popertots 6d00c3004f fix: convert admin PaymentModal to shared useTwoFactorCodeForSavedCard composable (verification round FAIL) ...

The verification of 62adccd found the 2FA composable conversion was incomplete:
PaymentModal.svelte (admin Take Payment on the today page — a live saved-card
charge surface) still re-implemented the 2FA gate inline while the composable's
own doc listed it as one of the six surfaces. This completes the refactor:

- Removed inline twoFactorCode/reveal2FACodeInput/show2FACodeInput/
  missing2FACode/requesting2FACode/handleRequestNew2FACode state (74 -> 21 net
  lines) and the now-unused requestNewTwoFactorCode import
- Composable call mirrors the TillPurchases admin reference: enabled() => true
  (admin supplies the CUSTOMER's code), gateActive() => twoFactorEnforced &&
  customerTwoFactorEnabled (byte-identical semantics)
- Rewired request body, success handler, 403 self-heal, focus effect, and the
  TwoFactorCodeInput/request-button/Pay-button bindings to the composable
- Zero inline gate patterns remain in the payments components dir

Frontend 72/72 tests + build + eslint clean; backend 26/26 packages.

2026-08-22 00:34:50 +01:00

..

src

fix: convert admin PaymentModal to shared useTwoFactorCodeForSavedCard composable (verification round FAIL)

2026-08-22 00:34:50 +01:00

static

feat(frontend): ImageVariant component and WASM encoder workers

2026-06-04 01:07:00 +01:00

.env.example

Fix frontend payment flows: BookingFlow fetch loop, shared TipPayment, card icons, terms route

2026-08-22 00:34:49 +01:00

.gitignore

Initial commit. Working login, example UI with prototype and demo, connections to DB and DAV, local and prod setups.

2025-10-12 22:13:19 +01:00

.npmrc

Initial commit. Working login, example UI with prototype and demo, connections to DB and DAV, local and prod setups.

2025-10-12 22:13:19 +01:00

.prettierignore

style: exclude mapcn-svelte from prettier checks (third-party code)

2026-06-25 17:48:04 +01:00

.prettierrc

Initial commit. Working login, example UI with prototype and demo, connections to DB and DAV, local and prod setups.

2025-10-12 22:13:19 +01:00

components.json

Initial commit. Working login, example UI with prototype and demo, connections to DB and DAV, local and prod setups.

2025-10-12 22:13:19 +01:00

eslint.a11y.config.js

fix: enable eslint-plugin-svelte a11y rules and fix violations

2026-07-11 18:17:49 +01:00

eslint.config.js

Disable svelte/prefer-svelte-reactivity (SvelteDate purge rationale)

2026-08-22 00:34:49 +01:00

knip.json

fix: knip clean — delete remaining dead map files, add knip config, unexport internal types

2026-07-09 19:45:14 +01:00

package-lock.json

fix: adversarial review round — replay-rescue double-charge, discount credit, 2FA/per-IP limits, snapshot encryption, refund reconciliation, VAT, frontend parity, tests+docs

2026-08-22 00:34:50 +01:00

package.json

fix: adversarial review round — replay-rescue double-charge, discount credit, 2FA/per-IP limits, snapshot encryption, refund reconciliation, VAT, frontend parity, tests+docs

2026-08-22 00:34:50 +01:00

svelte.config.js

Initial commit. Working login, example UI with prototype and demo, connections to DB and DAV, local and prod setups.

2025-10-12 22:13:19 +01:00

tailwind.config.js

feat(ui): loyalty stamp redesign and admin account restrictions

2026-06-04 01:07:43 +01:00

tsconfig.json

chore(frontend): add @types/geojson dependency

2026-06-20 16:59:51 +01:00

vite.config.ts

feat(frontend): add /gdpr page with PDF export and JSON download

2026-06-05 12:13:07 +01:00

vitest.config.ts

fix: adversarial review round — replay-rescue double-charge, discount credit, 2FA/per-IP limits, snapshot encryption, refund reconciliation, VAT, frontend parity, tests+docs

2026-08-22 00:34:50 +01:00