- Storefronts use Figtree as the default font (shop/menu, booking, book)
- Remove "Powered by Ladill" branding from the storefront header
- Fix storefront logo hiding behind the cover (logo row now relative z-10)
- Add a Share button to storefront QR downloads using the Web Share API
(native mobile share sheet for image+link; clipboard fallback)
- storefronts:import-legacy: --deactivate-source now also retires the
platform copy of already-imported (skipped) codes, no --refresh needed
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
The booking editor only had bare logo/cover inputs and no Brand Color,
while the booking landing page already renders logo_path/cover_path/
brand_color and the manager already persists them. Add the same Branding
section menu/shop use so owners can set all three.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
SVG can embed JavaScript and would run as stored XSS when served inline on a
public storefront page, and we have no SVG sanitizer. Allow only raster
formats:
- item_images validation: image rule (permits SVG) -> mimes:jpeg,jpg,png,gif,webp
- QrCodeManagerService: reject image/svg+xml / .svg(z) in brand-image and
item-image storage (defense in depth, since those only checked the image/* prefix)
- file pickers: accept raster mimes only
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
The storefront create/edit/manage UI and the public storefront page were
give's church-donation flow relabeled. Replace with genuine merchant
storefronts, reusing the QR-core manager + validator (which already build
sections/services content):
- Merchant create: type picker (shop/menu/booking) + per-type editors in a
shared partial (products/menu items with prices; bookable services with
days/hours). x-if per type so inputs never collide across types.
- StorefrontController store/update/create now delegate to QrCodeManagerService
for all three types (was hardcoded church org_type/denomination/collection).
- Storefront show = QR preview + download + live toggle + delete + full editor.
- QrCodeManagerService: shop/menu/booking are free (no QR-wallet gate); drop
the duplicate church TYPE_SHOP arm in hasContentChanges.
- Public: new storefront catalog+cart view for shop/menu (posts items[] to the
existing order/Pay flow); route shop+menu to it. Booking already had a real
public page; church TYPE_SHOP landing branch retired.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
The give→merchant transform left several independent breakages that 500'd
once a logged-in user hit the pages:
- /storefronts/{create,show,update,...} were wired to Qr\QrCodeController,
which renders events-lineage qr-codes.* views referencing 14 undefined
events.* routes. Rewire to StorefrontController (clean storefronts.* views).
- storefronts/show.blade.php @include('give.storefronts.partials.*') — the
view dir was renamed give→merchant but the include namespace wasn't.
- /payouts + /search queried qr_sale_orders.*_minor; migration created *_ghs.
- Remove dead GiveDonation model (nonexistent give_donations table).
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
