@autobusal/admin-api-consumers 1.1.0 → 1.2.1

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## 1.2.1
+
+### Fixed
+
+- **The token panel updates without a reload** - toggle/revoke/regenerate invalidate the consumer they changed. The button also reads "Generate Token" while no token exists. (Audit ADM-04f.)
+
+## 1.2.0
+
+### Added
+
+- **Credit limit on the partner form, running balance on receivables.** A
+  Mode 1 partner now sells against a running account (obtapi Payments\
+  External\Charge): every sale debits the net they owe, cancellations
+  credit it back, and recorded settlements raise it. `credit_limit` is the
+  floor - 0 means prepaid (deposit before selling), a positive number means
+  postpaid down to -that-much. The receivables table shows the live
+  `balance` and `headroom` alongside the statement figures, deliberately
+  from two books: when they disagree, something needs investigating.
+
 All notable changes to `@autobusal/admin-api-consumers` are documented here.
 This project adheres to [Keep a Changelog](https://keepachangelog.com/en/1.1.0/)
 and [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

package/Manage.tsx

@@ -131,6 +131,16 @@ const Manage = ({ url, t }: Props): JSX.Element => {
           type: 'select',
           value: data?.user.comissions?.unique ?? 0,
           values: getAllowed(t)
+        }, {
+          // Claude - 2026-08-22: the floor of the partner's running
+          // account. 0 = prepaid (they deposit before they can sell);
+          // a positive number = postpaid down to -that-much. "Unlimited"
+          // is a big number typed on purpose, never a switch.
+          label: t('admin_api_consumers.manage.credit_limit', { ns: 'common' }),
+          name: 'credit_limit',
+          type: 'text',
+          value: data?.credit_limit ?? 0,
+          rules: 'required|numeric'
         }, {
           label: t('admin_api_consumers.manage.status', { ns: 'common' }),
           name: 'status',

package/Receivables.tsx

@@ -50,6 +50,8 @@ const Receivables = ({ url, t }: Props): JSX.Element => {
                 <th>{ t('admin_api_consumers.receivables.net', { ns: 'common' }) }</th>
                 <th>{ t('admin_api_consumers.receivables.settled', { ns: 'common' }) }</th>
                 <th>{ t('admin_api_consumers.receivables.outstanding', { ns: 'common' }) }</th>
+                <th>{ t('admin_api_consumers.receivables.balance', { ns: 'common' }) }</th>
+                <th>{ t('admin_api_consumers.receivables.headroom', { ns: 'common' }) }</th>
                 <th />
               </tr>
             </thead>
@@ -65,6 +67,11 @@ const Receivables = ({ url, t }: Props): JSX.Element => {
                   <td>{ row.net.toFixed(2) }</td>
                   <td>{ row.settled.toFixed(2) }</td>
                   <td>{ row.outstanding.toFixed(2) }</td>
+                  { /* the running account: negative is what they owe right
+                       now; headroom is what they can still sell before
+                       their credit floor refuses them */ }
+                  <td>{ row.balance.toFixed(2) }</td>
+                  <td>{ row.headroom.toFixed(2) }</td>
                   <td>
                     <Link to={ `${ url }/receivables/${ row.agent_id }?from=${ from }&to=${ to }` }>
                       { t('admin_api_consumers.receivables.view', { ns: 'common' }) }

package/TokenManager.tsx

@@ -78,7 +78,7 @@ const TokenManager = ({ id, hasToken, enabled, t }: Props): JSX.Element => {
           subtype="secondary"
           noMargin
           loading={ isPendingRegenerate }
-          text={ <><FiRefreshCw /> { t('admin_api_consumers.token.regenerate', { ns: 'common' }) }</> }
+          text={ <><FiRefreshCw /> { t(hasToken ? 'admin_api_consumers.token.regenerate' : 'admin_api_consumers.token.generate', { ns: 'common' }) }</> }
           onClick={ onRegenerate }
         />
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autobusal/admin-api-consumers",
-  "version": "1.1.0",
+  "version": "1.2.1",
   "author": "Ferjolt Ozuni",
   "type": "module",
   "main": "index.ts"

package/services.ts

@@ -1,4 +1,4 @@
-import { UseMutationResult, UseQueryResult, UseSuspenseQueryResult, useMutation, useQuery, useSuspenseQuery } from '@tanstack/react-query';
+import { UseMutationResult, UseQueryResult, UseSuspenseQueryResult, useMutation, useQuery, useQueryClient, useSuspenseQuery } from '@tanstack/react-query';
 import { apiClient } from '@autobusal/providers';
 import { PaginationData } from '@autobusal/providers/types/pagination';
 import { TableParamsData } from '@autobusal/providers/types/other';
@@ -106,8 +106,17 @@ export const useDeleteApiConsumer = (): UseMutationResult<void, Error, number, u
   })
 );
 
-export const useToggleApiConsumer = (): UseMutationResult<void, Error, { id: number, api: number }, unknown> => (
-  useMutation({
+/*
+ * Claude - 2026-08-22 (audit finding ADM-04f): the token panel only showed
+ * a toggle/revoke/regenerate's effect after a full page reload - an admin
+ * could reasonably believe Revoke had failed. Each mutation now
+ * invalidates the consumer it changed, so the panel redraws from the
+ * server's answer immediately.
+ */
+export const useToggleApiConsumer = (): UseMutationResult<void, Error, { id: number, api: number }, unknown> => {
+  const client = useQueryClient();
+
+  return useMutation({
     mutationKey: ['admin-api-consumers-toggle'],
     mutationFn: async ({ id, api }: { id: number, api: number }) => (
       await apiClient
@@ -115,12 +124,17 @@ export const useToggleApiConsumer = (): UseMutationResult<void, Error, { id: num
         .then(response => (
           response.data
         ))
-    )
-  })
-);
+    ),
+    onSuccess: (_, { id }): void => {
+      client.invalidateQueries({ queryKey: ['admin-api-consumers-manage', { id }] });
+    }
+  });
+};
 
-export const useRevokeApiConsumerToken = (): UseMutationResult<void, Error, number, unknown> => (
-  useMutation({
+export const useRevokeApiConsumerToken = (): UseMutationResult<void, Error, number, unknown> => {
+  const client = useQueryClient();
+
+  return useMutation({
     mutationKey: ['admin-api-consumers-revoke'],
     mutationFn: async (id: number) => (
       await apiClient
@@ -128,12 +142,17 @@ export const useRevokeApiConsumerToken = (): UseMutationResult<void, Error, numb
         .then(response => (
           response.data
         ))
-    )
-  })
-);
+    ),
+    onSuccess: (_, id): void => {
+      client.invalidateQueries({ queryKey: ['admin-api-consumers-manage', { id }] });
+    }
+  });
+};
 
-export const useRegenerateApiConsumerToken = (): UseMutationResult<{ api_token: string }, Error, number, unknown> => (
-  useMutation({
+export const useRegenerateApiConsumerToken = (): UseMutationResult<{ api_token: string }, Error, number, unknown> => {
+  const client = useQueryClient();
+
+  return useMutation({
     mutationKey: ['admin-api-consumers-regenerate'],
     mutationFn: async (id: number) => (
       await apiClient
@@ -141,9 +160,12 @@ export const useRegenerateApiConsumerToken = (): UseMutationResult<{ api_token:
         .then(response => (
           response.data
         ))
-    )
-  })
-);
+    ),
+    onSuccess: (_, id): void => {
+      client.invalidateQueries({ queryKey: ['admin-api-consumers-manage', { id }] });
+    }
+  });
+};
 
 // Edited: Ferjolt Ozuni - Date: 2026-07-27
 // Package 3 - API partner receivables reports + settlements

package/types.ts

@@ -6,6 +6,10 @@ export interface ApiConsumerData {
   operators: (number | string)[]
   external_providers: (number | string)[]
   is_api_consumer: boolean
+  // Claude - 2026-08-22: the running account and its floor - see
+  // ReceivableData below for what they mean
+  funds?: number
+  credit_limit?: number
   user: {
     id: number
     email: string
@@ -31,6 +35,13 @@ export interface ReceivableData {
   net: number
   settled: number
   outstanding: number
+  // Claude - 2026-08-22: the LIVE running account (debited per sale,
+  // credited by settlements) and its floor - alongside the statement
+  // figures, which describe the same debt from the frozen columns. When
+  // balance and -outstanding disagree, something needs investigating.
+  balance: number
+  credit_limit: number
+  headroom: number
 }
 
 export interface ReceivableOrderData {