chore: merge main, resolve biome formatting conflicts

Merge origin/main into feat/external-2fa-codes. Resolve formatting
conflicts caused by biome rollout; preserve both feature streams:
PR's external 2FA token + signing-session 2FA proof additions plus
main's RateLimit/RecipientExpired/signingReminders/date-auto-insert.

In complete-document-with-token.ts, drop the duplicate early
field-fetching block introduced when main moved that logic later
with date auto-insert support; keep the EXTERNAL_TWO_FACTOR_AUTH
check using derivedRecipientActionAuth.

packages/lib/server-only/auth/create-passkey-authentication-options.ts

@@ -1,11 +1,10 @@
+import { prisma } from '@documenso/prisma';
 import type { Passkey } from '@prisma/client';
-import { generateAuthenticationOptions } from '@simplewebauthn/server';
 import type { AuthenticatorTransportFuture } from '@simplewebauthn/server';
+import { generateAuthenticationOptions } from '@simplewebauthn/server';
 import { isoBase64URL } from '@simplewebauthn/server/helpers';
 import { DateTime } from 'luxon';
 
-import { prisma } from '@documenso/prisma';
-
 import { AppError, AppErrorCode } from '../../errors/app-error';
 import { getAuthenticatorOptions } from '../../utils/authenticator';
 

packages/lib/server-only/auth/create-passkey-registration-options.ts

@@ -1,10 +1,9 @@
-import { generateRegistrationOptions } from '@simplewebauthn/server';
+import { prisma } from '@documenso/prisma';
 import type { AuthenticatorTransportFuture } from '@simplewebauthn/server';
+import { generateRegistrationOptions } from '@simplewebauthn/server';
 import { isoBase64URL } from '@simplewebauthn/server/helpers';
 import { DateTime } from 'luxon';
 
-import { prisma } from '@documenso/prisma';
-
 import { PASSKEY_TIMEOUT } from '../../constants/auth';
 import { getAuthenticatorOptions } from '../../utils/authenticator';
 
@@ -12,9 +11,7 @@ type CreatePasskeyRegistrationOptions = {
   userId: number;
 };
 
-export const createPasskeyRegistrationOptions = async ({
-  userId,
-}: CreatePasskeyRegistrationOptions) => {
+export const createPasskeyRegistrationOptions = async ({ userId }: CreatePasskeyRegistrationOptions) => {
   const user = await prisma.user.findFirstOrThrow({
     where: {
       id: userId,

packages/lib/server-only/auth/create-passkey-signin-options.ts

@@ -1,8 +1,7 @@
+import { prisma } from '@documenso/prisma';
 import { generateAuthenticationOptions } from '@simplewebauthn/server';
 import { DateTime } from 'luxon';
 
-import { prisma } from '@documenso/prisma';
-
 import { getAuthenticatorOptions } from '../../utils/authenticator';
 
 type CreatePasskeySigninOptions = {

packages/lib/server-only/auth/create-passkey.ts

@@ -1,9 +1,8 @@
-import { UserSecurityAuditLogType } from '@prisma/client';
-import { verifyRegistrationResponse } from '@simplewebauthn/server';
-import type { RegistrationResponseJSON } from '@simplewebauthn/server';
-import { isoBase64URL } from '@simplewebauthn/server/helpers';
-
 import { prisma } from '@documenso/prisma';
+import { UserSecurityAuditLogType } from '@prisma/client';
+import type { RegistrationResponseJSON } from '@simplewebauthn/server';
+import { verifyRegistrationResponse } from '@simplewebauthn/server';
+import { isoBase64URL } from '@simplewebauthn/server/helpers';
 
 import { MAXIMUM_PASSKEYS } from '../../constants/auth';
 import { AppError, AppErrorCode } from '../../errors/app-error';

packages/lib/server-only/auth/delete-passkey.ts

@@ -1,6 +1,5 @@
-import { UserSecurityAuditLogType } from '@prisma/client';
-
 import { prisma } from '@documenso/prisma';
+import { UserSecurityAuditLogType } from '@prisma/client';
 
 import type { RequestMetadata } from '../../universal/extract-request-metadata';
 
@@ -10,11 +9,7 @@ export interface DeletePasskeyOptions {
   requestMetadata?: RequestMetadata;
 }
 
-export const deletePasskey = async ({
-  userId,
-  passkeyId,
-  requestMetadata,
-}: DeletePasskeyOptions) => {
+export const deletePasskey = async ({ userId, passkeyId, requestMetadata }: DeletePasskeyOptions) => {
   await prisma.passkey.findFirstOrThrow({
     where: {
       id: passkeyId,

packages/lib/server-only/auth/find-passkeys.ts

@@ -1,8 +1,7 @@
+import { prisma } from '@documenso/prisma';
 import type { Passkey } from '@prisma/client';
 import { Prisma } from '@prisma/client';
 
-import { prisma } from '@documenso/prisma';
-
 import type { FindResultResponse } from '../../types/search-params';
 
 export interface FindPasskeysOptions {
@@ -17,13 +16,7 @@ export interface FindPasskeysOptions {
   };
 }
 
-export const findPasskeys = async ({
-  userId,
-  query = '',
-  page = 1,
-  perPage = 10,
-  orderBy,
-}: FindPasskeysOptions) => {
+export const findPasskeys = async ({ userId, query = '', page = 1, perPage = 10, orderBy }: FindPasskeysOptions) => {
   const orderByColumn = orderBy?.column ?? 'lastUsedAt';
   const orderByDirection = orderBy?.direction ?? 'desc';
   const orderByNulls: Prisma.NullsOrder | undefined = orderBy?.nulls ?? 'last';

packages/lib/server-only/auth/send-confirmation-email.ts

@@ -1,17 +1,12 @@
-import { createElement } from 'react';
-
-import { msg } from '@lingui/core/macro';
-
 import { mailer } from '@documenso/email/mailer';
 import { ConfirmEmailTemplate } from '@documenso/email/templates/confirm-email';
 import { prisma } from '@documenso/prisma';
+import { msg } from '@lingui/core/macro';
+import { createElement } from 'react';
 
 import { getI18nInstance } from '../../client-only/providers/i18n-server';
 import { NEXT_PUBLIC_WEBAPP_URL } from '../../constants/app';
-import {
-  DOCUMENSO_INTERNAL_EMAIL,
-  USER_SIGNUP_VERIFICATION_TOKEN_IDENTIFIER,
-} from '../../constants/email';
+import { DOCUMENSO_INTERNAL_EMAIL, USER_SIGNUP_VERIFICATION_TOKEN_IDENTIFIER } from '../../constants/email';
 import { renderEmailWithI18N } from '../../utils/render-email-with-i18n';
 
 export interface SendConfirmationEmailProps {

packages/lib/server-only/auth/send-forgot-password.ts

@@ -1,10 +1,8 @@
-import { createElement } from 'react';
-
-import { msg } from '@lingui/core/macro';
-
 import { mailer } from '@documenso/email/mailer';
 import { ForgotPasswordTemplate } from '@documenso/email/templates/forgot-password';
 import { prisma } from '@documenso/prisma';
+import { msg } from '@lingui/core/macro';
+import { createElement } from 'react';
 
 import { getI18nInstance } from '../../client-only/providers/i18n-server';
 import { NEXT_PUBLIC_WEBAPP_URL } from '../../constants/app';

packages/lib/server-only/auth/send-reset-password.ts

@@ -1,8 +1,7 @@
-import { createElement } from 'react';
-
 import { mailer } from '@documenso/email/mailer';
 import { ResetPasswordTemplate } from '@documenso/email/templates/reset-password';
 import { prisma } from '@documenso/prisma';
+import { createElement } from 'react';
 
 import { NEXT_PUBLIC_WEBAPP_URL } from '../../constants/app';
 import { env } from '../../utils/env';

packages/lib/server-only/auth/update-passkey.ts

@@ -1,6 +1,5 @@
-import { UserSecurityAuditLogType } from '@prisma/client';
-
 import { prisma } from '@documenso/prisma';
+import { UserSecurityAuditLogType } from '@prisma/client';
 
 import type { RequestMetadata } from '../../universal/extract-request-metadata';
 
@@ -11,12 +10,7 @@ export interface UpdateAuthenticatorsOptions {
   requestMetadata?: RequestMetadata;
 }
 
-export const updatePasskey = async ({
-  userId,
-  passkeyId,
-  name,
-  requestMetadata,
-}: UpdateAuthenticatorsOptions) => {
+export const updatePasskey = async ({ userId, passkeyId, name, requestMetadata }: UpdateAuthenticatorsOptions) => {
   const passkey = await prisma.passkey.findFirstOrThrow({
     where: {
       id: passkeyId,