Summary

• Problem: Knip still reported a set of unused files after the config landed on main.
• Why it matters: these fully unreferenced helper modules add maintenance surface and distract from the remaining, harder dead-code triage.
• What changed: removed three helper modules with no non-self references in the repo.
• What did NOT change (scope boundary): no channel adapter removals, no runtime behavior changes in referenced code paths, and no dependency manifest cleanup.

Change Type (select all)

• Bug fix
• Feature
• Refactor
• Docs
• Security hardening
• Chore/infra

Scope (select all touched areas)

• Gateway / orchestration
• Skills / tool execution
• Auth / tokens
• Memory / storage
• Integrations
• API / contracts
• UI / DX
• CI/CD / infra

Linked Issue/PR

• Closes #
• Related Dependencies: remove unused core and UI packages #38316
• Related Dependencies: remove unused extension packages #38317

User-visible / Behavior Changes

None.

Security Impact (required)

• New permissions/capabilities? (No)
• Secrets/tokens handling changed? (No)
• New/changed network calls? (No)
• Command/tool execution surface changed? (No)
• Data access scope changed? (No)
• If any Yes, explain risk + mitigation:

Repro + Verification

Environment

• OS: macOS
• Runtime/container: pnpm / Node 22 workspace
• Model/provider: N/A
• Integration/channel (if any): N/A
• Relevant config (redacted): none

Steps

1. Run pnpm deadcode:knip on main after the Knip config lands.
2. Confirm src/config/runtime-group-policy-provider.ts, src/infra/env-file.ts, and src/secrets/auth-store-paths.ts are still reported as unused.
3. Remove them and rerun Knip.

Expected

• The unused-file count drops by three with no new dependency findings.

Actual

• Knip dropped from 27 unused files to 24 on this branch.

Evidence

• Failing test/log before + passing after
• Trace/log snippets
• Screenshot/recording
• Perf numbers (if relevant)

Human Verification (required)

What you personally verified (not just CI), and how:

• Verified scenarios: searched for non-self references to each removed file before deletion; reran pnpm deadcode:knip after deletion.
• Edge cases checked: kept all borderline files (channel outbound adapters, media host/server, UI data) out of this PR.
• What you did not verify: full repo build/test matrix.

Compatibility / Migration

• Backward compatible? (Yes)
• Config/env changes? (No)
• Migration needed? (No)
• If yes, exact upgrade steps:

Failure Recovery (if this breaks)

• How to disable/revert this change quickly: revert the three deletion commits.
• Files/config to restore: src/config/runtime-group-policy-provider.ts, src/infra/env-file.ts, src/secrets/auth-store-paths.ts.
• Known bad symptoms reviewers should watch for: missing imports from these modules during build or test, which would indicate a hidden dynamic reference.

Risks and Mitigations

• Risk: a hidden string-based or generated reference could still exist.
  • Mitigation: each deleted file was checked for repo references before removal, and the remaining dead-file set was intentionally left untouched when it looked less certain.