diff --git a/scripts/any-usage-report.ts b/scripts/any-usage-report.ts
index 25bce93ec..c640e6c29 100644
--- a/scripts/any-usage-report.ts
+++ b/scripts/any-usage-report.ts
@@ -103,7 +103,6 @@ function stripNonCode(source: string): string {
       const end = source.indexOf('*/', i + 2)
       if (end === -1) {
         out += ' '.repeat(n - i)
-        i = n
         break
       }
       // Replace with spaces, keep newlines so line numbers stay stable.
diff --git a/src/entrypoints/sdk/permissions.ts b/src/entrypoints/sdk/permissions.ts
index 204bcf5ed..cebfd57eb 100644
--- a/src/entrypoints/sdk/permissions.ts
+++ b/src/entrypoints/sdk/permissions.ts
@@ -206,7 +206,7 @@ export function buildPermissionContext(options: PermissionContextOptions): ToolP
   }
 
   // Map SDK permission mode to internal PermissionMode
-  let internalMode: string = 'default'
+  let internalMode: string
   switch (mode) {
     case 'plan':
       internalMode = 'plan'
diff --git a/src/integrations/aimlapi/onboarding.ts b/src/integrations/aimlapi/onboarding.ts
index 61db5bf01..bddaf2dbb 100644
--- a/src/integrations/aimlapi/onboarding.ts
+++ b/src/integrations/aimlapi/onboarding.ts
@@ -245,7 +245,6 @@ export async function completeAimlapiCodeSignIn(
       const minted = await mintOrAdoptSignInKey(client, email, auth.token, signal)
       apiKey = minted.apiKey
       apiKeyId = minted.apiKeyId
-      mintedKey = true
       try {
         const balance = await client.getBalance(apiKey, signal)
         return {
diff --git a/src/services/api/authRouting.ts b/src/services/api/authRouting.ts
index 447e4f431..aa959b2bf 100644
--- a/src/services/api/authRouting.ts
+++ b/src/services/api/authRouting.ts
@@ -120,7 +120,7 @@ function resolveCurrentAnthropicAttributionAuth(): AnthropicAttributionAuth {
     // Missing credentials are an ambiguous state, not an error for policy.
   }
 
-  let authTokenSource: ReturnType<typeof getAuthTokenSource>['source'] = 'none'
+  let authTokenSource: ReturnType<typeof getAuthTokenSource>['source']
   try {
     ;({ source: authTokenSource } = getAuthTokenSource())
   } catch {
diff --git a/src/utils/bash/bashParser.ts b/src/utils/bash/bashParser.ts
index 6c442348a..8fe67ed14 100644
--- a/src/utils/bash/bashParser.ts
+++ b/src/utils/bash/bashParser.ts
@@ -936,7 +936,7 @@ function skipNewlines(P: ParseState): void {
  * pipeline(a,|,b), 2>nul), |, c).
  */
 function parsePipeline(P: ParseState): TsNode | null {
-  let first = parseCommand(P)
+  const first = parseCommand(P)
   if (!first) return null
   const parts: TsNode[] = [first]
   while (true) {
@@ -977,7 +977,6 @@ function parsePipeline(P: ParseState): TsNode | null {
         )
         parts.length = 0
         parts.push(wrapped)
-        first = wrapped
         continue
       }
       parts.push(op, next)
diff --git a/src/utils/messages.ts b/src/utils/messages.ts
index 5ca7ce78f..31e184f73 100644
--- a/src/utils/messages.ts
+++ b/src/utils/messages.ts
@@ -1660,7 +1660,7 @@ export function normalizeMessagesForAPI(
           // tool_result content, as these are only valid with the tool search beta.
           // When tool search IS enabled, strip only tool_reference blocks for
           // tools that no longer exist (e.g., MCP server was disconnected).
-          let normalizedMessage = message
+          let normalizedMessage: UserMessage
           if (!isToolSearchEnabledOptimistic()) {
             normalizedMessage = stripToolReferenceBlocksFromUserMessage(message)
           } else {