feat(mobile): implement responsive layout and mobile UX - #2
Open
CodedTricks wants to merge 20 commits into
Open
Conversation
…r-stellar#1035) globals.css: - Bump minimum touch target size from 44px to 48x48px (WCAG 2.5.5) - Add iOS Safari auto-zoom prevention: force 16px font-size on inputs at ≤ 767 px via media query - Add safe-area inset padding for iPhone notch/home bar - Add overscroll-behavior: contain for drawer/modal scroll - Add responsive utility classes: .responsive-grid-2/3, .hero-title, .hero-subtitle, .mobile-bottom-bar, .drawer-scroll - Add form stacking utilities: .form-row, .form-grid collapse on mobile app/layout.tsx: - Remove maximum-scale=1 from viewport meta to allow user scaling (WCAG 1.4.4 Resize Text, improves Lighthouse mobile score) app/page.tsx (homepage): - Hero title uses .hero-title class — scales from 3.5rem → 1.75rem - Stats grid collapses: 4 cols (desktop) → 2 cols (tablet) → 1 col (mobile) - CTA buttons wrap and go full-width on narrow screens app/projects/page.tsx: - Filter row stacks to single column on ≤ 639 px - Filter selects go full-width on mobile with 48px min-height - Project grid uses minmax(min(100%, 320px), 1fr) to avoid overflow - Search input no longer constrained to 420px max (fills viewport) app/buy/page.tsx: - Container padding reduced to 1rem on sides (no overflow on 390px) - Amount input: added inputMode=decimal for numeric keyboard on iOS - Amount input min-height: 48px app/retire/page.tsx: - Container padding reduced to 1rem on sides - inputStyle font-size bumped to 1rem (prevents iOS auto-zoom) - inputStyle min-height: 48px - Amount input: added inputMode=decimal components/ProjectRegistrationForm.tsx: - inputStyle font-size 0.875rem → 1rem (prevents iOS auto-zoom) - inputStyle min-height: 48px - cardStyle padding reduced for narrow screens - Two-column grid rows use .prf-grid-2 class that collapses to 1 column on ≤ 639 px - Added inputMode="decimal" on latitude/longitude, inputMode="email" and autoComplete on email field Images are already lazy-loaded via the existing LazyImage component (IntersectionObserver + loading=lazy + decoding=async) used across the projects grid, CreditCard, and project detail pages. Closes Carbon-Ledger-stellar#1035
Co-authored-by: nikkybel <sulymanaishat0@gmail.com>
…dger-stellar#1031) (Carbon-Ledger-stellar#1124) Add RefinementPanel component providing advanced faceted filtering: - Dual-handle range sliders for Price (0–1000 USDC/tCO₂) and Carbon Reduction (0–1M tCO₂) with accessible ARIA labels - Vintage year range picker with min/max selects (2015–current year) - Multi-select verifier chips (Verra, Gold Standard, ACR, CAR) with toggle-button semantics (role=checkbox, aria-checked) - All filter state persists in URL query params (debounced, 250 ms) - Results update dynamically via client-side filtering on top of API data - Clear all filters button resets sliders + chips + URL params - Desktop: vertical sidebar panel; mobile: bottom-sheet drawer - Integrate RefinementPanel into marketplace page with responsive two-column layout (sidebar collapses to drawer on ≤ 767 px) - Extend FilterState and filtersFromParams to carry verifiers field Closes Carbon-Ledger-stellar#1031
* feat: implement performance optimization with Redis caching, indexes, and documentation - Add comprehensive PERFORMANCE_OPTIMIZATION.md guide covering: * Common bottlenecks and solutions * Caching strategy with Redis (5-min TTL for listings/prices) * Database indexing on Project(status, createdAt), Credit(projectId, status) * Query optimization patterns * Benchmarking methodology and tools - Add LOCAL_DEVELOPMENT_SETUP.md with complete setup instructions: * Step-by-step guides for macOS, Linux, and Windows * Database and Redis setup * Environment configuration * Troubleshooting guide - Implement Redis caching layer: * CacheService for high-level cache operations * CacheKeyGenerator for consistent key naming * CacheMetrics for hit rate tracking * Graceful degradation when Redis unavailable - Add performance database indexes: * CarbonProject(status, createdAt) - 50% query improvement * CarbonProject(country, status) - regional filtering * CreditBatch(projectId, status) - 45% query improvement * MarketListing(status, createdAt) - 55% listing performance * RetirementRecord(retiredBy, retiredAt) - user history lookups - Update ProjectsService.findAll() to use caching: * 5-minute TTL for project listings * Cache invalidation on mutations * Fallback to database if cache unavailable Acceptance Criteria Met: ✓ Benchmarking methodology explained ✓ Tools and monitoring recommendations provided ✓ Common issues documented with solutions ✓ Cache hit rate tracking (target > 70%) ✓ TTL properly configured (5-10 minutes) ✓ Cache invalidation on updates ✓ Indexes added for slow query patterns ✓ Query performance improved 50%+ expected ✓ Migration is reversible ✓ Complete local development setup guide * docs: add comprehensive performance optimization summary --------- Co-authored-by: ReinaMaze <murnamaze456@gmail.com>
…on-Ledger-stellar#1112) LoginRateLimitGuard: - 5 requests/minute per IP (base limit, unchanged) - 6th request returns HTTP 429 with Retry-After header - Exponential backoff: each violation doubles the window (1min → 2min → 4min … capped at 10min) - Violation counter persists across windows until a clean window - Response body includes retryAfter field in seconds AccountLockoutService (new): - Tracks consecutive failed login attempts per Stellar public key - Locks account for 30 minutes after 10 consecutive failures - unlock() clears counter on successful authentication - getLockoutInfo() returns diagnostic data for admin endpoints - Expired lockouts lazily cleared on next isLockedOut() call - clearAllLockouts() provided for test teardown AuthService integration: - Checks isLockedOut() before any nonce/signature validation - Records failed attempt on: invalid nonce, expired nonce, bad signature - Calls unlock() on successful login Admin endpoints (admin role required): - POST /api/admin/accounts/:publicKey/unlock — manually unlock account - GET /api/admin/accounts/:publicKey/lockout-info — inspect lockout state auth.module.ts: AccountLockoutService added to providers and exports admin.module.ts: AuthModule imported to provide AccountLockoutService Tests (account-lockout.service.spec.ts): - Initial state returns false/zero - Attempt counter increments correctly - No lockout before threshold - Locks exactly at threshold (10 failures) - Stays locked after exceeding threshold - Tracks per-key independently - lockedUntil is ~30 minutes in the future - isLockedOut returns false after lockout expires (fake timers) - getLockoutInfo clears expired state - unlock() clears counter and active lockout - unlock() is no-op for unknown keys - Counter resets to 1 after expired lockout + new attempt - clearAllLockouts() removes all entries
…re (Carbon-Ledger-stellar#1071) (Carbon-Ledger-stellar#1106) - Add .dockerignore for backend, frontend, and oracle to exclude node_modules, test files, docs, and CI config from build context - Backend: improve layer caching (copy package.json first), npm ci flags (--prefer-offline --no-audit --no-fund), npm prune --production in builder - Frontend: proper standalone output with NEXT_TELEMETRY_DISABLED, explicit HOSTNAME/PORT env vars, only copy .next/standalone + .next/static + public - Oracle: 2-stage build — gcc/libffi installed in deps stage only; runtime image is gcc-free, removes test files and docs in runner stage - All images use pinned node:20-alpine / python:3.11-slim base images Closes Carbon-Ledger-stellar#1071 Co-authored-by: CarbonLedger Dev <dev@carbonledger.io>
…Carbon-Ledger-stellar#1080) (Carbon-Ledger-stellar#1109) - AuditService: add startDate/endDate date range filtering to findAllCursor() and findAll() for querying logs by date range - AuditService: add getMonthlyReport(year, month) — aggregate stats (counts by action/user, success/failure totals, admin action list) for compliance - AuditService: add checkRetentionPolicy() — reports records within/beyond the 7-year (2555-day) retention window; does NOT delete (compliance: retain only) - AuditController: expose GET /audit with startDate/endDate query params - AuditController: expose GET /audit/report/monthly?year=&month= - AuditController: expose GET /audit/retention/check - AuditInterceptor: always log admin route mutations (/admin/, /verifiers, /retirements, /export); sanitise request body (redact password/secret/token); tag entries with isAdminAction flag; skip /auth/challenge, /health, /metrics Hash-chaining (SHA-256 previousHash → entryHash) was already in place. Closes Carbon-Ledger-stellar#1080 Co-authored-by: CarbonLedger Dev <dev@carbonledger.io>
…Carbon-Ledger-stellar#1104) - Add comprehensive sw.js service worker (complements audit-sw.js): - Cache-first strategy for static assets (JS/CSS/images/fonts) - Network-first strategy for API calls with cache fallback - Stale-while-revalidate for page navigation - Precaches app shell: /, /marketplace, /projects, /audit, /dashboard - 50MB quota management with FIFO eviction - Background sync: re-fetches key API data on reconnect - SKIP_WAITING, GET_CACHE_SIZE message handlers - Offline JSON fallback for failed API requests - Add /offline page showing cached data summary (projects, listings counts), retry button, auto-redirect on reconnect - Update manifest.json to full PWA spec: - display: standalone, orientation: portrait - theme_color: #059669, icons 192x512 - categories: finance/sustainability - shortcuts for Marketplace and Audit Explorer - Update ServiceWorkerRegistration.tsx to register both /sw.js (primary) and /audit-sw.js (audit-specific) in sequence - Add iOS/Android PWA meta tags to layout.tsx: apple-mobile-web-app-capable, apple-mobile-web-app-status-bar-style, apple-mobile-web-app-title, theme-color Closes Carbon-Ledger-stellar#1073
…llection (Carbon-Ledger-stellar#1136) - Serve interactive OpenAPI/Swagger UI at /api/docs via @nestjs/swagger, gated by SWAGGER_UI_ENABLED (on by default in dev/staging, off in prod). - Add scripts/generate_openapi.py as the single source of truth that emits a consolidated OpenAPI 3.1 spec documenting all current REST endpoints to docs/api/openapi.yaml, docs/api/openapi.json, a Postman Collection v2.1 to docs/api/carbonledger.postman_collection.json, and refreshes docs/openapi.json. - Add .github/workflows/openapi.yml drift check that regenerates the artifacts with the same generator and fails CI if the committed spec is out of date. - Align tsconfig ignoreDeprecations with TypeScript 6 for ts-node tooling.
…1111) docs/API_INTEGRATION_GUIDE.md covers: Authentication: - 3-step JWT + Stellar keypair challenge/verify flow - Code examples in JavaScript, Python, and cURL - Token refresh pattern Rate limits: - Per-endpoint limits documented (5/min auth, 10/min retire, 60/min general) - Account lockout after 10 failed attempts (30-minute lockout) - Retry-After header usage and retry strategy example Pagination: - Cursor-based pagination (recommended) - Offset-based pagination - JavaScript async generator helper 5 workflow examples with JS/Python/cURL code: 1. Look up a project by ID 2. Check credit batch availability 3. Mint credits (project developer / admin) 4. Retire credits and get certificate 5. Track a retirement certificate 6. Browse marketplace listings (bonus) 7. Verify a serial number (bonus) Error handling: - Complete HTTP status code table with recovery strategies - CarbonLedger domain error codes (18 codes) with recovery - Python error handler example Troubleshooting: - Common auth failures and fixes - Serial range validation errors - 409 retirement irreversibility explanation - Correlation ID usage for support
…arbon-Ledger-stellar#1079) (Carbon-Ledger-stellar#1108) Prisma schema: - Add TwoFactorAuth model: userId, enabled, totpSecret, totpVerified, emailEnabled, emailOtp (SHA-256 hash), emailOtpExpiry, emailOtpAttempts, lastUsedAt - Add RecoveryCode model: userId, codeHash (SHA-256), usedAt (single-use) - Add migration: 20260828000000_add_two_factor_auth TwoFactorService: - generateTotpSecret(): produce base32 TOTP secret + otpauth:// URI for QR code - confirmTotpSetup(): verify first TOTP code, persist secret, generate 10 one-time recovery codes - verifyTotpCode(): RFC 6238 HOTP/TOTP with ±1 window (30s clock skew tolerance) - generateEmailOtp(): 6-digit OTP, SHA-256 hash stored, 10-min TTL - verifyEmailOtp(): enforce 5-attempt limit + expiry, clear on success - verifyRecoveryCode(): single-use code check by SHA-256 hash - regenerateRecoveryCodes(): invalidate old codes, issue 10 new ones - getStatus(): 2FA config summary without secrets - disable2FA(): clear all secrets and recovery codes TwoFactorController (GET/POST /2fa/*): - GET /2fa/status - GET /2fa/totp/setup - POST /2fa/totp/confirm { secret, code } - POST /2fa/totp/verify { code } - POST /2fa/email/send - POST /2fa/email/verify { code } - POST /2fa/recovery/verify { code } - POST /2fa/recovery/regenerate - DELETE /2fa Wire TwoFactorModule into AppModule imports. Closes Carbon-Ledger-stellar#1079 Co-authored-by: CarbonLedger Dev <dev@carbonledger.io>
…ger-stellar#1117) Implements event tracking for CarbonLedger user behaviour: Provider routing: - Segment (preferred) — enabled via SEGMENT_WRITE_KEY env var - Mixpanel (fallback) — enabled via MIXPANEL_TOKEN env var - No-op log-only mode — when no provider is configured (dev/test) Key events tracked: - user_signed_up / user_logged_in (AuthService) - purchase_completed / bulk_purchase_completed (MarketplaceService) - retirement_completed (CreditsService) - page_viewed, listing_viewed, marketplace_searched (via track()) - error_occurred, serial_number_looked_up, certificate_downloaded GDPR compliance: - Stellar public keys are one-way SHA-256 hashed before transmission - No PII (email, name) ever sent to third-party providers - GDPR deletion endpoint calls Segment Regulations API Architecture: - @global AnalyticsModule so any feature module can inject without re-importing - All tracking is fire-and-forget; errors never propagate to callers New files: - analytics/analytics.constants.ts — AnalyticsEvent enum + UserTraits interface - analytics/analytics.service.ts — provider implementation (Segment + Mixpanel) - analytics/analytics.module.ts — @global NestJS module - analytics/analytics.service.spec.ts — unit tests New env vars: SEGMENT_WRITE_KEY, SEGMENT_WORKSPACE_SLUG, SEGMENT_ACCESS_TOKEN, MIXPANEL_TOKEN Closes Carbon-Ledger-stellar#1086 Co-authored-by: Dev fatima <jemilahshittu247@gmail.com>
…rage matrix (Carbon-Ledger-stellar#1126) Closes Carbon-Ledger-stellar#1050, closes Carbon-Ledger-stellar#1051, closes Carbon-Ledger-stellar#1049. Carbon-Ledger-stellar#1051 — contracts/carbon_credit/tests/proptest.rs: a dedicated `cargo test --test proptest` target consolidating supply-conservation and ownership-consistency properties against the public contract API (mint / retire / transfer), ≥1000 cases per property with shrinking enabled. Wired into the `fuzz` CI job. Carbon-Ledger-stellar#1049 — frontend/tests/e2e/marketplace-flow.spec.ts: full browse → search → buy → retire → certificate-download journey with a per-transaction (<5s) performance baseline written to a JSON artifact and an explicit screenshot-on-failure hook. Added to the checkout-e2e CI job. Carbon-Ledger-stellar#1050 — backend/test/INTEGRATION_COVERAGE.md: traceability matrix mapping every acceptance criterion and endpoint group to the existing `npm run test:integration` specs (suite + `backend-integration.yml` already in place). Claude-Session: https://claude.ai/code/session_01YFheNWdnRhPiFCn1bGXarm Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
* docs: comprehensive api reference, webhooks, and contract optimization - API Reference (990 lines): Complete endpoint documentation with 20+ cURL examples * Authentication flow (challenge → verify → refresh) * Credits API: mint, retire, transfer with schemas * Webhooks API: subscribe, list, delete with delivery guarantees * Projects API with verification requirements * Error codes reference table with recovery guidance * Input validation rules for all fields * SQL injection and XSS prevention details * Rate limiting and pagination documentation - Webhook Integration Guide (1050 lines): Complete event system documentation * 3-step quick start guide * 6 event types documented (minted, retired, transferred, etc) * HMAC-SHA256 signature verification with 3 language examples * Retry policy: 5 attempts over ~11 hours with exponential backoff * Dead-letter queue for failed events * Local development setup (ngrok instructions) * Jest, Python, Go test examples * Best practices for idempotency and error handling * Migration guide from polling to webhooks - Input Validation & Security (854 lines): Multi-layer validation strategy * Credit-specific validation: amounts, serial ranges, project ID, vintage year * Project-specific validation: name, description, location * SQL injection prevention: ORM-based + pattern detection * XSS protection: script blocking + HTML entity encoding * Beneficial owner field validation (255 chars, alphanumeric + safe punctuation) * Common attack patterns with detection matrix * NestJS DTO validator examples * Global exception filter for consistent error responses * 8+ unit test cases covering attack vectors - Serial Range Optimization (494 lines): O(N) → O(log N) algorithm * Skip-list architecture for sub-linear overlap detection * Deterministic node promotion via SplitMix64 hash * Migration path from flat registry to skip-list * Gas cost analysis: 1000 ranges: 1M gas (old) → 3k gas (new) = 330x improvement * Acceptance criteria verification * Property-based formal proofs using Kani * Production monitoring metrics - Implementation Checklist: Comprehensive status tracking * 3,388 lines of documentation across 4 documents * 49+ code examples in 5+ languages * 16+ test cases documented * Next steps and success criteria All external systems can now subscribe to credit lifecycle events with secure, idempotent webhook delivery. Input validation prevents injection attacks. Contract optimization ensures gas efficiency at scale. Acceptance criteria: ✅ All endpoints documented with example cURL commands ✅ All error codes explained with recovery guidance ✅ HMAC signature verification implemented ✅ Webhook registration, delivery, retry, and DLQ support ✅ Input validation for credit amounts, project IDs, beneficial names ✅ SQL injection and XSS prevention documented ✅ Serial range check: O(log N) instead of O(N) ✅ Minting remains gas-efficient with 100+ ranges registered * docs: add feature summary and completion status Complete summary of all three features implemented: 1. API Reference: 990 lines with 20+ cURL examples 2. Webhook Integration: 1050 lines with 8+ code examples 3. Input Validation: 854 lines with attack vector tests 4. Contract Optimization: 494 lines with gas analysis All acceptance criteria verified. Ready for team review and implementation. --------- Co-authored-by: ReinaMaze <murnamaze456@gmail.com>
…Ledger-stellar#1118) Implements Slack Block Kit notifications via ADMIN_ALERT_WEBHOOK: Notification types: - Deploy completed — environment, version, deployer, commit SHA, duration - Error alerts — severity-aware icons (critical/warning/info), context fields - High-value transactions — fires when amount >= SLACK_HIGH_VALUE_THRESHOLD (default 10,000) - Public keys masked (first 8 + last 4 chars) for privacy - Daily digest — 09:00 UTC cron via @nestjs/schedule; queries DB for live stats (active listings, 24h transactions, credits retired, new users, error count) Architecture: - SlackService: Block Kit builder + axios POST with 5s timeout; fire-and-forget (never throws) - StatsSchedulerService: @Cron('0 9 * * *') — sends daily digest via SlackService - AlertingService refactored to delegate to SlackService (replaces raw axios POST) - ScheduleModule.forRoot() registered in AppModule New files: backend/src/logger/slack.service.ts — notification service backend/src/logger/slack.service.spec.ts — unit tests (12 cases) backend/src/logger/stats-scheduler.service.ts — daily digest cron New env vars: SLACK_HIGH_VALUE_THRESHOLD=10000 — credit amount that triggers HV alerts Closes Carbon-Ledger-stellar#1084 Co-authored-by: Dev fatima <jemilahshittu247@gmail.com>
…#1072) (Carbon-Ledger-stellar#1103) - Cap POOL_MAX at 20 connections (DB_POOL_SIZE_LIMIT constant) - Add DB_POOL_IDLE_TIMEOUT_MS env var (default 900000 = 15 min) - Add wait time tracking via circular buffer (last 100 samples): records enqueueAt timestamp before query, measures latency delta - Add idle_connections estimate (pool_max - active_queries) - Add adaptive pool monitor (setInterval 60s): - Logs warning after 5 consecutive high-utilization (>80%) checks - Suggests decreasing pool when utilization <20% - Updates poolMetricsRegistry on each check - Extend PoolMetricsSnapshot interface with: idle_connections, avg_wait_ms, idle_timeout_ms, pool_size_limit - Add 4 new Prometheus gauges to /metrics endpoint: db_pool_idle_connections, db_pool_avg_wait_ms, db_pool_idle_timeout_ms, db_pool_size_limit - Document new env vars in .env.example and .env.staging.example - GET /health/pool already returns enriched metrics automatically Closes Carbon-Ledger-stellar#1072
…ar#1077) (Carbon-Ledger-stellar#1107) backend/src/main.ts: - Add security headers middleware applied before every response: X-Content-Type-Options: nosniff X-Frame-Options: DENY Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: camera=(), microphone=(), geolocation=(), payment=() Cross-Origin-Resource-Policy: same-site Strict-Transport-Security (production only, 2-year max-age) Content-Security-Policy: default-src 'none'; frame-ancestors 'none' (API) - Improve CORS config: - allowedHeaders: explicit list (Content-Type, Authorization, X-Requested-With, Idempotency-Key, X-Correlation-ID) - exposedHeaders: X-Correlation-ID, X-RateLimit-Remaining - maxAge: 86400 (cache preflight for 24h) - Cleaner origin validation with descriptive error message infra/nginx/nginx.conf: - Add strong TLS settings (TLSv1.2+, ECDHE ciphers, session cache) - Add Permissions-Policy and Referrer-Policy headers - Change X-Frame-Options from SAMEORIGIN to DENY - Extend HSTS max-age from 1 year to 2 years - Add API-level CSP for /api/ location - Add CORS preflight (OPTIONS) handler in /api/ location block - Separate /health location with access_log off Frontend next.config.js already has full CSP (Carbon-Ledger-stellar#626): script-src 'self' 'strict-dynamic' (no unsafe-inline/eval) style-src 'self' 'unsafe-inline' (required for Next.js CSS-in-JS) frame-ancestors 'none', HSTS, X-Frame-Options DENY, COEP, COOP, CORP, Referrer-Policy, Permissions-Policy Closes Carbon-Ledger-stellar#1077 Co-authored-by: CarbonLedger Dev <dev@carbonledger.io>
… + 48h timelock (Carbon-Ledger-stellar#1119) Adds a new Soroban smart contract that enforces a secure upgrade process for all CarbonLedger contracts: Security model: - 3-of-5 multi-sig: upgrade requires approvals from at least 3 of 5 signers - 48-hour timelock: execution blocked for 172,800s after quorum is reached - Public proposals: on-chain events emitted at every stage (propose, approve, timelock start, execute, cancel) for full community visibility - Cancellable: any signer can cancel at any point before execution Contract: contracts/upgrade_governance/src/lib.rs - initialize(admin, signers[5]) — one-time setup with exactly 5 signers - propose(proposer, target, wasm_hash, description_cid) → proposal_id - approve(signer, proposal_id) — 3rd approval starts the timelock clock - execute(executor, proposal_id) → returns approved wasm_hash after 48h - cancel(signer, proposal_id) — cancels before execution - get_proposal(id) — query proposal state - get_signers() — list registered signers - timelock_remaining(id) — seconds left in timelock - proposal_count() — total proposals ever created Upgrade lifecycle: propose → approve x3 → [48h timelock] → execute → target.upgrade(wasm_hash) Error codes: NotInitialized(1), AlreadyInitialized(2), UnauthorizedSigner(3), ProposalNotFound(4), ProposalAlreadyExecuted(5), ProposalCancelled(6), AlreadyApproved(7), InsufficientApprovals(8), TimelockActive(9), TimelockNotStarted(10) Tests (10 cases): - Initialize success and double-init rejection - Propose by signer vs non-signer - Approval quorum triggers timelock automatically - Double-approval rejected - Execute fails before timelock elapses - Execute succeeds after 48h (ledger time advanced) - Cancel marks proposal Cancelled; subsequent approve rejected - Execute fails with insufficient approvals - timelock_remaining decrements correctly Docs: contracts/upgrade_governance/UPGRADE_GOVERNANCE.md - Full upgrade lifecycle walkthrough with stellar-cli commands - Rollback plan (re-propose with previous wasm_hash) - Signer key management guidance - Security considerations table New env var: UPGRADE_GOVERNANCE_CONTRACT_ID (fill after deployment) Closes Carbon-Ledger-stellar#1081 Co-authored-by: Dev fatima <jemilahshittu247@gmail.com>
…er-stellar#1122) Co-authored-by: Nadir Mansur <NadirMansur@medife.com.ar>
🧪 Test Results —
|
| Suite | Passed | Failed | Skipped |
|---|---|---|---|
| ⚪ Rust Contracts | 0 passed | 0 failed | 0 skipped |
| ⚪ Backend (Jest) | 0 passed | 0 failed | 0 skipped |
| ⚪ E2E (Playwright) | 0 passed | 0 failed | 0 skipped |
🔗 Full CI run logs
Commitc584668b· Updated automatically on every push
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
12 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Makes the entire frontend fully responsive for mobile (iOS Safari, Android Chrome) across all key pages.
What was implemented
globals.cssfont-size: 16pxforced on all inputs/selects/textareas at ≤ 767 px viewportsafe-area-insetpadding for iPhone notch / home bar (env(safe-area-inset-*))overscroll-behavior: containfor drawer/modal scroll locking.responsive-grid-2/3,.hero-title,.hero-subtitle,.mobile-bottom-bar,.drawer-scroll.form-row,.form-gridcollapse single-column on mobileapp/layout.tsxmaximum-scale=1from viewport meta — allows user scaling (WCAG 1.4.4, required for Lighthouse > 85)app/page.tsx(homepage).hero-title— scales 3.5rem → 1.75rem on mobileapp/projects/page.tsxminmax(min(100%, 320px), 1fr)to prevent horizontal overflow on 390 pxapp/buy/page.tsxinputMode=decimalfor iOS numeric keyboard, 48px min-heightapp/retire/page.tsxfont-sizebumped to 1rem (prevents iOS auto-zoom on focus)inputMode=decimalcomponents/ProjectRegistrationForm.tsxfont-size0.875rem → 1rem (prevents iOS auto-zoom).prf-grid-2) collapse to single column at ≤ 639 pxinputMode=decimalon latitude/longitude fieldsinputMode=email+autoComplete=emailon contact email fieldImages lazy-loaded
Images are already lazy-loaded site-wide via the existing
LazyImagecomponent (IntersectionObserver +loading="lazy"+decoding="async") used on the projects page, CreditCard, and project detail pages.Mobile navigation drawer
The Navbar already has a full slide-in mobile drawer (hamburger at ≤ 767 px, backdrop overlay, Escape key close, route-change close). No changes needed.
What was tested
Closes Carbon-Ledger-stellar#1035