Replace hapi with hono

.github/workflows/pull-request-bin.yml

@@ -0,0 +1,42 @@
+name: Reject protected-dir changes
+
+permissions:
+  contents: read
+
+on:
+  push:
+    branches: [ "master" ]
+  pull_request:
+    branches: [ "master" ]
+
+jobs:
+  reject-protected:
+    runs-on: ubuntu-slim
+    env:
+      PROTECTED_DIR: bin/
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        with:
+          fetch-depth: 0
+      - name: Fail if protected dir changed (unless [bin-update] present)
+        run: |
+          BASE_REF="${{ github.event.pull_request.base.ref }}"
+          # fetch base for diff/log
+          git fetch origin "$BASE_REF" --depth=1
+
+          # if any commit message includes [bin-update], skip the check
+          if git log --pretty=%B "origin/${BASE_REF}"..HEAD | grep -q '\[bin-update\]'; then
+            echo "Bypass: a commit message contains [bin-update]."
+            exit 0
+          fi
+
+          # list changed files between PR branch and base
+          changes=$(git diff --name-only "origin/${BASE_REF}"..HEAD || true)
+
+          # fail if any changed file is under the protected directory
+          if echo "$changes" | grep -E "^${PROTECTED_DIR}"; then
+            echo "ERROR: Changes detected under ${PROTECTED_DIR}. Rejecting PR."
+            exit 1
+          fi
+
+          echo "No changes detected under ${PROTECTED_DIR}."

AGENTS.md

@@ -264,6 +264,7 @@ Build process injects:
 - `import.meta.VERSION` - Package version from package.json
 - `import.meta.ownerSizeTotalWorker` - 'Owner size total' worker path
 - `import.meta.creditsWorker` - 'Credits' worker path
+- `import.meta.lockDbSelectors` - Lock DB selectors upon init
 
 ### 6. No Network After Key Loading
 

bin/.gitignore

@@ -0,0 +1,6 @@
+# Until we implement <https://github.com/okTurtles/chel/issues/125>, the files
+# in this directory must _not_ be version-controlled, as they're placeholders
+# used by the post install script. However, running `npm install` on this
+# project will result in overwriting the file if the post install script runs
+# To avoid this, all files under this directory are ignored.
+*

bin/chel.exe

@@ -0,0 +1 @@
+placeholder, will be replaced by real binary. DO NOT DELETE THIS FILE!