refactor: full codebase overhaul — dead code removal, env validation, logger migration, date consolidation, Prisma schema cleanup, button consistency, useEffect deps, test coverage

- env.ts: added 10 missing Zod-validated env vars (imager, paypal currency, argon2/bcrypt params)
- Migrated 6 modules from process.env to validated env.* (auth, proxy-auth, paypal, password, redis, imager, moderation, alert, logger)
- Replaced console.warn/error with pino logger in 9 server-side modules
- Removed 50+ dead exports (SWF wrappers, coalesceHotelName, signIn, isStaff re-export, formatTimestamp, Skeleton/SkeletonCard, 4 unused housekeeping sections)
- Consolidated date formatting: 28 files migrated to shared formatDate() from @/lib/format-date
- Wired 4 radio/settings API routes through cached siteSettings service instead of raw Prisma queries
- Added getMany()/getAll() helpers to SiteSettings service
- Removed 88 dead Prisma model definitions (schema 2763→1846 lines)
- Created admin action-helper.ts with wrapAction() for standardized error handling
- Fixed useEffect dependency arrays in 4 data-heavy components
- Replaced raw btn CSS classes with shadcn Button component across admin pages
- Stripped dead i18n namespaces (common, pages.client) from all 22 translation files
- Removed 2 dead scripts (create-release.sh, check-local-imports.ts)
- Fixed knip.json configuration
- Added 7 new test suites: format-date, paypal, moderation, alert, webhook, action-helper, and fixed password.test.ts for env mocking
- All 358 tests passing across 72 test files
- TypeScript: 0 errors

src/lib/services/moderation.test.ts

@@ -0,0 +1,56 @@
+import { describe, expect, it, vi, beforeEach } from "vitest";
+
+const findMany = vi.hoisted(() => vi.fn());
+
+vi.mock("@/lib/prisma", () => ({
+	prisma: { websiteWordfilter: { findMany } },
+}));
+
+vi.mock("@/env", () => ({
+	env: {
+		OPENAI_API_KEY: undefined,
+	},
+}));
+
+import { isAllowed, moderateOrThrow, reloadWordFilter } from "./moderation";
+
+beforeEach(() => {
+	findMany.mockReset();
+	reloadWordFilter();
+});
+
+describe("moderation", () => {
+	it("allows clean text", async () => {
+		findMany.mockResolvedValue([{ word: "badword" }]);
+		const result = await isAllowed("hello world");
+		expect(result).toEqual({ ok: true });
+	});
+
+	it("blocks text containing a filtered word", async () => {
+		findMany.mockResolvedValue([{ word: "badword" }]);
+		const result = await isAllowed("this contains badword here");
+		expect(result).toEqual({ ok: false, reason: 'Blocked by word filter: "badword"' });
+	});
+
+	it("allows empty text", async () => {
+		const result = await isAllowed("");
+		expect(result).toEqual({ ok: true });
+	});
+
+	it("caches the word list and respects TTL", async () => {
+		findMany.mockResolvedValue([{ word: "first" }]);
+		await isAllowed("test");
+		await isAllowed("test");
+		expect(findMany).toHaveBeenCalledTimes(1);
+	});
+
+	it("moderateOrThrow throws on blocked content", async () => {
+		findMany.mockResolvedValue([{ word: "bad" }]);
+		await expect(moderateOrThrow("this is bad")).rejects.toThrow("Blocked by word filter");
+	});
+
+	it("moderateOrThrow resolves on clean content", async () => {
+		findMany.mockResolvedValue([{ word: "bad" }]);
+		await expect(moderateOrThrow("clean text")).resolves.toBeUndefined();
+	});
+});