@mohasinac/appkit 3.5.1 → 3.5.3

package/dist/_internal/server/features/checkout/actions.d.ts

@@ -59,17 +59,4 @@ export interface VerifyAndPlaceRazorpayOrderInput {
      */
     outOfStockPolicy?: OutOfStockPolicy;
 }
-/**
- * Place order(s) from the user's cart after a Razorpay payment is verified.
- * Mirrors the existing /api/payment/verify route handler.
- *
- * Consumers must authenticate the user before calling. The action performs:
- *   1. HMAC signature verification (rejects forged callbacks)
- *   2. Cart re-validation against current product prices/stock
- *   3. Amount cross-check against the Razorpay order record
- *   4. Atomic stock decrement + cart clear via unitOfWork batch
- *   5. Multi-coupon pro-rating per order group
- *   6. order_placed notifications (buyer + seller)
- *   7. Confirmation email + RTDB success signal (both fire-and-forget)
- */
 export declare function verifyAndPlaceRazorpayOrderAction(input: VerifyAndPlaceRazorpayOrderInput): Promise<CheckoutOrderResult>;

package/dist/_internal/server/features/checkout/actions.js

@@ -709,6 +709,88 @@ export async function attachPaymentAction(input) {
  *   6. order_placed notifications (buyer + seller)
  *   7. Confirmation email + RTDB success signal (both fire-and-forget)
  */
+/**
+ * Auto-refund the value of items dropped from a Razorpay checkout under the
+ * "skip_items" out-of-stock policy. Razorpay captures payment for the FULL
+ * cart before the stock check runs, so anything not placed as an order must
+ * be given back. Extracted from `verifyAndPlaceRazorpayOrderAction` — same
+ * behavior, kept as a named step so the parent function stays readable.
+ *
+ * Awaited by the caller (this moves money, never fire-and-forget). On
+ * failure the orders themselves are NOT rolled back (already validly
+ * created and paid); the failure is surfaced via `order.refundPending` + an
+ * admin notification fan-out, never silently dropped (Rule #8).
+ */
+async function refundDroppedItemsForRazorpayCheckout(input) {
+    const { unavailablePaid, orderIds, productByIdPaid, razorpayPaymentId } = input;
+    if (unavailablePaid.length === 0 || orderIds.length === 0)
+        return;
+    const droppedValueInPaise = unavailablePaid.reduce((sum, u) => sum + (productByIdPaid.get(u.productId)?.price ?? 0) * u.requestedQty, 0);
+    if (droppedValueInPaise <= 0)
+        return;
+    const primaryOrderId = orderIds[0];
+    try {
+        const primaryOrder = await unitOfWork.orders.findById(primaryOrderId);
+        // Cap defensively at the primary order's total — processRefundAction
+        // rejects any amount exceeding order.totalPrice, and a multi-order
+        // batch's dropped-items value isn't cleanly attributable to a single
+        // order (Razorpay refunds are keyed by paymentId, not orderId; the
+        // FIRST order created in this batch is used as the refund's book-
+        // keeping anchor).
+        const refundAmount = primaryOrder
+            ? Math.min(droppedValueInPaise, primaryOrder.totalPrice)
+            : droppedValueInPaise;
+        const refundResult = await processRefundAction({
+            orderId: primaryOrderId,
+            type: "partial",
+            amountInPaise: refundAmount,
+            reason: `Automatic refund — ${unavailablePaid.length} item(s) unavailable at checkout: ${unavailablePaid.map((u) => u.productTitle).join(", ")}`,
+            method: "razorpay",
+            razorpayPaymentId,
+            confirmIrrevocable: true,
+            refundedBy: "system:checkout-auto-refund",
+        });
+        if (!refundResult.ok) {
+            throw new Error(refundResult.error ?? "Automatic refund failed");
+        }
+    }
+    catch (refundErr) {
+        void normalizeError(refundErr);
+        serverLogger.warn("verifyAndPlaceRazorpayOrderAction: automatic partial refund for dropped items failed — flagging for manual follow-up", {
+            orderId: primaryOrderId,
+            droppedValueInPaise,
+            err: refundErr instanceof Error ? refundErr.message : String(refundErr),
+        });
+        await unitOfWork.orders
+            .update(primaryOrderId, { refundPending: true })
+            .catch((updErr) => {
+            void normalizeError(updErr);
+            serverLogger.error("verifyAndPlaceRazorpayOrderAction: failed to flag refundPending after auto-refund failure", { orderId: primaryOrderId, err: updErr instanceof Error ? updErr.message : String(updErr) });
+        });
+        // Best-effort admin fan-out — mirrors onScamReportCreate's employee
+        // notification pattern. Never allowed to throw past this point.
+        try {
+            const admins = await userRepository.list({ filters: "role==admin", page: 1, pageSize: 100 });
+            await Promise.all(admins.items
+                .filter((a) => !!a.id)
+                .map((admin) => sendNotification({
+                userId: admin.id,
+                type: "system",
+                priority: "high",
+                title: "Automatic refund failed",
+                message: `Automatic refund failed for order ${primaryOrderId} (${unavailablePaid.length} unavailable item(s)) — manual refund required.`,
+                relatedId: primaryOrderId,
+                relatedType: "order",
+                userEmail: admin.email ?? undefined,
+                userPhone: admin.phoneNumber ?? undefined,
+            }).catch((notifErr) => serverLogger.error("Failed to notify admin of failed auto-refund (non-fatal)", notifErr))));
+        }
+        catch (notifyErr) {
+            void normalizeError(notifyErr);
+            serverLogger.error("verifyAndPlaceRazorpayOrderAction: failed to query admins for failed auto-refund notification", { orderId: primaryOrderId });
+        }
+    }
+}
 export async function verifyAndPlaceRazorpayOrderAction(input) {
     const { userId: uid, userName, userEmail, razorpay_order_id, razorpay_payment_id, razorpay_signature, addressId, notes, outOfStockPolicy = OutOfStockPolicyValues.CANCEL_ORDER, } = input;
     const siteSettings = await siteSettingsRepository.getSingleton();
@@ -1086,73 +1168,12 @@ export async function verifyAndPlaceRazorpayOrderAction(input) {
     // themselves are NOT rolled back (they're already validly created and
     // paid); instead the failure is surfaced via order.refundPending + an
     // admin notification, never silently dropped (Rule #8).
-    if (unavailablePaid.length > 0 && orderIds.length > 0) {
-        const droppedValueInPaise = unavailablePaid.reduce((sum, u) => sum + (productByIdPaid.get(u.productId)?.price ?? 0) * u.requestedQty, 0);
-        const primaryOrderId = orderIds[0];
-        if (droppedValueInPaise > 0) {
-            try {
-                const primaryOrder = await unitOfWork.orders.findById(primaryOrderId);
-                // Cap defensively at the primary order's total — processRefundAction
-                // rejects any amount exceeding order.totalPrice, and a multi-order
-                // batch's dropped-items value isn't cleanly attributable to a single
-                // order (Razorpay refunds are keyed by paymentId, not orderId; the
-                // FIRST order created in this batch is used as the refund's book-
-                // keeping anchor).
-                const refundAmount = primaryOrder
-                    ? Math.min(droppedValueInPaise, primaryOrder.totalPrice)
-                    : droppedValueInPaise;
-                const refundResult = await processRefundAction({
-                    orderId: primaryOrderId,
-                    type: "partial",
-                    amountInPaise: refundAmount,
-                    reason: `Automatic refund — ${unavailablePaid.length} item(s) unavailable at checkout: ${unavailablePaid.map((u) => u.productTitle).join(", ")}`,
-                    method: "razorpay",
-                    razorpayPaymentId: razorpay_payment_id,
-                    confirmIrrevocable: true,
-                    refundedBy: "system:checkout-auto-refund",
-                });
-                if (!refundResult.ok) {
-                    throw new Error(refundResult.error ?? "Automatic refund failed");
-                }
-            }
-            catch (refundErr) {
-                void normalizeError(refundErr);
-                serverLogger.warn("verifyAndPlaceRazorpayOrderAction: automatic partial refund for dropped items failed — flagging for manual follow-up", {
-                    orderId: primaryOrderId,
-                    droppedValueInPaise,
-                    err: refundErr instanceof Error ? refundErr.message : String(refundErr),
-                });
-                await unitOfWork.orders
-                    .update(primaryOrderId, { refundPending: true })
-                    .catch((updErr) => {
-                    void normalizeError(updErr);
-                    serverLogger.error("verifyAndPlaceRazorpayOrderAction: failed to flag refundPending after auto-refund failure", { orderId: primaryOrderId, err: updErr instanceof Error ? updErr.message : String(updErr) });
-                });
-                // Best-effort admin fan-out — mirrors onScamReportCreate's employee
-                // notification pattern. Never allowed to throw past this point.
-                try {
-                    const admins = await userRepository.list({ filters: "role==admin", page: 1, pageSize: 100 });
-                    await Promise.all(admins.items
-                        .filter((a) => !!a.id)
-                        .map((admin) => sendNotification({
-                        userId: admin.id,
-                        type: "system",
-                        priority: "high",
-                        title: "Automatic refund failed",
-                        message: `Automatic refund failed for order ${primaryOrderId} (${unavailablePaid.length} unavailable item(s)) — manual refund required.`,
-                        relatedId: primaryOrderId,
-                        relatedType: "order",
-                        userEmail: admin.email ?? undefined,
-                        userPhone: admin.phoneNumber ?? undefined,
-                    }).catch((notifErr) => serverLogger.error("Failed to notify admin of failed auto-refund (non-fatal)", notifErr))));
-                }
-                catch (notifyErr) {
-                    void normalizeError(notifyErr);
-                    serverLogger.error("verifyAndPlaceRazorpayOrderAction: failed to query admins for failed auto-refund notification", { orderId: primaryOrderId });
-                }
-            }
-        }
-    }
+    await refundDroppedItemsForRazorpayCheckout({
+        unavailablePaid,
+        orderIds,
+        productByIdPaid,
+        razorpayPaymentId: razorpay_payment_id,
+    });
     if (emailsToSend.length > 0) {
         Promise.all(emailsToSend.map((e) => sendOrderConfirmationEmail(e))).catch((err) => serverLogger.error("Order confirmation email error:", err));
     }

package/dist/_internal/server/jobs/core/jobRunners.d.ts

@@ -9,6 +9,7 @@
  * ping channel the client subscribes to via `useBulkEvent`.
  */
 import type { JobContext } from "../runtime/types";
+import type { JsonValue } from "@mohasinac/appkit";
 export interface JobRunResult {
     summary: {
         total: number;
@@ -22,7 +23,7 @@ export interface JobRunResult {
         id: string;
         reason: string;
     }[];
-    data?: Record<string, unknown>;
+    data?: Record<string, JsonValue>;
 }
-export type JobRunner = (payload: Record<string, unknown>, ctx: JobContext) => Promise<JobRunResult>;
+export type JobRunner = (payload: Record<string, JsonValue>, ctx: JobContext) => Promise<JobRunResult>;
 export declare const JOB_RUNNERS: Record<string, JobRunner>;

package/dist/_internal/server/jobs/core/onJobCreated.js

@@ -37,10 +37,10 @@ export async function handleJobCreated(input, ctx) {
     await jobsRepository.markProcessing(jobId);
     const runner = JOB_RUNNERS[job.jobType];
     if (!runner) {
-        const error = `Unknown jobType: ${job.jobType}`;
+        const error = `No runner registered for jobType: ${job.jobType}`;
         await jobsRepository.markFailed(jobId, error);
         await pingBulkEvent(jobId, { status: "failed", action: job.jobType, error }, ctx);
-        ctx.logger.error("onJobCreated: unknown jobType", null, { jobId, jobType: job.jobType });
+        ctx.logger.error("onJobCreated: unregistered jobType", null, { jobId, jobType: job.jobType });
         return;
     }
     try {

package/dist/features/admin/components/AdminNotificationsView.js

@@ -9,6 +9,7 @@ import { ConfirmDeleteModal, FilterChipGroup, ListingLayout, RowActionMenu, useT
 import { ADMIN_ENDPOINTS } from "../../../constants/api-endpoints";
 import { ACTIONS } from "../../../_internal/shared/actions/action-registry";
 import { ROW_ACTION_META, ROW_ACTION_ID } from "../../products/constants/action-defs";
+import { useBulkAction } from "../../../react";
 import { toRecordArray, toRelativeDate, toStringValue, } from "../hooks/useAdminListingData";
 import { DataListingView } from "./DataListingView";
 import { apiClient } from "../../../http";
@@ -19,6 +20,17 @@ export function AdminNotificationsView({ children, ...props }) {
     const queryClient = useQueryClient();
     const { showToast } = useToast();
     const [deleteTarget, setDeleteTarget] = useState(null);
+    const [bulkDeleteIds, setBulkDeleteIds] = useState(null);
+    const bulkNotifs = useBulkAction({
+        mutationFn: (payload) => apiClient.post(ADMIN_ENDPOINTS.ADMIN_NOTIFICATIONS_BULK, payload),
+        onSuccess: (result) => {
+            showToast(`${result.summary.succeeded}/${result.summary.total} notifications updated.`, result.summary.failed > 0 ? "warning" : "success");
+            queryClient.invalidateQueries({ queryKey: ["admin", "notifications"] });
+        },
+        onError: () => {
+            showToast("Bulk action failed.", "error");
+        },
+    });
     const deleteMutation = useApiMutation({
         mutationFn: async (id) => {
             await apiClient.delete(ADMIN_ENDPOINTS.ADMIN_NOTIFICATION_BY_ID(id));
@@ -77,13 +89,17 @@ export function AdminNotificationsView({ children, ...props }) {
                 id: ROW_ACTION_ID.MARK_READ,
                 label: ACTIONS.ADMIN["mark-read"].label,
                 variant: "primary",
-                onClick: () => selection.clearSelection(),
+                loading: bulkNotifs.isLoading,
+                onClick: () => {
+                    void bulkNotifs.execute({ action: "mark_read", ids: selection.selectedIds });
+                    selection.clearSelection();
+                },
             },
             {
                 id: ROW_ACTION_ID.DELETE,
                 label: ACTIONS.ADMIN["delete-notification"].label,
                 variant: "secondary",
-                onClick: () => selection.clearSelection(),
+                onClick: () => setBulkDeleteIds(selection.selectedIds),
             },
         ],
         renderRowActions: (row) => (_jsx(RowActionMenu, { actions: [
@@ -99,8 +115,17 @@ export function AdminNotificationsView({ children, ...props }) {
             ] })),
         renderFilterPanel: ({ pendingFilters, setPendingFilters }) => (_jsx(FilterChipGroup, { label: "Type", tabs: NOTIF_TYPES.map((opt) => ({ id: opt, label: opt })), value: pendingFilters.type || "All", onChange: (v) => setPendingFilters((p) => ({ ...p, type: v })) })),
     };
-    return (_jsxs(_Fragment, { children: [_jsx(DataListingView, { config: config }), _jsx(ConfirmDeleteModal, { isOpen: Boolean(deleteTarget), onClose: () => setDeleteTarget(null), onConfirm: () => {
-                    if (deleteTarget)
+    return (_jsxs(_Fragment, { children: [_jsx(DataListingView, { config: config }), _jsx(ConfirmDeleteModal, { isOpen: Boolean(deleteTarget) || Boolean(bulkDeleteIds), onClose: () => {
+                    setDeleteTarget(null);
+                    setBulkDeleteIds(null);
+                }, onConfirm: () => {
+                    if (bulkDeleteIds) {
+                        void bulkNotifs.execute({ action: "delete", ids: bulkDeleteIds }).then(() => setBulkDeleteIds(null));
+                    }
+                    else if (deleteTarget) {
                         deleteMutation.mutate(deleteTarget.id);
-                }, isDeleting: deleteMutation.isPending, title: "Delete notification?", message: "This notification will be permanently removed.", confirmText: "Delete", variant: "danger" })] }));
+                    }
+                }, isDeleting: deleteMutation.isPending || bulkNotifs.isLoading, title: bulkDeleteIds ? "Delete these notifications?" : "Delete notification?", message: bulkDeleteIds
+                    ? `${bulkDeleteIds.length} notification(s) will be permanently removed.`
+                    : "This notification will be permanently removed.", confirmText: "Delete", variant: "danger" })] }));
 }

package/dist/features/admin/components/AdminUsersView.js

@@ -3,7 +3,7 @@ import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-run
 import { useApiMutation } from "@mohasinac/appkit/client";
 import { sieveFilter, SIEVE_OP } from "@mohasinac/appkit";
 import { sortBy } from "@mohasinac/appkit";
-import React, { useState } from "react";
+import React, { useEffect, useState } from "react";
 import { useQueryClient } from "@tanstack/react-query";
 import { Button, FilterChipGroup, Form, FormActions, Input, ListingLayout, Modal, RowActionMenu, Text as AppText, useToast, } from "../../../ui";
 import { ADMIN_ENDPOINTS } from "../../../constants/api-endpoints";
@@ -14,6 +14,10 @@ import { toRecordArray, toRelativeDate, toStringValue, } from "../hooks/useAdmin
 import { DataListingView } from "./DataListingView";
 import { apiClient } from "../../../http";
 import { AdminUserEditorView } from "./AdminUserEditorView";
+import { useBulkAction } from "../../../react";
+import { useBulkEvent } from "../../events/hooks/useBulkEvent";
+import { RTDB_PATHS } from "../../../providers/db-firebase/rtdb-paths";
+import { RealtimeEventStatus } from "../../../react/hooks/useRealtimeEvent";
 export function AdminUsersView({ children, ...props }) {
     const toast = useToast();
     const queryClient = useQueryClient();
@@ -22,21 +26,50 @@ export function AdminUsersView({ children, ...props }) {
     const [banModalOpen, setBanModalOpen] = useState(false);
     const [banTargetId, setBanTargetId] = useState(null);
     const [banReason, setBanReason] = useState("");
+    const [bulkConfirmTarget, setBulkConfirmTarget] = useState(null);
+    // Hard-ban runs as a Firebase Function job (cascade across address/payment
+    // clusters can exceed the Vercel Hobby 10s ceiling) — the route only
+    // enqueues it and returns {jobId, customToken} immediately. This event
+    // stream tracks that job through to completion via the bulk_events RTDB
+    // ping channel.
+    const banJobEvent = useBulkEvent({ rtdbPath: RTDB_PATHS.BULK_EVENTS });
+    useEffect(() => {
+        if (banJobEvent.status === RealtimeEventStatus.SUCCESS) {
+            toast.showToast("User has been banned.", "success");
+            setBanModalOpen(false);
+            setBanTargetId(null);
+            setBanReason("");
+            void queryClient.invalidateQueries({ queryKey: ["admin", "users", "listing"] });
+            banJobEvent.reset();
+        }
+        else if (banJobEvent.status === RealtimeEventStatus.FAILED ||
+            banJobEvent.status === RealtimeEventStatus.TIMEOUT) {
+            toast.showToast(banJobEvent.error ?? "Failed to ban user.", "error");
+            banJobEvent.reset();
+        }
+        // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, [banJobEvent.status]);
     const banUser = useApiMutation({
         mutationFn: () => {
             if (!banTargetId)
                 throw new Error("No user selected");
             return apiClient.post(ADMIN_ENDPOINTS.USER_HARD_BAN(banTargetId), { reason: banReason.trim() });
         },
-        onSuccess: () => {
-            toast.showToast("User has been banned.", "success");
-            setBanModalOpen(false);
-            setBanTargetId(null);
-            setBanReason("");
+        onSuccess: (result) => {
+            banJobEvent.subscribe(result.jobId, result.customToken);
+        },
+        onError: () => {
+            toast.showToast("Failed to start hard-ban.", "error");
+        },
+    });
+    const bulkUsers = useBulkAction({
+        mutationFn: (payload) => apiClient.post(ADMIN_ENDPOINTS.USERS_BULK, payload),
+        onSuccess: (result) => {
+            toast.showToast(`${result.summary.succeeded}/${result.summary.total} users updated.`, result.summary.failed > 0 ? "warning" : "success");
             void queryClient.invalidateQueries({ queryKey: ["admin", "users", "listing"] });
         },
         onError: () => {
-            toast.showToast("Failed to ban user.", "error");
+            toast.showToast("Bulk action failed.", "error");
         },
     });
     const unbanUser = useApiMutation({
@@ -49,6 +82,19 @@ export function AdminUsersView({ children, ...props }) {
             toast.showToast("Failed to lift ban.", "error");
         },
     });
+    const handleManageBulkClick = (selection) => {
+        const rowId = selection.selectedIds[0];
+        const row = selection.rows.find((r) => r.id === rowId) ?? null;
+        if (row) {
+            setSelectedRow(row);
+            setDrawerOpen(true);
+        }
+        selection.clearSelection();
+    };
+    const handleRestoreBulkClick = (selection) => {
+        void bulkUsers.execute({ action: "restore", ids: selection.selectedIds });
+        selection.clearSelection();
+    };
     if (React.Children.count(children) > 0) {
         return (_jsx(ListingLayout, { portal: "admin", ...props, children: children }));
     }
@@ -109,25 +155,37 @@ export function AdminUsersView({ children, ...props }) {
             setSelectedRow(row);
             setDrawerOpen(true);
         },
-        // Rule #7: bulk-action array sourced from the ADMIN_BULK_ACTIONS preset.
-        // Only MANAGE has a wired handler today; SUSPEND/RESTORE/DELETE are left
-        // out until they have real bulk handlers.
-        buildBulkActions: (selection) => [ROW_ACTION_ID.MANAGE]
+        // Rule #7: bulk-action array sourced from the ADMIN_BULK_ACTIONS preset,
+        // backed by the real /api/admin/users/bulk endpoint via useBulkAction.
+        buildBulkActions: (selection) => [ROW_ACTION_ID.MANAGE, ROW_ACTION_ID.SUSPEND, ROW_ACTION_ID.RESTORE, ROW_ACTION_ID.DELETE]
             .filter((id) => ADMIN_BULK_ACTIONS.users.includes(id))
-            .map((id) => ({
-            id,
-            label: ROW_ACTION_META[id].label,
-            variant: "primary",
-            onClick: () => {
-                const rowId = selection.selectedIds[0];
-                const row = selection.rows.find((r) => r.id === rowId) ?? null;
-                if (row) {
-                    setSelectedRow(row);
-                    setDrawerOpen(true);
-                }
-                selection.clearSelection();
-            },
-        })),
+            .map((id) => {
+            if (id === ROW_ACTION_ID.MANAGE) {
+                return {
+                    id,
+                    label: ROW_ACTION_META[id].label,
+                    variant: "primary",
+                    onClick: () => handleManageBulkClick(selection),
+                };
+            }
+            if (id === ROW_ACTION_ID.RESTORE) {
+                return {
+                    id,
+                    label: ROW_ACTION_META[id].label,
+                    variant: "secondary",
+                    loading: bulkUsers.isLoading,
+                    onClick: () => handleRestoreBulkClick(selection),
+                };
+            }
+            const action = id === ROW_ACTION_ID.SUSPEND ? "suspend" : "delete";
+            return {
+                id,
+                label: ROW_ACTION_META[id].label,
+                variant: "danger",
+                loading: bulkUsers.isLoading,
+                onClick: () => setBulkConfirmTarget({ action, ids: selection.selectedIds }),
+            };
+        }),
         renderRowActions: (row) => {
             const isBanned = row.status === "Hard banned";
             return (_jsx(RowActionMenu, { actions: [
@@ -195,5 +253,23 @@ export function AdminUsersView({ children, ...props }) {
                                             setBanModalOpen(false);
                                             setBanTargetId(null);
                                             setBanReason("");
-                                        }, children: "Cancel" }), _jsx(Button, { type: "submit", variant: "danger", isLoading: banUser.isPending, disabled: !banReason.trim() || banUser.isPending, children: ACTIONS.ADMIN["ban-user"].confirmation.confirmLabel })] })] })] })] }));
+                                        }, children: "Cancel" }), _jsx(Button, { type: "submit", variant: "danger", isLoading: banUser.isPending || banJobEvent.status === RealtimeEventStatus.SUBSCRIBING || banJobEvent.status === RealtimeEventStatus.PENDING, disabled: !banReason.trim() ||
+                                            banUser.isPending ||
+                                            banJobEvent.status === RealtimeEventStatus.SUBSCRIBING ||
+                                            banJobEvent.status === RealtimeEventStatus.PENDING, children: ACTIONS.ADMIN["ban-user"].confirmation.confirmLabel })] })] })] }), _jsxs(Modal, { isOpen: Boolean(bulkConfirmTarget), onClose: () => setBulkConfirmTarget(null), title: bulkConfirmTarget?.action === "suspend"
+                    ? ACTIONS.ADMIN["bulk-suspend-users"].confirmation.title
+                    : ACTIONS.ADMIN["bulk-delete-users"].confirmation.title, children: [_jsx(AppText, { size: "sm", color: "muted", className: "mb-4", children: bulkConfirmTarget?.action === "suspend"
+                            ? ACTIONS.ADMIN["bulk-suspend-users"].confirmation.body
+                            : ACTIONS.ADMIN["bulk-delete-users"].confirmation.body }), _jsxs(FormActions, { children: [_jsx(Button, { type: "button", variant: "secondary", onClick: () => setBulkConfirmTarget(null), children: "Cancel" }), _jsx(Button, { type: "button", variant: "danger", isLoading: bulkUsers.isLoading, onClick: () => {
+                                    if (!bulkConfirmTarget)
+                                        return;
+                                    // bulkUsers.execute already surfaces success/failure via its
+                                    // own onSuccess/onError toasts — .finally() just closes the
+                                    // confirm dialog either way.
+                                    void bulkUsers
+                                        .execute({ action: bulkConfirmTarget.action, ids: bulkConfirmTarget.ids })
+                                        .finally(() => setBulkConfirmTarget(null));
+                                }, children: bulkConfirmTarget?.action === "suspend"
+                                    ? ACTIONS.ADMIN["bulk-suspend-users"].confirmation.confirmLabel
+                                    : ACTIONS.ADMIN["bulk-delete-users"].confirmation.confirmLabel })] })] })] }));
 }

package/dist/features/homepage/components/CustomCardsSection.js

@@ -64,7 +64,7 @@ export function CustomCardsSection(config) {
     }
     // Row layout: horizontal scroller
     if (layout === "row") {
-        return (_jsx(Section, { padding: "y-3xl", surface: "muted", children: _jsxs(Div, { className: CLS_CONTAINER, children: [_jsx(SectionHeader, { title: title }), _jsx(HorizontalScroller, { gap: 16, showArrows: true, snapToItems: true, loop: true, children: cards.map((card) => (_jsx(Div, { className: "w-72 flex-shrink-0", children: _jsx(CardItem, { card: card }) }, card.id))) })] }) }));
+        return (_jsx(Section, { padding: "y-3xl", surface: "muted", children: _jsxs(Div, { className: CLS_CONTAINER, children: [_jsx(SectionHeader, { title: title }), _jsx(HorizontalScroller, { gap: 16, showArrows: true, snapToItems: true, loop: true, items: cards, keyExtractor: (card) => card.id, renderItem: (card) => (_jsx(Div, { className: "w-72 flex-shrink-0", children: _jsx(CardItem, { card: card }) })) })] }) }));
     }
     // Masonry layout: CSS columns
     if (layout === "masonry") {

package/dist/features/homepage/components/SectionCarousel.js

@@ -41,5 +41,5 @@ export function SectionCarousel({ title, description, headingVariant = "editoria
                                     headingClass,
                                 ]
                                     .filter(Boolean)
-                                    .join(" "), children: title }), headingVariant === "editorial" && (_jsxs(Row, { align: "center", justify: "center", gap: "sm", textSize: "xs", color: "faint", className: "mt-1 select-none", "aria-hidden": "true", children: [_jsx(Span, { className: "h-px w-6 bg-current" }), _jsx(Span, { size: "xs", children: "\u2736" }), _jsx(Span, { className: "h-px w-6 bg-current" })] })), description && (_jsx(Text, { className: `${descVariant} mt-2`, size: "base", children: description }))] }), isLoading ? (_jsx(CarouselSkeleton, { count: skeletonCount })) : (_jsx(HorizontalScroller, { items: items, renderItem: renderItem, perView: perView, gap: gap, autoScroll: autoScroll, autoScrollInterval: autoScrollInterval, loop: rows === 1, keyExtractor: keyExtractor, rows: rows, minItemWidth: minItemWidth, showArrows: true, snapToItems: true, showFadeEdges: true, showScrollbar: false, pauseOnHover: true })), viewMoreHref && !isLoading && (_jsx(Row, { className: "mt-6", justify: "start", children: _jsx(TextLink, { rounded: "lg", paddingX: "xl", paddingY: "sm", href: viewMoreHref, className: `inline-flex items-[center] gap-[0.375rem] border transition-colors ${useLightText ? "border-white/40 text-white hover:bg-[rgba(255,255,255,0.1)]" : "border-[var(--appkit-color-border)] text-[var(--appkit-color-text-muted)] hover:bg-[var(--appkit-color-surface-elevated)]"}`, size: "sm", weight: "medium", children: viewMoreLabel }) }))] })] }));
+                                    .join(" "), children: title }), headingVariant === "editorial" && (_jsxs(Row, { align: "center", justify: "center", gap: "sm", textSize: "xs", color: "faint", className: "mt-1 select-none", "aria-hidden": "true", children: [_jsx(Span, { className: "h-px w-6 bg-current" }), _jsx(Span, { size: "xs", children: "\u2736" }), _jsx(Span, { className: "h-px w-6 bg-current" })] })), description && (_jsx(Text, { className: `${descVariant} mt-2`, size: "base", children: description }))] }), isLoading ? (_jsx(CarouselSkeleton, { count: skeletonCount })) : (_jsx(HorizontalScroller, { items: items, renderItem: renderItem, perView: perView, gap: gap, autoScroll: autoScroll, autoScrollInterval: autoScrollInterval, loop: true, keyExtractor: keyExtractor, rows: rows, minItemWidth: minItemWidth, showArrows: true, snapToItems: true, showFadeEdges: true, showScrollbar: false, pauseOnHover: true })), viewMoreHref && !isLoading && (_jsx(Row, { className: "mt-6", justify: "start", children: _jsx(TextLink, { rounded: "lg", paddingX: "xl", paddingY: "sm", href: viewMoreHref, className: `inline-flex items-[center] gap-[0.375rem] border transition-colors ${useLightText ? "border-white/40 text-white hover:bg-[rgba(255,255,255,0.1)]" : "border-[var(--appkit-color-border)] text-[var(--appkit-color-text-muted)] hover:bg-[var(--appkit-color-surface-elevated)]"}`, size: "sm", weight: "medium", children: viewMoreLabel }) }))] })] }));
 }

package/dist/features/jobs/actions/enqueue-job.d.ts

@@ -12,9 +12,10 @@
  * (`appkit/firebase/base/database.rules.json`) — the caller signs in with it
  * client-side and subscribes via `useBulkEvent({ rtdbPath: RTDB_PATHS.BULK_EVENTS })`.
  */
+import type { JsonValue } from "@mohasinac/appkit";
 export interface EnqueueJobInput {
     jobType: string;
-    payload: Record<string, unknown>;
+    payload: Record<string, JsonValue>;
     requestedBy: string;
 }
 export interface EnqueueJobResult {

package/dist/features/jobs/repository/jobs.repository.js

@@ -5,7 +5,7 @@
  * the async-job primitive's overall flow.
  */
 import { BaseRepository } from "../../../providers/db-firebase";
-import { JOBS_COLLECTION, JobStatusValues, } from "../schemas/firestore";
+import { JOBS_COLLECTION, JOB_FIELDS, JobStatusValues, } from "../schemas/firestore";
 export class JobsRepository extends BaseRepository {
     constructor() {
         super(JOBS_COLLECTION);
@@ -38,8 +38,8 @@ export class JobsRepository extends BaseRepository {
         const cutoff = new Date();
         cutoff.setDate(cutoff.getDate() - ttlDays);
         const snap = await this.getCollection()
-            .where("status", "in", [JobStatusValues.DONE, JobStatusValues.FAILED])
-            .where("updatedAt", "<", cutoff)
+            .where(JOB_FIELDS.STATUS, "in", [JobStatusValues.DONE, JobStatusValues.FAILED])
+            .where(JOB_FIELDS.UPDATED_AT, "<", cutoff)
             .limit(500)
             .get();
         return snap.docs.map((d) => d.ref);

package/dist/features/jobs/schemas/firestore.d.ts

@@ -16,6 +16,7 @@
  * exceed the Vercel Hobby 10s sync-function ceiling (CLAUDE.md Rule #6).
  */
 import type { BaseDocument } from "../../../_internal/shared/types/base-document";
+import type { JsonValue } from "@mohasinac/appkit";
 export declare const JOBS_COLLECTION = "jobs";
 export declare const JobStatusValues: {
     readonly PENDING: "pending";
@@ -37,14 +38,14 @@ export interface JobResult {
         id: string;
         reason: string;
     }[];
-    data?: Record<string, unknown>;
+    data?: Record<string, JsonValue>;
 }
 export interface JobDocument extends BaseDocument {
     /** Key into JOB_RUNNERS — e.g. "payoutsWeekly", "hardBanCascade". */
     jobType: string;
     status: JobStatus;
     /** Opaque input the runner receives — shape is jobType-specific. */
-    payload: Record<string, unknown>;
+    payload: Record<string, JsonValue>;
     /** uid of the admin/user who enqueued this job. */
     requestedBy: string;
     result?: JobResult;
@@ -52,3 +53,20 @@ export interface JobDocument extends BaseDocument {
     startedAt?: Date;
     finishedAt?: Date;
 }
+export declare const JOB_FIELDS: {
+    readonly JOB_TYPE: "jobType";
+    readonly STATUS: "status";
+    readonly PAYLOAD: "payload";
+    readonly REQUESTED_BY: "requestedBy";
+    readonly ERROR: "error";
+    readonly STARTED_AT: "startedAt";
+    readonly FINISHED_AT: "finishedAt";
+    readonly CREATED_AT: "createdAt";
+    readonly UPDATED_AT: "updatedAt";
+    readonly STATUS_VALUES: {
+        readonly PENDING: "pending";
+        readonly PROCESSING: "processing";
+        readonly DONE: "done";
+        readonly FAILED: "failed";
+    };
+};

package/dist/features/jobs/schemas/firestore.js

@@ -22,3 +22,15 @@ export const JobStatusValues = {
     DONE: "done",
     FAILED: "failed",
 };
+export const JOB_FIELDS = {
+    JOB_TYPE: "jobType",
+    STATUS: "status",
+    PAYLOAD: "payload",
+    REQUESTED_BY: "requestedBy",
+    ERROR: "error",
+    STARTED_AT: "startedAt",
+    FINISHED_AT: "finishedAt",
+    CREATED_AT: "createdAt",
+    UPDATED_AT: "updatedAt",
+    STATUS_VALUES: JobStatusValues,
+};