4 Commits

Author	SHA1	Message	Date
c0mrade	8e0b63bac8	feat(a11y): cross-platform hardening + modal focus-trap from impeccable audit ... Responsive / viewport: - add .min-h-viewport / .h-viewport utilities (100dvh + Telegram --tg-viewport-stable-height) - migrate min-h-screen / h-screen / 100vh across 18 files - reveal hover-only controls on focus-within + touch (desktop nav, admin settings) - grid breakpoints (TopUpAmount, Contests), larger touch targets, nav aria-labels Platform routing (Telegram WebView correctness): - clipboard -> copyToClipboard util with execCommand fallback (10 files) - window.open -> openTelegramLink / openLink (Profile, Referral, ChannelSubscriptionScreen) - window.confirm -> useNativeDialog (admin pages); PromoOffersSection -> useDestructiveConfirm - window.prompt -> usePrompt / PromptDialogHost (TipTap link editors) - ESLint no-restricted-properties guard against regressions (adapters/clipboard util exempt) Modal accessibility: - new useFocusTrap hook (focus trap, Esc, scroll lock, focus restore) - role=dialog / aria-modal / focus-trap: Polls, SuccessNotificationModal, AdminPolicies, AdminPromoGroups, AdminCampaigns, BroadcastPreview (Telegram + Email) - new global usePrompt store + PromptDialogHost	2026-05-25 23:16:07 +03:00
c0mrade	62188b8d2e	fix: resolve all 14 ESLint warnings across the codebase ... - Add varsIgnorePattern to no-unused-vars for destructuring patterns - Fix all react-hooks/exhaustive-deps by adding missing dependencies - Refactor useAnimatedNumber to use ref instead of stale state closure - Wrap handleLinkResult in useCallback for stable deps - Extract OAuth utilities from OAuthCallback.tsx to utils/oauth.ts - Extract background config utilities to utils/backgroundConfig.ts - Remove unused catch parameter in GiftSubscription	2026-03-13 20:19:09 +03:00
Fringg	2fc0759f89	feat: account merge flow — merge redirect, error handling, server-complete linking ... - Добавлен merge_required + merge_token redirect в OAuthCallback и LinkTelegramCallback - Server-complete OAuth linking для Mini App (внешний браузер) - getErrorDetail: единый экстрактор ошибок из axios response - LinkTelegramCallback: типизированный catch с getErrorDetail - Удалён мёртвый экспорт getAndClearOAuthState - CSRF валидация для Telegram и OAuth linking flows - Типы ServerCompleteResponse, LinkCallbackResponse	2026-03-05 05:25:50 +03:00
Fringg	a6fabb1d9d	feat: add Telegram account linking UI with CSRF protection ... - TelegramLinkWidget component with Login Widget for browser users - One-click initData linking for Mini App users - LinkTelegramCallback page with CSRF state validation - URL credential clearing via history.replaceState - Merge flow support with replace navigation - i18n keys for all 4 locales (ru, en, zh, fa)	2026-03-04 17:03:48 +03:00