2 commits

Author	SHA1	Message	Date
Till JS	e00e6f5a08	refactor(shared-branding): derive APP_URLS from APP_ICONS ... The hand-maintained APP_URLS map kept silently drifting from the AppIconId union — most recently the new 'who' entry was missing, which crashed getPillAppItems at runtime with "Cannot read properties of undefined (reading 'prod')". Drift was already flagged by the type system but the error was lost in the existing svelte-check noise. APP_URLS is now generated at module load by walking Object.keys of APP_ICONS (the source of AppIconId), so every id is guaranteed a URL. A small APP_URL_OVERRIDES map carries the handful of apps that don't follow the unified mana.how/{id} pattern (root path for the unified shell, subdomains for standalone apps like arcade). Adds two integrity tests as defense-in-depth: one asserts every MANA_APPS id has a matching APP_ICONS icon, the other asserts every AppIconId resolves to a non-empty dev+prod URL. Both would have caught the 'who' regression on its own without needing svelte-check. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-09 15:14:52 +02:00
Till JS	4fb851947e	test(auth): add 68 unit tests for auth-ui, shared-auth, and shared-branding ... - userAgent utils: parseUserAgent, getDeviceType, formatUserAgent (17 tests) - guestWelcome utils: shouldShow, markSeen, reset (8 tests) - jwtUtils: decodeToken, isTokenValid, getUserFromToken, B2B (27 tests) - mana-apps: hasAppAccess, getTierLevel, getAccessibleManaApps (16 tests) Also fixes iOS detection bug in userAgent parser (iPhone UA contains "Mac OS X" — mobile check must come before desktop OS check). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-31 16:35:16 +02:00