feat(dashboard): staff role support, department sidebar, action redirects

- Service visibility filtering (all/staff/admin)
- Departments rendered under Home in sidebar (not separate section)
- readOnly config for data-tables (suppresses actions and create button)
- Action-bar redirect support after destructive actions
- Form redirect support from API response
- Dynamic row actions from API response merged with manifest config
- Search field type for form sections
- Confirm dialog contrast fix

Author: docimin

src/components/layout/dynamic-sidebar.tsx

@@ -59,15 +59,40 @@ export function DynamicSidebar({ session, services }: Props) {
 			<nav className="flex-1 px-3 space-y-1 overflow-y-auto">
 				<Link
 					to="/home"
+					activeOptions={{ exact: true }}
 					className="flex items-center gap-2 rounded-md px-2 py-1.5 text-sm text-(--sidebar-foreground) hover:bg-(--sidebar-accent) hover:text-(--sidebar-accent-foreground) [&.active]:bg-(--sidebar-accent) [&.active]:font-medium [&.active]:text-(--sidebar-accent-foreground)"
 				>
 					<LayoutDashboard className="h-4 w-4" />
 					Home
 				</Link>
 
+				{/* Inline services (like Departments) — rendered as simple nav links under Home */}
+				{services
+					.filter(
+						(s) =>
+							s.uiManifest &&
+							s.status !== "inactive" &&
+							s.slug === "departments",
+					)
+					.flatMap((service) =>
+						(service.uiManifest?.navigation ?? []).map((item) => (
+							<NavLink
+								key={`${service.slug}${item.path}`}
+								to={`/${service.slug}${item.path === "/" ? "" : item.path}`}
+								label={item.label}
+								icon={item.icon}
+							/>
+						)),
+					)}
+
 				{/* Dynamic service sections — user services first, then admin */}
 				{services
-					.filter((s) => s.uiManifest && s.status !== "inactive")
+					.filter(
+						(s) =>
+							s.uiManifest &&
+							s.status !== "inactive" &&
+							s.slug !== "departments",
+					)
 					.sort((a, b) => {
 						if (a.type === "user" && b.type !== "user") return -1;
 						if (a.type !== "user" && b.type === "user") return 1;

src/components/pages/action-bar-section.tsx

@@ -38,8 +38,18 @@ export function ActionBarSection({ data, pathParams, serviceSlug }: Props) {
 				method: action.method,
 			});
 			if (response.ok) {
-				setResult({ ok: true, message: "Action completed successfully" });
-				router.invalidate();
+				if (action.redirect) {
+					router.navigate({
+						to: "/$service/$",
+						params: {
+							service: serviceSlug,
+							_splat: action.redirect.replace(/^\//, ""),
+						},
+					});
+				} else {
+					setResult({ ok: true, message: "Action completed successfully" });
+					router.invalidate();
+				}
 			} else {
 				const body = await response.json().catch(() => null);
 				setResult({

src/components/pages/data-table-section.tsx

@@ -12,6 +12,7 @@ interface TableData {
 	columns: { key: string; label: string }[];
 	rows: Record<string, unknown>[];
 	total?: number;
+	rowActions?: RowAction[];
 }
 
 interface Props {
@@ -82,7 +83,9 @@ export function DataTableSection({
 		});
 	}
 
-	const rowActions = config.rowActions ?? [];
+	const rowActions = config.readOnly
+		? []
+		: [...(config.rowActions ?? []), ...(data?.rowActions ?? [])];
 	const hasRowActions = rowActions.length > 0;
 
 	return (
@@ -94,7 +97,7 @@ export function DataTableSection({
 					) : (
 						<div />
 					)}
-					{config.createLink && (
+					{config.createLink && !config.readOnly && (
 						<button
 							type="button"
 							onClick={() => {

src/components/pages/form-section.tsx

@@ -90,9 +90,14 @@ export function FormSection({ section, serviceSlug, pathParams }: Props) {
 				const data = await response.json().catch(() => null);
 				setError(data?.error || `Error: ${response.status}`);
 			} else {
-				setSuccess(true);
-				// Reload to reflect changes in sidebar/header
-				setTimeout(() => window.location.reload(), 500);
+				const responseData = await response.json().catch(() => null);
+				if (responseData?.redirect) {
+					// Navigate to the redirect URL (absolute path)
+					window.location.href = responseData.redirect;
+				} else {
+					setSuccess(true);
+					setTimeout(() => window.location.reload(), 500);
+				}
 			}
 		} catch {
 			setError("Network error");

src/components/ui/confirm-dialog.tsx

@@ -54,10 +54,10 @@ export function ConfirmDialog({
 				<button
 					type="button"
 					onClick={onConfirm}
-					className={`px-4 py-2 text-sm font-medium rounded-md text-white transition-colors ${
+					className={`px-4 py-2 text-sm font-medium rounded-md transition-colors ${
 						variant === "danger"
-							? "bg-red-600 hover:bg-red-700"
-							: "bg-(--primary) hover:opacity-90"
+							? "bg-red-600 hover:bg-red-700 text-white"
+							: "bg-(--primary) text-(--primary-foreground) hover:opacity-90"
 					}`}
 				>
 					{confirmLabel}

src/lib/types/manifest.ts

@@ -53,6 +53,7 @@ export interface RowAction {
 	variant?: "default" | "danger";
 	confirm?: string;
 	link?: string;
+	redirect?: string;
 }
 
 export interface DataTableConfig {
@@ -61,6 +62,7 @@ export interface DataTableConfig {
 	rowActions?: RowAction[];
 	createLink?: string;
 	createLabel?: string;
+	readOnly?: boolean;
 }
 
 export interface DetailConfig {