@blamejs/blamejs-shop 0.1.37 → 0.2.0

package/CHANGELOG.md

@@ -6,8 +6,14 @@ Pre-1.0 the surface is intentionally evolving — every release may
 change something operators depend on. Read each entry before
 upgrading across more than a few patches at a time.
 
+## v0.2.x
+
+- v0.2.0 (2026-05-27) — **A new storefront visual identity — a dark, violet brand theme with self-hosted typefaces and a redesigned product buy-box.** The default storefront theme has been redesigned around the project's actual brand: a dark, near-black canvas with a violet-to-magenta accent system that matches the blamejs shield-and-terminal mark, replacing the previous light theme and its unrelated orange accent. The stylesheet is restructured onto a semantic design-token layer (a purpose tier — surface, text, border, accent, price — sitting over the raw palette), so colour, contrast, and surfaces are now consistent and themeable rather than hard-coded per component. Two distinctive open-licensed typefaces are self-hosted in place of Inter: Hanken Grotesk for display and body, Space Mono for the terminal-style chrome (navigation, labels, SKUs, prices). The product page's variant selector is rebuilt from a data table into a proper buy-box: a prominent price, the variant(s) as selectable chips, a full-width add-to-cart, and a post-quantum-secured-checkout trust line — the add-to-cart, variant, and currency-conversion behaviour is unchanged. Accessibility is preserved (contrast targets met on the dark surfaces, focus-visible, reduced-motion guards, the consent banner restyled as legible dark glass). Operators on the default theme get the new look on upgrade; a custom theme passed via the theme primitive is unaffected. **Changed:** *Dark violet brand theme replaces the light theme* — The default theme is now a dark, near-black storefront with a violet→magenta accent family (matching the logo's shield/terminal mark) carried across the chrome, hero, cards, forms, badges, switchers, and footer. The previous light canvas and its off-brand orange accent are gone. Depth comes from hard-edged and soft violet shadows and a faint circuit-grid texture; motion (a staggered page-load reveal, a glitch treatment on the hero accent word, a terminal cursor) is CSS-only and disabled under `prefers-reduced-motion`. · *Semantic design-token layer + self-hosted typefaces* — The stylesheet now has a primitive→semantic token structure (`--surface`/`--surface-raised`, `--text`/`--text-muted`, `--border`, `--color-accent`, `--color-price`, glow tokens) so components reference purpose, not raw values — fixing the previously undefined `--font-sans`/`--danger-l` tokens and a duplicated button definition along the way. Hanken Grotesk (display/body) and Space Mono (mono chrome) are self-hosted as OFL woff2, replacing Inter; nothing is fetched from a font CDN, consistent with the strict `font-src 'self'` policy. · *Product buy-box redesign* — The product page's variant table is replaced by a buy-box: a large monospace price, each variant as a selectable pill chip (with a clear selected state, fully operable with JavaScript off), a full-width add-to-cart, and a trust line stating the checkout is post-quantum secured. The underlying add-to-cart form, multi-variant selection, and multi-currency price formatting are unchanged; products with many variants keep a compact fallback. The PDP trust badge wording "Ships from origin" is replaced with a real delivery estimate.
+
 ## v0.1.x
 
+- v0.1.38 (2026-05-26) — **Security hardening + accessibility and UI completeness across the storefront and admin.** This release closes two data-exposure gaps, tightens admin input validation, and brings a broad accessibility and visual-completeness pass to both the storefront and the operator console. A freshly issued gift-card code is no longer placed in a redirect URL where it could persist in browser history or server logs — it's now revealed once in the page itself. Signed-in order pages now enforce ownership so a customer can only view their own orders. On accessibility: admin tables carry proper header scope, every admin page has its own title, a skip-to-content link and current-page navigation state are in place, search-filter selection is exposed correctly to assistive technology, status changes are announced, and destructive actions (refunds, plan archival, endpoint deletion, subscription cancellation, address removal) now require a confirmation step. Several surfaces that shipped without styling — the faceted-search sidebar, the subscriptions page, loyalty and referral badges, and the locale switcher — are now fully styled; product cards gain depth, accent-colored text meets contrast requirements, touch targets meet the 44px minimum on mobile, and success messages and empty states are consistent. **Changed:** *Confirmation step on destructive actions* — Irreversible or money-moving actions now route through a server-rendered confirmation page that states the consequence before proceeding: order refunds and subscription-plan archival and webhook deletion in the admin, and subscription cancellation (including the immediate-cancel option, which now spells out the forfeited time) and saved-address removal (with an undo link) in the customer account. · *Success confirmations and consistent empty states* — Account actions — saving or removing an address, toggling the wishlist, moving a saved item, requesting a return (which now echoes the RMA code) — confirm success with an announced status message instead of redirecting silently. Empty states across the account area now share one consistent treatment. **Fixed:** *Accessibility across storefront and admin* — Admin data tables now use `scope` on column and row headers; every admin page renders its own document title; a skip-to-content link and `aria-current` navigation state are in place. On the storefront, search-facet links expose their selected state correctly to screen readers (replacing an invalid attribute), and account status changes are announced via live regions. Accent-colored text (prices, labels, links) now uses a darker shade that meets the 4.5:1 contrast minimum, and interactive controls meet the 44px touch-target minimum on small screens. · *Styling for surfaces that shipped unstyled* — The faceted-search sidebar, the subscriptions management page, loyalty and referral status badges, and the footer locale switcher now render with full styling instead of unstyled browser defaults. Product and collection cards gain a resting elevation, a duplicate button definition was consolidated to one consistent style, and disabled-button and placeholder text now meet contrast requirements. **Security:** *Gift-card one-time code is no longer exposed in a URL* — Issuing a gift card from the admin console previously redirected to a URL containing the plaintext code, which could persist in browser history, the redirect `Location` header, and access logs. The code is now shown once directly in the response body (the same pattern used for webhook signing secrets) and never placed in a URL. · *Order pages enforce ownership for signed-in customers* — `GET /orders/:id` now verifies that a signed-in customer owns the order before rendering it (returning 404 otherwise), closing a gap where an order's contents could be viewed by anyone with the order id. The guest post-purchase confirmation path is unchanged. · *Strict validation on admin money inputs* — Gift-card amounts and subscription-plan amounts/intervals/trials are now parsed with strict integer validation, so malformed input (e.g. `50abc`) is rejected rather than silently coerced.
+
 - v0.1.37 (2026-05-26) — **Localized storefront — the UI chrome renders in the visitor's language, with a locale switcher and right-to-left support.** The storefront's interface chrome — the navigation, search controls, newsletter band, and footer — now renders in the visitor's language. The locale is resolved the same way at the edge and in the container: an explicit `?lang=` choice first, then a saved preference cookie, then the browser's Accept-Language header, then the operator's default. A locale switcher in the footer lets the visitor change it; the choice persists in a first-party cookie. Right-to-left languages (Arabic, Hebrew, Persian, …) flip the document direction automatically. Strings come from the operator's locale policy and translation rows, and any key without a translation falls back to the English baseline rather than showing a raw placeholder — so a partially translated catalog never renders broken text. The default locale renders at the edge for cookie-less visitors (so cached pages stay fast); a non-default choice is served by the container. Everything works with JavaScript off, and the localized markup is byte-identical across the edge and the container. **Added:** *Localized UI chrome + footer locale switcher* — Navigation, search labels, the newsletter band, and the footer render in the visitor's locale. A locale switcher in the footer lists the languages the operator has enabled (shown by their own names — "Deutsch", "Français"); selecting one persists the choice in a first-party cookie and returns the visitor to the page they were on. The locale resolves identically at the edge and in the container — `?lang=`, then the cookie, then `Accept-Language`, then the operator default — and a right-to-left language sets the document's `dir` so the layout mirrors correctly. The switcher and selection work without JavaScript. · *Operator locale policy with English-baseline fallback* — Enable languages by setting a locale policy (a default locale plus the supported list) and supplying translation rows for the chrome strings; the storefront resolves each string against the active policy, layered over the operator's translations, and falls back to the built-in English baseline for any key still missing — never a raw key or empty label. With no policy seeded the storefront renders the English baseline and shows no switcher, so the feature is opt-in and a fresh install is unaffected. `SHOP_DEFAULT_LOCALE` sets the default the edge serves to cookie-less visitors; set `SHOP_LOCALES` (the supported list) so the edge forwards a first-time visitor whose `Accept-Language` prefers a supported non-default locale to the container instead of caching the default. An explicit cookie or `?lang=` choice is always served by the container so edge caching stays simple.
 
 - v0.1.36 (2026-05-26) — **Multi-currency display — shoppers browse prices in their own currency while you still charge in your base currency.** Shoppers can now pick a display currency from a switcher in the footer; every price on the storefront — product pages, the grid, search, and the cart — re-renders in that currency using the foreign-exchange rates you set, formatted with the right symbol, grouping, and decimal places for the locale. Conversion is display-only: the cart line and the eventual charge stay in your base currency, and a "Prices shown in EUR; you'll be charged in USD" disclosure makes that explicit whenever a conversion is in effect. The choice rides in a sealed first-party cookie and survives navigation; a per-currency rounding rule can snap converted prices to a tidy increment (for example Swiss 0.05 Rappenrundung). Every failure mode falls back to the base currency rather than showing a broken price: a currency with no rate on file, a rate that has expired, a currency you've removed from the allow-list, or a tampered cookie all render in your base currency. The switcher and all conversions render identically from the edge and the container, and the whole flow works with JavaScript off. **Added:** *Currency switcher + on-page price conversion* — A currency switcher in the footer lists the currencies you've enabled; choosing one `POST`s to `/currency`, stores the choice in a sealed cookie, and redirects back to the page the shopper was on. From then on product pages, the product grid, search results, and the cart display prices converted into that currency, each formatted for its locale (symbol, thousands separator, decimal places). When a conversion is active a "Prices shown in <display>; you'll be charged in <base>" note appears so the shopper always knows the charge currency. The switcher submits without JavaScript — the small enhancement script only auto-submits on change. · *Operator-set FX rates, display rounding, and a base-currency guarantee* — Set your base currency and the enabled list with `SHOP_BASE_CURRENCY` / `SHOP_CURRENCIES` (or the `shop.base_currency` / `shop.currencies` config keys), and supply foreign-exchange rates yourself from whatever source you trust — the framework never reaches out to a rate feed. Rates are stored as integer basis points and conversion uses banker's rounding; an optional per-currency rounding rule snaps the result to a display increment (e.g. nearest 0.05). Conversion is strictly for display: the cart line's currency and amount, and therefore the amount charged at checkout, always stay in the base currency. Any currency without a usable rate — missing, expired, de-listed, or a tampered cookie — falls back to base-currency display instead of a broken or `NaN` price, so a stale or absent rate feed never breaks a priced page.

package/lib/admin.js

@@ -117,6 +117,27 @@ function _htmlEscape(s) {
   return b.template.escapeHtml(String(s));
 }
 
+// Strict integer coercion for money / count form fields. Refuses
+// "50abc" / "" / floats, unlike parseInt's loose prefix match (which
+// silently turns "50abc" into 50). Accepts an already-numeric value
+// (must itself be a safe integer). Throws a TypeError whose message
+// carries the caller's prefix so the browser form path surfaces it as
+// a 400 notice. Same shape as the collections-rule _strictInt nested
+// helper, hoisted to module scope so the gift-card + subscription-plan
+// create paths share it.
+function _strictMinorInt(value, prefix, label) {
+  if (typeof value === "number") {
+    if (!Number.isSafeInteger(value)) throw new TypeError(prefix + ": " + label + " out of range");
+    return value;
+  }
+  if (typeof value !== "string" || !/^-?\d+$/.test(value.trim())) {
+    throw new TypeError(prefix + ": " + label + " must be an integer");
+  }
+  var n = Number(value.trim());
+  if (!Number.isSafeInteger(n)) throw new TypeError(prefix + ": " + label + " out of range");
+  return n;
+}
+
 // ---- bearer auth --------------------------------------------------------
 
 function _readBearer(req) {
@@ -163,6 +184,26 @@ function _setAdminCookie(res) {
 function _clearAdminCookie(res) {
   _adminJar().clear(res, ADMIN_COOKIE_NAME);
 }
+
+// One-time gift-card code reveal. The issue POST stashes the freshly-issued
+// plaintext code in a sealed, HttpOnly, /admin-scoped cookie and 303-redirects
+// (Post/Redirect/Get — so a refresh of the detail page can't re-issue a card),
+// WITHOUT placing the code in the URL / Location header / browser history /
+// access log. The detail GET reads it exactly once and clears it, so a reload
+// after the reveal shows the normal card with no code.
+var GC_REVEAL_COOKIE = "gc_reveal";
+function _stashGiftCardReveal(res, id, code) {
+  _adminJar().writeSealed(res, GC_REVEAL_COOKIE, JSON.stringify({ id: id, code: code }),
+    { expires: new Date(Date.now() + b.constants.TIME.hours(1)) });
+}
+function _takeGiftCardReveal(req, res, id) {
+  var raw = _adminJar().readSealed(req, GC_REVEAL_COOKIE);
+  if (raw === null) return null;
+  _adminJar().clear(res, GC_REVEAL_COOKIE);
+  var env;
+  try { env = JSON.parse(raw); } catch (_e) { return null; }
+  return (env && env.id === id && typeof env.code === "string") ? env.code : null;
+}
 function _adminCookieValid(req) {
   var raw = _adminJar().readSealed(req, ADMIN_COOKIE_NAME);
   if (raw === null) return false;
@@ -855,6 +896,35 @@ function mount(router, deps) {
       return { refund: refund, order: await order.get(o.id) };
     }
 
+    // Browser confirmation interstitial for the full refund — it moves
+    // money via the provider and advances the FSM, so the console makes
+    // the operator confirm (the CSP forbids a client confirm() dialog).
+    // Bearer clients never reach here; they keep POSTing /refund directly.
+    router.post("/admin/orders/:id/refund/confirm", _pageOrApi(false,
+      R(async function (_req, res) {
+        return _problem(res, 405, "use-canonical-endpoint", "POST /admin/orders/:id/refund directly for the JSON API");
+      }),
+      async function (req, res) {
+        var id = req.params.id;
+        var o;
+        try { o = await order.get(id); }
+        catch (e) { if (!(e instanceof TypeError)) throw e; o = null; }
+        if (!o || !o.payment_intent_id) {
+          return _redirect(res, "/admin/orders/" + encodeURIComponent(id) + "?err=1");
+        }
+        var amount = pricing.format(o.grand_total_minor, o.currency);
+        _sendHtml(res, 200, renderAdminConfirm({
+          shop_name: deps.shop_name, nav_available: navAvailable, active: "orders",
+          heading: "Refund order " + o.id.slice(0, 8) + "?",
+          consequence: "This issues a full refund of " + amount + " through the payment provider and cannot be undone.",
+          detail: "The provider refund runs first; only if it succeeds does the order move to a refunded state.",
+          action: "/admin/orders/" + _htmlEscape(o.id) + "/refund",
+          confirm_label: "Refund " + amount,
+          cancel_href: "/admin/orders/" + encodeURIComponent(id),
+        }));
+      },
+    ));
+
     router.post("/admin/orders/:id/refund", _pageOrApi(false,
       W("order.refund", async function (req, res) {
         var o = await order.get(req.params.id);
@@ -1549,6 +1619,31 @@ function mount(router, deps) {
       },
     ));
 
+    // Browser confirmation interstitial for delete — removing an
+    // endpoint is irreversible (its signing secret is gone for good and
+    // deliveries stop), so the console confirms before the real DELETE.
+    router.post("/admin/webhooks/:id/delete/confirm", _pageOrApi(false,
+      R(async function (_req, res) {
+        return _problem(res, 405, "use-canonical-endpoint", "DELETE /admin/webhooks/:id (or POST .../delete) directly for the JSON API");
+      }),
+      async function (req, res) {
+        var id = req.params.id;
+        var ep = null;
+        try { ep = await webhooks.endpoints.get(id); }
+        catch (e) { if (!(e instanceof TypeError)) throw e; }
+        if (!ep) return _redirect(res, "/admin/webhooks?err=1");
+        _sendHtml(res, 200, renderAdminConfirm({
+          shop_name: deps.shop_name, nav_available: navAvailable, active: "webhooks",
+          heading: "Delete this endpoint?",
+          consequence: "Deleting the endpoint is permanent — its signing secret is destroyed and no further deliveries are sent.",
+          detail: ep.url ? "Endpoint: " + ep.url : "This endpoint will be removed.",
+          action: "/admin/webhooks/" + _htmlEscape(id) + "/delete",
+          confirm_label: "Delete endpoint",
+          cancel_href: "/admin/webhooks",
+        }));
+      },
+    ));
+
     router.post("/admin/webhooks/:id/delete", _pageOrApi(false,
       W("webhook.delete", async function (req, res) {
         var ok = await webhooks.endpoints.delete(req.params.id);
@@ -2087,9 +2182,9 @@ function mount(router, deps) {
           interval:        body.interval,
           currency:        typeof body.currency === "string" ? body.currency.trim().toLowerCase() : body.currency,
         };
-        if (body.amount_minor   != null && body.amount_minor   !== "") input.amount_minor   = parseInt(body.amount_minor, 10);
-        if (body.interval_count != null && body.interval_count !== "") input.interval_count = parseInt(body.interval_count, 10);
-        if (body.trial_days     != null && body.trial_days     !== "") input.trial_days     = parseInt(body.trial_days, 10);
+        if (body.amount_minor   != null && body.amount_minor   !== "") input.amount_minor   = _strictMinorInt(body.amount_minor, "subscriptions", "amount_minor (minor units)");
+        if (body.interval_count != null && body.interval_count !== "") input.interval_count = _strictMinorInt(body.interval_count, "subscriptions", "interval_count");
+        if (body.trial_days     != null && body.trial_days     !== "") input.trial_days     = _strictMinorInt(body.trial_days, "subscriptions", "trial_days");
         if (body.variant_id) input.variant_id = String(body.variant_id).trim();
         try {
           await subscriptions.plans.create(input);
@@ -2147,6 +2242,31 @@ function mount(router, deps) {
       return p;
     }));
 
+    // Browser confirmation interstitial for archive — terminal from the
+    // console (a retired plan is replaced by creating a new one against a
+    // fresh Stripe price id, never reactivated in place), so confirm it.
+    router.post("/admin/subscription-plans/:id/archive/confirm", _pageOrApi(false,
+      R(async function (_req, res) {
+        return _problem(res, 405, "use-canonical-endpoint", "POST /admin/subscription-plans/:id/archive directly for the JSON API");
+      }),
+      async function (req, res) {
+        var id = req.params.id;
+        var p = null;
+        try { p = await subscriptions.plans.get(id); }
+        catch (e) { if (!(e instanceof TypeError)) throw e; }
+        if (!p) return _redirect(res, "/admin/subscription-plans?err=1");
+        _sendHtml(res, 200, renderAdminConfirm({
+          shop_name: deps.shop_name, nav_available: navAvailable, active: "subscriptions",
+          heading: "Archive this plan?",
+          consequence: "Archiving is terminal — this plan cannot be reactivated. To offer it again you create a new plan against a fresh Stripe price id.",
+          detail: "Existing subscriptions on this plan are unaffected; new sign-ups can no longer select it.",
+          action: "/admin/subscription-plans/" + _htmlEscape(id) + "/archive",
+          confirm_label: "Archive plan",
+          cancel_href: "/admin/subscription-plans",
+        }));
+      },
+    ));
+
     // Archive content-negotiates: bearer → JSON; browser form → archive,
     // then PRG. An unknown / malformed id is a no-op notice (?err=1),
     // never a 500.
@@ -2215,7 +2335,11 @@ function mount(router, deps) {
   if (giftcards) {
     // Issue a card. Bearer → JSON (the issued plaintext code is
     // returned ONCE for the operator to deliver); browser form →
-    // issue, then PRG to the detail page so the code shows once.
+    // issue, then render the detail page DIRECTLY from this POST 200
+    // with the plaintext code passed in-body. We deliberately do NOT
+    // redirect with the code on the query string — the one-time bearer
+    // code must never land in a URL / Location header / browser
+    // history / access log (mirrors renderAdminWebhookSecret).
     router.post("/admin/gift-cards", _pageOrApi(false,
       W("gift_card.issue", async function (req, res) {
         var issued = await _issueGiftCard(req.body || {});
@@ -2235,7 +2359,11 @@ function mount(router, deps) {
           }));
         }
         b.audit.safeEmit({ action: AUDIT_NAMESPACE + ".gift_card.issue", outcome: "success", metadata: { id: issued.id } });
-        _redirect(res, "/admin/gift-cards/" + issued.id + "?issued=" + encodeURIComponent(issued.code));
+        // Stash the one-time code in a sealed cookie and 303-redirect to the
+        // card's detail page (PRG: a refresh can't re-issue). The detail GET
+        // reveals + clears the code; it never travels in the URL.
+        _stashGiftCardReveal(res, issued.id, issued.code);
+        _redirect(res, "/admin/gift-cards/" + encodeURIComponent(issued.id));
       },
     ));
 
@@ -2271,13 +2399,16 @@ function mount(router, deps) {
       }),
       async function (req, res) {
         var card = await giftcards.getById(req.params.id);
-        var url = req.url ? new URL(req.url, "http://localhost") : null;
-        var issuedCode = url && url.searchParams.get("issued");
         if (!card) {
           return _sendHtml(res, 404, renderAdminGiftCard({
             shop_name: deps.shop_name, nav_available: navAvailable, card: null,
           }));
         }
+        // One-time reveal: if this GET follows a fresh issue (sealed
+        // `gc_reveal` cookie present for this id), show the plaintext code
+        // once and clear the cookie. A subsequent reload reveals nothing —
+        // the code never lands in the URL / history / access log.
+        var issuedCode = _takeGiftCardReveal(req, res, req.params.id);
         var history = [];
         if (giftCardLedger) {
           try { history = (await giftCardLedger.history(req.params.id, { limit: 500 })).rows; }
@@ -2285,7 +2416,7 @@ function mount(router, deps) {
         }
         _sendHtml(res, 200, renderAdminGiftCard({
           shop_name: deps.shop_name, nav_available: navAvailable, card: card,
-          ledger: history, issued_code: issuedCode,
+          ledger: history, issued_code: issuedCode || undefined,
         }));
       },
     ));
@@ -2298,15 +2429,11 @@ function mount(router, deps) {
   async function _issueGiftCard(body) {
     var input = { currency: typeof body.currency === "string" ? body.currency.trim().toUpperCase() : body.currency };
     if (body.amount_minor != null && body.amount_minor !== "") {
-      var n = typeof body.amount_minor === "number" ? body.amount_minor : parseInt(String(body.amount_minor), 10);
-      if (!Number.isInteger(n)) throw new TypeError("giftcards: amount_minor must be an integer (minor units)");
-      input.amount_minor = n;
+      input.amount_minor = _strictMinorInt(body.amount_minor, "giftcards", "amount_minor (minor units)");
     }
     if (body.issued_to_email) input.issued_to_email = String(body.issued_to_email).trim();
     if (body.expires_at != null && body.expires_at !== "") {
-      var ex = typeof body.expires_at === "number" ? body.expires_at : parseInt(String(body.expires_at), 10);
-      if (!Number.isInteger(ex)) throw new TypeError("giftcards: expires_at must be an integer epoch-ms");
-      input.expires_at = ex;
+      input.expires_at = _strictMinorInt(body.expires_at, "giftcards", "expires_at (epoch-ms)");
     }
     var issued = await giftcards.issue(input);
     if (giftCardLedger) {
@@ -2470,10 +2597,11 @@ var DASHBOARD_LAYOUT =
   "  <meta charset=\"utf-8\">\n" +
   "  <meta name=\"viewport\" content=\"width=device-width,initial-scale=1\">\n" +
   "  <meta name=\"robots\" content=\"noindex,nofollow\">\n" +
-  "  <title>Admin dashboard — {{shop_name}}</title>\n" +
+  "  <title>{{page_title}} — {{shop_name}}</title>\n" +
   "  RAW_ADMIN_CSS\n" +
   "</head>\n" +
   "<body>\n" +
+  "  <a class=\"skip-link\" href=\"#admin-main\">Skip to content</a>\n" +
   "  <header class=\"admin-header\">\n" +
   "    <div class=\"admin-header__inner\">\n" +
   "      <h1>{{shop_name}} <span class=\"brand-accent\">/ admin</span></h1>\n" +
@@ -2481,7 +2609,7 @@ var DASHBOARD_LAYOUT =
   "    </div>\n" +
   "  </header>\n" +
   "  {{nav}}\n" +
-  "  <main>{{body}}</main>\n" +
+  "  <main id=\"admin-main\">{{body}}</main>\n" +
   "</body>\n" +
   "</html>\n";
 
@@ -2565,7 +2693,7 @@ function renderDashboard(opts) {
     }).join("");
     otherCurrencies =
       "<section><h2>Other currencies in window</h2><div class=\"panel\">" +
-      "<table><thead><tr><th>Currency</th><th class=\"num\">Orders</th><th class=\"num\">Revenue</th></tr></thead><tbody>" + rows + "</tbody></table>" +
+      "<table><thead><tr><th scope=\"col\">Currency</th><th scope=\"col\" class=\"num\">Orders</th><th scope=\"col\" class=\"num\">Revenue</th></tr></thead><tbody>" + rows + "</tbody></table>" +
       "</div></section>";
   }
 
@@ -2599,11 +2727,11 @@ function renderDashboard(opts) {
     "<section><h2>Catalog + activity</h2><div class=\"two-col\">" +
     "  <div class=\"panel\">" +
     "    <h3 class=\"subhead\">Top SKUs by units sold</h3>" +
-    "    <table><thead><tr><th>SKU</th><th class=\"num\">Units</th><th class=\"num\">Revenue</th></tr></thead><tbody>" + topRows + "</tbody></table>" +
+    "    <table><thead><tr><th scope=\"col\">SKU</th><th scope=\"col\" class=\"num\">Units</th><th scope=\"col\" class=\"num\">Revenue</th></tr></thead><tbody>" + topRows + "</tbody></table>" +
     "  </div>" +
     "  <div class=\"panel\">" +
     "    <h3 class=\"subhead\">Recent orders</h3>" +
-    "    <table><thead><tr><th>Order</th><th>Status</th><th class=\"num\">Total</th></tr></thead><tbody>" + recentRows + "</tbody></table>" +
+    "    <table><thead><tr><th scope=\"col\">Order</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Total</th></tr></thead><tbody>" + recentRows + "</tbody></table>" +
     "  </div>" +
     "</div></section>";
 
@@ -2657,7 +2785,7 @@ function _adminNav(active, available) {
   var links = ADMIN_NAV_ITEMS.filter(function (it) {
     return !it.requires || !available || available[it.requires];
   }).map(function (it) {
-    return "<a href=\"" + it.href + "\"" + (it.key === active ? " class=\"active\"" : "") + ">" +
+    return "<a href=\"" + it.href + "\"" + (it.key === active ? " class=\"active\" aria-current=\"page\"" : "") + ">" +
       _htmlEscape(it.label) + "</a>";
   }).join("");
   return "<nav class=\"admin-nav\"><div class=\"admin-nav__inner\">" + links + "</div></nav>";
@@ -2666,6 +2794,7 @@ function _adminNav(active, available) {
 function _renderAdminShell(shopName, subtitle, bodyHtml, active, available) {
   return _renderTemplate(DASHBOARD_LAYOUT, {
     shop_name:    shopName || "blamejs.shop",
+    page_title:   subtitle || "Admin",
     window_label: subtitle || "",
     nav:          "RAW_NAV",
     body:         "RAW_BODY",
@@ -2674,6 +2803,35 @@ function _renderAdminShell(shopName, subtitle, bodyHtml, active, available) {
     .replace("RAW_BODY", bodyHtml);
 }
 
+// Server-rendered confirmation interstitial for irreversible /
+// money-moving actions. The CSP forbids inline script, so a client
+// `confirm()` dialog is impossible — instead the action button POSTs
+// here, this page states the consequence, and its Confirm button POSTs
+// to the real endpoint (Cancel is a plain link back). `opts.fields` is
+// an optional map of hidden form inputs forwarded to the real endpoint.
+function renderAdminConfirm(opts) {
+  opts = opts || {};
+  var fields = opts.fields || {};
+  var hidden = Object.keys(fields).map(function (k) {
+    return "<input type=\"hidden\" name=\"" + _htmlEscape(k) + "\" value=\"" + _htmlEscape(fields[k]) + "\">";
+  }).join("");
+  var body =
+    "<section class=\"mw-42\">" +
+      "<h2>" + _htmlEscape(opts.heading || "Confirm action") + "</h2>" +
+      "<div class=\"banner banner--warn\">" + _htmlEscape(opts.consequence || "This action cannot be undone.") + "</div>" +
+      "<div class=\"panel\">" +
+        "<p>" + _htmlEscape(opts.detail || "Are you sure you want to continue?") + "</p>" +
+        "<div class=\"actions-row\">" +
+          "<form method=\"post\" action=\"" + _htmlEscape(opts.action) + "\" class=\"form-inline\">" + hidden +
+            "<button class=\"btn btn--danger\" type=\"submit\">" + _htmlEscape(opts.confirm_label || "Confirm") + "</button>" +
+          "</form>" +
+          "<a class=\"btn btn--ghost\" href=\"" + _htmlEscape(opts.cancel_href) + "\">Cancel</a>" +
+        "</div>" +
+      "</div>" +
+    "</section>";
+  return _renderAdminShell(opts.shop_name, opts.heading || "Confirm", body, opts.active, opts.nav_available);
+}
+
 function renderAdminLogin(opts) {
   opts = opts || {};
   var err = opts.error
@@ -2793,7 +2951,7 @@ function renderAdminIntegrations(opts) {
       "<h2>Integrations</h2>" +
       "<p class=\"meta\">Every integration is off until you supply its credentials — set them as deployment secrets, then redeploy. Nothing is enabled without your keys.</p>" +
       "<div class=\"panel\"><table>" +
-        "<thead><tr><th>Integration</th><th>Status</th><th>To enable</th></tr></thead>" +
+        "<thead><tr><th scope=\"col\">Integration</th><th scope=\"col\">Status</th><th scope=\"col\">To enable</th></tr></thead>" +
         "<tbody>" + rows + "</tbody>" +
       "</table></div>" +
       "<p class=\"meta mt-125\">Sign in with Apple and PayPal are planned. “Sign in with Shop” / Shop Pay isn't available to a self-hosted store. See the README “Optional integrations” section for full setup steps.</p>" +
@@ -2818,7 +2976,7 @@ function renderAdminProducts(opts) {
       "<td>" + action + "</td></tr>";
   }).join("");
   var table = products.length
-    ? "<div class=\"panel\"><table><thead><tr><th>Title</th><th>Slug</th><th>Status</th><th>Action</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
+    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Title</th><th scope=\"col\">Slug</th><th scope=\"col\">Status</th><th scope=\"col\">Action</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
     : "<p class=\"empty\">No products yet — create your first one below.</p>";
   var body =
     "<section><h2>Products</h2>" + created + notice + table +
@@ -2874,7 +3032,7 @@ function renderAdminOrders(opts) {
   }).join("");
 
   var table = orders.length
-    ? "<div class=\"panel\"><table><thead><tr><th>Order</th><th>Status</th><th class=\"num\">Items</th><th class=\"num\">Total</th><th>Placed</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
+    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Order</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Items</th><th scope=\"col\" class=\"num\">Total</th><th scope=\"col\">Placed</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
     : "<p class=\"empty\">No orders" + (active ? " with status “" + _htmlEscape(active) + "”" : " yet") + ".</p>";
 
   var body = "<section><h2>Orders</h2>" + notice + chips + table + "</section>";
@@ -2897,7 +3055,7 @@ function renderAdminOrder(opts) {
       "</tr>";
   }).join("");
   var linesTable = (o.lines && o.lines.length)
-    ? "<table><thead><tr><th>SKU</th><th class=\"num\">Qty</th><th class=\"num\">Unit</th><th class=\"num\">Line</th></tr></thead><tbody>" + lineRows + "</tbody></table>"
+    ? "<table><thead><tr><th scope=\"col\">SKU</th><th scope=\"col\" class=\"num\">Qty</th><th scope=\"col\" class=\"num\">Unit</th><th scope=\"col\" class=\"num\">Line</th></tr></thead><tbody>" + lineRows + "</tbody></table>"
     : "<p class=\"empty\">No line items recorded.</p>";
 
   function _total(label, minor, strong) {
@@ -2927,7 +3085,9 @@ function renderAdminOrder(opts) {
   var actionForms = transitions.map(function (t) {
     if (t.on === "refund") {
       if (!opts.can_refund) return "";  // no payment intent — nothing to refund here
-      return "<form method=\"post\" action=\"/admin/orders/" + _htmlEscape(o.id) + "/refund\" class=\"form-inline\">" +
+      // POSTs to the confirm interstitial (states the amount + warns
+      // it's irreversible), whose Confirm button POSTs the real refund.
+      return "<form method=\"post\" action=\"/admin/orders/" + _htmlEscape(o.id) + "/refund/confirm\" class=\"form-inline\">" +
         "<button class=\"btn btn--danger\" type=\"submit\">" + _htmlEscape(t.label) + "</button>" +
         "</form>";
     }
@@ -3000,7 +3160,7 @@ function renderAdminCustomers(opts) {
   }).join("");
 
   var table = customers.length
-    ? "<div class=\"panel\"><table><thead><tr><th>Name</th><th>ID</th><th>Joined</th><th>Sign-in method</th><th class=\"num\">Orders</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
+    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Name</th><th scope=\"col\">ID</th><th scope=\"col\">Joined</th><th scope=\"col\">Sign-in method</th><th scope=\"col\" class=\"num\">Orders</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
     : "<p class=\"empty\">No customers yet.</p>";
 
   // Cursor pager — a Next link when the page filled and more rows remain.
@@ -3056,7 +3216,7 @@ function renderAdminReturns(opts) {
   }).join("");
 
   var table = rmas.length
-    ? "<div class=\"panel\"><table><thead><tr><th>RMA</th><th>Order</th><th>Reason</th><th>Status</th><th class=\"num\">Items</th><th class=\"num\">Refund</th><th>Requested</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
+    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">RMA</th><th scope=\"col\">Order</th><th scope=\"col\">Reason</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Items</th><th scope=\"col\" class=\"num\">Refund</th><th scope=\"col\">Requested</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
     : "<p class=\"empty\">No “" + _htmlEscape(active) + "” returns.</p>";
 
   var body = "<section><h2>Returns</h2>" + notice + chips + table + "</section>";
@@ -3076,7 +3236,7 @@ function renderAdminReturn(opts) {
       "<td>" + _htmlEscape(l.reason || "—") + "</td></tr>";
   }).join("");
   var linesTable = (r.lines && r.lines.length)
-    ? "<table><thead><tr><th>SKU</th><th class=\"num\">Qty</th><th>Reason</th></tr></thead><tbody>" + lineRows + "</tbody></table>"
+    ? "<table><thead><tr><th scope=\"col\">SKU</th><th scope=\"col\" class=\"num\">Qty</th><th scope=\"col\">Reason</th></tr></thead><tbody>" + lineRows + "</tbody></table>"
     : "<p class=\"empty\">No line items recorded.</p>";
 
   function _field(label, value) {
@@ -3313,7 +3473,9 @@ function renderAdminQuestion(opts) {
 
   var answerForm = "<div class=\"panel\"><h3>Post the seller answer</h3>" +
     "<form method=\"post\" action=\"/admin/questions/" + _htmlEscape(q.id) + "/answer\">" +
-      "<textarea name=\"body\" maxlength=\"4000\" rows=\"4\" required></textarea>" +
+      "<label class=\"form-field\"><span>Your answer</span>" +
+        "<textarea name=\"body\" maxlength=\"4000\" rows=\"4\" required></textarea>" +
+      "</label>" +
       "<div class=\"order-actions\"><button class=\"btn\" type=\"submit\">Submit answer</button></div>" +
     "</form>" +
     "<p class=\"meta\">The answer lands pending — approve it above to publish it on the product page.</p>" +
@@ -3346,7 +3508,7 @@ function renderAdminInventory(opts) {
     var isLow = th != null && available <= th;
     var thVal = th == null ? "" : String(th);
     return "<tr" + (isLow ? " class=\"row--low\"" : "") + ">" +
-      "<td><code class=\"order-id\">" + _htmlEscape(r.sku) + "</code>" + (isLow ? " <span class=\"status-pill pending\">low</span>" : "") + "</td>" +
+      "<th scope=\"row\"><code class=\"order-id\">" + _htmlEscape(r.sku) + "</code>" + (isLow ? " <span class=\"status-pill pending\">low</span>" : "") + "</th>" +
       "<td class=\"num\">" + _htmlEscape(String(r.stock_on_hand)) + "</td>" +
       "<td class=\"num\">" + _htmlEscape(String(r.stock_held)) + "</td>" +
       "<td class=\"num\"><strong>" + _htmlEscape(String(available)) + "</strong></td>" +
@@ -3360,7 +3522,7 @@ function renderAdminInventory(opts) {
   }).join("");
 
   var table = rows.length
-    ? "<div class=\"panel\"><table><thead><tr><th>SKU</th><th class=\"num\">On hand</th><th class=\"num\">Held</th><th class=\"num\">Available</th><th>Restock / threshold</th></tr></thead><tbody>" + body + "</tbody></table></div>"
+    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">SKU</th><th scope=\"col\" class=\"num\">On hand</th><th scope=\"col\" class=\"num\">Held</th><th scope=\"col\" class=\"num\">Available</th><th scope=\"col\">Restock / threshold</th></tr></thead><tbody>" + body + "</tbody></table></div>"
     : "<p class=\"empty\">No inventory rows" + (opts.low ? " below threshold" : " yet") + ".</p>";
 
   var createForm =
@@ -3402,7 +3564,7 @@ function renderAdminSubscriptionPlans(opts) {
     var price = pricing.format(p.amount_minor, String(p.currency || "").toUpperCase()) + " / " + every;
     var isActive = p.active === 1 || p.active === true;
     var archiveCell = isActive
-      ? "<form method=\"post\" action=\"/admin/subscription-plans/" + _htmlEscape(p.id) + "/archive\" class=\"form-inline\">" +
+      ? "<form method=\"post\" action=\"/admin/subscription-plans/" + _htmlEscape(p.id) + "/archive/confirm\" class=\"form-inline\">" +
           "<button class=\"btn btn--ghost\" type=\"submit\">Archive</button></form>"
       : "<span class=\"meta\">—</span>";
     return "<tr>" +
@@ -3416,7 +3578,7 @@ function renderAdminSubscriptionPlans(opts) {
   }).join("");
 
   var table = rows.length
-    ? "<div class=\"panel\"><table><thead><tr><th>Price / interval</th><th>Stripe price</th><th>Variant</th><th>Status</th><th>Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Price / interval</th><th scope=\"col\">Stripe price</th><th scope=\"col\">Variant</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
     : "<p class=\"empty\">No subscription plans" + (af === "0" ? " archived" : af === "1" ? " active" : " yet") + ".</p>";
 
   var intervalOpts = ["month", "year", "week", "day"].map(function (iv) {
@@ -3474,7 +3636,7 @@ function renderAdminGiftCards(opts) {
     var issued    = pricing.format(gc.issued_minor, cur);
     var remaining = pricing.format(gc.balance_minor, cur);
     return "<tr>" +
-      "<td><code class=\"order-id\">••••" + _htmlEscape(gc.code_hint) + "</code></td>" +
+      "<th scope=\"row\"><code class=\"order-id\">••••" + _htmlEscape(gc.code_hint) + "</code></th>" +
       "<td class=\"num\">" + _htmlEscape(issued) + "</td>" +
       "<td class=\"num\"><strong>" + _htmlEscape(remaining) + "</strong></td>" +
       "<td>" + _pill(gc.status) + "</td>" +
@@ -3484,7 +3646,7 @@ function renderAdminGiftCards(opts) {
   }).join("");
 
   var table = rows.length
-    ? "<div class=\"panel\"><table><thead><tr><th>Code</th><th class=\"num\">Issued</th><th class=\"num\">Remaining</th><th>Status</th><th>Issued on</th><th>Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Code</th><th scope=\"col\" class=\"num\">Issued</th><th scope=\"col\" class=\"num\">Remaining</th><th scope=\"col\">Status</th><th scope=\"col\">Issued on</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
     : "<p class=\"empty\">No gift cards" + (sf ? " " + _htmlEscape(sf) : " yet") + ".</p>";
 
   // The issue form composes the giftcards primitive's issue() — the
@@ -3549,7 +3711,7 @@ function renderAdminGiftCard(opts) {
     "</tr>";
   }).join("");
   var ledgerTable = ledger.length
-    ? "<div class=\"panel\"><table><thead><tr><th>Type</th><th class=\"num\">Amount</th><th class=\"num\">Balance after</th><th>Detail</th><th>When</th></tr></thead><tbody>" + ledgerRows + "</tbody></table></div>"
+    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Type</th><th scope=\"col\" class=\"num\">Amount</th><th scope=\"col\" class=\"num\">Balance after</th><th scope=\"col\">Detail</th><th scope=\"col\">When</th></tr></thead><tbody>" + ledgerRows + "</tbody></table></div>"
     : "<p class=\"empty\">No ledger transactions recorded for this card yet.</p>";
 
   var body = "<section><h2>Gift card</h2>" + issuedBanner + summary +
@@ -3579,12 +3741,12 @@ function renderAdminWebhooks(opts) {
       "<td>" +
         "<a class=\"btn btn--ghost\" href=\"/admin/webhooks/" + _htmlEscape(e.id) + "/deliveries\">Deliveries</a> " +
         "<form method=\"post\" action=\"/admin/webhooks/" + _htmlEscape(e.id) + "/toggle\" class=\"form-inline\"><button class=\"btn btn--ghost\" type=\"submit\">" + (isActive ? "Disable" : "Enable") + "</button></form> " +
-        "<form method=\"post\" action=\"/admin/webhooks/" + _htmlEscape(e.id) + "/delete\" class=\"form-inline\"><button class=\"btn btn--danger\" type=\"submit\">Delete</button></form>" +
+        "<form method=\"post\" action=\"/admin/webhooks/" + _htmlEscape(e.id) + "/delete/confirm\" class=\"form-inline\"><button class=\"btn btn--danger\" type=\"submit\">Delete</button></form>" +
       "</td></tr>";
   }).join("");
 
   var table = rows.length
-    ? "<div class=\"panel\"><table><thead><tr><th>URL</th><th>Events</th><th>Status</th><th class=\"num\">Rate</th><th>Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">URL</th><th scope=\"col\">Events</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Rate</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
     : "<p class=\"empty\">No webhook endpoints yet.</p>";
 
   var eventChecks = known.map(function (ev) {
@@ -3661,7 +3823,7 @@ function renderAdminWebhookDeliveries(opts) {
   }).join("");
 
   var table = rows.length
-    ? "<div class=\"panel\"><table><thead><tr><th>Event</th><th>Status</th><th class=\"num\">Code</th><th class=\"num\">Attempts</th><th>Last error</th><th>Created</th><th></th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Event</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Code</th><th scope=\"col\" class=\"num\">Attempts</th><th scope=\"col\">Last error</th><th scope=\"col\">Created</th><th scope=\"col\"></th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
     : "<p class=\"empty\">No deliveries recorded for this endpoint yet.</p>";
 
   var head = "<p class=\"meta\">Endpoint <code class=\"order-id\">" + _htmlEscape(e.url) + "</code></p>";
@@ -3705,7 +3867,7 @@ function renderAdminCollections(opts) {
   }).join("");
 
   var table = rows.length
-    ? "<div class=\"panel\"><table><thead><tr><th>Title</th><th>Slug</th><th>Type</th><th>Status</th><th class=\"num\">Products</th><th>Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Title</th><th scope=\"col\">Slug</th><th scope=\"col\">Type</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Products</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
     : "<p class=\"empty\">No collections" + (af === "0" ? " archived" : af === "1" ? " active" : " yet") + ".</p>";
 
   // The create form toggles between a manual and a smart shape. Manual
@@ -3821,7 +3983,7 @@ function renderAdminCollection(opts) {
       "</tr>";
     }).join("");
     var memberTable = members.length
-      ? "<div class=\"panel\"><table><thead><tr><th class=\"num\">#</th><th>Product id</th><th></th></tr></thead><tbody>" + memberRows + "</tbody></table></div>"
+      ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\" class=\"num\">#</th><th scope=\"col\">Product id</th><th scope=\"col\"></th></tr></thead><tbody>" + memberRows + "</tbody></table></div>"
       : "<p class=\"empty\">No members yet — add a product below.</p>";
 
     // Reorder: a single field of the current ids, comma-joined, that the
@@ -3861,7 +4023,7 @@ function renderAdminCollection(opts) {
       "</tr>";
     }).join("");
     var previewTable = preview.length
-      ? "<div class=\"panel\"><table><thead><tr><th>Title</th><th>Slug</th><th>Status</th></tr></thead><tbody>" + previewCards + "</tbody></table></div>"
+      ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Title</th><th scope=\"col\">Slug</th><th scope=\"col\">Status</th></tr></thead><tbody>" + previewCards + "</tbody></table></div>"
       : "<p class=\"empty\">No products match these rules yet.</p>";
     detailBody = "<section class=\"mt\"><h3 class=\"fs-105\">Matched products (live preview)</h3>" +
       "<p class=\"meta\">The first " + _htmlEscape(String(preview.length)) + " products the rules match right now.</p>" +
@@ -3901,4 +4063,5 @@ module.exports = {
   renderAdminCollection:   renderAdminCollection,
   renderAdminGiftCards:    renderAdminGiftCards,
   renderAdminGiftCard:     renderAdminGiftCard,
+  renderAdminConfirm:      renderAdminConfirm,
 };

package/lib/asset-manifest.json

@@ -1,13 +1,13 @@
 {
-  "version": "0.1.37",
+  "version": "0.2.0",
   "assets": {
     "css/admin.css": {
-      "integrity": "sha384-rvjL1QySBgNJGEUDusbbMCkL3fsjmzcwUvTp9pljo/0Nn/lErxq2AbY8EYvDF9Ch",
-      "fingerprinted": "css/admin.4dc78dfc45d0736d.css"
+      "integrity": "sha384-oUi6NkXA0ULSy8+8+LG0FV6jsgr7Y11Xf3VdnwUESnvUPaN7anYEC+QOAUXwgsap",
+      "fingerprinted": "css/admin.7b692a8965624a0c.css"
     },
     "css/main.css": {
-      "integrity": "sha384-oCNOJjwj7/EHXCrMnkhOTDY/5iFDeIvpWFmMyeX1g73CE4usg4i4q/dGYx4Ko258",
-      "fingerprinted": "css/main.0cbb632d5418155e.css"
+      "integrity": "sha384-4RH2PIC1FVxNFfphco1poLi1gMXa8MkvmOK8tXLSSwUKfhbGi0VYXlWtWBXu4Msd",
+      "fingerprinted": "css/main.f61829cdefb48dda.css"
     },
     "js/consent.js": {
       "integrity": "sha384-KKMQ0og8HPOykRRPpUyxX7dMhTvKySfVtpGX/jGWzZwNaN/c4OykvRvXpqBHcQST",