@mohasinac/appkit 4.1.1 → 4.1.3

package/dist/features/auctions/components/AuctionsListView.js

@@ -28,7 +28,14 @@ function buildAuctionFilters(params) {
         else if (values.length > 1)
             parts.push(sieveFilter("storeId", SIEVE_OP.EQ, values.join("|")));
     }
-    const dateFrom = sp(params, "dateFrom");
+    // Mirror AuctionsIndexListing's client-side default (Root Cause pattern —
+    // SSR initialData is seeded into React Query with staleTime:Infinity, so if
+    // this SSR filter doesn't already exclude ended auctions, the client never
+    // refetches and ended auctions leak into the default "Show ended" off view).
+    const showEnded = sp(params, "showEnded") === "true";
+    const dateFrom = showEnded
+        ? sp(params, "dateFrom")
+        : sp(params, "dateFrom") || new Date().toISOString();
     const dateTo = sp(params, "dateTo");
     if (dateFrom)
         parts.push(sieveFilter("auctionEndDate", SIEVE_OP.GTE, dateFrom));

package/dist/features/auth/components/LoginForm.js

@@ -2,7 +2,7 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { normalizeError } from "../../../errors/normalize";
 import { useState } from "react";
-import { Alert, Button, Div, Heading, Row, Stack, Text, useToast } from "../../../ui";
+import { Alert, Button, Div, Heading, Row, SiteMark, Stack, Text, useToast } from "../../../ui";
 import { Form } from "../../../ui/components/Form";
 import { FieldInput } from "../../../ui/forms/FieldInput";
 import { FieldCheckbox } from "../../../ui/forms/FieldCheckbox";
@@ -16,7 +16,7 @@ export function LoginForm({ onSubmit, onGoogleLogin, isLoading = false, error, l
         password: "",
         rememberMe: false,
     });
-    return (_jsx(Row, { className: `min-h-[60vh] ${className}`, align: "center", justify: "center", padding: "x-md", children: _jsxs(Stack, { className: "max-w-md w-full", gap: "lg", children: [_jsxs(Div, { className: "text-center", children: [_jsx(Heading, { level: 1, className: "font-extrabold", size: "3xl", children: labels.title ?? "Sign In" }), (labels.subtitle || renderCreateAccountLink) && (_jsxs(Text, { className: "mt-2", color: "muted", size: "sm", children: [labels.subtitle ?? "Or", " ", renderCreateAccountLink?.()] }))] }), error && (_jsx(Alert, { variant: "error", compact: true, children: error })), _jsx(Form, { noValidate: true, onSubmit: (e) => e.preventDefault(), spacing: "md", children: ({ setFieldError, clearErrors }) => (_jsxs(_Fragment, { children: [_jsx(FieldInput, { name: "email", label: labels.emailLabel ?? "Email address", type: "email", autoComplete: "username", required: true, placeholder: labels.emailPlaceholder ?? "you@example.com", value: values.email, onChange: (v) => setValues({ ...values, email: v }) }), _jsx(FieldInput, { name: "password", label: labels.passwordLabel ?? "Password", type: "password", autoComplete: "current-password", required: true, placeholder: labels.passwordPlaceholder ?? "••••••••", value: values.password, onChange: (v) => setValues({ ...values, password: v }) }), _jsxs(Row, { justify: "between", children: [_jsx(FieldCheckbox, { name: "rememberMe", label: labels.rememberMe ?? "Remember me", checked: values.rememberMe ?? false, onChange: (c) => setValues({ ...values, rememberMe: c }) }), renderForgotPasswordLink?.()] }), _jsx(Button, { type: "submit", isLoading: isLoading, disabled: isLoading, className: "w-full", onClick: async () => {
+    return (_jsx(Row, { className: `min-h-[60vh] ${className}`, align: "center", justify: "center", padding: "x-md", children: _jsxs(Stack, { className: "max-w-md w-full", gap: "lg", children: [_jsxs(Div, { className: "text-center", children: [_jsx(Row, { justify: "center", className: "mb-3", children: _jsx(SiteMark, { size: "lg" }) }), _jsx(Heading, { level: 1, className: "font-extrabold", size: "3xl", children: labels.title ?? "Sign In" }), (labels.subtitle || renderCreateAccountLink) && (_jsxs(Text, { className: "mt-2", color: "muted", size: "sm", children: [labels.subtitle ?? "Or", " ", renderCreateAccountLink?.()] }))] }), error && (_jsx(Alert, { variant: "error", compact: true, children: error })), _jsx(Form, { noValidate: true, onSubmit: (e) => e.preventDefault(), spacing: "md", children: ({ setFieldError, clearErrors }) => (_jsxs(_Fragment, { children: [_jsx(FieldInput, { name: "email", label: labels.emailLabel ?? "Email address", type: "email", autoComplete: "username", required: true, placeholder: labels.emailPlaceholder ?? "you@example.com", value: values.email, onChange: (v) => setValues({ ...values, email: v }) }), _jsx(FieldInput, { name: "password", label: labels.passwordLabel ?? "Password", type: "password", autoComplete: "current-password", required: true, placeholder: labels.passwordPlaceholder ?? "••••••••", value: values.password, onChange: (v) => setValues({ ...values, password: v }) }), _jsxs(Row, { justify: "between", children: [_jsx(FieldCheckbox, { name: "rememberMe", label: labels.rememberMe ?? "Remember me", checked: values.rememberMe ?? false, onChange: (c) => setValues({ ...values, rememberMe: c }) }), renderForgotPasswordLink?.()] }), _jsx(Button, { type: "submit", isLoading: isLoading, disabled: isLoading, className: "w-full", onClick: async () => {
                                     clearErrors();
                                     const parsed = loginSchema.safeParse(values);
                                     if (!parsed.success)

package/dist/features/auth/components/RegisterForm.js

@@ -3,7 +3,7 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 import { normalizeError } from "../../../errors/normalize";
 import { useState } from "react";
 import { z } from "zod";
-import { Alert, Button, Div, Heading, Row, Stack, Text, useToast } from "../../../ui";
+import { Alert, Button, Div, Heading, Row, SiteMark, Stack, Text, useToast } from "../../../ui";
 import { Form } from "../../../ui/components/Form";
 import { FieldInput } from "../../../ui/forms/FieldInput";
 import { FieldCheckbox } from "../../../ui/forms/FieldCheckbox";
@@ -28,7 +28,7 @@ export function RegisterForm({ onSubmit, isLoading = false, error, success, labe
         displayName: "",
         acceptTerms: false,
     });
-    return (_jsx(Row, { className: `min-h-[60vh] ${className}`, align: "center", justify: "center", padding: "x-md", children: _jsxs(Stack, { className: "max-w-md w-full", gap: "lg", children: [_jsxs(Div, { className: "text-center", children: [_jsx(Heading, { level: 1, className: "font-extrabold", size: "3xl", children: labels.title ?? "Create Account" }), (labels.subtitle || renderLoginLink) && (_jsxs(Text, { className: "mt-2 text-[var(--appkit-color-text-muted)]", size: "sm", children: [labels.subtitle ?? "Already have an account?", " ", renderLoginLink?.()] }))] }), success && (_jsx(Alert, { variant: "success", compact: true, children: success })), error && (_jsx(Alert, { variant: "error", compact: true, children: error })), _jsx(Form, { noValidate: true, onSubmit: (e) => e.preventDefault(), spacing: "md", children: ({ setFieldError, clearErrors }) => (_jsxs(_Fragment, { children: [_jsx(FieldInput, { name: "displayName", label: labels.displayNameLabel ?? "Full name", type: "text", autoComplete: "name", required: true, placeholder: labels.displayNamePlaceholder ?? "Your name", value: values.displayName, onChange: (v) => setValues({ ...values, displayName: v }) }), _jsx(FieldInput, { name: "email", label: labels.emailLabel ?? "Email address", type: "email", autoComplete: "username", required: true, placeholder: labels.emailPlaceholder ?? "you@example.com", value: values.email, onChange: (v) => setValues({ ...values, email: v }) }), _jsxs(Div, { children: [_jsx(FieldInput, { name: "password", label: labels.passwordLabel ?? "Password", type: "password", autoComplete: "new-password", required: true, placeholder: labels.passwordPlaceholder ?? "••••••••", value: values.password, onChange: (v) => setValues({ ...values, password: v }) }), renderPasswordStrength?.(values.password)] }), _jsx(FieldInput, { name: "confirmPassword", label: labels.confirmPasswordLabel ?? "Confirm password", type: "password", autoComplete: "new-password", required: true, placeholder: labels.confirmPasswordPlaceholder ?? "••••••••", value: values.confirmPassword, onChange: (v) => setValues({ ...values, confirmPassword: v }) }), _jsx(FieldCheckbox, { name: "acceptTerms", label: `${labels.acceptTermsLabel ?? "I accept the terms"}`, checked: values.acceptTerms, onChange: (c) => setValues({ ...values, acceptTerms: c }) }), renderTermsLink && (_jsx(Text, { size: "xs", variant: "secondary", children: renderTermsLink() })), _jsx(Button, { type: "submit", isLoading: isLoading, disabled: isLoading, className: "w-full", onClick: async () => {
+    return (_jsx(Row, { className: `min-h-[60vh] ${className}`, align: "center", justify: "center", padding: "x-md", children: _jsxs(Stack, { className: "max-w-md w-full", gap: "lg", children: [_jsxs(Div, { className: "text-center", children: [_jsx(Row, { justify: "center", className: "mb-3", children: _jsx(SiteMark, { size: "lg" }) }), _jsx(Heading, { level: 1, className: "font-extrabold", size: "3xl", children: labels.title ?? "Create Account" }), (labels.subtitle || renderLoginLink) && (_jsxs(Text, { className: "mt-2 text-[var(--appkit-color-text-muted)]", size: "sm", children: [labels.subtitle ?? "Already have an account?", " ", renderLoginLink?.()] }))] }), success && (_jsx(Alert, { variant: "success", compact: true, children: success })), error && (_jsx(Alert, { variant: "error", compact: true, children: error })), _jsx(Form, { noValidate: true, onSubmit: (e) => e.preventDefault(), spacing: "md", children: ({ setFieldError, clearErrors }) => (_jsxs(_Fragment, { children: [_jsx(FieldInput, { name: "displayName", label: labels.displayNameLabel ?? "Full name", type: "text", autoComplete: "name", required: true, placeholder: labels.displayNamePlaceholder ?? "Your name", value: values.displayName, onChange: (v) => setValues({ ...values, displayName: v }) }), _jsx(FieldInput, { name: "email", label: labels.emailLabel ?? "Email address", type: "email", autoComplete: "username", required: true, placeholder: labels.emailPlaceholder ?? "you@example.com", value: values.email, onChange: (v) => setValues({ ...values, email: v }) }), _jsxs(Div, { children: [_jsx(FieldInput, { name: "password", label: labels.passwordLabel ?? "Password", type: "password", autoComplete: "new-password", required: true, placeholder: labels.passwordPlaceholder ?? "••••••••", value: values.password, onChange: (v) => setValues({ ...values, password: v }) }), renderPasswordStrength?.(values.password)] }), _jsx(FieldInput, { name: "confirmPassword", label: labels.confirmPasswordLabel ?? "Confirm password", type: "password", autoComplete: "new-password", required: true, placeholder: labels.confirmPasswordPlaceholder ?? "••••••••", value: values.confirmPassword, onChange: (v) => setValues({ ...values, confirmPassword: v }) }), _jsx(FieldCheckbox, { name: "acceptTerms", label: `${labels.acceptTermsLabel ?? "I accept the terms"}`, checked: values.acceptTerms, onChange: (c) => setValues({ ...values, acceptTerms: c }) }), renderTermsLink && (_jsx(Text, { size: "xs", variant: "secondary", children: renderTermsLink() })), _jsx(Button, { type: "submit", isLoading: isLoading, disabled: isLoading, className: "w-full", onClick: async () => {
                                     clearErrors();
                                     const parsed = registerClientSchema.safeParse(values);
                                     if (!parsed.success)

package/dist/features/auth/permissions/constants.d.ts

@@ -61,3 +61,19 @@ export declare function hasAllPermissions(permissions: Permission[], required: P
  * Check whether a store's capabilities include a specific capability.
  */
 export declare function hasCapability(capabilities: StoreCapability[], required: StoreCapability): boolean;
+/**
+ * Groups permission prefixes into human-labeled domains for display —
+ * used by the employee-permission editor and the read-only permissions
+ * catalog page. `prefix` may hold multiple `|`-separated prefixes when a
+ * domain spans more than one resource namespace.
+ */
+export declare const PERMISSION_DOMAINS: {
+    label: string;
+    prefix: string;
+}[];
+/** True when `perm` starts with any of the `|`-separated prefixes in `prefix`. */
+export declare function matchesDomain(perm: string, prefix: string): boolean;
+/** Every distinct permission (across all PERMISSION_GROUPS presets) belonging to a domain. */
+export declare function getPermissionsForDomain(prefix: string): Permission[];
+/** "admin:orders:mark-shipped" -> "Mark Shipped" */
+export declare function formatPermLabel(perm: string): string;

package/dist/features/auth/permissions/constants.js

@@ -342,3 +342,56 @@ export function hasAllPermissions(permissions, required) {
 export function hasCapability(capabilities, required) {
     return capabilities.includes(required);
 }
+// ============================================================================
+// PERMISSION DOMAINS — display grouping (S-ADMIN-7, 2026-08-19)
+// ============================================================================
+/**
+ * Groups permission prefixes into human-labeled domains for display —
+ * used by the employee-permission editor and the read-only permissions
+ * catalog page. `prefix` may hold multiple `|`-separated prefixes when a
+ * domain spans more than one resource namespace.
+ */
+export const PERMISSION_DOMAINS = [
+    { label: "Dashboard", prefix: "admin:dashboard:" },
+    { label: "Users & Bans", prefix: "admin:users:|admin:user-bans:" },
+    { label: "Products", prefix: "admin:products:" },
+    { label: "Orders & Returns", prefix: "admin:orders:|admin:returns:" },
+    { label: "Stores", prefix: "admin:stores:|admin:store-addresses:" },
+    { label: "Finance", prefix: "admin:analytics:|admin:payouts:" },
+    { label: "Catalog", prefix: "admin:categories:|admin:brands:|admin:coupons:|admin:deals:|admin:featured:" },
+    {
+        label: "Content",
+        prefix: "admin:reviews:|admin:blog:|admin:bids:|admin:media:",
+    },
+    {
+        label: "Site / CMS",
+        prefix: "admin:site:|admin:navigation:|admin:sections:|admin:carousel:|admin:ads:|admin:faqs:|admin:newsletter:|admin:contact:",
+    },
+    { label: "Events", prefix: "admin:events:|admin:event-entries:" },
+    { label: "Support & Safety", prefix: "admin:support-tickets:|admin:scammers:" },
+    { label: "System", prefix: "admin:sessions:|admin:notifications:|admin:carts:|admin:wishlists:|admin:feature-flags:|admin:copilot:|admin:team:" },
+];
+/** True when `perm` starts with any of the `|`-separated prefixes in `prefix`. */
+export function matchesDomain(perm, prefix) {
+    return prefix.split("|").some((p) => perm.startsWith(p));
+}
+/** Every distinct permission (across all PERMISSION_GROUPS presets) belonging to a domain. */
+export function getPermissionsForDomain(prefix) {
+    const allPerms = Object.values(PERMISSION_GROUPS).flat();
+    const seen = new Set();
+    const result = [];
+    for (const p of allPerms) {
+        if (matchesDomain(p, prefix) && !seen.has(p)) {
+            seen.add(p);
+            result.push(p);
+        }
+    }
+    return result;
+}
+/** "admin:orders:mark-shipped" -> "Mark Shipped" */
+export function formatPermLabel(perm) {
+    const parts = perm.split(":");
+    return parts[parts.length - 1]
+        .replace(/-/g, " ")
+        .replace(/\b\w/g, (c) => c.toUpperCase());
+}

package/dist/features/auth/schemas/firestore.js

@@ -30,6 +30,7 @@ export const DEFAULT_USER_DATA = {
     emailVerified: false,
     phoneVerified: false,
     disabled: false,
+    isTester: false,
     photoURL: null,
     displayName: null,
     publicProfile: {

package/dist/features/blog/components/BlogFilters.js

@@ -67,5 +67,5 @@ export function BlogFilters({ table, variant = "admin" }) {
     const selectedCategory = table.get("category")
         ? table.get("category").split("|").filter(Boolean)
         : [];
-    return (_jsxs(Div, { children: [variant !== "public" && (_jsx(FilterFacetSection, { title: t("status"), options: statusOptions, selected: selectedStatus, onChange: (vals) => table.set("status", vals.join("|")), searchable: false, defaultCollapsed: false })), _jsx(FilterFacetSection, { title: t("category"), options: categoryOptions, selected: selectedCategory, onChange: (vals) => table.set("category", vals.join("|")), searchable: false, defaultCollapsed: variant !== "public" }), variant !== "public" && (_jsx(SwitchFilter, { title: t("isFeatured"), label: t("showFeaturedOnly"), checked: table.get("isFeatured") === "true", onChange: (v) => table.set("isFeatured", v ? "true" : "") })), _jsx(RangeFilter, { title: t("dateRange"), type: "date", minValue: table.get("dateFrom"), maxValue: table.get("dateTo"), onMinChange: (v) => table.set("dateFrom", v), onMaxChange: (v) => table.set("dateTo", v), minPlaceholder: t("minDate"), maxPlaceholder: t("maxDate"), defaultCollapsed: true }), _jsx(RangeFilter, { title: t("votesRange"), minValue: table.get("minVotes"), maxValue: table.get("maxVotes"), onMinChange: (v) => table.set("minVotes", v), onMaxChange: (v) => table.set("maxVotes", v), minBound: 0, maxBound: 100000, step: 10, minPlaceholder: t("minVotes"), maxPlaceholder: t("maxVotes"), defaultCollapsed: true })] }));
+    return (_jsxs(Div, { children: [variant !== "public" && (_jsx(FilterFacetSection, { title: t("status"), options: statusOptions, selected: selectedStatus, onChange: (vals) => table.set("status", vals.join("|")), searchable: false, defaultCollapsed: false })), _jsx(FilterFacetSection, { title: t("category"), options: categoryOptions, selected: selectedCategory, onChange: (vals) => table.set("category", vals.join("|")), searchable: false, defaultCollapsed: variant !== "public" }), variant !== "public" && (_jsx(SwitchFilter, { title: t("isFeatured"), label: t("showFeaturedOnly"), checked: table.get("isFeatured") === "true", onChange: (v) => table.set("isFeatured", v ? "true" : "") })), _jsx(RangeFilter, { title: t("dateRange"), type: "date", minValue: table.get("dateFrom"), maxValue: table.get("dateTo"), onMinChange: (v) => table.set("dateFrom", v), onMaxChange: (v) => table.set("dateTo", v), minPlaceholder: t("minDate"), maxPlaceholder: t("maxDate"), defaultCollapsed: true })] }));
 }

package/dist/features/cart/schemas/firestore.d.ts

@@ -50,7 +50,7 @@ export interface CartItemDocument {
      * ShippingPicker writes this when the buyer selects a provider.
      */
     chosenShippingProviderId?: string;
-    /** Fee in paise for the chosen provider, snapshotted at cart time. */
+    /** Fee in decimal rupees for the chosen provider, snapshotted at cart time. */
     chosenShippingFee?: number;
     addedAt: Date;
     updatedAt: Date;

package/dist/features/categories/schemas/firestore.d.ts

@@ -135,7 +135,7 @@ export interface CategoryDocument extends BaseDocument {
      * Does NOT update `partOfBundleIds`; used as a discovery surface only.
      */
     bundleKind?: "special" | "brand";
-    /** Discounted bundle price in paise. */
+    /** Discounted bundle price in decimal rupees. */
     bundlePrice?: number;
     /** Rule resolving the bundle's member products — static list or live query. */
     bundleQueryRule?: BundleQueryRule;

package/dist/features/consultation/components/ConsultationForm.js

@@ -43,7 +43,7 @@ export function ConsultationForm({ onSubmit, isPending, concerns = [], }) {
     }
     return (_jsxs(Form, { onSubmit: handleSubmit, spacing: "md", children: [_jsx(FieldInput, { name: "name", type: "text", placeholder: "Full name", value: form.name, onChange: (v) => handleValueChange("name", v), required: true }), _jsx(FieldInput, { name: "email", type: "email", placeholder: "Email address", value: form.email, onChange: (v) => handleValueChange("email", v), required: true }), _jsx(FieldInput, { name: "phone", type: "tel", placeholder: "Phone number", value: form.phone, onChange: (v) => handleValueChange("phone", v), required: true }), concerns.length > 0 && (_jsx(Row, { wrap: true, gap: "sm", children: concerns.map((c) => (_jsx(Button, { type: "button", variant: "outline", size: "sm", onClick: () => toggleConcern(c), className: `rounded-full border px-[var(--appkit-space-3)] py-[var(--appkit-space-1)] text-[length:var(--appkit-text-xs)] transition ${form.concern.includes(c)
                         ? "border-primary bg-primary text-white"
-                        : "border-neutral-300 text-neutral-700 hover:border-primary"}`, children: c }, c))) })), _jsxs(Row, { gap: "3", children: [_jsx(FieldInput, { name: "preferredDate", type: "date", value: form.preferredDate, onChange: (v) => handleValueChange("preferredDate", v), required: true, className: "flex-1" }), _jsx(Select, { value: form.preferredTime, onValueChange: (value) => handleValueChange("preferredTime", value), options: TIME_SLOTS.map((t) => ({ value: t, label: t })), className: "flex-1" })] }), _jsx(Select, { value: form.mode, onValueChange: (value) => handleValueChange("mode", value), options: [
+                        : "border-neutral-300 text-neutral-700 hover:border-primary"}`, children: c }, c))) })), _jsxs(Row, { gap: "3", children: [_jsx(FieldInput, { name: "preferredDate", type: "date", value: form.preferredDate, onChange: (v) => handleValueChange("preferredDate", v), required: true, className: "flex-1" }), _jsx(Select, { value: form.preferredTime, onValueChange: (value) => handleValueChange("preferredTime", value), options: TIME_SLOTS.map((t) => ({ value: t, label: t })), wrapperClassName: "flex-1" })] }), _jsx(Select, { value: form.mode, onValueChange: (value) => handleValueChange("mode", value), options: [
                     { value: "remote", label: "Remote (Video Call)" },
                     { value: "in-person", label: "In-Person" },
                 ] }), _jsx(FieldTextarea, { name: "message", placeholder: "Any additional notes (optional)", value: form.message, onChange: (v) => handleValueChange("message", v), rows: 3 }), _jsx(Button, { type: "submit", isLoading: isPending, disabled: isPending, variant: "primary", className: "w-full", children: isPending ? "Booking..." : "Book Consultation" })] }));

package/dist/features/events/components/EventFilters.js

@@ -56,6 +56,8 @@ export function EventFilters({ table, variant = "admin" }) {
         { value: "poll", label: t("eventTypePoll") },
         { value: "survey", label: t("eventTypeSurvey") },
         { value: "feedback", label: t("eventTypeFeedback") },
+        { value: "raffle", label: t("eventTypeRaffle") },
+        { value: "spin_wheel", label: t("eventTypeSpinWheel") },
     ];
     const adminStatusOptions = [
         { value: "draft", label: t("eventStatusDraft") },

package/dist/features/homepage/components/WelcomeSection.js

@@ -1,7 +1,7 @@
 "use client";
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { THEMED_TEXT_SECONDARY, FLEX_CENTER } from "../../../_internal/shared/styles/themed";
-import { Button, Div, Grid, Heading, Row, Section, SiteLogo, Span, Text, TextLink } from "../../../ui";
+import { Button, Div, Grid, Heading, Row, Section, SiteLogo, SiteMark, Span, Stack, Text, TextLink } from "../../../ui";
 // --- Component ---------------------------------------------------------------
 export function WelcomeSection({ title, subtitle, pillLabel, showCTA = true, ctaLabel = "Shop now", ctaHref, onCtaClick, secondaryCtaLabel = "Browse products", secondaryCtaHref, onSecondaryCtaClick, trustChips = [], isLoading = false, brandLogoText = "", className = "", }) {
     const themed = { textSecondary: THEMED_TEXT_SECONDARY };
@@ -9,5 +9,5 @@ export function WelcomeSection({ title, subtitle, pillLabel, showCTA = true, cta
     if (isLoading) {
         return (_jsx(Section, { className: `relative overflow-hidden md:py-[6rem] ${className}`, paddingY: "y-4xl", paddingX: "x-md", children: _jsxs(Div, { className: "animate-pulse max-w-4xl mx-auto text-left", children: [_jsx(Div, { className: "h-6 w-52 mb-6", surface: "subtle", rounded: "full" }), _jsx(Div, { className: "h-20 mb-4 max-w-2xl", surface: "subtle", rounded: "lg" }), _jsx(Div, { className: "h-6 mb-8 max-w-lg", surface: "subtle", rounded: "lg" }), _jsxs(Row, { justify: "start", gap: "md", children: [_jsx(Div, { className: "h-12 w-36", surface: "subtle", rounded: "xl" }), _jsx(Div, { className: "h-12 w-36", surface: "subtle", rounded: "xl" })] })] }) }));
     }
-    return (_jsxs(Section, { className: `relative overflow-hidden md:py-[7rem] ${className}`, paddingY: "y-5xl", paddingX: "x-md", children: [_jsx(Div, { className: "pointer-events-none absolute -top-32 -left-32 w-[28rem] h-[28rem] bg-primary/10 blur-3xl", rounded: "full", "aria-hidden": "true" }), _jsx(Div, { className: "pointer-events-none absolute -bottom-40 -right-40 w-[36rem] h-[36rem] bg-secondary/10 dark:bg-secondary/15 blur-3xl", rounded: "full", "aria-hidden": "true" }), _jsx(Div, { className: "relative z-10 max-w-7xl mx-auto", children: _jsxs(Grid, { align: "center", gap: "2xl", className: "grid-cols-1 lg:grid-cols-2 xl:grid-cols-2 2xl:grid-cols-2", children: [_jsxs(Div, { className: "text-left", children: [pillLabel && (_jsx(Div, { children: _jsxs(Span, { layout: "inline-flex", gap: "md", size: "xs", weight: "medium", className: "border border-primary-[500]/30 bg-primary-500/10 px-[1.25rem] py-[0.375rem] tracking-[0.2em] text-primary-700 dark:text-primary-400 backdrop-blur-sm", rounded: "full", transform: "uppercase", children: [_jsx(Span, { className: "w-1.5 h-1.5 bg-primary-500 inline-block", rounded: "full", "aria-hidden": "true" }), pillLabel, _jsx(Span, { className: "w-1.5 h-1.5 bg-primary-500 inline-block", rounded: "full", "aria-hidden": "true" })] }) })), _jsx(Heading, { level: 1, variant: "none", gradient: "brand-tri", className: "mt-4 font-display leading-[1.1] tracking-tight break-words", size: "5xl", mdSize: "6xl", lgSize: "7xl", xlSize: "7xl", children: title }), subtitle && (_jsx(Text, { className: `mt-4 ${themed.textSecondary} max-w-xl leading-relaxed`, size: "xl", children: subtitle })), showCTA && (_jsxs(Row, { wrap: true, gap: "md", className: "mt-8", justify: "start", children: [ctaHref ? (_jsx(TextLink, { rounded: "xl", href: ctaHref, className: "inline-flex items-[center] justify-[center] px-[2rem] py-[0.875rem] !bg-primary hover:!bg-primary-600 text-white dark:!bg-primary dark:hover:!bg-primary-600 dark:text-white btn-glow transition-all hover:scale-[1.02]", size: "base", weight: "bold", children: ctaLabel })) : (_jsx(Button, { variant: "primary", size: "lg", onClick: onCtaClick, children: ctaLabel })), secondaryCtaHref ? (_jsx(TextLink, { rounded: "xl", href: secondaryCtaHref, className: "inline-flex items-[center] justify-[center] border-2 border-cobalt/40 dark:border-cobalt-400/40 px-[2rem] py-[0.875rem] text-cobalt-700 dark:text-cobalt-300 hover:bg-cobalt-50 dark:hover:bg-cobalt-900/20 transition-all hover:scale-[1.02]", size: "base", weight: "semibold", children: secondaryCtaLabel })) : (_jsx(Button, { variant: "outline", size: "lg", onClick: onSecondaryCtaClick, children: secondaryCtaLabel }))] })), trustChips.length > 0 && (_jsx(Row, { wrap: true, gap: "sm", className: "mt-6", justify: "start", children: trustChips.map((chip) => (_jsxs(Span, { layout: "inline-flex", gap: "xs", size: "xs", weight: "medium", className: "border border-zinc-[200] dark:border-slate-[700] px-[0.875rem] py-[0.375rem]", rounded: "full", surface: "subtle", color: "muted", children: [chip.emoji, " ", chip.label] }, chip.key))) }))] }), _jsx(Div, { className: "hidden lg:block", children: _jsxs(Div, { className: `relative overflow-hidden aspect-[4/3] bg-[image:var(--appkit-gradient-section-mesh)]`, shadow: "2xl", border: "default", rounded: "3xl", children: [_jsx(Div, { className: "absolute inset-0 bg-[image:var(--appkit-gradient-glass)]" }), _jsx(Row, { centered: true, className: `absolute inset-0 ${flex.center} px-[2.5rem]`, children: _jsx(SiteLogo, { title: brandLogoText || "LetItRip.in", size: "hero" }) })] }) })] }) })] }));
+    return (_jsxs(Section, { className: `relative overflow-hidden md:py-[7rem] ${className}`, paddingY: "y-5xl", paddingX: "x-md", children: [_jsx(Div, { className: "pointer-events-none absolute -top-32 -left-32 w-[28rem] h-[28rem] bg-primary/10 blur-3xl", rounded: "full", "aria-hidden": "true" }), _jsx(Div, { className: "pointer-events-none absolute -bottom-40 -right-40 w-[36rem] h-[36rem] bg-secondary/10 dark:bg-secondary/15 blur-3xl", rounded: "full", "aria-hidden": "true" }), _jsx(Div, { className: "relative z-10 max-w-7xl mx-auto", children: _jsxs(Grid, { align: "center", gap: "2xl", className: "grid-cols-1 lg:grid-cols-2 xl:grid-cols-2 2xl:grid-cols-2", children: [_jsxs(Div, { className: "text-left", children: [pillLabel && (_jsx(Div, { children: _jsxs(Span, { layout: "inline-flex", gap: "md", size: "xs", weight: "medium", className: "border border-primary-[500]/30 bg-primary-500/10 px-[1.25rem] py-[0.375rem] tracking-[0.2em] text-primary-700 dark:text-primary-400 backdrop-blur-sm", rounded: "full", transform: "uppercase", children: [_jsx(Span, { className: "w-1.5 h-1.5 bg-primary-500 inline-block", rounded: "full", "aria-hidden": "true" }), pillLabel, _jsx(Span, { className: "w-1.5 h-1.5 bg-primary-500 inline-block", rounded: "full", "aria-hidden": "true" })] }) })), _jsx(Heading, { level: 1, variant: "none", gradient: "brand-tri", className: "mt-4 font-display leading-[1.1] tracking-tight break-words", size: "5xl", mdSize: "6xl", lgSize: "7xl", xlSize: "7xl", children: title }), subtitle && (_jsx(Text, { className: `mt-4 ${themed.textSecondary} max-w-xl leading-relaxed`, size: "xl", children: subtitle })), showCTA && (_jsxs(Row, { wrap: true, gap: "md", className: "mt-8", justify: "start", children: [ctaHref ? (_jsx(TextLink, { rounded: "xl", href: ctaHref, className: "inline-flex items-[center] justify-[center] px-[2rem] py-[0.875rem] !bg-primary hover:!bg-primary-600 text-white dark:!bg-primary dark:hover:!bg-primary-600 dark:text-white btn-glow transition-all hover:scale-[1.02]", size: "base", weight: "bold", children: ctaLabel })) : (_jsx(Button, { variant: "primary", size: "lg", onClick: onCtaClick, children: ctaLabel })), secondaryCtaHref ? (_jsx(TextLink, { rounded: "xl", href: secondaryCtaHref, className: "inline-flex items-[center] justify-[center] border-2 border-cobalt/40 dark:border-cobalt-400/40 px-[2rem] py-[0.875rem] text-cobalt-700 dark:text-cobalt-300 hover:bg-cobalt-50 dark:hover:bg-cobalt-900/20 transition-all hover:scale-[1.02]", size: "base", weight: "semibold", children: secondaryCtaLabel })) : (_jsx(Button, { variant: "outline", size: "lg", onClick: onSecondaryCtaClick, children: secondaryCtaLabel }))] })), trustChips.length > 0 && (_jsx(Row, { wrap: true, gap: "sm", className: "mt-6", justify: "start", children: trustChips.map((chip) => (_jsxs(Span, { layout: "inline-flex", gap: "xs", size: "xs", weight: "medium", className: "border border-zinc-[200] dark:border-slate-[700] px-[0.875rem] py-[0.375rem]", rounded: "full", surface: "subtle", color: "muted", children: [chip.emoji, " ", chip.label] }, chip.key))) }))] }), _jsx(Div, { className: "hidden lg:block", children: _jsxs(Div, { className: `relative overflow-hidden aspect-[4/3] bg-[image:var(--appkit-gradient-section-mesh)]`, shadow: "2xl", border: "default", rounded: "3xl", children: [_jsx(Div, { className: "absolute inset-0 bg-[image:var(--appkit-gradient-glass)]" }), _jsxs(Stack, { centered: true, gap: "sm", className: `absolute inset-0 ${flex.center} px-[2.5rem]`, children: [_jsx(SiteMark, { title: brandLogoText || "LetItRip.in", size: "hero" }), _jsx(SiteLogo, { title: brandLogoText || "LetItRip.in", size: "hero" })] })] }) })] }) })] }));
 }

package/dist/features/layout/TitleBarLayout.d.ts

@@ -61,9 +61,9 @@ export interface TitleBarLayoutProps {
  * TitleBarLayout — generic top sticky title-bar shell.
  *
  * Layout:
- *  TB1 (h-14, all screens): logo | navSlot? | [secondary actions lg+] | search | deals | theme | hamburger
+ *  TB1 (h-14, all screens): wordmark (+ mark on mobile) | centred mark (md+) | [secondary actions lg+] | search | deals | theme | hamburger
  *  TB2 (h-10, below lg only): wishlist | cart | profile  — mirrors what TB1 hides below lg
  *
  * Receives all domain data as props — zero domain imports.
  */
-export declare function TitleBarLayout({ onToggleSidebar, sidebarOpen, onSearchToggle, searchOpen: _searchOpen, brandName, brandShortName: _brandShortName, siteLogoUrl, logoHref, promotionsHref, compareHref, wishlistHref, wishlistCount, cartHref, cartCount, profileHref, unreadNotificationCount, notificationsHref, loginHref, registerHref, user, notificationSlot, devSlot, navSlot, promoStripText, isDark, onToggleTheme, onTourStart, hasDashboardNav, onToggleDashboardNav, hideSidebarToggle, id, className, }: TitleBarLayoutProps): React.JSX.Element;
+export declare function TitleBarLayout({ onToggleSidebar, sidebarOpen, onSearchToggle, searchOpen: _searchOpen, brandName, brandShortName: _brandShortName, siteLogoUrl, logoHref, promotionsHref, compareHref, wishlistHref, wishlistCount, cartHref, cartCount, profileHref, unreadNotificationCount, notificationsHref, loginHref, registerHref, user, notificationSlot, devSlot, navSlot: _navSlot, promoStripText, isDark, onToggleTheme, onTourStart, hasDashboardNav, onToggleDashboardNav, hideSidebarToggle, id, className, }: TitleBarLayoutProps): React.JSX.Element;

package/dist/features/layout/TitleBarLayout.js

@@ -1,6 +1,6 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import Link from "next/link";
-import { Avatar, BlockHeader, Button, Div, Row, Section, SiteLogo, Span } from "../../ui";
+import { Avatar, BlockHeader, Button, Div, Row, Section, SiteLogo, SiteMark, Span } from "../../ui";
 /** Shared icon-button class for all action buttons in the title bar. */
 const iconBtn = "flex items-center justify-center w-9 h-9 rounded-lg text-[var(--appkit-color-text-muted)] hover:bg-primary-50 hover:text-primary-700 hover:bg-[var(--appkit-color-surface-elevated)] dark:hover:text-secondary-400 transition-colors";
 /** Badge counter class for wishlist/cart counts. */
@@ -9,12 +9,12 @@ const countBadge = "absolute -top-0.5 -right-0.5 flex items-center justify-cente
  * TitleBarLayout — generic top sticky title-bar shell.
  *
  * Layout:
- *  TB1 (h-14, all screens): logo | navSlot? | [secondary actions lg+] | search | deals | theme | hamburger
+ *  TB1 (h-14, all screens): wordmark (+ mark on mobile) | centred mark (md+) | [secondary actions lg+] | search | deals | theme | hamburger
  *  TB2 (h-10, below lg only): wishlist | cart | profile  — mirrors what TB1 hides below lg
  *
  * Receives all domain data as props — zero domain imports.
  */
-export function TitleBarLayout({ onToggleSidebar, sidebarOpen, onSearchToggle, searchOpen: _searchOpen, brandName, brandShortName: _brandShortName, siteLogoUrl, logoHref, promotionsHref, compareHref, wishlistHref, wishlistCount = 0, cartHref, cartCount = 0, profileHref, unreadNotificationCount = 0, notificationsHref, loginHref, registerHref, user, notificationSlot, devSlot, navSlot, promoStripText, isDark = false, onToggleTheme, onTourStart, hasDashboardNav, onToggleDashboardNav, hideSidebarToggle = false, id = "titlebar", className = "", }) {
+export function TitleBarLayout({ onToggleSidebar, sidebarOpen, onSearchToggle, searchOpen: _searchOpen, brandName, brandShortName: _brandShortName, siteLogoUrl, logoHref, promotionsHref, compareHref, wishlistHref, wishlistCount = 0, cartHref, cartCount = 0, profileHref, unreadNotificationCount = 0, notificationsHref, loginHref, registerHref, user, notificationSlot, devSlot, navSlot: _navSlot, promoStripText, isDark = false, onToggleTheme, onTourStart, hasDashboardNav, onToggleDashboardNav, hideSidebarToggle = false, id = "titlebar", className = "", }) {
     // ── Element builders ────────────────────────────────────────────────────────
     const promotionsEl = promotionsHref ? (_jsxs(Link, { href: promotionsHref, "aria-label": "Today's deals", className: "flex items-center gap-[var(--appkit-space-1)] px-[var(--appkit-space-3)] py-[var(--appkit-space-1)] rounded-full text-[length:var(--appkit-text-xs)] font-bold bg-primary-100 text-primary-700 dark:bg-secondary-900/40 dark:text-secondary-400 hover:bg-primary-200 dark:hover:bg-secondary-900/60 transition-colors border border-primary-200/60 dark:border-secondary-700/40", children: [_jsx("svg", { className: "w-3 h-3", viewBox: "0 0 24 24", fill: "currentColor", "aria-hidden": "true", children: _jsx("path", { d: "M21.41 11.58l-9-9C12.05 2.22 11.55 2 11 2H4c-1.1 0-2 .9-2 2v7c0 .55.22 1.05.59 1.42l9 9c.36.37.86.58 1.41.58.55 0 1.05-.21 1.41-.59l7-7c.37-.36.59-.86.59-1.41 0-.55-.23-1.06-.59-1.42zM5.5 7C4.67 7 4 6.33 4 5.5S4.67 4 5.5 4 7 4.67 7 5.5 6.33 7 5.5 7z" }) }), _jsx(Span, { className: "hidden sm:inline", children: "Today's Deals" })] })) : null;
     const themeBtn = onToggleTheme ? (_jsx(Button, { type: "button", variant: "ghost", size: "sm", "aria-label": isDark ? "Switch to light mode" : "Switch to dark mode", onClick: onToggleTheme, className: iconBtn, children: isDark ? (_jsx("svg", { className: "w-5 h-5", fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", "aria-hidden": "true", children: _jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2, d: "M12 3v1m0 16v1m8.66-9h-1M4.34 12h-1m15.07-6.07-.71.71M6.34 17.66l-.71.71m12.73 0-.71-.71M6.34 6.34l-.71-.71M12 5a7 7 0 1 0 0 14A7 7 0 0 0 12 5z" }) })) : (_jsx("svg", { className: "w-5 h-5", fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", "aria-hidden": "true", children: _jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2, d: "M21 12.79A9 9 0 1 1 11.21 3a7 7 0 1 0 9.79 9.79z" }) })) })) : null;
@@ -33,7 +33,7 @@ export function TitleBarLayout({ onToggleSidebar, sidebarOpen, onSearchToggle, s
     const authButtonsEl = !user && (loginHref || registerHref) ? (_jsxs(Row, { gap: "xs", className: "hidden lg:flex", children: [loginHref && (_jsx(Link, { href: loginHref, className: "px-[var(--appkit-space-3)] py-[var(--appkit-space-1-5)] text-[length:var(--appkit-text-sm)] font-medium text-[var(--appkit-color-text-muted)] hover:text-primary-700 dark:hover:text-secondary-400 transition-colors rounded-lg hover:bg-primary-50 hover:bg-[var(--appkit-color-surface-elevated)]", children: "Sign in" })), registerHref && (_jsx(Link, { href: registerHref, className: "px-[var(--appkit-space-3)] py-[var(--appkit-space-1-5)] text-[length:var(--appkit-text-sm)] font-semibold rounded-lg bg-primary text-white hover:bg-primary/90 transition-colors btn-glow shadow-sm", children: "Register" }))] })) : null;
     const hasTb2 = !!(notificationsEl || wishlistEl || cartEl || profileEl);
     // ── Render ───────────────────────────────────────────────────────────────────
-    return (_jsxs(BlockHeader, { id: id, className: `sticky top-0 z-50 bg-[var(--appkit-color-bg)]/95 backdrop-blur-md border-b border-[var(--appkit-color-border-subtle)] shadow-sm ${className}`, children: [promoStripText && (_jsx(Section, { color: "inverse", tone: "accent-banner", className: "text-[length:var(--appkit-text-xs)] text-center font-medium", padding: "y-2xs", children: promoStripText })), _jsxs(Div, { paddingX: "x-page", className: "container mx-auto max-w-[1920px]", children: [_jsxs(Row, { justify: "between", gap: "none", className: "relative h-14", children: [_jsx(Row, { gap: "3", children: _jsx(Link, { href: logoHref, "aria-label": brandName, className: "flex items-center transition-opacity hover:opacity-80", children: _jsx(SiteLogo, { title: brandName, size: "md" }) }) }), siteLogoUrl ? (_jsx(Row, { className: "absolute inset-y-0 left-1/2 -translate-x-1/2", align: "center", children: _jsx(Link, { href: logoHref, "aria-label": brandName, className: "flex items-center transition-opacity hover:opacity-80", children: _jsx(SiteLogo, { src: siteLogoUrl, title: brandName, size: "md" }) }) })) : (navSlot && _jsx(Div, { className: "hidden md:flex ml-auto", children: navSlot })), _jsxs(Row, { gap: "xs", children: [devSlot, compareEl, notificationSlot, notificationsEl && _jsx(Div, { className: "hidden lg:flex", children: notificationsEl }), wishlistEl && _jsx(Div, { className: "hidden lg:flex", children: wishlistEl }), cartEl && _jsx(Div, { className: "hidden lg:flex", children: cartEl }), user
+    return (_jsxs(BlockHeader, { id: id, className: `sticky top-0 z-50 bg-[var(--appkit-color-bg)]/95 backdrop-blur-md border-b border-[var(--appkit-color-border-subtle)] shadow-sm ${className}`, children: [promoStripText && (_jsx(Section, { color: "inverse", tone: "accent-banner", className: "text-[length:var(--appkit-text-xs)] text-center font-medium", padding: "y-2xs", children: promoStripText })), _jsxs(Div, { paddingX: "x-page", className: "container mx-auto max-w-[1920px]", children: [_jsxs(Row, { justify: "between", gap: "none", className: "relative h-14", children: [_jsx(Row, { gap: "3", children: _jsxs(Link, { href: logoHref, "aria-label": brandName, className: "flex items-center gap-[var(--appkit-space-2)] transition-opacity hover:opacity-80", children: [_jsx(Div, { className: "flex md:hidden", children: _jsx(SiteMark, { title: brandName, size: "sm" }) }), _jsx(SiteLogo, { title: brandName, size: "md" })] }) }), _jsx(Row, { className: "hidden md:flex absolute inset-y-0 left-1/2 -translate-x-1/2", align: "center", children: _jsx(Link, { href: logoHref, "aria-label": brandName, className: "flex items-center transition-opacity hover:opacity-80", children: _jsx(SiteMark, { src: siteLogoUrl, title: brandName, size: "lg" }) }) }), _jsxs(Row, { gap: "xs", children: [devSlot, compareEl, notificationSlot, notificationsEl && _jsx(Div, { className: "hidden lg:flex", children: notificationsEl }), wishlistEl && _jsx(Div, { className: "hidden lg:flex", children: wishlistEl }), cartEl && _jsx(Div, { className: "hidden lg:flex", children: cartEl }), user
                                         ? profileEl && _jsx(Div, { className: "hidden lg:flex", children: profileEl })
                                         : authButtonsEl ?? (profileEl && _jsx(Div, { className: "hidden lg:flex", children: profileEl })), searchBtn, promotionsEl, tourBtn, themeBtn, hamburgerBtn] })] }), hasTb2 && (_jsxs(Row, { border: "subtle", as: "nav", "aria-label": "Account actions", justify: "end", gap: "xs", className: "flex lg:hidden h-10 border-t px-[var(--appkit-space-1)]", children: [notificationsEl, wishlistEl, cartEl, profileEl] }))] })] }));
 }

package/dist/features/media/AvatarUpload.js

@@ -17,7 +17,10 @@ export function AvatarUpload({ currentPhotoURL, currentCropData, userId, display
         readyToSave: labels?.readyToSave ?? "Ready to save",
     };
     const [previewUrl, setPreviewUrl] = useState(currentPhotoURL || null);
-    const [cropData, setCropData] = useState(currentCropData || null);
+    const [cropData, setCropData] = useState(currentCropData ||
+        (currentPhotoURL
+            ? { url: currentPhotoURL, position: { x: 50, y: 50 }, zoom: 1 }
+            : null));
     const [tempImageUrl, setTempImageUrl] = useState(null);
     const [showCropModal, setShowCropModal] = useState(false);
     const [pendingFile, setPendingFile] = useState(null);
@@ -63,9 +66,10 @@ export function AvatarUpload({ currentPhotoURL, currentCropData, userId, display
                 firstName,
                 lastName,
             });
-            await onUploadSuccess?.(downloadURL, pendingCropData);
+            const finalizedCropData = { ...pendingCropData, url: downloadURL };
+            await onUploadSuccess?.(downloadURL, finalizedCropData);
             setPreviewUrl(downloadURL);
-            setCropData(pendingCropData);
+            setCropData(finalizedCropData);
             setPendingCropData(null);
             setPendingUploadFile(null);
             showToast("Avatar uploaded", "success");

package/dist/features/media/MediaVideo.js

@@ -38,7 +38,7 @@ export function MediaVideo({ src, thumbnailUrl, alt = "Video", controls = true,
     const { data: siteSettings } = useSiteSettings();
     const effectiveWatermark = watermark === null
         ? null
-        : (watermark ?? siteSettings?.watermark ?? null);
+        : (watermark ?? siteSettings?.effectiveWatermark ?? siteSettings?.watermark ?? null);
     if (!resolvedSrc) {
         return (_jsx(Row
         // audit-color-pair-function-ok: deliberate faded placeholder-icon shade, not a readability regression

package/dist/features/media/finalize.d.ts

@@ -1,19 +1,15 @@
 import type { MediaField } from "./types";
 /**
- * Extract a storage object path from public/download URLs for the same bucket.
- */
-export declare function extractStoragePathFromUrl(url: string, bucketName: string): string | null;
-/**
- * Promote staged tmp/* uploads to canonical media/* path.
+ * Promote a staged tmp/* upload to its canonical media/* path.
  *
- * Handles two URL formats:
- *  1. `/media/{shortId}` — the new SEO-friendly short-ID format.
- *     Looks up the asset in the mediaAssets Firestore collection, moves the
- *     file from tmp/ → media/, updates the storagePath, and returns the same
- *     URL unchanged (the URL is stable across the move).
- *  2. Raw GCS URLs (`https://storage.googleapis.com/...` or Firebase Storage URLs) —
- *     legacy path kept for backward compatibility; moves the file and returns a
- *     /media/{finalStoragePath} proxy URL.
+ * Every producer of these URLs funnels through POST /api/media/finalize,
+ * which always returns a single-segment `/media/{shortId}` proxy URL (see
+ * that route's `downloadURL` construction) — so that's the only shape this
+ * ever needs to handle. Looks up the asset in the mediaAssets Firestore
+ * collection, moves the file from tmp/ → media/, updates the storagePath,
+ * and returns the same URL unchanged (the URL is stable across the move).
+ * Any other input (already-finalized `/media/...` path, or a URL that isn't
+ * a `/media/` proxy URL at all) is returned as-is — nothing to promote.
  */
 export declare function finalizeStagedMediaUrl(url: string): Promise<string>;
 export declare function finalizeStagedMediaField(url: string | null | undefined): Promise<string | undefined>;

package/dist/features/media/finalize.js

@@ -1,35 +1,9 @@
 import { normalizeError } from "../../errors/normalize";
 import { getAdminStorage } from "../../providers/db-firebase";
-import { FIREBASE_STORAGE_HOST, GCS_HOST } from "../../utils/media-url";
 import { mediaAssetsRepository } from "./repository/media-assets.repository";
 const TMP_MEDIA_PREFIX = "tmp/";
 const FINAL_MEDIA_PREFIX = "media/";
 const PROXY_URL_PREFIX = "/media/";
-/**
- * Extract a storage object path from public/download URLs for the same bucket.
- */
-export function extractStoragePathFromUrl(url, bucketName) {
-    try {
-        const parsed = new URL(url);
-        if (parsed.hostname === GCS_HOST) {
-            const parts = parsed.pathname.split("/").filter(Boolean);
-            if (parts.length >= 2 && parts[0] === bucketName) {
-                return parts.slice(1).join("/");
-            }
-        }
-        if (parsed.hostname === FIREBASE_STORAGE_HOST) {
-            const match = parsed.pathname.match(/\/v0\/b\/([^/]+)\/o\/(.+)$/);
-            if (match && match[1] === bucketName) {
-                return decodeURIComponent(match[2]);
-            }
-        }
-        return null;
-    }
-    catch (_err) {
-        void normalizeError(_err);
-        return null;
-    }
-}
 /**
  * Move a file from tmp/ to media/ in Firebase Storage.
  * Returns the new storage path.
@@ -47,60 +21,35 @@ async function moveToFinalPath(sourcePath) {
     return destinationPath;
 }
 /**
- * Promote staged tmp/* uploads to canonical media/* path.
+ * Promote a staged tmp/* upload to its canonical media/* path.
  *
- * Handles two URL formats:
- *  1. `/media/{shortId}` — the new SEO-friendly short-ID format.
- *     Looks up the asset in the mediaAssets Firestore collection, moves the
- *     file from tmp/ → media/, updates the storagePath, and returns the same
- *     URL unchanged (the URL is stable across the move).
- *  2. Raw GCS URLs (`https://storage.googleapis.com/...` or Firebase Storage URLs) —
- *     legacy path kept for backward compatibility; moves the file and returns a
- *     /media/{finalStoragePath} proxy URL.
+ * Every producer of these URLs funnels through POST /api/media/finalize,
+ * which always returns a single-segment `/media/{shortId}` proxy URL (see
+ * that route's `downloadURL` construction) — so that's the only shape this
+ * ever needs to handle. Looks up the asset in the mediaAssets Firestore
+ * collection, moves the file from tmp/ → media/, updates the storagePath,
+ * and returns the same URL unchanged (the URL is stable across the move).
+ * Any other input (already-finalized `/media/...` path, or a URL that isn't
+ * a `/media/` proxy URL at all) is returned as-is — nothing to promote.
  */
 export async function finalizeStagedMediaUrl(url) {
-    // ── Path 1: /media/{shortId} proxy URLs (new system) ──────────────────────
-    if (url.startsWith(PROXY_URL_PREFIX)) {
-        const afterPrefix = url.slice(PROXY_URL_PREFIX.length);
-        // Single-segment = shortId. Multi-segment = legacy raw path embedded in URL.
-        if (!afterPrefix.includes("/")) {
-            const shortId = afterPrefix;
-            try {
-                const asset = await mediaAssetsRepository.findById(shortId);
-                if (asset && asset.status === "staged" && asset.storagePath.startsWith(TMP_MEDIA_PREFIX)) {
-                    const finalPath = await moveToFinalPath(asset.storagePath);
-                    await mediaAssetsRepository.promoteToFinalized(shortId, finalPath);
-                }
-            }
-            catch (_err) {
-                void normalizeError(_err);
-                // Non-fatal: URL is still valid; proxy will serve whatever storagePath points to.
-            }
-            return url; // URL is stable — same before and after the file move
-        }
-        // Multi-segment legacy: /media/tmp/folder/uid/file.jpg → move + return proxy URL
-        const rawPath = afterPrefix;
-        if (rawPath.startsWith(TMP_MEDIA_PREFIX)) {
-            try {
-                const finalPath = await moveToFinalPath(rawPath);
-                return `${PROXY_URL_PREFIX}${finalPath}`;
-            }
-            catch (_err) {
-                void normalizeError(_err);
-                return url;
-            }
+    if (!url.startsWith(PROXY_URL_PREFIX))
+        return url;
+    const shortId = url.slice(PROXY_URL_PREFIX.length);
+    if (shortId.includes("/"))
+        return url; // not a shortId — nothing to promote
+    try {
+        const asset = await mediaAssetsRepository.findById(shortId);
+        if (asset && asset.status === "staged" && asset.storagePath.startsWith(TMP_MEDIA_PREFIX)) {
+            const finalPath = await moveToFinalPath(asset.storagePath);
+            await mediaAssetsRepository.promoteToFinalized(shortId, finalPath);
         }
-        return url; // already at media/ or other path — no-op
     }
-    // ── Path 2: Legacy raw GCS URLs ────────────────────────────────────────────
-    const storage = getAdminStorage();
-    const bucket = storage.bucket();
-    const sourcePath = extractStoragePathFromUrl(url, bucket.name);
-    if (!sourcePath || !sourcePath.startsWith(TMP_MEDIA_PREFIX)) {
-        return url;
+    catch (_err) {
+        void normalizeError(_err);
+        // Non-fatal: URL is still valid; proxy will serve whatever storagePath points to.
     }
-    const finalPath = await moveToFinalPath(sourcePath);
-    return `${PROXY_URL_PREFIX}${finalPath}`;
+    return url; // URL is stable — same before and after the file move
 }
 export async function finalizeStagedMediaField(url) {
     if (!url)

package/dist/features/media/server.d.ts

@@ -1 +1 @@
-export { extractStoragePathFromUrl, finalizeStagedMediaUrl, finalizeStagedMediaField, finalizeStagedMediaArray, finalizeStagedMediaObject, finalizeStagedMediaObjectArray, } from "./finalize";
+export { finalizeStagedMediaUrl, finalizeStagedMediaField, finalizeStagedMediaArray, finalizeStagedMediaObject, finalizeStagedMediaObjectArray, } from "./finalize";

package/dist/features/media/server.js

@@ -1 +1 @@
-export { extractStoragePathFromUrl, finalizeStagedMediaUrl, finalizeStagedMediaField, finalizeStagedMediaArray, finalizeStagedMediaObject, finalizeStagedMediaObjectArray, } from "./finalize";
+export { finalizeStagedMediaUrl, finalizeStagedMediaField, finalizeStagedMediaArray, finalizeStagedMediaObject, finalizeStagedMediaObjectArray, } from "./finalize";

package/dist/features/orders/hooks/useOrders.js

@@ -1,12 +1,17 @@
 import { useQuery } from "@tanstack/react-query";
 import { apiClient } from "../../../http";
-import { ORDER_ENDPOINTS } from "../../../constants/api-endpoints";
+import { ORDER_ENDPOINTS, ACCOUNT_ENDPOINTS } from "../../../constants/api-endpoints";
 export function useOrders(params = {}, opts) {
     const sp = new URLSearchParams();
     if (params.userId)
         sp.set("userId", params.userId);
+    // Wire key is "status", not "orderStatus" — matches what /api/user/orders
+    // (the only real handler backing this hook's default endpoint) reads via
+    // getStringParam(searchParams, "status"). The OrderListParams prop stays
+    // named `orderStatus` since existing call sites pass it that way; only the
+    // serialized query-string key changes.
     if (params.orderStatus)
-        sp.set("orderStatus", params.orderStatus);
+        sp.set("status", params.orderStatus);
     if (params.paymentStatus)
         sp.set("paymentStatus", params.paymentStatus);
     if (params.sort)
@@ -16,7 +21,10 @@ export function useOrders(params = {}, opts) {
     if (params.perPage)
         sp.set("perPage", String(params.perPage));
     const qs = sp.toString();
-    const endpoint = opts?.endpoint ?? `${ORDER_ENDPOINTS.LIST}${qs ? `?${qs}` : ""}`;
+    // ORDER_ENDPOINTS.LIST ("/api/orders") has no GET route handler — every
+    // real caller of this hook wants the current user's own orders, served by
+    // /api/user/orders. Default here, not ORDER_ENDPOINTS.LIST.
+    const endpoint = opts?.endpoint ?? `${ACCOUNT_ENDPOINTS.ORDERS}${qs ? `?${qs}` : ""}`;
     const query = useQuery({
         queryKey: ["orders", qs],
         queryFn: () => apiClient.get(endpoint),
@@ -32,7 +40,11 @@ export function useOrders(params = {}, opts) {
     };
 }
 export function useOrder(id, opts) {
-    const endpoint = opts?.endpoint ?? ORDER_ENDPOINTS.BY_ID(id);
+    // Same fix as useOrders() above — ORDER_ENDPOINTS.BY_ID ("/api/orders/{id}")
+    // has no route.ts handler (only [id]/code, [id]/invoice, [id]/payment-proof,
+    // [id]/refund, [id]/dispute subroutes exist). The real single-order handler
+    // for the current user is /api/user/orders/[id].
+    const endpoint = opts?.endpoint ?? ACCOUNT_ENDPOINTS.ORDER_BY_ID(id);
     const query = useQuery({
         queryKey: ["orders", id],
         queryFn: () => apiClient.get(endpoint),

package/dist/features/orders/schemas/firestore.d.ts

@@ -63,7 +63,7 @@ export interface EmiInstallment {
     /** 1-based installment number. */
     index: number;
     dueDate: Date;
-    /** Installment amount in paise (principal share + surcharge share for this installment). */
+    /** Installment amount in decimal rupees (principal share + surcharge share for this installment). */
     amount: number;
     status: EmiInstallmentStatus;
     paidAt?: Date;
@@ -116,7 +116,7 @@ export interface OrderDocumentItem {
 export interface OrderRefundEvent {
     refundId: string;
     type: RefundType;
-    /** Amount in paise. */
+    /** Amount in decimal rupees. */
     amount: number;
     /** ProductIds / itemIds that were refunded (for partial refunds). */
     itemIds?: string[];
@@ -195,12 +195,12 @@ export interface OrderDocument extends BaseDocument {
     emiEnabled?: boolean;
     /** Number of monthly installments the buyer chose (2–6). */
     emiTenureMonths?: number;
-    /** Down payment collected at checkout, in paise (emiTokenPercent × seller subtotal). */
+    /** Down payment collected at checkout, in decimal rupees (emiTokenPercent × seller subtotal). */
     emiTokenAmount?: number;
-    /** Extra cost of choosing EMI over full payment, in paise — split between platform and seller. */
+    /** Extra cost of choosing EMI over full payment, in decimal rupees — split between platform and seller. */
     emiSurchargeAmount?: number;
     emiInstallments?: EmiInstallment[];
-    /** Sum of unpaid installment amounts, in paise. 0 once all installments are paid. */
+    /** Sum of unpaid installment amounts, in decimal rupees. 0 once all installments are paid. */
     emiRemainingBalance?: number;
     /** True once every installment's status is "paid". Gates shipment unless the product's `allowShipBeforeEmiComplete` flag is set. */
     emiComplete?: boolean;