feat: add MFA/TOTP auth, PII encryption, agents/leads/inquiries modules, and comprehensive tests

- Add TOTP-based MFA with setup, verify, disable, backup codes, and challenge flow
- Add PII field encryption middleware with AES-256-GCM and deterministic search hashes
- Add agents, inquiries, and leads domain modules with entities, events, value objects
- Add web dashboard pages for inquiries and leads with detail dialogs
- Add 30+ component tests (valuation, charts, listings, search, providers, UI)
- Add Prisma migrations for encryption hash columns and MFA TOTP support
- Fix all ESLint errors (unused imports, duplicate imports, lint auto-fixes)
- Update dependencies and lock file
- Clean up obsolete exploration/QA docs, add audit documentation

Co-Authored-By: Paperclip <noreply@paperclip.ing>

apps/web/components/ui/__tests__/language-switcher.spec.tsx

@@ -0,0 +1,66 @@
+import { render, screen } from '@testing-library/react';
+import userEvent from '@testing-library/user-event';
+import { describe, expect, it, vi } from 'vitest';
+import { LanguageSwitcher } from '../language-switcher';
+
+// Mock next-intl
+vi.mock('next-intl', () => ({
+  useLocale: () => 'vi',
+  useTranslations: () => (key: string) => {
+    const translations: Record<string, string> = {
+      label: 'Ngôn ngữ',
+      vi: 'Tiếng Việt',
+      en: 'English',
+    };
+    return translations[key] ?? key;
+  },
+}));
+
+// Mock i18n navigation
+const mockReplace = vi.fn();
+vi.mock('@/i18n/navigation', () => ({
+  useRouter: () => ({
+    replace: mockReplace,
+  }),
+  usePathname: () => '/search',
+}));
+
+describe('LanguageSwitcher', () => {
+  beforeEach(() => {
+    mockReplace.mockClear();
+  });
+
+  it('renders a button', () => {
+    render(<LanguageSwitcher />);
+    expect(screen.getByRole('button')).toBeInTheDocument();
+  });
+
+  it('has correct aria-label', () => {
+    render(<LanguageSwitcher />);
+    expect(screen.getByRole('button')).toHaveAttribute(
+      'aria-label',
+      expect.stringContaining('Ngôn ngữ'),
+    );
+  });
+
+  it('shows next locale label (EN when current is VI)', () => {
+    render(<LanguageSwitcher />);
+    // The button should display the label for "en" since current is "vi"
+    expect(screen.getByText(/EN/)).toBeInTheDocument();
+  });
+
+  it('calls router.replace when clicked', async () => {
+    const user = userEvent.setup();
+    render(<LanguageSwitcher />);
+
+    await user.click(screen.getByRole('button'));
+    expect(mockReplace).toHaveBeenCalledWith('/search', { locale: 'en' });
+  });
+
+  it('has screen reader text', () => {
+    render(<LanguageSwitcher />);
+    const srText = document.querySelector('.sr-only');
+    expect(srText).toBeInTheDocument();
+    expect(srText).toHaveTextContent('English');
+  });
+});

apps/web/components/ui/__tests__/tabs.spec.tsx

@@ -0,0 +1,117 @@
+import { render, screen } from '@testing-library/react';
+import userEvent from '@testing-library/user-event';
+import { describe, expect, it, vi } from 'vitest';
+import { Tabs, TabsList, TabsTrigger, TabsContent } from '../tabs';
+
+describe('Tabs', () => {
+  it('renders the active tab content', () => {
+    render(
+      <Tabs value="tab1" onValueChange={vi.fn()}>
+        <TabsList>
+          <TabsTrigger value="tab1">Tab 1</TabsTrigger>
+          <TabsTrigger value="tab2">Tab 2</TabsTrigger>
+        </TabsList>
+        <TabsContent value="tab1">Content 1</TabsContent>
+        <TabsContent value="tab2">Content 2</TabsContent>
+      </Tabs>,
+    );
+
+    expect(screen.getByText('Content 1')).toBeInTheDocument();
+    expect(screen.queryByText('Content 2')).not.toBeInTheDocument();
+  });
+
+  it('hides inactive tab content', () => {
+    render(
+      <Tabs value="tab2" onValueChange={vi.fn()}>
+        <TabsList>
+          <TabsTrigger value="tab1">Tab 1</TabsTrigger>
+          <TabsTrigger value="tab2">Tab 2</TabsTrigger>
+        </TabsList>
+        <TabsContent value="tab1">Content 1</TabsContent>
+        <TabsContent value="tab2">Content 2</TabsContent>
+      </Tabs>,
+    );
+
+    expect(screen.queryByText('Content 1')).not.toBeInTheDocument();
+    expect(screen.getByText('Content 2')).toBeInTheDocument();
+  });
+
+  it('calls onValueChange when a trigger is clicked', async () => {
+    const onValueChange = vi.fn();
+    render(
+      <Tabs value="tab1" onValueChange={onValueChange}>
+        <TabsList>
+          <TabsTrigger value="tab1">Tab 1</TabsTrigger>
+          <TabsTrigger value="tab2">Tab 2</TabsTrigger>
+        </TabsList>
+        <TabsContent value="tab1">Content 1</TabsContent>
+        <TabsContent value="tab2">Content 2</TabsContent>
+      </Tabs>,
+    );
+
+    await userEvent.click(screen.getByText('Tab 2'));
+    expect(onValueChange).toHaveBeenCalledWith('tab2');
+  });
+
+  it('renders all trigger buttons', () => {
+    render(
+      <Tabs value="tab1" onValueChange={vi.fn()}>
+        <TabsList>
+          <TabsTrigger value="tab1">First</TabsTrigger>
+          <TabsTrigger value="tab2">Second</TabsTrigger>
+          <TabsTrigger value="tab3">Third</TabsTrigger>
+        </TabsList>
+        <TabsContent value="tab1">C1</TabsContent>
+        <TabsContent value="tab2">C2</TabsContent>
+        <TabsContent value="tab3">C3</TabsContent>
+      </Tabs>,
+    );
+
+    expect(screen.getByText('First')).toBeInTheDocument();
+    expect(screen.getByText('Second')).toBeInTheDocument();
+    expect(screen.getByText('Third')).toBeInTheDocument();
+  });
+
+  it('applies active styles to selected trigger', () => {
+    render(
+      <Tabs value="tab1" onValueChange={vi.fn()}>
+        <TabsList>
+          <TabsTrigger value="tab1" data-testid="trigger-1">Tab 1</TabsTrigger>
+          <TabsTrigger value="tab2" data-testid="trigger-2">Tab 2</TabsTrigger>
+        </TabsList>
+        <TabsContent value="tab1">Content</TabsContent>
+      </Tabs>,
+    );
+
+    expect(screen.getByTestId('trigger-1')).toHaveClass('bg-background');
+    expect(screen.getByTestId('trigger-2')).not.toHaveClass('bg-background');
+  });
+
+  it('applies custom className to TabsList', () => {
+    render(
+      <Tabs value="tab1" onValueChange={vi.fn()}>
+        <TabsList className="custom-list" data-testid="list">
+          <TabsTrigger value="tab1">Tab 1</TabsTrigger>
+        </TabsList>
+        <TabsContent value="tab1">Content</TabsContent>
+      </Tabs>,
+    );
+
+    expect(screen.getByTestId('list')).toHaveClass('custom-list');
+  });
+
+  it('applies custom className to TabsContent', () => {
+    render(
+      <Tabs value="tab1" onValueChange={vi.fn()}>
+        <TabsList>
+          <TabsTrigger value="tab1">Tab 1</TabsTrigger>
+        </TabsList>
+        <TabsContent value="tab1" className="custom-content" data-testid="content">
+          Content
+        </TabsContent>
+      </Tabs>,
+    );
+
+    expect(screen.getByTestId('content')).toHaveClass('custom-content');
+  });
+});