Build Seth's changes C1 to C11 (Gitea issues 1, 8, 18, 23, 24, 25, 27, 31, 32, 33, 36)

- C1 (issue 1): over target follows VISUAL ticket hours, not the timer.
- C2 (issue 24): a Q.C. reject always needs a reason; accept needs an NCR number after a reject without one.
- C3 (issue 25): an incomplete unit ITP blocks filing.
- C4 (issue 27): prints open the print dialog on the page, no new tab.
- C5 (issue 31): filing is blocked while VISUAL shows a work order open; the feed sets vclosed on VISUAL packets.
- C6 (issue 8): the data book leaves out the history pages.
- C7 (issue 18): the supervisor approves each received short; accept and filing wait for it.
- C8 (issue 23): per-department checklists, edited by the department supervisor or Admin, frozen at START.
- C9 (issue 32): Q.C. and Clerical may run the stamp check.
- C10 (issue 33): the PM screen and reports are for PS-ProjectMgmt and Admin only.
- C11 (issue 36): the Stall screen lists the packets assigned to the welder, at the supervisor's stall.

Migration 0011. Docs: PLAN (also issue 9 confirmed, issue 4 asked), POLICY, SECURITY, SCHEMA, FEED, README, CHANGELOG.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

frontend/src/api/stall.ts

@@ -0,0 +1,40 @@
+// The Stall screen's own call (change C11): the packets assigned to me, across stations. Nobody picks a station on
+// the Stall screen; each card carries the station the supervisor picked when assigning.
+import { api } from "./client";
+import { qs } from "./query";
+import { normaliseCard, type ShopCard } from "./shop";
+import { normaliseFacets, type BoardQuery, type Facets } from "./types";
+
+/** A stall card: the shop card plus the station it is assigned to. */
+export interface StallCard extends ShopCard {
+  station_id: number | null;
+  station_name: string | null;
+}
+
+/** GET /api/stall/mine: the stall board shape, without a station. */
+export interface StallMine {
+  mine: StallCard[];
+  submitted: StallCard[];
+  facets?: Facets;
+}
+
+function cards(raw: unknown): StallCard[] {
+  if (!Array.isArray(raw)) return [];
+  return (raw as Array<Partial<StallCard> & ShopCard>).map((c) => {
+    const card = normaliseCard(c);
+    const id = c.station_id ?? c.station?.id ?? null;
+    const name = c.station_name ?? c.station?.name ?? null;
+    // The card's own station line reads `station`; fill it from the flat fields when the server sends only those.
+    const station = card.station ?? (id !== null ? { id, name: name ?? "" } : null);
+    return { ...card, station, station_id: id, station_name: name };
+  });
+}
+
+/** The find bar's query applies; `me` and the session decide whose packets. */
+export async function getStallMine(q: BoardQuery = {}, signal?: AbortSignal): Promise<StallMine> {
+  const raw = await api.get<Partial<StallMine> | null>(`/api/stall/mine${qs({ ...q })}`, signal);
+  const facets = normaliseFacets(raw?.facets);
+  return { mine: cards(raw?.mine), submitted: cards(raw?.submitted), ...(facets ? { facets } : {}) };
+}
+
+export const stallApi = { getStallMine };