@blamejs/blamejs-shop 0.3.53 → 0.3.55

package/lib/admin.js

@@ -181,6 +181,16 @@ function _htmlEscape(s) {
   return b.template.escapeHtml(String(s));
 }
 
+// Wrap a built data-table string in a horizontal-scroll container so a
+// narrow viewport scrolls the table rather than the whole page (.table-wrap
+// is defined in admin.css — WCAG 1.4.10 reflow). Layout-only tables
+// (order-totals) are NOT wrapped — they never overflow. `tableHtml` is
+// already-escaped markup assembled by the caller; this helper interpolates
+// no untrusted data, so it is XSS-neutral.
+function _tableWrap(tableHtml) {
+  return "<div class=\"table-wrap\">" + tableHtml + "</div>";
+}
+
 // Strict integer coercion for money / count form fields. Refuses
 // "50abc" / "" / floats, unlike parseInt's loose prefix match (which
 // silently turns "50abc" into 50). Accepts an already-numeric value
@@ -515,6 +525,8 @@ function mount(router, deps) {
   var complianceExport = deps.complianceExport || null; // DSR queue (export/erasure) disabled when absent
   var orderExchanges  = deps.orderExchanges  || null; // exchange queue + FSM-action console disabled when absent
   var orderRatings    = deps.orderRatings    || null; // per-order rating moderation queue (flag/clear + public reply) disabled when absent
+  var clickAndCollect = deps.clickAndCollect || null; // pickup-locations CRUD + pickup queue console disabled when absent
+  var giftOptions     = deps.giftOptions     || null; // gift-wrap catalog console disabled when absent
   var searchRanking   = deps.searchRanking   || null; // search-ranking weight-set + pin console disabled when absent
   var trustBadges     = deps.trustBadges     || null; // trust-badge authoring console disabled when absent
   var preorder        = deps.preorder        || null; // pre-order campaign console (define/launch/close) disabled when absent
@@ -531,7 +543,7 @@ function mount(router, deps) {
   // `reports` is always present in the nav (read-only sales summary needs no
   // extra dep); its route mounts unconditionally and renders an unconfigured
   // notice when the salesReports primitive isn't wired.
-  var navAvailable = { returns: !!returns, reviews: !!reviews, productQa: !!productQa, subscriptions: !!deps.subscriptions, preorder: !!deps.preorder, webhooks: !!deps.webhooks, collections: !!deps.collections, customers: !!deps.customers, customerSegments: !!customerSegments, giftcards: !!deps.giftcards, announcementBar: !!deps.announcementBar, blog: !!deps.blog, knowledgeBase: !!deps.knowledgeBase, customerSurveys: !!deps.customerSurveys, storefrontPages: !!deps.storefrontPages, businessHours: !!deps.businessHours, taxRates: !!deps.taxRates, shippingZones: !!deps.shippingZones, autoDiscount: !!deps.autoDiscount, discountAllocation: !!deps.discountAllocation, quantityDiscounts: !!deps.quantityDiscounts, loyalty: !!deps.loyalty, pickLists: !!pickLists, salesTaxFilings: !!salesTaxFilings, shippingLabels: !!shippingLabels, supportTickets: !!supportTickets, complianceExport: !!complianceExport, orderExchanges: !!orderExchanges, orderRatings: !!orderRatings, searchRanking: !!searchRanking, trustBadges: !!trustBadges, orderExport: !!orderExport, auditLog: auditLog };
+  var navAvailable = { returns: !!returns, reviews: !!reviews, productQa: !!productQa, subscriptions: !!deps.subscriptions, preorder: !!deps.preorder, webhooks: !!deps.webhooks, collections: !!deps.collections, customers: !!deps.customers, customerSegments: !!customerSegments, giftcards: !!deps.giftcards, announcementBar: !!deps.announcementBar, blog: !!deps.blog, knowledgeBase: !!deps.knowledgeBase, customerSurveys: !!deps.customerSurveys, storefrontPages: !!deps.storefrontPages, businessHours: !!deps.businessHours, taxRates: !!deps.taxRates, shippingZones: !!deps.shippingZones, autoDiscount: !!deps.autoDiscount, discountAllocation: !!deps.discountAllocation, quantityDiscounts: !!deps.quantityDiscounts, loyalty: !!deps.loyalty, pickLists: !!pickLists, salesTaxFilings: !!salesTaxFilings, shippingLabels: !!shippingLabels, supportTickets: !!supportTickets, complianceExport: !!complianceExport, orderExchanges: !!orderExchanges, orderRatings: !!orderRatings, clickAndCollect: !!clickAndCollect, giftOptions: !!giftOptions, searchRanking: !!searchRanking, trustBadges: !!trustBadges, orderExport: !!orderExport, auditLog: auditLog };
 
   try { b.audit.registerNamespace(AUDIT_NAMESPACE); } catch (_e) { /* idempotent */ }
 
@@ -4596,6 +4608,318 @@ function mount(router, deps) {
     ));
   }
 
+  // ---- click-and-collect (pickup locations + the pickup queue) --------
+  //
+  // Two operator surfaces: the pickup-location CRUD (define / archive) and
+  // the front-counter pickup queue per location (the FSM: ready / picked-up
+  // / no-show). The primitive throws PLAIN TypeError (no `.code`) on every
+  // refusal EXCEPT markPickedUp's internal `fsm/illegal-transition` handling,
+  // so the action wrapper maps TypeError → 400/?err=1 — but RESOLVES EXISTENCE
+  // FIRST (getScheduleByOrder / getLocation null → 404) so a not-found isn't
+  // mislabeled a bad-shape 400.
+  if (clickAndCollect) {
+    // Parse the operator's hours textarea (one "Mon 09:00-17:00" line per
+    // weekday) into the hours_json object the primitive validates. An empty
+    // textarea yields {} (the primitive only requires a JSON-serialisable
+    // object). Unparseable lines are skipped so a typo doesn't 500 the save.
+    function _parseHoursJson(raw) {
+      var hours = {};
+      if (typeof raw !== "string" || !raw.trim()) return hours;
+      raw.split(/\r?\n/).forEach(function (line) {
+        var m = line.trim().match(/^([A-Za-z]{3,})\s+(\d{1,2}:\d{2})\s*-\s*(\d{1,2}:\d{2})$/);
+        if (m) hours[m[1].toLowerCase().slice(0, 3)] = { open: m[2], close: m[3] };
+      });
+      return hours;
+    }
+
+    // GET /admin/pickup-locations — the active-location list (the primitive
+    // has no "list all incl archived" verb; archived rows drop out of
+    // availableLocations, which is the operator's working set — re-open an
+    // archived-locations list if operators ask for it).
+    router.get("/admin/pickup-locations", _pageOrApi(true,
+      R(async function (req, res) {
+        var rows = await clickAndCollect.availableLocations({ limit: 200 });
+        _json(res, 200, { rows: rows });
+      }),
+      async function (req, res) {
+        var url = req.url ? new URL(req.url, "http://localhost") : null;
+        var rows = await clickAndCollect.availableLocations({ limit: 200 });
+        _sendHtml(res, 200, renderAdminPickupLocations({
+          shop_name: deps.shop_name, nav_available: navAvailable, locations: rows,
+          saved: url && url.searchParams.get("saved"),
+          notice: url && url.searchParams.get("err") ? "That location couldn't be saved — check the fields and try again." : null,
+        }));
+      },
+    ));
+
+    // POST /admin/pickup-locations — definePickupLocation upsert. A bad
+    // shape (missing name / bad capacity / bad address) is a TypeError → 400.
+    router.post("/admin/pickup-locations", _pageOrApi(false,
+      W("pickup.location.define", async function (req, res) {
+        var body = req.body || {};
+        var loc;
+        try { loc = await _definePickupFromBody(body); }
+        catch (e) { if (e instanceof TypeError) return _problem(res, 400, "bad-request", e.message); throw e; }
+        _json(res, 201, loc);
+        return loc;
+      }),
+      async function (req, res) {
+        try { await _definePickupFromBody(req.body || {}); }
+        catch (e) { if (e instanceof TypeError) return _redirect(res, "/admin/pickup-locations?err=1"); throw e; }
+        b.audit.safeEmit({ action: AUDIT_NAMESPACE + ".pickup.location.define", outcome: "success", metadata: { code: (req.body || {}).code } });
+        _redirect(res, "/admin/pickup-locations?saved=1");
+      },
+    ));
+
+    function _definePickupFromBody(body) {
+      return clickAndCollect.definePickupLocation({
+        code:              body.code,
+        name:              body.name,
+        address:          { line1: body.line1, city: body.city, country: body.country },
+        hours_json:        _parseHoursJson(body.hours),
+        capacity_per_hour: parseInt(body.capacity_per_hour, 10),
+        lead_time_hours:   parseInt(body.lead_time_hours, 10),
+        active:            !(body.active === "0" || body.active === false),
+      });
+    }
+
+    // POST /admin/pickup-locations/:code/archive — soft-delete. Resolve
+    // existence first (getLocation null → 404) so a typo'd code is a 404, not
+    // a 400/500. The archive verb itself only throws on a malformed code.
+    router.post("/admin/pickup-locations/:code/archive", _pageOrApi(false,
+      W("pickup.location.archive", async function (req, res) {
+        var code = req.params.code;
+        var existing;
+        try { existing = await clickAndCollect.getLocation(code); }
+        catch (e) { if (e instanceof TypeError) return _problem(res, 400, "bad-request", e.message); throw e; }
+        if (!existing) return _problem(res, 404, "pickup-location-not-found");
+        var row = await clickAndCollect.archiveLocation(code);
+        _json(res, 200, row);
+        return row;
+      }),
+      async function (req, res) {
+        var code = req.params.code;
+        var existing;
+        try { existing = await clickAndCollect.getLocation(code); }
+        catch (e) { if (e instanceof TypeError) return _redirect(res, "/admin/pickup-locations?err=1"); throw e; }
+        if (!existing) return _redirect(res, "/admin/pickup-locations?err=1");
+        await clickAndCollect.archiveLocation(code);
+        b.audit.safeEmit({ action: AUDIT_NAMESPACE + ".pickup.location.archive", outcome: "success", metadata: { code: code } });
+        _redirect(res, "/admin/pickup-locations?saved=1");
+      },
+    ));
+
+    // GET /admin/pickups — the per-location pickup queue. The primitive has
+    // no all-locations queue verb, so the screen requires a ?location=
+    // selector defaulting to the first active location. A wide window
+    // (now-7d … now+30d) bounds the read.
+    router.get("/admin/pickups", _pageOrApi(true,
+      R(async function (req, res) {
+        var url = req.url ? new URL(req.url, "http://localhost") : null;
+        var locs = await clickAndCollect.availableLocations({ limit: 200 });
+        var selected = (url && url.searchParams.get("location")) || (locs[0] && locs[0].code) || null;
+        var status = (url && url.searchParams.get("status")) || null;
+        var rows = selected ? await _pickupQueue(selected, status) : [];
+        _json(res, 200, { rows: rows, location: selected, status: status });
+      }),
+      async function (req, res) {
+        var url = req.url ? new URL(req.url, "http://localhost") : null;
+        var locs = await clickAndCollect.availableLocations({ limit: 200 });
+        var selected = (url && url.searchParams.get("location")) || (locs[0] && locs[0].code) || null;
+        var status = (url && url.searchParams.get("status")) || null;
+        var rows = [];
+        if (selected) {
+          try { rows = await _pickupQueue(selected, status); }
+          catch (e) { if (!(e instanceof TypeError)) throw e; rows = []; }
+        }
+        _sendHtml(res, 200, renderAdminPickups({
+          shop_name: deps.shop_name, nav_available: navAvailable,
+          locations: locs, selected: selected, status: status, pickups: rows,
+          moved:  url && url.searchParams.get("moved"),
+          notice: url && url.searchParams.get("err") ? "That pickup action couldn't be completed." : null,
+        }));
+      },
+    ));
+
+    function _pickupQueue(locationCode, status) {
+      var now = Date.now();
+      var opts2 = {
+        location_code: locationCode,
+        from: now - b.constants.TIME.days(7),
+        to:   now + b.constants.TIME.days(30),
+      };
+      if (status && PICKUP_QUEUE_STATUSES.indexOf(status) !== -1) opts2.status = status;
+      return clickAndCollect.pickupsForLocation(opts2);
+    }
+
+    // The three FSM action routes. Each RESOLVES EXISTENCE FIRST
+    // (getScheduleByOrder null → 404) so a not-found order isn't mislabeled a
+    // 400; a real refusal (wrong status / bad shape) is a TypeError → 400.
+    function _pickupAction(verb, auditEvent, opFn) {
+      router.post("/admin/pickups/:order_id/" + verb, _pageOrApi(false,
+        W("pickup." + auditEvent, async function (req, res) {
+          var orderId = req.params.order_id;
+          var existing;
+          try { existing = await clickAndCollect.getScheduleByOrder(orderId); }
+          catch (e) { if (e instanceof TypeError) return _problem(res, 400, "bad-request", e.message); throw e; }
+          if (!existing) return _problem(res, 404, "pickup-schedule-not-found");
+          var row;
+          try { row = await opFn(orderId, req.body || {}); }
+          catch (e) {
+            if (e instanceof TypeError) return _problem(res, 400, "bad-request", e.message);
+            if (e && e.code === "fsm/illegal-transition") return _problem(res, 409, "conflict", e.message);
+            throw e;
+          }
+          _json(res, 200, row);
+          return row;
+        }),
+        async function (req, res) {
+          var orderId = req.params.order_id;
+          var existing;
+          try { existing = await clickAndCollect.getScheduleByOrder(orderId); }
+          catch (e) { if (e instanceof TypeError) return _redirect(res, "/admin/pickups?err=1"); throw e; }
+          if (!existing) return _redirect(res, "/admin/pickups?err=1");
+          var backLoc = "&location=" + encodeURIComponent(existing.location_code);
+          try { await opFn(orderId, req.body || {}); }
+          catch (e) {
+            if (e instanceof TypeError || (e && e.code === "fsm/illegal-transition")) {
+              return _redirect(res, "/admin/pickups?err=1" + backLoc);
+            }
+            throw e;
+          }
+          b.audit.safeEmit({ action: AUDIT_NAMESPACE + ".pickup." + auditEvent, outcome: "success", metadata: { order_id: orderId } });
+          _redirect(res, "/admin/pickups?moved=1" + backLoc);
+        },
+      ));
+    }
+    _pickupAction("ready", "ready", function (orderId) {
+      return clickAndCollect.markReadyForPickup({ order_id: orderId });
+    });
+    _pickupAction("picked-up", "picked_up", function (orderId, body) {
+      return clickAndCollect.markPickedUp({
+        order_id: orderId, picked_up_at: Date.now(),
+        signature: body.signature || undefined,
+        customer_id_proof_kind: body.proof_kind || undefined,
+      });
+    });
+    _pickupAction("no-show", "no_show", function (orderId, body) {
+      return clickAndCollect.markNoShow({ order_id: orderId, reason: body.reason });
+    });
+  }
+
+  // ---- gift wraps -----------------------------------------------------
+  //
+  // The operator-defined gift-wrap catalog: define / update / archive a wrap
+  // option whose wrap_sku is a real catalog variant (so the fee flows through
+  // inventory + pricing). defineWrap / updateWrap / archiveWrap throw PLAIN
+  // TypeError on a bad shape / unknown sku / not-found → 400; update/archive
+  // resolve existence first (getWrap null → 404) for parity.
+  if (giftOptions) {
+    router.get("/admin/gift-wraps", _pageOrApi(true,
+      R(async function (req, res) {
+        var rows = await giftOptions.listWraps({});
+        _json(res, 200, { rows: rows });
+      }),
+      async function (req, res) {
+        var url = req.url ? new URL(req.url, "http://localhost") : null;
+        var rows = await giftOptions.listWraps({});
+        _sendHtml(res, 200, renderAdminGiftWraps({
+          shop_name: deps.shop_name, nav_available: navAvailable, wraps: rows,
+          saved: url && url.searchParams.get("saved"),
+          notice: url && url.searchParams.get("err") ? "That wrap couldn't be saved — the SKU must be a real catalog variant." : null,
+        }));
+      },
+    ));
+
+    router.post("/admin/gift-wraps", _pageOrApi(false,
+      W("gift.wrap.define", async function (req, res) {
+        var wrap;
+        try { wrap = await _defineWrapFromBody(req.body || {}); }
+        catch (e) { if (e instanceof TypeError) return _problem(res, 400, "bad-request", e.message); throw e; }
+        _json(res, 201, wrap);
+        return wrap;
+      }),
+      async function (req, res) {
+        try { await _defineWrapFromBody(req.body || {}); }
+        catch (e) { if (e instanceof TypeError) return _redirect(res, "/admin/gift-wraps?err=1"); throw e; }
+        b.audit.safeEmit({ action: AUDIT_NAMESPACE + ".gift.wrap.define", outcome: "success", metadata: { wrap_sku: (req.body || {}).wrap_sku } });
+        _redirect(res, "/admin/gift-wraps?saved=1");
+      },
+    ));
+
+    function _defineWrapFromBody(body) {
+      return giftOptions.defineWrap({
+        wrap_sku:      body.wrap_sku,
+        title:         body.title,
+        fee_minor:     parseInt(body.fee_minor, 10),
+        image_url:     body.image_url ? body.image_url : undefined,
+        max_per_order: body.max_per_order ? parseInt(body.max_per_order, 10) : undefined,
+        active:        !(body.active === "0" || body.active === false),
+      });
+    }
+
+    router.post("/admin/gift-wraps/:wrap_sku/update", _pageOrApi(false,
+      W("gift.wrap.update", async function (req, res) {
+        var sku = req.params.wrap_sku;
+        var existing;
+        try { existing = await giftOptions.getWrap(sku); }
+        catch (e) { if (e instanceof TypeError) return _problem(res, 400, "bad-request", e.message); throw e; }
+        if (!existing) return _problem(res, 404, "gift-wrap-not-found");
+        var wrap;
+        try { wrap = await giftOptions.updateWrap(sku, _wrapPatchFromBody(req.body || {})); }
+        catch (e) { if (e instanceof TypeError) return _problem(res, 400, "bad-request", e.message); throw e; }
+        _json(res, 200, wrap);
+        return wrap;
+      }),
+      async function (req, res) {
+        var sku = req.params.wrap_sku;
+        var existing;
+        try { existing = await giftOptions.getWrap(sku); }
+        catch (e) { if (e instanceof TypeError) return _redirect(res, "/admin/gift-wraps?err=1"); throw e; }
+        if (!existing) return _redirect(res, "/admin/gift-wraps?err=1");
+        try { await giftOptions.updateWrap(sku, _wrapPatchFromBody(req.body || {})); }
+        catch (e) { if (e instanceof TypeError) return _redirect(res, "/admin/gift-wraps?err=1"); throw e; }
+        b.audit.safeEmit({ action: AUDIT_NAMESPACE + ".gift.wrap.update", outcome: "success", metadata: { wrap_sku: sku } });
+        _redirect(res, "/admin/gift-wraps?saved=1");
+      },
+    ));
+
+    // Build the updateWrap patch from the edit form — only the columns the
+    // operator actually changed (a blank field is omitted, never sent as "").
+    function _wrapPatchFromBody(body) {
+      var patch = {};
+      if (body.title != null && body.title !== "")              patch.title = body.title;
+      if (body.fee_minor != null && body.fee_minor !== "")      patch.fee_minor = parseInt(body.fee_minor, 10);
+      if (body.image_url != null && body.image_url !== "")      patch.image_url = body.image_url;
+      if (body.max_per_order != null && body.max_per_order !== "") patch.max_per_order = parseInt(body.max_per_order, 10);
+      if (body.active != null)                                  patch.active = !(body.active === "0" || body.active === false);
+      return patch;
+    }
+
+    router.post("/admin/gift-wraps/:wrap_sku/archive", _pageOrApi(false,
+      W("gift.wrap.archive", async function (req, res) {
+        var sku = req.params.wrap_sku;
+        var existing;
+        try { existing = await giftOptions.getWrap(sku); }
+        catch (e) { if (e instanceof TypeError) return _problem(res, 400, "bad-request", e.message); throw e; }
+        if (!existing) return _problem(res, 404, "gift-wrap-not-found");
+        var wrap = await giftOptions.archiveWrap(sku);
+        _json(res, 200, wrap);
+        return wrap;
+      }),
+      async function (req, res) {
+        var sku = req.params.wrap_sku;
+        var existing;
+        try { existing = await giftOptions.getWrap(sku); }
+        catch (e) { if (e instanceof TypeError) return _redirect(res, "/admin/gift-wraps?err=1"); throw e; }
+        if (!existing) return _redirect(res, "/admin/gift-wraps?err=1");
+        await giftOptions.archiveWrap(sku);
+        b.audit.safeEmit({ action: AUDIT_NAMESPACE + ".gift.wrap.archive", outcome: "success", metadata: { wrap_sku: sku } });
+        _redirect(res, "/admin/gift-wraps?saved=1");
+      },
+    ));
+  }
+
   // ---- config ---------------------------------------------------------
 
   var config = deps.config || null;
@@ -10194,7 +10518,7 @@ function renderDashboard(opts) {
     }).join("");
     otherCurrencies =
       "<section><h2>Other currencies in window</h2><div class=\"panel\">" +
-      "<table><thead><tr><th scope=\"col\">Currency</th><th scope=\"col\" class=\"num\">Orders</th><th scope=\"col\" class=\"num\">Revenue</th></tr></thead><tbody>" + rows + "</tbody></table>" +
+      _tableWrap("<table><thead><tr><th scope=\"col\">Currency</th><th scope=\"col\" class=\"num\">Orders</th><th scope=\"col\" class=\"num\">Revenue</th></tr></thead><tbody>" + rows + "</tbody></table>") +
       "</div></section>";
   }
 
@@ -10228,11 +10552,11 @@ function renderDashboard(opts) {
     "<section><h2>Catalog + activity</h2><div class=\"two-col\">" +
     "  <div class=\"panel\">" +
     "    <h3 class=\"subhead\">Top SKUs by units sold</h3>" +
-    "    <table><thead><tr><th scope=\"col\">SKU</th><th scope=\"col\" class=\"num\">Units</th><th scope=\"col\" class=\"num\">Revenue</th></tr></thead><tbody>" + topRows + "</tbody></table>" +
+    "    " + _tableWrap("<table><thead><tr><th scope=\"col\">SKU</th><th scope=\"col\" class=\"num\">Units</th><th scope=\"col\" class=\"num\">Revenue</th></tr></thead><tbody>" + topRows + "</tbody></table>") +
     "  </div>" +
     "  <div class=\"panel\">" +
     "    <h3 class=\"subhead\">Recent orders</h3>" +
-    "    <table><thead><tr><th scope=\"col\">Order</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Total</th></tr></thead><tbody>" + recentRows + "</tbody></table>" +
+    "    " + _tableWrap("<table><thead><tr><th scope=\"col\">Order</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Total</th></tr></thead><tbody>" + recentRows + "</tbody></table>") +
     "  </div>" +
     "</div></section>";
 
@@ -10277,6 +10601,9 @@ var ADMIN_NAV_ITEMS = [
   { key: "dsr",          href: "/admin/dsr",          label: "Privacy requests", requires: "complianceExport" },
   { key: "exchanges",    href: "/admin/exchanges",    label: "Exchanges",    requires: "orderExchanges" },
   { key: "ratings",      href: "/admin/ratings",      label: "Ratings",      requires: "orderRatings" },
+  { key: "pickup-locations", href: "/admin/pickup-locations", label: "Pickup locations", requires: "clickAndCollect" },
+  { key: "pickups",      href: "/admin/pickups",      label: "Pickups",      requires: "clickAndCollect" },
+  { key: "gift-wraps",   href: "/admin/gift-wraps",   label: "Gift wraps",   requires: "giftOptions" },
   { key: "search-ranking", href: "/admin/search-ranking", label: "Search ranking", requires: "searchRanking" },
   { key: "trust-badges", href: "/admin/trust-badges", label: "Trust badges", requires: "trustBadges" },
   { key: "reviews",      href: "/admin/reviews",      label: "Reviews",      requires: "reviews" },
@@ -10490,10 +10817,10 @@ function renderAdminIntegrations(opts) {
     "<section>" +
       "<h2>Integrations</h2>" +
       "<p class=\"meta\">Every integration is off until you supply its credentials — set them as deployment secrets, then redeploy. Nothing is enabled without your keys.</p>" +
-      "<div class=\"panel\"><table>" +
+      "<div class=\"panel\">" + _tableWrap("<table>" +
         "<thead><tr><th scope=\"col\">Integration</th><th scope=\"col\">Status</th><th scope=\"col\">To enable</th></tr></thead>" +
         "<tbody>" + rows + "</tbody>" +
-      "</table></div>" +
+      "</table>") + "</div>" +
       "<p class=\"meta mt-125\">Sign in with Apple and PayPal are planned. “Sign in with Shop” / Shop Pay isn't available to a self-hosted store. See the README “Optional integrations” section for full setup steps.</p>" +
       "<div class=\"actions-row\"><a class=\"btn btn--ghost\" href=\"/admin\">Back</a></div>" +
     "</section>";
@@ -10519,7 +10846,7 @@ function renderAdminProducts(opts) {
       "</div></td></tr>";
   }).join("");
   var table = products.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Title</th><th scope=\"col\">Slug</th><th scope=\"col\">Status</th><th scope=\"col\">Action</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Title</th><th scope=\"col\">Slug</th><th scope=\"col\">Status</th><th scope=\"col\">Action</th></tr></thead><tbody>" + rows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No products yet — create your first one below.</p>";
   var body =
     "<section><h2>Products</h2>" + created + notice + table +
@@ -10575,7 +10902,7 @@ function renderAdminOrders(opts) {
   }).join("");
 
   var table = orders.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Order</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Items</th><th scope=\"col\" class=\"num\">Total</th><th scope=\"col\">Placed</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Order</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Items</th><th scope=\"col\" class=\"num\">Total</th><th scope=\"col\">Placed</th></tr></thead><tbody>" + rows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No orders" + (active ? " with status “" + _htmlEscape(active) + "”" : " yet") + ".</p>";
 
   var body = "<section><h2>Orders</h2>" + notice + chips + table + "</section>";
@@ -10647,7 +10974,7 @@ function renderAdminAudit(opts) {
   }).join("");
 
   var table = rows.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Time</th><th scope=\"col\">Action</th><th scope=\"col\">Outcome</th><th scope=\"col\">Actor</th><th scope=\"col\">Resource</th><th scope=\"col\">Details</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Time</th><th scope=\"col\">Action</th><th scope=\"col\">Outcome</th><th scope=\"col\">Actor</th><th scope=\"col\">Resource</th><th scope=\"col\">Details</th></tr></thead><tbody>" + bodyRows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No audit events match.</p>";
 
   // Pager: Newer steps back one page (disabled at offset 0); Older steps
@@ -10738,7 +11065,7 @@ function renderAdminReports(opts) {
   }).join("");
   var funnelBlock =
     "<section><h2>Order status</h2><div class=\"panel\">" +
-      "<table><thead><tr><th scope=\"col\">Stage</th><th scope=\"col\" class=\"num\">Orders</th></tr></thead><tbody>" + funnelRows + "</tbody></table>" +
+      _tableWrap("<table><thead><tr><th scope=\"col\">Stage</th><th scope=\"col\" class=\"num\">Orders</th></tr></thead><tbody>" + funnelRows + "</tbody></table>") +
     "</div></section>";
 
   // Top products by gross revenue across the window.
@@ -10752,7 +11079,7 @@ function renderAdminReports(opts) {
     : "<tr><td colspan=\"3\" class=\"empty\">No sales in this window.</td></tr>";
   var topBlock =
     "<section><h2>Top products</h2><div class=\"panel\">" +
-      "<table><thead><tr><th scope=\"col\">SKU</th><th scope=\"col\" class=\"num\">Units</th><th scope=\"col\" class=\"num\">Revenue</th></tr></thead><tbody>" + topRows + "</tbody></table>" +
+      _tableWrap("<table><thead><tr><th scope=\"col\">SKU</th><th scope=\"col\" class=\"num\">Units</th><th scope=\"col\" class=\"num\">Revenue</th></tr></thead><tbody>" + topRows + "</tbody></table>") +
     "</div></section>";
 
   // By-day revenue series — one row per (day, currency) bucket.
@@ -10771,7 +11098,7 @@ function renderAdminReports(opts) {
     : "<tr><td colspan=\"6\" class=\"empty\">No sales in this window.</td></tr>";
   var dayBlock =
     "<section><h2>By day</h2><div class=\"panel\">" +
-      "<table><thead><tr><th scope=\"col\">Date</th><th scope=\"col\">Currency</th><th scope=\"col\" class=\"num\">Orders</th><th scope=\"col\" class=\"num\">Gross</th><th scope=\"col\" class=\"num\">Net</th><th scope=\"col\" class=\"num\">Refunds</th></tr></thead><tbody>" + dayRows + "</tbody></table>" +
+      _tableWrap("<table><thead><tr><th scope=\"col\">Date</th><th scope=\"col\">Currency</th><th scope=\"col\" class=\"num\">Orders</th><th scope=\"col\" class=\"num\">Gross</th><th scope=\"col\" class=\"num\">Net</th><th scope=\"col\" class=\"num\">Refunds</th></tr></thead><tbody>" + dayRows + "</tbody></table>") +
     "</div></section>";
 
   var body =
@@ -10863,7 +11190,7 @@ function renderAdminExports(opts) {
     "</tr>";
   }).join("");
   var jobTable = exportsRows.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Format</th><th scope=\"col\">Window</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Rows</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + jobRows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Format</th><th scope=\"col\">Window</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Rows</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + jobRows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No scheduled exports yet.</p>";
 
   var scheduleFmtOptions = formats.map(function (f) {
@@ -10966,7 +11293,7 @@ function renderAdminShippingLabels(opts) {
 
   var rows = labels.map(_shippingLabelRow).join("");
   var table = labels.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Carrier</th><th scope=\"col\">Tracking</th><th scope=\"col\" class=\"num\">Cost</th><th scope=\"col\">Broker</th><th scope=\"col\">Status</th><th scope=\"col\">Label</th><th scope=\"col\">Created</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Carrier</th><th scope=\"col\">Tracking</th><th scope=\"col\" class=\"num\">Cost</th><th scope=\"col\">Broker</th><th scope=\"col\">Status</th><th scope=\"col\">Label</th><th scope=\"col\">Created</th></tr></thead><tbody>" + rows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No " + _htmlEscape(status) + " labels" + (status === "voided" ? " in this window" : "") + ".</p>";
 
   var body =
@@ -10988,7 +11315,7 @@ function renderAdminShippingLabelsPending(opts) {
   var notice = opts.notice ? "<div class=\"banner banner--warn\">" + _htmlEscape(opts.notice) + "</div>" : "";
   var rows = labels.map(_shippingLabelRow).join("");
   var table = labels.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Carrier</th><th scope=\"col\">Tracking</th><th scope=\"col\" class=\"num\">Cost</th><th scope=\"col\">Broker</th><th scope=\"col\">Status</th><th scope=\"col\">Label</th><th scope=\"col\">Created</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Carrier</th><th scope=\"col\">Tracking</th><th scope=\"col\" class=\"num\">Cost</th><th scope=\"col\">Broker</th><th scope=\"col\">Status</th><th scope=\"col\">Label</th><th scope=\"col\">Created</th></tr></thead><tbody>" + rows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No labels awaiting a broker mint.</p>";
   var body =
     "<section><h2>Shipping labels</h2>" + notice +
@@ -11044,7 +11371,7 @@ function renderAdminShippingLabelCosts(opts) {
     : "<tr><td colspan=\"4\" class=\"empty\">No labels purchased in this window.</td></tr>";
   var brokerBlock =
     "<section><h2>By broker</h2><div class=\"panel\">" +
-      "<table><thead><tr><th scope=\"col\">Broker</th><th scope=\"col\">Currency</th><th scope=\"col\" class=\"num\">Labels</th><th scope=\"col\" class=\"num\">Spend</th></tr></thead><tbody>" + brokerRows + "</tbody></table>" +
+      _tableWrap("<table><thead><tr><th scope=\"col\">Broker</th><th scope=\"col\">Currency</th><th scope=\"col\" class=\"num\">Labels</th><th scope=\"col\" class=\"num\">Spend</th></tr></thead><tbody>" + brokerRows + "</tbody></table>") +
     "</div></section>";
 
   var body =
@@ -11077,7 +11404,7 @@ function renderAdminOrder(opts) {
       "</tr>";
   }).join("");
   var linesTable = (o.lines && o.lines.length)
-    ? "<table><thead><tr><th scope=\"col\">SKU</th><th scope=\"col\" class=\"num\">Qty</th><th scope=\"col\" class=\"num\">Unit</th><th scope=\"col\" class=\"num\">Line</th></tr></thead><tbody>" + lineRows + "</tbody></table>"
+    ? _tableWrap("<table><thead><tr><th scope=\"col\">SKU</th><th scope=\"col\" class=\"num\">Qty</th><th scope=\"col\" class=\"num\">Unit</th><th scope=\"col\" class=\"num\">Line</th></tr></thead><tbody>" + lineRows + "</tbody></table>")
     : "<p class=\"empty\">No line items recorded.</p>";
 
   function _total(label, minor, strong) {
@@ -11165,7 +11492,7 @@ function renderAdminOrder(opts) {
           "<td>" + _htmlEscape(_fmtDate(e.occurred_at)) + "</td></tr>";
       }).join("");
       var eventsTable = (s.events && s.events.length)
-        ? "<table><thead><tr><th scope=\"col\">Status</th><th scope=\"col\">Location</th><th scope=\"col\">When</th></tr></thead><tbody>" + eventRows + "</tbody></table>"
+        ? _tableWrap("<table><thead><tr><th scope=\"col\">Status</th><th scope=\"col\">Location</th><th scope=\"col\">When</th></tr></thead><tbody>" + eventRows + "</tbody></table>")
         : "<p class=\"empty\">No carrier events yet.</p>";
       var statusOpts = statuses.map(function (st) {
         return "<option value=\"" + _htmlEscape(st) + "\">" + _htmlEscape(st) + "</option>";
@@ -11291,7 +11618,7 @@ function _orderLabelPanel(orderId, shipment, carriers, packageTypes, purchasedVi
     "</tr>";
   }).join("");
   var labelsTable = labels.length
-    ? "<table><thead><tr><th scope=\"col\">Carrier</th><th scope=\"col\">Tracking</th><th scope=\"col\" class=\"num\">Cost</th><th scope=\"col\">Status</th><th scope=\"col\">Label</th><th scope=\"col\"></th></tr></thead><tbody>" + labelRows + "</tbody></table>"
+    ? _tableWrap("<table><thead><tr><th scope=\"col\">Carrier</th><th scope=\"col\">Tracking</th><th scope=\"col\" class=\"num\">Cost</th><th scope=\"col\">Status</th><th scope=\"col\">Label</th><th scope=\"col\"></th></tr></thead><tbody>" + labelRows + "</tbody></table>")
     : "<p class=\"empty\">No labels recorded for this shipment.</p>";
   var carrierOpts = carriers.map(function (c) {
     return "<option value=\"" + _htmlEscape(c) + "\">" + _htmlEscape(c) + "</option>";
@@ -11370,7 +11697,7 @@ function _orderSplitPanel(o, plans) {
     ? "<form method=\"post\" action=\"/admin/orders/" + _htmlEscape(o.id) + "/split/plan\" class=\"return-action\">" +
         "<h4>Plan a manual split</h4>" +
         "<p class=\"meta\">Assign each line to a parcel number (lines sharing a number ship together). Every unit must land in a parcel.</p>" +
-        "<table><thead><tr><th scope=\"col\">Line (order qty)</th><th scope=\"col\">Parcel</th><th scope=\"col\">Qty</th></tr></thead><tbody>" + lineRows + "</tbody></table>" +
+        _tableWrap("<table><thead><tr><th scope=\"col\">Line (order qty)</th><th scope=\"col\">Parcel</th><th scope=\"col\">Qty</th></tr></thead><tbody>" + lineRows + "</tbody></table>") +
         "<button class=\"btn\" type=\"submit\">Propose split</button>" +
       "</form>"
     : "<p class=\"empty\">No order lines to split.</p>";
@@ -11403,7 +11730,7 @@ function renderAdminPickLists(opts) {
     "</tr>";
   }).join("");
   var table = lists.length
-    ? "<table><thead><tr><th scope=\"col\">List</th><th scope=\"col\">Location</th><th scope=\"col\">Status</th><th scope=\"col\">Sort</th><th scope=\"col\">Generated</th></tr></thead><tbody>" + rows + "</tbody></table>"
+    ? _tableWrap("<table><thead><tr><th scope=\"col\">List</th><th scope=\"col\">Location</th><th scope=\"col\">Status</th><th scope=\"col\">Sort</th><th scope=\"col\">Generated</th></tr></thead><tbody>" + rows + "</tbody></table>")
     : "<p class=\"empty\">No pick lists yet. Generate one from the open orders at a location.</p>";
 
   var statusFilter = "<form method=\"get\" action=\"/admin/pick-lists\" class=\"form-inline\">" +
@@ -11490,7 +11817,7 @@ function renderAdminPickList(opts) {
     "</tr>";
   }).join("");
   var linesTable = (l.lines && l.lines.length)
-    ? "<table><thead><tr><th scope=\"col\">Aisle/bin</th><th scope=\"col\">SKU</th><th scope=\"col\">Order</th><th scope=\"col\" class=\"num\">Expected</th><th scope=\"col\">Picked</th><th scope=\"col\"></th></tr></thead><tbody>" + lineRows + "</tbody></table>"
+    ? _tableWrap("<table><thead><tr><th scope=\"col\">Aisle/bin</th><th scope=\"col\">SKU</th><th scope=\"col\">Order</th><th scope=\"col\" class=\"num\">Expected</th><th scope=\"col\">Picked</th><th scope=\"col\"></th></tr></thead><tbody>" + lineRows + "</tbody></table>")
     : "<p class=\"empty\">This worksheet has no lines.</p>";
 
   // Variance summary — short / over picks only (the discrepancies feed
@@ -11505,7 +11832,7 @@ function renderAdminPickList(opts) {
   }).join("");
   var variancePanel = discRows
     ? "<div class=\"panel mt\"><h3 class=\"subhead\">Variances</h3>" +
-        "<table><thead><tr><th scope=\"col\">SKU</th><th scope=\"col\" class=\"num\">Expected</th><th scope=\"col\" class=\"num\">Picked</th><th scope=\"col\" class=\"num\">Diff</th></tr></thead><tbody>" + discRows + "</tbody></table></div>"
+        _tableWrap("<table><thead><tr><th scope=\"col\">SKU</th><th scope=\"col\" class=\"num\">Expected</th><th scope=\"col\" class=\"num\">Picked</th><th scope=\"col\" class=\"num\">Diff</th></tr></thead><tbody>" + discRows + "</tbody></table>") + "</div>"
     : "";
 
   // Complete / cancel actions — only on a non-terminal worksheet.
@@ -11629,7 +11956,7 @@ function renderAdminCustomers(opts) {
   var notice = opts.notice ? "<div class=\"banner banner--warn\">" + _htmlEscape(opts.notice) + "</div>" : "";
 
   var table = customers.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Name</th><th scope=\"col\">ID</th><th scope=\"col\">Joined</th><th scope=\"col\">Sign-in method</th><th scope=\"col\" class=\"num\">Orders</th><th scope=\"col\"><span class=\"sr-only\">Manage</span></th></tr></thead><tbody>" + rows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Name</th><th scope=\"col\">ID</th><th scope=\"col\">Joined</th><th scope=\"col\">Sign-in method</th><th scope=\"col\" class=\"num\">Orders</th><th scope=\"col\"><span class=\"sr-only\">Manage</span></th></tr></thead><tbody>" + rows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No customers yet.</p>";
 
   // Cursor pager — a Next link when the page filled and more rows remain.
@@ -11680,7 +12007,7 @@ function renderAdminCustomerDetail(opts) {
   }).join("");
   var ordersPanel = "<div class=\"panel\"><h3 class=\"subhead\">Recent orders</h3>" +
     ((opts.recent_orders || []).length
-      ? "<table><thead><tr><th scope=\"col\">Order</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Total</th><th scope=\"col\">Placed</th></tr></thead><tbody>" + orderRows + "</tbody></table>"
+      ? _tableWrap("<table><thead><tr><th scope=\"col\">Order</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Total</th><th scope=\"col\">Placed</th></tr></thead><tbody>" + orderRows + "</tbody></table>")
       : "<p class=\"empty\">No orders yet.</p>") +
   "</div>";
 
@@ -11704,7 +12031,7 @@ function renderAdminCustomerDetail(opts) {
       "</tr>";
     }).join("");
     var histTable = (opts.store_credit_history || []).length
-      ? "<table><thead><tr><th scope=\"col\">Kind</th><th scope=\"col\" class=\"num\">Amount</th><th scope=\"col\" class=\"num\">Balance after</th><th scope=\"col\">Reason</th><th scope=\"col\">When</th></tr></thead><tbody>" + histRows + "</tbody></table>"
+      ? _tableWrap("<table><thead><tr><th scope=\"col\">Kind</th><th scope=\"col\" class=\"num\">Amount</th><th scope=\"col\" class=\"num\">Balance after</th><th scope=\"col\">Reason</th><th scope=\"col\">When</th></tr></thead><tbody>" + histRows + "</tbody></table>")
       : "<p class=\"empty\">No store-credit activity yet.</p>";
     creditPanel = "<div class=\"panel\"><h3 class=\"subhead\">Store credit</h3>" +
       creditNotice +
@@ -12004,7 +12331,7 @@ function renderAdminReturns(opts) {
   }).join("");
 
   var table = rmas.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">RMA</th><th scope=\"col\">Order</th><th scope=\"col\">Reason</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Items</th><th scope=\"col\" class=\"num\">Refund</th><th scope=\"col\">Requested</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">RMA</th><th scope=\"col\">Order</th><th scope=\"col\">Reason</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Items</th><th scope=\"col\" class=\"num\">Refund</th><th scope=\"col\">Requested</th></tr></thead><tbody>" + rows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No “" + _htmlEscape(active) + "” returns.</p>";
 
   var body = "<section><h2>Returns</h2>" + notice + chips + table + "</section>";
@@ -12024,7 +12351,7 @@ function renderAdminReturn(opts) {
       "<td>" + _htmlEscape(l.reason || "—") + "</td></tr>";
   }).join("");
   var linesTable = (r.lines && r.lines.length)
-    ? "<table><thead><tr><th scope=\"col\">SKU</th><th scope=\"col\" class=\"num\">Qty</th><th scope=\"col\">Reason</th></tr></thead><tbody>" + lineRows + "</tbody></table>"
+    ? _tableWrap("<table><thead><tr><th scope=\"col\">SKU</th><th scope=\"col\" class=\"num\">Qty</th><th scope=\"col\">Reason</th></tr></thead><tbody>" + lineRows + "</tbody></table>")
     : "<p class=\"empty\">No line items recorded.</p>";
 
   function _field(label, value) {
@@ -12166,7 +12493,7 @@ function renderAdminSupport(opts) {
   }).join("");
 
   var table = tickets.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Subject</th><th scope=\"col\">Category</th><th scope=\"col\">Status</th><th scope=\"col\">Priority</th><th scope=\"col\">Assignee</th><th scope=\"col\">Opened</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Subject</th><th scope=\"col\">Category</th><th scope=\"col\">Status</th><th scope=\"col\">Priority</th><th scope=\"col\">Assignee</th><th scope=\"col\">Opened</th></tr></thead><tbody>" + rows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No “" + _htmlEscape(active) + "” tickets.</p>";
 
   var body = "<section><h2>Support</h2>" + notice + chips + table + "</section>";
@@ -12324,7 +12651,7 @@ function renderAdminDsr(opts) {
   }).join("");
 
   var table = requests.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Customer</th><th scope=\"col\">Kind</th><th scope=\"col\">Jurisdiction</th><th scope=\"col\">Scope</th><th scope=\"col\">Status</th><th scope=\"col\">Requested</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Customer</th><th scope=\"col\">Kind</th><th scope=\"col\">Jurisdiction</th><th scope=\"col\">Scope</th><th scope=\"col\">Status</th><th scope=\"col\">Requested</th></tr></thead><tbody>" + rows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No “" + _htmlEscape(active) + "” privacy requests.</p>";
 
   var body = "<section><h2>Privacy requests</h2>" +
@@ -12407,7 +12734,7 @@ function renderAdminDsrDetail(opts) {
     previewHtml =
       "<div class=\"panel mt\"><h3 class=\"subhead\">Erasure preview (dry run — nothing was changed)</h3>" +
         (dRows
-          ? "<table><thead><tr><th scope=\"col\">Table</th><th scope=\"col\">Affected</th></tr></thead><tbody>" + dRows + "</tbody></table>"
+          ? _tableWrap("<table><thead><tr><th scope=\"col\">Table</th><th scope=\"col\">Affected</th></tr></thead><tbody>" + dRows + "</tbody></table>")
           : "<p class=\"empty\">No per-domain handlers wired.</p>") +
         (absent ? "<p class=\"meta\">Domains without a deletion handler: " + absent + "</p>" : "") +
         "<p class=\"meta\">Total affected: " + _htmlEscape(String(preview.total_affected)) + "</p>" +
@@ -12423,7 +12750,7 @@ function renderAdminDsrDetail(opts) {
       "</tr>";
   }).join("");
   var historyHtml = history.length
-    ? "<table><thead><tr><th scope=\"col\">Request</th><th scope=\"col\">Kind</th><th scope=\"col\">Status</th><th scope=\"col\">Requested</th></tr></thead><tbody>" + histRows + "</tbody></table>"
+    ? _tableWrap("<table><thead><tr><th scope=\"col\">Request</th><th scope=\"col\">Kind</th><th scope=\"col\">Status</th><th scope=\"col\">Requested</th></tr></thead><tbody>" + histRows + "</tbody></table>")
     : "<p class=\"empty\">No prior requests.</p>";
 
   var body =
@@ -12458,6 +12785,9 @@ function renderAdminDsrDetail(opts) {
 // lifecycle order (the terminal closed / rejected don't appear in the open
 // queue, so they're not filter chips).
 var EXCHANGE_STATUS_FILTERS = ["pending", "approved", "shipped", "delivered", "received"];
+// The pickup-queue status chips the operator can filter by (mirrors the
+// click-and-collect FSM statuses the pickupsForLocation read accepts).
+var PICKUP_QUEUE_STATUSES = ["scheduled", "ready", "picked_up", "no_show", "cancelled"];
 
 function _exchangePillClass(status) {
   if (status === "closed")   return "paid";       // completed — green
@@ -12494,7 +12824,7 @@ function renderAdminExchanges(opts) {
   }).join("");
 
   var table = list.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Exchange</th><th scope=\"col\">Order</th><th scope=\"col\">Swap</th><th scope=\"col\">Reason</th><th scope=\"col\">Status</th><th scope=\"col\">Requested</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Exchange</th><th scope=\"col\">Order</th><th scope=\"col\">Swap</th><th scope=\"col\">Reason</th><th scope=\"col\">Status</th><th scope=\"col\">Requested</th></tr></thead><tbody>" + rows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No “" + _htmlEscape(active) + "” exchanges.</p>";
 
   var body = "<section><h2>Exchanges</h2>" + notice + chips + table + "</section>";
@@ -12612,6 +12942,197 @@ function renderAdminExchange(opts) {
   return _renderAdminShell(opts.shop_name, "Exchange " + String(x.id).slice(0, 8), body, "exchanges", opts.nav_available);
 }
 
+// ---- click-and-collect render fns -----------------------------------
+
+// Pickup-locations CRUD screen: the active-location list (each with an
+// archive form) + a define/upsert form. Every operator free-text field —
+// name, address parts, hours — is HTML-escaped at the sink (the primitive
+// validates length/shape, NOT HTML, so escaping here is the XSS guard).
+function renderAdminPickupLocations(opts) {
+  opts = opts || {};
+  var list = opts.locations || [];
+  var saved  = opts.saved  ? "<div class=\"banner banner--ok\">Pickup location saved.</div>" : "";
+  var notice = opts.notice ? "<div class=\"banner banner--err\">" + _htmlEscape(opts.notice) + "</div>" : "";
+
+  var rows = list.map(function (l) {
+    var addr = l.address || {};
+    var addrLine = [addr.line1, addr.city, addr.country].filter(Boolean).map(String).join(", ");
+    return "<tr>" +
+      "<td><code class=\"order-id\">" + _htmlEscape(l.code) + "</code></td>" +
+      "<td>" + _htmlEscape(l.name) + "</td>" +
+      "<td>" + _htmlEscape(addrLine) + "</td>" +
+      "<td>" + _htmlEscape(String(l.capacity_per_hour)) + "/hr</td>" +
+      "<td>" + _htmlEscape(String(l.lead_time_hours)) + "h</td>" +
+      "<td>" +
+        "<form method=\"post\" action=\"/admin/pickup-locations/" + encodeURIComponent(l.code) + "/archive\" class=\"form-inline\">" +
+          "<button class=\"btn btn--ghost btn--sm\" type=\"submit\">Archive</button>" +
+        "</form>" +
+      "</td>" +
+      "</tr>";
+  }).join("");
+
+  var table = list.length
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Code</th><th scope=\"col\">Name</th><th scope=\"col\">Address</th><th scope=\"col\">Capacity</th><th scope=\"col\">Lead time</th><th scope=\"col\">Action</th></tr></thead><tbody>" + rows + "</tbody></table>") + "</div>"
+    : "<p class=\"empty\">No active pickup locations yet. Add one below.</p>";
+
+  var form =
+    "<div class=\"panel mt\"><h3 class=\"subhead\">Add / update a pickup location</h3>" +
+      "<form method=\"post\" action=\"/admin/pickup-locations\">" +
+        _setupField("Code", "code", "", "text", "Stable identifier (alnum + . _ -). Re-using a code updates that location.", " maxlength=\"64\" required") +
+        _setupField("Name", "name", "", "text", "Shown to customers at checkout.", " maxlength=\"200\" required") +
+        _setupField("Address line 1", "line1", "", "text", "", " maxlength=\"200\" required") +
+        _setupField("City", "city", "", "text", "", " maxlength=\"100\" required") +
+        _setupField("Country", "country", "", "text", "2-letter ISO code (e.g. US).", " maxlength=\"2\" class=\"input-code\" required") +
+        "<label class=\"form-field\"><span>Opening hours</span>" +
+          "<textarea name=\"hours\" rows=\"4\" placeholder=\"mon 09:00-17:00&#10;tue 09:00-17:00\"></textarea>" +
+          "<small>One line per day: <code>mon 09:00-17:00</code>. Optional.</small>" +
+        "</label>" +
+        _setupField("Capacity per hour", "capacity_per_hour", "", "number", "Max concurrent pickups in a one-hour window.", " min=\"1\" required") +
+        _setupField("Lead time (hours)", "lead_time_hours", "", "number", "Minimum gap before the earliest bookable slot. 0 allows same-hour.", " min=\"0\" required") +
+        "<div class=\"actions-row\"><button type=\"submit\" class=\"btn\">Save location</button></div>" +
+      "</form>" +
+    "</div>";
+
+  var body = "<section><h2>Pickup locations</h2>" + saved + notice + table + form + "</section>";
+  return _renderAdminShell(opts.shop_name, "Pickup locations", body, "pickup-locations", opts.nav_available);
+}
+
+// Pickup queue for one location: a location selector + status chips, the
+// scheduled/ready rows, and the FSM action forms (ready / picked-up /
+// no-show) legal from each row's status. The no_show reason is operator-
+// authored free text — escaped at the sink.
+function renderAdminPickups(opts) {
+  opts = opts || {};
+  var locs = opts.locations || [];
+  var list = opts.pickups || [];
+  var selected = opts.selected || null;
+  var status = opts.status || null;
+  var moved  = opts.moved  ? "<div class=\"banner banner--ok\">Pickup updated.</div>" : "";
+  var notice = opts.notice ? "<div class=\"banner banner--err\">" + _htmlEscape(opts.notice) + "</div>" : "";
+
+  var selector = "";
+  if (locs.length) {
+    var opts2 = locs.map(function (l) {
+      return "<option value=\"" + _htmlEscape(l.code) + "\"" + (l.code === selected ? " selected" : "") + ">" +
+        _htmlEscape(l.name) + " (" + _htmlEscape(l.code) + ")</option>";
+    }).join("");
+    selector =
+      "<form method=\"get\" action=\"/admin/pickups\" class=\"form-inline\">" +
+        "<label class=\"form-field\"><span>Location</span><select name=\"location\" onchange=\"this.form.submit()\">" + opts2 + "</select></label>" +
+        "<button class=\"btn btn--ghost btn--sm\" type=\"submit\">View</button>" +
+      "</form>";
+  }
+
+  var statusChip = function (s, label) {
+    var href = "/admin/pickups?location=" + encodeURIComponent(selected || "") + (s ? "&status=" + encodeURIComponent(s) : "");
+    var on = (s == null && status == null) || s === status;
+    return "<a class=\"chip" + (on ? " chip--on" : "") + "\" href=\"" + href + "\">" + _htmlEscape(label) + "</a>";
+  };
+  var chips = selected
+    ? "<div class=\"order-filters\">" + statusChip(null, "all") +
+        PICKUP_QUEUE_STATUSES.map(function (s) { return statusChip(s, s); }).join("") + "</div>"
+    : "";
+
+  function _pickupActions(p) {
+    var blocks = [];
+    if (p.status === "scheduled") {
+      blocks.push(
+        "<form method=\"post\" action=\"/admin/pickups/" + encodeURIComponent(p.order_id) + "/ready\" class=\"form-inline\">" +
+          "<button class=\"btn btn--sm\" type=\"submit\">Mark ready</button></form>");
+    }
+    if (p.status === "ready") {
+      blocks.push(
+        "<form method=\"post\" action=\"/admin/pickups/" + encodeURIComponent(p.order_id) + "/picked-up\" class=\"return-action\">" +
+          "<input type=\"hidden\" name=\"proof_kind\" value=\"store_credential\">" +
+          "<button class=\"btn btn--sm\" type=\"submit\">Mark picked up</button></form>");
+    }
+    if (p.status === "scheduled" || p.status === "ready") {
+      blocks.push(
+        "<form method=\"post\" action=\"/admin/pickups/" + encodeURIComponent(p.order_id) + "/no-show\" class=\"return-action\">" +
+          _setupField("No-show reason", "reason", "", "text", "Shown in the escalation queue.", " maxlength=\"280\" required") +
+          "<button class=\"btn btn--danger btn--sm\" type=\"submit\">No-show</button></form>");
+    }
+    return blocks.length ? blocks.join("") : "<span class=\"meta\">—</span>";
+  }
+
+  var rows = list.map(function (p) {
+    return "<tr>" +
+      "<td><a class=\"order-id\" href=\"/admin/orders/" + _htmlEscape(p.order_id) + "\">" + _htmlEscape(String(p.order_id).slice(0, 8)) + "</a></td>" +
+      "<td><span class=\"status-pill\">" + _htmlEscape(p.status) + "</span></td>" +
+      "<td>" + _htmlEscape(_fmtDate(p.scheduled_window_start)) + "</td>" +
+      "<td>" + (p.picked_up_at ? _htmlEscape(_fmtDate(p.picked_up_at)) : "<span class=\"meta\">—</span>") + "</td>" +
+      "<td>" + _pickupActions(p) + "</td>" +
+      "</tr>";
+  }).join("");
+
+  var table = !selected
+    ? "<p class=\"empty\">Add a pickup location first.</p>"
+    : (list.length
+      ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Order</th><th scope=\"col\">Status</th><th scope=\"col\">Window</th><th scope=\"col\">Picked up</th><th scope=\"col\">Action</th></tr></thead><tbody>" + rows + "</tbody></table>") + "</div>"
+      : "<p class=\"empty\">No pickups in this window for this location.</p>");
+
+  var body = "<section><h2>Pickups</h2>" + moved + notice + selector + chips + table + "</section>";
+  return _renderAdminShell(opts.shop_name, "Pickups", body, "pickups", opts.nav_available);
+}
+
+// ---- gift-wraps render fn -------------------------------------------
+
+// Gift-wrap catalog screen: the list (incl. archived) with an inline update
+// form + archive action per row, and a define form. The wrap title is
+// operator free text — escaped at the sink (the primitive bounds length +
+// refuses control/zero-width bytes, but not HTML). image_url is escaped as
+// an attribute value.
+function renderAdminGiftWraps(opts) {
+  opts = opts || {};
+  var list = opts.wraps || [];
+  var saved  = opts.saved  ? "<div class=\"banner banner--ok\">Gift wrap saved.</div>" : "";
+  var notice = opts.notice ? "<div class=\"banner banner--err\">" + _htmlEscape(opts.notice) + "</div>" : "";
+
+  var rows = list.map(function (w) {
+    var stateLabel = w.archived_at ? "archived" : (w.active ? "active" : "inactive");
+    var img = w.image_url
+      ? "<img src=\"" + _htmlEscape(String(w.image_url)) + "\" alt=\"\" width=\"32\" height=\"32\" style=\"object-fit:cover\">"
+      : "<span class=\"meta\">—</span>";
+    var updateForm =
+      "<form method=\"post\" action=\"/admin/gift-wraps/" + encodeURIComponent(w.wrap_sku) + "/update\" class=\"form-inline\">" +
+        "<input type=\"text\" name=\"title\" value=\"" + _htmlEscape(w.title) + "\" maxlength=\"200\" aria-label=\"Title\">" +
+        "<input type=\"number\" name=\"fee_minor\" value=\"" + _htmlEscape(String(w.fee_minor)) + "\" min=\"0\" aria-label=\"Fee (minor units)\">" +
+        "<button class=\"btn btn--sm\" type=\"submit\">Update</button>" +
+      "</form>";
+    var archiveForm = w.archived_at ? "" :
+      "<form method=\"post\" action=\"/admin/gift-wraps/" + encodeURIComponent(w.wrap_sku) + "/archive\" class=\"form-inline\">" +
+        "<button class=\"btn btn--ghost btn--sm\" type=\"submit\">Archive</button>" +
+      "</form>";
+    return "<tr>" +
+      "<td><code class=\"order-id\">" + _htmlEscape(w.wrap_sku) + "</code></td>" +
+      "<td>" + img + "</td>" +
+      "<td>" + _htmlEscape(w.title) + "</td>" +
+      "<td>" + _htmlEscape(String(w.fee_minor)) + "</td>" +
+      "<td><span class=\"status-pill\">" + _htmlEscape(stateLabel) + "</span></td>" +
+      "<td>" + updateForm + archiveForm + "</td>" +
+      "</tr>";
+  }).join("");
+
+  var table = list.length
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">SKU</th><th scope=\"col\">Image</th><th scope=\"col\">Title</th><th scope=\"col\">Fee</th><th scope=\"col\">State</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + rows + "</tbody></table>") + "</div>"
+    : "<p class=\"empty\">No gift wraps yet. Define one below — the SKU must be a real catalog variant.</p>";
+
+  var form =
+    "<div class=\"panel mt\"><h3 class=\"subhead\">Define a gift wrap</h3>" +
+      "<form method=\"post\" action=\"/admin/gift-wraps\">" +
+        _setupField("Wrap SKU", "wrap_sku", "", "text", "Must be a real catalog variant SKU — the fee flows through inventory + pricing.", " maxlength=\"128\" required") +
+        _setupField("Title", "title", "", "text", "Shown to customers at checkout.", " maxlength=\"200\" required") +
+        _setupField("Fee (minor units)", "fee_minor", "", "number", "Set this equal to the variant's catalog price; the fee is charged as a real cart line.", " min=\"0\" required") +
+        _setupField("Image URL", "image_url", "", "text", "Optional. https:// or /absolute path.", " maxlength=\"2048\"") +
+        _setupField("Max per order", "max_per_order", "", "number", "Optional cap on wraps per order.", " min=\"1\"") +
+        "<div class=\"actions-row\"><button type=\"submit\" class=\"btn\">Save wrap</button></div>" +
+      "</form>" +
+    "</div>";
+
+  var body = "<section><h2>Gift wraps</h2>" + saved + notice + table + form + "</section>";
+  return _renderAdminShell(opts.shop_name, "Gift wraps", body, "gift-wraps", opts.nav_available);
+}
+
 // One rating card for the moderation queue / recent list. Shows the three
 // scores, the (escaped) comment, the flag state + reason, and the operator
 // reply — plus the flag / reply action forms.
@@ -12932,7 +13453,7 @@ function renderAdminInventory(opts) {
   }).join("");
 
   var table = rows.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">SKU</th><th scope=\"col\" class=\"num\">On hand</th><th scope=\"col\" class=\"num\">Held</th><th scope=\"col\" class=\"num\">Available</th><th scope=\"col\">Restock / threshold</th></tr></thead><tbody>" + body + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">SKU</th><th scope=\"col\" class=\"num\">On hand</th><th scope=\"col\" class=\"num\">Held</th><th scope=\"col\" class=\"num\">Available</th><th scope=\"col\">Restock / threshold</th></tr></thead><tbody>" + body + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No inventory rows" + (opts.low ? " below threshold" : " yet") + ".</p>";
 
   var createForm =
@@ -13039,7 +13560,7 @@ function renderAdminSubscriptionPlans(opts) {
   }).join("");
 
   var table = rows.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Price / interval</th><th scope=\"col\">Stripe price</th><th scope=\"col\">Variant</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Price / interval</th><th scope=\"col\">Stripe price</th><th scope=\"col\">Variant</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No subscription plans" + (af === "0" ? " archived" : af === "1" ? " active" : " yet") + ".</p>";
 
   var intervalOpts = ["month", "year", "week", "day"].map(function (iv) {
@@ -13140,7 +13661,7 @@ function renderAdminTaxRates(opts) {
       "</tr>";
     }).join("");
     table = rows.length
-      ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Category</th><th scope=\"col\" class=\"num\">Rate</th><th scope=\"col\">From</th><th scope=\"col\">Until</th><th scope=\"col\">Source</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+      ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Category</th><th scope=\"col\" class=\"num\">Rate</th><th scope=\"col\">From</th><th scope=\"col\">Until</th><th scope=\"col\">Source</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table>") + "</div>"
       : "<p class=\"empty\">No rates for " + _htmlEscape(jurisdiction) + " yet.</p>";
   }
 
@@ -13223,7 +13744,7 @@ function renderAdminTaxFilings(opts) {
   }).join("");
   var dueBlock = upcoming.length
     ? "<section><h2>Due soon or overdue</h2><div class=\"panel\">" +
-        "<table><thead><tr><th scope=\"col\">Jurisdiction</th><th scope=\"col\">Period</th><th scope=\"col\">Status</th><th scope=\"col\">Due</th></tr></thead><tbody>" + dueRows + "</tbody></table>" +
+        _tableWrap("<table><thead><tr><th scope=\"col\">Jurisdiction</th><th scope=\"col\">Period</th><th scope=\"col\">Status</th><th scope=\"col\">Due</th></tr></thead><tbody>" + dueRows + "</tbody></table>") +
       "</div></section>"
     : "";
 
@@ -13240,7 +13761,7 @@ function renderAdminTaxFilings(opts) {
       "</tr>";
   }).join("");
   var table = filings.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Jurisdiction</th><th scope=\"col\">Kind</th><th scope=\"col\">Period</th><th scope=\"col\">Due</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Collected</th><th scope=\"col\" class=\"num\">Owed</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Jurisdiction</th><th scope=\"col\">Kind</th><th scope=\"col\">Period</th><th scope=\"col\">Due</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Collected</th><th scope=\"col\" class=\"num\">Owed</th></tr></thead><tbody>" + rows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No filings" + (jurisdiction ? " for " + _htmlEscape(jurisdiction) : "") + " yet. Open a period below.</p>";
 
   // Open-a-period form.
@@ -13330,7 +13851,7 @@ function renderAdminTaxFiling(opts) {
       "</tr>";
   }).join("");
   var breakdownBlock = bkeys.length
-    ? "<section><h2>By rate</h2><div class=\"panel\"><table><thead><tr><th scope=\"col\">Rate</th><th scope=\"col\" class=\"num\">Orders</th><th scope=\"col\" class=\"num\">Taxable</th><th scope=\"col\" class=\"num\">Tax</th></tr></thead><tbody>" + breakdownRows + "</tbody></table></div></section>"
+    ? "<section><h2>By rate</h2><div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Rate</th><th scope=\"col\" class=\"num\">Orders</th><th scope=\"col\" class=\"num\">Taxable</th><th scope=\"col\" class=\"num\">Tax</th></tr></thead><tbody>" + breakdownRows + "</tbody></table>") + "</div></section>"
     : "";
 
   // Audit trail — submission + payment + amendment columns once recorded.
@@ -13351,7 +13872,7 @@ function renderAdminTaxFiling(opts) {
       trailRows += "<tr><td>Amended</td><td>" + _htmlEscape(f.amended_reason) +
         (f.amended_at != null ? " <span class=\"meta\">" + _htmlEscape(_fmtDate(f.amended_at)) + "</span>" : "") + "</td></tr>";
     }
-    trail = "<section><h2>Audit trail</h2><div class=\"panel\"><table><tbody>" + trailRows + "</tbody></table></div></section>";
+    trail = "<section><h2>Audit trail</h2><div class=\"panel\">" + _tableWrap("<table><tbody>" + trailRows + "</tbody></table>") + "</div></section>";
   }
 
   // Lifecycle actions — gated on the FSM. draft → compute; computed →
@@ -13426,7 +13947,7 @@ function renderAdminTaxFilingReport(opts) {
       "</tr>";
   }).join("");
   var table = (report.filings || []).length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Period</th><th scope=\"col\">Window</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Collected</th><th scope=\"col\" class=\"num\">Owed</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Period</th><th scope=\"col\">Window</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Collected</th><th scope=\"col\" class=\"num\">Owed</th></tr></thead><tbody>" + rows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No filings intersect this window.</p>";
 
   var body =
@@ -13470,7 +13991,7 @@ function renderAdminShipping(opts) {
   }).join("");
 
   var table = rows.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Title</th><th scope=\"col\">Slug</th><th scope=\"col\">Regions</th><th scope=\"col\" class=\"num\">Rates</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Title</th><th scope=\"col\">Slug</th><th scope=\"col\">Regions</th><th scope=\"col\" class=\"num\">Rates</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No shipping zones yet.</p>";
 
   var createForm =
@@ -13520,7 +14041,7 @@ function renderAdminShippingZone(opts) {
     "</tr>";
   }).join("");
   var rateTable = (z.rates || []).length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Service</th><th scope=\"col\" class=\"num\">Rate</th><th scope=\"col\">Bucket</th></tr></thead><tbody>" + rateRows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Service</th><th scope=\"col\" class=\"num\">Rate</th><th scope=\"col\">Bucket</th></tr></thead><tbody>" + rateRows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No rate rows.</p>";
 
   var head = "<p class=\"meta\"><a href=\"/admin/shipping\">&larr; Shipping</a> · <code class=\"order-id\">" + _htmlEscape(z.slug) + "</code> · " +
@@ -13682,7 +14203,7 @@ function renderAdminDiscounts(opts) {
     "</tr>";
   }).join("");
   var ruleTable = rules.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Rule</th><th scope=\"col\">Trigger</th><th scope=\"col\">Value</th><th scope=\"col\" class=\"num\">Priority</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + ruleRows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Rule</th><th scope=\"col\">Trigger</th><th scope=\"col\">Value</th><th scope=\"col\" class=\"num\">Priority</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + ruleRows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No automatic discount rules yet.</p>";
 
   var TRIGGERS = [
@@ -13745,7 +14266,7 @@ function renderAdminDiscounts(opts) {
       "</tr>";
     }).join("");
     var polTable = policies.length
-      ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Policy</th><th scope=\"col\" class=\"num\">Max codes</th><th scope=\"col\">Combines with</th><th scope=\"col\" class=\"num\">Order min</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + polRows + "</tbody></table></div>"
+      ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Policy</th><th scope=\"col\" class=\"num\">Max codes</th><th scope=\"col\">Combines with</th><th scope=\"col\" class=\"num\">Order min</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + polRows + "</tbody></table>") + "</div>"
       : "<p class=\"empty\">No stacking policies yet — without one, only one code applies per order.</p>";
     var polForm =
       "<div class=\"panel mt mw-40\">" +
@@ -13851,7 +14372,7 @@ function renderAdminSegments(opts) {
   }).join("");
 
   var table = segments.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Segment</th><th scope=\"col\">Rules</th><th scope=\"col\" class=\"num\">Members</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Segment</th><th scope=\"col\">Rules</th><th scope=\"col\" class=\"num\">Members</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + rows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No " + (filter === "archived" ? "archived " : (filter === "all" ? "" : "active ")) + "segments yet. Define one to start grouping customers for campaigns.</p>";
 
   var body = "<section><h2>Customer segments</h2>" + created + updated + archived + unarchived + recomputed + notice +
@@ -13993,7 +14514,7 @@ function renderAdminGiftCards(opts) {
   }).join("");
 
   var table = rows.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Code</th><th scope=\"col\" class=\"num\">Issued</th><th scope=\"col\" class=\"num\">Remaining</th><th scope=\"col\">Status</th><th scope=\"col\">Issued on</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Code</th><th scope=\"col\" class=\"num\">Issued</th><th scope=\"col\" class=\"num\">Remaining</th><th scope=\"col\">Status</th><th scope=\"col\">Issued on</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No gift cards" + (sf ? " " + _htmlEscape(sf) : " yet") + ".</p>";
 
   // The issue form composes the giftcards primitive's issue() — the
@@ -14060,7 +14581,7 @@ function renderAdminGiftCard(opts) {
     "</tr>";
   }).join("");
   var ledgerTable = ledger.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Type</th><th scope=\"col\" class=\"num\">Amount</th><th scope=\"col\" class=\"num\">Balance after</th><th scope=\"col\">Detail</th><th scope=\"col\">When</th></tr></thead><tbody>" + ledgerRows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Type</th><th scope=\"col\" class=\"num\">Amount</th><th scope=\"col\" class=\"num\">Balance after</th><th scope=\"col\">Detail</th><th scope=\"col\">When</th></tr></thead><tbody>" + ledgerRows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No ledger transactions recorded for this card yet.</p>";
 
   // Void is offered only while the card is active — a redeemed card has
@@ -14102,7 +14623,7 @@ function renderAdminWebhooks(opts) {
   }).join("");
 
   var table = rows.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">URL</th><th scope=\"col\">Events</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Rate</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">URL</th><th scope=\"col\">Events</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Rate</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No webhook endpoints yet.</p>";
 
   var eventChecks = known.map(function (ev) {
@@ -14179,7 +14700,7 @@ function renderAdminWebhookDeliveries(opts) {
   }).join("");
 
   var table = rows.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Event</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Code</th><th scope=\"col\" class=\"num\">Attempts</th><th scope=\"col\">Last error</th><th scope=\"col\">Created</th><th scope=\"col\"></th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Event</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Code</th><th scope=\"col\" class=\"num\">Attempts</th><th scope=\"col\">Last error</th><th scope=\"col\">Created</th><th scope=\"col\"></th></tr></thead><tbody>" + bodyRows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No deliveries recorded for this endpoint yet.</p>";
 
   var head = "<p class=\"meta\">Endpoint <code class=\"order-id\">" + _htmlEscape(e.url) + "</code></p>";
@@ -14223,7 +14744,7 @@ function renderAdminCollections(opts) {
   }).join("");
 
   var table = rows.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Title</th><th scope=\"col\">Slug</th><th scope=\"col\">Type</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Products</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Title</th><th scope=\"col\">Slug</th><th scope=\"col\">Type</th><th scope=\"col\">Status</th><th scope=\"col\" class=\"num\">Products</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No collections" + (af === "0" ? " archived" : af === "1" ? " active" : " yet") + ".</p>";
 
   // The create form toggles between a manual and a smart shape. Manual
@@ -14302,7 +14823,7 @@ function renderAdminDiscountAllocation(opts) {
         "</tr>";
       }).join("");
       var lineTable = breakdown.length
-        ? "<table><thead><tr><th scope=\"col\">Line</th><th scope=\"col\" class=\"num\">Allocated (minor)</th><th scope=\"col\" class=\"num\">Remaining (minor)</th></tr></thead><tbody>" + lineRows + "</tbody></table>"
+        ? _tableWrap("<table><thead><tr><th scope=\"col\">Line</th><th scope=\"col\" class=\"num\">Allocated (minor)</th><th scope=\"col\" class=\"num\">Remaining (minor)</th></tr></thead><tbody>" + lineRows + "</tbody></table>")
         : "<p class=\"empty\">This allocation has no recorded lines.</p>";
       return "<div class=\"panel mt\">" +
         "<h3 class=\"subhead\">" + _htmlEscape(a.source || "—") + "</h3>" +
@@ -14614,7 +15135,7 @@ function renderAdminAnnouncements(opts) {
   }).join("");
 
   var table = rows.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Slug</th><th scope=\"col\">Message</th><th scope=\"col\">Theme</th><th scope=\"col\">Audience</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Slug</th><th scope=\"col\">Message</th><th scope=\"col\">Theme</th><th scope=\"col\">Audience</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No announcements" + (af === "1" ? " active right now" : " yet") + ".</p>";
 
   var themeOpts = ["urgency", "promo", "info", "success"].map(function (t) {
@@ -14688,7 +15209,7 @@ function renderAdminSearchRanking(opts) {
     "</tr>";
   }).join("");
   var table = weights.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Slug</th><th scope=\"col\">Name</th><th scope=\"col\">Weights</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Slug</th><th scope=\"col\">Name</th><th scope=\"col\">Weights</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + rows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No weight sets yet. Create one below and make it active to rerank storefront search.</p>";
 
   var createForm =
@@ -14723,7 +15244,7 @@ function renderAdminSearchRanking(opts) {
     "</form>";
   var pinTable = pinsQuery
     ? (pins.length
-        ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Product id</th><th scope=\"col\">Position</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + pinRows + "</tbody></table></div>"
+        ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Product id</th><th scope=\"col\">Position</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + pinRows + "</tbody></table>") + "</div>"
         : "<p class=\"empty\">No pins for &ldquo;" + _htmlEscape(pinsQuery) + "&rdquo; yet.</p>")
     : "";
   var pinCreateForm = pinsQuery
@@ -14798,7 +15319,7 @@ function renderAdminTrustBadges(opts) {
     "</tr>";
   }).join("");
   var table = badges.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Slug</th><th scope=\"col\">Title</th><th scope=\"col\">Kind</th><th scope=\"col\">Placements</th><th scope=\"col\">Priority</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + rows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Slug</th><th scope=\"col\">Title</th><th scope=\"col\">Kind</th><th scope=\"col\">Placements</th><th scope=\"col\">Priority</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + rows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No trust badges yet. Create one below.</p>";
 
   var placementChecks = trustBadgesModule.ALLOWED_PLACEMENTS.map(function (pl) {
@@ -14938,11 +15459,11 @@ function renderAdminPreorders(opts) {
   }).join("");
 
   var table = rows.length
-    ? "<div class=\"panel\"><table><thead><tr>" +
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr>" +
         "<th scope=\"col\">Slug</th><th scope=\"col\">SKU</th><th scope=\"col\">Ships</th>" +
         "<th scope=\"col\">Price</th><th scope=\"col\">Reserved / cap</th><th scope=\"col\">Remaining</th>" +
         "<th scope=\"col\">Status</th><th scope=\"col\">Actions</th>" +
-      "</tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+      "</tr></thead><tbody>" + bodyRows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No pre-order campaigns yet.</p>";
 
   var createForm =
@@ -15111,7 +15632,7 @@ function renderAdminHelp(opts) {
   }).join("");
 
   var table = rows.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Title</th><th scope=\"col\">Slug</th><th scope=\"col\">Category</th><th scope=\"col\">Status</th><th scope=\"col\">Views</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Title</th><th scope=\"col\">Slug</th><th scope=\"col\">Category</th><th scope=\"col\">Status</th><th scope=\"col\">Views</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No articles" + (sf ? " " + _htmlEscape(sf) : " yet") + ". Write your first one.</p>";
 
   var newBtn = "<div class=\"actions-row\"><a class=\"btn\" href=\"/admin/help/new\">New article</a></div>";
@@ -15263,7 +15784,7 @@ function renderAdminBlog(opts) {
   }).join("");
 
   var table = rows.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Title</th><th scope=\"col\">Slug</th><th scope=\"col\">Status</th><th scope=\"col\">Published</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Title</th><th scope=\"col\">Slug</th><th scope=\"col\">Status</th><th scope=\"col\">Published</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No posts" + (sf ? " " + _htmlEscape(sf) : " yet") + ". Write your first one.</p>";
 
   var newBtn = "<div class=\"actions-row\"><a class=\"btn\" href=\"/admin/blog/new\">New post</a></div>";
@@ -15464,7 +15985,7 @@ function renderAdminPages(opts) {
   }).join("");
 
   var table = rows.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Title</th><th scope=\"col\">Slug</th><th scope=\"col\">Status</th><th scope=\"col\">Published</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Title</th><th scope=\"col\">Slug</th><th scope=\"col\">Status</th><th scope=\"col\">Published</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No pages" + (sf ? " " + _htmlEscape(sf) : " yet") + ". Write your first one.</p>";
 
   var newBtn = "<div class=\"actions-row\"><a class=\"btn\" href=\"/admin/pages/new\">New page</a></div>";
@@ -15618,7 +16139,7 @@ function renderAdminSurveys(opts) {
   }).join("");
 
   var table = rows.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Title</th><th scope=\"col\">Slug</th><th scope=\"col\">Kind</th><th scope=\"col\">Trigger</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Title</th><th scope=\"col\">Slug</th><th scope=\"col\">Kind</th><th scope=\"col\">Trigger</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No surveys" + (af === "1" ? " active" : " yet") + ".</p>";
 
   var kindOpts = [["nps", "NPS — recommend score"], ["csat", "CSAT — satisfaction"], ["ces", "CES — ease of effort"], ["custom", "Custom — open feedback"]]
@@ -15681,7 +16202,7 @@ function renderAdminSurveyDetail(opts) {
   var rollupPanel =
     "<div class=\"panel\">" +
       "<p class=\"meta\">" + _htmlEscape(String(roll.response_count)) + " response(s)." + (headline ? " " + headline : "") + "</p>" +
-      (qRows ? "<table><thead><tr><th scope=\"col\">Question</th><th scope=\"col\">Kind</th><th scope=\"col\">Result</th></tr></thead><tbody>" + qRows + "</tbody></table>" : "") +
+      (qRows ? _tableWrap("<table><thead><tr><th scope=\"col\">Question</th><th scope=\"col\">Kind</th><th scope=\"col\">Result</th></tr></thead><tbody>" + qRows + "</tbody></table>") : "") +
     "</div>";
 
   var enc = _htmlEscape(encodeURIComponent(survey.slug));
@@ -15747,7 +16268,7 @@ function renderAdminHours(opts) {
   }).join("");
 
   var table = rows.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Schedule</th><th scope=\"col\">Timezone</th><th scope=\"col\" class=\"num\">Days</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Schedule</th><th scope=\"col\">Timezone</th><th scope=\"col\" class=\"num\">Days</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No schedules yet.</p>";
 
   var dayFields = DOW.map(function (label, d) {
@@ -15847,7 +16368,7 @@ function renderAdminCollection(opts) {
       "</tr>";
     }).join("");
     var memberTable = members.length
-      ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\" class=\"num\">#</th><th scope=\"col\">Product id</th><th scope=\"col\"></th></tr></thead><tbody>" + memberRows + "</tbody></table></div>"
+      ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\" class=\"num\">#</th><th scope=\"col\">Product id</th><th scope=\"col\"></th></tr></thead><tbody>" + memberRows + "</tbody></table>") + "</div>"
       : "<p class=\"empty\">No members yet — add a product below.</p>";
 
     // Reorder: a single field of the current ids, comma-joined, that the
@@ -15887,7 +16408,7 @@ function renderAdminCollection(opts) {
       "</tr>";
     }).join("");
     var previewTable = preview.length
-      ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Title</th><th scope=\"col\">Slug</th><th scope=\"col\">Status</th></tr></thead><tbody>" + previewCards + "</tbody></table></div>"
+      ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Title</th><th scope=\"col\">Slug</th><th scope=\"col\">Status</th></tr></thead><tbody>" + previewCards + "</tbody></table>") + "</div>"
       : "<p class=\"empty\">No products match these rules yet.</p>";
     detailBody = "<section class=\"mt\"><h3 class=\"fs-105\">Matched products (live preview)</h3>" +
       "<p class=\"meta\">The first " + _htmlEscape(String(preview.length)) + " products the rules match right now.</p>" +
@@ -15979,7 +16500,7 @@ function renderAdminQuantityDiscounts(opts) {
   }).join("");
 
   var table = rows.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Scope</th><th scope=\"col\">Scope id</th><th scope=\"col\" class=\"num\">Tiers</th><th scope=\"col\">Stacking</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Scope</th><th scope=\"col\">Scope id</th><th scope=\"col\" class=\"num\">Tiers</th><th scope=\"col\">Stacking</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No quantity breaks" + (af === "1" ? " archived" : af === "0" ? " active" : " yet") + ".</p>";
 
   var scopeOpts = scopes.map(function (sc) {
@@ -16070,7 +16591,7 @@ function renderAdminQuantityDiscount(opts) {
     "</tr>";
   }).join("");
   var previewTable = previewRows
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\" class=\"num\">Min qty</th><th scope=\"col\">Kind</th><th scope=\"col\" class=\"num\">Value</th><th scope=\"col\" class=\"num\">Unit @ min</th><th scope=\"col\" class=\"num\">Line saved</th><th scope=\"col\" class=\"num\">Line total</th></tr></thead><tbody>" + previewRows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\" class=\"num\">Min qty</th><th scope=\"col\">Kind</th><th scope=\"col\" class=\"num\">Value</th><th scope=\"col\" class=\"num\">Unit @ min</th><th scope=\"col\" class=\"num\">Line saved</th><th scope=\"col\" class=\"num\">Line total</th></tr></thead><tbody>" + previewRows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No active rules to preview for this scope.</p>";
   var previewForm =
     "<form method=\"get\" action=\"/admin/quantity-discounts/" + _htmlEscape(enc) + "\" class=\"actions-row m-04\">" +
@@ -16153,8 +16674,8 @@ function renderAdminLoyalty(opts) {
       "<p class=\"meta\">Lifetime points (never decremented) place a customer in a tier. " +
         "Earning $1 grants " + _htmlEscape(String(opts.points_per_usd)) + " points; " +
         _htmlEscape(String(opts.redemption_points_per_usd)) + " points redeem for $1 of value.</p>" +
-      "<table><thead><tr><th scope=\"col\">Tier</th><th scope=\"col\" class=\"num\">Lifetime points to reach</th></tr></thead>" +
-      "<tbody>" + tierRows + "</tbody></table></div>";
+      _tableWrap("<table><thead><tr><th scope=\"col\">Tier</th><th scope=\"col\" class=\"num\">Lifetime points to reach</th></tr></thead>" +
+      "<tbody>" + tierRows + "</tbody></table>") + "</div>";
 
   // Earn-rule summary.
   var earnSummary;
@@ -16175,7 +16696,7 @@ function renderAdminLoyalty(opts) {
     earnSummary = "<div class=\"panel\"><div class=\"actions-row\"><h3 class=\"subhead\">Earn rules</h3>" +
       "<a class=\"btn btn--ghost\" href=\"/admin/loyalty/earn-rules\">Manage earn rules</a></div>" +
       (earnRules.length
-        ? "<table><thead><tr><th scope=\"col\">Slug</th><th scope=\"col\">Trigger</th><th scope=\"col\" class=\"num\">Points/unit</th><th scope=\"col\">Status</th></tr></thead><tbody>" + earnRows + "</tbody></table>"
+        ? _tableWrap("<table><thead><tr><th scope=\"col\">Slug</th><th scope=\"col\">Trigger</th><th scope=\"col\" class=\"num\">Points/unit</th><th scope=\"col\">Status</th></tr></thead><tbody>" + earnRows + "</tbody></table>")
         : "<p class=\"empty\">No earn rules yet. Customers only earn points from active rules.</p>") +
       "</div>";
   }
@@ -16199,7 +16720,7 @@ function renderAdminLoyalty(opts) {
     rewardSummary = "<div class=\"panel\"><div class=\"actions-row\"><h3 class=\"subhead\">Rewards catalog</h3>" +
       "<a class=\"btn btn--ghost\" href=\"/admin/loyalty/rewards\">Manage rewards</a></div>" +
       (rewards.length
-        ? "<table><thead><tr><th scope=\"col\">Slug</th><th scope=\"col\">Title</th><th scope=\"col\" class=\"num\">Point cost</th><th scope=\"col\">Status</th></tr></thead><tbody>" + rewardRows + "</tbody></table>"
+        ? _tableWrap("<table><thead><tr><th scope=\"col\">Slug</th><th scope=\"col\">Title</th><th scope=\"col\" class=\"num\">Point cost</th><th scope=\"col\">Status</th></tr></thead><tbody>" + rewardRows + "</tbody></table>")
         : "<p class=\"empty\">No rewards yet. Customers only see active rewards in their catalog.</p>") +
       "</div>";
   }
@@ -16267,7 +16788,7 @@ function renderAdminLoyaltyEarnRules(opts) {
     "</tr>";
   }).join("");
   var table = rules.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Slug</th><th scope=\"col\">Trigger</th><th scope=\"col\" class=\"num\">Points/unit</th><th scope=\"col\" class=\"num\">Max/event</th><th scope=\"col\">Statuses</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Slug</th><th scope=\"col\">Trigger</th><th scope=\"col\" class=\"num\">Points/unit</th><th scope=\"col\" class=\"num\">Max/event</th><th scope=\"col\">Statuses</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No earn rules yet.</p>";
 
   var triggerOpts = triggers.map(function (t) {
@@ -16370,7 +16891,7 @@ function renderAdminLoyaltyRewards(opts) {
     "</tr>";
   }).join("");
   var table = rewards.length
-    ? "<div class=\"panel\"><table><thead><tr><th scope=\"col\">Slug</th><th scope=\"col\">Title</th><th scope=\"col\">Kind</th><th scope=\"col\">Value</th><th scope=\"col\" class=\"num\">Point cost</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table></div>"
+    ? "<div class=\"panel\">" + _tableWrap("<table><thead><tr><th scope=\"col\">Slug</th><th scope=\"col\">Title</th><th scope=\"col\">Kind</th><th scope=\"col\">Value</th><th scope=\"col\" class=\"num\">Point cost</th><th scope=\"col\">Status</th><th scope=\"col\">Actions</th></tr></thead><tbody>" + bodyRows + "</tbody></table>") + "</div>"
     : "<p class=\"empty\">No rewards yet.</p>";
 
   var kindOpts = kinds.map(function (k) {
@@ -16528,7 +17049,7 @@ function renderAdminProduct(opts) {
         "</tr>";
       }).join("");
       var histTable = (pc.history && pc.history.length)
-        ? "<table><thead><tr><th scope=\"col\" class=\"num\">Amount</th><th scope=\"col\">From</th><th scope=\"col\">Until</th></tr></thead><tbody>" + histRows + "</tbody></table>"
+        ? _tableWrap("<table><thead><tr><th scope=\"col\" class=\"num\">Amount</th><th scope=\"col\">From</th><th scope=\"col\">Until</th></tr></thead><tbody>" + histRows + "</tbody></table>")
         : "";
       return "<div class=\"m-04\">" +
         "<span class=\"u-mute\">" + _htmlEscape(pc.currency) + "</span> · " + current +
@@ -16747,4 +17268,7 @@ module.exports = {
   renderAdminLoyaltyReward:     renderAdminLoyaltyReward,
   renderAdminConfirm:      renderAdminConfirm,
   renderAdminAudit:        renderAdminAudit,
+  renderAdminPickupLocations: renderAdminPickupLocations,
+  renderAdminPickups:      renderAdminPickups,
+  renderAdminGiftWraps:    renderAdminGiftWraps,
 };