@mohasinac/appkit 4.0.2 → 4.1.0

package/dist/_internal/client/features/layout/useSidebarSearch.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Shared inline-filter logic for the Admin/Store/User sidebars — lowercase
+ * substring match against item labels, collapsing to only groups with a
+ * surviving match. Each sidebar keeps its own accordion/markup; only this
+ * pure filtering algorithm is shared so it isn't rewritten three times.
+ */
+export declare function useSidebarSearch<Item extends {
+    href: string;
+    label: string;
+}, Group extends {
+    title: string;
+    items: Item[];
+    defaultOpen?: boolean;
+}>(groups: Group[]): {
+    query: string;
+    setQuery: import("react").Dispatch<import("react").SetStateAction<string>>;
+    isSearching: boolean;
+    filteredGroups: Group[];
+};

package/dist/_internal/client/features/layout/useSidebarSearch.js

@@ -0,0 +1,21 @@
+"use client";
+import { useMemo, useState } from "react";
+/**
+ * Shared inline-filter logic for the Admin/Store/User sidebars — lowercase
+ * substring match against item labels, collapsing to only groups with a
+ * surviving match. Each sidebar keeps its own accordion/markup; only this
+ * pure filtering algorithm is shared so it isn't rewritten three times.
+ */
+export function useSidebarSearch(groups) {
+    const [query, setQuery] = useState("");
+    const isSearching = query.trim().length > 0;
+    const filteredGroups = useMemo(() => {
+        if (!isSearching)
+            return groups;
+        const q = query.trim().toLowerCase();
+        return groups
+            .map((group) => ({ ...group, items: group.items.filter((item) => item.label.toLowerCase().includes(q)) }))
+            .filter((group) => group.items.length > 0);
+    }, [groups, query, isSearching]);
+    return { query, setQuery, isSearching, filteredGroups };
+}

package/dist/_internal/server/features/auth/permissions.d.ts

@@ -26,6 +26,8 @@ export declare function checkAnyPermission(resolved: ResolvedPermissions, requir
 type GetUser = () => Promise<{
     uid: string;
     role: string;
+    isTester?: boolean;
+    canTestAdmin?: boolean;
 } | null>;
 export interface AdminSectionLayoutOpts {
     getUser: GetUser;

package/dist/_internal/server/features/auth/permissions.js

@@ -10,6 +10,7 @@
  */
 import { userRepository } from "../../../../repositories";
 import { ROUTES } from "../../../../next/routing/route-map";
+import { isEffectiveAdminUser } from "../../../../features/auth/role-predicates";
 // ── Core resolver ─────────────────────────────────────────────────────────────
 /**
  * Fetch and resolve permissions for a user.
@@ -59,8 +60,9 @@ export function makeAdminSectionLayout(permission, opts) {
             redirect(opts.loginPath ?? String(ROUTES.AUTH.LOGIN));
             return null;
         }
-        // admin role passes without a permission check
-        if (user.role === "admin")
+        // admin role, or a tester explicitly flagged to test admin areas
+        // (isTester && canTestAdmin), passes without a permission check
+        if (isEffectiveAdminUser(user))
             return children;
         // non-employee non-admin roles have no business in /admin
         if (user.role !== "employee") {

package/dist/_internal/server/features/seo/sitemap.js

@@ -113,13 +113,14 @@ async function fetchEventUrls(baseUrl) {
         const snap = await db
             .collection(EVENTS_COLLECTION)
             .where(EVENT_FIELDS.STATUS, "==", EVENT_FIELDS.STATUS_VALUES.ACTIVE)
-            .select(EVENT_FIELDS.UPDATED_AT)
+            .select(EVENT_FIELDS.UPDATED_AT, EVENT_FIELDS.SLUG)
             .limit(500)
             .get();
         return snap.docs.map((doc) => {
             const data = doc.data();
+            const slug = typeof data[EVENT_FIELDS.SLUG] === "string" ? data[EVENT_FIELDS.SLUG] : undefined;
             return {
-                url: `${baseUrl}${ROUTES.PUBLIC.EVENT_DETAIL(doc.id)}`,
+                url: `${baseUrl}${ROUTES.PUBLIC.EVENT_DETAIL(slug ?? doc.id)}`,
                 lastModified: data[EVENT_FIELDS.UPDATED_AT]?.toDate?.() ?? new Date(),
                 changeFrequency: "daily",
                 priority: 0.7,

package/dist/client.d.ts

@@ -301,7 +301,7 @@ export { actionTracker, setActionTrackerSink, resetActionTrackerSink, type Actio
 export { cartRequiresShipping, cartIsDigitalOnly, cartIsChatOnly, } from "./_internal/shared/listing-types/cart-shipping";
 export { ACTIONS, action, act, canPerformAction, actionsForListingType, actionLabel, type ActionDef, type ActionKind, type ActionResource, type ActionTree, type ActionConfirmation, } from "./_internal/shared/actions/action-registry";
 export { buildBulkAction } from "./_internal/shared/actions/bulk-helpers";
-export { isAdminUser, isSellerUser, isModeratorUser, isEmployeeUser, isBuyerUser, } from "./features/auth/role-predicates";
+export { isAdminUser, isSellerUser, isModeratorUser, isEmployeeUser, isBuyerUser, isEffectiveAdminUser, } from "./features/auth/role-predicates";
 export { DashboardLayoutClient, RoleGuard } from "./_internal/client/features/layout/index";
 export type { DashboardLayoutClientProps, RoleGuardProps, } from "./_internal/client/features/layout/index";
 export type { LayoutBreakpoint, DashboardVariant, LayoutRole, SidebarNavItem, SidebarNavGroup, MainNavItem as LayoutMainNavItem, BrandingConfig, FooterConfig, SectionResponsive, SectionTheming, LayoutConfig, DashboardLayoutConfig, } from "./_internal/shared/features/layout/index";

package/dist/client.js

@@ -304,7 +304,7 @@ export { cartRequiresShipping, cartIsDigitalOnly, cartIsChatOnly, } from "./_int
 export { ACTIONS, action, act, canPerformAction, actionsForListingType, actionLabel, } from "./_internal/shared/actions/action-registry";
 export { buildBulkAction } from "./_internal/shared/actions/bulk-helpers";
 // SB-UNI-E user-role predicates (pure functions, client-safe).
-export { isAdminUser, isSellerUser, isModeratorUser, isEmployeeUser, isBuyerUser, } from "./features/auth/role-predicates";
+export { isAdminUser, isSellerUser, isModeratorUser, isEmployeeUser, isBuyerUser, isEffectiveAdminUser, } from "./features/auth/role-predicates";
 // Layout feature — client islands (unifies admin/store/user dashboard layouts).
 export { DashboardLayoutClient, RoleGuard } from "./_internal/client/features/layout/index";
 // Listing-type capability registry — SB-UNI X1.

package/dist/features/about/components/FAQPageView.d.ts

@@ -1,5 +1,8 @@
+import type { FAQDocument } from "../../faq/schemas/firestore";
 export interface FAQPageViewProps {
     /** If provided, filter to this category slug */
     category?: string;
+    /** Active FAQs fetched server-side by the caller (Firestore-backed). */
+    faqs?: FAQDocument[];
 }
-export declare function FAQPageView({ category, }?: FAQPageViewProps): Promise<import("react").JSX.Element>;
+export declare function FAQPageView({ category, faqs, }?: FAQPageViewProps): Promise<import("react").JSX.Element>;

package/dist/features/about/components/FAQPageView.js

@@ -1,10 +1,20 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { ROUTES } from "../../../constants";
 import { FLEX_ROW } from "../../../_internal/shared/styles/themed";
-import { Aside, Container, Details, Div, Heading, Nav, RichTextRenderer, Row, Section, Span, Stack, Summary, Text } from "../../../ui";
+import { Aside, Container, Div, Heading, Nav, Row, Section, Span, Stack, Text } from "../../../ui";
 import { TextLink } from "../../../ui";
 import { HelpCircle, ChevronRight } from "lucide-react";
-export async function FAQPageView({ category, } = {}) {
+import { FAQSearchableList } from "../../faq/components/FAQSearchableList";
+function toDisplayFaq(doc) {
+    return {
+        id: doc.id,
+        question: doc.question,
+        answer: typeof doc.answer === "string" ? { text: doc.answer, format: "plain" } : doc.answer,
+        category: doc.category,
+        tags: doc.tags,
+    };
+}
+export async function FAQPageView({ category, faqs = [], } = {}) {
     const flex = { row: FLEX_ROW };
     const { getTranslations, getMessages } = await import("next-intl/server");
     const t = await getTranslations("faqs");
@@ -13,10 +23,10 @@ export async function FAQPageView({ category, } = {}) {
     const categories = Array.isArray(faqMessages?.categories)
         ? faqMessages.categories
         : [];
-    const allItems = Array.isArray(faqMessages?.items) ? faqMessages.items : [];
-    const visibleItems = category
-        ? allItems.filter((item) => item.category === category)
-        : allItems;
+    const visibleFaqs = (category ? faqs.filter((f) => f.category === category) : faqs).map(toDisplayFaq);
     const activeCategory = categories.find((c) => c.slug === category);
-    return (_jsxs(Div, { className: "-mx-4 md:-mx-6 lg:-mx-8 -mt-6 sm:-mt-8 lg:-mt-10", children: [_jsx(Section, { color: "inverse", tone: "accent-banner", padding: "banner", children: _jsxs(Container, { size: "md", className: "text-center", children: [_jsx(Heading, { color: "inverse", level: 1, variant: "none", className: "mb-3", children: activeCategory ? activeCategory.label : t("title") }), _jsx(Text, { color: "inverse", variant: "none", className: "/80 max-w-2xl mx-auto", children: t("subtitle") })] }) }), _jsx(Container, { size: "md", padding: "content-banner", children: _jsxs(Stack, { direction: "md-row", gap: "xl", children: [categories.length > 0 && (_jsxs(Aside, { className: "md:w-56 flex-shrink-0", children: [_jsx(Heading, { level: 3, className: "uppercase tracking-wide mb-3", color: "muted", size: "sm", weight: "semibold", children: t("categoriesLabel") }), _jsxs(Nav, { "aria-label": "FAQ categories", spacing: "xs", children: [_jsxs(TextLink, { rounded: "lg", href: String(ROUTES.PUBLIC.FAQS), paddingX: "sm", paddingY: "xs", layout: "flex", align: "center", justify: "between", weight: !category ? "semibold" : undefined, className: `transition-colors ${!category ? "bg-primary/10 text-primary" : "hover:bg-[var(--appkit-color-surface)] hover:bg-[var(--appkit-color-surface-elevated)]"}`, size: "sm", children: [_jsxs(Span, { className: `${flex.row}`, gap: "md", children: [_jsx(HelpCircle, { className: "w-4 h-4" }), t("allCategories")] }), _jsx(ChevronRight, { className: "w-3.5 h-3.5 opacity-50" })] }), categories.map((cat) => (_jsxs(TextLink, { rounded: "lg", href: String(ROUTES.PUBLIC.FAQ_CATEGORY(cat.slug)), paddingX: "sm", paddingY: "xs", layout: "flex", align: "center", justify: "between", weight: category === cat.slug ? "semibold" : undefined, className: `transition-colors ${category === cat.slug ? "bg-primary/10 text-primary" : "hover:bg-[var(--appkit-color-surface)] hover:bg-[var(--appkit-color-surface-elevated)]"}`, size: "sm", children: [_jsxs(Span, { className: `${flex.row}`, gap: "md", children: [_jsx(Span, { children: cat.icon }), cat.label] }), _jsx(ChevronRight, { className: "w-3.5 h-3.5 opacity-50" })] }, cat.slug)))] })] })), _jsxs(Div, { className: "flex-1 min-w-0", children: [visibleItems.length === 0 ? (_jsxs(Section, { className: `text-center`, border: "default", surface: "subtle", rounded: "2xl", padding: "y-4xl", children: [_jsx(HelpCircle, { className: "w-10 h-10 mx-auto mb-3 text-zinc-300 dark:text-[var(--appkit-color-text-muted)]" }), _jsx(Heading, { level: 3, className: "mb-2", size: "base", children: t("emptyTitle") }), _jsx(Text, { variant: "secondary", size: "sm", children: t("emptyText") })] })) : (_jsx(Stack, { gap: "sm", children: visibleItems.map((item, i) => (_jsxs(Details, { tone: "card", className: "group overflow-hidden", children: [_jsxs(Summary, { paddingX: "x-5", paddingY: "y-md", size: "sm", weight: "medium", layout: "flex", align: "center", justify: "between", className: "hover:bg-neutral-50 hover:bg-[var(--appkit-color-surface-elevated)]/50 transition-colors", children: [_jsx(Span, { children: item.question }), _jsx(ChevronRight, { className: "w-4 h-4 flex-shrink-0 ml-3 transition-transform group-open:rotate-90" })] }), _jsx(Div, { padding: "x-md", paddingY: "b-md-lg", className: "pt-[0.25rem]", children: _jsx(RichTextRenderer, { html: item.answer, proseClass: "prose prose-sm max-w-none dark:prose-invert" }) })] }, i))) })), _jsxs(Section, { className: `mt-10 text-center`, border: "default", surface: "subtle", rounded: "2xl", padding: "lg", children: [_jsx(Heading, { level: 3, className: "mb-2", size: "base", children: t("stillNeedHelpTitle") }), _jsx(Text, { variant: "secondary", className: "mb-4", size: "sm", children: t("stillNeedHelpText") }), _jsxs(Row, { align: "center", justify: "center", gap: "md", wrap: true, children: [_jsx(TextLink, { href: String(ROUTES.PUBLIC.HELP), children: t("helpCenter") }), _jsx(TextLink, { href: String(ROUTES.PUBLIC.CONTACT), variant: "muted", children: t("contactUs") })] })] })] })] }) })] }));
+    return (_jsxs(Div, { className: "-mx-4 md:-mx-6 lg:-mx-8 -mt-6 sm:-mt-8 lg:-mt-10", children: [_jsx(Section, { color: "inverse", tone: "accent-banner", padding: "banner", children: _jsxs(Container, { size: "md", className: "text-center", children: [_jsx(Heading, { color: "inverse", level: 1, variant: "none", className: "mb-3", children: activeCategory ? activeCategory.label : t("title") }), _jsx(Text, { color: "inverse", variant: "none", className: "/80 max-w-2xl mx-auto", children: t("subtitle") })] }) }), _jsx(Container, { size: "md", padding: "content-banner", children: _jsxs(Stack, { direction: "md-row", gap: "xl", children: [categories.length > 0 && (_jsxs(Aside, { className: "md:w-56 flex-shrink-0", children: [_jsx(Heading, { level: 3, className: "uppercase tracking-wide mb-3", color: "muted", size: "sm", weight: "semibold", children: t("categoriesLabel") }), _jsxs(Nav, { "aria-label": "FAQ categories", spacing: "xs", children: [_jsxs(TextLink, { rounded: "lg", href: String(ROUTES.PUBLIC.FAQS), paddingX: "sm", paddingY: "xs", layout: "flex", align: "center", justify: "between", weight: !category ? "semibold" : undefined, className: `transition-colors ${!category ? "bg-primary/10 text-primary" : "hover:bg-[var(--appkit-color-surface)] hover:bg-[var(--appkit-color-surface-elevated)]"}`, size: "sm", children: [_jsxs(Span, { className: `${flex.row}`, gap: "md", children: [_jsx(HelpCircle, { className: "w-4 h-4" }), t("allCategories")] }), _jsx(ChevronRight, { className: "w-3.5 h-3.5 opacity-50" })] }), categories.map((cat) => (_jsxs(TextLink, { rounded: "lg", href: String(ROUTES.PUBLIC.FAQ_CATEGORY(cat.slug)), paddingX: "sm", paddingY: "xs", layout: "flex", align: "center", justify: "between", weight: category === cat.slug ? "semibold" : undefined, className: `transition-colors ${category === cat.slug ? "bg-primary/10 text-primary" : "hover:bg-[var(--appkit-color-surface)] hover:bg-[var(--appkit-color-surface-elevated)]"}`, size: "sm", children: [_jsxs(Span, { className: `${flex.row}`, gap: "md", children: [_jsx(Span, { children: cat.icon }), cat.label] }), _jsx(ChevronRight, { className: "w-3.5 h-3.5 opacity-50" })] }, cat.slug)))] })] })), _jsxs(Div, { className: "flex-1 min-w-0", children: [visibleFaqs.length === 0 ? (_jsxs(Section, { className: `text-center`, border: "default", surface: "subtle", rounded: "2xl", padding: "y-4xl", children: [_jsx(HelpCircle, { className: "w-10 h-10 mx-auto mb-3 text-zinc-300 dark:text-[var(--appkit-color-text-muted)]" }), _jsx(Heading, { level: 3, className: "mb-2", size: "base", children: t("emptyTitle") }), _jsx(Text, { variant: "secondary", size: "sm", children: t("emptyText") })] })) : (_jsx(FAQSearchableList, { faqs: visibleFaqs, labels: {
+                                        searchPlaceholder: t("searchPlaceholder"),
+                                        noResults: t("searchNoResults"),
+                                    } })), _jsxs(Section, { className: `mt-10 text-center`, border: "default", surface: "subtle", rounded: "2xl", padding: "lg", children: [_jsx(Heading, { level: 3, className: "mb-2", size: "base", children: t("stillNeedHelpTitle") }), _jsx(Text, { variant: "secondary", className: "mb-4", size: "sm", children: t("stillNeedHelpText") }), _jsxs(Row, { align: "center", justify: "center", gap: "md", wrap: true, children: [_jsx(TextLink, { href: String(ROUTES.PUBLIC.HELP), children: t("helpCenter") }), _jsx(TextLink, { href: String(ROUTES.PUBLIC.CONTACT), variant: "muted", children: t("contactUs") })] })] })] })] }) })] }));
 }

package/dist/features/account/components/UserSidebar.js

@@ -4,9 +4,10 @@ import { useState, useCallback, useEffect } from "react";
 import { createPortal } from "react-dom";
 import Link from "next/link";
 import { usePathname } from "next/navigation";
-import { Button, ConfirmDeleteModal, Div, IconButton, Li, Nav, Row, Span, Stack, Ul } from "../../../ui";
+import { Button, ConfirmDeleteModal, Div, IconButton, Input, Li, Nav, Row, Span, Stack, Ul } from "../../../ui";
 import { BottomSheet } from "../../layout/BottomSheet";
 import { SidebarCollapseToggle } from "../../../_internal/client/features/layout/SidebarCollapseToggle";
+import { useSidebarSearch } from "../../../_internal/client/features/layout/useSidebarSearch";
 const __O = {
     hidden: "overflow-hidden",
     yAuto: "overflow-y-auto",
@@ -41,20 +42,25 @@ function DrawerContent({ groups, items, activeHref, onItemClick, }) {
         const match = groups.find((g) => g.defaultOpen === true || g.items.some((i) => activeHref === i.href || activeHref.startsWith(i.href + "/")));
         return match?.title ?? null;
     });
-    const toggle = useCallback((title) => setOpenGroup((prev) => (prev === title ? null : title)), []);
+    const { query, setQuery, isSearching, filteredGroups } = useSidebarSearch(groups ?? []);
+    const toggle = useCallback((title) => {
+        if (isSearching)
+            return;
+        setOpenGroup((prev) => (prev === title ? null : title));
+    }, [isSearching]);
     if (!groups || groups.length === 0) {
         return (_jsx(Nav, { "aria-label": "User navigation", padding: "y-sm", children: _jsx(Ul, { paddingX: "x-sm", spacing: "2xs", children: items.map((item) => {
                     const isActive = activeHref === item.href || activeHref.startsWith(item.href + "/");
                     return (_jsx(Li, { children: _jsx(NavLink, { item: item, isActive: isActive, onClick: onItemClick }) }, item.href));
                 }) }) }));
     }
-    return (_jsx(Nav, { "aria-label": "User navigation", padding: "y-xs", children: groups.map((group) => {
-            const isOpen = openGroup === group.title;
-            const hasActive = group.items.some((i) => activeHref === i.href || activeHref.startsWith(i.href + "/"));
-            return (_jsxs(Div, { className: "mb-0.5", children: [_jsx(Button, { type: "button", variant: "ghost", onClick: () => toggle(group.title), paddingX: "md", paddingY: "sm", weight: "semibold", rounded: "none", className: `w-full text-[0.6875rem] uppercase tracking-widest transition-colors ${hasActive && !isOpen
-                            ? "text-primary-600 dark:text-primary-400"
-                            : "text-[var(--appkit-color-text-faint)] hover:text-[var(--appkit-color-text-muted)]"}`, children: _jsxs(Row, { align: "center", justify: "between", className: "w-full", children: [_jsx(Span, { children: group.title }), _jsx("svg", { className: `w-3 h-3 transition-transform duration-150 ${isOpen ? "rotate-180" : ""}`, fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", "aria-hidden": "true", children: _jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2.5, d: "M19 9l-7 7-7-7" }) })] }) }), isOpen && (_jsx(Ul, { paddingX: "x-sm", paddingY: "y-bottom-xs", spacing: "2xs", children: group.items.map((item) => (_jsx(Li, { children: _jsx(NavLink, { item: item, isActive: isNavItemActive(item, activeHref), onClick: onItemClick }) }, item.href))) }))] }, group.title));
-        }) }));
+    return (_jsxs(Nav, { "aria-label": "User navigation", padding: "y-xs", children: [_jsx(Div, { padding: "x-md", paddingY: "y-sm", children: _jsx(Input, { value: query, onChange: (e) => setQuery(e.target.value), placeholder: "Search navigation\u2026", "aria-label": "Search navigation" }) }), isSearching && filteredGroups.length === 0 && (_jsx(Div, { padding: "x-md", paddingY: "y-sm", children: _jsxs(Span, { size: "xs", color: "muted", children: ["No matches for \u201C", query, "\u201D."] }) })), filteredGroups.map((group) => {
+                const isOpen = isSearching || openGroup === group.title;
+                const hasActive = group.items.some((i) => activeHref === i.href || activeHref.startsWith(i.href + "/"));
+                return (_jsxs(Div, { className: "mb-0.5", children: [_jsx(Button, { type: "button", variant: "ghost", onClick: () => toggle(group.title), paddingX: "md", paddingY: "sm", weight: "semibold", rounded: "none", className: `w-full text-[0.6875rem] uppercase tracking-widest transition-colors ${hasActive && !isOpen
+                                ? "text-primary-600 dark:text-primary-400"
+                                : "text-[var(--appkit-color-text-faint)] hover:text-[var(--appkit-color-text-muted)]"}`, children: _jsxs(Row, { align: "center", justify: "between", className: "w-full", children: [_jsx(Span, { children: group.title }), _jsx("svg", { className: `w-3 h-3 transition-transform duration-150 ${isOpen ? "rotate-180" : ""}`, fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", "aria-hidden": "true", children: _jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2.5, d: "M19 9l-7 7-7-7" }) })] }) }), isOpen && (_jsx(Ul, { paddingX: "x-sm", paddingY: "y-bottom-xs", spacing: "2xs", children: group.items.map((item) => (_jsx(Li, { children: _jsx(NavLink, { item: item, isActive: isNavItemActive(item, activeHref), onClick: onItemClick }) }, item.href))) }))] }, group.title));
+            })] }));
 }
 function DrawerPanel({ title, onClose, children, }) {
     return (_jsxs(Div, { className: "hidden lg:block", children: [_jsx(Div, { surface: "overlay-xs", className: "fixed inset-0 z-40 backdrop-blur-sm", onClick: onClose, "aria-hidden": "true" }), _jsxs(Stack, { border: "default", shadow: "2xl", role: "dialog", "aria-modal": "true", "aria-label": title, className: "fixed top-0 right-0 z-50 h-full w-64 border-l", surface: "default", children: [_jsxs(Row, { border: "bottom-subtle", paddingY: "y-sm-tall", className: "shrink-0", padding: "x-md", align: "center", justify: "between", children: [_jsx(Span, { size: "xs", weight: "semibold", transform: "uppercase", color: "muted", children: title }), _jsx(IconButton, { "aria-label": "Close", variant: "ghost", size: "sm", onClick: onClose, icon: _jsx("svg", { className: "w-4 h-4", fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", "aria-hidden": "true", children: _jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2, d: "M6 18L18 6M6 6l12 12" }) }) })] }), _jsx(Div, { className: `flex-1 ${__O.yAuto}`, children: children })] })] }));

package/dist/features/admin/components/AdminSidebar.js

@@ -3,9 +3,10 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 import { useEffect, useState, useCallback } from "react";
 import { createPortal } from "react-dom";
 import Link from "next/link";
-import { Button, Div, IconButton, Li, Nav, Row, Span, Stack, Ul } from "../../../ui";
+import { Button, Div, IconButton, Input, Li, Nav, Row, Span, Stack, Ul } from "../../../ui";
 import { BottomSheet } from "../../layout/BottomSheet";
 import { SidebarCollapseToggle } from "../../../_internal/client/features/layout/SidebarCollapseToggle";
+import { useSidebarSearch } from "../../../_internal/client/features/layout/useSidebarSearch";
 const __O = {
     hidden: "overflow-hidden",
     yAuto: "overflow-y-auto",
@@ -25,14 +26,19 @@ function GroupsContent({ groups, activePath, onItemClick, }) {
         const match = groups.find((g) => g.defaultOpen ?? g.items.some((i) => activePath === i.href || activePath.startsWith(i.href + "/")));
         return match?.title ?? null;
     });
-    const toggle = useCallback((title) => setOpenGroup((p) => (p === title ? null : title)), []);
-    return (_jsx(Nav, { "aria-label": "Admin navigation", padding: "y-xs", children: groups.map((group) => {
-            const isOpen = openGroup === group.title;
-            const hasActive = group.items.some((i) => activePath === i.href || activePath.startsWith(i.href + "/"));
-            return (_jsxs(Div, { className: "mb-0.5", children: [_jsx(Button, { type: "button", variant: "ghost", onClick: () => toggle(group.title), paddingX: "md", paddingY: "sm", weight: "semibold", rounded: "none", className: `w-full text-[0.6875rem] uppercase tracking-widest transition-colors ${hasActive && !isOpen
-                            ? "text-[var(--appkit-color-text-muted)]"
-                            : "text-[var(--appkit-color-text-faint)] hover:text-[var(--appkit-color-text-muted)]"}`, children: _jsxs(Row, { align: "center", justify: "between", className: "w-full", children: [_jsx(Span, { children: group.title }), _jsx("svg", { className: `w-3 h-3 transition-transform duration-150 ${isOpen ? "rotate-180" : ""}`, fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", "aria-hidden": "true", children: _jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2.5, d: "M19 9l-7 7-7-7" }) })] }) }), isOpen && (_jsx(Ul, { paddingX: "x-sm", paddingY: "y-bottom-xs", spacing: "2xs", children: group.items.map((item) => (_jsx(Li, { children: _jsx(NavLink, { item: item, isActive: isNavItemActive(item, activePath), onClick: onItemClick }) }, item.href))) }))] }, group.title));
-        }) }));
+    const { query, setQuery, isSearching, filteredGroups } = useSidebarSearch(groups);
+    const toggle = useCallback((title) => {
+        if (isSearching)
+            return;
+        setOpenGroup((p) => (p === title ? null : title));
+    }, [isSearching]);
+    return (_jsxs(Nav, { "aria-label": "Admin navigation", padding: "y-xs", children: [_jsx(Div, { padding: "x-md", paddingY: "y-sm", children: _jsx(Input, { value: query, onChange: (e) => setQuery(e.target.value), placeholder: "Search navigation\u2026", "aria-label": "Search navigation" }) }), isSearching && filteredGroups.length === 0 && (_jsx(Div, { padding: "x-md", paddingY: "y-sm", children: _jsxs(Span, { size: "xs", color: "muted", children: ["No matches for \u201C", query, "\u201D."] }) })), filteredGroups.map((group) => {
+                const isOpen = isSearching || openGroup === group.title;
+                const hasActive = group.items.some((i) => activePath === i.href || activePath.startsWith(i.href + "/"));
+                return (_jsxs(Div, { className: "mb-0.5", children: [_jsx(Button, { type: "button", variant: "ghost", onClick: () => toggle(group.title), paddingX: "md", paddingY: "sm", weight: "semibold", rounded: "none", className: `w-full text-[0.6875rem] uppercase tracking-widest transition-colors ${hasActive && !isOpen
+                                ? "text-[var(--appkit-color-text-muted)]"
+                                : "text-[var(--appkit-color-text-faint)] hover:text-[var(--appkit-color-text-muted)]"}`, children: _jsxs(Row, { align: "center", justify: "between", className: "w-full", children: [_jsx(Span, { children: group.title }), _jsx("svg", { className: `w-3 h-3 transition-transform duration-150 ${isOpen ? "rotate-180" : ""}`, fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", "aria-hidden": "true", children: _jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2.5, d: "M19 9l-7 7-7-7" }) })] }) }), isOpen && (_jsx(Ul, { paddingX: "x-sm", paddingY: "y-bottom-xs", spacing: "2xs", children: group.items.map((item) => (_jsx(Li, { children: _jsx(NavLink, { item: item, isActive: isNavItemActive(item, activePath), onClick: onItemClick }) }, item.href))) }))] }, group.title));
+            })] }));
 }
 function DrawerPanel({ title, onClose, children, }) {
     return (_jsxs(Div, { className: "hidden lg:block", children: [_jsx(Div, { surface: "overlay-xs", className: "fixed inset-0 z-40 backdrop-blur-sm", onClick: onClose, "aria-hidden": "true" }), _jsxs(Stack, { border: "default", shadow: "2xl", role: "dialog", "aria-modal": "true", "aria-label": title, className: "fixed top-0 right-0 z-50 h-full w-64 border-l", surface: "default", children: [_jsxs(Row, { border: "bottom-subtle", paddingY: "y-sm-tall", className: "shrink-0", padding: "x-md", align: "center", justify: "between", children: [_jsx(Span, { size: "xs", weight: "semibold", transform: "uppercase", color: "muted", children: title }), _jsx(IconButton, { "aria-label": "Close", variant: "ghost", size: "sm", onClick: onClose, icon: _jsx("svg", { className: "w-4 h-4", fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", "aria-hidden": "true", children: _jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2, d: "M6 18L18 6M6 6l12 12" }) }) })] }), _jsx(Div, { className: `flex-1 ${__O.yAuto}`, children: children })] })] }));

package/dist/features/admin/components/AdminTesterChecklistItemEditorView.js

@@ -40,6 +40,7 @@ export function AdminTesterChecklistItemEditorView({ itemId, onSaved, onDeleted,
     const [href, setHref] = React.useState("");
     const [order, setOrder] = React.useState(0);
     const [isActive, setIsActive] = React.useState(true);
+    const [adminOnly, setAdminOnly] = React.useState(false);
     const [deleteConfirmOpen, setDeleteConfirmOpen] = React.useState(false);
     const { showToast } = useToast();
     const itemQuery = useQuery({
@@ -63,6 +64,7 @@ export function AdminTesterChecklistItemEditorView({ itemId, onSaved, onDeleted,
         setHref(item.href ?? "");
         setOrder(typeof item.order === "number" ? item.order : 0);
         setIsActive(item.isActive ?? true);
+        setAdminOnly(item.adminOnly ?? false);
     }, [itemQuery.data]);
     const handleGroupLabelChange = (value) => {
         setGroupLabel(value);
@@ -86,6 +88,7 @@ export function AdminTesterChecklistItemEditorView({ itemId, onSaved, onDeleted,
                 href: href || "",
                 order,
                 isActive,
+                adminOnly,
             };
             if (isEdit) {
                 return apiClient.put(ADMIN_ENDPOINTS.TESTER_CHECKLIST_ITEM_BY_ID(itemId), payload);
@@ -113,7 +116,7 @@ export function AdminTesterChecklistItemEditorView({ itemId, onSaved, onDeleted,
     });
     const isSubmitting = saveMutation.isPending || itemQuery.isLoading;
     const canSave = Boolean(groupLabel.trim()) && Boolean(pageLabel.trim()) && Boolean(label.trim());
-    const formSection = (_jsxs(_Fragment, { children: [_jsx(Form, { schema: checklistItemFormSchema, onSubmit: (e) => e.preventDefault(), spacing: "md", children: ({ setFieldError, clearErrors }) => (_jsxs(_Fragment, { children: [_jsxs(Div, { layout: "grid", gap: "4", className: "grid-cols-2", children: [_jsx(FieldInput, { name: "groupLabel", label: "Group", value: groupLabel, onChange: handleGroupLabelChange, required: true, placeholder: "e.g. Buying", hint: "Top-level accordion section on the Tester Hub." }), _jsx(Input, { label: "Group key", value: groupKey, onChange: (e) => setGroupKey(e.target.value), placeholder: "buying", helperText: "Auto-generated from the group name." })] }), _jsxs(Div, { layout: "grid", gap: "4", className: "grid-cols-2", children: [_jsx(FieldInput, { name: "pageLabel", label: "Page", value: pageLabel, onChange: handlePageLabelChange, required: true, placeholder: "e.g. Checkout", hint: "Sub-accordion within the group." }), _jsx(Input, { label: "Page key", value: pageKey, onChange: (e) => setPageKey(e.target.value), placeholder: "checkout", helperText: "Auto-generated from the page name." })] }), _jsx(FieldInput, { name: "label", label: "Test case (Yes/No question)", value: label, onChange: setLabel, required: true, placeholder: "e.g. Coupon discount is correctly reflected in the order total" }), _jsx(FieldTextarea, { name: "description", label: "Description (optional)", value: description, onChange: setDescription, placeholder: "Extra context for the tester." }), _jsx(FieldInput, { name: "href", label: "Deep link (optional)", value: href, onChange: setHref, placeholder: "/cart", hint: "Jumps the tester straight to the feature being tested." }), _jsx(Input, { label: "Display order", value: String(order), onChange: (e) => setOrder(parseInt(e.target.value, 10) || 0), type: "number", min: 0, helperText: "Lower = shown first within the page." }), _jsxs(Stack, { className: `${__P.p4}`, gap: "3", rounded: "lg", border: "default", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Visibility" }), _jsx(Toggle, { label: "Active (visible to testers)", checked: isActive, onChange: setIsActive })] }), _jsxs(Row, { gap: "3", padding: "t-xs", children: [_jsx(Button, { type: "submit", isLoading: isSubmitting, disabled: !canSave || isSubmitting, onClick: () => {
+    const formSection = (_jsxs(_Fragment, { children: [_jsx(Form, { schema: checklistItemFormSchema, onSubmit: (e) => e.preventDefault(), spacing: "md", children: ({ setFieldError, clearErrors }) => (_jsxs(_Fragment, { children: [_jsxs(Div, { layout: "grid", gap: "4", className: "grid-cols-2", children: [_jsx(FieldInput, { name: "groupLabel", label: "Group", value: groupLabel, onChange: handleGroupLabelChange, required: true, placeholder: "e.g. Buying", hint: "Top-level accordion section on the Tester Hub." }), _jsx(Input, { label: "Group key", value: groupKey, onChange: (e) => setGroupKey(e.target.value), placeholder: "buying", helperText: "Auto-generated from the group name." })] }), _jsxs(Div, { layout: "grid", gap: "4", className: "grid-cols-2", children: [_jsx(FieldInput, { name: "pageLabel", label: "Page", value: pageLabel, onChange: handlePageLabelChange, required: true, placeholder: "e.g. Checkout", hint: "Sub-accordion within the group." }), _jsx(Input, { label: "Page key", value: pageKey, onChange: (e) => setPageKey(e.target.value), placeholder: "checkout", helperText: "Auto-generated from the page name." })] }), _jsx(FieldInput, { name: "label", label: "Test case (Yes/No question)", value: label, onChange: setLabel, required: true, placeholder: "e.g. Coupon discount is correctly reflected in the order total" }), _jsx(FieldTextarea, { name: "description", label: "Description (optional)", value: description, onChange: setDescription, placeholder: "Extra context for the tester." }), _jsx(FieldInput, { name: "href", label: "Deep link (optional)", value: href, onChange: setHref, placeholder: "/cart", hint: "Jumps the tester straight to the feature being tested." }), _jsx(Input, { label: "Display order", value: String(order), onChange: (e) => setOrder(parseInt(e.target.value, 10) || 0), type: "number", min: 0, helperText: "Lower = shown first within the page." }), _jsxs(Stack, { className: `${__P.p4}`, gap: "3", rounded: "lg", border: "default", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Visibility" }), _jsx(Toggle, { label: "Active (visible to testers)", checked: isActive, onChange: setIsActive }), _jsx(Toggle, { label: "Admin-only (requires canTestAdmin)", checked: adminOnly, onChange: setAdminOnly })] }), _jsxs(Row, { gap: "3", padding: "t-xs", children: [_jsx(Button, { type: "submit", isLoading: isSubmitting, disabled: !canSave || isSubmitting, onClick: () => {
                                         clearErrors();
                                         if (!label.trim()) {
                                             setFieldError("label", "Test case label is required");

package/dist/features/admin/components/AdminUserEditorView.d.ts

@@ -16,6 +16,8 @@ export interface AdminUserEditorViewProps {
     currentEmailVerified?: boolean;
     /** Tester program flag — orthogonal to role. Grants access to the Tester Hub and auto-approves the user's store. */
     currentIsTester?: boolean;
+    /** Orthogonal to isTester — grants real /admin/** RBAC access + admin-only checklist items. Meaningless unless currentIsTester is also true. */
+    currentCanTestAdmin?: boolean;
     /** Store the user owns (for sellers/admins). storeId === storeSlug in this project. */
     ownedStoreId?: string;
     ownedStoreName?: string;
@@ -35,5 +37,5 @@ export interface AdminUserEditorViewProps {
         linkedin?: string;
     };
 }
-export declare function AdminUserEditorView({ open, onClose, userId, displayName, currentRole, currentIsDisabled: _currentIsDisabled, currentEmailVerified, currentIsTester, ownedStoreId, ownedStoreName, currentSoftBans, currentIsHardBanned, currentHardBanReason, currentPhoneNumber, currentBio, currentLocation, currentWebsite, currentSocialLinks, }: AdminUserEditorViewProps): React.JSX.Element;
+export declare function AdminUserEditorView({ open, onClose, userId, displayName, currentRole, currentIsDisabled: _currentIsDisabled, currentEmailVerified, currentIsTester, currentCanTestAdmin, ownedStoreId, ownedStoreName, currentSoftBans, currentIsHardBanned, currentHardBanReason, currentPhoneNumber, currentBio, currentLocation, currentWebsite, currentSocialLinks, }: AdminUserEditorViewProps): React.JSX.Element;
 export {};

package/dist/features/admin/components/AdminUserEditorView.js

@@ -41,13 +41,14 @@ function SoftBanPanel({ userId, softBans, showAddSoftBan, setShowAddSoftBan, sof
     return (_jsxs(Div, { surface: "muted", padding: "sm", rounded: "lg", border: "default", children: [_jsxs(Row, { justify: "between", gap: "sm", className: "mb-2", children: [_jsxs(Span, { size: "sm", weight: "medium", color: "muted", children: ["Soft bans", softBans.length > 0 ? ` (${softBans.length})` : ""] }), !showAddSoftBan && (_jsx(Button, { type: "button", variant: "secondary", size: "sm", disabled: !userId, onClick: () => setShowAddSoftBan(true), children: "Add soft ban" }))] }), softBans.length > 0 && (_jsx(Stack, { as: "ul", gap: "xs", className: "mb-3", children: softBans.map((ban) => (_jsxs(Row, { as: "li", align: "start", justify: "between", gap: "xs", surface: "default", padding: "inlineSm", rounded: "md", border: "default", children: [_jsxs(Stack, { gap: "none", className: "min-w-0 flex-1", children: [_jsx(Span, { size: "xs", weight: "semibold", children: formatBanAction(ban.action) }), _jsx(Span, { size: "xs", color: "muted", children: ban.reason }), _jsx(Span, { size: "xs", color: "muted", children: formatExpiry(ban.expiresAt) })] }), _jsx(Button, { type: "button", variant: "secondary", size: "sm", isLoading: liftPending, disabled: liftPending, onClick: () => onLiftSoftBan(ban.action), children: "Lift" })] }, ban.action))) })), showAddSoftBan && (_jsxs(Stack, { gap: "xs", children: [_jsx(Select, { label: "Action to restrict", options: BANNED_ACTION_OPTIONS, value: softBanAction, onValueChange: setSoftBanAction }), _jsx(Textarea, { label: "Reason (required)", value: softBanReason, onChange: (e) => setSoftBanReason(e.target.value), rows: 2, placeholder: "e.g. Suspicious bid activity\u2026" }), _jsx(Input, { label: "Expires at (optional \u2014 leave blank for permanent)", type: "datetime-local", value: softBanExpiry, onChange: (e) => setSoftBanExpiry(e.target.value) }), _jsxs(Row, { gap: "xs", children: [_jsx(Button, { type: "button", variant: "primary", size: "sm", isLoading: softBanPending, disabled: !softBanReason.trim() || softBanPending, onClick: () => onAddSoftBan({ action: softBanAction, reason: softBanReason.trim(), ...(softBanExpiry ? { expiresAt: new Date(softBanExpiry).toISOString() } : {}) }), children: "Apply soft ban" }), _jsx(Button, { type: "button", variant: "secondary", size: "sm", onClick: () => { setShowAddSoftBan(false); setSoftBanReason(""); setSoftBanExpiry(""); }, children: "Cancel" })] })] })), softBans.length === 0 && !showAddSoftBan && (_jsx(Text, { size: "xs", color: "muted", children: "No active soft bans." }))] }));
 }
 // --- Component ---------------------------------------------------------------
-export function AdminUserEditorView({ open, onClose, userId, displayName, currentRole, currentIsDisabled: _currentIsDisabled, currentEmailVerified, currentIsTester, ownedStoreId, ownedStoreName, currentSoftBans, currentIsHardBanned, currentHardBanReason, currentPhoneNumber, currentBio, currentLocation, currentWebsite, currentSocialLinks, }) {
+export function AdminUserEditorView({ open, onClose, userId, displayName, currentRole, currentIsDisabled: _currentIsDisabled, currentEmailVerified, currentIsTester, currentCanTestAdmin, ownedStoreId, ownedStoreName, currentSoftBans, currentIsHardBanned, currentHardBanReason, currentPhoneNumber, currentBio, currentLocation, currentWebsite, currentSocialLinks, }) {
     const queryClient = useQueryClient();
     const { showToast } = useToast();
     // --- General fields -------------------------------------------------------
     const [role, setRole] = React.useState(currentRole ?? "user");
     const [emailVerified, setEmailVerified] = React.useState(currentEmailVerified ?? false);
     const [isTester, setIsTester] = React.useState(currentIsTester ?? false);
+    const [canTestAdmin, setCanTestAdmin] = React.useState(currentCanTestAdmin ?? false);
     const [adminNotes, setAdminNotes] = React.useState("");
     const [deleteOpen, setDeleteOpen] = React.useState(false);
     // --- ST-2 profile fields --------------------------------------------------
@@ -73,6 +74,7 @@ export function AdminUserEditorView({ open, onClose, userId, displayName, curren
             setRole(currentRole ?? "user");
             setEmailVerified(currentEmailVerified ?? false);
             setIsTester(currentIsTester ?? false);
+            setCanTestAdmin(currentCanTestAdmin ?? false);
             setAdminNotes("");
             setEditDisplayName(displayName ?? "");
             setPhoneNumber(currentPhoneNumber ?? "");
@@ -95,6 +97,7 @@ export function AdminUserEditorView({ open, onClose, userId, displayName, curren
         currentRole,
         currentEmailVerified,
         currentIsTester,
+        currentCanTestAdmin,
         displayName,
         currentPhoneNumber,
         currentBio,
@@ -133,6 +136,7 @@ export function AdminUserEditorView({ open, onClose, userId, displayName, curren
                 role,
                 emailVerified,
                 isTester,
+                canTestAdmin: isTester ? canTestAdmin : false,
                 adminNotes: adminNotes || undefined,
                 displayName: editDisplayName.trim() || undefined,
                 phoneNumber: phoneNumber.trim() || undefined,
@@ -223,7 +227,11 @@ export function AdminUserEditorView({ open, onClose, userId, displayName, curren
     const renderInfoCard = () => userId ? (_jsx(Div, { textSize: "xs", surface: "muted", rounded: "lg", border: "default", padding: "inlineSm", children: _jsxs(Stack, { color: "primary", gap: "xs", children: [_jsxs(Text, { size: "xs", children: [_jsx(Span, { weight: "semibold", children: "Owner ID (Firebase UID):" }), " ", _jsx(Code, { className: "select-all font-mono", children: userId })] }), ownedStoreId && (_jsxs(Text, { size: "xs", children: [_jsx(Span, { weight: "semibold", children: "Owns store:" }), " ", _jsx(Code, { className: "select-all font-mono", children: ownedStoreId }), ownedStoreName ? ` — ${ownedStoreName}` : ""] }))] }) })) : null;
     const renderRoleSection = () => (_jsx(Select, { label: "Role", options: ROLE_OPTIONS, value: role, onValueChange: setRole }));
     const renderEmailVerifiedSection = () => (_jsx(Toggle, { label: "Email verified", checked: emailVerified, onChange: setEmailVerified }));
-    const renderIsTesterSection = () => (_jsx(Toggle, { label: "Is Tester", checked: isTester, onChange: setIsTester }));
+    const renderIsTesterSection = () => (_jsxs(Stack, { gap: "sm", children: [_jsx(Toggle, { label: "Is Tester", checked: isTester, onChange: (next) => {
+                    setIsTester(next);
+                    if (!next)
+                        setCanTestAdmin(false);
+                } }), isTester && (_jsx(Toggle, { label: "Can Test Admin Areas", checked: canTestAdmin, onChange: setCanTestAdmin }))] }));
     const renderProfileSection = () => (_jsxs(Stack, { border: "default", as: "section", gap: "sm", className: "border-t", padding: "t-sm", children: [_jsx(Heading, { level: 3, className: "mb-1", color: "muted", size: "sm", weight: "semibold", children: "Profile details" }), _jsx(Input, { label: "Display name", value: editDisplayName, onChange: (e) => setEditDisplayName(e.target.value), placeholder: "Full name shown on profile" }), _jsx(Input, { label: "Phone number", type: "tel", value: phoneNumber, onChange: (e) => setPhoneNumber(e.target.value), placeholder: "+91 90000 00000" }), _jsx(Textarea, { label: "Bio", value: bio, onChange: (e) => setBio(e.target.value), rows: 3, placeholder: "Short bio shown on the public profile\u2026" }), _jsx(Input, { label: "Location", value: location, onChange: (e) => setLocation(e.target.value), placeholder: "City, Country" }), _jsx(Input, { label: "Website", type: "url", value: website, onChange: (e) => setWebsite(e.target.value), placeholder: "https://" }), _jsx(Text, { size: "xs", color: "muted", children: "Social links" }), _jsx(Input, { label: "Twitter / X", value: twitter, onChange: (e) => setTwitter(e.target.value), placeholder: "@handle or full URL" }), _jsx(Input, { label: "Instagram", value: instagram, onChange: (e) => setInstagram(e.target.value), placeholder: "@handle or full URL" }), _jsx(Input, { label: "Facebook", value: facebook, onChange: (e) => setFacebook(e.target.value), placeholder: "https://facebook.com/\u2026" }), _jsx(Input, { label: "LinkedIn", value: linkedin, onChange: (e) => setLinkedin(e.target.value), placeholder: "https://linkedin.com/in/\u2026" })] }));
     const renderAdminNotesSection = () => (_jsx(Textarea, { label: "Admin notes (optional)", value: adminNotes, onChange: (e) => setAdminNotes(e.target.value), rows: 3, placeholder: "Internal notes about this user\u2026" }));
     const renderActionsSection = () => (_jsxs(FormActions, { align: "right", children: [_jsx(Button, { type: "button", variant: "danger", onClick: () => setDeleteOpen(true), disabled: !userId, children: "Delete user" }), _jsx(Button, { type: "button", variant: "secondary", onClick: onClose, children: "Cancel" }), _jsx(Button, { type: "submit", isLoading: saveMutation.isPending, disabled: !userId || saveMutation.isPending, children: "Save changes" })] }));

package/dist/features/admin/components/AdminUsersView.js

@@ -214,7 +214,7 @@ export function AdminUsersView({ children, ...props }) {
         },
         renderFilterPanel: ({ pendingFilters, setPendingFilters }) => (_jsxs(_Fragment, { children: [_jsx(FilterChipGroup, { label: "Status", tabs: ADMIN_USER_STATUS_TABS, value: pendingFilters.status ?? "", onChange: (id) => setPendingFilters((p) => ({ ...p, status: id })) }), _jsx(FilterChipGroup, { label: "Role", tabs: ADMIN_USER_ROLE_TABS, value: pendingFilters.role ?? "", onChange: (id) => setPendingFilters((p) => ({ ...p, role: id })) })] })),
     };
-    return (_jsxs(_Fragment, { children: [_jsx(DataListingView, { config: config }), _jsx(AdminUserEditorView, { open: drawerOpen, onClose: () => setDrawerOpen(false), userId: selectedRow?.id, displayName: selectedRow?.primary, currentRole: toStringValue(selectedRow?._raw?.role, "user"), currentEmailVerified: Boolean(selectedRow?._raw?.emailVerified), currentIsTester: Boolean(selectedRow?._raw?.isTester), ownedStoreId: toStringValue(selectedRow?._raw?.storeId, "") || undefined, ownedStoreName: toStringValue(selectedRow?._raw?.storeName, "") || undefined, currentIsHardBanned: Boolean((selectedRow?._raw?.isDisabled ?? selectedRow?._raw?.disabled) &&
+    return (_jsxs(_Fragment, { children: [_jsx(DataListingView, { config: config }), _jsx(AdminUserEditorView, { open: drawerOpen, onClose: () => setDrawerOpen(false), userId: selectedRow?.id, displayName: selectedRow?.primary, currentRole: toStringValue(selectedRow?._raw?.role, "user"), currentEmailVerified: Boolean(selectedRow?._raw?.emailVerified), currentIsTester: Boolean(selectedRow?._raw?.isTester), currentCanTestAdmin: Boolean(selectedRow?._raw?.canTestAdmin), ownedStoreId: toStringValue(selectedRow?._raw?.storeId, "") || undefined, ownedStoreName: toStringValue(selectedRow?._raw?.storeName, "") || undefined, currentIsHardBanned: Boolean((selectedRow?._raw?.isDisabled ?? selectedRow?._raw?.disabled) &&
                     selectedRow?._raw?.hardBanReason), currentHardBanReason: toStringValue(selectedRow?._raw?.hardBanReason, "") || undefined, currentSoftBans: Array.isArray(selectedRow?._raw?.softBans)
                     ? selectedRow._raw.softBans.map((b) => ({
                         action: toStringValue(b.action, ""),

package/dist/features/auth/role-predicates.d.ts

@@ -17,4 +17,18 @@ export declare const isSellerUser: (input: RoleCarrier) => boolean;
 export declare const isModeratorUser: (input: RoleCarrier) => boolean;
 export declare const isEmployeeUser: (input: RoleCarrier) => boolean;
 export declare const isBuyerUser: (input: RoleCarrier) => boolean;
+/**
+ * True for real admins OR a tester explicitly flagged to test admin areas
+ * (`isTester && canTestAdmin`). Used at the two RBAC chokepoints — the API route
+ * guard (`createRouteHandler`) and the admin layout guard (`makeAdminSectionLayout`)
+ * — so a flagged tester gets real read/write access to `/admin/**` without changing
+ * their `role`. Callers must supply `isTester`/`canTestAdmin` from a live Firestore
+ * read; these are never present in the session-cookie JWT claims (only `role` is).
+ */
+type EffectiveAdminCarrier = {
+    role?: string | null;
+    isTester?: boolean;
+    canTestAdmin?: boolean;
+} | null | undefined;
+export declare const isEffectiveAdminUser: (input: EffectiveAdminCarrier) => boolean;
 export {};

package/dist/features/auth/role-predicates.js

@@ -6,3 +6,4 @@ export const isSellerUser = (input) => normalizeRole(input) === "seller";
 export const isModeratorUser = (input) => normalizeRole(input) === "moderator";
 export const isEmployeeUser = (input) => normalizeRole(input) === "employee";
 export const isBuyerUser = (input) => normalizeRole(input) === "user";
+export const isEffectiveAdminUser = (input) => isAdminUser(input) || Boolean(input?.isTester && input?.canTestAdmin);

package/dist/features/auth/schemas/firestore.d.ts

@@ -50,6 +50,7 @@ export interface UserDocument extends BaseDocument {
     storeSlug?: string;
     storeStatus?: "pending" | "approved" | "rejected";
     isTester?: boolean;
+    canTestAdmin?: boolean;
     publicProfile?: {
         isPublic: boolean;
         showEmail: boolean;
@@ -222,6 +223,7 @@ export declare const USER_FIELDS: {
     readonly STORE_SLUG: "storeSlug";
     readonly STORE_STATUS: "storeStatus";
     readonly IS_TESTER: "isTester";
+    readonly CAN_TEST_ADMIN: "canTestAdmin";
     readonly AVATAR: {
         readonly URL: "avatarMetadata.url";
         readonly POSITION: "avatarMetadata.position";

package/dist/features/auth/schemas/firestore.js

@@ -110,6 +110,7 @@ export const USER_FIELDS = {
     STORE_SLUG: "storeSlug",
     STORE_STATUS: "storeStatus",
     IS_TESTER: "isTester",
+    CAN_TEST_ADMIN: "canTestAdmin",
     AVATAR: {
         URL: "avatarMetadata.url",
         POSITION: "avatarMetadata.position",

package/dist/features/events/actions/event-actions.js

@@ -137,13 +137,16 @@ export async function listPublicEvents(params) {
     });
 }
 export async function getPublicEventById(id) {
-    const event = await eventRepository.findById(id);
+    const event = await eventRepository.findByIdOrSlug(id);
     if (!event || event.status !== "active")
         return null;
     return event;
 }
 export async function getEventLeaderboard(eventId) {
-    return eventEntryRepository.getLeaderboard(eventId);
+    const event = await eventRepository.findByIdOrSlug(eventId);
+    if (!event)
+        return [];
+    return eventEntryRepository.getLeaderboard(event.id);
 }
 export async function adminListEvents(params) {
     const sieve = {
@@ -181,10 +184,14 @@ export async function adminGetEventStats(eventId) {
 }
 // --- Public: Enter Event ---------------------------------------------------
 export async function enterEvent(eventId, input, user) {
-    const event = await eventRepository.findById(eventId);
+    const event = await eventRepository.findByIdOrSlug(eventId);
     if (!event || event.status !== "active") {
         throw new NotFoundError(ERROR_MESSAGES.EVENT.ENTRIES_CLOSED);
     }
+    // eventId may have arrived as a slug (public URLs link by slug) — resolve
+    // to the real doc ID once here and use it for every downstream write, so
+    // entries/increments always land against the actual document.
+    const resolvedEventId = event.id;
     const now = new Date();
     const endsAt = resolveDate(event.endsAt);
     if (endsAt && now > endsAt) {
@@ -197,7 +204,7 @@ export async function enterEvent(eventId, input, user) {
         throw new AuthorizationError(ERROR_MESSAGES.EVENT.LOGIN_REQUIRED);
     }
     if (user && event.type === "survey" && event.surveyConfig) {
-        const userEntryCount = await eventEntryRepository.countUserEntries(eventId, user.uid);
+        const userEntryCount = await eventEntryRepository.countUserEntries(resolvedEventId, user.uid);
         if (userEntryCount >= event.surveyConfig.maxEntriesPerUser) {
             throw new ValidationError(ERROR_MESSAGES.EVENT.ALREADY_ENTERED);
         }
@@ -231,7 +238,7 @@ export async function enterEvent(eventId, input, user) {
             !event.surveyConfig?.entryReviewRequired);
     const reviewStatus = autoApprove ? "approved" : "pending";
     const entry = await eventEntryRepository.createEntry({
-        eventId,
+        eventId: resolvedEventId,
         userId: user?.uid,
         userDisplayName: user?.displayName,
         userEmail: user?.email,
@@ -240,13 +247,13 @@ export async function enterEvent(eventId, input, user) {
         formResponses: input.formResponses,
         reviewStatus,
     });
-    await eventRepository.incrementTotalEntries(eventId);
+    await eventRepository.incrementTotalEntries(resolvedEventId);
     if (autoApprove) {
-        await eventRepository.incrementApprovedEntries(eventId);
+        await eventRepository.incrementApprovedEntries(resolvedEventId);
     }
     serverLogger.info("enterEvent", {
         entryId: entry.id,
-        eventId,
+        eventId: resolvedEventId,
         type: event.type,
         userId: user?.uid,
     });

package/dist/features/events/repository/events.repository.d.ts

@@ -5,6 +5,8 @@ declare class EventRepository extends BaseRepository<EventDocument> {
     static readonly SIEVE_FIELDS: FirebaseSieveFields;
     constructor();
     list(model: SieveModel): Promise<FirebaseSieveResult<EventDocument>>;
+    findBySlug(slug: string): Promise<EventDocument | null>;
+    findByIdOrSlug(idOrSlug: string): Promise<EventDocument | null>;
     listActive(): Promise<EventDocument[]>;
     createEvent(input: EventCreateInput): Promise<EventDocument>;
     updateEvent(id: string, input: EventUpdateInput): Promise<EventDocument>;

package/dist/features/events/repository/events.repository.js

@@ -12,6 +12,15 @@ class EventRepository extends BaseRepository {
     async list(model) {
         return this.sieveQuery(model, EventRepository.SIEVE_FIELDS);
     }
+    async findBySlug(slug) {
+        return this.findOneBy(EVENT_FIELDS.SLUG, slug);
+    }
+    async findByIdOrSlug(idOrSlug) {
+        const bySlug = await this.findBySlug(idOrSlug);
+        if (bySlug)
+            return bySlug;
+        return this.findById(idOrSlug);
+    }
     async listActive() {
         try {
             const now = new Date();

package/dist/features/events/schemas/firestore.d.ts

@@ -84,6 +84,7 @@ export declare const EVENT_INDEXED_FIELDS: readonly ["type", "status", "startsAt
 export declare const EVENT_ENTRY_INDEXED_FIELDS: readonly ["eventId", "userId", "reviewStatus", "status", "submittedAt", "points"];
 export declare const EVENT_FIELDS: {
     readonly ID: "id";
+    readonly SLUG: "slug";
     readonly TYPE: "type";
     readonly TITLE: "title";
     readonly DESCRIPTION: "description";

package/dist/features/events/schemas/firestore.js

@@ -20,6 +20,7 @@ export const EVENT_ENTRY_INDEXED_FIELDS = [
 ];
 export const EVENT_FIELDS = {
     ID: "id",
+    SLUG: "slug",
     TYPE: "type",
     TITLE: "title",
     DESCRIPTION: "description",

package/dist/features/faq/components/FAQSearchableList.d.ts

@@ -0,0 +1,11 @@
+import type { FAQ } from "../types";
+interface FAQSearchableListLabels {
+    searchPlaceholder: string;
+    noResults: string;
+}
+export interface FAQSearchableListProps {
+    faqs: FAQ[];
+    labels: FAQSearchableListLabels;
+}
+export declare function FAQSearchableList({ faqs, labels }: FAQSearchableListProps): import("react").JSX.Element;
+export {};