@autobusal/admin-api-consumers 1.2.0 → 1.2.2

package/Browse.tsx

@@ -3,7 +3,7 @@ import { Link, useSearchParams } from 'react-router-dom';
 import { Meta, Table, Row, Button } from '@autobusal/common';
 import { usePage, useBreadcrumbs } from '@autobusal/hooks';
 import { DisplayStatus, getParams, success } from '@autobusal/utilities';
-import { useGetApiConsumers, useDeleteApiConsumer } from './services';
+import { useGetApiConsumers, useDeleteApiConsumer, useDeclineApiRequest } from './services';
 
 interface Props {
   url: string
@@ -17,10 +17,32 @@ const Browse = ({ url, t }: Props): JSX.Element => {
 
   useBreadcrumbs(t('admin_api_consumers.browse.title', { ns: 'common' }));
 
-  const { data, isLoading, isFetching, refetch } = useGetApiConsumers(getParams(searchParams, ['page', 'sort', 'order', 'q']));
+  /*
+   * Edited: Claude - Date: 2026-08-28
+   *
+   * ?type=requests flips this screen to the P8 self-serve queue: agents
+   * who asked for partner API access and await a ruling. Approving one is
+   * the ordinary manage screen on the same row - review, save, and the
+   * save sets the consumer flag - so the only new verb here is Decline.
+   */
+  const requests = searchParams.get('type') === 'requests';
+
+  const { data, isLoading, isFetching, refetch } = useGetApiConsumers(getParams(searchParams, ['page', 'sort', 'order', 'q', 'type']));
 
   const { mutate: Delete } = useDeleteApiConsumer();
 
+  const { mutate: Decline } = useDeclineApiRequest();
+
+  const onDecline = (id: number): void => {
+    Decline(id, {
+      onSuccess: () => {
+        success(t('admin_api_consumers.requests.declined', { ns: 'common' }));
+
+        refetch();
+      }
+    });
+  };
+
   const onDelete = (id: number): void => {
     Delete(id, {
       onSuccess: () => {
@@ -35,7 +57,21 @@ const Browse = ({ url, t }: Props): JSX.Element => {
     <Row
       key={ item.id }
       id={ item.id }
-      data={ [
+      data={ requests ? [
+        item.company,
+        item.user.email,
+        item.api_requested_at ? String(item.api_requested_at).slice(0, 10) : '-',
+        DisplayStatus(item.user.status, t),
+        <Button
+          key="decline"
+          type="button"
+          size="small"
+          subtype="secondary"
+          noMargin
+          text={ t('admin_api_consumers.requests.decline', { ns: 'common' }) }
+          onClick={ () => onDecline(item.id) }
+        />
+      ] : [
         item.company,
         item.user.email,
         item.operators.includes('all') ? t('admin_api_consumers.browse.all_operators', { ns: 'common' }) : String(item.operators.length),
@@ -51,7 +87,24 @@ const Browse = ({ url, t }: Props): JSX.Element => {
 
       <Table
         url={ url }
-        columns={ [{
+        columns={ requests ? [{
+          name: t('admin_api_consumers.browse.company', { ns: 'common' }),
+          width: 28,
+          slug: 'company',
+          type: 'az'
+        }, {
+          name: t('admin_api_consumers.browse.email', { ns: 'common' }),
+          width: 28
+        }, {
+          name: t('admin_api_consumers.requests.requested', { ns: 'common' }),
+          width: 16
+        }, {
+          name: t('admin_api_consumers.browse.status', { ns: 'common' }),
+          width: 14
+        }, {
+          name: '',
+          width: 14
+        }] : [{
           name: t('admin_api_consumers.browse.company', { ns: 'common' }),
           width: 25,
           slug: 'company',
@@ -83,9 +136,23 @@ const Browse = ({ url, t }: Props): JSX.Element => {
           'create', 'search', 'extra', 'view', 'delete'
         ] }
         extra={
-          <Link to={ `${ url }/receivables` }>
-            <Button type="button" size="medium" subtype="secondary" noMargin text={ t('admin_api_consumers.receivables.title', { ns: 'common' }) } />
-          </Link>
+          <>
+            <Link to={ requests ? url : `${ url }?type=requests` }>
+              <Button
+                type="button"
+                size="medium"
+                subtype="secondary"
+                noMargin
+                text={ requests
+                  ? t('admin_api_consumers.requests.back', { ns: 'common' })
+                  : t('admin_api_consumers.requests.title', { ns: 'common' }) }
+              />
+            </Link>
+
+            <Link to={ `${ url }/receivables` }>
+              <Button type="button" size="medium" subtype="secondary" noMargin text={ t('admin_api_consumers.receivables.title', { ns: 'common' }) } />
+            </Link>
+          </>
         }
         handlers={ {
           delete: onDelete

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 1.2.2 (2026-08-28)
+
+- Requests view (?type=requests): the P8 self-serve queue - agents awaiting a partner-API ruling, with Decline per row; approving stays the ordinary manage/save flow. Toggle button beside Receivables.
+
+## 1.2.1
+
+### Fixed
+
+- **The token panel updates without a reload** - toggle/revoke/regenerate invalidate the consumer they changed. The button also reads "Generate Token" while no token exists. (Audit ADM-04f.)
+
 ## 1.2.0
 
 ### Added

package/TokenManager.tsx

@@ -78,7 +78,7 @@ const TokenManager = ({ id, hasToken, enabled, t }: Props): JSX.Element => {
           subtype="secondary"
           noMargin
           loading={ isPendingRegenerate }
-          text={ <><FiRefreshCw /> { t('admin_api_consumers.token.regenerate', { ns: 'common' }) }</> }
+          text={ <><FiRefreshCw /> { t(hasToken ? 'admin_api_consumers.token.regenerate' : 'admin_api_consumers.token.generate', { ns: 'common' }) }</> }
           onClick={ onRegenerate }
         />
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autobusal/admin-api-consumers",
-  "version": "1.2.0",
+  "version": "1.2.2",
   "author": "Ferjolt Ozuni",
   "type": "module",
   "main": "index.ts"

package/services.ts

@@ -1,4 +1,4 @@
-import { UseMutationResult, UseQueryResult, UseSuspenseQueryResult, useMutation, useQuery, useSuspenseQuery } from '@tanstack/react-query';
+import { UseMutationResult, UseQueryResult, UseSuspenseQueryResult, useMutation, useQuery, useQueryClient, useSuspenseQuery } from '@tanstack/react-query';
 import { apiClient } from '@autobusal/providers';
 import { PaginationData } from '@autobusal/providers/types/pagination';
 import { TableParamsData } from '@autobusal/providers/types/other';
@@ -91,6 +91,23 @@ export const usePostApiConsumer = (id: number): UseMutationResult<{ api_token: s
   })
 );
 
+/**
+ * Decline a pending P8 access request - clears the ask, grants nothing.
+ * Edited: Claude - Date: 2026-08-28
+ */
+export const useDeclineApiRequest = (): UseMutationResult<void, Error, number, unknown> => (
+  useMutation({
+    mutationKey: ['admin-api-consumers-decline'],
+    mutationFn: async (id: number) => (
+      await apiClient
+        .post('/api/api_consumers/admin/decline', { id })
+        .then(response => (
+          response.data
+        ))
+    )
+  })
+);
+
 export const useDeleteApiConsumer = (): UseMutationResult<void, Error, number, unknown> => (
   useMutation({
     mutationKey: ['admin-api-consumers-delete'],
@@ -106,8 +123,17 @@ export const useDeleteApiConsumer = (): UseMutationResult<void, Error, number, u
   })
 );
 
-export const useToggleApiConsumer = (): UseMutationResult<void, Error, { id: number, api: number }, unknown> => (
-  useMutation({
+/*
+ * Claude - 2026-08-22 (audit finding ADM-04f): the token panel only showed
+ * a toggle/revoke/regenerate's effect after a full page reload - an admin
+ * could reasonably believe Revoke had failed. Each mutation now
+ * invalidates the consumer it changed, so the panel redraws from the
+ * server's answer immediately.
+ */
+export const useToggleApiConsumer = (): UseMutationResult<void, Error, { id: number, api: number }, unknown> => {
+  const client = useQueryClient();
+
+  return useMutation({
     mutationKey: ['admin-api-consumers-toggle'],
     mutationFn: async ({ id, api }: { id: number, api: number }) => (
       await apiClient
@@ -115,12 +141,17 @@ export const useToggleApiConsumer = (): UseMutationResult<void, Error, { id: num
         .then(response => (
           response.data
         ))
-    )
-  })
-);
+    ),
+    onSuccess: (_, { id }): void => {
+      client.invalidateQueries({ queryKey: ['admin-api-consumers-manage', { id }] });
+    }
+  });
+};
 
-export const useRevokeApiConsumerToken = (): UseMutationResult<void, Error, number, unknown> => (
-  useMutation({
+export const useRevokeApiConsumerToken = (): UseMutationResult<void, Error, number, unknown> => {
+  const client = useQueryClient();
+
+  return useMutation({
     mutationKey: ['admin-api-consumers-revoke'],
     mutationFn: async (id: number) => (
       await apiClient
@@ -128,12 +159,17 @@ export const useRevokeApiConsumerToken = (): UseMutationResult<void, Error, numb
         .then(response => (
           response.data
         ))
-    )
-  })
-);
+    ),
+    onSuccess: (_, id): void => {
+      client.invalidateQueries({ queryKey: ['admin-api-consumers-manage', { id }] });
+    }
+  });
+};
 
-export const useRegenerateApiConsumerToken = (): UseMutationResult<{ api_token: string }, Error, number, unknown> => (
-  useMutation({
+export const useRegenerateApiConsumerToken = (): UseMutationResult<{ api_token: string }, Error, number, unknown> => {
+  const client = useQueryClient();
+
+  return useMutation({
     mutationKey: ['admin-api-consumers-regenerate'],
     mutationFn: async (id: number) => (
       await apiClient
@@ -141,9 +177,12 @@ export const useRegenerateApiConsumerToken = (): UseMutationResult<{ api_token:
         .then(response => (
           response.data
         ))
-    )
-  })
-);
+    ),
+    onSuccess: (_, id): void => {
+      client.invalidateQueries({ queryKey: ['admin-api-consumers-manage', { id }] });
+    }
+  });
+};
 
 // Edited: Ferjolt Ozuni - Date: 2026-07-27
 // Package 3 - API partner receivables reports + settlements

package/types.ts

@@ -1,6 +1,7 @@
 import { ComissionData } from '@autobusal/providers/types/users';
 
 export interface ApiConsumerData {
+  api_requested_at?: (string | null)
   id: number
   company: string
   operators: (number | string)[]