@blamejs/blamejs-shop 0.3.34 → 0.3.36

package/CHANGELOG.md

@@ -8,6 +8,10 @@ upgrading across more than a few patches at a time.
 
 ## v0.3.x
 
+- v0.3.36 (2026-05-31) — **Customers can request an exchange instead of only a refund.** Returning an order could only result in a refund, so a customer who received the wrong size had to refund and buy again. A customer can now request an exchange from the order page — choosing the item to swap, the replacement, and a reason — and operators work those requests from a new Exchanges queue in the admin console, moving each one through approval, shipping the replacement, receiving the returned item, and closing it out. A customer can only request and view exchanges on their own orders. This release also updates the vendored blamejs runtime to v0.14.10. **Added:** *Order exchanges* — An order can now be exchanged, not just refunded. From the order page a customer requests an exchange — picking the line to return, the replacement variant, and a reason — and tracks its status under Exchanges in their account. Operators get an Exchanges queue in the admin console with a status filter and a per-exchange screen that offers only the actions valid at the current step: approve or reject the request, mark the replacement shipped and delivered, mark the returned item received, and close it once both sides are complete. Every customer-facing exchange action is scoped to the customer's own orders, and an order must be in a fulfilled state to be eligible. **Changed:** *Vendored blamejs runtime updated to v0.14.10* — The bundled blamejs runtime is updated to v0.14.10, which routes the framework's full-text-search index token hashing through a keyed MAC (HMAC-SHAKE256) instead of a static-salted digest, so an index token hash cannot be forged or correlated across deployments without the per-deployment key. The change is internal to the runtime and requires no operator action.
+
+- v0.3.35 (2026-05-31) — **Share a wishlist with a private link.** A customer's wishlist could only be viewed by the customer themselves. From the wishlist page a shopper can now create a shareable link and send it to someone — a friend buying a gift, for example — who opens it without needing an account and sees the wishlist's products. The link can be revoked at any time, after which it stops working. The shared page shows only the products: it does not reveal who owns the wishlist or any private notes on it, and it is not indexed by search engines. **Added:** *Shareable wishlist links* — The wishlist page now has a Share control that creates a private link to the wishlist. The full link is shown once, to copy and send; anyone with it can open the shared wishlist without an account and see its products, each linking to the product page. The owner sees their active links and can revoke any of them, which immediately stops the link from working. The shared view shows only the products — never the owner's identity or private notes — and is marked not to be indexed by search engines, so a personal wishlist stays private to whoever holds the link.
+
 - v0.3.34 (2026-05-31) — **Edit, pin, and archive the internal notes on a customer.** Internal notes on a customer could only be added — a note with a typo or one that was no longer true could not be corrected or removed, which is a liability for notes like "do not ship to this address" or "allergic to X". The customer detail screen now lets you edit a note's text, pin important notes to the top, and archive notes that no longer apply (and restore them). Each action is limited to notes that belong to the customer being viewed. **Added:** *Edit, pin, and archive customer notes* — The notes panel on a customer's detail screen now supports the full lifecycle: edit a note's text to fix or update it, pin the notes that matter so they sort to the top, and archive notes that no longer apply, with a toggle to show archived notes and restore them. Previously notes were append-only, so a wrong or stale note could not be corrected or retired. Every edit, pin, and archive action is scoped to the customer being viewed, so a note can only be changed from the record it belongs to.
 
 - v0.3.33 (2026-05-31) — **Create and manage customer segments from the admin console.** Customer segments could be shown on a customer's profile but there was no way to define or manage them, so the feature could not actually be used. A new Segments screen in the admin console creates rule-based segments from recency, frequency, lifetime-order, spend, average-order-value, and refund-rate criteria, edits their rules, archives and restores them, and recomputes membership on demand — showing how many customers each segment now contains. Segment membership stays rule-derived: it is recalculated from order history, not assigned by hand. **Added:** *Customer segments administration* — A Segments screen in the admin console manages rule-based customer segments. Each segment is defined by RFM-style criteria — how recently and how often a customer orders, their lifetime order count and spend, average order value, and refund rate — and a list shows every segment with its rules, current member count, and status, filterable by active or archived. You can create and edit segments, archive and restore them, and recompute membership on demand, which re-evaluates the rules against order history and reports how many customers match. Membership is always derived from the rules, never assigned per customer.

package/lib/admin.js

@@ -509,6 +509,7 @@ function mount(router, deps) {
   var splitShipments = deps.splitShipments || null;  // order split-shipment planner disabled when absent
   var salesTaxFilings = deps.salesTaxFilings || null; // sales-tax-filing remittance console disabled when absent
   var supportTickets  = deps.supportTickets  || null; // support-ticket queue + thread console disabled when absent
+  var orderExchanges  = deps.orderExchanges  || null; // exchange queue + FSM-action console disabled when absent
 
   // Which optional console sections are wired — gates their nav links so a
   // signed-in admin is never sent to a route that wasn't mounted. Passed
@@ -516,7 +517,7 @@ function mount(router, deps) {
   // `reports` is always present in the nav (read-only sales summary needs no
   // extra dep); its route mounts unconditionally and renders an unconfigured
   // notice when the salesReports primitive isn't wired.
-  var navAvailable = { returns: !!returns, reviews: !!reviews, productQa: !!productQa, subscriptions: !!deps.subscriptions, webhooks: !!deps.webhooks, collections: !!deps.collections, customers: !!deps.customers, customerSegments: !!customerSegments, giftcards: !!deps.giftcards, announcementBar: !!deps.announcementBar, blog: !!deps.blog, knowledgeBase: !!deps.knowledgeBase, customerSurveys: !!deps.customerSurveys, storefrontPages: !!deps.storefrontPages, businessHours: !!deps.businessHours, taxRates: !!deps.taxRates, shippingZones: !!deps.shippingZones, autoDiscount: !!deps.autoDiscount, discountAllocation: !!deps.discountAllocation, quantityDiscounts: !!deps.quantityDiscounts, loyalty: !!deps.loyalty, pickLists: !!pickLists, salesTaxFilings: !!salesTaxFilings, shippingLabels: !!shippingLabels, supportTickets: !!supportTickets };
+  var navAvailable = { returns: !!returns, reviews: !!reviews, productQa: !!productQa, subscriptions: !!deps.subscriptions, webhooks: !!deps.webhooks, collections: !!deps.collections, customers: !!deps.customers, customerSegments: !!customerSegments, giftcards: !!deps.giftcards, announcementBar: !!deps.announcementBar, blog: !!deps.blog, knowledgeBase: !!deps.knowledgeBase, customerSurveys: !!deps.customerSurveys, storefrontPages: !!deps.storefrontPages, businessHours: !!deps.businessHours, taxRates: !!deps.taxRates, shippingZones: !!deps.shippingZones, autoDiscount: !!deps.autoDiscount, discountAllocation: !!deps.discountAllocation, quantityDiscounts: !!deps.quantityDiscounts, loyalty: !!deps.loyalty, pickLists: !!pickLists, salesTaxFilings: !!salesTaxFilings, shippingLabels: !!shippingLabels, supportTickets: !!supportTickets, orderExchanges: !!orderExchanges };
 
   try { b.audit.registerNamespace(AUDIT_NAMESPACE); } catch (_e) { /* idempotent */ }
 
@@ -3903,6 +3904,220 @@ function mount(router, deps) {
     _supportTransition("reopen",           "reopened");
   }
 
+  // ---- order exchanges ------------------------------------------------
+  //
+  // The operator side of a customer-requested item swap: the FIFO queue of
+  // open exchanges, one exchange's detail, and the FSM action routes that
+  // walk it (approve / reject / mark-replacement-shipped / mark-replacement-
+  // delivered / mark-return-received / close). Each action button renders
+  // only when that edge is legal from the current status (mirrors the
+  // module's TRANSITIONS graph), so the console never offers a transition
+  // the primitive would refuse.
+  if (orderExchanges) {
+    var exchanges = orderExchanges;
+
+    // Map an exchange-primitive error to a browser-safe outcome class. A
+    // bad shape (TypeError), an FSM refusal, a not-found row, or the
+    // both-sides-required close guard all become an ?err=1 notice on the
+    // detail rather than a 500; anything else propagates to the wrapper.
+    function _exchangeClientError(e) {
+      if (!e) return false;
+      if (e instanceof TypeError) return true;
+      return e.code === "EXCHANGE_NOT_FOUND" ||
+             e.code === "EXCHANGE_TRANSITION_REFUSED" ||
+             e.code === "EXCHANGE_BOTH_SIDES_REQUIRED";
+    }
+    // Map the same classes to a problem-details status for the JSON API: a
+    // bad shape is 400, a missing row 404, a refused/illegal transition or
+    // the both-sides-required guard a 409.
+    function _exchangeApiError(res, e) {
+      if (!e) return null;
+      // The coded errors are thrown as TypeErrors that ALSO carry a `code`,
+      // so the specific code checks MUST run before the generic
+      // `instanceof TypeError` branch — otherwise a well-formed but missing
+      // exchange id (EXCHANGE_NOT_FOUND) would map to 400 instead of 404.
+      if (e.code === "EXCHANGE_NOT_FOUND") return _problem(res, 404, "exchange-not-found");
+      if (e.code === "EXCHANGE_TRANSITION_REFUSED" || e.code === "EXCHANGE_BOTH_SIDES_REQUIRED") {
+        return _problem(res, 409, "conflict", e.message);
+      }
+      if (e instanceof TypeError) return _problem(res, 400, "bad-request", e.message);
+      return null;
+    }
+
+    router.get("/admin/exchanges", _pageOrApi(true,
+      R(async function (req, res) {
+        var url = req.url ? new URL(req.url, "http://localhost") : null;
+        var status = url && url.searchParams.get("status");
+        var rows = await exchanges.openExchanges(status ? { status: status } : {});
+        _json(res, 200, { rows: rows, status: status || "open" });
+      }),
+      async function (req, res) {
+        var url = req.url ? new URL(req.url, "http://localhost") : null;
+        var status = url && url.searchParams.get("status");
+        var notice = null, rows = [];
+        // A bad ?status= (terminal / unknown) raises a TypeError from
+        // openExchanges — fall back to the whole open queue with a notice.
+        try {
+          rows = await exchanges.openExchanges(status ? { status: status } : {});
+        } catch (e) {
+          if (!(e instanceof TypeError)) throw e;
+          status = null; notice = "Unknown status filter — showing the open queue.";
+          rows = await exchanges.openExchanges({});
+        }
+        _sendHtml(res, 200, renderAdminExchanges({
+          shop_name: deps.shop_name, nav_available: navAvailable, exchanges: rows, status: status || "open", notice: notice,
+        }));
+      },
+    ));
+
+    // Resolve an exchange by :id, surfacing a malformed / unknown id as a
+    // 404 (the route is a defensive request-shape reader, never a 500).
+    async function _exchangeOr404(req, res, isJson) {
+      var exchange;
+      try { exchange = await exchanges.getExchange(req.params.id); }
+      catch (e) {
+        if (e instanceof TypeError) {
+          if (isJson) { _problem(res, 404, "exchange-not-found"); return null; }
+          _sendHtml(res, 404, renderAdminExchanges({
+            shop_name: deps.shop_name, nav_available: navAvailable, exchanges: [], status: "open", notice: "Exchange not found.",
+          }));
+          return null;
+        }
+        throw e;
+      }
+      if (!exchange) {
+        if (isJson) { _problem(res, 404, "exchange-not-found"); return null; }
+        _sendHtml(res, 404, renderAdminExchanges({
+          shop_name: deps.shop_name, nav_available: navAvailable, exchanges: [], status: "open", notice: "Exchange not found.",
+        }));
+        return null;
+      }
+      return exchange;
+    }
+
+    router.get("/admin/exchanges/:id", _pageOrApi(true,
+      R(async function (req, res) {
+        var exchange = await _exchangeOr404(req, res, true); if (!exchange) return;
+        _json(res, 200, exchange);
+      }),
+      async function (req, res) {
+        var exchange = await _exchangeOr404(req, res, false); if (!exchange) return;
+        var url = req.url ? new URL(req.url, "http://localhost") : null;
+        _sendHtml(res, 200, renderAdminExchange({
+          shop_name:   deps.shop_name,
+          nav_available: navAvailable,
+          exchange:    exchange,
+          moved:       url && url.searchParams.get("moved"),
+          notice:      url && url.searchParams.get("err") ? "That action couldn't be completed for this exchange." : null,
+        }));
+      },
+    ));
+
+    // The browser side of an exchange action: run `opFn(id, body)`, then
+    // PRG back to the detail. A bad shape / FSM refusal / not-found becomes
+    // an ?err=1 notice, never a 500; anything else propagates.
+    function _exchangeAction(jsonHandler, auditEvent, opFn) {
+      return _pageOrApi(false, jsonHandler, async function (req, res) {
+        var id = req.params.id;
+        try { await opFn(id, req.body || {}); }
+        catch (e) {
+          if (_exchangeClientError(e)) {
+            return _redirect(res, "/admin/exchanges/" + encodeURIComponent(id) + "?err=1");
+          }
+          throw e;
+        }
+        b.audit.safeEmit({ action: AUDIT_NAMESPACE + "." + auditEvent, outcome: "success", metadata: { id: id } });
+        _redirect(res, "/admin/exchanges/" + encodeURIComponent(id) + "?moved=1");
+      });
+    }
+
+    // pending -> approved. The operator id is a UUID seeded from the form.
+    router.post("/admin/exchanges/:id/approve", _exchangeAction(
+      W("exchange.approve", async function (req, res) {
+        var body = req.body || {};
+        var x;
+        try { x = await exchanges.approveExchange(req.params.id, { approver_id: body.approver_id }); }
+        catch (e) { var mapped = _exchangeApiError(res, e); if (mapped !== null) return mapped; throw e; }
+        _json(res, 200, x);
+        return x;
+      }),
+      "exchange.approve",
+      function (id, body) { return exchanges.approveExchange(id, { approver_id: body.approver_id }); },
+    ));
+
+    // pending|approved -> rejected (terminal). Records the operator id +
+    // the reason surfaced to the customer.
+    router.post("/admin/exchanges/:id/reject", _exchangeAction(
+      W("exchange.reject", async function (req, res) {
+        var body = req.body || {};
+        var x;
+        try { x = await exchanges.rejectExchange(req.params.id, { approver_id: body.approver_id, reject_reason: body.reject_reason }); }
+        catch (e) { var mapped = _exchangeApiError(res, e); if (mapped !== null) return mapped; throw e; }
+        _json(res, 200, x);
+        return x;
+      }),
+      "exchange.reject",
+      function (id, body) { return exchanges.rejectExchange(id, { approver_id: body.approver_id, reject_reason: body.reject_reason }); },
+    ));
+
+    // approved -> shipped. Captures the outbound tracking number + carrier.
+    router.post("/admin/exchanges/:id/mark-shipped", _exchangeAction(
+      W("exchange.shipped", async function (req, res) {
+        var body = req.body || {};
+        var x;
+        try { x = await exchanges.markReplacementShipped(req.params.id, { tracking_number: body.tracking_number, carrier: body.carrier }); }
+        catch (e) { var mapped = _exchangeApiError(res, e); if (mapped !== null) return mapped; throw e; }
+        _json(res, 200, x);
+        return x;
+      }),
+      "exchange.shipped",
+      function (id, body) { return exchanges.markReplacementShipped(id, { tracking_number: body.tracking_number, carrier: body.carrier }); },
+    ));
+
+    // shipped|received -> delivered. Records when the replacement reached
+    // the customer.
+    router.post("/admin/exchanges/:id/mark-delivered", _exchangeAction(
+      W("exchange.delivered", async function (req, res) {
+        var x;
+        try { x = await exchanges.markReplacementDelivered(req.params.id, {}); }
+        catch (e) { var mapped = _exchangeApiError(res, e); if (mapped !== null) return mapped; throw e; }
+        _json(res, 200, x);
+        return x;
+      }),
+      "exchange.delivered",
+      function (id) { return exchanges.markReplacementDelivered(id, {}); },
+    ));
+
+    // shipped|delivered -> received. Records when the customer's return
+    // reached the warehouse.
+    router.post("/admin/exchanges/:id/mark-received", _exchangeAction(
+      W("exchange.received", async function (req, res) {
+        var x;
+        try { x = await exchanges.markReturnReceived(req.params.id, {}); }
+        catch (e) { var mapped = _exchangeApiError(res, e); if (mapped !== null) return mapped; throw e; }
+        _json(res, 200, x);
+        return x;
+      }),
+      "exchange.received",
+      function (id) { return exchanges.markReturnReceived(id, {}); },
+    ));
+
+    // delivered|received -> closed (terminal). The primitive refuses until
+    // BOTH the replacement is delivered AND the customer's return is back,
+    // surfaced as a 409.
+    router.post("/admin/exchanges/:id/close", _exchangeAction(
+      W("exchange.close", async function (req, res) {
+        var x;
+        try { x = await exchanges.closeExchange(req.params.id, {}); }
+        catch (e) { var mapped = _exchangeApiError(res, e); if (mapped !== null) return mapped; throw e; }
+        _json(res, 200, x);
+        return x;
+      }),
+      "exchange.close",
+      function (id) { return exchanges.closeExchange(id, {}); },
+    ));
+  }
+
   // ---- config ---------------------------------------------------------
 
   var config = deps.config || null;
@@ -8759,6 +8974,7 @@ var ADMIN_NAV_ITEMS = [
   { key: "segments",     href: "/admin/segments",     label: "Segments",     requires: "customerSegments" },
   { key: "returns",      href: "/admin/returns",      label: "Returns",      requires: "returns" },
   { key: "support",      href: "/admin/support",      label: "Support",      requires: "supportTickets" },
+  { key: "exchanges",    href: "/admin/exchanges",    label: "Exchanges",    requires: "orderExchanges" },
   { key: "reviews",      href: "/admin/reviews",      label: "Reviews",      requires: "reviews" },
   { key: "questions",    href: "/admin/questions",    label: "Q&A",          requires: "productQa" },
   { key: "subscriptions", href: "/admin/subscription-plans", label: "Subscriptions", requires: "subscriptions" },
@@ -10429,6 +10645,164 @@ function renderAdminSupportTicket(opts) {
   return _renderAdminShell(opts.shop_name, "Ticket", body, "support", opts.nav_available);
 }
 
+// The non-terminal exchange states the operator can filter the queue by —
+// lifecycle order (the terminal closed / rejected don't appear in the open
+// queue, so they're not filter chips).
+var EXCHANGE_STATUS_FILTERS = ["pending", "approved", "shipped", "delivered", "received"];
+
+function _exchangePillClass(status) {
+  if (status === "closed")   return "paid";       // completed — green
+  if (status === "rejected") return "cancelled";
+  if (status === "shipped" || status === "delivered" || status === "received") return "shipped";
+  return "pending";                               // pending / approved
+}
+
+// Operator queue. The status chips filter the open (non-terminal) board;
+// each row links to the exchange detail. openExchanges orders oldest-first
+// (FIFO), so the customer who's been waiting longest is at the top.
+function renderAdminExchanges(opts) {
+  opts = opts || {};
+  var list = opts.exchanges || [];
+  var active = opts.status || "open";
+  var notice = opts.notice ? "<div class=\"banner banner--warn\">" + _htmlEscape(opts.notice) + "</div>" : "";
+
+  var chips = "<div class=\"order-filters\">" +
+    "<a class=\"chip" + (active === "open" ? " chip--on" : "") + "\" href=\"/admin/exchanges\">open</a>" +
+    EXCHANGE_STATUS_FILTERS.map(function (s) {
+      return "<a class=\"chip" + (active === s ? " chip--on" : "") + "\" href=\"/admin/exchanges?status=" + encodeURIComponent(s) + "\">" + _htmlEscape(s) + "</a>";
+    }).join("") +
+    "</div>";
+
+  var rows = list.map(function (x) {
+    return "<tr>" +
+      "<td><a class=\"order-id\" href=\"/admin/exchanges/" + _htmlEscape(x.id) + "\">" + _htmlEscape(String(x.id).slice(0, 8)) + "</a></td>" +
+      "<td><span class=\"order-id\">" + _htmlEscape(String(x.order_id).slice(0, 8)) + "</span></td>" +
+      "<td>" + _htmlEscape(x.return_sku) + " &rarr; " + _htmlEscape(x.replacement_sku) + "</td>" +
+      "<td>" + _htmlEscape(x.reason) + "</td>" +
+      "<td><span class=\"status-pill " + _exchangePillClass(x.status) + "\">" + _htmlEscape(x.status) + "</span></td>" +
+      "<td>" + _htmlEscape(_fmtDate(x.created_at)) + "</td>" +
+      "</tr>";
+  }).join("");
+
+  var table = list.length
+    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Exchange</th><th scope=\"col\">Order</th><th scope=\"col\">Swap</th><th scope=\"col\">Reason</th><th scope=\"col\">Status</th><th scope=\"col\">Requested</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
+    : "<p class=\"empty\">No “" + _htmlEscape(active) + "” exchanges.</p>";
+
+  var body = "<section><h2>Exchanges</h2>" + notice + chips + table + "</section>";
+  return _renderAdminShell(opts.shop_name, "Exchanges", body, "exchanges", opts.nav_available);
+}
+
+// Exchange detail — the swap, the reason, the timestamps, and the action
+// forms legal from the current status. The legal-edge map mirrors the
+// order-exchanges module's TRANSITIONS graph so the console only ever
+// offers a transition the primitive would accept.
+function renderAdminExchange(opts) {
+  opts = opts || {};
+  var x = opts.exchange;
+  var moved  = opts.moved  ? "<div class=\"banner banner--ok\">Exchange updated.</div>" : "";
+  var notice = opts.notice ? "<div class=\"banner banner--err\">" + _htmlEscape(opts.notice) + "</div>" : "";
+
+  function _field(label, value) {
+    return "<p><span class=\"meta\">" + _htmlEscape(label) + "</span><br>" + (value ? _htmlEscape(String(value)) : "<span class=\"meta\">—</span>") + "</p>";
+  }
+  function _ts(value) { return value ? _fmtDate(value) : null; }
+
+  // Legal FSM edges from the current status -> the action verbs that
+  // render. Mirrors lib/order-exchanges.js TRANSITIONS.
+  var EDGES = {
+    pending:   ["approve", "reject"],
+    approved:  ["mark-shipped", "reject"],
+    shipped:   ["mark-delivered", "mark-received"],
+    delivered: ["mark-received", "close"],
+    received:  ["mark-delivered", "close"],
+    closed:    [],
+    rejected:  [],
+  };
+  var legal = EDGES[x.status] || [];
+  var has = function (verb) { return legal.indexOf(verb) !== -1; };
+
+  var actionBlocks = [];
+  if (has("approve")) {
+    actionBlocks.push(
+      "<form method=\"post\" action=\"/admin/exchanges/" + _htmlEscape(x.id) + "/approve\" class=\"return-action\">" +
+        "<h4>Approve</h4><p class=\"meta\">Accept the swap and pin the replacement shelf.</p>" +
+        _setupField("Operator id (UUID)", "approver_id", "", "text", "The operator approving this exchange.", " required") +
+        "<button class=\"btn\" type=\"submit\">Approve exchange</button>" +
+      "</form>");
+  }
+  if (has("mark-shipped")) {
+    actionBlocks.push(
+      "<form method=\"post\" action=\"/admin/exchanges/" + _htmlEscape(x.id) + "/mark-shipped\" class=\"return-action\">" +
+        "<h4>Mark replacement shipped</h4>" +
+        _setupField("Tracking number", "tracking_number", "", "text", "", " maxlength=\"128\" required") +
+        _setupField("Carrier", "carrier", "", "text", "", " maxlength=\"64\" required") +
+        "<button class=\"btn\" type=\"submit\">Mark shipped</button>" +
+      "</form>");
+  }
+  if (has("mark-delivered")) {
+    actionBlocks.push(
+      "<form method=\"post\" action=\"/admin/exchanges/" + _htmlEscape(x.id) + "/mark-delivered\" class=\"return-action\">" +
+        "<h4>Mark replacement delivered</h4><p class=\"meta\">The replacement reached the customer.</p>" +
+        "<button class=\"btn\" type=\"submit\">Mark delivered</button>" +
+      "</form>");
+  }
+  if (has("mark-received")) {
+    actionBlocks.push(
+      "<form method=\"post\" action=\"/admin/exchanges/" + _htmlEscape(x.id) + "/mark-received\" class=\"return-action\">" +
+        "<h4>Mark return received</h4><p class=\"meta\">The customer's original arrived back at the warehouse.</p>" +
+        "<button class=\"btn\" type=\"submit\">Mark received</button>" +
+      "</form>");
+  }
+  if (has("close")) {
+    actionBlocks.push(
+      "<form method=\"post\" action=\"/admin/exchanges/" + _htmlEscape(x.id) + "/close\" class=\"return-action\">" +
+        "<h4>Close</h4><p class=\"meta\">Closes the exchange once both the replacement is delivered AND the return is back.</p>" +
+        "<button class=\"btn\" type=\"submit\">Close exchange</button>" +
+      "</form>");
+  }
+  if (has("reject")) {
+    actionBlocks.push(
+      "<form method=\"post\" action=\"/admin/exchanges/" + _htmlEscape(x.id) + "/reject\" class=\"return-action\">" +
+        "<h4>Reject</h4>" +
+        _setupField("Operator id (UUID)", "approver_id", "", "text", "The operator rejecting this exchange.", " required") +
+        _setupField("Reason for rejection", "reject_reason", "", "text", "Shown to the customer.", " maxlength=\"1024\" required") +
+        "<button class=\"btn btn--danger\" type=\"submit\">Reject exchange</button>" +
+      "</form>");
+  }
+  var actions = actionBlocks.length
+    ? "<div class=\"return-actions\">" + actionBlocks.join("") + "</div>"
+    : "<span class=\"meta\">This exchange is in a final state — no further changes.</span>";
+
+  var body =
+    "<section class=\"mw-48\">" +
+      "<div class=\"actions-row\"><a class=\"btn btn--ghost\" href=\"/admin/exchanges\">&larr; Exchanges</a></div>" +
+      "<h2>Exchange <code class=\"order-id\">" + _htmlEscape(String(x.id).slice(0, 8)) + "</code> " +
+        "<span class=\"status-pill " + _exchangePillClass(x.status) + "\">" + _htmlEscape(x.status) + "</span></h2>" +
+      "<p class=\"meta\">Requested " + _htmlEscape(_fmtDate(x.created_at)) +
+        " · order <a class=\"order-id\" href=\"/admin/orders/" + _htmlEscape(x.order_id) + "\">" + _htmlEscape(String(x.order_id).slice(0, 8)) + "</a></p>" +
+      moved + notice +
+      "<div class=\"two-col\">" +
+        "<div class=\"panel\"><h3 class=\"subhead\">Swap</h3>" +
+          _field("Item returned", x.return_sku + " ×" + x.return_qty) +
+          _field("Replacement", x.replacement_sku + " ×" + x.replacement_qty) +
+          _field("Replacement variant", x.replacement_variant_id) +
+          _field("Reason", x.reason) +
+          (x.reject_reason ? _field("Rejection reason", x.reject_reason) : "") +
+        "</div>" +
+        "<div class=\"panel\"><h3 class=\"subhead\">Timeline</h3>" +
+          _field("Approved by", x.approver_id) +
+          _field("Replacement shipped", _ts(x.shipped_at)) +
+          (x.tracking_number ? _field("Tracking", (x.carrier ? x.carrier + " · " : "") + x.tracking_number) : "") +
+          _field("Replacement delivered", _ts(x.delivered_at)) +
+          _field("Return received", _ts(x.returned_at)) +
+          _field("Closed", _ts(x.closed_at)) +
+        "</div>" +
+      "</div>" +
+      "<div class=\"panel mt\"><h3 class=\"subhead\">Actions</h3>" + actions + "</div>" +
+    "</section>";
+  return _renderAdminShell(opts.shop_name, "Exchange " + String(x.id).slice(0, 8), body, "exchanges", opts.nav_available);
+}
+
 // The review states an operator can filter the moderation queue by.
 var REVIEW_STATUS_FILTERS = ["pending", "published", "rejected"];
 

package/lib/asset-manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.3.34",
+  "version": "0.3.36",
   "assets": {
     "css/admin.css": {
       "integrity": "sha384-1SIn6oAf1DjECbRfKENZasdKHJiywGdXR58wn0hsFGcdVHzUmvfgMkEz5ANIAZJ3",