fix: prevent the backoffice from approve the user before he submits

apps/edr-freight-web/backoffice/src/components/customers/badges.tsx

@@ -280,13 +280,20 @@ export function InvoiceStatusBadge({
  * Transitions: pending → approve / reject-with-note | rejected → approve (override) |
  * active → suspend | suspended → reactivate/blacklist | blacklisted → reinstate.
  * Rejecting captures a note the customer sees so they can fix and reapply.
+ *
+ * `locked` (customer hasn't submitted onboarding) withholds the review decision
+ * only — there's no application to judge yet, and the API rejects the call
+ * regardless (setCompanyProfileStatus). Suspend/blacklist/reinstate stay live so
+ * an already-active profile is still managable.
  */
 export function ProfileApprovalActions({
   profileId,
   status,
+  locked = false,
 }: {
   profileId: string;
   status: ProfileStatus;
+  locked?: boolean;
 }) {
   const { mutate, isPending } = useMutation(
     api.customers.setProfileStatus.mutationOptions(),
@@ -346,6 +353,18 @@ export function ProfileApprovalActions({
     </Modal>
   );
 
+  // Pending/rejected are the two states awaiting a reviewer's decision — the
+  // exact pair the API gates on until the customer submits.
+  if (locked && (status === "pending" || status === "rejected")) {
+    return (
+      <Tooltip label="Available once the customer submits their onboarding application">
+        <Text size="xs" c="dimmed" fs="italic">
+          Awaiting submission
+        </Text>
+      </Tooltip>
+    );
+  }
+
   if (status === "pending") {
     return (
       <>