@autobusal/routes-order 1.34.4 → 1.35.0

package/CHANGELOG.md

@@ -1,866 +0,0 @@
-## 1.34.4 - 2026-08-29
-
-- The date strip and the search-again panel WRITE THE SEARCH INTO THE URL, so a refresh keeps the chosen day and a shared link opens the results it was copied from (audit A3-02f).
-
-- A results URL carrying a real return date is read as a round trip whatever its type segment says - it used to sell a one-way silently (audit A3-07c).
-
-- An agent's checkout previews what the card will actually be charged: the seller's own commission is stated as its own line and the surcharge is computed on the NET, the same base obtapi charges on. An agent was shown 67.05 against a 60.67 charge (audit A4-07).
-
-- An invalid coupon says so, inline and announced - a code that did not exist reached no handler at all, so the commonest case (a typo) changed nothing on screen (audit A3-10c).
-
-- The details expander gains the ITINERARY and a line on cancellation and changes; the quick-pick chips format the duration instead of printing a bare "04:30" that reads as a departure time (audit A3-02h, A3-02j).
-
-## 1.34.3 - 2026-08-29
-
-- Staff sellers (agent/subagent/operator/employee/admin) get an OPTIONAL passenger email box at checkout, so a counter-sold ticket reaches the passenger instead of only the seller and operator (audit A4-05, owner decision). obtapi already read {type}{i}_email/_notify_email; it now validates them too.
-
-## 1.34.2 - 2026-08-29
-
-- With more than one card gateway available, each Credit Card button carries its processor's name - they used to render byte-identical (audit A0-06).
-
-# Changelog
-
-## 1.34.0 (2026-08-29)
-
-- The bare /bus-lines form suggests an origin near the visitor and no longer pre-fills a destination; a URL that names one still wins.
-
-## 1.33.10 (2026-08-29)
-
-- The return date falls back to the outbound when the URL carries no real one ('none' on a one-way link), so switching a collapsed search to Round Trip opens the calendar on the month being travelled and cannot offer a day before the departure.
-- The collapsed search panel sits above the step markers: its backdrop-filter creates a stacking context, so the date picker used to draw underneath them.
-
-## 1.33.9 (2026-08-28)
-
-- Return-leg empty state fetches RETURN alternatives (swapped pair + return date) and its suggested-day links fill the return slot instead of rewriting the departure; nearby-city swaps map back to the URL's outbound pair (sweep #50).
-- Checkout money parsing survives the server's space-thousands format: currency is the last token, coupon amounts strip grouping spaces - totals over 1000 no longer corrupt the rendered total or the GA4 values (sweep #51).
-- useGetFlex takes the coupon-adjusted total so the quoted flex price matches what the server bills on a couponed booking (sweep #53).
-- Passenger age bands match the server rules: adult 12+, child 2-12, baby under 2 (sweep #48).
-
-## 1.33.8 (2026-08-28)
-
-- usePostOrder replays the stored referral token as `referral`, so widget/link arrivals attribute their affiliate at checkout.
-
-## 1.33.7 (2026-08-26)
-
-- Seat-selection add-on: checkout reads settings addons.seats - picking turns optional with the fee on the CTA and a live summary line; submission strips unpicked (zero) seat fields and sends addon_seats only when a hand-picked seat remains. Fixes the return-leg picked-seat list rebuilding from the departure's on re-pick.
-
-## 1.33.6
-
-### Fixed
-
-- **The return date strip asks the API for return-leg pricing** (new leg parameter) - it used to quote one-way fares over days the buyer pays the round-trip difference for. (Audit BOOK-02-b; needs obtapi >= 2.4.63.)
-
-## 1.33.5
-
-### Fixed
-
-- **The summary's TICKET line shows the gross fare.** With a coupon it used to show the discounted figure AND a discount line - "TICKET 40 / DISCOUNT -5 / TOTAL 40", arithmetic that doesn't add up on screen. (Audit BOOK-09-b.)
-
-## 1.33.4
-
-### Added
-
-- **Complimentary in the web checkout.** An operator/employee selling on their OWN operator's route is offered the zero-cost Complimentary option the mobile app already had - the route-aware flag comes from `/api/funds/allowed?route=...` and the ownership rule is re-checked server-side at payment time. (Audit decision BOOK-07; needs obtapi >= 2.4.37.)
-
-## 1.33.3
-
-### Fixed
-
-- **Checkout swallowed every booking error.** A 4xx from order creation - a seat taken while the form was open, the unpaid-hold limit, a route gone unavailable - left the buyer on the filled form with no message. It now surfaces the API's message. (Audit BOOK-13-c.)
-
-## 1.33.2
-
-### Fixed
-
-- **A signed-in customer with an incomplete profile is now asked for what is missing**, in the same billing fields a guest already fills, instead of reaching an API that had nothing to put in three NOT NULL columns. Only the gaps are asked for: a complete profile sees no change at all.
-
-  This is not a rare state. A self-registered visitor has a name and nothing else, and the form that collects phone, address and city is reachable only by admin-created accounts — so the customer could not have completed it in advance even if asked to.
-
-- `Billing` takes an optional `only` list; undefined keeps the whole guest block exactly as it was. Field rules follow whichever profile the value will be stored on, so the form never accepts more than the API will keep.
-
-- Checkout treats "profile not loaded yet" as unknown rather than empty — the user store persists a redacted stub and re-fetches on mount, so the other reading would flash required fields at customers whose profile is complete.
-
-## 1.33.1
-
-### Added
-
-- **A pair with no future scheduled service says so**, with the date it last ran, instead of showing a facts block that quietly omits frequency and a departure list that is empty on every date the visitor tries. The links to journeys that do run stay prominent, so the page converts rather than dead-ends. No `noindex`: an honest page about a seasonal route is not thin content, and a route that stopped in December will want its ranking back in June.
-
-## 1.33.0
-
-### Added
-
-- **The pair page is a page about the journey, not just a search box over it.** `/routes/search/facts` now carries how often the pair is served (the union of days a traveller can leave on, plus departures per week), how many of the scheduled services run non-stop, how many travel overnight, the cities in between, what is on board, the two countries, and the dearest fare alongside the cheapest - all read off the timetable, all riding the existing 6h cache, none of it estimated.
-- Every list-shaped fact carries an `every` flag beside it, and the copy is chosen from that flag. Six of the ten Tirana-Thessaloniki coaches are non-stop and they carry different equipment, so "every bus calls at Korca" and "some buses also call at Korca" are different claims; obtapi says which one the data supports rather than leaving the wording to guess.
-- **A visible FAQ** (`Faq/`), built from `Facts/questions` - the same array the `FAQPage` structured data is emitted from, so the answer Google quotes is the string the page renders, character for character, in all fifteen languages. Native `<details>`, no state: the answer is in the DOM whether it is open or shut, which is what a prerendered snapshot and a crawler that does not click both need. Questions with no data behind them are not asked.
-- **`BusTrip` gained an `itinerary`** - but only where every service on the pair calls at every stop listed. An itinerary is a statement about *the* trip, and on a pair where most coaches run non-stop there is no single itinerary to state. Departure and arrival stops carry a `PostalAddress` where obtapi knows the country.
-- **A "travelling back?" link**, from the new `links.reverse`. Pairs are directional, so the return leg is a different page with its own timetable - and it belonged to neither "popular from" nor "popular to", being a pair from the destination back to the origin. Null, and absent, when nobody sells it.
-
-### Fixed
-
-- **"3h 0m" in the facts grid, "3h" in the answer below it.** The facts block carried its own copy of the duration formatter without the whole-hour rule the FAQ answers use, so a three-hour coach was described two ways on one page. One exported formatter now.
-- **The departure count called itself the wrong thing.** `facts.departures` counts the distinct coaches in the timetable, and a single daily one of them makes seven departures a week - so "10 scheduled departures" beside the new "every day, 70 scheduled departures a week" read as a contradiction rather than as two facts. The label and the FAQ answer now say *scheduled services* in all fifteen languages; the number they print is unchanged.
-- **"There are 1 scheduled departures"** - the sentence a thin pair got from the FAQ schema for as long as the block has existed, and a thin pair is most of them. A separate key rather than an i18next plural rule; the plural categories of the eight Slavic locales here are not something one English-shaped rule gets right.
-
-## 1.32.1
-
-### Added
-
-- **A saved-passenger chooser and a "remember this passenger" checkbox**, per passenger rather than per order, because "remember me but not the person I am buying for" is the ordinary case and one control per booking cannot say it. The list is fetched once for the whole checkout, not once per traveller.
-
-  Picking applies the whole person, not the filled parts: a passport left from a previous choice is cleared, because the customer has said who is sitting in that seat. Only fields the route actually collects are written - react-hook-form submits values set for names it never registered, so writing the rest would post a WhatsApp number to a route that never asked for one.
-
-  A journey that needs a field the saved profile lacks says so in the form's own words. `missing` absent means *not measured* and is not treated as "nothing missing".
-
-## 1.32.0
-
-### Added
-
-- **"Watch this fare" on the results page.** An inline control at the foot of the results asks for an email address and arms a price alert on the pair and date already searched (`POST /api/alerts/price/email`). It renders from `<Found>`, which is the one component mounted in every outcome a search can have - trips listed, every trip hidden by a filter, and nothing found at all; "no buses for this search" is exactly when somebody wants telling if that changes, so a control living inside the listing would have been missing where it matters most. On the return leg the pair is reversed and the return date used, the same swap `useGetDates` makes.
-- Every answer the endpoint can give is said out loud rather than swallowed: the confirmation quotes `baseline_price_display` so the customer knows which number is being watched, a 404 says plainly that nobody prices this pair, a 422 names the address, and a 429 asks for a minute. `retry: false` - none of those three get better by being asked again.
-- The email field has a real accessible name (`<label htmlFor>` over a `useId`-prefixed id), matching what the checkout and `@autobusal/auth` were fixed to do. No threshold field: "tell me if it drops" needs no number, and a second input is how a one-line control becomes a form nobody fills in. No `token` field either - obtapi validates it as `prohibited` here, it belongs to the device half of the same feature.
-
-## 1.31.5
-
-### Added
-
-- **BusTrip carries the pair's AggregateRating** when `/routes/search/facts` reports one (`FactsData.rating`). The aggregate is computed server-side over the same published-review rules the reviews listing uses, and rides the facts cache - the pair page keeps its one-fetch design. Absent rating, the key is not emitted at all.
-
-## 1.31.4
-
-### Fixed
-
-- **The checkout form's fields have accessible names.** Passenger and billing inputs had no `id`/`for` pairing, no `aria-label` and no wrapping label - programmatically anonymous on the one form that decides whether a sale completes. Ids are `useId`-prefixed, which is what stops `adult1_*`, `adult2_*` and `child1_*` colliding; a hardcoded id would have traded one accessibility bug for another.
-- Coupon code and the add-on phone fields get an `aria-label`, having only ever had a placeholder - and a placeholder disappears the moment someone types.
-
-## 1.31.3
-
-### Fixed
-
-- **The results page's facts/schedule block now renders on the very first screen**, not only once a date has been picked. `/bus-lines/:from/:to` - the dateless URL the sitemap lists and the prerender crawl snapshots - was always on step 1, so `<Sections>` (price/duration/departures + the per-route schedule table + the pair's JSON-LD) never mounted for a single search engine or non-JS crawler. It now also renders on step 1; the bare `/bus-lines` search form (no pair in the URL) is unaffected since it has nothing to fetch.
-
-## 1.31.2
-
-### Changed
-
-- **The route card and booking summary show the operator's `display_name`**, not `company` - an operator that set a brand name (`@autobusal/providers` 1.34.0) now appears under that name in search results and the booking summary, same as everywhere else it's now shown.
-
-## 1.31.1
-
-### Changed
-
-- **One payment method means one button.** The picker no longer renders when
-  there is nothing to pick, and the button reads "Pay Now" rather than "Make
-  Payment" - a heading over a single option the buyer had to press before
-  pressing the real one was a click that only ever had one answer, on the
-  last screen before paying.
-
-## 1.31.0
-
-### Changed
-
-- **The checkout Order Summary stacks the legs vertically and numbers them**
-  — "Trip 1" above the outbound, "Trip 2" above the return.
-
-  They sat side by side from 768px up, which was written when the summary
-  spanned the page. It has lived in the checkout *sidebar* since 1.11.0 — a
-  narrow column — so two legs abreast left each about half the width a single
-  line like "Terminali Lindor Interurban dhe Nderkombetar i Autobusave (TEG)"
-  needs, and nothing said which was which. Vertical at every width now, in the
-  order they are travelled.
-
-  **The number is only rendered on a round trip.** A one-way has nothing to
-  enumerate, and a lone "Trip 1" would send the reader looking for a Trip 2
-  that was never bought. `Checkout/Sidebar` is the one component that knows
-  whether a second leg exists, so it is the one that decides — `About` just
-  takes an optional `number`.
-
-  "Trip" rather than "Segment": segment is airline jargon, and this is the
-  last screen before somebody pays for a bus ticket.
-
-## 1.30.1
-
-### Fixed
-
-- **Step 3 could never list a single return leg.** `useGetReturns` spread the
-  search form straight into the query string, so the return date went over as
-  `_return` — the form's name for it, because `return` is a reserved word in
-  JS — while the API validates `return`. Every request answered
-  `422 The return field is required`, and "Select a Return Schedule" was empty
-  for every round trip ever searched. The order builder in the same file has
-  always done this mapping (`order.return = step1._return`); only this call
-  was missed.
-
-  Paired with an obtapi fix — `Routes\Search\Returns::find()` returned nothing
-  on its success path — so the step was broken twice over and neither failure
-  could be seen past the other.
-
-## 1.30.0
-
-### Added
-
-- **The SMS booking-confirmation add-on at checkout**, with its own number
-  field prefilled from the passenger phone already collected — somebody
-  booking for a relative wants the text to reach the traveller. The
-  description says the free route alerts are not what is being sold here.
-- **A line under the passenger phone field** saying what the number is used
-  for: reaching you about this trip, and service messages if the departure
-  changes — never marketing. The number was always collected so a driver
-  could ring it; texting it is a different use of the same data, and saying
-  so at the point of collection is what makes it consent rather than an
-  assumption.
-## 1.29.0
-
-### Removed
-
-- **The reviews block on the route-pair page.** A review wall sat in the
-  middle of a page whose job is to compare departures. What a reader needs
-  there about reputation is one number per operator, which the result cards
-  already carry; the reviews themselves belong on the operator's own page,
-  where somebody who wants to read them has gone looking for them. The `pair`
-  mode of the reviews API is untouched — nothing calls it from here now.
-- The "Reviews" entry in the in-page nav, with it.
-
-## 1.28.0
-
-### Added
-
-- **Overnight trips now say so.** A result card that arrives on a later day
-  prints the calendar day under BOTH ends and a `+1` against the arrival
-  time; the pair-page timetable carries the same marker. "22:30 → 06:00" is
-  the one thing on a result card that can be read as the exact opposite of
-  what it means, and the duration beside it does not fix that because nobody
-  reads a duration to work out a date.
-- Nothing is added to a same-day card. A date under every arrival would make
-  the overnight ones stop standing out, which is the only reason this exists.
-
-### Changed
-
-- The day comes from the timetable's own midnight markers, computed
-  server-side, never from "the arrival looks earlier than the departure" —
-  which is wrong for exactly the cross-border journeys whose two ends keep
-  different clocks.
-
-## 1.27.0
-
-**`reloadDocument` is gone — the results follow the URL.**
-
-The search lives on `Step1`, which is **not mounted** once results are on screen. So a link that changed the address bar was read by nobody: the URL said one journey and the results underneath still showed another. That is why the empty-search suggestions threw away the whole application on every click.
-
-`RoutesOrder` now watches the search spec the URL describes and re-runs when it changes. Keyed on **the spec**, not on a "have we searched yet" flag — a flag can only answer once, a key re-answers whenever the question changes and stays quiet while it does not. It cannot loop either: writing state does not alter the URL the key derives from. The first search is still Step1's, so it does not run twice.
-
-Choosing a different search also clears the previously chosen coach. Leaving it set would let the step guards resolve to a checkout for a route the buyer never picked.
-
-Verified client-side: navigating from Tirana → Thessaloniki (10 trips) to Durres → Tirana updated the header and the results with the page never reloading.
-
-## 1.26.0
-
-**Funnel events on every step**: the result list, the coach chosen, checkout reached, the Flexible Ticket ticked or unticked, and the value stashed for the purchase event.
-
-- `view_item_list` is keyed on the **result set**, not on render — this component re-renders on every filter tick and sort change, and announcing again each time would report a dozen searches for one.
-- `begin_checkout` lives in `Checkout` rather than `RoutesOrder`, because that screen already derives the currency from its own formatted total (the public settings payload deliberately carries none) and it mounts exactly once per arrival.
-- The **add-on attach rate** is the one input the Flexible Ticket pricing decision has been waiting on — it cannot be banded by window without knowing how often each window is actually bought.
-- One `item()` mapping shared by every event, keyed on the **route code** rather than the numeric id, so a report can be reconciled against something a human recognises.
-
-## 1.25.0
-
-**Reviews on the route-pair page.** A new section between the timetable and the internal links, with its own nav anchor.
-
-Renders nothing below the display threshold, so a pair without enough reviews does not gain an empty box.
-
-## 1.24.0
-
-**The booking wizard has real URLs.** The step now lives in the URL and `current` is derived from it, rather than the reverse.
-
-Before: the wizard held the step in component state and never touched the address bar, so the URL still said "search" while the buyer was on checkout. Nothing in the flow was shareable, a refresh dropped you back to the search, and Back did not step back through the wizard — it left it entirely, because no step had ever created a history entry.
-
-- A **search param** (`?step=checkout` / `?step=return`), not a path segment. `/bus-lines/:from/:to` is a crawlable page in the sitemap, and child routes would put near-identical URLs in front of a crawler for what is UI state. The search spec is already in the path on the 9-segment route, so between the two the whole position is in the URL.
-- **Guards, not a lookup.** A step is honoured only when the state it needs exists: a cold `?step=checkout` has no chosen route, so it falls back to results and clears the stale param rather than rendering half a screen.
-
-**Bug fixed on the way.** `Checkout` chose its back target with `step1._return ? 3 : 2`. On the 9-segment URL a one-way trip carries the literal segment `none` as its return date — a truthy string — so **every one-way booking's Back button aimed at the return-leg step**, which that booking does not have. Now keyed on `step1.type`, and guarded again in `onBack` so a step nobody can honour never reaches the URL.
-
-Verified: results → checkout writes the param; browser Back and Forward move between them; the in-page Back returns to results; a cold checkout URL falls back; and eight back/forward transitions produced no blank frame and no console error.
-
-## 1.23.5
-
-**The operator cell centres its contents at every width.** LinkCompany already carried an auto horizontal margin, so the logo was centred in the cell whatever the screen - but the rating and the route code sat at flex-start, under the left edge of a box whose logo was in the middle of it. On a 768px card that was a ~300px gap between the logo and the code below it.
-
-Measured after: logo and chip centres agree to within 1px (sub-pixel rounding) at 768px and 1400px, with no cell overflow and no sideways page scroll.
-
-## 1.23.4
-
-**The route code is a chip rather than a line of grey text.** Rounded, on the neutral background, bold and letter-spaced, with a route glyph (MdOutlineAltRoute) leading it and the word "Route" as its tooltip.
-
-A route symbol rather than a bus or a ticket: the code identifies which LINE this is - the same job a flight number does - and a bus icon would only repeat what the whole card already says. The glyph is a size larger than the text beside it, because at this scale the icon carries the meaning and the letters are just the value.
-
-Albanian `routes_order.step2.route.name` corrected from "Rruga" (a street) to "Linja" (a line). The key's only consumer is now this tooltip, so it was safe to fix.
-
-## 1.23.3
-
-**The arrival heading was painting over the price.** Measured: the arrival cell is 165px wide and its content needed **215px**, so it ran 50px into the fare beside it.
-
-Two causes, both fixed — widths alone would only have moved the width at which it broke:
-
-- **No spaces to wrap at.** JSX drops the whitespace around a newline, so city, country and time were concatenated into one unbreakable token. Real spaces added, plus overflow-wrap: break-word above 640px as a backstop for a long city name on its own line.
-- **The operator cell was taking room it did not need.** 185px to 120px with a smaller logo, and the one-row gap from 15px to 10px. That returns 85px to the two location columns, which go 165px to 208px.
-
-Verified no overflow on any card at 1024 / 1100 / 1280 / 1440 / 1920px. 1024 is the tightest - it is where the card first lays out in a single row.
-
-**The route code moved out of the collapsed details and under the logo**, where it sits beside the operator it identifies. That frees a slot in the details row for things that actually need explaining - customs on a cross-border run, for one.
-
-The route information link is now **Route Info** rather than "Read Operator Information".
-
-## 1.23.2
-
-- Flexible Ticket detail is now behind a small **Read More** link rather than the title. Its own control, so the thing you click to *read* is never next to the thing you click to *buy*. Closed by default; one line — "without it, this ticket cannot be cancelled or changed" — stays outside the collapse, because that is the material fact and hiding it would be a dark pattern rather than a tidy layout.
-- **Date strip: dropped the joining comma.** Above 1024px the day number carried a `::before` comma so the cell would read "Mon, 03 Aug" on one line. The cells are narrow enough that the two parts wrap anyway, so the comma led the second line and every desktop cell rendered as "Mon" over ", 03 Aug". Punctuation that only works when text happens not to wrap will keep breaking.
-
-## 1.23.1
-
-**Flexible Ticket as a title, a price and an Add button, with the detail collapsed.**
-
-A button rather than a checkbox, because this is not the same kind of choice as the notification add-ons beside it — those are a cheap tick, this one changes what the ticket *is*. The toggle and the Add button are separate controls on purpose: reading the terms must never be a way to accidentally buy them.
-
-One line stays **outside** the collapse — "without it, this ticket cannot be cancelled or changed". Everything else is detail somebody can choose to read, but that is the material fact, and hiding what a buyer gets for nothing behind a toggle is the shape of a dark pattern rather than a tidy layout.
-
-## 1.23.0
-
-**Flexible Ticket at checkout.**
-
-- New `useGetFlex(departurePriceId, returnPriceId, adults, children)`. Its own request rather than a field on the search result, because the answer depends on **both legs at once**: an operator who will not amend one half removes the add-on from the whole booking, and the price is computed on the combined fare.
-- `Addons` renders the option below passenger details, where it already sat. It shows the **default first** — "without it, this ticket cannot be cancelled or changed" — then only the capabilities this booking actually includes, then that the fee itself is not refunded, then that statutory rights when the *operator* cancels are untouched. Nothing renders at all when the offer is unavailable: a checkbox that unlocks nothing is worse than no checkbox.
-- `AddonsSelection` gains `flex`; the order payload gains `addon_flex`.
-- `Found/Route` reads `routes_order.step2.route.information.*` after the `policies` rename.
-
-Copy is **Flexible Ticket** / **Biletë Fleksibël**, never insurance — the distinction decides how the line is taxed and whether selling it needs a licence.
-
-All notable changes to this package are documented here. This project follows
-[Keep a Changelog](https://keepachangelog.com/) and [Semantic Versioning](https://semver.org/).
-
-> Note: 1.8.0 was published without a changelog entry. The gap is left as-is
-> rather than reconstructed after the fact.
-
-## 1.22.0
-
-Structured data on route-pair pages: `BusTrip` with its operators and
-fares-from, and a `FAQPage` answering the five things people actually search
-for — how long, how much, how many a day, when the first and last leave, and
-who runs it.
-
-One rule governs all of it: **never state anything the page does not show.**
-Every value is the same one rendered in the facts block or the timetable a few
-hundred pixels below. A rich result built on a claim a visitor cannot find is
-the mismatch that gets a site's snippets pulled, and it is also just a lie told
-to a machine.
-
-The rating hangs off the **provider**, not the trip. An operator's rating is
-earned across everything they run; attaching it to one city pair would claim
-travellers rated this journey when they rated the company. Operators below the
-review display threshold carry no rating in the markup, exactly as they carry
-none on the page.
-
-## 1.21.1
-
-No horizontal scroll on a tablet's date strip. The 900px floor belongs to the
-seven-day layout, which only appears from 1024px — applied from 640px it made
-a tablet showing five days scroll sideways for a row that fitted comfortably,
-because the strip was reserving width for two cells it was not rendering.
-
-## 1.21.0
-
-The same-day notice no longer hedges about timezones. obtapi now holds a zone
-per country, so "has this coach already left" is judged against the departure
-stop's own clock — the warning is about the real remaining risk, which is
-whether a traveller can reach the terminal in time.
-
-## 1.20.0
-
-The date strip: three days on a phone, five on a tablet, seven on a desktop —
-and the label becomes "04 AUG" below desktop rather than "Tue 04".
-
-Seven fitted on a phone once the labels were trimmed, but only at ~36px a
-cell: readable, not comfortable to hit, with the price wrapping to three lines
-under it. Each step up in width now buys two more days instead of squeezing
-the same seven into less room.
-
-The weekday is what gives way, not the month. With three days showing, a date
-needs to say which date it is more than which weekday — "04 AUG" is
-unambiguous alone, while "Tue 04" leaves somebody counting forward to work out
-whether that is this week or next. On a full seven-day strip the weekday earns
-its place, because the row reads as a week; on three days it does not.
-
-## 1.19.0
-
-Same-day travel, and the last of the phone layout.
-
-**Today is bookable**, so today's results carry a countdown — "Leaves in 43
-min", turning red under the hour. Computed server-side: a countdown built from
-the visitor's own clock is wrong for anybody whose device is off or in another
-timezone, and that is exactly the claim that must not be wrong.
-
-**A same-day caution above the results.** A coach that has already gone is
-filtered out server-side, but "already gone" is judged against our clock and
-the system holds no timezone for a city — so on a cross-border route the
-stored departure time and our idea of now can be an hour apart. The notice asks
-the traveller to check against their own local time.
-
-**Five days on a phone, seven above it.** Seven fitted after the labels were
-trimmed, but only at ~36px a cell. The five are centred on the selected day and
-clamped at both ends, so shrinking never hides the day being looked at.
-
-**Fare and button share a row**, tax note beneath — reordered in CSS, because
-the source order (fare, note, button) is the right one to read aloud and the
-right one for a crawler: the note explains the number it follows.
-
-## 1.18.0
-
-The results page on a phone, rebuilt for density.
-
-**The three picks are one strip.** Cheapest, fastest and recommended stacked
-into three full-width bands before a single result — the thing that summarises
-the list was pushing the list off the screen. Side by side they are comparable
-at a glance, which is what they are for. The operator's name drops below 640px:
-at ~110px a card it would ellipsis to three characters.
-
-**All five sort options on one row.** They were wrapping onto three lines,
-taking more height than the first result they reorder. Sized to their own text
-rather than equal shares — equal shares gave all five 59px, which four did not
-need and "Recommended" did, so it alone was truncated to "Recom..." while its
-neighbours sat in whitespace.
-
-**The seven-day strip no longer scrolls sideways.** A 900px floor made half the
-week invisible on a phone, including whichever day was cheapest — and a week is
-a shape you read at a glance, not one you drag. The month is dropped from each
-label (it is identical across a seven-day window) and the week arrows are
-squeezed; the day prices wrap rather than painting over each other.
-
-**Details collapse.** Features, route, transit and policies were four stacked
-bands on every result. They are one wrapped row behind a toggle now, hidden
-with CSS rather than unmounted so the prerendered snapshot a crawler reads is
-unchanged.
-
-**The trip stacks vertically** with the arrow turned to point down. Side by
-side was tried first and does not survive the content: "Thessaloniki (GRC)
-16:30" measures 215px in a 96px column and painted 50px outside the card — the
-page never scrolled sideways, so nothing looked broken until it was measured.
-
-## 1.17.0
-
-Internal linking blocks: "Popular routes from Tirana" / "Popular routes to
-Thessaloniki", as real router links, because the entire value is that a
-crawler follows them.
-
-The sitemap already announces every sellable pair, but a sitemap is a hint —
-a page nothing links to is still orphaned. These put every pair one click from
-another.
-
-Ordered by paid bookings, never filtered by them: the pairs with no orders yet
-are exactly the orphans this exists to reach. The block also survives a pair
-with no facts, which is precisely where a reader most needs a way onward.
-
-## 1.16.0
-
-The crawlable timetable, and a section layout around the wizard.
-
-Every service on the pair as a real `<table>` — departs, arrives, duration,
-stops, operator with its rating, price — sorted by departure time. This is the
-part of Tier 3 that actually ranks: dense, unique to the pair, and made of the
-words somebody types, without a sentence of written copy. No interactivity, so
-a prerendered snapshot shows a non-JS crawler exactly what a reader sees.
-
-A sticky in-page nav (Trips · Facts · Timetable) so somebody who landed from a
-search engine can reach the timetable without scrolling past a booking form
-they have not decided to use. The wizard itself is untouched — this is a
-layout around it, not a change to the funnel.
-
-Facts and the timetable share ONE request. Two components each fetching the
-same response would have doubled what the prerender crawl costs on every pair.
-
-No "type" or "class" column, which the roadmap asked for: every route in this
-system is typed `international` and the bus names are inventory identifiers
-like "A100". A column that says nothing on every row reads as padding.
-
-## 1.15.0
-
-Distance is now measured along the route's own stops rather than as one line
-from origin to destination, and the facts payload carries two numbers instead
-of one: `road`, real driving distance from a routing service, and `approx`,
-the straight lines summed stop by stop.
-
-Real road distance prints plainly. The approximation prints with a caveat,
-because it understates every journey — 309 km against 401 km of actual tarmac
-on Tirana–Thessaloniki via Korça, a 23% shortfall. A straight line is the
-shortest path there is, so no number of extra points can ever close that gap.
-
-## 1.14.0
-
-The facts block on a route-pair page: fares from, journey time, first and last
-departure, how many run, distance and who operates it.
-
-Read off the timetable rather than a dated search, so it does not change with
-the date in the URL — a "from EUR 12" that moved depending on which day a
-crawler arrived would look unstable to a search engine and dishonest to a
-reader who came back.
-
-Distance is labelled "straight line" because that is what it is: we hold city
-coordinates, not routing data, so the figure is always shorter than the road.
-
-Renders nothing at all for a pair with no facts. An empty facts block is worse
-than none — it is the thin content this tier exists to remove.
-
-## 1.13.0
-
-The operator's rating on each result card. The operator's rather than the
-route's: a single route rarely has enough published reviews to clear the
-display threshold, and a card with a rating beats one without.
-
-## [1.12.0] - 2026-08-01
-
-### Removed
-
-- **The Booking.com hotel banner.** It was unmounted from `Found` earlier on
-  2026-08-01 for sitting between the date strip and the trips - advertising a
-  hotel to somebody still deciding whether they can travel at all - and the
-  component is now deleted rather than kept dormant. It was never an
-  integration, only a hand-built `searchresults.xu.html` link built from
-  `city.booking_id`; leaving the component, the column and its admin field in
-  place made it look like one. The `routes_order.step2.booking` strings and
-  the `s-ec.bstatic.com` CSP entry go with it.
-
-## [1.11.1] - 2026-08-01
-
-### Changed
-
-- **Coupon and payment method moved into the sidebar**, coupon directly
-  above the totals it changes and the method picker directly above the
-  button that acts on it. Both sat several sections away in the main
-  column, so applying a coupon changed a number that was off screen.
-- **The results heading names the trip** - "Online Bus tickets from Tirana
-  Albania to Thessaloniki Greece" instead of "Select a Departure Schedule".
-  Countries are dropped when both ends share one, since "from Tirana
-  Albania to Korca Albania" is noise. Read from the city list rather than
-  from the results, so the heading is right even when the search finds
-  nothing - which is exactly when knowing what was searched for matters.
-- **Order summary**: the operator's logo under the route name, departure
-  and arrival icons sitting on the connecting line, and the departure date
-  and time in bold - the two things a buyer checks before paying.
-
-### Fixed
-
-- The coupon and payment blocks switched layout at a VIEWPORT breakpoint,
-  so in the ~290px sidebar they used the wide arrangement and the coupon
-  input came out 86px wide. They now wrap on their own width.
-
-## [1.11.0] - 2026-08-01
-
-### Changed
-
-- **Passenger details and checkout are one screen.** Split across two
-  steps, the buyer typed passenger details with no sight of the price, then
-  saw the price on a screen where they could no longer check what they had
-  typed - and ticking an add-on changed a total that had already scrolled
-  away. The wizard is four steps now, not five.
-- **A sticky sidebar** carries the trip, the ticket price, each add-on, any
-  discount, the total due, and the button that commits to it. The button
-  follows the chosen method, so it reads "Reserve" for a reservation rather
-  than claiming to take a payment.
-- **The trip summary states both ends of each leg**, city and country in
-  full, origin above destination. It previously showed one end only - the
-  departure point outbound, the arrival point on the return - so a one-way
-  buyer reached payment having never been shown where the bus drops them.
-- **Required fields are marked.** The form validated them but never said
-  which they were, so the first a buyer heard of it was an error message
-  after pressing pay.
-
-`usePostOrder` now takes the passenger details in its mutation variables
-rather than as a hook argument: on one screen they are only known at the
-moment pay is pressed, so a closure captured at render time would have sent
-stale state. The two forms stay separate react-hook-form instances - they
-validate different things, and billing is not rendered at all for a
-signed-in buyer - and paying validates them in order, stopping at the first
-failure so the buyer lands on the thing that needs fixing.
-
-Verified by completing a real reservation end to end: order 61 / ticket 75
-carried every entered value, seat included.
-
-## [1.10.0] - 2026-08-01
-
-### Added
-
-- **A search that finds nothing now answers instead of apologising.** In
-  place of the bare "we couldn't find any tickets", the page offers nearby
-  departure cities, nearby arrival cities and other dates that have seats.
-  Every suggestion is a search obtapi has already confirmed returns
-  results on the requested date, quoted with its fare, so a click is never
-  a second dead end. Nearby cities are ordered by real distance from the
-  city that was asked for - the passenger's problem is getting to the bus,
-  not saving two euros.
-- Fetched only once the departure search has come back empty, so a search
-  that succeeded never pays for it.
-
-Suggestion links do a full page load on purpose: RoutesOrder holds the
-search in component state and Step1 only starts a search when it has not
-already redirected, so a client-side navigation would change the URL and
-leave the empty result set on screen.
-
-## [1.9.6] - 2026-08-01
-
-### Added
-
-- **The search form stays on screen while choosing a route.** Adjusting a
-  date, a city or the passenger count used to mean "Back to Search", which
-  threw the results away along with any filters. Shown only on the
-  route-selection screens: past that point the passenger has committed to a
-  specific trip, and re-running the search under them would discard details
-  they had already typed.
-
-## [1.9.5] - 2026-08-01
-
-### Fixed
-
-- **The column header row now lines up with the result cards** - 0px drift
-  on all five columns, and content-independent. It had 4px horizontal
-  padding against the card's 15px and no column gap against the card's
-  15px, which pushed every label right of the data it named (Duration was
-  out by 34px).
-- **The card's two location columns are now equal width.** `flex: 1` with
-  the default `min-width: auto` meant they sized to their content, so the
-  arrival column (long city plus long stop name) took 215px while the
-  departure column got 155px. Beyond breaking any header alignment, this
-  let one long stop name steal width from the other side of the card.
-
-## [1.9.4] - 2026-08-01
-
-### Changed
-
-- **Fare decimals ride as superscript** and the currency is set smaller.
-  On a fare board the cents are almost never what anyone is comparing, and
-  at full size they took a third of the width of the widest thing on the
-  card. Split from obtapi's already-formatted string rather than
-  re-formatted from `price.value`, so the label's own currency and number
-  formatting stay the single source of truth - an unexpected format falls
-  back to rendering the string whole.
-- **The taxes/passenger line is smaller and tucked against the price**,
-  which reads as one unit and frees the room the Select button needed.
-- **Amenities moved into the details row** as its first column, so route,
-  transit and policies sit beside them - four columns instead of a separate
-  full-width band under every card.
-- **Amenities are icon-only on this page**, with the name as a hover
-  tooltip (`compact` on `RouteFeature`). Eight amenities spelled out took
-  more width than everything else in that row put together.
-
-## [1.9.3] - 2026-08-01
-
-### Changed
-
-- **Trip length reads as a duration, not a clock time.** "08:30" sat
-  directly between two real departure times with nothing to say it meant
-  eight and a half hours rather than half past eight. It now renders as
-  `07h 30m` behind an hourglass, and an exact number of hours drops the
-  minutes (`08h`, not `08h 00m`). The unit labels come from the translation
-  files - "h"/"m" are a Latin-script convention, so Greek reads `07ω 30λ`,
-  Bulgarian and Macedonian `07ч 30м`, Albanian `07o 30m`.
-  obtapi's `-` sentinel (no computable duration) still passes straight
-  through rather than becoming a confident "0h 0m".
-- **Stop name down to 12px** on the result cards.
-
-## [1.9.2] - 2026-08-01
-
-### Changed
-
-- **Stop name stepped down to 14px** on the result cards. At the same 16px
-  as body copy it competed with the city name above it; the city should be
-  read first and the stop only when it is needed.
-- **Country code renders upper case and smaller.** It arrives from the
-  database lower case ("alb", "grc") - an ISO country code is upper case by
-  definition, so it is cased at render time rather than left to the data,
-  where every consumer would have to remember.
-
-## [1.9.1] - 2026-08-01
-
-### Changed
-
-- **Filters became a sidebar** at 1280px and up - always visible, sticky
-  while the list scrolls, no click needed to discover them. Below 1280px
-  they stay the collapsible panel above the list. The breakpoint is 1280
-  rather than 1024 because the result cards switch to their wide row layout
-  at 1024px on VIEWPORT width, not container width, so taking a column out
-  of a 1024px window would leave the cards using a layout their remaining
-  space cannot carry.
-- **Facet counts are a filled pill**, separate from the from-price. They
-  used to read as one muted string ("5 · 38.00 EUR") where the two numbers
-  ran together and it was not obvious which was which.
-- **Facet labels wrap instead of truncating.** In a sidebar column an
-  ellipsis reduced two different stops at the same city to the same
-  "Terminali Lindor Inte..." - the one distinction the filter exists to
-  make.
-- **The result-count / sort bar sits on the card surface** rather than
-  floating on the page background.
-
-### Fixed
-
-- Filter panel grid tracks used `1fr`, whose implicit min-width is `auto`,
-  so a long stop name pushed the whole panel wider than its column and
-  pushed the counts and prices out of view entirely. Now `minmax(0, 1fr)`.
-
-## [1.9.0] - 2026-08-01
-
-### Added
-
-- **Sorting on the results list** - recommended, cheapest, fastest,
-  earliest, latest. Preferred-stop pinning stays the outer partition and
-  each side sorts within itself, so choosing "cheapest" can no longer
-  silently un-pin a stop the user saved. Every sort carries a tiebreak on
-  the other axis, so three trips tied on journey time are led by the
-  cheapest of them rather than by whichever happened to come first.
-- **"Recommended" is defined and merit-first**: price rank plus duration
-  rank across the current result set, with the operator's paid subscription
-  priority breaking ties only between trips already equal on both. Paid
-  placement cannot overtake a cheaper or faster competitor. This is a
-  deliberate commercial decision (Ferjolt, 2026-08-01) and it is the answer
-  if anyone asks what the word means on this page. It replaces the previous
-  default, which was obtapi's departure-time order - that view is still one
-  click away as "earliest".
-- **Quick-pick cards** for cheapest / fastest / recommended, each naming
-  the winning fare, journey time and operator, and applying that ordering
-  on click. Computed from the filtered list, so a card never advertises a
-  trip the user's own filters have hidden.
-- **Faceted filters with live counts and a from-price per value** -
-  departure-time bucket, operator, direct-only, departure stop, arrival
-  stop, on-board amenities, and a maximum price. Counts recompute against
-  the *other* active filters, and values that would return nothing render
-  disabled rather than vanishing mid-interaction.
-- **Per-day prices on the date strip**, from obtapi's `from_price` /
-  `from_price_display`. The cheapest day is badged only when the cheap days
-  are a genuine minority - badging six days out of seven trains people to
-  ignore the badge.
-- **Result count and price range** above the list, which also makes it
-  visible when a filter is hiding results.
-- **Collapsed duplicate departures.** Trips from the same operator between
-  the same two stops at the same price and duration render as one card with
-  a departure-time picker instead of a wall of near-identical rows - the
-  shape hourly Albanian intercity service produces. Whatever time is picked
-  is what gets booked.
-- **Price clarity line** under every fare. It states the party size rather
-  than "per adult", because `price.value` is the total for the whole
-  passenger mix, not a per-person fare.
-
-The refinement lives in the URL, so a filtered result set survives a reload
-and can be shared. External-provider offers are never dropped by a facet
-they cannot report (stops, amenities) - a filter that deletes paid partner
-inventory is a revenue bug, not a UI detail.
-
-### Fixed
-
-- **`useGetDates` cache key ignored the search.** It was
-  `['step2-dates', { number }]`, so every city pair and passenger mix shared
-  one cache entry and the strip could show a previous trip's days. Harmless
-  while the strip held only booleans; with per-day prices on it, it would
-  have quoted one route's fares under another route's dates.
-
-## [1.7.0] - 2026-07-30
-
-### Added
-
-- **Per-pair `<title>`/description for `/bus-lines/:from/:to`.** Every
-  route-pair search page previously shared one static generic
-  title/description (`routes_order.title`/`meta.description`) regardless
-  of which cities were being searched - hundreds of near-duplicate-content
-  pages, invisible to search engines as distinct pages, even though
-  obtapi's `Route::linkPurchase()` and the sitemap already point directly
-  at specific pairs. Now resolves `:from`/`:to` against
-  `routes-search`'s own city list (same cached query `<RoutesSearch>`
-  already uses - no extra fetch) and renders real
-  `routes_order.title_pair`/`meta.description_pair` templates (all 15
-  languages) when both resolve, falling back to the generic copy for the
-  bare `/bus-lines` search form.
-
-## [1.6.2] - 2026-07-30
-
-### Fixed
-
-- **The full 9-segment `/bus-lines/:from/:to/:departure/:_return/:type/:adults/:children/:babies`
-  URL only auto-searched if a `?type=submit` query param was also present**
-  (`Step1/Step1.tsx`) - set only when the in-app search form navigated here
-  itself. Every OTHER way of reaching this URL - obtapi's
-  `Route::linkPurchase()` (which generates exactly this path with no query
-  param), a shared link, a search engine crawling it - rendered nothing but
-  the empty search form despite the URL already carrying a complete search
-  spec. Now also auto-searches whenever `:departure` is present in the path,
-  which only the full 9-segment route ever populates.
-
-## [1.6.1] - 2026-07-27
-
-### Added
-
-- **External-provider "Book on {provider}" redirect (Mode A: search +
-  redirect).** `Found/Route/Route.tsx` now detects `data.external?.mode ===
-  'redirect'` (obtapi's `Libraries\External\Search\Merge`) and swaps the
-  usual "Select Route" button for a `t('routes_order.step2.route.book_on')`
-  button that opens the click-out endpoint
-  (`{VITE_API_OBT}/api/external/go/{offer_id}`) in a new tab instead of
-  calling `onSave` - external offers use a synthetic id the local checkout
-  pipeline can't resolve, so "select" is never wired for them. The operator
-  logo and route-code links are also repointed to the same click-out URL
-  (not the raw provider deep link) so every outbound path is logged for the
-  search->click funnel, and the local-only "Read Operator Policy" button is
-  hidden for external rows (no local policy content exists for them).
-  Requires `@autobusal/providers` ^1.3.7.
-
-## [1.6.0] - 2026-07-25
-
-### Added
-
-- **Checkout addon selection (Step5).** Buyers can now add WhatsApp and/or
-  Telegram notification addons at checkout, if the label has them enabled
-  (`SettingsData.addons` from `@autobusal/providers`). WhatsApp collects a
-  phone number inline; Telegram is a "connect after purchase" flow (a bot
-  can't message a bare phone number cold). Selected addons render as line
-  items in the order summary and are folded into the grand total shown
-  before payment - pricing/availability is re-verified server-side, this is
-  only what the buyer requests. `usePostOrder` now takes an `AddonsSelection`
-  and posts `addon_whatsapp`/`addon_whatsapp_number`/`addon_telegram`.
-
-## [1.5.0] - 2026-07-25
-
-### Added
-
-- **Per-route passenger details in Step4.** The passenger form now renders
-  sex, passport, phone, and the new WhatsApp/Telegram contact fields ONLY
-  when the route's `trip.passenger_fields` requires them (then required);
-  name and date of birth stay always-mandatory. A return trip uses the
-  union of both legs' configs. Routes without a config keep the pre-feature
-  form (sex + passport). Request field suffixes: `_wa`, `_tg`.
-
-## [1.4.2] - 2026-07-19
-
-### Added
-
-- `Found/Route/Route.tsx`: added a neutral inline SVG data-URI `LOGO_FALLBACK`.
-  The operator logo `<img>` now falls back to it when `logo_url` is empty
-  (`data.operator.logo_url || LOGO_FALLBACK`) and via an `onError` handler
-  (which nulls `onerror` first to avoid a loop), so a missing or broken operator
-  logo no longer renders the browser's broken-image icon in route results.
-
-### Fixed
-
-- `Found/Orders/Orders.tsx`: the not-found branch now triggers on
-  `data === undefined || data.length === 0` instead of only `data?.length == 0`.
-  An `undefined` result means the search errored (e.g. same origin and
-  destination), and it now shows the not-found message instead of an empty
-  shell.
-- `Found/Booking/Booking.tsx`: the Booking.com logo `<img>` now has an
-  `alt="Booking.com"` attribute, giving the image an accessible name.
-- `Found/Route/Route.tsx`: the operator logo `<img>` now has an `alt` attribute
-  set to the operator company name.
-
-### Security
-
-- `Found/Booking/Booking.tsx`: the `LinkBooking` external link
-  (`target="_blank"`) now includes `rel="noopener noreferrer"`, closing the
-  reverse-tabnabbing / `window.opener` leak.
-- `Found/Route/Route.tsx`: the operator `LinkCompany` and route `LinkRoute`
-  external links (`target="_blank"`) now include `rel="noopener noreferrer"` for
-  the same tabnabbing protection.
-
-Authored by Ferjolt Ozuni. Consolidated from the magus and alvavel whitelabel patch sets into canonical @autobusal source (eliminates per-repo patch-package divergence).