style: apply prettier across the tree

One-shot prettier pass so the new format:check gate starts from a clean
baseline. Formatting only — no behaviour change. Generator-owned and
vendored artifacts stay untouched via .prettierignore.

src/app/api/auth/login/__tests__/route.test.ts

@@ -52,8 +52,7 @@ vi.mock("@/lib/auth/hmac", () => ({
   // privacy contract is "the typed identifier never serialises into
   // the row's body", so the mock must not embed the raw input.
   hashToken: vi.fn(
-    (raw: string) =>
-      "aa".repeat(32) + (raw.length % 8).toString(16),
+    (raw: string) => "aa".repeat(32) + (raw.length % 8).toString(16),
   ),
 }));
 

src/app/api/auth/me/doctor-report-prefs/__tests__/route.test.ts

@@ -7,7 +7,7 @@ vi.mock("@/lib/db", () => ({
       update: vi.fn(),
     },
   },
-  toJson: <T,>(v: T) => v,
+  toJson: <T>(v: T) => v,
 }));
 
 vi.mock("@/lib/auth/session", () => ({ getSession: vi.fn() }));

src/app/api/auth/me/modules/__tests__/route.test.ts

@@ -87,12 +87,14 @@ function mkPatch(body: unknown): Request {
  * (which writes `modulePreferencesJson`) is reflected by the post-update
  * `resolveModuleMap` re-read — mirroring real DB round-trip semantics.
  */
-function primeUser(over: {
-  gender?: string | null;
-  disableCoach?: boolean;
-  modulePreferencesJson?: unknown;
-  cycleTrackingEnabled?: boolean | null;
-} = {}) {
+function primeUser(
+  over: {
+    gender?: string | null;
+    disableCoach?: boolean;
+    modulePreferencesJson?: unknown;
+    cycleTrackingEnabled?: boolean | null;
+  } = {},
+) {
   const row: {
     gender: string | null;
     disableCoach: boolean;
@@ -102,9 +104,8 @@ function primeUser(over: {
     disableCoach: over.disableCoach ?? false,
     modulePreferencesJson: over.modulePreferencesJson ?? null,
   };
-  vi.mocked(prisma.user.findUnique).mockImplementation(
-    (() => Promise.resolve({ ...row })) as never,
-  );
+  vi.mocked(prisma.user.findUnique).mockImplementation((() =>
+    Promise.resolve({ ...row })) as never);
   vi.mocked(prisma.user.update).mockImplementation(((args: {
     data?: { modulePreferencesJson?: unknown };
   }) => {
@@ -213,7 +214,9 @@ describe("PATCH /api/auth/me/modules", () => {
     // user previously disabled glucose; now disabling sleep too.
     primeUser({ modulePreferencesJson: { glucose: false } });
 
-    await (PATCH as (r: Request) => Promise<Response>)(mkPatch({ sleep: false }));
+    await (PATCH as (r: Request) => Promise<Response>)(
+      mkPatch({ sleep: false }),
+    );
 
     expect(prisma.user.update).toHaveBeenCalledWith({
       where: { id: "user-1" },
@@ -225,7 +228,9 @@ describe("PATCH /api/auth/me/modules", () => {
     vi.mocked(getSession).mockResolvedValue(SESSION_OK as never);
     primeUser({ modulePreferencesJson: { glucose: false } });
 
-    await (PATCH as (r: Request) => Promise<Response>)(mkPatch({ glucose: true }));
+    await (PATCH as (r: Request) => Promise<Response>)(
+      mkPatch({ glucose: true }),
+    );
 
     expect(prisma.user.update).toHaveBeenCalledWith({
       where: { id: "user-1" },
@@ -299,7 +304,9 @@ describe("PATCH /api/auth/me/modules", () => {
     // junk in the stored row must not leak into the persisted merge.
     primeUser({ modulePreferencesJson: { mood: "yes", sleep: false } });
 
-    await (PATCH as (r: Request) => Promise<Response>)(mkPatch({ labs: false }));
+    await (PATCH as (r: Request) => Promise<Response>)(
+      mkPatch({ labs: false }),
+    );
 
     expect(prisma.user.update).toHaveBeenCalledWith({
       where: { id: "user-1" },

src/app/api/auth/me/research-mode/__tests__/route.test.ts

@@ -131,9 +131,7 @@ describe("GET /api/auth/me/research-mode", () => {
     };
     expect(env.data.enabled).toBe(true);
     expect(env.data.acknowledgedAt).toBe(ackAt.toISOString());
-    expect(env.data.acknowledgedVersion).toBe(
-      RESEARCH_MODE_DISCLAIMER_VERSION,
-    );
+    expect(env.data.acknowledgedVersion).toBe(RESEARCH_MODE_DISCLAIMER_VERSION);
   });
 });
 
@@ -165,9 +163,7 @@ describe("POST /api/auth/me/research-mode", () => {
       data: { enabled: boolean; acknowledgedVersion: string };
     };
     expect(env.data.enabled).toBe(true);
-    expect(env.data.acknowledgedVersion).toBe(
-      RESEARCH_MODE_DISCLAIMER_VERSION,
-    );
+    expect(env.data.acknowledgedVersion).toBe(RESEARCH_MODE_DISCLAIMER_VERSION);
 
     expect(prisma.user.update).toHaveBeenCalledWith(
       expect.objectContaining({

src/app/api/auth/me/research-mode/route.ts

@@ -171,7 +171,8 @@ export const POST = apiHandler(async (req: Request) => {
       previous: previous ?? null,
       next: {
         ...next,
-        researchModeAcknowledgedAt: next.researchModeAcknowledgedAt.toISOString(),
+        researchModeAcknowledgedAt:
+          next.researchModeAcknowledgedAt.toISOString(),
       },
     },
   });

src/app/api/auth/me/unit-preference/__tests__/route.test.ts

@@ -131,7 +131,10 @@ describe("PATCH /api/auth/me/unit-preference", () => {
       "user.unit-preference.update",
       expect.objectContaining({
         userId: "user-1",
-        details: expect.objectContaining({ previous: "metric", next: "imperial" }),
+        details: expect.objectContaining({
+          previous: "metric",
+          next: "imperial",
+        }),
       }),
     );
   });

src/app/api/auth/passkey/login-options/route.ts

@@ -1,9 +1,6 @@
 import { createAuthenticationOptions } from "@/lib/auth/passkey";
 import { apiSuccess } from "@/lib/api-response";
-import {
-  checkAuthSurfaceRateLimit,
-  rateLimitHeaders,
-} from "@/lib/rate-limit";
+import { checkAuthSurfaceRateLimit, rateLimitHeaders } from "@/lib/rate-limit";
 import { NextResponse } from "next/server";
 import { apiHandler } from "@/lib/api-handler";
 import { annotate } from "@/lib/logging/context";

src/app/api/auth/passkey/login-verify/__tests__/native-token.test.ts

@@ -53,10 +53,7 @@ vi.mock("next/headers", () => ({
 import { POST } from "../route";
 import { prisma } from "@/lib/db";
 import { verifyAuthentication } from "@/lib/auth/passkey";
-import {
-  checkRateLimit,
-  checkAuthSurfaceRateLimit,
-} from "@/lib/rate-limit";
+import { checkRateLimit, checkAuthSurfaceRateLimit } from "@/lib/rate-limit";
 
 const FAKE_USER = {
   id: "user-1",

src/app/api/auth/password/__tests__/route.test.ts

@@ -23,7 +23,9 @@ vi.mock("@/lib/auth/audit", () => ({
 vi.mock("@/lib/auth/password", () => ({
   verifyPassword: vi.fn().mockResolvedValue(true),
   hashPassword: vi.fn().mockResolvedValue("hashed"),
-  checkPasswordStrength: vi.fn().mockReturnValue({ isAcceptable: true, feedback: [] }),
+  checkPasswordStrength: vi
+    .fn()
+    .mockReturnValue({ isAcceptable: true, feedback: [] }),
 }));
 
 vi.mock("@/lib/rate-limit", () => ({
@@ -81,9 +83,7 @@ beforeEach(() => {
 describe("POST /api/auth/password — 422 multi-issue (v1.4.43 W6)", () => {
   it("surfaces TWO simultaneous validation errors", async () => {
     // Empty currentPassword + tooShort newPassword.
-    const res = await POST(
-      postReq({ currentPassword: "", newPassword: "x" }),
-    );
+    const res = await POST(postReq({ currentPassword: "", newPassword: "x" }));
     expect(res.status).toBe(422);
     const body = (await res.json()) as {
       data: null;
@@ -102,9 +102,7 @@ describe("POST /api/auth/password — 422 multi-issue (v1.4.43 W6)", () => {
 
   it("surfaces THREE simultaneous validation errors", async () => {
     // Both empty + extra invalid type.
-    const res = await POST(
-      postReq({ currentPassword: "", newPassword: 123 }),
-    );
+    const res = await POST(postReq({ currentPassword: "", newPassword: 123 }));
     expect(res.status).toBe(422);
     const body = (await res.json()) as {
       details: { issues: Array<unknown> };

src/app/api/auth/register/__tests__/route.test.ts

@@ -23,7 +23,9 @@ vi.mock("@/lib/auth/session", () => ({
 
 vi.mock("@/lib/auth/password", () => ({
   hashPassword: vi.fn().mockResolvedValue("hashed"),
-  checkPasswordStrength: vi.fn().mockReturnValue({ isAcceptable: true, feedback: [] }),
+  checkPasswordStrength: vi
+    .fn()
+    .mockReturnValue({ isAcceptable: true, feedback: [] }),
 }));
 
 vi.mock("@/lib/auth/audit", () => ({

src/app/api/auth/register/route.ts

@@ -144,7 +144,10 @@ export const POST = apiHandler(async (request: NextRequest) => {
     } else {
       annotate({
         action: { name: "auth.register.invite_rejected" },
-        meta: { reason: consumed.reason, registration_open: registrationEnabled },
+        meta: {
+          reason: consumed.reason,
+          registration_open: registrationEnabled,
+        },
       });
       if (!registrationEnabled) {
         return apiError("Invalid or expired invite", 403);