@mohasinac/appkit 4.10.0 → 4.11.0

package/dist/_internal/server/jobs/core/hardBanCascade.js

@@ -21,6 +21,8 @@ import { userRepository, sessionRepository, storeRepository, productRepository,
 import { sendNotification } from "../../../../features/admin/actions/notification-actions";
 import { isSellerUser } from "../../../../features/auth/role-predicates";
 import { getAdminAuth } from "../../../../providers/db-firebase";
+import { recordAdminAction } from "../../features/audit-log/actions";
+import { AdminAuditActionValues } from "../../../../features/audit-log/schemas/firestore";
 async function cascadeAddressClusterBan(uid, banData) {
     const userAddresses = await addressesRepository.listByOwner("user", uid);
     const uniqueHashes = [...new Set(userAddresses.map((a) => a.addressHash).filter(Boolean))];
@@ -84,6 +86,15 @@ export async function runHardBanCascade(input, ctx) {
         hardBanExpiresAt: expiresAt ?? null,
         ...(fraudOrderId ? { hardBanFraudOrderId: fraudOrderId } : {}),
     });
+    void recordAdminAction({
+        actorUid: bannedBy,
+        action: AdminAuditActionValues.USER_HARD_BAN,
+        targetType: "user",
+        targetId: uid,
+        targetLabel: target.displayName ?? uid,
+        reason,
+        metadata: { expiresAt: expiresAt?.toISOString() ?? null, fraudOrderId: fraudOrderId ?? null },
+    });
     // 3. Delete active sessions
     try {
         const sessions = await sessionRepository.findActiveByUser(uid);

package/dist/_internal/server/jobs/core/testerSandboxCleanup.d.ts

@@ -1,4 +1,5 @@
 import type { JobContext } from "../runtime/types";
+export declare const SANDBOX_COLLECTIONS: readonly ["categories", "stores", "products", "blogPosts", "events"];
 export interface TesterSandboxCleanupOptions {
     /** true = wipe every isTestData:true doc regardless of testDataExpiresAt (manual force-purge). */
     force?: boolean;

package/dist/_internal/server/jobs/core/testerSandboxCleanup.js

@@ -1,6 +1,9 @@
 import { batchDelete, getTestDataRefs } from "../handlers/_helpers";
 import { BID_FIELDS } from "../../../../constants/field-names";
-const SANDBOX_COLLECTIONS = ["categories", "stores", "products", "blogPosts", "events"];
+// Exported so testerSandboxRefresh.ts (the every-4h revert+prune job) reuses
+// the exact same collection scope instead of redefining it — one source of
+// truth for "what counts as sandbox scope."
+export const SANDBOX_COLLECTIONS = ["categories", "stores", "products", "blogPosts", "events"];
 const BID_CHUNK_SIZE = 30; // Firestore `in` query cap
 export async function runTesterSandboxCleanup(ctx, opts = {}) {
     const cutoff = opts.force ? null : new Date();

package/dist/_internal/server/jobs/core/testerSandboxRefresh.d.ts

@@ -0,0 +1,12 @@
+import type { JobContext } from "../runtime/types";
+/**
+ * Reverts every live tester-sandbox fixture back to its canonical seeded
+ * shape (undoing edits made through admin/seller forms) and prunes any
+ * isTestData doc that isn't one of the known fixtures (something a tester
+ * created during QA, e.g. a cloned product). Runs every 4 hours — distinct
+ * from `runTesterSandboxCleanup`, which only deletes docs whose 7-day
+ * `testDataExpiresAt` TTL has actually lapsed and never touches still-live
+ * docs' fields. Scoped to the tester sandbox only (`isTestData: true`) —
+ * the permanent Beyblade catalog real visitors browse is never touched.
+ */
+export declare function runTesterSandboxRefresh(ctx: JobContext): Promise<void>;

package/dist/_internal/server/jobs/core/testerSandboxRefresh.js

@@ -0,0 +1,85 @@
+import { batchDelete, getTestDataRefs } from "../handlers/_helpers";
+import { BID_FIELDS } from "../../../../constants/field-names";
+import { SANDBOX_COLLECTIONS } from "./testerSandboxCleanup";
+// Direct imports from each defining module (not the seed-data barrel) —
+// this is internal appkit code, not part of the package's public API surface.
+import { categoriesTesterSeedData } from "../../../../features/tester/seed-data/categories-tester-seed-data";
+import { storesTesterSeedData } from "../../../../features/tester/seed-data/stores-tester-seed-data";
+import { productsTesterSeedData } from "../../../../features/tester/seed-data/products-tester-seed-data";
+import { blogTesterSeedData } from "../../../../features/tester/seed-data/blog-tester-seed-data";
+import { eventsTesterSeedData } from "../../../../features/tester/seed-data/events-tester-seed-data";
+import { bidsTesterSeedData } from "../../../../features/tester/seed-data/bids-tester-seed-data";
+const SEED_BY_COLLECTION = {
+    categories: categoriesTesterSeedData,
+    stores: storesTesterSeedData,
+    products: productsTesterSeedData,
+    blogPosts: blogTesterSeedData,
+    events: eventsTesterSeedData,
+};
+const BID_CHUNK_SIZE = 30; // Firestore `in` query cap
+/**
+ * Reverts every live tester-sandbox fixture back to its canonical seeded
+ * shape (undoing edits made through admin/seller forms) and prunes any
+ * isTestData doc that isn't one of the known fixtures (something a tester
+ * created during QA, e.g. a cloned product). Runs every 4 hours — distinct
+ * from `runTesterSandboxCleanup`, which only deletes docs whose 7-day
+ * `testDataExpiresAt` TTL has actually lapsed and never touches still-live
+ * docs' fields. Scoped to the tester sandbox only (`isTestData: true`) —
+ * the permanent Beyblade catalog real visitors browse is never touched.
+ */
+export async function runTesterSandboxRefresh(ctx) {
+    let reverted = 0;
+    let deletedExtras = 0;
+    for (const collection of SANDBOX_COLLECTIONS) {
+        const seedDocs = SEED_BY_COLLECTION[collection] ?? [];
+        const validIds = new Set(seedDocs.map((d) => d.id).filter((id) => Boolean(id)));
+        if (seedDocs.length > 0) {
+            const batch = ctx.db.batch();
+            for (const doc of seedDocs) {
+                const { id, ...data } = doc;
+                if (!id)
+                    continue;
+                // merge:true mirrors seed-cli.mjs's loadGeneric — the seed payload
+                // carries every canonical field, so this fully overwrites anything
+                // a tester edited through the UI.
+                batch.set(ctx.db.collection(collection).doc(id), data, { merge: true });
+                reverted++;
+            }
+            await batch.commit();
+        }
+        const testDataRefs = await getTestDataRefs(ctx.db, collection, null);
+        const extraRefs = testDataRefs.filter((ref) => !validIds.has(ref.id));
+        deletedExtras += await batchDelete(ctx, extraRefs);
+    }
+    // Bids aren't isTestData-flagged themselves — scoped by productId
+    // referencing a sandbox product instead, mirroring runTesterSandboxCleanup's
+    // cascade convention.
+    const sandboxProductIds = (SEED_BY_COLLECTION.products ?? [])
+        .map((d) => d.id)
+        .filter((id) => Boolean(id));
+    const validBidIds = new Set(bidsTesterSeedData.map((d) => d.id).filter((id) => Boolean(id)));
+    if (bidsTesterSeedData.length > 0) {
+        const bidBatch = ctx.db.batch();
+        for (const bid of bidsTesterSeedData) {
+            const { id, ...data } = bid;
+            if (!id)
+                continue;
+            bidBatch.set(ctx.db.collection("bids").doc(id), data, { merge: true });
+            reverted++;
+        }
+        await bidBatch.commit();
+    }
+    const extraBidRefs = [];
+    for (let i = 0; i < sandboxProductIds.length; i += BID_CHUNK_SIZE) {
+        const chunk = sandboxProductIds.slice(i, i + BID_CHUNK_SIZE);
+        if (chunk.length === 0)
+            continue;
+        const snap = await ctx.db.collection("bids").where(BID_FIELDS.PRODUCT_ID, "in", chunk).get();
+        for (const doc of snap.docs) {
+            if (!validBidIds.has(doc.id))
+                extraBidRefs.push(doc.ref);
+        }
+    }
+    deletedExtras += await batchDelete(ctx, extraBidRefs);
+    ctx.logger.info("Tester sandbox refresh complete", { reverted, deletedExtras });
+}

package/dist/_internal/server/jobs/core/whatsappNotify.js

@@ -20,6 +20,7 @@
 import { normalizeError } from "../../../../errors/normalize";
 import { notificationRepository } from "../../../../features/admin/repository/notification.repository";
 import { sendWhatsAppTemplateMessage, sendWhatsAppBusinessMessage, } from "../../../../features/whatsapp-bot/helpers/whatsapp";
+import { isChannelHealthy, recordChannelOutcome } from "../../notifications/channel-health";
 const MAX_ATTEMPTS = 3;
 const RETRY_DELAY_MS = 1500;
 function delay(ms) {
@@ -27,6 +28,20 @@ function delay(ms) {
 }
 export async function runWhatsAppNotify(payload, ctx) {
     const { toPhone, title, message, templateName, templateLanguage, notificationId, phoneNumberId, accessToken } = payload;
+    if (!(await isChannelHealthy("whatsapp"))) {
+        ctx.logger.warn("whatsappNotify: WhatsApp channel circuit is open — skipping send", { notificationId });
+        await notificationRepository
+            .update(notificationId, { whatsappStatus: "skipped" })
+            .catch((err) => {
+            void normalizeError(err);
+        });
+        return {
+            summary: { total: 1, succeeded: 0, skipped: 1, failed: 0 },
+            succeeded: [],
+            skipped: [notificationId],
+            failed: [],
+        };
+    }
     let sent = false;
     let lastError;
     for (let attempt = 1; attempt <= MAX_ATTEMPTS && !sent; attempt++) {
@@ -61,6 +76,7 @@ export async function runWhatsAppNotify(payload, ctx) {
     if (!templateName) {
         ctx.logger.warn("whatsappNotify: no approved template configured for this notification type — sent as free-form text, which Meta rejects outside the 24h customer-service window", { notificationId });
     }
+    await recordChannelOutcome("whatsapp", sent);
     await notificationRepository
         .update(notificationId, { whatsappStatus: sent ? "sent" : "failed" })
         .catch((err) => {

package/dist/_internal/server/jobs/handlers/dailyStatusDigest.d.ts

@@ -0,0 +1,2 @@
+import type { ScheduleHandler } from "../runtime/types";
+export declare const dailyStatusDigestHandler: ScheduleHandler;

package/dist/_internal/server/jobs/handlers/dailyStatusDigest.js

@@ -0,0 +1,4 @@
+import { runDailyStatusDigest } from "../core/dailyStatusDigest";
+export const dailyStatusDigestHandler = async (ctx) => {
+    await runDailyStatusDigest(ctx);
+};

package/dist/_internal/server/jobs/handlers/index.d.ts

@@ -29,6 +29,7 @@ export { hardBanReinstatementHandler } from "./hardBanReinstatement";
 export { paymentReviewAutoApproveHandler } from "./paymentReviewAutoApprove";
 export { productStatsSyncHandler } from "./productStatsSync";
 export { revenueRollupHandler } from "./revenueRollup";
+export { dailyStatusDigestHandler } from "./dailyStatusDigest";
 export { positionsReconcileHandler } from "./positionsReconcile";
 export { payoutBatchHandler } from "./payoutBatch";
 export { weeklyPayoutEligibilityHandler } from "./weeklyPayoutEligibility";
@@ -52,6 +53,7 @@ export { onScamReportCreateHandler } from "./onScamReportCreate";
 export { onScamReportUpdateHandler } from "./onScamReportUpdate";
 export { draftPruneHandler } from "./draftPrune";
 export { testerSandboxCleanupHandler } from "./testerSandboxCleanup";
+export { testerSandboxRefreshHandler } from "./testerSandboxRefresh";
 export { emiInstallmentReminderHandler } from "./emiInstallmentReminder";
 export { onShipmentItemWriteHandler } from "./onShipmentItemWrite";
 export { onShipmentLotWriteHandler, onShipmentHeaderWriteHandler } from "./onShipmentAllocationSync";

package/dist/_internal/server/jobs/handlers/index.js

@@ -29,6 +29,7 @@ export { hardBanReinstatementHandler } from "./hardBanReinstatement";
 export { paymentReviewAutoApproveHandler } from "./paymentReviewAutoApprove";
 export { productStatsSyncHandler } from "./productStatsSync";
 export { revenueRollupHandler } from "./revenueRollup";
+export { dailyStatusDigestHandler } from "./dailyStatusDigest";
 export { positionsReconcileHandler } from "./positionsReconcile";
 export { payoutBatchHandler } from "./payoutBatch";
 export { weeklyPayoutEligibilityHandler } from "./weeklyPayoutEligibility";
@@ -64,6 +65,8 @@ export { onScamReportUpdateHandler } from "./onScamReportUpdate";
 export { draftPruneHandler } from "./draftPrune";
 // Tester program — 7-day auto-expiry sweep for the shared admin-seeded test sandbox
 export { testerSandboxCleanupHandler } from "./testerSandboxCleanup";
+// Tester program — every-4h revert-live-edits + prune-extras refresh (faster than the 7-day sweep above)
+export { testerSandboxRefreshHandler } from "./testerSandboxRefresh";
 // EMI — installment reminder + overdue-flagging sweep
 export { emiInstallmentReminderHandler } from "./emiInstallmentReminder";
 // Procurement Shipments — 3-function recompute cascade (item→lot, lot/header→shipment allocation, cascade-delete)

package/dist/_internal/server/jobs/handlers/testerSandboxRefresh.d.ts

@@ -0,0 +1,2 @@
+import type { ScheduleHandler } from "../runtime/types";
+export declare const testerSandboxRefreshHandler: ScheduleHandler;

package/dist/_internal/server/jobs/handlers/testerSandboxRefresh.js

@@ -0,0 +1,2 @@
+import { runTesterSandboxRefresh } from "../core/testerSandboxRefresh";
+export const testerSandboxRefreshHandler = (ctx) => runTesterSandboxRefresh(ctx);

package/dist/_internal/server/notifications/channel-health.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Circuit breaker for outbound notification channels (email, WhatsApp).
+ *
+ * Persisted as a singleton Firestore doc `system/channelHealth` so the
+ * "is this channel currently known-bad" state survives across requests and
+ * Firebase Function invocations — a channel that just failed 3 times in a
+ * row is treated as down for a 15-minute cooldown instead of being retried
+ * on every subsequent send attempt (wasted latency + hammering a dead
+ * provider). After the cooldown, the next attempt is a half-open probe:
+ * its own outcome decides whether the circuit re-closes or re-opens.
+ */
+export type NotificationChannel = "email" | "whatsapp";
+/**
+ * Returns false only when the circuit is open and still within its cooldown
+ * window. Any other state (closed, or open-but-cooldown-elapsed) is treated
+ * as healthy — the latter lets the next call through as a half-open probe.
+ */
+export declare function isChannelHealthy(channel: NotificationChannel): Promise<boolean>;
+export declare function recordChannelOutcome(channel: NotificationChannel, success: boolean): Promise<void>;
+/**
+ * Runs `fn` up to 3 times (500ms then 1.5s between attempts) and records the
+ * final outcome against the channel's health state. `fn` must throw on
+ * failure — for a helper that returns a boolean instead (e.g. the WhatsApp
+ * Cloud API helpers), convert `false` into a thrown error at the call site
+ * before passing it in.
+ */
+export declare function withChannelRetry<T>(channel: NotificationChannel, fn: () => Promise<T>): Promise<T>;

package/dist/_internal/server/notifications/channel-health.js

@@ -0,0 +1,101 @@
+/**
+ * Circuit breaker for outbound notification channels (email, WhatsApp).
+ *
+ * Persisted as a singleton Firestore doc `system/channelHealth` so the
+ * "is this channel currently known-bad" state survives across requests and
+ * Firebase Function invocations — a channel that just failed 3 times in a
+ * row is treated as down for a 15-minute cooldown instead of being retried
+ * on every subsequent send attempt (wasted latency + hammering a dead
+ * provider). After the cooldown, the next attempt is a half-open probe:
+ * its own outcome decides whether the circuit re-closes or re-opens.
+ */
+import { getAdminDb } from "../../../providers/db-firebase";
+import { normalizeError } from "../../../errors/normalize";
+import { serverLogger } from "../../../monitoring";
+const HEALTH_COLLECTION = "system";
+const HEALTH_DOC = "channelHealth";
+const FAILURE_THRESHOLD = 3;
+const COOLDOWN_MS = 15 * 60 * 1000;
+const RETRY_DELAYS_MS = [500, 1500];
+function defaultState() {
+    return { consecutiveFailures: 0, state: "closed" };
+}
+async function readHealthDoc() {
+    try {
+        const snap = await getAdminDb().collection(HEALTH_COLLECTION).doc(HEALTH_DOC).get();
+        return snap.data() ?? {};
+    }
+    catch (err) {
+        void normalizeError(err);
+        return {};
+    }
+}
+/**
+ * Returns false only when the circuit is open and still within its cooldown
+ * window. Any other state (closed, or open-but-cooldown-elapsed) is treated
+ * as healthy — the latter lets the next call through as a half-open probe.
+ */
+export async function isChannelHealthy(channel) {
+    const doc = await readHealthDoc();
+    const state = doc[channel];
+    if (!state || state.state !== "open")
+        return true;
+    if (state.openedAt && Date.now() - state.openedAt >= COOLDOWN_MS)
+        return true;
+    return false;
+}
+export async function recordChannelOutcome(channel, success) {
+    try {
+        const doc = await readHealthDoc();
+        const prev = doc[channel] ?? defaultState();
+        const next = success
+            ? defaultState()
+            : (() => {
+                const consecutiveFailures = prev.consecutiveFailures + 1;
+                return consecutiveFailures >= FAILURE_THRESHOLD
+                    ? { consecutiveFailures, state: "open", openedAt: Date.now() }
+                    : { consecutiveFailures, state: "closed" };
+            })();
+        await getAdminDb()
+            .collection(HEALTH_COLLECTION)
+            .doc(HEALTH_DOC)
+            .set({ [channel]: next }, { merge: true });
+    }
+    catch (err) {
+        void normalizeError(err);
+        serverLogger.warn("channel-health: failed to record outcome", { channel, success });
+    }
+}
+function delay(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+/**
+ * Runs `fn` up to 3 times (500ms then 1.5s between attempts) and records the
+ * final outcome against the channel's health state. `fn` must throw on
+ * failure — for a helper that returns a boolean instead (e.g. the WhatsApp
+ * Cloud API helpers), convert `false` into a thrown error at the call site
+ * before passing it in.
+ */
+export async function withChannelRetry(channel, fn) {
+    const maxAttempts = RETRY_DELAYS_MS.length + 1;
+    // Narrowed to Error at catch time rather than held as `unknown` — same
+    // conversion the throw below used to do, just done once at the source so
+    // `unknown` never escapes the catch clause (CLAUDE.md Root Cause #31).
+    let lastError;
+    for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+        try {
+            const result = await fn();
+            await recordChannelOutcome(channel, true);
+            return result;
+        }
+        catch (err) {
+            void normalizeError(err);
+            lastError = err instanceof Error ? err : new Error(String(err));
+            if (attempt < maxAttempts) {
+                await delay(RETRY_DELAYS_MS[attempt - 1]);
+            }
+        }
+    }
+    await recordChannelOutcome(channel, false);
+    throw lastError ?? new Error(`${channel} channel failed after ${maxAttempts} attempts`);
+}

package/dist/_internal/shared/features/brands/schema.d.ts

@@ -4,7 +4,6 @@ export declare const brandInputSchema: z.ZodObject<{
     slug: z.ZodString;
     description: z.ZodOptional<z.ZodString>;
     logoURL: z.ZodOptional<z.ZodString>;
-    bannerURL: z.ZodOptional<z.ZodString>;
     website: z.ZodOptional<z.ZodString>;
     country: z.ZodOptional<z.ZodString>;
     founded: z.ZodOptional<z.ZodNumber>;
@@ -18,7 +17,6 @@ export declare const brandInputSchema: z.ZodObject<{
     country?: string | undefined;
     description?: string | undefined;
     logoURL?: string | undefined;
-    bannerURL?: string | undefined;
     website?: string | undefined;
     founded?: number | undefined;
 }, {
@@ -29,7 +27,6 @@ export declare const brandInputSchema: z.ZodObject<{
     isActive?: boolean | undefined;
     displayOrder?: number | undefined;
     logoURL?: string | undefined;
-    bannerURL?: string | undefined;
     website?: string | undefined;
     founded?: number | undefined;
 }>;
@@ -38,7 +35,6 @@ export declare const brandUpdateSchema: z.ZodObject<Omit<{
     slug: z.ZodOptional<z.ZodString>;
     description: z.ZodOptional<z.ZodOptional<z.ZodString>>;
     logoURL: z.ZodOptional<z.ZodOptional<z.ZodString>>;
-    bannerURL: z.ZodOptional<z.ZodOptional<z.ZodString>>;
     website: z.ZodOptional<z.ZodOptional<z.ZodString>>;
     country: z.ZodOptional<z.ZodOptional<z.ZodString>>;
     founded: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
@@ -51,7 +47,6 @@ export declare const brandUpdateSchema: z.ZodObject<Omit<{
     isActive?: boolean | undefined;
     displayOrder?: number | undefined;
     logoURL?: string | undefined;
-    bannerURL?: string | undefined;
     website?: string | undefined;
     founded?: number | undefined;
 }, {
@@ -61,7 +56,6 @@ export declare const brandUpdateSchema: z.ZodObject<Omit<{
     isActive?: boolean | undefined;
     displayOrder?: number | undefined;
     logoURL?: string | undefined;
-    bannerURL?: string | undefined;
     website?: string | undefined;
     founded?: number | undefined;
 }>;

package/dist/_internal/shared/features/brands/schema.js

@@ -5,7 +5,6 @@ export const brandInputSchema = z.object({
     slug: z.string().min(1).regex(/^brand-[a-z0-9-]+$/, "Slug must start with 'brand-' and contain only lowercase letters, numbers, and hyphens"),
     description: z.string().max(BRAND_DESCRIPTION_MAX_LENGTH).optional(),
     logoURL: z.string().url().optional(),
-    bannerURL: z.string().url().optional(),
     website: z.string().url().optional(),
     country: z.string().optional(),
     founded: z.number().int().min(1800).max(new Date().getFullYear()).optional(),

package/dist/_internal/shared/features/categories/bundle-schemas.d.ts

@@ -81,6 +81,8 @@ export declare const bundleCreateSchema: z.ZodObject<{
      * "brand" — brand discovery collection; does not touch product reverse pointers.
      */
     bundleKind: z.ZodEnum<["special", "brand"]>;
+    /** Which brand this bundle belongs to, for the brand page's bundle tab — distinct from bundleQueryRule.filter.brandSlug (a dynamic-rule query filter). */
+    brandSlug: z.ZodOptional<z.ZodString>;
     bundlePrice: z.ZodNumber;
     bundleQueryRule: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
         type: z.ZodLiteral<"static">;
@@ -185,6 +187,7 @@ export declare const bundleCreateSchema: z.ZodObject<{
     } | undefined;
     description?: string | undefined;
     slug?: string | undefined;
+    brandSlug?: string | undefined;
     isActive?: boolean | undefined;
     bundleItemDetails?: {
         productId: string;
@@ -216,6 +219,7 @@ export declare const bundleCreateSchema: z.ZodObject<{
     } | undefined;
     description?: string | undefined;
     slug?: string | undefined;
+    brandSlug?: string | undefined;
     isActive?: boolean | undefined;
     bundleItemDetails?: {
         productId: string;
@@ -226,6 +230,7 @@ export declare const bundleUpdateSchema: z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
     description: z.ZodOptional<z.ZodString>;
     bundleKind: z.ZodOptional<z.ZodEnum<["special", "brand"]>>;
+    brandSlug: z.ZodOptional<z.ZodString>;
     bundlePrice: z.ZodOptional<z.ZodNumber>;
     bundleQueryRule: z.ZodOptional<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
         type: z.ZodLiteral<"static">;
@@ -311,6 +316,7 @@ export declare const bundleUpdateSchema: z.ZodObject<{
     } | undefined;
     name?: string | undefined;
     description?: string | undefined;
+    brandSlug?: string | undefined;
     isActive?: boolean | undefined;
     bundleKind?: "brand" | "special" | undefined;
     bundleProductIds?: string[] | undefined;
@@ -341,6 +347,7 @@ export declare const bundleUpdateSchema: z.ZodObject<{
     } | undefined;
     name?: string | undefined;
     description?: string | undefined;
+    brandSlug?: string | undefined;
     isActive?: boolean | undefined;
     bundleKind?: "brand" | "special" | undefined;
     bundleProductIds?: string[] | undefined;

package/dist/_internal/shared/features/categories/bundle-schemas.js

@@ -52,6 +52,8 @@ export const bundleCreateSchema = z.object({
      * "brand" — brand discovery collection; does not touch product reverse pointers.
      */
     bundleKind: z.enum([BUNDLE_KIND_SPECIAL, BUNDLE_KIND_BRAND]),
+    /** Which brand this bundle belongs to, for the brand page's bundle tab — distinct from bundleQueryRule.filter.brandSlug (a dynamic-rule query filter). */
+    brandSlug: z.string().optional(),
     bundlePrice: z.number().min(1),
     bundleQueryRule: bundleQueryRuleSchema,
     bundleProductIds: productIdsSchema,
@@ -64,6 +66,7 @@ export const bundleUpdateSchema = z.object({
     name: z.string().min(2).max(120).optional(),
     description: z.string().max(2000).optional(),
     bundleKind: z.enum([BUNDLE_KIND_SPECIAL, BUNDLE_KIND_BRAND]).optional(),
+    brandSlug: z.string().optional(),
     bundlePrice: z.number().min(1).optional(),
     bundleQueryRule: bundleQueryRuleSchema.optional(),
     bundleProductIds: productIdsSchema.optional(),

package/dist/_internal/shared/features/orders/schema.d.ts

@@ -45,11 +45,6 @@ export declare const createOrderSchema: z.ZodObject<{
     couponCode: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     paymentMethod: "upi" | "razorpay" | "cod";
-    items: {
-        price: number;
-        productId: string;
-        quantity: number;
-    }[];
     shippingAddress: {
         country: string;
         phone: string;
@@ -60,14 +55,14 @@ export declare const createOrderSchema: z.ZodObject<{
         pincode: string;
         addressLine2?: string | undefined;
     };
-    couponCode?: string | undefined;
-}, {
-    paymentMethod: "upi" | "razorpay" | "cod";
     items: {
         price: number;
         productId: string;
         quantity: number;
     }[];
+    couponCode?: string | undefined;
+}, {
+    paymentMethod: "upi" | "razorpay" | "cod";
     shippingAddress: {
         phone: string;
         city: string;
@@ -78,6 +73,11 @@ export declare const createOrderSchema: z.ZodObject<{
         country?: string | undefined;
         addressLine2?: string | undefined;
     };
+    items: {
+        price: number;
+        productId: string;
+        quantity: number;
+    }[];
     couponCode?: string | undefined;
 }>;
 export declare const updateOrderStatusSchema: z.ZodObject<{

package/dist/client.d.ts

@@ -39,6 +39,8 @@ export { Divider } from "./ui/components/Divider";
 export { Tabs, TabsList, TabsTrigger, TabsContent } from "./ui/components/Tabs";
 export type { TabsProps, TabsListProps, TabsTriggerProps, TabsContentProps } from "./ui/components/Tabs";
 export { SellerProductsView } from "./features/seller/components/SellerProductsView";
+export { SellerOrderDetailPanel } from "./features/seller/components/SellerOrdersView";
+export { SellerPayoutDetailContent } from "./features/seller/components/SellerPayoutsView";
 export { Drawer } from "./ui/components/Drawer";
 export { FilterDrawer } from "./ui/components/FilterDrawer";
 export { Modal } from "./ui/components/Modal";
@@ -122,6 +124,10 @@ export { ProgressBarFill } from "./ui/components/ProgressBarFill";
 export type { ProgressBarFillProps } from "./ui/components/ProgressBarFill";
 export { Main, Section, Nav, Ul, Ol, Li, Table, Thead, Tbody, Tr, Th, Td, Code, Pre, Blockquote } from "./ui/components/Semantic";
 export { Badge } from "./ui/components/Badge";
+export { Avatar, AvatarGroup } from "./ui/components/Avatar";
+export type { AvatarProps, AvatarGroupProps } from "./ui/components/Avatar";
+export { AvatarDisplay } from "./ui/components/AvatarDisplay";
+export type { AvatarDisplayProps } from "./ui/components/AvatarDisplay";
 export { Button } from "./ui/components/Button";
 export { ClaimCouponButton } from "./ui/components/ClaimCouponButton";
 export type { ClaimCouponButtonProps } from "./ui/components/ClaimCouponButton";
@@ -145,6 +151,8 @@ export type { FieldTextareaProps } from "./ui/forms";
 export { FieldTextarea } from "./ui/forms";
 export type { ColorPickerFieldProps } from "./ui/forms";
 export { ColorPickerField } from "./ui/forms";
+export type { FormErrorSummaryProps } from "./ui/forms";
+export { FormErrorSummary } from "./ui/forms";
 export { Select } from "./ui/components/Select";
 export type { SelectOption, SelectProps } from "./ui/components/Select";
 export { Heading } from "./ui/components/Typography";
@@ -168,7 +176,7 @@ export type { ZodSetupProps } from "./validation/ZodSetup";
 export { AdminSidebar } from "./features/admin/components/AdminSidebar";
 export type { AdminSidebarProps, AdminNavItem, AdminNavGroup } from "./features/admin/components/AdminSidebar";
 export { AdminDashboardView, AdminAnalyticsView, AdminPageViewsReportView, AdminPrizeDrawsView, AdminCarouselView, AdminSublistingCategoriesView, AdminFulfillmentView, DataTable, DataListingView, useAdminListingData, toRecordArray, toStringValue, toRelativeDate } from "./features/admin/index";
-export type { AdminDashboardViewProps, AdminAnalyticsViewProps, AdminAnalyticsViewLabels, AdminPageViewsReportViewProps, AdminPrizeDrawsViewProps, AdminCarouselViewProps, AdminFulfillmentViewProps, AdminListingScaffoldRow, ListingViewConfig } from "./features/admin/index";
+export type { AdminDashboardViewProps, AdminAnalyticsViewProps, AdminAnalyticsViewLabels, AdminPrizeDrawsViewProps, AdminCarouselViewProps, AdminFulfillmentViewProps, AdminListingScaffoldRow, ListingViewConfig } from "./features/admin/index";
 export type { BulkActionItem } from "./ui/components/BulkActionBar";
 export { PERMISSION_GROUPS, PERMISSION_DOMAINS, getPermissionsForDomain, formatPermLabel } from "./features/auth/permissions/constants";
 export { ADMIN_ENDPOINTS } from "./constants/index";
@@ -195,8 +203,8 @@ export { AuctionBidsTable } from "./features/auctions/components/AuctionBidsTabl
 export type { AuctionBidsTableProps, AuctionWithBids } from "./features/auctions/components/AuctionBidsTable";
 export { ProtectedRoute, AuthStatusPanel, ForgotPasswordView, LoginForm, RegisterForm, ResetPasswordView, VerifyEmailView } from "./features/auth/index";
 export type { AuthGuardUser, ForgotPasswordViewProps, LoginFormProps, LoginFormValues, RegisterFormProps, RegisterFormValues, ResetPasswordViewProps, VerifyEmailViewProps, } from "./features/auth/index";
-export { useLogout, useLogin, useGoogleLogin, useLinkGoogleAccount, useRegister, useForgotPassword, useResetPassword, useVerifyEmail, useChangePassword, useRequestPasswordChangeOtp, useVerifyPasswordChangeOtp, useChangeEmail } from "./features/auth/index";
-export type { LoginCredentials, RegisterData, ForgotPasswordData, ResetPasswordData, VerifyEmailData, ChangePasswordData, ChangeEmailData } from "./features/auth/index";
+export { useLogout, useLogin, useGoogleLogin, useLinkGoogleAccount, useRegister, useForgotPassword, useResetPassword, useVerifyEmail, useChangeEmail } from "./features/auth/index";
+export type { LoginCredentials, RegisterData, ForgotPasswordData, ResetPasswordData, VerifyEmailData, ChangeEmailData } from "./features/auth/index";
 export { CartView, CartItemRow, CartSummary, CartDrawer, CheckoutView, CheckoutSuccessView, CheckoutAddressStep, useGuestCart, useCartCount, useAddToCart, useCart, useGuestCartMerge, useCartQuery } from "./features/cart/index";
 export { getCartOps, CART_OPS_CHANGE_EVENT } from "./features/cart/utils/pending-ops";
 export type { CartOp } from "./features/cart/utils/pending-ops";
@@ -283,9 +291,15 @@ export type { SellerDashboardViewProps as StoreDashboardViewProps, SellerDashboa
 export { SellerPayoutSettingsView, SellerShippingView, SellerReviewsView, SellerPayoutRequestView, SellerAnalyticsStats, SellerTopProducts, SellerAnalyticsView, SellerPayoutsView, SellerCouponEditorView, SellerBidsView, SellerAddressesView, SellerPreOrdersView, SellerPrizeDrawsView, PrintCenterView, SellerOffersView, SellerGroupedListingsView, StoreGroupedListingsView, SellerAnalyticsAlertsView, StoreAnalyticsAlertsView, BarcodeField, FulfillmentView } from "./features/seller/components/index";
 export type { SellerPayoutSettingsViewProps, SellerShippingViewProps, SellerReviewsViewProps, SellerPayoutRequestViewProps, SellerAnalyticsViewProps, SellerPayoutsViewProps, SellerCouponEditorViewProps, CouponEditorDraft, SellerBidsViewProps, SellerAddressesViewProps, SellerPreOrdersViewProps, SellerPrizeDrawsViewProps, SellerOffersViewProps, SellerGroupedListingsViewProps, SellerAnalyticsAlertsViewProps, BarcodeFieldProps, FulfillmentViewProps } from "./features/seller/components/index";
 export type { SellerAnalyticsSummary, SellerAnalyticsTopProduct } from "./features/seller/types/index";
-export { UserAccountHubView, UserOrdersView, OrderDetailView, UserNotificationsView, UserReturnsView, UserSupportView, useNotifications } from "./features/account/index";
-export type { UserAccountHubViewProps, UserAccountHubViewLabels, UserOrdersViewProps, UserOrdersViewLabels, OrderDetailViewProps, OrderDetailViewLabels, UserNotificationsViewProps, UserNotificationsViewLabels, UserReturnsViewProps, UserReturnsViewLabels, UserSupportViewProps } from "./features/account/index";
+export { UserAccountHubView, UserOrdersView, UserBidsView, OrderDetailView, UserNotificationsView, UserReturnsView, UserSupportView, useNotifications } from "./features/account/index";
+export type { UserAccountHubViewProps, UserAccountHubViewLabels, UserOrdersViewProps, OrderDetailViewProps, OrderDetailViewLabels, UserNotificationsViewProps, UserNotificationsViewLabels, UserReturnsViewProps, UserSupportViewProps } from "./features/account/index";
 export { useOrders, useOrder, OrdersList } from "./features/orders/index";
+export { OrderStatusTimeline } from "./features/orders/components/OrderStatusTimeline";
+export type { OrderStatusTimelineProps } from "./features/orders/components/OrderStatusTimeline";
+export { MANUAL_PAYMENT_METHODS, isManualPaymentMethod, PAYMENT_REVIEW_QUEUE_MODES, isPaymentReviewQueueMode, PAYMENT_WINDOW_MINUTES, } from "./features/orders/constants/payment-window";
+export type { PaymentReviewQueueMode } from "./features/orders/constants/payment-window";
+export { UserOrderTrackView } from "./features/account/components/UserOrderTrackView";
+export type { UserOrderTrackViewProps, UserOrderTrackViewLabels } from "./features/account/components/UserOrderTrackView";
 export { useCouponValidate } from "./features/promotions/hooks/useCouponValidate";
 export { BlogPostView } from "./features/blog/components/BlogPostView";
 export type { BlogPostViewProps } from "./features/blog/components/BlogPostView";
@@ -366,7 +380,8 @@ export type { PaymentProofReviewMessageInput } from "./features/whatsapp-bot/typ
 export type { AdminNotificationDocument, ItemRequestDocument, ModerationQueueDocument, ReportDocument, CustomRoleDocument, AnalyticsCardDocument, ListingTemplateDocument, } from "./features/store-extensions/index";
 export { CommandPalette, useCommandPaletteHotkey } from "./features/shell/index";
 export type { CommandPaletteGroup } from "./features/shell/index";
-export { AdminBlogEditorView, AdminBundleEditorView, AdminCarouselEditorView, AdminCategoryEditorView, AdminCouponEditorView, AdminFaqEditorView, AdminOrderEditorView, AdminProductEditorView, AdminScammerEditorView, AdminSublistingCategoryEditorView, AdminSupportTicketDetailView, } from "./features/admin/index";
+export { AdminBlogEditorView, AdminBundleEditorView, AdminCarouselEditorView, AdminCategoryEditorView, AdminCouponEditorView, AdminFaqEditorView, AdminOrderEditorView, AdminPayoutMarkPaidModal, AdminAuditLogView, ViewAuditLogEntryModal, AdminProductEditorView, AdminScammerEditorView, AdminStoreEditorView, AdminSublistingCategoryEditorView, AdminSupportTicketDetailView, } from "./features/admin/index";
+export type { AdminStoreEditorViewProps, AdminPayoutMarkPaidModalProps, AdminAuditLogViewProps, AuditLogEntryDetail, ViewAuditLogEntryModalProps } from "./features/admin/index";
 export { ADMIN_CHECKOUT_BYPASS_FLAG_KEY } from "./features/admin/schemas/firestore";
 export { SpinWheelView, EventRaffleEntryForm } from "./features/events/index";
 export { Card, CardBody } from "./ui/index";