diff --git a/packages/cli-workflow/src/commands/thread.ts b/packages/cli-workflow/src/commands/thread.ts
index 16a4c8c..dad5e31 100644
--- a/packages/cli-workflow/src/commands/thread.ts
+++ b/packages/cli-workflow/src/commands/thread.ts
@@ -27,8 +27,8 @@ import type { AdapterOutput } from "@uncaged/workflow-util-agent";
 import { getEnvPath, loadWorkflowConfig } from "@uncaged/workflow-util-agent";
 import { config as loadDotenv } from "dotenv";
 import { parse } from "yaml";
-import { createIncludeTag } from "../include.js";
 import { createMarker, deleteMarker, isThreadRunning } from "../background/index.js";
+import { createIncludeTag } from "../include.js";
 import { evaluate } from "../moderator/index.js";
 import {
   appendThreadHistory,
@@ -121,7 +121,12 @@ async function findWorkflowInDir(dir: string, name: string): Promise<string | nu
   }
   for (const indexName of ["index.yaml", "index.yml"]) {
     const candidate = resolvePath(dir, ".workflow", name, indexName);
-    try { await access(candidate); return candidate; } catch { /* not found */ }
+    try {
+      await access(candidate);
+      return candidate;
+    } catch {
+      /* not found */
+    }
   }
 
   // Check .workflows/ directory as fallback (legacy)
@@ -133,7 +138,12 @@ async function findWorkflowInDir(dir: string, name: string): Promise<string | nu
   }
   for (const indexName of ["index.yaml", "index.yml"]) {
     const candidate = resolvePath(dir, ".workflows", name, indexName);
-    try { await access(candidate); return candidate; } catch { /* not found */ }
+    try {
+      await access(candidate);
+      return candidate;
+    } catch {
+      /* not found */
+    }
   }
 
   return null;
diff --git a/packages/cli-workflow/src/include.ts b/packages/cli-workflow/src/include.ts
index b34bb01..a4dff5b 100644
--- a/packages/cli-workflow/src/include.ts
+++ b/packages/cli-workflow/src/include.ts
@@ -16,7 +16,7 @@ export function createIncludeTag(baseDir: string) {
     resolve(str: string) {
       const filePath = resolve(resolvedBase, str);
       // Path traversal guard: resolved path must be inside baseDir
-      if (!filePath.startsWith(resolvedBase + "/") && filePath !== resolvedBase) {
+      if (!filePath.startsWith(`${resolvedBase}/`) && filePath !== resolvedBase) {
         throw new Error(
           `!include path traversal blocked: "${str}" resolves outside base directory`,
         );