diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 0000000..174dd66
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,34 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+permissions:
+  contents: read
+  packages: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+      # Installs @mind-studio/* from GitHub Packages via the committed .npmrc.
+      # GITHUB_TOKEN can read public packages in the same MIND-Studio org; if a
+      # cross-repo read is ever refused, set a NODE_AUTH_TOKEN secret to an org
+      # PAT with read:packages.
+      - run: npm ci
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NODE_AUTH_TOKEN || secrets.GITHUB_TOKEN }}
+      # Lint + format gate (Biome). Fails on errors; warnings are the
+      # documented legacy baseline tracked in biome.json.
+      - run: npx biome ci .
+      - run: npx tsc --noEmit
+      - run: npm run test
+      - run: npm run build
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NODE_AUTH_TOKEN || secrets.GITHUB_TOKEN }}
diff --git a/.husky/pre-commit b/.husky/pre-commit
new file mode 100644
index 0000000..2312dc5
--- /dev/null
+++ b/.husky/pre-commit
@@ -0,0 +1 @@
+npx lint-staged
diff --git a/.husky/pre-push b/.husky/pre-push
new file mode 100644
index 0000000..3885023
--- /dev/null
+++ b/.husky/pre-push
@@ -0,0 +1,6 @@
+# Fast confidence gate before code leaves this machine — mirrors CI's
+# correctness checks. The slow `next build` is left to CI.
+# Bypass in a pinch with `git push --no-verify`.
+npm run lint || exit 1
+npm run typecheck || exit 1
+npm run test || exit 1
diff --git a/biome.json b/biome.json
new file mode 100644
index 0000000..9bc1cf3
--- /dev/null
+++ b/biome.json
@@ -0,0 +1,42 @@
+{
+  "$schema": "https://biomejs.dev/schemas/2.5.0/schema.json",
+  "vcs": { "enabled": true, "clientKind": "git", "useIgnoreFile": true },
+  "files": {
+    "ignoreUnknown": true,
+    "includes": [
+      "**",
+      "!**/public",
+      "!**/scripts",
+      "!**/next-env.d.ts",
+      "!**/package-lock.json",
+      "!**/*.css"
+    ]
+  },
+  "formatter": { "enabled": true, "indentStyle": "space", "indentWidth": 2, "lineWidth": 100 },
+  "linter": {
+    "enabled": true,
+    "domains": { "next": "recommended", "react": "recommended" },
+    "rules": {
+      "recommended": true,
+      "correctness": { "useExhaustiveDependencies": "warn" },
+      "security": { "noDangerouslySetInnerHtml": "warn" },
+      "suspicious": {
+        "noImplicitAnyLet": "warn",
+        "useIterableCallbackReturn": "warn",
+        "noArrayIndexKey": "warn",
+        "noCommentText": "warn",
+        "noControlCharactersInRegex": "warn",
+        "noAssignInExpressions": "warn"
+      },
+      "a11y": {
+        "useButtonType": "warn",
+        "noLabelWithoutControl": "warn",
+        "noStaticElementInteractions": "warn",
+        "noSvgWithoutTitle": "warn",
+        "noAutofocus": "warn"
+      }
+    }
+  },
+  "javascript": { "formatter": { "quoteStyle": "double" } },
+  "assist": { "enabled": true, "actions": { "source": { "organizeImports": "on" } } }
+}
diff --git a/infra/css/config.json b/infra/css/config.json
index 0947366..a67e4b2 100644
--- a/infra/css/config.json
+++ b/infra/css/config.json
@@ -10,7 +10,7 @@
     "  - PodResourcesGenerator.templateFolder -> seed NEW pods from the Mind pod template (Welcome README)",
     "All filePaths point at locations populated by the docker-compose bind mount (./infra/css -> /css-host)."
   ],
-  "import": [ "css:config/file.json" ],
+  "import": ["css:config/file.json"],
   "@graph": [
     {
       "@type": "Override",
diff --git a/package-lock.json b/package-lock.json
index 3162046..aff86f5 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -37,16 +37,19 @@
         "yjs": "^13.6.20"
       },
       "devDependencies": {
+        "@biomejs/biome": "^2.5.0",
         "@tailwindcss/postcss": "^4",
         "@types/better-sqlite3": "^7.6.13",
         "@types/node": "^20",
         "@types/react": "^19",
         "@types/react-dom": "^19",
         "@types/ws": "^8.5.13",
+        "husky": "^9.1.7",
+        "lint-staged": "^17.0.7",
         "tailwindcss": "^4",
         "tsx": "^4.22.3",
         "typescript": "^5",
-        "vitest": "^4.1.7",
+        "vitest": "^4.1.9",
         "ws": "^8.18.0"
       }
     },
@@ -144,6 +147,169 @@
         "buffer": "^6.0.3"
       }
     },
+    "node_modules/@biomejs/biome": {
+      "version": "2.5.0",
+      "resolved": "https://registry.npmjs.org/@biomejs/biome/-/biome-2.5.0.tgz",
+      "integrity": "sha512-4kURkd9hAPrdDM3C9n82ycYgx8hvQcW6MjKTEejruj8rK0N8P3OPpdy8BvI8kt3KWY4ycF5XtDOrktetEfhfuw==",
+      "dev": true,
+      "license": "MIT OR Apache-2.0",
+      "bin": {
+        "biome": "bin/biome"
+      },
+      "engines": {
+        "node": ">=14.21.3"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/biome"
+      },
+      "optionalDependencies": {
+        "@biomejs/cli-darwin-arm64": "2.5.0",
+        "@biomejs/cli-darwin-x64": "2.5.0",
+        "@biomejs/cli-linux-arm64": "2.5.0",
+        "@biomejs/cli-linux-arm64-musl": "2.5.0",
+        "@biomejs/cli-linux-x64": "2.5.0",
+        "@biomejs/cli-linux-x64-musl": "2.5.0",
+        "@biomejs/cli-win32-arm64": "2.5.0",
+        "@biomejs/cli-win32-x64": "2.5.0"
+      }
+    },
+    "node_modules/@biomejs/cli-darwin-arm64": {
+      "version": "2.5.0",
+      "resolved": "https://registry.npmjs.org/@biomejs/cli-darwin-arm64/-/cli-darwin-arm64-2.5.0.tgz",
+      "integrity": "sha512-Mn3Fwi3SA5fgmfCPqmzpWF2DLZnms3BVAhM088nTnGrTZmHS3wwIjcoZPqpXeNgd3DrrLH6xp8vTLIBuJoZiXw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT OR Apache-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=14.21.3"
+      }
+    },
+    "node_modules/@biomejs/cli-darwin-x64": {
+      "version": "2.5.0",
+      "resolved": "https://registry.npmjs.org/@biomejs/cli-darwin-x64/-/cli-darwin-x64-2.5.0.tgz",
+      "integrity": "sha512-rg3VPL5P8mYro6pqlXYXuJWph21slVp3SZtAqWSrkZs40d2gTzYmHF8E/X1iTID25btmNKltNDJ926sqVBp7DQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT OR Apache-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=14.21.3"
+      }
+    },
+    "node_modules/@biomejs/cli-linux-arm64": {
+      "version": "2.5.0",
+      "resolved": "https://registry.npmjs.org/@biomejs/cli-linux-arm64/-/cli-linux-arm64-2.5.0.tgz",
+      "integrity": "sha512-tl+LW8fdD96/xdeWtWwc82LIOc5CoY7N2AsogLTp5R4ECErYt+8Jl/N68ezN9vzSiqPTxw6vjcihoLPYKZHrlw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT OR Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=14.21.3"
+      }
+    },
+    "node_modules/@biomejs/cli-linux-arm64-musl": {
+      "version": "2.5.0",
+      "resolved": "https://registry.npmjs.org/@biomejs/cli-linux-arm64-musl/-/cli-linux-arm64-musl-2.5.0.tgz",
+      "integrity": "sha512-vQdM4oSGaf7ZNeGO9w5+Y8SBtyser9M6znxYbm7Ec8wInxJu1WiKxFYZW5Auj2d80bcVvefuGGRxoFOE0eee8g==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT OR Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=14.21.3"
+      }
+    },
+    "node_modules/@biomejs/cli-linux-x64": {
+      "version": "2.5.0",
+      "resolved": "https://registry.npmjs.org/@biomejs/cli-linux-x64/-/cli-linux-x64-2.5.0.tgz",
+      "integrity": "sha512-zpEGf4RQbFEh8Vt7OmavLyyOzRbtcE9osCqrS1kfvt8jDvxwhKXLSf7n0ebr/ov0RJ9ssP+lhs6C8a9WwFvrQA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT OR Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=14.21.3"
+      }
+    },
+    "node_modules/@biomejs/cli-linux-x64-musl": {
+      "version": "2.5.0",
+      "resolved": "https://registry.npmjs.org/@biomejs/cli-linux-x64-musl/-/cli-linux-x64-musl-2.5.0.tgz",
+      "integrity": "sha512-+9hIcMngJ+yGUahXqZuZ8CoWKJE9SAZsFsM3QDvXpNsLbXZ9lqVzgBhOk/jTSYkOA0GLP9eu3teukqpLUojHMg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT OR Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=14.21.3"
+      }
+    },
+    "node_modules/@biomejs/cli-win32-arm64": {
+      "version": "2.5.0",
+      "resolved": "https://registry.npmjs.org/@biomejs/cli-win32-arm64/-/cli-win32-arm64-2.5.0.tgz",
+      "integrity": "sha512-jB0wAvTLI4itx5VidqVUejPQFhRUxiZ9l9FvZ26D5fl6t3qme+ZB4PD3bTSeL1vZ8NI2Rx/zj6H9zcESuGHKGw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT OR Apache-2.0",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=14.21.3"
+      }
+    },
+    "node_modules/@biomejs/cli-win32-x64": {
+      "version": "2.5.0",
+      "resolved": "https://registry.npmjs.org/@biomejs/cli-win32-x64/-/cli-win32-x64-2.5.0.tgz",
+      "integrity": "sha512-VT/lF+GId+67j8aDfLkxdxNoVApsPSTbyAtB3jJq0IWTrY77WXfbPfpngxq0bA6JCEv/7k8C9qWjDRKRznDlyw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT OR Apache-2.0",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=14.21.3"
+      }
+    },
     "node_modules/@date-fns/tz": {
       "version": "1.5.0",
       "resolved": "https://registry.npmjs.org/@date-fns/tz/-/tz-1.5.0.tgz",
@@ -1417,14 +1583,14 @@
       }
     },
     "node_modules/@napi-rs/wasm-runtime": {
-      "version": "1.1.4",
-      "resolved": "https://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-1.1.4.tgz",
-      "integrity": "sha512-3NQNNgA1YSlJb/kMH1ildASP9HW7/7kYnRI2szWJaofaS1hWmbGI4H+d3+22aGzXXN9IJ+n+GiFVcGipJP18ow==",
+      "version": "1.1.5",
+      "resolved": "https://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-1.1.5.tgz",
+      "integrity": "sha512-AWPoBRJ9tsnVhor4sjO7rkni+7p+2IAEFj6cx06UgP10jkQHqay/36uRV/bFkgrh18D9vb4cr8Q0Pthskgzy+Q==",
       "dev": true,
       "license": "MIT",
       "optional": true,
       "dependencies": {
-        "@tybys/wasm-util": "^0.10.1"
+        "@tybys/wasm-util": "^0.10.2"
       },
       "funding": {
         "type": "github",
@@ -1570,9 +1736,9 @@
       }
     },
     "node_modules/@oxc-project/types": {
-      "version": "0.132.0",
-      "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.132.0.tgz",
-      "integrity": "sha512-FESMOxil5Se014ui/Eq8fT5uHJo6nIRwH0PfJrZJXs6Gek3ZVFOrpUv3YIZT20m+extU98Hg1Ym72U58rlsxUQ==",
+      "version": "0.133.0",
+      "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.133.0.tgz",
+      "integrity": "sha512-KzkdCd6Uxqnf6l3HOw1xfatAlUURA0g14cvBYFyJ5SaNOQbOUvBr9PKArcPcrNIeRsBdgcUzOGrhKveVpvOIGA==",
       "dev": true,
       "license": "MIT",
       "funding": {
@@ -3158,9 +3324,9 @@
       "license": "MIT"
     },
     "node_modules/@rolldown/binding-android-arm64": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.0.2.tgz",
-      "integrity": "sha512-ZS4D1JPGn/MYQN/SYDWftIE/nVsM8j/AFOYEzAoOE2O3NktQOZru+/vYXGbR/qtdLdIfGCP0lcoJiYVzsEz+iQ==",
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.0.3.tgz",
+      "integrity": "sha512-454rs7jHngixp/NMxd5srYD57OnzSlZ/eFTETjORQHLwJG1lRtmNOJcBerZlfu4GjKqeq8aCCIQrMdHyhI51Hw==",
       "cpu": [
         "arm64"
       ],
@@ -3175,9 +3341,9 @@
       }
     },
     "node_modules/@rolldown/binding-darwin-arm64": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.0.2.tgz",
-      "integrity": "sha512-vdFA9+C/rekyGce7WqHs/xoT0ioZEWaOFyZLIV1mEeNFaFDUQrPIo8Vs2GvJ6eetb3rzDUtUBgzto3ExpXJB3w==",
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.0.3.tgz",
+      "integrity": "sha512-PcAhP+ynjURNyy8SKGl5DQP94aGuB/7JrXJb/t7P+hanXvQVMWzUvRRhBAcg/lNRadBhoUPqSoP4xw5tR/KBEA==",
       "cpu": [
         "arm64"
       ],
@@ -3192,9 +3358,9 @@
       }
     },
     "node_modules/@rolldown/binding-darwin-x64": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.0.2.tgz",
-      "integrity": "sha512-BewSOwTHazv77DTYiAZXSqqKZ4KP/KonFisDMVU7PImxoWfB2aepnPhd2E4SWz3zDzYgDNbs6jBmTdgNnF02GA==",
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.0.3.tgz",
+      "integrity": "sha512-9YpfeUvSE2RS7wysJ81uOZkXJz7f7Q55H2Gvp3VEw/EsahqDtrphrZ0EwDLK5vvKOzaCrBsjF8JmnMLcUt78Gg==",
       "cpu": [
         "x64"
       ],
@@ -3209,9 +3375,9 @@
       }
     },
     "node_modules/@rolldown/binding-freebsd-x64": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.0.2.tgz",
-      "integrity": "sha512-m41o7M0YWtUdqk61Tb+jnKb2rN++iRdIASlExkUoKfIAH30DOHCB8fVLzSUpbWHHU8esmEioY62PxzexE8MBuA==",
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.0.3.tgz",
+      "integrity": "sha512-yB1IlAsSNHncV6SCTL27/MVGR5htvQsoGxIv5KMGXALp+Ll1wYsn+x98M9MW7qa+NdSbvrrY7ANI4wLJ0n1e6g==",
       "cpu": [
         "x64"
       ],
@@ -3226,9 +3392,9 @@
       }
     },
     "node_modules/@rolldown/binding-linux-arm-gnueabihf": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.0.2.tgz",
-      "integrity": "sha512-jcojB9H7W/jS29pMKWAK1N+fU99vXodHDTatS3b3y/XSOCiHo0kkA74pL3jJmkoQtYpOCxDvaKs1fo2Ij/1X5w==",
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.0.3.tgz",
+      "integrity": "sha512-Yi30IVAAfLUCy2MseFjbB1jAMDl1VMCAas5StnYp8da9+CKvMd2H2cbEjWcw5NPaPqzvYkVIaF1nNUG+b7u/sw==",
       "cpu": [
         "arm"
       ],
@@ -3243,9 +3409,9 @@
       }
     },
     "node_modules/@rolldown/binding-linux-arm64-gnu": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.0.2.tgz",
-      "integrity": "sha512-1jn6qDU5iiOgFgygDzKUuKP0maTi0/f1+sBLgvij/76C77Nm3ts6ufz9Bjg5q5dduxiUIxtq86JIoBvo1xQ4Ig==",
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.0.3.tgz",
+      "integrity": "sha512-jsO7R8To+AdlYgUmN5sHSCZbfhtMBkO0WUx8iORQnPcMMdgr7qM2DQmMwgabs3GhNztdmoKkMKQFHD6DTMCIQw==",
       "cpu": [
         "arm64"
       ],
@@ -3260,9 +3426,9 @@
       }
     },
     "node_modules/@rolldown/binding-linux-arm64-musl": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.0.2.tgz",
-      "integrity": "sha512-QVLO/czFMdoMFSqlX3bcswcJNm/23r+qoa/jgtmFc/qEp6/jXmIkDjF/XIo8dPfGaiwy1xfQn8o77L79GeXFgw==",
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.0.3.tgz",
+      "integrity": "sha512-VWkUHwWriDciit80wleYwKILoR/KMvxh/IdwS/paX+ZgpuRpCrKLUdadJbc0NpBEiyhpYawsJ73j9aCvOH+f7Q==",
       "cpu": [
         "arm64"
       ],
@@ -3277,9 +3443,9 @@
       }
     },
     "node_modules/@rolldown/binding-linux-ppc64-gnu": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.0.2.tgz",
-      "integrity": "sha512-hgO5Abm0w5UL6FEa2iFnZqo2KlK7TQ5QhV5x09hujBf7t5KzHQ1VmfPuTpqRy/rNlSxua3eWH374xxiVrP+lcA==",
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.0.3.tgz",
+      "integrity": "sha512-5f1laC0SlIR0yDbFCd8acUhvJIag6N3zC5P7oUPN6wX0aOma+uKJ0wBDH5aq7I1PVI2ttTlhJwzwRIBnLiSGEg==",
       "cpu": [
         "ppc64"
       ],
@@ -3294,9 +3460,9 @@
       }
     },
     "node_modules/@rolldown/binding-linux-s390x-gnu": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.0.2.tgz",
-      "integrity": "sha512-fy8rXxuYEu602abC8MUNaPjYLIFzReOaEIEMKMUa0rFEUxNpVXhs15KSSQ4qlqSaM7B6rcj9rDZgADh/IGDzLQ==",
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.0.3.tgz",
+      "integrity": "sha512-Iq4ko0r4XsgbrF/LunNgHtAGLRRVE2kXonAXQ/MV0mC6jQpMOhW1SvtZja2EhC/kd05++bP78dsqBeIQyYJ6Yg==",
       "cpu": [
         "s390x"
       ],
@@ -3311,9 +3477,9 @@
       }
     },
     "node_modules/@rolldown/binding-linux-x64-gnu": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.0.2.tgz",
-      "integrity": "sha512-0+bOkiQ779+r1WpoHOWHqncvyySci0vKph+myNDYb+im6meJAzHQXay6oEgnkHuUGouM1LKTZwqKpBow6Kj7CQ==",
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.0.3.tgz",
+      "integrity": "sha512-B8m6tD5+/N5FeNQFbKlLA/2yVq9ycQP1SeedyEYYKWBNR3ZQbkvIUcNnDNM03lO1l5F2roiiFJGgvoLLyZXtSg==",
       "cpu": [
         "x64"
       ],
@@ -3328,9 +3494,9 @@
       }
     },
     "node_modules/@rolldown/binding-linux-x64-musl": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.0.2.tgz",
-      "integrity": "sha512-mjSkrzZK5Qsl0a9d1JgILOiuZOSDTVdKENcSXBoqbzSrspLR/4/IRVDo5wd2GgZjNss/viBFJdeq+j7qH2nypw==",
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.0.3.tgz",
+      "integrity": "sha512-pSdpdUJHkuCxun9LE7jvgUB9qsRgaiyNNCX7m/AvHTcq67AiT/Yhoxvw5zPfhrM8k/BfP8ce/hMOpthKDpEUow==",
       "cpu": [
         "x64"
       ],
@@ -3345,9 +3511,9 @@
       }
     },
     "node_modules/@rolldown/binding-openharmony-arm64": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.0.2.tgz",
-      "integrity": "sha512-1v5vHasdfQAZoEHakBV72LIFAC9JjnymsiKxp+GEr/ma3+NJCPSaYK+qavInOovJkgwFrs7GccX2d6IgDA3Z5w==",
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.0.3.tgz",
+      "integrity": "sha512-OXXS3RKJgX2uLwM+gYyuH5omcH8fL1LJs96pZGgtetVCahON57+d4SJHzTgZiOjxgGkSnpXpOsWuPDGAKAigEg==",
       "cpu": [
         "arm64"
       ],
@@ -3362,9 +3528,9 @@
       }
     },
     "node_modules/@rolldown/binding-wasm32-wasi": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-wasm32-wasi/-/binding-wasm32-wasi-1.0.2.tgz",
-      "integrity": "sha512-mb1VobWn6NheziTk5/WEaR6AKVbrwT5sOi6C7zk3gy/pD1qtJfU1j4PgTo2NJnOtbL9Dl3Aeei8w9jJ7qC2jZQ==",
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-wasm32-wasi/-/binding-wasm32-wasi-1.0.3.tgz",
+      "integrity": "sha512-JTtb8BWFynicNSoPrehsCzBtOKjZ6jhMiPFEmOiuXg1Fl8dn2KHQob+GuPSGR0dryQa1PQJbzjF3dqO/whhjLg==",
       "cpu": [
         "wasm32"
       ],
@@ -3381,9 +3547,9 @@
       }
     },
     "node_modules/@rolldown/binding-win32-arm64-msvc": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.0.2.tgz",
-      "integrity": "sha512-SqKonF56vA/L2yHwHYcEp2P34URpOZ7d1fS635cTkpDnUtEGdUbhI6NzsPdqeSWvAAeGDrxjWjNmibDIdFf9/A==",
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.0.3.tgz",
+      "integrity": "sha512-gEdFFEN70A/jxb2svrWsN3aDL7OUtmvlOy+6fa2jxG8K0wQ1ZbdeLGnidov6Yu5/733dI5ySfzFlQ/cb0bSz1g==",
       "cpu": [
         "arm64"
       ],
@@ -3398,9 +3564,9 @@
       }
     },
     "node_modules/@rolldown/binding-win32-x64-msvc": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.0.2.tgz",
-      "integrity": "sha512-v7qRI7gXLRINcOGXt+7YmAZ6iFuyZVMIoXAxhd8oP+DR9dLfL9GfNIx7PLMxmhZdvq8waUJBQiWN9EKNy+TRBQ==",
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.0.3.tgz",
+      "integrity": "sha512-eXB7CHuaQdqmJcc3koCNtNPmT/bj2gc999kUFgBxG8Ac0NdgXc4rkCHhqrgrhN3zddvvvrgzj1e90SuSfmyIXA==",
       "cpu": [
         "x64"
       ],
@@ -4497,16 +4663,16 @@
       }
     },
     "node_modules/@vitest/expect": {
-      "version": "4.1.7",
-      "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.1.7.tgz",
-      "integrity": "sha512-1R+tw0ortHEbZDGMymm+pN7/AFQ/RkFFdtd7EN+VBpynKmLbP8A3rpEXdshBJ7+8hQ9zBJh/i1s0yKNtxAnU7w==",
+      "version": "4.1.9",
+      "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.1.9.tgz",
+      "integrity": "sha512-vl/rYsUKcBr3SnQn166+XR5ZQcgMx3DQhFWdfli/cWpLnLUmbxZvyrJZotLFUryib+LtArYMSTJ5RbQ57ZqrlA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "@standard-schema/spec": "^1.1.0",
         "@types/chai": "^5.2.2",
-        "@vitest/spy": "4.1.7",
-        "@vitest/utils": "4.1.7",
+        "@vitest/spy": "4.1.9",
+        "@vitest/utils": "4.1.9",
         "chai": "^6.2.2",
         "tinyrainbow": "^3.1.0"
       },
@@ -4515,13 +4681,13 @@
       }
     },
     "node_modules/@vitest/mocker": {
-      "version": "4.1.7",
-      "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-4.1.7.tgz",
-      "integrity": "sha512-vY7nuamKgfvpA1Koa3oYIw/k7D6kZnpGyNMZW8loow2bsBYla1TFdqTaXncWdRn4pgwNs+90RhnXhJScDwQeJA==",
+      "version": "4.1.9",
+      "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-4.1.9.tgz",
+      "integrity": "sha512-EVkXzBjrPGM+cK8/ANWgBrkUCfJfb38/EfTSO8h7pWvKkyPkpWxvR7BkD2MyItMF62C97zAEoqdpUixwR/e+Rw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/spy": "4.1.7",
+        "@vitest/spy": "4.1.9",
         "estree-walker": "^3.0.3",
         "magic-string": "^0.30.21"
       },
@@ -4542,9 +4708,9 @@
       }
     },
     "node_modules/@vitest/pretty-format": {
-      "version": "4.1.7",
-      "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-4.1.7.tgz",
-      "integrity": "sha512-umgCarTOYQWIaDMvGDRZij+6b9oVeLIyJzfN+AS88e0ZOU3QTgNNSTtjQOpcvWr3np1N0j4WgZj+sb3oYBDscw==",
+      "version": "4.1.9",
+      "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-4.1.9.tgz",
+      "integrity": "sha512-s0iufns3iIFitdgm+YR7g1whCAaGtXz459VS9/PqyKDEEFgYIhsHOQmXgIgDuYCt7DeQmiZT0Qe2OA2p4ZPu5A==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -4555,13 +4721,13 @@
       }
     },
     "node_modules/@vitest/runner": {
-      "version": "4.1.7",
-      "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-4.1.7.tgz",
-      "integrity": "sha512-BapjmAQ2aI78WdMEfeUWivnfVzB+VPGwWRQcJE0OUq7qEeEcBsCSf+0T5iREBNE5nBb4wA5Ya0W6IA+sghdEFw==",
+      "version": "4.1.9",
+      "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-4.1.9.tgz",
+      "integrity": "sha512-KXLMDtc7oe70+3mJfGrPUWPesswH+3sTxAMAMl8DG7I8IUQT4XW718dY5ID3vPUcmlu27CcKfY4P3h3I29SLJg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/utils": "4.1.7",
+        "@vitest/utils": "4.1.9",
         "pathe": "^2.0.3"
       },
       "funding": {
@@ -4569,14 +4735,14 @@
       }
     },
     "node_modules/@vitest/snapshot": {
-      "version": "4.1.7",
-      "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-4.1.7.tgz",
-      "integrity": "sha512-ZacLzja+TmJeZ1h14xW2FB/WpeimUD3haBXQPyJqxvo8jQTmfeA8zv58mtjN2C7EHXZDYVcVYdYmAxjkWVvKCw==",
+      "version": "4.1.9",
+      "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-4.1.9.tgz",
+      "integrity": "sha512-Jc7RKGNBo8Z28WYIm0Niej4xdSPByRf6mU58VpHQkd6Zh05rlnA+twjbK5HyeIGHxrzsc3mJgS43uM0CZKzaIA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/pretty-format": "4.1.7",
-        "@vitest/utils": "4.1.7",
+        "@vitest/pretty-format": "4.1.9",
+        "@vitest/utils": "4.1.9",
         "magic-string": "^0.30.21",
         "pathe": "^2.0.3"
       },
@@ -4585,9 +4751,9 @@
       }
     },
     "node_modules/@vitest/spy": {
-      "version": "4.1.7",
-      "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-4.1.7.tgz",
-      "integrity": "sha512-kbkI5LMWakyuTIvs6fUJ5qdIVb1XVKsYJAT4OJ938cHMROYMSfmoQdZy0aaAnjbbc8F61vkoTqz/Az+/HiIu5Q==",
+      "version": "4.1.9",
+      "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-4.1.9.tgz",
+      "integrity": "sha512-fHpsS6mIi+PiEW+vcRVOMkX1oSaPKne3VOclSFICPcGOmfKgXPU5iAah+wcNcj2xPrCCmfq99IDGf+EojhhvhA==",
       "dev": true,
       "license": "MIT",
       "funding": {
@@ -4595,13 +4761,13 @@
       }
     },
     "node_modules/@vitest/utils": {
-      "version": "4.1.7",
-      "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-4.1.7.tgz",
-      "integrity": "sha512-T532WBu791cBxJlCl6SO+J14l81DQx6uQHm1bQbmCDY7nqlEIgkza/UFnSBNaUtSf41unldDFjdOBYEQC4b5Hw==",
+      "version": "4.1.9",
+      "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-4.1.9.tgz",
+      "integrity": "sha512-A51o8ymO5PpqlWNnBP9ZHPXDIpuMtTLlGSjN7la4US+LJzoUMyhwjA5QXlm39JexgwHKW4Xjs8Z2d3dLCXOeuA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/pretty-format": "4.1.7",
+        "@vitest/pretty-format": "4.1.9",
         "convert-source-map": "^2.0.0",
         "tinyrainbow": "^3.1.0"
       },
@@ -4621,6 +4787,48 @@
         "node": ">=6.5"
       }
     },
+    "node_modules/ansi-escapes": {
+      "version": "7.3.0",
+      "resolved": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-7.3.0.tgz",
+      "integrity": "sha512-BvU8nYgGQBxcmMuEeUEmNTvrMVjJNSH7RgW24vXexN4Ven6qCvy4TntnvlnwnMLTVlcRQQdbRY8NKnaIoeWDNg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "environment": "^1.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/ansi-regex": {
+      "version": "6.2.2",
+      "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.2.2.tgz",
+      "integrity": "sha512-Bq3SmSpyFHaWjPk8If9yc6svM8c56dB5BAtW4Qbw5jHTwwXXcTLoRMkpDJp6VL0XzlWaCHTXrkFURMYmD0sLqg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/ansi-regex?sponsor=1"
+      }
+    },
+    "node_modules/ansi-styles": {
+      "version": "6.2.3",
+      "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.3.tgz",
+      "integrity": "sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/ansi-styles?sponsor=1"
+      }
+    },
     "node_modules/argparse": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz",
@@ -4831,6 +5039,39 @@
         "url": "https://polar.sh/cva"
       }
     },
+    "node_modules/cli-cursor": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/cli-cursor/-/cli-cursor-5.0.0.tgz",
+      "integrity": "sha512-aCj4O5wKyszjMmDT4tZj93kxyydN/K5zPWSCe6/0AV/AA1pqe5ZBIw0a2ZfPQV7lL5/yb5HsUreJ6UFAF1tEQw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "restore-cursor": "^5.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/cli-truncate": {
+      "version": "5.2.0",
+      "resolved": "https://registry.npmjs.org/cli-truncate/-/cli-truncate-5.2.0.tgz",
+      "integrity": "sha512-xRwvIOMGrfOAnM1JYtqQImuaNtDEv9v6oIYAs4LIHwTiKee8uwvIi363igssOC0O5U04i4AlENs79LQLu9tEMw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "slice-ansi": "^8.0.0",
+        "string-width": "^8.2.0"
+      },
+      "engines": {
+        "node": ">=20"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/client-only": {
       "version": "0.0.1",
       "resolved": "https://registry.npmjs.org/client-only/-/client-only-0.0.1.tgz",
@@ -5092,6 +5333,13 @@
         "embla-carousel": "8.6.0"
       }
     },
+    "node_modules/emoji-regex": {
+      "version": "10.6.0",
+      "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-10.6.0.tgz",
+      "integrity": "sha512-toUI84YS5YmxW219erniWD0CIVOo46xGKColeNQRgOzDorgBi1v4D71/OFzgD9GO2UGKIv1C3Sp8DAn0+j5w7A==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/end-of-stream": {
       "version": "1.4.5",
       "resolved": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.5.tgz",
@@ -5127,6 +5375,19 @@
         "url": "https://github.com/fb55/entities?sponsor=1"
       }
     },
+    "node_modules/environment": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/environment/-/environment-1.1.0.tgz",
+      "integrity": "sha512-xUtoPkMggbz0MPyPiIWr1Kp4aeWJjDZ6SMvURhimjdZgsRuDplF5/s9hcgGhyXMhs+6vpnuoiZ2kFiu3FMnS8Q==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/es-module-lexer": {
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-2.1.0.tgz",
@@ -5301,6 +5562,19 @@
         "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
       }
     },
+    "node_modules/get-east-asian-width": {
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/get-east-asian-width/-/get-east-asian-width-1.6.0.tgz",
+      "integrity": "sha512-QRbvDIbx6YklUe6RxeTeleMR0yv3cYH6PsPZHcnVn7xv7zO1BHN8r0XETu8n6Ye3Q+ahtSarc3WgtNWmehIBfA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/get-nonce": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/get-nonce/-/get-nonce-1.0.1.tgz",
@@ -5332,6 +5606,22 @@
         "node": ">=6.0.0"
       }
     },
+    "node_modules/husky": {
+      "version": "9.1.7",
+      "resolved": "https://registry.npmjs.org/husky/-/husky-9.1.7.tgz",
+      "integrity": "sha512-5gs5ytaNjBrh5Ow3zrvdUUY+0VxIuWVL4i9irt6friV+BqdCfmV11CQTWMiBYWHbXhco+J1kHfTOUkePhCDvMA==",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "husky": "bin.js"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/typicode"
+      }
+    },
     "node_modules/ieee754": {
       "version": "1.2.1",
       "resolved": "https://registry.npmjs.org/ieee754/-/ieee754-1.2.1.tgz",
@@ -5393,6 +5683,22 @@
         "node": ">=12"
       }
     },
+    "node_modules/is-fullwidth-code-point": {
+      "version": "5.1.0",
+      "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-5.1.0.tgz",
+      "integrity": "sha512-5XHYaSyiqADb4RnZ1Bdad6cPp8Toise4TzEjcOYDHZkTCbKgiUl7WTUCpNWHuxmDt91wnsZBc9xinNzopv3JMQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "get-east-asian-width": "^1.3.1"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/isomorphic.js": {
       "version": "0.2.5",
       "resolved": "https://registry.npmjs.org/isomorphic.js/-/isomorphic.js-0.2.5.tgz",
@@ -5787,6 +6093,121 @@
         "uc.micro": "^2.0.0"
       }
     },
+    "node_modules/lint-staged": {
+      "version": "17.0.7",
+      "resolved": "https://registry.npmjs.org/lint-staged/-/lint-staged-17.0.7.tgz",
+      "integrity": "sha512-JrSobt+tW3rH8IOMi8tDZd3foorM5yPEkLD/V2NxobgHrFfHWGee4MOLVuZeScgxftEwbHrPHIFA/ZL+nUJeuA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "listr2": "^10.2.1",
+        "picomatch": "^4.0.4",
+        "string-argv": "^0.3.2",
+        "tinyexec": "^1.2.4"
+      },
+      "bin": {
+        "lint-staged": "bin/lint-staged.js"
+      },
+      "engines": {
+        "node": ">=22.22.1"
+      },
+      "funding": {
+        "url": "https://opencollective.com/lint-staged"
+      },
+      "optionalDependencies": {
+        "yaml": "^2.9.0"
+      }
+    },
+    "node_modules/listr2": {
+      "version": "10.2.1",
+      "resolved": "https://registry.npmjs.org/listr2/-/listr2-10.2.1.tgz",
+      "integrity": "sha512-7I5knELsJKTUjXG+A6BkKAiGkW1i25fNa/xlUl9hFtk15WbE9jndA89xu5FzQKrY5llajE1hfZZFMILXkDHk/Q==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "cli-truncate": "^5.2.0",
+        "eventemitter3": "^5.0.4",
+        "log-update": "^6.1.0",
+        "rfdc": "^1.4.1",
+        "wrap-ansi": "^10.0.0"
+      },
+      "engines": {
+        "node": ">=22.13.0"
+      }
+    },
+    "node_modules/log-update": {
+      "version": "6.1.0",
+      "resolved": "https://registry.npmjs.org/log-update/-/log-update-6.1.0.tgz",
+      "integrity": "sha512-9ie8ItPR6tjY5uYJh8K/Zrv/RMZ5VOlOWvtZdEHYSTFKZfIBPQa9tOAEeAWhd+AnIneLJ22w5fjOYtoutpWq5w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ansi-escapes": "^7.0.0",
+        "cli-cursor": "^5.0.0",
+        "slice-ansi": "^7.1.0",
+        "strip-ansi": "^7.1.0",
+        "wrap-ansi": "^9.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/log-update/node_modules/slice-ansi": {
+      "version": "7.1.2",
+      "resolved": "https://registry.npmjs.org/slice-ansi/-/slice-ansi-7.1.2.tgz",
+      "integrity": "sha512-iOBWFgUX7caIZiuutICxVgX1SdxwAVFFKwt1EvMYYec/NWO5meOJ6K5uQxhrYBdQJne4KxiqZc+KptFOWFSI9w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ansi-styles": "^6.2.1",
+        "is-fullwidth-code-point": "^5.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/slice-ansi?sponsor=1"
+      }
+    },
+    "node_modules/log-update/node_modules/string-width": {
+      "version": "7.2.0",
+      "resolved": "https://registry.npmjs.org/string-width/-/string-width-7.2.0.tgz",
+      "integrity": "sha512-tsaTIkKW9b4N+AEj+SVA+WhJzV7/zMhcSu78mLKWSk7cXMOSHsBKFWUs0fWwq8QyK3MgJBQRX6Gbi4kYbdvGkQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "emoji-regex": "^10.3.0",
+        "get-east-asian-width": "^1.0.0",
+        "strip-ansi": "^7.1.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/log-update/node_modules/wrap-ansi": {
+      "version": "9.0.2",
+      "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-9.0.2.tgz",
+      "integrity": "sha512-42AtmgqjV+X1VpdOfyTGOYRi0/zsoLqtXQckTmqTeybT+BDIbM/Guxo7x3pE2vtpr1ok6xRqM9OpBe+Jyoqyww==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ansi-styles": "^6.2.1",
+        "string-width": "^7.0.0",
+        "strip-ansi": "^7.1.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/wrap-ansi?sponsor=1"
+      }
+    },
     "node_modules/lru-cache": {
       "version": "6.0.0",
       "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz",
@@ -5869,6 +6290,19 @@
       "integrity": "sha512-Lf+9+2r+Tdp5wXDXC4PcIBjTDtq4UKjCPMQhKIuzpJNW0b96kVqSwW0bT7FhRSfmAiFYgP+SCRvdrDozfh0U5w==",
       "license": "MIT"
     },
+    "node_modules/mimic-function": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/mimic-function/-/mimic-function-5.0.1.tgz",
+      "integrity": "sha512-VP79XUPxV2CigYP3jWwAUFSku2aKqBH7uTAapFWCBqutsbmDo96KY5o8uh6U+/YSIn5OxJnXp73beVkpqMIGhA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/mimic-response": {
       "version": "3.1.0",
       "resolved": "https://registry.npmjs.org/mimic-response/-/mimic-response-3.1.0.tgz",
@@ -6058,6 +6492,22 @@
         "wrappy": "1"
       }
     },
+    "node_modules/onetime": {
+      "version": "7.0.0",
+      "resolved": "https://registry.npmjs.org/onetime/-/onetime-7.0.0.tgz",
+      "integrity": "sha512-VXJjc87FScF88uafS3JllDgvAm+c/Slfz06lorj2uAY34rlUu0Nt+v8wreiImcrgAjjIHp1rXpTDlLOGw29WwQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "mimic-function": "^5.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/openid-client": {
       "version": "5.7.1",
       "resolved": "https://registry.npmjs.org/openid-client/-/openid-client-5.7.1.tgz",
@@ -6748,14 +7198,38 @@
       "integrity": "sha512-AgZ3UOZm3YndfrJ4OYjgrT7bmCm/1iqkjvEfH/oYjzh6PD2qw4QuT3jjnXIrpdt4MTpMXclMT3lXbmRY+XRakw==",
       "license": "MIT"
     },
+    "node_modules/restore-cursor": {
+      "version": "5.1.0",
+      "resolved": "https://registry.npmjs.org/restore-cursor/-/restore-cursor-5.1.0.tgz",
+      "integrity": "sha512-oMA2dcrw6u0YfxJQXm342bFKX/E4sG9rbTzO9ptUcR/e8A33cHuvStiYOwH7fszkZlZ1z/ta9AAoPk2F4qIOHA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "onetime": "^7.0.0",
+        "signal-exit": "^4.1.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/rfdc": {
+      "version": "1.4.1",
+      "resolved": "https://registry.npmjs.org/rfdc/-/rfdc-1.4.1.tgz",
+      "integrity": "sha512-q1b3N5QkRUWUl7iyylaaj3kOpIT0N2i9MqIEQXP73GVsN9cw3fdx8X63cEmWhJGi2PPCF23Ijp7ktmd39rawIA==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/rolldown": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.0.2.tgz",
-      "integrity": "sha512-oZx5zVDtVB44AW3eaifgDml1gWRDZGvjcfdxonE4swNPG98PrrXjaO/KrnUjzlMnztCCRVlUueA1kCXhARGk6g==",
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.0.3.tgz",
+      "integrity": "sha512-i00lAJ2ks1BYr7rjNjKC7BcqAS7nVfiT3QX1SI5aY+AFHblCmaUf9OE9dbdzDvW6dJxbi2ZCZiy9v3CcwOiX3g==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@oxc-project/types": "=0.132.0",
+        "@oxc-project/types": "=0.133.0",
         "@rolldown/pluginutils": "^1.0.0"
       },
       "bin": {
@@ -6765,21 +7239,21 @@
         "node": "^20.19.0 || >=22.12.0"
       },
       "optionalDependencies": {
-        "@rolldown/binding-android-arm64": "1.0.2",
-        "@rolldown/binding-darwin-arm64": "1.0.2",
-        "@rolldown/binding-darwin-x64": "1.0.2",
-        "@rolldown/binding-freebsd-x64": "1.0.2",
-        "@rolldown/binding-linux-arm-gnueabihf": "1.0.2",
-        "@rolldown/binding-linux-arm64-gnu": "1.0.2",
-        "@rolldown/binding-linux-arm64-musl": "1.0.2",
-        "@rolldown/binding-linux-ppc64-gnu": "1.0.2",
-        "@rolldown/binding-linux-s390x-gnu": "1.0.2",
-        "@rolldown/binding-linux-x64-gnu": "1.0.2",
-        "@rolldown/binding-linux-x64-musl": "1.0.2",
-        "@rolldown/binding-openharmony-arm64": "1.0.2",
-        "@rolldown/binding-wasm32-wasi": "1.0.2",
-        "@rolldown/binding-win32-arm64-msvc": "1.0.2",
-        "@rolldown/binding-win32-x64-msvc": "1.0.2"
+        "@rolldown/binding-android-arm64": "1.0.3",
+        "@rolldown/binding-darwin-arm64": "1.0.3",
+        "@rolldown/binding-darwin-x64": "1.0.3",
+        "@rolldown/binding-freebsd-x64": "1.0.3",
+        "@rolldown/binding-linux-arm-gnueabihf": "1.0.3",
+        "@rolldown/binding-linux-arm64-gnu": "1.0.3",
+        "@rolldown/binding-linux-arm64-musl": "1.0.3",
+        "@rolldown/binding-linux-ppc64-gnu": "1.0.3",
+        "@rolldown/binding-linux-s390x-gnu": "1.0.3",
+        "@rolldown/binding-linux-x64-gnu": "1.0.3",
+        "@rolldown/binding-linux-x64-musl": "1.0.3",
+        "@rolldown/binding-openharmony-arm64": "1.0.3",
+        "@rolldown/binding-wasm32-wasi": "1.0.3",
+        "@rolldown/binding-win32-arm64-msvc": "1.0.3",
+        "@rolldown/binding-win32-x64-msvc": "1.0.3"
       }
     },
     "node_modules/rope-sequence": {
@@ -6884,6 +7358,19 @@
       "dev": true,
       "license": "ISC"
     },
+    "node_modules/signal-exit": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-4.1.0.tgz",
+      "integrity": "sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==",
+      "dev": true,
+      "license": "ISC",
+      "engines": {
+        "node": ">=14"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/isaacs"
+      }
+    },
     "node_modules/simple-concat": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/simple-concat/-/simple-concat-1.0.1.tgz",
@@ -6929,6 +7416,23 @@
         "simple-concat": "^1.0.0"
       }
     },
+    "node_modules/slice-ansi": {
+      "version": "8.0.0",
+      "resolved": "https://registry.npmjs.org/slice-ansi/-/slice-ansi-8.0.0.tgz",
+      "integrity": "sha512-stxByr12oeeOyY2BlviTNQlYV5xOj47GirPr4yA1hE9JCtxfQN0+tVbkxwCtYDQWhEKWFHsEK48ORg5jrouCAg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ansi-styles": "^6.2.3",
+        "is-fullwidth-code-point": "^5.1.0"
+      },
+      "engines": {
+        "node": ">=20"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/slice-ansi?sponsor=1"
+      }
+    },
     "node_modules/sonner": {
       "version": "2.0.7",
       "resolved": "https://registry.npmjs.org/sonner/-/sonner-2.0.7.tgz",
@@ -6971,6 +7475,49 @@
         "safe-buffer": "~5.2.0"
       }
     },
+    "node_modules/string-argv": {
+      "version": "0.3.2",
+      "resolved": "https://registry.npmjs.org/string-argv/-/string-argv-0.3.2.tgz",
+      "integrity": "sha512-aqD2Q0144Z+/RqG52NeHEkZauTAUWJO8c6yTftGJKO3Tja5tUgIfmIl6kExvhtxSDP7fXB6DvzkfMpCd/F3G+Q==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.6.19"
+      }
+    },
+    "node_modules/string-width": {
+      "version": "8.2.1",
+      "resolved": "https://registry.npmjs.org/string-width/-/string-width-8.2.1.tgz",
+      "integrity": "sha512-IIaP0g3iy9Cyy18w3M9YcaDudujEAVHKt3a3QJg1+sr/oX96TbaGUubG0hJyCjCBThFH+tFpcIyoUHUn1ogaLA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "get-east-asian-width": "^1.5.0",
+        "strip-ansi": "^7.1.2"
+      },
+      "engines": {
+        "node": ">=20"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/strip-ansi": {
+      "version": "7.2.0",
+      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.2.0.tgz",
+      "integrity": "sha512-yDPMNjp4WyfYBkHnjIRLfca1i6KMyGCtsVgoKe/z1+6vukgaENdgGBZt+ZmKPc4gavvEZ5OgHfHdrazhgNyG7w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ansi-regex": "^6.2.2"
+      },
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/strip-ansi?sponsor=1"
+      }
+    },
     "node_modules/strip-json-comments": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz",
@@ -7089,9 +7636,9 @@
       "license": "MIT"
     },
     "node_modules/tinyexec": {
-      "version": "1.2.3",
-      "resolved": "https://registry.npmjs.org/tinyexec/-/tinyexec-1.2.3.tgz",
-      "integrity": "sha512-g62dB+w1/OEFnPvmX0yd/HnetYITOL+1nJW7kitOycOeAvmbWC/nu0fwmmQ/kupNojqExzyC/T++pST/jRJ2mQ==",
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/tinyexec/-/tinyexec-1.2.4.tgz",
+      "integrity": "sha512-SHf/r48b7vOrjve9PxJo3MN5v5yuyjHvdUcrQffT3WXMUfnGmHDVbC4k3sHJaJTgZCwpUplIaAo5ANtMyp3YHg==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -7099,9 +7646,9 @@
       }
     },
     "node_modules/tinyglobby": {
-      "version": "0.2.16",
-      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.16.tgz",
-      "integrity": "sha512-pn99VhoACYR8nFHhxqix+uvsbXineAasWm5ojXoN8xEwK5Kd3/TrhNn1wByuD52UxWRLy8pu+kRMniEi6Eq9Zg==",
+      "version": "0.2.17",
+      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.17.tgz",
+      "integrity": "sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -7344,17 +7891,17 @@
       }
     },
     "node_modules/vite": {
-      "version": "8.0.14",
-      "resolved": "https://registry.npmjs.org/vite/-/vite-8.0.14.tgz",
-      "integrity": "sha512-s4BJJ+5y1pYL6Otw51FHhVJQhPnuRinKig64g/1+EUNaJsd3gCKdD31IPFvswUgW9/60QT9oFHbZHbQK5imcxw==",
+      "version": "8.0.16",
+      "resolved": "https://registry.npmjs.org/vite/-/vite-8.0.16.tgz",
+      "integrity": "sha512-h9bXPmJichP5fLmVQo3PyaGSDE2n3aPuomeAlVRm0JLmt4rY6zmPKd59HYI4LNW8oTK7tlTsuC7l/m7awx9Jcw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "lightningcss": "^1.32.0",
         "picomatch": "^4.0.4",
         "postcss": "^8.5.15",
-        "rolldown": "1.0.2",
-        "tinyglobby": "^0.2.16"
+        "rolldown": "1.0.3",
+        "tinyglobby": "^0.2.17"
       },
       "bin": {
         "vite": "bin/vite.js"
@@ -7422,19 +7969,19 @@
       }
     },
     "node_modules/vitest": {
-      "version": "4.1.7",
-      "resolved": "https://registry.npmjs.org/vitest/-/vitest-4.1.7.tgz",
-      "integrity": "sha512-flYyaFd2CgoCoU+0UKt3pxksgC+S02iTDN0n3LtqaMeXsI9SBcdNujc2k0DeFLzUn/0k538yNjOSdwgCqcrwJA==",
+      "version": "4.1.9",
+      "resolved": "https://registry.npmjs.org/vitest/-/vitest-4.1.9.tgz",
+      "integrity": "sha512-nE3/LEyc0z87uHYLZebqCUOaJr2hdtuPp7BQ4BosVFnfltxgAvMG08NyrSGlPpOUWvR27c5flSmYFTNr78L9GQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/expect": "4.1.7",
-        "@vitest/mocker": "4.1.7",
-        "@vitest/pretty-format": "4.1.7",
-        "@vitest/runner": "4.1.7",
-        "@vitest/snapshot": "4.1.7",
-        "@vitest/spy": "4.1.7",
-        "@vitest/utils": "4.1.7",
+        "@vitest/expect": "4.1.9",
+        "@vitest/mocker": "4.1.9",
+        "@vitest/pretty-format": "4.1.9",
+        "@vitest/runner": "4.1.9",
+        "@vitest/snapshot": "4.1.9",
+        "@vitest/spy": "4.1.9",
+        "@vitest/utils": "4.1.9",
         "es-module-lexer": "^2.0.0",
         "expect-type": "^1.3.0",
         "magic-string": "^0.30.21",
@@ -7462,12 +8009,12 @@
         "@edge-runtime/vm": "*",
         "@opentelemetry/api": "^1.9.0",
         "@types/node": "^20.0.0 || ^22.0.0 || >=24.0.0",
-        "@vitest/browser-playwright": "4.1.7",
-        "@vitest/browser-preview": "4.1.7",
-        "@vitest/browser-webdriverio": "4.1.7",
-        "@vitest/coverage-istanbul": "4.1.7",
-        "@vitest/coverage-v8": "4.1.7",
-        "@vitest/ui": "4.1.7",
+        "@vitest/browser-playwright": "4.1.9",
+        "@vitest/browser-preview": "4.1.9",
+        "@vitest/browser-webdriverio": "4.1.9",
+        "@vitest/coverage-istanbul": "4.1.9",
+        "@vitest/coverage-v8": "4.1.9",
+        "@vitest/ui": "4.1.9",
         "happy-dom": "*",
         "jsdom": "*",
         "vite": "^6.0.0 || ^7.0.0 || ^8.0.0"
@@ -7534,6 +8081,24 @@
         "node": ">=8"
       }
     },
+    "node_modules/wrap-ansi": {
+      "version": "10.0.0",
+      "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-10.0.0.tgz",
+      "integrity": "sha512-SGcvg80f0wUy2/fXES19feHMz8E0JoXv2uNgHOu4Dgi2OrCy1lqwFYEJz1BLbDI0exjPMe/ZdzZ/YpGECBG/aQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ansi-styles": "^6.2.3",
+        "string-width": "^8.2.0",
+        "strip-ansi": "^7.1.2"
+      },
+      "engines": {
+        "node": ">=20"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/wrap-ansi?sponsor=1"
+      }
+    },
     "node_modules/wrappy": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
diff --git a/package.json b/package.json
index f4764bb..bce1c81 100644
--- a/package.json
+++ b/package.json
@@ -15,8 +15,14 @@
     "tracker:check": "tsx scripts/tracker-build.ts --check",
     "calendar:build": "tsx scripts/calendar-build.ts",
     "calendar:check": "tsx scripts/calendar-build.ts --check",
-    "test": "vitest run",
+    "pretest": "npm run tracker:build",
+    "test": "vitest run --passWithNoTests",
     "test:watch": "vitest",
+    "typecheck": "tsc --noEmit",
+    "lint": "biome check .",
+    "lint:fix": "biome check --write .",
+    "format": "biome format --write .",
+    "prepare": "husky",
     "seed:demo": "tsx scripts/seed-demo.ts",
     "seed:tracker": "tsx scripts/seed-tracker-demo.ts",
     "seed:profiles": "tsx scripts/seed-profiles.ts",
@@ -55,18 +61,24 @@
     "yjs": "^13.6.20"
   },
   "devDependencies": {
+    "@biomejs/biome": "^2.5.0",
     "@tailwindcss/postcss": "^4",
     "@types/better-sqlite3": "^7.6.13",
     "@types/node": "^20",
     "@types/react": "^19",
     "@types/react-dom": "^19",
     "@types/ws": "^8.5.13",
+    "husky": "^9.1.7",
+    "lint-staged": "^17.0.7",
     "tailwindcss": "^4",
     "tsx": "^4.22.3",
     "typescript": "^5",
-    "vitest": "^4.1.7",
+    "vitest": "^4.1.9",
     "ws": "^8.18.0"
   },
+  "lint-staged": {
+    "*.{js,jsx,ts,tsx,json,jsonc}": "biome check --write --no-errors-on-unmatched"
+  },
   "overrides": {
     "postcss": "^8.5.10"
   }
diff --git a/relay/server.ts b/relay/server.ts
index 42cf647..aa62747 100644
--- a/relay/server.ts
+++ b/relay/server.ts
@@ -31,12 +31,12 @@
  */
 
 import http from "node:http";
-import { WebSocketServer, WebSocket } from "ws";
-import * as Y from "yjs";
-import * as syncProtocol from "y-protocols/sync";
-import * as awarenessProtocol from "y-protocols/awareness";
-import * as encoding from "lib0/encoding";
 import * as decoding from "lib0/decoding";
+import * as encoding from "lib0/encoding";
+import { WebSocket, WebSocketServer } from "ws";
+import * as awarenessProtocol from "y-protocols/awareness";
+import * as syncProtocol from "y-protocols/sync";
+import * as Y from "yjs";
 
 const PORT = Number(process.env.RELAY_PORT ?? 3012);
 const HOST = process.env.RELAY_HOST ?? "0.0.0.0";
@@ -84,15 +84,7 @@ function getRoom(name: string): Room {
   // the reference server, which also lets a peer's own state round-trip.
   awareness.on(
     "update",
-    ({
-      added,
-      updated,
-      removed,
-    }: {
-      added: number[];
-      updated: number[];
-      removed: number[];
-    }) => {
+    ({ added, updated, removed }: { added: number[]; updated: number[]; removed: number[] }) => {
       const changed = added.concat(updated, removed);
       const encoder = encoding.createEncoder();
       encoding.writeVarUint(encoder, MESSAGE_AWARENESS);
@@ -235,11 +227,7 @@ function setupConnection(conn: WebSocket, roomName: string) {
   function closeConn() {
     const owned = room.conns.get(conn);
     if (owned && owned.size > 0) {
-      awarenessProtocol.removeAwarenessStates(
-        room.awareness,
-        Array.from(owned),
-        "relay-cleanup",
-      );
+      awarenessProtocol.removeAwarenessStates(room.awareness, Array.from(owned), "relay-cleanup");
     }
     room.conns.delete(conn);
     room.awareness.off("update", trackAwareness);
@@ -270,10 +258,7 @@ function setupConnection(conn: WebSocket, roomName: string) {
       encoding.writeVarUint(awEncoder, MESSAGE_AWARENESS);
       encoding.writeVarUint8Array(
         awEncoder,
-        awarenessProtocol.encodeAwarenessUpdate(
-          room.awareness,
-          Array.from(states.keys()),
-        ),
+        awarenessProtocol.encodeAwarenessUpdate(room.awareness, Array.from(states.keys())),
       );
       send(conn, encoding.toUint8Array(awEncoder));
     }
diff --git a/src/app/api/admin/reconcile/route.ts b/src/app/api/admin/reconcile/route.ts
index 4f6823d..b9a26db 100644
--- a/src/app/api/admin/reconcile/route.ts
+++ b/src/app/api/admin/reconcile/route.ts
@@ -1,7 +1,7 @@
-import { NextResponse } from "next/server";
 import { headers } from "next/headers";
-import { reconcilePages } from "@/lib/pages/reconciler";
+import { NextResponse } from "next/server";
 import { getEnv } from "@/lib/env";
+import { reconcilePages } from "@/lib/pages/reconciler";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -24,10 +24,7 @@ export async function POST() {
   const hdrs = await headers();
   const presented = (hdrs.get("authorization") ?? "").replace(/^Bearer\s+/i, "");
   if (!presented || presented !== env.adminToken) {
-    return NextResponse.json(
-      { error: "invalid admin token" },
-      { status: 401 },
-    );
+    return NextResponse.json({ error: "invalid admin token" }, { status: 401 });
   }
   const outcomes = await reconcilePages();
   return NextResponse.json({ outcomes });
diff --git a/src/app/api/agent-runs/[id]/log/route.ts b/src/app/api/agent-runs/[id]/log/route.ts
index f0f21a2..eb3d363 100644
--- a/src/app/api/agent-runs/[id]/log/route.ts
+++ b/src/app/api/agent-runs/[id]/log/route.ts
@@ -1,8 +1,8 @@
-import { NextResponse } from "next/server";
 import * as fs from "node:fs/promises";
 import * as path from "node:path";
-import { getAgentRun } from "@/lib/registry/agent-runs";
+import { NextResponse } from "next/server";
 import { AGENT_LOGS_DIR } from "@/lib/agents/dispatch";
+import { getAgentRun } from "@/lib/registry/agent-runs";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
diff --git a/src/app/api/agents/dispatch/route.ts b/src/app/api/agents/dispatch/route.ts
index bb2632b..48b48b7 100644
--- a/src/app/api/agents/dispatch/route.ts
+++ b/src/app/api/agents/dispatch/route.ts
@@ -3,13 +3,10 @@ import { ensureAgentsBootstrap } from "@/lib/agents/bootstrap";
 import { dispatch } from "@/lib/agents/dispatch";
 import { getDriver } from "@/lib/agents/registry";
 import type { AgentEvent } from "@/lib/agents/types";
-import { getRepo } from "@/lib/registry/repos";
 import { requireOwner } from "@/lib/auth/session";
-import { rateLimit, RATE_LIMITS } from "@/lib/rate-limit";
-import {
-  assertCanDispatchRun,
-  QuotaExceededError,
-} from "@/lib/registry/quotas";
+import { RATE_LIMITS, rateLimit } from "@/lib/rate-limit";
+import { assertCanDispatchRun, QuotaExceededError } from "@/lib/registry/quotas";
+import { getRepo } from "@/lib/registry/repos";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -54,10 +51,7 @@ export async function POST(req: Request) {
     const d = (body as Record<string, unknown>).driver;
     if (d !== undefined && d !== null) {
       if (typeof d !== "string" || !getDriver(d)) {
-        return NextResponse.json(
-          { error: `unknown driver ${JSON.stringify(d)}` },
-          { status: 400 },
-        );
+        return NextResponse.json({ error: `unknown driver ${JSON.stringify(d)}` }, { status: 400 });
       }
       driverOverride = d;
     }
@@ -98,9 +92,7 @@ export async function POST(req: Request) {
   return NextResponse.json({ event: event.value, outcomes });
 }
 
-function parseEvent(
-  raw: unknown,
-): { value: AgentEvent } | { error: string } {
+function parseEvent(raw: unknown): { value: AgentEvent } | { error: string } {
   if (typeof raw !== "object" || raw === null) {
     return { error: "body must be an object" };
   }
@@ -137,10 +129,7 @@ function parseEvent(
     };
   }
   if (type === "issue.commented") {
-    if (
-      typeof o.issueNumber !== "number" ||
-      typeof o.commentId !== "number"
-    ) {
+    if (typeof o.issueNumber !== "number" || typeof o.commentId !== "number") {
       return {
         error: "issueNumber and commentId are required for issue.commented",
       };
diff --git a/src/app/api/agents/route.ts b/src/app/api/agents/route.ts
index 4254a5a..4276385 100644
--- a/src/app/api/agents/route.ts
+++ b/src/app/api/agents/route.ts
@@ -1,10 +1,6 @@
 import { NextResponse } from "next/server";
 import { ensureAgentsBootstrap } from "@/lib/agents/bootstrap";
-import {
-  getDefaultDriverName,
-  listDrivers,
-  listRoles,
-} from "@/lib/agents/registry";
+import { getDefaultDriverName, listDrivers, listRoles } from "@/lib/agents/registry";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
diff --git a/src/app/api/auth/callback/route.ts b/src/app/api/auth/callback/route.ts
index c802174..53b87c0 100644
--- a/src/app/api/auth/callback/route.ts
+++ b/src/app/api/auth/callback/route.ts
@@ -1,9 +1,9 @@
-import { NextResponse } from "next/server";
 import { cookies } from "next/headers";
-import { completeAuthFlow } from "@/lib/solid/oidc-server";
+import { NextResponse } from "next/server";
 import { issueSession } from "@/lib/auth/session";
 import { getEnv } from "@/lib/env";
-import { log, clip, scrubWebId } from "@/lib/log";
+import { clip, log, scrubWebId } from "@/lib/log";
+import { completeAuthFlow } from "@/lib/solid/oidc-server";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
diff --git a/src/app/api/auth/login/route.ts b/src/app/api/auth/login/route.ts
index 1e2f538..4ab68b5 100644
--- a/src/app/api/auth/login/route.ts
+++ b/src/app/api/auth/login/route.ts
@@ -1,11 +1,11 @@
-import { NextResponse } from "next/server";
 import { headers } from "next/headers";
-import { startAuthFlow, completeAuthFlow } from "@/lib/solid/oidc-server";
-import { runPasswordLoginOidcFlow, CssApiError } from "@/lib/solid/css-account";
+import { NextResponse } from "next/server";
 import { issueSession } from "@/lib/auth/session";
 import { getEnv } from "@/lib/env";
-import { rateLimit, RATE_LIMITS } from "@/lib/rate-limit";
-import { log, clip, scrubWebId } from "@/lib/log";
+import { clip, log, scrubWebId } from "@/lib/log";
+import { RATE_LIMITS, rateLimit } from "@/lib/rate-limit";
+import { CssApiError, runPasswordLoginOidcFlow } from "@/lib/solid/css-account";
+import { completeAuthFlow, startAuthFlow } from "@/lib/solid/oidc-server";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -42,11 +42,7 @@ export async function POST(req: Request) {
   const origin = hdrs.get("origin") ?? "";
   const secFetchSite = hdrs.get("sec-fetch-site") ?? "";
   const ownOrigin = env.bridgePublicUrl.replace(/\/$/, "");
-  if (
-    origin !== ownOrigin &&
-    secFetchSite !== "same-origin" &&
-    secFetchSite !== "same-site"
-  ) {
+  if (origin !== ownOrigin && secFetchSite !== "same-origin" && secFetchSite !== "same-site") {
     return NextResponse.json(
       { error: "cross-origin login is not allowed", code: "CSRF" },
       { status: 403 },
@@ -62,18 +58,12 @@ export async function POST(req: Request) {
   const email = typeof body.email === "string" ? body.email.trim() : "";
   const password = typeof body.password === "string" ? body.password : "";
   if (!email || !email.includes("@") || !password) {
-    return NextResponse.json(
-      { error: "email and password are required" },
-      { status: 400 },
-    );
+    return NextResponse.json({ error: "email and password are required" }, { status: 400 });
   }
   const issuerRaw = typeof body.oidcIssuer === "string" ? body.oidcIssuer : env.podBaseUrl;
   const oidcIssuer = issuerRaw.endsWith("/") ? issuerRaw : `${issuerRaw}/`;
   if (!/^https?:\/\//.test(oidcIssuer)) {
-    return NextResponse.json(
-      { error: "oidcIssuer must be an http(s) URL" },
-      { status: 400 },
-    );
+    return NextResponse.json({ error: "oidcIssuer must be an http(s) URL" }, { status: 400 });
   }
 
   // Start the OIDC dance — produces a redirect URL + a session in
diff --git a/src/app/api/auth/start/route.ts b/src/app/api/auth/start/route.ts
index 0a9e830..50e24c0 100644
--- a/src/app/api/auth/start/route.ts
+++ b/src/app/api/auth/start/route.ts
@@ -1,10 +1,10 @@
-import { NextResponse } from "next/server";
 import { cookies, headers } from "next/headers";
-import { startAuthFlow } from "@/lib/solid/oidc-server";
+import { NextResponse } from "next/server";
 import { getEnv } from "@/lib/env";
+import { clip, log } from "@/lib/log";
+import { RATE_LIMITS, rateLimit } from "@/lib/rate-limit";
+import { startAuthFlow } from "@/lib/solid/oidc-server";
 import { fetchProfile } from "@/lib/solid/profile";
-import { rateLimit, RATE_LIMITS } from "@/lib/rate-limit";
-import { log, clip } from "@/lib/log";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -29,11 +29,7 @@ export async function POST(req: Request) {
   const origin = hdrs.get("origin") ?? "";
   const secFetchSite = hdrs.get("sec-fetch-site") ?? "";
   const ownOrigin = stripTrailingSlash(env.bridgePublicUrl);
-  if (
-    origin !== ownOrigin &&
-    secFetchSite !== "same-origin" &&
-    secFetchSite !== "same-site"
-  ) {
+  if (origin !== ownOrigin && secFetchSite !== "same-origin" && secFetchSite !== "same-site") {
     return NextResponse.json(
       { error: "cross-origin auth start is not allowed", code: "CSRF" },
       { status: 403 },
@@ -63,10 +59,7 @@ export async function POST(req: Request) {
     webIdHint = (body as Record<string, unknown>).webId as string;
   }
   if (typeof oidcIssuer !== "string" || !/^https?:\/\//.test(oidcIssuer)) {
-    return NextResponse.json(
-      { error: "oidcIssuer (URL) is required" },
-      { status: 400 },
-    );
+    return NextResponse.json({ error: "oidcIssuer (URL) is required" }, { status: 400 });
   }
   const normalised = oidcIssuer.endsWith("/") ? oidcIssuer : `${oidcIssuer}/`;
 
diff --git a/src/app/api/git/[owner]/[repo]/[...path]/route.ts b/src/app/api/git/[owner]/[repo]/[...path]/route.ts
index 4b6b332..eb35e37 100644
--- a/src/app/api/git/[owner]/[repo]/[...path]/route.ts
+++ b/src/app/api/git/[owner]/[repo]/[...path]/route.ts
@@ -1,15 +1,11 @@
 import { NextResponse } from "next/server";
-import { getRepo, validateName, RegistryError } from "@/lib/registry/repos";
-import { runGitHttpBackend } from "@/lib/git/http-cgi";
 import { getRepoDiskBytes } from "@/lib/git/backend";
-import { verifyPushToken } from "@/lib/registry/tokens";
-import {
-  isLockedOut,
-  recordFailure,
-  RATE_LIMITS,
-} from "@/lib/rate-limit";
-import { QUOTAS } from "@/lib/registry/quotas";
+import { runGitHttpBackend } from "@/lib/git/http-cgi";
 import { Metrics } from "@/lib/metrics";
+import { isLockedOut, RATE_LIMITS, recordFailure } from "@/lib/rate-limit";
+import { QUOTAS } from "@/lib/registry/quotas";
+import { getRepo, RegistryError, validateName } from "@/lib/registry/repos";
+import { verifyPushToken } from "@/lib/registry/tokens";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -27,9 +23,7 @@ async function handle(req: Request, { params }: Params): Promise<Response> {
   // Git clients append `.git` to the repo name in the remote URL. Strip it
   // for the registry lookup; pass the suffixed form to git http-backend
   // (which expects a `*.git` directory under GIT_PROJECT_ROOT).
-  const repoName = repoSegment.endsWith(".git")
-    ? repoSegment.slice(0, -4)
-    : repoSegment;
+  const repoName = repoSegment.endsWith(".git") ? repoSegment.slice(0, -4) : repoSegment;
 
   try {
     validateName(owner, "owner");
@@ -56,8 +50,7 @@ async function handle(req: Request, { params }: Params): Promise<Response> {
     lastSegment === "git-receive-pack" ||
     (lastSegment === "refs" && service === "git-receive-pack");
   const isPull =
-    lastSegment === "git-upload-pack" ||
-    (lastSegment === "refs" && service === "git-upload-pack");
+    lastSegment === "git-upload-pack" || (lastSegment === "refs" && service === "git-upload-pack");
 
   const requiresAuth = isPush || (isPull && repo.visibility === "private");
   if (requiresAuth) {
diff --git a/src/app/api/git/internal/post-receive/route.ts b/src/app/api/git/internal/post-receive/route.ts
index 3313689..ac49070 100644
--- a/src/app/api/git/internal/post-receive/route.ts
+++ b/src/app/api/git/internal/post-receive/route.ts
@@ -1,21 +1,14 @@
-import { NextResponse } from "next/server";
 import { createHmac, timingSafeEqual } from "node:crypto";
 import { headers } from "next/headers";
-import { getRepo, getPagesConfig, validateName } from "@/lib/registry/repos";
-import { publishPages } from "@/lib/pages/publisher";
-import { runWorkflow } from "@/lib/workflows/runner";
+import { NextResponse } from "next/server";
+import { getEnv } from "@/lib/env";
 import { repoPath } from "@/lib/git/backend";
-import {
-  mirrorTrackerFromGit,
-  readPodTracker,
-} from "@/lib/solid/tracker-pod";
+import { log, newCorrelationId, withCorrelationId } from "@/lib/log";
+import { publishPages } from "@/lib/pages/publisher";
 import { projectTrackerToRegistry } from "@/lib/registry/issue-projection";
-import { getEnv } from "@/lib/env";
-import {
-  log,
-  newCorrelationId,
-  withCorrelationId,
-} from "@/lib/log";
+import { getPagesConfig, getRepo, validateName } from "@/lib/registry/repos";
+import { mirrorTrackerFromGit, readPodTracker } from "@/lib/solid/tracker-pod";
+import { runWorkflow } from "@/lib/workflows/runner";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -46,10 +39,7 @@ export async function POST(req: Request) {
   const headerSig = hdrs.get("x-bridge-hmac") ?? "";
 
   if (!verifyHmac(raw, headerSig, env.hookSecret)) {
-    return NextResponse.json(
-      { error: "invalid or missing X-Bridge-Hmac" },
-      { status: 401 },
-    );
+    return NextResponse.json({ error: "invalid or missing X-Bridge-Hmac" }, { status: 401 });
   }
 
   let body: unknown;
@@ -59,19 +49,9 @@ export async function POST(req: Request) {
     return NextResponse.json({ error: "Invalid JSON body" }, { status: 400 });
   }
 
-  const { owner, repo: name, ref, newRev } = (body ?? {}) as Record<
-    string,
-    unknown
-  >;
-  if (
-    typeof owner !== "string" ||
-    typeof name !== "string" ||
-    typeof ref !== "string"
-  ) {
-    return NextResponse.json(
-      { error: "owner, repo, ref required" },
-      { status: 400 },
-    );
+  const { owner, repo: name, ref, newRev } = (body ?? {}) as Record<string, unknown>;
+  if (typeof owner !== "string" || typeof name !== "string" || typeof ref !== "string") {
+    return NextResponse.json({ error: "owner, repo, ref required" }, { status: 400 });
   }
 
   try {
@@ -89,8 +69,7 @@ export async function POST(req: Request) {
 
   // refs/heads/main → main
   const branch = ref.replace(/^refs\/heads\//, "");
-  const branchMatches =
-    pages?.enabled === true && pages.sourceBranch === branch;
+  const branchMatches = pages?.enabled === true && pages.sourceBranch === branch;
 
   let scheduled: "workflow" | "legacy-pages" | "skipped" = "skipped";
 
diff --git a/src/app/api/health/route.ts b/src/app/api/health/route.ts
index ad59470..9b243b2 100644
--- a/src/app/api/health/route.ts
+++ b/src/app/api/health/route.ts
@@ -1,7 +1,7 @@
-import { NextResponse } from "next/server";
 import { spawn } from "node:child_process";
-import { getDb } from "@/lib/registry/db";
+import { NextResponse } from "next/server";
 import { getEnv } from "@/lib/env";
+import { getDb } from "@/lib/registry/db";
 import { version } from "../../../../package.json";
 
 export const runtime = "nodejs";
diff --git a/src/app/api/identities/[webId]/route.ts b/src/app/api/identities/[webId]/route.ts
index ac8458f..04a6b42 100644
--- a/src/app/api/identities/[webId]/route.ts
+++ b/src/app/api/identities/[webId]/route.ts
@@ -1,7 +1,7 @@
 import { NextResponse } from "next/server";
+import { clearSession, requireOwner } from "@/lib/auth/session";
 import { deleteIdentity, getIdentityByWebId } from "@/lib/registry/identities";
 import { clearCachedSession } from "@/lib/solid/oidc-server";
-import { requireOwner, clearSession } from "@/lib/auth/session";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -34,10 +34,7 @@ export async function DELETE(_req: Request, { params }: Params) {
   // pod writes off a still-valid access token (MC-176).
   clearCachedSession(decoded);
   if (!ok) {
-    return NextResponse.json(
-      { error: "identity not found" },
-      { status: 404 },
-    );
+    return NextResponse.json({ error: "identity not found" }, { status: 404 });
   }
   // Disconnecting the identity invalidates the session that was issued
   // off that OIDC flow, so drop the cookie too — the next request will
diff --git a/src/app/api/metrics/route.ts b/src/app/api/metrics/route.ts
index cddf2d0..b754bd5 100644
--- a/src/app/api/metrics/route.ts
+++ b/src/app/api/metrics/route.ts
@@ -1,5 +1,5 @@
-import { NextResponse } from "next/server";
 import { headers } from "next/headers";
+import { NextResponse } from "next/server";
 import { renderExposition } from "@/lib/metrics";
 
 export const runtime = "nodejs";
@@ -23,10 +23,7 @@ export async function GET() {
   const hdrs = await headers();
   const presented = (hdrs.get("authorization") ?? "").replace(/^Bearer\s+/i, "");
   if (!presented || presented !== expected) {
-    return NextResponse.json(
-      { error: "invalid metrics token" },
-      { status: 401 },
-    );
+    return NextResponse.json({ error: "invalid metrics token" }, { status: 401 });
   }
   return new NextResponse(renderExposition(), {
     status: 200,
diff --git a/src/app/api/packages/npm/[owner]/[repo]/[...path]/route.ts b/src/app/api/packages/npm/[owner]/[repo]/[...path]/route.ts
index 0970343..208f9fd 100644
--- a/src/app/api/packages/npm/[owner]/[repo]/[...path]/route.ts
+++ b/src/app/api/packages/npm/[owner]/[repo]/[...path]/route.ts
@@ -1,27 +1,27 @@
 import { NextResponse } from "next/server";
-import { getRepo, validateName, RegistryError } from "@/lib/registry/repos";
-import {
-  upsertPackageVersion,
-  listVersions,
-  validatePackageName,
-  validateVersion,
-  PackageError,
-} from "@/lib/packages/store";
+import { getEnv } from "@/lib/env";
+import { jsonResponse } from "@/lib/http/json";
+import { authenticatePackagePush } from "@/lib/packages/auth";
 import {
-  parseNpmPublish,
   buildPackument,
   findVersionByFilename,
-  NpmPublishError,
   type NpmPublishBody,
+  NpmPublishError,
   type NpmVersionMeta,
+  parseNpmPublish,
 } from "@/lib/packages/npm";
-import { authenticatePackagePush } from "@/lib/packages/auth";
 import { getRepoContentStore } from "@/lib/packages/repo-store";
+import {
+  listVersions,
+  PackageError,
+  upsertPackageVersion,
+  validatePackageName,
+  validateVersion,
+} from "@/lib/packages/store";
 import { assertCanStorePackage, QuotaExceededError } from "@/lib/registry/quotas";
-import { jsonResponse } from "@/lib/http/json";
-import { getEnv } from "@/lib/env";
-import { OwnerFetchUnavailableError } from "@/lib/solid/fetch-for-owner";
 import type { Repo } from "@/lib/registry/repos";
+import { getRepo, RegistryError, validateName } from "@/lib/registry/repos";
+import { OwnerFetchUnavailableError } from "@/lib/solid/fetch-for-owner";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -79,10 +79,7 @@ export async function PUT(req: Request, { params }: Params) {
     handle = await getRepoContentStore(repo, "write");
   } catch (e) {
     if (e instanceof OwnerFetchUnavailableError) {
-      return NextResponse.json(
-        { error: e.message, code: "OWNER_UNAVAILABLE" },
-        { status: 503 },
-      );
+      return NextResponse.json({ error: e.message, code: "OWNER_UNAVAILABLE" }, { status: 503 });
     }
     throw e;
   }
@@ -146,11 +143,7 @@ export async function GET(req: Request, { params }: Params) {
   return jsonResponse(buildPackument(pkg, rows, base));
 }
 
-async function serveTarball(
-  repo: Repo,
-  pkg: string,
-  filename: string,
-): Promise<NextResponse> {
+async function serveTarball(repo: Repo, pkg: string, filename: string): Promise<NextResponse> {
   const rows = listVersions(repo.id, "npm", pkg);
   const record = findVersionByFilename(rows, filename);
   if (!record) {
@@ -190,16 +183,13 @@ function decodeSegment(s: string): string {
 }
 
 function unauthorized(owner: string, name: string): NextResponse {
-  return new NextResponse(
-    JSON.stringify({ error: "missing or invalid push token" }),
-    {
-      status: 401,
-      headers: {
-        "Content-Type": "application/json",
-        "WWW-Authenticate": `Basic realm="${owner}/${name}"`,
-      },
+  return new NextResponse(JSON.stringify({ error: "missing or invalid push token" }), {
+    status: 401,
+    headers: {
+      "Content-Type": "application/json",
+      "WWW-Authenticate": `Basic realm="${owner}/${name}"`,
     },
-  );
+  });
 }
 
 function quota(e: QuotaExceededError): NextResponse {
diff --git a/src/app/api/profile/ai/keys/[provider]/route.ts b/src/app/api/profile/ai/keys/[provider]/route.ts
index 766232e..eb2e251 100644
--- a/src/app/api/profile/ai/keys/[provider]/route.ts
+++ b/src/app/api/profile/ai/keys/[provider]/route.ts
@@ -1,10 +1,7 @@
 import { NextResponse } from "next/server";
-import { requireSession } from "@/lib/auth/session";
-import {
-  setUserApiKey,
-  deleteUserApiKey,
-} from "@/lib/ai-providers/store";
 import { isProviderName } from "@/lib/ai-providers/providers";
+import { deleteUserApiKey, setUserApiKey } from "@/lib/ai-providers/store";
+import { requireSession } from "@/lib/auth/session";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -41,10 +38,7 @@ export async function POST(req: Request, { params }: Params) {
   // wrong-shape keys will just fail at the model call and the user will
   // see the upstream error.
   if (apiKey.length > 1000) {
-    return NextResponse.json(
-      { error: "apiKey too long" },
-      { status: 400 },
-    );
+    return NextResponse.json({ error: "apiKey too long" }, { status: 400 });
   }
 
   const saved = setUserApiKey(auth.webId, provider, apiKey);
diff --git a/src/app/api/profile/ai/pref/route.ts b/src/app/api/profile/ai/pref/route.ts
index 1a2c7dc..5164337 100644
--- a/src/app/api/profile/ai/pref/route.ts
+++ b/src/app/api/profile/ai/pref/route.ts
@@ -1,11 +1,7 @@
 import { NextResponse } from "next/server";
-import { requireSession } from "@/lib/auth/session";
-import {
-  getUserAiPref,
-  setUserAiPref,
-  getDecryptedApiKey,
-} from "@/lib/ai-providers/store";
 import { isProviderName } from "@/lib/ai-providers/providers";
+import { getDecryptedApiKey, getUserAiPref, setUserAiPref } from "@/lib/ai-providers/store";
+import { requireSession } from "@/lib/auth/session";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -41,10 +37,7 @@ export async function PUT(req: Request) {
     );
   }
   if (typeof model !== "string" || model.trim().length === 0) {
-    return NextResponse.json(
-      { error: "model must be a non-empty string" },
-      { status: 400 },
-    );
+    return NextResponse.json({ error: "model must be a non-empty string" }, { status: 400 });
   }
   // Owner must have an API key configured for the provider they pick;
   // otherwise the resolver would just fall back to env at run time,
diff --git a/src/app/api/profile/ai/route.ts b/src/app/api/profile/ai/route.ts
index adc3ad6..92bddec 100644
--- a/src/app/api/profile/ai/route.ts
+++ b/src/app/api/profile/ai/route.ts
@@ -1,12 +1,12 @@
 import { NextResponse } from "next/server";
-import { requireSession } from "@/lib/auth/session";
+import { PROVIDERS } from "@/lib/ai-providers/providers";
 import {
-  listConfiguredProviders,
   getUserAiPref,
+  listConfiguredProviders,
   resolveCoderConfigSummary,
 } from "@/lib/ai-providers/store";
-import { PROVIDERS } from "@/lib/ai-providers/providers";
-import { ledgerEnabled, getBalance } from "@/lib/ledger/client";
+import { requireSession } from "@/lib/auth/session";
+import { getBalance, ledgerEnabled } from "@/lib/ledger/client";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -31,9 +31,7 @@ export async function GET() {
   // bridge-default key. null when the ledger is off or the user is on their own
   // key — the builder then renders the existing source-based copy unchanged.
   const freeBalance =
-    summary.source === "env-fallback" && ledgerEnabled()
-      ? await getBalance(auth.webId)
-      : null;
+    summary.source === "env-fallback" && ledgerEnabled() ? await getBalance(auth.webId) : null;
 
   return NextResponse.json({
     providers: listConfiguredProviders(auth.webId),
diff --git a/src/app/api/repos/[owner]/[repo]/files/[...path]/route.ts b/src/app/api/repos/[owner]/[repo]/files/[...path]/route.ts
index e5ba198..bbb06bc 100644
--- a/src/app/api/repos/[owner]/[repo]/files/[...path]/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/files/[...path]/route.ts
@@ -1,20 +1,18 @@
 import { NextResponse } from "next/server";
-import { getRepo } from "@/lib/registry/repos";
+import { requireOwner } from "@/lib/auth/session";
+import { authenticatePackagePush } from "@/lib/packages/auth";
+import { getRepoContentStore } from "@/lib/packages/repo-store";
 import {
-  upsertPackageVersion,
   getPackageVersion,
+  PackageError,
+  upsertPackageVersion,
   validatePackageName,
   validateVersion,
-  PackageError,
 } from "@/lib/packages/store";
-import { authenticatePackagePush } from "@/lib/packages/auth";
-import { getRepoContentStore } from "@/lib/packages/repo-store";
-import { assertCanStorePackage, QuotaExceededError } from "@/lib/registry/quotas";
-import { requireOwner } from "@/lib/auth/session";
 import { mimeForPath } from "@/lib/pages/mime";
-import {
-  OwnerFetchUnavailableError,
-} from "@/lib/solid/fetch-for-owner";
+import { assertCanStorePackage, QuotaExceededError } from "@/lib/registry/quotas";
+import { getRepo } from "@/lib/registry/repos";
+import { OwnerFetchUnavailableError } from "@/lib/solid/fetch-for-owner";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -78,10 +76,7 @@ export async function PUT(req: Request, { params }: Params) {
     storeHandle = await getRepoContentStore(repo, "write");
   } catch (e) {
     if (e instanceof OwnerFetchUnavailableError) {
-      return NextResponse.json(
-        { error: e.message, code: "OWNER_UNAVAILABLE" },
-        { status: 503 },
-      );
+      return NextResponse.json({ error: e.message, code: "OWNER_UNAVAILABLE" }, { status: 503 });
     }
     throw e;
   }
@@ -89,8 +84,7 @@ export async function PUT(req: Request, { params }: Params) {
   try {
     const blob = await store.save(bytes);
     const contentType =
-      req.headers.get("content-type")?.split(";")[0]?.trim() ||
-      mimeForPath(filename);
+      req.headers.get("content-type")?.split(";")[0]?.trim() || mimeForPath(filename);
     upsertPackageVersion({
       repoId: repo.id,
       type: "file",
@@ -107,10 +101,7 @@ export async function PUT(req: Request, { params }: Params) {
     );
   } catch (e) {
     if (e instanceof OwnerFetchUnavailableError) {
-      return NextResponse.json(
-        { error: e.message, code: "OWNER_UNAVAILABLE" },
-        { status: 503 },
-      );
+      return NextResponse.json({ error: e.message, code: "OWNER_UNAVAILABLE" }, { status: 503 });
     }
     throw e;
   } finally {
@@ -162,16 +153,13 @@ export async function GET(req: Request, { params }: Params) {
 }
 
 function unauthorized(owner: string, name: string): NextResponse {
-  return new NextResponse(
-    JSON.stringify({ error: "missing or invalid push token" }),
-    {
-      status: 401,
-      headers: {
-        "Content-Type": "application/json",
-        "WWW-Authenticate": `Basic realm="${owner}/${name}"`,
-      },
+  return new NextResponse(JSON.stringify({ error: "missing or invalid push token" }), {
+    status: 401,
+    headers: {
+      "Content-Type": "application/json",
+      "WWW-Authenticate": `Basic realm="${owner}/${name}"`,
     },
-  );
+  });
 }
 
 function quota(e: QuotaExceededError): NextResponse {
diff --git a/src/app/api/repos/[owner]/[repo]/inbox/[id]/accept/route.ts b/src/app/api/repos/[owner]/[repo]/inbox/[id]/accept/route.ts
index ef3e506..c9821f9 100644
--- a/src/app/api/repos/[owner]/[repo]/inbox/[id]/accept/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/inbox/[id]/accept/route.ts
@@ -1,10 +1,10 @@
 import { NextResponse } from "next/server";
-import { getRepo } from "@/lib/registry/repos";
 import { requireOwner } from "@/lib/auth/session";
 import { repoPath } from "@/lib/git/backend";
-import { createMindIssue, IssueAuthorError } from "@/lib/tracker/author";
-import { getProposal, deleteProposal, type Proposal } from "@/lib/solid/inbox";
+import { getRepo } from "@/lib/registry/repos";
 import { OwnerFetchUnavailableError } from "@/lib/solid/fetch-for-owner";
+import { deleteProposal, getProposal, type Proposal } from "@/lib/solid/inbox";
+import { createMindIssue, IssueAuthorError } from "@/lib/tracker/author";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -22,9 +22,7 @@ function provenanceFooter(p: Proposal): string {
     : p.contact
       ? `${p.contact} (unverified)`
       : "an anonymous visitor";
-  const when = p.createdAt
-    ? new Date(p.createdAt).toISOString().slice(0, 10)
-    : "an unknown date";
+  const when = p.createdAt ? new Date(p.createdAt).toISOString().slice(0, 10) : "an unknown date";
   return `\n\n---\n_Proposed via the pod inbox by ${who} on ${when}; accepted by the repo owner._`;
 }
 
diff --git a/src/app/api/repos/[owner]/[repo]/inbox/[id]/route.ts b/src/app/api/repos/[owner]/[repo]/inbox/[id]/route.ts
index 093ea0d..8c60a23 100644
--- a/src/app/api/repos/[owner]/[repo]/inbox/[id]/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/inbox/[id]/route.ts
@@ -1,8 +1,8 @@
 import { NextResponse } from "next/server";
-import { getRepo } from "@/lib/registry/repos";
 import { requireOwner } from "@/lib/auth/session";
-import { deleteProposal } from "@/lib/solid/inbox";
+import { getRepo } from "@/lib/registry/repos";
 import { OwnerFetchUnavailableError } from "@/lib/solid/fetch-for-owner";
+import { deleteProposal } from "@/lib/solid/inbox";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
diff --git a/src/app/api/repos/[owner]/[repo]/inbox/route.ts b/src/app/api/repos/[owner]/[repo]/inbox/route.ts
index 98e7a32..3590942 100644
--- a/src/app/api/repos/[owner]/[repo]/inbox/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/inbox/route.ts
@@ -1,9 +1,9 @@
 import { NextResponse } from "next/server";
-import { getRepo } from "@/lib/registry/repos";
 import { requireOwner } from "@/lib/auth/session";
 import { jsonResponse } from "@/lib/http/json";
-import { listProposals } from "@/lib/solid/inbox";
+import { getRepo } from "@/lib/registry/repos";
 import { OwnerFetchUnavailableError } from "@/lib/solid/fetch-for-owner";
+import { listProposals } from "@/lib/solid/inbox";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
diff --git a/src/app/api/repos/[owner]/[repo]/issues/[number]/agent-runs/route.ts b/src/app/api/repos/[owner]/[repo]/issues/[number]/agent-runs/route.ts
index a4ebed4..7ffeaa3 100644
--- a/src/app/api/repos/[owner]/[repo]/issues/[number]/agent-runs/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/issues/[number]/agent-runs/route.ts
@@ -1,7 +1,7 @@
 import { NextResponse } from "next/server";
-import { getRepo } from "@/lib/registry/repos";
-import { getIssueByNumber } from "@/lib/registry/issues";
 import { listAgentRunsForIssue } from "@/lib/registry/agent-runs";
+import { getIssueByNumber } from "@/lib/registry/issues";
+import { getRepo } from "@/lib/registry/repos";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
diff --git a/src/app/api/repos/[owner]/[repo]/issues/[number]/comments/route.ts b/src/app/api/repos/[owner]/[repo]/issues/[number]/comments/route.ts
index f3aef8e..383cdbb 100644
--- a/src/app/api/repos/[owner]/[repo]/issues/[number]/comments/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/issues/[number]/comments/route.ts
@@ -1,15 +1,15 @@
 import { NextResponse } from "next/server";
-import { getRepo, RegistryError } from "@/lib/registry/repos";
+import { ensureAgentsBootstrap } from "@/lib/agents/bootstrap";
+import { dispatch } from "@/lib/agents/dispatch";
+import { requireOwner } from "@/lib/auth/session";
 import {
   addComment,
   getIssueByNumber,
   listComments,
   setCommentPodUrl,
 } from "@/lib/registry/issues";
+import { getRepo, RegistryError } from "@/lib/registry/repos";
 import { commentUrl, writeCommentToPod } from "@/lib/solid/issues";
-import { ensureAgentsBootstrap } from "@/lib/agents/bootstrap";
-import { dispatch } from "@/lib/agents/dispatch";
-import { requireOwner } from "@/lib/auth/session";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -63,15 +63,9 @@ export async function POST(req: Request, { params }: Params) {
   } catch {
     return NextResponse.json({ error: "Invalid JSON body" }, { status: 400 });
   }
-  const { body: commentBody, authorWebId } = (body ?? {}) as Record<
-    string,
-    unknown
-  >;
+  const { body: commentBody, authorWebId } = (body ?? {}) as Record<string, unknown>;
   if (typeof commentBody !== "string" || commentBody.trim().length === 0) {
-    return NextResponse.json(
-      { error: "body is required and must be non-empty" },
-      { status: 400 },
-    );
+    return NextResponse.json({ error: "body is required and must be non-empty" }, { status: 400 });
   }
   // The session establishes who is authoring this comment. A bodysupplied
   // authorWebId that disagrees with the session would let any
@@ -104,10 +98,7 @@ export async function POST(req: Request, { params }: Params) {
   comment.podUrl = canonical;
 
   writeCommentToPod(repo, issue.number, comment).catch((err) => {
-    console.warn(
-      `[comments.POST] writeCommentToPod for ${owner}/${name}#${number} failed:`,
-      err,
-    );
+    console.warn(`[comments.POST] writeCommentToPod for ${owner}/${name}#${number} failed:`, err);
   });
 
   // Re-fire the coder on the new comment so the conversation keeps
diff --git a/src/app/api/repos/[owner]/[repo]/issues/[number]/route.ts b/src/app/api/repos/[owner]/[repo]/issues/[number]/route.ts
index 4a3b316..b8992a0 100644
--- a/src/app/api/repos/[owner]/[repo]/issues/[number]/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/issues/[number]/route.ts
@@ -1,14 +1,14 @@
 import { NextResponse } from "next/server";
-import { getRepo, RegistryError } from "@/lib/registry/repos";
+import { requireOwner } from "@/lib/auth/session";
 import {
   getIssueByNumber,
-  listComments,
-  updateIssue,
   type IssuePriority,
   type IssueStatus,
+  listComments,
+  updateIssue,
 } from "@/lib/registry/issues";
+import { getRepo, RegistryError } from "@/lib/registry/repos";
 import { writeIssueToPod } from "@/lib/solid/issues";
-import { requireOwner } from "@/lib/auth/session";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -63,15 +63,17 @@ export async function PATCH(req: Request, { params }: Params) {
     return NextResponse.json({ error: "Invalid JSON body" }, { status: 400 });
   }
 
-  const { status, priority, labels, title, body: issueBody } =
-    (body ?? {}) as Record<string, unknown>;
+  const {
+    status,
+    priority,
+    labels,
+    title,
+    body: issueBody,
+  } = (body ?? {}) as Record<string, unknown>;
 
   try {
     const updated = updateIssue(issue.id, {
-      status:
-        status === "open" || status === "closed"
-          ? (status as IssueStatus)
-          : undefined,
+      status: status === "open" || status === "closed" ? (status as IssueStatus) : undefined,
       priority:
         priority === "low" || priority === "normal" || priority === "high"
           ? (priority as IssuePriority)
@@ -82,10 +84,7 @@ export async function PATCH(req: Request, { params }: Params) {
     });
 
     writeIssueToPod(repo, updated).catch((err) => {
-      console.warn(
-        `[issues.PATCH] writeIssueToPod for ${owner}/${name}#${number} failed:`,
-        err,
-      );
+      console.warn(`[issues.PATCH] writeIssueToPod for ${owner}/${name}#${number} failed:`, err);
     });
 
     return NextResponse.json({ issue: updated });
diff --git a/src/app/api/repos/[owner]/[repo]/issues/propose/route.ts b/src/app/api/repos/[owner]/[repo]/issues/propose/route.ts
index a1134bf..5f99d7c 100644
--- a/src/app/api/repos/[owner]/[repo]/issues/propose/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/issues/propose/route.ts
@@ -1,9 +1,9 @@
 import { NextResponse } from "next/server";
-import { getRepo } from "@/lib/registry/repos";
 import { readSession } from "@/lib/auth/session";
-import { rateLimit, RATE_LIMITS } from "@/lib/rate-limit";
-import { postProposal } from "@/lib/solid/inbox";
+import { RATE_LIMITS, rateLimit } from "@/lib/rate-limit";
+import { getRepo } from "@/lib/registry/repos";
 import { OwnerFetchUnavailableError } from "@/lib/solid/fetch-for-owner";
+import { postProposal } from "@/lib/solid/inbox";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -57,10 +57,7 @@ export async function POST(req: Request, { params }: Params) {
     return NextResponse.json({ error: "title is required" }, { status: 400 });
   }
   if (title.length > MAX_TITLE) {
-    return NextResponse.json(
-      { error: `title must be ≤ ${MAX_TITLE} characters` },
-      { status: 400 },
-    );
+    return NextResponse.json({ error: `title must be ≤ ${MAX_TITLE} characters` }, { status: 400 });
   }
   if (typeof proposalBody === "string" && proposalBody.length > MAX_BODY) {
     return NextResponse.json(
diff --git a/src/app/api/repos/[owner]/[repo]/issues/route.ts b/src/app/api/repos/[owner]/[repo]/issues/route.ts
index 5366f9a..dd960d1 100644
--- a/src/app/api/repos/[owner]/[repo]/issues/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/issues/route.ts
@@ -1,18 +1,18 @@
 import { NextResponse } from "next/server";
-import { getRepo, RegistryError } from "@/lib/registry/repos";
+import { ensureAgentsBootstrap } from "@/lib/agents/bootstrap";
+import { dispatch } from "@/lib/agents/dispatch";
+import { requireOwner } from "@/lib/auth/session";
+import { jsonResponse } from "@/lib/http/json";
+import { RATE_LIMITS, rateLimit } from "@/lib/rate-limit";
 import {
   createIssue,
-  listIssues,
-  setIssuePodUrl,
   type IssuePriority,
   type IssueStatus,
+  listIssues,
+  setIssuePodUrl,
 } from "@/lib/registry/issues";
+import { getRepo, RegistryError } from "@/lib/registry/repos";
 import { issueUrl, writeIssueToPod } from "@/lib/solid/issues";
-import { ensureAgentsBootstrap } from "@/lib/agents/bootstrap";
-import { dispatch } from "@/lib/agents/dispatch";
-import { requireOwner } from "@/lib/auth/session";
-import { rateLimit, RATE_LIMITS } from "@/lib/rate-limit";
-import { jsonResponse } from "@/lib/http/json";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -28,10 +28,7 @@ export async function GET(req: Request, { params }: Params) {
   const url = new URL(req.url);
   const statusParam = url.searchParams.get("status") ?? "open";
   if (!["open", "closed", "all"].includes(statusParam)) {
-    return NextResponse.json(
-      { error: "status must be open|closed|all" },
-      { status: 400 },
-    );
+    return NextResponse.json({ error: "status must be open|closed|all" }, { status: 400 });
   }
   const issues = listIssues(repo.id, {
     status: statusParam as IssueStatus | "all",
@@ -66,10 +63,7 @@ export async function POST(req: Request, { params }: Params) {
   } = (body ?? {}) as Record<string, unknown>;
 
   if (typeof title !== "string") {
-    return NextResponse.json(
-      { error: "title is required" },
-      { status: 400 },
-    );
+    return NextResponse.json({ error: "title is required" }, { status: 400 });
   }
   // The session establishes who is authoring this issue. Any
   // bodysupplied authorWebId that disagrees with the session is rejected
diff --git a/src/app/api/repos/[owner]/[repo]/members/[webid]/route.ts b/src/app/api/repos/[owner]/[repo]/members/[webid]/route.ts
index a69daf4..090354b 100644
--- a/src/app/api/repos/[owner]/[repo]/members/[webid]/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/members/[webid]/route.ts
@@ -1,9 +1,9 @@
 import { NextResponse } from "next/server";
-import { getRepo } from "@/lib/registry/repos";
 import { requireMember } from "@/lib/auth/session";
 import { jsonResponse } from "@/lib/http/json";
-import { removeMember } from "@/lib/solid/members";
+import { getRepo } from "@/lib/registry/repos";
 import { OwnerFetchUnavailableError } from "@/lib/solid/fetch-for-owner";
+import { removeMember } from "@/lib/solid/members";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
diff --git a/src/app/api/repos/[owner]/[repo]/members/route.ts b/src/app/api/repos/[owner]/[repo]/members/route.ts
index 4435d9f..88d79ca 100644
--- a/src/app/api/repos/[owner]/[repo]/members/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/members/route.ts
@@ -1,9 +1,9 @@
 import { NextResponse } from "next/server";
-import { getRepo } from "@/lib/registry/repos";
 import { requireMember } from "@/lib/auth/session";
 import { jsonResponse } from "@/lib/http/json";
-import { addMember, readMembers, isMemberRole } from "@/lib/solid/members";
+import { getRepo } from "@/lib/registry/repos";
 import { OwnerFetchUnavailableError } from "@/lib/solid/fetch-for-owner";
+import { addMember, isMemberRole, readMembers } from "@/lib/solid/members";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -61,16 +61,10 @@ export async function POST(req: Request, { params }: Params) {
   }
   const { webId, role } = (body ?? {}) as Record<string, unknown>;
   if (typeof webId !== "string" || !webId.startsWith("http")) {
-    return NextResponse.json(
-      { error: "webId must be an http(s) WebID" },
-      { status: 400 },
-    );
+    return NextResponse.json({ error: "webId must be an http(s) WebID" }, { status: 400 });
   }
   if (typeof role !== "string" || !isMemberRole(role)) {
-    return NextResponse.json(
-      { error: "role must be reader|writer|admin" },
-      { status: 400 },
-    );
+    return NextResponse.json({ error: "role must be reader|writer|admin" }, { status: 400 });
   }
   if (webId === repo.ownerWebId) {
     return NextResponse.json(
diff --git a/src/app/api/repos/[owner]/[repo]/mind-epics/route.ts b/src/app/api/repos/[owner]/[repo]/mind-epics/route.ts
index 094cfb2..be5bbd0 100644
--- a/src/app/api/repos/[owner]/[repo]/mind-epics/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/mind-epics/route.ts
@@ -1,9 +1,9 @@
 import { NextResponse } from "next/server";
-import { getRepo } from "@/lib/registry/repos";
+import { requireOwner } from "@/lib/auth/session";
 import { repoPath } from "@/lib/git/backend";
+import { RATE_LIMITS, rateLimit } from "@/lib/rate-limit";
+import { getRepo } from "@/lib/registry/repos";
 import { createMindEpic, IssueAuthorError } from "@/lib/tracker/author";
-import { requireOwner } from "@/lib/auth/session";
-import { rateLimit, RATE_LIMITS } from "@/lib/rate-limit";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
diff --git a/src/app/api/repos/[owner]/[repo]/mind-issues/route.ts b/src/app/api/repos/[owner]/[repo]/mind-issues/route.ts
index b42c508..205b4ec 100644
--- a/src/app/api/repos/[owner]/[repo]/mind-issues/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/mind-issues/route.ts
@@ -1,9 +1,9 @@
 import { NextResponse } from "next/server";
-import { getRepo } from "@/lib/registry/repos";
+import { requireOwner } from "@/lib/auth/session";
 import { repoPath } from "@/lib/git/backend";
+import { RATE_LIMITS, rateLimit } from "@/lib/rate-limit";
+import { getRepo } from "@/lib/registry/repos";
 import { createMindIssue, IssueAuthorError } from "@/lib/tracker/author";
-import { requireOwner } from "@/lib/auth/session";
-import { rateLimit, RATE_LIMITS } from "@/lib/rate-limit";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -35,13 +35,7 @@ export async function POST(req: Request, { params }: Params) {
   } catch {
     return NextResponse.json({ error: "Invalid JSON body" }, { status: 400 });
   }
-  const {
-    title,
-    type,
-    epic,
-    priority,
-    body: issueBody,
-  } = (body ?? {}) as Record<string, unknown>;
+  const { title, type, epic, priority, body: issueBody } = (body ?? {}) as Record<string, unknown>;
 
   if (typeof title !== "string" || !title.trim()) {
     return NextResponse.json({ error: "title is required" }, { status: 400 });
@@ -51,19 +45,14 @@ export async function POST(req: Request, { params }: Params) {
   }
 
   try {
-    const result = await createMindIssue(
-      repoPath(repo.owner, repo.name),
-      owner,
-      name,
-      {
-        title,
-        type,
-        epicSlug: typeof epic === "string" ? epic : null,
-        priority: typeof priority === "string" ? priority : undefined,
-        body: typeof issueBody === "string" ? issueBody : undefined,
-        authorWebId: auth.webId,
-      },
-    );
+    const result = await createMindIssue(repoPath(repo.owner, repo.name), owner, name, {
+      title,
+      type,
+      epicSlug: typeof epic === "string" ? epic : null,
+      priority: typeof priority === "string" ? priority : undefined,
+      body: typeof issueBody === "string" ? issueBody : undefined,
+      authorWebId: auth.webId,
+    });
     return NextResponse.json({ issue: result }, { status: 201 });
   } catch (e) {
     if (e instanceof IssueAuthorError) {
diff --git a/src/app/api/repos/[owner]/[repo]/packages/route.ts b/src/app/api/repos/[owner]/[repo]/packages/route.ts
index 8cda981..500ffa0 100644
--- a/src/app/api/repos/[owner]/[repo]/packages/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/packages/route.ts
@@ -1,8 +1,8 @@
 import { NextResponse } from "next/server";
-import { getRepo } from "@/lib/registry/repos";
-import { listPackages, type PackageType } from "@/lib/packages/store";
 import { requireOwner } from "@/lib/auth/session";
 import { jsonResponse } from "@/lib/http/json";
+import { listPackages, type PackageType } from "@/lib/packages/store";
+import { getRepo } from "@/lib/registry/repos";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
diff --git a/src/app/api/repos/[owner]/[repo]/pages/route.ts b/src/app/api/repos/[owner]/[repo]/pages/route.ts
index db7dff6..ec32a59 100644
--- a/src/app/api/repos/[owner]/[repo]/pages/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/pages/route.ts
@@ -1,12 +1,7 @@
 import { NextResponse } from "next/server";
-import {
-  getRepo,
-  getPagesConfig,
-  RegistryError,
-  updatePagesConfig,
-} from "@/lib/registry/repos";
-import { writeRepoMetadata } from "@/lib/solid/repo-metadata";
 import { requireOwner } from "@/lib/auth/session";
+import { getPagesConfig, getRepo, RegistryError, updatePagesConfig } from "@/lib/registry/repos";
+import { writeRepoMetadata } from "@/lib/solid/repo-metadata";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -37,23 +32,20 @@ export async function PUT(req: Request, { params }: Params) {
   } catch {
     return NextResponse.json({ error: "Invalid JSON body" }, { status: 400 });
   }
-  const { enabled, sourceBranch, sourcePath, targetContainer } =
-    (body ?? {}) as Record<string, unknown>;
+  const { enabled, sourceBranch, sourcePath, targetContainer } = (body ?? {}) as Record<
+    string,
+    unknown
+  >;
 
   try {
     const updated = updatePagesConfig(repo.id, {
       enabled: typeof enabled === "boolean" ? enabled : undefined,
-      sourceBranch:
-        typeof sourceBranch === "string" ? sourceBranch : undefined,
+      sourceBranch: typeof sourceBranch === "string" ? sourceBranch : undefined,
       sourcePath: typeof sourcePath === "string" ? sourcePath : undefined,
-      targetContainer:
-        typeof targetContainer === "string" ? targetContainer : undefined,
+      targetContainer: typeof targetContainer === "string" ? targetContainer : undefined,
     });
     writeRepoMetadata(repo, updated).catch((err) => {
-      console.warn(
-        `[pages.PUT] writeRepoMetadata for ${owner}/${name} failed:`,
-        err,
-      );
+      console.warn(`[pages.PUT] writeRepoMetadata for ${owner}/${name} failed:`, err);
     });
     return NextResponse.json({ pages: updated });
   } catch (e) {
diff --git a/src/app/api/repos/[owner]/[repo]/pulls/[number]/close/route.ts b/src/app/api/repos/[owner]/[repo]/pulls/[number]/close/route.ts
index 97c1107..db06264 100644
--- a/src/app/api/repos/[owner]/[repo]/pulls/[number]/close/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/pulls/[number]/close/route.ts
@@ -1,8 +1,8 @@
 import { NextResponse } from "next/server";
-import { getRepo, RegistryError } from "@/lib/registry/repos";
-import { getPullRequest, closePullRequest } from "@/lib/registry/pulls";
 import { requireOwner } from "@/lib/auth/session";
 import { deletePreview } from "@/lib/pages/preview";
+import { closePullRequest, getPullRequest } from "@/lib/registry/pulls";
+import { getRepo, RegistryError } from "@/lib/registry/repos";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
diff --git a/src/app/api/repos/[owner]/[repo]/pulls/[number]/merge/route.ts b/src/app/api/repos/[owner]/[repo]/pulls/[number]/merge/route.ts
index d85246a..0381932 100644
--- a/src/app/api/repos/[owner]/[repo]/pulls/[number]/merge/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/pulls/[number]/merge/route.ts
@@ -1,16 +1,13 @@
 import { NextResponse } from "next/server";
-import { getRepo } from "@/lib/registry/repos";
-import {
-  getPullRequest,
-  markPullRequestMerged,
-} from "@/lib/registry/pulls";
-import { mergeBranches } from "@/lib/git/merge";
+import { requireOwner } from "@/lib/auth/session";
 import { repoPath } from "@/lib/git/backend";
-import { displayNameForWebId } from "@/lib/solid/web-id";
+import { mergeBranches } from "@/lib/git/merge";
+import { deletePreview } from "@/lib/pages/preview";
 import { getIssueById, updateIssue } from "@/lib/registry/issues";
+import { getPullRequest, markPullRequestMerged } from "@/lib/registry/pulls";
+import { getRepo } from "@/lib/registry/repos";
 import { writeIssueToPod } from "@/lib/solid/issues";
-import { requireOwner } from "@/lib/auth/session";
-import { deletePreview } from "@/lib/pages/preview";
+import { displayNameForWebId } from "@/lib/solid/web-id";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -36,10 +33,7 @@ export async function POST(_req: Request, { params }: Params) {
     return NextResponse.json({ error: "pull not found" }, { status: 404 });
   }
   if (pull.status !== "open") {
-    return NextResponse.json(
-      { error: `pull is ${pull.status}, cannot merge` },
-      { status: 409 },
-    );
+    return NextResponse.json({ error: `pull is ${pull.status}, cannot merge` }, { status: 409 });
   }
 
   // Attribute the merge to the repo owner (the human in the loop).
diff --git a/src/app/api/repos/[owner]/[repo]/pulls/[number]/preview/route.ts b/src/app/api/repos/[owner]/[repo]/pulls/[number]/preview/route.ts
index b6a3aff..e70dc38 100644
--- a/src/app/api/repos/[owner]/[repo]/pulls/[number]/preview/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/pulls/[number]/preview/route.ts
@@ -1,16 +1,15 @@
-import { NextResponse } from "next/server";
 import { readFile } from "node:fs/promises";
 import * as path from "node:path";
-import { getRepo } from "@/lib/registry/repos";
-import { getPullRequest, updatePullPreview } from "@/lib/registry/pulls";
+import { NextResponse } from "next/server";
 import { requireOwner, requireSession } from "@/lib/auth/session";
 import { buildAndPublishPreview } from "@/lib/pages/preview";
+import { getPullRequest, updatePullPreview } from "@/lib/registry/pulls";
+import { getRepo } from "@/lib/registry/repos";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
 
-const AGENT_LOGS_DIR =
-  process.env.AGENT_LOGS_DIR ?? path.join(process.cwd(), ".agent-logs");
+const AGENT_LOGS_DIR = process.env.AGENT_LOGS_DIR ?? path.join(process.cwd(), ".agent-logs");
 
 type Params = {
   params: Promise<{ owner: string; repo: string; number: string }>;
@@ -71,10 +70,7 @@ export async function GET(_req: Request, { params }: Params) {
   const { pull } = r;
   let log = "";
   if (pull.previewLogPath) {
-    log = await readFile(
-      path.join(AGENT_LOGS_DIR, pull.previewLogPath),
-      "utf-8",
-    ).catch(() => "");
+    log = await readFile(path.join(AGENT_LOGS_DIR, pull.previewLogPath), "utf-8").catch(() => "");
   }
   return NextResponse.json({
     status: pull.previewStatus,
diff --git a/src/app/api/repos/[owner]/[repo]/pulls/[number]/route.ts b/src/app/api/repos/[owner]/[repo]/pulls/[number]/route.ts
index e661b14..9d8cef3 100644
--- a/src/app/api/repos/[owner]/[repo]/pulls/[number]/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/pulls/[number]/route.ts
@@ -1,6 +1,6 @@
 import { NextResponse } from "next/server";
-import { getRepo } from "@/lib/registry/repos";
 import { getPullRequest } from "@/lib/registry/pulls";
+import { getRepo } from "@/lib/registry/repos";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
diff --git a/src/app/api/repos/[owner]/[repo]/pulls/route.ts b/src/app/api/repos/[owner]/[repo]/pulls/route.ts
index 2b413d9..c121797 100644
--- a/src/app/api/repos/[owner]/[repo]/pulls/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/pulls/route.ts
@@ -1,9 +1,9 @@
 import { NextResponse } from "next/server";
-import { getRepo, RegistryError } from "@/lib/registry/repos";
-import { listPullRequests, upsertPullRequest } from "@/lib/registry/pulls";
-import { listBranches } from "@/lib/git/objects";
-import { repoPath } from "@/lib/git/backend";
 import { requireOwner } from "@/lib/auth/session";
+import { repoPath } from "@/lib/git/backend";
+import { listBranches } from "@/lib/git/objects";
+import { listPullRequests, upsertPullRequest } from "@/lib/registry/pulls";
+import { getRepo, RegistryError } from "@/lib/registry/repos";
 import { writePullToPod } from "@/lib/solid/pulls";
 
 export const runtime = "nodejs";
@@ -20,15 +20,9 @@ export async function GET(req: Request, { params }: Params) {
   const url = new URL(req.url);
   const statusParam = url.searchParams.get("status") ?? "open";
   if (!["open", "merged", "closed", "all"].includes(statusParam)) {
-    return NextResponse.json(
-      { error: "status must be open|merged|closed|all" },
-      { status: 400 },
-    );
+    return NextResponse.json({ error: "status must be open|merged|closed|all" }, { status: 400 });
   }
-  const pulls = listPullRequests(
-    repo.id,
-    statusParam as "open" | "merged" | "closed" | "all",
-  );
+  const pulls = listPullRequests(repo.id, statusParam as "open" | "merged" | "closed" | "all");
   return NextResponse.json({ pulls });
 }
 
@@ -59,15 +53,10 @@ export async function POST(req: Request, { params }: Params) {
     return NextResponse.json({ error: "title required" }, { status: 400 });
   }
   if (typeof sourceBranch !== "string" || !sourceBranch.trim()) {
-    return NextResponse.json(
-      { error: "sourceBranch required" },
-      { status: 400 },
-    );
+    return NextResponse.json({ error: "sourceBranch required" }, { status: 400 });
   }
   const target =
-    typeof targetBranch === "string" && targetBranch.trim()
-      ? targetBranch
-      : repo.defaultBranch;
+    typeof targetBranch === "string" && targetBranch.trim() ? targetBranch : repo.defaultBranch;
   if (sourceBranch === target) {
     return NextResponse.json(
       { error: "sourceBranch and targetBranch must differ" },
@@ -89,10 +78,7 @@ export async function POST(req: Request, { params }: Params) {
     );
   }
   if (!targetSha) {
-    return NextResponse.json(
-      { error: `target branch '${target}' not found` },
-      { status: 400 },
-    );
+    return NextResponse.json({ error: `target branch '${target}' not found` }, { status: 400 });
   }
 
   try {
@@ -104,9 +90,7 @@ export async function POST(req: Request, { params }: Params) {
       targetBranch: target,
       sourceSha,
       authorWebId:
-        typeof authorWebId === "string" && authorWebId === auth.webId
-          ? authorWebId
-          : auth.webId,
+        typeof authorWebId === "string" && authorWebId === auth.webId ? authorWebId : auth.webId,
       issueId: typeof issueId === "number" ? issueId : null,
     });
 
@@ -114,10 +98,7 @@ export async function POST(req: Request, { params }: Params) {
     // (mirrors how issues are written). A pod hiccup must never block the
     // PR open, so we fire-and-forget and only log on failure (#142).
     writePullToPod(repo, pull).catch((err) => {
-      console.warn(
-        `[pulls.POST] writePullToPod for ${owner}/${name}#${pull.number} failed:`,
-        err,
-      );
+      console.warn(`[pulls.POST] writePullToPod for ${owner}/${name}#${pull.number} failed:`, err);
     });
 
     return NextResponse.json({ pull }, { status: 201 });
diff --git a/src/app/api/repos/[owner]/[repo]/route.ts b/src/app/api/repos/[owner]/[repo]/route.ts
index 5cf67f2..2131dad 100644
--- a/src/app/api/repos/[owner]/[repo]/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/route.ts
@@ -1,14 +1,14 @@
 import { NextResponse } from "next/server";
+import { requireOwner } from "@/lib/auth/session";
+import { deleteBareRepo } from "@/lib/git/backend";
 import {
-  getRepo,
+  deleteRepoById,
   getPagesConfig,
+  getRepo,
   RegistryError,
   updateRepo,
-  deleteRepoById,
 } from "@/lib/registry/repos";
 import { writeRepoMetadata } from "@/lib/solid/repo-metadata";
-import { requireOwner } from "@/lib/auth/session";
-import { deleteBareRepo } from "@/lib/git/backend";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -48,33 +48,25 @@ export async function PATCH(req: Request, { params }: Params) {
   } catch {
     return NextResponse.json({ error: "Invalid JSON body" }, { status: 400 });
   }
-  const { visibility, defaultBranch, proposalsEnabled, collabEnabled } =
-    (body ?? {}) as Record<string, unknown>;
+  const { visibility, defaultBranch, proposalsEnabled, collabEnabled } = (body ?? {}) as Record<
+    string,
+    unknown
+  >;
 
   try {
     const updated = updateRepo(owner, name, {
-      visibility:
-        visibility === "public" || visibility === "private"
-          ? visibility
-          : undefined,
-      defaultBranch:
-        typeof defaultBranch === "string" ? defaultBranch : undefined,
-      proposalsEnabled:
-        typeof proposalsEnabled === "boolean" ? proposalsEnabled : undefined,
-      collabEnabled:
-        typeof collabEnabled === "boolean" ? collabEnabled : undefined,
+      visibility: visibility === "public" || visibility === "private" ? visibility : undefined,
+      defaultBranch: typeof defaultBranch === "string" ? defaultBranch : undefined,
+      proposalsEnabled: typeof proposalsEnabled === "boolean" ? proposalsEnabled : undefined,
+      collabEnabled: typeof collabEnabled === "boolean" ? collabEnabled : undefined,
     });
     writeRepoMetadata(updated, getPagesConfig(updated.id)).catch((err) => {
-      console.warn(
-        `[repos.PATCH] writeRepoMetadata for ${owner}/${name} failed:`,
-        err,
-      );
+      console.warn(`[repos.PATCH] writeRepoMetadata for ${owner}/${name} failed:`, err);
     });
     return NextResponse.json({ repo: updated });
   } catch (e) {
     if (e instanceof RegistryError) {
-      const status =
-        e.code === "NOT_FOUND" ? 404 : e.code === "INVALID_NAME" ? 400 : 400;
+      const status = e.code === "NOT_FOUND" ? 404 : e.code === "INVALID_NAME" ? 400 : 400;
       return NextResponse.json({ error: e.message }, { status });
     }
     throw e;
@@ -128,10 +120,7 @@ export async function DELETE(req: Request, { params }: Params) {
   try {
     await deleteBareRepo(owner, name);
   } catch (err) {
-    console.warn(
-      `[repos.DELETE] failed to remove bare repo for ${owner}/${name}:`,
-      err,
-    );
+    console.warn(`[repos.DELETE] failed to remove bare repo for ${owner}/${name}:`, err);
   }
 
   return NextResponse.json({ ok: true });
diff --git a/src/app/api/repos/[owner]/[repo]/runs/route.ts b/src/app/api/repos/[owner]/[repo]/runs/route.ts
index fcda092..71bbfe1 100644
--- a/src/app/api/repos/[owner]/[repo]/runs/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/runs/route.ts
@@ -1,15 +1,12 @@
-import { NextResponse } from "next/server";
 import { spawn } from "node:child_process";
+import { NextResponse } from "next/server";
+import { requireOwner } from "@/lib/auth/session";
+import { repoPath } from "@/lib/git/backend";
+import { jsonResponse } from "@/lib/http/json";
+import { assertCanDispatchRun, QuotaExceededError } from "@/lib/registry/quotas";
 import { getRepo } from "@/lib/registry/repos";
 import { listRunsForRepo } from "@/lib/registry/runs";
-import { repoPath } from "@/lib/git/backend";
 import { runWorkflow } from "@/lib/workflows/runner";
-import { requireOwner } from "@/lib/auth/session";
-import { jsonResponse } from "@/lib/http/json";
-import {
-  assertCanDispatchRun,
-  QuotaExceededError,
-} from "@/lib/registry/quotas";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -67,8 +64,7 @@ export async function POST(req: Request, { params }: Params) {
   } catch {
     /* empty body is fine — default to repo's default branch */
   }
-  const requestedBranch =
-    (body as Record<string, unknown>)?.branch;
+  const requestedBranch = (body as Record<string, unknown>)?.branch;
   const branch =
     typeof requestedBranch === "string" && requestedBranch.length > 0
       ? requestedBranch
@@ -89,15 +85,10 @@ export async function POST(req: Request, { params }: Params) {
   // Fire-and-forget; surface the run id so the client can navigate to it.
   // We don't `await` the runner — manual triggers are explicitly async to
   // mirror the push-driven path.
-  const runPromise = runWorkflow({ repoId: repo.id, ref, branch }).catch(
-    (err) => {
-      console.error(
-        `[manual-run] failed for ${owner}/${name}@${branch}:`,
-        err,
-      );
-      return null;
-    },
-  );
+  const runPromise = runWorkflow({ repoId: repo.id, ref, branch }).catch((err) => {
+    console.error(`[manual-run] failed for ${owner}/${name}@${branch}:`, err);
+    return null;
+  });
 
   // We DO await briefly here so we can return the run id of the row the
   // runner just inserted. The runner inserts the row before doing any
@@ -132,8 +123,6 @@ function resolveRef(bareRepoPath: string, ref: string): Promise<string | null> {
     let stdout = "";
     child.stdout.on("data", (d: Buffer) => (stdout += d.toString()));
     child.on("error", () => resolve(null));
-    child.on("close", (code) =>
-      resolve(code === 0 ? stdout.trim() : null),
-    );
+    child.on("close", (code) => resolve(code === 0 ? stdout.trim() : null));
   });
 }
diff --git a/src/app/api/repos/[owner]/[repo]/tokens/[id]/route.ts b/src/app/api/repos/[owner]/[repo]/tokens/[id]/route.ts
index f5d744c..2fd2c37 100644
--- a/src/app/api/repos/[owner]/[repo]/tokens/[id]/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/tokens/[id]/route.ts
@@ -1,7 +1,7 @@
 import { NextResponse } from "next/server";
+import { requireOwner } from "@/lib/auth/session";
 import { getRepo } from "@/lib/registry/repos";
 import { revokePushToken } from "@/lib/registry/tokens";
-import { requireOwner } from "@/lib/auth/session";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
diff --git a/src/app/api/repos/[owner]/[repo]/tokens/route.ts b/src/app/api/repos/[owner]/[repo]/tokens/route.ts
index ba95b2b..a51dd6e 100644
--- a/src/app/api/repos/[owner]/[repo]/tokens/route.ts
+++ b/src/app/api/repos/[owner]/[repo]/tokens/route.ts
@@ -1,12 +1,9 @@
 import { NextResponse } from "next/server";
+import { requireOwner } from "@/lib/auth/session";
+import { RATE_LIMITS, rateLimit } from "@/lib/rate-limit";
+import { assertCanMintToken, QuotaExceededError } from "@/lib/registry/quotas";
 import { getRepo } from "@/lib/registry/repos";
 import { createPushToken, listPushTokens } from "@/lib/registry/tokens";
-import { requireOwner } from "@/lib/auth/session";
-import { rateLimit, RATE_LIMITS } from "@/lib/rate-limit";
-import {
-  assertCanMintToken,
-  QuotaExceededError,
-} from "@/lib/registry/quotas";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -63,8 +60,7 @@ export async function POST(req: Request, { params }: Params) {
   return NextResponse.json(
     {
       ...created,
-      hint:
-        "Use this token as the HTTP-Basic password (any username) when pushing or, for private repos, when cloning. The plaintext is shown ONCE — store it now.",
+      hint: "Use this token as the HTTP-Basic password (any username) when pushing or, for private repos, when cloning. The plaintext is shown ONCE — store it now.",
     },
     { status: 201 },
   );
diff --git a/src/app/api/repos/route.ts b/src/app/api/repos/route.ts
index e9a1cd3..0bc0b22 100644
--- a/src/app/api/repos/route.ts
+++ b/src/app/api/repos/route.ts
@@ -1,4 +1,10 @@
 import { NextResponse } from "next/server";
+import { requireSession } from "@/lib/auth/session";
+import { getEnv } from "@/lib/env";
+import { createBareRepo } from "@/lib/git/backend";
+import { jsonResponse } from "@/lib/http/json";
+import { RATE_LIMITS, rateLimit } from "@/lib/rate-limit";
+import { assertCanCreateRepo, QuotaExceededError } from "@/lib/registry/quotas";
 import {
   createRepo,
   deleteRepoById,
@@ -6,17 +12,8 @@ import {
   listRepos,
   RegistryError,
 } from "@/lib/registry/repos";
-import { createBareRepo } from "@/lib/git/backend";
-import { writeRepoMetadata } from "@/lib/solid/repo-metadata";
-import { requireSession } from "@/lib/auth/session";
-import { getEnv } from "@/lib/env";
 import { verifyPodRootForWebId } from "@/lib/solid/profile";
-import { rateLimit, RATE_LIMITS } from "@/lib/rate-limit";
-import { jsonResponse } from "@/lib/http/json";
-import {
-  assertCanCreateRepo,
-  QuotaExceededError,
-} from "@/lib/registry/quotas";
+import { writeRepoMetadata } from "@/lib/solid/repo-metadata";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -38,20 +35,11 @@ export async function POST(req: Request) {
     return NextResponse.json({ error: "Invalid JSON body" }, { status: 400 });
   }
 
-  const {
-    owner,
-    name,
-    ownerWebId,
-    ownerPodRoot,
-    defaultBranch,
-    visibility,
-  } = (body ?? {}) as Record<string, unknown>;
+  const { owner, name, ownerWebId, ownerPodRoot, defaultBranch, visibility } = (body ??
+    {}) as Record<string, unknown>;
 
   if (typeof owner !== "string" || typeof name !== "string") {
-    return NextResponse.json(
-      { error: "owner and name are required strings" },
-      { status: 400 },
-    );
+    return NextResponse.json({ error: "owner and name are required strings" }, { status: 400 });
   }
   if (typeof ownerWebId !== "string" || typeof ownerPodRoot !== "string") {
     return NextResponse.json(
@@ -116,12 +104,8 @@ export async function POST(req: Request) {
       name,
       ownerWebId,
       ownerPodRoot,
-      defaultBranch:
-        typeof defaultBranch === "string" ? defaultBranch : undefined,
-      visibility:
-        visibility === "private" || visibility === "public"
-          ? visibility
-          : undefined,
+      defaultBranch: typeof defaultBranch === "string" ? defaultBranch : undefined,
+      visibility: visibility === "private" || visibility === "public" ? visibility : undefined,
     });
   } catch (e) {
     if (e instanceof RegistryError) {
@@ -139,10 +123,7 @@ export async function POST(req: Request) {
   } catch (e) {
     deleteRepoById(repo.id);
     console.error("[repos.POST] failed to create bare repo:", e);
-    return NextResponse.json(
-      { error: "failed to create bare git repository" },
-      { status: 500 },
-    );
+    return NextResponse.json({ error: "failed to create bare git repository" }, { status: 500 });
   }
 
   // Best-effort: publish a Turtle description of the repo into the owner's
@@ -150,10 +131,7 @@ export async function POST(req: Request) {
   // the repo as Linked Data. Failure here does not fail repo creation —
   // the pod might be temporarily offline.
   writeRepoMetadata(repo, getPagesConfig(repo.id)).catch((err) => {
-    console.warn(
-      `[repos.POST] writeRepoMetadata for ${repo.owner}/${repo.name} failed:`,
-      err,
-    );
+    console.warn(`[repos.POST] writeRepoMetadata for ${repo.owner}/${repo.name} failed:`, err);
   });
 
   const env = getEnv();
diff --git a/src/app/api/signup/route.ts b/src/app/api/signup/route.ts
index d15622e..b2f341d 100644
--- a/src/app/api/signup/route.ts
+++ b/src/app/api/signup/route.ts
@@ -1,10 +1,10 @@
-import { NextResponse } from "next/server";
 import { headers } from "next/headers";
+import { NextResponse } from "next/server";
 import { getEnv } from "@/lib/env";
-import { createUser } from "@/lib/registry/users";
+import { clip, log } from "@/lib/log";
+import { RATE_LIMITS, rateLimit } from "@/lib/rate-limit";
 import { RegistryError, validateName } from "@/lib/registry/repos";
-import { rateLimit, RATE_LIMITS } from "@/lib/rate-limit";
-import { log, clip } from "@/lib/log";
+import { createUser } from "@/lib/registry/users";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -41,11 +41,7 @@ export async function POST(req: Request) {
   const origin = hdrs.get("origin") ?? "";
   const secFetchSite = hdrs.get("sec-fetch-site") ?? "";
   const ownOrigin = env.bridgePublicUrl.replace(/\/$/, "");
-  if (
-    origin !== ownOrigin &&
-    secFetchSite !== "same-origin" &&
-    secFetchSite !== "same-site"
-  ) {
+  if (origin !== ownOrigin && secFetchSite !== "same-origin" && secFetchSite !== "same-site") {
     return NextResponse.json(
       { error: "cross-origin signup is not allowed", code: "CSRF" },
       { status: 403 },
@@ -63,27 +59,17 @@ export async function POST(req: Request) {
   }
   const { email, password, podName } = (body ?? {}) as Record<string, unknown>;
 
-  if (
-    typeof email !== "string" ||
-    typeof password !== "string" ||
-    typeof podName !== "string"
-  ) {
+  if (typeof email !== "string" || typeof password !== "string" || typeof podName !== "string") {
     return NextResponse.json(
       { error: "email, password, podName are required strings" },
       { status: 400 },
     );
   }
   if (!email.includes("@")) {
-    return NextResponse.json(
-      { error: "email must look like an email address" },
-      { status: 400 },
-    );
+    return NextResponse.json({ error: "email must look like an email address" }, { status: 400 });
   }
   if (password.length < 8) {
-    return NextResponse.json(
-      { error: "password must be at least 8 characters" },
-      { status: 400 },
-    );
+    return NextResponse.json({ error: "password must be at least 8 characters" }, { status: 400 });
   }
   try {
     validateName(podName, "owner");
@@ -94,9 +80,7 @@ export async function POST(req: Request) {
     throw e;
   }
 
-  const podBase = env.podBaseUrl.endsWith("/")
-    ? env.podBaseUrl
-    : env.podBaseUrl + "/";
+  const podBase = env.podBaseUrl.endsWith("/") ? env.podBaseUrl : env.podBaseUrl + "/";
 
   // CSS v7 dropped the single-POST `/idp/register/` endpoint that earlier
   // CSS shipped. The v7 path is a three-step account-API dance:
@@ -232,9 +216,7 @@ export async function POST(req: Request) {
 }
 
 function extractSetCookie(res: Response, name: string): string | null {
-  const getSetCookie = (
-    res.headers as unknown as { getSetCookie?: () => string[] }
-  ).getSetCookie;
+  const getSetCookie = (res.headers as unknown as { getSetCookie?: () => string[] }).getSetCookie;
   if (typeof getSetCookie !== "function") return null;
   const lines = getSetCookie.call(res.headers);
   for (const line of lines) {
@@ -266,10 +248,7 @@ function pickStringPath(obj: unknown, path: string[]): string | null {
   return typeof cur === "string" ? cur : null;
 }
 
-function stringField(
-  obj: Record<string, unknown> | null,
-  key: string,
-): string | null {
+function stringField(obj: Record<string, unknown> | null, key: string): string | null {
   if (!obj) return null;
   const v = obj[key];
   return typeof v === "string" ? v : null;
diff --git a/src/app/connect/page.tsx b/src/app/connect/page.tsx
index 4c95a82..159398d 100644
--- a/src/app/connect/page.tsx
+++ b/src/app/connect/page.tsx
@@ -33,10 +33,9 @@ export default function ConnectPage() {
         Connect a <em>pod</em>.
       </h1>
       <p className="mt-4 max-w-2xl text-[color:var(--ink-soft)]">
-        Mind Codespaces needs permission to write into your pod (your published
-        site, and a Turtle description of each repo). You authorize that here
-        via your pod&apos;s own OIDC issuer — the bridge never sees your
-        password, only a token your pod issues to it.
+        Mind Codespaces needs permission to write into your pod (your published site, and a Turtle
+        description of each repo). You authorize that here via your pod&apos;s own OIDC issuer — the
+        bridge never sees your password, only a token your pod issues to it.
       </p>
 
       <hr className="hairline my-10" />
@@ -49,15 +48,12 @@ export default function ConnectPage() {
           >
             01 — authorize
           </p>
-          <h2
-            className="display mt-2 text-2xl"
-            style={{ fontFamily: "var(--font-display)" }}
-          >
+          <h2 className="display mt-2 text-2xl" style={{ fontFamily: "var(--font-display)" }}>
             Point us at your issuer.
           </h2>
           <p className="mt-3 text-sm leading-relaxed text-[color:var(--ink-soft)]">
-            Most pods publish their OIDC issuer at the pod&apos;s root URL.
-            Pick a preset or paste your own.
+            Most pods publish their OIDC issuer at the pod&apos;s root URL. Pick a preset or paste
+            your own.
           </p>
 
           <div className="mt-6">
@@ -72,10 +68,7 @@ export default function ConnectPage() {
           >
             What this means
           </p>
-          <h2
-            className="display mt-2 text-2xl"
-            style={{ fontFamily: "var(--font-display)" }}
-          >
+          <h2 className="display mt-2 text-2xl" style={{ fontFamily: "var(--font-display)" }}>
             A token, not a key.
           </h2>
 
@@ -114,20 +107,14 @@ export default function ConnectPage() {
                   <li className="flex items-baseline gap-2">
                     <span style={{ color: "var(--accent)" }}>·</span>
                     <span>
-                      <span style={{ color: "var(--ink)" }}>
-                        your-pod/codespaces/*
-                      </span>{" "}
-                      <span style={{ color: "var(--ink-faint)" }}>
-                        — repo metadata
-                      </span>
+                      <span style={{ color: "var(--ink)" }}>your-pod/codespaces/*</span>{" "}
+                      <span style={{ color: "var(--ink-faint)" }}>— repo metadata</span>
                     </span>
                   </li>
                   <li className="flex items-baseline gap-2">
                     <span style={{ color: "var(--accent)" }}>·</span>
                     <span>
-                      <span style={{ color: "var(--ink)" }}>
-                        your-pod/public/sites/*
-                      </span>{" "}
+                      <span style={{ color: "var(--ink)" }}>your-pod/public/sites/*</span>{" "}
                       <span style={{ color: "var(--ink-faint)" }}>
                         — when Mind Pages is enabled
                       </span>
@@ -141,8 +128,7 @@ export default function ConnectPage() {
               title="A refresh token lives on disk."
               body={
                 <>
-                  We persist it in{" "}
-                  <code className="kbd">.registry-data/</code> so a restart
+                  We persist it in <code className="kbd">.registry-data/</code> so a restart
                   doesn&apos;t bounce you out. It never leaves this machine.
                 </>
               }
@@ -175,15 +161,10 @@ function TrustItem({
         {kicker}
       </span>
       <div className="min-w-0">
-        <p
-          className="text-sm"
-          style={{ color: "var(--ink)", fontWeight: 500 }}
-        >
+        <p className="text-sm" style={{ color: "var(--ink)", fontWeight: 500 }}>
           {title}
         </p>
-        <div className="mt-1 text-sm leading-relaxed text-[color:var(--ink-soft)]">
-          {body}
-        </div>
+        <div className="mt-1 text-sm leading-relaxed text-[color:var(--ink-soft)]">{body}</div>
       </div>
     </li>
   );
diff --git a/src/app/how-it-works/page.tsx b/src/app/how-it-works/page.tsx
index 529c992..76ff389 100644
--- a/src/app/how-it-works/page.tsx
+++ b/src/app/how-it-works/page.tsx
@@ -16,23 +16,20 @@ export default function HowItWorksPage() {
         className="mt-4 text-[11px] uppercase tracking-[0.22em] text-[color:var(--ink-faint)]"
         style={{ fontFamily: "var(--font-mono-src)" }}
       >
-        Your code · <span style={{ color: "var(--accent)" }}>your context</span>{" "}
-        · your pod.
+        Your code · <span style={{ color: "var(--accent)" }}>your context</span> · your pod.
       </p>
       <p className="mt-6 text-lg leading-relaxed text-[color:var(--ink-soft)]">
-        Mind Codespaces gives you Git collaboration where{" "}
-        <em>everything that matters</em> — your code, your issues, your AI
-        memory, your published sites — lives inside your own Solid Pod. The
-        bridge in the middle just translates protocols; it doesn&apos;t own
-        your project.
+        Mind Codespaces gives you Git collaboration where <em>everything that matters</em> — your
+        code, your issues, your AI memory, your published sites — lives inside your own Solid Pod.
+        The bridge in the middle just translates protocols; it doesn&apos;t own your project.
       </p>
 
       <hr className="hairline my-14" />
 
       <Section title="What lives in your pod">
         <p className="mb-8 text-sm leading-relaxed text-[color:var(--ink-soft)]">
-          A pod is a small piece of storage you own. With Mind Codespaces, four
-          kinds of things go inside it — and nothing else needs to leave.
+          A pod is a small piece of storage you own. With Mind Codespaces, four kinds of things go
+          inside it — and nothing else needs to leave.
         </p>
         <PodCapsule />
       </Section>
@@ -41,20 +38,15 @@ export default function HowItWorksPage() {
 
       <Section title="What happens when you push">
         <p className="mb-8 text-sm leading-relaxed text-[color:var(--ink-soft)]">
-          The flow has three beats. There&apos;s some plumbing — a small bridge
-          translates Git Smart HTTP into pod writes — but you only ever talk to
-          two things: your terminal and your pod.
+          The flow has three beats. There&apos;s some plumbing — a small bridge translates Git Smart
+          HTTP into pod writes — but you only ever talk to two things: your terminal and your pod.
         </p>
         <PushFlow />
         <ol
           className="mt-8 grid gap-3 sm:grid-cols-3 text-sm"
           style={{ fontFamily: "var(--font-mono-src)" }}
         >
-          <FlowStep
-            n={1}
-            title="You push"
-            body="git push, like any other remote."
-          />
+          <FlowStep n={1} title="You push" body="git push, like any other remote." />
           <FlowStep
             n={2}
             title="The bridge translates"
@@ -72,29 +64,25 @@ export default function HowItWorksPage() {
 
       <Section title="AI that asks before it reads">
         <p className="text-sm leading-relaxed text-[color:var(--ink-soft)]">
-          The coder agent runs against the same pod the user owns, with the
-          permissions the user granted. It reads what you let it read, writes
-          where you let it write, and the conversation history — the thing AI
-          tools usually keep in their own database — lands back in the pod
-          alongside the code. If you revoke access, the agent stops. If you
-          move pods, the memory comes with you.
+          The coder agent runs against the same pod the user owns, with the permissions the user
+          granted. It reads what you let it read, writes where you let it write, and the
+          conversation history — the thing AI tools usually keep in their own database — lands back
+          in the pod alongside the code. If you revoke access, the agent stops. If you move pods,
+          the memory comes with you.
         </p>
         <ul className="mt-6 grid gap-2 sm:grid-cols-2 text-sm">
           <AiPoint label="Reads">
-            issue body, recent commits, files the prompt names — nothing else
-            until you say so.
+            issue body, recent commits, files the prompt names — nothing else until you say so.
           </AiPoint>
           <AiPoint label="Writes">
-            a branch in <em>your</em> repo, a pull request, screenshots and
-            comments in <em>your</em> pod.
+            a branch in <em>your</em> repo, a pull request, screenshots and comments in{" "}
+            <em>your</em> pod.
           </AiPoint>
           <AiPoint label="Remembers">
-            the conversation, but the memory lives in the pod, not in an
-            opaque vendor database.
+            the conversation, but the memory lives in the pod, not in an opaque vendor database.
           </AiPoint>
           <AiPoint label="Stops">
-            the moment you revoke its permission — the bridge is a delegate,
-            not an owner.
+            the moment you revoke its permission — the bridge is a delegate, not an owner.
           </AiPoint>
         </ul>
       </Section>
@@ -103,8 +91,8 @@ export default function HowItWorksPage() {
 
       <Section title="Why it&rsquo;s portable">
         <p className="mb-6 text-sm leading-relaxed text-[color:var(--ink-soft)]">
-          The bridge can be replaced and your work survives, because nothing
-          irreplaceable lives in the bridge.
+          The bridge can be replaced and your work survives, because nothing irreplaceable lives in
+          the bridge.
         </p>
         <div className="grid gap-4 sm:grid-cols-2">
           <ScenarioCard
@@ -153,19 +141,10 @@ export default function HowItWorksPage() {
 /* Layout helpers                                                       */
 /* -------------------------------------------------------------------- */
 
-function Section({
-  title,
-  children,
-}: {
-  title: React.ReactNode;
-  children: React.ReactNode;
-}) {
+function Section({ title, children }: { title: React.ReactNode; children: React.ReactNode }) {
   return (
     <section>
-      <h2
-        className="display text-2xl sm:text-3xl"
-        style={{ fontFamily: "var(--font-display)" }}
-      >
+      <h2 className="display text-2xl sm:text-3xl" style={{ fontFamily: "var(--font-display)" }}>
         {title}
       </h2>
       <div className="mt-5">{children}</div>
@@ -203,8 +182,7 @@ function PodCapsule() {
         className="relative rounded-[2rem] border p-8 sm:p-10"
         style={{
           borderColor: "var(--accent)",
-          background:
-            "color-mix(in srgb, var(--accent) 6%, var(--paper-soft))",
+          background: "color-mix(in srgb, var(--accent) 6%, var(--paper-soft))",
           boxShadow:
             "0 0 0 1px color-mix(in srgb, var(--accent) 20%, transparent), 0 20px 60px -30px color-mix(in srgb, var(--accent) 40%, transparent)",
         }}
@@ -240,17 +218,13 @@ function PodCapsule() {
               <div
                 className="flex h-10 w-10 items-center justify-center rounded-lg"
                 style={{
-                  background:
-                    "color-mix(in srgb, var(--accent) 14%, transparent)",
+                  background: "color-mix(in srgb, var(--accent) 14%, transparent)",
                   color: "var(--accent)",
                 }}
               >
                 {it.icon}
               </div>
-              <p
-                className="mt-3 text-sm"
-                style={{ color: "var(--ink)", fontWeight: 500 }}
-              >
+              <p className="mt-3 text-sm" style={{ color: "var(--ink)", fontWeight: 500 }}>
                 {it.label}
               </p>
               <p
@@ -275,7 +249,16 @@ function PodCapsule() {
 
 function CodeGlyph() {
   return (
-    <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="1.8" strokeLinecap="round" strokeLinejoin="round">
+    <svg
+      width="20"
+      height="20"
+      viewBox="0 0 24 24"
+      fill="none"
+      stroke="currentColor"
+      strokeWidth="1.8"
+      strokeLinecap="round"
+      strokeLinejoin="round"
+    >
       <polyline points="8 6 3 12 8 18" />
       <polyline points="16 6 21 12 16 18" />
     </svg>
@@ -284,7 +267,16 @@ function CodeGlyph() {
 
 function IssueGlyph() {
   return (
-    <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="1.8" strokeLinecap="round" strokeLinejoin="round">
+    <svg
+      width="20"
+      height="20"
+      viewBox="0 0 24 24"
+      fill="none"
+      stroke="currentColor"
+      strokeWidth="1.8"
+      strokeLinecap="round"
+      strokeLinejoin="round"
+    >
       <circle cx="12" cy="12" r="9" />
       <line x1="12" y1="8" x2="12" y2="13" />
       <circle cx="12" cy="16.5" r="0.8" fill="currentColor" stroke="none" />
@@ -294,7 +286,16 @@ function IssueGlyph() {
 
 function BrainGlyph() {
   return (
-    <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="1.8" strokeLinecap="round" strokeLinejoin="round">
+    <svg
+      width="20"
+      height="20"
+      viewBox="0 0 24 24"
+      fill="none"
+      stroke="currentColor"
+      strokeWidth="1.8"
+      strokeLinecap="round"
+      strokeLinejoin="round"
+    >
       <path d="M9 5 a3 3 0 0 0 -3 3 v3 a3 3 0 0 0 0 6 v1 a3 3 0 0 0 3 3" />
       <path d="M15 5 a3 3 0 0 1 3 3 v3 a3 3 0 0 1 0 6 v1 a3 3 0 0 1 -3 3" />
       <path d="M12 5 v14" />
@@ -306,7 +307,16 @@ function BrainGlyph() {
 
 function PagesGlyph() {
   return (
-    <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="1.8" strokeLinecap="round" strokeLinejoin="round">
+    <svg
+      width="20"
+      height="20"
+      viewBox="0 0 24 24"
+      fill="none"
+      stroke="currentColor"
+      strokeWidth="1.8"
+      strokeLinecap="round"
+      strokeLinejoin="round"
+    >
       <rect x="3" y="4" width="18" height="16" rx="2" />
       <line x1="3" y1="9" x2="21" y2="9" />
       <circle cx="6" cy="6.5" r="0.6" fill="currentColor" stroke="none" />
@@ -344,10 +354,7 @@ function PushFlow() {
           >
             <path d="M0,0 L10,5 L0,10 z" fill="var(--accent)" />
           </marker>
-          <path
-            id="hi-flowPath"
-            d="M140 110 L 580 110"
-          />
+          <path id="hi-flowPath" d="M140 110 L 580 110" />
         </defs>
 
         {/* Laptop node */}
@@ -493,15 +500,7 @@ function PushFlow() {
   );
 }
 
-function FlowStep({
-  n,
-  title,
-  body,
-}: {
-  n: number;
-  title: string;
-  body: string;
-}) {
+function FlowStep({ n, title, body }: { n: number; title: string; body: string }) {
   return (
     <li
       className="rounded border p-4"
@@ -510,16 +509,10 @@ function FlowStep({
         background: "var(--paper-soft)",
       }}
     >
-      <p
-        className="text-[10px] uppercase tracking-[0.22em]"
-        style={{ color: "var(--accent)" }}
-      >
+      <p className="text-[10px] uppercase tracking-[0.22em]" style={{ color: "var(--accent)" }}>
         0{n}
       </p>
-      <p
-        className="mt-2 text-sm"
-        style={{ color: "var(--ink)", fontWeight: 500 }}
-      >
+      <p className="mt-2 text-sm" style={{ color: "var(--ink)", fontWeight: 500 }}>
         {title}
       </p>
       <p
@@ -536,13 +529,7 @@ function FlowStep({
 /* "AI" section                                                         */
 /* -------------------------------------------------------------------- */
 
-function AiPoint({
-  label,
-  children,
-}: {
-  label: string;
-  children: React.ReactNode;
-}) {
+function AiPoint({ label, children }: { label: string; children: React.ReactNode }) {
   return (
     <li
       className="flex items-baseline gap-3 rounded border px-3 py-3"
@@ -595,33 +582,19 @@ function ScenarioCard({
       >
         Scenario
       </p>
-      <h3
-        className="mt-1 text-lg"
-        style={{ color: "var(--ink)", fontWeight: 500 }}
-      >
+      <h3 className="mt-1 text-lg" style={{ color: "var(--ink)", fontWeight: 500 }}>
         {heading}
       </h3>
-      <p className="mt-2 text-sm italic text-[color:var(--ink-soft)]">
-        {outcome}
-      </p>
-      <ul
-        className="mt-4 space-y-1.5 text-xs"
-        style={{ fontFamily: "var(--font-mono-src)" }}
-      >
+      <p className="mt-2 text-sm italic text-[color:var(--ink-soft)]">{outcome}</p>
+      <ul className="mt-4 space-y-1.5 text-xs" style={{ fontFamily: "var(--font-mono-src)" }}>
         {kept.map((item) => (
-          <li
-            key={item}
-            className="flex items-baseline gap-2 text-[color:var(--ink)]"
-          >
+          <li key={item} className="flex items-baseline gap-2 text-[color:var(--ink)]">
             <span style={{ color: "var(--accent)" }}>kept</span>
             <span>{item}</span>
           </li>
         ))}
         {lost.map((item) => (
-          <li
-            key={item}
-            className="flex items-baseline gap-2 text-[color:var(--ink-faint)]"
-          >
+          <li key={item} className="flex items-baseline gap-2 text-[color:var(--ink-faint)]">
             <span>lost</span>
             <span className="line-through">{item}</span>
           </li>
diff --git a/src/app/identities/identity-row.tsx b/src/app/identities/identity-row.tsx
index 42792f0..026f4c8 100644
--- a/src/app/identities/identity-row.tsx
+++ b/src/app/identities/identity-row.tsx
@@ -1,11 +1,11 @@
 "use client";
 
+import { Button } from "@mind-studio/ui";
 import Link from "next/link";
 import { useState } from "react";
-import { Button } from "@mind-studio/ui";
-import type { Identity } from "@/lib/registry/identities";
-import { formatAbsoluteIso, formatRelativeTime } from "@/lib/format";
 import { authedFetch } from "@/lib/auth/csrf-client";
+import { formatAbsoluteIso, formatRelativeTime } from "@/lib/format";
+import type { Identity } from "@/lib/registry/identities";
 
 export type OwnedRepo = {
   id: number;
@@ -32,10 +32,9 @@ export function IdentityRow({
     setBusy(true);
     setError(null);
     try {
-      const res = await authedFetch(
-        `/api/identities/${encodeURIComponent(identity.webId)}`,
-        { method: "DELETE" },
-      );
+      const res = await authedFetch(`/api/identities/${encodeURIComponent(identity.webId)}`, {
+        method: "DELETE",
+      });
       if (!res.ok) {
         const body = await res.json().catch(() => ({}));
         throw new Error(body.error ?? `request failed (${res.status})`);
@@ -166,9 +165,7 @@ export function IdentityRow({
         </div>
       </div>
 
-      {error ? (
-        <p className="mt-3 text-sm text-[color:var(--status-bad)]">{error}</p>
-      ) : null}
+      {error ? <p className="mt-3 text-sm text-[color:var(--status-bad)]">{error}</p> : null}
     </li>
   );
 }
@@ -188,13 +185,7 @@ function DisconnectControl({
 }) {
   if (!confirming) {
     return (
-      <Button
-        type="button"
-        variant="outline"
-        size="sm"
-        onClick={onArm}
-        disabled={busy}
-      >
+      <Button type="button" variant="outline" size="sm" onClick={onArm} disabled={busy}>
         Disconnect
       </Button>
     );
diff --git a/src/app/identities/page.tsx b/src/app/identities/page.tsx
index 02ba4a5..d4739ba 100644
--- a/src/app/identities/page.tsx
+++ b/src/app/identities/page.tsx
@@ -1,5 +1,5 @@
 import Link from "next/link";
-import { listIdentities, type Identity } from "@/lib/registry/identities";
+import { type Identity, listIdentities } from "@/lib/registry/identities";
 import { listRepos, type Repo } from "@/lib/registry/repos";
 import { IdentityRow } from "./identity-row";
 
@@ -38,9 +38,8 @@ export default function IdentitiesPage() {
         ) : null}
       </div>
       <p className="mt-4 text-[color:var(--ink-soft)]">
-        WebIDs that have authorized this bridge. Their refresh tokens live
-        in <code className="kbd">.registry-data/</code> — disconnect to
-        revoke.
+        WebIDs that have authorized this bridge. Their refresh tokens live in{" "}
+        <code className="kbd">.registry-data/</code> — disconnect to revoke.
       </p>
 
       <hr className="hairline my-8" />
@@ -77,17 +76,13 @@ function EmptyState() {
       >
         // no identities connected
       </p>
-      <p
-        className="display mt-3 text-2xl"
-        style={{ fontFamily: "var(--font-display)" }}
-      >
+      <p className="display mt-3 text-2xl" style={{ fontFamily: "var(--font-display)" }}>
         Running on <em>seeded credentials</em>.
       </p>
       <p className="mt-3 text-[color:var(--ink-soft)]">
-        The publisher is signing writes with a shared dev account
-        (<code className="kbd">alice@mind.local</code>). Authorize
-        a real pod to swap in a delegated refresh token — repos owned by
-        that WebID will publish under your own identity.
+        The publisher is signing writes with a shared dev account (
+        <code className="kbd">alice@mind.local</code>). Authorize a real pod to swap in a delegated
+        refresh token — repos owned by that WebID will publish under your own identity.
       </p>
       <div className="mt-5">
         <Link
diff --git a/src/app/layout.tsx b/src/app/layout.tsx
index d57e0c6..fa5bbb8 100644
--- a/src/app/layout.tsx
+++ b/src/app/layout.tsx
@@ -1,16 +1,16 @@
 import type { Metadata } from "next";
-import Link from "next/link";
 import { Fraunces, Hanken_Grotesk, JetBrains_Mono } from "next/font/google";
+import Link from "next/link";
 import "./globals.css";
-import { ThemeShell } from "@/components/theme-shell";
-import { ThemeToggle } from "@/components/theme-toggle";
-import { PageTransition } from "@/components/page-transition";
+import { DEFAULT_APPS } from "@mind-studio/core/apps";
+import { MindAppLauncher } from "@mind-studio/core/launcher";
 import { AuthCtaServer } from "@/components/auth-cta-server";
-import { MainNav } from "@/components/main-nav";
 import { FeedbackLauncher } from "@/components/feedback-launcher";
+import { MainNav } from "@/components/main-nav";
+import { PageTransition } from "@/components/page-transition";
+import { ThemeShell } from "@/components/theme-shell";
+import { ThemeToggle } from "@/components/theme-toggle";
 import { readSession } from "@/lib/auth/session";
-import { MindAppLauncher } from "@mind-studio/core/launcher";
-import { DEFAULT_APPS } from "@mind-studio/core/apps";
 
 /**
  * Mirror both theme axes onto <html> BEFORE first paint to dodge the
@@ -89,10 +89,7 @@ async function Masthead() {
         </Link>
         <div className="flex shrink-0 items-center gap-1.5 sm:gap-3">
           <MainNav signedIn={!!session} />
-          <span
-            aria-hidden
-            className="hidden h-5 w-px bg-border sm:inline-block"
-          />
+          <span aria-hidden className="hidden h-5 w-px bg-border sm:inline-block" />
           {session ? (
             <MindAppLauncher
               apps={DEFAULT_APPS}
@@ -116,41 +113,30 @@ function Colophon() {
             Mind <em>Codespaces</em>
           </p>
           <p className="mt-3 text-sm leading-relaxed text-muted-foreground">
-            A prototype bridge between Git and Solid Pods. Git stays Git; the pod
-            owns identity, metadata, and the published site.
+            A prototype bridge between Git and Solid Pods. Git stays Git; the pod owns identity,
+            metadata, and the published site.
           </p>
         </div>
         <nav
           aria-label="Footer"
           className="flex flex-col gap-1 font-mono text-[11px] uppercase tracking-[0.18em]"
         >
-          <span className="text-[10px] tracking-[0.22em] text-muted-foreground">
-            // learn
-          </span>
-          <Link
-            href="/how-it-works"
-            className="text-muted-foreground hover:text-primary"
-          >
+          <span className="text-[10px] tracking-[0.22em] text-muted-foreground">// learn</span>
+          <Link href="/how-it-works" className="text-muted-foreground hover:text-primary">
             How it works
           </Link>
-          <Link
-            href="/#start-here"
-            className="text-muted-foreground hover:text-primary"
-          >
+          <Link href="/#start-here" className="text-muted-foreground hover:text-primary">
             Quickstart
           </Link>
-          <Link
-            href="/api/health"
-            className="text-muted-foreground hover:text-primary"
-          >
+          <Link href="/api/health" className="text-muted-foreground hover:text-primary">
             Health
           </Link>
         </nav>
       </div>
       <div className="mx-auto max-w-5xl px-4 pb-8 sm:px-10 sm:pb-10">
         <p className="font-mono text-[10px] uppercase tracking-[0.22em] text-muted-foreground">
-          Sibling of <span className="italic">Mind Market</span> · No third-party
-          analytics · No cookies set beyond strictly necessary
+          Sibling of <span className="italic">Mind Market</span> · No third-party analytics · No
+          cookies set beyond strictly necessary
         </p>
       </div>
     </footer>
diff --git a/src/app/login/login-page.tsx b/src/app/login/login-page.tsx
index 959731e..030bf3d 100644
--- a/src/app/login/login-page.tsx
+++ b/src/app/login/login-page.tsx
@@ -1,8 +1,8 @@
 "use client";
 
-import { useCallback, useState } from "react";
-import { useRouter } from "next/navigation";
 import { Button, Input } from "@mind-studio/ui";
+import { useRouter } from "next/navigation";
+import { useCallback, useState } from "react";
 
 type Tab = "login" | "register";
 
@@ -63,11 +63,7 @@ export function LoginPage({
           }}
           role="tablist"
         >
-          <TabButton
-            active={tab === "login"}
-            onClick={() => setTab("login")}
-            label="Sign in"
-          />
+          <TabButton active={tab === "login"} onClick={() => setTab("login")} label="Sign in" />
           <TabButton
             active={tab === "register"}
             onClick={() => setTab("register")}
@@ -84,10 +80,7 @@ export function LoginPage({
             issuerPresets={issuerPresets}
           />
         ) : (
-          <RegisterPanel
-            returnTo={returnTo}
-            onSwitchToLogin={() => setTab("login")}
-          />
+          <RegisterPanel returnTo={returnTo} onSwitchToLogin={() => setTab("login")} />
         )}
       </div>
 
@@ -219,10 +212,7 @@ function LoginPanel({
         </Button>
         {advancedOpen ? (
           <div className="mt-3">
-            <ExternalPodPanel
-              defaultIssuer={defaultIssuer}
-              issuerPresets={issuerPresets}
-            />
+            <ExternalPodPanel defaultIssuer={defaultIssuer} issuerPresets={issuerPresets} />
           </div>
         ) : null}
       </div>
@@ -276,10 +266,7 @@ function RegisterPanel({
         error?: string;
       };
       if (!loginRes.ok) {
-        setError(
-          loginData.error ??
-            "account created, but auto sign-in failed — try signing in",
-        );
+        setError(loginData.error ?? "account created, but auto sign-in failed — try signing in");
         setBusy(false);
         return;
       }
@@ -440,9 +427,7 @@ function ExternalPodPanel({
                 className="rounded-full border px-2.5 py-0.5 text-[11px] disabled:opacity-50"
                 style={{
                   fontFamily: "var(--font-mono-src)",
-                  borderColor: active
-                    ? "var(--accent)"
-                    : "var(--ink-trace)",
+                  borderColor: active ? "var(--accent)" : "var(--ink-trace)",
                   background: active ? "var(--accent-soft)" : "transparent",
                   color: active ? "var(--accent-deep)" : "var(--ink-soft)",
                 }}
@@ -469,8 +454,7 @@ function ExternalPodPanel({
       </Button>
       <p className="text-[10px] uppercase tracking-[0.22em] text-[color:var(--ink-faint)]">
         <span style={{ color: "var(--accent)" }}>// </span>
-        external pods log you in at their own URL — the bridge never sees
-        that password.
+        external pods log you in at their own URL — the bridge never sees that password.
       </p>
     </form>
   );
@@ -480,13 +464,7 @@ function ExternalPodPanel({
 /* Bits                                                                 */
 /* -------------------------------------------------------------------- */
 
-function FieldLabel({
-  name,
-  children,
-}: {
-  name: string;
-  children: React.ReactNode;
-}) {
+function FieldLabel({ name, children }: { name: string; children: React.ReactNode }) {
   return (
     <label className="flex flex-col gap-1.5">
       <span
diff --git a/src/app/not-found.tsx b/src/app/not-found.tsx
index 75e7d8e..77c4ad9 100644
--- a/src/app/not-found.tsx
+++ b/src/app/not-found.tsx
@@ -6,10 +6,7 @@ export default function NotFound() {
     <div className="mx-auto max-w-5xl px-6 py-16 sm:px-10">
       <p className="section-mark">// 404</p>
       <div className="mt-3 flex flex-col items-start gap-6 sm:flex-row sm:items-end sm:justify-between sm:gap-10">
-        <h1
-          className="display text-4xl sm:text-5xl"
-          style={{ fontFamily: "var(--font-display)" }}
-        >
+        <h1 className="display text-4xl sm:text-5xl" style={{ fontFamily: "var(--font-display)" }}>
           Not on this <em>bridge</em>.
         </h1>
         <div className="flex flex-col items-end gap-1">
@@ -27,9 +24,8 @@ export default function NotFound() {
         </div>
       </div>
       <p className="mt-5 max-w-2xl leading-relaxed text-[color:var(--ink-soft)]">
-        That URL doesn&apos;t resolve to anything the bridge knows about. The
-        repo, run, pull, or page may have been renamed, never existed, or
-        lives on a different Solid Pod entirely.
+        That URL doesn&apos;t resolve to anything the bridge knows about. The repo, run, pull, or
+        page may have been renamed, never existed, or lives on a different Solid Pod entirely.
       </p>
 
       <hr className="hairline my-10" />
diff --git a/src/app/page.tsx b/src/app/page.tsx
index 0e2badd..ab3fadd 100644
--- a/src/app/page.tsx
+++ b/src/app/page.tsx
@@ -1,14 +1,14 @@
-import Link from "next/link";
 import { Button } from "@mind-studio/ui";
-import { listRepos, getRepoById, getPagesConfig } from "@/lib/registry/repos";
+import Link from "next/link";
+import { RelativeTime } from "@/components/relative-time";
+import { readSession } from "@/lib/auth/session";
+import { getPagesConfig, getRepoById, listRepos } from "@/lib/registry/repos";
 import {
   countAllRuns,
   getLatestRunOverall,
   listRunsForRepo,
   type WorkflowRun,
 } from "@/lib/registry/runs";
-import { RelativeTime } from "@/components/relative-time";
-import { readSession } from "@/lib/auth/session";
 import { getUserByWebId } from "@/lib/registry/users";
 
 export const dynamic = "force-dynamic";
@@ -39,8 +39,7 @@ const DEMOS: DemoConfig[] = [
   {
     owner: "alice",
     name: "tailwind-site",
-    blurb:
-      "Real Tailwind v4 CLI pipeline — four shell steps inside one container.",
+    blurb: "Real Tailwind v4 CLI pipeline — four shell steps inside one container.",
   },
   {
     owner: "alice",
@@ -51,8 +50,7 @@ const DEMOS: DemoConfig[] = [
   {
     owner: "alice",
     name: "broken-build",
-    blurb:
-      "A workflow that deliberately fails at step 3 of 4 so the failure UI is visible.",
+    blurb: "A workflow that deliberately fails at step 3 of 4 so the failure UI is visible.",
     detailPath: "runs",
     detailLabel: "failure log",
   },
@@ -78,9 +76,7 @@ export default async function LandingPage() {
     .slice(-24);
 
   const livingDemos = DEMOS.flatMap((demo) => {
-    const repo = repos.find(
-      (r) => r.owner === demo.owner && r.name === demo.name,
-    );
+    const repo = repos.find((r) => r.owner === demo.owner && r.name === demo.name);
     if (!repo) return [];
     const pages = getPagesConfig(repo.id);
     // Only link a demo as "live" once it actually published — otherwise the
@@ -95,9 +91,9 @@ export default async function LandingPage() {
   // Returning-user shortcut: surface the most recently-touched repo this
   // WebID owns so the hero can offer "pick up where you left off".
   const myLatestRepo = signedIn
-    ? repos
+    ? (repos
         .filter((r) => r.ownerWebId === session!.webId)
-        .sort((a, b) => b.createdAt - a.createdAt)[0] ?? null
+        .sort((a, b) => b.createdAt - a.createdAt)[0] ?? null)
     : null;
 
   return (
@@ -108,22 +104,18 @@ export default async function LandingPage() {
           className="display mt-4 text-4xl sm:text-6xl md:text-7xl"
           style={{ fontFamily: "var(--font-display)" }}
         >
-          Your <em style={{ color: "var(--accent)" }}>pod</em> is your
-          platform.
+          Your <em style={{ color: "var(--accent)" }}>pod</em> is your platform.
         </h1>
         <p
           className="mt-5 text-[11px] uppercase tracking-[0.22em] text-[color:var(--ink-faint)]"
           style={{ fontFamily: "var(--font-mono-src)" }}
         >
-          Your code ·{" "}
-          <span style={{ color: "var(--accent)" }}>your context</span> · your
-          pod.
+          Your code · <span style={{ color: "var(--accent)" }}>your context</span> · your pod.
         </p>
         <p className="mt-6 text-lg leading-relaxed text-[color:var(--ink-soft)]">
-          Mind Codespaces is an AI-native Git platform built around your own
-          Solid Pod. Push code, file issues, let an agent draft pull requests —
-          and the artifacts, history, and AI memory stay under <em>your</em>{" "}
-          WebID. The bridge translates protocols; it doesn&apos;t own your
+          Mind Codespaces is an AI-native Git platform built around your own Solid Pod. Push code,
+          file issues, let an agent draft pull requests — and the artifacts, history, and AI memory
+          stay under <em>your</em> WebID. The bridge translates protocols; it doesn&apos;t own your
           project.
         </p>
 
@@ -131,9 +123,7 @@ export default async function LandingPage() {
           signedIn={signedIn}
           ownerSlug={ownerSlug}
           myLatestRepo={
-            myLatestRepo
-              ? { owner: myLatestRepo.owner, name: myLatestRepo.name }
-              : null
+            myLatestRepo ? { owner: myLatestRepo.owner, name: myLatestRepo.name } : null
           }
         />
       </div>
@@ -151,9 +141,7 @@ export default async function LandingPage() {
               <Stat label="runs" value={runCount.toString()} />
               <Stat
                 label="last activity"
-                value={
-                  latestRun ? <RelativeTime ts={latestRun.startedAt} /> : "—"
-                }
+                value={latestRun ? <RelativeTime ts={latestRun.startedAt} /> : "—"}
               />
             </div>
             {recentRuns.length > 0 ? <RunSparkline runs={recentRuns} /> : null}
@@ -178,9 +166,8 @@ export default async function LandingPage() {
           <hr className="hairline my-12" />
           <Section title="See it working">
             <p className="mb-5 text-sm text-[color:var(--ink-soft)]">
-              Seeded demos pushed to alice&apos;s pod. Click into the repo to
-              browse code + runs; the live link opens the page that was
-              actually published.
+              Seeded demos pushed to alice&apos;s pod. Click into the repo to browse code + runs;
+              the live link opens the page that was actually published.
             </p>
             <ul className="space-y-3">
               {livingDemos.map(({ demo, live }, i) => (
@@ -205,8 +192,8 @@ export default async function LandingPage() {
         <Link href="/how-it-works" className="link">
           How it works
         </Link>{" "}
-        walks through what lives in your pod, what happens on push, and what
-        survives if the bridge disappears.
+        walks through what lives in your pod, what happens on push, and what survives if the bridge
+        disappears.
       </p>
     </div>
   );
@@ -276,10 +263,9 @@ function Pillars() {
       title: "Pod-native repos",
       body: (
         <>
-          A real bare Git repository on the bridge, plus a Turtle description
-          of the project written to <em>your</em> pod under{" "}
-          <code className="kbd">/codespaces/</code>. Move bridges, your repo
-          metadata moves with you.
+          A real bare Git repository on the bridge, plus a Turtle description of the project written
+          to <em>your</em> pod under <code className="kbd">/codespaces/</code>. Move bridges, your
+          repo metadata moves with you.
         </>
       ),
     },
@@ -288,10 +274,9 @@ function Pillars() {
       title: "Conversational dev",
       body: (
         <>
-          File an issue and a single conversational <em>coder</em> agent
-          responds against the same WebID, either editing files or asking a
-          follow-up in the thread. Their working memory lands back in your
-          pod, not in a vendor database.
+          File an issue and a single conversational <em>coder</em> agent responds against the same
+          WebID, either editing files or asking a follow-up in the thread. Their working memory
+          lands back in your pod, not in a vendor database.
         </>
       ),
     },
@@ -300,9 +285,9 @@ function Pillars() {
       title: "Mind Pages",
       body: (
         <>
-          A <code className="kbd">git push</code> publishes a static site to a
-          container of your choice on your pod. Visitors hit your pod
-          directly; the bridge is out of the loop after publish.
+          A <code className="kbd">git push</code> publishes a static site to a container of your
+          choice on your pod. Visitors hit your pod directly; the bridge is out of the loop after
+          publish.
         </>
       ),
     },
@@ -310,8 +295,8 @@ function Pillars() {
   return (
     <Section title="What this is">
       <p className="mb-6 text-sm text-[color:var(--ink-soft)]">
-        Three primitives, all pod-owned. Each can be replaced or rebuilt
-        without losing what matters — because what matters lives in the pod.
+        Three primitives, all pod-owned. Each can be replaced or rebuilt without losing what matters
+        — because what matters lives in the pod.
       </p>
       <ul className="grid gap-4 sm:grid-cols-3">
         {items.map((item) => (
@@ -326,15 +311,10 @@ function Pillars() {
             >
               {item.kicker}
             </span>
-            <h3
-              className="display text-xl"
-              style={{ fontFamily: "var(--font-display)" }}
-            >
+            <h3 className="display text-xl" style={{ fontFamily: "var(--font-display)" }}>
               {item.title}
             </h3>
-            <p className="text-sm leading-relaxed text-[color:var(--ink-soft)]">
-              {item.body}
-            </p>
+            <p className="text-sm leading-relaxed text-[color:var(--ink-soft)]">{item.body}</p>
           </li>
         ))}
       </ul>
@@ -385,8 +365,8 @@ function StartHere({
     return (
       <Section title="Start here" id="start-here">
         <p className="mb-5 text-sm text-[color:var(--ink-soft)]">
-          Four moves from nothing to a live site published from your pod.
-          Everything happens in the app — no curl required.
+          Four moves from nothing to a live site published from your pod. Everything happens in the
+          app — no curl required.
           {seeded ? (
             <>
               {" "}
@@ -433,8 +413,7 @@ function StartHere({
   return (
     <Section title="Three moves from here">
       <p className="mb-5 text-sm text-[color:var(--ink-soft)]">
-        You&apos;ve got a pod and a session. From here it&apos;s repo →
-        pages → push.
+        You&apos;ve got a pod and a session. From here it&apos;s repo → pages → push.
       </p>
       <ol className="grid gap-3 sm:grid-cols-3">
         {steps.map((s) => (
@@ -464,15 +443,10 @@ function StepCard({
       >
         {n}
       </span>
-      <h3
-        className="display text-lg"
-        style={{ fontFamily: "var(--font-display)" }}
-      >
+      <h3 className="display text-lg" style={{ fontFamily: "var(--font-display)" }}>
         {title}
       </h3>
-      <p className="text-sm leading-relaxed text-[color:var(--ink-soft)]">
-        {body}
-      </p>
+      <p className="text-sm leading-relaxed text-[color:var(--ink-soft)]">{body}</p>
       <Button asChild variant="link" className="mt-1 h-auto self-start p-0">
         <Link href={cta.href}>{cta.label}</Link>
       </Button>
@@ -495,10 +469,7 @@ function Section({
 }) {
   return (
     <section id={id} className={id ? "scroll-mt-20" : undefined}>
-      <h2
-        className="display text-2xl"
-        style={{ fontFamily: "var(--font-display)" }}
-      >
+      <h2 className="display text-2xl" style={{ fontFamily: "var(--font-display)" }}>
         {title}
       </h2>
       <div className="mt-4">{children}</div>
@@ -506,13 +477,7 @@ function Section({
   );
 }
 
-function Stat({
-  label,
-  value,
-}: {
-  label: string;
-  value: React.ReactNode;
-}) {
+function Stat({ label, value }: { label: string; value: React.ReactNode }) {
   return (
     <div className="min-w-0">
       <p
@@ -533,11 +498,7 @@ function Stat({
 
 function RunStatusInline({ status }: { status: string }) {
   const tone =
-    status === "success"
-      ? "ok"
-      : status === "running" || status === "queued"
-        ? undefined
-        : "bad";
+    status === "success" ? "ok" : status === "running" || status === "queued" ? undefined : "bad";
   return (
     <span className="stamp ml-1" data-tone={tone}>
       {status}
@@ -609,8 +570,7 @@ function DemoCard({
         featured
           ? {
               borderColor: "var(--accent)",
-              background:
-                "color-mix(in srgb, var(--accent) 12%, var(--paper-soft))",
+              background: "color-mix(in srgb, var(--accent) 12%, var(--paper-soft))",
             }
           : undefined
       }
@@ -659,11 +619,7 @@ function DemoCard({
           </Link>
         </div>
       </div>
-      <p
-        className={`mt-1 text-[color:var(--ink-soft)] ${
-          featured ? "text-[15px]" : "text-sm"
-        }`}
-      >
+      <p className={`mt-1 text-[color:var(--ink-soft)] ${featured ? "text-[15px]" : "text-sm"}`}>
         {demo.blurb}
       </p>
     </li>
diff --git a/src/app/people/[owner]/page.tsx b/src/app/people/[owner]/page.tsx
index e33152d..dbe068a 100644
--- a/src/app/people/[owner]/page.tsx
+++ b/src/app/people/[owner]/page.tsx
@@ -5,11 +5,7 @@ import ProfileView from "../profile-view";
 
 export const dynamic = "force-dynamic";
 
-export default async function PersonPage({
-  params,
-}: {
-  params: Promise<{ owner: string }>;
-}) {
+export default async function PersonPage({ params }: { params: Promise<{ owner: string }> }) {
   const { owner } = await params;
   const repos = listRepos();
   const ownerRepo = repos.find((r) => r.owner === owner);
diff --git a/src/app/people/page.tsx b/src/app/people/page.tsx
index bc8ef2a..8535e01 100644
--- a/src/app/people/page.tsx
+++ b/src/app/people/page.tsx
@@ -1,5 +1,5 @@
-import Link from "next/link";
 import { Button, Input } from "@mind-studio/ui";
+import Link from "next/link";
 import { listRepos, type Repo } from "@/lib/registry/repos";
 import ProfileView from "./profile-view";
 
@@ -43,9 +43,8 @@ export default async function PeoplePage({
         Profiles, <em>read from pods.</em>
       </h1>
       <p className="mt-6 text-lg leading-relaxed text-[color:var(--ink-soft)]">
-        The bridge doesn't store names, bios, or avatars. Every field on a
-        profile page is fetched live from the WebID URL and rendered as-is. If
-        a field isn't in the pod, the page says so.
+        The bridge doesn't store names, bios, or avatars. Every field on a profile page is fetched
+        live from the WebID URL and rendered as-is. If a field isn't in the pod, the page says so.
       </p>
 
       <hr className="hairline my-10" />
@@ -68,10 +67,7 @@ export default async function PeoplePage({
                 >
                   /people/{p.owner}
                 </div>
-                <div
-                  className="display mt-1 text-xl"
-                  style={{ fontFamily: "var(--font-display)" }}
-                >
+                <div className="display mt-1 text-xl" style={{ fontFamily: "var(--font-display)" }}>
                   @{p.owner}
                 </div>
                 <div
@@ -90,9 +86,8 @@ export default async function PeoplePage({
 
       <Section title="Anywhere on the open web">
         <p className="mb-4 text-sm text-[color:var(--ink-soft)]">
-          Paste any public WebID URL. The bridge will dereference it and render
-          whatever it finds — including profiles hosted on other Solid servers
-          that have never heard of this bridge.
+          Paste any public WebID URL. The bridge will dereference it and render whatever it finds —
+          including profiles hosted on other Solid servers that have never heard of this bridge.
         </p>
         <form className="flex flex-wrap gap-2" action="/people" method="get">
           <Input
@@ -108,8 +103,8 @@ export default async function PeoplePage({
           </Button>
         </form>
         <p className="mt-3 text-xs text-[color:var(--ink-faint)]">
-          Tip: this works for any WebID whose document is public-read — the
-          bridge dereferences the URL with no auth.
+          Tip: this works for any WebID whose document is public-read — the bridge dereferences the
+          URL with no auth.
         </p>
       </Section>
     </div>
@@ -127,19 +122,10 @@ function uniqueByWebId(repos: Repo[]): Repo[] {
   return out.sort((a, b) => a.owner.localeCompare(b.owner));
 }
 
-function Section({
-  title,
-  children,
-}: {
-  title: React.ReactNode;
-  children: React.ReactNode;
-}) {
+function Section({ title, children }: { title: React.ReactNode; children: React.ReactNode }) {
   return (
     <section>
-      <h2
-        className="display text-2xl"
-        style={{ fontFamily: "var(--font-display)" }}
-      >
+      <h2 className="display text-2xl" style={{ fontFamily: "var(--font-display)" }}>
         {title}
       </h2>
       <div className="mt-4">{children}</div>
diff --git a/src/app/people/profile-view.tsx b/src/app/people/profile-view.tsx
index fc9e1ab..d786836 100644
--- a/src/app/people/profile-view.tsx
+++ b/src/app/people/profile-view.tsx
@@ -1,6 +1,6 @@
 import Link from "next/link";
-import { fetchProfile, listContainer } from "@/lib/solid/profile";
 import { listRepos, type Repo } from "@/lib/registry/repos";
+import { fetchProfile, listContainer } from "@/lib/solid/profile";
 
 function initials(name: string | null, fallback: string): string {
   const source = (name && name.trim().length > 0 ? name : fallback).trim();
@@ -62,12 +62,7 @@ export default async function ProfileView({ webId }: { webId: string }) {
   try {
     profile = await fetchProfile(webId);
   } catch (err) {
-    return (
-      <ErrorPanel
-        webId={webId}
-        message={err instanceof Error ? err.message : String(err)}
-      />
-    );
+    return <ErrorPanel webId={webId} message={err instanceof Error ? err.message : String(err)} />;
   }
 
   const repos = listRepos();
@@ -92,12 +87,9 @@ export default async function ProfileView({ webId }: { webId: string }) {
 
   const ownerSlug = ownerSlugForWebId(webId, repos);
   const fallbackHandle = ownerSlug ?? lastSegment(stripFragment(webId));
-  const displayName =
-    profile.name ?? (profile.nick ? `@${profile.nick}` : `@${fallbackHandle}`);
+  const displayName = profile.name ?? (profile.nick ? `@${profile.nick}` : `@${fallbackHandle}`);
   const initialsBadge = initials(profile.name, profile.nick ?? fallbackHandle);
-  const issuerHost = profile.oidcIssuer
-    ? hostOnly(profile.oidcIssuer)
-    : hostOnly(profile.document);
+  const issuerHost = profile.oidcIssuer ? hostOnly(profile.oidcIssuer) : hostOnly(profile.document);
 
   return (
     <article>
@@ -121,9 +113,7 @@ export default async function ProfileView({ webId }: { webId: string }) {
           </div>
         )}
         <div className="min-w-0">
-          <p className="section-mark">
-            Profile{ownerSlug ? ` · ${ownerSlug}` : ""}
-          </p>
+          <p className="section-mark">Profile{ownerSlug ? ` · ${ownerSlug}` : ""}</p>
           <h1
             className="display mt-2 text-4xl sm:text-5xl"
             style={{ fontFamily: "var(--font-display)" }}
@@ -158,23 +148,13 @@ export default async function ProfileView({ webId }: { webId: string }) {
         style={{ fontFamily: "var(--font-mono-src)" }}
       >
         <DataRow label="WebID">
-          <a
-            href={profile.webId}
-            target="_blank"
-            rel="noreferrer"
-            className="link break-all"
-          >
+          <a href={profile.webId} target="_blank" rel="noreferrer" className="link break-all">
             {originHostPath(profile.webId)}
           </a>
         </DataRow>
         <DataRow label="oidc issuer">
           {profile.oidcIssuer ? (
-            <a
-              href={profile.oidcIssuer}
-              target="_blank"
-              rel="noreferrer"
-              className="link"
-            >
+            <a href={profile.oidcIssuer} target="_blank" rel="noreferrer" className="link">
               {originHostPath(profile.oidcIssuer)}
             </a>
           ) : (
@@ -183,12 +163,7 @@ export default async function ProfileView({ webId }: { webId: string }) {
         </DataRow>
         <DataRow label="homepage">
           {profile.homepage ? (
-            <a
-              href={profile.homepage}
-              target="_blank"
-              rel="noreferrer"
-              className="link"
-            >
+            <a href={profile.homepage} target="_blank" rel="noreferrer" className="link">
               {originHostPath(profile.homepage)}
             </a>
           ) : (
@@ -243,9 +218,7 @@ export default async function ProfileView({ webId }: { webId: string }) {
                     className="inline-flex items-baseline gap-2 rounded-[var(--radius-chip)] border border-[color:var(--ink-trace)] bg-[color:var(--paper-soft)] px-3 py-1.5 text-xs transition-colors hover:border-[color:var(--accent)] hover:text-[color:var(--accent)]"
                     style={{ fontFamily: "var(--font-mono-src)" }}
                   >
-                    <span className="text-[color:var(--ink-faint)]">
-                      {r.owner}/
-                    </span>
+                    <span className="text-[color:var(--ink-faint)]">{r.owner}/</span>
                     <span className="text-[color:var(--ink)]">{r.name}</span>
                     {r.visibility === "private" ? (
                       <span className="text-[9px] uppercase tracking-[0.18em] text-[color:var(--ink-faint)]">
@@ -272,10 +245,7 @@ export default async function ProfileView({ webId }: { webId: string }) {
               const href = linkForKnown(w, repos);
               const slug = ownerSlugForWebId(w, repos);
               return (
-                <li
-                  key={w}
-                  className="flex flex-wrap items-baseline gap-x-3 gap-y-1"
-                >
+                <li key={w} className="flex flex-wrap items-baseline gap-x-3 gap-y-1">
                   <Link href={href} className="link">
                     {slug ? `@${slug}` : "look up →"}
                   </Link>
@@ -296,9 +266,8 @@ export default async function ProfileView({ webId }: { webId: string }) {
 
       <Section title="Repos">
         <p className="mb-4 text-sm text-[color:var(--ink-soft)]">
-          Cross-referenced: which repos the bridge thinks this person owns vs.
-          which ones their pod itself advertises in{" "}
-          <code className="kbd">codespaces/</code>. The pod is authoritative.
+          Cross-referenced: which repos the bridge thinks this person owns vs. which ones their pod
+          itself advertises in <code className="kbd">codespaces/</code>. The pod is authoritative.
         </p>
         <RepoCrossRef
           bridgeRepos={ownedReposFromBridge.map((r) => r.name)}
@@ -312,18 +281,12 @@ export default async function ProfileView({ webId }: { webId: string }) {
       <Section title="Published sites">
         {sitesContainer === null ? (
           <p className="text-sm italic text-[color:var(--ink-faint)]">
-            (no <code className="kbd">public/sites/</code> container, or not
-            readable)
+            (no <code className="kbd">public/sites/</code> container, or not readable)
           </p>
         ) : sitesFromPod.length === 0 ? (
-          <p className="text-sm italic text-[color:var(--ink-faint)]">
-            (container is empty)
-          </p>
+          <p className="text-sm italic text-[color:var(--ink-faint)]">(container is empty)</p>
         ) : (
-          <ul
-            className="space-y-1 text-sm"
-            style={{ fontFamily: "var(--font-mono-src)" }}
-          >
+          <ul className="space-y-1 text-sm" style={{ fontFamily: "var(--font-mono-src)" }}>
             {sitesFromPod.map((name) => (
               <li key={name}>
                 <span className="text-[color:var(--accent)]">·</span>{" "}
@@ -345,10 +308,9 @@ export default async function ProfileView({ webId }: { webId: string }) {
 
       <Section title="Raw profile">
         <p className="mb-2 text-sm text-[color:var(--ink-soft)]">
-          Verbatim Turtle returned by{" "}
-          <code className="kbd">GET {profile.document}</code> with{" "}
-          <code className="kbd">Accept: text/turtle</code>. Nothing on this page
-          is sourced from anywhere else.
+          Verbatim Turtle returned by <code className="kbd">GET {profile.document}</code> with{" "}
+          <code className="kbd">Accept: text/turtle</code>. Nothing on this page is sourced from
+          anywhere else.
         </p>
         <pre className="codeblock">{profile.rawTurtle.trim() || "(empty)"}</pre>
       </Section>
@@ -359,20 +321,14 @@ export default async function ProfileView({ webId }: { webId: string }) {
         className="text-[10px] uppercase tracking-[0.22em] text-[color:var(--ink-faint)]"
         style={{ fontFamily: "var(--font-mono-src)" }}
       >
-        // this profile was fetched server-side, refreshed on every page load.
-        nothing is cached, nothing is stored on the bridge.
+        // this profile was fetched server-side, refreshed on every page load. nothing is cached,
+        nothing is stored on the bridge.
       </p>
     </article>
   );
 }
 
-function DataRow({
-  label,
-  children,
-}: {
-  label: string;
-  children: React.ReactNode;
-}) {
+function DataRow({ label, children }: { label: string; children: React.ReactNode }) {
   return (
     <>
       <dt className="text-[10px] uppercase tracking-[0.22em] text-[color:var(--ink-faint)]">
@@ -384,26 +340,13 @@ function DataRow({
 }
 
 function Missing({ children }: { children: React.ReactNode }) {
-  return (
-    <span className="italic text-[color:var(--ink-faint)]">
-      no {children} in profile
-    </span>
-  );
+  return <span className="italic text-[color:var(--ink-faint)]">no {children} in profile</span>;
 }
 
-function Section({
-  title,
-  children,
-}: {
-  title: React.ReactNode;
-  children: React.ReactNode;
-}) {
+function Section({ title, children }: { title: React.ReactNode; children: React.ReactNode }) {
   return (
     <section>
-      <h2
-        className="display text-2xl"
-        style={{ fontFamily: "var(--font-display)" }}
-      >
+      <h2 className="display text-2xl" style={{ fontFamily: "var(--font-display)" }}>
         {title}
       </h2>
       <div className="mt-4">{children}</div>
@@ -455,10 +398,7 @@ function RepoCrossRef({
           const inBridge = bridgeRepos.includes(name);
           const inPod = podRepos.includes(name);
           return (
-            <tr
-              key={name}
-              className="border-t border-[color:var(--ink-trace)]"
-            >
+            <tr key={name} className="border-t border-[color:var(--ink-trace)]">
               <td className="py-2">{name}</td>
               <td className="py-2 text-center">{inBridge ? "✓" : "—"}</td>
               <td className="py-2 text-center">{inPod ? "✓" : "—"}</td>
@@ -470,13 +410,7 @@ function RepoCrossRef({
   );
 }
 
-function ErrorPanel({
-  webId,
-  message,
-}: {
-  webId: string;
-  message: string;
-}) {
+function ErrorPanel({ webId, message }: { webId: string; message: string }) {
   return (
     <article>
       <header>
@@ -499,8 +433,7 @@ function ErrorPanel({
 
       <div className="card">
         <p className="text-sm text-[color:var(--ink-soft)]">
-          The bridge dereferenced{" "}
-          <code className="kbd break-all">{webId}</code> server-side and the
+          The bridge dereferenced <code className="kbd break-all">{webId}</code> server-side and the
           request failed. Profiles must be publicly readable to render here.
         </p>
         <pre className="codeblock mt-4">{message}</pre>
@@ -510,8 +443,7 @@ function ErrorPanel({
         className="mt-8 text-[10px] uppercase tracking-[0.22em] text-[color:var(--ink-faint)]"
         style={{ fontFamily: "var(--font-mono-src)" }}
       >
-        // the seeded alice and mind ACLs allow public read.
-        external WebIDs need the same.
+        // the seeded alice and mind ACLs allow public read. external WebIDs need the same.
       </p>
     </article>
   );
diff --git a/src/app/profile/ai-providers/manage.tsx b/src/app/profile/ai-providers/manage.tsx
index 223f80f..17489b4 100644
--- a/src/app/profile/ai-providers/manage.tsx
+++ b/src/app/profile/ai-providers/manage.tsx
@@ -1,31 +1,28 @@
 "use client";
 
-import { useMemo, useState } from "react";
-import { useRouter } from "next/navigation";
 import {
-  Button,
-  Input,
-  Select,
-  SelectTrigger,
-  SelectValue,
-  SelectContent,
-  SelectItem,
   AlertDialog,
-  AlertDialogTrigger,
+  AlertDialogAction,
+  AlertDialogCancel,
   AlertDialogContent,
-  AlertDialogHeader,
+  AlertDialogDescription,
   AlertDialogFooter,
+  AlertDialogHeader,
   AlertDialogTitle,
-  AlertDialogDescription,
-  AlertDialogCancel,
-  AlertDialogAction,
+  AlertDialogTrigger,
+  Button,
   buttonVariants,
+  Input,
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
 } from "@mind-studio/ui";
+import { useRouter } from "next/navigation";
+import { useMemo, useState } from "react";
+import type { ProviderName, ProviderSpec } from "@/lib/ai-providers/providers";
 import { authedFetch } from "@/lib/auth/csrf-client";
-import type {
-  ProviderSpec,
-  ProviderName,
-} from "@/lib/ai-providers/providers";
 
 type Configured = {
   provider: ProviderName;
@@ -53,15 +50,12 @@ export function AiProvidersManager({
     <div className="space-y-12">
       <DefaultSelector providers={providers} configured={configured} pref={pref} />
       <section>
-        <h2
-          className="display text-2xl"
-          style={{ fontFamily: "var(--font-display)" }}
-        >
+        <h2 className="display text-2xl" style={{ fontFamily: "var(--font-display)" }}>
           Keys
         </h2>
         <p className="mt-2 max-w-2xl text-sm leading-relaxed text-[color:var(--ink-soft)]">
-          One key per provider. Adding a key replaces any existing key for
-          that provider; only the last 4 characters are shown after save.
+          One key per provider. Adding a key replaces any existing key for that provider; only the
+          last 4 characters are shown after save.
         </p>
         <div className="mt-6 space-y-4">
           {providers.map((p) => (
@@ -91,9 +85,7 @@ function DefaultSelector({
   pref: Pref;
 }) {
   const router = useRouter();
-  const [provider, setProvider] = useState<ProviderName | "">(
-    pref.provider ?? "",
-  );
+  const [provider, setProvider] = useState<ProviderName | "">(pref.provider ?? "");
   const [model, setModel] = useState(pref.model ?? "");
   const [custom, setCustom] = useState(false);
   const [busy, setBusy] = useState(false);
@@ -114,9 +106,7 @@ function DefaultSelector({
     setSaved(false);
     try {
       const body =
-        provider === ""
-          ? { provider: null, model: null }
-          : { provider, model: model.trim() };
+        provider === "" ? { provider: null, model: null } : { provider, model: model.trim() };
       const res = await authedFetch("/api/profile/ai/pref", {
         method: "PUT",
         body: JSON.stringify(body),
@@ -136,16 +126,13 @@ function DefaultSelector({
 
   return (
     <section>
-      <h2
-        className="display text-2xl"
-        style={{ fontFamily: "var(--font-display)" }}
-      >
+      <h2 className="display text-2xl" style={{ fontFamily: "var(--font-display)" }}>
         Default model
       </h2>
       <p className="mt-2 max-w-2xl text-sm leading-relaxed text-[color:var(--ink-soft)]">
-        Applies to every repo you own. The coder uses this provider + model
-        for every issue it picks up. Leave blank to fall back to the
-        bridge-default <code className="kbd">MIND_AGENT_MODEL</code>.
+        Applies to every repo you own. The coder uses this provider + model for every issue it picks
+        up. Leave blank to fall back to the bridge-default{" "}
+        <code className="kbd">MIND_AGENT_MODEL</code>.
       </p>
 
       <form onSubmit={submit} className="mt-5 flex max-w-2xl flex-col gap-5 text-sm">
@@ -192,14 +179,13 @@ function DefaultSelector({
 
         {selectedSpec ? (
           <>
-            <Field label="Model" hint={`opencode will be invoked with: -m ${selectedSpec.opencodeModelPrefix}/${model || "<model>"}`}>
+            <Field
+              label="Model"
+              hint={`opencode will be invoked with: -m ${selectedSpec.opencodeModelPrefix}/${model || "<model>"}`}
+            >
               <div className="flex flex-col gap-2">
                 {!custom ? (
-                  <Select
-                    value={model}
-                    onValueChange={(v) => setModel(v)}
-                    disabled={busy}
-                  >
+                  <Select value={model} onValueChange={(v) => setModel(v)} disabled={busy}>
                     <SelectTrigger
                       className="w-full"
                       style={{ fontFamily: "var(--font-mono-src)" }}
@@ -242,8 +228,8 @@ function DefaultSelector({
             </Field>
             {!hasKey ? (
               <p className="text-[11px] text-[color:var(--status-bad)]">
-                No key configured for {selectedSpec.label}. Add one below
-                before saving — saving will be rejected otherwise.
+                No key configured for {selectedSpec.label}. Add one below before saving — saving
+                will be rejected otherwise.
               </p>
             ) : null}
           </>
@@ -268,9 +254,7 @@ function DefaultSelector({
               {saved ? "✓ saved" : "no changes"}
             </span>
           ) : null}
-          {error ? (
-            <span className="text-sm text-[color:var(--status-bad)]">{error}</span>
-          ) : null}
+          {error ? <span className="text-sm text-[color:var(--status-bad)]">{error}</span> : null}
         </div>
       </form>
     </section>
@@ -281,13 +265,7 @@ function DefaultSelector({
 // Per-provider key card
 // -----------------------------------------------------------------------
 
-function ProviderCard({
-  spec,
-  configured,
-}: {
-  spec: ProviderSpec;
-  configured: Configured | null;
-}) {
+function ProviderCard({ spec, configured }: { spec: ProviderSpec; configured: Configured | null }) {
   const router = useRouter();
   const [open, setOpen] = useState(false);
   const [apiKey, setApiKey] = useState("");
@@ -356,11 +334,7 @@ function ProviderCard({
         </div>
         <div className="flex flex-col items-end gap-1">
           {configured ? (
-            <span
-              className="stamp"
-              data-tone="ok"
-              style={{ padding: "0.18rem 0.5rem 0.14rem" }}
-            >
+            <span className="stamp" data-tone="ok" style={{ padding: "0.18rem 0.5rem 0.14rem" }}>
               configured · {configured.hint}
             </span>
           ) : (
@@ -463,14 +437,12 @@ function ProviderCard({
                 <AlertDialogHeader>
                   <AlertDialogTitle>Remove your {spec.label} key?</AlertDialogTitle>
                   <AlertDialogDescription>
-                    Remove your {spec.label} key? The coder will fall back to the
-                    bridge default until you add a new one.
+                    Remove your {spec.label} key? The coder will fall back to the bridge default
+                    until you add a new one.
                   </AlertDialogDescription>
                 </AlertDialogHeader>
                 <AlertDialogFooter>
-                  <AlertDialogCancel data-testid="confirm-cancel">
-                    Cancel
-                  </AlertDialogCancel>
+                  <AlertDialogCancel data-testid="confirm-cancel">Cancel</AlertDialogCancel>
                   <AlertDialogAction
                     data-testid="confirm-accept"
                     className={buttonVariants({ variant: "destructive" })}
@@ -484,9 +456,7 @@ function ProviderCard({
           ) : null}
         </div>
       )}
-      {error ? (
-        <p className="mt-3 text-sm text-[color:var(--status-bad)]">{error}</p>
-      ) : null}
+      {error ? <p className="mt-3 text-sm text-[color:var(--status-bad)]">{error}</p> : null}
     </div>
   );
 }
diff --git a/src/app/profile/ai-providers/page.tsx b/src/app/profile/ai-providers/page.tsx
index 6cdbd8a..ade9c42 100644
--- a/src/app/profile/ai-providers/page.tsx
+++ b/src/app/profile/ai-providers/page.tsx
@@ -1,11 +1,8 @@
 import Link from "next/link";
 import { redirect } from "next/navigation";
-import { readSession } from "@/lib/auth/session";
-import {
-  listConfiguredProviders,
-  getUserAiPref,
-} from "@/lib/ai-providers/store";
 import { PROVIDERS } from "@/lib/ai-providers/providers";
+import { getUserAiPref, listConfiguredProviders } from "@/lib/ai-providers/store";
+import { readSession } from "@/lib/auth/session";
 import { AiProvidersManager } from "./manage";
 
 export const dynamic = "force-dynamic";
@@ -31,19 +28,14 @@ export default async function AiProvidersPage() {
         AI <em>providers</em>
       </h1>
       <p className="mt-3 max-w-2xl leading-relaxed text-[color:var(--ink-soft)]">
-        Bring your own keys. The coder agent uses your selected provider
-        and model whenever it runs on a repo you own. Keys are encrypted
-        at rest with the same AES-256-GCM key that protects your Solid
-        refresh tokens, and they never leave this bridge.
+        Bring your own keys. The coder agent uses your selected provider and model whenever it runs
+        on a repo you own. Keys are encrypted at rest with the same AES-256-GCM key that protects
+        your Solid refresh tokens, and they never leave this bridge.
       </p>
 
       <hr className="hairline my-10" />
 
-      <AiProvidersManager
-        providers={PROVIDERS}
-        configured={configured}
-        pref={pref}
-      />
+      <AiProvidersManager providers={PROVIDERS} configured={configured} pref={pref} />
     </div>
   );
 }
diff --git a/src/app/profile/page.tsx b/src/app/profile/page.tsx
index 95b0832..67de068 100644
--- a/src/app/profile/page.tsx
+++ b/src/app/profile/page.tsx
@@ -1,13 +1,10 @@
 import Link from "next/link";
 import { redirect } from "next/navigation";
-import { readSession } from "@/lib/auth/session";
-import { listActivityForWebId, type ActivityItem } from "@/lib/registry/activity";
-import {
-  listConfiguredProviders,
-  getUserAiPref,
-} from "@/lib/ai-providers/store";
-import { getProvider } from "@/lib/ai-providers/providers";
 import { RelativeTime } from "@/components/relative-time";
+import { getProvider } from "@/lib/ai-providers/providers";
+import { getUserAiPref, listConfiguredProviders } from "@/lib/ai-providers/store";
+import { readSession } from "@/lib/auth/session";
+import { type ActivityItem, listActivityForWebId } from "@/lib/registry/activity";
 import ProfileView from "../people/profile-view";
 import { ProfileSettings } from "./profile-settings";
 
@@ -57,15 +54,12 @@ export default async function ProfilePage() {
       <hr className="hairline my-10" />
 
       <section>
-        <h2
-          className="display text-2xl"
-          style={{ fontFamily: "var(--font-display)" }}
-        >
+        <h2 className="display text-2xl" style={{ fontFamily: "var(--font-display)" }}>
           Recent activity
         </h2>
         <p className="mt-2 text-sm text-[color:var(--ink-soft)]">
-          Issues you&apos;ve filed, pulls you&apos;ve opened, agent runs on
-          your repos. Latest first.
+          Issues you&apos;ve filed, pulls you&apos;ve opened, agent runs on your repos. Latest
+          first.
         </p>
         <div className="mt-5">
           {activity.length === 0 ? (
@@ -73,8 +67,7 @@ export default async function ProfilePage() {
               className="rounded border border-dashed border-[color:var(--ink-trace)] px-4 py-6 text-center text-sm italic text-[color:var(--ink-faint)]"
               style={{ fontFamily: "var(--font-mono-src)" }}
             >
-              No activity yet. File an issue or push a repo to see it land
-              here.
+              No activity yet. File an issue or push a repo to see it land here.
             </p>
           ) : (
             <ol className="space-y-1.5">
@@ -100,10 +93,7 @@ export default async function ProfilePage() {
                     />
                   </div>
                   <p className="mt-1 text-sm leading-snug text-[color:var(--ink)]">
-                    <Link
-                      href={a.href}
-                      className="hover:text-[color:var(--accent)]"
-                    >
+                    <Link href={a.href} className="hover:text-[color:var(--accent)]">
                       {a.title}
                     </Link>
                   </p>
@@ -126,10 +116,7 @@ export default async function ProfilePage() {
 
       <section>
         <div className="flex flex-wrap items-baseline justify-between gap-3">
-          <h2
-            className="display text-2xl"
-            style={{ fontFamily: "var(--font-display)" }}
-          >
+          <h2 className="display text-2xl" style={{ fontFamily: "var(--font-display)" }}>
             AI providers
           </h2>
           <Link
@@ -141,9 +128,8 @@ export default async function ProfilePage() {
           </Link>
         </div>
         <p className="mt-2 max-w-2xl text-sm leading-relaxed text-[color:var(--ink-soft)]">
-          The coder agent uses these on issues you file or comment on in
-          your own repos. Keys are encrypted at rest; only the last 4
-          characters are visible after save.
+          The coder agent uses these on issues you file or comment on in your own repos. Keys are
+          encrypted at rest; only the last 4 characters are visible after save.
         </p>
         <div className="mt-4">
           {aiPrefProvider && aiPref.model ? (
@@ -152,9 +138,7 @@ export default async function ProfilePage() {
               style={{ fontFamily: "var(--font-mono-src)" }}
             >
               <span className="text-[color:var(--ink-faint)]">default · </span>
-              <span className="text-[color:var(--accent)]">
-                {aiPrefProvider.label}
-              </span>
+              <span className="text-[color:var(--accent)]">{aiPrefProvider.label}</span>
               <span className="mx-2 text-[color:var(--ink-faint)]">/</span>
               <span>{aiPref.model}</span>
             </p>
@@ -182,10 +166,7 @@ export default async function ProfilePage() {
       <hr className="hairline my-10" />
 
       <section>
-        <h2
-          className="display text-2xl"
-          style={{ fontFamily: "var(--font-display)" }}
-        >
+        <h2 className="display text-2xl" style={{ fontFamily: "var(--font-display)" }}>
           Settings
         </h2>
         <div className="mt-5">
diff --git a/src/app/profile/profile-settings.tsx b/src/app/profile/profile-settings.tsx
index 9c1019a..592eca9 100644
--- a/src/app/profile/profile-settings.tsx
+++ b/src/app/profile/profile-settings.tsx
@@ -1,8 +1,8 @@
 "use client";
 
-import { useEffect, useState } from "react";
-import { useRouter } from "next/navigation";
 import { Button, useMindTheme } from "@mind-studio/ui";
+import { useRouter } from "next/navigation";
+import { useEffect, useState } from "react";
 import { useBrand } from "@/components/theme-shell";
 import { authedFetch } from "@/lib/auth/csrf-client";
 
@@ -116,8 +116,8 @@ export function ProfileSettings() {
         </p>
         <h3 className="mt-1 text-base text-[color:var(--ink)]">Sign out</h3>
         <p className="mt-1 text-sm text-[color:var(--ink-soft)]">
-          Drops the bridge&apos;s session cookie. Your pod stays connected
-          for the OIDC client (revoke that from{" "}
+          Drops the bridge&apos;s session cookie. Your pod stays connected for the OIDC client
+          (revoke that from{" "}
           <a className="link" href="/identities">
             connected pods
           </a>
diff --git a/src/app/repos/[owner]/[repo]/blob/[...path]/page.tsx b/src/app/repos/[owner]/[repo]/blob/[...path]/page.tsx
index f749374..b224c4f 100644
--- a/src/app/repos/[owner]/[repo]/blob/[...path]/page.tsx
+++ b/src/app/repos/[owner]/[repo]/blob/[...path]/page.tsx
@@ -1,10 +1,10 @@
 import Link from "next/link";
 import { notFound } from "next/navigation";
-import { getRepo } from "@/lib/registry/repos";
-import { repoPath } from "@/lib/git/backend";
-import { listBranches, readBlob } from "@/lib/git/objects";
 import { Breadcrumbs } from "@/app/repos/[owner]/[repo]/tree/[[...path]]/page";
 import { BranchPicker } from "@/components/branch-picker";
+import { repoPath } from "@/lib/git/backend";
+import { listBranches, readBlob } from "@/lib/git/objects";
+import { getRepo } from "@/lib/registry/repos";
 import { RepoTabs } from "../../repo-tabs";
 
 export const dynamic = "force-dynamic";
@@ -27,8 +27,7 @@ export default async function BlobPage({ params, searchParams }: PageProps) {
   // Accept either a known branch name or a hex commit SHA (7-40 chars);
   // readBlob/git itself validates the final ref via cat-file.
   const ref =
-    sp.ref &&
-    (branches.includes(sp.ref) || /^[0-9a-f]{7,40}$/i.test(sp.ref))
+    sp.ref && (branches.includes(sp.ref) || /^[0-9a-f]{7,40}$/i.test(sp.ref))
       ? sp.ref
       : repo.defaultBranch;
   const refQuery = ref === repo.defaultBranch ? null : ref;
@@ -45,10 +44,7 @@ export default async function BlobPage({ params, searchParams }: PageProps) {
         </Link>
       </p>
 
-      <h1
-        className="display mt-3 text-2xl"
-        style={{ fontFamily: "var(--font-display)" }}
-      >
+      <h1 className="display mt-3 text-2xl" style={{ fontFamily: "var(--font-display)" }}>
         Source
       </h1>
       <div className="mt-1 flex flex-wrap items-center justify-between gap-3">
@@ -62,11 +58,7 @@ export default async function BlobPage({ params, searchParams }: PageProps) {
           {branches.length <= 1 ? ` · ${ref}` : ""}
         </p>
         {branches.length > 1 ? (
-          <BranchPicker
-            branches={branches}
-            current={ref}
-            defaultBranch={repo.defaultBranch}
-          />
+          <BranchPicker branches={branches} current={ref} defaultBranch={repo.defaultBranch} />
         ) : null}
       </div>
 
diff --git a/src/app/repos/[owner]/[repo]/issues/[number]/agent-run-card.tsx b/src/app/repos/[owner]/[repo]/issues/[number]/agent-run-card.tsx
index efe1045..1a18380 100644
--- a/src/app/repos/[owner]/[repo]/issues/[number]/agent-run-card.tsx
+++ b/src/app/repos/[owner]/[repo]/issues/[number]/agent-run-card.tsx
@@ -29,10 +29,9 @@ export function AgentRunCard({ run: initial }: { run: AgentRun }) {
 
     async function tick() {
       try {
-        const res = await fetch(
-          `/api/agent-runs/${run.id}/log?since=${sinceRef.current}`,
-          { cache: "no-store" },
-        );
+        const res = await fetch(`/api/agent-runs/${run.id}/log?since=${sinceRef.current}`, {
+          cache: "no-store",
+        });
         if (!res.ok) return;
         const body = (await res.json()) as {
           content: string;
@@ -75,12 +74,7 @@ export function AgentRunCard({ run: initial }: { run: AgentRun }) {
     }
   }, [log]);
 
-  const tone =
-    run.status === "ok"
-      ? "ok"
-      : run.status === "running"
-        ? undefined
-        : "bad";
+  const tone = run.status === "ok" ? "ok" : run.status === "running" ? undefined : "bad";
 
   return (
     <div className="overflow-hidden rounded border border-[color:var(--ink-trace)]">
@@ -105,12 +99,7 @@ export function AgentRunCard({ run: initial }: { run: AgentRun }) {
       </div>
       <div className="bg-[color:var(--paper)] px-5 py-4">
         {run.status === "running" ? (
-          <LiveLog
-            log={log}
-            logAvailable={logAvailable}
-            logSize={logSize}
-            refEl={logRef}
-          />
+          <LiveLog log={log} logAvailable={logAvailable} logSize={logSize} refEl={logRef} />
         ) : run.errorMessage ? (
           <p className="text-sm text-[color:var(--status-bad)]">
             <strong>error:</strong> {run.errorMessage}
@@ -180,7 +169,12 @@ function LiveLog({
               boxShadow: "0 0 8px color-mix(in srgb, var(--accent) 80%, transparent)",
             }}
           />
-          <span style={{ color: "var(--accent)", textShadow: "0 0 6px color-mix(in srgb, var(--accent) 55%, transparent)" }}>
+          <span
+            style={{
+              color: "var(--accent)",
+              textShadow: "0 0 6px color-mix(in srgb, var(--accent) 55%, transparent)",
+            }}
+          >
             coder
           </span>
         </span>
@@ -190,7 +184,8 @@ function LiveLog({
               className="mc-term-live-dot inline-block h-1.5 w-1.5 rounded-full"
               style={{
                 background: "var(--accent)",
-                boxShadow: "0 0 8px var(--accent), 0 0 14px color-mix(in srgb, var(--accent) 55%, transparent)",
+                boxShadow:
+                  "0 0 8px var(--accent), 0 0 14px color-mix(in srgb, var(--accent) 55%, transparent)",
               }}
             />
             <span style={{ color: "var(--accent)" }}>live</span>
@@ -198,9 +193,7 @@ function LiveLog({
           <span style={{ color: "rgba(255, 255, 255, 0.18)" }}>·</span>
           <span title={`${lineCount} lines`}>{lineCount.toLocaleString()} ln</span>
           <span style={{ color: "rgba(255, 255, 255, 0.18)" }}>·</span>
-          <span title={`${logSize.toLocaleString()} bytes`}>
-            {formatBytes(logSize)}
-          </span>
+          <span title={`${logSize.toLocaleString()} bytes`}>{formatBytes(logSize)}</span>
         </span>
       </div>
       <pre
@@ -229,8 +222,7 @@ function LiveLog({
         aria-hidden
         className="mc-term-progress absolute bottom-0 left-0 h-[1px]"
         style={{
-          background:
-            "linear-gradient(90deg, transparent, var(--accent), transparent)",
+          background: "linear-gradient(90deg, transparent, var(--accent), transparent)",
           boxShadow: "0 0 6px var(--accent)",
         }}
       />
@@ -340,9 +332,7 @@ function CompletedSummary({ summary }: { summary: string }) {
   return (
     <div className="space-y-3 text-sm">
       {parsed.headline ? (
-        <p className="text-[color:var(--ink)] leading-relaxed">
-          {parsed.headline}
-        </p>
+        <p className="text-[color:var(--ink)] leading-relaxed">{parsed.headline}</p>
       ) : null}
 
       {parsed.files.length > 0 ? (
@@ -372,7 +362,9 @@ function CompletedSummary({ summary }: { summary: string }) {
             style={{ fontFamily: "var(--font-mono-src)" }}
           >
             <span className="flex items-center gap-2">
-              <span aria-hidden className="inline-block transition-transform group-open:rotate-90">›</span>
+              <span aria-hidden className="inline-block transition-transform group-open:rotate-90">
+                ›
+              </span>
               opencode output
             </span>
             <span className="text-[color:var(--ink-faint)]">
@@ -383,8 +375,7 @@ function CompletedSummary({ summary }: { summary: string }) {
             className="mc-terminal relative border-t border-[color:var(--ink-trace)]"
             style={{
               background: "#06080a",
-              boxShadow:
-                "0 0 18px color-mix(in srgb, var(--accent) 10%, transparent) inset",
+              boxShadow: "0 0 18px color-mix(in srgb, var(--accent) 10%, transparent) inset",
             }}
           >
             <pre
diff --git a/src/app/repos/[owner]/[repo]/issues/[number]/comment-form.tsx b/src/app/repos/[owner]/[repo]/issues/[number]/comment-form.tsx
index cf520a4..d8f47a1 100644
--- a/src/app/repos/[owner]/[repo]/issues/[number]/comment-form.tsx
+++ b/src/app/repos/[owner]/[repo]/issues/[number]/comment-form.tsx
@@ -1,9 +1,9 @@
 "use client";
+import { Button, Textarea } from "@mind-studio/ui";
 import { useRouter } from "next/navigation";
 import { useEffect, useRef, useState } from "react";
-import { authedFetch } from "@/lib/auth/csrf-client";
 import { SignInWall } from "@/components/sign-in-wall";
-import { Button, Textarea } from "@mind-studio/ui";
+import { authedFetch } from "@/lib/auth/csrf-client";
 
 /**
  * Issue comment composer. Designed to feel like a chat composer rather
@@ -45,13 +45,10 @@ export function CommentForm({
     setUnauthed(false);
     setBusy(true);
     try {
-      const res = await authedFetch(
-        `/api/repos/${owner}/${repo}/issues/${number}/comments`,
-        {
-          method: "POST",
-          body: JSON.stringify({ body }),
-        },
-      );
+      const res = await authedFetch(`/api/repos/${owner}/${repo}/issues/${number}/comments`, {
+        method: "POST",
+        body: JSON.stringify({ body }),
+      });
       if (!res.ok) {
         // 401 = session missing/expired. Promote it from a red string of
         // text to the proper SignInWall card so the user has a one-click
@@ -88,8 +85,7 @@ export function CommentForm({
   // Detect Mac vs other for the keyboard hint (best-effort, hydration-safe
   // because we render the same string on the server initially).
   const isMac =
-    typeof navigator !== "undefined" &&
-    /Mac|iPod|iPhone|iPad/i.test(navigator.platform);
+    typeof navigator !== "undefined" && /Mac|iPod|iPhone|iPad/i.test(navigator.platform);
   const sendShortcut = isMac ? "⌘ Enter" : "Ctrl+Enter";
 
   return (
@@ -149,12 +145,7 @@ export function CommentForm({
         </p>
         <div className="flex items-center gap-2">
           {hasDraft && !busy ? (
-            <Button
-              type="button"
-              variant="ghost"
-              size="sm"
-              onClick={() => setBody("")}
-            >
+            <Button type="button" variant="ghost" size="sm" onClick={() => setBody("")}>
               Clear
             </Button>
           ) : null}
diff --git a/src/app/repos/[owner]/[repo]/issues/[number]/issue-actions.tsx b/src/app/repos/[owner]/[repo]/issues/[number]/issue-actions.tsx
index 60b7717..f7ce121 100644
--- a/src/app/repos/[owner]/[repo]/issues/[number]/issue-actions.tsx
+++ b/src/app/repos/[owner]/[repo]/issues/[number]/issue-actions.tsx
@@ -1,9 +1,9 @@
 "use client";
+import { Button } from "@mind-studio/ui";
 import { useRouter } from "next/navigation";
 import { useState } from "react";
-import { authedFetch } from "@/lib/auth/csrf-client";
 import { SignInWall } from "@/components/sign-in-wall";
-import { Button } from "@mind-studio/ui";
+import { authedFetch } from "@/lib/auth/csrf-client";
 
 /**
  * Issue-page actions:
@@ -85,13 +85,7 @@ export function IssueActions({
   return (
     <div className="space-y-3">
       <div className="flex flex-wrap items-center gap-2">
-        <Button
-          type="button"
-          variant="outline"
-          size="sm"
-          onClick={toggle}
-          disabled={busy !== null}
-        >
+        <Button type="button" variant="outline" size="sm" onClick={toggle} disabled={busy !== null}>
           {busy === "toggle" ? "…" : status === "open" ? "Close issue" : "Reopen issue"}
         </Button>
         {status === "open" ? (
@@ -107,11 +101,7 @@ export function IssueActions({
                 : "Re-fire the coder on this issue (auto-fires on create + comment)"
             }
           >
-            {busy === "run"
-              ? "Dispatching…"
-              : hasOpenRun
-                ? "Coder running…"
-                : "Re-run coder"}
+            {busy === "run" ? "Dispatching…" : hasOpenRun ? "Coder running…" : "Re-run coder"}
           </Button>
         ) : null}
       </div>
diff --git a/src/app/repos/[owner]/[repo]/issues/[number]/page.tsx b/src/app/repos/[owner]/[repo]/issues/[number]/page.tsx
index 3249329..c88cb3d 100644
--- a/src/app/repos/[owner]/[repo]/issues/[number]/page.tsx
+++ b/src/app/repos/[owner]/[repo]/issues/[number]/page.tsx
@@ -1,13 +1,13 @@
 import Link from "next/link";
 import { notFound } from "next/navigation";
-import { getRepo } from "@/lib/registry/repos";
-import { repoPath } from "@/lib/git/backend";
-import { readGitTracker } from "@/lib/tracker/read";
-import type { Tracker, TrackerIssue } from "@/lib/tracker/read";
+import { Avatar, deriveLabel } from "@/components/avatar";
 import { RelativeTime } from "@/components/relative-time";
+import { repoPath } from "@/lib/git/backend";
 import { renderMarkdown } from "@/lib/markdown";
+import { getRepo } from "@/lib/registry/repos";
+import type { Tracker, TrackerIssue } from "@/lib/tracker/read";
+import { readGitTracker } from "@/lib/tracker/read";
 import { RepoTabs } from "../../repo-tabs";
-import { Avatar, deriveLabel } from "@/components/avatar";
 
 export const dynamic = "force-dynamic";
 
@@ -28,18 +28,13 @@ export default async function IssueDetailPage({ params }: PageProps) {
   const issue = tracker.issues.find((i) => i.number === number);
   if (!issue) notFound();
 
-  const bodyHtml = issue.description?.trim()
-    ? renderMarkdown(issue.description)
-    : null;
-  const epic = issue.epicSlug
-    ? tracker.epics.find((e) => e.slug === issue.epicSlug)
-    : undefined;
+  const bodyHtml = issue.description?.trim() ? renderMarkdown(issue.description) : null;
+  const epic = issue.epicSlug ? tracker.epics.find((e) => e.slug === issue.epicSlug) : undefined;
   const createdTs = issue.created ? Date.parse(issue.created) : NaN;
   const modifiedTs = issue.modified ? Date.parse(issue.modified) : NaN;
   // The fold emits day-resolution xsd:date values; a relative time off a
   // bare date reads as "21h ago" for an issue minted a minute ago.
-  const dateOnly = (v: string | undefined) =>
-    v && /^\d{4}-\d{2}-\d{2}$/.test(v) ? v : null;
+  const dateOnly = (v: string | undefined) => (v && /^\d{4}-\d{2}-\d{2}$/.test(v) ? v : null);
   const createdDate = dateOnly(issue.created);
   const modifiedDate = dateOnly(issue.modified);
 
@@ -55,8 +50,7 @@ export default async function IssueDetailPage({ params }: PageProps) {
           className="display break-words text-2xl sm:text-3xl"
           style={{ fontFamily: "var(--font-display)" }}
         >
-          <span className="text-[color:var(--ink-faint)]">#{issue.number}</span>{" "}
-          {issue.title}
+          <span className="text-[color:var(--ink-faint)]">#{issue.number}</span> {issue.title}
         </h1>
         <span className="stamp shrink-0" data-tone={issue.open ? undefined : "ok"}>
           {issue.stateLabel ?? (issue.open ? "open" : "closed")}
@@ -121,14 +115,9 @@ export default async function IssueDetailPage({ params }: PageProps) {
         </div>
         <div className="bg-[color:var(--paper)] px-4 py-4 sm:px-5">
           {bodyHtml ? (
-            <article
-              className="markdown-body"
-              dangerouslySetInnerHTML={{ __html: bodyHtml }}
-            />
+            <article className="markdown-body" dangerouslySetInnerHTML={{ __html: bodyHtml }} />
           ) : (
-            <p className="text-sm italic text-[color:var(--ink-faint)]">
-              (no description)
-            </p>
+            <p className="text-sm italic text-[color:var(--ink-faint)]">(no description)</p>
           )}
         </div>
       </div>
@@ -137,9 +126,8 @@ export default async function IssueDetailPage({ params }: PageProps) {
         className="mt-6 text-[11px] uppercase tracking-[0.18em] text-[color:var(--ink-faint)]"
         style={{ fontFamily: "var(--font-mono-src)" }}
       >
-        Read-only · folded from this repo&apos;s{" "}
-        <code className="kbd">.mind</code> tracker. Edit by authoring events under{" "}
-        <code className="kbd">.mind/issues/</code> and pushing.
+        Read-only · folded from this repo&apos;s <code className="kbd">.mind</code> tracker. Edit by
+        authoring events under <code className="kbd">.mind/issues/</code> and pushing.
       </p>
     </div>
   );
diff --git a/src/app/repos/[owner]/[repo]/issues/draft/[draftId]/collaborative-draft.tsx b/src/app/repos/[owner]/[repo]/issues/draft/[draftId]/collaborative-draft.tsx
index 7ec8c8f..565de9f 100644
--- a/src/app/repos/[owner]/[repo]/issues/draft/[draftId]/collaborative-draft.tsx
+++ b/src/app/repos/[owner]/[repo]/issues/draft/[draftId]/collaborative-draft.tsx
@@ -1,39 +1,39 @@
 "use client";
 
-import { useCallback, useEffect, useMemo, useRef, useState } from "react";
-import { useRouter } from "next/navigation";
-import Link from "next/link";
-import { useEditor, EditorContent, type Editor } from "@tiptap/react";
-import StarterKit from "@tiptap/starter-kit";
-import Collaboration from "@tiptap/extension-collaboration";
-import CollaborationCursor from "@tiptap/extension-collaboration-cursor";
-import TaskList from "@tiptap/extension-task-list";
-import TaskItem from "@tiptap/extension-task-item";
-import Placeholder from "@tiptap/extension-placeholder";
-import { Markdown } from "tiptap-markdown";
 import {
   Button,
   Input,
-  Textarea,
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
   Tabs,
   TabsList,
   TabsTrigger,
+  Textarea,
   ToggleGroup,
   ToggleGroupItem,
-  Select,
-  SelectTrigger,
-  SelectValue,
-  SelectContent,
-  SelectItem,
 } from "@mind-studio/ui";
+import Collaboration from "@tiptap/extension-collaboration";
+import CollaborationCursor from "@tiptap/extension-collaboration-cursor";
+import Placeholder from "@tiptap/extension-placeholder";
+import TaskItem from "@tiptap/extension-task-item";
+import TaskList from "@tiptap/extension-task-list";
+import { type Editor, EditorContent, useEditor } from "@tiptap/react";
+import StarterKit from "@tiptap/starter-kit";
+import Link from "next/link";
+import { useRouter } from "next/navigation";
+import { useCallback, useEffect, useMemo, useRef, useState } from "react";
+import { Markdown } from "tiptap-markdown";
 import { authedFetch } from "@/lib/auth/csrf-client";
+import { colorForClient, draftRoomName } from "@/lib/collab/config";
 import {
   createDraftDoc,
-  readDraftMeta,
   type DraftDoc,
   type DraftMeta,
+  readDraftMeta,
 } from "@/lib/collab/draft-doc";
-import { colorForClient, draftRoomName } from "@/lib/collab/config";
 import { suggestKind } from "@/lib/collab/suggest-kind";
 
 export type CategoryOption = { id: string; label: string };
@@ -60,10 +60,7 @@ const PRIORITIES = ["urgent", "high", "normal", "low"];
  */
 export function CollaborativeDraft(props: CollaborativeDraftProps) {
   const { owner, repo, draftId, collab } = props;
-  const roomName = useMemo(
-    () => draftRoomName(owner, repo, draftId),
-    [owner, repo, draftId],
-  );
+  const roomName = useMemo(() => draftRoomName(owner, repo, draftId), [owner, repo, draftId]);
   const [draft, setDraft] = useState<DraftDoc | null>(null);
 
   useEffect(() => {
@@ -231,8 +228,7 @@ function DraftEditor({
     setSubmitting(true);
     const current = readDraftMeta(draft.meta);
     const title = current.title.trim();
-    const body =
-      view === "markdown" ? mdDraft : editor.storage.markdown.getMarkdown();
+    const body = view === "markdown" ? mdDraft : editor.storage.markdown.getMarkdown();
     try {
       let dest: string;
       if (current.kind === "epic") {
@@ -276,8 +272,7 @@ function DraftEditor({
     }
   }
 
-  const labelClass =
-    "text-[10px] uppercase tracking-[0.22em] text-[color:var(--ink-faint)]";
+  const labelClass = "text-[10px] uppercase tracking-[0.22em] text-[color:var(--ink-faint)]";
   const mono = { fontFamily: "var(--font-mono-src)" };
   const isEpic = meta.kind === "epic";
   const canCreate = isOwner && meta.title.trim().length > 0 && !submitting;
@@ -450,8 +445,8 @@ function DraftEditor({
         </div>
       ) : (
         <p className="text-xs text-[color:var(--ink-soft)]">
-          An epic is a goal that groups issues — it just needs a title and a goal
-          narrative below. Add issues to it afterwards.
+          An epic is a goal that groups issues — it just needs a title and a goal narrative below.
+          Add issues to it afterwards.
         </p>
       )}
 
@@ -511,11 +506,7 @@ function DraftEditor({
 
       <div className="flex flex-wrap items-center gap-4 pt-1">
         <Button type="button" onClick={onCreate} disabled={!canCreate}>
-          {submitting
-            ? "Creating…"
-            : isEpic
-              ? "Create epic"
-              : "Create issue"}
+          {submitting ? "Creating…" : isEpic ? "Create epic" : "Create issue"}
         </Button>
         {!isOwner ? (
           <p className={labelClass} style={mono}>
@@ -523,13 +514,11 @@ function DraftEditor({
           </p>
         ) : (
           <p className={labelClass} style={mono}>
-            commits a <code>.mind</code> {isEpic ? "epic" : "issue"} · folded &amp; pushed to the repo
+            commits a <code>.mind</code> {isEpic ? "epic" : "issue"} · folded &amp; pushed to the
+            repo
           </p>
         )}
-        <Link
-          href={`/repos/${owner}/${repo}/issues`}
-          className="link text-sm"
-        >
+        <Link href={`/repos/${owner}/${repo}/issues`} className="link text-sm">
           cancel
         </Link>
       </div>
@@ -565,9 +554,7 @@ function EditorToolbar({ editor }: { editor: Editor | null }) {
       style={{
         fontFamily: "var(--font-mono-src)",
         color: active ? "var(--accent-deep)" : "var(--ink-soft)",
-        background: active
-          ? "color-mix(in srgb, var(--accent) 16%, transparent)"
-          : "transparent",
+        background: active ? "color-mix(in srgb, var(--accent) 16%, transparent)" : "transparent",
         ...style,
       }}
     >
@@ -575,9 +562,7 @@ function EditorToolbar({ editor }: { editor: Editor | null }) {
     </button>
   );
 
-  const Sep = () => (
-    <span aria-hidden className="mx-1 h-4 w-px bg-[color:var(--ink-trace)]" />
-  );
+  const Sep = () => <span aria-hidden className="mx-1 h-4 w-px bg-[color:var(--ink-trace)]" />;
 
   return (
     <div className="flex flex-wrap items-center gap-0.5 border-b border-[color:var(--ink-trace)] px-2 py-1.5">
diff --git a/src/app/repos/[owner]/[repo]/issues/draft/[draftId]/draft-loader.tsx b/src/app/repos/[owner]/[repo]/issues/draft/[draftId]/draft-loader.tsx
index b4dece9..ac1ff98 100644
--- a/src/app/repos/[owner]/[repo]/issues/draft/[draftId]/draft-loader.tsx
+++ b/src/app/repos/[owner]/[repo]/issues/draft/[draftId]/draft-loader.tsx
@@ -12,9 +12,7 @@ const CollaborativeDraft = dynamic(
   () => import("./collaborative-draft").then((m) => m.CollaborativeDraft),
   {
     ssr: false,
-    loading: () => (
-      <p className="text-sm text-[color:var(--ink-faint)]">Loading the composer…</p>
-    ),
+    loading: () => <p className="text-sm text-[color:var(--ink-faint)]">Loading the composer…</p>,
   },
 );
 
diff --git a/src/app/repos/[owner]/[repo]/issues/draft/[draftId]/page.tsx b/src/app/repos/[owner]/[repo]/issues/draft/[draftId]/page.tsx
index 6fc4a46..1c4dc34 100644
--- a/src/app/repos/[owner]/[repo]/issues/draft/[draftId]/page.tsx
+++ b/src/app/repos/[owner]/[repo]/issues/draft/[draftId]/page.tsx
@@ -1,11 +1,11 @@
 import Link from "next/link";
 import { notFound, redirect } from "next/navigation";
-import { getRepo } from "@/lib/registry/repos";
-import { repoPath } from "@/lib/git/backend";
-import { readGitTracker } from "@/lib/tracker/read";
 import { readSession } from "@/lib/auth/session";
-import { getUserByWebId } from "@/lib/registry/users";
 import { nameFromWebId } from "@/lib/collab/config";
+import { repoPath } from "@/lib/git/backend";
+import { getRepo } from "@/lib/registry/repos";
+import { getUserByWebId } from "@/lib/registry/users";
+import { readGitTracker } from "@/lib/tracker/read";
 import { RepoTabs } from "../../../repo-tabs";
 import { DraftLoader } from "./draft-loader";
 
@@ -29,7 +29,9 @@ export default async function NewDraftPage({ params }: PageProps) {
   // owner can commit). Bounce to sign-in, preserving the draft URL.
   const session = await readSession();
   if (!session) {
-    redirect(`/login?next=${encodeURIComponent(`/repos/${owner}/${name}/issues/draft/${draftId}`)}`);
+    redirect(
+      `/login?next=${encodeURIComponent(`/repos/${owner}/${name}/issues/draft/${draftId}`)}`,
+    );
   }
 
   const tracker = await readGitTracker(repoPath(repo.owner, repo.name), owner, name);
@@ -41,8 +43,7 @@ export default async function NewDraftPage({ params }: PageProps) {
   const epics = tracker.epics.map((e) => ({ slug: e.slug, title: e.title }));
 
   const isOwner = session.webId === repo.ownerWebId;
-  const displayName =
-    getUserByWebId(session.webId)?.ownerSlug ?? nameFromWebId(session.webId);
+  const displayName = getUserByWebId(session.webId)?.ownerSlug ?? nameFromWebId(session.webId);
 
   return (
     <div className="mx-auto max-w-3xl px-4 py-10 sm:px-10 sm:py-12">
@@ -51,10 +52,7 @@ export default async function NewDraftPage({ params }: PageProps) {
           ← issues
         </Link>
       </p>
-      <h1
-        className="mt-3 display text-3xl"
-        style={{ fontFamily: "var(--font-display)" }}
-      >
+      <h1 className="mt-3 display text-3xl" style={{ fontFamily: "var(--font-display)" }}>
         New draft
       </h1>
       <p className="mt-1 text-sm text-[color:var(--ink-soft)]">
diff --git a/src/app/repos/[owner]/[repo]/issues/new/new-issue-form.tsx b/src/app/repos/[owner]/[repo]/issues/new/new-issue-form.tsx
index 206d3fb..b43993d 100644
--- a/src/app/repos/[owner]/[repo]/issues/new/new-issue-form.tsx
+++ b/src/app/repos/[owner]/[repo]/issues/new/new-issue-form.tsx
@@ -1,18 +1,18 @@
 "use client";
 
-import { useRouter } from "next/navigation";
-import { useState } from "react";
-import { authedFetch } from "@/lib/auth/csrf-client";
 import {
   Button,
   Input,
-  Textarea,
   Select,
-  SelectTrigger,
-  SelectValue,
   SelectContent,
   SelectItem,
+  SelectTrigger,
+  SelectValue,
+  Textarea,
 } from "@mind-studio/ui";
+import { useRouter } from "next/navigation";
+import { useState } from "react";
+import { authedFetch } from "@/lib/auth/csrf-client";
 
 export type CategoryOption = { id: string; label: string };
 export type EpicOption = { slug: string; title: string };
@@ -67,8 +67,7 @@ export function NewIssueForm({ owner, repo, categories, epics }: Props) {
     }
   }
 
-  const labelClass =
-    "text-[10px] uppercase tracking-[0.22em] text-[color:var(--ink-faint)]";
+  const labelClass = "text-[10px] uppercase tracking-[0.22em] text-[color:var(--ink-faint)]";
   const mono = { fontFamily: "var(--font-mono-src)" };
 
   return (
diff --git a/src/app/repos/[owner]/[repo]/issues/new/page.tsx b/src/app/repos/[owner]/[repo]/issues/new/page.tsx
index 561156a..9fd708d 100644
--- a/src/app/repos/[owner]/[repo]/issues/new/page.tsx
+++ b/src/app/repos/[owner]/[repo]/issues/new/page.tsx
@@ -1,7 +1,7 @@
 import Link from "next/link";
 import { notFound } from "next/navigation";
-import { getRepo } from "@/lib/registry/repos";
 import { repoPath } from "@/lib/git/backend";
+import { getRepo } from "@/lib/registry/repos";
 import { readGitTracker } from "@/lib/tracker/read";
 import { RepoTabs } from "../../repo-tabs";
 import { NewIssueForm } from "./new-issue-form";
@@ -32,22 +32,14 @@ export default async function NewIssuePage({ params }: PageProps) {
           ← issues
         </Link>
       </p>
-      <h1
-        className="mt-3 display text-3xl"
-        style={{ fontFamily: "var(--font-display)" }}
-      >
+      <h1 className="mt-3 display text-3xl" style={{ fontFamily: "var(--font-display)" }}>
         New issue
       </h1>
 
       <RepoTabs owner={owner} name={name} active="issues" />
 
       <div className="mt-6">
-        <NewIssueForm
-          owner={owner}
-          repo={name}
-          categories={categories}
-          epics={epics}
-        />
+        <NewIssueForm owner={owner} repo={name} categories={categories} epics={epics} />
       </div>
     </div>
   );
diff --git a/src/app/repos/[owner]/[repo]/issues/page.tsx b/src/app/repos/[owner]/[repo]/issues/page.tsx
index 39e8c16..f7875e3 100644
--- a/src/app/repos/[owner]/[repo]/issues/page.tsx
+++ b/src/app/repos/[owner]/[repo]/issues/page.tsx
@@ -1,11 +1,11 @@
 import { randomUUID } from "node:crypto";
 import Link from "next/link";
 import { notFound } from "next/navigation";
+import { RelativeTime } from "@/components/relative-time";
 import { getRepo } from "@/lib/registry/repos";
+import type { Tracker, TrackerIssue } from "@/lib/tracker/read";
 import { groupByEpic } from "@/lib/tracker/read";
 import { readRepoTracker } from "@/lib/tracker/source";
-import type { Tracker, TrackerIssue } from "@/lib/tracker/read";
-import { RelativeTime } from "@/components/relative-time";
 import { RepoTabs } from "../repo-tabs";
 
 export const dynamic = "force-dynamic";
@@ -17,10 +17,7 @@ type PageProps = {
   searchParams: Promise<{ status?: string }>;
 };
 
-export default async function IssuesListPage({
-  params,
-  searchParams,
-}: PageProps) {
+export default async function IssuesListPage({ params, searchParams }: PageProps) {
   const { owner, repo: name } = await params;
   const { status: statusParam } = await searchParams;
   const repo = getRepo(owner, name);
@@ -39,16 +36,11 @@ export default async function IssuesListPage({
         </Link>
       </p>
       <div className="mt-3 flex flex-wrap items-baseline justify-between gap-4">
-        <h1
-          className="display text-3xl"
-          style={{ fontFamily: "var(--font-display)" }}
-        >
+        <h1 className="display text-3xl" style={{ fontFamily: "var(--font-display)" }}>
           Issues
         </h1>
         <div className="flex flex-wrap items-center gap-2">
-          {repo.proposalsEnabled ? (
-            <ProposeLink owner={owner} repo={name} />
-          ) : null}
+          {repo.proposalsEnabled ? <ProposeLink owner={owner} repo={name} /> : null}
           {tracker !== null ? <NewIssueLink owner={owner} repo={name} /> : null}
         </div>
       </div>
@@ -124,8 +116,7 @@ function TrackerBoard({
       ) : (
         <div className="mt-6 space-y-6">
           {groups.map((group) => {
-            const key =
-              group.kind === "epic" ? `epic:${group.epic.slug}` : "general";
+            const key = group.kind === "epic" ? `epic:${group.epic.slug}` : "general";
             return (
               <details key={key} className="group" open>
                 <summary className="flex cursor-pointer list-none items-center gap-2 [&::-webkit-details-marker]:hidden">
@@ -155,11 +146,7 @@ function TrackerBoard({
                     {group.issues.map((issue, i) => (
                       <li
                         key={issue.id}
-                        className={
-                          i > 0
-                            ? "border-t border-[color:var(--ink-trace)]"
-                            : undefined
-                        }
+                        className={i > 0 ? "border-t border-[color:var(--ink-trace)]" : undefined}
                       >
                         <IssueRow owner={owner} repo={repo} issue={issue} />
                       </li>
@@ -188,20 +175,14 @@ function EpicHeader({
 }) {
   return (
     <div className="flex flex-wrap items-baseline gap-x-3 gap-y-1">
-      <h2
-        className="display text-xl"
-        style={{ fontFamily: "var(--font-display)" }}
-      >
+      <h2 className="display text-xl" style={{ fontFamily: "var(--font-display)" }}>
         {number !== undefined ? (
           <span className="text-[color:var(--ink-faint)]">Epic {number} · </span>
         ) : null}
         {title}
       </h2>
       {epicStatus ? (
-        <span
-          className="stamp"
-          data-tone={epicStatus === "done" ? "ok" : undefined}
-        >
+        <span className="stamp" data-tone={epicStatus === "done" ? "ok" : undefined}>
           {epicStatus}
         </span>
       ) : null}
@@ -273,32 +254,20 @@ function FilterBar({
   );
 }
 
-function IssueRow({
-  owner,
-  repo,
-  issue,
-}: {
-  owner: string;
-  repo: string;
-  issue: TrackerIssue;
-}) {
+function IssueRow({ owner, repo, issue }: { owner: string; repo: string; issue: TrackerIssue }) {
   const isBlocked = issue.stateId === "Blocked" || issue.blockedBy.length > 0;
   const excerpt = makeExcerpt(issue.description ?? "");
   const modifiedTs = issue.modified ? Date.parse(issue.modified) : NaN;
   // The fold emits day-resolution xsd:date values; rendering those as a
   // relative time reads as "21h ago" for an issue minted a minute ago.
   const modifiedDateOnly =
-    issue.modified && /^\d{4}-\d{2}-\d{2}$/.test(issue.modified)
-      ? issue.modified
-      : null;
+    issue.modified && /^\d{4}-\d{2}-\d{2}$/.test(issue.modified) ? issue.modified : null;
   return (
     <Link
       href={`/repos/${owner}/${repo}/issues/${issue.number}`}
       className="block px-3 py-4 hover:bg-[color:var(--paper-soft)]"
       style={{
-        borderLeft: isBlocked
-          ? "2px solid var(--accent)"
-          : "2px solid transparent",
+        borderLeft: isBlocked ? "2px solid var(--accent)" : "2px solid transparent",
       }}
     >
       <div className="flex items-start gap-4">
@@ -328,9 +297,7 @@ function IssueRow({
                 updated <RelativeTime ts={modifiedTs} />
               </span>
             ) : null}
-            {issue.blocks.length > 0 ? (
-              <span>blocks {issue.blocks.length}</span>
-            ) : null}
+            {issue.blocks.length > 0 ? <span>blocks {issue.blocks.length}</span> : null}
             {issue.blockedBy.length > 0 ? (
               <span style={{ color: "var(--accent-deep)" }}>
                 blocked by {issue.blockedBy.length}
@@ -340,8 +307,7 @@ function IssueRow({
         </div>
         <div className="min-w-0 flex-1">
           <h3 className="text-base font-medium leading-snug text-[color:var(--ink)]">
-            <span className="text-[color:var(--ink-faint)]">#{issue.number}</span>{" "}
-            {issue.title}
+            <span className="text-[color:var(--ink-faint)]">#{issue.number}</span> {issue.title}
           </h3>
           {excerpt ? (
             <p
@@ -420,12 +386,12 @@ function NoTrackerState() {
         No <code className="kbd">.mind</code> tracker in this repo.
       </p>
       <p className="mt-2">
-        This dashboard renders the repo&apos;s <code className="kbd">.mind</code>{" "}
-        tracker straight from the pushed git history. Author issues as markdown
-        folders under <code className="kbd">.mind/issues/</code>, run{" "}
+        This dashboard renders the repo&apos;s <code className="kbd">.mind</code> tracker straight
+        from the pushed git history. Author issues as markdown folders under{" "}
+        <code className="kbd">.mind/issues/</code>, run{" "}
         <code className="kbd">npm run tracker:build</code>, and push{" "}
-        <code className="kbd">.mind/build/&#123;tracker,epics,state&#125;.ttl</code>{" "}
-        — they&apos;ll appear here, grouped by epic.
+        <code className="kbd">.mind/build/&#123;tracker,epics,state&#125;.ttl</code> — they&apos;ll
+        appear here, grouped by epic.
       </p>
     </section>
   );
diff --git a/src/app/repos/[owner]/[repo]/issues/propose/page.tsx b/src/app/repos/[owner]/[repo]/issues/propose/page.tsx
index d551710..55f7f58 100644
--- a/src/app/repos/[owner]/[repo]/issues/propose/page.tsx
+++ b/src/app/repos/[owner]/[repo]/issues/propose/page.tsx
@@ -1,7 +1,7 @@
 import Link from "next/link";
 import { notFound } from "next/navigation";
-import { getRepo } from "@/lib/registry/repos";
 import { readSession } from "@/lib/auth/session";
+import { getRepo } from "@/lib/registry/repos";
 import { ProposeForm } from "./propose-form";
 
 export const dynamic = "force-dynamic";
@@ -22,35 +22,31 @@ export default async function ProposeIssuePage({ params }: PageProps) {
           ← {owner}/{name} · Issues
         </Link>
       </p>
-      <h1
-        className="mt-3 display text-3xl"
-        style={{ fontFamily: "var(--font-display)" }}
-      >
+      <h1 className="mt-3 display text-3xl" style={{ fontFamily: "var(--font-display)" }}>
         Propose an issue
       </h1>
       <p className="mt-2 text-sm text-[color:var(--ink-soft)]">
-        Anyone can suggest work for <code className="kbd">{owner}/{name}</code>.
-        Your proposal goes to the owner&apos;s pod inbox for review — it isn&apos;t
-        added to the tracker until the owner accepts it.
+        Anyone can suggest work for{" "}
+        <code className="kbd">
+          {owner}/{name}
+        </code>
+        . Your proposal goes to the owner&apos;s pod inbox for review — it isn&apos;t added to the
+        tracker until the owner accepts it.
       </p>
 
       {repo.proposalsEnabled ? (
-        <ProposeForm
-          owner={owner}
-          repo={name}
-          proposerWebId={session?.webId ?? null}
-        />
+        <ProposeForm owner={owner} repo={name} proposerWebId={session?.webId ?? null} />
       ) : (
         <section className="card mt-6 text-sm text-[color:var(--ink-soft)]">
-          <p
-            className="display text-xl"
-            style={{ fontFamily: "var(--font-display)" }}
-          >
+          <p className="display text-xl" style={{ fontFamily: "var(--font-display)" }}>
             Proposals are closed.
           </p>
           <p className="mt-2">
-            The owner of <code className="kbd">{owner}/{name}</code> isn&apos;t
-            accepting issue proposals right now.
+            The owner of{" "}
+            <code className="kbd">
+              {owner}/{name}
+            </code>{" "}
+            isn&apos;t accepting issue proposals right now.
           </p>
         </section>
       )}
diff --git a/src/app/repos/[owner]/[repo]/issues/propose/propose-form.tsx b/src/app/repos/[owner]/[repo]/issues/propose/propose-form.tsx
index 9313234..d89031d 100644
--- a/src/app/repos/[owner]/[repo]/issues/propose/propose-form.tsx
+++ b/src/app/repos/[owner]/[repo]/issues/propose/propose-form.tsx
@@ -1,7 +1,7 @@
 "use client";
 
-import { useState } from "react";
 import { Button, Input, Textarea } from "@mind-studio/ui";
+import { useState } from "react";
 
 type Props = {
   owner: string;
@@ -48,23 +48,18 @@ export function ProposeForm({ owner, repo, proposerWebId }: Props) {
     }
   }
 
-  const labelClass =
-    "text-[10px] uppercase tracking-[0.22em] text-[color:var(--ink-faint)]";
+  const labelClass = "text-[10px] uppercase tracking-[0.22em] text-[color:var(--ink-faint)]";
   const mono = { fontFamily: "var(--font-mono-src)" };
 
   if (done) {
     return (
       <section className="card mt-6 text-sm text-[color:var(--ink-soft)]">
-        <p
-          className="display text-xl"
-          style={{ fontFamily: "var(--font-display)" }}
-        >
+        <p className="display text-xl" style={{ fontFamily: "var(--font-display)" }}>
           Proposal submitted.
         </p>
         <p className="mt-2">
-          It landed in <code className="kbd">{owner}</code>&apos;s pod inbox.
-          The owner will review it and, if accepted, it becomes a tracked issue.
-          Thanks for the suggestion.
+          It landed in <code className="kbd">{owner}</code>&apos;s pod inbox. The owner will review
+          it and, if accepted, it becomes a tracked issue. Thanks for the suggestion.
         </p>
       </section>
     );
diff --git a/src/app/repos/[owner]/[repo]/nav-tabs.tsx b/src/app/repos/[owner]/[repo]/nav-tabs.tsx
index 442f61b..11172fc 100644
--- a/src/app/repos/[owner]/[repo]/nav-tabs.tsx
+++ b/src/app/repos/[owner]/[repo]/nav-tabs.tsx
@@ -26,9 +26,7 @@ export function NavTabs({ tabs }: { tabs: Tab[] }) {
           <>
             <span>{tab.label}</span>
             {typeof tab.count === "number" ? (
-              <span
-                className="rounded-sm bg-[color:var(--paper-sunk)] px-1.5 py-0.5 text-[10px] tracking-[0.14em] text-[color:var(--ink-soft)] group-hover:text-[color:var(--ink)]"
-              >
+              <span className="rounded-sm bg-[color:var(--paper-sunk)] px-1.5 py-0.5 text-[10px] tracking-[0.14em] text-[color:var(--ink-soft)] group-hover:text-[color:var(--ink)]">
                 {tab.count}
               </span>
             ) : null}
@@ -41,13 +39,7 @@ export function NavTabs({ tabs }: { tabs: Tab[] }) {
         );
         if (tab.external) {
           return (
-            <a
-              key={tab.key}
-              href={tab.href}
-              target="_blank"
-              rel="noreferrer"
-              className={className}
-            >
+            <a key={tab.key} href={tab.href} target="_blank" rel="noreferrer" className={className}>
               {content}
             </a>
           );
diff --git a/src/app/repos/[owner]/[repo]/packages/page.tsx b/src/app/repos/[owner]/[repo]/packages/page.tsx
index effed9a..924481a 100644
--- a/src/app/repos/[owner]/[repo]/packages/page.tsx
+++ b/src/app/repos/[owner]/[repo]/packages/page.tsx
@@ -1,16 +1,16 @@
 import Link from "next/link";
 import { notFound } from "next/navigation";
-import { getRepo } from "@/lib/registry/repos";
+import { CopyButton } from "@/components/copy-button";
+import { RelativeTime } from "@/components/relative-time";
+import { readSession } from "@/lib/auth/session";
+import { formatBytes } from "@/lib/format";
 import {
-  listPackages,
   isDigestRef,
+  listPackages,
   type PackageRecord,
   type PackageType,
 } from "@/lib/packages/store";
-import { readSession } from "@/lib/auth/session";
-import { RelativeTime } from "@/components/relative-time";
-import { CopyButton } from "@/components/copy-button";
-import { formatBytes } from "@/lib/format";
+import { getRepo } from "@/lib/registry/repos";
 import { RepoTabs } from "../repo-tabs";
 
 export const dynamic = "force-dynamic";
@@ -60,10 +60,7 @@ export default async function PackagesPage({ params }: PageProps) {
           ← {owner}/{name}
         </Link>
       </p>
-      <h1
-        className="display mt-3 text-3xl"
-        style={{ fontFamily: "var(--font-display)" }}
-      >
+      <h1 className="display mt-3 text-3xl" style={{ fontFamily: "var(--font-display)" }}>
         <em>Packages</em>
       </h1>
       {!locked && groups.length > 0 ? (
@@ -71,8 +68,7 @@ export default async function PackagesPage({ params }: PageProps) {
           className="mt-2 text-[11px] uppercase tracking-[0.18em] text-[color:var(--ink-faint)]"
           style={{ fontFamily: "var(--font-mono-src)" }}
         >
-          {groups.length} {groups.length === 1 ? "package" : "packages"} · bytes
-          live in the pod
+          {groups.length} {groups.length === 1 ? "package" : "packages"} · bytes live in the pod
         </p>
       ) : null}
 
@@ -90,12 +86,7 @@ export default async function PackagesPage({ params }: PageProps) {
               <ul className="mt-4 flex flex-col gap-2.5">
                 {section.items.map((g) => (
                   <li key={`${g.type}:${g.name}`}>
-                    <PackageCard
-                      group={g}
-                      owner={owner}
-                      name={name}
-                      bridgeBase={bridgeBase}
-                    />
+                    <PackageCard group={g} owner={owner} name={name} bridgeBase={bridgeBase} />
                   </li>
                 ))}
               </ul>
@@ -260,9 +251,9 @@ function PackagesEmptyState({ owner, name }: { owner: string; name: string }) {
         Nothing <em>published</em> yet.
       </h2>
       <p className="mt-4 max-w-xl leading-relaxed text-[color:var(--ink-soft)]">
-        Publish npm packages, container images, or generic files to this repo
-        and they show up here — the bytes are stored in the owner&apos;s pod,
-        addressed by digest. Auth reuses this repo&apos;s{" "}
+        Publish npm packages, container images, or generic files to this repo and they show up here
+        — the bytes are stored in the owner&apos;s pod, addressed by digest. Auth reuses this
+        repo&apos;s{" "}
         <Link href={`/repos/${owner}/${name}/settings#tokens`} className="link">
           push tokens
         </Link>
diff --git a/src/app/repos/[owner]/[repo]/page.tsx b/src/app/repos/[owner]/[repo]/page.tsx
index 740f00c..7bf5912 100644
--- a/src/app/repos/[owner]/[repo]/page.tsx
+++ b/src/app/repos/[owner]/[repo]/page.tsx
@@ -1,29 +1,26 @@
 import Link from "next/link";
 import { notFound } from "next/navigation";
-import { getRepo, getPagesConfig } from "@/lib/registry/repos";
-import { listPushTokens } from "@/lib/registry/tokens";
-import {
-  listRunsForRepo,
-  type WorkflowRun,
-} from "@/lib/registry/runs";
-import { isOrg } from "@/lib/registry/owners";
+import { CopyButton } from "@/components/copy-button";
+import { RelativeTime } from "@/components/relative-time";
+import { formatDuration } from "@/lib/format";
 import { repoPath } from "@/lib/git/backend";
 import {
+  type CommitSummary,
   findReadme,
   hasAnyCommits,
   listBranches,
   listRecentCommits,
   listTree,
-  type CommitSummary,
   type TreeEntry,
 } from "@/lib/git/objects";
 import { renderMarkdown } from "@/lib/markdown";
-import { RelativeTime } from "@/components/relative-time";
-import { CopyButton } from "@/components/copy-button";
-import { formatDuration } from "@/lib/format";
-import { TokenManager } from "./token-manager";
-import { RerunButton } from "./rerun-button";
+import { isOrg } from "@/lib/registry/owners";
+import { getPagesConfig, getRepo } from "@/lib/registry/repos";
+import { listRunsForRepo, type WorkflowRun } from "@/lib/registry/runs";
+import { listPushTokens } from "@/lib/registry/tokens";
 import { RepoTabs } from "./repo-tabs";
+import { RerunButton } from "./rerun-button";
+import { TokenManager } from "./token-manager";
 
 export const dynamic = "force-dynamic";
 
@@ -54,13 +51,9 @@ export default async function RepoDetailPage({ params }: PageProps) {
   // Fetch 7 so we can show the latest commit in the file-listing "ribbon"
   // AND still have up-to-6 distinct entries in the Recent commits section
   // below.
-  const recentCommits = hasCommits
-    ? await listRecentCommits(bare, repo.defaultBranch, 7)
-    : [];
+  const recentCommits = hasCommits ? await listRecentCommits(bare, repo.defaultBranch, 7) : [];
   const earlierCommits = recentCommits.slice(1);
-  const rootEntries = hasCommits
-    ? await listTree(bare, repo.defaultBranch, "")
-    : [];
+  const rootEntries = hasCommits ? await listTree(bare, repo.defaultBranch, "") : [];
   const latestCommit = recentCommits[0] ?? null;
 
   // Pull the 5 most recent runs: index 0 is the "latest build" panel,
@@ -148,16 +141,10 @@ export default async function RepoDetailPage({ params }: PageProps) {
 
           <SidebarSection title="Owner">
             <SidebarFact label="WebID">
-              <SidebarUrl
-                href={repo.ownerWebId}
-                display={compact(repo.ownerWebId)}
-              />
+              <SidebarUrl href={repo.ownerWebId} display={compact(repo.ownerWebId)} />
             </SidebarFact>
             <SidebarFact label="Pod root">
-              <SidebarUrl
-                href={repo.ownerPodRoot}
-                display={compact(repo.ownerPodRoot)}
-              />
+              <SidebarUrl href={repo.ownerPodRoot} display={compact(repo.ownerPodRoot)} />
             </SidebarFact>
             <SidebarFact label="Metadata">
               <SidebarUrl
@@ -196,9 +183,7 @@ export default async function RepoDetailPage({ params }: PageProps) {
                   className="text-[9px] uppercase tracking-[0.2em] text-[color:var(--ink-faint)]"
                   style={{ fontFamily: "var(--font-mono-src)" }}
                 >
-                  {pages?.enabled && pages.targetContainer
-                    ? "not published"
-                    : "off"}
+                  {pages?.enabled && pages.targetContainer ? "not published" : "off"}
                 </span>
               )
             }
@@ -218,18 +203,17 @@ export default async function RepoDetailPage({ params }: PageProps) {
                 </SidebarFact>
                 <SidebarFact label="Published">
                   <span className="text-[12px]">
-                    {pages.lastPublishedAt ? (
-                      <RelativeTime ts={pages.lastPublishedAt} />
-                    ) : (
-                      "never"
-                    )}
+                    {pages.lastPublishedAt ? <RelativeTime ts={pages.lastPublishedAt} /> : "never"}
                   </span>
                 </SidebarFact>
               </>
             ) : (
               <p className="text-[11px] text-[color:var(--ink-soft)]">
                 Not enabled. Configure with{" "}
-                <code className="kbd">PUT /api/repos/{repo.owner}/{repo.name}/pages</code>.
+                <code className="kbd">
+                  PUT /api/repos/{repo.owner}/{repo.name}/pages
+                </code>
+                .
               </p>
             )}
           </SidebarSection>
@@ -263,11 +247,7 @@ export default async function RepoDetailPage({ params }: PageProps) {
                 </span>
               </summary>
               <div className="mt-3">
-                <TokenManager
-                  owner={repo.owner}
-                  repo={repo.name}
-                  initial={tokens}
-                />
+                <TokenManager owner={repo.owner} repo={repo.name} initial={tokens} />
               </div>
             </details>
           </SidebarSection>
@@ -277,11 +257,7 @@ export default async function RepoDetailPage({ params }: PageProps) {
   );
 }
 
-function PublishStatusBanner({
-  pages,
-}: {
-  pages: ReturnType<typeof getPagesConfig> | null;
-}) {
+function PublishStatusBanner({ pages }: { pages: ReturnType<typeof getPagesConfig> | null }) {
   if (!pages || !pages.enabled) return null;
   if (pages.lastPublishStatus !== "failed" && pages.lastPublishStatus !== "needs-reauth") {
     return null;
@@ -306,12 +282,18 @@ function PublishStatusBanner({
         {action}
       </p>
       {pages.lastPublishError ? (
-        <p className="mt-1 break-all text-[color:var(--ink-soft)]" style={{ fontFamily: "var(--font-mono-src)" }}>
+        <p
+          className="mt-1 break-all text-[color:var(--ink-soft)]"
+          style={{ fontFamily: "var(--font-mono-src)" }}
+        >
           {pages.lastPublishError}
         </p>
       ) : null}
       {pages.lastPublishAttempt ? (
-        <p className="mt-1 text-[10px] uppercase tracking-[0.18em] text-[color:var(--ink-faint)]" style={{ fontFamily: "var(--font-mono-src)" }}>
+        <p
+          className="mt-1 text-[10px] uppercase tracking-[0.18em] text-[color:var(--ink-faint)]"
+          style={{ fontFamily: "var(--font-mono-src)" }}
+        >
           attempt · <RelativeTime ts={pages.lastPublishAttempt} />
         </p>
       ) : null}
@@ -409,7 +391,8 @@ function renderBuildStatus(run: WorkflowRun, owner: string, name: string) {
       : run.status === "running" || run.status === "queued"
         ? undefined
         : "bad";
-  const symbol = run.status === "success" ? "✓" : run.status === "failed" || run.status === "error" ? "✗" : "·";
+  const symbol =
+    run.status === "success" ? "✓" : run.status === "failed" || run.status === "error" ? "✗" : "·";
   const trailing =
     run.status === "success"
       ? formatDuration(run.startedAt, run.finishedAt)
@@ -436,16 +419,10 @@ function renderPagesStatus(
   publishedUrl: string | null,
 ) {
   if (!pages?.enabled || !pages.targetContainer) {
-    return (
-      <span className="text-[color:var(--ink-faint)]">pages off</span>
-    );
+    return <span className="text-[color:var(--ink-faint)]">pages off</span>;
   }
   if (!publishedUrl) {
-    return (
-      <span className="text-[color:var(--ink-faint)]">
-        pages on · not published
-      </span>
-    );
+    return <span className="text-[color:var(--ink-faint)]">pages on · not published</span>;
   }
   return (
     <>
@@ -459,22 +436,14 @@ function renderPagesStatus(
           rel="noreferrer"
           className="text-[color:var(--ink-faint)] hover:text-[color:var(--accent)]"
         >
-          {pages.lastPublishedAt ? (
-            <RelativeTime ts={pages.lastPublishedAt} />
-          ) : (
-            "open ↗"
-          )}
+          {pages.lastPublishedAt ? <RelativeTime ts={pages.lastPublishedAt} /> : "open ↗"}
         </a>
       ) : null}
     </>
   );
 }
 
-function renderRunsCount(
-  count: number,
-  owner: string,
-  name: string,
-) {
+function renderRunsCount(count: number, owner: string, name: string) {
   if (count === 0) return null;
   const display = count >= 50 ? "50+" : count.toString();
   return (
@@ -545,24 +514,18 @@ function EmptyReadme({
   if (hasCommits) {
     return (
       <section className="card text-sm text-[color:var(--ink-soft)]">
-        <p
-          className="display text-xl"
-          style={{ fontFamily: "var(--font-display)" }}
-        >
+        <p className="display text-xl" style={{ fontFamily: "var(--font-display)" }}>
           No README yet.
         </p>
         <p className="mt-2">
-          Add a <code className="kbd">README.md</code> to the default branch
-          and it&apos;ll render here.
+          Add a <code className="kbd">README.md</code> to the default branch and it&apos;ll render
+          here.
         </p>
       </section>
     );
   }
 
-  const tokenizedCloneUrl = cloneUrl.replace(
-    /^(https?:\/\/)/,
-    "$1USER:<TOKEN>@",
-  );
+  const tokenizedCloneUrl = cloneUrl.replace(/^(https?:\/\/)/, "$1USER:<TOKEN>@");
 
   const newRepo = `echo "# ${name}" >> README.md
 git init
@@ -579,10 +542,7 @@ git push -u origin ${defaultBranch}`;
   return (
     <section className="card space-y-6 text-sm text-[color:var(--ink-soft)]">
       <header>
-        <p
-          className="display text-xl"
-          style={{ fontFamily: "var(--font-display)" }}
-        >
+        <p className="display text-xl" style={{ fontFamily: "var(--font-display)" }}>
           Nothing pushed yet.
         </p>
         <ol className="mt-3 space-y-1 list-decimal list-inside">
@@ -591,37 +551,27 @@ git push -u origin ${defaultBranch}`;
             <em className="text-[color:var(--ink)]">Push tokens · Mint first token</em>.
           </li>
           <li>
-            Copy the token, then paste it where{" "}
-            <code className="kbd">&lt;TOKEN&gt;</code> appears below.
+            Copy the token, then paste it where <code className="kbd">&lt;TOKEN&gt;</code> appears
+            below.
           </li>
           <li>Run the commands in your terminal.</li>
         </ol>
         <p className="mt-3 text-xs text-[color:var(--ink-faint)]">
-          The token goes into your local <code className="kbd">.git/config</code>,
-          which is convenient and easy to revoke later (sidebar → Push tokens). If
-          you prefer your OS keychain instead, drop the{" "}
-          <code className="kbd">USER:&lt;TOKEN&gt;@</code> prefix and let git
-          prompt — but make sure your credential helper isn&apos;t holding a stale
-          credential for this host.
+          The token goes into your local <code className="kbd">.git/config</code>, which is
+          convenient and easy to revoke later (sidebar → Push tokens). If you prefer your OS
+          keychain instead, drop the <code className="kbd">USER:&lt;TOKEN&gt;@</code> prefix and let
+          git prompt — but make sure your credential helper isn&apos;t holding a stale credential
+          for this host.
         </p>
       </header>
 
       <FirstStepsBlock title="Create a new repository" snippet={newRepo} />
-      <FirstStepsBlock
-        title="Push an existing repository"
-        snippet={existingRepo}
-      />
+      <FirstStepsBlock title="Push an existing repository" snippet={existingRepo} />
     </section>
   );
 }
 
-function FirstStepsBlock({
-  title,
-  snippet,
-}: {
-  title: string;
-  snippet: string;
-}) {
+function FirstStepsBlock({ title, snippet }: { title: string; snippet: string }) {
   return (
     <div className="overflow-hidden rounded border border-[color:var(--ink-trace)]">
       <div className="flex items-center justify-between gap-2 border-b border-[color:var(--ink-trace)] bg-[color:var(--paper-soft)] px-3 py-1.5">
@@ -698,11 +648,7 @@ function FileListing({
         <ul className="divide-y divide-[color:var(--ink-trace)]">
           {entries.map((entry) => (
             <li key={entry.sha + entry.name}>
-              <FileRow
-                owner={owner}
-                repoName={repoName}
-                entry={entry}
-              />
+              <FileRow owner={owner} repoName={repoName} entry={entry} />
             </li>
           ))}
         </ul>
@@ -834,9 +780,7 @@ function CommitRow({
   return (
     <div className="flex flex-wrap items-center gap-x-3 gap-y-1 px-4 py-2 text-sm">
       <span className="min-w-0 flex-1 truncate text-[color:var(--ink)]">
-        {commit.subject || (
-          <em className="text-[color:var(--ink-faint)]">(no subject)</em>
-        )}
+        {commit.subject || <em className="text-[color:var(--ink-faint)]">(no subject)</em>}
       </span>
       <span
         className="shrink-0 text-[10px] uppercase tracking-[0.16em] text-[color:var(--ink-faint)]"
@@ -945,10 +889,7 @@ function LatestBuildSection({
   return (
     <section>
       <div className="flex items-baseline justify-between gap-3">
-        <h2
-          className="display text-xl"
-          style={{ fontFamily: "var(--font-display)" }}
-        >
+        <h2 className="display text-xl" style={{ fontFamily: "var(--font-display)" }}>
           Latest build
         </h2>
         <Link
@@ -960,11 +901,7 @@ function LatestBuildSection({
         </Link>
       </div>
       <div className="mt-3">
-        <LatestBuild
-          run={latestRun}
-          owner={owner}
-          repoName={repoName}
-        />
+        <LatestBuild run={latestRun} owner={owner} repoName={repoName} />
       </div>
       {previousRuns.length > 0 ? (
         <>
@@ -1015,14 +952,11 @@ function PreviousRunRow({
           {run.status}
         </span>
         {isBad && run.exitCode !== null ? (
-          <span className="text-[color:var(--ink-faint)]">
-            exit {run.exitCode}
-          </span>
+          <span className="text-[color:var(--ink-faint)]">exit {run.exitCode}</span>
         ) : null}
       </span>
       <span className="text-[color:var(--ink-faint)]">
-        <RelativeTime ts={run.startedAt} /> ·{" "}
-        {formatDuration(run.startedAt, run.finishedAt)}
+        <RelativeTime ts={run.startedAt} /> · {formatDuration(run.startedAt, run.finishedAt)}
       </span>
     </Link>
   );
@@ -1033,17 +967,13 @@ function NoBuildsHint() {
     <section>
       <hr className="hairline" />
       <p className="section-mark mt-6">// workflows</p>
-      <p
-        className="display mt-2 text-xl"
-        style={{ fontFamily: "var(--font-display)" }}
-      >
+      <p className="display mt-2 text-xl" style={{ fontFamily: "var(--font-display)" }}>
         Run code before you publish.
       </p>
       <p className="mt-3 max-w-2xl text-sm leading-relaxed text-[color:var(--ink-soft)]">
-        Add a <code className="kbd">.mind/workflow.yml</code> to the default
-        branch. On push, the bridge checks out your repo into a sandboxed{" "}
-        <code className="kbd">node:22-alpine</code> container, runs your{" "}
-        <code className="kbd">run:</code> steps, then publishes the result. See{" "}
+        Add a <code className="kbd">.mind/workflow.yml</code> to the default branch. On push, the
+        bridge checks out your repo into a sandboxed <code className="kbd">node:22-alpine</code>{" "}
+        container, runs your <code className="kbd">run:</code> steps, then publishes the result. See{" "}
         <Link href="/how-it-works" className="link">
           how it works
         </Link>{" "}
@@ -1103,9 +1033,7 @@ function LatestBuild({
         {run.errorMessage ? (
           <>
             <dt className="text-[color:var(--ink-faint)]">Error</dt>
-            <dd className="text-[color:var(--status-bad)]">
-              {run.errorMessage}
-            </dd>
+            <dd className="text-[color:var(--status-bad)]">{run.errorMessage}</dd>
           </>
         ) : null}
       </dl>
@@ -1158,13 +1086,7 @@ function SidebarSection({
   );
 }
 
-function SidebarFact({
-  label,
-  children,
-}: {
-  label: string;
-  children: React.ReactNode;
-}) {
+function SidebarFact({ label, children }: { label: string; children: React.ReactNode }) {
   return (
     <div className="mb-2.5 last:mb-0">
       <p
@@ -1178,13 +1100,7 @@ function SidebarFact({
   );
 }
 
-function SidebarUrl({
-  href,
-  display,
-}: {
-  href: string;
-  display?: string;
-}) {
+function SidebarUrl({ href, display }: { href: string; display?: string }) {
   const text = display ?? href;
   return (
     <a
diff --git a/src/app/repos/[owner]/[repo]/proposals/page.tsx b/src/app/repos/[owner]/[repo]/proposals/page.tsx
index e65e9cf..d0fbec6 100644
--- a/src/app/repos/[owner]/[repo]/proposals/page.tsx
+++ b/src/app/repos/[owner]/[repo]/proposals/page.tsx
@@ -1,12 +1,12 @@
 import Link from "next/link";
 import { notFound } from "next/navigation";
-import { getRepo } from "@/lib/registry/repos";
-import { repoPath } from "@/lib/git/backend";
+import { RelativeTime } from "@/components/relative-time";
 import { readSession } from "@/lib/auth/session";
-import { readGitTracker } from "@/lib/tracker/read";
-import { listProposals, type Proposal } from "@/lib/solid/inbox";
+import { repoPath } from "@/lib/git/backend";
+import { getRepo } from "@/lib/registry/repos";
 import { OwnerFetchUnavailableError } from "@/lib/solid/fetch-for-owner";
-import { RelativeTime } from "@/components/relative-time";
+import { listProposals, type Proposal } from "@/lib/solid/inbox";
+import { readGitTracker } from "@/lib/tracker/read";
 import { RepoTabs } from "../repo-tabs";
 import { ProposalActions } from "./proposal-actions";
 
@@ -53,27 +53,22 @@ export default async function ProposalsPage({ params }: PageProps) {
           ← {owner}/{name}
         </Link>
       </p>
-      <h1
-        className="mt-3 display text-3xl"
-        style={{ fontFamily: "var(--font-display)" }}
-      >
+      <h1 className="mt-3 display text-3xl" style={{ fontFamily: "var(--font-display)" }}>
         Proposals
       </h1>
       <p className="mt-2 text-sm text-[color:var(--ink-soft)]">
-        Issue proposals submitted to this repo&apos;s pod inbox. Accept one to
-        mint a <code className="kbd">.mind</code> issue at{" "}
-        <code className="kbd">todo</code>, or dismiss it.
+        Issue proposals submitted to this repo&apos;s pod inbox. Accept one to mint a{" "}
+        <code className="kbd">.mind</code> issue at <code className="kbd">todo</code>, or dismiss
+        it.
       </p>
 
       <RepoTabs owner={owner} name={name} active="proposals" />
 
       {!hasTracker ? (
         <section className="card mt-6 text-sm text-[color:var(--ink-soft)]">
-          No <code className="kbd">.mind</code> tracker in this repo yet —
-          proposals can be reviewed and dismissed, but{" "}
-          <strong>Accept</strong> needs{" "}
-          <code className="kbd">.mind/issues/tracker.config.md</code> on the
-          default branch.
+          No <code className="kbd">.mind</code> tracker in this repo yet — proposals can be reviewed
+          and dismissed, but <strong>Accept</strong> needs{" "}
+          <code className="kbd">.mind/issues/tracker.config.md</code> on the default branch.
         </section>
       ) : null}
 
@@ -83,10 +78,7 @@ export default async function ProposalsPage({ params }: PageProps) {
         </section>
       ) : proposals.length === 0 ? (
         <section className="card mt-6 text-sm text-[color:var(--ink-soft)]">
-          <p
-            className="display text-xl"
-            style={{ fontFamily: "var(--font-display)" }}
-          >
+          <p className="display text-xl" style={{ fontFamily: "var(--font-display)" }}>
             Inbox empty.
           </p>
           <p className="mt-2">
diff --git a/src/app/repos/[owner]/[repo]/proposals/proposal-actions.tsx b/src/app/repos/[owner]/[repo]/proposals/proposal-actions.tsx
index 98acb99..f90a547 100644
--- a/src/app/repos/[owner]/[repo]/proposals/proposal-actions.tsx
+++ b/src/app/repos/[owner]/[repo]/proposals/proposal-actions.tsx
@@ -1,16 +1,16 @@
 "use client";
 
-import { useRouter } from "next/navigation";
-import { useState } from "react";
-import { authedFetch } from "@/lib/auth/csrf-client";
 import {
   Button,
   Select,
-  SelectTrigger,
-  SelectValue,
   SelectContent,
   SelectItem,
+  SelectTrigger,
+  SelectValue,
 } from "@mind-studio/ui";
+import { useRouter } from "next/navigation";
+import { useState } from "react";
+import { authedFetch } from "@/lib/auth/csrf-client";
 
 type Props = {
   owner: string;
@@ -23,13 +23,7 @@ type Props = {
 
 const PRIORITIES = ["urgent", "high", "normal", "low"];
 
-export function ProposalActions({
-  owner,
-  repo,
-  id,
-  categories,
-  canAccept = true,
-}: Props) {
+export function ProposalActions({ owner, repo, id, categories, canAccept = true }: Props) {
   const router = useRouter();
   const [type, setType] = useState(categories[0]?.id ?? "feature");
   const [priority, setPriority] = useState("normal");
@@ -40,10 +34,10 @@ export function ProposalActions({
     setError(null);
     setBusy("accept");
     try {
-      const res = await authedFetch(
-        `/api/repos/${owner}/${repo}/inbox/${id}/accept`,
-        { method: "POST", body: JSON.stringify({ type, priority }) },
-      );
+      const res = await authedFetch(`/api/repos/${owner}/${repo}/inbox/${id}/accept`, {
+        method: "POST",
+        body: JSON.stringify({ type, priority }),
+      });
       if (!res.ok) {
         const data = (await res.json().catch(() => ({}))) as { error?: string };
         throw new Error(data.error ?? `request failed: ${res.status}`);
@@ -75,8 +69,7 @@ export function ProposalActions({
     }
   }
 
-  const labelClass =
-    "text-[10px] uppercase tracking-[0.22em] text-[color:var(--ink-faint)]";
+  const labelClass = "text-[10px] uppercase tracking-[0.22em] text-[color:var(--ink-faint)]";
   const mono = { fontFamily: "var(--font-mono-src)" };
 
   return (
diff --git a/src/app/repos/[owner]/[repo]/pulls/[number]/page.tsx b/src/app/repos/[owner]/[repo]/pulls/[number]/page.tsx
index e41bc48..09fa80e 100644
--- a/src/app/repos/[owner]/[repo]/pulls/[number]/page.tsx
+++ b/src/app/repos/[owner]/[repo]/pulls/[number]/page.tsx
@@ -1,21 +1,16 @@
 import Link from "next/link";
 import { notFound } from "next/navigation";
-import { getRepo } from "@/lib/registry/repos";
-import { getPullRequest } from "@/lib/registry/pulls";
-import { countComments, getIssueById } from "@/lib/registry/issues";
-import { repoPath } from "@/lib/git/backend";
-import {
-  commitsAhead,
-  diffFiles,
-  diffStat,
-  unifiedDiff,
-} from "@/lib/git/diff";
+import { DiffView } from "@/components/diff-view";
 import { RelativeTime } from "@/components/relative-time";
+import { repoPath } from "@/lib/git/backend";
+import { commitsAhead, diffFiles, diffStat, unifiedDiff } from "@/lib/git/diff";
 import { renderMarkdown } from "@/lib/markdown";
-import { DiffView } from "@/components/diff-view";
-import { PullActions } from "./pull-actions";
-import { PrPreviewCard } from "./pr-preview-card";
+import { countComments, getIssueById } from "@/lib/registry/issues";
+import { getPullRequest } from "@/lib/registry/pulls";
+import { getRepo } from "@/lib/registry/repos";
 import { RepoTabs } from "../../repo-tabs";
+import { PrPreviewCard } from "./pr-preview-card";
+import { PullActions } from "./pull-actions";
 
 export const dynamic = "force-dynamic";
 
@@ -34,13 +29,8 @@ export default async function PullDetailPage({ params }: PageProps) {
 
   const bare = repoPath(repo.owner, repo.name);
   const baseRef =
-    pull.status === "merged" && pull.mergeSha
-      ? `${pull.mergeSha}^1`
-      : pull.targetBranch;
-  const headRef =
-    pull.status === "merged" && pull.mergeSha
-      ? pull.mergeSha
-      : pull.sourceBranch;
+    pull.status === "merged" && pull.mergeSha ? `${pull.mergeSha}^1` : pull.targetBranch;
+  const headRef = pull.status === "merged" && pull.mergeSha ? pull.mergeSha : pull.sourceBranch;
 
   // Diff data is best-effort: if the source branch has been deleted
   // post-merge, we silently fall back to empty arrays so the page still
@@ -61,9 +51,7 @@ export default async function PullDetailPage({ params }: PageProps) {
 
   const bodyHtml = pull.body.trim() ? renderMarkdown(pull.body) : null;
   const linkedIssue = pull.issueId ? getIssueById(pull.issueId) : null;
-  const linkedIssueComments = linkedIssue
-    ? countComments(linkedIssue.id)
-    : 0;
+  const linkedIssueComments = linkedIssue ? countComments(linkedIssue.id) : 0;
 
   return (
     <div className="mx-auto max-w-4xl px-4 py-10 sm:px-10 sm:py-12">
@@ -78,13 +66,9 @@ export default async function PullDetailPage({ params }: PageProps) {
           className="display min-w-0 break-words text-2xl sm:text-3xl"
           style={{ fontFamily: "var(--font-display)", overflowWrap: "anywhere" }}
         >
-          <span className="text-[color:var(--ink-faint)]">#{pull.number}</span>{" "}
-          {pull.title}
+          <span className="text-[color:var(--ink-faint)]">#{pull.number}</span> {pull.title}
         </h1>
-        <span
-          className="stamp shrink-0"
-          data-tone={pull.status === "merged" ? "ok" : undefined}
-        >
+        <span className="stamp shrink-0" data-tone={pull.status === "merged" ? "ok" : undefined}>
           {pull.status}
         </span>
       </div>
@@ -124,16 +108,10 @@ export default async function PullDetailPage({ params }: PageProps) {
           <>
             {" "}
             · closes{" "}
-            <Link
-              href={`/repos/${owner}/${name}/issues/${linkedIssue.number}`}
-              className="link"
-            >
+            <Link href={`/repos/${owner}/${name}/issues/${linkedIssue.number}`} className="link">
               #{linkedIssue.number}
             </Link>{" "}
-            <span
-              className="stamp"
-              data-tone={linkedIssue.status === "closed" ? "ok" : undefined}
-            >
+            <span className="stamp" data-tone={linkedIssue.status === "closed" ? "ok" : undefined}>
               {linkedIssue.status}
             </span>
           </>
@@ -154,14 +132,9 @@ export default async function PullDetailPage({ params }: PageProps) {
         </div>
         <div className="bg-[color:var(--paper)] px-5 py-4">
           {bodyHtml ? (
-            <article
-              className="markdown-body"
-              dangerouslySetInnerHTML={{ __html: bodyHtml }}
-            />
+            <article className="markdown-body" dangerouslySetInnerHTML={{ __html: bodyHtml }} />
           ) : (
-            <p className="text-sm italic text-[color:var(--ink-faint)]">
-              (no description)
-            </p>
+            <p className="text-sm italic text-[color:var(--ink-faint)]">(no description)</p>
           )}
         </div>
       </div>
@@ -265,9 +238,7 @@ export default async function PullDetailPage({ params }: PageProps) {
               >
                 <span className="text-[color:var(--ink-faint)]">{f.status}</span>
                 <span className="text-[color:var(--ink)] truncate">
-                  {f.oldPath && f.oldPath !== f.newPath
-                    ? `${f.oldPath} → ${f.newPath}`
-                    : f.newPath}
+                  {f.oldPath && f.oldPath !== f.newPath ? `${f.oldPath} → ${f.newPath}` : f.newPath}
                 </span>
                 <span className="whitespace-nowrap text-[10px]">
                   <span className="text-[color:var(--status-ok)]">+{f.insertions}</span>{" "}
diff --git a/src/app/repos/[owner]/[repo]/pulls/[number]/pr-preview-card.tsx b/src/app/repos/[owner]/[repo]/pulls/[number]/pr-preview-card.tsx
index 26b928e..6ec628d 100644
--- a/src/app/repos/[owner]/[repo]/pulls/[number]/pr-preview-card.tsx
+++ b/src/app/repos/[owner]/[repo]/pulls/[number]/pr-preview-card.tsx
@@ -1,9 +1,9 @@
 "use client";
 
+import { Button } from "@mind-studio/ui";
 import { useEffect, useRef, useState } from "react";
-import type { PreviewStatus } from "@/lib/registry/pulls";
 import { authedFetch } from "@/lib/auth/csrf-client";
-import { Button } from "@mind-studio/ui";
+import type { PreviewStatus } from "@/lib/registry/pulls";
 
 const POLL_INTERVAL_MS = 1500;
 const ANSI_ESCAPE = /\x1b\[[0-9;]*m/g; // eslint-disable-line no-control-regex
@@ -107,18 +107,9 @@ export function PrPreviewCard({
     }
   }
 
-  const tone =
-    state.status === "ready"
-      ? "ok"
-      : state.status === "failed"
-        ? "bad"
-        : undefined;
+  const tone = state.status === "ready" ? "ok" : state.status === "failed" ? "bad" : undefined;
   const buildLabel =
-    state.status === "building"
-      ? "Building…"
-      : state.status
-        ? "Rebuild preview"
-        : "Build preview";
+    state.status === "building" ? "Building…" : state.status ? "Rebuild preview" : "Build preview";
 
   return (
     <div className="overflow-hidden rounded border border-[color:var(--ink-trace)]">
@@ -138,12 +129,7 @@ export function PrPreviewCard({
 
       <div className="flex flex-col gap-3 bg-[color:var(--paper)] px-5 py-4">
         {state.status === "ready" && state.url ? (
-          <a
-            href={state.url}
-            target="_blank"
-            rel="noreferrer"
-            className="link text-sm"
-          >
+          <a href={state.url} target="_blank" rel="noreferrer" className="link text-sm">
             Open preview ↗
           </a>
         ) : null}
diff --git a/src/app/repos/[owner]/[repo]/pulls/[number]/pull-actions.tsx b/src/app/repos/[owner]/[repo]/pulls/[number]/pull-actions.tsx
index 3a64520..ae6a638 100644
--- a/src/app/repos/[owner]/[repo]/pulls/[number]/pull-actions.tsx
+++ b/src/app/repos/[owner]/[repo]/pulls/[number]/pull-actions.tsx
@@ -1,9 +1,9 @@
 "use client";
 
+import { Button } from "@mind-studio/ui";
 import { useRouter } from "next/navigation";
 import { useState } from "react";
 import { authedFetch } from "@/lib/auth/csrf-client";
-import { Button } from "@mind-studio/ui";
 
 /**
  * Merge/close buttons for an open PR. Both fire server actions through
@@ -26,10 +26,9 @@ export function PullActions({
     setBusy(action);
     setError(null);
     try {
-      const res = await authedFetch(
-        `/api/repos/${owner}/${repo}/pulls/${number}/${action}`,
-        { method: "POST" },
-      );
+      const res = await authedFetch(`/api/repos/${owner}/${repo}/pulls/${number}/${action}`, {
+        method: "POST",
+      });
       if (!res.ok) {
         const body = (await res.json().catch(() => ({}))) as { error?: string };
         setError(body.error ?? `${action} failed (HTTP ${res.status})`);
@@ -46,12 +45,7 @@ export function PullActions({
   return (
     <div className="flex flex-col gap-2">
       <div className="flex flex-wrap gap-2">
-        <Button
-          type="button"
-          size="sm"
-          onClick={() => fire("merge")}
-          disabled={busy !== null}
-        >
+        <Button type="button" size="sm" onClick={() => fire("merge")} disabled={busy !== null}>
           {busy === "merge" ? "Merging…" : "Merge pull request"}
         </Button>
         <Button
@@ -64,9 +58,7 @@ export function PullActions({
           {busy === "close" ? "Closing…" : "Close without merging"}
         </Button>
       </div>
-      {error ? (
-        <p className="text-sm text-[color:var(--status-bad)]">{error}</p>
-      ) : null}
+      {error ? <p className="text-sm text-[color:var(--status-bad)]">{error}</p> : null}
     </div>
   );
 }
diff --git a/src/app/repos/[owner]/[repo]/pulls/page.tsx b/src/app/repos/[owner]/[repo]/pulls/page.tsx
index 65736d5..6b2d1e7 100644
--- a/src/app/repos/[owner]/[repo]/pulls/page.tsx
+++ b/src/app/repos/[owner]/[repo]/pulls/page.tsx
@@ -1,12 +1,8 @@
 import Link from "next/link";
 import { notFound } from "next/navigation";
-import { getRepo } from "@/lib/registry/repos";
-import {
-  countPullRequestsByStatus,
-  listPullRequests,
-  type PullStatus,
-} from "@/lib/registry/pulls";
 import { RelativeTime } from "@/components/relative-time";
+import { countPullRequestsByStatus, listPullRequests, type PullStatus } from "@/lib/registry/pulls";
+import { getRepo } from "@/lib/registry/repos";
 import { RepoTabs } from "../repo-tabs";
 
 export const dynamic = "force-dynamic";
@@ -25,9 +21,7 @@ export default async function PullsPage({ params, searchParams }: PageProps) {
   if (!repo) notFound();
 
   const filter = (
-    VALID_FILTERS.includes(sp.status as (typeof VALID_FILTERS)[number])
-      ? sp.status
-      : "open"
+    VALID_FILTERS.includes(sp.status as (typeof VALID_FILTERS)[number]) ? sp.status : "open"
   ) as PullStatus | "all";
 
   const pulls = listPullRequests(repo.id, filter);
@@ -41,10 +35,7 @@ export default async function PullsPage({ params, searchParams }: PageProps) {
         </Link>
       </p>
 
-      <h1
-        className="display mt-3 text-3xl"
-        style={{ fontFamily: "var(--font-display)" }}
-      >
+      <h1 className="display mt-3 text-3xl" style={{ fontFamily: "var(--font-display)" }}>
         Pull requests
       </h1>
 
@@ -65,11 +56,7 @@ export default async function PullsPage({ params, searchParams }: PageProps) {
             {pulls.map((p, i) => {
               const isOpen = p.status === "open";
               const tone =
-                p.status === "merged"
-                  ? "ok"
-                  : p.status === "closed"
-                    ? undefined
-                    : undefined;
+                p.status === "merged" ? "ok" : p.status === "closed" ? undefined : undefined;
               const stampStyle =
                 p.status === "closed"
                   ? {
@@ -82,34 +69,22 @@ export default async function PullsPage({ params, searchParams }: PageProps) {
               return (
                 <li
                   key={p.id}
-                  className={
-                    i > 0
-                      ? "border-t border-[color:var(--ink-trace)]"
-                      : undefined
-                  }
+                  className={i > 0 ? "border-t border-[color:var(--ink-trace)]" : undefined}
                 >
                   <Link
                     href={`/repos/${owner}/${name}/pulls/${p.number}`}
                     className="block px-3 py-4 hover:bg-[color:var(--paper-soft)]"
                     style={{
-                      borderLeft: isOpen
-                        ? "2px solid var(--accent)"
-                        : "2px solid transparent",
+                      borderLeft: isOpen ? "2px solid var(--accent)" : "2px solid transparent",
                     }}
                   >
                     <div className="flex items-start gap-3">
-                      <span
-                        className="stamp shrink-0"
-                        data-tone={tone}
-                        style={stampStyle}
-                      >
+                      <span className="stamp shrink-0" data-tone={tone} style={stampStyle}>
                         {p.status}
                       </span>
                       <div className="min-w-0 flex-1">
                         <h2 className="text-base font-medium leading-snug text-[color:var(--ink)]">
-                          <span className="text-[color:var(--ink-faint)]">
-                            #{p.number}
-                          </span>{" "}
+                          <span className="text-[color:var(--ink-faint)]">#{p.number}</span>{" "}
                           {p.title}
                         </h2>
                         {excerpt ? (
@@ -130,23 +105,15 @@ export default async function PullsPage({ params, searchParams }: PageProps) {
                           style={{ fontFamily: "var(--font-mono-src)" }}
                         >
                           <span>
-                            <span style={{ color: "var(--ink-soft)" }}>
-                              {p.sourceBranch}
-                            </span>{" "}
-                            →{" "}
-                            <span style={{ color: "var(--ink-soft)" }}>
-                              {p.targetBranch}
-                            </span>
+                            <span style={{ color: "var(--ink-soft)" }}>{p.sourceBranch}</span> →{" "}
+                            <span style={{ color: "var(--ink-soft)" }}>{p.targetBranch}</span>
                           </span>
                           <span>
                             opened <RelativeTime ts={p.createdAt} />
                           </span>
                         </div>
                       </div>
-                      <span
-                        aria-hidden
-                        className="self-center text-[color:var(--ink-faint)]"
-                      >
+                      <span aria-hidden className="self-center text-[color:var(--ink-faint)]">
                         →
                       </span>
                     </div>
@@ -208,17 +175,13 @@ function FilterBar({
               background: isCurrent
                 ? "color-mix(in srgb, var(--accent) 14%, transparent)"
                 : "transparent",
-              color: isCurrent
-                ? "var(--accent-deep)"
-                : "var(--ink-soft)",
+              color: isCurrent ? "var(--accent-deep)" : "var(--ink-soft)",
             }}
           >
             {item.label}{" "}
             <span
               style={{
-                color: isCurrent
-                  ? "var(--accent-deep)"
-                  : "var(--ink-faint)",
+                color: isCurrent ? "var(--accent-deep)" : "var(--ink-faint)",
               }}
             >
               {item.count}
@@ -254,8 +217,7 @@ function EmptyState({
           Nothing {filter === "all" ? "here yet" : `${filter}`}.
         </p>
         <p className="mt-2">
-          When a pull request is {filter === "all" ? "opened" : filter}, it
-          will show up here.
+          When a pull request is {filter === "all" ? "opened" : filter}, it will show up here.
         </p>
       </section>
     );
@@ -269,14 +231,12 @@ function EmptyState({
         No open pull requests.
       </p>
       <p className="mt-3 leading-relaxed">
-        The <span style={{ color: "var(--ink)" }}>coder</span> agent opens
-        a draft pull request automatically when it pushes a branch in
-        response to an issue — the PR then targets{" "}
+        The <span style={{ color: "var(--ink)" }}>coder</span> agent opens a draft pull request
+        automatically when it pushes a branch in response to an issue — the PR then targets{" "}
         <code className="kbd">{defaultBranch}</code>.
       </p>
       <p className="mt-3 leading-relaxed">
-        You can also push your own branch to this bridge from the command
-        line; see{" "}
+        You can also push your own branch to this bridge from the command line; see{" "}
         <Link href={`/repos/${owner}/${repo}`} className="link">
           the repo page
         </Link>{" "}
@@ -287,16 +247,15 @@ function EmptyState({
         style={{ fontFamily: "var(--font-mono-src)" }}
       >
         <li>
-          <span style={{ color: "var(--ink-soft)" }}>open</span> —
-          unmerged, source branch still alive
+          <span style={{ color: "var(--ink-soft)" }}>open</span> — unmerged, source branch still
+          alive
         </li>
         <li>
-          <span style={{ color: "var(--ink-soft)" }}>merged</span> —
-          fast-forwarded onto {defaultBranch}
+          <span style={{ color: "var(--ink-soft)" }}>merged</span> — fast-forwarded onto{" "}
+          {defaultBranch}
         </li>
         <li>
-          <span style={{ color: "var(--ink-soft)" }}>closed</span> —
-          rejected without merging
+          <span style={{ color: "var(--ink-soft)" }}>closed</span> — rejected without merging
         </li>
       </ul>
     </section>
diff --git a/src/app/repos/[owner]/[repo]/repo-tabs.tsx b/src/app/repos/[owner]/[repo]/repo-tabs.tsx
index 3a4f756..92fe308 100644
--- a/src/app/repos/[owner]/[repo]/repo-tabs.tsx
+++ b/src/app/repos/[owner]/[repo]/repo-tabs.tsx
@@ -1,19 +1,12 @@
 import "server-only";
-import { getRepo, getPagesConfig } from "@/lib/registry/repos";
-import { readRepoTracker } from "@/lib/tracker/source";
-import { countOpenPullRequests } from "@/lib/registry/pulls";
-import { listPackages } from "@/lib/packages/store";
 import { readSession } from "@/lib/auth/session";
+import { listPackages } from "@/lib/packages/store";
+import { countOpenPullRequests } from "@/lib/registry/pulls";
+import { getPagesConfig, getRepo } from "@/lib/registry/repos";
+import { readRepoTracker } from "@/lib/tracker/source";
 import { NavTabs } from "./nav-tabs";
 
-type ActiveKey =
-  | "code"
-  | "issues"
-  | "pulls"
-  | "runs"
-  | "packages"
-  | "proposals"
-  | "settings";
+type ActiveKey = "code" | "issues" | "pulls" | "runs" | "packages" | "proposals" | "settings";
 
 export async function RepoTabs({
   owner,
@@ -33,16 +26,12 @@ export async function RepoTabs({
   // Open-issue badge reflects the repo's .mind tracker (the same source the
   // /issues board renders, pod-first), so the tab count matches the board.
   const tracker = await readRepoTracker(repo, owner, name);
-  const openIssueCount = tracker
-    ? tracker.issues.filter((i) => i.open).length
-    : 0;
+  const openIssueCount = tracker ? tracker.issues.filter((i) => i.open).length : 0;
   const openPullCount = countOpenPullRequests(repo.id);
 
   // Distinct published artifacts, counting each (type, name) once — an OCI
   // image indexed by both tag and digest is one package, not two.
-  const packageCount = new Set(
-    listPackages(repo.id).map((p) => `${p.type}:${p.name}`),
-  ).size;
+  const packageCount = new Set(listPackages(repo.id).map((p) => `${p.type}:${p.name}`)).size;
 
   const pages = getPagesConfig(repo.id);
   // "Live site" only once a publish actually landed — enabled-but-unpublished
diff --git a/src/app/repos/[owner]/[repo]/rerun-button.tsx b/src/app/repos/[owner]/[repo]/rerun-button.tsx
index e1f3b54..3cc350f 100644
--- a/src/app/repos/[owner]/[repo]/rerun-button.tsx
+++ b/src/app/repos/[owner]/[repo]/rerun-button.tsx
@@ -1,21 +1,21 @@
 "use client";
 
-import { useState } from "react";
-import { useRouter } from "next/navigation";
-import { authedFetch } from "@/lib/auth/csrf-client";
 import {
-  Button,
-  buttonVariants,
   AlertDialog,
-  AlertDialogTrigger,
+  AlertDialogAction,
+  AlertDialogCancel,
   AlertDialogContent,
-  AlertDialogHeader,
+  AlertDialogDescription,
   AlertDialogFooter,
+  AlertDialogHeader,
   AlertDialogTitle,
-  AlertDialogDescription,
-  AlertDialogCancel,
-  AlertDialogAction,
+  AlertDialogTrigger,
+  Button,
+  buttonVariants,
 } from "@mind-studio/ui";
+import { useRouter } from "next/navigation";
+import { useState } from "react";
+import { authedFetch } from "@/lib/auth/csrf-client";
 
 /**
  * Manual workflow re-run trigger. Fires-and-forgets via the runs API,
@@ -65,9 +65,7 @@ export function RerunButton({ owner, repo }: { owner: string; repo: string }) {
             </AlertDialogDescription>
           </AlertDialogHeader>
           <AlertDialogFooter>
-            <AlertDialogCancel data-testid="confirm-cancel">
-              Cancel
-            </AlertDialogCancel>
+            <AlertDialogCancel data-testid="confirm-cancel">Cancel</AlertDialogCancel>
             <AlertDialogAction
               data-testid="confirm-accept"
               className={buttonVariants({ variant: "destructive" })}
@@ -78,9 +76,7 @@ export function RerunButton({ owner, repo }: { owner: string; repo: string }) {
           </AlertDialogFooter>
         </AlertDialogContent>
       </AlertDialog>
-      {error ? (
-        <span className="text-sm text-[color:var(--status-bad)]">{error}</span>
-      ) : null}
+      {error ? <span className="text-sm text-[color:var(--status-bad)]">{error}</span> : null}
     </div>
   );
 }
diff --git a/src/app/repos/[owner]/[repo]/runs/[id]/page.tsx b/src/app/repos/[owner]/[repo]/runs/[id]/page.tsx
index 36c5f1f..04685ab 100644
--- a/src/app/repos/[owner]/[repo]/runs/[id]/page.tsx
+++ b/src/app/repos/[owner]/[repo]/runs/[id]/page.tsx
@@ -26,9 +26,7 @@ export default async function RunDetailPage({ params }: PageProps) {
         ? undefined
         : "bad";
   const dur =
-    run.finishedAt != null
-      ? `${((run.finishedAt - run.startedAt) / 1000).toFixed(1)}s`
-      : "—";
+    run.finishedAt != null ? `${((run.finishedAt - run.startedAt) / 1000).toFixed(1)}s` : "—";
 
   return (
     <div className="mx-auto max-w-3xl px-6 py-12 sm:px-10">
@@ -37,10 +35,7 @@ export default async function RunDetailPage({ params }: PageProps) {
           ← all runs
         </Link>
       </p>
-      <h1
-        className="display mt-3 text-3xl"
-        style={{ fontFamily: "var(--font-display)" }}
-      >
+      <h1 className="display mt-3 text-3xl" style={{ fontFamily: "var(--font-display)" }}>
         Run <em>#{run.id}</em>
       </h1>
       <p
@@ -57,7 +52,9 @@ export default async function RunDetailPage({ params }: PageProps) {
       <dl className="grid grid-cols-[max-content_1fr] gap-x-6 gap-y-2 text-sm">
         <dt className="text-[color:var(--ink-faint)]">Status</dt>
         <dd>
-          <span className="stamp" data-tone={tone}>{run.status}</span>
+          <span className="stamp" data-tone={tone}>
+            {run.status}
+          </span>
           {run.exitCode !== null ? (
             <span
               className="ml-3 text-[color:var(--ink-faint)] text-[11px] uppercase tracking-[0.16em]"
@@ -81,10 +78,7 @@ export default async function RunDetailPage({ params }: PageProps) {
         ) : null}
       </dl>
 
-      <h2
-        className="display mt-8 text-xl"
-        style={{ fontFamily: "var(--font-display)" }}
-      >
+      <h2 className="display mt-8 text-xl" style={{ fontFamily: "var(--font-display)" }}>
         Log
       </h2>
       {run.logTail ? (
@@ -92,12 +86,10 @@ export default async function RunDetailPage({ params }: PageProps) {
           className="mt-3 rounded border border-[color:var(--ink-trace)] bg-[color:var(--paper-sunk)] px-4 py-3 text-[0.8125rem] leading-[1.55] overflow-x-auto whitespace-pre max-w-full"
           style={{ fontFamily: "var(--font-mono-src)", WebkitOverflowScrolling: "touch" }}
         >
-{run.logTail}
+          {run.logTail}
         </pre>
       ) : (
-        <p className="mt-3 text-sm text-[color:var(--ink-soft)]">
-          No log captured.
-        </p>
+        <p className="mt-3 text-sm text-[color:var(--ink-soft)]">No log captured.</p>
       )}
     </div>
   );
diff --git a/src/app/repos/[owner]/[repo]/runs/page.tsx b/src/app/repos/[owner]/[repo]/runs/page.tsx
index 16cbd8e..3b495bf 100644
--- a/src/app/repos/[owner]/[repo]/runs/page.tsx
+++ b/src/app/repos/[owner]/[repo]/runs/page.tsx
@@ -1,9 +1,9 @@
 import Link from "next/link";
 import { notFound } from "next/navigation";
-import { getRepo } from "@/lib/registry/repos";
-import { listRunsForRepo, type WorkflowRun } from "@/lib/registry/runs";
 import { RelativeTime } from "@/components/relative-time";
 import { formatDuration } from "@/lib/format";
+import { getRepo } from "@/lib/registry/repos";
+import { listRunsForRepo, type WorkflowRun } from "@/lib/registry/runs";
 import { RepoTabs } from "../repo-tabs";
 
 export const dynamic = "force-dynamic";
@@ -25,10 +25,7 @@ export default async function RunsPage({ params }: PageProps) {
           ← {owner}/{name}
         </Link>
       </p>
-      <h1
-        className="display mt-3 text-3xl"
-        style={{ fontFamily: "var(--font-display)" }}
-      >
+      <h1 className="display mt-3 text-3xl" style={{ fontFamily: "var(--font-display)" }}>
         All <em>runs</em>
       </h1>
       {runs.length > 0 ? (
@@ -36,7 +33,8 @@ export default async function RunsPage({ params }: PageProps) {
           className="mt-2 text-[11px] uppercase tracking-[0.18em] text-[color:var(--ink-faint)]"
           style={{ fontFamily: "var(--font-mono-src)" }}
         >
-          {runs.length >= 50 ? "latest 50" : `${runs.length} ${runs.length === 1 ? "run" : "runs"}`} · newest first
+          {runs.length >= 50 ? "latest 50" : `${runs.length} ${runs.length === 1 ? "run" : "runs"}`}{" "}
+          · newest first
         </p>
       ) : null}
 
@@ -72,9 +70,8 @@ function RunsEmptyState() {
       </h2>
       <p className="mt-4 max-w-xl leading-relaxed text-[color:var(--ink-soft)]">
         A push only records a run when the repo contains a{" "}
-        <code className="kbd">.mind/workflow.yml</code> at its root. Without
-        one, the bridge accepts the push, publishes Pages if configured, and
-        stays quiet here.
+        <code className="kbd">.mind/workflow.yml</code> at its root. Without one, the bridge accepts
+        the push, publishes Pages if configured, and stays quiet here.
       </p>
       <p className="mt-3 max-w-xl leading-relaxed text-[color:var(--ink-soft)]">
         See{" "}
@@ -87,15 +84,7 @@ function RunsEmptyState() {
   );
 }
 
-function RunCard({
-  run,
-  owner,
-  name,
-}: {
-  run: WorkflowRun;
-  owner: string;
-  name: string;
-}) {
+function RunCard({ run, owner, name }: { run: WorkflowRun; owner: string; name: string }) {
   const failureSummary = summarizeFailure(run);
   const isBad = run.status === "failed" || run.status === "error";
   return (
@@ -133,8 +122,7 @@ function RunCard({
           className="text-[11px] uppercase tracking-[0.18em] text-[color:var(--ink-faint)]"
           style={{ fontFamily: "var(--font-mono-src)" }}
         >
-          <RelativeTime ts={run.startedAt} /> ·{" "}
-          {formatDuration(run.startedAt, run.finishedAt)}
+          <RelativeTime ts={run.startedAt} /> · {formatDuration(run.startedAt, run.finishedAt)}
         </span>
       </div>
       <p
diff --git a/src/app/repos/[owner]/[repo]/settings/page.tsx b/src/app/repos/[owner]/[repo]/settings/page.tsx
index 22eef5f..3b3ded3 100644
--- a/src/app/repos/[owner]/[repo]/settings/page.tsx
+++ b/src/app/repos/[owner]/[repo]/settings/page.tsx
@@ -1,19 +1,15 @@
 import Link from "next/link";
 import { notFound } from "next/navigation";
-import { getRepo, getPagesConfig } from "@/lib/registry/repos";
-import { listPushTokens } from "@/lib/registry/tokens";
-import { getEnv } from "@/lib/env";
 import { ensureAgentsBootstrap } from "@/lib/agents/bootstrap";
-import { listRoles, getDefaultDriverName } from "@/lib/agents/registry";
-import { readSession } from "@/lib/auth/session";
+import { getDefaultDriverName, listRoles } from "@/lib/agents/registry";
 import { resolveCoderConfigSummary } from "@/lib/ai-providers/store";
-import { TokenManager } from "../token-manager";
+import { readSession } from "@/lib/auth/session";
+import { getEnv } from "@/lib/env";
+import { getPagesConfig, getRepo } from "@/lib/registry/repos";
+import { listPushTokens } from "@/lib/registry/tokens";
 import { RepoTabs } from "../repo-tabs";
-import {
-  GeneralForm,
-  PagesForm,
-  DangerZone,
-} from "./settings-forms";
+import { TokenManager } from "../token-manager";
+import { DangerZone, GeneralForm, PagesForm } from "./settings-forms";
 
 export const dynamic = "force-dynamic";
 
@@ -106,9 +102,8 @@ export default async function RepoSettingsPage({ params }: PageProps) {
 
           <Section id="tokens" title="Push tokens" mark="// tokens">
             <p className="mb-4 max-w-2xl text-sm text-[color:var(--ink-soft)]">
-              Every <code className="kbd">git push</code> needs a token.
-              Tokens are scoped to this repo and shown in plaintext exactly
-              once at creation. Lose it and you mint a new one.
+              Every <code className="kbd">git push</code> needs a token. Tokens are scoped to this
+              repo and shown in plaintext exactly once at creation. Lose it and you mint a new one.
             </p>
             <TokenManager owner={owner} repo={name} initial={tokens} />
           </Section>
@@ -161,9 +156,7 @@ export default async function RepoSettingsPage({ params }: PageProps) {
                 <code className="kbd">{env.coderImage}</code>
               </dd>
               <dt className="text-[color:var(--ink-faint)]">Coder timeout</dt>
-              <dd>
-                {Math.round(env.coderTimeoutMs / 1000)}s per run
-              </dd>
+              <dd>{Math.round(env.coderTimeoutMs / 1000)}s per run</dd>
             </div>
             <p className="mt-4 max-w-2xl text-[11px] leading-relaxed text-[color:var(--ink-faint)]">
               Provider + model are owned by{" "}
@@ -180,9 +173,7 @@ export default async function RepoSettingsPage({ params }: PageProps) {
               Roster
             </h3>
             {roles.length === 0 ? (
-              <p className="mt-2 text-sm text-[color:var(--ink-soft)]">
-                No roles registered.
-              </p>
+              <p className="mt-2 text-sm text-[color:var(--ink-soft)]">No roles registered.</p>
             ) : (
               <ul className="mt-2 divide-y divide-[color:var(--ink-trace)]">
                 {roles.map((role) => (
@@ -201,20 +192,14 @@ export default async function RepoSettingsPage({ params }: PageProps) {
                         driver · {role.driver ?? defaultDriver ?? "—"}
                       </span>
                     </div>
-                    <p className="mt-1 text-sm text-[color:var(--ink-soft)]">
-                      {role.summary}
-                    </p>
+                    <p className="mt-1 text-sm text-[color:var(--ink-soft)]">{role.summary}</p>
                     <p
                       className="mt-1 text-[10px] uppercase tracking-[0.18em] text-[color:var(--ink-faint)]"
                       style={{ fontFamily: "var(--font-mono-src)" }}
                     >
                       fires on{" "}
                       {role.triggers
-                        .map((t) =>
-                          t.on === "issue.labeled"
-                            ? `issue.labeled(${t.label})`
-                            : t.on,
-                        )
+                        .map((t) => (t.on === "issue.labeled" ? `issue.labeled(${t.label})` : t.on))
                         .join(" · ")}
                     </p>
                   </li>
@@ -222,9 +207,8 @@ export default async function RepoSettingsPage({ params }: PageProps) {
               </ul>
             )}
             <p className="mt-4 text-[11px] text-[color:var(--ink-faint)]">
-              Roster is defined in code (
-              <code className="kbd">src/lib/agents/bootstrap.ts</code>) and
-              applies to every repo. Per-repo overrides are not implemented.
+              Roster is defined in code (<code className="kbd">src/lib/agents/bootstrap.ts</code>)
+              and applies to every repo. Per-repo overrides are not implemented.
             </p>
           </Section>
 
@@ -232,9 +216,7 @@ export default async function RepoSettingsPage({ params }: PageProps) {
             <div className="grid grid-cols-[max-content_minmax(0,1fr)] gap-x-6 gap-y-2 text-sm">
               <dt className="text-[color:var(--ink-faint)]">Mode</dt>
               <dd>
-                <code className="kbd">
-                  MIND_RUNNER={runnerMode}
-                </code>
+                <code className="kbd">MIND_RUNNER={runnerMode}</code>
                 <span className="ml-2 text-[11px] text-[color:var(--ink-faint)]">
                   {runnerMode === "auto"
                     ? "docker if reachable, native otherwise"
@@ -249,9 +231,9 @@ export default async function RepoSettingsPage({ params }: PageProps) {
               </dd>
             </div>
             <p className="mt-4 max-w-2xl text-[11px] leading-relaxed text-[color:var(--ink-faint)]">
-              Workflow steps from <code className="kbd">.mind/workflow.yml</code>{" "}
-              run on push. The mode is process-global and set via the{" "}
-              <code className="kbd">MIND_RUNNER</code> environment variable.
+              Workflow steps from <code className="kbd">.mind/workflow.yml</code> run on push. The
+              mode is process-global and set via the <code className="kbd">MIND_RUNNER</code>{" "}
+              environment variable.
             </p>
           </Section>
 
@@ -307,10 +289,7 @@ function Section({
   return (
     <section id={id} className="scroll-mt-6">
       <p className="section-mark">{mark}</p>
-      <h2
-        className="display mt-1 text-2xl"
-        style={{ fontFamily: "var(--font-display)" }}
-      >
+      <h2 className="display mt-1 text-2xl" style={{ fontFamily: "var(--font-display)" }}>
         {title}
       </h2>
       <hr className="hairline mt-3" />
@@ -339,7 +318,10 @@ function SignInWall({ owner, name }: { owner: string; name: string }) {
       </h1>
       <p className="mt-5 max-w-2xl leading-relaxed text-[color:var(--ink-soft)]">
         Repo settings are owner-only. Connect the WebID that owns{" "}
-        <code className="kbd">{owner}/{name}</code> to see and change them.
+        <code className="kbd">
+          {owner}/{name}
+        </code>{" "}
+        to see and change them.
       </p>
       <div className="mt-6">
         <Link
@@ -379,25 +361,18 @@ function ForbiddenWall({
         Only the owner can <em>configure</em> this.
       </h1>
       <p className="mt-5 max-w-2xl leading-relaxed text-[color:var(--ink-soft)]">
-        Settings, tokens, Pages config, and deletion are restricted to the
-        WebID that owns the repo.
+        Settings, tokens, Pages config, and deletion are restricted to the WebID that owns the repo.
       </p>
       <dl className="mt-6 grid grid-cols-[max-content_minmax(0,1fr)] gap-x-6 gap-y-2 text-sm">
         <dt className="text-[color:var(--ink-faint)]">You are signed in as</dt>
         <dd>
-          <code
-            className="break-all text-[12px]"
-            style={{ fontFamily: "var(--font-mono-src)" }}
-          >
+          <code className="break-all text-[12px]" style={{ fontFamily: "var(--font-mono-src)" }}>
             {viewerWebId}
           </code>
         </dd>
         <dt className="text-[color:var(--ink-faint)]">Owner WebID</dt>
         <dd>
-          <code
-            className="break-all text-[12px]"
-            style={{ fontFamily: "var(--font-mono-src)" }}
-          >
+          <code className="break-all text-[12px]" style={{ fontFamily: "var(--font-mono-src)" }}>
             {ownerWebId}
           </code>
         </dd>
diff --git a/src/app/repos/[owner]/[repo]/settings/settings-forms.tsx b/src/app/repos/[owner]/[repo]/settings/settings-forms.tsx
index 8ca2727..2a89de9 100644
--- a/src/app/repos/[owner]/[repo]/settings/settings-forms.tsx
+++ b/src/app/repos/[owner]/[repo]/settings/settings-forms.tsx
@@ -1,8 +1,8 @@
 "use client";
 
+import { Button, Input } from "@mind-studio/ui";
 import { useRouter } from "next/navigation";
 import { useState } from "react";
-import { Button, Input } from "@mind-studio/ui";
 import { authedFetch } from "@/lib/auth/csrf-client";
 
 // -----------------------------------------------------------------------
@@ -69,10 +69,7 @@ export function GeneralForm({
   }
 
   return (
-    <form
-      onSubmit={submit}
-      className="flex max-w-2xl flex-col gap-5 text-sm"
-    >
+    <form onSubmit={submit} className="flex max-w-2xl flex-col gap-5 text-sm">
       <Field
         label="Visibility"
         hint="Private repos require a token to clone. Public repos still require a token to push."
@@ -152,13 +149,7 @@ export function GeneralForm({
         </label>
       </Field>
 
-      <FormFooter
-        busy={busy}
-        dirty={dirty}
-        saved={saved}
-        error={error}
-        label="Save general"
-      />
+      <FormFooter busy={busy} dirty={dirty} saved={saved} error={error} label="Save general" />
     </form>
   );
 }
@@ -248,10 +239,7 @@ export function PagesForm({
         </label>
       </Field>
 
-      <Field
-        label="Source branch"
-        hint="Pushes to other branches are stored but not published."
-      >
+      <Field label="Source branch" hint="Pushes to other branches are stored but not published.">
         <Input
           type="text"
           value={sourceBranch}
@@ -292,13 +280,7 @@ export function PagesForm({
         />
       </Field>
 
-      <FormFooter
-        busy={busy}
-        dirty={dirty}
-        saved={saved}
-        error={error}
-        label="Save pages config"
-      />
+      <FormFooter busy={busy} dirty={dirty} saved={saved} error={error} label="Save pages config" />
     </form>
   );
 }
@@ -352,10 +334,9 @@ export function DangerZone({ owner, name }: { owner: string; name: string }) {
         Delete this repository
       </h3>
       <p className="mt-2 max-w-2xl text-sm leading-relaxed text-[color:var(--ink-soft)]">
-        Drops the registry rows (repo, pages config, tokens, runs, issues,
-        pulls, agent runs) and removes the bare git repo from disk. The
-        published site already on the pod is <strong>not</strong> deleted —
-        you own that container. Cannot be undone.
+        Drops the registry rows (repo, pages config, tokens, runs, issues, pulls, agent runs) and
+        removes the bare git repo from disk. The published site already on the pod is{" "}
+        <strong>not</strong> deleted — you own that container. Cannot be undone.
       </p>
       <p className="mt-4 text-sm text-[color:var(--ink-soft)]">
         Type <code className="kbd">{expected}</code> to confirm:
@@ -382,9 +363,7 @@ export function DangerZone({ owner, name }: { owner: string; name: string }) {
           <span>{busy ? "dropping…" : "Delete repository"}</span>
         </Button>
       </div>
-      {error ? (
-        <p className="mt-3 text-[color:var(--status-bad)]">{error}</p>
-      ) : null}
+      {error ? <p className="mt-3 text-[color:var(--status-bad)]">{error}</p> : null}
     </div>
   );
 }
@@ -412,9 +391,7 @@ function Field({
       </p>
       {children}
       {hint ? (
-        <p className="text-[11px] leading-relaxed text-[color:var(--ink-soft)]">
-          {hint}
-        </p>
+        <p className="text-[11px] leading-relaxed text-[color:var(--ink-soft)]">{hint}</p>
       ) : null}
     </div>
   );
@@ -453,9 +430,7 @@ function FormFooter({
           {saved ? "✓ saved" : "no changes"}
         </span>
       ) : null}
-      {error ? (
-        <span className="text-[color:var(--status-bad)] text-sm">{error}</span>
-      ) : null}
+      {error ? <span className="text-[color:var(--status-bad)] text-sm">{error}</span> : null}
     </div>
   );
 }
diff --git a/src/app/repos/[owner]/[repo]/token-manager.tsx b/src/app/repos/[owner]/[repo]/token-manager.tsx
index 3005b2d..6cc2a36 100644
--- a/src/app/repos/[owner]/[repo]/token-manager.tsx
+++ b/src/app/repos/[owner]/[repo]/token-manager.tsx
@@ -1,20 +1,20 @@
 "use client";
 
-import { useState } from "react";
 import {
-  Button,
-  Input,
   AlertDialog,
-  AlertDialogTrigger,
+  AlertDialogAction,
+  AlertDialogCancel,
   AlertDialogContent,
-  AlertDialogHeader,
+  AlertDialogDescription,
   AlertDialogFooter,
+  AlertDialogHeader,
   AlertDialogTitle,
-  AlertDialogDescription,
-  AlertDialogCancel,
-  AlertDialogAction,
+  AlertDialogTrigger,
+  Button,
   buttonVariants,
+  Input,
 } from "@mind-studio/ui";
+import { useState } from "react";
 import { authedFetch } from "@/lib/auth/csrf-client";
 
 type TokenSummary = {
@@ -58,10 +58,7 @@ export function TokenManager({
         createdAt: number;
         token: string;
       };
-      setTokens((prev) => [
-        { id: data.id, label: data.label, createdAt: data.createdAt },
-        ...prev,
-      ]);
+      setTokens((prev) => [{ id: data.id, label: data.label, createdAt: data.createdAt }, ...prev]);
       setPlaintext(data.token);
       setLabel("");
     } catch (e) {
@@ -75,10 +72,9 @@ export function TokenManager({
     setBusy(true);
     setError(null);
     try {
-      const res = await authedFetch(
-        `/api/repos/${owner}/${repo}/tokens/${id}`,
-        { method: "DELETE" },
-      );
+      const res = await authedFetch(`/api/repos/${owner}/${repo}/tokens/${id}`, {
+        method: "DELETE",
+      });
       if (!res.ok) {
         const body = await res.json().catch(() => ({}));
         throw new Error(body.error ?? `request failed (${res.status})`);
@@ -115,9 +111,7 @@ export function TokenManager({
         </Button>
       </form>
 
-      {error ? (
-        <p className="text-[color:var(--status-bad)]">{error}</p>
-      ) : null}
+      {error ? <p className="text-[color:var(--status-bad)]">{error}</p> : null}
 
       {plaintext ? (
         <div className="rounded border-l-2 border-[color:var(--accent)] bg-[color:var(--accent-soft)] p-3">
@@ -129,10 +123,7 @@ export function TokenManager({
           </p>
           <pre className="codeblock mt-2 text-[color:var(--ink)]">{plaintext}</pre>
           <p className="mt-2 text-[color:var(--ink)]">
-            Push with:{" "}
-            <code className="kbd">
-              git push {pushUrl(plaintext, owner, repo)}
-            </code>
+            Push with: <code className="kbd">git push {pushUrl(plaintext, owner, repo)}</code>
           </p>
         </div>
       ) : null}
@@ -144,7 +135,9 @@ export function TokenManager({
           {tokens.map((t) => (
             <li key={t.id} className="flex items-center justify-between gap-4 py-2">
               <div>
-                <p className="text-[color:var(--ink)]">{t.label || <em className="text-[color:var(--ink-faint)]">(no label)</em>}</p>
+                <p className="text-[color:var(--ink)]">
+                  {t.label || <em className="text-[color:var(--ink-faint)]">(no label)</em>}
+                </p>
                 <p
                   className="text-[10px] uppercase tracking-[0.18em] text-[color:var(--ink-faint)]"
                   style={{ fontFamily: "var(--font-mono-src)" }}
@@ -166,9 +159,7 @@ export function TokenManager({
                     </AlertDialogDescription>
                   </AlertDialogHeader>
                   <AlertDialogFooter>
-                    <AlertDialogCancel data-testid="confirm-cancel">
-                      Cancel
-                    </AlertDialogCancel>
+                    <AlertDialogCancel data-testid="confirm-cancel">Cancel</AlertDialogCancel>
                     <AlertDialogAction
                       data-testid="confirm-accept"
                       className={buttonVariants({ variant: "destructive" })}
@@ -192,8 +183,7 @@ function formatDate(ts: number): string {
 }
 
 function pushUrl(token: string, owner: string, repo: string): string {
-  const origin =
-    typeof window !== "undefined" ? window.location.origin : "http://localhost:3010";
+  const origin = typeof window !== "undefined" ? window.location.origin : "http://localhost:3010";
   const u = new URL(`/api/git/${owner}/${repo}.git`, origin);
   u.username = "USER";
   u.password = token;
diff --git a/src/app/repos/[owner]/[repo]/tree/[[...path]]/page.tsx b/src/app/repos/[owner]/[repo]/tree/[[...path]]/page.tsx
index 2ed0a43..77e9eaa 100644
--- a/src/app/repos/[owner]/[repo]/tree/[[...path]]/page.tsx
+++ b/src/app/repos/[owner]/[repo]/tree/[[...path]]/page.tsx
@@ -1,14 +1,9 @@
 import Link from "next/link";
 import { notFound } from "next/navigation";
-import { getRepo } from "@/lib/registry/repos";
-import { repoPath } from "@/lib/git/backend";
-import {
-  hasAnyCommits,
-  listBranches,
-  listTree,
-  type TreeEntry,
-} from "@/lib/git/objects";
 import { BranchPicker } from "@/components/branch-picker";
+import { repoPath } from "@/lib/git/backend";
+import { hasAnyCommits, listBranches, listTree, type TreeEntry } from "@/lib/git/objects";
+import { getRepo } from "@/lib/registry/repos";
 import { RepoTabs } from "../../repo-tabs";
 
 export const dynamic = "force-dynamic";
@@ -45,8 +40,8 @@ export default async function TreePage({ params, searchParams }: PageProps) {
       >
         <div className="card">
           <p>
-            This repo has no commits yet. Push something to{" "}
-            <code className="kbd">{ref}</code> and refresh.
+            This repo has no commits yet. Push something to <code className="kbd">{ref}</code> and
+            refresh.
           </p>
         </div>
       </PageShell>
@@ -136,9 +131,7 @@ function TreeListing({
               className="text-[color:var(--ink-faint)] text-[11px]"
               style={{ fontFamily: "var(--font-mono-src)" }}
             >
-              {entry.type === "blob" && entry.size !== null
-                ? formatBytes(entry.size)
-                : ""}
+              {entry.type === "blob" && entry.size !== null ? formatBytes(entry.size) : ""}
             </span>
           </Link>
         </li>
@@ -174,19 +167,12 @@ function PageShell({
         </Link>
       </p>
 
-      <h1
-        className="display mt-3 text-2xl"
-        style={{ fontFamily: "var(--font-display)" }}
-      >
+      <h1 className="display mt-3 text-2xl" style={{ fontFamily: "var(--font-display)" }}>
         Source
       </h1>
       <div className="mt-1 flex flex-wrap items-center justify-between gap-3">
         {branches.length > 1 ? (
-          <BranchPicker
-            branches={branches}
-            current={branch}
-            defaultBranch={defaultBranch}
-          />
+          <BranchPicker branches={branches} current={branch} defaultBranch={defaultBranch} />
         ) : (
           <p
             className="text-[11px] uppercase tracking-[0.18em] text-[color:var(--ink-faint)]"
@@ -267,11 +253,7 @@ export function Breadcrumbs({
  * case git itself will validate it via ls-tree. Anything else falls back
  * to the default branch so a stale URL doesn't 404 the whole page.
  */
-function pickRef(
-  requested: string | undefined,
-  branches: string[],
-  defaultBranch: string,
-): string {
+function pickRef(requested: string | undefined, branches: string[], defaultBranch: string): string {
   if (!requested) return defaultBranch;
   if (branches.includes(requested)) return requested;
   if (/^[0-9a-f]{7,40}$/i.test(requested)) return requested;
diff --git a/src/app/repos/_components/repo-list.tsx b/src/app/repos/_components/repo-list.tsx
index 2e1d65f..e6f2a23 100644
--- a/src/app/repos/_components/repo-list.tsx
+++ b/src/app/repos/_components/repo-list.tsx
@@ -1,13 +1,9 @@
 "use client";
 
+import { Button, Input } from "@mind-studio/ui";
 import Link from "next/link";
 import { useDeferredValue, useId, useMemo, useState } from "react";
-import { Button, Input } from "@mind-studio/ui";
-import {
-  formatAbsoluteIso,
-  formatDuration,
-  formatRelativeTime,
-} from "@/lib/format";
+import { formatAbsoluteIso, formatDuration, formatRelativeTime } from "@/lib/format";
 
 export type RepoRowData = {
   id: number;
@@ -33,13 +29,7 @@ export type RepoRowData = {
 
 type SortMode = "recent" | "alpha";
 
-export function RepoList({
-  rows,
-  signedIn,
-}: {
-  rows: RepoRowData[];
-  signedIn: boolean;
-}) {
+export function RepoList({ rows, signedIn }: { rows: RepoRowData[]; signedIn: boolean }) {
   const [filter, setFilter] = useState("");
   const [sort, setSort] = useState<SortMode>("recent");
   const deferredFilter = useDeferredValue(filter);
@@ -49,17 +39,13 @@ export function RepoList({
 
   const matched = useMemo(() => {
     if (!normalized) return rows;
-    return rows.filter((r) =>
-      `${r.owner}/${r.name}`.toLowerCase().includes(normalized),
-    );
+    return rows.filter((r) => `${r.owner}/${r.name}`.toLowerCase().includes(normalized));
   }, [rows, normalized]);
 
   const sorted = useMemo(() => {
     const copy = [...matched];
     if (sort === "alpha") {
-      copy.sort((a, b) =>
-        `${a.owner}/${a.name}`.localeCompare(`${b.owner}/${b.name}`),
-      );
+      copy.sort((a, b) => `${a.owner}/${a.name}`.localeCompare(`${b.owner}/${b.name}`));
     } else {
       copy.sort((a, b) => b.activityAt - a.activityAt);
     }
@@ -142,13 +128,10 @@ export function RepoList({
         style={{ fontFamily: "var(--font-mono-src)" }}
       >
         <span>
-          {sorted.length} of {rows.length}{" "}
-          {rows.length === 1 ? "repo" : "repos"}
+          {sorted.length} of {rows.length} {rows.length === 1 ? "repo" : "repos"}
         </span>
         <span aria-hidden>·</span>
-        <span style={{ color: "var(--accent-deep)" }}>
-          {totalLive} live on pages
-        </span>
+        <span style={{ color: "var(--accent-deep)" }}>{totalLive} live on pages</span>
         {normalized ? (
           <>
             <span aria-hidden>·</span>
@@ -203,10 +186,7 @@ function GroupedList({ rows, sort }: { rows: RepoRowData[]; sort: SortMode }) {
               {liveCount > 0 ? (
                 <>
                   {" "}
-                  ·{" "}
-                  <span style={{ color: "var(--accent-deep)" }}>
-                    {liveCount} live
-                  </span>
+                  · <span style={{ color: "var(--accent-deep)" }}>{liveCount} live</span>
                 </>
               ) : null}
             </span>
@@ -224,16 +204,8 @@ function GroupedList({ rows, sort }: { rows: RepoRowData[]; sort: SortMode }) {
   );
 }
 
-function RepoCard({
-  row,
-  highlight,
-}: {
-  row: RepoRowData;
-  highlight?: string;
-}) {
-  const cardStyle = row.pagesLive
-    ? { borderLeft: "1px solid var(--accent)" }
-    : undefined;
+function RepoCard({ row, highlight }: { row: RepoRowData; highlight?: string }) {
+  const cardStyle = row.pagesLive ? { borderLeft: "1px solid var(--accent)" } : undefined;
   return (
     <Link
       href={`/repos/${row.owner}/${row.name}`}
@@ -242,15 +214,8 @@ function RepoCard({
     >
       <div className="flex flex-wrap items-baseline justify-between gap-3">
         <div className="flex items-baseline gap-2">
-          <span
-            className="display text-2xl"
-            style={{ fontFamily: "var(--font-display)" }}
-          >
-            <HighlightedName
-              owner={row.owner}
-              name={row.name}
-              highlight={highlight}
-            />
+          <span className="display text-2xl" style={{ fontFamily: "var(--font-display)" }}>
+            <HighlightedName owner={row.owner} name={row.name} highlight={highlight} />
           </span>
           <VisibilityBadge value={row.visibility} />
         </div>
@@ -358,11 +323,7 @@ function BuildStatus({ run }: { run: RepoRowData["latestRun"] }) {
         ? undefined
         : "bad";
   const symbol =
-    run.status === "success"
-      ? "✓"
-      : run.status === "failed" || run.status === "error"
-        ? "✗"
-        : "·";
+    run.status === "success" ? "✓" : run.status === "failed" || run.status === "error" ? "✗" : "·";
   const right =
     run.status === "success"
       ? formatDuration(run.startedAt, run.finishedAt)
@@ -384,10 +345,7 @@ function BuildStatus({ run }: { run: RepoRowData["latestRun"] }) {
 
 function VisibilityBadge({ value }: { value: string }) {
   return (
-    <span
-      className="stamp"
-      data-tone={value === "private" ? "closed" : undefined}
-    >
+    <span className="stamp" data-tone={value === "private" ? "closed" : undefined}>
       {value}
     </span>
   );
@@ -420,10 +378,7 @@ function SortChip({
 function InitialEmptyState({ signedIn }: { signedIn: boolean }) {
   return (
     <div className="card">
-      <p
-        className="display text-2xl"
-        style={{ fontFamily: "var(--font-display)" }}
-      >
+      <p className="display text-2xl" style={{ fontFamily: "var(--font-display)" }}>
         No repos yet.
       </p>
       <p className="mt-2 text-[color:var(--ink-soft)]">
@@ -432,8 +387,7 @@ function InitialEmptyState({ signedIn }: { signedIn: boolean }) {
             <Link href="/repos/new" className="link">
               Create your first repo
             </Link>{" "}
-            from the form, or run{" "}
-            <code className="kbd">npm run seed:demo</code> to populate two
+            from the form, or run <code className="kbd">npm run seed:demo</code> to populate two
             example sites. The{" "}
             <Link href="/" className="link">
               quickstart on the landing page
@@ -445,9 +399,8 @@ function InitialEmptyState({ signedIn }: { signedIn: boolean }) {
             <Link href="/login" className="link">
               Sign in
             </Link>{" "}
-            to create one from the dashboard, or run{" "}
-            <code className="kbd">npm run seed:demo</code> to populate two
-            example sites.
+            to create one from the dashboard, or run <code className="kbd">npm run seed:demo</code>{" "}
+            to populate two example sites.
           </>
         )}
       </p>
@@ -466,20 +419,12 @@ function FilterEmptyState({
 }) {
   return (
     <div className="card">
-      <p
-        className="display text-2xl"
-        style={{ fontFamily: "var(--font-display)" }}
-      >
+      <p className="display text-2xl" style={{ fontFamily: "var(--font-display)" }}>
         No matches for <em>{filter}</em>.
       </p>
       <p className="mt-2 text-[color:var(--ink-soft)]">
         Try a shorter substring, or{" "}
-        <Button
-          type="button"
-          variant="link"
-          onClick={onClear}
-          className="link h-auto p-0"
-        >
+        <Button type="button" variant="link" onClick={onClear} className="link h-auto p-0">
           clear the filter
         </Button>
         .{" "}
diff --git a/src/app/repos/new/new-repo-form.tsx b/src/app/repos/new/new-repo-form.tsx
index d6da1bf..822954c 100644
--- a/src/app/repos/new/new-repo-form.tsx
+++ b/src/app/repos/new/new-repo-form.tsx
@@ -1,17 +1,17 @@
 "use client";
 
-import { useRouter } from "next/navigation";
-import { useState } from "react";
-import { authedFetch } from "@/lib/auth/csrf-client";
 import {
   Button,
   Input,
   Select,
-  SelectTrigger,
-  SelectValue,
   SelectContent,
   SelectItem,
+  SelectTrigger,
+  SelectValue,
 } from "@mind-studio/ui";
+import { useRouter } from "next/navigation";
+import { useState } from "react";
+import { authedFetch } from "@/lib/auth/csrf-client";
 
 type Props = {
   owner: string;
@@ -65,10 +65,7 @@ export function NewRepoForm({ owner, ownerWebId, ownerPodRoot }: Props) {
         >
           Owner
         </p>
-        <p
-          className="mt-1 text-[color:var(--ink)]"
-          style={{ fontFamily: "var(--font-mono-src)" }}
-        >
+        <p className="mt-1 text-[color:var(--ink)]" style={{ fontFamily: "var(--font-mono-src)" }}>
           {owner}
         </p>
         <p
@@ -120,8 +117,8 @@ export function NewRepoForm({ owner, ownerWebId, ownerPodRoot }: Props) {
           className="text-[11px] text-[color:var(--ink-faint)]"
           style={{ fontFamily: "var(--font-mono-src)" }}
         >
-          Letters, digits, <code>.</code> <code>_</code> <code>-</code> · must start
-          with a letter or digit · max 64 chars
+          Letters, digits, <code>.</code> <code>_</code> <code>-</code> · must start with a letter
+          or digit · max 64 chars
         </span>
       </label>
 
@@ -135,9 +132,7 @@ export function NewRepoForm({ owner, ownerWebId, ownerPodRoot }: Props) {
           </span>
           <Select
             value={visibility}
-            onValueChange={(value) =>
-              setVisibility(value as "public" | "private")
-            }
+            onValueChange={(value) => setVisibility(value as "public" | "private")}
             disabled={submitting}
           >
             <SelectTrigger style={{ fontFamily: "var(--font-mono-src)" }}>
@@ -145,9 +140,7 @@ export function NewRepoForm({ owner, ownerWebId, ownerPodRoot }: Props) {
             </SelectTrigger>
             <SelectContent style={{ fontFamily: "var(--font-mono-src)" }}>
               <SelectItem value="public">public</SelectItem>
-              <SelectItem value="private">
-                private (push token also required to clone)
-              </SelectItem>
+              <SelectItem value="private">private (push token also required to clone)</SelectItem>
             </SelectContent>
           </Select>
         </label>
@@ -178,8 +171,7 @@ export function NewRepoForm({ owner, ownerWebId, ownerPodRoot }: Props) {
           style={{
             borderColor: "var(--status-bad)",
             color: "var(--status-bad)",
-            background:
-              "color-mix(in srgb, var(--status-bad) 8%, transparent)",
+            background: "color-mix(in srgb, var(--status-bad) 8%, transparent)",
           }}
         >
           {error}
@@ -187,10 +179,7 @@ export function NewRepoForm({ owner, ownerWebId, ownerPodRoot }: Props) {
       ) : null}
 
       <div className="flex flex-wrap items-center gap-4 pt-1">
-        <Button
-          type="submit"
-          disabled={submitting || name.trim().length === 0}
-        >
+        <Button type="submit" disabled={submitting || name.trim().length === 0}>
           {submitting ? "Creating…" : "Create repo"}
         </Button>
         <p
diff --git a/src/app/repos/new/page.tsx b/src/app/repos/new/page.tsx
index d87bb2d..325a70f 100644
--- a/src/app/repos/new/page.tsx
+++ b/src/app/repos/new/page.tsx
@@ -1,7 +1,7 @@
 import Link from "next/link";
 import { readSession } from "@/lib/auth/session";
-import { getUserByWebId } from "@/lib/registry/users";
 import { listRepos } from "@/lib/registry/repos";
+import { getUserByWebId } from "@/lib/registry/users";
 import { NewRepoForm } from "./new-repo-form";
 
 export const dynamic = "force-dynamic";
@@ -48,9 +48,8 @@ export default async function NewRepoPage() {
     return (
       <Shell>
         <p className="text-[color:var(--ink-soft)]">
-          Your session is signed in but we don&apos;t have an owner slug or
-          pod root on file yet. Finish signing up to register your pod with
-          this bridge.
+          Your session is signed in but we don&apos;t have an owner slug or pod root on file yet.
+          Finish signing up to register your pod with this bridge.
         </p>
         <p className="mt-4">
           <Link href="/signup" className="link">
@@ -63,11 +62,7 @@ export default async function NewRepoPage() {
 
   return (
     <Shell>
-      <NewRepoForm
-        owner={owner}
-        ownerWebId={session.webId}
-        ownerPodRoot={podRoot}
-      />
+      <NewRepoForm owner={owner} ownerWebId={session.webId} ownerPodRoot={podRoot} />
     </Shell>
   );
 }
@@ -88,11 +83,9 @@ function Shell({ children }: { children: React.ReactNode }) {
         New <em>repo</em>.
       </h1>
       <p className="mt-4 max-w-xl text-[color:var(--ink-soft)]">
-        Creates a bare Git repository on this bridge and writes a Turtle
-        description into your pod under{" "}
-        <code className="kbd">/codespaces/{"{name}"}/index.ttl</code>. You
-        can enable Mind Pages and mint push tokens from the repo&apos;s
-        detail page afterwards.
+        Creates a bare Git repository on this bridge and writes a Turtle description into your pod
+        under <code className="kbd">/codespaces/{"{name}"}/index.ttl</code>. You can enable Mind
+        Pages and mint push tokens from the repo&apos;s detail page afterwards.
       </p>
 
       <hr className="hairline my-8" />
diff --git a/src/app/repos/page.tsx b/src/app/repos/page.tsx
index c5fa9e4..5507ac1 100644
--- a/src/app/repos/page.tsx
+++ b/src/app/repos/page.tsx
@@ -1,11 +1,8 @@
 import Link from "next/link";
-import {
-  listRepos,
-  getPagesConfig,
-} from "@/lib/registry/repos";
-import { getLatestRunForRepo } from "@/lib/registry/runs";
-import { isOrg } from "@/lib/registry/owners";
 import { readSession } from "@/lib/auth/session";
+import { isOrg } from "@/lib/registry/owners";
+import { getPagesConfig, listRepos } from "@/lib/registry/repos";
+import { getLatestRunForRepo } from "@/lib/registry/runs";
 import { RepoList, type RepoRowData } from "./_components/repo-list";
 
 export const dynamic = "force-dynamic";
@@ -85,9 +82,8 @@ export default async function ReposPage() {
         )}
       </div>
       <p className="mt-4 max-w-2xl text-[color:var(--ink-soft)]">
-        Everything registered with this bridge. Each row is a real bare Git
-        repository on disk plus, optionally, a Mind Pages target on the
-        owner&apos;s Solid Pod.
+        Everything registered with this bridge. Each row is a real bare Git repository on disk plus,
+        optionally, a Mind Pages target on the owner&apos;s Solid Pod.
       </p>
 
       <hr className="hairline my-8" />
diff --git a/src/app/signup/signup-form.tsx b/src/app/signup/signup-form.tsx
index eb490c5..656d289 100644
--- a/src/app/signup/signup-form.tsx
+++ b/src/app/signup/signup-form.tsx
@@ -1,8 +1,8 @@
 "use client";
 
-import { useState } from "react";
-import { useRouter } from "next/navigation";
 import { Button, Input } from "@mind-studio/ui";
+import { useRouter } from "next/navigation";
+import { useState } from "react";
 
 export function SignupForm() {
   const router = useRouter();
@@ -53,9 +53,7 @@ export function SignupForm() {
         />
       </label>
       <label className="block text-sm">
-        <span className="block text-[color:var(--ink-soft)] mb-1">
-          Password (≥8 chars)
-        </span>
+        <span className="block text-[color:var(--ink-soft)] mb-1">Password (≥8 chars)</span>
         <Input
           type="password"
           required
diff --git a/src/app/v2/[[...path]]/route.ts b/src/app/v2/[[...path]]/route.ts
index d5a6667..8983816 100644
--- a/src/app/v2/[[...path]]/route.ts
+++ b/src/app/v2/[[...path]]/route.ts
@@ -1,25 +1,20 @@
-import { NextResponse } from "next/server";
 import { createHash } from "node:crypto";
-import { getRepo, validateName, type Repo } from "@/lib/registry/repos";
+import { NextResponse } from "next/server";
+import { authenticatePackagePush } from "@/lib/packages/auth";
+import { type OciName, parseOciRequest } from "@/lib/packages/oci";
+import { abortUpload, appendChunk, finishUpload, startUpload } from "@/lib/packages/oci-uploads";
+import { getRepoContentStore } from "@/lib/packages/repo-store";
 import {
-  upsertPackageVersion,
   getPackageVersion,
+  isDigestRef,
   listVersions,
+  PackageError,
+  upsertPackageVersion,
   validatePackageName,
   validateVersion,
-  isDigestRef,
-  PackageError,
 } from "@/lib/packages/store";
-import { authenticatePackagePush } from "@/lib/packages/auth";
-import { getRepoContentStore } from "@/lib/packages/repo-store";
-import { assertCanStorePackage, QuotaExceededError, QUOTAS } from "@/lib/registry/quotas";
-import { parseOciRequest, type OciName } from "@/lib/packages/oci";
-import {
-  startUpload,
-  appendChunk,
-  finishUpload,
-  abortUpload,
-} from "@/lib/packages/oci-uploads";
+import { assertCanStorePackage, QUOTAS, QuotaExceededError } from "@/lib/registry/quotas";
+import { getRepo, type Repo, validateName } from "@/lib/registry/repos";
 import { OwnerFetchUnavailableError } from "@/lib/solid/fetch-for-owner";
 
 export const runtime = "nodejs";
@@ -122,9 +117,7 @@ export async function PATCH(req: Request, { params }: Params) {
   }
   if (size > QUOTAS.maxPackageBlobBytes) {
     abortUpload(target.uuid);
-    return quota(
-      new QuotaExceededError("maxPackageBlobBytes", QUOTAS.maxPackageBlobBytes, size),
-    );
+    return quota(new QuotaExceededError("maxPackageBlobBytes", QUOTAS.maxPackageBlobBytes, size));
   }
   return new NextResponse(null, {
     status: 202,
diff --git a/src/components/auth-cta-server.tsx b/src/components/auth-cta-server.tsx
index e58fc58..c23165c 100644
--- a/src/components/auth-cta-server.tsx
+++ b/src/components/auth-cta-server.tsx
@@ -1,8 +1,8 @@
 import "server-only";
 import { readSession } from "@/lib/auth/session";
-import { displayNameForWebId } from "@/lib/solid/web-id";
-import { getUserByWebId } from "@/lib/registry/users";
 import { listRepos } from "@/lib/registry/repos";
+import { getUserByWebId } from "@/lib/registry/users";
+import { displayNameForWebId } from "@/lib/solid/web-id";
 import { AuthCta } from "./auth-cta";
 
 function initialsForName(source: string): string {
diff --git a/src/components/auth-cta.tsx b/src/components/auth-cta.tsx
index cf615da..2ee375c 100644
--- a/src/components/auth-cta.tsx
+++ b/src/components/auth-cta.tsx
@@ -1,10 +1,10 @@
 "use client";
 
-import { useEffect, useLayoutEffect, useRef, useState } from "react";
-import { createPortal } from "react-dom";
+import { Button } from "@mind-studio/ui";
 import Link from "next/link";
 import { useRouter } from "next/navigation";
-import { Button } from "@mind-studio/ui";
+import { useEffect, useLayoutEffect, useRef, useState } from "react";
+import { createPortal } from "react-dom";
 import { authedFetch } from "@/lib/auth/csrf-client";
 
 type SignedInProps = {
@@ -125,10 +125,7 @@ function UserMenu({ session }: { session: SignedInProps }) {
         }}
       >
         <div className="px-3 pb-2">
-          <p
-            className="truncate text-[color:var(--ink)]"
-            style={{ fontWeight: 500 }}
-          >
+          <p className="truncate text-[color:var(--ink)]" style={{ fontWeight: 500 }}>
             {session.displayName}
           </p>
           <p
diff --git a/src/components/branch-picker.tsx b/src/components/branch-picker.tsx
index 0aaa125..65cd5a2 100644
--- a/src/components/branch-picker.tsx
+++ b/src/components/branch-picker.tsx
@@ -1,14 +1,8 @@
 "use client";
 
+import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from "@mind-studio/ui";
 import { useRouter } from "next/navigation";
 import { useId, useState } from "react";
-import {
-  Select,
-  SelectContent,
-  SelectItem,
-  SelectTrigger,
-  SelectValue,
-} from "@mind-studio/ui";
 
 /**
  * Small `<select>` for switching the displayed branch on a tree/blob
diff --git a/src/components/copy-button.tsx b/src/components/copy-button.tsx
index 4b41172..a6a9e75 100644
--- a/src/components/copy-button.tsx
+++ b/src/components/copy-button.tsx
@@ -1,7 +1,7 @@
 "use client";
 
-import { useState } from "react";
 import { Button } from "@mind-studio/ui";
+import { useState } from "react";
 
 /**
  * One-shot clipboard copy with a short success indicator. Falls back
diff --git a/src/components/diff-view.tsx b/src/components/diff-view.tsx
index 685a65d..1e22aa9 100644
--- a/src/components/diff-view.tsx
+++ b/src/components/diff-view.tsx
@@ -9,13 +9,7 @@
  * inline classes so the dark-theme overrides in globals.css can flip
  * them via `[data-theme='dark']` selectors if/when wanted.
  */
-export function DiffView({
-  patch,
-  truncated,
-}: {
-  patch: string;
-  truncated: boolean;
-}) {
+export function DiffView({ patch, truncated }: { patch: string; truncated: boolean }) {
   const lines = patch.split("\n");
   // Drop the trailing empty line from a final newline so we don't
   // render a phantom row at the bottom.
@@ -29,10 +23,7 @@ export function DiffView({
         {lines.map((line, i) => {
           const kind = classify(line);
           return (
-            <div
-              key={i}
-              className={`px-4 whitespace-pre ${classNameFor(kind)}`}
-            >
+            <div key={i} className={`px-4 whitespace-pre ${classNameFor(kind)}`}>
               {line || " "}
             </div>
           );
diff --git a/src/components/feedback-launcher.tsx b/src/components/feedback-launcher.tsx
index 3965a89..71db11f 100644
--- a/src/components/feedback-launcher.tsx
+++ b/src/components/feedback-launcher.tsx
@@ -12,11 +12,8 @@ import { FeedbackWidget } from "@mind-studio/core/feedback";
  * build-time inlined via `NEXT_PUBLIC_FEEDBACK_INBOX`.
  */
 const feedbackInbox =
-  process.env.NEXT_PUBLIC_FEEDBACK_INBOX ??
-  "http://localhost:3011/alice/codespaces-feedback/";
+  process.env.NEXT_PUBLIC_FEEDBACK_INBOX ?? "http://localhost:3011/alice/codespaces-feedback/";
 
 export function FeedbackLauncher() {
-  return (
-    <FeedbackWidget appKey="codespaces" inbox={feedbackInbox} variant="floating" />
-  );
+  return <FeedbackWidget appKey="codespaces" inbox={feedbackInbox} variant="floating" />;
 }
diff --git a/src/components/main-nav.tsx b/src/components/main-nav.tsx
index 3a19a2c..6ac7666 100644
--- a/src/components/main-nav.tsx
+++ b/src/components/main-nav.tsx
@@ -1,8 +1,8 @@
 "use client";
 
+import { Button } from "@mind-studio/ui";
 import Link from "next/link";
 import { usePathname } from "next/navigation";
-import { Button } from "@mind-studio/ui";
 
 type Item = {
   href: string;
diff --git a/src/components/matrix-rain.tsx b/src/components/matrix-rain.tsx
index 7c88982..efc0b0d 100644
--- a/src/components/matrix-rain.tsx
+++ b/src/components/matrix-rain.tsx
@@ -3,21 +3,81 @@
 import { useEffect, useRef } from "react";
 
 const STREAM = [
-  "git push", "git pull", "git fetch", "git clone", "git commit", "git rebase",
-  "main", "HEAD", "origin", "refs/heads", "refs/tags", "branch",
-  "pod", "WebID", "Solid", "OIDC", "DPoP", "Bearer",
-  "ttl", "turtle", "rdf", "ldp", "vcard", "foaf", "dcterms", "xsd",
-  ".ttl", ".html", ".css", ".js", "index.html", "card#me",
-  "/alice/", "/huhn511/", "/public/", "/sites/", "/codespaces/", "/profile/",
-  "alice/bakery", "alice/notes", "alice/marked-blog", "alice/tailwind-site",
-  "alice/about", "alice/built-site", "huhn511/hello", "mind/compass",
-  ".mind/workflow.yml", "node:22-alpine", "docker run --rm",
-  "200 OK", "201 Created", "204 No Content", "401", "403", "404", "409",
-  "GET", "POST", "PUT", "DELETE", "PATCH",
-  "smart-http", "post-receive", "bare repo", "push-token",
-  "Mind Codespaces", "Solid Git Bridge",
-  "sha256", "0xdeadbeef", "0xcafe", "0xfeed",
-  "codespaces", "registry", "publisher", "coder",
+  "git push",
+  "git pull",
+  "git fetch",
+  "git clone",
+  "git commit",
+  "git rebase",
+  "main",
+  "HEAD",
+  "origin",
+  "refs/heads",
+  "refs/tags",
+  "branch",
+  "pod",
+  "WebID",
+  "Solid",
+  "OIDC",
+  "DPoP",
+  "Bearer",
+  "ttl",
+  "turtle",
+  "rdf",
+  "ldp",
+  "vcard",
+  "foaf",
+  "dcterms",
+  "xsd",
+  ".ttl",
+  ".html",
+  ".css",
+  ".js",
+  "index.html",
+  "card#me",
+  "/alice/",
+  "/huhn511/",
+  "/public/",
+  "/sites/",
+  "/codespaces/",
+  "/profile/",
+  "alice/bakery",
+  "alice/notes",
+  "alice/marked-blog",
+  "alice/tailwind-site",
+  "alice/about",
+  "alice/built-site",
+  "huhn511/hello",
+  "mind/compass",
+  ".mind/workflow.yml",
+  "node:22-alpine",
+  "docker run --rm",
+  "200 OK",
+  "201 Created",
+  "204 No Content",
+  "401",
+  "403",
+  "404",
+  "409",
+  "GET",
+  "POST",
+  "PUT",
+  "DELETE",
+  "PATCH",
+  "smart-http",
+  "post-receive",
+  "bare repo",
+  "push-token",
+  "Mind Codespaces",
+  "Solid Git Bridge",
+  "sha256",
+  "0xdeadbeef",
+  "0xcafe",
+  "0xfeed",
+  "codespaces",
+  "registry",
+  "publisher",
+  "coder",
 ];
 
 const HEAD_COLOR = "rgba(220, 255, 225, ";
diff --git a/src/components/relative-time.tsx b/src/components/relative-time.tsx
index 9b7eefa..317fb5e 100644
--- a/src/components/relative-time.tsx
+++ b/src/components/relative-time.tsx
@@ -19,12 +19,7 @@ export function RelativeTime({
 }) {
   const iso = new Date(ts).toISOString();
   return (
-    <time
-      dateTime={iso}
-      title={formatAbsoluteIso(ts)}
-      className={className}
-      style={style}
-    >
+    <time dateTime={iso} title={formatAbsoluteIso(ts)} className={className} style={style}>
       {formatRelativeTime(ts)}
     </time>
   );
diff --git a/src/components/sign-in-wall.tsx b/src/components/sign-in-wall.tsx
index 4fe78a2..28c62b5 100644
--- a/src/components/sign-in-wall.tsx
+++ b/src/components/sign-in-wall.tsx
@@ -1,5 +1,5 @@
-import Link from "next/link";
 import { Button } from "@mind-studio/ui";
+import Link from "next/link";
 
 /**
  * Polite "you need to sign in to do this" card. Used in two places:
@@ -30,9 +30,7 @@ export function SignInWall({
   // /login takes `?returnTo=<local path>` (validated server-side; cross-origin
   // values are dropped). Pass the same value to /signup and /connect — they
   // currently ignore it, but the param is harmless and we can wire it up later.
-  const safe = next && next.startsWith("/") && !next.startsWith("//")
-    ? next
-    : null;
+  const safe = next && next.startsWith("/") && !next.startsWith("//") ? next : null;
   const qs = safe ? `?returnTo=${encodeURIComponent(safe)}` : "";
   const loginHref = `/login${qs}`;
   const signupHref = `/signup${qs}`;
@@ -54,9 +52,8 @@ export function SignInWall({
           You need a session to <strong>{action}</strong>.
         </p>
         <p className="mt-1 text-[12px] leading-relaxed text-muted-foreground">
-          The bridge never sees your pod password — sign-in happens against
-          your own pod, and the bridge only stores the resulting refresh
-          token (encrypted at rest).
+          The bridge never sees your pod password — sign-in happens against your own pod, and the
+          bridge only stores the resulting refresh token (encrypted at rest).
         </p>
         <div className="mt-3 flex flex-wrap items-center gap-2">
           <Button asChild size="sm">
diff --git a/src/components/theme-shell.tsx b/src/components/theme-shell.tsx
index cd21305..b2c42cd 100644
--- a/src/components/theme-shell.tsx
+++ b/src/components/theme-shell.tsx
@@ -1,15 +1,8 @@
 "use client";
 
-import {
-  createContext,
-  useCallback,
-  useContext,
-  useEffect,
-  useMemo,
-  useState,
-} from "react";
 import { ThemeProvider } from "@mind-studio/ui";
 import { mind } from "@mind-studio/ui/themes";
+import { createContext, useCallback, useContext, useEffect, useMemo, useState } from "react";
 import { neo } from "@/lib/theme/neo";
 
 export type Brand = "mind" | "neo";
diff --git a/src/components/theme-toggle.tsx b/src/components/theme-toggle.tsx
index 52b69af..357501a 100644
--- a/src/components/theme-toggle.tsx
+++ b/src/components/theme-toggle.tsx
@@ -1,6 +1,5 @@
 "use client";
 
-import { useEffect, useState } from "react";
 import {
   Button,
   DropdownMenu,
@@ -12,6 +11,7 @@ import {
   DropdownMenuTrigger,
   useMindTheme,
 } from "@mind-studio/ui";
+import { useEffect, useState } from "react";
 import { useBrand } from "@/components/theme-shell";
 
 /**
@@ -50,10 +50,7 @@ export function ThemeToggle() {
       </DropdownMenuTrigger>
       <DropdownMenuContent align="end" className="w-44">
         <DropdownMenuLabel>Appearance</DropdownMenuLabel>
-        <DropdownMenuRadioGroup
-          value={mode}
-          onValueChange={(v) => setMode(v)}
-        >
+        <DropdownMenuRadioGroup value={mode} onValueChange={(v) => setMode(v)}>
           <DropdownMenuRadioItem value="light" data-testid="mode-light">
             Light
           </DropdownMenuRadioItem>
diff --git a/src/lib/agents/bootstrap.ts b/src/lib/agents/bootstrap.ts
index 898922c..7fdc830 100644
--- a/src/lib/agents/bootstrap.ts
+++ b/src/lib/agents/bootstrap.ts
@@ -1,14 +1,9 @@
 import "server-only";
-import {
-  registerDriver,
-  registerRole,
-  listRoles,
-  setDefaultDriver,
-} from "@/lib/agents/registry";
-import { echoDriver } from "@/lib/agents/drivers/echo";
-import { openrouterDriver } from "@/lib/agents/drivers/openrouter";
 import { coderDriver } from "@/lib/agents/drivers/coder";
 import { codexDriver } from "@/lib/agents/drivers/codex";
+import { echoDriver } from "@/lib/agents/drivers/echo";
+import { openrouterDriver } from "@/lib/agents/drivers/openrouter";
+import { listRoles, registerDriver, registerRole, setDefaultDriver } from "@/lib/agents/registry";
 
 /**
  * Wire the available drivers + the demo roster. Idempotent — safe to
@@ -49,9 +44,7 @@ export function ensureAgentsBootstrap(): void {
   // to POST /api/agents/dispatch so it runs side-by-side with `coder`
   // without double-firing on the same issue event.
   registerDriver(codexDriver);
-  console.log(
-    `[agents] codex driver active (runtime=${process.env.MIND_CODEX_RUNTIME ?? "host"})`,
-  );
+  console.log(`[agents] codex driver active (runtime=${process.env.MIND_CODEX_RUNTIME ?? "host"})`);
 
   if (process.env.OPENROUTER_API_KEY) {
     registerDriver(openrouterDriver);
diff --git a/src/lib/agents/dispatch.ts b/src/lib/agents/dispatch.ts
index bb89adb..7ddb5a6 100644
--- a/src/lib/agents/dispatch.ts
+++ b/src/lib/agents/dispatch.ts
@@ -1,27 +1,19 @@
 import "server-only";
 import * as path from "node:path";
+import { getDefaultDriverName, getDriver, rolesForEvent } from "@/lib/agents/registry";
 import type { AgentEvent, DriverResult, Role } from "@/lib/agents/types";
-import {
-  getDefaultDriverName,
-  getDriver,
-  rolesForEvent,
-} from "@/lib/agents/registry";
-import {
-  createAgentRun,
-  finishAgentRun,
-} from "@/lib/registry/agent-runs";
-import { getRepo } from "@/lib/registry/repos";
-import { getIssueByNumber } from "@/lib/registry/issues";
-import { buildPreviewForPull } from "@/lib/pages/preview";
 import { Metrics } from "@/lib/metrics";
+import { buildPreviewForPull } from "@/lib/pages/preview";
+import { createAgentRun, finishAgentRun } from "@/lib/registry/agent-runs";
+import { getIssueByNumber } from "@/lib/registry/issues";
+import { getRepo } from "@/lib/registry/repos";
 
 /**
  * Where streamed per-run log files live. The registry stores just the
  * filename (`{runId}.log`); the directory can be relocated via
  * AGENT_LOGS_DIR without rewriting any rows.
  */
-export const AGENT_LOGS_DIR =
-  process.env.AGENT_LOGS_DIR ?? path.join(process.cwd(), ".agent-logs");
+export const AGENT_LOGS_DIR = process.env.AGENT_LOGS_DIR ?? path.join(process.cwd(), ".agent-logs");
 
 /**
  * Render a prompt for a role given the event. v0 is intentionally
@@ -80,10 +72,7 @@ export async function dispatch(
 
   const repo = getRepo(event.repoOwner, event.repoName);
   const issueNumber = "issueNumber" in event ? event.issueNumber : null;
-  const issue =
-    repo && issueNumber !== null
-      ? getIssueByNumber(repo.id, issueNumber)
-      : null;
+  const issue = repo && issueNumber !== null ? getIssueByNumber(repo.id, issueNumber) : null;
 
   for (const role of roles) {
     const driverName = opts.driver ?? role.driver ?? getDefaultDriverName();
@@ -124,8 +113,7 @@ export async function dispatch(
           driver: driverName,
         })
       : null;
-    const logPath =
-      run?.logPath ? path.join(AGENT_LOGS_DIR, run.logPath) : null;
+    const logPath = run?.logPath ? path.join(AGENT_LOGS_DIR, run.logPath) : null;
 
     let result: DriverResult;
     try {
@@ -158,9 +146,7 @@ export async function dispatch(
     // so the result is viewable before merge. Single chokepoint → covers every
     // driver. SHA-guarded inside buildPreviewForPull, so re-runs are cheap.
     if (repo && result.status === "ok") {
-      const data = result.data as
-        | { mode?: string; pullNumber?: number }
-        | undefined;
+      const data = result.data as { mode?: string; pullNumber?: number } | undefined;
       if (data?.mode === "pr" && typeof data.pullNumber === "number") {
         const pn = data.pullNumber;
         void buildPreviewForPull(repo.id, pn).catch((e) =>
diff --git a/src/lib/agents/drivers/coder.ts b/src/lib/agents/drivers/coder.ts
index a4ac75a..18f5b8f 100644
--- a/src/lib/agents/drivers/coder.ts
+++ b/src/lib/agents/drivers/coder.ts
@@ -1,34 +1,29 @@
 import "server-only";
-import { spawn, type ChildProcess } from "node:child_process";
-import * as fs from "node:fs/promises";
+import { type ChildProcess, spawn } from "node:child_process";
 import { createWriteStream, type WriteStream } from "node:fs";
+import * as fs from "node:fs/promises";
 import * as os from "node:os";
 import * as path from "node:path";
+import { AGENT_LOGS_DIR } from "@/lib/agents/dispatch";
 import type { AgentEvent, Driver } from "@/lib/agents/types";
-import { getRepo, type Repo } from "@/lib/registry/repos";
+import { formatOpencodeModel, getProvider, PROVIDERS } from "@/lib/ai-providers/providers";
+import { resolveCoderConfig } from "@/lib/ai-providers/store";
+import { debit, getBalance, ledgerEnabled, llmPrice } from "@/lib/ledger/client";
+import { gateEnvFallback } from "@/lib/ledger/policy";
 import {
   addComment,
   getIssueByNumber,
-  listComments,
-  setCommentPodUrl,
   type Issue,
   type IssueComment,
+  listComments,
+  setCommentPodUrl,
 } from "@/lib/registry/issues";
-import { commentUrl, writeCommentToPod } from "@/lib/solid/issues";
-import { writePullToPod } from "@/lib/solid/pulls";
 import { upsertPullRequest } from "@/lib/registry/pulls";
-import { validateName } from "@/lib/registry/repos";
-import { getOwnerFetch } from "@/lib/solid/fetch-for-owner";
+import { getRepo, type Repo, validateName } from "@/lib/registry/repos";
 import { ensureContainer, setPublicReadAcl } from "@/lib/solid/containers";
-import { resolveCoderConfig } from "@/lib/ai-providers/store";
-import { ledgerEnabled, getBalance, debit, llmPrice } from "@/lib/ledger/client";
-import { gateEnvFallback } from "@/lib/ledger/policy";
-import { AGENT_LOGS_DIR } from "@/lib/agents/dispatch";
-import {
-  PROVIDERS,
-  getProvider,
-  formatOpencodeModel,
-} from "@/lib/ai-providers/providers";
+import { getOwnerFetch } from "@/lib/solid/fetch-for-owner";
+import { commentUrl, writeCommentToPod } from "@/lib/solid/issues";
+import { writePullToPod } from "@/lib/solid/pulls";
 
 /**
  * Coder driver. Spawns opencode in a docker container against a clone
@@ -77,8 +72,7 @@ import {
 
 const DEFAULT_IMAGE = "mind-codespaces/coder:latest";
 const DEFAULT_TIMEOUT_S = 600;
-const GIT_DATA_DIR =
-  process.env.GIT_DATA_DIR ?? path.join(process.cwd(), ".git-data/repos");
+const GIT_DATA_DIR = process.env.GIT_DATA_DIR ?? path.join(process.cwd(), ".git-data/repos");
 const WORK_ROOT = process.env.MIND_CODER_WORKROOT ?? os.tmpdir();
 const AGENT_COMMENT_REL = ".mind/agent-comment.md";
 const AGENT_SCREENSHOTS_REL = ".mind/screenshots";
@@ -228,11 +222,7 @@ export const coderDriver: Driver = {
     const chargeRun = async () => {
       if (!meterRun || charged) return;
       charged = true;
-      const res = await debit(
-        repo.ownerWebId,
-        llmPrice(),
-        `builder:coder#${issueNumber}`,
-      );
+      const res = await debit(repo.ownerWebId, llmPrice(), `builder:coder#${issueNumber}`);
       if (res.ok) log(`[coder] metered ${llmPrice()} MIND (balance ${res.balance})`);
       else log(`[coder] meter debit failed (status ${res.status}) — not charging`);
     };
@@ -282,11 +272,9 @@ export const coderDriver: Driver = {
       ]);
       const branchExists = branchProbe.exit === 0;
       if (branchExists) {
-        const co = await sh(
-          "git",
-          ["-C", workDir, "checkout", "-B", branch, `origin/${branch}`],
-          { logStream },
-        );
+        const co = await sh("git", ["-C", workDir, "checkout", "-B", branch, `origin/${branch}`], {
+          logStream,
+        });
         if (co.exit !== 0) {
           return errorResult(
             `checkout of existing ${branch} failed (exit ${co.exit})`,
@@ -335,14 +323,7 @@ export const coderDriver: Driver = {
       // bridge's process env at exec time, so the key never appears in
       // `ps auxe`. We also forward MIND_AI_PROVIDER so the entrypoint
       // knows which provider block to leave enabled in auth.json.
-      const dockerArgs = [
-        "run",
-        "--rm",
-        "-v",
-        `${workDir}:/work`,
-        "--env",
-        "MIND_AI_PROVIDER",
-      ];
+      const dockerArgs = ["run", "--rm", "-v", `${workDir}:/work`, "--env", "MIND_AI_PROVIDER"];
       for (const envName of providerSpec.containerEnvNames) {
         dockerArgs.push("--env", envName);
       }
@@ -455,9 +436,7 @@ export const coderDriver: Driver = {
       log(
         `[coder] changed files (${changed.length}): ${changed.join(", ")}` +
           (wantsComment ? " [+agent-comment.md]" : "") +
-          (wantsScreenshots
-            ? ` [+${screenshotFiles.length} screenshot(s)]`
-            : ""),
+          (wantsScreenshots ? ` [+${screenshotFiles.length} screenshot(s)]` : ""),
       );
 
       // Mirror screenshots to host storage FIRST so a pod upload failure
@@ -556,9 +535,7 @@ export const coderDriver: Driver = {
       await fs
         .rm(path.join(workDir, AGENT_SCREENSHOTS_REL), { recursive: true, force: true })
         .catch(() => {});
-      await fs
-        .rm(path.join(workDir, AGENT_COMMENT_REL), { force: true })
-        .catch(() => {});
+      await fs.rm(path.join(workDir, AGENT_COMMENT_REL), { force: true }).catch(() => {});
 
       // `branch` and `branchExists` were declared up-front (before the
       // opencode run) so we could resume on top of a prior attempt. The
@@ -591,16 +568,12 @@ export const coderDriver: Driver = {
       for (const [label, args] of steps) {
         const r = await sh("git", args, { logStream });
         if (r.exit !== 0) {
-          return errorResult(
-            `git ${label} failed (exit ${r.exit})`,
-            r.stderr.slice(-800),
-          );
+          return errorResult(`git ${label} failed (exit ${r.exit})`, r.stderr.slice(-800));
         }
       }
       log(`[coder] pushed branch ${branch} to ${repoOwner}/${repoName}`);
 
-      const sourceSha = (await sh("git", ["-C", workDir, "rev-parse", "HEAD"]))
-        .stdout.trim();
+      const sourceSha = (await sh("git", ["-C", workDir, "rev-parse", "HEAD"])).stdout.trim();
       const prBody = [
         `Generated by the coder via opencode (model \`${orModel}\`).`,
         "",
@@ -708,13 +681,8 @@ function renderTaskPrompt(input: {
           "",
           `--- Conversation so far (${input.comments.length} comment(s)) ---`,
           ...input.comments.map((c, i) => {
-            const who =
-              c.agentRunId !== null ? "coder (you, earlier)" : c.authorWebId;
-            return [
-              `[${i + 1}] ${who}:`,
-              c.body.trim(),
-              "",
-            ].join("\n");
+            const who = c.agentRunId !== null ? "coder (you, earlier)" : c.authorWebId;
+            return [`[${i + 1}] ${who}:`, c.body.trim(), ""].join("\n");
           }),
           "--- End of conversation ---",
           "",
@@ -786,7 +754,7 @@ function renderTaskPrompt(input: {
     "If you do take screenshots:",
     "  - Take 1–3 that show the result of your change. Use",
     "    `browser_take_screenshot` with",
-    "    `filename: \"/work/.mind/screenshots/<descriptive-name>.png\"`.",
+    '    `filename: "/work/.mind/screenshots/<descriptive-name>.png"`.',
     "  - Stop after 3 screenshots — do not keep iterating in the browser.",
     "",
     "Screenshots in `.mind/screenshots/` are uploaded to the pod and",
@@ -891,8 +859,7 @@ async function uploadScreenshots(input: {
   const root = input.repo.ownerPodRoot.endsWith("/")
     ? input.repo.ownerPodRoot
     : `${input.repo.ownerPodRoot}/`;
-  const runSeg =
-    input.runId !== null ? `run-${input.runId}` : `run-${Date.now()}`;
+  const runSeg = input.runId !== null ? `run-${input.runId}` : `run-${Date.now()}`;
   const containers = [
     `${root}codespaces/`,
     `${root}codespaces/${input.repo.name}/`,
@@ -928,9 +895,7 @@ async function uploadScreenshots(input: {
         body: bytes,
       });
       if (!res.ok) {
-        input.log(
-          `[coder] screenshot PUT ${name} failed: ${res.status} ${res.statusText}`,
-        );
+        input.log(`[coder] screenshot PUT ${name} failed: ${res.status} ${res.statusText}`);
         continue;
       }
       uploaded.push({ name, url });
@@ -950,11 +915,7 @@ async function uploadScreenshots(input: {
  *  empty string when there are none so callers can `.filter(Boolean)`. */
 function renderScreenshotsSection(uploaded: UploadedShot[]): string {
   if (uploaded.length === 0) return "";
-  return [
-    "### Screenshots",
-    "",
-    ...uploaded.map((s) => `![${s.name}](${s.url})`),
-  ].join("\n");
+  return ["### Screenshots", "", ...uploaded.map((s) => `![${s.name}](${s.url})`)].join("\n");
 }
 
 function guessImageMime(name: string): string {
@@ -1060,9 +1021,7 @@ function unquotePath(p: string): string {
   return p;
 }
 
-async function openLogStream(
-  logPath: string | null,
-): Promise<WriteStream | null> {
+async function openLogStream(logPath: string | null): Promise<WriteStream | null> {
   if (!logPath) return null;
   await fs.mkdir(path.dirname(logPath), { recursive: true });
   return createWriteStream(logPath, { flags: "a" });
@@ -1102,7 +1061,7 @@ function sh(
     child.on("error", reject);
     child.on("close", (code) => {
       resolve({
-        exit: killed ? 124 : code ?? 0,
+        exit: killed ? 124 : (code ?? 0),
         stdout,
         stderr,
       });
diff --git a/src/lib/agents/drivers/codex.ts b/src/lib/agents/drivers/codex.ts
index 510259d..c379536 100644
--- a/src/lib/agents/drivers/codex.ts
+++ b/src/lib/agents/drivers/codex.ts
@@ -1,23 +1,23 @@
 import "server-only";
-import { spawn, type ChildProcess } from "node:child_process";
-import * as fs from "node:fs/promises";
+import { type ChildProcess, spawn } from "node:child_process";
 import { createWriteStream, type WriteStream } from "node:fs";
+import * as fs from "node:fs/promises";
 import * as os from "node:os";
 import * as path from "node:path";
+import { STATIC_EXPORT_RULES } from "@/lib/agents/prompt-fragments";
 import type { AgentEvent, Driver } from "@/lib/agents/types";
-import { getRepo, validateName, type Repo } from "@/lib/registry/repos";
 import {
   addComment,
   getIssueByNumber,
-  listComments,
-  setCommentPodUrl,
   type Issue,
   type IssueComment,
+  listComments,
+  setCommentPodUrl,
 } from "@/lib/registry/issues";
+import { upsertPullRequest } from "@/lib/registry/pulls";
+import { getRepo, type Repo, validateName } from "@/lib/registry/repos";
 import { commentUrl, writeCommentToPod } from "@/lib/solid/issues";
 import { writePullToPod } from "@/lib/solid/pulls";
-import { upsertPullRequest } from "@/lib/registry/pulls";
-import { STATIC_EXPORT_RULES } from "@/lib/agents/prompt-fragments";
 
 /**
  * Codex driver (PoC). A sibling of the `coder` (opencode) driver that
@@ -59,8 +59,7 @@ import { STATIC_EXPORT_RULES } from "@/lib/agents/prompt-fragments";
 
 const DEFAULT_IMAGE = "mind-codespaces/codex:latest";
 const DEFAULT_TIMEOUT_S = 600;
-const GIT_DATA_DIR =
-  process.env.GIT_DATA_DIR ?? path.join(process.cwd(), ".git-data/repos");
+const GIT_DATA_DIR = process.env.GIT_DATA_DIR ?? path.join(process.cwd(), ".git-data/repos");
 const WORK_ROOT = process.env.MIND_CODER_WORKROOT ?? os.tmpdir();
 const AGENT_COMMENT_REL = ".mind/agent-comment.md";
 const AGENT_WEBID = "mind:agent:codex";
@@ -209,11 +208,9 @@ export const codexDriver: Driver = {
       ]);
       const branchExists = branchProbe.exit === 0;
       if (branchExists) {
-        const co = await sh(
-          "git",
-          ["-C", workDir, "checkout", "-B", branch, `origin/${branch}`],
-          { logStream },
-        );
+        const co = await sh("git", ["-C", workDir, "checkout", "-B", branch, `origin/${branch}`], {
+          logStream,
+        });
         if (co.exit !== 0) {
           return errorResult(
             `checkout of existing ${branch} failed (exit ${co.exit})`,
@@ -307,22 +304,16 @@ export const codexDriver: Driver = {
       }
       const elapsed = ((Date.now() - t0) / 1000).toFixed(1);
       log(`[codex] exit=${cx.exit} (${elapsed}s)`);
-      const cxTail = (cx.stdout + (cx.stderr ? `\n[stderr]\n${cx.stderr}` : "")).slice(
-        -2000,
+      const cxTail = (cx.stdout + (cx.stderr ? `\n[stderr]\n${cx.stderr}` : "")).slice(-2000);
+      summaryLines.push(
+        `codex exit=${cx.exit} (runtime=${runtime}, model=${modelLabel}, ${elapsed}s)`,
       );
-      summaryLines.push(`codex exit=${cx.exit} (runtime=${runtime}, model=${modelLabel}, ${elapsed}s)`);
 
       // 4. Inspect what codex produced.
       //   - no changes at all → error (model went silent / refused)
       //   - only .mind/agent-comment.md → comment-only (ASK) path
       //   - code changes → PR path
-      const status = await sh("git", [
-        "-C",
-        workDir,
-        "status",
-        "--porcelain",
-        "-uall",
-      ]);
+      const status = await sh("git", ["-C", workDir, "status", "--porcelain", "-uall"]);
       const dirty = status.stdout.trimEnd();
       const commentBody = await readAgentCommentFile(workDir);
       const wantsComment = commentBody !== null;
@@ -383,9 +374,7 @@ export const codexDriver: Driver = {
       await fs
         .rm(path.join(workDir, ".playwright-mcp"), { recursive: true, force: true })
         .catch(() => {});
-      await fs
-        .rm(path.join(workDir, AGENT_COMMENT_REL), { force: true })
-        .catch(() => {});
+      await fs.rm(path.join(workDir, AGENT_COMMENT_REL), { force: true }).catch(() => {});
 
       const steps: Array<[string, string[]]> = [
         ["config", ["-C", workDir, "config", "user.email", AGENT_WEBID]],
@@ -413,16 +402,12 @@ export const codexDriver: Driver = {
       for (const [label, args] of steps) {
         const r = await sh("git", args, { logStream });
         if (r.exit !== 0) {
-          return errorResult(
-            `git ${label} failed (exit ${r.exit})`,
-            r.stderr.slice(-800),
-          );
+          return errorResult(`git ${label} failed (exit ${r.exit})`, r.stderr.slice(-800));
         }
       }
       log(`[codex] pushed branch ${branch} to ${repoOwner}/${repoName}`);
 
-      const sourceSha = (await sh("git", ["-C", workDir, "rev-parse", "HEAD"]))
-        .stdout.trim();
+      const sourceSha = (await sh("git", ["-C", workDir, "rev-parse", "HEAD"])).stdout.trim();
       const prBody = [
         `Generated by the codex driver (\`codex exec\`, runtime \`${runtime}\`, model \`${modelLabel}\`).`,
         "",
@@ -485,9 +470,7 @@ export const codexDriver: Driver = {
         status: "error",
         summary: [
           `codex driver crashed: ${err instanceof Error ? err.message : String(err)}`,
-          summaryLines.length > 0
-            ? `Progress before crash: ${summaryLines.join("; ")}`
-            : "",
+          summaryLines.length > 0 ? `Progress before crash: ${summaryLines.join("; ")}` : "",
         ]
           .filter(Boolean)
           .join("\n"),
@@ -522,8 +505,7 @@ function renderTaskPrompt(input: {
           "",
           `--- Conversation so far (${input.comments.length} comment(s)) ---`,
           ...input.comments.map((c, i) => {
-            const who =
-              c.agentRunId !== null ? "codex (you, earlier)" : c.authorWebId;
+            const who = c.agentRunId !== null ? "codex (you, earlier)" : c.authorWebId;
             return [`[${i + 1}] ${who}:`, c.body.trim(), ""].join("\n");
           }),
           "--- End of conversation ---",
@@ -665,9 +647,7 @@ function unquotePath(p: string): string {
   return p;
 }
 
-async function openLogStream(
-  logPath: string | null,
-): Promise<WriteStream | null> {
+async function openLogStream(logPath: string | null): Promise<WriteStream | null> {
   if (!logPath) return null;
   await fs.mkdir(path.dirname(logPath), { recursive: true });
   return createWriteStream(logPath, { flags: "a" });
@@ -705,7 +685,7 @@ function sh(
     });
     child.on("error", reject);
     child.on("close", (code) => {
-      resolve({ exit: killed ? 124 : code ?? 0, stdout, stderr });
+      resolve({ exit: killed ? 124 : (code ?? 0), stdout, stderr });
     });
     if (opts.timeoutMs) {
       const t = setTimeout(() => {
diff --git a/src/lib/agents/drivers/echo.ts b/src/lib/agents/drivers/echo.ts
index 7447bf2..cfb012f 100644
--- a/src/lib/agents/drivers/echo.ts
+++ b/src/lib/agents/drivers/echo.ts
@@ -12,8 +12,7 @@ export const echoDriver: Driver = {
     return "Records the role + event without calling any model. Useful for testing the dispatch path.";
   },
   async run(ctx) {
-    const head =
-      ctx.prompt.length > 280 ? `${ctx.prompt.slice(0, 280)}…` : ctx.prompt;
+    const head = ctx.prompt.length > 280 ? `${ctx.prompt.slice(0, 280)}…` : ctx.prompt;
     return {
       status: "ok",
       summary: `echo[${ctx.role.name}] event=${ctx.event.type} :: ${head}`,
diff --git a/src/lib/agents/drivers/openrouter.ts b/src/lib/agents/drivers/openrouter.ts
index 96d424f..ce4703c 100644
--- a/src/lib/agents/drivers/openrouter.ts
+++ b/src/lib/agents/drivers/openrouter.ts
@@ -119,8 +119,7 @@ function describeError(json: OpenRouterResponse, status: number): string {
   const err = json.error;
   const parts: string[] = [];
   if (err?.code) parts.push(`code=${err.code}`);
-  if (err?.metadata?.provider_name)
-    parts.push(`provider=${err.metadata.provider_name}`);
+  if (err?.metadata?.provider_name) parts.push(`provider=${err.metadata.provider_name}`);
   if (err?.metadata?.retry_after_seconds)
     parts.push(`retry_after=${err.metadata.retry_after_seconds}s`);
   const head = err?.message ?? `${status} request failed`;
@@ -154,10 +153,9 @@ async function callOpenRouter(
 
     const remaining = MAX_RETRY_BUDGET_S - budgetUsed;
     if (remaining <= 0) break;
-    const hinted =
-      result.json.error?.metadata?.retry_after_seconds ?? null;
+    const hinted = result.json.error?.metadata?.retry_after_seconds ?? null;
     // Exponential backoff: 1, 2, 4 s + 0..1s jitter; cap at remaining budget.
-    const computed = Math.pow(2, attempt) + Math.random();
+    const computed = 2 ** attempt + Math.random();
     const sleepS = Math.min(hinted ? hinted + 1 : computed, remaining);
     console.log(
       `[agents] openrouter retry: status=${result.status} attempt=${attempt + 1}/${MAX_RETRIES} sleep=${sleepS.toFixed(1)}s`,
@@ -166,9 +164,7 @@ async function callOpenRouter(
     budgetUsed += sleepS;
   }
 
-  throw new Error(
-    `OpenRouter: ${describeError(lastErr!.json, lastErr!.status)}`,
-  );
+  throw new Error(`OpenRouter: ${describeError(lastErr!.json, lastErr!.status)}`);
 }
 
 export const openrouterDriver: Driver = {
diff --git a/src/lib/agents/registry.ts b/src/lib/agents/registry.ts
index 04a4804..0dd314e 100644
--- a/src/lib/agents/registry.ts
+++ b/src/lib/agents/registry.ts
@@ -76,9 +76,7 @@ export function getDriver(name: string): Driver | undefined {
  * `issue.labeled` trigger).
  */
 export function rolesForEvent(event: AgentEvent): Role[] {
-  return listRoles().filter((role) =>
-    role.triggers.some((t) => triggerMatches(t, event)),
-  );
+  return listRoles().filter((role) => role.triggers.some((t) => triggerMatches(t, event)));
 }
 
 function triggerMatches(trigger: Trigger, event: AgentEvent): boolean {
diff --git a/src/lib/ai-providers/providers.ts b/src/lib/ai-providers/providers.ts
index c8a604d..84a0caa 100644
--- a/src/lib/ai-providers/providers.ts
+++ b/src/lib/ai-providers/providers.ts
@@ -61,8 +61,16 @@ export const PROVIDERS: ProviderSpec[] = [
       // Free tier first — these are what runs out of the box with no
       // OpenRouter credit balance. Curated against the live `:free` list
       // and filtered to models that declare tool-use support.
-      { id: "qwen/qwen3-coder:free", label: "Qwen3 Coder", note: "Qwen · free · coder-tuned (default)" },
-      { id: "deepseek/deepseek-v4-flash:free", label: "DeepSeek V4 Flash", note: "DeepSeek · free" },
+      {
+        id: "qwen/qwen3-coder:free",
+        label: "Qwen3 Coder",
+        note: "Qwen · free · coder-tuned (default)",
+      },
+      {
+        id: "deepseek/deepseek-v4-flash:free",
+        label: "DeepSeek V4 Flash",
+        note: "DeepSeek · free",
+      },
       { id: "meta-llama/llama-3.3-70b-instruct:free", label: "Llama 3.3 70B", note: "Meta · free" },
       { id: "z-ai/glm-4.5-air:free", label: "GLM 4.5 Air", note: "Z.AI · free" },
       // Paid — pick these when your OpenRouter key has a budget set.
@@ -87,14 +95,17 @@ export const PROVIDERS: ProviderSpec[] = [
       { id: "gemini-2.5-pro", label: "Gemini 2.5 Pro", note: "paid · top quality" },
       { id: "gemini-2.5-flash", label: "Gemini 2.5 Flash", note: "fast · cheap" },
       { id: "gemini-2.0-flash", label: "Gemini 2.0 Flash", note: "free tier" },
-      { id: "gemini-2.0-flash-thinking-exp", label: "Gemini 2.0 Flash Thinking", note: "experimental" },
+      {
+        id: "gemini-2.0-flash-thinking-exp",
+        label: "Gemini 2.0 Flash Thinking",
+        note: "experimental",
+      },
     ],
   },
   {
     name: "anthropic",
     label: "Anthropic",
-    blurb:
-      "Direct Anthropic key for Claude. Skip the OpenRouter margin if you already have one.",
+    blurb: "Direct Anthropic key for Claude. Skip the OpenRouter margin if you already have one.",
     keysUrl: "https://console.anthropic.com/settings/keys",
     opencodeAuthKey: "anthropic",
     opencodeModelPrefix: "anthropic",
@@ -131,19 +142,13 @@ export function getProvider(name: string): ProviderSpec | null {
 }
 
 export function isProviderName(value: unknown): value is ProviderName {
-  return (
-    typeof value === "string" &&
-    PROVIDERS.some((p) => p.name === value)
-  );
+  return typeof value === "string" && PROVIDERS.some((p) => p.name === value);
 }
 
 /**
  * The full `-m` argument for opencode. e.g. "openrouter/google/gemini-2.5-pro"
  * or "google/gemini-2.5-pro".
  */
-export function formatOpencodeModel(
-  provider: ProviderSpec,
-  modelId: string,
-): string {
+export function formatOpencodeModel(provider: ProviderSpec, modelId: string): string {
   return `${provider.opencodeModelPrefix}/${modelId}`;
 }
diff --git a/src/lib/ai-providers/store.ts b/src/lib/ai-providers/store.ts
index d35b5a4..995049e 100644
--- a/src/lib/ai-providers/store.ts
+++ b/src/lib/ai-providers/store.ts
@@ -1,13 +1,13 @@
 import "server-only";
 import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
-import { getDb } from "@/lib/registry/db";
-import { getEnv } from "@/lib/env";
 import {
-  PROVIDERS,
   getProvider,
   isProviderName,
+  PROVIDERS,
   type ProviderName,
 } from "@/lib/ai-providers/providers";
+import { getEnv } from "@/lib/env";
+import { getDb } from "@/lib/registry/db";
 
 /**
  * Encrypted vault for per-user provider API keys + a single-row prefs
@@ -25,10 +25,7 @@ function encrypt(plaintext: string): string {
   const key = getEnv().identityEncryptionKey;
   const iv = randomBytes(12);
   const cipher = createCipheriv("aes-256-gcm", key, iv);
-  const enc = Buffer.concat([
-    cipher.update(plaintext, "utf-8"),
-    cipher.final(),
-  ]);
+  const enc = Buffer.concat([cipher.update(plaintext, "utf-8"), cipher.final()]);
   const tag = cipher.getAuthTag();
   return `${CIPHER_VERSION}:${iv.toString("base64")}:${tag.toString("base64")}:${enc.toString("base64")}`;
 }
@@ -41,15 +38,9 @@ function decrypt(stored: string): string | null {
     const iv = Buffer.from(parts[1], "base64");
     const tag = Buffer.from(parts[2], "base64");
     const data = Buffer.from(parts[3], "base64");
-    const decipher = createDecipheriv(
-      "aes-256-gcm",
-      getEnv().identityEncryptionKey,
-      iv,
-    );
+    const decipher = createDecipheriv("aes-256-gcm", getEnv().identityEncryptionKey, iv);
     decipher.setAuthTag(tag);
-    return Buffer.concat([decipher.update(data), decipher.final()]).toString(
-      "utf-8",
-    );
+    return Buffer.concat([decipher.update(data), decipher.final()]).toString("utf-8");
   } catch (e) {
     console.warn("[ai-providers] decrypt failed:", e);
     return null;
@@ -95,14 +86,12 @@ export function setUserApiKey(
   return { provider, hint, createdAt: now, updatedAt: now };
 }
 
-export function deleteUserApiKey(
-  webId: string,
-  provider: ProviderName,
-): void {
+export function deleteUserApiKey(webId: string, provider: ProviderName): void {
   const db = getDb();
-  db.prepare(
-    "DELETE FROM user_ai_providers WHERE web_id = ? AND provider = ?",
-  ).run(webId, provider);
+  db.prepare("DELETE FROM user_ai_providers WHERE web_id = ? AND provider = ?").run(
+    webId,
+    provider,
+  );
   // If the deleted provider was the user's selected default, blank the
   // pref so the coder falls back to env. We could keep it and let the
   // resolver detect "selected provider missing key", but blanking is
@@ -141,14 +130,9 @@ export function listConfiguredProviders(webId: string): ConfiguredProvider[] {
 
 /** Decrypts and returns the plaintext key. Server-only; never sent over
  *  the wire. The coder driver calls this just before spawning docker. */
-export function getDecryptedApiKey(
-  webId: string,
-  provider: ProviderName,
-): string | null {
+export function getDecryptedApiKey(webId: string, provider: ProviderName): string | null {
   const row = getDb()
-    .prepare(
-      "SELECT api_key_enc FROM user_ai_providers WHERE web_id = ? AND provider = ?",
-    )
+    .prepare("SELECT api_key_enc FROM user_ai_providers WHERE web_id = ? AND provider = ?")
     .get(webId, provider) as { api_key_enc: string } | undefined;
   if (!row) return null;
   return decrypt(row.api_key_enc);
@@ -166,9 +150,7 @@ export type UserAiPref = {
 
 export function getUserAiPref(webId: string): UserAiPref {
   const row = getDb()
-    .prepare(
-      "SELECT provider, model, updated_at FROM user_ai_prefs WHERE web_id = ?",
-    )
+    .prepare("SELECT provider, model, updated_at FROM user_ai_prefs WHERE web_id = ?")
     .get(webId) as
     | { provider: string | null; model: string | null; updated_at: number }
     | undefined;
diff --git a/src/lib/auth/csrf-client.ts b/src/lib/auth/csrf-client.ts
index 3008e7c..80d29a7 100644
--- a/src/lib/auth/csrf-client.ts
+++ b/src/lib/auth/csrf-client.ts
@@ -21,10 +21,7 @@ export function csrfHeader(): Record<string, string> {
  * the CSRF header for state-changing requests. Use for all POST/PATCH/
  * PUT/DELETE calls from client components.
  */
-export async function authedFetch(
-  url: string,
-  init: RequestInit = {},
-): Promise<Response> {
+export async function authedFetch(url: string, init: RequestInit = {}): Promise<Response> {
   const method = (init.method ?? "GET").toUpperCase();
   const headers = new Headers(init.headers);
   if (method !== "GET" && method !== "HEAD") {
diff --git a/src/lib/auth/session.ts b/src/lib/auth/session.ts
index 0b7f3a0..dce0ea1 100644
--- a/src/lib/auth/session.ts
+++ b/src/lib/auth/session.ts
@@ -4,7 +4,7 @@ import { cookies, headers } from "next/headers";
 import { NextResponse } from "next/server";
 import { getEnv } from "@/lib/env";
 import type { Repo } from "@/lib/registry/repos";
-import { resolveMemberRole, ROLE_RANK, type MemberRole } from "@/lib/solid/members";
+import { type MemberRole, ROLE_RANK, resolveMemberRole } from "@/lib/solid/members";
 
 /**
  * Session cookie format:
@@ -179,10 +179,7 @@ function failure(
   code: AuthFailure["body"]["code"],
   message: string,
 ): NextResponse {
-  return NextResponse.json(
-    { error: message, code },
-    { status },
-  );
+  return NextResponse.json({ error: message, code }, { status });
 }
 
 export type AuthOk = { webId: string };
@@ -296,11 +293,7 @@ export async function requireMember(
   if (role && ROLE_RANK[role] >= ROLE_RANK[minRole]) return r;
   return {
     ok: false,
-    response: failure(
-      403,
-      "FORBIDDEN",
-      `requires '${minRole}' membership on this repo`,
-    ),
+    response: failure(403, "FORBIDDEN", `requires '${minRole}' membership on this repo`),
   };
 }
 
diff --git a/src/lib/bootstrap.ts b/src/lib/bootstrap.ts
index f637b25..bff809d 100644
--- a/src/lib/bootstrap.ts
+++ b/src/lib/bootstrap.ts
@@ -1,8 +1,8 @@
 import "server-only";
 import { getEnv } from "@/lib/env";
+import { log } from "@/lib/log";
 import { startReconciler } from "@/lib/pages/reconciler";
 import { reapStuckRuns } from "@/lib/registry/runs";
-import { log } from "@/lib/log";
 
 /**
  * Cross-cutting server bootstrap. Idempotent (safe to call from any
diff --git a/src/lib/collab/config.ts b/src/lib/collab/config.ts
index fedf802..94ae2a9 100644
--- a/src/lib/collab/config.ts
+++ b/src/lib/collab/config.ts
@@ -14,19 +14,14 @@
  *    content-agnostic and the `mc:issue-draft:*` room namespace keeps the two
  *    apps' docs from colliding, so no codespaces-specific relay image is needed.
  */
-export const collabRelayUrl =
-  process.env.NEXT_PUBLIC_COLLAB_RELAY_URL ?? "ws://localhost:3012";
+export const collabRelayUrl = process.env.NEXT_PUBLIC_COLLAB_RELAY_URL ?? "ws://localhost:3012";
 
 /**
  * The relay room id for one draft. Namespaced by app + repo so it never
  * collides with whiteboard rooms (or another repo's drafts) on a shared relay.
  * `WebsocketProvider` appends this to the relay base as the WS path.
  */
-export function draftRoomName(
-  owner: string,
-  repo: string,
-  draftId: string,
-): string {
+export function draftRoomName(owner: string, repo: string, draftId: string): string {
   return `mc:issue-draft:${owner}/${repo}/${draftId}`;
 }
 
@@ -60,9 +55,7 @@ export function nameFromWebId(webId: string | null | undefined): string {
   try {
     const noFragment = webId.split("#")[0];
     const segments = noFragment.split("/").filter(Boolean);
-    const meaningful = segments.filter(
-      (s) => s !== "profile" && s !== "card" && !s.includes(":"),
-    );
+    const meaningful = segments.filter((s) => s !== "profile" && s !== "card" && !s.includes(":"));
     return meaningful[0] ?? "Guest";
   } catch {
     return "Guest";
diff --git a/src/lib/collab/draft-doc.ts b/src/lib/collab/draft-doc.ts
index 9e6d0ce..cb1fda8 100644
--- a/src/lib/collab/draft-doc.ts
+++ b/src/lib/collab/draft-doc.ts
@@ -1,9 +1,9 @@
 "use client";
 
-import * as Y from "yjs";
-import { WebsocketProvider } from "y-websocket";
 import { IndexeddbPersistence } from "y-indexeddb";
 import type { Awareness } from "y-protocols/awareness";
+import { WebsocketProvider } from "y-websocket";
+import * as Y from "yjs";
 import { collabRelayUrl } from "./config";
 
 /**
@@ -71,10 +71,7 @@ export type DraftDoc = {
  * document, persisted only to this browser's IndexedDB until it's committed to
  * `.mind`.
  */
-export function createDraftDoc(
-  roomName: string,
-  opts: { collab?: boolean } = {},
-): DraftDoc {
+export function createDraftDoc(roomName: string, opts: { collab?: boolean } = {}): DraftDoc {
   const collab = opts.collab ?? true;
   const doc = new Y.Doc();
 
@@ -115,7 +112,7 @@ export function createDraftDoc(
 export function readDraftMeta(meta: Y.Map<unknown>): DraftMeta {
   const get = <K extends keyof DraftMeta>(k: K): DraftMeta[K] => {
     const v = meta.get(k);
-    return (typeof v === "string" ? (v as DraftMeta[K]) : DEFAULT_META[k]);
+    return typeof v === "string" ? (v as DraftMeta[K]) : DEFAULT_META[k];
   };
   return {
     title: get("title"),
diff --git a/src/lib/env.ts b/src/lib/env.ts
index 22561b4..42cdb82 100644
--- a/src/lib/env.ts
+++ b/src/lib/env.ts
@@ -1,6 +1,6 @@
 import "server-only";
 import { randomBytes } from "node:crypto";
-import { existsSync, readFileSync, writeFileSync, mkdirSync, chmodSync } from "node:fs";
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 
 /**
@@ -40,8 +40,8 @@ export type BridgeEnv = {
   allowSeededFallback: boolean;
 
   // Secrets
-  sessionSecret: Buffer;        // HMAC-SHA256 key for the session cookie
-  hookSecret: string;           // shared secret in post-receive hook scripts
+  sessionSecret: Buffer; // HMAC-SHA256 key for the session cookie
+  hookSecret: string; // shared secret in post-receive hook scripts
   identityEncryptionKey: Buffer; // 32-byte AES-256-GCM key for refresh-token encryption
 
   // Agents / coder
@@ -60,9 +60,7 @@ export type BridgeEnv = {
 };
 
 function looksLikeLoopback(url: string): boolean {
-  return /^https?:\/\/(localhost|127\.0\.0\.1|0\.0\.0\.0|::1|\[::1\])(:|\/|$)/.test(
-    url,
-  );
+  return /^https?:\/\/(localhost|127\.0\.0\.1|0\.0\.0\.0|::1|\[::1\])(:|\/|$)/.test(url);
 }
 
 function readSecretFile(path: string): Record<string, string> | null {
@@ -137,9 +135,7 @@ export function getEnv(): BridgeEnv {
 
   const nodeEnvRaw = process.env.NODE_ENV ?? "development";
   const nodeEnv: BridgeEnv["nodeEnv"] =
-    nodeEnvRaw === "production" || nodeEnvRaw === "test"
-      ? nodeEnvRaw
-      : "development";
+    nodeEnvRaw === "production" || nodeEnvRaw === "test" ? nodeEnvRaw : "development";
   const isProd = nodeEnv === "production";
 
   // Next.js evaluates server-side modules during `next build` (static
@@ -151,18 +147,14 @@ export function getEnv(): BridgeEnv {
   const isBuildPhase = process.env.NEXT_PHASE === "phase-production-build";
   const enforceProd = isProd && !isBuildPhase;
 
-  const bridgePublicUrl =
-    process.env.BRIDGE_PUBLIC_URL ?? "http://localhost:3010";
-  const bridgeInternalUrl =
-    process.env.BRIDGE_INTERNAL_URL ?? "http://127.0.0.1:3010";
+  const bridgePublicUrl = process.env.BRIDGE_PUBLIC_URL ?? "http://localhost:3010";
+  const bridgeInternalUrl = process.env.BRIDGE_INTERNAL_URL ?? "http://127.0.0.1:3010";
   const podBaseUrl = process.env.POD_BASE_URL ?? "http://localhost:3011/";
   const postReceiveCallbackUrl =
     process.env.POST_RECEIVE_CALLBACK_URL ??
     `${bridgeInternalUrl.replace(/\/$/, "")}/api/git/internal/post-receive`;
 
-  const gitDataDir = resolve(
-    process.env.GIT_DATA_DIR ?? join(process.cwd(), ".git-data", "repos"),
-  );
+  const gitDataDir = resolve(process.env.GIT_DATA_DIR ?? join(process.cwd(), ".git-data", "repos"));
   const registryDataDir = resolve(
     process.env.REGISTRY_DATA_DIR ?? join(process.cwd(), ".registry-data"),
   );
@@ -172,10 +164,8 @@ export function getEnv(): BridgeEnv {
   const allowSeededFallback = process.env.ALLOW_SEEDED_FALLBACK === "1";
 
   const openrouterApiKey = process.env.OPENROUTER_API_KEY?.trim() || null;
-  const agentModel =
-    process.env.MIND_AGENT_MODEL?.trim() || "anthropic/claude-3.5-sonnet";
-  const coderImage =
-    process.env.MIND_CODER_IMAGE?.trim() || "mind-codespaces/coder:latest";
+  const agentModel = process.env.MIND_AGENT_MODEL?.trim() || "anthropic/claude-3.5-sonnet";
+  const coderImage = process.env.MIND_CODER_IMAGE?.trim() || "mind-codespaces/coder:latest";
   const coderTimeoutMs = Number(process.env.MIND_CODER_TIMEOUT ?? 600) * 1000;
   const coderWorkroot = process.env.MIND_CODER_WORKROOT ?? null;
   const runnerRaw = (process.env.MIND_RUNNER ?? "auto").toLowerCase();
diff --git a/src/lib/git/backend.ts b/src/lib/git/backend.ts
index 4c02994..8d9c3bb 100644
--- a/src/lib/git/backend.ts
+++ b/src/lib/git/backend.ts
@@ -1,10 +1,10 @@
 import "server-only";
 import { spawn } from "node:child_process";
 import { existsSync, mkdirSync } from "node:fs";
-import { writeFile, chmod, readdir, rm } from "node:fs/promises";
+import { chmod, readdir, rm, writeFile } from "node:fs/promises";
 import { join, resolve, sep } from "node:path";
-import { validateName } from "@/lib/registry/repos";
 import { getEnv } from "@/lib/env";
+import { validateName } from "@/lib/registry/repos";
 
 /**
  * Resolve the bare-repo storage root. Lazy: never call getEnv() at
@@ -30,9 +30,7 @@ export function repoPath(owner: string, name: string): string {
   const path = resolve(root, owner, `${name}.git`);
   const rootWithSep = root.endsWith(sep) ? root : root + sep;
   if (!path.startsWith(rootWithSep)) {
-    throw new Error(
-      `repoPath resolved outside gitDataDir (owner=${owner} name=${name})`,
-    );
+    throw new Error(`repoPath resolved outside gitDataDir (owner=${owner} name=${name})`);
   }
   return path;
 }
@@ -81,17 +79,10 @@ export async function reinstallAllHooks(): Promise<{ count: number }> {
       if (!repoEnt.isDirectory() || !repoEnt.name.endsWith(".git")) continue;
       const repoName = repoEnt.name.replace(/\.git$/, "");
       try {
-        await installPostReceiveHook(
-          join(ownerDir, repoEnt.name),
-          ownerEnt.name,
-          repoName,
-        );
+        await installPostReceiveHook(join(ownerDir, repoEnt.name), ownerEnt.name, repoName);
         count += 1;
       } catch (e) {
-        console.warn(
-          `[backend] failed to reinstall hook for ${ownerEnt.name}/${repoName}:`,
-          e,
-        );
+        console.warn(`[backend] failed to reinstall hook for ${ownerEnt.name}/${repoName}:`, e);
       }
     }
   }
@@ -167,10 +158,7 @@ function runGit(args: string[]): Promise<void> {
 const diskSizeCache = new Map<string, { bytes: number; expires: number }>();
 const DISK_SIZE_TTL_MS = 60 * 1000;
 
-export function getRepoDiskBytes(
-  owner: string,
-  name: string,
-): Promise<number> {
+export function getRepoDiskBytes(owner: string, name: string): Promise<number> {
   const key = `${owner}/${name}`;
   const now = Date.now();
   const cached = diskSizeCache.get(key);
@@ -206,17 +194,13 @@ export function readBranchHead(
   branch: string,
 ): Promise<string | null> {
   if (!/^[A-Za-z0-9._/-]+$/.test(branch)) {
-    return Promise.reject(
-      new Error(`refusing unsafe branch name ${JSON.stringify(branch)}`),
-    );
+    return Promise.reject(new Error(`refusing unsafe branch name ${JSON.stringify(branch)}`));
   }
   const repo = repoPath(owner, name);
   return new Promise((resolveFn) => {
-    const child = spawn(
-      "git",
-      ["-C", repo, "rev-parse", "--verify", `refs/heads/${branch}`],
-      { stdio: ["ignore", "pipe", "pipe"] },
-    );
+    const child = spawn("git", ["-C", repo, "rev-parse", "--verify", `refs/heads/${branch}`], {
+      stdio: ["ignore", "pipe", "pipe"],
+    });
     let stdout = "";
     child.stdout.on("data", (d) => (stdout += d.toString()));
     child.on("error", () => resolveFn(null));
diff --git a/src/lib/git/diff.ts b/src/lib/git/diff.ts
index 4b4ee0a..3e0c789 100644
Binary files a/src/lib/git/diff.ts and b/src/lib/git/diff.ts differ
diff --git a/src/lib/git/http-cgi.ts b/src/lib/git/http-cgi.ts
index 6b7a900..9e5ff78 100644
--- a/src/lib/git/http-cgi.ts
+++ b/src/lib/git/http-cgi.ts
@@ -1,5 +1,5 @@
 import "server-only";
-import { spawn, type ChildProcessWithoutNullStreams } from "node:child_process";
+import { type ChildProcessWithoutNullStreams, spawn } from "node:child_process";
 import { Readable } from "node:stream";
 import { getGitDataDir } from "@/lib/git/backend";
 
@@ -43,10 +43,7 @@ const REQUEST_TIMEOUT_MS = 10 * 60 * 1000; // 10 minutes per Smart-HTTP request
  *     on the response stream (vs the previous code path, which produced
  *     a truncated success — a git client would see a partial success).
  */
-export async function runGitHttpBackend(
-  req: Request,
-  pathInfo: string,
-): Promise<Response> {
+export async function runGitHttpBackend(req: Request, pathInfo: string): Promise<Response> {
   installShutdownHook();
 
   const url = new URL(req.url);
@@ -191,9 +188,7 @@ export async function runGitHttpBackend(
       pendingClose = true;
       if (bodyController) bodyController.close();
       if (!headersParsed) {
-        rejectResponse(
-          new Error("git http-backend exited without emitting CGI headers"),
-        );
+        rejectResponse(new Error("git http-backend exited without emitting CGI headers"));
       }
     });
 
@@ -212,16 +207,12 @@ export async function runGitHttpBackend(
       liveChildren.delete(child);
       if (code !== 0) {
         if (!headersParsed) {
-          rejectResponse(
-            new Error(`git http-backend exited with code ${code} before any output`),
-          );
+          rejectResponse(new Error(`git http-backend exited with code ${code} before any output`));
         } else if (bodyController) {
           // Headers already emitted, then the CGI died mid-body. The
           // git client would otherwise see a truncated success and trust
           // the bytes — surface the failure as a stream error instead.
-          bodyController.error(
-            new Error(`git http-backend exited with code ${code} mid-body`),
-          );
+          bodyController.error(new Error(`git http-backend exited with code ${code} mid-body`));
         }
       }
     });
diff --git a/src/lib/git/merge.ts b/src/lib/git/merge.ts
index 68d1154..a283659 100644
--- a/src/lib/git/merge.ts
+++ b/src/lib/git/merge.ts
@@ -36,10 +36,7 @@ export async function mergeBranches(
   target: string,
   message: string,
   author: MergeAuthor,
-): Promise<
-  | { ok: true; mergeSha: string }
-  | { ok: false; conflict: boolean; message: string }
-> {
+): Promise<{ ok: true; mergeSha: string } | { ok: false; conflict: boolean; message: string }> {
   // Empty-target fast-path. When the target branch doesn't exist on
   // the bare yet (fresh repo whose first commit is the agent's own,
   // before anyone has pushed `main`), `checkout target` below fails
@@ -71,16 +68,9 @@ export async function mergeBranches(
       };
     }
     const sourceSha = sourceProbe.stdout.trim();
-    const seedDir = await fs.mkdtemp(
-      path.join(os.tmpdir(), "mind-pr-seed-"),
-    );
+    const seedDir = await fs.mkdtemp(path.join(os.tmpdir(), "mind-pr-seed-"));
     try {
-      const clone = await sh("git", [
-        "clone",
-        "--no-checkout",
-        bareRepoPath,
-        seedDir,
-      ]);
+      const clone = await sh("git", ["clone", "--no-checkout", bareRepoPath, seedDir]);
       if (clone.exit !== 0) {
         return {
           ok: false,
@@ -108,9 +98,7 @@ export async function mergeBranches(
     }
   }
 
-  const workDir = await fs.mkdtemp(
-    path.join(os.tmpdir(), "mind-pr-merge-"),
-  );
+  const workDir = await fs.mkdtemp(path.join(os.tmpdir(), "mind-pr-merge-"));
   try {
     const clone = await sh("git", ["clone", bareRepoPath, workDir]);
     if (clone.exit !== 0) {
diff --git a/src/lib/git/objects.ts b/src/lib/git/objects.ts
index 1637278..e4d3376 100644
--- a/src/lib/git/objects.ts
+++ b/src/lib/git/objects.ts
@@ -57,12 +57,7 @@ export async function findReadme(
 
 /** True if the repo has at least one commit reachable from HEAD. */
 export async function hasAnyCommits(bareRepoPath: string): Promise<boolean> {
-  const { code } = await runGit(bareRepoPath, [
-    "rev-parse",
-    "--verify",
-    "--quiet",
-    "HEAD",
-  ]);
+  const { code } = await runGit(bareRepoPath, ["rev-parse", "--verify", "--quiet", "HEAD"]);
   return code === 0;
 }
 
@@ -146,11 +141,7 @@ export async function listTree(
   path: string,
 ): Promise<TreeEntry[]> {
   const target = path ? `${ref}:${path}` : ref;
-  const { stdout, code, stderr } = await runGit(bareRepoPath, [
-    "ls-tree",
-    "--long",
-    target,
-  ]);
+  const { stdout, code, stderr } = await runGit(bareRepoPath, ["ls-tree", "--long", target]);
   if (code !== 0) {
     // `bad revision` on empty repos, or path doesn't exist on this ref.
     if (/Not a valid object name|bad revision|exists on disk/i.test(stderr)) {
@@ -195,19 +186,11 @@ export async function readBlob(
   path: string,
 ): Promise<BlobContent | null> {
   // First, get the blob's full size and verify it exists / is a blob.
-  const sizeProbe = await runGit(bareRepoPath, [
-    "cat-file",
-    "-s",
-    `${ref}:${path}`,
-  ]);
+  const sizeProbe = await runGit(bareRepoPath, ["cat-file", "-s", `${ref}:${path}`]);
   if (sizeProbe.code !== 0) return null;
   const totalSize = Number.parseInt(sizeProbe.stdout.trim(), 10);
 
-  const typeProbe = await runGit(bareRepoPath, [
-    "cat-file",
-    "-t",
-    `${ref}:${path}`,
-  ]);
+  const typeProbe = await runGit(bareRepoPath, ["cat-file", "-t", `${ref}:${path}`]);
   if (typeProbe.code !== 0 || typeProbe.stdout.trim() !== "blob") {
     return null;
   }
@@ -245,19 +228,12 @@ function runGit(bareRepoPath: string, args: string[]): Promise<GitResult> {
     let stderr = "";
     child.stdout.on("data", (d) => (stdout += d.toString()));
     child.stderr.on("data", (d) => (stderr += d.toString()));
-    child.on("error", (err) =>
-      resolveFn({ stdout, stderr: stderr + err.message, code: -1 }),
-    );
-    child.on("close", (code) =>
-      resolveFn({ stdout, stderr, code: code ?? -1 }),
-    );
+    child.on("error", (err) => resolveFn({ stdout, stderr: stderr + err.message, code: -1 }));
+    child.on("close", (code) => resolveFn({ stdout, stderr, code: code ?? -1 }));
   });
 }
 
-function runGitBytes(
-  bareRepoPath: string,
-  args: string[],
-): Promise<GitBytesResult> {
+function runGitBytes(bareRepoPath: string, args: string[]): Promise<GitBytesResult> {
   return new Promise((resolveFn) => {
     const child = spawn("git", [`--git-dir=${bareRepoPath}`, ...args]);
     const chunks: Buffer[] = [];
diff --git a/src/lib/http/json.ts b/src/lib/http/json.ts
index 4072ca3..a750b78 100644
--- a/src/lib/http/json.ts
+++ b/src/lib/http/json.ts
@@ -26,10 +26,7 @@ const MAX_RESPONSE_BYTES = (() => {
   return Number.isFinite(n) && n > 0 ? n : 5 * 1024 * 1024;
 })();
 
-export function jsonResponse(
-  data: unknown,
-  init: ResponseInit = {},
-): NextResponse {
+export function jsonResponse(data: unknown, init: ResponseInit = {}): NextResponse {
   const body = JSON.stringify(data);
   const bytes = Buffer.byteLength(body, "utf-8");
   if (bytes > MAX_RESPONSE_BYTES) {
diff --git a/src/lib/ledger/client.ts b/src/lib/ledger/client.ts
index f68c438..f4f0067 100644
--- a/src/lib/ledger/client.ts
+++ b/src/lib/ledger/client.ts
@@ -65,11 +65,7 @@ export type DebitResult =
  * the run has happened, so the caller logs and continues rather than failing
  * the user after the fact.
  */
-export async function debit(
-  webId: string,
-  amount: number,
-  memo: string,
-): Promise<DebitResult> {
+export async function debit(webId: string, amount: number, memo: string): Promise<DebitResult> {
   const cfg = ledgerConfig();
   if (!cfg) return { ok: false, status: 0, balance: null };
   try {
diff --git a/src/lib/ledger/policy.ts b/src/lib/ledger/policy.ts
index eee0861..2349341 100644
--- a/src/lib/ledger/policy.ts
+++ b/src/lib/ledger/policy.ts
@@ -6,9 +6,7 @@
  * unmetered).
  */
 
-export type FallbackGate =
-  | { kind: "allow"; meter: boolean }
-  | { kind: "blocked"; balance: number };
+export type FallbackGate = { kind: "allow"; meter: boolean } | { kind: "blocked"; balance: number };
 
 /**
  * Decide whether an env-fallback (company-key) coder run may proceed, and
diff --git a/src/lib/metrics.ts b/src/lib/metrics.ts
index 504f14f..0f432f8 100644
--- a/src/lib/metrics.ts
+++ b/src/lib/metrics.ts
@@ -30,16 +30,10 @@ function serialiseLabels(labels?: Labels): string {
   if (!labels) return "";
   const keys = Object.keys(labels).sort();
   if (keys.length === 0) return "";
-  return keys
-    .map((k) => `${k}="${String(labels[k]).replace(/[\\"\n]/g, "_")}"`)
-    .join(",");
+  return keys.map((k) => `${k}="${String(labels[k]).replace(/[\\"\n]/g, "_")}"`).join(",");
 }
 
-function ensureEntry(
-  name: string,
-  type: "counter" | "gauge",
-  help: string,
-): MetricEntry {
+function ensureEntry(name: string, type: "counter" | "gauge", help: string): MetricEntry {
   const existing = registry.get(name);
   if (existing) return existing;
   const entry: MetricEntry = { type, help, series: new Map() };
@@ -47,12 +41,7 @@ function ensureEntry(
   return entry;
 }
 
-export function incrementCounter(
-  name: string,
-  help: string,
-  labels?: Labels,
-  value = 1,
-): void {
+export function incrementCounter(name: string, help: string, labels?: Labels, value = 1): void {
   const entry = ensureEntry(name, "counter", help);
   const key = serialiseLabels(labels);
   entry.series.set(key, (entry.series.get(key) ?? 0) + value);
@@ -94,7 +83,11 @@ export function renderExposition(): string {
 
 // Convenience wrappers for the named series the bridge tracks.
 export const Metrics = {
-  gitPush(owner: string, repo: string, result: "success" | "auth-failed" | "rate-limited" | "quota-exceeded" | "error"): void {
+  gitPush(
+    owner: string,
+    repo: string,
+    result: "success" | "auth-failed" | "rate-limited" | "quota-exceeded" | "error",
+  ): void {
     incrementCounter("git_pushes_total", "Total git push attempts.", {
       owner,
       repo,
diff --git a/src/lib/packages/auth.ts b/src/lib/packages/auth.ts
index 65d899d..d7bd228 100644
--- a/src/lib/packages/auth.ts
+++ b/src/lib/packages/auth.ts
@@ -35,10 +35,7 @@ export function readPackageToken(req: Request): string | null {
 }
 
 /** True iff the request carries a valid push token for this repo. */
-export function authenticatePackagePush(
-  repoId: number,
-  req: Request,
-): boolean {
+export function authenticatePackagePush(repoId: number, req: Request): boolean {
   const token = readPackageToken(req);
   return !!token && verifyPushToken(repoId, token);
 }
diff --git a/src/lib/packages/content-store.ts b/src/lib/packages/content-store.ts
index 35116ea..d30d897 100644
--- a/src/lib/packages/content-store.ts
+++ b/src/lib/packages/content-store.ts
@@ -1,7 +1,7 @@
 import "server-only";
 import { createHash } from "node:crypto";
-import { ensureContainer, setPublicReadAcl } from "@/lib/solid/containers";
 import { log } from "@/lib/log";
+import { ensureContainer, setPublicReadAcl } from "@/lib/solid/containers";
 
 /**
  * Content-addressed blob store backed by a Solid pod (see
@@ -96,9 +96,7 @@ export class PodContentStore {
     });
     if (res.status === 404) return null;
     if (!res.ok) {
-      throw new Error(
-        `content-store GET ${this.blobUrl(want)} failed: ${res.status}`,
-      );
+      throw new Error(`content-store GET ${this.blobUrl(want)} failed: ${res.status}`);
     }
     const bytes = new Uint8Array(await res.arrayBuffer());
     const got = createHash("sha256").update(bytes).digest("hex");
diff --git a/src/lib/packages/repo-store.ts b/src/lib/packages/repo-store.ts
index dae36f4..3d70d1e 100644
--- a/src/lib/packages/repo-store.ts
+++ b/src/lib/packages/repo-store.ts
@@ -1,7 +1,7 @@
 import "server-only";
+import { PodContentStore } from "@/lib/packages/content-store";
 import type { Repo } from "@/lib/registry/repos";
 import { getOwnerFetch } from "@/lib/solid/fetch-for-owner";
-import { PodContentStore } from "@/lib/packages/content-store";
 
 /**
  * Build a `PodContentStore` for a repo's owner.
diff --git a/src/lib/packages/store.ts b/src/lib/packages/store.ts
index 92cacc4..456c278 100644
--- a/src/lib/packages/store.ts
+++ b/src/lib/packages/store.ts
@@ -38,8 +38,7 @@ const NPM_NAME_RE = /^(@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*$/i;
 const SEGMENT_RE = /^[a-z0-9][a-z0-9._+-]*$/i;
 // OCI image names: lowercase path components separated by `/` (the Docker
 // "repository name" grammar), e.g. `myimage` or `team/service`.
-const OCI_NAME_RE =
-  /^[a-z0-9]+(?:[._-][a-z0-9]+)*(?:\/[a-z0-9]+(?:[._-][a-z0-9]+)*)*$/;
+const OCI_NAME_RE = /^[a-z0-9]+(?:[._-][a-z0-9]+)*(?:\/[a-z0-9]+(?:[._-][a-z0-9]+)*)*$/;
 // A content digest, e.g. `sha256:<hex>` — a valid OCI manifest reference.
 const DIGEST_RE = /^sha(?:256|512):[a-f0-9]{32,128}$/i;
 
@@ -49,15 +48,9 @@ export function validatePackageName(name: string, type: PackageType): void {
   else if (type === "oci") pattern = OCI_NAME_RE;
   else pattern = SEGMENT_RE;
   const ok =
-    typeof name === "string" &&
-    name.length <= 214 &&
-    !name.includes("..") &&
-    pattern.test(name);
+    typeof name === "string" && name.length <= 214 && !name.includes("..") && pattern.test(name);
   if (!ok) {
-    throw new PackageError(
-      `invalid ${type} package name: ${JSON.stringify(name)}`,
-      "INVALID_NAME",
-    );
+    throw new PackageError(`invalid ${type} package name: ${JSON.stringify(name)}`, "INVALID_NAME");
   }
 }
 
@@ -70,10 +63,7 @@ export function validateVersion(version: string): void {
     version.includes("..") ||
     !(SEGMENT_RE.test(version) || DIGEST_RE.test(version))
   ) {
-    throw new PackageError(
-      `invalid version: ${JSON.stringify(version)}`,
-      "INVALID_VERSION",
-    );
+    throw new PackageError(`invalid version: ${JSON.stringify(version)}`, "INVALID_VERSION");
   }
 }
 
@@ -142,11 +132,7 @@ export function getPackageVersion(
 }
 
 /** All versions of one package, newest first. */
-export function listVersions(
-  repoId: number,
-  type: PackageType,
-  name: string,
-): PackageRecord[] {
+export function listVersions(repoId: number, type: PackageType, name: string): PackageRecord[] {
   return (
     getDb()
       .prepare(
@@ -159,15 +145,10 @@ export function listVersions(
 }
 
 /** Every package version in a repo (optionally filtered by type), newest first. */
-export function listPackages(
-  repoId: number,
-  type?: PackageType,
-): PackageRecord[] {
+export function listPackages(repoId: number, type?: PackageType): PackageRecord[] {
   const rows = type
     ? getDb()
-        .prepare(
-          `SELECT * FROM packages WHERE repo_id = ? AND type = ? ORDER BY created_at DESC`,
-        )
+        .prepare(`SELECT * FROM packages WHERE repo_id = ? AND type = ? ORDER BY created_at DESC`)
         .all(repoId, type)
     : getDb()
         .prepare(`SELECT * FROM packages WHERE repo_id = ? ORDER BY created_at DESC`)
diff --git a/src/lib/pages/preview.ts b/src/lib/pages/preview.ts
index 006bf39..a38a71a 100644
--- a/src/lib/pages/preview.ts
+++ b/src/lib/pages/preview.ts
@@ -3,23 +3,18 @@ import { createWriteStream, type WriteStream } from "node:fs";
 import { mkdir, mkdtemp, readFile, rm, stat } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import * as path from "node:path";
-import { getRepoById, type PagesConfig, type Repo } from "@/lib/registry/repos";
-import {
-  getPullRequest,
-  updatePullPreview,
-  type PullRequest,
-} from "@/lib/registry/pulls";
-import { repoPath, readBranchHead } from "@/lib/git/backend";
+import { readBranchHead, repoPath } from "@/lib/git/backend";
 import { checkoutBranchToTempDir } from "@/lib/git/checkout";
-import { parseWorkflow } from "@/lib/workflows/parse";
-import { resolveRunnerMode, runShellBatch } from "@/lib/workflows/docker";
 import { publishDirectory } from "@/lib/pages/publisher";
+import { getPullRequest, type PullRequest, updatePullPreview } from "@/lib/registry/pulls";
+import { getRepoById, type PagesConfig, type Repo } from "@/lib/registry/repos";
 import { OwnerFetchUnavailableError } from "@/lib/solid/fetch-for-owner";
+import { resolveRunnerMode, runShellBatch } from "@/lib/workflows/docker";
+import { parseWorkflow } from "@/lib/workflows/parse";
 
 // Same location agent-run logs use (dispatch.ts owns the const, but importing
 // it here would create a cycle: dispatch.ts → preview.ts → dispatch.ts).
-const AGENT_LOGS_DIR =
-  process.env.AGENT_LOGS_DIR ?? path.join(process.cwd(), ".agent-logs");
+const AGENT_LOGS_DIR = process.env.AGENT_LOGS_DIR ?? path.join(process.cwd(), ".agent-logs");
 
 /**
  * PR previews. A PR's source branch is built (if it ships a
@@ -41,9 +36,7 @@ const WORKFLOW_REL = ".mind/workflow.yml";
 
 /** Pod container a PR's preview is published to (under /public → public-read). */
 export function previewContainerFor(repo: Repo, pullNumber: number): string {
-  const base = repo.ownerPodRoot.endsWith("/")
-    ? repo.ownerPodRoot
-    : `${repo.ownerPodRoot}/`;
+  const base = repo.ownerPodRoot.endsWith("/") ? repo.ownerPodRoot : `${repo.ownerPodRoot}/`;
   return `${base}public/previews/${repo.name}/${pullNumber}/`;
 }
 
@@ -79,9 +72,8 @@ export async function buildAndPublishPreview(pull: PullRequest): Promise<void> {
   if (!repo) return;
 
   const liveSha =
-    (await readBranchHead(repo.owner, repo.name, pull.sourceBranch).catch(
-      () => null,
-    )) ?? pull.sourceSha;
+    (await readBranchHead(repo.owner, repo.name, pull.sourceBranch).catch(() => null)) ??
+    pull.sourceSha;
 
   // SHA-guard — don't rebuild an unchanged branch that's already live.
   // The POST route optimistically marks "building" before this runs, so
@@ -117,10 +109,7 @@ export async function buildAndPublishPreview(pull: PullRequest): Promise<void> {
 
     // Tier 2 (build) if a workflow exists; else Tier 1 (static, instant).
     let publishDir = tempDir;
-    const wfSource = await readFile(
-      path.join(tempDir, WORKFLOW_REL),
-      "utf-8",
-    ).catch(() => null);
+    const wfSource = await readFile(path.join(tempDir, WORKFLOW_REL), "utf-8").catch(() => null);
     if (wfSource !== null) {
       const wf = parseWorkflow(wfSource);
       const mode = await resolveRunnerMode();
@@ -167,8 +156,7 @@ export async function buildAndPublishPreview(pull: PullRequest): Promise<void> {
     );
   } catch (err) {
     const message =
-      err instanceof OwnerFetchUnavailableError &&
-      err.reason === "needs-reauthorization"
+      err instanceof OwnerFetchUnavailableError && err.reason === "needs-reauthorization"
         ? "preview failed: reconnect your pod at /connect"
         : err instanceof Error
           ? err.message
@@ -211,10 +199,7 @@ export async function deletePreview(pull: PullRequest): Promise<void> {
 }
 
 /** Build a preview for (repoId, prNumber) by id — convenience for triggers. */
-export async function buildPreviewForPull(
-  repoId: number,
-  prNumber: number,
-): Promise<void> {
+export async function buildPreviewForPull(repoId: number, prNumber: number): Promise<void> {
   const pull = getPullRequest(repoId, prNumber);
   if (pull) await buildAndPublishPreview(pull);
 }
diff --git a/src/lib/pages/publisher.ts b/src/lib/pages/publisher.ts
index c62d72c..97f4afc 100644
--- a/src/lib/pages/publisher.ts
+++ b/src/lib/pages/publisher.ts
@@ -1,26 +1,26 @@
 import "server-only";
-import { readFile, readdir, lstat } from "node:fs/promises";
-import { join, relative, resolve, sep, extname } from "node:path";
+import { lstat, readdir, readFile } from "node:fs/promises";
+import { extname, join, relative, resolve, sep } from "node:path";
+import { readBranchHead, repoPath } from "@/lib/git/backend";
+import { checkoutBranchToTempDir } from "@/lib/git/checkout";
+import { clip, log, scrubWebId } from "@/lib/log";
+import { Metrics } from "@/lib/metrics";
+import { mimeForPath } from "@/lib/pages/mime";
+import { withPublishLock } from "@/lib/pages/publish-lock";
 import {
-  getRepoById,
   getPagesConfig,
-  markPagesPublished,
+  getRepoById,
   markPagesFailed,
+  markPagesPublished,
   type PagesConfig,
   type Repo,
 } from "@/lib/registry/repos";
-import { repoPath, readBranchHead } from "@/lib/git/backend";
-import { checkoutBranchToTempDir } from "@/lib/git/checkout";
+import { ensureContainer, setPublicReadAcl } from "@/lib/solid/containers";
 import {
   getOwnerFetch,
-  OwnerFetchUnavailableError,
   type OwnerFetch,
+  OwnerFetchUnavailableError,
 } from "@/lib/solid/fetch-for-owner";
-import { ensureContainer, setPublicReadAcl } from "@/lib/solid/containers";
-import { mimeForPath } from "@/lib/pages/mime";
-import { withPublishLock } from "@/lib/pages/publish-lock";
-import { log, scrubWebId, clip } from "@/lib/log";
-import { Metrics } from "@/lib/metrics";
 
 // Files / directories the publisher must NEVER upload to a pod.
 // Applied during the walk, before any PUT request is sent. Symlinks of
@@ -45,21 +45,8 @@ const FORBIDDEN_FILE_PREFIXES = [
   "credentials",
   "secrets",
 ];
-const FORBIDDEN_FILE_EXTENSIONS = new Set([
-  ".pem",
-  ".key",
-  ".p12",
-  ".pfx",
-  ".asc",
-  ".crt",
-]);
-const FORBIDDEN_FILE_NAMES = new Set([
-  ".DS_Store",
-  ".netrc",
-  ".npmrc",
-  ".pypirc",
-  ".dockercfg",
-]);
+const FORBIDDEN_FILE_EXTENSIONS = new Set([".pem", ".key", ".p12", ".pfx", ".asc", ".crt"]);
+const FORBIDDEN_FILE_NAMES = new Set([".DS_Store", ".netrc", ".npmrc", ".pypirc", ".dockercfg"]);
 
 // Hard cap to keep a 5 GB asset from OOM-ing the publisher (P0-R7).
 // Files above this are skipped with a warning; eventually we should
@@ -100,16 +87,9 @@ export async function publishPages(repoId: number): Promise<{
   // Snapshot HEAD before the checkout so we can record exactly which
   // commit reached the pod. Used by the reconciler (P0-R4) to detect
   // drift when the post-receive hook silently fails.
-  const headSha = await readBranchHead(
-    repo.owner,
-    repo.name,
-    pages.sourceBranch,
-  );
+  const headSha = await readBranchHead(repo.owner, repo.name, pages.sourceBranch);
 
-  const { tempDir, cleanup } = await checkoutBranchToTempDir(
-    bare,
-    pages.sourceBranch,
-  );
+  const { tempDir, cleanup } = await checkoutBranchToTempDir(bare, pages.sourceBranch);
 
   try {
     const sourceRoot = resolveSourceDir(tempDir, pages.sourcePath);
@@ -181,12 +161,7 @@ export async function publishDirectory(input: {
       mode: authed.mode,
     });
 
-    await ensureContainerPath(
-      authed.fetch,
-      repo.ownerPodRoot,
-      target,
-      repo.ownerWebId,
-    );
+    await ensureContainerPath(authed.fetch, repo.ownerPodRoot, target, repo.ownerWebId);
 
     // Track every relative URL we just (re-)uploaded so the prune step
     // afterwards can DELETE anything the source no longer contains.
@@ -278,9 +253,7 @@ async function pruneStale(
           pruned += 1;
           console.log(`[publisher] pruned ${childAbsUrl}`);
         } else if (res.status !== 404) {
-          console.warn(
-            `[publisher] DELETE ${childAbsUrl} failed: ${res.status} ${res.statusText}`,
-          );
+          console.warn(`[publisher] DELETE ${childAbsUrl} failed: ${res.status} ${res.statusText}`);
         }
       } catch (e) {
         console.warn(`[publisher] DELETE ${childAbsUrl} threw:`, e);
@@ -306,9 +279,7 @@ async function listContainerChildren(
   });
   if (res.status === 404) return [];
   if (!res.ok) {
-    throw new Error(
-      `GET ${containerUrl} failed during prune: ${res.status} ${res.statusText}`,
-    );
+    throw new Error(`GET ${containerUrl} failed during prune: ${res.status} ${res.statusText}`);
   }
   const body = await res.text();
   return parseLdpContains(body);
@@ -376,9 +347,7 @@ async function ensureContainerPath(
   ownerWebId: string,
 ): Promise<void> {
   if (!target.startsWith(podRoot)) {
-    throw new Error(
-      `targetContainer (${target}) is not inside ownerPodRoot (${podRoot})`,
-    );
+    throw new Error(`targetContainer (${target}) is not inside ownerPodRoot (${podRoot})`);
   }
   const trail = target.slice(podRoot.length).split("/").filter(Boolean);
   let cursor = podRoot.endsWith("/") ? podRoot : podRoot + "/";
@@ -437,4 +406,3 @@ export async function* walk(dir: string): AsyncGenerator<string> {
     yield full;
   }
 }
-
diff --git a/src/lib/pages/reconciler.ts b/src/lib/pages/reconciler.ts
index a95e566..5efe1fa 100644
--- a/src/lib/pages/reconciler.ts
+++ b/src/lib/pages/reconciler.ts
@@ -1,11 +1,7 @@
 import "server-only";
-import {
-  getPagesConfig,
-  listRepos,
-  type Repo,
-} from "@/lib/registry/repos";
 import { readBranchHead } from "@/lib/git/backend";
 import { publishPages } from "@/lib/pages/publisher";
+import { getPagesConfig, listRepos, type Repo } from "@/lib/registry/repos";
 
 /**
  * P0-R4 — HEAD-vs-last_published_sha reconciler.
@@ -60,9 +56,7 @@ export function reconcilePages(): Promise<ReconcileOutcome[]> {
       for (const repo of repos) {
         outcomes.push(await reconcileOne(repo));
       }
-      const driftCount = outcomes.filter(
-        (o) => o.status === "republished",
-      ).length;
+      const driftCount = outcomes.filter((o) => o.status === "republished").length;
       const failureCount = outcomes.filter((o) => o.status === "failed").length;
       if (driftCount > 0 || failureCount > 0) {
         console.log(
@@ -155,17 +149,11 @@ let timer: NodeJS.Timeout | null = null;
 export function startReconciler(): void {
   if (timerStarted) return;
   timerStarted = true;
-  console.log(
-    `[reconciler] starting — interval=${RECONCILE_INTERVAL_MS}ms`,
-  );
+  console.log(`[reconciler] starting — interval=${RECONCILE_INTERVAL_MS}ms`);
   // Kick off the first pass async so the bootstrap doesn't block on it.
-  void reconcilePages().catch((e) =>
-    console.warn(`[reconciler] initial pass failed:`, e),
-  );
+  void reconcilePages().catch((e) => console.warn(`[reconciler] initial pass failed:`, e));
   timer = setInterval(() => {
-    void reconcilePages().catch((e) =>
-      console.warn(`[reconciler] pass failed:`, e),
-    );
+    void reconcilePages().catch((e) => console.warn(`[reconciler] pass failed:`, e));
   }, RECONCILE_INTERVAL_MS);
   // Allow the process to exit cleanly during dev / scripts.
   if (typeof timer.unref === "function") timer.unref();
diff --git a/src/lib/rate-limit.ts b/src/lib/rate-limit.ts
index c5c1302..4fb2f01 100644
--- a/src/lib/rate-limit.ts
+++ b/src/lib/rate-limit.ts
@@ -56,10 +56,7 @@ async function clientKey(scope: string): Promise<string> {
  * Enforce a rate limit. Returns null when allowed; otherwise returns a
  * pre-built 429 NextResponse the caller can return directly.
  */
-export async function rateLimit(
-  scope: string,
-  cfg: RateLimitConfig,
-): Promise<NextResponse | null> {
+export async function rateLimit(scope: string, cfg: RateLimitConfig): Promise<NextResponse | null> {
   const key = await clientKey(scope);
   if (take(key, cfg)) return null;
   return NextResponse.json(
@@ -80,10 +77,7 @@ export async function rateLimit(
  * Use for auth-failure brute-force defense: peek before attempting auth,
  * consume only when auth fails. A successful credential burns no budget.
  */
-export async function isLockedOut(
-  scope: string,
-  cfg: RateLimitConfig,
-): Promise<boolean> {
+export async function isLockedOut(scope: string, cfg: RateLimitConfig): Promise<boolean> {
   const key = await clientKey(scope);
   const now = Date.now();
   const b = buckets.get(key);
@@ -93,10 +87,7 @@ export async function isLockedOut(
   return projected < 1;
 }
 
-export async function recordFailure(
-  scope: string,
-  cfg: RateLimitConfig,
-): Promise<void> {
+export async function recordFailure(scope: string, cfg: RateLimitConfig): Promise<void> {
   const key = await clientKey(scope);
   take(key, cfg);
 }
diff --git a/src/lib/registry/activity.ts b/src/lib/registry/activity.ts
index 2c95a67..28f7957 100644
--- a/src/lib/registry/activity.ts
+++ b/src/lib/registry/activity.ts
@@ -39,10 +39,7 @@ export type ActivityItem = {
  * without paging. Bumped this up cap means more SQL work; the per-source
  * LIMIT keeps the joined cost bounded.
  */
-export function listActivityForWebId(
-  webId: string,
-  limit = 25,
-): ActivityItem[] {
+export function listActivityForWebId(webId: string, limit = 25): ActivityItem[] {
   const db = getDb();
   const perSourceCap = limit;
   const items: ActivityItem[] = [];
@@ -75,9 +72,8 @@ export function listActivityForWebId(
 
   const ownedRepoIds = ownedRepos.map((r) => r.id);
   // Conditional IN list. Avoid an empty `()` which is a syntax error.
-  const inClause = ownedRepoIds.length > 0
-    ? `(${ownedRepoIds.map(() => "?").join(",")})`
-    : "(NULL)";
+  const inClause =
+    ownedRepoIds.length > 0 ? `(${ownedRepoIds.map(() => "?").join(",")})` : "(NULL)";
 
   // Issues — authored OR on user's repos.
   const issueRows = db
@@ -217,9 +213,7 @@ export function listActivityForWebId(
       repo_name: string;
     }[];
     for (const row of runRows) {
-      const issuePart = row.issue_number
-        ? `#${row.issue_number}`
-        : `repo`;
+      const issuePart = row.issue_number ? `#${row.issue_number}` : `repo`;
       items.push({
         kind: "agent.ran",
         ts: row.created_at,
diff --git a/src/lib/registry/agent-runs.ts b/src/lib/registry/agent-runs.ts
index 9142756..9ff71e8 100644
--- a/src/lib/registry/agent-runs.ts
+++ b/src/lib/registry/agent-runs.ts
@@ -51,24 +51,16 @@ export function createAgentRun(input: {
         (repo_id, issue_id, event_type, role, driver, status, summary, error_message, log_path, created_at)
        VALUES (?, ?, ?, ?, ?, 'running', '', NULL, NULL, ?)`,
     )
-    .run(
-      input.repoId,
-      input.issueId,
-      input.eventType,
-      input.role,
-      input.driver,
-      Date.now(),
-    );
+    .run(input.repoId, input.issueId, input.eventType, input.role, input.driver, Date.now());
   const id = info.lastInsertRowid as number;
   // Derive the log path from the id so multiple runs in flight at once
   // can never collide on the file.
   const logPath = `${id}.log`;
-  getDb()
-    .prepare("UPDATE agent_runs SET log_path = ? WHERE id = ?")
-    .run(logPath, id);
-  const row = getDb()
-    .prepare("SELECT * FROM agent_runs WHERE id = ?")
-    .get(id) as Record<string, unknown>;
+  getDb().prepare("UPDATE agent_runs SET log_path = ? WHERE id = ?").run(logPath, id);
+  const row = getDb().prepare("SELECT * FROM agent_runs WHERE id = ?").get(id) as Record<
+    string,
+    unknown
+  >;
   return rowToRun(row);
 }
 
@@ -90,22 +82,17 @@ export function finishAgentRun(
        SET status = ?, summary = ?, error_message = ?
        WHERE id = ?`,
     )
-    .run(
-      input.status,
-      input.summary.slice(0, 4000),
-      input.errorMessage ?? null,
-      id,
-    );
-  const row = getDb()
-    .prepare("SELECT * FROM agent_runs WHERE id = ?")
-    .get(id) as Record<string, unknown> | undefined;
+    .run(input.status, input.summary.slice(0, 4000), input.errorMessage ?? null, id);
+  const row = getDb().prepare("SELECT * FROM agent_runs WHERE id = ?").get(id) as
+    | Record<string, unknown>
+    | undefined;
   return row ? rowToRun(row) : null;
 }
 
 export function getAgentRun(id: number): AgentRun | null {
-  const row = getDb()
-    .prepare("SELECT * FROM agent_runs WHERE id = ?")
-    .get(id) as Record<string, unknown> | undefined;
+  const row = getDb().prepare("SELECT * FROM agent_runs WHERE id = ?").get(id) as
+    | Record<string, unknown>
+    | undefined;
   return row ? rowToRun(row) : null;
 }
 
diff --git a/src/lib/registry/db.ts b/src/lib/registry/db.ts
index 4fd99d7..b50b226 100644
--- a/src/lib/registry/db.ts
+++ b/src/lib/registry/db.ts
@@ -1,16 +1,12 @@
 import "server-only";
-import Database from "better-sqlite3";
-import { readdirSync, readFileSync, mkdirSync, existsSync } from "node:fs";
-import { join, dirname } from "node:path";
+import { existsSync, mkdirSync, readdirSync, readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
+import Database from "better-sqlite3";
 
-const DATA_DIR =
-  process.env.REGISTRY_DATA_DIR ?? join(process.cwd(), ".registry-data");
+const DATA_DIR = process.env.REGISTRY_DATA_DIR ?? join(process.cwd(), ".registry-data");
 const DB_PATH = join(DATA_DIR, "registry.db");
-const MIGRATIONS_DIR = join(
-  dirname(fileURLToPath(import.meta.url)),
-  "migrations",
-);
+const MIGRATIONS_DIR = join(dirname(fileURLToPath(import.meta.url)), "migrations");
 
 const GLOBAL_KEY = "__mc_registry_db__";
 
@@ -73,9 +69,7 @@ function runMigrations(db: Database.Database) {
     const sql = readFileSync(join(MIGRATIONS_DIR, file), "utf-8");
     const tx = db.transaction(() => {
       db.exec(sql);
-      db.prepare(
-        "INSERT INTO _migration (name, applied_at) VALUES (?, ?)",
-      ).run(file, Date.now());
+      db.prepare("INSERT INTO _migration (name, applied_at) VALUES (?, ?)").run(file, Date.now());
     });
     tx();
     console.log(`[registry] applied migration ${file}`);
diff --git a/src/lib/registry/identities.ts b/src/lib/registry/identities.ts
index 04cbeec..2d46f0f 100644
--- a/src/lib/registry/identities.ts
+++ b/src/lib/registry/identities.ts
@@ -1,8 +1,8 @@
 import "server-only";
 import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
 import type { IStorage } from "@inrupt/solid-client-authn-core";
-import { getDb } from "@/lib/registry/db";
 import { getEnv } from "@/lib/env";
+import { getDb } from "@/lib/registry/db";
 
 export type Identity = {
   webId: string;
@@ -28,10 +28,7 @@ function encrypt(plaintext: string): string {
   const key = getEnv().identityEncryptionKey;
   const iv = randomBytes(12); // 96-bit IV for AES-GCM
   const cipher = createCipheriv("aes-256-gcm", key, iv);
-  const enc = Buffer.concat([
-    cipher.update(plaintext, "utf-8"),
-    cipher.final(),
-  ]);
+  const enc = Buffer.concat([cipher.update(plaintext, "utf-8"), cipher.final()]);
   const tag = cipher.getAuthTag();
   return `${CIPHER_VERSION}:${iv.toString("base64")}:${tag.toString("base64")}:${enc.toString("base64")}`;
 }
@@ -49,11 +46,7 @@ function decrypt(stored: string): string | null {
     const iv = Buffer.from(parts[1], "base64");
     const tag = Buffer.from(parts[2], "base64");
     const data = Buffer.from(parts[3], "base64");
-    const decipher = createDecipheriv(
-      "aes-256-gcm",
-      getEnv().identityEncryptionKey,
-      iv,
-    );
+    const decipher = createDecipheriv("aes-256-gcm", getEnv().identityEncryptionKey, iv);
     decipher.setAuthTag(tag);
     const out = Buffer.concat([decipher.update(data), decipher.final()]);
     return out.toString("utf-8");
@@ -72,23 +65,17 @@ function decrypt(stored: string): string | null {
  */
 export function makeIdentityStorage(sessionId: string): IStorage {
   const db = getDb();
-  const getStmt = db.prepare(
-    "SELECT value FROM identity_storage WHERE session_id = ? AND key = ?",
-  );
+  const getStmt = db.prepare("SELECT value FROM identity_storage WHERE session_id = ? AND key = ?");
   const setStmt = db.prepare(
     `INSERT INTO identity_storage (session_id, key, value)
      VALUES (?, ?, ?)
      ON CONFLICT(session_id, key) DO UPDATE SET value = excluded.value`,
   );
-  const delStmt = db.prepare(
-    "DELETE FROM identity_storage WHERE session_id = ? AND key = ?",
-  );
+  const delStmt = db.prepare("DELETE FROM identity_storage WHERE session_id = ? AND key = ?");
 
   return {
     async get(key: string): Promise<string | undefined> {
-      const row = getStmt.get(sessionId, key) as
-        | { value: string }
-        | undefined;
+      const row = getStmt.get(sessionId, key) as { value: string } | undefined;
       if (!row) return undefined;
       const plain = decrypt(row.value);
       return plain ?? undefined;
@@ -103,9 +90,7 @@ export function makeIdentityStorage(sessionId: string): IStorage {
       // overwriting. Safe because the SDK never relies on field *removal*
       // via setForUser — explicit deletes go through `delete(key)`.
       if (key.startsWith("solidClientAuthenticationUser:")) {
-        const existing = getStmt.get(sessionId, key) as
-          | { value: string }
-          | undefined;
+        const existing = getStmt.get(sessionId, key) as { value: string } | undefined;
         if (existing) {
           const decrypted = decrypt(existing.value);
           if (decrypted) {
@@ -144,9 +129,7 @@ export function saveIdentity(input: {
     .prepare("SELECT session_id FROM identities WHERE web_id = ?")
     .get(input.webId) as { session_id: string } | undefined;
   if (existing && existing.session_id !== input.sessionId) {
-    db.prepare("DELETE FROM identity_storage WHERE session_id = ?").run(
-      existing.session_id,
-    );
+    db.prepare("DELETE FROM identity_storage WHERE session_id = ?").run(existing.session_id);
   }
   db.prepare(
     `INSERT INTO identities (web_id, session_id, oidc_issuer, connected_at)
@@ -206,9 +189,7 @@ export function deleteIdentity(webId: string): boolean {
   const db = getDb();
   const existing = getIdentityByWebId(webId);
   if (!existing) return false;
-  db.prepare("DELETE FROM identity_storage WHERE session_id = ?").run(
-    existing.sessionId,
-  );
+  db.prepare("DELETE FROM identity_storage WHERE session_id = ?").run(existing.sessionId);
   const info = db.prepare("DELETE FROM identities WHERE web_id = ?").run(webId);
   return info.changes > 0;
 }
diff --git a/src/lib/registry/issue-projection.ts b/src/lib/registry/issue-projection.ts
index 3933623..75d152f 100644
--- a/src/lib/registry/issue-projection.ts
+++ b/src/lib/registry/issue-projection.ts
@@ -1,8 +1,8 @@
 import "server-only";
 import { getDb } from "@/lib/registry/db";
-import type { Tracker } from "@/lib/tracker/model";
-import { trackerContainerUrl } from "@/lib/solid/tracker-pod";
 import type { Repo } from "@/lib/registry/repos";
+import { trackerContainerUrl } from "@/lib/solid/tracker-pod";
+import type { Tracker } from "@/lib/tracker/model";
 
 /**
  * Project a repo's `.mind`-derived `flow:Tracker` (read from the pod) into the
@@ -21,10 +21,7 @@ import type { Repo } from "@/lib/registry/repos";
  * (`{container}state.ttl#{id}`), the canonical resource a pod-native reader
  * (mind-issues, the SolidOS issue-pane) would dereference.
  */
-export function projectTrackerToRegistry(
-  repo: Repo,
-  tracker: Tracker,
-): { upserted: number } {
+export function projectTrackerToRegistry(repo: Repo, tracker: Tracker): { upserted: number } {
   const stateDoc = `${trackerContainerUrl(repo)}state.ttl`;
   const db = getDb();
   const now = Date.now();
diff --git a/src/lib/registry/issues.ts b/src/lib/registry/issues.ts
index a0c45db..6b41f66 100644
--- a/src/lib/registry/issues.ts
+++ b/src/lib/registry/issues.ts
@@ -78,10 +78,7 @@ function normaliseLabels(input: unknown): string[] {
     const norm = raw.trim().toLowerCase().replace(/\s+/g, "-");
     if (!norm) continue;
     if (!/^[a-z0-9][a-z0-9._-]{0,31}$/.test(norm)) {
-      throw new RegistryError(
-        `invalid label ${JSON.stringify(raw)}`,
-        "INVALID_INPUT",
-      );
+      throw new RegistryError(`invalid label ${JSON.stringify(raw)}`, "INVALID_INPUT");
     }
     if (!seen.has(norm)) {
       seen.add(norm);
@@ -122,9 +119,7 @@ export function createIssue(input: {
 
   const tx = db.transaction(() => {
     const next = db
-      .prepare(
-        "SELECT COALESCE(MAX(number), 0) + 1 AS n FROM issues WHERE repo_id = ?",
-      )
+      .prepare("SELECT COALESCE(MAX(number), 0) + 1 AS n FROM issues WHERE repo_id = ?")
       .get(input.repoId) as { n: number };
 
     const info = db
@@ -154,9 +149,9 @@ export function createIssue(input: {
 }
 
 export function getIssueById(id: number): Issue | null {
-  const row = getDb()
-    .prepare("SELECT * FROM issues WHERE id = ?")
-    .get(id) as Record<string, unknown> | undefined;
+  const row = getDb().prepare("SELECT * FROM issues WHERE id = ?").get(id) as
+    | Record<string, unknown>
+    | undefined;
   return row ? rowToIssue(row) : null;
 }
 
@@ -195,9 +190,7 @@ export function countIssuesByStatus(repoId: number): {
   closed: number;
 } {
   const rows = getDb()
-    .prepare(
-      "SELECT status, COUNT(*) AS n FROM issues WHERE repo_id = ? GROUP BY status",
-    )
+    .prepare("SELECT status, COUNT(*) AS n FROM issues WHERE repo_id = ? GROUP BY status")
     .all(repoId) as { status: string; n: number }[];
   const out = { open: 0, closed: 0 };
   for (const r of rows) {
@@ -303,18 +296,16 @@ export function addComment(input: {
         now,
       );
 
-    db.prepare("UPDATE issues SET updated_at = ? WHERE id = ?").run(
-      now,
-      input.issueId,
-    );
+    db.prepare("UPDATE issues SET updated_at = ? WHERE id = ?").run(now, input.issueId);
 
     return info.lastInsertRowid as number;
   });
 
   const id = tx();
-  const row = db
-    .prepare("SELECT * FROM issue_comments WHERE id = ?")
-    .get(id) as Record<string, unknown>;
+  const row = db.prepare("SELECT * FROM issue_comments WHERE id = ?").get(id) as Record<
+    string,
+    unknown
+  >;
   return rowToComment(row);
 }
 
@@ -324,15 +315,11 @@ export function addComment(input: {
  * number (from the row insert) before it can compute the pod URL.
  */
 export function setIssuePodUrl(id: number, podUrl: string): void {
-  getDb()
-    .prepare("UPDATE issues SET pod_url = ? WHERE id = ?")
-    .run(podUrl, id);
+  getDb().prepare("UPDATE issues SET pod_url = ? WHERE id = ?").run(podUrl, id);
 }
 
 export function setCommentPodUrl(id: number, podUrl: string): void {
-  getDb()
-    .prepare("UPDATE issue_comments SET pod_url = ? WHERE id = ?")
-    .run(podUrl, id);
+  getDb().prepare("UPDATE issue_comments SET pod_url = ? WHERE id = ?").run(podUrl, id);
 }
 
 export function countComments(issueId: number): number {
@@ -344,9 +331,7 @@ export function countComments(issueId: number): number {
 
 export function listComments(issueId: number): IssueComment[] {
   const rows = getDb()
-    .prepare(
-      "SELECT * FROM issue_comments WHERE issue_id = ? ORDER BY created_at ASC",
-    )
+    .prepare("SELECT * FROM issue_comments WHERE issue_id = ? ORDER BY created_at ASC")
     .all(issueId) as Record<string, unknown>[];
   return rows.map(rowToComment);
 }
diff --git a/src/lib/registry/pulls.ts b/src/lib/registry/pulls.ts
index 313d386..e8752c7 100644
--- a/src/lib/registry/pulls.ts
+++ b/src/lib/registry/pulls.ts
@@ -84,11 +84,9 @@ export function upsertPullRequest(input: {
       `SELECT * FROM pull_requests
        WHERE repo_id = ? AND source_branch = ? AND target_branch = ? AND status = 'open'`,
     )
-    .get(
-      input.repoId,
-      input.sourceBranch,
-      input.targetBranch,
-    ) as Record<string, unknown> | undefined;
+    .get(input.repoId, input.sourceBranch, input.targetBranch) as
+    | Record<string, unknown>
+    | undefined;
   if (existing) {
     db.prepare(
       `UPDATE pull_requests
@@ -115,9 +113,7 @@ export function upsertPullRequest(input: {
 
   const number = (
     db
-      .prepare(
-        "SELECT COALESCE(MAX(number), 0) + 1 AS n FROM pull_requests WHERE repo_id = ?",
-      )
+      .prepare("SELECT COALESCE(MAX(number), 0) + 1 AS n FROM pull_requests WHERE repo_id = ?")
       .get(input.repoId) as { n: number }
   ).n;
 
@@ -149,22 +145,14 @@ export function upsertPullRequest(input: {
   return rowToPull(row);
 }
 
-export function getPullRequest(
-  repoId: number,
-  number: number,
-): PullRequest | null {
+export function getPullRequest(repoId: number, number: number): PullRequest | null {
   const row = getDb()
-    .prepare(
-      "SELECT * FROM pull_requests WHERE repo_id = ? AND number = ?",
-    )
+    .prepare("SELECT * FROM pull_requests WHERE repo_id = ? AND number = ?")
     .get(repoId, number) as Record<string, unknown> | undefined;
   return row ? rowToPull(row) : null;
 }
 
-export function listPullRequests(
-  repoId: number,
-  status?: PullStatus | "all",
-): PullRequest[] {
+export function listPullRequests(repoId: number, status?: PullStatus | "all"): PullRequest[] {
   const filter = status && status !== "all" ? status : null;
   const rows = filter
     ? (getDb()
@@ -186,16 +174,16 @@ export function listPullRequests(
 
 export function countOpenPullRequests(repoId: number): number {
   const row = getDb()
-    .prepare(
-      "SELECT COUNT(*) AS n FROM pull_requests WHERE repo_id = ? AND status = 'open'",
-    )
+    .prepare("SELECT COUNT(*) AS n FROM pull_requests WHERE repo_id = ? AND status = 'open'")
     .get(repoId) as { n: number };
   return row.n;
 }
 
-export function countPullRequestsByStatus(
-  repoId: number,
-): { open: number; merged: number; closed: number } {
+export function countPullRequestsByStatus(repoId: number): {
+  open: number;
+  merged: number;
+  closed: number;
+} {
   const rows = getDb()
     .prepare(
       `SELECT status, COUNT(*) AS n FROM pull_requests
@@ -219,10 +207,7 @@ export function listPullRequestsForIssue(issueId: number): PullRequest[] {
   return rows.map(rowToPull);
 }
 
-export function markPullRequestMerged(
-  id: number,
-  mergeSha: string,
-): PullRequest {
+export function markPullRequestMerged(id: number, mergeSha: string): PullRequest {
   const now = Date.now();
   const db = getDb();
   const info = db
@@ -235,9 +220,10 @@ export function markPullRequestMerged(
   if (info.changes === 0) {
     throw new RegistryError("pull request is not open", "INVALID_INPUT");
   }
-  const row = db
-    .prepare("SELECT * FROM pull_requests WHERE id = ?")
-    .get(id) as Record<string, unknown>;
+  const row = db.prepare("SELECT * FROM pull_requests WHERE id = ?").get(id) as Record<
+    string,
+    unknown
+  >;
   return rowToPull(row);
 }
 
@@ -299,8 +285,9 @@ export function closePullRequest(id: number): PullRequest {
   if (info.changes === 0) {
     throw new RegistryError("pull request is not open", "INVALID_INPUT");
   }
-  const row = db
-    .prepare("SELECT * FROM pull_requests WHERE id = ?")
-    .get(id) as Record<string, unknown>;
+  const row = db.prepare("SELECT * FROM pull_requests WHERE id = ?").get(id) as Record<
+    string,
+    unknown
+  >;
   return rowToPull(row);
 }
diff --git a/src/lib/registry/quotas.ts b/src/lib/registry/quotas.ts
index 362f7ec..61ef205 100644
--- a/src/lib/registry/quotas.ts
+++ b/src/lib/registry/quotas.ts
@@ -37,10 +37,7 @@ export const QUOTAS = {
   maxReposPerOwner: envInt("MAX_REPOS_PER_OWNER", 50),
   maxTokensPerRepo: envInt("MAX_TOKENS_PER_REPO", 10),
   maxRunsPerOwnerPerDay: envInt("MAX_RUNS_PER_OWNER_PER_DAY", 500),
-  maxDiskPerRepoBytes: envInt(
-    "MAX_DISK_PER_REPO_BYTES",
-    1024 * 1024 * 1024,
-  ),
+  maxDiskPerRepoBytes: envInt("MAX_DISK_PER_REPO_BYTES", 1024 * 1024 * 1024),
   // Mind Packages (docs/PACKAGES-PLAN.md). Package blobs live in the pod, so
   // these guard the bridge's own ingest path, not local disk:
   //   • a single artifact larger than this is refused outright (default
@@ -49,10 +46,7 @@ export const QUOTAS = {
   //   • the sum of a repo's published blob sizes is capped separately from
   //     git disk so a few large images can't fill the pod (default 2 GiB)
   maxPackageBlobBytes: envInt("MAX_PACKAGE_BLOB_BYTES", 100 * 1024 * 1024),
-  maxPackageBytesPerRepo: envInt(
-    "MAX_PACKAGE_BYTES_PER_REPO",
-    2 * 1024 * 1024 * 1024,
-  ),
+  maxPackageBytesPerRepo: envInt("MAX_PACKAGE_BYTES_PER_REPO", 2 * 1024 * 1024 * 1024),
 };
 
 export class QuotaExceededError extends Error {
@@ -61,27 +55,21 @@ export class QuotaExceededError extends Error {
     public readonly limit: number,
     public readonly observed: number,
   ) {
-    super(
-      `quota exceeded: ${quota} (observed ${observed} >= limit ${limit})`,
-    );
+    super(`quota exceeded: ${quota} (observed ${observed} >= limit ${limit})`);
   }
 }
 
 export function countReposForOwner(owner: string): number {
-  const row = getDb()
-    .prepare("SELECT COUNT(*) AS c FROM repos WHERE owner = ?")
-    .get(owner) as { c: number };
+  const row = getDb().prepare("SELECT COUNT(*) AS c FROM repos WHERE owner = ?").get(owner) as {
+    c: number;
+  };
   return row.c;
 }
 
 export function assertCanCreateRepo(owner: string): void {
   const observed = countReposForOwner(owner);
   if (observed >= QUOTAS.maxReposPerOwner) {
-    throw new QuotaExceededError(
-      "maxReposPerOwner",
-      QUOTAS.maxReposPerOwner,
-      observed,
-    );
+    throw new QuotaExceededError("maxReposPerOwner", QUOTAS.maxReposPerOwner, observed);
   }
 }
 
@@ -95,11 +83,7 @@ export function countTokensForRepo(repoId: number): number {
 export function assertCanMintToken(repoId: number): void {
   const observed = countTokensForRepo(repoId);
   if (observed >= QUOTAS.maxTokensPerRepo) {
-    throw new QuotaExceededError(
-      "maxTokensPerRepo",
-      QUOTAS.maxTokensPerRepo,
-      observed,
-    );
+    throw new QuotaExceededError("maxTokensPerRepo", QUOTAS.maxTokensPerRepo, observed);
   }
 }
 
@@ -130,11 +114,7 @@ export function countRunsForOwnerPast24h(owner: string): number {
 export function assertCanDispatchRun(owner: string): void {
   const observed = countRunsForOwnerPast24h(owner);
   if (observed >= QUOTAS.maxRunsPerOwnerPerDay) {
-    throw new QuotaExceededError(
-      "maxRunsPerOwnerPerDay",
-      QUOTAS.maxRunsPerOwnerPerDay,
-      observed,
-    );
+    throw new QuotaExceededError("maxRunsPerOwnerPerDay", QUOTAS.maxRunsPerOwnerPerDay, observed);
   }
 }
 
@@ -155,11 +135,7 @@ export function sumPackageBytesForRepo(repoId: number): number {
  */
 export function assertCanStorePackage(repoId: number, addBytes: number): void {
   if (addBytes > QUOTAS.maxPackageBlobBytes) {
-    throw new QuotaExceededError(
-      "maxPackageBlobBytes",
-      QUOTAS.maxPackageBlobBytes,
-      addBytes,
-    );
+    throw new QuotaExceededError("maxPackageBlobBytes", QUOTAS.maxPackageBlobBytes, addBytes);
   }
   const observed = sumPackageBytesForRepo(repoId);
   if (observed + addBytes > QUOTAS.maxPackageBytesPerRepo) {
diff --git a/src/lib/registry/repos.ts b/src/lib/registry/repos.ts
index 743ed9f..d68ebc2 100644
--- a/src/lib/registry/repos.ts
+++ b/src/lib/registry/repos.ts
@@ -38,11 +38,7 @@ const NAME_RE = /^[a-z0-9][a-z0-9._-]{0,63}$/i;
 export class RegistryError extends Error {
   constructor(
     message: string,
-    public readonly code:
-      | "INVALID_NAME"
-      | "ALREADY_EXISTS"
-      | "NOT_FOUND"
-      | "INVALID_INPUT",
+    public readonly code: "INVALID_NAME" | "ALREADY_EXISTS" | "NOT_FOUND" | "INVALID_INPUT",
   ) {
     super(message);
   }
@@ -50,10 +46,7 @@ export class RegistryError extends Error {
 
 export function validateName(value: string, field: "owner" | "repo"): void {
   if (typeof value !== "string" || !NAME_RE.test(value) || value.includes("..")) {
-    throw new RegistryError(
-      `Invalid ${field} name: ${JSON.stringify(value)}`,
-      "INVALID_NAME",
-    );
+    throw new RegistryError(`Invalid ${field} name: ${JSON.stringify(value)}`, "INVALID_NAME");
   }
 }
 
@@ -122,10 +115,7 @@ export function createRepo(input: {
       "code" in e &&
       (e as { code: string }).code === "SQLITE_CONSTRAINT_UNIQUE"
     ) {
-      throw new RegistryError(
-        `Repo ${input.owner}/${input.name} already exists`,
-        "ALREADY_EXISTS",
-      );
+      throw new RegistryError(`Repo ${input.owner}/${input.name} already exists`, "ALREADY_EXISTS");
     }
     throw e;
   }
@@ -152,9 +142,9 @@ function rowToRepo(row: Record<string, unknown>): Repo {
 }
 
 export function getRepoById(id: number): Repo | null {
-  const row = getDb()
-    .prepare("SELECT * FROM repos WHERE id = ?")
-    .get(id) as Record<string, unknown> | undefined;
+  const row = getDb().prepare("SELECT * FROM repos WHERE id = ?").get(id) as
+    | Record<string, unknown>
+    | undefined;
   return row ? rowToRepo(row) : null;
 }
 
@@ -169,18 +159,17 @@ export function getRepo(owner: string, name: string): Repo | null {
 
 export function listRepos(): Repo[] {
   return (
-    getDb()
-      .prepare("SELECT * FROM repos ORDER BY created_at DESC")
-      .all() as Record<string, unknown>[]
+    getDb().prepare("SELECT * FROM repos ORDER BY created_at DESC").all() as Record<
+      string,
+      unknown
+    >[]
   ).map(rowToRepo);
 }
 
 export function updateRepo(
   owner: string,
   name: string,
-  patch: Partial<
-    Pick<Repo, "visibility" | "defaultBranch" | "proposalsEnabled" | "collabEnabled">
-  >,
+  patch: Partial<Pick<Repo, "visibility" | "defaultBranch" | "proposalsEnabled" | "collabEnabled">>,
 ): Repo {
   const repo = getRepo(owner, name);
   if (!repo) throw new RegistryError("repo not found", "NOT_FOUND");
@@ -220,7 +209,9 @@ export function updateRepo(
   if (fields.length === 0) return repo;
 
   values.push(repo.id);
-  getDb().prepare(`UPDATE repos SET ${fields.join(", ")} WHERE id = ?`).run(...values);
+  getDb()
+    .prepare(`UPDATE repos SET ${fields.join(", ")} WHERE id = ?`)
+    .run(...values);
   return getRepoById(repo.id)!;
 }
 
@@ -234,9 +225,7 @@ function rowToPages(row: Record<string, unknown>): PagesConfig {
     targetContainer: row.target_container as string,
     lastPublishedAt: (row.last_published_at as number | null) ?? null,
     lastPublishStatus:
-      status === "success" || status === "failed" || status === "needs-reauth"
-        ? status
-        : null,
+      status === "success" || status === "failed" || status === "needs-reauth" ? status : null,
     lastPublishError: (row.last_publish_error as string | null) ?? null,
     lastPublishAttempt: (row.last_publish_attempt as number | null) ?? null,
     lastPublishedSha: (row.last_published_sha as string | null) ?? null,
@@ -244,9 +233,9 @@ function rowToPages(row: Record<string, unknown>): PagesConfig {
 }
 
 export function getPagesConfig(repoId: number): PagesConfig | null {
-  const row = getDb()
-    .prepare("SELECT * FROM pages_configs WHERE repo_id = ?")
-    .get(repoId) as Record<string, unknown> | undefined;
+  const row = getDb().prepare("SELECT * FROM pages_configs WHERE repo_id = ?").get(repoId) as
+    | Record<string, unknown>
+    | undefined;
   return row ? rowToPages(row) : null;
 }
 
@@ -262,10 +251,7 @@ export function updatePagesConfig(
     patch.targetContainer !== "" &&
     !patch.targetContainer.startsWith("http")
   ) {
-    throw new RegistryError(
-      "targetContainer must be http(s) URL or empty",
-      "INVALID_INPUT",
-    );
+    throw new RegistryError("targetContainer must be http(s) URL or empty", "INVALID_INPUT");
   }
   if (
     patch.sourcePath !== undefined &&
@@ -294,13 +280,7 @@ export function updatePagesConfig(
          SET enabled = ?, source_branch = ?, source_path = ?, target_container = ?
        WHERE repo_id = ?`,
     )
-    .run(
-      next.enabled ? 1 : 0,
-      next.sourceBranch,
-      next.sourcePath,
-      next.targetContainer,
-      repoId,
-    );
+    .run(next.enabled ? 1 : 0, next.sourceBranch, next.sourcePath, next.targetContainer, repoId);
 
   return next;
 }
diff --git a/src/lib/registry/runs.ts b/src/lib/registry/runs.ts
index d83f6e1..659398d 100644
--- a/src/lib/registry/runs.ts
+++ b/src/lib/registry/runs.ts
@@ -1,12 +1,7 @@
 import "server-only";
 import { getDb } from "@/lib/registry/db";
 
-export type RunStatus =
-  | "queued"
-  | "running"
-  | "success"
-  | "failed"
-  | "error";
+export type RunStatus = "queued" | "running" | "success" | "failed" | "error";
 
 export type WorkflowRun = {
   id: number;
@@ -48,9 +43,9 @@ export function createRun(repoId: number, ref: string): WorkflowRun {
 }
 
 export function getRunById(id: number): WorkflowRun | null {
-  const row = getDb()
-    .prepare("SELECT * FROM workflow_runs WHERE id = ?")
-    .get(id) as Record<string, unknown> | undefined;
+  const row = getDb().prepare("SELECT * FROM workflow_runs WHERE id = ?").get(id) as
+    | Record<string, unknown>
+    | undefined;
   return row ? rowToRun(row) : null;
 }
 
@@ -66,18 +61,14 @@ export function getLatestRunForRepo(repoId: number): WorkflowRun | null {
 
 /** Total workflow runs across all repos. Used by the landing-page tile. */
 export function countAllRuns(): number {
-  const row = getDb()
-    .prepare("SELECT COUNT(*) AS c FROM workflow_runs")
-    .get() as { c: number };
+  const row = getDb().prepare("SELECT COUNT(*) AS c FROM workflow_runs").get() as { c: number };
   return row.c;
 }
 
 /** Most recent run across every repo, or null if nothing has run yet. */
 export function getLatestRunOverall(): WorkflowRun | null {
   const row = getDb()
-    .prepare(
-      `SELECT * FROM workflow_runs ORDER BY started_at DESC LIMIT 1`,
-    )
+    .prepare(`SELECT * FROM workflow_runs ORDER BY started_at DESC LIMIT 1`)
     .get() as Record<string, unknown> | undefined;
   return row ? rowToRun(row) : null;
 }
@@ -94,9 +85,7 @@ export function listRunsForRepo(repoId: number, limit = 20): WorkflowRun[] {
 }
 
 export function markRunRunning(id: number): void {
-  getDb()
-    .prepare("UPDATE workflow_runs SET status='running' WHERE id = ?")
-    .run(id);
+  getDb().prepare("UPDATE workflow_runs SET status='running' WHERE id = ?").run(id);
 }
 
 export function finishRun(
@@ -115,22 +104,12 @@ export function finishRun(
          SET status=?, exit_code=?, finished_at=?, log_tail=?, error_message=?
        WHERE id = ?`,
     )
-    .run(
-      input.status,
-      input.exitCode,
-      Date.now(),
-      tail,
-      input.errorMessage ?? null,
-      id,
-    );
+    .run(input.status, input.exitCode, Date.now(), tail, input.errorMessage ?? null, id);
 }
 
 function truncateTail(log: string): string {
   if (log.length <= LOG_TAIL_CAP) return log;
-  return (
-    "… (truncated, showing last 64 KB) …\n" +
-    log.slice(log.length - LOG_TAIL_CAP)
-  );
+  return "… (truncated, showing last 64 KB) …\n" + log.slice(log.length - LOG_TAIL_CAP);
 }
 
 /**
diff --git a/src/lib/registry/tokens.ts b/src/lib/registry/tokens.ts
index 1e3a37e..b176b71 100644
--- a/src/lib/registry/tokens.ts
+++ b/src/lib/registry/tokens.ts
@@ -1,5 +1,5 @@
 import "server-only";
-import { randomBytes, createHash } from "node:crypto";
+import { createHash, randomBytes } from "node:crypto";
 import { getDb } from "@/lib/registry/db";
 
 const TOKEN_PREFIX = "scp_";
@@ -65,9 +65,7 @@ export function verifyPushToken(repoId: number, plaintext: string): boolean {
   if (!plaintext.startsWith(TOKEN_PREFIX)) return false;
   const hash = sha256(plaintext);
   const row = getDb()
-    .prepare(
-      "SELECT 1 AS ok FROM push_tokens WHERE repo_id = ? AND token_hash = ?",
-    )
+    .prepare("SELECT 1 AS ok FROM push_tokens WHERE repo_id = ? AND token_hash = ?")
     .get(repoId, hash);
   return row !== undefined;
 }
diff --git a/src/lib/registry/users.ts b/src/lib/registry/users.ts
index 6d4e259..ec3f9d8 100644
--- a/src/lib/registry/users.ts
+++ b/src/lib/registry/users.ts
@@ -71,15 +71,15 @@ export function createUser(input: {
 }
 
 export function getUserByWebId(webId: string): User | null {
-  const row = getDb()
-    .prepare("SELECT * FROM users WHERE web_id = ?")
-    .get(webId) as Record<string, unknown> | undefined;
+  const row = getDb().prepare("SELECT * FROM users WHERE web_id = ?").get(webId) as
+    | Record<string, unknown>
+    | undefined;
   return row ? rowToUser(row) : null;
 }
 
 export function getUserBySlug(slug: string): User | null {
-  const row = getDb()
-    .prepare("SELECT * FROM users WHERE owner_slug = ?")
-    .get(slug) as Record<string, unknown> | undefined;
+  const row = getDb().prepare("SELECT * FROM users WHERE owner_slug = ?").get(slug) as
+    | Record<string, unknown>
+    | undefined;
   return row ? rowToUser(row) : null;
 }
diff --git a/src/lib/solid/auth.ts b/src/lib/solid/auth.ts
index 9a435aa..155bb65 100644
--- a/src/lib/solid/auth.ts
+++ b/src/lib/solid/auth.ts
@@ -29,31 +29,19 @@ export async function getCssAuthedFetch(input: {
   const { controls } = await discoverAccountControls(cssBaseUrl);
   const loginUrl = controls.password?.login;
   if (!loginUrl) {
-    throw new Error(
-      `CSS at ${cssBaseUrl} did not advertise a password-login endpoint.`,
-    );
+    throw new Error(`CSS at ${cssBaseUrl} did not advertise a password-login endpoint.`);
   }
 
   const { authorization } = await loginAccount(loginUrl, email, password);
 
-  const { controls: postLoginControls } = await discoverAccountControls(
-    cssBaseUrl,
-    authorization,
-  );
+  const { controls: postLoginControls } = await discoverAccountControls(cssBaseUrl, authorization);
   const credsUrl = postLoginControls.account?.clientCredentials;
   if (!credsUrl) {
-    throw new Error(
-      `CSS at ${cssBaseUrl} did not advertise clientCredentials after login.`,
-    );
+    throw new Error(`CSS at ${cssBaseUrl} did not advertise clientCredentials after login.`);
   }
 
   const credName = `mind-codespaces-publisher-${Date.now()}`;
-  const { id, secret } = await createClientCredentials(
-    credsUrl,
-    authorization,
-    credName,
-    webId,
-  );
+  const { id, secret } = await createClientCredentials(credsUrl, authorization, credName, webId);
 
   const session = new Session();
   await session.login({
@@ -71,10 +59,7 @@ export async function getCssAuthedFetch(input: {
   };
 }
 
-async function discoverAccountControls(
-  cssBaseUrl: string,
-  authorization?: string,
-) {
+async function discoverAccountControls(cssBaseUrl: string, authorization?: string) {
   const headers: Record<string, string> = { Accept: "application/json" };
   if (authorization) {
     headers.Authorization = `CSS-Account-Token ${authorization}`;
diff --git a/src/lib/solid/containers.ts b/src/lib/solid/containers.ts
index 8608042..e970954 100644
--- a/src/lib/solid/containers.ts
+++ b/src/lib/solid/containers.ts
@@ -14,16 +14,11 @@ import "server-only";
  * Ensure a container exists at `url`. Returns `true` if we created it,
  * `false` if it already existed. Throws on any other error.
  */
-export async function ensureContainer(
-  fetcher: typeof fetch,
-  url: string,
-): Promise<boolean> {
+export async function ensureContainer(fetcher: typeof fetch, url: string): Promise<boolean> {
   const head = await fetcher(url, { method: "HEAD" });
   if (head.ok) return false;
   if (head.status !== 404) {
-    throw new Error(
-      `unexpected response checking container ${url}: ${head.status}`,
-    );
+    throw new Error(`unexpected response checking container ${url}: ${head.status}`);
   }
   const put = await fetcher(url, {
     method: "PUT",
@@ -33,9 +28,7 @@ export async function ensureContainer(
     },
   });
   if (!put.ok && put.status !== 409 /* already exists */) {
-    throw new Error(
-      `failed to create container ${url}: ${put.status} ${put.statusText}`,
-    );
+    throw new Error(`failed to create container ${url}: ${put.status} ${put.statusText}`);
   }
   return true;
 }
@@ -75,9 +68,7 @@ export async function setPublicReadAcl(
     body,
   });
   if (!res.ok) {
-    throw new Error(
-      `failed to set public-read ACL on ${aclUrl}: ${res.status} ${res.statusText}`,
-    );
+    throw new Error(`failed to set public-read ACL on ${aclUrl}: ${res.status} ${res.statusText}`);
   }
 }
 
@@ -112,9 +103,7 @@ export async function setOwnerOnlyAcl(
     body,
   });
   if (!res.ok) {
-    throw new Error(
-      `failed to set owner-only ACL on ${aclUrl}: ${res.status} ${res.statusText}`,
-    );
+    throw new Error(`failed to set owner-only ACL on ${aclUrl}: ${res.status} ${res.statusText}`);
   }
 }
 
@@ -166,9 +155,7 @@ ${memberRules}`;
     body,
   });
   if (!res.ok) {
-    throw new Error(
-      `failed to set member-read ACL on ${aclUrl}: ${res.status} ${res.statusText}`,
-    );
+    throw new Error(`failed to set member-read ACL on ${aclUrl}: ${res.status} ${res.statusText}`);
   }
 }
 
@@ -187,8 +174,15 @@ function isSafeAclIri(value: string): boolean {
       // the ACL `<...>`: < > " { } | backslash ^ ` (backtick).
       if (c <= 0x20) return false;
       if (
-        c === 0x3c || c === 0x3e || c === 0x22 || c === 0x7b || c === 0x7d ||
-        c === 0x7c || c === 0x5c || c === 0x5e || c === 0x60
+        c === 0x3c ||
+        c === 0x3e ||
+        c === 0x22 ||
+        c === 0x7b ||
+        c === 0x7d ||
+        c === 0x7c ||
+        c === 0x5c ||
+        c === 0x5e ||
+        c === 0x60
       )
         return false;
     }
@@ -272,8 +266,6 @@ ${publicRule}`;
     body,
   });
   if (!res.ok) {
-    throw new Error(
-      `failed to set inbox ACL on ${aclUrl}: ${res.status} ${res.statusText}`,
-    );
+    throw new Error(`failed to set inbox ACL on ${aclUrl}: ${res.status} ${res.statusText}`);
   }
 }
diff --git a/src/lib/solid/css-account.ts b/src/lib/solid/css-account.ts
index 47ef5a3..2fbc203 100644
--- a/src/lib/solid/css-account.ts
+++ b/src/lib/solid/css-account.ts
@@ -73,11 +73,8 @@ async function reqJson(
   });
   // The Fetch API exposes Set-Cookie via getSetCookie() in Node 20+.
   const setCookies =
-    typeof (res.headers as unknown as { getSetCookie?: () => string[] })
-      .getSetCookie === "function"
-      ? (
-          res.headers as unknown as { getSetCookie: () => string[] }
-        ).getSetCookie()
+    typeof (res.headers as unknown as { getSetCookie?: () => string[] }).getSetCookie === "function"
+      ? (res.headers as unknown as { getSetCookie: () => string[] }).getSetCookie()
       : [];
   mergeSetCookies(jar, setCookies);
   const location = res.headers.get("location");
@@ -104,11 +101,8 @@ async function reqRaw(
     redirect: "manual",
   });
   const setCookies =
-    typeof (res.headers as unknown as { getSetCookie?: () => string[] })
-      .getSetCookie === "function"
-      ? (
-          res.headers as unknown as { getSetCookie: () => string[] }
-        ).getSetCookie()
+    typeof (res.headers as unknown as { getSetCookie?: () => string[] }).getSetCookie === "function"
+      ? (res.headers as unknown as { getSetCookie: () => string[] }).getSetCookie()
       : [];
   mergeSetCookies(jar, setCookies);
   return {
@@ -141,16 +135,9 @@ export async function runPasswordLoginOidcFlow(input: {
   const issuer = new URL(input.oidcRedirectUrl).origin;
   const accountIndex = await reqJson(`${issuer}/.account/`, jar);
   if (accountIndex.status !== 200 || !accountIndex.body) {
-    throw new HttpError(
-      "could not read CSS account controls",
-      accountIndex.status,
-    );
+    throw new HttpError("could not read CSS account controls", accountIndex.status);
   }
-  const passwordLogin = pickStringPath(accountIndex.body, [
-    "controls",
-    "password",
-    "login",
-  ]);
+  const passwordLogin = pickStringPath(accountIndex.body, ["controls", "password", "login"]);
   if (!passwordLogin) {
     throw new HttpError("CSS account did not advertise password login", 500);
   }
@@ -173,24 +160,13 @@ export async function runPasswordLoginOidcFlow(input: {
   // Expect a 303 to /.account/ — that's CSS asking the client to drive
   // the pick-webid / consent prompts via the account API.
   if (oidc.status !== 303 || !oidc.location) {
-    throw new HttpError(
-      `unexpected OIDC start response (HTTP ${oidc.status})`,
-      oidc.status,
-    );
+    throw new HttpError(`unexpected OIDC start response (HTTP ${oidc.status})`, oidc.status);
   }
 
   // Step 4: refresh account view — now the `oidc.*` controls exist.
   const accountMid = await reqJson(`${issuer}/.account/`, jar);
-  const pickWebIdUrl = pickStringPath(accountMid.body ?? {}, [
-    "controls",
-    "oidc",
-    "webId",
-  ]);
-  const consentUrl = pickStringPath(accountMid.body ?? {}, [
-    "controls",
-    "oidc",
-    "consent",
-  ]);
+  const pickWebIdUrl = pickStringPath(accountMid.body ?? {}, ["controls", "oidc", "webId"]);
+  const consentUrl = pickStringPath(accountMid.body ?? {}, ["controls", "oidc", "consent"]);
   if (!pickWebIdUrl || !consentUrl) {
     throw new HttpError(
       "CSS account did not advertise OIDC controls — is an interaction active?",
@@ -199,24 +175,15 @@ export async function runPasswordLoginOidcFlow(input: {
   }
 
   // Find a WebID linked to this account.
-  const accountWebIdsUrl = pickStringPath(accountMid.body ?? {}, [
-    "controls",
-    "account",
-    "webId",
-  ]);
+  const accountWebIdsUrl = pickStringPath(accountMid.body ?? {}, ["controls", "account", "webId"]);
   if (!accountWebIdsUrl) {
     throw new HttpError("CSS did not expose account.webId control", 500);
   }
   const webIds = await reqJson(accountWebIdsUrl, jar);
-  const links = webIds.body?.["webIdLinks"] as
-    | Record<string, string>
-    | undefined;
+  const links = webIds.body?.["webIdLinks"] as Record<string, string> | undefined;
   const candidate = links ? Object.keys(links) : [];
   if (candidate.length === 0) {
-    throw new HttpError(
-      "no WebID linked to this account — register a pod first",
-      400,
-    );
+    throw new HttpError("no WebID linked to this account — register a pod first", 400);
   }
   // For the single-WebID-per-account case (the common path on CSS)
   // we just pick it. Multi-WebID accounts could surface a UI later.
@@ -228,13 +195,9 @@ export async function runPasswordLoginOidcFlow(input: {
     body: { webId },
   });
   if (pick.status >= 400) {
-    throw new HttpError(
-      stringField(pick.body, "message") ?? "pick-webid failed",
-      pick.status,
-    );
+    throw new HttpError(stringField(pick.body, "message") ?? "pick-webid failed", pick.status);
   }
-  const resumeAfterPick =
-    stringField(pick.body, "location") ?? `${issuer}/.account/`;
+  const resumeAfterPick = stringField(pick.body, "location") ?? `${issuer}/.account/`;
 
   // Step 6: resume the OIDC flow once — moves prompt from "login" to
   // "consent". We follow the redirect manually so we capture cookies.
@@ -275,10 +238,7 @@ export async function runPasswordLoginOidcFlow(input: {
   }
   const resumeAfterConsent = stringField(consent.body, "location");
   if (!resumeAfterConsent) {
-    throw new HttpError(
-      "OIDC consent did not return a resume URL",
-      500,
-    );
+    throw new HttpError("OIDC consent did not return a resume URL", 500);
   }
 
   // Step 8: follow the final resume — CSS now 303s to the bridge's
@@ -286,18 +246,12 @@ export async function runPasswordLoginOidcFlow(input: {
   // `completeAuthFlow` expects.
   const final = await reqRaw(resumeAfterConsent, jar);
   if (final.status !== 303 || !final.location) {
-    throw new HttpError(
-      `OIDC final resume did not redirect (HTTP ${final.status})`,
-      final.status,
-    );
+    throw new HttpError(`OIDC final resume did not redirect (HTTP ${final.status})`, final.status);
   }
   return { callbackUrl: final.location };
 }
 
-function pickStringPath(
-  obj: unknown,
-  path: string[],
-): string | undefined {
+function pickStringPath(obj: unknown, path: string[]): string | undefined {
   let cur: unknown = obj;
   for (const k of path) {
     if (!cur || typeof cur !== "object") return undefined;
@@ -306,10 +260,7 @@ function pickStringPath(
   return typeof cur === "string" ? cur : undefined;
 }
 
-function stringField(
-  obj: Record<string, unknown> | null,
-  key: string,
-): string | undefined {
+function stringField(obj: Record<string, unknown> | null, key: string): string | undefined {
   if (!obj) return undefined;
   const v = obj[key];
   return typeof v === "string" ? v : undefined;
diff --git a/src/lib/solid/fetch-for-owner.ts b/src/lib/solid/fetch-for-owner.ts
index e67e640..93b1472 100644
--- a/src/lib/solid/fetch-for-owner.ts
+++ b/src/lib/solid/fetch-for-owner.ts
@@ -1,10 +1,7 @@
 import "server-only";
-import { getCssAuthedFetch } from "@/lib/solid/auth";
-import {
-  loadAuthedFetchForWebId,
-  OidcRefreshFailedError,
-} from "@/lib/solid/oidc-server";
 import { getEnv } from "@/lib/env";
+import { getCssAuthedFetch } from "@/lib/solid/auth";
+import { loadAuthedFetchForWebId, OidcRefreshFailedError } from "@/lib/solid/oidc-server";
 
 export type OwnerFetch = {
   fetch: typeof fetch;
@@ -19,9 +16,7 @@ export type OwnerFetch = {
  */
 export class OwnerFetchUnavailableError extends Error {
   constructor(
-    public readonly reason:
-      | "needs-reauthorization"
-      | "no-identity-and-seeded-disabled",
+    public readonly reason: "needs-reauthorization" | "no-identity-and-seeded-disabled",
     public readonly webId: string,
   ) {
     super(
@@ -70,10 +65,7 @@ export async function getOwnerFetch(webId: string): Promise<OwnerFetch> {
 
   const env = getEnv();
   if (env.isProd || !env.allowSeededFallback) {
-    throw new OwnerFetchUnavailableError(
-      "no-identity-and-seeded-disabled",
-      webId,
-    );
+    throw new OwnerFetchUnavailableError("no-identity-and-seeded-disabled", webId);
   }
 
   const seeded = await getCssAuthedFetch({
diff --git a/src/lib/solid/inbox.ts b/src/lib/solid/inbox.ts
index b272f24..549629e 100644
--- a/src/lib/solid/inbox.ts
+++ b/src/lib/solid/inbox.ts
@@ -1,16 +1,16 @@
 import "server-only";
 import { randomUUID } from "node:crypto";
 import {
-  getSolidDataset,
   getContainedResourceUrlAll,
-  getThing,
+  getDatetime,
+  getSolidDataset,
   getStringNoLocale,
+  getThing,
   getUrl,
-  getDatetime,
 } from "@inrupt/solid-client";
 import type { Repo } from "@/lib/registry/repos";
-import { getOwnerFetch } from "@/lib/solid/fetch-for-owner";
 import { ensureContainer, setInboxAcl } from "@/lib/solid/containers";
+import { getOwnerFetch } from "@/lib/solid/fetch-for-owner";
 import { NS } from "@/lib/vocab";
 
 /**
@@ -61,8 +61,7 @@ export type Proposal = {
   createdAt: number | null;
 };
 
-const UUID_RE =
-  /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 
 /**
  * Triple-quoted Turtle long string — keeps newlines literal. Every `"` is
@@ -129,10 +128,7 @@ export function renderProposalTurtle(input: ProposalInput): string {
 }
 
 /** Ensure the inbox container + its append-only ACL exist. Idempotent. */
-export async function ensureInbox(
-  fetcher: typeof fetch,
-  repo: Repo,
-): Promise<void> {
+export async function ensureInbox(fetcher: typeof fetch, repo: Repo): Promise<void> {
   const url = inboxContainerUrl(repo);
   const created = await ensureContainer(fetcher, url);
   if (created) {
@@ -213,10 +209,7 @@ export async function listProposals(repo: Repo): Promise<Proposal[]> {
           contact: getStringNoLocale(thing, `${NS.solidgit}contact`),
           createdAt: getDatetime(thing, `${NS.dcterms}created`)?.getTime() ?? null,
         });
-      } catch {
-        // A malformed member shouldn't sink the whole listing.
-        continue;
-      }
+      } catch {}
     }
     out.sort((a, b) => (b.createdAt ?? 0) - (a.createdAt ?? 0));
     return out;
@@ -230,10 +223,7 @@ export async function listProposals(repo: Repo): Promise<Proposal[]> {
 }
 
 /** Read a single proposal by id (owner fetch), or null if absent. */
-export async function getProposal(
-  repo: Repo,
-  id: string,
-): Promise<Proposal | null> {
+export async function getProposal(repo: Repo, id: string): Promise<Proposal | null> {
   if (!UUID_RE.test(id)) return null;
   const all = await listProposals(repo);
   return all.find((p) => p.id === id) ?? null;
diff --git a/src/lib/solid/issues.ts b/src/lib/solid/issues.ts
index a749834..2686a6e 100644
--- a/src/lib/solid/issues.ts
+++ b/src/lib/solid/issues.ts
@@ -1,8 +1,8 @@
 import "server-only";
-import type { Repo } from "@/lib/registry/repos";
 import type { Issue, IssueComment } from "@/lib/registry/issues";
-import { getOwnerFetch } from "@/lib/solid/fetch-for-owner";
+import type { Repo } from "@/lib/registry/repos";
 import { ensureContainer, setPublicReadAcl } from "@/lib/solid/containers";
+import { getOwnerFetch } from "@/lib/solid/fetch-for-owner";
 import { NS } from "@/lib/vocab";
 
 /**
@@ -55,9 +55,7 @@ function isoDt(ms: number): string {
 
 function renderIssueTurtle(repo: Repo, issue: Issue): string {
   const repoUrl = `${trailingSlash(repo.ownerPodRoot)}codespaces/${repo.name}/index.ttl#repo`;
-  const labels = issue.labels
-    .map((l) => `"${l.replace(/"/g, '\\"')}"`)
-    .join(", ");
+  const labels = issue.labels.map((l) => `"${l.replace(/"/g, '\\"')}"`).join(", ");
 
   const lines = [
     `@prefix solidgit: <${NS.solidgit}>.`,
@@ -87,11 +85,7 @@ function renderIssueTurtle(repo: Repo, issue: Issue): string {
   return lines.join("\n");
 }
 
-function renderCommentTurtle(
-  repo: Repo,
-  issueNumber: number,
-  comment: IssueComment,
-): string {
+function renderCommentTurtle(repo: Repo, issueNumber: number, comment: IssueComment): string {
   const parent = `${issueContainerUrl(repo, issueNumber)}issue.ttl#issue`;
   return `@prefix solidgit: <${NS.solidgit}>.
 @prefix dcterms: <${NS.dcterms}>.
diff --git a/src/lib/solid/members.ts b/src/lib/solid/members.ts
index a5aa03f..b596596 100644
--- a/src/lib/solid/members.ts
+++ b/src/lib/solid/members.ts
@@ -1,16 +1,8 @@
 import "server-only";
-import {
-  getSolidDataset,
-  getThingAll,
-  getUrl,
-  getStringNoLocale,
-} from "@inrupt/solid-client";
+import { getSolidDataset, getStringNoLocale, getThingAll, getUrl } from "@inrupt/solid-client";
 import type { Repo } from "@/lib/registry/repos";
+import { ensureContainer, setVisibilityAcl } from "@/lib/solid/containers";
 import { getOwnerFetch } from "@/lib/solid/fetch-for-owner";
-import {
-  ensureContainer,
-  setVisibilityAcl,
-} from "@/lib/solid/containers";
 import { NS } from "@/lib/vocab";
 
 /**
@@ -77,8 +69,15 @@ export function isSafeWebId(value: string): boolean {
       const c = value.charCodeAt(i);
       if (c <= 0x20) return false;
       if (
-        c === 0x3c || c === 0x3e || c === 0x22 || c === 0x7b || c === 0x7d ||
-        c === 0x7c || c === 0x5c || c === 0x5e || c === 0x60
+        c === 0x3c ||
+        c === 0x3e ||
+        c === 0x22 ||
+        c === 0x7b ||
+        c === 0x7d ||
+        c === 0x7c ||
+        c === 0x5c ||
+        c === 0x5e ||
+        c === 0x60
       )
         return false;
     }
@@ -112,9 +111,7 @@ export function renderMembersTurtle(repo: Repo, members: Member[]): string {
   ];
   if (safe.length > 0) {
     lines[lines.length - 1] += " ;";
-    lines.push(
-      `    solidgit:hasMember ${safe.map((_, i) => `<#m${i}>`).join(", ")} .`,
-    );
+    lines.push(`    solidgit:hasMember ${safe.map((_, i) => `<#m${i}>`).join(", ")} .`);
   } else {
     lines[lines.length - 1] += " .";
   }
@@ -135,18 +132,12 @@ export function renderMembersTurtle(repo: Repo, members: Member[]): string {
  * thread the current members into a container's ACL without a second login.
  * Empty on absence/transient error.
  */
-export async function readMembersWithFetch(
-  fetcher: typeof fetch,
-  repo: Repo,
-): Promise<Member[]> {
+export async function readMembersWithFetch(fetcher: typeof fetch, repo: Repo): Promise<Member[]> {
   return fetchRoster(fetcher, repo);
 }
 
 /** Parse the roster from an already-fetched pod dataset URL. */
-async function fetchRoster(
-  fetcher: typeof fetch,
-  repo: Repo,
-): Promise<Member[]> {
+async function fetchRoster(fetcher: typeof fetch, repo: Repo): Promise<Member[]> {
   let ds;
   try {
     ds = await getSolidDataset(membersUrl(repo), { fetch: fetcher });
@@ -168,11 +159,7 @@ async function fetchRoster(
 }
 
 /** PUT the roster document with the owner's authed fetch. */
-async function putRoster(
-  fetcher: typeof fetch,
-  repo: Repo,
-  members: Member[],
-): Promise<void> {
+async function putRoster(fetcher: typeof fetch, repo: Repo, members: Member[]): Promise<void> {
   const url = membersUrl(repo);
   const res = await fetcher(url, {
     method: "PUT",
@@ -227,10 +214,7 @@ export async function readMembers(repo: Repo): Promise<Member[]> {
  * `admin` (no pod read needed — the common case). Anyone else is looked up in
  * the roster; returns null if they are not a member.
  */
-export async function resolveMemberRole(
-  repo: Repo,
-  webId: string,
-): Promise<MemberRole | null> {
+export async function resolveMemberRole(repo: Repo, webId: string): Promise<MemberRole | null> {
   if (webId === repo.ownerWebId) return "admin";
   const roster = await readMembers(repo);
   return roster.find((m) => m.webId === webId)?.role ?? null;
@@ -241,10 +225,7 @@ export async function resolveMemberRole(
  * mirrors `ensureInbox`). Only writes when the roster does not already exist so
  * an existing roster is never clobbered.
  */
-export async function ensureMembers(
-  fetcher: typeof fetch,
-  repo: Repo,
-): Promise<void> {
+export async function ensureMembers(fetcher: typeof fetch, repo: Repo): Promise<void> {
   const head = await fetcher(membersUrl(repo), { method: "HEAD" });
   if (head.ok) return; // already provisioned — leave the roster as-is
   await putRoster(fetcher, repo, []);
@@ -256,11 +237,7 @@ export async function ensureMembers(
  * Returns the updated roster. Owner-mediated: the bridge writes as the owner
  * via the delegated fetch; the member never writes the owner's pod directly.
  */
-export async function addMember(
-  repo: Repo,
-  webId: string,
-  role: MemberRole,
-): Promise<Member[]> {
+export async function addMember(repo: Repo, webId: string, role: MemberRole): Promise<Member[]> {
   if (!isSafeWebId(webId)) {
     throw new Error(`refusing to add unsafe WebID: ${JSON.stringify(webId)}`);
   }
@@ -286,10 +263,7 @@ export async function addMember(
  * single roster write + ACL rewrite — atomic, unlike spraying WAC grants).
  * Returns the updated roster.
  */
-export async function removeMember(
-  repo: Repo,
-  webId: string,
-): Promise<Member[]> {
+export async function removeMember(repo: Repo, webId: string): Promise<Member[]> {
   const authed = await getOwnerFetch(repo.ownerWebId);
   try {
     const roster = await fetchRoster(authed.fetch, repo);
diff --git a/src/lib/solid/oidc-server.ts b/src/lib/solid/oidc-server.ts
index f8e1f19..265e1f7 100644
--- a/src/lib/solid/oidc-server.ts
+++ b/src/lib/solid/oidc-server.ts
@@ -1,13 +1,9 @@
 import "server-only";
 import { randomUUID } from "node:crypto";
-import { Session, getSessionFromStorage } from "@inrupt/solid-client-authn-node";
-import {
-  getIdentityByWebId,
-  makeIdentityStorage,
-  saveIdentity,
-} from "@/lib/registry/identities";
+import { getSessionFromStorage, Session } from "@inrupt/solid-client-authn-node";
 import { getEnv } from "@/lib/env";
 import { log, scrubWebId } from "@/lib/log";
+import { getIdentityByWebId, makeIdentityStorage, saveIdentity } from "@/lib/registry/identities";
 
 const CLIENT_NAME = "Mind Codespaces";
 
@@ -114,14 +110,9 @@ export async function completeAuthFlow(input: {
   }
   // Find the issuer the SDK chose so we can record it. Prefer the
   // session info, fall back to walking storage.
-  const userRecord = await storage.get(
-    `solidClientAuthenticationUser:${input.sessionId}`,
-  );
+  const userRecord = await storage.get(`solidClientAuthenticationUser:${input.sessionId}`);
   const oidcIssuer =
-    (await storage.get("issuer")) ??
-    (await storage.get("oidc:issuer")) ??
-    userRecord ??
-    "";
+    (await storage.get("issuer")) ?? (await storage.get("oidc:issuer")) ?? userRecord ?? "";
   // Connect-time persistence check (MC-176). The publish path fails for newly
   // connected WebIDs with "refresh token failed". This pins down *which* half
   // of the split it is — "no refresh token was ever stored" vs "the IdP later
@@ -134,8 +125,7 @@ export async function completeAuthFlow(input: {
   if (userRecord) {
     try {
       hasRefreshToken =
-        typeof (JSON.parse(userRecord) as { refreshToken?: unknown })
-          .refreshToken === "string";
+        typeof (JSON.parse(userRecord) as { refreshToken?: unknown }).refreshToken === "string";
     } catch {
       /* non-JSON record — leave hasRefreshToken false */
     }
@@ -181,9 +171,7 @@ function parseIssuerFromStorageValue(v: string): string {
  * up that records what actually went wrong so the
  * `OidcRefreshFailedError` is no longer opaque.
  */
-export async function loadAuthedFetchForWebId(
-  webId: string,
-): Promise<typeof fetch | null> {
+export async function loadAuthedFetchForWebId(webId: string): Promise<typeof fetch | null> {
   const identity = getIdentityByWebId(webId);
   if (!identity) return null;
 
diff --git a/src/lib/solid/profile.ts b/src/lib/solid/profile.ts
index 2376523..b57d00e 100644
--- a/src/lib/solid/profile.ts
+++ b/src/lib/solid/profile.ts
@@ -1,11 +1,11 @@
 import "server-only";
 import {
+  getContainedResourceUrlAll,
   getSolidDataset,
-  getThing,
   getStringNoLocale,
+  getThing,
   getUrl,
   getUrlAll,
-  getContainedResourceUrlAll,
 } from "@inrupt/solid-client";
 
 const FOAF = "http://xmlns.com/foaf/0.1/";
@@ -34,9 +34,7 @@ export async function fetchProfile(webId: string): Promise<ProfileSummary> {
   const document = stripFragment(webId);
   const [dataset, rawTurtle] = await Promise.all([
     getSolidDataset(document),
-    fetch(document, { headers: { Accept: "text/turtle" } }).then((r) =>
-      r.ok ? r.text() : "",
-    ),
+    fetch(document, { headers: { Accept: "text/turtle" } }).then((r) => (r.ok ? r.text() : "")),
   ]);
   const thing = getThing(dataset, webId);
   if (!thing) {
@@ -60,9 +58,7 @@ export async function fetchProfile(webId: string): Promise<ProfileSummary> {
     document,
     name: getStringNoLocale(thing, `${FOAF}name`),
     nick: getStringNoLocale(thing, `${FOAF}nick`),
-    bio:
-      getStringNoLocale(thing, `${VCARD}note`) ??
-      getStringNoLocale(thing, `${RDFS}comment`),
+    bio: getStringNoLocale(thing, `${VCARD}note`) ?? getStringNoLocale(thing, `${RDFS}comment`),
     homepage: getUrl(thing, `${FOAF}homepage`),
     oidcIssuer: getUrl(thing, `${SOLID}oidcIssuer`),
     img: getUrl(thing, `${FOAF}img`),
@@ -180,9 +176,8 @@ export async function verifyPodRootForWebId(
   // fetch() joins them with `, ` per the Web spec, so parse with a
   // regex that tolerates that.
   const link = headResp.headers.get("link") ?? "";
-  const isStorage = /<\s*http:\/\/www\.w3\.org\/ns\/pim\/space#Storage\s*>\s*;\s*rel\s*=\s*"?type"?/i.test(
-    link,
-  );
+  const isStorage =
+    /<\s*http:\/\/www\.w3\.org\/ns\/pim\/space#Storage\s*>\s*;\s*rel\s*=\s*"?type"?/i.test(link);
   if (!isStorage) {
     return {
       ok: false,
diff --git a/src/lib/solid/pulls.ts b/src/lib/solid/pulls.ts
index 93d4b98..d43e3da 100644
--- a/src/lib/solid/pulls.ts
+++ b/src/lib/solid/pulls.ts
@@ -1,9 +1,9 @@
 import "server-only";
-import type { Repo } from "@/lib/registry/repos";
-import type { PullRequest } from "@/lib/registry/pulls";
 import { getIssueById } from "@/lib/registry/issues";
-import { getOwnerFetch } from "@/lib/solid/fetch-for-owner";
+import type { PullRequest } from "@/lib/registry/pulls";
+import type { Repo } from "@/lib/registry/repos";
 import { ensureContainer, setVisibilityAcl } from "@/lib/solid/containers";
+import { getOwnerFetch } from "@/lib/solid/fetch-for-owner";
 import { issueUrl } from "@/lib/solid/issues";
 import { readMembersWithFetch } from "@/lib/solid/members";
 import { NS } from "@/lib/vocab";
@@ -111,13 +111,7 @@ async function ensurePullContainers(
       repo.visibility === "private"
         ? (await readMembersWithFetch(fetcher, repo)).map((m) => m.webId)
         : [];
-    await setVisibilityAcl(
-      fetcher,
-      pullsUrl,
-      repo.ownerWebId,
-      repo.visibility,
-      memberWebIds,
-    );
+    await setVisibilityAcl(fetcher, pullsUrl, repo.ownerWebId, repo.visibility, memberWebIds);
   }
   await ensureContainer(fetcher, pullContainerUrl(repo, pullNumber));
 }
diff --git a/src/lib/solid/repo-metadata.ts b/src/lib/solid/repo-metadata.ts
index 25461be..c8ca3c5 100644
--- a/src/lib/solid/repo-metadata.ts
+++ b/src/lib/solid/repo-metadata.ts
@@ -1,7 +1,7 @@
 import "server-only";
-import type { Repo, PagesConfig } from "@/lib/registry/repos";
-import { getOwnerFetch } from "@/lib/solid/fetch-for-owner";
+import type { PagesConfig, Repo } from "@/lib/registry/repos";
 import { ensureContainer, setPublicReadAcl } from "@/lib/solid/containers";
+import { getOwnerFetch } from "@/lib/solid/fetch-for-owner";
 import { ensureInbox, inboxContainerUrl } from "@/lib/solid/inbox";
 import { ensureMembers, membersUrl } from "@/lib/solid/members";
 import { NS } from "@/lib/vocab";
@@ -16,16 +16,12 @@ import { NS } from "@/lib/vocab";
  * can discover the repository description without authenticating.
  */
 function metadataUrl(repo: Repo): string {
-  const root = repo.ownerPodRoot.endsWith("/")
-    ? repo.ownerPodRoot
-    : `${repo.ownerPodRoot}/`;
+  const root = repo.ownerPodRoot.endsWith("/") ? repo.ownerPodRoot : `${repo.ownerPodRoot}/`;
   return `${root}codespaces/${repo.name}/index.ttl`;
 }
 
 function metadataContainer(repo: Repo): string {
-  const root = repo.ownerPodRoot.endsWith("/")
-    ? repo.ownerPodRoot
-    : `${repo.ownerPodRoot}/`;
+  const root = repo.ownerPodRoot.endsWith("/") ? repo.ownerPodRoot : `${repo.ownerPodRoot}/`;
   return `${root}codespaces/${repo.name}/`;
 }
 
@@ -54,15 +50,9 @@ function renderTurtle(repo: Repo, pages: PagesConfig | null): string {
   if (pages?.enabled && pages.targetContainer) {
     lines[lines.length - 1] += " ;";
     lines.push(`    solidgit:pagesEnabled true ;`);
-    lines.push(
-      `    solidgit:pagesSourceBranch ${JSON.stringify(pages.sourceBranch)} ;`,
-    );
-    lines.push(
-      `    solidgit:pagesSourcePath ${JSON.stringify(pages.sourcePath)} ;`,
-    );
-    lines.push(
-      `    solidgit:pagesTarget <${pages.targetContainer}>`,
-    );
+    lines.push(`    solidgit:pagesSourceBranch ${JSON.stringify(pages.sourceBranch)} ;`);
+    lines.push(`    solidgit:pagesSourcePath ${JSON.stringify(pages.sourcePath)} ;`);
+    lines.push(`    solidgit:pagesTarget <${pages.targetContainer}>`);
   }
   // Advertise the proposal inbox. `ldp:inbox` makes it discoverable by any
   // LDN-aware agent (the spec hook); `solidgit:proposalsEnabled` records
@@ -116,11 +106,7 @@ async function writeRepoMetadataOnce(
   const authed = await getOwnerFetch(repo.ownerWebId);
 
   try {
-    await ensureCodespacesContainer(
-      authed.fetch,
-      repo.ownerPodRoot,
-      repo.ownerWebId,
-    );
+    await ensureCodespacesContainer(authed.fetch, repo.ownerPodRoot, repo.ownerWebId);
     await ensureContainer(authed.fetch, metadataContainer(repo));
     // Provision the LDN proposal inbox while we already hold the owner's
     // authenticated fetch. Idempotent — only the first call writes the
@@ -139,9 +125,7 @@ async function writeRepoMetadataOnce(
       body,
     });
     if (!res.ok) {
-      throw new Error(
-        `PUT ${url} failed: ${res.status} ${res.statusText}`,
-      );
+      throw new Error(`PUT ${url} failed: ${res.status} ${res.statusText}`);
     }
     return { url, mode: authed.mode };
   } finally {
diff --git a/src/lib/solid/tracker-pod.ts b/src/lib/solid/tracker-pod.ts
index 50dba1b..00a57a7 100644
--- a/src/lib/solid/tracker-pod.ts
+++ b/src/lib/solid/tracker-pod.ts
@@ -1,11 +1,11 @@
 import "server-only";
+import { hasAnyCommits, readBlob } from "@/lib/git/objects";
+import { log } from "@/lib/log";
 import type { Repo } from "@/lib/registry/repos";
-import { getOwnerFetch } from "@/lib/solid/fetch-for-owner";
 import { ensureContainer, setPublicReadAcl } from "@/lib/solid/containers";
-import { readBlob, hasAnyCommits } from "@/lib/git/objects";
-import { parseTrackerTrio } from "@/lib/tracker/parse";
+import { getOwnerFetch } from "@/lib/solid/fetch-for-owner";
 import type { Tracker } from "@/lib/tracker/model";
-import { log } from "@/lib/log";
+import { parseTrackerTrio } from "@/lib/tracker/parse";
 
 /**
  * Mirror a repo's `.mind`-derived `flow:Tracker` into the **owner's pod**, so
@@ -77,9 +77,7 @@ export async function publishTrackerToPod(
       body: outputs[key],
     });
     if (!res.ok && res.status !== 201 && res.status !== 205) {
-      throw new Error(
-        `failed to PUT tracker doc ${url}: ${res.status} ${res.statusText}`,
-      );
+      throw new Error(`failed to PUT tracker doc ${url}: ${res.status} ${res.statusText}`);
     }
     written.push(url);
   }
@@ -93,9 +91,7 @@ export async function publishTrackerToPod(
  * a missing `tracker.ttl`/`epics.ttl` degrades gracefully (parser tolerates
  * nulls).
  */
-export async function readPodTrackerOutputs(
-  repo: Repo,
-): Promise<TrackerOutputs | null> {
+export async function readPodTrackerOutputs(repo: Repo): Promise<TrackerOutputs | null> {
   const container = trackerContainerUrl(repo);
   const owner = await getOwnerFetch(repo.ownerWebId);
 
@@ -103,19 +99,14 @@ export async function readPodTrackerOutputs(
     const res = await owner.fetch(`${container}${name}`, { method: "GET" });
     if (res.status === 404) return null;
     if (!res.ok) {
-      throw new Error(
-        `failed to GET tracker doc ${container}${name}: ${res.status}`,
-      );
+      throw new Error(`failed to GET tracker doc ${container}${name}: ${res.status}`);
     }
     return res.text();
   };
 
   const state = await get(DOC_NAMES.state);
   if (state === null) return null;
-  const [tracker, epics] = await Promise.all([
-    get(DOC_NAMES.tracker),
-    get(DOC_NAMES.epics),
-  ]);
+  const [tracker, epics] = await Promise.all([get(DOC_NAMES.tracker), get(DOC_NAMES.epics)]);
   return { tracker: tracker ?? "", epics: epics ?? "", state };
 }
 
@@ -160,10 +151,7 @@ export async function mirrorTrackerFromGit(
     };
     const state = await read(DOC_NAMES.state);
     if (state === null) return false; // no tracker in this push
-    const [tracker, epics] = await Promise.all([
-      read(DOC_NAMES.tracker),
-      read(DOC_NAMES.epics),
-    ]);
+    const [tracker, epics] = await Promise.all([read(DOC_NAMES.tracker), read(DOC_NAMES.epics)]);
     await publishTrackerToPod(repo, {
       tracker: tracker ?? "",
       epics: epics ?? "",
diff --git a/src/lib/tracker/author.ts b/src/lib/tracker/author.ts
index e908008..cefa58a 100644
--- a/src/lib/tracker/author.ts
+++ b/src/lib/tracker/author.ts
@@ -1,8 +1,8 @@
 import "server-only";
 import { spawn } from "node:child_process";
-import { mkdir, writeFile } from "node:fs/promises";
-import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
 import { randomBytes } from "node:crypto";
+import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
+import { mkdir, writeFile } from "node:fs/promises";
 import { join } from "node:path";
 import { checkoutBranchToTempDir } from "@/lib/git/checkout";
 import { buildTrackerOutputs, TrackerBuildError } from "./build";
@@ -199,10 +199,7 @@ export async function createMindIssue(
   try {
     checkout = await checkoutBranchToTempDir(bareRepoPath, branch);
   } catch (e) {
-    throw new IssueAuthorError(
-      `could not check out "${branch}": ${(e as Error).message}`,
-      500,
-    );
+    throw new IssueAuthorError(`could not check out "${branch}": ${(e as Error).message}`, 500);
   }
   const { tempDir, cleanup } = checkout;
 
@@ -214,10 +211,7 @@ export async function createMindIssue(
       current = buildTrackerOutputs(tempDir);
     } catch (e) {
       if (e instanceof TrackerBuildError) {
-        throw new IssueAuthorError(
-          `this repo has no usable .mind tracker (${e.message})`,
-          409,
-        );
+        throw new IssueAuthorError(`this repo has no usable .mind tracker (${e.message})`, 409);
       }
       throw e;
     }
@@ -250,23 +244,19 @@ export async function createMindIssue(
     const typeId = category.label;
 
     const wantsEpic = input.epicSlug && input.epicSlug !== "general";
-    const epic = wantsEpic
-      ? tracker.epics.find((e) => e.slug === input.epicSlug)
-      : undefined;
+    const epic = wantsEpic ? tracker.epics.find((e) => e.slug === input.epicSlug) : undefined;
     if (wantsEpic && !epic) {
       throw new IssueAuthorError(`unknown epic "${input.epicSlug}"`);
     }
 
-    const nextNumber =
-      tracker.issues.reduce((max, i) => Math.max(max, i.number ?? 0), 0) + 1;
+    const nextNumber = tracker.issues.reduce((max, i) => Math.max(max, i.number ?? 0), 0) + 1;
     const id = mintIssueId(nextNumber);
     const slug = slugify(title);
 
     const now = new Date();
     const date = now.toISOString().slice(0, 10); // YYYY-MM-DD
     const hhmm =
-      String(now.getUTCHours()).padStart(2, "0") +
-      String(now.getUTCMinutes()).padStart(2, "0");
+      String(now.getUTCHours()).padStart(2, "0") + String(now.getUTCMinutes()).padStart(2, "0");
     const tag = actorTag(input.authorWebId);
 
     const issuesDir = join(tempDir, ".mind", "issues");
@@ -414,17 +404,13 @@ export async function createMindEpic(
 ): Promise<CreateEpicResult> {
   const title = input.title.trim();
   if (!title) throw new IssueAuthorError("title is required");
-  const status =
-    input.status && EPIC_STATUSES.has(input.status) ? input.status : "planned";
+  const status = input.status && EPIC_STATUSES.has(input.status) ? input.status : "planned";
 
   let checkout: { tempDir: string; cleanup: () => Promise<void> };
   try {
     checkout = await checkoutBranchToTempDir(bareRepoPath, branch);
   } catch (e) {
-    throw new IssueAuthorError(
-      `could not check out "${branch}": ${(e as Error).message}`,
-      500,
-    );
+    throw new IssueAuthorError(`could not check out "${branch}": ${(e as Error).message}`, 500);
   }
   const { tempDir, cleanup } = checkout;
 
@@ -434,10 +420,7 @@ export async function createMindEpic(
       buildTrackerOutputs(tempDir);
     } catch (e) {
       if (e instanceof TrackerBuildError) {
-        throw new IssueAuthorError(
-          `this repo has no usable .mind tracker (${e.message})`,
-          409,
-        );
+        throw new IssueAuthorError(`this repo has no usable .mind tracker (${e.message})`, 409);
       }
       throw e;
     }
diff --git a/src/lib/tracker/build.ts b/src/lib/tracker/build.ts
index b749bee..3311014 100644
--- a/src/lib/tracker/build.ts
+++ b/src/lib/tracker/build.ts
@@ -12,7 +12,7 @@
  * `<rootDir>/.mind/issues/**` and returns the three `build/*.ttl` documents as
  * strings; the caller decides where to write them.
  */
-import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
+import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
 import { join, relative } from "node:path";
 import { parse as parseYaml } from "yaml";
 
@@ -100,7 +100,10 @@ function frontmatter(text: string, file: string): { data: any; body: string } {
   const end = text.indexOf("\n---", 3);
   if (end === -1) fail(`${file}: unterminated YAML frontmatter (no closing '---')`);
   const yaml = text.slice(3, end);
-  const body = text.slice(end + 4).replace(/^\r?\n/, "").trimEnd();
+  const body = text
+    .slice(end + 4)
+    .replace(/^\r?\n/, "")
+    .trimEnd();
   let data: any;
   try {
     data = parseYaml(yaml) ?? {};
@@ -164,7 +167,10 @@ function loadConfig(issuesDir: string, rootDir: string): Config {
     if (data[k] == null) fail(`tracker.config.md: missing required key "${k}"`);
   }
   const states: State[] = (data.states as any[]).map((s) => ({ ...s, label: s.label ?? s.id }));
-  const categories: Category[] = (data.categories as any[]).map((c) => ({ ...c, label: c.label ?? c.id }));
+  const categories: Category[] = (data.categories as any[]).map((c) => ({
+    ...c,
+    label: c.label ?? c.id,
+  }));
   const cfg: Config = {
     title: data.title,
     description: data.description,
@@ -190,7 +196,9 @@ function foldEvents(
   rel: string,
 ): { state: string; holder?: string; afk?: boolean; blocks: string[]; modified?: string } | null {
   if (!existsSync(eventsDir)) return null;
-  const files = readdirSync(eventsDir).filter((f) => f.endsWith(".md")).sort();
+  const files = readdirSync(eventsDir)
+    .filter((f) => f.endsWith(".md"))
+    .sort();
   if (!files.length) return null;
   const stateIds = new Set(cfg.states.map((s) => s.id));
 
@@ -202,7 +210,8 @@ function foldEvents(
     const { data } = frontmatter(readFileSync(join(eventsDir, f), "utf8"), `${rel}/events/${f}`);
     if (data.at != null) lastAt = data.at;
     if (data.to != null) {
-      if (!stateIds.has(data.to)) fail(`${rel}/events/${f}: \`to: ${data.to}\` is not a declared state`);
+      if (!stateIds.has(data.to))
+        fail(`${rel}/events/${f}: \`to: ${data.to}\` is not a declared state`);
       state = data.to;
     }
     if (Array.isArray(data.blocks)) blocks = data.blocks.map(String);
@@ -231,10 +240,12 @@ function loadIssuesIn(cfg: Config, groupDir: string, groupRel: string): Issue[]
     if (data.state != null)
       fail(`${rel}/issue.md: must NOT carry a \`state:\` field — state is the fold of events/`);
     const category = String(data.type);
-    if (!catIds.has(category)) fail(`${rel}/issue.md: type "${category}" not in tracker.config.md categories`);
+    if (!catIds.has(category))
+      fail(`${rel}/issue.md: type "${category}" not in tracker.config.md categories`);
 
     const folded = foldEvents(cfg, join(dir, "events"), rel);
-    if (!folded) fail(`${rel}/: no events/ — an issue needs at least an \`open\` event to have a state`);
+    if (!folded)
+      fail(`${rel}/: no events/ — an issue needs at least an \`open\` event to have a state`);
 
     issues.push({
       id: String(data.id),
@@ -264,7 +275,15 @@ function loadEpics(cfg: Config, issuesDir: string, rootDir: string): Epic[] {
   if (existsSync(generalDir) && statSync(generalDir).isDirectory()) {
     const issues = loadIssuesIn(cfg, generalDir, GENERAL_DIR);
     if (issues.length)
-      epics.push({ slug: GENERAL_DIR, number: 0, title: "General", status: "active", body: "", issues, isGeneral: true });
+      epics.push({
+        slug: GENERAL_DIR,
+        number: 0,
+        title: "General",
+        status: "active",
+        body: "",
+        issues,
+        isGeneral: true,
+      });
   }
 
   // Epics sort by their on-disk address (timestamp-prefixed ⇒ creation order);
@@ -404,7 +423,8 @@ function renderState(cfg: Config, epics: Epic[]): string {
       if (i.modified) lines.push(`dct:modified "${i.modified}"^^xsd:date`);
       if (i.assignee) lines.push(`wf:assignee <${i.assignee}>`);
       if (i.afk != null) lines.push(`mc:afk ${i.afk ? "true" : "false"}`);
-      if (i.blocks.length) lines.push(`mc:blocks ${i.blocks.map((b) => `<#${issueFrag(b)}>`).join(" , ")}`);
+      if (i.blocks.length)
+        lines.push(`mc:blocks ${i.blocks.map((b) => `<#${issueFrag(b)}>`).join(" , ")}`);
       if (i.blockedBy.length)
         lines.push(`mc:blockedBy ${i.blockedBy.map((b) => `<#${issueFrag(b)}>`).join(" , ")}`);
       lines.push(`wf:description ${ttlLong(i.body)}`);
diff --git a/src/lib/tracker/model.ts b/src/lib/tracker/model.ts
index fe57595..45e41ca 100644
--- a/src/lib/tracker/model.ts
+++ b/src/lib/tracker/model.ts
@@ -105,10 +105,7 @@ export function localName(iri: string): string {
  * on the board, while an epic whose issues are merely filtered out (e.g. all
  * closed while viewing "open") stays hidden rather than cluttering the view.
  */
-export function groupByEpic(
-  tracker: Tracker,
-  issues: TrackerIssue[],
-): TrackerGroup[] {
+export function groupByEpic(tracker: Tracker, issues: TrackerIssue[]): TrackerGroup[] {
   const groups: TrackerGroup[] = [];
   const general = issues.filter(
     (i) => !i.epicSlug || !tracker.epics.some((e) => e.slug === i.epicSlug),
@@ -116,9 +113,7 @@ export function groupByEpic(
   if (general.length > 0) groups.push({ kind: "general", issues: general });
   for (const epic of tracker.epics) {
     const inEpic = issues.filter((i) => i.epicSlug === epic.slug);
-    const totalInEpic = tracker.issues.filter(
-      (i) => i.epicSlug === epic.slug,
-    ).length;
+    const totalInEpic = tracker.issues.filter((i) => i.epicSlug === epic.slug).length;
     if (inEpic.length > 0 || totalInEpic === 0) {
       groups.push({ kind: "epic", epic, issues: inEpic });
     }
diff --git a/src/lib/tracker/parse.ts b/src/lib/tracker/parse.ts
index a26dd2f..a50c579 100644
--- a/src/lib/tracker/parse.ts
+++ b/src/lib/tracker/parse.ts
@@ -1,8 +1,8 @@
 import { Parser, type Quad, type Term } from "n3";
 import {
-  localName,
   type IssueCategory,
   type IssueState,
+  localName,
   type Tracker,
   type TrackerEpic,
   type TrackerIssue,
@@ -192,12 +192,8 @@ export function parseTrackerTrio(
   idx.add(parseDoc(ttl.state, baseRoot + "state.ttl"));
 
   const trackerIri = idx.subjects().find((s) => idx.hasType(s, FLOW_TRACKER));
-  const issueClassIri = trackerIri
-    ? idx.iri(trackerIri, FLOW_ISSUE_CLASS)
-    : undefined;
-  const categoryClassIri = trackerIri
-    ? idx.iri(trackerIri, FLOW_ISSUE_CATEGORY)
-    : undefined;
+  const issueClassIri = trackerIri ? idx.iri(trackerIri, FLOW_ISSUE_CLASS) : undefined;
+  const categoryClassIri = trackerIri ? idx.iri(trackerIri, FLOW_ISSUE_CATEGORY) : undefined;
 
   const states = parseStates(idx, issueClassIri);
   const categories = parseCategories(idx, categoryClassIri);
@@ -246,31 +242,33 @@ function parseCategories(idx: Index, categoryClassIri?: string): IssueCategory[]
   return idx
     .subjects()
     .filter(
-      (s) =>
-        s !== categoryClassIri &&
-        idx.iris(s, RDFS_SUBCLASSOF).includes(categoryClassIri),
+      (s) => s !== categoryClassIri && idx.iris(s, RDFS_SUBCLASSOF).includes(categoryClassIri),
     )
-    .map((s): IssueCategory => ({
-      id: localName(s),
-      classIri: s,
-      label: idx.str(s, RDFS_LABEL) ?? localName(s),
-    }));
+    .map(
+      (s): IssueCategory => ({
+        id: localName(s),
+        classIri: s,
+        label: idx.str(s, RDFS_LABEL) ?? localName(s),
+      }),
+    );
 }
 
 function parseEpics(idx: Index, mc: McVocab): TrackerEpic[] {
   return idx
     .subjects()
     .filter((s) => idx.hasType(s, mc.epicClass))
-    .map((s): TrackerEpic => ({
-      slug: localName(s),
-      iri: s,
-      number: idx.int(s, mc.number),
-      title: idx.strAny(s, DCT_TITLE, RDFS_LABEL) ?? localName(s),
-      status: idx.str(s, mc.status),
-      issueCount: idx.int(s, mc.issueCount),
-      description: idx.str(s, DCT_DESCRIPTION),
-      created: idx.str(s, DCT_CREATED),
-    }))
+    .map(
+      (s): TrackerEpic => ({
+        slug: localName(s),
+        iri: s,
+        number: idx.int(s, mc.number),
+        title: idx.strAny(s, DCT_TITLE, RDFS_LABEL) ?? localName(s),
+        status: idx.str(s, mc.status),
+        issueCount: idx.int(s, mc.issueCount),
+        description: idx.str(s, DCT_DESCRIPTION),
+        created: idx.str(s, DCT_CREATED),
+      }),
+    )
     .sort((a, b) => (a.number ?? 0) - (b.number ?? 0));
 }
 
@@ -286,9 +284,7 @@ function parseIssues(
   // "has a known state type" for trackers that omit the back-link.
   let subjects = idx.subjects().filter((s) => idx.iri(s, WF_TRACKER));
   if (subjects.length === 0) {
-    subjects = idx
-      .subjects()
-      .filter((s) => idx.iris(s, RDF_TYPE).some((t) => stateIris.has(t)));
+    subjects = idx.subjects().filter((s) => idx.iris(s, RDF_TYPE).some((t) => stateIris.has(t)));
   }
   return subjects
     .map((s): TrackerIssue => {
diff --git a/src/lib/tracker/read.ts b/src/lib/tracker/read.ts
index 2df1371..c5082d4 100644
--- a/src/lib/tracker/read.ts
+++ b/src/lib/tracker/read.ts
@@ -1,25 +1,21 @@
 import "server-only";
 import { hasAnyCommits, readBlob } from "@/lib/git/objects";
-import { parseTrackerTrio } from "./parse";
 import { groupByEpic, localName, type Tracker } from "./model";
+import { parseTrackerTrio } from "./parse";
 
-export { groupByEpic, localName, parseTrackerTrio };
 export type {
+  IssueCategory,
+  IssueState,
   Tracker,
   TrackerEpic,
-  TrackerIssue,
   TrackerGroup,
-  IssueState,
-  IssueCategory,
+  TrackerIssue,
 } from "./model";
+export { groupByEpic, localName, parseTrackerTrio };
 
 const BUILD_DIR = ".mind/build";
 
-async function readUtf8(
-  bare: string,
-  ref: string,
-  path: string,
-): Promise<string | null> {
+async function readUtf8(bare: string, ref: string, path: string): Promise<string | null> {
   const blob = await readBlob(bare, ref, path);
   return blob ? blob.bytes.toString("utf-8") : null;
 }
diff --git a/src/lib/tracker/source.ts b/src/lib/tracker/source.ts
index 3a93457..64f8a74 100644
--- a/src/lib/tracker/source.ts
+++ b/src/lib/tracker/source.ts
@@ -1,10 +1,10 @@
 import "server-only";
-import type { Repo } from "@/lib/registry/repos";
 import { repoPath } from "@/lib/git/backend";
-import { readGitTracker } from "./read";
+import { log } from "@/lib/log";
+import type { Repo } from "@/lib/registry/repos";
 import { readPodTracker } from "@/lib/solid/tracker-pod";
 import type { Tracker } from "./model";
-import { log } from "@/lib/log";
+import { readGitTracker } from "./read";
 
 /**
  * Read a repo's `flow:Tracker` for rendering — the single seam the dashboard
diff --git a/src/lib/workflows/parse.ts b/src/lib/workflows/parse.ts
index 0f02a75..9f86293 100644
--- a/src/lib/workflows/parse.ts
+++ b/src/lib/workflows/parse.ts
@@ -31,9 +31,7 @@ export function parseWorkflow(source: string): Workflow {
   try {
     raw = parseYaml(source);
   } catch (e) {
-    throw new WorkflowParseError(
-      `invalid YAML: ${(e as Error).message ?? "parse error"}`,
-    );
+    throw new WorkflowParseError(`invalid YAML: ${(e as Error).message ?? "parse error"}`);
   }
   if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
     throw new WorkflowParseError("workflow root must be a mapping");
@@ -56,9 +54,7 @@ export function parseWorkflow(source: string): Workflow {
   const run: string[] = [];
   for (const [i, cmd] of obj.run.entries()) {
     if (typeof cmd !== "string" || !cmd.trim()) {
-      throw new WorkflowParseError(
-        `run[${i}] must be a non-empty string`,
-      );
+      throw new WorkflowParseError(`run[${i}] must be a non-empty string`);
     }
     run.push(cmd);
   }
@@ -88,9 +84,7 @@ export function parseWorkflow(source: string): Workflow {
       obj.timeout < 1 ||
       obj.timeout > MAX_TIMEOUT_S
     ) {
-      throw new WorkflowParseError(
-        `\`timeout\` must be an integer between 1 and ${MAX_TIMEOUT_S}`,
-      );
+      throw new WorkflowParseError(`\`timeout\` must be an integer between 1 and ${MAX_TIMEOUT_S}`);
     }
     timeoutS = obj.timeout;
   }
diff --git a/src/lib/workflows/runner.ts b/src/lib/workflows/runner.ts
index e83c4d8..d84a86b 100644
--- a/src/lib/workflows/runner.ts
+++ b/src/lib/workflows/runner.ts
@@ -1,13 +1,12 @@
 import "server-only";
 import { readFile, stat } from "node:fs/promises";
 import { join, resolve, sep } from "node:path";
-import {
-  getRepoById,
-  getPagesConfig,
-  markPagesPublished,
-} from "@/lib/registry/repos";
-import { repoPath, readBranchHead } from "@/lib/git/backend";
+import { readBranchHead, repoPath } from "@/lib/git/backend";
 import { checkoutBranchToTempDir } from "@/lib/git/checkout";
+import { Metrics } from "@/lib/metrics";
+import { withPublishLock } from "@/lib/pages/publish-lock";
+import { publishDirectory } from "@/lib/pages/publisher";
+import { getPagesConfig, getRepoById, markPagesPublished } from "@/lib/registry/repos";
 import {
   createRun,
   finishRun,
@@ -15,11 +14,8 @@ import {
   markRunRunning,
   type WorkflowRun,
 } from "@/lib/registry/runs";
-import { parseWorkflow, WorkflowParseError } from "@/lib/workflows/parse";
-import { publishDirectory } from "@/lib/pages/publisher";
 import { resolveRunnerMode, runShellBatch } from "@/lib/workflows/docker";
-import { withPublishLock } from "@/lib/pages/publish-lock";
-import { Metrics } from "@/lib/metrics";
+import { parseWorkflow, WorkflowParseError } from "@/lib/workflows/parse";
 
 const WORKFLOW_PATH = ".mind/workflow.yml";
 
@@ -56,10 +52,7 @@ export async function runWorkflow(input: {
   if (!repo) throw new Error(`repo id=${input.repoId} not found`);
 
   const bare = repoPath(repo.owner, repo.name);
-  const { tempDir, cleanup } = await checkoutBranchToTempDir(
-    bare,
-    input.branch,
-  );
+  const { tempDir, cleanup } = await checkoutBranchToTempDir(bare, input.branch);
 
   // No-workflow path: silently return; caller falls back to legacy Pages publish.
   const workflowPath = join(tempDir, WORKFLOW_PATH);
@@ -136,11 +129,7 @@ export async function runWorkflow(input: {
             log += `[publish coalesced into an in-flight run]\n`;
           } else {
             log += `[published ${lockResult.uploaded} file(s)]\n`;
-            const headSha = await readBranchHead(
-              repo.owner,
-              repo.name,
-              input.branch,
-            );
+            const headSha = await readBranchHead(repo.owner, repo.name, input.branch);
             markPagesPublished(repo.id, { sha: headSha });
           }
         } catch (e) {
@@ -189,4 +178,3 @@ async function exists(path: string): Promise<boolean> {
     return false;
   }
 }
-
diff --git a/src/proxy.ts b/src/proxy.ts
index fe86420..c15d207 100644
--- a/src/proxy.ts
+++ b/src/proxy.ts
@@ -1,5 +1,5 @@
-import { NextResponse } from "next/server";
 import type { NextRequest } from "next/server";
+import { NextResponse } from "next/server";
 
 /**
  * CORS allowlist for the JSON API (P0-S8 second half).
@@ -70,10 +70,9 @@ export function proxy(req: NextRequest): NextResponse {
       headers: {
         "Access-Control-Allow-Origin": origin ?? "*",
         "Access-Control-Allow-Methods": "GET,POST,PUT,PATCH,DELETE,OPTIONS",
-        "Access-Control-Allow-Headers":
-          "Content-Type,Authorization,X-CSRF-Token,X-Mind-Dev-WebId",
+        "Access-Control-Allow-Headers": "Content-Type,Authorization,X-CSRF-Token,X-Mind-Dev-WebId",
         "Access-Control-Max-Age": "600",
-        "Vary": "Origin",
+        Vary: "Origin",
       },
     });
   }
diff --git a/tests/create-epic.test.ts b/tests/create-epic.test.ts
index 56d96c4..df79b21 100644
--- a/tests/create-epic.test.ts
+++ b/tests/create-epic.test.ts
@@ -1,7 +1,7 @@
-import { afterAll, describe, expect, it } from "vitest";
 import { cpSync, mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
+import { afterAll, describe, expect, it } from "vitest";
 import { buildTrackerOutputs } from "@/lib/tracker/build";
 import { parseTrackerTrio } from "@/lib/tracker/parse";
 
diff --git a/tests/fetch-for-owner.test.ts b/tests/fetch-for-owner.test.ts
index fb09626..8f58eb5 100644
--- a/tests/fetch-for-owner.test.ts
+++ b/tests/fetch-for-owner.test.ts
@@ -1,4 +1,4 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
+import { beforeEach, describe, expect, it, vi } from "vitest";
 
 /**
  * MC-173 contract: `getOwnerFetch` must convert a dead delegated identity
@@ -61,16 +61,12 @@ describe("getOwnerFetch — stale delegated identity", () => {
       "@/lib/solid/fetch-for-owner"
     );
     getEnv.mockReturnValue(devEnv()); // seeded fallback IS enabled
-    loadAuthedFetchForWebId.mockRejectedValue(
-      new MockOidcRefreshFailedError(WEBID),
-    );
+    loadAuthedFetchForWebId.mockRejectedValue(new MockOidcRefreshFailedError(WEBID));
 
     await expect(getOwnerFetch(WEBID)).rejects.toMatchObject({
       reason: "needs-reauthorization",
     });
-    await expect(getOwnerFetch(WEBID)).rejects.toBeInstanceOf(
-      OwnerFetchUnavailableError,
-    );
+    await expect(getOwnerFetch(WEBID)).rejects.toBeInstanceOf(OwnerFetchUnavailableError);
     // The connected-but-dead identity must never use the operator account.
     expect(getCssAuthedFetch).not.toHaveBeenCalled();
   });
diff --git a/tests/identity-storage-restart.test.ts b/tests/identity-storage-restart.test.ts
index e995814..4225fcf 100644
--- a/tests/identity-storage-restart.test.ts
+++ b/tests/identity-storage-restart.test.ts
@@ -1,7 +1,7 @@
-import { describe, it, expect, beforeAll } from "vitest";
 import { mkdtempSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
+import { beforeAll, describe, expect, it } from "vitest";
 
 /**
  * MC-150 regression: "Bridge restart drops pod auth → re-connect loop."
@@ -83,9 +83,7 @@ describe("identity storage survives a bridge restart (MC-150)", () => {
     const { getDb } = await import("@/lib/registry/db");
     const raw = (
       getDb()
-        .prepare(
-          "SELECT value FROM identity_storage WHERE session_id = ? AND key = ?",
-        )
+        .prepare("SELECT value FROM identity_storage WHERE session_id = ? AND key = ?")
         .get(SESSION_ID, STORAGE_KEY) as { value: string }
     ).value;
     expect(raw.startsWith("v1:")).toBe(true);
@@ -128,16 +126,11 @@ describe("identity storage survives a bridge restart (MC-150)", () => {
     );
     // …a later disjoint write (e.g. a rotated refresh token) must MERGE, not
     // clobber the keypair (the identities IStorage merges this special key).
-    await store.set(
-      key,
-      JSON.stringify({ refreshToken: "rt_rotated", isLoggedIn: "true" }),
-    );
+    await store.set(key, JSON.stringify({ refreshToken: "rt_rotated", isLoggedIn: "true" }));
 
     closeDb();
 
-    const record = JSON.parse(
-      (await makeIdentityStorage(sid).get(key)) as string,
-    );
+    const record = JSON.parse((await makeIdentityStorage(sid).get(key)) as string);
     expect(record.privateKey).toBe(SESSION_RECORD.privateKey);
     expect(record.refreshToken).toBe("rt_rotated");
     expect(record.dpop).toBe("true");
diff --git a/tests/inbox-acl.test.ts b/tests/inbox-acl.test.ts
index 5c30d74..bb3a451 100644
--- a/tests/inbox-acl.test.ts
+++ b/tests/inbox-acl.test.ts
@@ -1,4 +1,4 @@
-import { describe, it, expect } from "vitest";
+import { describe, expect, it } from "vitest";
 import { setInboxAcl } from "@/lib/solid/containers";
 
 // The inbox ACL is the security boundary of the whole proposals feature:
diff --git a/tests/inbox-roundtrip.test.ts b/tests/inbox-roundtrip.test.ts
index f9abee3..efad08c 100644
--- a/tests/inbox-roundtrip.test.ts
+++ b/tests/inbox-roundtrip.test.ts
@@ -1,4 +1,4 @@
-import { describe, it, expect, beforeEach, vi } from "vitest";
+import { beforeEach, describe, expect, it, vi } from "vitest";
 
 /**
  * End-to-end exercise of the LDN inbox module against an in-memory pod —
@@ -50,10 +50,7 @@ const { pod } = vi.hoisted(() => {
       // GET
       if (url.endsWith("/")) {
         const children = [...store.keys()].filter(
-          (k) =>
-            k.startsWith(url) &&
-            !k.slice(url.length).includes("/") &&
-            !k.endsWith(".acl"),
+          (k) => k.startsWith(url) && !k.slice(url.length).includes("/") && !k.endsWith(".acl"),
         );
         const contains = children.length
           ? ` ;\n    ldp:contains ${children.map((c) => `<${c}>`).join(", ")}`
@@ -130,8 +127,7 @@ describe("inbox round-trip", () => {
     const { postProposal, listProposals } = await import("@/lib/solid/inbox");
 
     const hostileTitle = 'Pwn "me" now';
-    const hostileBody =
-      'line one\n""" .\n<#evil> <http://ex/p> <http://ex/o> .\n"""more';
+    const hostileBody = 'line one\n""" .\n<#evil> <http://ex/p> <http://ex/o> .\n"""more';
     await postProposal(repo, {
       title: hostileTitle,
       body: hostileBody,
@@ -188,9 +184,7 @@ describe("inbox round-trip", () => {
   });
 
   it("dismiss deletes the notification", async () => {
-    const { postProposal, listProposals, deleteProposal } = await import(
-      "@/lib/solid/inbox"
-    );
+    const { postProposal, listProposals, deleteProposal } = await import("@/lib/solid/inbox");
 
     const { id } = await postProposal(repo, {
       title: "first",
diff --git a/tests/issue-projection.test.ts b/tests/issue-projection.test.ts
index 51cde46..d03fa5d 100644
--- a/tests/issue-projection.test.ts
+++ b/tests/issue-projection.test.ts
@@ -1,7 +1,7 @@
-import { describe, it, expect, beforeAll } from "vitest";
 import { mkdtempSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
+import { beforeAll, describe, expect, it } from "vitest";
 
 /**
  * MC-160 C5: "the Registry index is rebuildable from the pod tracker
@@ -37,12 +37,8 @@ function trackerWith(issues: Array<Record<string, unknown>>) {
 describe("projectTrackerToRegistry (MC-160)", () => {
   it("projects tracker issues into the registry index by number, idempotently", async () => {
     const { createRepo } = await import("@/lib/registry/repos");
-    const { projectTrackerToRegistry } = await import(
-      "@/lib/registry/issue-projection"
-    );
-    const { listIssues, getIssueByNumber } = await import(
-      "@/lib/registry/issues"
-    );
+    const { projectTrackerToRegistry } = await import("@/lib/registry/issue-projection");
+    const { listIssues, getIssueByNumber } = await import("@/lib/registry/issues");
 
     const repo = createRepo({
       owner: "alice",
@@ -103,12 +99,8 @@ describe("projectTrackerToRegistry (MC-160)", () => {
 
   it("leaves a coexisting flat issue.ttl row untouched (back-compat)", async () => {
     const { createRepo } = await import("@/lib/registry/repos");
-    const { createIssue, getIssueByNumber } = await import(
-      "@/lib/registry/issues"
-    );
-    const { projectTrackerToRegistry } = await import(
-      "@/lib/registry/issue-projection"
-    );
+    const { createIssue, getIssueByNumber } = await import("@/lib/registry/issues");
+    const { projectTrackerToRegistry } = await import("@/lib/registry/issue-projection");
 
     const repo = createRepo({
       owner: "alice",
diff --git a/tests/ledger-gate.test.ts b/tests/ledger-gate.test.ts
index fe0faf0..9475230 100644
--- a/tests/ledger-gate.test.ts
+++ b/tests/ledger-gate.test.ts
@@ -1,4 +1,4 @@
-import { describe, it, expect } from "vitest";
+import { describe, expect, it } from "vitest";
 import { gateEnvFallback } from "@/lib/ledger/policy";
 
 describe("gateEnvFallback — free-allotment gate for the bridge-default key", () => {
diff --git a/tests/members-roundtrip.test.ts b/tests/members-roundtrip.test.ts
index 310e11c..cd4d9f8 100644
--- a/tests/members-roundtrip.test.ts
+++ b/tests/members-roundtrip.test.ts
@@ -1,5 +1,5 @@
-import { describe, it, expect, beforeEach, vi } from "vitest";
 import { Parser, type Quad } from "n3";
+import { beforeEach, describe, expect, it, vi } from "vitest";
 
 /**
  * MC-157: pod-native repo membership (ADR-0002). Exercised against an
@@ -114,9 +114,7 @@ describe("renderMembersTurtle (MC-157)", () => {
       ),
     ).toHaveLength(1);
     expect(
-      quads.filter(
-        (q) => q.predicate.value === RDF_TYPE && q.object.value === `${SOLIDGIT}Member`,
-      ),
+      quads.filter((q) => q.predicate.value === RDF_TYPE && q.object.value === `${SOLIDGIT}Member`),
     ).toHaveLength(2);
     expect(objectsOf(quads, `${SOLIDGIT}agent`)).toEqual([BOB, CAROL]);
     expect(objectsOf(quads, `${SOLIDGIT}role`).sort()).toEqual(["reader", "writer"]);
@@ -182,9 +180,7 @@ describe("removeMember (MC-157)", () => {
     await addMember(privateRepo as never, BOB, "writer");
     await addMember(privateRepo as never, CAROL, "reader");
     await removeMember(privateRepo as never, BOB);
-    expect(await readMembers(privateRepo as never)).toEqual([
-      { webId: CAROL, role: "reader" },
-    ]);
+    expect(await readMembers(privateRepo as never)).toEqual([{ webId: CAROL, role: "reader" }]);
     const acl = pod.store.get(PULLS_ACL);
     expect(acl).toContain(CAROL);
     expect(acl).not.toContain(BOB); // revoked
diff --git a/tests/merge-empty-target.test.ts b/tests/merge-empty-target.test.ts
index 05d7cc7..dd46985 100644
--- a/tests/merge-empty-target.test.ts
+++ b/tests/merge-empty-target.test.ts
@@ -1,8 +1,8 @@
-import { describe, it, expect } from "vitest";
 import { execSync } from "node:child_process";
-import { mkdtempSync, mkdirSync, writeFileSync, rmSync } from "node:fs";
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
+import { describe, expect, it } from "vitest";
 import { mergeBranches } from "@/lib/git/merge";
 
 function makeBareRepo(): string {
@@ -55,20 +55,15 @@ describe("mergeBranches — empty target branch", () => {
       expect(refs).toContain("refs/heads/agent/issue-1");
       expect(refs).not.toContain("refs/heads/main\n");
 
-      const result = await mergeBranches(
-        bare,
-        "agent/issue-1",
-        "main",
-        "Merge pull request #1",
-        { name: "alice", email: "https://example.org/alice#me" },
-      );
+      const result = await mergeBranches(bare, "agent/issue-1", "main", "Merge pull request #1", {
+        name: "alice",
+        email: "https://example.org/alice#me",
+      });
       expect(result.ok).toBe(true);
       if (result.ok) expect(result.mergeSha).toBe(sha);
 
       // main now points at the source SHA on the bare.
-      const mainSha = execSync(`git -C "${bare}" rev-parse refs/heads/main`)
-        .toString()
-        .trim();
+      const mainSha = execSync(`git -C "${bare}" rev-parse refs/heads/main`).toString().trim();
       expect(mainSha).toBe(sha);
     } finally {
       rmSync(bare, { recursive: true, force: true });
@@ -78,13 +73,10 @@ describe("mergeBranches — empty target branch", () => {
   it("returns a clean error when neither target nor source exist", async () => {
     const bare = makeBareRepo();
     try {
-      const result = await mergeBranches(
-        bare,
-        "agent/issue-1",
-        "main",
-        "Merge pull request #1",
-        { name: "alice", email: "https://example.org/alice#me" },
-      );
+      const result = await mergeBranches(bare, "agent/issue-1", "main", "Merge pull request #1", {
+        name: "alice",
+        email: "https://example.org/alice#me",
+      });
       expect(result.ok).toBe(false);
       if (!result.ok) {
         expect(result.conflict).toBe(false);
diff --git a/tests/oidc-refresh-normalize.test.ts b/tests/oidc-refresh-normalize.test.ts
index 25a763e..171c788 100644
--- a/tests/oidc-refresh-normalize.test.ts
+++ b/tests/oidc-refresh-normalize.test.ts
@@ -1,4 +1,4 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
+import { beforeEach, describe, expect, it, vi } from "vitest";
 
 /**
  * MC-173 regression: a stale delegated identity (the issuer's dynamic-client
@@ -53,9 +53,7 @@ describe("loadAuthedFetchForWebId — dead registration normalization", () => {
     getIdentityByWebId.mockReturnValue(IDENTITY);
     // The SDK throws `invalid_client` when the dynamic registration is gone.
     getSessionFromStorage.mockRejectedValue(new Error("invalid_client"));
-    await expect(loadAuthedFetchForWebId(WEBID)).rejects.toBeInstanceOf(
-      OidcRefreshFailedError,
-    );
+    await expect(loadAuthedFetchForWebId(WEBID)).rejects.toBeInstanceOf(OidcRefreshFailedError);
   });
 
   it("throws OidcRefreshFailedError when refresh RETURNS a non-logged-in session", async () => {
@@ -64,9 +62,7 @@ describe("loadAuthedFetchForWebId — dead registration normalization", () => {
     );
     getIdentityByWebId.mockReturnValue(IDENTITY);
     getSessionFromStorage.mockResolvedValue({ info: { isLoggedIn: false } });
-    await expect(loadAuthedFetchForWebId(WEBID)).rejects.toBeInstanceOf(
-      OidcRefreshFailedError,
-    );
+    await expect(loadAuthedFetchForWebId(WEBID)).rejects.toBeInstanceOf(OidcRefreshFailedError);
   });
 
   it("returns the session fetch on a healthy refresh", async () => {
diff --git a/tests/oidc-session-cache.test.ts b/tests/oidc-session-cache.test.ts
index e3a228d..303c944 100644
--- a/tests/oidc-session-cache.test.ts
+++ b/tests/oidc-session-cache.test.ts
@@ -1,4 +1,4 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
+import { beforeEach, describe, expect, it, vi } from "vitest";
 
 /**
  * MC-176: Pages publish failed for newly-connected WebIDs with "refresh token
@@ -45,9 +45,7 @@ function sessionLoggedIn(label: string, expirationDate?: number) {
 
 describe("loadAuthedFetchForWebId — in-process session cache (MC-176)", () => {
   it("reuses the cached fetch instead of refreshing again while the token is valid", async () => {
-    const { loadAuthedFetchForWebId, clearCachedSession } = await import(
-      "@/lib/solid/oidc-server"
-    );
+    const { loadAuthedFetchForWebId, clearCachedSession } = await import("@/lib/solid/oidc-server");
     clearCachedSession(WEBID);
     getIdentityByWebId.mockReturnValue({
       webId: WEBID,
@@ -55,9 +53,7 @@ describe("loadAuthedFetchForWebId — in-process session cache (MC-176)", () =>
       oidcIssuer: "",
     });
     // Access token valid for 5 more minutes.
-    getSessionFromStorage.mockResolvedValue(
-      sessionLoggedIn("first", Date.now() + 5 * 60_000),
-    );
+    getSessionFromStorage.mockResolvedValue(sessionLoggedIn("first", Date.now() + 5 * 60_000));
 
     const first = await loadAuthedFetchForWebId(WEBID);
     const second = await loadAuthedFetchForWebId(WEBID);
@@ -68,18 +64,14 @@ describe("loadAuthedFetchForWebId — in-process session cache (MC-176)", () =>
   });
 
   it("re-derives when the WebID re-connects (sessionId changes)", async () => {
-    const { loadAuthedFetchForWebId, clearCachedSession } = await import(
-      "@/lib/solid/oidc-server"
-    );
+    const { loadAuthedFetchForWebId, clearCachedSession } = await import("@/lib/solid/oidc-server");
     clearCachedSession(WEBID);
     getIdentityByWebId.mockReturnValue({
       webId: WEBID,
       sessionId: "sess-old",
       oidcIssuer: "",
     });
-    getSessionFromStorage.mockResolvedValue(
-      sessionLoggedIn("old", Date.now() + 5 * 60_000),
-    );
+    getSessionFromStorage.mockResolvedValue(sessionLoggedIn("old", Date.now() + 5 * 60_000));
     await loadAuthedFetchForWebId(WEBID);
 
     // User re-/connect → new sessionId. The cached entry must be discarded.
@@ -88,18 +80,14 @@ describe("loadAuthedFetchForWebId — in-process session cache (MC-176)", () =>
       sessionId: "sess-new",
       oidcIssuer: "",
     });
-    getSessionFromStorage.mockResolvedValue(
-      sessionLoggedIn("new", Date.now() + 5 * 60_000),
-    );
+    getSessionFromStorage.mockResolvedValue(sessionLoggedIn("new", Date.now() + 5 * 60_000));
     await loadAuthedFetchForWebId(WEBID);
 
     expect(getSessionFromStorage).toHaveBeenCalledTimes(2);
   });
 
   it("re-derives once the cached access token is within the expiry skew", async () => {
-    const { loadAuthedFetchForWebId, clearCachedSession } = await import(
-      "@/lib/solid/oidc-server"
-    );
+    const { loadAuthedFetchForWebId, clearCachedSession } = await import("@/lib/solid/oidc-server");
     clearCachedSession(WEBID);
     getIdentityByWebId.mockReturnValue({
       webId: WEBID,
@@ -107,9 +95,7 @@ describe("loadAuthedFetchForWebId — in-process session cache (MC-176)", () =>
       oidcIssuer: "",
     });
     // Token already inside the 60s skew window → must not be reused.
-    getSessionFromStorage.mockResolvedValue(
-      sessionLoggedIn("stale", Date.now() + 10_000),
-    );
+    getSessionFromStorage.mockResolvedValue(sessionLoggedIn("stale", Date.now() + 10_000));
     await loadAuthedFetchForWebId(WEBID);
     await loadAuthedFetchForWebId(WEBID);
 
@@ -117,18 +103,14 @@ describe("loadAuthedFetchForWebId — in-process session cache (MC-176)", () =>
   });
 
   it("clearCachedSession forces the next call to refresh", async () => {
-    const { loadAuthedFetchForWebId, clearCachedSession } = await import(
-      "@/lib/solid/oidc-server"
-    );
+    const { loadAuthedFetchForWebId, clearCachedSession } = await import("@/lib/solid/oidc-server");
     clearCachedSession(WEBID);
     getIdentityByWebId.mockReturnValue({
       webId: WEBID,
       sessionId: "sess-clear",
       oidcIssuer: "",
     });
-    getSessionFromStorage.mockResolvedValue(
-      sessionLoggedIn("c", Date.now() + 5 * 60_000),
-    );
+    getSessionFromStorage.mockResolvedValue(sessionLoggedIn("c", Date.now() + 5 * 60_000));
     await loadAuthedFetchForWebId(WEBID);
     clearCachedSession(WEBID);
     await loadAuthedFetchForWebId(WEBID);
diff --git a/tests/packages-content-store.test.ts b/tests/packages-content-store.test.ts
index 93ad95e..e5421dc 100644
--- a/tests/packages-content-store.test.ts
+++ b/tests/packages-content-store.test.ts
@@ -1,7 +1,7 @@
-import { describe, it, expect, beforeAll } from "vitest";
 import { mkdtempSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
+import { beforeAll, describe, expect, it } from "vitest";
 
 // PodContentStore against an in-memory fake pod. Verifies:
 //   • save returns the sha256 of the bytes (content-addressed)
@@ -31,8 +31,7 @@ function makeFakePod() {
       putCount += 1;
       const body = init?.body;
       // Containers are PUT with no body; blobs carry a Uint8Array body.
-      const bytes =
-        body instanceof Uint8Array ? body : new Uint8Array(0);
+      const bytes = body instanceof Uint8Array ? body : new Uint8Array(0);
       store.set(u, bytes);
       return new Response(null, { status: 201 });
     }
@@ -57,8 +56,7 @@ describe("PodContentStore", () => {
 
     const bytes = new Uint8Array(Buffer.from("hello"));
     // sha256("hello") is a known constant.
-    const HELLO_SHA =
-      "2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824";
+    const HELLO_SHA = "2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824";
 
     expect(await store.has(`sha256:${HELLO_SHA}`)).toBe(false);
 
diff --git a/tests/packages-npm.test.ts b/tests/packages-npm.test.ts
index 166697a..fe2bebf 100644
--- a/tests/packages-npm.test.ts
+++ b/tests/packages-npm.test.ts
@@ -1,7 +1,7 @@
-import { describe, it, expect, beforeAll } from "vitest";
 import { mkdtempSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
+import { beforeAll, describe, expect, it } from "vitest";
 
 // npm protocol helpers. Verifies:
 //   • parseNpmPublish pulls the single version + base64 tarball out of a
@@ -45,24 +45,20 @@ describe("npm protocol", () => {
     expect(parsed.name).toBe("@alice/lib");
     expect(parsed.version).toBe("1.2.3");
     expect(parsed.tarballFilename).toBe("lib-1.2.3.tgz");
-    expect(Buffer.from(parsed.tarballBytes).toString("utf-8")).toBe(
-      "fake-tgz-bytes",
-    );
+    expect(Buffer.from(parsed.tarballBytes).toString("utf-8")).toBe("fake-tgz-bytes");
     expect(parsed.distTags.latest).toBe("1.2.3");
   });
 
   it("rejects malformed publish bodies", async () => {
     const { parseNpmPublish, NpmPublishError } = await import("@/lib/packages/npm");
     expect(() => parseNpmPublish({ name: "" } as never)).toThrow(NpmPublishError);
-    expect(() =>
-      parseNpmPublish({ name: "x", versions: {}, _attachments: {} } as never),
-    ).toThrow(NpmPublishError);
+    expect(() => parseNpmPublish({ name: "x", versions: {}, _attachments: {} } as never)).toThrow(
+      NpmPublishError,
+    );
   });
 
   it("builds a packument with rewritten tarball URLs and latest tag", async () => {
-    const { buildPackument, findVersionByFilename } = await import(
-      "@/lib/packages/npm"
-    );
+    const { buildPackument, findVersionByFilename } = await import("@/lib/packages/npm");
     const now = 1_000;
     const rows = [
       // newest-first, as listVersions returns
diff --git a/tests/packages-oci-blob-cap.test.ts b/tests/packages-oci-blob-cap.test.ts
index cb0a31e..8da5f65 100644
--- a/tests/packages-oci-blob-cap.test.ts
+++ b/tests/packages-oci-blob-cap.test.ts
@@ -1,7 +1,7 @@
-import { describe, it, expect, beforeAll } from "vitest";
 import { mkdtempSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
+import { beforeAll, describe, expect, it } from "vitest";
 
 // Issue #175 — oversize OCI blob uploads must be rejected with a 413 *before*
 // the body is buffered into memory (the bridge buffers each blob in RAM, so an
@@ -41,10 +41,11 @@ describe("OCI blob upload size cap (#175)", () => {
 
     // PATCH (append a chunk) — oversize chunk → 413, no OOM.
     const uuid = startUpload();
-    const patchReq = new Request(
-      `http://localhost/v2/alice/blobcap/blobs/uploads/${uuid}`,
-      { method: "PATCH", headers: { authorization: auth }, body: over },
-    );
+    const patchReq = new Request(`http://localhost/v2/alice/blobcap/blobs/uploads/${uuid}`, {
+      method: "PATCH",
+      headers: { authorization: auth },
+      body: over,
+    });
     const patchRes = await PATCH(patchReq, {
       params: Promise.resolve({ path: ["alice", "blobcap", "blobs", "uploads", uuid] }),
     });
@@ -62,10 +63,11 @@ describe("OCI blob upload size cap (#175)", () => {
 
     // A small chunk under the cap is NOT rejected by the guard (202 accepted).
     const okUuid = startUpload();
-    const okReq = new Request(
-      `http://localhost/v2/alice/blobcap/blobs/uploads/${okUuid}`,
-      { method: "PATCH", headers: { authorization: auth }, body: under },
-    );
+    const okReq = new Request(`http://localhost/v2/alice/blobcap/blobs/uploads/${okUuid}`, {
+      method: "PATCH",
+      headers: { authorization: auth },
+      body: under,
+    });
     const okRes = await PATCH(okReq, {
       params: Promise.resolve({ path: ["alice", "blobcap", "blobs", "uploads", okUuid] }),
     });
diff --git a/tests/packages-oci.test.ts b/tests/packages-oci.test.ts
index d95b187..82737d4 100644
--- a/tests/packages-oci.test.ts
+++ b/tests/packages-oci.test.ts
@@ -1,7 +1,7 @@
-import { describe, it, expect, beforeAll } from "vitest";
 import { mkdtempSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
+import { beforeAll, describe, expect, it } from "vitest";
 
 // OCI Distribution Spec routing + upload sessions. Verifies:
 //   • parseOciRequest classifies each /v2 endpoint and splits owner/repo/image
@@ -43,9 +43,7 @@ describe("OCI routing", () => {
     expect(b.kind).toBe("blob");
     if (b.kind === "blob") expect(b.digest).toBe("sha256:deadbeef");
 
-    expect(parseOciRequest(["alice", "repo", "blobs", "uploads"]).kind).toBe(
-      "upload-start",
-    );
+    expect(parseOciRequest(["alice", "repo", "blobs", "uploads"]).kind).toBe("upload-start");
 
     const u = parseOciRequest(["alice", "repo", "blobs", "uploads", "uuid-123"]);
     expect(u.kind).toBe("upload-session");
@@ -58,8 +56,9 @@ describe("OCI routing", () => {
   });
 
   it("validates references and image names", async () => {
-    const { validateVersion, validatePackageName, isDigestRef, PackageError } =
-      await import("@/lib/packages/store");
+    const { validateVersion, validatePackageName, isDigestRef, PackageError } = await import(
+      "@/lib/packages/store"
+    );
 
     expect(isDigestRef("sha256:" + "a".repeat(64))).toBe(true);
     expect(isDigestRef("v1.2.3")).toBe(false);
diff --git a/tests/packages-store.test.ts b/tests/packages-store.test.ts
index 484a97d..79e23dc 100644
--- a/tests/packages-store.test.ts
+++ b/tests/packages-store.test.ts
@@ -1,7 +1,7 @@
-import { describe, it, expect, beforeAll } from "vitest";
 import { mkdtempSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
+import { beforeAll, describe, expect, it } from "vitest";
 
 // The packages index. Verifies:
 //   • upsert inserts, and re-upserting the same (repo,type,name,version)
@@ -97,8 +97,9 @@ describe("packages index", () => {
   it("sums per-repo package bytes for the quota", async () => {
     const { createRepo } = await import("@/lib/registry/repos");
     const { upsertPackageVersion } = await import("@/lib/packages/store");
-    const { sumPackageBytesForRepo, assertCanStorePackage, QuotaExceededError } =
-      await import("@/lib/registry/quotas");
+    const { sumPackageBytesForRepo, assertCanStorePackage, QuotaExceededError } = await import(
+      "@/lib/registry/quotas"
+    );
 
     const repo = createRepo({
       owner: "alice",
@@ -127,8 +128,6 @@ describe("packages index", () => {
 
     // A blob larger than the single-blob cap (default 100 MiB) is refused.
     expect(() => assertCanStorePackage(repo.id, 1)).not.toThrow();
-    expect(() => assertCanStorePackage(repo.id, 500 * 1024 * 1024)).toThrow(
-      QuotaExceededError,
-    );
+    expect(() => assertCanStorePackage(repo.id, 500 * 1024 * 1024)).toThrow(QuotaExceededError);
   });
 });
diff --git a/tests/parse-porcelain.test.ts b/tests/parse-porcelain.test.ts
index 8871607..e947c3c 100644
--- a/tests/parse-porcelain.test.ts
+++ b/tests/parse-porcelain.test.ts
@@ -1,8 +1,8 @@
-import { describe, it, expect } from "vitest";
 import { execSync } from "node:child_process";
-import { mkdtempSync, writeFileSync, appendFileSync, rmSync } from "node:fs";
+import { appendFileSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
+import { describe, expect, it } from "vitest";
 import { parsePorcelain } from "@/lib/agents/drivers/coder";
 
 describe("parsePorcelain — documented git status shapes", () => {
@@ -22,9 +22,7 @@ describe("parsePorcelain — documented git status shapes", () => {
   });
 
   it("multiline output", () => {
-    expect(
-      parsePorcelain(" M index.html\n?? README.md\n"),
-    ).toEqual(["index.html", "README.md"]);
+    expect(parsePorcelain(" M index.html\n?? README.md\n")).toEqual(["index.html", "README.md"]);
   });
 
   it("quoted paths with special chars", () => {
@@ -41,16 +39,13 @@ describe("parsePorcelain — against real git output", () => {
       execSync(`git clone "${bare}" "${work}"`, { stdio: "ignore" });
       writeFileSync(join(work, "index.html"), "<!doctype html><h1>v1</h1>\n");
       execSync(`git -C "${work}" -c user.email=t@t -c user.name=t add index.html`);
-      execSync(
-        `git -C "${work}" -c user.email=t@t -c user.name=t commit -m initial`,
-        { stdio: "ignore" },
-      );
+      execSync(`git -C "${work}" -c user.email=t@t -c user.name=t commit -m initial`, {
+        stdio: "ignore",
+      });
       execSync(`git -C "${work}" push origin main`, { stdio: "ignore" });
       // Now mutate the file (the iteration scenario).
       appendFileSync(join(work, "index.html"), "<!-- patched -->\n");
-      const raw = execSync(
-        `git -C "${work}" status --porcelain -uall`,
-      ).toString();
+      const raw = execSync(`git -C "${work}" status --porcelain -uall`).toString();
       const parsed = parsePorcelain(raw.trimEnd());
       expect(parsed).toEqual(["index.html"]);
     } finally {
@@ -67,16 +62,13 @@ describe("parsePorcelain — against real git output", () => {
       execSync(`git clone "${bare}" "${work}"`, { stdio: "ignore" });
       writeFileSync(join(work, "index.html"), "<!doctype html>\n");
       execSync(`git -C "${work}" -c user.email=t@t -c user.name=t add index.html`);
-      execSync(
-        `git -C "${work}" -c user.email=t@t -c user.name=t commit -m initial`,
-        { stdio: "ignore" },
-      );
+      execSync(`git -C "${work}" -c user.email=t@t -c user.name=t commit -m initial`, {
+        stdio: "ignore",
+      });
       execSync(`git -C "${work}" push origin main`, { stdio: "ignore" });
       appendFileSync(join(work, "index.html"), "<!-- patched -->\n");
       writeFileSync(join(work, "README.md"), "# hello\n");
-      const raw = execSync(
-        `git -C "${work}" status --porcelain -uall`,
-      ).toString();
+      const raw = execSync(`git -C "${work}" status --porcelain -uall`).toString();
       const parsed = parsePorcelain(raw.trimEnd());
       expect(parsed.sort()).toEqual(["README.md", "index.html"]);
     } finally {
diff --git a/tests/path-traversal.test.ts b/tests/path-traversal.test.ts
index 2f30165..4ce512a 100644
--- a/tests/path-traversal.test.ts
+++ b/tests/path-traversal.test.ts
@@ -1,7 +1,7 @@
-import { describe, it, expect, beforeAll } from "vitest";
 import { mkdtempSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
+import { beforeAll, describe, expect, it } from "vitest";
 
 // Test 1 in §3.2 priority list: every user-supplied name flows through
 // validateName, and every filesystem path is resolved via repoPath. The
@@ -47,10 +47,7 @@ describe("validateName", () => {
       "x".repeat(65),
     ];
     for (const name of bad) {
-      expect(
-        () => validateName(name, "owner"),
-        `should reject ${JSON.stringify(name)}`,
-      ).toThrow();
+      expect(() => validateName(name, "owner"), `should reject ${JSON.stringify(name)}`).toThrow();
     }
   });
 });
diff --git a/tests/publisher-walk.test.ts b/tests/publisher-walk.test.ts
index 7680603..5d54348 100644
--- a/tests/publisher-walk.test.ts
+++ b/tests/publisher-walk.test.ts
@@ -1,7 +1,7 @@
-import { describe, it, expect, beforeAll } from "vitest";
-import { mkdtempSync, mkdirSync, writeFileSync, symlinkSync } from "node:fs";
+import { mkdirSync, mkdtempSync, symlinkSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
+import { beforeAll, describe, expect, it } from "vitest";
 
 // Test 5 in §3.2 priority list: the publisher walk must not yield:
 //   • dot-prefixed config (`.env*`)
diff --git a/tests/pulls-roundtrip.test.ts b/tests/pulls-roundtrip.test.ts
index d0590e9..4f2b13c 100644
--- a/tests/pulls-roundtrip.test.ts
+++ b/tests/pulls-roundtrip.test.ts
@@ -1,5 +1,5 @@
-import { describe, it, expect, beforeEach, vi } from "vitest";
 import { Parser, type Quad } from "n3";
+import { beforeEach, describe, expect, it, vi } from "vitest";
 
 /**
  * MC-142: opening a PR writes pod-native Turtle, parallel to how issues are
@@ -108,7 +108,9 @@ function makePull(over: Partial<Record<string, unknown>> = {}) {
 }
 
 function parse(ttl: string): Quad[] {
-  return new Parser({ baseIRI: "http://localhost:3011/alice/codespaces/site/pulls/3/pull.ttl" }).parse(ttl);
+  return new Parser({
+    baseIRI: "http://localhost:3011/alice/codespaces/site/pulls/3/pull.ttl",
+  }).parse(ttl);
 }
 function objectsOf(quads: Quad[], pred: string): string[] {
   return quads.filter((q) => q.predicate.value === pred).map((q) => q.object.value);
@@ -162,9 +164,7 @@ describe("renderPullTurtle (MC-142)", () => {
 
   it("agent-authored PR (no author) omits the creator triple but stays valid", async () => {
     const { renderPullTurtle } = await import("@/lib/solid/pulls");
-    const quads = parse(
-      renderPullTurtle(repo as never, makePull({ authorWebId: null }) as never),
-    );
+    const quads = parse(renderPullTurtle(repo as never, makePull({ authorWebId: null }) as never));
     expect(objectsOf(quads, `${SIOC}has_creator`)).toHaveLength(0);
     // still a well-formed PullRequest with a number
     expect(objectsOf(quads, `${SOLIDGIT}number`)).toContain("3");
@@ -192,9 +192,7 @@ describe("writePullToPod (MC-142)", () => {
     expect(res.url).toBe(url);
     expect(pod.store.has(url)).toBe(true);
 
-    const acl = pod.store.get(
-      "http://localhost:3011/alice/codespaces/site/pulls/.acl",
-    );
+    const acl = pod.store.get("http://localhost:3011/alice/codespaces/site/pulls/.acl");
     expect(acl).toBeDefined();
     expect(acl).toContain("foaf:Agent"); // public-read rule present
     expect(acl).toContain("acl:Read");
@@ -202,13 +200,8 @@ describe("writePullToPod (MC-142)", () => {
 
   it("writes an owner-only ACL on a private repo (no public rule)", async () => {
     const { writePullToPod } = await import("@/lib/solid/pulls");
-    await writePullToPod(
-      { ...repo, visibility: "private" } as never,
-      makePull() as never,
-    );
-    const acl = pod.store.get(
-      "http://localhost:3011/alice/codespaces/site/pulls/.acl",
-    );
+    await writePullToPod({ ...repo, visibility: "private" } as never, makePull() as never);
+    const acl = pod.store.get("http://localhost:3011/alice/codespaces/site/pulls/.acl");
     expect(acl).toBeDefined();
     expect(acl).not.toContain("foaf:Agent"); // no public access on a private repo
     expect(acl).toContain(repo.ownerWebId); // owner still has access
diff --git a/tests/push-tokens.test.ts b/tests/push-tokens.test.ts
index 320b1b9..90df214 100644
--- a/tests/push-tokens.test.ts
+++ b/tests/push-tokens.test.ts
@@ -1,7 +1,7 @@
-import { describe, it, expect, beforeAll } from "vitest";
 import { mkdtempSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
+import { beforeAll, describe, expect, it } from "vitest";
 
 // Test 2 in §3.2 priority list: push-token lifecycle. Verifies:
 //   • mint returns a `scp_`-prefixed token whose plaintext is never
@@ -22,8 +22,9 @@ beforeAll(() => {
 describe("push tokens", () => {
   it("mints, verifies, and revokes", async () => {
     const { createRepo } = await import("@/lib/registry/repos");
-    const { createPushToken, verifyPushToken, listPushTokens, revokePushToken } =
-      await import("@/lib/registry/tokens");
+    const { createPushToken, verifyPushToken, listPushTokens, revokePushToken } = await import(
+      "@/lib/registry/tokens"
+    );
     const { getDb } = await import("@/lib/registry/db");
 
     const repo = createRepo({
diff --git a/tests/quotas.test.ts b/tests/quotas.test.ts
index ab755c6..3df9eef 100644
--- a/tests/quotas.test.ts
+++ b/tests/quotas.test.ts
@@ -1,7 +1,7 @@
-import { describe, it, expect, beforeAll } from "vitest";
 import { mkdtempSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
+import { beforeAll, describe, expect, it } from "vitest";
 
 // Per-user / per-repo quotas (§4 multi-user). The defaults are env-
 // driven; we lower them here so the test doesn't have to create 50
@@ -19,9 +19,7 @@ beforeAll(() => {
 describe("quotas", () => {
   it("refuses repo creation past MAX_REPOS_PER_OWNER", async () => {
     const { createRepo } = await import("@/lib/registry/repos");
-    const { assertCanCreateRepo, QuotaExceededError } = await import(
-      "@/lib/registry/quotas"
-    );
+    const { assertCanCreateRepo, QuotaExceededError } = await import("@/lib/registry/quotas");
     const owner = "quotatest";
     const baseInput = {
       owner,
@@ -39,9 +37,7 @@ describe("quotas", () => {
   it("refuses token mint past MAX_TOKENS_PER_REPO", async () => {
     const { createRepo } = await import("@/lib/registry/repos");
     const { createPushToken } = await import("@/lib/registry/tokens");
-    const { assertCanMintToken, QuotaExceededError } = await import(
-      "@/lib/registry/quotas"
-    );
+    const { assertCanMintToken, QuotaExceededError } = await import("@/lib/registry/quotas");
     const repo = createRepo({
       owner: "quotatokens",
       name: "tk",
diff --git a/tests/service-secret-auth.test.ts b/tests/service-secret-auth.test.ts
index f99c909..50c5edd 100644
--- a/tests/service-secret-auth.test.ts
+++ b/tests/service-secret-auth.test.ts
@@ -1,4 +1,4 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
+import { beforeEach, describe, expect, it, vi } from "vitest";
 
 // In-memory header/cookie stores driven per test.
 const hdrStore = new Map<string, string>();
diff --git a/tests/tracker-parse.test.ts b/tests/tracker-parse.test.ts
index 0b37236..c82a636 100644
--- a/tests/tracker-parse.test.ts
+++ b/tests/tracker-parse.test.ts
@@ -1,8 +1,8 @@
-import { describe, expect, it } from "vitest";
 import { readFileSync } from "node:fs";
 import { join } from "node:path";
-import { parseTrackerTrio } from "@/lib/tracker/parse";
+import { describe, expect, it } from "vitest";
 import { groupByEpic } from "@/lib/tracker/model";
+import { parseTrackerTrio } from "@/lib/tracker/parse";
 
 // Fixtures: this prototype's own committed `.mind/build` trio. The seed script
 // pushes the same trio into a demo repo, so parsing it here guards the exact
@@ -100,9 +100,7 @@ describe("parseTrackerTrio", () => {
     expect(issue.stateId).toBe("Doing");
     expect(issue.open).toBe(true);
     expect(issue.categoryId).toBe("Bug");
-    expect(issue.assignee).toBe(
-      "http://localhost:3011/claude/profile/card#me",
-    );
+    expect(issue.assignee).toBe("http://localhost:3011/claude/profile/card#me");
   });
 
   it("groups issues by epic with a trailing General bucket", () => {
diff --git a/tests/tracker-pod.test.ts b/tests/tracker-pod.test.ts
index b4fef5a..015734e 100644
--- a/tests/tracker-pod.test.ts
+++ b/tests/tracker-pod.test.ts
@@ -1,6 +1,6 @@
-import { describe, it, expect, beforeEach, vi } from "vitest";
 import { readFileSync } from "node:fs";
 import { join } from "node:path";
+import { beforeEach, describe, expect, it, vi } from "vitest";
 
 /**
  * MC-160: the `.mind`-derived `flow:Tracker` is mirrored into the owner's pod
@@ -86,9 +86,7 @@ beforeEach(() => {
 
 describe("tracker → pod mirror (MC-160)", () => {
   it("publishes the trio + a public-read ACL, idempotently", async () => {
-    const { publishTrackerToPod, trackerContainerUrl } = await import(
-      "@/lib/solid/tracker-pod"
-    );
+    const { publishTrackerToPod, trackerContainerUrl } = await import("@/lib/solid/tracker-pod");
     expect(trackerContainerUrl(repo)).toBe(CONTAINER);
 
     const res = await publishTrackerToPod(repo, OUTPUTS);
@@ -107,11 +105,7 @@ describe("tracker → pod mirror (MC-160)", () => {
     await publishTrackerToPod(repo, OUTPUTS);
     const docs = [...pod.store.keys()].filter((k) => k.endsWith(".ttl"));
     expect(docs.sort()).toEqual(
-      [
-        `${CONTAINER}epics.ttl`,
-        `${CONTAINER}state.ttl`,
-        `${CONTAINER}tracker.ttl`,
-      ].sort(),
+      [`${CONTAINER}epics.ttl`, `${CONTAINER}state.ttl`, `${CONTAINER}tracker.ttl`].sort(),
     );
   });
 
@@ -126,9 +120,7 @@ describe("tracker → pod mirror (MC-160)", () => {
   });
 
   it("reads the pod tracker back and parses it grouped by epic", async () => {
-    const { publishTrackerToPod, readPodTracker } = await import(
-      "@/lib/solid/tracker-pod"
-    );
+    const { publishTrackerToPod, readPodTracker } = await import("@/lib/solid/tracker-pod");
     await publishTrackerToPod(repo, OUTPUTS);
 
     const tracker = await readPodTracker(repo, "alice", "site");
diff --git a/tsconfig.json b/tsconfig.json
index 5e150fa..af3e981 100644
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -1,11 +1,7 @@
 {
   "compilerOptions": {
     "target": "ES2017",
-    "lib": [
-      "dom",
-      "dom.iterable",
-      "esnext"
-    ],
+    "lib": ["dom", "dom.iterable", "esnext"],
     "allowJs": true,
     "skipLibCheck": true,
     "strict": true,
@@ -23,9 +19,7 @@
       }
     ],
     "paths": {
-      "@/*": [
-        "./src/*"
-      ]
+      "@/*": ["./src/*"]
     }
   },
   "include": [
@@ -38,7 +32,5 @@
     ".next-build/types/**/*.ts",
     ".next-build/dev/types/**/*.ts"
   ],
-  "exclude": [
-    "node_modules"
-  ]
+  "exclude": ["node_modules"]
 }
diff --git a/vitest.config.ts b/vitest.config.ts
index ccc13c6..5f84b81 100644
--- a/vitest.config.ts
+++ b/vitest.config.ts
@@ -1,5 +1,5 @@
-import { defineConfig } from "vitest/config";
 import { resolve } from "node:path";
+import { defineConfig } from "vitest/config";
 
 export default defineConfig({
   test: {