@blamejs/blamejs-shop 0.3.24 → 0.3.26

package/lib/admin.js

@@ -497,6 +497,9 @@ function mount(router, deps) {
   var productQa     = deps.productQa     || null;   // Q&A moderation endpoints disabled when absent
   var returns       = deps.returns       || null;   // RMA moderation endpoints disabled when absent
   var customers     = deps.customers     || null;   // read-only customers console disabled when absent
+  var storeCredit      = deps.storeCredit      || null;  // per-customer store-credit panel + grant/deduct disabled when absent
+  var customerNotes    = deps.customerNotes    || null;  // per-customer CRM notes panel disabled when absent
+  var customerSegments = deps.customerSegments || null;  // per-customer segment-membership panel disabled when absent
   var orderTracking = deps.orderTracking || null;   // shipment/tracking panel disabled when absent
   var salesReports  = deps.salesReports  || null;   // /admin/reports degrades to an unconfigured notice when absent
   var printReceipts = deps.printReceipts || null;   // order receipt document disabled when absent
@@ -505,6 +508,7 @@ function mount(router, deps) {
   var shippingLabels = deps.shippingLabels || null;  // per-shipment carrier-label record disabled when absent
   var splitShipments = deps.splitShipments || null;  // order split-shipment planner disabled when absent
   var salesTaxFilings = deps.salesTaxFilings || null; // sales-tax-filing remittance console disabled when absent
+  var supportTickets  = deps.supportTickets  || null; // support-ticket queue + thread console disabled when absent
 
   // Which optional console sections are wired — gates their nav links so a
   // signed-in admin is never sent to a route that wasn't mounted. Passed
@@ -512,7 +516,7 @@ function mount(router, deps) {
   // `reports` is always present in the nav (read-only sales summary needs no
   // extra dep); its route mounts unconditionally and renders an unconfigured
   // notice when the salesReports primitive isn't wired.
-  var navAvailable = { returns: !!returns, reviews: !!reviews, productQa: !!productQa, subscriptions: !!deps.subscriptions, webhooks: !!deps.webhooks, collections: !!deps.collections, customers: !!deps.customers, giftcards: !!deps.giftcards, announcementBar: !!deps.announcementBar, blog: !!deps.blog, customerSurveys: !!deps.customerSurveys, storefrontPages: !!deps.storefrontPages, businessHours: !!deps.businessHours, taxRates: !!deps.taxRates, shippingZones: !!deps.shippingZones, autoDiscount: !!deps.autoDiscount, discountAllocation: !!deps.discountAllocation, quantityDiscounts: !!deps.quantityDiscounts, loyalty: !!deps.loyalty, pickLists: !!pickLists, salesTaxFilings: !!salesTaxFilings, shippingLabels: !!shippingLabels };
+  var navAvailable = { returns: !!returns, reviews: !!reviews, productQa: !!productQa, subscriptions: !!deps.subscriptions, webhooks: !!deps.webhooks, collections: !!deps.collections, customers: !!deps.customers, giftcards: !!deps.giftcards, announcementBar: !!deps.announcementBar, blog: !!deps.blog, customerSurveys: !!deps.customerSurveys, storefrontPages: !!deps.storefrontPages, businessHours: !!deps.businessHours, taxRates: !!deps.taxRates, shippingZones: !!deps.shippingZones, autoDiscount: !!deps.autoDiscount, discountAllocation: !!deps.discountAllocation, quantityDiscounts: !!deps.quantityDiscounts, loyalty: !!deps.loyalty, pickLists: !!pickLists, salesTaxFilings: !!salesTaxFilings, shippingLabels: !!shippingLabels, supportTickets: !!supportTickets };
 
   try { b.audit.registerNamespace(AUDIT_NAMESPACE); } catch (_e) { /* idempotent */ }
 
@@ -2597,6 +2601,276 @@ function mount(router, deps) {
         }));
       },
     ));
+
+    // ---- customer detail ----------------------------------------------
+    // The per-customer operator screen. The roster (above) is read-only by
+    // design — the storefront owns account mutation via the passkey / OIDC
+    // ceremonies — so this screen READS the customer's identity fields +
+    // recent orders, and WRITES only the operator-managed satellites:
+    // store-credit (an audited wallet), CRM notes, and (read-only) segment
+    // membership. It does NOT edit the customer profile: the only mutable
+    // identity field is display_name, and the roster's stated design intent
+    // is read-only identity, so the operator-managed satellites are the
+    // write surface here. Each satellite panel renders only when its
+    // primitive is wired; an unwired one degrades to a "not wired" notice
+    // rather than vanishing.
+
+    // Free-text reason gate for a store-credit adjustment. A store-credit
+    // grant / deduct is a money-adjacent action, so the reason is MANDATORY
+    // — it rides into the ledger row's source_ref (grant) / reason (deduct)
+    // column so every balance change is attributed. Throws a TypeError
+    // (→ 400) on a missing / blank / over-long / control-byte reason so the
+    // form surfaces a clean notice and writes nothing. 128 chars matches the
+    // primitive's source_ref cap (storeCredit MAX_SOURCE_REF_LEN); the
+    // primitive re-validates, so this gate fails fast with operator-facing
+    // text rather than relying on the deeper throw.
+    var STORE_CREDIT_REASON_MAX = 128;
+    function _storeCreditReason(raw) {
+      if (raw == null) throw new TypeError("admin: a reason is required for a store-credit adjustment");
+      var s = String(raw).trim();
+      if (!s.length) throw new TypeError("admin: a reason is required for a store-credit adjustment");
+      if (s.length > STORE_CREDIT_REASON_MAX) throw new TypeError("admin: reason must be <= " + STORE_CREDIT_REASON_MAX + " chars");
+      if (/[\x00-\x1f\x7f]/.test(s)) throw new TypeError("admin: reason must not contain control bytes");
+      return s;
+    }
+    // Coerce the grant/deduct form into a positive minor-unit amount + a
+    // direction. `direction` is "grant" or "deduct"; `amount_minor` is a
+    // positive integer (the strict reader refuses "", floats, "12abc").
+    function _storeCreditDirection(body) {
+      var dir = typeof body.direction === "string" ? body.direction.trim() : "";
+      if (dir !== "grant" && dir !== "deduct") {
+        throw new TypeError("admin: direction must be 'grant' or 'deduct'");
+      }
+      return dir;
+    }
+
+    // Best-effort hydrate of a customer's satellites for the detail render.
+    // A satellite whose primitive isn't wired (or whose table isn't migrated
+    // on a given deploy) degrades that panel to a notice rather than 500-ing
+    // the page — same discipline as the order-detail tracking panel.
+    async function _customerDetailModel(customer, flags) {
+      flags = flags || {};
+      var currency = await _defaultCurrency();
+
+      var recentOrders = [];
+      try {
+        var ordersPage = await order.listForCustomer(customer.id, { limit: 10 });
+        recentOrders = ordersPage.rows || [];
+      } catch (_e) { recentOrders = []; }
+
+      var creditBalanceMinor = null;
+      var creditHistory = [];
+      if (storeCredit) {
+        try { creditBalanceMinor = (await storeCredit.balance(customer.id)).balance_minor; }
+        catch (_e) { creditBalanceMinor = null; }
+        try { creditHistory = (await storeCredit.history({ customer_id: customer.id, limit: 10 })).rows || []; }
+        catch (_e) { creditHistory = []; }
+      }
+
+      var loyaltyInfo = null;
+      if (deps.loyalty) {
+        try { loyaltyInfo = await deps.loyalty.balance(customer.id); }
+        catch (_e) { loyaltyInfo = null; }
+      }
+
+      var notes = [];
+      if (customerNotes) {
+        try { notes = (await customerNotes.notesForCustomer({ customer_id: customer.id, limit: 20 })).rows || []; }
+        catch (_e) { notes = []; }
+      }
+
+      var segments = null;
+      if (customerSegments) {
+        try { segments = await customerSegments.segmentsForCustomer(customer.id); }
+        catch (_e) { segments = []; }
+      }
+
+      return Object.assign({
+        shop_name:      deps.shop_name,
+        nav_available:  navAvailable,
+        customer:       customer,
+        currency:       currency,
+        recent_orders:  recentOrders,
+        can_store_credit:    !!storeCredit,
+        store_credit_minor:  creditBalanceMinor,
+        store_credit_history: creditHistory,
+        loyalty:        loyaltyInfo,
+        loyalty_link:   !!deps.loyalty,
+        can_notes:      !!customerNotes,
+        notes:          notes,
+        can_segments:   !!customerSegments,
+        segments:       segments,
+      }, flags);
+    }
+
+    // Resolve the :id to a customer record. A malformed id throws inside the
+    // defensive id reader (customers.get) — caught and treated as "no such
+    // customer" so the route renders a clean 404, never a 500. An unknown
+    // (well-formed) id returns null → the same 404.
+    async function _resolveCustomer(id) {
+      try { return await customers.get(id); }
+      catch (e) { if (e instanceof TypeError) return null; throw e; }
+    }
+
+    router.get("/admin/customers/:id", _pageOrApi(true,
+      R(async function (req, res) {
+        var c = await _resolveCustomer(req.params.id);
+        if (!c) return _problem(res, 404, "customer-not-found");
+        // Bearer JSON: the customer record + its satellites (no HTML).
+        var model = await _customerDetailModel(c, {});
+        _json(res, 200, {
+          customer:             c,
+          recent_orders:        model.recent_orders,
+          store_credit_minor:   model.store_credit_minor,
+          store_credit_history: model.store_credit_history,
+          loyalty:              model.loyalty,
+          notes:                model.notes,
+          segments:             model.segments,
+        });
+      }),
+      async function (req, res) {
+        var c = await _resolveCustomer(req.params.id);
+        if (!c) return _sendHtml(res, 404, renderAdminCustomers({
+          shop_name: deps.shop_name, nav_available: navAvailable, customers: [], notice: "Customer not found.",
+        }));
+        var url = req.url ? new URL(req.url, "http://localhost") : null;
+        var flags = {
+          saved:        url && url.searchParams.get("saved"),
+          credit_notice: url && url.searchParams.get("credit_err") ? url.searchParams.get("credit_err") : null,
+          note_notice:   url && url.searchParams.get("note_err") ? url.searchParams.get("note_err") : null,
+        };
+        _sendHtml(res, 200, renderAdminCustomerDetail(await _customerDetailModel(c, flags)));
+      },
+    ));
+
+    // ---- store-credit adjustment (grant / deduct) ----------------------
+    // Scoped to the :id customer — the customer the adjustment targets is the
+    // path id, never a form field, so an operator can't grant credit to a
+    // different customer than the screen they're on. A grant composes
+    // storeCredit.credit (source goodwill / source_ref reason); a deduct
+    // composes storeCredit.expire (the operator-initiated burn that carries a
+    // required reason). Over-deduction is refused at the route as a clean 409
+    // BEFORE any write — the expire primitive caps silently at the balance,
+    // so the route enforces the no-overdraft contract by reading the balance
+    // first (nothing is written when the deduction exceeds the balance).
+    if (storeCredit) {
+      router.post("/admin/customers/:id/store-credit", _pageOrApi(false,
+        W("customer.store_credit.adjust", async function (req, res) {
+          var c = await _resolveCustomer(req.params.id);
+          if (!c) return _problem(res, 404, "customer-not-found");
+          var body = req.body || {};
+          var dir, amount, reason;
+          try {
+            dir    = _storeCreditDirection(body);
+            amount = _strictMinorInt(body.amount_minor, "admin", "amount_minor");
+            if (amount <= 0) throw new TypeError("admin: amount_minor must be a positive integer (minor units)");
+            reason = _storeCreditReason(body.reason);
+          } catch (e) {
+            if (e instanceof TypeError) return _problem(res, 400, "bad-request", e.message);
+            throw e;
+          }
+          var result;
+          if (dir === "grant") {
+            result = await storeCredit.credit({
+              customer_id: c.id, amount_minor: amount, source: "goodwill", source_ref: reason,
+            });
+          } else {
+            var bal = (await storeCredit.balance(c.id)).balance_minor;
+            if (amount > bal) {
+              return _problem(res, 409, "insufficient-balance", "Deduction exceeds the available store-credit balance.");
+            }
+            result = await storeCredit.expire({ customer_id: c.id, amount_minor: amount, reason: reason });
+          }
+          _json(res, 200, result);
+          return { id: c.id };
+        }),
+        async function (req, res) {
+          var c = await _resolveCustomer(req.params.id);
+          if (!c) return _sendHtml(res, 404, renderAdminCustomers({
+            shop_name: deps.shop_name, nav_available: navAvailable, customers: [], notice: "Customer not found.",
+          }));
+          var body = req.body || {};
+          var dir, amount, reason;
+          try {
+            dir    = _storeCreditDirection(body);
+            amount = _strictMinorInt(body.amount_minor, "admin", "amount_minor");
+            if (amount <= 0) throw new TypeError("admin: amount_minor must be a positive integer (minor units)");
+            reason = _storeCreditReason(body.reason);
+          } catch (e) {
+            var n = _safeNotice(e, "customer.store_credit.adjust");
+            return _redirect(res, "/admin/customers/" + encodeURIComponent(c.id) +
+              "?credit_err=" + encodeURIComponent(n.message.replace(/^admin[.:]\s*/, "")));
+          }
+          if (dir === "deduct") {
+            var bal = (await storeCredit.balance(c.id)).balance_minor;
+            if (amount > bal) {
+              return _redirect(res, "/admin/customers/" + encodeURIComponent(c.id) +
+                "?credit_err=" + encodeURIComponent("That deduction exceeds the available balance."));
+            }
+          }
+          try {
+            if (dir === "grant") {
+              await storeCredit.credit({ customer_id: c.id, amount_minor: amount, source: "goodwill", source_ref: reason });
+            } else {
+              await storeCredit.expire({ customer_id: c.id, amount_minor: amount, reason: reason });
+            }
+          } catch (e) {
+            var n2 = _safeNotice(e, "customer.store_credit.adjust");
+            return _redirect(res, "/admin/customers/" + encodeURIComponent(c.id) +
+              "?credit_err=" + encodeURIComponent(n2.message.replace(/^(?:admin|storeCredit)[.:]\s*/, "")));
+          }
+          b.audit.safeEmit({ action: AUDIT_NAMESPACE + ".customer.store_credit.adjust", outcome: "success", metadata: { id: c.id, direction: dir } });
+          _redirect(res, "/admin/customers/" + encodeURIComponent(c.id) + "?saved=1");
+        },
+      ));
+    }
+
+    // ---- customer notes (add) ------------------------------------------
+    // Scoped to the :id customer — the note attaches to the path customer.
+    // Composes customerNotes.addNote (the body is required + length-capped by
+    // the primitive). The author is stamped "operator" — the console never
+    // adds a system note. Bad input (empty / over-long body, bad kind) is a
+    // clean 4xx with nothing written.
+    if (customerNotes) {
+      router.post("/admin/customers/:id/notes", _pageOrApi(false,
+        W("customer.note.add", async function (req, res) {
+          var c = await _resolveCustomer(req.params.id);
+          if (!c) return _problem(res, 404, "customer-not-found");
+          var body = req.body || {};
+          var note;
+          try {
+            note = await customerNotes.addNote({
+              customer_id: c.id, author: "operator",
+              body: body.body, kind: (body.kind != null && body.kind !== "") ? body.kind : undefined,
+            });
+          } catch (e) {
+            if (e instanceof TypeError) return _problem(res, 400, "bad-request", e.message);
+            throw e;
+          }
+          _json(res, 201, note);
+          return { id: c.id };
+        }),
+        async function (req, res) {
+          var c = await _resolveCustomer(req.params.id);
+          if (!c) return _sendHtml(res, 404, renderAdminCustomers({
+            shop_name: deps.shop_name, nav_available: navAvailable, customers: [], notice: "Customer not found.",
+          }));
+          var body = req.body || {};
+          try {
+            await customerNotes.addNote({
+              customer_id: c.id, author: "operator",
+              body: body.body, kind: (body.kind != null && body.kind !== "") ? body.kind : undefined,
+            });
+          } catch (e) {
+            var n = _safeNotice(e, "customer.note.add");
+            return _redirect(res, "/admin/customers/" + encodeURIComponent(c.id) +
+              "?note_err=" + encodeURIComponent(n.message.replace(/^(?:admin|customerNotes)[.:]\s*/, "")));
+          }
+          b.audit.safeEmit({ action: AUDIT_NAMESPACE + ".customer.note.add", outcome: "success", metadata: { id: c.id } });
+          _redirect(res, "/admin/customers/" + encodeURIComponent(c.id) + "?saved=1");
+        },
+      ));
+    }
   }
 
   // ---- refunds --------------------------------------------------------
@@ -3305,6 +3579,220 @@ function mount(router, deps) {
     ));
   }
 
+  // ---- support tickets ------------------------------------------------
+  // The operator queue over the customer-service ticketing surface: a
+  // status-filterable list (plus an unassigned-triage view via the
+  // primitive's listUnassigned), a ticket detail with the full thread +
+  // requester + assignee + tags, an operator reply, assign, tag, and the
+  // FSM status transitions the module exposes (in_progress / waiting /
+  // resolved / closed / reopened). Content-negotiated like the other
+  // screens: bearer → JSON; signed-in browser → the HTML console.
+  if (supportTickets) {
+    var support = supportTickets;
+
+    // Resolve the ?status= chip into a list. The special "unassigned"
+    // chip routes through listUnassigned; every real status routes through
+    // the primitive's status-filtered list. A bad/absent chip falls back
+    // to the whole board.
+    async function _supportRows(filter) {
+      if (filter === "unassigned") {
+        return { rows: await support.listUnassigned({}), filter: "unassigned" };
+      }
+      if (filter && support.ALLOWED_STATUSES.indexOf(filter) !== -1) {
+        return { rows: await support.list({ status_filter: filter, limit: support.MAX_LIST_LIMIT }), filter: filter };
+      }
+      return { rows: await support.list({ limit: support.MAX_LIST_LIMIT }), filter: "all" };
+    }
+
+    router.get("/admin/support", _pageOrApi(true,
+      R(async function (req, res) {
+        var url = req.url ? new URL(req.url, "http://localhost") : null;
+        var filter = (url && url.searchParams.get("status")) || null;
+        var resolved = await _supportRows(filter);
+        _json(res, 200, { rows: resolved.rows, status: resolved.filter });
+      }),
+      async function (req, res) {
+        var url = req.url ? new URL(req.url, "http://localhost") : null;
+        var filter = (url && url.searchParams.get("status")) || null;
+        var resolved = await _supportRows(filter);
+        _sendHtml(res, 200, renderAdminSupport({
+          shop_name: deps.shop_name, nav_available: navAvailable,
+          tickets: resolved.rows, status: resolved.filter,
+        }));
+      },
+    ));
+
+    // Resolve a ticket by :id, surfacing a malformed / unknown id as a
+    // 404 (the route is a defensive request-shape reader, never a 500).
+    // Returns null after sending the 404 so the caller short-circuits.
+    async function _supportTicketOr404(req, res, isJson) {
+      var ticket;
+      try { ticket = await support.get(req.params.id); }
+      catch (e) {
+        if (e instanceof TypeError) {
+          if (isJson) { _problem(res, 404, "support-ticket-not-found"); return null; }
+          _sendHtml(res, 404, renderAdminSupport({
+            shop_name: deps.shop_name, nav_available: navAvailable, tickets: [], status: "all", notice: "Ticket not found.",
+          }));
+          return null;
+        }
+        throw e;
+      }
+      if (!ticket) {
+        if (isJson) { _problem(res, 404, "support-ticket-not-found"); return null; }
+        _sendHtml(res, 404, renderAdminSupport({
+          shop_name: deps.shop_name, nav_available: navAvailable, tickets: [], status: "all", notice: "Ticket not found.",
+        }));
+        return null;
+      }
+      return ticket;
+    }
+
+    router.get("/admin/support/:id", _pageOrApi(true,
+      R(async function (req, res) {
+        var ticket = await _supportTicketOr404(req, res, true); if (!ticket) return;
+        var thread = await support.thread(ticket.id);
+        _json(res, 200, thread);
+      }),
+      async function (req, res) {
+        var ticket = await _supportTicketOr404(req, res, false); if (!ticket) return;
+        var thread = await support.thread(ticket.id);
+        var url = req.url ? new URL(req.url, "http://localhost") : null;
+        _sendHtml(res, 200, renderAdminSupportTicket({
+          shop_name:   deps.shop_name,
+          nav_available: navAvailable,
+          ticket:      thread.ticket,
+          messages:    thread.messages,
+          transitions: support.ALLOWED_STATUSES,
+          moved:       url && url.searchParams.get("moved"),
+          notice:      url && url.searchParams.get("err") ? "That action couldn't be completed for this ticket." : null,
+        }));
+      },
+    ));
+
+    // The browser side of a per-ticket action: run `opFn(id, body)`, then
+    // PRG back to the detail. A bad shape (TypeError), an FSM refusal, a
+    // closed-ticket reply, or a not-found row becomes an ?err=1 notice on
+    // the detail, never a 500; anything else propagates to the wrapper.
+    function _supportClientError(e) {
+      if (!e) return false;
+      if (e instanceof TypeError) return true;
+      return e.code === "SUPPORT_TICKET_NOT_FOUND" ||
+             e.code === "SUPPORT_TICKET_CLOSED" ||
+             e.code === "SUPPORT_TICKET_TRANSITION_REFUSED";
+    }
+    function _supportAction(jsonHandler, auditEvent, opFn) {
+      return _pageOrApi(false, jsonHandler, async function (req, res) {
+        var id = req.params.id;
+        try { await opFn(id, req.body || {}); }
+        catch (e) {
+          if (_supportClientError(e)) {
+            return _redirect(res, "/admin/support/" + encodeURIComponent(id) + "?err=1");
+          }
+          throw e;
+        }
+        b.audit.safeEmit({ action: AUDIT_NAMESPACE + "." + auditEvent, outcome: "success", metadata: { id: id } });
+        _redirect(res, "/admin/support/" + encodeURIComponent(id) + "?moved=1");
+      });
+    }
+
+    // Map a support primitive error to an API problem. A bad shape is a
+    // 400, a not-found a 404, a closed-ticket reply / refused transition a
+    // 409 — same classification the browser path uses, surfaced as
+    // problem-details for the JSON contract.
+    function _supportApiError(res, e) {
+      if (e instanceof TypeError) return _problem(res, 400, "bad-request", e.message);
+      if (e && e.code === "SUPPORT_TICKET_NOT_FOUND") return _problem(res, 404, "support-ticket-not-found");
+      if (e && e.code === "SUPPORT_TICKET_CLOSED") return _problem(res, 409, "conflict", e.message);
+      if (e && e.code === "SUPPORT_TICKET_TRANSITION_REFUSED") return _problem(res, 409, "conflict", e.message);
+      return null;
+    }
+
+    // Operator reply — author "operator". An internal=1 note is supported
+    // (operator-only; never shown to the customer) via the form's
+    // checkbox.
+    router.post("/admin/support/:id/reply", _supportAction(
+      W("support.reply", async function (req, res) {
+        var body = req.body || {};
+        var ticket;
+        try {
+          ticket = await support.reply({
+            ticket_id: req.params.id,
+            author:    "operator",
+            body:      body.body,
+            internal:  body.internal === "1" || body.internal === true,
+          });
+        } catch (e) {
+          var mapped = _supportApiError(res, e); if (mapped !== null) return mapped;
+          throw e;
+        }
+        _json(res, 200, ticket);
+        return ticket;
+      }),
+      "support.reply",
+      function (id, body) {
+        return support.reply({
+          ticket_id: id, author: "operator", body: body.body,
+          internal:  body.internal === "1" || body.internal === true,
+        });
+      },
+    ));
+
+    // Assign the ticket to an operator (operator_id is a UUID — the
+    // console seeds it from a hidden field carrying the signed-in
+    // operator's id, or an explicit input).
+    router.post("/admin/support/:id/assign", _supportAction(
+      W("support.assign", async function (req, res) {
+        var body = req.body || {};
+        var ticket;
+        try { ticket = await support.assign({ ticket_id: req.params.id, operator_id: body.operator_id }); }
+        catch (e) { var mapped = _supportApiError(res, e); if (mapped !== null) return mapped; throw e; }
+        _json(res, 200, ticket);
+        return ticket;
+      }),
+      "support.assign",
+      function (id, body) { return support.assign({ ticket_id: id, operator_id: body.operator_id }); },
+    ));
+
+    // Add a free-form tag.
+    router.post("/admin/support/:id/tag", _supportAction(
+      W("support.tag", async function (req, res) {
+        var body = req.body || {};
+        var ticket;
+        try { ticket = await support.addTag({ ticket_id: req.params.id, tag: body.tag }); }
+        catch (e) { var mapped = _supportApiError(res, e); if (mapped !== null) return mapped; throw e; }
+        _json(res, 200, ticket);
+        return ticket;
+      }),
+      "support.tag",
+      function (id, body) { return support.addTag({ ticket_id: id, tag: body.tag }); },
+    ));
+
+    // FSM status transitions. Each posts to /admin/support/:id/<to_status>
+    // for the edges the module's graph exposes; an illegal edge from the
+    // current state is refused by the primitive (→ ?err=1 notice). The
+    // `reopen` URL maps to the module's `reopened` status (the customer-
+    // facing verb for a resolved ticket re-entering the workflow).
+    function _supportTransition(verb, toStatus) {
+      router.post("/admin/support/:id/" + verb, _supportAction(
+        W("support." + verb, async function (req, res) {
+          var ticket;
+          try { ticket = await support.transition({ ticket_id: req.params.id, to_status: toStatus, reason: (req.body && req.body.reason) || undefined }); }
+          catch (e) { var mapped = _supportApiError(res, e); if (mapped !== null) return mapped; throw e; }
+          _json(res, 200, ticket);
+          return ticket;
+        }),
+        "support." + verb,
+        function (id, body) { return support.transition({ ticket_id: id, to_status: toStatus, reason: (body && body.reason) || undefined }); },
+      ));
+    }
+    _supportTransition("in-progress",      "in_progress");
+    _supportTransition("waiting-customer", "waiting_customer");
+    _supportTransition("resolved",         "resolved");
+    _supportTransition("closed",           "closed");
+    _supportTransition("reopen",           "reopened");
+  }
+
   // ---- config ---------------------------------------------------------
 
   var config = deps.config || null;
@@ -7608,6 +8096,7 @@ var ADMIN_NAV_ITEMS = [
   { key: "reports",      href: "/admin/reports",      label: "Reports" },
   { key: "customers",    href: "/admin/customers",    label: "Customers",    requires: "customers" },
   { key: "returns",      href: "/admin/returns",      label: "Returns",      requires: "returns" },
+  { key: "support",      href: "/admin/support",      label: "Support",      requires: "supportTickets" },
   { key: "reviews",      href: "/admin/reviews",      label: "Reviews",      requires: "reviews" },
   { key: "questions",    href: "/admin/questions",    label: "Q&A",          requires: "productQa" },
   { key: "subscriptions", href: "/admin/subscription-plans", label: "Subscriptions", requires: "subscriptions" },
@@ -8750,17 +9239,21 @@ function renderAdminCustomers(opts) {
     }
     var method = methodCells.length ? methodCells.join(" ") : "<span class=\"meta\">—</span>";
     var orders = orderCounts[c.id] || 0;
+    var enc = encodeURIComponent(c.id);
     return "<tr>" +
-      "<td><strong>" + _htmlEscape(c.display_name) + "</strong></td>" +
+      "<td><a href=\"/admin/customers/" + _htmlEscape(enc) + "\"><strong>" + _htmlEscape(c.display_name) + "</strong></a></td>" +
       "<td><code class=\"order-id\">" + _htmlEscape(String(c.id).slice(0, 8)) + "</code></td>" +
       "<td>" + _htmlEscape(_fmtDate(c.created_at)) + "</td>" +
       "<td>" + method + "</td>" +
       "<td class=\"num\">" + _htmlEscape(String(orders)) + "</td>" +
+      "<td><a class=\"btn btn--ghost btn--sm\" href=\"/admin/customers/" + _htmlEscape(enc) + "\">Manage</a></td>" +
       "</tr>";
   }).join("");
 
+  var notice = opts.notice ? "<div class=\"banner banner--warn\">" + _htmlEscape(opts.notice) + "</div>" : "";
+
   var table = customers.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Name</th><th scope=\"col\">ID</th><th scope=\"col\">Joined</th><th scope=\"col\">Sign-in method</th><th scope=\"col\" class=\"num\">Orders</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
+    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Name</th><th scope=\"col\">ID</th><th scope=\"col\">Joined</th><th scope=\"col\">Sign-in method</th><th scope=\"col\" class=\"num\">Orders</th><th scope=\"col\"><span class=\"sr-only\">Manage</span></th></tr></thead><tbody>" + rows + "</tbody></table></div>"
     : "<p class=\"empty\">No customers yet.</p>";
 
   // Cursor pager — a Next link when the page filled and more rows remain.
@@ -8769,12 +9262,165 @@ function renderAdminCustomers(opts) {
     ? "<div class=\"actions-row\"><a class=\"btn btn--ghost\" href=\"/admin/customers?cursor=" + _htmlEscape(encodeURIComponent(opts.next_cursor)) + "\">Next page <span aria-hidden=\"true\">→</span></a></div>"
     : "";
 
-  var body = "<section><h2>Customers</h2>" +
-    "<p class=\"meta\">Accounts are passwordless — customers enrol a passkey or sign in with a federated provider. Email addresses aren't stored in the clear, so they're not shown here.</p>" +
+  var body = "<section><h2>Customers</h2>" + notice +
+    "<p class=\"meta\">Accounts are passwordless — customers enrol a passkey or sign in with a federated provider. Email addresses aren't stored in the clear, so they're not shown here. Open a customer to manage their store credit, loyalty, notes, and segment membership.</p>" +
     table + pager + "</section>";
   return _renderAdminShell(opts.shop_name, "Customers", body, "customers", opts.nav_available);
 }
 
+// Per-customer operator detail screen. READS the customer's identity fields
+// + recent orders; WRITES only the operator-managed satellites (store-credit
+// + CRM notes). Segment membership is read-only — it is rule-derived (RFM
+// predicates recomputed by the scheduler), so there is no per-customer
+// manual assign / remove in the segments primitive; the panel shows the
+// segments the customer currently sits in and says so. Every panel renders
+// only when its primitive is wired.
+function renderAdminCustomerDetail(opts) {
+  opts = opts || {};
+  var c = opts.customer || {};
+  var currency = opts.currency || "USD";
+  var enc = encodeURIComponent(c.id);
+
+  var saved = opts.saved ? "<div class=\"banner banner--ok\">Saved.</div>" : "";
+
+  // ---- identity (read-only) -----------------------------------------
+  var identity = "<div class=\"panel\"><h3 class=\"subhead\">Customer</h3>" +
+    "<dl class=\"kv-list\">" +
+      "<div><dt>Name</dt><dd>" + _htmlEscape(c.display_name) + "</dd></div>" +
+      "<div><dt>Customer id</dt><dd><code class=\"order-id\">" + _htmlEscape(String(c.id)) + "</code></dd></div>" +
+      "<div><dt>Joined</dt><dd>" + _htmlEscape(_fmtDate(c.created_at)) + "</dd></div>" +
+    "</dl>" +
+    "<p class=\"meta\">Identity is read-only here — customers manage their own profile through the storefront (passkey / federated sign-in). Email addresses aren't stored in the clear.</p>" +
+  "</div>";
+
+  // ---- recent orders -------------------------------------------------
+  var orderRows = (opts.recent_orders || []).map(function (o) {
+    return "<tr>" +
+      "<td><a class=\"order-id\" href=\"/admin/orders/" + _htmlEscape(encodeURIComponent(o.id)) + "\">" + _htmlEscape(String(o.id).slice(0, 8)) + "</a></td>" +
+      "<td><span class=\"status-pill " + _htmlEscape(o.status) + "\">" + _htmlEscape(o.status) + "</span></td>" +
+      "<td class=\"num\">" + _htmlEscape(pricing.format(o.grand_total_minor, o.currency)) + "</td>" +
+      "<td>" + _htmlEscape(_fmtDate(o.created_at)) + "</td>" +
+    "</tr>";
+  }).join("");
+  var ordersPanel = "<div class=\"panel\"><h3 class=\"subhead\">Recent orders</h3>" +
+    ((opts.recent_orders || []).length
+      ? "<table><thead><tr><th scope=\"col\">Order</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Total</th><th scope=\"col\">Placed</th></tr></thead><tbody>" + orderRows + "</tbody></table>"
+      : "<p class=\"empty\">No orders yet.</p>") +
+  "</div>";
+
+  // ---- store credit --------------------------------------------------
+  var creditPanel;
+  if (!opts.can_store_credit) {
+    creditPanel = "<div class=\"panel\"><h3 class=\"subhead\">Store credit</h3>" +
+      "<p class=\"empty\">Store credit isn't wired in this deployment.</p></div>";
+  } else {
+    var bal = opts.store_credit_minor != null ? opts.store_credit_minor : 0;
+    var creditNotice = opts.credit_notice ? "<div class=\"banner banner--warn\">" + _htmlEscape(opts.credit_notice) + "</div>" : "";
+    var histRows = (opts.store_credit_history || []).map(function (h) {
+      var sign = h.kind === "credit" ? "+" : "−";
+      var note = h.source_ref != null ? h.source_ref : (h.source != null ? h.source : "");
+      return "<tr>" +
+        "<td>" + _htmlEscape(h.kind) + "</td>" +
+        "<td class=\"num\">" + _htmlEscape(sign + pricing.format(h.amount_minor, currency)) + "</td>" +
+        "<td class=\"num\">" + _htmlEscape(pricing.format(h.balance_after_minor, currency)) + "</td>" +
+        "<td>" + _htmlEscape(note) + "</td>" +
+        "<td>" + _htmlEscape(_fmtDate(h.occurred_at)) + "</td>" +
+      "</tr>";
+    }).join("");
+    var histTable = (opts.store_credit_history || []).length
+      ? "<table><thead><tr><th scope=\"col\">Kind</th><th scope=\"col\" class=\"num\">Amount</th><th scope=\"col\" class=\"num\">Balance after</th><th scope=\"col\">Reason</th><th scope=\"col\">When</th></tr></thead><tbody>" + histRows + "</tbody></table>"
+      : "<p class=\"empty\">No store-credit activity yet.</p>";
+    creditPanel = "<div class=\"panel\"><h3 class=\"subhead\">Store credit</h3>" +
+      creditNotice +
+      "<p class=\"stat-figure\">" + _htmlEscape(pricing.format(bal, currency)) + "</p>" +
+      "<p class=\"meta\">Account-bound balance — applied at checkout. Every grant or deduct is recorded with your reason in the ledger below.</p>" +
+      "<form method=\"post\" action=\"/admin/customers/" + _htmlEscape(enc) + "/store-credit\">" +
+        "<fieldset class=\"box\"><legend class=\"legend-sm\">Direction</legend>" +
+          "<label class=\"kv\"><input type=\"radio\" name=\"direction\" value=\"grant\" checked> Grant (add credit)</label>" +
+          "<label class=\"kv\"><input type=\"radio\" name=\"direction\" value=\"deduct\"> Deduct (remove credit)</label>" +
+        "</fieldset>" +
+        "<label class=\"form-field\"><span>Amount (" + _htmlEscape(currency) + " minor units)</span>" +
+          "<input type=\"number\" name=\"amount_minor\" min=\"1\" step=\"1\" required class=\"input-code\" placeholder=\"e.g. 500 = " + _htmlEscape(pricing.format(500, currency)) + "\"></label>" +
+        "<label class=\"form-field\"><span>Reason</span>" +
+          "<input type=\"text\" name=\"reason\" required maxlength=\"128\" placeholder=\"e.g. goodwill for the late delivery\">" +
+          "<small>Required. Recorded with the adjustment in the ledger.</small></label>" +
+        "<div class=\"actions-row\"><button class=\"btn\" type=\"submit\">Apply adjustment</button></div>" +
+      "</form>" +
+      histTable +
+    "</div>";
+  }
+
+  // ---- loyalty -------------------------------------------------------
+  var loyaltyPanel = "";
+  if (opts.loyalty_link) {
+    var loy = opts.loyalty || { balance: 0, lifetime: 0, tier: "bronze" };
+    loyaltyPanel = "<div class=\"panel\"><div class=\"actions-row\"><h3 class=\"subhead\">Loyalty</h3>" +
+      "<a class=\"btn btn--ghost\" href=\"/admin/loyalty\">Adjust points</a></div>" +
+      "<dl class=\"kv-list\">" +
+        "<div><dt>Balance</dt><dd>" + _htmlEscape(String(loy.balance)) + " pts</dd></div>" +
+        "<div><dt>Lifetime</dt><dd>" + _htmlEscape(String(loy.lifetime)) + " pts</dd></div>" +
+        "<div><dt>Tier</dt><dd>" + _htmlEscape(String(loy.tier)) + "</dd></div>" +
+      "</dl>" +
+      "<p class=\"meta\">Grant or deduct points from the Loyalty screen — paste this customer's id (above) into the adjustment form.</p>" +
+    "</div>";
+  }
+
+  // ---- notes ---------------------------------------------------------
+  var notesPanel;
+  if (!opts.can_notes) {
+    notesPanel = "<div class=\"panel\"><h3 class=\"subhead\">Notes</h3>" +
+      "<p class=\"empty\">Customer notes aren't wired in this deployment.</p></div>";
+  } else {
+    var noteNotice = opts.note_notice ? "<div class=\"banner banner--warn\">" + _htmlEscape(opts.note_notice) + "</div>" : "";
+    var noteRows = (opts.notes || []).map(function (n) {
+      return "<li><div class=\"note-meta\">" + _htmlEscape(n.kind) + " · " + _htmlEscape(_fmtDate(n.created_at)) + "</div>" +
+        "<div class=\"note-body\">" + _htmlEscape(n.body) + "</div></li>";
+    }).join("");
+    notesPanel = "<div class=\"panel\"><h3 class=\"subhead\">Notes</h3>" +
+      noteNotice +
+      "<p class=\"meta\">Operator-only annotations on this customer. Never shown to the customer.</p>" +
+      ((opts.notes || []).length
+        ? "<ul class=\"note-list\">" + noteRows + "</ul>"
+        : "<p class=\"empty\">No notes yet.</p>") +
+      "<form method=\"post\" action=\"/admin/customers/" + _htmlEscape(enc) + "/notes\">" +
+        "<label class=\"form-field\"><span>Kind</span>" +
+          "<select name=\"kind\">" +
+            "<option value=\"general\">general</option>" +
+            "<option value=\"preference\">preference</option>" +
+            "<option value=\"escalation\">escalation</option>" +
+            "<option value=\"warning\">warning</option>" +
+            "<option value=\"billing\">billing</option>" +
+          "</select></label>" +
+        "<label class=\"form-field\"><span>Note</span>" +
+          "<textarea name=\"body\" required maxlength=\"8000\" rows=\"3\" placeholder=\"e.g. VIP — comp shipping where possible\"></textarea></label>" +
+        "<div class=\"actions-row\"><button class=\"btn\" type=\"submit\">Add note</button></div>" +
+      "</form>" +
+    "</div>";
+  }
+
+  // ---- segments (read-only) ------------------------------------------
+  var segmentsPanel = "";
+  if (opts.can_segments) {
+    var segChips = (opts.segments || []).map(function (s) {
+      return "<span class=\"chip\">" + _htmlEscape(s.title || s.slug) + "</span>";
+    }).join(" ");
+    segmentsPanel = "<div class=\"panel\"><h3 class=\"subhead\">Segments</h3>" +
+      ((opts.segments || []).length
+        ? "<div class=\"chip-row\">" + segChips + "</div>"
+        : "<p class=\"empty\">Not in any segment.</p>") +
+      "<p class=\"meta\">Segment membership is rule-derived — the scheduler recomputes it from each segment's RFM predicates, so there is no manual assign / remove per customer. Define or edit segments under their own console.</p>" +
+    "</div>";
+  }
+
+  var body = "<section>" +
+    "<div class=\"actions-row\"><h2>" + _htmlEscape(c.display_name) + "</h2>" +
+      "<a class=\"btn btn--ghost\" href=\"/admin/customers\"><span aria-hidden=\"true\">←</span> All customers</a></div>" +
+    saved +
+    identity + ordersPanel + creditPanel + loyaltyPanel + notesPanel + segmentsPanel +
+  "</section>";
+  return _renderAdminShell(opts.shop_name, c.display_name || "Customer", body, "customers", opts.nav_available);
+}
+
 // The RMA states an operator can filter the returns queue by — drives the
 // filter chips, lifecycle order then terminal.
 var RETURN_STATUS_FILTERS = ["pending", "approved", "received", "refunded", "rejected"];
@@ -8930,6 +9576,165 @@ function renderAdminReturn(opts) {
   return _renderAdminShell(opts.shop_name, "Return " + (r.rma_code || r.id.slice(0, 8)), body, "returns", opts.nav_available);
 }
 
+// The support-ticket queue chips: every FSM status the module exposes,
+// plus "all" (the whole board) and an "unassigned" triage view.
+var SUPPORT_STATUS_FILTERS = [
+  "all", "unassigned", "new", "in_progress", "waiting_customer", "resolved", "closed", "reopened",
+];
+
+function _supportPillClass(status) {
+  if (status === "resolved") return "paid";
+  if (status === "closed")   return "cancelled";
+  if (status === "new" || status === "reopened") return "pending";
+  return "";   // in_progress / waiting_customer use the default pill
+}
+
+function _supportPriorityClass(priority) {
+  return priority === "urgent" || priority === "high" ? "cancelled"
+    : priority === "low" ? "" : "pending";
+}
+
+// Operator queue. A status / unassigned chip set filters the board; each
+// row links to the ticket detail. Renders the requester (email is stored
+// hash-only, so the row shows the short hash), the status + priority
+// pills, the assignee state, and when it was opened.
+function renderAdminSupport(opts) {
+  opts = opts || {};
+  var tickets = opts.tickets || [];
+  var active = opts.status || "all";
+  var notice = opts.notice ? "<div class=\"banner banner--warn\">" + _htmlEscape(opts.notice) + "</div>" : "";
+
+  var chips = "<div class=\"order-filters\">" +
+    SUPPORT_STATUS_FILTERS.map(function (s) {
+      return "<a class=\"chip" + (active === s ? " chip--on" : "") + "\" href=\"/admin/support?status=" + encodeURIComponent(s) + "\">" + _htmlEscape(s) + "</a>";
+    }).join("") +
+    "</div>";
+
+  var rows = tickets.map(function (t) {
+    var assignee = t.assigned_operator_id ? _htmlEscape(String(t.assigned_operator_id).slice(0, 8)) : "<span class=\"meta\">unassigned</span>";
+    return "<tr>" +
+      "<td><a class=\"order-id\" href=\"/admin/support/" + _htmlEscape(t.id) + "\">" + _htmlEscape(t.subject) + "</a></td>" +
+      "<td>" + _htmlEscape(t.category) + "</td>" +
+      "<td><span class=\"status-pill " + _supportPillClass(t.status) + "\">" + _htmlEscape(t.status) + "</span></td>" +
+      "<td><span class=\"status-pill " + _supportPriorityClass(t.priority) + "\">" + _htmlEscape(t.priority) + "</span></td>" +
+      "<td>" + assignee + "</td>" +
+      "<td>" + _htmlEscape(_fmtDate(t.opened_at)) + "</td>" +
+      "</tr>";
+  }).join("");
+
+  var table = tickets.length
+    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Subject</th><th scope=\"col\">Category</th><th scope=\"col\">Status</th><th scope=\"col\">Priority</th><th scope=\"col\">Assignee</th><th scope=\"col\">Opened</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
+    : "<p class=\"empty\">No “" + _htmlEscape(active) + "” tickets.</p>";
+
+  var body = "<section><h2>Support</h2>" + notice + chips + table + "</section>";
+  return _renderAdminShell(opts.shop_name, "Support", body, "support", opts.nav_available);
+}
+
+// Ticket detail — the full thread (customer + operator + system + internal
+// notes), the requester / status / assignee / tags, and the action forms:
+// operator reply (with an internal-note toggle), assign, tag, and the FSM
+// status transitions legal from the current state.
+function renderAdminSupportTicket(opts) {
+  opts = opts || {};
+  var t = opts.ticket;
+  var messages = opts.messages || [];
+  var moved  = opts.moved  ? "<div class=\"banner banner--ok\">Ticket updated.</div>" : "";
+  var notice = opts.notice ? "<div class=\"banner banner--err\">" + _htmlEscape(opts.notice) + "</div>" : "";
+
+  var thread = messages.map(function (m) {
+    var who = m.author === "operator" ? "Operator" : m.author === "system" ? "System" : "Customer";
+    var internalTag = Number(m.internal) === 1 ? " <span class=\"status-pill pending\">internal</span>" : "";
+    return "<li class=\"support-msg support-msg--" + _htmlEscape(String(m.author)) + "\">" +
+      "<p class=\"meta\">" + _htmlEscape(who) + internalTag + " · " + _htmlEscape(_fmtDate(m.created_at)) + "</p>" +
+      "<p class=\"support-msg__body\">" + _htmlEscape(String(m.body)).replace(/\n/g, "<br>") + "</p>" +
+      "</li>";
+  }).join("");
+  var threadHtml = messages.length
+    ? "<ul class=\"support-thread\">" + thread + "</ul>"
+    : "<p class=\"empty\">No messages.</p>";
+
+  var tags = (t.tags || []).map(function (tag) {
+    return "<span class=\"status-pill\">" + _htmlEscape(tag) + "</span>";
+  }).join(" ") || "<span class=\"meta\">none</span>";
+
+  function _field(label, value) {
+    return "<p><span class=\"meta\">" + _htmlEscape(label) + "</span><br>" + (value ? _htmlEscape(String(value)) : "<span class=\"meta\">—</span>") + "</p>";
+  }
+
+  // Legal FSM edges from the current status drive which transition
+  // buttons render. Mirrors the module's TRANSITIONS graph.
+  var EDGES = {
+    "new":              ["in-progress", "closed"],
+    "in_progress":      ["waiting-customer", "resolved", "closed"],
+    "waiting_customer": ["in-progress", "resolved", "closed"],
+    "resolved":         ["reopen", "closed"],
+    "reopened":         ["in-progress", "closed"],
+    "closed":           [],
+  };
+  var TRANSITION_LABELS = {
+    "in-progress": "Mark in progress", "waiting-customer": "Wait on customer",
+    "resolved": "Resolve", "closed": "Close", "reopen": "Reopen",
+  };
+  var transitionForms = (EDGES[t.status] || []).map(function (verb) {
+    return "<form method=\"post\" action=\"/admin/support/" + _htmlEscape(t.id) + "/" + verb + "\" class=\"form-inline\">" +
+      "<button class=\"btn" + (verb === "closed" ? " btn--danger" : "") + "\" type=\"submit\">" + _htmlEscape(TRANSITION_LABELS[verb] || verb) + "</button>" +
+      "</form>";
+  }).join("");
+  var transitions = transitionForms
+    ? "<div class=\"order-actions\">" + transitionForms + "</div>"
+    : "<span class=\"meta\">This ticket is closed — no further status changes.</span>";
+
+  var replyForm = t.status === "closed"
+    ? "<span class=\"meta\">Closed tickets can't take a reply.</span>"
+    : "<form method=\"post\" action=\"/admin/support/" + _htmlEscape(t.id) + "/reply\" class=\"return-action\">" +
+        "<h4>Reply</h4>" +
+        "<label class=\"form-field\"><span>Message</span><textarea name=\"body\" rows=\"4\" maxlength=\"8000\" required></textarea></label>" +
+        "<label class=\"form-field form-field--inline\"><input type=\"checkbox\" name=\"internal\" value=\"1\"> <span>Internal note (not shown to the customer)</span></label>" +
+        "<button class=\"btn\" type=\"submit\">Send reply</button>" +
+      "</form>";
+
+  var assignForm =
+    "<form method=\"post\" action=\"/admin/support/" + _htmlEscape(t.id) + "/assign\" class=\"return-action\">" +
+      "<h4>Assign</h4>" +
+      _setupField("Operator id (UUID)", "operator_id", t.assigned_operator_id || "", "text", "The operator to own this ticket.", " required") +
+      "<button class=\"btn\" type=\"submit\">Assign</button>" +
+    "</form>";
+
+  var tagForm =
+    "<form method=\"post\" action=\"/admin/support/" + _htmlEscape(t.id) + "/tag\" class=\"return-action\">" +
+      "<h4>Add tag</h4>" +
+      _setupField("Tag", "tag", "", "text", "", " maxlength=\"32\" required") +
+      "<button class=\"btn\" type=\"submit\">Add tag</button>" +
+    "</form>";
+
+  var body =
+    "<section class=\"mw-48\">" +
+      "<div class=\"actions-row\"><a class=\"btn btn--ghost\" href=\"/admin/support\">&larr; Support</a></div>" +
+      "<h2>" + _htmlEscape(t.subject) + " " +
+        "<span class=\"status-pill " + _supportPillClass(t.status) + "\">" + _htmlEscape(t.status) + "</span></h2>" +
+      "<p class=\"meta\">Opened " + _htmlEscape(_fmtDate(t.opened_at)) +
+        " · priority " + _htmlEscape(t.priority) +
+        (t.order_id ? " · order <a class=\"order-id\" href=\"/admin/orders/" + _htmlEscape(t.order_id) + "\">" + _htmlEscape(String(t.order_id).slice(0, 8)) + "</a>" : "") +
+        "</p>" +
+      moved + notice +
+      "<div class=\"two-col\">" +
+        "<div class=\"panel\"><h3 class=\"subhead\">Conversation</h3>" + threadHtml + "</div>" +
+        "<div class=\"panel\"><h3 class=\"subhead\">Details</h3>" +
+          _field("Category", t.category) +
+          _field("Requester", t.customer_email_hash ? String(t.customer_email_hash).slice(0, 12) + "…" : null) +
+          _field("Customer id", t.customer_id ? String(t.customer_id).slice(0, 8) : null) +
+          _field("Assignee", t.assigned_operator_id ? String(t.assigned_operator_id).slice(0, 8) : null) +
+          "<p><span class=\"meta\">Tags</span><br>" + tags + "</p>" +
+        "</div>" +
+      "</div>" +
+      "<div class=\"panel mt\"><h3 class=\"subhead\">Status</h3>" + transitions + "</div>" +
+      "<div class=\"panel mt\"><h3 class=\"subhead\">Actions</h3>" +
+        "<div class=\"return-actions\">" + replyForm + assignForm + tagForm + "</div>" +
+      "</div>" +
+    "</section>";
+  return _renderAdminShell(opts.shop_name, "Ticket", body, "support", opts.nav_available);
+}
+
 // The review states an operator can filter the moderation queue by.
 var REVIEW_STATUS_FILTERS = ["pending", "published", "rejected"];
 
@@ -12099,6 +12904,7 @@ module.exports = {
   renderAdminOrders:       renderAdminOrders,
   renderAdminOrder:        renderAdminOrder,
   renderAdminCustomers:    renderAdminCustomers,
+  renderAdminCustomerDetail: renderAdminCustomerDetail,
   renderAdminReturns:      renderAdminReturns,
   renderAdminReturn:       renderAdminReturn,
   renderAdminReviews:      renderAdminReviews,