chore: apply prettier on the entire project

server/tests/unit/middleware/auth.test.ts

@@ -1,19 +1,21 @@
-import { describe, it, expect, vi, afterEach } from 'vitest';
+import { db } from '../../../src/db/database';
+import { extractToken, authenticate, adminOnly } from '../../../src/middleware/auth';
+
+import type { Request, Response, NextFunction } from 'express';
 import jwt from 'jsonwebtoken';
+import { describe, it, expect, vi, afterEach } from 'vitest';
 
 vi.mock('../../../src/db/database', () => ({
   db: { prepare: vi.fn(() => ({ get: vi.fn(), all: vi.fn() })) },
 }));
 vi.mock('../../../src/config', () => ({ JWT_SECRET: 'test-secret' }));
 
-import { extractToken, authenticate, adminOnly } from '../../../src/middleware/auth';
-import { db } from '../../../src/db/database';
-import type { Request, Response, NextFunction } from 'express';
-
-function makeReq(overrides: {
-  cookies?: Record<string, string>;
-  headers?: Record<string, string>;
-} = {}): Request {
+function makeReq(
+  overrides: {
+    cookies?: Record<string, string>;
+    headers?: Record<string, string>;
+  } = {},
+): Request {
   return {
     cookies: overrides.cookies || {},
     headers: overrides.headers || {},
@@ -114,11 +116,9 @@ describe('authenticate', () => {
   });
 
   it('AUTH-MW-005: returns 401 for an expired JWT', () => {
-    const expiredToken = jwt.sign(
-      { id: 1, exp: Math.floor(Date.now() / 1000) - 3600 },
-      'test-secret',
-      { algorithm: 'HS256' }
-    );
+    const expiredToken = jwt.sign({ id: 1, exp: Math.floor(Date.now() / 1000) - 3600 }, 'test-secret', {
+      algorithm: 'HS256',
+    });
     const next = vi.fn() as unknown as NextFunction;
     const { res, status } = makeRes();
     authenticate(makeReq({ cookies: { trek_session: expiredToken } }), res, next);

server/tests/unit/middleware/idempotency.test.ts

@@ -1,3 +1,6 @@
+import { applyIdempotency } from '../../../src/middleware/idempotency';
+
+import type { Request, Response, NextFunction } from 'express';
 import { describe, it, expect, vi, beforeEach } from 'vitest';
 
 // ── In-memory store + DB mock using vi.hoisted ────────────────────────────────
@@ -12,7 +15,14 @@ const { rows, dbMock } = vi.hoisted(() => {
           return rows[`${key}:${userId}:${method}:${path}`] ?? undefined;
         }),
         run: vi.fn((...args: unknown[]) => {
-          const [key, userId, method, path, status_code, response_body] = args as [string, number, string, string, number, string];
+          const [key, userId, method, path, status_code, response_body] = args as [
+            string,
+            number,
+            string,
+            string,
+            number,
+            string,
+          ];
           const k = `${key}:${userId}:${method}:${path}`;
           if (!rows[k]) rows[k] = { status_code, response_body };
         }),
@@ -25,9 +35,6 @@ const { rows, dbMock } = vi.hoisted(() => {
 
 vi.mock('../../../src/db/database', () => dbMock);
 
-import { applyIdempotency } from '../../../src/middleware/idempotency';
-import type { Request, Response, NextFunction } from 'express';
-
 function makeReq(method = 'POST', headers: Record<string, string> = {}, path = '/api/test'): Request {
   return { method, path, headers } as unknown as Request;
 }
@@ -35,15 +42,20 @@ function makeReq(method = 'POST', headers: Record<string, string> = {}, path = '
 function makeRes(statusCode = 200): Response {
   const ctx = { status: statusCode };
   const res = {
-    get statusCode() { return ctx.status; },
-    status(code: number) { ctx.status = code; return res; },
+    get statusCode() {
+      return ctx.status;
+    },
+    status(code: number) {
+      ctx.status = code;
+      return res;
+    },
     json: vi.fn((_body: unknown) => res),
   } as unknown as Response;
   return res;
 }
 
 beforeEach(() => {
-  Object.keys(rows).forEach(k => delete rows[k]);
+  Object.keys(rows).forEach((k) => delete rows[k]);
   vi.clearAllMocks();
 });
 

server/tests/unit/middleware/mfaPolicy.test.ts

@@ -1,3 +1,5 @@
+import { isPublicApiPath, isMfaSetupExemptPath } from '../../../src/middleware/mfaPolicy';
+
 import { describe, it, expect, vi } from 'vitest';
 
 vi.mock('../../../src/db/database', () => ({
@@ -5,8 +7,6 @@ vi.mock('../../../src/db/database', () => ({
 }));
 vi.mock('../../../src/config', () => ({ JWT_SECRET: 'test-secret' }));
 
-import { isPublicApiPath, isMfaSetupExemptPath } from '../../../src/middleware/mfaPolicy';
-
 // ── isPublicApiPath ──────────────────────────────────────────────────────────
 
 describe('isPublicApiPath', () => {

server/tests/unit/middleware/tripAccess.test.ts

@@ -3,8 +3,10 @@
  * TRIP-ACCESS-001 through TRIP-ACCESS-010.
  * canAccessTrip and isOwner are mocked; no DB required.
  */
-import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { requireTripAccess, requireTripOwner } from '../../../src/middleware/tripAccess';
+
 import type { Request, Response, NextFunction } from 'express';
+import { describe, it, expect, vi, beforeEach } from 'vitest';
 
 const mockCanAccessTrip = vi.fn();
 const mockIsOwner = vi.fn();
@@ -15,8 +17,6 @@ vi.mock('../../../src/db/database', () => ({
 }));
 vi.mock('../../../src/config', () => ({ JWT_SECRET: 'test-secret' }));
 
-import { requireTripAccess, requireTripOwner } from '../../../src/middleware/tripAccess';
-
 function makeRes(): { res: Response; status: ReturnType<typeof vi.fn>; json: ReturnType<typeof vi.fn> } {
   const json = vi.fn();
   const status = vi.fn(() => ({ json }));

server/tests/unit/middleware/validate.test.ts

@@ -1,6 +1,7 @@
-import { describe, it, expect, vi } from 'vitest';
 import { maxLength, validateStringLengths } from '../../../src/middleware/validate';
+
 import type { Request, Response, NextFunction } from 'express';
+import { describe, it, expect, vi } from 'vitest';
 
 function makeReq(body: Record<string, unknown> = {}): Request {
   return { body } as Request;