popertots
6d82535780
Addresses the adversarial fresh-eyes audit (findings A1-A20) plus review-round fixes: - CRITICAL A1: replay-by-key rescue cross-checks replayed CreatedAt; ccof blind-fail leaves pending with CRITICAL + notification instead of clawing back - A2/A3/A4: till idempotency key restored to unconditional hash; tip rejected in CreateBookingPayment; campaign discount now reduces the charged amount (deposit credit) - A5: admin notifications on blind-fail, manual-refund re-arm, cap-stranded charge-group, webhook FAILED/REJECTED refunds - A6/A10: BuyGiftCard idempotency user-scoped; gift-card slot scan advances past failed rows - A7/A14/A15: 2FA user+IP limiter, SNAPSHOT_ENC_KEY startup validation, accurate pepper/log-delivery docs - A8/A9: snapshot encryption on all write+reuse sites; MPV->SPV effective voucher type (single VAT point) - A11/A12/A13/A16: amount-aware refund reconciliation; completed-booking refund re-validation; till retry dedup; PaymentWasRefunded on SquareClient interface - A17/A18/A19/A20: CI runs npm test; confirm_overflow_tip frontend dialog; unknown-event admin notification; mock token redaction - M7 ConfirmOverflowTip, M9 snapshot encryption, C1 discount ordering regression test - Frontend vitest framework (41 tests), backend coverage for fixed functions, docs corrected (2,269 tests, SUPPORT_EMAIL tokens, resolution status) All 25 backend packages pass; frontend 41/41; build + env-docs green.
69 lines
1.9 KiB
JSON
69 lines
1.9 KiB
JSON
{
|
|
"name": "crussell",
|
|
"private": true,
|
|
"version": "0.0.1",
|
|
"type": "module",
|
|
"overrides": {
|
|
"cookie": "^0.7.0"
|
|
},
|
|
"scripts": {
|
|
"dev": "vite dev",
|
|
"build": "vite build",
|
|
"preview": "vite preview",
|
|
"prepare": "svelte-kit sync || echo ''",
|
|
"check": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json --fail-on-warnings",
|
|
"check:watch": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json --watch",
|
|
"test": "vitest run",
|
|
"format": "prettier --write .",
|
|
"lint": "prettier --check . && eslint .",
|
|
"lint:a11y": "eslint 'src/**/*.svelte' --config eslint.a11y.config.js"
|
|
},
|
|
"devDependencies": {
|
|
"@eslint/compat": "^2.1.0",
|
|
"@eslint/js": "^9.39.5",
|
|
"@internationalized/date": "^3.11.0",
|
|
"@lucide/svelte": "^1.17.0",
|
|
"@sveltejs/adapter-static": "^3.0.9",
|
|
"@sveltejs/kit": "^2.22.0",
|
|
"@sveltejs/vite-plugin-svelte": "^7.2.0",
|
|
"@tailwindcss/vite": "^4.2.0",
|
|
"@types/geojson": "^7946.0.16",
|
|
"@types/node": "^26.1.1",
|
|
"@vitest/coverage-v8": "^4.1.10",
|
|
"bits-ui": "^2.16.1",
|
|
"clsx": "^2.1.1",
|
|
"eslint": "^9.39.5",
|
|
"eslint-config-prettier": "^10.0.1",
|
|
"eslint-plugin-svelte": "^3.0.0",
|
|
"globals": "^17.3.0",
|
|
"mode-watcher": "^1.1.0",
|
|
"prettier": "^3.8.1",
|
|
"prettier-plugin-svelte": "^4.1.1",
|
|
"prettier-plugin-tailwindcss": "^0.8.0",
|
|
"shadcn-svelte": "^1.1.1",
|
|
"svelte": "^5.0.0",
|
|
"svelte-check": "^4.4.3",
|
|
"svelte-easy-crop": "^5.0.0",
|
|
"svelte-sonner": "^1.0.7",
|
|
"tailwind-merge": "^3.5.0",
|
|
"tailwind-variants": "^3.2.2",
|
|
"tailwindcss": "^4.2.0",
|
|
"tw-animate-css": "^1.4.0",
|
|
"typescript": "^5.9.3",
|
|
"typescript-eslint": "^8.20.0",
|
|
"vite": "^8.1.4",
|
|
"vitest": "^4.1.10"
|
|
},
|
|
"dependencies": {
|
|
"@discourse/jxl": "^1.3.0",
|
|
"@jsquash/avif": "^2.1.1",
|
|
"@jsquash/jpeg": "^1.6.0",
|
|
"@jsquash/webp": "^1.5.0",
|
|
"@zxcvbn-ts/core": "^4.1.2",
|
|
"@zxcvbn-ts/language-common": "^4.1.2",
|
|
"@zxcvbn-ts/language-en": "^4.1.1",
|
|
"heic2any": "^0.0.4",
|
|
"maplibre-gl": "^5.24.0"
|
|
}
|
|
}
|