U19 — Medium batch (4 wins bundled)PROD

Summary

Status

5/5 prod · 51/51 regression = 56/56 · shipped

Commit

nix-cafe 6f1acbe

Files

11 modified + 1 new · ~440 LOC net · no migration

What ships

• Kick auditing — mintActivePosSessionToken returns MintResult { sid, previousSid } via a tx-wrapped SELECT-then-UPDATE. All 4 POS unlock callsites (PIN unlock + manager override + openStarterShift + ensureStarterCashierCookie) emit a pos.kicked audit row when previousSid is non-null. Metadata captures kickedActor / kickerSession / priorSid / origin. PIN unlock migrated from the legacy mintPinSessionToken to the unified DAO so PIN kicks also get audited.
• Starter in-app KickBanner — new <StarterKickBanner> client component mounted above the workspace on starter-register-page.tsx when peekKickReason() returns non-null. Auto-dismisses after 10s, manually dismissable × button, fires clearStaleActiveCashierCookieAction on mount. testid starter-pos-kick-banner.
• Starter listProductsForPos template aggregation (U15-B parity) — multi-variant Starter templates now render as 1 tile + variant picker (resolveVariant fires) instead of N separate tiles. variants[] populated via product_tmpl_id correlated SELECT + combo JOIN for labels; sorted by price ascending; representative = cheapest variant. Threaded through StarterRegisterMount.ProductInput, normalizeStarterProducts, and loadStarterOpenPhaseBundle.
• Override-conflict warning on /cafe/settings/attributes Edit dialog. listAttributesForAdmin.values[].overrideCount populated via correlated subquery counting distinct templates with price_extra_usd_override IS NOT NULL. Edit dialog renders amber inline warning when overrideCount > 0: "N product templates override this value's extra price. Editing the global default won't affect those overrides."

5/5 prod checks ✓

Gate 1 (9/9) covered the rendering chain end-to-end (DAO → page → dialog source contracts + 3 DAO probes). Gate 2 focused on the load-bearing prod-side assertions: real audit row on a real kick + real subquery count through Hyperdrive.

Screenshots (click to enlarge)

Mid-Gate-2 finds

• Item #3l lockdown blocked the admin UI test — both terminals A + B had active-cashier cookies after the POS unlock, which Item #3l's lockdown middleware redirects to the register page when admins try to hit /cafe/settings/*. Fixed by spinning a fresh termAdmin context that never unlocked POS. Then collapsed the UI drive to a SQL probe since Gate 1 already covered the rendering chain end-to-end.
• mkdir-before-redirect 7th burn — re-validated feedback_mkdir_before_bash_redirect.
• Comment-vs-code regex slicing — Gate 1 round 1 failed because the JSDoc lives ABOVE the export line, so the comment grep sliced from export and missed it. Fix: back up to /** start before slicing.

Regression sweep — 51/51 ✓