3 Commits

Include renames

Author	SHA1	Message	Date
Lucas BergerandClaude Opus 4.8	b6490feff4	fix(19): satisfy CI fast-checks + secret scan ... Lint (eslint --max-warnings 0): - index.ts: disable no-unsafe-argument on the type-only Context mismatch when delegating to the OIDC handler inside the local-session skip wrapper - localAuth.ts: handleLogout is sync (no await) — drop async (require-await) - devBypass.ts: disable detect-possible-timing-attacks on the public well-known dev-placeholder string compare (not a secret comparison) - remove dead code / unused bindings flagged by no-unused-vars: makeTestApp (localSession.test), makeUnauthContext + BrowserContext import (login.spec), unused memberId (admin.test), unused txSelectCount counter (me.test) - localAuthMiddleware.test / me.test: fix unused + reflow-detached eslint-disable directives Format: prettier --write across the 20 Phase-19 files that were never formatted. Secret scan (gitleaks): allowlist two false positives — the synthetic >=32-char TEST_SECRET in localSession.test.ts, and .planning/ design prose (a generic-api-key regex hit on "credential atomically, 409-equivalent"). Neither is a real secret. Verified locally: format:check, lint, typecheck, md:lint, gitleaks (no leaks), PWA 266/266, API 452/452. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-17 23:05:15 -04:00
Lucas Berger	b083cb7193	fix(19): CR-04 scope login lockout to username, add TTL auto-expiry + admin-reset unlock	2026-06-17 20:20:43 -04:00
Lucas Berger	32d0408774	feat(19-04): LoginPage (Surfaces 1-10) + App.tsx authModeQuery gate + /login route ... - Create LoginPage with BrandSlot, username/password form, show/hide toggle - Four error states: invalid credentials, rate-limit, locked, server (all per UI-SPEC) - OIDC method divider + 'Login with OIDC' button rendered only when oidcEnabled - Accessibility: role=main, h1 in BrandSlot, h2 Sign in, aria-live error banner, 44px targets - Focus management: username autofocus, Enter navigates username→password→submit - App.tsx: add authModeQuery (queryKey ['authMode'], staleTime 60s) - App.tsx: add /login standalone route (sibling of /setup, no AppNav/BottomTabBar) - App.tsx: login gate after setup gate — meQuery error + localEnabled → Navigate /login - App.tsx: OidcRedirect helper for OIDC-only mode (meQuery error + !localEnabled + oidcEnabled) - Fix App.test.tsx to include fetchAuthMode mock and hasLocalCredential in user fixture	2026-06-17 17:14:18 -04:00