Assemble QMS app + SQLite refactor + Unraid single-container deploy

Reconstruct the full app from init-source overlays (base + fix-1..6 +
update-1..3, last-wins) at the repo root, complete the missing pieces so it
builds and runs, and stage the Unraid deployment.

App completion:
- types/index.ts: former Prisma enums as string-literal unions + AppUser
- pages/_app.tsx + styles/globals.css (mount AppProvider/ToastProvider)
- API routes: auth/login, auth/me, users, submissions (+REVIEW_READY notify),
  forms (list/create), notifications
- scripts/create-admin.js: idempotent first-admin bootstrap
- 14 unbuilt nav targets stubbed via ComingSoon placeholder

SQLite refactor (single-container, no external DB):
- schema provider -> sqlite; enums -> String; Json -> String;
  FormField.options String[] -> JSON-encoded String
- lib/forms.ts (de)serialises options at the DB boundary
- drop mode:"insensitive" (unsupported on SQLite)
- enum imports repointed from @prisma/client to @/types

Deploy:
- multi-stage Dockerfile (next build -> prod runner), docker-entrypoint.sh
  (prisma db push -> create-admin -> next start), .dockerignore
- docker-compose.yml: br0 10.2.0.x, /mnt/user/appdata/qms -> /data volume
- README rewritten for the Unraid/Gitea Actions flow; .env scrubbed of the
  live Supabase credential; vercel.json removed

Verified: next build clean (41 routes); live SQLite round-trip of
login/session, form options array, and submission -> REVIEW_READY.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

pages/api/shipments/[id]/send.ts

@@ -0,0 +1,35 @@
+import type { NextApiRequest, NextApiResponse } from 'next'
+import { prisma } from '@/lib/prisma'
+import { requireAuth, logAction, SHIPMENT_SEND_ROLES } from '@/lib/auth'
+import { sendEmail, emailTemplate } from '@/lib/email'
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  const user = await requireAuth(req, res, SHIPMENT_SEND_ROLES)
+  if (!user) return
+  if (req.method !== 'POST') return res.status(405).end()
+
+  const { id } = req.query as { id: string }
+  const { clientEmail, subject, message } = req.body
+
+  if (!clientEmail || !subject || !message) {
+    return res.status(400).json({ error: 'clientEmail, subject, message required' })
+  }
+
+  const shipment = await prisma.shipment.findUnique({ where: { id }, include: { items: true } })
+  if (!shipment) return res.status(404).json({ error: 'Shipment not found' })
+
+  const itemsHtml = shipment.items.filter(i => i.included).map(i => `<li>${i.label}</li>`).join('')
+  await sendEmail(clientEmail, subject, emailTemplate('Quality Release Package', `
+    <p>${message.replace(/\n/g, '<br>')}</p>
+    <ul>${itemsHtml}</ul>
+  `))
+
+  const updated = await prisma.shipment.update({
+    where: { id },
+    data: { sentAt: new Date(), sentTo: clientEmail },
+  })
+
+  await logAction(user.id, 'UPDATE', 'Shipment', id, { sentAt: null }, { sentAt: updated.sentAt, sentTo: clientEmail })
+
+  return res.json({ data: updated })
+}

pages/api/shipments/index.ts

@@ -0,0 +1,45 @@
+import type { NextApiRequest, NextApiResponse } from 'next'
+import { prisma } from '@/lib/prisma'
+import { requireAuth, logAction, generateRef } from '@/lib/auth'
+
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  const user = await requireAuth(req, res)
+  if (!user) return
+
+  if (req.method === 'GET') {
+    const shipments = await prisma.shipment.findMany({
+      include: { items: { orderBy: { order: 'asc' } }, _count: { select: { escapes: true } } },
+      orderBy: { createdAt: 'desc' },
+    })
+    return res.json({ data: shipments })
+  }
+
+  if (req.method === 'POST') {
+    const { product, batch, client, clientEmail, shippedAt, items } = req.body
+    if (!product || !batch || !client || !shippedAt) {
+      return res.status(400).json({ error: 'product, batch, client, shippedAt required' })
+    }
+
+    const count = await prisma.shipment.count()
+    const ref = generateRef('REL', count)
+
+    const shipment = await prisma.shipment.create({
+      data: {
+        ref, product, batch, client, clientEmail,
+        shippedAt: new Date(shippedAt),
+        createdById: user.id,
+        items: {
+          create: (items || []).map((it: any, i: number) => ({
+            label: it.label, type: it.type || 'OTHER', included: it.included !== false, order: i,
+          }))
+        }
+      },
+      include: { items: { orderBy: { order: 'asc' } } },
+    })
+
+    await logAction(user.id, 'CREATE', 'Shipment', shipment.id, null, { ref, product, batch })
+    return res.status(201).json({ data: shipment })
+  }
+
+  res.status(405).end()
+}

pages/api/shipments/suggest.ts

@@ -0,0 +1,40 @@
+import type { NextApiRequest, NextApiResponse } from 'next'
+import { prisma } from '@/lib/prisma'
+import { requireAuth } from '@/lib/auth'
+
+// Auto-suggests release items tied to a product: recent first-build form
+// submission counts for that product, plus recently resolved NCR fixes.
+export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  const user = await requireAuth(req, res)
+  if (!user) return
+  if (req.method !== 'GET') return res.status(405).end()
+
+  const { product } = req.query as { product?: string }
+  const items: { label: string; type: string; included: boolean }[] = []
+
+  if (product) {
+    const forms = await prisma.buildForm.findMany({
+      where: { product: { contains: product} },
+      include: { _count: { select: { submissions: true } } },
+    })
+    for (const f of forms) {
+      if (f._count.submissions > 0) {
+        items.push({ label: `${f.name} — ${f._count.submissions} submissions`, type: 'FORM_DATA', included: true })
+      }
+    }
+  }
+
+  // Recently resolved NCRs (last 90 days) as candidate fixes to include
+  const since = new Date()
+  since.setDate(since.getDate() - 90)
+  const recentNcrs = await prisma.nCR.findMany({
+    where: { status: 'RESOLVED', resolvedAt: { gte: since } },
+    orderBy: { resolvedAt: 'desc' },
+    take: 5,
+  })
+  for (const n of recentNcrs) {
+    items.push({ label: `${n.ref} fix — ${n.category || 'resolved'}`, type: 'NCR_FIX', included: false })
+  }
+
+  return res.json({ data: items })
+}