feat(phase-b): ship analytics dashboard, alerts, scanner PWA, dedup, audit view

Phase B (Insights & Alerts) PR4-11 in one drop. Builds on the schema +
service skeletons committed in PRs 1-3.

PR4  Analytics dashboard — 4 chart types (funnel/timeline/breakdown/source),
     date-range picker (today/7d/30d/90d), CSV+PNG export per card.
PR5  Alert rail UI + /alerts page — topbar bell w/ live count, dashboard
     right-rail, three-tab page (active/dismissed/resolved), socket-driven
     invalidation. Bell lazy-loads list on popover open to keep cold pages
     fast in non-dashboard routes.
PR6  EOI queue tab on documents hub — filters to in-flight EOIs, count
     surfaces in tab label.
PR7  Interests-by-berth tab on berth detail — replaces the stub.
PR8  Expense duplicate detection — BullMQ job runs scan on create, yellow
     banner on detail w/ Merge / Not-a-duplicate, transactional merge
     consolidates receipts and archives the source.
PR9  Receipt scanner PWA + multi-provider AI — port-scoped /scan route in
     its own (scanner) group with no dashboard chrome, dynamic per-port
     manifest, OpenAI + Claude provider abstraction, admin OCR settings
     page (port-level + super-admin global default w/ opt-in fallback),
     test-connection endpoint, manual-entry fallback when no key is
     configured. Verify form always shown before save — no ghost rows.
PR10 Audit log read view — swap to tsvector full-text search on the
     existing GIN index, cursor pagination, filters for entity/action/user
     /date range, batched actor-email resolution.
PR11 Real-API tests — opt-in receipt-ocr.spec (admin save+test, optional
     real-receipt parse via REALAPI_RECEIPT_FIXTURE) and alert-engine
     socket-fanout spec gated behind RUN_ALERT_ENGINE_REALAPI. Both skip
     cleanly without their gate envs so CI stays green.

Test totals: vitest 690 -> 713, smoke 130 -> 138, realapi +2 opt-in.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

src/components/alerts/alerts-page-shell.tsx

@@ -0,0 +1,66 @@
+'use client';
+
+import { useState } from 'react';
+import { ShieldAlert } from 'lucide-react';
+
+import { PageHeader } from '@/components/shared/page-header';
+import { Tabs, TabsList, TabsTrigger, TabsContent } from '@/components/ui/tabs';
+import { Skeleton } from '@/components/ui/skeleton';
+import { AlertCard, AlertCardEmpty } from './alert-card';
+import { useAlertCount, useAlertList, useAlertRealtime } from './use-alerts';
+import type { AlertStatus } from './types';
+
+export function AlertsPageShell() {
+  const [tab, setTab] = useState<AlertStatus>('open');
+  const { data: count } = useAlertCount();
+  const { data, isLoading } = useAlertList(tab);
+  useAlertRealtime();
+
+  const total = count?.total ?? 0;
+  const alerts = data?.data ?? [];
+
+  return (
+    <div className="space-y-6">
+      <PageHeader
+        title="Alerts"
+        eyebrow="Operational"
+        description="Rules-based signals about pipeline, agreements, expenses, and access"
+        kpiLine={
+          <span>
+            <ShieldAlert className="mr-1 inline h-3 w-3" aria-hidden />
+            {total} active
+          </span>
+        }
+        variant="gradient"
+      />
+
+      <Tabs value={tab} onValueChange={(v) => setTab(v as AlertStatus)}>
+        <TabsList>
+          <TabsTrigger value="open" data-testid="tab-open">
+            Active{total > 0 ? ` · ${total}` : ''}
+          </TabsTrigger>
+          <TabsTrigger value="dismissed" data-testid="tab-dismissed">
+            Dismissed
+          </TabsTrigger>
+          <TabsTrigger value="resolved" data-testid="tab-resolved">
+            Resolved
+          </TabsTrigger>
+        </TabsList>
+
+        <TabsContent value={tab} className="mt-4 space-y-2">
+          {isLoading ? (
+            <div className="space-y-2">
+              <Skeleton className="h-20 w-full" />
+              <Skeleton className="h-20 w-full" />
+              <Skeleton className="h-20 w-full" />
+            </div>
+          ) : alerts.length === 0 ? (
+            <AlertCardEmpty />
+          ) : (
+            alerts.map((a) => <AlertCard key={a.id} alert={a} readOnly={tab !== 'open'} />)
+          )}
+        </TabsContent>
+      </Tabs>
+    </div>
+  );
+}