8a91a862ca
Some checks failed
Architecture Governance / architecture (push) Has been cancelled
The status <select> on the order detail page let an admin jump straight to 'cancelled'/'refunded' with no confirmation, bypassing the dedicated cancel()/requestRefund() buttons that do confirm. It also stayed editable after an order reached a terminal status, so it could be moved backward out of cancelled/refunded. - Dropdown options now exclude terminal statuses; reaching them requires the confirm-gated buttons. - setStatus() guards against a terminal status slipping through regardless. - Once an order is terminal (isTerminal(), already computed but unused), the dropdown and both action buttons are disabled. - Same fix applied to the orders list page's bulk status dropdown, which had the identical gap. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>