feat(dashboard): payment links list and create form (#144)

[0xdevcollins]

Closes #144.

A merchant could sign up, get a settlement wallet auto-provisioned, and then had no way to create a payment link except curl. This closes that.

The routing bug underneath it

/links was rendering the detail page — it called useParams<{ id }>() on a route with no [id] segment, so id was always undefined and the page requested /payment-links/undefined. There was no list view and no create form anywhere in the app.

The detail page moves to /links/[id], where its param exists. /links becomes the list it always claimed to be.

Mostly wiring, plus two real fixes

LinkCard, CreateLinkModal, LinkCreatedModal, QRCodeModal and usePaymentLinks all already existed — nothing rendered them. Two things didn't survive contact with the API:

PaymentLinksResponse described a shape the API has never sent. It declared total, page, limit as siblings of data. The API answers { data, meta }, and the client deliberately skips unwrapping when meta is present, so both halves arrive intact. The single consumer only read .data, so pagination had nothing to render from and nothing caught it.

LinkCard had no route to the detail page. The ID is now the link rather than the whole card — the footer holds copy, QR and deactivate buttons, and nesting those inside an anchor is invalid markup that would navigate on every click.

Acceptance criteria

criterion	status
/links renders without crashing	✅
Empty state at 0 links	✅ (EmptyState variant="links" + create CTA)
Filter chips drive ?status=	✅ All 5 / Active 5 / Deactivated 1
Create posts, appears immediately	✅ count 4 → 5
New link URL auto-copied + toast	✅ (clipboard best-effort, URL also shown in modal)
Deactivate fires DELETE, badge updates	✅ flips to DEACTIVATED in place
Pagination works	✅ driven by meta.totalPages, hidden at 1 page
JWT works for POST	✅ verified — CombinedAuthGuard accepts the dashboard's JWT, no API key needed, no follow-up required
tsc clean, no console errors	✅

Search filters the loaded page client-side — the API has no search parameter for links yet, so filtering server-side would silently return nothing. Flagged in the code to move once the endpoint supports it.

Verified in the browser against the running API

List renders, filters drive the query param, create → count increments, deactivate → badge flips, /links/[id] loads the link and its stats with real ids. No console errors.

Dashboard: typecheck clean, 0 lint errors, 38/38 tests.

Note, not in scope: created links point at https://pay.useroutr.com/<code> because PAYMENT_LINK_BASE_URL is unset locally — so they aren't clickable in dev. That's the #113 config item.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
useroutr-www	Ready	Preview	Aug 9, 2026 8:20pm