@mohasinac/appkit 2.7.58 → 2.8.0

package/dist/ui/index.js

@@ -6,7 +6,7 @@ export { FieldSelect } from "./forms";
 export { FieldCheckbox } from "./forms";
 // --- Column utilities ---------------------------------------------------------
 export { buildColumns, createColumnBuilder, renderBoolean, renderCurrency, renderCurrencyCompact, renderCount, renderNullable, renderRating, } from "./columns";
-export { Section, Article, Main, Aside, Nav, BlockHeader, BlockFooter, Header, Footer, Ul, Ol, Li, Table, Thead, Tbody, Tr, Th, Td, Code, Pre, Blockquote, Figure, Figcaption, Dl, Dt, Dd, } from "./components/Semantic";
+export { Section, Article, Main, Aside, Nav, BlockHeader, BlockFooter, Ul, Ol, Li, Table, Thead, Tbody, Tr, Th, Td, Code, Pre, Blockquote, Figure, Figcaption, Dl, Dt, Dd, } from "./components/Semantic";
 export { Div } from "./components/Div";
 export { Heading, Text, Label, Caption, Span } from "./components/Typography";
 // --- Filter chip group (SB10-C completion, S8 2026-05-13) --------------------
@@ -58,9 +58,12 @@ export { SummaryCard } from "./components/SummaryCard";
 export { CountdownDisplay } from "./components/CountdownDisplay";
 export { ItemRow } from "./components/ItemRow";
 export { HorizontalScroller } from "./components/HorizontalScroller";
-export { SectionTabs } from "./components/SectionTabs";
 export { TabStrip } from "./components/TabStrip";
 export { FormGrid, FormField as FormGridField } from "./components/FormGrid";
+export { SettingsSection, ToggleRow } from "./components/SettingsSection";
+export { DetailPageHero } from "./components/DetailPageHero";
+export { DetailPageGallery } from "./components/DetailPageGallery";
+export { DetailPageTabs } from "./components/DetailPageTabs";
 export { FormField } from "./components/FormField";
 export { DescriptionField } from "./components/DescriptionField";
 export { Card, CardHeader, CardBody, CardFooter } from "./components/Card";
@@ -68,9 +71,7 @@ export { EmptyState } from "./components/EmptyState";
 export { Avatar, AvatarGroup } from "./components/Avatar";
 export { Dropdown, DropdownTrigger, DropdownMenu, DropdownItem, DropdownSeparator, } from "./components/Dropdown";
 export { Menu, MenuTrigger, MenuContent, MenuItem, MenuSeparator, } from "./components/Menu";
-export { DynamicSelect } from "./components/DynamicSelect";
-export { InlineCreateSelect } from "./components/InlineCreateSelect";
-export { PaginatedMultiSelect } from "./components/PaginatedMultiSelect";
+export { PaginatedSelect } from "./components/PaginatedSelect";
 export { RoleBadge } from "./components/RoleBadge";
 export { SkipToMain } from "./components/SkipToMain";
 export { NavigationLoader } from "./components/NavigationLoader";
@@ -79,9 +80,9 @@ export { FilterDrawer } from "./components/FilterDrawer";
 export { RowActionMenu } from "./components/RowActionMenu";
 export { PasswordStrengthIndicator } from "./components/PasswordStrengthIndicator";
 export { AvatarDisplay } from "./components/AvatarDisplay";
-export { DashboardStatsCard } from "./components/DashboardStatsCard";
 export { ActiveFilterChips } from "./components/ActiveFilterChips";
 export { SortDropdown } from "./components/SortDropdown";
+export { ListingFilterDrawer } from "./components/ListingFilterDrawer";
 export { ListingToolbar } from "./components/ListingToolbar";
 export { TablePagination } from "./components/TablePagination";
 export { DataTable } from "./DataTable";
@@ -95,7 +96,6 @@ export { RichText } from "./rich-text/RichText";
 export { RichTextRenderer } from "./rich-text/RichTextRenderer";
 export { RichTextEditor } from "./components/RichTextEditor";
 export { ListingLayout } from "./components/ListingLayout";
-export { ListingViewShell } from "./components/ListingViewShell";
 export { SlottedListingView } from "./components/SlottedListingView";
 export { DetailViewShell } from "./components/DetailViewShell";
 export { StackedViewShell } from "./components/StackedViewShell";

package/dist/utils/id-generators.d.ts

@@ -115,7 +115,6 @@ export interface GenerateProductImageFilenameInput {
     index?: number;
     ext?: string;
 }
-export declare function generateProductImageFilename(input: GenerateProductImageFilenameInput): string;
 export interface GenerateProductVideoFilenameInput {
     name: string;
     category: string;
@@ -123,7 +122,6 @@ export interface GenerateProductVideoFilenameInput {
     index?: number;
     ext?: string;
 }
-export declare function generateProductVideoFilename(input: GenerateProductVideoFilenameInput): string;
 export interface GenerateAuctionImageFilenameInput {
     name: string;
     category: string;
@@ -131,7 +129,6 @@ export interface GenerateAuctionImageFilenameInput {
     index?: number;
     ext?: string;
 }
-export declare function generateAuctionImageFilename(input: GenerateAuctionImageFilenameInput): string;
 export interface GeneratePreOrderImageFilenameInput {
     name: string;
     category: string;
@@ -139,49 +136,34 @@ export interface GeneratePreOrderImageFilenameInput {
     index?: number;
     ext?: string;
 }
-export declare function generatePreOrderImageFilename(input: GeneratePreOrderImageFilenameInput): string;
 export interface GenerateReviewImageFilenameInput {
     productId: string;
     index?: number;
     ext?: string;
 }
-export declare function generateReviewImageFilename(input: GenerateReviewImageFilenameInput): string;
 export interface GenerateReviewVideoFilenameInput {
     productId: string;
     ext?: string;
 }
-export declare function generateReviewVideoFilename(input: GenerateReviewVideoFilenameInput): string;
-export declare function generateStoreLogoFilename(storeName: string, ext?: string): string;
-export declare function generateStoreBannerFilename(storeName: string, ext?: string): string;
-export declare function generateBrandLogoFilename(brandName: string, ext?: string): string;
-export declare function generateBrandBannerFilename(brandName: string, ext?: string): string;
 export interface GenerateBlogImageFilenameInput {
     title: string;
     category: string;
     index?: number;
     ext?: string;
 }
-export declare function generateBlogImageFilename(input: GenerateBlogImageFilenameInput): string;
 export interface GenerateEventImageFilenameInput {
     title: string;
     index?: number;
     ext?: string;
 }
-export declare function generateEventImageFilename(input: GenerateEventImageFilenameInput): string;
 export interface GenerateRichTextImageFilenameInput {
     entity: string;
     name: string;
     index?: number;
     ext?: string;
 }
-export declare function generateRichTextImageFilename(input: GenerateRichTextImageFilenameInput): string;
-export declare function generateCategoryImageFilename(categoryName: string, ext?: string): string;
-export declare function generateUserAvatarFilename(firstName: string, lastName: string, ext?: string): string;
-export declare function generateCarouselImageFilename(title: string, ext?: string): string;
 export declare function generateCroppedImageFilename(originalFilenameOrPath: string, ext?: string): string;
 export declare function generateTrimmedVideoFilename(originalFilenameOrPath: string, ext?: string): string;
-export declare function generateInvoiceFilename(orderId: string, date?: Date): string;
-export declare function generatePayoutDocFilename(sellerName: string, date?: Date): string;
 export type MediaFilenameContext = ({
     type: "product-image";
 } & GenerateProductImageFilenameInput) | ({
@@ -262,3 +244,4 @@ export type MediaFilenameContext = ({
     date?: Date;
 };
 export declare function generateMediaFilename(ctx: MediaFilenameContext): string;
+export declare function validateMediaFilename(filename: string): boolean;

package/dist/utils/id-generators.js

@@ -199,7 +199,7 @@ function basenameStem(filenameOrPath) {
     const dotIndex = filename.lastIndexOf(".");
     return dotIndex > 0 ? filename.slice(0, dotIndex) : filename;
 }
-export function generateProductImageFilename(input) {
+function generateProductImageFilename(input) {
     const name = slugify(input.name).substring(0, 40).replace(/-+$/, "");
     const category = slugify(input.category).substring(0, 20).replace(/-+$/, "");
     const store = slugify(input.store).substring(0, 20).replace(/-+$/, "");
@@ -207,7 +207,7 @@ export function generateProductImageFilename(input) {
     const ext = (input.ext ?? "webp").replace(/^\./, "");
     return `product-${name}-${category}-${store}-image-${n}.${ext}`;
 }
-export function generateProductVideoFilename(input) {
+function generateProductVideoFilename(input) {
     const name = slugify(input.name).substring(0, 40).replace(/-+$/, "");
     const category = slugify(input.category).substring(0, 20).replace(/-+$/, "");
     const store = slugify(input.store).substring(0, 20).replace(/-+$/, "");
@@ -215,7 +215,7 @@ export function generateProductVideoFilename(input) {
     const ext = (input.ext ?? "mp4").replace(/^\./, "");
     return `product-${name}-${category}-${store}-video-${n}.${ext}`;
 }
-export function generateAuctionImageFilename(input) {
+function generateAuctionImageFilename(input) {
     const name = slugify(input.name).substring(0, 40).replace(/-+$/, "");
     const category = slugify(input.category).substring(0, 20).replace(/-+$/, "");
     const store = slugify(input.store).substring(0, 20).replace(/-+$/, "");
@@ -223,7 +223,7 @@ export function generateAuctionImageFilename(input) {
     const ext = (input.ext ?? "webp").replace(/^\./, "");
     return `auction-${name}-${category}-${store}-image-${n}.${ext}`;
 }
-export function generatePreOrderImageFilename(input) {
+function generatePreOrderImageFilename(input) {
     const name = slugify(input.name).substring(0, 40).replace(/-+$/, "");
     const category = slugify(input.category).substring(0, 20).replace(/-+$/, "");
     const store = slugify(input.store).substring(0, 20).replace(/-+$/, "");
@@ -231,63 +231,63 @@ export function generatePreOrderImageFilename(input) {
     const ext = (input.ext ?? "webp").replace(/^\./, "");
     return `preorder-${name}-${category}-${store}-image-${n}.${ext}`;
 }
-export function generateReviewImageFilename(input) {
+function generateReviewImageFilename(input) {
     const product = slugify(input.productId).substring(0, 40).replace(/-+$/, "");
     const n = input.index ?? 1;
     const ext = (input.ext ?? "webp").replace(/^\./, "");
     return `review-${product}-image-${n}.${ext}`;
 }
-export function generateReviewVideoFilename(input) {
+function generateReviewVideoFilename(input) {
     const product = slugify(input.productId).substring(0, 40).replace(/-+$/, "");
     const ext = (input.ext ?? "mp4").replace(/^\./, "");
     return `review-${product}-video-1.${ext}`;
 }
-export function generateStoreLogoFilename(storeName, ext = "webp") {
+function generateStoreLogoFilename(storeName, ext = "webp") {
     const store = slugify(storeName).substring(0, 40).replace(/-+$/, "");
     return `store-${store}-logo.${ext.replace(/^\./, "")}`;
 }
-export function generateStoreBannerFilename(storeName, ext = "webp") {
+function generateStoreBannerFilename(storeName, ext = "webp") {
     const store = slugify(storeName).substring(0, 40).replace(/-+$/, "");
     return `store-${store}-banner.${ext.replace(/^\./, "")}`;
 }
-export function generateBrandLogoFilename(brandName, ext = "webp") {
+function generateBrandLogoFilename(brandName, ext = "webp") {
     const brand = slugify(brandName).substring(0, 40).replace(/-+$/, "");
     return `brand-${brand}-logo.${ext.replace(/^\./, "")}`;
 }
-export function generateBrandBannerFilename(brandName, ext = "webp") {
+function generateBrandBannerFilename(brandName, ext = "webp") {
     const brand = slugify(brandName).substring(0, 40).replace(/-+$/, "");
     return `brand-${brand}-banner.${ext.replace(/^\./, "")}`;
 }
-export function generateBlogImageFilename(input) {
+function generateBlogImageFilename(input) {
     const title = slugify(input.title).substring(0, 40).replace(/-+$/, "");
     const category = slugify(input.category).substring(0, 20).replace(/-+$/, "");
     const n = input.index ?? 1;
     const ext = (input.ext ?? "webp").replace(/^\./, "");
     return `blog-${title}-${category}-image-${n}.${ext}`;
 }
-export function generateEventImageFilename(input) {
+function generateEventImageFilename(input) {
     const title = slugify(input.title).substring(0, 50).replace(/-+$/, "");
     const n = input.index ?? 1;
     const ext = (input.ext ?? "webp").replace(/^\./, "");
     return `event-${title}-image-${n}.${ext}`;
 }
-export function generateRichTextImageFilename(input) {
+function generateRichTextImageFilename(input) {
     const entity = slugify(input.entity).substring(0, 24).replace(/-+$/, "");
     const name = slugify(input.name).substring(0, 40).replace(/-+$/, "");
     const n = input.index ?? 1;
     const ext = (input.ext ?? "webp").replace(/^\./, "");
     return `rich-text-${entity}-${name}-image-${n}.${ext}`;
 }
-export function generateCategoryImageFilename(categoryName, ext = "webp") {
+function generateCategoryImageFilename(categoryName, ext = "webp") {
     const name = slugify(categoryName).substring(0, 40).replace(/-+$/, "");
     return `category-${name}-image.${ext.replace(/^\./, "")}`;
 }
-export function generateUserAvatarFilename(firstName, lastName, ext = "webp") {
+function generateUserAvatarFilename(firstName, lastName, ext = "webp") {
     const first = slugify(firstName).substring(0, 20).replace(/-+$/, "");
     const last = slugify(lastName).substring(0, 20).replace(/-+$/, "");
     return `user-${first}-${last}-avatar.${ext.replace(/^\./, "")}`;
 }
-export function generateCarouselImageFilename(title, ext = "webp") {
+function generateCarouselImageFilename(title, ext = "webp") {
     const slug = slugify(title).substring(0, 40).replace(/-+$/, "");
     return `carousel-${slug}-image.${ext.replace(/^\./, "")}`;
 }
@@ -305,13 +305,13 @@ export function generateTrimmedVideoFilename(originalFilenameOrPath, ext) {
         : "mp4";
     return `${stem}-trimmed.${(ext ?? originalExt).replace(/^\./, "")}`;
 }
-export function generateInvoiceFilename(orderId, date = new Date()) {
+function generateInvoiceFilename(orderId, date = new Date()) {
     const y = date.getFullYear();
     const m = String(date.getMonth() + 1).padStart(2, "0");
     const d = String(date.getDate()).padStart(2, "0");
     return `invoice-${orderId}-${y}${m}${d}.pdf`;
 }
-export function generatePayoutDocFilename(sellerName, date = new Date()) {
+function generatePayoutDocFilename(sellerName, date = new Date()) {
     const seller = slugify(sellerName).substring(0, 30).replace(/-+$/, "");
     const y = date.getFullYear();
     const m = String(date.getMonth() + 1).padStart(2, "0");
@@ -386,3 +386,36 @@ export function generateMediaFilename(ctx) {
         }
     }
 }
+/**
+ * W1-51 — validate that a filename matches the canonical pattern produced
+ * by {@link generateMediaFilename}. Called from /api/media/sign before a
+ * signed-URL is issued so malformed names can never enter storage.
+ *
+ * Pattern: `<prefix>-<slug parts>-<YYYYMMDD>(-<N>)?(-<rand>)?\.<ext>` where
+ * the prefix is one of the known media type tokens.
+ *
+ * Returns true when the filename is acceptable.
+ */
+const MEDIA_FILENAME_PREFIXES = [
+    "product-image", "product-video",
+    "review-image", "review-video",
+    "auction-image", "preorder-image",
+    "store-logo", "store-banner",
+    "brand-logo", "brand-banner",
+    "blog-image", "blog-cover", "blog-content-image", "blog-additional-image",
+    "event-image", "event-cover", "event-winner-image", "event-additional-image",
+    "rich-text-image",
+    "category-image",
+    "user-avatar",
+    "carousel-image",
+    "invoice", "payout-doc",
+    "shipping-proof", "refund-proof",
+];
+const MEDIA_FILENAME_REGEX = new RegExp(`^(?:${MEDIA_FILENAME_PREFIXES.join("|")})-[a-z0-9]([a-z0-9-]*[a-z0-9])?(?:-\\d+)?\\.[a-z0-9]+$`);
+export function validateMediaFilename(filename) {
+    if (!filename || filename.length > 256)
+        return false;
+    if (filename.includes("..") || filename.includes("/") || filename.includes("\\"))
+        return false;
+    return MEDIA_FILENAME_REGEX.test(filename);
+}

package/dist/validation/schemas.d.ts

@@ -24,6 +24,31 @@ export declare const urlSchema: z.ZodString;
 export declare const APPROVED_MEDIA_DOMAINS: string[];
 export declare const mediaUrlSchema: z.ZodEffects<z.ZodString, string, string>;
 export declare const dateStringSchema: z.ZodString;
+/** Monetary value in paise — non-negative integer. Use for `price`, `mrp`, `discount`, etc. */
+export declare const priceSchema: z.ZodNumber;
+/** Discount percentage — 0–100. */
+export declare const discountPercentSchema: z.ZodNumber;
+/** Bounded image-array schema factory — caps gallery length. */
+export declare const imageArraySchema: (max: number) => z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
+/** Slug regex factory. Pass the `<prefix>-` token (e.g. `"product-"`) to enforce prefix discipline. */
+export declare const createSlugValidator: (prefix?: string) => z.ZodString;
+/** A Firestore Timestamp converted to JS Date — accepts string or Date instances. */
+export declare const timestampSchema: z.ZodUnion<[z.ZodString, z.ZodDate]>;
+/** Standard `createdAt`/`updatedAt` block — fold into doc schemas with `.merge(timestampsSchema)`. */
+export declare const timestampsSchema: z.ZodObject<{
+    createdAt: z.ZodUnion<[z.ZodString, z.ZodDate]>;
+    updatedAt: z.ZodUnion<[z.ZodString, z.ZodDate]>;
+}, "strip", z.ZodTypeAny, {
+    createdAt: string | Date;
+    updatedAt: string | Date;
+}, {
+    createdAt: string | Date;
+    updatedAt: string | Date;
+}>;
+/** Non-empty trimmed string with a length cap. */
+export declare const nonEmptyString: (max?: number) => z.ZodString;
+/** Optional rich-text body — uses the HTML schema (plain length cap). */
+export declare const richTextBodySchema: (max?: number) => z.ZodString;
 export declare const passwordSchema: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
 export declare const phoneSchema: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
 export declare const emailSchema: z.ZodString;

package/dist/validation/schemas.js

@@ -34,6 +34,34 @@ export const mediaUrlSchema = z
 }, { message: "Image or video URL must be hosted on an approved CDN domain" });
 export const dateStringSchema = z.string().datetime();
 // ============================================
+// SHARED PRIMITIVES (W2-4 — 2026-05-23)
+// Use these instead of redefining the same validators in feature schemas.
+// ============================================
+/** Monetary value in paise — non-negative integer. Use for `price`, `mrp`, `discount`, etc. */
+export const priceSchema = z.number().int().min(0, "Price must be non-negative (paise)");
+/** Discount percentage — 0–100. */
+export const discountPercentSchema = z.number().min(0).max(100);
+/** Bounded image-array schema factory — caps gallery length. */
+export const imageArraySchema = (max) => z.array(mediaUrlSchema).max(max, `At most ${max} images allowed`);
+/** Slug regex factory. Pass the `<prefix>-` token (e.g. `"product-"`) to enforce prefix discipline. */
+export const createSlugValidator = (prefix) => prefix
+    ? z
+        .string()
+        .min(prefix.length + 1)
+        .regex(new RegExp(`^${prefix}[a-z0-9-]+$`), `Slug must start with "${prefix}"`)
+    : z.string().min(1).regex(/^[a-z0-9-]+$/, "Slug may only contain lowercase letters, numbers and hyphens");
+/** A Firestore Timestamp converted to JS Date — accepts string or Date instances. */
+export const timestampSchema = z.union([z.string().datetime(), z.date()]);
+/** Standard `createdAt`/`updatedAt` block — fold into doc schemas with `.merge(timestampsSchema)`. */
+export const timestampsSchema = z.object({
+    createdAt: timestampSchema,
+    updatedAt: timestampSchema,
+});
+/** Non-empty trimmed string with a length cap. */
+export const nonEmptyString = (max = 255) => z.string().trim().min(1, "Required").max(max, `Must be at most ${max} characters`);
+/** Optional rich-text body — uses the HTML schema (plain length cap). */
+export const richTextBodySchema = (max = 50000) => z.string().trim().max(max, `Body must be at most ${max} characters`);
+// ============================================
 // AUTH / USER SCHEMAS
 // ============================================
 export const passwordSchema = z

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mohasinac/appkit",
-  "version": "2.7.58",
+  "version": "2.8.0",
   "license": "MIT",
   "publishConfig": {
     "access": "public"