popertots c4c65d9dd8 feat: proactive saved-card SCA — challenge runs BEFORE the first charge, never a naked ccof attempt ...

Square's card.tokenize(verificationDetails, squareCardId) determines the SCA
requirement UP FRONT and returns a fresh verification_token (or an explicit
outcome), so the customer-initiated saved-card flow now runs it before the
first charge attempt instead of the reactive 'attempt naked ccof -> 402
verification_required -> challenge + retry' round-trip.

- UserPaymentModal/TipPayment/BookingFlow/account gift-card buy: call
  runSavedCardSCAProactively before charging; 'verified' carries the token on
  attempt #1; 'sca-unavailable' demotes to the 2FA gate (the only tokenless
  path); 'challenge-cancelled'/'sca-failed' never charge and keep the pending
  row retryable with the same cached idempotency key
- The reactive re-challenge hook is removed; a defensive verification-required
  402 (stale/consumed token) surfaces VERIFICATION_REQUIRED_MESSAGE and lets
  the user retry
- Admin PaymentModal + till saved-card charges remain MERCHANT-INITIATED
  (customer_initiated=false, SCA-exempt, no liability shift) — unchanged
- square.ts comments updated (saved-card charges now carry a token proactively;
  SAVED_CARD_VERIFICATION_MESSAGE is the defensive path)
- Tests: 98 frontend tests (proactive decision coverage); build clean

2026-08-22 00:34:50 +01:00

..

src

feat: proactive saved-card SCA — challenge runs BEFORE the first charge, never a naked ccof attempt

2026-08-22 00:34:50 +01:00

static

feat(frontend): ImageVariant component and WASM encoder workers

2026-06-04 01:07:00 +01:00

.env.example

Fix frontend payment flows: BookingFlow fetch loop, shared TipPayment, card icons, terms route

2026-08-22 00:34:49 +01:00

.gitignore

Initial commit. Working login, example UI with prototype and demo, connections to DB and DAV, local and prod setups.

2025-10-12 22:13:19 +01:00

.npmrc

Initial commit. Working login, example UI with prototype and demo, connections to DB and DAV, local and prod setups.

2025-10-12 22:13:19 +01:00

.prettierignore

style: exclude mapcn-svelte from prettier checks (third-party code)

2026-06-25 17:48:04 +01:00

.prettierrc

Initial commit. Working login, example UI with prototype and demo, connections to DB and DAV, local and prod setups.

2025-10-12 22:13:19 +01:00

components.json

Initial commit. Working login, example UI with prototype and demo, connections to DB and DAV, local and prod setups.

2025-10-12 22:13:19 +01:00

eslint.a11y.config.js

fix: enable eslint-plugin-svelte a11y rules and fix violations

2026-07-11 18:17:49 +01:00

eslint.config.js

Disable svelte/prefer-svelte-reactivity (SvelteDate purge rationale)

2026-08-22 00:34:49 +01:00

knip.json

fix: knip clean — delete remaining dead map files, add knip config, unexport internal types

2026-07-09 19:45:14 +01:00

package-lock.json

fix: adversarial review round — replay-rescue double-charge, discount credit, 2FA/per-IP limits, snapshot encryption, refund reconciliation, VAT, frontend parity, tests+docs

2026-08-22 00:34:50 +01:00

package.json

fix: adversarial review round — replay-rescue double-charge, discount credit, 2FA/per-IP limits, snapshot encryption, refund reconciliation, VAT, frontend parity, tests+docs

2026-08-22 00:34:50 +01:00

svelte.config.js

Initial commit. Working login, example UI with prototype and demo, connections to DB and DAV, local and prod setups.

2025-10-12 22:13:19 +01:00

tailwind.config.js

feat(ui): loyalty stamp redesign and admin account restrictions

2026-06-04 01:07:43 +01:00

tsconfig.json

chore(frontend): add @types/geojson dependency

2026-06-20 16:59:51 +01:00

vite.config.ts

feat(frontend): add /gdpr page with PDF export and JSON download

2026-06-05 12:13:07 +01:00

vitest.config.ts

fix: adversarial review round — replay-rescue double-charge, discount credit, 2FA/per-IP limits, snapshot encryption, refund reconciliation, VAT, frontend parity, tests+docs

2026-08-22 00:34:50 +01:00