merge: resolve conflicts with origin/main (auto-fix formatting)

2026-09-22 16:11:29 +00:00 · 2026-08-14 06:45:15 +08:00 · 2026-08-14 06:45:15 +08:00 · 6f1a334150
commit 6f1a334150
parent a9e50fba50 df51b71121
22 changed files with 921 additions and 910 deletions
--- a/README.md
+++ b/README.md
@ -54,7 +54,7 @@ bunx wrangler dev    # Start local dev server
 ### Secrets (`.dev.vars` for local, Worker Secrets for production)

 | Variable                    | Description                                                                                    |
-|-----------------------------|------------------------------------------------------------------------------------------------|
+| --------------------------- | ---------------------------------------------------------------------------------------------- |
 | `GITHUB_WEBHOOK_SECRET`     | Webhook secret from GitHub                                                                     |
 | `GITEA_WEBHOOK_SECRET`      | Webhook secret from Gitea (required only to receive Gitea webhooks)                            |
 | `GITHUB_APP_ID`             | GitHub App ID (used by the App install flow to resolve the installing account)                 |
--- a/app/components/ConsolePage.vue
+++ b/app/components/ConsolePage.vue
@ -258,12 +258,7 @@ if (view.value === null) {
  throw createError({ statusCode: 404, statusMessage: "Page not found", fatal: false });
 }

-const {
-  logs,
-  loading: logsLoading,
-  error: logsError,
-  load: loadLogs,
-} = useSendLogs();
+const { logs, loading: logsLoading, error: logsError, load: loadLogs } = useSendLogs();
 const {
  entries: auditEntries,
  loading: auditLoading,
--- a/app/components/GroupEditor.vue
+++ b/app/components/GroupEditor.vue
@ -322,4 +322,3 @@ function save(): void {
  });
 }
 </script>
-
--- a/app/components/LegalLayout.vue
+++ b/app/components/LegalLayout.vue
@ -57,7 +57,10 @@ const updated = computed(() => "2026-08-01");
 const t = (zh: string, en: string): string => (lang.value === "zh" ? zh : en);
 const q = (p: string): string => `${p}?lang=${lang.value}`;
 const altLink = computed(() =>
-  q(props.active === "terms" ? "/terms" : "/privacy").replace(`lang=${lang.value}`, `lang=${altLang.value}`),
+  q(props.active === "terms" ? "/terms" : "/privacy").replace(
+    `lang=${lang.value}`,
+    `lang=${altLang.value}`,
+  ),
 );

 useHead({ title: `${props.title} · WebHooker` });
--- a/app/pages/index.vue
+++ b/app/pages/index.vue
@ -22,7 +22,11 @@
        v-for="it in items"
        :key="it.label"
        class="flex items-center gap-4 rounded-[14px] border border-border bg-surface px-5 py-[18px] text-text no-underline shadow-card transition-all duration-150 hover:-translate-y-0.5 hover:border-border-strong hover:shadow-card-hover"
-        :class="it.primary ? 'border-accent bg-accent shadow-none hover:border-accent hover:shadow-accent-lg' : ''"
+        :class="
+          it.primary
+            ? 'border-accent bg-accent shadow-none hover:border-accent hover:shadow-accent-lg'
+            : ''
+        "
        :href="it.href"
        :target="it.external ? '_blank' : undefined"
        :rel="it.external ? 'noopener noreferrer' : undefined"
@ -68,7 +72,9 @@ const config = useRuntimeConfig();
 const lang = computed(() => (route.query.lang === "en" ? "en" : "zh"));
 const altLang = computed(() => (lang.value === "zh" ? "en" : "zh"));
 const repo = computed(() => (config.public.repoUrl as string) || DEFAULT_REPO);
-const docsBase = computed(() => ((config.public.docsUrl as string) || DEFAULT_DOCS).replace(/\/+$/, ""));
+const docsBase = computed(() =>
+  ((config.public.docsUrl as string) || DEFAULT_DOCS).replace(/\/+$/, ""),
+);

 const t = (zh: string, en: string): string => (lang.value === "zh" ? zh : en);

@ -119,7 +125,8 @@ const ICON_PATHS: Record<string, string> = {
  docs: '<path d="M4 4a2 2 0 0 1 2-2h7l5 5v13a2 2 0 0 1-2 2H6a2 2 0 0 1-2-2V4z"/><path d="M13 2v5h5"/><path d="M8 12h8M8 16h6"/>',
  github:
    '<path d="M12 2a10 10 0 0 0-3.16 19.49c.5.09.68-.22.68-.48v-1.7c-2.78.6-3.37-1.34-3.37-1.34-.45-1.16-1.11-1.47-1.11-1.47-.91-.62.07-.6.07-.6 1 .07 1.53 1.03 1.53 1.03.9 1.53 2.36 1.09 2.94.83.09-.65.35-1.09.63-1.34-2.22-.25-4.55-1.11-4.55-4.94 0-1.09.39-1.98 1.03-2.68-.1-.25-.45-1.27.1-2.65 0 0 .84-.27 2.75 1.02a9.5 9.5 0 0 1 5 0c1.91-1.29 2.75-1.02 2.75-1.02.55 1.38.2 2.4.1 2.65.64.7 1.03 1.59 1.03 2.68 0 3.84-2.34 4.68-4.57 4.93.36.31.68.92.68 1.85v2.74c0 .27.18.58.69.48A10 10 0 0 0 12 2z"/>',
-  terms: '<path d="M9 12h6M9 16h6M9 8h2"/><path d="M6 2h9l5 5v13a2 2 0 0 1-2 2H6a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2z"/>',
+  terms:
+    '<path d="M9 12h6M9 16h6M9 8h2"/><path d="M6 2h9l5 5v13a2 2 0 0 1-2 2H6a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2z"/>',
  privacy:
    '<path d="M12 2l7 3v6c0 5-3.5 8.5-7 10-3.5-1.5-7-5-7-10V5l7-3z"/><path d="M9 12l2 2 4-4"/>',
  login:
@ -143,4 +150,3 @@ useHead({
  ],
 });
 </script>
-
--- a/docs/guide/configuration.md
+++ b/docs/guide/configuration.md
@ -3,7 +3,7 @@
 This page is the reference for secrets and the Web UI. Core concepts live in dedicated pages:

 | Topic                                             | Page                                                               |
-|---------------------------------------------------|----------------------------------------------------------------------|
+| ------------------------------------------------- | ------------------------------------------------------------------ |
 | Routes, targets, `fallback` / `stop`, role pings  | [Routes & Targets](./routes)                                       |
 | Groups, roles, invites, self sign-up, log channel | [Groups & Access Control](./groups)                                |
 | Webhook providers, per-group ingress, custom      | [Webhook Ingress & Tenancy](./ingress)                             |
@ -17,7 +17,7 @@ WebHooker requires several secrets to function. For local development, store the
 ### Required Secrets

 | Variable                | Description                                                              |
-|-------------------------|--------------------------------------------------------------------------|
+| ----------------------- | ------------------------------------------------------------------------ |
 | `GITHUB_WEBHOOK_SECRET` | Webhook secret from your GitHub App settings                             |
 | `GITEA_WEBHOOK_SECRET`  | Webhook secret from your Gitea instance (only to receive Gitea webhooks) |
 | `GITHUB_CLIENT_ID`      | OAuth client ID from App settings                                        |
@ -35,7 +35,7 @@ WebHooker requires several secrets to function. For local development, store the
 ### Optional Secrets

 | Variable                    | Description                                                                                                                 | Default                           |
-|-----------------------------|-----------------------------------------------------------------------------------------------------------------------------|-----------------------------------|
+| --------------------------- | --------------------------------------------------------------------------------------------------------------------------- | --------------------------------- |
 | `DISCORD_PUBLIC_KEY`        | Discord application public key (Developer Portal) — required for interactions                                               | Unset → interactions return `401` |
 | `DISCORD_APPLICATION_ID`    | Discord application id; auto-resolved when omitted                                                                          | Auto-resolved                     |
 | `TELEGRAM_WEBHOOK_SECRET`   | Secret token for `POST /telegram/webhook` verification (X-Telegram-Bot-Api-Secret-Token)                                    | Disabled (no verification)        |
@ -67,7 +67,7 @@ All management endpoints (`/admin/api/*`) are documented in the [Admin API](../a
 See the [Filter Tutorial](./filters) for a hands-on guide with worked examples.

 | Type      | Matches              | Example                            |
-|-----------|----------------------|------------------------------------|
+| --------- | -------------------- | ---------------------------------- |
 | `event`   | GitHub event name    | `push`, `pull_*`, `pull_request`   |
 | `repo`    | Repository full name | `org/repo`, `org/*`                |
 | `actor`   | Sender login         | `username`, `[bot]`, `*[bot]`      |
--- a/docs/guide/filters.md
+++ b/docs/guide/filters.md
@ -27,13 +27,13 @@ The route above matches both `push` and `pull_request` events.
 Every filter type shares the same three pattern forms:

 | Pattern                | Meaning                                                       |
-| ---------------------- | -------------------------------------------------------------- |
+| ---------------------- | ------------------------------------------------------------- |
 | `plain text`           | Field filters: **exact** match. `keyword`: search anywhere.   |
 | `*` / `?`              | **Glob wildcards** — `*` any run, `?` one char.               |
 | `/regular expression/` | Compiled as a **regular expression** (case-insensitive flag). |

 - On field filters (`event`/`repo`/`actor`/`action`/`branch`), plain text and globs match the whole value; on `keyword` they search anywhere in the payload.
- Regexes always search: `/^feat/` matches values *starting* with `feat`, `/feat/` matches anywhere.
+- Regexes always search: `/^feat/` matches values _starting_ with `feat`, `/feat/` matches anywhere.

 Examples:

@ -259,5 +259,5 @@ Forward workflow runs that ended in failure on any branch, to a `#ci` channel:
 - **A `//`-wrapped invalid regex never matches.** Unlike plain text, an unwrapped invalid pattern is matched literally — wrap patterns only when they are real regular expressions.
 - **An `action` filter on an action-less event never matches.** Check the event has an `action` field first (see [Filter Compatibility](../events/supported#filter-compatibility)).
 - **`branch` on an event without a branch never matches.** A `branch` filter on an `issues` event will always be false. Use `keyword` if you need branch-like matching there.
- **`keyword` searches everything.** Because it scans the whole payload, a pattern like `"fix"` can match commit messages, issue titles, *and* repository names. Be as specific as possible.
- **Forgetting `exclude` semantics.** `exclude: true` negates the whole filter — one non-matching value in an array does not "block" the route; the negated filter matches only when *none* of the values match.
+- **`keyword` searches everything.** Because it scans the whole payload, a pattern like `"fix"` can match commit messages, issue titles, _and_ repository names. Be as specific as possible.
+- **Forgetting `exclude` semantics.** `exclude: true` negates the whole filter — one non-matching value in an array does not "block" the route; the negated filter matches only when _none_ of the values match.
--- a/docs/guide/getting-started.md
+++ b/docs/guide/getting-started.md
@ -63,7 +63,7 @@ curl http://localhost:8787/health
 ## Available Scripts

 | Script                 | Description                                 |
-|------------------------|---------------------------------------------|
+| ---------------------- | ------------------------------------------- |
 | `bun run dev`          | Start Nuxt dev server (HMR)                 |
 | `bun run build`        | Production build (cloudflare_module preset) |
 | `bun run deploy`       | Deploy to Cloudflare                        |
--- a/docs/zh/guide/configuration.md
+++ b/docs/zh/guide/configuration.md
@ -3,7 +3,7 @@
 本页是密钥与 Web 控制台的参考。核心概念在独立页面中说明：

 | 主题                                        | 页面                                                    |
-|--------------------------------------------------|----------------------------------------------------------------------|
+| ------------------------------------------- | ------------------------------------------------------- |
 | 路由、目标、`fallback` / `stop`、身份组提醒 | [路由与目标](./routes)                                  |
 | 分组、角色、邀请、自助注册、日志频道        | [分组与访问控制](./groups)                              |
 | Webhook 提供方、分组入口、自定义 webhook    | [Webhook 接入与租户隔离](./ingress)                     |
@ -17,7 +17,7 @@ WebHooker 的运行需要若干密钥。本地开发时放入 `.dev.vars`，生
 ### 必需密钥

 | 变量                    | 说明                                                        |
-|-------------------------|-------------------------------------------------------------------|
+| ----------------------- | ----------------------------------------------------------- |
 | `GITHUB_WEBHOOK_SECRET` | GitHub App 设置中的 webhook 密钥                            |
 | `GITEA_WEBHOOK_SECRET`  | Gitea 实例的 webhook 密钥（仅接收 Gitea webhook 时需要）    |
 | `GITHUB_CLIENT_ID`      | App 设置中的 OAuth 客户端 ID                                |
@ -34,7 +34,7 @@ WebHooker 的运行需要若干密钥。本地开发时放入 `.dev.vars`，生
 ### 可选密钥

 | 变量                        | 说明                                                                                           | 默认值                  |
-|-----------------------------|--------------------------------------------------------------------------------------------------|-------------------------|
+| --------------------------- | ---------------------------------------------------------------------------------------------- | ----------------------- |
 | `DISCORD_PUBLIC_KEY`        | Discord 应用的公钥（开发者门户获取），交互功能必需                                             | 未设置时交互返回 401    |
 | `DISCORD_APPLICATION_ID`    | Discord 应用 ID；省略时自动获取                                                                | 自动获取                |
 | `TELEGRAM_WEBHOOK_SECRET`   | `POST /telegram/webhook` 验签密钥（X-Telegram-Bot-Api-Secret-Token）                           | 未设置时不校验          |
@ -66,7 +66,7 @@ WebHooker 在 `/admin` 提供内置配置控制台，可在浏览器中管理路
 实操指南见[过滤器教程](./filters)，包含完整示例。

 | 类型      | 匹配对象         | 示例                               |
-|-----------|------------------|--------------------------------------|
+| --------- | ---------------- | ---------------------------------- |
 | `event`   | GitHub 事件名称  | `push`, `pull_*`, `pull_request`   |
 | `repo`    | 仓库全名         | `org/repo`, `org/*`                |
 | `actor`   | 发送者登录名     | `username`, `[bot]`, `*[bot]`      |
--- a/docs/zh/guide/filters.md
+++ b/docs/zh/guide/filters.md
@ -27,7 +27,7 @@
 所有过滤器类型共享以下三种模式写法：

 | 模式           | 含义                                                            |
-| -------------- | ----------------------------------------------------------------- |
+| -------------- | --------------------------------------------------------------- |
 | `纯文本`       | 字段过滤器：**完全相等**匹配；`keyword`：在载荷中任意位置搜索。 |
 | `*` / `?`      | **通配符（glob）**——`*` 任意长度、`?` 恰好一个字符。            |
 | `/正则表达式/` | 按**正则表达式**编译（忽略大小写标志）。                        |
--- a/server/error-handler.ts
+++ b/server/error-handler.ts
@ -1,6 +1,4 @@
-import defaultNitroErrorHandler, {
-  defineNitroErrorHandler,
-} from "nitropack/runtime/error";
+import defaultNitroErrorHandler, { defineNitroErrorHandler } from "nitropack/runtime/error";
 import { setResponseStatus } from "h3";

 /**
--- a/server/lib/web/actions.ts
+++ b/server/lib/web/actions.ts
@ -21,7 +21,10 @@ async function readJsonBody(event: H3Event): Promise<Record<string, unknown> | n
  }
 }

-async function userOctokit(event: H3Event, userId: string): Promise<Awaited<ReturnType<typeof getUserOctokit>>> {
+async function userOctokit(
+  event: H3Event,
+  userId: string,
+): Promise<Awaited<ReturnType<typeof getUserOctokit>>> {
  return getUserOctokit(userId, cfEnv(event).KV);
 }

@ -123,16 +126,7 @@ export async function apiClose(event: H3Event): Promise<Record<string, unknown>>
 export async function apiReact(event: H3Event): Promise<Record<string, unknown>> {
  const userId = await bearerUserId(event);
  const body = await readJsonBody(event);
-  const reactions = [
-    "+1",
-    "-1",
-    "laugh",
-    "confused",
-    "heart",
-    "hooray",
-    "rocket",
-    "eyes",
-  ] as const;
+  const reactions = ["+1", "-1", "laugh", "confused", "heart", "hooray", "rocket", "eyes"] as const;
  if (
    !body ||
    !isNonEmptyString(body.owner) ||
@ -151,14 +145,7 @@ export async function apiReact(event: H3Event): Promise<Record<string, unknown>>
      repo: body.repo,
      issue_number: body.issueNumber,
      content: body.reaction as
-        | "+1"
-        | "-1"
-        | "laugh"
-        | "confused"
-        | "heart"
-        | "hooray"
-        | "rocket"
-        | "eyes",
+        "+1" | "-1" | "laugh" | "confused" | "heart" | "hooray" | "rocket" | "eyes",
    });
  } catch (err) {
    log.error({ err }, "Failed to create reaction");
--- a/server/lib/web/admin.ts
+++ b/server/lib/web/admin.ts
@ -402,7 +402,10 @@ export async function adminInvite(event: H3Event): Promise<void> {
  }
  const session = await getAdminSession(env.KV, getHeader(event, "cookie"));
  if (!session) {
-    await sendRedirect(event, `/auth/github?redirect=${encodeURIComponent(`/admin/invite?token=${token}`)}`);
+    await sendRedirect(
+      event,
+      `/auth/github?redirect=${encodeURIComponent(`/admin/invite?token=${token}`)}`,
+    );
    return;
  }
  const result = await acceptInvite(env.KV, token, session.userId, session.login);
@ -480,8 +483,7 @@ export async function adminApiGroupsPut(event: H3Event): Promise<Record<string,
      const members = g.members ?? normalizeGroupMembers(g);
      const stillMine = members.some(
        (m) =>
-          m.role === "owner" &&
-          identityMatches([m.login], auth.session.userId, auth.session.login),
+          m.role === "owner" && identityMatches([m.login], auth.session.userId, auth.session.login),
      );
      const otherOwner = ownerCount(members) > 1;
      if (!stillMine && !otherOwner) {
@ -648,7 +650,10 @@ export async function adminApiLogs(event: H3Event): Promise<Record<string, unkno
 }

 /** GET /admin/api/logs/:id */
-export async function adminApiLogsById(event: H3Event, id: number): Promise<Record<string, unknown>> {
+export async function adminApiLogsById(
+  event: H3Event,
+  id: number,
+): Promise<Record<string, unknown>> {
  const auth = await requireAnyAccess(event);
  const env = cfEnv(event);
  if (!Number.isInteger(id) || id <= 0) return respondError(event, 400, "Invalid log id");
@ -783,7 +788,10 @@ export async function adminGroupInvitesGet(
 }

 /** DELETE /admin/api/invites/:token */
-export async function adminInviteDelete(event: H3Event, token: string): Promise<Record<string, unknown>> {
+export async function adminInviteDelete(
+  event: H3Event,
+  token: string,
+): Promise<Record<string, unknown>> {
  await requireAnyAccess(event);
  const env = cfEnv(event);
  const invite = await getInvite(env.KV, token);
--- a/server/lib/web/auth.ts
+++ b/server/lib/web/auth.ts
@ -64,11 +64,7 @@ export function requireGroup(event: H3Event, groupId: string): GroupAccess {
 }

 /** Requires at least `min` role in the group (owner|admin|viewer). */
-export function requireGroupRole(
-  event: H3Event,
-  groupId: string,
-  min: GroupRole,
-): GroupAccess {
+export function requireGroupRole(event: H3Event, groupId: string, min: GroupRole): GroupAccess {
  const access = requireGroup(event, groupId);
  if (!access.ok) return access;
  const auth = currentAuth(event);
@ -98,7 +94,6 @@ export async function bearerUserId(event: H3Event): Promise<string> {
  if (!auth?.startsWith("Bearer "))
    throw createError({ statusCode: 401, statusMessage: "Missing authorization" });
  const userId = await findUserIdByToken(env.KV, auth.slice(7));
-  if (!userId)
-    throw createError({ statusCode: 401, statusMessage: "Invalid or expired token" });
+  if (!userId) throw createError({ statusCode: 401, statusMessage: "Invalid or expired token" });
  return userId;
 }
--- a/server/lib/web/oauth.ts
+++ b/server/lib/web/oauth.ts
@ -157,8 +157,11 @@ export async function handleInstallPage(event: H3Event): Promise<string | void>
    return;
  }
  const accountLogin =
-    (await getInstallationAccount(env.GITHUB_APP_ID ?? "", env.GITHUB_PRIVATE_KEY ?? "", installationId)) ??
-    "";
+    (await getInstallationAccount(
+      env.GITHUB_APP_ID ?? "",
+      env.GITHUB_PRIVATE_KEY ?? "",
+      installationId,
+    )) ?? "";
  const groups = await loadGroups(env.KV);
  const scope = resolveScope(env, groups, session.userId, session.login);
  const owned = groups.filter((g) => roleAt(scope, g.id) === "owner");
@ -216,8 +219,11 @@ export async function handleInstallBind(event: H3Event): Promise<void> {

  // Default: auto-create a dedicated inst-{id} group.
  const accountLogin =
-    (await getInstallationAccount(env.GITHUB_APP_ID ?? "", env.GITHUB_PRIVATE_KEY ?? "", installationId)) ??
-    "";
+    (await getInstallationAccount(
+      env.GITHUB_APP_ID ?? "",
+      env.GITHUB_PRIVATE_KEY ?? "",
+      installationId,
+    )) ?? "";
  const group = await ensureInstallationGroup(env.KV, installationId, accountLogin);
  if (!group) {
    await sendRedirect(event, "/admin?error=install");
@ -248,7 +254,10 @@ export async function handleInstallBind(event: H3Event): Promise<void> {
        adminIds: [...new Set([...(group.adminIds ?? []), session.login])],
      };
      const all = await loadGroups(env.KV);
-      await saveGroups(env.KV, all.map((g) => (g.id === group.id ? updated : g)));
+      await saveGroups(
+        env.KV,
+        all.map((g) => (g.id === group.id ? updated : g)),
+      );
      await recordAudit(env.DB, {
        ts: Date.now(),
        actorId: session.userId,
--- a/server/lib/webhook.ts
+++ b/server/lib/webhook.ts
@ -117,10 +117,7 @@ export async function processWebhook(
 }

 /** h3 wrapper for `POST /webhook` / `POST /webhook/:groupId`. */
-export async function handleWebhookRequest(
-  event: H3Event,
-  tenantId?: string,
-): Promise<unknown> {
+export async function handleWebhookRequest(event: H3Event, tenantId?: string): Promise<unknown> {
  const contentLength = Number(getHeader(event, "content-length") ?? 0);
  if (contentLength > MAX_BODY_SIZE) {
    setResponseStatus(event, 413);
--- a/tailwind.config.ts
+++ b/tailwind.config.ts
@ -47,8 +47,8 @@ export default <Partial<Config>>{
        card: "var(--shadow)",
        "card-hover": "0 8px 24px -12px rgba(15, 23, 42, 0.25)",
        "accent-lg": "0 12px 28px -10px var(--accent)",
-        "drawer": "-16px 0 48px rgba(15, 23, 42, 0.12)",
-        "modal": "0 12px 40px rgba(15, 23, 42, 0.25)",
+        drawer: "-16px 0 48px rgba(15, 23, 42, 0.12)",
+        modal: "0 12px 40px rgba(15, 23, 42, 0.25)",
      },
      keyframes: {
        rise: {
--- a/tests/admin-api.test.ts
+++ b/tests/admin-api.test.ts
@ -1,9 +1,5 @@
 import { describe, it, expect } from "bun:test";
-import {
-  adminGroupRename,
-  adminGroupRoutesGet,
-  adminApiMe,
-} from "../server/lib/web/admin";
+import { adminGroupRename, adminGroupRoutesGet, adminApiMe } from "../server/lib/web/admin";
 import { createAdminSession, adminCookie } from "../server/lib/web/session";
 import { loadGroups } from "../server/lib/web/groups";
 import { loadRoutes } from "../server/lib/config";
--- a/tests/formatter.test.ts
+++ b/tests/formatter.test.ts
@ -34,7 +34,9 @@ describe("message title spec", () => {
    expect(msg.title).toBe(
      "acme/widget: Pushed 1 commit to [`main`](https://github.com/acme/widget/tree/main)",
    );
-    expect(msg.description).toBe("[View comparison](https://github.com/acme/widget/compare/abc...def)");
+    expect(msg.description).toBe(
+      "[View comparison](https://github.com/acme/widget/compare/abc...def)",
+    );
  });

  it("pull_request title is repo#number: title", () => {
@ -101,7 +103,9 @@ describe("message title spec", () => {
        sender,
      }),
    );
-    expect(msg.title).toBe("acme/widget: [CI — success](https://github.com/acme/widget/actions/runs/42)");
+    expect(msg.title).toBe(
+      "acme/widget: [CI — success](https://github.com/acme/widget/actions/runs/42)",
+    );
    expect(msg.fields![1].value).toBe("✅ build");
  });

@ -122,7 +126,9 @@ describe("message title spec", () => {
        sender,
      }),
    );
-    expect(queued.title).toBe("acme/widget: [CI — queued](https://github.com/acme/widget/actions/runs/42)");
+    expect(queued.title).toBe(
+      "acme/widget: [CI — queued](https://github.com/acme/widget/actions/runs/42)",
+    );
    expect(queued.fields![0].value).toBe("⏳ queued");

    const running = formatEvent(
@ -134,7 +140,9 @@ describe("message title spec", () => {
        sender,
      }),
    );
-    expect(running.title).toBe("acme/widget: [CI — running](https://github.com/acme/widget/actions/runs/42)");
+    expect(running.title).toBe(
+      "acme/widget: [CI — running](https://github.com/acme/widget/actions/runs/42)",
+    );
    expect(running.fields![0].value).toBe("🔄 running");
  });

--- a/tests/install.test.ts
+++ b/tests/install.test.ts
@ -269,7 +269,10 @@ describe("POST /auth/github/install/bind", () => {
    const env = createEnv({ KV: kv });
    const sessionId = await createAdminSession(kv, "1001", "alice");

-    const event = bindEvent(env, adminCookie(sessionId), { installation_id: "555", group: "theirs" });
+    const event = bindEvent(env, adminCookie(sessionId), {
+      installation_id: "555",
+      group: "theirs",
+    });
    await handleInstallBind(event);
    expect(responseStatus(event)).toBe(302);
    expect(responseHeader(event, "location")).toBe("/admin?error=forbidden");
@ -329,7 +332,10 @@ describe("oauth misc", () => {
  it("starts the OAuth flow with a state token", async () => {
    const kv = createMockKV();
    const env = createEnv({ KV: kv, GITHUB_CLIENT_ID: "client-1" });
-    const event = makeEvent("/auth/github?redirect=/admin", { headers: { accept: "text/html" }, env });
+    const event = makeEvent("/auth/github?redirect=/admin", {
+      headers: { accept: "text/html" },
+      env,
+    });
    await handleOAuthStart(event);
    expect(responseStatus(event)).toBe(302);
    const location = responseHeader(event, "location") ?? "";
--- a/tests/invites.test.ts
+++ b/tests/invites.test.ts
@ -1,5 +1,11 @@
 import { describe, it, expect, beforeEach } from "bun:test";
-import { createInvite, getInvite, listInvites, revokeInvite, acceptInvite } from "../server/lib/web/invites";
+import {
+  createInvite,
+  getInvite,
+  listInvites,
+  revokeInvite,
+  acceptInvite,
+} from "../server/lib/web/invites";
 import { saveGroups, loadGroups } from "../server/lib/web/groups";
 import type { Group } from "../server/lib/types";

--- a/tests/webhook.test.ts
+++ b/tests/webhook.test.ts
@ -184,22 +184,20 @@ describe("matchRoute", () => {

  it("matches branch filter with single-char ? wildcard", () => {
    const route = { ...baseRoute, filters: [{ type: "branch" as const, match: "feature-?" }] };
-    expect(
-      matchRoute(route, { event: "push", payload: { ref: "refs/heads/feature-x" } }),
-    ).toBe(true);
-    expect(
-      matchRoute(route, { event: "push", payload: { ref: "refs/heads/feature-xy" } }),
-    ).toBe(false);
+    expect(matchRoute(route, { event: "push", payload: { ref: "refs/heads/feature-x" } })).toBe(
+      true,
+    );
+    expect(matchRoute(route, { event: "push", payload: { ref: "refs/heads/feature-xy" } })).toBe(
+      false,
+    );
  });

  it("matches branch filter with //-wrapped regex", () => {
    const route = { ...baseRoute, filters: [{ type: "branch" as const, match: "/^feat/" }] };
-    expect(
-      matchRoute(route, { event: "push", payload: { ref: "refs/heads/feature-x" } }),
-    ).toBe(true);
-    expect(
-      matchRoute(route, { event: "push", payload: { ref: "refs/heads/main" } }),
-    ).toBe(false);
+    expect(matchRoute(route, { event: "push", payload: { ref: "refs/heads/feature-x" } })).toBe(
+      true,
+    );
+    expect(matchRoute(route, { event: "push", payload: { ref: "refs/heads/main" } })).toBe(false);
  });

  it("treats glob special chars literally when not wrapped", () => {