239 Commits

Include renames

Author	SHA1	Message	Date
popertots	895d7f0df9	chore: update shadcn-svelte from 1.4.0 to 1.4.1	2026-07-10 11:20:35 +01:00
popertotsandSisyphus	5f95abf804	ci: add secrets scanning, staticcheck, gosec, coverage, env docs, compose/nginx validation, a11y ... New jobs in pipeline: secrets-scan: gitleaks detection go-staticcheck: static analysis (complement to golangci-lint) go-gosec: Go security linter test: coverage profiling with 50% threshold gate env-docs-check: verifies all env vars are documented in .env.example docker-compose-check: validates compose.yml syntax nginx-check: validates nginx config frontend-a11y: Svelte a11y accessibility checks Also: remove orphaned Makefile, update .env.example with 11 missing vars, create .gitleaks.toml with allowlist, add check-env-docs.py script. Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>	2026-07-10 09:38:07 +01:00
popertotsandSisyphus	0668438ab0	fix: knip clean — delete remaining dead map files, add knip config, unexport internal types ... Delete 6 unused map components and use-map.svelte.ts hook. Create knip.json to handle worker entry points and dynamic imports. Unexport UserRole/DecodedToken types (only used internally). Remove resolved ignoreDependencies entries. Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>	2026-07-09 19:45:14 +01:00
popertotsandSisyphus	407de74b51	fix: restore test-used functions, silence tx.Rollback closed errors, prune knip dead code ... Restore processImage (images.go) and nonDepositPaymentType (handlers.go) with //nolint:unused — used in test files. Fix 97 tx.Rollback defers to silently discard expected "tx is closed" error after commit. Frontend: remove 44 unused shadcn-svelte files, 2 dead components, 9 stale npm deps, prune unused exports. Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>	2026-07-09 19:20:25 +01:00
popertotsandSisyphus	96410c9f18	chore: remove minimatch override (no longer needed), keep cookie override (SvelteKit pinned dep) ... npm update resolved minimatch transitively. cookie still pinned via override because SvelteKit <= 2.69.2 depends on vulnerable cookie < 0.7.0. Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>	2026-07-09 17:44:34 +01:00
popertotsandSisyphus	914f9993ec	ci: remove test/race timeouts, add concurrency cancel-in-progress, fix npm audit vulns ... - Remove -timeout 180s/240s from go test and race commands - Add concurrency group to cancel stale pipelines on new pushes - Run npm update to bump Vite 7.3.5 -> 7.3.6, fixing nested esbuild vuln - npm audit now at 0 vulnerabilities Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>	2026-07-09 17:43:13 +01:00
popertotsandSisyphus	92124158bf	feat(frontend): add apiFetch wrapper for automatic auth token injection ... Centralizes auth token management into a reusable apiFetch() helper and getAuthHeaders() utility, eliminating inline Bearer token logic across all frontend files. Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>	2026-07-06 19:21:34 +01:00
popertots	e831953e5b	fix(ui): improve reservation lifecycle in BookingFlow ... - Release reservation on service change, date change, and step-back navigation - Add synchronous double-click payment guard (isProcessingPaymentSync) - Immutable update for confirmedBooking to prevent race-condition overcharge - Generate fresh idempotency key per submission attempt (was reused across component lifetime, causing stale-booking illusion on re-submit) - Release reservation after successful booking submission - Extract releaseReservation() helper for DRY reservation cleanup - Race-condition guard in selectTimeWithValidation: pass clicked time explicitly so stale validation can't clobber a newer selection	2026-07-06 17:58:14 +01:00
popertotsandSisyphus	1c09e4220b	fix: run eslint on every commit and restore gdpr navigation eslint-disable ... Pre-commit hook now runs eslint on all frontend files regardless of what's staged, catching pre-existing issues. Restore the necessary eslint-disable in gdpr page for the async goto call. Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>	2026-07-05 22:43:48 +01:00
popertotsandSisyphus	878624e6f2	fix: resolve eslint warnings and error ... Remove unused eslint-disable directives in BookingCreateModal and GDPR page. Rename isMobile to _isMobile to match allowed unused vars pattern. Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>	2026-07-05 22:39:55 +01:00
popertotsandSisyphus	9c0b189b73	style: fix prettier formatting in 3 admin files ... Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>	2026-07-05 22:30:42 +01:00
popertotsandSisyphus	5f1f6c4b44	style: standardise select styling in DiscountsManagement, HolidayHours, TodayCalendar ... Update select element classes to consistent h-9, shadow-xs, bg-background, focus-visible ring styling. Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>	2026-07-05 22:26:38 +01:00
popertotsandSisyphus	5616357269	style: standardise input styling in booking create, business settings, custom services, patch test, walk-in create ... Update input element classes to consistent h-9, py-1, shadow-xs, focus-visible border-ring with ring-[3px] and ring-ring/50 for visual consistency across admin components. Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>	2026-07-05 22:26:28 +01:00
popertotsandSisyphus	b7fa22b018	refactor: accept defaultHours prop in WeeklySchedule and TimeBlockers ... Add optional defaultHours prop to accept pre-fetched data from parent page. Standardise select element styling with shadow-xs, focus-visible ring, and consistent padding. Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>	2026-07-05 22:26:18 +01:00
popertotsandSisyphus	56eda0ead5	refactor: accept services prop in PatchTestsManagement and ServicesManagement ... Add optional services prop so the page can pass pre-fetched data, avoiding duplicate API calls. Fall back to self-fetching when prop is not provided. Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>	2026-07-05 22:26:08 +01:00
popertotsandSisyphus	42c3b65a27	feat: add collapsible sections and lifted data fetching to admin page ... Add independently toggleable collapsible sections for scheduling, customers, services, promotions, settings. Lift services and default-hours fetching to page level to avoid duplicate API calls. Add responsive breakpoint detection — sections default expanded on desktop, collapsed on mobile. Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>	2026-07-05 22:25:49 +01:00
popertotsandSisyphus	4879ca5a82	style: format multi-line expressions in BookingFlow.svelte ... Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>	2026-07-05 12:00:09 +01:00
popertotsandSisyphus	e642b0fa3e	fix: move BookingFlow window type to app.d.ts and fix authHeaders typing ... Move __bookingFlowCountdownInterval from inline declare global in BookingFlow.svelte to global app.d.ts. Fix authHeaders type from {} to undefined to satisfy TypeScript. Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>	2026-07-05 11:55:45 +01:00
popertotsandSisyphus	2069a99f8c	feat: improve booking flow with auth headers and reservation release ... Send auth token in reserve/availability/working-hours requests so the backend can exclude the user's own reservations. Cancel old reservation via DELETE before reserving a new slot. Track reserved slot time/date for back-navigate detection. Clean up countdown interval via onDestroy and window reference to prevent duplicates. Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>	2026-07-05 11:48:14 +01:00
popertots	34147f87ab	fix: add inline eslint-disable inside handleGotoAccount function	2026-06-25 18:55:39 +01:00
popertots	234c1d20b7	style: fix prettier formatting in gdpr page	2026-06-25 18:54:16 +01:00
popertots	eb9a9186c3	fix: use function wrapper for goto() calls to suppress eslint rule in template	2026-06-25 18:51:22 +01:00
popertots	633d8ff1a8	fix: eslint-disable comments correctly placed for script and template sections	2026-06-25 18:44:05 +01:00
popertots	61338921e8	fix: resolve all lint issues — eslint, prettier, svelte-check pass	2026-06-25 18:34:42 +01:00
popertots	bce26dce2a	fix: strip and re-add eslint-disable comments on correct lines, fix stray > in NavBar	2026-06-25 18:19:19 +01:00
popertots	7bb017d6b4	fix: suppress pre-existing no-unused-vars in account page	2026-06-25 18:09:03 +01:00
popertots	9627c86317	style: fix prettier formatting in account page	2026-06-25 18:04:29 +01:00
popertots	106eef8468	fix: use JS comment format for eslint-disable inside script sections, remove duplicates	2026-06-25 18:01:44 +01:00
popertots	ac24d3f990	fix: reposition eslint-disable comments for goto() calls and any types	2026-06-25 17:54:34 +01:00
popertots	fc26f9524a	style: exclude mapcn-svelte from prettier checks (third-party code)	2026-06-25 17:48:04 +01:00
popertots	154a7217b4	fix: ignore third-party map component from linting ... The mapcn-svelte component at src/lib/components/ui/map/ is a third-party library, not our code. Add to eslint ignores so we don't need to maintain eslint-disable comments in imported code.	2026-06-25 17:43:15 +01:00
popertots	ecf8c23c49	fix: add eslint-disable-next-line comments for map DOM manipulation	2026-06-25 17:38:20 +01:00
popertots	a5812018d8	style: fix prettier formatting in 3 files	2026-06-25 17:28:42 +01:00
popertots	74a24c3ef1	fix: resolve remaining eslint errors — svelte-check, prettier, eslint all pass	2026-06-25 17:24:07 +01:00
popertots	4b5d85b0b9	style: fix self-closing div tags in BookingFlow.svelte	2026-06-25 17:17:20 +01:00
popertots	bc7558cd39	style: run prettier format on 9 files	2026-06-25 17:17:01 +01:00
popertots	eb15a399ef	fix: resolve all agent-induced errors — svelte-check, eslint, prettier pass ... - Fix <!-- svelte-ignore HTML comments in script sections (invalid JS) - Fix catch err -> _err references across all files after renames - Fix .writable (not in Svelte 5 stable) back to + - Fix NavBar dynamic href links with proper eslint-disable in template - Fix SvelteMap type params missing after Map->SvelteMap conversion - Fix required->_required and onclose->_onclose prop mismatches - Fix HolidayHours inline type mismatch, BookingCreateModal suppression - Fix remaining pre-existing no-unused-vars with eslint-disable-next-line - Revert fonts commit, run prettier format svelte-check: 0 errors, eslint: 0 errors, prettier: clean	2026-06-25 17:10:49 +01:00
popertots	e0f22e5c5c	fix: revert agent damage — fix svelte-ignore comments, catch var refs, prop mismatches ... - Convert HTML comments in script sections to eslint-disable-next-line - Fix err->_err references in catch blocks across 8 files - Fix required→_required and onclose→_onclose prop mismatches - Revert BookingCreateModal.svelte from no-unused-vars agent damage - Fix broken regex in account page - Fix .writable (not in Svelte 5 stable) back to + - Fix NavBar dynamic href links with proper eslint-disable	2026-06-25 16:50:23 +01:00
popertots	7c56d6cfb7	fix: rename required to _required in PhoneInput props to match destructuring	2026-06-25 15:12:16 +01:00
popertots	a099f84d1b	style: fix no-unused-vars -- prefix unused catch bindings, remove dead code, suppress template-use false positives	2026-06-25 15:10:07 +01:00
popertots	f3436ac37a	style: fix no-navigation-without-resolve — add resolve() for SPA links, rel=external for target=_blank, suppress in event handlers and effects	2026-06-25 14:59:38 +01:00
popertots	df66041b7c	style: suppress no-dom-manipulating — Maplibre GL integration requires imperative DOM	2026-06-25 14:47:49 +01:00
popertots	a8d04b77e2	style: fix no-explicit-any — replace with proper TypeScript types	2026-06-25 14:46:51 +01:00
popertots	6291d04b47	style: fix no-unused-props -- remove genuinely unused prop type fields from component interfaces	2026-06-25 14:44:10 +01:00
popertots	111baa27f9	style: fix require-each-key — add missing keys to all {#each} blocks	2026-06-25 14:42:19 +01:00
popertots	334b911e16	style: fix prefer-svelte-reactivity — replace with Svelte reactive equivalents	2026-06-25 14:40:22 +01:00
popertots	d5e93b3be2	style: fix valid-prop-names-in-kit-pages — use $page store instead of export let props in +error.svelte	2026-06-25 14:36:08 +01:00
popertots	7514a228d5	style: fix prefer-writable-derived — use $derived.writable instead of $state+$effect sync	2026-06-25 14:35:17 +01:00
popertots	8a339b7810	style: fix no-unnecessary-state-wrap — SvelteDate is already reactive, remove redundant $state()	2026-06-25 14:34:25 +01:00
popertots	63e9b32720	style: fix no-empty — add comments to intentionally empty catch blocks	2026-06-25 14:33:44 +01:00