@blamejs/blamejs-shop 0.1.20 → 0.1.22

package/lib/admin.js

@@ -31,6 +31,7 @@
  */
 
 var pricing = require("./pricing");
+var collectionsModule = require("./collections");
 
 var b = require("./vendor/blamejs");
 
@@ -221,11 +222,12 @@ function mount(router, deps) {
   var catalogImport = deps.catalogImport || null;   // bulk-import route disabled when absent
   var reviews       = deps.reviews       || null;   // moderation endpoints disabled when absent
   var returns       = deps.returns       || null;   // RMA moderation endpoints disabled when absent
+  var customers     = deps.customers     || null;   // read-only customers console disabled when absent
 
   // Which optional console sections are wired — gates their nav links so a
   // signed-in admin is never sent to a route that wasn't mounted. Passed
   // into every authed render call as `nav_available`.
-  var navAvailable = { returns: !!returns, reviews: !!reviews, subscriptions: !!deps.subscriptions, webhooks: !!deps.webhooks };
+  var navAvailable = { returns: !!returns, reviews: !!reviews, subscriptions: !!deps.subscriptions, webhooks: !!deps.webhooks, collections: !!deps.collections, customers: !!deps.customers, giftcards: !!deps.giftcards };
 
   try { b.audit.registerNamespace(AUDIT_NAMESPACE); } catch (_e) { /* idempotent */ }
 
@@ -755,6 +757,48 @@ function mount(router, deps) {
     },
   ));
 
+  // ---- customers (read-only) ------------------------------------------
+
+  // Operator-facing customer roster, newest first. READ-ONLY — no create /
+  // edit / delete (the storefront owns account mutation via passkey / OIDC
+  // ceremonies). The raw email is never stored, so the table shows the
+  // display name, a short id, the join date, the sign-in method (passkey
+  // count + linked OAuth providers), and the order count. Order counts +
+  // sign-in methods are resolved with bounded aggregate queries over the
+  // page's ids — no per-row N+1. Endpoint omitted when no customers
+  // primitive is wired.
+  if (customers) {
+    router.get("/admin/customers", _pageOrApi(true,
+      R(async function (req, res) {
+        var url    = req.url ? new URL(req.url, "http://localhost") : null;
+        var cursor = url && url.searchParams.get("cursor");
+        var limitS = url && url.searchParams.get("limit");
+        var limit  = limitS == null ? 50 : parseInt(limitS, 10);
+        var page = await customers.list({ cursor: cursor || undefined, limit: limit });
+        _json(res, 200, page);
+      }),
+      async function (req, res) {
+        var url = req.url ? new URL(req.url, "http://localhost") : null;
+        var cursor = url && url.searchParams.get("cursor");
+        var page = await customers.list({ cursor: cursor || undefined, limit: 100 });
+        var rows = page.rows || [];
+        var ids = rows.map(function (c) { return c.id; });
+        // One grouped query for order counts, one IN-bounded pair for
+        // sign-in methods — never a trip per row.
+        var counts  = await order.countsByCustomer(ids);
+        var methods = await customers.signInMethodsByCustomer(ids);
+        _sendHtml(res, 200, renderAdminCustomers({
+          shop_name: deps.shop_name, nav_available: navAvailable,
+          customers: rows,
+          order_counts:  counts,
+          passkey_counts: methods.passkeys,
+          oauth_providers: methods.oauth,
+          next_cursor: page.next_cursor || null,
+        }));
+      },
+    ));
+  }
+
   // ---- refunds --------------------------------------------------------
 
   if (payment) {
@@ -1350,6 +1394,393 @@ function mount(router, deps) {
     ));
   }
 
+  // ---- collections ----------------------------------------------------
+
+  // Operator-side console for manual + smart product collections (the
+  // customer-facing /collections pages already ship). Manual collections
+  // get a member manager (add by product id, remove, reorder); smart
+  // collections get a rule editor (field/op/value rows) plus a live
+  // preview of the products the rules currently match. Endpoints are
+  // omitted entirely when no collections primitive is wired.
+  var collections = deps.collections || null;
+  if (collections) {
+    // Form rule rows arrive as parallel arrays (rule_field[], rule_op[],
+    // rule_value[]) — or scalars when the operator submits a single row.
+    // Normalise to arrays, zip into a { all: [...] } rule set, and coerce
+    // numeric / array op values so the primitive's validator sees the
+    // shape it expects. Bad shapes throw TypeError, surfaced as a 400
+    // re-render the same way every other create form does.
+    function _asArray(v) {
+      if (v == null) return [];
+      return Array.isArray(v) ? v : [v];
+    }
+    function _rulesFromForm(body) {
+      var fields = _asArray(body.rule_field);
+      var ops    = _asArray(body.rule_op);
+      var values = _asArray(body.rule_value);
+      var all = [];
+      for (var i = 0; i < fields.length; i += 1) {
+        var field = fields[i];
+        var op    = ops[i];
+        var raw   = values[i];
+        // Skip wholly blank rows (the editor renders a spare empty row).
+        if ((field == null || field === "") && (raw == null || raw === "")) continue;
+        var value = _coerceRuleValue(field, op, raw);
+        all.push({ field: field, op: op, value: value });
+      }
+      if (all.length === 0) {
+        throw new TypeError("rules: add at least one rule (field, op, value)");
+      }
+      return { all: all };
+    }
+    function _coerceRuleValue(field, op, raw) {
+      var s = raw == null ? "" : String(raw);
+      // `in` / `not_in` take a comma-separated list; numeric fields parse
+      // each entry as an integer, others stay strings.
+      if (op === "in" || op === "not_in") {
+        return s.split(",").map(function (part) {
+          var t = part.trim();
+          return _isNumericField(field) ? _strictInt(t, "rule value") : t;
+        });
+      }
+      // `between` takes "lo,hi" — both strict integers.
+      if (op === "between") {
+        var parts = s.split(",");
+        if (parts.length !== 2) throw new TypeError("rules: 'between' value must be \"lo,hi\"");
+        return [_strictInt(parts[0].trim(), "rule lo"), _strictInt(parts[1].trim(), "rule hi")];
+      }
+      // Numeric comparison ops + numeric-field eq/neq parse as integers.
+      var numericOp = op === "gt" || op === "gte" || op === "lt" || op === "lte";
+      if (numericOp || (_isNumericField(field) && (op === "eq" || op === "neq"))) {
+        return _strictInt(s, "rule value");
+      }
+      return s;
+    }
+    function _isNumericField(field) {
+      return field === "price_minor" || field === "inventory_count" || field === "created_at";
+    }
+    // Strict integer parse — refuses "12abc" / "" / floats, unlike
+    // parseInt's loose prefix match. Money / count fields must be exact.
+    function _strictInt(s, label) {
+      if (typeof s !== "string" || !/^-?\d+$/.test(s.trim())) {
+        throw new TypeError("collections: " + label + " must be an integer");
+      }
+      var n = Number(s.trim());
+      if (!Number.isSafeInteger(n)) throw new TypeError("collections: " + label + " out of range");
+      return n;
+    }
+
+    function _cleanCreateMessage(e) {
+      return (e && e.message || "Couldn't create that collection.").replace(/^collections[.:]\s*/, "");
+    }
+
+    // Map the ?active= query to a collections.list filter: 1/true →
+    // active-only, 0/false → archived-only, absent → all.
+    function _collectionsFilter(activeS) {
+      if (activeS === "1" || activeS === "true")  return { active_only: true };
+      if (activeS === "0" || activeS === "false") return { archived_only: true };
+      return {};
+    }
+
+    async function _listForBrowser(filter) {
+      var rows = await collections.list(filter || {});
+      // Annotate each row with its current size: manual → member count,
+      // smart → matched-preview count. Both compose productsIn; the loop
+      // is bounded by the collection count (operators have tens, not
+      // thousands), so this is not an N+1 over an unbounded set.
+      for (var i = 0; i < rows.length; i += 1) {
+        var count = null;
+        try {
+          var p = await collections.productsIn({ slug: rows[i].slug, limit: 200 });
+          count = (p.rows || []).length;
+        } catch (_e) { count = null; }
+        rows[i]._count = count;
+      }
+      return rows;
+    }
+
+    // List content-negotiates: bearer → JSON (the raw list, unchanged for
+    // tooling); signed-in browser → the console table with an
+    // all/active/archived filter.
+    router.get("/admin/collections", _pageOrApi(true,
+      R(async function (req, res) {
+        var url = req.url ? new URL(req.url, "http://localhost") : null;
+        var activeS = url && url.searchParams.get("active");
+        var rows = await collections.list(_collectionsFilter(activeS));
+        _json(res, 200, { rows: rows });
+      }),
+      async function (req, res) {
+        var url = req.url ? new URL(req.url, "http://localhost") : null;
+        var activeS = url && url.searchParams.get("active");
+        var rows = await _listForBrowser(_collectionsFilter(activeS));
+        _sendHtml(res, 200, renderAdminCollections({
+          shop_name: deps.shop_name, nav_available: navAvailable, collections: rows,
+          active_filter: activeS,
+          created:  url && url.searchParams.get("created"),
+          archived: url && url.searchParams.get("archived"),
+          notice:   (url && url.searchParams.get("err")) ? "That action couldn't be completed for the collection." : null,
+        }));
+      },
+    ));
+
+    // Create content-negotiates: bearer → JSON 201 (manual or smart per
+    // body.type); browser form → create, then PRG. A bad shape (TypeError)
+    // re-renders the list with the validator's message rather than 500.
+    router.post("/admin/collections", _pageOrApi(false,
+      W("collection.create", async function (req, res) {
+        var body = req.body || {};
+        var col;
+        if (body.type === "smart") col = await collections.defineSmart(body);
+        else                       col = await collections.defineManual(body);
+        _json(res, 201, col);
+        return { id: col.slug };
+      }),
+      async function (req, res) {
+        var body = req.body || {};
+        var type = body.type === "smart" ? "smart" : "manual";
+        try {
+          if (type === "smart") {
+            await collections.defineSmart({
+              slug:          typeof body.slug === "string" ? body.slug.trim() : body.slug,
+              title:         body.title,
+              description:   body.description,
+              rules:         _rulesFromForm(body),
+              sort_strategy: body.sort_strategy || "newest",
+            });
+          } else {
+            await collections.defineManual({
+              slug:          typeof body.slug === "string" ? body.slug.trim() : body.slug,
+              title:         body.title,
+              description:   body.description,
+              sort_strategy: body.sort_strategy || "manual",
+            });
+          }
+        } catch (e) {
+          if (!(e instanceof TypeError)) throw e;
+          var rows = await _listForBrowser({});
+          return _sendHtml(res, 400, renderAdminCollections({
+            shop_name: deps.shop_name, nav_available: navAvailable, collections: rows,
+            notice: _cleanCreateMessage(e), form_type: type,
+          }));
+        }
+        b.audit.safeEmit({ action: AUDIT_NAMESPACE + ".collection.create", outcome: "success" });
+        _redirect(res, "/admin/collections?created=1");
+      },
+    ));
+
+    async function _detailModel(slug) {
+      var col = await collections.get(slug);
+      if (!col) return null;
+      var preview = null, members = null;
+      if (col.type === "manual") {
+        var pm = await collections.productsIn({ slug: slug, limit: 200 });
+        members = pm.rows || [];
+      } else {
+        var ps = await collections.productsIn({ slug: slug, limit: 50 });
+        preview = ps.rows || [];
+      }
+      return { collection: col, members: members, preview: preview };
+    }
+
+    // Detail content-negotiates: bearer → JSON (collection + members /
+    // preview); browser → the member manager (manual) or rule editor +
+    // preview (smart). A bad / unknown slug is a 404 page, never a 500.
+    router.get("/admin/collections/:slug", _pageOrApi(true,
+      R(async function (req, res) {
+        var model;
+        try { model = await _detailModel(req.params.slug); }
+        catch (e) { if (e instanceof TypeError) return _problem(res, 404, "collection-not-found", e.message); throw e; }
+        if (!model) return _problem(res, 404, "collection-not-found");
+        _json(res, 200, model);
+      }),
+      async function (req, res) {
+        var url = req.url ? new URL(req.url, "http://localhost") : null;
+        var model;
+        try { model = await _detailModel(req.params.slug); }
+        catch (e) { if (!(e instanceof TypeError)) throw e; model = null; }
+        if (!model) return _sendHtml(res, 404, renderAdminCollections({
+          shop_name: deps.shop_name, nav_available: navAvailable, collections: [], notice: "Collection not found.",
+        }));
+        _sendHtml(res, 200, renderAdminCollection({
+          shop_name: deps.shop_name, nav_available: navAvailable,
+          collection: model.collection, members: model.members, preview: model.preview,
+          rule_fields: collectionsModule.RULE_FIELDS, rule_ops: collectionsModule.RULE_OPS,
+          sort_strategies: collectionsModule.SORT_STRATEGIES,
+          saved:   url && url.searchParams.get("saved"),
+          updated: url && url.searchParams.get("updated"),
+          notice:  (url && url.searchParams.get("err")) ? "That action couldn't be completed." : null,
+        }));
+      },
+    ));
+
+    // Edit content-negotiates: bearer PATCH (the JSON contract) + browser
+    // POST /edit (HTML forms can't PATCH). Both update title / description
+    // / sort_strategy, and rules for smart. A bad shape is a 400 / notice.
+    router.patch("/admin/collections/:slug", W("collection.update", async function (req, res) {
+      var col;
+      try { col = await collections.update(req.params.slug, req.body || {}); }
+      catch (e) { if (e instanceof TypeError) return _problem(res, 400, "bad-request", e.message); throw e; }
+      if (!col) return _problem(res, 404, "collection-not-found");
+      _json(res, 200, col);
+      return { id: col.slug };
+    }));
+
+    router.post("/admin/collections/:slug/edit", _pageOrApi(false,
+      W("collection.update", async function (req, res) {
+        var col;
+        try { col = await collections.update(req.params.slug, req.body || {}); }
+        catch (e) { if (e instanceof TypeError) return _problem(res, 400, "bad-request", e.message); throw e; }
+        if (!col) return _problem(res, 404, "collection-not-found");
+        _json(res, 200, col);
+        return { id: col.slug };
+      }),
+      async function (req, res) {
+        var slug = req.params.slug;
+        var body = req.body || {};
+        var enc = encodeURIComponent(slug);
+        try {
+          var existing = await collections.get(slug);
+          if (!existing) return _redirect(res, "/admin/collections/" + enc + "?err=1");
+          var patch = {};
+          if (body.title !== undefined)       patch.title = body.title;
+          if (body.description !== undefined) patch.description = body.description;
+          if (body.sort_strategy)             patch.sort_strategy = body.sort_strategy;
+          if (existing.type === "smart" && (body.rule_field !== undefined || body.rule_op !== undefined)) {
+            patch.rules = _rulesFromForm(body);
+          }
+          if (Object.keys(patch).length === 0) return _redirect(res, "/admin/collections/" + enc + "?err=1");
+          await collections.update(slug, patch);
+        } catch (e) {
+          if (!(e instanceof TypeError)) throw e;
+          return _redirect(res, "/admin/collections/" + enc + "?err=1");
+        }
+        b.audit.safeEmit({ action: AUDIT_NAMESPACE + ".collection.update", outcome: "success", metadata: { slug: slug } });
+        _redirect(res, "/admin/collections/" + enc + "?updated=1");
+      },
+    ));
+
+    // Archive content-negotiates: bearer DELETE (soft archive) + browser
+    // POST /archive. An unknown / already-archived slug is a no-op notice
+    // (?err=1), never a false success.
+    router.delete("/admin/collections/:slug", W("collection.archive", async function (req, res) {
+      var col;
+      try { col = await collections.archive(req.params.slug); }
+      catch (e) { if (e instanceof TypeError) return _problem(res, 400, "bad-request", e.message); throw e; }
+      if (!col) return _problem(res, 404, "collection-not-found");
+      _json(res, 200, col);
+      return { id: col.slug };
+    }));
+
+    router.post("/admin/collections/:slug/archive", _pageOrApi(false,
+      W("collection.archive", async function (req, res) {
+        var col;
+        try { col = await collections.archive(req.params.slug); }
+        catch (e) { if (e instanceof TypeError) return _problem(res, 400, "bad-request", e.message); throw e; }
+        if (!col) return _problem(res, 404, "collection-not-found");
+        _json(res, 200, col);
+        return { id: col.slug };
+      }),
+      async function (req, res) {
+        var slug = req.params.slug;
+        var col = null;
+        try { col = await collections.archive(slug); }
+        catch (e) { if (!(e instanceof TypeError)) throw e; }
+        // archive() returns the row whether or not it flipped (already-
+        // archived re-returns the row); treat a missing row as the only
+        // err. An already-archived re-archive is idempotent, not an error.
+        if (!col) return _redirect(res, "/admin/collections?err=1");
+        b.audit.safeEmit({ action: AUDIT_NAMESPACE + ".collection.archive", outcome: "success", metadata: { slug: slug } });
+        _redirect(res, "/admin/collections?archived=1");
+      },
+    ));
+
+    // Manual member ops — browser POST routes (the JSON API composes
+    // addProduct / removeProduct / reorderProducts directly). Each PRGs
+    // back to the detail; a bad shape / unknown product is a ?err=1 notice.
+    function _memberRedirect(res, slug, ok) {
+      var enc = encodeURIComponent(slug);
+      return _redirect(res, "/admin/collections/" + enc + (ok ? "?updated=1" : "?err=1"));
+    }
+
+    router.post("/admin/collections/:slug/members/add", _pageOrApi(false,
+      W("collection.member_add", async function (req, res) {
+        var body = req.body || {};
+        var m;
+        try { m = await collections.addProduct({ collection_slug: req.params.slug, product_id: body.product_id }); }
+        catch (e) { if (e instanceof TypeError) return _problem(res, 400, "bad-request", e.message); throw e; }
+        _json(res, 201, m);
+        return { id: req.params.slug };
+      }),
+      async function (req, res) {
+        var slug = req.params.slug;
+        var body = req.body || {};
+        try {
+          await collections.addProduct({ collection_slug: slug, product_id: (body.product_id || "").trim() });
+        } catch (e) {
+          if (!(e instanceof TypeError)) throw e;
+          return _memberRedirect(res, slug, false);
+        }
+        b.audit.safeEmit({ action: AUDIT_NAMESPACE + ".collection.member_add", outcome: "success", metadata: { slug: slug } });
+        _memberRedirect(res, slug, true);
+      },
+    ));
+
+    router.post("/admin/collections/:slug/members/remove", _pageOrApi(false,
+      W("collection.member_remove", async function (req, res) {
+        var body = req.body || {};
+        var ok;
+        try { ok = await collections.removeProduct({ collection_slug: req.params.slug, product_id: body.product_id }); }
+        catch (e) { if (e instanceof TypeError) return _problem(res, 400, "bad-request", e.message); throw e; }
+        if (!ok) return _problem(res, 404, "collection-member-not-found");
+        _json(res, 200, { ok: true });
+        return { id: req.params.slug };
+      }),
+      async function (req, res) {
+        var slug = req.params.slug;
+        var body = req.body || {};
+        var ok = false;
+        try {
+          ok = await collections.removeProduct({ collection_slug: slug, product_id: (body.product_id || "").trim() });
+        } catch (e) { if (!(e instanceof TypeError)) throw e; }
+        if (!ok) return _memberRedirect(res, slug, false);
+        b.audit.safeEmit({ action: AUDIT_NAMESPACE + ".collection.member_remove", outcome: "success", metadata: { slug: slug } });
+        _memberRedirect(res, slug, true);
+      },
+    ));
+
+    router.post("/admin/collections/:slug/members/reorder", _pageOrApi(false,
+      W("collection.reorder", async function (req, res) {
+        var body = req.body || {};
+        var ids = Array.isArray(body.ordered_product_ids) ? body.ordered_product_ids : null;
+        if (!ids) return _problem(res, 400, "bad-request", "ordered_product_ids array required");
+        try { await collections.reorderProducts({ collection_slug: req.params.slug, ordered_product_ids: ids }); }
+        catch (e) { if (e instanceof TypeError) return _problem(res, 400, "bad-request", e.message); throw e; }
+        _json(res, 200, { ok: true });
+        return { id: req.params.slug };
+      }),
+      async function (req, res) {
+        var slug = req.params.slug;
+        var body = req.body || {};
+        // The reorder form posts the full ordered id list — a single hidden
+        // field of comma-joined ids, or repeated ordered_product_id rows.
+        var ids;
+        if (body.ordered_product_ids != null && typeof body.ordered_product_ids === "string") {
+          ids = body.ordered_product_ids.split(",").map(function (s) { return s.trim(); }).filter(Boolean);
+        } else {
+          ids = _asArray(body.ordered_product_id).map(function (s) { return String(s).trim(); }).filter(Boolean);
+        }
+        try {
+          await collections.reorderProducts({ collection_slug: slug, ordered_product_ids: ids });
+        } catch (e) {
+          if (!(e instanceof TypeError)) throw e;
+          return _memberRedirect(res, slug, false);
+        }
+        b.audit.safeEmit({ action: AUDIT_NAMESPACE + ".collection.reorder", outcome: "success", metadata: { slug: slug } });
+        _memberRedirect(res, slug, true);
+      },
+    ));
+  }
+
   // ---- analytics ------------------------------------------------------
 
   var analytics = deps.analytics || null;
@@ -1548,6 +1979,132 @@ function mount(router, deps) {
     }
   }
 
+  // ---- gift cards -----------------------------------------------------
+  //
+  // The ledger console: list issued cards (masked by code_hint + the
+  // original/remaining balance + status), drill into one card's ledger
+  // transactions (issue / redeem / adjust), and — when the ledger is
+  // wired — issue a new card from the console. The bearer JSON contract
+  // is unchanged; the signed-in browser session gets the rendered page.
+  // `giftcards` owns the card rows; `giftCardLedger` (optional) owns the
+  // append-only transaction history shown on the detail view.
+  var giftcards     = deps.giftcards || null;
+  var giftCardLedger = deps.giftCardLedger || null;
+  if (giftcards) {
+    // Issue a card. Bearer → JSON (the issued plaintext code is
+    // returned ONCE for the operator to deliver); browser form →
+    // issue, then PRG to the detail page so the code shows once.
+    router.post("/admin/gift-cards", _pageOrApi(false,
+      W("gift_card.issue", async function (req, res) {
+        var issued = await _issueGiftCard(req.body || {});
+        _json(res, 201, issued);
+        return { id: issued.id };
+      }),
+      async function (req, res) {
+        var issued;
+        try {
+          issued = await _issueGiftCard(req.body || {});
+        } catch (e) {
+          if (!(e instanceof TypeError)) throw e;
+          var rows = await giftcards.list({});
+          return _sendHtml(res, 400, renderAdminGiftCards({
+            shop_name: deps.shop_name, nav_available: navAvailable, cards: rows,
+            notice: e.message.replace(/^giftcards?[.:]\s*/i, ""),
+          }));
+        }
+        b.audit.safeEmit({ action: AUDIT_NAMESPACE + ".gift_card.issue", outcome: "success", metadata: { id: issued.id } });
+        _redirect(res, "/admin/gift-cards/" + issued.id + "?issued=" + encodeURIComponent(issued.code));
+      },
+    ));
+
+    router.get("/admin/gift-cards", _pageOrApi(true,
+      R(async function (req, res) {
+        var url = req.url ? new URL(req.url, "http://localhost") : null;
+        var status = url && url.searchParams.get("status");
+        var rows = await giftcards.list(status ? { status: status } : {});
+        _json(res, 200, { rows: rows });
+      }),
+      async function (req, res) {
+        var url = req.url ? new URL(req.url, "http://localhost") : null;
+        var status = url && url.searchParams.get("status");
+        var rows = await giftcards.list(status ? { status: status } : {});
+        _sendHtml(res, 200, renderAdminGiftCards({
+          shop_name: deps.shop_name, nav_available: navAvailable, cards: rows,
+          status_filter: status,
+          ledger_enabled: !!giftCardLedger,
+        }));
+      },
+    ));
+
+    router.get("/admin/gift-cards/:id", _pageOrApi(true,
+      R(async function (req, res) {
+        var card = await giftcards.getById(req.params.id);
+        if (!card) return _problem(res, 404, "gift-card-not-found");
+        var history = [];
+        if (giftCardLedger) {
+          try { history = (await giftCardLedger.history(req.params.id, { limit: 500 })).rows; }
+          catch (e) { if (!(e instanceof TypeError)) throw e; }
+        }
+        _json(res, 200, { card: card, ledger: history });
+      }),
+      async function (req, res) {
+        var card = await giftcards.getById(req.params.id);
+        var url = req.url ? new URL(req.url, "http://localhost") : null;
+        var issuedCode = url && url.searchParams.get("issued");
+        if (!card) {
+          return _sendHtml(res, 404, renderAdminGiftCard({
+            shop_name: deps.shop_name, nav_available: navAvailable, card: null,
+          }));
+        }
+        var history = [];
+        if (giftCardLedger) {
+          try { history = (await giftCardLedger.history(req.params.id, { limit: 500 })).rows; }
+          catch (e) { if (!(e instanceof TypeError)) throw e; }
+        }
+        _sendHtml(res, 200, renderAdminGiftCard({
+          shop_name: deps.shop_name, nav_available: navAvailable, card: card,
+          ledger: history, issued_code: issuedCode,
+        }));
+      },
+    ));
+  }
+
+  // Issue a card from operator input, recording the opening balance as
+  // a `manual` credit in the ledger (when wired) so the transaction
+  // history starts from the issuance event. Strict integer parsing of
+  // the amount; the giftcards primitive enforces the rest.
+  async function _issueGiftCard(body) {
+    var input = { currency: typeof body.currency === "string" ? body.currency.trim().toUpperCase() : body.currency };
+    if (body.amount_minor != null && body.amount_minor !== "") {
+      var n = typeof body.amount_minor === "number" ? body.amount_minor : parseInt(String(body.amount_minor), 10);
+      if (!Number.isInteger(n)) throw new TypeError("giftcards: amount_minor must be an integer (minor units)");
+      input.amount_minor = n;
+    }
+    if (body.issued_to_email) input.issued_to_email = String(body.issued_to_email).trim();
+    if (body.expires_at != null && body.expires_at !== "") {
+      var ex = typeof body.expires_at === "number" ? body.expires_at : parseInt(String(body.expires_at), 10);
+      if (!Number.isInteger(ex)) throw new TypeError("giftcards: expires_at must be an integer epoch-ms");
+      input.expires_at = ex;
+    }
+    var issued = await giftcards.issue(input);
+    if (giftCardLedger) {
+      // Opening credit so the ledger history starts from issuance.
+      // Best-effort: a ledger write failure must not lose the issued
+      // card (the card row + plaintext code already exist) — the
+      // operator can reconcile, and the card balance is authoritative
+      // on the card row. Swallow only the ledger fault.
+      try {
+        await giftCardLedger.credit({
+          gift_card_id: issued.id,
+          amount_minor: input.amount_minor,
+          source:       "manual",
+          source_ref:   "admin-issue",
+        });
+      } catch (_e) { /* drop-silent — card issued; ledger seed is advisory */ }
+    }
+    return issued;
+  }
+
   // ---- admin web pages (browser session + setup wizard) ---------------
   //
   // The operator signs in by pasting the ADMIN_API_KEY once; that sets a
@@ -1943,9 +2500,12 @@ var ADMIN_NAV_ITEMS = [
   { key: "products",     href: "/admin/products",     label: "Products" },
   { key: "inventory",    href: "/admin/inventory",    label: "Inventory" },
   { key: "orders",       href: "/admin/orders",       label: "Orders" },
+  { key: "customers",    href: "/admin/customers",    label: "Customers",    requires: "customers" },
   { key: "returns",      href: "/admin/returns",      label: "Returns",      requires: "returns" },
   { key: "reviews",      href: "/admin/reviews",      label: "Reviews",      requires: "reviews" },
   { key: "subscriptions", href: "/admin/subscription-plans", label: "Subscriptions", requires: "subscriptions" },
+  { key: "collections",  href: "/admin/collections",  label: "Collections",  requires: "collections" },
+  { key: "giftcards",    href: "/admin/gift-cards",    label: "Gift cards",   requires: "giftcards" },
   { key: "webhooks",     href: "/admin/webhooks",     label: "Webhooks",     requires: "webhooks" },
   { key: "integrations", href: "/admin/integrations", label: "Integrations" },
   { key: "setup",        href: "/admin/setup",        label: "Setup" },
@@ -2254,6 +2814,60 @@ function renderAdminOrder(opts) {
   return _renderAdminShell(opts.shop_name, "Order " + o.id.slice(0, 8), body, "orders", opts.nav_available);
 }
 
+// Read-only customer roster. The raw email is never stored (lookups are
+// keyed on a SHA3-512 namespace hash), so the table surfaces the display
+// name, a short id, the join date, the sign-in method (passkey count +
+// linked OAuth providers), and the order count. Order counts + sign-in
+// methods arrive as { customer_id: … } maps resolved by the route's
+// bounded aggregate queries — the renderer just looks them up, no work
+// per row beyond the lookup. No row actions: the storefront owns account
+// mutation via the passkey / OIDC ceremonies.
+function renderAdminCustomers(opts) {
+  opts = opts || {};
+  var customers = opts.customers || [];
+  var orderCounts    = opts.order_counts    || {};
+  var passkeyCounts  = opts.passkey_counts  || {};
+  var oauthProviders = opts.oauth_providers || {};
+
+  var rows = customers.map(function (c) {
+    var passkeys = passkeyCounts[c.id] || 0;
+    var providers = oauthProviders[c.id] || [];
+    // Sign-in method chips: one per passkey-count + one per linked OAuth
+    // provider. A customer mid-registration (no credential yet) shows none.
+    var methodCells = [];
+    if (passkeys > 0) {
+      methodCells.push("<span class=\"chip\">" + _htmlEscape(passkeys === 1 ? "1 passkey" : passkeys + " passkeys") + "</span>");
+    }
+    for (var i = 0; i < providers.length; i += 1) {
+      methodCells.push("<span class=\"chip\">" + _htmlEscape(providers[i]) + "</span>");
+    }
+    var method = methodCells.length ? methodCells.join(" ") : "<span class=\"meta\">—</span>";
+    var orders = orderCounts[c.id] || 0;
+    return "<tr>" +
+      "<td><strong>" + _htmlEscape(c.display_name) + "</strong></td>" +
+      "<td><code class=\"order-id\">" + _htmlEscape(String(c.id).slice(0, 8)) + "</code></td>" +
+      "<td>" + _htmlEscape(_fmtDate(c.created_at)) + "</td>" +
+      "<td>" + method + "</td>" +
+      "<td class=\"num\">" + _htmlEscape(String(orders)) + "</td>" +
+      "</tr>";
+  }).join("");
+
+  var table = customers.length
+    ? "<div class=\"panel\"><table><thead><tr><th>Name</th><th>ID</th><th>Joined</th><th>Sign-in method</th><th class=\"num\">Orders</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
+    : "<p class=\"empty\">No customers yet.</p>";
+
+  // Cursor pager — a Next link when the page filled and more rows remain.
+  // The opaque cursor is HMAC-tagged by customers.list; encode it for the URL.
+  var pager = opts.next_cursor
+    ? "<div class=\"actions-row\"><a class=\"btn btn--ghost\" href=\"/admin/customers?cursor=" + _htmlEscape(encodeURIComponent(opts.next_cursor)) + "\">Next page <span aria-hidden=\"true\">→</span></a></div>"
+    : "";
+
+  var body = "<section><h2>Customers</h2>" +
+    "<p class=\"meta\">Accounts are passwordless — customers enrol a passkey or sign in with a federated provider. Email addresses aren't stored in the clear, so they're not shown here.</p>" +
+    table + pager + "</section>";
+  return _renderAdminShell(opts.shop_name, "Customers", body, "customers", opts.nav_available);
+}
+
 // The RMA states an operator can filter the returns queue by — drives the
 // filter chips, lifecycle order then terminal.
 var RETURN_STATUS_FILTERS = ["pending", "approved", "received", "refunded", "rejected"];
@@ -2560,6 +3174,121 @@ function renderAdminSubscriptionPlans(opts) {
   return _renderAdminShell(opts.shop_name, "Subscription plans", bodyHtml, "subscriptions", opts.nav_available);
 }
 
+// Gift-card ledger console — list issued cards. The code is masked to
+// its `code_hint` (last 4 plaintext chars) prefixed with the standard
+// •••• fill; the plaintext bearer code is never stored and so never
+// rendered here. Original (issued) + remaining balance + lifecycle
+// status + issued date per row, newest first.
+function renderAdminGiftCards(opts) {
+  opts = opts || {};
+  var rows = opts.cards || [];
+  var notice = opts.notice ? "<div class=\"banner banner--err\">" + _htmlEscape(opts.notice) + "</div>" : "";
+
+  var sf = opts.status_filter;
+  var STATUS = ["active", "redeemed", "expired", "voided"];
+  var chipHtml = "<a class=\"chip" + (sf == null ? " chip--on" : "") + "\" href=\"/admin/gift-cards\">All</a>";
+  for (var s = 0; s < STATUS.length; s += 1) {
+    chipHtml += "<a class=\"chip" + (sf === STATUS[s] ? " chip--on" : "") +
+      "\" href=\"/admin/gift-cards?status=" + STATUS[s] + "\">" + STATUS[s] + "</a>";
+  }
+  var chips = "<div class=\"order-filters\">" + chipHtml + "</div>";
+
+  // Card lifecycle → status-pill class (reuse the order pills): active
+  // = paid (green), redeemed = neutral, expired/voided = cancelled.
+  function _pill(status) {
+    var cls = status === "active" ? "paid" : (status === "redeemed" ? "pending" : "cancelled");
+    return "<span class=\"status-pill " + cls + "\">" + _htmlEscape(status) + "</span>";
+  }
+
+  var bodyRows = rows.map(function (gc) {
+    var cur = String(gc.currency || "").toUpperCase();
+    var issued    = pricing.format(gc.issued_minor, cur);
+    var remaining = pricing.format(gc.balance_minor, cur);
+    return "<tr>" +
+      "<td><code class=\"order-id\">••••" + _htmlEscape(gc.code_hint) + "</code></td>" +
+      "<td class=\"num\">" + _htmlEscape(issued) + "</td>" +
+      "<td class=\"num\"><strong>" + _htmlEscape(remaining) + "</strong></td>" +
+      "<td>" + _pill(gc.status) + "</td>" +
+      "<td>" + _htmlEscape(_fmtDate(gc.created_at)) + "</td>" +
+      "<td><a class=\"btn btn--ghost\" href=\"/admin/gift-cards/" + _htmlEscape(gc.id) + "\">Ledger</a></td>" +
+    "</tr>";
+  }).join("");
+
+  var table = rows.length
+    ? "<div class=\"panel\"><table><thead><tr><th>Code</th><th class=\"num\">Issued</th><th class=\"num\">Remaining</th><th>Status</th><th>Issued on</th><th>Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+    : "<p class=\"empty\">No gift cards" + (sf ? " " + _htmlEscape(sf) : " yet") + ".</p>";
+
+  // The issue form composes the giftcards primitive's issue() — the
+  // plaintext code is shown once on the card's detail page after a
+  // successful issue, never again.
+  var issueForm =
+    "<div class=\"panel\" style=\"margin-top:1.5rem; max-width:34rem;\">" +
+      "<h3 style=\"font-size:.95rem; margin-bottom:.75rem;\">Issue a card</h3>" +
+      "<p class=\"meta\">Generates a bearer code. You'll see the code once, on the next screen — deliver it to the recipient; it can't be shown again.</p>" +
+      "<form method=\"post\" action=\"/admin/gift-cards\">" +
+        _setupField("Amount (minor units)", "amount_minor", "", "number", "In the currency's smallest unit — e.g. 5000 = $50.00.", " min=\"1\" required") +
+        _setupField("Currency", "currency", "", "text", "3-letter ISO 4217 (e.g. USD).", " maxlength=\"3\" required") +
+        _setupField("Recipient email (optional)", "issued_to_email", "", "email", "Stored as a one-way hash so the recipient can claim it after sign-in.", " maxlength=\"160\"") +
+        "<div class=\"actions-row\"><button class=\"btn\" type=\"submit\">Issue card</button></div>" +
+      "</form>" +
+    "</div>";
+
+  var body = "<section><h2>Gift cards</h2>" + notice + chips + table + issueForm + "</section>";
+  return _renderAdminShell(opts.shop_name, "Gift cards", body, "giftcards", opts.nav_available);
+}
+
+// Single-card detail: the masked code, the balances + status, the
+// (optionally shown-once) freshly-issued plaintext code, and the
+// append-only ledger of transactions against the card.
+function renderAdminGiftCard(opts) {
+  opts = opts || {};
+  var gc = opts.card;
+  if (!gc) {
+    var nf = "<section><h2>Gift card</h2><p class=\"empty\">Gift card not found.</p>" +
+      "<div class=\"actions-row\"><a class=\"btn btn--ghost\" href=\"/admin/gift-cards\">Back to gift cards</a></div></section>";
+    return _renderAdminShell(opts.shop_name, "Gift card", nf, "giftcards", opts.nav_available);
+  }
+  var cur = String(gc.currency || "").toUpperCase();
+  var issuedBanner = opts.issued_code
+    ? "<div class=\"banner banner--ok\">Copy the code now — it is shown once and cannot be retrieved again: " +
+        "<code class=\"order-id\">" + _htmlEscape(opts.issued_code) + "</code></div>"
+    : "";
+
+  var statusCls = gc.status === "active" ? "paid" : (gc.status === "redeemed" ? "pending" : "cancelled");
+  var summary =
+    "<div class=\"panel\"><dl class=\"detail-grid\">" +
+      "<div><dt>Code</dt><dd><code class=\"order-id\">••••" + _htmlEscape(gc.code_hint) + "</code></dd></div>" +
+      "<div><dt>Issued</dt><dd>" + _htmlEscape(pricing.format(gc.issued_minor, cur)) + "</dd></div>" +
+      "<div><dt>Remaining</dt><dd><strong>" + _htmlEscape(pricing.format(gc.balance_minor, cur)) + "</strong></dd></div>" +
+      "<div><dt>Status</dt><dd><span class=\"status-pill " + statusCls + "\">" + _htmlEscape(gc.status) + "</span></dd></div>" +
+      "<div><dt>Issued on</dt><dd>" + _htmlEscape(_fmtDate(gc.created_at)) + "</dd></div>" +
+      "<div><dt>Expires</dt><dd>" + (gc.expires_at ? _htmlEscape(_fmtDate(gc.expires_at)) : "<span class=\"meta\">never</span>") + "</dd></div>" +
+    "</dl></div>";
+
+  var ledger = opts.ledger || [];
+  var ledgerRows = ledger.map(function (row) {
+    var detail = row.order_id
+      ? "<code class=\"order-id\">" + _htmlEscape(String(row.order_id).slice(0, 8)) + "</code>"
+      : (row.source ? _htmlEscape(row.source) + (row.source_ref ? " · " + _htmlEscape(row.source_ref) : "") : "<span class=\"meta\">—</span>");
+    var sign = row.kind === "credit" ? "+" : "−";
+    return "<tr>" +
+      "<td>" + _htmlEscape(row.kind) + "</td>" +
+      "<td class=\"num\">" + sign + _htmlEscape(pricing.format(row.amount_minor, cur)) + "</td>" +
+      "<td class=\"num\">" + _htmlEscape(pricing.format(row.balance_after_minor, cur)) + "</td>" +
+      "<td>" + detail + "</td>" +
+      "<td>" + _htmlEscape(_fmtDate(row.occurred_at)) + "</td>" +
+    "</tr>";
+  }).join("");
+  var ledgerTable = ledger.length
+    ? "<div class=\"panel\"><table><thead><tr><th>Type</th><th class=\"num\">Amount</th><th class=\"num\">Balance after</th><th>Detail</th><th>When</th></tr></thead><tbody>" + ledgerRows + "</tbody></table></div>"
+    : "<p class=\"empty\">No ledger transactions recorded for this card yet.</p>";
+
+  var body = "<section><h2>Gift card</h2>" + issuedBanner + summary +
+    "<h3 style=\"font-size:.95rem; margin:1.5rem 0 .75rem;\">Ledger</h3>" + ledgerTable +
+    "<div class=\"actions-row\"><a class=\"btn btn--ghost\" href=\"/admin/gift-cards\">Back to gift cards</a></div></section>";
+  return _renderAdminShell(opts.shop_name, "Gift card", body, "giftcards", opts.nav_available);
+}
+
 function renderAdminWebhooks(opts) {
   opts = opts || {};
   var rows  = opts.endpoints    || [];
@@ -2672,6 +3401,215 @@ function renderAdminWebhookDeliveries(opts) {
   return _renderAdminShell(opts.shop_name, "Deliveries", body, "webhooks", opts.nav_available);
 }
 
+function renderAdminCollections(opts) {
+  opts = opts || {};
+  var rows = opts.collections || [];
+  var created  = opts.created  ? "<div class=\"banner banner--ok\">Collection created.</div>" : "";
+  var archived = opts.archived ? "<div class=\"banner banner--ok\">Collection archived.</div>" : "";
+  var notice   = opts.notice   ? "<div class=\"banner banner--err\">" + _htmlEscape(opts.notice) + "</div>" : "";
+
+  var af = opts.active_filter;
+  var chips = "<div class=\"order-filters\">" +
+    "<a class=\"chip" + (af == null ? " chip--on" : "") + "\" href=\"/admin/collections\">All</a>" +
+    "<a class=\"chip" + (af === "1" ? " chip--on" : "") + "\" href=\"/admin/collections?active=1\">Active</a>" +
+    "<a class=\"chip" + (af === "0" ? " chip--on" : "") + "\" href=\"/admin/collections?active=0\">Archived</a>" +
+    "</div>";
+
+  var bodyRows = rows.map(function (c) {
+    var isArchived = c.archived_at != null;
+    var typeLabel = c.type === "smart" ? "smart" : "manual";
+    var countLabel = c._count == null ? "—" : String(c._count);
+    var countTitle = c.type === "smart" ? "matched products" : "members";
+    return "<tr>" +
+      "<td><a href=\"/admin/collections/" + _htmlEscape(encodeURIComponent(c.slug)) + "\"><strong>" + _htmlEscape(c.title) + "</strong></a></td>" +
+      "<td><code class=\"order-id\">" + _htmlEscape(c.slug) + "</code></td>" +
+      "<td><span class=\"status-pill " + (c.type === "smart" ? "pending" : "paid") + "\">" + _htmlEscape(typeLabel) + "</span></td>" +
+      "<td><span class=\"status-pill " + (isArchived ? "cancelled" : "paid") + "\">" + (isArchived ? "archived" : "active") + "</span></td>" +
+      "<td class=\"num\" title=\"" + _htmlEscape(countTitle) + "\">" + _htmlEscape(countLabel) + "</td>" +
+      "<td><div class=\"actions-row\">" +
+        "<a class=\"btn btn--ghost\" href=\"/admin/collections/" + _htmlEscape(encodeURIComponent(c.slug)) + "\">Manage</a>" +
+        (isArchived ? "" :
+          "<form method=\"post\" action=\"/admin/collections/" + _htmlEscape(encodeURIComponent(c.slug)) + "/archive\" style=\"display:inline;\">" +
+            "<button class=\"btn btn--danger\" type=\"submit\">Archive</button></form>") +
+      "</div></td>" +
+    "</tr>";
+  }).join("");
+
+  var table = rows.length
+    ? "<div class=\"panel\"><table><thead><tr><th>Title</th><th>Slug</th><th>Type</th><th>Status</th><th class=\"num\">Products</th><th>Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+    : "<p class=\"empty\">No collections" + (af === "0" ? " archived" : af === "1" ? " active" : " yet") + ".</p>";
+
+  // The create form toggles between a manual and a smart shape. Manual
+  // needs only title + slug; smart adds one starter rule row (the detail
+  // page's rule editor adds more after the collection exists).
+  var startType = opts.form_type === "smart" ? "smart" : "manual";
+  var fieldOpts = collectionsModule.RULE_FIELDS.map(function (f) {
+    return "<option value=\"" + _htmlEscape(f) + "\">" + _htmlEscape(f) + "</option>";
+  }).join("");
+  var opOpts = collectionsModule.RULE_OPS.map(function (o) {
+    return "<option value=\"" + _htmlEscape(o) + "\">" + _htmlEscape(o) + "</option>";
+  }).join("");
+
+  var createForm =
+    "<div class=\"panel\" style=\"margin-top:1.5rem; max-width:40rem;\">" +
+      "<h3 style=\"font-size:.95rem; margin-bottom:.75rem;\">Create a collection</h3>" +
+      "<p class=\"meta\">Manual collections are handpicked; smart collections match products by a rule set. Slug is the storefront URL (/collections/&lt;slug&gt;).</p>" +
+      "<form method=\"post\" action=\"/admin/collections\">" +
+        "<label class=\"form-field\"><span>Type</span><select name=\"type\">" +
+          "<option value=\"manual\"" + (startType === "manual" ? " selected" : "") + ">manual</option>" +
+          "<option value=\"smart\""  + (startType === "smart"  ? " selected" : "") + ">smart</option>" +
+        "</select></label>" +
+        _setupField("Title", "title", "", "text", "", " maxlength=\"500\" required") +
+        _setupField("Slug", "slug", "", "text", "Lowercase, hyphenated.", " maxlength=\"200\" required") +
+        _setupField("Description (optional)", "description", "", "text", "", " maxlength=\"2000\"") +
+        "<fieldset style=\"border:1px solid var(--hair); border-radius:.5rem; padding:.75rem 1rem; margin:1rem 0;\">" +
+          "<legend style=\"padding:0 .4rem; font-size:.85rem;\">Smart rule (used only for smart collections)</legend>" +
+          "<div class=\"actions-row\">" +
+            "<select name=\"rule_field\"><option value=\"\">field…</option>" + fieldOpts + "</select>" +
+            "<select name=\"rule_op\"><option value=\"\">op…</option>" + opOpts + "</select>" +
+            "<input type=\"text\" name=\"rule_value\" placeholder=\"value (lists + between: comma-separated)\" maxlength=\"500\">" +
+          "</div>" +
+          "<small style=\"color:var(--mute);\">Numeric fields (price_minor, inventory_count, created_at) compare as integers. Add more rules after creating.</small>" +
+        "</fieldset>" +
+        "<div class=\"actions-row\"><button class=\"btn\" type=\"submit\">Create collection</button></div>" +
+      "</form>" +
+    "</div>";
+
+  var bodyHtml = "<section><h2>Collections</h2>" + created + archived + notice + chips + table + createForm + "</section>";
+  return _renderAdminShell(opts.shop_name, "Collections", bodyHtml, "collections", opts.nav_available);
+}
+
+function renderAdminCollection(opts) {
+  opts = opts || {};
+  var col = opts.collection;
+  if (!col) {
+    var nf = "<section><h2>Collection</h2><p class=\"empty\">Collection not found.</p>" +
+      "<div class=\"actions-row\"><a class=\"btn btn--ghost\" href=\"/admin/collections\">Back to collections</a></div></section>";
+    return _renderAdminShell(opts.shop_name, "Collection", nf, "collections", opts.nav_available);
+  }
+  var updated = (opts.updated || opts.saved) ? "<div class=\"banner banner--ok\">Saved.</div>" : "";
+  var notice  = opts.notice ? "<div class=\"banner banner--err\">" + _htmlEscape(opts.notice) + "</div>" : "";
+  var enc = encodeURIComponent(col.slug);
+
+  var sortStrategies = opts.sort_strategies || collectionsModule.SORT_STRATEGIES;
+  var sortOpts = sortStrategies.filter(function (s) {
+    // `manual` sort only applies to manual collections (the primitive
+    // refuses it on smart) — drop it from the smart editor's options.
+    return !(col.type === "smart" && s === "manual");
+  }).map(function (s) {
+    return "<option value=\"" + _htmlEscape(s) + "\"" + (s === col.sort_strategy ? " selected" : "") + ">" + _htmlEscape(s) + "</option>";
+  }).join("");
+
+  var editForm =
+    "<div class=\"panel\" style=\"max-width:40rem;\">" +
+      "<h3 style=\"font-size:.95rem; margin-bottom:.75rem;\">Details</h3>" +
+      "<form method=\"post\" action=\"/admin/collections/" + _htmlEscape(enc) + "/edit\">" +
+        _setupField("Title", "title", col.title, "text", "", " maxlength=\"500\" required") +
+        _setupField("Description", "description", col.description || "", "text", "", " maxlength=\"2000\"") +
+        "<label class=\"form-field\"><span>Sort strategy</span><select name=\"sort_strategy\">" + sortOpts + "</select></label>";
+
+  if (col.type === "smart") {
+    var fields = opts.rule_fields || collectionsModule.RULE_FIELDS;
+    var ops    = opts.rule_ops    || collectionsModule.RULE_OPS;
+    var existing = (col.rules && Array.isArray(col.rules.all)) ? col.rules.all : [];
+    // Render the existing rules plus one spare empty row so the operator
+    // can append without a separate "add row" round-trip.
+    var ruleRows = existing.concat([{ field: "", op: "", value: "" }]).map(function (rule) {
+      var rv = rule.value;
+      if (Array.isArray(rv)) rv = rv.join(",");
+      else if (rv == null)   rv = "";
+      var fieldOpts = "<option value=\"\">field…</option>" + fields.map(function (f) {
+        return "<option value=\"" + _htmlEscape(f) + "\"" + (f === rule.field ? " selected" : "") + ">" + _htmlEscape(f) + "</option>";
+      }).join("");
+      var opOpts = "<option value=\"\">op…</option>" + ops.map(function (o) {
+        return "<option value=\"" + _htmlEscape(o) + "\"" + (o === rule.op ? " selected" : "") + ">" + _htmlEscape(o) + "</option>";
+      }).join("");
+      return "<div class=\"actions-row\" style=\"margin:.4rem 0;\">" +
+        "<select name=\"rule_field\">" + fieldOpts + "</select>" +
+        "<select name=\"rule_op\">" + opOpts + "</select>" +
+        "<input type=\"text\" name=\"rule_value\" value=\"" + _htmlEscape(String(rv)) + "\" placeholder=\"value\" maxlength=\"500\">" +
+      "</div>";
+    }).join("");
+    editForm +=
+      "<fieldset style=\"border:1px solid var(--hair); border-radius:.5rem; padding:.75rem 1rem; margin:1rem 0;\">" +
+        "<legend style=\"padding:0 .4rem; font-size:.85rem;\">Rules (all must match)</legend>" +
+        ruleRows +
+        "<small style=\"color:var(--mute);\">Leave a row blank to drop it. Lists (in / not_in) + between use comma-separated values.</small>" +
+      "</fieldset>";
+  }
+  editForm += "<div class=\"actions-row\"><button class=\"btn\" type=\"submit\">Save</button></div></form></div>";
+
+  var detailBody;
+  if (col.type === "manual") {
+    var members = opts.members || [];
+    var memberRows = members.map(function (m) {
+      return "<tr>" +
+        "<td class=\"num\">" + _htmlEscape(String(m.position)) + "</td>" +
+        "<td><code class=\"order-id\">" + _htmlEscape(m.product_id) + "</code></td>" +
+        "<td><form method=\"post\" action=\"/admin/collections/" + _htmlEscape(enc) + "/members/remove\" style=\"display:inline;\">" +
+          "<input type=\"hidden\" name=\"product_id\" value=\"" + _htmlEscape(m.product_id) + "\">" +
+          "<button class=\"btn btn--danger\" type=\"submit\">Remove</button></form></td>" +
+      "</tr>";
+    }).join("");
+    var memberTable = members.length
+      ? "<div class=\"panel\"><table><thead><tr><th class=\"num\">#</th><th>Product id</th><th></th></tr></thead><tbody>" + memberRows + "</tbody></table></div>"
+      : "<p class=\"empty\">No members yet — add a product below.</p>";
+
+    // Reorder: a single field of the current ids, comma-joined, that the
+    // operator can rewrite into the new order. v1-defensible without
+    // client JS — the primitive normalises positions to 0..N-1.
+    var currentIds = members.map(function (m) { return m.product_id; }).join(",");
+    var reorderForm = members.length > 1
+      ? "<div class=\"panel\" style=\"margin-top:1rem; max-width:40rem;\">" +
+          "<h3 style=\"font-size:.95rem; margin-bottom:.75rem;\">Reorder members</h3>" +
+          "<p class=\"meta\">Rewrite the comma-separated id list into the order you want. Must list every current member.</p>" +
+          "<form method=\"post\" action=\"/admin/collections/" + _htmlEscape(enc) + "/members/reorder\">" +
+            "<label class=\"form-field\"><span>Ordered product ids</span>" +
+              "<input type=\"text\" name=\"ordered_product_ids\" value=\"" + _htmlEscape(currentIds) + "\"></label>" +
+            "<div class=\"actions-row\"><button class=\"btn btn--ghost\" type=\"submit\">Apply order</button></div>" +
+          "</form>" +
+        "</div>"
+      : "";
+
+    var addForm =
+      "<div class=\"panel\" style=\"margin-top:1rem; max-width:40rem;\">" +
+        "<h3 style=\"font-size:.95rem; margin-bottom:.75rem;\">Add a member</h3>" +
+        "<form method=\"post\" action=\"/admin/collections/" + _htmlEscape(enc) + "/members/add\">" +
+          _setupField("Product id", "product_id", "", "text", "The catalog product's UUID.", " maxlength=\"64\" required") +
+          "<div class=\"actions-row\"><button class=\"btn\" type=\"submit\">Add product</button></div>" +
+        "</form>" +
+      "</div>";
+
+    detailBody = "<section style=\"margin-top:1.5rem;\"><h3 style=\"font-size:1.05rem;\">Members</h3>" +
+      memberTable + reorderForm + addForm + "</section>";
+  } else {
+    var preview = opts.preview || [];
+    var previewCards = preview.map(function (p) {
+      return "<tr>" +
+        "<td><strong>" + _htmlEscape(p.title || "(untitled)") + "</strong></td>" +
+        "<td><code class=\"order-id\">" + _htmlEscape(p.slug || p.id || "") + "</code></td>" +
+        "<td>" + _htmlEscape(p.status || "") + "</td>" +
+      "</tr>";
+    }).join("");
+    var previewTable = preview.length
+      ? "<div class=\"panel\"><table><thead><tr><th>Title</th><th>Slug</th><th>Status</th></tr></thead><tbody>" + previewCards + "</tbody></table></div>"
+      : "<p class=\"empty\">No products match these rules yet.</p>";
+    detailBody = "<section style=\"margin-top:1.5rem;\"><h3 style=\"font-size:1.05rem;\">Matched products (live preview)</h3>" +
+      "<p class=\"meta\">The first " + _htmlEscape(String(preview.length)) + " products the rules match right now.</p>" +
+      previewTable + "</section>";
+  }
+
+  var head =
+    "<p class=\"meta\"><a href=\"/admin/collections\">&larr; Collections</a> · " +
+      "<code class=\"order-id\">" + _htmlEscape(col.slug) + "</code> · " +
+      "<span class=\"status-pill " + (col.type === "smart" ? "pending" : "paid") + "\">" + _htmlEscape(col.type) + "</span>" +
+      (col.archived_at != null ? " · <span class=\"status-pill cancelled\">archived</span>" : "") +
+      " · <a href=\"/collections/" + _htmlEscape(enc) + "\" target=\"_blank\" rel=\"noreferrer\">View on storefront &rarr;</a></p>";
+
+  var body = "<section><h2>" + _htmlEscape(col.title) + "</h2>" + updated + notice + head + editForm + "</section>" + detailBody;
+  return _renderAdminShell(opts.shop_name, "Collection " + col.slug, body, "collections", opts.nav_available);
+}
+
 module.exports = {
   mount:           mount,
   AUDIT_NAMESPACE: AUDIT_NAMESPACE,
@@ -2684,7 +3622,12 @@ module.exports = {
   renderAdminInventory:    renderAdminInventory,
   renderAdminOrders:       renderAdminOrders,
   renderAdminOrder:        renderAdminOrder,
+  renderAdminCustomers:    renderAdminCustomers,
   renderAdminReturns:      renderAdminReturns,
   renderAdminReturn:       renderAdminReturn,
   renderAdminReviews:      renderAdminReviews,
+  renderAdminCollections:  renderAdminCollections,
+  renderAdminCollection:   renderAdminCollection,
+  renderAdminGiftCards:    renderAdminGiftCards,
+  renderAdminGiftCard:     renderAdminGiftCard,
 };