HOTE-541: Fix all warnings raised by eslint

.github/actions/init-mise/action.yaml

@@ -0,0 +1,37 @@
+---
+name: "Initialize mise"
+description: "Initialize mise"
+runs:
+  using: "composite"
+  steps:
+    - name: Configure git
+      shell: bash
+      run: |
+        echo "::group::Configure git"
+        git config --global --add safe.directory '*'
+        echo "::endgroup::"
+
+    - name: Install mise
+      uses: jdx/mise-action@v3
+      with:
+        cache: true
+        install: true
+
+    - name: Cache node_modules
+      uses: actions/cache@v5
+      with:
+        path: |
+          node_modules
+          ui/node_modules
+          lambdas/node_modules
+          tests/node_modules
+        key: node-modules-${{ runner.os }}-${{ hashFiles('**/package-lock.json') }}
+        restore-keys: |
+          node-modules-${{ runner.os }}-
+
+    - name: Install npm dependencies
+      shell: bash
+      run: |
+        echo "::group::Install npm dependencies"
+        mise run install-npm
+        echo "::endgroup::"

.github/actions/perform-pre-commit/action.yaml

@@ -4,26 +4,13 @@ description: "Perform pre-commit checks"
 runs:
   using: "composite"
   steps:
-    - name: Configure git
-      shell: bash
-      run: |
-        echo "::group::Configure git"
-        git config --global --add safe.directory '*'
-        echo "::endgroup::"
-
-    - name: Install mise
-      uses: jdx/mise-action@v3
-      with:
-        cache: true
-        install: true
-
     - name: Cache pre-commit hooks
       uses: actions/cache@v5
       with:
         path: ~/.cache/pre-commit
         key: pre-commit-${{ runner.os }}-${{ hashFiles('.pre-commit-config.yaml') }}
         restore-keys: |
-          pre-commit-${{ runner.os }}-
+          pre-commit-${{ runner.os }}
 
     - name: Install pre-commit
       shell: bash

.github/actions/run-npm-tests/action.yaml

@@ -25,20 +25,15 @@ inputs:
 runs:
   using: "composite"
   steps:
-    - name: "Setup Node.js"
-      uses: actions/setup-node@v6
-      with:
-        node-version: "${{ inputs.nodejs-version }}"
-        cache: npm
-        cache-dependency-path: ${{ inputs.working-directory }}/package-lock.json
-
     - name: "Install dependencies"
       shell: bash
-      run: npm --prefix ${{ inputs.working-directory }} ci
+      run: mise exec -- npm --prefix ${{ inputs.working-directory }} ci
 
     - name: "Run test suite"
       shell: bash
-      run: npm --prefix ${{ inputs.working-directory }} run test -- --ci
+      run: mise exec -- npm --prefix ${{ inputs.working-directory }} run test -- --ci
+      env:
+        FORCE_COLOR: true
 
     - name: "Upload test results"
       uses: actions/upload-artifact@v4

.github/workflows/stage-1-commit.yaml

@@ -99,5 +99,7 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v6
+      - name: Initialize mise
+        uses: ./.github/actions/init-mise
       - name: Run pre-commit checks
         uses: ./.github/actions/perform-pre-commit

.github/workflows/stage-2-test.yaml

@@ -41,6 +41,8 @@ jobs:
     steps:
       - name: "Checkout code"
         uses: actions/checkout@v6
+      - name: Initialize mise
+        uses: ./.github/actions/init-mise
       - name: "Run UI tests"
         uses: ./.github/actions/run-npm-tests
         with:
@@ -58,6 +60,8 @@ jobs:
     steps:
       - name: "Checkout code"
         uses: actions/checkout@v6
+      - name: Initialize mise
+        uses: ./.github/actions/init-mise
       - name: "Run Lambda tests"
         uses: ./.github/actions/run-npm-tests
         with:
@@ -78,6 +82,62 @@ jobs:
       - name: "Save the coverage check result"
         run: |
           echo "Nothing to save"
+
+  test-playwright:
+    name: "Playwright E2E tests"
+    needs: [test-unit-ui, test-unit-lambda]
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - name: "Checkout code"
+        uses: actions/checkout@v6
+      - name: "Install mise"
+        uses: jdx/mise-action@v3
+        with:
+          install: true
+          cache: true
+
+      # - name: Cache npm
+      #   uses: actions/cache@v5
+      #   with:
+      #     path: ~/.cache/pre-commit
+      #     key: pre-commit-${{ runner.os }}-${{ hashFiles('.pre-commit-config.yaml') }}
+      #     restore-keys: |
+      #       pre-commit-${{ runner.os }}-
+
+      - name: "Install project dependencies"
+        run: |
+          npm install
+      - name: "Start the application"
+        run: |
+          npm run start
+      - name: "Install dependencies"
+        working-directory: tests
+        run: npm ci
+      - name: "Install Playwright browsers"
+        working-directory: tests
+        run: npx playwright install --with-deps
+      - name: "Create credentials file"
+        working-directory: tests
+        run: |
+          cat > credentials.ts << 'EOF'
+          export const userPasswordGeneric = '${{ secrets.PLAYWRIGHT_PASSWORD }}';
+          export const OTP = '${{ secrets.PLAYWRIGHT_OTP }}';
+          EOF
+      - name: "Run Playwright tests"
+        working-directory: tests
+        run: npm test
+        env:
+          CI: true
+          # BASE_URL: ${{ vars.TEST_BASE_URL }}
+      - name: "Upload test results"
+        uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: playwright-report
+          path: tests/testResults/
+          retention-days: 30
+
   perform-static-analysis:
     name: "Perform static analysis"
     needs: [test-unit-ui, test-unit-lambda]

.gitignore

@@ -163,3 +163,4 @@ mcp.json
 /test-results/
 .next
 WorkerUser*
+junit.xml

.pre-commit-config.yaml

@@ -70,3 +70,40 @@ repos:
         language: system
         files: ^lambdas/.*\.(ts|js)$
         pass_filenames: false
+
+      - id: eslint-tests
+        name: ESLint (Tests)
+        entry: npm --prefix tests run lint -- --fix
+        language: system
+        files: ^tests/.*\.(ts|js)$
+        pass_filenames: false
+
+      # - id: typescript-check-ui
+      #   name: TypeScript (UI)
+      #   entry: npm --prefix ui run build -- --noEmit
+      #   language: system
+      #   files: ^ui/.*\.tsx?$
+      #   pass_filenames: false
+      #   # stages: [pre-push]  # Slow, run on push
+
+      # - id: typescript-check-lambdas
+      #   name: TypeScript (Lambdas)
+      #   entry: bash -c 'cd lambdas && npx tsc --noEmit'
+      #   language: system
+      #   files: ^lambdas/.*\.ts$
+      #   pass_filenames: false
+      #   # stages: [pre-push]
+
+      # - id: jest-unit-ui
+      #   name: Jest Unit Tests (UI - affected only)
+      #   entry: npm --prefix ui run test -- --bail --findRelatedTests --passWithNoTests
+      #   language: system
+      #   files: ^ui/.*\.(ts|tsx)$
+      #   # stages: [pre-push]
+
+      # - id: jest-unit-lambdas
+      #   name: Jest Unit Tests (Lambdas - affected only)
+      #   entry: bash -c 'cd lambdas && npx jest --bail --findRelatedTests --passWithNoTests'
+      #   language: system
+      #   files: ^lambdas/.*\.ts$
+      #   # stages: [pre-push]

.trivyignore

@@ -0,0 +1,5 @@
+# fast-xml-parser CVE - transitive dependency from AWS SDK
+# DoS via entity expansion in DOCTYPE - low risk for backend Lambda usage
+# Monitor: https://avd.aquasec.com/nvd/cve-2026-26278
+# https://github.com/aws/aws-sdk-js-v3/pull/7742/changes
+CVE-2026-26278

lambdas/eslint.config.mjs

@@ -25,6 +25,12 @@ export default tseslint.config(
       "no-useless-catch": "warn",
     },
   },
+  {
+    files: ["**/*.test.ts"],
+    rules: {
+      "@typescript-eslint/no-require-imports": "off", // Jest module mocking requires dynamic imports
+    },
+  },
   {
     ignores: ["dist/**", "node_modules/**", "jest/**", "*.config.*"],
   }