Fix CSP violations and ignoreAvailable reference error

- Add .hidden utility class to style.css for CSP compliance
- Replace all inline style='display: none' with class='hidden' in HTML
- Update all UI modules to use classList.add/remove instead of style.display
- Fix ignoreAvailable reference error in history.js (use state.ignoreAvailable)
- Rebuild client bundle with vite

client/src/ui/webhooks.js

@@ -22,7 +22,11 @@ export function toggleWebhookSection() {
   const content = document.getElementById('webhooks-content');
   const toggle = document.getElementById('webhooks-toggle');
   
-  content.style.display = state.webhookSectionExpanded ? '' : 'none';
+  if (state.webhookSectionExpanded) {
+    content.classList.remove('hidden');
+  } else {
+    content.classList.add('hidden');
+  }
   toggle.classList.toggle('expanded', state.webhookSectionExpanded);
   
   if (state.webhookSectionExpanded) {
@@ -32,7 +36,7 @@ export function toggleWebhookSection() {
 
 export async function fetchWebhookStatus() {
   const loadingEl = document.getElementById('webhook-loading');
-  loadingEl.style.display = '';
+  loadingEl.classList.remove('hidden');
   
   try {
     const result = await apiFetchWebhookStatus();
@@ -42,7 +46,7 @@ export async function fetchWebhookStatus() {
   } catch (err) {
     console.error('Failed to fetch webhook status:', err);
   } finally {
-    loadingEl.style.display = 'none';
+    loadingEl.classList.add('hidden');
   }
 }
 
@@ -56,9 +60,15 @@ export function renderWebhookStatus() {
   
   sonarrStatus.textContent = sonarrWebhook.enabled ? '● Enabled' : '○ Disabled';
   sonarrStatus.className = 'status-indicator ' + (sonarrWebhook.enabled ? 'enabled' : 'disabled');
-  sonarrEnableBtn.style.display = sonarrWebhook.enabled ? 'none' : '';
-  sonarrTestBtn.style.display = sonarrWebhook.enabled ? '' : 'none';
-  sonarrTriggers.style.display = sonarrWebhook.enabled ? '' : 'none';
+  if (sonarrWebhook.enabled) {
+    sonarrEnableBtn.classList.add('hidden');
+    sonarrTestBtn.classList.remove('hidden');
+    sonarrTriggers.classList.remove('hidden');
+  } else {
+    sonarrEnableBtn.classList.remove('hidden');
+    sonarrTestBtn.classList.add('hidden');
+    sonarrTriggers.classList.add('hidden');
+  }
   
   if (sonarrWebhook.enabled) {
     document.getElementById('sonarr-onGrab').textContent = sonarrWebhook.triggers.onGrab ? '✓' : '✗';
@@ -72,12 +82,12 @@ export function renderWebhookStatus() {
   }
   
   if (sonarrWebhook.stats) {
-    sonarrStats.style.display = '';
+    sonarrStats.classList.remove('hidden');
     document.getElementById('sonarr-events').textContent = sonarrWebhook.stats.eventsReceived ?? 0;
     document.getElementById('sonarr-polls').textContent = sonarrWebhook.stats.pollsSkipped ?? 0;
     document.getElementById('sonarr-last').textContent = formatTimeAgo(sonarrWebhook.stats.lastWebhookTimestamp);
   } else {
-    sonarrStats.style.display = 'none';
+    sonarrStats.classList.add('hidden');
   }
   
   // Radarr
@@ -89,9 +99,15 @@ export function renderWebhookStatus() {
   
   radarrStatus.textContent = radarrWebhook.enabled ? '● Enabled' : '○ Disabled';
   radarrStatus.className = 'status-indicator ' + (radarrWebhook.enabled ? 'enabled' : 'disabled');
-  radarrEnableBtn.style.display = radarrWebhook.enabled ? 'none' : '';
-  radarrTestBtn.style.display = radarrWebhook.enabled ? '' : 'none';
-  radarrTriggers.style.display = radarrWebhook.enabled ? '' : 'none';
+  if (radarrWebhook.enabled) {
+    radarrEnableBtn.classList.add('hidden');
+    radarrTestBtn.classList.remove('hidden');
+    radarrTriggers.classList.remove('hidden');
+  } else {
+    radarrEnableBtn.classList.remove('hidden');
+    radarrTestBtn.classList.add('hidden');
+    radarrTriggers.classList.add('hidden');
+  }
   
   if (radarrWebhook.enabled) {
     document.getElementById('radarr-onGrab').textContent = radarrWebhook.triggers.onGrab ? '✓' : '✗';
@@ -105,12 +121,12 @@ export function renderWebhookStatus() {
   }
   
   if (radarrWebhook.stats) {
-    radarrStats.style.display = '';
+    radarrStats.classList.remove('hidden');
     document.getElementById('radarr-events').textContent = radarrWebhook.stats.eventsReceived ?? 0;
     document.getElementById('radarr-polls').textContent = radarrWebhook.stats.pollsSkipped ?? 0;
     document.getElementById('radarr-last').textContent = formatTimeAgo(radarrWebhook.stats.lastWebhookTimestamp);
   } else {
-    radarrStats.style.display = 'none';
+    radarrStats.classList.add('hidden');
   }
 }
 
@@ -188,5 +204,10 @@ export function setWebhookLoading(loading) {
   document.getElementById('enable-radarr-webhook').disabled = loading;
   document.getElementById('test-sonarr-webhook').disabled = loading;
   document.getElementById('test-radarr-webhook').disabled = loading;
-  document.getElementById('webhook-loading').style.display = loading ? '' : 'none';
+  const loadingEl = document.getElementById('webhook-loading');
+  if (loading) {
+    loadingEl.classList.remove('hidden');
+  } else {
+    loadingEl.classList.add('hidden');
+  }
 }