popertots a8bf24ee23 fix: dup/modularisation findings — account gift-card 2FA gate, single-source 2FA predicate, login store delegation ...

Restart-loop dup/mod review findings:
- Account page gift-card buy flow now passes the 2FA verification-code gate end-to-end: TwoFactorCodeInput + Request-a-new-code wired for saved-card/save-card charges, verification_code in the /api/user/giftcards/buy body, 403/429 gate-failure self-heal, buy button gated on missing code (backend BuyGiftCard gate at giftcards.go:1471 already required it — the frontend never sent it)
- Removed dead requires2FACodeForSavedCard export from square.ts (zero consumers; all surfaces use authStore.savedCardChargeRequires2FACode) + its test; auth store getter documented as THE single source of truth
- Login page now delegates token persistence to authStore.setToken instead of direct localStorage writes (drift-risk closed; setToken persists both tokens identically so the full-reload init still works)
- Pence comment corrected (GBP minor unit)
- account/+page.svelte:84+6; square.ts -16; square.test.ts -26; auth.svelte.ts comment; login/+page.svelte delegation

Frontend 72/72 tests + build clean; backend builds.

2026-08-22 00:34:50 +01:00

..

src

fix: dup/modularisation findings — account gift-card 2FA gate, single-source 2FA predicate, login store delegation

2026-08-22 00:34:50 +01:00

static

feat(frontend): ImageVariant component and WASM encoder workers

2026-06-04 01:07:00 +01:00

.env.example

Fix frontend payment flows: BookingFlow fetch loop, shared TipPayment, card icons, terms route

2026-08-22 00:34:49 +01:00

.gitignore

Initial commit. Working login, example UI with prototype and demo, connections to DB and DAV, local and prod setups.

2025-10-12 22:13:19 +01:00

.npmrc

Initial commit. Working login, example UI with prototype and demo, connections to DB and DAV, local and prod setups.

2025-10-12 22:13:19 +01:00

.prettierignore

style: exclude mapcn-svelte from prettier checks (third-party code)

2026-06-25 17:48:04 +01:00

.prettierrc

Initial commit. Working login, example UI with prototype and demo, connections to DB and DAV, local and prod setups.

2025-10-12 22:13:19 +01:00

components.json

Initial commit. Working login, example UI with prototype and demo, connections to DB and DAV, local and prod setups.

2025-10-12 22:13:19 +01:00

eslint.a11y.config.js

fix: enable eslint-plugin-svelte a11y rules and fix violations

2026-07-11 18:17:49 +01:00

eslint.config.js

Disable svelte/prefer-svelte-reactivity (SvelteDate purge rationale)

2026-08-22 00:34:49 +01:00

knip.json

fix: knip clean — delete remaining dead map files, add knip config, unexport internal types

2026-07-09 19:45:14 +01:00

package-lock.json

fix: adversarial review round — replay-rescue double-charge, discount credit, 2FA/per-IP limits, snapshot encryption, refund reconciliation, VAT, frontend parity, tests+docs

2026-08-22 00:34:50 +01:00

package.json

fix: adversarial review round — replay-rescue double-charge, discount credit, 2FA/per-IP limits, snapshot encryption, refund reconciliation, VAT, frontend parity, tests+docs

2026-08-22 00:34:50 +01:00

svelte.config.js

Initial commit. Working login, example UI with prototype and demo, connections to DB and DAV, local and prod setups.

2025-10-12 22:13:19 +01:00

tailwind.config.js

feat(ui): loyalty stamp redesign and admin account restrictions

2026-06-04 01:07:43 +01:00

tsconfig.json

chore(frontend): add @types/geojson dependency

2026-06-20 16:59:51 +01:00

vite.config.ts

feat(frontend): add /gdpr page with PDF export and JSON download

2026-06-05 12:13:07 +01:00

vitest.config.ts

fix: adversarial review round — replay-rescue double-charge, discount credit, 2FA/per-IP limits, snapshot encryption, refund reconciliation, VAT, frontend parity, tests+docs

2026-08-22 00:34:50 +01:00