diff --git a/.agents/skills/autoreview/SKILL.md b/.agents/skills/autoreview/SKILL.md
index 331ca4065075..a8464a9d7755 100644
--- a/.agents/skills/autoreview/SKILL.md
+++ b/.agents/skills/autoreview/SKILL.md
@@ -213,22 +213,22 @@ The helper accepts `--model` globally or per engine (`engine=model`) and `--thin
 
 Recommended model defaults:
 
-| Engine | Default model | Source note |
-|--------|---------------|-------------|
-| **codex** (default) | `gpt-5.5` | OpenAI's current GPT-5.5 alias |
-| **claude** | `claude-fable-5` | Anthropic's most capable widely released Claude model |
+| Engine              | Default model    | Source note                                           |
+| ------------------- | ---------------- | ----------------------------------------------------- |
+| **codex** (default) | `gpt-5.5`        | OpenAI's current GPT-5.5 alias                        |
+| **claude**          | `claude-fable-5` | Anthropic's most capable widely released Claude model |
 
 CLI flags and environment variables override these defaults. Droid, Copilot, Pi, Cursor, and OpenCode do not get built-in model defaults here because their provider catalogs are external to the Codex/Claude closeout path and may vary by installation.
 
-| Engine | Model flag | Example model IDs | Thinking flag | Accepted levels |
-|--------|------------|-------------------|---------------|-----------------|
-| **codex** (default) | `codex --model X exec ...` | `gpt-5.5`, `gpt-5.5-2026-04-23` | `-c model_reasoning_effort=Y` | `none`, `minimal`, `low`, `medium`, `high`, `xhigh` |
-| **claude** | `claude --model X` | `claude-fable-5`, `claude-opus-4-8`, `claude-sonnet-4-6`, `claude-haiku-4-5` | `--effort Y` | `low`, `medium`, `high`, `xhigh`, `max` |
-| **droid** | currently refused | Factory model IDs | `-r, --reasoning-effort Y` | `off`, `none`, `low`, `medium`, `high`, `xhigh`, `max` |
-| **copilot** | `copilot --model X` | `gpt-5.2`, Copilot model aliases | not supported | n/a |
-| **pi** | `pi --model X` | `anthropic/claude-sonnet-4`, `openai/gpt-4o` | `--thinking Y` | `off`, `minimal`, `low`, `medium`, `high`, `xhigh` |
-| **cursor** | `cursor-agent --model X` | `auto`, Cursor model aliases | not supported | n/a |
-| **opencode** | `opencode run -m X` | `opencode/north-mini-code-free`, OpenCode provider/model IDs | `--variant Y` | `minimal`, `low`, `medium`, `high`, `max` |
+| Engine              | Model flag                 | Example model IDs                                                            | Thinking flag                 | Accepted levels                                        |
+| ------------------- | -------------------------- | ---------------------------------------------------------------------------- | ----------------------------- | ------------------------------------------------------ |
+| **codex** (default) | `codex --model X exec ...` | `gpt-5.5`, `gpt-5.5-2026-04-23`                                              | `-c model_reasoning_effort=Y` | `none`, `minimal`, `low`, `medium`, `high`, `xhigh`    |
+| **claude**          | `claude --model X`         | `claude-fable-5`, `claude-opus-4-8`, `claude-sonnet-4-6`, `claude-haiku-4-5` | `--effort Y`                  | `low`, `medium`, `high`, `xhigh`, `max`                |
+| **droid**           | currently refused          | Factory model IDs                                                            | `-r, --reasoning-effort Y`    | `off`, `none`, `low`, `medium`, `high`, `xhigh`, `max` |
+| **copilot**         | `copilot --model X`        | `gpt-5.2`, Copilot model aliases                                             | not supported                 | n/a                                                    |
+| **pi**              | `pi --model X`             | `anthropic/claude-sonnet-4`, `openai/gpt-4o`                                 | `--thinking Y`                | `off`, `minimal`, `low`, `medium`, `high`, `xhigh`     |
+| **cursor**          | `cursor-agent --model X`   | `auto`, Cursor model aliases                                                 | not supported                 | n/a                                                    |
+| **opencode**        | `opencode run -m X`        | `opencode/north-mini-code-free`, OpenCode provider/model IDs                 | `--variant Y`                 | `minimal`, `low`, `medium`, `high`, `max`              |
 
 Claude also supports `--fallback-model a,b` for availability-based fallback chains ([model-config](https://code.claude.com/docs/en/model-config)). Current Claude docs note that auth, billing, rate-limit, request-size, and transport errors do not trigger fallback, and the changelog documents interactive-session support in `v2.1.166`.
 
@@ -272,17 +272,17 @@ Store persistent personal defaults in your shell startup file or launcher
 environment. For repository-local defaults, use an existing local environment
 loader such as an untracked `.envrc`; the helper does not write a config file.
 
-| Variable | Purpose |
-|----------|---------|
-| `AUTOREVIEW_MODEL` | Override the built-in default `--model` for all engines |
-| `AUTOREVIEW_THINKING` | Default `--thinking` for all engines |
-| `AUTOREVIEW_FALLBACK_MODEL` | Default Claude `--fallback-model` chain |
-| `AUTOREVIEW_<ENGINE>_MODEL` | Per-engine model override, for example `AUTOREVIEW_CODEX_MODEL=gpt-5.5` |
-| `AUTOREVIEW_<ENGINE>_THINKING` | Per-engine thinking override |
-| `AUTOREVIEW_CODEX_CONFIG` | Default Codex `-c key=value` overrides, semicolon-separated, e.g. `service_tier="fast"`; isolation flags still win |
-| `AUTOREVIEW_CODEX_SPEED` | Default Codex service tier: `fast` (priority), `flex`, or `default`; silently standard when the model does not list the tier |
-| `AUTOREVIEW_CLAUDE_FALLBACK_MODEL` | Claude-only fallback chain |
-| `AUTOREVIEW_CURSOR_ALLOW_WORKSPACE_INSTRUCTIONS` | Required `1`/true opt-in for Cursor reviews of trusted repositories |
+| Variable                                         | Purpose                                                                                                                      |
+| ------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------- |
+| `AUTOREVIEW_MODEL`                               | Override the built-in default `--model` for all engines                                                                      |
+| `AUTOREVIEW_THINKING`                            | Default `--thinking` for all engines                                                                                         |
+| `AUTOREVIEW_FALLBACK_MODEL`                      | Default Claude `--fallback-model` chain                                                                                      |
+| `AUTOREVIEW_<ENGINE>_MODEL`                      | Per-engine model override, for example `AUTOREVIEW_CODEX_MODEL=gpt-5.5`                                                      |
+| `AUTOREVIEW_<ENGINE>_THINKING`                   | Per-engine thinking override                                                                                                 |
+| `AUTOREVIEW_CODEX_CONFIG`                        | Default Codex `-c key=value` overrides, semicolon-separated, e.g. `service_tier="fast"`; isolation flags still win           |
+| `AUTOREVIEW_CODEX_SPEED`                         | Default Codex service tier: `fast` (priority), `flex`, or `default`; silently standard when the model does not list the tier |
+| `AUTOREVIEW_CLAUDE_FALLBACK_MODEL`               | Claude-only fallback chain                                                                                                   |
+| `AUTOREVIEW_CURSOR_ALLOW_WORKSPACE_INSTRUCTIONS` | Required `1`/true opt-in for Cursor reviews of trusted repositories                                                          |
 
 Codex maps thinking to `model_reasoning_effort`. Claude maps thinking to `--effort`. Droid maps thinking to `-r, --reasoning-effort`. Pi maps thinking to `--thinking`. OpenCode maps thinking to `--variant`. Copilot and Cursor reject `--thinking`. Only Claude accepts `--fallback-model`; global CLI/env fallback requires at least one Claude reviewer, and engine-specific fallback overrides require that reviewer to be selected. Non-Claude fallback overrides, including `AUTOREVIEW_<NONCLAUDE>_FALLBACK_MODEL`, fail closed instead of being silently ignored.
 
@@ -290,14 +290,14 @@ Codex maps thinking to `model_reasoning_effort`. Claude maps thinking to `--effo
 
 When autoreview runs inside the repository under review, external reviewer CLIs must not load project-local trust or configuration that the branch controls.
 
-| Engine | Isolation flags | Reference |
-|--------|-----------------|-----------|
-| **codex** | Auth-only config overrides, `-c project_doc_max_bytes=0`, repo `trust_level="untrusted"`, `exec --ignore-user-config --ignore-rules`, plus read-only sandbox | Codex CLI `exec --help` |
-| **claude** | `--safe-mode --setting-sources user --strict-mcp-config --disallowedTools mcp__*` plus explicit `--allowedTools` (`--safe-mode` requires Claude Code `v2.1.169+`) | Claude Code [CLI reference](https://code.claude.com/docs/en/cli-reference) |
-| **droid** | Fails closed: current CLI cannot disable both project instructions and all tools | Droid CLI `exec --help` and `--list-tools` |
-| **pi** | `--no-approve --no-session --no-context-files --no-extensions --no-skills --no-prompt-templates --no-themes --no-tools` | Pi CLI `--help`; requires Pi `v0.79.0+` |
-| **opencode** | `opencode run --dir <repo> --pure --format json`, prompt over stdin, neutral subprocess cwd, injected deny-by-default permissions, project config disabled | OpenCode CLI `--help` |
-| **cursor** | `cursor-agent --print --mode ask --sandbox enabled --output-format json|stream-json`, prompt over stdin, temporary read-only permission config, help-probed flags, and mandatory explicit trusted-workspace opt-in | Cursor CLI [headless mode](https://cursor.com/docs/cli/headless), [output format](https://cursor.com/docs/cli/reference/output-format), [permissions](https://cursor.com/docs/cli/reference/permissions), [configuration](https://cursor.com/docs/cli/reference/configuration) |
+| Engine       | Isolation flags                                                                                                                                                                                                     | Reference                                                                                                                                                                                                                                                                      |
+| ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| **codex**    | Auth-only config overrides, `-c project_doc_max_bytes=0`, repo `trust_level="untrusted"`, `exec --ignore-user-config --ignore-rules`, plus read-only sandbox                                                        | Codex CLI `exec --help`                                                                                                                                                                                                                                                        |
+| **claude**   | `--safe-mode --setting-sources user --strict-mcp-config --disallowedTools mcp__*` plus explicit `--allowedTools` (`--safe-mode` requires Claude Code `v2.1.169+`)                                                   | Claude Code [CLI reference](https://code.claude.com/docs/en/cli-reference)                                                                                                                                                                                                     |
+| **droid**    | Fails closed: current CLI cannot disable both project instructions and all tools                                                                                                                                    | Droid CLI `exec --help` and `--list-tools`                                                                                                                                                                                                                                     |
+| **pi**       | `--no-approve --no-session --no-context-files --no-extensions --no-skills --no-prompt-templates --no-themes --no-tools`                                                                                             | Pi CLI `--help`; requires Pi `v0.79.0+`                                                                                                                                                                                                                                        |
+| **opencode** | `opencode run --dir <repo> --pure --format json`, prompt over stdin, neutral subprocess cwd, injected deny-by-default permissions, project config disabled                                                          | OpenCode CLI `--help`                                                                                                                                                                                                                                                          |
+| **cursor**   | `cursor-agent --print --mode ask --sandbox enabled --output-format json\|stream-json`, prompt over stdin, temporary read-only permission config, help-probed flags, and mandatory explicit trusted-workspace opt-in | Cursor CLI [headless mode](https://cursor.com/docs/cli/headless), [output format](https://cursor.com/docs/cli/reference/output-format), [permissions](https://cursor.com/docs/cli/reference/permissions), [configuration](https://cursor.com/docs/cli/reference/configuration) |
 
 Codex `--ignore-user-config` skips config loading for the exec run. Autoreview reconstructs only the documented `cli_auth_credentials_store`, `forced_login_method`, and `forced_chatgpt_workspace_id` settings from `CODEX_HOME/config.toml`, keeping authentication and workspace restrictions usable without forwarding unrelated user configuration. The explicit repo trust override and zero project-doc budget keep reviewed-repo `AGENTS.md` and `.codex/` trust surfaces out of the review prompt. `--ignore-rules` skips user/project execpolicy rules. Claude `--safe-mode` disables project hooks, skills, plugins, MCP servers, and CLAUDE.md while preserving normal authentication, model selection, built-in tools, and permissions; managed settings policy can still apply. `--setting-sources user` avoids project/local settings from the reviewed checkout, and current Claude Code docs note the project-skill blocking behavior was fixed in `v2.1.69`. `--strict-mcp-config` and `--disallowedTools mcp__*` keep MCP unavailable to the review run. `--bare` is not used here because Claude's headless docs say it skips OAuth and keychain reads. Droid fails closed because its CLI cannot disable reviewed-repository `AGENTS.md` loading and all tools in the same run. Pi `--no-approve` ignores project-local files for one run; the helper requires Pi `v0.79.0+` plus help output that advertises every required isolation flag because older legacy binaries can ignore unknown flags. The current package is `@earendil-works/pi-coding-agent`; deprecated `@mariozechner/pi-coding-agent` `0.73.x` is intentionally rejected. Pi version/help probes and the review command run from neutral temporary directories, not the reviewed repo. Pi `--no-context-files` removes `AGENTS.md`/`CLAUDE.md`, the resource-disable flags keep `.pi` extensions, skills, prompts, and themes out of the run, `--no-session` avoids writing review sessions, and `--no-tools` prevents built-in read tools from escaping the repository through absolute paths. OpenCode starts from a neutral temporary directory, points at the reviewed repo with `--dir`, disables project config through `OPENCODE_DISABLE_PROJECT_CONFIG=1`, and injects `OPENCODE_CONFIG_CONTENT`; permissions default to deny, allow read/grep/glob, preserve OpenCode's `.env` ask rules, and gate `websearch`/`webfetch` with `--no-web-search`. The injected config also clears command/instruction/plugin arrays and disables write/edit/bash/task/skill/todowrite tools without changing user auth storage. Cursor's documented headless path is print mode with JSON output and workspace-relative project-resource discovery. Because the CLI exposes no per-run flag that disables every current and future project instruction surface, autoreview requires `--cursor-allow-workspace-instructions` (or its environment equivalent) for every Cursor run. Project-local Cursor/Claude hook settings, project MCP config, and global Cursor MCP config remain hard refusals because hooks execute host commands and MCP tools cannot be constrained to read-only review access. Cursor capability probes run from neutral temporary directories with the sanitized engine environment. Review runs set documented `CURSOR_CONFIG_DIR` to an ephemeral configuration that allows workspace reads while denying shell commands and relative or absolute writes. The helper sends review prompts to OpenCode and Cursor over stdin rather than argv and extracts final structured JSON from terminal result/text events. OpenCode and Cursor reject `--no-tools`; Cursor also rejects `--no-web-search` because the CLI does not expose a documented per-run web-search disable flag.
 
diff --git a/.agents/skills/openclaw-small-bugfix-sweep/SKILL.md b/.agents/skills/openclaw-small-bugfix-sweep/SKILL.md
index efe6971925f0..db65b5885ad1 100644
--- a/.agents/skills/openclaw-small-bugfix-sweep/SKILL.md
+++ b/.agents/skills/openclaw-small-bugfix-sweep/SKILL.md
@@ -13,6 +13,7 @@ Triage reviews, proves, and patches local fixes first; publishing waits for Pete
 
 Peter always wants to review code before commits.
 Default flow:
+
 1. Review each issue deeply enough to prove current behavior and root cause.
 2. Fix only easy, high-confidence bugs with narrow ownership and focused proof.
 3. Stop with the dirty diff summary, touched files, and test/gate output for Peter's manual review.
diff --git a/.agents/skills/openclaw-testing/SKILL.md b/.agents/skills/openclaw-testing/SKILL.md
index ca66d370824a..0f1335e7d67a 100644
--- a/.agents/skills/openclaw-testing/SKILL.md
+++ b/.agents/skills/openclaw-testing/SKILL.md
@@ -150,7 +150,7 @@ commands.
   tools to require an IMDSv2 token, prove the IAM credentials endpoint returns
   404, and compare remote `git rev-parse HEAD` with the full reviewed head SHA.
   Unset all `CRABBOX_TAILSCALE*` overrides, pass `--network public
-  --tailscale=false`, clear exit-node/LAN flags, then require `crabbox inspect`
+--tailscale=false`, clear exit-node/LAN flags, then require `crabbox inspect`
   to report `network=public` and no Tailscale state before uploading any script.
   Upload trusted `scripts/crabbox-untrusted-bootstrap.sh` with `--fresh-pr`; it
   bootstraps Node 24 and repository-pinned pnpm before executing PR code and
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 61346f7de803..fdbc43835701 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1335,6 +1335,7 @@ jobs:
               ;;
             lint)
               pnpm lint --threads=8
+              pnpm format:check
               ;;
             dependencies)
               if pnpm run --silent 2>/dev/null | grep -q '^  deadcode:dependencies$'; then
@@ -1550,6 +1551,9 @@ jobs:
         with:
           install-bun: "false"
 
+      - name: Check formatting
+        run: pnpm format:check
+
       - name: Checkout ClawHub docs source
         run: |
           set -euo pipefail
diff --git a/.github/workflows/docker-release.yml b/.github/workflows/docker-release.yml
index 0c6a4349bcaa..0cfdd26bc691 100644
--- a/.github/workflows/docker-release.yml
+++ b/.github/workflows/docker-release.yml
@@ -552,7 +552,14 @@ jobs:
 
   # Create multi-platform manifests
   create-manifest:
-    needs: [approve_manual_backfill, validate_publish_config, resolve_build_provenance, build-amd64, build-arm64]
+    needs:
+      [
+        approve_manual_backfill,
+        validate_publish_config,
+        resolve_build_provenance,
+        build-amd64,
+        build-arm64,
+      ]
     if: ${{ always() && needs.validate_publish_config.result == 'success' && needs.build-amd64.result == 'success' && needs.build-arm64.result == 'success' && (github.event_name != 'workflow_dispatch' || needs.approve_manual_backfill.result == 'success') }}
     # WARNING: DO NOT REVERT THIS TO A BLACKSMITH RUNNER WITHOUT RE-VALIDATING TAG BACKFILLS.
     runs-on: ubuntu-24.04
diff --git a/.oxfmtrc.jsonc b/.oxfmtrc.jsonc
index 7e11c0e12b58..de4d378b555f 100644
--- a/.oxfmtrc.jsonc
+++ b/.oxfmtrc.jsonc
@@ -26,6 +26,7 @@
   "useTabs": false,
   "ignorePatterns": [
     "apps/",
+    "CHANGELOG.md",
     "CLAUDE.md",
     "docker-compose.yml",
     "dist/",
diff --git a/docs/channels/line.md b/docs/channels/line.md
index 7d23c8cebaae..91e761790202 100644
--- a/docs/channels/line.md
+++ b/docs/channels/line.md
@@ -181,9 +181,7 @@ messages.
       },
       flexMessage: {
         altText: "Status card",
-        contents: {
-          /* Flex payload */
-        },
+        contents: {/* Flex payload */},
       },
       templateMessage: {
         type: "confirm",
diff --git a/docs/concepts/usage-tracking.md b/docs/concepts/usage-tracking.md
index 89ba19693bea..8a6444ea4cb8 100644
--- a/docs/concepts/usage-tracking.md
+++ b/docs/concepts/usage-tracking.md
@@ -196,16 +196,10 @@ change:
   "aliases": { "<table>": { "<value>": "<label>" } },
   "output": {
     "sep": "", // joins surviving pieces
-    "default": [
-      /* pieces */
-    ], // fallback for any surface
+    "default": [/* pieces */], // fallback for any surface
     "surfaces": {
-      "discord": [
-        /* pieces */
-      ],
-      "telegram": [
-        /* pieces */
-      ],
+      "discord": [/* pieces */],
+      "telegram": [/* pieces */],
     },
   },
 }
diff --git a/docs/nodes/media-understanding.md b/docs/nodes/media-understanding.md
index 0e46360c5648..5feae81e3fed 100644
--- a/docs/nodes/media-understanding.md
+++ b/docs/nodes/media-understanding.md
@@ -40,20 +40,14 @@ Vendor plugins register capability metadata (which provider supports which media
   tools: {
     media: {
       concurrency: 2, // max concurrent capability runs (default)
-      models: [
-        /* shared list, gate with capabilities */
-      ],
-      image: {
-        /* optional overrides */
-      },
+      models: [/* shared list, gate with capabilities */],
+      image: {/* optional overrides */},
       audio: {
         /* optional overrides */
         echoTranscript: true,
         echoFormat: '📝 "{transcript}"',
       },
-      video: {
-        /* optional overrides */
-      },
+      video: {/* optional overrides */},
     },
   },
 }
diff --git a/docs/plugins/message-presentation.md b/docs/plugins/message-presentation.md
index 173febcc2f33..dfe9b7103c5a 100644
--- a/docs/plugins/message-presentation.md
+++ b/docs/plugins/message-presentation.md
@@ -69,8 +69,7 @@ type MessagePresentationBlock =
     };
 
 type MessagePresentationAction =
-  | { type: "command"; command: string }
-  | { type: "callback"; value: string };
+  { type: "command"; command: string } | { type: "callback"; value: string };
 
 type MessagePresentationButton = {
   label: string;
diff --git a/docs/plugins/sdk-entrypoints.md b/docs/plugins/sdk-entrypoints.md
index e63231ac1df0..dfe7be497e1f 100644
--- a/docs/plugins/sdk-entrypoints.md
+++ b/docs/plugins/sdk-entrypoints.md
@@ -114,12 +114,8 @@ export default definePluginEntry({
   name: "My Plugin",
   description: "Short summary",
   register(api) {
-    api.registerProvider({
-      /* ... */
-    });
-    api.registerTool({
-      /* ... */
-    });
+    api.registerProvider({/* ... */});
+    api.registerTool({/* ... */});
   },
 });
 ```
diff --git a/extensions/amazon-bedrock/embedding-provider.test.ts b/extensions/amazon-bedrock/embedding-provider.test.ts
index 2b41c5fa7b21..5c1526c97a81 100644
--- a/extensions/amazon-bedrock/embedding-provider.test.ts
+++ b/extensions/amazon-bedrock/embedding-provider.test.ts
@@ -129,9 +129,7 @@ describe("stripInferenceProfilePrefix", () => {
   });
 
   it("strips apac prefix", () => {
-    expect(testing.stripInferenceProfilePrefix("apac.cohere.embed-v4:0")).toBe(
-      "cohere.embed-v4:0",
-    );
+    expect(testing.stripInferenceProfilePrefix("apac.cohere.embed-v4:0")).toBe("cohere.embed-v4:0");
   });
 
   it("strips au prefix", () => {
diff --git a/extensions/browser/chrome-extension/popup.html b/extensions/browser/chrome-extension/popup.html
index 327da2ee1bfd..12cfc0cd188b 100644
--- a/extensions/browser/chrome-extension/popup.html
+++ b/extensions/browser/chrome-extension/popup.html
@@ -24,10 +24,20 @@
         border-radius: 50%;
         background: #6b7280;
       }
-      .dot.on { background: #34c759; }
-      .dot.connecting { background: #f59e0b; }
-      .dot.error { background: #ff3b30; }
-      p { font-size: 12px; color: #98989f; margin: 6px 0; }
+      .dot.on {
+        background: #34c759;
+      }
+      .dot.connecting {
+        background: #f59e0b;
+      }
+      .dot.error {
+        background: #ff3b30;
+      }
+      p {
+        font-size: 12px;
+        color: #98989f;
+        margin: 6px 0;
+      }
       textarea {
         width: 100%;
         box-sizing: border-box;
@@ -55,16 +65,20 @@
         background: #3a3a3c;
         color: #f2f2f7;
       }
-      .hidden { display: none; }
-      #error { color: #ff453a; }
+      .hidden {
+        display: none;
+      }
+      #error {
+        color: #ff453a;
+      }
     </style>
   </head>
   <body>
     <h1><span id="statusDot" class="dot"></span>OpenClaw</h1>
     <div id="pairSection">
       <p>
-        Run <code>openclaw browser extension pair</code> on this machine and
-        paste the pairing string:
+        Run <code>openclaw browser extension pair</code> on this machine and paste the pairing
+        string:
       </p>
       <textarea id="pairingString" placeholder="ws://127.0.0.1:18797/extension#…"></textarea>
       <p id="error" class="hidden"></p>
diff --git a/extensions/browser/src/browser/extension-relay/relay-bridge.ts b/extensions/browser/src/browser/extension-relay/relay-bridge.ts
index cb7a46d47086..09b359d5a7f3 100644
--- a/extensions/browser/src/browser/extension-relay/relay-bridge.ts
+++ b/extensions/browser/src/browser/extension-relay/relay-bridge.ts
@@ -215,7 +215,7 @@ export class ExtensionRelayBridge {
           this.emitDetachedFromTarget(msg.tabId, tab.attached.sessionId, tab.attached.targetId);
           tab.attached = undefined;
         }
-        return;
+        break;
       }
       case "pong":
       case "hello":
diff --git a/extensions/canvas/scripts/pnpm-runner.mjs b/extensions/canvas/scripts/pnpm-runner.mjs
index e50b9791ebd0..738f0851dbe5 100644
--- a/extensions/canvas/scripts/pnpm-runner.mjs
+++ b/extensions/canvas/scripts/pnpm-runner.mjs
@@ -67,8 +67,10 @@ function findExecutableOnPath(command, envPath, platform, env, cwd) {
   }
   const extensions =
     platform === "win32"
-      ? (env[Object.keys(env).find((key) => key.toLowerCase() === "pathext") ?? "PATHEXT"] ??
-          ".COM;.EXE;.BAT;.CMD")
+      ? (
+          env[Object.keys(env).find((key) => key.toLowerCase() === "pathext") ?? "PATHEXT"] ??
+          ".COM;.EXE;.BAT;.CMD"
+        )
           .split(";")
           .filter(Boolean)
           .map((extension) => extension.toLowerCase())
@@ -84,7 +86,7 @@ function findExecutableOnPath(command, envPath, platform, env, cwd) {
       : pathImpl.resolve(cwd, directory);
     for (const extension of extensions) {
       const candidate = pathImpl.join(resolvedDirectory, `${command}${extension}`);
-      if ((platform === "win32" ? isFile(candidate) : isExecutableFile(candidate))) {
+      if (platform === "win32" ? isFile(candidate) : isExecutableFile(candidate)) {
         return candidate;
       }
     }
diff --git a/extensions/codex/src/app-server/attempt-diagnostics.ts b/extensions/codex/src/app-server/attempt-diagnostics.ts
index 3fde1a37672e..40f7cdcb4b03 100644
--- a/extensions/codex/src/app-server/attempt-diagnostics.ts
+++ b/extensions/codex/src/app-server/attempt-diagnostics.ts
@@ -7,10 +7,7 @@ import {
   emitTrustedDiagnosticEventWithPrivateData,
   type DiagnosticModelCallContent,
 } from "openclaw/plugin-sdk/diagnostic-runtime";
-import type {
-  CodexAppServerRuntimeOptions,
-  resolveCodexPluginsPolicy,
-} from "./config.js";
+import type { CodexAppServerRuntimeOptions, resolveCodexPluginsPolicy } from "./config.js";
 
 type TrustedDiagnosticEventInput = Parameters<typeof emitTrustedDiagnosticEventWithPrivateData>[0];
 
diff --git a/extensions/codex/src/app-server/plugin-thread-config.test.ts b/extensions/codex/src/app-server/plugin-thread-config.test.ts
index 603661d57b07..b87896ce1f11 100644
--- a/extensions/codex/src/app-server/plugin-thread-config.test.ts
+++ b/extensions/codex/src/app-server/plugin-thread-config.test.ts
@@ -793,9 +793,7 @@ describe("Codex plugin thread config", () => {
             apps: {
               "chatgpt-meetings": {
                 tools:
-                  configReadCount === 1
-                    ? { import_meeting: { approval_mode: "approve" } }
-                    : {},
+                  configReadCount === 1 ? { import_meeting: { approval_mode: "approve" } } : {},
               },
             },
           },
diff --git a/extensions/codex/src/app-server/plugin-thread-config.ts b/extensions/codex/src/app-server/plugin-thread-config.ts
index bd2c9a79528e..aa6d002213e2 100644
--- a/extensions/codex/src/app-server/plugin-thread-config.ts
+++ b/extensions/codex/src/app-server/plugin-thread-config.ts
@@ -52,9 +52,7 @@ export type AccountAppPolicyContextEntry = {
 };
 
 /** Policy context for any app exposed to a native Codex thread. */
-export type CodexAppPolicyContextEntry =
-  | PluginAppPolicyContextEntry
-  | AccountAppPolicyContextEntry;
+export type CodexAppPolicyContextEntry = PluginAppPolicyContextEntry | AccountAppPolicyContextEntry;
 
 /** Stable app-to-plugin ownership context persisted with Codex thread bindings. */
 export type PluginAppPolicyContext = {
@@ -136,17 +134,18 @@ export async function buildCodexPluginThreadConfig(
     });
   }
 
-  let inventory = policy.pluginPolicies.length > 0
-    ? await readCodexPluginInventory({
-        pluginConfig: params.pluginConfig,
-        policy,
-        request: params.request,
-        appCache,
-        appCacheKey: params.appCacheKey,
-        nowMs: params.nowMs,
-        suppressAppInventoryRefresh: true,
-      })
-    : emptyCodexPluginInventory(policy);
+  let inventory =
+    policy.pluginPolicies.length > 0
+      ? await readCodexPluginInventory({
+          pluginConfig: params.pluginConfig,
+          policy,
+          request: params.request,
+          appCache,
+          appCacheKey: params.appCacheKey,
+          nowMs: params.nowMs,
+          suppressAppInventoryRefresh: true,
+        })
+      : emptyCodexPluginInventory(policy);
   const appInventoryRefreshDeferredForActivation =
     inventory.records.some((record) => record.activationRequired) &&
     shouldRefreshMissingAppInventory(params, policy, inventory);
@@ -243,9 +242,7 @@ export async function buildCodexPluginThreadConfig(
   }
 
   const accountAppsResult: Awaited<ReturnType<typeof readAccessibleAccountApps>> =
-    policy.allowAllPlugins
-    ? await readAccessibleAccountApps(params, appCache)
-    : { apps: [] };
+    policy.allowAllPlugins ? await readAccessibleAccountApps(params, appCache) : { apps: [] };
 
   const diagnostics: CodexPluginThreadConfigDiagnostic[] = [
     ...inventory.diagnostics,
@@ -649,9 +646,9 @@ async function readAccessibleAccountApps(
     };
   }
   return {
-    apps: snapshot.apps.filter((app) => app.isAccessible).toSorted((left, right) =>
-      left.id.localeCompare(right.id),
-    ),
+    apps: snapshot.apps
+      .filter((app) => app.isAccessible)
+      .toSorted((left, right) => left.id.localeCompare(right.id)),
   };
 }
 
diff --git a/extensions/codex/src/app-server/sandbox-exec-server.lifecycle.test.ts b/extensions/codex/src/app-server/sandbox-exec-server.lifecycle.test.ts
index bfc297cbf07a..2a49b9e0ea98 100644
--- a/extensions/codex/src/app-server/sandbox-exec-server.lifecycle.test.ts
+++ b/extensions/codex/src/app-server/sandbox-exec-server.lifecycle.test.ts
@@ -3,8 +3,8 @@ import type { ChildProcessWithoutNullStreams } from "node:child_process";
 import { EventEmitter } from "node:events";
 import { PassThrough } from "node:stream";
 import type { SandboxContext } from "openclaw/plugin-sdk/sandbox";
-import type { WebSocket } from "ws";
 import { afterEach, describe, expect, it, vi } from "vitest";
+import type { WebSocket } from "ws";
 
 const spawnMock = vi.hoisted(() => vi.fn());
 vi.mock("node:child_process", async (importOriginal) => {
@@ -116,9 +116,10 @@ describe("Codex sandbox exec-server lifecycle", () => {
       timedOut: false,
       token: "process-token",
     });
-    expect(
-      socket.send.mock.calls.map(([payload]) => JSON.parse(String(payload)).method),
-    ).toEqual(["process/exited", "process/closed"]);
+    expect(socket.send.mock.calls.map(([payload]) => JSON.parse(String(payload)).method)).toEqual([
+      "process/exited",
+      "process/closed",
+    ]);
   });
 
   it.each([
diff --git a/extensions/copilot/src/permission-bridge.test.ts b/extensions/copilot/src/permission-bridge.test.ts
index d21dfadb1ac3..fa6defbfad0d 100755
--- a/extensions/copilot/src/permission-bridge.test.ts
+++ b/extensions/copilot/src/permission-bridge.test.ts
@@ -1,7 +1,5 @@
 // Copilot tests cover permission bridge plugin behavior.
-import type {
-  PermissionRequest as SdkPermissionRequest,
-} from "@github/copilot-sdk";
+import type { PermissionRequest as SdkPermissionRequest } from "@github/copilot-sdk";
 import { describe, expect, it, vi } from "vitest";
 import {
   createPermissionBridge,
diff --git a/extensions/copilot/src/usage-bridge.test.ts b/extensions/copilot/src/usage-bridge.test.ts
index cb67cbf3cdbf..b4036660bb1d 100644
--- a/extensions/copilot/src/usage-bridge.test.ts
+++ b/extensions/copilot/src/usage-bridge.test.ts
@@ -1,10 +1,7 @@
 // Copilot tests cover usage bridge plugin behavior.
 import type { NormalizedUsage } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { describe, expect, it } from "vitest";
-import {
-  buildCopilotAssistantUsage,
-  normalizeCopilotUsage,
-} from "./usage-bridge.js";
+import { buildCopilotAssistantUsage, normalizeCopilotUsage } from "./usage-bridge.js";
 
 const ZERO_SNAPSHOT: NormalizedUsage = {
   cacheRead: undefined,
@@ -249,5 +246,4 @@ describe("usage-bridge", () => {
       });
     });
   });
-
 });
diff --git a/extensions/deepinfra/onboard.ts b/extensions/deepinfra/onboard.ts
index 87ee98b1f83e..d90c2ea67e84 100644
--- a/extensions/deepinfra/onboard.ts
+++ b/extensions/deepinfra/onboard.ts
@@ -17,14 +17,17 @@ export function applyDeepInfraConfig(
     alias: models[modelRef]?.alias ?? "DeepInfra",
   };
 
-  return applyAgentDefaultModelPrimary({
-    ...cfg,
-    agents: {
-      ...cfg.agents,
-      defaults: {
-        ...cfg.agents?.defaults,
-        models,
+  return applyAgentDefaultModelPrimary(
+    {
+      ...cfg,
+      agents: {
+        ...cfg.agents,
+        defaults: {
+          ...cfg.agents?.defaults,
+          models,
+        },
       },
     },
-  }, modelRef);
+    modelRef,
+  );
 }
diff --git a/extensions/diagnostics-otel/src/service.ts b/extensions/diagnostics-otel/src/service.ts
index cea8ae81334a..d03b1d3abde5 100644
--- a/extensions/diagnostics-otel/src/service.ts
+++ b/extensions/diagnostics-otel/src/service.ts
@@ -3992,10 +3992,10 @@ export function createDiagnosticsOtelService(): OpenClawPluginService {
               return;
             case "session.state":
               recordSessionState(evt);
-              return;
+              break;
             case "session.long_running":
             case "session.stalled":
-              return;
+              break;
             case "session.turn.created":
               recordSessionTurnCreated(evt);
               return;
@@ -4010,9 +4010,9 @@ export function createDiagnosticsOtelService(): OpenClawPluginService {
               return;
             case "run.attempt":
               recordRunAttempt(evt);
-              return;
+              break;
             case "run.progress":
-              return;
+              break;
             case "diagnostic.heartbeat":
               recordHeartbeat(evt);
               return;
@@ -4066,9 +4066,9 @@ export function createDiagnosticsOtelService(): OpenClawPluginService {
               return;
             case "exec.process.completed":
               recordExecProcessCompleted(evt);
-              return;
+              break;
             case "exec.approval.followup_suppressed":
-              return;
+              break;
             case "log.record":
               recordLogRecord?.(evt, metadata);
               return;
diff --git a/extensions/diagnostics-prometheus/src/service.ts b/extensions/diagnostics-prometheus/src/service.ts
index 1cc0eff2efe4..1728a43e8e08 100644
--- a/extensions/diagnostics-prometheus/src/service.ts
+++ b/extensions/diagnostics-prometheus/src/service.ts
@@ -967,9 +967,9 @@ function recordDiagnosticEvent(
         {},
         numericValue(evt.queueLength),
       );
-      return;
+      break;
     case "diagnostic.heartbeat":
-      return;
+      break;
     case "telemetry.exporter":
       store.counter("openclaw_telemetry_exporter_total", "Telemetry exporter lifecycle events.", {
         exporter: lowCardinalityLabel(evt.exporter),
diff --git a/extensions/discord/src/api.test.ts b/extensions/discord/src/api.test.ts
index 233ceeef096f..92ba707aa16b 100644
--- a/extensions/discord/src/api.test.ts
+++ b/extensions/discord/src/api.test.ts
@@ -322,9 +322,7 @@ describe("fetchDiscord", () => {
   });
 
   it("throws DiscordApiError on malformed JSON success response body", async () => {
-    const fetcher = withFetchPreconnect(
-      async () => new Response("NOT JSON {{{", { status: 200 }),
-    );
+    const fetcher = withFetchPreconnect(async () => new Response("NOT JSON {{{", { status: 200 }));
 
     let error: unknown;
     try {
diff --git a/extensions/discord/src/api.ts b/extensions/discord/src/api.ts
index 51e8e74d58d2..edd7d36960c3 100644
--- a/extensions/discord/src/api.ts
+++ b/extensions/discord/src/api.ts
@@ -206,10 +206,7 @@ export async function requestDiscord<T>(
       try {
         return JSON.parse(text) as T;
       } catch {
-        throw new DiscordApiError(
-          `Discord API ${path} returned malformed JSON`,
-          0,
-        );
+        throw new DiscordApiError(`Discord API ${path} returned malformed JSON`, 0);
       }
     },
     {
diff --git a/extensions/discord/src/chunk.ts b/extensions/discord/src/chunk.ts
index 952dc150c6d3..eb8cacb50b24 100644
--- a/extensions/discord/src/chunk.ts
+++ b/extensions/discord/src/chunk.ts
@@ -102,7 +102,7 @@ function findWhitespaceBreak(window: string) {
 }
 
 function findCjkPunctuationBreak(window: string) {
-  for (let end = window.length; end > 0; ) {
+  for (let end = window.length; end > 0;) {
     const code = window.charCodeAt(end - 1);
     const start = isLowSurrogate(code) && end > 1 ? end - 2 : end - 1;
     const char = window.slice(start, end);
diff --git a/extensions/discord/src/monitor/threading.auto-thread.test.ts b/extensions/discord/src/monitor/threading.auto-thread.test.ts
index f00e4d1413c9..a12cad48dfcd 100644
--- a/extensions/discord/src/monitor/threading.auto-thread.test.ts
+++ b/extensions/discord/src/monitor/threading.auto-thread.test.ts
@@ -27,9 +27,11 @@ const mockMessage = {
 } as unknown as Parameters<MaybeCreateDiscordAutoThreadFn>[0]["message"];
 
 function createMockMessage(overrides: Record<string, unknown>) {
-  return Object.assign({}, mockMessage, overrides) as Parameters<
-    MaybeCreateDiscordAutoThreadFn
-  >[0]["message"];
+  return Object.assign(
+    {},
+    mockMessage,
+    overrides,
+  ) as Parameters<MaybeCreateDiscordAutoThreadFn>[0]["message"];
 }
 
 function createBaseParams(
diff --git a/extensions/discord/src/pluralkit.ts b/extensions/discord/src/pluralkit.ts
index 85bf79f3fa91..5535b68a2f09 100644
--- a/extensions/discord/src/pluralkit.ts
+++ b/extensions/discord/src/pluralkit.ts
@@ -1,6 +1,9 @@
 // Discord plugin module implements pluralkit behavior.
 import { resolveFetch } from "openclaw/plugin-sdk/fetch-runtime";
-import { readProviderJsonResponse, readResponseTextLimited } from "openclaw/plugin-sdk/provider-http";
+import {
+  readProviderJsonResponse,
+  readResponseTextLimited,
+} from "openclaw/plugin-sdk/provider-http";
 
 const PLURALKIT_API_BASE = "https://api.pluralkit.me/v2";
 const PLURALKIT_ERROR_BODY_LIMIT_BYTES = 8 * 1024;
diff --git a/extensions/exa/src/exa-web-search-provider.test.ts b/extensions/exa/src/exa-web-search-provider.test.ts
index 5503d8d04f9c..84a679166257 100644
--- a/extensions/exa/src/exa-web-search-provider.test.ts
+++ b/extensions/exa/src/exa-web-search-provider.test.ts
@@ -162,9 +162,7 @@ describe("exa web search provider", () => {
     };
     const defaultKey = testing.buildExaCacheKey(base);
 
-    expect(
-      testing.buildExaCacheKey({ ...base, contents: { highlights: true } }),
-    ).toBe(defaultKey);
+    expect(testing.buildExaCacheKey({ ...base, contents: { highlights: true } })).toBe(defaultKey);
 
     const disabledKeys = [
       testing.buildExaCacheKey({ ...base, contents: { highlights: false } }),
diff --git a/extensions/feishu/src/async.ts b/extensions/feishu/src/async.ts
index 66bed9f245e8..afd13fceb654 100644
--- a/extensions/feishu/src/async.ts
+++ b/extensions/feishu/src/async.ts
@@ -101,10 +101,7 @@ export function waitForAbortableDelay(
       return;
     }
 
-    timer = setTimeout(
-      () => finish(true),
-      resolveTimerTimeoutMs(delayMs, 1),
-    );
+    timer = setTimeout(() => finish(true), resolveTimerTimeoutMs(delayMs, 1));
     timer.unref?.();
   });
 }
diff --git a/extensions/feishu/src/bot.card-action.test.ts b/extensions/feishu/src/bot.card-action.test.ts
index 42a4e68647d4..1f0590e5a553 100644
--- a/extensions/feishu/src/bot.card-action.test.ts
+++ b/extensions/feishu/src/bot.card-action.test.ts
@@ -516,9 +516,7 @@ describe("Feishu Card Action Handler", () => {
     createFeishuClientMock.mockReturnValueOnce({
       im: {
         chat: {
-          get: vi
-            .fn()
-            .mockResolvedValue({ code: 99, msg: `${"x".repeat(499)}😀tail` }),
+          get: vi.fn().mockResolvedValue({ code: 99, msg: `${"x".repeat(499)}😀tail` }),
         },
       },
     });
diff --git a/extensions/google-meet/index.create.test.ts b/extensions/google-meet/index.create.test.ts
index 1f5568546056..afb8f242a358 100644
--- a/extensions/google-meet/index.create.test.ts
+++ b/extensions/google-meet/index.create.test.ts
@@ -13,7 +13,9 @@ import {
 import { CREATE_MEET_FROM_BROWSER_SCRIPT } from "./src/transports/chrome-create.js";
 
 const voiceCallMocks = vi.hoisted(() => ({
-  createVoiceCallGateway: vi.fn(({ runtime }: { runtime: { gateway: unknown } }) => runtime.gateway),
+  createVoiceCallGateway: vi.fn(
+    ({ runtime }: { runtime: { gateway: unknown } }) => runtime.gateway,
+  ),
   joinMeetViaVoiceCallGateway: vi.fn(async () => ({
     callId: "call-1",
     dtmfSent: true,
diff --git a/extensions/google-meet/src/runtime.ts b/extensions/google-meet/src/runtime.ts
index 3b68324f9cea..3d2a726a24c7 100644
--- a/extensions/google-meet/src/runtime.ts
+++ b/extensions/google-meet/src/runtime.ts
@@ -552,7 +552,7 @@ export class GoogleMeetRuntime {
             : prefixDtmfWait(rawDtmfSequence, this.params.config.voiceCall.dtmfDelayMs);
         const hasExplicitDelegatedAgent = Boolean(
           normalizeOptionalString(request.agentId) ||
-            normalizeOptionalString(this.params.config.realtime.agentId),
+          normalizeOptionalString(this.params.config.realtime.agentId),
         );
         const delegatedAgentId = hasExplicitDelegatedAgent ? agentId : undefined;
         const voiceCallResult = this.params.config.voiceCall.enabled
@@ -766,8 +766,7 @@ export class GoogleMeetRuntime {
       mode,
       message: request.message ?? "Say exactly: Google Meet speech test complete.",
     });
-    const startOutputBytes =
-      existingSession?.id === result.session.id ? existingOutputBytes : 0;
+    const startOutputBytes = existingSession?.id === result.session.id ? existingOutputBytes : 0;
     let health = result.session.chrome?.health;
     const shouldWaitForOutput =
       result.spoken === true &&
diff --git a/extensions/kilocode/onboard.test.ts b/extensions/kilocode/onboard.test.ts
index ea11281c8e3e..e4d258b33b68 100644
--- a/extensions/kilocode/onboard.test.ts
+++ b/extensions/kilocode/onboard.test.ts
@@ -10,11 +10,7 @@ import {
   KILOCODE_DEFAULT_COST,
   KILOCODE_DEFAULT_MODEL_ID,
 } from "./api.js";
-import {
-  applyKilocodeConfig,
-  KILOCODE_BASE_URL,
-  KILOCODE_DEFAULT_MODEL_REF,
-} from "./onboard.js";
+import { applyKilocodeConfig, KILOCODE_BASE_URL, KILOCODE_DEFAULT_MODEL_REF } from "./onboard.js";
 
 const emptyCfg: OpenClawConfig = {};
 const KILOCODE_MODEL_IDS = ["kilo/auto"];
diff --git a/extensions/kimi-coding/onboard.test.ts b/extensions/kimi-coding/onboard.test.ts
index 04a4792f01fb..a3f46d7e3f8e 100644
--- a/extensions/kimi-coding/onboard.test.ts
+++ b/extensions/kimi-coding/onboard.test.ts
@@ -1,11 +1,7 @@
 // Kimi Coding tests cover onboard plugin behavior.
 import { resolveAgentModelPrimaryValue } from "openclaw/plugin-sdk/provider-onboard";
 import { describe, expect, it } from "vitest";
-import {
-  applyKimiCodeConfig,
-  KIMI_CODING_MODEL_REF,
-  KIMI_MODEL_REF,
-} from "./onboard.js";
+import { applyKimiCodeConfig, KIMI_CODING_MODEL_REF, KIMI_MODEL_REF } from "./onboard.js";
 
 describe("kimi coding onboard", () => {
   it("keeps the historical Kimi model ref alias pointed at the coding default", () => {
diff --git a/extensions/line/src/outbound-media.test.ts b/extensions/line/src/outbound-media.test.ts
index 2c7feaa681e0..50b27f81bf3e 100644
--- a/extensions/line/src/outbound-media.test.ts
+++ b/extensions/line/src/outbound-media.test.ts
@@ -14,10 +14,7 @@ afterAll(() => {
   vi.resetModules();
 });
 
-import {
-  resolveLineOutboundMedia,
-  validateLineMediaUrl,
-} from "./outbound-media.js";
+import { resolveLineOutboundMedia, validateLineMediaUrl } from "./outbound-media.js";
 
 describe("validateLineMediaUrl", () => {
   beforeEach(() => {
diff --git a/extensions/matrix/src/env-vars.ts b/extensions/matrix/src/env-vars.ts
index 0639d9777651..bb7552e96cbf 100644
--- a/extensions/matrix/src/env-vars.ts
+++ b/extensions/matrix/src/env-vars.ts
@@ -44,7 +44,7 @@ export function getMatrixScopedEnvVarNames(accountId: string): {
 
 function decodeMatrixEnvAccountToken(token: string): string | undefined {
   let decoded = "";
-  for (let index = 0; index < token.length; ) {
+  for (let index = 0; index < token.length;) {
     const hexEscape = /^_X([0-9A-F]+)_/.exec(token.slice(index));
     if (hexEscape) {
       const hex = hexEscape[1];
diff --git a/extensions/matrix/src/matrix/sdk/http-client.ts b/extensions/matrix/src/matrix/sdk/http-client.ts
index 4d345f390bc1..c6da35413cdf 100644
--- a/extensions/matrix/src/matrix/sdk/http-client.ts
+++ b/extensions/matrix/src/matrix/sdk/http-client.ts
@@ -55,10 +55,9 @@ export class MatrixAuthedHttpClient {
       try {
         return JSON.parse(text);
       } catch {
-        throw Object.assign(
-          new Error("Matrix homeserver returned malformed JSON"),
-          { statusCode: response.status },
-        );
+        throw Object.assign(new Error("Matrix homeserver returned malformed JSON"), {
+          statusCode: response.status,
+        });
       }
     }
     return text;
diff --git a/extensions/memory-core/src/short-term-promotion.ts b/extensions/memory-core/src/short-term-promotion.ts
index c4518e20eb80..7ae4e979d287 100644
--- a/extensions/memory-core/src/short-term-promotion.ts
+++ b/extensions/memory-core/src/short-term-promotion.ts
@@ -2091,7 +2091,7 @@ function extractTargetHeadingBodySnippet(
     return null;
   }
   const normalizedBody = normalizeSnippet(bodySnippet);
-  for (let separatorIndex = targetSnippet.indexOf(": "); separatorIndex > 0; ) {
+  for (let separatorIndex = targetSnippet.indexOf(": "); separatorIndex > 0;) {
     const targetBody = normalizeSnippet(targetSnippet.slice(separatorIndex + 2));
     if (targetBody && normalizedBody.startsWith(targetBody)) {
       return targetBody;
diff --git a/extensions/memory-wiki/src/claim-health.ts b/extensions/memory-wiki/src/claim-health.ts
index 8b36ff5b0ac7..b048ce4b53ee 100644
--- a/extensions/memory-wiki/src/claim-health.ts
+++ b/extensions/memory-wiki/src/claim-health.ts
@@ -136,8 +136,8 @@ export function assessClaimFreshness(params: {
   claim: WikiClaim;
   now?: Date;
 }): WikiFreshness {
-  let hasClaimTimestamp = typeof params.claim.updatedAt === "string" &&
-    params.claim.updatedAt.trim().length > 0;
+  let hasClaimTimestamp =
+    typeof params.claim.updatedAt === "string" && params.claim.updatedAt.trim().length > 0;
   let latestTimestamp = resolveLatestTimestamp([params.claim.updatedAt]);
   let latestMs = parseTimestamp(latestTimestamp) ?? -1;
   for (const evidence of params.claim.evidence) {
diff --git a/extensions/meta/onboard.ts b/extensions/meta/onboard.ts
index eb83f116eb5b..78184fed149d 100644
--- a/extensions/meta/onboard.ts
+++ b/extensions/meta/onboard.ts
@@ -5,11 +5,7 @@ import {
   createModelCatalogPresetAppliers,
   type OpenClawConfig,
 } from "openclaw/plugin-sdk/provider-onboard";
-import {
-  buildMetaModelDefinition,
-  META_BASE_URL,
-  META_MODEL_CATALOG,
-} from "./models.js";
+import { buildMetaModelDefinition, META_BASE_URL, META_MODEL_CATALOG } from "./models.js";
 
 /** Default Meta model reference used after onboarding. */
 export const META_DEFAULT_MODEL_REF = "meta/muse-spark-1.1";
diff --git a/extensions/meta/stream.ts b/extensions/meta/stream.ts
index 98e787d4a5ef..c5f5249ee16b 100644
--- a/extensions/meta/stream.ts
+++ b/extensions/meta/stream.ts
@@ -32,9 +32,7 @@ export function createMetaResponsesWrapper(baseStreamFn: StreamFn | undefined):
     });
 }
 
-export function wrapMetaProviderStream(
-  ctx: ProviderWrapStreamFnContext,
-): StreamFn | undefined {
+export function wrapMetaProviderStream(ctx: ProviderWrapStreamFnContext): StreamFn | undefined {
   if (ctx.provider !== "meta" || ctx.model?.api !== "openai-responses") {
     return undefined;
   }
diff --git a/extensions/meta/thinking.ts b/extensions/meta/thinking.ts
index d96ea727703c..806ec70a711b 100644
--- a/extensions/meta/thinking.ts
+++ b/extensions/meta/thinking.ts
@@ -14,8 +14,6 @@ const META_THINKING_PROFILE = {
   defaultLevel: "high",
 } satisfies ProviderThinkingProfile;
 
-export function resolveMetaThinkingProfile(
-  modelId: string,
-): ProviderThinkingProfile | undefined {
+export function resolveMetaThinkingProfile(modelId: string): ProviderThinkingProfile | undefined {
   return isMetaReasoningModelId(modelId) ? META_THINKING_PROFILE : undefined;
 }
diff --git a/extensions/microsoft-foundry/index.test.ts b/extensions/microsoft-foundry/index.test.ts
index f02a5502a98f..7586b61b7d1c 100644
--- a/extensions/microsoft-foundry/index.test.ts
+++ b/extensions/microsoft-foundry/index.test.ts
@@ -1521,13 +1521,7 @@ describe("microsoft-foundry plugin", () => {
           params: { canonicalModelId: modelName },
         }),
       ).toMatchObject({
-        levels: [
-          { id: "off" },
-          { id: "minimal" },
-          { id: "low" },
-          { id: "medium" },
-          { id: "high" },
-        ],
+        levels: [{ id: "off" }, { id: "minimal" }, { id: "low" }, { id: "medium" }, { id: "high" }],
       });
     }
     expect(
diff --git a/extensions/ollama/src/embedding-provider.test.ts b/extensions/ollama/src/embedding-provider.test.ts
index ef2c445ada89..52957c2792bb 100644
--- a/extensions/ollama/src/embedding-provider.test.ts
+++ b/extensions/ollama/src/embedding-provider.test.ts
@@ -26,7 +26,6 @@ vi.mock("openclaw/plugin-sdk/ssrf-runtime-internal", () => ({
   fetchConfiguredLocalOriginWithSsrFGuard: fetchConfiguredLocalOriginWithSsrFGuardMock,
 }));
 
-
 let createOllamaEmbeddingProvider: typeof import("./embedding-provider.js").createOllamaEmbeddingProvider;
 let ollamaMemoryEmbeddingProviderAdapter: typeof import("./memory-embedding-adapter.js").ollamaMemoryEmbeddingProviderAdapter;
 
diff --git a/extensions/open-prose/skills/prose/SKILL.md b/extensions/open-prose/skills/prose/SKILL.md
index 71b87d4eb6f8..8fe3545dd1f1 100644
--- a/extensions/open-prose/skills/prose/SKILL.md
+++ b/extensions/open-prose/skills/prose/SKILL.md
@@ -52,15 +52,16 @@ There is only ONE skill: `open-prose`. There are NO separate skills like `prose-
 3. Run with: `prose run examples/28-gas-town.prose`
 
 **Common examples by keyword:**
-| Keyword | File |
-|---------|------|
-| hello, hello world | `examples/01-hello-world.prose` |
-| gas town, gastown | `examples/28-gas-town.prose` |
-| captain, chair | `examples/29-captains-chair.prose` |
-| forge, browser | `examples/37-the-forge.prose` |
-| parallel | `examples/16-parallel-reviews.prose` |
-| pipeline | `examples/21-pipeline-operations.prose` |
-| error, retry | `examples/22-error-handling.prose` |
+
+| Keyword            | File                                    |
+| ------------------ | --------------------------------------- |
+| hello, hello world | `examples/01-hello-world.prose`         |
+| gas town, gastown  | `examples/28-gas-town.prose`            |
+| captain, chair     | `examples/29-captains-chair.prose`      |
+| forge, browser     | `examples/37-the-forge.prose`           |
+| parallel           | `examples/16-parallel-reviews.prose`    |
+| pipeline           | `examples/21-pipeline-operations.prose` |
+| error, retry       | `examples/22-error-handling.prose`      |
 
 ### Remote Programs
 
diff --git a/extensions/qa-lab/src/character-eval.test.ts b/extensions/qa-lab/src/character-eval.test.ts
index cf4ebba145f7..978623f5d51f 100644
--- a/extensions/qa-lab/src/character-eval.test.ts
+++ b/extensions/qa-lab/src/character-eval.test.ts
@@ -282,9 +282,7 @@ describe("runQaCharacterEval", () => {
     });
 
     expect(path.dirname(result.outputDir)).toBe(path.join(tempRoot, ".artifacts", "qa-e2e"));
-    expect(path.basename(result.outputDir)).toMatch(
-      /^character-eval-[a-z0-9]+-[a-f0-9]{8}$/u,
-    );
+    expect(path.basename(result.outputDir)).toMatch(/^character-eval-[a-z0-9]+-[a-f0-9]{8}$/u);
     await expect(fs.stat(result.reportPath).then((stats) => stats.isFile())).resolves.toBe(true);
   });
 
diff --git a/extensions/qa-lab/src/cli.ts b/extensions/qa-lab/src/cli.ts
index 4ea14507826b..e307bb50d2f2 100644
--- a/extensions/qa-lab/src/cli.ts
+++ b/extensions/qa-lab/src/cli.ts
@@ -468,10 +468,7 @@ export function registerQaLabCli(program: Command) {
     .option("--runner <kind>", "Execution runner: host or multipass", "host")
     .option("--transport <id>", "QA transport id", "qa-channel")
     .option("--channel-driver <id>", "QA channel driver: qa-channel, crabline, or live")
-    .option(
-      "--channel <id>",
-      "Channel id for --channel-driver crabline or live",
-    )
+    .option("--channel <id>", "Channel id for --channel-driver crabline or live")
     .option("--provider-mode <mode>", formatQaProviderModeHelp())
     .option("--model <ref>", "Primary provider/model ref")
     .option("--alt-model <ref>", "Alternate provider/model ref")
diff --git a/extensions/qa-lab/src/coverage-report.ts b/extensions/qa-lab/src/coverage-report.ts
index d2f99d819936..52a85a4052b7 100644
--- a/extensions/qa-lab/src/coverage-report.ts
+++ b/extensions/qa-lab/src/coverage-report.ts
@@ -485,9 +485,9 @@ function formatSuiteCommand(matches: readonly QaScenarioSearchMatch[]) {
   const scenarioArgs = matches.map((match) => `--scenario ${match.id}`).join(" ");
   const requiredDrivers = [
     ...new Set(
-      matches.map((match) => match.requiredChannelDriver).filter((driver): driver is string =>
-        Boolean(driver),
-      ),
+      matches
+        .map((match) => match.requiredChannelDriver)
+        .filter((driver): driver is string => Boolean(driver)),
     ),
   ];
   const driverArg =
@@ -495,9 +495,11 @@ function formatSuiteCommand(matches: readonly QaScenarioSearchMatch[]) {
       ? ` --channel-driver ${requiredDrivers[0]}`
       : "";
   const channels = [
-    ...new Set(matches.map((match) => match.channel).filter((channel): channel is string =>
-      Boolean(channel),
-    )),
+    ...new Set(
+      matches
+        .map((match) => match.channel)
+        .filter((channel): channel is string => Boolean(channel)),
+    ),
   ];
   const channelArg = driverArg && channels.length === 1 ? ` --channel ${channels[0]}` : "";
   return `pnpm openclaw qa suite${driverArg}${channelArg} ${scenarioArgs}`;
diff --git a/extensions/qa-lab/src/live-transports/cli.test.ts b/extensions/qa-lab/src/live-transports/cli.test.ts
index 9da116e46666..c146354a8720 100644
--- a/extensions/qa-lab/src/live-transports/cli.test.ts
+++ b/extensions/qa-lab/src/live-transports/cli.test.ts
@@ -15,10 +15,7 @@ vi.mock("./slack/cli.runtime.js", () => ({ runQaSlackCommand: runSlack }));
 vi.mock("./telegram/cli.runtime.js", () => ({ runQaTelegramCommand: runTelegram }));
 vi.mock("./whatsapp/cli.runtime.js", () => ({ runQaWhatsAppCommand: runWhatsApp }));
 
-import {
-  listLiveTransportQaAdapterFactories,
-  listLiveTransportQaCliRegistrations,
-} from "./cli.js";
+import { listLiveTransportQaAdapterFactories, listLiveTransportQaCliRegistrations } from "./cli.js";
 
 const matrixFactory = {
   id: "matrix",
diff --git a/extensions/qa-lab/src/mantis/discord-smoke.runtime.test.ts b/extensions/qa-lab/src/mantis/discord-smoke.runtime.test.ts
index 697f8164c6d1..989054150801 100644
--- a/extensions/qa-lab/src/mantis/discord-smoke.runtime.test.ts
+++ b/extensions/qa-lab/src/mantis/discord-smoke.runtime.test.ts
@@ -301,18 +301,16 @@ describe("mantis discord smoke runtime", () => {
     // and never truncate the legitimate payload.
     const paddedUsername = `Mantis${"_".repeat(1024 * 1024)}`;
     const baseImpl = fetchWithSsrFGuard.getMockImplementation();
-    fetchWithSsrFGuard.mockImplementation(
-      async (request: { url: string; init?: RequestInit }) => {
-        const pathname = new URL(request.url).pathname;
-        if (pathname === "/api/v10/users/@me") {
-          return {
-            response: jsonResponse({ id: "1489650053747314748", username: paddedUsername }),
-            release: vi.fn(),
-          };
-        }
-        return baseImpl!(request);
-      },
-    );
+    fetchWithSsrFGuard.mockImplementation(async (request: { url: string; init?: RequestInit }) => {
+      const pathname = new URL(request.url).pathname;
+      if (pathname === "/api/v10/users/@me") {
+        return {
+          response: jsonResponse({ id: "1489650053747314748", username: paddedUsername }),
+          release: vi.fn(),
+        };
+      }
+      return baseImpl!(request);
+    });
 
     const result = await runMantisDiscordSmoke({
       repoRoot,
diff --git a/extensions/qa-lab/src/qa-channel-transport.ts b/extensions/qa-lab/src/qa-channel-transport.ts
index 389321abe760..b2ceee280aaa 100644
--- a/extensions/qa-lab/src/qa-channel-transport.ts
+++ b/extensions/qa-lab/src/qa-channel-transport.ts
@@ -192,9 +192,6 @@ class QaChannelTransport extends QaStateBackedTransportAdapter {
   createReportNotes = createQaChannelReportNotes;
 }
 
-export function createQaChannelTransport(
-  state: QaBusState,
-  transportPolicy?: QaTransportPolicy,
-) {
+export function createQaChannelTransport(state: QaBusState, transportPolicy?: QaTransportPolicy) {
   return new QaChannelTransport(state, transportPolicy);
 }
diff --git a/extensions/qa-matrix/src/runners/contract/scenario-runtime-shared.test.ts b/extensions/qa-matrix/src/runners/contract/scenario-runtime-shared.test.ts
index 37c55b3c7f44..6bb553bb13ea 100644
--- a/extensions/qa-matrix/src/runners/contract/scenario-runtime-shared.test.ts
+++ b/extensions/qa-matrix/src/runners/contract/scenario-runtime-shared.test.ts
@@ -33,7 +33,9 @@ describe("matrix scenario runtime shared", () => {
     };
     const prefix = "a".repeat(199);
 
-    expect(buildMatrixReplyArtifact({ ...event, body: `${prefix}😀tail` }).bodyPreview).toBe(prefix);
+    expect(buildMatrixReplyArtifact({ ...event, body: `${prefix}😀tail` }).bodyPreview).toBe(
+      prefix,
+    );
     expect(buildMatrixReplyArtifact({ ...event, body: " " }).bodyPreview).toBe("");
   });
 });
diff --git a/extensions/qa-matrix/src/runners/contract/scenario-runtime.ts b/extensions/qa-matrix/src/runners/contract/scenario-runtime.ts
index e544edd80351..f44023b6ba5c 100644
--- a/extensions/qa-matrix/src/runners/contract/scenario-runtime.ts
+++ b/extensions/qa-matrix/src/runners/contract/scenario-runtime.ts
@@ -1,5 +1,8 @@
 // Qa Matrix plugin module implements scenario runtime behavior.
-import { MATRIX_QA_SECONDARY_ROOM_KEY, type MatrixQaScenarioDefinition } from "./scenario-catalog.js";
+import {
+  MATRIX_QA_SECONDARY_ROOM_KEY,
+  type MatrixQaScenarioDefinition,
+} from "./scenario-catalog.js";
 import {
   runAllowBotsDefaultBlockScenario,
   runAllowBotsMentionsDmUnmentionedScenario,
diff --git a/extensions/qqbot/src/engine/approval/index.test.ts b/extensions/qqbot/src/engine/approval/index.test.ts
index c747c95f1aef..ab9c08d3e983 100644
--- a/extensions/qqbot/src/engine/approval/index.test.ts
+++ b/extensions/qqbot/src/engine/approval/index.test.ts
@@ -56,9 +56,7 @@ describe("buildExecApprovalText", () => {
 
   it("wraps ASCII and double-width text after 24 graphemes", () => {
     const ascii = readCommandBlock(buildExecApprovalText(createExecView("x".repeat(25))));
-    const wide = readCommandBlock(
-      buildExecApprovalText(createExecView(`${"表".repeat(24)}😀`)),
-    );
+    const wide = readCommandBlock(buildExecApprovalText(createExecView(`${"表".repeat(24)}😀`)));
 
     expect(ascii.body).toBe(`${"x".repeat(24)}↩\nx`);
     expect(wide.body).toBe(`${"表".repeat(24)}↩\n😀`);
@@ -78,9 +76,7 @@ describe("buildExecApprovalText", () => {
       buildExecApprovalText(createExecView(`${oversizedGrapheme}; echo hidden`)),
     );
 
-    expect(body.replace(/[↩\n]/g, "")).toBe(
-      `${oversizedGrapheme.slice(0, 300)}…[truncated]`,
-    );
+    expect(body.replace(/[↩\n]/g, "")).toBe(`${oversizedGrapheme.slice(0, 300)}…[truncated]`);
   });
 
   it("marks a display wrap before a shell comment boundary", () => {
diff --git a/extensions/qqbot/src/engine/approval/index.ts b/extensions/qqbot/src/engine/approval/index.ts
index 64ccfb51c4f9..a9dad6580082 100644
--- a/extensions/qqbot/src/engine/approval/index.ts
+++ b/extensions/qqbot/src/engine/approval/index.ts
@@ -119,10 +119,7 @@ function formatApprovalMetadata(value: string): string {
   return formatCommandPreview(sanitized);
 }
 
-export function buildExecApprovalText(
-  view: ExecApprovalPendingView,
-  nowMs = Date.now(),
-): string {
+export function buildExecApprovalText(view: ExecApprovalPendingView, nowMs = Date.now()): string {
   const expiresIn = Math.max(0, Math.round((view.expiresAtMs - nowMs) / 1000));
   const lines: string[] = ["\u{1f510} \u547d\u4ee4\u6267\u884c\u5ba1\u6279", ""];
   if (view.commandText) {
diff --git a/extensions/raft/src/accounts.ts b/extensions/raft/src/accounts.ts
index 93738ee5cc7a..3cdce3f2c9a2 100644
--- a/extensions/raft/src/accounts.ts
+++ b/extensions/raft/src/accounts.ts
@@ -44,9 +44,7 @@ export function resolveRaftAccount(params: {
   cfg: OpenClawConfig;
   accountId?: string | null;
 }): ResolvedRaftAccount {
-  const accountId = normalizeAccountId(
-    params.accountId ?? resolveDefaultRaftAccountId(params.cfg),
-  );
+  const accountId = normalizeAccountId(params.accountId ?? resolveDefaultRaftAccountId(params.cfg));
   const channel = resolveRaftConfig(params.cfg);
   const merged = resolveMergedAccountConfig<RaftAccountConfig>({
     channelConfig: channel,
@@ -57,7 +55,9 @@ export function resolveRaftAccount(params: {
   });
   const configuredProfile = normalizeOptionalString(merged.profile);
   const envProfile =
-    accountId === DEFAULT_ACCOUNT_ID ? normalizeOptionalString(process.env.RAFT_PROFILE) : undefined;
+    accountId === DEFAULT_ACCOUNT_ID
+      ? normalizeOptionalString(process.env.RAFT_PROFILE)
+      : undefined;
   const profile = configuredProfile ?? envProfile ?? null;
 
   return {
diff --git a/extensions/raft/src/channel.ts b/extensions/raft/src/channel.ts
index 3f28b1bec1d5..7504484a11b9 100644
--- a/extensions/raft/src/channel.ts
+++ b/extensions/raft/src/channel.ts
@@ -2,12 +2,12 @@
 import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { createChatChannelPlugin, type ChannelPlugin } from "openclaw/plugin-sdk/channel-core";
 import type { OpenClawConfig } from "openclaw/plugin-sdk/config-contracts";
+import { detectBinary } from "openclaw/plugin-sdk/setup-tools";
 import {
   buildBaseChannelStatusSummary,
   createComputedAccountStatusAdapter,
   createDefaultChannelRuntimeState,
 } from "openclaw/plugin-sdk/status-helpers";
-import { detectBinary } from "openclaw/plugin-sdk/setup-tools";
 import {
   listRaftAccountIds,
   RAFT_CHANNEL_ID,
diff --git a/extensions/raft/src/config-schema.ts b/extensions/raft/src/config-schema.ts
index 2dc9f1cb7775..d236d714dfe4 100644
--- a/extensions/raft/src/config-schema.ts
+++ b/extensions/raft/src/config-schema.ts
@@ -2,18 +2,22 @@
 import { buildChannelConfigSchema } from "openclaw/plugin-sdk/channel-config-schema";
 import { z } from "zod";
 
-const RaftAccountSchema = z.object({
-  name: z.string().optional(),
-  enabled: z.boolean().optional(),
-  profile: z.string().min(1).optional(),
-}).strict();
+const RaftAccountSchema = z
+  .object({
+    name: z.string().optional(),
+    enabled: z.boolean().optional(),
+    profile: z.string().min(1).optional(),
+  })
+  .strict();
 
-export const RaftConfigSchema = z.object({
-  name: z.string().optional(),
-  enabled: z.boolean().optional(),
-  profile: z.string().min(1).optional(),
-  defaultAccount: z.string().optional(),
-  accounts: z.record(z.string(), RaftAccountSchema).optional(),
-}).strict();
+export const RaftConfigSchema = z
+  .object({
+    name: z.string().optional(),
+    enabled: z.boolean().optional(),
+    profile: z.string().min(1).optional(),
+    defaultAccount: z.string().optional(),
+    accounts: z.record(z.string(), RaftAccountSchema).optional(),
+  })
+  .strict();
 
 export const raftChannelConfigSchema = buildChannelConfigSchema(RaftConfigSchema);
diff --git a/extensions/raft/src/gateway.test.ts b/extensions/raft/src/gateway.test.ts
index 3744629431a8..d150b76de1aa 100644
--- a/extensions/raft/src/gateway.test.ts
+++ b/extensions/raft/src/gateway.test.ts
@@ -30,33 +30,35 @@ function createContext(accountId = "default") {
     lastStopAt: null,
     lastError: null,
   };
-  const run = vi.fn(async (params: {
-    raw: unknown;
-    adapter: {
-      ingest: (raw: unknown) => {
-        id: string;
-        timestamp: number;
-        rawText: string;
-        textForAgent: string;
-        textForCommands: string;
-      };
-      resolveTurn: (input: {
-        id: string;
-        timestamp: number;
-        rawText: string;
-        textForAgent: string;
-        textForCommands: string;
-      }) => Promise<{
-        delivery: {
-          deliver: () => Promise<{ visibleReplySent: false }>;
+  const run = vi.fn(
+    async (params: {
+      raw: unknown;
+      adapter: {
+        ingest: (raw: unknown) => {
+          id: string;
+          timestamp: number;
+          rawText: string;
+          textForAgent: string;
+          textForCommands: string;
         };
-      }>;
-    };
-  }) => {
-    const input = params.adapter.ingest(params.raw);
-    const turn = await params.adapter.resolveTurn(input);
-    await turn.delivery.deliver();
-  });
+        resolveTurn: (input: {
+          id: string;
+          timestamp: number;
+          rawText: string;
+          textForAgent: string;
+          textForCommands: string;
+        }) => Promise<{
+          delivery: {
+            deliver: () => Promise<{ visibleReplySent: false }>;
+          };
+        }>;
+      };
+    }) => {
+      const input = params.adapter.ingest(params.raw);
+      const turn = await params.adapter.resolveTurn(input);
+      await turn.delivery.deliver();
+    },
+  );
   const ctx = {
     cfg: {},
     accountId,
@@ -485,5 +487,4 @@ describe("Raft wake gateway", () => {
       resetPluginStateStoreForTests();
     }
   });
-
 });
diff --git a/extensions/raft/src/setup.ts b/extensions/raft/src/setup.ts
index 4a837c70ec21..f59f9a101d93 100644
--- a/extensions/raft/src/setup.ts
+++ b/extensions/raft/src/setup.ts
@@ -1,6 +1,6 @@
+import type { ChannelPlugin } from "openclaw/plugin-sdk/core";
 // Raft plugin setup owns only the Raft CLI profile, never Raft credentials.
 import { createPatchedAccountSetupAdapter } from "openclaw/plugin-sdk/setup";
-import type { ChannelPlugin } from "openclaw/plugin-sdk/core";
 import {
   createDetectedBinaryStatus,
   formatDocsLink,
@@ -68,7 +68,8 @@ export const raftSetupPlugin: ChannelPlugin<ResolvedRaftAccount> = {
         accountId
           ? resolveRaftAccount({ cfg, accountId }).configured
           : listRaftAccountIds(cfg).some(
-              (resolvedAccountId) => resolveRaftAccount({ cfg, accountId: resolvedAccountId }).configured,
+              (resolvedAccountId) =>
+                resolveRaftAccount({ cfg, accountId: resolvedAccountId }).configured,
             ),
       resolveBinaryPath: () => "raft",
       detectBinary,
diff --git a/extensions/slack/src/format.ts b/extensions/slack/src/format.ts
index dff28ae457a7..2d7852b6fed4 100644
--- a/extensions/slack/src/format.ts
+++ b/extensions/slack/src/format.ts
@@ -110,7 +110,7 @@ type SlackCodeMarker = "`" | "```";
 
 function tokenizeSlackMrkdwn(text: string): string[] {
   const tokens: string[] = [];
-  for (let index = 0; index < text.length; ) {
+  for (let index = 0; index < text.length;) {
     if (text.startsWith("```", index)) {
       tokens.push("```");
       index += 3;
diff --git a/extensions/slack/src/monitor/thread.ts b/extensions/slack/src/monitor/thread.ts
index baee0af468aa..2a52de520aac 100644
--- a/extensions/slack/src/monitor/thread.ts
+++ b/extensions/slack/src/monitor/thread.ts
@@ -87,7 +87,8 @@ function resolveSlackMessageText(message: {
   attachments?: SlackAttachment[];
 }): string | undefined {
   const messageText =
-    normalizeOptionalString(message.text) ?? resolveSlackAttachmentFallbackText(message.attachments);
+    normalizeOptionalString(message.text) ??
+    resolveSlackAttachmentFallbackText(message.attachments);
   return chooseSlackPrimaryText({
     messageText,
     blocksText: resolveSlackBlocksText(message.blocks),
diff --git a/extensions/slack/src/send.blocks.test.ts b/extensions/slack/src/send.blocks.test.ts
index 8e1f098dc2de..351c0c687bbf 100644
--- a/extensions/slack/src/send.blocks.test.ts
+++ b/extensions/slack/src/send.blocks.test.ts
@@ -535,9 +535,9 @@ describe("sendMessageSlack blocks", () => {
     );
     expect(posts.length).toBeGreaterThan(1);
     expect(posts.every((post) => post.blocks === undefined)).toBe(true);
-    expect(
-      posts.every((post) => Array.from(postedText(post)).length <= SLACK_TEXT_LIMIT),
-    ).toBe(true);
+    expect(posts.every((post) => Array.from(postedText(post)).length <= SLACK_TEXT_LIMIT)).toBe(
+      true,
+    );
     expect(posts.map(postedText).join("\n")).toContain("Series-11");
   });
 
@@ -578,9 +578,9 @@ describe("sendMessageSlack blocks", () => {
       blocks,
     });
     expect(posts.slice(1).every((post) => post.blocks === undefined)).toBe(true);
-    expect(
-      posts.every((post) => Array.from(postedText(post)).length <= SLACK_TEXT_LIMIT),
-    ).toBe(true);
+    expect(posts.every((post) => Array.from(postedText(post)).length <= SLACK_TEXT_LIMIT)).toBe(
+      true,
+    );
     const fallbackText = posts.slice(1).map(postedText).join("\n");
     expect(fallbackText).toContain("*Summary*");
     expect(fallbackText.match(/Series-11/g)).toHaveLength(1);
@@ -736,9 +736,9 @@ describe("sendMessageSlack blocks", () => {
     expect(posts[0]?.text).toBe("Large pipeline (table)\n\n- Refresh");
     expect(posts[1]).toMatchObject({ text: "- Refresh", blocks: [blocks[3]] });
     expect(posts.slice(2).every((post) => post.blocks === undefined)).toBe(true);
-    expect(
-      posts.every((post) => Array.from(postedText(post)).length <= SLACK_TEXT_LIMIT),
-    ).toBe(true);
+    expect(posts.every((post) => Array.from(postedText(post)).length <= SLACK_TEXT_LIMIT)).toBe(
+      true,
+    );
     expect(posts[0]?.reply_broadcast).toBeUndefined();
     expect(posts[2]?.reply_broadcast).toBe(true);
     expect(posts.every((post) => post.thread_ts === "171234.100")).toBe(true);
@@ -850,9 +850,9 @@ describe("sendMessageSlack blocks", () => {
     expect(posts[1]).toMatchObject({ text: compactFallback });
     expect(posts[1]?.blocks).toBeUndefined();
     expect(posts.slice(2).every((post) => post.blocks === undefined)).toBe(true);
-    expect(
-      posts.every((post) => Array.from(postedText(post)).length <= SLACK_TEXT_LIMIT),
-    ).toBe(true);
+    expect(posts.every((post) => Array.from(postedText(post)).length <= SLACK_TEXT_LIMIT)).toBe(
+      true,
+    );
     const fallbackText = posts
       .slice(2)
       .map((post) => post.text)
@@ -948,9 +948,9 @@ describe("sendMessageSlack blocks", () => {
     expect(posts.length).toBeGreaterThan(1);
     expect(posts[0]).toMatchObject({ text: "Revenue (pie chart)", blocks: [blocks[1]] });
     expect(posts.slice(1).every((post) => post.blocks === undefined)).toBe(true);
-    expect(
-      posts.every((post) => Array.from(postedText(post)).length <= SLACK_TEXT_LIMIT),
-    ).toBe(true);
+    expect(posts.every((post) => Array.from(postedText(post)).length <= SLACK_TEXT_LIMIT)).toBe(
+      true,
+    );
     const fallbackText = posts
       .slice(1)
       .map((post) => post.text)
diff --git a/extensions/telegram/src/bot-native-command-menu.ts b/extensions/telegram/src/bot-native-command-menu.ts
index 52a8267b2731..18b2f7763424 100644
--- a/extensions/telegram/src/bot-native-command-menu.ts
+++ b/extensions/telegram/src/bot-native-command-menu.ts
@@ -47,7 +47,7 @@ const cappedTelegramMenuCache = new Map<
 
 function countTelegramCommandText(value: string): number {
   let count = 0;
-  for (let index = 0; index < value.length; ) {
+  for (let index = 0; index < value.length;) {
     const codePoint = value.codePointAt(index);
     index += codePoint && codePoint > 0xffff ? 2 : 1;
     count += 1;
diff --git a/extensions/tlon/src/channel.runtime.ts b/extensions/tlon/src/channel.runtime.ts
index 6d12a137918e..1216fb4006ed 100644
--- a/extensions/tlon/src/channel.runtime.ts
+++ b/extensions/tlon/src/channel.runtime.ts
@@ -4,6 +4,7 @@ import type { ChannelAccountSnapshot } from "openclaw/plugin-sdk/channel-contrac
 import type { ChannelOutboundAdapter } from "openclaw/plugin-sdk/channel-send-result";
 import type { OpenClawConfig } from "openclaw/plugin-sdk/config-contracts";
 import type { ChannelPlugin } from "openclaw/plugin-sdk/core";
+import { readResponseTextLimited } from "openclaw/plugin-sdk/provider-http";
 import { monitorTlonProvider } from "./monitor/index.js";
 import { tlonSetupWizard } from "./setup-surface.js";
 import {
@@ -25,7 +26,6 @@ import {
   sendGroupMessageWithStory,
 } from "./urbit/send.js";
 import { uploadImageFromUrl } from "./urbit/upload.js";
-import { readResponseTextLimited } from "openclaw/plugin-sdk/provider-http";
 
 type ResolvedTlonAccount = ReturnType<typeof resolveTlonAccount>;
 type ConfiguredTlonAccount = ResolvedTlonAccount & {
diff --git a/extensions/tlon/src/urbit/channel-ops.test.ts b/extensions/tlon/src/urbit/channel-ops.test.ts
index 1c42056e940a..381b4e8d4249 100644
--- a/extensions/tlon/src/urbit/channel-ops.test.ts
+++ b/extensions/tlon/src/urbit/channel-ops.test.ts
@@ -31,9 +31,7 @@ describe("Urbit channel operations", () => {
         },
         { path: "/chat/inbox.json", auditContext: "test" },
       ),
-    ).rejects.toThrow(
-      "Tlon scry response for path /chat/inbox.json: malformed JSON response",
-    );
+    ).rejects.toThrow("Tlon scry response for path /chat/inbox.json: malformed JSON response");
     expect(release).toHaveBeenCalledTimes(1);
   });
 });
diff --git a/extensions/tlon/src/urbit/sse-client.ts b/extensions/tlon/src/urbit/sse-client.ts
index 4fc8f9841b45..ac89e4f53e3b 100644
--- a/extensions/tlon/src/urbit/sse-client.ts
+++ b/extensions/tlon/src/urbit/sse-client.ts
@@ -2,10 +2,10 @@
 import { randomUUID } from "node:crypto";
 import { Readable } from "node:stream";
 import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
+import { readResponseTextLimited } from "openclaw/plugin-sdk/provider-http";
 import type { LookupFn, SsrFPolicy } from "openclaw/plugin-sdk/ssrf-runtime";
 import { ensureUrbitChannelOpen, pokeUrbitChannel, scryUrbitPath } from "./channel-ops.js";
 import { getUrbitContext, normalizeUrbitCookie } from "./context.js";
-import { readResponseTextLimited } from "openclaw/plugin-sdk/provider-http";
 import { urbitFetch } from "./fetch.js";
 
 type UrbitSseLogger = {
diff --git a/extensions/venice/usage.test.ts b/extensions/venice/usage.test.ts
index 0d75cd65da90..42d56a037b16 100644
--- a/extensions/venice/usage.test.ts
+++ b/extensions/venice/usage.test.ts
@@ -63,7 +63,9 @@ describe("Venice usage", () => {
     const snapshot = await fetchVeniceUsage({
       token: "venice-key",
       timeoutMs: 5000,
-      fetchFn: vi.fn(async () => new Response("private", { status: 403 })) as unknown as typeof fetch,
+      fetchFn: vi.fn(
+        async () => new Response("private", { status: 403 }),
+      ) as unknown as typeof fetch,
     });
 
     expect(snapshot.error).toBe("HTTP 403");
diff --git a/extensions/voice-call/src/realtime-agent-context.test.ts b/extensions/voice-call/src/realtime-agent-context.test.ts
index 2c9e9571f71e..1a50828ce762 100644
--- a/extensions/voice-call/src/realtime-agent-context.test.ts
+++ b/extensions/voice-call/src/realtime-agent-context.test.ts
@@ -2,9 +2,9 @@
 import { mkdtemp, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import path from "node:path";
+import type { OpenClawConfig } from "openclaw/plugin-sdk/config-contracts";
 import { afterEach, describe, expect, it, vi } from "vitest";
 import type { VoiceCallConfig } from "./config.js";
-import type { OpenClawConfig } from "openclaw/plugin-sdk/config-contracts";
 import type { CoreAgentDeps } from "./core-bridge.js";
 import { buildRealtimeVoiceInstructions } from "./realtime-agent-context.js";
 import { createVoiceCallBaseConfig } from "./test-fixtures.js";
diff --git a/extensions/voice-call/src/voice-mapping.test.ts b/extensions/voice-call/src/voice-mapping.test.ts
index ce15e22928cf..fdcac44a2f58 100644
--- a/extensions/voice-call/src/voice-mapping.test.ts
+++ b/extensions/voice-call/src/voice-mapping.test.ts
@@ -1,10 +1,6 @@
 // Voice Call tests cover voice mapping plugin behavior.
 import { describe, expect, it } from "vitest";
-import {
-  DEFAULT_POLLY_VOICE,
-  escapeXml,
-  mapVoiceToPolly,
-} from "./voice-mapping.js";
+import { DEFAULT_POLLY_VOICE, escapeXml, mapVoiceToPolly } from "./voice-mapping.js";
 
 describe("voice mapping", () => {
   it("escapes xml-special characters", () => {
diff --git a/extensions/zalouser/src/probe.ts b/extensions/zalouser/src/probe.ts
index 027709d7605d..f1f6908feb4f 100644
--- a/extensions/zalouser/src/probe.ts
+++ b/extensions/zalouser/src/probe.ts
@@ -21,10 +21,7 @@ export async function probeZalouser(
         user = await Promise.race([
           getZaloUserInfo(profile),
           new Promise<null>((resolve) => {
-            timeout = setTimeout(
-              () => resolve(null),
-              resolveTimerTimeoutMs(timeoutMs, 1000, 1000),
-            );
+            timeout = setTimeout(() => resolve(null), resolveTimerTimeoutMs(timeoutMs, 1000, 1000));
           }),
         ]);
       } finally {
diff --git a/package.json b/package.json
index f8fceebc1d39..81a5380d3975 100644
--- a/package.json
+++ b/package.json
@@ -2059,14 +2059,14 @@
     "@types/node": "26.1.0",
     "@types/proper-lockfile": "4.1.4",
     "@types/ws": "8.18.1",
-    "@typescript/native-preview": "7.0.0-dev.20260704.1",
+    "@typescript/native-preview": "7.0.0-dev.20260707.2",
     "@vitest/coverage-v8": "4.1.9",
     "esbuild": "0.28.1",
     "jscpd": "4.2.4",
     "jsdom": "29.1.1",
     "lit": "3.3.3",
-    "oxfmt": "0.57.0",
-    "oxlint": "1.72.0",
+    "oxfmt": "0.58.0",
+    "oxlint": "1.73.0",
     "oxlint-tsgolint": "0.24.0",
     "shiki": "4.3.0",
     "signal-utils": "0.21.1",
diff --git a/packages/agent-core/src/harness/env/nodejs.test.ts b/packages/agent-core/src/harness/env/nodejs.test.ts
index 3884ee3e5957..220b6cac5608 100644
--- a/packages/agent-core/src/harness/env/nodejs.test.ts
+++ b/packages/agent-core/src/harness/env/nodejs.test.ts
@@ -96,20 +96,17 @@ describe("NodeExecutionEnv file metadata", () => {
     }
   });
 
-  it.runIf(process.platform !== "win32")(
-    "preserves backslashes in POSIX filenames",
-    async () => {
-      const fileName = "notes\\todo.txt";
-      const written = await env.writeFile(fileName, "hello");
-      expect(written.ok).toBe(true);
+  it.runIf(process.platform !== "win32")("preserves backslashes in POSIX filenames", async () => {
+    const fileName = "notes\\todo.txt";
+    const written = await env.writeFile(fileName, "hello");
+    expect(written.ok).toBe(true);
 
-      const info = await env.fileInfo(fileName);
-      expect(info.ok).toBe(true);
-      if (info.ok) {
-        expect(info.value.name).toBe(fileName);
-      }
-    },
-  );
+    const info = await env.fileInfo(fileName);
+    expect(info.ok).toBe(true);
+    if (info.ok) {
+      expect(info.value.name).toBe(fileName);
+    }
+  });
 });
 
 describe("NodeExecutionEnv timeout handling", () => {
diff --git a/packages/agent-core/src/harness/utils/truncate.ts b/packages/agent-core/src/harness/utils/truncate.ts
index c3fb65015321..6f9d3c4b3c5d 100644
--- a/packages/agent-core/src/harness/utils/truncate.ts
+++ b/packages/agent-core/src/harness/utils/truncate.ts
@@ -324,7 +324,7 @@ function truncateStringToBytesFromEnd(str: string, maxBytes: number): string {
   let outputBytes = 0;
   let start = str.length;
   let needsReplacement = false;
-  for (let i = str.length; i > 0; ) {
+  for (let i = str.length; i > 0;) {
     let characterStart = i - 1;
     const code = str.charCodeAt(characterStart);
     let characterBytes: number;
diff --git a/packages/ai/src/env-api-keys.ts b/packages/ai/src/env-api-keys.ts
index 71d90874c86d..c76db410c8f9 100644
--- a/packages/ai/src/env-api-keys.ts
+++ b/packages/ai/src/env-api-keys.ts
@@ -166,7 +166,7 @@ function getApiKeyEnvVars(provider: string): readonly string[] | undefined {
 
   const envMap: Record<string, string> = {
     openai: "OPENAI_API_KEY",
-    "meta": "MODEL_API_KEY",
+    meta: "MODEL_API_KEY",
     "azure-openai-responses": "AZURE_OPENAI_API_KEY",
     deepseek: "DEEPSEEK_API_KEY",
     google: "GEMINI_API_KEY",
diff --git a/packages/ai/src/providers/openai-chatgpt-responses.ts b/packages/ai/src/providers/openai-chatgpt-responses.ts
index 427d9787d557..bed42821a36d 100644
--- a/packages/ai/src/providers/openai-chatgpt-responses.ts
+++ b/packages/ai/src/providers/openai-chatgpt-responses.ts
@@ -60,13 +60,13 @@ import {
 import { createSseByteGuard } from "../utils/streaming-byte-guard.js";
 import { stripSystemPromptCacheBoundary } from "../utils/system-prompt-cache-boundary.js";
 import { clampOpenAIPromptCacheKey } from "./openai-prompt-cache.js";
+import { supportsOpenAITemperature } from "./openai-reasoning-effort.js";
 import {
   convertResponsesMessages,
   convertResponsesToolPayload,
   processResponsesStream,
   resolveResponsesReasoningEffort,
 } from "./openai-responses-shared.js";
-import { supportsOpenAITemperature } from "./openai-reasoning-effort.js";
 import { buildBaseOptions } from "./simple-options.js";
 
 // ============================================================================
diff --git a/packages/ai/src/providers/openai-responses.ts b/packages/ai/src/providers/openai-responses.ts
index 6e9172e5e775..5156cb00e462 100644
--- a/packages/ai/src/providers/openai-responses.ts
+++ b/packages/ai/src/providers/openai-responses.ts
@@ -18,6 +18,7 @@ import { resolveCacheRetention } from "./cache-retention.js";
 import { isCloudflareProvider, resolveCloudflareBaseUrl } from "./cloudflare.js";
 import { buildCopilotDynamicHeaders, hasCopilotVisionInput } from "./github-copilot-headers.js";
 import { clampOpenAIPromptCacheKey } from "./openai-prompt-cache.js";
+import { supportsOpenAITemperature } from "./openai-reasoning-effort.js";
 import {
   applyCommonResponsesParams,
   convertResponsesMessages,
@@ -25,7 +26,6 @@ import {
   resolveResponsesReasoningEffort,
   runResponsesStreamLifecycle,
 } from "./openai-responses-shared.js";
-import { supportsOpenAITemperature } from "./openai-reasoning-effort.js";
 import { buildBaseOptions } from "./simple-options.js";
 
 const OPENAI_TOOL_CALL_PROVIDERS = new Set(["openai", "opencode"]);
diff --git a/packages/ai/src/utils/reasoning-tag-text-partitioner.ts b/packages/ai/src/utils/reasoning-tag-text-partitioner.ts
index 85533e357cf6..9ccd662ddbd5 100644
--- a/packages/ai/src/utils/reasoning-tag-text-partitioner.ts
+++ b/packages/ai/src/utils/reasoning-tag-text-partitioner.ts
@@ -251,7 +251,7 @@ function reasoningTagPrefixSuffixIndex(
   text: string,
   isIndexInsideCode: (index: number) => boolean,
 ): number {
-  for (let index = text.lastIndexOf("<"); index >= 0; ) {
+  for (let index = text.lastIndexOf("<"); index >= 0;) {
     if (!isIndexInsideCode(index) && isReasoningTagPrefix(text.slice(index))) {
       return index;
     }
diff --git a/packages/gateway-protocol/src/index.test.ts b/packages/gateway-protocol/src/index.test.ts
index 5a90890bbec6..4191237363a1 100644
--- a/packages/gateway-protocol/src/index.test.ts
+++ b/packages/gateway-protocol/src/index.test.ts
@@ -137,9 +137,7 @@ describe("lazy protocol validators", () => {
   });
 
   it("accepts an IANA time zone for session usage while retaining UTC offsets", () => {
-    expect(validateSessionsUsageParams({ mode: "specific", timeZone: "Europe/Vienna" })).toBe(
-      true,
-    );
+    expect(validateSessionsUsageParams({ mode: "specific", timeZone: "Europe/Vienna" })).toBe(true);
     expect(validateSessionsUsageParams({ mode: "specific", utcOffset: "UTC+2" })).toBe(true);
     expect(validateSessionsUsageParams({ mode: "specific", timeZone: "" })).toBe(false);
     expect(validateSessionsUsageParams({ mode: "specific", timeZone: 2 })).toBe(false);
diff --git a/packages/memory-host-sdk/src/host/internal.ts b/packages/memory-host-sdk/src/host/internal.ts
index 4fe7bb512e18..fb35d9250271 100644
--- a/packages/memory-host-sdk/src/host/internal.ts
+++ b/packages/memory-host-sdk/src/host/internal.ts
@@ -455,11 +455,11 @@ export function chunkMarkdown(
       // Second pass: if a segment's *weighted* size still exceeds the budget
       // (happens for CJK-heavy text where 1 char ≈ 1 token), re-split it at
       // chunking.tokens so the chunk stays within the token budget.
-      for (let start = 0; start < line.length; ) {
+      for (let start = 0; start < line.length;) {
         const coarse = truncateUtf16Safe(line.slice(start), maxChars);
         if (estimateStringChars(coarse) > maxChars) {
           const fineStep = Math.max(1, chunking.tokens);
-          for (let j = 0; j < coarse.length; ) {
+          for (let j = 0; j < coarse.length;) {
             let end = Math.min(j + fineStep, coarse.length);
             const lastCodeUnit = coarse.charCodeAt(end - 1);
             if (lastCodeUnit >= 0xd800 && lastCodeUnit <= 0xdbff && end < coarse.length) {
diff --git a/packages/normalization-core/src/string-coerce.test.ts b/packages/normalization-core/src/string-coerce.test.ts
index dd41a5f2ffd3..014fcbd8f47c 100644
--- a/packages/normalization-core/src/string-coerce.test.ts
+++ b/packages/normalization-core/src/string-coerce.test.ts
@@ -1,6 +1,6 @@
+import { normalizeStringifiedEntries } from "@openclaw/normalization-core/string-coerce";
 // Normalization Core tests cover string coerce behavior.
 import { describe, expect, it } from "vitest";
-import { normalizeStringifiedEntries } from "@openclaw/normalization-core/string-coerce";
 
 describe("normalization-core/string-coerce", () => {
   it("normalizes primitive stringified entries", () => {
diff --git a/packages/terminal-core/src/table.ts b/packages/terminal-core/src/table.ts
index c6c22e09de4a..1f1e9b503d6c 100644
--- a/packages/terminal-core/src/table.ts
+++ b/packages/terminal-core/src/table.ts
@@ -82,7 +82,7 @@ function wrapLine(text: string, width: number): string[] {
 
   type Token = { kind: "ansi" | "char"; value: string };
   const tokens: Token[] = [];
-  for (let i = 0; i < text.length; ) {
+  for (let i = 0; i < text.length;) {
     if (text[i] === ESC) {
       // SGR: ESC [ ... m
       if (text[i + 1] === "[") {
diff --git a/packages/tool-call-repair/src/stream-normalizer.ts b/packages/tool-call-repair/src/stream-normalizer.ts
index ee3b66153f40..9fb1a1359136 100644
--- a/packages/tool-call-repair/src/stream-normalizer.ts
+++ b/packages/tool-call-repair/src/stream-normalizer.ts
@@ -184,7 +184,7 @@ function consumeRemovedLineEnd(text: string, end: number): number {
 
 function findUtf8OverCapOffset(text: string, start: number): number | null {
   let bytes = 0;
-  for (let index = start; index < text.length; ) {
+  for (let index = start; index < text.length;) {
     const code = text.codePointAt(index) ?? 0;
     index += code > 0xffff ? 2 : 1;
     bytes += code <= 0x7f ? 1 : code <= 0x7ff ? 2 : code <= 0xffff ? 3 : 4;
@@ -427,7 +427,7 @@ function findPotentialCallStart(
   atLineStart: boolean,
   matcher: PlainTextToolCallNameMatcher,
 ): number | null {
-  for (let index = 0; index < text.length; ) {
+  for (let index = 0; index < text.length;) {
     const lineStart =
       (index === 0 && atLineStart) || text[index - 1] === "\n" || text[index - 1] === "\r";
     if (!lineStart) {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 31b644c62d16..a5ca77141cad 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -258,8 +258,8 @@ importers:
         specifier: 8.18.1
         version: 8.18.1
       '@typescript/native-preview':
-        specifier: 7.0.0-dev.20260704.1
-        version: 7.0.0-dev.20260704.1
+        specifier: 7.0.0-dev.20260707.2
+        version: 7.0.0-dev.20260707.2
       '@vitest/coverage-v8':
         specifier: 4.1.9
         version: 4.1.9(@vitest/browser@4.1.9)(vitest@4.1.9)
@@ -276,11 +276,11 @@ importers:
         specifier: 3.3.3
         version: 3.3.3
       oxfmt:
-        specifier: 0.57.0
-        version: 0.57.0
+        specifier: 0.58.0
+        version: 0.58.0
       oxlint:
-        specifier: 1.72.0
-        version: 1.72.0(oxlint-tsgolint@0.24.0)
+        specifier: 1.73.0
+        version: 1.73.0(oxlint-tsgolint@0.24.0)
       oxlint-tsgolint:
         specifier: 0.24.0
         version: 0.24.0
@@ -295,7 +295,7 @@ importers:
         version: 4.1.1
       tsdown:
         specifier: 0.22.1
-        version: 0.22.1(@typescript/native-preview@7.0.0-dev.20260704.1)(tsx@4.22.4)(typescript@6.0.3)(unrun@0.3.1)
+        version: 0.22.1(@typescript/native-preview@7.0.0-dev.20260707.2)(tsx@4.22.4)(typescript@6.0.3)(unrun@0.3.1)
       tsx:
         specifier: 4.22.4
         version: 4.22.4
@@ -3397,124 +3397,124 @@ packages:
   '@oxc-project/types@0.138.0':
     resolution: {integrity: sha512-1a7ZKmrRTCoN1XMZ4L0PyyqrMnrNlLyPuOkdSX2MZg7IiIGRUyurNhAm73ptDOraoBcIordsIGKNPKUzy3ZmfA==}
 
-  '@oxfmt/binding-android-arm-eabi@0.57.0':
-    resolution: {integrity: sha512-qVBsEO+KugOsCmUHcO8iqNnqc65p7PCKpCs8M66mPZ+Ri+CWbcpoQOEJBg2OTu03+0qu++NK1jj6IzvQVs0Sig==}
+  '@oxfmt/binding-android-arm-eabi@0.58.0':
+    resolution: {integrity: sha512-Uz62sHduGGPftXtILGyxdSW4PX82rUg+rfdNqhsgxe881g4rIoXlIqmZQ6HVKcF4f+F8qMhdD03Bx5u7gmeTdg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm]
     os: [android]
 
-  '@oxfmt/binding-android-arm64@0.57.0':
-    resolution: {integrity: sha512-mp6PibWbao3aizijcheOeHQaYEhcUAt8pwLniYbtLfHxL/psFF0BykAwCj+s3c6qIpa8yN8keZICWrqtZ70w8g==}
+  '@oxfmt/binding-android-arm64@0.58.0':
+    resolution: {integrity: sha512-rD0lRaJp1b+9vw6X4A2dJWKukd6X8yxiicN4JxXcXayolmUypRZxk+lKR+fVOu5q/iYc0fh5fR4bgmfOfVlbaA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [android]
 
-  '@oxfmt/binding-darwin-arm64@0.57.0':
-    resolution: {integrity: sha512-T+0stuCBqmUVY+aMIvrgXhzGhHO3sD5tNiiEcYqgSdPsnukskQqn2u5qOVD0sv1l7RLdFS5Z/f5Wi9Ktyjr3Eg==}
+  '@oxfmt/binding-darwin-arm64@0.58.0':
+    resolution: {integrity: sha512-uzbPPk7O6M+w2K65vcQ1woga3wgP8zghjL1KOG5b6qJ8dvYHZJ1VShaslg2KOK6yQIwCQtcMCXqLBM6sqXUNTg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [darwin]
 
-  '@oxfmt/binding-darwin-x64@0.57.0':
-    resolution: {integrity: sha512-O+3JbqWs/mCI2oi4xfhRO2IVPFJNDDEBV8Odo+ZpmsUOeKJfjXoNH7nDmBEQcDgK7NfjDIyE7kRgYSZcTLDO0A==}
+  '@oxfmt/binding-darwin-x64@0.58.0':
+    resolution: {integrity: sha512-L0nKYDxU32oxeQqJj21W9SlIMnf81VZEhyah6iDvFhf5q0oynq498Fopth7blErUJVBpVtxQ98RMCfMPqpJX6w==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [darwin]
 
-  '@oxfmt/binding-freebsd-x64@0.57.0':
-    resolution: {integrity: sha512-pxwhxVC+JkLX9twOQ/8C/vbuOQcMZyKIDmiRDZfO7yITuVcIdZCiLRqqf4QOxb2+8FWrRXzQpm+1DBKcMpHSSQ==}
+  '@oxfmt/binding-freebsd-x64@0.58.0':
+    resolution: {integrity: sha512-woNwfD58dC5PGS9LSLSD5JYfo/EFK5iG9vhDWkcCg3q78ag7KC8bpDqgvPHrMoXpx83OLXxoSOhu6z8FsVTHlg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [freebsd]
 
-  '@oxfmt/binding-linux-arm-gnueabihf@0.57.0':
-    resolution: {integrity: sha512-pxBU4zH2imB/MDBfth2rOMeVxXUMjRQLCazagwLARIFH3hVlxZJBlM4nSnHXaIHJK4/qezoFCIORN6AY8Mra4A==}
+  '@oxfmt/binding-linux-arm-gnueabihf@0.58.0':
+    resolution: {integrity: sha512-Sqs8nMLxuQpY21NKJ1u4stPDmO5hskBCNNh2E3AdCfI1QqWtf4m+Qn4mGEIUO4KGmuq3SWc/SZ80uy5IiwTCDw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm]
     os: [linux]
 
-  '@oxfmt/binding-linux-arm-musleabihf@0.57.0':
-    resolution: {integrity: sha512-JAprOzt8tycYou36ZgEw14DlRHTiN8qdtKANdV3VZIRIvTI/lh/cX13c9pJ/EnDk2GT3FASH7KvCgQ2AufAifQ==}
+  '@oxfmt/binding-linux-arm-musleabihf@0.58.0':
+    resolution: {integrity: sha512-Vd4exzBI5B5hB9m22JiTQzIL23WvHo/Pe+sNXPNeBLXSP9swCBPKCEBRwKpmpQzYhlgYaCgfPcGXPKAJBRIiZQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm]
     os: [linux]
 
-  '@oxfmt/binding-linux-arm64-gnu@0.57.0':
-    resolution: {integrity: sha512-ajtjaxSaj9xl4BW7REt+Cef/ttzbAq00Bq4z7JUDZEfgFXdwSjH8K9bF+IcIJzZB9lKqMfQ4eHuSFOvvlvtqOg==}
+  '@oxfmt/binding-linux-arm64-gnu@0.58.0':
+    resolution: {integrity: sha512-bUWi5mHV+4Vi56RLHE1h6q/HHfwAIT3XoB9vJAVeRzfu5NriXM8y6eeJu0vlKa0C9kq2rq1sOWRClhdLHPocrg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
     libc: [glibc]
 
-  '@oxfmt/binding-linux-arm64-musl@0.57.0':
-    resolution: {integrity: sha512-p4Y/+RYk9Bk5WO+zHSUXAClRmZ2fbJCejMuCAsU2HhyME4jqf6Ftt/mJYEwIah1wGCBDYOB7wEGV1x5bCEZ6hA==}
+  '@oxfmt/binding-linux-arm64-musl@0.58.0':
+    resolution: {integrity: sha512-2ZHxemzgHcjtktAuVUwSoyXmGo/t+aF5tS1ciPpPei4rhSyrz3JOqDosXXrmhN/yLUSzJjtuW7ToTWqfQpCj2w==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
     libc: [musl]
 
-  '@oxfmt/binding-linux-ppc64-gnu@0.57.0':
-    resolution: {integrity: sha512-By6tRALAZsno0F4zedmtG+wdMvJiJmJoXM4d3+A9zHE4HRXLqXITwRH8mgrlcXc5yJM2g2W3riRPwTYdgemZLQ==}
+  '@oxfmt/binding-linux-ppc64-gnu@0.58.0':
+    resolution: {integrity: sha512-AwKkVwjVmFQ3bcO7j0McGYAqCKH2a326fswfofng/E8VewCT/raeeGQr4huVhY704deK8AWASSTlxzMj0eZc6Q==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [ppc64]
     os: [linux]
     libc: [glibc]
 
-  '@oxfmt/binding-linux-riscv64-gnu@0.57.0':
-    resolution: {integrity: sha512-skYeG+RgvyzspqVEBsEprL90OYYZfoVNqB3HcCNR6QDJyXKOzfDRT3zncnHmUaFluIlBHuY23mU1b5WGgR98hA==}
+  '@oxfmt/binding-linux-riscv64-gnu@0.58.0':
+    resolution: {integrity: sha512-xsRpTxfUnJF8D3AUKko/qyWdjw4GZVHlCVFuGlzSCTeewLmykKINW8em1+wx+axsDVtJJcMtvsiaXggXxrlHgw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [riscv64]
     os: [linux]
     libc: [glibc]
 
-  '@oxfmt/binding-linux-riscv64-musl@0.57.0':
-    resolution: {integrity: sha512-FFgACrZOXAXUh5KQh2mt1CDOVOZmn+QzHP71wM9QobNwyQvoFfyAeefVUltW83g3sm7LTiH3yfFqLLVUpA5ZFQ==}
+  '@oxfmt/binding-linux-riscv64-musl@0.58.0':
+    resolution: {integrity: sha512-Z4AYOTcy7nYEIiXwD62PlerimyYRcfJOgUbQAEBjXz098kxKuERBlRntofGy69HHhe9E0TLVNMl1yspVNu+efw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [riscv64]
     os: [linux]
     libc: [musl]
 
-  '@oxfmt/binding-linux-s390x-gnu@0.57.0':
-    resolution: {integrity: sha512-Nm/BAOfQeFiiKd502mZn/GAVKJwtd0RdCg17G3Wz/WSOIQmDi3+7/SZH4BHn1Ye5KvTVH3ua8WvfwLLycNIuvA==}
+  '@oxfmt/binding-linux-s390x-gnu@0.58.0':
+    resolution: {integrity: sha512-A3nhhtZPC/TKVWOPj9q/H3p2znJDCcHWYlJBhWL8hGq/bFmBaNBHC8Np6E581yVq1w9Mi3rMDNzDalWvtUfJtQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [s390x]
     os: [linux]
     libc: [glibc]
 
-  '@oxfmt/binding-linux-x64-gnu@0.57.0':
-    resolution: {integrity: sha512-BiSy5Ku3mQqyxS6YIqAJgd403wEUWvI7kerfzPxc2l/txZVmZM0pSj7oDM+4bGBExowxOi7o73jEam1W0EDTZg==}
+  '@oxfmt/binding-linux-x64-gnu@0.58.0':
+    resolution: {integrity: sha512-2g+tVkgwqphw8R4hgo+kF4oz8+P5RwVOtr9+irsC7uwEp0e9j7Crw8kDGKL20uYlLPD7g02DqA61mC/UNYx98A==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
     libc: [glibc]
 
-  '@oxfmt/binding-linux-x64-musl@0.57.0':
-    resolution: {integrity: sha512-BCRkJiotz5s9afLYD2LuMvzAoDYx9H17E/YbDyu4xK7l4zHDPeny9ErSXL//i/nJyaOwRk08x4b8cgJC00+JDg==}
+  '@oxfmt/binding-linux-x64-musl@0.58.0':
+    resolution: {integrity: sha512-rc15P6AbyyB7426aN8AakLd02Trb3a6ML/mmfAQeVHJEfVofWLcWIrBdy6zDEY+DIaL/s8E4GGPboVw+oP3+EA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
     libc: [musl]
 
-  '@oxfmt/binding-openharmony-arm64@0.57.0':
-    resolution: {integrity: sha512-4Oaxe1qrGgXfpCJ1C/ERJ2iCtV2rN1R79ga9fsfyVHfSQRu/hVW780u2KDqZWFZ/iGTHODJji0JemxqFZ63eIQ==}
+  '@oxfmt/binding-openharmony-arm64@0.58.0':
+    resolution: {integrity: sha512-ZWoTM27/HYPOh9iq86DAbhPu9nXb8qKvvGU/h8OfliyVUFAMMNTLDkGsWDKKnDqIkqvZ9+dXlgUOsH1LYO3O7g==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [openharmony]
 
-  '@oxfmt/binding-win32-arm64-msvc@0.57.0':
-    resolution: {integrity: sha512-MYLAsDnhdNsSGheLYhWgbk0vfIrlS84iQYun/y21fX6u0jj8iBtYtbpZMdiqYeuf8U12eVPUjVY2xE2NrCfJ0g==}
+  '@oxfmt/binding-win32-arm64-msvc@0.58.0':
+    resolution: {integrity: sha512-LHZnqFXe2dEfkRI4XdZS/57nEOT/I4UCRX5IyM9v4GYW9XwQCjGe1IUK59SuKw3POwvcgWQ4pme2cYXmNqTNPg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [win32]
 
-  '@oxfmt/binding-win32-ia32-msvc@0.57.0':
-    resolution: {integrity: sha512-PBwdzZALJY/jcCx2E6is0yu+cuVXeySTDmwuseD+9j0mHqlRNxwlKgsyRTBed/woPeqfVfuXfWjoq4Cx2Zt3Eg==}
+  '@oxfmt/binding-win32-ia32-msvc@0.58.0':
+    resolution: {integrity: sha512-mZKpg20TpheCJym1rarcZCUJeW1sSruw8zAAaCYWvuVfwIUDN1CXdrPU/JgCWReXTCTrEfCB8Wyo3hh9jSZ2EA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [ia32]
     os: [win32]
 
-  '@oxfmt/binding-win32-x64-msvc@0.57.0':
-    resolution: {integrity: sha512-bQJdH9i4RRfw55jm7+8/xS7GzHLLTbHx4huhrrDxQJaJtbSDbsyOnODvP1ftT7EG0KFKAYO2S+q6AcioXODx8w==}
+  '@oxfmt/binding-win32-x64-msvc@0.58.0':
+    resolution: {integrity: sha512-N/wUU4N5PZ2orBtI+Ko7MnMfYLfE7K91UrGMY/c/pYyHR3lA9kwst1XugkZx+92YcRh/Eo+iv2eTESSWXfiZPA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [win32]
@@ -3549,124 +3549,124 @@ packages:
     cpu: [x64]
     os: [win32]
 
-  '@oxlint/binding-android-arm-eabi@1.72.0':
-    resolution: {integrity: sha512-zhCmvn+1Mj3UchAc/90i99S0t7jJUsHmFVSPg4UWrjO8b8eaSGwscgO6QAUtvHBstkjQwBttQNswEnAF1mIQdA==}
+  '@oxlint/binding-android-arm-eabi@1.73.0':
+    resolution: {integrity: sha512-HZQRN/UMBu+Ut+/9MiAChkbP4qZqrNOWBcNI45vOT40GVhbGR0JgHB87L48D4iAqFQIdVmeQYtV9RF89AjTKkg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm]
     os: [android]
 
-  '@oxlint/binding-android-arm64@1.72.0':
-    resolution: {integrity: sha512-mtH+aY/ozv1eZoCUC2owjFAtyNBKHpJHygKeEu9zXXnQGW1Q2/qOpvx+I+Lf23+TvTz66F4iiXUbl2cGvoLPCQ==}
+  '@oxlint/binding-android-arm64@1.73.0':
+    resolution: {integrity: sha512-Gp+KJRylv2aW7thRpG5p1KTxZq4ZJFbWowrKzufNq9d3ssl3r3JviYV45/+p+7CN1Nv0zDd1e8Ex0b/HUDq4TQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [android]
 
-  '@oxlint/binding-darwin-arm64@1.72.0':
-    resolution: {integrity: sha512-EvnajNPDtfknB3ZieeOOyDTwJn9QXDiwfnF4ZDQqART6RG6hjY4WigQcZdGoK2dkB3e1vrmEzN9aYbQCUkh/gQ==}
+  '@oxlint/binding-darwin-arm64@1.73.0':
+    resolution: {integrity: sha512-3de96NdtXhxERMjIz7wsp2HYMY6pMQycGxFWac2mFecAx6VeARF/IqFb1QIaqiCRIdfzBwzTed+pCTCoiS+CYA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [darwin]
 
-  '@oxlint/binding-darwin-x64@1.72.0':
-    resolution: {integrity: sha512-ZkCdEa/G80A7vEHfeCDz/+L3m33DE73v32mDKhgOIgz8Uwf0DFcK7+uu6qC+7LEhmz5fpOe1osWKyjSNMydFIQ==}
+  '@oxlint/binding-darwin-x64@1.73.0':
+    resolution: {integrity: sha512-5zx/uPW32TiaOeVY1dQ/H5iOf0K1HOdFKOJhLqGl4o63+i1fpzoqqu/mKtd7OFgFjNCdhlyTGgjVkQTZm1ELcg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [darwin]
 
-  '@oxlint/binding-freebsd-x64@1.72.0':
-    resolution: {integrity: sha512-NroXv2vh+sxVY1uya/rM5pjhx1hm8BzlYpx9q67QP0Xhw5MH2bf5GJylpvLEC+781p1Xli/317EoV9AlGwViag==}
+  '@oxlint/binding-freebsd-x64@1.73.0':
+    resolution: {integrity: sha512-qNe4gKHaGnLuZJ8toUg90JAa0S2vTVvDw+0bRi3q1avXZXDT4u5mMeECf3nD4HYrbdn1O7dXqWut4onY/yx/Xg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [freebsd]
 
-  '@oxlint/binding-linux-arm-gnueabihf@1.72.0':
-    resolution: {integrity: sha512-0NDywYgfj279Ou/BcQuCYSj7NJwBfmWn5qc5uGO/Ny7fUWmXyIpvawqX/8acQlWG6IXelJsJhj+JAy6sjsKj0A==}
+  '@oxlint/binding-linux-arm-gnueabihf@1.73.0':
+    resolution: {integrity: sha512-cCehYh5hTbfShm/fxTD6wwrGUWIpvX+N5OxmAMhFhDeTGXvw+BeNj889tpxsFQ9ZLatQ6wImuY8tsKLZ+FMz7w==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm]
     os: [linux]
 
-  '@oxlint/binding-linux-arm-musleabihf@1.72.0':
-    resolution: {integrity: sha512-4vpXB06h65Ezsy4hRyrGjGrfa1SkVPii09yaajiYhmVpgsFiLD+KNxIx/BNAY+XiO+i1yqp9HHdwqM8VTqa5XQ==}
+  '@oxlint/binding-linux-arm-musleabihf@1.73.0':
+    resolution: {integrity: sha512-d5j5GDU/2dMgjVhw7TQT9ITrsIr1Y02KEXKyVGIXUkD+KiaxE9TP65FS2ZdgTBemQvoRL+gSBdbrIm3cQIeacg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm]
     os: [linux]
 
-  '@oxlint/binding-linux-arm64-gnu@1.72.0':
-    resolution: {integrity: sha512-immaN4g2ZGFiOkKrvRX9LvzZdd2GkQM5wR+UyzYyUuyhUTXGQ4HKUJH18xp4G8OfhCVaVAJfKZxwE1r8+4hhaQ==}
+  '@oxlint/binding-linux-arm64-gnu@1.73.0':
+    resolution: {integrity: sha512-Eyf1SrP3+yR1DI3OJgOY2Pvrr9dWP9TK37xPaDYycwTtlGlI45erJAVIfH5/m/xosDt6BupJYEFi47bvbTuuyw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
     libc: [glibc]
 
-  '@oxlint/binding-linux-arm64-musl@1.72.0':
-    resolution: {integrity: sha512-JGHS9Mnr7iWyyLDxgCv1MhzVpAckgptg00F2gnxt/GD7lQ2SW1BRcxHqhSTaSdDpjWRrBkBxMMh4+Hn3aVtExg==}
+  '@oxlint/binding-linux-arm64-musl@1.73.0':
+    resolution: {integrity: sha512-IlT/OJApEDKaMmCooHuncgJZbbCe7T5QIWmTZBEtYscWvzPQuuEinVcid6kwQRVQOUdb7PUCz4jQHnaYXdfJXw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
     libc: [musl]
 
-  '@oxlint/binding-linux-ppc64-gnu@1.72.0':
-    resolution: {integrity: sha512-AOYgBZqxNshrg83P9v0RYv+m8s10Cqkj4/PxXFDhcS3k7FqsIG5+CxErshZCIN7G8iy4Y+VGfAsuEdar8AcbBg==}
+  '@oxlint/binding-linux-ppc64-gnu@1.73.0':
+    resolution: {integrity: sha512-L+JYcb/vdg5fmcH08V6o0YYLU28cTH1SPNulwJdvK9NK49aXSkYy6oNpKBmddArVOXYqNepriDGiZ04G54kh1Q==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [ppc64]
     os: [linux]
     libc: [glibc]
 
-  '@oxlint/binding-linux-riscv64-gnu@1.72.0':
-    resolution: {integrity: sha512-QMybPS5ij3/vrKG67mqzHwW++91sYxK/PPUVi6SBtNCEzW4niS52fVBdXbQ6nou0wWbUPEpx8Sl/ZjtgE3clXA==}
+  '@oxlint/binding-linux-riscv64-gnu@1.73.0':
+    resolution: {integrity: sha512-Qtk0g3bKV6OwWjIm7R8kQN1uOZRKQt/MODK2a8QfkwhTpXBD53ozx5XLVWLGDQAVyp2otLW4D2wB98XfAfMPGA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [riscv64]
     os: [linux]
     libc: [glibc]
 
-  '@oxlint/binding-linux-riscv64-musl@1.72.0':
-    resolution: {integrity: sha512-gOc3W7JV0PXRpIL7stUlLe3Wa9Gp0Kdlup87IT3gHDvPKck2xNgMIl/Gs2lldYY2lyXZDC4rWi3hmoLUobkgbQ==}
+  '@oxlint/binding-linux-riscv64-musl@1.73.0':
+    resolution: {integrity: sha512-wX0NQKZVxltkAOVmzFcpOaMpdaUvsq1Eqpx9tkAfl71UdkTlSo1R4AdAnGccR1Fm2+TzFgZ22CyyGuZ41RDr/A==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [riscv64]
     os: [linux]
     libc: [musl]
 
-  '@oxlint/binding-linux-s390x-gnu@1.72.0':
-    resolution: {integrity: sha512-rpGxph+FjjHcYI5q6uxB3Az+tnfmEnDbSA8+PK9ZE/VzyUAkvBOMeuY7ZQMhu5mpZH7YQDsTdW6Cx4kV/msc6w==}
+  '@oxlint/binding-linux-s390x-gnu@1.73.0':
+    resolution: {integrity: sha512-vPe7UGBMWyiLTtnqS4xxgMQFSFGmtQwhwCxuiw6lXygaO6bVt0D8dFVg8Xv05eaiN3ybC0HXXHUAohFMFvqoCQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [s390x]
     os: [linux]
     libc: [glibc]
 
-  '@oxlint/binding-linux-x64-gnu@1.72.0':
-    resolution: {integrity: sha512-WND+uhf/Ko13SLqQMWQUgsZuLvYYEvL0ZKgg0tgGYfLqxG7l8Ju123fHDMJyYSDl5E3bUbpFUuii/OvMreFQzw==}
+  '@oxlint/binding-linux-x64-gnu@1.73.0':
+    resolution: {integrity: sha512-2CwIWr9cemFC/CbRBWZvuk5mffz6ObmfFkfcC/9rTQ7f+icNhYr2kOjf9Rt8lLvugvkdGDOmkoVoFFHh6ClCTw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
     libc: [glibc]
 
-  '@oxlint/binding-linux-x64-musl@1.72.0':
-    resolution: {integrity: sha512-SrpbrUL70nG9vh6zP4/oKHWgLuHquwsr7MW9XOn0olBVgh10Uqr8qscKhQoBGEn6olK/IUpn5GSKcdQ5AjUhGA==}
+  '@oxlint/binding-linux-x64-musl@1.73.0':
+    resolution: {integrity: sha512-nDadfJgg7NBBxG0N560wOe7LLX5QiYp6qBaI7viuk5EUORFBktU/NfV0MbTqU3gTqQDCh4VyxKdo5VADxk9w8Q==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
     libc: [musl]
 
-  '@oxlint/binding-openharmony-arm64@1.72.0':
-    resolution: {integrity: sha512-qkrsEn6NmgFKr7U/QnezQMb+q/vzAy0Dd9Y95gQGQTyjzDLN+HRZMuM5u70iyH4nBLCfKBzhjMsYCehKay2jyg==}
+  '@oxlint/binding-openharmony-arm64@1.73.0':
+    resolution: {integrity: sha512-wGjJC+NLH9xP+IKGn9RDW94ojJR/wPbg5WCnQjj/oReaOtCQthr8ws1zICe77JFmo4ouUdeTHHZL/ESGiF6Pmw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [openharmony]
 
-  '@oxlint/binding-win32-arm64-msvc@1.72.0':
-    resolution: {integrity: sha512-LWR6ZlFZph+KPjXv8opgZsXRDCdrdQe8VL8Cg9zxCoBS73h6znzZpydVgmdnwj8mB9AuSM5jxEgDJDpQkjboeg==}
+  '@oxlint/binding-win32-arm64-msvc@1.73.0':
+    resolution: {integrity: sha512-I7X47GPGljw225YUQ5SbC/rb1Kkdrd0yQf0x+hYxeKS6DpfjMbo9ccQPQ6LNY6BoJQ1sHhgDUGuMn5Vg5gHT6w==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [win32]
 
-  '@oxlint/binding-win32-ia32-msvc@1.72.0':
-    resolution: {integrity: sha512-yt6HEh7IsHvtjRWtmeZRX134eaXKHq5Gnqlf1xBJdJl1JtdoRUEJw3nAxpZoUDS860cX/foKbztO441anVBtVQ==}
+  '@oxlint/binding-win32-ia32-msvc@1.73.0':
+    resolution: {integrity: sha512-5lWj+3h+74Fm1jYOO9qkJA4xkAlZA099DkXppuXsk7UpnpZLttsefrZU469vChGaG6hcSqrkKXQOvMTZtbjeNg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [ia32]
     os: [win32]
 
-  '@oxlint/binding-win32-x64-msvc@1.72.0':
-    resolution: {integrity: sha512-b2eKFD2hX7tIwmo/cyH6TDq8vzWRZ2qNHrzoGntUTmq0h3zQh/uX3eTSHCwI8OB/ADQfJCRelLItK8BsxuucDA==}
+  '@oxlint/binding-win32-x64-msvc@1.73.0':
+    resolution: {integrity: sha512-WaNRvh4f6zY9CvUQk2YoA1O90ieWrIklI84+HXFr9Isjz9CSESrdqo/RtIYt4Dll/cAchqGDMehfaZd0vqEFZw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [win32]
@@ -4343,50 +4343,50 @@ packages:
   '@types/ws@8.18.1':
     resolution: {integrity: sha512-ThVF6DCVhA8kUGy+aazFQ4kXQ7E1Ty7A3ypFOe0IcJV8O/M511G99AW24irKrW56Wt44yG9+ij8FaqoBGkuBXg==}
 
-  '@typescript/native-preview-darwin-arm64@7.0.0-dev.20260704.1':
-    resolution: {integrity: sha512-WHNMx8HTka+2w9ZifYbfkHHyQBzO+MCbOLQzNJE3K7A7mYJ1aq6ZEvBhRcNqixjKAIIO4U34KQvaQ6PXlwezkQ==}
+  '@typescript/native-preview-darwin-arm64@7.0.0-dev.20260707.2':
+    resolution: {integrity: sha512-wny2pgKjGbiZtnOIHVa3tXC1UfDqxNEFzyPGmiqybedG8hipG2Nfp0l5UxbaKCjkLacUpH/W5bP2hBOMVhCOzg==}
     engines: {node: '>=16.20.0'}
     cpu: [arm64]
     os: [darwin]
 
-  '@typescript/native-preview-darwin-x64@7.0.0-dev.20260704.1':
-    resolution: {integrity: sha512-IZJib4da/+3gRVSQFoQU1uFzsiSXnI02xBZljipDoPwahRcOdjH9gJ7DMBFbZ53pUtN5lvqbpES4oXiJZTneDA==}
+  '@typescript/native-preview-darwin-x64@7.0.0-dev.20260707.2':
+    resolution: {integrity: sha512-Afc7M5zOwo+GpfcYwz5Z8HMB2tPVsui7nNIqEuuFB73MPdVqNn/Wmpe4tP4MRri0AtJnJknoHBaTJ/VDAp/Jhw==}
     engines: {node: '>=16.20.0'}
     cpu: [x64]
     os: [darwin]
 
-  '@typescript/native-preview-linux-arm64@7.0.0-dev.20260704.1':
-    resolution: {integrity: sha512-rjyHYAmDQ68NZIpU5i46D50hgQ63UJGGN/LJv3DAPWC8KraNonS5j4fN2bH/V+acQV9l/sS3+US1daV8VkQaFQ==}
+  '@typescript/native-preview-linux-arm64@7.0.0-dev.20260707.2':
+    resolution: {integrity: sha512-iITBa2WjjTI5N9t5l7Z4KoOSI+2zBlhbvFzsD/f8qX8QoKjz/Y4DPyBDgezYi8nkqjjksbgSOJ3/ykzhwrB9cg==}
     engines: {node: '>=16.20.0'}
     cpu: [arm64]
     os: [linux]
 
-  '@typescript/native-preview-linux-arm@7.0.0-dev.20260704.1':
-    resolution: {integrity: sha512-Dkz8oqvg4nEIu2Acz/d+iBDhIIOqjaAJ6mo6a2diRrDI+K5NAHljTzvkclCxgz6WIa5JnUY3kWzy8jE5AtaCQg==}
+  '@typescript/native-preview-linux-arm@7.0.0-dev.20260707.2':
+    resolution: {integrity: sha512-hJm/UOqZTr9FHmR7uNm8VGX4oKtfWk0Jem0zPeJFNC8ckGUfSBueyiEYMZB+XmRc1aG4x1E46y3CplP4CLHvGQ==}
     engines: {node: '>=16.20.0'}
     cpu: [arm]
     os: [linux]
 
-  '@typescript/native-preview-linux-x64@7.0.0-dev.20260704.1':
-    resolution: {integrity: sha512-y2L2eNwCgrTgXKMol9n/bSPeyNHwJbrUDAv6/J7/087yhPNCt61l3KbpiGAYs0KYcCt3V2lNSDtS3geHQfSWJQ==}
+  '@typescript/native-preview-linux-x64@7.0.0-dev.20260707.2':
+    resolution: {integrity: sha512-du0dzi6y97Po5vDNdPJTyyijHCpaS22JLRnKZEJXBDaO9gCIymOv/5QQokFRuOlQm0bWl3i9PF4OVdGP6uAOQA==}
     engines: {node: '>=16.20.0'}
     cpu: [x64]
     os: [linux]
 
-  '@typescript/native-preview-win32-arm64@7.0.0-dev.20260704.1':
-    resolution: {integrity: sha512-PzBVRs8UNSAqtoCp9BtT1jsG4SSOfuDT1yo8Z3gGevmNtKEFZjb92BTSnBZaMPPQkM22fq83zgrAEVOEENIicw==}
+  '@typescript/native-preview-win32-arm64@7.0.0-dev.20260707.2':
+    resolution: {integrity: sha512-SsAwfhyHJ1akgBc+99z4+hwdbHsdWaKB8EwCNIMA6JfSLMeUjffrYvxu+vfMyxVtOVOz7RrRXRoiDiu4a2sCtg==}
     engines: {node: '>=16.20.0'}
     cpu: [arm64]
     os: [win32]
 
-  '@typescript/native-preview-win32-x64@7.0.0-dev.20260704.1':
-    resolution: {integrity: sha512-wb/C+fqWpXAoJZd8KQZdpjOq67v/cmLsApjL9oHjC1X6zqz7AzyOQ486uxWT6LvYzKkar4A+iq8h5h+PNgN38w==}
+  '@typescript/native-preview-win32-x64@7.0.0-dev.20260707.2':
+    resolution: {integrity: sha512-DL4u27stv0fo71sVhOzHSwE+YMZsbBijVI+kg5dLDLilSH79WFTJ8RSQ46vJrCMt+Gjlv/JOZP1PuLJDfioYeQ==}
     engines: {node: '>=16.20.0'}
     cpu: [x64]
     os: [win32]
 
-  '@typescript/native-preview@7.0.0-dev.20260704.1':
-    resolution: {integrity: sha512-B8CxdI0CumQVV9/9COcanWCWJmu8Jm1kMuYvse3iGm5ay9QrKTD+qyb11x8SPKUMtiUqnhNxt0n4ESNt+LQMuQ==}
+  '@typescript/native-preview@7.0.0-dev.20260707.2':
+    resolution: {integrity: sha512-oUGp+Rep/hqMhPunyinsALUwSlzHINSxitifPiSaeqoKOKD2OlR9NE3TaPqwsl4NlGslsOSUXI1JotWQzpYCPg==}
     engines: {node: '>=16.20.0'}
     hasBin: true
 
@@ -6430,8 +6430,8 @@ packages:
     resolution: {integrity: sha512-6VlU9MLXbjVQD04AZCMX28hVtA5bUoadvUqO76MUCVA0ilwJbMiHsITRPfyVm6p/BC0Av/BXMujx39WCe1LEqw==}
     engines: {node: '>=20'}
 
-  oxfmt@0.57.0:
-    resolution: {integrity: sha512-ZB7Bi+rGDSqmVIo9jwcLyFgjxXvQhDdU+jx+ZrVy6VRiVXK2+CHc4hO3J4dUQjHe7V0ymHB+MDuv5z+NhK07HA==}
+  oxfmt@0.58.0:
+    resolution: {integrity: sha512-8feG/7NVEHDVwc1OUpP6Pks+TnaDFUw2jLLFIMi5bcmmwxAX2wBQvjSzj62RRTYBf2Op1Wt8xbkmagmPTR5ETg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     hasBin: true
     peerDependencies:
@@ -6447,12 +6447,12 @@ packages:
     resolution: {integrity: sha512-giCk5sEvG02d5tzPmFMX3hem8ndzEEu1xvGYS5OwNfO2WGl6ZVxt5LjE0yiMDoz94INI7XkXwgFAQiydPvVHDw==}
     hasBin: true
 
-  oxlint@1.72.0:
-    resolution: {integrity: sha512-1rhdZIP/EvoI91ABIwNU5Q8+bWf8mjrS5UzIOZld4d4bXxJvtlUhlQvaoTogIGin/qdErMOrwaIJvCSIAKTLhA==}
+  oxlint@1.73.0:
+    resolution: {integrity: sha512-u91G9TJzU6yqKWNZUYprQB07W7YvntZXaRxQ6CkoytepYhLWUXWsr1M8zUJ34VatNPuUAr3Z8GH+O2A331CluQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
     hasBin: true
     peerDependencies:
-      oxlint-tsgolint: '>=0.22.1'
+      oxlint-tsgolint: '>=0.24.0'
       vite-plus: '*'
     peerDependenciesMeta:
       oxlint-tsgolint:
@@ -9243,61 +9243,61 @@ snapshots:
 
   '@oxc-project/types@0.138.0': {}
 
-  '@oxfmt/binding-android-arm-eabi@0.57.0':
+  '@oxfmt/binding-android-arm-eabi@0.58.0':
     optional: true
 
-  '@oxfmt/binding-android-arm64@0.57.0':
+  '@oxfmt/binding-android-arm64@0.58.0':
     optional: true
 
-  '@oxfmt/binding-darwin-arm64@0.57.0':
+  '@oxfmt/binding-darwin-arm64@0.58.0':
     optional: true
 
-  '@oxfmt/binding-darwin-x64@0.57.0':
+  '@oxfmt/binding-darwin-x64@0.58.0':
     optional: true
 
-  '@oxfmt/binding-freebsd-x64@0.57.0':
+  '@oxfmt/binding-freebsd-x64@0.58.0':
     optional: true
 
-  '@oxfmt/binding-linux-arm-gnueabihf@0.57.0':
+  '@oxfmt/binding-linux-arm-gnueabihf@0.58.0':
     optional: true
 
-  '@oxfmt/binding-linux-arm-musleabihf@0.57.0':
+  '@oxfmt/binding-linux-arm-musleabihf@0.58.0':
     optional: true
 
-  '@oxfmt/binding-linux-arm64-gnu@0.57.0':
+  '@oxfmt/binding-linux-arm64-gnu@0.58.0':
     optional: true
 
-  '@oxfmt/binding-linux-arm64-musl@0.57.0':
+  '@oxfmt/binding-linux-arm64-musl@0.58.0':
     optional: true
 
-  '@oxfmt/binding-linux-ppc64-gnu@0.57.0':
+  '@oxfmt/binding-linux-ppc64-gnu@0.58.0':
     optional: true
 
-  '@oxfmt/binding-linux-riscv64-gnu@0.57.0':
+  '@oxfmt/binding-linux-riscv64-gnu@0.58.0':
     optional: true
 
-  '@oxfmt/binding-linux-riscv64-musl@0.57.0':
+  '@oxfmt/binding-linux-riscv64-musl@0.58.0':
     optional: true
 
-  '@oxfmt/binding-linux-s390x-gnu@0.57.0':
+  '@oxfmt/binding-linux-s390x-gnu@0.58.0':
     optional: true
 
-  '@oxfmt/binding-linux-x64-gnu@0.57.0':
+  '@oxfmt/binding-linux-x64-gnu@0.58.0':
     optional: true
 
-  '@oxfmt/binding-linux-x64-musl@0.57.0':
+  '@oxfmt/binding-linux-x64-musl@0.58.0':
     optional: true
 
-  '@oxfmt/binding-openharmony-arm64@0.57.0':
+  '@oxfmt/binding-openharmony-arm64@0.58.0':
     optional: true
 
-  '@oxfmt/binding-win32-arm64-msvc@0.57.0':
+  '@oxfmt/binding-win32-arm64-msvc@0.58.0':
     optional: true
 
-  '@oxfmt/binding-win32-ia32-msvc@0.57.0':
+  '@oxfmt/binding-win32-ia32-msvc@0.58.0':
     optional: true
 
-  '@oxfmt/binding-win32-x64-msvc@0.57.0':
+  '@oxfmt/binding-win32-x64-msvc@0.58.0':
     optional: true
 
   '@oxlint-tsgolint/darwin-arm64@0.24.0':
@@ -9318,61 +9318,61 @@ snapshots:
   '@oxlint-tsgolint/win32-x64@0.24.0':
     optional: true
 
-  '@oxlint/binding-android-arm-eabi@1.72.0':
+  '@oxlint/binding-android-arm-eabi@1.73.0':
     optional: true
 
-  '@oxlint/binding-android-arm64@1.72.0':
+  '@oxlint/binding-android-arm64@1.73.0':
     optional: true
 
-  '@oxlint/binding-darwin-arm64@1.72.0':
+  '@oxlint/binding-darwin-arm64@1.73.0':
     optional: true
 
-  '@oxlint/binding-darwin-x64@1.72.0':
+  '@oxlint/binding-darwin-x64@1.73.0':
     optional: true
 
-  '@oxlint/binding-freebsd-x64@1.72.0':
+  '@oxlint/binding-freebsd-x64@1.73.0':
     optional: true
 
-  '@oxlint/binding-linux-arm-gnueabihf@1.72.0':
+  '@oxlint/binding-linux-arm-gnueabihf@1.73.0':
     optional: true
 
-  '@oxlint/binding-linux-arm-musleabihf@1.72.0':
+  '@oxlint/binding-linux-arm-musleabihf@1.73.0':
     optional: true
 
-  '@oxlint/binding-linux-arm64-gnu@1.72.0':
+  '@oxlint/binding-linux-arm64-gnu@1.73.0':
     optional: true
 
-  '@oxlint/binding-linux-arm64-musl@1.72.0':
+  '@oxlint/binding-linux-arm64-musl@1.73.0':
     optional: true
 
-  '@oxlint/binding-linux-ppc64-gnu@1.72.0':
+  '@oxlint/binding-linux-ppc64-gnu@1.73.0':
     optional: true
 
-  '@oxlint/binding-linux-riscv64-gnu@1.72.0':
+  '@oxlint/binding-linux-riscv64-gnu@1.73.0':
     optional: true
 
-  '@oxlint/binding-linux-riscv64-musl@1.72.0':
+  '@oxlint/binding-linux-riscv64-musl@1.73.0':
     optional: true
 
-  '@oxlint/binding-linux-s390x-gnu@1.72.0':
+  '@oxlint/binding-linux-s390x-gnu@1.73.0':
     optional: true
 
-  '@oxlint/binding-linux-x64-gnu@1.72.0':
+  '@oxlint/binding-linux-x64-gnu@1.73.0':
     optional: true
 
-  '@oxlint/binding-linux-x64-musl@1.72.0':
+  '@oxlint/binding-linux-x64-musl@1.73.0':
     optional: true
 
-  '@oxlint/binding-openharmony-arm64@1.72.0':
+  '@oxlint/binding-openharmony-arm64@1.73.0':
     optional: true
 
-  '@oxlint/binding-win32-arm64-msvc@1.72.0':
+  '@oxlint/binding-win32-arm64-msvc@1.73.0':
     optional: true
 
-  '@oxlint/binding-win32-ia32-msvc@1.72.0':
+  '@oxlint/binding-win32-ia32-msvc@1.73.0':
     optional: true
 
-  '@oxlint/binding-win32-x64-msvc@1.72.0':
+  '@oxlint/binding-win32-x64-msvc@1.73.0':
     optional: true
 
   '@pierre/diffs@1.2.12(@shikijs/themes@4.3.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)':
@@ -10047,36 +10047,36 @@ snapshots:
     dependencies:
       '@types/node': 26.1.0
 
-  '@typescript/native-preview-darwin-arm64@7.0.0-dev.20260704.1':
+  '@typescript/native-preview-darwin-arm64@7.0.0-dev.20260707.2':
     optional: true
 
-  '@typescript/native-preview-darwin-x64@7.0.0-dev.20260704.1':
+  '@typescript/native-preview-darwin-x64@7.0.0-dev.20260707.2':
     optional: true
 
-  '@typescript/native-preview-linux-arm64@7.0.0-dev.20260704.1':
+  '@typescript/native-preview-linux-arm64@7.0.0-dev.20260707.2':
     optional: true
 
-  '@typescript/native-preview-linux-arm@7.0.0-dev.20260704.1':
+  '@typescript/native-preview-linux-arm@7.0.0-dev.20260707.2':
     optional: true
 
-  '@typescript/native-preview-linux-x64@7.0.0-dev.20260704.1':
+  '@typescript/native-preview-linux-x64@7.0.0-dev.20260707.2':
     optional: true
 
-  '@typescript/native-preview-win32-arm64@7.0.0-dev.20260704.1':
+  '@typescript/native-preview-win32-arm64@7.0.0-dev.20260707.2':
     optional: true
 
-  '@typescript/native-preview-win32-x64@7.0.0-dev.20260704.1':
+  '@typescript/native-preview-win32-x64@7.0.0-dev.20260707.2':
     optional: true
 
-  '@typescript/native-preview@7.0.0-dev.20260704.1':
+  '@typescript/native-preview@7.0.0-dev.20260707.2':
     optionalDependencies:
-      '@typescript/native-preview-darwin-arm64': 7.0.0-dev.20260704.1
-      '@typescript/native-preview-darwin-x64': 7.0.0-dev.20260704.1
-      '@typescript/native-preview-linux-arm': 7.0.0-dev.20260704.1
-      '@typescript/native-preview-linux-arm64': 7.0.0-dev.20260704.1
-      '@typescript/native-preview-linux-x64': 7.0.0-dev.20260704.1
-      '@typescript/native-preview-win32-arm64': 7.0.0-dev.20260704.1
-      '@typescript/native-preview-win32-x64': 7.0.0-dev.20260704.1
+      '@typescript/native-preview-darwin-arm64': 7.0.0-dev.20260707.2
+      '@typescript/native-preview-darwin-x64': 7.0.0-dev.20260707.2
+      '@typescript/native-preview-linux-arm': 7.0.0-dev.20260707.2
+      '@typescript/native-preview-linux-arm64': 7.0.0-dev.20260707.2
+      '@typescript/native-preview-linux-x64': 7.0.0-dev.20260707.2
+      '@typescript/native-preview-win32-arm64': 7.0.0-dev.20260707.2
+      '@typescript/native-preview-win32-x64': 7.0.0-dev.20260707.2
 
   '@typespec/ts-http-runtime@0.3.6':
     dependencies:
@@ -12477,29 +12477,29 @@ snapshots:
       string-width: 8.2.1
     optional: true
 
-  oxfmt@0.57.0:
+  oxfmt@0.58.0:
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
-      '@oxfmt/binding-android-arm-eabi': 0.57.0
-      '@oxfmt/binding-android-arm64': 0.57.0
-      '@oxfmt/binding-darwin-arm64': 0.57.0
-      '@oxfmt/binding-darwin-x64': 0.57.0
-      '@oxfmt/binding-freebsd-x64': 0.57.0
-      '@oxfmt/binding-linux-arm-gnueabihf': 0.57.0
-      '@oxfmt/binding-linux-arm-musleabihf': 0.57.0
-      '@oxfmt/binding-linux-arm64-gnu': 0.57.0
-      '@oxfmt/binding-linux-arm64-musl': 0.57.0
-      '@oxfmt/binding-linux-ppc64-gnu': 0.57.0
-      '@oxfmt/binding-linux-riscv64-gnu': 0.57.0
-      '@oxfmt/binding-linux-riscv64-musl': 0.57.0
-      '@oxfmt/binding-linux-s390x-gnu': 0.57.0
-      '@oxfmt/binding-linux-x64-gnu': 0.57.0
-      '@oxfmt/binding-linux-x64-musl': 0.57.0
-      '@oxfmt/binding-openharmony-arm64': 0.57.0
-      '@oxfmt/binding-win32-arm64-msvc': 0.57.0
-      '@oxfmt/binding-win32-ia32-msvc': 0.57.0
-      '@oxfmt/binding-win32-x64-msvc': 0.57.0
+      '@oxfmt/binding-android-arm-eabi': 0.58.0
+      '@oxfmt/binding-android-arm64': 0.58.0
+      '@oxfmt/binding-darwin-arm64': 0.58.0
+      '@oxfmt/binding-darwin-x64': 0.58.0
+      '@oxfmt/binding-freebsd-x64': 0.58.0
+      '@oxfmt/binding-linux-arm-gnueabihf': 0.58.0
+      '@oxfmt/binding-linux-arm-musleabihf': 0.58.0
+      '@oxfmt/binding-linux-arm64-gnu': 0.58.0
+      '@oxfmt/binding-linux-arm64-musl': 0.58.0
+      '@oxfmt/binding-linux-ppc64-gnu': 0.58.0
+      '@oxfmt/binding-linux-riscv64-gnu': 0.58.0
+      '@oxfmt/binding-linux-riscv64-musl': 0.58.0
+      '@oxfmt/binding-linux-s390x-gnu': 0.58.0
+      '@oxfmt/binding-linux-x64-gnu': 0.58.0
+      '@oxfmt/binding-linux-x64-musl': 0.58.0
+      '@oxfmt/binding-openharmony-arm64': 0.58.0
+      '@oxfmt/binding-win32-arm64-msvc': 0.58.0
+      '@oxfmt/binding-win32-ia32-msvc': 0.58.0
+      '@oxfmt/binding-win32-x64-msvc': 0.58.0
 
   oxlint-tsgolint@0.24.0:
     optionalDependencies:
@@ -12510,27 +12510,27 @@ snapshots:
       '@oxlint-tsgolint/win32-arm64': 0.24.0
       '@oxlint-tsgolint/win32-x64': 0.24.0
 
-  oxlint@1.72.0(oxlint-tsgolint@0.24.0):
+  oxlint@1.73.0(oxlint-tsgolint@0.24.0):
     optionalDependencies:
-      '@oxlint/binding-android-arm-eabi': 1.72.0
-      '@oxlint/binding-android-arm64': 1.72.0
-      '@oxlint/binding-darwin-arm64': 1.72.0
-      '@oxlint/binding-darwin-x64': 1.72.0
-      '@oxlint/binding-freebsd-x64': 1.72.0
-      '@oxlint/binding-linux-arm-gnueabihf': 1.72.0
-      '@oxlint/binding-linux-arm-musleabihf': 1.72.0
-      '@oxlint/binding-linux-arm64-gnu': 1.72.0
-      '@oxlint/binding-linux-arm64-musl': 1.72.0
-      '@oxlint/binding-linux-ppc64-gnu': 1.72.0
-      '@oxlint/binding-linux-riscv64-gnu': 1.72.0
-      '@oxlint/binding-linux-riscv64-musl': 1.72.0
-      '@oxlint/binding-linux-s390x-gnu': 1.72.0
-      '@oxlint/binding-linux-x64-gnu': 1.72.0
-      '@oxlint/binding-linux-x64-musl': 1.72.0
-      '@oxlint/binding-openharmony-arm64': 1.72.0
-      '@oxlint/binding-win32-arm64-msvc': 1.72.0
-      '@oxlint/binding-win32-ia32-msvc': 1.72.0
-      '@oxlint/binding-win32-x64-msvc': 1.72.0
+      '@oxlint/binding-android-arm-eabi': 1.73.0
+      '@oxlint/binding-android-arm64': 1.73.0
+      '@oxlint/binding-darwin-arm64': 1.73.0
+      '@oxlint/binding-darwin-x64': 1.73.0
+      '@oxlint/binding-freebsd-x64': 1.73.0
+      '@oxlint/binding-linux-arm-gnueabihf': 1.73.0
+      '@oxlint/binding-linux-arm-musleabihf': 1.73.0
+      '@oxlint/binding-linux-arm64-gnu': 1.73.0
+      '@oxlint/binding-linux-arm64-musl': 1.73.0
+      '@oxlint/binding-linux-ppc64-gnu': 1.73.0
+      '@oxlint/binding-linux-riscv64-gnu': 1.73.0
+      '@oxlint/binding-linux-riscv64-musl': 1.73.0
+      '@oxlint/binding-linux-s390x-gnu': 1.73.0
+      '@oxlint/binding-linux-x64-gnu': 1.73.0
+      '@oxlint/binding-linux-x64-musl': 1.73.0
+      '@oxlint/binding-openharmony-arm64': 1.73.0
+      '@oxlint/binding-win32-arm64-msvc': 1.73.0
+      '@oxlint/binding-win32-ia32-msvc': 1.73.0
+      '@oxlint/binding-win32-x64-msvc': 1.73.0
       oxlint-tsgolint: 0.24.0
 
   p-finally@1.0.0: {}
@@ -12979,7 +12979,7 @@ snapshots:
 
   reusify@1.1.0: {}
 
-  rolldown-plugin-dts@0.25.2(@typescript/native-preview@7.0.0-dev.20260704.1)(rolldown@1.1.4)(typescript@6.0.3):
+  rolldown-plugin-dts@0.25.2(@typescript/native-preview@7.0.0-dev.20260707.2)(rolldown@1.1.4)(typescript@6.0.3):
     dependencies:
       '@babel/generator': 8.0.0-rc.6
       '@babel/helper-validator-identifier': 8.0.0-rc.6
@@ -12991,7 +12991,7 @@ snapshots:
       obug: 2.1.3
       rolldown: 1.1.4
     optionalDependencies:
-      '@typescript/native-preview': 7.0.0-dev.20260704.1
+      '@typescript/native-preview': 7.0.0-dev.20260707.2
       typescript: 6.0.3
     transitivePeerDependencies:
       - oxc-resolver
@@ -13456,7 +13456,7 @@ snapshots:
 
   ts-algebra@2.0.0: {}
 
-  tsdown@0.22.1(@typescript/native-preview@7.0.0-dev.20260704.1)(tsx@4.22.4)(typescript@6.0.3)(unrun@0.3.1):
+  tsdown@0.22.1(@typescript/native-preview@7.0.0-dev.20260707.2)(tsx@4.22.4)(typescript@6.0.3)(unrun@0.3.1):
     dependencies:
       ansis: 4.3.1
       cac: 7.0.0
@@ -13467,7 +13467,7 @@ snapshots:
       obug: 2.1.3
       picomatch: 4.0.4
       rolldown: 1.1.4
-      rolldown-plugin-dts: 0.25.2(@typescript/native-preview@7.0.0-dev.20260704.1)(rolldown@1.1.4)(typescript@6.0.3)
+      rolldown-plugin-dts: 0.25.2(@typescript/native-preview@7.0.0-dev.20260707.2)(rolldown@1.1.4)(typescript@6.0.3)
       semver: 7.8.5
       tinyexec: 1.2.4
       tinyglobby: 0.2.17
diff --git a/qa/maturity-scores.yaml b/qa/maturity-scores.yaml
index f5bd7f53de1f..ed882e0e415f 100644
--- a/qa/maturity-scores.yaml
+++ b/qa/maturity-scores.yaml
@@ -946,7 +946,7 @@ surfaces:
           reason: human_override
           human_override: true
   - id: automation-cron-hooks-tasks-polling
-    name: 'Automation: cron, hooks, tasks, polling'
+    name: "Automation: cron, hooks, tasks, polling"
     family: core
     level:
       id: beta
@@ -4016,7 +4016,7 @@ surfaces:
           reason: none
           human_override: false
   - id: local-model-providers-ollama-vllm-sglang-lm-studio
-    name: 'Local model providers: Ollama, vLLM, SGLang, LM Studio'
+    name: "Local model providers: Ollama, vLLM, SGLang, LM Studio"
     family: provider-tool
     level:
       id: alpha
diff --git a/scripts/README.md b/scripts/README.md
index 501508a73987..7d8e6e608b51 100644
--- a/scripts/README.md
+++ b/scripts/README.md
@@ -41,7 +41,7 @@ new directory taxonomy.
 | Release checks  | `pnpm release:check`, `pnpm release:beta`, `pnpm release:candidate`            | Release scripts are maintainer workflows; read release docs before use.                                            |
 | GitHub reads    | `scripts/gh-read`                                                              | Uses a GitHub App read token when configured, leaving normal `gh` login for writes.                                |
 | Commits         | `scripts/committer "<message>" <files...>`                                     | Preferred scoped commit helper for OpenClaw changes.                                                               |
-| Remote proof    | `node scripts/crabbox-wrapper.mjs ...`                                         | Agent default for tests and heavy work; pre-warm by source trust, sync each run, reuse the lease.                    |
+| Remote proof    | `node scripts/crabbox-wrapper.mjs ...`                                         | Agent default for tests and heavy work; pre-warm by source trust, sync each run, reuse the lease.                  |
 
 ## Script Families
 
diff --git a/scripts/check-memory-fd-repro.mjs b/scripts/check-memory-fd-repro.mjs
index c9900f707b08..2670cde15e95 100644
--- a/scripts/check-memory-fd-repro.mjs
+++ b/scripts/check-memory-fd-repro.mjs
@@ -241,7 +241,10 @@ export function parseArgs(argv) {
     "OPENCLAW_MEMORY_FD_REPRO_MAX_WORKSPACE_REG_FDS",
     DEFAULT_MAX_WORKSPACE_REG_FDS,
   );
-  options.invokeTimeoutMs ??= readTimerTimeoutNumberEnv("OPENCLAW_MEMORY_FD_REPRO_TIMEOUT_MS", 30_000);
+  options.invokeTimeoutMs ??= readTimerTimeoutNumberEnv(
+    "OPENCLAW_MEMORY_FD_REPRO_TIMEOUT_MS",
+    30_000,
+  );
   options.sampleDelayMs ??= readTimerTimeoutNumberEnv(
     "OPENCLAW_MEMORY_FD_REPRO_SAMPLE_DELAY_MS",
     1_000,
diff --git a/scripts/check.mjs b/scripts/check.mjs
index d4bea9bec9b0..cc46e55d1239 100644
--- a/scripts/check.mjs
+++ b/scripts/check.mjs
@@ -124,7 +124,10 @@ export async function main(argv = process.argv.slice(2)) {
     {
       name: "lint",
       parallel: false,
-      commands: [{ name: "lint", args: ["lint"] }],
+      commands: [
+        { name: "lint", args: ["lint"] },
+        { name: "format", args: ["format:check"] },
+      ],
     },
     {
       name: "policy guards",
diff --git a/scripts/lib/windows-taskkill.d.mts b/scripts/lib/windows-taskkill.d.mts
index bab088386a7e..d90731491ca9 100644
--- a/scripts/lib/windows-taskkill.d.mts
+++ b/scripts/lib/windows-taskkill.d.mts
@@ -1,6 +1,3 @@
 export function resolveWindowsTaskkillPath(env?: NodeJS.ProcessEnv): string;
-export function resolveWindowsSystem32Path(
-  executableName: string,
-  env?: NodeJS.ProcessEnv,
-): string;
+export function resolveWindowsSystem32Path(executableName: string, env?: NodeJS.ProcessEnv): string;
 export function resolveWindowsPowerShellPath(env?: NodeJS.ProcessEnv): string;
diff --git a/scripts/pre-commit/pnpm-audit-prod.mjs b/scripts/pre-commit/pnpm-audit-prod.mjs
index 7a61aa42da9e..66503c6c4069 100644
--- a/scripts/pre-commit/pnpm-audit-prod.mjs
+++ b/scripts/pre-commit/pnpm-audit-prod.mjs
@@ -362,7 +362,7 @@ function parsePnpmLockfileSections(lockfileText) {
   let hasImportersSection = false;
   let hasSnapshotsSection = false;
 
-  for (let index = 0; index < lines.length; ) {
+  for (let index = 0; index < lines.length;) {
     const line = lines[index];
     const trimmed = line.trim();
     const indentation = countIndentation(line);
diff --git a/scripts/prepare-extension-package-boundary-artifacts.mjs b/scripts/prepare-extension-package-boundary-artifacts.mjs
index b662b860711d..0bb7efd92583 100644
--- a/scripts/prepare-extension-package-boundary-artifacts.mjs
+++ b/scripts/prepare-extension-package-boundary-artifacts.mjs
@@ -267,10 +267,7 @@ const SLACK_DTS_INPUTS = [
 ];
 const SLACK_DTS_STAMP = "dist/plugin-sdk/extensions/slack/.boundary-dts.stamp";
 const SLACK_DTS_REQUIRED_OUTPUTS = ["dist/plugin-sdk/extensions/slack/api.d.ts"];
-const TELEGRAM_DTS_INPUTS = [
-  "extensions/telegram/api.ts",
-  "extensions/telegram/tsconfig.json",
-];
+const TELEGRAM_DTS_INPUTS = ["extensions/telegram/api.ts", "extensions/telegram/tsconfig.json"];
 const TELEGRAM_DTS_STAMP = "dist/plugin-sdk/extensions/telegram/.boundary-dts.stamp";
 const TELEGRAM_DTS_REQUIRED_OUTPUTS = ["dist/plugin-sdk/extensions/telegram/api.d.ts"];
 const WHATSAPP_DTS_INPUTS = [
diff --git a/scripts/test-docker-all.mjs b/scripts/test-docker-all.mjs
index 3ff7019ee8c8..6df0a333b78c 100644
--- a/scripts/test-docker-all.mjs
+++ b/scripts/test-docker-all.mjs
@@ -1216,7 +1216,7 @@ async function runLanePool(poolLanes, baseEnv, logDir, parallelism, options) {
     while (pending.length > 0 || running.size > 0) {
       let started = false;
       if (!options.failFast || failures.length === 0) {
-        for (let index = 0; index < pending.length; ) {
+        for (let index = 0; index < pending.length;) {
           const candidate = pending[index];
           if (!canStartLane(candidate)) {
             index += 1;
diff --git a/scripts/verify-template-cache-bound.mjs b/scripts/verify-template-cache-bound.mjs
index f1050d1b7685..b5679377edee 100644
--- a/scripts/verify-template-cache-bound.mjs
+++ b/scripts/verify-template-cache-bound.mjs
@@ -70,11 +70,15 @@ console.log();
 console.log("── Phase 3: Non-evicted file 1 — prove watcher still alive ──");
 writeFileSync(paths[1], JSON.stringify({ segments: [{ text: "CHANGED-VIA-WATCHER" }] }));
 // fs.watch uses a polling fallback on Linux; give the watcher time to fire.
-await new Promise((r) => { setTimeout(r, 500); });
+await new Promise((r) => {
+  setTimeout(r, 500);
+});
 const tpl1 = loadUsageBarTemplate(paths[1]);
 const alive = tpl1?.segments?.[0]?.text === "CHANGED-VIA-WATCHER";
 console.log(`  File 1 reloaded: "${tpl1?.segments?.[0]?.text}"`);
-console.log(`  Result:          ${alive ? "PASS (live watcher updated cache)" : "NOTE (cache hit — watcher may need more time)"}`);
+console.log(
+  `  Result:          ${alive ? "PASS (live watcher updated cache)" : "NOTE (cache hit — watcher may need more time)"}`,
+);
 console.log();
 
 // Phase 4: Cache integrity (MUST run before reloading the evicted path.)
@@ -98,13 +102,17 @@ writeFileSync(paths[0], JSON.stringify({ segments: [{ text: "V2-EVICTED-RELOADED
 const tpl0 = loadUsageBarTemplate(paths[0]);
 const evicted = tpl0?.segments?.[0]?.text === "V2-EVICTED-RELOADED";
 console.log(`  File 0 reloaded: "${tpl0?.segments?.[0]?.text}"`);
-console.log(`  Result:          ${evicted ? "PASS (disk re-read — evicted watcher was closed)" : "FAIL"}`);
+console.log(
+  `  Result:          ${evicted ? "PASS (disk re-read — evicted watcher was closed)" : "FAIL"}`,
+);
 console.log();
 
 // Phase 6: Cleanup
 console.log("── Phase 6: Cleanup ──");
 clearUsageBarTemplateCacheForTest();
-await new Promise((r) => { setTimeout(r, 100); });
+await new Promise((r) => {
+  setTimeout(r, 100);
+});
 console.log(`  Result: clearUsageBarTemplateCacheForTest called`);
 console.log();
 
@@ -114,9 +122,15 @@ console.log("=".repeat(72));
 console.log("VERDICT");
 console.log("=".repeat(72));
 console.log(`  ${CAP} files loaded → all cached                         PASS`);
-console.log(`  65th file → eviction + watcher close                    ${evicted ? "PASS" : "FAIL"}`);
-console.log(`  Non-evicted watcher still alive                          ${alive ? "PASS" : "WARN"}`);
-console.log(`  ${CAP - 2} files remain cached                                  ${cachedOk === CAP - 2 ? "PASS" : "FAIL"}`);
+console.log(
+  `  65th file → eviction + watcher close                    ${evicted ? "PASS" : "FAIL"}`,
+);
+console.log(
+  `  Non-evicted watcher still alive                          ${alive ? "PASS" : "WARN"}`,
+);
+console.log(
+  `  ${CAP - 2} files remain cached                                  ${cachedOk === CAP - 2 ? "PASS" : "FAIL"}`,
+);
 console.log(`  cleanup → all watchers closed                            PASS`);
 console.log();
 console.log(`  End time: ${new Date().toISOString()}`);
diff --git a/src/acp/control-plane/manager.test-helpers.ts b/src/acp/control-plane/manager.test-helpers.ts
index 8c4249fa5cf6..05fb6b8d9094 100644
--- a/src/acp/control-plane/manager.test-helpers.ts
+++ b/src/acp/control-plane/manager.test-helpers.ts
@@ -112,10 +112,7 @@ function mockCallArgs(mock: ReturnType<typeof vi.fn>): Array<Record<string, unkn
   return mock.mock.calls.map((call) => call[0] as Record<string, unknown>);
 }
 
-function findMockCallFields(
-  mock: ReturnType<typeof vi.fn>,
-  expected: Record<string, unknown>,
-) {
+function findMockCallFields(mock: ReturnType<typeof vi.fn>, expected: Record<string, unknown>) {
   return mockCallArgs(mock).find((actual) =>
     Object.entries(expected).every(([key, value]) => Object.is(actual[key], value)),
   );
diff --git a/src/acp/event-ledger.test.ts b/src/acp/event-ledger.test.ts
index abaf09938b6c..44d441b201da 100644
--- a/src/acp/event-ledger.test.ts
+++ b/src/acp/event-ledger.test.ts
@@ -427,5 +427,4 @@ describe("ACP event ledger", () => {
       ledger.readReplay({ sessionId: "session-1", sessionKey: "agent:main:work" }),
     ).resolves.toEqual({ complete: false, events: [] });
   });
-
 });
diff --git a/src/agents/agent-tools.abort.ts b/src/agents/agent-tools.abort.ts
index 8b2149bd9844..7056dc861221 100644
--- a/src/agents/agent-tools.abort.ts
+++ b/src/agents/agent-tools.abort.ts
@@ -1,10 +1,10 @@
+import { createAbortError, mergeAbortSignals } from "../infra/abort-signal.js";
 /**
  * Abort-signal wrapping for agent tools.
  * Combines per-call cancellation with run-level aborts while preserving plugin,
  * channel, and before_tool_call metadata on wrapped tools.
  */
 import { copyPluginToolMeta } from "../plugins/tools.js";
-import { createAbortError, mergeAbortSignals } from "../infra/abort-signal.js";
 import type { AnyAgentTool } from "./agent-tools.types.js";
 import { copyBeforeToolCallHookMarker } from "./before-tool-call-metadata.js";
 import { copyChannelAgentToolMeta } from "./channel-tools.js";
diff --git a/src/agents/auth-profiles/constants.ts b/src/agents/auth-profiles/constants.ts
index c9873e617c23..eaab645dd888 100644
--- a/src/agents/auth-profiles/constants.ts
+++ b/src/agents/auth-profiles/constants.ts
@@ -4,9 +4,7 @@
  * timing, and logging used by auth profile runtime modules.
  */
 import { createSubsystemLogger } from "../../logging/subsystem.js";
-export {
-  AUTH_PROFILE_FILENAME,
-} from "./path-constants.js";
+export { AUTH_PROFILE_FILENAME } from "./path-constants.js";
 
 /** Current persisted auth profile store schema version. */
 export const AUTH_STORE_VERSION = 1;
diff --git a/src/agents/bootstrap-budget.ts b/src/agents/bootstrap-budget.ts
index 193ac68784e3..cad9ff1c0c5e 100644
--- a/src/agents/bootstrap-budget.ts
+++ b/src/agents/bootstrap-budget.ts
@@ -233,9 +233,7 @@ export function analyzeBootstrapBudget(params: {
 }
 
 /** Builds a stable signature for once-per-truncation warning suppression. */
-function buildBootstrapTruncationSignature(
-  analysis: BootstrapBudgetAnalysis,
-): string | undefined {
+function buildBootstrapTruncationSignature(analysis: BootstrapBudgetAnalysis): string | undefined {
   if (!analysis.hasTruncation) {
     return undefined;
   }
diff --git a/src/agents/cli-runner/reliability.ts b/src/agents/cli-runner/reliability.ts
index 860b4b300bab..d18a846b712a 100644
--- a/src/agents/cli-runner/reliability.ts
+++ b/src/agents/cli-runner/reliability.ts
@@ -5,13 +5,13 @@ import path from "node:path";
 import { normalizeLowercaseStringOrEmpty } from "@openclaw/normalization-core/string-coerce";
 import type { CliBackendConfig } from "../../config/types.js";
 import type { OpenClawConfig } from "../../config/types.openclaw.js";
-import { AGENT_LANE_SUBAGENT } from "../lanes.js";
 import {
   CLI_FRESH_WATCHDOG_DEFAULTS,
   CLI_RESUME_WATCHDOG_DEFAULTS,
   CLI_WATCHDOG_MIN_TIMEOUT_MS,
 } from "../cli-watchdog-defaults.js";
 import type { EmbeddedRunTrigger } from "../embedded-agent-runner/run/params.js";
+import { AGENT_LANE_SUBAGENT } from "../lanes.js";
 
 function pickWatchdogProfile(
   backend: CliBackendConfig,
diff --git a/src/agents/embedded-agent-runner/run/failover-observation.test.ts b/src/agents/embedded-agent-runner/run/failover-observation.test.ts
index 730627c76ae2..6f94333200fc 100644
--- a/src/agents/embedded-agent-runner/run/failover-observation.test.ts
+++ b/src/agents/embedded-agent-runner/run/failover-observation.test.ts
@@ -177,7 +177,8 @@ describe("createFailoverDecisionLogger", () => {
 
   it("omits raw HTML Cloudflare challenge bodies from consoleMessage for upstream_html 403", () => {
     const warnSpy = vi.spyOn(log, "warn").mockImplementation(() => {});
-    const cfChallengeHtml = "403 <!DOCTYPE html><html><head><title>403 Forbidden</title></head>" +
+    const cfChallengeHtml =
+      "403 <!DOCTYPE html><html><head><title>403 Forbidden</title></head>" +
       "<body>Enable JavaScript and cookies to continue." +
       "<p>Please stand by, while we are checking your browser...</p></body></html>";
     const logDecision = createFailoverDecisionLogger({
diff --git a/src/agents/embedded-agent-subscribe.handlers.compaction.ts b/src/agents/embedded-agent-subscribe.handlers.compaction.ts
index cee617cfe926..ac3f735ca8c0 100644
--- a/src/agents/embedded-agent-subscribe.handlers.compaction.ts
+++ b/src/agents/embedded-agent-subscribe.handlers.compaction.ts
@@ -6,8 +6,8 @@
 import { emitAgentEvent } from "../infra/agent-events.js";
 import { getGlobalHookRunner } from "../plugins/hook-runner-global.js";
 import { stripStaleAssistantUsageBeforeLatestCompaction } from "./compaction-usage.js";
-import type { EmbeddedAgentSubscribeContext } from "./embedded-agent-subscribe.handlers.types.js";
 import { runBestEffortCallback } from "./embedded-agent-subscribe.callback.js";
+import type { EmbeddedAgentSubscribeContext } from "./embedded-agent-subscribe.handlers.types.js";
 import type { AgentSessionEvent } from "./sessions/index.js";
 
 type SessionCompactionStartEvent = Extract<AgentSessionEvent, { type: "compaction_start" }>;
@@ -67,10 +67,11 @@ export function handleCompactionStart(
   runBestEffortCallback({
     label: "compaction agent event",
     log: ctx.log,
-    callback: () => ctx.params.onAgentEvent?.({
-      stream: "compaction",
-      data: { phase: "start" },
-    }),
+    callback: () =>
+      ctx.params.onAgentEvent?.({
+        stream: "compaction",
+        data: { phase: "start" },
+      }),
   });
 
   // Hooks are fire-and-forget so compaction state updates and liveness pauses
@@ -161,10 +162,11 @@ export function handleCompactionEnd(ctx: EmbeddedAgentSubscribeContext, evt: Com
   runBestEffortCallback({
     label: "compaction agent event",
     log: ctx.log,
-    callback: () => ctx.params.onAgentEvent?.({
-      stream: "compaction",
-      data: { phase: "end", willRetry, completed: hasResult && !wasAborted },
-    }),
+    callback: () =>
+      ctx.params.onAgentEvent?.({
+        stream: "compaction",
+        data: { phase: "end", willRetry, completed: hasResult && !wasAborted },
+      }),
   });
 
   // after_compaction runs only once the run will not retry, matching the visible
@@ -196,9 +198,8 @@ async function reconcileSessionStoreCompactionCountAfterSuccess(params: {
   observedCompactionCount: number;
   now?: number;
 }): Promise<number | undefined> {
-  const { default: reconcile } = await import(
-    "./embedded-agent-subscribe.handlers.compaction.runtime.js"
-  );
+  const { default: reconcile } =
+    await import("./embedded-agent-subscribe.handlers.compaction.runtime.js");
   return reconcile(params);
 }
 
diff --git a/src/agents/embedded-agent-subscribe.handlers.lifecycle.ts b/src/agents/embedded-agent-subscribe.handlers.lifecycle.ts
index 433ffbceaa01..85b964cc92cd 100644
--- a/src/agents/embedded-agent-subscribe.handlers.lifecycle.ts
+++ b/src/agents/embedded-agent-subscribe.handlers.lifecycle.ts
@@ -20,12 +20,12 @@ import {
   hasAttemptTerminalState,
   isIncompleteTerminalAssistantTurn,
 } from "./embedded-agent-runner/run/incomplete-turn.js";
+import { runBestEffortCallback } from "./embedded-agent-subscribe.callback.js";
 import {
   consumePendingToolMediaReply,
   hasAssistantVisibleReply,
 } from "./embedded-agent-subscribe.handlers.messages.js";
 import type { EmbeddedAgentSubscribeContext } from "./embedded-agent-subscribe.handlers.types.js";
-import { runBestEffortCallback } from "./embedded-agent-subscribe.callback.js";
 import { isPromiseLike } from "./embedded-agent-subscribe.promise.js";
 import { isAssistantMessage } from "./embedded-agent-utils.js";
 import type { AgentSessionEvent } from "./sessions/index.js";
@@ -55,10 +55,11 @@ export function handleAgentStart(ctx: EmbeddedAgentSubscribeContext) {
   runBestEffortCallback({
     label: "lifecycle agent event",
     log: ctx.log,
-    callback: () => ctx.params.onAgentEvent?.({
-      stream: "lifecycle",
-      data: { phase: "start" },
-    }),
+    callback: () =>
+      ctx.params.onAgentEvent?.({
+        stream: "lifecycle",
+        data: { phase: "start" },
+      }),
   });
 }
 
@@ -221,16 +222,17 @@ export function handleAgentEnd(
     runBestEffortCallback({
       label: "lifecycle agent event",
       log: ctx.log,
-      callback: () => ctx.params.onAgentEvent?.({
-      stream: "lifecycle",
-      data: {
-        phase,
-        ...errorData,
-        ...terminalMeta,
-        ...(livenessState ? { livenessState } : {}),
-        ...(replayInvalid ? { replayInvalid } : {}),
-      },
-      }),
+      callback: () =>
+        ctx.params.onAgentEvent?.({
+          stream: "lifecycle",
+          data: {
+            phase,
+            ...errorData,
+            ...terminalMeta,
+            ...(livenessState ? { livenessState } : {}),
+            ...(replayInvalid ? { replayInvalid } : {}),
+          },
+        }),
     });
   };
 
diff --git a/src/agents/embedded-agent-subscribe.handlers.tools.ts b/src/agents/embedded-agent-subscribe.handlers.tools.ts
index 2f2fca00900e..037ffe8f2844 100644
--- a/src/agents/embedded-agent-subscribe.handlers.tools.ts
+++ b/src/agents/embedded-agent-subscribe.handlers.tools.ts
@@ -61,11 +61,11 @@ import {
   isMessagingToolTargetEvidenceAction,
 } from "./embedded-agent-messaging.js";
 import { mergeEmbeddedRunReplayState } from "./embedded-agent-runner/replay-state.js";
+import { runBestEffortCallback } from "./embedded-agent-subscribe.callback.js";
 import type {
   ToolCallSummary,
   ToolHandlerContext,
 } from "./embedded-agent-subscribe.handlers.types.js";
-import { runBestEffortCallback } from "./embedded-agent-subscribe.callback.js";
 import { isPromiseLike } from "./embedded-agent-subscribe.promise.js";
 import {
   collectMessagingMediaUrlsFromRecord,
diff --git a/src/agents/harness/user-input-bridge.ts b/src/agents/harness/user-input-bridge.ts
index 1afbba1f1443..e324c9ca5b44 100644
--- a/src/agents/harness/user-input-bridge.ts
+++ b/src/agents/harness/user-input-bridge.ts
@@ -90,9 +90,7 @@ export function buildAgentHarnessUserInputAnswers(
   }
 
   const keyed = parseKeyedAnswers(inputText);
-  const fallbackLines = inputText
-    .split(/\r?\n/)
-    .map((line) => line.trim());
+  const fallbackLines = inputText.split(/\r?\n/).map((line) => line.trim());
   questions.forEach((question, index) => {
     const key =
       keyed.get(question.id.toLowerCase()) ??
diff --git a/src/agents/model-catalog-browse.test.ts b/src/agents/model-catalog-browse.test.ts
index 5ec621f096d3..a885e1d68016 100644
--- a/src/agents/model-catalog-browse.test.ts
+++ b/src/agents/model-catalog-browse.test.ts
@@ -5,9 +5,7 @@
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import type { OpenClawConfig } from "../config/types.openclaw.js";
 import { MAX_TIMER_TIMEOUT_MS } from "../shared/number-coercion.js";
-import {
-  loadModelCatalogForBrowse,
-} from "./model-catalog-browse.js";
+import { loadModelCatalogForBrowse } from "./model-catalog-browse.js";
 import type { ModelCatalogEntry } from "./model-catalog.types.js";
 
 const DEFAULT_MODEL_CATALOG_BROWSE_TIMEOUT_MS = 750;
diff --git a/src/agents/sandbox/workspace-mounts.ts b/src/agents/sandbox/workspace-mounts.ts
index 51f71d15b9ad..1d0457a6dce2 100644
--- a/src/agents/sandbox/workspace-mounts.ts
+++ b/src/agents/sandbox/workspace-mounts.ts
@@ -74,7 +74,8 @@ export function resolveReadOnlyWorkspaceSkillMounts(params: {
   // RW workspaces mount the project as writable, but skill sources remain read-only so agent
   // instructions are visible without letting sandbox commands mutate them.
   const materializedSkillsWorkspaceDir =
-    params.skillsWorkspaceDir ?? resolveMaterializedSandboxSkillsWorkspaceDir(params.agentWorkspaceDir);
+    params.skillsWorkspaceDir ??
+    resolveMaterializedSandboxSkillsWorkspaceDir(params.agentWorkspaceDir);
   const mounts = [
     {
       hostPath: path.join(params.agentWorkspaceDir, "skills"),
diff --git a/src/agents/sessions/provider-display-names.ts b/src/agents/sessions/provider-display-names.ts
index b4878750866b..357f4ae804a3 100644
--- a/src/agents/sessions/provider-display-names.ts
+++ b/src/agents/sessions/provider-display-names.ts
@@ -16,7 +16,7 @@ export const BUILT_IN_PROVIDER_DISPLAY_NAMES: Record<string, string> = {
   groq: "Groq",
   huggingface: "Hugging Face",
   "kimi-coding": "Kimi For Coding",
-  "meta": "Meta",
+  meta: "Meta",
   mistral: "Mistral",
   minimax: "MiniMax",
   "minimax-cn": "MiniMax (China)",
diff --git a/src/agents/sessions/session-manager.ts b/src/agents/sessions/session-manager.ts
index 9b808ee9ba79..0e1ac871ab18 100644
--- a/src/agents/sessions/session-manager.ts
+++ b/src/agents/sessions/session-manager.ts
@@ -2045,7 +2045,7 @@ export class SessionManager {
     const removedParentById = new Map(
       removedEntries.map((entry) => [entry.id, entry.parentId] as const),
     );
-    for (let index = removeStart; index < this.fileEntries.length; ) {
+    for (let index = removeStart; index < this.fileEntries.length;) {
       const entry = this.fileEntries[index];
       if (
         isIndexedSessionEntry(entry) &&
diff --git a/src/agents/sessions/tools/find.ts b/src/agents/sessions/tools/find.ts
index 564a642ba39b..f71427926351 100644
--- a/src/agents/sessions/tools/find.ts
+++ b/src/agents/sessions/tools/find.ts
@@ -27,7 +27,7 @@ import { wrapToolDefinition } from "./tool-definition-wrapper.js";
 import { DEFAULT_MAX_BYTES, formatSize, truncateHead } from "./truncate.js";
 
 function isInsideGitRepository(searchPath: string): boolean {
-  for (let current = searchPath; ; ) {
+  for (let current = searchPath; ;) {
     if (existsSync(path.join(current, ".git"))) {
       return true;
     }
diff --git a/src/agents/subagent-session-reconciliation.ts b/src/agents/subagent-session-reconciliation.ts
index ef2c01d2e47e..dea10be6638b 100644
--- a/src/agents/subagent-session-reconciliation.ts
+++ b/src/agents/subagent-session-reconciliation.ts
@@ -5,13 +5,13 @@
  */
 import { asFiniteNumber } from "@openclaw/normalization-core/number-coercion";
 import { getRuntimeConfig } from "../config/config.js";
-import { loadSessionEntry } from "../config/sessions/session-accessor.js";
 import {
   loadSessionStore,
   resolveAgentIdFromSessionKey,
   resolveStorePath,
   type SessionEntry,
 } from "../config/sessions.js";
+import { loadSessionEntry } from "../config/sessions/session-accessor.js";
 import type { OpenClawConfig } from "../config/types.openclaw.js";
 import type { SubagentRunOutcome } from "./subagent-announce-output.js";
 import {
diff --git a/src/agents/tool-loop-detection.test.ts b/src/agents/tool-loop-detection.test.ts
index 6ce99c121a74..27ac1c1a2ef2 100644
--- a/src/agents/tool-loop-detection.test.ts
+++ b/src/agents/tool-loop-detection.test.ts
@@ -1264,5 +1264,4 @@ describe("tool-loop-detection", () => {
       expect(loopResult.stuck && loopResult.level).not.toBe("critical");
     });
   });
-
 });
diff --git a/src/agents/tools/web-fetch-utils.ts b/src/agents/tools/web-fetch-utils.ts
index 30ddaa7228d3..d266b7216d8f 100644
--- a/src/agents/tools/web-fetch-utils.ts
+++ b/src/agents/tools/web-fetch-utils.ts
@@ -513,7 +513,7 @@ function htmlFragmentToMarkdown(html: string): { text: string; title?: string }
   const stack: RenderContext[] = [root];
   const state: { title?: string } = {};
 
-  for (let i = 0; i < html.length; ) {
+  for (let i = 0; i < html.length;) {
     const ch = html[i];
     if (ch !== "<") {
       const nextTag = html.indexOf("<", i);
diff --git a/src/auto-reply/reply/commands-acp/shared.ts b/src/auto-reply/reply/commands-acp/shared.ts
index 6391431c43d1..7416e936181e 100644
--- a/src/auto-reply/reply/commands-acp/shared.ts
+++ b/src/auto-reply/reply/commands-acp/shared.ts
@@ -193,7 +193,7 @@ export function parseSpawnInput(
   let label: string | undefined;
   let rawAgentId: string | undefined;
 
-  for (let i = 0; i < normalizedTokens.length; ) {
+  for (let i = 0; i < normalizedTokens.length;) {
     const token = normalizedTokens[i] ?? "";
 
     const modeOption = readOptionValue({ tokens: normalizedTokens, index: i, flag: "--mode" });
@@ -330,7 +330,7 @@ export function parseSteerInput(
   let sessionToken: string | undefined;
   const instructionTokens: string[] = [];
 
-  for (let i = 0; i < normalizedTokens.length; ) {
+  for (let i = 0; i < normalizedTokens.length;) {
     const sessionOption = readOptionValue({
       tokens: normalizedTokens,
       index: i,
diff --git a/src/auto-reply/reply/directive-handling.parse.ts b/src/auto-reply/reply/directive-handling.parse.ts
index 6b7145a50c6b..f759ead51ed7 100644
--- a/src/auto-reply/reply/directive-handling.parse.ts
+++ b/src/auto-reply/reply/directive-handling.parse.ts
@@ -1,6 +1,6 @@
+import type { FastMode } from "@openclaw/normalization-core/string-coerce";
 // Parses inline reply directives into typed execution and routing options.
 import type { ExecAsk, ExecSecurity, ExecTarget } from "../../infra/exec-approvals.js";
-import type { FastMode } from "@openclaw/normalization-core/string-coerce";
 import { extractModelDirective } from "../model.js";
 import { isSessionDefaultDirectiveValue } from "../thinking.js";
 import type {
diff --git a/src/auto-reply/reply/pending-tool-task-drain.ts b/src/auto-reply/reply/pending-tool-task-drain.ts
index 66d6f4a24d00..31f42f35aa6c 100644
--- a/src/auto-reply/reply/pending-tool-task-drain.ts
+++ b/src/auto-reply/reply/pending-tool-task-drain.ts
@@ -2,9 +2,7 @@
 const DEFAULT_PENDING_TOOL_DRAIN_IDLE_TIMEOUT_MS = 30_000;
 
 /** Result from waiting for pending tool tasks before final delivery. */
-type PendingToolTaskDrainResult =
-  | { kind: "settled" }
-  | { kind: "timeout"; remaining: number };
+type PendingToolTaskDrainResult = { kind: "settled" } | { kind: "timeout"; remaining: number };
 
 type DrainOptions = {
   tasks: Set<Promise<void>>;
diff --git a/src/auto-reply/tool-meta.test.ts b/src/auto-reply/tool-meta.test.ts
index 9bee3ee3dd6e..f93715992a9a 100644
--- a/src/auto-reply/tool-meta.test.ts
+++ b/src/auto-reply/tool-meta.test.ts
@@ -16,9 +16,7 @@ describe("tool meta formatting", () => {
     withHome(() => {
       expect(formatToolAggregate("fs", [`${home}/a.txt`])).toContain("~/a.txt");
       expect(formatToolAggregate("fs", [`${home}/a.txt:12`])).toContain("~/a.txt:12");
-      expect(formatToolAggregate("exec", [`cd ${home}/dir && ls`])).toContain(
-        "cd ~/dir && ls",
-      );
+      expect(formatToolAggregate("exec", [`cd ${home}/dir && ls`])).toContain("cd ~/dir && ls");
       expect(formatToolAggregate("fs", [""])).toBe("🧩 Fs");
     });
   });
diff --git a/src/auto-reply/usage-bar/template.test.ts b/src/auto-reply/usage-bar/template.test.ts
index ab08822f49e9..097f0ee8327a 100644
--- a/src/auto-reply/usage-bar/template.test.ts
+++ b/src/auto-reply/usage-bar/template.test.ts
@@ -3,10 +3,7 @@ import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { afterEach, describe, expect, it, vi } from "vitest";
 import { DEFAULT_USAGE_BAR_TEMPLATE } from "./default-template.js";
-import {
-  clearUsageBarTemplateCacheForTest,
-  loadUsageBarTemplate,
-} from "./template.js";
+import { clearUsageBarTemplateCacheForTest, loadUsageBarTemplate } from "./template.js";
 
 const warnSpy = vi.hoisted(() => vi.fn());
 
diff --git a/src/channels/message/inbound-reply-dispatch.ts b/src/channels/message/inbound-reply-dispatch.ts
index ae67a58ca8c2..b3707f360052 100644
--- a/src/channels/message/inbound-reply-dispatch.ts
+++ b/src/channels/message/inbound-reply-dispatch.ts
@@ -276,9 +276,7 @@ export async function recordChannelMessageReplyDispatch(
     dispatchReplyWithBufferedBlockDispatcher: params.dispatchReplyWithBufferedBlockDispatcher,
     delivery: {
       preparePayload: (payload): OutboundReplyPayload =>
-        payload && typeof payload === "object"
-          ? normalizeOutboundReplyPayload(payload)
-          : {},
+        payload && typeof payload === "object" ? normalizeOutboundReplyPayload(payload) : {},
       deliver: async (payload, info) => {
         if (params.durable) {
           const durable = await deliverInboundReplyWithMessageSendContext({
diff --git a/src/channels/route-projection.test.ts b/src/channels/route-projection.test.ts
index 4222eaffc297..83d03982acb9 100644
--- a/src/channels/route-projection.test.ts
+++ b/src/channels/route-projection.test.ts
@@ -164,5 +164,4 @@ describe("channel route projection", () => {
       threadId: "thread-1",
     });
   });
-
 });
diff --git a/src/channels/thread-bindings-policy.ts b/src/channels/thread-bindings-policy.ts
index f1b9234eda87..c2d5a4720e06 100644
--- a/src/channels/thread-bindings-policy.ts
+++ b/src/channels/thread-bindings-policy.ts
@@ -10,9 +10,7 @@ import {
 import { getLoadedChannelPlugin } from "./plugins/index.js";
 import { resolveBundledChannelThreadBindingDefaultPlacement } from "./plugins/thread-binding-api.js";
 
-export {
-  resolveThreadBindingLifecycle,
-} from "../shared/thread-binding-lifecycle.js";
+export { resolveThreadBindingLifecycle } from "../shared/thread-binding-lifecycle.js";
 
 const DEFAULT_THREAD_BINDING_IDLE_HOURS = 24;
 const DEFAULT_THREAD_BINDING_MAX_AGE_HOURS = 0;
diff --git a/src/cli/daemon-cli/lifecycle-core.test.ts b/src/cli/daemon-cli/lifecycle-core.test.ts
index 8f77c9f0453d..a9326d4afffd 100644
--- a/src/cli/daemon-cli/lifecycle-core.test.ts
+++ b/src/cli/daemon-cli/lifecycle-core.test.ts
@@ -1,8 +1,8 @@
 // Daemon lifecycle core tests cover service lifecycle transitions and platform adapters.
 import { beforeAll, beforeEach, describe, expect, it, vi } from "vitest";
 import type { OpenClawConfig } from "../../config/config.js";
-import type { GatewayService } from "../../daemon/service.js";
 import type { GatewayServiceControlArgs } from "../../daemon/service-types.js";
+import type { GatewayService } from "../../daemon/service.js";
 import {
   defaultRuntime,
   resetLifecycleRuntimeLogs,
diff --git a/src/cli/one-shot-exit.test.ts b/src/cli/one-shot-exit.test.ts
index 2db68f5a2f07..9d76a09b8437 100644
--- a/src/cli/one-shot-exit.test.ts
+++ b/src/cli/one-shot-exit.test.ts
@@ -59,11 +59,15 @@ describe("one-shot CLI exit", () => {
 
     let flushStdout: (() => void) | undefined;
     let flushStderr: (() => void) | undefined;
-    const stdoutWrite = vi.spyOn(process.stdout, "write").mockImplementation(((...args: unknown[]) => {
+    const stdoutWrite = vi.spyOn(process.stdout, "write").mockImplementation(((
+      ...args: unknown[]
+    ) => {
       flushStdout = args.find((arg): arg is () => void => typeof arg === "function");
       return true;
     }) as typeof process.stdout.write);
-    const stderrWrite = vi.spyOn(process.stderr, "write").mockImplementation(((...args: unknown[]) => {
+    const stderrWrite = vi.spyOn(process.stderr, "write").mockImplementation(((
+      ...args: unknown[]
+    ) => {
       flushStderr = args.find((arg): arg is () => void => typeof arg === "function");
       return true;
     }) as typeof process.stderr.write);
diff --git a/src/cli/program/register.agent.test.ts b/src/cli/program/register.agent.test.ts
index e7e3240a8f32..f4b1bdd22f28 100644
--- a/src/cli/program/register.agent.test.ts
+++ b/src/cli/program/register.agent.test.ts
@@ -1,8 +1,8 @@
 // Register agent tests cover agent command registration and option wiring.
 import { Command } from "commander";
 import { beforeEach, describe, expect, it, vi } from "vitest";
-import { registerAgentsCommands } from "./register.agent.js";
 import { registerAgentTurnCommand } from "./register.agent-turn.js";
+import { registerAgentsCommands } from "./register.agent.js";
 
 const mocks = vi.hoisted(() => ({
   agentCliCommandMock: vi.fn(),
diff --git a/src/cli/update-cli.ts b/src/cli/update-cli.ts
index 0602104b2c82..63467d61f9da 100644
--- a/src/cli/update-cli.ts
+++ b/src/cli/update-cli.ts
@@ -66,10 +66,7 @@ function registerUpdateFinalizationCommand(update: Command, name: string, hidden
   command
     .description("Repair post-update doctor and plugin convergence")
     .option("--json", "Output result as JSON", false)
-    .option(
-      "--channel <stable|extended-stable|beta|dev>",
-      "Persist update channel before repair",
-    )
+    .option("--channel <stable|extended-stable|beta|dev>", "Persist update channel before repair")
     .option("--timeout <seconds>", "Timeout for update repair steps in seconds (default: 1800)")
     .option("--yes", "Skip confirmation prompts (non-interactive)", false)
     .option(
@@ -118,10 +115,7 @@ export function registerUpdateCli(program: Command) {
     .option("--json", "Output result as JSON", false)
     .option("--no-restart", "Skip restarting the gateway service after a successful update")
     .option("--dry-run", "Preview update actions without making changes", false)
-    .option(
-      "--channel <stable|extended-stable|beta|dev>",
-      "Persist update channel (git + npm)",
-    )
+    .option("--channel <stable|extended-stable|beta|dev>", "Persist update channel (git + npm)")
     .option(
       "--tag <dist-tag|version|spec>",
       "Override the package target for this update (dist-tag, version, or package spec)",
diff --git a/src/cli/windows-argv.ts b/src/cli/windows-argv.ts
index 10f0e227dc2d..22de646d02f6 100644
--- a/src/cli/windows-argv.ts
+++ b/src/cli/windows-argv.ts
@@ -61,7 +61,7 @@ export function normalizeWindowsArgv(
   const argv0IsExecPath = isExecPath(argv[0]);
   const next = [...argv];
   let removedLauncherPrefix = false;
-  for (const i = 1; i < next.length; ) {
+  for (const i = 1; i < next.length;) {
     if (isExecPath(next[i])) {
       next.splice(i, 1);
       removedLauncherPrefix = true;
@@ -73,7 +73,7 @@ export function normalizeWindowsArgv(
     return next;
   }
   const cleaned = [...next];
-  for (const i = 2; i < cleaned.length; ) {
+  for (const i = 2; i < cleaned.length;) {
     const arg = cleaned[i];
     if (!arg || arg.startsWith("-")) {
       break;
diff --git a/src/commands/channel-setup/plugin-install.test.ts b/src/commands/channel-setup/plugin-install.test.ts
index fad2bc81de6b..a49ba89e8756 100644
--- a/src/commands/channel-setup/plugin-install.test.ts
+++ b/src/commands/channel-setup/plugin-install.test.ts
@@ -100,9 +100,7 @@ import { loadOpenClawPlugins } from "../../plugins/loader.js";
 import type { PluginManifestRecord } from "../../plugins/manifest-registry.js";
 import { clearPluginMetadataLifecycleCaches } from "../../plugins/plugin-metadata-lifecycle.js";
 import { createEmptyPluginRegistry } from "../../plugins/registry.js";
-import {
-  setActivePluginRegistry,
-} from "../../plugins/runtime.js";
+import { setActivePluginRegistry } from "../../plugins/runtime.js";
 import type { WizardPrompter } from "../../wizard/prompts.js";
 import { makePrompter, makeRuntime } from "../setup/__tests__/test-utils.js";
 import {
diff --git a/src/commands/configure.channels.ts b/src/commands/configure.channels.ts
index 1fd61d29f213..4470fbd0212a 100644
--- a/src/commands/configure.channels.ts
+++ b/src/commands/configure.channels.ts
@@ -4,8 +4,8 @@ import { sanitizeTerminalText } from "../../packages/terminal-core/src/safe-text
 import { listChatChannels } from "../channels/chat-meta.js";
 import { formatCliCommand } from "../cli/command-format.js";
 import { CONFIG_PATH } from "../config/config.js";
-import { isBlockedObjectKey } from "../infra/prototype-keys.js";
 import type { OpenClawConfig } from "../config/types.openclaw.js";
+import { isBlockedObjectKey } from "../infra/prototype-keys.js";
 import type { RuntimeEnv } from "../runtime.js";
 import { shortenHomePath } from "../utils.js";
 import { confirm, select } from "./configure.shared.js";
diff --git a/src/commands/configure.commands.ts b/src/commands/configure.commands.ts
index 7a160a9ed105..1758cd022a6a 100644
--- a/src/commands/configure.commands.ts
+++ b/src/commands/configure.commands.ts
@@ -33,10 +33,7 @@ const CONFIGURE_NON_TTY_HINT = [
  *
  * Returns true when the wizard may proceed.
  */
-function assertInteractiveConfigureTerminal(
-  runtime: RuntimeEnv,
-  interactive?: boolean,
-): boolean {
+function assertInteractiveConfigureTerminal(runtime: RuntimeEnv, interactive?: boolean): boolean {
   const interactiveTerminal = interactive ?? (process.stdin.isTTY && process.stdout.isTTY);
   if (interactiveTerminal) {
     return true;
diff --git a/src/commands/doctor-legacy-config.migrations.test.ts b/src/commands/doctor-legacy-config.migrations.test.ts
index 7ef117f2b5c2..a4222a34678a 100644
--- a/src/commands/doctor-legacy-config.migrations.test.ts
+++ b/src/commands/doctor-legacy-config.migrations.test.ts
@@ -213,10 +213,7 @@ describe("normalizeCompatibilityConfigValues", () => {
       },
     });
 
-    expect(res.config.agents?.list).toEqual([
-      { id: "main", workspace: "/main" },
-      { id: "beta" },
-    ]);
+    expect(res.config.agents?.list).toEqual([{ id: "main", workspace: "/main" }, { id: "beta" }]);
     expect(res.changes.some((change) => change.includes("workspace"))).toBe(false);
   });
 
@@ -451,9 +448,9 @@ describe("normalizeCompatibilityConfigValues", () => {
           },
         },
       } as unknown as OpenClawConfig);
-      const channel = (res.config.channels as Record<string, { accounts?: Record<string, unknown> }>)?.[
-        channelId
-      ];
+      const channel = (
+        res.config.channels as Record<string, { accounts?: Record<string, unknown> }>
+      )?.[channelId];
 
       expect(channel?.accounts?.default).toEqual({
         dmPolicy: "allowlist",
diff --git a/src/commands/doctor/shared/legacy-web-fetch-migrate.test.ts b/src/commands/doctor/shared/legacy-web-fetch-migrate.test.ts
index 4103ff5585ee..8afe3623abae 100644
--- a/src/commands/doctor/shared/legacy-web-fetch-migrate.test.ts
+++ b/src/commands/doctor/shared/legacy-web-fetch-migrate.test.ts
@@ -64,5 +64,4 @@ describe("legacy web fetch config", () => {
       },
     });
   });
-
 });
diff --git a/src/commands/status.types.ts b/src/commands/status.types.ts
index d2134379d85d..a6903b7acd3e 100644
--- a/src/commands/status.types.ts
+++ b/src/commands/status.types.ts
@@ -1,9 +1,9 @@
 // Shared status output types.
 // These shapes are consumed by scan, summary, text report, and JSON status builders.
 
+import type { FastMode } from "@openclaw/normalization-core/string-coerce";
 import type { ChannelId } from "../channels/plugins/types.public.js";
 import type { SessionKind } from "../sessions/classify-session-kind.js";
-import type { FastMode } from "@openclaw/normalization-core/string-coerce";
 import type {
   RetainedLostTaskAuditSummary,
   TaskAuditSummary,
diff --git a/src/commitments/store-writer.ts b/src/commitments/store-writer.ts
index e2fa5525a7a3..269f0ba909c1 100644
--- a/src/commitments/store-writer.ts
+++ b/src/commitments/store-writer.ts
@@ -5,10 +5,7 @@
 import fs from "node:fs/promises";
 import path from "node:path";
 import { type FileLockOptions, withFileLock } from "../plugin-sdk/file-lock.js";
-import {
-  runQueuedStoreWrite,
-  type StoreWriterQueue,
-} from "../shared/store-writer-queue.js";
+import { runQueuedStoreWrite, type StoreWriterQueue } from "../shared/store-writer-queue.js";
 
 const WRITER_QUEUES = new Map<string, StoreWriterQueue>();
 
diff --git a/src/config/doc-baseline.integration.test.ts b/src/config/doc-baseline.integration.test.ts
index efe4cb92a68f..436c3fbb63ff 100644
--- a/src/config/doc-baseline.integration.test.ts
+++ b/src/config/doc-baseline.integration.test.ts
@@ -44,11 +44,9 @@ describe("config doc baseline integration", () => {
     sharedByPathPromise ??= getSharedRendered().then(
       ({ baseline }) =>
         new Map(
-          [
-            ...baseline.coreEntries,
-            ...baseline.channelEntries,
-            ...baseline.pluginEntries,
-          ].map((entry) => [entry.path, entry]),
+          [...baseline.coreEntries, ...baseline.channelEntries, ...baseline.pluginEntries].map(
+            (entry) => [entry.path, entry],
+          ),
         ),
     );
     return sharedByPathPromise;
diff --git a/src/config/doc-baseline.test.ts b/src/config/doc-baseline.test.ts
index bc134d2a1781..ddbbfdc896f1 100644
--- a/src/config/doc-baseline.test.ts
+++ b/src/config/doc-baseline.test.ts
@@ -1,9 +1,6 @@
 // Verifies generated config documentation baselines stay stable.
 import { describe, expect, it } from "vitest";
-import {
-  collectConfigDocBaselineEntries,
-  dedupeConfigDocBaselineEntries,
-} from "./doc-baseline.js";
+import { collectConfigDocBaselineEntries, dedupeConfigDocBaselineEntries } from "./doc-baseline.js";
 
 describe("config doc baseline", () => {
   it("merges tuple item metadata instead of dropping earlier entries", () => {
diff --git a/src/config/legacy.shared.ts b/src/config/legacy.shared.ts
index 6a394fe9f4b5..caa1a0ba29fc 100644
--- a/src/config/legacy.shared.ts
+++ b/src/config/legacy.shared.ts
@@ -19,8 +19,8 @@ export type LegacyConfigMigrationSpec = LegacyConfigMigration & {
 };
 
 import { isSafeExecutableValue } from "../infra/exec-safety.js";
-import { isRecord } from "../utils.js";
 import { isBlockedObjectKey } from "../infra/prototype-keys.js";
+import { isRecord } from "../utils.js";
 
 export const getRecord = (value: unknown): Record<string, unknown> | null =>
   isRecord(value) ? value : null;
diff --git a/src/config/runtime-overrides.ts b/src/config/runtime-overrides.ts
index 875e36ae9a97..c87bb9c37a45 100644
--- a/src/config/runtime-overrides.ts
+++ b/src/config/runtime-overrides.ts
@@ -1,7 +1,7 @@
+import { isBlockedObjectKey } from "../infra/prototype-keys.js";
 // Applies runtime-only config overrides without mutating persisted config.
 import { isPlainObject } from "../utils.js";
 import { parseConfigPath, setConfigValueAtPath, unsetConfigValueAtPath } from "./config-paths.js";
-import { isBlockedObjectKey } from "../infra/prototype-keys.js";
 import type { OpenClawConfig } from "./types.js";
 
 type OverrideTree = Record<string, unknown>;
diff --git a/src/config/validation.allowed-values.test.ts b/src/config/validation.allowed-values.test.ts
index 22f0194c8256..459f2f8a753b 100644
--- a/src/config/validation.allowed-values.test.ts
+++ b/src/config/validation.allowed-values.test.ts
@@ -44,9 +44,7 @@ describe("config validation allowed-values metadata", () => {
     expect(result.ok).toBe(false);
     if (!result.ok) {
       const issue = requireIssue(result.issues, "update.channel");
-      expect(issue.message).toContain(
-        '(allowed: "stable", "extended-stable", "beta", "dev")',
-      );
+      expect(issue.message).toContain('(allowed: "stable", "extended-stable", "beta", "dev")');
       expect(issue.allowedValues).toEqual(["stable", "extended-stable", "beta", "dev"]);
       expect(issue.allowedValuesHiddenCount).toBe(0);
     }
diff --git a/src/crestodian/tui-backend.test.ts b/src/crestodian/tui-backend.test.ts
index 1e58e60db25f..8a4b378d3fc1 100644
--- a/src/crestodian/tui-backend.test.ts
+++ b/src/crestodian/tui-backend.test.ts
@@ -1,7 +1,7 @@
 // Crestodian TUI backend tests cover rescue status integration with the TUI backend.
 import { describe, expect, it, vi } from "vitest";
-import type { CrestodianOperation } from "./operations.js";
 import type { RuntimeEnv } from "../runtime.js";
+import type { CrestodianOperation } from "./operations.js";
 import type { CrestodianOverview } from "./overview.js";
 import { runCrestodianTui } from "./tui-backend.js";
 
@@ -373,5 +373,4 @@ describe("runCrestodianTui", () => {
       expect(events).toEqual(["disposed", expected]);
     }
   });
-
 });
diff --git a/src/entry.compile-cache.test.ts b/src/entry.compile-cache.test.ts
index f22cdbc4c20d..f7daecfe0f1a 100644
--- a/src/entry.compile-cache.test.ts
+++ b/src/entry.compile-cache.test.ts
@@ -236,8 +236,7 @@ describe("entry compile cache", () => {
       {
         stdio: "inherit",
         env: { NODE_DISABLE_COMPILE_CACHE: "1" },
-        detached:
-          process.platform !== "win32" && !(process.stdin.isTTY || process.stdout.isTTY),
+        detached: process.platform !== "win32" && !(process.stdin.isTTY || process.stdout.isTTY),
       },
     );
     const [bridgeChild, bridgeOptions] = requireFirstMockCall(
diff --git a/src/entry.respawn.test.ts b/src/entry.respawn.test.ts
index 9e267ff5e336..f4fe433e5a58 100644
--- a/src/entry.respawn.test.ts
+++ b/src/entry.respawn.test.ts
@@ -258,8 +258,7 @@ describe("runCliRespawnPlan", () => {
       {
         stdio: "inherit",
         env: { OPENCLAW_NODE_OPTIONS_READY: "1" },
-        detached:
-          process.platform !== "win32" && !(process.stdin.isTTY || process.stdout.isTTY),
+        detached: process.platform !== "win32" && !(process.stdin.isTTY || process.stdout.isTTY),
       },
     );
     const [bridgeChild, bridgeOptions] = requireFirstMockCall(
diff --git a/src/gateway/chat-tool-titles.ts b/src/gateway/chat-tool-titles.ts
index 4e90d1426a27..76c7d74eaa52 100644
--- a/src/gateway/chat-tool-titles.ts
+++ b/src/gateway/chat-tool-titles.ts
@@ -17,18 +17,18 @@
  */
 import { createHash } from "node:crypto";
 import { truncateUtf16Safe } from "@openclaw/normalization-core/utf16-slice";
+import { DEFAULT_PROVIDER } from "../agents/defaults.js";
+import { splitTrailingAuthProfile } from "../agents/model-ref-profile.js";
+import { parseModelRef } from "../agents/model-selection-normalize.js";
 import {
   completeWithPreparedSimpleCompletionModel,
   prepareSimpleCompletionModelForAgent,
 } from "../agents/simple-completion-runtime.js";
-import { DEFAULT_PROVIDER } from "../agents/defaults.js";
-import { parseModelRef } from "../agents/model-selection-normalize.js";
-import { splitTrailingAuthProfile } from "../agents/model-ref-profile.js";
 import { resolveUtilityModelRefForAgent } from "../agents/utility-model.js";
 import type { OpenClawConfig } from "../config/types.openclaw.js";
 import { logVerbose } from "../globals.js";
-import { redactToolPayloadText } from "../logging/redact.js";
 import { executeSqliteQuerySync, getNodeSqliteKysely } from "../infra/kysely-sync.js";
+import { redactToolPayloadText } from "../logging/redact.js";
 import type { DB as OpenClawAgentKyselyDatabase } from "../state/openclaw-agent-db.generated.js";
 import {
   openOpenClawAgentDatabase,
diff --git a/src/gateway/server-methods/web.start.test.ts b/src/gateway/server-methods/web.start.test.ts
index 8e12e6f88f1c..1ab8b41b1626 100644
--- a/src/gateway/server-methods/web.start.test.ts
+++ b/src/gateway/server-methods/web.start.test.ts
@@ -121,30 +121,31 @@ describe("webHandlers web.login.start", () => {
 
   it("joins multiple missing official external plugin hints when more than one configured channel is missing", async () => {
     mocks.listChannelPlugins.mockReturnValue([]);
-    mocks.resolveMissingOfficialExternalChannelPluginRepairHint.mockImplementation(({ channelId }) =>
-      channelId === "whatsapp"
-        ? {
-            pluginId: "whatsapp",
-            channelId: "whatsapp",
-            label: "WhatsApp",
-            installSpec: "clawhub:@openclaw/whatsapp",
-            installCommand: "openclaw plugins install clawhub:@openclaw/whatsapp",
-            doctorFixCommand: "openclaw doctor --fix",
-            repairHint:
-              "Install the official external plugin with: openclaw plugins install clawhub:@openclaw/whatsapp, or run: openclaw doctor --fix.",
-          }
-        : channelId === "signal"
+    mocks.resolveMissingOfficialExternalChannelPluginRepairHint.mockImplementation(
+      ({ channelId }) =>
+        channelId === "whatsapp"
           ? {
-              pluginId: "signal",
-              channelId: "signal",
-              label: "Signal",
-              installSpec: "clawhub:@openclaw/signal",
-              installCommand: "openclaw plugins install clawhub:@openclaw/signal",
+              pluginId: "whatsapp",
+              channelId: "whatsapp",
+              label: "WhatsApp",
+              installSpec: "clawhub:@openclaw/whatsapp",
+              installCommand: "openclaw plugins install clawhub:@openclaw/whatsapp",
               doctorFixCommand: "openclaw doctor --fix",
               repairHint:
-                "Install the official external plugin with: openclaw plugins install clawhub:@openclaw/signal, or run: openclaw doctor --fix.",
+                "Install the official external plugin with: openclaw plugins install clawhub:@openclaw/whatsapp, or run: openclaw doctor --fix.",
             }
-          : null,
+          : channelId === "signal"
+            ? {
+                pluginId: "signal",
+                channelId: "signal",
+                label: "Signal",
+                installSpec: "clawhub:@openclaw/signal",
+                installCommand: "openclaw plugins install clawhub:@openclaw/signal",
+                doctorFixCommand: "openclaw doctor --fix",
+                repairHint:
+                  "Install the official external plugin with: openclaw plugins install clawhub:@openclaw/signal, or run: openclaw doctor --fix.",
+              }
+            : null,
     );
     const respond = vi.fn();
 
diff --git a/src/gateway/server-methods/web.ts b/src/gateway/server-methods/web.ts
index 2929c2c761a1..2f4a618d4160 100644
--- a/src/gateway/server-methods/web.ts
+++ b/src/gateway/server-methods/web.ts
@@ -68,11 +68,7 @@ function respondProviderUnavailable(params: {
   const message = repairHint
     ? `web login provider is not available. ${repairHint}`
     : "web login provider is not available";
-  params.respond(
-    false,
-    undefined,
-    errorShape(ErrorCodes.INVALID_REQUEST, message),
-  );
+  params.respond(false, undefined, errorShape(ErrorCodes.INVALID_REQUEST, message));
 }
 
 function respondProviderUnsupported(respond: RespondFn, providerId: string) {
diff --git a/src/gateway/session-utils.single-row-cache.test.ts b/src/gateway/session-utils.single-row-cache.test.ts
index 76d4edb2319b..42d7d6356c59 100644
--- a/src/gateway/session-utils.single-row-cache.test.ts
+++ b/src/gateway/session-utils.single-row-cache.test.ts
@@ -271,9 +271,7 @@ describe("single gateway session row child-session cache", () => {
         });
 
         expect(syncListed.sessions).toHaveLength(1);
-        expect(subagentRegistryReadMock.buildSubagentRunReadIndex).toHaveBeenCalledTimes(
-          1,
-        );
+        expect(subagentRegistryReadMock.buildSubagentRunReadIndex).toHaveBeenCalledTimes(1);
         expect(
           subagentRegistryReadMock.getSessionDisplaySubagentRunByChildSessionKey,
         ).not.toHaveBeenCalled();
@@ -288,9 +286,7 @@ describe("single gateway session row child-session cache", () => {
         });
 
         expect(asyncListed.sessions).toHaveLength(1);
-        expect(subagentRegistryReadMock.buildSubagentRunReadIndex).toHaveBeenCalledTimes(
-          1,
-        );
+        expect(subagentRegistryReadMock.buildSubagentRunReadIndex).toHaveBeenCalledTimes(1);
         expect(
           subagentRegistryReadMock.getSessionDisplaySubagentRunByChildSessionKey,
         ).not.toHaveBeenCalled();
diff --git a/src/infra/abort-signal.test.ts b/src/infra/abort-signal.test.ts
index 98214c891286..ef8c3f25563f 100644
--- a/src/infra/abort-signal.test.ts
+++ b/src/infra/abort-signal.test.ts
@@ -92,7 +92,10 @@ describe("mergeAbortSignals", () => {
     const removed: AbortSignal[] = [];
     for (const signal of [first.signal, second.signal]) {
       const remove = signal.removeEventListener.bind(signal);
-      signal.removeEventListener = ((type: string, listener: EventListenerOrEventListenerObject) => {
+      signal.removeEventListener = ((
+        type: string,
+        listener: EventListenerOrEventListenerObject,
+      ) => {
         removed.push(signal);
         remove(type, listener);
       }) as AbortSignal["removeEventListener"];
diff --git a/src/infra/abort-signal.ts b/src/infra/abort-signal.ts
index b056647c1d3b..8f1444cae693 100644
--- a/src/infra/abort-signal.ts
+++ b/src/infra/abort-signal.ts
@@ -16,9 +16,10 @@ export function isAbortError(error: unknown): boolean {
   return message === "This operation was aborted";
 }
 
-export function mergeAbortSignals(
-  signals: ReadonlyArray<AbortSignal | undefined>,
-): { signal?: AbortSignal; dispose: () => void } {
+export function mergeAbortSignals(signals: ReadonlyArray<AbortSignal | undefined>): {
+  signal?: AbortSignal;
+  dispose: () => void;
+} {
   const activeSignals: AbortSignal[] = [];
   for (const signal of signals) {
     if (signal && !activeSignals.includes(signal)) {
diff --git a/src/infra/archive-path.ts b/src/infra/archive-path.ts
index cab6c8afd3c9..875189fea610 100644
--- a/src/infra/archive-path.ts
+++ b/src/infra/archive-path.ts
@@ -2,6 +2,4 @@
 import "./fs-safe-defaults.js";
 
 // Archive path facade kept in infra so callers share one traversal policy.
-export {
-  isWindowsDrivePath,
-} from "@openclaw/fs-safe/archive";
+export { isWindowsDrivePath } from "@openclaw/fs-safe/archive";
diff --git a/src/infra/command-analysis/explain.test.ts b/src/infra/command-analysis/explain.test.ts
index 51dbcd1b423d..22261a6e3e3e 100644
--- a/src/infra/command-analysis/explain.test.ts
+++ b/src/infra/command-analysis/explain.test.ts
@@ -74,18 +74,18 @@ describe("command-analysis explanation summary", () => {
     expect(
       (
         await resolveCommandAnalysisSummaryForDisplay({
-        host: "gateway",
-        commandText: "echo ok",
-        commandArgv: ["python3", "-c", "print(1)"],
+          host: "gateway",
+          commandText: "echo ok",
+          commandArgv: ["python3", "-c", "print(1)"],
         })
       )?.riskKinds,
     ).toStrictEqual([]);
     expect(
       (
         await resolveCommandAnalysisSummaryForDisplay({
-        host: "gateway",
-        commandText: "python3 -c 'print(1)'",
-        sanitizeText: (value) => value.replaceAll("python3", "python"),
+          host: "gateway",
+          commandText: "python3 -c 'print(1)'",
+          sanitizeText: (value) => value.replaceAll("python3", "python"),
         })
       )?.warningLines,
     ).toEqual(["Contains inline-eval: python -c"]);
diff --git a/src/infra/command-analysis/policy.ts b/src/infra/command-analysis/policy.ts
index d53fc26fcb10..10de674b3003 100644
--- a/src/infra/command-analysis/policy.ts
+++ b/src/infra/command-analysis/policy.ts
@@ -24,14 +24,12 @@ export type CommandPolicyAnalysis =
     };
 
 /** Parses a shell or argv command into command segments for approval policy checks. */
-export function analyzeCommandForPolicy(
-  params: {
-    source: "argv";
-    argv: string[];
-    cwd?: string;
-    env?: NodeJS.ProcessEnv;
-  },
-): CommandPolicyAnalysis {
+export function analyzeCommandForPolicy(params: {
+  source: "argv";
+  argv: string[];
+  cwd?: string;
+  env?: NodeJS.ProcessEnv;
+}): CommandPolicyAnalysis {
   const analysis = analyzeArgvCommand({ argv: params.argv, cwd: params.cwd, env: params.env });
   if (!analysis.ok) {
     return {
diff --git a/src/infra/command-explainer/extract.test.ts b/src/infra/command-explainer/extract.test.ts
index f23c519b0fd6..6614bde9524b 100644
--- a/src/infra/command-explainer/extract.test.ts
+++ b/src/infra/command-explainer/extract.test.ts
@@ -386,7 +386,10 @@ describe("command explainer tree-sitter runtime", () => {
       }),
     ]);
     expect(
-      spanText(stderrPipe.source, stderrPipe.operators?.[0]?.span ?? { startIndex: 0, endIndex: 0 }),
+      spanText(
+        stderrPipe.source,
+        stderrPipe.operators?.[0]?.span ?? { startIndex: 0, endIndex: 0 },
+      ),
     ).toBe("|&");
 
     const newline = await explainShellCommand("echo a\npwd");
diff --git a/src/infra/exec-approvals-analysis.ts b/src/infra/exec-approvals-analysis.ts
index 2e905afa3a35..3464cd832e05 100644
--- a/src/infra/exec-approvals-analysis.ts
+++ b/src/infra/exec-approvals-analysis.ts
@@ -1,6 +1,6 @@
+import type { ExecCommandSegment } from "./exec-command-analysis-types.js";
 // Shared exec approval analysis types and Windows-only shell enforcement helpers.
 import { rebuildWindowsShellCommandFromSource, windowsEscapeArg } from "./windows-shell-command.js";
-import type { ExecCommandSegment } from "./exec-command-analysis-types.js";
 
 export { analyzeArgvCommand } from "./exec-argv-analysis.js";
 
diff --git a/src/infra/exec-authorization-plan.test.ts b/src/infra/exec-authorization-plan.test.ts
index c3015b11daf8..47692d635a99 100644
--- a/src/infra/exec-authorization-plan.test.ts
+++ b/src/infra/exec-authorization-plan.test.ts
@@ -303,7 +303,7 @@ describe("exec authorization planner", () => {
   });
 
   it("does not promote positional shell carriers with outer shell substitutions", async () => {
-    await expectSingleShellCandidate("sh -c '$0 \"$@\"' touch \"$(id)\"", {
+    await expectSingleShellCandidate('sh -c \'$0 "$@"\' touch "$(id)"', {
       sourceSegment: expect.objectContaining({
         argv: ["sh", "-c", '$0 "$@"', "touch", "$(id)"],
       }),
diff --git a/src/infra/outbound/message.channels.test.ts b/src/infra/outbound/message.channels.test.ts
index 70760140063a..47aab4ba87c8 100644
--- a/src/infra/outbound/message.channels.test.ts
+++ b/src/infra/outbound/message.channels.test.ts
@@ -234,9 +234,7 @@ describe("sendMessage replyToId threading", () => {
   });
 });
 
-function setDemoPollRegistry(
-  outboundOptions: Parameters<typeof createDemoAliasOutbound>[0] = {},
-) {
+function setDemoPollRegistry(outboundOptions: Parameters<typeof createDemoAliasOutbound>[0] = {}) {
   setRegistry(
     createTestRegistry([
       {
diff --git a/src/infra/shell-inline-command.ts b/src/infra/shell-inline-command.ts
index 752d7bf6866c..b05c0546cbed 100644
--- a/src/infra/shell-inline-command.ts
+++ b/src/infra/shell-inline-command.ts
@@ -166,7 +166,7 @@ export function resolveInlineCommandMatch(
     valueOptions?: ReadonlySet<string>;
   } = {},
 ): { command: string | null; valueTokenIndex: number | null } {
-  for (let i = 1; i < argv.length; ) {
+  for (let i = 1; i < argv.length;) {
     const token = argv[i]?.trim();
     if (!token) {
       i += 1;
@@ -261,7 +261,7 @@ export function hasPosixInteractiveStartupBeforeInlineCommand(
   flags: ReadonlySet<string>,
 ): boolean {
   let sawInteractiveMode = false;
-  for (let i = 1; i < argv.length; ) {
+  for (let i = 1; i < argv.length;) {
     const token = argv[i]?.trim();
     if (!token) {
       i += 1;
@@ -290,7 +290,7 @@ export function hasPosixLoginStartupBeforeInlineCommand(
   flags: ReadonlySet<string>,
 ): boolean {
   let sawLoginMode = false;
-  for (let i = 1; i < argv.length; ) {
+  for (let i = 1; i < argv.length;) {
     const token = argv[i]?.trim();
     if (!token) {
       i += 1;
diff --git a/src/infra/update-startup.integration.test.ts b/src/infra/update-startup.integration.test.ts
index e288531a5ee8..72c0d7933734 100644
--- a/src/infra/update-startup.integration.test.ts
+++ b/src/infra/update-startup.integration.test.ts
@@ -20,11 +20,14 @@ vi.mock("./update-check.js", async () => {
   const actual = await vi.importActual<typeof import("./update-check.js")>("./update-check.js");
   return {
     ...actual,
-    checkUpdateStatus: vi.fn(async () => ({
-      root: "/opt/openclaw",
-      installKind: "package",
-      packageManager: "npm",
-    }) satisfies UpdateCheckResult),
+    checkUpdateStatus: vi.fn(
+      async () =>
+        ({
+          root: "/opt/openclaw",
+          installKind: "package",
+          packageManager: "npm",
+        }) satisfies UpdateCheckResult,
+    ),
   };
 });
 
diff --git a/src/llm/utils/oauth/index.ts b/src/llm/utils/oauth/index.ts
index bb21d4cebf84..00f82a887cfa 100644
--- a/src/llm/utils/oauth/index.ts
+++ b/src/llm/utils/oauth/index.ts
@@ -33,11 +33,7 @@ export * from "./types.js";
 import { anthropicOAuthProvider } from "./anthropic.js";
 import { githubCopilotOAuthProvider } from "./github-copilot.js";
 import { openaiCodexOAuthProvider } from "./openai-chatgpt.js";
-import type {
-  OAuthCredentials,
-  OAuthProviderId,
-  OAuthProviderInterface,
-} from "./types.js";
+import type { OAuthCredentials, OAuthProviderId, OAuthProviderInterface } from "./types.js";
 
 const BUILT_IN_OAUTH_PROVIDERS: OAuthProviderInterface[] = [
   anthropicOAuthProvider,
diff --git a/src/media-understanding/attachments.cache.ts b/src/media-understanding/attachments.cache.ts
index 9dffdf0d8596..256d5d3d4def 100644
--- a/src/media-understanding/attachments.cache.ts
+++ b/src/media-understanding/attachments.cache.ts
@@ -8,11 +8,12 @@ import {
   mergeInboundPathRoots,
 } from "@openclaw/media-core/inbound-path-policy";
 import { detectMime } from "@openclaw/media-core/mime";
+import { MediaUnderstandingSkipError } from "../../packages/media-understanding-common/src/errors.js";
 import { resolveStateDir } from "../config/paths.js";
 import { logVerbose, shouldLogVerbose } from "../globals.js";
+import { isAbortError } from "../infra/abort-signal.js";
 import { FsSafeError, openLocalFileSafely } from "../infra/fs-safe.js";
 import type { SsrFPolicy } from "../infra/net/ssrf.js";
-import { isAbortError } from "../infra/abort-signal.js";
 import {
   readRemoteMediaBuffer,
   type MediaFetchRetryOptions,
@@ -22,7 +23,6 @@ import { getDefaultMediaLocalRoots } from "../media/local-roots.js";
 import { resolveInboundMediaReference } from "../media/media-reference.js";
 import { buildRandomTempFilePath } from "../plugin-sdk/temp-path.js";
 import { normalizeAttachmentPath } from "./attachments.normalize.js";
-import { MediaUnderstandingSkipError } from "../../packages/media-understanding-common/src/errors.js";
 import type { MediaAttachment } from "./types.js";
 
 type MediaBufferResult = {
@@ -362,10 +362,7 @@ export class MediaAttachmentCache {
         return usableCwdCandidate;
       }
       const stateCandidate = path.resolve(resolveStateDir(), rawPath);
-      const usableStateCandidate = resolveUsableLocalCandidate(
-        stateCandidate,
-        this.localPathRoots,
-      );
+      const usableStateCandidate = resolveUsableLocalCandidate(stateCandidate, this.localPathRoots);
       if (usableStateCandidate) {
         return usableStateCandidate;
       }
diff --git a/src/media-understanding/audio-preflight.ts b/src/media-understanding/audio-preflight.ts
index a21a4f3f39a7..c4e9ff48a7d9 100644
--- a/src/media-understanding/audio-preflight.ts
+++ b/src/media-understanding/audio-preflight.ts
@@ -1,9 +1,9 @@
+import type { ActiveMediaModel } from "../../packages/media-understanding-common/src/active-model.js";
 // Audio preflight transcribes voice notes before mention checks and optionally
 // echoes the transcript back to the source chat.
 import type { MsgContext } from "../auto-reply/templating.js";
 import type { OpenClawConfig } from "../config/types.js";
 import { logVerbose, shouldLogVerbose } from "../globals.js";
-import type { ActiveMediaModel } from "../../packages/media-understanding-common/src/active-model.js";
 import { isAudioAttachment } from "./attachments.js";
 import { runAudioTranscription } from "./audio-transcription-runner.js";
 import { DEFAULT_ECHO_TRANSCRIPT_FORMAT, sendTranscriptEcho } from "./echo-transcript.js";
diff --git a/src/media-understanding/audio-transcription-runner.ts b/src/media-understanding/audio-transcription-runner.ts
index 2d5eeb6d86c3..31beb5eed00a 100644
--- a/src/media-understanding/audio-transcription-runner.ts
+++ b/src/media-understanding/audio-transcription-runner.ts
@@ -1,8 +1,8 @@
+import type { ActiveMediaModel } from "../../packages/media-understanding-common/src/active-model.js";
 // Audio transcription runner executes the configured media-understanding audio
 // pipeline and extracts the first transcript output.
 import type { MsgContext } from "../auto-reply/templating.js";
 import type { OpenClawConfig } from "../config/types.js";
-import type { ActiveMediaModel } from "../../packages/media-understanding-common/src/active-model.js";
 import {
   buildProviderRegistry,
   createMediaAttachmentCache,
diff --git a/src/media-understanding/defaults.ts b/src/media-understanding/defaults.ts
index f1af47d5b657..ebf261cd642a 100644
--- a/src/media-understanding/defaults.ts
+++ b/src/media-understanding/defaults.ts
@@ -2,9 +2,9 @@
 // metadata, and capability declarations.
 import { normalizeOptionalString } from "@openclaw/normalization-core/string-coerce";
 import { uniqueStrings } from "@openclaw/normalization-core/string-normalization";
+import { providerSupportsCapability } from "../../packages/media-understanding-common/src/provider-supports.js";
 import { resolveRuntimeConfigCacheKey } from "../config/runtime-snapshot.js";
 import type { OpenClawConfig } from "../config/types.js";
-import { providerSupportsCapability } from "../../packages/media-understanding-common/src/provider-supports.js";
 import { buildMediaUnderstandingManifestMetadataRegistry } from "./manifest-metadata.js";
 import {
   normalizeMediaExecutionProviderId,
diff --git a/src/media-understanding/media-understanding-misc.test.ts b/src/media-understanding/media-understanding-misc.test.ts
index e71ac536ab4a..cac6ece00e49 100644
--- a/src/media-understanding/media-understanding-misc.test.ts
+++ b/src/media-understanding/media-understanding-misc.test.ts
@@ -5,10 +5,10 @@ import fs from "node:fs/promises";
 import path from "node:path";
 import { afterEach, describe, expect, it, vi } from "vitest";
 import * as fsSafe from "../infra/fs-safe.js";
+import { saveMediaBuffer } from "../media/store.js";
 import { withTempDir } from "../test-helpers/temp-dir.js";
 import { captureEnv, setTestEnvValue } from "../test-utils/env.js";
 import { withFetchPreconnect } from "../test-utils/fetch-mock.js";
-import { saveMediaBuffer } from "../media/store.js";
 import { MediaAttachmentCache } from "./attachments.js";
 import { normalizeMediaUnderstandingChatType, resolveMediaUnderstandingScope } from "./scope.js";
 
@@ -188,11 +188,7 @@ describe("media understanding attachments SSRF", () => {
   it("resolves managed inbound media URI attachments", async () => {
     await withTempDir({ prefix: "openclaw-media-cache-managed-inbound-" }, async (stateDir) => {
       setTestEnvValue("OPENCLAW_STATE_DIR", stateDir);
-      const saved = await saveMediaBuffer(
-        Buffer.from("managed-media"),
-        "text/plain",
-        "inbound",
-      );
+      const saved = await saveMediaBuffer(Buffer.from("managed-media"), "text/plain", "inbound");
 
       const cache = new MediaAttachmentCache(
         [{ index: 0, path: `media://inbound/${encodeURIComponent(saved.id)}` }],
@@ -209,7 +205,9 @@ describe("media understanding attachments SSRF", () => {
   });
 
   it("blocks nested managed inbound media URI attachments", async () => {
-    const cache = new MediaAttachmentCache([{ index: 0, path: "media://inbound/nested%2Ffile.pdf" }]);
+    const cache = new MediaAttachmentCache([
+      { index: 0, path: "media://inbound/nested%2Ffile.pdf" },
+    ]);
 
     await expect(
       cache.getBuffer({ attachmentIndex: 0, maxBytes: 1024, timeoutMs: 1000 }),
diff --git a/src/plugins/install-record-commit.test.ts b/src/plugins/install-record-commit.test.ts
index 4864c8336b50..a36a73243233 100644
--- a/src/plugins/install-record-commit.test.ts
+++ b/src/plugins/install-record-commit.test.ts
@@ -160,10 +160,13 @@ describe("commitConfigWithPendingPluginInstalls", () => {
       codex: nextConfig.plugins?.installs?.codex,
       concurrent: nextConfig.plugins?.installs?.concurrent,
     });
-    expect(commit).toHaveBeenCalledWith({}, {
-      afterWrite: { mode: "restart", reason: "plugin source changed" },
-      unsetPaths: [["plugins", "installs"]],
-    });
+    expect(commit).toHaveBeenCalledWith(
+      {},
+      {
+        afterWrite: { mode: "restart", reason: "plugin source changed" },
+        unsetPaths: [["plugins", "installs"]],
+      },
+    );
     expect(result.installRecords).toStrictEqual({
       stale: existingRecords.stale,
       missing: sourceConfig.plugins?.installs?.missing,
diff --git a/src/plugins/setup-registry.test.ts b/src/plugins/setup-registry.test.ts
index 61893203cf84..ae2ad1e10bb4 100644
--- a/src/plugins/setup-registry.test.ts
+++ b/src/plugins/setup-registry.test.ts
@@ -1133,4 +1133,4 @@ describe("setup-registry module loader", () => {
       expect(mocks.loadPluginManifestRegistry).toHaveBeenCalledTimes(2);
     });
   });
-});
\ No newline at end of file
+});
diff --git a/src/plugins/test-helpers/install-fixtures.ts b/src/plugins/test-helpers/install-fixtures.ts
index ad6429ba5c93..5f4d2e1dc0ba 100644
--- a/src/plugins/test-helpers/install-fixtures.ts
+++ b/src/plugins/test-helpers/install-fixtures.ts
@@ -83,7 +83,10 @@ export function createDualFormatInstallFixtureFactory(makeTempDir: MakeTempDir)
       "utf-8",
     );
     fs.writeFileSync(path.join(pluginDir, "dist", "index.js"), "export {};", "utf-8");
-    fs.writeFileSync(path.join(pluginDir, "skills", "SKILL.md"), "---\ndescription: fixture\n---\n");
+    fs.writeFileSync(
+      path.join(pluginDir, "skills", "SKILL.md"),
+      "---\ndescription: fixture\n---\n",
+    );
     fs.writeFileSync(
       path.join(manifestDir, "plugin.json"),
       JSON.stringify({
diff --git a/src/process/exec.ts b/src/process/exec.ts
index ac5ff70e17c5..92bb371059be 100644
--- a/src/process/exec.ts
+++ b/src/process/exec.ts
@@ -515,12 +515,7 @@ export async function runCommandWithTimeout(
     };
 
     const killDirectChild = () => {
-      if (
-        settled ||
-        childExitState != null ||
-        child.exitCode != null ||
-        child.signalCode != null
-      ) {
+      if (settled || childExitState != null || child.exitCode != null || child.signalCode != null) {
         return;
       }
       child.kill("SIGKILL");
@@ -551,13 +546,10 @@ export async function runCommandWithTimeout(
       }
       if (killProcessTree && typeof child.pid === "number" && child.pid > 0) {
         if (process.platform === "win32") {
-          const taskkillStarted = spawnTaskkillOrFallback(
-            ["/PID", String(child.pid), "/T"],
-            () => {
-              clearProcessTreeForceKillTimer();
-              killDirectChild();
-            },
-          );
+          const taskkillStarted = spawnTaskkillOrFallback(["/PID", String(child.pid), "/T"], () => {
+            clearProcessTreeForceKillTimer();
+            killDirectChild();
+          });
           if (taskkillStarted) {
             if (!processTreeForceKillTimer) {
               processTreeForceKillTimer = setTimeout(() => {
@@ -570,10 +562,7 @@ export async function runCommandWithTimeout(
                 ) {
                   return;
                 }
-                spawnTaskkillOrFallback(
-                  ["/PID", String(child.pid), "/T", "/F"],
-                  killDirectChild,
-                );
+                spawnTaskkillOrFallback(["/PID", String(child.pid), "/T", "/F"], killDirectChild);
               }, COMMAND_PROCESS_TREE_KILL_GRACE_MS);
               processTreeForceKillTimer.unref();
             }
diff --git a/src/process/respawn-child-runner.test.ts b/src/process/respawn-child-runner.test.ts
index b67f82bb85d5..b0e1fb24d1b1 100644
--- a/src/process/respawn-child-runner.test.ts
+++ b/src/process/respawn-child-runner.test.ts
@@ -43,15 +43,11 @@ describe("runRespawnChildWithSignalBridge", () => {
       onError: vi.fn(),
     });
 
-    expect(spawnChild).toHaveBeenCalledWith(
-      "/usr/bin/node",
-      ["/repo/openclaw/dist/entry.js"],
-      {
-        stdio: "inherit",
-        env: { OPENCLAW_NODE_OPTIONS_READY: "1" },
-        detached: process.platform !== "win32",
-      },
-    );
+    expect(spawnChild).toHaveBeenCalledWith("/usr/bin/node", ["/repo/openclaw/dist/entry.js"], {
+      stdio: "inherit",
+      env: { OPENCLAW_NODE_OPTIONS_READY: "1" },
+      detached: process.platform !== "win32",
+    });
   });
 
   it("signals detached respawn process groups after forwarded signal grace", () => {
diff --git a/src/routing/session-key.test.ts b/src/routing/session-key.test.ts
index f2057a351aad..3628cd3c2f4b 100644
--- a/src/routing/session-key.test.ts
+++ b/src/routing/session-key.test.ts
@@ -114,7 +114,6 @@ describe("getSubagentDepth", () => {
     { key: "subagent:parent:subagent:child", expected: 2 },
   ] as const)("returns $expected for session key %j", ({ key, expected }) => {
     expect(getSubagentDepth(key)).toBe(expected);
-
   });
 });
 
diff --git a/src/scripts/control-ui-i18n-report.test.ts b/src/scripts/control-ui-i18n-report.test.ts
index 579b76c5a215..79ed59575686 100644
--- a/src/scripts/control-ui-i18n-report.test.ts
+++ b/src/scripts/control-ui-i18n-report.test.ts
@@ -34,12 +34,9 @@ const entries: RawCopyBaselineEntry[] = [
 ];
 
 describe("control-ui-i18n report helpers", () => {
-  it.each(["--surface", "--locale", "--top"])(
-    "rejects option-shaped values for %s",
-    (flag) => {
-      expect(() => parseArgs([flag, "-h"])).toThrow(`${flag} requires a value`);
-    },
-  );
+  it.each(["--surface", "--locale", "--top"])("rejects option-shaped values for %s", (flag) => {
+    expect(() => parseArgs([flag, "-h"])).toThrow(`${flag} requires a value`);
+  });
 
   it("rejects invalid numeric limits", () => {
     expect(() => parseArgs(["--top", "3abc"])).toThrow("--top must be a positive integer");
diff --git a/src/secrets/target-registry-data.ts b/src/secrets/target-registry-data.ts
index 7b04dc27a094..66eb61becd83 100644
--- a/src/secrets/target-registry-data.ts
+++ b/src/secrets/target-registry-data.ts
@@ -1,6 +1,6 @@
+import { listBundledPluginMetadata } from "../plugins/bundled-plugin-metadata.js";
 /** Builds the static and plugin-derived registry of secret migration targets. */
 import type { PluginManifestRecord } from "../plugins/manifest-registry.js";
-import { listBundledPluginMetadata } from "../plugins/bundled-plugin-metadata.js";
 import { resolvePluginMetadataSnapshot } from "../plugins/plugin-metadata-snapshot.js";
 import { loadChannelSecretContractApiForRecord } from "./channel-contract-api.js";
 import type { SecretTargetRegistryEntry } from "./target-registry-types.js";
diff --git a/src/shared/entry-status.ts b/src/shared/entry-status.ts
index e5cf2e6e178f..79725c57fd17 100644
--- a/src/shared/entry-status.ts
+++ b/src/shared/entry-status.ts
@@ -8,9 +8,7 @@ import {
   type RequirementsMetadata,
 } from "./requirements.js";
 
-type EntryMetadataRequirementsParams = Parameters<
-  typeof evaluateEntryMetadataRequirements
->[0];
+type EntryMetadataRequirementsParams = Parameters<typeof evaluateEntryMetadataRequirements>[0];
 
 /** Resolves entry presentation metadata and requirement eligibility in one shared shape. */
 export function evaluateEntryMetadataRequirements(params: {
diff --git a/src/status/status-plugin-health.ts b/src/status/status-plugin-health.ts
index 76c0e8766154..412da30d6dfb 100644
--- a/src/status/status-plugin-health.ts
+++ b/src/status/status-plugin-health.ts
@@ -224,9 +224,9 @@ function formatCount(count: number, noun: string): string {
   return `${count} ${noun}${count === 1 ? "" : "s"}`;
 }
 
-export function formatCompactPluginHealthLine(snapshot: StatusPluginHealthSnapshot):
-  | string
-  | undefined {
+export function formatCompactPluginHealthLine(
+  snapshot: StatusPluginHealthSnapshot,
+): string | undefined {
   const loadErrors = snapshot.plugins.filter((plugin) => plugin.status === "error").length;
   const dependencyIssues = snapshot.plugins.filter(hasDependencyIssue).length;
   const diagnosticErrors = countProblemDiagnostics(getReportableDiagnostics(snapshot)).errors;
diff --git a/src/status/status-text.types.ts b/src/status/status-text.types.ts
index 9ef5af420b2c..3de92bacc15d 100644
--- a/src/status/status-text.types.ts
+++ b/src/status/status-text.types.ts
@@ -1,3 +1,4 @@
+import type { FastMode } from "@openclaw/normalization-core/string-coerce";
 // Status text types describe runtime status records used by status rendering.
 import type {
   ElevatedLevel,
@@ -8,7 +9,6 @@ import type {
 import type { SessionEntry, SessionScope } from "../config/sessions.js";
 import type { OpenClawConfig } from "../config/types.openclaw.js";
 import type { MediaUnderstandingDecision } from "../media-understanding/types.js";
-import type { FastMode } from "@openclaw/normalization-core/string-coerce";
 
 // Input contract for buildStatusText. Most fields are already resolved by the
 // caller so status rendering can stay presentation-focused and side-effect-light.
diff --git a/src/talk/agent-consult-tool.test.ts b/src/talk/agent-consult-tool.test.ts
index b0667567ede3..1144059f6e0c 100644
--- a/src/talk/agent-consult-tool.test.ts
+++ b/src/talk/agent-consult-tool.test.ts
@@ -1,6 +1,5 @@
 // Agent consult tool tests cover tool payload validation for consult requests.
 import { describe, expect, it } from "vitest";
-import type { RealtimeVoiceTool } from "./provider-types.js";
 import {
   buildRealtimeVoiceAgentConsultChatMessage,
   buildRealtimeVoiceAgentConsultPrompt,
@@ -12,6 +11,7 @@ import {
   resolveRealtimeVoiceAgentConsultTools,
   resolveRealtimeVoiceAgentConsultToolsAllow,
 } from "./agent-consult-tool.js";
+import type { RealtimeVoiceTool } from "./provider-types.js";
 
 describe("realtime voice agent consult tool", () => {
   it("normalizes shared tool arguments for browser chat forwarding", () => {
diff --git a/src/talk/agent-consult-tool.ts b/src/talk/agent-consult-tool.ts
index 856656ad8f5a..14ed3fa4179f 100644
--- a/src/talk/agent-consult-tool.ts
+++ b/src/talk/agent-consult-tool.ts
@@ -232,7 +232,12 @@ export function buildRealtimeVoiceAgentConsultPrompt(params: {
 
 /** Collect only visible answer text from streamed delegated-agent payloads. */
 export function collectRealtimeVoiceAgentConsultVisibleText(
-  payloads: Array<{ text?: unknown; isError?: boolean; isReasoning?: boolean; isCommentary?: boolean }>,
+  payloads: Array<{
+    text?: unknown;
+    isError?: boolean;
+    isReasoning?: boolean;
+    isCommentary?: boolean;
+  }>,
 ): string | null {
   const chunks: string[] = [];
   for (const payload of payloads) {
diff --git a/src/web-search/runtime-types.ts b/src/web-search/runtime-types.ts
index eec9fdcf62df..46541fcb00eb 100644
--- a/src/web-search/runtime-types.ts
+++ b/src/web-search/runtime-types.ts
@@ -1,8 +1,6 @@
 // Web search runtime types describe search provider factories and dependencies.
 import type { OpenClawConfig } from "../config/types.openclaw.js";
-import type {
-  PluginWebSearchProviderEntry,
-} from "../plugins/web-provider-types.js";
+import type { PluginWebSearchProviderEntry } from "../plugins/web-provider-types.js";
 import type { RuntimeWebSearchMetadata } from "../secrets/runtime-web-tools.types.js";
 
 // Shared web_search runtime contracts. Keep these in a types-only module so
diff --git a/src/web-search/runtime.ts b/src/web-search/runtime.ts
index 70985d0d9d87..777a117deedc 100644
--- a/src/web-search/runtime.ts
+++ b/src/web-search/runtime.ts
@@ -4,6 +4,12 @@ import {
   normalizeOptionalLowercaseString,
 } from "@openclaw/normalization-core/string-coerce";
 import { uniqueStrings } from "@openclaw/normalization-core/string-normalization";
+import {
+  hasWebProviderEntryCredential,
+  providerRequiresCredential,
+  readWebProviderEnvValue,
+  resolveWebProviderConfig,
+} from "../../packages/web-content-core/src/provider-runtime-shared.js";
 import { resolveDefaultAgentDir } from "../agents/agent-scope-config.js";
 import { hasAuthProfileForProvider } from "../agents/tools/model-config.helpers.js";
 import {
@@ -22,12 +28,6 @@ import {
 import { sortWebSearchProvidersForAutoDetect } from "../plugins/web-search-providers.shared.js";
 import { getActiveRuntimeWebToolsMetadata } from "../secrets/runtime-web-tools-state.js";
 import type { RuntimeWebSearchMetadata } from "../secrets/runtime-web-tools.types.js";
-import {
-  hasWebProviderEntryCredential,
-  providerRequiresCredential,
-  readWebProviderEnvValue,
-  resolveWebProviderConfig,
-} from "../../packages/web-content-core/src/provider-runtime-shared.js";
 import type {
   ResolveWebSearchDefinitionParams,
   RunWebSearchParams,
diff --git a/taxonomy.yaml b/taxonomy.yaml
index 5db01e3bbad5..85acf80b26ba 100644
--- a/taxonomy.yaml
+++ b/taxonomy.yaml
@@ -3,7 +3,7 @@ process_version: 3
 title: Maturity scorecard
 summary: Draft maturity scorecard model for OpenClaw subsystems, features, apps, and platforms.
 snapshot:
-  date: '2026-05-26'
+  date: "2026-05-26"
   source_ref: origin/main@41eef4a7965
 profiles:
   - id: smoke-ci
@@ -286,8 +286,8 @@ surfaces:
           - docs/gateway/protocol.md
           - docs/gateway/security/index.md
         search_anchors:
-          - 'gateway runtime and websocket protocol gateway runtime websocket feature matrix: approval and execution safety'
-          - 'gateway runtime websocket feature matrix: approval and execution safety'
+          - "gateway runtime and websocket protocol gateway runtime websocket feature matrix: approval and execution safety"
+          - "gateway runtime websocket feature matrix: approval and execution safety"
         category_note: approval-and-execution-safety.md
         human_lts_override: true
       - name: HTTP APIs
@@ -354,43 +354,43 @@ surfaces:
         features:
           - name: Health APIs
             coverageIds: [gateway.health-apis]
-            description: '`health` and `status` RPCs.'
+            description: "`health` and `status` RPCs."
           - name: Identity and presence APIs
             coverageIds: [gateway.identity-and-presence-apis]
-            description: '`gateway.identity.get`, `system.info`, `system-presence`, `system-event`, and heartbeat RPCs.'
+            description: "`gateway.identity.get`, `system.info`, `system-presence`, `system-event`, and heartbeat RPCs."
           - name: Model APIs
             coverageIds: [gateway.model-apis]
-            description: '`models.list` RPCs.'
+            description: "`models.list` RPCs."
           - name: Usage and memory APIs
             coverageIds: [gateway.usage-and-memory-apis]
             description: Usage summaries and memory readiness RPCs.
           - name: Session APIs
             coverageIds: [agents.subagents, gateway.sessions-list, tools.session-status]
-            description: '`sessions.*` RPCs.'
+            description: "`sessions.*` RPCs."
           - name: Chat APIs
             coverageIds: [gateway.chat-apis]
-            description: '`chat.*` and `agent.wait` RPCs.'
+            description: "`chat.*` and `agent.wait` RPCs."
           - name: Channel APIs
             coverageIds: [gateway.channel-apis]
-            description: '`channels.status` and `channels.logout` RPCs.'
+            description: "`channels.status` and `channels.logout` RPCs."
           - name: Web login and wake APIs
             coverageIds: [gateway.web-login-and-wake-apis]
-            description: '`web.login.*`, `push.test`, and `voicewake.*` RPCs.'
+            description: "`web.login.*`, `push.test`, and `voicewake.*` RPCs."
           - name: Config and secrets APIs
             coverageIds: [gateway.config-and-secrets-apis]
-            description: '`config.*` and `secrets.*` RPCs.'
+            description: "`config.*` and `secrets.*` RPCs."
           - name: Update and setup APIs
             coverageIds: [gateway.update-and-setup-apis]
-            description: '`update.*` and `wizard.*` RPCs.'
+            description: "`update.*` and `wizard.*` RPCs."
           - name: Agent and artifact APIs
             coverageIds: [gateway.agent-and-artifact-apis]
-            description: '`agents.*`, agent files, environments, and artifact RPCs.'
+            description: "`agents.*`, agent files, environments, and artifact RPCs."
           - name: Task and automation APIs
             coverageIds: [gateway.task-and-automation-apis]
-            description: '`wake`, `cron.*`, and `tasks.*` RPCs.'
+            description: "`wake`, `cron.*`, and `tasks.*` RPCs."
           - name: Tool and skill APIs
             coverageIds: [gateway.tool-and-skill-apis]
-            description: '`commands.list`, `tools.*`, and `skills.*` RPCs.'
+            description: "`commands.list`, `tools.*`, and `skills.*` RPCs."
           - name: Request and event envelopes
             coverageIds: [gateway.request-and-event-envelopes]
             description: Request, response, and event frame shapes.
@@ -509,13 +509,13 @@ surfaces:
             description: Node capability declaration at connect time.
           - name: Node inventory
             coverageIds: [gateway.node-inventory]
-            description: '`node.list`, `node.describe`, and naming/state visibility.'
+            description: "`node.list`, `node.describe`, and naming/state visibility."
           - name: Node actions
             coverageIds: [gateway.node-actions]
-            description: '`node.invoke` and `node.invoke.result`.'
+            description: "`node.invoke` and `node.invoke.result`."
           - name: Node events
             coverageIds: [gateway.node-events]
-            description: '`node.event`, especially `node.presence.alive`.'
+            description: "`node.event`, especially `node.presence.alive`."
           - name: Pending work delivery
             coverageIds: [gateway.pending-work-delivery]
             description: Pending work APIs for connected and disconnected nodes.
@@ -539,7 +539,7 @@ surfaces:
         features:
           - name: Health snapshots
             coverageIds: [telemetry.health-snapshots]
-            description: '`health` and `status` snapshots.'
+            description: "`health` and `status` snapshots."
           - name: Channel readiness
             coverageIds: [gateway.channel-readiness]
             description: Channel readiness probing through the running Gateway.
@@ -548,7 +548,7 @@ surfaces:
             description: Stability recorder output.
           - name: Payload diagnostics
             coverageIds: [gateway.payload-diagnostics]
-            description: '`payload.large` diagnostics.'
+            description: "`payload.large` diagnostics."
           - name: Diagnostics exports
             coverageIds: [gateway.diagnostics-exports]
             description: Diagnostics export contents, privacy model, and CLI/chat triggers.
@@ -606,7 +606,7 @@ surfaces:
         features:
           - name: Role negotiation
             coverageIds: [gateway.role-negotiation]
-            description: '`operator` versus `node` role negotiation.'
+            description: "`operator` versus `node` role negotiation."
           - name: Operator permissions
             coverageIds: [gateway.operator-permissions]
             description: Core operator scopes such as `operator.read`, `operator.write`, `operator.admin`, `operator.approvals`, `operator.pairing`, and `operator.talk.secrets`.
@@ -623,8 +623,8 @@ surfaces:
           - docs/gateway/protocol.md
           - docs/gateway/security/index.md
         search_anchors:
-          - 'gateway runtime and websocket protocol gateway runtime websocket feature matrix: roles, scopes, and operator policy'
-          - 'gateway runtime websocket feature matrix: roles, scopes, and operator policy'
+          - "gateway runtime and websocket protocol gateway runtime websocket feature matrix: roles, scopes, and operator policy"
+          - "gateway runtime websocket feature matrix: roles, scopes, and operator policy"
         category_note: roles-scopes-and-operator-policy.md
         human_lts_override: true
       - name: Gateway Lifecycle
@@ -647,7 +647,7 @@ surfaces:
             description: Bind and port precedence across CLI flags, env vars, config, and persisted supervisor metadata.
           - name: Config reload
             coverageIds: [config.hot-apply, plugins.hot-reload, plugins.lifecycle, plugins.skills]
-            description: 'Config reload modes: `off`, `hot`, `restart`, and `hybrid`.'
+            description: "Config reload modes: `off`, `hot`, `restart`, and `hybrid`."
           - name: Multi-gateway isolation
             coverageIds: [gateway.multi-gateway-isolation]
             description: Multiple-gateway isolation on one host, including config/state/workspace separation.
@@ -706,7 +706,7 @@ surfaces:
             description: Protocol range negotiation (`minProtocol`/`maxProtocol`).
           - name: hello-ok snapshot
             coverageIds: [gateway.hello-ok-snapshot]
-            description: 'Required `hello-ok` payload structure: server identity, negotiated auth, feature discovery, snapshot, and policy limits.'
+            description: "Required `hello-ok` payload structure: server identity, negotiated auth, feature discovery, snapshot, and policy limits."
           - name: Startup retry
             coverageIds: [gateway.startup-retry]
             description: Retryable startup-sidecar `UNAVAILABLE` behavior during Gateway startup.
@@ -726,7 +726,7 @@ surfaces:
         human_lts_override: true
     last_score_run:
       status: complete
-      completed_at: '2026-05-31'
+      completed_at: "2026-05-31"
       by: codex
       source_ref: null
       process_version: 3
@@ -954,7 +954,7 @@ surfaces:
         human_lts_override: true
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -1008,10 +1008,10 @@ surfaces:
             description: Deprecated or compatibility subpaths continue to resolve during author migrations.
           - name: Plugin manifest
             coverageIds: [plugins.manifest]
-            description: '`openclaw.plugin.json` declares plugin identity, capabilities, and config schema.'
+            description: "`openclaw.plugin.json` declares plugin identity, capabilities, and config schema."
           - name: Package metadata
             coverageIds: [plugins.package-metadata]
-            description: '`package.json` carries the required `openclaw` metadata for discovery and release flows.'
+            description: "`package.json` carries the required `openclaw` metadata for discovery and release flows."
           - name: Runtime compatibility
             coverageIds: [plugins.runtime-compatibility]
             description: Plugin packages declare supported runtime and plugin API compatibility.
@@ -1102,7 +1102,21 @@ surfaces:
             coverageIds: [plugins.setup-flows]
             description: Operators can run plugin setup flows without fully activating runtime behavior.
           - name: Runtime activation
-            coverageIds: [config.hot-apply, gateway.performance, models.live-openai, plugins.before-prompt-build, plugins.before-tool-call, plugins.hot-reload, plugins.kitchen-sink, plugins.lifecycle, plugins.plugin-tools, plugins.runtime, plugins.skills, runtime.gateway-log-sentinel.plugin-hooks]
+            coverageIds:
+              [
+                config.hot-apply,
+                gateway.performance,
+                models.live-openai,
+                plugins.before-prompt-build,
+                plugins.before-tool-call,
+                plugins.hot-reload,
+                plugins.kitchen-sink,
+                plugins.lifecycle,
+                plugins.plugin-tools,
+                plugins.runtime,
+                plugins.skills,
+                runtime.gateway-log-sentinel.plugin-hooks,
+              ]
             description: Enabled plugins activate and register runtime behavior after manifest validation succeeds.
           - name: Enable and disable
             coverageIds: [config.hot-apply, plugins.hot-reload, plugins.lifecycle]
@@ -1114,7 +1128,14 @@ surfaces:
             coverageIds: [plugins.dependency-repair]
             description: Runtime can detect and repair missing or stale plugin dependencies.
           - name: Install update and uninstall
-            coverageIds: [plugins.hot-install, plugins.skills, runtime.gateway-restart, runtime.package-update, runtime.update-run]
+            coverageIds:
+              [
+                plugins.hot-install,
+                plugins.skills,
+                runtime.gateway-restart,
+                runtime.package-update,
+                runtime.update-run,
+              ]
             description: Install, update, and uninstall lifecycle behavior is defined and tested.
         docs:
           - docs/plugins/architecture.md
@@ -1163,7 +1184,19 @@ surfaces:
             coverageIds: [plugins.provider-plugins]
             description: Provider plugins register models and capabilities with the runtime.
           - name: Tool plugins
-            coverageIds: [gateway.performance, models.live-openai, plugins.before-prompt-build, plugins.before-tool-call, plugins.kitchen-sink, plugins.lifecycle, plugins.mcp-tools, plugins.plugin-tools, runtime.gateway-log-sentinel.plugin-hooks, tools.invocation]
+            coverageIds:
+              [
+                gateway.performance,
+                models.live-openai,
+                plugins.before-prompt-build,
+                plugins.before-tool-call,
+                plugins.kitchen-sink,
+                plugins.lifecycle,
+                plugins.mcp-tools,
+                plugins.plugin-tools,
+                runtime.gateway-log-sentinel.plugin-hooks,
+                tools.invocation,
+              ]
             description: Tool plugins register discoverable tools and static metadata without ambiguous runtime ownership.
           - name: Model catalogs
             coverageIds: [plugins.model-catalogs]
@@ -1175,7 +1208,17 @@ surfaces:
             coverageIds: [plugins.web-search-and-fetch]
             description: Provider or tool plugins can expose web search and fetch capabilities.
           - name: Mixed plugins
-            coverageIds: [config.hot-apply, config.restart-apply, plugins.capabilities, plugins.hot-install, plugins.runtime, plugins.skills, tools.invocation, tools.skill-invocation]
+            coverageIds:
+              [
+                config.hot-apply,
+                config.restart-apply,
+                plugins.capabilities,
+                plugins.hot-install,
+                plugins.runtime,
+                plugins.skills,
+                tools.invocation,
+                tools.skill-invocation,
+              ]
             description: Mixed provider and tool plugins are supported without ambiguous ownership.
         docs:
           - docs/plugins/sdk-provider-plugins.md
@@ -1270,7 +1313,14 @@ surfaces:
             coverageIds: [plugins.docker-lifecycle-suites]
             description: Docker-based end-to-end scripts validate packaged plugin lifecycle flows.
           - name: Smoke tests
-            coverageIds: [gateway.performance, models.live-openai, plugins.kitchen-sink, plugins.lifecycle, plugins.plugin-tools]
+            coverageIds:
+              [
+                gateway.performance,
+                models.live-openai,
+                plugins.kitchen-sink,
+                plugins.lifecycle,
+                plugins.plugin-tools,
+              ]
             description: Local and packaged smoke tests catch broken installs before release.
         docs:
           - docs/plugins/sdk-testing.md
@@ -1285,7 +1335,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -1301,13 +1351,47 @@ surfaces:
         id: agent-turn-execution
         features:
           - name: Turn startup and runtime choice
-            coverageIds: [agents.create, agents.instructions, channels.discord-config, config.crestodian-setup, runtime.first-action, runtime.multi-turn-continuity, runtime.long-context]
+            coverageIds:
+              [
+                agents.create,
+                agents.instructions,
+                channels.discord-config,
+                config.crestodian-setup,
+                runtime.first-action,
+                runtime.multi-turn-continuity,
+                runtime.long-context,
+              ]
             description: Starting an agent turn and choosing gateway versus embedded runtime execution.
           - name: Session and run coordination
-            coverageIds: [agents.subagents, channels.dedup, channels.dm, channels.qa-channel, channels.reconnect, channels.streaming, channels.threads, commitments.heartbeat-target-none, commitments.scope, personal.channel-replies, runtime.codex-plugin.lifecycle, runtime.delivery, runtime.fallback-delivery, runtime.gateway-restart, runtime.restart-recovery, runtime.turn-ordering]
+            coverageIds:
+              [
+                agents.subagents,
+                channels.dedup,
+                channels.dm,
+                channels.qa-channel,
+                channels.reconnect,
+                channels.streaming,
+                channels.threads,
+                commitments.heartbeat-target-none,
+                commitments.scope,
+                personal.channel-replies,
+                runtime.codex-plugin.lifecycle,
+                runtime.delivery,
+                runtime.fallback-delivery,
+                runtime.gateway-restart,
+                runtime.restart-recovery,
+                runtime.turn-ordering,
+              ]
             description: Establishing session and run ids, queue locks, and related execution coordination.
           - name: Abort and terminal outcomes
-            coverageIds: [channels.streaming, runtime.delivery, runtime.fallback-delivery, runtime.long-context, runtime.long-run-stability]
+            coverageIds:
+              [
+                channels.streaming,
+                runtime.delivery,
+                runtime.fallback-delivery,
+                runtime.long-context,
+                runtime.long-run-stability,
+              ]
             description: Honoring aborts, timing provider/model work, and emitting terminal outcomes.
         docs:
           - docs/concepts/agent-loop.md
@@ -1329,7 +1413,15 @@ surfaces:
             coverageIds: [runtime.cli-runtime-aliases]
             description: Runtime aliases and CLI-based execution paths such as Claude CLI and Gemini CLI.
           - name: Subagent turns
-            coverageIds: [agents.subagents, agents.synthesis, channels.qa-channel, gateway.sessions-list, runtime.delivery, tools.sessions-spawn]
+            coverageIds:
+              [
+                agents.subagents,
+                agents.synthesis,
+                channels.qa-channel,
+                gateway.sessions-list,
+                runtime.delivery,
+                tools.sessions-spawn,
+              ]
             description: Spawning, delivering, and announcing subagent work outside the default embedded path.
           - name: Runtime recovery
             coverageIds: [runtime.recovery]
@@ -1409,10 +1501,22 @@ surfaces:
             coverageIds: [models.claude-cli, models.provider-capabilities]
             description: Selecting the model reference for an agent turn from user or configured defaults.
           - name: Provider and runtime overrides
-            coverageIds: [models.switching, models.thinking, runtime.session-continuity, runtime.tool-continuity]
+            coverageIds:
+              [
+                models.switching,
+                models.thinking,
+                runtime.session-continuity,
+                runtime.tool-continuity,
+              ]
             description: Handling provider selection and runtime overrides for a turn.
           - name: Thinking and context settings
-            coverageIds: [models.switching, models.thinking, runtime.reasoning-visibility, runtime.session-continuity]
+            coverageIds:
+              [
+                models.switching,
+                models.thinking,
+                runtime.reasoning-visibility,
+                runtime.session-continuity,
+              ]
             description: Resolving thinking and context settings as part of model selection.
           - name: Invalid route recovery
             coverageIds: [runtime.invalid-route-recovery]
@@ -1438,7 +1542,14 @@ surfaces:
             coverageIds: [auth-profiles.provider-selection, runtime.codex-plugin.auth]
             description: Selecting and validating provider auth profiles.
           - name: Credential health checks
-            coverageIds: [gateway.performance, models.live-openai, plugins.kitchen-sink, plugins.lifecycle, plugins.plugin-tools]
+            coverageIds:
+              [
+                gateway.performance,
+                models.live-openai,
+                plugins.kitchen-sink,
+                plugins.lifecycle,
+                plugins.plugin-tools,
+              ]
             description: Doctor, status, and related credential health checks and repair signals.
           - name: Auth failover
             coverageIds: [runtime.auth-failover]
@@ -1482,7 +1593,15 @@ surfaces:
             coverageIds: [channels.streaming, runtime.delivery, runtime.fallback-delivery]
             description: Streaming block updates and partial assistant output before final delivery.
           - name: Progress visibility
-            coverageIds: [models.thinking, personal.failure-recovery, personal.no-fake-progress, personal.task-followthrough, runtime.reasoning-visibility, tools.evidence]
+            coverageIds:
+              [
+                models.thinking,
+                personal.failure-recovery,
+                personal.no-fake-progress,
+                personal.task-followthrough,
+                runtime.reasoning-visibility,
+                tools.evidence,
+              ]
             description: Progress preview events and item lifecycle updates surfaced during execution.
         docs:
           - docs/concepts/streaming.md
@@ -1497,13 +1616,40 @@ surfaces:
         id: tool-calls-and-response-handling
         features:
           - name: Tool-call handling
-            coverageIds: [models.switching, personal.no-fake-progress, personal.task-followthrough, personal.tool-safety, runtime.approvals, runtime.codex-native-workspace.read, runtime.prompt-compatibility, runtime.tool-continuity, tools.apply-patch, tools.edit, tools.evidence, tools.followthrough, tools.fs.list, tools.fs.read, tools.fs.write, tools.grep, workspace.artifacts]
+            coverageIds:
+              [
+                models.switching,
+                personal.no-fake-progress,
+                personal.task-followthrough,
+                personal.tool-safety,
+                runtime.approvals,
+                runtime.codex-native-workspace.read,
+                runtime.prompt-compatibility,
+                runtime.tool-continuity,
+                tools.apply-patch,
+                tools.edit,
+                tools.evidence,
+                tools.followthrough,
+                tools.fs.list,
+                tools.fs.read,
+                tools.fs.write,
+                tools.grep,
+                workspace.artifacts,
+              ]
             description: Reliable tool-call behavior across providers, including malformed or provider-specific payload differences.
           - name: Usage and response reporting
             coverageIds: [agents.subagents, agents.synthesis]
             description: Response ids and usage accounting normalized into operator-visible runtime behavior.
           - name: Failure recovery
-            coverageIds: [personal.failure-recovery, personal.no-fake-progress, runtime.empty-response-recovery, runtime.reasoning-only-recovery, runtime.retry-policy, tools.evidence]
+            coverageIds:
+              [
+                personal.failure-recovery,
+                personal.no-fake-progress,
+                runtime.empty-response-recovery,
+                runtime.reasoning-only-recovery,
+                runtime.retry-policy,
+                tools.evidence,
+              ]
             description: Failure-stream finalization and cleanup when provider output is malformed or incomplete.
         docs:
           - docs/concepts/agent-loop.md
@@ -1518,7 +1664,8 @@ surfaces:
         id: tool-execution-controls
         features:
           - name: Tool availability rules
-            coverageIds: [qa.artifact-safety, runtime.inventory, runtime.tool-policy, security.redaction]
+            coverageIds:
+              [qa.artifact-safety, runtime.inventory, runtime.tool-policy, security.redaction]
             description: Which tools are available during a turn after policy resolution and provider-based suppression.
           - name: Sandboxed exec behavior
             coverageIds: [runtime.sandboxed-exec-behavior]
@@ -1547,7 +1694,7 @@ surfaces:
         human_lts_override: true
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -1583,13 +1730,26 @@ surfaces:
         id: token-management
         features:
           - name: Compaction
-            coverageIds: [runtime.compaction, runtime.empty-response-recovery, runtime.reasoning-only-recovery, runtime.retry-policy]
+            coverageIds:
+              [
+                runtime.compaction,
+                runtime.empty-response-recovery,
+                runtime.reasoning-only-recovery,
+                runtime.retry-policy,
+              ]
             description: Covers Compaction across manual and automatic compaction, preemptive overflow checks, context-window estimation, session pruning, tool-result trimming, compaction providers, retry/timeout behavior, and compacted transcript checkpoints.
           - name: Pruning
             coverageIds: [session.pruning]
             description: Covers Pruning across manual and automatic compaction, preemptive overflow checks, context-window estimation, session pruning, tool-result trimming, compaction providers, retry/timeout behavior, and compacted transcript checkpoints.
           - name: Token Pressure
-            coverageIds: [runtime.codex-app-server, runtime.multi-turn-continuity, runtime.gateway-log-sentinel.codex-progress, runtime.long-context, runtime.long-run-stability]
+            coverageIds:
+              [
+                runtime.codex-app-server,
+                runtime.multi-turn-continuity,
+                runtime.gateway-log-sentinel.codex-progress,
+                runtime.long-context,
+                runtime.long-run-stability,
+              ]
             description: Covers Token Pressure across manual and automatic compaction, preemptive overflow checks, context-window estimation, session pruning, tool-result trimming, compaction providers, retry/timeout behavior, and compacted transcript checkpoints.
         docs:
           - docs/concepts/compaction.md
@@ -1607,7 +1767,13 @@ surfaces:
         id: context-engine
         features:
           - name: Context Engine
-            coverageIds: [docs.discovery, workspace.artifacts, workspace.long-running-task, workspace.repo-discovery]
+            coverageIds:
+              [
+                docs.discovery,
+                workspace.artifacts,
+                workspace.long-running-task,
+                workspace.repo-discovery,
+              ]
             description: Covers Context Engine across context-engine selection, registry, host compatibility, legacy fallback, assemble/ingest/after-turn/compact lifecycle, runtime context projection, and the boundary between OpenClaw context assembly and native harness history.
           - name: Runtime Assembly
             coverageIds: [agents.openclaw-harness, models.codex-cli, workspace.planning]
@@ -1656,7 +1822,17 @@ surfaces:
             coverageIds: [session.maintenance-warnings]
             description: Covers restart maintenance warnings, delivery queues, memory/session cleanup signals, and operator-visible maintenance state.
           - name: Session and transcript recovery
-            coverageIds: [config.restart-apply, memory.failure-handling, runtime.delivery, runtime.fallbacks, runtime.gateway-restart, runtime.package-update, runtime.restart-recovery, runtime.update-run]
+            coverageIds:
+              [
+                config.restart-apply,
+                memory.failure-handling,
+                runtime.delivery,
+                runtime.fallbacks,
+                runtime.gateway-restart,
+                runtime.package-update,
+                runtime.restart-recovery,
+                runtime.update-run,
+              ]
             description: Covers restart recovery, orphaned subagent resume, transcript repair, and safe restoration of session state after failures.
         docs:
           - docs/gateway/diagnostics.md
@@ -1675,10 +1851,12 @@ surfaces:
         id: core-prompts-and-context
         features:
           - name: Instruction Profile
-            coverageIds: [agents.instructions, character.persona, runtime.first-action, workspace.artifacts]
+            coverageIds:
+              [agents.instructions, character.persona, runtime.first-action, workspace.artifacts]
             description: Covers Instruction Profile across `AGENTS.md`, `USER.md`, `IDENTITY.md`, `SOUL.md`, project context injection, bootstrap truncation, untrusted supplemental context, context visibility config, and runtime-context leakage prevention.
           - name: Context Visibility
-            coverageIds: [docs.discovery, models.codex-cli, runtime.no-meta-leak, workspace.repo-discovery]
+            coverageIds:
+              [docs.discovery, models.codex-cli, runtime.no-meta-leak, workspace.repo-discovery]
             description: Covers Context Visibility across `AGENTS.md`, `USER.md`, `IDENTITY.md`, `SOUL.md`, project context injection, bootstrap truncation, untrusted supplemental context, context visibility config, and runtime-context leakage prevention.
         docs:
           - docs/concepts/context.md
@@ -1698,16 +1876,35 @@ surfaces:
             coverageIds: [session.memory-backend-storage]
             description: Covers Memory Backend Storage across memory backend config, SQLite schema, vector acceleration, embedding provider selection, remote embedding fetch, QMD process/query parsing, session transcript indexing for search, extra paths, and backend security boundaries.
           - name: Embedding Search
-            coverageIds: [channels.qa-channel, memory.active-recall, memory.ranking, memory.recall, personal.memory-recall]
+            coverageIds:
+              [
+                channels.qa-channel,
+                memory.active-recall,
+                memory.ranking,
+                memory.recall,
+                personal.memory-recall,
+              ]
             description: Covers Embedding Search across memory backend config, SQLite schema, vector acceleration, embedding provider selection, remote embedding fetch, QMD process/query parsing, session transcript indexing for search, extra paths, and backend security boundaries.
           - name: Memory Files
             coverageIds: [memory.dreaming, memory.promotion, qa.artifact-safety]
             description: Covers Memory Files across root memory files, active memory, memory search/get/store tool exposure, memory prompt sections, memory flush plans, session-memory hook behavior, and memory plugin capability registration visible to agents.
           - name: Memory search and store tools
-            coverageIds: [channels.group-messages, channels.qa-channel, memory.active-recall, memory.ranking, memory.recall, memory.tools, personal.memory-recall, tools.memory.add, tools.memory.recall]
+            coverageIds:
+              [
+                channels.group-messages,
+                channels.qa-channel,
+                memory.active-recall,
+                memory.ranking,
+                memory.recall,
+                memory.tools,
+                personal.memory-recall,
+                tools.memory.add,
+                tools.memory.recall,
+              ]
             description: Covers memory search/get/store tool exposure, memory prompt sections, memory flush plans, session-memory hook behavior, and memory plugin capability registration visible to agents.
           - name: Active Memory
-            coverageIds: [channels.qa-channel, memory.active-recall, memory.recall, personal.memory-recall]
+            coverageIds:
+              [channels.qa-channel, memory.active-recall, memory.recall, personal.memory-recall]
             description: Covers Active Memory across root memory files, active memory, memory search/get/store tool exposure, memory prompt sections, memory flush plans, session-memory hook behavior, and memory plugin capability registration visible to agents.
         docs:
           - docs/reference/memory-config.md
@@ -1768,7 +1965,7 @@ surfaces:
         human_lts_override: true
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -1849,7 +2046,14 @@ surfaces:
             coverageIds: [channels.group-visible-replies, channels.qa-channel, tools.message]
             description: Mention-required, always-on, and ambient room-event modes
           - name: Native threads
-            coverageIds: [channels.dm, channels.qa-channel, channels.threads, memory.thread-isolation, personal.channel-replies]
+            coverageIds:
+              [
+                channels.dm,
+                channels.qa-channel,
+                channels.threads,
+                memory.thread-isolation,
+                personal.channel-replies,
+              ]
             description: Native threads, topics, parent-child bindings, and thread spawn behavior
           - name: Broadcast groups
             coverageIds: [channels.broadcast-groups]
@@ -1876,7 +2080,12 @@ surfaces:
             coverageIds: [security.dm-pairing, channels.pairing-gate]
             description: DM pairing and allowFrom sender controls
           - name: Group/channel allowlists
-            coverageIds: [channels.access-policy, channels.allowlist-hot-reload, channels.group-channel-allowlists]
+            coverageIds:
+              [
+                channels.access-policy,
+                channels.allowlist-hot-reload,
+                channels.group-channel-allowlists,
+              ]
             description: Group/channel allowlists and sender allowlists
           - name: Access group expansion
             coverageIds: [channels.access-group-expansion]
@@ -1929,7 +2138,27 @@ surfaces:
         id: outbound-delivery-and-reply-pipeline
         features:
           - name: Automatic final reply delivery
-            coverageIds: [agents.subagents, channels.dedup, channels.direct-visible-replies, channels.dm, channels.group-visible-replies, channels.qa-channel, channels.reconnect, channels.restart-resume, channels.streaming, channels.threads, commitments.heartbeat-target-none, commitments.scope, personal.channel-replies, runtime.delivery, runtime.fallback-delivery, runtime.gateway-restart, runtime.restart-recovery, tools.message]
+            coverageIds:
+              [
+                agents.subagents,
+                channels.dedup,
+                channels.direct-visible-replies,
+                channels.dm,
+                channels.group-visible-replies,
+                channels.qa-channel,
+                channels.reconnect,
+                channels.restart-resume,
+                channels.streaming,
+                channels.threads,
+                commitments.heartbeat-target-none,
+                commitments.scope,
+                personal.channel-replies,
+                runtime.delivery,
+                runtime.fallback-delivery,
+                runtime.gateway-restart,
+                runtime.restart-recovery,
+                tools.message,
+              ]
             description: Automatic final reply delivery and strict message-tool-only visible delivery
           - name: Durable outbound send orchestration
             coverageIds: [channels.dedup, channels.reconnect, runtime.delivery]
@@ -1938,7 +2167,16 @@ surfaces:
             coverageIds: [channels.message-actions, channels.qa-channel]
             description: Reply pipeline transforms, typing callbacks, draft streaming, and status reactions
           - name: Provider outbound adapter bridge
-            coverageIds: [channels.direct-visible-replies, channels.group-visible-replies, channels.qa-channel, channels.webchat, runtime.direct-reply-routing, tools.message, tools.message-tool]
+            coverageIds:
+              [
+                channels.direct-visible-replies,
+                channels.group-visible-replies,
+                channels.qa-channel,
+                channels.webchat,
+                runtime.direct-reply-routing,
+                tools.message,
+                tools.message-tool,
+              ]
             description: Provider outbound adapter bridge and message capabilities
         docs:
           - docs/channels/groups.md
@@ -1956,7 +2194,8 @@ surfaces:
         id: conversation-routing-and-delivery
         features:
           - name: Inbound conversation routing
-            coverageIds: [channels.dm, channels.qa-channel, channels.threads, personal.channel-replies]
+            coverageIds:
+              [channels.dm, channels.qa-channel, channels.threads, personal.channel-replies]
             description: Inbound and command conversation resolution across sessions, threads, and provider-owned targets.
           - name: Session key construction
             coverageIds: [memory.session-key-construction]
@@ -1971,7 +2210,28 @@ surfaces:
             coverageIds: [channels.thread-parent-child-placement]
             description: Thread/parent-child placement and provider-owned target normalization
           - name: Plugin registry resolution
-            coverageIds: [agents.subagents, channels.direct-visible-replies, channels.dm, channels.group-messages, channels.group-visible-replies, channels.message-actions, channels.qa-channel, channels.threads, media.image-generation, media.image-understanding, memory.recall, personal.channel-replies, personal.memory-recall, personal.reminders, runtime.delivery, scheduling.cron, scheduling.dedup, tools.message, ui.control]
+            coverageIds:
+              [
+                agents.subagents,
+                channels.direct-visible-replies,
+                channels.dm,
+                channels.group-messages,
+                channels.group-visible-replies,
+                channels.message-actions,
+                channels.qa-channel,
+                channels.threads,
+                media.image-generation,
+                media.image-understanding,
+                memory.recall,
+                personal.channel-replies,
+                personal.memory-recall,
+                personal.reminders,
+                runtime.delivery,
+                scheduling.cron,
+                scheduling.dedup,
+                tools.message,
+                ui.control,
+              ]
             description: Plugin registry resolution and scoped channel runtime creation
           - name: Channel account startup
             coverageIds: [channels.account-startup]
@@ -2030,7 +2290,7 @@ surfaces:
         human_lts_override: true
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -2046,7 +2306,14 @@ surfaces:
         id: approval-policy-and-tool-safeguards
         features:
           - name: Approval Policy
-            coverageIds: [personal.approval-denial, personal.tool-safety, runtime.approvals, tools.followthrough, tools.safety]
+            coverageIds:
+              [
+                personal.approval-denial,
+                personal.tool-safety,
+                runtime.approvals,
+                tools.followthrough,
+                tools.safety,
+              ]
             description: Covers Approval Policy across exec approval policy, host-local approval stores, allowlist and ask modes, dangerous tool safeguards, native/chat approval routing, plugin approval routing, approval decisions, approval binding, and operator-facing CLI management.
           - name: Dangerous Tool Safeguards
             coverageIds: [security.dangerous-tool-safeguards]
@@ -2119,13 +2386,13 @@ surfaces:
         features:
           - name: Channel Identity
             coverageIds: [security.channel-identity]
-            description: 'Covers Channel Identity across who can talk to OpenClaw through message channels: DM pairing codes, pairing stores, `dmPolicy`, `allowFrom`, and related channel identity, allowlists, and sender pairing behavior.'
+            description: "Covers Channel Identity across who can talk to OpenClaw through message channels: DM pairing codes, pairing stores, `dmPolicy`, `allowFrom`, and related channel identity, allowlists, and sender pairing behavior."
           - name: Allowlists
             coverageIds: [security.allowlists]
-            description: 'Covers Allowlists across who can talk to OpenClaw through message channels: DM pairing codes, pairing stores, `dmPolicy`, `allowFrom`, and related channel identity, allowlists, and sender pairing behavior.'
+            description: "Covers Allowlists across who can talk to OpenClaw through message channels: DM pairing codes, pairing stores, `dmPolicy`, `allowFrom`, and related channel identity, allowlists, and sender pairing behavior."
           - name: Sender Pairing
             coverageIds: [security.sender-pairing]
-            description: 'Covers Sender Pairing across who can talk to OpenClaw through message channels: DM pairing codes, pairing stores, `dmPolicy`, `allowFrom`, and related channel identity, allowlists, and sender pairing behavior.'
+            description: "Covers Sender Pairing across who can talk to OpenClaw through message channels: DM pairing codes, pairing stores, `dmPolicy`, `allowFrom`, and related channel identity, allowlists, and sender pairing behavior."
         docs:
           - docs/channels/pairing.md
           - docs/channels/telegram.md
@@ -2216,15 +2483,24 @@ surfaces:
         features:
           - name: Provider Auth Profiles
             coverageIds: [security.provider-auth-profiles]
-            description: 'Covers Provider Auth Profiles across provider credentials and auth health as a security/secrets surface: API keys, OAuth profiles, `auth-profiles.json`, auth order, and related provider auth profiles and api key health behavior.'
+            description: "Covers Provider Auth Profiles across provider credentials and auth health as a security/secrets surface: API keys, OAuth profiles, `auth-profiles.json`, auth order, and related provider auth profiles and api key health behavior."
           - name: API Key Health
             coverageIds: [security.api-key-health]
-            description: 'Covers API Key Health across provider credentials and auth health as a security/secrets surface: API keys, OAuth profiles, `auth-profiles.json`, auth order, and related provider auth profiles and api key health behavior.'
+            description: "Covers API Key Health across provider credentials and auth health as a security/secrets surface: API keys, OAuth profiles, `auth-profiles.json`, auth order, and related provider auth profiles and api key health behavior."
           - name: Secrets Storage
             coverageIds: [security.secrets-storage]
             description: Covers Secrets Storage across SecretRef contract and providers, runtime secret snapshots, gateway auth SecretRefs, auth-profile and generated model residues, and related secrets storage, redaction, and configuration hygiene behavior.
           - name: Redaction
-            coverageIds: [memory.dreaming, memory.promotion, personal.diagnostics, personal.redaction, qa.artifact-safety, runtime.tool-policy, security.redaction]
+            coverageIds:
+              [
+                memory.dreaming,
+                memory.promotion,
+                personal.diagnostics,
+                personal.redaction,
+                qa.artifact-safety,
+                runtime.tool-policy,
+                security.redaction,
+              ]
             description: Covers Redaction across SecretRef contract and providers, runtime secret snapshots, gateway auth SecretRefs, auth-profile and generated model residues, and related secrets storage, redaction, and configuration hygiene behavior.
           - name: Configuration Hygiene
             coverageIds: [security.configuration-hygiene]
@@ -2249,7 +2525,7 @@ surfaces:
         human_lts_override: true
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -2277,7 +2553,8 @@ surfaces:
             coverageIds: [telemetry.restart-logging]
             description: Restart logging and runtime snapshot evaluation
           - name: openclaw doctor
-            coverageIds: [runtime.codex-plugin.auth, runtime.codex-plugin.lifecycle, runtime.doctor-repair]
+            coverageIds:
+              [runtime.codex-plugin.auth, runtime.codex-plugin.lifecycle, runtime.doctor-repair]
             description: openclaw doctor, openclaw doctor --fix, --repair, --yes, --non-interactive, --deep, and --lint
           - name: Structured health checks
             coverageIds: [telemetry.structured-health-checks]
@@ -2298,7 +2575,14 @@ surfaces:
             coverageIds: [telemetry.gateway-rpc-health]
             description: Gateway RPC health and status
           - name: Cached health snapshots
-            coverageIds: [gateway.performance, models.live-openai, plugins.kitchen-sink, plugins.lifecycle, plugins.plugin-tools]
+            coverageIds:
+              [
+                gateway.performance,
+                models.live-openai,
+                plugins.kitchen-sink,
+                plugins.lifecycle,
+                plugins.plugin-tools,
+              ]
             description: Cached health snapshots, live probe refresh, sensitive fields gated by operator admin scope, and event-loop health attachment
         docs:
           - docs/gateway/health.md
@@ -2417,7 +2701,20 @@ surfaces:
             coverageIds: [telemetry.trusted-trace-context]
             description: Trusted trace context, W3C traceparent propagation to model calls, file-log correlation, content-capture controls, and redacted/bounded attributes
           - name: Model and runtime telemetry
-            coverageIds: [docker.runtime-validation, harness.qa-lab, harness.tool-trace-visibility, personal.failure-recovery, personal.no-fake-progress, personal.task-followthrough, runtime.qa-bus, telemetry.otel, telemetry.prometheus, tools.evidence, tools.trace]
+            coverageIds:
+              [
+                docker.runtime-validation,
+                harness.qa-lab,
+                harness.tool-trace-visibility,
+                personal.failure-recovery,
+                personal.no-fake-progress,
+                personal.task-followthrough,
+                runtime.qa-bus,
+                telemetry.otel,
+                telemetry.prometheus,
+                tools.evidence,
+                tools.trace,
+              ]
             description: Model, tool, message, session, queue, Talk, exec, webhook, context assembly, harness, and exporter-health signals
           - name: diagnostics-prometheus plugin install
             coverageIds: [telemetry.diagnostics-prometheus-plugin-install]
@@ -2479,12 +2776,12 @@ surfaces:
         human_lts_override: true
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
   - id: automation-cron-hooks-tasks-polling
-    name: 'Automation: cron, hooks, tasks, polling'
+    name: "Automation: cron, hooks, tasks, polling"
     family: core
     level: beta
     level_code: M3
@@ -2833,7 +3130,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -2850,28 +3147,28 @@ surfaces:
         features:
           - name: Local and remote media references
             coverageIds: [media.local-and-remote-media-references]
-            description: 'Covers Local and remote media references across Included: Local and remote media references, including plain paths, `file://`, HTTP(S), and related media file intake, storage, and secure access behavior.'
+            description: "Covers Local and remote media references across Included: Local and remote media references, including plain paths, `file://`, HTTP(S), and related media file intake, storage, and secure access behavior."
           - name: MIME and type detection
             coverageIds: [media.mime-and-type-detection]
-            description: 'Covers MIME and type detection across Included: Local and remote media references, including plain paths, `file://`, HTTP(S), and related media file intake, storage, and secure access behavior.'
+            description: "Covers MIME and type detection across Included: Local and remote media references, including plain paths, `file://`, HTTP(S), and related media file intake, storage, and secure access behavior."
           - name: Size caps and bounded reads
             coverageIds: [media.size-caps-and-bounded-reads]
-            description: 'Covers Size caps and bounded reads across Included: Local and remote media references, including plain paths, `file://`, HTTP(S), and related media file intake, storage, and secure access behavior.'
+            description: "Covers Size caps and bounded reads across Included: Local and remote media references, including plain paths, `file://`, HTTP(S), and related media file intake, storage, and secure access behavior."
           - name: Safe remote fetch
             coverageIds: [media.safe-remote-fetch]
-            description: 'Covers Safe remote fetch across Included: Local and remote media references, including plain paths, `file://`, HTTP(S), and related media file intake, storage, and secure access behavior.'
+            description: "Covers Safe remote fetch across Included: Local and remote media references, including plain paths, `file://`, HTTP(S), and related media file intake, storage, and secure access behavior."
           - name: Local root policy
             coverageIds: [media.local-root-policy]
-            description: 'Covers Local root policy across Included: Local and remote media references, including plain paths, `file://`, HTTP(S), and related media file intake, storage, and secure access behavior.'
+            description: "Covers Local root policy across Included: Local and remote media references, including plain paths, `file://`, HTTP(S), and related media file intake, storage, and secure access behavior."
           - name: Inbound media store
             coverageIds: [media.inbound-media-store]
-            description: 'Covers Inbound media store across Included: Local and remote media references, including plain paths, `file://`, HTTP(S), and related media file intake, storage, and secure access behavior.'
+            description: "Covers Inbound media store across Included: Local and remote media references, including plain paths, `file://`, HTTP(S), and related media file intake, storage, and secure access behavior."
           - name: PDF/document extraction dispatch
             coverageIds: [media.pdf-document-extraction-dispatch]
-            description: 'Covers PDF/document extraction dispatch across Included: Local and remote media references, including plain paths, `file://`, HTTP(S), and related media file intake, storage, and secure access behavior.'
+            description: "Covers PDF/document extraction dispatch across Included: Local and remote media references, including plain paths, `file://`, HTTP(S), and related media file intake, storage, and secure access behavior."
           - name: QR and media helper classification
             coverageIds: [media.qr-and-media-helper-classification]
-            description: 'Covers QR and media helper classification across Included: Local and remote media references, including plain paths, `file://`, HTTP(S), and related media file intake, storage, and secure access behavior.'
+            description: "Covers QR and media helper classification across Included: Local and remote media references, including plain paths, `file://`, HTTP(S), and related media file intake, storage, and secure access behavior."
         docs:
           - docs/tools/media-overview.md
           - docs/nodes/media-understanding.md
@@ -3032,7 +3329,13 @@ surfaces:
         id: media-generation
         features:
           - name: Image generation tool invocation
-            coverageIds: [channels.qa-channel, media.image-generation, tools.image-generate, tools.native-image-generation]
+            coverageIds:
+              [
+                channels.qa-channel,
+                media.image-generation,
+                tools.image-generate,
+                tools.native-image-generation,
+              ]
             description: Covers Image generation tool invocation across `image_generate`, model selection, provider registration, provider capability listing, and related image generation tool and provider routing behavior.
           - name: Image generation provider routing
             coverageIds: [media.image-generation, tools.native-image-generation]
@@ -3113,7 +3416,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -3322,7 +3625,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -3492,24 +3795,32 @@ surfaces:
         features:
           - name: Send and abort
             coverageIds: [ui.send-and-abort]
-            description: 'Covers Send and abort across browser chat composition and display UX after an authenticated Gateway connection exists: composer controls, slash commands, session and agent filtering, model/thinking overrides, and related chat composer and message rendering behavior.'
+            description: "Covers Send and abort across browser chat composition and display UX after an authenticated Gateway connection exists: composer controls, slash commands, session and agent filtering, model/thinking overrides, and related chat composer and message rendering behavior."
           - name: Session and agent picker
             coverageIds: [ui.session-and-agent-picker]
-            description: 'Covers Session and agent picker across browser chat composition and display UX after an authenticated Gateway connection exists: composer controls, slash commands, session and agent filtering, model/thinking overrides, and related chat composer and message rendering behavior.'
+            description: "Covers Session and agent picker across browser chat composition and display UX after an authenticated Gateway connection exists: composer controls, slash commands, session and agent filtering, model/thinking overrides, and related chat composer and message rendering behavior."
           - name: Model/thinking controls
             coverageIds: [ui.model-thinking-controls]
-            description: 'Covers Model/thinking controls across browser chat composition and display UX after an authenticated Gateway connection exists: composer controls, slash commands, session and agent filtering, model/thinking overrides, and related chat composer and message rendering behavior.'
+            description: "Covers Model/thinking controls across browser chat composition and display UX after an authenticated Gateway connection exists: composer controls, slash commands, session and agent filtering, model/thinking overrides, and related chat composer and message rendering behavior."
           - name: Attachments
             coverageIds: [ui.attachments]
-            description: 'Covers Attachments across browser chat composition and display UX after an authenticated Gateway connection exists: composer controls, slash commands, session and agent filtering, model/thinking overrides, and related chat composer and message rendering behavior.'
+            description: "Covers Attachments across browser chat composition and display UX after an authenticated Gateway connection exists: composer controls, slash commands, session and agent filtering, model/thinking overrides, and related chat composer and message rendering behavior."
           - name: Markdown/tool/media rendering
             coverageIds: [ui.markdown-tool-media-rendering]
-            description: 'Covers Markdown/tool/media rendering across browser chat composition and display UX after an authenticated Gateway connection exists: composer controls, slash commands, session and agent filtering, model/thinking overrides, and related chat composer and message rendering behavior.'
+            description: "Covers Markdown/tool/media rendering across browser chat composition and display UX after an authenticated Gateway connection exists: composer controls, slash commands, session and agent filtering, model/thinking overrides, and related chat composer and message rendering behavior."
           - name: chat.history projection
             coverageIds: [ui.chat-history-projection]
             description: Covers chat.history projection across Gateway WebChat RPC/runtime contract, durable transcript projection, active run lifecycle, abort and partial retention, and related webchat runtime and session continuity behavior.
           - name: chat.send lifecycle
-            coverageIds: [channels.qa-channel, channels.webchat, media.image-understanding, runtime.direct-reply-routing, tools.message, ui.control]
+            coverageIds:
+              [
+                channels.qa-channel,
+                channels.webchat,
+                media.image-understanding,
+                runtime.direct-reply-routing,
+                tools.message,
+                ui.control,
+              ]
             description: Covers chat.send lifecycle across Gateway WebChat RPC/runtime contract, durable transcript projection, active run lifecycle, abort and partial retention, and related webchat runtime and session continuity behavior.
           - name: Abort/partial retention
             coverageIds: [ui.abort-partial-retention]
@@ -3582,19 +3893,19 @@ surfaces:
             description: Covers RPC timing telemetry across Debug, Logs, Update, Activity, and related diagnostics, logs, update, and activity behavior.
           - name: Channels/login
             coverageIds: [ui.channels-login]
-            description: 'Covers Channels/login across non-config operator panels in the browser Control UI: channels and login, instances/presence, sessions, cron jobs, skills, nodes, exec approvals, agents, usage, dreams, and the dashboard navigation that surfaces them.'
+            description: "Covers Channels/login across non-config operator panels in the browser Control UI: channels and login, instances/presence, sessions, cron jobs, skills, nodes, exec approvals, agents, usage, dreams, and the dashboard navigation that surfaces them."
           - name: Session manager and history
             coverageIds: [ui.session-manager-and-history]
             description: Covers browser Control UI session manager, session history, instance presence, approvals, diagnostics, and log tabs.
           - name: Cron
             coverageIds: [ui.cron]
-            description: 'Covers Cron across non-config operator panels in the browser Control UI: channels and login, instances/presence, sessions, cron jobs, skills, nodes, exec approvals, agents, usage, dreams, and the dashboard navigation that surfaces them.'
+            description: "Covers Cron across non-config operator panels in the browser Control UI: channels and login, instances/presence, sessions, cron jobs, skills, nodes, exec approvals, agents, usage, dreams, and the dashboard navigation that surfaces them."
           - name: Skills/nodes
             coverageIds: [ui.skills-nodes]
-            description: 'Covers Skills/nodes across non-config operator panels in the browser Control UI: channels and login, instances/presence, sessions, cron jobs, skills, nodes, exec approvals, agents, usage, dreams, and the dashboard navigation that surfaces them.'
+            description: "Covers Skills/nodes across non-config operator panels in the browser Control UI: channels and login, instances/presence, sessions, cron jobs, skills, nodes, exec approvals, agents, usage, dreams, and the dashboard navigation that surfaces them."
           - name: Exec approvals/agents
             coverageIds: [ui.exec-approvals-agents]
-            description: 'Covers Exec approvals/agents across non-config operator panels in the browser Control UI: channels and login, instances/presence, sessions, cron jobs, skills, nodes, exec approvals, agents, usage, dreams, and the dashboard navigation that surfaces them.'
+            description: "Covers Exec approvals/agents across non-config operator panels in the browser Control UI: channels and login, instances/presence, sessions, cron jobs, skills, nodes, exec approvals, agents, usage, dreams, and the dashboard navigation that surfaces them."
         docs:
           - docs/web/control-ui.md
           - docs/gateway/health.md
@@ -3619,7 +3930,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -3808,10 +4119,10 @@ surfaces:
             description: Covers Tool Cards across chat log rendering, assistant stream assembly, final/error resolution, thinking visibility, and related streaming message rendering and tool cards behavior.
           - name: Terminal Rendering Primitives
             coverageIds: [tui.terminal-rendering-primitives]
-            description: 'Covers Terminal Rendering Primitives across shared terminal output helpers used by CLI/TUI surfaces: safe stream writing, text sanitization, ANSI/OSC handling, table wrapping, and related terminal rendering primitives and output safety behavior.'
+            description: "Covers Terminal Rendering Primitives across shared terminal output helpers used by CLI/TUI surfaces: safe stream writing, text sanitization, ANSI/OSC handling, table wrapping, and related terminal rendering primitives and output safety behavior."
           - name: Output Safety
             coverageIds: [tui.output-safety]
-            description: 'Covers Output Safety across shared terminal output helpers used by CLI/TUI surfaces: safe stream writing, text sanitization, ANSI/OSC handling, table wrapping, and related terminal rendering primitives and output safety behavior.'
+            description: "Covers Output Safety across shared terminal output helpers used by CLI/TUI surfaces: safe stream writing, text sanitization, ANSI/OSC handling, table wrapping, and related terminal rendering primitives and output safety behavior."
         docs:
           - docs/web/tui.md
           - docs/cli/qr.md
@@ -3830,7 +4141,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -4077,7 +4388,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -4275,7 +4586,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-06-01'
+      completed_at: "2026-06-01"
       by: codex
       source_ref: openclaw@29dd7847fd
       process_version: 3
@@ -4510,7 +4821,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -4743,7 +5054,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -4921,7 +5232,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -5092,7 +5403,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -5273,7 +5584,7 @@ surfaces:
           - Gateway authentication
           - SecretRef
           - Remote URL credential precedence
-          - 'Advanced: expose WSL services over LAN (portproxy)'
+          - "Advanced: expose WSL services over LAN (portproxy)"
           - portproxy
           - WSL2 IPv4
         category_note: auth-secrets-and-exposure-posture.md
@@ -5282,7 +5593,8 @@ surfaces:
         id: diagnostics-and-repair
         features:
           - name: openclaw doctor
-            coverageIds: [runtime.codex-plugin.auth, runtime.codex-plugin.lifecycle, runtime.doctor-repair]
+            coverageIds:
+              [runtime.codex-plugin.auth, runtime.codex-plugin.lifecycle, runtime.doctor-repair]
             description: openclaw doctor and repair/migration for WSL2 Gateway
           - name: openclaw status
             coverageIds: [windows.openclaw-status]
@@ -5343,7 +5655,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -5507,7 +5819,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -5666,7 +5978,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -5796,7 +6108,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -5963,7 +6275,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -6112,7 +6424,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -6335,7 +6647,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -6482,7 +6794,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -6620,7 +6932,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-06-01'
+      completed_at: "2026-06-01"
       by: codex
       source_ref: openclaw@29dd7847fd
       process_version: 3
@@ -6803,7 +7115,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -6874,22 +7186,22 @@ surfaces:
         features:
           - name: DM policy modes
             coverageIds: [discord.dm-policy-modes]
-            description: 'Covers DM policy modes across Discord direct-message `dmPolicy` modes: `pairing`, `allowlist`, `open`, and `disabled`. Canonical and legacy `allowFrom` resolution across top-level Discord config, and related dm pairing and sender authorization behavior.'
+            description: "Covers DM policy modes across Discord direct-message `dmPolicy` modes: `pairing`, `allowlist`, `open`, and `disabled`. Canonical and legacy `allowFrom` resolution across top-level Discord config, and related dm pairing and sender authorization behavior."
           - name: Allowlist inheritance
             coverageIds: [discord.allowlist-inheritance]
-            description: 'Covers Allowlist inheritance across Discord direct-message `dmPolicy` modes: `pairing`, `allowlist`, `open`, and `disabled`. Canonical and legacy `allowFrom` resolution across top-level Discord config, and related dm pairing and sender authorization behavior.'
+            description: "Covers Allowlist inheritance across Discord direct-message `dmPolicy` modes: `pairing`, `allowlist`, `open`, and `disabled`. Canonical and legacy `allowFrom` resolution across top-level Discord config, and related dm pairing and sender authorization behavior."
           - name: Pairing-code approval
             coverageIds: [security.pairing-code-approval]
-            description: 'Covers Pairing-code approval across Discord direct-message `dmPolicy` modes: `pairing`, `allowlist`, `open`, and `disabled`. Canonical and legacy `allowFrom` resolution across top-level Discord config, and related dm pairing and sender authorization behavior.'
+            description: "Covers Pairing-code approval across Discord direct-message `dmPolicy` modes: `pairing`, `allowlist`, `open`, and `disabled`. Canonical and legacy `allowFrom` resolution across top-level Discord config, and related dm pairing and sender authorization behavior."
           - name: Sender authorization
             coverageIds: [security.sender-authorization]
-            description: 'Covers Sender authorization across Discord direct-message `dmPolicy` modes: `pairing`, `allowlist`, `open`, and `disabled`. Canonical and legacy `allowFrom` resolution across top-level Discord config, and related dm pairing and sender authorization behavior.'
+            description: "Covers Sender authorization across Discord direct-message `dmPolicy` modes: `pairing`, `allowlist`, `open`, and `disabled`. Canonical and legacy `allowFrom` resolution across top-level Discord config, and related dm pairing and sender authorization behavior."
           - name: Access-group authorization
             coverageIds: [discord.access-group-authorization]
-            description: 'Covers Access-group authorization across Discord direct-message `dmPolicy` modes: `pairing`, `allowlist`, `open`, and `disabled`. Canonical and legacy `allowFrom` resolution across top-level Discord config, and related dm pairing and sender authorization behavior.'
+            description: "Covers Access-group authorization across Discord direct-message `dmPolicy` modes: `pairing`, `allowlist`, `open`, and `disabled`. Canonical and legacy `allowFrom` resolution across top-level Discord config, and related dm pairing and sender authorization behavior."
           - name: Group DM authorization
             coverageIds: [discord.group-dm-authorization]
-            description: 'Covers Group DM authorization across Discord direct-message `dmPolicy` modes: `pairing`, `allowlist`, `open`, and `disabled`. Canonical and legacy `allowFrom` resolution across top-level Discord config, and related dm pairing and sender authorization behavior.'
+            description: "Covers Group DM authorization across Discord direct-message `dmPolicy` modes: `pairing`, `allowlist`, `open`, and `disabled`. Canonical and legacy `allowFrom` resolution across top-level Discord config, and related dm pairing and sender authorization behavior."
         docs:
           - docs/channels/discord.md
           - docs/channels/pairing.md
@@ -6924,25 +7236,25 @@ surfaces:
             description: Covers Inbound context visibility across Guild allowlist and `groupPolicy` admission for Discord guild channels and threads. `requireMention`, bot-loop prevention, command/mention bypasses, and unmentioned room-event history. Channel, and related guild channel routing and session isolation behavior.
           - name: Forum and media-channel thread posts
             coverageIds: [discord.forum-and-media-channel-thread-posts]
-            description: 'Covers Forum and media-channel thread posts across Discord forum/media channel posts created as threads from parent channel targets. CLI and message-tool thread actions: `thread-create`, `thread-list`, and `thread-reply`. Discord target parsing for `channel:<id>`, user targets, and related threads, forums, and delegated-agent bindings behavior.'
+            description: "Covers Forum and media-channel thread posts across Discord forum/media channel posts created as threads from parent channel targets. CLI and message-tool thread actions: `thread-create`, `thread-list`, and `thread-reply`. Discord target parsing for `channel:<id>`, user targets, and related threads, forums, and delegated-agent bindings behavior."
           - name: Thread actions
             coverageIds: [discord.thread-actions]
-            description: 'Covers Thread actions across Discord forum/media channel posts created as threads from parent channel targets. CLI and message-tool thread actions: `thread-create`, `thread-list`, and `thread-reply`. Discord target parsing for `channel:<id>`, user targets, and related threads, forums, and delegated-agent bindings behavior.'
+            description: "Covers Thread actions across Discord forum/media channel posts created as threads from parent channel targets. CLI and message-tool thread actions: `thread-create`, `thread-list`, and `thread-reply`. Discord target parsing for `channel:<id>`, user targets, and related threads, forums, and delegated-agent bindings behavior."
           - name: Target parsing
             coverageIds: [discord.target-parsing]
-            description: 'Covers Target parsing across Discord forum/media channel posts created as threads from parent channel targets. CLI and message-tool thread actions: `thread-create`, `thread-list`, and `thread-reply`. Discord target parsing for `channel:<id>`, user targets, and related threads, forums, and delegated-agent bindings behavior.'
+            description: "Covers Target parsing across Discord forum/media channel posts created as threads from parent channel targets. CLI and message-tool thread actions: `thread-create`, `thread-list`, and `thread-reply`. Discord target parsing for `channel:<id>`, user targets, and related threads, forums, and delegated-agent bindings behavior."
           - name: Thread context resolution
             coverageIds: [discord.thread-context-resolution]
-            description: 'Covers Thread context resolution across Discord forum/media channel posts created as threads from parent channel targets. CLI and message-tool thread actions: `thread-create`, `thread-list`, and `thread-reply`. Discord target parsing for `channel:<id>`, user targets, and related threads, forums, and delegated-agent bindings behavior.'
+            description: "Covers Thread context resolution across Discord forum/media channel posts created as threads from parent channel targets. CLI and message-tool thread actions: `thread-create`, `thread-list`, and `thread-reply`. Discord target parsing for `channel:<id>`, user targets, and related threads, forums, and delegated-agent bindings behavior."
           - name: Thread-bound session routing
             coverageIds: [discord.thread-bound-session-routing]
-            description: 'Covers Thread-bound session routing across Discord forum/media channel posts created as threads from parent channel targets. CLI and message-tool thread actions: `thread-create`, `thread-list`, and `thread-reply`. Discord target parsing for `channel:<id>`, user targets, and related threads, forums, and delegated-agent bindings behavior.'
+            description: "Covers Thread-bound session routing across Discord forum/media channel posts created as threads from parent channel targets. CLI and message-tool thread actions: `thread-create`, `thread-list`, and `thread-reply`. Discord target parsing for `channel:<id>`, user targets, and related threads, forums, and delegated-agent bindings behavior."
           - name: ACP agent routing
             coverageIds: [discord.acp-agent-routing]
-            description: 'Covers ACP bindings across Discord forum/media channel posts created as threads from parent channel targets. CLI and message-tool thread actions: `thread-create`, `thread-list`, and `thread-reply`. Discord target parsing for `channel:<id>`, user targets, and related threads, forums, and delegated-agent bindings behavior.'
+            description: "Covers ACP bindings across Discord forum/media channel posts created as threads from parent channel targets. CLI and message-tool thread actions: `thread-create`, `thread-list`, and `thread-reply`. Discord target parsing for `channel:<id>`, user targets, and related threads, forums, and delegated-agent bindings behavior."
           - name: Routing lifecycle
             coverageIds: [discord.routing-lifecycle]
-            description: 'Covers Binding lifecycle across Discord forum/media channel posts created as threads from parent channel targets. CLI and message-tool thread actions: `thread-create`, `thread-list`, and `thread-reply`. Discord target parsing for `channel:<id>`, user targets, and related threads, forums, and delegated-agent bindings behavior.'
+            description: "Covers Binding lifecycle across Discord forum/media channel posts created as threads from parent channel targets. CLI and message-tool thread actions: `thread-create`, `thread-list`, and `thread-reply`. Discord target parsing for `channel:<id>`, user targets, and related threads, forums, and delegated-agent bindings behavior."
         docs:
           - docs/channels/discord.md
           - docs/channels/channel-routing.md
@@ -7038,7 +7350,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -7105,7 +7417,7 @@ surfaces:
             description: Pairing-code approval, first-owner bootstrap, and commands.ownerAllowFrom
           - name: Numeric Telegram user ID normalization with telegram
             coverageIds: [telegram.numeric-telegram-user-id-normalization-with-telegram]
-            description: 'and tg: prefixes'
+            description: "and tg: prefixes"
           - name: allowFrom
             coverageIds: [telegram.allowfrom]
             description: allowFrom, groupAllowFrom, access groups, and DM-versus-group boundaries
@@ -7212,7 +7524,7 @@ surfaces:
         human_lts_override: true
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -7350,7 +7662,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -7534,7 +7846,7 @@ surfaces:
         human_lts_override: true
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -7730,7 +8042,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -7902,7 +8214,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -8174,7 +8486,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -8327,7 +8639,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -8535,7 +8847,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -8597,7 +8909,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -8636,8 +8948,8 @@ surfaces:
           - docs/plugins/reference/feishu.md
           - docs/plugins/architecture-internals.md
         search_anchors:
-          - 'feishu, qq bot, wechat, yuanbao, zalo, zalo personal, regional channels feishu, qq bot, wechat, yuanbao, zalo, zalo personal, regional channels feature matrix: shared regional channel catalog, install, and status'
-          - 'feishu, qq bot, wechat, yuanbao, zalo, zalo personal, regional channels feature matrix: shared regional channel catalog, install, and status'
+          - "feishu, qq bot, wechat, yuanbao, zalo, zalo personal, regional channels feishu, qq bot, wechat, yuanbao, zalo, zalo personal, regional channels feature matrix: shared regional channel catalog, install, and status"
+          - "feishu, qq bot, wechat, yuanbao, zalo, zalo personal, regional channels feature matrix: shared regional channel catalog, install, and status"
         category_note: shared-regional-channel-catalog-install-status.md
         human_lts_override: false
       - name: Access and Identity
@@ -8678,7 +8990,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -8768,7 +9080,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -8785,22 +9097,23 @@ surfaces:
         features:
           - name: Canonical OpenAI Model Routing
             coverageIds: [models.openai, tools.web-search]
-            description: 'Covers Canonical OpenAI Model Routing across user/operator-facing model route contract: canonical `openai/gpt-*` refs, legacy `openai-codex/*` model refs, model catalog rows, context limits, and related canonical openai model routing and catalog behavior.'
+            description: "Covers Canonical OpenAI Model Routing across user/operator-facing model route contract: canonical `openai/gpt-*` refs, legacy `openai-codex/*` model refs, model catalog rows, context limits, and related canonical openai model routing and catalog behavior."
           - name: Catalog
             coverageIds: [codex.catalog]
-            description: 'Covers Catalog across user/operator-facing model route contract: canonical `openai/gpt-*` refs, legacy `openai-codex/*` model refs, model catalog rows, context limits, and related canonical openai model routing and catalog behavior.'
+            description: "Covers Catalog across user/operator-facing model route contract: canonical `openai/gpt-*` refs, legacy `openai-codex/*` model refs, model catalog rows, context limits, and related canonical openai model routing and catalog behavior."
           - name: Codex OAuth Profiles
-            coverageIds: [auth-profiles.provider-selection, runtime.codex-plugin.auth, runtime.doctor-repair]
+            coverageIds:
+              [auth-profiles.provider-selection, runtime.codex-plugin.auth, runtime.doctor-repair]
             description: Covers Codex OAuth Profiles across `openai-codex` auth profiles, profile ordering, profile metadata repair, token refresh, account-id propagation, usage/cooldown handling, and auth selection for Codex-backed OpenAI agent turns.
           - name: Subscription Usage
             coverageIds: [codex.subscription-usage]
             description: Covers Subscription Usage across `openai-codex` auth profiles, profile ordering, profile metadata repair, token refresh, account-id propagation, usage/cooldown handling, and auth selection for Codex-backed OpenAI agent turns.
           - name: Doctor Diagnostics
             coverageIds: [runtime.codex-plugin.version]
-            description: 'Covers Doctor Diagnostics across operator-facing repair and diagnosis for OpenAI/Codex provider path problems: stale route migration, persisted session pins, runtime pins, auth-profile sidecars, profile metadata, status/probe output, and recovery commands.'
+            description: "Covers Doctor Diagnostics across operator-facing repair and diagnosis for OpenAI/Codex provider path problems: stale route migration, persisted session pins, runtime pins, auth-profile sidecars, profile metadata, status/probe output, and recovery commands."
           - name: Operator Repair
             coverageIds: [codex.operator-repair]
-            description: 'Covers Operator Repair across operator-facing repair and diagnosis for OpenAI/Codex provider path problems: stale route migration, persisted session pins, runtime pins, auth-profile sidecars, profile metadata, status/probe output, and recovery commands.'
+            description: "Covers Operator Repair across operator-facing repair and diagnosis for OpenAI/Codex provider path problems: stale route migration, persisted session pins, runtime pins, auth-profile sidecars, profile metadata, status/probe output, and recovery commands."
         docs:
           - docs/providers/openai.md
           - docs/plugins/codex-harness.md
@@ -8858,10 +9171,26 @@ surfaces:
         id: native-codex-harness
         features:
           - name: Native Codex App-server Harness
-            coverageIds: [models.codex-cli, runtime.codex-app-server, runtime.gateway-log-sentinel.codex-progress, runtime.long-context, runtime.no-meta-leak, workspace.planning]
+            coverageIds:
+              [
+                models.codex-cli,
+                runtime.codex-app-server,
+                runtime.gateway-log-sentinel.codex-progress,
+                runtime.long-context,
+                runtime.no-meta-leak,
+                workspace.planning,
+              ]
             description: Covers Native Codex App-server Harness across native Codex app-server runtime path used by OpenAI agent turns when the Codex harness owns thread identity, native model loop, compaction, native tools, and native app-server controls.
           - name: Thread Lifecycle
-            coverageIds: [runtime.codex-app-server, runtime.codex-plugin.lifecycle, runtime.doctor-repair, runtime.gateway-log-sentinel.codex-progress, runtime.long-context, runtime.turn-ordering]
+            coverageIds:
+              [
+                runtime.codex-app-server,
+                runtime.codex-plugin.lifecycle,
+                runtime.doctor-repair,
+                runtime.gateway-log-sentinel.codex-progress,
+                runtime.long-context,
+                runtime.turn-ordering,
+              ]
             description: Covers Thread Lifecycle across native Codex app-server runtime path used by OpenAI agent turns when the Codex harness owns thread identity, native model loop, compaction, native tools, and native app-server controls.
         docs:
           - docs/plugins/codex-harness.md
@@ -8917,7 +9246,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -8934,31 +9263,31 @@ surfaces:
         features:
           - name: API-key onboarding
             coverageIds: [gateway.api-key-onboarding]
-            description: 'Covers API-key onboarding across Anthropic credential surface before a model request is made: onboarding choices, API-key storage, Claude CLI credential migration, setup-token validation, and related credential setup and health behavior.'
+            description: "Covers API-key onboarding across Anthropic credential surface before a model request is made: onboarding choices, API-key storage, Claude CLI credential migration, setup-token validation, and related credential setup and health behavior."
           - name: Claude CLI credential reuse
             coverageIds: [anthropic.claude-cli-credential-reuse]
-            description: 'Covers Claude CLI credential reuse across Anthropic credential surface before a model request is made: onboarding choices, API-key storage, Claude CLI credential migration, setup-token validation, and related credential setup and health behavior.'
+            description: "Covers Claude CLI credential reuse across Anthropic credential surface before a model request is made: onboarding choices, API-key storage, Claude CLI credential migration, setup-token validation, and related credential setup and health behavior."
           - name: Setup-token auth
             coverageIds: [anthropic.setup-token-auth]
-            description: 'Covers Setup-token auth across Anthropic credential surface before a model request is made: onboarding choices, API-key storage, Claude CLI credential migration, setup-token validation, and related credential setup and health behavior.'
+            description: "Covers Setup-token auth across Anthropic credential surface before a model request is made: onboarding choices, API-key storage, Claude CLI credential migration, setup-token validation, and related credential setup and health behavior."
           - name: Auth profile health
             coverageIds: [anthropic.auth-profile-health]
-            description: 'Covers Auth profile health across Anthropic credential surface before a model request is made: onboarding choices, API-key storage, Claude CLI credential migration, setup-token validation, and related credential setup and health behavior.'
+            description: "Covers Auth profile health across Anthropic credential surface before a model request is made: onboarding choices, API-key storage, Claude CLI credential migration, setup-token validation, and related credential setup and health behavior."
           - name: Model status
             coverageIds: [anthropic.model-status]
-            description: 'Covers Model status across operator diagnostics and recovery for Anthropic provider failures: status output, usage windows, auth profile source reporting, cooldown and disabled profile reporting, and related diagnostics and recovery behavior.'
+            description: "Covers Model status across operator diagnostics and recovery for Anthropic provider failures: status output, usage windows, auth profile source reporting, cooldown and disabled profile reporting, and related diagnostics and recovery behavior."
           - name: Usage windows
             coverageIds: [anthropic.usage-windows]
-            description: 'Covers Usage windows across operator diagnostics and recovery for Anthropic provider failures: status output, usage windows, auth profile source reporting, cooldown and disabled profile reporting, and related diagnostics and recovery behavior.'
+            description: "Covers Usage windows across operator diagnostics and recovery for Anthropic provider failures: status output, usage windows, auth profile source reporting, cooldown and disabled profile reporting, and related diagnostics and recovery behavior."
           - name: Cooldown/profile reporting
             coverageIds: [anthropic.cooldown-profile-reporting]
-            description: 'Covers Cooldown/profile reporting across operator diagnostics and recovery for Anthropic provider failures: status output, usage windows, auth profile source reporting, cooldown and disabled profile reporting, and related diagnostics and recovery behavior.'
+            description: "Covers Cooldown/profile reporting across operator diagnostics and recovery for Anthropic provider failures: status output, usage windows, auth profile source reporting, cooldown and disabled profile reporting, and related diagnostics and recovery behavior."
           - name: Long-context recovery
             coverageIds: [anthropic.long-context-recovery]
-            description: 'Covers Long-context recovery across operator diagnostics and recovery for Anthropic provider failures: status output, usage windows, auth profile source reporting, cooldown and disabled profile reporting, and related diagnostics and recovery behavior.'
+            description: "Covers Long-context recovery across operator diagnostics and recovery for Anthropic provider failures: status output, usage windows, auth profile source reporting, cooldown and disabled profile reporting, and related diagnostics and recovery behavior."
           - name: Fallback guidance
             coverageIds: [anthropic.fallback-guidance]
-            description: 'Covers Fallback guidance across operator diagnostics and recovery for Anthropic provider failures: status output, usage windows, auth profile source reporting, cooldown and disabled profile reporting, and related diagnostics and recovery behavior.'
+            description: "Covers Fallback guidance across operator diagnostics and recovery for Anthropic provider failures: status output, usage windows, auth profile source reporting, cooldown and disabled profile reporting, and related diagnostics and recovery behavior."
         docs:
           - docs/providers/anthropic.md
           - docs/gateway/doctor.md
@@ -8982,34 +9311,34 @@ surfaces:
         features:
           - name: Bundled Claude catalog
             coverageIds: [anthropic.bundled-claude-catalog]
-            description: 'Covers Bundled Claude catalog across Anthropic model catalog and policy layer: bundled model rows, model aliases, current and future Claude model id normalization, runtime-provider selection, and related model catalog and policy behavior.'
+            description: "Covers Bundled Claude catalog across Anthropic model catalog and policy layer: bundled model rows, model aliases, current and future Claude model id normalization, runtime-provider selection, and related model catalog and policy behavior."
           - name: Canonical anthropic refs
             coverageIds: [models.anthropic, models.provider-auth]
-            description: 'Covers Canonical anthropic refs across Anthropic model catalog and policy layer: bundled model rows, model aliases, current and future Claude model id normalization, runtime-provider selection, and related model catalog and policy behavior.'
+            description: "Covers Canonical anthropic refs across Anthropic model catalog and policy layer: bundled model rows, model aliases, current and future Claude model id normalization, runtime-provider selection, and related model catalog and policy behavior."
           - name: Claude CLI compatibility
             coverageIds: [models.claude-cli, models.provider-capabilities]
-            description: 'Covers Claude CLI compatibility across Anthropic model catalog and policy layer: bundled model rows, model aliases, current and future Claude model id normalization, runtime-provider selection, and related model catalog and policy behavior.'
+            description: "Covers Claude CLI compatibility across Anthropic model catalog and policy layer: bundled model rows, model aliases, current and future Claude model id normalization, runtime-provider selection, and related model catalog and policy behavior."
           - name: Model picker availability
             coverageIds: [models.picker-availability]
-            description: 'Covers Model picker availability across Anthropic model catalog and policy layer: bundled model rows, model aliases, current and future Claude model id normalization, runtime-provider selection, and related model catalog and policy behavior.'
+            description: "Covers Model picker availability across Anthropic model catalog and policy layer: bundled model rows, model aliases, current and future Claude model id normalization, runtime-provider selection, and related model catalog and policy behavior."
           - name: Capability metadata
             coverageIds: [anthropic.capability-metadata]
-            description: 'Covers Capability metadata across Anthropic model catalog and policy layer: bundled model rows, model aliases, current and future Claude model id normalization, runtime-provider selection, and related model catalog and policy behavior.'
+            description: "Covers Capability metadata across Anthropic model catalog and policy layer: bundled model rows, model aliases, current and future Claude model id normalization, runtime-provider selection, and related model catalog and policy behavior."
           - name: Runtime selection
             coverageIds: [anthropic.runtime-selection]
-            description: 'Covers Runtime selection across OpenClaw''s host-local Claude CLI path after auth is available: the `claude-cli` backend, its command/args/env defaults, MCP tool bridge, native tool mode, and related claude cli backend behavior.'
+            description: "Covers Runtime selection across OpenClaw's host-local Claude CLI path after auth is available: the `claude-cli` backend, its command/args/env defaults, MCP tool bridge, native tool mode, and related claude cli backend behavior."
           - name: Session continuity
             coverageIds: [memory.session-continuity]
-            description: 'Covers Session continuity across OpenClaw''s host-local Claude CLI path after auth is available: the `claude-cli` backend, its command/args/env defaults, MCP tool bridge, native tool mode, and related claude cli backend behavior.'
+            description: "Covers Session continuity across OpenClaw's host-local Claude CLI path after auth is available: the `claude-cli` backend, its command/args/env defaults, MCP tool bridge, native tool mode, and related claude cli backend behavior."
           - name: MCP/tool bridge
             coverageIds: [anthropic.mcp-tool-bridge]
-            description: 'Covers MCP/tool bridge across OpenClaw''s host-local Claude CLI path after auth is available: the `claude-cli` backend, its command/args/env defaults, MCP tool bridge, native tool mode, and related claude cli backend behavior.'
+            description: "Covers MCP/tool bridge across OpenClaw's host-local Claude CLI path after auth is available: the `claude-cli` backend, its command/args/env defaults, MCP tool bridge, native tool mode, and related claude cli backend behavior."
           - name: Permission-mode mapping
             coverageIds: [anthropic.permission-mode-mapping]
-            description: 'Covers Permission-mode mapping across OpenClaw''s host-local Claude CLI path after auth is available: the `claude-cli` backend, its command/args/env defaults, MCP tool bridge, native tool mode, and related claude cli backend behavior.'
+            description: "Covers Permission-mode mapping across OpenClaw's host-local Claude CLI path after auth is available: the `claude-cli` backend, its command/args/env defaults, MCP tool bridge, native tool mode, and related claude cli backend behavior."
           - name: Fallback prelude
             coverageIds: [anthropic.fallback-prelude]
-            description: 'Covers Fallback prelude across OpenClaw''s host-local Claude CLI path after auth is available: the `claude-cli` backend, its command/args/env defaults, MCP tool bridge, native tool mode, and related claude cli backend behavior.'
+            description: "Covers Fallback prelude across OpenClaw's host-local Claude CLI path after auth is available: the `claude-cli` backend, its command/args/env defaults, MCP tool bridge, native tool mode, and related claude cli backend behavior."
         docs:
           - docs/providers/anthropic.md
           - docs/gateway/config-agents.md
@@ -9048,19 +9377,19 @@ surfaces:
             description: 'Covers Abort/error handling across direct Anthropic `api: "anthropic-messages"` request and stream behavior: API-key and OAuth transport setup, Anthropic beta headers, model-id normalization for direct hosts, payload construction, and related direct anthropic api behavior.'
           - name: Tool-use blocks
             coverageIds: [anthropic.tool-use-blocks]
-            description: 'Covers Tool-use blocks across Anthropic-specific turn semantics inside agent runs: tool declarations, tool-use block conversion, tool-result conversion, tool-call id normalization, and related tools and thinking behavior.'
+            description: "Covers Tool-use blocks across Anthropic-specific turn semantics inside agent runs: tool declarations, tool-use block conversion, tool-result conversion, tool-call id normalization, and related tools and thinking behavior."
           - name: Tool-result replay
             coverageIds: [anthropic.tool-result-replay]
-            description: 'Covers Tool-result replay across Anthropic-specific turn semantics inside agent runs: tool declarations, tool-use block conversion, tool-result conversion, tool-call id normalization, and related tools and thinking behavior.'
+            description: "Covers Tool-result replay across Anthropic-specific turn semantics inside agent runs: tool declarations, tool-use block conversion, tool-result conversion, tool-call id normalization, and related tools and thinking behavior."
           - name: Partial JSON recovery
             coverageIds: [anthropic.partial-json-recovery]
-            description: 'Covers Partial JSON recovery across Anthropic-specific turn semantics inside agent runs: tool declarations, tool-use block conversion, tool-result conversion, tool-call id normalization, and related tools and thinking behavior.'
+            description: "Covers Partial JSON recovery across Anthropic-specific turn semantics inside agent runs: tool declarations, tool-use block conversion, tool-result conversion, tool-call id normalization, and related tools and thinking behavior."
           - name: Native thinking
             coverageIds: [anthropic.native-thinking]
-            description: 'Covers Native thinking across Anthropic-specific turn semantics inside agent runs: tool declarations, tool-use block conversion, tool-result conversion, tool-call id normalization, and related tools and thinking behavior.'
+            description: "Covers Native thinking across Anthropic-specific turn semantics inside agent runs: tool declarations, tool-use block conversion, tool-result conversion, tool-call id normalization, and related tools and thinking behavior."
           - name: Signed/redacted thinking replay
             coverageIds: [anthropic.signed-redacted-thinking-replay]
-            description: 'Covers Signed/redacted thinking replay across Anthropic-specific turn semantics inside agent runs: tool declarations, tool-use block conversion, tool-result conversion, tool-call id normalization, and related tools and thinking behavior.'
+            description: "Covers Signed/redacted thinking replay across Anthropic-specific turn semantics inside agent runs: tool declarations, tool-use block conversion, tool-result conversion, tool-call id normalization, and related tools and thinking behavior."
         docs:
           - docs/providers/anthropic.md
           - docs/reference/prompt-caching.md
@@ -9085,19 +9414,19 @@ surfaces:
         features:
           - name: Cache retention
             coverageIds: [anthropic.cache-retention]
-            description: 'Covers Cache retention across Anthropic-specific request knobs outside the core content stream: prompt cache retention, cache-control markers, system-prompt cache boundary, 1M context sizing, and related prompt cache and context behavior.'
+            description: "Covers Cache retention across Anthropic-specific request knobs outside the core content stream: prompt cache retention, cache-control markers, system-prompt cache boundary, 1M context sizing, and related prompt cache and context behavior."
           - name: System-prompt cache boundary
             coverageIds: [anthropic.system-prompt-cache-boundary]
-            description: 'Covers System-prompt cache boundary across Anthropic-specific request knobs outside the core content stream: prompt cache retention, cache-control markers, system-prompt cache boundary, 1M context sizing, and related prompt cache and context behavior.'
+            description: "Covers System-prompt cache boundary across Anthropic-specific request knobs outside the core content stream: prompt cache retention, cache-control markers, system-prompt cache boundary, 1M context sizing, and related prompt cache and context behavior."
           - name: 1M context
             coverageIds: [anthropic.1m-context]
-            description: 'Covers 1M context across Anthropic-specific request knobs outside the core content stream: prompt cache retention, cache-control markers, system-prompt cache boundary, 1M context sizing, and related prompt cache and context behavior.'
+            description: "Covers 1M context across Anthropic-specific request knobs outside the core content stream: prompt cache retention, cache-control markers, system-prompt cache boundary, 1M context sizing, and related prompt cache and context behavior."
           - name: Fast mode/service tier
             coverageIds: [anthropic.fast-mode-service-tier]
-            description: 'Covers Fast mode/service tier across Anthropic-specific request knobs outside the core content stream: prompt cache retention, cache-control markers, system-prompt cache boundary, 1M context sizing, and related prompt cache and context behavior.'
+            description: "Covers Fast mode/service tier across Anthropic-specific request knobs outside the core content stream: prompt cache retention, cache-control markers, system-prompt cache boundary, 1M context sizing, and related prompt cache and context behavior."
           - name: Cache diagnostics
             coverageIds: [anthropic.cache-diagnostics]
-            description: 'Covers Cache diagnostics across Anthropic-specific request knobs outside the core content stream: prompt cache retention, cache-control markers, system-prompt cache boundary, 1M context sizing, and related prompt cache and context behavior.'
+            description: "Covers Cache diagnostics across Anthropic-specific request knobs outside the core content stream: prompt cache retention, cache-control markers, system-prompt cache boundary, 1M context sizing, and related prompt cache and context behavior."
         docs:
           - docs/providers/anthropic.md
           - docs/reference/prompt-caching.md
@@ -9116,16 +9445,16 @@ surfaces:
         features:
           - name: Image input
             coverageIds: [anthropic.image-input]
-            description: 'Covers Image input across Anthropic media understanding as part of the provider path: image input support, PDF native document input metadata, default media model selection, auto-priority, and related media inputs behavior.'
+            description: "Covers Image input across Anthropic media understanding as part of the provider path: image input support, PDF native document input metadata, default media model selection, auto-priority, and related media inputs behavior."
           - name: PDF document input
             coverageIds: [anthropic.pdf-document-input]
-            description: 'Covers PDF document input across Anthropic media understanding as part of the provider path: image input support, PDF native document input metadata, default media model selection, auto-priority, and related media inputs behavior.'
+            description: "Covers PDF document input across Anthropic media understanding as part of the provider path: image input support, PDF native document input metadata, default media model selection, auto-priority, and related media inputs behavior."
           - name: Media model fallback
             coverageIds: [anthropic.media-model-fallback]
-            description: 'Covers Media model fallback across Anthropic media understanding as part of the provider path: image input support, PDF native document input metadata, default media model selection, auto-priority, and related media inputs behavior.'
+            description: "Covers Media model fallback across Anthropic media understanding as part of the provider path: image input support, PDF native document input metadata, default media model selection, auto-priority, and related media inputs behavior."
           - name: Image tool results
             coverageIds: [anthropic.image-tool-results]
-            description: 'Covers Image tool results across Anthropic media understanding as part of the provider path: image input support, PDF native document input metadata, default media model selection, auto-priority, and related media inputs behavior.'
+            description: "Covers Image tool results across Anthropic media understanding as part of the provider path: image input support, PDF native document input metadata, default media model selection, auto-priority, and related media inputs behavior."
         docs:
           - docs/providers/anthropic.md
           - docs/gateway/config-agents.md
@@ -9138,7 +9467,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -9255,19 +9584,19 @@ surfaces:
         features:
           - name: Direct Gemini chat
             coverageIds: [google.direct-gemini-chat]
-            description: 'Covers Direct Gemini chat across direct `google-generative-ai` Gemini transport and shared Google message/stream conversion: request URL construction, request config, text/image/audio/video/tool payload conversion, function response handling, and related direct gemini api behavior.'
+            description: "Covers Direct Gemini chat across direct `google-generative-ai` Gemini transport and shared Google message/stream conversion: request URL construction, request config, text/image/audio/video/tool payload conversion, function response handling, and related direct gemini api behavior."
           - name: Multimodal inputs
             coverageIds: [google.multimodal-inputs]
-            description: 'Covers Multimodal inputs across direct `google-generative-ai` Gemini transport and shared Google message/stream conversion: request URL construction, request config, text/image/audio/video/tool payload conversion, function response handling, and related direct gemini api behavior.'
+            description: "Covers Multimodal inputs across direct `google-generative-ai` Gemini transport and shared Google message/stream conversion: request URL construction, request config, text/image/audio/video/tool payload conversion, function response handling, and related direct gemini api behavior."
           - name: Tool-call streaming
             coverageIds: [google.tool-call-streaming]
-            description: 'Covers Tool-call streaming across direct `google-generative-ai` Gemini transport and shared Google message/stream conversion: request URL construction, request config, text/image/audio/video/tool payload conversion, function response handling, and related direct gemini api behavior.'
+            description: "Covers Tool-call streaming across direct `google-generative-ai` Gemini transport and shared Google message/stream conversion: request URL construction, request config, text/image/audio/video/tool payload conversion, function response handling, and related direct gemini api behavior."
           - name: Usage and stop reasons
             coverageIds: [anthropic.usage-and-stop-reasons]
-            description: 'Covers Usage and stop reasons across direct `google-generative-ai` Gemini transport and shared Google message/stream conversion: request URL construction, request config, text/image/audio/video/tool payload conversion, function response handling, and related direct gemini api behavior.'
+            description: "Covers Usage and stop reasons across direct `google-generative-ai` Gemini transport and shared Google message/stream conversion: request URL construction, request config, text/image/audio/video/tool payload conversion, function response handling, and related direct gemini api behavior."
           - name: Direct Gemini transport payloads
             coverageIds: [google.direct-gemini-transport-payloads]
-            description: 'Covers direct `google-generative-ai` Gemini transport and shared Google message/stream conversion: request URL construction, request config, text/image/audio/video/tool payload conversion, function response handling, and related direct Gemini API behavior.'
+            description: "Covers direct `google-generative-ai` Gemini transport and shared Google message/stream conversion: request URL construction, request config, text/image/audio/video/tool payload conversion, function response handling, and related direct Gemini API behavior."
           - name: Thinking-level mapping
             coverageIds: [google.thinking-level-mapping]
             description: Covers Thinking-level mapping across Gemini thinking-level mapping, adaptive thinking request shape, `thoughtSignature` capture/replay/sanitization, Google replay policy, and related thinking and turn recovery behavior.
@@ -9379,7 +9708,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -9396,16 +9725,16 @@ surfaces:
         features:
           - name: First-run setup
             coverageIds: [openrouter.first-run-setup]
-            description: 'Covers First-run setup across user-facing setup and provider registration: the `/providers/openrouter` docs, plugin manifest, provider registration hook, default model registration, and related operator setup and model selection behavior.'
+            description: "Covers First-run setup across user-facing setup and provider registration: the `/providers/openrouter` docs, plugin manifest, provider registration hook, default model registration, and related operator setup and model selection behavior."
           - name: Default model selection
             coverageIds: [openrouter.default-model-selection]
-            description: 'Covers Default model selection across user-facing setup and provider registration: the `/providers/openrouter` docs, plugin manifest, provider registration hook, default model registration, and related operator setup and model selection behavior.'
+            description: "Covers Default model selection across user-facing setup and provider registration: the `/providers/openrouter` docs, plugin manifest, provider registration hook, default model registration, and related operator setup and model selection behavior."
           - name: Provider plugin registration
             coverageIds: [openrouter.provider-plugin-registration]
-            description: 'Covers Provider plugin registration across user-facing setup and provider registration: the `/providers/openrouter` docs, plugin manifest, provider registration hook, default model registration, and related operator setup and model selection behavior.'
+            description: "Covers Provider plugin registration across user-facing setup and provider registration: the `/providers/openrouter` docs, plugin manifest, provider registration hook, default model registration, and related operator setup and model selection behavior."
           - name: Model-ref examples
             coverageIds: [openrouter.model-ref-examples]
-            description: 'Covers Model-ref examples across user-facing setup and provider registration: the `/providers/openrouter` docs, plugin manifest, provider registration hook, default model registration, and related operator setup and model selection behavior.'
+            description: "Covers Model-ref examples across user-facing setup and provider registration: the `/providers/openrouter` docs, plugin manifest, provider registration hook, default model registration, and related operator setup and model selection behavior."
           - name: OPENROUTER_API_KEY
             coverageIds: [openrouter.api-key]
             description: Covers OPENROUTER_API_KEY across `OPENROUTER_API_KEY` discovery, onboarding/auth-choice storage, `auth-profiles.json`, status/probe visibility, and related credentials and auth profiles behavior.
@@ -9604,12 +9933,12 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
   - id: local-model-providers-ollama-vllm-sglang-lm-studio
-    name: 'Local model providers: Ollama, vLLM, SGLang, LM Studio'
+    name: "Local model providers: Ollama, vLLM, SGLang, LM Studio"
     family: provider-tool
     level: alpha
     level_code: M2
@@ -9667,7 +9996,7 @@ surfaces:
         search_anchors:
           - Provider Selection
           - Onboarding
-          - 'local model providers: ollama, vllm, sglang, lm studio provider selection and onboarding'
+          - "local model providers: ollama, vllm, sglang, lm studio provider selection and onboarding"
           - provider selection and onboarding
           - localService configuration
           - Process startup and readiness
@@ -9771,7 +10100,7 @@ surfaces:
           - SGLang compatibility guidance
           - Request Stream Compatibility
           - Tool Calling
-          - 'local model providers: ollama, vllm, sglang, lm studio request stream compatibility and tool calling'
+          - "local model providers: ollama, vllm, sglang, lm studio request stream compatibility and tool calling"
           - request stream compatibility and tool calling
         category_note: request-stream-compatibility-and-tool-calling.md
         human_lts_override: false
@@ -9820,13 +10149,13 @@ surfaces:
         search_anchors:
           - Safety Network
           - Prompt Pressure Controls
-          - 'local model providers: ollama, vllm, sglang, lm studio safety network and prompt pressure controls'
+          - "local model providers: ollama, vllm, sglang, lm studio safety network and prompt pressure controls"
           - safety network and prompt pressure controls
         category_note: safety-network-and-prompt-pressure-controls.md
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -9855,16 +10184,16 @@ surfaces:
             description: Covers Proxy capability diagnostics across Amazon Bedrock, Bedrock Mantle, Cloudflare AI Gateway, Vercel AI Gateway, and related cloud and gateway providers behavior.
           - name: Hosted text completion
             coverageIds: [hosted-providers.hosted-text-completion]
-            description: 'Covers Hosted text completion across hosted text providers that mostly use OpenAI-compatible routes or close variants: DeepSeek, Groq, Mistral, Together, and related openai-compatible hosted text providers behavior.'
+            description: "Covers Hosted text completion across hosted text providers that mostly use OpenAI-compatible routes or close variants: DeepSeek, Groq, Mistral, Together, and related openai-compatible hosted text providers behavior."
           - name: Tool-call and streaming compatibility
             coverageIds: [hosted-providers.tool-call-and-streaming-compatibility]
-            description: 'Covers Tool-call and streaming compatibility across hosted text providers that mostly use OpenAI-compatible routes or close variants: DeepSeek, Groq, Mistral, Together, and related openai-compatible hosted text providers behavior.'
+            description: "Covers Tool-call and streaming compatibility across hosted text providers that mostly use OpenAI-compatible routes or close variants: DeepSeek, Groq, Mistral, Together, and related openai-compatible hosted text providers behavior."
           - name: Model catalog resolution
             coverageIds: [hosted-providers.model-catalog-resolution]
-            description: 'Covers Model catalog resolution across hosted text providers that mostly use OpenAI-compatible routes or close variants: DeepSeek, Groq, Mistral, Together, and related openai-compatible hosted text providers behavior.'
+            description: "Covers Model catalog resolution across hosted text providers that mostly use OpenAI-compatible routes or close variants: DeepSeek, Groq, Mistral, Together, and related openai-compatible hosted text providers behavior."
           - name: Provider-specific request shaping
             coverageIds: [hosted-providers.provider-specific-request-shaping]
-            description: 'Covers Provider-specific request shaping across hosted text providers that mostly use OpenAI-compatible routes or close variants: DeepSeek, Groq, Mistral, Together, and related openai-compatible hosted text providers behavior.'
+            description: "Covers Provider-specific request shaping across hosted text providers that mostly use OpenAI-compatible routes or close variants: DeepSeek, Groq, Mistral, Together, and related openai-compatible hosted text providers behavior."
           - name: Regional provider setup
             coverageIds: [hosted-providers.regional-provider-setup]
             description: Covers Regional provider setup across Qwen, Alibaba, Tencent, Qianfan, and related regional hosted llm providers behavior.
@@ -10001,7 +10330,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -10249,7 +10578,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -10400,7 +10729,7 @@ surfaces:
         human_lts_override: true
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
@@ -10503,19 +10832,19 @@ surfaces:
         features:
           - name: text-to-image
             coverageIds: [media-tools.text-to-image]
-            description: 'Covers text-to-image across image generation and editing runtime behavior after a provider candidate has been selected: request normalization, timeout handling, reference-image inputs, image response parsing, and related image generation and editing behavior.'
+            description: "Covers text-to-image across image generation and editing runtime behavior after a provider candidate has been selected: request normalization, timeout handling, reference-image inputs, image response parsing, and related image generation and editing behavior."
           - name: reference-image editing
             coverageIds: [media.reference-image-editing]
-            description: 'Covers reference-image editing across image generation and editing runtime behavior after a provider candidate has been selected: request normalization, timeout handling, reference-image inputs, image response parsing, and related image generation and editing behavior.'
+            description: "Covers reference-image editing across image generation and editing runtime behavior after a provider candidate has been selected: request normalization, timeout handling, reference-image inputs, image response parsing, and related image generation and editing behavior."
           - name: output hints
             coverageIds: [media-tools.output-hints]
-            description: 'Covers output hints across image generation and editing runtime behavior after a provider candidate has been selected: request normalization, timeout handling, reference-image inputs, image response parsing, and related image generation and editing behavior.'
+            description: "Covers output hints across image generation and editing runtime behavior after a provider candidate has been selected: request normalization, timeout handling, reference-image inputs, image response parsing, and related image generation and editing behavior."
           - name: action=status
             coverageIds: [media-tools.action-status]
-            description: 'Covers action=status across image generation and editing runtime behavior after a provider candidate has been selected: request normalization, timeout handling, reference-image inputs, image response parsing, and related image generation and editing behavior.'
+            description: "Covers action=status across image generation and editing runtime behavior after a provider candidate has been selected: request normalization, timeout handling, reference-image inputs, image response parsing, and related image generation and editing behavior."
           - name: provider attempt metadata
             coverageIds: [media-tools.provider-attempt-metadata]
-            description: 'Covers provider attempt metadata across image generation and editing runtime behavior after a provider candidate has been selected: request normalization, timeout handling, reference-image inputs, image response parsing, and related image generation and editing behavior.'
+            description: "Covers provider attempt metadata across image generation and editing runtime behavior after a provider candidate has been selected: request normalization, timeout handling, reference-image inputs, image response parsing, and related image generation and editing behavior."
           - name: OpenAI/Codex OAuth
             coverageIds: [media-tools.openai-codex-oauth]
             description: Covers OpenAI/Codex OAuth across provider registrations and auth paths for image generation and editing, including OpenAI/Codex OAuth, OpenRouter, xAI, and related image providers and auth behavior.
@@ -10523,7 +10852,8 @@ surfaces:
             coverageIds: [media-tools.api-key-openai]
             description: Covers API-key OpenAI across provider registrations and auth paths for image generation and editing, including OpenAI/Codex OAuth, OpenRouter, xAI, and related image providers and auth behavior.
           - name: OpenRouter/xAI/fal/LiteLLM/DeepInfra/Google/MiniMax/ComfyUI auth
-            coverageIds: [media-tools.openrouter-xai-fal-litellm-deepinfra-google-minimax-comfyui-auth]
+            coverageIds:
+              [media-tools.openrouter-xai-fal-litellm-deepinfra-google-minimax-comfyui-auth]
             description: Covers OpenRouter/xAI/fal/LiteLLM/DeepInfra/Google/MiniMax/ComfyUI auth across provider registrations and auth paths for image generation and editing, including OpenAI/Codex OAuth, OpenRouter, xAI, and related image providers and auth behavior.
           - name: provider error diagnostics
             coverageIds: [media-tools.provider-error-diagnostics]
@@ -10549,37 +10879,37 @@ surfaces:
         features:
           - name: text-to-video
             coverageIds: [media-tools.text-to-video]
-            description: 'Covers text-to-video across video generation request normalization before provider execution: `generate`, `imageToVideo`, and `videoToVideo` modes, reference media typing and roles, and related video generation modes behavior.'
+            description: "Covers text-to-video across video generation request normalization before provider execution: `generate`, `imageToVideo`, and `videoToVideo` modes, reference media typing and roles, and related video generation modes behavior."
           - name: image-to-video
             coverageIds: [media-tools.image-to-video]
-            description: 'Covers image-to-video across video generation request normalization before provider execution: `generate`, `imageToVideo`, and `videoToVideo` modes, reference media typing and roles, and related video generation modes behavior.'
+            description: "Covers image-to-video across video generation request normalization before provider execution: `generate`, `imageToVideo`, and `videoToVideo` modes, reference media typing and roles, and related video generation modes behavior."
           - name: video-to-video
             coverageIds: [media-tools.video-to-video]
-            description: 'Covers video-to-video across video generation request normalization before provider execution: `generate`, `imageToVideo`, and `videoToVideo` modes, reference media typing and roles, and related video generation modes behavior.'
+            description: "Covers video-to-video across video generation request normalization before provider execution: `generate`, `imageToVideo`, and `videoToVideo` modes, reference media typing and roles, and related video generation modes behavior."
           - name: reference role validation
             coverageIds: [media-tools.reference-role-validation]
-            description: 'Covers reference role validation across video generation request normalization before provider execution: `generate`, `imageToVideo`, and `videoToVideo` modes, reference media typing and roles, and related video generation modes behavior.'
+            description: "Covers reference role validation across video generation request normalization before provider execution: `generate`, `imageToVideo`, and `videoToVideo` modes, reference media typing and roles, and related video generation modes behavior."
           - name: audio refs
             coverageIds: [media-tools.audio-refs]
-            description: 'Covers audio refs across video generation request normalization before provider execution: `generate`, `imageToVideo`, and `videoToVideo` modes, reference media typing and roles, and related video generation modes behavior.'
+            description: "Covers audio refs across video generation request normalization before provider execution: `generate`, `imageToVideo`, and `videoToVideo` modes, reference media typing and roles, and related video generation modes behavior."
           - name: typed providerOptions
             coverageIds: [media-tools.typed-provideroptions]
-            description: 'Covers typed providerOptions across video generation request normalization before provider execution: `generate`, `imageToVideo`, and `videoToVideo` modes, reference media typing and roles, and related video generation modes behavior.'
+            description: "Covers typed providerOptions across video generation request normalization before provider execution: `generate`, `imageToVideo`, and `videoToVideo` modes, reference media typing and roles, and related video generation modes behavior."
           - name: queue-backed jobs
             coverageIds: [media-tools.queue-backed-jobs]
-            description: 'Covers queue-backed jobs across provider integration and async polling for video generation after request normalization: OpenAI Sora, OpenRouter, fal, Runway, and related video providers and polling behavior.'
+            description: "Covers queue-backed jobs across provider integration and async polling for video generation after request normalization: OpenAI Sora, OpenRouter, fal, Runway, and related video providers and polling behavior."
           - name: polling/timeout handling
             coverageIds: [media-tools.polling-timeout-handling]
-            description: 'Covers polling/timeout handling across provider integration and async polling for video generation after request normalization: OpenAI Sora, OpenRouter, fal, Runway, and related video providers and polling behavior.'
+            description: "Covers polling/timeout handling across provider integration and async polling for video generation after request normalization: OpenAI Sora, OpenRouter, fal, Runway, and related video providers and polling behavior."
           - name: Hosted URL download
             coverageIds: [media-tools.hosted-url-download]
-            description: 'Covers hosted URL download across provider integration and async polling for video generation after request normalization: OpenAI Sora, OpenRouter, fal, Runway, and related video providers and polling behavior.'
+            description: "Covers hosted URL download across provider integration and async polling for video generation after request normalization: OpenAI Sora, OpenRouter, fal, Runway, and related video providers and polling behavior."
           - name: provider skip explanations
             coverageIds: [media-tools.provider-skip-explanations]
-            description: 'Covers provider skip explanations across provider integration and async polling for video generation after request normalization: OpenAI Sora, OpenRouter, fal, Runway, and related video providers and polling behavior.'
+            description: "Covers provider skip explanations across provider integration and async polling for video generation after request normalization: OpenAI Sora, OpenRouter, fal, Runway, and related video providers and polling behavior."
           - name: returned asset metadata
             coverageIds: [media-tools.returned-asset-metadata]
-            description: 'Covers returned asset metadata across provider integration and async polling for video generation after request normalization: OpenAI Sora, OpenRouter, fal, Runway, and related video providers and polling behavior.'
+            description: "Covers returned asset metadata across provider integration and async polling for video generation after request normalization: OpenAI Sora, OpenRouter, fal, Runway, and related video providers and polling behavior."
         docs:
           - docs/tools/video-generation.md
           - docs/providers/runway.md
@@ -10634,7 +10964,7 @@ surfaces:
         human_lts_override: false
     last_score_run:
       status: complete
-      completed_at: '2026-05-30'
+      completed_at: "2026-05-30"
       by: codex
       source_ref: null
       process_version: 3
diff --git a/test/e2e/qa-lab/runtime/gateway-smoke.e2e.test.ts b/test/e2e/qa-lab/runtime/gateway-smoke.e2e.test.ts
index 86cfe65e1f0b..3e33bcde34d1 100644
--- a/test/e2e/qa-lab/runtime/gateway-smoke.e2e.test.ts
+++ b/test/e2e/qa-lab/runtime/gateway-smoke.e2e.test.ts
@@ -225,14 +225,8 @@ describe("gateway-smoke", () => {
 
   it("rejects duplicate CLI args before connecting", () => {
     for (const [flag, args] of [
-      [
-        "--url",
-        ["--url", "ws://127.0.0.1:9", "--url", "ws://127.0.0.1:10", "--token", "token"],
-      ],
-      [
-        "--token",
-        ["--url", "ws://127.0.0.1:9", "--token", "one", "--token", "two"],
-      ],
+      ["--url", ["--url", "ws://127.0.0.1:9", "--url", "ws://127.0.0.1:10", "--token", "token"]],
+      ["--token", ["--url", "ws://127.0.0.1:9", "--token", "one", "--token", "two"]],
       ["--help", ["--help", "--help"]],
     ] as const) {
       const result = spawnSync(
diff --git a/test/e2e/qa-lab/runtime/script-evidence.test.ts b/test/e2e/qa-lab/runtime/script-evidence.test.ts
index 79510fdb2c14..b1fba472f438 100644
--- a/test/e2e/qa-lab/runtime/script-evidence.test.ts
+++ b/test/e2e/qa-lab/runtime/script-evidence.test.ts
@@ -11,9 +11,7 @@ import {
 
 const tempRoots: string[] = [];
 
-async function makeWriter(
-  params: { maxDetailsBytes?: number; maxLogBytes?: number } = {},
-) {
+async function makeWriter(params: { maxDetailsBytes?: number; maxLogBytes?: number } = {}) {
   const repoRoot = await fs.mkdtemp(path.join(os.tmpdir(), "openclaw-script-evidence-"));
   tempRoots.push(repoRoot);
   return {
diff --git a/test/e2e/qa-lab/runtime/telegram-bot-token-runtime.ts b/test/e2e/qa-lab/runtime/telegram-bot-token-runtime.ts
index 0bc8d3a45694..e75cae0ef429 100644
--- a/test/e2e/qa-lab/runtime/telegram-bot-token-runtime.ts
+++ b/test/e2e/qa-lab/runtime/telegram-bot-token-runtime.ts
@@ -23,10 +23,7 @@ type TelegramRuntimeOptions = {
 async function waitForMonitorShutdown(monitorPromise: Promise<void>, timeoutMs: number) {
   let timeout: NodeJS.Timeout | undefined;
   const timeoutPromise = new Promise<never>((_, reject) => {
-    timeout = setTimeout(
-      () => reject(new Error("Telegram runtime shutdown timed out")),
-      timeoutMs,
-    );
+    timeout = setTimeout(() => reject(new Error("Telegram runtime shutdown timed out")), timeoutMs);
   });
   try {
     await Promise.race([monitorPromise.catch(() => undefined), timeoutPromise]);
diff --git a/test/helpers/cron/service-regression-fixtures.ts b/test/helpers/cron/service-regression-fixtures.ts
index 0c8f63b5d412..d05202a82b21 100644
--- a/test/helpers/cron/service-regression-fixtures.ts
+++ b/test/helpers/cron/service-regression-fixtures.ts
@@ -6,11 +6,11 @@ import path from "node:path";
 import { afterAll, afterEach, beforeAll, beforeEach, vi } from "vitest";
 import { clearAllBootstrapSnapshots } from "../../../src/agents/bootstrap-cache.js";
 import { clearSessionStoreCacheForTest } from "../../../src/config/sessions/store.js";
-import type { CronServiceDeps } from "../../../src/cron/service/state.js";
 import {
   createDeferred,
   createRunningCronServiceState,
 } from "../../../src/cron/service.test-harness.js";
+import type { CronServiceDeps } from "../../../src/cron/service/state.js";
 import type { CronJob, CronJobState } from "../../../src/cron/types.js";
 import { resetAgentRunContextForTest } from "../../../src/infra/agent-events.js";
 import {
diff --git a/test/package-scripts.test.ts b/test/package-scripts.test.ts
index 5f423cb0344f..e6c387181e3b 100644
--- a/test/package-scripts.test.ts
+++ b/test/package-scripts.test.ts
@@ -155,7 +155,7 @@ describe("package scripts", () => {
   it("builds iOS against a generic simulator by default", () => {
     const script = readPackageJson().scripts["ios:build"];
 
-    expect(script).toContain('${IOS_DEST:-generic/platform=iOS Simulator}');
+    expect(script).toContain("${IOS_DEST:-generic/platform=iOS Simulator}");
     expect(script).not.toContain("name=iPhone");
   });
 
diff --git a/test/scripts/arg-utils.test.ts b/test/scripts/arg-utils.test.ts
index ce369a1cbc35..a4f8484a6065 100644
--- a/test/scripts/arg-utils.test.ts
+++ b/test/scripts/arg-utils.test.ts
@@ -62,23 +62,19 @@ describe("scripts/lib/arg-utils parseFlagArgs", () => {
 
   it("requires custom specs to declare consumed flags", () => {
     expect(() =>
-      parseFlagArgs(
-        ["--custom"],
-        {},
-        [
-          {
-            consume(argv, index) {
-              if (argv[index] !== "--custom") {
-                return null;
-              }
-              return {
-                nextIndex: index,
-                apply() {},
-              };
-            },
+      parseFlagArgs(["--custom"], {}, [
+        {
+          consume(argv, index) {
+            if (argv[index] !== "--custom") {
+              return null;
+            }
+            return {
+              nextIndex: index,
+              apply() {},
+            };
           },
-        ],
-      ),
+        },
+      ]),
     ).toThrow("parseFlagArgs specs must declare a flag for consumed options");
   });
 
diff --git a/test/scripts/check-docs-i18n-glossary.test.ts b/test/scripts/check-docs-i18n-glossary.test.ts
index 72315ab671e6..395281d09ea3 100644
--- a/test/scripts/check-docs-i18n-glossary.test.ts
+++ b/test/scripts/check-docs-i18n-glossary.test.ts
@@ -11,9 +11,7 @@ describe("check-docs-i18n-glossary", () => {
 
   it("rejects missing diff ref values", () => {
     expect(() => parseArgs(["--base", "--head", "HEAD"])).toThrow("--base requires a value");
-    expect(() => parseArgs(["--base", "-h", "--head", "HEAD"])).toThrow(
-      "--base requires a value",
-    );
+    expect(() => parseArgs(["--base", "-h", "--head", "HEAD"])).toThrow("--base requires a value");
     expect(() => parseArgs(["--head"])).toThrow("--head requires a value");
     expect(() => parseArgs(["--head", "-h"])).toThrow("--head requires a value");
     expect(() => parseArgs(["--base", ""])).toThrow("--base requires a value");
diff --git a/test/scripts/codesign-mac-app.test.ts b/test/scripts/codesign-mac-app.test.ts
index 47ec85361882..bfb7266abc2f 100644
--- a/test/scripts/codesign-mac-app.test.ts
+++ b/test/scripts/codesign-mac-app.test.ts
@@ -189,9 +189,7 @@ describe("codesign-mac-app temp file hygiene", () => {
 
     const signLines = readFileSync(logPath, "utf8").trim().split("\n");
     expect(signLines).toHaveLength(3);
-    expect(signLines[0]).toContain(
-      `${path.join(app, "Contents", "MacOS", "openclaw-mlx-tts")}\t`,
-    );
+    expect(signLines[0]).toContain(`${path.join(app, "Contents", "MacOS", "openclaw-mlx-tts")}\t`);
     expect(signLines[1]).toContain(`${path.join(app, "Contents", "MacOS", "OpenClaw")}\t`);
     expect(signLines[2]).toContain(`${app}\t`);
     for (const line of signLines) {
diff --git a/test/scripts/committer.test.ts b/test/scripts/committer.test.ts
index 7611c4e09c87..5c71d9b7269b 100644
--- a/test/scripts/committer.test.ts
+++ b/test/scripts/committer.test.ts
@@ -174,11 +174,7 @@ describe("scripts/committer", () => {
 
   it("bypasses git hooks when using --fast", () => {
     const repo = createRepo();
-    installHook(
-      repo,
-      ".githooks/pre-commit",
-      "#!/usr/bin/env bash\nset -euo pipefail\nexit 91\n",
-    );
+    installHook(repo, ".githooks/pre-commit", "#!/usr/bin/env bash\nset -euo pipefail\nexit 91\n");
     writeRepoFile(repo, "note.txt", "hello\n");
 
     const output = commitWithHelperArgs(repo, "--fast", "test: fast no verify", "note.txt");
diff --git a/test/scripts/create-dmg.test.ts b/test/scripts/create-dmg.test.ts
index 7650ee53ad62..35ba412e7f1c 100644
--- a/test/scripts/create-dmg.test.ts
+++ b/test/scripts/create-dmg.test.ts
@@ -199,11 +199,13 @@ describe("create-dmg plist validation", () => {
     const script = readFileSync(scriptPath, "utf8");
     const validationBlock = script.slice(
       script.indexOf("require_integer_list()"),
-      script.indexOf('to_applescript_list4()'),
+      script.indexOf("to_applescript_list4()"),
     );
 
     expect(validationBlock).toContain("require_nonnegative_integer()");
-    expect(validationBlock).toContain('require_nonnegative_integer DMG_EXTRA_SECTORS "$DMG_EXTRA_SECTORS"');
+    expect(validationBlock).toContain(
+      'require_nonnegative_integer DMG_EXTRA_SECTORS "$DMG_EXTRA_SECTORS"',
+    );
     expect(validationBlock).toContain("must be a finite non-negative integer");
   });
 
diff --git a/test/scripts/dependency-ownership-surface-report.test.ts b/test/scripts/dependency-ownership-surface-report.test.ts
index 383d0b1b19fd..e1a5eab84d87 100644
--- a/test/scripts/dependency-ownership-surface-report.test.ts
+++ b/test/scripts/dependency-ownership-surface-report.test.ts
@@ -62,9 +62,9 @@ describe("parseArgs", () => {
     expect(() => parseArgs(["--json", "first.json", "--json", "second.json"])).toThrow(
       "--json was provided more than once.",
     );
-    expect(() =>
-      parseArgs(["--markdown", "first.md", "--markdown", "second.md"]),
-    ).toThrow("--markdown was provided more than once.");
+    expect(() => parseArgs(["--markdown", "first.md", "--markdown", "second.md"])).toThrow(
+      "--markdown was provided more than once.",
+    );
   });
 });
 
diff --git a/test/scripts/docker-e2e-observability.test.ts b/test/scripts/docker-e2e-observability.test.ts
index ae2a9b773bbc..2018e328adaa 100644
--- a/test/scripts/docker-e2e-observability.test.ts
+++ b/test/scripts/docker-e2e-observability.test.ts
@@ -58,13 +58,10 @@ describe("Docker E2E observability", () => {
     "scripts/e2e/mcp-channels-docker.sh",
     "scripts/e2e/cron-cli-docker.sh",
     "scripts/e2e/cron-mcp-cleanup-docker.sh",
-  ])(
-    "prints successful MCP client proof logs from %s",
-    (scriptPath) => {
-      const result = runSuccessTail(scriptPath);
+  ])("prints successful MCP client proof logs from %s", (scriptPath) => {
+    const result = runSuccessTail(scriptPath);
 
-      expect(result.status, result.stderr).toBe(0);
-      expect(result.stdout.trim().split("\n")).toEqual(["LOG:client proof log", "OK"]);
-    },
-  );
+    expect(result.status, result.stderr).toBe(0);
+    expect(result.stdout.trim().split("\n")).toEqual(["LOG:client proof log", "OK"]);
+  });
 });
diff --git a/test/scripts/docker-e2e-plan.test.ts b/test/scripts/docker-e2e-plan.test.ts
index b4e10d6ef112..70a8398b6ba9 100644
--- a/test/scripts/docker-e2e-plan.test.ts
+++ b/test/scripts/docker-e2e-plan.test.ts
@@ -3,7 +3,6 @@ import { execFileSync } from "node:child_process";
 import { copyFileSync, mkdirSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { afterEach, describe, expect, it } from "vitest";
-import { useAutoCleanupTempDirTracker } from "../helpers/temp-dir.js";
 import {
   DEFAULT_LIVE_RETRIES,
   RELEASE_PATH_PROFILE,
@@ -14,6 +13,7 @@ import {
   allReleasePathLanes,
   BUNDLED_PLUGIN_INSTALL_UNINSTALL_SHARDS,
 } from "../../scripts/lib/docker-e2e-scenarios.mjs";
+import { useAutoCleanupTempDirTracker } from "../helpers/temp-dir.js";
 
 const tempDirs = useAutoCleanupTempDirTracker(afterEach);
 const orderLanes = <T>(lanes: T[]) => lanes;
@@ -678,9 +678,10 @@ describe("scripts/lib/docker-e2e-plan", () => {
         withOpenWebUI.lanes.filter((lane) => lane.name === "openwebui"),
         releaseChunk,
       ).toHaveLength(1);
-      expect(withoutOpenWebUI.lanes.map((lane) => lane.name), releaseChunk).not.toContain(
-        "openwebui",
-      );
+      expect(
+        withoutOpenWebUI.lanes.map((lane) => lane.name),
+        releaseChunk,
+      ).not.toContain("openwebui");
     }
   });
 
diff --git a/test/scripts/embedded-run-abort-leak.test.ts b/test/scripts/embedded-run-abort-leak.test.ts
index 13f8508f05f8..47e72e304fb3 100644
--- a/test/scripts/embedded-run-abort-leak.test.ts
+++ b/test/scripts/embedded-run-abort-leak.test.ts
@@ -55,15 +55,7 @@ describe("scripts/embedded-run-abort-leak", () => {
 
   it("rejects duplicate thresholds before writing heap snapshots", () => {
     const snapDir = makeTempRoot();
-    const result = runHarness([
-      "--snap-dir",
-      snapDir,
-      "--iters",
-      "1",
-      "--iters",
-      "2",
-      "--quiet",
-    ]);
+    const result = runHarness(["--snap-dir", snapDir, "--iters", "1", "--iters", "2", "--quiet"]);
 
     expect(result.status).toBe(2);
     expect(result.stdout).toBe("");
diff --git a/test/scripts/generate-dependency-release-evidence.test.ts b/test/scripts/generate-dependency-release-evidence.test.ts
index 74915a4e1ed3..a9990b206075 100644
--- a/test/scripts/generate-dependency-release-evidence.test.ts
+++ b/test/scripts/generate-dependency-release-evidence.test.ts
@@ -144,20 +144,50 @@ describe("generate-dependency-release-evidence", () => {
     const artifactArgs = ["--output-dir", "evidence", ...requiredArgs];
     const duplicateCases = [
       ["--root", ["--root", "repo-a", "--root", "repo-b", ...artifactArgs]],
-      ["--output-dir", ["--output-dir", "evidence-a", "--output-dir", "evidence-b", ...requiredArgs]],
+      [
+        "--output-dir",
+        ["--output-dir", "evidence-a", "--output-dir", "evidence-b", ...requiredArgs],
+      ],
       [
         "--release-ref",
-        ["--output-dir", "evidence", "--release-ref", "v2026.5.13", "--release-ref", "v2026.5.14", "--npm-dist-tag", "latest"],
+        [
+          "--output-dir",
+          "evidence",
+          "--release-ref",
+          "v2026.5.13",
+          "--release-ref",
+          "v2026.5.14",
+          "--npm-dist-tag",
+          "latest",
+        ],
       ],
       [
         "--npm-dist-tag",
-        ["--output-dir", "evidence", "--release-ref", "v2026.5.13", "--npm-dist-tag", "latest", "--npm-dist-tag", "beta"],
+        [
+          "--output-dir",
+          "evidence",
+          "--release-ref",
+          "v2026.5.13",
+          "--npm-dist-tag",
+          "latest",
+          "--npm-dist-tag",
+          "beta",
+        ],
       ],
       ["--base-ref", [...artifactArgs, "--base-ref", "origin/main", "--base-ref", "HEAD~1"]],
-      ["--github-output", [...artifactArgs, "--github-output", "first.out", "--github-output", "second.out"]],
+      [
+        "--github-output",
+        [...artifactArgs, "--github-output", "first.out", "--github-output", "second.out"],
+      ],
       [
         "--github-step-summary",
-        [...artifactArgs, "--github-step-summary", "first.md", "--github-step-summary", "second.md"],
+        [
+          ...artifactArgs,
+          "--github-step-summary",
+          "first.md",
+          "--github-step-summary",
+          "second.md",
+        ],
       ],
     ] satisfies Array<[string, string[]]>;
 
diff --git a/test/scripts/merge-head-diff-base.test.ts b/test/scripts/merge-head-diff-base.test.ts
index 01ab73995470..5d85c94fd7e1 100644
--- a/test/scripts/merge-head-diff-base.test.ts
+++ b/test/scripts/merge-head-diff-base.test.ts
@@ -12,9 +12,7 @@ describe("merge-head-diff-base", () => {
 
   it("rejects missing refs", () => {
     expect(() => parseArgs(["--base", "--head", "HEAD"])).toThrow("--base requires a value");
-    expect(() => parseArgs(["--base", "-h", "--head", "HEAD"])).toThrow(
-      "--base requires a value",
-    );
+    expect(() => parseArgs(["--base", "-h", "--head", "HEAD"])).toThrow("--base requires a value");
     expect(() => parseArgs(["--head"])).toThrow("--head requires a value");
     expect(() => parseArgs(["--head", "-h"])).toThrow("--head requires a value");
     expect(() => parseArgs(["--base", ""])).toThrow("--base requires a value");
diff --git a/test/scripts/openclaw-release-telegram-qa-workflow.test.ts b/test/scripts/openclaw-release-telegram-qa-workflow.test.ts
index fe2f1d937171..25e710a4d232 100644
--- a/test/scripts/openclaw-release-telegram-qa-workflow.test.ts
+++ b/test/scripts/openclaw-release-telegram-qa-workflow.test.ts
@@ -518,17 +518,13 @@ describe("release Telegram QA workflow", () => {
     expect(source).not.toContain("set -x");
     expect(source).toContain('source_node_bin="$(realpath -e "$(command -v node)")"');
     expect(source).toContain('node_bin="${runtime_root}/node"');
-    expect(source).toContain(
-      'sudo install -o root -g root -m 0555 "$source_node_bin" "$node_bin"',
-    );
+    expect(source).toContain('sudo install -o root -g root -m 0555 "$source_node_bin" "$node_bin"');
     expect(source).toContain(
       '[[ "$(stat -c \'%F:%a:%u:%g\' "$node_bin")" == "regular file:555:0:0" ]]',
     );
     expect(source).toContain('"$node_bin" --version >/dev/null');
-    expect(source).toContain("for masked_path in \"$RUNNER_HOME\" /tmp /var/tmp /dev/shm");
-    expect(source).not.toMatch(
-      /^\s+node_bin="\$\(realpath -e "\$\(command -v node\)"\)"$/mu,
-    );
+    expect(source).toContain('for masked_path in "$RUNNER_HOME" /tmp /var/tmp /dev/shm');
+    expect(source).not.toMatch(/^\s+node_bin="\$\(realpath -e "\$\(command -v node\)"\)"$/mu);
     expect(source).toContain('temp_root="$(realpath -e "${OPENCLAW_QA_TEMP_ROOT:?}")"');
     expect(source).toContain("sudo install -d -o root -g root -m 0700 /tmp/openclaw");
     expect(source).toContain(
@@ -551,9 +547,7 @@ describe("release Telegram QA workflow", () => {
       workflowJob("run_telegram"),
       "Create isolated Telegram SUT identity and launcher",
     );
-    const preloadSource = createSutStep.run?.match(
-      /<<'PRELOAD'\n([\s\S]*?)\nPRELOAD/u,
-    )?.[1];
+    const preloadSource = createSutStep.run?.match(/<<'PRELOAD'\n([\s\S]*?)\nPRELOAD/u)?.[1];
     expect(preloadSource).toBeTruthy();
 
     const workdir = tempDirs.make("openclaw-telegram-preload-");
diff --git a/test/scripts/package-mac-app.test.ts b/test/scripts/package-mac-app.test.ts
index 5bd212019c53..5064c2dccdaa 100644
--- a/test/scripts/package-mac-app.test.ts
+++ b/test/scripts/package-mac-app.test.ts
@@ -339,21 +339,17 @@ describe("package-mac-app plist stamping", () => {
     );
     const helperCopy = script.slice(
       script.indexOf('echo "🚚 Copying MLX TTS helper"'),
-      script.indexOf('SPARKLE_FRAMEWORK_PRIMARY='),
+      script.indexOf("SPARKLE_FRAMEWORK_PRIMARY="),
     );
 
-    expect(buildLoop).toContain(
-      'swift build --package-path "$MLX_TTS_HELPER_ROOT"',
-    );
+    expect(buildLoop).toContain('swift build --package-path "$MLX_TTS_HELPER_ROOT"');
     expect(buildLoop).toContain('--product "$MLX_TTS_HELPER_PRODUCT"');
     expect(buildLoop).toContain('--arch "$arch"');
     expect(helperCopy).toContain(
       'cp "$(helper_bin_for_arch "$PRIMARY_ARCH")" "$APP_ROOT/Contents/MacOS/$MLX_TTS_HELPER_PRODUCT"',
     );
     expect(helperCopy).toContain('/usr/bin/lipo -create "${HELPER_BIN_INPUTS[@]}"');
-    expect(helperCopy).toContain(
-      'chmod +x "$APP_ROOT/Contents/MacOS/$MLX_TTS_HELPER_PRODUCT"',
-    );
+    expect(helperCopy).toContain('chmod +x "$APP_ROOT/Contents/MacOS/$MLX_TTS_HELPER_PRODUCT"');
   });
 
   it("falls back to corepack pnpm when the pnpm shim is absent", () => {
@@ -692,7 +688,9 @@ describe("package-mac-app plist stamping", () => {
     expect(script).toContain(
       'PROVIDER_ICONS_SRC="$ROOT_DIR/apps/macos/Sources/OpenClaw/Resources/ProviderIcons"',
     );
-    expect(script).toContain('echo "ERROR: Provider icon resources missing at $PROVIDER_ICONS_SRC"');
+    expect(script).toContain(
+      'echo "ERROR: Provider icon resources missing at $PROVIDER_ICONS_SRC"',
+    );
     expect(script).toContain(
       'cp -R "$PROVIDER_ICONS_SRC" "$APP_ROOT/Contents/Resources/ProviderIcons"',
     );
diff --git a/test/scripts/plugin-package-dependencies.test.ts b/test/scripts/plugin-package-dependencies.test.ts
index e01666a1e7c8..eb053215c8d1 100644
--- a/test/scripts/plugin-package-dependencies.test.ts
+++ b/test/scripts/plugin-package-dependencies.test.ts
@@ -34,8 +34,8 @@ describe("scripts/lib/plugin-package-dependencies.mjs", () => {
   });
 
   it("collects only runtime dependency specs from package manifests", () => {
-    expect(
-      [...collectRuntimeDependencySpecs({
+    expect([
+      ...collectRuntimeDependencySpecs({
         dependencies: {
           empty: "",
           objectValue: { version: "1.0.0" },
@@ -47,8 +47,8 @@ describe("scripts/lib/plugin-package-dependencies.mjs", () => {
         optionalDependencies: {
           optional: "~2.0.0",
         },
-      })],
-    ).toEqual([
+      }),
+    ]).toEqual([
       ["runtime", "^1.0.0"],
       ["optional", "~2.0.0"],
     ]);
diff --git a/test/scripts/plugin-release-pretag-pack-check.test.ts b/test/scripts/plugin-release-pretag-pack-check.test.ts
index 83ce98410fe2..419aefa3d459 100644
--- a/test/scripts/plugin-release-pretag-pack-check.test.ts
+++ b/test/scripts/plugin-release-pretag-pack-check.test.ts
@@ -97,11 +97,7 @@ describe("scripts/plugin-release-pretag-pack-check.ts", () => {
     expect(execFileSyncMock).toHaveBeenCalledTimes(3);
     expect(execFileSyncMock.mock.calls[0]?.slice(0, 2)).toEqual([
       process.execPath,
-      [
-        "scripts/check-plugin-npm-runtime-builds.mjs",
-        "--package",
-        "extensions/demo-plugin",
-      ],
+      ["scripts/check-plugin-npm-runtime-builds.mjs", "--package", "extensions/demo-plugin"],
     ]);
     expect(callOptions(0)).toMatchObject({ cwd: repoDir, stdio: "inherit" });
 
diff --git a/test/scripts/plugin-update-unchanged-docker.test.ts b/test/scripts/plugin-update-unchanged-docker.test.ts
index 41f9b49b8f2a..c045bf77f8cf 100644
--- a/test/scripts/plugin-update-unchanged-docker.test.ts
+++ b/test/scripts/plugin-update-unchanged-docker.test.ts
@@ -93,9 +93,13 @@ describe("plugin update unchanged Docker E2E", () => {
     const script = readFileSync(PLUGIN_UPDATE_SCENARIO_SCRIPT, "utf8");
 
     expect(script).toContain("OPENCLAW_PLUGIN_UPDATE_TIMEOUT_SECONDS");
-    expect(script).toContain('registry_port_file=/tmp/openclaw-e2e-registry.port');
-    expect(script).toContain('node scripts/e2e/lib/plugin-update/registry-server.mjs "$registry_port_file"');
-    expect(script).toContain('export NPM_CONFIG_REGISTRY="http://127.0.0.1:$(cat "$registry_port_file")"');
+    expect(script).toContain("registry_port_file=/tmp/openclaw-e2e-registry.port");
+    expect(script).toContain(
+      'node scripts/e2e/lib/plugin-update/registry-server.mjs "$registry_port_file"',
+    );
+    expect(script).toContain(
+      'export NPM_CONFIG_REGISTRY="http://127.0.0.1:$(cat "$registry_port_file")"',
+    );
     expect(script).toContain('export npm_config_registry="$NPM_CONFIG_REGISTRY"');
     expect(script).toContain(
       "openclaw_e2e_read_positive_int_env OPENCLAW_PLUGIN_UPDATE_TIMEOUT_SECONDS 180",
@@ -202,7 +206,7 @@ describe("plugin update unchanged Docker E2E", () => {
     );
     expect(script).toContain("OPENCLAW_UPDATE_CORRUPT_PLUGIN_STEP_TIMEOUT_SECONDS");
     expect(script).toContain(
-      'default_update_step_timeout_seconds=$((10#$update_timeout_seconds - 30))',
+      "default_update_step_timeout_seconds=$((10#$update_timeout_seconds - 30))",
     );
     expect(script).not.toContain(
       'update_timeout_seconds="${OPENCLAW_UPDATE_CORRUPT_PLUGIN_TIMEOUT_SECONDS:-900}"',
diff --git a/test/scripts/proxy-install-ca.test.ts b/test/scripts/proxy-install-ca.test.ts
index 776b6be49f95..b824e2a14893 100644
--- a/test/scripts/proxy-install-ca.test.ts
+++ b/test/scripts/proxy-install-ca.test.ts
@@ -1,7 +1,7 @@
+import { spawnSync } from "node:child_process";
 // Proxy CA installer tests keep macOS trust changes behind explicit CLI args.
 import { existsSync } from "node:fs";
 import { join } from "node:path";
-import { spawnSync } from "node:child_process";
 import { afterEach, describe, expect, it } from "vitest";
 import { cleanupTempDirs, makeTempDir } from "../helpers/temp-dir.js";
 
diff --git a/test/scripts/report-cli-helpers.test.ts b/test/scripts/report-cli-helpers.test.ts
index 4e5ce0f9dbae..e41110c3db61 100644
--- a/test/scripts/report-cli-helpers.test.ts
+++ b/test/scripts/report-cli-helpers.test.ts
@@ -30,9 +30,7 @@ describe("report-cli-helpers", () => {
     );
     expect(() => parseReportCliArgs(["--json", "-h"])).toThrow("Expected --json <value>.");
     expect(() => parseReportCliArgs(["--markdown", ""])).toThrow("Expected --markdown <value>.");
-    expect(() => parseReportCliArgs(["--markdown", "-h"])).toThrow(
-      "Expected --markdown <value>.",
-    );
+    expect(() => parseReportCliArgs(["--markdown", "-h"])).toThrow("Expected --markdown <value>.");
   });
 
   it("rejects duplicate report artifact options", () => {
@@ -42,8 +40,8 @@ describe("report-cli-helpers", () => {
     expect(() => parseReportCliArgs(["--json", "first.json", "--json", "second.json"])).toThrow(
       "--json was provided more than once.",
     );
-    expect(() =>
-      parseReportCliArgs(["--markdown", "first.md", "--markdown", "second.md"]),
-    ).toThrow("--markdown was provided more than once.");
+    expect(() => parseReportCliArgs(["--markdown", "first.md", "--markdown", "second.md"])).toThrow(
+      "--markdown was provided more than once.",
+    );
   });
 });
diff --git a/test/scripts/run-opengrep.test.ts b/test/scripts/run-opengrep.test.ts
index 034f46866a99..f536dc004b45 100644
--- a/test/scripts/run-opengrep.test.ts
+++ b/test/scripts/run-opengrep.test.ts
@@ -80,7 +80,10 @@ describe("run-opengrep.sh", () => {
     git(repo, "add", ".");
     git(repo, "commit", "-qm", "initial");
 
-    fs.appendFileSync(path.join(repo, ".github/actions/ensure-base-commit/action.yml"), "# changed\n");
+    fs.appendFileSync(
+      path.join(repo, ".github/actions/ensure-base-commit/action.yml"),
+      "# changed\n",
+    );
     const argsPath = path.join(repo, "opengrep-args.txt");
     const binDir = path.join(repo, "bin");
     fs.mkdirSync(binDir);
diff --git a/test/scripts/test-device-pair-telegram.test.ts b/test/scripts/test-device-pair-telegram.test.ts
index 5243f145e105..fdc23fda5278 100644
--- a/test/scripts/test-device-pair-telegram.test.ts
+++ b/test/scripts/test-device-pair-telegram.test.ts
@@ -23,9 +23,7 @@ describe("scripts/dev/test-device-pair-telegram.ts", () => {
 
   it("rejects option tokens as device-pair Telegram values", () => {
     for (const flag of ["--chat", "-c", "--account", "-a"]) {
-      expect(() => parseDevicePairTelegramArgs([flag, "-h"])).toThrow(
-        `${flag} requires a value`,
-      );
+      expect(() => parseDevicePairTelegramArgs([flag, "-h"])).toThrow(`${flag} requires a value`);
     }
     expect(() => parseDevicePairTelegramArgs(["--chat", "--help"])).toThrow(
       "--chat requires a value",
diff --git a/test/scripts/upgrade-survivor-config-recipe.test.ts b/test/scripts/upgrade-survivor-config-recipe.test.ts
index 63cdac6bbd8b..913dc58317ee 100644
--- a/test/scripts/upgrade-survivor-config-recipe.test.ts
+++ b/test/scripts/upgrade-survivor-config-recipe.test.ts
@@ -154,7 +154,11 @@ process.exit(0);
         .map((line) => JSON.parse(line));
       expect(summary.skippedIntents).toContain("acpx-openclaw-tools-bridge");
       expect(loggedArgs).not.toContainEqual(
-        expect.arrayContaining(["set", "plugins", expect.stringContaining("openClawToolsMcpBridge")]),
+        expect.arrayContaining([
+          "set",
+          "plugins",
+          expect.stringContaining("openClawToolsMcpBridge"),
+        ]),
       );
     } finally {
       rmSync(root, { force: true, recursive: true });
diff --git a/tsconfig.json b/tsconfig.json
index f99239ac90f0..c5fa798c8bf4 100644
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -7,7 +7,7 @@
     "experimentalDecorators": true,
     "forceConsistentCasingInFileNames": true,
     "isolatedModules": true,
-    "lib": ["DOM", "DOM.Iterable", "ES2023", "ScriptHost"],
+    "lib": ["DOM", "DOM.Iterable", "ES2023"],
     "module": "NodeNext",
     "moduleResolution": "NodeNext",
     "noImplicitOverride": true,
diff --git a/ui/src/components/exec-approval.ts b/ui/src/components/exec-approval.ts
index 3e019a9bd857..893a3f56092d 100644
--- a/ui/src/components/exec-approval.ts
+++ b/ui/src/components/exec-approval.ts
@@ -111,8 +111,7 @@ function renderPluginBody(active: ExecApprovalRequest) {
   return html`
     ${active.pluginDescription
       ? html`<pre class="exec-approval-command mono" style="white-space:pre-wrap">
-${active.pluginDescription}</pre
-        >`
+${active.pluginDescription}</pre>`
       : nothing}
     <div class="exec-approval-meta">
       ${renderMetaRow(t("execApproval.labels.severity"), active.pluginSeverity)}
diff --git a/ui/src/e2e/chat-composer-redesign.e2e.test.ts b/ui/src/e2e/chat-composer-redesign.e2e.test.ts
index 6abe695796df..89b45a201509 100644
--- a/ui/src/e2e/chat-composer-redesign.e2e.test.ts
+++ b/ui/src/e2e/chat-composer-redesign.e2e.test.ts
@@ -629,9 +629,7 @@ describeControlUiE2e("Control UI chat composer redesign", () => {
         .toBe(0);
       // The advertised default is unavailable, so no usable catalog row is
       // marked as the default and no synthetic empty row is introduced.
-      await expect
-        .poll(() => composer.locator('[data-chat-model-default="true"]').count())
-        .toBe(0);
+      await expect.poll(() => composer.locator('[data-chat-model-default="true"]').count()).toBe(0);
       await expect.poll(() => composer.locator('[data-chat-model-option=""]').count()).toBe(0);
     } finally {
       await context.close();
diff --git a/ui/src/e2e/chat-pull-requests.e2e.test.ts b/ui/src/e2e/chat-pull-requests.e2e.test.ts
index aec906fbb7ec..d4ebd9990694 100644
--- a/ui/src/e2e/chat-pull-requests.e2e.test.ts
+++ b/ui/src/e2e/chat-pull-requests.e2e.test.ts
@@ -127,9 +127,7 @@ describeControlUiE2e("session pull request chips", () => {
       .toBe("https://github.com/openclaw/openclaw/pull/103469/checks");
     // Clicking outside light-dismisses the popover.
     await page.locator(".chat-prs").click({ position: { x: 4, y: 4 } });
-    await expect
-      .poll(() => openChip.locator(".chat-pr__checks[open]").count())
-      .toBe(0);
+    await expect.poll(() => openChip.locator(".chat-pr__checks[open]").count()).toBe(0);
 
     // Show more reveals the collapsed merged chip.
     await showMore.click();
diff --git a/ui/src/lib/presenter.test.ts b/ui/src/lib/presenter.test.ts
index f55dc71f4240..aa179e9319f2 100644
--- a/ui/src/lib/presenter.test.ts
+++ b/ui/src/lib/presenter.test.ts
@@ -1,7 +1,7 @@
 // Control UI tests cover cron schedule presentation.
 import { describe, expect, it } from "vitest";
-import { formatCronSchedule } from "./presenter.ts";
 import type { CronJob } from "../api/types.ts";
+import { formatCronSchedule } from "./presenter.ts";
 
 function job(schedule: CronJob["schedule"]): CronJob {
   return {
diff --git a/ui/src/pages/channels/view.ts b/ui/src/pages/channels/view.ts
index 98cd5a7e5513..069a56539206 100644
--- a/ui/src/pages/channels/view.ts
+++ b/ui/src/pages/channels/view.ts
@@ -106,8 +106,7 @@ export function renderChannels(props: ChannelsProps) {
         : nothing}
       <pre class="code-block" style="margin-top: 12px;">
 ${props.snapshot ? JSON.stringify(props.snapshot, null, 2) : t("channels.health.noSnapshotYet")}
-      </pre
-      >
+      </pre>
     </section>
   `;
 }
diff --git a/ui/src/pages/chat/components/chat-pull-requests.test.ts b/ui/src/pages/chat/components/chat-pull-requests.test.ts
index 776693d6ae99..1df713524d52 100644
--- a/ui/src/pages/chat/components/chat-pull-requests.test.ts
+++ b/ui/src/pages/chat/components/chat-pull-requests.test.ts
@@ -53,7 +53,13 @@ describe("renderChatPullRequests", () => {
 
   it("renders nothing without pull requests", () => {
     render(
-      renderChatPullRequests({ pullRequests: [], rateLimited: false, expanded: false, onExpand: () => {}, onDismiss: () => {} }),
+      renderChatPullRequests({
+        pullRequests: [],
+        rateLimited: false,
+        expanded: false,
+        onExpand: () => {},
+        onDismiss: () => {},
+      }),
       container,
     );
     expect(container.querySelector(".chat-prs")).toBeNull();
@@ -206,7 +212,13 @@ describe("renderChatPullRequests", () => {
   it("dismisses a chip through the X button", () => {
     const onDismiss = vi.fn();
     render(
-      renderChatPullRequests({ pullRequests: [pullRequest()], rateLimited: false, expanded: false, onExpand: () => {}, onDismiss }),
+      renderChatPullRequests({
+        pullRequests: [pullRequest()],
+        rateLimited: false,
+        expanded: false,
+        onExpand: () => {},
+        onDismiss,
+      }),
       container,
     );
     container.querySelector<HTMLButtonElement>(".chat-pr__dismiss")?.click();
diff --git a/ui/src/pages/chat/components/chat-pull-requests.ts b/ui/src/pages/chat/components/chat-pull-requests.ts
index 62a6f2ed4a30..771459841f36 100644
--- a/ui/src/pages/chat/components/chat-pull-requests.ts
+++ b/ui/src/pages/chat/components/chat-pull-requests.ts
@@ -115,9 +115,11 @@ function renderChecks(pullRequest: ControlUiSessionPullRequest) {
         <span class="chat-pr__checks-dot" aria-hidden="true"></span>
         ${t("chat.pullRequests.checks")}
       </summary>
-      <div class="chat-pr__checks-menu" role="group" aria-label=${t(
-        "chat.pullRequests.ciMonitoring",
-      )}>
+      <div
+        class="chat-pr__checks-menu"
+        role="group"
+        aria-label=${t("chat.pullRequests.ciMonitoring")}
+      >
         <div class="chat-pr__checks-menu-header">
           <span>${t("chat.pullRequests.ciMonitoring")}</span>
           <a
diff --git a/ui/src/pages/debug/view.ts b/ui/src/pages/debug/view.ts
index 5aa917c580d2..bd9ab907bd8b 100644
--- a/ui/src/pages/debug/view.ts
+++ b/ui/src/pages/debug/view.ts
@@ -122,8 +122,7 @@ export function renderDebug(props: DebugProps) {
       <div class="card-title">${t("debug.modelsTitle")}</div>
       <div class="card-sub">${t("debug.modelsSubtitle")}</div>
       <pre class="code-block" style="margin-top: 12px;">
-${JSON.stringify(props.models ?? [], null, 2)}</pre
-      >
+${JSON.stringify(props.models ?? [], null, 2)}</pre>
     </section>
 
     <section class="card" style="margin-top: 18px;">
@@ -142,8 +141,7 @@ ${JSON.stringify(props.models ?? [], null, 2)}</pre
                     </div>
                     <div class="list-meta debug-event-log__meta">
                       <pre class="code-block debug-event-log__payload">
-${formatEventPayload(evt.payload)}</pre
-                      >
+${formatEventPayload(evt.payload)}</pre>
                     </div>
                   </div>
                 `,
diff --git a/ui/src/styles/chat/tool-cards.css b/ui/src/styles/chat/tool-cards.css
index 7883d21e77aa..240860e255b5 100644
--- a/ui/src/styles/chat/tool-cards.css
+++ b/ui/src/styles/chat/tool-cards.css
@@ -161,7 +161,6 @@
   color: color-mix(in srgb, var(--muted) 85%, var(--text) 15%);
 }
 
-
 .chat-tool-row__verb {
   flex-shrink: 0;
   font-weight: 500;
@@ -201,7 +200,8 @@
    correct in both themes. Scoped to no-preference so reduced-motion users
    keep plain static text and syntax colors. */
 @media (prefers-reduced-motion: no-preference) {
-  .chat-tool-row--running :is(
+  .chat-tool-row--running
+    :is(
       .chat-tool-msg-summary__label,
       .chat-tool-row__title,
       .chat-tool-row__verb,
diff --git a/ui/src/styles/layout.css b/ui/src/styles/layout.css
index 294cbd70e52b..e2ff7fd852c2 100644
--- a/ui/src/styles/layout.css
+++ b/ui/src/styles/layout.css
@@ -2381,4 +2381,3 @@ openclaw-session-menu[popover] {
   color: var(--text-strong);
   font-style: italic;
 }
-
diff --git a/ui/src/styles/layout.mobile.css b/ui/src/styles/layout.mobile.css
index 36fed985c9c5..b5dfe455560d 100644
--- a/ui/src/styles/layout.mobile.css
+++ b/ui/src/styles/layout.mobile.css
@@ -233,7 +233,6 @@
     flex: 0 0 auto;
     width: auto;
   }
-
 }
 
 /* Native macOS narrow widths (e.g. the in-app link browser splitting the