report.violations.push(
-        `${label}: "${entry.package}" declares no "${entry.subpath}" export.`,
-      );
+      report.violations.push(`${label}: "${entry.package}" declares no "${entry.subpath}" export.`);
       continue;
     }
 
@@ -306,9 +288,7 @@ export function auditBrowserSafeSubpaths(
       }
     }
 
-    report.notes.push(
-      `${label}: ${reached} file(s) in its import graph, clean.`,
-    );
+    report.notes.push(`${label}: ${reached} file(s) in its import graph, clean.`);
   }
 
   return report;
@@ -328,18 +308,14 @@ async function scanPackageManifests(root: string): Promise<PackageManifest[]> {
       continue;
     }
     const exportsField =
-      "exports" in raw &&
-      typeof raw.exports === "object" &&
-      raw.exports !== null
+      "exports" in raw && typeof raw.exports === "object" && raw.exports !== null
         ? (raw.exports as Record<string, unknown>)
         : {};
     const packageDir = path.posix.dirname(relPath);
     const exportsMap: Record<string, string> = {};
     for (const [key, value] of Object.entries(exportsField)) {
       if (typeof value !== "string") continue;
-      exportsMap[key] = path.posix.normalize(
-        path.posix.join(packageDir, value),
-      );
+      exportsMap[key] = path.posix.normalize(path.posix.join(packageDir, value));
     }
     manifests.push({ name: raw.name, exports: exportsMap });
   }
@@ -360,10 +336,7 @@ async function scanSourceFiles(root: string): Promise<Map<string, string>> {
 async function main(): Promise<void> {
   const args = Bun.argv.slice(2);
   const root = rootFromArgs(args);
-  const [packages, files] = await Promise.all([
-    scanPackageManifests(root),
-    scanSourceFiles(root),
-  ]);
+  const [packages, files] = await Promise.all([scanPackageManifests(root), scanSourceFiles(root)]);
   const report = auditBrowserSafeSubpaths(ENTRIES, packages, files);
   reportAndExit("check:browser-safe-subpaths", report);
 }
diff --git a/scripts/checks/catalog-pins.ts b/scripts/checks/catalog-pins.ts
index adb348a622..e0f511ec79 100644
--- a/scripts/checks/catalog-pins.ts
+++ b/scripts/checks/catalog-pins.ts
@@ -12,18 +12,9 @@ import { existsSync, readFileSync } from "node:fs";
 import path from "node:path";
 import { Glob } from "bun";
 import { type } from "arktype";
-import {
-  emptyReport,
-  reportAndExit,
-  rootFromArgs,
-  type CheckReport,
-} from "./lib/repo";
+import { emptyReport, reportAndExit, rootFromArgs, type CheckReport } from "./lib/repo";
 
-const DEPENDENCY_FIELDS = [
-  "dependencies",
-  "devDependencies",
-  "peerDependencies",
-] as const;
+const DEPENDENCY_FIELDS = ["dependencies", "devDependencies", "peerDependencies"] as const;
 
 const PackageJson = type({
   "dependencies?": "Record<string, string>",
@@ -77,9 +68,7 @@ export function resolveCatalogs(rootPackageJson: PackageJson): {
 export function auditCatalogPins(
   catalog: Readonly<Record<string, string>>,
   workspaces: readonly { dir: string; packageJson: PackageJson }[],
-  namedCatalogs: Readonly<
-    Record<string, Readonly<Record<string, string>>>
-  > = {},
+  namedCatalogs: Readonly<Record<string, Readonly<Record<string, string>>>> = {},
 ): CheckReport {
   const report = emptyReport();
   const catalogued = new Set(Object.keys(catalog));
@@ -124,9 +113,7 @@ export function auditCatalogPins(
   return report;
 }
 
-async function listWorkspaces(
-  root: string,
-): Promise<{ dir: string; packageJson: PackageJson }[]> {
+async function listWorkspaces(root: string): Promise<{ dir: string; packageJson: PackageJson }[]> {
   const workspaces: { dir: string; packageJson: PackageJson }[] = [];
   for (const pattern of WORKSPACE_GLOBS) {
     const glob = new Glob(pattern);
@@ -146,13 +133,9 @@ async function main(): Promise<void> {
   const root = rootFromArgs(Bun.argv.slice(2));
   const rootPackageJsonPath = path.join(root, "package.json");
   const rootPackageJson = existsSync(rootPackageJsonPath)
-    ? parsePackageJson(
-        readFileSync(rootPackageJsonPath, "utf8"),
-        "package.json",
-      )
+    ? parsePackageJson(readFileSync(rootPackageJsonPath, "utf8"), "package.json")
     : ({} as PackageJson);
-  const { default: catalog, named: namedCatalogs } =
-    resolveCatalogs(rootPackageJson);
+  const { default: catalog, named: namedCatalogs } = resolveCatalogs(rootPackageJson);
   const workspaces = await listWorkspaces(root);
   const report = auditCatalogPins(catalog, workspaces, namedCatalogs);
   if (workspaces.length === 0) {
diff --git a/scripts/checks/db-gate.ts b/scripts/checks/db-gate.ts
index 9341d84fca..a8d426b0ca 100644
--- a/scripts/checks/db-gate.ts
+++ b/scripts/checks/db-gate.ts
@@ -11,21 +11,13 @@
 // alone — see VENDORED.md.
 import { Glob } from "bun";
 import path from "node:path";
-import {
-  emptyReport,
-  reportAndExit,
-  rootFromArgs,
-  type CheckReport,
-} from "./lib/repo";
+import { emptyReport, reportAndExit, rootFromArgs, type CheckReport } from "./lib/repo";
 
 const SCAN_DIRS = ["apps", "packages", "scripts"];
 const HAND_ROLLED_GATE_PATTERN =
   /const\s+describeIfDb\s*=\s*\w+\s*===\s*(?:undefined|"")\s*\?\s*describe\.skip\s*:\s*describe;/;
 
-export async function scanFiles(
-  root: string,
-  dirs: readonly string[],
-): Promise<string[]> {
+export async function scanFiles(root: string, dirs: readonly string[]): Promise<string[]> {
   const files: string[] = [];
   for (const dir of dirs) {
     const glob = new Glob(`${dir}/**/*.test.ts`);
@@ -40,9 +32,7 @@ export async function scanFiles(
   return files;
 }
 
-export function auditDbGate(
-  files: readonly { relPath: string; contents: string }[],
-): CheckReport {
+export function auditDbGate(files: readonly { relPath: string; contents: string }[]): CheckReport {
   const report = emptyReport();
   for (const { relPath, contents } of files) {
     if (!HAND_ROLLED_GATE_PATTERN.test(contents)) continue;
@@ -67,9 +57,7 @@ async function main(): Promise<void> {
     })),
   );
   const report = auditDbGate(files);
-  report.notes.push(
-    `scanned ${files.length} *.test.ts file(s) under ${SCAN_DIRS.join(", ")}`,
-  );
+  report.notes.push(`scanned ${files.length} *.test.ts file(s) under ${SCAN_DIRS.join(", ")}`);
   reportAndExit("check:db-gate", report);
 }
 
diff --git a/scripts/checks/deletion.ts b/scripts/checks/deletion.ts
index f922fe33f2..4de7994b85 100644
--- a/scripts/checks/deletion.ts
+++ b/scripts/checks/deletion.ts
@@ -50,9 +50,7 @@ function main(): void {
   const args = Bun.argv.slice(2);
   const root = rootFromArgs(args);
   const ledgerFile = path.join(root, LEDGER_PATH);
-  const ledgered = existsSync(ledgerFile)
-    ? parseLedger(readFileSync(ledgerFile, "utf8"))
-    : [];
+  const ledgered = existsSync(ledgerFile) ? parseLedger(readFileSync(ledgerFile, "utf8")) : [];
   const paths = [...ledgered, ...positionalArgs(args)];
   const report = auditReplacedPaths(paths, (repoRelativePath) =>
     existsSync(path.join(root, repoRelativePath)),
diff --git a/scripts/checks/error-envelope.ts b/scripts/checks/error-envelope.ts
index 8c7f2ea53b..691c519710 100644
--- a/scripts/checks/error-envelope.ts
+++ b/scripts/checks/error-envelope.ts
@@ -13,12 +13,7 @@
 // helper (error-sink).
 import { Glob } from "bun";
 import path from "node:path";
-import {
-  emptyReport,
-  reportAndExit,
-  rootFromArgs,
-  type CheckReport,
-} from "./lib/repo";
+import { emptyReport, reportAndExit, rootFromArgs, type CheckReport } from "./lib/repo";
 
 const SCAN_DIRS = ["apps", "packages", "workflows"];
 
@@ -40,10 +35,7 @@ const ARROW_FACTORY =
 const FUNCTION_FACTORY =
   /(?:export\s+)?function\s+(ErrorEnvelope|errorEnvelope)\s*\(\s*code(?:\s*:\s*string)?\s*,\s*message(?:\s*:\s*string)?\s*\)\s*\{\s*return\s*\{\s*error:\s*\{\s*code\s*,\s*message\s*\}\s*,?\s*\}\s*;?\s*\}/s;
 
-export async function scanFiles(
-  root: string,
-  dirs: readonly string[],
-): Promise<string[]> {
+export async function scanFiles(root: string, dirs: readonly string[]): Promise<string[]> {
   const files: string[] = [];
   for (const dir of dirs) {
     const glob = new Glob(`${dir}/**/*.{ts,tsx}`);
@@ -63,9 +55,7 @@ export function auditLocalErrorEnvelopeFactories(
   const report = emptyReport();
   for (const { relPath, contents } of files) {
     if (ALLOWLIST.has(relPath)) {
-      report.notes.push(
-        `${relPath}: allowlisted (canonical makeErrorEnvelope helper)`,
-      );
+      report.notes.push(`${relPath}: allowlisted (canonical makeErrorEnvelope helper)`);
       continue;
     }
     const arrow = ARROW_FACTORY.test(contents);
@@ -91,9 +81,7 @@ async function main(): Promise<void> {
     })),
   );
   const report = auditLocalErrorEnvelopeFactories(files);
-  report.notes.push(
-    `scanned ${files.length} file(s) under ${SCAN_DIRS.join(", ")}`,
-  );
+  report.notes.push(`scanned ${files.length} file(s) under ${SCAN_DIRS.join(", ")}`);
   reportAndExit("check:error-envelope", report);
 }
 
diff --git a/scripts/checks/hub-git-safety.ts b/scripts/checks/hub-git-safety.ts
index 5877d42de6..f46a171359 100644
--- a/scripts/checks/hub-git-safety.ts
+++ b/scripts/checks/hub-git-safety.ts
@@ -4,12 +4,7 @@
 // have landed on the working branch and wiped checkouts; catching them
 // in CI is cheaper than reconstructing a deleted worktree.
 import { spawnSync } from "node:child_process";
-import {
-  emptyReport,
-  reportAndExit,
-  rootFromArgs,
-  type CheckReport,
-} from "./lib/repo";
+import { emptyReport, reportAndExit, rootFromArgs, type CheckReport } from "./lib/repo";
 
 export const JUNK_COMMIT_SUBJECTS = [
   "initial @corbits/fake-tools@0.0.1",
@@ -17,16 +12,12 @@ export const JUNK_COMMIT_SUBJECTS = [
   "Deploy the default workflow definition",
 ] as const;
 
-export const JUNK_AUTHOR_EMAILS = [
-  "hub@interchange.local",
-  "seed@workbench.localhost",
-] as const;
+export const JUNK_AUTHOR_EMAILS = ["hub@interchange.local", "seed@workbench.localhost"] as const;
 
 /** A commit touching this many paths with no source-tree file is hub dump. */
 export const LARGE_COMMIT_FILE_THRESHOLD = 50;
 
-const SOURCE_PATH =
-  /^(apps|packages|scripts|workflows|docs|test|tools|\.github)\//;
+const SOURCE_PATH = /^(apps|packages|scripts|workflows|docs|test|tools|\.github)\//;
 
 export type InspectedCommit = {
   readonly hash: string;
@@ -39,9 +30,7 @@ export function isSourcePath(file: string): boolean {
   return SOURCE_PATH.test(file) && !file.includes(".data/");
 }
 
-export function auditHubJunkCommits(
-  commits: readonly InspectedCommit[],
-): CheckReport {
+export function auditHubJunkCommits(commits: readonly InspectedCommit[]): CheckReport {
   const report = emptyReport();
   for (const commit of commits) {
     const short = commit.hash.slice(0, 8);
@@ -53,18 +42,14 @@ export function auditHubJunkCommits(
           `this work tree (test/disposable-hub-data-dir.ts).`,
       );
     }
-    if (
-      (JUNK_AUTHOR_EMAILS as readonly string[]).includes(commit.authorEmail)
-    ) {
+    if ((JUNK_AUTHOR_EMAILS as readonly string[]).includes(commit.authorEmail)) {
       report.violations.push(
         `${short}: author ${commit.authorEmail} is hub/seed git identity ` +
           `(subject ${JSON.stringify(commit.subject)}). That commit is ` +
           `on-disk hub state, not a workbench change.`,
       );
     }
-    const dataFiles = commit.files.filter(
-      (file) => file === ".data" || file.startsWith(".data/"),
-    );
+    const dataFiles = commit.files.filter((file) => file === ".data" || file.startsWith(".data/"));
     if (dataFiles.length > 0) {
       report.violations.push(
         `${short}: commits hub data paths (${dataFiles.slice(0, 3).join(", ")}` +
@@ -72,10 +57,7 @@ export function auditHubJunkCommits(
           `HUB_DATA_DIR must not live inside this work tree.`,
       );
     }
-    if (
-      commit.files.length > LARGE_COMMIT_FILE_THRESHOLD &&
-      !commit.files.some(isSourcePath)
-    ) {
+    if (commit.files.length > LARGE_COMMIT_FILE_THRESHOLD && !commit.files.some(isSourcePath)) {
       report.violations.push(
         `${short}: touches ${commit.files.length} paths with no corresponding ` +
           `source-tree change — the shape of a hub git-on-disk dump onto the ` +
@@ -91,18 +73,12 @@ function git(root: string, args: readonly string[]): string | undefined {
   return result.status === 0 ? result.stdout.trim() : undefined;
 }
 
-export function resolveBaseRef(
-  root: string,
-  explicit: string | undefined,
-): string | undefined {
+export function resolveBaseRef(root: string, explicit: string | undefined): string | undefined {
   if (explicit !== undefined && explicit.length > 0) return explicit;
   return git(root, ["merge-base", "HEAD", "origin/main"]);
 }
 
-export function readCommitsSince(
-  root: string,
-  baseRef: string,
-): InspectedCommit[] {
+export function readCommitsSince(root: string, baseRef: string): InspectedCommit[] {
   const hashes = git(root, ["log", "--format=%H", `${baseRef}..HEAD`]);
   if (hashes === undefined || hashes === "") return [];
   const commits: InspectedCommit[] = [];
@@ -113,13 +89,7 @@ export function readCommitsSince(
     const newline = meta.indexOf("\n");
     const subject = newline === -1 ? meta : meta.slice(0, newline);
     const authorEmail = newline === -1 ? "" : meta.slice(newline + 1);
-    const names = git(root, [
-      "diff-tree",
-      "--no-commit-id",
-      "--name-only",
-      "-r",
-      hash,
-    ]);
+    const names = git(root, ["diff-tree", "--no-commit-id", "--name-only", "-r", hash]);
     commits.push({
       hash,
       subject,
diff --git a/scripts/checks/hub-workbench-routes.ts b/scripts/checks/hub-workbench-routes.ts
index 29b1faaf03..b798e88a26 100644
--- a/scripts/checks/hub-workbench-routes.ts
+++ b/scripts/checks/hub-workbench-routes.ts
@@ -21,12 +21,7 @@
 // missed. List-only was never an option: the surviving call site is a get,
 // and the check treats each variant on its own terms.
 import { readFileSync } from "node:fs";
-import {
-  emptyReport,
-  reportAndExit,
-  rootFromArgs,
-  type CheckReport,
-} from "./lib/repo";
+import { emptyReport, reportAndExit, rootFromArgs, type CheckReport } from "./lib/repo";
 
 export type SourceFile = {
   readonly relPath: string;
@@ -40,12 +35,9 @@ export type SourceFile = {
 const COMMAND_GUARD_MARKER = "workbenchBelongsToTenant";
 
 /** The brief's done-when rg, per line, case-insensitive. */
-const DONE_WHEN_PATTERN =
-  /workbench-settings|\/workbenches.*github|github.*workbench/i;
+const DONE_WHEN_PATTERN = /workbench-settings|\/workbenches.*github|github.*workbench/i;
 
-export function auditHubWorkbenchRoutes(
-  files: readonly SourceFile[],
-): CheckReport {
+export function auditHubWorkbenchRoutes(files: readonly SourceFile[]): CheckReport {
   const report = emptyReport();
   for (const file of files) {
     if (file.relPath !== "apps/hub/src/index.ts") continue;
@@ -70,8 +62,7 @@ export function auditHubWorkbenchRoutes(
       offset += line.length + 1;
       if (DONE_WHEN_PATTERN.test(line)) {
         report.violations.push(
-          `${file.relPath}:${lineNumber}: ` +
-            `matches the hub-zero done-when rg: ${line.trim()}`,
+          `${file.relPath}:${lineNumber}: ` + `matches the hub-zero done-when rg: ${line.trim()}`,
         );
       }
     }
diff --git a/scripts/checks/killdates.ts b/scripts/checks/killdates.ts
index efb75423be..77f7534a4a 100644
--- a/scripts/checks/killdates.ts
+++ b/scripts/checks/killdates.ts
@@ -7,12 +7,7 @@
 // bridges register here in the same change that introduces them.
 import { existsSync, readFileSync, readdirSync } from "node:fs";
 import path from "node:path";
-import {
-  emptyReport,
-  reportAndExit,
-  rootFromArgs,
-  type CheckReport,
-} from "./lib/repo";
+import { emptyReport, reportAndExit, rootFromArgs, type CheckReport } from "./lib/repo";
 import { hashDirectory } from "./lib/tree-hash";
 
 export const REGISTRY_PATH = "scripts/checks/kill-dates.txt";
@@ -52,15 +47,11 @@ export function parseKillDates(text: string): ParsedKillDates {
       owner.length === 0 ||
       killDate === undefined
     ) {
-      parsed.problems.push(
-        `malformed row "${line}" — expected "path | owner | YYYY-MM-DD".`,
-      );
+      parsed.problems.push(`malformed row "${line}" — expected "path | owner | YYYY-MM-DD".`);
       continue;
     }
     if (!/^\d{4}-\d{2}-\d{2}$/.test(killDate)) {
-      parsed.problems.push(
-        `row "${line}" has kill date "${killDate}" — expected YYYY-MM-DD.`,
-      );
+      parsed.problems.push(`row "${line}" has kill date "${killDate}" — expected YYYY-MM-DD.`);
       continue;
     }
     const entry: KillDateEntry = { path: entryPath, owner, killDate };
@@ -121,10 +112,7 @@ export function auditVendorCoverage(
 }
 
 /** Every existing vendored row's recorded hash must match its tree. */
-export function auditVendorDrift(
-  entries: readonly KillDateEntry[],
-  root: string,
-): CheckReport {
+export function auditVendorDrift(entries: readonly KillDateEntry[], root: string): CheckReport {
   const report = emptyReport();
   for (const entry of entries) {
     if (!entry.path.startsWith("vendor/")) continue;
@@ -174,8 +162,7 @@ export function auditKillDates(
       continue;
     }
     report.notes.push(
-      `${entry.path} is temporary until ${entry.killDate} ` +
-        `(owner: ${entry.owner}).`,
+      `${entry.path} is temporary until ${entry.killDate} ` + `(owner: ${entry.owner}).`,
     );
   }
   return report;
@@ -191,9 +178,7 @@ function main(): void {
   const report = auditKillDates(parsed.entries, today, (repoRelativePath) =>
     existsSync(path.join(root, repoRelativePath)),
   );
-  report.violations.unshift(
-    ...parsed.problems.map((problem) => `${REGISTRY_PATH}: ${problem}`),
-  );
+  report.violations.unshift(...parsed.problems.map((problem) => `${REGISTRY_PATH}: ${problem}`));
   const coverage = auditVendorCoverage(listVendoredPaths(root), parsed.entries);
   report.violations.push(...coverage.violations);
   report.violations.push(...auditVendorDrift(parsed.entries, root).violations);
diff --git a/scripts/checks/lib/repo.ts b/scripts/checks/lib/repo.ts
index 42b53b586d..bdb056031c 100644
--- a/scripts/checks/lib/repo.ts
+++ b/scripts/checks/lib/repo.ts
@@ -47,9 +47,7 @@ export function reportAndExit(name: string, report: CheckReport): never {
     for (const violation of report.violations) {
       console.error(`${name}: ${violation}`);
     }
-    console.error(
-      `${name}: FAIL — ${report.violations.length} violation(s) above`,
-    );
+    console.error(`${name}: FAIL — ${report.violations.length} violation(s) above`);
     process.exit(1);
   }
   console.log(`${name}: ok`);
diff --git a/scripts/checks/licenses.ts b/scripts/checks/licenses.ts
index 315d884980..376a00defd 100644
--- a/scripts/checks/licenses.ts
+++ b/scripts/checks/licenses.ts
@@ -8,12 +8,7 @@
 import { existsSync, readFileSync } from "node:fs";
 import path from "node:path";
 import { Glob } from "bun";
-import {
-  emptyReport,
-  reportAndExit,
-  rootFromArgs,
-  type CheckReport,
-} from "./lib/repo";
+import { emptyReport, reportAndExit, rootFromArgs, type CheckReport } from "./lib/repo";
 
 export const LIBRARY_LICENSE = "LGPL-2.1-or-later";
 export const APP_LICENSE = "SEE LICENSE IN ../../LICENSE.md";
@@ -29,18 +24,13 @@ export interface WorkspacePackage {
   packageJson: PackageJson;
 }
 
-async function listPackages(
-  root: string,
-  pattern: string,
-): Promise<WorkspacePackage[]> {
+async function listPackages(root: string, pattern: string): Promise<WorkspacePackage[]> {
   const glob = new Glob(pattern);
   const packages: WorkspacePackage[] = [];
   for await (const manifestPath of glob.scan(root)) {
     packages.push({
       dir: path.dirname(manifestPath),
-      packageJson: (await Bun.file(
-        path.join(root, manifestPath),
-      ).json()) as PackageJson,
+      packageJson: (await Bun.file(path.join(root, manifestPath)).json()) as PackageJson,
     });
   }
   return packages.sort((a, b) => a.dir.localeCompare(b.dir));
@@ -89,9 +79,7 @@ export function auditLibraryLicenses(
 }
 
 /** Every application defers to the root GPLv2-with-AI-Exception license. */
-export function auditAppLicenses(
-  apps: readonly WorkspacePackage[],
-): CheckReport {
+export function auditAppLicenses(apps: readonly WorkspacePackage[]): CheckReport {
   const report = emptyReport();
   for (const app of apps) {
     if (app.packageJson.license !== APP_LICENSE) {
@@ -111,19 +99,12 @@ async function main(): Promise<void> {
   const canonicalText = existsSync(canonicalTextFile)
     ? readFileSync(canonicalTextFile, "utf8")
     : "";
-  const [libraries, apps] = await Promise.all([
-    listLibraryPackages(root),
-    listAppPackages(root),
-  ]);
+  const [libraries, apps] = await Promise.all([listLibraryPackages(root), listAppPackages(root)]);
   const report = emptyReport();
-  const libraryReport = auditLibraryLicenses(
-    libraries,
-    canonicalText,
-    (dir) => {
-      const licenseFile = path.join(root, dir, "LICENSE");
-      return existsSync(licenseFile) ? readFileSync(licenseFile, "utf8") : null;
-    },
-  );
+  const libraryReport = auditLibraryLicenses(libraries, canonicalText, (dir) => {
+    const licenseFile = path.join(root, dir, "LICENSE");
+    return existsSync(licenseFile) ? readFileSync(licenseFile, "utf8") : null;
+  });
   report.violations.push(...libraryReport.violations);
   report.violations.push(...auditAppLicenses(apps).violations);
   if (libraries.length === 0 && apps.length === 0) {
diff --git a/scripts/checks/no-product-tenancy.ts b/scripts/checks/no-product-tenancy.ts
index 4fb3530532..555600d3a9 100644
--- a/scripts/checks/no-product-tenancy.ts
+++ b/scripts/checks/no-product-tenancy.ts
@@ -19,12 +19,7 @@
 // allowlisted file fails if it grows past its max.
 import { Glob } from "bun";
 import path from "node:path";
-import {
-  emptyReport,
-  reportAndExit,
-  rootFromArgs,
-  type CheckReport,
-} from "./lib/repo";
+import { emptyReport, reportAndExit, rootFromArgs, type CheckReport } from "./lib/repo";
 
 const SCAN_DIRS = ["apps", "packages", "workflows"];
 // Matches the plain `pgTable(...)` builder and `xyzSchema.table(...)` —
@@ -126,10 +121,7 @@ const ALLOWLIST: readonly {
   },
 ];
 
-export async function scanFiles(
-  root: string,
-  dirs: readonly string[],
-): Promise<string[]> {
+export async function scanFiles(root: string, dirs: readonly string[]): Promise<string[]> {
   const files: string[] = [];
   for (const dir of dirs) {
     const glob = new Glob(`${dir}/**/*.{ts,tsx}`);
@@ -179,8 +171,7 @@ export function auditProductTenancy(
       continue;
     }
     report.notes.push(
-      `${relPath}: ${occurrences} pgTable(...) call(s) allowed ` +
-        `(${allowed.tables.join(", ")})`,
+      `${relPath}: ${occurrences} pgTable(...) call(s) allowed ` + `(${allowed.tables.join(", ")})`,
     );
   }
   return report;
@@ -197,9 +188,7 @@ async function main(): Promise<void> {
     })),
   );
   const report = auditProductTenancy(files);
-  report.notes.push(
-    `scanned ${files.length} file(s) under ${SCAN_DIRS.join(", ")}`,
-  );
+  report.notes.push(`scanned ${files.length} file(s) under ${SCAN_DIRS.join(", ")}`);
   reportAndExit("check:no-product-tenancy", report);
 }
 
diff --git a/scripts/checks/packages.ts b/scripts/checks/packages.ts
index 3f8fa0fc12..ad5d8a737f 100644
--- a/scripts/checks/packages.ts
+++ b/scripts/checks/packages.ts
@@ -7,26 +7,14 @@
 // must import by package name from a staging directory where only its
 // declared dependencies are present. "Works in the repo" has to mean
 // "works when published".
-import {
-  existsSync,
-  mkdirSync,
-  mkdtempSync,
-  renameSync,
-  rmSync,
-  symlinkSync,
-} from "node:fs";
+import { existsSync, mkdirSync, mkdtempSync, renameSync, rmSync, symlinkSync } from "node:fs";
 import { tmpdir } from "node:os";
 import path from "node:path";
 import { Glob } from "bun";
 import { readFileSync } from "node:fs";
 import { collectExportTargets, declaredDependencyNames } from "./lib/exports";
 import { listVendoredPaths } from "./killdates";
-import {
-  emptyReport,
-  reportAndExit,
-  rootFromArgs,
-  type CheckReport,
-} from "./lib/repo";
+import { emptyReport, reportAndExit, rootFromArgs, type CheckReport } from "./lib/repo";
 
 /** The tarball filename `bun pm pack` produces for a package. */
 export function tarballNameFor(name: string, version: string): string {
@@ -47,26 +35,19 @@ interface WorkspacePackage {
   packageJson: PackageJson;
 }
 
-async function listWorkspacePackages(
-  root: string,
-): Promise<WorkspacePackage[]> {
+async function listWorkspacePackages(root: string): Promise<WorkspacePackage[]> {
   const glob = new Glob("{apps,packages,tools,workflows}/*/package.json");
   const packages: WorkspacePackage[] = [];
   for await (const manifestPath of glob.scan(root)) {
     packages.push({
       dir: path.dirname(manifestPath),
-      packageJson: (await Bun.file(
-        path.join(root, manifestPath),
-      ).json()) as PackageJson,
+      packageJson: (await Bun.file(path.join(root, manifestPath)).json()) as PackageJson,
     });
   }
   return packages.sort((a, b) => a.dir.localeCompare(b.dir));
 }
 
-function run(
-  command: readonly string[],
-  cwd: string,
-): { ok: boolean; output: string } {
+function run(command: readonly string[], cwd: string): { ok: boolean; output: string } {
   const result = Bun.spawnSync([...command], { cwd, stderr: "pipe" });
   return {
     ok: result.exitCode === 0,
@@ -74,12 +55,7 @@ function run(
   };
 }
 
-function runScript(
-  pkg: WorkspacePackage,
-  script: string,
-  root: string,
-  report: CheckReport,
-): void {
+function runScript(pkg: WorkspacePackage, script: string, root: string, report: CheckReport): void {
   if (pkg.packageJson.scripts?.[script] === undefined) {
     report.notes.push(`${pkg.dir}: no ${script} script.`);
     return;
@@ -106,9 +82,7 @@ function linkDependency(
     path.join(root, "node_modules", dependency),
     workspaceDirs.get(dependency) ?? "",
   ];
-  const source = candidates.find(
-    (candidate) => candidate.length > 0 && existsSync(candidate),
-  );
+  const source = candidates.find((candidate) => candidate.length > 0 && existsSync(candidate));
   if (source === undefined) {
     return (
       `${pkg.dir}: declared dependency "${dependency}" is not ` +
@@ -138,22 +112,16 @@ function checkPackedConsumption(
   }
   const stage = mkdtempSync(path.join(tmpdir(), "check-packages-"));
   try {
-    const packResult = run(
-      ["bun", "pm", "pack", "--destination", stage],
-      path.join(root, pkg.dir),
-    );
+    const packResult = run(["bun", "pm", "pack", "--destination", stage], path.join(root, pkg.dir));
     if (!packResult.ok) {
-      report.violations.push(
-        `${pkg.dir}: bun pm pack failed.\n${packResult.output}`,
-      );
+      report.violations.push(`${pkg.dir}: bun pm pack failed.\n${packResult.output}`);
       return;
     }
     const tarball = path.join(stage, tarballNameFor(name, version));
     const extractResult = run(["tar", "-xzf", tarball, "-C", stage], stage);
     if (!extractResult.ok) {
       report.violations.push(
-        `${pkg.dir}: packed tarball could not be extracted.\n` +
-          extractResult.output,
+        `${pkg.dir}: packed tarball could not be extracted.\n` + extractResult.output,
       );
       return;
     }
@@ -186,10 +154,7 @@ function checkPackedConsumption(
     }
     if (broken) return;
 
-    const importResult = run(
-      ["bun", "-e", `await import(${JSON.stringify(name)});`],
-      stage,
-    );
+    const importResult = run(["bun", "-e", `await import(${JSON.stringify(name)});`], stage);
     if (!importResult.ok) {
       report.violations.push(
         `${pkg.dir}: the packed artifact does not import by name from ` +
@@ -260,9 +225,7 @@ async function main(): Promise<void> {
     runScript(pkg, "build", root, report);
     runScript(pkg, "test", root, report);
     if (pkg.packageJson.exports === undefined) {
-      report.notes.push(
-        `${pkg.dir}: no exports field; skipping packed-consumption check.`,
-      );
+      report.notes.push(`${pkg.dir}: no exports field; skipping packed-consumption check.`);
       continue;
     }
     checkPackedConsumption(pkg, root, workspaceDirs, report);
@@ -274,10 +237,8 @@ async function main(): Promise<void> {
   const ledgerPaths = existsSync(ledgerFile)
     ? vendoredLedgerPaths(readFileSync(ledgerFile, "utf8"))
     : [];
-  const ledgerReport = auditVendoredLedger(
-    listVendoredPaths(root),
-    ledgerPaths,
-    (ledgerPath) => existsSync(path.join(root, ledgerPath)),
+  const ledgerReport = auditVendoredLedger(listVendoredPaths(root), ledgerPaths, (ledgerPath) =>
+    existsSync(path.join(root, ledgerPath)),
   );
   report.violations.push(...ledgerReport.violations);
   reportAndExit("check:packages", report);
diff --git a/scripts/checks/publishable-workflows.ts b/scripts/checks/publishable-workflows.ts
index 3223142a73..1321c9be6d 100644
--- a/scripts/checks/publishable-workflows.ts
+++ b/scripts/checks/publishable-workflows.ts
@@ -15,12 +15,7 @@ import { readFileSync } from "node:fs";
 import path from "node:path";
 import { Glob } from "bun";
 import { type } from "arktype";
-import {
-  emptyReport,
-  reportAndExit,
-  rootFromArgs,
-  type CheckReport,
-} from "./lib/repo";
+import { emptyReport, reportAndExit, rootFromArgs, type CheckReport } from "./lib/repo";
 
 const PackageJson = type({
   name: "string",
@@ -33,10 +28,7 @@ const PackageJson = type({
 });
 type PackageJson = typeof PackageJson.infer;
 
-const PUBLISHABLE_GLOBS = [
-  "workflows/*/package.json",
-  "packages/*/package.json",
-];
+const PUBLISHABLE_GLOBS = ["workflows/*/package.json", "packages/*/package.json"];
 
 function isInScope(dir: string): boolean {
   if (dir.startsWith("workflows/")) return true;
@@ -56,14 +48,10 @@ async function listWorkspaces(root: string): Promise<Workspace[]> {
     for await (const manifestPath of glob.scan(root)) {
       const dir = path.dirname(manifestPath);
       if (!isInScope(dir)) continue;
-      const raw = JSON.parse(
-        readFileSync(path.join(root, manifestPath), "utf8"),
-      );
+      const raw = JSON.parse(readFileSync(path.join(root, manifestPath), "utf8"));
       const parsed = PackageJson(raw);
       if (parsed instanceof type.errors) {
-        throw new Error(
-          `${manifestPath}: invalid package.json — ${parsed.summary}`,
-        );
+        throw new Error(`${manifestPath}: invalid package.json — ${parsed.summary}`);
       }
       workspaces.push({ dir, packageJson: parsed });
     }
@@ -71,14 +59,10 @@ async function listWorkspaces(root: string): Promise<Workspace[]> {
   return workspaces.sort((a, b) => a.dir.localeCompare(b.dir));
 }
 
-export function auditPublishableWorkflows(
-  workspaces: readonly Workspace[],
-): CheckReport {
+export function auditPublishableWorkflows(workspaces: readonly Workspace[]): CheckReport {
   const report = emptyReport();
   const privateNames = new Set(
-    workspaces
-      .filter((w) => w.packageJson.private === true)
-      .map((w) => w.packageJson.name),
+    workspaces.filter((w) => w.packageJson.private === true).map((w) => w.packageJson.name),
   );
 
   for (const { dir, packageJson } of workspaces) {
diff --git a/scripts/checks/react-ui-drift.ts b/scripts/checks/react-ui-drift.ts
index 667c89172e..0bb5ef75a4 100644
--- a/scripts/checks/react-ui-drift.ts
+++ b/scripts/checks/react-ui-drift.ts
@@ -33,12 +33,7 @@
 // total are the accepted baseline, not a clean bill of health.
 import { Glob } from "bun";
 import path from "node:path";
-import {
-  emptyReport,
-  reportAndExit,
-  rootFromArgs,
-  type CheckReport,
-} from "./lib/repo";
+import { emptyReport, reportAndExit, rootFromArgs, type CheckReport } from "./lib/repo";
 import {
   REACT_UI_DRIFT_ALLOWLIST,
   REACT_UI_DRIFT_SNAPSHOT,
@@ -47,20 +42,14 @@ import {
 
 const SCAN_DIRS = ["apps", "packages", "workflows"];
 
-const EXCLUDED_SEGMENTS = [
-  "node_modules",
-  "dist",
-  ".worktrees",
-  "scripts/checks/test",
-];
+const EXCLUDED_SEGMENTS = ["node_modules", "dist", ".worktrees", "scripts/checks/test"];
 
 export interface ScannedFile {
   relPath: string;
   contents: string;
 }
 
-export type DriftClass =
-  "raw-form-control" | "raw-table" | "raw-modal-attr" | "raw-button";
+export type DriftClass = "raw-form-control" | "raw-table" | "raw-modal-attr" | "raw-button";
 
 export interface DriftViolation {
   relPath: string;
@@ -69,8 +58,7 @@ export interface DriftViolation {
   snippet: string;
 }
 
-const RAW_FORM_CONTROL_PATTERN =
-  /<select\b|<textarea\b|type=["']radio["']|type=["']checkbox["']/g;
+const RAW_FORM_CONTROL_PATTERN = /<select\b|<textarea\b|type=["']radio["']|type=["']checkbox["']/g;
 
 const RAW_TABLE_PATTERN = /<table\b/g;
 
@@ -89,11 +77,7 @@ function lineNumberAt(contents: string, index: number): number {
   return contents.slice(0, index).split("\n").length;
 }
 
-function snippetAt(
-  contents: string,
-  index: number,
-  matchLength: number,
-): string {
+function snippetAt(contents: string, index: number, matchLength: number): string {
   const lines = contents.split("\n");
   const line = lineNumberAt(contents, index);
   return (lines[line - 1] ?? contents.slice(index, index + matchLength)).trim();
@@ -135,10 +119,7 @@ function findMatches(
   return violations;
 }
 
-function findRawButtonViolations(
-  contents: string,
-  relPath: string,
-): DriftViolation[] {
+function findRawButtonViolations(contents: string, relPath: string): DriftViolation[] {
   if (importsButtonLike(contents)) return [];
   const violations: DriftViolation[] = [];
   for (const match of contents.matchAll(BUTTON_OPEN_TAG_PATTERN)) {
@@ -160,25 +141,13 @@ function findRawButtonViolations(
  * count (they're known, ticketed drift) but still returned so callers can
  * see the full picture.
  */
-export function findDriftViolations(
-  files: readonly ScannedFile[],
-): readonly DriftViolation[] {
+export function findDriftViolations(files: readonly ScannedFile[]): readonly DriftViolation[] {
   const violations: DriftViolation[] = [];
   for (const { relPath, contents } of files) {
     violations.push(
-      ...findMatches(
-        RAW_FORM_CONTROL_PATTERN,
-        contents,
-        relPath,
-        "raw-form-control",
-      ),
+      ...findMatches(RAW_FORM_CONTROL_PATTERN, contents, relPath, "raw-form-control"),
       ...findMatches(RAW_TABLE_PATTERN, contents, relPath, "raw-table"),
-      ...findMatches(
-        RAW_MODAL_ATTR_PATTERN,
-        contents,
-        relPath,
-        "raw-modal-attr",
-      ),
+      ...findMatches(RAW_MODAL_ATTR_PATTERN, contents, relPath, "raw-modal-attr"),
       ...findRawButtonViolations(contents, relPath),
     );
   }
@@ -219,9 +188,7 @@ export function auditReactUiDrift(
     );
   }
 
-  const ratcheted = violations.filter((v) =>
-    countsTowardRatchet(v, allowlistPaths),
-  );
+  const ratcheted = violations.filter((v) => countsTowardRatchet(v, allowlistPaths));
   const ratchetCount = ratcheted.length;
 
   if (ratchetCount > snapshot) {
@@ -239,25 +206,18 @@ export function auditReactUiDrift(
     );
   }
 
-  report.notes.push(
-    `${ratchetCount} drift site(s) counted against a snapshot of ${snapshot}`,
-  );
+  report.notes.push(`${ratchetCount} drift site(s) counted against a snapshot of ${snapshot}`);
   return { report, ratchetCount };
 }
 
 function isExcludedPath(relPath: string): boolean {
   return EXCLUDED_SEGMENTS.some(
     (segment) =>
-      relPath === segment ||
-      relPath.startsWith(`${segment}/`) ||
-      relPath.includes(`/${segment}/`),
+      relPath === segment || relPath.startsWith(`${segment}/`) || relPath.includes(`/${segment}/`),
   );
 }
 
-async function scanFiles(
-  root: string,
-  dirs: readonly string[],
-): Promise<ScannedFile[]> {
+async function scanFiles(root: string, dirs: readonly string[]): Promise<ScannedFile[]> {
   const files: ScannedFile[] = [];
   for (const dir of dirs) {
     const glob = new Glob("**/*.tsx");
@@ -278,9 +238,7 @@ async function main(): Promise<void> {
   const root = rootFromArgs(Bun.argv.slice(2));
   const files = await scanFiles(root, SCAN_DIRS);
   const { report } = auditReactUiDrift(files);
-  report.notes.push(
-    `scanned ${files.length} .tsx file(s) under ${SCAN_DIRS.join(", ")}`,
-  );
+  report.notes.push(`scanned ${files.length} .tsx file(s) under ${SCAN_DIRS.join(", ")}`);
   reportAndExit("check:react-ui-drift", report);
 }
 
diff --git a/scripts/checks/react-ui-pin.ts b/scripts/checks/react-ui-pin.ts
index 485075f7d9..7735094a9f 100644
--- a/scripts/checks/react-ui-pin.ts
+++ b/scripts/checks/react-ui-pin.ts
@@ -15,12 +15,7 @@
 // partial bump fail loudly instead of silently forking the library.
 import { Glob } from "bun";
 import path from "node:path";
-import {
-  emptyReport,
-  reportAndExit,
-  rootFromArgs,
-  type CheckReport,
-} from "./lib/repo";
+import { emptyReport, reportAndExit, rootFromArgs, type CheckReport } from "./lib/repo";
 
 const REACT_UI = "@corbits/react-ui";
 
@@ -36,9 +31,7 @@ export interface PinnedManifest {
  * separately under bun's lockfile, so "same commit, different specifier" is
  * the very drift this exists to catch, not an exception to it.
  */
-export function auditReactUiPins(
-  manifests: readonly PinnedManifest[],
-): CheckReport {
+export function auditReactUiPins(manifests: readonly PinnedManifest[]): CheckReport {
   const report = emptyReport();
   if (manifests.length === 0) {
     report.notes.push(`no ${REACT_UI} consumer found`);
@@ -54,9 +47,7 @@ export function auditReactUiPins(
 
   if (byPin.size === 1) {
     const [pin] = [...byPin.keys()];
-    report.notes.push(
-      `${manifests.length} consumer(s) share one pin: ${pin ?? ""}`,
-    );
+    report.notes.push(`${manifests.length} consumer(s) share one pin: ${pin ?? ""}`);
     return report;
   }
 
@@ -80,8 +71,7 @@ async function scanPins(root: string): Promise<PinnedManifest[]> {
       dependencies?: Record<string, string>;
       devDependencies?: Record<string, string>;
     };
-    const pin =
-      parsed.dependencies?.[REACT_UI] ?? parsed.devDependencies?.[REACT_UI];
+    const pin = parsed.dependencies?.[REACT_UI] ?? parsed.devDependencies?.[REACT_UI];
     if (pin !== undefined) manifests.push({ relPath, pin });
   }
   return manifests;
diff --git a/scripts/checks/report-error-baseline.txt b/scripts/checks/report-error-baseline.txt
index 4cb039fd52..5d3fc499aa 100644
--- a/scripts/checks/report-error-baseline.txt
+++ b/scripts/checks/report-error-baseline.txt
@@ -42,9 +42,9 @@ apps/sidecar/src/tool-materialization.ts	1	logger.warn`fsync failed for ${filePa
 apps/sidecar/src/tool-materialization.ts	1	logger.warn`parent-dir fsync failed for ${instanceDir} after deploy-id persist; deploy-id durability is degraded but the committed deploy is staged on disk — ${err instanceof Error ? err.message : String(err)}`;
 apps/sidecar/src/workflow-deployment-record.ts	1	const reason = cause instanceof Error ? cause.message : String(cause);
 apps/sidecar/src/workflow-deployment-record.ts	1	return undefined;
-apps/sidecar/src/workflow-host-wiring/index.ts	1	const message =
-apps/sidecar/src/workflow-host-wiring/index.ts	1	const reason =
-apps/sidecar/src/workflow-host-wiring/index.ts	2	const reason =
+apps/sidecar/src/workflow-host-wiring/index.ts	1	const message = cleanupError instanceof Error ? cleanupError.message : String(cleanupError);
+apps/sidecar/src/workflow-host-wiring/index.ts	1	const reason = cause instanceof Error ? cause.message : String(cause);
+apps/sidecar/src/workflow-host-wiring/index.ts	2	const reason = cause instanceof Error ? cause.message : String(cause);
 apps/sidecar/src/workflow-host-wiring/supervisor.ts	1	const message = cause instanceof Error ? cause.message : String(cause);
 apps/sidecar/src/workflow-probe-handler.ts	1	logger.debug`probe child ${String(handle.pid)} SIGKILL raised (already exited?): ${errorMessage(err)}`;
 apps/sidecar/src/workflow-probe-handler.ts	1	logger.debug`probe child ${String(handle.pid)} SIGTERM raised (already exited?): ${errorMessage(err)}`;
@@ -69,9 +69,9 @@ apps/web/src/pages/agent-detail-page.tsx	1	// A handle collision is the one fail
 apps/web/src/pages/agent-detail-page.tsx	1	setLifecycle({
 apps/web/src/pages/agent-detail-page.tsx	1	setSave({ kind: "idle" });
 apps/web/src/pages/create-agent-panel.tsx	1	setDraftFailed(true);
-apps/web/src/pages/create-agent-panel.tsx	1	setSubmitError(
+apps/web/src/pages/create-agent-panel.tsx	1	setSubmitError(submitErrorFromCause(cause, "Could not create the agent."));
 apps/web/src/pages/create-skill-dialog.tsx	1	setServerError(cause instanceof Error ? cause.message : String(cause));
-apps/web/src/pages/library-page.tsx	1	setUploadError(
+apps/web/src/pages/library-page.tsx	1	setUploadError(describeApiError(err, "uploading those files"));
 apps/web/src/pages/mission-control-page.tsx	1	toast(
 apps/web/src/pages/skills-page.tsx	1	setState({ status: "error", message: messageOf(cause) });
 apps/web/src/profile-relations.ts	1	return {
@@ -147,8 +147,8 @@ packages/manus-tools/src/tool.ts	3	return errorResult(call.id, err);
 packages/manus-tools/src/tool.ts	4	return errorResult(call.id, err);
 packages/manus-tools/src/tool.ts	5	return errorResult(call.id, err);
 packages/manus-tools/src/tool.ts	6	return errorResult(call.id, err);
-packages/mcp-tools/src/tool.ts	1	return errorResult(
 packages/mcp-tools/src/tool.ts	1	return errorResult(call.id, err);
+packages/mcp-tools/src/tool.ts	1	return errorResult(call.id, new Error(`"${pattern}" is not a valid regex: ${String(err)}`));
 packages/mcp-tools/src/tool.ts	1	return {
 packages/mcp-tools/src/tool.ts	2	return errorResult(call.id, err);
 packages/mcp-tools/src/tool.ts	3	return errorResult(call.id, err);
diff --git a/scripts/checks/report-error.ts b/scripts/checks/report-error.ts
index 98916c0dc3..cb293da045 100644
--- a/scripts/checks/report-error.ts
+++ b/scripts/checks/report-error.ts
@@ -67,12 +67,7 @@ import { spawnSync } from "node:child_process";
 import { Glob } from "bun";
 import path from "node:path";
 import ts from "typescript";
-import {
-  emptyReport,
-  reportAndExit,
-  rootFromArgs,
-  type CheckReport,
-} from "./lib/repo";
+import { emptyReport, reportAndExit, rootFromArgs, type CheckReport } from "./lib/repo";
 import { resolveBaseRef } from "./tool-package-freshness";
 
 const SCAN_DIRS = ["apps", "packages", "workflows"];
@@ -121,10 +116,7 @@ function isExcludedPath(relPath: string): boolean {
   return false;
 }
 
-export async function scanFiles(
-  root: string,
-  dirs: readonly string[],
-): Promise<string[]> {
+export async function scanFiles(root: string, dirs: readonly string[]): Promise<string[]> {
   const files: string[] = [];
   for (const dir of dirs) {
     const glob = new Glob(`${dir}/**/*.{ts,tsx}`);
@@ -152,9 +144,7 @@ export interface ReportErrorBindings {
  * that happens to share the name doesn't pass, and an aliased import
  * still does.
  */
-export function findReportErrorBindings(
-  sourceFile: ts.SourceFile,
-): ReportErrorBindings {
+export function findReportErrorBindings(sourceFile: ts.SourceFile): ReportErrorBindings {
   const localNames = new Set<string>();
   const namespaceNames = new Set<string>();
   for (const statement of sourceFile.statements) {
@@ -175,10 +165,7 @@ export function findReportErrorBindings(
   return { localNames, namespaceNames };
 }
 
-function callsReportError(
-  node: ts.Node,
-  bindings: ReportErrorBindings,
-): boolean {
+function callsReportError(node: ts.Node, bindings: ReportErrorBindings): boolean {
   let found = false;
   const visit = (n: ts.Node): void => {
     if (found) return;
@@ -219,11 +206,7 @@ function containsThrow(node: ts.Node): boolean {
       found = true;
       return;
     }
-    if (
-      ts.isFunctionLike(n) ||
-      ts.isClassDeclaration(n) ||
-      ts.isClassExpression(n)
-    ) {
+    if (ts.isFunctionLike(n) || ts.isClassDeclaration(n) || ts.isClassExpression(n)) {
       return;
     }
     ts.forEachChild(n, visit);
@@ -238,10 +221,7 @@ function containsThrow(node: ts.Node): boolean {
  * is the line above it, which sits inside the try block's trailing
  * trivia rather than the catch clause's own text.
  */
-function findIgnoreReason(
-  sourceFile: ts.SourceFile,
-  clause: ts.CatchClause,
-): string | undefined {
+function findIgnoreReason(sourceFile: ts.SourceFile, clause: ts.CatchClause): string | undefined {
   const scope = ts.isTryStatement(clause.parent) ? clause.parent : clause;
   const fullText = scope.getFullText(sourceFile);
   const match = IGNORE_MARKER_PATTERN.exec(fullText);
@@ -257,9 +237,7 @@ function firstNonEmptyLine(text: string): string {
 }
 
 function lineOf(sourceFile: ts.SourceFile, node: ts.Node): number {
-  return (
-    sourceFile.getLineAndCharacterOfPosition(node.getStart(sourceFile)).line + 1
-  );
+  return sourceFile.getLineAndCharacterOfPosition(node.getStart(sourceFile)).line + 1;
 }
 
 export interface Finding {
@@ -304,13 +282,8 @@ export function scanForFindings(files: readonly ScannedFile[]): ScanResult {
 
         if (ignoreReason !== undefined) {
           optedOutCount += 1;
-          optedOutNotes.push(
-            `${relPath}:${line}: catch opted out (${ignoreReason})`,
-          );
-        } else if (
-          callsReportError(node.block, bindings) ||
-          containsThrow(node.block)
-        ) {
+          optedOutNotes.push(`${relPath}:${line}: catch opted out (${ignoreReason})`);
+        } else if (callsReportError(node.block, bindings) || containsThrow(node.block)) {
           compliantCount += 1;
         } else {
           findings.push({
@@ -344,11 +317,7 @@ function violationMessage(finding: Finding): string {
   );
 }
 
-export function baselineKey(
-  relPath: string,
-  occurrence: number,
-  evidence: string,
-): string {
+export function baselineKey(relPath: string, occurrence: number, evidence: string): string {
   return `${relPath}\t${occurrence}\t${evidence}`;
 }
 
@@ -358,19 +327,14 @@ export function baselineKey(
  * identity a baseline entry keys on, since raw line numbers drift as a
  * file is edited elsewhere.
  */
-export function keyFindings(
-  findings: readonly Finding[],
-): Map<string, Finding> {
+export function keyFindings(findings: readonly Finding[]): Map<string, Finding> {
   const seen = new Map<string, number>();
   const keyed = new Map<string, Finding>();
   for (const finding of findings) {
     const seenKey = `${finding.relPath} ${finding.evidence}`;
     const occurrence = (seen.get(seenKey) ?? 0) + 1;
     seen.set(seenKey, occurrence);
-    keyed.set(
-      baselineKey(finding.relPath, occurrence, finding.evidence),
-      finding,
-    );
+    keyed.set(baselineKey(finding.relPath, occurrence, finding.evidence), finding);
   }
   return keyed;
 }
@@ -486,9 +450,7 @@ const DIFF_HUNK_PATTERN = /^@@ -\d+(?:,\d+)? \+(\d+)(?:,(\d+))? @@/;
  * tree. A hunk that only deletes lines (`+c,0`) touches nothing in the
  * new file and is skipped.
  */
-export function parseChangedRanges(
-  diffText: string,
-): Map<string, ChangedRange[]> {
+export function parseChangedRanges(diffText: string): Map<string, ChangedRange[]> {
   const ranges = new Map<string, ChangedRange[]>();
   let currentFile: string | undefined;
   for (const line of diffText.split("\n")) {
@@ -523,13 +485,8 @@ async function writeBaseline(root: string): Promise<void> {
   const files = await readFiles(root);
   const scan = scanForFindings(files);
   const keyed = keyFindings(scan.findings);
-  await Bun.write(
-    path.join(root, BASELINE_PATH),
-    serializeBaseline(keyed.keys()),
-  );
-  console.log(
-    `check:report-error: wrote ${keyed.size} entrie(s) to ${BASELINE_PATH}`,
-  );
+  await Bun.write(path.join(root, BASELINE_PATH), serializeBaseline(keyed.keys()));
+  console.log(`check:report-error: wrote ${keyed.size} entrie(s) to ${BASELINE_PATH}`);
 }
 
 async function main(): Promise<void> {
@@ -552,9 +509,7 @@ async function main(): Promise<void> {
   const changedLines =
     baseRef === undefined
       ? undefined
-      : parseChangedRanges(
-          git(root, ["diff", "--unified=0", `${baseRef}...HEAD`]) ?? "",
-        );
+      : parseChangedRanges(git(root, ["diff", "--unified=0", `${baseRef}...HEAD`]) ?? "");
 
   const report = auditReportError(files, {
     baseline,
@@ -567,9 +522,7 @@ async function main(): Promise<void> {
         "authoritative run. New-vs-baseline enforcement still applies.",
     );
   }
-  report.notes.push(
-    `scanned ${files.length} file(s) under ${SCAN_DIRS.join(", ")}`,
-  );
+  report.notes.push(`scanned ${files.length} file(s) under ${SCAN_DIRS.join(", ")}`);
   reportAndExit("check:report-error", report);
 }
 
diff --git a/scripts/checks/routine-target-inference.ts b/scripts/checks/routine-target-inference.ts
index 622fb3499b..f376adcd6f 100644
--- a/scripts/checks/routine-target-inference.ts
+++ b/scripts/checks/routine-target-inference.ts
@@ -13,26 +13,17 @@
 //   the retired path in order to reject it.
 import { Glob } from "bun";
 import path from "node:path";
-import {
-  emptyReport,
-  reportAndExit,
-  rootFromArgs,
-  type CheckReport,
-} from "./lib/repo";
+import { emptyReport, reportAndExit, rootFromArgs, type CheckReport } from "./lib/repo";
 
 const TARGET_INFERENCE_SCAN_DIRS = ["apps/web", "packages/chat-ui"];
 const WORKFLOW_JSON_SCAN_DIRS = ["apps", "packages", "workflows"];
 
-const AGENTS_ZERO_DEFINITION_ID_PATTERN =
-  /\bagents\[0\](?:\?\.|\.)\s*definitionId\b/g;
+const AGENTS_ZERO_DEFINITION_ID_PATTERN = /\bagents\[0\](?:\?\.|\.)\s*definitionId\b/g;
 const WORKFLOW_JSON_LITERAL_PATTERN = /(["'`])workflow\.json\1/g;
 
 const WORKFLOW_JSON_ALLOWED_FILE = "packages/workflows/src/source.ts";
 
-export async function scanFiles(
-  root: string,
-  dirs: readonly string[],
-): Promise<string[]> {
+export async function scanFiles(root: string, dirs: readonly string[]): Promise<string[]> {
   const files: string[] = [];
   for (const dir of dirs) {
     const glob = new Glob(`${dir}/**/*.{ts,tsx}`);
@@ -73,11 +64,7 @@ function stripCommentLines(contents: string): string {
     .split("\n")
     .map((line) => {
       const trimmed = line.trimStart();
-      if (
-        trimmed.startsWith("//") ||
-        trimmed.startsWith("*") ||
-        trimmed.startsWith("/*")
-      ) {
+      if (trimmed.startsWith("//") || trimmed.startsWith("*") || trimmed.startsWith("/*")) {
         return "";
       }
       return line;
@@ -124,18 +111,12 @@ async function main(): Promise<void> {
     root,
     await scanFiles(root, TARGET_INFERENCE_SCAN_DIRS),
   );
-  const workflowJsonFiles = await readAll(
-    root,
-    await scanFiles(root, WORKFLOW_JSON_SCAN_DIRS),
-  );
+  const workflowJsonFiles = await readAll(root, await scanFiles(root, WORKFLOW_JSON_SCAN_DIRS));
 
   const report = emptyReport();
   const targetReport = auditRoutineTargetInference(targetInferenceFiles);
   const workflowJsonReport = auditWorkflowJsonLiteral(workflowJsonFiles);
-  report.violations.push(
-    ...targetReport.violations,
-    ...workflowJsonReport.violations,
-  );
+  report.violations.push(...targetReport.violations, ...workflowJsonReport.violations);
   report.notes.push(
     `scanned ${targetInferenceFiles.length} file(s) under ${TARGET_INFERENCE_SCAN_DIRS.join(", ")} for agents[0] target inference`,
     `scanned ${workflowJsonFiles.length} file(s) under ${WORKFLOW_JSON_SCAN_DIRS.join(", ")} for the retired workflow.json path`,
diff --git a/scripts/checks/run.ts b/scripts/checks/run.ts
index ad1e8a8b96..3f317ad2b7 100644
--- a/scripts/checks/run.ts
+++ b/scripts/checks/run.ts
@@ -58,13 +58,8 @@ export function discoverCheckFiles(
 ): string[] {
   return readdir(checksDir)
     .filter((entry) => entry.endsWith(".ts") && !entry.endsWith(".test.ts"))
-    .filter(
-      (entry) =>
-        resolveRealPath(path.join(checksDir, entry)) !== runnerRealPath,
-    )
-    .filter((entry) =>
-      MAIN_ENTRY_POINT.test(readFile(path.join(checksDir, entry))),
-    )
+    .filter((entry) => resolveRealPath(path.join(checksDir, entry)) !== runnerRealPath)
+    .filter((entry) => MAIN_ENTRY_POINT.test(readFile(path.join(checksDir, entry))))
     .sort();
 }
 
diff --git a/scripts/checks/tailwind-source.ts b/scripts/checks/tailwind-source.ts
index ac2fc30e50..59433c49e5 100644
--- a/scripts/checks/tailwind-source.ts
+++ b/scripts/checks/tailwind-source.ts
@@ -11,19 +11,13 @@
 // exist, and the failure only showed up as broken layout in production.
 import { readFileSync } from "node:fs";
 import path from "node:path";
-import {
-  emptyReport,
-  reportAndExit,
-  rootFromArgs,
-  type CheckReport,
-} from "./lib/repo";
+import { emptyReport, reportAndExit, rootFromArgs, type CheckReport } from "./lib/repo";
 
 const APP_CSS = "apps/web/src/app.css";
 const TAILWIND_CSS = "apps/web/src/tailwind.css";
 
 const IMPORT_PATTERN = /@import\s+"@corbits\/([a-z0-9-]+)\/styles\.css";/g;
-const SOURCE_PATTERN =
-  /@source\s+"\.\.\/\.\.\/\.\.\/packages\/([a-z0-9-]+)\/src";/g;
+const SOURCE_PATTERN = /@source\s+"\.\.\/\.\.\/\.\.\/packages\/([a-z0-9-]+)\/src";/g;
 
 /** Package names behind every `@corbits/<name>/styles.css` import. */
 export function importedStylesheetPackages(css: string): string[] {
diff --git a/scripts/checks/test/browser-safe-subpaths.test.ts b/scripts/checks/test/browser-safe-subpaths.test.ts
index d6dd0231af..a01fb3ed00 100644
--- a/scripts/checks/test/browser-safe-subpaths.test.ts
+++ b/scripts/checks/test/browser-safe-subpaths.test.ts
@@ -40,9 +40,7 @@ test("a clean subpath graph passes with a note, no violations", () => {
   );
 
   expect(report.violations).toEqual([]);
-  expect(
-    report.notes.some((note) => note.includes("@corbits/pkg-a/client")),
-  ).toBe(true);
+  expect(report.notes.some((note) => note.includes("@corbits/pkg-a/client"))).toBe(true);
 });
 
 test("a direct server-only import is a violation naming the entry and the import", () => {
@@ -76,10 +74,7 @@ test("a transitive server-only import through a relative file is a violation", (
   ];
   const files = new Map<string, string>([
     ["packages/pkg-a/src/client.ts", `export { thing } from "./inner";`],
-    [
-      "packages/pkg-a/src/inner.ts",
-      `import postgres from "postgres";\nexport const thing = 1;`,
-    ],
+    ["packages/pkg-a/src/inner.ts", `import postgres from "postgres";\nexport const thing = 1;`],
   ]);
 
   const report = auditBrowserSafeSubpaths(
@@ -106,10 +101,7 @@ test("a transitive server-only import through a workspace package subpath is a v
     },
   ];
   const files = new Map<string, string>([
-    [
-      "packages/pkg-a/src/client.ts",
-      `export { widget } from "@corbits/pkg-b/widget";`,
-    ],
+    ["packages/pkg-a/src/client.ts", `export { widget } from "@corbits/pkg-b/widget";`],
     [
       "packages/pkg-b/src/widget.ts",
       `import { drizzle } from "drizzle-orm";\nexport const widget = 1;`,
@@ -134,10 +126,7 @@ test("@intx/* is denylisted by prefix regardless of subpath", () => {
     },
   ];
   const files = new Map<string, string>([
-    [
-      "packages/pkg-a/src/client.ts",
-      `import { createRoutes } from "@intx/hub-api";`,
-    ],
+    ["packages/pkg-a/src/client.ts", `import { createRoutes } from "@intx/hub-api";`],
   ]);
 
   const report = auditBrowserSafeSubpaths(
@@ -158,10 +147,7 @@ test("a type-only import of a server-only module is not a violation", () => {
     },
   ];
   const files = new Map<string, string>([
-    [
-      "packages/pkg-a/src/client.ts",
-      `import type { Row } from "postgres";\nexport type { Row };`,
-    ],
+    ["packages/pkg-a/src/client.ts", `import type { Row } from "postgres";\nexport type { Row };`],
   ]);
 
   const report = auditBrowserSafeSubpaths(
@@ -204,10 +190,7 @@ test("an unresolvable relative import is reported, not silently skipped", () =>
     },
   ];
   const files = new Map<string, string>([
-    [
-      "packages/pkg-a/src/client.ts",
-      `export { missing } from "./does-not-exist";`,
-    ],
+    ["packages/pkg-a/src/client.ts", `export { missing } from "./does-not-exist";`],
   ]);
 
   const report = auditBrowserSafeSubpaths(
@@ -246,9 +229,7 @@ test("parseImportSpecifiers treats a mixed import as a value import", () => {
 });
 
 test("parseImportSpecifiers handles multi-line export-from lists", () => {
-  const specs = parseImportSpecifiers(
-    ["export {", "  a,", "  b,", '} from "./group";'].join("\n"),
-  );
+  const specs = parseImportSpecifiers(["export {", "  a,", "  b,", '} from "./group";'].join("\n"));
   expect(specs).toEqual([{ specifier: "./group", typeOnly: false }]);
 });
 
@@ -261,9 +242,7 @@ test("a comment mentioning import does not swallow a later type-only import", ()
       'import type { ToolPackagePin } from "@intx/types/tool-packages";',
     ].join("\n"),
   );
-  expect(parsed).toEqual([
-    { specifier: "@intx/types/tool-packages", typeOnly: true },
-  ]);
+  expect(parsed).toEqual([{ specifier: "@intx/types/tool-packages", typeOnly: true }]);
 });
 
 test("a node: import is denylisted regardless of subpath", () => {
@@ -294,9 +273,7 @@ test("a declared ./client export with no ENTRIES ruling is a violation naming th
       exports: { "./client": "packages/pkg-a/src/client.ts" },
     },
   ];
-  const files = new Map<string, string>([
-    ["packages/pkg-a/src/client.ts", `export const x = 1;`],
-  ]);
+  const files = new Map<string, string>([["packages/pkg-a/src/client.ts", `export const x = 1;`]]);
 
   const report = auditBrowserSafeSubpaths([], packages, files);
 
@@ -313,9 +290,7 @@ test("a declared ./client export with a matching ENTRIES ruling is not a violati
       exports: { "./client": "packages/pkg-a/src/client.ts" },
     },
   ];
-  const files = new Map<string, string>([
-    ["packages/pkg-a/src/client.ts", `export const x = 1;`],
-  ]);
+  const files = new Map<string, string>([["packages/pkg-a/src/client.ts", `export const x = 1;`]]);
 
   const report = auditBrowserSafeSubpaths(
     [{ package: "@corbits/pkg-a", subpath: "./client" }],
@@ -328,9 +303,7 @@ test("a declared ./client export with a matching ENTRIES ruling is not a violati
 
 test("a block comment cannot hide a real value import", () => {
   const parsed = parseImportSpecifiers(
-    ['/* import x from "commented-out"; */', 'import y from "real";'].join(
-      "\n",
-    ),
+    ['/* import x from "commented-out"; */', 'import y from "real";'].join("\n"),
   );
   expect(parsed).toEqual([{ specifier: "real", typeOnly: false }]);
 });
diff --git a/scripts/checks/test/catalog-pins.test.ts b/scripts/checks/test/catalog-pins.test.ts
index b90c01e79c..a58b59d873 100644
--- a/scripts/checks/test/catalog-pins.test.ts
+++ b/scripts/checks/test/catalog-pins.test.ts
@@ -1,9 +1,5 @@
 import { expect, test } from "bun:test";
-import {
-  WORKSPACE_GLOBS,
-  auditCatalogPins,
-  resolveCatalogs,
-} from "../catalog-pins";
+import { WORKSPACE_GLOBS, auditCatalogPins, resolveCatalogs } from "../catalog-pins";
 
 test("a literal range for a catalogued dependency is a violation", () => {
   const report = auditCatalogPins({ hono: "^4.11.9" }, [
@@ -109,7 +105,5 @@ test("resolveCatalogs defaults to empty when neither location is present", () =>
 });
 
 test("vendored manifests are excluded from workspace discovery", () => {
-  expect(WORKSPACE_GLOBS.some((glob) => glob.startsWith("vendor/"))).toBe(
-    false,
-  );
+  expect(WORKSPACE_GLOBS.some((glob) => glob.startsWith("vendor/"))).toBe(false);
 });
diff --git a/scripts/checks/test/deletion.test.ts b/scripts/checks/test/deletion.test.ts
index 1f5832e176..ea19839443 100644
--- a/scripts/checks/test/deletion.test.ts
+++ b/scripts/checks/test/deletion.test.ts
@@ -57,10 +57,7 @@ const DELETED_HUSK_PACKAGES = [
 test("deleted husk packages stay on the replacement ledger and are gone", () => {
   const repoRoot = path.resolve(import.meta.dir, "../../..");
   const ledger = parseLedger(
-    readFileSync(
-      path.join(repoRoot, "scripts/checks/replaced-paths.txt"),
-      "utf8",
-    ),
+    readFileSync(path.join(repoRoot, "scripts/checks/replaced-paths.txt"), "utf8"),
   );
   for (const husk of DELETED_HUSK_PACKAGES) {
     expect(ledger).toContain(husk);
diff --git a/scripts/checks/test/error-envelope.test.ts b/scripts/checks/test/error-envelope.test.ts
index 126ccd1728..e2358dd118 100644
--- a/scripts/checks/test/error-envelope.test.ts
+++ b/scripts/checks/test/error-envelope.test.ts
@@ -54,8 +54,7 @@ test("a comment that mentions the old envelope is not a violation", () => {
   const report = auditLocalErrorEnvelopeFactories([
     {
       relPath: "packages/onboarding/src/provision.ts",
-      contents:
-        "// the same `{ error: { code, message } }` envelope every other hub route uses",
+      contents: "// the same `{ error: { code, message } }` envelope every other hub route uses",
     },
   ]);
   expect(report.violations).toEqual([]);
@@ -111,7 +110,5 @@ test("allowlisted files that wrap makeErrorEnvelope pass", () => {
     },
   ]);
   expect(report.violations).toEqual([]);
-  expect(
-    report.notes.some((n) => n.includes("packages/onboarding/src/routes.ts")),
-  ).toBe(true);
+  expect(report.notes.some((n) => n.includes("packages/onboarding/src/routes.ts"))).toBe(true);
 });
diff --git a/scripts/checks/test/hub-git-safety.test.ts b/scripts/checks/test/hub-git-safety.test.ts
index 36ec5225c3..ded402f142 100644
--- a/scripts/checks/test/hub-git-safety.test.ts
+++ b/scripts/checks/test/hub-git-safety.test.ts
@@ -63,10 +63,7 @@ test("committing .data/hub paths is a violation", () => {
 });
 
 test("a large commit with no source-tree file is a violation", () => {
-  const files = Array.from(
-    { length: LARGE_COMMIT_FILE_THRESHOLD + 1 },
-    (_, i) => `object-${i}`,
-  );
+  const files = Array.from({ length: LARGE_COMMIT_FILE_THRESHOLD + 1 }, (_, i) => `object-${i}`);
   const report = auditHubJunkCommits([commit({ files })]);
   expect(report.violations).toHaveLength(1);
   expect(report.violations[0]).toContain("no corresponding source-tree change");
@@ -75,10 +72,7 @@ test("a large commit with no source-tree file is a violation", () => {
 test("a large commit that also changes source passes the size heuristic", () => {
   const files = [
     "apps/hub/src/index.ts",
-    ...Array.from(
-      { length: LARGE_COMMIT_FILE_THRESHOLD },
-      (_, i) => `extra-${i}`,
-    ),
+    ...Array.from({ length: LARGE_COMMIT_FILE_THRESHOLD }, (_, i) => `extra-${i}`),
   ];
   expect(auditHubJunkCommits([commit({ files })]).violations).toEqual([]);
 });
diff --git a/scripts/checks/test/killdates.test.ts b/scripts/checks/test/killdates.test.ts
index 9eb3a70391..62fc7a91ac 100644
--- a/scripts/checks/test/killdates.test.ts
+++ b/scripts/checks/test/killdates.test.ts
@@ -13,19 +13,13 @@ import {
 import { hashDirectory } from "../lib/tree-hash";
 
 test("parseKillDates reads rows and skips comments", () => {
-  const parsed = parseKillDates(
-    "# header\nvendor/thing | ada | 2026-12-31\n\n",
-  );
+  const parsed = parseKillDates("# header\nvendor/thing | ada | 2026-12-31\n\n");
   expect(parsed.problems).toEqual([]);
-  expect(parsed.entries).toEqual([
-    { path: "vendor/thing", owner: "ada", killDate: "2026-12-31" },
-  ]);
+  expect(parsed.entries).toEqual([{ path: "vendor/thing", owner: "ada", killDate: "2026-12-31" }]);
 });
 
 test("parseKillDates rejects malformed rows and bad dates", () => {
-  const parsed = parseKillDates(
-    "vendor/thing | ada\nvendor/other | ada | soon\n",
-  );
+  const parsed = parseKillDates("vendor/thing | ada\nvendor/other | ada | soon\n");
   expect(parsed.entries).toEqual([]);
   expect(parsed.problems).toHaveLength(2);
   expect(parsed.problems[0]).toContain("path | owner | YYYY-MM-DD");
@@ -124,9 +118,7 @@ test("a registered vendored directory passes coverage", () => {
 });
 
 test("parseKillDates reads an optional hash column", () => {
-  const parsed = parseKillDates(
-    "vendor/thing | ada | 2026-12-31 | " + "a".repeat(64) + "\n",
-  );
+  const parsed = parseKillDates("vendor/thing | ada | 2026-12-31 | " + "a".repeat(64) + "\n");
   expect(parsed.problems).toEqual([]);
   expect(parsed.entries[0]?.hash).toBe("a".repeat(64));
 });
@@ -153,10 +145,7 @@ test("a tsc-generated tsbuildinfo does not change a vendored tree's hash", () =>
     mkdirSync(path.join(root, "vendor", "intx", "log"), { recursive: true });
     writeFileSync(path.join(root, "vendor", "intx", "log", "index.ts"), "hi");
     const hash = hashDirectory(path.join(root, "vendor", "intx", "log"));
-    writeFileSync(
-      path.join(root, "vendor", "intx", "log", "tsconfig.tsbuildinfo"),
-      "{}",
-    );
+    writeFileSync(path.join(root, "vendor", "intx", "log", "tsconfig.tsbuildinfo"), "{}");
     expect(hashDirectory(path.join(root, "vendor", "intx", "log"))).toBe(hash);
   } finally {
     rmSync(root, { recursive: true, force: true });
@@ -176,10 +165,7 @@ test("a tsc --build dist/ output directory does not change a vendored tree's has
       path.join(root, "vendor", "intx", "log", "dist", "index.d.ts"),
       "export declare const hi: string;",
     );
-    writeFileSync(
-      path.join(root, "vendor", "intx", "log", "dist", "tsconfig.tsbuildinfo"),
-      "{}",
-    );
+    writeFileSync(path.join(root, "vendor", "intx", "log", "dist", "tsconfig.tsbuildinfo"), "{}");
     expect(hashDirectory(path.join(root, "vendor", "intx", "log"))).toBe(hash);
   } finally {
     rmSync(root, { recursive: true, force: true });
diff --git a/scripts/checks/test/licenses.test.ts b/scripts/checks/test/licenses.test.ts
index a356af1727..27c074500c 100644
--- a/scripts/checks/test/licenses.test.ts
+++ b/scripts/checks/test/licenses.test.ts
@@ -58,11 +58,7 @@ test("a library whose LICENSE file drifts from the canonical text is a violation
 });
 
 test("a library failing both checks reports both violations", () => {
-  const report = auditLibraryLicenses(
-    [pkg("packages/chat", "MIT")],
-    "canonical text",
-    () => null,
-  );
+  const report = auditLibraryLicenses([pkg("packages/chat", "MIT")], "canonical text", () => null);
   expect(report.violations).toHaveLength(2);
 });
 
diff --git a/scripts/checks/test/no-product-tenancy.test.ts b/scripts/checks/test/no-product-tenancy.test.ts
index 35170340b4..ec2d379af0 100644
--- a/scripts/checks/test/no-product-tenancy.test.ts
+++ b/scripts/checks/test/no-product-tenancy.test.ts
@@ -29,8 +29,7 @@ test("a comment or string that merely mentions a table name is not a violation",
   const report = auditProductTenancy([
     {
       relPath: "packages/onboarding/src/provision.ts",
-      contents:
-        "// Tenants, memberships, and invites are native Interchange tables.",
+      contents: "// Tenants, memberships, and invites are native Interchange tables.",
     },
   ]);
   expect(report.violations).toEqual([]);
@@ -70,9 +69,7 @@ test("allowlisted product schema files pass at their max count", () => {
     },
   ]);
   expect(report.violations).toEqual([]);
-  expect(
-    report.notes.some((n) => n.includes("packages/chat/src/schema.ts")),
-  ).toBe(true);
+  expect(report.notes.some((n) => n.includes("packages/chat/src/schema.ts"))).toBe(true);
 });
 
 test("allowlisted files fail when they grow past their max", () => {
@@ -87,9 +84,7 @@ test("allowlisted files fail when they grow past their max", () => {
     },
   ]);
   expect(report.violations).toHaveLength(1);
-  expect(report.violations[0]).toContain(
-    "packages/webhook-triggers/src/schema.ts",
-  );
+  expect(report.violations[0]).toContain("packages/webhook-triggers/src/schema.ts");
   expect(report.violations[0]).toContain("3 pgTable");
 });
 
diff --git a/scripts/checks/test/packages.test.ts b/scripts/checks/test/packages.test.ts
index 99cd2c3db5..4cff9aa6e2 100644
--- a/scripts/checks/test/packages.test.ts
+++ b/scripts/checks/test/packages.test.ts
@@ -1,15 +1,9 @@
 import { expect, test } from "bun:test";
 import { collectExportTargets, declaredDependencyNames } from "../lib/exports";
-import {
-  auditVendoredLedger,
-  tarballNameFor,
-  vendoredLedgerPaths,
-} from "../packages";
+import { auditVendoredLedger, tarballNameFor, vendoredLedgerPaths } from "../packages";
 
 test("tarballNameFor flattens a scoped name the way bun pm pack does", () => {
-  expect(tarballNameFor("@corbits/connections", "0.0.1")).toBe(
-    "corbits-connections-0.0.1.tgz",
-  );
+  expect(tarballNameFor("@corbits/connections", "0.0.1")).toBe("corbits-connections-0.0.1.tgz");
   expect(tarballNameFor("plain", "1.2.3")).toBe("plain-1.2.3.tgz");
 });
 
diff --git a/scripts/checks/test/react-ui-drift.test.ts b/scripts/checks/test/react-ui-drift.test.ts
index b80e72b2b7..877cded9eb 100644
--- a/scripts/checks/test/react-ui-drift.test.ts
+++ b/scripts/checks/test/react-ui-drift.test.ts
@@ -43,9 +43,7 @@ test('role="dialog" hard-fails even when the ratchet count is under the snapshot
     [],
     1000,
   );
-  expect(report.violations.some((v) => v.includes("zero-tolerance"))).toBe(
-    true,
-  );
+  expect(report.violations.some((v) => v.includes("zero-tolerance"))).toBe(true);
 });
 
 test("aria-modal hard-fails even when the ratchet count is under the snapshot", () => {
@@ -59,9 +57,7 @@ test("aria-modal hard-fails even when the ratchet count is under the snapshot",
     [],
     1000,
   );
-  expect(report.violations.some((v) => v.includes("zero-tolerance"))).toBe(
-    true,
-  );
+  expect(report.violations.some((v) => v.includes("zero-tolerance"))).toBe(true);
 });
 
 test("a raw <select>/<textarea>/radio/checkbox is flagged as raw-form-control", () => {
@@ -76,9 +72,7 @@ test("a raw <select>/<textarea>/radio/checkbox is flagged as raw-form-control",
       ].join("\n"),
     },
   ]);
-  expect(
-    violations.filter((v) => v.driftClass === "raw-form-control"),
-  ).toHaveLength(4);
+  expect(violations.filter((v) => v.driftClass === "raw-form-control")).toHaveLength(4);
 });
 
 test("an allowlisted file's raw-form-control and raw-button hits don't count toward the ratchet", () => {
diff --git a/scripts/checks/test/report-error.test.ts b/scripts/checks/test/report-error.test.ts
index d6ba687ef3..fef68c7d99 100644
--- a/scripts/checks/test/report-error.test.ts
+++ b/scripts/checks/test/report-error.test.ts
@@ -118,13 +118,7 @@ test("a catch that rethrows passes", () => {
     [
       {
         relPath: "packages/chat/src/thing.ts",
-        contents: [
-          `try {`,
-          `  doWork();`,
-          `} catch (error) {`,
-          `  throw error;`,
-          `}`,
-        ].join("\n"),
+        contents: [`try {`, `  doWork();`, `} catch (error) {`, `  throw error;`, `}`].join("\n"),
       },
     ],
     NO_BASELINE,
@@ -204,9 +198,7 @@ test("a catch with the opt-out marker in its body passes with a note", () => {
     NO_BASELINE,
   );
   expect(report.violations).toEqual([]);
-  expect(
-    report.notes.some((n) => n.includes("CL-7234 tracked separately")),
-  ).toBe(true);
+  expect(report.notes.some((n) => n.includes("CL-7234 tracked separately"))).toBe(true);
 });
 
 test("a catch with the opt-out marker on its own line passes", () => {
@@ -244,9 +236,7 @@ test("an opted-out catch is never a candidate for the baseline", () => {
     ],
     {
       baseline: new Set(),
-      changedLines: new Map([
-        ["apps/hub/src/stream.ts", [{ start: 1, end: 4 }]],
-      ]),
+      changedLines: new Map([["apps/hub/src/stream.ts", [{ start: 1, end: 4 }]]]),
     },
   );
   expect(report.violations).toEqual([]);
@@ -334,9 +324,7 @@ test("a finding already in the baseline passes when its file isn't touched", ()
     [
       {
         relPath: "c.ts",
-        contents: [`try {`, `  x();`, `} catch {`, `  return null;`, `}`].join(
-          "\n",
-        ),
+        contents: [`try {`, `  x();`, `} catch {`, `  return null;`, `}`].join("\n"),
       },
     ],
     { baseline: new Set([key]) },
@@ -349,15 +337,11 @@ test("a finding not in the baseline is a new violation even with other entries p
     [
       {
         relPath: "c.ts",
-        contents: [`try {`, `  x();`, `} catch {`, `  return null;`, `}`].join(
-          "\n",
-        ),
+        contents: [`try {`, `  x();`, `} catch {`, `  return null;`, `}`].join("\n"),
       },
       {
         relPath: "other.ts",
-        contents: [`try {`, `  x();`, `} catch {`, `  return null;`, `}`].join(
-          "\n",
-        ),
+        contents: [`try {`, `  x();`, `} catch {`, `  return null;`, `}`].join("\n"),
       },
     ],
     { baseline: new Set([baselineKey("other.ts", 1, "return null;")]) },
@@ -375,9 +359,7 @@ test("a baselined finding whose line the diff touches still fails, forcing clean
     [
       {
         relPath: "c.ts",
-        contents: [`try {`, `  x();`, `} catch {`, `  return null;`, `}`].join(
-          "\n",
-        ),
+        contents: [`try {`, `  x();`, `} catch {`, `  return null;`, `}`].join("\n"),
       },
     ],
     {
@@ -396,9 +378,7 @@ test("a baselined finding elsewhere in a touched file passes — the ratchet is
     [
       {
         relPath: "c.ts",
-        contents: [`try {`, `  x();`, `} catch {`, `  return null;`, `}`].join(
-          "\n",
-        ),
+        contents: [`try {`, `  x();`, `} catch {`, `  return null;`, `}`].join("\n"),
       },
     ],
     {
@@ -413,10 +393,9 @@ test("a baselined finding elsewhere in a touched file passes — the ratchet is
 });
 
 test("a stale baseline entry with no matching finding fails", () => {
-  const report = auditReportError(
-    [{ relPath: "c.ts", contents: "export const x = 1;" }],
-    { baseline: new Set([baselineKey("c.ts", 1, "return null;")]) },
-  );
+  const report = auditReportError([{ relPath: "c.ts", contents: "export const x = 1;" }], {
+    baseline: new Set([baselineKey("c.ts", 1, "return null;")]),
+  });
   expect(report.violations).toHaveLength(1);
   expect(report.violations[0]).toContain("stale entry");
   expect(report.violations[0]).toContain(BASELINE_REGENERATE_HINT);
@@ -453,18 +432,14 @@ test("parseBaseline ignores comments and blank lines", () => {
     "b.ts\t1\treturn undefined;",
   ].join("\n");
   const keys = parseBaseline(text);
-  expect(keys).toEqual(
-    new Set(["a.ts\t1\treturn null;", "b.ts\t1\treturn undefined;"]),
-  );
+  expect(keys).toEqual(new Set(["a.ts\t1\treturn null;", "b.ts\t1\treturn undefined;"]));
 });
 
 test("serializeBaseline sorts entries and includes the debt-ledger header", () => {
   const text = serializeBaseline(["b.ts\t1\tx", "a.ts\t1\ty"]);
   expect(text).toContain("debt ledger — NOT an allowlist");
   expect(text).toContain("--write-baseline");
-  const body = text
-    .split("\n")
-    .filter((line) => !line.startsWith("#") && line.trim().length > 0);
+  const body = text.split("\n").filter((line) => !line.startsWith("#") && line.trim().length > 0);
   expect(body).toEqual(["a.ts\t1\ty", "b.ts\t1\tx"]);
 });
 
diff --git a/scripts/checks/test/routine-target-inference.test.ts b/scripts/checks/test/routine-target-inference.test.ts
index 3adbe926f5..dcde9a9932 100644
--- a/scripts/checks/test/routine-target-inference.test.ts
+++ b/scripts/checks/test/routine-target-inference.test.ts
@@ -1,8 +1,5 @@
 import { expect, test } from "bun:test";
-import {
-  auditRoutineTargetInference,
-  auditWorkflowJsonLiteral,
-} from "../routine-target-inference";
+import { auditRoutineTargetInference, auditWorkflowJsonLiteral } from "../routine-target-inference";
 
 test("clean files pass with no violations", () => {
   const report = auditRoutineTargetInference([
@@ -22,9 +19,7 @@ test("agents[0]?.definitionId is a violation naming the file", () => {
     },
   ]);
   expect(report.violations).toHaveLength(1);
-  expect(report.violations[0]).toContain(
-    "apps/web/src/shell/routine-panel.tsx",
-  );
+  expect(report.violations[0]).toContain("apps/web/src/shell/routine-panel.tsx");
 });
 
 test("agents[0].definitionId (no optional chain) is also a violation", () => {
diff --git a/scripts/checks/test/run.test.ts b/scripts/checks/test/run.test.ts
index 674159e775..b04e2ea948 100644
--- a/scripts/checks/test/run.test.ts
+++ b/scripts/checks/test/run.test.ts
@@ -56,13 +56,7 @@ function fakeReadFile(file: string): string {
 const identityRealPath = (file: string): string => file;
 
 function discover(runnerRealPath: string): string[] {
-  return discoverCheckFiles(
-    "/checks",
-    fakeReaddir,
-    fakeReadFile,
-    runnerRealPath,
-    identityRealPath,
-  );
+  return discoverCheckFiles("/checks", fakeReaddir, fakeReadFile, runnerRealPath, identityRealPath);
 }
 
 test("discovers only .ts files with an import.meta.main entry point", () => {
@@ -109,20 +103,14 @@ test("excludes a symlink pointing at the runner", () => {
     "/checks/run.ts",
     // A symlink resolves to the runner's real path regardless of its
     // own name.
-    (file) =>
-      file.endsWith("run-link.ts") || file.endsWith("run.ts")
-        ? "/checks/run.ts"
-        : file,
+    (file) => (file.endsWith("run-link.ts") || file.endsWith("run.ts") ? "/checks/run.ts" : file),
   );
   expect(found).not.toContain("run-link.ts");
   expect(found).toEqual(["deletion.ts"]);
 });
 
 test("buildChecks always includes tsconfig-references alongside discovered checks", () => {
-  const checks = buildChecks(
-    REAL_CHECKS_DIR,
-    path.resolve(REAL_CHECKS_DIR, "..", ".."),
-  );
+  const checks = buildChecks(REAL_CHECKS_DIR, path.resolve(REAL_CHECKS_DIR, "..", ".."));
   const names = checks.map((check) => check.name);
   expect(names).toContain("tsconfig-references");
   expect(names).toContain("licenses");
@@ -131,35 +119,23 @@ test("buildChecks always includes tsconfig-references alongside discovered check
 });
 
 test("buildChecks names are sorted", () => {
-  const checks = buildChecks(
-    REAL_CHECKS_DIR,
-    path.resolve(REAL_CHECKS_DIR, "..", ".."),
-  );
+  const checks = buildChecks(REAL_CHECKS_DIR, path.resolve(REAL_CHECKS_DIR, "..", ".."));
   const names = checks.map((check) => check.name);
   expect(names).toEqual([...names].sort());
 });
 
 test("never discovers itself (run.ts) as a check — that would recurse without bound", () => {
-  const checks = buildChecks(
-    REAL_CHECKS_DIR,
-    path.resolve(REAL_CHECKS_DIR, "..", ".."),
-  );
+  const checks = buildChecks(REAL_CHECKS_DIR, path.resolve(REAL_CHECKS_DIR, "..", ".."));
   expect(checks.map((check) => check.name)).not.toContain("run");
 });
 
 test("buildChecks still surfaces packages as a runnable, individually-named check", () => {
-  const checks = buildChecks(
-    REAL_CHECKS_DIR,
-    path.resolve(REAL_CHECKS_DIR, "..", ".."),
-  );
+  const checks = buildChecks(REAL_CHECKS_DIR, path.resolve(REAL_CHECKS_DIR, "..", ".."));
   expect(checks.map((check) => check.name)).toContain("packages");
 });
 
 test("buildChecks' discovered set matches the explicit expected roster exactly", () => {
-  const checks = buildChecks(
-    REAL_CHECKS_DIR,
-    path.resolve(REAL_CHECKS_DIR, "..", ".."),
-  );
+  const checks = buildChecks(REAL_CHECKS_DIR, path.resolve(REAL_CHECKS_DIR, "..", ".."));
   const names = checks.map((check) => check.name).sort();
   expect(names).toEqual(EXPECTED_CHECK_NAMES);
 });
diff --git a/scripts/checks/test/tailwind-source.test.ts b/scripts/checks/test/tailwind-source.test.ts
index a3e31f6cce..afc3761baa 100644
--- a/scripts/checks/test/tailwind-source.test.ts
+++ b/scripts/checks/test/tailwind-source.test.ts
@@ -31,10 +31,7 @@ test("a stylesheet import with no matching @source entry is a violation", () =>
 });
 
 test("every import matched by a @source entry passes", () => {
-  const report = auditTailwindSource(
-    ["chat-ui", "plugins-ui"],
-    ["chat-ui", "plugins-ui"],
-  );
+  const report = auditTailwindSource(["chat-ui", "plugins-ui"], ["chat-ui", "plugins-ui"]);
   expect(report.violations).toEqual([]);
 });
 
diff --git a/scripts/checks/test/tool-package-freshness.test.ts b/scripts/checks/test/tool-package-freshness.test.ts
index 754badf4e1..98af0f9e54 100644
--- a/scripts/checks/test/tool-package-freshness.test.ts
+++ b/scripts/checks/test/tool-package-freshness.test.ts
@@ -39,10 +39,7 @@ test("rejects stale source already on main and accepts a version bump", () => {
   const check = () =>
     spawnSync(
       process.execPath,
-      [
-        path.resolve(import.meta.dir, "../tool-package-freshness.ts"),
-        `--root=${root}`,
-      ],
+      [path.resolve(import.meta.dir, "../tool-package-freshness.ts"), `--root=${root}`],
       {
         cwd: root,
         env: { ...env, GITHUB_EVENT_PATH: "" },
@@ -61,10 +58,7 @@ test("rejects stale source already on main and accepts a version bump", () => {
       'const CORBITS_TOOL_PACKAGE_DIRS = ["../../github-tools"];',
     );
     const manifest = path.join(root, "packages/github-tools/package.json");
-    writeFileSync(
-      manifest,
-      JSON.stringify({ name: "@corbits/github-tools", version: "1.0.0" }),
-    );
+    writeFileSync(manifest, JSON.stringify({ name: "@corbits/github-tools", version: "1.0.0" }));
     const source = path.join(root, "packages/github-tools/src/index.ts");
     writeFileSync(source, "export const value = 1;");
     git("init");
@@ -79,10 +73,7 @@ test("rejects stale source already on main and accepts a version bump", () => {
     expect(stale.stderr).toContain("@corbits/github-tools@1.0.0");
     git("update-ref", "-d", "refs/remotes/origin/main");
     expect(check().status).toBe(1);
-    writeFileSync(
-      manifest,
-      JSON.stringify({ name: "@corbits/github-tools", version: "1.0.1" }),
-    );
+    writeFileSync(manifest, JSON.stringify({ name: "@corbits/github-tools", version: "1.0.1" }));
     const fresh = check();
     expect(fresh.status).toBe(0);
   } finally {
@@ -93,20 +84,14 @@ test("rejects stale source already on main and accepts a version bump", () => {
 describe("packagesWithChangedSource", () => {
   test("names a package whose src/ moved", () => {
     expect(
-      packagesWithChangedSource(
-        ["packages/github-tools/src/client.ts"],
-        TOOL_PACKAGES,
-      ),
+      packagesWithChangedSource(["packages/github-tools/src/client.ts"], TOOL_PACKAGES),
     ).toEqual(["github-tools"]);
   });
 
   test("ignores tests — they ship no source an agent resolves", () => {
     expect(
       packagesWithChangedSource(
-        [
-          "packages/github-tools/src/client.test.ts",
-          "packages/chat-ui/src/timeline.test.tsx",
-        ],
+        ["packages/github-tools/src/client.test.ts", "packages/chat-ui/src/timeline.test.tsx"],
         TOOL_PACKAGES,
       ),
     ).toEqual([]);
@@ -162,10 +147,7 @@ describe("auditFreshness", () => {
 describe("scope", () => {
   test("ignores a workspace package the registry does not publish", () => {
     expect(
-      packagesWithChangedSource(
-        ["packages/workflow-catalog/src/templates.ts"],
-        TOOL_PACKAGES,
-      ),
+      packagesWithChangedSource(["packages/workflow-catalog/src/templates.ts"], TOOL_PACKAGES),
     ).toEqual([]);
   });
 
@@ -184,13 +166,8 @@ describe("pullRequestBaseSha", () => {
   test("reads pull_request.base.sha from GITHUB_EVENT_PATH", () => {
     const dir = mkdtempSync(path.join(tmpdir(), "base-ref-"));
     const eventPath = path.join(dir, "event.json");
-    writeFileSync(
-      eventPath,
-      JSON.stringify({ pull_request: { base: { sha: "abc123def" } } }),
-    );
-    expect(pullRequestBaseSha({ GITHUB_EVENT_PATH: eventPath })).toBe(
-      "abc123def",
-    );
+    writeFileSync(eventPath, JSON.stringify({ pull_request: { base: { sha: "abc123def" } } }));
+    expect(pullRequestBaseSha({ GITHUB_EVENT_PATH: eventPath })).toBe("abc123def");
     rmSync(dir, { recursive: true, force: true });
   });
 
@@ -202,9 +179,7 @@ describe("pullRequestBaseSha", () => {
     const dir = mkdtempSync(path.join(tmpdir(), "base-ref-"));
     const eventPath = path.join(dir, "event.json");
     writeFileSync(eventPath, JSON.stringify({ ref: "refs/heads/main" }));
-    expect(
-      pullRequestBaseSha({ GITHUB_EVENT_PATH: eventPath }),
-    ).toBeUndefined();
+    expect(pullRequestBaseSha({ GITHUB_EVENT_PATH: eventPath })).toBeUndefined();
     rmSync(dir, { recursive: true, force: true });
   });
 });
diff --git a/scripts/checks/test/tool-package-pins.test.ts b/scripts/checks/test/tool-package-pins.test.ts
index cee871adeb..adad7163ee 100644
--- a/scripts/checks/test/tool-package-pins.test.ts
+++ b/scripts/checks/test/tool-package-pins.test.ts
@@ -32,10 +32,7 @@ test("extractPins reads a multi-line, trailing-comma pin literal", () => {
     '  version: "0.0.1",',
     "} as const;",
   ].join("\n");
-  const pins = extractPins(
-    "packages/agent-directory/src/agent-workflow.ts",
-    contents,
-  );
+  const pins = extractPins("packages/agent-directory/src/agent-workflow.ts", contents);
   expect(pins).toEqual([
     {
       relPath: "packages/agent-directory/src/agent-workflow.ts",
diff --git a/scripts/checks/test/ui-vocabulary.test.ts b/scripts/checks/test/ui-vocabulary.test.ts
index 9a839df7df..d1c9e51d46 100644
--- a/scripts/checks/test/ui-vocabulary.test.ts
+++ b/scripts/checks/test/ui-vocabulary.test.ts
@@ -1,9 +1,5 @@
 import { expect, test } from "bun:test";
-import {
-  auditUiVocabulary,
-  findViolations,
-  stripNonUserFacing,
-} from "../ui-vocabulary";
+import { auditUiVocabulary, findViolations, stripNonUserFacing } from "../ui-vocabulary";
 
 test("clean prose passes with no violations", () => {
   const report = auditUiVocabulary([
@@ -23,9 +19,7 @@ test("a banned term inside natural-language JSX copy is a violation", () => {
     },
   ]);
   expect(report.violations).toHaveLength(1);
-  expect(report.violations[0]).toContain(
-    "apps/web/src/pages/agents-settings-section.tsx",
-  );
+  expect(report.violations[0]).toContain("apps/web/src/pages/agents-settings-section.tsx");
   expect(report.violations[0]).toContain("bench");
 });
 
diff --git a/scripts/checks/tool-package-freshness.ts b/scripts/checks/tool-package-freshness.ts
index c4eb4079bf..67142ae0cd 100644
--- a/scripts/checks/tool-package-freshness.ts
+++ b/scripts/checks/tool-package-freshness.ts
@@ -18,12 +18,7 @@
 import { spawnSync } from "node:child_process";
 import { readFileSync } from "node:fs";
 import path from "node:path";
-import {
-  emptyReport,
-  reportAndExit,
-  rootFromArgs,
-  type CheckReport,
-} from "./lib/repo";
+import { emptyReport, reportAndExit, rootFromArgs, type CheckReport } from "./lib/repo";
 
 import {
   checkToolPackageFreshness,
@@ -43,9 +38,7 @@ const PACKAGE_ROOT = "packages";
 const TOOL_PACKAGE_REGISTRY = "packages/tool-registry-publish/src/registry.ts";
 
 export function readToolPackageNames(source: string): string[] {
-  const block = source.match(
-    /CORBITS_TOOL_PACKAGE_DIRS[^=]*=\s*\[([\s\S]*?)\]/,
-  );
+  const block = source.match(/CORBITS_TOOL_PACKAGE_DIRS[^=]*=\s*\[([\s\S]*?)\]/);
   if (block === null) return [];
   return [...(block[1] ?? "").matchAll(/\.\.\/\.\.\/([a-z0-9-]+)/g)]
     .map((match) => match[1] ?? "")
@@ -69,9 +62,7 @@ function git(root: string, args: readonly string[]): string | undefined {
  * Absent (local runs, push events, unreadable payload) means fall
  * through to merge-base with origin/main.
  */
-export function pullRequestBaseSha(
-  env: NodeJS.ProcessEnv = process.env,
-): string | undefined {
+export function pullRequestBaseSha(env: NodeJS.ProcessEnv = process.env): string | undefined {
   const eventPath = env["GITHUB_EVENT_PATH"];
   if (eventPath === undefined || eventPath === "") return undefined;
   let raw: string;
@@ -86,19 +77,11 @@ export function pullRequestBaseSha(
   } catch {
     return undefined;
   }
-  if (
-    typeof parsed !== "object" ||
-    parsed === null ||
-    !("pull_request" in parsed)
-  ) {
+  if (typeof parsed !== "object" || parsed === null || !("pull_request" in parsed)) {
     return undefined;
   }
   const pullRequest = parsed.pull_request;
-  if (
-    typeof pullRequest !== "object" ||
-    pullRequest === null ||
-    !("base" in pullRequest)
-  ) {
+  if (typeof pullRequest !== "object" || pullRequest === null || !("base" in pullRequest)) {
     return undefined;
   }
   const base = pullRequest.base;
@@ -162,26 +145,14 @@ export function auditFreshness(changes: readonly PackageChange[]): CheckReport {
   return report;
 }
 
-function versionAtRef(
-  root: string,
-  ref: string,
-  name: string,
-): string | undefined {
-  const shown = git(root, [
-    "show",
-    `${ref}:${PACKAGE_ROOT}/${name}/package.json`,
-  ]);
+function versionAtRef(root: string, ref: string, name: string): string | undefined {
+  const shown = git(root, ["show", `${ref}:${PACKAGE_ROOT}/${name}/package.json`]);
   if (shown === undefined) return undefined;
   return (JSON.parse(shown) as { version?: string }).version;
 }
 
-async function versionAtHead(
-  root: string,
-  name: string,
-): Promise<string | undefined> {
-  const manifest = Bun.file(
-    path.join(root, PACKAGE_ROOT, name, "package.json"),
-  );
+async function versionAtHead(root: string, name: string): Promise<string | undefined> {
+  const manifest = Bun.file(path.join(root, PACKAGE_ROOT, name, "package.json"));
   if (!(await manifest.exists())) return undefined;
   return ((await manifest.json()) as { version?: string }).version;
 }
@@ -190,23 +161,15 @@ async function main(): Promise<void> {
   const root = rootFromArgs(Bun.argv.slice(2));
   const baseRef = resolveBaseRef(root);
   const registry = Bun.file(path.join(root, TOOL_PACKAGE_REGISTRY));
-  const toolPackages = (await registry.exists())
-    ? readToolPackageNames(await registry.text())
-    : [];
+  const toolPackages = (await registry.exists()) ? readToolPackageNames(await registry.text()) : [];
   const diff =
-    baseRef === undefined
-      ? undefined
-      : git(root, ["diff", "--name-only", `${baseRef}...HEAD`]);
-  const names = packagesWithChangedSource(
-    (diff ?? "").split("\n"),
-    toolPackages,
-  );
+    baseRef === undefined ? undefined : git(root, ["diff", "--name-only", `${baseRef}...HEAD`]);
+  const names = packagesWithChangedSource((diff ?? "").split("\n"), toolPackages);
   const changes: PackageChange[] = [];
   for (const name of names) {
     changes.push({
       name,
-      baseVersion:
-        baseRef === undefined ? undefined : versionAtRef(root, baseRef, name),
+      baseVersion: baseRef === undefined ? undefined : versionAtRef(root, baseRef, name),
       headVersion: await versionAtHead(root, name),
     });
   }
@@ -214,17 +177,13 @@ async function main(): Promise<void> {
   const report = auditFreshness(changes);
   try {
     await checkToolPackageFreshness({
-      packageDirs: toolPackages.map((name) =>
-        path.join(root, PACKAGE_ROOT, name),
-      ),
+      packageDirs: toolPackages.map((name) => path.join(root, PACKAGE_ROOT, name)),
     });
   } catch (error) {
     if (!(error instanceof StaleToolPackageError)) throw error;
     report.violations.push(error.message);
   }
-  report.notes.push(
-    `${toolPackages.length} tool package(s) checked against version history`,
-  );
+  report.notes.push(`${toolPackages.length} tool package(s) checked against version history`);
   reportAndExit("check:tool-package-freshness", report);
 }
 
diff --git a/scripts/checks/tool-package-pins.ts b/scripts/checks/tool-package-pins.ts
index 4dd565bf8b..278913ef9c 100644
--- a/scripts/checks/tool-package-pins.ts
+++ b/scripts/checks/tool-package-pins.ts
@@ -19,12 +19,7 @@
 // that half is out of scope here.
 import { Glob } from "bun";
 import path from "node:path";
-import {
-  emptyReport,
-  reportAndExit,
-  rootFromArgs,
-  type CheckReport,
-} from "./lib/repo";
+import { emptyReport, reportAndExit, rootFromArgs, type CheckReport } from "./lib/repo";
 
 const SCAN_DIRS = ["apps", "packages", "tools", "workflows"];
 
@@ -35,8 +30,7 @@ const EXCLUDED_SEGMENTS = ["node_modules", "dist", ".worktrees", "vendor"];
 // optional trailing comma before the closing brace. `\s` already spans
 // newlines, so the multi-line form (`SKILLS_TOOL_PACKAGE_PIN`) matches
 // the same as the single-line array-entry form.
-const PIN_PATTERN =
-  /\{\s*name:\s*"(@corbits\/[a-z0-9-]+)"\s*,\s*version:\s*"([^"]*)"\s*,?\s*\}/g;
+const PIN_PATTERN = /\{\s*name:\s*"(@corbits\/[a-z0-9-]+)"\s*,\s*version:\s*"([^"]*)"\s*,?\s*\}/g;
 
 export interface PinReference {
   readonly relPath: string;
@@ -172,10 +166,7 @@ async function addVendoredDependencyVersions(
  * on it — so this checks every workspace's own `node_modules` first, then
  * falls back to the root's.
  */
-async function installedVersion(
-  root: string,
-  name: string,
-): Promise<string | undefined> {
+async function installedVersion(root: string, name: string): Promise<string | undefined> {
   const candidateDirs = [".", "apps/*", "packages/*", "tools/*", "workflows/*"];
   for (const dir of candidateDirs) {
     const glob = new Glob(`${dir}/node_modules/${name}/package.json`);
@@ -193,16 +184,11 @@ async function installedVersion(
 function isExcludedPath(relPath: string): boolean {
   return EXCLUDED_SEGMENTS.some(
     (segment) =>
-      relPath === segment ||
-      relPath.startsWith(`${segment}/`) ||
-      relPath.includes(`/${segment}/`),
+      relPath === segment || relPath.startsWith(`${segment}/`) || relPath.includes(`/${segment}/`),
   );
 }
 
-async function scanFiles(
-  root: string,
-  dirs: readonly string[],
-): Promise<ScannedFile[]> {
+async function scanFiles(root: string, dirs: readonly string[]): Promise<ScannedFile[]> {
   const files: ScannedFile[] = [];
   for (const dir of dirs) {
     const glob = new Glob("**/*.ts");
@@ -222,9 +208,7 @@ async function scanFiles(
 async function main(): Promise<void> {
   const root = rootFromArgs(Bun.argv.slice(2));
   const files = await scanFiles(root, SCAN_DIRS);
-  const pins = files.flatMap((file) =>
-    extractPins(file.relPath, file.contents),
-  );
+  const pins = files.flatMap((file) => extractPins(file.relPath, file.contents));
   const versions = await manifestVersions(root);
   const report = auditToolPackagePins(pins, versions);
   report.notes.push(
diff --git a/scripts/checks/ui-vocabulary.ts b/scripts/checks/ui-vocabulary.ts
index 4339d09b30..e83069fbea 100644
--- a/scripts/checks/ui-vocabulary.ts
+++ b/scripts/checks/ui-vocabulary.ts
@@ -33,12 +33,7 @@
 // the allowlist exists for the rare case both are true at once.
 import { Glob } from "bun";
 import path from "node:path";
-import {
-  emptyReport,
-  reportAndExit,
-  rootFromArgs,
-  type CheckReport,
-} from "./lib/repo";
+import { emptyReport, reportAndExit, rootFromArgs, type CheckReport } from "./lib/repo";
 
 const SCAN_DIRS = ["apps/web/src", "packages/chat-ui/src"];
 
@@ -114,10 +109,7 @@ export function stripNonUserFacing(source: string): string {
     /(^|[^:])(\/\/.*)$/gm,
     (_match, prefix: string, comment: string) => prefix + blank(comment),
   );
-  stripped = stripped.replace(
-    /\b(?:console|log|logger)\.\w+\([\s\S]*?\);/g,
-    blank,
-  );
+  stripped = stripped.replace(/\b(?:console|log|logger)\.\w+\([\s\S]*?\);/g, blank);
   return stripped;
 }
 
@@ -126,8 +118,7 @@ export function stripNonUserFacing(source: string): string {
 // (e.g. "routine's") from being misread as an opening quote that then
 // runs on and swallows everything up to some unrelated quote far below.
 // Only a backtick template literal is allowed to span lines.
-const STRING_LITERAL_PATTERN =
-  /"(?:[^"\\\n]|\\.)*"|'(?:[^'\\\n]|\\.)*'|`(?:[^`\\]|\\.)*`/g;
+const STRING_LITERAL_PATTERN = /"(?:[^"\\\n]|\\.)*"|'(?:[^'\\\n]|\\.)*'|`(?:[^`\\]|\\.)*`/g;
 
 // Allows a trailing decimal (Tailwind's fractional spacing utilities, e.g.
 // "space-y-1.5", "gap-x-2.5") and an arbitrary-value suffix in brackets
@@ -171,11 +162,8 @@ function isProseLiteral(literal: string): boolean {
   // as prose. A single token only counts as a class when it is hyphenated:
   // a bare lowercase word like "workbench" is exactly the copy this check
   // exists to catch.
-  const everyTokenIsClassLike = tokens.every((token) =>
-    KEBAB_TOKEN.test(token),
-  );
-  const looksLikeClassList =
-    tokens.length > 1 || (tokens[0] ?? "").includes("-");
+  const everyTokenIsClassLike = tokens.every((token) => KEBAB_TOKEN.test(token));
+  const looksLikeClassList = tokens.length > 1 || (tokens[0] ?? "").includes("-");
   if (everyTokenIsClassLike && looksLikeClassList) {
     return false;
   }
@@ -203,16 +191,10 @@ export function findViolations(files: readonly ScannedFile[]): Violation[] {
       const literal = match[0];
       if (!isProseLiteral(literal)) continue;
       const inner = literal.slice(1, -1);
-      const testable = literal.startsWith("`")
-        ? stripInterpolations(inner)
-        : inner;
+      const testable = literal.startsWith("`") ? stripInterpolations(inner) : inner;
       const hit = BANNED_TERMS.find(({ pattern }) => pattern.test(testable));
       if (hit === undefined) continue;
-      if (
-        ALLOWLIST.some(
-          (entry) => entry.relPath === relPath && entry.text === inner,
-        )
-      ) {
+      if (ALLOWLIST.some((entry) => entry.relPath === relPath && entry.text === inner)) {
         continue;
       }
       const upToMatch = scanned.slice(0, match.index);
@@ -249,10 +231,7 @@ export function auditUiVocabulary(files: readonly ScannedFile[]): CheckReport {
   return report;
 }
 
-async function scanFiles(
-  root: string,
-  dirs: readonly string[],
-): Promise<ScannedFile[]> {
+async function scanFiles(root: string, dirs: readonly string[]): Promise<ScannedFile[]> {
   const files: ScannedFile[] = [];
   for (const dir of dirs) {
     const glob = new Glob("**/*.{ts,tsx}");
@@ -273,9 +252,7 @@ async function main(): Promise<void> {
   const root = rootFromArgs(Bun.argv.slice(2));
   const files = await scanFiles(root, SCAN_DIRS);
   const report = auditUiVocabulary(files);
-  report.notes.push(
-    `scanned ${files.length} file(s) under ${SCAN_DIRS.join(", ")}`,
-  );
+  report.notes.push(`scanned ${files.length} file(s) under ${SCAN_DIRS.join(", ")}`);
   reportAndExit("check:ui-vocabulary", report);
 }
 
diff --git a/scripts/checks/web-tailwind-utilities.ts b/scripts/checks/web-tailwind-utilities.ts
index 2a388066d0..b36fe6430d 100644
--- a/scripts/checks/web-tailwind-utilities.ts
+++ b/scripts/checks/web-tailwind-utilities.ts
@@ -6,12 +6,7 @@
 
 import { readdirSync, readFileSync, statSync } from "node:fs";
 import path from "node:path";
-import {
-  emptyReport,
-  reportAndExit,
-  rootFromArgs,
-  type CheckReport,
-} from "./lib/repo";
+import { emptyReport, reportAndExit, rootFromArgs, type CheckReport } from "./lib/repo";
 
 /** Substrings that must appear in the built CSS. Escaped selectors are
  * written the way Tailwind emits them (e.g. `sm\:px-7`). */
@@ -76,10 +71,7 @@ function findBuiltCss(distAssets: string): string[] {
   }
 }
 
-async function ensureWebBuild(
-  root: string,
-  report: CheckReport,
-): Promise<void> {
+async function ensureWebBuild(root: string, report: CheckReport): Promise<void> {
   const webDir = path.join(root, "apps/web");
   const distAssets = path.join(webDir, "dist/assets");
   const cssPaths = findBuiltCss(distAssets);
@@ -105,14 +97,11 @@ async function ensureWebBuild(
   }
 
   report.notes.push("building @workbench/web for CSS inspection");
-  const proc = Bun.spawn(
-    ["bun", "run", "--filter", "@workbench/web", "build"],
-    {
-      cwd: root,
-      stdout: "pipe",
-      stderr: "pipe",
-    },
-  );
+  const proc = Bun.spawn(["bun", "run", "--filter", "@workbench/web", "build"], {
+    cwd: root,
+    stdout: "pipe",
+    stderr: "pipe",
+  });
   const exit = await proc.exited;
   if (exit !== 0) {
     const stderr = await new Response(proc.stderr).text();
@@ -130,16 +119,12 @@ async function main(): Promise<void> {
 
   const cssPaths = findBuiltCss(path.join(root, "apps/web/dist/assets"));
   if (cssPaths.length === 0) {
-    report.violations.push(
-      "no CSS asset under apps/web/dist/assets after build",
-    );
+    report.violations.push("no CSS asset under apps/web/dist/assets after build");
     reportAndExit("check:web-utilities", report);
   }
 
   const cssFiles = cssPaths.map((cssPath) => path.relative(root, cssPath));
-  const css = cssPaths
-    .map((cssPath) => readFileSync(cssPath, "utf8"))
-    .join("\n");
+  const css = cssPaths.map((cssPath) => readFileSync(cssPath, "utf8")).join("\n");
   for (const utility of REQUIRED_UTILITIES) {
     if (!css.includes(utility)) {
       report.violations.push(
diff --git a/scripts/ci-jobs.test.ts b/scripts/ci-jobs.test.ts
index 161f92b205..44d9229e1c 100644
--- a/scripts/ci-jobs.test.ts
+++ b/scripts/ci-jobs.test.ts
@@ -1,5 +1,6 @@
-// Pins the CI job split so a flake names the suite that failed, and so
-// checkout depth / cache keys cannot silently revert to the old shared job.
+// Pins the shape of the single fast CI workflow (CL-8150) so a future
+// edit can't silently reintroduce the sharded/db-suite/e2e machinery it
+// replaced, or drop one of the five required jobs.
 import { expect, test } from "bun:test";
 import { readFile } from "node:fs/promises";
 import { join } from "node:path";
@@ -25,100 +26,57 @@ function jobBodies(yaml: string): Map<string, string> {
 }
 
 const SETUP = "./.github/actions/setup-workbench";
-const POSTGRES_IMAGE = "pgvector/pgvector:pg17";
-const DB_JOBS = ["e2e-suite", "isolation", "db-suites"] as const;
-// "build-test" itself is a no-op summary job over the build-test-shard
-// matrix (see ci.yml) — the matrix job is the one that actually checks
-// out the repo and needs full history for tool-package-freshness's
-// merge-base diff.
-const MERGE_BASE_JOBS = [
-  "typecheck",
-  "build-test-shard",
-  "structural",
-] as const;
-
-test("CI splits e2e, isolation, and db-suites onto their own Postgres jobs", async () => {
+const EXPECTED_JOBS = ["setup", "typecheck", "lint", "structural", "unit"] as const;
+
+test("CI declares exactly the five fast jobs and nothing sharded/db-backed", async () => {
   const yaml = await readFile(join(ROOT, ".github/workflows/ci.yml"), "utf8");
   const jobs = jobBodies(yaml);
 
-  expect(yaml).not.toContain("E2E_REQUIRED");
-  expect(yaml).not.toContain("CHECK_BASE_REF");
+  expect([...jobs.keys()].sort()).toEqual([...EXPECTED_JOBS].sort());
+
+  for (const name of ["typecheck", "lint", "structural", "unit"]) {
+    expect(jobs.get(name)).toContain("needs: setup");
+  }
+
+  expect(yaml).not.toContain("postgres:");
+  expect(yaml).not.toContain("matrix:");
+  expect(yaml).not.toContain("--shard");
+  expect(yaml).not.toContain("upload-artifact");
+});
+
+test("every job checks out and runs the setup-workbench action", async () => {
+  const yaml = await readFile(join(ROOT, ".github/workflows/ci.yml"), "utf8");
+  const jobs = jobBodies(yaml);
 
-  expect(jobs.has("walking-skeleton")).toBe(false);
-  for (const name of DB_JOBS) {
+  for (const name of EXPECTED_JOBS) {
     const body = jobs.get(name);
     expect(body).toBeDefined();
-    expect(body).toContain("postgres:");
-    expect(body).toContain(`image: ${POSTGRES_IMAGE}`);
+    expect(body).toContain("uses: actions/checkout@v4");
     expect(body).toContain(`uses: ${SETUP}`);
-    expect(body).not.toContain("fetch-depth: 0");
   }
-
-  const dbSuites = jobs.get("db-suites") ?? "";
-  expect(dbSuites).toContain("bun test apps/hub/test");
-  expect(dbSuites).toContain("grep -rl DATABASE_URL");
-
-  // Unlike e2e and isolation, which provision their own schema through
-  // the harness, apps/hub/test and most package suites connect straight
-  // to DATABASE_URL or its `_e2e`-suffixed sibling from
-  // `e2eDatabaseUrl()` — both databases must exist and be migrated
-  // before those suites run, or their queries fail with "database ...
-  // does not exist".
-  const plainSetupIndex = dbSuites.indexOf(
-    "postgres://postgres:postgres@localhost:5432/workbench bun scripts/db-setup.ts",
-  );
-  const e2eSetupIndex = dbSuites.indexOf(
-    "postgres://postgres:postgres@localhost:5432/workbench_e2e bun scripts/db-setup.ts",
-  );
-  const hubSuiteIndex = dbSuites.indexOf("bun test apps/hub/test");
-  expect(plainSetupIndex).toBeGreaterThan(-1);
-  expect(e2eSetupIndex).toBeGreaterThan(-1);
-  expect(plainSetupIndex).toBeLessThan(hubSuiteIndex);
-  expect(e2eSetupIndex).toBeLessThan(hubSuiteIndex);
 });
 
-test('e2e runs as a plan/matrix/summary trio so branch protection\'s "e2e" check still exists', async () => {
+test("only structural fetches full history; the rest stay shallow", async () => {
   const yaml = await readFile(join(ROOT, ".github/workflows/ci.yml"), "utf8");
   const jobs = jobBodies(yaml);
 
-  const plan = jobs.get("e2e-plan");
-  expect(plan).toBeDefined();
-  expect(plan).toContain("scripts/e2e/list-suites.ts");
-  expect(plan).toContain("outputs:");
-
-  const suite = jobs.get("e2e-suite");
-  expect(suite).toBeDefined();
-  expect(suite).toContain("needs: e2e-plan");
-  expect(suite).toContain("fail-fast: false");
-  expect(suite).toContain("matrix:");
-  expect(suite).toContain("fromJson(needs.e2e-plan.outputs.suites)");
-  expect(suite).toContain("postgres:");
-  expect(suite).toContain(`image: ${POSTGRES_IMAGE}`);
-  expect(suite).toContain("E2E_LOG_DIR");
-  expect(suite).toContain("actions/upload-artifact@v4");
-  expect(suite).toContain("if: always()");
-
-  const summary = jobs.get("e2e");
-  expect(summary).toBeDefined();
-  expect(summary).toContain("needs: e2e-suite");
-  expect(summary).toContain("if: always()");
+  expect(jobs.get("structural")).toContain("fetch-depth: 0");
+  for (const name of ["setup", "typecheck", "lint", "unit"]) {
+    expect(jobs.get(name)).not.toContain("fetch-depth: 0");
+  }
 });
 
-test('build-test runs as a shard/summary pair so branch protection\'s "build-test" check still exists', async () => {
+test("lint runs oxlint and oxfmt --check; the unit job has a hard timeout", async () => {
   const yaml = await readFile(join(ROOT, ".github/workflows/ci.yml"), "utf8");
   const jobs = jobBodies(yaml);
 
-  const shard = jobs.get("build-test-shard");
-  expect(shard).toBeDefined();
-  expect(shard).toContain("fail-fast: false");
-  expect(shard).toContain("matrix:");
-  expect(shard).toContain("shard:");
-  expect(shard).toContain("run: bun run scripts/run-all.ts test --shard");
-
-  const summary = jobs.get("build-test");
-  expect(summary).toBeDefined();
-  expect(summary).toContain("needs: build-test-shard");
-  expect(summary).toContain("if: always()");
+  const lint = jobs.get("lint") ?? "";
+  expect(lint).toContain("bun run lint");
+  expect(lint).toContain("bun run fmt:check");
+
+  const unit = jobs.get("unit") ?? "";
+  expect(unit).toContain("timeout-minutes: 10");
+  expect(unit).toContain("bun test apps packages workflows scripts");
 });
 
 test("the structural job runs the same list as local check:structural", async () => {
@@ -133,39 +91,8 @@ test("the structural job runs the same list as local check:structural", async ()
   expect(structural).not.toContain("check:packages");
 });
 
-test("jobs that need merge-base fetch full history; the rest stay shallow", async () => {
-  const yaml = await readFile(join(ROOT, ".github/workflows/ci.yml"), "utf8");
-  const jobs = jobBodies(yaml);
-
-  for (const name of MERGE_BASE_JOBS) {
-    const body = jobs.get(name);
-    expect(body).toBeDefined();
-    expect(body).toContain(`uses: ${SETUP}`);
-    expect(body).toContain("fetch-depth: 0");
-  }
-
-  const lint = jobs.get("lint");
-  expect(lint).toBeDefined();
-  expect(lint).toContain(`uses: ${SETUP}`);
-  expect(lint).not.toContain("fetch-depth: 0");
-});
-
-test("lint cache keys on tool and config versions, not an OS-wide restore", async () => {
-  const yaml = await readFile(join(ROOT, ".github/workflows/ci.yml"), "utf8");
-  const lint = jobBodies(yaml).get("lint") ?? "";
-
-  expect(lint).toContain(
-    "hashFiles('bun.lock', 'eslint.config.ts', '.prettierrc.json', '.bun-version')",
-  );
-  expect(lint).not.toContain("lint-${{ runner.os }}-${{ github.sha }}");
-  expect(lint).not.toContain("restore-keys: lint-${{ runner.os }}-");
-});
-
-test("setup-workbench caches bun install and node_modules on the lockfile", async () => {
-  const action = await readFile(
-    join(ROOT, ".github/actions/setup-workbench/action.yml"),
-    "utf8",
-  );
+test("setup-workbench caches the bun install cache on the lockfile", async () => {
+  const action = await readFile(join(ROOT, ".github/actions/setup-workbench/action.yml"), "utf8");
 
   expect(action).toContain("using: composite");
   expect(action).not.toContain("actions/checkout");
@@ -173,9 +100,5 @@ test("setup-workbench caches bun install and node_modules on the lockfile", asyn
   expect(action).toContain(
     "key: bun-${{ runner.os }}-${{ hashFiles('bun.lock', '.bun-version') }}",
   );
-  expect(action).toContain(
-    "key: node-modules-${{ runner.os }}-${{ hashFiles('bun.lock', '.bun-version') }}",
-  );
-  expect(action).not.toContain("restore-keys:");
   expect(action).toContain("bun install --frozen-lockfile");
 });
diff --git a/scripts/concurrency.ts b/scripts/concurrency.ts
index d4d0367817..828bd9f8b0 100644
--- a/scripts/concurrency.ts
+++ b/scripts/concurrency.ts
@@ -13,9 +13,7 @@ export function resolveConcurrency(): number {
   }
   const parsed = Number.parseInt(raw, 10);
   if (!Number.isInteger(parsed) || parsed < 1) {
-    throw new Error(
-      `${CONCURRENCY_ENV} must be a positive integer, got "${raw}"`,
-    );
+    throw new Error(`${CONCURRENCY_ENV} must be a positive integer, got "${raw}"`);
   }
   return parsed;
 }
diff --git a/scripts/db-setup.test.ts b/scripts/db-setup.test.ts
index 28c8d638b5..2c68e67f9f 100644
--- a/scripts/db-setup.test.ts
+++ b/scripts/db-setup.test.ts
@@ -6,12 +6,7 @@
 // The digest-handoff SQL assertion always runs.
 import { expect, test } from "bun:test";
 
-import {
-  dbTargetFromUrl,
-  DIGEST_HANDOFF_SQL,
-  loadPostgres,
-  setupDatabase,
-} from "./db-setup";
+import { dbTargetFromUrl, DIGEST_HANDOFF_SQL, loadPostgres, setupDatabase } from "./db-setup";
 import { dbGate } from "./e2e/db-gate";
 
 const databaseUrl = process.env["DATABASE_URL"] ?? "";
@@ -29,33 +24,30 @@ const OLD_NUMBERING_TAIL = [
   "0088_workflow_definition_version_tolerate_body_failure.sql",
 ];
 
-describeIfDb(
-  "setupDatabase against a schema migrated under the old numbering",
-  () => {
-    test("refuses to apply incrementally and names the reset", async () => {
-      const schema = `db_setup_test_${Date.now().toString(36)}`;
-      const target = dbTargetFromUrl(databaseUrl);
-      const sql = await loadPostgres().then((postgres) =>
-        postgres({ ...target, max: 1, onnotice: () => undefined }),
+describeIfDb("setupDatabase against a schema migrated under the old numbering", () => {
+  test("refuses to apply incrementally and names the reset", async () => {
+    const schema = `db_setup_test_${Date.now().toString(36)}`;
+    const target = dbTargetFromUrl(databaseUrl);
+    const sql = await loadPostgres().then((postgres) =>
+      postgres({ ...target, max: 1, onnotice: () => undefined }),
+    );
+    try {
+      await sql.unsafe(`CREATE SCHEMA "${schema}"`);
+      await sql.unsafe(
+        `CREATE TABLE "${schema}"."workbench_setup_migration" (filename text PRIMARY KEY, applied_at timestamptz NOT NULL DEFAULT now())`,
       );
-      try {
-        await sql.unsafe(`CREATE SCHEMA "${schema}"`);
+      for (const file of OLD_NUMBERING_TAIL) {
         await sql.unsafe(
-          `CREATE TABLE "${schema}"."workbench_setup_migration" (filename text PRIMARY KEY, applied_at timestamptz NOT NULL DEFAULT now())`,
+          `INSERT INTO "${schema}"."workbench_setup_migration" (filename) VALUES ($1)`,
+          [file],
         );
-        for (const file of OLD_NUMBERING_TAIL) {
-          await sql.unsafe(
-            `INSERT INTO "${schema}"."workbench_setup_migration" (filename) VALUES ($1)`,
-            [file],
-          );
-        }
-        await expect(setupDatabase(databaseUrl, { schema })).rejects.toThrow(
-          /different @intx\/db migration set[\s\S]*db-setup\.ts --reset/,
-        );
-      } finally {
-        await sql.unsafe(`DROP SCHEMA IF EXISTS "${schema}" CASCADE`);
-        await sql.end();
       }
-    });
-  },
-);
+      await expect(setupDatabase(databaseUrl, { schema })).rejects.toThrow(
+        /different @intx\/db migration set[\s\S]*db-setup\.ts --reset/,
+      );
+    } finally {
+      await sql.unsafe(`DROP SCHEMA IF EXISTS "${schema}" CASCADE`);
+      await sql.end();
+    }
+  });
+});
diff --git a/scripts/db-setup.ts b/scripts/db-setup.ts
index ded37e3a08..8869be707c 100644
--- a/scripts/db-setup.ts
+++ b/scripts/db-setup.ts
@@ -31,10 +31,7 @@ import { readdir } from "node:fs/promises";
 import { applyChatMigrations } from "../packages/chat/src/migrations";
 import { applyWebhookTriggersMigrations } from "../packages/webhook-triggers/src/migrations";
 import { applyNotifyMigrations } from "../packages/notify/src/migrations";
-import {
-  applyInboxMigrations,
-  applyMailboxMigrations,
-} from "../packages/inbox/src/migrations";
+import { applyInboxMigrations, applyMailboxMigrations } from "../packages/inbox/src/migrations";
 import { applyAgentDirectoryMigrations } from "../packages/agent-directory/src/migrations";
 import { applyOnboardingMigrations } from "../packages/onboarding/src/migrations";
 
@@ -70,16 +67,13 @@ const INSTALLED_PACKAGE_MIGRATIONS: readonly {
  * package owns its own idempotence and bookkeeping (see
  * applyChatMigrations); this only sequences them and reports what ran.
  */
-async function applyInstalledPackageMigrations(
-  databaseUrl: string,
-): Promise<void> {
+async function applyInstalledPackageMigrations(databaseUrl: string): Promise<void> {
   for (const { name, apply } of INSTALLED_PACKAGE_MIGRATIONS) {
     try {
       const { applied } = await apply(databaseUrl);
       if (applied.length > 0) {
         console.log(
-          `db-setup: applied ${applied.length} migration(s) for ${name}: ` +
-            applied.join(", "),
+          `db-setup: applied ${applied.length} migration(s) for ${name}: ` + applied.join(", "),
         );
       }
     } catch (error) {
@@ -146,10 +140,7 @@ function resolveHubDependency(specifier: string): string {
 async function loadIntxDb(): Promise<IntxDbMigrate> {
   const resolved = resolveHubDependency("@intx/db");
   const loaded = (await import(resolved)) as Partial<IntxDbMigrate>;
-  if (
-    typeof loaded.runMigrations !== "function" ||
-    typeof loaded.dropSchema !== "function"
-  ) {
+  if (typeof loaded.runMigrations !== "function" || typeof loaded.dropSchema !== "function") {
     throw new Error(
       [
         `@intx/db at ${resolved} does not export runMigrations/dropSchema;`,
@@ -233,9 +224,7 @@ export function dbTargetFromUrl(databaseUrl: string): DbTarget {
     );
   }
   if (url.protocol !== "postgres:" && url.protocol !== "postgresql:") {
-    throw new Error(
-      `DATABASE_URL must be a postgres:// URL, got ${url.protocol}//.`,
-    );
+    throw new Error(`DATABASE_URL must be a postgres:// URL, got ${url.protocol}//.`);
   }
   const database = url.pathname.replace(/^\//, "");
   if (database === "") {
@@ -253,10 +242,7 @@ export function dbTargetFromUrl(databaseUrl: string): DbTarget {
   };
 }
 
-async function connect(
-  postgres: PostgresFactory,
-  target: DbTarget,
-): Promise<SqlClient> {
+async function connect(postgres: PostgresFactory, target: DbTarget): Promise<SqlClient> {
   return postgres({
     host: target.host,
     port: target.port,
@@ -317,9 +303,7 @@ async function ensureDatabase(
     database: "postgres",
   });
   try {
-    await maintenance.unsafe(
-      `CREATE DATABASE ${quoteIdentifier(target.database)}`,
-    );
+    await maintenance.unsafe(`CREATE DATABASE ${quoteIdentifier(target.database)}`);
   } catch (error) {
     throw new Error(
       `Database ${JSON.stringify(target.database)} does not exist and ` +
@@ -347,11 +331,7 @@ const LEDGER_TABLE = "workbench_setup_migration";
 // script.
 const SENTINEL_TABLE = "user";
 
-async function tableExists(
-  sql: SqlClient,
-  schema: string,
-  table: string,
-): Promise<boolean> {
+async function tableExists(sql: SqlClient, schema: string, table: string): Promise<boolean> {
   const rows = await sql.unsafe(
     "SELECT 1 FROM information_schema.tables WHERE table_schema = $1 AND table_name = $2",
     [schema, table],
@@ -370,9 +350,7 @@ async function tableExists(
  */
 export const DIGEST_HANDOFF_SQL = `UPDATE workflow_definition wd SET status = CASE WHEN r.enabled THEN 'deployed' ELSE 'stopped' END, updated_at = now() FROM routines.routine r WHERE r.preset_key = 'workbench-digest' AND wd.name = 'workbench-digest' AND wd.tenant_id = r.tenant_id AND wd.origin = 'authored'`;
 
-async function dropRoutinesSchemaAfterDigestHandoff(
-  databaseUrl: string,
-): Promise<void> {
+async function dropRoutinesSchemaAfterDigestHandoff(databaseUrl: string): Promise<void> {
   const postgres = await loadPostgres();
   const target = dbTargetFromUrl(databaseUrl);
   const sql = await connect(postgres, target);
@@ -384,9 +362,7 @@ async function dropRoutinesSchemaAfterDigestHandoff(
     if (existing.length === 0) return;
     await sql.unsafe(DIGEST_HANDOFF_SQL);
     await sql.unsafe("DROP SCHEMA IF EXISTS routines CASCADE");
-    console.log(
-      "db-setup: dropped routines schema after digest enablement handoff",
-    );
+    console.log("db-setup: dropped routines schema after digest enablement handoff");
   } finally {
     await sql.end();
   }
@@ -403,10 +379,7 @@ async function dropRoutinesSchemaAfterDigestHandoff(
  * gone — Insights UI now reads stock observability/workflow routes
  * client-side instead. Absent schema is a no-op; safe to re-run.
  */
-async function dropSchemaIfPresent(
-  databaseUrl: string,
-  schema: string,
-): Promise<void> {
+async function dropSchemaIfPresent(databaseUrl: string, schema: string): Promise<void> {
   const postgres = await loadPostgres();
   const target = dbTargetFromUrl(databaseUrl);
   const sql = await connect(postgres, target);
@@ -416,19 +389,14 @@ async function dropSchemaIfPresent(
       [schema],
     );
     if (existing.length === 0) return;
-    await sql.unsafe(
-      `DROP SCHEMA IF EXISTS ${quoteIdentifier(schema)} CASCADE`,
-    );
+    await sql.unsafe(`DROP SCHEMA IF EXISTS ${quoteIdentifier(schema)} CASCADE`);
     console.log(`db-setup: dropped ${schema} schema (dead mount)`);
   } finally {
     await sql.end();
   }
 }
 
-async function appliedMigrations(
-  sql: SqlClient,
-  schema: string,
-): Promise<string[]> {
+async function appliedMigrations(sql: SqlClient, schema: string): Promise<string[]> {
   const rows = await sql.unsafe(
     `SELECT filename FROM ${quoteIdentifier(schema)}.${quoteIdentifier(LEDGER_TABLE)} ORDER BY filename`,
   );
@@ -483,8 +451,7 @@ export async function setupDatabase(
     if (hasLedger) {
       const applied = await appliedMigrations(sql, schema);
       const same =
-        applied.length === shipped.length &&
-        applied.every((file, i) => file === shipped[i]);
+        applied.length === shipped.length && applied.every((file, i) => file === shipped[i]);
       if (same) {
         await applyInstalledPackageMigrations(databaseUrl);
         return {
diff --git a/scripts/dev.ts b/scripts/dev.ts
index fe99ca1087..9d96583c0b 100644
--- a/scripts/dev.ts
+++ b/scripts/dev.ts
@@ -81,9 +81,7 @@ function probePostgres(host: string, port: number): Promise<ProbeResult> {
       });
     });
     socket.once("error", () => settle("unreachable"));
-    socket.once("timeout", () =>
-      settle(connected ? "not-postgres" : "unreachable"),
-    );
+    socket.once("timeout", () => settle(connected ? "not-postgres" : "unreachable"));
   });
 }
 
@@ -95,9 +93,7 @@ async function requireDatabaseReachable(config: HubConfig): Promise<void> {
   // one family while an unrelated process holds the other — so every
   // reachable listener must answer as Postgres, not just one of them.
   const addresses = host === "localhost" ? ["127.0.0.1", "::1"] : [host];
-  const results = await Promise.all(
-    addresses.map((address) => probePostgres(address, port)),
-  );
+  const results = await Promise.all(addresses.map((address) => probePostgres(address, port)));
   const occupied = results.includes("not-postgres");
   const reachable = results.includes("postgres");
   if (reachable && !occupied) return;
@@ -168,11 +164,9 @@ const webApp: App = {
 };
 
 function requireApps(): void {
-  const missing = [
-    ...apps,
-    webApp,
-    { dir: join(repoRoot, "apps", "sidecar") },
-  ].filter((app) => !existsSync(join(app.dir, "package.json")));
+  const missing = [...apps, webApp, { dir: join(repoRoot, "apps", "sidecar") }].filter(
+    (app) => !existsSync(join(app.dir, "package.json")),
+  );
   if (missing.length === 0) return;
   fail(
     [
@@ -222,10 +216,7 @@ function webDistMtimeMs(staticDir: string): number | null {
 // Pure decision, unit-tested on its own: a dist bundle newer than every
 // file the build reads is already correct, so paying for another full
 // vite build before the hub can serve it would be pure waste.
-export function isWebBuildFresh(
-  latestSourceMtimeMs: number,
-  distMtimeMs: number | null,
-): boolean {
+export function isWebBuildFresh(latestSourceMtimeMs: number, distMtimeMs: number | null): boolean {
   return distMtimeMs !== null && distMtimeMs > latestSourceMtimeMs;
 }
 
@@ -268,11 +259,7 @@ interface RunningApp {
 // Apps can start at different times now (web may be deferred), so exits
 // are watched per-process as they're spawned rather than raced over a
 // fixed list gathered up front.
-function spawnApp(
-  app: App,
-  running: RunningApp[],
-  onExit: (app: App, code: number) => void,
-): void {
+function spawnApp(app: App, running: RunningApp[], onExit: (app: App, code: number) => void): void {
   const proc = Bun.spawn(app.command ?? ["bun", "run", "dev"], {
     cwd: app.dir,
     env: { ...process.env, ...app.env },
@@ -301,25 +288,21 @@ async function startApps(webFresh: boolean): Promise<never> {
 
   // Promise.resolve is idempotent, so the first process to exit — eager
   // or deferred — is the only one that determines the outcome here.
-  const firstExit = await new Promise<{ app: App; code: number }>(
-    (resolveExit) => {
-      const onExit = (app: App, code: number) => resolveExit({ app, code });
-      for (const app of apps) spawnApp(app, running, onExit);
-      if (webFresh) {
-        console.log(
-          "[dev] the web bundle is newer than every file the build reads; " +
-            "deferring the rebuild watcher until a source file changes",
-        );
-        watchOnce(webWatchedPaths, () => spawnApp(webApp, running, onExit));
-      } else {
-        spawnApp(webApp, running, onExit);
-      }
-    },
-  );
+  const firstExit = await new Promise<{ app: App; code: number }>((resolveExit) => {
+    const onExit = (app: App, code: number) => resolveExit({ app, code });
+    for (const app of apps) spawnApp(app, running, onExit);
+    if (webFresh) {
+      console.log(
+        "[dev] the web bundle is newer than every file the build reads; " +
+          "deferring the rebuild watcher until a source file changes",
+      );
+      watchOnce(webWatchedPaths, () => spawnApp(webApp, running, onExit));
+    } else {
+      spawnApp(webApp, running, onExit);
+    }
+  });
   stopAll();
-  fail(
-    `${firstExit.app.label} exited with code ${firstExit.code}; stopping the other apps.`,
-  );
+  fail(`${firstExit.app.label} exited with code ${firstExit.code}; stopping the other apps.`);
 }
 
 // Bring the database's schema current before the apps boot: creates
@@ -337,9 +320,7 @@ async function requireDatabaseSetUp(config: HubConfig): Promise<void> {
           `${JSON.stringify(report.database)}`,
       );
     } else {
-      console.log(
-        `[dev] database ${JSON.stringify(report.database)} schema is current`,
-      );
+      console.log(`[dev] database ${JSON.stringify(report.database)} schema is current`);
     }
   } catch (error) {
     fail(error instanceof Error ? error.message : String(error));
@@ -434,9 +415,7 @@ async function seedDevAccount(config: HubConfig): Promise<void> {
 // up front instead.
 async function requireHubPortFree(config: HubConfig): Promise<void> {
   const base = new URL(config.baseUrl);
-  const port = Number(
-    base.port === "" ? (base.protocol === "https:" ? "443" : "80") : base.port,
-  );
+  const port = Number(base.port === "" ? (base.protocol === "https:" ? "443" : "80") : base.port);
   const occupied = await new Promise<boolean>((resolvePort) => {
     const socket = createConnection({
       host: base.hostname,
@@ -475,14 +454,8 @@ if (import.meta.main) {
   await requireDatabaseReachable(config);
   await requireDatabaseSetUp(config);
   requireApps();
-  const hubStaticDir = resolve(
-    join(repoRoot, "apps", "hub"),
-    config.hubStaticDir,
-  );
-  const webFresh = isWebBuildFresh(
-    await latestWebSourceMtimeMs(),
-    webDistMtimeMs(hubStaticDir),
-  );
+  const hubStaticDir = resolve(join(repoRoot, "apps", "hub"), config.hubStaticDir);
+  const webFresh = isWebBuildFresh(await latestWebSourceMtimeMs(), webDistMtimeMs(hubStaticDir));
   void seedDevAccount(config);
   await startApps(webFresh);
 }
diff --git a/scripts/e2e/browser/walkthrough.ts b/scripts/e2e/browser/walkthrough.ts
index c4d5c98bd9..78f16b1272 100644
--- a/scripts/e2e/browser/walkthrough.ts
+++ b/scripts/e2e/browser/walkthrough.ts
@@ -82,9 +82,7 @@ function candidateChromePaths(): string[] {
 function findChrome(): string {
   const env = process.env["CHROME_PATH"];
   if (env !== undefined && env !== "" && existsSync(env)) return env;
-  const found = candidateChromePaths().find((candidate) =>
-    existsSync(candidate),
-  );
+  const found = candidateChromePaths().find((candidate) => existsSync(candidate));
   if (found !== undefined) return found;
   throw new Error(
     "No system Chrome/Chromium found (checked CHROME_PATH and the usual " +
@@ -125,13 +123,9 @@ async function screenshot(getPage: GetPage, name: string): Promise<string> {
   // own short, separate timeout rather than inheriting the step's.
   await Promise.race([
     getPage().screenshot({ path: dest }),
-    new Promise((_, reject) =>
-      setTimeout(() => reject(new Error("screenshot timed out")), 8_000),
-    ),
+    new Promise((_, reject) => setTimeout(() => reject(new Error("screenshot timed out")), 8_000)),
   ]).catch((error) => {
-    console.error(
-      `  (screenshot failed: ${error instanceof Error ? error.message : error})`,
-    );
+    console.error(`  (screenshot failed: ${error instanceof Error ? error.message : error})`);
   });
   return file;
 }
@@ -183,26 +177,20 @@ async function startWebDevServer(options: {
 }): Promise<WebDevServer> {
   const vite = path.join(WEB_DIR, "node_modules", ".bin", "vite");
   if (!existsSync(vite)) {
-    throw new Error(
-      `apps/web has no installed vite binary at ${vite}; run \`bun install\` first.`,
-    );
+    throw new Error(`apps/web has no installed vite binary at ${vite}; run \`bun install\` first.`);
   }
   const baseUrl = `http://localhost:${options.port}`;
-  const proc = Bun.spawn(
-    [vite, "--port", String(options.port), "--strictPort"],
-    {
-      cwd: WEB_DIR,
-      env: { ...process.env, BASE_URL: options.hubBaseUrl },
-      stdout: "pipe",
-      stderr: "pipe",
-    },
-  );
+  const proc = Bun.spawn([vite, "--port", String(options.port), "--strictPort"], {
+    cwd: WEB_DIR,
+    env: { ...process.env, BASE_URL: options.hubBaseUrl },
+    stdout: "pipe",
+    stderr: "pipe",
+  });
   let captured = "";
   let done = false;
   const capture = async (stream: ReadableStream<Uint8Array>) => {
     const decoder = new TextDecoder();
-    for await (const chunk of stream)
-      captured += decoder.decode(chunk, { stream: true });
+    for await (const chunk of stream) captured += decoder.decode(chunk, { stream: true });
   };
   void capture(proc.stdout);
   void capture(proc.stderr);
@@ -228,9 +216,7 @@ async function startWebDevServer(options: {
   const deadline = Date.now() + 20_000;
   for (;;) {
     if (app.exited()) {
-      throw new Error(
-        `web dev server exited during boot; output:\n${app.output()}`,
-      );
+      throw new Error(`web dev server exited during boot; output:\n${app.output()}`);
     }
     try {
       const res = await fetch(baseUrl);
@@ -240,9 +226,7 @@ async function startWebDevServer(options: {
     }
     if (Date.now() > deadline) {
       await app.stop();
-      throw new Error(
-        `web dev server did not answer within 20s; output:\n${app.output()}`,
-      );
+      throw new Error(`web dev server did not answer within 20s; output:\n${app.output()}`);
     }
     await Bun.sleep(250);
   }
@@ -278,10 +262,7 @@ async function clickStable(page: Page, selector: string): Promise<void> {
 }
 
 async function countMatching(page: Page, selector: string): Promise<number> {
-  return page.evaluate(
-    (sel: string) => document.querySelectorAll(sel).length,
-    selector,
-  );
+  return page.evaluate((sel: string) => document.querySelectorAll(sel).length, selector);
 }
 
 async function createAgentDrawerLayout(
@@ -320,14 +301,10 @@ async function createAgentDrawerLayout(
     }
 
     const minimumLeftClearance = Math.min(
-      ...controls.map(
-        (control) => control.getBoundingClientRect().left - bodyContentLeft,
-      ),
+      ...controls.map((control) => control.getBoundingClientRect().left - bodyContentLeft),
     );
     const maximumRightOverflow = Math.max(
-      ...controls.map(
-        (control) => control.getBoundingClientRect().right - bodyContentRight,
-      ),
+      ...controls.map((control) => control.getBoundingClientRect().right - bodyContentRight),
     );
 
     return {
@@ -338,32 +315,22 @@ async function createAgentDrawerLayout(
       panelScrollWidth: panel.scrollWidth,
       minimumLeftClearance,
       maximumRightOverflow,
-      activeControl:
-        document.activeElement instanceof HTMLElement
-          ? document.activeElement.id
-          : "",
+      activeControl: document.activeElement instanceof HTMLElement ? document.activeElement.id : "",
     };
   }, viewportName);
 }
 
-async function openCreateAgentDrawer(
-  page: Page,
-  webBaseUrl: string,
-): Promise<boolean> {
+async function openCreateAgentDrawer(page: Page, webBaseUrl: string): Promise<boolean> {
   await page.goto(`${webBaseUrl}/agents`, { waitUntil: "domcontentloaded" });
   await page.waitForSelector('button[aria-label="Create an agent"]', {
     timeout: 15_000,
   });
   await clickStable(page, 'button[aria-label="Create an agent"]');
-  await page.waitForSelector(
-    '[data-slot="dialog-content"].create-agent-panel',
-    { timeout: 15_000 },
-  );
+  await page.waitForSelector('[data-slot="dialog-content"].create-agent-panel', {
+    timeout: 15_000,
+  });
   await page.waitForSelector("#create-agent-name");
-  await page.type(
-    "#create-agent-name",
-    "Research Buddy with a deliberately long name",
-  );
+  await page.type("#create-agent-name", "Research Buddy with a deliberately long name");
   await page.type(
     "#create-agent-purpose",
     "A deliberately long description that wraps across multiple lines so the drawer has to contain the full form without clipping its focus ring or letting the scrollbar cover the field.",
@@ -374,9 +341,7 @@ async function openCreateAgentDrawer(
   await page
     .waitForFunction(
       () => {
-        const model = document.querySelector<HTMLSelectElement>(
-          "#create-agent-advanced-model",
-        );
+        const model = document.querySelector<HTMLSelectElement>("#create-agent-advanced-model");
         return (
           (model !== null && model.options.length > 0) ||
           document.querySelector('[role="status"]') !== null
@@ -385,12 +350,8 @@ async function openCreateAgentDrawer(
       { timeout: 5_000 },
     )
     .catch(() => undefined);
-  const modelValues = await page.$$eval(
-    "#create-agent-advanced-model option",
-    (options) =>
-      options
-        .map((option) => option.value)
-        .filter((value) => value.trim() !== ""),
+  const modelValues = await page.$$eval("#create-agent-advanced-model option", (options) =>
+    options.map((option) => option.value).filter((value) => value.trim() !== ""),
   );
   const modelSelectorAvailable = modelValues.length > 0;
   if (modelSelectorAvailable) {
@@ -404,16 +365,12 @@ async function openCreateAgentDrawer(
     await page.focus("#create-agent-advanced-handle");
   }
   await page.evaluate(() => {
-    const body = document.querySelector<HTMLElement>(
-      '[data-slot="dialog-body"]',
-    );
+    const body = document.querySelector<HTMLElement>('[data-slot="dialog-body"]');
     if (body === null) throw new Error("New Agent drawer body was not found");
     body.scrollTop = body.scrollHeight;
   });
   await page.waitForFunction(
-    () =>
-      document.querySelector<HTMLElement>('[data-slot="dialog-body"]')
-        ?.scrollTop !== 0,
+    () => document.querySelector<HTMLElement>('[data-slot="dialog-body"]')?.scrollTop !== 0,
     { timeout: 5_000 },
   );
   return modelSelectorAvailable;
@@ -430,10 +387,10 @@ async function closeCreateAgentDrawer(page: Page): Promise<void> {
     if (cancel === undefined) throw new Error("Cancel button was not found");
     cancel.click();
   });
-  await page.waitForSelector(
-    '[data-slot="dialog-content"].create-agent-panel',
-    { hidden: true, timeout: 5_000 },
-  );
+  await page.waitForSelector('[data-slot="dialog-content"].create-agent-panel', {
+    hidden: true,
+    timeout: 5_000,
+  });
 }
 
 // --- the walkthrough -----------------------------------------------------
@@ -468,9 +425,7 @@ async function createMyraChat(page: Page): Promise<void> {
       .catch(() => false);
   }
   if (!landed) {
-    throw new Error(
-      "the picker never minted a fresh workbench after 3 attempts",
-    );
+    throw new Error("the picker never minted a fresh workbench after 3 attempts");
   }
 }
 
@@ -506,9 +461,7 @@ async function run(): Promise<void> {
     const sidecarToken = crypto.randomUUID();
     await provisionSidecar(databaseUrl, sidecarId, sidecarToken);
 
-    const sessionSecret = Buffer.from(
-      crypto.getRandomValues(new Uint8Array(32)),
-    ).toString("hex");
+    const sessionSecret = Buffer.from(crypto.getRandomValues(new Uint8Array(32))).toString("hex");
     // The hub keeps this exact port, and the web dev server keeps this
     // exact origin as the hub's trusted BASE_URL, across the restart in
     // step 10 — the dev server's own `/api` proxy target and better-
@@ -541,9 +494,7 @@ async function run(): Promise<void> {
     });
     cleanups.push(() => sidecar.stop());
 
-    console.log(
-      "Starting apps/web dev server (proxying /api to the real hub)...",
-    );
+    console.log("Starting apps/web dev server (proxying /api to the real hub)...");
     const web = await startWebDevServer({
       hubBaseUrl: hub.baseUrl,
       port: webPort,
@@ -560,13 +511,10 @@ async function run(): Promise<void> {
 
     function wireDiagnostics(target: Page): void {
       target.on("pageerror", (error) =>
-        console.error(
-          `  [page error] ${error instanceof Error ? error.message : String(error)}`,
-        ),
+        console.error(`  [page error] ${error instanceof Error ? error.message : String(error)}`),
       );
       target.on("console", (msg) => {
-        if (msg.type() === "error")
-          console.error(`  [console.error] ${msg.text()}`);
+        if (msg.type() === "error") console.error(`  [console.error] ${msg.text()}`);
       });
     }
 
@@ -588,11 +536,8 @@ async function run(): Promise<void> {
     // required — Ollama has none.
     const liveApiKey = process.env["E2E_PROVIDER_API_KEY"];
     const ollamaBaseUrl = process.env["OLLAMA_BASE_URL"];
-    const useOllama =
-      process.env["E2E_PROVIDER"] === "ollama" && ollamaBaseUrl !== undefined;
-    const connectProvider = useOllama
-      ? ("ollama" as const)
-      : ("anthropic" as const);
+    const useOllama = process.env["E2E_PROVIDER"] === "ollama" && ollamaBaseUrl !== undefined;
+    const connectProvider = useOllama ? ("ollama" as const) : ("anthropic" as const);
     const stubApiKey = useOllama
       ? OLLAMA_PLACEHOLDER_SECRET
       : (liveApiKey ?? "sk-e2e-stub-not-real");
@@ -610,10 +555,9 @@ async function run(): Promise<void> {
         await page.type('input[name="email"]', email);
         await page.type('input[name="password"]', password);
         await page.click('button[type="submit"]');
-        await page.waitForFunction(
-          () => window.location.pathname === "/onboarding",
-          { timeout: 15_000 },
-        );
+        await page.waitForFunction(() => window.location.pathname === "/onboarding", {
+          timeout: 15_000,
+        });
         return {
           status: "pass",
           detail: `signed up as ${email}, reached onboarding`,
@@ -662,22 +606,12 @@ async function run(): Promise<void> {
         // stored as an unproven model source, exactly as onboarding's
         // own key path would store it, so the later chat message is the
         // first time it is ever dialed for real.
-        const cookies = (await page.cookies()).map(
-          (c) => `${c.name}=${c.value}`,
-        );
+        const cookies = (await page.cookies()).map((c) => `${c.name}=${c.value}`);
         const hubApi = createHubAPI(hub.baseUrl);
-        const session = await hubApi(
-          "GET",
-          "/api/auth/get-session",
-          undefined,
-          cookies,
-        );
-        const userId = (session.data as { user?: { id?: string } } | null)?.user
-          ?.id;
+        const session = await hubApi("GET", "/api/auth/get-session", undefined, cookies);
+        const userId = (session.data as { user?: { id?: string } } | null)?.user?.id;
         if (userId === undefined || userId === "") {
-          throw new Error(
-            `no authenticated session found: ${JSON.stringify(session.data)}`,
-          );
+          throw new Error(`no authenticated session found: ${JSON.stringify(session.data)}`);
         }
         const pushWorkflow = createGitWorkflowPusher();
         const connectArgs = {
@@ -755,13 +689,10 @@ async function run(): Promise<void> {
         // must land in Myra's DM rather than stranding the account on a
         // spinner or bouncing to `/new`.
         await page.goto(webBaseUrl, { waitUntil: "domcontentloaded" });
-        await page.waitForFunction(
-          () => window.location.pathname.startsWith("/w/"),
-          { timeout: 45_000 },
-        );
-        firstWorkbenchPath = await page.evaluate(
-          () => window.location.pathname,
-        );
+        await page.waitForFunction(() => window.location.pathname.startsWith("/w/"), {
+          timeout: 45_000,
+        });
+        firstWorkbenchPath = await page.evaluate(() => window.location.pathname);
         await page.waitForSelector("textarea.chat-composer-input", {
           timeout: 15_000,
         });
@@ -784,23 +715,15 @@ async function run(): Promise<void> {
           { name: "desktop", width: 1280, height: 720 },
           { name: "short", width: 1280, height: 480 },
         ] as const;
-        const measurements: Awaited<
-          ReturnType<typeof createAgentDrawerLayout>
-        >[] = [];
+        const measurements: Awaited<ReturnType<typeof createAgentDrawerLayout>>[] = [];
         let modelSelectorSeen = false;
 
         try {
           for (const viewport of cases) {
             await page.setViewport(viewport);
-            const modelSelectorAvailable = await openCreateAgentDrawer(
-              page,
-              webBaseUrl,
-            );
+            const modelSelectorAvailable = await openCreateAgentDrawer(page, webBaseUrl);
             modelSelectorSeen ||= modelSelectorAvailable;
-            const measurement = await createAgentDrawerLayout(
-              page,
-              viewport.name,
-            );
+            const measurement = await createAgentDrawerLayout(page, viewport.name);
             measurements.push(measurement);
             if (
               measurement.bodyScrollWidth !== measurement.bodyClientWidth ||
@@ -860,10 +783,7 @@ async function run(): Promise<void> {
             detail: `expected a mixed conversation list with a Myra row, found ${myraRows}`,
           };
         }
-        const createButtons = await countMatching(
-          page,
-          'button[aria-label="New workbench"]',
-        );
+        const createButtons = await countMatching(page, 'button[aria-label="New workbench"]');
         if (createButtons !== 1) {
           return {
             status: "fail",
@@ -872,8 +792,7 @@ async function run(): Promise<void> {
         }
         return {
           status: "pass",
-          detail:
-            'mixed conversation list includes Myra; one "+ New workbench" affordance',
+          detail: 'mixed conversation list includes Myra; one "+ New workbench" affordance',
         };
       },
     );
@@ -944,8 +863,7 @@ async function run(): Promise<void> {
         }
         return {
           status: "pass",
-          detail:
-            'sidebar lists Myra plus 1 "New Workbench" row from the picker mint',
+          detail: 'sidebar lists Myra plus 1 "New Workbench" row from the picker mint',
         };
       },
     );
@@ -1010,9 +928,7 @@ async function run(): Promise<void> {
             .then(() => true)
             .catch(() => false);
           if (!greeted) {
-            console.error(
-              `  --- hub output (tail) ---\n${hub.output().slice(-1500)}`,
-            );
+            console.error(`  --- hub output (tail) ---\n${hub.output().slice(-1500)}`);
             return {
               status: "fail",
               detail:
@@ -1030,17 +946,13 @@ async function run(): Promise<void> {
             // The greeting bubble is already there; wait for the answer —
             // a second agent bubble. A local 27B model can take a while.
             await page.waitForFunction(
-              () =>
-                document.querySelectorAll(
-                  'div.chat-bubble-row[data-own="false"]',
-                ).length >= 2,
+              () => document.querySelectorAll('div.chat-bubble-row[data-own="false"]').length >= 2,
               { timeout: 180_000 },
             );
           } else {
-            await page.waitForSelector(
-              'div.chat-bubble-row[data-own="false"]',
-              { timeout: 45_000 },
-            );
+            await page.waitForSelector('div.chat-bubble-row[data-own="false"]', {
+              timeout: 45_000,
+            });
           }
         } catch {
           const hubTail = hub.output().slice(-1500);
@@ -1063,9 +975,7 @@ async function run(): Promise<void> {
         if (live) {
           const bubbles = await page.evaluate(() =>
             Array.from(
-              document.querySelectorAll(
-                'div.chat-bubble-row[data-own="false"] p.chat-bubble-text',
-              ),
+              document.querySelectorAll('div.chat-bubble-row[data-own="false"] p.chat-bubble-text'),
             ).map((el) => el.textContent ?? ""),
           );
           const broken = bubbles.filter((text) =>
@@ -1117,8 +1027,7 @@ async function run(): Promise<void> {
         }
         return {
           status: "pass",
-          detail:
-            "Ctrl+T opens nothing — the removed New task dialog stayed removed",
+          detail: "Ctrl+T opens nothing — the removed New task dialog stayed removed",
         };
       },
     );
@@ -1158,12 +1067,9 @@ async function run(): Promise<void> {
         // Reopen the picker-minted "New Workbench" channel, not Myra's DM
         // (first land is titled Myra).
         const rowAppeared = await page
-          .waitForSelector(
-            '.shell-ch-row-wrap[data-ctx-workbench-title="New Workbench"]',
-            {
-              timeout: 15_000,
-            },
-          )
+          .waitForSelector('.shell-ch-row-wrap[data-ctx-workbench-title="New Workbench"]', {
+            timeout: 15_000,
+          })
           .then(() => true)
           .catch(() => false);
         if (!rowAppeared) {
@@ -1179,12 +1085,9 @@ async function run(): Promise<void> {
           '.shell-ch-row-wrap[data-ctx-workbench-title="New Workbench"] button.shell-ch-row',
         );
         const couldNotLoad = await page
-          .waitForFunction(
-            () => document.body.textContent?.includes("Couldn't load"),
-            {
-              timeout: 10_000,
-            },
-          )
+          .waitForFunction(() => document.body.textContent?.includes("Couldn't load"), {
+            timeout: 10_000,
+          })
           .then(() => true)
           .catch(() => false);
         if (couldNotLoad) {
@@ -1202,14 +1105,12 @@ async function run(): Promise<void> {
         if (composerReady) {
           return {
             status: "pass",
-            detail:
-              "existing chat reopened cleanly after a same-DB hub restart",
+            detail: "existing chat reopened cleanly after a same-DB hub restart",
           };
         }
         return {
           status: "fail",
-          detail:
-            "chat neither loaded normally nor showed the documented error state",
+          detail: "chat neither loaded normally nor showed the documented error state",
         };
       },
     );
@@ -1227,8 +1128,8 @@ async function run(): Promise<void> {
           timeout: 20_000,
         });
         await page.evaluate(() => {
-          const button = Array.from(document.querySelectorAll("button")).find(
-            (b) => (b.textContent ?? "").includes("New routine"),
+          const button = Array.from(document.querySelectorAll("button")).find((b) =>
+            (b.textContent ?? "").includes("New routine"),
           );
           (button as HTMLButtonElement | undefined)?.click();
         });
@@ -1270,12 +1171,8 @@ async function run(): Promise<void> {
           .catch(() => false);
 
         await page.evaluate(() => {
-          const select = document.querySelector<HTMLSelectElement>(
-            "#routine-panel-target",
-          );
-          const option = select?.querySelector<HTMLOptionElement>(
-            "option[value]:not([value=''])",
-          );
+          const select = document.querySelector<HTMLSelectElement>("#routine-panel-target");
+          const option = select?.querySelector<HTMLOptionElement>("option[value]:not([value=''])");
           if (select && option) {
             select.value = option.value;
             select.dispatchEvent(new Event("change", { bubbles: true }));
@@ -1339,28 +1236,18 @@ async function run(): Promise<void> {
         });
 
         const desktop = await page.evaluate(() => {
-          const grid = document.querySelector<HTMLElement>(
-            '[aria-label="Plugin catalog"]',
-          );
-          const filterGroup = document.querySelector(
-            '[aria-label="Plugin catalog filters"]',
-          );
+          const grid = document.querySelector<HTMLElement>('[aria-label="Plugin catalog"]');
+          const filterGroup = document.querySelector('[aria-label="Plugin catalog filters"]');
           if (grid === null || filterGroup === null) return null;
-          const cards = Array.from(
-            grid.querySelectorAll<HTMLElement>("[data-plugin-card]"),
-          );
+          const cards = Array.from(grid.querySelectorAll<HTMLElement>("[data-plugin-card]"));
           const lastCard = cards.at(-1);
           return {
             tablists: document.querySelectorAll('[role="tablist"]').length,
             filterTabs: filterGroup.querySelectorAll('[role="tab"]').length,
-            searchControls: document.querySelectorAll(
-              '[aria-label="Filter plugins"]',
-            ).length,
+            searchControls: document.querySelectorAll('[aria-label="Filter plugins"]').length,
             columns: getComputedStyle(grid).gridTemplateColumns,
             lastBorder:
-              lastCard === undefined
-                ? null
-                : getComputedStyle(lastCard).borderBottomWidth,
+              lastCard === undefined ? null : getComputedStyle(lastCard).borderBottomWidth,
           };
         });
         if (
@@ -1371,9 +1258,7 @@ async function run(): Promise<void> {
           desktop.columns.split(" ").length !== 2 ||
           desktop.lastBorder !== "0px"
         ) {
-          throw new Error(
-            `desktop catalog contract failed: ${JSON.stringify(desktop)}`,
-          );
+          throw new Error(`desktop catalog contract failed: ${JSON.stringify(desktop)}`);
         }
 
         const engineeringClicked = await page.evaluate(() => {
@@ -1388,25 +1273,18 @@ async function run(): Promise<void> {
           engineering?.click();
           return engineering !== undefined;
         });
-        if (!engineeringClicked)
-          throw new Error("Engineering chip was not found");
+        if (!engineeringClicked) throw new Error("Engineering chip was not found");
         await page.waitForFunction(
           () =>
-            document.querySelectorAll(
-              '[aria-label="Plugin catalog"] [data-plugin-card]',
-            ).length === 6,
+            document.querySelectorAll('[aria-label="Plugin catalog"] [data-plugin-card]').length ===
+            6,
         );
         const evenFinalRowBorders = await page.$$eval(
           '[aria-label="Plugin catalog"] [data-plugin-card]',
-          (cards) =>
-            cards
-              .slice(-2)
-              .map((card) => getComputedStyle(card).borderBottomWidth),
+          (cards) => cards.slice(-2).map((card) => getComputedStyle(card).borderBottomWidth),
         );
         if (evenFinalRowBorders.some((border) => border !== "0px")) {
-          throw new Error(
-            `even final row borders failed: ${JSON.stringify(evenFinalRowBorders)}`,
-          );
+          throw new Error(`even final row borders failed: ${JSON.stringify(evenFinalRowBorders)}`);
         }
 
         const researchClicked = await page.evaluate(() => {
@@ -1423,42 +1301,31 @@ async function run(): Promise<void> {
         });
         if (!researchClicked) throw new Error("Research chip was not found");
         await page.waitForFunction(() => {
-          const cards = Array.from(
-            document.querySelectorAll<HTMLElement>("[data-plugin-name]"),
-          );
+          const cards = Array.from(document.querySelectorAll<HTMLElement>("[data-plugin-name]"));
           return (
             cards.length === 3 &&
             cards.every((card) =>
-              ["Exa", "Sumble", "ScrapeCreators"].includes(
-                card.dataset.pluginName ?? "",
-              ),
+              ["Exa", "Sumble", "ScrapeCreators"].includes(card.dataset.pluginName ?? ""),
             )
           );
         });
         const oddFinalRowBorders = await page.$$eval(
           '[aria-label="Plugin catalog"] [data-plugin-card]',
-          (cards) =>
-            cards
-              .slice(-2)
-              .map((card) => getComputedStyle(card).borderBottomWidth),
+          (cards) => cards.slice(-2).map((card) => getComputedStyle(card).borderBottomWidth),
         );
         if (
           oddFinalRowBorders.length !== 2 ||
           oddFinalRowBorders[0] === "0px" ||
           oddFinalRowBorders[1] !== "0px"
         ) {
-          throw new Error(
-            `odd final row borders failed: ${JSON.stringify(oddFinalRowBorders)}`,
-          );
+          throw new Error(`odd final row borders failed: ${JSON.stringify(oddFinalRowBorders)}`);
         }
 
         await page.click('button[aria-label="Filter plugins"]');
         await page.waitForSelector('input[aria-label="Filter plugins"]');
         await page.type('input[aria-label="Filter plugins"]', "live web");
         await page.waitForFunction(() => {
-          const cards = Array.from(
-            document.querySelectorAll<HTMLElement>("[data-plugin-name]"),
-          );
+          const cards = Array.from(document.querySelectorAll<HTMLElement>("[data-plugin-name]"));
           return cards.length === 1 && cards[0]?.dataset.pluginName === "Exa";
         });
 
@@ -1468,9 +1335,7 @@ async function run(): Promise<void> {
           (grid) => getComputedStyle(grid).gridTemplateColumns,
         );
         if (narrowColumns.split(" ").length !== 1) {
-          throw new Error(
-            `narrow catalog rendered ${narrowColumns} instead of one column`,
-          );
+          throw new Error(`narrow catalog rendered ${narrowColumns} instead of one column`);
         }
 
         return {
@@ -1483,9 +1348,7 @@ async function run(): Promise<void> {
   } finally {
     for (const cleanup of cleanups.splice(0).reverse()) {
       await cleanup().catch((error) => {
-        console.error(
-          `cleanup failed: ${error instanceof Error ? error.message : error}`,
-        );
+        console.error(`cleanup failed: ${error instanceof Error ? error.message : error}`);
       });
     }
     await rm(workDir, { recursive: true, force: true }).catch(() => undefined);
@@ -1517,9 +1380,7 @@ async function main(): Promise<void> {
   }
   const failed = results.filter((r) => r.status === "fail");
   if (failed.length > 0) {
-    console.error(
-      `\n${failed.length} step(s) failed outright (not just repro-confirmed).`,
-    );
+    console.error(`\n${failed.length} step(s) failed outright (not just repro-confirmed).`);
     process.exit(1);
   }
 }
diff --git a/scripts/e2e/channel-reconnect.test.ts b/scripts/e2e/channel-reconnect.test.ts
index 75f062db7a..cc1ba63e0a 100644
--- a/scripts/e2e/channel-reconnect.test.ts
+++ b/scripts/e2e/channel-reconnect.test.ts
@@ -17,10 +17,7 @@
 import { beforeAll, describe, expect, test } from "bun:test";
 
 import { seedCatalog } from "../../packages/connections/src/seed-catalog.ts";
-import {
-  createHubAPI,
-  type ApiCall,
-} from "../../packages/hub-api-client/src/index.ts";
+import { createHubAPI, type ApiCall } from "../../packages/hub-api-client/src/index.ts";
 import type { Part } from "../../packages/chat/src/index.ts";
 
 import { resetSchema, setupDatabase } from "../db-setup.ts";
@@ -48,9 +45,7 @@ function stringField(data: unknown, field: string, what: string): string {
     const value = (data as Record<string, unknown>)[field];
     if (typeof value === "string" && value !== "") return value;
   }
-  throw new Error(
-    `${what}: missing string field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing string field "${field}": ${JSON.stringify(data)}`);
 }
 
 function arrayField(data: unknown, field: string, what: string): unknown[] {
@@ -58,9 +53,7 @@ function arrayField(data: unknown, field: string, what: string): unknown[] {
     const value = (data as Record<string, unknown>)[field];
     if (Array.isArray(value)) return value;
   }
-  throw new Error(
-    `${what}: missing array field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing array field "${field}": ${JSON.stringify(data)}`);
 }
 
 type ListedMessage = { id: string; parts: Part[] };
@@ -90,9 +83,7 @@ describe.skipIf(databaseUrl === undefined)("workbench reconnect e2e", () => {
     expect(report.migrations).toBeGreaterThan(0);
 
     hubPort = freePort();
-    sessionSecret = Buffer.from(
-      crypto.getRandomValues(new Uint8Array(32)),
-    ).toString("hex");
+    sessionSecret = Buffer.from(crypto.getRandomValues(new Uint8Array(32))).toString("hex");
 
     hub = await startHub({
       databaseUrl: url,
@@ -137,23 +128,14 @@ describe.skipIf(databaseUrl === undefined)("workbench reconnect e2e", () => {
     });
   }, 120_000);
 
-  async function createWorkbench(
-    body: Record<string, unknown>,
-  ): Promise<ApiResult> {
+  async function createWorkbench(body: Record<string, unknown>): Promise<ApiResult> {
     const deadline = Date.now() + 60_000;
     let res: ApiResult;
     for (;;) {
       if (hub.exited()) {
-        throw new Error(
-          `hub exited before workbench creation; output:\n${hub.output()}`,
-        );
+        throw new Error(`hub exited before workbench creation; output:\n${hub.output()}`);
       }
-      res = await api(
-        "POST",
-        `/api/tenants/${tenantId}/chat/workbenches`,
-        body,
-        cookies,
-      );
+      res = await api("POST", `/api/tenants/${tenantId}/chat/workbenches`, body, cookies);
       if (res.status !== 500) break;
       if (Date.now() > deadline) {
         throw new Error(
@@ -183,11 +165,7 @@ describe.skipIf(databaseUrl === undefined)("workbench reconnect e2e", () => {
       cookies,
     );
     expectStatus("list messages", res, 200);
-    return arrayField(
-      res.data,
-      "items",
-      "list messages",
-    ) as unknown as ListedMessage[];
+    return arrayField(res.data, "items", "list messages") as unknown as ListedMessage[];
   }
 
   test("workbench creation launches the anchor", async () => {
@@ -254,9 +232,7 @@ describe.skipIf(databaseUrl === undefined)("workbench reconnect e2e", () => {
     let posted: ApiResult;
     for (;;) {
       if (hub.exited()) {
-        throw new Error(
-          `hub exited after hub restart; output:\n${hub.output()}`,
-        );
+        throw new Error(`hub exited after hub restart; output:\n${hub.output()}`);
       }
       posted = await postMessage(after);
       if (posted.status === 201) break;
diff --git a/scripts/e2e/chat.test.ts b/scripts/e2e/chat.test.ts
index f2580a0cee..33e1000d06 100644
--- a/scripts/e2e/chat.test.ts
+++ b/scripts/e2e/chat.test.ts
@@ -44,15 +44,9 @@ import { beforeAll, describe, expect, test } from "bun:test";
 
 import { seedCatalog } from "../../packages/connections/src/seed-catalog.ts";
 import { createGitWorkflowPusher } from "../../packages/connections/src/workflow-push.ts";
-import {
-  createHubAPI,
-  type ApiCall,
-} from "../../packages/hub-api-client/src/index.ts";
+import { createHubAPI, type ApiCall } from "../../packages/hub-api-client/src/index.ts";
 import type { Part } from "../../packages/chat/src/index.ts";
-import {
-  DEFAULT_WORKFLOWS,
-  seedTenant,
-} from "../../packages/onboarding/src/tenant-seed.ts";
+import { DEFAULT_WORKFLOWS, seedTenant } from "../../packages/onboarding/src/tenant-seed.ts";
 import { modelSourceFor } from "../../packages/onboarding/src/complete-credential.ts";
 import { publishCorbitsToolsRegistry } from "../../packages/tool-registry-publish/src/publish.ts";
 
@@ -81,25 +75,17 @@ function stringField(data: unknown, field: string, what: string): string {
     const value = (data as Record<string, unknown>)[field];
     if (typeof value === "string" && value !== "") return value;
   }
-  throw new Error(
-    `${what}: missing string field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing string field "${field}": ${JSON.stringify(data)}`);
 }
 
-function objectField(
-  data: unknown,
-  field: string,
-  what: string,
-): Record<string, unknown> {
+function objectField(data: unknown, field: string, what: string): Record<string, unknown> {
   if (typeof data === "object" && data !== null && field in data) {
     const value = (data as Record<string, unknown>)[field];
     if (typeof value === "object" && value !== null) {
       return value as Record<string, unknown>;
     }
   }
-  throw new Error(
-    `${what}: missing object field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing object field "${field}": ${JSON.stringify(data)}`);
 }
 
 function arrayField(data: unknown, field: string, what: string): unknown[] {
@@ -107,9 +93,7 @@ function arrayField(data: unknown, field: string, what: string): unknown[] {
     const value = (data as Record<string, unknown>)[field];
     if (Array.isArray(value)) return value;
   }
-  throw new Error(
-    `${what}: missing array field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing array field "${field}": ${JSON.stringify(data)}`);
 }
 
 const { tempDir, track } = createCleanupHarness();
@@ -177,12 +161,7 @@ describe.skipIf(databaseUrl === undefined)("chat e2e", () => {
   // fixture rather than sharing the `beforeAll` tenant.
   async function setupTenant(): Promise<TenantFixture> {
     const slug = `chate2e${crypto.randomUUID().slice(0, 8)}`;
-    const created = await api(
-      "POST",
-      "/api/tenants",
-      { name: "Chat E2E", slug },
-      user1.cookies,
-    );
+    const created = await api("POST", "/api/tenants", { name: "Chat E2E", slug }, user1.cookies);
     expectStatus("create tenant", created, 201);
     const fixtureTenantId = stringField(created.data, "id", "create tenant");
     const fixtureDomain = stringField(created.data, "domain", "create tenant");
@@ -209,9 +188,7 @@ describe.skipIf(databaseUrl === undefined)("chat e2e", () => {
       user1.cookies,
     );
     expectStatus("activate user2", activated, 200);
-    expect(stringField(activated.data, "status", "activate user2")).toBe(
-      "active",
-    );
+    expect(stringField(activated.data, "status", "activate user2")).toBe("active");
 
     async function plantGrant(
       principalId: string,
@@ -259,12 +236,9 @@ describe.skipIf(databaseUrl === undefined)("chat e2e", () => {
       user1.cookies,
     );
     expectStatus("list tenant principals", principalsListed, 200);
-    const owner = arrayField(
-      principalsListed.data,
-      "data",
-      "list tenant principals",
-    ).find((row) => (row as { refId?: unknown }).refId === user1.userId) as
-      { id: string } | undefined;
+    const owner = arrayField(principalsListed.data, "data", "list tenant principals").find(
+      (row) => (row as { refId?: unknown }).refId === user1.userId,
+    ) as { id: string } | undefined;
     if (owner === undefined) {
       throw new Error(
         `no owner principal for user1 in tenant ${fixtureTenantId}: ` +
@@ -295,18 +269,15 @@ describe.skipIf(databaseUrl === undefined)("chat e2e", () => {
         user1.cookies,
       );
       if (res.status === 200) {
-        const items = arrayField(
-          res.data,
-          "items",
-          "list invitable definitions",
-        ) as { id: string; name: string }[];
+        const items = arrayField(res.data, "items", "list invitable definitions") as {
+          id: string;
+          name: string;
+        }[];
         const assistant = items.find((item) => item.name === "assistant");
         if (assistant !== undefined) return assistant.id;
       }
       if (Date.now() > deadline) {
-        throw new Error(
-          `"assistant" never appeared as invitable: ${JSON.stringify(res.data)}`,
-        );
+        throw new Error(`"assistant" never appeared as invitable: ${JSON.stringify(res.data)}`);
       }
       await Bun.sleep(1000);
     }
@@ -323,9 +294,7 @@ describe.skipIf(databaseUrl === undefined)("chat e2e", () => {
     const deadline = Date.now() + 120_000;
     for (;;) {
       if (hub.exited()) {
-        throw new Error(
-          `hub exited before assistant deploy; output:\n${hub.output()}`,
-        );
+        throw new Error(`hub exited before assistant deploy; output:\n${hub.output()}`);
       }
       try {
         // CL-7071 cutover: seeding no longer packs, and a launched
@@ -357,12 +326,7 @@ describe.skipIf(databaseUrl === undefined)("chat e2e", () => {
             principalId: fixture.ownerPrincipalId,
             domain: fixture.domain,
           },
-          model: await modelSourceFor(
-            api,
-            user1.cookies,
-            fixture.tenantId,
-            "anthropic",
-          ),
+          model: await modelSourceFor(api, user1.cookies, fixture.tenantId, "anthropic"),
           pushWorkflow,
           log: () => undefined,
           workflows: DEFAULT_WORKFLOWS,
@@ -391,9 +355,7 @@ describe.skipIf(databaseUrl === undefined)("chat e2e", () => {
     hub = await startHub({
       databaseUrl: url,
       port: freePort(),
-      sessionSecret: Buffer.from(
-        crypto.getRandomValues(new Uint8Array(32)),
-      ).toString("hex"),
+      sessionSecret: Buffer.from(crypto.getRandomValues(new Uint8Array(32))).toString("hex"),
       dataDir: await tempDir("e2e-chat-hub-data-"),
     });
     track(hub);
@@ -431,16 +393,9 @@ describe.skipIf(databaseUrl === undefined)("chat e2e", () => {
     let res: ApiResult;
     for (;;) {
       if (hub.exited()) {
-        throw new Error(
-          `hub exited before workbench creation; output:\n${hub.output()}`,
-        );
+        throw new Error(`hub exited before workbench creation; output:\n${hub.output()}`);
       }
-      res = await api(
-        "POST",
-        `/api/tenants/${forTenant}/chat/workbenches`,
-        body,
-        user1.cookies,
-      );
+      res = await api("POST", `/api/tenants/${forTenant}/chat/workbenches`, body, user1.cookies);
       if (res.status !== 500) break;
       if (Date.now() > deadline) {
         throw new Error(
@@ -481,11 +436,7 @@ describe.skipIf(databaseUrl === undefined)("chat e2e", () => {
       cookies,
     );
     expectStatus("list messages", res, 200);
-    return arrayField(
-      res.data,
-      "items",
-      "list messages",
-    ) as unknown as ListedMessage[];
+    return arrayField(res.data, "items", "list messages") as unknown as ListedMessage[];
   }
 
   type RunEvent = { seq: number; type: string };
@@ -512,11 +463,7 @@ describe.skipIf(databaseUrl === undefined)("chat e2e", () => {
       cookies,
     );
     expectStatus(`list run events for ${runId}`, res, 200);
-    return arrayField(
-      res.data,
-      "events",
-      `run events for ${runId}`,
-    ) as unknown as RunEvent[];
+    return arrayField(res.data, "events", `run events for ${runId}`) as unknown as RunEvent[];
   }
 
   function highestSeq(events: readonly RunEvent[]): number {
@@ -564,8 +511,7 @@ describe.skipIf(databaseUrl === undefined)("chat e2e", () => {
     const items = await listMessages(user1.cookies, workbenchId);
     const texts = items.map((item) => ({
       text: (
-        item.parts.find((p) => p.kind === "text") as
-          { kind: "text"; text: string } | undefined
+        item.parts.find((p) => p.kind === "text") as { kind: "text"; text: string } | undefined
       )?.text,
       senderAddress: item.sender.address,
     }));
@@ -573,9 +519,7 @@ describe.skipIf(databaseUrl === undefined)("chat e2e", () => {
     const foundUser1 = texts.find((t) => t.text === firstFromUser1);
     const foundUser2 = texts.find((t) => t.text === firstFromUser2);
     if (foundUser1 === undefined || foundUser2 === undefined) {
-      throw new Error(
-        `converged timeline missing a message: ${JSON.stringify(items)}`,
-      );
+      throw new Error(`converged timeline missing a message: ${JSON.stringify(items)}`);
     }
     // Each message carries a sender identity distinct per author — the
     // address is the platform's own per-principal mail identity (not
@@ -630,9 +574,7 @@ describe.skipIf(databaseUrl === undefined)("chat e2e", () => {
       user1.cookies,
     );
     expectStatus("get user1 read-state", gotUser1, 200);
-    expect(stringField(gotUser1.data, "lastSeenId", "user1 read-state")).toBe(
-      seenId,
-    );
+    expect(stringField(gotUser1.data, "lastSeenId", "user1 read-state")).toBe(seenId);
 
     const gotUser2 = await api(
       "GET",
@@ -641,9 +583,7 @@ describe.skipIf(databaseUrl === undefined)("chat e2e", () => {
       user2.cookies,
     );
     expectStatus("get user2 read-state", gotUser2, 200);
-    expect((gotUser2.data as { lastSeenId: string | null }).lastSeenId).toBe(
-      null,
-    );
+    expect((gotUser2.data as { lastSeenId: string | null }).lastSeenId).toBe(null);
   });
 
   // Stock Interchange cutover: one workbench per conversation tenant,
@@ -682,11 +622,7 @@ describe.skipIf(databaseUrl === undefined)("chat e2e", () => {
       mention.tenantId,
     );
     expectStatus("create mention fan-out room", mentionRoom, 201);
-    const mentionRoomId = stringField(
-      mentionRoom.data,
-      "id",
-      "create mention fan-out room",
-    );
+    const mentionRoomId = stringField(mentionRoom.data, "id", "create mention fan-out room");
 
     const invited = await api(
       "POST",
@@ -751,11 +687,7 @@ describe.skipIf(databaseUrl === undefined)("chat e2e", () => {
       undefined,
       user1.cookies,
     );
-    expectStatus(
-      "get settings after second mention",
-      settingsAfterSecondMention,
-      200,
-    );
+    expectStatus("get settings after second mention", settingsAfterSecondMention, 200);
     const participantsAfterSecondMention = arrayField(
       settingsAfterSecondMention.data,
       "participants",
@@ -778,14 +710,8 @@ describe.skipIf(databaseUrl === undefined)("chat e2e", () => {
       user1.cookies,
     );
     expectStatus("invite assistant", invited, 201);
-    const invitedAddress = stringField(
-      invited.data,
-      "address",
-      "invite assistant",
-    );
-    expect(stringField(invited.data, "definitionId", "invite assistant")).toBe(
-      assistantId,
-    );
+    const invitedAddress = stringField(invited.data, "address", "invite assistant");
+    expect(stringField(invited.data, "definitionId", "invite assistant")).toBe(assistantId);
     const invitedLocalPart = invitedAddress.split("@")[0];
     if (invitedLocalPart === undefined || invitedLocalPart === "") {
       throw new Error(`malformed invited agent address: ${invitedAddress}`);
@@ -845,11 +771,7 @@ describe.skipIf(databaseUrl === undefined)("chat e2e", () => {
     const mentionText = `hey @${invitedParticipant.handle} welcome ${crypto.randomUUID()}`;
     await postMessage(user1.cookies, workbenchId, mentionText);
 
-    const fresh = await waitForRunProgress(
-      user1.cookies,
-      invitedLocalPart,
-      before,
-    );
+    const fresh = await waitForRunProgress(user1.cookies, invitedLocalPart, before);
     expect(fresh.length).toBeGreaterThan(0);
   }, 90_000);
 
@@ -875,16 +797,13 @@ describe.skipIf(databaseUrl === undefined)("chat e2e", () => {
     expect(stringField(chatCreated.data, "kind", "create chat")).toBe("chat");
     expect(stringField(chatCreated.data, "title", "create chat")).toBe("Myra");
     const chatId = stringField(chatCreated.data, "id", "create chat");
-    const chatParticipants = arrayField(
-      chatCreated.data,
-      "participants",
-      "create chat",
-    ) as { address: string; handle: string }[];
+    const chatParticipants = arrayField(chatCreated.data, "participants", "create chat") as {
+      address: string;
+      handle: string;
+    }[];
     const chatAgent = chatParticipants.find((p) => p.handle === "myra");
     if (chatAgent === undefined) {
-      throw new Error(
-        `chat has no "myra" agent participant: ${JSON.stringify(chatParticipants)}`,
-      );
+      throw new Error(`chat has no "myra" agent participant: ${JSON.stringify(chatParticipants)}`);
     }
     const chatAgentLocalPart = chatAgent.address.split("@")[0];
     if (chatAgentLocalPart === undefined || chatAgentLocalPart === "") {
@@ -896,9 +815,7 @@ describe.skipIf(databaseUrl === undefined)("chat e2e", () => {
     // placeholder key in CI, so its reply attempt is expected to error
     // and is never asserted here — only that the fan-out mail reached
     // it.
-    const before = highestSeq(
-      await runEvents(user1.cookies, chatAgentLocalPart, direct.tenantId),
-    );
+    const before = highestSeq(await runEvents(user1.cookies, chatAgentLocalPart, direct.tenantId));
     const unmentionedText = `no mention needed ${crypto.randomUUID()}`;
     await postMessage(user1.cookies, chatId, unmentionedText, direct.tenantId);
 
@@ -951,11 +868,9 @@ describe.skipIf(databaseUrl === undefined)("chat e2e", () => {
       user1.cookies,
     );
     expectStatus("list kind=chat", chatKindListed, 200);
-    const chatKindIds = arrayField(
-      chatKindListed.data,
-      "items",
-      "list kind=chat",
-    ).map((item) => (item as { id: string }).id);
+    const chatKindIds = arrayField(chatKindListed.data, "items", "list kind=chat").map(
+      (item) => (item as { id: string }).id,
+    );
     // The tenant's one row is a room, so the chat listing is empty —
     // the filter never leaks a workbench into the other kind's view.
     expect(chatKindIds).not.toContain(roomId);
@@ -1027,17 +942,14 @@ describe.skipIf(databaseUrl === undefined)("chat e2e", () => {
       user1.cookies,
     );
     expectStatus("get settings", fetched, 200);
-    const participants = arrayField(
-      fetched.data,
-      "participants",
-      "get settings",
-    ) as { address: string; handle: string }[];
+    const participants = arrayField(fetched.data, "participants", "get settings") as {
+      address: string;
+      handle: string;
+    }[];
     expect(participants.some((p) => p.address === newParticipant)).toBe(true);
 
     const items = await listMessages(user1.cookies, workbenchId);
-    const events = items.flatMap((item) =>
-      item.parts.filter((p) => p.kind === "event"),
-    );
+    const events = items.flatMap((item) => item.parts.filter((p) => p.kind === "event"));
     const membershipEvent = events.find(
       (e) => (e as { event: string }).event === "workbench.membership-changed",
     );
diff --git a/scripts/e2e/cl-6324-launch-proof.ts b/scripts/e2e/cl-6324-launch-proof.ts
index 50093a595e..db945e0784 100644
--- a/scripts/e2e/cl-6324-launch-proof.ts
+++ b/scripts/e2e/cl-6324-launch-proof.ts
@@ -31,14 +31,8 @@ import { join as pathJoin } from "node:path";
 import { headlineFor } from "../../packages/approvals/src/headline.ts";
 import { resetSchema, setupDatabase } from "../db-setup.ts";
 import { createGitWorkflowPusher } from "../../packages/connections/src/workflow-push.ts";
-import {
-  DEFAULT_WORKFLOWS,
-  seedTenant,
-} from "../../packages/onboarding/src/tenant-seed.ts";
-import {
-  createHubAPI,
-  type ApiCall,
-} from "../../packages/hub-api-client/src/index.ts";
+import { DEFAULT_WORKFLOWS, seedTenant } from "../../packages/onboarding/src/tenant-seed.ts";
+import { createHubAPI, type ApiCall } from "../../packages/hub-api-client/src/index.ts";
 import { WORKFLOW_SOURCE_ENTRY } from "../../packages/workflows/src/source.ts";
 import {
   agentRuntimeTurnRunId,
@@ -138,9 +132,7 @@ function stringField(data: unknown, field: string, what: string): string {
     const value = (data as Record<string, unknown>)[field];
     if (typeof value === "string" && value !== "") return value;
   }
-  throw new Error(
-    `${what}: missing string field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing string field "${field}": ${JSON.stringify(data)}`);
 }
 
 function arrayField(data: unknown, field: string, what: string): unknown[] {
@@ -148,9 +140,7 @@ function arrayField(data: unknown, field: string, what: string): unknown[] {
     const value = (data as Record<string, unknown>)[field];
     if (Array.isArray(value)) return value;
   }
-  throw new Error(
-    `${what}: missing array field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing array field "${field}": ${JSON.stringify(data)}`);
 }
 
 async function signUp(
@@ -205,9 +195,7 @@ async function main(): Promise<void> {
     startHub({
       databaseUrl: url,
       port: freePort(),
-      sessionSecret: Buffer.from(
-        crypto.getRandomValues(new Uint8Array(32)),
-      ).toString("hex"),
+      sessionSecret: Buffer.from(crypto.getRandomValues(new Uint8Array(32))).toString("hex"),
       dataDir: await tempDir("cl6324-hub-data-"),
     }),
   );
@@ -264,39 +252,28 @@ async function main(): Promise<void> {
     return { cookies: res.cookies, userId };
   });
 
-  const user = await hop("sign up", async () =>
-    signUp(hub.baseUrl, "CL-6324 Proof"),
-  );
+  const user = await hop("sign up", async () => signUp(hub.baseUrl, "CL-6324 Proof"));
 
-  const provisioned = await hop(
-    "a membership probe joins the genesis root",
-    async () => {
-      const res = await api(
-        hub.baseUrl,
-        "POST",
-        "/api/onboarding/provision",
-        undefined,
-        user.cookies,
-      );
-      expectStatus("provision probe", res, 200);
-      const data = res.data as { kind: string; tenantSlug: string };
-      expect(data.kind).toBe("existing-member");
-      return data;
-    },
-  );
+  const provisioned = await hop("a membership probe joins the genesis root", async () => {
+    const res = await api(
+      hub.baseUrl,
+      "POST",
+      "/api/onboarding/provision",
+      undefined,
+      user.cookies,
+    );
+    expectStatus("provision probe", res, 200);
+    const data = res.data as { kind: string; tenantSlug: string };
+    expect(data.kind).toBe("existing-member");
+    return data;
+  });
 
   // A joined member is read-only by design, so every owner-level leg
   // below runs as alice, the genesis owner.
   const tenant = await hop("joined root resolves", async () => {
-    const found = await findPersonalTenant(
-      hubApi,
-      admin.cookies,
-      provisioned.tenantSlug,
-    );
+    const found = await findPersonalTenant(hubApi, admin.cookies, provisioned.tenantSlug);
     if (found === undefined) {
-      throw new Error(
-        `findPersonalTenant found nothing for slug ${provisioned.tenantSlug}`,
-      );
+      throw new Error(`findPersonalTenant found nothing for slug ${provisioned.tenantSlug}`);
     }
     return found;
   });
@@ -315,9 +292,7 @@ async function main(): Promise<void> {
       log: () => undefined,
     });
     if (result.kind !== "connected") {
-      throw new Error(
-        `expected the key-path connect to succeed, got: ${JSON.stringify(result)}`,
-      );
+      throw new Error(`expected the key-path connect to succeed, got: ${JSON.stringify(result)}`);
     }
     return result;
   });
@@ -351,9 +326,7 @@ async function main(): Promise<void> {
       const deadline = Date.now() + 180_000;
       for (;;) {
         if (sidecar.exited()) {
-          throw new Error(
-            `sidecar exited before the seed finished; output:\n${sidecar.output()}`,
-          );
+          throw new Error(`sidecar exited before the seed finished; output:\n${sidecar.output()}`);
         }
         try {
           await seedTenant({
@@ -410,77 +383,72 @@ async function main(): Promise<void> {
   // on purpose, so it narrows the bench's own catalog to that model
   // through the catalog API rather than leaving the turn's model to a
   // coin flip the proof is not about.
-  const pinnedOfferingId = await hop(
-    "narrow the bench catalog to the pinned model",
-    async () => {
-      await plantGrant("model-offering:*", "read");
-      await plantGrant("model-offering:*", "manage");
-      await plantGrant("model:*", "read");
+  const pinnedOfferingId = await hop("narrow the bench catalog to the pinned model", async () => {
+    await plantGrant("model-offering:*", "read");
+    await plantGrant("model-offering:*", "manage");
+    await plantGrant("model:*", "read");
 
-      const models = await api(
-        hub.baseUrl,
-        "GET",
-        `/api/tenants/${tenant.tenantId}/catalog/models?limit=200`,
-        undefined,
-        admin.cookies,
-      );
-      expectStatus("list the bench catalog models", models, 200);
-      const modelRows = arrayField(models.data, "data", "catalog models") as {
-        id: string;
-        canonicalName: string;
-      }[];
-      const pinned = modelRows.find(
-        (row) => row.canonicalName === proofModelSource.model,
+    const models = await api(
+      hub.baseUrl,
+      "GET",
+      `/api/tenants/${tenant.tenantId}/catalog/models?limit=200`,
+      undefined,
+      admin.cookies,
+    );
+    expectStatus("list the bench catalog models", models, 200);
+    const modelRows = arrayField(models.data, "data", "catalog models") as {
+      id: string;
+      canonicalName: string;
+    }[];
+    const pinned = modelRows.find((row) => row.canonicalName === proofModelSource.model);
+    if (pinned === undefined) {
+      throw new Error(
+        `the bench catalog carries no model named ${proofModelSource.model}; ` +
+          `it has ${JSON.stringify(modelRows.map((m) => m.canonicalName))}`,
       );
-      if (pinned === undefined) {
-        throw new Error(
-          `the bench catalog carries no model named ${proofModelSource.model}; ` +
-            `it has ${JSON.stringify(modelRows.map((m) => m.canonicalName))}`,
-        );
-      }
+    }
 
-      const offerings = await api(
+    const offerings = await api(
+      hub.baseUrl,
+      "GET",
+      `/api/tenants/${tenant.tenantId}/catalog/offerings?limit=200`,
+      undefined,
+      admin.cookies,
+    );
+    expectStatus("list the bench model offerings", offerings, 200);
+    const offeringRows = arrayField(offerings.data, "data", "model offerings") as {
+      id: string;
+      modelId: string;
+      disabled: boolean;
+    }[];
+    let pinnedOffering: { id: string; modelId: string } | undefined;
+    for (const offering of offeringRows) {
+      if (offering.modelId === pinned.id) {
+        pinnedOffering = offering;
+        continue;
+      }
+      if (offering.disabled) continue;
+      const patched = await api(
         hub.baseUrl,
-        "GET",
-        `/api/tenants/${tenant.tenantId}/catalog/offerings?limit=200`,
-        undefined,
+        "PATCH",
+        `/api/tenants/${tenant.tenantId}/catalog/offerings/${offering.id}`,
+        { disabled: true },
         admin.cookies,
       );
-      expectStatus("list the bench model offerings", offerings, 200);
-      const offeringRows = arrayField(
-        offerings.data,
-        "data",
-        "model offerings",
-      ) as { id: string; modelId: string; disabled: boolean }[];
-      let pinnedOffering: { id: string; modelId: string } | undefined;
-      for (const offering of offeringRows) {
-        if (offering.modelId === pinned.id) {
-          pinnedOffering = offering;
-          continue;
-        }
-        if (offering.disabled) continue;
-        const patched = await api(
-          hub.baseUrl,
-          "PATCH",
-          `/api/tenants/${tenant.tenantId}/catalog/offerings/${offering.id}`,
-          { disabled: true },
-          admin.cookies,
-        );
-        expectStatus(`disable offering ${offering.id}`, patched, 200);
-      }
-      if (pinnedOffering === undefined) {
-        throw new Error(
-          `no catalog offering resolves the pinned model ${proofModelSource.model} ` +
-            `(id ${pinned.id})`,
-        );
-      }
-      console.log(
-        `  TRANSCRIPT — bench catalog narrowed to ${proofModelSource.model} ` +
-          `(${String(offeringRows.length - 1)} other offerings disabled)`,
+      expectStatus(`disable offering ${offering.id}`, patched, 200);
+    }
+    if (pinnedOffering === undefined) {
+      throw new Error(
+        `no catalog offering resolves the pinned model ${proofModelSource.model} ` +
+          `(id ${pinned.id})`,
       );
-      return pinnedOffering.id;
-    },
-  );
+    }
+    console.log(
+      `  TRANSCRIPT — bench catalog narrowed to ${proofModelSource.model} ` +
+        `(${String(offeringRows.length - 1)} other offerings disabled)`,
+    );
+    return pinnedOffering.id;
+  });
 
   const assistantDefinitionId = await hop(
     "PROOF 1 — 'assistant' is invitable tenant-wide",
@@ -503,9 +471,7 @@ async function main(): Promise<void> {
           if (assistant !== undefined) return assistant.id;
         }
         if (Date.now() > deadline) {
-          throw new Error(
-            `"assistant" never became invitable: ${JSON.stringify(res.data)}`,
-          );
+          throw new Error(`"assistant" never became invitable: ${JSON.stringify(res.data)}`);
         }
         await Bun.sleep(1000);
       }
@@ -516,55 +482,45 @@ async function main(): Promise<void> {
   const { chatId, agentAddress, agentRunId } = await timed(
     "proof 2: mint → probe → closure materialization",
     () =>
-      hop(
-        "PROOF 2 — POST /workbenches mints a chat with its agent joined",
-        async () => {
-          const deadline = Date.now() + 120_000;
-          let res: ApiResult;
-          for (;;) {
-            if (sidecar.exited()) {
-              throw new Error(
-                `sidecar exited before chat creation; output:\n${sidecar.output()}`,
-              );
-            }
-            res = await api(
-              hub.baseUrl,
-              "POST",
-              `/api/tenants/${tenant.tenantId}/chat/workbenches`,
-              { kind: "chat", definitionId: assistantDefinitionId },
-              admin.cookies,
-            );
-            if (res.status !== 500) break;
-            if (Date.now() > deadline) {
-              throw new Error(
-                `chat never became mintable: ${JSON.stringify(res.data)}\n` +
-                  `sidecar output:\n${sidecar.output()}`,
-              );
-            }
-            await Bun.sleep(1000);
-          }
-          expectStatus("create chat", res, 201);
-          const id = stringField(res.data, "id", "create chat");
-          const participants = arrayField(
-            res.data,
-            "participants",
-            "create chat",
-          ) as { address: string; handle: string }[];
-          const agent = participants.find((p) => p.handle === "myra");
-          if (agent === undefined) {
-            throw new Error(
-              `chat has no "myra" participant: ${JSON.stringify(participants)}`,
-            );
+      hop("PROOF 2 — POST /workbenches mints a chat with its agent joined", async () => {
+        const deadline = Date.now() + 120_000;
+        let res: ApiResult;
+        for (;;) {
+          if (sidecar.exited()) {
+            throw new Error(`sidecar exited before chat creation; output:\n${sidecar.output()}`);
           }
-          const [runId] = agent.address.split("@");
-          if (runId === undefined) {
+          res = await api(
+            hub.baseUrl,
+            "POST",
+            `/api/tenants/${tenant.tenantId}/chat/workbenches`,
+            { kind: "chat", definitionId: assistantDefinitionId },
+            admin.cookies,
+          );
+          if (res.status !== 500) break;
+          if (Date.now() > deadline) {
             throw new Error(
-              `agent address is not a run address: ${agent.address}`,
+              `chat never became mintable: ${JSON.stringify(res.data)}\n` +
+                `sidecar output:\n${sidecar.output()}`,
             );
           }
-          return { chatId: id, agentAddress: agent.address, agentRunId: runId };
-        },
-      ),
+          await Bun.sleep(1000);
+        }
+        expectStatus("create chat", res, 201);
+        const id = stringField(res.data, "id", "create chat");
+        const participants = arrayField(res.data, "participants", "create chat") as {
+          address: string;
+          handle: string;
+        }[];
+        const agent = participants.find((p) => p.handle === "myra");
+        if (agent === undefined) {
+          throw new Error(`chat has no "myra" participant: ${JSON.stringify(participants)}`);
+        }
+        const [runId] = agent.address.split("@");
+        if (runId === undefined) {
+          throw new Error(`agent address is not a run address: ${agent.address}`);
+        }
+        return { chatId: id, agentAddress: agent.address, agentRunId: runId };
+      }),
   );
 
   /**
@@ -632,11 +588,7 @@ async function main(): Promise<void> {
       parts: { kind: string; text?: string }[];
     }[];
     return items
-      .filter(
-        (i) =>
-          i.sender.address === agentAddress &&
-          i.parts.some((p) => p.kind === "text"),
-      )
+      .filter((i) => i.sender.address === agentAddress && i.parts.some((p) => p.kind === "text"))
       .map((i) => ({
         id: i.id,
         text: i.parts.map((p) => p.text ?? "").join(""),
@@ -650,28 +602,24 @@ async function main(): Promise<void> {
   // turn — so it times the room and the participant join, and nothing
   // about inference. The deploy path's first real token is proof 3's.
   await timed("proof 2: canned join greeting lands (room + participant)", () =>
-    hop(
-      "PROOF 2 — the minted chat carries its agent and its canned greeting",
-      async () => {
-        const deadline = Date.now() + TURN_TIMEOUT_MS;
-        for (;;) {
-          const messages = await listAgentMessages();
-          const greeting = messages.find((m) => m.text.trim().length > 0);
-          if (greeting !== undefined) {
-            for (const m of messages) seenIds.add(m.id);
-            console.log(`  TRANSCRIPT — greeting: ${greeting.text}`);
-            return;
-          }
-          if (Date.now() > deadline) {
-            throw new Error(
-              `no agent greeting landed in chat ${chatId}\n` +
-                `sidecar output:\n${sidecar.output()}`,
-            );
-          }
-          await Bun.sleep(1000);
+    hop("PROOF 2 — the minted chat carries its agent and its canned greeting", async () => {
+      const deadline = Date.now() + TURN_TIMEOUT_MS;
+      for (;;) {
+        const messages = await listAgentMessages();
+        const greeting = messages.find((m) => m.text.trim().length > 0);
+        if (greeting !== undefined) {
+          for (const m of messages) seenIds.add(m.id);
+          console.log(`  TRANSCRIPT — greeting: ${greeting.text}`);
+          return;
         }
-      },
-    ),
+        if (Date.now() > deadline) {
+          throw new Error(
+            `no agent greeting landed in chat ${chatId}\n` + `sidecar output:\n${sidecar.output()}`,
+          );
+        }
+        await Bun.sleep(1000);
+      }
+    }),
   );
 
   // A folded `step`-mode run is ONE unbounded step servicing every
@@ -699,8 +647,7 @@ async function main(): Promise<void> {
           JSON.stringify(events.map((e) => `${String(e.seq)}:${e.type}`)),
       );
       console.log(
-        `  TRANSCRIPT — step-mode run ${agentRunId} child run ids: ` +
-          JSON.stringify(childRunIds),
+        `  TRANSCRIPT — step-mode run ${agentRunId} child run ids: ` + JSON.stringify(childRunIds),
       );
       const perOccurrence = childRunIds.filter((id) => /__\d+$/.test(id));
       if (perOccurrence.length > 0) {
@@ -730,98 +677,80 @@ async function main(): Promise<void> {
   const sectionDeploymentId = await timed(
     "proof 2b: section-mode deploy (push + probe + freeze + deploy)",
     () =>
-      hop(
-        "PROOF 2b — a section-mode agent deploys from its own rendered source",
-        async () => {
-          const created = await api(
-            hub.baseUrl,
-            "POST",
-            `/api/tenants/${tenant.tenantId}/assets`,
-            {
-              kind: "workflow",
-              name: SECTION_ASSET_NAME,
-              displayName: "CL-6324 section-mode proof",
-            },
-            admin.cookies,
-          );
-          expectStatus("create the section-mode workflow asset", created, 201);
-          const assetId = stringField(
-            created.data,
-            "id",
-            "section-mode asset response",
-          );
+      hop("PROOF 2b — a section-mode agent deploys from its own rendered source", async () => {
+        const created = await api(
+          hub.baseUrl,
+          "POST",
+          `/api/tenants/${tenant.tenantId}/assets`,
+          {
+            kind: "workflow",
+            name: SECTION_ASSET_NAME,
+            displayName: "CL-6324 section-mode proof",
+          },
+          admin.cookies,
+        );
+        expectStatus("create the section-mode workflow asset", created, 201);
+        const assetId = stringField(created.data, "id", "section-mode asset response");
 
-          const minted = await api(
-            hub.baseUrl,
-            "POST",
-            `/api/tenants/${tenant.tenantId}/git-tokens`,
-            {
-              name: `cl6324-section-push-${crypto.randomUUID().slice(0, 8)}`,
-              resource: "asset:*",
-              refPattern: "**",
-              actions: ["can_read", "can_push"],
-              expiresAt: new Date(Date.now() + 600_000).toISOString(),
-            },
-            admin.cookies,
-          );
-          expectStatus("mint the section-mode push token", minted, 201);
-          const tokenSecret = stringField(
-            minted.data,
-            "secret",
-            "git token response",
-          );
+        const minted = await api(
+          hub.baseUrl,
+          "POST",
+          `/api/tenants/${tenant.tenantId}/git-tokens`,
+          {
+            name: `cl6324-section-push-${crypto.randomUUID().slice(0, 8)}`,
+            resource: "asset:*",
+            refPattern: "**",
+            actions: ["can_read", "can_push"],
+            expiresAt: new Date(Date.now() + 600_000).toISOString(),
+          },
+          admin.cookies,
+        );
+        expectStatus("mint the section-mode push token", minted, 201);
+        const tokenSecret = stringField(minted.data, "secret", "git token response");
 
-          const model = proofModelSource;
-          // The same config object every folded launch renders, with the
-          // one field that selects the shape flipped to `section`. No
-          // tool pins and no credential bindings: this proof is about the
-          // occurrence shape, and an empty pin set keeps the deploy off
-          // the tool-manifest and MCP-handle surfaces entirely.
-          const definition = buildAgentRuntimeWorkflow({
-            workflowId: "wf_cl6324_section",
-            agentId: "cl6324-section-agent",
-            triggerAddress: sectionAddress,
-            systemPrompt:
-              "You are a terse assistant. Answer in one short sentence.",
-            inferencePreferences: [
-              { provider: model.provider, model: model.model },
-            ],
-            toolPackagePins: [],
-            credentialBindings: [],
-            mode: { kind: "section", turnTimeoutMs: SECTION_TURN_TIMEOUT_MS },
-          });
+        const model = proofModelSource;
+        // The same config object every folded launch renders, with the
+        // one field that selects the shape flipped to `section`. No
+        // tool pins and no credential bindings: this proof is about the
+        // occurrence shape, and an empty pin set keeps the deploy off
+        // the tool-manifest and MCP-handle surfaces entirely.
+        const definition = buildAgentRuntimeWorkflow({
+          workflowId: "wf_cl6324_section",
+          agentId: "cl6324-section-agent",
+          triggerAddress: sectionAddress,
+          systemPrompt: "You are a terse assistant. Answer in one short sentence.",
+          inferencePreferences: [{ provider: model.provider, model: model.model }],
+          toolPackagePins: [],
+          credentialBindings: [],
+          mode: { kind: "section", turnTimeoutMs: SECTION_TURN_TIMEOUT_MS },
+        });
 
-          const pushed = await pushWorkflow({
-            remoteUrl: `${hub.baseUrl}/api/tenants/${tenant.tenantId}/assets/workflow/${SECTION_ASSET_NAME}.git`,
-            tokenSecret,
-            workflowJson: JSON.stringify(definition, null, 2),
-            packageName: SECTION_ASSET_NAME,
-          });
+        const pushed = await pushWorkflow({
+          remoteUrl: `${hub.baseUrl}/api/tenants/${tenant.tenantId}/assets/workflow/${SECTION_ASSET_NAME}.git`,
+          tokenSecret,
+          workflowJson: JSON.stringify(definition, null, 2),
+          packageName: SECTION_ASSET_NAME,
+        });
 
-          const deployed = await api(
-            hub.baseUrl,
-            "POST",
-            `/api/tenants/${tenant.tenantId}/workflows/deployments`,
-            {
-              source: {
-                kind: "asset",
-                assetId,
-                package: { format: "source", commitSha: pushed.commitSha },
-              },
-              entry: WORKFLOW_SOURCE_ENTRY,
-              sourceOfferingIds: [pinnedOfferingId],
-              defaultSourceOfferingId: pinnedOfferingId,
+        const deployed = await api(
+          hub.baseUrl,
+          "POST",
+          `/api/tenants/${tenant.tenantId}/workflows/deployments`,
+          {
+            source: {
+              kind: "asset",
+              assetId,
+              package: { format: "source", commitSha: pushed.commitSha },
             },
-            admin.cookies,
-          );
-          expectStatus("deploy the section-mode workflow", deployed, 201);
-          return stringField(
-            deployed.data,
-            "id",
-            "section-mode deployment response",
-          );
-        },
-      ),
+            entry: WORKFLOW_SOURCE_ENTRY,
+            sourceOfferingIds: [pinnedOfferingId],
+            defaultSourceOfferingId: pinnedOfferingId,
+          },
+          admin.cookies,
+        );
+        expectStatus("deploy the section-mode workflow", deployed, 201);
+        return stringField(deployed.data, "id", "section-mode deployment response");
+      }),
   );
 
   /** Occurrence run ids the section has already produced. */
@@ -837,10 +766,7 @@ async function main(): Promise<void> {
    * than assumed so a turn that died in the sidecar kill cannot shift
    * every later index and turn a real pass into a false failure.
    */
-  async function driveSectionOccurrence(
-    text: string,
-    label: string,
-  ): Promise<string> {
+  async function driveSectionOccurrence(text: string, label: string): Promise<string> {
     const t0 = Date.now();
     // A 409 here means the deployment's address is not routable yet — the
     // state a restart leaves behind while the sidecar's reclaim settles.
@@ -880,11 +806,10 @@ async function main(): Promise<void> {
           admin.cookies,
         );
         if (res.status !== 200) continue;
-        const events = arrayField(
-          res.data,
-          "events",
-          `${label}: section occurrence events`,
-        ) as { seq: number; type: string }[];
+        const events = arrayField(res.data, "events", `${label}: section occurrence events`) as {
+          seq: number;
+          type: string;
+        }[];
         if (!events.some((e) => e.type === "RunStarted")) continue;
         seenOccurrences.add(turnRunId);
         timings.push({ label: `${label}: RunStarted`, ms: Date.now() - t0 });
@@ -906,17 +831,10 @@ async function main(): Promise<void> {
     }
   }
 
-  const firstOccurrence = await timed(
-    "proof 2b: first section occurrence to RunStarted",
-    () =>
-      hop(
-        "PROOF 2b — every message is an onTrigger occurrence with its own child run",
-        () =>
-          driveSectionOccurrence(
-            "In one short sentence, what can you help me with?",
-            "proof 2b",
-          ),
-      ),
+  const firstOccurrence = await timed("proof 2b: first section occurrence to RunStarted", () =>
+    hop("PROOF 2b — every message is an onTrigger occurrence with its own child run", () =>
+      driveSectionOccurrence("In one short sentence, what can you help me with?", "proof 2b"),
+    ),
   );
 
   await hop(
@@ -937,20 +855,16 @@ async function main(): Promise<void> {
         admin.cookies,
       );
       expectStatus("read the section's parent run log", parentEvents, 200);
-      const events = arrayField(
-        parentEvents.data,
-        "events",
-        "section parent events",
-      ) as { seq: number; type: string; body?: { childRunId?: unknown } }[];
+      const events = arrayField(parentEvents.data, "events", "section parent events") as {
+        seq: number;
+        type: string;
+        body?: { childRunId?: unknown };
+      }[];
       console.log(
         `  TRANSCRIPT — section parent run events: ` +
           JSON.stringify(events.map((e) => `${String(e.seq)}:${e.type}`)),
       );
-      if (
-        !events.some(
-          (e) => e.type === "ChildSpawned" && e.body?.childRunId === expected,
-        )
-      ) {
+      if (!events.some((e) => e.type === "ChildSpawned" && e.body?.childRunId === expected)) {
         throw new Error(
           `the section's parent run log records no ChildSpawned for ` +
             `${expected}: ${JSON.stringify(events)}`,
@@ -985,9 +899,7 @@ async function main(): Promise<void> {
       }
       const page = TenantApprovalsSchema(res.data);
       if (page instanceof type.errors) {
-        throw new Error(
-          `auto-approve: malformed pending approvals list: ${page.summary}`,
-        );
+        throw new Error(`auto-approve: malformed pending approvals list: ${page.summary}`);
       }
       for (const item of page.data) {
         const approved = await api(
@@ -1001,9 +913,7 @@ async function main(): Promise<void> {
         if (approved.status === 200) {
           console.log(`  [auto-approved] ${headline}`);
         } else {
-          console.log(
-            `  [auto-approve FAILED ${String(approved.status)}] ${headline}`,
-          );
+          console.log(`  [auto-approve FAILED ${String(approved.status)}] ${headline}`);
         }
       }
       if (page.nextCursor === null) break;
@@ -1023,11 +933,7 @@ async function main(): Promise<void> {
    * notice there is the failure it looks like. The credential notice is
    * never retried: resending can never fix it.
    */
-  async function sendAndAwaitReply(
-    text: string,
-    label: string,
-    resendsAllowed = 0,
-  ): Promise<void> {
+  async function sendAndAwaitReply(text: string, label: string, resendsAllowed = 0): Promise<void> {
     const t0 = Date.now();
     let resendsLeft = resendsAllowed;
     for (;;) {
@@ -1053,11 +959,7 @@ async function main(): Promise<void> {
       // Both undelivered notices are agent-authored room messages from
       // the agent's own address, so they look exactly like a reply to
       // the reader above. Neither is a turn.
-      if (
-        /^\s*$/.test(reply) ||
-        retryable ||
-        /can't reach a model right now/i.test(reply)
-      ) {
+      if (/^\s*$/.test(reply) || retryable || /can't reach a model right now/i.test(reply)) {
         throw new Error(
           `${label}: the agent answered with the undelivered notice, not a ` +
             `real turn: ${JSON.stringify(reply)}\n` +
@@ -1075,9 +977,7 @@ async function main(): Promise<void> {
     const deadline = Date.now() + TURN_TIMEOUT_MS;
     for (;;) {
       await autoApproveAll();
-      const fresh = (await listAgentMessages()).filter(
-        (m) => !seenIds.has(m.id),
-      );
+      const fresh = (await listAgentMessages()).filter((m) => !seenIds.has(m.id));
       if (fresh.length > 0) {
         for (const m of fresh) seenIds.add(m.id);
         return fresh.map((m) => m.text).join(" ");
@@ -1093,10 +993,7 @@ async function main(): Promise<void> {
   }
 
   await hop("PROOF 3 — a real message gets a real model reply", () =>
-    sendAndAwaitReply(
-      "In one short sentence, what can you help me with?",
-      "proof 3",
-    ),
+    sendAndAwaitReply("In one short sentence, what can you help me with?", "proof 3"),
   );
 
   // ---- proof 4: kill the sidecar mid-turn, restart, keep talking ----
@@ -1134,9 +1031,7 @@ async function main(): Promise<void> {
     // answered in the kill window on any model, so an answer already
     // sitting in the room would mean the kill landed BETWEEN turns and
     // the proof would be testing the easy case.
-    const answeredEarly = (await listAgentMessages()).filter(
-      (m) => !seenIds.has(m.id),
-    );
+    const answeredEarly = (await listAgentMessages()).filter((m) => !seenIds.has(m.id));
     if (answeredEarly.length > 0) {
       throw new Error(
         `the mid-turn kill was not mid-turn: the agent already answered ` +
@@ -1148,56 +1043,51 @@ async function main(): Promise<void> {
   });
 
   await timed("proof 4: sidecar restart + boot restore", () =>
-    hop(
-      "PROOF 4 — the sidecar restarts and boot restore replays the pin",
-      async () => {
-        sidecar = startSidecar({
-          hubPort,
-          sidecarId,
-          token: sidecarToken,
-          dataDir: sidecarDataDir,
-        });
-        track(sidecar);
-        const deadline = Date.now() + 120_000;
-        for (;;) {
-          if (sidecar.exited()) {
-            throw new Error(
-              `the restarted sidecar exited; output:\n${sidecar.output()}`,
-            );
-          }
-          const res = await api(
-            hub.baseUrl,
-            "GET",
-            `/api/tenants/${tenant.tenantId}/chat/workbenches/${chatId}/messages`,
-            undefined,
-            admin.cookies,
-          );
-          // The room surviving is a hub-only read and says nothing about
-          // the execution plane. The run's own health does: `liveness`
-          // is "ok" exactly when the sidecar has re-announced the
-          // address, which is what boot restore replaying the pin
-          // produces. Sending before that is sending into a window the
-          // product itself answers with "send it again".
-          const health = await api(
-            hub.baseUrl,
-            "GET",
-            `/api/tenants/${tenant.tenantId}/workflows/runs/${agentRunId}/health`,
-            undefined,
-            admin.cookies,
+    hop("PROOF 4 — the sidecar restarts and boot restore replays the pin", async () => {
+      sidecar = startSidecar({
+        hubPort,
+        sidecarId,
+        token: sidecarToken,
+        dataDir: sidecarDataDir,
+      });
+      track(sidecar);
+      const deadline = Date.now() + 120_000;
+      for (;;) {
+        if (sidecar.exited()) {
+          throw new Error(`the restarted sidecar exited; output:\n${sidecar.output()}`);
+        }
+        const res = await api(
+          hub.baseUrl,
+          "GET",
+          `/api/tenants/${tenant.tenantId}/chat/workbenches/${chatId}/messages`,
+          undefined,
+          admin.cookies,
+        );
+        // The room surviving is a hub-only read and says nothing about
+        // the execution plane. The run's own health does: `liveness`
+        // is "ok" exactly when the sidecar has re-announced the
+        // address, which is what boot restore replaying the pin
+        // produces. Sending before that is sending into a window the
+        // product itself answers with "send it again".
+        const health = await api(
+          hub.baseUrl,
+          "GET",
+          `/api/tenants/${tenant.tenantId}/workflows/runs/${agentRunId}/health`,
+          undefined,
+          admin.cookies,
+        );
+        const liveness = (health.data as { liveness?: unknown }).liveness;
+        if (res.status === 200 && liveness === "ok") return;
+        if (Date.now() > deadline) {
+          throw new Error(
+            `the room or its run did not come back after the restart ` +
+              `(messages ${String(res.status)}, liveness ${JSON.stringify(liveness)})\n` +
+              `sidecar output:\n${sidecar.output()}`,
           );
-          const liveness = (health.data as { liveness?: unknown }).liveness;
-          if (res.status === 200 && liveness === "ok") return;
-          if (Date.now() > deadline) {
-            throw new Error(
-              `the room or its run did not come back after the restart ` +
-                `(messages ${String(res.status)}, liveness ${JSON.stringify(liveness)})\n` +
-                `sidecar output:\n${sidecar.output()}`,
-            );
-          }
-          await Bun.sleep(1000);
         }
-      },
-    ),
+        await Bun.sleep(1000);
+      }
+    }),
   );
 
   // Same rule for the section: the occurrence that died in the kill may
@@ -1218,18 +1108,13 @@ async function main(): Promise<void> {
   // answer this question differently, and the section's answer must be
   // on the record whatever the step shape does.
   await timed("proof 4: section occurrence after the restart", () =>
-    hop(
-      "PROOF 4 — the section survives the restart and runs its next occurrence",
-      async () => {
-        const occurrence = await driveSectionOccurrence(
-          "Are you still there? One sentence.",
-          "proof 4 (section)",
-        );
-        console.log(
-          `  TRANSCRIPT — post-restart section occurrence: ${occurrence}`,
-        );
-      },
-    ),
+    hop("PROOF 4 — the section survives the restart and runs its next occurrence", async () => {
+      const occurrence = await driveSectionOccurrence(
+        "Are you still there? One sentence.",
+        "proof 4 (section)",
+      );
+      console.log(`  TRANSCRIPT — post-restart section occurrence: ${occurrence}`);
+    }),
   );
 
   // Whatever the killed turn produced is not the proof that the agent
@@ -1238,33 +1123,28 @@ async function main(): Promise<void> {
   // the reader as a partial answer or as the product's own visible
   // notice ("I didn't get that one — send it again"), never as a
   // message that was accepted and then silently swallowed.
-  await hop(
-    "PROOF 4 — the turn the kill interrupted surfaces visibly",
-    async () => {
-      const deadline = Date.now() + 120_000;
-      for (;;) {
-        const fresh = (await listAgentMessages()).filter(
-          (m) => !seenIds.has(m.id),
+  await hop("PROOF 4 — the turn the kill interrupted surfaces visibly", async () => {
+    const deadline = Date.now() + 120_000;
+    for (;;) {
+      const fresh = (await listAgentMessages()).filter((m) => !seenIds.has(m.id));
+      if (fresh.length > 0) {
+        console.log(
+          `  TRANSCRIPT — the interrupted turn surfaced as: ` +
+            JSON.stringify(fresh.map((m) => m.text)),
         );
-        if (fresh.length > 0) {
-          console.log(
-            `  TRANSCRIPT — the interrupted turn surfaced as: ` +
-              JSON.stringify(fresh.map((m) => m.text)),
-          );
-          for (const m of fresh) seenIds.add(m.id);
-          return;
-        }
-        if (Date.now() > deadline) {
-          throw new Error(
-            "the turn the sidecar kill interrupted left NOTHING in the " +
-              "room: no partial answer and no undelivered notice, so the " +
-              "reader's message was accepted and silently dropped",
-          );
-        }
-        await Bun.sleep(2000);
+        for (const m of fresh) seenIds.add(m.id);
+        return;
       }
-    },
-  );
+      if (Date.now() > deadline) {
+        throw new Error(
+          "the turn the sidecar kill interrupted left NOTHING in the " +
+            "room: no partial answer and no undelivered notice, so the " +
+            "reader's message was accepted and silently dropped",
+        );
+      }
+      await Bun.sleep(2000);
+    }
+  });
   await hop("PROOF 4 — the next message is answered after the restart", () =>
     sendAndAwaitReply("Are you still there? One sentence.", "proof 4", 2),
   );
diff --git a/scripts/e2e/cl-6329-turn-swap-proof.ts b/scripts/e2e/cl-6329-turn-swap-proof.ts
index c88e5ebb0a..660805ae7a 100644
--- a/scripts/e2e/cl-6329-turn-swap-proof.ts
+++ b/scripts/e2e/cl-6329-turn-swap-proof.ts
@@ -28,14 +28,8 @@ import { join as pathJoin } from "node:path";
 
 import { resetSchema, setupDatabase } from "../db-setup.ts";
 import { createGitWorkflowPusher } from "../../packages/connections/src/workflow-push.ts";
-import {
-  DEFAULT_WORKFLOWS,
-  seedTenant,
-} from "../../packages/onboarding/src/tenant-seed.ts";
-import {
-  createHubAPI,
-  type ApiCall,
-} from "../../packages/hub-api-client/src/index.ts";
+import { DEFAULT_WORKFLOWS, seedTenant } from "../../packages/onboarding/src/tenant-seed.ts";
+import { createHubAPI, type ApiCall } from "../../packages/hub-api-client/src/index.ts";
 import {
   findPersonalTenant,
   testAndPersistCredential,
@@ -130,9 +124,7 @@ function stringField(data: unknown, field: string, what: string): string {
     const value = (data as Record<string, unknown>)[field];
     if (typeof value === "string" && value !== "") return value;
   }
-  throw new Error(
-    `${what}: missing string field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing string field "${field}": ${JSON.stringify(data)}`);
 }
 
 function arrayField(data: unknown, field: string, what: string): unknown[] {
@@ -140,9 +132,7 @@ function arrayField(data: unknown, field: string, what: string): unknown[] {
     const value = (data as Record<string, unknown>)[field];
     if (Array.isArray(value)) return value;
   }
-  throw new Error(
-    `${what}: missing array field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing array field "${field}": ${JSON.stringify(data)}`);
 }
 
 async function signUp(
@@ -197,9 +187,7 @@ async function main(): Promise<void> {
     startHub({
       databaseUrl: url,
       port: freePort(),
-      sessionSecret: Buffer.from(
-        crypto.getRandomValues(new Uint8Array(32)),
-      ).toString("hex"),
+      sessionSecret: Buffer.from(crypto.getRandomValues(new Uint8Array(32))).toString("hex"),
       dataDir: await tempDir("cl6329-hub-data-"),
     }),
   );
@@ -256,39 +244,28 @@ async function main(): Promise<void> {
     return { cookies: res.cookies, userId };
   });
 
-  const user = await hop("sign up", async () =>
-    signUp(hub.baseUrl, "CL-6329 Proof"),
-  );
+  const user = await hop("sign up", async () => signUp(hub.baseUrl, "CL-6329 Proof"));
 
-  const provisioned = await hop(
-    "a membership probe joins the genesis root",
-    async () => {
-      const res = await api(
-        hub.baseUrl,
-        "POST",
-        "/api/onboarding/provision",
-        undefined,
-        user.cookies,
-      );
-      expectStatus("provision probe", res, 200);
-      const data = res.data as { kind: string; tenantSlug: string };
-      expect(data.kind).toBe("existing-member");
-      return data;
-    },
-  );
+  const provisioned = await hop("a membership probe joins the genesis root", async () => {
+    const res = await api(
+      hub.baseUrl,
+      "POST",
+      "/api/onboarding/provision",
+      undefined,
+      user.cookies,
+    );
+    expectStatus("provision probe", res, 200);
+    const data = res.data as { kind: string; tenantSlug: string };
+    expect(data.kind).toBe("existing-member");
+    return data;
+  });
 
   // A joined member is read-only by design, so every owner-level leg
   // below runs as alice, the genesis owner.
   const tenant = await hop("joined root resolves", async () => {
-    const found = await findPersonalTenant(
-      hubApi,
-      admin.cookies,
-      provisioned.tenantSlug,
-    );
+    const found = await findPersonalTenant(hubApi, admin.cookies, provisioned.tenantSlug);
     if (found === undefined) {
-      throw new Error(
-        `findPersonalTenant found nothing for slug ${provisioned.tenantSlug}`,
-      );
+      throw new Error(`findPersonalTenant found nothing for slug ${provisioned.tenantSlug}`);
     }
     return found;
   });
@@ -307,9 +284,7 @@ async function main(): Promise<void> {
       log: () => undefined,
     });
     if (result.kind !== "connected") {
-      throw new Error(
-        `expected the key-path connect to succeed, got: ${JSON.stringify(result)}`,
-      );
+      throw new Error(`expected the key-path connect to succeed, got: ${JSON.stringify(result)}`);
     }
     return result;
   });
@@ -343,9 +318,7 @@ async function main(): Promise<void> {
       const deadline = Date.now() + 180_000;
       for (;;) {
         if (sidecar.exited()) {
-          throw new Error(
-            `sidecar exited before the seed finished; output:\n${sidecar.output()}`,
-          );
+          throw new Error(`sidecar exited before the seed finished; output:\n${sidecar.output()}`);
         }
         try {
           await seedTenant({
@@ -419,9 +392,7 @@ async function main(): Promise<void> {
       id: string;
       canonicalName: string;
     }[];
-    const pinned = modelRows.find(
-      (row) => row.canonicalName === proofModelSource.model,
-    );
+    const pinned = modelRows.find((row) => row.canonicalName === proofModelSource.model);
     if (pinned === undefined) {
       throw new Error(
         `the bench catalog carries no model named ${proofModelSource.model}; ` +
@@ -437,11 +408,11 @@ async function main(): Promise<void> {
       admin.cookies,
     );
     expectStatus("list the bench model offerings", offerings, 200);
-    const offeringRows = arrayField(
-      offerings.data,
-      "data",
-      "model offerings",
-    ) as { id: string; modelId: string; disabled: boolean }[];
+    const offeringRows = arrayField(offerings.data, "data", "model offerings") as {
+      id: string;
+      modelId: string;
+      disabled: boolean;
+    }[];
     for (const offering of offeringRows) {
       if (offering.modelId === pinned.id || offering.disabled) continue;
       const patched = await api(
@@ -480,9 +451,7 @@ async function main(): Promise<void> {
           if (assistant !== undefined) return assistant.id;
         }
         if (Date.now() > deadline) {
-          throw new Error(
-            `"assistant" never became invitable: ${JSON.stringify(res.data)}`,
-          );
+          throw new Error(`"assistant" never became invitable: ${JSON.stringify(res.data)}`);
         }
         await Bun.sleep(1000);
       }
@@ -493,55 +462,45 @@ async function main(): Promise<void> {
   const { chatId, agentAddress, agentRunId } = await timed(
     "setup: mint → probe → closure materialization",
     () =>
-      hop(
-        "SETUP — POST /workbenches mints a chat with its agent joined",
-        async () => {
-          const deadline = Date.now() + 120_000;
-          let res: ApiResult;
-          for (;;) {
-            if (sidecar.exited()) {
-              throw new Error(
-                `sidecar exited before chat creation; output:\n${sidecar.output()}`,
-              );
-            }
-            res = await api(
-              hub.baseUrl,
-              "POST",
-              `/api/tenants/${tenant.tenantId}/chat/workbenches`,
-              { kind: "chat", definitionId: assistantDefinitionId },
-              admin.cookies,
-            );
-            if (res.status !== 500) break;
-            if (Date.now() > deadline) {
-              throw new Error(
-                `chat never became mintable: ${JSON.stringify(res.data)}\n` +
-                  `sidecar output:\n${sidecar.output()}`,
-              );
-            }
-            await Bun.sleep(1000);
-          }
-          expectStatus("create chat", res, 201);
-          const id = stringField(res.data, "id", "create chat");
-          const participants = arrayField(
-            res.data,
-            "participants",
-            "create chat",
-          ) as { address: string; handle: string }[];
-          const agent = participants.find((p) => p.handle === "myra");
-          if (agent === undefined) {
-            throw new Error(
-              `chat has no "myra" participant: ${JSON.stringify(participants)}`,
-            );
+      hop("SETUP — POST /workbenches mints a chat with its agent joined", async () => {
+        const deadline = Date.now() + 120_000;
+        let res: ApiResult;
+        for (;;) {
+          if (sidecar.exited()) {
+            throw new Error(`sidecar exited before chat creation; output:\n${sidecar.output()}`);
           }
-          const [runId] = agent.address.split("@");
-          if (runId === undefined) {
+          res = await api(
+            hub.baseUrl,
+            "POST",
+            `/api/tenants/${tenant.tenantId}/chat/workbenches`,
+            { kind: "chat", definitionId: assistantDefinitionId },
+            admin.cookies,
+          );
+          if (res.status !== 500) break;
+          if (Date.now() > deadline) {
             throw new Error(
-              `agent address is not a run address: ${agent.address}`,
+              `chat never became mintable: ${JSON.stringify(res.data)}\n` +
+                `sidecar output:\n${sidecar.output()}`,
             );
           }
-          return { chatId: id, agentAddress: agent.address, agentRunId: runId };
-        },
-      ),
+          await Bun.sleep(1000);
+        }
+        expectStatus("create chat", res, 201);
+        const id = stringField(res.data, "id", "create chat");
+        const participants = arrayField(res.data, "participants", "create chat") as {
+          address: string;
+          handle: string;
+        }[];
+        const agent = participants.find((p) => p.handle === "myra");
+        if (agent === undefined) {
+          throw new Error(`chat has no "myra" participant: ${JSON.stringify(participants)}`);
+        }
+        const [runId] = agent.address.split("@");
+        if (runId === undefined) {
+          throw new Error(`agent address is not a run address: ${agent.address}`);
+        }
+        return { chatId: id, agentAddress: agent.address, agentRunId: runId };
+      }),
   );
 
   type Turn = {
@@ -594,9 +553,7 @@ async function main(): Promise<void> {
   }
 
   /** Every message in the room, whoever sent it, with its run id. */
-  async function listRoomMessages(): Promise<
-    { id: string; address: string; text: string }[]
-  > {
+  async function listRoomMessages(): Promise<{ id: string; address: string; text: string }[]> {
     const res = await api(
       hub.baseUrl,
       "GET",
@@ -681,269 +638,221 @@ async function main(): Promise<void> {
   const firstHandle = await handleOf(agentAddress);
 
   await timed("proof 1: both agents answer one message", () =>
-    hop(
-      "PROOF 1 — two agents reply in one room, each under its own turn",
-      async () => {
-        const before = new Set((await listRoomMessages()).map((m) => m.id));
-        await sendRoomMessage(
-          `@${firstHandle} @${secondAgent.handle} say hi in one short sentence.`,
-        );
+    hop("PROOF 1 — two agents reply in one room, each under its own turn", async () => {
+      const before = new Set((await listRoomMessages()).map((m) => m.id));
+      await sendRoomMessage(`@${firstHandle} @${secondAgent.handle} say hi in one short sentence.`);
 
-        const deadline = Date.now() + TURN_TIMEOUT_MS;
-        for (;;) {
-          const turns = await listTurns();
-          const settled = turns.filter(
-            (t) => t.status === "completed" && t.replyMessageId !== null,
-          );
-          const addresses = new Set(settled.map((t) => t.agentAddress));
-          if (addresses.size >= 2) {
-            const replies = (await listRoomMessages()).filter(
-              (m) => !before.has(m.id),
-            );
-            for (const turn of settled) {
-              if (!isOccurrenceRunId(turn.childRunId)) {
-                throw new Error(
-                  `turn ${turn.id} carries child run id ${turn.childRunId}, ` +
-                    `which is not an occurrence id — the reply is not ` +
-                    `traceable to a section occurrence`,
-                );
-              }
-              const reply = replies.find((m) => m.id === turn.replyMessageId);
-              console.log(
-                `  TRANSCRIPT — ${turn.agentAddress} turn ${turn.childRunId}: ` +
-                  `${reply?.text.slice(0, 120) ?? "(reply row not listed)"}`,
+      const deadline = Date.now() + TURN_TIMEOUT_MS;
+      for (;;) {
+        const turns = await listTurns();
+        const settled = turns.filter((t) => t.status === "completed" && t.replyMessageId !== null);
+        const addresses = new Set(settled.map((t) => t.agentAddress));
+        if (addresses.size >= 2) {
+          const replies = (await listRoomMessages()).filter((m) => !before.has(m.id));
+          for (const turn of settled) {
+            if (!isOccurrenceRunId(turn.childRunId)) {
+              throw new Error(
+                `turn ${turn.id} carries child run id ${turn.childRunId}, ` +
+                  `which is not an occurrence id — the reply is not ` +
+                  `traceable to a section occurrence`,
               );
             }
-            // Distinct per agent is the point: two agents in one room
-            // must not share an occurrence id.
-            const byAgent = new Map<string, string>();
-            for (const turn of settled) byAgent.set(turn.agentAddress, turn.id);
-            expect(byAgent.size).toBeGreaterThanOrEqual(2);
-            return settled;
-          }
-          if (Date.now() > deadline) {
-            throw new Error(
-              `only ${String(addresses.size)} of 2 agents produced a settled ` +
-                `turn: ${JSON.stringify(turns)}\n` +
-                `sidecar output:\n${sidecar.output()}`,
+            const reply = replies.find((m) => m.id === turn.replyMessageId);
+            console.log(
+              `  TRANSCRIPT — ${turn.agentAddress} turn ${turn.childRunId}: ` +
+                `${reply?.text.slice(0, 120) ?? "(reply row not listed)"}`,
             );
           }
-          await Bun.sleep(2000);
+          // Distinct per agent is the point: two agents in one room
+          // must not share an occurrence id.
+          const byAgent = new Map<string, string>();
+          for (const turn of settled) byAgent.set(turn.agentAddress, turn.id);
+          expect(byAgent.size).toBeGreaterThanOrEqual(2);
+          return settled;
         }
-      },
-    ),
+        if (Date.now() > deadline) {
+          throw new Error(
+            `only ${String(addresses.size)} of 2 agents produced a settled ` +
+              `turn: ${JSON.stringify(turns)}\n` +
+              `sidecar output:\n${sidecar.output()}`,
+          );
+        }
+        await Bun.sleep(2000);
+      }
+    }),
   );
 
   // The occurrence ids the projection allocated must be the ones the
   // runtime actually ran — read straight off the deployment's own
   // workflow-run repo, not off our own rows.
-  await hop(
-    "PROOF 1 — the projection's occurrence ids are the runtime's own",
-    async () => {
-      const runIds = await listDeploymentRunIds(agentRunId);
-      const occurrences = runIds.filter(isOccurrenceRunId);
-      console.log(
-        `  TRANSCRIPT — run ${agentRunId} child runs: ${JSON.stringify(runIds)}`,
+  await hop("PROOF 1 — the projection's occurrence ids are the runtime's own", async () => {
+    const runIds = await listDeploymentRunIds(agentRunId);
+    const occurrences = runIds.filter(isOccurrenceRunId);
+    console.log(`  TRANSCRIPT — run ${agentRunId} child runs: ${JSON.stringify(runIds)}`);
+    if (occurrences.length === 0) {
+      throw new Error(
+        `the room agent's deployment started NO per-occurrence child run ` +
+          `(${JSON.stringify(runIds)}); it is still deploying as a folded ` +
+          `step rather than an onTrigger section`,
       );
-      if (occurrences.length === 0) {
+    }
+    const projected = new Set(
+      (await listTurns()).filter((t) => t.agentAddress === agentAddress).map((t) => t.childRunId),
+    );
+    for (const id of occurrences) {
+      if (!projected.has(id)) {
         throw new Error(
-          `the room agent's deployment started NO per-occurrence child run ` +
-            `(${JSON.stringify(runIds)}); it is still deploying as a folded ` +
-            `step rather than an onTrigger section`,
+          `the runtime ran occurrence ${id}, which the turn projection ` +
+            `never allocated: ${JSON.stringify([...projected])}`,
         );
       }
-      const projected = new Set(
-        (await listTurns())
+    }
+  });
+
+  // ---- proof 2: three rapid messages serialize into ordered turns ---
+  await timed("proof 2: three rapid messages serialize", () =>
+    hop("PROOF 2 — a burst of three messages becomes ordered turns", async () => {
+      const before = (await listTurns()).filter((t) => t.agentAddress === agentAddress).length;
+
+      // Sent back to back with no wait between: the queue, not the
+      // sender, is what has to order them.
+      await sendRoomMessage(`@${firstHandle} one`);
+      await sendRoomMessage(`@${firstHandle} two`);
+      await sendRoomMessage(`@${firstHandle} three`);
+
+      const deadline = Date.now() + TURN_TIMEOUT_MS;
+      for (;;) {
+        const mine = (await listTurns())
           .filter((t) => t.agentAddress === agentAddress)
-          .map((t) => t.childRunId),
-      );
-      for (const id of occurrences) {
-        if (!projected.has(id)) {
+          .sort((a, b) => a.occurrence - b.occurrence);
+        if (mine.length >= before + 3) {
+          const occurrences = mine.map((t) => t.occurrence);
+          console.log(`  TRANSCRIPT — occurrences after the burst: ` + JSON.stringify(occurrences));
+          // Contiguous and ascending from zero: no gap, no duplicate,
+          // no two turns sharing a child run id.
+          expect(occurrences).toEqual(occurrences.map((_, i) => i));
+          expect(new Set(mine.map((t) => t.childRunId)).size).toBe(mine.length);
+          return;
+        }
+        if (Date.now() > deadline) {
           throw new Error(
-            `the runtime ran occurrence ${id}, which the turn projection ` +
-              `never allocated: ${JSON.stringify([...projected])}`,
+            `the burst produced ${String(mine.length)} turns, expected more ` +
+              `than ${String(before)}: ${JSON.stringify(mine)}`,
           );
         }
+        await Bun.sleep(2000);
       }
-    },
-  );
-
-  // ---- proof 2: three rapid messages serialize into ordered turns ---
-  await timed("proof 2: three rapid messages serialize", () =>
-    hop(
-      "PROOF 2 — a burst of three messages becomes ordered turns",
-      async () => {
-        const before = (await listTurns()).filter(
-          (t) => t.agentAddress === agentAddress,
-        ).length;
-
-        // Sent back to back with no wait between: the queue, not the
-        // sender, is what has to order them.
-        await sendRoomMessage(`@${firstHandle} one`);
-        await sendRoomMessage(`@${firstHandle} two`);
-        await sendRoomMessage(`@${firstHandle} three`);
-
-        const deadline = Date.now() + TURN_TIMEOUT_MS;
-        for (;;) {
-          const mine = (await listTurns())
-            .filter((t) => t.agentAddress === agentAddress)
-            .sort((a, b) => a.occurrence - b.occurrence);
-          if (mine.length >= before + 3) {
-            const occurrences = mine.map((t) => t.occurrence);
-            console.log(
-              `  TRANSCRIPT — occurrences after the burst: ` +
-                JSON.stringify(occurrences),
-            );
-            // Contiguous and ascending from zero: no gap, no duplicate,
-            // no two turns sharing a child run id.
-            expect(occurrences).toEqual(occurrences.map((_, i) => i));
-            expect(new Set(mine.map((t) => t.childRunId)).size).toBe(
-              mine.length,
-            );
-            return;
-          }
-          if (Date.now() > deadline) {
-            throw new Error(
-              `the burst produced ${String(mine.length)} turns, expected more ` +
-                `than ${String(before)}: ${JSON.stringify(mine)}`,
-            );
-          }
-          await Bun.sleep(2000);
-        }
-      },
-    ),
+    }),
   );
 
   // ---- proof 3: a failed turn kills neither the room nor the section -
   const seenIds = new Set((await listRoomMessages()).map((m) => m.id));
 
   await timed("proof 3: kill the sidecar mid-occurrence", () =>
-    hop(
-      "PROOF 3 — the sidecar dies while an occurrence is running",
-      async () => {
-        await sendRoomMessage(`@${firstHandle} ${MID_TURN_PROMPT}`);
-        await Bun.sleep(MID_TURN_KILL_DELAY_MS);
-        await sidecar.stop();
-        console.log("  TRANSCRIPT — sidecar killed mid-occurrence");
-      },
-    ),
+    hop("PROOF 3 — the sidecar dies while an occurrence is running", async () => {
+      await sendRoomMessage(`@${firstHandle} ${MID_TURN_PROMPT}`);
+      await Bun.sleep(MID_TURN_KILL_DELAY_MS);
+      await sidecar.stop();
+      console.log("  TRANSCRIPT — sidecar killed mid-occurrence");
+    }),
   );
 
   await timed("proof 3: restart and restore", () =>
-    hop(
-      "PROOF 3 — the sidecar restarts and restores its deployments",
-      async () => {
-        sidecar = startSidecar({
-          hubPort,
-          sidecarId,
-          token: sidecarToken,
-          dataDir: sidecarDataDir,
-        });
-        track(sidecar);
-        const deadline = Date.now() + 120_000;
-        for (;;) {
-          const res = await api(
-            hub.baseUrl,
-            "GET",
-            `/api/tenants/${tenant.tenantId}/chat/workbenches/${chatId}/turns`,
-            undefined,
-            admin.cookies,
+    hop("PROOF 3 — the sidecar restarts and restores its deployments", async () => {
+      sidecar = startSidecar({
+        hubPort,
+        sidecarId,
+        token: sidecarToken,
+        dataDir: sidecarDataDir,
+      });
+      track(sidecar);
+      const deadline = Date.now() + 120_000;
+      for (;;) {
+        const res = await api(
+          hub.baseUrl,
+          "GET",
+          `/api/tenants/${tenant.tenantId}/chat/workbenches/${chatId}/turns`,
+          undefined,
+          admin.cookies,
+        );
+        if (res.status === 200) return;
+        if (Date.now() > deadline) {
+          throw new Error(
+            `the room never came back after the restart: ${JSON.stringify(res.data)}`,
           );
-          if (res.status === 200) return;
-          if (Date.now() > deadline) {
-            throw new Error(
-              `the room never came back after the restart: ${JSON.stringify(res.data)}`,
-            );
-          }
-          await Bun.sleep(2000);
         }
-      },
-    ),
+        await Bun.sleep(2000);
+      }
+    }),
   );
 
-  await hop(
-    "PROOF 3 — the interrupted turn surfaces visibly rather than silently",
-    async () => {
-      const deadline = Date.now() + 180_000;
+  await hop("PROOF 3 — the interrupted turn surfaces visibly rather than silently", async () => {
+    const deadline = Date.now() + 180_000;
+    for (;;) {
+      const fresh = (await listRoomMessages()).filter(
+        (m) => !seenIds.has(m.id) && m.address !== `${tenant.principalId}`,
+      );
+      const agentFresh = fresh.filter((m) => m.text.trim().length > 0);
+      if (agentFresh.length > 0) {
+        console.log(
+          `  TRANSCRIPT — the interrupted turn surfaced as: ` +
+            JSON.stringify(agentFresh.map((m) => m.text.slice(0, 160))),
+        );
+        for (const m of fresh) seenIds.add(m.id);
+        return;
+      }
+      if (Date.now() > deadline) {
+        throw new Error(
+          "the turn the kill interrupted left NOTHING in the room: no " +
+            "partial answer and no notice, so the reader's message was " +
+            "accepted and silently dropped",
+        );
+      }
+      await Bun.sleep(3000);
+    }
+  });
+
+  await timed("proof 3: the room still answers after the failed turn", () =>
+    hop("PROOF 3 — the section is still subscribed and answers the next message", async () => {
+      const before = new Set((await listRoomMessages()).map((m) => m.id));
+      const beforeTurns = (await listTurns()).filter((t) => t.agentAddress === agentAddress).length;
+      // Resent on a loop rather than once: the room's own rows come
+      // back the moment the hub is up, but the section's run only
+      // becomes routable again once the restarted sidecar has
+      // re-registered it, and a send that lands in that window fails
+      // as "no sidecar available" — a failed turn, correctly recorded,
+      // that says nothing about whether the section survived.
+      let nextAsk = 0;
+      const deadline = Date.now() + TURN_TIMEOUT_MS;
       for (;;) {
-        const fresh = (await listRoomMessages()).filter(
-          (m) => !seenIds.has(m.id) && m.address !== `${tenant.principalId}`,
+        if (Date.now() >= nextAsk) {
+          await sendRoomMessage(`@${firstHandle} are you still there? One word.`);
+          nextAsk = Date.now() + 20_000;
+        }
+        const mine = (await listTurns()).filter((t) => t.agentAddress === agentAddress);
+        const settled = mine.find(
+          (t) =>
+            t.status === "completed" && t.replyMessageId !== null && !before.has(t.replyMessageId),
         );
-        const agentFresh = fresh.filter((m) => m.text.trim().length > 0);
-        if (agentFresh.length > 0) {
+        if (settled !== undefined) {
+          const reply = (await listRoomMessages()).find((m) => m.id === settled.replyMessageId);
           console.log(
-            `  TRANSCRIPT — the interrupted turn surfaced as: ` +
-              JSON.stringify(agentFresh.map((m) => m.text.slice(0, 160))),
+            `  TRANSCRIPT — post-failure occurrence ${settled.childRunId}: ` +
+              `${reply?.text.slice(0, 160) ?? "(row not listed)"}`,
           );
-          for (const m of fresh) seenIds.add(m.id);
+          expect(mine.length).toBeGreaterThan(beforeTurns);
           return;
         }
         if (Date.now() > deadline) {
           throw new Error(
-            "the turn the kill interrupted left NOTHING in the room: no " +
-              "partial answer and no notice, so the reader's message was " +
-              "accepted and silently dropped",
+            `the room never answered after the failed turn — the section ` +
+              `did not survive it: ${JSON.stringify(mine)}\n` +
+              `sidecar output:\n${sidecar.output()}`,
           );
         }
-        await Bun.sleep(3000);
+        await Bun.sleep(2000);
       }
-    },
-  );
-
-  await timed("proof 3: the room still answers after the failed turn", () =>
-    hop(
-      "PROOF 3 — the section is still subscribed and answers the next message",
-      async () => {
-        const before = new Set((await listRoomMessages()).map((m) => m.id));
-        const beforeTurns = (await listTurns()).filter(
-          (t) => t.agentAddress === agentAddress,
-        ).length;
-        // Resent on a loop rather than once: the room's own rows come
-        // back the moment the hub is up, but the section's run only
-        // becomes routable again once the restarted sidecar has
-        // re-registered it, and a send that lands in that window fails
-        // as "no sidecar available" — a failed turn, correctly recorded,
-        // that says nothing about whether the section survived.
-        let nextAsk = 0;
-        const deadline = Date.now() + TURN_TIMEOUT_MS;
-        for (;;) {
-          if (Date.now() >= nextAsk) {
-            await sendRoomMessage(
-              `@${firstHandle} are you still there? One word.`,
-            );
-            nextAsk = Date.now() + 20_000;
-          }
-          const mine = (await listTurns()).filter(
-            (t) => t.agentAddress === agentAddress,
-          );
-          const settled = mine.find(
-            (t) =>
-              t.status === "completed" &&
-              t.replyMessageId !== null &&
-              !before.has(t.replyMessageId),
-          );
-          if (settled !== undefined) {
-            const reply = (await listRoomMessages()).find(
-              (m) => m.id === settled.replyMessageId,
-            );
-            console.log(
-              `  TRANSCRIPT — post-failure occurrence ${settled.childRunId}: ` +
-                `${reply?.text.slice(0, 160) ?? "(row not listed)"}`,
-            );
-            expect(mine.length).toBeGreaterThan(beforeTurns);
-            return;
-          }
-          if (Date.now() > deadline) {
-            throw new Error(
-              `the room never answered after the failed turn — the section ` +
-                `did not survive it: ${JSON.stringify(mine)}\n` +
-                `sidecar output:\n${sidecar.output()}`,
-            );
-          }
-          await Bun.sleep(2000);
-        }
-      },
-    ),
+    }),
   );
 
   await hop("PROOF 3 — the failed turn is on the record", async () => {
diff --git a/scripts/e2e/cl-6451-single-run-proof.ts b/scripts/e2e/cl-6451-single-run-proof.ts
index b27c9d1f99..6c40bbdbb5 100644
--- a/scripts/e2e/cl-6451-single-run-proof.ts
+++ b/scripts/e2e/cl-6451-single-run-proof.ts
@@ -34,14 +34,8 @@ import { join as pathJoin } from "node:path";
 
 import { resetSchema, setupDatabase } from "../db-setup.ts";
 import { createGitWorkflowPusher } from "../../packages/connections/src/workflow-push.ts";
-import {
-  DEFAULT_WORKFLOWS,
-  seedTenant,
-} from "../../packages/onboarding/src/tenant-seed.ts";
-import {
-  createHubAPI,
-  type ApiCall,
-} from "../../packages/hub-api-client/src/index.ts";
+import { DEFAULT_WORKFLOWS, seedTenant } from "../../packages/onboarding/src/tenant-seed.ts";
+import { createHubAPI, type ApiCall } from "../../packages/hub-api-client/src/index.ts";
 import {
   findPersonalTenant,
   testAndPersistCredential,
@@ -118,9 +112,7 @@ function stringField(data: unknown, field: string, what: string): string {
     const value = (data as Record<string, unknown>)[field];
     if (typeof value === "string" && value !== "") return value;
   }
-  throw new Error(
-    `${what}: missing string field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing string field "${field}": ${JSON.stringify(data)}`);
 }
 
 function arrayField(data: unknown, field: string, what: string): unknown[] {
@@ -128,9 +120,7 @@ function arrayField(data: unknown, field: string, what: string): unknown[] {
     const value = (data as Record<string, unknown>)[field];
     if (Array.isArray(value)) return value;
   }
-  throw new Error(
-    `${what}: missing array field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing array field "${field}": ${JSON.stringify(data)}`);
 }
 
 async function signUp(
@@ -173,9 +163,7 @@ async function main(): Promise<void> {
     startHub({
       databaseUrl: url,
       port: freePort(),
-      sessionSecret: Buffer.from(
-        crypto.getRandomValues(new Uint8Array(32)),
-      ).toString("hex"),
+      sessionSecret: Buffer.from(crypto.getRandomValues(new Uint8Array(32))).toString("hex"),
       dataDir: await tempDir("cl6451-hub-data-"),
     }),
   );
@@ -229,39 +217,28 @@ async function main(): Promise<void> {
     return { cookies: res.cookies, userId };
   });
 
-  const user = await hop("sign up", async () =>
-    signUp(hub.baseUrl, "CL-6451 Proof"),
-  );
+  const user = await hop("sign up", async () => signUp(hub.baseUrl, "CL-6451 Proof"));
 
-  const provisioned = await hop(
-    "a membership probe joins the genesis root",
-    async () => {
-      const res = await api(
-        hub.baseUrl,
-        "POST",
-        "/api/onboarding/provision",
-        undefined,
-        user.cookies,
-      );
-      expectStatus("provision probe", res, 200);
-      const data = res.data as { kind: string; tenantSlug: string };
-      expect(data.kind).toBe("existing-member");
-      return data;
-    },
-  );
+  const provisioned = await hop("a membership probe joins the genesis root", async () => {
+    const res = await api(
+      hub.baseUrl,
+      "POST",
+      "/api/onboarding/provision",
+      undefined,
+      user.cookies,
+    );
+    expectStatus("provision probe", res, 200);
+    const data = res.data as { kind: string; tenantSlug: string };
+    expect(data.kind).toBe("existing-member");
+    return data;
+  });
 
   // A joined member is read-only by design, so every owner-level leg
   // below runs as alice, the genesis owner.
   const tenant = await hop("joined root resolves", async () => {
-    const found = await findPersonalTenant(
-      hubApi,
-      admin.cookies,
-      provisioned.tenantSlug,
-    );
+    const found = await findPersonalTenant(hubApi, admin.cookies, provisioned.tenantSlug);
     if (found === undefined) {
-      throw new Error(
-        `findPersonalTenant found nothing for slug ${provisioned.tenantSlug}`,
-      );
+      throw new Error(`findPersonalTenant found nothing for slug ${provisioned.tenantSlug}`);
     }
     return found;
   });
@@ -280,9 +257,7 @@ async function main(): Promise<void> {
       log: () => undefined,
     });
     if (result.kind !== "connected") {
-      throw new Error(
-        `expected the key-path connect to succeed, got: ${JSON.stringify(result)}`,
-      );
+      throw new Error(`expected the key-path connect to succeed, got: ${JSON.stringify(result)}`);
     }
     return result;
   });
@@ -310,40 +285,35 @@ async function main(): Promise<void> {
     }
   });
 
-  await hop(
-    "SETUP — every default workflow deploys by source-ref",
-    async () => {
-      const deadline = Date.now() + 180_000;
-      for (;;) {
-        if (sidecar.exited()) {
-          throw new Error(
-            `sidecar exited before the seed finished; output:\n${sidecar.output()}`,
-          );
-        }
-        try {
-          await seedTenant({
-            api: hubApi,
-            cookies: admin.cookies,
-            hubUrl: hub.baseUrl,
-            tenant: {
-              tenantId: tenant.tenantId,
-              principalId: tenant.principalId,
-              domain: tenant.tenantDomain,
-            },
-            model: proofModelSource,
-            pushWorkflow,
-            log: () => undefined,
-            workflows: DEFAULT_WORKFLOWS,
-            confirmDeployments: false,
-          });
-          return;
-        } catch (cause) {
-          if (Date.now() > deadline) throw cause;
-          await Bun.sleep(1000);
-        }
+  await hop("SETUP — every default workflow deploys by source-ref", async () => {
+    const deadline = Date.now() + 180_000;
+    for (;;) {
+      if (sidecar.exited()) {
+        throw new Error(`sidecar exited before the seed finished; output:\n${sidecar.output()}`);
       }
-    },
-  );
+      try {
+        await seedTenant({
+          api: hubApi,
+          cookies: admin.cookies,
+          hubUrl: hub.baseUrl,
+          tenant: {
+            tenantId: tenant.tenantId,
+            principalId: tenant.principalId,
+            domain: tenant.tenantDomain,
+          },
+          model: proofModelSource,
+          pushWorkflow,
+          log: () => undefined,
+          workflows: DEFAULT_WORKFLOWS,
+          confirmDeployments: false,
+        });
+        return;
+      } catch (cause) {
+        if (Date.now() > deadline) throw cause;
+        await Bun.sleep(1000);
+      }
+    }
+  });
 
   // No catalog narrowing here, unlike the CL-6329 proof: the seeded
   // `assistant` definition pins its own model (the connect flow's
@@ -351,35 +321,30 @@ async function main(): Promise<void> {
   // model that pin names — this proof is about run identity, not model
   // selection, so every seeded offering stays launchable.
 
-  const assistant = await hop(
-    "SETUP — 'assistant' is invitable tenant-wide",
-    async () => {
-      const deadline = Date.now() + 60_000;
-      for (;;) {
-        const res = await api(
-          hub.baseUrl,
-          "GET",
-          `/api/tenants/${tenant.tenantId}/chat/invitable-definitions`,
-          undefined,
-          admin.cookies,
-        );
-        if (res.status === 200) {
-          const items = arrayField(res.data, "items", "invitable") as {
-            id: string;
-            name: string;
-          }[];
-          const found = items.find((item) => item.name === "assistant");
-          if (found !== undefined) return found;
-        }
-        if (Date.now() > deadline) {
-          throw new Error(
-            `"assistant" never became invitable: ${JSON.stringify(res.data)}`,
-          );
-        }
-        await Bun.sleep(1000);
+  const assistant = await hop("SETUP — 'assistant' is invitable tenant-wide", async () => {
+    const deadline = Date.now() + 60_000;
+    for (;;) {
+      const res = await api(
+        hub.baseUrl,
+        "GET",
+        `/api/tenants/${tenant.tenantId}/chat/invitable-definitions`,
+        undefined,
+        admin.cookies,
+      );
+      if (res.status === 200) {
+        const items = arrayField(res.data, "items", "invitable") as {
+          id: string;
+          name: string;
+        }[];
+        const found = items.find((item) => item.name === "assistant");
+        if (found !== undefined) return found;
       }
-    },
-  );
+      if (Date.now() > deadline) {
+        throw new Error(`"assistant" never became invitable: ${JSON.stringify(res.data)}`);
+      }
+      await Bun.sleep(1000);
+    }
+  });
 
   // A WORKBENCH, not a chat: the live bug fired in a room whose agent
   // arrived through the invite affordance and was then @named by its
@@ -411,28 +376,25 @@ async function main(): Promise<void> {
     }[];
   }
 
-  const agentAddress = await hop(
-    "SETUP — invite `assistant` (run A)",
-    async () => {
-      const deadline = Date.now() + 120_000;
-      for (;;) {
-        const res = await api(
-          hub.baseUrl,
-          "POST",
-          `/api/tenants/${tenant.tenantId}/chat/workbenches/${workbenchId}/invite`,
-          { definitionId: assistant.id },
-          admin.cookies,
-        );
-        if (res.status === 201) {
-          return stringField(res.data, "address", "invite");
-        }
-        if (Date.now() > deadline) {
-          throw new Error(`invite never landed: ${JSON.stringify(res.data)}`);
-        }
-        await Bun.sleep(1000);
+  const agentAddress = await hop("SETUP — invite `assistant` (run A)", async () => {
+    const deadline = Date.now() + 120_000;
+    for (;;) {
+      const res = await api(
+        hub.baseUrl,
+        "POST",
+        `/api/tenants/${tenant.tenantId}/chat/workbenches/${workbenchId}/invite`,
+        { definitionId: assistant.id },
+        admin.cookies,
+      );
+      if (res.status === 201) {
+        return stringField(res.data, "address", "invite");
       }
-    },
-  );
+      if (Date.now() > deadline) {
+        throw new Error(`invite never landed: ${JSON.stringify(res.data)}`);
+      }
+      await Bun.sleep(1000);
+    }
+  });
   const [agentRunId] = agentAddress.split("@");
   if (agentRunId === undefined) {
     throw new Error(`agent address is not a run address: ${agentAddress}`);
@@ -441,9 +403,7 @@ async function main(): Promise<void> {
   // The precondition that made the bug reachable: the participant's
   // handle is NOT the definition's wire name, so the known-handle guard
   // alone cannot recognize `@assistant` as this participant.
-  const handle = (await listAgents()).find(
-    (p) => p.address === agentAddress,
-  )?.handle;
+  const handle = (await listAgents()).find((p) => p.address === agentAddress)?.handle;
   if (handle === undefined) {
     throw new Error(`the invited agent is not on the room's participant list`);
   }
@@ -479,9 +439,7 @@ async function main(): Promise<void> {
     return arrayField(res.data, "items", "list turns") as Turn[];
   }
 
-  async function listRoomMessages(): Promise<
-    { id: string; address: string; text: string }[]
-  > {
+  async function listRoomMessages(): Promise<{ id: string; address: string; text: string }[]> {
     const res = await api(
       hub.baseUrl,
       "GET",
@@ -516,11 +474,7 @@ async function main(): Promise<void> {
     expectStatus(`send "${text.slice(0, 40)}"`, res, 201);
     // The heart of CL-6451: the `@assistant` message must NOT have been
     // intercepted as a workflow command.
-    if (
-      typeof res.data === "object" &&
-      res.data !== null &&
-      "command" in res.data
-    ) {
+    if (typeof res.data === "object" && res.data !== null && "command" in res.data) {
       throw new Error(
         `the @${assistant.name} message was dispatched as a command — a ` +
           `second run was started: ${JSON.stringify(res.data)}`,
@@ -538,13 +492,9 @@ async function main(): Promise<void> {
       );
       if (settled !== undefined) {
         expect(settled.agentAddress).toBe(agentAddress);
-        const reply = (await listRoomMessages()).find(
-          (m) => m.id === settled.replyMessageId,
-        );
+        const reply = (await listRoomMessages()).find((m) => m.id === settled.replyMessageId);
         const replyText = reply?.text ?? "";
-        console.log(
-          `  TRANSCRIPT — ${settled.childRunId}: ${replyText.slice(0, 160)}`,
-        );
+        console.log(`  TRANSCRIPT — ${settled.childRunId}: ${replyText.slice(0, 160)}`);
         return { replyText };
       }
       const failed = turns.find((t) => t.status === "failed");
@@ -564,43 +514,33 @@ async function main(): Promise<void> {
     }
   }
 
-  await hop(
-    "PROOF 1 — @assistant routes into run A, never a second run",
-    async () => {
-      await sendAndAwaitTurn(
-        `@${assistant.name} My favorite color is teal. ` +
-          `Acknowledge in one short sentence.`,
-        "turn__0",
-      );
-      const agents = await listAgents();
-      if (agents.length !== 1) {
-        throw new Error(
-          `the room grew a second agent participant: ` + JSON.stringify(agents),
-        );
-      }
-      expect(agents[0]?.address).toBe(agentAddress);
-    },
-  );
+  await hop("PROOF 1 — @assistant routes into run A, never a second run", async () => {
+    await sendAndAwaitTurn(
+      `@${assistant.name} My favorite color is teal. ` + `Acknowledge in one short sentence.`,
+      "turn__0",
+    );
+    const agents = await listAgents();
+    if (agents.length !== 1) {
+      throw new Error(`the room grew a second agent participant: ` + JSON.stringify(agents));
+    }
+    expect(agents[0]?.address).toBe(agentAddress);
+  });
 
-  await hop(
-    "PROOF 2 (CL-6453) — turn__1 rides the same run and remembers turn__0",
-    async () => {
-      const { replyText } = await sendAndAwaitTurn(
-        `@${assistant.name} What is my favorite color? ` +
-          `Answer with just the color name.`,
-        "turn__1",
+  await hop("PROOF 2 (CL-6453) — turn__1 rides the same run and remembers turn__0", async () => {
+    const { replyText } = await sendAndAwaitTurn(
+      `@${assistant.name} What is my favorite color? ` + `Answer with just the color name.`,
+      "turn__1",
+    );
+    if (!/teal/i.test(replyText)) {
+      throw new Error(
+        `turn__1's reply does not recall turn__0's fact ("teal"): ` +
+          `"${replyText}" — the bootstrap exchange is missing from the ` +
+          `durable history`,
       );
-      if (!/teal/i.test(replyText)) {
-        throw new Error(
-          `turn__1's reply does not recall turn__0's fact ("teal"): ` +
-            `"${replyText}" — the bootstrap exchange is missing from the ` +
-            `durable history`,
-        );
-      }
-      const agents = await listAgents();
-      expect(agents).toHaveLength(1);
-    },
-  );
+    }
+    const agents = await listAgents();
+    expect(agents).toHaveLength(1);
+  });
 
   console.log("\nBoth CL-6451/CL-6453 proofs passed.");
 }
diff --git a/scripts/e2e/database-url.ts b/scripts/e2e/database-url.ts
index 4515ebe035..d79b995f71 100644
--- a/scripts/e2e/database-url.ts
+++ b/scripts/e2e/database-url.ts
@@ -30,9 +30,7 @@ export const REPO_ROOT = path.resolve(import.meta.dir, "..", "..");
 export function e2eDatabaseUrl(): string | undefined {
   const fromProcess = process.env["DATABASE_URL"];
   const url =
-    fromProcess !== undefined && fromProcess !== ""
-      ? fromProcess
-      : databaseUrlFromRepoEnvFile();
+    fromProcess !== undefined && fromProcess !== "" ? fromProcess : databaseUrlFromRepoEnvFile();
   if (url !== undefined && url !== "") return baseUrlToE2eUrl(url);
   assertDatabaseConfigured(undefined, "walking-skeleton suite");
   return undefined;
@@ -75,12 +73,7 @@ function databaseUrlFromRepoEnvFile(): string | undefined {
 }
 
 function isEnoent(error: unknown): boolean {
-  return (
-    typeof error === "object" &&
-    error !== null &&
-    "code" in error &&
-    error.code === "ENOENT"
-  );
+  return typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
 }
 
 /**
diff --git a/scripts/e2e/db-gate.test.ts b/scripts/e2e/db-gate.test.ts
index 3403babaaf..ef217f360e 100644
--- a/scripts/e2e/db-gate.test.ts
+++ b/scripts/e2e/db-gate.test.ts
@@ -2,8 +2,8 @@
 // total silence. Locally (CI unset) it returns describe.skip and the
 // summary names `compose.test.yml`. Under CI=true it throws
 // instead, so a miswired pipeline cannot report green on a suite that
-// never ran. GitHub's unit/structural jobs have no Postgres and are
-// not required; they still skip with the same compose hint.
+// never ran. None of ci.yml's jobs provision Postgres (CL-8150); they
+// all still skip with the same compose hint.
 
 import { afterEach, describe, expect, test } from "bun:test";
 import { databaseIsRequired, dbGate } from "./db-gate.ts";
@@ -31,30 +31,20 @@ describe("databaseIsRequired", () => {
     expect(databaseIsRequired()).toBe(false);
   });
 
-  test("is true when CI=true and the job is not a unit/structural job", () => {
+  test("is true when CI=true and the job is not a named ci.yml job", () => {
     process.env["CI"] = "true";
     unset("GITHUB_JOB");
     expect(databaseIsRequired()).toBe(true);
-    process.env["GITHUB_JOB"] = "e2e";
-    expect(databaseIsRequired()).toBe(true);
-    process.env["GITHUB_JOB"] = "isolation";
-    expect(databaseIsRequired()).toBe(true);
-    process.env["GITHUB_JOB"] = "db-suites";
+    process.env["GITHUB_JOB"] = "some-other-job";
     expect(databaseIsRequired()).toBe(true);
   });
 
-  test("is false on GitHub jobs that never provision Postgres", () => {
+  test("is false on every ci.yml job — none of them provision Postgres", () => {
     process.env["CI"] = "true";
-    process.env["GITHUB_JOB"] = "build-test";
-    expect(databaseIsRequired()).toBe(false);
-    process.env["GITHUB_JOB"] = "build-test-shard";
-    expect(databaseIsRequired()).toBe(false);
-    process.env["GITHUB_JOB"] = "structural";
-    expect(databaseIsRequired()).toBe(false);
-    process.env["GITHUB_JOB"] = "lint";
-    expect(databaseIsRequired()).toBe(false);
-    process.env["GITHUB_JOB"] = "typecheck";
-    expect(databaseIsRequired()).toBe(false);
+    for (const job of ["setup", "lint", "typecheck", "structural", "unit"]) {
+      process.env["GITHUB_JOB"] = job;
+      expect(databaseIsRequired()).toBe(false);
+    }
   });
 });
 
@@ -62,9 +52,7 @@ describe("dbGate", () => {
   test("returns describe when a database URL is configured", () => {
     process.env["CI"] = "true";
     unset("GITHUB_JOB");
-    expect(dbGate("postgres://localhost:5432/workbench", "example")).toBe(
-      describe,
-    );
+    expect(dbGate("postgres://localhost:5432/workbench", "example")).toBe(describe);
   });
 
   test("returns describe.skip when no database is configured and CI is unset", () => {
@@ -96,14 +84,12 @@ describe("dbGate", () => {
   test("does not throw under CI=true once a database is configured", () => {
     process.env["CI"] = "true";
     unset("GITHUB_JOB");
-    expect(dbGate("postgres://localhost:5432/workbench", "example")).toBe(
-      describe,
-    );
+    expect(dbGate("postgres://localhost:5432/workbench", "example")).toBe(describe);
   });
 
   test("skips on the GitHub unit job even when CI=true", () => {
     process.env["CI"] = "true";
-    process.env["GITHUB_JOB"] = "build-test";
+    process.env["GITHUB_JOB"] = "unit";
     expect(dbGate(undefined, "example")).toBe(describe.skip);
   });
 });
diff --git a/scripts/e2e/db-gate.ts b/scripts/e2e/db-gate.ts
index b07afe70d2..c644005799 100644
--- a/scripts/e2e/db-gate.ts
+++ b/scripts/e2e/db-gate.ts
@@ -10,35 +10,23 @@ import { afterAll, describe } from "bun:test";
 
 export const TEST_COMPOSE_FILE = "compose.test.yml";
 export const TEST_COMPOSE_UP = `docker compose -f ${TEST_COMPOSE_FILE} up -d`;
-export const TEST_DATABASE_URL =
-  "postgres://postgres:postgres@localhost:5432/workbench";
+export const TEST_DATABASE_URL = "postgres://postgres:postgres@localhost:5432/workbench";
 
 export const MISSING_DATABASE_HINT =
   `Start Postgres with \`${TEST_COMPOSE_UP}\`, then ` +
   `DATABASE_URL=${TEST_DATABASE_URL} bun test ...`;
 
-// GitHub Actions sets CI=true on every job. The unit/structural jobs
-// never provision Postgres; DB-gated suites skip there (loudly) and
-// run in e2e / isolation / db-suites, which do. Any other CI context
-// — including `CI=true bun test` locally — treats a missing
-// DATABASE_URL as a hard failure so a miswired pipeline cannot skip
-// green.
-const CI_JOBS_WITHOUT_POSTGRES = new Set([
-  "lint",
-  "typecheck",
-  // "build-test" itself is now a no-op summary job (see ci.yml); the
-  // actual GITHUB_JOB name a sharded build-test matrix run carries is
-  // "build-test-shard". Both stay listed: the summary job sets no env
-  // and never runs a suite, but naming it costs nothing and keeps this
-  // set matching ci.yml by inspection rather than by memory.
-  "build-test",
-  "build-test-shard",
-  "structural",
-]);
+// GitHub Actions sets CI=true on every job. None of ci.yml's jobs
+// provision Postgres (CL-8150 dropped the db-backed e2e/isolation/
+// db-suites jobs), so every DB-gated suite skips there (loudly) —
+// listed here so `bun run check:structural`'s own fetch-depth: 0
+// checkout doesn't accidentally start hard-failing a suite it never
+// meant to run. Any other CI context — including `CI=true bun test`
+// locally — treats a missing DATABASE_URL as a hard failure so a
+// miswired pipeline cannot skip green.
+const CI_JOBS_WITHOUT_POSTGRES = new Set(["setup", "lint", "typecheck", "structural", "unit"]);
 
-export function databaseIsRequired(
-  env: NodeJS.ProcessEnv = process.env,
-): boolean {
+export function databaseIsRequired(env: NodeJS.ProcessEnv = process.env): boolean {
   if (env["CI"] !== "true") return false;
   const job = env["GITHUB_JOB"];
   if (job !== undefined && job !== "" && CI_JOBS_WITHOUT_POSTGRES.has(job)) {
@@ -48,19 +36,14 @@ export function databaseIsRequired(
 }
 
 export function missingDatabaseError(label: string): Error {
-  return new Error(
-    `DATABASE_URL is not set; "${label}" cannot run. ${MISSING_DATABASE_HINT}`,
-  );
+  return new Error(`DATABASE_URL is not set; "${label}" cannot run. ${MISSING_DATABASE_HINT}`);
 }
 
 export function skippedDatabaseWarning(label: string): string {
   return `${label}: DATABASE_URL is not set; suite skipped. ${MISSING_DATABASE_HINT}`;
 }
 
-export function assertDatabaseConfigured(
-  databaseUrl: string | undefined,
-  label: string,
-): void {
+export function assertDatabaseConfigured(databaseUrl: string | undefined, label: string): void {
   if (databaseUrl !== undefined && databaseUrl !== "") return;
   if (databaseIsRequired()) throw missingDatabaseError(label);
 }
@@ -94,10 +77,7 @@ function printSummary(): void {
  * databaseUrl: the resolved DATABASE_URL (or "" / undefined when absent).
  * label: identifies the skipped suite in the summary — pass import.meta.path.
  */
-export function dbGate(
-  databaseUrl: string | undefined,
-  label: string,
-): typeof describe {
+export function dbGate(databaseUrl: string | undefined, label: string): typeof describe {
   if (databaseUrl !== undefined && databaseUrl !== "") return describe;
   if (databaseIsRequired()) throw missingDatabaseError(label);
   skipped.push(label);
diff --git a/scripts/e2e/db-setup.test.ts b/scripts/e2e/db-setup.test.ts
index 671bab37d3..37b5fa4ccd 100644
--- a/scripts/e2e/db-setup.test.ts
+++ b/scripts/e2e/db-setup.test.ts
@@ -20,13 +20,7 @@ import { assertDatabaseConfigured, skippedDatabaseWarning } from "./db-gate.ts";
 
 const REPO_ROOT = path.resolve(import.meta.dir, "..", "..");
 const HUB_DIR = path.join(REPO_ROOT, "apps", "hub");
-const VENDORED_MIGRATIONS_DIR = path.join(
-  REPO_ROOT,
-  "vendor",
-  "intx",
-  "db",
-  "migrations",
-);
+const VENDORED_MIGRATIONS_DIR = path.join(REPO_ROOT, "vendor", "intx", "db", "migrations");
 
 function scratchDatabaseUrl(): string | undefined {
   const base = process.env["DATABASE_URL"];
diff --git a/scripts/e2e/docker-sidecar-smoke.ts b/scripts/e2e/docker-sidecar-smoke.ts
index 4d40807ab9..93f26863b7 100644
--- a/scripts/e2e/docker-sidecar-smoke.ts
+++ b/scripts/e2e/docker-sidecar-smoke.ts
@@ -31,13 +31,10 @@ const LOG_PREFIX = "[docker-sidecar-smoke]";
 
 async function dockerAvailable(): Promise<boolean> {
   try {
-    const proc = Bun.spawn(
-      ["docker", "version", "--format", "{{.Server.Version}}"],
-      {
-        stdout: "pipe",
-        stderr: "pipe",
-      },
-    );
+    const proc = Bun.spawn(["docker", "version", "--format", "{{.Server.Version}}"], {
+      stdout: "pipe",
+      stderr: "pipe",
+    });
     const exitCode = await proc.exited;
     return exitCode === 0;
   } catch {
@@ -68,14 +65,8 @@ async function containerLabeled(
   return stdout.trim().length > 0;
 }
 
-async function containerRunning(
-  allocationId: string,
-  sidecarId: string,
-): Promise<boolean> {
-  return containerLabeled(allocationId, sidecarId, [
-    "--filter",
-    "status=running",
-  ]);
+async function containerRunning(allocationId: string, sidecarId: string): Promise<boolean> {
+  return containerLabeled(allocationId, sidecarId, ["--filter", "status=running"]);
 }
 
 async function main(): Promise<void> {
@@ -113,14 +104,10 @@ async function main(): Promise<void> {
   };
 
   try {
-    console.log(
-      `${LOG_PREFIX} create: requesting a sidecar container from ${image}`,
-    );
+    console.log(`${LOG_PREFIX} create: requesting a sidecar container from ${image}`);
     const ensureResult = await provisioner.ensure(request);
     if (ensureResult.kind !== "accepted") {
-      throw new Error(
-        `ensure was rejected: ${ensureResult.code}: ${ensureResult.message}`,
-      );
+      throw new Error(`ensure was rejected: ${ensureResult.code}: ${ensureResult.message}`);
     }
     console.log(
       `${LOG_PREFIX} exclusive-run: accepted, externalRef=${ensureResult.externalRef ?? "(none)"}`,
@@ -134,9 +121,7 @@ async function main(): Promise<void> {
     console.log(`${LOG_PREFIX} container-appears: confirmed via docker ps -a`);
 
     if (realImage !== undefined) {
-      const stayUpSeconds = Number(
-        process.env["DOCKER_SIDECAR_SMOKE_STAY_UP_SECONDS"] ?? "5",
-      );
+      const stayUpSeconds = Number(process.env["DOCKER_SIDECAR_SMOKE_STAY_UP_SECONDS"] ?? "5");
       console.log(
         `${LOG_PREFIX} real-image mode: asserting the container stays up for ${String(stayUpSeconds)}s`,
       );
@@ -155,14 +140,10 @@ async function main(): Promise<void> {
       allocationId,
       generation: request.generation,
       sidecarId,
-      ...(ensureResult.externalRef !== undefined
-        ? { externalRef: ensureResult.externalRef }
-        : {}),
+      ...(ensureResult.externalRef !== undefined ? { externalRef: ensureResult.externalRef } : {}),
     });
     if (destroyResult.kind !== "destroyed") {
-      throw new Error(
-        `release failed: ${destroyResult.code}: ${destroyResult.message}`,
-      );
+      throw new Error(`release failed: ${destroyResult.code}: ${destroyResult.message}`);
     }
     console.log(`${LOG_PREFIX} release: destroy() reported destroyed`);
 
@@ -171,9 +152,7 @@ async function main(): Promise<void> {
         "container-gone check failed: a container with these labels is still present",
       );
     }
-    console.log(
-      `${LOG_PREFIX} container-gone: confirmed — full lifecycle proof passed`,
-    );
+    console.log(`${LOG_PREFIX} container-gone: confirmed — full lifecycle proof passed`);
   } finally {
     await rm(stateDir, { recursive: true, force: true });
   }
diff --git a/scripts/e2e/greeting-delivery.test.ts b/scripts/e2e/greeting-delivery.test.ts
index dddc3ada40..949b702f49 100644
--- a/scripts/e2e/greeting-delivery.test.ts
+++ b/scripts/e2e/greeting-delivery.test.ts
@@ -21,14 +21,8 @@ import { describe, expect, test } from "bun:test";
 
 import { resetSchema, setupDatabase } from "../db-setup.ts";
 import { createGitWorkflowPusher } from "../../packages/connections/src/workflow-push.ts";
-import {
-  DEFAULT_WORKFLOWS,
-  seedTenant,
-} from "../../packages/onboarding/src/tenant-seed.ts";
-import {
-  createHubAPI,
-  type ApiCall,
-} from "../../packages/hub-api-client/src/index.ts";
+import { DEFAULT_WORKFLOWS, seedTenant } from "../../packages/onboarding/src/tenant-seed.ts";
+import { createHubAPI, type ApiCall } from "../../packages/hub-api-client/src/index.ts";
 import {
   findPersonalTenant,
   testAndPersistCredential,
@@ -72,11 +66,8 @@ const STUB_API_KEY = "e2e-greeting-delivery-stub-key-not-real";
 // inference. The opening greeting itself is canned either way — it
 // never dials a model.
 const OLLAMA_BASE_URL = process.env["OLLAMA_BASE_URL"];
-const USE_OLLAMA =
-  process.env["E2E_PROVIDER"] === "ollama" && OLLAMA_BASE_URL !== undefined;
-const CONNECT_PROVIDER = USE_OLLAMA
-  ? ("ollama" as const)
-  : ("anthropic" as const);
+const USE_OLLAMA = process.env["E2E_PROVIDER"] === "ollama" && OLLAMA_BASE_URL !== undefined;
+const CONNECT_PROVIDER = USE_OLLAMA ? ("ollama" as const) : ("anthropic" as const);
 const CONNECT_API_KEY = USE_OLLAMA ? OLLAMA_PLACEHOLDER_SECRET : STUB_API_KEY;
 
 function stringField(data: unknown, field: string, what: string): string {
@@ -84,9 +75,7 @@ function stringField(data: unknown, field: string, what: string): string {
     const value = (data as Record<string, unknown>)[field];
     if (typeof value === "string" && value !== "") return value;
   }
-  throw new Error(
-    `${what}: missing string field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing string field "${field}": ${JSON.stringify(data)}`);
 }
 
 function arrayField(data: unknown, field: string, what: string): unknown[] {
@@ -94,9 +83,7 @@ function arrayField(data: unknown, field: string, what: string): unknown[] {
     const value = (data as Record<string, unknown>)[field];
     if (Array.isArray(value)) return value;
   }
-  throw new Error(
-    `${what}: missing array field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing array field "${field}": ${JSON.stringify(data)}`);
 }
 
 async function signUp(
@@ -139,9 +126,7 @@ describe.skipIf(databaseUrl === undefined)(
         startHub({
           databaseUrl: url,
           port: freePort(),
-          sessionSecret: Buffer.from(
-            crypto.getRandomValues(new Uint8Array(32)),
-          ).toString("hex"),
+          sessionSecret: Buffer.from(crypto.getRandomValues(new Uint8Array(32))).toString("hex"),
           dataDir: await tempDir("e2e-greeting-delivery-hub-data-"),
         }),
       );
@@ -169,13 +154,7 @@ describe.skipIf(databaseUrl === undefined)(
         // ordinary `POST /api/tenants` with a caller-chosen slug, and
         // its creator is the native owner (same shape `local-rip`
         // proves).
-        const probe = await api(
-          hub.baseUrl,
-          "GET",
-          "/api/me/principals",
-          undefined,
-          res.cookies,
-        );
+        const probe = await api(hub.baseUrl, "GET", "/api/me/principals", undefined, res.cookies);
         expectStatus("alice genesis probe", probe, 200);
         expect((probe.data as { data: unknown[] }).data).toEqual([]);
         const minted = await api(
@@ -189,16 +168,12 @@ describe.skipIf(databaseUrl === undefined)(
         const mintedBody = minted.data as { id?: string };
         const tenantId = mintedBody.id;
         if (tenantId === undefined) {
-          throw new Error(
-            `create tenant answered no id: ${JSON.stringify(minted.data)}`,
-          );
+          throw new Error(`create tenant answered no id: ${JSON.stringify(minted.data)}`);
         }
         return { cookies: res.cookies, userId, tenantId };
       });
 
-      const user = await hop("sign-up", () =>
-        signUp(hub.baseUrl, "Greeting Delivery Tester"),
-      );
+      const user = await hop("sign-up", () => signUp(hub.baseUrl, "Greeting Delivery Tester"));
 
       // Stock composition auto-joins nobody: a second signup only
       // registers an account. Alice brings the tester onto the root
@@ -216,13 +191,11 @@ describe.skipIf(databaseUrl === undefined)(
             admin.cookies,
           );
           expectStatus("list root roles", roles, 200);
-          const memberRole = (
-            roles.data as { data: { id: string; name: string }[] }
-          ).data.find((role) => role.name === "member");
+          const memberRole = (roles.data as { data: { id: string; name: string }[] }).data.find(
+            (role) => role.name === "member",
+          );
           if (memberRole === undefined) {
-            throw new Error(
-              `no member role on the root tenant: ${JSON.stringify(roles.data)}`,
-            );
+            throw new Error(`no member role on the root tenant: ${JSON.stringify(roles.data)}`);
           }
           const invited = await api(
             hub.baseUrl,
@@ -248,22 +221,13 @@ describe.skipIf(databaseUrl === undefined)(
       // A joined member is read-only by design, so every owner-level
       // leg below — seeding, chat mint, turns — runs as alice, the
       // genesis owner.
-      const tenant = await hop(
-        "the joined root resolves through findPersonalTenant",
-        async () => {
-          const found = await findPersonalTenant(
-            hubApi,
-            admin.cookies,
-            provisioned.tenantSlug,
-          );
-          if (found === undefined) {
-            throw new Error(
-              `findPersonalTenant found nothing for slug ${provisioned.tenantSlug}`,
-            );
-          }
-          return found;
-        },
-      );
+      const tenant = await hop("the joined root resolves through findPersonalTenant", async () => {
+        const found = await findPersonalTenant(hubApi, admin.cookies, provisioned.tenantSlug);
+        if (found === undefined) {
+          throw new Error(`findPersonalTenant found nothing for slug ${provisioned.tenantSlug}`);
+        }
+        return found;
+      });
 
       const pushWorkflow = createGitWorkflowPusher();
 
@@ -301,9 +265,7 @@ describe.skipIf(databaseUrl === undefined)(
           const deadline = Date.now() + 60_000;
           for (;;) {
             if (hub.exited()) {
-              throw new Error(
-                `hub exited before ensureSeeded could run; output:\n${hub.output()}`,
-              );
+              throw new Error(`hub exited before ensureSeeded could run; output:\n${hub.output()}`);
             }
             try {
               const seedArgs = {
@@ -368,12 +330,7 @@ describe.skipIf(databaseUrl === undefined)(
                 principalId: tenant.principalId,
                 domain: tenant.tenantDomain,
               },
-              model: await modelSourceFor(
-                hubApi,
-                admin.cookies,
-                tenant.tenantId,
-                CONNECT_PROVIDER,
-              ),
+              model: await modelSourceFor(hubApi, admin.cookies, tenant.tenantId, CONNECT_PROVIDER),
               pushWorkflow,
               log: () => undefined,
               workflows: DEFAULT_WORKFLOWS,
@@ -387,10 +344,7 @@ describe.skipIf(databaseUrl === undefined)(
         }
       }
 
-      await hop(
-        "every default workflow deploys and goes live",
-        deploySeededWorkflows,
-      );
+      await hop("every default workflow deploys and goes live", deploySeededWorkflows);
 
       const assistantDefinitionId = await hop(
         "the 'assistant' default workflow is invitable tenant-wide",
@@ -405,11 +359,10 @@ describe.skipIf(databaseUrl === undefined)(
               admin.cookies,
             );
             if (res.status === 200) {
-              const items = arrayField(
-                res.data,
-                "items",
-                "list invitable definitions",
-              ) as { id: string; name: string }[];
+              const items = arrayField(res.data, "items", "list invitable definitions") as {
+                id: string;
+                name: string;
+              }[];
               const assistant = items.find((item) => item.name === "assistant");
               if (assistant !== undefined) return assistant.id;
             }
@@ -430,9 +383,7 @@ describe.skipIf(databaseUrl === undefined)(
           let res: ApiResult;
           for (;;) {
             if (hub.exited()) {
-              throw new Error(
-                `hub exited before chat creation; output:\n${hub.output()}`,
-              );
+              throw new Error(`hub exited before chat creation; output:\n${hub.output()}`);
             }
             res = await api(
               hub.baseUrl,
@@ -452,11 +403,10 @@ describe.skipIf(databaseUrl === undefined)(
           }
           expectStatus("create chat", res, 201);
           const id = stringField(res.data, "id", "create chat");
-          const participants = arrayField(
-            res.data,
-            "participants",
-            "create chat",
-          ) as { address: string; handle: string }[];
+          const participants = arrayField(res.data, "participants", "create chat") as {
+            address: string;
+            handle: string;
+          }[];
           const agent = participants.find((p) => p.handle === "myra");
           if (agent === undefined) {
             throw new Error(
@@ -486,18 +436,13 @@ describe.skipIf(databaseUrl === undefined)(
               admin.cookies,
             );
             expectStatus("list chat messages", res, 200);
-            const items = arrayField(
-              res.data,
-              "items",
-              "list chat messages",
-            ) as {
+            const items = arrayField(res.data, "items", "list chat messages") as {
               sender: { address: string };
               parts: { kind: string; text?: string }[];
             }[];
             const agentMessage = items.find(
               (item) =>
-                item.sender.address === agentAddress &&
-                item.parts.some((p) => p.kind === "text"),
+                item.sender.address === agentAddress && item.parts.some((p) => p.kind === "text"),
             );
             if (agentMessage !== undefined) {
               const text = agentMessage.parts
@@ -573,11 +518,7 @@ describe.skipIf(databaseUrl === undefined)(
                 undefined,
                 admin.cookies,
               );
-              const items = arrayField(
-                res.data,
-                "items",
-                "list chat messages",
-              ) as {
+              const items = arrayField(res.data, "items", "list chat messages") as {
                 sender: { address: string };
                 createdAt: string;
                 parts: { kind: string; text?: string }[];
diff --git a/scripts/e2e/harness.test.ts b/scripts/e2e/harness.test.ts
index 6f9c456c87..0664a0faa6 100644
--- a/scripts/e2e/harness.test.ts
+++ b/scripts/e2e/harness.test.ts
@@ -104,15 +104,11 @@ describe("parseEnvFileDatabaseUrl", () => {
 
   test("strips surrounding quotes and trims", () => {
     expect(
-      parseEnvFileDatabaseUrl(
-        `  DATABASE_URL="postgres://localhost:5432/workbench"  \n`,
-      ),
-    ).toBe("postgres://localhost:5432/workbench");
-    expect(
-      parseEnvFileDatabaseUrl(
-        `DATABASE_URL='postgres://localhost:5432/workbench'\n`,
-      ),
+      parseEnvFileDatabaseUrl(`  DATABASE_URL="postgres://localhost:5432/workbench"  \n`),
     ).toBe("postgres://localhost:5432/workbench");
+    expect(parseEnvFileDatabaseUrl(`DATABASE_URL='postgres://localhost:5432/workbench'\n`)).toBe(
+      "postgres://localhost:5432/workbench",
+    );
   });
 
   test("ignores a commented DATABASE_URL and returns undefined when none is set", () => {
@@ -168,9 +164,7 @@ describe("provisionSidecar", () => {
       const dbModule = (await import(Bun.resolveSync("@intx/db", HUB_DIR))) as {
         createDB: (raw: unknown) => { db: unknown; close: () => Promise<void> };
       };
-      const hubSessionsModule = (await import(
-        Bun.resolveSync("@intx/hub-sessions", HUB_DIR)
-      )) as {
+      const hubSessionsModule = (await import(Bun.resolveSync("@intx/hub-sessions", HUB_DIR))) as {
         createSidecarCredentialResolver: (deps: { db: unknown }) => {
           resolve: (token: string) => Promise<unknown>;
         };
diff --git a/scripts/e2e/harness.ts b/scripts/e2e/harness.ts
index e43eb16c0f..f66ffa9675 100644
--- a/scripts/e2e/harness.ts
+++ b/scripts/e2e/harness.ts
@@ -60,9 +60,7 @@ export async function hop<T>(name: string, run: () => Promise<T>): Promise<T> {
  * registered before it. The first failure still surfaces (rethrown after
  * the sweep).
  */
-export async function runCleanups(
-  cleanups: (() => Promise<void> | void)[],
-): Promise<void> {
+export async function runCleanups(cleanups: (() => Promise<void> | void)[]): Promise<void> {
   let firstFailure: unknown;
   for (const cleanup of cleanups.splice(0).reverse()) {
     try {
@@ -160,10 +158,7 @@ export async function provisionSidecar(
   sidecarId: string,
   token: string,
 ): Promise<void> {
-  const digest = await crypto.subtle.digest(
-    "SHA-256",
-    new TextEncoder().encode(token),
-  );
+  const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(token));
   const sql = await connectE2eDb(databaseUrl);
   try {
     await sql.unsafe(
@@ -186,11 +181,7 @@ export interface SpawnedApp {
   stop(): Promise<void>;
 }
 
-function spawnApp(
-  label: string,
-  cwd: string,
-  env: Record<string, string>,
-): SpawnedApp {
+function spawnApp(label: string, cwd: string, env: Record<string, string>): SpawnedApp {
   const proc = Bun.spawn(["bun", "src/index.ts"], {
     cwd,
     env,
@@ -203,10 +194,7 @@ function spawnApp(
   // through the handle the suite still holds; teeing to a file makes a
   // crash-recovery run diagnosable after the fact.
   const logDir = process.env["E2E_LOG_DIR"];
-  const logPath =
-    logDir === undefined
-      ? undefined
-      : `${logDir}/${label}-${String(proc.pid)}.log`;
+  const logPath = logDir === undefined ? undefined : `${logDir}/${label}-${String(proc.pid)}.log`;
   const capture = async (stream: ReadableStream<Uint8Array>) => {
     const decoder = new TextDecoder();
     for await (const chunk of stream) {
@@ -319,9 +307,7 @@ export async function startHub(options: {
     }
     if (Date.now() > deadline) {
       await app.stop();
-      throw new Error(
-        `hub did not answer /status within 30s; output:\n${app.output()}`,
-      );
+      throw new Error(`hub did not answer /status within 30s; output:\n${app.output()}`);
     }
     await Bun.sleep(250);
   }
@@ -410,15 +396,10 @@ export async function api(
   return { status: res.status, data, cookies: nextCookies };
 }
 
-export function expectStatus(
-  what: string,
-  result: ApiResult,
-  expected: number,
-): void {
+export function expectStatus(what: string, result: ApiResult, expected: number): void {
   if (result.status !== expected) {
     throw new Error(
-      `${what}: expected HTTP ${expected}, got ${result.status}: ` +
-        JSON.stringify(result.data),
+      `${what}: expected HTTP ${expected}, got ${result.status}: ` + JSON.stringify(result.data),
     );
   }
 }
diff --git a/scripts/e2e/heartbeat.test.ts b/scripts/e2e/heartbeat.test.ts
index 3bcc30b824..9410544f97 100644
--- a/scripts/e2e/heartbeat.test.ts
+++ b/scripts/e2e/heartbeat.test.ts
@@ -19,10 +19,7 @@ import {
   buildHeartbeatWorkflow,
   serializeHeartbeatWorkflow,
 } from "../../workflows/heartbeat/src/index.ts";
-import {
-  ensureNoopCatalogOffering,
-  startNoopInferenceServer,
-} from "./noop-inference-server.ts";
+import { ensureNoopCatalogOffering, startNoopInferenceServer } from "./noop-inference-server.ts";
 import {
   api,
   createCleanupHarness,
@@ -52,9 +49,7 @@ function stringField(data: unknown, field: string, what: string): string {
     const value = (data as Record<string, unknown>)[field];
     if (typeof value === "string" && value !== "") return value;
   }
-  throw new Error(
-    `${what}: missing string field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing string field "${field}": ${JSON.stringify(data)}`);
 }
 
 function runIds(data: unknown): string[] {
@@ -99,9 +94,7 @@ describe.skipIf(databaseUrl === undefined)("heartbeat workflow", () => {
       const handle = await startHub({
         databaseUrl: url,
         port: freePort(),
-        sessionSecret: Buffer.from(
-          crypto.getRandomValues(new Uint8Array(32)),
-        ).toString("hex"),
+        sessionSecret: Buffer.from(crypto.getRandomValues(new Uint8Array(32))).toString("hex"),
         dataDir: await tempDir("e2e-heartbeat-hub-data-"),
       });
       track(handle);
@@ -135,49 +128,46 @@ describe.skipIf(databaseUrl === undefined)("heartbeat workflow", () => {
     });
 
     const assetName = "heartbeat";
-    const { assetId, commitSha } = await hop(
-      "workflow asset publication",
-      async () => {
-        const created = await api(
-          hub.baseUrl,
-          "POST",
-          `/api/tenants/${tenantId}/assets`,
-          { kind: "workflow", name: assetName },
-          user.cookies,
-        );
-        expectStatus("create workflow asset", created, 201);
-        const id = stringField(created.data, "id", "create workflow asset");
+    const { assetId, commitSha } = await hop("workflow asset publication", async () => {
+      const created = await api(
+        hub.baseUrl,
+        "POST",
+        `/api/tenants/${tenantId}/assets`,
+        { kind: "workflow", name: assetName },
+        user.cookies,
+      );
+      expectStatus("create workflow asset", created, 201);
+      const id = stringField(created.data, "id", "create workflow asset");
 
-        const minted = await api(
-          hub.baseUrl,
-          "POST",
-          `/api/tenants/${tenantId}/git-tokens`,
-          {
-            name: "e2e-heartbeat-push",
-            resource: "asset:*",
-            refPattern: "**",
-            actions: ["can_read", "can_push"],
-            expiresAt: new Date(Date.now() + 10 * 60_000).toISOString(),
-          },
-          user.cookies,
-        );
-        expectStatus("mint git token", minted, 201);
+      const minted = await api(
+        hub.baseUrl,
+        "POST",
+        `/api/tenants/${tenantId}/git-tokens`,
+        {
+          name: "e2e-heartbeat-push",
+          resource: "asset:*",
+          refPattern: "**",
+          actions: ["can_read", "can_push"],
+          expiresAt: new Date(Date.now() + 10 * 60_000).toISOString(),
+        },
+        user.cookies,
+      );
+      expectStatus("mint git token", minted, 201);
 
-        const definition = buildHeartbeatWorkflow({
-          triggerAddress: `heartbeat@${slug}.localhost`,
-          inferencePreferences: [{ provider: "anthropic", model: "noop" }],
-          turnTimeoutMs: 30_000,
-        });
-        const pushed = await pushWorkflowSource({
-          baseUrl: hub.baseUrl,
-          tenantId,
-          assetName,
-          tokenSecret: stringField(minted.data, "secret", "mint git token"),
-          workflowJson: serializeHeartbeatWorkflow(definition),
-        });
-        return { assetId: id, commitSha: pushed.commitSha };
-      },
-    );
+      const definition = buildHeartbeatWorkflow({
+        triggerAddress: `heartbeat@${slug}.localhost`,
+        inferencePreferences: [{ provider: "anthropic", model: "noop" }],
+        turnTimeoutMs: 30_000,
+      });
+      const pushed = await pushWorkflowSource({
+        baseUrl: hub.baseUrl,
+        tenantId,
+        assetName,
+        tokenSecret: stringField(minted.data, "secret", "mint git token"),
+        workflowJson: serializeHeartbeatWorkflow(definition),
+      });
+      return { assetId: id, commitSha: pushed.commitSha };
+    });
 
     // The deploy's source is this suite's own, really-reachable noop
     // inference server — not a placeholder like the walking skeleton's
@@ -195,8 +185,7 @@ describe.skipIf(databaseUrl === undefined)("heartbeat workflow", () => {
     });
     const offeringId = await hop("noop catalog seeding", () =>
       ensureNoopCatalogOffering(
-        (method, path, body, cookies) =>
-          api(hub.baseUrl, method, path, body, cookies),
+        (method, path, body, cookies) => api(hub.baseUrl, method, path, body, cookies),
         user.cookies,
         tenantId,
         noopServer.baseUrl,
@@ -237,52 +226,47 @@ describe.skipIf(databaseUrl === undefined)("heartbeat workflow", () => {
       return stringField(res.data, "id", "deploy heartbeat workflow");
     });
 
-    const startedRunId = await hop(
-      "heartbeat run starts against noop-inference",
-      async () => {
-        const before = new Set(
-          runIds(
-            (
-              await api(
-                hub.baseUrl,
-                "GET",
-                `/api/tenants/${tenantId}/workflows/${deploymentId}/runs`,
-                undefined,
-                user.cookies,
-              )
-            ).data,
-          ),
-        );
+    const startedRunId = await hop("heartbeat run starts against noop-inference", async () => {
+      const before = new Set(
+        runIds(
+          (
+            await api(
+              hub.baseUrl,
+              "GET",
+              `/api/tenants/${tenantId}/workflows/${deploymentId}/runs`,
+              undefined,
+              user.cookies,
+            )
+          ).data,
+        ),
+      );
 
-        const triggered = await api(
+      const triggered = await api(
+        hub.baseUrl,
+        "POST",
+        `/api/tenants/${tenantId}/workflows/${deploymentId}/mail`,
+        { content: "heartbeat" },
+        user.cookies,
+      );
+      expectStatus("trigger heartbeat mail", triggered, 202);
+
+      const deadline = Date.now() + 30_000;
+      for (;;) {
+        const listed = await api(
           hub.baseUrl,
-          "POST",
-          `/api/tenants/${tenantId}/workflows/${deploymentId}/mail`,
-          { content: "heartbeat" },
+          "GET",
+          `/api/tenants/${tenantId}/workflows/${deploymentId}/runs`,
+          undefined,
           user.cookies,
         );
-        expectStatus("trigger heartbeat mail", triggered, 202);
-
-        const deadline = Date.now() + 30_000;
-        for (;;) {
-          const listed = await api(
-            hub.baseUrl,
-            "GET",
-            `/api/tenants/${tenantId}/workflows/${deploymentId}/runs`,
-            undefined,
-            user.cookies,
-          );
-          const started = runIds(listed.data).find((id) => !before.has(id));
-          if (started !== undefined) return started;
-          if (Date.now() > deadline) {
-            throw new Error(
-              "heartbeat trigger was accepted but no run started within 30s",
-            );
-          }
-          await Bun.sleep(200);
+        const started = runIds(listed.data).find((id) => !before.has(id));
+        if (started !== undefined) return started;
+        if (Date.now() > deadline) {
+          throw new Error("heartbeat trigger was accepted but no run started within 30s");
         }
-      },
-    );
+        await Bun.sleep(200);
+      }
+    });
 
     // The real gate: a run id proves only that the mail route accepted
     // the trigger. Whether the deployment actually resolves — the
@@ -293,14 +277,7 @@ describe.skipIf(databaseUrl === undefined)("heartbeat workflow", () => {
     // terminal event at all), failing this loudly instead of a
     // "started" run standing in for a working platform.
     const events = await hop("heartbeat run completes", () =>
-      waitForRunCompletion(
-        hub.baseUrl,
-        tenantId,
-        deploymentId,
-        startedRunId,
-        user.cookies,
-        30_000,
-      ),
+      waitForRunCompletion(hub.baseUrl, tenantId, deploymentId, startedRunId, user.cookies, 30_000),
     );
     expectStepCompleted(events, HEARTBEAT_STEP_ID);
 
diff --git a/scripts/e2e/list-suites.ts b/scripts/e2e/list-suites.ts
index 1e4f4af39c..acac1af2ff 100644
--- a/scripts/e2e/list-suites.ts
+++ b/scripts/e2e/list-suites.ts
@@ -6,12 +6,7 @@
 import { readdir } from "node:fs/promises";
 import { join } from "node:path";
 
-export const UNIT_SUITE_FILES = [
-  "harness",
-  "db-gate",
-  "db-setup",
-  "list-suites",
-] as const;
+export const UNIT_SUITE_FILES = ["harness", "db-gate", "db-setup", "list-suites"] as const;
 
 export async function listSuites(e2eDir: string): Promise<string[]> {
   const entries = await readdir(e2eDir, { withFileTypes: true });
diff --git a/scripts/e2e/local-rip.test.ts b/scripts/e2e/local-rip.test.ts
index 9101825814..a483f54050 100644
--- a/scripts/e2e/local-rip.test.ts
+++ b/scripts/e2e/local-rip.test.ts
@@ -68,11 +68,7 @@ import {
   seedTenant,
 } from "../../packages/onboarding/src/tenant-seed.ts";
 import { runPublishTools } from "../publish-tools.ts";
-import {
-  createHubAPI,
-  parseAs,
-  type ApiCall,
-} from "../../packages/hub-api-client/src/index.ts";
+import { createHubAPI, parseAs, type ApiCall } from "../../packages/hub-api-client/src/index.ts";
 import {
   findPersonalTenant,
   testAndPersistCredential,
@@ -119,9 +115,7 @@ function stringField(data: unknown, field: string, what: string): string {
     const value = (data as Record<string, unknown>)[field];
     if (typeof value === "string" && value !== "") return value;
   }
-  throw new Error(
-    `${what}: missing string field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing string field "${field}": ${JSON.stringify(data)}`);
 }
 
 async function signUp(
@@ -147,674 +141,578 @@ async function signUp(
   return { userId, email, cookies: res.cookies };
 }
 
-describe.skipIf(databaseUrl === undefined)(
-  "local-rip: onboard → connect",
-  () => {
-    test("a brand-new person signs up, joins the root as a member, and the owner connects a real provider through the key path", async () => {
-      const url = databaseUrl;
-      if (url === undefined) throw new Error("unreachable: suite is skipped");
+describe.skipIf(databaseUrl === undefined)("local-rip: onboard → connect", () => {
+  test("a brand-new person signs up, joins the root as a member, and the owner connects a real provider through the key path", async () => {
+    const url = databaseUrl;
+    if (url === undefined) throw new Error("unreachable: suite is skipped");
 
-      await hop("database setup", async () => {
-        await resetSchema(url);
-        const report = await setupDatabase(url);
-        expect(report.action).toBe("migrated");
-      });
+    await hop("database setup", async () => {
+      await resetSchema(url);
+      const report = await setupDatabase(url);
+      expect(report.action).toBe("migrated");
+    });
 
-      const hub: HubHandle = await hop("hub boot", async () =>
-        startHub({
-          databaseUrl: url,
-          port: freePort(),
-          sessionSecret: Buffer.from(
-            crypto.getRandomValues(new Uint8Array(32)),
-          ).toString("hex"),
-          dataDir: await tempDir("e2e-local-rip-hub-data-"),
-          // Deliberately no ANTHROPIC_API_KEY: like `smoke-onboarding`,
-          // this hub carries no hub-owned seed model credential — this
-          // scenario's own connect step is what finishes seeding it.
-        }),
-      );
-      track(hub);
+    const hub: HubHandle = await hop("hub boot", async () =>
+      startHub({
+        databaseUrl: url,
+        port: freePort(),
+        sessionSecret: Buffer.from(crypto.getRandomValues(new Uint8Array(32))).toString("hex"),
+        dataDir: await tempDir("e2e-local-rip-hub-data-"),
+        // Deliberately no ANTHROPIC_API_KEY: like `smoke-onboarding`,
+        // this hub carries no hub-owned seed model credential — this
+        // scenario's own connect step is what finishes seeding it.
+      }),
+    );
+    track(hub);
 
-      const hubApi: ApiCall = createHubAPI(hub.baseUrl);
+    const hubApi: ApiCall = createHubAPI(hub.baseUrl);
 
-      const admin = await hop("alice genesis sign-up", async () => {
-        const res = await api(hub.baseUrl, "POST", "/api/auth/sign-up/email", {
-          name: "Alice",
-          email: "alice@example.com",
-          password: "password123",
-        });
-        expectStatus("alice sign-up", res, 200);
-        if (res.cookies.length === 0) {
-          throw new Error("alice sign-up returned no session cookie");
-        }
-        const userId = stringField(
-          (res.data as { user: unknown }).user,
-          "id",
-          "alice sign-up user field",
-        );
-        const probe = await api(
-          hub.baseUrl,
-          "GET",
-          "/api/me/principals",
-          undefined,
-          res.cookies,
-        );
-        expectStatus("alice genesis probe", probe, 200);
-        expect((probe.data as { data: unknown[] }).data).toEqual([]);
-        // Stock composition mounts no provisioning hook — signup mints
-        // nothing — so the first tenant comes from an ordinary
-        // `POST /api/tenants` with a caller-chosen slug, and its
-        // creator is the native owner.
-        const minted = await api(
-          hub.baseUrl,
-          "POST",
-          "/api/tenants",
-          { slug: "workbench", name: "Workbench" },
-          res.cookies,
-        );
-        expectStatus("alice genesis tenant create", minted, 201);
-        const mintedBody = minted.data as {
-          id?: string;
-          tenantId?: string;
-        };
-        const tenantId =
-          typeof mintedBody.id === "string"
-            ? mintedBody.id
-            : typeof mintedBody.tenantId === "string"
-              ? mintedBody.tenantId
-              : undefined;
-        if (tenantId === undefined) {
-          throw new Error(
-            `create tenant answered no id: ${JSON.stringify(minted.data)}`,
-          );
-        }
-        return {
-          cookies: res.cookies,
-          userId,
-          tenantId,
-          tenantSlug: "workbench",
-        };
+    const admin = await hop("alice genesis sign-up", async () => {
+      const res = await api(hub.baseUrl, "POST", "/api/auth/sign-up/email", {
+        name: "Alice",
+        email: "alice@example.com",
+        password: "password123",
       });
+      expectStatus("alice sign-up", res, 200);
+      if (res.cookies.length === 0) {
+        throw new Error("alice sign-up returned no session cookie");
+      }
+      const userId = stringField(
+        (res.data as { user: unknown }).user,
+        "id",
+        "alice sign-up user field",
+      );
+      const probe = await api(hub.baseUrl, "GET", "/api/me/principals", undefined, res.cookies);
+      expectStatus("alice genesis probe", probe, 200);
+      expect((probe.data as { data: unknown[] }).data).toEqual([]);
+      // Stock composition mounts no provisioning hook — signup mints
+      // nothing — so the first tenant comes from an ordinary
+      // `POST /api/tenants` with a caller-chosen slug, and its
+      // creator is the native owner.
+      const minted = await api(
+        hub.baseUrl,
+        "POST",
+        "/api/tenants",
+        { slug: "workbench", name: "Workbench" },
+        res.cookies,
+      );
+      expectStatus("alice genesis tenant create", minted, 201);
+      const mintedBody = minted.data as {
+        id?: string;
+        tenantId?: string;
+      };
+      const tenantId =
+        typeof mintedBody.id === "string"
+          ? mintedBody.id
+          : typeof mintedBody.tenantId === "string"
+            ? mintedBody.tenantId
+            : undefined;
+      if (tenantId === undefined) {
+        throw new Error(`create tenant answered no id: ${JSON.stringify(minted.data)}`);
+      }
+      return {
+        cookies: res.cookies,
+        userId,
+        tenantId,
+        tenantSlug: "workbench",
+      };
+    });
 
-      // Stock composition leaves self-serve signup ungated: a brand-new
-      // person can still sign up once the hub is occupied (there is no
-      // signup mode left to close). Proven against the main hub itself,
-      // so no second boot is needed.
-      await hop("signup stays ungated once the hub is occupied", async () => {
-        const res = await api(hub.baseUrl, "POST", "/api/auth/sign-up/email", {
-          name: "Open Signup Tester",
-          email: `local-rip-open-${crypto.randomUUID()}@example.invalid`,
-          password: `pw-${crypto.randomUUID()}`,
-        });
-        expectStatus("open-signup sign-up attempt", res, 200);
-        if (res.cookies.length === 0) {
-          throw new Error("open-signup sign-up returned no session cookie");
-        }
+    // Stock composition leaves self-serve signup ungated: a brand-new
+    // person can still sign up once the hub is occupied (there is no
+    // signup mode left to close). Proven against the main hub itself,
+    // so no second boot is needed.
+    await hop("signup stays ungated once the hub is occupied", async () => {
+      const res = await api(hub.baseUrl, "POST", "/api/auth/sign-up/email", {
+        name: "Open Signup Tester",
+        email: `local-rip-open-${crypto.randomUUID()}@example.invalid`,
+        password: `pw-${crypto.randomUUID()}`,
       });
+      expectStatus("open-signup sign-up attempt", res, 200);
+      if (res.cookies.length === 0) {
+        throw new Error("open-signup sign-up returned no session cookie");
+      }
+    });
 
-      const user = await hop("sign-up", () =>
-        signUp(hub.baseUrl, "Local Rip Tester"),
-      );
+    const user = await hop("sign-up", () => signUp(hub.baseUrl, "Local Rip Tester"));
 
-      // Stock composition auto-joins nobody: a second signup only
-      // registers an account. The owner brings the tester onto the
-      // root through the native invite route (member role, so read-only
-      // by design) and activates the membership.
-      await hop(
-        "the owner invites the tester onto the root bench as a member",
-        async () => {
-          const rolesRes = await api(
-            hub.baseUrl,
-            "GET",
-            `/api/tenants/${admin.tenantId}/roles`,
-            undefined,
-            admin.cookies,
-          );
-          expectStatus("list root roles", rolesRes, 200);
-          const roles = (
-            rolesRes.data as { data: { id: string; name: string }[] }
-          ).data;
-          const memberRole = roles.find((role) => role.name === "member");
-          if (memberRole === undefined) {
-            throw new Error(
-              `no member role on the root tenant: ${JSON.stringify(roles)}`,
-            );
-          }
-          const invited = await api(
-            hub.baseUrl,
-            "POST",
-            `/api/tenants/${admin.tenantId}/members/invite`,
-            { email: user.email, roleId: memberRole.id },
-            admin.cookies,
-          );
-          expectStatus("invite tester", invited, 201);
-          const principalId = stringField(invited.data, "id", "invite result");
-          const activated = await api(
-            hub.baseUrl,
-            "PATCH",
-            `/api/tenants/${admin.tenantId}/principals/${principalId}`,
-            { status: "active" },
-            admin.cookies,
-          );
-          expectStatus("activate tester", activated, 200);
-          // Inviting the same account again mints nothing: stock answers
-          // 409, the surviving idempotency half of the removed
-          // re-provision hop.
-          const repeat = await api(
-            hub.baseUrl,
-            "POST",
-            `/api/tenants/${admin.tenantId}/members/invite`,
-            { email: user.email, roleId: memberRole.id },
-            admin.cookies,
-          );
-          expectStatus("re-invite", repeat, 409);
-        },
+    // Stock composition auto-joins nobody: a second signup only
+    // registers an account. The owner brings the tester onto the
+    // root through the native invite route (member role, so read-only
+    // by design) and activates the membership.
+    await hop("the owner invites the tester onto the root bench as a member", async () => {
+      const rolesRes = await api(
+        hub.baseUrl,
+        "GET",
+        `/api/tenants/${admin.tenantId}/roles`,
+        undefined,
+        admin.cookies,
       );
+      expectStatus("list root roles", rolesRes, 200);
+      const roles = (rolesRes.data as { data: { id: string; name: string }[] }).data;
+      const memberRole = roles.find((role) => role.name === "member");
+      if (memberRole === undefined) {
+        throw new Error(`no member role on the root tenant: ${JSON.stringify(roles)}`);
+      }
+      const invited = await api(
+        hub.baseUrl,
+        "POST",
+        `/api/tenants/${admin.tenantId}/members/invite`,
+        { email: user.email, roleId: memberRole.id },
+        admin.cookies,
+      );
+      expectStatus("invite tester", invited, 201);
+      const principalId = stringField(invited.data, "id", "invite result");
+      const activated = await api(
+        hub.baseUrl,
+        "PATCH",
+        `/api/tenants/${admin.tenantId}/principals/${principalId}`,
+        { status: "active" },
+        admin.cookies,
+      );
+      expectStatus("activate tester", activated, 200);
+      // Inviting the same account again mints nothing: stock answers
+      // 409, the surviving idempotency half of the removed
+      // re-provision hop.
+      const repeat = await api(
+        hub.baseUrl,
+        "POST",
+        `/api/tenants/${admin.tenantId}/members/invite`,
+        { email: user.email, roleId: memberRole.id },
+        admin.cookies,
+      );
+      expectStatus("re-invite", repeat, 409);
+    });
 
-      await hop("the invited bench is a real tenant membership", async () => {
-        const res = await api(
+    await hop("the invited bench is a real tenant membership", async () => {
+      const res = await api(hub.baseUrl, "GET", "/api/me/principals", undefined, user.cookies);
+      expectStatus("list principals", res, 200);
+      const rows = (res.data as { data: { tenantId: string }[] }).data;
+      const own = rows.find((row) => row.tenantId === admin.tenantId);
+      if (own === undefined) {
+        throw new Error(
+          `invited tenant ${admin.tenantId} is missing from the caller's own principals: ${JSON.stringify(rows)}`,
+        );
+      }
+    });
+
+    const tenant = await hop(
+      "the freshly created bench resolves through findPersonalTenant",
+      async () => {
+        const found = await findPersonalTenant(hubApi, admin.cookies, admin.tenantSlug);
+        if (found === undefined) {
+          throw new Error(`findPersonalTenant found nothing for slug ${admin.tenantSlug}`);
+        }
+        expect(found.tenantId).toBe(admin.tenantId);
+        return found;
+      },
+    );
+
+    // CL-7584: the desired-state document. A fresh hub boots seedless —
+    // nothing grants the root its assistant until someone connects —
+    // the doc-driven reconcile converges without reinstalling, a
+    // second member never mints a second Myra, and a second tenant
+    // created through the native route converges onto its own.
+    await hop(
+      "CL-7584: the fresh hub boots seedless — the root has no assistant before anyone connects",
+      async () => {
+        const assetsRes = await api(
           hub.baseUrl,
           "GET",
-          "/api/me/principals",
+          `/api/tenants/${tenant.tenantId}/assets?kind=workflow&inherited=false`,
           undefined,
-          user.cookies,
+          admin.cookies,
         );
-        expectStatus("list principals", res, 200);
-        const rows = (res.data as { data: { tenantId: string }[] }).data;
-        const own = rows.find((row) => row.tenantId === admin.tenantId);
-        if (own === undefined) {
+        expectStatus("list root workflow assets", assetsRes, 200);
+        const assets = assetsRes.data as { name: string }[];
+        if (assets.some((asset) => asset.name === "assistant")) {
           throw new Error(
-            `invited tenant ${admin.tenantId} is missing from the caller's own principals: ${JSON.stringify(rows)}`,
+            "the genesis root already carries an assistant on a seedless boot — hub boot seeded product state",
           );
         }
-      });
+      },
+    );
 
-      const tenant = await hop(
-        "the freshly created bench resolves through findPersonalTenant",
-        async () => {
-          const found = await findPersonalTenant(
-            hubApi,
-            admin.cookies,
-            admin.tenantSlug,
-          );
-          if (found === undefined) {
-            throw new Error(
-              `findPersonalTenant found nothing for slug ${admin.tenantSlug}`,
-            );
-          }
-          expect(found.tenantId).toBe(admin.tenantId);
-          return found;
-        },
-      );
+    const pushWorkflow = createGitWorkflowPusher();
 
-      // CL-7584: the desired-state document. A fresh hub boots seedless —
-      // nothing grants the root its assistant until someone connects —
-      // the doc-driven reconcile converges without reinstalling, a
-      // second member never mints a second Myra, and a second tenant
-      // created through the native route converges onto its own.
-      await hop(
-        "CL-7584: the fresh hub boots seedless — the root has no assistant before anyone connects",
-        async () => {
-          const assetsRes = await api(
-            hub.baseUrl,
-            "GET",
-            `/api/tenants/${tenant.tenantId}/assets?kind=workflow&inherited=false`,
-            undefined,
-            admin.cookies,
+    const connected = await hop(
+      "connecting a real inference credential via the key path (no provider probe — CL-6123)",
+      async () => {
+        const result = await testAndPersistCredential({
+          api: hubApi,
+          cookies: admin.cookies,
+          hubUrl: hub.baseUrl,
+          userId: admin.userId,
+          userEmail: "alice@example.com",
+          provider: "anthropic",
+          apiKey: STUB_API_KEY,
+          pushWorkflow,
+          log: () => undefined,
+        });
+        if (result.kind !== "connected") {
+          throw new Error(
+            `expected the key-path connect to succeed, got: ${JSON.stringify(result)}`,
           );
-          expectStatus("list root workflow assets", assetsRes, 200);
-          const assets = assetsRes.data as { name: string }[];
-          if (assets.some((asset) => asset.name === "assistant")) {
-            throw new Error(
-              "the genesis root already carries an assistant on a seedless boot — hub boot seeded product state",
-            );
-          }
-        },
-      );
-
-      const pushWorkflow = createGitWorkflowPusher();
+        }
+        expect(result.tenantId).toBe(tenant.tenantId);
+        return result;
+      },
+    );
 
-      const connected = await hop(
-        "connecting a real inference credential via the key path (no provider probe — CL-6123)",
-        async () => {
-          const result = await testAndPersistCredential({
+    // The deploy step needs the sidecar's dial-in to have completed —
+    // ensureSeeded's own deployment call answers 502 until it has,
+    // and (unlike the native workflow-deploy route the walking
+    // skeleton retries directly) that 502 surfaces as a thrown
+    // CliError rather than a response this suite can branch on. Every
+    // step ensureSeeded/seedTenant takes is itself ensure-then-create,
+    // so retrying the whole call is safe.
+    async function deploySeededWorkflows(
+      workflows: typeof DEFAULT_WORKFLOWS,
+    ): Promise<Awaited<ReturnType<typeof seedTenant>>> {
+      const deadline = Date.now() + 60_000;
+      for (;;) {
+        if (hub.exited()) {
+          throw new Error(
+            `hub exited before default workflows could deploy; output:\n${hub.output()}`,
+          );
+        }
+        try {
+          return await seedTenant({
             api: hubApi,
             cookies: admin.cookies,
             hubUrl: hub.baseUrl,
-            userId: admin.userId,
-            userEmail: "alice@example.com",
-            provider: "anthropic",
-            apiKey: STUB_API_KEY,
+            tenant: {
+              tenantId: tenant.tenantId,
+              principalId: tenant.principalId,
+              domain: tenant.tenantDomain,
+            },
+            model: await modelSourceFor(hubApi, admin.cookies, tenant.tenantId, "anthropic"),
             pushWorkflow,
             log: () => undefined,
+            workflows,
+            confirmDeployments: false,
           });
-          if (result.kind !== "connected") {
-            throw new Error(
-              `expected the key-path connect to succeed, got: ${JSON.stringify(result)}`,
-            );
-          }
-          expect(result.tenantId).toBe(tenant.tenantId);
-          return result;
-        },
-      );
+        } catch (cause) {
+          if (Date.now() > deadline) throw cause;
+          await Bun.sleep(200);
+        }
+      }
+    }
+
+    // CL-7071: seedTenant/ensureSeeded no longer pack. The connect
+    // flow runs on the genesis root itself, so install `corbits-tools`
+    // onto that already-existing tenant with the publish-tools CLI —
+    // the same sign-in → tenant resolve → publish path an operator
+    // runs (`bun run publish-tools`) — rather than calling the
+    // publisher with a privileged cookie jar directly. Then
+    // ensureSeeded deploys assistant without packing.
+    await hop(
+      "publish-tools installs corbits-tools onto the created root bench (setup's job, not seed's)",
+      async () => {
+        const result = await runPublishTools({
+          hubUrl: hub.baseUrl,
+          email: "alice@example.com",
+          password: "password123",
+          tenant: admin.tenantSlug,
+          log: () => undefined,
+        });
+        expect(result.success).toBe(true);
+        expect(result.summaries.length).toBeGreaterThan(0);
+      },
+    );
 
-      // The deploy step needs the sidecar's dial-in to have completed —
-      // ensureSeeded's own deployment call answers 502 until it has,
-      // and (unlike the native workflow-deploy route the walking
-      // skeleton retries directly) that 502 surfaces as a thrown
-      // CliError rather than a response this suite can branch on. Every
-      // step ensureSeeded/seedTenant takes is itself ensure-then-create,
-      // so retrying the whole call is safe.
-      async function deploySeededWorkflows(
-        workflows: typeof DEFAULT_WORKFLOWS,
-      ): Promise<Awaited<ReturnType<typeof seedTenant>>> {
+    await hop(
+      "the real, unmodified connect flow fully seeds every default workflow, including 'assistant'",
+      async () => {
         const deadline = Date.now() + 60_000;
         for (;;) {
           if (hub.exited()) {
-            throw new Error(
-              `hub exited before default workflows could deploy; output:\n${hub.output()}`,
-            );
+            throw new Error(`hub exited before ensureSeeded could run; output:\n${hub.output()}`);
           }
           try {
-            return await seedTenant({
+            await ensureSeeded({
               api: hubApi,
               cookies: admin.cookies,
               hubUrl: hub.baseUrl,
-              tenant: {
-                tenantId: tenant.tenantId,
-                principalId: tenant.principalId,
-                domain: tenant.tenantDomain,
-              },
-              model: await modelSourceFor(
-                hubApi,
-                admin.cookies,
-                tenant.tenantId,
-                "anthropic",
-              ),
               pushWorkflow,
               log: () => undefined,
-              workflows,
-              confirmDeployments: false,
+              tenant: connected,
+              provider: "anthropic",
+              apiKey: STUB_API_KEY,
             });
+            break;
           } catch (cause) {
             if (Date.now() > deadline) throw cause;
             await Bun.sleep(200);
           }
         }
-      }
-
-      // CL-7071: seedTenant/ensureSeeded no longer pack. The connect
-      // flow runs on the genesis root itself, so install `corbits-tools`
-      // onto that already-existing tenant with the publish-tools CLI —
-      // the same sign-in → tenant resolve → publish path an operator
-      // runs (`bun run publish-tools`) — rather than calling the
-      // publisher with a privileged cookie jar directly. Then
-      // ensureSeeded deploys assistant without packing.
-      await hop(
-        "publish-tools installs corbits-tools onto the created root bench (setup's job, not seed's)",
-        async () => {
-          const result = await runPublishTools({
-            hubUrl: hub.baseUrl,
-            email: "alice@example.com",
-            password: "password123",
-            tenant: admin.tenantSlug,
-            log: () => undefined,
-          });
-          expect(result.success).toBe(true);
-          expect(result.summaries.length).toBeGreaterThan(0);
-        },
-      );
-
-      await hop(
-        "the real, unmodified connect flow fully seeds every default workflow, including 'assistant'",
-        async () => {
-          const deadline = Date.now() + 60_000;
-          for (;;) {
-            if (hub.exited()) {
-              throw new Error(
-                `hub exited before ensureSeeded could run; output:\n${hub.output()}`,
-              );
-            }
-            try {
-              await ensureSeeded({
-                api: hubApi,
-                cookies: admin.cookies,
-                hubUrl: hub.baseUrl,
-                pushWorkflow,
-                log: () => undefined,
-                tenant: connected,
-                provider: "anthropic",
-                apiKey: STUB_API_KEY,
-              });
-              break;
-            } catch (cause) {
-              if (Date.now() > deadline) throw cause;
-              await Bun.sleep(200);
-            }
-          }
-        },
-      );
+      },
+    );
 
-      await hop(
-        "the default workflow (assistant) plus the on-demand catalog deploy and go live (CL-7074: only assistant is seeded automatically; the rest deploy here via the same seeding-library path a real on-demand deploy would use)",
-        async () => {
-          const workflows = [...DEFAULT_WORKFLOWS, ...CATALOG_WORKFLOWS];
-          await deploySeededWorkflows(workflows);
-          for (const workflow of workflows) {
-            const assetsRes = await api(
-              hub.baseUrl,
-              "GET",
-              `/api/tenants/${tenant.tenantId}/assets?kind=workflow&inherited=false`,
-              undefined,
-              user.cookies,
-            );
-            expectStatus(
-              `list assets for ${workflow.assetName}`,
-              assetsRes,
-              200,
-            );
-            const assets = assetsRes.data as { id: string; name: string }[];
-            const asset = assets.find((a) => a.name === workflow.assetName);
-            if (asset === undefined) {
-              throw new Error(`no asset named ${workflow.assetName}`);
-            }
-            const deploymentsRes = await api(
-              hub.baseUrl,
-              "GET",
-              `/api/tenants/${tenant.tenantId}/workflows/deployments`,
-              undefined,
-              user.cookies,
-            );
-            expectStatus(
-              `list deployments for ${workflow.assetName}`,
-              deploymentsRes,
-              200,
-            );
-            const deployments = deploymentsRes.data as {
-              definitionAssetId: string;
-              status: string;
-            }[];
-            const live = deployments.find(
-              (d) =>
-                d.definitionAssetId === asset.id &&
-                isLiveDeploymentStatus(d.status),
-            );
-            if (live === undefined) {
-              throw new Error(
-                `no live deployment for ${workflow.assetName}: ${JSON.stringify(deployments)}`,
-              );
-            }
-          }
-        },
-      );
-
-      await hop(
-        "the Connections surface reflects the connected credential",
-        async () => {
-          const res = await api(
+    await hop(
+      "the default workflow (assistant) plus the on-demand catalog deploy and go live (CL-7074: only assistant is seeded automatically; the rest deploy here via the same seeding-library path a real on-demand deploy would use)",
+      async () => {
+        const workflows = [...DEFAULT_WORKFLOWS, ...CATALOG_WORKFLOWS];
+        await deploySeededWorkflows(workflows);
+        for (const workflow of workflows) {
+          const assetsRes = await api(
             hub.baseUrl,
             "GET",
-            `/api/tenants/${tenant.tenantId}/credentials`,
+            `/api/tenants/${tenant.tenantId}/assets?kind=workflow&inherited=false`,
             undefined,
             user.cookies,
           );
-          expectStatus("list tenant credentials", res, 200);
-          const credentials = parseAs(
-            paginatedSchema(CredentialResponse),
-            res.data,
-            "credentials response",
-          ).data;
-          // The self-served connect flow names the credential by the
-          // connector's display name ("Anthropic") — see
-          // `credentialDisplayName` in `@workbench/onboarding`'s
-          // `complete-credential.ts`: the Plugins gallery resolver looks
-          // a credential up by that exact name, so seeding under the
-          // old `inferenceCredentialName` convention would leave it
-          // invisible to the gallery.
-          const planted = credentials.find(
-            (credential) => credential.name === "Anthropic",
-          );
-          if (planted === undefined) {
-            throw new Error(
-              `no "Anthropic" credential on the tenant's Connections surface: ${JSON.stringify(credentials)}`,
-            );
+          expectStatus(`list assets for ${workflow.assetName}`, assetsRes, 200);
+          const assets = assetsRes.data as { id: string; name: string }[];
+          const asset = assets.find((a) => a.name === workflow.assetName);
+          if (asset === undefined) {
+            throw new Error(`no asset named ${workflow.assetName}`);
           }
-          expect(planted.status).toBe("active");
-          expect(planted.type).toBe("api_key");
-        },
-      );
-
-      // CL-7584: the doc-driven reconcile converges without reinstalling,
-      // a second member never mints a second Myra, and a second tenant
-      // created through the native route converges onto its own.
-      //
-      // Stock Interchange cutover (hub fd3a43e2): the skills mount is
-      // gone, so the plant writes nothing and the reconcile re-read pins
-      // every skill "blocked" — the report is never ready, and a second
-      // pass re-enters the seed half. The old zero-non-GET idempotence
-      // assertion is unachievable against that steady state; it now lives
-      // in the `desired-state-reconcile` unit test, whose faithful mount
-      // still converges. This hop proves the stock-reality steady state
-      // instead: workflows installed and present, skills pending-but-absent.
-      await hop(
-        "CL-7584: reconcile converges workflows while skills stay pending (stock cutover)",
-        async () => {
-          const args = {
-            api: hubApi,
-            cookies: admin.cookies,
-            hubUrl: hub.baseUrl,
-            tenant: {
-              tenantId: tenant.tenantId,
-              principalId: tenant.principalId,
-              domain: tenant.tenantDomain,
-            },
-            model: await modelSourceFor(
-              hubApi,
-              admin.cookies,
-              tenant.tenantId,
-              "anthropic",
-            ),
-            pushWorkflow,
-            log: () => undefined,
-          };
-          const first = await reconcileTenantDesiredState(args);
-          expect(first.ready).toBe(false);
-          expect(
-            first.pins
-              .filter((pin) => pin.kind === "workflow")
-              .every((pin) => pin.status === "installed"),
-          ).toBe(true);
-          expect(
-            first.pins
-              .filter((pin) => pin.kind === "skill")
-              .every((pin) => pin.status === "blocked"),
-          ).toBe(true);
-          const status = await readTenantDesiredStateStatus(
-            hubApi,
-            admin.cookies,
-            tenant.tenantId,
-          );
-          expect(
-            Object.values(status.workflows).every((s) => s === "present"),
-          ).toBe(true);
-          expect(
-            Object.values(status.skills).every((s) => s === "pending"),
-          ).toBe(true);
-        },
-      );
-
-      await hop(
-        "CL-7584: a joined member's root still carries exactly one assistant",
-        async () => {
-          const assetsRes = await api(
+          const deploymentsRes = await api(
             hub.baseUrl,
             "GET",
-            `/api/tenants/${tenant.tenantId}/assets?kind=workflow&inherited=false`,
+            `/api/tenants/${tenant.tenantId}/workflows/deployments`,
             undefined,
             user.cookies,
           );
-          expectStatus("list root workflow assets", assetsRes, 200);
-          const assets = assetsRes.data as { name: string }[];
-          expect(
-            assets.filter((asset) => asset.name === "assistant").length,
-          ).toBe(1);
-        },
-      );
-
-      await hop(
-        "CL-7584: a second tenant created through the native route converges onto its own assistant",
-        async () => {
-          const stamp = Date.now();
-          const createRes = await api(
-            hub.baseUrl,
-            "POST",
-            "/api/tenants",
-            {
-              name: `Local Rip Second ${stamp}`,
-              // `slug` is required by the native route's `CreateTenant`
-              // validator, and `parentId` makes the new tenant a child of
-              // the root tenant: catalog visibility walks the ancestor
-              // chain (`listVisibleOfferings`), so only a child inherits
-              // the root's seeded offerings — a sibling root would resolve
-              // no models and the kick would report the workflow pins
-              // blocked forever. The child still gets its OWN assistant
-              // assets and deployments; only the catalog is inherited.
-              slug: `local-rip-second-${stamp}`,
-              parentId: tenant.tenantId,
-            },
-            admin.cookies,
+          expectStatus(`list deployments for ${workflow.assetName}`, deploymentsRes, 200);
+          const deployments = deploymentsRes.data as {
+            definitionAssetId: string;
+            status: string;
+          }[];
+          const live = deployments.find(
+            (d) => d.definitionAssetId === asset.id && isLiveDeploymentStatus(d.status),
           );
-          expectStatus("create second tenant", createRes, 201);
-          const body = createRes.data as { id?: string; tenantId?: string };
-          const secondTenantId =
-            typeof body.id === "string"
-              ? body.id
-              : typeof body.tenantId === "string"
-                ? body.tenantId
-                : undefined;
-          if (secondTenantId === undefined) {
+          if (live === undefined) {
             throw new Error(
-              `create tenant answered no id: ${JSON.stringify(body)}`,
+              `no live deployment for ${workflow.assetName}: ${JSON.stringify(deployments)}`,
             );
           }
-          // Pre-kick guard through the same `resolveTenantModelSource`
-          // path the reconcile below deploys with: the child must resolve
-          // the root's inherited offerings before anything can deploy.
-          // If this is undefined the poll below can only time out as
-          // blocked, so fail fast with the reason.
-          const model = await resolveTenantModelSource(
-            hubApi,
-            admin.cookies,
-            secondTenantId,
+        }
+      },
+    );
+
+    await hop("the Connections surface reflects the connected credential", async () => {
+      const res = await api(
+        hub.baseUrl,
+        "GET",
+        `/api/tenants/${tenant.tenantId}/credentials`,
+        undefined,
+        user.cookies,
+      );
+      expectStatus("list tenant credentials", res, 200);
+      const credentials = parseAs(
+        paginatedSchema(CredentialResponse),
+        res.data,
+        "credentials response",
+      ).data;
+      // The self-served connect flow names the credential by the
+      // connector's display name ("Anthropic") — see
+      // `credentialDisplayName` in `@workbench/onboarding`'s
+      // `complete-credential.ts`: the Plugins gallery resolver looks
+      // a credential up by that exact name, so seeding under the
+      // old `inferenceCredentialName` convention would leave it
+      // invisible to the gallery.
+      const planted = credentials.find((credential) => credential.name === "Anthropic");
+      if (planted === undefined) {
+        throw new Error(
+          `no "Anthropic" credential on the tenant's Connections surface: ${JSON.stringify(credentials)}`,
+        );
+      }
+      expect(planted.status).toBe("active");
+      expect(planted.type).toBe("api_key");
+    });
+
+    // CL-7584: the doc-driven reconcile converges without reinstalling,
+    // a second member never mints a second Myra, and a second tenant
+    // created through the native route converges onto its own.
+    //
+    // Stock Interchange cutover (hub fd3a43e2): the skills mount is
+    // gone, so the plant writes nothing and the reconcile re-read pins
+    // every skill "blocked" — the report is never ready, and a second
+    // pass re-enters the seed half. The old zero-non-GET idempotence
+    // assertion is unachievable against that steady state; it now lives
+    // in the `desired-state-reconcile` unit test, whose faithful mount
+    // still converges. This hop proves the stock-reality steady state
+    // instead: workflows installed and present, skills pending-but-absent.
+    await hop(
+      "CL-7584: reconcile converges workflows while skills stay pending (stock cutover)",
+      async () => {
+        const args = {
+          api: hubApi,
+          cookies: admin.cookies,
+          hubUrl: hub.baseUrl,
+          tenant: {
+            tenantId: tenant.tenantId,
+            principalId: tenant.principalId,
+            domain: tenant.tenantDomain,
+          },
+          model: await modelSourceFor(hubApi, admin.cookies, tenant.tenantId, "anthropic"),
+          pushWorkflow,
+          log: () => undefined,
+        };
+        const first = await reconcileTenantDesiredState(args);
+        expect(first.ready).toBe(false);
+        expect(
+          first.pins
+            .filter((pin) => pin.kind === "workflow")
+            .every((pin) => pin.status === "installed"),
+        ).toBe(true);
+        expect(
+          first.pins.filter((pin) => pin.kind === "skill").every((pin) => pin.status === "blocked"),
+        ).toBe(true);
+        const status = await readTenantDesiredStateStatus(hubApi, admin.cookies, tenant.tenantId);
+        expect(Object.values(status.workflows).every((s) => s === "present")).toBe(true);
+        expect(Object.values(status.skills).every((s) => s === "pending")).toBe(true);
+      },
+    );
+
+    await hop("CL-7584: a joined member's root still carries exactly one assistant", async () => {
+      const assetsRes = await api(
+        hub.baseUrl,
+        "GET",
+        `/api/tenants/${tenant.tenantId}/assets?kind=workflow&inherited=false`,
+        undefined,
+        user.cookies,
+      );
+      expectStatus("list root workflow assets", assetsRes, 200);
+      const assets = assetsRes.data as { name: string }[];
+      expect(assets.filter((asset) => asset.name === "assistant").length).toBe(1);
+    });
+
+    await hop(
+      "CL-7584: a second tenant created through the native route converges onto its own assistant",
+      async () => {
+        const stamp = Date.now();
+        const createRes = await api(
+          hub.baseUrl,
+          "POST",
+          "/api/tenants",
+          {
+            name: `Local Rip Second ${stamp}`,
+            // `slug` is required by the native route's `CreateTenant`
+            // validator, and `parentId` makes the new tenant a child of
+            // the root tenant: catalog visibility walks the ancestor
+            // chain (`listVisibleOfferings`), so only a child inherits
+            // the root's seeded offerings — a sibling root would resolve
+            // no models and the kick would report the workflow pins
+            // blocked forever. The child still gets its OWN assistant
+            // assets and deployments; only the catalog is inherited.
+            slug: `local-rip-second-${stamp}`,
+            parentId: tenant.tenantId,
+          },
+          admin.cookies,
+        );
+        expectStatus("create second tenant", createRes, 201);
+        const body = createRes.data as { id?: string; tenantId?: string };
+        const secondTenantId =
+          typeof body.id === "string"
+            ? body.id
+            : typeof body.tenantId === "string"
+              ? body.tenantId
+              : undefined;
+        if (secondTenantId === undefined) {
+          throw new Error(`create tenant answered no id: ${JSON.stringify(body)}`);
+        }
+        // Pre-kick guard through the same `resolveTenantModelSource`
+        // path the reconcile below deploys with: the child must resolve
+        // the root's inherited offerings before anything can deploy.
+        // If this is undefined the poll below can only time out as
+        // blocked, so fail fast with the reason.
+        const model = await resolveTenantModelSource(hubApi, admin.cookies, secondTenantId);
+        if (model === undefined) {
+          throw new Error(
+            "the second tenant resolves no catalog models (expected the root's inherited offerings)",
           );
-          if (model === undefined) {
+        }
+        // Stock Interchange cutover (hub fd3a43e2): the tenant-create
+        // observer is deleted, so no server kick converges this tenant.
+        // The suite drives the same `reconcileTenantDesiredState` the
+        // observer used to call, under the creator's owner principal,
+        // then polls for the live assistant exactly as before.
+        const deployer = await resolveTenantDeployer(hubApi, admin.cookies, secondTenantId);
+        if (deployer === undefined) {
+          throw new Error("the second tenant resolves no deployable owner principal");
+        }
+        const kick = await reconcileTenantDesiredState({
+          api: hubApi,
+          cookies: admin.cookies,
+          hubUrl: hub.baseUrl,
+          tenant: {
+            tenantId: secondTenantId,
+            principalId: deployer.principalId,
+            domain: deployer.tenantDomain,
+          },
+          model,
+          pushWorkflow,
+          log: () => undefined,
+        });
+        // Workflows install; skills stay pending (stock cutover — the
+        // skills mount is gone), so the report is never ready.
+        expect(kick.ready).toBe(false);
+        expect(
+          kick.pins
+            .filter((pin) => pin.kind === "workflow")
+            .every((pin) => pin.status === "installed"),
+        ).toBe(true);
+        // Poll the new tenant's own assets and deployments for its
+        // live assistant.
+        const deadline = Date.now() + 90_000;
+        let lastSeen: unknown;
+        for (;;) {
+          if (hub.exited()) {
             throw new Error(
-              "the second tenant resolves no catalog models (expected the root's inherited offerings)",
+              `hub exited before the second tenant converged; output:\n${hub.output()}`,
             );
           }
-          // Stock Interchange cutover (hub fd3a43e2): the tenant-create
-          // observer is deleted, so no server kick converges this tenant.
-          // The suite drives the same `reconcileTenantDesiredState` the
-          // observer used to call, under the creator's owner principal,
-          // then polls for the live assistant exactly as before.
-          const deployer = await resolveTenantDeployer(
-            hubApi,
+          const assetsRes = await api(
+            hub.baseUrl,
+            "GET",
+            `/api/tenants/${secondTenantId}/assets?kind=workflow&inherited=false`,
+            undefined,
             admin.cookies,
-            secondTenantId,
           );
-          if (deployer === undefined) {
-            throw new Error(
-              "the second tenant resolves no deployable owner principal",
-            );
-          }
-          const kick = await reconcileTenantDesiredState({
-            api: hubApi,
-            cookies: admin.cookies,
-            hubUrl: hub.baseUrl,
-            tenant: {
-              tenantId: secondTenantId,
-              principalId: deployer.principalId,
-              domain: deployer.tenantDomain,
-            },
-            model,
-            pushWorkflow,
-            log: () => undefined,
-          });
-          // Workflows install; skills stay pending (stock cutover — the
-          // skills mount is gone), so the report is never ready.
-          expect(kick.ready).toBe(false);
-          expect(
-            kick.pins
-              .filter((pin) => pin.kind === "workflow")
-              .every((pin) => pin.status === "installed"),
-          ).toBe(true);
-          // Poll the new tenant's own assets and deployments for its
-          // live assistant.
-          const deadline = Date.now() + 90_000;
-          let lastSeen: unknown;
-          for (;;) {
-            if (hub.exited()) {
-              throw new Error(
-                `hub exited before the second tenant converged; output:\n${hub.output()}`,
-              );
-            }
-            const assetsRes = await api(
+          expectStatus("list second-tenant assets", assetsRes, 200);
+          const assets = assetsRes.data as { id: string; name: string }[];
+          lastSeen = assets.map((a) => a.name);
+          const assistant = assets.find((a) => a.name === "assistant");
+          if (assistant !== undefined) {
+            const deploymentsRes = await api(
               hub.baseUrl,
               "GET",
-              `/api/tenants/${secondTenantId}/assets?kind=workflow&inherited=false`,
+              `/api/tenants/${secondTenantId}/workflows/deployments`,
               undefined,
               admin.cookies,
             );
-            expectStatus("list second-tenant assets", assetsRes, 200);
-            const assets = assetsRes.data as { id: string; name: string }[];
-            lastSeen = assets.map((a) => a.name);
-            const assistant = assets.find((a) => a.name === "assistant");
-            if (assistant !== undefined) {
-              const deploymentsRes = await api(
-                hub.baseUrl,
-                "GET",
-                `/api/tenants/${secondTenantId}/workflows/deployments`,
-                undefined,
-                admin.cookies,
-              );
-              expectStatus(
-                "list second-tenant deployments",
-                deploymentsRes,
-                200,
-              );
-              const deployments = deploymentsRes.data as {
-                definitionAssetId: string;
-                status: string;
-              }[];
-              if (
-                deployments.some(
-                  (d) =>
-                    d.definitionAssetId === assistant.id &&
-                    isLiveDeploymentStatus(d.status),
-                )
-              ) {
-                break;
-              }
-            }
-            if (Date.now() > deadline) {
-              throw new Error(
-                `the second tenant never converged onto its own assistant; last asset names: ${JSON.stringify(lastSeen)}`,
-              );
+            expectStatus("list second-tenant deployments", deploymentsRes, 200);
+            const deployments = deploymentsRes.data as {
+              definitionAssetId: string;
+              status: string;
+            }[];
+            if (
+              deployments.some(
+                (d) => d.definitionAssetId === assistant.id && isLiveDeploymentStatus(d.status),
+              )
+            ) {
+              break;
             }
-            await Bun.sleep(500);
           }
-          // The converged second tenant carries its own live assistant
-          // while its skills stay pending (stock cutover).
-          const secondStatus = await readTenantDesiredStateStatus(
-            hubApi,
-            admin.cookies,
-            secondTenantId,
-          );
-          expect(
-            Object.values(secondStatus.skills).every((s) => s === "pending"),
-          ).toBe(true);
-        },
-      );
-    }, 180_000);
-  },
-);
+          if (Date.now() > deadline) {
+            throw new Error(
+              `the second tenant never converged onto its own assistant; last asset names: ${JSON.stringify(lastSeen)}`,
+            );
+          }
+          await Bun.sleep(500);
+        }
+        // The converged second tenant carries its own live assistant
+        // while its skills stay pending (stock cutover).
+        const secondStatus = await readTenantDesiredStateStatus(
+          hubApi,
+          admin.cookies,
+          secondTenantId,
+        );
+        expect(Object.values(secondStatus.skills).every((s) => s === "pending")).toBe(true);
+      },
+    );
+  }, 180_000);
+});
diff --git a/scripts/e2e/play.ts b/scripts/e2e/play.ts
index 649cee4262..55b3509ab3 100644
--- a/scripts/e2e/play.ts
+++ b/scripts/e2e/play.ts
@@ -16,14 +16,8 @@ import { type } from "arktype";
 import { headlineFor } from "../../packages/approvals/src/headline.ts";
 import { resetSchema, setupDatabase } from "../db-setup.ts";
 import { createGitWorkflowPusher } from "../../packages/connections/src/workflow-push.ts";
-import {
-  DEFAULT_WORKFLOWS,
-  seedTenant,
-} from "../../packages/onboarding/src/tenant-seed.ts";
-import {
-  createHubAPI,
-  type ApiCall,
-} from "../../packages/hub-api-client/src/index.ts";
+import { DEFAULT_WORKFLOWS, seedTenant } from "../../packages/onboarding/src/tenant-seed.ts";
+import { createHubAPI, type ApiCall } from "../../packages/hub-api-client/src/index.ts";
 import {
   findPersonalTenant,
   testAndPersistCredential,
@@ -89,11 +83,8 @@ const STUB_API_KEY = "e2e-greeting-delivery-stub-key-not-real";
 // greeting kickoff, so the final assertion below expects real prose
 // instead of the stub key's credential-error report.
 const OLLAMA_BASE_URL = process.env["OLLAMA_BASE_URL"];
-const USE_OLLAMA =
-  process.env["E2E_PROVIDER"] === "ollama" && OLLAMA_BASE_URL !== undefined;
-const CONNECT_PROVIDER = USE_OLLAMA
-  ? ("ollama" as const)
-  : ("anthropic" as const);
+const USE_OLLAMA = process.env["E2E_PROVIDER"] === "ollama" && OLLAMA_BASE_URL !== undefined;
+const CONNECT_PROVIDER = USE_OLLAMA ? ("ollama" as const) : ("anthropic" as const);
 const CONNECT_API_KEY = USE_OLLAMA ? OLLAMA_PLACEHOLDER_SECRET : STUB_API_KEY;
 
 function stringField(data: unknown, field: string, what: string): string {
@@ -101,9 +92,7 @@ function stringField(data: unknown, field: string, what: string): string {
     const value = (data as Record<string, unknown>)[field];
     if (typeof value === "string" && value !== "") return value;
   }
-  throw new Error(
-    `${what}: missing string field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing string field "${field}": ${JSON.stringify(data)}`);
 }
 
 function arrayField(data: unknown, field: string, what: string): unknown[] {
@@ -111,9 +100,7 @@ function arrayField(data: unknown, field: string, what: string): unknown[] {
     const value = (data as Record<string, unknown>)[field];
     if (Array.isArray(value)) return value;
   }
-  throw new Error(
-    `${what}: missing array field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing array field "${field}": ${JSON.stringify(data)}`);
 }
 
 async function signUp(
@@ -160,9 +147,7 @@ async function main(): Promise<void> {
     startHub({
       databaseUrl: url,
       port: freePort(),
-      sessionSecret: Buffer.from(
-        crypto.getRandomValues(new Uint8Array(32)),
-      ).toString("hex"),
+      sessionSecret: Buffer.from(crypto.getRandomValues(new Uint8Array(32))).toString("hex"),
       dataDir: await tempDir("e2e-greeting-delivery-hub-data-"),
     }),
   );
@@ -214,9 +199,7 @@ async function main(): Promise<void> {
     return { cookies: res.cookies, userId };
   });
 
-  const user = await hop("sign-up", () =>
-    signUp(hub.baseUrl, "Greeting Delivery Tester"),
-  );
+  const user = await hop("sign-up", () => signUp(hub.baseUrl, "Greeting Delivery Tester"));
 
   const provisioned = await hop(
     "a membership probe joins the genesis root as a member",
@@ -241,22 +224,13 @@ async function main(): Promise<void> {
 
   // A joined member is read-only by design, so every owner-level leg
   // below runs as alice, the genesis owner.
-  const tenant = await hop(
-    "the joined root resolves through findPersonalTenant",
-    async () => {
-      const found = await findPersonalTenant(
-        hubApi,
-        admin.cookies,
-        provisioned.tenantSlug,
-      );
-      if (found === undefined) {
-        throw new Error(
-          `findPersonalTenant found nothing for slug ${provisioned.tenantSlug}`,
-        );
-      }
-      return found;
-    },
-  );
+  const tenant = await hop("the joined root resolves through findPersonalTenant", async () => {
+    const found = await findPersonalTenant(hubApi, admin.cookies, provisioned.tenantSlug);
+    if (found === undefined) {
+      throw new Error(`findPersonalTenant found nothing for slug ${provisioned.tenantSlug}`);
+    }
+    return found;
+  });
 
   const pushWorkflow = createGitWorkflowPusher();
 
@@ -280,9 +254,7 @@ async function main(): Promise<void> {
           : testArgs,
       );
       if (result.kind !== "connected") {
-        throw new Error(
-          `expected the key-path connect to succeed, got: ${JSON.stringify(result)}`,
-        );
+        throw new Error(`expected the key-path connect to succeed, got: ${JSON.stringify(result)}`);
       }
       return result;
     },
@@ -341,12 +313,7 @@ async function main(): Promise<void> {
             principalId: tenant.principalId,
             domain: tenant.tenantDomain,
           },
-          model: await modelSourceFor(
-            hubApi,
-            admin.cookies,
-            tenant.tenantId,
-            CONNECT_PROVIDER,
-          ),
+          model: await modelSourceFor(hubApi, admin.cookies, tenant.tenantId, CONNECT_PROVIDER),
           pushWorkflow,
           log: () => undefined,
           workflows: DEFAULT_WORKFLOWS,
@@ -360,10 +327,7 @@ async function main(): Promise<void> {
     }
   }
 
-  await hop(
-    "every default workflow deploys and goes live",
-    deploySeededWorkflows,
-  );
+  await hop("every default workflow deploys and goes live", deploySeededWorkflows);
 
   const assistantDefinitionId = await hop(
     "the 'assistant' default workflow is invitable tenant-wide",
@@ -378,18 +342,15 @@ async function main(): Promise<void> {
           admin.cookies,
         );
         if (res.status === 200) {
-          const items = arrayField(
-            res.data,
-            "items",
-            "list invitable definitions",
-          ) as { id: string; name: string }[];
+          const items = arrayField(res.data, "items", "list invitable definitions") as {
+            id: string;
+            name: string;
+          }[];
           const assistant = items.find((item) => item.name === "assistant");
           if (assistant !== undefined) return assistant.id;
         }
         if (Date.now() > deadline) {
-          throw new Error(
-            `"assistant" never appeared as invitable: ${JSON.stringify(res.data)}`,
-          );
+          throw new Error(`"assistant" never appeared as invitable: ${JSON.stringify(res.data)}`);
         }
         await Bun.sleep(1000);
       }
@@ -403,9 +364,7 @@ async function main(): Promise<void> {
       let res: ApiResult;
       for (;;) {
         if (sidecar.exited()) {
-          throw new Error(
-            `sidecar exited before chat creation; output:\n${sidecar.output()}`,
-          );
+          throw new Error(`sidecar exited before chat creation; output:\n${sidecar.output()}`);
         }
         res = await api(
           hub.baseUrl,
@@ -425,16 +384,13 @@ async function main(): Promise<void> {
       }
       expectStatus("create chat", res, 201);
       const id = stringField(res.data, "id", "create chat");
-      const participants = arrayField(
-        res.data,
-        "participants",
-        "create chat",
-      ) as { address: string; handle: string }[];
+      const participants = arrayField(res.data, "participants", "create chat") as {
+        address: string;
+        handle: string;
+      }[];
       const agent = participants.find((p) => p.handle === "myra");
       if (agent === undefined) {
-        throw new Error(
-          `chat has no "myra" agent participant: ${JSON.stringify(participants)}`,
-        );
+        throw new Error(`chat has no "myra" agent participant: ${JSON.stringify(participants)}`);
       }
       return { chatId: id, agentAddress: agent.address };
     },
@@ -471,8 +427,7 @@ async function main(): Promise<void> {
         }[];
         const agentMessage = items.find(
           (item) =>
-            item.sender.address === agentAddress &&
-            item.parts.some((p) => p.kind === "text"),
+            item.sender.address === agentAddress && item.parts.some((p) => p.kind === "text"),
         );
         if (agentMessage !== undefined) {
           const text = agentMessage.parts
@@ -489,10 +444,7 @@ async function main(): Promise<void> {
               );
             }
             console.log(`  Myra's unprompted greeting (ollama): ${text}`);
-          } else if (
-            !text.includes("credential error") ||
-            !/40[13]/.test(text)
-          ) {
+          } else if (!text.includes("credential error") || !/40[13]/.test(text)) {
             throw new Error(
               `expected the agent's greeting-turn message to report the ` +
                 `stub key's credential error, got: ${JSON.stringify(agentMessage)}`,
@@ -514,9 +466,7 @@ async function main(): Promise<void> {
 
   // ---- play loop -----------------------------------------------------
   const seenIds = new Set<string>();
-  async function listAgentMessages(): Promise<
-    { id: string; text: string; createdAt: string }[]
-  > {
+  async function listAgentMessages(): Promise<{ id: string; text: string; createdAt: string }[]> {
     const res = await api(
       hub.baseUrl,
       "GET",
@@ -531,11 +481,7 @@ async function main(): Promise<void> {
       parts: { kind: string; text?: string }[];
     }[];
     return items
-      .filter(
-        (i) =>
-          i.sender.address === agentAddress &&
-          i.parts.some((p) => p.kind === "text"),
-      )
+      .filter((i) => i.sender.address === agentAddress && i.parts.some((p) => p.kind === "text"))
       .map((i) => ({
         id: i.id,
         createdAt: i.createdAt,
@@ -575,9 +521,7 @@ async function main(): Promise<void> {
       }
       const page = TenantApprovalsSchema(res.data);
       if (page instanceof type.errors) {
-        throw new Error(
-          `auto-approve: malformed pending approvals list: ${page.summary}`,
-        );
+        throw new Error(`auto-approve: malformed pending approvals list: ${page.summary}`);
       }
       for (const item of page.data) {
         const approved = await api(
@@ -591,9 +535,7 @@ async function main(): Promise<void> {
         if (approved.status === 200) {
           console.log(`  [auto-approved] ${headline}`);
         } else {
-          console.log(
-            `  [auto-approve FAILED ${String(approved.status)}] ${headline}`,
-          );
+          console.log(`  [auto-approve FAILED ${String(approved.status)}] ${headline}`);
         }
       }
       if (page.nextCursor === null) break;
@@ -615,21 +557,15 @@ async function main(): Promise<void> {
     let answered = false;
     while (Date.now() - t0 < TURN_TIMEOUT_MS) {
       await autoApproveAll();
-      const fresh = (await listAgentMessages()).filter(
-        (m) => !seenIds.has(m.id),
-      );
+      const fresh = (await listAgentMessages()).filter((m) => !seenIds.has(m.id));
       if (fresh.length > 0) {
         for (const m of fresh) {
           seenIds.add(m.id);
-          console.log(
-            `<<< MYRA (${Math.round((Date.now() - t0) / 1000)}s): ${m.text}`,
-          );
+          console.log(`<<< MYRA (${Math.round((Date.now() - t0) / 1000)}s): ${m.text}`);
         }
         // wait a little for follow-up messages in the same turn
         await Bun.sleep(4000);
-        const more = (await listAgentMessages()).filter(
-          (m) => !seenIds.has(m.id),
-        );
+        const more = (await listAgentMessages()).filter((m) => !seenIds.has(m.id));
         for (const m of more) {
           seenIds.add(m.id);
           console.log(`<<< MYRA (+): ${m.text}`);
@@ -647,17 +583,12 @@ async function main(): Promise<void> {
           .filter(
             (l) =>
               /WRN|ERR/.test(l) &&
-              !/pack push failed|bootstrap retry|no live deployment anchor|heartbeat/.test(
-                l,
-              ),
+              !/pack push failed|bootstrap retry|no live deployment anchor|heartbeat/.test(l),
           )
           .slice(-15)
           .join("\n");
       console.log(
-        "--- hub ---\n" +
-          tail(hub.output()) +
-          "\n--- sidecar ---\n" +
-          tail(sidecar.output()),
+        "--- hub ---\n" + tail(hub.output()) + "\n--- sidecar ---\n" + tail(sidecar.output()),
       );
       break;
     }
@@ -677,8 +608,7 @@ async function main(): Promise<void> {
         .split("\n")
         .filter(
           (l) =>
-            /capabilit|tool|Tool|grants|ERR/.test(l) &&
-            !/hub·requests|pack push|bootstrap/.test(l),
+            /capabilit|tool|Tool|grants|ERR/.test(l) && !/hub·requests|pack push|bootstrap/.test(l),
         )
         .slice(-60)
         .join("\n"),
diff --git a/scripts/e2e/smoke-auth.test.ts b/scripts/e2e/smoke-auth.test.ts
index 7702eaf368..09ba0fde15 100644
--- a/scripts/e2e/smoke-auth.test.ts
+++ b/scripts/e2e/smoke-auth.test.ts
@@ -33,9 +33,7 @@ function stringField(data: unknown, field: string, what: string): string {
     const value = (data as Record<string, unknown>)[field];
     if (typeof value === "string" && value !== "") return value;
   }
-  throw new Error(
-    `${what}: missing string field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing string field "${field}": ${JSON.stringify(data)}`);
 }
 
 describe.skipIf(databaseUrl === undefined)("smoke: sign-up and session", () => {
@@ -53,9 +51,7 @@ describe.skipIf(databaseUrl === undefined)("smoke: sign-up and session", () => {
       startHub({
         databaseUrl: url,
         port: freePort(),
-        sessionSecret: Buffer.from(
-          crypto.getRandomValues(new Uint8Array(32)),
-        ).toString("hex"),
+        sessionSecret: Buffer.from(crypto.getRandomValues(new Uint8Array(32))).toString("hex"),
         dataDir,
       }),
     );
@@ -65,13 +61,10 @@ describe.skipIf(databaseUrl === undefined)("smoke: sign-up and session", () => {
     const email = `smoke-auth-${crypto.randomUUID()}@example.invalid`;
     const password = `pw-${crypto.randomUUID()}`;
 
-    await hop(
-      "anonymous call to a session-gated route is rejected",
-      async () => {
-        const res = await api(baseUrl, "GET", "/api/me/principals");
-        expectStatus("anonymous /api/me/principals", res, 401);
-      },
-    );
+    await hop("anonymous call to a session-gated route is rejected", async () => {
+      const res = await api(baseUrl, "GET", "/api/me/principals");
+      expectStatus("anonymous /api/me/principals", res, 401);
+    });
 
     const cookies = await hop("sign-up", async () => {
       const res = await api(baseUrl, "POST", "/api/auth/sign-up/email", {
@@ -87,13 +80,7 @@ describe.skipIf(databaseUrl === undefined)("smoke: sign-up and session", () => {
     });
 
     await hop("session cookie authorizes a session-gated route", async () => {
-      const res = await api(
-        baseUrl,
-        "GET",
-        "/api/me/principals",
-        undefined,
-        cookies,
-      );
+      const res = await api(baseUrl, "GET", "/api/me/principals", undefined, cookies);
       expectStatus("authenticated /api/me/principals", res, 200);
       const body = res.data as { data: unknown[] };
       expect(Array.isArray(body.data)).toBe(true);
@@ -101,23 +88,16 @@ describe.skipIf(databaseUrl === undefined)("smoke: sign-up and session", () => {
       expect(body.data.length).toBe(0);
     });
 
-    await hop(
-      "sign-in with the same credentials also mints a session",
-      async () => {
-        const res = await api(baseUrl, "POST", "/api/auth/sign-in/email", {
-          email,
-          password,
-        });
-        expectStatus("sign-in", res, 200);
-        if (res.cookies.length === 0) {
-          throw new Error("sign-in returned no session cookie");
-        }
-        stringField(
-          (res.data as { user: unknown }).user,
-          "id",
-          "sign-in user field",
-        );
-      },
-    );
+    await hop("sign-in with the same credentials also mints a session", async () => {
+      const res = await api(baseUrl, "POST", "/api/auth/sign-in/email", {
+        email,
+        password,
+      });
+      expectStatus("sign-in", res, 200);
+      if (res.cookies.length === 0) {
+        throw new Error("sign-in returned no session cookie");
+      }
+      stringField((res.data as { user: unknown }).user, "id", "sign-in user field");
+    });
   }, 60_000);
 });
diff --git a/scripts/e2e/smoke-chat.test.ts b/scripts/e2e/smoke-chat.test.ts
index 3f9d959319..fd1e19cc9f 100644
--- a/scripts/e2e/smoke-chat.test.ts
+++ b/scripts/e2e/smoke-chat.test.ts
@@ -40,9 +40,7 @@ function stringField(data: unknown, field: string, what: string): string {
     const value = (data as Record<string, unknown>)[field];
     if (typeof value === "string" && value !== "") return value;
   }
-  throw new Error(
-    `${what}: missing string field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing string field "${field}": ${JSON.stringify(data)}`);
 }
 
 describe.skipIf(databaseUrl === undefined)("smoke: chat round-trip", () => {
@@ -61,9 +59,7 @@ describe.skipIf(databaseUrl === undefined)("smoke: chat round-trip", () => {
       startHub({
         databaseUrl: url,
         port: freePort(),
-        sessionSecret: Buffer.from(
-          crypto.getRandomValues(new Uint8Array(32)),
-        ).toString("hex"),
+        sessionSecret: Buffer.from(crypto.getRandomValues(new Uint8Array(32))).toString("hex"),
         dataDir: hubDataDir,
       }),
     );
@@ -103,9 +99,7 @@ describe.skipIf(databaseUrl === undefined)("smoke: chat round-trip", () => {
         const deadline = Date.now() + 60_000;
         for (;;) {
           if (hub.exited()) {
-            throw new Error(
-              `hub exited before workbench creation; output:\n${hub.output()}`,
-            );
+            throw new Error(`hub exited before workbench creation; output:\n${hub.output()}`);
           }
           const res = await api(
             hub.baseUrl,
@@ -172,9 +166,7 @@ describe.skipIf(databaseUrl === undefined)("smoke: chat round-trip", () => {
           }
         ).items;
         const found = items.some((item) =>
-          item.parts.some(
-            (part) => part.kind === "text" && part.text === messageText,
-          ),
+          item.parts.some((part) => part.kind === "text" && part.text === messageText),
         );
         if (!found) {
           throw new Error(
@@ -201,29 +193,26 @@ describe.skipIf(databaseUrl === undefined)("smoke: chat round-trip", () => {
         }
       });
 
-      await hop(
-        "the invited-agent listing has the documented shape",
-        async () => {
-          const res = await api(
-            hub.baseUrl,
-            "GET",
-            `/api/tenants/${tenantId}/chat/workbenches/${workbenchId}/invitable`,
-            undefined,
-            cookies,
-          );
-          expectStatus("list invitable definitions", res, 200);
-          const body = res.data as { items: { id: string; name: string }[] };
-          expect(Array.isArray(body.items)).toBe(true);
-          // No workflow is deployed on this tenant, so any listed entries
-          // are platform-provided definitions available by default; the
-          // contract asserted here is the response shape (an `items`
-          // array of `{id, name}`), not that the tenant deployed anything.
-          for (const item of body.items) {
-            expect(typeof item.id).toBe("string");
-            expect(typeof item.name).toBe("string");
-          }
-        },
-      );
+      await hop("the invited-agent listing has the documented shape", async () => {
+        const res = await api(
+          hub.baseUrl,
+          "GET",
+          `/api/tenants/${tenantId}/chat/workbenches/${workbenchId}/invitable`,
+          undefined,
+          cookies,
+        );
+        expectStatus("list invitable definitions", res, 200);
+        const body = res.data as { items: { id: string; name: string }[] };
+        expect(Array.isArray(body.items)).toBe(true);
+        // No workflow is deployed on this tenant, so any listed entries
+        // are platform-provided definitions available by default; the
+        // contract asserted here is the response shape (an `items`
+        // array of `{id, name}`), not that the tenant deployed anything.
+        for (const item of body.items) {
+          expect(typeof item.id).toBe("string");
+          expect(typeof item.name).toBe("string");
+        }
+      });
     }
   }, 120_000);
 });
diff --git a/scripts/e2e/smoke-onboarding.test.ts b/scripts/e2e/smoke-onboarding.test.ts
index 71deafa0ee..6e025d2d09 100644
--- a/scripts/e2e/smoke-onboarding.test.ts
+++ b/scripts/e2e/smoke-onboarding.test.ts
@@ -35,108 +35,86 @@ function stringField(data: unknown, field: string, what: string): string {
     const value = (data as Record<string, unknown>)[field];
     if (typeof value === "string" && value !== "") return value;
   }
-  throw new Error(
-    `${what}: missing string field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing string field "${field}": ${JSON.stringify(data)}`);
 }
 
-describe.skipIf(databaseUrl === undefined)(
-  "smoke: first-tenant provisioning",
-  () => {
-    test("a brand-new signup starts benchless and mints its first tenant via POST /api/tenants", async () => {
-      const url = databaseUrl;
-      if (url === undefined) throw new Error("unreachable: suite is skipped");
+describe.skipIf(databaseUrl === undefined)("smoke: first-tenant provisioning", () => {
+  test("a brand-new signup starts benchless and mints its first tenant via POST /api/tenants", async () => {
+    const url = databaseUrl;
+    if (url === undefined) throw new Error("unreachable: suite is skipped");
 
-      await hop("database setup", async () => {
-        await resetSchema(url);
-        await setupDatabase(url);
-      });
+    await hop("database setup", async () => {
+      await resetSchema(url);
+      await setupDatabase(url);
+    });
 
-      const dataDir = await tempDir("e2e-smoke-onboarding-hub-data-");
-      const hub = await hop("hub boot", () =>
-        startHub({
-          databaseUrl: url,
-          port: freePort(),
-          sessionSecret: Buffer.from(
-            crypto.getRandomValues(new Uint8Array(32)),
-          ).toString("hex"),
-          dataDir,
-          // The e2e hub carries no hub-owned seed model credential, and
-          // the join path never seeds regardless.
-        }),
-      );
-      track(hub);
-      const baseUrl = hub.baseUrl;
+    const dataDir = await tempDir("e2e-smoke-onboarding-hub-data-");
+    const hub = await hop("hub boot", () =>
+      startHub({
+        databaseUrl: url,
+        port: freePort(),
+        sessionSecret: Buffer.from(crypto.getRandomValues(new Uint8Array(32))).toString("hex"),
+        dataDir,
+        // The e2e hub carries no hub-owned seed model credential, and
+        // the join path never seeds regardless.
+      }),
+    );
+    track(hub);
+    const baseUrl = hub.baseUrl;
 
-      const cookies = await hop("sign-up", async () => {
-        const res = await api(baseUrl, "POST", "/api/auth/sign-up/email", {
-          name: "Onboarding Smoke Tester",
-          email: `smoke-onboarding-${crypto.randomUUID()}@example.invalid`,
-          password: `pw-${crypto.randomUUID()}`,
-        });
-        expectStatus("sign-up", res, 200);
-        if (res.cookies.length === 0) {
-          throw new Error("sign-up returned no session cookie");
-        }
-        return res.cookies;
+    const cookies = await hop("sign-up", async () => {
+      const res = await api(baseUrl, "POST", "/api/auth/sign-up/email", {
+        name: "Onboarding Smoke Tester",
+        email: `smoke-onboarding-${crypto.randomUUID()}@example.invalid`,
+        password: `pw-${crypto.randomUUID()}`,
       });
+      expectStatus("sign-up", res, 200);
+      if (res.cookies.length === 0) {
+        throw new Error("sign-up returned no session cookie");
+      }
+      return res.cookies;
+    });
 
-      const provisioned = await hop(
-        "signup mints nothing — the account starts benchless",
-        async () => {
-          const probe = await api(
-            baseUrl,
-            "GET",
-            "/api/me/principals",
-            undefined,
-            cookies,
-          );
-          expectStatus("principals probe", probe, 200);
-          const rows = (probe.data as { data: unknown[] }).data;
-          expect(rows).toEqual([]);
-          return { benchless: true };
-        },
-      );
-      expect(provisioned.benchless).toBe(true);
+    const provisioned = await hop(
+      "signup mints nothing — the account starts benchless",
+      async () => {
+        const probe = await api(baseUrl, "GET", "/api/me/principals", undefined, cookies);
+        expectStatus("principals probe", probe, 200);
+        const rows = (probe.data as { data: unknown[] }).data;
+        expect(rows).toEqual([]);
+        return { benchless: true };
+      },
+    );
+    expect(provisioned.benchless).toBe(true);
 
-      const minted = await hop(
-        "the first tenant comes from an ordinary POST /api/tenants",
-        async () => {
-          const slug = `smoke-onboarding-${crypto.randomUUID().slice(0, 8)}`;
-          const res = await api(
-            baseUrl,
-            "POST",
-            "/api/tenants",
-            { name: "Smoke Onboarding", slug },
-            cookies,
-          );
-          expectStatus("create tenant", res, 201);
-          const data = res.data as { id: string; slug?: string };
-          const tenantId = stringField(data, "id", "create tenant");
-          return { tenantId, tenantSlug: slug };
-        },
-      );
+    const minted = await hop(
+      "the first tenant comes from an ordinary POST /api/tenants",
+      async () => {
+        const slug = `smoke-onboarding-${crypto.randomUUID().slice(0, 8)}`;
+        const res = await api(
+          baseUrl,
+          "POST",
+          "/api/tenants",
+          { name: "Smoke Onboarding", slug },
+          cookies,
+        );
+        expectStatus("create tenant", res, 201);
+        const data = res.data as { id: string; slug?: string };
+        const tenantId = stringField(data, "id", "create tenant");
+        return { tenantId, tenantSlug: slug };
+      },
+    );
 
-      await hop(
-        "the provisioned bench is a real tenant membership",
-        async () => {
-          const res = await api(
-            baseUrl,
-            "GET",
-            "/api/me/principals",
-            undefined,
-            cookies,
-          );
-          expectStatus("list principals", res, 200);
-          const rows = (res.data as { data: { tenantId: string }[] }).data;
-          const own = rows.find((row) => row.tenantId === minted.tenantId);
-          if (own === undefined) {
-            throw new Error(
-              `minted tenant ${minted.tenantId} is missing from the caller's own principals: ${JSON.stringify(rows)}`,
-            );
-          }
-        },
-      );
-    }, 60_000);
-  },
-);
+    await hop("the provisioned bench is a real tenant membership", async () => {
+      const res = await api(baseUrl, "GET", "/api/me/principals", undefined, cookies);
+      expectStatus("list principals", res, 200);
+      const rows = (res.data as { data: { tenantId: string }[] }).data;
+      const own = rows.find((row) => row.tenantId === minted.tenantId);
+      if (own === undefined) {
+        throw new Error(
+          `minted tenant ${minted.tenantId} is missing from the caller's own principals: ${JSON.stringify(rows)}`,
+        );
+      }
+    });
+  }, 60_000);
+});
diff --git a/scripts/e2e/smoke-webhook.test.ts b/scripts/e2e/smoke-webhook.test.ts
index 4048ba6e4b..5c1e557ee2 100644
--- a/scripts/e2e/smoke-webhook.test.ts
+++ b/scripts/e2e/smoke-webhook.test.ts
@@ -27,10 +27,7 @@ import {
   buildHeartbeatWorkflow,
   serializeHeartbeatWorkflow,
 } from "../../workflows/heartbeat/src/index.ts";
-import {
-  ensureNoopCatalogOffering,
-  startNoopInferenceServer,
-} from "./noop-inference-server.ts";
+import { ensureNoopCatalogOffering, startNoopInferenceServer } from "./noop-inference-server.ts";
 import { publishCorbitsToolsRegistry } from "../../packages/tool-registry-publish/src/publish.ts";
 import { createHubAPI } from "../../packages/hub-api-client/src/index.ts";
 import {
@@ -62,9 +59,7 @@ function stringField(data: unknown, field: string, what: string): string {
     const value = (data as Record<string, unknown>)[field];
     if (typeof value === "string" && value !== "") return value;
   }
-  throw new Error(
-    `${what}: missing string field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing string field "${field}": ${JSON.stringify(data)}`);
 }
 
 describe.skipIf(databaseUrl === undefined)("smoke: webhook trigger", () => {
@@ -83,9 +78,7 @@ describe.skipIf(databaseUrl === undefined)("smoke: webhook trigger", () => {
       startHub({
         databaseUrl: url,
         port: freePort(),
-        sessionSecret: Buffer.from(
-          crypto.getRandomValues(new Uint8Array(32)),
-        ).toString("hex"),
+        sessionSecret: Buffer.from(crypto.getRandomValues(new Uint8Array(32))).toString("hex"),
         dataDir: hubDataDir,
       }),
     );
@@ -131,8 +124,7 @@ describe.skipIf(databaseUrl === undefined)("smoke: webhook trigger", () => {
       });
       const offeringId = await hop("noop catalog seeding", () =>
         ensureNoopCatalogOffering(
-          (method, path, body, cookies2) =>
-            api(hub.baseUrl, method, path, body, cookies2),
+          (method, path, body, cookies2) => api(hub.baseUrl, method, path, body, cookies2),
           cookies,
           tenantId,
           noopServer.baseUrl,
@@ -141,49 +133,46 @@ describe.skipIf(databaseUrl === undefined)("smoke: webhook trigger", () => {
       );
 
       const assetName = "heartbeat";
-      const { assetId, commitSha } = await hop(
-        "workflow asset publication",
-        async () => {
-          const created = await api(
-            hub.baseUrl,
-            "POST",
-            `/api/tenants/${tenantId}/assets`,
-            { kind: "workflow", name: assetName },
-            cookies,
-          );
-          expectStatus("create workflow asset", created, 201);
-          const id = stringField(created.data, "id", "create workflow asset");
+      const { assetId, commitSha } = await hop("workflow asset publication", async () => {
+        const created = await api(
+          hub.baseUrl,
+          "POST",
+          `/api/tenants/${tenantId}/assets`,
+          { kind: "workflow", name: assetName },
+          cookies,
+        );
+        expectStatus("create workflow asset", created, 201);
+        const id = stringField(created.data, "id", "create workflow asset");
 
-          const minted = await api(
-            hub.baseUrl,
-            "POST",
-            `/api/tenants/${tenantId}/git-tokens`,
-            {
-              name: "e2e-smoke-webhook-push",
-              resource: "asset:*",
-              refPattern: "**",
-              actions: ["can_read", "can_push"],
-              expiresAt: new Date(Date.now() + 10 * 60_000).toISOString(),
-            },
-            cookies,
-          );
-          expectStatus("mint git token", minted, 201);
+        const minted = await api(
+          hub.baseUrl,
+          "POST",
+          `/api/tenants/${tenantId}/git-tokens`,
+          {
+            name: "e2e-smoke-webhook-push",
+            resource: "asset:*",
+            refPattern: "**",
+            actions: ["can_read", "can_push"],
+            expiresAt: new Date(Date.now() + 10 * 60_000).toISOString(),
+          },
+          cookies,
+        );
+        expectStatus("mint git token", minted, 201);
 
-          const definition = buildHeartbeatWorkflow({
-            triggerAddress: `heartbeat@${slug}.localhost`,
-            inferencePreferences: [{ provider: "anthropic", model: "noop" }],
-            turnTimeoutMs: 30_000,
-          });
-          const pushed = await pushWorkflowSource({
-            baseUrl: hub.baseUrl,
-            tenantId,
-            assetName,
-            tokenSecret: stringField(minted.data, "secret", "mint git token"),
-            workflowJson: serializeHeartbeatWorkflow(definition),
-          });
-          return { assetId: id, commitSha: pushed.commitSha };
-        },
-      );
+        const definition = buildHeartbeatWorkflow({
+          triggerAddress: `heartbeat@${slug}.localhost`,
+          inferencePreferences: [{ provider: "anthropic", model: "noop" }],
+          turnTimeoutMs: 30_000,
+        });
+        const pushed = await pushWorkflowSource({
+          baseUrl: hub.baseUrl,
+          tenantId,
+          assetName,
+          tokenSecret: stringField(minted.data, "secret", "mint git token"),
+          workflowJson: serializeHeartbeatWorkflow(definition),
+        });
+        return { assetId: id, commitSha: pushed.commitSha };
+      });
 
       const definitionId = await hop("workflow deploy", async () => {
         const body = workflowDeployBody({
@@ -195,9 +184,7 @@ describe.skipIf(databaseUrl === undefined)("smoke: webhook trigger", () => {
         const deadline = Date.now() + 60_000;
         for (;;) {
           if (hub.exited()) {
-            throw new Error(
-              `hub exited before deploy; output:\n${hub.output()}`,
-            );
+            throw new Error(`hub exited before deploy; output:\n${hub.output()}`);
           }
           // CL-7071 cutover: the launched run's sidecar initialization
           // resolves its `@corbits` scope pins against the tenant's own
@@ -252,9 +239,7 @@ describe.skipIf(databaseUrl === undefined)("smoke: webhook trigger", () => {
         );
         expectStatus("list workflow definitions", listed, 200);
         const rows =
-          typeof listed.data === "object" &&
-          listed.data !== null &&
-          "data" in listed.data
+          typeof listed.data === "object" && listed.data !== null && "data" in listed.data
             ? (listed.data as { data: unknown[] }).data
             : (listed.data as unknown[]);
         const heartbeat = (rows as { id: string; name?: string }[]).find(
@@ -268,27 +253,24 @@ describe.skipIf(databaseUrl === undefined)("smoke: webhook trigger", () => {
         return heartbeat.id;
       });
 
-      const { triggerId, secret } = await hop(
-        "webhook trigger creation",
-        async () => {
-          const res = await api(
-            hub.baseUrl,
-            "POST",
-            `/api/tenants/${tenantId}/webhook-triggers`,
-            {
-              name: "Smoke webhook",
-              workflowDefinitionId: definitionId,
-              inputTemplate: "webhook smoke: {{event}}",
-            },
-            cookies,
-          );
-          expectStatus("create webhook trigger", res, 201);
-          return {
-            triggerId: stringField(res.data, "id", "create webhook trigger"),
-            secret: stringField(res.data, "secret", "create webhook trigger"),
-          };
-        },
-      );
+      const { triggerId, secret } = await hop("webhook trigger creation", async () => {
+        const res = await api(
+          hub.baseUrl,
+          "POST",
+          `/api/tenants/${tenantId}/webhook-triggers`,
+          {
+            name: "Smoke webhook",
+            workflowDefinitionId: definitionId,
+            inputTemplate: "webhook smoke: {{event}}",
+          },
+          cookies,
+        );
+        expectStatus("create webhook trigger", res, 201);
+        return {
+          triggerId: stringField(res.data, "id", "create webhook trigger"),
+          secret: stringField(res.data, "secret", "create webhook trigger"),
+        };
+      });
 
       const instanceId = await hop(
         "a correctly signed delivery is accepted and launches a run",
@@ -348,9 +330,7 @@ describe.skipIf(databaseUrl === undefined)("smoke: webhook trigger", () => {
             cookies,
           );
           expectStatus("get webhook trigger", triggerRes, 200);
-          const lastFiredAt = (
-            triggerRes.data as { lastFiredAt: string | null }
-          ).lastFiredAt;
+          const lastFiredAt = (triggerRes.data as { lastFiredAt: string | null }).lastFiredAt;
           if (lastFiredAt === null) {
             throw new Error(
               `webhook trigger lastFiredAt was not recorded after delivery: ${JSON.stringify(triggerRes.data)}`,
@@ -408,9 +388,7 @@ describe.skipIf(databaseUrl === undefined)("smoke: webhook trigger", () => {
               );
               if (rows.length > 0) break;
               if (Date.now() > deadline) {
-                throw new Error(
-                  `run ${instanceId} recorded no inference_turn within the deadline`,
-                );
+                throw new Error(`run ${instanceId} recorded no inference_turn within the deadline`);
               }
               await Bun.sleep(200);
             }
@@ -438,9 +416,7 @@ describe.skipIf(databaseUrl === undefined)("smoke: webhook trigger", () => {
           }
           const turnSpan = trace.spans.find((span) => span.kind === "turn");
           if (turnSpan === undefined) {
-            throw new Error(
-              `run trace had no "turn" span: ${JSON.stringify(trace)}`,
-            );
+            throw new Error(`run trace had no "turn" span: ${JSON.stringify(trace)}`);
           }
           expect(["ok", "awaiting", "failed"]).toContain(turnSpan.phase);
         },
diff --git a/scripts/e2e/t3-github-roundtrip.proof.test.ts b/scripts/e2e/t3-github-roundtrip.proof.test.ts
index 4400393cb3..245f25004e 100644
--- a/scripts/e2e/t3-github-roundtrip.proof.test.ts
+++ b/scripts/e2e/t3-github-roundtrip.proof.test.ts
@@ -60,9 +60,7 @@ describe.skipIf(databaseUrl === undefined || ghToken === undefined)(
         startHub({
           databaseUrl: url,
           port: freePort(),
-          sessionSecret: Buffer.from(
-            crypto.getRandomValues(new Uint8Array(32)),
-          ).toString("hex"),
+          sessionSecret: Buffer.from(crypto.getRandomValues(new Uint8Array(32))).toString("hex"),
           dataDir: await tempDir("e2e-t3-proof-hub-data-"),
         }),
       );
@@ -98,9 +96,7 @@ describe.skipIf(databaseUrl === undefined || ghToken === undefined)(
               ? body.tenantId
               : undefined;
         if (id === undefined) {
-          throw new Error(
-            `create tenant answered no id: ${JSON.stringify(minted.data)}`,
-          );
+          throw new Error(`create tenant answered no id: ${JSON.stringify(minted.data)}`);
         }
         return id;
       });
@@ -117,17 +113,8 @@ describe.skipIf(databaseUrl === undefined || ghToken === undefined)(
       const disconnectPath = `/api/tenants/${tenantId}/connections/github/disconnect`;
       const credentialsPath = `/api/tenants/${tenantId}/credentials`;
 
-      async function credentialPresent(
-        what: string,
-        credentialId: string,
-      ): Promise<boolean> {
-        const res = await api(
-          hub.baseUrl,
-          "GET",
-          credentialsPath,
-          undefined,
-          signup,
-        );
+      async function credentialPresent(what: string, credentialId: string): Promise<boolean> {
+        const res = await api(hub.baseUrl, "GET", credentialsPath, undefined, signup);
         expectStatus(`credentials list (${what})`, res, 200);
         const rows = (res.data as { data: { id: string }[] }).data;
         console.log(
@@ -137,48 +124,30 @@ describe.skipIf(databaseUrl === undefined || ghToken === undefined)(
       }
 
       const credentialId = await hop("connect (POST complete)", async () => {
-        const res = await api(
-          hub.baseUrl,
-          "POST",
-          completePath,
-          { apiKey: token },
-          signup,
-        );
+        const res = await api(hub.baseUrl, "POST", completePath, { apiKey: token }, signup);
         expectStatus("github complete", res, 200);
         const body = res.data as { credentialId?: string; status?: string };
         console.log(
           `complete -> ${res.status} status=${body.status} credentialId=${body.credentialId}`,
         );
         if (body.credentialId === undefined || body.status !== "active") {
-          throw new Error(
-            `complete answered no active credential: ${JSON.stringify(res.data)}`,
-          );
+          throw new Error(`complete answered no active credential: ${JSON.stringify(res.data)}`);
         }
         return body.credentialId;
       });
 
       await hop("status reads connected", async () => {
-        expect(await credentialPresent("after connect", credentialId)).toBe(
-          true,
-        );
+        expect(await credentialPresent("after connect", credentialId)).toBe(true);
       });
 
       await hop("disconnect (DELETE)", async () => {
-        const res = await api(
-          hub.baseUrl,
-          "DELETE",
-          disconnectPath,
-          undefined,
-          signup,
-        );
+        const res = await api(hub.baseUrl, "DELETE", disconnectPath, undefined, signup);
         expectStatus("github disconnect", res, 204);
         console.log(`disconnect -> ${res.status}`);
       });
 
       await hop("status reads disconnected", async () => {
-        expect(await credentialPresent("after disconnect", credentialId)).toBe(
-          false,
-        );
+        expect(await credentialPresent("after disconnect", credentialId)).toBe(false);
       });
     }, 180_000);
   },
diff --git a/scripts/e2e/walking-skeleton.test.ts b/scripts/e2e/walking-skeleton.test.ts
index 70cdbe1237..1146cbcec4 100644
--- a/scripts/e2e/walking-skeleton.test.ts
+++ b/scripts/e2e/walking-skeleton.test.ts
@@ -22,10 +22,7 @@
 import { describe, expect, test } from "bun:test";
 
 import { resetSchema, setupDatabase } from "../db-setup.ts";
-import {
-  buildEchoWorkflow,
-  serializeEchoWorkflow,
-} from "../../workflows/echo/src/index.ts";
+import { buildEchoWorkflow, serializeEchoWorkflow } from "../../workflows/echo/src/index.ts";
 import {
   api,
   assertNeverRealProvider,
@@ -54,9 +51,7 @@ function stringField(data: unknown, field: string, what: string): string {
     const value = (data as Record<string, unknown>)[field];
     if (typeof value === "string" && value !== "") return value;
   }
-  throw new Error(
-    `${what}: missing string field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing string field "${field}": ${JSON.stringify(data)}`);
 }
 
 /**
@@ -79,20 +74,12 @@ const PLACEHOLDER_MODEL = "noop";
  * address-reachable (see the module comment above).
  */
 async function seedPlaceholderCatalogOffering(options: {
-  call: (
-    method: string,
-    path: string,
-    body?: unknown,
-    cookies?: string[],
-  ) => Promise<ApiResult>;
+  call: (method: string, path: string, body?: unknown, cookies?: string[]) => Promise<ApiResult>;
   tenantId: string;
   cookies: string[];
   placeholderBaseUrl: string;
 }): Promise<{ offeringId: string }> {
-  assertNeverRealProvider(
-    options.placeholderBaseUrl,
-    "placeholder catalog provider baseURL",
-  );
+  assertNeverRealProvider(options.placeholderBaseUrl, "placeholder catalog provider baseURL");
   const { call, tenantId, cookies } = options;
 
   const model = await call(
@@ -139,11 +126,7 @@ async function seedPlaceholderCatalogOffering(options: {
     cookies,
   );
   expectStatus("create catalog provider", catalogProvider, 201);
-  const catalogProviderId = stringField(
-    catalogProvider.data,
-    "id",
-    "create catalog provider",
-  );
+  const catalogProviderId = stringField(catalogProvider.data, "id", "create catalog provider");
 
   const offering = await call(
     "POST",
@@ -184,9 +167,7 @@ describe.skipIf(databaseUrl === undefined)("walking skeleton", () => {
       const handle = await startHub({
         databaseUrl: url,
         port: freePort(),
-        sessionSecret: Buffer.from(
-          crypto.getRandomValues(new Uint8Array(32)),
-        ).toString("hex"),
+        sessionSecret: Buffer.from(crypto.getRandomValues(new Uint8Array(32))).toString("hex"),
         dataDir: await tempDir("e2e-hub-data-"),
       });
       track(handle);
@@ -229,51 +210,46 @@ describe.skipIf(databaseUrl === undefined)("walking skeleton", () => {
     // arrives over the platform's git smart-HTTP surface — the only
     // surface that writes asset tree content.
     const assetName = "echo";
-    const { assetId, commitSha } = await hop(
-      "workflow asset publication",
-      async () => {
-        const created = await api(
-          hub.baseUrl,
-          "POST",
-          `/api/tenants/${tenantId}/assets`,
-          { kind: "workflow", name: assetName },
-          user.cookies,
-        );
-        expectStatus("create workflow asset", created, 201);
-        const id = stringField(created.data, "id", "create workflow asset");
+    const { assetId, commitSha } = await hop("workflow asset publication", async () => {
+      const created = await api(
+        hub.baseUrl,
+        "POST",
+        `/api/tenants/${tenantId}/assets`,
+        { kind: "workflow", name: assetName },
+        user.cookies,
+      );
+      expectStatus("create workflow asset", created, 201);
+      const id = stringField(created.data, "id", "create workflow asset");
 
-        const minted = await api(
-          hub.baseUrl,
-          "POST",
-          `/api/tenants/${tenantId}/git-tokens`,
-          {
-            name: "e2e-workflow-push",
-            resource: "asset:*",
-            refPattern: "**",
-            actions: ["can_read", "can_push"],
-            expiresAt: new Date(Date.now() + 10 * 60_000).toISOString(),
-          },
-          user.cookies,
-        );
-        expectStatus("mint git token", minted, 201);
+      const minted = await api(
+        hub.baseUrl,
+        "POST",
+        `/api/tenants/${tenantId}/git-tokens`,
+        {
+          name: "e2e-workflow-push",
+          resource: "asset:*",
+          refPattern: "**",
+          actions: ["can_read", "can_push"],
+          expiresAt: new Date(Date.now() + 10 * 60_000).toISOString(),
+        },
+        user.cookies,
+      );
+      expectStatus("mint git token", minted, 201);
 
-        const definition = buildEchoWorkflow({
-          triggerAddress: `echo@${slug}.localhost`,
-          inferencePreferences: [
-            { provider: "anthropic", model: PLACEHOLDER_MODEL },
-          ],
-          turnTimeoutMs: 60_000,
-        });
-        const pushed = await pushWorkflowSource({
-          baseUrl: hub.baseUrl,
-          tenantId,
-          assetName,
-          tokenSecret: stringField(minted.data, "secret", "mint git token"),
-          workflowJson: serializeEchoWorkflow(definition),
-        });
-        return { assetId: id, commitSha: pushed.commitSha };
-      },
-    );
+      const definition = buildEchoWorkflow({
+        triggerAddress: `echo@${slug}.localhost`,
+        inferencePreferences: [{ provider: "anthropic", model: PLACEHOLDER_MODEL }],
+        turnTimeoutMs: 60_000,
+      });
+      const pushed = await pushWorkflowSource({
+        baseUrl: hub.baseUrl,
+        tenantId,
+        assetName,
+        tokenSecret: stringField(minted.data, "secret", "mint git token"),
+        workflowJson: serializeEchoWorkflow(definition),
+      });
+      return { assetId: id, commitSha: pushed.commitSha };
+    });
 
     // Hop: noop catalog seeding. The native deploy resolves inference
     // against a real catalog offering; this suite's chosen offering
@@ -281,8 +257,7 @@ describe.skipIf(databaseUrl === undefined)("walking skeleton", () => {
     // never calls inference and full run-completion is not asserted.
     const { offeringId } = await hop("noop catalog seeding", () =>
       seedPlaceholderCatalogOffering({
-        call: (method, path, body, cookies) =>
-          api(hub.baseUrl, method, path, body, cookies),
+        call: (method, path, body, cookies) => api(hub.baseUrl, method, path, body, cookies),
         tenantId,
         cookies: user.cookies,
         placeholderBaseUrl: "https://inference.invalid",
@@ -342,8 +317,7 @@ describe.skipIf(databaseUrl === undefined)("walking skeleton", () => {
       expectStatus("list deployments", listed, 200);
       if (!JSON.stringify(listed.data).includes(deploymentId)) {
         throw new Error(
-          `deployment ${deploymentId} missing from list: ` +
-            JSON.stringify(listed.data),
+          `deployment ${deploymentId} missing from list: ` + JSON.stringify(listed.data),
         );
       }
 
@@ -355,11 +329,7 @@ describe.skipIf(databaseUrl === undefined)("walking skeleton", () => {
         user.cookies,
       );
       expectStatus("trigger deployment mail", triggered, 202);
-      const address = stringField(
-        triggered.data,
-        "address",
-        "trigger deployment mail",
-      );
+      const address = stringField(triggered.data, "address", "trigger deployment mail");
       // The deployment's stable mail address. This same value is also the
       // deployment's run identity: the platform derives one run id from
       // the address, shared by every trigger of the deployment. The
diff --git a/scripts/e2e/workbench-digest.test.ts b/scripts/e2e/workbench-digest.test.ts
index 8f069d93ad..2d2900be4a 100644
--- a/scripts/e2e/workbench-digest.test.ts
+++ b/scripts/e2e/workbench-digest.test.ts
@@ -20,10 +20,7 @@ import {
   buildWorkbenchDigestWorkflow,
   serializeWorkbenchDigestWorkflow,
 } from "../../workflows/workbench-digest/src/index.ts";
-import {
-  ensureNoopCatalogOffering,
-  startNoopInferenceServer,
-} from "./noop-inference-server.ts";
+import { ensureNoopCatalogOffering, startNoopInferenceServer } from "./noop-inference-server.ts";
 import {
   api,
   createCleanupHarness,
@@ -53,9 +50,7 @@ function stringField(data: unknown, field: string, what: string): string {
     const value = (data as Record<string, unknown>)[field];
     if (typeof value === "string" && value !== "") return value;
   }
-  throw new Error(
-    `${what}: missing string field "${field}": ${JSON.stringify(data)}`,
-  );
+  throw new Error(`${what}: missing string field "${field}": ${JSON.stringify(data)}`);
 }
 
 function runIds(data: unknown): string[] {
@@ -105,9 +100,7 @@ describe.skipIf(databaseUrl === undefined)("workbench-digest workflow", () => {
       const handle = await startHub({
         databaseUrl: url,
         port: freePort(),
-        sessionSecret: Buffer.from(
-          crypto.getRandomValues(new Uint8Array(32)),
-        ).toString("hex"),
+        sessionSecret: Buffer.from(crypto.getRandomValues(new Uint8Array(32))).toString("hex"),
         dataDir: await tempDir("e2e-workbench-digest-hub-data-"),
       });
       track(handle);
@@ -141,48 +134,45 @@ describe.skipIf(databaseUrl === undefined)("workbench-digest workflow", () => {
     });
 
     const assetName = "workbench-digest";
-    const { assetId, commitSha } = await hop(
-      "workflow asset publication",
-      async () => {
-        const created = await api(
-          hub.baseUrl,
-          "POST",
-          `/api/tenants/${tenantId}/assets`,
-          { kind: "workflow", name: assetName },
-          user.cookies,
-        );
-        expectStatus("create workflow asset", created, 201);
-        const id = stringField(created.data, "id", "create workflow asset");
+    const { assetId, commitSha } = await hop("workflow asset publication", async () => {
+      const created = await api(
+        hub.baseUrl,
+        "POST",
+        `/api/tenants/${tenantId}/assets`,
+        { kind: "workflow", name: assetName },
+        user.cookies,
+      );
+      expectStatus("create workflow asset", created, 201);
+      const id = stringField(created.data, "id", "create workflow asset");
 
-        const minted = await api(
-          hub.baseUrl,
-          "POST",
-          `/api/tenants/${tenantId}/git-tokens`,
-          {
-            name: "e2e-workbench-digest-push",
-            resource: "asset:*",
-            refPattern: "**",
-            actions: ["can_read", "can_push"],
-            expiresAt: new Date(Date.now() + 10 * 60_000).toISOString(),
-          },
-          user.cookies,
-        );
-        expectStatus("mint git token", minted, 201);
+      const minted = await api(
+        hub.baseUrl,
+        "POST",
+        `/api/tenants/${tenantId}/git-tokens`,
+        {
+          name: "e2e-workbench-digest-push",
+          resource: "asset:*",
+          refPattern: "**",
+          actions: ["can_read", "can_push"],
+          expiresAt: new Date(Date.now() + 10 * 60_000).toISOString(),
+        },
+        user.cookies,
+      );
+      expectStatus("mint git token", minted, 201);
 
-        const definition = buildWorkbenchDigestWorkflow({
-          inferencePreferences: [{ provider: "anthropic", model: "noop" }],
-          turnTimeoutMs: DIGEST_TURN_TIMEOUT_MS,
-        });
-        const pushed = await pushWorkflowSource({
-          baseUrl: hub.baseUrl,
-          tenantId,
-          assetName,
-          tokenSecret: stringField(minted.data, "secret", "mint git token"),
-          workflowJson: serializeWorkbenchDigestWorkflow(definition),
-        });
-        return { assetId: id, commitSha: pushed.commitSha };
-      },
-    );
+      const definition = buildWorkbenchDigestWorkflow({
+        inferencePreferences: [{ provider: "anthropic", model: "noop" }],
+        turnTimeoutMs: DIGEST_TURN_TIMEOUT_MS,
+      });
+      const pushed = await pushWorkflowSource({
+        baseUrl: hub.baseUrl,
+        tenantId,
+        assetName,
+        tokenSecret: stringField(minted.data, "secret", "mint git token"),
+        workflowJson: serializeWorkbenchDigestWorkflow(definition),
+      });
+      return { assetId: id, commitSha: pushed.commitSha };
+    });
 
     // The deploy's source is this suite's own, really-reachable noop
     // inference server — not a placeholder like the walking skeleton's
@@ -200,8 +190,7 @@ describe.skipIf(databaseUrl === undefined)("workbench-digest workflow", () => {
     });
     const offeringId = await hop("noop catalog seeding", () =>
       ensureNoopCatalogOffering(
-        (method, path, body, cookies) =>
-          api(hub.baseUrl, method, path, body, cookies),
+        (method, path, body, cookies) => api(hub.baseUrl, method, path, body, cookies),
         user.cookies,
         tenantId,
         noopServer.baseUrl,
@@ -280,9 +269,7 @@ describe.skipIf(databaseUrl === undefined)("workbench-digest workflow", () => {
           const started = runIds(listed.data).find((id) => !before.has(id));
           if (started !== undefined) return started;
           if (Date.now() > deadline) {
-            throw new Error(
-              "workbench-digest trigger was accepted but no run started within 30s",
-            );
+            throw new Error("workbench-digest trigger was accepted but no run started within 30s");
           }
           await Bun.sleep(200);
         }
diff --git a/scripts/evals-run.ts b/scripts/evals-run.ts
index 28835f55f0..2882c3440f 100644
--- a/scripts/evals-run.ts
+++ b/scripts/evals-run.ts
@@ -49,10 +49,7 @@ import {
   startHub,
   startSidecar,
 } from "./e2e/harness.ts";
-import {
-  assertDatabaseConfigured,
-  skippedDatabaseWarning,
-} from "./e2e/db-gate.ts";
+import { assertDatabaseConfigured, skippedDatabaseWarning } from "./e2e/db-gate.ts";
 
 function dbConfigFromUrl(databaseUrl: string) {
   const url = new URL(databaseUrl);
@@ -125,9 +122,7 @@ function assertPlumbingOnly(results: readonly EvalRunResult[]): void {
   for (const result of results) {
     for (const step of result.steps) {
       if (step.turn.replyText.trim() === "") {
-        problems.push(
-          `${result.evalName} step ${String(step.stepIndex)}: empty reply text`,
-        );
+        problems.push(`${result.evalName} step ${String(step.stepIndex)}: empty reply text`);
       }
       if (!Array.isArray(step.turn.toolCalls)) {
         problems.push(
@@ -151,12 +146,9 @@ async function main(): Promise<void> {
   const live =
     (process.env["EVAL_PROVIDER_API_KEY"] !== undefined &&
       process.env["EVAL_PROVIDER_API_KEY"] !== "") ||
-    (process.env["EVAL_PROVIDER"] === "ollama" &&
-      process.env["OLLAMA_BASE_URL"] !== undefined);
+    (process.env["EVAL_PROVIDER"] === "ollama" && process.env["OLLAMA_BASE_URL"] !== undefined);
 
-  const configs: readonly RunConfig[] = [
-    { name: live ? "live" : "plumbing-only" },
-  ];
+  const configs: readonly RunConfig[] = [{ name: live ? "live" : "plumbing-only" }];
   const configByName = new Map(configs.map((config) => [config.name, config]));
 
   // The recorded GitHub MCP fake (CL-6338) rides every run: connected
@@ -192,8 +184,7 @@ async function main(): Promise<void> {
         // failed delivery's status and body are readable off the run.
         if (step.turn.human.startsWith("(harness)")) {
           process.stdout.write(
-            `  ${result.evalName} step ${String(step.stepIndex)}: ` +
-              `${step.turn.replyText}\n`,
+            `  ${result.evalName} step ${String(step.stepIndex)}: ` + `${step.turn.replyText}\n`,
           );
         }
         for (const report of step.scorerReports) {
@@ -212,13 +203,7 @@ async function main(): Promise<void> {
   const markdown = renderResultsMarkdown(evalNames, configNames, results);
   process.stdout.write(`${markdown}\n`);
 
-  const reportPath = path.join(
-    import.meta.dir,
-    "..",
-    "packages",
-    "evals",
-    "eval-report.md",
-  );
+  const reportPath = path.join(import.meta.dir, "..", "packages", "evals", "eval-report.md");
   await mkdir(path.dirname(reportPath), { recursive: true });
   await writeFile(reportPath, markdown);
 
@@ -235,17 +220,13 @@ async function main(): Promise<void> {
 
     const failed = results.flatMap((result) =>
       result.steps.flatMap((step) =>
-        step.scorerReports.filter(
-          (report) => !report.pass && report.skipped !== true,
-        ),
+        step.scorerReports.filter((report) => !report.pass && report.skipped !== true),
       ),
     );
     if (failed.length > 0) {
       console.error(
         `bun run eval: ${String(failed.length)} scorer(s) failed:\n` +
-          failed
-            .map((report) => `  - ${report.name}: ${report.reason}`)
-            .join("\n"),
+          failed.map((report) => `  - ${report.name}: ${report.reason}`).join("\n"),
       );
       process.exitCode = 1;
     }
diff --git a/scripts/generate-tsconfig-references.test.ts b/scripts/generate-tsconfig-references.test.ts
index ac92a9353f..03946bd1f0 100644
--- a/scripts/generate-tsconfig-references.test.ts
+++ b/scripts/generate-tsconfig-references.test.ts
@@ -28,10 +28,7 @@ async function writePackage(
     join(dir, "tsconfig.json"),
     JSON.stringify({ extends: "../../tsconfig.base.json" }, null, 2),
   );
-  await writeFile(
-    join(dir, "src", "index.ts"),
-    options.srcFile ?? "export const value = 1;\n",
-  );
+  await writeFile(join(dir, "src", "index.ts"), options.srcFile ?? "export const value = 1;\n");
   if (options.withTest) {
     await mkdir(join(dir, "test"), { recursive: true });
     await writeFile(join(dir, "test", "index.test.ts"), "export {};\n");
@@ -59,10 +56,7 @@ function run(args: string[]): Promise<{ exitCode: number; stderr: string }> {
       stdout: "pipe",
       stderr: "pipe",
     });
-    const [stderr, exitCode] = await Promise.all([
-      new Response(child.stderr).text(),
-      child.exited,
-    ]);
+    const [stderr, exitCode] = await Promise.all([new Response(child.stderr).text(), child.exited]);
     return { exitCode, stderr };
   })();
 }
@@ -114,9 +108,7 @@ describe("generate-tsconfig-references", () => {
     await run([]);
 
     const combined = await readTsconfig("leaf");
-    expect(combined.compilerOptions?.["tsBuildInfoFile"]).toBe(
-      "tsconfig.tsbuildinfo",
-    );
+    expect(combined.compilerOptions?.["tsBuildInfoFile"]).toBe("tsconfig.tsbuildinfo");
   });
 
   test("references a real workspace dependency's tsconfig.src.json", async () => {
@@ -156,17 +148,11 @@ describe("generate-tsconfig-references", () => {
 
   test("the combined tsconfig.json references the same deps as tsconfig.src.json", async () => {
     await writePackage("leaf");
-    await writePackage(
-      "consumer",
-      { "@fixture/leaf": "workspace:*" },
-      { withTest: true },
-    );
+    await writePackage("consumer", { "@fixture/leaf": "workspace:*" }, { withTest: true });
     await run([]);
 
     const combined = await readTsconfig("consumer");
-    expect(combined.references).toEqual([
-      { path: "../leaf/tsconfig.src.json" },
-    ]);
+    expect(combined.references).toEqual([{ path: "../leaf/tsconfig.src.json" }]);
     expect(combined.compilerOptions?.["composite"]).toBe(false);
     expect(combined.include).toContain("test");
   });
@@ -272,9 +258,7 @@ describe("generate-tsconfig-references", () => {
     );
     await run([]);
 
-    expect(await tsconfigExists("uses-harness", "tsconfig.src.json")).toBe(
-      false,
-    );
+    expect(await tsconfigExists("uses-harness", "tsconfig.src.json")).toBe(false);
     const config = await readTsconfig("uses-harness");
     expect(config.compilerOptions?.["composite"]).toBeUndefined();
   });
diff --git a/scripts/generate-tsconfig-references.ts b/scripts/generate-tsconfig-references.ts
index cda9263da1..d6105f2e6d 100644
--- a/scripts/generate-tsconfig-references.ts
+++ b/scripts/generate-tsconfig-references.ts
@@ -33,13 +33,7 @@ import { existsSync } from "node:fs";
 import { relative } from "node:path";
 import { Glob } from "bun";
 
-const WORKSPACE_ROOTS = [
-  "apps",
-  "packages",
-  "tools",
-  "workflows",
-  "vendor/intx",
-] as const;
+const WORKSPACE_ROOTS = ["apps", "packages", "tools", "workflows", "vendor/intx"] as const;
 
 const SRC_CONFIG_NAME = "tsconfig.src.json";
 
@@ -142,15 +136,9 @@ function stronglyConnectedComponents(
       if (!byName.has(w)) continue;
       if (!indices.has(w)) {
         strongconnect(w);
-        lowlink.set(
-          v,
-          Math.min(lowlink.get(v) as number, lowlink.get(w) as number),
-        );
+        lowlink.set(v, Math.min(lowlink.get(v) as number, lowlink.get(w) as number));
       } else if (onStack.has(w)) {
-        lowlink.set(
-          v,
-          Math.min(lowlink.get(v) as number, indices.get(w) as number),
-        );
+        lowlink.set(v, Math.min(lowlink.get(v) as number, indices.get(w) as number));
       }
     }
 
@@ -245,11 +233,7 @@ async function loadTsconfig(path: string): Promise<Tsconfig | undefined> {
 // its rootDir. They are excluded here and picked up by the combined
 // project's `include` instead, alongside a dedicated `test/` directory
 // when present.
-function withSrcFields(
-  dir: string,
-  config: Tsconfig,
-  referencePaths: readonly string[],
-): Tsconfig {
+function withSrcFields(dir: string, config: Tsconfig, referencePaths: readonly string[]): Tsconfig {
   const {
     compilerOptions,
     references: _oldReferences,
@@ -269,19 +253,14 @@ function withSrcFields(
     ...rest,
     include: [
       ...(include ?? ["src"]).filter(
-        (entry) =>
-          entry !== "test" &&
-          entry !== "package.json" &&
-          entry !== "src/**/*.json",
+        (entry) => entry !== "test" && entry !== "package.json" && entry !== "src/**/*.json",
       ),
       "package.json",
       "src/**/*.json",
     ],
     exclude: ["src/**/*.test.ts", "src/**/*.test.tsx"],
     compilerOptions: { ...compilerOptions, ...BUILD_COMPILER_OPTIONS },
-    ...(referencePaths.length > 0
-      ? { references: referencePaths.map((path) => ({ path })) }
-      : {}),
+    ...(referencePaths.length > 0 ? { references: referencePaths.map((path) => ({ path })) } : {}),
   };
 }
 
@@ -309,9 +288,7 @@ function withLegacyFields(config: Tsconfig): Tsconfig {
   );
   return {
     ...rest,
-    include: cleanedInclude.includes("test")
-      ? cleanedInclude
-      : [...cleanedInclude, "test"],
+    include: cleanedInclude.includes("test") ? cleanedInclude : [...cleanedInclude, "test"],
     compilerOptions: { ...restOptions, noEmit: true },
   };
 }
@@ -360,9 +337,7 @@ function combinedConfigFor(
     // than silently dropped by rebuilding `include` from a fixed list.
     include: [...new Set([...baseInclude, ...extraInclude])],
     exclude: [],
-    ...(referencePaths.length > 0
-      ? { references: referencePaths.map((path) => ({ path })) }
-      : {}),
+    ...(referencePaths.length > 0 ? { references: referencePaths.map((path) => ({ path })) } : {}),
   };
 }
 
@@ -377,10 +352,7 @@ function srcFieldsMatch(current: Tsconfig, next: Tsconfig): boolean {
   }
   if (!referencesMatch(current.references, next.references)) return false;
   if (!listsMatch(current.include, next.include)) return false;
-  return listsMatch(
-    current.exclude as string[] | undefined,
-    next.exclude as string[] | undefined,
-  );
+  return listsMatch(current.exclude as string[] | undefined, next.exclude as string[] | undefined);
 }
 
 function listsMatch(
@@ -392,10 +364,7 @@ function listsMatch(
   return a.length === b.length && a.every((v, i) => v === b[i]);
 }
 
-function referencesMatch(
-  current: Tsconfig["references"],
-  next: Tsconfig["references"],
-): boolean {
+function referencesMatch(current: Tsconfig["references"], next: Tsconfig["references"]): boolean {
   const currentPaths = (current ?? []).map((r) => r.path).sort();
   const nextPaths = (next ?? []).map((r) => r.path).sort();
   return (
@@ -404,10 +373,7 @@ function referencesMatch(
   );
 }
 
-function combinedFieldsMatch(
-  current: Tsconfig | undefined,
-  next: Tsconfig,
-): boolean {
+function combinedFieldsMatch(current: Tsconfig | undefined, next: Tsconfig): boolean {
   if (current === undefined) return false;
   const currentOptions = current.compilerOptions ?? {};
   const nextOptions = next.compilerOptions ?? {};
@@ -505,12 +471,7 @@ async function main(): Promise<void> {
       continue;
     }
 
-    const srcReferences = srcReferencePathsFor(
-      manifest,
-      byName,
-      withTsconfig,
-      excludedNames,
-    );
+    const srcReferences = srcReferencePathsFor(manifest, byName, withTsconfig, excludedNames);
     // The current tsconfig.src.json (if this isn't the first run) carries
     // any package-specific compilerOptions already merged in; fall back to
     // the combined file only the very first time a package joins the
@@ -531,12 +492,7 @@ async function main(): Promise<void> {
     const extraInclude = (currentCombined.include ?? []).filter(
       (entry) => entry !== "src" && entry !== "test",
     );
-    const nextCombined = combinedConfigFor(
-      manifest.dir,
-      srcReferences,
-      hasTestDir,
-      extraInclude,
-    );
+    const nextCombined = combinedConfigFor(manifest.dir, srcReferences, hasTestDir, extraInclude);
     if (!combinedFieldsMatch(currentCombined, nextCombined)) {
       if (checkOnly) {
         drifted.push(`${manifest.dir}/tsconfig.json`);
@@ -571,11 +527,7 @@ async function main(): Promise<void> {
   // but the diagnostic state is no longer split across sibling root
   // arguments.
   const solutionReferences = manifests
-    .filter(
-      (manifest) =>
-        existingCombined.has(manifest.name) &&
-        !excludedNames.has(manifest.name),
-    )
+    .filter((manifest) => existingCombined.has(manifest.name) && !excludedNames.has(manifest.name))
     .map((manifest) => manifest.dir)
     .sort()
     .map((dir) => ({ path: `./${dir}/${SRC_CONFIG_NAME}` }));
@@ -592,10 +544,7 @@ async function main(): Promise<void> {
     if (checkOnly) {
       drifted.push(solutionPath);
     } else {
-      await Bun.write(
-        solutionPath,
-        `${JSON.stringify(nextSolution, null, 2)}\n`,
-      );
+      await Bun.write(solutionPath, `${JSON.stringify(nextSolution, null, 2)}\n`);
       written.push(solutionPath);
     }
   }
diff --git a/scripts/hooks-install.test.ts b/scripts/hooks-install.test.ts
index dc9b978dcc..8b4ef74fd5 100644
--- a/scripts/hooks-install.test.ts
+++ b/scripts/hooks-install.test.ts
@@ -8,15 +8,9 @@ import { join } from "node:path";
 const HOOK = join(import.meta.dir, "git-hooks", "pre-push");
 const INSTALLER = join(import.meta.dir, "hooks-install.ts");
 
-const HEAVY_SUITE_MARKERS = [
-  "test:e2e",
-  "walking-skeleton",
-  "check:structural",
-] as const;
+const HEAVY_SUITE_MARKERS = ["test:e2e", "walking-skeleton", "check:structural"] as const;
 
-function ambientEnv(
-  overrides: Record<string, string> = {},
-): Record<string, string> {
+function ambientEnv(overrides: Record<string, string> = {}): Record<string, string> {
   const {
     CI: _ci,
     GITHUB_ACTIONS: _gha,
@@ -54,11 +48,7 @@ async function spawnCapture(
 
 async function writeBunStub(dir: string, logPath: string): Promise<void> {
   const bunPath = join(dir, "bun");
-  await writeFile(
-    bunPath,
-    `#!/bin/sh\nprintf '%s\\n' "$*" >> "${logPath}"\n`,
-    "utf-8",
-  );
+  await writeFile(bunPath, `#!/bin/sh\nprintf '%s\\n' "$*" >> "${logPath}"\n`, "utf-8");
   await chmod(bunPath, 0o755);
 }
 
diff --git a/scripts/hooks-install.ts b/scripts/hooks-install.ts
index a3af388ad1..3c9092ab38 100644
--- a/scripts/hooks-install.ts
+++ b/scripts/hooks-install.ts
@@ -25,17 +25,13 @@ function main(): void {
   }
 
   const root = toplevel.stdout.toString().trim();
-  const result = Bun.spawnSync(
-    ["git", "config", "--local", "core.hooksPath", HOOKS_PATH],
-    {
-      cwd: root,
-      stdout: "pipe",
-      stderr: "pipe",
-    },
-  );
+  const result = Bun.spawnSync(["git", "config", "--local", "core.hooksPath", HOOKS_PATH], {
+    cwd: root,
+    stdout: "pipe",
+    stderr: "pipe",
+  });
   if (result.exitCode !== 0) {
-    const detail =
-      `${result.stdout.toString()}${result.stderr.toString()}`.trim();
+    const detail = `${result.stdout.toString()}${result.stderr.toString()}`.trim();
     console.error(
       detail.length > 0
         ? `hooks:install failed: ${detail}`
diff --git a/scripts/lib/publishable-packages.ts b/scripts/lib/publishable-packages.ts
index 5f25139b9e..711762292e 100644
--- a/scripts/lib/publishable-packages.ts
+++ b/scripts/lib/publishable-packages.ts
@@ -25,17 +25,13 @@ export interface WorkspacePackage {
   readonly deps: readonly string[];
 }
 
-export async function listWorkspacePackages(
-  root: string,
-): Promise<WorkspacePackage[]> {
+export async function listWorkspacePackages(root: string): Promise<WorkspacePackage[]> {
   const packages: WorkspacePackage[] = [];
   for (const pattern of WORKSPACE_GLOBS) {
     const glob = new Glob(pattern);
     for await (const manifestPath of glob.scan(root)) {
       const dir = path.dirname(manifestPath);
-      const raw = JSON.parse(
-        readFileSync(path.join(root, manifestPath), "utf8"),
-      );
+      const raw = JSON.parse(readFileSync(path.join(root, manifestPath), "utf8"));
       if (typeof raw.name !== "string") continue;
       const deps = {
         ...(raw.dependencies ?? {}),
@@ -60,14 +56,10 @@ export async function listWorkspacePackages(
  * fixpoint so the effect propagates, e.g. A depends on B depends on
  * private C: both A and B are unpublishable.
  */
-export async function listUnpublishablePackageNames(
-  root: string,
-): Promise<string[]> {
+export async function listUnpublishablePackageNames(root: string): Promise<string[]> {
   const packages = await listWorkspacePackages(root);
   const byName = new Map(packages.map((pkg) => [pkg.name, pkg]));
-  const unpublishable = new Set(
-    packages.filter((pkg) => pkg.private).map((pkg) => pkg.name),
-  );
+  const unpublishable = new Set(packages.filter((pkg) => pkg.private).map((pkg) => pkg.name));
   let changed = true;
   while (changed) {
     changed = false;
@@ -86,11 +78,7 @@ export async function listUnpublishablePackageNames(
   return [...unpublishable].sort();
 }
 
-export async function listPublishablePackages(
-  root: string,
-): Promise<WorkspacePackage[]> {
+export async function listPublishablePackages(root: string): Promise<WorkspacePackage[]> {
   const unpublishable = new Set(await listUnpublishablePackageNames(root));
-  return (await listWorkspacePackages(root)).filter(
-    (pkg) => !unpublishable.has(pkg.name),
-  );
+  return (await listWorkspacePackages(root)).filter((pkg) => !unpublishable.has(pkg.name));
 }
diff --git a/scripts/publish-tools.test.ts b/scripts/publish-tools.test.ts
index 5e178d2984..9321bf691a 100644
--- a/scripts/publish-tools.test.ts
+++ b/scripts/publish-tools.test.ts
@@ -11,11 +11,7 @@ type ApiStub = (
   path: string,
 ) => Promise<{ status: number; data: unknown; cookies: string[] }>;
 
-function principalsRow(tenant: {
-  id: string;
-  slug: string;
-  name: string;
-}): unknown {
+function principalsRow(tenant: { id: string; slug: string; name: string }): unknown {
   return {
     principalId: `principal_${tenant.id}`,
     tenantId: tenant.id,
@@ -98,10 +94,9 @@ function args(
         path: new URL(input).pathname,
       });
       return Promise.resolve(
-        new Response(
-          JSON.stringify({ commit: "sha_stub", integrity: "sha512-stub" }),
-          { status: 200 },
-        ),
+        new Response(JSON.stringify({ commit: "sha_stub", integrity: "sha512-stub" }), {
+          status: 200,
+        }),
       );
     },
     pack: () =>
@@ -128,16 +123,11 @@ describe("runPublishTools", () => {
     const result = await runPublishTools(args(api, undefined, puts));
     expect(result.success).toBe(true);
     expect(
-      calls.some(
-        (call) =>
-          call.method === "POST" && call.path === "/api/auth/sign-in/email",
-      ),
+      calls.some((call) => call.method === "POST" && call.path === "/api/auth/sign-in/email"),
     ).toBe(true);
     expect(
       calls.some(
-        (call) =>
-          call.method === "POST" &&
-          call.path === "/api/tenants/tenant_genesis/assets",
+        (call) => call.method === "POST" && call.path === "/api/tenants/tenant_genesis/assets",
       ),
     ).toBe(true);
     expect(
@@ -159,9 +149,7 @@ describe("runPublishTools", () => {
       }),
     ]);
     await runPublishTools(args(api, "genesis-root"));
-    expect(calls.some((call) => call.path.includes("tenant_genesis"))).toBe(
-      true,
-    );
+    expect(calls.some((call) => call.path.includes("tenant_genesis"))).toBe(true);
   });
 
   test("fails when --tenant matches no membership", async () => {
@@ -172,9 +160,7 @@ describe("runPublishTools", () => {
         name: "Genesis Root",
       }),
     ]);
-    await expect(runPublishTools(args(api, "nope"))).rejects.toThrow(
-      /no tenant matching "nope"/,
-    );
+    await expect(runPublishTools(args(api, "nope"))).rejects.toThrow(/no tenant matching "nope"/);
   });
 
   test("fails when the admin belongs to several tenants and no --tenant is given", async () => {
@@ -186,8 +172,6 @@ describe("runPublishTools", () => {
       }),
       principalsRow({ id: "tenant_other", slug: "other", name: "Other" }),
     ]);
-    await expect(runPublishTools(args(api))).rejects.toThrow(
-      /--tenant is required/,
-    );
+    await expect(runPublishTools(args(api))).rejects.toThrow(/--tenant is required/);
   });
 });
diff --git a/scripts/publish-tools.ts b/scripts/publish-tools.ts
index 51137a91d6..831daff08b 100644
--- a/scripts/publish-tools.ts
+++ b/scripts/publish-tools.ts
@@ -46,11 +46,7 @@ async function resolveTenantId(
   tenant: string | undefined,
 ): Promise<string> {
   const response = await api("GET", "/api/me/principals", undefined, cookies);
-  const summary = parseAs(
-    paginatedSchema(PrincipalSummary),
-    response.data,
-    "principals response",
-  );
+  const summary = parseAs(paginatedSchema(PrincipalSummary), response.data, "principals response");
   if (tenant !== undefined) {
     const named = summary.data.find(
       (principal) =>
@@ -97,13 +93,9 @@ export async function runPublishTools(
     hubUrl: args.hubUrl,
     tenantId,
     log,
-    ...(args.checkFreshness !== undefined
-      ? { checkFreshness: args.checkFreshness }
-      : {}),
+    ...(args.checkFreshness !== undefined ? { checkFreshness: args.checkFreshness } : {}),
     ...(args.fetchImpl !== undefined ? { fetchImpl: args.fetchImpl } : {}),
-    ...(args.packageDirs !== undefined
-      ? { packageDirs: args.packageDirs }
-      : {}),
+    ...(args.packageDirs !== undefined ? { packageDirs: args.packageDirs } : {}),
     ...(args.pack !== undefined ? { pack: args.pack } : {}),
   });
 }
@@ -115,12 +107,7 @@ const Args = type({
 async function main(): Promise<void> {
   const email = process.env["HUB_ADMIN_EMAIL"];
   const password = process.env["HUB_ADMIN_PASSWORD"];
-  if (
-    email === undefined ||
-    email === "" ||
-    password === undefined ||
-    password === ""
-  ) {
+  if (email === undefined || email === "" || password === undefined || password === "") {
     console.error(
       "publish-tools: set HUB_ADMIN_EMAIL and HUB_ADMIN_PASSWORD to an existing admin account, and start the stack with `bun run dev` first.",
     );
@@ -128,8 +115,7 @@ async function main(): Promise<void> {
   }
   const raw = process.argv.slice(2);
   const tenantIndex = raw.indexOf("--tenant");
-  const tenant =
-    tenantIndex >= 0 ? (raw[tenantIndex + 1] ?? undefined) : undefined;
+  const tenant = tenantIndex >= 0 ? (raw[tenantIndex + 1] ?? undefined) : undefined;
   const parsed = Args({ tenant });
   if (parsed instanceof type.errors) {
     console.error(`publish-tools: ${parsed.summary}`);
@@ -143,9 +129,7 @@ async function main(): Promise<void> {
     ...(parsed.tenant !== undefined ? { tenant: parsed.tenant } : {}),
     log: (line) => console.log(`[publish-tools] ${line}`),
   });
-  console.log(
-    `[publish-tools] done: ${result.summaries.length} tarball(s) uploaded`,
-  );
+  console.log(`[publish-tools] done: ${result.summaries.length} tarball(s) uploaded`);
 }
 
 if (import.meta.main) {
diff --git a/scripts/repro/connect-github-smoke.ts b/scripts/repro/connect-github-smoke.ts
index 5d75bc98d0..28ffdf2a2d 100644
--- a/scripts/repro/connect-github-smoke.ts
+++ b/scripts/repro/connect-github-smoke.ts
@@ -53,10 +53,11 @@ async function main() {
   };
 
   console.log("== connect (native connections route) ==");
-  const connectRes = await fetch(
-    `${hubUrl}/api/tenants/${tenantId}/connections/github/complete`,
-    { method: "POST", headers, body: JSON.stringify({ apiKey: token }) },
-  );
+  const connectRes = await fetch(`${hubUrl}/api/tenants/${tenantId}/connections/github/complete`, {
+    method: "POST",
+    headers,
+    body: JSON.stringify({ apiKey: token }),
+  });
   console.log(connectRes.status, await connectRes.text());
   if (!connectRes.ok) {
     throw new Error("connect failed — see status above");
@@ -64,9 +65,7 @@ async function main() {
   // Hub-zero T3 (CL-8114) stops here: `github/state` and
   // `github/start-reviewing` no longer exist, so there is nothing further
   // to smoke until the connections follow-up lands the native rebind.
-  console.log(
-    "connected — state/start-reviewing walkthrough deleted (CL-8114)",
-  );
+  console.log("connected — state/start-reviewing walkthrough deleted (CL-8114)");
 }
 
 main().catch((err: unknown) => {
diff --git a/scripts/reset.test.ts b/scripts/reset.test.ts
index e86c7fe371..b1ed4160f4 100644
--- a/scripts/reset.test.ts
+++ b/scripts/reset.test.ts
@@ -34,9 +34,9 @@ describe("requireLocalDatabase", () => {
   }
 
   test("refuses a remote host", () => {
-    expect(() =>
-      requireLocalDatabase("postgres://prod.example.com:5432/workbench"),
-    ).toThrow(/not local/);
+    expect(() => requireLocalDatabase("postgres://prod.example.com:5432/workbench")).toThrow(
+      /not local/,
+    );
   });
 });
 
@@ -92,9 +92,7 @@ describe("resetLocalState", () => {
     expect(schemaCalls).toEqual([VALID_ENV.DATABASE_URL]);
     expect(removed).toEqual([path.resolve("/repo/apps/hub/.data/hub")]);
     expect(report.database).toBe("workbench");
-    expect(report.removedDirs).toEqual([
-      path.resolve("/repo/apps/hub/.data/hub"),
-    ]);
+    expect(report.removedDirs).toEqual([path.resolve("/repo/apps/hub/.data/hub")]);
   });
 
   test("reports no removed directories when it is not present", async () => {
diff --git a/scripts/reset.ts b/scripts/reset.ts
index 315e7ec39c..149c9c460d 100644
--- a/scripts/reset.ts
+++ b/scripts/reset.ts
@@ -51,10 +51,7 @@ export function requireLocalDatabase(databaseUrl: string): void {
  * state in: the hub's `HUB_DATA_DIR` (resolved the same way the hub
  * itself resolves it — against `apps/hub`'s working directory).
  */
-export function resolveLocalStateDirs(
-  root: string,
-  hubDataDir: string,
-): { hubDataDir: string } {
+export function resolveLocalStateDirs(root: string, hubDataDir: string): { hubDataDir: string } {
   return {
     hubDataDir: path.resolve(path.join(root, "apps", "hub"), hubDataDir),
   };
diff --git a/scripts/run-all.test.ts b/scripts/run-all.test.ts
index c9b7abdade..d2fe7fa6d3 100644
--- a/scripts/run-all.test.ts
+++ b/scripts/run-all.test.ts
@@ -7,7 +7,7 @@ import { mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { basename, join } from "node:path";
 
-import { parseShardArg, resolveConcurrency, selectShard } from "./run-all.ts";
+import { resolveConcurrency } from "./run-all.ts";
 
 const RUNNER = join(import.meta.dir, "run-all.ts");
 
@@ -119,10 +119,7 @@ describe("run-all", () => {
         probe: "bun run probe.ts",
         [TEST_SCRIPT]: "bun run probe.ts",
       });
-      await writeFile(
-        join(workspace, "packages", name, "probe.ts"),
-        PROBE_SOURCE,
-      );
+      await writeFile(join(workspace, "packages", name, "probe.ts"), PROBE_SOURCE);
     }
     await writePackage(workspace, WITHOUT_PROBE, { other: "true" });
 
@@ -176,10 +173,7 @@ describe("run-all", () => {
   });
 
   test("runs the test script concurrently like any other script", async () => {
-    const result = await runProbe(
-      { WORKBENCH_CHECK_CONCURRENCY: "4" },
-      TEST_SCRIPT,
-    );
+    const result = await runProbe({ WORKBENCH_CHECK_CONCURRENCY: "4" }, TEST_SCRIPT);
 
     expect(peakOverlap(result.log)).toBeGreaterThan(1);
     for (const name of WITH_PROBE) {
@@ -188,10 +182,7 @@ describe("run-all", () => {
   });
 
   test("honours an explicit concurrency for the test script", async () => {
-    const result = await runProbe(
-      { WORKBENCH_CHECK_CONCURRENCY: "3" },
-      TEST_SCRIPT,
-    );
+    const result = await runProbe({ WORKBENCH_CHECK_CONCURRENCY: "3" }, TEST_SCRIPT);
 
     expect(peakOverlap(result.log)).toBeGreaterThan(1);
   });
@@ -205,9 +196,7 @@ describe("run-all", () => {
 
   test("uses every core in GitHub Actions and leaves two free locally", () => {
     expect(resolveConcurrency("typecheck", {}, 8)).toBe(6);
-    expect(resolveConcurrency("typecheck", { GITHUB_ACTIONS: "true" }, 8)).toBe(
-      8,
-    );
+    expect(resolveConcurrency("typecheck", { GITHUB_ACTIONS: "true" }, 8)).toBe(8);
     expect(
       resolveConcurrency(
         "typecheck",
@@ -251,10 +240,7 @@ describe("run-all", () => {
       stdout: "pipe",
       stderr: "pipe",
     });
-    const [stdout, exitCode] = await Promise.all([
-      new Response(child.stdout).text(),
-      child.exited,
-    ]);
+    const [stdout, exitCode] = await Promise.all([new Response(child.stdout).text(), child.exited]);
 
     expect(exitCode).toBe(0);
     expect(stdout).toContain("no workspace packages define it");
@@ -263,45 +249,4 @@ describe("run-all", () => {
   test("fixture workspace holds only the packages the tests declare", () => {
     expect(basename(workspace).startsWith("workbench-run-all-")).toBe(true);
   });
-
-  test("splits a package run across shards with --shard i/n", async () => {
-    const results = await Promise.all(
-      [1, 2, 3].map((i) => runProbe({}, "probe", ["--shard", `${i}/3`])),
-    );
-
-    const ranIn = (stdout: string) =>
-      WITH_PROBE.filter((name) => stdout.includes(`probe ran in ${name}`));
-    const allRun = results.flatMap((r) => ranIn(r.stdout));
-
-    // Every package the fixture declares runs exactly once across the
-    // three shards combined — none dropped, none run twice.
-    expect(allRun.sort()).toEqual([...WITH_PROBE].sort());
-    for (const result of results) expect(result.exitCode).toBe(0);
-  });
-
-  test("rejects a malformed --shard argument", async () => {
-    const result = await runProbe({}, "probe", ["--shard", "bogus"]);
-
-    expect(result.exitCode).not.toBe(0);
-    expect(result.stderr).toContain("--shard");
-  });
-
-  test("selectShard partitions a stably-ordered job list with no overlap", () => {
-    const jobs = Array.from({ length: 10 }, (_, i) => ({
-      name: `pkg-${i}`,
-      dir: `packages/pkg-${i}`,
-    }));
-    const shards = [1, 2, 3].map((i) =>
-      selectShard(jobs, parseShardArg(`${i}/3`)),
-    );
-
-    const combined = shards.flatMap((s) => s.map((j) => j.name)).sort();
-    expect(combined).toEqual(jobs.map((j) => j.name).sort());
-  });
-
-  test("parseShardArg rejects an out-of-range or malformed shard", () => {
-    expect(() => parseShardArg("bogus")).toThrow();
-    expect(() => parseShardArg("0/3")).toThrow();
-    expect(() => parseShardArg("4/3")).toThrow();
-  });
 });
diff --git a/scripts/run-all.ts b/scripts/run-all.ts
index aca6fff9c8..05b4c97de5 100644
--- a/scripts/run-all.ts
+++ b/scripts/run-all.ts
@@ -31,9 +31,7 @@ export function resolveConcurrency(
   }
   const parsed = Number.parseInt(raw, 10);
   if (!Number.isInteger(parsed) || parsed < 1) {
-    throw new Error(
-      `${CONCURRENCY_ENV} must be a positive integer, got "${raw}"`,
-    );
+    throw new Error(`${CONCURRENCY_ENV} must be a positive integer, got "${raw}"`);
   }
   return parsed;
 }
@@ -70,30 +68,6 @@ async function discover(script: string): Promise<Job[]> {
   return jobs.toSorted((a, b) => a.name.localeCompare(b.name));
 }
 
-export type ShardSpec = { readonly index: number; readonly count: number };
-
-/** Parses a `--shard i/n` argument (1-based index, e.g. "1/3" is the
- * first of three shards). Throws with the raw value on anything else. */
-export function parseShardArg(raw: string): ShardSpec {
-  const match = /^(\d+)\/(\d+)$/.exec(raw);
-  if (match === null) {
-    throw new Error(`--shard must look like "i/n", got "${raw}"`);
-  }
-  const index = Number.parseInt(match[1] ?? "", 10);
-  const count = Number.parseInt(match[2] ?? "", 10);
-  if (count < 1 || index < 1 || index > count) {
-    throw new Error(`--shard "i/n" needs 1 <= i <= n, got "${raw}"`);
-  }
-  return { index: index - 1, count };
-}
-
-/** Round-robins the (stably ordered) job list across shards rather than
- * slicing it into contiguous runs, so a cluster of heavy packages next
- * to each other alphabetically doesn't all land in the same shard. */
-export function selectShard(jobs: readonly Job[], shard: ShardSpec): Job[] {
-  return jobs.filter((_job, i) => i % shard.count === shard.index);
-}
-
 // Output is captured and flushed as one block per package. Streaming it would
 // interleave the lines of every concurrent job, leaving a failure with no
 // reliable way to tell which package produced it.
@@ -112,38 +86,18 @@ async function runJob(job: Job, script: string): Promise<number> {
 
   const body = `${stdout}${stderr}`;
   const trailingNewline = body.endsWith("\n") || body.length === 0 ? "" : "\n";
-  process.stdout.write(
-    `--- ${job.name}: ${script} ---\n${body}${trailingNewline}`,
-  );
+  process.stdout.write(`--- ${job.name}: ${script} ---\n${body}${trailingNewline}`);
   return code;
 }
 
 if (import.meta.main) {
   const scriptArg = process.argv[2];
   if (!scriptArg) {
-    console.error(
-      "usage: bun run scripts/run-all.ts <script-name> [--shard i/n]",
-    );
+    console.error("usage: bun run scripts/run-all.ts <script-name>");
     process.exit(1);
   }
   const script: string = scriptArg;
 
-  const shardFlagIndex = process.argv.indexOf("--shard");
-  let shard: ShardSpec | undefined;
-  if (shardFlagIndex >= 0) {
-    const raw = process.argv[shardFlagIndex + 1];
-    if (raw === undefined) {
-      console.error('--shard requires an "i/n" argument');
-      process.exit(1);
-    }
-    try {
-      shard = parseShardArg(raw);
-    } catch (cause) {
-      console.error(cause instanceof Error ? cause.message : String(cause));
-      process.exit(1);
-    }
-  }
-
   let concurrency: number;
   try {
     concurrency = resolveConcurrency(script);
@@ -152,8 +106,7 @@ if (import.meta.main) {
     process.exit(1);
   }
 
-  const allJobs = await discover(script);
-  const jobs = shard === undefined ? allJobs : selectShard(allJobs, shard);
+  const jobs = await discover(script);
   if (jobs.length === 0) {
     console.log(`${script}: no workspace packages define it yet`);
     process.exit(0);
@@ -179,14 +132,10 @@ if (import.meta.main) {
     }
   }
 
-  await Promise.all(
-    Array.from({ length: Math.min(concurrency, jobs.length) }, () => worker()),
-  );
+  await Promise.all(Array.from({ length: Math.min(concurrency, jobs.length) }, () => worker()));
 
   if (failures.length > 0) {
-    console.error(
-      `${script} failed in ${failures.length} package(s): ${failures.join(", ")}`,
-    );
+    console.error(`${script} failed in ${failures.length} package(s): ${failures.join(", ")}`);
     process.exit(1);
   }
 }
diff --git a/scripts/setup-memory.test.ts b/scripts/setup-memory.test.ts
index d91de29a5d..2123560ea1 100644
--- a/scripts/setup-memory.test.ts
+++ b/scripts/setup-memory.test.ts
@@ -79,9 +79,7 @@ describe("localDevMemoryEmbedEnv", () => {
   });
 
   test("does not inject when native Ollama is absent", () => {
-    expect(
-      localDevMemoryEmbedEnv({}, { hasNativeOllama: false }),
-    ).toBeUndefined();
+    expect(localDevMemoryEmbedEnv({}, { hasNativeOllama: false })).toBeUndefined();
   });
 });
 
@@ -123,8 +121,7 @@ describe("embedEnvKeysForDotenv", () => {
 
 describe("applyEnvKeysToDotenvContents", () => {
   test("appends missing keys and ignores commented-out lines", () => {
-    const existing =
-      "# EMBED_BASE_URL=http://example\nDATABASE_URL=postgres://x\n";
+    const existing = "# EMBED_BASE_URL=http://example\nDATABASE_URL=postgres://x\n";
     const { next, added } = applyEnvKeysToDotenvContents(existing, {
       EMBED_BASE_URL: "http://localhost:11434",
       EMBED_MODEL: "nomic-embed-text",
diff --git a/scripts/setup-memory.ts b/scripts/setup-memory.ts
index 02f90f0105..e68ce91b07 100644
--- a/scripts/setup-memory.ts
+++ b/scripts/setup-memory.ts
@@ -152,10 +152,7 @@ export function dotenvHasActiveKey(text: string, key: string): boolean {
 }
 
 /** Active `KEY=value` in dotenv text; blank and whitespace-only count as unset. */
-export function dotenvNonemptyValue(
-  text: string,
-  key: string,
-): string | undefined {
+export function dotenvNonemptyValue(text: string, key: string): string | undefined {
   const escaped = key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
   const match = new RegExp(`^${escaped}=(.*)$`, "m").exec(text);
   if (match === null) return undefined;
@@ -238,27 +235,17 @@ function printPlan(title: string, plan: SetupPlan): void {
 async function main(): Promise<void> {
   const probe = await probeCapabilities();
   console.log("Memory plane setup recommendation for this machine:");
-  console.log(
-    `  native Ollama: ${probe.hasNativeOllama ? "found" : "not found"}`,
-  );
+  console.log(`  native Ollama: ${probe.hasNativeOllama ? "found" : "not found"}`);
   console.log(`  Docker: ${probe.hasDocker ? "available" : "not available"}`);
 
   const embedPlan = planEmbedding(probe);
-  printPlan(
-    "Embedding (required for memory search to find anything)",
-    embedPlan,
-  );
-  printPlan(
-    "Reranking (optional — improves result ordering)",
-    planRerank(probe),
-  );
+  printPlan("Embedding (required for memory search to find anything)", embedPlan);
+  printPlan("Reranking (optional — improves result ordering)", planRerank(probe));
 
   const envPath = join(resolve(import.meta.dir, ".."), ".env");
   if (Object.keys(embedPlan.env).length > 0) {
     if (!existsSync(envPath)) {
-      console.log(
-        "\nNo .env yet — cp .env.example .env, then re-run to write the embedding keys.",
-      );
+      console.log("\nNo .env yet — cp .env.example .env, then re-run to write the embedding keys.");
     } else {
       const current = readFileSync(envPath, "utf8");
       const { next, added } = applyEnvKeysToDotenvContents(
diff --git a/scripts/typecheck.ts b/scripts/typecheck.ts
index 9a24e3402b..3f55ada5db 100644
--- a/scripts/typecheck.ts
+++ b/scripts/typecheck.ts
@@ -68,9 +68,7 @@ async function runInParallel(commands: readonly string[][]): Promise<boolean> {
       if (code !== 0) ok = false;
     }
   }
-  await Promise.all(
-    Array.from({ length: Math.min(concurrency, commands.length) }, worker),
-  );
+  await Promise.all(Array.from({ length: Math.min(concurrency, commands.length) }, worker));
   return ok;
 }
 
@@ -78,13 +76,7 @@ const buildCode = await run(["bunx", "tsgo", "--build", "tsconfig.build.json"]);
 if (buildCode !== 0) process.exit(buildCode);
 
 const projectPaths = await discoverProjectPaths();
-const projectCommands = projectPaths.map((path) => [
-  "bunx",
-  "tsgo",
-  "-p",
-  path,
-  "--noEmit",
-]);
+const projectCommands = projectPaths.map((path) => ["bunx", "tsgo", "-p", path, "--noEmit"]);
 
 const projectsOk = await runInParallel(projectCommands);
 
@@ -93,11 +85,6 @@ const [rootCode, isolationCode, hubDataDirCode] = await Promise.all([
   run(["bunx", "tsgo", "-p", "test/isolation/tsconfig.json", "--noEmit"]),
   run(["bunx", "tsgo", "-p", "test/tsconfig.json", "--noEmit"]),
 ]);
-if (
-  !projectsOk ||
-  rootCode !== 0 ||
-  isolationCode !== 0 ||
-  hubDataDirCode !== 0
-) {
+if (!projectsOk || rootCode !== 0 || isolationCode !== 0 || hubDataDirCode !== 0) {
   process.exit(1);
 }
diff --git a/test/disposable-hub-data-dir.test.ts b/test/disposable-hub-data-dir.test.ts
index 14a70dab6a..3bad82ebca 100644
--- a/test/disposable-hub-data-dir.test.ts
+++ b/test/disposable-hub-data-dir.test.ts
@@ -14,8 +14,7 @@ test("points HUB_DATA_DIR at a fresh directory under the OS temp dir", () => {
     restore();
   }
   expect(existsSync(hubDataDir)).toBe(false);
-  if (previous === undefined)
-    expect(process.env["HUB_DATA_DIR"]).toBeUndefined();
+  if (previous === undefined) expect(process.env["HUB_DATA_DIR"]).toBeUndefined();
   else expect(process.env["HUB_DATA_DIR"]).toBe(previous);
 });
 
diff --git a/test/isolation/isolation.test.ts b/test/isolation/isolation.test.ts
index e15595af9a..577ea2fb4b 100644
--- a/test/isolation/isolation.test.ts
+++ b/test/isolation/isolation.test.ts
@@ -23,10 +23,7 @@ import {
 } from "./setup.ts";
 import { tenantSurfaces, type TenantSurface } from "./surfaces.ts";
 
-function surfaceInit(
-  surface: TenantSurface,
-  cookie?: string,
-): RequestInit | undefined {
+function surfaceInit(surface: TenantSurface, cookie?: string): RequestInit | undefined {
   const headers: Record<string, string> = {};
   if (cookie) headers["cookie"] = cookie;
   if (surface.contentType) headers["content-type"] = surface.contentType;
@@ -84,28 +81,10 @@ if (!databaseUrl) {
   // Unique suffix so the suite can rerun against a database that
   // already holds rows from a previous run.
   const nonce = Date.now().toString(36);
-  const cookieA = await signUpUser(
-    app,
-    `owner-a-${nonce}@isolation.test`,
-    "Owner A",
-  );
-  const cookieB = await signUpUser(
-    app,
-    `owner-b-${nonce}@isolation.test`,
-    "Owner B",
-  );
-  const tenantA: ProvisionedTenant = await provisionTenant(
-    app,
-    cookieA,
-    "a",
-    nonce,
-  );
-  const tenantB: ProvisionedTenant = await provisionTenant(
-    app,
-    cookieB,
-    "b",
-    nonce,
-  );
+  const cookieA = await signUpUser(app, `owner-a-${nonce}@isolation.test`, "Owner A");
+  const cookieB = await signUpUser(app, `owner-b-${nonce}@isolation.test`, "Owner B");
+  const tenantA: ProvisionedTenant = await provisionTenant(app, cookieA, "a", nonce);
+  const tenantB: ProvisionedTenant = await provisionTenant(app, cookieB, "b", nonce);
 
   const pairs: [string, ProvisionedTenant, ProvisionedTenant][] = [
     ["A against B", tenantA, tenantB],
@@ -127,16 +106,13 @@ if (!databaseUrl) {
 
     test("each tenant's reads return its own rows", async () => {
       for (const [, own, other] of pairs) {
-        const response = await app.request(
-          `/api/tenants/${own.tenantId}/credentials`,
-          { headers: { cookie: own.cookie } },
-        );
+        const response = await app.request(`/api/tenants/${own.tenantId}/credentials`, {
+          headers: { cookie: own.cookie },
+        });
         expect(response.status).toBe(200);
         const text = await response.text();
         expect(text).toContain(own.credentialId);
-        const ids = listItems(JSON.parse(text)).map(
-          (item) => (item as { id: string }).id,
-        );
+        const ids = listItems(JSON.parse(text)).map((item) => (item as { id: string }).id);
         expect(ids).not.toContain(other.credentialId);
         for (const marker of other.markers) {
           expect(text).not.toContain(marker);
@@ -160,27 +136,17 @@ if (!databaseUrl) {
   });
 
   describe("foreign resource ids under your own tenant path resolve as not found", () => {
-    const detailReads: [
-      string,
-      (own: string, foreign: ProvisionedTenant) => string,
-    ][] = [
-      [
-        "credential",
-        (own, f) => `/api/tenants/${own}/credentials/${f.credentialId}`,
-      ],
-      [
-        "principal",
-        (own, f) => `/api/tenants/${own}/principals/${f.principalId}`,
-      ],
+    const detailReads: [string, (own: string, foreign: ProvisionedTenant) => string][] = [
+      ["credential", (own, f) => `/api/tenants/${own}/credentials/${f.credentialId}`],
+      ["principal", (own, f) => `/api/tenants/${own}/principals/${f.principalId}`],
       ["grant", (own, f) => `/api/tenants/${own}/grants/${f.grantId}`],
     ];
     for (const [name, buildPath] of detailReads) {
       test(`${name} detail read never crosses the boundary`, async () => {
         for (const [, actor, victim] of pairs) {
-          const response = await app.request(
-            buildPath(actor.tenantId, victim),
-            { headers: { cookie: actor.cookie } },
-          );
+          const response = await app.request(buildPath(actor.tenantId, victim), {
+            headers: { cookie: actor.cookie },
+          });
           await expectRefusal(response, 404, "not_found", victim.markers);
         }
       });
@@ -190,19 +156,15 @@ if (!databaseUrl) {
   describe("unauthenticated and unknown-tenant requests", () => {
     for (const surface of tenantSurfaces) {
       test(`${surface.name}: anonymous request is unauthorized`, async () => {
-        const response = await app.request(
-          surface.path(tenantA.tenantId),
-          surfaceInit(surface),
-        );
+        const response = await app.request(surface.path(tenantA.tenantId), surfaceInit(surface));
         await expectRefusal(response, 401, "unauthorized", tenantA.markers);
       });
     }
 
     test("a tenant id that does not exist is not found", async () => {
-      const response = await app.request(
-        "/api/tenants/tnt_does_not_exist/principals",
-        { headers: { cookie: tenantA.cookie } },
-      );
+      const response = await app.request("/api/tenants/tnt_does_not_exist/principals", {
+        headers: { cookie: tenantA.cookie },
+      });
       await expectRefusal(response, 404, "not_found", tenantB.markers);
     });
   });
diff --git a/test/isolation/setup.test.ts b/test/isolation/setup.test.ts
index 2c6ddd8946..622ff9db7b 100644
--- a/test/isolation/setup.test.ts
+++ b/test/isolation/setup.test.ts
@@ -44,15 +44,12 @@ describe("resolveDatabaseUrl", () => {
     unset("ISOLATION_DATABASE_URL");
     process.env["CI"] = "true";
     unset("GITHUB_JOB");
-    expect(() => resolveDatabaseUrl()).toThrow(
-      /docker compose -f compose\.test\.yml up -d/,
-    );
+    expect(() => resolveDatabaseUrl()).toThrow(/docker compose -f compose\.test\.yml up -d/);
   });
 
   test("ISOLATION_DATABASE_URL wins over DATABASE_URL", () => {
     process.env["DATABASE_URL"] = "postgres://localhost:5432/other";
-    process.env["ISOLATION_DATABASE_URL"] =
-      "postgres://localhost:5432/isolation";
+    process.env["ISOLATION_DATABASE_URL"] = "postgres://localhost:5432/isolation";
     unset("CI");
     expect(resolveDatabaseUrl()).toBe("postgres://localhost:5432/isolation");
   });
diff --git a/test/isolation/setup.ts b/test/isolation/setup.ts
index ebe8dbe450..ffd9ba5d45 100644
--- a/test/isolation/setup.ts
+++ b/test/isolation/setup.ts
@@ -8,11 +8,7 @@ import { mkdtempSync, rmSync } from "node:fs";
 import { tmpdir } from "node:os";
 import path from "node:path";
 
-import {
-  freePort,
-  startHub,
-  type HubHandle,
-} from "../../scripts/e2e/harness.ts";
+import { freePort, startHub, type HubHandle } from "../../scripts/e2e/harness.ts";
 import { assertDatabaseConfigured } from "../../scripts/e2e/db-gate.ts";
 
 /**
@@ -52,9 +48,7 @@ export const ISOLATION_SIGNUP_RATE_LIMIT_WINDOW_SECONDS = 60;
 export function resolveDatabaseUrl(): string | undefined {
   const isolationUrl = process.env["ISOLATION_DATABASE_URL"];
   const url =
-    isolationUrl !== undefined && isolationUrl !== ""
-      ? isolationUrl
-      : process.env["DATABASE_URL"];
+    isolationUrl !== undefined && isolationUrl !== "" ? isolationUrl : process.env["DATABASE_URL"];
   if (url !== undefined && url !== "") return url;
   assertDatabaseConfigured(undefined, "isolation suite");
   return undefined;
@@ -97,9 +91,7 @@ export async function prepareDatabase(databaseUrl: string): Promise<void> {
  * `AppLike.request` wraps `fetch` against the hub's real port, matching
  * how a client actually reaches it.
  */
-export async function bootIsolationHub(
-  databaseUrl: string,
-): Promise<IsolationHub> {
+export async function bootIsolationHub(databaseUrl: string): Promise<IsolationHub> {
   const root = mkdtempSync(path.join(tmpdir(), "isolation-suite-"));
   const hubDataDir = path.join(root, "hub-data");
 
@@ -113,9 +105,7 @@ export async function bootIsolationHub(
       // surface; stock Interchange composition leaves signup ungated
       // (rate-limited only), so this boot needs no signup env at all.
       SIGNUP_RATE_LIMIT_MAX: String(ISOLATION_SIGNUP_RATE_LIMIT_MAX),
-      SIGNUP_RATE_LIMIT_WINDOW_SECONDS: String(
-        ISOLATION_SIGNUP_RATE_LIMIT_WINDOW_SECONDS,
-      ),
+      SIGNUP_RATE_LIMIT_WINDOW_SECONDS: String(ISOLATION_SIGNUP_RATE_LIMIT_WINDOW_SECONDS),
     },
   });
 
@@ -145,10 +135,7 @@ export async function bootIsolationHub(
  * tenant this suite mints — it is not the database under test's
  * concern to stay clean.
  */
-async function waitForSidecarDialIn(
-  app: AppLike,
-  hub: HubHandle,
-): Promise<void> {
+async function waitForSidecarDialIn(app: AppLike, hub: HubHandle): Promise<void> {
   const cookie = await signUpUser(
     app,
     `sidecar-probe-${crypto.randomUUID()}@isolation.test`,
@@ -175,14 +162,11 @@ async function waitForSidecarDialIn(
     if (hub.exited()) {
       throw new Error(`hub exited before dialing in; output:\n${hub.output()}`);
     }
-    const workbenchResponse = await app.request(
-      `/api/tenants/${tenant.id}/chat/workbenches`,
-      {
-        method: "POST",
-        headers: { "content-type": "application/json", cookie },
-        body: JSON.stringify({ kind: "workbench", name: "sidecar-probe" }),
-      },
-    );
+    const workbenchResponse = await app.request(`/api/tenants/${tenant.id}/chat/workbenches`, {
+      method: "POST",
+      headers: { "content-type": "application/json", cookie },
+      body: JSON.stringify({ kind: "workbench", name: "sidecar-probe" }),
+    });
     if (workbenchResponse.status === 201) return;
     if (Date.now() > deadline) {
       throw new Error(
@@ -202,9 +186,7 @@ async function requireJson(
 ): Promise<Record<string, unknown>> {
   const text = await response.text();
   if (response.status !== expected) {
-    throw new Error(
-      `${what}: expected ${expected}, got ${response.status}: ${text}`,
-    );
+    throw new Error(`${what}: expected ${expected}, got ${response.status}: ${text}`);
   }
   return JSON.parse(text) as Record<string, unknown>;
 }
@@ -213,11 +195,7 @@ async function requireJson(
  * Signs up a fresh user through the platform's own auth surface and
  * returns the session cookie a browser would hold.
  */
-export async function signUpUser(
-  app: AppLike,
-  email: string,
-  name: string,
-): Promise<string> {
+export async function signUpUser(app: AppLike, email: string, name: string): Promise<string> {
   const response = await app.request("/api/auth/sign-up/email", {
     method: "POST",
     headers: { "content-type": "application/json" },
@@ -290,9 +268,7 @@ export async function provisionTenant(
   const principals = listItems(principalsJson);
   const principal = principals[0] as { id: string } | undefined;
   if (principals.length !== 1 || !principal) {
-    throw new Error(
-      `expected exactly the owner principal in ${tag}, got ${principals.length}`,
-    );
+    throw new Error(`expected exactly the owner principal in ${tag}, got ${principals.length}`);
   }
 
   const grantsJson = await requireJson(
diff --git a/workflows/assistant/package.json b/workflows/assistant/package.json
index 7e61d8f7fa..c69952bc76 100644
--- a/workflows/assistant/package.json
+++ b/workflows/assistant/package.json
@@ -1,32 +1,22 @@
 {
   "name": "@corbits/assistant-workflow",
-  "description": "Mail-triggered conversational workflow with a general-purpose assistant agent",
   "version": "0.0.2",
+  "description": "Mail-triggered conversational workflow with a general-purpose assistant agent",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "corbits": {
-    "workflow": {
-      "assetName": "assistant",
-      "displayName": "Myra",
-      "automatable": false
-    }
-  },
-  "interchange": {
-    "workflow": "./src/index.ts"
-  },
-  "exports": {
-    ".": "./src/index.ts",
-    "./prompt": "./src/prompt.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "workflows/assistant"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "workflows/assistant"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts",
+    "./prompt": "./src/prompt.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -36,14 +26,9 @@
     "test": "bun test"
   },
   "dependencies": {
-    "@corbits/catalog-tools": "0.1.0",
+    "@corbits/catalog-tools": "0.1.1",
     "@corbits/memory": "github:corbitsdev/corbits-memory#9e6f213fa2c002b531d3f6af1aa0abd737b8afe3"
   },
-  "peerDependencies": {
-    "@intx/agent": "0.3.0",
-    "@intx/types": "0.3.0",
-    "@intx/workflow": "0.3.0"
-  },
   "devDependencies": {
     "@corbits/agent-directory-tools": "workspace:*",
     "@corbits/connections": "workspace:*",
@@ -51,5 +36,20 @@
     "@corbits/interaction-tools": "workspace:*",
     "@types/bun": "catalog:",
     "typescript": "catalog:"
+  },
+  "peerDependencies": {
+    "@intx/agent": "0.3.0",
+    "@intx/types": "0.3.0",
+    "@intx/workflow": "0.3.0"
+  },
+  "corbits": {
+    "workflow": {
+      "assetName": "assistant",
+      "displayName": "Myra",
+      "automatable": false
+    }
+  },
+  "interchange": {
+    "workflow": "./src/index.ts"
   }
 }
diff --git a/workflows/assistant/src/index.ts b/workflows/assistant/src/index.ts
index 0a8a907477..acf4043675 100644
--- a/workflows/assistant/src/index.ts
+++ b/workflows/assistant/src/index.ts
@@ -68,18 +68,12 @@ export interface AssistantWorkflowInput {
  * run forever. Tools are never inlined on the definition: they arrive
  * as packages on the deploy, keeping the definition pure data.
  */
-export function buildAssistantWorkflow(
-  input: AssistantWorkflowInput,
-): WorkflowDefinition {
+export function buildAssistantWorkflow(input: AssistantWorkflowInput): WorkflowDefinition {
   if (input.triggerAddress === "") {
-    throw new Error(
-      "buildAssistantWorkflow requires a non-empty triggerAddress",
-    );
+    throw new Error("buildAssistantWorkflow requires a non-empty triggerAddress");
   }
   if (!Number.isInteger(input.turnTimeoutMs) || input.turnTimeoutMs <= 0) {
-    throw new Error(
-      "buildAssistantWorkflow requires turnTimeoutMs to be a positive integer",
-    );
+    throw new Error("buildAssistantWorkflow requires turnTimeoutMs to be a positive integer");
   }
   return defineWorkflow({
     id: ASSISTANT_WORKFLOW_ID,
@@ -111,9 +105,7 @@ export function buildAssistantWorkflow(
  * symbols, bigints, non-finite numbers, class instances — is a loud
  * error naming the offending path instead of a corrupted asset.
  */
-export function serializeAssistantWorkflow(
-  definition: WorkflowDefinition,
-): string {
+export function serializeAssistantWorkflow(definition: WorkflowDefinition): string {
   assertJsonPortable(definition, "definition");
   return JSON.stringify(definition);
 }
@@ -133,8 +125,7 @@ function assertJsonPortable(value: unknown, path: string): void {
       break;
     default:
       throw new Error(
-        `${path} is a ${typeof value}, which does not survive JSON ` +
-          "serialization",
+        `${path} is a ${typeof value}, which does not survive JSON ` + "serialization",
       );
   }
   if (Array.isArray(value)) {
@@ -145,9 +136,7 @@ function assertJsonPortable(value: unknown, path: string): void {
   }
   const proto: unknown = Object.getPrototypeOf(value);
   if (proto !== Object.prototype && proto !== null) {
-    throw new Error(
-      `${path} is a non-plain object; JSON would flatten it lossily`,
-    );
+    throw new Error(`${path} is a non-plain object; JSON would flatten it lossily`);
   }
   for (const [key, entry] of Object.entries(value)) {
     assertJsonPortable(entry, `${path}.${key}`);
diff --git a/workflows/assistant/src/prompt.ts b/workflows/assistant/src/prompt.ts
index fedb4f0d03..f34bfeb208 100644
--- a/workflows/assistant/src/prompt.ts
+++ b/workflows/assistant/src/prompt.ts
@@ -36,16 +36,16 @@ export const ASSISTANT_STEP_ID = "assistant";
  */
 export const ASSISTANT_TOOL_PACKAGE_PINS: readonly ToolPackagePin[] = [
   { name: "@corbits/memory", version: "0.1.2" },
-  { name: "@corbits/capability-tools", version: "0.0.6" },
-  { name: "@corbits/agent-directory-tools", version: "0.0.6" },
-  { name: "@corbits/connections-tools", version: "0.0.11" },
-  { name: "@corbits/catalog-tools", version: "0.1.0" },
-  { name: "@corbits/skills-tools", version: "0.0.7" },
-  { name: "@corbits/mcp-tools", version: "0.0.11" },
-  { name: "@corbits/interaction-tools", version: "0.0.9" },
-  { name: "@corbits/manus-tools", version: "0.0.11" },
-  { name: "@corbits/workflow-authoring-tools", version: "0.0.7" },
-  { name: "@corbits/access-tools", version: "0.0.5" },
+  { name: "@corbits/capability-tools", version: "0.0.7" },
+  { name: "@corbits/agent-directory-tools", version: "0.0.7" },
+  { name: "@corbits/connections-tools", version: "0.0.12" },
+  { name: "@corbits/catalog-tools", version: "0.1.1" },
+  { name: "@corbits/skills-tools", version: "0.0.8" },
+  { name: "@corbits/mcp-tools", version: "0.0.12" },
+  { name: "@corbits/interaction-tools", version: "0.0.10" },
+  { name: "@corbits/manus-tools", version: "0.0.12" },
+  { name: "@corbits/workflow-authoring-tools", version: "0.0.8" },
+  { name: "@corbits/access-tools", version: "0.0.6" },
 ];
 
 /**
diff --git a/workflows/assistant/test/boundary.test.ts b/workflows/assistant/test/boundary.test.ts
index 4b14b084f3..7cd3621b2f 100644
--- a/workflows/assistant/test/boundary.test.ts
+++ b/workflows/assistant/test/boundary.test.ts
@@ -39,9 +39,7 @@ test("shipped sources import only published platform packages", async () => {
     const content = await readFile(file, "utf8");
     for (const match of content.matchAll(importPattern)) {
       const specifier = match[1] ?? "";
-      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) =>
-        specifier.startsWith(prefix),
-      );
+      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) => specifier.startsWith(prefix));
       if (!allowed) {
         violations.push(`${path.basename(file)}: ${specifier}`);
       }
diff --git a/workflows/assistant/test/definition.test.ts b/workflows/assistant/test/definition.test.ts
index c4074959a8..4285da5956 100644
--- a/workflows/assistant/test/definition.test.ts
+++ b/workflows/assistant/test/definition.test.ts
@@ -24,9 +24,7 @@ const INPUT = {
 function assistantStep(definition: WorkflowDefinition): StepPrimitive {
   const primitive = definition.steps[ASSISTANT_STEP_ID];
   if (primitive === undefined || primitive.kind !== "step") {
-    throw new Error(
-      `definition has no step primitive named ${ASSISTANT_STEP_ID}`,
-    );
+    throw new Error(`definition has no step primitive named ${ASSISTANT_STEP_ID}`);
   }
   return primitive;
 }
@@ -50,17 +48,13 @@ test("the step is unbounded: it re-arms after every reply instead of completing
   // conversation is the long-lived interactive agent that must never
   // self-complete — without this, the run ends after the greeting and
   // every later message is rejected as sent to a terminal run.
-  expect(assistantStep(buildAssistantWorkflow(INPUT)).triggers).toBe(
-    "unbounded",
-  );
+  expect(assistantStep(buildAssistantWorkflow(INPUT)).triggers).toBe("unbounded");
 });
 
 test("the workflow is triggered by mail to the given deployment address", () => {
   const definition = buildAssistantWorkflow(INPUT);
   expect(definition.id).toBe(ASSISTANT_WORKFLOW_ID);
-  expect(definition.triggers).toEqual([
-    { type: "mail", to: INPUT.triggerAddress },
-  ]);
+  expect(definition.triggers).toEqual([{ type: "mail", to: INPUT.triggerAddress }]);
 });
 
 test("the agent carries the assistant prompt, the preferences, and inlines no tools", () => {
@@ -74,9 +68,7 @@ test("the agent carries the assistant prompt, the preferences, and inlines no to
 
 test("the workflow pins manus-tools and does not require a Manus credential binding", () => {
   const definition = buildAssistantWorkflow(INPUT);
-  expect(ASSISTANT_TOOL_PACKAGE_PINS.map((pin) => pin.name)).toContain(
-    "@corbits/manus-tools",
-  );
+  expect(ASSISTANT_TOOL_PACKAGE_PINS.map((pin) => pin.name)).toContain("@corbits/manus-tools");
   expect(definition.credentialBindings ?? []).toEqual([]);
 });
 
@@ -112,16 +104,10 @@ test("serialization fails loud on a function-valued field, naming its path", ()
 });
 
 test("an empty trigger address is rejected", () => {
-  expect(() =>
-    buildAssistantWorkflow({ ...INPUT, triggerAddress: "" }),
-  ).toThrow(/triggerAddress/);
+  expect(() => buildAssistantWorkflow({ ...INPUT, triggerAddress: "" })).toThrow(/triggerAddress/);
 });
 
 test("a non-positive or fractional turn timeout is rejected", () => {
-  expect(() => buildAssistantWorkflow({ ...INPUT, turnTimeoutMs: 0 })).toThrow(
-    /turnTimeoutMs/,
-  );
-  expect(() =>
-    buildAssistantWorkflow({ ...INPUT, turnTimeoutMs: 0.5 }),
-  ).toThrow(/turnTimeoutMs/);
+  expect(() => buildAssistantWorkflow({ ...INPUT, turnTimeoutMs: 0 })).toThrow(/turnTimeoutMs/);
+  expect(() => buildAssistantWorkflow({ ...INPUT, turnTimeoutMs: 0.5 })).toThrow(/turnTimeoutMs/);
 });
diff --git a/workflows/assistant/test/manager-tools-scenario.test.ts b/workflows/assistant/test/manager-tools-scenario.test.ts
index 583216d732..12845f1b02 100644
--- a/workflows/assistant/test/manager-tools-scenario.test.ts
+++ b/workflows/assistant/test/manager-tools-scenario.test.ts
@@ -53,11 +53,7 @@ import {
 
 const HUB = "https://hub.example.com";
 
-function call(
-  id: string,
-  name: string,
-  args: Record<string, unknown>,
-): ToolCall {
+function call(id: string, name: string, args: Record<string, unknown>): ToolCall {
   return { id, name, arguments: args };
 }
 
@@ -89,10 +85,7 @@ function createFakeHub() {
     { id: "linear", displayName: "Linear", docsUrl: "https://linear.app/docs" },
   ];
 
-  const fetchImpl = (async (
-    input: string | Request | URL,
-    init?: RequestInit,
-  ) => {
+  const fetchImpl = (async (input: string | Request | URL, init?: RequestInit) => {
     const url = new URL(String(input));
     const method = init?.method ?? "GET";
     const body =
@@ -121,11 +114,7 @@ function createFakeHub() {
       });
     }
 
-    if (
-      url.pathname === "/api/workflow-agent-directory/definitions" &&
-      method === "POST" &&
-      body
-    ) {
+    if (url.pathname === "/api/workflow-agent-directory/definitions" && method === "POST" && body) {
       const id = `def_${String(createdDefinitions.length + 1)}`;
       createdDefinitions.push({ id, name: body["name"] as string });
       return Response.json(
@@ -142,11 +131,7 @@ function createFakeHub() {
       );
     }
 
-    if (
-      url.pathname === "/api/workflow-chat/participants/messages" &&
-      method === "POST" &&
-      body
-    ) {
+    if (url.pathname === "/api/workflow-chat/participants/messages" && method === "POST" && body) {
       // The connect-service card post `request_connection` (CL-6393)
       // makes into the caller's own room. Recorded so the scenario can
       // assert the card itself, not just the tool's advice text.
@@ -172,11 +157,7 @@ function createFakeHub() {
       );
     }
 
-    if (
-      url.pathname === "/api/workflow-chat/participants/mint-dm" &&
-      method === "POST" &&
-      body
-    ) {
+    if (url.pathname === "/api/workflow-chat/participants/mint-dm" && method === "POST" && body) {
       const definitionId = body["definitionId"] as string;
       mintedDefinitionIds.push(definitionId);
       return Response.json(
@@ -190,11 +171,7 @@ function createFakeHub() {
       );
     }
 
-    if (
-      url.pathname === "/api/workflow-chat/participants/invite" &&
-      method === "POST" &&
-      body
-    ) {
+    if (url.pathname === "/api/workflow-chat/participants/invite" && method === "POST" && body) {
       const definitionId = body["definitionId"] as string;
       invitedDefinitionIds.push(definitionId);
       return Response.json(
@@ -238,9 +215,7 @@ test("GTM scenario: connect three services, then create two specialist agents",
   }
 });
 
-async function runScenario(
-  hub: ReturnType<typeof createFakeHub>,
-): Promise<void> {
+async function runScenario(hub: ReturnType<typeof createFakeHub>): Promise<void> {
   const connectionsEnv: WorkflowConnectionEnv = {
     hubConnectionsUrl: HUB,
     tenantId: "ten_1",
@@ -291,16 +266,8 @@ async function runScenario(
     expect(String(result.content)).toMatch(/card/i);
     expect(String(result.content)).toMatch(/keep helping/i);
   }
-  expect(hub.postedCards.map((card) => card.connectorId)).toEqual([
-    "exa",
-    "granola",
-    "linear",
-  ]);
-  expect(hub.postedCards.map((card) => card.displayName)).toEqual([
-    "Exa",
-    "Granola",
-    "Linear",
-  ]);
+  expect(hub.postedCards.map((card) => card.connectorId)).toEqual(["exa", "granola", "linear"]);
+  expect(hub.postedCards.map((card) => card.displayName)).toEqual(["Exa", "Granola", "Linear"]);
   for (const card of hub.postedCards) {
     expect(card.reason.length).toBeGreaterThan(0);
   }
@@ -317,9 +284,7 @@ async function runScenario(
   expect(String(afterConnect.content)).toContain(
     "GitHub MCP, Notion, Sentry, Attio, Railway, PostHog, Sumble, Canva.",
   );
-  expect(String(afterConnect.content)).toContain(
-    "Connected: Granola, Exa, Linear.",
-  );
+  expect(String(afterConnect.content)).toContain("Connected: Granola, Exa, Linear.");
 
   // Step 3: Myra creates the two specialist agents she needs, minting
   // each its own 1:1 chat (the tool's default).
@@ -338,8 +303,7 @@ async function runScenario(
     call("a2", CREATE_AGENT_TOOL, {
       name: "Weekly Analytics",
       systemPrompt:
-        "Produce a weekly analytical rollup of sales-motion activity " +
-        "for the team.",
+        "Produce a weekly analytical rollup of sales-motion activity " + "for the team.",
     }),
     new AbortController().signal,
   );
@@ -350,8 +314,6 @@ async function runScenario(
     "Weekly Analytics",
   ]);
   // Both got their own chat (the default), never invited into Myra's.
-  expect(hub.mintedDefinitionIds).toEqual(
-    hub.createdDefinitions.map((d) => d.id),
-  );
+  expect(hub.mintedDefinitionIds).toEqual(hub.createdDefinitions.map((d) => d.id));
   expect(hub.invitedDefinitionIds).toEqual([]);
 }
diff --git a/workflows/attio-task-agent/package.json b/workflows/attio-task-agent/package.json
index 2400f88286..88f48a03a6 100644
--- a/workflows/attio-task-agent/package.json
+++ b/workflows/attio-task-agent/package.json
@@ -1,31 +1,21 @@
 {
   "name": "@corbits/attio-task-agent-workflow",
-  "description": "Works one Attio task end to end: grounds itself in the CRM and past calls read-only, drafts what the task needs, and writes back to Attio only once a human approves",
   "version": "0.0.1",
+  "description": "Works one Attio task end to end: grounds itself in the CRM and past calls read-only, drafts what the task needs, and writes back to Attio only once a human approves",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "corbits": {
-    "workflow": {
-      "assetName": "attio-task-agent",
-      "displayName": "Attio task agent",
-      "automatable": false
-    }
-  },
-  "interchange": {
-    "workflow": "./src/index.ts"
-  },
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "workflows/attio-task-agent"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "workflows/attio-task-agent"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -37,13 +27,23 @@
   "dependencies": {
     "arktype": "catalog:"
   },
+  "devDependencies": {
+    "@types/bun": "catalog:",
+    "typescript": "catalog:"
+  },
   "peerDependencies": {
     "@intx/agent": "0.3.0",
     "@intx/types": "0.3.0",
     "@intx/workflow": "0.3.0"
   },
-  "devDependencies": {
-    "@types/bun": "catalog:",
-    "typescript": "catalog:"
+  "corbits": {
+    "workflow": {
+      "assetName": "attio-task-agent",
+      "displayName": "Attio task agent",
+      "automatable": false
+    }
+  },
+  "interchange": {
+    "workflow": "./src/index.ts"
   }
 }
diff --git a/workflows/attio-task-agent/src/artifact-client.test.ts b/workflows/attio-task-agent/src/artifact-client.test.ts
index 2a4088cc47..1c86414419 100644
--- a/workflows/attio-task-agent/src/artifact-client.test.ts
+++ b/workflows/attio-task-agent/src/artifact-client.test.ts
@@ -27,17 +27,14 @@ test("posts to the workflow-artifacts endpoint and returns id/version", async ()
   );
 
   expect(result).toEqual({ id: "art_1", version: 1 });
-  expect(captured.url).toBe(
-    "https://hub.example.com/api/workflow-artifacts/artifacts",
-  );
+  expect(captured.url).toBe("https://hub.example.com/api/workflow-artifacts/artifacts");
   const headers = captured.init?.headers as Record<string, string>;
   expect(headers["authorization"]).toBe("Bearer sc-token");
   expect(headers["x-workflow-run-address"]).toBe("run_1@workflow");
 });
 
 test("throws on a non-ok HTTP response", async () => {
-  const fetchImpl = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  const fetchImpl = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
 
   await expect(
     createWorkflowArtifact(
diff --git a/workflows/attio-task-agent/src/artifact-client.ts b/workflows/attio-task-agent/src/artifact-client.ts
index f87eb50db5..b9d56ca425 100644
--- a/workflows/attio-task-agent/src/artifact-client.ts
+++ b/workflows/attio-task-agent/src/artifact-client.ts
@@ -39,22 +39,17 @@ export async function createWorkflowArtifact(
   input: CreateWorkflowArtifactInput,
 ): Promise<CreatedWorkflowArtifact> {
   const doFetch = config.fetchImpl ?? fetch;
-  const response = await doFetch(
-    `${config.hubArtifactsUrl}/api/workflow-artifacts/artifacts`,
-    {
-      method: "POST",
-      headers: {
-        authorization: `Bearer ${config.sidecarToken}`,
-        "x-workflow-run-address": config.runAddress,
-        "content-type": "application/json",
-      },
-      body: JSON.stringify(input),
+  const response = await doFetch(`${config.hubArtifactsUrl}/api/workflow-artifacts/artifacts`, {
+    method: "POST",
+    headers: {
+      authorization: `Bearer ${config.sidecarToken}`,
+      "x-workflow-run-address": config.runAddress,
+      "content-type": "application/json",
     },
-  );
+    body: JSON.stringify(input),
+  });
   if (!response.ok) {
-    throw new Error(
-      `Workflow artifact create failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`Workflow artifact create failed: ${response.status} ${response.statusText}`);
   }
   const body: unknown = await response.json();
   const parsed = CreatedWorkflowArtifactResponse(body);
diff --git a/workflows/attio-task-agent/src/finalize-tool.test.ts b/workflows/attio-task-agent/src/finalize-tool.test.ts
index d95d12119d..636d6480d4 100644
--- a/workflows/attio-task-agent/src/finalize-tool.test.ts
+++ b/workflows/attio-task-agent/src/finalize-tool.test.ts
@@ -14,9 +14,7 @@ test("the tool's definition marks itself approval-gated", () => {
 });
 
 test("the tool is namespaced under this workflow package, not a shared one", () => {
-  expect(ATTIO_TASK_AGENT_FINALIZE_TOOL.id).toBe(
-    "@corbits/workflow-attio-task-agent/finalize",
-  );
+  expect(ATTIO_TASK_AGENT_FINALIZE_TOOL.id).toBe("@corbits/workflow-attio-task-agent/finalize");
 });
 
 test("requires the sanctioned workflow-artifacts env keys", () => {
@@ -104,8 +102,7 @@ test("run persists the draft on real invocation (i.e. after approval re-dispatch
 
 test("run returns an honest error result when persistence fails, never fabricating persisted: true", async () => {
   const originalFetch = globalThis.fetch;
-  globalThis.fetch = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  globalThis.fetch = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
 
   try {
     const bundle = ATTIO_TASK_AGENT_FINALIZE_TOOL(testEnv());
diff --git a/workflows/attio-task-agent/src/index.ts b/workflows/attio-task-agent/src/index.ts
index 5f0ce8d094..b46b6b9bea 100644
--- a/workflows/attio-task-agent/src/index.ts
+++ b/workflows/attio-task-agent/src/index.ts
@@ -90,7 +90,7 @@ export const ATTIO_TASK_AGENT_SYSTEM_PROMPT = buildAttioTaskAgentSystemPrompt({
  * deploy of this package itself.
  */
 export const ATTIO_TASK_AGENT_TOOL_PACKAGE_PINS: readonly ToolPackagePin[] = [
-  { name: "@corbits/mcp-tools", version: "0.0.11" },
+  { name: "@corbits/mcp-tools", version: "0.0.12" },
 ];
 
 /**
@@ -117,14 +117,10 @@ export function buildAttioTaskAgentWorkflow(
   input: AttioTaskAgentWorkflowInput,
 ): WorkflowDefinition {
   if (input.triggerAddress === "") {
-    throw new Error(
-      "buildAttioTaskAgentWorkflow requires a non-empty triggerAddress",
-    );
+    throw new Error("buildAttioTaskAgentWorkflow requires a non-empty triggerAddress");
   }
   if (!Number.isInteger(input.turnTimeoutMs) || input.turnTimeoutMs <= 0) {
-    throw new Error(
-      "buildAttioTaskAgentWorkflow requires turnTimeoutMs to be a positive integer",
-    );
+    throw new Error("buildAttioTaskAgentWorkflow requires turnTimeoutMs to be a positive integer");
   }
   return defineWorkflow({
     id: ATTIO_TASK_AGENT_WORKFLOW_ID,
@@ -154,9 +150,7 @@ export function buildAttioTaskAgentWorkflow(
  * anything JSON would silently drop or mangle is a loud error naming the
  * offending path instead of a corrupted asset.
  */
-export function serializeAttioTaskAgentWorkflow(
-  definition: WorkflowDefinition,
-): string {
+export function serializeAttioTaskAgentWorkflow(definition: WorkflowDefinition): string {
   assertJsonPortable(definition, "definition");
   return JSON.stringify(definition);
 }
@@ -176,8 +170,7 @@ function assertJsonPortable(value: unknown, path: string): void {
       break;
     default:
       throw new Error(
-        `${path} is a ${typeof value}, which does not survive JSON ` +
-          "serialization",
+        `${path} is a ${typeof value}, which does not survive JSON ` + "serialization",
       );
   }
   if (Array.isArray(value)) {
@@ -188,9 +181,7 @@ function assertJsonPortable(value: unknown, path: string): void {
   }
   const proto: unknown = Object.getPrototypeOf(value);
   if (proto !== Object.prototype && proto !== null) {
-    throw new Error(
-      `${path} is a non-plain object; JSON would flatten it lossily`,
-    );
+    throw new Error(`${path} is a non-plain object; JSON would flatten it lossily`);
   }
   for (const [key, entry] of Object.entries(value)) {
     assertJsonPortable(entry, `${path}.${key}`);
diff --git a/workflows/attio-task-agent/src/prompts.test.ts b/workflows/attio-task-agent/src/prompts.test.ts
index 544bb5ed46..c91578b735 100644
--- a/workflows/attio-task-agent/src/prompts.test.ts
+++ b/workflows/attio-task-agent/src/prompts.test.ts
@@ -16,15 +16,11 @@ test("every draft kind the prompt offers has its own quality bar", () => {
     expect(ARTIFACT_KIND_GUIDANCE[kind].length).toBeGreaterThan(0);
     expect(PROMPT).toContain(`- ${kind}:`);
   }
-  expect(Object.keys(ARTIFACT_KIND_GUIDANCE).sort()).toEqual(
-    [...ATTIO_TASK_ARTIFACT_KINDS].sort(),
-  );
+  expect(Object.keys(ARTIFACT_KIND_GUIDANCE).sort()).toEqual([...ATTIO_TASK_ARTIFACT_KINDS].sort());
 });
 
 test("the dropped Gamma hand-off is gone, not left as a kind nothing can act on", () => {
-  expect(ATTIO_TASK_ARTIFACT_KINDS).not.toContain(
-    "gamma-presentation" as never,
-  );
+  expect(ATTIO_TASK_ARTIFACT_KINDS).not.toContain("gamma-presentation" as never);
   expect(PROMPT).not.toContain("gamma");
 });
 
diff --git a/workflows/attio-task-agent/src/prompts.ts b/workflows/attio-task-agent/src/prompts.ts
index 2e3610db48..75bbe381d7 100644
--- a/workflows/attio-task-agent/src/prompts.ts
+++ b/workflows/attio-task-agent/src/prompts.ts
@@ -45,9 +45,9 @@ export const ARTIFACT_KIND_GUIDANCE: Record<AttioTaskArtifactKind, string> = {
 };
 
 function kindGuidanceBlock(): string {
-  return ATTIO_TASK_ARTIFACT_KINDS.map(
-    (kind) => `- ${kind}: ${ARTIFACT_KIND_GUIDANCE[kind]}`,
-  ).join("\n");
+  return ATTIO_TASK_ARTIFACT_KINDS.map((kind) => `- ${kind}: ${ARTIFACT_KIND_GUIDANCE[kind]}`).join(
+    "\n",
+  );
 }
 
 /**
diff --git a/workflows/attio-task-agent/test/boundary.test.ts b/workflows/attio-task-agent/test/boundary.test.ts
index c4669d42fb..8bd42a25f3 100644
--- a/workflows/attio-task-agent/test/boundary.test.ts
+++ b/workflows/attio-task-agent/test/boundary.test.ts
@@ -41,9 +41,7 @@ test("shipped sources import only published platform packages", async () => {
     const content = await readFile(file, "utf8");
     for (const match of content.matchAll(importPattern)) {
       const specifier = match[1] ?? "";
-      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) =>
-        specifier.startsWith(prefix),
-      );
+      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) => specifier.startsWith(prefix));
       if (!allowed) {
         violations.push(`${path.basename(file)}: ${specifier}`);
       }
diff --git a/workflows/attio-task-agent/test/definition.test.ts b/workflows/attio-task-agent/test/definition.test.ts
index d20fef65b6..1d6a6ac29c 100644
--- a/workflows/attio-task-agent/test/definition.test.ts
+++ b/workflows/attio-task-agent/test/definition.test.ts
@@ -25,9 +25,7 @@ const INPUT = {
 function workStep(definition: WorkflowDefinition): StepPrimitive {
   const primitive = definition.steps[ATTIO_TASK_AGENT_STEP_ID];
   if (primitive === undefined || primitive.kind !== "step") {
-    throw new Error(
-      `definition has no step primitive named ${ATTIO_TASK_AGENT_STEP_ID}`,
-    );
+    throw new Error(`definition has no step primitive named ${ATTIO_TASK_AGENT_STEP_ID}`);
   }
   return primitive;
 }
@@ -40,9 +38,7 @@ test("the definition folds the OG twenty-one-step pipeline into exactly one step
 
 test("the definition uses no action or awaitSignal primitive — this host can dispatch neither", () => {
   const definition = buildAttioTaskAgentWorkflow(INPUT);
-  const kinds = Object.values(definition.steps).map(
-    (primitive) => primitive.kind,
-  );
+  const kinds = Object.values(definition.steps).map((primitive) => primitive.kind);
   expect(kinds).toEqual(["step"]);
 });
 
@@ -54,9 +50,7 @@ test("the step carries an explicit per-turn timeout", () => {
 test("the workflow is triggered by mail to the given deployment address", () => {
   const definition = buildAttioTaskAgentWorkflow(INPUT);
   expect(definition.id).toBe(ATTIO_TASK_AGENT_WORKFLOW_ID);
-  expect(definition.triggers).toEqual([
-    { type: "mail", to: INPUT.triggerAddress },
-  ]);
+  expect(definition.triggers).toEqual([{ type: "mail", to: INPUT.triggerAddress }]);
 });
 
 test("the agent carries the fixed prompt and the caller's preferences, and inlines no tools", () => {
@@ -70,7 +64,7 @@ test("one MCP pin covers the CRM, past calls, and the web — the OG needed thre
   const agent = workStep(buildAttioTaskAgentWorkflow(INPUT)).agent;
   expect(agent.toolPackagePins).toEqual(ATTIO_TASK_AGENT_TOOL_PACKAGE_PINS);
   expect(ATTIO_TASK_AGENT_TOOL_PACKAGE_PINS).toEqual([
-    { name: "@corbits/mcp-tools", version: "0.0.11" },
+    { name: "@corbits/mcp-tools", version: "0.0.12" },
   ]);
 });
 
@@ -81,12 +75,8 @@ test("the definition declares no static credential binding — mcp:<slug> is dyn
 
 test("the prompt names the CRM server slug and the finalize tool the package actually exports", () => {
   expect(ATTIO_MCP_SERVER_SLUG).toBe("attio");
-  expect(ATTIO_TASK_AGENT_SYSTEM_PROMPT).toContain(
-    `"${ATTIO_MCP_SERVER_SLUG}" server`,
-  );
-  expect(ATTIO_TASK_AGENT_SYSTEM_PROMPT).toContain(
-    ATTIO_TASK_AGENT_FINALIZE_TOOL_NAME,
-  );
+  expect(ATTIO_TASK_AGENT_SYSTEM_PROMPT).toContain(`"${ATTIO_MCP_SERVER_SLUG}" server`);
+  expect(ATTIO_TASK_AGENT_SYSTEM_PROMPT).toContain(ATTIO_TASK_AGENT_FINALIZE_TOOL_NAME);
 });
 
 test("the definition survives the workflow-asset JSON round trip unchanged", () => {
@@ -108,13 +98,13 @@ test("serializing a definition JSON would mangle fails loudly, naming the path",
 });
 
 test("an empty trigger address is rejected at build time", () => {
-  expect(() =>
-    buildAttioTaskAgentWorkflow({ ...INPUT, triggerAddress: "" }),
-  ).toThrow(/non-empty triggerAddress/);
+  expect(() => buildAttioTaskAgentWorkflow({ ...INPUT, triggerAddress: "" })).toThrow(
+    /non-empty triggerAddress/,
+  );
 });
 
 test("a non-positive turn timeout is rejected at build time", () => {
-  expect(() =>
-    buildAttioTaskAgentWorkflow({ ...INPUT, turnTimeoutMs: 0 }),
-  ).toThrow(/positive integer/);
+  expect(() => buildAttioTaskAgentWorkflow({ ...INPUT, turnTimeoutMs: 0 })).toThrow(
+    /positive integer/,
+  );
 });
diff --git a/workflows/code-review/package.json b/workflows/code-review/package.json
index f8b07f90a9..e5a673ccb4 100644
--- a/workflows/code-review/package.json
+++ b/workflows/code-review/package.json
@@ -1,31 +1,21 @@
 {
   "name": "@corbits/code-review-workflow",
-  "description": "Pull-request review workflow: three reviewer lenses over one diff, one review posted back",
   "version": "0.0.1",
+  "description": "Pull-request review workflow: three reviewer lenses over one diff, one review posted back",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "corbits": {
-    "workflow": {
-      "assetName": "code-review",
-      "displayName": "Code review",
-      "automatable": false
-    }
-  },
-  "interchange": {
-    "workflow": "./src/index.ts"
-  },
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "workflows/code-review"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "workflows/code-review"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -37,13 +27,23 @@
   "dependencies": {
     "@corbits/code-review": "0.0.2"
   },
+  "devDependencies": {
+    "@types/bun": "catalog:",
+    "typescript": "catalog:"
+  },
   "peerDependencies": {
     "@intx/agent": "0.3.0",
     "@intx/types": "0.3.0",
     "@intx/workflow": "0.3.0"
   },
-  "devDependencies": {
-    "@types/bun": "catalog:",
-    "typescript": "catalog:"
+  "corbits": {
+    "workflow": {
+      "assetName": "code-review",
+      "displayName": "Code review",
+      "automatable": false
+    }
+  },
+  "interchange": {
+    "workflow": "./src/index.ts"
   }
 }
diff --git a/workflows/code-review/src/index.ts b/workflows/code-review/src/index.ts
index 9e133b672e..890f0e7ee2 100644
--- a/workflows/code-review/src/index.ts
+++ b/workflows/code-review/src/index.ts
@@ -43,7 +43,7 @@ export const CODE_REVIEW_STEP_ID = "code-review";
 
 /** The tool packages this definition pins: GitHub reach, nothing else. */
 export const CODE_REVIEW_TOOL_PACKAGE_PINS: readonly ToolPackagePin[] = [
-  { name: "@corbits/github-tools", version: "0.0.10" },
+  { name: "@corbits/github-tools", version: "0.0.11" },
 ];
 
 /** Binds the pinned package's "github" handle to the tenant's connection. */
@@ -65,8 +65,7 @@ export const CODE_REVIEW_WEBHOOK_INPUT_TEMPLATE =
 
 const REVIEWER_PASSES = CODE_REVIEW_REVIEWERS.map(
   (reviewer, index) =>
-    `### Pass ${String(index + 1)}: ${reviewer.displayName}\n` +
-    reviewer.systemPrompt,
+    `### Pass ${String(index + 1)}: ${reviewer.displayName}\n` + reviewer.systemPrompt,
 ).join("\n\n");
 
 export const CODE_REVIEW_SYSTEM_PROMPT =
@@ -121,18 +120,12 @@ export interface CodeReviewWorkflowInput {
  * one agent's context so the combined review is written from all three
  * rather than stitched from summaries.
  */
-export function buildCodeReviewWorkflow(
-  input: CodeReviewWorkflowInput,
-): WorkflowDefinition {
+export function buildCodeReviewWorkflow(input: CodeReviewWorkflowInput): WorkflowDefinition {
   if (input.triggerAddress === "") {
-    throw new Error(
-      "buildCodeReviewWorkflow requires a non-empty triggerAddress",
-    );
+    throw new Error("buildCodeReviewWorkflow requires a non-empty triggerAddress");
   }
   if (!Number.isInteger(input.turnTimeoutMs) || input.turnTimeoutMs <= 0) {
-    throw new Error(
-      "buildCodeReviewWorkflow requires turnTimeoutMs to be a positive integer",
-    );
+    throw new Error("buildCodeReviewWorkflow requires turnTimeoutMs to be a positive integer");
   }
   return defineWorkflow({
     id: CODE_REVIEW_WORKFLOW_ID,
@@ -142,8 +135,7 @@ export function buildCodeReviewWorkflow(
         agent: {
           id: CODE_REVIEW_STEP_ID,
           description:
-            "Reviews a pull request under three lenses and posts one " +
-            "review back on it",
+            "Reviews a pull request under three lenses and posts one " + "review back on it",
           systemPrompt: CODE_REVIEW_SYSTEM_PROMPT,
           toolFactories: [],
           capabilities: [],
@@ -162,9 +154,7 @@ export function buildCodeReviewWorkflow(
  * value JSON would drop or mangle is a loud error naming its path
  * instead of a corrupted asset.
  */
-export function serializeCodeReviewWorkflow(
-  definition: WorkflowDefinition,
-): string {
+export function serializeCodeReviewWorkflow(definition: WorkflowDefinition): string {
   assertJsonPortable(definition, "definition");
   return JSON.stringify(definition);
 }
@@ -184,8 +174,7 @@ function assertJsonPortable(value: unknown, path: string): void {
       break;
     default:
       throw new Error(
-        `${path} is a ${typeof value}, which does not survive JSON ` +
-          "serialization",
+        `${path} is a ${typeof value}, which does not survive JSON ` + "serialization",
       );
   }
   if (Array.isArray(value)) {
@@ -196,9 +185,7 @@ function assertJsonPortable(value: unknown, path: string): void {
   }
   const proto: unknown = Object.getPrototypeOf(value);
   if (proto !== Object.prototype && proto !== null) {
-    throw new Error(
-      `${path} is a non-plain object; JSON would flatten it lossily`,
-    );
+    throw new Error(`${path} is a non-plain object; JSON would flatten it lossily`);
   }
   for (const [key, entry] of Object.entries(value)) {
     assertJsonPortable(entry, `${path}.${key}`);
diff --git a/workflows/code-review/test/definition.test.ts b/workflows/code-review/test/definition.test.ts
index 81eff35ff7..33d444c544 100644
--- a/workflows/code-review/test/definition.test.ts
+++ b/workflows/code-review/test/definition.test.ts
@@ -34,17 +34,13 @@ test("the definition is one mail-triggered step the webhook ingress can launch",
   const definition = buildCodeReviewWorkflow(INPUT);
   expect(definition.id).toBe(CODE_REVIEW_WORKFLOW_ID);
   expect(definition.stepOrder).toEqual([CODE_REVIEW_STEP_ID]);
-  expect(definition.triggers).toEqual([
-    { type: "mail", to: INPUT.triggerAddress },
-  ]);
+  expect(definition.triggers).toEqual([{ type: "mail", to: INPUT.triggerAddress }]);
 });
 
 test("the step pins GitHub reach and sets an explicit turn timeout", () => {
   const primitive = reviewStep(buildCodeReviewWorkflow(INPUT));
   expect(primitive.timeout).toBe(INPUT.turnTimeoutMs);
-  expect(primitive.agent.toolPackagePins).toEqual(
-    CODE_REVIEW_TOOL_PACKAGE_PINS,
-  );
+  expect(primitive.agent.toolPackagePins).toEqual(CODE_REVIEW_TOOL_PACKAGE_PINS);
   expect(primitive.agent.toolFactories).toEqual([]);
 });
 
@@ -58,31 +54,21 @@ test("every reviewer lens reaches the prompt from the shared roster", () => {
 test("the prompt commits to reading the diff, posting once, and never merging", () => {
   expect(CODE_REVIEW_SYSTEM_PROMPT).toContain("github_pull_request_diff");
   expect(CODE_REVIEW_SYSTEM_PROMPT).toContain("github_post_pr_review");
-  expect(CODE_REVIEW_SYSTEM_PROMPT).toContain(
-    "never approve, request changes, or merge",
-  );
+  expect(CODE_REVIEW_SYSTEM_PROMPT).toContain("never approve, request changes, or merge");
 });
 
 test("the webhook input template names the pull request from the event", () => {
-  expect(CODE_REVIEW_WEBHOOK_INPUT_TEMPLATE).toContain(
-    "{{pull_request.html_url}}",
-  );
+  expect(CODE_REVIEW_WEBHOOK_INPUT_TEMPLATE).toContain("{{pull_request.html_url}}");
 });
 
 test("the definition survives the workflow-asset round trip", () => {
   const definition = buildCodeReviewWorkflow(INPUT);
-  const round = JSON.parse(
-    serializeCodeReviewWorkflow(definition),
-  ) as WorkflowDefinition;
+  const round = JSON.parse(serializeCodeReviewWorkflow(definition)) as WorkflowDefinition;
   expect(round.stepOrder).toEqual(definition.stepOrder);
   expect(round.id).toBe(definition.id);
 });
 
 test("a blank trigger address or a bad timeout is refused at build time", () => {
-  expect(() =>
-    buildCodeReviewWorkflow({ ...INPUT, triggerAddress: "" }),
-  ).toThrow(/triggerAddress/);
-  expect(() => buildCodeReviewWorkflow({ ...INPUT, turnTimeoutMs: 0 })).toThrow(
-    /turnTimeoutMs/,
-  );
+  expect(() => buildCodeReviewWorkflow({ ...INPUT, triggerAddress: "" })).toThrow(/triggerAddress/);
+  expect(() => buildCodeReviewWorkflow({ ...INPUT, turnTimeoutMs: 0 })).toThrow(/turnTimeoutMs/);
 });
diff --git a/workflows/collateral-generation/package.json b/workflows/collateral-generation/package.json
index 408fd57b27..8e37e04e34 100644
--- a/workflows/collateral-generation/package.json
+++ b/workflows/collateral-generation/package.json
@@ -1,31 +1,21 @@
 {
   "name": "@corbits/collateral-generation-workflow",
-  "description": "Drafts marketing collateral from one or more picked sources and content types, with a per-piece swipe review and one human approval on the final assembled set",
   "version": "0.0.1",
+  "description": "Drafts marketing collateral from one or more picked sources and content types, with a per-piece swipe review and one human approval on the final assembled set",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "corbits": {
-    "workflow": {
-      "assetName": "collateral-generation",
-      "displayName": "Collateral generation",
-      "automatable": false
-    }
-  },
-  "interchange": {
-    "workflow": "./src/index.ts"
-  },
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "workflows/collateral-generation"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "workflows/collateral-generation"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -37,13 +27,23 @@
   "dependencies": {
     "arktype": "catalog:"
   },
+  "devDependencies": {
+    "@types/bun": "catalog:",
+    "typescript": "catalog:"
+  },
   "peerDependencies": {
     "@intx/agent": "0.3.0",
     "@intx/types": "0.3.0",
     "@intx/workflow": "0.3.0"
   },
-  "devDependencies": {
-    "@types/bun": "catalog:",
-    "typescript": "catalog:"
+  "corbits": {
+    "workflow": {
+      "assetName": "collateral-generation",
+      "displayName": "Collateral generation",
+      "automatable": false
+    }
+  },
+  "interchange": {
+    "workflow": "./src/index.ts"
   }
 }
diff --git a/workflows/collateral-generation/src/artifact-client.test.ts b/workflows/collateral-generation/src/artifact-client.test.ts
index 2a4088cc47..1c86414419 100644
--- a/workflows/collateral-generation/src/artifact-client.test.ts
+++ b/workflows/collateral-generation/src/artifact-client.test.ts
@@ -27,17 +27,14 @@ test("posts to the workflow-artifacts endpoint and returns id/version", async ()
   );
 
   expect(result).toEqual({ id: "art_1", version: 1 });
-  expect(captured.url).toBe(
-    "https://hub.example.com/api/workflow-artifacts/artifacts",
-  );
+  expect(captured.url).toBe("https://hub.example.com/api/workflow-artifacts/artifacts");
   const headers = captured.init?.headers as Record<string, string>;
   expect(headers["authorization"]).toBe("Bearer sc-token");
   expect(headers["x-workflow-run-address"]).toBe("run_1@workflow");
 });
 
 test("throws on a non-ok HTTP response", async () => {
-  const fetchImpl = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  const fetchImpl = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
 
   await expect(
     createWorkflowArtifact(
diff --git a/workflows/collateral-generation/src/artifact-client.ts b/workflows/collateral-generation/src/artifact-client.ts
index f87eb50db5..b9d56ca425 100644
--- a/workflows/collateral-generation/src/artifact-client.ts
+++ b/workflows/collateral-generation/src/artifact-client.ts
@@ -39,22 +39,17 @@ export async function createWorkflowArtifact(
   input: CreateWorkflowArtifactInput,
 ): Promise<CreatedWorkflowArtifact> {
   const doFetch = config.fetchImpl ?? fetch;
-  const response = await doFetch(
-    `${config.hubArtifactsUrl}/api/workflow-artifacts/artifacts`,
-    {
-      method: "POST",
-      headers: {
-        authorization: `Bearer ${config.sidecarToken}`,
-        "x-workflow-run-address": config.runAddress,
-        "content-type": "application/json",
-      },
-      body: JSON.stringify(input),
+  const response = await doFetch(`${config.hubArtifactsUrl}/api/workflow-artifacts/artifacts`, {
+    method: "POST",
+    headers: {
+      authorization: `Bearer ${config.sidecarToken}`,
+      "x-workflow-run-address": config.runAddress,
+      "content-type": "application/json",
     },
-  );
+    body: JSON.stringify(input),
+  });
   if (!response.ok) {
-    throw new Error(
-      `Workflow artifact create failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`Workflow artifact create failed: ${response.status} ${response.statusText}`);
   }
   const body: unknown = await response.json();
   const parsed = CreatedWorkflowArtifactResponse(body);
diff --git a/workflows/collateral-generation/src/finalize-tool.test.ts b/workflows/collateral-generation/src/finalize-tool.test.ts
index 67e19c0b9d..ecada42e02 100644
--- a/workflows/collateral-generation/src/finalize-tool.test.ts
+++ b/workflows/collateral-generation/src/finalize-tool.test.ts
@@ -69,10 +69,9 @@ test("run persists every approved piece on real invocation (i.e. after approval
   const originalFetch = globalThis.fetch;
   globalThis.fetch = (async () => {
     call += 1;
-    return new Response(
-      JSON.stringify({ data: { id: `art_${call}`, version: 1 } }),
-      { status: 201 },
-    );
+    return new Response(JSON.stringify({ data: { id: `art_${call}`, version: 1 } }), {
+      status: 201,
+    });
   }) as unknown as typeof fetch;
 
   try {
@@ -119,10 +118,7 @@ test("run reports a partial failure honestly, naming how many pieces already per
   globalThis.fetch = (async () => {
     call += 1;
     if (call === 1) {
-      return new Response(
-        JSON.stringify({ data: { id: "art_1", version: 1 } }),
-        { status: 201 },
-      );
+      return new Response(JSON.stringify({ data: { id: "art_1", version: 1 } }), { status: 201 });
     }
     return new Response("nope", { status: 500 });
   }) as unknown as typeof fetch;
diff --git a/workflows/collateral-generation/src/finalize-tool.ts b/workflows/collateral-generation/src/finalize-tool.ts
index 9b5c4af500..dd1cf32c61 100644
--- a/workflows/collateral-generation/src/finalize-tool.ts
+++ b/workflows/collateral-generation/src/finalize-tool.ts
@@ -39,8 +39,7 @@ import { type } from "arktype";
 import { defineTool, type BaseEnv } from "@intx/agent";
 import { createWorkflowArtifact } from "./artifact-client";
 
-export const COLLATERAL_GENERATION_FINALIZE_TOOL_NAME =
-  "collateral_generation_finalize";
+export const COLLATERAL_GENERATION_FINALIZE_TOOL_NAME = "collateral_generation_finalize";
 
 export const COLLATERAL_GENERATION_FINALIZE_DESCRIPTION =
   "Finalizes the full set of human-approved collateral pieces from one run, pending a single human approval, and persists each as a Library artifact.";
@@ -73,9 +72,7 @@ export type ArtifactPayload = {
  * matching the OG's convention of using the content type as the
  * artifact's kind.
  */
-export function buildArtifactPayloads(
-  args: FinalizeArgs,
-): readonly ArtifactPayload[] {
+export function buildArtifactPayloads(args: FinalizeArgs): readonly ArtifactPayload[] {
   return args.pieces.map((piece) => ({
     title: piece.title,
     kind: piece.contentType,
@@ -99,97 +96,96 @@ export interface WorkflowArtifactEnv extends BaseEnv {
  * `defineTool`'s env-DI factory shape. Needs the sanctioned
  * workflow-artifacts credential trio beyond `BaseEnv`.
  */
-export const COLLATERAL_GENERATION_FINALIZE_TOOL =
-  defineTool<WorkflowArtifactEnv>({
-    id: "@corbits/workflow-collateral-generation/finalize",
-    requires: ["hubArtifactsUrl", "sidecarToken", "address"],
+export const COLLATERAL_GENERATION_FINALIZE_TOOL = defineTool<WorkflowArtifactEnv>({
+  id: "@corbits/workflow-collateral-generation/finalize",
+  requires: ["hubArtifactsUrl", "sidecarToken", "address"],
+  definitions: [
+    {
+      name: COLLATERAL_GENERATION_FINALIZE_TOOL_NAME,
+      approval: "ask",
+    },
+  ],
+  factory: (env) => ({
     definitions: [
       {
         name: COLLATERAL_GENERATION_FINALIZE_TOOL_NAME,
-        approval: "ask",
-      },
-    ],
-    factory: (env) => ({
-      definitions: [
-        {
-          name: COLLATERAL_GENERATION_FINALIZE_TOOL_NAME,
-          description: COLLATERAL_GENERATION_FINALIZE_DESCRIPTION,
-          inputSchema: {
-            type: "object",
-            properties: {
-              pieces: {
-                type: "array",
-                items: {
-                  type: "object",
-                  properties: {
-                    title: { type: "string" },
-                    contentType: { type: "string" },
-                    content: { type: "string" },
-                  },
-                  required: ["title", "contentType", "content"],
+        description: COLLATERAL_GENERATION_FINALIZE_DESCRIPTION,
+        inputSchema: {
+          type: "object",
+          properties: {
+            pieces: {
+              type: "array",
+              items: {
+                type: "object",
+                properties: {
+                  title: { type: "string" },
+                  contentType: { type: "string" },
+                  content: { type: "string" },
                 },
+                required: ["title", "contentType", "content"],
               },
             },
-            required: ["pieces"],
           },
+          required: ["pieces"],
         },
-      ],
-      run: async (call) => {
-        const parsed = FinalizeArgs(call.arguments);
-        if (parsed instanceof type.errors) {
-          return {
-            callId: call.id,
-            isError: true,
-            content: `Invalid arguments for ${COLLATERAL_GENERATION_FINALIZE_TOOL_NAME}: ${parsed.summary}`,
-          };
-        }
-        if (parsed.pieces.length === 0) {
+      },
+    ],
+    run: async (call) => {
+      const parsed = FinalizeArgs(call.arguments);
+      if (parsed instanceof type.errors) {
+        return {
+          callId: call.id,
+          isError: true,
+          content: `Invalid arguments for ${COLLATERAL_GENERATION_FINALIZE_TOOL_NAME}: ${parsed.summary}`,
+        };
+      }
+      if (parsed.pieces.length === 0) {
+        return {
+          callId: call.id,
+          isError: true,
+          content: `${COLLATERAL_GENERATION_FINALIZE_TOOL_NAME} requires at least one approved piece`,
+        };
+      }
+      const artifacts = buildArtifactPayloads(parsed);
+      const persisted: {
+        id: string;
+        version: number;
+        title: string;
+        kind: string;
+        persisted: true;
+      }[] = [];
+      for (const artifact of artifacts) {
+        try {
+          const created = await createWorkflowArtifact(
+            {
+              hubArtifactsUrl: env.hubArtifactsUrl,
+              sidecarToken: env.sidecarToken,
+              runAddress: env.address,
+            },
+            artifact,
+          );
+          persisted.push({
+            id: created.id,
+            version: created.version,
+            title: artifact.title,
+            kind: artifact.kind,
+            persisted: true,
+          });
+        } catch (err) {
           return {
             callId: call.id,
             isError: true,
-            content: `${COLLATERAL_GENERATION_FINALIZE_TOOL_NAME} requires at least one approved piece`,
+            content: `Failed to persist "${artifact.title}" as a Library artifact after persisting ${persisted.length} of ${artifacts.length} piece(s): ${
+              err instanceof Error ? err.message : String(err)
+            }`,
           };
         }
-        const artifacts = buildArtifactPayloads(parsed);
-        const persisted: {
-          id: string;
-          version: number;
-          title: string;
-          kind: string;
-          persisted: true;
-        }[] = [];
-        for (const artifact of artifacts) {
-          try {
-            const created = await createWorkflowArtifact(
-              {
-                hubArtifactsUrl: env.hubArtifactsUrl,
-                sidecarToken: env.sidecarToken,
-                runAddress: env.address,
-              },
-              artifact,
-            );
-            persisted.push({
-              id: created.id,
-              version: created.version,
-              title: artifact.title,
-              kind: artifact.kind,
-              persisted: true,
-            });
-          } catch (err) {
-            return {
-              callId: call.id,
-              isError: true,
-              content: `Failed to persist "${artifact.title}" as a Library artifact after persisting ${persisted.length} of ${artifacts.length} piece(s): ${
-                err instanceof Error ? err.message : String(err)
-              }`,
-            };
-          }
-        }
-        return {
-          callId: call.id,
-          isError: false,
-          content: JSON.stringify({ artifacts: persisted }),
-        };
-      },
-    }),
-  });
+      }
+      return {
+        callId: call.id,
+        isError: false,
+        content: JSON.stringify({ artifacts: persisted }),
+      };
+    },
+  }),
+});
diff --git a/workflows/collateral-generation/src/index.ts b/workflows/collateral-generation/src/index.ts
index 2a1d3664ea..88962b9c41 100644
--- a/workflows/collateral-generation/src/index.ts
+++ b/workflows/collateral-generation/src/index.ts
@@ -100,8 +100,7 @@ export const COLLATERAL_CONTENT_TYPES = [
     id: "twitter-article",
     label: "Twitter/X article",
     guidance:
-      "A strong title line followed by a scannable multi-section body. " +
-      "Around 400-800 words.",
+      "A strong title line followed by a scannable multi-section body. " + "Around 400-800 words.",
   },
   {
     id: "blog-short",
@@ -132,24 +131,18 @@ export const COLLATERAL_CONTENT_TYPES = [
  * deployed definition — `@corbits/artifact-tools` is pinnable the moment
  * CL-5999's tool-pin gap closes — so it is named honestly as "not
  * connected" here rather than silently omitted. */
-export const COLLATERAL_GENERATION_WIRED_SOURCES = [
-  "Granola call notes",
-  "Linear issues",
-] as const;
-export const COLLATERAL_GENERATION_PENDING_SOURCES = [
-  "workbench artifacts",
-] as const;
+export const COLLATERAL_GENERATION_WIRED_SOURCES = ["Granola call notes", "Linear issues"] as const;
+export const COLLATERAL_GENERATION_PENDING_SOURCES = ["workbench artifacts"] as const;
 
 /**
  * Tool packages this definition pins (CL-5999), one per wired source in
  * `COLLATERAL_GENERATION_WIRED_SOURCES`; see the header comment for why
  * `@corbits/artifact-tools` stays unpinned.
  */
-export const COLLATERAL_GENERATION_TOOL_PACKAGE_PINS: readonly ToolPackagePin[] =
-  [
-    { name: "@corbits/granola-tools", version: "0.0.4" },
-    { name: "@corbits/linear-tools", version: "0.0.4" },
-  ];
+export const COLLATERAL_GENERATION_TOOL_PACKAGE_PINS: readonly ToolPackagePin[] = [
+  { name: "@corbits/granola-tools", version: "0.0.5" },
+  { name: "@corbits/linear-tools", version: "0.0.5" },
+];
 
 /**
  * Binds `@corbits/granola-tools`' and `@corbits/linear-tools`' declared
@@ -157,21 +150,20 @@ export const COLLATERAL_GENERATION_TOOL_PACKAGE_PINS: readonly ToolPackagePin[]
  * `workflows/granola-call/src/index.ts`'s sibling constant for the full
  * rationale.
  */
-export const COLLATERAL_GENERATION_CREDENTIAL_BINDINGS: readonly CredentialBinding[] =
-  [
-    {
-      package: "@corbits/granola-tools",
-      handle: "granola",
-      provider: "granola",
-      locator: "tenant",
-    },
-    {
-      package: "@corbits/linear-tools",
-      handle: "linear",
-      provider: "linear",
-      locator: "tenant",
-    },
-  ];
+export const COLLATERAL_GENERATION_CREDENTIAL_BINDINGS: readonly CredentialBinding[] = [
+  {
+    package: "@corbits/granola-tools",
+    handle: "granola",
+    provider: "granola",
+    locator: "tenant",
+  },
+  {
+    package: "@corbits/linear-tools",
+    handle: "linear",
+    provider: "linear",
+    locator: "tenant",
+  },
+];
 
 const CONTENT_TYPE_LINES = COLLATERAL_CONTENT_TYPES.map(
   (type) => `- "${type.id}" (${type.label}): ${type.guidance}`,
@@ -274,9 +266,7 @@ export function buildCollateralGenerationWorkflow(
   input: CollateralGenerationWorkflowInput,
 ): WorkflowDefinition {
   if (input.triggerAddress === "") {
-    throw new Error(
-      "buildCollateralGenerationWorkflow requires a non-empty triggerAddress",
-    );
+    throw new Error("buildCollateralGenerationWorkflow requires a non-empty triggerAddress");
   }
   if (!Number.isInteger(input.turnTimeoutMs) || input.turnTimeoutMs <= 0) {
     throw new Error(
@@ -314,9 +304,7 @@ export function buildCollateralGenerationWorkflow(
  * symbols, bigints, non-finite numbers, class instances — is a loud
  * error naming the offending path instead of a corrupted asset.
  */
-export function serializeCollateralGenerationWorkflow(
-  definition: WorkflowDefinition,
-): string {
+export function serializeCollateralGenerationWorkflow(definition: WorkflowDefinition): string {
   assertJsonPortable(definition, "definition");
   return JSON.stringify(definition);
 }
@@ -336,8 +324,7 @@ function assertJsonPortable(value: unknown, path: string): void {
       break;
     default:
       throw new Error(
-        `${path} is a ${typeof value}, which does not survive JSON ` +
-          "serialization",
+        `${path} is a ${typeof value}, which does not survive JSON ` + "serialization",
       );
   }
   if (Array.isArray(value)) {
@@ -348,9 +335,7 @@ function assertJsonPortable(value: unknown, path: string): void {
   }
   const proto: unknown = Object.getPrototypeOf(value);
   if (proto !== Object.prototype && proto !== null) {
-    throw new Error(
-      `${path} is a non-plain object; JSON would flatten it lossily`,
-    );
+    throw new Error(`${path} is a non-plain object; JSON would flatten it lossily`);
   }
   for (const [key, entry] of Object.entries(value)) {
     assertJsonPortable(entry, `${path}.${key}`);
@@ -363,8 +348,4 @@ export {
   COLLATERAL_GENERATION_FINALIZE_DESCRIPTION,
   buildArtifactPayloads,
 } from "./finalize-tool";
-export type {
-  ArtifactPayload,
-  CollateralPiece,
-  FinalizeArgs,
-} from "./finalize-tool";
+export type { ArtifactPayload, CollateralPiece, FinalizeArgs } from "./finalize-tool";
diff --git a/workflows/collateral-generation/test/boundary.test.ts b/workflows/collateral-generation/test/boundary.test.ts
index dae881093e..147a2f795d 100644
--- a/workflows/collateral-generation/test/boundary.test.ts
+++ b/workflows/collateral-generation/test/boundary.test.ts
@@ -42,9 +42,7 @@ test("shipped sources import only published platform packages", async () => {
     const content = await readFile(file, "utf8");
     for (const match of content.matchAll(importPattern)) {
       const specifier = match[1] ?? "";
-      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) =>
-        specifier.startsWith(prefix),
-      );
+      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) => specifier.startsWith(prefix));
       if (!allowed) {
         violations.push(`${path.basename(file)}: ${specifier}`);
       }
diff --git a/workflows/collateral-generation/test/definition.test.ts b/workflows/collateral-generation/test/definition.test.ts
index 19cdfc8132..ee7923468a 100644
--- a/workflows/collateral-generation/test/definition.test.ts
+++ b/workflows/collateral-generation/test/definition.test.ts
@@ -29,9 +29,7 @@ const INPUT = {
 function collateralStep(definition: WorkflowDefinition): StepPrimitive {
   const primitive = definition.steps[COLLATERAL_GENERATION_STEP_ID];
   if (primitive === undefined || primitive.kind !== "step") {
-    throw new Error(
-      `definition has no step primitive named ${COLLATERAL_GENERATION_STEP_ID}`,
-    );
+    throw new Error(`definition has no step primitive named ${COLLATERAL_GENERATION_STEP_ID}`);
   }
   return primitive;
 }
@@ -39,9 +37,7 @@ function collateralStep(definition: WorkflowDefinition): StepPrimitive {
 test("the definition has exactly one step", () => {
   const definition = buildCollateralGenerationWorkflow(INPUT);
   expect(definition.stepOrder).toEqual([COLLATERAL_GENERATION_STEP_ID]);
-  expect(Object.keys(definition.steps)).toEqual([
-    COLLATERAL_GENERATION_STEP_ID,
-  ]);
+  expect(Object.keys(definition.steps)).toEqual([COLLATERAL_GENERATION_STEP_ID]);
 });
 
 test("the step carries an explicit per-turn timeout", () => {
@@ -52,9 +48,7 @@ test("the step carries an explicit per-turn timeout", () => {
 test("the workflow is triggered by mail to the given deployment address", () => {
   const definition = buildCollateralGenerationWorkflow(INPUT);
   expect(definition.id).toBe(COLLATERAL_GENERATION_WORKFLOW_ID);
-  expect(definition.triggers).toEqual([
-    { type: "mail", to: INPUT.triggerAddress },
-  ]);
+  expect(definition.triggers).toEqual([{ type: "mail", to: INPUT.triggerAddress }]);
 });
 
 test("the agent carries the fixed prompt, the preferences, and inlines no tools", () => {
@@ -68,19 +62,15 @@ test("the agent carries the fixed prompt, the preferences, and inlines no tools"
 
 test("the agent pins @corbits/granola-tools and @corbits/linear-tools by name and version", () => {
   const agent = collateralStep(buildCollateralGenerationWorkflow(INPUT)).agent;
-  expect(agent.toolPackagePins).toEqual([
-    ...COLLATERAL_GENERATION_TOOL_PACKAGE_PINS,
-  ]);
+  expect(agent.toolPackagePins).toEqual([...COLLATERAL_GENERATION_TOOL_PACKAGE_PINS]);
   expect(COLLATERAL_GENERATION_TOOL_PACKAGE_PINS).toEqual([
-    { name: "@corbits/granola-tools", version: "0.0.4" },
-    { name: "@corbits/linear-tools", version: "0.0.4" },
+    { name: "@corbits/granola-tools", version: "0.0.5" },
+    { name: "@corbits/linear-tools", version: "0.0.5" },
   ]);
 });
 
 test("the system prompt names the exact approval-gated finalize tool", () => {
-  expect(COLLATERAL_GENERATION_SYSTEM_PROMPT).toContain(
-    COLLATERAL_GENERATION_FINALIZE_TOOL_NAME,
-  );
+  expect(COLLATERAL_GENERATION_SYSTEM_PROMPT).toContain(COLLATERAL_GENERATION_FINALIZE_TOOL_NAME);
 });
 
 test("the system prompt offers every content type by its exact id", () => {
@@ -92,16 +82,9 @@ test("the system prompt offers every content type by its exact id", () => {
 
 test("the system prompt names the wired sources' real tools, and is honest about the pending one", () => {
   expect(COLLATERAL_GENERATION_SYSTEM_PROMPT).toContain("granola_get_note");
-  expect(COLLATERAL_GENERATION_SYSTEM_PROMPT).toContain(
-    "linear_list_recent_issues",
-  );
-  expect(COLLATERAL_GENERATION_WIRED_SOURCES).toEqual([
-    "Granola call notes",
-    "Linear issues",
-  ]);
-  expect(COLLATERAL_GENERATION_PENDING_SOURCES).toEqual([
-    "workbench artifacts",
-  ]);
+  expect(COLLATERAL_GENERATION_SYSTEM_PROMPT).toContain("linear_list_recent_issues");
+  expect(COLLATERAL_GENERATION_WIRED_SOURCES).toEqual(["Granola call notes", "Linear issues"]);
+  expect(COLLATERAL_GENERATION_PENDING_SOURCES).toEqual(["workbench artifacts"]);
   expect(COLLATERAL_GENERATION_SYSTEM_PROMPT).toMatch(
     /workbench artifacts are not yet a reachable source/i,
   );
@@ -113,16 +96,12 @@ test("the system prompt commits to an honest 'nothing to draft from' failure, no
 });
 
 test("the system prompt commits to a teaching artifact, not silence, when nothing is reachable", () => {
-  expect(COLLATERAL_GENERATION_SYSTEM_PROMPT).toContain(
-    COLLATERAL_GENERATION_FINALIZE_TOOL_NAME,
-  );
+  expect(COLLATERAL_GENERATION_SYSTEM_PROMPT).toContain(COLLATERAL_GENERATION_FINALIZE_TOOL_NAME);
   expect(COLLATERAL_GENERATION_SYSTEM_PROMPT).toMatch(/status-note/i);
 });
 
 test("the system prompt caps a rejected piece at one revise pass", () => {
-  expect(COLLATERAL_GENERATION_SYSTEM_PROMPT).toMatch(
-    /never revise the same piece a second time/i,
-  );
+  expect(COLLATERAL_GENERATION_SYSTEM_PROMPT).toMatch(/never revise the same piece a second time/i);
 });
 
 test("the system prompt collapses review into one approval, not a second gate", () => {
@@ -133,16 +112,12 @@ test("the system prompt collapses review into one approval, not a second gate",
 
 test("the system prompt commits to a calm terminal reply on denial, not an error", () => {
   expect(COLLATERAL_GENERATION_SYSTEM_PROMPT).toMatch(/not approved/i);
-  expect(COLLATERAL_GENERATION_SYSTEM_PROMPT).toMatch(
-    /never present a denial as an error/i,
-  );
+  expect(COLLATERAL_GENERATION_SYSTEM_PROMPT).toMatch(/never present a denial as an error/i);
 });
 
 test("the definition binds @corbits/granola-tools' and @corbits/linear-tools' declared handles to their tenant-owned credentials", () => {
   const definition = buildCollateralGenerationWorkflow(INPUT);
-  expect(definition.credentialBindings).toEqual([
-    ...COLLATERAL_GENERATION_CREDENTIAL_BINDINGS,
-  ]);
+  expect(definition.credentialBindings).toEqual([...COLLATERAL_GENERATION_CREDENTIAL_BINDINGS]);
   expect(COLLATERAL_GENERATION_CREDENTIAL_BINDINGS).toEqual([
     {
       package: "@corbits/granola-tools",
@@ -161,23 +136,21 @@ test("the definition binds @corbits/granola-tools' and @corbits/linear-tools' de
 
 test("the definition survives the workflow-asset JSON round-trip", () => {
   const definition = buildCollateralGenerationWorkflow(INPUT);
-  const revived: unknown = JSON.parse(
-    serializeCollateralGenerationWorkflow(definition),
-  );
+  const revived: unknown = JSON.parse(serializeCollateralGenerationWorkflow(definition));
   expect(revived).toEqual(definition);
 });
 
 test("an empty trigger address is rejected", () => {
-  expect(() =>
-    buildCollateralGenerationWorkflow({ ...INPUT, triggerAddress: "" }),
-  ).toThrow(/triggerAddress/);
+  expect(() => buildCollateralGenerationWorkflow({ ...INPUT, triggerAddress: "" })).toThrow(
+    /triggerAddress/,
+  );
 });
 
 test("a non-positive or fractional turn timeout is rejected", () => {
-  expect(() =>
-    buildCollateralGenerationWorkflow({ ...INPUT, turnTimeoutMs: 0 }),
-  ).toThrow(/turnTimeoutMs/);
-  expect(() =>
-    buildCollateralGenerationWorkflow({ ...INPUT, turnTimeoutMs: 0.5 }),
-  ).toThrow(/turnTimeoutMs/);
+  expect(() => buildCollateralGenerationWorkflow({ ...INPUT, turnTimeoutMs: 0 })).toThrow(
+    /turnTimeoutMs/,
+  );
+  expect(() => buildCollateralGenerationWorkflow({ ...INPUT, turnTimeoutMs: 0.5 })).toThrow(
+    /turnTimeoutMs/,
+  );
 });
diff --git a/workflows/credential-expiry/package.json b/workflows/credential-expiry/package.json
index dc6388b3d6..dc2cbbf47e 100644
--- a/workflows/credential-expiry/package.json
+++ b/workflows/credential-expiry/package.json
@@ -1,31 +1,21 @@
 {
   "name": "@corbits/credential-expiry-workflow",
-  "description": "Scheduled workflow that checks this tenant's credentials and mails a reconnect notice for any active credential past its own expiresAt, replacing the hub-owned credential-expiry sweep",
   "version": "0.0.1",
+  "description": "Scheduled workflow that checks this tenant's credentials and mails a reconnect notice for any active credential past its own expiresAt, replacing the hub-owned credential-expiry sweep",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "corbits": {
-    "workflow": {
-      "assetName": "credential-expiry",
-      "displayName": "Credential expiry check",
-      "automatable": true
-    }
-  },
-  "interchange": {
-    "workflow": "./src/index.ts"
-  },
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "workflows/credential-expiry"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "workflows/credential-expiry"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -37,12 +27,22 @@
   "dependencies": {
     "arktype": "catalog:"
   },
+  "devDependencies": {
+    "@types/bun": "catalog:",
+    "typescript": "catalog:"
+  },
   "peerDependencies": {
     "@intx/agent": "0.3.0",
     "@intx/workflow": "0.3.0"
   },
-  "devDependencies": {
-    "@types/bun": "catalog:",
-    "typescript": "catalog:"
+  "corbits": {
+    "workflow": {
+      "assetName": "credential-expiry",
+      "displayName": "Credential expiry check",
+      "automatable": true
+    }
+  },
+  "interchange": {
+    "workflow": "./src/index.ts"
   }
 }
diff --git a/workflows/credential-expiry/src/client.ts b/workflows/credential-expiry/src/client.ts
index 5105e2d72a..289812bd6b 100644
--- a/workflows/credential-expiry/src/client.ts
+++ b/workflows/credential-expiry/src/client.ts
@@ -38,9 +38,7 @@ const CredentialsPage = type({
 
 const PAGE_LIMIT = 100;
 
-function authHeaders(
-  config: CredentialExpiryClientConfig,
-): Record<string, string> {
+function authHeaders(config: CredentialExpiryClientConfig): Record<string, string> {
   return {
     authorization: `Bearer ${config.sidecarToken}`,
     "x-workflow-run-address": config.address,
@@ -59,9 +57,7 @@ async function readAllPages<T>(
   what: string,
   parse: (
     body: unknown,
-  ) =>
-    | { data: readonly T[]; nextCursor?: string | null | undefined }
-    | type.errors,
+  ) => { data: readonly T[]; nextCursor?: string | null | undefined } | type.errors,
 ): Promise<readonly T[]> {
   const doFetch = config.fetchImpl ?? fetch;
   const items: T[] = [];
@@ -69,20 +65,15 @@ async function readAllPages<T>(
   for (;;) {
     const params = new URLSearchParams({ limit: String(PAGE_LIMIT) });
     if (cursor !== undefined) params.set("cursor", cursor);
-    const response = await doFetch(
-      `${tenantBase(config)}${path}?${params.toString()}`,
-      { headers: authHeaders(config) },
-    );
+    const response = await doFetch(`${tenantBase(config)}${path}?${params.toString()}`, {
+      headers: authHeaders(config),
+    });
     if (!response.ok) {
-      throw new Error(
-        `${what} failed: ${response.status} ${response.statusText}`,
-      );
+      throw new Error(`${what} failed: ${response.status} ${response.statusText}`);
     }
     const parsed = parse(await response.json());
     if (parsed instanceof type.errors) {
-      throw new Error(
-        `${what} came back in an unexpected shape: ${parsed.summary}`,
-      );
+      throw new Error(`${what} came back in an unexpected shape: ${parsed.summary}`);
     }
     items.push(...parsed.data);
     const next = parsed.nextCursor;
@@ -100,16 +91,10 @@ export async function fetchTenantCredentials(
   config: CredentialExpiryClientConfig,
 ): Promise<readonly ExpiringCredential[]> {
   const [providers, credentials] = await Promise.all([
-    readAllPages(config, "/providers", "Listing providers", (body) =>
-      ProvidersPage(body),
-    ),
-    readAllPages(config, "/credentials", "Listing credentials", (body) =>
-      CredentialsPage(body),
-    ),
+    readAllPages(config, "/providers", "Listing providers", (body) => ProvidersPage(body)),
+    readAllPages(config, "/credentials", "Listing credentials", (body) => CredentialsPage(body)),
   ]);
-  const providerNameById = new Map(
-    providers.map((provider) => [provider.id, provider.name]),
-  );
+  const providerNameById = new Map(providers.map((provider) => [provider.id, provider.name]));
   return credentials.map((row) => ({
     credentialId: row.id,
     name: row.name,
diff --git a/workflows/credential-expiry/src/decide.test.ts b/workflows/credential-expiry/src/decide.test.ts
index a5f68b0d7e..cff4fd42bb 100644
--- a/workflows/credential-expiry/src/decide.test.ts
+++ b/workflows/credential-expiry/src/decide.test.ts
@@ -12,9 +12,7 @@ import type { ExpiringCredential } from "./decide";
 
 const now = new Date("2026-08-13T12:00:00.000Z");
 
-function credential(
-  overrides: Partial<ExpiringCredential> = {},
-): ExpiringCredential {
+function credential(overrides: Partial<ExpiringCredential> = {}): ExpiringCredential {
   return {
     credentialId: "cred_1",
     name: "Hugging Face",
@@ -33,10 +31,7 @@ describe("findDueCredentialExpiries", () => {
   });
 
   test("a credential expiring exactly at now is due", () => {
-    const due = findDueCredentialExpiries(
-      [credential({ expiresAt: now.toISOString() })],
-      now,
-    );
+    const due = findDueCredentialExpiries([credential({ expiresAt: now.toISOString() })], now);
     expect(due).toHaveLength(1);
   });
 
@@ -49,26 +44,17 @@ describe("findDueCredentialExpiries", () => {
   });
 
   test("a durable credential with no expiry is never due", () => {
-    const due = findDueCredentialExpiries(
-      [credential({ expiresAt: undefined })],
-      now,
-    );
+    const due = findDueCredentialExpiries([credential({ expiresAt: undefined })], now);
     expect(due).toHaveLength(0);
   });
 
   test("a null expiresAt (the stock route's shape for 'none') is never due", () => {
-    const due = findDueCredentialExpiries(
-      [credential({ expiresAt: null })],
-      now,
-    );
+    const due = findDueCredentialExpiries([credential({ expiresAt: null })], now);
     expect(due).toHaveLength(0);
   });
 
   test("an already-expired credential is not re-decided", () => {
-    const due = findDueCredentialExpiries(
-      [credential({ status: "expired" })],
-      now,
-    );
+    const due = findDueCredentialExpiries([credential({ status: "expired" })], now);
     expect(due).toHaveLength(0);
   });
 
@@ -81,10 +67,7 @@ describe("findDueCredentialExpiries", () => {
   });
 
   test("an unparseable expiresAt is skipped rather than crashing", () => {
-    const due = findDueCredentialExpiries(
-      [credential({ expiresAt: "not-a-date" })],
-      now,
-    );
+    const due = findDueCredentialExpiries([credential({ expiresAt: "not-a-date" })], now);
     expect(due).toHaveLength(0);
   });
 
@@ -97,9 +80,6 @@ describe("findDueCredentialExpiries", () => {
       ],
       now,
     );
-    expect(due.map((d) => d.credential.credentialId)).toEqual([
-      "cred_a",
-      "cred_c",
-    ]);
+    expect(due.map((d) => d.credential.credentialId)).toEqual(["cred_a", "cred_c"]);
   });
 });
diff --git a/workflows/credential-expiry/src/index.ts b/workflows/credential-expiry/src/index.ts
index 2021b26798..10c281db65 100644
--- a/workflows/credential-expiry/src/index.ts
+++ b/workflows/credential-expiry/src/index.ts
@@ -111,9 +111,7 @@ export function buildCredentialExpiryWorkflow(
  * symbols, bigints, non-finite numbers, class instances — is a loud
  * error naming the offending path instead of a corrupted asset.
  */
-export function serializeCredentialExpiryWorkflow(
-  definition: WorkflowDefinition,
-): string {
+export function serializeCredentialExpiryWorkflow(definition: WorkflowDefinition): string {
   assertJsonPortable(definition, "definition");
   return JSON.stringify(definition);
 }
@@ -133,8 +131,7 @@ function assertJsonPortable(value: unknown, path: string): void {
       break;
     default:
       throw new Error(
-        `${path} is a ${typeof value}, which does not survive JSON ` +
-          "serialization",
+        `${path} is a ${typeof value}, which does not survive JSON ` + "serialization",
       );
   }
   if (Array.isArray(value)) {
@@ -145,9 +142,7 @@ function assertJsonPortable(value: unknown, path: string): void {
   }
   const proto: unknown = Object.getPrototypeOf(value);
   if (proto !== Object.prototype && proto !== null) {
-    throw new Error(
-      `${path} is a non-plain object; JSON would flatten it lossily`,
-    );
+    throw new Error(`${path} is a non-plain object; JSON would flatten it lossily`);
   }
   for (const [key, entry] of Object.entries(value)) {
     assertJsonPortable(entry, `${path}.${key}`);
diff --git a/workflows/credential-expiry/src/tool.ts b/workflows/credential-expiry/src/tool.ts
index 6d134d5217..9ae5554a36 100644
--- a/workflows/credential-expiry/src/tool.ts
+++ b/workflows/credential-expiry/src/tool.ts
@@ -32,53 +32,52 @@ export interface WorkflowCredentialExpiryEnv extends BaseEnv {
   readonly address: string;
 }
 
-export const CREDENTIAL_EXPIRY_CHECK_TOOL =
-  defineTool<WorkflowCredentialExpiryEnv>({
-    id: "@corbits/workflow-credential-expiry/check",
-    requires: ["hubConnectionsUrl", "tenantId", "sidecarToken", "address"],
-    definitions: [{ name: CREDENTIAL_EXPIRY_CHECK_TOOL_NAME }],
-    factory: (env) => ({
-      definitions: [
-        {
-          name: CREDENTIAL_EXPIRY_CHECK_TOOL_NAME,
-          description: CREDENTIAL_EXPIRY_CHECK_DESCRIPTION,
-          inputSchema: { type: "object", properties: {}, required: [] },
-        },
-      ],
-      run: async (call) => {
-        try {
-          const candidates = await fetchTenantCredentials({
-            hubConnectionsUrl: env.hubConnectionsUrl,
-            tenantId: env.tenantId,
-            sidecarToken: env.sidecarToken,
-            address: env.address,
-          });
-          const due = findDueCredentialExpiries(candidates, new Date());
-          return {
-            callId: call.id,
-            isError: false,
-            content: JSON.stringify({
-              due: due.map(({ credential }) => ({
-                credentialId: credential.credentialId,
-                name: credential.name,
-                providerLabel: credential.providerLabel,
-                expiresAt: credential.expiresAt,
-              })),
-            }),
-          };
-        } catch (err) {
-          // report-error-ignore: this failure is surfaced to the calling
-          // agent as an error tool result, which it reports plainly in
-          // its reply rather than silently retrying — nothing here is
-          // swallowed.
-          return {
-            callId: call.id,
-            isError: true,
-            content: `Failed to check credential expiry: ${
-              err instanceof Error ? err.message : String(err)
-            }`,
-          };
-        }
+export const CREDENTIAL_EXPIRY_CHECK_TOOL = defineTool<WorkflowCredentialExpiryEnv>({
+  id: "@corbits/workflow-credential-expiry/check",
+  requires: ["hubConnectionsUrl", "tenantId", "sidecarToken", "address"],
+  definitions: [{ name: CREDENTIAL_EXPIRY_CHECK_TOOL_NAME }],
+  factory: (env) => ({
+    definitions: [
+      {
+        name: CREDENTIAL_EXPIRY_CHECK_TOOL_NAME,
+        description: CREDENTIAL_EXPIRY_CHECK_DESCRIPTION,
+        inputSchema: { type: "object", properties: {}, required: [] },
       },
-    }),
-  });
+    ],
+    run: async (call) => {
+      try {
+        const candidates = await fetchTenantCredentials({
+          hubConnectionsUrl: env.hubConnectionsUrl,
+          tenantId: env.tenantId,
+          sidecarToken: env.sidecarToken,
+          address: env.address,
+        });
+        const due = findDueCredentialExpiries(candidates, new Date());
+        return {
+          callId: call.id,
+          isError: false,
+          content: JSON.stringify({
+            due: due.map(({ credential }) => ({
+              credentialId: credential.credentialId,
+              name: credential.name,
+              providerLabel: credential.providerLabel,
+              expiresAt: credential.expiresAt,
+            })),
+          }),
+        };
+      } catch (err) {
+        // report-error-ignore: this failure is surfaced to the calling
+        // agent as an error tool result, which it reports plainly in
+        // its reply rather than silently retrying — nothing here is
+        // swallowed.
+        return {
+          callId: call.id,
+          isError: true,
+          content: `Failed to check credential expiry: ${
+            err instanceof Error ? err.message : String(err)
+          }`,
+        };
+      }
+    },
+  }),
+});
diff --git a/workflows/diligence-brief/package.json b/workflows/diligence-brief/package.json
index 92e10de126..20ddc9f7af 100644
--- a/workflows/diligence-brief/package.json
+++ b/workflows/diligence-brief/package.json
@@ -1,31 +1,21 @@
 {
   "name": "@corbits/diligence-brief-workflow",
-  "description": "Single-step, mail-triggered workflow that researches a company and writes a cited diligence brief, held for approval",
   "version": "0.0.1",
+  "description": "Single-step, mail-triggered workflow that researches a company and writes a cited diligence brief, held for approval",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "corbits": {
-    "workflow": {
-      "assetName": "diligence-brief",
-      "displayName": "Diligence brief",
-      "automatable": false
-    }
-  },
-  "interchange": {
-    "workflow": "./src/index.ts"
-  },
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "workflows/diligence-brief"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "workflows/diligence-brief"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -38,13 +28,23 @@
     "@corbits/memory": "github:corbitsdev/corbits-memory#9e6f213fa2c002b531d3f6af1aa0abd737b8afe3",
     "arktype": "catalog:"
   },
+  "devDependencies": {
+    "@types/bun": "catalog:",
+    "typescript": "catalog:"
+  },
   "peerDependencies": {
     "@intx/agent": "0.3.0",
     "@intx/types": "0.3.0",
     "@intx/workflow": "0.3.0"
   },
-  "devDependencies": {
-    "@types/bun": "catalog:",
-    "typescript": "catalog:"
+  "corbits": {
+    "workflow": {
+      "assetName": "diligence-brief",
+      "displayName": "Diligence brief",
+      "automatable": false
+    }
+  },
+  "interchange": {
+    "workflow": "./src/index.ts"
   }
 }
diff --git a/workflows/diligence-brief/src/artifact-client.test.ts b/workflows/diligence-brief/src/artifact-client.test.ts
index 4af392cfff..1e4d71c46e 100644
--- a/workflows/diligence-brief/src/artifact-client.test.ts
+++ b/workflows/diligence-brief/src/artifact-client.test.ts
@@ -27,17 +27,14 @@ test("posts to the workflow-artifacts endpoint and returns id/version", async ()
   );
 
   expect(result).toEqual({ id: "art_1", version: 1 });
-  expect(captured.url).toBe(
-    "https://hub.example.com/api/workflow-artifacts/artifacts",
-  );
+  expect(captured.url).toBe("https://hub.example.com/api/workflow-artifacts/artifacts");
   const headers = captured.init?.headers as Record<string, string>;
   expect(headers["authorization"]).toBe("Bearer sc-token");
   expect(headers["x-workflow-run-address"]).toBe("run_1@workflow");
 });
 
 test("throws on a non-ok HTTP response", async () => {
-  const fetchImpl = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  const fetchImpl = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
 
   await expect(
     createWorkflowArtifact(
diff --git a/workflows/diligence-brief/src/artifact-client.ts b/workflows/diligence-brief/src/artifact-client.ts
index b9c05fb3fe..c73ba4dc59 100644
--- a/workflows/diligence-brief/src/artifact-client.ts
+++ b/workflows/diligence-brief/src/artifact-client.ts
@@ -40,22 +40,17 @@ export async function createWorkflowArtifact(
   input: CreateWorkflowArtifactInput,
 ): Promise<CreatedWorkflowArtifact> {
   const doFetch = config.fetchImpl ?? fetch;
-  const response = await doFetch(
-    `${config.hubArtifactsUrl}/api/workflow-artifacts/artifacts`,
-    {
-      method: "POST",
-      headers: {
-        authorization: `Bearer ${config.sidecarToken}`,
-        "x-workflow-run-address": config.runAddress,
-        "content-type": "application/json",
-      },
-      body: JSON.stringify(input),
+  const response = await doFetch(`${config.hubArtifactsUrl}/api/workflow-artifacts/artifacts`, {
+    method: "POST",
+    headers: {
+      authorization: `Bearer ${config.sidecarToken}`,
+      "x-workflow-run-address": config.runAddress,
+      "content-type": "application/json",
     },
-  );
+    body: JSON.stringify(input),
+  });
   if (!response.ok) {
-    throw new Error(
-      `Workflow artifact create failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`Workflow artifact create failed: ${response.status} ${response.statusText}`);
   }
   const body: unknown = await response.json();
   const parsed = CreatedWorkflowArtifactResponse(body);
diff --git a/workflows/diligence-brief/src/finalize-tool.test.ts b/workflows/diligence-brief/src/finalize-tool.test.ts
index c6f1f5e215..70ed585ba2 100644
--- a/workflows/diligence-brief/src/finalize-tool.test.ts
+++ b/workflows/diligence-brief/src/finalize-tool.test.ts
@@ -14,9 +14,7 @@ test("the tool's definition marks itself approval-gated", () => {
 });
 
 test("the tool is namespaced under this workflow package, not a shared one", () => {
-  expect(DILIGENCE_BRIEF_FINALIZE_TOOL.id).toBe(
-    "@corbits/workflow-diligence-brief/finalize",
-  );
+  expect(DILIGENCE_BRIEF_FINALIZE_TOOL.id).toBe("@corbits/workflow-diligence-brief/finalize");
 });
 
 test("requires the sanctioned workflow-artifacts env keys", () => {
@@ -142,8 +140,7 @@ test("run persists a teaching payload on the no-data path with a status-note kin
 
 test("run returns an honest error result when persistence fails, never fabricating persisted: true", async () => {
   const originalFetch = globalThis.fetch;
-  globalThis.fetch = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  globalThis.fetch = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
 
   try {
     const bundle = DILIGENCE_BRIEF_FINALIZE_TOOL(testEnv());
diff --git a/workflows/diligence-brief/src/index.ts b/workflows/diligence-brief/src/index.ts
index ddd6c62d23..3748cd5f13 100644
--- a/workflows/diligence-brief/src/index.ts
+++ b/workflows/diligence-brief/src/index.ts
@@ -94,10 +94,7 @@ export const DILIGENCE_BRIEF_SECTIONS = [
   "Risks & Open Questions",
 ] as const;
 
-export const DILIGENCE_BRIEF_WIRED_SOURCES = [
-  "Web search",
-  "Firm memory",
-] as const;
+export const DILIGENCE_BRIEF_WIRED_SOURCES = ["Web search", "Firm memory"] as const;
 
 /**
  * Tool packages this definition pins (CL-5999 shape, matching
@@ -108,7 +105,7 @@ export const DILIGENCE_BRIEF_WIRED_SOURCES = [
  * resolved the same way through its own `interchange.tools` surface.
  */
 export const DILIGENCE_BRIEF_TOOL_PACKAGE_PINS: readonly ToolPackagePin[] = [
-  { name: "@corbits/web-search-tools", version: "0.0.3" },
+  { name: "@corbits/web-search-tools", version: "0.0.4" },
   { name: "@corbits/memory", version: "0.1.2" },
 ];
 
@@ -119,15 +116,14 @@ export const DILIGENCE_BRIEF_TOOL_PACKAGE_PINS: readonly ToolPackagePin[] = [
  * are populated for every workflow step directly, the same as
  * `@corbits/artifact-tools`' trio.
  */
-export const DILIGENCE_BRIEF_CREDENTIAL_BINDINGS: readonly CredentialBinding[] =
-  [
-    {
-      package: "@corbits/web-search-tools",
-      handle: "exa",
-      provider: "exa",
-      locator: "tenant",
-    },
-  ];
+export const DILIGENCE_BRIEF_CREDENTIAL_BINDINGS: readonly CredentialBinding[] = [
+  {
+    package: "@corbits/web-search-tools",
+    handle: "exa",
+    provider: "exa",
+    locator: "tenant",
+  },
+];
 
 const SECTION_LINES = DILIGENCE_BRIEF_SECTIONS.map(
   (heading, index) => `${String(index + 1)}. ${heading}`,
@@ -213,14 +209,10 @@ export function buildDiligenceBriefWorkflow(
   input: DiligenceBriefWorkflowInput,
 ): WorkflowDefinition {
   if (input.triggerAddress === "") {
-    throw new Error(
-      "buildDiligenceBriefWorkflow requires a non-empty triggerAddress",
-    );
+    throw new Error("buildDiligenceBriefWorkflow requires a non-empty triggerAddress");
   }
   if (!Number.isInteger(input.turnTimeoutMs) || input.turnTimeoutMs <= 0) {
-    throw new Error(
-      "buildDiligenceBriefWorkflow requires turnTimeoutMs to be a positive integer",
-    );
+    throw new Error("buildDiligenceBriefWorkflow requires turnTimeoutMs to be a positive integer");
   }
   return defineWorkflow({
     id: DILIGENCE_BRIEF_WORKFLOW_ID,
@@ -252,9 +244,7 @@ export function buildDiligenceBriefWorkflow(
  * symbols, bigints, non-finite numbers, class instances — is a loud
  * error naming the offending path instead of a corrupted asset.
  */
-export function serializeDiligenceBriefWorkflow(
-  definition: WorkflowDefinition,
-): string {
+export function serializeDiligenceBriefWorkflow(definition: WorkflowDefinition): string {
   assertJsonPortable(definition, "definition");
   return JSON.stringify(definition);
 }
@@ -274,8 +264,7 @@ function assertJsonPortable(value: unknown, path: string): void {
       break;
     default:
       throw new Error(
-        `${path} is a ${typeof value}, which does not survive JSON ` +
-          "serialization",
+        `${path} is a ${typeof value}, which does not survive JSON ` + "serialization",
       );
   }
   if (Array.isArray(value)) {
@@ -286,9 +275,7 @@ function assertJsonPortable(value: unknown, path: string): void {
   }
   const proto: unknown = Object.getPrototypeOf(value);
   if (proto !== Object.prototype && proto !== null) {
-    throw new Error(
-      `${path} is a non-plain object; JSON would flatten it lossily`,
-    );
+    throw new Error(`${path} is a non-plain object; JSON would flatten it lossily`);
   }
   for (const [key, entry] of Object.entries(value)) {
     assertJsonPortable(entry, `${path}.${key}`);
diff --git a/workflows/diligence-brief/test/boundary.test.ts b/workflows/diligence-brief/test/boundary.test.ts
index 1874d3d43a..0ccf8ceb1b 100644
--- a/workflows/diligence-brief/test/boundary.test.ts
+++ b/workflows/diligence-brief/test/boundary.test.ts
@@ -42,9 +42,7 @@ test("shipped sources import only published platform packages", async () => {
     const content = await readFile(file, "utf8");
     for (const match of content.matchAll(importPattern)) {
       const specifier = match[1] ?? "";
-      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) =>
-        specifier.startsWith(prefix),
-      );
+      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) => specifier.startsWith(prefix));
       if (!allowed) {
         violations.push(`${path.basename(file)}: ${specifier}`);
       }
diff --git a/workflows/diligence-brief/test/definition.test.ts b/workflows/diligence-brief/test/definition.test.ts
index d97b47beaf..6a1f8dedf7 100644
--- a/workflows/diligence-brief/test/definition.test.ts
+++ b/workflows/diligence-brief/test/definition.test.ts
@@ -36,19 +36,15 @@ test("the definition is one mail-triggered step", () => {
   const definition = buildDiligenceBriefWorkflow(INPUT);
   expect(definition.id).toBe(DILIGENCE_BRIEF_WORKFLOW_ID);
   expect(definition.stepOrder).toEqual([DILIGENCE_BRIEF_STEP_ID]);
-  expect(definition.triggers).toEqual([
-    { type: "mail", to: INPUT.triggerAddress },
-  ]);
+  expect(definition.triggers).toEqual([{ type: "mail", to: INPUT.triggerAddress }]);
 });
 
 test("the step pins web-search and memory tool packages and sets an explicit turn timeout", () => {
   const primitive = briefStep(buildDiligenceBriefWorkflow(INPUT));
   expect(primitive.timeout).toBe(INPUT.turnTimeoutMs);
-  expect(primitive.agent.toolPackagePins).toEqual(
-    DILIGENCE_BRIEF_TOOL_PACKAGE_PINS,
-  );
+  expect(primitive.agent.toolPackagePins).toEqual(DILIGENCE_BRIEF_TOOL_PACKAGE_PINS);
   expect(DILIGENCE_BRIEF_TOOL_PACKAGE_PINS).toEqual([
-    { name: "@corbits/web-search-tools", version: "0.0.3" },
+    { name: "@corbits/web-search-tools", version: "0.0.4" },
     { name: "@corbits/memory-tools", version: "0.0.4" },
   ]);
   expect(primitive.agent.toolFactories).toEqual([]);
@@ -56,9 +52,7 @@ test("the step pins web-search and memory tool packages and sets an explicit tur
 
 test("the definition binds the web-search package's exa handle to the tenant's connection", () => {
   const definition = buildDiligenceBriefWorkflow(INPUT);
-  expect(definition.credentialBindings).toEqual(
-    DILIGENCE_BRIEF_CREDENTIAL_BINDINGS,
-  );
+  expect(definition.credentialBindings).toEqual(DILIGENCE_BRIEF_CREDENTIAL_BINDINGS);
   expect(DILIGENCE_BRIEF_CREDENTIAL_BINDINGS).toEqual([
     {
       package: "@corbits/web-search-tools",
@@ -93,9 +87,7 @@ test("the prompt commits to checking memory before the web, and to the two wired
   expect(DILIGENCE_BRIEF_WIRED_SOURCES).toEqual(["Web search", "Firm memory"]);
   expect(prompt).toContain("memory_search");
   expect(prompt).toContain("web_search");
-  expect(prompt.indexOf("memory_search")).toBeLessThan(
-    prompt.indexOf("web_search"),
-  );
+  expect(prompt.indexOf("memory_search")).toBeLessThan(prompt.indexOf("web_search"));
   expect(prompt).toMatch(/never invent results/i);
   expect(prompt).toMatch(/never fabricate/i);
 });
@@ -117,9 +109,7 @@ test("the prompt commits to a calm terminal reply on denial, not an error", () =
 
 test("the definition survives the workflow-asset round trip", () => {
   const definition = buildDiligenceBriefWorkflow(INPUT);
-  const round = JSON.parse(
-    serializeDiligenceBriefWorkflow(definition),
-  ) as WorkflowDefinition;
+  const round = JSON.parse(serializeDiligenceBriefWorkflow(definition)) as WorkflowDefinition;
   expect(round).toEqual(definition);
 });
 
@@ -144,17 +134,15 @@ test("serialization fails loud on a function-valued field, naming its path", ()
     },
   } as unknown as WorkflowDefinition;
   expect(() => serializeDiligenceBriefWorkflow(poisoned)).toThrow(
-    new RegExp(
-      `steps\\.${DILIGENCE_BRIEF_STEP_ID}\\.agent\\.toolFactories\\[0\\]`,
-    ),
+    new RegExp(`steps\\.${DILIGENCE_BRIEF_STEP_ID}\\.agent\\.toolFactories\\[0\\]`),
   );
 });
 
 test("a blank trigger address or a bad timeout is refused at build time", () => {
-  expect(() =>
-    buildDiligenceBriefWorkflow({ ...INPUT, triggerAddress: "" }),
-  ).toThrow(/triggerAddress/);
-  expect(() =>
-    buildDiligenceBriefWorkflow({ ...INPUT, turnTimeoutMs: 0 }),
-  ).toThrow(/turnTimeoutMs/);
+  expect(() => buildDiligenceBriefWorkflow({ ...INPUT, triggerAddress: "" })).toThrow(
+    /triggerAddress/,
+  );
+  expect(() => buildDiligenceBriefWorkflow({ ...INPUT, turnTimeoutMs: 0 })).toThrow(
+    /turnTimeoutMs/,
+  );
 });
diff --git a/workflows/echo/package.json b/workflows/echo/package.json
index a699d74c9f..8368fd077b 100644
--- a/workflows/echo/package.json
+++ b/workflows/echo/package.json
@@ -1,31 +1,21 @@
 {
   "name": "@corbits/echo-workflow",
-  "description": "Minimal mail-triggered conversational workflow that echoes each inbound message back verbatim",
   "version": "0.0.1",
+  "description": "Minimal mail-triggered conversational workflow that echoes each inbound message back verbatim",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "corbits": {
-    "workflow": {
-      "assetName": "echo",
-      "displayName": "Echo",
-      "automatable": false
-    }
-  },
-  "interchange": {
-    "workflow": "./src/index.ts"
-  },
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "workflows/echo"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "workflows/echo"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -34,12 +24,22 @@
     "typecheck": "tsc --noEmit",
     "test": "bun test"
   },
+  "devDependencies": {
+    "@types/bun": "catalog:",
+    "typescript": "catalog:"
+  },
   "peerDependencies": {
     "@intx/agent": "0.3.0",
     "@intx/workflow": "0.3.0"
   },
-  "devDependencies": {
-    "@types/bun": "catalog:",
-    "typescript": "catalog:"
+  "corbits": {
+    "workflow": {
+      "assetName": "echo",
+      "displayName": "Echo",
+      "automatable": false
+    }
+  },
+  "interchange": {
+    "workflow": "./src/index.ts"
   }
 }
diff --git a/workflows/echo/src/index.ts b/workflows/echo/src/index.ts
index e282a9e4f3..7b82052816 100644
--- a/workflows/echo/src/index.ts
+++ b/workflows/echo/src/index.ts
@@ -47,16 +47,12 @@ export interface EchoWorkflowInput {
  * run forever. Tools are never inlined on the definition: they arrive
  * as packages on the deploy, keeping the definition pure data.
  */
-export function buildEchoWorkflow(
-  input: EchoWorkflowInput,
-): WorkflowDefinition {
+export function buildEchoWorkflow(input: EchoWorkflowInput): WorkflowDefinition {
   if (input.triggerAddress === "") {
     throw new Error("buildEchoWorkflow requires a non-empty triggerAddress");
   }
   if (!Number.isInteger(input.turnTimeoutMs) || input.turnTimeoutMs <= 0) {
-    throw new Error(
-      "buildEchoWorkflow requires turnTimeoutMs to be a positive integer",
-    );
+    throw new Error("buildEchoWorkflow requires turnTimeoutMs to be a positive integer");
   }
   return defineWorkflow({
     id: ECHO_WORKFLOW_ID,
@@ -105,8 +101,7 @@ function assertJsonPortable(value: unknown, path: string): void {
       break;
     default:
       throw new Error(
-        `${path} is a ${typeof value}, which does not survive JSON ` +
-          "serialization",
+        `${path} is a ${typeof value}, which does not survive JSON ` + "serialization",
       );
   }
   if (Array.isArray(value)) {
@@ -117,9 +112,7 @@ function assertJsonPortable(value: unknown, path: string): void {
   }
   const proto: unknown = Object.getPrototypeOf(value);
   if (proto !== Object.prototype && proto !== null) {
-    throw new Error(
-      `${path} is a non-plain object; JSON would flatten it lossily`,
-    );
+    throw new Error(`${path} is a non-plain object; JSON would flatten it lossily`);
   }
   for (const [key, entry] of Object.entries(value)) {
     assertJsonPortable(entry, `${path}.${key}`);
diff --git a/workflows/echo/test/boundary.test.ts b/workflows/echo/test/boundary.test.ts
index 4b14b084f3..7cd3621b2f 100644
--- a/workflows/echo/test/boundary.test.ts
+++ b/workflows/echo/test/boundary.test.ts
@@ -39,9 +39,7 @@ test("shipped sources import only published platform packages", async () => {
     const content = await readFile(file, "utf8");
     for (const match of content.matchAll(importPattern)) {
       const specifier = match[1] ?? "";
-      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) =>
-        specifier.startsWith(prefix),
-      );
+      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) => specifier.startsWith(prefix));
       if (!allowed) {
         violations.push(`${path.basename(file)}: ${specifier}`);
       }
diff --git a/workflows/echo/test/definition.test.ts b/workflows/echo/test/definition.test.ts
index e52b69cc59..3de9e64fb7 100644
--- a/workflows/echo/test/definition.test.ts
+++ b/workflows/echo/test/definition.test.ts
@@ -45,9 +45,7 @@ test("the step carries an explicit per-turn timeout", () => {
 test("the workflow is triggered by mail to the given deployment address", () => {
   const definition = buildEchoWorkflow(INPUT);
   expect(definition.id).toBe(ECHO_WORKFLOW_ID);
-  expect(definition.triggers).toEqual([
-    { type: "mail", to: INPUT.triggerAddress },
-  ]);
+  expect(definition.triggers).toEqual([{ type: "mail", to: INPUT.triggerAddress }]);
 });
 
 test("the agent instructs echoing, carries the preferences, and inlines no tools", () => {
@@ -85,22 +83,14 @@ test("serialization fails loud on a function-valued field, naming its path", ()
       },
     },
   } as unknown as WorkflowDefinition;
-  expect(() => serializeEchoWorkflow(poisoned)).toThrow(
-    /steps\.echo\.agent\.toolFactories\[0\]/,
-  );
+  expect(() => serializeEchoWorkflow(poisoned)).toThrow(/steps\.echo\.agent\.toolFactories\[0\]/);
 });
 
 test("an empty trigger address is rejected", () => {
-  expect(() => buildEchoWorkflow({ ...INPUT, triggerAddress: "" })).toThrow(
-    /triggerAddress/,
-  );
+  expect(() => buildEchoWorkflow({ ...INPUT, triggerAddress: "" })).toThrow(/triggerAddress/);
 });
 
 test("a non-positive or fractional turn timeout is rejected", () => {
-  expect(() => buildEchoWorkflow({ ...INPUT, turnTimeoutMs: 0 })).toThrow(
-    /turnTimeoutMs/,
-  );
-  expect(() => buildEchoWorkflow({ ...INPUT, turnTimeoutMs: 0.5 })).toThrow(
-    /turnTimeoutMs/,
-  );
+  expect(() => buildEchoWorkflow({ ...INPUT, turnTimeoutMs: 0 })).toThrow(/turnTimeoutMs/);
+  expect(() => buildEchoWorkflow({ ...INPUT, turnTimeoutMs: 0.5 })).toThrow(/turnTimeoutMs/);
 });
diff --git a/workflows/exa-topic-watch/package.json b/workflows/exa-topic-watch/package.json
index 59cc2373e6..131b2121a6 100644
--- a/workflows/exa-topic-watch/package.json
+++ b/workflows/exa-topic-watch/package.json
@@ -1,31 +1,21 @@
 {
   "name": "@corbits/exa-topic-watch-workflow",
-  "description": "Scheduled web topic watch: searches the live web for one topic each run and publishes a short digest, held for approval",
   "version": "0.0.1",
+  "description": "Scheduled web topic watch: searches the live web for one topic each run and publishes a short digest, held for approval",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "corbits": {
-    "workflow": {
-      "assetName": "exa-topic-watch",
-      "displayName": "Web topic watch",
-      "automatable": true
-    }
-  },
-  "interchange": {
-    "workflow": "./src/index.ts"
-  },
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "workflows/exa-topic-watch"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "workflows/exa-topic-watch"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -37,13 +27,23 @@
   "dependencies": {
     "arktype": "catalog:"
   },
+  "devDependencies": {
+    "@types/bun": "catalog:",
+    "typescript": "catalog:"
+  },
   "peerDependencies": {
     "@intx/agent": "0.3.0",
     "@intx/types": "0.3.0",
     "@intx/workflow": "0.3.0"
   },
-  "devDependencies": {
-    "@types/bun": "catalog:",
-    "typescript": "catalog:"
+  "corbits": {
+    "workflow": {
+      "assetName": "exa-topic-watch",
+      "displayName": "Web topic watch",
+      "automatable": true
+    }
+  },
+  "interchange": {
+    "workflow": "./src/index.ts"
   }
 }
diff --git a/workflows/exa-topic-watch/src/artifact-client.test.ts b/workflows/exa-topic-watch/src/artifact-client.test.ts
index 2a4088cc47..1c86414419 100644
--- a/workflows/exa-topic-watch/src/artifact-client.test.ts
+++ b/workflows/exa-topic-watch/src/artifact-client.test.ts
@@ -27,17 +27,14 @@ test("posts to the workflow-artifacts endpoint and returns id/version", async ()
   );
 
   expect(result).toEqual({ id: "art_1", version: 1 });
-  expect(captured.url).toBe(
-    "https://hub.example.com/api/workflow-artifacts/artifacts",
-  );
+  expect(captured.url).toBe("https://hub.example.com/api/workflow-artifacts/artifacts");
   const headers = captured.init?.headers as Record<string, string>;
   expect(headers["authorization"]).toBe("Bearer sc-token");
   expect(headers["x-workflow-run-address"]).toBe("run_1@workflow");
 });
 
 test("throws on a non-ok HTTP response", async () => {
-  const fetchImpl = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  const fetchImpl = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
 
   await expect(
     createWorkflowArtifact(
diff --git a/workflows/exa-topic-watch/src/artifact-client.ts b/workflows/exa-topic-watch/src/artifact-client.ts
index f87eb50db5..b9d56ca425 100644
--- a/workflows/exa-topic-watch/src/artifact-client.ts
+++ b/workflows/exa-topic-watch/src/artifact-client.ts
@@ -39,22 +39,17 @@ export async function createWorkflowArtifact(
   input: CreateWorkflowArtifactInput,
 ): Promise<CreatedWorkflowArtifact> {
   const doFetch = config.fetchImpl ?? fetch;
-  const response = await doFetch(
-    `${config.hubArtifactsUrl}/api/workflow-artifacts/artifacts`,
-    {
-      method: "POST",
-      headers: {
-        authorization: `Bearer ${config.sidecarToken}`,
-        "x-workflow-run-address": config.runAddress,
-        "content-type": "application/json",
-      },
-      body: JSON.stringify(input),
+  const response = await doFetch(`${config.hubArtifactsUrl}/api/workflow-artifacts/artifacts`, {
+    method: "POST",
+    headers: {
+      authorization: `Bearer ${config.sidecarToken}`,
+      "x-workflow-run-address": config.runAddress,
+      "content-type": "application/json",
     },
-  );
+    body: JSON.stringify(input),
+  });
   if (!response.ok) {
-    throw new Error(
-      `Workflow artifact create failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`Workflow artifact create failed: ${response.status} ${response.statusText}`);
   }
   const body: unknown = await response.json();
   const parsed = CreatedWorkflowArtifactResponse(body);
diff --git a/workflows/exa-topic-watch/src/finalize-tool.test.ts b/workflows/exa-topic-watch/src/finalize-tool.test.ts
index 7dbbe795a1..4a2f3c22e7 100644
--- a/workflows/exa-topic-watch/src/finalize-tool.test.ts
+++ b/workflows/exa-topic-watch/src/finalize-tool.test.ts
@@ -14,9 +14,7 @@ test("the tool's definition marks itself approval-gated", () => {
 });
 
 test("the tool is namespaced under this workflow package, not a shared one", () => {
-  expect(EXA_TOPIC_WATCH_FINALIZE_TOOL.id).toBe(
-    "@corbits/workflow-exa-topic-watch/finalize",
-  );
+  expect(EXA_TOPIC_WATCH_FINALIZE_TOOL.id).toBe("@corbits/workflow-exa-topic-watch/finalize");
 });
 
 test("requires the sanctioned workflow-artifacts env keys", () => {
@@ -119,9 +117,7 @@ test("run persists a quiet-run note with a status-note kind, distinct from a rea
         arguments: {
           outcome: "status-note",
           title: "Web topic watch: agentic coding tools — quiet week",
-          content:
-            "Searched the web for this topic and found nothing new " +
-            "since the last run.",
+          content: "Searched the web for this topic and found nothing new " + "since the last run.",
         },
       },
       new AbortController().signal,
@@ -141,8 +137,7 @@ test("run persists a quiet-run note with a status-note kind, distinct from a rea
 
 test("run returns an honest error result when persistence fails, never fabricating persisted: true", async () => {
   const originalFetch = globalThis.fetch;
-  globalThis.fetch = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  globalThis.fetch = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
 
   try {
     const bundle = EXA_TOPIC_WATCH_FINALIZE_TOOL(testEnv());
diff --git a/workflows/exa-topic-watch/src/index.ts b/workflows/exa-topic-watch/src/index.ts
index bba7a8e6cd..c3e32c0b7d 100644
--- a/workflows/exa-topic-watch/src/index.ts
+++ b/workflows/exa-topic-watch/src/index.ts
@@ -69,11 +69,7 @@ export const EXA_MCP_SERVER_SLUG = "exa";
 
 /** The digest's fixed section structure — this deployment's contract, and
  * what the system prompt below instructs the model to fill in. */
-export const EXA_TOPIC_WATCH_SECTIONS = [
-  "What moved",
-  "Takeaways",
-  "Worth a closer look",
-] as const;
+export const EXA_TOPIC_WATCH_SECTIONS = ["What moved", "Takeaways", "Worth a closer look"] as const;
 
 const CORBITS_VOCABULARY =
   "Treat Corbits, Corbits.dev, Interchange, and Faremeter as canonical " +
@@ -93,8 +89,7 @@ export const EXA_TOPIC_WATCH_SYSTEM_PROMPT = [
     "entirely and finalize a status note saying what a topic looks like.",
   `Searching: web search reaches you through the "${EXA_MCP_SERVER_SLUG}" server. Call \`mcp_list_tools\` once for that server to learn its search tool's exact name and arguments, then call \`mcp_read\` at most three times, each with a differently-angled query for the same topic. If the server is not connected, or a call comes back as an error, that is an honest "the web is not reachable right now" — say so plainly, and never invent results to cover for it.`,
   `Write the digest as markdown with exactly these sections, in order: ${EXA_TOPIC_WATCH_SECTIONS.join(", ")}. "What moved" is one line. "Takeaways" is three to seven bullets, each linking its source. "Worth a closer look" is at most three items, each with one sentence on why. No preamble.`,
-  "Every claim carries the link it came from. A claim you cannot link " +
-    "does not go in.",
+  "Every claim carries the link it came from. A claim you cannot link " + "does not go in.",
   `Finalizing: call \`${EXA_TOPIC_WATCH_FINALIZE_TOOL_NAME}\` exactly once with outcome "digest", a short title (e.g. "Web topic watch: <topic>"), and the full markdown digest as content. This call requires a human's approval before it completes. A quiet run is still a run: when nothing new surfaced, or the web was unreachable, call the same tool once with outcome "status-note", a plain title (e.g. "Web topic watch: <topic> — quiet week"), and content that honestly says what you searched for and what you found or could not reach. Never end a run without finalizing.`,
   "If the finalize call succeeds, present the digest as your reply " +
     "exactly as written, with no commentary about the approval mechanism " +
@@ -110,7 +105,7 @@ export const EXA_TOPIC_WATCH_SYSTEM_PROMPT = [
  * travels with the deploy of this package itself.
  */
 export const EXA_TOPIC_WATCH_TOOL_PACKAGE_PINS: readonly ToolPackagePin[] = [
-  { name: "@corbits/mcp-tools", version: "0.0.11" },
+  { name: "@corbits/mcp-tools", version: "0.0.12" },
 ];
 
 /**
@@ -133,18 +128,12 @@ export interface ExaTopicWatchWorkflowInput {
  * never inlined on the definition — they arrive as pinned packages on the
  * deploy, keeping the definition pure data.
  */
-export function buildExaTopicWatchWorkflow(
-  input: ExaTopicWatchWorkflowInput,
-): WorkflowDefinition {
+export function buildExaTopicWatchWorkflow(input: ExaTopicWatchWorkflowInput): WorkflowDefinition {
   if (input.triggerAddress === "") {
-    throw new Error(
-      "buildExaTopicWatchWorkflow requires a non-empty triggerAddress",
-    );
+    throw new Error("buildExaTopicWatchWorkflow requires a non-empty triggerAddress");
   }
   if (!Number.isInteger(input.turnTimeoutMs) || input.turnTimeoutMs <= 0) {
-    throw new Error(
-      "buildExaTopicWatchWorkflow requires turnTimeoutMs to be a positive integer",
-    );
+    throw new Error("buildExaTopicWatchWorkflow requires turnTimeoutMs to be a positive integer");
   }
   return defineWorkflow({
     id: EXA_TOPIC_WATCH_WORKFLOW_ID,
@@ -174,9 +163,7 @@ export function buildExaTopicWatchWorkflow(
  * anything JSON would silently drop or mangle is a loud error naming the
  * offending path instead of a corrupted asset.
  */
-export function serializeExaTopicWatchWorkflow(
-  definition: WorkflowDefinition,
-): string {
+export function serializeExaTopicWatchWorkflow(definition: WorkflowDefinition): string {
   assertJsonPortable(definition, "definition");
   return JSON.stringify(definition);
 }
@@ -196,8 +183,7 @@ function assertJsonPortable(value: unknown, path: string): void {
       break;
     default:
       throw new Error(
-        `${path} is a ${typeof value}, which does not survive JSON ` +
-          "serialization",
+        `${path} is a ${typeof value}, which does not survive JSON ` + "serialization",
       );
   }
   if (Array.isArray(value)) {
@@ -208,9 +194,7 @@ function assertJsonPortable(value: unknown, path: string): void {
   }
   const proto: unknown = Object.getPrototypeOf(value);
   if (proto !== Object.prototype && proto !== null) {
-    throw new Error(
-      `${path} is a non-plain object; JSON would flatten it lossily`,
-    );
+    throw new Error(`${path} is a non-plain object; JSON would flatten it lossily`);
   }
   for (const [key, entry] of Object.entries(value)) {
     assertJsonPortable(entry, `${path}.${key}`);
diff --git a/workflows/exa-topic-watch/test/boundary.test.ts b/workflows/exa-topic-watch/test/boundary.test.ts
index c4669d42fb..8bd42a25f3 100644
--- a/workflows/exa-topic-watch/test/boundary.test.ts
+++ b/workflows/exa-topic-watch/test/boundary.test.ts
@@ -41,9 +41,7 @@ test("shipped sources import only published platform packages", async () => {
     const content = await readFile(file, "utf8");
     for (const match of content.matchAll(importPattern)) {
       const specifier = match[1] ?? "";
-      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) =>
-        specifier.startsWith(prefix),
-      );
+      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) => specifier.startsWith(prefix));
       if (!allowed) {
         violations.push(`${path.basename(file)}: ${specifier}`);
       }
diff --git a/workflows/exa-topic-watch/test/definition.test.ts b/workflows/exa-topic-watch/test/definition.test.ts
index fa9e3c9c2a..8e4202f6fa 100644
--- a/workflows/exa-topic-watch/test/definition.test.ts
+++ b/workflows/exa-topic-watch/test/definition.test.ts
@@ -26,9 +26,7 @@ const INPUT = {
 function digestStep(definition: WorkflowDefinition): StepPrimitive {
   const primitive = definition.steps[EXA_TOPIC_WATCH_STEP_ID];
   if (primitive === undefined || primitive.kind !== "step") {
-    throw new Error(
-      `definition has no step primitive named ${EXA_TOPIC_WATCH_STEP_ID}`,
-    );
+    throw new Error(`definition has no step primitive named ${EXA_TOPIC_WATCH_STEP_ID}`);
   }
   return primitive;
 }
@@ -41,9 +39,7 @@ test("the definition folds the OG six-step pipeline into exactly one step", () =
 
 test("the definition uses no action primitive, which this host cannot dispatch", () => {
   const definition = buildExaTopicWatchWorkflow(INPUT);
-  const kinds = Object.values(definition.steps).map(
-    (primitive) => primitive.kind,
-  );
+  const kinds = Object.values(definition.steps).map((primitive) => primitive.kind);
   expect(kinds).toEqual(["step"]);
 });
 
@@ -55,9 +51,7 @@ test("the step carries an explicit per-turn timeout", () => {
 test("the workflow is triggered by mail to the given deployment address", () => {
   const definition = buildExaTopicWatchWorkflow(INPUT);
   expect(definition.id).toBe(EXA_TOPIC_WATCH_WORKFLOW_ID);
-  expect(definition.triggers).toEqual([
-    { type: "mail", to: INPUT.triggerAddress },
-  ]);
+  expect(definition.triggers).toEqual([{ type: "mail", to: INPUT.triggerAddress }]);
 });
 
 test("the agent carries the fixed prompt and the caller's preferences, and inlines no tools", () => {
@@ -71,7 +65,7 @@ test("the step pins the MCP tools bundle, the one package a deploy here can reso
   const agent = digestStep(buildExaTopicWatchWorkflow(INPUT)).agent;
   expect(agent.toolPackagePins).toEqual(EXA_TOPIC_WATCH_TOOL_PACKAGE_PINS);
   expect(EXA_TOPIC_WATCH_TOOL_PACKAGE_PINS).toEqual([
-    { name: "@corbits/mcp-tools", version: "0.0.11" },
+    { name: "@corbits/mcp-tools", version: "0.0.12" },
   ]);
 });
 
@@ -94,17 +88,13 @@ test("the prompt names every digest section and both finalize outcomes", () => {
   for (const section of EXA_TOPIC_WATCH_SECTIONS) {
     expect(EXA_TOPIC_WATCH_SYSTEM_PROMPT).toContain(section);
   }
-  expect(EXA_TOPIC_WATCH_SYSTEM_PROMPT).toContain(
-    EXA_TOPIC_WATCH_FINALIZE_TOOL_NAME,
-  );
+  expect(EXA_TOPIC_WATCH_SYSTEM_PROMPT).toContain(EXA_TOPIC_WATCH_FINALIZE_TOOL_NAME);
   expect(EXA_TOPIC_WATCH_SYSTEM_PROMPT).toContain('outcome "digest"');
   expect(EXA_TOPIC_WATCH_SYSTEM_PROMPT).toContain('outcome "status-note"');
 });
 
 test("a quiet run still finalizes rather than ending silently", () => {
-  expect(EXA_TOPIC_WATCH_SYSTEM_PROMPT).toContain(
-    "Never end a run without finalizing",
-  );
+  expect(EXA_TOPIC_WATCH_SYSTEM_PROMPT).toContain("Never end a run without finalizing");
 });
 
 test("the definition survives the workflow-asset JSON round trip unchanged", () => {
@@ -126,13 +116,13 @@ test("serializing a definition JSON would mangle fails loudly, naming the path",
 });
 
 test("an empty trigger address is rejected at build time", () => {
-  expect(() =>
-    buildExaTopicWatchWorkflow({ ...INPUT, triggerAddress: "" }),
-  ).toThrow(/non-empty triggerAddress/);
+  expect(() => buildExaTopicWatchWorkflow({ ...INPUT, triggerAddress: "" })).toThrow(
+    /non-empty triggerAddress/,
+  );
 });
 
 test("a non-positive turn timeout is rejected at build time", () => {
-  expect(() =>
-    buildExaTopicWatchWorkflow({ ...INPUT, turnTimeoutMs: 0 }),
-  ).toThrow(/positive integer/);
+  expect(() => buildExaTopicWatchWorkflow({ ...INPUT, turnTimeoutMs: 0 })).toThrow(
+    /positive integer/,
+  );
 });
diff --git a/workflows/granola-call/package.json b/workflows/granola-call/package.json
index 20104c5a8d..85c237ede5 100644
--- a/workflows/granola-call/package.json
+++ b/workflows/granola-call/package.json
@@ -1,31 +1,21 @@
 {
   "name": "@corbits/granola-call-workflow",
-  "description": "Polls Granola for new calls and starts one call-notes run per call without a published call-notes artifact yet",
   "version": "0.0.1",
+  "description": "Polls Granola for new calls and starts one call-notes run per call without a published call-notes artifact yet",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "corbits": {
-    "workflow": {
-      "assetName": "granola-call",
-      "displayName": "Granola call notes",
-      "automatable": true
-    }
-  },
-  "interchange": {
-    "workflow": "./src/index.ts"
-  },
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "workflows/granola-call"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "workflows/granola-call"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -37,13 +27,23 @@
   "dependencies": {
     "arktype": "catalog:"
   },
+  "devDependencies": {
+    "@types/bun": "catalog:",
+    "typescript": "catalog:"
+  },
   "peerDependencies": {
     "@intx/agent": "0.3.0",
     "@intx/types": "0.3.0",
     "@intx/workflow": "0.3.0"
   },
-  "devDependencies": {
-    "@types/bun": "catalog:",
-    "typescript": "catalog:"
+  "corbits": {
+    "workflow": {
+      "assetName": "granola-call",
+      "displayName": "Granola call notes",
+      "automatable": true
+    }
+  },
+  "interchange": {
+    "workflow": "./src/index.ts"
   }
 }
diff --git a/workflows/granola-call/src/artifact-client.test.ts b/workflows/granola-call/src/artifact-client.test.ts
index 898ce73544..7f88d66fd2 100644
--- a/workflows/granola-call/src/artifact-client.test.ts
+++ b/workflows/granola-call/src/artifact-client.test.ts
@@ -27,17 +27,14 @@ test("posts to the workflow-artifacts endpoint and returns id/version", async ()
   );
 
   expect(result).toEqual({ id: "art_1", version: 1 });
-  expect(captured.url).toBe(
-    "https://hub.example.com/api/workflow-artifacts/artifacts",
-  );
+  expect(captured.url).toBe("https://hub.example.com/api/workflow-artifacts/artifacts");
   const headers = captured.init?.headers as Record<string, string>;
   expect(headers["authorization"]).toBe("Bearer sc-token");
   expect(headers["x-workflow-run-address"]).toBe("run_1@workflow");
 });
 
 test("throws on a non-ok HTTP response", async () => {
-  const fetchImpl = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  const fetchImpl = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
 
   await expect(
     createWorkflowArtifact(
diff --git a/workflows/granola-call/src/artifact-client.ts b/workflows/granola-call/src/artifact-client.ts
index f87eb50db5..b9d56ca425 100644
--- a/workflows/granola-call/src/artifact-client.ts
+++ b/workflows/granola-call/src/artifact-client.ts
@@ -39,22 +39,17 @@ export async function createWorkflowArtifact(
   input: CreateWorkflowArtifactInput,
 ): Promise<CreatedWorkflowArtifact> {
   const doFetch = config.fetchImpl ?? fetch;
-  const response = await doFetch(
-    `${config.hubArtifactsUrl}/api/workflow-artifacts/artifacts`,
-    {
-      method: "POST",
-      headers: {
-        authorization: `Bearer ${config.sidecarToken}`,
-        "x-workflow-run-address": config.runAddress,
-        "content-type": "application/json",
-      },
-      body: JSON.stringify(input),
+  const response = await doFetch(`${config.hubArtifactsUrl}/api/workflow-artifacts/artifacts`, {
+    method: "POST",
+    headers: {
+      authorization: `Bearer ${config.sidecarToken}`,
+      "x-workflow-run-address": config.runAddress,
+      "content-type": "application/json",
     },
-  );
+    body: JSON.stringify(input),
+  });
   if (!response.ok) {
-    throw new Error(
-      `Workflow artifact create failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`Workflow artifact create failed: ${response.status} ${response.statusText}`);
   }
   const body: unknown = await response.json();
   const parsed = CreatedWorkflowArtifactResponse(body);
diff --git a/workflows/granola-call/src/finalize-tool.test.ts b/workflows/granola-call/src/finalize-tool.test.ts
index 0ed9552330..de42ea3369 100644
--- a/workflows/granola-call/src/finalize-tool.test.ts
+++ b/workflows/granola-call/src/finalize-tool.test.ts
@@ -14,9 +14,7 @@ test("the tool carries no approval mark: a status report has nothing for a human
 });
 
 test("the tool is namespaced under this workflow package, not a shared one", () => {
-  expect(GRANOLA_CALL_REPORT_STATUS_TOOL.id).toBe(
-    "@corbits/workflow-granola-call/report-status",
-  );
+  expect(GRANOLA_CALL_REPORT_STATUS_TOOL.id).toBe("@corbits/workflow-granola-call/report-status");
 });
 
 test("requires the sanctioned workflow-artifacts env keys", () => {
@@ -31,13 +29,10 @@ test("buildStatusArtifactPayload names the reason, examined count, and next step
   const payload = buildStatusArtifactPayload({
     reason: "No Granola connection is configured for this workspace.",
     callsExamined: 0,
-    nextSteps:
-      "Connect Granola in Settings > Connections, then re-run this Routine.",
+    nextSteps: "Connect Granola in Settings > Connections, then re-run this Routine.",
   });
   expect(payload.kind).toBe("status-note");
-  expect(payload.content).toContain(
-    "No Granola connection is configured for this workspace.",
-  );
+  expect(payload.content).toContain("No Granola connection is configured for this workspace.");
   expect(payload.content).toContain("0");
   expect(payload.content).toContain(
     "Connect Granola in Settings > Connections, then re-run this Routine.",
@@ -92,8 +87,7 @@ test("run persists the status artifact and reports it persisted", async () => {
 
 test("run returns an honest error result when persistence fails, never fabricating persisted: true", async () => {
   const originalFetch = globalThis.fetch;
-  globalThis.fetch = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  globalThis.fetch = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
 
   try {
     const bundle = GRANOLA_CALL_REPORT_STATUS_TOOL(testEnv());
diff --git a/workflows/granola-call/src/finalize-tool.ts b/workflows/granola-call/src/finalize-tool.ts
index a3c1104e92..14fbb9f093 100644
--- a/workflows/granola-call/src/finalize-tool.ts
+++ b/workflows/granola-call/src/finalize-tool.ts
@@ -33,8 +33,7 @@ import { type } from "arktype";
 import { defineTool, type BaseEnv } from "@intx/agent";
 import { createWorkflowArtifact } from "./artifact-client";
 
-export const GRANOLA_CALL_REPORT_STATUS_TOOL_NAME =
-  "granola_call_report_status";
+export const GRANOLA_CALL_REPORT_STATUS_TOOL_NAME = "granola_call_report_status";
 
 export const GRANOLA_CALL_REPORT_STATUS_DESCRIPTION =
   "Persists one honest status artifact for a run that started no " +
@@ -70,9 +69,7 @@ export type ArtifactPayload = {
  * payload uses, so the Library's kind badge reads consistently across
  * the whole catalog.
  */
-export function buildStatusArtifactPayload(
-  args: StatusReportArgs,
-): ArtifactPayload {
+export function buildStatusArtifactPayload(args: StatusReportArgs): ArtifactPayload {
   return {
     title: "Granola call notes: nothing new to process",
     kind: "status-note",
diff --git a/workflows/granola-call/src/index.ts b/workflows/granola-call/src/index.ts
index 0d93f73fc2..25ad192f4a 100644
--- a/workflows/granola-call/src/index.ts
+++ b/workflows/granola-call/src/index.ts
@@ -76,7 +76,7 @@ export const GRANOLA_CALL_SYSTEM_PROMPT =
 
 /** Tool packages this definition pins (CL-5999); see the header comment. */
 export const GRANOLA_CALL_TOOL_PACKAGE_PINS: readonly ToolPackagePin[] = [
-  { name: "@corbits/granola-tools", version: "0.0.4" },
+  { name: "@corbits/granola-tools", version: "0.0.5" },
 ];
 
 /**
@@ -122,18 +122,12 @@ export interface GranolaCallWorkflowInput {
  * shorthand sets none, and a wedged inference call would then hang a run
  * forever.
  */
-export function buildGranolaCallWorkflow(
-  input: GranolaCallWorkflowInput,
-): WorkflowDefinition {
+export function buildGranolaCallWorkflow(input: GranolaCallWorkflowInput): WorkflowDefinition {
   if (input.triggerAddress === "") {
-    throw new Error(
-      "buildGranolaCallWorkflow requires a non-empty triggerAddress",
-    );
+    throw new Error("buildGranolaCallWorkflow requires a non-empty triggerAddress");
   }
   if (!Number.isInteger(input.turnTimeoutMs) || input.turnTimeoutMs <= 0) {
-    throw new Error(
-      "buildGranolaCallWorkflow requires turnTimeoutMs to be a positive integer",
-    );
+    throw new Error("buildGranolaCallWorkflow requires turnTimeoutMs to be a positive integer");
   }
   return defineWorkflow({
     id: GRANOLA_CALL_WORKFLOW_ID,
@@ -165,9 +159,7 @@ export function buildGranolaCallWorkflow(
  * symbols, bigints, non-finite numbers, class instances — is a loud
  * error naming the offending path instead of a corrupted asset.
  */
-export function serializeGranolaCallWorkflow(
-  definition: WorkflowDefinition,
-): string {
+export function serializeGranolaCallWorkflow(definition: WorkflowDefinition): string {
   assertJsonPortable(definition, "definition");
   return JSON.stringify(definition);
 }
@@ -187,8 +179,7 @@ function assertJsonPortable(value: unknown, path: string): void {
       break;
     default:
       throw new Error(
-        `${path} is a ${typeof value}, which does not survive JSON ` +
-          "serialization",
+        `${path} is a ${typeof value}, which does not survive JSON ` + "serialization",
       );
   }
   if (Array.isArray(value)) {
@@ -199,9 +190,7 @@ function assertJsonPortable(value: unknown, path: string): void {
   }
   const proto: unknown = Object.getPrototypeOf(value);
   if (proto !== Object.prototype && proto !== null) {
-    throw new Error(
-      `${path} is a non-plain object; JSON would flatten it lossily`,
-    );
+    throw new Error(`${path} is a non-plain object; JSON would flatten it lossily`);
   }
   for (const [key, entry] of Object.entries(value)) {
     assertJsonPortable(entry, `${path}.${key}`);
diff --git a/workflows/granola-call/test/boundary.test.ts b/workflows/granola-call/test/boundary.test.ts
index eee1e1d15d..4f55feb147 100644
--- a/workflows/granola-call/test/boundary.test.ts
+++ b/workflows/granola-call/test/boundary.test.ts
@@ -39,9 +39,7 @@ test("shipped sources import only published platform packages", async () => {
     const content = await readFile(file, "utf8");
     for (const match of content.matchAll(importPattern)) {
       const specifier = match[1] ?? "";
-      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) =>
-        specifier.startsWith(prefix),
-      );
+      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) => specifier.startsWith(prefix));
       if (!allowed) {
         violations.push(`${path.basename(file)}: ${specifier}`);
       }
diff --git a/workflows/granola-call/test/definition.test.ts b/workflows/granola-call/test/definition.test.ts
index 6b27f3dcf4..acb42f3cf3 100644
--- a/workflows/granola-call/test/definition.test.ts
+++ b/workflows/granola-call/test/definition.test.ts
@@ -27,9 +27,7 @@ const INPUT = {
 function granolaCallStep(definition: WorkflowDefinition): StepPrimitive {
   const primitive = definition.steps[GRANOLA_CALL_STEP_ID];
   if (primitive === undefined || primitive.kind !== "step") {
-    throw new Error(
-      `definition has no step primitive named ${GRANOLA_CALL_STEP_ID}`,
-    );
+    throw new Error(`definition has no step primitive named ${GRANOLA_CALL_STEP_ID}`);
   }
   return primitive;
 }
@@ -48,9 +46,7 @@ test("the step carries an explicit per-turn timeout", () => {
 test("the workflow is triggered by mail to the given deployment address", () => {
   const definition = buildGranolaCallWorkflow(INPUT);
   expect(definition.id).toBe(GRANOLA_CALL_WORKFLOW_ID);
-  expect(definition.triggers).toEqual([
-    { type: "mail", to: INPUT.triggerAddress },
-  ]);
+  expect(definition.triggers).toEqual([{ type: "mail", to: INPUT.triggerAddress }]);
 });
 
 test("the agent instructs the pipeline, carries the preferences, and inlines no tools", () => {
@@ -66,37 +62,27 @@ test("the agent pins @corbits/granola-tools by name and version", () => {
   const agent = granolaCallStep(buildGranolaCallWorkflow(INPUT)).agent;
   expect(agent.toolPackagePins).toEqual([...GRANOLA_CALL_TOOL_PACKAGE_PINS]);
   expect(GRANOLA_CALL_TOOL_PACKAGE_PINS).toEqual([
-    { name: "@corbits/granola-tools", version: "0.0.4" },
+    { name: "@corbits/granola-tools", version: "0.0.5" },
   ]);
 });
 
 test("the system prompt commits to the default call limit and an honest no-connection message", () => {
   expect(GRANOLA_CALL_SYSTEM_PROMPT).toContain(String(DEFAULT_CALL_LIMIT));
-  expect(GRANOLA_CALL_SYSTEM_PROMPT.toLowerCase()).toContain(
-    "never invent call counts",
-  );
+  expect(GRANOLA_CALL_SYSTEM_PROMPT.toLowerCase()).toContain("never invent call counts");
 });
 
 test("the system prompt names the status-report tool for a run that starts no children", () => {
-  expect(GRANOLA_CALL_SYSTEM_PROMPT).toContain(
-    GRANOLA_CALL_REPORT_STATUS_TOOL_NAME,
-  );
-  expect(GRANOLA_CALL_SYSTEM_PROMPT.toLowerCase()).toContain(
-    "granola connector",
-  );
+  expect(GRANOLA_CALL_SYSTEM_PROMPT).toContain(GRANOLA_CALL_REPORT_STATUS_TOOL_NAME);
+  expect(GRANOLA_CALL_SYSTEM_PROMPT.toLowerCase()).toContain("granola connector");
 });
 
 test("the system prompt commits to skip-and-continue on a bad call, never blocking the batch", () => {
-  expect(GRANOLA_CALL_SYSTEM_PROMPT.toLowerCase()).toContain(
-    "skip only that call",
-  );
+  expect(GRANOLA_CALL_SYSTEM_PROMPT.toLowerCase()).toContain("skip only that call");
 });
 
 test("the definition binds @corbits/granola-tools' declared handle to a tenant-owned granola credential", () => {
   const definition = buildGranolaCallWorkflow(INPUT);
-  expect(definition.credentialBindings).toEqual([
-    ...GRANOLA_CALL_CREDENTIAL_BINDINGS,
-  ]);
+  expect(definition.credentialBindings).toEqual([...GRANOLA_CALL_CREDENTIAL_BINDINGS]);
   expect(GRANOLA_CALL_CREDENTIAL_BINDINGS).toEqual([
     {
       package: "@corbits/granola-tools",
@@ -139,16 +125,12 @@ test("serialization fails loud on a function-valued field, naming its path", ()
 });
 
 test("an empty trigger address is rejected", () => {
-  expect(() =>
-    buildGranolaCallWorkflow({ ...INPUT, triggerAddress: "" }),
-  ).toThrow(/triggerAddress/);
+  expect(() => buildGranolaCallWorkflow({ ...INPUT, triggerAddress: "" })).toThrow(
+    /triggerAddress/,
+  );
 });
 
 test("a non-positive or fractional turn timeout is rejected", () => {
-  expect(() =>
-    buildGranolaCallWorkflow({ ...INPUT, turnTimeoutMs: 0 }),
-  ).toThrow(/turnTimeoutMs/);
-  expect(() =>
-    buildGranolaCallWorkflow({ ...INPUT, turnTimeoutMs: 0.5 }),
-  ).toThrow(/turnTimeoutMs/);
+  expect(() => buildGranolaCallWorkflow({ ...INPUT, turnTimeoutMs: 0 })).toThrow(/turnTimeoutMs/);
+  expect(() => buildGranolaCallWorkflow({ ...INPUT, turnTimeoutMs: 0.5 })).toThrow(/turnTimeoutMs/);
 });
diff --git a/workflows/heartbeat/README.md b/workflows/heartbeat/README.md
index 0870c97fe8..cd81fadf50 100644
--- a/workflows/heartbeat/README.md
+++ b/workflows/heartbeat/README.md
@@ -33,10 +33,7 @@ this workflow as often as scheduling allows costs nothing.
 ## Usage
 
 ```ts
-import {
-  buildHeartbeatWorkflow,
-  serializeHeartbeatWorkflow,
-} from "@corbits/heartbeat-workflow";
+import { buildHeartbeatWorkflow, serializeHeartbeatWorkflow } from "@corbits/heartbeat-workflow";
 
 const definition = buildHeartbeatWorkflow({
   triggerAddress: "heartbeat@tenant.example",
diff --git a/workflows/heartbeat/package.json b/workflows/heartbeat/package.json
index 89de70d00d..8a4db7527a 100644
--- a/workflows/heartbeat/package.json
+++ b/workflows/heartbeat/package.json
@@ -1,31 +1,21 @@
 {
   "name": "@corbits/heartbeat-workflow",
-  "description": "Minimal mail-triggered workflow that completes immediately, exercising Interchange's scheduling path at zero inference cost",
   "version": "0.0.1",
+  "description": "Minimal mail-triggered workflow that completes immediately, exercising Interchange's scheduling path at zero inference cost",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "corbits": {
-    "workflow": {
-      "assetName": "heartbeat",
-      "displayName": "Heartbeat",
-      "automatable": true
-    }
-  },
-  "interchange": {
-    "workflow": "./src/index.ts"
-  },
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "workflows/heartbeat"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "workflows/heartbeat"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -34,12 +24,22 @@
     "typecheck": "tsc --noEmit",
     "test": "bun test"
   },
+  "devDependencies": {
+    "@types/bun": "catalog:",
+    "typescript": "catalog:"
+  },
   "peerDependencies": {
     "@intx/agent": "0.3.0",
     "@intx/workflow": "0.3.0"
   },
-  "devDependencies": {
-    "@types/bun": "catalog:",
-    "typescript": "catalog:"
+  "corbits": {
+    "workflow": {
+      "assetName": "heartbeat",
+      "displayName": "Heartbeat",
+      "automatable": true
+    }
+  },
+  "interchange": {
+    "workflow": "./src/index.ts"
   }
 }
diff --git a/workflows/heartbeat/src/index.ts b/workflows/heartbeat/src/index.ts
index 836bcfe036..4550320062 100644
--- a/workflows/heartbeat/src/index.ts
+++ b/workflows/heartbeat/src/index.ts
@@ -66,18 +66,12 @@ export interface HeartbeatWorkflowInput {
  * run forever. Tools are never inlined on the definition: they arrive
  * as packages on the deploy, keeping the definition pure data.
  */
-export function buildHeartbeatWorkflow(
-  input: HeartbeatWorkflowInput,
-): WorkflowDefinition {
+export function buildHeartbeatWorkflow(input: HeartbeatWorkflowInput): WorkflowDefinition {
   if (input.triggerAddress === "") {
-    throw new Error(
-      "buildHeartbeatWorkflow requires a non-empty triggerAddress",
-    );
+    throw new Error("buildHeartbeatWorkflow requires a non-empty triggerAddress");
   }
   if (!Number.isInteger(input.turnTimeoutMs) || input.turnTimeoutMs <= 0) {
-    throw new Error(
-      "buildHeartbeatWorkflow requires turnTimeoutMs to be a positive integer",
-    );
+    throw new Error("buildHeartbeatWorkflow requires turnTimeoutMs to be a positive integer");
   }
   return defineWorkflow({
     id: HEARTBEAT_WORKFLOW_ID,
@@ -107,9 +101,7 @@ export function buildHeartbeatWorkflow(
  * symbols, bigints, non-finite numbers, class instances — is a loud
  * error naming the offending path instead of a corrupted asset.
  */
-export function serializeHeartbeatWorkflow(
-  definition: WorkflowDefinition,
-): string {
+export function serializeHeartbeatWorkflow(definition: WorkflowDefinition): string {
   assertJsonPortable(definition, "definition");
   return JSON.stringify(definition);
 }
@@ -129,8 +121,7 @@ function assertJsonPortable(value: unknown, path: string): void {
       break;
     default:
       throw new Error(
-        `${path} is a ${typeof value}, which does not survive JSON ` +
-          "serialization",
+        `${path} is a ${typeof value}, which does not survive JSON ` + "serialization",
       );
   }
   if (Array.isArray(value)) {
@@ -141,9 +132,7 @@ function assertJsonPortable(value: unknown, path: string): void {
   }
   const proto: unknown = Object.getPrototypeOf(value);
   if (proto !== Object.prototype && proto !== null) {
-    throw new Error(
-      `${path} is a non-plain object; JSON would flatten it lossily`,
-    );
+    throw new Error(`${path} is a non-plain object; JSON would flatten it lossily`);
   }
   for (const [key, entry] of Object.entries(value)) {
     assertJsonPortable(entry, `${path}.${key}`);
diff --git a/workflows/heartbeat/test/boundary.test.ts b/workflows/heartbeat/test/boundary.test.ts
index 4b14b084f3..7cd3621b2f 100644
--- a/workflows/heartbeat/test/boundary.test.ts
+++ b/workflows/heartbeat/test/boundary.test.ts
@@ -39,9 +39,7 @@ test("shipped sources import only published platform packages", async () => {
     const content = await readFile(file, "utf8");
     for (const match of content.matchAll(importPattern)) {
       const specifier = match[1] ?? "";
-      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) =>
-        specifier.startsWith(prefix),
-      );
+      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) => specifier.startsWith(prefix));
       if (!allowed) {
         violations.push(`${path.basename(file)}: ${specifier}`);
       }
diff --git a/workflows/heartbeat/test/definition.test.ts b/workflows/heartbeat/test/definition.test.ts
index b17f19d825..c068b2bd6c 100644
--- a/workflows/heartbeat/test/definition.test.ts
+++ b/workflows/heartbeat/test/definition.test.ts
@@ -23,9 +23,7 @@ const INPUT = {
 function heartbeatStep(definition: WorkflowDefinition): StepPrimitive {
   const primitive = definition.steps[HEARTBEAT_STEP_ID];
   if (primitive === undefined || primitive.kind !== "step") {
-    throw new Error(
-      `definition has no step primitive named ${HEARTBEAT_STEP_ID}`,
-    );
+    throw new Error(`definition has no step primitive named ${HEARTBEAT_STEP_ID}`);
   }
   return primitive;
 }
@@ -44,9 +42,7 @@ test("the step carries an explicit per-turn timeout", () => {
 test("the workflow is triggered by mail to the given deployment address", () => {
   const definition = buildHeartbeatWorkflow(INPUT);
   expect(definition.id).toBe(HEARTBEAT_WORKFLOW_ID);
-  expect(definition.triggers).toEqual([
-    { type: "mail", to: INPUT.triggerAddress },
-  ]);
+  expect(definition.triggers).toEqual([{ type: "mail", to: INPUT.triggerAddress }]);
 });
 
 test("the agent carries the fixed prompt, the preferences, and inlines no tools", () => {
@@ -90,16 +86,10 @@ test("serialization fails loud on a function-valued field, naming its path", ()
 });
 
 test("an empty trigger address is rejected", () => {
-  expect(() =>
-    buildHeartbeatWorkflow({ ...INPUT, triggerAddress: "" }),
-  ).toThrow(/triggerAddress/);
+  expect(() => buildHeartbeatWorkflow({ ...INPUT, triggerAddress: "" })).toThrow(/triggerAddress/);
 });
 
 test("a non-positive or fractional turn timeout is rejected", () => {
-  expect(() => buildHeartbeatWorkflow({ ...INPUT, turnTimeoutMs: 0 })).toThrow(
-    /turnTimeoutMs/,
-  );
-  expect(() =>
-    buildHeartbeatWorkflow({ ...INPUT, turnTimeoutMs: 0.5 }),
-  ).toThrow(/turnTimeoutMs/);
+  expect(() => buildHeartbeatWorkflow({ ...INPUT, turnTimeoutMs: 0 })).toThrow(/turnTimeoutMs/);
+  expect(() => buildHeartbeatWorkflow({ ...INPUT, turnTimeoutMs: 0.5 })).toThrow(/turnTimeoutMs/);
 });
diff --git a/workflows/last-30-days-research/package.json b/workflows/last-30-days-research/package.json
index 4169bb9010..530f949b02 100644
--- a/workflows/last-30-days-research/package.json
+++ b/workflows/last-30-days-research/package.json
@@ -1,31 +1,21 @@
 {
   "name": "@corbits/last-30-days-research-workflow",
-  "description": "Single-step, mail-triggered workflow that researches a topic across a handful of source platforms and writes a long-form, cited report",
   "version": "0.0.1",
+  "description": "Single-step, mail-triggered workflow that researches a topic across a handful of source platforms and writes a long-form, cited report",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "corbits": {
-    "workflow": {
-      "assetName": "last-30-days-research",
-      "displayName": "Last 30 days research report",
-      "automatable": false
-    }
-  },
-  "interchange": {
-    "workflow": "./src/index.ts"
-  },
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "workflows/last-30-days-research"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "workflows/last-30-days-research"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -37,12 +27,22 @@
   "dependencies": {
     "arktype": "catalog:"
   },
+  "devDependencies": {
+    "@types/bun": "catalog:",
+    "typescript": "catalog:"
+  },
   "peerDependencies": {
     "@intx/agent": "0.3.0",
     "@intx/workflow": "0.3.0"
   },
-  "devDependencies": {
-    "@types/bun": "catalog:",
-    "typescript": "catalog:"
+  "corbits": {
+    "workflow": {
+      "assetName": "last-30-days-research",
+      "displayName": "Last 30 days research report",
+      "automatable": false
+    }
+  },
+  "interchange": {
+    "workflow": "./src/index.ts"
   }
 }
diff --git a/workflows/last-30-days-research/src/artifact-client.test.ts b/workflows/last-30-days-research/src/artifact-client.test.ts
index 2a4088cc47..1c86414419 100644
--- a/workflows/last-30-days-research/src/artifact-client.test.ts
+++ b/workflows/last-30-days-research/src/artifact-client.test.ts
@@ -27,17 +27,14 @@ test("posts to the workflow-artifacts endpoint and returns id/version", async ()
   );
 
   expect(result).toEqual({ id: "art_1", version: 1 });
-  expect(captured.url).toBe(
-    "https://hub.example.com/api/workflow-artifacts/artifacts",
-  );
+  expect(captured.url).toBe("https://hub.example.com/api/workflow-artifacts/artifacts");
   const headers = captured.init?.headers as Record<string, string>;
   expect(headers["authorization"]).toBe("Bearer sc-token");
   expect(headers["x-workflow-run-address"]).toBe("run_1@workflow");
 });
 
 test("throws on a non-ok HTTP response", async () => {
-  const fetchImpl = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  const fetchImpl = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
 
   await expect(
     createWorkflowArtifact(
diff --git a/workflows/last-30-days-research/src/artifact-client.ts b/workflows/last-30-days-research/src/artifact-client.ts
index f87eb50db5..b9d56ca425 100644
--- a/workflows/last-30-days-research/src/artifact-client.ts
+++ b/workflows/last-30-days-research/src/artifact-client.ts
@@ -39,22 +39,17 @@ export async function createWorkflowArtifact(
   input: CreateWorkflowArtifactInput,
 ): Promise<CreatedWorkflowArtifact> {
   const doFetch = config.fetchImpl ?? fetch;
-  const response = await doFetch(
-    `${config.hubArtifactsUrl}/api/workflow-artifacts/artifacts`,
-    {
-      method: "POST",
-      headers: {
-        authorization: `Bearer ${config.sidecarToken}`,
-        "x-workflow-run-address": config.runAddress,
-        "content-type": "application/json",
-      },
-      body: JSON.stringify(input),
+  const response = await doFetch(`${config.hubArtifactsUrl}/api/workflow-artifacts/artifacts`, {
+    method: "POST",
+    headers: {
+      authorization: `Bearer ${config.sidecarToken}`,
+      "x-workflow-run-address": config.runAddress,
+      "content-type": "application/json",
     },
-  );
+    body: JSON.stringify(input),
+  });
   if (!response.ok) {
-    throw new Error(
-      `Workflow artifact create failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`Workflow artifact create failed: ${response.status} ${response.statusText}`);
   }
   const body: unknown = await response.json();
   const parsed = CreatedWorkflowArtifactResponse(body);
diff --git a/workflows/last-30-days-research/src/finalize-tool.test.ts b/workflows/last-30-days-research/src/finalize-tool.test.ts
index c2bae414f5..7020e4eeec 100644
--- a/workflows/last-30-days-research/src/finalize-tool.test.ts
+++ b/workflows/last-30-days-research/src/finalize-tool.test.ts
@@ -143,8 +143,7 @@ test("run persists a teaching payload on the no-data path with a status-note kin
 
 test("run returns an honest error result when persistence fails, never fabricating persisted: true", async () => {
   const originalFetch = globalThis.fetch;
-  globalThis.fetch = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  globalThis.fetch = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
 
   try {
     const bundle = LAST_30_DAYS_RESEARCH_FINALIZE_TOOL(testEnv());
diff --git a/workflows/last-30-days-research/src/finalize-tool.ts b/workflows/last-30-days-research/src/finalize-tool.ts
index 55b38fb11e..3e16ce2ba5 100644
--- a/workflows/last-30-days-research/src/finalize-tool.ts
+++ b/workflows/last-30-days-research/src/finalize-tool.ts
@@ -34,8 +34,7 @@ import { type } from "arktype";
 import { defineTool, type BaseEnv } from "@intx/agent";
 import { createWorkflowArtifact } from "./artifact-client";
 
-export const LAST_30_DAYS_RESEARCH_FINALIZE_TOOL_NAME =
-  "last_30_days_research_finalize";
+export const LAST_30_DAYS_RESEARCH_FINALIZE_TOOL_NAME = "last_30_days_research_finalize";
 
 export const LAST_30_DAYS_RESEARCH_FINALIZE_DESCRIPTION =
   "Finalizes the research report, pending human approval, and persists it as a Library artifact.";
@@ -94,71 +93,70 @@ export interface WorkflowArtifactEnv extends BaseEnv {
  * `defineTool`'s env-DI factory shape. Needs the sanctioned
  * workflow-artifacts credential trio beyond `BaseEnv`.
  */
-export const LAST_30_DAYS_RESEARCH_FINALIZE_TOOL =
-  defineTool<WorkflowArtifactEnv>({
-    id: "@corbits/workflow-last-30-days-research/finalize",
-    requires: ["hubArtifactsUrl", "sidecarToken", "address"],
+export const LAST_30_DAYS_RESEARCH_FINALIZE_TOOL = defineTool<WorkflowArtifactEnv>({
+  id: "@corbits/workflow-last-30-days-research/finalize",
+  requires: ["hubArtifactsUrl", "sidecarToken", "address"],
+  definitions: [
+    {
+      name: LAST_30_DAYS_RESEARCH_FINALIZE_TOOL_NAME,
+      approval: "ask",
+    },
+  ],
+  factory: (env) => ({
     definitions: [
       {
         name: LAST_30_DAYS_RESEARCH_FINALIZE_TOOL_NAME,
-        approval: "ask",
-      },
-    ],
-    factory: (env) => ({
-      definitions: [
-        {
-          name: LAST_30_DAYS_RESEARCH_FINALIZE_TOOL_NAME,
-          description: LAST_30_DAYS_RESEARCH_FINALIZE_DESCRIPTION,
-          inputSchema: {
-            type: "object",
-            properties: {
-              outcome: { type: "string", enum: ["report", "status-note"] },
-              title: { type: "string" },
-              content: { type: "string" },
-            },
-            required: ["outcome", "title", "content"],
+        description: LAST_30_DAYS_RESEARCH_FINALIZE_DESCRIPTION,
+        inputSchema: {
+          type: "object",
+          properties: {
+            outcome: { type: "string", enum: ["report", "status-note"] },
+            title: { type: "string" },
+            content: { type: "string" },
           },
+          required: ["outcome", "title", "content"],
         },
-      ],
-      run: async (call) => {
-        const parsed = FinalizeArgs(call.arguments);
-        if (parsed instanceof type.errors) {
-          return {
-            callId: call.id,
-            isError: true,
-            content: `Invalid arguments for ${LAST_30_DAYS_RESEARCH_FINALIZE_TOOL_NAME}: ${parsed.summary}`,
-          };
-        }
-        const artifact = buildArtifactPayload(parsed);
-        try {
-          const created = await createWorkflowArtifact(
-            {
-              hubArtifactsUrl: env.hubArtifactsUrl,
-              sidecarToken: env.sidecarToken,
-              runAddress: env.address,
-            },
-            artifact,
-          );
-          return {
-            callId: call.id,
-            isError: false,
-            content: JSON.stringify({
-              id: created.id,
-              version: created.version,
-              title: artifact.title,
-              kind: artifact.kind,
-              persisted: true,
-            }),
-          };
-        } catch (err) {
-          return {
-            callId: call.id,
-            isError: true,
-            content: `Failed to persist "${artifact.title}" as a Library artifact: ${
-              err instanceof Error ? err.message : String(err)
-            }`,
-          };
-        }
       },
-    }),
-  });
+    ],
+    run: async (call) => {
+      const parsed = FinalizeArgs(call.arguments);
+      if (parsed instanceof type.errors) {
+        return {
+          callId: call.id,
+          isError: true,
+          content: `Invalid arguments for ${LAST_30_DAYS_RESEARCH_FINALIZE_TOOL_NAME}: ${parsed.summary}`,
+        };
+      }
+      const artifact = buildArtifactPayload(parsed);
+      try {
+        const created = await createWorkflowArtifact(
+          {
+            hubArtifactsUrl: env.hubArtifactsUrl,
+            sidecarToken: env.sidecarToken,
+            runAddress: env.address,
+          },
+          artifact,
+        );
+        return {
+          callId: call.id,
+          isError: false,
+          content: JSON.stringify({
+            id: created.id,
+            version: created.version,
+            title: artifact.title,
+            kind: artifact.kind,
+            persisted: true,
+          }),
+        };
+      } catch (err) {
+        return {
+          callId: call.id,
+          isError: true,
+          content: `Failed to persist "${artifact.title}" as a Library artifact: ${
+            err instanceof Error ? err.message : String(err)
+          }`,
+        };
+      }
+    },
+  }),
+});
diff --git a/workflows/last-30-days-research/src/index.ts b/workflows/last-30-days-research/src/index.ts
index 6c28916c89..5b4130850a 100644
--- a/workflows/last-30-days-research/src/index.ts
+++ b/workflows/last-30-days-research/src/index.ts
@@ -125,10 +125,7 @@ export const LAST_30_DAYS_RESEARCH_SECTIONS = [
   "Citations",
 ] as const;
 
-export const LAST_30_DAYS_RESEARCH_WIRED_SOURCES = [
-  "Web search",
-  "GitHub",
-] as const;
+export const LAST_30_DAYS_RESEARCH_WIRED_SOURCES = ["Web search", "GitHub"] as const;
 export const LAST_30_DAYS_RESEARCH_PENDING_SOURCES = [
   "Hacker News",
   "Reddit",
@@ -143,11 +140,10 @@ export const LAST_30_DAYS_RESEARCH_PENDING_SOURCES = [
  * arrive as pinned packages on the deploy, keeping the definition pure
  * data.
  */
-export const LAST_30_DAYS_RESEARCH_TOOL_PACKAGE_PINS: readonly ToolPackagePin[] =
-  [
-    { name: "@corbits/web-search-tools", version: "0.0.3" },
-    { name: "@corbits/github-tools", version: "0.0.10" },
-  ];
+export const LAST_30_DAYS_RESEARCH_TOOL_PACKAGE_PINS: readonly ToolPackagePin[] = [
+  { name: "@corbits/web-search-tools", version: "0.0.4" },
+  { name: "@corbits/github-tools", version: "0.0.11" },
+];
 
 const SYSTEM_PROMPT = [
   buildLast30DaysResearchSystemPrompt(LAST_30_DAYS_RESEARCH_SECTIONS),
@@ -184,9 +180,7 @@ export function buildLast30DaysResearchWorkflow(
   input: Last30DaysResearchWorkflowInput,
 ): WorkflowDefinition {
   if (input.triggerAddress === "") {
-    throw new Error(
-      "buildLast30DaysResearchWorkflow requires a non-empty triggerAddress",
-    );
+    throw new Error("buildLast30DaysResearchWorkflow requires a non-empty triggerAddress");
   }
   if (!Number.isInteger(input.turnTimeoutMs) || input.turnTimeoutMs <= 0) {
     throw new Error(
@@ -223,9 +217,7 @@ export function buildLast30DaysResearchWorkflow(
  * symbols, bigints, non-finite numbers, class instances — is a loud
  * error naming the offending path instead of a corrupted asset.
  */
-export function serializeLast30DaysResearchWorkflow(
-  definition: WorkflowDefinition,
-): string {
+export function serializeLast30DaysResearchWorkflow(definition: WorkflowDefinition): string {
   assertJsonPortable(definition, "definition");
   return JSON.stringify(definition);
 }
@@ -245,8 +237,7 @@ function assertJsonPortable(value: unknown, path: string): void {
       break;
     default:
       throw new Error(
-        `${path} is a ${typeof value}, which does not survive JSON ` +
-          "serialization",
+        `${path} is a ${typeof value}, which does not survive JSON ` + "serialization",
       );
   }
   if (Array.isArray(value)) {
@@ -257,9 +248,7 @@ function assertJsonPortable(value: unknown, path: string): void {
   }
   const proto: unknown = Object.getPrototypeOf(value);
   if (proto !== Object.prototype && proto !== null) {
-    throw new Error(
-      `${path} is a non-plain object; JSON would flatten it lossily`,
-    );
+    throw new Error(`${path} is a non-plain object; JSON would flatten it lossily`);
   }
   for (const [key, entry] of Object.entries(value)) {
     assertJsonPortable(entry, `${path}.${key}`);
diff --git a/workflows/last-30-days-research/src/prompts.test.ts b/workflows/last-30-days-research/src/prompts.test.ts
index a63bf4596f..4a162f6bfe 100644
--- a/workflows/last-30-days-research/src/prompts.test.ts
+++ b/workflows/last-30-days-research/src/prompts.test.ts
@@ -1,13 +1,8 @@
 import { describe, expect, test } from "bun:test";
-import {
-  CORBITS_VOCABULARY,
-  buildLast30DaysResearchSystemPrompt,
-} from "./prompts";
+import { CORBITS_VOCABULARY, buildLast30DaysResearchSystemPrompt } from "./prompts";
 import { LAST_30_DAYS_RESEARCH_SECTIONS } from "./index";
 
-const prompt = buildLast30DaysResearchSystemPrompt(
-  LAST_30_DAYS_RESEARCH_SECTIONS,
-);
+const prompt = buildLast30DaysResearchSystemPrompt(LAST_30_DAYS_RESEARCH_SECTIONS);
 
 describe("CORBITS_VOCABULARY", () => {
   test("names every canonical Corbits term", () => {
@@ -92,9 +87,7 @@ describe("phase 6 — write", () => {
   });
 
   test("requires every claim in Key findings to trace to a citation", () => {
-    expect(prompt.toLowerCase()).toContain(
-      "every claim here must trace to a citation",
-    );
+    expect(prompt.toLowerCase()).toContain("every claim here must trace to a citation");
   });
 
   test("uses house style: collective voice and hyphen-spaced asides, not I", () => {
diff --git a/workflows/last-30-days-research/src/prompts.ts b/workflows/last-30-days-research/src/prompts.ts
index 51c38646fa..0202a6a9e9 100644
--- a/workflows/last-30-days-research/src/prompts.ts
+++ b/workflows/last-30-days-research/src/prompts.ts
@@ -30,9 +30,7 @@ export const CORBITS_VOCABULARY =
  * `github_activity` as ordinary tools during the two gathering phases,
  * then finalizing exactly once.
  */
-export function buildLast30DaysResearchSystemPrompt(
-  sections: readonly string[],
-): string {
+export function buildLast30DaysResearchSystemPrompt(sections: readonly string[]): string {
   const [overview, keyFindings, sourcesConsulted, citations] = sections;
   return [
     CORBITS_VOCABULARY,
@@ -96,5 +94,4 @@ export const LAST_30_DAYS_RESEARCH_PENDING_SOURCES = [
   "Polymarket",
 ] as const;
 
-const LAST_30_DAYS_RESEARCH_PENDING_SOURCES_LIST =
-  LAST_30_DAYS_RESEARCH_PENDING_SOURCES.join(", ");
+const LAST_30_DAYS_RESEARCH_PENDING_SOURCES_LIST = LAST_30_DAYS_RESEARCH_PENDING_SOURCES.join(", ");
diff --git a/workflows/last-30-days-research/test/boundary.test.ts b/workflows/last-30-days-research/test/boundary.test.ts
index 4a5365d1e4..997540e14c 100644
--- a/workflows/last-30-days-research/test/boundary.test.ts
+++ b/workflows/last-30-days-research/test/boundary.test.ts
@@ -42,9 +42,7 @@ test("shipped sources import only published platform packages", async () => {
     const content = await readFile(file, "utf8");
     for (const match of content.matchAll(importPattern)) {
       const specifier = match[1] ?? "";
-      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) =>
-        specifier.startsWith(prefix),
-      );
+      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) => specifier.startsWith(prefix));
       if (!allowed) {
         violations.push(`${path.basename(file)}: ${specifier}`);
       }
diff --git a/workflows/last-30-days-research/test/definition.test.ts b/workflows/last-30-days-research/test/definition.test.ts
index d8997ea31e..c78ee0b8d0 100644
--- a/workflows/last-30-days-research/test/definition.test.ts
+++ b/workflows/last-30-days-research/test/definition.test.ts
@@ -24,10 +24,7 @@ const INPUT = {
   turnTimeoutMs: 300000,
 } as const;
 
-function stepPrimitive(
-  definition: WorkflowDefinition,
-  id: string,
-): StepPrimitive {
+function stepPrimitive(definition: WorkflowDefinition, id: string): StepPrimitive {
   const primitive = definition.steps[id];
   if (primitive === undefined || primitive.kind !== "step") {
     throw new Error(`expected step primitive for "${id}"`);
@@ -38,16 +35,12 @@ function stepPrimitive(
 test("the definition is a single-step pipeline — the only shape this repo's routine launcher can run", () => {
   const definition = buildLast30DaysResearchWorkflow(INPUT);
   expect(definition.stepOrder).toEqual([LAST_30_DAYS_RESEARCH_STEP_ID]);
-  expect(Object.keys(definition.steps)).toEqual([
-    LAST_30_DAYS_RESEARCH_STEP_ID,
-  ]);
+  expect(Object.keys(definition.steps)).toEqual([LAST_30_DAYS_RESEARCH_STEP_ID]);
 });
 
 test("the one step is mail-triggered and reads the triggering mail as topic/focus via trigger.payload", () => {
   const definition = buildLast30DaysResearchWorkflow(INPUT);
-  expect(definition.triggers).toEqual([
-    { type: "mail", to: INPUT.triggerAddress },
-  ]);
+  expect(definition.triggers).toEqual([{ type: "mail", to: INPUT.triggerAddress }]);
 });
 
 test("the step carries an explicit per-turn timeout, no inline tools, and the two wired tool-package pins", () => {
@@ -57,12 +50,10 @@ test("the step carries an explicit per-turn timeout, no inline tools, and the tw
   expect(only.agent.toolFactories).toEqual([]);
   expect(only.agent.capabilities).toEqual([]);
   expect(LAST_30_DAYS_RESEARCH_TOOL_PACKAGE_PINS).toEqual([
-    { name: "@corbits/web-search-tools", version: "0.0.3" },
-    { name: "@corbits/github-tools", version: "0.0.10" },
+    { name: "@corbits/web-search-tools", version: "0.0.4" },
+    { name: "@corbits/github-tools", version: "0.0.11" },
   ]);
-  expect(only.agent.toolPackagePins).toEqual(
-    LAST_30_DAYS_RESEARCH_TOOL_PACKAGE_PINS,
-  );
+  expect(only.agent.toolPackagePins).toEqual(LAST_30_DAYS_RESEARCH_TOOL_PACKAGE_PINS);
 });
 
 test("the workflow is triggered by mail to the given deployment address", () => {
@@ -78,8 +69,7 @@ test("the step's turn rides the caller's own inference preferences, unmodified",
 
 test("the system prompt walks all six research phases and names every pending source, honestly", () => {
   const definition = buildLast30DaysResearchWorkflow(INPUT);
-  const prompt = stepPrimitive(definition, LAST_30_DAYS_RESEARCH_STEP_ID).agent
-    .systemPrompt;
+  const prompt = stepPrimitive(definition, LAST_30_DAYS_RESEARCH_STEP_ID).agent.systemPrompt;
   expect(LAST_30_DAYS_RESEARCH_WIRED_SOURCES).toEqual(["Web search", "GitHub"]);
   expect(prompt).toContain("web_search");
   expect(prompt).toContain("github_activity");
@@ -101,8 +91,7 @@ test("the system prompt walks all six research phases and names every pending so
 
 test("the prompt names the fixed report section headings, in order", () => {
   const definition = buildLast30DaysResearchWorkflow(INPUT);
-  const prompt = stepPrimitive(definition, LAST_30_DAYS_RESEARCH_STEP_ID).agent
-    .systemPrompt;
+  const prompt = stepPrimitive(definition, LAST_30_DAYS_RESEARCH_STEP_ID).agent.systemPrompt;
   expect(LAST_30_DAYS_RESEARCH_SECTIONS).toEqual([
     "Overview",
     "Key findings",
@@ -119,8 +108,7 @@ test("the prompt names the fixed report section headings, in order", () => {
 
 test("the prompt names the exact approval-gated finalize tool and commits to always finalizing", () => {
   const definition = buildLast30DaysResearchWorkflow(INPUT);
-  const prompt = stepPrimitive(definition, LAST_30_DAYS_RESEARCH_STEP_ID).agent
-    .systemPrompt;
+  const prompt = stepPrimitive(definition, LAST_30_DAYS_RESEARCH_STEP_ID).agent.systemPrompt;
   expect(prompt).toContain(LAST_30_DAYS_RESEARCH_FINALIZE_TOOL_NAME);
   expect(prompt).toMatch(/never end a run without finalizing/i);
   expect(prompt).toContain("exa");
@@ -128,17 +116,14 @@ test("the prompt names the exact approval-gated finalize tool and commits to alw
 
 test("the prompt commits to a calm terminal reply on denial, not an error", () => {
   const definition = buildLast30DaysResearchWorkflow(INPUT);
-  const prompt = stepPrimitive(definition, LAST_30_DAYS_RESEARCH_STEP_ID).agent
-    .systemPrompt;
+  const prompt = stepPrimitive(definition, LAST_30_DAYS_RESEARCH_STEP_ID).agent.systemPrompt;
   expect(prompt).toMatch(/not approved/i);
   expect(prompt).toMatch(/never present a denial as an error/i);
 });
 
 test("the definition survives the workflow-asset JSON round-trip", () => {
   const definition = buildLast30DaysResearchWorkflow(INPUT);
-  const revived: unknown = JSON.parse(
-    serializeLast30DaysResearchWorkflow(definition),
-  );
+  const revived: unknown = JSON.parse(serializeLast30DaysResearchWorkflow(definition));
   expect(revived).toEqual(definition);
 });
 
@@ -168,16 +153,16 @@ test("serialization fails loud on a function-valued field, naming its path", ()
 });
 
 test("an empty trigger address is rejected", () => {
-  expect(() =>
-    buildLast30DaysResearchWorkflow({ ...INPUT, triggerAddress: "" }),
-  ).toThrow(/triggerAddress/);
+  expect(() => buildLast30DaysResearchWorkflow({ ...INPUT, triggerAddress: "" })).toThrow(
+    /triggerAddress/,
+  );
 });
 
 test("a non-positive or fractional turn timeout is rejected", () => {
-  expect(() =>
-    buildLast30DaysResearchWorkflow({ ...INPUT, turnTimeoutMs: 0 }),
-  ).toThrow(/turnTimeoutMs/);
-  expect(() =>
-    buildLast30DaysResearchWorkflow({ ...INPUT, turnTimeoutMs: 0.5 }),
-  ).toThrow(/turnTimeoutMs/);
+  expect(() => buildLast30DaysResearchWorkflow({ ...INPUT, turnTimeoutMs: 0 })).toThrow(
+    /turnTimeoutMs/,
+  );
+  expect(() => buildLast30DaysResearchWorkflow({ ...INPUT, turnTimeoutMs: 0.5 })).toThrow(
+    /turnTimeoutMs/,
+  );
 });
diff --git a/workflows/morning-brief/package.json b/workflows/morning-brief/package.json
index 8b5ea22311..94cc69f452 100644
--- a/workflows/morning-brief/package.json
+++ b/workflows/morning-brief/package.json
@@ -1,31 +1,21 @@
 {
   "name": "@corbits/morning-brief-workflow",
-  "description": "Single-step, mail-triggered workflow that writes a daily brief from the sender's recent activity across connected sources",
   "version": "0.0.1",
+  "description": "Single-step, mail-triggered workflow that writes a daily brief from the sender's recent activity across connected sources",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "corbits": {
-    "workflow": {
-      "assetName": "morning-brief",
-      "displayName": "Morning brief",
-      "automatable": true
-    }
-  },
-  "interchange": {
-    "workflow": "./src/index.ts"
-  },
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "workflows/morning-brief"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "workflows/morning-brief"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -37,13 +27,23 @@
   "dependencies": {
     "arktype": "catalog:"
   },
+  "devDependencies": {
+    "@types/bun": "catalog:",
+    "typescript": "catalog:"
+  },
   "peerDependencies": {
     "@intx/agent": "0.3.0",
     "@intx/types": "0.3.0",
     "@intx/workflow": "0.3.0"
   },
-  "devDependencies": {
-    "@types/bun": "catalog:",
-    "typescript": "catalog:"
+  "corbits": {
+    "workflow": {
+      "assetName": "morning-brief",
+      "displayName": "Morning brief",
+      "automatable": true
+    }
+  },
+  "interchange": {
+    "workflow": "./src/index.ts"
   }
 }
diff --git a/workflows/morning-brief/src/artifact-client.test.ts b/workflows/morning-brief/src/artifact-client.test.ts
index 2a4088cc47..1c86414419 100644
--- a/workflows/morning-brief/src/artifact-client.test.ts
+++ b/workflows/morning-brief/src/artifact-client.test.ts
@@ -27,17 +27,14 @@ test("posts to the workflow-artifacts endpoint and returns id/version", async ()
   );
 
   expect(result).toEqual({ id: "art_1", version: 1 });
-  expect(captured.url).toBe(
-    "https://hub.example.com/api/workflow-artifacts/artifacts",
-  );
+  expect(captured.url).toBe("https://hub.example.com/api/workflow-artifacts/artifacts");
   const headers = captured.init?.headers as Record<string, string>;
   expect(headers["authorization"]).toBe("Bearer sc-token");
   expect(headers["x-workflow-run-address"]).toBe("run_1@workflow");
 });
 
 test("throws on a non-ok HTTP response", async () => {
-  const fetchImpl = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  const fetchImpl = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
 
   await expect(
     createWorkflowArtifact(
diff --git a/workflows/morning-brief/src/artifact-client.ts b/workflows/morning-brief/src/artifact-client.ts
index f87eb50db5..b9d56ca425 100644
--- a/workflows/morning-brief/src/artifact-client.ts
+++ b/workflows/morning-brief/src/artifact-client.ts
@@ -39,22 +39,17 @@ export async function createWorkflowArtifact(
   input: CreateWorkflowArtifactInput,
 ): Promise<CreatedWorkflowArtifact> {
   const doFetch = config.fetchImpl ?? fetch;
-  const response = await doFetch(
-    `${config.hubArtifactsUrl}/api/workflow-artifacts/artifacts`,
-    {
-      method: "POST",
-      headers: {
-        authorization: `Bearer ${config.sidecarToken}`,
-        "x-workflow-run-address": config.runAddress,
-        "content-type": "application/json",
-      },
-      body: JSON.stringify(input),
+  const response = await doFetch(`${config.hubArtifactsUrl}/api/workflow-artifacts/artifacts`, {
+    method: "POST",
+    headers: {
+      authorization: `Bearer ${config.sidecarToken}`,
+      "x-workflow-run-address": config.runAddress,
+      "content-type": "application/json",
     },
-  );
+    body: JSON.stringify(input),
+  });
   if (!response.ok) {
-    throw new Error(
-      `Workflow artifact create failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`Workflow artifact create failed: ${response.status} ${response.statusText}`);
   }
   const body: unknown = await response.json();
   const parsed = CreatedWorkflowArtifactResponse(body);
diff --git a/workflows/morning-brief/src/finalize-tool.test.ts b/workflows/morning-brief/src/finalize-tool.test.ts
index af3f180cbc..8df92510c4 100644
--- a/workflows/morning-brief/src/finalize-tool.test.ts
+++ b/workflows/morning-brief/src/finalize-tool.test.ts
@@ -14,9 +14,7 @@ test("the tool's definition marks itself approval-gated", () => {
 });
 
 test("the tool is namespaced under this workflow package, not a shared one", () => {
-  expect(MORNING_BRIEF_FINALIZE_TOOL.id).toBe(
-    "@corbits/workflow-morning-brief/finalize",
-  );
+  expect(MORNING_BRIEF_FINALIZE_TOOL.id).toBe("@corbits/workflow-morning-brief/finalize");
 });
 
 test("requires the sanctioned workflow-artifacts env keys", () => {
@@ -143,8 +141,7 @@ test("run persists a teaching payload on the no-data path with a status-note kin
 
 test("run returns an honest error result when persistence fails, never fabricating persisted: true", async () => {
   const originalFetch = globalThis.fetch;
-  globalThis.fetch = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  globalThis.fetch = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
 
   try {
     const bundle = MORNING_BRIEF_FINALIZE_TOOL(testEnv());
diff --git a/workflows/morning-brief/src/index.ts b/workflows/morning-brief/src/index.ts
index beab1e8d05..c0c0b5f5d3 100644
--- a/workflows/morning-brief/src/index.ts
+++ b/workflows/morning-brief/src/index.ts
@@ -79,8 +79,8 @@ export const MORNING_BRIEF_PENDING_SOURCES = ["Attio", "Vercel"] as const;
  * pipeline.
  */
 export const MORNING_BRIEF_TOOL_PACKAGE_PINS: readonly ToolPackagePin[] = [
-  { name: "@corbits/granola-tools", version: "0.0.4" },
-  { name: "@corbits/linear-tools", version: "0.0.4" },
+  { name: "@corbits/granola-tools", version: "0.0.5" },
+  { name: "@corbits/linear-tools", version: "0.0.5" },
 ];
 
 /**
@@ -178,18 +178,12 @@ export interface MorningBriefWorkflowInput {
  * as packages on the deploy (`@corbits/granola-tools`,
  * `@corbits/linear-tools`), keeping the definition pure data.
  */
-export function buildMorningBriefWorkflow(
-  input: MorningBriefWorkflowInput,
-): WorkflowDefinition {
+export function buildMorningBriefWorkflow(input: MorningBriefWorkflowInput): WorkflowDefinition {
   if (input.triggerAddress === "") {
-    throw new Error(
-      "buildMorningBriefWorkflow requires a non-empty triggerAddress",
-    );
+    throw new Error("buildMorningBriefWorkflow requires a non-empty triggerAddress");
   }
   if (!Number.isInteger(input.turnTimeoutMs) || input.turnTimeoutMs <= 0) {
-    throw new Error(
-      "buildMorningBriefWorkflow requires turnTimeoutMs to be a positive integer",
-    );
+    throw new Error("buildMorningBriefWorkflow requires turnTimeoutMs to be a positive integer");
   }
   return defineWorkflow({
     id: MORNING_BRIEF_WORKFLOW_ID,
@@ -221,9 +215,7 @@ export function buildMorningBriefWorkflow(
  * symbols, bigints, non-finite numbers, class instances — is a loud
  * error naming the offending path instead of a corrupted asset.
  */
-export function serializeMorningBriefWorkflow(
-  definition: WorkflowDefinition,
-): string {
+export function serializeMorningBriefWorkflow(definition: WorkflowDefinition): string {
   assertJsonPortable(definition, "definition");
   return JSON.stringify(definition);
 }
@@ -243,8 +235,7 @@ function assertJsonPortable(value: unknown, path: string): void {
       break;
     default:
       throw new Error(
-        `${path} is a ${typeof value}, which does not survive JSON ` +
-          "serialization",
+        `${path} is a ${typeof value}, which does not survive JSON ` + "serialization",
       );
   }
   if (Array.isArray(value)) {
@@ -255,9 +246,7 @@ function assertJsonPortable(value: unknown, path: string): void {
   }
   const proto: unknown = Object.getPrototypeOf(value);
   if (proto !== Object.prototype && proto !== null) {
-    throw new Error(
-      `${path} is a non-plain object; JSON would flatten it lossily`,
-    );
+    throw new Error(`${path} is a non-plain object; JSON would flatten it lossily`);
   }
   for (const [key, entry] of Object.entries(value)) {
     assertJsonPortable(entry, `${path}.${key}`);
diff --git a/workflows/morning-brief/test/boundary.test.ts b/workflows/morning-brief/test/boundary.test.ts
index 127de86c38..b1551d330a 100644
--- a/workflows/morning-brief/test/boundary.test.ts
+++ b/workflows/morning-brief/test/boundary.test.ts
@@ -42,9 +42,7 @@ test("shipped sources import only published platform packages", async () => {
     const content = await readFile(file, "utf8");
     for (const match of content.matchAll(importPattern)) {
       const specifier = match[1] ?? "";
-      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) =>
-        specifier.startsWith(prefix),
-      );
+      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) => specifier.startsWith(prefix));
       if (!allowed) {
         violations.push(`${path.basename(file)}: ${specifier}`);
       }
diff --git a/workflows/morning-brief/test/definition.test.ts b/workflows/morning-brief/test/definition.test.ts
index b23366eb25..8d2966a136 100644
--- a/workflows/morning-brief/test/definition.test.ts
+++ b/workflows/morning-brief/test/definition.test.ts
@@ -29,9 +29,7 @@ const INPUT = {
 function morningBriefStep(definition: WorkflowDefinition): StepPrimitive {
   const primitive = definition.steps[MORNING_BRIEF_STEP_ID];
   if (primitive === undefined || primitive.kind !== "step") {
-    throw new Error(
-      `definition has no step primitive named ${MORNING_BRIEF_STEP_ID}`,
-    );
+    throw new Error(`definition has no step primitive named ${MORNING_BRIEF_STEP_ID}`);
   }
   return primitive;
 }
@@ -50,9 +48,7 @@ test("the step carries an explicit per-turn timeout", () => {
 test("the workflow is triggered by mail to the given deployment address", () => {
   const definition = buildMorningBriefWorkflow(INPUT);
   expect(definition.id).toBe(MORNING_BRIEF_WORKFLOW_ID);
-  expect(definition.triggers).toEqual([
-    { type: "mail", to: INPUT.triggerAddress },
-  ]);
+  expect(definition.triggers).toEqual([{ type: "mail", to: INPUT.triggerAddress }]);
 });
 
 test("the agent carries the fixed prompt, the preferences, and inlines no tools", () => {
@@ -68,8 +64,8 @@ test("the agent pins the wired sources' tool packages by name and version", () =
   const agent = morningBriefStep(buildMorningBriefWorkflow(INPUT)).agent;
   expect(agent.toolPackagePins).toEqual([...MORNING_BRIEF_TOOL_PACKAGE_PINS]);
   expect(MORNING_BRIEF_TOOL_PACKAGE_PINS).toEqual([
-    { name: "@corbits/granola-tools", version: "0.0.4" },
-    { name: "@corbits/linear-tools", version: "0.0.4" },
+    { name: "@corbits/granola-tools", version: "0.0.5" },
+    { name: "@corbits/linear-tools", version: "0.0.5" },
   ]);
 });
 
@@ -99,38 +95,28 @@ test("the prompt instructs honest degradation for every wired and pending source
 });
 
 test("the prompt requires an honest failure state when nothing is connected", () => {
-  expect(MORNING_BRIEF_SYSTEM_PROMPT).toMatch(
-    /no connected sources to report from today/,
-  );
+  expect(MORNING_BRIEF_SYSTEM_PROMPT).toMatch(/no connected sources to report from today/);
 });
 
 test("the prompt names the exact approval-gated finalize tool", () => {
-  expect(MORNING_BRIEF_SYSTEM_PROMPT).toContain(
-    MORNING_BRIEF_FINALIZE_TOOL_NAME,
-  );
+  expect(MORNING_BRIEF_SYSTEM_PROMPT).toContain(MORNING_BRIEF_FINALIZE_TOOL_NAME);
 });
 
 test("the prompt commits to always finalizing, even with a teaching payload on the no-data path", () => {
   expect(MORNING_BRIEF_SYSTEM_PROMPT).toMatch(/teaching/i);
-  expect(MORNING_BRIEF_SYSTEM_PROMPT).toMatch(
-    /never end a run without finalizing/i,
-  );
+  expect(MORNING_BRIEF_SYSTEM_PROMPT).toMatch(/never end a run without finalizing/i);
   expect(MORNING_BRIEF_SYSTEM_PROMPT).toContain("granola");
   expect(MORNING_BRIEF_SYSTEM_PROMPT).toContain("linear");
 });
 
 test("the prompt commits to a calm terminal reply on denial, not an error", () => {
   expect(MORNING_BRIEF_SYSTEM_PROMPT).toMatch(/not approved/i);
-  expect(MORNING_BRIEF_SYSTEM_PROMPT).toMatch(
-    /never present a denial as an error/i,
-  );
+  expect(MORNING_BRIEF_SYSTEM_PROMPT).toMatch(/never present a denial as an error/i);
 });
 
 test("the definition binds @corbits/granola-tools' and @corbits/linear-tools' declared handles to their tenant-owned credentials", () => {
   const definition = buildMorningBriefWorkflow(INPUT);
-  expect(definition.credentialBindings).toEqual([
-    ...MORNING_BRIEF_CREDENTIAL_BINDINGS,
-  ]);
+  expect(definition.credentialBindings).toEqual([...MORNING_BRIEF_CREDENTIAL_BINDINGS]);
   expect(MORNING_BRIEF_CREDENTIAL_BINDINGS).toEqual([
     {
       package: "@corbits/granola-tools",
@@ -149,9 +135,7 @@ test("the definition binds @corbits/granola-tools' and @corbits/linear-tools' de
 
 test("the definition survives the workflow-asset JSON round-trip", () => {
   const definition = buildMorningBriefWorkflow(INPUT);
-  const revived: unknown = JSON.parse(
-    serializeMorningBriefWorkflow(definition),
-  );
+  const revived: unknown = JSON.parse(serializeMorningBriefWorkflow(definition));
   expect(revived).toEqual(definition);
 });
 
@@ -181,16 +165,14 @@ test("serialization fails loud on a function-valued field, naming its path", ()
 });
 
 test("an empty trigger address is rejected", () => {
-  expect(() =>
-    buildMorningBriefWorkflow({ ...INPUT, triggerAddress: "" }),
-  ).toThrow(/triggerAddress/);
+  expect(() => buildMorningBriefWorkflow({ ...INPUT, triggerAddress: "" })).toThrow(
+    /triggerAddress/,
+  );
 });
 
 test("a non-positive or fractional turn timeout is rejected", () => {
-  expect(() =>
-    buildMorningBriefWorkflow({ ...INPUT, turnTimeoutMs: 0 }),
-  ).toThrow(/turnTimeoutMs/);
-  expect(() =>
-    buildMorningBriefWorkflow({ ...INPUT, turnTimeoutMs: 0.5 }),
-  ).toThrow(/turnTimeoutMs/);
+  expect(() => buildMorningBriefWorkflow({ ...INPUT, turnTimeoutMs: 0 })).toThrow(/turnTimeoutMs/);
+  expect(() => buildMorningBriefWorkflow({ ...INPUT, turnTimeoutMs: 0.5 })).toThrow(
+    /turnTimeoutMs/,
+  );
 });
diff --git a/workflows/morning-brief/test/deploy-wiring.test.ts b/workflows/morning-brief/test/deploy-wiring.test.ts
index 4d78afd915..ce8625bdc9 100644
--- a/workflows/morning-brief/test/deploy-wiring.test.ts
+++ b/workflows/morning-brief/test/deploy-wiring.test.ts
@@ -19,9 +19,9 @@ test("a workflow built from this definition carries its tool-package pins on the
   const definition = buildMorningBriefWorkflow(INPUT);
   const step = definition.steps[MORNING_BRIEF_STEP_ID];
   expect(step?.kind).toBe("step");
-  expect(
-    step?.kind === "step" ? step.agent.toolPackagePins : undefined,
-  ).toEqual([...MORNING_BRIEF_TOOL_PACKAGE_PINS]);
+  expect(step?.kind === "step" ? step.agent.toolPackagePins : undefined).toEqual([
+    ...MORNING_BRIEF_TOOL_PACKAGE_PINS,
+  ]);
 });
 
 test("the workflow declares exactly one step", () => {
diff --git a/workflows/pain-point-collateral/package.json b/workflows/pain-point-collateral/package.json
index 9902e7239d..18ad961b3b 100644
--- a/workflows/pain-point-collateral/package.json
+++ b/workflows/pain-point-collateral/package.json
@@ -1,31 +1,21 @@
 {
   "name": "@corbits/pain-point-collateral-workflow",
-  "description": "Turns one sales call transcript into one piece of targeted collateral, gated behind a single human approval before anything is finalized",
   "version": "0.0.1",
+  "description": "Turns one sales call transcript into one piece of targeted collateral, gated behind a single human approval before anything is finalized",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "corbits": {
-    "workflow": {
-      "assetName": "pain-point-collateral",
-      "displayName": "Pain-point collateral",
-      "automatable": false
-    }
-  },
-  "interchange": {
-    "workflow": "./src/index.ts"
-  },
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "workflows/pain-point-collateral"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "workflows/pain-point-collateral"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -37,13 +27,23 @@
   "dependencies": {
     "arktype": "catalog:"
   },
+  "devDependencies": {
+    "@types/bun": "catalog:",
+    "typescript": "catalog:"
+  },
   "peerDependencies": {
     "@intx/agent": "0.3.0",
     "@intx/types": "0.3.0",
     "@intx/workflow": "0.3.0"
   },
-  "devDependencies": {
-    "@types/bun": "catalog:",
-    "typescript": "catalog:"
+  "corbits": {
+    "workflow": {
+      "assetName": "pain-point-collateral",
+      "displayName": "Pain-point collateral",
+      "automatable": false
+    }
+  },
+  "interchange": {
+    "workflow": "./src/index.ts"
   }
 }
diff --git a/workflows/pain-point-collateral/src/artifact-client.test.ts b/workflows/pain-point-collateral/src/artifact-client.test.ts
index 2a4088cc47..1c86414419 100644
--- a/workflows/pain-point-collateral/src/artifact-client.test.ts
+++ b/workflows/pain-point-collateral/src/artifact-client.test.ts
@@ -27,17 +27,14 @@ test("posts to the workflow-artifacts endpoint and returns id/version", async ()
   );
 
   expect(result).toEqual({ id: "art_1", version: 1 });
-  expect(captured.url).toBe(
-    "https://hub.example.com/api/workflow-artifacts/artifacts",
-  );
+  expect(captured.url).toBe("https://hub.example.com/api/workflow-artifacts/artifacts");
   const headers = captured.init?.headers as Record<string, string>;
   expect(headers["authorization"]).toBe("Bearer sc-token");
   expect(headers["x-workflow-run-address"]).toBe("run_1@workflow");
 });
 
 test("throws on a non-ok HTTP response", async () => {
-  const fetchImpl = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  const fetchImpl = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
 
   await expect(
     createWorkflowArtifact(
diff --git a/workflows/pain-point-collateral/src/artifact-client.ts b/workflows/pain-point-collateral/src/artifact-client.ts
index f87eb50db5..b9d56ca425 100644
--- a/workflows/pain-point-collateral/src/artifact-client.ts
+++ b/workflows/pain-point-collateral/src/artifact-client.ts
@@ -39,22 +39,17 @@ export async function createWorkflowArtifact(
   input: CreateWorkflowArtifactInput,
 ): Promise<CreatedWorkflowArtifact> {
   const doFetch = config.fetchImpl ?? fetch;
-  const response = await doFetch(
-    `${config.hubArtifactsUrl}/api/workflow-artifacts/artifacts`,
-    {
-      method: "POST",
-      headers: {
-        authorization: `Bearer ${config.sidecarToken}`,
-        "x-workflow-run-address": config.runAddress,
-        "content-type": "application/json",
-      },
-      body: JSON.stringify(input),
+  const response = await doFetch(`${config.hubArtifactsUrl}/api/workflow-artifacts/artifacts`, {
+    method: "POST",
+    headers: {
+      authorization: `Bearer ${config.sidecarToken}`,
+      "x-workflow-run-address": config.runAddress,
+      "content-type": "application/json",
     },
-  );
+    body: JSON.stringify(input),
+  });
   if (!response.ok) {
-    throw new Error(
-      `Workflow artifact create failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`Workflow artifact create failed: ${response.status} ${response.statusText}`);
   }
   const body: unknown = await response.json();
   const parsed = CreatedWorkflowArtifactResponse(body);
diff --git a/workflows/pain-point-collateral/src/finalize-tool.test.ts b/workflows/pain-point-collateral/src/finalize-tool.test.ts
index dd10cc50cd..3e0d938be4 100644
--- a/workflows/pain-point-collateral/src/finalize-tool.test.ts
+++ b/workflows/pain-point-collateral/src/finalize-tool.test.ts
@@ -52,8 +52,7 @@ test("buildArtifactPayload marks a no-data teaching payload as status-note, not
   expect(payload).toEqual({
     title: "No transcript available",
     kind: "status-note",
-    content:
-      "Targets: none found\n\nNeither the transcript nor noteId field carried content.",
+    content: "Targets: none found\n\nNeither the transcript nor noteId field carried content.",
   });
 });
 
@@ -145,8 +144,7 @@ test("run persists a teaching payload on the no-data path with a status-note kin
 
 test("run returns an honest error result when persistence fails, never fabricating persisted: true", async () => {
   const originalFetch = globalThis.fetch;
-  globalThis.fetch = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  globalThis.fetch = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
 
   try {
     const bundle = PAIN_POINT_COLLATERAL_FINALIZE_TOOL(testEnv());
diff --git a/workflows/pain-point-collateral/src/finalize-tool.ts b/workflows/pain-point-collateral/src/finalize-tool.ts
index 1271aa823c..c1060ca2d3 100644
--- a/workflows/pain-point-collateral/src/finalize-tool.ts
+++ b/workflows/pain-point-collateral/src/finalize-tool.ts
@@ -39,8 +39,7 @@ import { type } from "arktype";
 import { defineTool, type BaseEnv } from "@intx/agent";
 import { createWorkflowArtifact } from "./artifact-client";
 
-export const PAIN_POINT_COLLATERAL_FINALIZE_TOOL_NAME =
-  "pain_point_collateral_finalize";
+export const PAIN_POINT_COLLATERAL_FINALIZE_TOOL_NAME = "pain_point_collateral_finalize";
 
 export const PAIN_POINT_COLLATERAL_FINALIZE_DESCRIPTION =
   "Finalizes one piece of pain-point sales collateral, pending human approval, and persists it as a Library artifact.";
@@ -101,72 +100,71 @@ export interface WorkflowArtifactEnv extends BaseEnv {
  * `defineTool`'s env-DI factory shape. Needs the sanctioned
  * workflow-artifacts credential trio beyond `BaseEnv`.
  */
-export const PAIN_POINT_COLLATERAL_FINALIZE_TOOL =
-  defineTool<WorkflowArtifactEnv>({
-    id: "@corbits/workflow-pain-point-collateral/finalize",
-    requires: ["hubArtifactsUrl", "sidecarToken", "address"],
+export const PAIN_POINT_COLLATERAL_FINALIZE_TOOL = defineTool<WorkflowArtifactEnv>({
+  id: "@corbits/workflow-pain-point-collateral/finalize",
+  requires: ["hubArtifactsUrl", "sidecarToken", "address"],
+  definitions: [
+    {
+      name: PAIN_POINT_COLLATERAL_FINALIZE_TOOL_NAME,
+      approval: "ask",
+    },
+  ],
+  factory: (env) => ({
     definitions: [
       {
         name: PAIN_POINT_COLLATERAL_FINALIZE_TOOL_NAME,
-        approval: "ask",
-      },
-    ],
-    factory: (env) => ({
-      definitions: [
-        {
-          name: PAIN_POINT_COLLATERAL_FINALIZE_TOOL_NAME,
-          description: PAIN_POINT_COLLATERAL_FINALIZE_DESCRIPTION,
-          inputSchema: {
-            type: "object",
-            properties: {
-              outcome: { type: "string", enum: ["collateral", "status-note"] },
-              title: { type: "string" },
-              painPoint: { type: "string" },
-              content: { type: "string" },
-            },
-            required: ["outcome", "title", "painPoint", "content"],
+        description: PAIN_POINT_COLLATERAL_FINALIZE_DESCRIPTION,
+        inputSchema: {
+          type: "object",
+          properties: {
+            outcome: { type: "string", enum: ["collateral", "status-note"] },
+            title: { type: "string" },
+            painPoint: { type: "string" },
+            content: { type: "string" },
           },
+          required: ["outcome", "title", "painPoint", "content"],
         },
-      ],
-      run: async (call) => {
-        const parsed = FinalizeArgs(call.arguments);
-        if (parsed instanceof type.errors) {
-          return {
-            callId: call.id,
-            isError: true,
-            content: `Invalid arguments for ${PAIN_POINT_COLLATERAL_FINALIZE_TOOL_NAME}: ${parsed.summary}`,
-          };
-        }
-        const artifact = buildArtifactPayload(parsed);
-        try {
-          const created = await createWorkflowArtifact(
-            {
-              hubArtifactsUrl: env.hubArtifactsUrl,
-              sidecarToken: env.sidecarToken,
-              runAddress: env.address,
-            },
-            artifact,
-          );
-          return {
-            callId: call.id,
-            isError: false,
-            content: JSON.stringify({
-              id: created.id,
-              version: created.version,
-              title: artifact.title,
-              kind: artifact.kind,
-              persisted: true,
-            }),
-          };
-        } catch (err) {
-          return {
-            callId: call.id,
-            isError: true,
-            content: `Failed to persist "${artifact.title}" as a Library artifact: ${
-              err instanceof Error ? err.message : String(err)
-            }`,
-          };
-        }
       },
-    }),
-  });
+    ],
+    run: async (call) => {
+      const parsed = FinalizeArgs(call.arguments);
+      if (parsed instanceof type.errors) {
+        return {
+          callId: call.id,
+          isError: true,
+          content: `Invalid arguments for ${PAIN_POINT_COLLATERAL_FINALIZE_TOOL_NAME}: ${parsed.summary}`,
+        };
+      }
+      const artifact = buildArtifactPayload(parsed);
+      try {
+        const created = await createWorkflowArtifact(
+          {
+            hubArtifactsUrl: env.hubArtifactsUrl,
+            sidecarToken: env.sidecarToken,
+            runAddress: env.address,
+          },
+          artifact,
+        );
+        return {
+          callId: call.id,
+          isError: false,
+          content: JSON.stringify({
+            id: created.id,
+            version: created.version,
+            title: artifact.title,
+            kind: artifact.kind,
+            persisted: true,
+          }),
+        };
+      } catch (err) {
+        return {
+          callId: call.id,
+          isError: true,
+          content: `Failed to persist "${artifact.title}" as a Library artifact: ${
+            err instanceof Error ? err.message : String(err)
+          }`,
+        };
+      }
+    },
+  }),
+});
diff --git a/workflows/pain-point-collateral/src/index.ts b/workflows/pain-point-collateral/src/index.ts
index 98e634a647..313e07e512 100644
--- a/workflows/pain-point-collateral/src/index.ts
+++ b/workflows/pain-point-collateral/src/index.ts
@@ -98,8 +98,9 @@ export const PAIN_POINT_COLLATERAL_SYSTEM_PROMPT =
   "error, and never apologize as if something broke.";
 
 /** Tool packages this definition pins (CL-5999); see the header comment. */
-export const PAIN_POINT_COLLATERAL_TOOL_PACKAGE_PINS: readonly ToolPackagePin[] =
-  [{ name: "@corbits/granola-tools", version: "0.0.4" }];
+export const PAIN_POINT_COLLATERAL_TOOL_PACKAGE_PINS: readonly ToolPackagePin[] = [
+  { name: "@corbits/granola-tools", version: "0.0.5" },
+];
 
 /**
  * Binds `@corbits/granola-tools`' declared "granola" handle to a
@@ -107,15 +108,14 @@ export const PAIN_POINT_COLLATERAL_TOOL_PACKAGE_PINS: readonly ToolPackagePin[]
  * `workflows/granola-call/src/index.ts`'s sibling constant for the full
  * rationale.
  */
-export const PAIN_POINT_COLLATERAL_CREDENTIAL_BINDINGS: readonly CredentialBinding[] =
-  [
-    {
-      package: "@corbits/granola-tools",
-      handle: "granola",
-      provider: "granola",
-      locator: "tenant",
-    },
-  ];
+export const PAIN_POINT_COLLATERAL_CREDENTIAL_BINDINGS: readonly CredentialBinding[] = [
+  {
+    package: "@corbits/granola-tools",
+    handle: "granola",
+    provider: "granola",
+    locator: "tenant",
+  },
+];
 
 /**
  * Everything the definition needs that is per-deployment data. The
@@ -146,9 +146,7 @@ export function buildPainPointCollateralWorkflow(
   input: PainPointCollateralWorkflowInput,
 ): WorkflowDefinition {
   if (input.triggerAddress === "") {
-    throw new Error(
-      "buildPainPointCollateralWorkflow requires a non-empty triggerAddress",
-    );
+    throw new Error("buildPainPointCollateralWorkflow requires a non-empty triggerAddress");
   }
   if (!Number.isInteger(input.turnTimeoutMs) || input.turnTimeoutMs <= 0) {
     throw new Error(
@@ -185,9 +183,7 @@ export function buildPainPointCollateralWorkflow(
  * symbols, bigints, non-finite numbers, class instances — is a loud
  * error naming the offending path instead of a corrupted asset.
  */
-export function serializePainPointCollateralWorkflow(
-  definition: WorkflowDefinition,
-): string {
+export function serializePainPointCollateralWorkflow(definition: WorkflowDefinition): string {
   assertJsonPortable(definition, "definition");
   return JSON.stringify(definition);
 }
@@ -207,8 +203,7 @@ function assertJsonPortable(value: unknown, path: string): void {
       break;
     default:
       throw new Error(
-        `${path} is a ${typeof value}, which does not survive JSON ` +
-          "serialization",
+        `${path} is a ${typeof value}, which does not survive JSON ` + "serialization",
       );
   }
   if (Array.isArray(value)) {
@@ -219,9 +214,7 @@ function assertJsonPortable(value: unknown, path: string): void {
   }
   const proto: unknown = Object.getPrototypeOf(value);
   if (proto !== Object.prototype && proto !== null) {
-    throw new Error(
-      `${path} is a non-plain object; JSON would flatten it lossily`,
-    );
+    throw new Error(`${path} is a non-plain object; JSON would flatten it lossily`);
   }
   for (const [key, entry] of Object.entries(value)) {
     assertJsonPortable(entry, `${path}.${key}`);
diff --git a/workflows/pain-point-collateral/src/intake-tool.ts b/workflows/pain-point-collateral/src/intake-tool.ts
index 664d2bc304..17bcd0baf6 100644
--- a/workflows/pain-point-collateral/src/intake-tool.ts
+++ b/workflows/pain-point-collateral/src/intake-tool.ts
@@ -20,8 +20,7 @@
 import { type } from "arktype";
 import { defineTool, type BaseEnv } from "@intx/agent";
 
-export const PAIN_POINT_COLLATERAL_INTAKE_TOOL_NAME =
-  "pain_point_collateral_intake";
+export const PAIN_POINT_COLLATERAL_INTAKE_TOOL_NAME = "pain_point_collateral_intake";
 
 export const PAIN_POINT_COLLATERAL_INTAKE_DESCRIPTION =
   "Validates and normalizes the trigger's named intake fields (a pasted transcript or a Granola note id), reporting which one, if either, was actually given.";
diff --git a/workflows/pain-point-collateral/test/boundary.test.ts b/workflows/pain-point-collateral/test/boundary.test.ts
index eee1e1d15d..4f55feb147 100644
--- a/workflows/pain-point-collateral/test/boundary.test.ts
+++ b/workflows/pain-point-collateral/test/boundary.test.ts
@@ -39,9 +39,7 @@ test("shipped sources import only published platform packages", async () => {
     const content = await readFile(file, "utf8");
     for (const match of content.matchAll(importPattern)) {
       const specifier = match[1] ?? "";
-      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) =>
-        specifier.startsWith(prefix),
-      );
+      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) => specifier.startsWith(prefix));
       if (!allowed) {
         violations.push(`${path.basename(file)}: ${specifier}`);
       }
diff --git a/workflows/pain-point-collateral/test/definition.test.ts b/workflows/pain-point-collateral/test/definition.test.ts
index f8c55b6658..4c6d093525 100644
--- a/workflows/pain-point-collateral/test/definition.test.ts
+++ b/workflows/pain-point-collateral/test/definition.test.ts
@@ -27,9 +27,7 @@ const INPUT = {
 function collateralStep(definition: WorkflowDefinition): StepPrimitive {
   const primitive = definition.steps[PAIN_POINT_COLLATERAL_STEP_ID];
   if (primitive === undefined || primitive.kind !== "step") {
-    throw new Error(
-      `definition has no step primitive named ${PAIN_POINT_COLLATERAL_STEP_ID}`,
-    );
+    throw new Error(`definition has no step primitive named ${PAIN_POINT_COLLATERAL_STEP_ID}`);
   }
   return primitive;
 }
@@ -37,9 +35,7 @@ function collateralStep(definition: WorkflowDefinition): StepPrimitive {
 test("the definition has exactly one step", () => {
   const definition = buildPainPointCollateralWorkflow(INPUT);
   expect(definition.stepOrder).toEqual([PAIN_POINT_COLLATERAL_STEP_ID]);
-  expect(Object.keys(definition.steps)).toEqual([
-    PAIN_POINT_COLLATERAL_STEP_ID,
-  ]);
+  expect(Object.keys(definition.steps)).toEqual([PAIN_POINT_COLLATERAL_STEP_ID]);
 });
 
 test("the step carries an explicit per-turn timeout", () => {
@@ -50,9 +46,7 @@ test("the step carries an explicit per-turn timeout", () => {
 test("the workflow is triggered by mail to the given deployment address", () => {
   const definition = buildPainPointCollateralWorkflow(INPUT);
   expect(definition.id).toBe(PAIN_POINT_COLLATERAL_WORKFLOW_ID);
-  expect(definition.triggers).toEqual([
-    { type: "mail", to: INPUT.triggerAddress },
-  ]);
+  expect(definition.triggers).toEqual([{ type: "mail", to: INPUT.triggerAddress }]);
 });
 
 test("the agent carries the fixed prompt, the preferences, and inlines no tools", () => {
@@ -66,24 +60,18 @@ test("the agent carries the fixed prompt, the preferences, and inlines no tools"
 
 test("the agent pins @corbits/granola-tools by name and version", () => {
   const agent = collateralStep(buildPainPointCollateralWorkflow(INPUT)).agent;
-  expect(agent.toolPackagePins).toEqual([
-    ...PAIN_POINT_COLLATERAL_TOOL_PACKAGE_PINS,
-  ]);
+  expect(agent.toolPackagePins).toEqual([...PAIN_POINT_COLLATERAL_TOOL_PACKAGE_PINS]);
   expect(PAIN_POINT_COLLATERAL_TOOL_PACKAGE_PINS).toEqual([
-    { name: "@corbits/granola-tools", version: "0.0.4" },
+    { name: "@corbits/granola-tools", version: "0.0.5" },
   ]);
 });
 
 test("the system prompt names the exact approval-gated finalize tool", () => {
-  expect(PAIN_POINT_COLLATERAL_SYSTEM_PROMPT).toContain(
-    PAIN_POINT_COLLATERAL_FINALIZE_TOOL_NAME,
-  );
+  expect(PAIN_POINT_COLLATERAL_SYSTEM_PROMPT).toContain(PAIN_POINT_COLLATERAL_FINALIZE_TOOL_NAME);
 });
 
 test("the system prompt names the intake tool and requires calling it first", () => {
-  expect(PAIN_POINT_COLLATERAL_SYSTEM_PROMPT).toContain(
-    PAIN_POINT_COLLATERAL_INTAKE_TOOL_NAME,
-  );
+  expect(PAIN_POINT_COLLATERAL_SYSTEM_PROMPT).toContain(PAIN_POINT_COLLATERAL_INTAKE_TOOL_NAME);
 });
 
 test("the system prompt names both trigger-carried fields unambiguously", () => {
@@ -101,16 +89,12 @@ test("the system prompt commits to a teaching artifact, not silence, when intake
 
 test("the system prompt commits to a calm terminal reply on denial, not an error", () => {
   expect(PAIN_POINT_COLLATERAL_SYSTEM_PROMPT).toMatch(/not approved/i);
-  expect(PAIN_POINT_COLLATERAL_SYSTEM_PROMPT).toMatch(
-    /never present a denial as an error/i,
-  );
+  expect(PAIN_POINT_COLLATERAL_SYSTEM_PROMPT).toMatch(/never present a denial as an error/i);
 });
 
 test("the definition binds @corbits/granola-tools' declared handle to a tenant-owned granola credential", () => {
   const definition = buildPainPointCollateralWorkflow(INPUT);
-  expect(definition.credentialBindings).toEqual([
-    ...PAIN_POINT_COLLATERAL_CREDENTIAL_BINDINGS,
-  ]);
+  expect(definition.credentialBindings).toEqual([...PAIN_POINT_COLLATERAL_CREDENTIAL_BINDINGS]);
   expect(PAIN_POINT_COLLATERAL_CREDENTIAL_BINDINGS).toEqual([
     {
       package: "@corbits/granola-tools",
@@ -123,23 +107,21 @@ test("the definition binds @corbits/granola-tools' declared handle to a tenant-o
 
 test("the definition survives the workflow-asset JSON round-trip", () => {
   const definition = buildPainPointCollateralWorkflow(INPUT);
-  const revived: unknown = JSON.parse(
-    serializePainPointCollateralWorkflow(definition),
-  );
+  const revived: unknown = JSON.parse(serializePainPointCollateralWorkflow(definition));
   expect(revived).toEqual(definition);
 });
 
 test("an empty trigger address is rejected", () => {
-  expect(() =>
-    buildPainPointCollateralWorkflow({ ...INPUT, triggerAddress: "" }),
-  ).toThrow(/triggerAddress/);
+  expect(() => buildPainPointCollateralWorkflow({ ...INPUT, triggerAddress: "" })).toThrow(
+    /triggerAddress/,
+  );
 });
 
 test("a non-positive or fractional turn timeout is rejected", () => {
-  expect(() =>
-    buildPainPointCollateralWorkflow({ ...INPUT, turnTimeoutMs: 0 }),
-  ).toThrow(/turnTimeoutMs/);
-  expect(() =>
-    buildPainPointCollateralWorkflow({ ...INPUT, turnTimeoutMs: 0.5 }),
-  ).toThrow(/turnTimeoutMs/);
+  expect(() => buildPainPointCollateralWorkflow({ ...INPUT, turnTimeoutMs: 0 })).toThrow(
+    /turnTimeoutMs/,
+  );
+  expect(() => buildPainPointCollateralWorkflow({ ...INPUT, turnTimeoutMs: 0.5 })).toThrow(
+    /turnTimeoutMs/,
+  );
 });
diff --git a/workflows/process-granola-call/package.json b/workflows/process-granola-call/package.json
index c0318d7f02..ccbea557e7 100644
--- a/workflows/process-granola-call/package.json
+++ b/workflows/process-granola-call/package.json
@@ -1,31 +1,21 @@
 {
   "name": "@corbits/process-granola-call-workflow",
-  "description": "Processes one Granola call end to end: raw transcript artifact, extracted working notes, then a verified, published call-notes artifact",
   "version": "0.0.1",
+  "description": "Processes one Granola call end to end: raw transcript artifact, extracted working notes, then a verified, published call-notes artifact",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "corbits": {
-    "workflow": {
-      "assetName": "process-granola-call",
-      "displayName": "Process Granola call",
-      "automatable": false
-    }
-  },
-  "interchange": {
-    "workflow": "./src/index.ts"
-  },
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "workflows/process-granola-call"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "workflows/process-granola-call"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -37,13 +27,23 @@
   "dependencies": {
     "arktype": "catalog:"
   },
+  "devDependencies": {
+    "@types/bun": "catalog:",
+    "typescript": "catalog:"
+  },
   "peerDependencies": {
     "@intx/agent": "0.3.0",
     "@intx/types": "0.3.0",
     "@intx/workflow": "0.3.0"
   },
-  "devDependencies": {
-    "@types/bun": "catalog:",
-    "typescript": "catalog:"
+  "corbits": {
+    "workflow": {
+      "assetName": "process-granola-call",
+      "displayName": "Process Granola call",
+      "automatable": false
+    }
+  },
+  "interchange": {
+    "workflow": "./src/index.ts"
   }
 }
diff --git a/workflows/process-granola-call/src/artifact-client.test.ts b/workflows/process-granola-call/src/artifact-client.test.ts
index 2a4088cc47..1c86414419 100644
--- a/workflows/process-granola-call/src/artifact-client.test.ts
+++ b/workflows/process-granola-call/src/artifact-client.test.ts
@@ -27,17 +27,14 @@ test("posts to the workflow-artifacts endpoint and returns id/version", async ()
   );
 
   expect(result).toEqual({ id: "art_1", version: 1 });
-  expect(captured.url).toBe(
-    "https://hub.example.com/api/workflow-artifacts/artifacts",
-  );
+  expect(captured.url).toBe("https://hub.example.com/api/workflow-artifacts/artifacts");
   const headers = captured.init?.headers as Record<string, string>;
   expect(headers["authorization"]).toBe("Bearer sc-token");
   expect(headers["x-workflow-run-address"]).toBe("run_1@workflow");
 });
 
 test("throws on a non-ok HTTP response", async () => {
-  const fetchImpl = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  const fetchImpl = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
 
   await expect(
     createWorkflowArtifact(
diff --git a/workflows/process-granola-call/src/artifact-client.ts b/workflows/process-granola-call/src/artifact-client.ts
index f87eb50db5..b9d56ca425 100644
--- a/workflows/process-granola-call/src/artifact-client.ts
+++ b/workflows/process-granola-call/src/artifact-client.ts
@@ -39,22 +39,17 @@ export async function createWorkflowArtifact(
   input: CreateWorkflowArtifactInput,
 ): Promise<CreatedWorkflowArtifact> {
   const doFetch = config.fetchImpl ?? fetch;
-  const response = await doFetch(
-    `${config.hubArtifactsUrl}/api/workflow-artifacts/artifacts`,
-    {
-      method: "POST",
-      headers: {
-        authorization: `Bearer ${config.sidecarToken}`,
-        "x-workflow-run-address": config.runAddress,
-        "content-type": "application/json",
-      },
-      body: JSON.stringify(input),
+  const response = await doFetch(`${config.hubArtifactsUrl}/api/workflow-artifacts/artifacts`, {
+    method: "POST",
+    headers: {
+      authorization: `Bearer ${config.sidecarToken}`,
+      "x-workflow-run-address": config.runAddress,
+      "content-type": "application/json",
     },
-  );
+    body: JSON.stringify(input),
+  });
   if (!response.ok) {
-    throw new Error(
-      `Workflow artifact create failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`Workflow artifact create failed: ${response.status} ${response.statusText}`);
   }
   const body: unknown = await response.json();
   const parsed = CreatedWorkflowArtifactResponse(body);
diff --git a/workflows/process-granola-call/src/finalize-tool.test.ts b/workflows/process-granola-call/src/finalize-tool.test.ts
index d80999b54e..842097e2df 100644
--- a/workflows/process-granola-call/src/finalize-tool.test.ts
+++ b/workflows/process-granola-call/src/finalize-tool.test.ts
@@ -167,8 +167,7 @@ test("run persists a teaching artifact for the no-data case, still chip-visible"
 
 test("run returns an honest error result when persistence fails, never fabricating persisted: true", async () => {
   const originalFetch = globalThis.fetch;
-  globalThis.fetch = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  globalThis.fetch = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
 
   try {
     const bundle = PROCESS_GRANOLA_CALL_FINALIZE_TOOL(testEnv());
diff --git a/workflows/process-granola-call/src/finalize-tool.ts b/workflows/process-granola-call/src/finalize-tool.ts
index 9e84490573..03c69088f9 100644
--- a/workflows/process-granola-call/src/finalize-tool.ts
+++ b/workflows/process-granola-call/src/finalize-tool.ts
@@ -35,8 +35,7 @@ import { type } from "arktype";
 import { defineTool, type BaseEnv } from "@intx/agent";
 import { createWorkflowArtifact } from "./artifact-client";
 
-export const PROCESS_GRANOLA_CALL_FINALIZE_TOOL_NAME =
-  "process_granola_call_finalize";
+export const PROCESS_GRANOLA_CALL_FINALIZE_TOOL_NAME = "process_granola_call_finalize";
 
 export const PROCESS_GRANOLA_CALL_FINALIZE_DESCRIPTION =
   "Finalizes one Granola call, pending human approval, and persists the " +
@@ -130,78 +129,77 @@ export interface WorkflowArtifactEnv extends BaseEnv {
  * `defineTool`'s env-DI factory shape. Needs the sanctioned
  * workflow-artifacts credential trio beyond `BaseEnv`.
  */
-export const PROCESS_GRANOLA_CALL_FINALIZE_TOOL =
-  defineTool<WorkflowArtifactEnv>({
-    id: "@corbits/workflow-process-granola-call/finalize",
-    requires: ["hubArtifactsUrl", "sidecarToken", "address"],
+export const PROCESS_GRANOLA_CALL_FINALIZE_TOOL = defineTool<WorkflowArtifactEnv>({
+  id: "@corbits/workflow-process-granola-call/finalize",
+  requires: ["hubArtifactsUrl", "sidecarToken", "address"],
+  definitions: [
+    {
+      name: PROCESS_GRANOLA_CALL_FINALIZE_TOOL_NAME,
+      approval: "ask",
+    },
+  ],
+  factory: (env) => ({
     definitions: [
       {
         name: PROCESS_GRANOLA_CALL_FINALIZE_TOOL_NAME,
-        approval: "ask",
-      },
-    ],
-    factory: (env) => ({
-      definitions: [
-        {
-          name: PROCESS_GRANOLA_CALL_FINALIZE_TOOL_NAME,
-          description: PROCESS_GRANOLA_CALL_FINALIZE_DESCRIPTION,
-          inputSchema: {
-            type: "object",
-            properties: {
-              status: { type: "string", enum: ["notes", "no-data"] },
-              callId: { type: "string" },
-              title: { type: "string" },
-              participants: { type: "string" },
-              summary: { type: "string" },
-              painPoints: { type: "string" },
-              decisions: { type: "string" },
-              actionItems: { type: "string" },
-              reason: { type: "string" },
-              nextSteps: { type: "string" },
-            },
-            required: ["status", "callId", "title"],
+        description: PROCESS_GRANOLA_CALL_FINALIZE_DESCRIPTION,
+        inputSchema: {
+          type: "object",
+          properties: {
+            status: { type: "string", enum: ["notes", "no-data"] },
+            callId: { type: "string" },
+            title: { type: "string" },
+            participants: { type: "string" },
+            summary: { type: "string" },
+            painPoints: { type: "string" },
+            decisions: { type: "string" },
+            actionItems: { type: "string" },
+            reason: { type: "string" },
+            nextSteps: { type: "string" },
           },
+          required: ["status", "callId", "title"],
         },
-      ],
-      run: async (call) => {
-        const parsed = FinalizeArgs(call.arguments);
-        if (parsed instanceof type.errors) {
-          return {
-            callId: call.id,
-            isError: true,
-            content: `Invalid arguments for ${PROCESS_GRANOLA_CALL_FINALIZE_TOOL_NAME}: ${parsed.summary}`,
-          };
-        }
-        const artifact = buildArtifactPayload(parsed);
-        try {
-          const created = await createWorkflowArtifact(
-            {
-              hubArtifactsUrl: env.hubArtifactsUrl,
-              sidecarToken: env.sidecarToken,
-              runAddress: env.address,
-            },
-            artifact,
-          );
-          return {
-            callId: call.id,
-            isError: false,
-            content: JSON.stringify({
-              id: created.id,
-              version: created.version,
-              title: artifact.title,
-              kind: artifact.kind,
-              persisted: true,
-            }),
-          };
-        } catch (err) {
-          return {
-            callId: call.id,
-            isError: true,
-            content: `Failed to persist "${artifact.title}" as a Library artifact: ${
-              err instanceof Error ? err.message : String(err)
-            }`,
-          };
-        }
       },
-    }),
-  });
+    ],
+    run: async (call) => {
+      const parsed = FinalizeArgs(call.arguments);
+      if (parsed instanceof type.errors) {
+        return {
+          callId: call.id,
+          isError: true,
+          content: `Invalid arguments for ${PROCESS_GRANOLA_CALL_FINALIZE_TOOL_NAME}: ${parsed.summary}`,
+        };
+      }
+      const artifact = buildArtifactPayload(parsed);
+      try {
+        const created = await createWorkflowArtifact(
+          {
+            hubArtifactsUrl: env.hubArtifactsUrl,
+            sidecarToken: env.sidecarToken,
+            runAddress: env.address,
+          },
+          artifact,
+        );
+        return {
+          callId: call.id,
+          isError: false,
+          content: JSON.stringify({
+            id: created.id,
+            version: created.version,
+            title: artifact.title,
+            kind: artifact.kind,
+            persisted: true,
+          }),
+        };
+      } catch (err) {
+        return {
+          callId: call.id,
+          isError: true,
+          content: `Failed to persist "${artifact.title}" as a Library artifact: ${
+            err instanceof Error ? err.message : String(err)
+          }`,
+        };
+      }
+    },
+  }),
+});
diff --git a/workflows/process-granola-call/src/index.ts b/workflows/process-granola-call/src/index.ts
index b50c958098..7083b90d48 100644
--- a/workflows/process-granola-call/src/index.ts
+++ b/workflows/process-granola-call/src/index.ts
@@ -82,8 +82,9 @@ export const PROCESS_GRANOLA_CALL_SYSTEM_PROMPT =
   "error.";
 
 /** Tool packages this definition pins (CL-5999); see the header comment. */
-export const PROCESS_GRANOLA_CALL_TOOL_PACKAGE_PINS: readonly ToolPackagePin[] =
-  [{ name: "@corbits/granola-tools", version: "0.0.4" }];
+export const PROCESS_GRANOLA_CALL_TOOL_PACKAGE_PINS: readonly ToolPackagePin[] = [
+  { name: "@corbits/granola-tools", version: "0.0.5" },
+];
 
 /**
  * Binds `@corbits/granola-tools`' declared "granola" handle to a
@@ -91,15 +92,14 @@ export const PROCESS_GRANOLA_CALL_TOOL_PACKAGE_PINS: readonly ToolPackagePin[] =
  * `workflows/granola-call/src/index.ts`'s sibling constant for the full
  * rationale.
  */
-export const PROCESS_GRANOLA_CALL_CREDENTIAL_BINDINGS: readonly CredentialBinding[] =
-  [
-    {
-      package: "@corbits/granola-tools",
-      handle: "granola",
-      provider: "granola",
-      locator: "tenant",
-    },
-  ];
+export const PROCESS_GRANOLA_CALL_CREDENTIAL_BINDINGS: readonly CredentialBinding[] = [
+  {
+    package: "@corbits/granola-tools",
+    handle: "granola",
+    provider: "granola",
+    locator: "tenant",
+  },
+];
 
 /**
  * Everything the definition needs that is per-deployment data. The
@@ -134,9 +134,7 @@ export function buildProcessGranolaCallWorkflow(
   input: ProcessGranolaCallWorkflowInput,
 ): WorkflowDefinition {
   if (input.triggerAddress === "") {
-    throw new Error(
-      "buildProcessGranolaCallWorkflow requires a non-empty triggerAddress",
-    );
+    throw new Error("buildProcessGranolaCallWorkflow requires a non-empty triggerAddress");
   }
   if (!Number.isInteger(input.turnTimeoutMs) || input.turnTimeoutMs <= 0) {
     throw new Error(
@@ -152,8 +150,7 @@ export function buildProcessGranolaCallWorkflow(
         agent: {
           id: PROCESS_GRANOLA_CALL_STEP_ID,
           description:
-            "Processes one Granola call into a verified, published " +
-            "call-notes artifact",
+            "Processes one Granola call into a verified, published " + "call-notes artifact",
           systemPrompt: PROCESS_GRANOLA_CALL_SYSTEM_PROMPT,
           toolFactories: [],
           capabilities: [],
@@ -173,9 +170,7 @@ export function buildProcessGranolaCallWorkflow(
  * symbols, bigints, non-finite numbers, class instances — is a loud
  * error naming the offending path instead of a corrupted asset.
  */
-export function serializeProcessGranolaCallWorkflow(
-  definition: WorkflowDefinition,
-): string {
+export function serializeProcessGranolaCallWorkflow(definition: WorkflowDefinition): string {
   assertJsonPortable(definition, "definition");
   return JSON.stringify(definition);
 }
@@ -195,8 +190,7 @@ function assertJsonPortable(value: unknown, path: string): void {
       break;
     default:
       throw new Error(
-        `${path} is a ${typeof value}, which does not survive JSON ` +
-          "serialization",
+        `${path} is a ${typeof value}, which does not survive JSON ` + "serialization",
       );
   }
   if (Array.isArray(value)) {
@@ -207,9 +201,7 @@ function assertJsonPortable(value: unknown, path: string): void {
   }
   const proto: unknown = Object.getPrototypeOf(value);
   if (proto !== Object.prototype && proto !== null) {
-    throw new Error(
-      `${path} is a non-plain object; JSON would flatten it lossily`,
-    );
+    throw new Error(`${path} is a non-plain object; JSON would flatten it lossily`);
   }
   for (const [key, entry] of Object.entries(value)) {
     assertJsonPortable(entry, `${path}.${key}`);
diff --git a/workflows/process-granola-call/test/boundary.test.ts b/workflows/process-granola-call/test/boundary.test.ts
index eee1e1d15d..4f55feb147 100644
--- a/workflows/process-granola-call/test/boundary.test.ts
+++ b/workflows/process-granola-call/test/boundary.test.ts
@@ -39,9 +39,7 @@ test("shipped sources import only published platform packages", async () => {
     const content = await readFile(file, "utf8");
     for (const match of content.matchAll(importPattern)) {
       const specifier = match[1] ?? "";
-      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) =>
-        specifier.startsWith(prefix),
-      );
+      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) => specifier.startsWith(prefix));
       if (!allowed) {
         violations.push(`${path.basename(file)}: ${specifier}`);
       }
diff --git a/workflows/process-granola-call/test/definition.test.ts b/workflows/process-granola-call/test/definition.test.ts
index 71ea448c2c..84f7680daf 100644
--- a/workflows/process-granola-call/test/definition.test.ts
+++ b/workflows/process-granola-call/test/definition.test.ts
@@ -26,9 +26,7 @@ const INPUT = {
 function processStep(definition: WorkflowDefinition): StepPrimitive {
   const primitive = definition.steps[PROCESS_GRANOLA_CALL_STEP_ID];
   if (primitive === undefined || primitive.kind !== "step") {
-    throw new Error(
-      `definition has no step primitive named ${PROCESS_GRANOLA_CALL_STEP_ID}`,
-    );
+    throw new Error(`definition has no step primitive named ${PROCESS_GRANOLA_CALL_STEP_ID}`);
   }
   return primitive;
 }
@@ -47,9 +45,7 @@ test("the step carries an explicit per-turn timeout", () => {
 test("the workflow is triggered by mail to the given deployment address", () => {
   const definition = buildProcessGranolaCallWorkflow(INPUT);
   expect(definition.id).toBe(PROCESS_GRANOLA_CALL_WORKFLOW_ID);
-  expect(definition.triggers).toEqual([
-    { type: "mail", to: INPUT.triggerAddress },
-  ]);
+  expect(definition.triggers).toEqual([{ type: "mail", to: INPUT.triggerAddress }]);
 });
 
 test("the agent instructs the five-section extraction, carries the preferences, and inlines no tools", () => {
@@ -57,24 +53,16 @@ test("the agent instructs the five-section extraction, carries the preferences,
   expect(agent.systemPrompt).toBe(PROCESS_GRANOLA_CALL_SYSTEM_PROMPT);
   expect(agent.inference.sources).toEqual([...INPUT.inferencePreferences]);
   expect(agent.toolFactories).toEqual([]);
-  for (const section of [
-    "Participants",
-    "Summary",
-    "Pain points",
-    "Decisions",
-    "Action items",
-  ]) {
+  for (const section of ["Participants", "Summary", "Pain points", "Decisions", "Action items"]) {
     expect(PROCESS_GRANOLA_CALL_SYSTEM_PROMPT).toContain(section);
   }
 });
 
 test("the agent pins @corbits/granola-tools by name and version", () => {
   const agent = processStep(buildProcessGranolaCallWorkflow(INPUT)).agent;
-  expect(agent.toolPackagePins).toEqual([
-    ...PROCESS_GRANOLA_CALL_TOOL_PACKAGE_PINS,
-  ]);
+  expect(agent.toolPackagePins).toEqual([...PROCESS_GRANOLA_CALL_TOOL_PACKAGE_PINS]);
   expect(PROCESS_GRANOLA_CALL_TOOL_PACKAGE_PINS).toEqual([
-    { name: "@corbits/granola-tools", version: "0.0.4" },
+    { name: "@corbits/granola-tools", version: "0.0.5" },
   ]);
 });
 
@@ -85,9 +73,7 @@ test("the system prompt commits to an honest failure instead of a fabricated doc
 });
 
 test("the system prompt names the finalize tool for both the notes and no-data cases", () => {
-  expect(PROCESS_GRANOLA_CALL_SYSTEM_PROMPT).toContain(
-    PROCESS_GRANOLA_CALL_FINALIZE_TOOL_NAME,
-  );
+  expect(PROCESS_GRANOLA_CALL_SYSTEM_PROMPT).toContain(PROCESS_GRANOLA_CALL_FINALIZE_TOOL_NAME);
   expect(PROCESS_GRANOLA_CALL_SYSTEM_PROMPT).toContain('status: "notes"');
   expect(PROCESS_GRANOLA_CALL_SYSTEM_PROMPT).toContain('status: "no-data"');
 });
@@ -100,9 +86,7 @@ test("the no-data path still teaches the human what to check next, not a bare fa
 
 test("the definition binds @corbits/granola-tools' declared handle to a tenant-owned granola credential", () => {
   const definition = buildProcessGranolaCallWorkflow(INPUT);
-  expect(definition.credentialBindings).toEqual([
-    ...PROCESS_GRANOLA_CALL_CREDENTIAL_BINDINGS,
-  ]);
+  expect(definition.credentialBindings).toEqual([...PROCESS_GRANOLA_CALL_CREDENTIAL_BINDINGS]);
   expect(PROCESS_GRANOLA_CALL_CREDENTIAL_BINDINGS).toEqual([
     {
       package: "@corbits/granola-tools",
@@ -115,9 +99,7 @@ test("the definition binds @corbits/granola-tools' declared handle to a tenant-o
 
 test("the definition survives the workflow-asset JSON round-trip", () => {
   const definition = buildProcessGranolaCallWorkflow(INPUT);
-  const revived: unknown = JSON.parse(
-    serializeProcessGranolaCallWorkflow(definition),
-  );
+  const revived: unknown = JSON.parse(serializeProcessGranolaCallWorkflow(definition));
   expect(revived).toEqual(definition);
 });
 
@@ -147,16 +129,16 @@ test("serialization fails loud on a function-valued field, naming its path", ()
 });
 
 test("an empty trigger address is rejected", () => {
-  expect(() =>
-    buildProcessGranolaCallWorkflow({ ...INPUT, triggerAddress: "" }),
-  ).toThrow(/triggerAddress/);
+  expect(() => buildProcessGranolaCallWorkflow({ ...INPUT, triggerAddress: "" })).toThrow(
+    /triggerAddress/,
+  );
 });
 
 test("a non-positive or fractional turn timeout is rejected", () => {
-  expect(() =>
-    buildProcessGranolaCallWorkflow({ ...INPUT, turnTimeoutMs: 0 }),
-  ).toThrow(/turnTimeoutMs/);
-  expect(() =>
-    buildProcessGranolaCallWorkflow({ ...INPUT, turnTimeoutMs: 0.5 }),
-  ).toThrow(/turnTimeoutMs/);
+  expect(() => buildProcessGranolaCallWorkflow({ ...INPUT, turnTimeoutMs: 0 })).toThrow(
+    /turnTimeoutMs/,
+  );
+  expect(() => buildProcessGranolaCallWorkflow({ ...INPUT, turnTimeoutMs: 0.5 })).toThrow(
+    /turnTimeoutMs/,
+  );
 });
diff --git a/workflows/reddit-opportunity-scanner/package.json b/workflows/reddit-opportunity-scanner/package.json
index 430c89326f..9c09f5cb2d 100644
--- a/workflows/reddit-opportunity-scanner/package.json
+++ b/workflows/reddit-opportunity-scanner/package.json
@@ -1,31 +1,21 @@
 {
   "name": "@corbits/reddit-opportunity-scanner-workflow",
-  "description": "Turns one target website into a short list of scored Reddit opportunities, with a search-plan review and one human approval before anything is finalized",
   "version": "0.0.1",
+  "description": "Turns one target website into a short list of scored Reddit opportunities, with a search-plan review and one human approval before anything is finalized",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "corbits": {
-    "workflow": {
-      "assetName": "reddit-opportunity-scanner",
-      "displayName": "Reddit opportunity scanner",
-      "automatable": false
-    }
-  },
-  "interchange": {
-    "workflow": "./src/index.ts"
-  },
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "workflows/reddit-opportunity-scanner"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "workflows/reddit-opportunity-scanner"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -37,12 +27,22 @@
   "dependencies": {
     "arktype": "catalog:"
   },
+  "devDependencies": {
+    "@types/bun": "catalog:",
+    "typescript": "catalog:"
+  },
   "peerDependencies": {
     "@intx/agent": "0.3.0",
     "@intx/workflow": "0.3.0"
   },
-  "devDependencies": {
-    "@types/bun": "catalog:",
-    "typescript": "catalog:"
+  "corbits": {
+    "workflow": {
+      "assetName": "reddit-opportunity-scanner",
+      "displayName": "Reddit opportunity scanner",
+      "automatable": false
+    }
+  },
+  "interchange": {
+    "workflow": "./src/index.ts"
   }
 }
diff --git a/workflows/reddit-opportunity-scanner/src/artifact-client.test.ts b/workflows/reddit-opportunity-scanner/src/artifact-client.test.ts
index 8c3ad14af2..ba52a441e2 100644
--- a/workflows/reddit-opportunity-scanner/src/artifact-client.test.ts
+++ b/workflows/reddit-opportunity-scanner/src/artifact-client.test.ts
@@ -31,17 +31,14 @@ test("posts to the workflow-artifacts endpoint and returns id/version", async ()
   );
 
   expect(result).toEqual({ id: "art_1", version: 1 });
-  expect(captured.url).toBe(
-    "https://hub.example.com/api/workflow-artifacts/artifacts",
-  );
+  expect(captured.url).toBe("https://hub.example.com/api/workflow-artifacts/artifacts");
   const headers = captured.init?.headers as Record<string, string>;
   expect(headers["authorization"]).toBe("Bearer sc-token");
   expect(headers["x-workflow-run-address"]).toBe("run_1@workflow");
 });
 
 test("throws on a non-ok HTTP response", async () => {
-  const fetchImpl = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  const fetchImpl = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
 
   await expect(
     createWorkflowArtifact(
diff --git a/workflows/reddit-opportunity-scanner/src/artifact-client.ts b/workflows/reddit-opportunity-scanner/src/artifact-client.ts
index d3dbbfb806..3576aae0c3 100644
--- a/workflows/reddit-opportunity-scanner/src/artifact-client.ts
+++ b/workflows/reddit-opportunity-scanner/src/artifact-client.ts
@@ -43,22 +43,17 @@ export async function createWorkflowArtifact(
   input: CreateWorkflowArtifactInput,
 ): Promise<CreatedWorkflowArtifact> {
   const doFetch = config.fetchImpl ?? fetch;
-  const response = await doFetch(
-    `${config.hubArtifactsUrl}/api/workflow-artifacts/artifacts`,
-    {
-      method: "POST",
-      headers: {
-        authorization: `Bearer ${config.sidecarToken}`,
-        "x-workflow-run-address": config.runAddress,
-        "content-type": "application/json",
-      },
-      body: JSON.stringify(input),
+  const response = await doFetch(`${config.hubArtifactsUrl}/api/workflow-artifacts/artifacts`, {
+    method: "POST",
+    headers: {
+      authorization: `Bearer ${config.sidecarToken}`,
+      "x-workflow-run-address": config.runAddress,
+      "content-type": "application/json",
     },
-  );
+    body: JSON.stringify(input),
+  });
   if (!response.ok) {
-    throw new Error(
-      `Workflow artifact create failed: ${response.status} ${response.statusText}`,
-    );
+    throw new Error(`Workflow artifact create failed: ${response.status} ${response.statusText}`);
   }
   const body: unknown = await response.json();
   const parsed = CreatedWorkflowArtifactResponse(body);
diff --git a/workflows/reddit-opportunity-scanner/src/finalize-tool.test.ts b/workflows/reddit-opportunity-scanner/src/finalize-tool.test.ts
index fa79362ab6..e06149cdb5 100644
--- a/workflows/reddit-opportunity-scanner/src/finalize-tool.test.ts
+++ b/workflows/reddit-opportunity-scanner/src/finalize-tool.test.ts
@@ -68,13 +68,9 @@ test("buildNoResultsArtifactPayload honestly reports the attempt, missing connec
   });
   expect(payload.kind).toBe("status-note");
   expect(payload.title).toContain("https://example.com");
-  expect(payload.content).toContain(
-    'keyword "onboarding tool" in r/startups: unreachable',
-  );
+  expect(payload.content).toContain('keyword "onboarding tool" in r/startups: unreachable');
   expect(payload.content).toContain("scrapecreators");
-  expect(payload.content).toContain(
-    "Connect the ScrapeCreators connector, then re-run this scan.",
-  );
+  expect(payload.content).toContain("Connect the ScrapeCreators connector, then re-run this scan.");
 });
 
 test("buildNoResultsArtifactPayload is honest when no search was ever reachable", () => {
@@ -100,10 +96,9 @@ test("finalize persists every selected opportunity as a recognized batch result"
   const originalFetch = globalThis.fetch;
   globalThis.fetch = (async () => {
     call += 1;
-    return new Response(
-      JSON.stringify({ data: { id: `art_${call}`, version: 1 } }),
-      { status: 201 },
-    );
+    return new Response(JSON.stringify({ data: { id: `art_${call}`, version: 1 } }), {
+      status: 201,
+    });
   }) as unknown as typeof fetch;
 
   try {
@@ -156,10 +151,7 @@ test("finalize reports a partial failure honestly, naming how many opportunities
   globalThis.fetch = (async () => {
     call += 1;
     if (call === 1) {
-      return new Response(
-        JSON.stringify({ data: { id: "art_1", version: 1 } }),
-        { status: 201 },
-      );
+      return new Response(JSON.stringify({ data: { id: "art_1", version: 1 } }), { status: 201 });
     }
     return new Response("nope", { status: 500 });
   }) as unknown as typeof fetch;
@@ -269,12 +261,9 @@ test("the no-results report persists one honest teaching artifact on real invoca
         name: REDDIT_OPPORTUNITY_SCANNER_REPORT_NO_RESULTS_TOOL_NAME,
         arguments: {
           targetUrl: "https://example.com",
-          attemptedSearches: [
-            'keyword "onboarding tool" in r/startups: unreachable',
-          ],
+          attemptedSearches: ['keyword "onboarding tool" in r/startups: unreachable'],
           missingConnectors: ["scrapecreators"],
-          nextSteps:
-            "Connect the ScrapeCreators connector, then re-run this scan.",
+          nextSteps: "Connect the ScrapeCreators connector, then re-run this scan.",
         },
       },
       new AbortController().signal,
@@ -297,8 +286,7 @@ test("the no-results report persists one honest teaching artifact on real invoca
 
 test("the no-results report surfaces a failed persist honestly", async () => {
   const originalFetch = globalThis.fetch;
-  globalThis.fetch = (async () =>
-    new Response("nope", { status: 500 })) as unknown as typeof fetch;
+  globalThis.fetch = (async () => new Response("nope", { status: 500 })) as unknown as typeof fetch;
 
   try {
     const bundle = REDDIT_OPPORTUNITY_SCANNER_FINALIZE_TOOL(testEnv());
diff --git a/workflows/reddit-opportunity-scanner/src/finalize-tool.ts b/workflows/reddit-opportunity-scanner/src/finalize-tool.ts
index 8b40f7beb8..c610d3ae3c 100644
--- a/workflows/reddit-opportunity-scanner/src/finalize-tool.ts
+++ b/workflows/reddit-opportunity-scanner/src/finalize-tool.ts
@@ -58,8 +58,7 @@ import { type } from "arktype";
 import { defineTool, type BaseEnv } from "@intx/agent";
 import { createWorkflowArtifact } from "./artifact-client";
 
-export const REDDIT_OPPORTUNITY_SCANNER_FINALIZE_TOOL_NAME =
-  "reddit_opportunity_scanner_finalize";
+export const REDDIT_OPPORTUNITY_SCANNER_FINALIZE_TOOL_NAME = "reddit_opportunity_scanner_finalize";
 
 export const REDDIT_OPPORTUNITY_SCANNER_FINALIZE_DESCRIPTION =
   "Finalizes the set of human-selected Reddit opportunities from one run, pending a single human approval, and persists each as a Library artifact.";
@@ -130,9 +129,7 @@ export type ArtifactPayload = {
  * `"reddit-opportunity-scan"` so every persisted opportunity from this
  * workflow is recognizable as one, regardless of subreddit or score.
  */
-export function buildArtifactPayloads(
-  args: FinalizeArgs,
-): readonly ArtifactPayload[] {
+export function buildArtifactPayloads(args: FinalizeArgs): readonly ArtifactPayload[] {
   return args.opportunities.map((opportunity) => ({
     title: opportunity.title,
     kind: ARTIFACT_KIND,
@@ -154,15 +151,10 @@ export function buildArtifactPayloads(
  * the sender should do next. Every line is drawn from `args` — nothing
  * here is invented sample data.
  */
-export function buildNoResultsArtifactPayload(
-  args: NoResultsReportArgs,
-): ArtifactPayload {
+export function buildNoResultsArtifactPayload(args: NoResultsReportArgs): ArtifactPayload {
   const searchesSection =
     args.attemptedSearches.length > 0
-      ? [
-          "Searches attempted:",
-          ...args.attemptedSearches.map((search) => `- ${search}`),
-        ].join("\n")
+      ? ["Searches attempted:", ...args.attemptedSearches.map((search) => `- ${search}`)].join("\n")
       : "No searches were reachable — this run could not reach Reddit before this point.";
   const connectorsSection =
     args.missingConnectors.length > 0
@@ -207,173 +199,152 @@ function artifactClientConfig(env: WorkflowArtifactEnv) {
  * `defineTool`'s env-DI factory shape. Needs the sanctioned
  * workflow-artifacts credential trio beyond `BaseEnv`.
  */
-export const REDDIT_OPPORTUNITY_SCANNER_FINALIZE_TOOL =
-  defineTool<WorkflowArtifactEnv>({
-    id: "@corbits/workflow-reddit-opportunity-scanner/finalize",
-    requires: ["hubArtifactsUrl", "sidecarToken", "address"],
+export const REDDIT_OPPORTUNITY_SCANNER_FINALIZE_TOOL = defineTool<WorkflowArtifactEnv>({
+  id: "@corbits/workflow-reddit-opportunity-scanner/finalize",
+  requires: ["hubArtifactsUrl", "sidecarToken", "address"],
+  definitions: [
+    { name: REDDIT_OPPORTUNITY_SCANNER_FINALIZE_TOOL_NAME, approval: "ask" },
+    { name: REDDIT_OPPORTUNITY_SCANNER_REPORT_NO_RESULTS_TOOL_NAME },
+  ],
+  factory: (env) => ({
     definitions: [
-      { name: REDDIT_OPPORTUNITY_SCANNER_FINALIZE_TOOL_NAME, approval: "ask" },
-      { name: REDDIT_OPPORTUNITY_SCANNER_REPORT_NO_RESULTS_TOOL_NAME },
-    ],
-    factory: (env) => ({
-      definitions: [
-        {
-          name: REDDIT_OPPORTUNITY_SCANNER_FINALIZE_TOOL_NAME,
-          description: REDDIT_OPPORTUNITY_SCANNER_FINALIZE_DESCRIPTION,
-          inputSchema: {
-            type: "object",
-            properties: {
-              opportunities: {
-                type: "array",
-                items: {
-                  type: "object",
-                  properties: {
-                    title: { type: "string" },
-                    subreddit: { type: "string" },
-                    url: { type: "string" },
-                    score: { type: "number" },
-                    whyItMatters: { type: "string" },
-                    content: { type: "string" },
-                  },
-                  required: [
-                    "title",
-                    "subreddit",
-                    "url",
-                    "score",
-                    "whyItMatters",
-                    "content",
-                  ],
+      {
+        name: REDDIT_OPPORTUNITY_SCANNER_FINALIZE_TOOL_NAME,
+        description: REDDIT_OPPORTUNITY_SCANNER_FINALIZE_DESCRIPTION,
+        inputSchema: {
+          type: "object",
+          properties: {
+            opportunities: {
+              type: "array",
+              items: {
+                type: "object",
+                properties: {
+                  title: { type: "string" },
+                  subreddit: { type: "string" },
+                  url: { type: "string" },
+                  score: { type: "number" },
+                  whyItMatters: { type: "string" },
+                  content: { type: "string" },
                 },
+                required: ["title", "subreddit", "url", "score", "whyItMatters", "content"],
               },
             },
-            required: ["opportunities"],
           },
+          required: ["opportunities"],
         },
-        {
-          name: REDDIT_OPPORTUNITY_SCANNER_REPORT_NO_RESULTS_TOOL_NAME,
-          description: REDDIT_OPPORTUNITY_SCANNER_REPORT_NO_RESULTS_DESCRIPTION,
-          inputSchema: {
-            type: "object",
-            properties: {
-              targetUrl: { type: "string" },
-              attemptedSearches: {
-                type: "array",
-                items: { type: "string" },
-              },
-              missingConnectors: {
-                type: "array",
-                items: { type: "string" },
-              },
-              nextSteps: { type: "string" },
+      },
+      {
+        name: REDDIT_OPPORTUNITY_SCANNER_REPORT_NO_RESULTS_TOOL_NAME,
+        description: REDDIT_OPPORTUNITY_SCANNER_REPORT_NO_RESULTS_DESCRIPTION,
+        inputSchema: {
+          type: "object",
+          properties: {
+            targetUrl: { type: "string" },
+            attemptedSearches: {
+              type: "array",
+              items: { type: "string" },
             },
-            required: [
-              "targetUrl",
-              "attemptedSearches",
-              "missingConnectors",
-              "nextSteps",
-            ],
+            missingConnectors: {
+              type: "array",
+              items: { type: "string" },
+            },
+            nextSteps: { type: "string" },
           },
+          required: ["targetUrl", "attemptedSearches", "missingConnectors", "nextSteps"],
         },
-      ],
-      run: async (call) => {
-        if (call.name === REDDIT_OPPORTUNITY_SCANNER_FINALIZE_TOOL_NAME) {
-          const parsed = FinalizeArgs(call.arguments);
-          if (parsed instanceof type.errors) {
-            return {
-              callId: call.id,
-              isError: true,
-              content: `Invalid arguments for ${REDDIT_OPPORTUNITY_SCANNER_FINALIZE_TOOL_NAME}: ${parsed.summary}`,
-            };
-          }
-          if (parsed.opportunities.length === 0) {
-            return {
-              callId: call.id,
-              isError: true,
-              content: `${REDDIT_OPPORTUNITY_SCANNER_FINALIZE_TOOL_NAME} requires at least one selected opportunity`,
-            };
-          }
-          const artifacts = buildArtifactPayloads(parsed);
-          const persisted: {
-            id: string;
-            version: number;
-            title: string;
-            kind: string;
-            persisted: true;
-          }[] = [];
-          for (const artifact of artifacts) {
-            try {
-              const created = await createWorkflowArtifact(
-                artifactClientConfig(env),
-                artifact,
-              );
-              persisted.push({
-                id: created.id,
-                version: created.version,
-                title: artifact.title,
-                kind: artifact.kind,
-                persisted: true,
-              });
-            } catch (err) {
-              return {
-                callId: call.id,
-                isError: true,
-                content: `Failed to persist "${artifact.title}" as a Library artifact after persisting ${persisted.length} of ${artifacts.length} opportunit${artifacts.length === 1 ? "y" : "ies"}: ${
-                  err instanceof Error ? err.message : String(err)
-                }`,
-              };
-            }
-          }
+      },
+    ],
+    run: async (call) => {
+      if (call.name === REDDIT_OPPORTUNITY_SCANNER_FINALIZE_TOOL_NAME) {
+        const parsed = FinalizeArgs(call.arguments);
+        if (parsed instanceof type.errors) {
           return {
             callId: call.id,
-            isError: false,
-            content: JSON.stringify({ artifacts: persisted }),
+            isError: true,
+            content: `Invalid arguments for ${REDDIT_OPPORTUNITY_SCANNER_FINALIZE_TOOL_NAME}: ${parsed.summary}`,
           };
         }
-
-        if (
-          call.name === REDDIT_OPPORTUNITY_SCANNER_REPORT_NO_RESULTS_TOOL_NAME
-        ) {
-          const parsed = NoResultsReportArgs(call.arguments);
-          if (parsed instanceof type.errors) {
-            return {
-              callId: call.id,
-              isError: true,
-              content: `Invalid arguments for ${REDDIT_OPPORTUNITY_SCANNER_REPORT_NO_RESULTS_TOOL_NAME}: ${parsed.summary}`,
-            };
-          }
-          const artifact = buildNoResultsArtifactPayload(parsed);
+        if (parsed.opportunities.length === 0) {
+          return {
+            callId: call.id,
+            isError: true,
+            content: `${REDDIT_OPPORTUNITY_SCANNER_FINALIZE_TOOL_NAME} requires at least one selected opportunity`,
+          };
+        }
+        const artifacts = buildArtifactPayloads(parsed);
+        const persisted: {
+          id: string;
+          version: number;
+          title: string;
+          kind: string;
+          persisted: true;
+        }[] = [];
+        for (const artifact of artifacts) {
           try {
-            const created = await createWorkflowArtifact(
-              artifactClientConfig(env),
-              artifact,
-            );
-            return {
-              callId: call.id,
-              isError: false,
-              content: JSON.stringify({
-                id: created.id,
-                version: created.version,
-                title: artifact.title,
-                kind: artifact.kind,
-                persisted: true,
-              }),
-            };
+            const created = await createWorkflowArtifact(artifactClientConfig(env), artifact);
+            persisted.push({
+              id: created.id,
+              version: created.version,
+              title: artifact.title,
+              kind: artifact.kind,
+              persisted: true,
+            });
           } catch (err) {
             return {
               callId: call.id,
               isError: true,
-              content: `Failed to persist "${artifact.title}" as a Library artifact: ${
+              content: `Failed to persist "${artifact.title}" as a Library artifact after persisting ${persisted.length} of ${artifacts.length} opportunit${artifacts.length === 1 ? "y" : "ies"}: ${
                 err instanceof Error ? err.message : String(err)
               }`,
             };
           }
         }
-
         return {
           callId: call.id,
-          isError: true,
-          content: `Unknown tool: ${call.name}`,
+          isError: false,
+          content: JSON.stringify({ artifacts: persisted }),
         };
-      },
-    }),
-  });
+      }
+
+      if (call.name === REDDIT_OPPORTUNITY_SCANNER_REPORT_NO_RESULTS_TOOL_NAME) {
+        const parsed = NoResultsReportArgs(call.arguments);
+        if (parsed instanceof type.errors) {
+          return {
+            callId: call.id,
+            isError: true,
+            content: `Invalid arguments for ${REDDIT_OPPORTUNITY_SCANNER_REPORT_NO_RESULTS_TOOL_NAME}: ${parsed.summary}`,
+          };
+        }
+        const artifact = buildNoResultsArtifactPayload(parsed);
+        try {
+          const created = await createWorkflowArtifact(artifactClientConfig(env), artifact);
+          return {
+            callId: call.id,
+            isError: false,
+            content: JSON.stringify({
+              id: created.id,
+              version: created.version,
+              title: artifact.title,
+              kind: artifact.kind,
+              persisted: true,
+            }),
+          };
+        } catch (err) {
+          return {
+            callId: call.id,
+            isError: true,
+            content: `Failed to persist "${artifact.title}" as a Library artifact: ${
+              err instanceof Error ? err.message : String(err)
+            }`,
+          };
+        }
+      }
+
+      return {
+        callId: call.id,
+        isError: true,
+        content: `Unknown tool: ${call.name}`,
+      };
+    },
+  }),
+});
diff --git a/workflows/reddit-opportunity-scanner/src/index.ts b/workflows/reddit-opportunity-scanner/src/index.ts
index dcf0e7fdc9..5f94f5597f 100644
--- a/workflows/reddit-opportunity-scanner/src/index.ts
+++ b/workflows/reddit-opportunity-scanner/src/index.ts
@@ -69,8 +69,7 @@ import {
   REDDIT_OPPORTUNITY_SCANNER_REPORT_NO_RESULTS_TOOL_NAME,
 } from "./finalize-tool";
 
-export const REDDIT_OPPORTUNITY_SCANNER_WORKFLOW_ID =
-  "wf_reddit_opportunity_scanner";
+export const REDDIT_OPPORTUNITY_SCANNER_WORKFLOW_ID = "wf_reddit_opportunity_scanner";
 export const REDDIT_OPPORTUNITY_SCANNER_STEP_ID = "reddit-opportunity-scanner";
 
 export const REDDIT_OPPORTUNITY_SCANNER_SYSTEM_PROMPT = [
@@ -173,9 +172,7 @@ export function buildRedditOpportunityScannerWorkflow(
   input: RedditOpportunityScannerWorkflowInput,
 ): WorkflowDefinition {
   if (input.triggerAddress === "") {
-    throw new Error(
-      "buildRedditOpportunityScannerWorkflow requires a non-empty triggerAddress",
-    );
+    throw new Error("buildRedditOpportunityScannerWorkflow requires a non-empty triggerAddress");
   }
   if (!Number.isInteger(input.turnTimeoutMs) || input.turnTimeoutMs <= 0) {
     throw new Error(
@@ -211,9 +208,7 @@ export function buildRedditOpportunityScannerWorkflow(
  * symbols, bigints, non-finite numbers, class instances — is a loud
  * error naming the offending path instead of a corrupted asset.
  */
-export function serializeRedditOpportunityScannerWorkflow(
-  definition: WorkflowDefinition,
-): string {
+export function serializeRedditOpportunityScannerWorkflow(definition: WorkflowDefinition): string {
   assertJsonPortable(definition, "definition");
   return JSON.stringify(definition);
 }
@@ -233,8 +228,7 @@ function assertJsonPortable(value: unknown, path: string): void {
       break;
     default:
       throw new Error(
-        `${path} is a ${typeof value}, which does not survive JSON ` +
-          "serialization",
+        `${path} is a ${typeof value}, which does not survive JSON ` + "serialization",
       );
   }
   if (Array.isArray(value)) {
@@ -245,9 +239,7 @@ function assertJsonPortable(value: unknown, path: string): void {
   }
   const proto: unknown = Object.getPrototypeOf(value);
   if (proto !== Object.prototype && proto !== null) {
-    throw new Error(
-      `${path} is a non-plain object; JSON would flatten it lossily`,
-    );
+    throw new Error(`${path} is a non-plain object; JSON would flatten it lossily`);
   }
   for (const [key, entry] of Object.entries(value)) {
     assertJsonPortable(entry, `${path}.${key}`);
diff --git a/workflows/reddit-opportunity-scanner/test/boundary.test.ts b/workflows/reddit-opportunity-scanner/test/boundary.test.ts
index a45a8d956b..efdaee7c44 100644
--- a/workflows/reddit-opportunity-scanner/test/boundary.test.ts
+++ b/workflows/reddit-opportunity-scanner/test/boundary.test.ts
@@ -41,9 +41,7 @@ test("shipped sources import only published platform packages", async () => {
     const content = await readFile(file, "utf8");
     for (const match of content.matchAll(importPattern)) {
       const specifier = match[1] ?? "";
-      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) =>
-        specifier.startsWith(prefix),
-      );
+      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) => specifier.startsWith(prefix));
       if (!allowed) {
         violations.push(`${path.basename(file)}: ${specifier}`);
       }
diff --git a/workflows/reddit-opportunity-scanner/test/definition.test.ts b/workflows/reddit-opportunity-scanner/test/definition.test.ts
index 7aff63698f..f0c06b6740 100644
--- a/workflows/reddit-opportunity-scanner/test/definition.test.ts
+++ b/workflows/reddit-opportunity-scanner/test/definition.test.ts
@@ -25,9 +25,7 @@ const INPUT = {
 function scannerStep(definition: WorkflowDefinition): StepPrimitive {
   const primitive = definition.steps[REDDIT_OPPORTUNITY_SCANNER_STEP_ID];
   if (primitive === undefined || primitive.kind !== "step") {
-    throw new Error(
-      `definition has no step primitive named ${REDDIT_OPPORTUNITY_SCANNER_STEP_ID}`,
-    );
+    throw new Error(`definition has no step primitive named ${REDDIT_OPPORTUNITY_SCANNER_STEP_ID}`);
   }
   return primitive;
 }
@@ -35,9 +33,7 @@ function scannerStep(definition: WorkflowDefinition): StepPrimitive {
 test("the definition has exactly one step", () => {
   const definition = buildRedditOpportunityScannerWorkflow(INPUT);
   expect(definition.stepOrder).toEqual([REDDIT_OPPORTUNITY_SCANNER_STEP_ID]);
-  expect(Object.keys(definition.steps)).toEqual([
-    REDDIT_OPPORTUNITY_SCANNER_STEP_ID,
-  ]);
+  expect(Object.keys(definition.steps)).toEqual([REDDIT_OPPORTUNITY_SCANNER_STEP_ID]);
 });
 
 test("the step carries an explicit per-turn timeout", () => {
@@ -48,9 +44,7 @@ test("the step carries an explicit per-turn timeout", () => {
 test("the workflow is triggered by mail to the given deployment address", () => {
   const definition = buildRedditOpportunityScannerWorkflow(INPUT);
   expect(definition.id).toBe(REDDIT_OPPORTUNITY_SCANNER_WORKFLOW_ID);
-  expect(definition.triggers).toEqual([
-    { type: "mail", to: INPUT.triggerAddress },
-  ]);
+  expect(definition.triggers).toEqual([{ type: "mail", to: INPUT.triggerAddress }]);
 });
 
 test("the agent carries the fixed prompt, the preferences, and inlines no tools", () => {
@@ -69,19 +63,13 @@ test("the system prompt names the exact approval-gated finalize tool", () => {
 });
 
 test("the system prompt names the real Reddit and scrape tools by their exact names", () => {
-  expect(REDDIT_OPPORTUNITY_SCANNER_SYSTEM_PROMPT).toContain(
-    "firecrawl_scrape",
-  );
+  expect(REDDIT_OPPORTUNITY_SCANNER_SYSTEM_PROMPT).toContain("firecrawl_scrape");
   expect(REDDIT_OPPORTUNITY_SCANNER_SYSTEM_PROMPT).toContain("reddit_search");
-  expect(REDDIT_OPPORTUNITY_SCANNER_SYSTEM_PROMPT).toContain(
-    "reddit_subreddit_search",
-  );
+  expect(REDDIT_OPPORTUNITY_SCANNER_SYSTEM_PROMPT).toContain("reddit_subreddit_search");
 });
 
 test("the system prompt commits to an honest no-scrape failure, not fabricated site content", () => {
-  expect(REDDIT_OPPORTUNITY_SCANNER_SYSTEM_PROMPT).toMatch(
-    /never fabricate what the site sells/i,
-  );
+  expect(REDDIT_OPPORTUNITY_SCANNER_SYSTEM_PROMPT).toMatch(/never fabricate what the site sells/i);
 });
 
 test("the system prompt requires the search plan to be reviewed before any search runs", () => {
@@ -95,9 +83,7 @@ test("the system prompt names the honest no-data teaching-artifact tool and its
     REDDIT_OPPORTUNITY_SCANNER_REPORT_NO_RESULTS_TOOL_NAME,
   );
   expect(REDDIT_OPPORTUNITY_SCANNER_SYSTEM_PROMPT).toContain("scrapecreators");
-  expect(REDDIT_OPPORTUNITY_SCANNER_SYSTEM_PROMPT).toMatch(
-    /needs no approval/i,
-  );
+  expect(REDDIT_OPPORTUNITY_SCANNER_SYSTEM_PROMPT).toMatch(/needs no approval/i);
 });
 
 test("the system prompt collapses opportunity selection into one approval, not a second gate", () => {
@@ -108,30 +94,26 @@ test("the system prompt collapses opportunity selection into one approval, not a
 
 test("the system prompt commits to a calm terminal reply on denial, not an error", () => {
   expect(REDDIT_OPPORTUNITY_SCANNER_SYSTEM_PROMPT).toMatch(/not approved/i);
-  expect(REDDIT_OPPORTUNITY_SCANNER_SYSTEM_PROMPT).toMatch(
-    /never present a denial as an error/i,
-  );
+  expect(REDDIT_OPPORTUNITY_SCANNER_SYSTEM_PROMPT).toMatch(/never present a denial as an error/i);
 });
 
 test("the definition survives the workflow-asset JSON round-trip", () => {
   const definition = buildRedditOpportunityScannerWorkflow(INPUT);
-  const revived: unknown = JSON.parse(
-    serializeRedditOpportunityScannerWorkflow(definition),
-  );
+  const revived: unknown = JSON.parse(serializeRedditOpportunityScannerWorkflow(definition));
   expect(revived).toEqual(definition);
 });
 
 test("an empty trigger address is rejected", () => {
-  expect(() =>
-    buildRedditOpportunityScannerWorkflow({ ...INPUT, triggerAddress: "" }),
-  ).toThrow(/triggerAddress/);
+  expect(() => buildRedditOpportunityScannerWorkflow({ ...INPUT, triggerAddress: "" })).toThrow(
+    /triggerAddress/,
+  );
 });
 
 test("a non-positive or fractional turn timeout is rejected", () => {
-  expect(() =>
-    buildRedditOpportunityScannerWorkflow({ ...INPUT, turnTimeoutMs: 0 }),
-  ).toThrow(/turnTimeoutMs/);
-  expect(() =>
-    buildRedditOpportunityScannerWorkflow({ ...INPUT, turnTimeoutMs: 0.5 }),
-  ).toThrow(/turnTimeoutMs/);
+  expect(() => buildRedditOpportunityScannerWorkflow({ ...INPUT, turnTimeoutMs: 0 })).toThrow(
+    /turnTimeoutMs/,
+  );
+  expect(() => buildRedditOpportunityScannerWorkflow({ ...INPUT, turnTimeoutMs: 0.5 })).toThrow(
+    /turnTimeoutMs/,
+  );
 });
diff --git a/workflows/workbench-digest/package.json b/workflows/workbench-digest/package.json
index af91f0feec..4902a5ffdb 100644
--- a/workflows/workbench-digest/package.json
+++ b/workflows/workbench-digest/package.json
@@ -1,31 +1,21 @@
 {
   "name": "@corbits/workbench-digest-workflow",
-  "description": "Minimal schedule-triggered workflow that posts a deterministic summary line, exercising the workbench-mail path at zero inference cost",
   "version": "0.0.1",
+  "description": "Minimal schedule-triggered workflow that posts a deterministic summary line, exercising the workbench-mail path at zero inference cost",
   "license": "LGPL-2.1-or-later",
-  "type": "module",
-  "corbits": {
-    "workflow": {
-      "assetName": "workbench-digest",
-      "displayName": "Workbench digest",
-      "automatable": true
-    }
-  },
-  "interchange": {
-    "workflow": "./src/index.ts"
-  },
-  "exports": {
-    ".": "./src/index.ts"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/corbitsdev/workbench.git",
+    "directory": "workflows/workbench-digest"
   },
   "files": [
     "src",
     "LICENSE",
     "README.md"
   ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/corbitsdev/workbench.git",
-    "directory": "workflows/workbench-digest"
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
   },
   "publishConfig": {
     "access": "public"
@@ -34,12 +24,22 @@
     "typecheck": "tsc --noEmit",
     "test": "bun test"
   },
+  "devDependencies": {
+    "@types/bun": "catalog:",
+    "typescript": "catalog:"
+  },
   "peerDependencies": {
     "@intx/agent": "0.3.0",
     "@intx/workflow": "0.3.0"
   },
-  "devDependencies": {
-    "@types/bun": "catalog:",
-    "typescript": "catalog:"
+  "corbits": {
+    "workflow": {
+      "assetName": "workbench-digest",
+      "displayName": "Workbench digest",
+      "automatable": true
+    }
+  },
+  "interchange": {
+    "workflow": "./src/index.ts"
   }
 }
diff --git a/workflows/workbench-digest/src/index.ts b/workflows/workbench-digest/src/index.ts
index a734423b54..4e57c15ff2 100644
--- a/workflows/workbench-digest/src/index.ts
+++ b/workflows/workbench-digest/src/index.ts
@@ -59,9 +59,7 @@ export function buildWorkbenchDigestWorkflow(
   input: WorkbenchDigestWorkflowInput,
 ): WorkflowDefinition {
   if (!Number.isInteger(input.turnTimeoutMs) || input.turnTimeoutMs <= 0) {
-    throw new Error(
-      "buildWorkbenchDigestWorkflow requires turnTimeoutMs to be a positive integer",
-    );
+    throw new Error("buildWorkbenchDigestWorkflow requires turnTimeoutMs to be a positive integer");
   }
   return defineWorkflow({
     id: WORKBENCH_DIGEST_WORKFLOW_ID,
@@ -91,9 +89,7 @@ export function buildWorkbenchDigestWorkflow(
  * symbols, bigints, non-finite numbers, class instances — is a loud
  * error naming the offending path instead of a corrupted asset.
  */
-export function serializeWorkbenchDigestWorkflow(
-  definition: WorkflowDefinition,
-): string {
+export function serializeWorkbenchDigestWorkflow(definition: WorkflowDefinition): string {
   assertJsonPortable(definition, "definition");
   return JSON.stringify(definition);
 }
@@ -113,8 +109,7 @@ function assertJsonPortable(value: unknown, path: string): void {
       break;
     default:
       throw new Error(
-        `${path} is a ${typeof value}, which does not survive JSON ` +
-          "serialization",
+        `${path} is a ${typeof value}, which does not survive JSON ` + "serialization",
       );
   }
   if (Array.isArray(value)) {
@@ -125,9 +120,7 @@ function assertJsonPortable(value: unknown, path: string): void {
   }
   const proto: unknown = Object.getPrototypeOf(value);
   if (proto !== Object.prototype && proto !== null) {
-    throw new Error(
-      `${path} is a non-plain object; JSON would flatten it lossily`,
-    );
+    throw new Error(`${path} is a non-plain object; JSON would flatten it lossily`);
   }
   for (const [key, entry] of Object.entries(value)) {
     assertJsonPortable(entry, `${path}.${key}`);
diff --git a/workflows/workbench-digest/test/boundary.test.ts b/workflows/workbench-digest/test/boundary.test.ts
index 4b14b084f3..7cd3621b2f 100644
--- a/workflows/workbench-digest/test/boundary.test.ts
+++ b/workflows/workbench-digest/test/boundary.test.ts
@@ -39,9 +39,7 @@ test("shipped sources import only published platform packages", async () => {
     const content = await readFile(file, "utf8");
     for (const match of content.matchAll(importPattern)) {
       const specifier = match[1] ?? "";
-      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) =>
-        specifier.startsWith(prefix),
-      );
+      const allowed = ALLOWED_IMPORT_PREFIXES.some((prefix) => specifier.startsWith(prefix));
       if (!allowed) {
         violations.push(`${path.basename(file)}: ${specifier}`);
       }
diff --git a/workflows/workbench-digest/test/definition.test.ts b/workflows/workbench-digest/test/definition.test.ts
index 717d490933..a168a9a986 100644
--- a/workflows/workbench-digest/test/definition.test.ts
+++ b/workflows/workbench-digest/test/definition.test.ts
@@ -23,9 +23,7 @@ const INPUT = {
 function digestStep(definition: WorkflowDefinition): StepPrimitive {
   const primitive = definition.steps[WORKBENCH_DIGEST_STEP_ID];
   if (primitive === undefined || primitive.kind !== "step") {
-    throw new Error(
-      `definition has no step primitive named ${WORKBENCH_DIGEST_STEP_ID}`,
-    );
+    throw new Error(`definition has no step primitive named ${WORKBENCH_DIGEST_STEP_ID}`);
   }
   return primitive;
 }
@@ -44,9 +42,7 @@ test("the step carries an explicit per-turn timeout", () => {
 test("the workflow is triggered on the daily 09:00 UTC schedule", () => {
   const definition = buildWorkbenchDigestWorkflow(INPUT);
   expect(definition.id).toBe(WORKBENCH_DIGEST_WORKFLOW_ID);
-  expect(definition.triggers).toEqual([
-    { type: "schedule", cron: "0 9 * * *" },
-  ]);
+  expect(definition.triggers).toEqual([{ type: "schedule", cron: "0 9 * * *" }]);
   expect(WORKBENCH_DIGEST_SCHEDULE_CRON).toBe("0 9 * * *");
 });
 
@@ -61,9 +57,7 @@ test("the agent instructs relaying the exact summary line, carries the preferenc
 
 test("the definition survives the workflow-asset JSON round-trip", () => {
   const definition = buildWorkbenchDigestWorkflow(INPUT);
-  const revived: unknown = JSON.parse(
-    serializeWorkbenchDigestWorkflow(definition),
-  );
+  const revived: unknown = JSON.parse(serializeWorkbenchDigestWorkflow(definition));
   expect(revived).toEqual(definition);
 });
 
@@ -93,10 +87,10 @@ test("serialization fails loud on a function-valued field, naming its path", ()
 });
 
 test("a non-positive or fractional turn timeout is rejected", () => {
-  expect(() =>
-    buildWorkbenchDigestWorkflow({ ...INPUT, turnTimeoutMs: 0 }),
-  ).toThrow(/turnTimeoutMs/);
-  expect(() =>
-    buildWorkbenchDigestWorkflow({ ...INPUT, turnTimeoutMs: 0.5 }),
-  ).toThrow(/turnTimeoutMs/);
+  expect(() => buildWorkbenchDigestWorkflow({ ...INPUT, turnTimeoutMs: 0 })).toThrow(
+    /turnTimeoutMs/,
+  );
+  expect(() => buildWorkbenchDigestWorkflow({ ...INPUT, turnTimeoutMs: 0.5 })).toThrow(
+    /turnTimeoutMs/,
+  );
 });