cursedbelt-server 4.40.2 → 4.40.3

package/dist/server/incidents/store.js

@@ -165,7 +165,7 @@ export function createIncidentStore(db) {
         },
         acknowledge(fp, now = Date.now()) {
             const row = selectOne.get(fp);
-            if (!row || row.state !== "open")
+            if (row?.state !== "open")
                 return false;
             db.prepare(`UPDATE ${INCIDENTS_TABLE} SET state = 'acknowledged', acknowledged_at = ?
 					WHERE fingerprint = ?`).run(now, fp);

package/dist/server/sharing/router.js

@@ -26,7 +26,7 @@ const isLevel = (v) => v === 'read' || v === 'write';
  * ```
  */
 export function mountShareRoutes(
-// biome-ignore lint/suspicious/noExplicitAny: the caller's Hono env is theirs, and this
+// `any` on purpose: the caller's Hono env is theirs, and this
 // module reads nothing off it — narrowing it would force every app to name its own Env
 // here for no gain.
 app, options) {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "cursedbelt-server",
-	"version": "4.40.2",
+	"version": "4.40.3",
 	"license": "ISC",
 	"type": "module",
 	"description": "The app-facing Bun/Hono server tier of the cursedbelt split — storage, sharing, activity, guard, sync. React-free; cursedbelt-core below it.",
@@ -25,7 +25,8 @@
 		"verify": "bun run gate",
 		"prepublishOnly": "bun run gate --force",
 		"test:pg": "bun run scripts/testPg.ts",
-		"gate": "bun run scripts/paths.ts --only gate.ts"
+		"gate": "bun run scripts/paths.ts --only gate.ts",
+		"lint": "biome check --error-on-warnings ."
 	},
 	"files": [
 		"dist",
@@ -352,7 +353,7 @@
 	"dependencies": {
 		"argon2id": "1.0.1",
 		"cursedbelt-core": "^2.1.1",
-		"cursedops": ">=0.8.1 <0.12.0",
+		"cursedops": ">=0.8.1 <0.13.0",
 		"cwip": "^4.6.0",
 		"jose": "^6.2.3"
 	},
@@ -387,7 +388,7 @@
 		}
 	},
 	"devDependencies": {
-		"@biomejs/biome": "^2.5.0",
+		"@biomejs/biome": "^2.5.14",
 		"@happy-dom/global-registrator": "^20.10.6",
 		"@node-rs/argon2": "^2.0.2",
 		"@types/bun": "^1.3.14",
@@ -408,6 +409,9 @@
 			{
 				"script": "paths"
 			},
+			{
+				"script": "lint"
+			},
 			{
 				"script": "typecheck"
 			},

package/src/server/incidents/incidents.spec.ts

@@ -208,7 +208,6 @@ describe("what a message may not contain or travel down", () => {
 			store.reconcile("ingest", [
 				{
 					...stuckIngest(),
-					// biome-ignore lint/suspicious/noExplicitAny: the point of the test is the wrong type
 					facts: { failed: 42, firstFile: "Mom's 60th birthday.mov" as any },
 				},
 			]),

package/src/server/incidents/store.ts

@@ -316,7 +316,7 @@ export function createIncidentStore(db: Database): IncidentStore {
 
 		acknowledge(fp, now = Date.now()) {
 			const row = selectOne.get(fp) as Row | null;
-			if (!row || row.state !== "open") return false;
+			if (row?.state !== "open") return false;
 			db.prepare(
 				`UPDATE ${INCIDENTS_TABLE} SET state = 'acknowledged', acknowledged_at = ?
 					WHERE fingerprint = ?`,

package/src/server/master-lock/guard.spec.ts

@@ -11,7 +11,6 @@ import {
 	MASTER_LOCK_STATE_HEADER,
 	type MasterLockKdfParams,
 	deriveMasterLockVerifier,
-	newMasterLockKdfParams,
 } from "cursedbelt-core/master-lock";
 import { createMasterLockGuard } from "./guard.js";
 import { MasterLock } from "./masterLock.js";

package/src/server/master-lock/sessions.spec.ts

@@ -107,7 +107,9 @@ describe("🔴 two devices in flight together (task 2138)", () => {
 			let pending: string | null = null;
 			const lock = new MasterLock({
 				store: record,
-				state: { read: () => seen, write: (json) => void (pending = json) },
+				state: { read: () => seen, write: (json) => {
+					pending = json;
+				} },
 				seedJson: SEED,
 			});
 			return { lock, settle: () => pending !== null && createKvMasterLockStore(kv, MASTER_LOCK_STATE_KEY).write(pending) };

package/src/server/sharing/router.ts

@@ -126,7 +126,7 @@ const isLevel = (v: unknown): v is ShareLevel => v === 'read' || v === 'write';
  * ```
  */
 export function mountShareRoutes<V extends ShareRouterViewer>(
-  // biome-ignore lint/suspicious/noExplicitAny: the caller's Hono env is theirs, and this
+  // `any` on purpose: the caller's Hono env is theirs, and this
   // module reads nothing off it — narrowing it would force every app to name its own Env
   // here for no gain.
   app: Hono<any>,

package/src/server/storage/files/catalogue.media-host.spec.ts

@@ -17,8 +17,6 @@ import { bytesStream } from 'cursedbelt-core/testing';
 const CTX: MediaCtx = { userId: 'u1', tenantId: 't1' };
 const OWNER = CTX.userId;
 const stream = bytesStream;
-const drain = async (s: ReadableStream<Uint8Array>): Promise<Uint8Array> =>
-  new Uint8Array(await new Response(s).arrayBuffer());
 
 let db: Database;
 let root: string;