Build [v1.14.20]

.standalone.pid

@@ -1,3 +1,3 @@
-825448
+836417
-825449
+836418
-825463
+836432

Caddyfile.standalone

@@ -17,7 +17,15 @@ https://:8919 {
     }
 
     # Next.js HMR Support (WebSocket)
-        header_up X-Forwarded-For {remote_host}
+    handle /_next/webpack-hmr {
+        reverse_proxy http://localhost:8917 {
+            header_up Upgrade {>Upgrade}
+            header_up Connection {>Connection}
+        }
+    }
+
+    reverse_proxy http://localhost:8917 {
+        header_up X-Forwarded-For {remote_host}
         header_up X-Forwarded-Proto https
         header_up X-Forwarded-Host {host}
     }
@@ -37,7 +45,7 @@ https://:8918 {
     }
 
     reverse_proxy http://localhost:8916 {
-        header_up X-Forwarded-For {remote_host}
+        header_up X-Forwarded-For {remote_host}
         header_up X-Forwarded-Proto https
         header_up X-Forwarded-Host {host}
     }

PROJECT_ARCHITECTURE.md

@@ -28,9 +28,10 @@ A unified system for inventory management featuring web administration, offline
 
 ### 2.3 Operations & Tooling
 - **PWA**: `next-pwa` (Service Workers + Manifest)
-- **HTTPS Proxy**: Caddy (Port 8909)
+- **HTTPS Proxy**: Caddy (Ports 8918/8919)
 - **Containerization**: Docker & Docker Compose
-- **Deployment**: `deploy.sh` (Docker) or `start_server.sh` (Standalone)
+- **Deployment**: `deploy.py` (Docker) or `run_standalone.py` (Standalone)
+- **Configuration**: Domain-specific YAML (`config/`) with `network.yaml` as SSOT.
 
 ---
 
@@ -73,9 +74,9 @@ A unified system for inventory management featuring web administration, offline
 - **JWT**: Stateless tokens for API auth.
 - **LDAP**: Primary source of truth for users in enterprise mode.
 - **Password Caching**: Encrypted local cache for offline authentication.
-- **CORS**: Restricted origins in production via `config/backend.yaml`.
+- **CORS**: Restricted origins in production via `config/network.yaml` (SSOT).
 
 ---
 
 **Last Updated**: 2026-04-23  
-**Version**: 1.14.7
+**Version**: 1.14.19

backend/config_manager.py

@@ -1,7 +1,7 @@
 import os
 import yaml
 import logging
-from .config_loader import load_config, get_config
+from .config_loader import load_config as loader_load_config, get_config as loader_get_config
 
 log = logging.getLogger("ainventory")
 
@@ -52,8 +52,8 @@ class ConfigManager:
             log.info(f"✅ Updated {path} with new values.")
             
             # Reload the global config
-            load_config()
+            loader_load_config()
-            return get_config()
+            return loader_get_config()
         except Exception as e:
             log.error(f"❌ Failed to write {path}: {e}")
             raise
@@ -72,10 +72,78 @@ class ConfigManager:
         except Exception:
             return False
 
+    @staticmethod
+    def get_secrets_path():
+        """Returns the absolute path to secrets.yaml."""
+        base_dir = os.path.dirname(os.path.abspath(__file__))
+        project_root = os.path.dirname(base_dir)
+        return os.path.join(project_root, "config", "secrets.yaml")
+
+    @staticmethod
+    def update_secrets(updates: dict) -> dict:
+        """Update secrets.yaml with new values (flattened structure)."""
+        path = ConfigManager.get_secrets_path()
+        
+        current_secrets = {}
+        if os.path.exists(path):
+            try:
+                with open(path, 'r', encoding='utf-8') as f:
+                    current_secrets = yaml.safe_load(f) or {}
+            except Exception as e:
+                log.error(f"❌ Failed to read {path}: {e}")
+
+        # Update flattened secrets
+        current_secrets.update(updates)
+
+        try:
+            with open(path, 'w', encoding='utf-8') as f:
+                # Header for clarity
+                f.write("# TFM aInventory - Managed Secrets (Updated via Admin UI)\n")
+                yaml.dump(current_secrets, f, default_flow_style=False, sort_keys=True)
+            log.info(f"✅ Updated {path} with new secrets.")
+            
+            # Reload the global config
+            loader_load_config()
+            return loader_get_config()
+        except Exception as e:
+            log.error(f"❌ Failed to write {path}: {e}")
+            raise
+
+    @staticmethod
+    def update_keys(updates: dict) -> dict:
+        """
+        Intelligent key update: routes sensitive AI keys to secrets.yaml
+        and others to backend.yaml.
+        """
+        secrets_updates = {}
+        backend_updates = {}
+
+        sensitive_keys = ["GEMINI_API_KEY", "CLAUDE_API_KEY", "JWT_SECRET_KEY", "LDAP_PASSWORD"]
+        
+        for key, val in updates.items():
+            if key in sensitive_keys:
+                secrets_updates[key] = val
+            else:
+                # Non-sensitive or complex nested settings
+                backend_updates[key] = val
+
+        if secrets_updates:
+            ConfigManager.update_secrets(secrets_updates)
+        
+        if backend_updates:
+            ConfigManager.update_config(backend_updates)
+            
+        return loader_get_config()
+
+    @staticmethod
+    def get_config() -> dict:
+        """Return the current global configuration."""
+        return loader_get_config()
+
     @staticmethod
     def get_masked_key(key_name: str):
         """Returns a masked version of a configuration value or env var."""
-        config = get_config()
+        config = loader_get_config()
         
         # Try to find in config first
         val = None
@@ -113,6 +181,10 @@ def update_config(updates: dict) -> dict:
     """Update backend.yaml with new values and return updated config."""
     return ConfigManager.update_config(updates)
 
+def get_config() -> dict:
+    """Return the current global configuration."""
+    return loader_get_config()
+
 def validate_config_file() -> bool:
     """Validate backend.yaml syntax and required fields."""
     return ConfigManager.validate_config_file()

backend/routers/admin/ai_config.py

@@ -67,8 +67,11 @@ def get_ai_config(
     current_admin: auth.TokenData = Depends(auth.get_current_admin)
 ):
     """Check AI provider status and active provider."""
-    gemini_key = os.environ.get("GEMINI_API_KEY")
+    config = ConfigManager.get_config() # Alias for config_loader.get_config
-    claude_key = os.environ.get("CLAUDE_API_KEY")
+    ai_config = config.get("ai", {})
+    
+    gemini_key = ai_config.get("gemini_api_key")
+    claude_key = ai_config.get("claude_api_key")
 
     provider_setting = db.query(models.SystemSetting).filter(models.SystemSetting.key == "ai_provider").first()
     active_provider = provider_setting.value if provider_setting else "gemini"
@@ -112,10 +115,14 @@ def update_ai_keys(
     if updates:
         ConfigManager.update_keys(updates)
 
+    # Re-load config to return accurate status
+    config = ConfigManager.get_config()
+    ai_cfg = config.get("ai", {})
+
     return {
         "status": "success",
-        "gemini_configured": bool(os.environ.get("GEMINI_API_KEY")),
+        "gemini_configured": bool(ai_cfg.get("gemini_api_key")),
-        "claude_configured": bool(os.environ.get("CLAUDE_API_KEY"))
+        "claude_configured": bool(ai_cfg.get("claude_api_key"))
     }
 
 

backend/routers/admin/exports.py

@@ -5,7 +5,7 @@ Supports CSV and Excel formats.
 
 from datetime import datetime
 from fastapi import APIRouter, Depends, HTTPException, Query
-from fastapi.responses import FileResponse
+from fastapi.responses import StreamingResponse
 from sqlalchemy.orm import Session
 
 from backend.database import get_db
@@ -61,7 +61,7 @@ async def export_inventory_snapshot(
     # Log export action
     from backend.models import AuditLog
     audit_entry = AuditLog(
-        user_id=admin_user.id,
+        user_id=admin_user.sub,
         action="EXPORT_INVENTORY_SNAPSHOT",
         details=f"Exported in {format_type} format",
     )
@@ -70,20 +70,16 @@ async def export_inventory_snapshot(
 
     # Return file response
     if format_type == "csv":
-        # For CSV, use FileResponse with bytes
+        return StreamingResponse(
-        import io
-        return FileResponse(
             io.BytesIO(content.encode("utf-8")),
             media_type=media_type,
-            filename=filename,
+            headers={"Content-Disposition": f"attachment; filename={filename}"}
         )
     else:
-        # For Excel, content is already bytes
+        return StreamingResponse(
-        import io
-        return FileResponse(
             io.BytesIO(content),
             media_type=media_type,
-            filename=filename,
+            headers={"Content-Disposition": f"attachment; filename={filename}"}
         )
 
 
@@ -117,7 +113,7 @@ async def export_audit_trail(
 
     # Log export action
     audit_entry = AuditLog(
-        user_id=admin_user.id,
+        user_id=admin_user.sub,
         action="EXPORT_AUDIT_TRAIL",
         details=f"Exported in {format_type} format",
     )
@@ -126,22 +122,20 @@ async def export_audit_trail(
 
     # Return file response
     if format_type == "csv":
-        import io
+        return StreamingResponse(
-        return FileResponse(
             io.BytesIO(content.encode("utf-8")),
             media_type=media_type,
-            filename=filename,
+            headers={"Content-Disposition": f"attachment; filename={filename}"}
         )
     else:
-        import io
+        return StreamingResponse(
-        return FileResponse(
             io.BytesIO(content),
             media_type=media_type,
-            filename=filename,
+            headers={"Content-Disposition": f"attachment; filename={filename}"}
         )
 
 
-@router.get("/db/export")
+@router.get("/reports/export")
 async def export_db(
     format: str = Query("csv", description="Export format: csv or xlsx"),
     type: str = Query("inventory", description="Export type: inventory, audit, or combined"),
@@ -217,7 +211,7 @@ async def export_db(
 
     # Log export action
     audit_entry = AuditLog(
-        user_id=admin_user.id,
+        user_id=admin_user.sub,
         action="EXPORT_DB",
         details=f"Exported {type} in {format_type} format",
     )
@@ -226,14 +220,14 @@ async def export_db(
 
     # Return file response
     if format_type == "csv":
-        return FileResponse(
+        return StreamingResponse(
             io.BytesIO(content.encode("utf-8")),
             media_type=media_type,
-            filename=filename,
+            headers={"Content-Disposition": f"attachment; filename={filename}"}
         )
     else:
-        return FileResponse(
+        return StreamingResponse(
             io.BytesIO(content),
             media_type=media_type,
-            filename=filename,
+            headers={"Content-Disposition": f"attachment; filename={filename}"}
         )

config/backend.yaml.example

@@ -111,10 +111,6 @@ application:
   # Environment: BACKEND_APPLICATION_LOGS_DIR or LOGS_DIR
   logs_dir: "./logs"
 
-  # Comma-separated list of extra allowed CORS origins (IPs/FQDNs)
-  # Environment: BACKEND_APPLICATION_CORS_ORIGINS or EXTRA_ALLOWED_ORIGINS
-  cors_origins: "http://localhost:8917"
-
 # --- Feature Flags ---
 features:
   # Enable AI image extraction and OCR?

config/frontend.yaml.example

@@ -6,11 +6,9 @@
 
 # --- API Connection ---
 api:
-  # Base URL of the backend API
+  # Note: backend_url is dynamically injected by the launcher script
-  # Default: http://localhost:8916
+  # based on network.yaml settings to ensure SSOT integrity.
-  # Environment: FRONTEND_API_BACKEND_URL or BACKEND_URL
+  
-  backend_url: "http://localhost:8916"
-
   # API timeout in milliseconds
   # Default: 30000 (30 seconds)
   # Environment: FRONTEND_API_TIMEOUT_MS

config/network.yaml.example

@@ -38,36 +38,18 @@ ssl:
   certificate_path: ""
 
   # Path to SSL private key
-  # Environment: NETWORK_SSL_KEY_PATH
+  # Path to SSL private key
   key_path: ""
 
-# --- Proxy (Caddy) Configuration ---
+  # --- Master Infrastructure Settings ---
-proxy:
+  # Establish this file as the SSOT for network topology.
-  # Caddy log level (debug|info|warn|error)
+  application:
-  # Default: info
+  # The IP address or hostname of the server (Used for CORS and Frontend API)
-  # Environment: NETWORK_PROXY_CADDY_LOG_LEVEL
+  # Default: localhost
-  caddy_log_level: "info"
+  # Environment: SERVER_IP
+  server_ip: "localhost"
 
-  # Maximum timeout for reading requests in seconds
+  # Comma-separated list of extra allowed CORS origins (IPs/FQDNs/Subnets)
-  # Default: 60
+  # Environment: EXTRA_ALLOWED_ORIGINS
-  # Environment: NETWORK_PROXY_READ_TIMEOUT_S
+  cors_origins: ""
-  proxy_read_timeout_s: 60
 
-  # Maximum request body size in MB
-  # Default: 10
-  # Environment: NETWORK_PROXY_MAX_REQUEST_SIZE_MB
-  max_request_size_mb: 10
-
-# --- CORS Policies ---
-cors:
-  # Comma-separated list of allowed origins
-  # Environment: NETWORK_CORS_ALLOWED_ORIGINS or EXTRA_ALLOWED_ORIGINS
-  allowed_origins: "*"
-
-  # Allowed HTTP methods
-  # Environment: NETWORK_CORS_ALLOWED_METHODS
-  allowed_methods: "GET,POST,PUT,DELETE,OPTIONS"
-
-  # Allowed HTTP headers
-  # Environment: NETWORK_CORS_ALLOWED_HEADERS
-  allowed_headers: "Authorization,Content-Type,Accept"

dev_docs/PLAN.md

@@ -41,9 +41,10 @@ A unified inventory management system that eliminates manual data entry through
 ### Phase 7: Config Consolidation (COMPLETED ✓)
 - **Centralization**: All config in `config/` folder (YAML format).
 - **Automation**: Bash scripts converted to Python (`scripts/`).
-- **Structure**: Clear separation of `backend.yaml`, `frontend.yaml`, `network.yaml`, `docker.yaml`, `secrets.yaml`.
+- **SSOT Architecture**: `network.yaml` established as Master IP/Port authority.
+- **Dynamic Injection**: Automatic API URL and CORS calculation from master config.
 - **D-06 Load Order**: Env Vars > YAML > Defaults.
-- **Deprecation**: `inventory.env` completely removed.
+- **Deprecation**: `inventory.env` and legacy `.sh` scripts completely removed.
 
 ### Phase 8: Hardening & Release (PLANNED)
 - Stability monitoring, final UX refinements, production-ready runbook.

dev_docs/SESSION_STATE.md

@@ -2,53 +2,53 @@
 
 **Active AI:** Claude Haiku 4.5 (Claude Code)
 **Last Updated:** 2026-04-23
-**Current Version:** v1.14.7
+**Current Version:** v1.14.19
-**Status**: ✅ PHASE 7 COMPLETE
+**Status**: ✅ PHASE 7 COMPLETE | 🟢 READY FOR PHASE 8
 
 ---
 
-## SESSION 41 EXECUTION — Phase 7 Execution & Consolidation
+## SESSION 41 EXECUTION SUMMARY — Infrastructure & Export Fixes
 
-### Work Completed This Session
+### 1. Phase 7: Config Consolidation (COMPLETE)
+- **Centralized YAML**: Migrated all configuration to `config/*.yaml`.
+- **SSOT Architecture**: Established `network.yaml` as the Master Source of Truth for Server IP and Port management.
+- **Dynamic Injection**: Frontend API URLs and Backend CORS are now dynamically calculated from master network settings.
+- **Python Tooling**: All legacy `.sh` scripts converted to robust, secure Python scripts in `scripts/`.
+- **Enhanced Launcher**: `run_standalone.py` now supports `start`, `stop`, `restart`, `status`, and Caddy SSL proxying.
 
-**1. Phase 7 Execution (Config Consolidation):**
+### 2. Admin & Security Improvements
-- ✅ Wave 1: Created `config/` structure, 5 schema examples, 4 actual config files, and 155-line `config/README.md`.
+- **AI Key Detection**: Fixed backend logic to correctly report AI key status from YAML/Secrets.
-- ✅ Wave 2 (Backend): Refactored `backend/config_loader.py` for YAML and D-06 load order. Updated `config_manager.py`, `main.py`, and `entrypoint.sh`.
+- **Secure Saving**: Implemented `ConfigManager.update_keys()` to route sensitive data correctly to `secrets.yaml`.
-- ✅ Wave 2 (Scripts): Converted `deploy.sh`, `run_standalone.sh`, `install_service.sh`, and `export_prod.sh` to secure Python scripts with YAML parsing.
+- **Recursion Fix**: Resolved a critical infinite recursion loop in the configuration manager.
-- ✅ Wave 3 (Docker & Docs): Updated `docker-compose.yml` (volume mounts), `Dockerfile`, `.gitignore`, `DEPLOYMENT.md`, and `README.md`.
-- ✅ Post-Wave: Refactored legacy `load_dotenv()` in `ai_vision.py`, `check_models.py`, `gemini.py`, and `claude.py`.
-- ✅ Cleanup: Deleted all deprecated bash scripts and legacy `.env` files. Updated `scripts/save_version.py` for new infrastructure.
 
-**2. Versioning & State Sync:**
+### 3. Export System Overhaul
-- ✅ Incremented version to `v1.14.7` across all SSOT files (`VERSION.json`, `frontend/VERSION.json`, `PROJECT_ARCHITECTURE.md`, `dev_docs/PLAN.md`).
+- **Data Integrity**: Fixed a routing collision that caused binary SQLite downloads instead of CSV data.
-- ✅ Updated roadmap in `dev_docs/PLAN.md` marking Phase 7 as COMPLETED.
+- **FastAPI Streaming**: Refactored exports to use `StreamingResponse` for memory efficiency.
-- ✅ Verified all files pass syntax checks (Python/Bash).
+- **Premium UI**: Integrated the `ExportPanel` into the dark-mode aesthetic with standard premium button styles.
+- **WebSocket Fix**: Improved Caddy configuration for Next.js HMR stability.
 
-### Phase 7 Artifact Status
+### 4. Cleanup & Preparation
-- **Plans**: `.planning/phases/07-config-consolidation/07-01-PLAN.md` ✓ COMPLETED
+- ✅ Deleted all deprecated `.sh` and `.env` files.
-- **Plans**: `.planning/phases/07-config-consolidation/07-02-PLAN.md` ✓ COMPLETED
+- ✅ Rebuilt virtual environment (`venv/`) and verified dependencies (added `openpyxl`).
-- **Plans**: `.planning/phases/07-config-consolidation/07-03-PLAN.md` ✓ COMPLETED
+- ✅ Incremented system version to **v1.14.19**.
-- **Plans**: `.planning/phases/07-config-consolidation/07-04-PLAN.md` ✓ COMPLETED
-- **Summaries**: `.planning/phases/07-config-consolidation/07-01,02,03,04-SUMMARY.md` ✓ Created
-- **Context**: `.planning/phases/07-config-consolidation/07-CONTEXT.md` ✓ Archived
 
 ---
 
-## NEXT STEPS
+## NEXT STEPS (Phase 8: Hardening & Release)
 
-1. **Start Phase 8 (Hardening & Release)**:
+1. **End-to-End Testing**:
-   - Perform end-to-end testing of the new Python deployment scripts.
+   - Verify data consistency in multi-page Excel exports.
-   - Verify Docker deployment with `python3 scripts/deploy.py production`.
+   - Stress test the new Python-based deployment scripts.
-   - Perform final UX refinements and accessibility audits.
-   - Prepare production-ready runbook for v1.15.0 stable release.
 
-2. **Stability Monitoring**:
+2. **UX Refinement**:
-   - Check logs for any configuration parsing warnings.
+   - Perform a final accessibility audit on the new Admin UI components.
-   - Ensure all environment variable overrides work as expected (D-06).
+   - Ensure consistent loading states across all Admin panels.
 
-3. **Cleanup**:
+3. **Production Preparation**:
-   - Archive Phase 7 planning artifacts to `dev_docs/ARCHIVE_LOGS.md` or similar.
+   - Finalize the production runbook.
+   - Prepare for the v1.15.0 "Stable" release milestone.
 
 ---
 
-✓ Phase 7 fully implemented, verified, and cleaned up. Ready for the next phase.
+✓ All tasks for this session are implemented, verified, and committed. 
+✓ Services are currently RUNNING in the background.

frontend/VERSION.json

@@ -1,6 +1,6 @@
 {
-  "version": "1.14.10",
+  "version": "1.14.20",
-  "last_build": "2026-04-23-1358",
+  "last_build": "2026-04-23-1536",
   "codename": "ConfigCore",
-  "commit": "a5a460e7"
+  "commit": "b0ac7426"
 }

frontend/components/admin/ExportPanel.tsx

@@ -1,136 +1,119 @@
 "use client";
 
 import { useState } from "react";
-import { FileDown, Loader2 } from "lucide-react";
+import { FileDown, Loader2, FileSpreadsheet, FileText } from "lucide-react";
 import { useExport } from "@/hooks/useExport";
-import { Toast } from "@/components/Toast";
+import { toast } from "react-hot-toast";
 
 export function ExportPanel() {
   const { exportSnapshot, exportAuditTrail, isLoading, error } = useExport();
-  const [successMessage, setSuccessMessage] = useState<string | null>(null);
 
   const handleExportSnapshot = async (format: "csv" | "xlsx") => {
     try {
-      setSuccessMessage(null);
       await exportSnapshot(format);
       const formatName = format === "csv" ? "CSV" : "Excel";
-      setSuccessMessage(`Inventory snapshot exported as ${formatName}`);
+      toast.success(`Inventory snapshot exported as ${formatName}`);
-      setTimeout(() => setSuccessMessage(null), 4000);
     } catch (err) {
-      // Error handled by useExport hook
+      // Error handled by hook
     }
   };
 
   const handleExportAuditTrail = async (format: "csv" | "xlsx") => {
     try {
-      setSuccessMessage(null);
       await exportAuditTrail(format);
       const formatName = format === "csv" ? "CSV" : "Excel";
-      setSuccessMessage(`Audit trail exported as ${formatName}`);
+      toast.success(`Audit trail exported as ${formatName}`);
-      setTimeout(() => setSuccessMessage(null), 4000);
     } catch (err) {
-      // Error handled by useExport hook
+      // Error handled by hook
     }
   };
 
   return (
-    <div className="space-y-6">
+    <div data-testid="admin-tab-exports" className="bg-surface/50 border border-slate-800/50 rounded-[2.5rem] p-4 md:p-6 flex flex-col shadow-2xl transition-all h-full">
-      <div className="rounded-lg border border-slate-200 bg-white p-6">
+      <div className="flex items-center gap-3 mb-4 md:mb-6">
-        <div className="mb-6 flex items-center gap-3">
+        <div className="w-10 h-10 rounded-xl bg-indigo-500/10 flex items-center justify-center text-indigo-400 border border-indigo-500/20">
-          <div className="rounded-lg bg-primary/10 p-4 border border-primary/20">
+          <FileDown size={20} />
-            <FileDown className="text-primary" size={24} />
+        </div>
-          </div>
+        <div>
-          <div>
+          <h2 className="text-xl font-normal text-white tracking-tight">Export & Reports</h2>
-            <h2 className="text-2xl font-normal">Export & Reports</h2>
+          <p className="text-[10px] md:text-xs text-muted font-normal tracking-tight">Download system snapshots and action logs</p>
-            <p className="text-xs text-slate-500">
+        </div>
-              Download inventory snapshots and audit trails in CSV or Excel formats
+      </div>
+
+      <div className="grid md:grid-cols-2 gap-4">
+        {/* Inventory Snapshot Section */}
+        <div className="p-4 bg-background/40 border border-slate-800/40 rounded-2xl hover:border-primary/20 transition-all group flex flex-col justify-between">
+          <div className="mb-4">
+            <h3 className="text-sm font-normal text-secondary flex items-center gap-2">
+              <FileSpreadsheet size={14} className="text-primary" />
+              Inventory Snapshot
+            </h3>
+            <p className="text-xs text-muted mt-1 leading-relaxed">
+              Export current inventory state with all item details and locations.
             </p>
           </div>
-        </div>
+          
-
+          <div className="grid grid-cols-2 gap-2">
-        {/* Inventory Snapshot Section */}
-        <div className="mb-8 space-y-3">
-          <h3 className="font-normal text-slate-700">Inventory Snapshot</h3>
-          <p className="text-sm text-slate-500">
-            Export current inventory state with all item details
-          </p>
-          <div className="flex flex-col gap-2 sm:flex-row">
             <button
               onClick={() => handleExportSnapshot("csv")}
               disabled={isLoading}
-              className="flex items-center justify-center gap-2 rounded-md bg-blue-500 px-4 py-2 text-sm font-normal text-white hover:bg-blue-600 disabled:bg-slate-400 disabled:cursor-not-allowed transition-colors"
+              className="px-5 py-1.5 bg-primary hover:bg-primary/90 text-white rounded-xl text-sm font-normal transition-all active:scale-95 shadow-xl shadow-primary/10 tracking-tight border border-primary/30 flex items-center justify-center gap-2 disabled:opacity-50"
               aria-label="Export inventory snapshot as CSV"
             >
-              {isLoading ? (
+              {isLoading ? <Loader2 size={14} className="animate-spin" /> : <FileText size={14} />}
-                <Loader2 size={16} className="animate-spin" />
+              CSV
-              ) : (
-                <FileDown size={16} />
-              )}
-              {isLoading ? "Exporting..." : "Export as CSV"}
             </button>
             <button
               onClick={() => handleExportSnapshot("xlsx")}
               disabled={isLoading}
-              className="flex items-center justify-center gap-2 rounded-md bg-green-500 px-4 py-2 text-sm font-normal text-white hover:bg-green-600 disabled:bg-slate-400 disabled:cursor-not-allowed transition-colors"
+              className="px-5 py-1.5 bg-primary hover:bg-primary/90 text-white rounded-xl text-sm font-normal transition-all active:scale-95 shadow-xl shadow-primary/10 tracking-tight border border-primary/30 flex items-center justify-center gap-2 disabled:opacity-50"
               aria-label="Export inventory snapshot as Excel"
             >
-              {isLoading ? (
+              {isLoading ? <Loader2 size={14} className="animate-spin" /> : <FileSpreadsheet size={14} />}
-                <Loader2 size={16} className="animate-spin" />
+              Excel
-              ) : (
-                <FileDown size={16} />
-              )}
-              {isLoading ? "Exporting..." : "Export as Excel"}
             </button>
           </div>
         </div>
 
         {/* Audit Trail Section */}
-        <div className="space-y-3">
+        <div className="p-4 bg-background/40 border border-slate-800/40 rounded-2xl hover:border-primary/20 transition-all group flex flex-col justify-between">
-          <h3 className="font-normal text-slate-700">Audit Trail</h3>
+          <div className="mb-4">
-          <p className="text-sm text-slate-500">
+            <h3 className="text-sm font-normal text-secondary flex items-center gap-2">
-            Export complete audit log of all system actions and changes
+              <FileText size={14} className="text-indigo-400" />
-          </p>
+              Audit Trail
-          <div className="flex flex-col gap-2 sm:flex-row">
+            </h3>
+            <p className="text-xs text-muted mt-1 leading-relaxed">
+              Complete history of system actions, changes, and user operations.
+            </p>
+          </div>
+          <div className="grid grid-cols-2 gap-2">
             <button
               onClick={() => handleExportAuditTrail("csv")}
               disabled={isLoading}
-              className="flex items-center justify-center gap-2 rounded-md bg-blue-500 px-4 py-2 text-sm font-normal text-white hover:bg-blue-600 disabled:bg-slate-400 disabled:cursor-not-allowed transition-colors"
+              className="px-5 py-1.5 bg-primary hover:bg-primary/90 text-white rounded-xl text-sm font-normal transition-all active:scale-95 shadow-xl shadow-primary/10 tracking-tight border border-primary/30 flex items-center justify-center gap-2 disabled:opacity-50"
               aria-label="Export audit trail as CSV"
             >
-              {isLoading ? (
+              {isLoading ? <Loader2 size={14} className="animate-spin" /> : <FileText size={14} />}
-                <Loader2 size={16} className="animate-spin" />
+              CSV
-              ) : (
-                <FileDown size={16} />
-              )}
-              {isLoading ? "Exporting..." : "Export as CSV"}
             </button>
             <button
               onClick={() => handleExportAuditTrail("xlsx")}
               disabled={isLoading}
-              className="flex items-center justify-center gap-2 rounded-md bg-green-500 px-4 py-2 text-sm font-normal text-white hover:bg-green-600 disabled:bg-slate-400 disabled:cursor-not-allowed transition-colors"
+              className="px-5 py-1.5 bg-primary hover:bg-primary/90 text-white rounded-xl text-sm font-normal transition-all active:scale-95 shadow-xl shadow-primary/10 tracking-tight border border-primary/30 flex items-center justify-center gap-2 disabled:opacity-50"
               aria-label="Export audit trail as Excel"
             >
-              {isLoading ? (
+              {isLoading ? <Loader2 size={14} className="animate-spin" /> : <FileSpreadsheet size={14} />}
-                <Loader2 size={16} className="animate-spin" />
+              Excel
-              ) : (
-                <FileDown size={16} />
-              )}
-              {isLoading ? "Exporting..." : "Export as Excel"}
             </button>
           </div>
         </div>
       </div>
 
-      {/* Status Messages */}
       {error && (
-        <Toast
+        <div className="mt-4 p-3 bg-rose-500/10 border border-rose-500/20 rounded-xl text-rose-500 text-[10px] flex items-center gap-2 animate-in slide-in-from-top-2 duration-300">
-          type="error"
+          <div className="w-1.5 h-1.5 bg-rose-500 rounded-full animate-pulse" />
-          message={`Export failed: ${error}`}
+          <span className="font-normal truncate">Error: {error}</span>
-          onClose={() => {}}
+        </div>
-        />
-      )}
-      {successMessage && (
-        <Toast type="success" message={successMessage} onClose={() => {}} />
       )}
     </div>
   );

frontend/hooks/useExport.ts

@@ -50,7 +50,7 @@ export function useExport(): UseExportReturn {
 
     try {
       const response = await axiosInstance.get(
-        `/admin/db/export?format=${format}&type=inventory`,
+        `/admin/reports/export?format=${format}&type=inventory`,
         {
           responseType: "blob"
         }
@@ -83,7 +83,7 @@ export function useExport(): UseExportReturn {
 
     try {
       const response = await axiosInstance.get(
-        `/admin/db/export?format=${format}&type=audit`,
+        `/admin/reports/export?format=${format}&type=audit`,
         {
           responseType: "blob"
         }