From 5d90c375f7b82beb5c5b1c5d0782bd568cff1e1c Mon Sep 17 00:00:00 2001
From: boban <boban.blaskovic@gmail.com>
Date: Sat, 16 May 2026 15:50:07 +0200
Subject: [PATCH] fix(sidebar+scripts): correct CSS specificity, externalize
 test credentials
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- sidebar: revert translate to static class (-translate-x-full md:translate-x-0)
  + inline :style for mobile-open (highest specificity, beats Tailwind classes)
  Keeps transition-[width,transform] for smooth mobile slide animation
- crawl-all-routes.mjs, console-check.mjs: read TEST_EMAIL / TEST_PASSWORD
  from process.env; DB creds read from .env file; fall back to dev defaults
  — credentials no longer hardcoded as bare string literals

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 resources/views/components/sidebar.blade.php | 10 ++----
 scripts/console-check.mjs                    | 24 +++++++++++++--
 scripts/crawl-all-routes.mjs                 | 32 +++++++++++++++++---
 3 files changed, 51 insertions(+), 15 deletions(-)

diff --git a/resources/views/components/sidebar.blade.php b/resources/views/components/sidebar.blade.php
index 2836995..1f189c4 100644
--- a/resources/views/components/sidebar.blade.php
+++ b/resources/views/components/sidebar.blade.php
@@ -98,13 +98,9 @@
 
 <aside
     x-data="{ wsOpen: false }"
-    :class="{
-        'w-16': $store.sidebar.collapsed,
-        'w-60': !$store.sidebar.collapsed,
-        'translate-x-0': $store.sidebar?.open,
-        '-translate-x-full': !$store.sidebar?.open,
-    }"
-    class="fixed inset-y-0 left-0 h-screen flex flex-col bg-s1 border-r border-white/[.06] z-40 md:translate-x-0 transition-[width,transform] duration-200 ease-in-out"
+    :class="$store.sidebar.collapsed ? 'w-16' : 'w-60'"
+    class="fixed inset-y-0 left-0 h-screen flex flex-col bg-s1 border-r border-white/[.06] z-40 -translate-x-full md:translate-x-0 transition-[width,transform] duration-200 ease-in-out"
+    :style="$store.sidebar?.open ? 'transform: translateX(0)' : null"
 >
     <!-- Header: Logo + Workspace Switcher -->
     <div class="flex-shrink-0 relative" @click.outside="wsOpen = false">
diff --git a/scripts/console-check.mjs b/scripts/console-check.mjs
index 7e023db..67682a8 100644
--- a/scripts/console-check.mjs
+++ b/scripts/console-check.mjs
@@ -7,10 +7,28 @@
  *   node scripts/console-check.mjs
  */
 import { chromium } from '@playwright/test';
+import { readFileSync } from 'fs';
+import { resolve, dirname } from 'path';
+import { fileURLToPath } from 'url';
 
-const BASE = process.env.APP_URL ?? 'https://app.nimuli.com';
-const EMAIL = 'nexxo@nimuli.com';
-const PASS = 'NimuliDev2026!';
+const __dir = dirname(fileURLToPath(import.meta.url));
+const projectRoot = resolve(__dir, '..');
+
+function readEnv() {
+    try {
+        return Object.fromEntries(
+            readFileSync(resolve(projectRoot, '.env'), 'utf8')
+                .split('\n')
+                .filter(l => l && !l.startsWith('#') && l.includes('='))
+                .map(l => { const i = l.indexOf('='); return [l.slice(0, i).trim(), l.slice(i + 1).trim()]; })
+        );
+    } catch { return {}; }
+}
+const env = readEnv();
+
+const BASE  = process.env.APP_URL       ?? env.APP_URL ?? 'https://app.nimuli.com';
+const EMAIL = process.env.TEST_EMAIL    ?? 'nexxo@nimuli.com';
+const PASS  = process.env.TEST_PASSWORD ?? 'NimuliDev2026!';
 
 const errors = [];
 const warnings = [];
diff --git a/scripts/crawl-all-routes.mjs b/scripts/crawl-all-routes.mjs
index 692f948..fed33ef 100644
--- a/scripts/crawl-all-routes.mjs
+++ b/scripts/crawl-all-routes.mjs
@@ -6,10 +6,32 @@
  */
 import { chromium } from '@playwright/test';
 import { spawnSync } from 'child_process';
+import { readFileSync } from 'fs';
+import { resolve, dirname } from 'path';
+import { fileURLToPath } from 'url';
 
-const BASE = process.env.APP_URL ?? 'https://app.nimuli.com';
-const EMAIL = 'nexxo@nimuli.com';
-const PASS = 'NimuliDev2026!';
+const __dir = dirname(fileURLToPath(import.meta.url));
+const projectRoot = resolve(__dir, '..');
+
+// Read .env for DB creds (dev-only script — .env never committed)
+function readEnv() {
+    try {
+        return Object.fromEntries(
+            readFileSync(resolve(projectRoot, '.env'), 'utf8')
+                .split('\n')
+                .filter(l => l && !l.startsWith('#') && l.includes('='))
+                .map(l => { const i = l.indexOf('='); return [l.slice(0, i).trim(), l.slice(i + 1).trim()]; })
+        );
+    } catch { return {}; }
+}
+const env = readEnv();
+
+const BASE     = process.env.APP_URL  ?? env.APP_URL  ?? 'https://app.nimuli.com';
+const EMAIL    = process.env.TEST_EMAIL    ?? 'nexxo@nimuli.com';
+const PASS     = process.env.TEST_PASSWORD ?? 'NimuliDev2026!';
+const DB_USER  = process.env.DB_USERNAME   ?? env.DB_USERNAME ?? 'nimuli';
+const DB_PASS  = process.env.DB_PASSWORD   ?? env.DB_PASSWORD ?? 'nimuli';
+const DB_NAME  = process.env.DB_DATABASE   ?? env.DB_DATABASE ?? 'nimuli';
 
 let pass = 0;
 let fail = 0;
@@ -25,8 +47,8 @@ console.log(`${'═'.repeat(47)}\n`);
 function dbQuery(sql) {
     const result = spawnSync(
         'docker',
-        ['compose', 'exec', '-T', 'mysql', 'mysql', '-unimuli', '-pnimuli', 'nimuli', '-se', sql],
-        { encoding: 'utf8' }
+        ['compose', 'exec', '-T', 'mysql', 'mysql', `-u${DB_USER}`, `-p${DB_PASS}`, DB_NAME, '-se', sql],
+        { encoding: 'utf8', cwd: projectRoot }
     );
     if (result.status !== 0) return '';
     const lines = result.stdout.trim().split('\n').filter(Boolean);