feat(qr-custom): filter tanggal + pilih baris & hapus terpilih

- filter from/to pada list
- checkbox pilih semua, batch delete dengan password admin
- reset histori tetap
- versi 0.6.6

services/customQrService.js

@@ -75,9 +75,17 @@ function getByToken(token) {
   return db.prepare('SELECT * FROM custom_qr_payments WHERE share_token=?').get(String(token || ''));
 }
 
-function list(limit = 100) {
+function list(limit = 100, opts = {}) {
   sweepExpired();
-  return db.prepare('SELECT * FROM custom_qr_payments ORDER BY id DESC LIMIT ?').all(Math.max(1, Math.min(500, Number(limit) || 100)));
+  const where = [];
+  const params = [];
+  if (opts.from) { where.push('date(created_at) >= date(?)'); params.push(String(opts.from)); }
+  if (opts.to) { where.push('date(created_at) <= date(?)'); params.push(String(opts.to)); }
+  const sql = 'SELECT * FROM custom_qr_payments' +
+    (where.length ? (' WHERE ' + where.join(' AND ')) : '') +
+    ' ORDER BY id DESC LIMIT ?';
+  params.push(Math.max(1, Math.min(500, Number(limit) || 100)));
+  return db.prepare(sql).all(...params);
 }
 
 function stats() {
@@ -123,6 +131,16 @@ function remove(id) {
   return r.changes || 0;
 }
 
+function removeMany(ids) {
+  const list = (Array.isArray(ids) ? ids : [ids])
+    .map(function (x) { return Number(x); })
+    .filter(function (n) { return Number.isFinite(n) && n > 0; });
+  if (!list.length) return 0;
+  const marks = list.map(function () { return '?'; }).join(',');
+  const r = db.prepare('DELETE FROM custom_qr_payments WHERE id IN (' + marks + ')').run(...list);
+  return r.changes || 0;
+}
+
 function clearAll() {
   const r = db.prepare('DELETE FROM custom_qr_payments').run();
   return r.changes || 0;
@@ -207,6 +225,7 @@ module.exports = {
   acceptWarning,
   regenerate,
   remove,
+  removeMany,
   clearAll,
   reject,
   markPaidFromWebhook,