@arcforgelabs/flow 2026.10.39 → 2026.10.41

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@arcforgelabs/flow",
-  "version": "2026.10.39",
+  "version": "2026.10.41",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@arcforgelabs/flow",
-      "version": "2026.10.39",
+      "version": "2026.10.41",
       "license": "MIT",
       "dependencies": {
         "@clerk/backend": "3.25.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arcforgelabs/flow",
-  "version": "2026.10.39",
+  "version": "2026.10.41",
   "description": "Invoicing, bill entry and a financial dashboard for labs, with Seazona and Xero integrations.",
   "license": "MIT",
   "repository": {

package/server/core/job-match.js

@@ -97,6 +97,8 @@ export async function listReconcile(db, organisationId) {
     practitioner: billingObligations.practitioner,
     jobDate: billingObligations.jobDate,
     totalCents: billingObligations.totalCents,
+    // An unclear accounting match: "Make invoice" settles it first.
+    unclear: sql`${billingObligations.accountingState} = 'ambiguous'`.mapWith(Boolean),
     possible: sql`(select count(*) from invoices i
       where i.organisation_id = ${billingObligations.organisationId} and i.contact_id = ${billingObligations.contactId}
         and i.status <> 'void' and i.total_cents = ${billingObligations.totalCents}

package/server/integrations/call-guard.js

@@ -9,7 +9,10 @@ import { sql } from 'drizzle-orm';
 //   - a refused credential halts every call until a person acts (saves the
 //     settings or connects again, which calls resume());
 //   - a 401 or 403 on one resource, when the adapter's auth failures stop a
-//     resource only, stops that resource until a person acts;
+//     resource only, stops that resource; after `resourceRetryMs` one probe
+//     call may go, and a refused probe stops it again for twice as long, to
+//     at most `maxResourceRetryMs`. A good call, or a person connecting
+//     again, starts it again;
 //   - `circuitFailures` failed calls inside `circuitWindowMs` open the
 //     circuit: no call for `circuitPauseMs`, then a probe; a failed probe opens
 //     it again for twice as long, to at most `maxCircuitPauseMs`, and a
@@ -34,6 +37,8 @@ export const CALL_GUARD_POLICY = Object.freeze({
   // 'all': a 401 or 403 halts every call. 'resource': it stops only the
   // resource it came from; halt() still stops everything.
   authStops: 'all',
+  resourceRetryMs: 6 * 60 * 60_000,
+  maxResourceRetryMs: 24 * 60 * 60_000,
   telemetryRetentionMs: 35 * 24 * 60 * 60_000,
 });
 
@@ -68,12 +73,31 @@ export function circuitPauseMs(opens, policy = CALL_GUARD_POLICY) {
   return Math.min(policy.maxCircuitPauseMs, policy.circuitPauseMs * 2 ** Math.min(Math.max(0, opens), 10));
 }
 
+// The wait before the next probe of a stopped resource, after `probes`
+// refused probes.
+export function resourceRetryMs(probes, policy = CALL_GUARD_POLICY) {
+  return Math.min(policy.maxResourceRetryMs, policy.resourceRetryMs * 2 ** Math.min(Math.max(0, probes), 10));
+}
+
+// When a stopped resource may be probed again (ms). An entry written before
+// probes existed has no `retryAt`: it is due `resourceRetryMs` after `at`.
+export function resourceRetryAt(entry, policy = CALL_GUARD_POLICY) {
+  const due = entry?.retryAt ? new Date(entry.retryAt).getTime() : NaN;
+  if (Number.isFinite(due)) return due;
+  const at = entry?.at ? new Date(entry.at).getTime() : NaN;
+  return Number.isFinite(at) ? at + resourceRetryMs(0, policy) : Infinity;
+}
+
 // Why no call may go now, or null. `state` is the guard row
 // ({ haltedReason, circuitOpenUntil, stoppedResources }); `failedToday`
 // counts failed calls since the start of the UTC day.
 export function stoppedReason(state, { nowMs, failedToday, resource = null }, policy = CALL_GUARD_POLICY) {
   if (state?.haltedReason) return { reason: 'halted', retryAfterMs: null };
-  if (resource && state?.stoppedResources?.[resource]) return { reason: 'resource_stopped', retryAfterMs: null, resource };
+  const entry = resource ? state?.stoppedResources?.[resource] : null;
+  if (entry) {
+    const due = resourceRetryAt(entry, policy);
+    if (due > nowMs) return { reason: 'resource_stopped', retryAfterMs: due - nowMs, resource };
+  }
   const openUntil = state?.circuitOpenUntil ? new Date(state.circuitOpenUntil).getTime() : 0;
   if (openUntil > nowMs) return { reason: 'circuit_open', retryAfterMs: openUntil - nowMs };
   const dayStart = startOfUtcDay(nowMs);
@@ -95,7 +119,7 @@ export function circuitAfterFailure(state, { nowMs, recentFailures }, policy = C
 
 const STOP_TEXT = {
   halted: (name) => `${name} calls are stopped until a person checks the connection (it was refused)`,
-  resource_stopped: (name, resource) => `${name} calls to ${resource} are stopped until a person checks the connection (they were refused)`,
+  resource_stopped: (name, resource) => `${name} calls to ${resource} are stopped (they were refused); Flow tries again later by itself`,
   circuit_open: (name) => `${name} calls are paused after repeated failures`,
   budget_spent: (name) => `${name} calls are stopped for today: the day's failed calls are spent`,
 };
@@ -138,12 +162,14 @@ export function guardAlerts(name, status, { fix = 'Check the connection, then co
       members: [`halted:${status.haltedAt ?? ''}`],
     });
   }
+  // One refused resource is a warning, not a stop: every other call still
+  // goes, and Flow probes the resource again by itself.
   const resources = status?.stoppedResources ?? [];
   if (resources.length) {
     alerts.push({
       id: 'resources-stopped',
-      tone: 'danger',
-      title: `${name} refused Flow for ${resources.map((r) => r.resource).join(', ')}. Flow stopped those calls. ${fix}`,
+      tone: 'warn',
+      title: `${name} refused Flow for ${resources.map((r) => r.resource).join(', ')}. Other ${name} calls still work. Flow tries again by itself. To fix it now, connect again.`,
       members: resources.map((r) => `${r.resource}:${r.at ?? ''}`),
     });
   }
@@ -233,7 +259,8 @@ export function createCallGuard({
   }
 
   // Records how one call ended, and what that does to the guard. Answers
-  // what this call stopped ({ halted, resourceStopped, opened, budgetSpent }),
+  // what this call changed ({ halted, resourceStopped, resourceStillStopped,
+  // resourceResumed, opened, closed, budgetSpent }),
   // each of which was just reported once. `callId` names a call row the
   // adapter wrote when it admitted the call: that row is updated, not added.
   async function record(rawKey, { callId = null, resource = null, path = null, statusCode = null, failureKind = null, durationMs = null } = {}) {
@@ -256,22 +283,35 @@ export function createCallGuard({
       }
       const state = await readState(tx, key);
       if (!countsAsFailure({ statusCode: status, failureKind })) {
+        const result = {};
+        // A good probe: the resource is allowed again.
+        if (where && state.stoppedResources[where] && status !== null && status < 400) {
+          await tx.execute(sql`update ${T.state} set stopped_resources = stopped_resources - ${where}, updated_at = ${nowAt} where ${C.key} = ${key}`);
+          result.resourceResumed = where;
+        }
         if (state.circuitOpens > 0) {
           await tx.execute(sql`update ${T.state} set circuit_opens = 0, updated_at = ${nowAt} where ${C.key} = ${key}`);
-          return { closed: true };
+          result.closed = true;
         }
-        return {};
+        return result;
       }
       const result = {};
       const dayStart = startOfUtcDay(nowMs);
       if (await failuresSince(tx, key, dayStart) === policy.dailyFailureBudget) result.budgetSpent = { until: new Date(dayStart + DAY_MS).toISOString() };
       if (isAuthRefusal(status)) {
         if (policy.authStops === 'resource' && where) {
-          if (!state.stoppedResources[where]) {
-            await tx.execute(sql`update ${T.state} set stopped_resources = stopped_resources || ${JSON.stringify({ [where]: { statusCode: status, at: nowAt.toISOString() } })}::jsonb,
-              updated_at = ${nowAt} where ${C.key} = ${key}`);
-            result.resourceStopped = where;
-          }
+          const before = state.stoppedResources[where];
+          const probes = before ? (Number(before.probes) || 0) + 1 : 0;
+          const entry = {
+            statusCode: status,
+            at: before?.at ?? nowAt.toISOString(),
+            probes,
+            retryAt: new Date(nowMs + resourceRetryMs(probes, policy)).toISOString(),
+          };
+          await tx.execute(sql`update ${T.state} set stopped_resources = stopped_resources || ${JSON.stringify({ [where]: entry })}::jsonb,
+            updated_at = ${nowAt} where ${C.key} = ${key}`);
+          if (before) result.resourceStillStopped = { resource: where, retryAt: entry.retryAt };
+          else result.resourceStopped = where;
           return result;
         }
         if (!state.haltedReason) {
@@ -301,7 +341,9 @@ export function createCallGuard({
     if (!reports) return;
     const cause = status ? `HTTP ${status}` : failureKind;
     if (outcome.halted) log.error?.(`${tag} ${name} refused the connection (${cause}). Calls are stopped until a person checks the ${name} settings or connects again.`);
-    if (outcome.resourceStopped) log.error?.(`${tag} ${name} refused calls to ${where} (${cause}). Calls to ${where} are stopped until a person checks the connection.`);
+    if (outcome.resourceStopped) log.error?.(`${tag} ${name} refused calls to ${where} (${cause}). Calls to ${where} are stopped; Flow tries again by itself, or a person connects again.`);
+    if (outcome.resourceStillStopped) log.warn?.(`${tag} ${name} still refuses calls to ${where} (${cause}). Flow tries again at ${outcome.resourceStillStopped.retryAt}.`);
+    if (outcome.resourceResumed) log.info?.(`${tag} ${name} allows calls to ${outcome.resourceResumed} again.`);
     if (outcome.opened) {
       const line = `${tag} ${name} calls failed repeatedly (last: ${cause}${where ? ` on ${where}` : ''}). Calls pause until ${outcome.opened.until}.`;
       if (outcome.opened.opens === 1) log.error?.(line);
@@ -352,7 +394,7 @@ export function createCallGuard({
       circuitOpenUntil: openUntil > nowMs ? iso(openUntil) : null,
       haltedReason: state.haltedReason,
       haltedAt: iso(state.haltedAt),
-      stoppedResources: Object.entries(state.stoppedResources).map(([resource, entry]) => ({ resource, ...entry })),
+      stoppedResources: Object.entries(state.stoppedResources).map(([resource, entry]) => ({ resource, ...entry, retryAt: Number.isFinite(resourceRetryAt(entry, policy)) ? iso(resourceRetryAt(entry, policy)) : null })),
       failedToday: await failuresSince(db, key, startOfUtcDay(nowMs)),
       dailyFailureBudget: policy.dailyFailureBudget,
     };

package/server/integrations/xero/settings.js

@@ -27,7 +27,8 @@ export const XERO_ENDPOINTS = Object.freeze({
 });
 
 export const XERO_CALLBACK_PATH = '/api/xero/oauth/callback';
-export const DEFAULT_XERO_SCOPE = 'offline_access accounting.contacts accounting.invoices accounting.settings.read';
+// accounting.payments.read: Flow reads payments back (ledger.js, mirror.js).
+export const DEFAULT_XERO_SCOPE = 'offline_access accounting.contacts accounting.invoices accounting.payments.read accounting.settings.read';
 export const DEFAULT_XERO_DAY_LIMIT = 1000;
 export const DEFAULT_DUE_DAYS = 30;
 export const DEFAULT_MIRROR_PAGE_SIZE = 200;

package/server/ui/app.js

@@ -1001,16 +1001,20 @@ function xeroConnection(organisations, canChange) {
       let hint;
       let control = null;
       let stopped = false;
+      let refused = false;
       try {
         const status = await flow(`/api/xero/status?organisationId=${organisation.id}`);
         if (status.connected && status.calls?.stopped) {
           // A refused connection stopped calls (the call guard): say so, and
           // make Connect again the main button, which starts them again.
           const at = status.calls.since ? ` at ${new Date(status.calls.since).toLocaleString('en-AU', { dateStyle: 'medium', timeStyle: 'short' })}` : '';
+          // One refused resource stops only that resource, and Flow tries it
+          // again by itself: a calm note, not a stop.
           hint = status.calls.all
             ? `Xero refused Flow${at}. Flow stopped all calls.`
-            : `Xero refused Flow for ${status.calls.resources.join(', ')}${at}. Flow stopped those calls.`;
-          stopped = true;
+            : `Connected. Xero refused Flow for ${status.calls.resources.join(', ')}${at}. Other calls still work. Flow tries again by itself.`;
+          stopped = status.calls.all;
+          refused = !status.calls.all;
         } else if (status.connected) {
           const mirror = await flow(`/api/xero/mirror?organisationId=${organisation.id}`).catch(() => null);
           hint = `Connected to ${status.connection?.tenantName ?? 'Xero'}.${mirror ? ` ${mirror.counts.invoices} invoices copied.` : ''}`;
@@ -1018,7 +1022,7 @@ function xeroConnection(organisations, canChange) {
           hint = 'Not connected.';
         }
         if (canChange) {
-          control = h('button', { class: `fx-btn fx-btn--sm${status.connected && !stopped ? '' : ' fx-btn--primary'}`, type: 'button', onclick: async () => {
+          control = h('button', { class: `fx-btn fx-btn--sm${status.connected && !stopped && !refused ? '' : ' fx-btn--primary'}`, type: 'button', onclick: async () => {
             try {
               const { authorizeUrl } = await flow('/api/xero/connect', { method: 'POST', body: JSON.stringify({ organisationId: organisation.id }) });
               location.assign(authorizeUrl);

package/server/ui/flow.css

@@ -387,9 +387,6 @@ a.fx-strong:hover { text-decoration: underline; }
 .fx-tabs button[aria-selected="true"] { color: var(--t-strong); border-bottom-color: var(--t-brand); }
 .fx-tabs__count { padding: 0 7px; border-radius: 999px; background: var(--fx-hover); color: var(--t-dim); font-size: 12px; line-height: 20px; }
 .fx-tabs button[data-tone="danger"] .fx-tabs__count { background: var(--t-danger-bg); color: var(--t-danger); }
-/* Invoices: the Send all ready bar above the Ready list. */
-.fx-sendbar { display: flex; align-items: center; justify-content: space-between; gap: 12px; flex-wrap: wrap; margin: 0 0 12px; padding: 12px 16px; border: 1px solid var(--fx-line); border-radius: 8px; background: var(--t-paper); margin-top: 12px; }
-.fx-sendbar[hidden] { display: none; }
 
 /* Quiet alerts (server/ui/alerts.js): one slim line under the page header,
    only while something on the page needs this person. */
@@ -409,9 +406,7 @@ a.fx-strong:hover { text-decoration: underline; }
   .fx-alerts__text { flex-basis: calc(100% - 52px); }
   .fx-alerts__action, .fx-alerts__more { order: 2; }
 }
-.fx-sendbar p { margin: 0; }
 .fx-problem { color: var(--t-danger); }
-.fx-sendbar__actions { display: flex; flex-wrap: wrap; gap: 8px; }
 .fx-tick-cell { width: 40px; }
 .fx-tick { width: 16px; height: 16px; accent-color: var(--t-brand); cursor: pointer; }
 .fx-search { width: min(320px, 100%); margin-bottom: 8px; }
@@ -705,26 +700,15 @@ th:hover .fx-th-sort, .fx-th-sort:focus-visible, .fx-th-sort--on { opacity: 1; }
 .fx-task__none { display: inline-flex; align-items: center; gap: 6px; color: var(--t-warn); }
 .fx-task__none svg { width: 16px; height: 16px; }
 
-/* Reconcile: the queue left, one job and its possible invoices right. */
-.fx-rec { display: grid; grid-template-columns: 280px minmax(0, 1fr); border: 1px solid var(--fx-line); border-radius: var(--t-radius-lg); background: var(--t-paper); min-height: 420px; }
-.fx-rec > .fx-empty, .fx-rec > .fx-dim { grid-column: 1 / -1; }
-.fx-rec__queue { display: flex; flex-direction: column; border-right: 1px solid var(--fx-line); max-height: 75vh; overflow-y: auto; }
-.fx-rec__tabs { display: flex; flex-wrap: wrap; gap: 6px; padding: 12px 16px; border-bottom: 1px solid var(--fx-line); }
-.fx-rec__tab { display: inline-flex; align-items: center; min-height: 32px; padding: 0 10px; border: 1px solid var(--fx-line); border-radius: 999px; color: var(--t-text); font-size: 12.5px; font-weight: 600; text-decoration: none; }
-.fx-rec__tab[aria-selected="true"] { border-color: var(--t-primary); background: var(--t-primary); color: var(--t-on-primary); }
-.fx-rec__search { width: 100%; min-width: 0; }
+/* Reconcile (reconcile.js): the list, as Jobs and Invoices; one gap, as an
+   invoice opened from Invoices (the pager on top). */
+.fx-rec { display: flex; flex-direction: column; gap: 16px; min-width: 0; }
+.fx-rec .fx-lucide { width: 16px; height: 16px; }
+.fx-rec__gap { max-width: 1180px; }
+.fx-rec__gap .fx-toolbar .fx-rows__title { margin: 0; }
+.fx-rec__gap .fx-ph__actions .fx-btn, .fx-rec__acts .fx-btn { display: inline-flex; align-items: center; justify-content: center; gap: 6px; }
 .fx-rec__results { display: flex; flex-direction: column; gap: 16px; min-width: 0; }
-.fx-rec__item { display: grid; gap: 3px; min-height: 44px; padding: 12px 16px; border-bottom: 1px solid var(--fx-line-soft); border-left: 3px solid transparent; color: var(--t-text); text-decoration: none; }
-.fx-rec__item:hover { background: var(--fx-hover); }
-.fx-rec__item[aria-current="true"] { border-left-color: var(--t-accent); background: var(--t-s1); }
-.fx-rec__item-top { display: flex; justify-content: space-between; gap: 8px; }
-.fx-rec__item .fx-num { font-family: var(--t-data); font-variant-numeric: tabular-nums; }
-.fx-rec__detail { display: flex; flex-direction: column; gap: 16px; min-width: 0; padding: 20px 24px; }
-.fx-rec__head { display: flex; justify-content: space-between; align-items: flex-end; gap: 16px; flex-wrap: wrap; }
-.fx-rec__head > div { display: grid; gap: 2px; }
-.fx-rec__back { display: none; color: var(--t-accent); text-decoration: none; font-size: 13px; }
-.fx-rec__title { margin: 0; font-family: var(--t-display); font-weight: var(--t-display-weight); color: var(--t-strong); font-size: 24px; }
-.fx-rec__table { display: grid; grid-template-columns: 110px minmax(150px, 1fr) repeat(var(--cols), minmax(170px, 1fr)); border: 1px solid var(--fx-line); border-radius: var(--t-radius); overflow-x: auto; }
+.fx-rec__table { display: grid; grid-template-columns: 110px minmax(150px, 1fr) repeat(var(--cols), minmax(170px, 1fr)); border: 1px solid var(--fx-line); border-radius: var(--t-radius); background: var(--t-paper); overflow-x: auto; }
 .fx-rec__row { display: contents; }
 .fx-rec__row > span { display: flex; flex-direction: column; gap: 2px; padding: 10px 12px; border-top: 1px solid var(--fx-line-soft); font-size: 13.5px; color: var(--t-strong); }
 .fx-rec__row:first-child > span { border-top: 0; background: var(--t-s1); }
@@ -738,8 +722,6 @@ th:hover .fx-th-sort, .fx-th-sort:focus-visible, .fx-th-sort--on { opacity: 1; }
 [data-mark="same"] > .fx-rec__mark { color: var(--t-success); }
 [data-mark="differs"], [data-mark="differs"] > .fx-rec__mark { color: var(--t-warn); }
 .fx-rec__best { color: var(--t-success); font-size: 12px; font-weight: 700; }
-.fx-rec__foot { display: flex; justify-content: space-between; align-items: center; gap: 12px; flex-wrap: wrap; }
-.fx-rec__foot-acts { display: flex; gap: 10px; flex-wrap: wrap; }
 .fx-rec__cards { display: none; }
 .fx-rec__card { display: flex; flex-direction: column; gap: 6px; padding: 12px; border: 1px solid var(--fx-line); border-radius: var(--t-radius); font-size: 13.5px; color: var(--t-strong); }
 .fx-rec__card.fx-rec__job { border-color: transparent; }
@@ -747,20 +729,17 @@ th:hover .fx-th-sort, .fx-th-sort:focus-visible, .fx-th-sort--on { opacity: 1; }
 .fx-rec__card-top { display: flex; justify-content: space-between; gap: 8px; }
 .fx-rec__label { color: var(--t-dim); font-size: 12px; font-weight: 700; letter-spacing: .06em; text-transform: uppercase; }
 .fx-rec__checks { display: flex; flex-wrap: wrap; gap: 4px 12px; }
-@media (max-width: 1100px) {
-  .fx-rec { grid-template-columns: minmax(0, 1fr); min-height: 0; }
-  .fx-rec__queue { border-right: 0; max-height: none; }
-  .fx-rec--open .fx-rec__queue { display: none; }
-  .fx-rec:not(.fx-rec--open) .fx-rec__detail { display: none; }
-  .fx-rec__back { display: inline; }
-}
+.fx-rec-list tbody tr { cursor: pointer; }
+.fx-rec-list__kind { width: 36px; color: var(--t-dim); }
+.fx-rec-list__mid { width: 72px; text-align: center; white-space: nowrap; }
+.fx-rec__possible { display: inline-flex; align-items: center; gap: 4px; color: var(--t-dim); font-variant-numeric: tabular-nums; }
+.fx-rec__possible[data-state="some"] { color: var(--t-warn); }
 @media (max-width: 820px) {
-  .fx-rec__detail { padding: 16px; }
   .fx-rec__table { display: none; }
   .fx-rec__cards { display: flex; flex-direction: column; gap: 12px; }
-  .fx-rec__cards .fx-btn, .fx-rec__foot .fx-btn { min-height: 44px; }
-  .fx-rec__foot-acts { width: 100%; }
-  .fx-rec__foot-acts .fx-btn { flex: 1 1 auto; }
+  .fx-rec__cards .fx-btn, .fx-rec__gap .fx-ph__actions .fx-btn { min-height: 44px; }
+  .fx-rec__gap .fx-ph__actions { width: 100%; }
+  .fx-rec__gap .fx-ph__actions .fx-btn { flex: 1 1 auto; }
 }
 .fx-task__custom { margin-top: 24px; }
 .fx-task__custom h3 { margin: 0 0 4px; color: var(--t-dim); font-size: 12px; font-weight: 700; letter-spacing: .06em; text-transform: uppercase; }
@@ -1293,7 +1272,6 @@ body[data-state="loading"] .fx-loading { display: grid; justify-items: center; }
    Narrow, the app bar (60px) sits above it. */
 .fx-listhead { position: sticky; top: 0; z-index: 5; margin: -12px calc(-1 * clamp(16px, 4vw, 48px)) 0; padding: 12px clamp(16px, 4vw, 48px) 0; background: var(--t-bg); transition: box-shadow .15s; }
 .fx-listhead[data-stuck] { box-shadow: 0 10px 12px -12px rgba(0, 0, 0, .45); }
-.fx-listhead .fx-sendbar { margin-bottom: 12px; }
 .fx-listhead__edge { height: 0; margin-bottom: -20px; }
 @media (max-width: 820px) { .fx-listhead { top: 60px; } }
 /* On a phone the head would hide too many rows: it scrolls away. */
@@ -1389,3 +1367,11 @@ body[data-state="loading"] .fx-loading { display: grid; justify-items: center; }
 }
 .fx-xi-count { font-size: 18px; }
 .fx-xi-list td.fx-num:not(.fx-strong) { text-align: left; }
+
+/* A list's own search (view-bar.js findBox): an icon that opens into a box. */
+.fx-find { display: inline-flex; align-items: center; }
+.fx-find__button { display: inline-grid; place-items: center; width: 32px; height: 32px; padding: 0; }
+.fx-find__button .fx-lucide { width: 15px; height: 15px; }
+.fx-find__input { display: none; width: min(240px, 60vw); height: 32px; padding: 0 10px; }
+.fx-find--open .fx-find__input { display: block; }
+.fx-find--open .fx-find__button { display: none; }

package/server/ui/invoicing.js

@@ -10,6 +10,7 @@ import { bulkBar } from '/assets/ui/bulk-bar.js';
 import { draftNote, sendModeNote } from '/assets/ui/invoice-notes.js';
 import { caseNumber } from '/assets/ui/job-board.js';
 import { jobChangeBanner } from '/assets/ui/job-change.js';
+import { findBox } from '/assets/ui/view-bar.js';
 
 // The tabs, left to right (server/api/invoicing.js, TABS): Pending (a
 // person must look), Ready (checks pass), then the accounting system's
@@ -118,17 +119,24 @@ export async function renderInvoiceList(main, ui) {
   sessionStorage.removeItem(NAV_BACK);
   const state = { status: TABS.some(([id]) => id === saved) ? saved : 'ready', q: returning ? back?.q ?? '' : '', ticked: new Set() };
   const tabs = h('div', { class: 'fx-tabs', role: 'tablist' });
-  const search = h('input', { class: 'fx-input fx-search', type: 'search', placeholder: 'Find a number, client or reference', 'aria-label': 'Find an invoice', value: state.q });
-  const bar = h('div', { class: 'fx-sendbar', hidden: true });
+  let timer;
+  const find = findBox(h, {
+    label: 'Find a number, client or reference', value: state.q,
+    oninput: (words) => {
+      clearTimeout(timer);
+      timer = setTimeout(() => { state.q = words.trim(); load(); }, 200);
+    },
+  });
   const host = h('div', { class: 'fx-panel' }, h('div', { class: 'fx-skeleton' }));
   const bulk = bulkBar(ui);
   const context = await flow('/api/invoicing/context').catch(() => ({ canIssue: false }));
   let body = null;
   const openTab = (id) => { state.status = id; state.ticked.clear(); sessionStorage.setItem('flow_invoice_tab', id); load(); };
   const alerts = alertStrip(ui, 'invoices', { onTab: openTab });
-  // The tabs, search and send bar stay at the top while the rows scroll up
-  // under them; the bulk bar floats at the foot (ClickUp's layout).
-  const head = h('div', { class: 'fx-listhead' }, h('div', { class: 'fx-toolbar' }, tabs, search), bar);
+  // The tabs and search stay at the top while the rows scroll up under them;
+  // the bulk bar floats at the foot (ClickUp's layout). Sending is a bulk
+  // action: tick rows (the head tick takes every row shown), then Send.
+  const head = h('div', { class: 'fx-listhead' }, h('div', { class: 'fx-toolbar' }, tabs, find.element));
   const edge = h('div', { class: 'fx-listhead__edge', 'aria-hidden': 'true' });
   main.append(
     pageHeader('Invoices', {
@@ -144,56 +152,11 @@ export async function renderInvoiceList(main, ui) {
     new IntersectionObserver(([entry]) => head.toggleAttribute('data-stuck', !entry.isIntersecting), { rootMargin: `-${head.offsetTop > 0 && window.matchMedia?.('(max-width: 820px)').matches ? 61 : 1}px 0px 0px 0px` }).observe(edge);
   }
 
-  let timer;
-  search.addEventListener('input', () => {
-    clearTimeout(timer);
-    timer = setTimeout(() => { state.q = search.value.trim(); load(); }, 200);
-  });
 
   const plural = (n, one, many) => `${n} ${n === 1 ? one : many}`;
-  const action = (label, path, payload, done, tone = 'primary') => {
-    const el = h('button', {
-      class: `fx-btn fx-btn--${tone}`, type: 'button',
-      onclick: async () => {
-        el.disabled = true;
-        try {
-          const res = await flow(`/api/invoicing/invoices/${path}`, { method: 'POST', body: JSON.stringify(payload()) });
-          toast(...done(res));
-          state.ticked.clear();
-          seen.clear();
-          await load();
-          alerts.refresh();
-        } catch (error) {
-          toast(error.message, 'danger');
-          el.disabled = false;
-        }
-      },
-    }, label);
-    return el;
-  };
-
-  // The bar above the list: what a person can do with this view.
+  // The bulk bar for the ticked rows: what a person can do with this view.
   function drawBar() {
-    const to = body.sendsTo;
     const ticked = [...state.ticked];
-    const parts = [];
-    if (state.status === 'ready') {
-      parts.push(h('p', { class: 'fx-dim' }, sendModeNote(to, body.sendMode)));
-      const buttons = [];
-      if (context.canIssue && body.counts.ready > 0) {
-        buttons.push(action(to ? `Send all ${body.counts.ready} ready to ${to}` : `Approve all ${body.counts.ready} ready`, 'send-ready', () => ({ issueDate: localDate() }),
-          (res) => [`${to ? `${res.issued} on the way to ${to}.` : `${res.issued} approved.`}${res.remaining ? ` ${res.remaining} more are ready: press again.` : ''}`, 'success']));
-      }
-      if (buttons.length) parts.push(h('div', { class: 'fx-sendbar__actions' }, buttons));
-    } else if (state.status === 'pending') {
-      const failed = body.invoices.filter((i) => i.status === 'issued' && i.problems.some((p) => p.code === 'send_failed' || p.code?.startsWith('xero_'))).length;
-      if (context.canIssue && to && failed > 0) {
-        parts.push(h('p', { class: 'fx-dim' }, `${plural(failed, 'invoice', 'invoices')} did not reach ${to}. Fix the cause, then send again.`));
-        parts.push(action('Send again', 'send-again', () => ({}), (res) => [`${res.queued} on the way to ${to} again.`, 'success']));
-      }
-    }
-    bar.replaceChildren(...parts);
-    bar.hidden = !parts.length;
     bulk.draw({ count: ticked.length, onClear: () => setTicks([]), ...bulkActions(ticked) });
   }
 
@@ -228,7 +191,7 @@ export async function renderInvoiceList(main, ui) {
     const apply = [];
     if (state.status === 'ready' && context.canIssue) {
       status.push({
-        icon: to ? 'send' : 'circle-check-big', label: to ? 'Send' : 'Approve', primary: true,
+        icon: to ? 'send' : 'circle-check-big', label: to ? `Send to ${to}` : 'Approve', primary: true,
         title: to ? `Send to ${to}` : 'Approve',
         run: async () => {
           const ok = await ui.dialog({
@@ -352,7 +315,6 @@ export async function renderInvoiceList(main, ui) {
       draw(seen.get(key));
     } else if (body) {
       drawTabs(body.counts);
-      bar.hidden = true;
       host.dataset.stale = '';
     }
     host.setAttribute('aria-busy', 'true');