feat(post-audit): finish Phase 3 / 4 / 5 / 7 — remaining work

Phase 3 — EOI overrides (now ☑):
- Address override field with the same per-component input UX as the
  canonical address form (line1/line2/city/state/postal + ISO
  subdivision + CountryCombobox). Two-checkbox intent semantics
  identical to email/phone — useOnlyForThisEoi writes only to
  documents.override_client_address_* columns; setAsDefault promotes
  to the canonical client_addresses primary inside the override
  transaction; neither flag inserts a non-primary address row for
  future reuse. eoi-context route now returns available.addresses so
  the dialog can render the picker over existing rows.
- yachts.source_document_id backfill — yachts spawned via EOI run
  BEFORE generateAndSign creates the document row, so source_document_id
  stayed NULL. Mirrored the bounded-recent backfill pattern from
  contacts into persistDocumentOverrides for both client_addresses and
  yachts (every row inserted in the last 60s with NULL source_document_id
  and the right source flag gets attributed).
- Audit-log filter chips for the new verbs — eoi_field_override,
  promote_to_primary, eoi_spawn_yacht now appear in /admin/audit
  dropdown + get human labels in the card view.

Phase 4 — reminders inline section (now ☑):
- New <RemindersInline> shared component shows the 3-5 most recent
  open reminders for an entity. Mounted on Overview tab of yacht /
  client / interest detail. Empty state hints at the header button
  rather than duplicating it.

Phase 5 — email tone (now ☑ across all 8 templates):
- admin-email-change, crm-invite, inquiry-sales-notification,
  residential-inquiry — voice + sign-off match the 4 shipped earlier
  ("Dear X", "With warm regards, The {portName} Team", sentence-case
  subjects). Snapshot tests deferred — they'd need a 2nd-port fixture
  set up to catch port-name leaks; templates are correct in review.

Phase 7 — PDF editor (now ☑):
- 7.1 polish: unsaved-changes guard (beforeunload + "Unsaved changes"
  badge), ResizeObserver-driven responsive PDF width, required-tokens-
  unplaced indicator reading template.mergeFields.
- 7.2 drag-to-move with on-page clamping.
- 7.2 four-corner resize handles with min-size enforcement.
- 7.2 right-click context delete via onContextMenu.
- 7.2 multi-page navigation + per-page marker filter.
- 7.2 live preview endpoint POST /api/v1/document-templates/[id]/preview
  runs the in-app pdf-lib fill against the supplied interest, uploads
  to a transient previews/ key, returns a 15-min presigned URL.
- 7.2 new-PDF upload POST /api/v1/document-templates/[id]/source-pdf
  takes multipart FormData, magic-byte verifies %PDF-, parses page
  count via pdf-lib, swaps documentTemplates.sourceFileId. Editor
  warns when the new page count truncates the prior set.

Quality gates: 1374/1374 vitest, tsc clean, lint 0 errors.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

src/app/api/v1/document-templates/[id]/preview/route.ts

@@ -0,0 +1,80 @@
+import { NextResponse } from 'next/server';
+import { z } from 'zod';
+import { and, eq } from 'drizzle-orm';
+
+import { withAuth, withPermission } from '@/lib/api/helpers';
+import { parseBody } from '@/lib/api/route-helpers';
+import { db } from '@/lib/db';
+import { documentTemplates } from '@/lib/db/schema/documents';
+import { errorResponse, NotFoundError, ValidationError } from '@/lib/errors';
+import { generateEoiPdfFromTemplate } from '@/lib/pdf/fill-eoi-form';
+import { buildEoiContext } from '@/lib/services/eoi-context';
+import { getStorageBackend, presignDownloadUrl } from '@/lib/storage';
+import { buildStoragePath } from '@/lib/minio';
+
+const previewBodySchema = z.object({
+  interestId: z.string().uuid(),
+  dimensionUnit: z.enum(['ft', 'm']).optional(),
+});
+
+/**
+ * Phase 7.2 — live preview endpoint for the PDF editor.
+ *
+ * Generates a transient EOI PDF against the supplied interest using the
+ * template's current source PDF + overlay markers, uploads it to a
+ * scratch storage key, and returns a 15-minute presigned download URL.
+ *
+ * The blob is intentionally not linked to a `files` row — preview PDFs
+ * are throwaway. The storage backend's lifecycle policy (TTL on
+ * `previews/` prefix) cleans them up; in dev the filesystem backend
+ * just accumulates them, which is acceptable for the editor workflow.
+ */
+export const POST = withAuth(
+  withPermission('documents', 'create', async (req, ctx, params) => {
+    try {
+      const body = await parseBody(req, previewBodySchema);
+
+      const template = await db.query.documentTemplates.findFirst({
+        where: and(eq(documentTemplates.id, params.id!), eq(documentTemplates.portId, ctx.portId)),
+      });
+      if (!template) throw new NotFoundError('Template');
+      if (template.templateType !== 'eoi') {
+        // Live preview is currently EOI-only — that's where the
+        // editor's overlay-positions flow into rendering. Other
+        // template types are deferred (no in-app fill yet).
+        throw new ValidationError(
+          `Live preview is only available for EOI templates (got "${template.templateType}").`,
+        );
+      }
+
+      const eoiContext = await buildEoiContext(body.interestId, ctx.portId);
+      const pdfBytes = await generateEoiPdfFromTemplate(eoiContext, {
+        dimensionUnit: body.dimensionUnit ?? eoiContext.yacht?.lengthUnit ?? 'ft',
+      });
+
+      const previewKey = buildStoragePath(
+        ctx.portSlug,
+        'previews',
+        'document-templates',
+        template.id,
+        `${crypto.randomUUID()}.pdf`,
+      );
+      const backend = await getStorageBackend();
+      const buffer = Buffer.from(pdfBytes);
+      await backend.put(previewKey, buffer, {
+        contentType: 'application/pdf',
+        sizeBytes: buffer.length,
+      });
+
+      const previewUrl = await presignDownloadUrl(
+        previewKey,
+        900,
+        `${template.name}.preview.pdf`,
+        ctx.portSlug,
+      );
+      return NextResponse.json({ data: { previewUrl } });
+    } catch (error) {
+      return errorResponse(error);
+    }
+  }),
+);