feat(notifications): severity (info/warning) + cover the gaps in the flow matrix

Modelled the real crown-and-bridge workflow (impression → accept →
framework try-in → bisque try-in → glaze/cila → delivery, with revisions
bouncing back at any try-in stage). Mapped every event in our system to
the appropriate side and tagged the ones a user actually needs to act on
versus normal progress traffic.

DB
  - notifications.severity enum ('info' | 'warning', default 'info').
    Existing rows default to info.

Helper
  - createNotification gains an optional severity param; persists into
    the new column.

Matrix changes (warnings vs infos)
  Lab side:
    - Düzeltme talebi (clinic → lab)          WARNING
    - İş iptal edildi (counterpart action)    WARNING
  Clinic side:
    - Ödeme reddedildi (lab → clinic)         WARNING
    - Bağlantı reddedildi (counterpart → req) WARNING (newly fired —
      rejectConnectionAction now sends a notification, previously silent)
  Everything else (accept, hand-off, prova ready, prova approved,
  delivery, payment submitted/approved, connection request/approved):
  stays at info.

Behaviour additions in actions
  - cancelJobAction now notifies the *other* party. Previously cancelled
    jobs vanished from one side's inbox without warning. severity=warning.
  - rejectConnectionAction notifies the requester (severity=warning) so
    they know the connection didn't come through.
  - requestRevisionAction tags its existing notification as warning.
  - rejectPaymentAction tags its existing notification as warning.

UI
  - Notifications list row: unread warning rows get an amber dot, an
    amber-tinted background, and a 'Dikkat' destructive badge instead
    of the regular 'Yeni' secondary one.
  - Dashboard recent-notifications widget mirrors the same dot + bold
    treatment so warnings stand out at a glance.

Net result: a user opening the bell sees normal traffic muted (still
listed for the 'herkes her şeyden haberdar' guarantee) and the things
that actually need them coloured amber and labeled Dikkat.

package.json

@@ -37,6 +37,8 @@
     "@radix-ui/react-toggle": "^1.1.10",
     "@radix-ui/react-toggle-group": "^1.1.11",
     "@radix-ui/react-tooltip": "^1.2.8",
+    "@react-three/drei": "^10.7.7",
+    "@react-three/fiber": "^9.6.1",
     "@tailwindcss/postcss": "^4.1.18",
     "@tanstack/react-table": "^8.21.3",
     "appwrite": "^24.2.0",
@@ -57,12 +59,16 @@
     "recharts": "3.6.0",
     "sonner": "^2.0.7",
     "tailwind-merge": "^3.4.0",
+    "three": "^0.184.0",
     "vaul": "^1.1.2",
     "zod": "^4.3.2",
     "zustand": "^5.0.9"
   },
   "pnpm": {
-    "onlyBuiltDependencies": ["sharp", "unrs-resolver"],
+    "onlyBuiltDependencies": [
+      "sharp",
+      "unrs-resolver"
+    ],
     "patchedDependencies": {
       "node-fetch-native-with-agent@1.7.2": "patches/node-fetch-native-with-agent@1.7.2.patch"
     }
@@ -72,6 +78,7 @@
     "@types/node": "^25.0.3",
     "@types/react": "^19.2.7",
     "@types/react-dom": "^19.2.3",
+    "@types/three": "^0.184.1",
     "eslint": "^9.39.2",
     "eslint-config-next": "16.1.1",
     "tailwindcss": "^4.1.18",

pnpm-lock.yaml

@@ -91,6 +91,12 @@ importers:
       '@radix-ui/react-tooltip':
         specifier: ^1.2.8
         version: 1.2.8(@types/react-dom@19.2.3(@types/react@19.2.15))(@types/react@19.2.15)(react-dom@19.2.3(react@19.2.3))(react@19.2.3)
+      '@react-three/drei':
+        specifier: ^10.7.7
+        version: 10.7.7(@react-three/fiber@9.6.1(@types/react@19.2.15)(immer@11.1.8)(react-dom@19.2.3(react@19.2.3))(react@19.2.3)(three@0.184.0))(@types/react@19.2.15)(@types/three@0.184.1)(immer@11.1.8)(react-dom@19.2.3(react@19.2.3))(react@19.2.3)(three@0.184.0)
+      '@react-three/fiber':
+        specifier: ^9.6.1
+        version: 9.6.1(@types/react@19.2.15)(immer@11.1.8)(react-dom@19.2.3(react@19.2.3))(react@19.2.3)(three@0.184.0)
       '@tailwindcss/postcss':
         specifier: ^4.1.18
         version: 4.3.0
@@ -151,6 +157,9 @@ importers:
       tailwind-merge:
         specifier: ^3.4.0
         version: 3.6.0
+      three:
+        specifier: ^0.184.0
+        version: 0.184.0
       vaul:
         specifier: ^1.1.2
         version: 1.1.2(@types/react-dom@19.2.3(@types/react@19.2.15))(@types/react@19.2.15)(react-dom@19.2.3(react@19.2.3))(react@19.2.3)
@@ -173,6 +182,9 @@ importers:
       '@types/react-dom':
         specifier: ^19.2.3
         version: 19.2.3(@types/react@19.2.15)
+      '@types/three':
+        specifier: ^0.184.1
+        version: 0.184.1
       eslint:
         specifier: ^9.39.2
         version: 9.39.4(jiti@2.7.0)
@@ -250,6 +262,10 @@ packages:
     engines: {node: '>=6.0.0'}
     hasBin: true
 
+  '@babel/runtime@7.29.2':
+    resolution: {integrity: sha512-JiDShH45zKHWyGe4ZNVRrCjBz8Nh9TMmZG1kh4QTK8hCBTWBi8Da+i7s1fJw7/lYpM4ccepSNfqzZ/QvABBi5g==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/template@7.28.6':
     resolution: {integrity: sha512-YA6Ma2KsCdGb+WC6UpBVFJGXL58MDA6oyONbjyF/+5sBgxY/dwkhLogbMT2GXXyU84/IhRw/2D1Os1B/giz+BQ==}
     engines: {node: '>=6.9.0'}
@@ -265,6 +281,9 @@ packages:
   '@date-fns/tz@1.5.0':
     resolution: {integrity: sha512-lwYN/vDPeNRULcepoE/LO2Pgx+7/RV+S9ARfbc9lr2DtGkOD7pAiruHvbR1RX3Qyf6ja47EWJDMsNK5vK08DJg==}
 
+  '@dimforge/rapier3d-compat@0.12.0':
+    resolution: {integrity: sha512-uekIGetywIgopfD97oDL5PfeezkFpNhwlzlaEYNOA0N6ghdsOvh/HYjSMek5Q2O1PYvRSDFcqFVJl4r4ZBwOow==}
+
   '@dnd-kit/accessibility@3.1.1':
     resolution: {integrity: sha512-2P+YgaXF+gRsIihwwY1gCsQSYnu9Zyj2py8kY5fFvUM1qm2WA2u639R6YNVfU4GWr+ZM5mqEsfHZZLoRONbemw==}
     peerDependencies:
@@ -533,6 +552,14 @@ packages:
   '@jridgewell/trace-mapping@0.3.31':
     resolution: {integrity: sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==}
 
+  '@mediapipe/tasks-vision@0.10.17':
+    resolution: {integrity: sha512-CZWV/q6TTe8ta61cZXjfnnHsfWIdFhms03M9T7Cnd5y2mdpylJM0rF1qRq+wsQVRMLz1OYPVEBU9ph2Bx8cxrg==}
+
+  '@monogrid/gainmap-js@3.4.0':
+    resolution: {integrity: sha512-2Z0FATFHaoYJ8b+Y4y4Hgfn3FRFwuU5zRrk+9dFWp4uGAdHGqVEdP7HP+gLA3X469KXHmfupJaUbKo1b/aDKIg==}
+    peerDependencies:
+      three: '>= 0.159.0'
+
   '@napi-rs/wasm-runtime@1.1.4':
     resolution: {integrity: sha512-3NQNNgA1YSlJb/kMH1ildASP9HW7/7kYnRI2szWJaofaS1hWmbGI4H+d3+22aGzXXN9IJ+n+GiFVcGipJP18ow==}
     peerDependencies:
@@ -1187,6 +1214,42 @@ packages:
   '@radix-ui/rect@1.1.1':
     resolution: {integrity: sha512-HPwpGIzkl28mWyZqG52jiqDJ12waP11Pa1lGoiyUkIEuMLBP0oeK/C89esbXrxsky5we7dfd8U58nm0SgAWpVw==}
 
+  '@react-three/drei@10.7.7':
+    resolution: {integrity: sha512-ff+J5iloR0k4tC++QtD/j9u3w5fzfgFAWDtAGQah9pF2B1YgOq/5JxqY0/aVoQG5r3xSZz0cv5tk2YuBob4xEQ==}
+    peerDependencies:
+      '@react-three/fiber': ^9.0.0
+      react: ^19
+      react-dom: ^19
+      three: '>=0.159'
+    peerDependenciesMeta:
+      react-dom:
+        optional: true
+
+  '@react-three/fiber@9.6.1':
+    resolution: {integrity: sha512-zF0rsKcVYpcJwbFEnv2HkHX9cvOEgsfQo/X8lwmR2dn13S4qEQJXir9fxf5js2LQFoXqxOY7MDkOkYx2uZ4gSg==}
+    peerDependencies:
+      expo: '>=43.0'
+      expo-asset: '>=8.4'
+      expo-file-system: '>=11.0'
+      expo-gl: '>=11.0'
+      react: '>=19 <19.3'
+      react-dom: '>=19 <19.3'
+      react-native: '>=0.78'
+      three: '>=0.156'
+    peerDependenciesMeta:
+      expo:
+        optional: true
+      expo-asset:
+        optional: true
+      expo-file-system:
+        optional: true
+      expo-gl:
+        optional: true
+      react-dom:
+        optional: true
+      react-native:
+        optional: true
+
   '@reduxjs/toolkit@2.12.0':
     resolution: {integrity: sha512-KiT+RzZbp6mQET+Mg+h2c97+9j1sNflUxQkIHI7Yuzf6Peu+OYpmkn6nbHWmLLWj+1ZODUJFwGZ7gx3L9R9EOw==}
     peerDependencies:
@@ -1313,6 +1376,9 @@ packages:
     resolution: {integrity: sha512-ldZXEhOBb8Is7xLs01fR3YEc3DERiz5silj8tnGkFZytt1abEvl/GhUmCE0PMLaMPTa3Jk4HbKmRlHmu+gCftg==}
     engines: {node: '>=12'}
 
+  '@tweenjs/tween.js@23.1.3':
+    resolution: {integrity: sha512-vJmvvwFxYuGnF2axRtPYocag6Clbb5YS7kLL+SO/TeVFzHqDIWrNKYtcsPMibjDx9O+bu+psAy9NKfWklassUA==}
+
   '@tybys/wasm-util@0.10.2':
     resolution: {integrity: sha512-RoBvJ2X0wuKlWFIjrwffGw1IqZHKQqzIchKaadZZfnNpsAYp2mM0h36JtPCjNDAHGgYez/15uMBpfGwchhiMgg==}
 
@@ -1343,6 +1409,9 @@ packages:
   '@types/d3-timer@3.0.2':
     resolution: {integrity: sha512-Ps3T8E8dZDam6fUyNiMkekK3XUsaUEik+idO9/YjPtfj2qruF8tFBXS7XhtE4iIXBLxhmLjP3SXpLhVf21I9Lw==}
 
+  '@types/draco3d@1.4.10':
+    resolution: {integrity: sha512-AX22jp8Y7wwaBgAixaSvkoG4M/+PlAcm3Qs4OW8yT9DM4xUpWKeFhLueTAyZF39pviAdcDdeJoACapiAceqNcw==}
+
   '@types/estree@1.0.9':
     resolution: {integrity: sha512-GhdPgy1el4/ImP05X05Uw4cw2/M93BCUmnEvWZNStlCzEKME4Fkk+YpoA5OiHNQmoS7Cafb8Xa3Pya8m1Qrzeg==}
 
@@ -1355,17 +1424,34 @@ packages:
   '@types/node@25.9.1':
     resolution: {integrity: sha512-xfrlY7UD5rMJk3ZVJP8BNzS28J36YJg+xp+LPXV1TdWxr8uMH5A860QNxYDGQe/ylDSgjxE52Q9VnO7p75tJxg==}
 
+  '@types/offscreencanvas@2019.7.3':
+    resolution: {integrity: sha512-ieXiYmgSRXUDeOntE1InxjWyvEelZGP63M+cGuquuRLuIKKT1osnkXjxev9B7d1nXSug5vpunx+gNlbVxMlC9A==}
+
   '@types/react-dom@19.2.3':
     resolution: {integrity: sha512-jp2L/eY6fn+KgVVQAOqYItbF0VY/YApe5Mz2F0aykSO8gx31bYCZyvSeYxCHKvzHG5eZjc+zyaS5BrBWya2+kQ==}
     peerDependencies:
       '@types/react': ^19.2.0
 
+  '@types/react-reconciler@0.28.9':
+    resolution: {integrity: sha512-HHM3nxyUZ3zAylX8ZEyrDNd2XZOnQ0D5XfunJF5FLQnZbHHYq4UWvW1QfelQNXv1ICNkwYhfxjwfnqivYB6bFg==}
+    peerDependencies:
+      '@types/react': '*'
+
   '@types/react@19.2.15':
     resolution: {integrity: sha512-eRwcGNHve+E8qtEQSSRl6urh+rFop4v8gm6O8rGv25CodbvFdLjA1vVQ1KkiFE0w0UPOnb8tDiFKL5lp0rtY5Q==}
 
+  '@types/stats.js@0.17.4':
+    resolution: {integrity: sha512-jIBvWWShCvlBqBNIZt0KAshWpvSjhkwkEu4ZUcASoAvhmrgAUI2t1dXrjSL4xXVLB4FznPrIsX3nKXFl/Dt4vA==}
+
+  '@types/three@0.184.1':
+    resolution: {integrity: sha512-6q4VdiqVsrTRqmk62/BnlcAvIrnDM0zf2ZDVKI5kZiniWrSaOHaQzmbp+BNzoggc/8tgW412pL//wZIxu2PPTA==}
+
   '@types/use-sync-external-store@0.0.6':
     resolution: {integrity: sha512-zFDAD+tlpf2r4asuHEj0XH6pY6i0g5NeAHPn+15wk3BV6JA69eERFXC1gyGThDkVa1zCyKr5jox1+2LbV/AMLg==}
 
+  '@types/webxr@0.5.24':
+    resolution: {integrity: sha512-h8fgEd/DpoS9CBrjEQXR+dIDraopAEfu4wYVNY2tEPwk60stPWhvZMf4Foo5FakuQ7HFZoa8WceaWFervK2Ovg==}
+
   '@typescript-eslint/eslint-plugin@8.59.4':
     resolution: {integrity: sha512-PegsU+XfyJJNjd4+u/k6f9yTyp0lEXXiPopUNobZcIAUJFGICFLN+sP0Rb3JehVmiij1Ph0dFGYqODoRo/2+6A==}
     engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
@@ -1535,6 +1621,14 @@ packages:
     cpu: [x64]
     os: [win32]
 
+  '@use-gesture/core@10.3.1':
+    resolution: {integrity: sha512-WcINiDt8WjqBdUXye25anHiNxPc0VOrlT8F6LLkU6cycrOGUDyY/yyFmsg3k8i5OLvv25llc0QC45GhR/C8llw==}
+
+  '@use-gesture/react@10.3.1':
+    resolution: {integrity: sha512-Yy19y6O2GJq8f7CHf7L0nxL8bf4PZCPaVOCgJrusOeFHY1LvHgYXnmnXg6N5iwAnbgbZCDjo60SiM6IPJi9C5g==}
+    peerDependencies:
+      react: '>= 16.8.0'
+
   acorn-jsx@5.3.2:
     resolution: {integrity: sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ==}
     peerDependencies:
@@ -1625,11 +1719,17 @@ packages:
     resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==}
     engines: {node: 18 || 20 || >=22}
 
+  base64-js@1.5.1:
+    resolution: {integrity: sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==}
+
   baseline-browser-mapping@2.10.31:
     resolution: {integrity: sha512-MujYO3eP72uvmSE0i4wltsodRfIpZATP3jvzRNRGGxgzId7aVocVJJV3nf01qnzzKFGxQVC9bpWxl5cjxTr/7Q==}
     engines: {node: '>=6.0.0'}
     hasBin: true
 
+  bidi-js@1.0.3:
+    resolution: {integrity: sha512-RKshQI1R3YQ+n9YJz2QQ147P66ELpa1FQEg20Dk8oW9t2KgLbpDLLp9aGZ7y8WHSshDknG0bknqGw5/tyCs5tw==}
+
   bignumber.js@9.3.1:
     resolution: {integrity: sha512-Ko0uX15oIUS7wJ3Rb30Fs6SkVbLmPBAKdlm7q9+ak9bbIeFf0MwuBsQV6z7+X768/cHsfg+WlysDWJcmthjsjQ==}
 
@@ -1649,6 +1749,9 @@ packages:
     engines: {node: ^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7}
     hasBin: true
 
+  buffer@6.0.3:
+    resolution: {integrity: sha512-FTiCpNxtwiZZHEZbcbTIcZjERVICn9yq/pDFkTl95/AxzD1naBctN7YO68riM/gLSDY7sdrMby8hofADYuuqOA==}
+
   call-bind-apply-helpers@1.0.2:
     resolution: {integrity: sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==}
     engines: {node: '>= 0.4'}
@@ -1665,6 +1768,12 @@ packages:
     resolution: {integrity: sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ==}
     engines: {node: '>=6'}
 
+  camera-controls@3.1.2:
+    resolution: {integrity: sha512-xkxfpG2ECZ6Ww5/9+kf4mfg1VEYAoe9aDSY+IwF0UEs7qEzwy0aVRfs2grImIECs/PoBtWFrh7RXsQkwG922JA==}
+    engines: {node: '>=22.0.0', npm: '>=10.5.1'}
+    peerDependencies:
+      three: '>=0.126.1'
+
   caniuse-lite@1.0.30001793:
     resolution: {integrity: sha512-iwSsYWaCOoh26cV8NwNRViHlrfUvYsHDfRVcbtmw0Kg6PJIZZXwMkj1442FYLBGkeUf1juAsU3DTfxW579mrPA==}
 
@@ -1701,6 +1810,11 @@ packages:
   convert-source-map@2.0.0:
     resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==}
 
+  cross-env@7.0.3:
+    resolution: {integrity: sha512-+/HKd6EgcQCJGh2PSjZuUitQBQynKor4wrFbRg4DtAgS1aWO+gU52xpH7M9ScGgXSYmAVS9bIJ8EzuaGw0oNAw==}
+    engines: {node: '>=10.14', npm: '>=6', yarn: '>=1'}
+    hasBin: true
+
   cross-spawn@7.0.6:
     resolution: {integrity: sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==}
     engines: {node: '>= 8'}
@@ -1804,6 +1918,9 @@ packages:
     resolution: {integrity: sha512-8QmQKqEASLd5nx0U1B1okLElbUuuttJ/AnYmRXbbbGDWh6uS208EjD4Xqq/I9wK7u0v6O08XhTWnt5XtEbR6Dg==}
     engines: {node: '>= 0.4'}
 
+  detect-gpu@5.0.70:
+    resolution: {integrity: sha512-bqerEP1Ese6nt3rFkwPnGbsUF9a4q+gMmpTVVOEzoCyeCc+y7/RvJnQZJx1JwhgQI5Ntg0Kgat8Uu7XpBqnz1w==}
+
   detect-libc@2.1.2:
     resolution: {integrity: sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==}
     engines: {node: '>=8'}
@@ -1815,6 +1932,9 @@ packages:
     resolution: {integrity: sha512-35mSku4ZXK0vfCuHEDAwt55dg2jNajHZ1odvF+8SSr82EsZY4QmXfuWso8oEd8zRhVObSN18aM0CjSdoBX7zIw==}
     engines: {node: '>=0.10.0'}
 
+  draco3d@1.5.7:
+    resolution: {integrity: sha512-m6WCKt/erDXcw+70IJXnG7M3awwQPAsZvJGX5zY7beBqpELw6RDGkYVU0W43AFxye4pDZ5i2Lbyc/NNGqwjUVQ==}
+
   dunder-proto@1.0.1:
     resolution: {integrity: sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==}
     engines: {node: '>= 0.4'}
@@ -2020,6 +2140,12 @@ packages:
       picomatch:
         optional: true
 
+  fflate@0.6.10:
+    resolution: {integrity: sha512-IQrh3lEPM93wVCEczc9SaAOvkmcoQn/G8Bo1e8ZPlY3X3bnAxWaBdvTdvM1hP62iZp0BXWDy4vTAy4fF0+Dlpg==}
+
+  fflate@0.8.3:
+    resolution: {integrity: sha512-tbZNuJrLwGUp3zshBtdy4W+ORxZuIh8a5ilyIEQDC5rY1f3U20JMry0Ll3WBzU58EZKsEuJFXhb5gwv8CsPvgA==}
+
   file-entry-cache@8.0.0:
     resolution: {integrity: sha512-XXTUwCvisa5oacNGRP9SfNtYBNAMi+RPwBFmblZEF7N7swHYQS6/Zfk7SRwx4D5j3CH211YNRco1DEMNVfZCnQ==}
     engines: {node: '>=16.0.0'}
@@ -2100,6 +2226,9 @@ packages:
     resolution: {integrity: sha512-DpLKbNU4WylpxJykQujfCcwYWiV/Jhm50Goo0wrVILAv5jOr9d+H+UR3PhSCD2rCCEIg0uc+G+muBTwD54JhDQ==}
     engines: {node: '>= 0.4'}
 
+  glsl-noise@0.0.0:
+    resolution: {integrity: sha512-b/ZCF6amfAUb7dJM/MxRs7AetQEahYzJ8PtgfrmEdtw6uyGOr+ZSGtgjFm6mfsBkxJ4d2W7kg+Nlqzqvn3Bc0w==}
+
   gopd@1.2.0:
     resolution: {integrity: sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==}
     engines: {node: '>= 0.4'}
@@ -2140,6 +2269,12 @@ packages:
   hermes-parser@0.25.1:
     resolution: {integrity: sha512-6pEjquH3rqaI6cYAXYPcz9MS4rY6R4ngRgrgfDshRptUZIc3lw0MCIJIGDj9++mfySOuPTHB4nrSW99BCvOPIA==}
 
+  hls.js@1.6.16:
+    resolution: {integrity: sha512-VSIRpLfRwlAAdGL4wiTucx2ScRipo0ed1FBatWkyt832jC4CReKstga6yIhYVwGu9LOBjuX9wzmRMeQdBJtzEA==}
+
+  ieee754@1.2.1:
+    resolution: {integrity: sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==}
+
   ignore@5.3.2:
     resolution: {integrity: sha512-hsBTNUqQTDwkWtcdYI2i06Y/nUBEsNEDJKjWdigLvegy8kDuJAS8uRlpkkcQpyEXL0Z/pjDy5HBmMjRCJ2gq+g==}
     engines: {node: '>= 4'}
@@ -2148,6 +2283,9 @@ packages:
     resolution: {integrity: sha512-Hs59xBNfUIunMFgWAbGX5cq6893IbWg4KnrjbYwX3tx0ztorVgTDA6B2sxf8ejHJ4wz8BqGUMYlnzNBer5NvGg==}
     engines: {node: '>= 4'}
 
+  immediate@3.0.6:
+    resolution: {integrity: sha512-XXOFtyqDjNDAQxVfYxuF7g9Il/IbWmmlQg2MYKOH8ExIT1qg6xc4zyS3HaEEATgs1btfzxq15ciUiY7gjSXRGQ==}
+
   immer@10.2.0:
     resolution: {integrity: sha512-d/+XTN3zfODyjr89gM3mPq1WNX2B8pYsu7eORitdwyA2sBubnTl3laYlBk4sXY5FUa5qTZGBDPJICVbvqzjlbw==}
 
@@ -2237,6 +2375,9 @@ packages:
     resolution: {integrity: sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==}
     engines: {node: '>=0.12.0'}
 
+  is-promise@2.2.2:
+    resolution: {integrity: sha512-+lP4/6lKUBfQjZ2pdxThZvLUAafmZb8OAxFb8XXtiQmS35INgr85hdOGoEs124ez1FCnZJt6jau/T+alh58QFQ==}
+
   is-regex@1.2.1:
     resolution: {integrity: sha512-MjYsKHO5O7mCsmRGxWcLWheFqN9DJ/2TmngvjKXihe6efViPqc274+Fx/4fYj/r03+ESvBdTXK0V6tA3rgez1g==}
     engines: {node: '>= 0.4'}
@@ -2283,6 +2424,11 @@ packages:
     resolution: {integrity: sha512-H0dkQoCa3b2VEeKQBOxFph+JAbcrQdE7KC0UkqwpLmv2EC4P41QXP+rqo9wYodACiG5/WM5s9oDApTU8utwj9g==}
     engines: {node: '>= 0.4'}
 
+  its-fine@2.0.0:
+    resolution: {integrity: sha512-KLViCmWx94zOvpLwSlsx6yOCeMhZYaxrJV87Po5k/FoZzcPSahvK5qJ7fYhS61sZi5ikmh2S3Hz55A2l3U69ng==}
+    peerDependencies:
+      react: ^19.0.0
+
   jiti@2.7.0:
     resolution: {integrity: sha512-AC/7JofJvZGrrneWNaEnJeOLUx+JlGt7tNa0wZiRPT4MY1wmfKjt2+6O2p2uz2+skll8OZZmJMNqeke7kKbNgQ==}
     hasBin: true
@@ -2338,6 +2484,9 @@ packages:
     resolution: {integrity: sha512-+bT2uH4E5LGE7h/n3evcS/sQlJXCpIp6ym8OWJ5eV6+67Dsql/LaaT7qJBAt2rzfoa/5QBGBhxDix1dMt2kQKQ==}
     engines: {node: '>= 0.8.0'}
 
+  lie@3.3.0:
+    resolution: {integrity: sha512-UaiMJzeWRlEujzAuw5LokY1L5ecNQYZKfmyZ9L7wDHb/p5etKaxXhohBcrw0EYby+G/NA52vRSN4N39dxHAIwQ==}
+
   lightningcss-android-arm64@1.32.0:
     resolution: {integrity: sha512-YK7/ClTt4kAK0vo6w3X+Pnm0D2cf2vPHbhOXdoNti1Ga0al1P4TBZhwjATvjNwLEBCnKvjJc2jQgHXH0NEwlAg==}
     engines: {node: '>= 12.0.0'}
@@ -2427,6 +2576,12 @@ packages:
     peerDependencies:
       react: ^16.5.1 || ^17.0.0 || ^18.0.0 || ^19.0.0
 
+  maath@0.10.8:
+    resolution: {integrity: sha512-tRvbDF0Pgqz+9XUa4jjfgAQ8/aPKmQdWXilFu2tMy4GWj4NOsx99HlULO4IeREfbO3a0sA145DZYyvXPkybm0g==}
+    peerDependencies:
+      '@types/three': '>=0.134.0'
+      three: '>=0.134.0'
+
   magic-string@0.30.21:
     resolution: {integrity: sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==}
 
@@ -2438,6 +2593,14 @@ packages:
     resolution: {integrity: sha512-8q7VEgMJW4J8tcfVPy8g09NcQwZdbwFEqhe/WZkoIzjn/3TGDwtOCYtXGxA3O8tPzpczCCDgv+P2P5y00ZJOOg==}
     engines: {node: '>= 8'}
 
+  meshline@3.3.1:
+    resolution: {integrity: sha512-/TQj+JdZkeSUOl5Mk2J7eLcYTLiQm2IDzmlSvYm7ov15anEcDJ92GHqqazxTSreeNgfnYu24kiEvvv0WlbCdFQ==}
+    peerDependencies:
+      three: '>=0.137'
+
+  meshoptimizer@1.1.1:
+    resolution: {integrity: sha512-oRFNWJRDA/WTrVj7NWvqa5HqE1t9MYDj2VaWirQCzCCrAd2GHrqR/sQezCxiWATPNlKTcRaPRHPJwIRoPBAp5g==}
+
   micromatch@4.0.8:
     resolution: {integrity: sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==}
     engines: {node: '>=8.6'}
@@ -2595,10 +2758,16 @@ packages:
     resolution: {integrity: sha512-FfR8sjd4em2T6fb3I2MwAJU7HWVMr9zba+enmQeeWFfCbm+UOC/0X4DS8XtpUTMwWMGbjKYP7xjfNekzyGmB3A==}
     engines: {node: ^10 || ^12 || >=14}
 
+  potpack@1.0.2:
+    resolution: {integrity: sha512-choctRBIV9EMT9WGAZHn3V7t0Z2pMQyl0EZE6pFc/6ml3ssw7Dlf/oAOvFwjm1HVsqfQN8GfeFyJ+d8tRzqueQ==}
+
   prelude-ls@1.2.1:
     resolution: {integrity: sha512-vkcDPrRZo1QZLbn5RLGPpg/WmIQ65qoWWhcGKf/b5eplkkarX0m9z8ppCat4mlOqUsWpyNuYgO3VRyrYHSzX5g==}
     engines: {node: '>= 0.8.0'}
 
+  promise-worker-transferable@1.0.4:
+    resolution: {integrity: sha512-bN+0ehEnrXfxV2ZQvU2PetO0n4gqBD4ulq3MI1WOPLgr7/Mg9yRQkX5+0v1vagr74ZTsl7XtzlaYDo2EuCeYJw==}
+
   prop-types@15.8.1:
     resolution: {integrity: sha512-oj87CgZICdulUohogVAR7AjlC0327U4el4L6eAvOqCeudMDVU0NThNaV+b9Df4dXgSP1gXMTnPdhfe/2qDH5cg==}
 
@@ -2677,6 +2846,15 @@ packages:
       '@types/react':
         optional: true
 
+  react-use-measure@2.1.7:
+    resolution: {integrity: sha512-KrvcAo13I/60HpwGO5jpW7E9DfusKyLPLvuHlUyP5zqnmAPhNc6qTRjUQrdTADl0lpPpDVU2/Gg51UlOGHXbdg==}
+    peerDependencies:
+      react: '>=16.13'
+      react-dom: '>=16.13'
+    peerDependenciesMeta:
+      react-dom:
+        optional: true
+
   react@19.2.3:
     resolution: {integrity: sha512-Ku/hhYbVjOQnXDZFv2+RibmLFGwFdeeKHFcOTlrt7xplBnya5OGn/hIRDsqDiSUcfORsDC7MPxwork8jBwsIWA==}
     engines: {node: '>=0.10.0'}
@@ -2705,6 +2883,10 @@ packages:
     resolution: {integrity: sha512-dYqgNSZbDwkaJ2ceRd9ojCGjBq+mOm9LmtXnAnEGyHhN/5R7iDW2TRw3h+o/jCFxus3P2LfWIIiwowAjANm7IA==}
     engines: {node: '>= 0.4'}
 
+  require-from-string@2.0.2:
+    resolution: {integrity: sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==}
+    engines: {node: '>=0.10.0'}
+
   reselect@5.1.1:
     resolution: {integrity: sha512-K/BG6eIky/SBpzfHZv/dd+9JBFiS4SWV7FIujVyJRux6e45+73RaUHXLmIR1f7WOMaQ0U1km6qwklRQxpJJY0w==}
 
@@ -2804,6 +2986,15 @@ packages:
   stable-hash@0.0.5:
     resolution: {integrity: sha512-+L3ccpzibovGXFK+Ap/f8LOS0ahMrHTf3xu7mMLSpEGU0EO9ucaysSylKo9eRDFNhWve/y275iPmIZ4z39a9iA==}
 
+  stats-gl@2.4.2:
+    resolution: {integrity: sha512-g5O9B0hm9CvnM36+v7SFl39T7hmAlv541tU81ME8YeSb3i1CIP5/QdDeSB3A0la0bKNHpxpwxOVRo2wFTYEosQ==}
+    peerDependencies:
+      '@types/three': '*'
+      three: '*'
+
+  stats.js@0.17.0:
+    resolution: {integrity: sha512-hNKz8phvYLPEcRkeG1rsGmV5ChMjKDAWU7/OJJdDErPBNChQXxCo3WZurGpnWc6gZhAzEPFad1aVgyOANH1sMw==}
+
   stop-iteration-iterator@1.1.0:
     resolution: {integrity: sha512-eLoXW/DHyl62zxY4SCaIgnRhuMr6ri4juEYARS8E6sCEqzKpOiE521Ucofdx+KnDZl5xmvGYaaKCk5FEOxJCoQ==}
     engines: {node: '>= 0.4'}
@@ -2860,6 +3051,11 @@ packages:
     resolution: {integrity: sha512-ot0WnXS9fgdkgIcePe6RHNk1WA8+muPa6cSjeR3V8K27q9BB1rTE3R1p7Hv0z1ZyAc8s6Vvv8DIyWf681MAt0w==}
     engines: {node: '>= 0.4'}
 
+  suspend-react@0.1.3:
+    resolution: {integrity: sha512-aqldKgX9aZqpoDp3e8/BZ8Dm7x1pJl+qI3ZKxDN0i/IQTWUwBx/ManmlVJ3wowqbno6c2bmiIfs+Um6LbsjJyQ==}
+    peerDependencies:
+      react: '>=17.0'
+
   tailwind-merge@3.6.0:
     resolution: {integrity: sha512-uxL7qAVQriqRQPAyK3pj66VqskWqoZ37PW94jwOTwNfq/z9oyu1V+eqrZqtR2+fCiXdYOZe/Modt8GtvqNzu+w==}
 
@@ -2870,6 +3066,19 @@ packages:
     resolution: {integrity: sha512-uxc/zpqFg6x7C8vOE7lh6Lbda8eEL9zmVm/PLeTPBRhh1xCgdWaQ+J1CUieGpIfm2HdtsUpRv+HshiasBMcc6A==}
     engines: {node: '>=6'}
 
+  three-mesh-bvh@0.8.3:
+    resolution: {integrity: sha512-4G5lBaF+g2auKX3P0yqx+MJC6oVt6sB5k+CchS6Ob0qvH0YIhuUk1eYr7ktsIpY+albCqE80/FVQGV190PmiAg==}
+    peerDependencies:
+      three: '>= 0.159.0'
+
+  three-stdlib@2.36.1:
+    resolution: {integrity: sha512-XyGQrFmNQ5O/IoKm556ftwKsBg11TIb301MB5dWNicziQBEs2g3gtOYIf7pFiLa0zI2gUwhtCjv9fmjnxKZ1Cg==}
+    peerDependencies:
+      three: '>=0.128.0'
+
+  three@0.184.0:
+    resolution: {integrity: sha512-wtTRjG92pM5eUg/KuUnHsqSAlPM296brTOcLgMRqEeylYTh/CdtvKUvCyyCQTzFuStieWxvZb8mVTMvdPyUpxg==}
+
   tiny-invariant@1.3.3:
     resolution: {integrity: sha512-+FbBPE1o9QAYvviau/qC5SE3caw21q3xkvWKBtja5vgqOWIHHJ3ioaq1VPfn/Szqctz2bU/oYeKd9/z5BL+PVg==}
 
@@ -2881,6 +3090,19 @@ packages:
     resolution: {integrity: sha512-65P7iz6X5yEr1cwcgvQxbbIw7Uk3gOy5dIdtZ4rDveLqhrdJP+Li/Hx6tyK0NEb+2GCyneCMJiGqrADCSNk8sQ==}
     engines: {node: '>=8.0'}
 
+  troika-three-text@0.52.4:
+    resolution: {integrity: sha512-V50EwcYGruV5rUZ9F4aNsrytGdKcXKALjEtQXIOBfhVoZU9VAqZNIoGQ3TMiooVqFAbR1w15T+f+8gkzoFzawg==}
+    peerDependencies:
+      three: '>=0.125.0'
+
+  troika-three-utils@0.52.4:
+    resolution: {integrity: sha512-NORAStSVa/BDiG52Mfudk4j1FG4jC4ILutB3foPnfGbOeIs9+G5vZLa0pnmnaftZUGm4UwSoqEpWdqvC7zms3A==}
+    peerDependencies:
+      three: '>=0.125.0'
+
+  troika-worker-utils@0.52.0:
+    resolution: {integrity: sha512-W1CpvTHykaPH5brv5VHLfQo9D1OYuo0cSBEUQFFT/nBUzM8iD6Lq2/tgG/f1OelbAS1WtaTPQzE5uM49egnngw==}
+
   ts-api-utils@2.5.0:
     resolution: {integrity: sha512-OJ/ibxhPlqrMM0UiNHJ/0CKQkoKF243/AEmplt3qpRgkW8VG7IfOS41h7V8TjITqdByHzrjcS/2si+y4lIh8NA==}
     engines: {node: '>=18.12'}
@@ -2893,6 +3115,9 @@ packages:
   tslib@2.8.1:
     resolution: {integrity: sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==}
 
+  tunnel-rat@0.1.2:
+    resolution: {integrity: sha512-lR5VHmkPhzdhrM092lI2nACsLO4QubF0/yoOhzX7c+wIpbN1GjHNzCc91QlpxBi+cnx8vVJ+Ur6vL5cEoQPFpQ==}
+
   tw-animate-css@1.4.0:
     resolution: {integrity: sha512-7bziOlRqH0hJx80h/3mbicLW7o8qLsH5+RaLR2t+OHM3D0JlWGODQKQ4cxbK7WlvmUxpcj6Kgu6EKqjrGFe3QQ==}
 
@@ -2972,6 +3197,10 @@ packages:
     peerDependencies:
       react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
 
+  utility-types@3.11.0:
+    resolution: {integrity: sha512-6Z7Ma2aVEWisaL6TvBCy7P8rm2LQoPv6dJ7ecIaIixHcwfbJ0x7mWdbcwlIM5IGQxPZSFYeqRCqlOOeKoJYMkw==}
+    engines: {node: '>= 4'}
+
   vaul@1.1.2:
     resolution: {integrity: sha512-ZFkClGpWyI2WUQjdLJ/BaGuV6AVQiJ3uELGk3OYtP+B6yCO7Cmn9vPFXVJkRaGkOJu3m8bQMgtyzNHixULceQA==}
     peerDependencies:
@@ -2981,6 +3210,12 @@ packages:
   victory-vendor@37.3.6:
     resolution: {integrity: sha512-SbPDPdDBYp+5MJHhBCAyI7wKM3d5ivekigc2Dk2s7pgbZ9wIgIBYGVw4zGHBml/qTFbexrofXW6Gu4noGxrOwQ==}
 
+  webgl-constants@1.1.1:
+    resolution: {integrity: sha512-LkBXKjU5r9vAW7Gcu3T5u+5cvSvh5WwINdr0C+9jpzVB41cjQAP5ePArDtk/WHYdVj0GefCgM73BA7FlIiNtdg==}
+
+  webgl-sdf-generator@1.1.1:
+    resolution: {integrity: sha512-9Z0JcMTFxeE+b2x1LJTdnaT8rT8aEp7MVxkNwoycNmJWwPdzoXzMh0BjJSh/AEFP+KPYZUli814h8bJZFIZ2jA==}
+
   which-boxed-primitive@1.1.1:
     resolution: {integrity: sha512-TbX3mj8n0odCBFVlY8AxkqcHASw3L60jIuF8jFP78az3C2YhmGvqbHBpAjTRH2/xqYunrJ9g1jSyjCjpoWzIAA==}
     engines: {node: '>= 0.4'}
@@ -3022,6 +3257,21 @@ packages:
   zod@4.4.3:
     resolution: {integrity: sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==}
 
+  zustand@4.5.7:
+    resolution: {integrity: sha512-CHOUy7mu3lbD6o6LJLfllpjkzhHXSBlX8B9+qPddUsIfeF5S/UZ5q0kmCsnRqT1UHFQZchNFDDzMbQsuesHWlw==}
+    engines: {node: '>=12.7.0'}
+    peerDependencies:
+      '@types/react': '>=16.8'
+      immer: '>=9.0.6'
+      react: '>=16.8'
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      immer:
+        optional: true
+      react:
+        optional: true
+
   zustand@5.0.13:
     resolution: {integrity: sha512-efI2tVaVQPqtOh114loML/Z80Y4NP3yc+Ff0fYiZJPauNeWZeIp/bRFD7I9bfmCOYBh/PHxlglQ9+wvlwnPikQ==}
     engines: {node: '>=12.20.0'}
@@ -3121,6 +3371,8 @@ snapshots:
     dependencies:
       '@babel/types': 7.29.0
 
+  '@babel/runtime@7.29.2': {}
+
   '@babel/template@7.28.6':
     dependencies:
       '@babel/code-frame': 7.29.0
@@ -3146,6 +3398,8 @@ snapshots:
 
   '@date-fns/tz@1.5.0': {}
 
+  '@dimforge/rapier3d-compat@0.12.0': {}
+
   '@dnd-kit/accessibility@3.1.1(react@19.2.3)':
     dependencies:
       react: 19.2.3
@@ -3394,6 +3648,13 @@ snapshots:
       '@jridgewell/resolve-uri': 3.1.2
       '@jridgewell/sourcemap-codec': 1.5.5
 
+  '@mediapipe/tasks-vision@0.10.17': {}
+
+  '@monogrid/gainmap-js@3.4.0(three@0.184.0)':
+    dependencies:
+      promise-worker-transferable: 1.0.4
+      three: 0.184.0
+
   '@napi-rs/wasm-runtime@1.1.4(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)':
     dependencies:
       '@emnapi/core': 1.10.0
@@ -4046,6 +4307,59 @@ snapshots:
 
   '@radix-ui/rect@1.1.1': {}
 
+  '@react-three/drei@10.7.7(@react-three/fiber@9.6.1(@types/react@19.2.15)(immer@11.1.8)(react-dom@19.2.3(react@19.2.3))(react@19.2.3)(three@0.184.0))(@types/react@19.2.15)(@types/three@0.184.1)(immer@11.1.8)(react-dom@19.2.3(react@19.2.3))(react@19.2.3)(three@0.184.0)':
+    dependencies:
+      '@babel/runtime': 7.29.2
+      '@mediapipe/tasks-vision': 0.10.17
+      '@monogrid/gainmap-js': 3.4.0(three@0.184.0)
+      '@react-three/fiber': 9.6.1(@types/react@19.2.15)(immer@11.1.8)(react-dom@19.2.3(react@19.2.3))(react@19.2.3)(three@0.184.0)
+      '@use-gesture/react': 10.3.1(react@19.2.3)
+      camera-controls: 3.1.2(three@0.184.0)
+      cross-env: 7.0.3
+      detect-gpu: 5.0.70
+      glsl-noise: 0.0.0
+      hls.js: 1.6.16
+      maath: 0.10.8(@types/three@0.184.1)(three@0.184.0)
+      meshline: 3.3.1(three@0.184.0)
+      react: 19.2.3
+      stats-gl: 2.4.2(@types/three@0.184.1)(three@0.184.0)
+      stats.js: 0.17.0
+      suspend-react: 0.1.3(react@19.2.3)
+      three: 0.184.0
+      three-mesh-bvh: 0.8.3(three@0.184.0)
+      three-stdlib: 2.36.1(three@0.184.0)
+      troika-three-text: 0.52.4(three@0.184.0)
+      tunnel-rat: 0.1.2(@types/react@19.2.15)(immer@11.1.8)(react@19.2.3)
+      use-sync-external-store: 1.6.0(react@19.2.3)
+      utility-types: 3.11.0
+      zustand: 5.0.13(@types/react@19.2.15)(immer@11.1.8)(react@19.2.3)(use-sync-external-store@1.6.0(react@19.2.3))
+    optionalDependencies:
+      react-dom: 19.2.3(react@19.2.3)
+    transitivePeerDependencies:
+      - '@types/react'
+      - '@types/three'
+      - immer
+
+  '@react-three/fiber@9.6.1(@types/react@19.2.15)(immer@11.1.8)(react-dom@19.2.3(react@19.2.3))(react@19.2.3)(three@0.184.0)':
+    dependencies:
+      '@babel/runtime': 7.29.2
+      '@types/webxr': 0.5.24
+      base64-js: 1.5.1
+      buffer: 6.0.3
+      its-fine: 2.0.0(@types/react@19.2.15)(react@19.2.3)
+      react: 19.2.3
+      react-use-measure: 2.1.7(react-dom@19.2.3(react@19.2.3))(react@19.2.3)
+      scheduler: 0.27.0
+      suspend-react: 0.1.3(react@19.2.3)
+      three: 0.184.0
+      use-sync-external-store: 1.6.0(react@19.2.3)
+      zustand: 5.0.13(@types/react@19.2.15)(immer@11.1.8)(react@19.2.3)(use-sync-external-store@1.6.0(react@19.2.3))
+    optionalDependencies:
+      react-dom: 19.2.3(react@19.2.3)
+    transitivePeerDependencies:
+      - '@types/react'
+      - immer
+
   '@reduxjs/toolkit@2.12.0(react-redux@9.3.0(@types/react@19.2.15)(react@19.2.3)(redux@5.0.1))(react@19.2.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
@@ -4147,6 +4461,8 @@ snapshots:
 
   '@tanstack/table-core@8.21.3': {}
 
+  '@tweenjs/tween.js@23.1.3': {}
+
   '@tybys/wasm-util@0.10.2':
     dependencies:
       tslib: 2.8.1
@@ -4176,6 +4492,8 @@ snapshots:
 
   '@types/d3-timer@3.0.2': {}
 
+  '@types/draco3d@1.4.10': {}
+
   '@types/estree@1.0.9': {}
 
   '@types/json-schema@7.0.15': {}
@@ -4186,16 +4504,35 @@ snapshots:
     dependencies:
       undici-types: 7.24.6
 
+  '@types/offscreencanvas@2019.7.3': {}
+
   '@types/react-dom@19.2.3(@types/react@19.2.15)':
     dependencies:
       '@types/react': 19.2.15
 
+  '@types/react-reconciler@0.28.9(@types/react@19.2.15)':
+    dependencies:
+      '@types/react': 19.2.15
+
   '@types/react@19.2.15':
     dependencies:
       csstype: 3.2.3
 
+  '@types/stats.js@0.17.4': {}
+
+  '@types/three@0.184.1':
+    dependencies:
+      '@dimforge/rapier3d-compat': 0.12.0
+      '@tweenjs/tween.js': 23.1.3
+      '@types/stats.js': 0.17.4
+      '@types/webxr': 0.5.24
+      fflate: 0.8.3
+      meshoptimizer: 1.1.1
+
   '@types/use-sync-external-store@0.0.6': {}
 
+  '@types/webxr@0.5.24': {}
+
   '@typescript-eslint/eslint-plugin@8.59.4(@typescript-eslint/parser@8.59.4(eslint@9.39.4(jiti@2.7.0))(typescript@5.9.3))(eslint@9.39.4(jiti@2.7.0))(typescript@5.9.3)':
     dependencies:
       '@eslint-community/regexpp': 4.12.2
@@ -4357,6 +4694,13 @@ snapshots:
   '@unrs/resolver-binding-win32-x64-msvc@1.12.2':
     optional: true
 
+  '@use-gesture/core@10.3.1': {}
+
+  '@use-gesture/react@10.3.1(react@19.2.3)':
+    dependencies:
+      '@use-gesture/core': 10.3.1
+      react: 19.2.3
+
   acorn-jsx@5.3.2(acorn@8.16.0):
     dependencies:
       acorn: 8.16.0
@@ -4469,8 +4813,14 @@ snapshots:
 
   balanced-match@4.0.4: {}
 
+  base64-js@1.5.1: {}
+
   baseline-browser-mapping@2.10.31: {}
 
+  bidi-js@1.0.3:
+    dependencies:
+      require-from-string: 2.0.2
+
   bignumber.js@9.3.1: {}
 
   brace-expansion@1.1.14:
@@ -4494,6 +4844,11 @@ snapshots:
       node-releases: 2.0.45
       update-browserslist-db: 1.2.3(browserslist@4.28.2)
 
+  buffer@6.0.3:
+    dependencies:
+      base64-js: 1.5.1
+      ieee754: 1.2.1
+
   call-bind-apply-helpers@1.0.2:
     dependencies:
       es-errors: 1.3.0
@@ -4513,6 +4868,10 @@ snapshots:
 
   callsites@3.1.0: {}
 
+  camera-controls@3.1.2(three@0.184.0):
+    dependencies:
+      three: 0.184.0
+
   caniuse-lite@1.0.30001793: {}
 
   chalk@4.1.2:
@@ -4550,6 +4909,10 @@ snapshots:
 
   convert-source-map@2.0.0: {}
 
+  cross-env@7.0.3:
+    dependencies:
+      cross-spawn: 7.0.6
+
   cross-spawn@7.0.6:
     dependencies:
       path-key: 3.1.1
@@ -4644,6 +5007,10 @@ snapshots:
       has-property-descriptors: 1.0.2
       object-keys: 1.1.1
 
+  detect-gpu@5.0.70:
+    dependencies:
+      webgl-constants: 1.1.1
+
   detect-libc@2.1.2: {}
 
   detect-node-es@1.1.0: {}
@@ -4652,6 +5019,8 @@ snapshots:
     dependencies:
       esutils: 2.0.3
 
+  draco3d@1.5.7: {}
+
   dunder-proto@1.0.1:
     dependencies:
       call-bind-apply-helpers: 1.0.2
@@ -5003,6 +5372,10 @@ snapshots:
     optionalDependencies:
       picomatch: 4.0.4
 
+  fflate@0.6.10: {}
+
+  fflate@0.8.3: {}
+
   file-entry-cache@8.0.0:
     dependencies:
       flat-cache: 4.0.1
@@ -5091,6 +5464,8 @@ snapshots:
       define-properties: 1.2.1
       gopd: 1.2.0
 
+  glsl-noise@0.0.0: {}
+
   gopd@1.2.0: {}
 
   graceful-fs@4.2.11: {}
@@ -5123,10 +5498,16 @@ snapshots:
     dependencies:
       hermes-estree: 0.25.1
 
+  hls.js@1.6.16: {}
+
+  ieee754@1.2.1: {}
+
   ignore@5.3.2: {}
 
   ignore@7.0.5: {}
 
+  immediate@3.0.6: {}
+
   immer@10.2.0: {}
 
   immer@11.1.8: {}
@@ -5219,6 +5600,8 @@ snapshots:
 
   is-number@7.0.0: {}
 
+  is-promise@2.2.2: {}
+
   is-regex@1.2.1:
     dependencies:
       call-bound: 1.0.4
@@ -5271,6 +5654,13 @@ snapshots:
       has-symbols: 1.1.0
       set-function-name: 2.0.2
 
+  its-fine@2.0.0(@types/react@19.2.15)(react@19.2.3):
+    dependencies:
+      '@types/react-reconciler': 0.28.9(@types/react@19.2.15)
+      react: 19.2.3
+    transitivePeerDependencies:
+      - '@types/react'
+
   jiti@2.7.0: {}
 
   js-tokens@4.0.0: {}
@@ -5319,6 +5709,10 @@ snapshots:
       prelude-ls: 1.2.1
       type-check: 0.4.0
 
+  lie@3.3.0:
+    dependencies:
+      immediate: 3.0.6
+
   lightningcss-android-arm64@1.32.0:
     optional: true
 
@@ -5386,6 +5780,11 @@ snapshots:
     dependencies:
       react: 19.2.3
 
+  maath@0.10.8(@types/three@0.184.1)(three@0.184.0):
+    dependencies:
+      '@types/three': 0.184.1
+      three: 0.184.0
+
   magic-string@0.30.21:
     dependencies:
       '@jridgewell/sourcemap-codec': 1.5.5
@@ -5394,6 +5793,12 @@ snapshots:
 
   merge2@1.4.1: {}
 
+  meshline@3.3.1(three@0.184.0):
+    dependencies:
+      three: 0.184.0
+
+  meshoptimizer@1.1.1: {}
+
   micromatch@4.0.8:
     dependencies:
       braces: 3.0.3
@@ -5557,8 +5962,15 @@ snapshots:
       picocolors: 1.1.1
       source-map-js: 1.2.1
 
+  potpack@1.0.2: {}
+
   prelude-ls@1.2.1: {}
 
+  promise-worker-transferable@1.0.4:
+    dependencies:
+      is-promise: 2.2.2
+      lie: 3.3.0
+
   prop-types@15.8.1:
     dependencies:
       loose-envify: 1.4.0
@@ -5629,6 +6041,12 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.2.15
 
+  react-use-measure@2.1.7(react-dom@19.2.3(react@19.2.3))(react@19.2.3):
+    dependencies:
+      react: 19.2.3
+    optionalDependencies:
+      react-dom: 19.2.3(react@19.2.3)
+
   react@19.2.3: {}
 
   recharts@3.6.0(@types/react@19.2.15)(react-dom@19.2.3(react@19.2.3))(react-is@16.13.1)(react@19.2.3)(redux@5.0.1):
@@ -5677,6 +6095,8 @@ snapshots:
       gopd: 1.2.0
       set-function-name: 2.0.2
 
+  require-from-string@2.0.2: {}
+
   reselect@5.1.1: {}
 
   resolve-from@4.0.0: {}
@@ -5820,6 +6240,13 @@ snapshots:
 
   stable-hash@0.0.5: {}
 
+  stats-gl@2.4.2(@types/three@0.184.1)(three@0.184.0):
+    dependencies:
+      '@types/three': 0.184.1
+      three: 0.184.0
+
+  stats.js@0.17.0: {}
+
   stop-iteration-iterator@1.1.0:
     dependencies:
       es-errors: 1.3.0
@@ -5892,12 +6319,32 @@ snapshots:
 
   supports-preserve-symlinks-flag@1.0.0: {}
 
+  suspend-react@0.1.3(react@19.2.3):
+    dependencies:
+      react: 19.2.3
+
   tailwind-merge@3.6.0: {}
 
   tailwindcss@4.3.0: {}
 
   tapable@2.3.3: {}
 
+  three-mesh-bvh@0.8.3(three@0.184.0):
+    dependencies:
+      three: 0.184.0
+
+  three-stdlib@2.36.1(three@0.184.0):
+    dependencies:
+      '@types/draco3d': 1.4.10
+      '@types/offscreencanvas': 2019.7.3
+      '@types/webxr': 0.5.24
+      draco3d: 1.5.7
+      fflate: 0.6.10
+      potpack: 1.0.2
+      three: 0.184.0
+
+  three@0.184.0: {}
+
   tiny-invariant@1.3.3: {}
 
   tinyglobby@0.2.16:
@@ -5909,6 +6356,20 @@ snapshots:
     dependencies:
       is-number: 7.0.0
 
+  troika-three-text@0.52.4(three@0.184.0):
+    dependencies:
+      bidi-js: 1.0.3
+      three: 0.184.0
+      troika-three-utils: 0.52.4(three@0.184.0)
+      troika-worker-utils: 0.52.0
+      webgl-sdf-generator: 1.1.1
+
+  troika-three-utils@0.52.4(three@0.184.0):
+    dependencies:
+      three: 0.184.0
+
+  troika-worker-utils@0.52.0: {}
+
   ts-api-utils@2.5.0(typescript@5.9.3):
     dependencies:
       typescript: 5.9.3
@@ -5922,6 +6383,14 @@ snapshots:
 
   tslib@2.8.1: {}
 
+  tunnel-rat@0.1.2(@types/react@19.2.15)(immer@11.1.8)(react@19.2.3):
+    dependencies:
+      zustand: 4.5.7(@types/react@19.2.15)(immer@11.1.8)(react@19.2.3)
+    transitivePeerDependencies:
+      - '@types/react'
+      - immer
+      - react
+
   tw-animate-css@1.4.0: {}
 
   type-check@0.4.0:
@@ -6039,6 +6508,8 @@ snapshots:
     dependencies:
       react: 19.2.3
 
+  utility-types@3.11.0: {}
+
   vaul@1.1.2(@types/react-dom@19.2.3(@types/react@19.2.15))(@types/react@19.2.15)(react-dom@19.2.3(react@19.2.3))(react@19.2.3):
     dependencies:
       '@radix-ui/react-dialog': 1.1.15(@types/react-dom@19.2.3(@types/react@19.2.15))(@types/react@19.2.15)(react-dom@19.2.3(react@19.2.3))(react@19.2.3)
@@ -6065,6 +6536,10 @@ snapshots:
       d3-time: 3.1.0
       d3-timer: 3.0.1
 
+  webgl-constants@1.1.1: {}
+
+  webgl-sdf-generator@1.1.1: {}
+
   which-boxed-primitive@1.1.1:
     dependencies:
       is-bigint: 1.1.0
@@ -6122,6 +6597,14 @@ snapshots:
 
   zod@4.4.3: {}
 
+  zustand@4.5.7(@types/react@19.2.15)(immer@11.1.8)(react@19.2.3):
+    dependencies:
+      use-sync-external-store: 1.6.0(react@19.2.3)
+    optionalDependencies:
+      '@types/react': 19.2.15
+      immer: 11.1.8
+      react: 19.2.3
+
   zustand@5.0.13(@types/react@19.2.15)(immer@11.1.8)(react@19.2.3)(use-sync-external-store@1.6.0(react@19.2.3)):
     optionalDependencies:
       '@types/react': 19.2.15

src/app/(auth)/sign-in/components/login-form-1.tsx

@@ -88,6 +88,24 @@ export function LoginForm1({
                 />
               </div>
 
+              {state.mfaRequired && (
+                <div className="grid gap-2">
+                  <Label htmlFor="otp">Authenticator kodu</Label>
+                  <Input
+                    id="otp"
+                    name="otp"
+                    inputMode="numeric"
+                    pattern="[0-9]*"
+                    maxLength={6}
+                    autoComplete="one-time-code"
+                    autoFocus
+                    placeholder="000000"
+                    className="font-mono text-lg tracking-widest"
+                    required
+                  />
+                </div>
+              )}
+
               {state.error && (
                 <p className="text-destructive text-sm text-center" role="alert">
                   {state.error}

src/app/(dashboard)/dashboard/page.tsx

@@ -1,6 +1,8 @@
 import Link from "next/link";
 import { redirect } from "next/navigation";
-import { ArrowRight, FlaskConical, Link2, Plus, Stethoscope } from "lucide-react";
+import { AlertCircle, ArrowRight, FlaskConical, Link2, Plus, Stethoscope } from "lucide-react";
+
+import { DueBadge } from "@/components/due-badge";
 
 import { Badge } from "@/components/ui/badge";
 import { Button } from "@/components/ui/button";
@@ -109,6 +111,34 @@ export default async function DashboardPage() {
         />
       </div>
 
+      {data.overdueJobs.length > 0 && (
+        <Card className="border-destructive/40 bg-destructive/5">
+          <CardHeader>
+            <CardTitle className="flex items-center gap-2 text-base">
+              <AlertCircle className="text-destructive size-4" />
+              Geciken İşler ({data.overdueJobs.length})
+            </CardTitle>
+            <CardDescription>
+              Termin tarihi geçmiş ve henüz teslim edilmemiş işler.
+            </CardDescription>
+          </CardHeader>
+          <CardContent>
+            <ul className="divide-y rounded-md border bg-background">
+              {data.overdueJobs.map((j) => (
+                <li key={j.$id} className="flex items-center gap-3 px-3 py-2 text-sm">
+                  <Link href={`/jobs/${j.$id}`} className="flex-1 min-w-0 hover:underline">
+                    <span className="font-medium">{j.counterpartName ?? "—"}</span>
+                    <span className="text-muted-foreground"> · </span>
+                    <span className="font-mono text-xs">{j.patientCode}</span>
+                  </Link>
+                  <DueBadge job={j} />
+                </li>
+              ))}
+            </ul>
+          </CardContent>
+        </Card>
+      )}
+
       {isClinic && data.approvedConnectionsCount === 0 && (
         <Card className="border-primary/20 bg-primary/5">
           <CardHeader>
@@ -219,23 +249,34 @@ export default async function DashboardPage() {
               </p>
             ) : (
               <ul className="divide-y">
-                {data.recentNotifications.map((n) => (
+                {data.recentNotifications.map((n) => {
+                  const isWarning = n.severity === "warning";
+                  return (
                   <li
                     key={n.$id}
                     className={`flex items-start gap-3 py-2.5 ${n.read ? "opacity-70" : ""}`}
                   >
                     <span
-                      className={`mt-1.5 size-2 shrink-0 rounded-full ${n.read ? "bg-muted" : "bg-primary"}`}
+                      className={`mt-1.5 size-2 shrink-0 rounded-full ${
+                        n.read
+                          ? "bg-muted"
+                          : isWarning
+                            ? "bg-amber-500"
+                            : "bg-primary"
+                      }`}
                       aria-hidden
                     />
                     <div className="min-w-0 flex-1">
-                      <p className="text-sm leading-tight">{n.message}</p>
+                      <p className={`text-sm leading-tight ${isWarning && !n.read ? "font-medium" : ""}`}>
+                        {n.message}
+                      </p>
                       <p className="text-muted-foreground mt-0.5 text-xs">
                         {datetimeFormatter.format(new Date(n.$createdAt))}
                       </p>
                     </div>
                   </li>
-                ))}
+                  );
+                })}
               </ul>
             )}
           </CardContent>

src/app/(dashboard)/finance/components/my-pending-payments-card.tsx

@@ -0,0 +1,138 @@
+"use client";
+
+import { useActionState, useEffect } from "react";
+import Link from "next/link";
+import { useRouter } from "next/navigation";
+import { FileText, Loader2, Trash2 } from "lucide-react";
+import { toast } from "sonner";
+
+import { Badge } from "@/components/ui/badge";
+import { Button } from "@/components/ui/button";
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@/components/ui/card";
+import { deletePaymentAction } from "@/lib/appwrite/payment-actions";
+import {
+  PAYMENT_METHOD_LABELS,
+  initialPaymentActionState,
+} from "@/lib/appwrite/payment-types";
+import type { Payment } from "@/lib/appwrite/schema";
+
+const dateFormatter = new Intl.DateTimeFormat("tr-TR", {
+  day: "2-digit",
+  month: "2-digit",
+  year: "numeric",
+});
+
+function formatMoney(amount: number, currency: string): string {
+  try {
+    return new Intl.NumberFormat("tr-TR", { style: "currency", currency }).format(amount);
+  } catch {
+    return `${amount.toFixed(2)} ${currency}`;
+  }
+}
+
+export function MyPendingPaymentsCard({
+  rows,
+  counterpartNames,
+}: {
+  rows: Payment[];
+  counterpartNames: Record<string, string>;
+}) {
+  if (rows.length === 0) return null;
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Gönderdiğim Ödemeler</CardTitle>
+        <CardDescription>
+          Laboratuvar onayı bekleyen veya reddedilen bildirimleriniz. Onaylanan
+          ödemeler artık burada gözükmez — açık bakiyenize işlenir.
+        </CardDescription>
+      </CardHeader>
+      <CardContent>
+        <ul className="divide-y rounded-md border">
+          {rows.map((p) => (
+            <Row
+              key={p.$id}
+              payment={p}
+              counterpartName={counterpartNames[p.counterpartTenantId] ?? "—"}
+            />
+          ))}
+        </ul>
+      </CardContent>
+    </Card>
+  );
+}
+
+function Row({
+  payment,
+  counterpartName,
+}: {
+  payment: Payment;
+  counterpartName: string;
+}) {
+  const router = useRouter();
+  const [state, action, pending] = useActionState(
+    deletePaymentAction,
+    initialPaymentActionState,
+  );
+
+  useEffect(() => {
+    if (state.ok) {
+      toast.success("Bildirim silindi.");
+      router.refresh();
+    } else if (state.error) {
+      toast.error(state.error);
+    }
+  }, [state, router]);
+
+  const isPending = payment.status === "pending";
+  const isRejected = payment.status === "rejected";
+
+  return (
+    <li className="flex flex-wrap items-center gap-3 px-3 py-3">
+      <div className="min-w-0 flex-1">
+        <p className="truncate font-medium">{counterpartName}</p>
+        <p className="text-muted-foreground text-xs">
+          {dateFormatter.format(new Date(payment.paymentDate))}
+          {payment.method && (
+            <> · {PAYMENT_METHOD_LABELS[payment.method] ?? payment.method}</>
+          )}
+          {payment.notes && <> · {payment.notes}</>}
+        </p>
+      </div>
+      <div className="text-right">
+        <p className="text-base font-semibold tabular-nums">
+          {formatMoney(payment.amount, payment.currency)}
+        </p>
+        <Badge
+          variant="outline"
+          className={
+            isPending
+              ? "text-amber-600 dark:text-amber-400"
+              : isRejected
+                ? "text-destructive"
+                : ""
+          }
+        >
+          {isPending ? "Onay bekliyor" : isRejected ? "Reddedildi" : "Onaylandı"}
+        </Badge>
+      </div>
+      <div className="flex gap-2">
+        <Button asChild size="sm" variant="outline">
+          <Link href={`/finance/payments/${payment.$id}/receipt`}>
+            <FileText className="size-4" />
+            Makbuz
+          </Link>
+        </Button>
+        {isPending && (
+          <form action={action}>
+            <input type="hidden" name="id" value={payment.$id} />
+            <Button type="submit" size="sm" variant="outline" disabled={pending}>
+              {pending ? <Loader2 className="size-4 animate-spin" /> : <Trash2 className="size-4" />}
+              Geri al
+            </Button>
+          </form>
+        )}
+      </div>
+    </li>
+  );
+}

src/app/(dashboard)/finance/page.tsx

@@ -12,6 +12,7 @@ import {
 import { requireTenant } from "@/lib/appwrite/tenant-guard";
 import { BalancesCard } from "./components/balances-card";
 import { FinanceTable } from "./components/finance-table";
+import { MyPendingPaymentsCard } from "./components/my-pending-payments-card";
 import { PendingPaymentsCard } from "./components/pending-payments-card";
 
 export const metadata = {
@@ -61,6 +62,16 @@ export default async function FinancePage() {
     payments,
   });
   const pendingForApproval = filterPendingForConfirmation(payments, ctx.tenantId, kind);
+  // Clinic-side: payments this clinic submitted that are either still waiting
+  // for the lab to confirm, or were rejected. Both shapes are useful so the
+  // clinic can chase the lab or fix a wrong submission.
+  const myPendingOrRejected = payments
+    .filter(
+      (p) =>
+        p.tenantId === ctx.tenantId &&
+        (p.status === "pending" || p.status === "rejected"),
+    )
+    .sort((a, b) => (a.paymentDate < b.paymentDate ? 1 : -1));
 
   const counterpartNames: Record<string, string> = {};
   for (const c of connections) {
@@ -117,6 +128,13 @@ export default async function FinancePage() {
 
       <PendingPaymentsCard rows={pendingForApproval} counterpartNames={counterpartNames} />
 
+      {!isLab && (
+        <MyPendingPaymentsCard
+          rows={myPendingOrRejected}
+          counterpartNames={counterpartNames}
+        />
+      )}
+
       <BalancesCard
         balances={balances}
         counterpartNames={counterpartNames}

src/app/(dashboard)/finance/payments/[paymentId]/receipt/components/receipt-controls.tsx

@@ -0,0 +1,23 @@
+"use client";
+
+import Link from "next/link";
+import { ArrowLeft, Printer } from "lucide-react";
+
+import { Button } from "@/components/ui/button";
+
+export function ReceiptControls() {
+  return (
+    <div className="mb-4 flex flex-wrap items-center justify-between gap-2 print:hidden">
+      <Button asChild variant="outline" size="sm">
+        <Link href="/finance">
+          <ArrowLeft className="size-4" />
+          Finansa dön
+        </Link>
+      </Button>
+      <Button onClick={() => window.print()} size="sm">
+        <Printer className="size-4" />
+        Yazdır / PDF
+      </Button>
+    </div>
+  );
+}

src/app/(dashboard)/finance/payments/[paymentId]/receipt/page.tsx

@@ -0,0 +1,186 @@
+import { notFound, redirect } from "next/navigation";
+import { Query } from "node-appwrite";
+
+import { ReceiptControls } from "./components/receipt-controls";
+import {
+  DATABASE_ID,
+  TABLES,
+  type Payment,
+  type TenantSettings,
+} from "@/lib/appwrite/schema";
+import { createAdminClient } from "@/lib/appwrite/server";
+import { PAYMENT_METHOD_LABELS } from "@/lib/appwrite/payment-types";
+import { requireTenant } from "@/lib/appwrite/tenant-guard";
+
+export const metadata = {
+  title: "DLS — Makbuz",
+};
+
+const dateFormatter = new Intl.DateTimeFormat("tr-TR", {
+  day: "2-digit",
+  month: "long",
+  year: "numeric",
+});
+
+function formatMoney(amount: number, currency: string): string {
+  try {
+    return new Intl.NumberFormat("tr-TR", { style: "currency", currency }).format(amount);
+  } catch {
+    return `${amount.toFixed(2)} ${currency}`;
+  }
+}
+
+async function loadTenantSettings(tenantId: string): Promise<TenantSettings | null> {
+  const { tablesDB } = createAdminClient();
+  try {
+    const result = await tablesDB.listRows({
+      databaseId: DATABASE_ID,
+      tableId: TABLES.tenantSettings,
+      queries: [Query.equal("tenantId", tenantId), Query.limit(1)],
+    });
+    return (result.rows[0] as unknown as TenantSettings) ?? null;
+  } catch {
+    return null;
+  }
+}
+
+export default async function PaymentReceiptPage({
+  params,
+}: {
+  params: Promise<{ paymentId: string }>;
+}) {
+  const { paymentId } = await params;
+
+  let ctx;
+  try {
+    ctx = await requireTenant();
+  } catch {
+    redirect("/onboarding");
+  }
+
+  const { tablesDB } = createAdminClient();
+  let payment: Payment;
+  try {
+    payment = (await tablesDB.getRow(
+      DATABASE_ID,
+      TABLES.payments,
+      paymentId,
+    )) as unknown as Payment;
+  } catch {
+    notFound();
+  }
+
+  // Only the two parties can see the receipt.
+  if (
+    payment.tenantId !== ctx.tenantId &&
+    payment.counterpartTenantId !== ctx.tenantId
+  ) {
+    notFound();
+  }
+
+  // 'inflow' means the lab received money from the clinic.
+  // From the row alone we know whose tenantId is which side because the lab
+  // always issues inflow and the clinic outflow. Resolve them so the
+  // receipt header reads naturally regardless of who recorded the row.
+  const labId = payment.direction === "inflow" ? payment.tenantId : payment.counterpartTenantId;
+  const clinicId = payment.direction === "inflow" ? payment.counterpartTenantId : payment.tenantId;
+  const [lab, clinic] = await Promise.all([
+    loadTenantSettings(labId),
+    loadTenantSettings(clinicId),
+  ]);
+
+  const statusLabel =
+    payment.status === "confirmed"
+      ? "Onaylı"
+      : payment.status === "pending"
+        ? "Onay bekliyor"
+        : payment.status === "rejected"
+          ? "Reddedildi"
+          : "—";
+
+  return (
+    <div className="bg-muted/40 min-h-screen px-6 py-8 print:bg-white print:p-0">
+      <div className="mx-auto max-w-2xl">
+        <ReceiptControls />
+        <article className="bg-card text-card-foreground rounded-lg border p-8 shadow-sm print:rounded-none print:border-0 print:shadow-none">
+          <header className="border-b pb-4">
+            <p className="text-muted-foreground text-xs uppercase tracking-wide">
+              Tahsilat Makbuzu
+            </p>
+            <h1 className="text-2xl font-bold tracking-tight">
+              {lab?.companyName ?? "Laboratuvar"}
+            </h1>
+            {lab?.companyTaxId && (
+              <p className="text-muted-foreground text-sm">VKN: {lab.companyTaxId}</p>
+            )}
+            {lab?.companyAddress && (
+              <p className="text-muted-foreground whitespace-pre-wrap text-sm">
+                {lab.companyAddress}
+              </p>
+            )}
+          </header>
+
+          <section className="grid gap-4 py-6 sm:grid-cols-2">
+            <div>
+              <p className="text-muted-foreground text-xs font-medium uppercase tracking-wide">
+                Tahsil edilen
+              </p>
+              <p className="font-medium">{clinic?.companyName ?? "Klinik"}</p>
+              {clinic?.companyTaxId && (
+                <p className="text-muted-foreground text-xs">VKN: {clinic.companyTaxId}</p>
+              )}
+            </div>
+            <div className="sm:text-right">
+              <p className="text-muted-foreground text-xs font-medium uppercase tracking-wide">
+                Ödeme tarihi
+              </p>
+              <p className="font-medium">
+                {dateFormatter.format(new Date(payment.paymentDate))}
+              </p>
+            </div>
+          </section>
+
+          <section className="border-y py-6">
+            <p className="text-muted-foreground text-xs font-medium uppercase tracking-wide">
+              Tutar
+            </p>
+            <p className="text-3xl font-semibold tabular-nums">
+              {formatMoney(payment.amount, payment.currency)}
+            </p>
+          </section>
+
+          <section className="grid gap-4 py-6 sm:grid-cols-2 text-sm">
+            <div>
+              <p className="text-muted-foreground text-xs font-medium uppercase tracking-wide">
+                Ödeme yöntemi
+              </p>
+              <p>
+                {payment.method
+                  ? (PAYMENT_METHOD_LABELS[payment.method] ?? payment.method)
+                  : "—"}
+              </p>
+            </div>
+            <div>
+              <p className="text-muted-foreground text-xs font-medium uppercase tracking-wide">
+                Durum
+              </p>
+              <p>{statusLabel}</p>
+            </div>
+            {payment.notes && (
+              <div className="sm:col-span-2">
+                <p className="text-muted-foreground text-xs font-medium uppercase tracking-wide">
+                  Not
+                </p>
+                <p className="whitespace-pre-wrap">{payment.notes}</p>
+              </div>
+            )}
+          </section>
+
+          <footer className="text-muted-foreground border-t pt-4 text-xs">
+            Makbuz no: {payment.$id} · Düzenlendi: {dateFormatter.format(new Date(payment.$createdAt))}
+          </footer>
+        </article>
+      </div>
+    </div>
+  );
+}

src/app/(dashboard)/jobs/[jobId]/components/job-actions-panel.tsx

@@ -1,7 +1,6 @@
 "use client";
 
 import { useActionState, useEffect, useState } from "react";
-import { useRouter } from "next/navigation";
 import {
   ArrowRight,
   Check,
@@ -9,6 +8,7 @@ import {
   Loader2,
   PackageCheck,
   Play,
+  RotateCcw,
   Send,
   X,
 } from "lucide-react";
@@ -32,6 +32,7 @@ import {
   cancelJobAction,
   handToClinicAction,
   markDeliveredAction,
+  requestRevisionAction,
 } from "@/lib/appwrite/job-actions";
 import { initialJobActionState } from "@/lib/appwrite/job-types";
 import type { Job, TenantKind } from "@/lib/appwrite/schema";
@@ -67,7 +68,10 @@ export function JobActionsPanel({
 
       {/* Clinic finished the prova — approve and send back to lab */}
       {isClinic && job.status === "in_progress" && isAtClinic && (
-        <ApproveAtClinicButton job={job} />
+        <>
+          <ApproveAtClinicButton job={job} />
+          <RequestRevisionButton job={job} />
+        </>
       )}
 
       {/* Final delivery — clinic took it from the lab */}
@@ -82,17 +86,13 @@ export function JobActionsPanel({
 }
 
 function AcceptButton({ jobId }: { jobId: string }) {
-  const router = useRouter();
   const [state, action, pending] = useActionState(acceptJobAction, initialJobActionState);
 
   useEffect(() => {
-    if (state.ok) {
+    // Success path redirects from the server action, so state.ok never
-      toast.success("İş işleme alındı, alt yapı üretimi başladı.");
+    // shows up here — we only need to surface errors.
-      router.refresh();
+    if (state.error) toast.error(state.error);
-    } else if (state.error) {
+  }, [state]);
-      toast.error(state.error);
-    }
-  }, [state, router]);
 
   return (
     <form action={action}>
@@ -106,19 +106,12 @@ function AcceptButton({ jobId }: { jobId: string }) {
 }
 
 function HandToClinicButton({ job }: { job: Job }) {
-  const router = useRouter();
   const [state, action, pending] = useActionState(handToClinicAction, initialJobActionState);
   const [open, setOpen] = useState(false);
 
   useEffect(() => {
-    if (state.ok) {
+    if (state.error) toast.error(state.error);
-      toast.success("Klinik tarafına gönderildi.");
+  }, [state]);
-      setOpen(false);
-      router.refresh();
-    } else if (state.error) {
-      toast.error(state.error);
-    }
-  }, [state, router]);
 
   const isFinal = job.currentStep === "cila_bitim";
   const stageLabel =
@@ -175,19 +168,12 @@ function HandToClinicButton({ job }: { job: Job }) {
 }
 
 function ApproveAtClinicButton({ job }: { job: Job }) {
-  const router = useRouter();
   const [state, action, pending] = useActionState(approveAtClinicAction, initialJobActionState);
   const [open, setOpen] = useState(false);
 
   useEffect(() => {
-    if (state.ok) {
+    if (state.error) toast.error(state.error);
-      toast.success("Prova onaylandı, lab tarafına gönderildi.");
+  }, [state]);
-      setOpen(false);
-      router.refresh();
-    } else if (state.error) {
-      toast.error(state.error);
-    }
-  }, [state, router]);
 
   const stageLabel = job.currentStep === "alt_yapi_prova" ? "alt yapı" : "üst yapı";
 
@@ -236,18 +222,67 @@ function ApproveAtClinicButton({ job }: { job: Job }) {
   );
 }
 
+function RequestRevisionButton({ job }: { job: Job }) {
+  const [state, action, pending] = useActionState(
+    requestRevisionAction,
+    initialJobActionState,
+  );
+  const [open, setOpen] = useState(false);
+
+  useEffect(() => {
+    if (state.error) toast.error(state.error);
+  }, [state]);
+
+  return (
+    <Dialog open={open} onOpenChange={setOpen}>
+      <Button variant="outline" onClick={() => setOpen(true)}>
+        <RotateCcw className="size-4" />
+        Düzeltme İste
+      </Button>
+      <DialogContent>
+        <DialogHeader>
+          <DialogTitle>Provayı reddet, lab&apos;a geri gönder</DialogTitle>
+          <DialogDescription>
+            Bu aşamayı reddettiğinizde iş aynı adımda kalır ve laboratuvar
+            yeniden çalışır. Neyin düzeltilmesi gerektiğini lütfen yazın.
+          </DialogDescription>
+        </DialogHeader>
+        <form action={action} className="grid gap-3">
+          <input type="hidden" name="jobId" value={job.$id} />
+          <div className="grid gap-2">
+            <Label htmlFor="note">Düzeltme notu *</Label>
+            <Textarea
+              id="note"
+              name="note"
+              rows={4}
+              required
+              maxLength={1000}
+              placeholder="Örn. Distalde temas yok, oklüzyon yüksek geldi."
+            />
+          </div>
+          <DialogFooter>
+            <DialogClose asChild>
+              <Button type="button" variant="outline">
+                Vazgeç
+              </Button>
+            </DialogClose>
+            <Button type="submit" variant="destructive" disabled={pending}>
+              {pending ? <Loader2 className="size-4 animate-spin" /> : <RotateCcw className="size-4" />}
+              Düzeltme İste
+            </Button>
+          </DialogFooter>
+        </form>
+      </DialogContent>
+    </Dialog>
+  );
+}
+
 function DeliverButton({ jobId }: { jobId: string }) {
-  const router = useRouter();
   const [state, action, pending] = useActionState(markDeliveredAction, initialJobActionState);
 
   useEffect(() => {
-    if (state.ok) {
+    if (state.error) toast.error(state.error);
-      toast.success("İş teslim alındı.");
+  }, [state]);
-      router.refresh();
-    } else if (state.error) {
-      toast.error(state.error);
-    }
-  }, [state, router]);
 
   return (
     <form action={action}>
@@ -261,19 +296,12 @@ function DeliverButton({ jobId }: { jobId: string }) {
 }
 
 function CancelButton({ jobId }: { jobId: string }) {
-  const router = useRouter();
   const [state, action, pending] = useActionState(cancelJobAction, initialJobActionState);
   const [open, setOpen] = useState(false);
 
   useEffect(() => {
-    if (state.ok) {
+    if (state.error) toast.error(state.error);
-      toast.success("İş iptal edildi.");
+  }, [state]);
-      setOpen(false);
-      router.refresh();
-    } else if (state.error) {
-      toast.error(state.error);
-    }
-  }, [state, router]);
 
   return (
     <Dialog open={open} onOpenChange={setOpen}>

src/app/(dashboard)/jobs/[jobId]/components/job-files-panel.tsx

@@ -2,7 +2,8 @@
 
 import { useActionState, useEffect, useRef, useState } from "react";
 import { useRouter } from "next/navigation";
-import { Download, FileText, ImageIcon, Layers, Loader2, Trash2, Upload } from "lucide-react";
+import dynamic from "next/dynamic";
+import { Download, Eye, FileText, ImageIcon, Layers, Loader2, Trash2, Upload } from "lucide-react";
 import { toast } from "sonner";
 
 import { Badge } from "@/components/ui/badge";
@@ -24,6 +25,15 @@ import {
 } from "@/lib/appwrite/job-file-types";
 import type { JobFileWithUrl } from "@/lib/appwrite/job-file-queries";
 
+// three.js + react-three is ~500KB minified; only load it when the user
+// actually opens the viewer dialog.
+const STLViewer = dynamic(
+  () => import("@/components/stl-viewer").then((m) => m.STLViewer),
+  { ssr: false, loading: () => null },
+);
+
+const VIEWABLE_RE = /\.(stl|ply|obj)$/i;
+
 function formatSize(bytes: number): string {
   if (bytes < 1024) return `${bytes} B`;
   if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`;
@@ -243,6 +253,9 @@ function FileRow({ file }: { file: JobFileWithUrl }) {
   const router = useRouter();
   const [open, setOpen] = useState(false);
   const [downloadOpen, setDownloadOpen] = useState(false);
+  const [viewerOpen, setViewerOpen] = useState(false);
+  const isArchived = Boolean(file.archivedAt);
+  const isViewable = !isArchived && VIEWABLE_RE.test(file.name);
 
   useEffect(() => {
     if (state.ok) {
@@ -269,19 +282,55 @@ function FileRow({ file }: { file: JobFileWithUrl }) {
   }
 
   return (
-    <li className="flex items-center gap-3 px-3 py-2">
+    <li className={`flex items-center gap-3 px-3 py-2 ${isArchived ? "opacity-60" : ""}`}>
       <span className="text-muted-foreground">{kindIcon(file.kind)}</span>
       <div className="flex-1 min-w-0">
         <p className="truncate text-sm font-medium">{file.name}</p>
         <p className="text-muted-foreground text-xs">
           {JOB_FILE_KIND_LABELS[file.kind] ?? file.kind} · {formatSize(file.size)}
+          {isArchived && (
+            <>
+              {" · "}
+              <span className="text-amber-600 dark:text-amber-400">
+                Arşivlendi {new Date(file.archivedAt!).toLocaleDateString("tr-TR")}
+              </span>
+            </>
+          )}
         </p>
       </div>
       <Badge variant="outline" className="hidden sm:inline-flex">
         {JOB_FILE_KIND_LABELS[file.kind] ?? file.kind}
       </Badge>
+      {isViewable && (
+        <Dialog open={viewerOpen} onOpenChange={setViewerOpen}>
+          <Button
+            size="sm"
+            variant="outline"
+            onClick={() => setViewerOpen(true)}
+          >
+            <Eye className="size-4" />
+          </Button>
+          <DialogContent className="h-[85vh] max-w-5xl gap-0 p-0">
+            <DialogHeader className="border-b px-4 py-3">
+              <DialogTitle className="truncate text-base">{file.name}</DialogTitle>
+              <DialogDescription className="text-xs">
+                {formatSize(file.size)} · Sürükleyerek döndürün, kaydırarak yaklaşın.
+              </DialogDescription>
+            </DialogHeader>
+            <div className="min-h-0 flex-1">
+              {viewerOpen && <STLViewer url={file.url} filename={file.name} />}
+            </div>
+          </DialogContent>
+        </Dialog>
+      )}
       <Dialog open={downloadOpen} onOpenChange={setDownloadOpen}>
-        <Button size="sm" variant="outline" onClick={() => setDownloadOpen(true)}>
+        <Button
+          size="sm"
+          variant="outline"
+          onClick={() => setDownloadOpen(true)}
+          disabled={isArchived}
+          title={isArchived ? "Bu dosya arşivlendi; indirilebilir kopyası yok." : undefined}
+        >
           <Download className="size-4" />
         </Button>
         <DialogContent>

src/app/(dashboard)/jobs/[jobId]/page.tsx

@@ -3,6 +3,7 @@ import { notFound, redirect } from "next/navigation";
 import { Query } from "node-appwrite";
 
 import { Badge } from "@/components/ui/badge";
+import { DueBadge } from "@/components/due-badge";
 import { Button } from "@/components/ui/button";
 import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@/components/ui/card";
 import { listJobFiles } from "@/lib/appwrite/job-file-queries";
@@ -116,9 +117,12 @@ export default async function JobDetailPage({
           </p>
         </div>
         <div className="flex flex-col items-end gap-3">
-          <Badge variant="secondary" className="text-sm">
+          <div className="flex items-center gap-2">
-            {JOB_STATUS_LABELS[job.status]}
+            <DueBadge job={job} />
-          </Badge>
+            <Badge variant="secondary" className="text-sm">
+              {JOB_STATUS_LABELS[job.status]}
+            </Badge>
+          </div>
           <JobActionsPanel job={job} side={side} kind={ctx.kind} />
         </div>
       </div>
@@ -255,33 +259,55 @@ export default async function JobDetailPage({
         </CardContent>
       </Card>
 
-      {history.length > 0 && (
+      <Card>
-        <Card>
+        <CardHeader>
-          <CardHeader>
+          <CardTitle>Akış Geçmişi</CardTitle>
-            <CardTitle>Aşama Geçmişi</CardTitle>
+          <CardDescription>
-            <CardDescription>Tamamlanan aşamaların kaydı.</CardDescription>
+            İşin aşama transition&apos;ları, kim yaptı ve hangi notla.
-          </CardHeader>
+          </CardDescription>
-          <CardContent>
+        </CardHeader>
-            <ol className="space-y-3">
+        <CardContent>
-              {history.map((h) => (
+          {history.length === 0 ? (
-                <li key={h.$id} className="border-l-2 border-primary/30 pl-4">
+            <p className="text-muted-foreground text-sm">
-                  <div className="flex flex-wrap items-baseline gap-2">
+              Henüz aşama tamamlanmadı.
-                    <span className="font-medium">{JOB_STEP_LABELS[h.step]}</span>
+            </p>
-                    <span className="text-muted-foreground text-xs">
+          ) : (
-                      {dateFormatter.format(new Date(h.completedAt))}
+            <ol className="relative space-y-4 border-l-2 border-border pl-6">
-                    </span>
+              {history.map((h) => {
-                  </div>
+                const isRevision = h.note?.startsWith("[Düzeltme talebi]");
-                  {h.note && (
+                return (
-                    <p className="text-muted-foreground mt-1 whitespace-pre-wrap text-sm">
+                  <li key={h.$id} className="relative">
-                      {h.note}
+                    <span
-                    </p>
+                      className={`absolute -left-[1.85rem] mt-1.5 size-3 rounded-full ring-2 ring-background ${
-                  )}
+                        isRevision ? "bg-rose-500" : "bg-emerald-500"
-                </li>
+                      }`}
-              ))}
+                      aria-hidden
+                    />
+                    <div className="flex flex-wrap items-baseline gap-2">
+                      <span className="font-medium">
+                        {JOB_STEP_LABELS[h.step]}
+                      </span>
+                      {isRevision && (
+                        <span className="rounded bg-rose-100 px-1.5 py-0.5 text-xs font-medium text-rose-700 dark:bg-rose-950 dark:text-rose-300">
+                          Düzeltme talebi
+                        </span>
+                      )}
+                      <span className="text-muted-foreground text-xs tabular-nums">
+                        {dateFormatter.format(new Date(h.completedAt))}
+                      </span>
+                    </div>
+                    {h.note && (
+                      <p className="text-muted-foreground mt-1 whitespace-pre-wrap text-sm">
+                        {h.note.replace(/^\[Düzeltme talebi\]\s*/, "")}
+                      </p>
+                    )}
+                  </li>
+                );
+              })}
             </ol>
-          </CardContent>
+          )}
-        </Card>
+        </CardContent>
-      )}
+      </Card>
 
       <div>
         <Button asChild variant="outline">

src/app/(dashboard)/jobs/_components/jobs-filter-bar.tsx

@@ -0,0 +1,114 @@
+"use client";
+
+import { useEffect, useState, useTransition } from "react";
+import { usePathname, useRouter, useSearchParams } from "next/navigation";
+import { Search, X } from "lucide-react";
+
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@/components/ui/select";
+
+const STATUS_OPTIONS = [
+  { value: "all", label: "Tüm durumlar" },
+  { value: "pending", label: "Bekliyor" },
+  { value: "in_progress", label: "İşlemde" },
+  { value: "sent", label: "Gönderildi" },
+  { value: "delivered", label: "Teslim alındı" },
+  { value: "cancelled", label: "İptal" },
+];
+
+const LOCATION_OPTIONS = [
+  { value: "all", label: "Her yerde" },
+  { value: "at_lab", label: "Laboratuvarda" },
+  { value: "at_clinic", label: "Klinikte" },
+];
+
+export function JobsFilterBar() {
+  const router = useRouter();
+  const pathname = usePathname();
+  const params = useSearchParams();
+  const [, startTransition] = useTransition();
+
+  const [q, setQ] = useState(params.get("q") ?? "");
+  const status = params.get("status") ?? "all";
+  const location = params.get("location") ?? "all";
+
+  // Debounce text input so we don't refetch on every keystroke.
+  useEffect(() => {
+    const current = params.get("q") ?? "";
+    if (current === q) return;
+    const t = setTimeout(() => commit({ q }), 250);
+    return () => clearTimeout(t);
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [q]);
+
+  function commit(patch: Record<string, string | undefined>) {
+    const next = new URLSearchParams(params.toString());
+    for (const [key, value] of Object.entries(patch)) {
+      if (!value || value === "all") next.delete(key);
+      else next.set(key, value);
+    }
+    startTransition(() => {
+      router.replace(`${pathname}?${next.toString()}`);
+    });
+  }
+
+  const isFiltering =
+    q.trim() !== "" || status !== "all" || location !== "all";
+
+  return (
+    <div className="grid gap-3 sm:grid-cols-[minmax(0,1fr)_180px_180px_auto]">
+      <div className="relative">
+        <Search className="text-muted-foreground absolute left-3 top-1/2 size-4 -translate-y-1/2" />
+        <Input
+          value={q}
+          onChange={(e) => setQ(e.target.value)}
+          placeholder="Hasta kodu veya karşı taraf ara..."
+          className="pl-9"
+        />
+      </div>
+      <Select value={status} onValueChange={(v) => commit({ status: v })}>
+        <SelectTrigger>
+          <SelectValue />
+        </SelectTrigger>
+        <SelectContent>
+          {STATUS_OPTIONS.map((o) => (
+            <SelectItem key={o.value} value={o.value}>
+              {o.label}
+            </SelectItem>
+          ))}
+        </SelectContent>
+      </Select>
+      <Select value={location} onValueChange={(v) => commit({ location: v })}>
+        <SelectTrigger>
+          <SelectValue />
+        </SelectTrigger>
+        <SelectContent>
+          {LOCATION_OPTIONS.map((o) => (
+            <SelectItem key={o.value} value={o.value}>
+              {o.label}
+            </SelectItem>
+          ))}
+        </SelectContent>
+      </Select>
+      {isFiltering && (
+        <Button
+          variant="outline"
+          onClick={() => {
+            setQ("");
+            commit({ q: undefined, status: undefined, location: undefined });
+          }}
+        >
+          <X className="size-4" />
+          Temizle
+        </Button>
+      )}
+    </div>
+  );
+}

src/app/(dashboard)/jobs/_components/jobs-table.tsx

@@ -2,6 +2,7 @@ import Link from "next/link";
 
 import { Badge } from "@/components/ui/badge";
 import { Button } from "@/components/ui/button";
+import { DueBadge } from "@/components/due-badge";
 import {
   Table,
   TableBody,
@@ -63,6 +64,7 @@ export function JobsTable({
           <TableHead>Renk</TableHead>
           <TableHead>Tür</TableHead>
           <TableHead>Durum</TableHead>
+          <TableHead>Termin</TableHead>
           <TableHead>Tarih</TableHead>
           <TableHead className="text-right">İşlem</TableHead>
         </TableRow>
@@ -80,6 +82,16 @@ export function JobsTable({
             <TableCell>
               <Badge variant={statusVariant(j.status)}>{JOB_STATUS_LABELS[j.status]}</Badge>
             </TableCell>
+            <TableCell className="text-muted-foreground text-xs">
+              {j.dueDate ? (
+                <div className="flex flex-col gap-1">
+                  <span>{dateFormatter.format(new Date(j.dueDate))}</span>
+                  <DueBadge job={j} />
+                </div>
+              ) : (
+                "—"
+              )}
+            </TableCell>
             <TableCell className="text-muted-foreground text-xs">
               {dateFormatter.format(new Date(j.$createdAt))}
             </TableCell>

src/app/(dashboard)/jobs/inbound/components/bulk-accept-button.tsx

@@ -0,0 +1,68 @@
+"use client";
+
+import { useState, useTransition } from "react";
+import { useRouter } from "next/navigation";
+import { CheckCheck, Loader2 } from "lucide-react";
+import { toast } from "sonner";
+
+import { Button } from "@/components/ui/button";
+import {
+  Dialog,
+  DialogClose,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+} from "@/components/ui/dialog";
+import { bulkAcceptPendingJobsAction } from "@/lib/appwrite/job-actions";
+
+export function BulkAcceptButton({ count }: { count: number }) {
+  const router = useRouter();
+  const [open, setOpen] = useState(false);
+  const [pending, startTransition] = useTransition();
+
+  if (count === 0) return null;
+
+  function onConfirm() {
+    startTransition(async () => {
+      const res = await bulkAcceptPendingJobsAction();
+      if (res.ok) {
+        toast.success(`${res.accepted ?? 0} iş işleme alındı.`);
+        setOpen(false);
+        router.refresh();
+      } else {
+        toast.error(res.error ?? "İşlem başarısız.");
+      }
+    });
+  }
+
+  return (
+    <Dialog open={open} onOpenChange={setOpen}>
+      <Button size="sm" onClick={() => setOpen(true)}>
+        <CheckCheck className="size-4" />
+        Bekleyen {count} işi al
+      </Button>
+      <DialogContent>
+        <DialogHeader>
+          <DialogTitle>{count} iş işleme alınsın mı?</DialogTitle>
+          <DialogDescription>
+            Tüm bekleyen işler aynı anda işleme alınır; her birinde alt yapı
+            üretimine başlanmış sayılır. Klinikler ayrı ayrı bilgilendirilir.
+          </DialogDescription>
+        </DialogHeader>
+        <DialogFooter>
+          <DialogClose asChild>
+            <Button type="button" variant="outline">
+              Vazgeç
+            </Button>
+          </DialogClose>
+          <Button onClick={onConfirm} disabled={pending}>
+            {pending ? <Loader2 className="size-4 animate-spin" /> : <CheckCheck className="size-4" />}
+            Hepsini al
+          </Button>
+        </DialogFooter>
+      </DialogContent>
+    </Dialog>
+  );
+}

src/app/(dashboard)/jobs/inbound/page.tsx

@@ -3,13 +3,19 @@ import { redirect } from "next/navigation";
 import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@/components/ui/card";
 import { listInboundJobs } from "@/lib/appwrite/job-queries";
 import { requireTenant } from "@/lib/appwrite/tenant-guard";
+import { JobsFilterBar } from "../_components/jobs-filter-bar";
 import { JobsTable } from "../_components/jobs-table";
+import { BulkAcceptButton } from "./components/bulk-accept-button";
 
 export const metadata = {
   title: "DLS — Gelen İşler",
 };
 
-export default async function InboundJobsPage() {
+export default async function InboundJobsPage({
+  searchParams,
+}: {
+  searchParams: Promise<{ status?: string; location?: string; q?: string }>;
+}) {
   let ctx;
   try {
     ctx = await requireTenant();
@@ -17,18 +23,25 @@ export default async function InboundJobsPage() {
     redirect("/onboarding");
   }
 
-  // Inbound = jobs where this tenant is the lab side.
+  const sp = await searchParams;
-  // A clinic tenant can also receive jobs only via labTenantId match, which
+  const filters = {
-  // would be unusual; we still surface whatever matches.
+    status: sp.status && sp.status !== "all" ? sp.status : undefined,
-  const rows = ctx.kind === "lab" ? await listInboundJobs(ctx.tenantId) : [];
+    location: sp.location && sp.location !== "all" ? sp.location : undefined,
+    q: sp.q,
+  };
+  const rows = ctx.kind === "lab" ? await listInboundJobs(ctx.tenantId, filters) : [];
+  const pendingCount = rows.filter((j) => j.status === "pending").length;
 
   return (
     <div className="flex-1 space-y-6 px-6">
-      <div className="flex flex-col gap-1">
+      <div className="flex flex-wrap items-start justify-between gap-3">
-        <h1 className="text-2xl font-bold tracking-tight">Gelen İşler</h1>
+        <div className="flex flex-col gap-1">
-        <p className="text-muted-foreground text-sm">
+          <h1 className="text-2xl font-bold tracking-tight">Gelen İşler</h1>
-          Bağlı kliniklerden size yönlendirilmiş protez işleri.
+          <p className="text-muted-foreground text-sm">
-        </p>
+            Bağlı kliniklerden size yönlendirilmiş protez işleri.
+          </p>
+        </div>
+        {ctx.kind === "lab" && <BulkAcceptButton count={pendingCount} />}
       </div>
 
       <Card>
@@ -37,18 +50,21 @@ export default async function InboundJobsPage() {
           <CardDescription>
             {ctx.kind === "lab"
               ? rows.length === 0
-                ? "Henüz gelen iş yok."
+                ? "Filtreye uyan iş yok."
                 : `${rows.length} kalem`
               : "Bu sayfa laboratuvar hesapları içindir."}
           </CardDescription>
         </CardHeader>
-        <CardContent>
+        <CardContent className="space-y-4">
           {ctx.kind === "lab" ? (
-            <JobsTable
+            <>
-              rows={rows}
+              <JobsFilterBar />
-              counterpartLabel="Klinik"
+              <JobsTable
-              emptyMessage="Henüz size gönderilmiş iş yok. Klinik tarafa Bağlantı Kodunuzu paylaşın."
+                rows={rows}
-            />
+                counterpartLabel="Klinik"
+                emptyMessage="Filtreye uyan iş yok. Üstteki filtreleri değiştirin veya temizleyin."
+              />
+            </>
           ) : (
             <p className="text-muted-foreground py-6 text-center text-sm">
               Klinik hesabıyla giriş yaptınız — gelen iş listesi sadece laboratuvar tarafında görünür.

src/app/(dashboard)/jobs/outbound/page.tsx

@@ -3,13 +3,18 @@ import { redirect } from "next/navigation";
 import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@/components/ui/card";
 import { listOutboundJobs } from "@/lib/appwrite/job-queries";
 import { requireTenant } from "@/lib/appwrite/tenant-guard";
+import { JobsFilterBar } from "../_components/jobs-filter-bar";
 import { JobsTable } from "../_components/jobs-table";
 
 export const metadata = {
   title: "DLS — Giden İşler",
 };
 
-export default async function OutboundJobsPage() {
+export default async function OutboundJobsPage({
+  searchParams,
+}: {
+  searchParams: Promise<{ status?: string; location?: string; q?: string }>;
+}) {
   let ctx;
   try {
     ctx = await requireTenant();
@@ -17,7 +22,13 @@ export default async function OutboundJobsPage() {
     redirect("/onboarding");
   }
 
-  const rows = ctx.kind === "clinic" ? await listOutboundJobs(ctx.tenantId) : [];
+  const sp = await searchParams;
+  const filters = {
+    status: sp.status && sp.status !== "all" ? sp.status : undefined,
+    location: sp.location && sp.location !== "all" ? sp.location : undefined,
+    q: sp.q,
+  };
+  const rows = ctx.kind === "clinic" ? await listOutboundJobs(ctx.tenantId, filters) : [];
 
   return (
     <div className="flex-1 space-y-6 px-6">
@@ -34,18 +45,21 @@ export default async function OutboundJobsPage() {
           <CardDescription>
             {ctx.kind === "clinic"
               ? rows.length === 0
-                ? "Henüz iş göndermediniz."
+                ? "Filtreye uyan iş yok."
                 : `${rows.length} kalem`
               : "Bu sayfa klinik hesapları içindir."}
           </CardDescription>
         </CardHeader>
-        <CardContent>
+        <CardContent className="space-y-4">
           {ctx.kind === "clinic" ? (
-            <JobsTable
+            <>
-              rows={rows}
+              <JobsFilterBar />
-              counterpartLabel="Laboratuvar"
+              <JobsTable
-              emptyMessage="Henüz iş göndermediniz. 'Yeni İş Yayınla' butonundan başlayabilirsiniz."
+                rows={rows}
-            />
+                counterpartLabel="Laboratuvar"
+                emptyMessage="Filtreye uyan iş yok. Üstteki filtreleri değiştirin veya temizleyin."
+              />
+            </>
           ) : (
             <p className="text-muted-foreground py-6 text-center text-sm">
               Laboratuvar hesabıyla giriş yaptınız — giden iş listesi sadece klinik tarafında görünür.

src/app/(dashboard)/layout.tsx

@@ -1,5 +1,7 @@
+import { Suspense } from "react";
 import { redirect } from "next/navigation";
 
+import { FlashToast } from "@/components/flash-toast";
 import { getActiveContext } from "@/lib/appwrite/active-context";
 import { countUnreadNotifications } from "@/lib/appwrite/notification-helpers";
 import { getLogoUrl } from "@/lib/appwrite/storage";
@@ -40,6 +42,9 @@ export default async function DashboardLayout({
       unreadCount={unreadCount}
     >
       {children}
+      <Suspense fallback={null}>
+        <FlashToast />
+      </Suspense>
     </DashboardShell>
   );
 }

src/app/(dashboard)/notifications/components/notifications-list.tsx

@@ -66,10 +66,21 @@ function NotificationRow({ row }: { row: Notification }) {
       ? "/connections"
       : null;
 
+  const isWarning = row.severity === "warning";
   return (
-    <li className={`flex items-start gap-3 px-3 py-3 ${row.read ? "opacity-70" : ""}`}>
+    <li
+      className={`flex items-start gap-3 px-3 py-3 ${row.read ? "opacity-70" : ""} ${
+        isWarning && !row.read ? "bg-amber-50/60 dark:bg-amber-950/30" : ""
+      }`}
+    >
       <span
-        className={`mt-1.5 size-2 shrink-0 rounded-full ${row.read ? "bg-muted" : "bg-primary"}`}
+        className={`mt-1.5 size-2 shrink-0 rounded-full ${
+          row.read
+            ? "bg-muted"
+            : isWarning
+              ? "bg-amber-500"
+              : "bg-primary"
+        }`}
         aria-hidden
       />
       <div className="min-w-0 flex-1">
@@ -79,8 +90,11 @@ function NotificationRow({ row }: { row: Notification }) {
         </p>
       </div>
       {!row.read && (
-        <Badge variant="secondary" className="text-[10px] uppercase">
+        <Badge
-          Yeni
+          variant={isWarning ? "destructive" : "secondary"}
+          className="text-[10px] uppercase"
+        >
+          {isWarning ? "Dikkat" : "Yeni"}
         </Badge>
       )}
       {link && (

src/app/(dashboard)/patients/[patientId]/page.tsx

@@ -0,0 +1,168 @@
+import Link from "next/link";
+import { notFound, redirect } from "next/navigation";
+import { ArrowLeft, Plus } from "lucide-react";
+
+import { Badge } from "@/components/ui/badge";
+import { Button } from "@/components/ui/button";
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@/components/ui/card";
+import {
+  Table,
+  TableBody,
+  TableCell,
+  TableHead,
+  TableHeader,
+  TableRow,
+} from "@/components/ui/table";
+import { DueBadge } from "@/components/due-badge";
+import {
+  JOB_STATUS_LABELS,
+  PROSTHETIC_TYPE_LABELS,
+} from "@/lib/appwrite/job-types";
+import { getPatient, listPatientJobs } from "@/lib/appwrite/patient-queries";
+import type { JobStatus } from "@/lib/appwrite/schema";
+import { requireTenant, requireTenantKind } from "@/lib/appwrite/tenant-guard";
+
+export const metadata = {
+  title: "DLS — Hasta",
+};
+
+const dateFormatter = new Intl.DateTimeFormat("tr-TR", {
+  day: "2-digit",
+  month: "2-digit",
+  year: "numeric",
+});
+
+function statusVariant(s: JobStatus): "default" | "secondary" | "outline" | "destructive" {
+  if (s === "delivered") return "default";
+  if (s === "sent" || s === "in_progress") return "secondary";
+  if (s === "cancelled") return "destructive";
+  return "outline";
+}
+
+export default async function PatientDetailPage({
+  params,
+}: {
+  params: Promise<{ patientId: string }>;
+}) {
+  const { patientId } = await params;
+
+  let ctx;
+  try {
+    ctx = await requireTenant();
+    requireTenantKind(ctx, ["clinic"]);
+  } catch {
+    redirect("/dashboard");
+  }
+
+  const patient = await getPatient(patientId, ctx.tenantId);
+  if (!patient) notFound();
+
+  const jobs = await listPatientJobs(patient.$id, patient.patientCode, ctx.tenantId);
+
+  const fullName =
+    [patient.firstName, patient.lastName].filter(Boolean).join(" ") ||
+    `Hasta ${patient.patientCode}`;
+
+  return (
+    <div className="flex-1 space-y-6 px-6">
+      <div className="flex flex-wrap items-start justify-between gap-3">
+        <div className="flex flex-col gap-1">
+          <p className="text-muted-foreground text-sm font-mono">
+            {patient.patientCode}
+          </p>
+          <h1 className="text-2xl font-bold tracking-tight">{fullName}</h1>
+          {patient.archived && (
+            <Badge variant="outline" className="w-fit">
+              Arşivlenmiş
+            </Badge>
+          )}
+        </div>
+        <Button asChild>
+          <Link href="/jobs/new">
+            <Plus className="size-4" />
+            Bu hastaya yeni iş
+          </Link>
+        </Button>
+      </div>
+
+      {patient.notes && (
+        <Card>
+          <CardHeader>
+            <CardTitle>Notlar</CardTitle>
+          </CardHeader>
+          <CardContent>
+            <p className="text-muted-foreground whitespace-pre-wrap text-sm">
+              {patient.notes}
+            </p>
+          </CardContent>
+        </Card>
+      )}
+
+      <Card>
+        <CardHeader>
+          <CardTitle>İş Geçmişi</CardTitle>
+          <CardDescription>
+            {jobs.length === 0
+              ? "Bu hastaya ait iş kaydı yok."
+              : `${jobs.length} iş`}
+          </CardDescription>
+        </CardHeader>
+        <CardContent>
+          {jobs.length === 0 ? (
+            <p className="text-muted-foreground py-6 text-center text-sm">
+              Henüz bu hasta için iş gönderilmemiş.
+            </p>
+          ) : (
+            <Table>
+              <TableHeader>
+                <TableRow>
+                  <TableHead>Tarih</TableHead>
+                  <TableHead>Tür</TableHead>
+                  <TableHead>Üye</TableHead>
+                  <TableHead>Durum</TableHead>
+                  <TableHead>Termin</TableHead>
+                  <TableHead className="text-right">Detay</TableHead>
+                </TableRow>
+              </TableHeader>
+              <TableBody>
+                {jobs.map((j) => (
+                  <TableRow key={j.$id}>
+                    <TableCell className="text-muted-foreground text-xs">
+                      {dateFormatter.format(new Date(j.$createdAt))}
+                    </TableCell>
+                    <TableCell className="text-muted-foreground">
+                      {PROSTHETIC_TYPE_LABELS[j.prostheticType] ?? j.prostheticType}
+                    </TableCell>
+                    <TableCell className="tabular-nums">{j.memberCount}</TableCell>
+                    <TableCell>
+                      <Badge variant={statusVariant(j.status)}>
+                        {JOB_STATUS_LABELS[j.status]}
+                      </Badge>
+                    </TableCell>
+                    <TableCell>
+                      <DueBadge job={j} />
+                    </TableCell>
+                    <TableCell className="text-right">
+                      <Button asChild size="sm" variant="outline">
+                        <Link href={`/jobs/${j.$id}`}>Aç</Link>
+                      </Button>
+                    </TableCell>
+                  </TableRow>
+                ))}
+              </TableBody>
+            </Table>
+          )}
+        </CardContent>
+      </Card>
+
+      <div>
+        <Button asChild variant="outline">
+          <Link href="/patients">
+            <ArrowLeft className="size-4" />
+            Hasta listesine dön
+          </Link>
+        </Button>
+      </div>
+    </div>
+  );
+}

src/app/(dashboard)/patients/components/patients-table.tsx

@@ -1,6 +1,7 @@
 "use client";
 
 import { useActionState, useEffect, useState, useTransition } from "react";
+import Link from "next/link";
 import { Archive, ArchiveRestore, Loader2, Pencil } from "lucide-react";
 import { toast } from "sonner";
 
@@ -83,11 +84,17 @@ function PatientRow({ row }: { row: Patient }) {
 
   return (
     <TableRow className={row.archived ? "opacity-60" : ""}>
-      <TableCell className="font-mono text-xs">{row.patientCode}</TableCell>
+      <TableCell className="font-mono text-xs">
+        <Link href={`/patients/${row.$id}`} className="hover:underline">
+          {row.patientCode}
+        </Link>
+      </TableCell>
       <TableCell className="font-medium">
-        {[row.firstName, row.lastName].filter(Boolean).join(" ") || (
+        <Link href={`/patients/${row.$id}`} className="hover:underline">
-          <span className="text-muted-foreground">—</span>
+          {[row.firstName, row.lastName].filter(Boolean).join(" ") || (
-        )}
+            <span className="text-muted-foreground">—</span>
+          )}
+        </Link>
       </TableCell>
       <TableCell className="text-muted-foreground max-w-[280px] truncate">
         {row.notes || "—"}

src/app/(dashboard)/settings/activity/page.tsx

@@ -0,0 +1,149 @@
+import { redirect } from "next/navigation";
+import { Query } from "node-appwrite";
+
+import { Badge } from "@/components/ui/badge";
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@/components/ui/card";
+import {
+  Table,
+  TableBody,
+  TableCell,
+  TableHead,
+  TableHeader,
+  TableRow,
+} from "@/components/ui/table";
+import { listAuditLogs } from "@/lib/appwrite/audit-queries";
+import { DATABASE_ID, TABLES, type Profile } from "@/lib/appwrite/schema";
+import { createAdminClient } from "@/lib/appwrite/server";
+import { requireTenant } from "@/lib/appwrite/tenant-guard";
+
+export const metadata = {
+  title: "DLS — Hesap Aktivitesi",
+};
+
+const dateFormatter = new Intl.DateTimeFormat("tr-TR", {
+  day: "2-digit",
+  month: "2-digit",
+  year: "numeric",
+  hour: "2-digit",
+  minute: "2-digit",
+});
+
+const ENTITY_LABELS: Record<string, string> = {
+  job: "İş",
+  patient: "Hasta",
+  prosthetic: "Ürün",
+  payment: "Ödeme",
+  clinic_pricing: "Klinik Fiyat",
+  job_file: "Dosya",
+  connection: "Bağlantı",
+  invite: "Davet",
+  tenant_settings: "Çalışma Alanı",
+  profile: "Profil",
+};
+
+const ACTION_VARIANTS = {
+  create: { label: "Eklendi", variant: "default" as const },
+  update: { label: "Güncellendi", variant: "secondary" as const },
+  delete: { label: "Silindi", variant: "destructive" as const },
+};
+
+export default async function ActivityPage() {
+  let ctx;
+  try {
+    ctx = await requireTenant();
+  } catch {
+    redirect("/onboarding");
+  }
+
+  const logs = await listAuditLogs(ctx.tenantId, 200);
+
+  // Resolve userId → display name in one go so the rows read naturally.
+  const userIds = Array.from(new Set(logs.map((l) => l.userId)));
+  const userMap = new Map<string, string>();
+  if (userIds.length > 0) {
+    try {
+      const { tablesDB } = createAdminClient();
+      const profiles = await tablesDB.listRows({
+        databaseId: DATABASE_ID,
+        tableId: TABLES.profiles,
+        queries: [Query.equal("userId", userIds), Query.limit(200)],
+      });
+      for (const p of profiles.rows as unknown as Profile[]) {
+        if (p.displayName) userMap.set(p.userId, p.displayName);
+      }
+    } catch {
+      // best-effort; rows just show the raw id
+    }
+  }
+
+  return (
+    <div className="flex-1 space-y-6 px-6">
+      <div className="flex flex-col gap-1">
+        <h1 className="text-2xl font-bold tracking-tight">Hesap Aktivitesi</h1>
+        <p className="text-muted-foreground text-sm">
+          Çalışma alanınızda yapılan tüm değişikliklerin kaydı. Son 200 işlem.
+        </p>
+      </div>
+
+      <Card>
+        <CardHeader>
+          <CardTitle>İşlem Kaydı</CardTitle>
+          <CardDescription>
+            Otomatik tutulur, silinemez. Şüpheli bir aktivite görürseniz hesabınızı
+            güvenli olmayan bir cihazdan çıkarmayı düşünün.
+          </CardDescription>
+        </CardHeader>
+        <CardContent>
+          {logs.length === 0 ? (
+            <p className="text-muted-foreground py-6 text-center text-sm">
+              Henüz kayıtlı aktivite yok.
+            </p>
+          ) : (
+            <Table>
+              <TableHeader>
+                <TableRow>
+                  <TableHead>Zaman</TableHead>
+                  <TableHead>Kullanıcı</TableHead>
+                  <TableHead>İşlem</TableHead>
+                  <TableHead>Nesne</TableHead>
+                  <TableHead>Detay</TableHead>
+                </TableRow>
+              </TableHeader>
+              <TableBody>
+                {logs.map((l) => {
+                  const v = ACTION_VARIANTS[l.action] ?? {
+                    label: l.action,
+                    variant: "outline" as const,
+                  };
+                  return (
+                    <TableRow key={l.$id}>
+                      <TableCell className="text-muted-foreground text-xs tabular-nums">
+                        {dateFormatter.format(new Date(l.$createdAt))}
+                      </TableCell>
+                      <TableCell className="text-sm">
+                        {userMap.get(l.userId) ?? (
+                          <span className="text-muted-foreground font-mono text-xs">
+                            {l.userId.slice(0, 8)}
+                          </span>
+                        )}
+                      </TableCell>
+                      <TableCell>
+                        <Badge variant={v.variant}>{v.label}</Badge>
+                      </TableCell>
+                      <TableCell className="text-sm">
+                        {ENTITY_LABELS[l.entityType] ?? l.entityType}
+                      </TableCell>
+                      <TableCell className="text-muted-foreground max-w-[360px] truncate text-xs">
+                        {l.changes ? l.changes : <span>—</span>}
+                      </TableCell>
+                    </TableRow>
+                  );
+                })}
+              </TableBody>
+            </Table>
+          )}
+        </CardContent>
+      </Card>
+    </div>
+  );
+}

src/app/(dashboard)/settings/components/settings-nav.tsx

@@ -0,0 +1,44 @@
+"use client";
+
+import Link from "next/link";
+import { usePathname } from "next/navigation";
+
+import { cn } from "@/lib/utils";
+
+const ITEMS: { href: string; label: string }[] = [
+  { href: "/settings/workspace", label: "Çalışma Alanı" },
+  { href: "/settings/account", label: "Profilim" },
+  { href: "/settings/members", label: "Üyeler" },
+  { href: "/settings/notifications", label: "Bildirimler" },
+  { href: "/settings/appearance", label: "Görünüm" },
+  { href: "/settings/security", label: "Güvenlik" },
+  { href: "/settings/activity", label: "Hesap Aktivitesi" },
+];
+
+export function SettingsNav() {
+  const pathname = usePathname();
+  return (
+    <nav className="overflow-x-auto">
+      <ul className="border-border flex min-w-max gap-1 border-b">
+        {ITEMS.map((item) => {
+          const active = pathname === item.href;
+          return (
+            <li key={item.href}>
+              <Link
+                href={item.href}
+                className={cn(
+                  "inline-block border-b-2 px-3 py-2 text-sm transition-colors",
+                  active
+                    ? "border-primary text-foreground font-medium"
+                    : "text-muted-foreground hover:text-foreground border-transparent",
+                )}
+              >
+                {item.label}
+              </Link>
+            </li>
+          );
+        })}
+      </ul>
+    </nav>
+  );
+}

src/app/(dashboard)/settings/layout.tsx

@@ -0,0 +1,16 @@
+import { SettingsNav } from "./components/settings-nav";
+
+export default function SettingsLayout({
+  children,
+}: {
+  children: React.ReactNode;
+}) {
+  return (
+    <div className="flex-1 space-y-6">
+      <div className="px-6">
+        <SettingsNav />
+      </div>
+      {children}
+    </div>
+  );
+}

src/app/(dashboard)/settings/security/components/mfa-panel.tsx

@@ -0,0 +1,209 @@
+"use client";
+
+import { useActionState, useEffect, useState, useTransition } from "react";
+import { useRouter } from "next/navigation";
+import { Check, KeyRound, Loader2, ShieldCheck, ShieldOff } from "lucide-react";
+import { toast } from "sonner";
+
+import { Badge } from "@/components/ui/badge";
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
+import { Label } from "@/components/ui/label";
+import {
+  disableMfaAction,
+  initialMfaActionState,
+  regenerateRecoveryCodesAction,
+  startMfaEnrollAction,
+  verifyMfaEnrollAction,
+} from "@/lib/appwrite/mfa-actions";
+
+type EnrollStage =
+  | { kind: "idle" }
+  | { kind: "loading" }
+  | { kind: "verify"; uri: string; secret: string }
+  | { kind: "done"; recoveryCodes: string[] };
+
+export function MfaPanel({ initiallyEnabled }: { initiallyEnabled: boolean }) {
+  const router = useRouter();
+  const [enabled, setEnabled] = useState(initiallyEnabled);
+  const [stage, setStage] = useState<EnrollStage>({ kind: "idle" });
+  const [verifyState, verifyAction, verifying] = useActionState(
+    verifyMfaEnrollAction,
+    initialMfaActionState,
+  );
+  const [busy, startTransition] = useTransition();
+
+  useEffect(() => {
+    if (verifyState.ok && verifyState.recoveryCodes) {
+      setEnabled(true);
+      setStage({ kind: "done", recoveryCodes: verifyState.recoveryCodes });
+      toast.success("2FA etkinleştirildi.");
+      router.refresh();
+    } else if (verifyState.error) {
+      toast.error(verifyState.error);
+    }
+  }, [verifyState, router]);
+
+  function beginEnroll() {
+    setStage({ kind: "loading" });
+    startTransition(async () => {
+      const res = await startMfaEnrollAction();
+      if (res.ok && res.uri && res.secret) {
+        setStage({ kind: "verify", uri: res.uri, secret: res.secret });
+      } else {
+        toast.error(res.error ?? "Başlatılamadı.");
+        setStage({ kind: "idle" });
+      }
+    });
+  }
+
+  function onDisable() {
+    if (
+      !window.confirm(
+        "2FA devre dışı bırakılsın mı? Hesabınız sadece şifre ile korunacak.",
+      )
+    )
+      return;
+    startTransition(async () => {
+      const res = await disableMfaAction();
+      if (res.ok) {
+        setEnabled(false);
+        setStage({ kind: "idle" });
+        toast.success("2FA devre dışı bırakıldı.");
+        router.refresh();
+      } else {
+        toast.error(res.error ?? "Devre dışı bırakılamadı.");
+      }
+    });
+  }
+
+  function onRegenerateCodes() {
+    startTransition(async () => {
+      const res = await regenerateRecoveryCodesAction();
+      if (res.ok && res.recoveryCodes) {
+        setStage({ kind: "done", recoveryCodes: res.recoveryCodes });
+        toast.success("Yeni yedek kodlar oluşturuldu — eskileri geçersiz.");
+      } else {
+        toast.error(res.error ?? "Üretilemedi.");
+      }
+    });
+  }
+
+  if (enabled && stage.kind !== "done") {
+    return (
+      <div className="grid gap-3">
+        <div className="flex items-center gap-2">
+          <Badge className="bg-emerald-600 text-white">
+            <ShieldCheck className="size-3.5" />
+            Aktif
+          </Badge>
+          <span className="text-muted-foreground text-sm">
+            Authenticator uygulaması ile giriş yapıyorsunuz.
+          </span>
+        </div>
+        <div className="flex flex-wrap gap-2">
+          <Button variant="outline" onClick={onRegenerateCodes} disabled={busy}>
+            <KeyRound className="size-4" />
+            Yedek kodları yenile
+          </Button>
+          <Button variant="destructive" onClick={onDisable} disabled={busy}>
+            {busy ? <Loader2 className="size-4 animate-spin" /> : <ShieldOff className="size-4" />}
+            Devre dışı bırak
+          </Button>
+        </div>
+      </div>
+    );
+  }
+
+  if (stage.kind === "done") {
+    return (
+      <div className="grid gap-3">
+        <div className="bg-emerald-50 dark:bg-emerald-950 rounded-md border border-emerald-200 dark:border-emerald-900 p-4">
+          <p className="flex items-center gap-2 font-medium text-emerald-700 dark:text-emerald-300">
+            <Check className="size-4" />
+            Yedek kodlarınız
+          </p>
+          <p className="text-muted-foreground mt-1 text-xs">
+            Telefonunuza erişiminizi kaybederseniz bu kodlardan biriyle giriş
+            yapabilirsiniz. Her kod tek seferlik. <strong>Şimdi güvenli bir yere kaydedin</strong> —
+            bu sayfadan çıktığınızda tekrar gösterilmez.
+          </p>
+          <pre className="bg-background mt-3 grid grid-cols-2 gap-2 rounded-md border p-3 text-sm font-mono">
+            {stage.recoveryCodes.map((c) => (
+              <span key={c}>{c}</span>
+            ))}
+          </pre>
+        </div>
+        <Button variant="outline" onClick={() => setStage({ kind: "idle" })}>
+          Tamamladım
+        </Button>
+      </div>
+    );
+  }
+
+  if (stage.kind === "verify") {
+    const otpauthQrUrl = `https://api.qrserver.com/v1/create-qr-code/?size=200x200&data=${encodeURIComponent(stage.uri)}`;
+    return (
+      <form action={verifyAction} className="grid gap-4">
+        <div className="grid gap-4 sm:grid-cols-[200px_1fr] sm:items-start">
+          {/* eslint-disable-next-line @next/next/no-img-element */}
+          <img
+            src={otpauthQrUrl}
+            alt="QR kodu"
+            className="size-[200px] rounded-md border bg-white p-2"
+            width={200}
+            height={200}
+          />
+          <div className="grid gap-2 text-sm">
+            <p>Authenticator uygulamanızı açın, QR kodu tarayın.</p>
+            <p className="text-muted-foreground text-xs">
+              Tarayamıyorsanız bu kodu manuel girin:
+            </p>
+            <code className="bg-muted rounded-md p-2 font-mono text-xs">{stage.secret}</code>
+          </div>
+        </div>
+        <div className="grid gap-2">
+          <Label htmlFor="otp">Uygulamadaki 6 haneli kod</Label>
+          <Input
+            id="otp"
+            name="otp"
+            inputMode="numeric"
+            pattern="[0-9]*"
+            maxLength={6}
+            placeholder="000000"
+            required
+            autoComplete="one-time-code"
+            className="font-mono text-lg tracking-widest"
+          />
+          {verifyState.error && (
+            <p className="text-destructive text-xs">{verifyState.error}</p>
+          )}
+        </div>
+        <div className="flex gap-2">
+          <Button type="button" variant="outline" onClick={() => setStage({ kind: "idle" })}>
+            Vazgeç
+          </Button>
+          <Button type="submit" disabled={verifying}>
+            {verifying ? <Loader2 className="size-4 animate-spin" /> : <Check className="size-4" />}
+            Doğrula ve etkinleştir
+          </Button>
+        </div>
+      </form>
+    );
+  }
+
+  return (
+    <div className="grid gap-3">
+      <div className="flex items-center gap-2">
+        <Badge variant="outline">Pasif</Badge>
+        <span className="text-muted-foreground text-sm">
+          Hesabınız yalnızca şifre ile korunuyor.
+        </span>
+      </div>
+      <Button onClick={beginEnroll} disabled={busy || stage.kind === "loading"}>
+        {(busy || stage.kind === "loading") ? <Loader2 className="size-4 animate-spin" /> : <ShieldCheck className="size-4" />}
+        İki adımlı doğrulamayı aç
+      </Button>
+    </div>
+  );
+}

src/app/(dashboard)/settings/security/page.tsx

@@ -0,0 +1,56 @@
+import { redirect } from "next/navigation";
+
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@/components/ui/card";
+import { createSessionClient } from "@/lib/appwrite/server";
+import { requireTenant } from "@/lib/appwrite/tenant-guard";
+import { MfaPanel } from "./components/mfa-panel";
+
+export const metadata = {
+  title: "DLS — Güvenlik",
+};
+
+export default async function SecurityPage() {
+  let ctx;
+  try {
+    ctx = await requireTenant();
+  } catch {
+    redirect("/onboarding");
+  }
+
+  // Look up the user's current MFA status straight from the session
+  // client so the panel knows whether to offer enroll or disable.
+  let mfaEnabled = false;
+  try {
+    const { account } = await createSessionClient();
+    const user = await account.get();
+    mfaEnabled = Boolean(user.mfa);
+  } catch {
+    // ignore — panel will treat as not enabled
+  }
+
+  return (
+    <div className="flex-1 space-y-6 px-6">
+      <div className="flex flex-col gap-1">
+        <p className="text-muted-foreground text-sm">{ctx.settings?.companyName ?? "Çalışma alanı"}</p>
+        <h1 className="text-2xl font-bold tracking-tight">Güvenlik</h1>
+        <p className="text-muted-foreground text-sm">
+          Hesap erişiminizi koruyan ayarlar. İki adımlı doğrulamayı açtığınızda
+          giriş yaparken authenticator uygulamanızdaki 6 haneli kod istenir.
+        </p>
+      </div>
+
+      <Card>
+        <CardHeader>
+          <CardTitle>İki Adımlı Doğrulama</CardTitle>
+          <CardDescription>
+            Authenticator uygulaması (Google Authenticator, 1Password, Authy, vs.)
+            ile TOTP. SMS desteklenmiyor.
+          </CardDescription>
+        </CardHeader>
+        <CardContent>
+          <MfaPanel initiallyEnabled={mfaEnabled} />
+        </CardContent>
+      </Card>
+    </div>
+  );
+}

src/app/(dashboard)/settings/workspace/components/danger-zone.tsx

@@ -0,0 +1,141 @@
+"use client";
+
+import { useActionState, useEffect, useState, useTransition } from "react";
+import { AlertTriangle, Download, Loader2, Trash2 } from "lucide-react";
+import { toast } from "sonner";
+
+import { Button } from "@/components/ui/button";
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@/components/ui/card";
+import {
+  Dialog,
+  DialogClose,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+} from "@/components/ui/dialog";
+import { Input } from "@/components/ui/input";
+import { Label } from "@/components/ui/label";
+import {
+  deleteWorkspaceAction,
+  initialDeleteWorkspaceState,
+} from "@/lib/appwrite/account-delete-actions";
+
+export function DangerZone({ companyName }: { companyName: string }) {
+  const [downloadBusy, startDownload] = useTransition();
+  const [open, setOpen] = useState(false);
+  const [confirm, setConfirm] = useState("");
+  const [state, action, pending] = useActionState(
+    deleteWorkspaceAction,
+    initialDeleteWorkspaceState,
+  );
+
+  useEffect(() => {
+    if (state.error) toast.error(state.error);
+  }, [state]);
+
+  function downloadExport() {
+    startDownload(async () => {
+      try {
+        const res = await fetch("/api/account/export");
+        if (!res.ok) throw new Error(`HTTP ${res.status}`);
+        const blob = await res.blob();
+        const url = URL.createObjectURL(blob);
+        const a = document.createElement("a");
+        a.href = url;
+        a.download = `dls-export-${Date.now()}.json`;
+        document.body.appendChild(a);
+        a.click();
+        a.remove();
+        URL.revokeObjectURL(url);
+        toast.success("Veri dışa aktarıldı.");
+      } catch (e) {
+        toast.error(e instanceof Error ? e.message : "İndirilemedi.");
+      }
+    });
+  }
+
+  return (
+    <Card className="border-destructive/40">
+      <CardHeader>
+        <CardTitle className="flex items-center gap-2 text-base">
+          <AlertTriangle className="text-destructive size-4" />
+          Tehlikeli Bölge
+        </CardTitle>
+        <CardDescription>
+          Verinizi dışa aktarın veya çalışma alanını kalıcı olarak silin.
+        </CardDescription>
+      </CardHeader>
+      <CardContent className="grid gap-3">
+        <div className="flex flex-wrap items-center justify-between gap-3 rounded-md border p-3">
+          <div className="min-w-0">
+            <p className="font-medium">Verilerimi indir</p>
+            <p className="text-muted-foreground text-xs">
+              Çalışma alanınızdaki tüm veriler (hastalar, işler, ödemeler, geçmiş)
+              JSON formatında dışa aktarılır. Silmeden önce yedek almanız önerilir.
+            </p>
+          </div>
+          <Button variant="outline" onClick={downloadExport} disabled={downloadBusy}>
+            {downloadBusy ? <Loader2 className="size-4 animate-spin" /> : <Download className="size-4" />}
+            JSON indir
+          </Button>
+        </div>
+
+        <div className="border-destructive/40 flex flex-wrap items-center justify-between gap-3 rounded-md border p-3">
+          <div className="min-w-0">
+            <p className="font-medium">Çalışma alanını sil</p>
+            <p className="text-muted-foreground text-xs">
+              Tüm hastalar, işler, ödemeler, dosyalar ve geçmiş kalıcı olarak silinir.
+              Bu işlem geri alınamaz.
+            </p>
+          </div>
+          <Dialog open={open} onOpenChange={setOpen}>
+            <Button variant="destructive" onClick={() => setOpen(true)}>
+              <Trash2 className="size-4" />
+              Sil
+            </Button>
+            <DialogContent>
+              <DialogHeader>
+                <DialogTitle>Çalışma alanını kalıcı sil</DialogTitle>
+                <DialogDescription>
+                  Onaylamak için aşağıya <strong>{companyName}</strong> yazın. Bu
+                  işlem hastalar, işler, ödemeler, dosyalar ve tüm geçmişi içerir
+                  ve geri alınamaz.
+                </DialogDescription>
+              </DialogHeader>
+              <form action={action} className="grid gap-3">
+                <div className="grid gap-2">
+                  <Label htmlFor="confirm">Çalışma alanı adı</Label>
+                  <Input
+                    id="confirm"
+                    name="confirm"
+                    autoComplete="off"
+                    value={confirm}
+                    onChange={(e) => setConfirm(e.target.value)}
+                    placeholder={companyName}
+                  />
+                </div>
+                <DialogFooter>
+                  <DialogClose asChild>
+                    <Button type="button" variant="outline">
+                      Vazgeç
+                    </Button>
+                  </DialogClose>
+                  <Button
+                    type="submit"
+                    variant="destructive"
+                    disabled={pending || confirm.trim() !== companyName}
+                  >
+                    {pending ? <Loader2 className="size-4 animate-spin" /> : <Trash2 className="size-4" />}
+                    Kalıcı olarak sil
+                  </Button>
+                </DialogFooter>
+              </form>
+            </DialogContent>
+          </Dialog>
+        </div>
+      </CardContent>
+    </Card>
+  );
+}

src/app/(dashboard)/settings/workspace/page.tsx

@@ -3,6 +3,7 @@ import { redirect } from "next/navigation";
 
 import { getLogoUrl } from "@/lib/appwrite/storage";
 import { requireTenant } from "@/lib/appwrite/tenant-guard";
+import { DangerZone } from "./components/danger-zone";
 import { LogoUploader } from "./components/logo-uploader";
 import { WorkspaceSettingsForm } from "./components/workspace-form";
 
@@ -50,6 +51,10 @@ export default async function WorkspaceSettingsPage() {
           memberNumber: ctx.settings?.memberNumber ?? "",
         }}
       />
+
+      {ctx.role === "owner" && (
+        <DangerZone companyName={ctx.settings?.companyName ?? ""} />
+      )}
     </div>
   );
 }

src/app/api/account/export/route.ts

@@ -0,0 +1,103 @@
+import { NextResponse } from "next/server";
+import { Query } from "node-appwrite";
+
+import { DATABASE_ID, TABLES } from "@/lib/appwrite/schema";
+import { createAdminClient } from "@/lib/appwrite/server";
+import { requireTenant } from "@/lib/appwrite/tenant-guard";
+
+const TENANT_TABLES = [
+  TABLES.tenantSettings,
+  TABLES.profiles,
+  TABLES.connections,
+  TABLES.patients,
+  TABLES.clinicPricing,
+  TABLES.jobs,
+  TABLES.jobFiles,
+  TABLES.jobStatusHistory,
+  TABLES.prosthetics,
+  TABLES.financeEntries,
+  TABLES.payments,
+  TABLES.notifications,
+  TABLES.auditLogs,
+] as const;
+
+const TENANT_FIELDS_BY_TABLE: Record<string, string[]> = {
+  // Most tables use 'tenantId' or 'clinicTenantId'/'labTenantId' for ownership.
+  [TABLES.tenantSettings]: ["tenantId"],
+  [TABLES.profiles]: ["tenantId"],
+  [TABLES.connections]: ["clinicTenantId", "labTenantId"],
+  [TABLES.patients]: ["clinicTenantId"],
+  [TABLES.clinicPricing]: ["labTenantId", "clinicTenantId"],
+  [TABLES.jobs]: ["clinicTenantId", "labTenantId"],
+  [TABLES.jobFiles]: ["clinicTenantId", "labTenantId"],
+  [TABLES.jobStatusHistory]: ["clinicTenantId", "labTenantId"],
+  [TABLES.prosthetics]: ["tenantId"],
+  [TABLES.financeEntries]: ["tenantId"],
+  [TABLES.payments]: ["tenantId", "counterpartTenantId"],
+  [TABLES.notifications]: ["tenantId"],
+  [TABLES.auditLogs]: ["tenantId"],
+};
+
+/**
+ * Return a JSON file containing every row this tenant has access to.
+ * Used for KVKK 'data portability' and as a sanity-check pre-delete.
+ */
+export async function GET() {
+  let ctx;
+  try {
+    ctx = await requireTenant();
+  } catch {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+
+  const { tablesDB } = createAdminClient();
+  const out: Record<string, unknown[]> = {};
+
+  for (const table of TENANT_TABLES) {
+    const fields = TENANT_FIELDS_BY_TABLE[table] ?? ["tenantId"];
+    try {
+      // Fetch each row where ANY of the ownership fields equals our tenantId.
+      // For tables with two fields (jobs, connections, ...) issue both queries
+      // and dedupe — Appwrite doesn't have OR across distinct equality terms.
+      const seen = new Set<string>();
+      const rows: unknown[] = [];
+      for (const field of fields) {
+        const result = await tablesDB.listRows({
+          databaseId: DATABASE_ID,
+          tableId: table,
+          queries: [Query.equal(field, ctx.tenantId), Query.limit(500)],
+        });
+        for (const r of result.rows) {
+          const id = (r as { $id?: string }).$id;
+          if (id && !seen.has(id)) {
+            seen.add(id);
+            rows.push(r);
+          }
+        }
+      }
+      out[table] = rows;
+    } catch (e) {
+      out[table] = [
+        { error: e instanceof Error ? e.message : "fetch failed" },
+      ];
+    }
+  }
+
+  const payload = {
+    exportedAt: new Date().toISOString(),
+    tenantId: ctx.tenantId,
+    tenantKind: ctx.kind,
+    requestedBy: { id: ctx.user.id, email: ctx.user.email, name: ctx.user.name },
+    data: out,
+  };
+
+  const fileName = `dls-export-${ctx.tenantId}-${Date.now()}.json`;
+  return new NextResponse(JSON.stringify(payload, null, 2), {
+    status: 200,
+    headers: {
+      "Content-Type": "application/json; charset=utf-8",
+      "Content-Disposition": `attachment; filename="${fileName}"`,
+      "Cache-Control": "private, no-store",
+    },
+  });
+}

src/app/api/jobs/[jobId]/files/[fileId]/download/route.ts

@@ -46,6 +46,12 @@ export async function GET(
   if (ctx.tenantId !== job.clinicTenantId && ctx.tenantId !== job.labTenantId) {
     return NextResponse.json({ error: "Forbidden" }, { status: 403 });
   }
+  if (file.archivedAt) {
+    return NextResponse.json(
+      { error: "Dosya arşivlendi, indirilebilir kopya yok." },
+      { status: 410 },
+    );
+  }
 
   const buf = (await storage.getFileDownload(BUCKETS.jobFiles, file.fileId)) as
     | ArrayBuffer

src/components/due-badge.tsx

@@ -0,0 +1,27 @@
+import { AlertCircle, Clock } from "lucide-react";
+
+import { Badge } from "@/components/ui/badge";
+import { dueLabel, dueState } from "@/lib/appwrite/due-date";
+import type { Job } from "@/lib/appwrite/schema";
+
+export function DueBadge({
+  job,
+  className,
+}: {
+  job: Pick<Job, "dueDate" | "status">;
+  className?: string;
+}) {
+  const state = dueState(job);
+  if (state.kind === "none" || state.kind === "future") return null;
+  const variant: "destructive" | "secondary" = state.kind === "overdue" ? "destructive" : "secondary";
+  return (
+    <Badge variant={variant} className={`gap-1 ${className ?? ""}`}>
+      {state.kind === "overdue" ? (
+        <AlertCircle className="size-3" />
+      ) : (
+        <Clock className="size-3" />
+      )}
+      {dueLabel(state)}
+    </Badge>
+  );
+}

src/components/flash-toast.tsx

@@ -0,0 +1,44 @@
+"use client";
+
+import { useEffect, useRef } from "react";
+import { usePathname, useRouter, useSearchParams } from "next/navigation";
+import { toast } from "sonner";
+
+const MESSAGES: Record<string, string> = {
+  accepted: "İş işleme alındı, alt yapı üretimi başladı.",
+  handed: "Klinik tarafına gönderildi.",
+  approved: "Prova onaylandı, lab tarafına geri gönderildi.",
+  revision: "Düzeltme talebi gönderildi.",
+  delivered: "İş teslim alındı.",
+  cancelled: "İş iptal edildi.",
+};
+
+/**
+ * Show a one-shot toast based on ?flash=<key>, then strip the param from
+ * the URL so a refresh doesn't replay it. Mounted in the dashboard layout
+ * so it works on every page that server actions might redirect to.
+ */
+export function FlashToast() {
+  const router = useRouter();
+  const pathname = usePathname();
+  const params = useSearchParams();
+  const fired = useRef<string | null>(null);
+
+  useEffect(() => {
+    const flash = params.get("flash");
+    if (!flash) return;
+    // Avoid double-firing under React Strict Mode in dev.
+    if (fired.current === flash) return;
+    fired.current = flash;
+
+    const message = MESSAGES[flash] ?? null;
+    if (message) toast.success(message);
+
+    const next = new URLSearchParams(params.toString());
+    next.delete("flash");
+    const query = next.toString();
+    router.replace(query ? `${pathname}?${query}` : pathname, { scroll: false });
+  }, [params, pathname, router]);
+
+  return null;
+}

src/components/stl-viewer.tsx

@@ -0,0 +1,175 @@
+"use client";
+
+import { useEffect, useState } from "react";
+import { Canvas } from "@react-three/fiber";
+import { Bounds, OrbitControls } from "@react-three/drei";
+import { Loader2, RotateCcw } from "lucide-react";
+import * as THREE from "three";
+import { STLLoader } from "three/addons/loaders/STLLoader.js";
+import { PLYLoader } from "three/addons/loaders/PLYLoader.js";
+import { OBJLoader } from "three/addons/loaders/OBJLoader.js";
+
+import { Button } from "@/components/ui/button";
+
+type SupportedFormat = "stl" | "ply" | "obj";
+
+function detectFormat(filename: string): SupportedFormat | null {
+  const lower = filename.toLowerCase();
+  if (lower.endsWith(".stl")) return "stl";
+  if (lower.endsWith(".ply")) return "ply";
+  if (lower.endsWith(".obj")) return "obj";
+  return null;
+}
+
+/**
+ * Loads a 3D scan from the given URL into a BufferGeometry. OBJ files come
+ * back from the loader as a THREE.Group, so we merge their child meshes'
+ * geometries into a single BufferGeometry for a uniform render path.
+ */
+async function loadGeometry(
+  url: string,
+  format: SupportedFormat,
+): Promise<THREE.BufferGeometry> {
+  const res = await fetch(url);
+  if (!res.ok) throw new Error(`İndirilemedi (HTTP ${res.status})`);
+  const buffer = await res.arrayBuffer();
+
+  if (format === "stl") {
+    const g = new STLLoader().parse(buffer);
+    g.computeVertexNormals();
+    return g;
+  }
+  if (format === "ply") {
+    const g = new PLYLoader().parse(buffer);
+    g.computeVertexNormals();
+    return g;
+  }
+  // OBJ — text format, parse needs a string and yields a Group of meshes.
+  const text = new TextDecoder().decode(buffer);
+  const group = new OBJLoader().parse(text);
+  const geometries: THREE.BufferGeometry[] = [];
+  group.traverse((obj) => {
+    if ((obj as THREE.Mesh).isMesh) {
+      const g = (obj as THREE.Mesh).geometry as THREE.BufferGeometry;
+      if (g) geometries.push(g);
+    }
+  });
+  if (geometries.length === 0) throw new Error("OBJ içinde mesh bulunamadı.");
+  // For a single mesh we can avoid the merge dependency entirely.
+  if (geometries.length === 1) {
+    const g = geometries[0].clone();
+    g.computeVertexNormals();
+    return g;
+  }
+  // Cheap concat: positions only. Good enough for previewing scans.
+  const positions: number[] = [];
+  for (const g of geometries) {
+    const pos = g.getAttribute("position");
+    if (!pos) continue;
+    for (let i = 0; i < pos.count * 3; i++) {
+      positions.push((pos.array as ArrayLike<number>)[i]);
+    }
+  }
+  const merged = new THREE.BufferGeometry();
+  merged.setAttribute(
+    "position",
+    new THREE.Float32BufferAttribute(positions, 3),
+  );
+  merged.computeVertexNormals();
+  return merged;
+}
+
+export function STLViewer({
+  url,
+  filename,
+}: {
+  url: string;
+  filename: string;
+}) {
+  const [geometry, setGeometry] = useState<THREE.BufferGeometry | null>(null);
+  const [error, setError] = useState<string | null>(null);
+  const [resetKey, setResetKey] = useState(0);
+
+  const format = detectFormat(filename);
+
+  useEffect(() => {
+    if (!format) {
+      setError("Bu dosya türü görüntüleyici tarafından desteklenmiyor.");
+      return;
+    }
+    let cancelled = false;
+    setGeometry(null);
+    setError(null);
+    loadGeometry(url, format)
+      .then((g) => {
+        if (cancelled) {
+          g.dispose();
+          return;
+        }
+        setGeometry(g);
+      })
+      .catch((e: unknown) => {
+        if (cancelled) return;
+        setError(e instanceof Error ? e.message : "Yüklenemedi.");
+      });
+    return () => {
+      cancelled = true;
+    };
+  }, [url, format]);
+
+  // Dispose old geometry when it gets replaced or the component unmounts.
+  useEffect(() => {
+    return () => {
+      geometry?.dispose();
+    };
+  }, [geometry]);
+
+  if (error) {
+    return (
+      <div className="bg-muted/40 text-muted-foreground flex h-full items-center justify-center p-6 text-sm">
+        {error}
+      </div>
+    );
+  }
+  if (!geometry) {
+    return (
+      <div className="bg-muted/40 text-muted-foreground flex h-full items-center justify-center gap-2 p-6 text-sm">
+        <Loader2 className="size-4 animate-spin" />
+        Tarama yükleniyor...
+      </div>
+    );
+  }
+
+  return (
+    <div className="relative h-full w-full">
+      <Canvas camera={{ position: [0, 0, 100], fov: 45, near: 0.1, far: 5000 }} dpr={[1, 2]}>
+        <color attach="background" args={["#0b1220"]} />
+        <ambientLight intensity={0.45} />
+        <directionalLight position={[10, 10, 10]} intensity={0.7} />
+        <directionalLight position={[-10, -10, -10]} intensity={0.35} />
+        <Bounds key={resetKey} fit clip observe margin={1.25}>
+          <mesh geometry={geometry}>
+            <meshStandardMaterial
+              color="#e2e8f0"
+              roughness={0.55}
+              metalness={0.05}
+            />
+          </mesh>
+        </Bounds>
+        <OrbitControls makeDefault enableDamping dampingFactor={0.1} />
+      </Canvas>
+      <Button
+        type="button"
+        size="sm"
+        variant="outline"
+        onClick={() => setResetKey((k) => k + 1)}
+        className="absolute right-3 top-3 bg-background/80 backdrop-blur"
+      >
+        <RotateCcw className="size-4" />
+        Sığdır
+      </Button>
+    </div>
+  );
+}
+
+export default STLViewer;

src/lib/appwrite/account-delete-actions.ts

@@ -0,0 +1,172 @@
+"use server";
+
+import { revalidatePath } from "next/cache";
+import { cookies } from "next/headers";
+import { redirect } from "next/navigation";
+import { AppwriteException, Query } from "node-appwrite";
+
+import {
+  BUCKETS,
+  DATABASE_ID,
+  TABLES,
+  type JobFile,
+  type TenantSettings,
+} from "./schema";
+import { APPWRITE_SESSION_COOKIE, createAdminClient } from "./server";
+import { ACTIVE_TENANT_COOKIE } from "./tenant-types";
+import { requireRole, requireTenant } from "./tenant-guard";
+
+export type DeleteWorkspaceState = {
+  ok: boolean;
+  error?: string;
+};
+
+export const initialDeleteWorkspaceState: DeleteWorkspaceState = { ok: false };
+
+function appwriteError(e: unknown, fallback = "Beklenmeyen bir hata oluştu."): string {
+  if (e instanceof AppwriteException) return e.message || fallback;
+  return process.env.NODE_ENV !== "production" && e instanceof Error
+    ? `${fallback} (${e.message})`
+    : fallback;
+}
+
+/** Best-effort delete every row where any of `fields` equals tenantId. */
+async function purgeTable(table: string, fields: string[], tenantId: string) {
+  const { tablesDB } = createAdminClient();
+  const ids = new Set<string>();
+  for (const field of fields) {
+    let offset = 0;
+    // Page through to handle tables with more than 500 rows.
+    while (true) {
+      const result = await tablesDB
+        .listRows({
+          databaseId: DATABASE_ID,
+          tableId: table,
+          queries: [Query.equal(field, tenantId), Query.limit(500), Query.offset(offset)],
+        })
+        .catch(() => ({ rows: [] }));
+      for (const row of result.rows) {
+        const id = (row as { $id?: string }).$id;
+        if (id) ids.add(id);
+      }
+      if (result.rows.length < 500) break;
+      offset += 500;
+    }
+  }
+  await Promise.allSettled(
+    Array.from(ids).map((id) =>
+      tablesDB.deleteRow(DATABASE_ID, table, id),
+    ),
+  );
+}
+
+/**
+ * Hard-delete an entire workspace and everything it owns. Reversible only
+ * via your own backup — Appwrite has no undo. Caller must be owner of the
+ * tenant and must confirm by typing the company name back to us.
+ */
+export async function deleteWorkspaceAction(
+  _prev: DeleteWorkspaceState,
+  formData: FormData,
+): Promise<DeleteWorkspaceState> {
+  const confirm = String(formData.get("confirm") ?? "").trim();
+  let ctx;
+  try {
+    ctx = await requireTenant();
+    requireRole(ctx, ["owner"]);
+  } catch {
+    return { ok: false, error: "Yalnızca sahip silebilir." };
+  }
+  const expected = ctx.settings?.companyName?.trim() ?? "";
+  if (!expected || confirm !== expected) {
+    return {
+      ok: false,
+      error: "Onaylamak için çalışma alanı adını birebir yazmanız gerekiyor.",
+    };
+  }
+
+  const tenantId = ctx.tenantId;
+  const { tablesDB, storage, teams } = createAdminClient();
+
+  // 1) Wipe Storage objects we still own (logo + any non-archived job files).
+  try {
+    const settingsRes = await tablesDB.listRows({
+      databaseId: DATABASE_ID,
+      tableId: TABLES.tenantSettings,
+      queries: [Query.equal("tenantId", tenantId), Query.limit(1)],
+    });
+    const settings = (settingsRes.rows[0] as unknown as TenantSettings | undefined) ?? null;
+    if (settings?.logo) {
+      try {
+        await storage.deleteFile(BUCKETS.tenantLogos, settings.logo);
+      } catch {
+        /* ignore */
+      }
+    }
+
+    const files = await tablesDB.listRows({
+      databaseId: DATABASE_ID,
+      tableId: TABLES.jobFiles,
+      queries: [
+        Query.or([
+          Query.equal("clinicTenantId", tenantId),
+          Query.equal("labTenantId", tenantId),
+        ]),
+        Query.limit(1000),
+      ],
+    });
+    await Promise.allSettled(
+      (files.rows as unknown as JobFile[]).map(async (f) => {
+        if (f.archivedAt) return;
+        try {
+          await storage.deleteFile(BUCKETS.jobFiles, f.fileId);
+        } catch {
+          /* ignore */
+        }
+      }),
+    );
+  } catch {
+    /* best-effort */
+  }
+
+  // 2) Purge all DB tables tied to this tenant. Order doesn't matter
+  // because everything is hard-deleted.
+  const tablePurges: Array<[string, string[]]> = [
+    [TABLES.notifications, ["tenantId"]],
+    [TABLES.auditLogs, ["tenantId"]],
+    [TABLES.payments, ["tenantId", "counterpartTenantId"]],
+    [TABLES.financeEntries, ["tenantId"]],
+    [TABLES.jobStatusHistory, ["clinicTenantId", "labTenantId"]],
+    [TABLES.jobFiles, ["clinicTenantId", "labTenantId"]],
+    [TABLES.jobs, ["clinicTenantId", "labTenantId"]],
+    [TABLES.clinicPricing, ["labTenantId", "clinicTenantId"]],
+    [TABLES.prosthetics, ["tenantId"]],
+    [TABLES.patients, ["clinicTenantId"]],
+    [TABLES.connections, ["clinicTenantId", "labTenantId"]],
+    [TABLES.profiles, ["tenantId"]],
+    [TABLES.tenantSettings, ["tenantId"]],
+  ];
+  for (const [table, fields] of tablePurges) {
+    await purgeTable(table, fields, tenantId);
+  }
+
+  // 3) Finally delete the Appwrite Team itself. This boots every member's
+  // permission to read anything that might have slipped through above.
+  try {
+    await teams.delete({ teamId: tenantId });
+  } catch (e) {
+    return { ok: false, error: appwriteError(e, "Çalışma alanı silindi ama takım kaldı.") };
+  }
+
+  // Drop session/active-tenant cookies — the user is also effectively
+  // signed out of this workspace.
+  const cookieStore = await cookies();
+  cookieStore.delete(ACTIVE_TENANT_COOKIE);
+  // Keep the Appwrite session itself so the user can still re-onboard or
+  // hop to another workspace they own. If they want to drop the session,
+  // there's already a 'Çıkış yap' button.
+  void APPWRITE_SESSION_COOKIE; // referenced to avoid unused import
+
+  revalidatePath("/");
+  redirect("/onboarding");
+}

src/lib/appwrite/audit-queries.ts

@@ -0,0 +1,24 @@
+import "server-only";
+
+import { Query } from "node-appwrite";
+
+import { DATABASE_ID, TABLES, type AuditLog } from "./schema";
+import { createAdminClient } from "./server";
+import { toPlain } from "./serialize";
+
+export async function listAuditLogs(
+  tenantId: string,
+  limit = 100,
+): Promise<AuditLog[]> {
+  const { tablesDB } = createAdminClient();
+  const result = await tablesDB.listRows({
+    databaseId: DATABASE_ID,
+    tableId: TABLES.auditLogs,
+    queries: [
+      Query.equal("tenantId", tenantId),
+      Query.orderDesc("$createdAt"),
+      Query.limit(limit),
+    ],
+  });
+  return toPlain(result.rows as unknown as AuditLog[]);
+}

src/lib/appwrite/auth-actions.ts

@@ -2,7 +2,7 @@
 
 import { cookies } from "next/headers";
 import { redirect } from "next/navigation";
-import { AppwriteException, ID, Query } from "node-appwrite";
+import { AppwriteException, AuthenticationFactor, ID, Query } from "node-appwrite";
 
 import { APPWRITE_SESSION_COOKIE, createAdminClient, createSessionClient } from "./server";
 import { DATABASE_ID, TABLES, type TenantKind, type TenantSettings } from "./schema";
@@ -85,6 +85,7 @@ async function resolveTenantOnLogin(
 export async function signInAction(_prev: AuthState, formData: FormData): Promise<AuthState> {
   const email = String(formData.get("email") ?? "").trim();
   const password = String(formData.get("password") ?? "");
+  const otp = String(formData.get("otp") ?? "").trim();
   const inviteCode = String(formData.get("inviteCode") ?? "").trim();
   const rawKind = String(formData.get("kind") ?? "").trim();
   const kind: TenantKind | null =
@@ -107,6 +108,51 @@ export async function signInAction(_prev: AuthState, formData: FormData): Promis
     return { ok: false, error: appwriteError(e) };
   }
 
+  // MFA: if the user has TOTP enabled, the session above is half-confirmed.
+  // Either pass the OTP they typed in this submission or ask for it.
+  try {
+    const { users } = createAdminClient();
+    const user = await users.get({ userId: sessionUserId });
+    if (user.mfa) {
+      if (!otp) {
+        return {
+          ok: false,
+          mfaRequired: true,
+          error: "Hesabınız 2FA korumalı. Authenticator uygulamasındaki 6 haneli kodu girin.",
+        };
+      }
+      try {
+        const { account: sessionAccount } = await createSessionClient();
+        const challenge = await sessionAccount.createMfaChallenge({
+          factor: AuthenticationFactor.Totp,
+        });
+        await sessionAccount.updateMfaChallenge({
+          challengeId: challenge.$id,
+          otp,
+        });
+      } catch (e) {
+        // Wrong code or expired challenge — kill the partial session and ask
+        // them to start over with the OTP visible.
+        try {
+          if (sessionId) await users.deleteSession({ userId: sessionUserId, sessionId });
+        } catch {
+          /* best-effort */
+        }
+        (await cookies()).delete(APPWRITE_SESSION_COOKIE);
+        return {
+          ok: false,
+          mfaRequired: true,
+          error: "Kod doğrulanamadı, yeniden deneyin.",
+        };
+      }
+    }
+  } catch (e) {
+    console.error("[signInAction] MFA check", e);
+    // Fail-open on MFA check errors only when the user has no MFA configured;
+    // for safety, surface a generic error here.
+    return { ok: false, error: "Oturum doğrulanamadı." };
+  }
+
   // Invite flow short-circuits the kind check — invite code drives team membership
   if (inviteCode) {
     redirect(`/d/${inviteCode}`);

src/lib/appwrite/auth-types.ts

@@ -1,6 +1,8 @@
 export type AuthState = {
   ok: boolean;
   error?: string;
+  /** Set when the account has MFA enabled and the OTP field was empty. */
+  mfaRequired?: boolean;
 };
 
 export const initialAuthState: AuthState = { ok: false };

src/lib/appwrite/connection-actions.ts

@@ -278,6 +278,15 @@ export async function rejectConnectionAction(
       entityId: connectionId,
       changes: { status: "rejected" },
     });
+    // Tell the requester their request was turned down — warning, not info.
+    const requesterTenant =
+      conn.clinicTenantId === ctx.tenantId ? conn.labTenantId : conn.clinicTenantId;
+    void createNotification({
+      tenantId: requesterTenant,
+      connectionId,
+      severity: "warning",
+      message: `${ctx.settings?.companyName ?? "Karşı taraf"} bağlantı talebinizi reddetti.`,
+    });
   } catch (e) {
     return { ok: false, error: appwriteError(e, "Reddedilemedi.") };
   }

src/lib/appwrite/dashboard-queries.ts

@@ -28,6 +28,8 @@ export type DashboardData = {
   approvedConnectionsCount: number;
   recentJobs: DashboardJob[];
   recentNotifications: Notification[];
+  /** Open jobs whose dueDate has already passed. */
+  overdueJobs: DashboardJob[];
 };
 
 export async function getDashboardData(
@@ -41,8 +43,16 @@ export async function getDashboardData(
   // count separately for the stat card.
   const jobsField = isLab ? "labTenantId" : "clinicTenantId";
 
-  const [recentJobsRes, openJobsRes, pendingActionRes, financeRes, notifRes, unreadRes, connRes] =
+  const [
-    await Promise.all([
+    recentJobsRes,
+    openJobsRes,
+    pendingActionRes,
+    financeRes,
+    notifRes,
+    unreadRes,
+    connRes,
+    overdueRes,
+  ] = await Promise.all([
       tablesDB.listRows({
         databaseId: DATABASE_ID,
         tableId: TABLES.jobs,
@@ -110,12 +120,27 @@ export async function getDashboardData(
           Query.limit(1),
         ],
       }),
+      tablesDB.listRows({
+        databaseId: DATABASE_ID,
+        tableId: TABLES.jobs,
+        queries: [
+          Query.equal(jobsField, tenantId),
+          Query.notEqual("status", "delivered"),
+          Query.notEqual("status", "cancelled"),
+          Query.lessThan("dueDate", new Date().toISOString()),
+          Query.orderAsc("dueDate"),
+          Query.limit(10),
+        ],
+      }),
     ]);
 
   const recentJobs = recentJobsRes.rows as unknown as Job[];
+  const overdueJobs = overdueRes.rows as unknown as Job[];
   const counterpartIds = Array.from(
     new Set(
-      recentJobs.map((j) => (isLab ? j.clinicTenantId : j.labTenantId)).filter(Boolean),
+      [...recentJobs, ...overdueJobs]
+        .map((j) => (isLab ? j.clinicTenantId : j.labTenantId))
+        .filter(Boolean),
     ),
   );
 
@@ -155,5 +180,10 @@ export async function getDashboardData(
         counterpartMap.get(isLab ? j.clinicTenantId : j.labTenantId) ?? null,
     })),
     recentNotifications: notifRes.rows as unknown as Notification[],
+    overdueJobs: overdueJobs.map((j) => ({
+      ...j,
+      counterpartName:
+        counterpartMap.get(isLab ? j.clinicTenantId : j.labTenantId) ?? null,
+    })),
   });
 }

src/lib/appwrite/due-date.ts

@@ -0,0 +1,56 @@
+import type { Job } from "./schema";
+
+export type DueState =
+  | { kind: "none" }
+  | { kind: "future"; days: number }
+  | { kind: "soon"; days: number }
+  | { kind: "today" }
+  | { kind: "overdue"; days: number };
+
+const MS_PER_DAY = 24 * 60 * 60 * 1000;
+
+/**
+ * Bucket a job's due date into a UI-friendly label.
+ *   - none     → no due date
+ *   - future   → more than 3 days away
+ *   - soon     → 1-3 days away (warn)
+ *   - today    → today (warn)
+ *   - overdue  → past, work isn't delivered (error)
+ *
+ * Cancelled or delivered jobs always resolve to 'none' — nothing to warn
+ * about once the case is closed.
+ */
+export function dueState(
+  job: Pick<Job, "dueDate" | "status">,
+  now: Date = new Date(),
+): DueState {
+  if (!job.dueDate) return { kind: "none" };
+  if (job.status === "delivered" || job.status === "cancelled") {
+    return { kind: "none" };
+  }
+  const due = new Date(job.dueDate);
+  // Compare at day granularity so a deadline at 23:59 isn't 'overdue' a
+  // few seconds in.
+  const dueDay = Date.UTC(due.getUTCFullYear(), due.getUTCMonth(), due.getUTCDate());
+  const today = Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate());
+  const diffDays = Math.round((dueDay - today) / MS_PER_DAY);
+  if (diffDays < 0) return { kind: "overdue", days: Math.abs(diffDays) };
+  if (diffDays === 0) return { kind: "today" };
+  if (diffDays <= 3) return { kind: "soon", days: diffDays };
+  return { kind: "future", days: diffDays };
+}
+
+export function dueLabel(state: DueState): string {
+  switch (state.kind) {
+    case "overdue":
+      return state.days === 1 ? "1 gün gecikti" : `${state.days} gün gecikti`;
+    case "today":
+      return "Bugün teslim";
+    case "soon":
+      return state.days === 1 ? "Yarın teslim" : `${state.days} gün kaldı`;
+    case "future":
+      return `${state.days} gün kaldı`;
+    case "none":
+      return "";
+  }
+}

src/lib/appwrite/job-actions.ts

@@ -1,11 +1,13 @@
 "use server";
 
 import { revalidatePath } from "next/cache";
+import { redirect } from "next/navigation";
 import { AppwriteException, ID, Permission, Query, Role } from "node-appwrite";
 import { z } from "zod";
 
 import { logAudit } from "./audit";
 import { syncFinanceForJob } from "./finance-sync";
+import { archiveJobFiles } from "./job-file-archive";
 import { createNotification } from "./notification-helpers";
 import { calculateJobPriceForProsthetic } from "./pricing";
 import {
@@ -329,7 +331,71 @@ export async function acceptJobAction(
   revalidatePath(`/jobs/${jobId}`);
   revalidatePath("/jobs/inbound");
   revalidatePath("/jobs/outbound");
-  return { ok: true };
+  // Redirect forces a full RSC payload reload — bypasses any client-side
+  // cache that router.refresh() might otherwise miss.
+  redirect(`/jobs/${jobId}?flash=accepted`);
+}
+
+/**
+ * Lab takes all currently-pending jobs in one go. Same effect as calling
+ * acceptJobAction for each row individually — status flips to in_progress,
+ * step jumps to alt_yapi_prova, location lands at_lab. Partial failures
+ * are tolerated; we return how many actually moved.
+ */
+export async function bulkAcceptPendingJobsAction(): Promise<
+  JobActionState & { accepted?: number }
+> {
+  let ctx;
+  try {
+    ctx = await requireTenant();
+    requireRole(ctx, ["owner", "admin", "member"]);
+    requireTenantKind(ctx, ["lab"]);
+  } catch {
+    return { ok: false, error: "Bu işlemi yalnızca laboratuvar yapabilir." };
+  }
+
+  const { tablesDB } = createAdminClient();
+  const result = await tablesDB.listRows({
+    databaseId: DATABASE_ID,
+    tableId: TABLES.jobs,
+    queries: [
+      Query.equal("labTenantId", ctx.tenantId),
+      Query.equal("status", "pending"),
+      Query.limit(200),
+    ],
+  });
+  const rows = result.rows as unknown as Job[];
+  if (rows.length === 0) return { ok: true, accepted: 0 };
+
+  const outcomes = await Promise.allSettled(
+    rows.map(async (job) => {
+      await tablesDB.updateRow(DATABASE_ID, TABLES.jobs, job.$id, {
+        status: "in_progress",
+        currentStep: "alt_yapi_prova",
+        location: "at_lab",
+      });
+      void appendJobHistory({ job, step: "olcu", completedBy: ctx.user.id });
+      void createNotification({
+        tenantId: job.clinicTenantId,
+        jobId: job.$id,
+        message: `${ctx.settings?.companyName ?? "Lab"} hasta ${job.patientCode} işini işleme aldı, alt yapı üretiminde.`,
+      });
+    }),
+  );
+  const accepted = outcomes.filter((o) => o.status === "fulfilled").length;
+
+  void logAudit({
+    tenantId: ctx.tenantId,
+    userId: ctx.user.id,
+    action: "update",
+    entityType: "job",
+    entityId: "bulk",
+    changes: { bulk: "accept_pending", count: accepted },
+  });
+
+  revalidatePath("/jobs/inbound");
+  revalidatePath("/dashboard");
+  return { ok: true, accepted };
 }
 
 /**
@@ -435,7 +501,7 @@ export async function handToClinicAction(
   revalidatePath("/jobs/inbound");
   revalidatePath("/jobs/outbound");
   revalidatePath("/finance");
-  return { ok: true };
+  redirect(`/jobs/${jobId}?flash=handed`);
 }
 
 /**
@@ -518,7 +584,97 @@ export async function approveAtClinicAction(
   revalidatePath(`/jobs/${jobId}`);
   revalidatePath("/jobs/inbound");
   revalidatePath("/jobs/outbound");
-  return { ok: true };
+  redirect(`/jobs/${jobId}?flash=approved`);
+}
+
+/**
+ * Clinic rejects the prova and asks the lab to redo this stage. The job
+ * goes back to the lab without advancing the step, so the same prova
+ * stage will repeat after the lab finishes the rework. A note explaining
+ * what's wrong is required — there's no point bouncing a case back
+ * without telling the lab what to fix.
+ */
+export async function requestRevisionAction(
+  _prev: JobActionState,
+  formData: FormData,
+): Promise<JobActionState> {
+  const jobId = String(formData.get("jobId") ?? "").trim();
+  if (!jobId) return { ok: false, error: "İş bulunamadı." };
+  const note = String(formData.get("note") ?? "").trim();
+  if (!note) {
+    return {
+      ok: false,
+      error: "Düzeltme talebi için neyin yanlış olduğunu yazmanız gerek.",
+    };
+  }
+
+  let ctx;
+  try {
+    ctx = await requireTenant();
+    requireRole(ctx, ["owner", "admin", "member"]);
+    requireTenantKind(ctx, ["clinic"]);
+  } catch {
+    return { ok: false, error: "Düzeltme talebini yalnızca klinik açabilir." };
+  }
+
+  const job = await loadJobForTenant(jobId, ctx.tenantId);
+  if (!job || job.clinicTenantId !== ctx.tenantId) {
+    return { ok: false, error: "İş bulunamadı." };
+  }
+  if (job.status !== "in_progress") {
+    return { ok: false, error: "Yalnızca işlemdeki provalar için düzeltme istenebilir." };
+  }
+  if (job.location !== "at_clinic") {
+    return { ok: false, error: "İş şu an klinikte değil." };
+  }
+  if (!job.currentStep) {
+    return { ok: false, error: "Mevcut aşama bilinmiyor." };
+  }
+
+  try {
+    const { tablesDB } = createAdminClient();
+    await tablesDB.updateRow(DATABASE_ID, TABLES.jobs, jobId, {
+      location: "at_lab",
+      // currentStep stays the same — the lab will rework this stage.
+    });
+    await appendJobHistory({
+      job,
+      step: job.currentStep,
+      completedBy: ctx.user.id,
+      note: `[Düzeltme talebi] ${note}`,
+    });
+    void logAudit({
+      tenantId: ctx.tenantId,
+      userId: ctx.user.id,
+      action: "update",
+      entityType: "job",
+      entityId: jobId,
+      changes: {
+        location: "at_lab",
+        revisionRequestedAtStep: job.currentStep,
+        note,
+      },
+    });
+    const stepLabel =
+      job.currentStep === "alt_yapi_prova"
+        ? "alt yapı"
+        : job.currentStep === "ust_yapi_prova"
+          ? "üst yapı"
+          : "cila/bitim";
+    void createNotification({
+      tenantId: job.labTenantId,
+      jobId,
+      severity: "warning",
+      message: `Hasta ${job.patientCode} ${stepLabel} provası için düzeltme istendi: ${note.slice(0, 120)}`,
+    });
+  } catch (e) {
+    return { ok: false, error: appwriteError(e, "Düzeltme talebi gönderilemedi.") };
+  }
+
+  revalidatePath(`/jobs/${jobId}`);
+  revalidatePath("/jobs/inbound");
+  revalidatePath("/jobs/outbound");
+  redirect(`/jobs/${jobId}?flash=revision`);
 }
 
 export async function markDeliveredAction(
@@ -564,6 +720,9 @@ export async function markDeliveredAction(
       jobId,
       message: `Hasta ${job.patientCode} işi teslim alındı.`,
     });
+    // Free up Storage now that the case is closed. Metadata rows stay for
+    // the audit trail; only the binaries go.
+    void archiveJobFiles(jobId);
   } catch (e) {
     return { ok: false, error: appwriteError(e, "Teslim alınamadı.") };
   }
@@ -572,7 +731,7 @@ export async function markDeliveredAction(
   revalidatePath("/jobs/outbound");
   revalidatePath("/jobs/inbound");
   revalidatePath("/finance");
-  return { ok: true };
+  redirect(`/jobs/${jobId}?flash=delivered`);
 }
 
 export async function cancelJobAction(
@@ -615,6 +774,16 @@ export async function cancelJobAction(
       entityId: jobId,
       changes: { status: "cancelled" },
     });
+    // Notify the other side — cancellation is a warning, not normal traffic.
+    const otherTenantId =
+      ctx.tenantId === job.clinicTenantId ? job.labTenantId : job.clinicTenantId;
+    const actor = ctx.kind === "lab" ? "Laboratuvar" : "Klinik";
+    void createNotification({
+      tenantId: otherTenantId,
+      jobId,
+      severity: "warning",
+      message: `${actor} hasta ${job.patientCode} işini iptal etti.`,
+    });
   } catch (e) {
     return { ok: false, error: appwriteError(e, "İptal edilemedi.") };
   }
@@ -622,5 +791,5 @@ export async function cancelJobAction(
   revalidatePath(`/jobs/${jobId}`);
   revalidatePath("/jobs/inbound");
   revalidatePath("/jobs/outbound");
-  return { ok: true };
+  redirect(`/jobs/${jobId}?flash=cancelled`);
 }

src/lib/appwrite/job-file-archive.ts

@@ -0,0 +1,48 @@
+import "server-only";
+
+import { Query } from "node-appwrite";
+
+import { BUCKETS, DATABASE_ID, TABLES, type JobFile } from "./schema";
+import { createAdminClient } from "./server";
+
+/**
+ * Purge the binary scan/image/document objects backing a finished job from
+ * Appwrite Storage and stamp archivedAt on the corresponding rows. The row
+ * itself stays — the lab and clinic still need the audit trail (which file
+ * was uploaded, by whom, when) long after delivery.
+ *
+ * Best-effort: a single Storage error must not block the calling action.
+ * The function never throws.
+ */
+export async function archiveJobFiles(jobId: string): Promise<void> {
+  const { tablesDB, storage } = createAdminClient();
+  try {
+    const result = await tablesDB.listRows({
+      databaseId: DATABASE_ID,
+      tableId: TABLES.jobFiles,
+      queries: [Query.equal("jobId", jobId), Query.limit(500)],
+    });
+    const rows = result.rows as unknown as JobFile[];
+    const now = new Date().toISOString();
+    await Promise.all(
+      rows.map(async (r) => {
+        if (r.archivedAt) return;
+        try {
+          await storage.deleteFile(BUCKETS.jobFiles, r.fileId);
+        } catch {
+          // file already gone, or storage unreachable — still flip archivedAt
+          // so the UI doesn't keep teasing a download button.
+        }
+        try {
+          await tablesDB.updateRow(DATABASE_ID, TABLES.jobFiles, r.$id, {
+            archivedAt: now,
+          });
+        } catch {
+          // row update failed; leave it for the next call to retry.
+        }
+      }),
+    );
+  } catch {
+    // List itself failed — nothing to do.
+  }
+}

src/lib/appwrite/job-queries.ts

@@ -45,38 +45,68 @@ function enrichJob(j: Job, counterpartId: string, map: Map<string, JobCounterpar
   return { ...j, counterpart: map.get(counterpartId) ?? null };
 }
 
-/** Inbound for a lab tenant — jobs the lab has received. */
+export type JobListFilters = {
-export async function listInboundJobs(labTenantId: string): Promise<JobWithCounterpart[]> {
+  status?: string;
+  location?: string;
+  /** Free-text matched client-side against patientCode + counterpart name. */
+  q?: string;
+};
+
+async function listJobsFor(
+  side: "lab" | "clinic",
+  tenantId: string,
+  filters: JobListFilters = {},
+): Promise<JobWithCounterpart[]> {
   const { tablesDB } = createAdminClient();
+  const sideField = side === "lab" ? "labTenantId" : "clinicTenantId";
+  const queries = [
+    Query.equal(sideField, tenantId),
+    Query.orderDesc("$createdAt"),
+    Query.limit(200),
+  ];
+  if (filters.status) queries.unshift(Query.equal("status", filters.status));
+  if (filters.location) queries.unshift(Query.equal("location", filters.location));
+
   const result = await tablesDB.listRows({
     databaseId: DATABASE_ID,
     tableId: TABLES.jobs,
-    queries: [
+    queries,
-      Query.equal("labTenantId", labTenantId),
-      Query.orderDesc("$createdAt"),
-      Query.limit(200),
-    ],
   });
   const jobs = result.rows as unknown as Job[];
-  const map = await fetchTenants(Array.from(new Set(jobs.map((j) => j.clinicTenantId))));
+  const counterpartField = side === "lab" ? "clinicTenantId" : "labTenantId";
-  return toPlain(jobs.map((j) => enrichJob(j, j.clinicTenantId, map)));
+  const map = await fetchTenants(
+    Array.from(new Set(jobs.map((j) => j[counterpartField]))),
+  );
+  const enriched = jobs.map((j) => enrichJob(j, j[counterpartField], map));
+
+  // Free-text filter applied after fetch — only against the fields a user
+  // would actually type (patient code, counterpart company name).
+  const q = filters.q?.trim().toLocaleLowerCase("tr-TR");
+  const filtered = q
+    ? enriched.filter((j) => {
+        const hay = `${j.patientCode} ${j.counterpart?.companyName ?? ""}`
+          .toLocaleLowerCase("tr-TR");
+        return hay.includes(q);
+      })
+    : enriched;
+
+  return toPlain(filtered);
+}
+
+/** Inbound for a lab tenant — jobs the lab has received. */
+export async function listInboundJobs(
+  labTenantId: string,
+  filters: JobListFilters = {},
+): Promise<JobWithCounterpart[]> {
+  return listJobsFor("lab", labTenantId, filters);
 }
 
 /** Outbound for a clinic tenant — jobs the clinic has sent. */
-export async function listOutboundJobs(clinicTenantId: string): Promise<JobWithCounterpart[]> {
+export async function listOutboundJobs(
-  const { tablesDB } = createAdminClient();
+  clinicTenantId: string,
-  const result = await tablesDB.listRows({
+  filters: JobListFilters = {},
-    databaseId: DATABASE_ID,
+): Promise<JobWithCounterpart[]> {
-    tableId: TABLES.jobs,
+  return listJobsFor("clinic", clinicTenantId, filters);
-    queries: [
-      Query.equal("clinicTenantId", clinicTenantId),
-      Query.orderDesc("$createdAt"),
-      Query.limit(200),
-    ],
-  });
-  const jobs = result.rows as unknown as Job[];
-  const map = await fetchTenants(Array.from(new Set(jobs.map((j) => j.labTenantId))));
-  return toPlain(jobs.map((j) => enrichJob(j, j.labTenantId, map)));
 }
 
 /** For clinic's "Yeni İş Yayınla" form: list approved labs they can send to. */

src/lib/appwrite/mfa-actions.ts

@@ -0,0 +1,104 @@
+"use server";
+
+import { revalidatePath } from "next/cache";
+import { AppwriteException, AuthenticatorType } from "node-appwrite";
+
+import { createSessionClient } from "./server";
+
+export type MfaEnrollState = {
+  ok: boolean;
+  error?: string;
+  /** otpauth:// URI for QR; only set on enroll start. */
+  uri?: string;
+  /** Plain TOTP secret as a fallback if the QR can't be scanned. */
+  secret?: string;
+};
+
+export const initialMfaEnrollState: MfaEnrollState = { ok: false };
+
+export type MfaActionState = {
+  ok: boolean;
+  error?: string;
+  /** Recovery codes returned right after enable; show once, never stored again. */
+  recoveryCodes?: string[];
+};
+
+export const initialMfaActionState: MfaActionState = { ok: false };
+
+function appwriteError(e: unknown, fallback = "Beklenmeyen bir hata oluştu."): string {
+  if (e instanceof AppwriteException) return e.message || fallback;
+  return process.env.NODE_ENV !== "production" && e instanceof Error
+    ? `${fallback} (${e.message})`
+    : fallback;
+}
+
+/**
+ * Step 1 of TOTP enroll: produce a fresh secret and otpauth URI for the
+ * user's authenticator app. Calling this when an authenticator already
+ * exists yields the same secret back.
+ */
+export async function startMfaEnrollAction(): Promise<MfaEnrollState> {
+  try {
+    const { account } = await createSessionClient();
+    const res = await account.createMFAAuthenticator(AuthenticatorType.Totp);
+    return { ok: true, uri: res.uri, secret: res.secret };
+  } catch (e) {
+    return { ok: false, error: appwriteError(e, "MFA başlatılamadı.") };
+  }
+}
+
+/**
+ * Step 2 of TOTP enroll: user scanned the QR, opened their authenticator,
+ * typed the 6-digit code. We verify, then flip account.mfa = true so
+ * future sign-ins require the second factor. Returns recovery codes —
+ * shown once.
+ */
+export async function verifyMfaEnrollAction(
+  _prev: MfaActionState,
+  formData: FormData,
+): Promise<MfaActionState> {
+  const otp = String(formData.get("otp") ?? "").trim();
+  if (!otp || otp.length < 6) {
+    return { ok: false, error: "6 haneli kodu girin." };
+  }
+  try {
+    const { account } = await createSessionClient();
+    await account.updateMFAAuthenticator(AuthenticatorType.Totp, otp);
+    await account.updateMFA(true);
+    const codes = await account.createMFARecoveryCodes();
+    return { ok: true, recoveryCodes: codes.recoveryCodes };
+  } catch (e) {
+    return { ok: false, error: appwriteError(e, "Doğrulanamadı.") };
+  }
+}
+
+/**
+ * Disable MFA: turn the account flag off and remove the TOTP authenticator
+ * so the user can re-enroll later with a fresh secret. Requires a current
+ * authenticated session.
+ */
+export async function disableMfaAction(): Promise<MfaActionState> {
+  try {
+    const { account } = await createSessionClient();
+    await account.updateMFA(false);
+    try {
+      await account.deleteMFAAuthenticator(AuthenticatorType.Totp);
+    } catch {
+      // Already removed — ignore.
+    }
+    revalidatePath("/settings/security");
+    return { ok: true };
+  } catch (e) {
+    return { ok: false, error: appwriteError(e, "Devre dışı bırakılamadı.") };
+  }
+}
+
+export async function regenerateRecoveryCodesAction(): Promise<MfaActionState> {
+  try {
+    const { account } = await createSessionClient();
+    const codes = await account.updateMFARecoveryCodes();
+    return { ok: true, recoveryCodes: codes.recoveryCodes };
+  } catch (e) {
+    return { ok: false, error: appwriteError(e, "Yedek kodlar üretilemedi.") };
+  }
+}

src/lib/appwrite/notification-helpers.ts

@@ -2,7 +2,12 @@ import "server-only";
 
 import { ID, Permission, Query, Role } from "node-appwrite";
 
-import { DATABASE_ID, TABLES, type Notification } from "./schema";
+import {
+  DATABASE_ID,
+  TABLES,
+  type Notification,
+  type NotificationSeverity,
+} from "./schema";
 import { createAdminClient } from "./server";
 import { toPlain } from "./serialize";
 
@@ -12,6 +17,9 @@ type CreateNotificationInput = {
   jobId?: string;
   connectionId?: string;
   message: string;
+  /** Defaults to 'info'. Use 'warning' for things that need the user's
+   *  attention (revision, cancellation, rejections). */
+  severity?: NotificationSeverity;
 };
 
 /**
@@ -32,6 +40,7 @@ export async function createNotification(input: CreateNotificationInput): Promis
         connectionId: input.connectionId,
         message: input.message.slice(0, 500),
         read: false,
+        severity: input.severity ?? "info",
       },
       [
         Permission.read(Role.team(input.tenantId)),

src/lib/appwrite/patient-queries.ts

@@ -2,7 +2,7 @@ import "server-only";
 
 import { Query } from "node-appwrite";
 
-import { DATABASE_ID, TABLES, type Patient } from "./schema";
+import { DATABASE_ID, TABLES, type Job, type Patient } from "./schema";
 import { createAdminClient } from "./server";
 import { toPlain } from "./serialize";
 
@@ -44,3 +44,47 @@ export async function getPatient(
     return null;
   }
 }
+
+/**
+ * Every job linked to this patient — by explicit patientId on newer jobs,
+ * or by matching patientCode on legacy rows that pre-date the relation
+ * (we still want to surface that history).
+ */
+export async function listPatientJobs(
+  patientId: string,
+  patientCode: string,
+  clinicTenantId: string,
+): Promise<Job[]> {
+  const { tablesDB } = createAdminClient();
+  const [byId, byCode] = await Promise.all([
+    tablesDB.listRows({
+      databaseId: DATABASE_ID,
+      tableId: TABLES.jobs,
+      queries: [
+        Query.equal("clinicTenantId", clinicTenantId),
+        Query.equal("patientId", patientId),
+        Query.orderDesc("$createdAt"),
+        Query.limit(200),
+      ],
+    }),
+    tablesDB.listRows({
+      databaseId: DATABASE_ID,
+      tableId: TABLES.jobs,
+      queries: [
+        Query.equal("clinicTenantId", clinicTenantId),
+        Query.equal("patientCode", patientCode),
+        Query.orderDesc("$createdAt"),
+        Query.limit(200),
+      ],
+    }),
+  ]);
+  const seen = new Set<string>();
+  const merged: Job[] = [];
+  for (const row of [...byId.rows, ...byCode.rows] as unknown as Job[]) {
+    if (seen.has(row.$id)) continue;
+    seen.add(row.$id);
+    merged.push(row);
+  }
+  merged.sort((a, b) => (a.$createdAt < b.$createdAt ? 1 : -1));
+  return toPlain(merged);
+}

src/lib/appwrite/payment-actions.ts

@@ -269,6 +269,7 @@ export async function rejectPaymentAction(
     });
     void createNotification({
       tenantId: row.tenantId,
+      severity: "warning",
       message: `Ödeme bildiriminiz reddedildi: ${row.amount.toLocaleString("tr-TR")} ${row.currency}.`,
     });
   } catch (e) {

src/lib/appwrite/schema.ts

@@ -137,6 +137,9 @@ export interface JobFile extends Row {
   name: string;
   size: number;
   mimeType?: string;
+  /** Set when the binary is purged from object storage after a job closes.
+   *  The row stays for audit; downloads/previews are disabled past this point. */
+  archivedAt?: string;
 }
 
 export interface JobStatusHistory extends Row {
@@ -191,6 +194,8 @@ export interface Payment extends Row {
   recordedBy: string;
 }
 
+export type NotificationSeverity = "info" | "warning";
+
 export interface Notification extends Row {
   tenantId: string;
   userId?: string;
@@ -198,6 +203,9 @@ export interface Notification extends Row {
   connectionId?: string;
   message: string;
   read: boolean;
+  /** Visual + filtering hint. 'warning' for things requiring attention
+   *  (revision request, cancellation, payment / connection rejection). */
+  severity?: NotificationSeverity;
 }
 
 export type AuditAction = "create" | "update" | "delete";