Adds full test coverage for the trail feature (search, metadata, geometry
stitching, and AllTrails OG preview) so the suite runs cleanly in GitHub
Actions via the existing api-tests workflow.

Infrastructure:
- Dockerfile.test — extends pgvector/pgvector:pg15 with PostGIS 3 via apt,
  giving the test DB both vector similarity and spatial query support
- docker-compose.test.yml — builds from Dockerfile.test instead of pulling
  the pgvector image directly

Test setup:
- setup.ts — adds hiking_ways and hiking_relations to the per-test TRUNCATE
  so OSM data is in a clean state for each test
- test/fixtures/trail-fixtures.ts — test geometry constants and fixture
  builder functions; WKT segments in the Sierra Nevada for realism
- test/utils/osm-db-helpers.ts — seedHikingWay / seedHikingRelation helpers
  that insert PostGIS geometry rows via raw SQL (tables are not in Drizzle
  schema, they are osm2pgsql-managed in production)

Tests (test/trails.test.ts — 18 cases):
- GET /trails/search: text search, case-insensitive, empty results,
  spatial search via ST_DWithin, combined text+spatial, bbox presence
- GET /trails/:osmId: metadata fields, bbox, 404 and 400 error paths
- GET /trails/:osmId/geometry: pre-built geometry, runtime ST_LineMerge
  stitching from member ways, multi-way merge, cache write-back, error paths
- POST /trails/alltrails-preview: SSRF guard, AllTrails-only allow-list,
  OG tag extraction (both attribute orders), 422 on missing title, 502 on
  upstream error — all using vi.stubGlobal('fetch', ...) for fetch mocking

https://claude.ai/code/session_01LJnh37hSqTY8VMsqNyVRSb

https://claude.ai/code/session_01LJnh37hSqTY8VMsqNyVRSb

- Format migration JSON files to satisfy Biome formatter
- Refactor verifyCFAccessRequest to use options object (fixes useMaxParams)
- Replace interface casts with Zod schema parsing in trails route
- Auto-fix env-validation.ts formatting

https://claude.ai/code/session_01LJnh37hSqTY8VMsqNyVRSb

Conflict in cfAccess.ts resolved by keeping the options-object refactor
(our branch) over the biome-ignore suppress comment (development branch).

https://claude.ai/code/session_01LJnh37hSqTY8VMsqNyVRSb

- Fix AllTrails hostname check: dot-boundary guard prevents notalltrails.com
  (was endsWith, now hostname === or endsWith dot-prefixed)
- Validate response.url after redirects to prevent open-redirect SSRF
- Wrap stitched geometry with ST_Multi() before caching to satisfy the
  geometry(MultiLineString) column typmod
- Parameterize wayRefs with sql.join() instead of sql.raw() interpolation
- Update cfAccess unit tests to use the new options-object signature

https://claude.ai/code/session_01LJnh37hSqTY8VMsqNyVRSb

Pre-existing TS2532 errors brought in from development branch merge.

https://claude.ai/code/session_01LJnh37hSqTY8VMsqNyVRSb

https://claude.ai/code/session_01LJnh37hSqTY8VMsqNyVRSb

…d trail routes

- Add @packrat/osm-db: standalone Drizzle package for the OSM database with
  PostGIS schema (osm_ways, osm_routes), GiST/GIN indexes, and pg_trgm support.
  Migrations split: 0000_extensions (hand-written CREATE EXTENSION) +
  0001_osm_schema (drizzle-kit generated including geography casts and
  gin_trgm_ops operator classes).

- Add packages/osm-import/import.ts: TypeScript importer replacing import.sh.
  Downloads PBF, runs osm2pgsql via Bun.spawn, verifies row counts against
  OSM_DATABASE_URL.

- API: createOsmDb() reads OSM_DATABASE_URL (required in prod). Trail routes
  refactored to use dedicated OSM DB; stitchRouteGeometry moved to
  packages/api/src/services/trails.ts. trailOsmId column fixed to bigint.
  drizzle.config.ts updated with tablesFilter to prevent osm_ways/osm_routes
  from being managed by the main app migrations.

- MCP: four trail tools registered (search_trails, get_trail,
  get_trail_geometry, preview_alltrails_url).

- Test: osm-db-helpers and trail fixtures updated to use createOsmDb().

Adds sync.ts which pg_dumps osm_ways + osm_routes from the local PostGIS
instance and pg_restores them into a managed PostgreSQL DB (Supabase, Neon,
RDS, etc.). The dump uses custom format (compressed) with --clean --if-exists
so it is safe to re-run against an existing managed DB.

Setting MANAGED_DB_URL causes `bun run import` to call sync automatically
after a successful import. Can also be run standalone with `bun run sync`
to re-push without re-importing.

- OSM_DATABASE_URL + OSM_PRODUCTION_DATABASE_URL added to nodeEnvSchema
  and root .env.example (OSM section with comments)
- Rename MANAGED_DB_URL → OSM_PRODUCTION_DATABASE_URL for clarity
- import.ts + sync.ts now read env via @packrat/env/node instead of
  process.env directly
- Remove package-local .env.example (root .env.example is canonical)

…_DATABASE_URL

OSM_DATABASE_URL_LOCAL — local Docker PostGIS used during import (scratch DB)
OSM_DATABASE_URL       — managed production DB, matches the Worker's Hyperdrive binding

Follows the NEON_DATABASE_URL / NEON_DATABASE_URL_READONLY suffix pattern.
The Worker API's OSM_DATABASE_URL references are unchanged.

Default 800 MB stalls on continent-scale imports during the way-processing
pass due to insufficient node cache. Set OSM_CACHE_MB=6000 (or ~40% of
available RAM) when importing North America or larger extracts.

Three layers of changes:

1. setup.ts — Elysia non-AOT query/params unwrap fix: in aot:false mode
   Elysia wraps Decode output in { value: ... } but never unwraps it for
   query/params (only body). Added onBeforeHandle hook to unwrap both.

2. setup.ts — OSM table DDL in beforeAll: createOsmDb() is mocked to
   return testDb, so osm_ways/osm_routes must exist there. Added IF NOT
   EXISTS CREATE TABLE with PostGIS geometry columns.

3. trails.test.ts — realistic hardened tests: sport filter, pagination,
   non-way member types ignored, missing ways → null geometry, disconnected
   ways → MultiLineString, radius > 500 → 400, all using apiWithAuth.

- Move createOsmDb() inside try/catch in all three OSM handlers so a
  missing OSM_DATABASE_URL surfaces as 503 (not an uncaught exception)
- Make OSM_DATABASE_URL optional in apiEnvSchema so the Worker starts
  cleanly when trail features are not configured
- Add explicit null guard in createOsmDb() with descriptive error message
- Fix AllTrails preview to return response.url (canonical post-redirect URL)
- Move Leaflet CSS import from trail-map.tsx component to globals.css
  (Next.js App Router requires global CSS in layout/globals only)
- Remove wrangler.jsonc hyperdrive block with TODO placeholder ID that
  breaks wrangler dev; replace with an instructional comment
- Use nodeEnv.OSM_CACHE_MB in import.ts instead of raw process.env

Conflicts resolved:
- packages/api/src/index.ts: kept OSM enrichEnv/Hyperdrive wiring
- packages/api/src/routes/admin/index.ts: took dev Bearer JWT auth guard
- packages/api/src/routes/trails/index.ts: kept OSM DB implementation
- packages/api/src/utils/env-validation.ts: kept OSM_HYPERDRIVE binding
- tsconfig.json: took dev ignoreDeprecations for Expo SDK 55 compat
- bun.lock: regenerated

- admin/index.ts: update verifyCFAccessRequest call to use options object
  signature {teamDomain, aud} instead of the removed 3-arg positional form
- admin/lib/api.ts: fix trailsFetch to call getAuthHeader() (not the
  non-existent buildAuthHeaders())
- admin/components/trail-map.tsx: add explicit L.Layer type annotation to
  eachLayer callback to fix implicit any
- tsconfig.json: exclude packages/overpass from root type check (standalone
  package with own tsconfig and deps not hoisted to root)

https://claude.ai/code/session_01LJnh37hSqTY8VMsqNyVRSb

The packrat-admin Workers Build was failing with "Module not found: Can't
resolve 'leaflet'" because the Cloudflare CI environment did not have leaflet
installed in node_modules at build time.

- next.config.mjs: add webpack externals so webpack maps `import L from
  'leaflet'` to `window.L` (both server and client passes) — build succeeds
  even when the npm package is absent
- layout.tsx: load leaflet JS (afterInteractive) and CSS from unpkg CDN so
  the map works at runtime
- globals.css: remove `@import "leaflet/dist/leaflet.css"` which postcss-import
  would also fail to resolve when the package is not installed

The TrailMap component uses `dynamic(..., { ssr: false })` so leaflet is
only accessed client-side; by the time the user submits an OSM ID the
afterInteractive script has loaded.

https://claude.ai/code/session_01LJnh37hSqTY8VMsqNyVRSb

Auto-generated by `next build`; provides TypeScript type references for Next.js.

https://claude.ai/code/session_01LJnh37hSqTY8VMsqNyVRSb

- node.ts: add IMPORT_MODE to schema + parse call; wire OSM env vars that
  were declared in schema but missing from the parse object
- import.ts: use nodeEnv.IMPORT_MODE instead of raw process.env access
- osm-db/drizzle.config.ts, migrate.ts: import nodeEnv instead of process.env
- api/drizzle.config.ts: import nodeEnv instead of process.env
- trails/index.ts: replace dynamic new RegExp() with static top-level OG regexes
- no-raw-regex: remove trails/index.ts exception (no longer needed)
- no-raw-process-env: remove drizzle/migrate exceptions; keep import.ts for
  legitimate Bun.spawn OS env spreading