@gelabs/ovr 0.4.2 → 0.4.4

package/dist/accounts.d.ts

@@ -0,0 +1,52 @@
+import * as React from 'react';
+import { UserAccount, Officer, RoleDef } from './types.js';
+
+/**
+ * Account management UI (GE-013). Super admins create & manage who can sign in to
+ * the enforcer portal; each account's role decides what it can see/do. The server
+ * actions (create / activate / reset password) are INJECTED by the page so this
+ * component stays free of any app-specific data wiring — mirrors IssuanceForm.
+ *
+ * Online-only: account management needs the server (argon2 + DB). After a mutation
+ * we refresh the route so the server-rendered list reflects the change.
+ */
+
+/** What the create form submits — the page hashes the password server-side. */
+interface CreateAccountInput {
+    username: string;
+    password: string;
+    role: string;
+    officerId: string | null;
+}
+type CreateAccountAction = (input: CreateAccountInput) => Promise<{
+    error?: string;
+} | void>;
+type SetAccountActiveAction = (id: string, active: boolean) => Promise<{
+    error?: string;
+} | void>;
+type ResetAccountPasswordAction = (id: string, password: string) => Promise<{
+    error?: string;
+} | void>;
+interface EditAccountInput {
+    username?: string;
+    role?: string;
+    officerId?: string | null;
+}
+type EditAccountAction = (id: string, patch: EditAccountInput) => Promise<{
+    error?: string;
+} | void>;
+interface AccountsManagerProps {
+    users: UserAccount[];
+    officers: Officer[];
+    /** Roles assignable to accounts (system + custom). */
+    roles: RoleDef[];
+    /** The signed-in user's id — so they can't deactivate their own account. */
+    currentUserId?: string;
+    createAction: CreateAccountAction;
+    editAction: EditAccountAction;
+    setActiveAction: SetAccountActiveAction;
+    resetPasswordAction: ResetAccountPasswordAction;
+}
+declare function AccountsManager({ users, officers, roles, currentUserId, createAction, editAction, setActiveAction, resetPasswordAction, }: AccountsManagerProps): React.JSX.Element;
+
+export { AccountsManager, type AccountsManagerProps, type CreateAccountAction, type CreateAccountInput, type EditAccountAction, type EditAccountInput, type ResetAccountPasswordAction, type SetAccountActiveAction };

package/dist/accounts.js

@@ -0,0 +1,13 @@
+export { AccountsManager } from './chunk-LC3S47FM.js';
+import './chunk-XQTVSNHC.js';
+import './chunk-M35R6JLA.js';
+import './chunk-6YFZLXFP.js';
+import './chunk-K3KIBHJF.js';
+import './chunk-QZRRFE6E.js';
+import './chunk-OWCGEEAZ.js';
+import './chunk-55FQP2DO.js';
+import './chunk-I4WDVYHX.js';
+import './chunk-TJSNVTVB.js';
+import './chunk-SETIN6XP.js';
+import './chunk-77QBZC7J.js';
+import './chunk-BI4EGLPG.js';

package/dist/audit.d.ts

@@ -0,0 +1,13 @@
+import * as React from 'react';
+import { ActivityLog } from './types.js';
+
+/**
+ * Activity-log viewer (GE-022). Read-only audit trail with client-side filters
+ * (action dropdown + actor/detail search) over the entries fetched by the page.
+ */
+
+declare function LogsViewer({ entries }: {
+    entries: ActivityLog[];
+}): React.JSX.Element;
+
+export { LogsViewer };

package/dist/audit.js

@@ -0,0 +1,11 @@
+export { LogsViewer } from './chunk-4EDMZRGS.js';
+import './chunk-6YFZLXFP.js';
+import './chunk-K3KIBHJF.js';
+import './chunk-QZRRFE6E.js';
+import './chunk-OWCGEEAZ.js';
+import './chunk-55FQP2DO.js';
+import './chunk-I4WDVYHX.js';
+import './chunk-TJSNVTVB.js';
+import './chunk-SETIN6XP.js';
+import './chunk-77QBZC7J.js';
+import './chunk-BI4EGLPG.js';

package/dist/auth-auth.d.ts

@@ -1,4 +1,4 @@
-import { D as DemoAdminConfig } from './schema-CdsFQxIg.js';
+import { D as DemoAdminConfig } from './schema-BUhh_mKX.js';
 import { SessionData } from './auth-session.js';
 import 'zod';
 

package/dist/auth-rate-limit.d.ts

@@ -1,16 +1,25 @@
 /**
  * Fixed-window rate limiting backed by Redis. Used to throttle admin login
  * attempts (per username/IP) before the expensive argon2 verify runs.
+ *
+ * Toggle: set `EOVR_RATE_LIMIT_DISABLED` to a truthy value (`1`/`true`/`yes`/`on`)
+ * to bypass throttling entirely — every call is allowed and Redis is never
+ * touched. Intended for staging/QA where repeated login attempts must not lock
+ * you out. Leave it unset (the default) to keep throttling on in production.
  */
 
 interface RateLimitResult {
     allowed: boolean;
     remaining: number;
 }
+/** Whether rate limiting is switched off via `EOVR_RATE_LIMIT_DISABLED`. */
+declare function isRateLimitDisabled(): boolean;
 /**
  * Increment a counter for `key`; the first hit in a window sets its TTL. Returns
- * `allowed: false` once more than `max` hits occur within `windowSeconds`.
+ * `allowed: false` once more than `max` hits occur within `windowSeconds`. When
+ * `EOVR_RATE_LIMIT_DISABLED` is truthy this short-circuits to always-allowed and
+ * never touches Redis.
  */
 declare function rateLimit(key: string, max: number, windowSeconds: number): Promise<RateLimitResult>;
 
-export { type RateLimitResult, rateLimit };
+export { type RateLimitResult, isRateLimitDisabled, rateLimit };

package/dist/auth-rate-limit.js

@@ -1,2 +1,2 @@
-export { rateLimit } from './chunk-77ULDXQX.js';
+export { isRateLimitDisabled, rateLimit } from './chunk-6ZJSEM4Y.js';
 import './chunk-ASFB24ZY.js';

package/dist/auth.d.ts

@@ -1,7 +1,7 @@
 export { getRedis } from './auth-redis.js';
 export { SESSION_COOKIE, SessionData, cookieSecure, createSession, destroySession, getSession } from './auth-session.js';
-export { RateLimitResult, rateLimit } from './auth-rate-limit.js';
+export { RateLimitResult, isRateLimitDisabled, rateLimit } from './auth-rate-limit.js';
 export { ADMIN_COOKIE, Auth, AuthDeps, createAuth } from './auth-auth.js';
 import 'ioredis';
-import './schema-CdsFQxIg.js';
+import './schema-BUhh_mKX.js';
 import 'zod';

package/dist/auth.js

@@ -1,4 +1,4 @@
 export { ADMIN_COOKIE, createAuth } from './chunk-AJ2RZTVX.js';
-export { rateLimit } from './chunk-77ULDXQX.js';
+export { isRateLimitDisabled, rateLimit } from './chunk-6ZJSEM4Y.js';
 export { SESSION_COOKIE, cookieSecure, createSession, destroySession, getSession } from './chunk-KIKDXRM5.js';
 export { getRedis } from './chunk-ASFB24ZY.js';

package/dist/chunk-4EDMZRGS.js

@@ -0,0 +1,98 @@
+import { usePagination, Pagination } from './chunk-6YFZLXFP.js';
+import { Input } from './chunk-K3KIBHJF.js';
+import { ACTIVITY_ACTION_LABELS } from './chunk-QZRRFE6E.js';
+import { Table, TableHeader, TableRow, TableHead, TableBody, TableCell } from './chunk-OWCGEEAZ.js';
+import { Badge } from './chunk-55FQP2DO.js';
+import { useCopy, useOvrConfig } from './chunk-TJSNVTVB.js';
+import { Card, CardContent } from './chunk-SETIN6XP.js';
+import * as React from 'react';
+import { jsxs, jsx, Fragment } from 'react/jsx-runtime';
+
+var fieldClass = "h-9 rounded-lg border border-input bg-transparent px-2.5 text-sm shadow-xs outline-none transition-colors focus-visible:border-ring focus-visible:ring-3 focus-visible:ring-ring/50 dark:bg-input/30";
+function actionLabel(action) {
+  return ACTIVITY_ACTION_LABELS[action] ?? action;
+}
+function LogsViewer({ entries }) {
+  const t = useCopy().admin.logsPage;
+  const { rules } = useOvrConfig();
+  const [action, setAction] = React.useState("");
+  const [q, setQ] = React.useState("");
+  const fmt = (iso) => new Date(iso).toLocaleString(rules.locale, {
+    timeZone: rules.timeZone,
+    year: "numeric",
+    month: "short",
+    day: "2-digit",
+    hour: "numeric",
+    minute: "2-digit"
+  });
+  const actions = Array.from(new Set(entries.map((e) => e.action)));
+  const query = q.trim().toLowerCase();
+  const filtered = entries.filter((e) => {
+    if (action && e.action !== action) return false;
+    if (query) {
+      const hay = `${e.actorUsername ?? ""} ${e.summary}`.toLowerCase();
+      if (!hay.includes(query)) return false;
+    }
+    return true;
+  });
+  const { pageItems, page, setPage, totalPages, from, to, total } = usePagination(filtered, 20, `${action}|${query}`);
+  return /* @__PURE__ */ jsxs("div", { className: "mx-auto w-full max-w-4xl p-4 sm:p-6 lg:p-8", children: [
+    /* @__PURE__ */ jsxs("div", { className: "mb-6", children: [
+      /* @__PURE__ */ jsx("h1", { className: "font-heading text-2xl font-semibold tracking-tight", children: t.title }),
+      /* @__PURE__ */ jsx("p", { className: "max-w-2xl text-sm text-muted-foreground", children: t.subtitle })
+    ] }),
+    /* @__PURE__ */ jsxs("div", { className: "mb-4 flex flex-wrap items-center gap-2", children: [
+      /* @__PURE__ */ jsxs(
+        "select",
+        {
+          value: action,
+          onChange: (e) => setAction(e.target.value),
+          className: `${fieldClass} w-auto`,
+          "aria-label": t.action,
+          children: [
+            /* @__PURE__ */ jsx("option", { value: "", children: t.allActions }),
+            actions.map((a) => /* @__PURE__ */ jsx("option", { value: a, children: actionLabel(a) }, a))
+          ]
+        }
+      ),
+      /* @__PURE__ */ jsx(
+        Input,
+        {
+          value: q,
+          onChange: (e) => setQ(e.target.value),
+          placeholder: t.search,
+          className: "h-9 w-auto min-w-56"
+        }
+      )
+    ] }),
+    /* @__PURE__ */ jsx(Card, { children: /* @__PURE__ */ jsx(CardContent, { className: "p-0", children: filtered.length === 0 ? /* @__PURE__ */ jsx("p", { className: "p-8 text-center text-sm text-muted-foreground", children: t.empty }) : /* @__PURE__ */ jsxs(Fragment, { children: [
+      /* @__PURE__ */ jsxs(Table, { children: [
+        /* @__PURE__ */ jsx(TableHeader, { children: /* @__PURE__ */ jsxs(TableRow, { children: [
+          /* @__PURE__ */ jsx(TableHead, { children: t.when }),
+          /* @__PURE__ */ jsx(TableHead, { children: t.actor }),
+          /* @__PURE__ */ jsx(TableHead, { children: t.action }),
+          /* @__PURE__ */ jsx(TableHead, { children: t.detail })
+        ] }) }),
+        /* @__PURE__ */ jsx(TableBody, { children: pageItems.map((e) => /* @__PURE__ */ jsxs(TableRow, { children: [
+          /* @__PURE__ */ jsx(TableCell, { className: "whitespace-nowrap text-muted-foreground", children: fmt(e.createdAt) }),
+          /* @__PURE__ */ jsx(TableCell, { className: "font-medium", children: e.actorUsername ?? t.system }),
+          /* @__PURE__ */ jsx(TableCell, { children: /* @__PURE__ */ jsx(Badge, { variant: "secondary", children: actionLabel(e.action) }) }),
+          /* @__PURE__ */ jsx(TableCell, { className: "text-muted-foreground", children: e.summary })
+        ] }, e.id)) })
+      ] }),
+      /* @__PURE__ */ jsx(
+        Pagination,
+        {
+          page,
+          totalPages,
+          from,
+          to,
+          total,
+          onPage: setPage
+        }
+      )
+    ] }) }) })
+  ] });
+}
+
+export { LogsViewer };

package/dist/chunk-4JMHQKMK.js

@@ -0,0 +1,268 @@
+import { Label } from './chunk-XQTVSNHC.js';
+import { Dialog, DialogTrigger, DialogContent, DialogHeader, DialogTitle, DialogDescription, DialogFooter, DialogClose } from './chunk-M35R6JLA.js';
+import { usePagination, Pagination } from './chunk-6YFZLXFP.js';
+import { Input } from './chunk-K3KIBHJF.js';
+import { Table, TableHeader, TableRow, TableHead, TableBody, TableCell } from './chunk-OWCGEEAZ.js';
+import { Button } from './chunk-I4WDVYHX.js';
+import { useCopy } from './chunk-TJSNVTVB.js';
+import { Card, CardContent } from './chunk-SETIN6XP.js';
+import * as React from 'react';
+import { toast } from 'sonner';
+import { useRouter } from 'next/navigation';
+import { UserPlus, Pencil, Loader2, Trash2 } from 'lucide-react';
+import { jsxs, jsx, Fragment } from 'react/jsx-runtime';
+
+function OfficersManager({
+  officers,
+  createAction,
+  updateAction,
+  deleteAction
+}) {
+  const t = useCopy().admin.officersPage;
+  const router = useRouter();
+  const { pageItems, page, setPage, totalPages, from, to, total } = usePagination(officers, 12);
+  return /* @__PURE__ */ jsxs("div", { className: "mx-auto w-full max-w-4xl p-4 sm:p-6 lg:p-8", children: [
+    /* @__PURE__ */ jsxs("div", { className: "mb-6 flex items-center justify-between gap-3", children: [
+      /* @__PURE__ */ jsxs("div", { className: "min-w-0 flex-1", children: [
+        /* @__PURE__ */ jsx("h1", { className: "font-heading text-2xl font-semibold tracking-tight", children: t.title }),
+        /* @__PURE__ */ jsx("p", { className: "max-w-2xl text-sm text-muted-foreground", children: t.subtitle })
+      ] }),
+      /* @__PURE__ */ jsx(
+        OfficerDialog,
+        {
+          mode: "create",
+          createAction,
+          onDone: () => router.refresh()
+        }
+      )
+    ] }),
+    /* @__PURE__ */ jsx(Card, { children: /* @__PURE__ */ jsx(CardContent, { className: "p-0", children: officers.length === 0 ? /* @__PURE__ */ jsx("p", { className: "p-8 text-center text-sm text-muted-foreground", children: t.empty }) : /* @__PURE__ */ jsxs(Fragment, { children: [
+      /* @__PURE__ */ jsxs(Table, { children: [
+        /* @__PURE__ */ jsx(TableHeader, { children: /* @__PURE__ */ jsxs(TableRow, { children: [
+          /* @__PURE__ */ jsx(TableHead, { children: t.name }),
+          /* @__PURE__ */ jsx(TableHead, { children: t.badge }),
+          /* @__PURE__ */ jsx(TableHead, { children: t.office }),
+          /* @__PURE__ */ jsx(TableHead, { className: "text-right", children: t.actions })
+        ] }) }),
+        /* @__PURE__ */ jsx(TableBody, { children: pageItems.map((o) => /* @__PURE__ */ jsxs(TableRow, { children: [
+          /* @__PURE__ */ jsx(TableCell, { className: "font-medium", children: o.name }),
+          /* @__PURE__ */ jsx(TableCell, { className: "text-muted-foreground", children: o.badgeNo ?? "\u2014" }),
+          /* @__PURE__ */ jsx(TableCell, { className: "text-muted-foreground", children: o.office }),
+          /* @__PURE__ */ jsx(TableCell, { children: /* @__PURE__ */ jsxs("div", { className: "flex justify-end gap-1.5", children: [
+            /* @__PURE__ */ jsx(
+              OfficerDialog,
+              {
+                mode: "edit",
+                officer: o,
+                updateAction,
+                onDone: () => router.refresh()
+              }
+            ),
+            /* @__PURE__ */ jsx(
+              DeleteOfficerButton,
+              {
+                officer: o,
+                deleteAction,
+                onDone: () => router.refresh()
+              }
+            )
+          ] }) })
+        ] }, o.id)) })
+      ] }),
+      /* @__PURE__ */ jsx(
+        Pagination,
+        {
+          page,
+          totalPages,
+          from,
+          to,
+          total,
+          onPage: setPage
+        }
+      )
+    ] }) }) })
+  ] });
+}
+function OfficerDialog({
+  mode,
+  officer,
+  createAction,
+  updateAction,
+  onDone
+}) {
+  const t = useCopy().admin.officersPage;
+  const [open, setOpen] = React.useState(false);
+  const [name, setName] = React.useState(officer?.name ?? "");
+  const [badgeNo, setBadgeNo] = React.useState(officer?.badgeNo ?? "");
+  const [office, setOffice] = React.useState(officer?.office ?? "");
+  const [submitting, setSubmitting] = React.useState(false);
+  function resetTo(o) {
+    setName(o?.name ?? "");
+    setBadgeNo(o?.badgeNo ?? "");
+    setOffice(o?.office ?? "");
+  }
+  async function submit(e) {
+    e.preventDefault();
+    if (!name.trim()) return toast.error(`${t.name} is required.`);
+    if (!office.trim()) return toast.error(`${t.office} is required.`);
+    setSubmitting(true);
+    try {
+      const input = {
+        name: name.trim(),
+        badgeNo: badgeNo.trim() || void 0,
+        office: office.trim()
+      };
+      const res = mode === "create" ? await createAction?.(input) : await updateAction?.(officer.id, input);
+      if (res?.error) {
+        toast.error(res.error);
+        return;
+      }
+      toast.success(
+        `${mode === "create" ? t.create : t.editTitle}: ${name.trim()}`
+      );
+      setOpen(false);
+      onDone();
+    } finally {
+      setSubmitting(false);
+    }
+  }
+  return /* @__PURE__ */ jsxs(
+    Dialog,
+    {
+      open,
+      onOpenChange: (o) => {
+        if (o) resetTo(officer);
+        setOpen(o);
+      },
+      children: [
+        /* @__PURE__ */ jsxs(
+          DialogTrigger,
+          {
+            render: mode === "create" ? /* @__PURE__ */ jsx(Button, { className: "gap-1.5" }) : /* @__PURE__ */ jsx(Button, { variant: "outline", size: "sm", className: "gap-1.5" }),
+            children: [
+              mode === "create" ? /* @__PURE__ */ jsx(UserPlus, { className: "size-4" }) : /* @__PURE__ */ jsx(Pencil, { className: "size-3.5" }),
+              /* @__PURE__ */ jsx("span", { className: mode === "create" ? "" : "hidden sm:inline", children: mode === "create" ? t.newOfficer : t.edit })
+            ]
+          }
+        ),
+        /* @__PURE__ */ jsxs(DialogContent, { className: "sm:max-w-md", children: [
+          /* @__PURE__ */ jsxs(DialogHeader, { children: [
+            /* @__PURE__ */ jsx(DialogTitle, { children: mode === "create" ? t.newOfficer : t.editTitle }),
+            /* @__PURE__ */ jsx(DialogDescription, { children: t.subtitle })
+          ] }),
+          /* @__PURE__ */ jsxs("form", { onSubmit: submit, className: "space-y-4", children: [
+            /* @__PURE__ */ jsxs("div", { className: "space-y-1.5", children: [
+              /* @__PURE__ */ jsx(Label, { htmlFor: "off-name", children: t.name }),
+              /* @__PURE__ */ jsx(
+                Input,
+                {
+                  id: "off-name",
+                  value: name,
+                  onChange: (e) => setName(e.target.value),
+                  placeholder: t.namePlaceholder,
+                  autoComplete: "off",
+                  autoFocus: true
+                }
+              )
+            ] }),
+            /* @__PURE__ */ jsxs("div", { className: "grid gap-4 sm:grid-cols-2", children: [
+              /* @__PURE__ */ jsxs("div", { className: "space-y-1.5", children: [
+                /* @__PURE__ */ jsx(Label, { htmlFor: "off-badge", children: t.badge }),
+                /* @__PURE__ */ jsx(
+                  Input,
+                  {
+                    id: "off-badge",
+                    value: badgeNo,
+                    onChange: (e) => setBadgeNo(e.target.value),
+                    placeholder: t.badgePlaceholder,
+                    autoComplete: "off"
+                  }
+                )
+              ] }),
+              /* @__PURE__ */ jsxs("div", { className: "space-y-1.5", children: [
+                /* @__PURE__ */ jsx(Label, { htmlFor: "off-office", children: t.office }),
+                /* @__PURE__ */ jsx(
+                  Input,
+                  {
+                    id: "off-office",
+                    value: office,
+                    onChange: (e) => setOffice(e.target.value),
+                    placeholder: t.officePlaceholder,
+                    autoComplete: "off"
+                  }
+                )
+              ] })
+            ] }),
+            /* @__PURE__ */ jsxs(DialogFooter, { children: [
+              /* @__PURE__ */ jsx(DialogClose, { render: /* @__PURE__ */ jsx(Button, { type: "button", variant: "outline" }), children: t.cancel }),
+              /* @__PURE__ */ jsxs(Button, { type: "submit", disabled: submitting, className: "gap-1.5", children: [
+                submitting ? /* @__PURE__ */ jsx(Loader2, { className: "size-4 animate-spin" }) : null,
+                submitting ? mode === "create" ? t.creating : t.saving : mode === "create" ? t.create : t.save
+              ] })
+            ] })
+          ] })
+        ] })
+      ]
+    }
+  );
+}
+function DeleteOfficerButton({
+  officer,
+  deleteAction,
+  onDone
+}) {
+  const t = useCopy().admin.officersPage;
+  const [deleting, setDeleting] = React.useState(false);
+  async function remove() {
+    setDeleting(true);
+    try {
+      const res = await deleteAction(officer.id);
+      if (res?.error) {
+        toast.error(res.error);
+        return;
+      }
+      toast.success(`${t.delete}: ${officer.name}`);
+      onDone();
+    } finally {
+      setDeleting(false);
+    }
+  }
+  return /* @__PURE__ */ jsxs(Dialog, { children: [
+    /* @__PURE__ */ jsxs(
+      DialogTrigger,
+      {
+        render: /* @__PURE__ */ jsx(Button, { variant: "destructive", size: "sm", className: "gap-1.5" }),
+        children: [
+          /* @__PURE__ */ jsx(Trash2, { className: "size-3.5" }),
+          /* @__PURE__ */ jsx("span", { className: "hidden sm:inline", children: t.delete })
+        ]
+      }
+    ),
+    /* @__PURE__ */ jsxs(DialogContent, { className: "sm:max-w-sm", children: [
+      /* @__PURE__ */ jsxs(DialogHeader, { children: [
+        /* @__PURE__ */ jsx(DialogTitle, { children: t.deleteConfirmTitle }),
+        /* @__PURE__ */ jsxs(DialogDescription, { children: [
+          officer.name,
+          " \u2014 ",
+          t.deleteConfirmBody
+        ] })
+      ] }),
+      /* @__PURE__ */ jsxs(DialogFooter, { children: [
+        /* @__PURE__ */ jsx(DialogClose, { render: /* @__PURE__ */ jsx(Button, { variant: "outline" }), children: t.cancel }),
+        /* @__PURE__ */ jsxs(
+          DialogClose,
+          {
+            render: /* @__PURE__ */ jsx(Button, { variant: "destructive", className: "gap-2", disabled: deleting }),
+            onClick: remove,
+            children: [
+              /* @__PURE__ */ jsx(Trash2, { className: "size-4" }),
+              t.delete
+            ]
+          }
+        )
+      ] })
+    ] })
+  ] });
+}
+
+export { OfficersManager };

package/dist/chunk-6662IONX.js

@@ -0,0 +1,69 @@
+import { usePagination, Pagination } from './chunk-6YFZLXFP.js';
+import { StatusBadge } from './chunk-OE525ZER.js';
+import { Money } from './chunk-BVI5XDDA.js';
+import { Table, TableHeader, TableRow, TableHead, TableBody, TableCell } from './chunk-OWCGEEAZ.js';
+import { useFormatters } from './chunk-TJSNVTVB.js';
+import { formalName } from './chunk-BI4EGLPG.js';
+import { useRouter } from 'next/navigation';
+import { ChevronRight } from 'lucide-react';
+import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
+
+function TicketsTable({ tickets }) {
+  const { formatDate } = useFormatters();
+  const router = useRouter();
+  const { pageItems, page, setPage, totalPages, from, to, total } = usePagination(tickets, 15);
+  if (tickets.length === 0) {
+    return /* @__PURE__ */ jsx("div", { className: "px-4 py-10 text-center text-sm text-muted-foreground", children: "No tickets match this view." });
+  }
+  return /* @__PURE__ */ jsxs(Fragment, { children: [
+    /* @__PURE__ */ jsxs(Table, { children: [
+      /* @__PURE__ */ jsx(TableHeader, { children: /* @__PURE__ */ jsxs(TableRow, { children: [
+        /* @__PURE__ */ jsx(TableHead, { children: "Ticket No." }),
+        /* @__PURE__ */ jsx(TableHead, { children: "Violator" }),
+        /* @__PURE__ */ jsx(TableHead, { className: "hidden sm:table-cell", children: "Apprehended" }),
+        /* @__PURE__ */ jsx(TableHead, { children: "Status" }),
+        /* @__PURE__ */ jsx(TableHead, { className: "text-right", children: "Amount" }),
+        /* @__PURE__ */ jsx(TableHead, { className: "w-8" })
+      ] }) }),
+      /* @__PURE__ */ jsx(TableBody, { children: pageItems.map((t) => {
+        const href = `/admin/tickets/${encodeURIComponent(t.ovrTicketNo)}`;
+        const amount = t.status === "PAID" ? t.payment?.amount ?? 0 : t.totalAmountDue;
+        return /* @__PURE__ */ jsxs(
+          TableRow,
+          {
+            onClick: () => router.push(href),
+            onKeyDown: (e) => {
+              if (e.key === "Enter") router.push(href);
+            },
+            role: "link",
+            tabIndex: 0,
+            "aria-label": `Open ticket ${t.ovrTicketNo}`,
+            className: "cursor-pointer",
+            children: [
+              /* @__PURE__ */ jsx(TableCell, { className: "font-mono text-xs", children: t.ovrTicketNo }),
+              /* @__PURE__ */ jsx(TableCell, { className: "font-medium", children: formalName(t.violator) }),
+              /* @__PURE__ */ jsx(TableCell, { className: "hidden text-muted-foreground sm:table-cell", children: formatDate(t.apprehendedAt) }),
+              /* @__PURE__ */ jsx(TableCell, { children: /* @__PURE__ */ jsx(StatusBadge, { status: t.status }) }),
+              /* @__PURE__ */ jsx(TableCell, { className: "text-right", children: /* @__PURE__ */ jsx(Money, { value: amount }) }),
+              /* @__PURE__ */ jsx(TableCell, { className: "text-muted-foreground", children: /* @__PURE__ */ jsx(ChevronRight, { className: "size-4" }) })
+            ]
+          },
+          t.ovrTicketNo
+        );
+      }) })
+    ] }),
+    /* @__PURE__ */ jsx(
+      Pagination,
+      {
+        page,
+        totalPages,
+        from,
+        to,
+        total,
+        onPage: setPage
+      }
+    )
+  ] });
+}
+
+export { TicketsTable };

package/dist/chunk-6WMPBAUH.js

@@ -0,0 +1,18 @@
+import { buttonVariants } from './chunk-I4WDVYHX.js';
+import { useCopy } from './chunk-TJSNVTVB.js';
+import { Card, CardContent } from './chunk-SETIN6XP.js';
+import Link from 'next/link';
+import { FileQuestion } from 'lucide-react';
+import { jsx, jsxs } from 'react/jsx-runtime';
+
+function TicketNotFound() {
+  const copy = useCopy();
+  return /* @__PURE__ */ jsx("div", { className: "mx-auto w-full max-w-lg px-4 py-16 text-center", children: /* @__PURE__ */ jsx(Card, { children: /* @__PURE__ */ jsxs(CardContent, { className: "flex flex-col items-center gap-3 py-8", children: [
+    /* @__PURE__ */ jsx("div", { className: "flex size-12 items-center justify-center rounded-full bg-muted text-muted-foreground", children: /* @__PURE__ */ jsx(FileQuestion, { className: "size-6" }) }),
+    /* @__PURE__ */ jsx("h1", { className: "font-heading text-lg font-semibold", children: copy.citizen.notFoundTitle }),
+    /* @__PURE__ */ jsx("p", { className: "max-w-sm text-sm text-muted-foreground", children: copy.citizen.notFoundBody }),
+    /* @__PURE__ */ jsx(Link, { href: "/citizen/search", className: buttonVariants({}), children: copy.citizen.ticket.backToSearch })
+  ] }) }) });
+}
+
+export { TicketNotFound };

package/dist/{chunk-77ULDXQX.js → chunk-6ZJSEM4Y.js}

@@ -1,7 +1,12 @@
 import { getRedis } from './chunk-ASFB24ZY.js';
 import 'server-only';
 
+function isRateLimitDisabled() {
+  const v = process.env.EOVR_RATE_LIMIT_DISABLED?.trim().toLowerCase();
+  return v === "1" || v === "true" || v === "yes" || v === "on";
+}
 async function rateLimit(key, max, windowSeconds) {
+  if (isRateLimitDisabled()) return { allowed: true, remaining: max };
   const redis = getRedis();
   const k = `eovr:rl:${key}`;
   const count = await redis.incr(k);
@@ -9,4 +14,4 @@ async function rateLimit(key, max, windowSeconds) {
   return { allowed: count <= max, remaining: Math.max(0, max - count) };
 }
 
-export { rateLimit };
+export { isRateLimitDisabled, rateLimit };