style: format code with prettier agian

src/lib/foundation/security.ts

@@ -9,15 +9,21 @@ const CSRF_BYTES = 32;
 const CSRF_COOKIE = "__Host-csrf-token";
 const CSRF_COOKIE_MAX_AGE = 86400; // 24h
 
-const ALLOWED_HOSTS: ReadonlySet<string> = new Set([
-  env.APP_URL ? new URL(env.APP_URL).host : "",
-  "localhost",
-  "127.0.0.1",
-].filter(Boolean));
+const ALLOWED_HOSTS: ReadonlySet<string> = new Set(
+  [env.APP_URL ? new URL(env.APP_URL).host : "", "localhost", "127.0.0.1"].filter(Boolean),
+);
 
 const SAFE_REDIRECT_PATHS = new Set([
-  "/login", "/register", "/forgot", "/reset", "/verify",
-  "/banned", "/maintenance", "/", "/me", "/settings",
+  "/login",
+  "/register",
+  "/forgot",
+  "/reset",
+  "/verify",
+  "/banned",
+  "/maintenance",
+  "/",
+  "/me",
+  "/settings",
 ]);
 
 function isSafePath(path: string): boolean {
@@ -42,7 +48,15 @@ export function redirectSafe(destination: string, fallback: string = "/"): never
   redirect(safeRedirect(destination, fallback));
 }
 
-function csrfCookieOpts(): { name: string; value: string; httpOnly: boolean; secure: boolean; sameSite: "lax"; path: string; maxAge: number } {
+function csrfCookieOpts(): {
+  name: string;
+  value: string;
+  httpOnly: boolean;
+  secure: boolean;
+  sameSite: "lax";
+  path: string;
+  maxAge: number;
+} {
   return {
     name: CSRF_COOKIE,
     value: crypto.randomBytes(CSRF_BYTES).toString("hex"),
@@ -106,7 +120,10 @@ export function canonicalizeFormValue(value: FormDataEntryValue | null, maxLen?:
   return maxLen ? s.slice(0, maxLen) : s;
 }
 
-export function canonicalizeFormData(formData: FormData, fields: Record<string, number | undefined>): Record<string, string> {
+export function canonicalizeFormData(
+  formData: FormData,
+  fields: Record<string, number | undefined>,
+): Record<string, string> {
   return Object.fromEntries(
     Object.entries(fields).map(([key, maxLen]) => [key, canonicalizeFormValue(formData.get(key), maxLen)]),
   );
@@ -115,13 +132,11 @@ export function canonicalizeFormData(formData: FormData, fields: Record<string,
 export async function extractClientIpAsync(): Promise<IpAddress> {
   try {
     const h = await headers();
-    return (
-      h.get("x-real-client-ip") ??
+    return (h.get("x-real-client-ip") ??
       h.get("cf-connecting-ip") ??
       h.get("x-forwarded-for")?.split(",")[0]?.trim() ??
       h.get("x-real-ip") ??
-      "0.0.0.0"
-    ) as IpAddress;
+      "0.0.0.0") as IpAddress;
   } catch {
     return "0.0.0.0" as IpAddress;
   }