Phase 4: Warehouse screen, pull table, shorts, MTRs and the upload pipeline

The Warehouse home with the numbers, the Open shorts table, the find bar and the five-column task board
(waiting, being pulled, on hold, pulled, released in the last 3 days) with buttons, hold reasons and drag.
Every role sees the warehouse stage on a packet as the WH pill and the line under it. The pull table on the
Materials tab: Pulled with auto-start, issued, location, heat with Enter to the next line, shorts with
receipts, N/A, MTR per line with a viewer. Send back to Clerical with a reason. Release to supervisor stays
blocked until every line is pulled or short and every pulled line has a heat.

Server: the heats_recorded precondition on WH_RELEASE, receive by custody, server-validated hold and short
reasons, the old packet history texts, GET /api/warehouse/board, cards with the warehouse stage and pull
counts. Uploads typed by content per kind (drawing, mtr, document, bom with XLSX and CSV), limits per kind,
optional ClamAV behind the clamav compose profile, a storage quota alert on the new notification_events
table (migration 0005) shown on the Admin Storage tab.

Tests: every warehouse action as every role, the release gate, the short-receive exception, the heat
pattern, upload sniffing and limits, the ClamAV path with a fake scanner, the quota alert; frontend board
and pull table tests; Playwright scenarios for the board and the pull flow. Verified on docker-1 in the CI
stack: 3557 server tests, 106 frontend tests, 17 Playwright scenarios. Docs updated; D5 closed.

Co-Authored-By: Claude Fable 5.1 <[email protected]>

frontend/src/packet/tabs.tsx

@@ -5,6 +5,9 @@ import { packetsApi } from "../api/packets";
 import type { BomLine, Guarded, PacketRead, WorkOrder } from "../api/types";
 import { errorText, fmtTime } from "../lib/format";
 import { useLoad } from "../lib/useLoad";
+import { MtrViewer } from "../warehouse/MtrViewer";
+import { PullTable, ShortChip, type Write } from "../warehouse/PullTable";
+import { ShortSheet } from "../warehouse/ShortSheet";
 
 export type Mutate = (
   fn: (g: Guarded) => Promise<PacketRead | null | undefined>,
@@ -35,10 +38,28 @@ const toDraft = (b: BomLine): LineDraft => ({
 
 const EMPTY_LINE: LineDraft = { qty: "", part_id: "", description: "", material: "", length: "", dwg_ref: "" };
 
-/** The BOM. Clerical may edit the lines of a hand draft (PUT /bom, full replace). */
-export function MaterialsTab({ p, mutate, busy }: { p: PacketRead; mutate: Mutate; busy: boolean }) {
+/**
+ * The BOM. Clerical may edit the lines of a hand draft (PUT /bom, full replace). The warehouse gets the pull table
+ * while the packet is with it. Anyone who may receive a short gets Receive on the line.
+ */
+export function MaterialsTab({
+  p,
+  mutate,
+  busy,
+  write,
+  reload,
+}: {
+  p: PacketRead;
+  mutate: Mutate;
+  busy: boolean;
+  write?: Write | undefined;
+  reload?: (() => Promise<void>) | undefined;
+}) {
   const editable = p.status === "draft" && p.source_kind === "hand" && p.can.includes("edit_bom");
   const [lines, setLines] = useState<LineDraft[] | null>(null);
+  const [receiveFor, setReceiveFor] = useState<number | null>(null);
+  const [viewFor, setViewFor] = useState<number | null>(null);
+  const canReceive = p.can.includes("wh_receive_short") || p.can.includes("edit_bom");
   const set = (i: number, k: keyof LineDraft, v: string) => setLines((rows) => (rows ?? []).map((r, j) => (j === i ? { ...r, [k]: v } : r)));
 
   const save = async (e: FormEvent) => {
@@ -124,6 +145,19 @@ export function MaterialsTab({ p, mutate, busy }: { p: PacketRead; mutate: Mutat
     );
   }
 
+  if (p.status === "warehouse" && p.can.includes("edit_bom") && write && reload) {
+    return <PullTable p={p} write={write} reload={reload} busy={busy} />;
+  }
+
+  const receiving = receiveFor === null ? undefined : p.bom.find((b) => b.item === receiveFor);
+  const viewed = viewFor === null ? undefined : p.bom.find((b) => b.item === viewFor);
+  const receive = async (item: number, body: Parameters<typeof packetsApi.receiveShort>[2]): Promise<string | null> => {
+    if (!write) return "Receiving is not available here.";
+    const r = await write((g) => packetsApi.receiveShort(p.id, item, body, g));
+    if (r.ok || r.err === undefined) return null;
+    return errorText(r.err);
+  };
+
   return (
     <div className="stack">
       {editable ? (
@@ -164,12 +198,29 @@ export function MaterialsTab({ p, mutate, busy }: { p: PacketRead; mutate: Mutat
                   </td>
                   <td className="small">{show(b.material)}</td>
                   <td className="small">{show(b.length)}</td>
-                  <td className="mono small">{show(b.heat)}</td>
+                  <td className="mono small">
+                    {show(b.heat)}
+                    {b.mtr_asset_id ? (
+                      <>
+                        {" "}
+                        <button type="button" className="lnk small" onClick={() => setViewFor(b.item)}>
+                          MTR
+                        </button>
+                      </>
+                    ) : null}
+                  </td>
                   <td>
-                    {b.na ? (
+                    {b.na && !b.short ? (
                       <span className="pill st-filed">N/A</span>
                     ) : b.short ? (
-                      <span className="pill st-review">{String(b.short.qty_open)} short</span>
+                      <div className="stack tight">
+                        <ShortChip s={b.short} />
+                        {canReceive && write ? (
+                          <button className="btn sm pri" type="button" disabled={busy} onClick={() => setReceiveFor(b.item)}>
+                            Receive
+                          </button>
+                        ) : null}
+                      </div>
                     ) : b.pulled ? (
                       <span className="pill st-ok">Pulled</span>
                     ) : (
@@ -184,6 +235,12 @@ export function MaterialsTab({ p, mutate, busy }: { p: PacketRead; mutate: Mutat
       ) : (
         <div className="empty">No BOM lines on this packet.</div>
       )}
+      {receiving ? (
+        <ShortSheet mode="receive" line={receiving} onClose={() => setReceiveFor(null)} onReceive={(body) => receive(receiving.item, body)} />
+      ) : null}
+      {viewed?.mtr_asset_id ? (
+        <MtrViewer assetId={viewed.mtr_asset_id} title={`MTR · item ${viewed.item}${viewed.heat ? ` · ${viewed.heat}` : ""}`} onClose={() => setViewFor(null)} />
+      ) : null}
     </div>
   );
 }
@@ -305,7 +362,7 @@ export function DocumentsTab({ p, mutate, busy }: { p: PacketRead; mutate: Mutat
     }
     setUploading(true);
     try {
-      const asset = await assetsApi.upload(file, { packet_id: p.id, purpose: "doc" });
+      const asset = await assetsApi.upload(file, { packet_id: p.id, purpose: "document" });
       const ok = await mutate((g) => packetsApi.addDoc(p.id, { asset_id: asset.id, kind, title: title.trim() || file.name, ...g }), { ok: "Document added" });
       if (ok) {
         setTitle("");