@mohasinac/appkit 4.10.0 → 4.11.1

package/dist/_internal/shared/features/orders/schema.d.ts

@@ -45,11 +45,6 @@ export declare const createOrderSchema: z.ZodObject<{
     couponCode: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     paymentMethod: "upi" | "razorpay" | "cod";
-    items: {
-        price: number;
-        productId: string;
-        quantity: number;
-    }[];
     shippingAddress: {
         country: string;
         phone: string;
@@ -60,14 +55,14 @@ export declare const createOrderSchema: z.ZodObject<{
         pincode: string;
         addressLine2?: string | undefined;
     };
-    couponCode?: string | undefined;
-}, {
-    paymentMethod: "upi" | "razorpay" | "cod";
     items: {
         price: number;
         productId: string;
         quantity: number;
     }[];
+    couponCode?: string | undefined;
+}, {
+    paymentMethod: "upi" | "razorpay" | "cod";
     shippingAddress: {
         phone: string;
         city: string;
@@ -78,6 +73,11 @@ export declare const createOrderSchema: z.ZodObject<{
         country?: string | undefined;
         addressLine2?: string | undefined;
     };
+    items: {
+        price: number;
+        productId: string;
+        quantity: number;
+    }[];
     couponCode?: string | undefined;
 }>;
 export declare const updateOrderStatusSchema: z.ZodObject<{

package/dist/_internal/shared/features/products/to-product-item.d.ts

@@ -0,0 +1,25 @@
+/**
+ * toProductItem — Firestore doc → card-grid `ProductItem` mapper.
+ *
+ * Lives in `_internal/shared/` (client+server safe), NOT in
+ * `_internal/server/features/products/data.ts` where it was originally
+ * written. It is a pure field mapping with no server dependencies of its
+ * own, but `data.ts` transitively reaches `providers/db-firebase/admin.js`
+ * (firebase-admin), and `GroupedListingsCarousel.tsx` is a `"use client"`
+ * component that imports this function as a VALUE. Turbopack resolves a
+ * module's full static import graph before tree-shaking, so that single
+ * import dragged the whole firebase-admin chain into the client bundle and
+ * failed the production build outright:
+ *
+ *   Module not found: .../providers/db-firebase/admin.js
+ *     [Client Component Browser] → GroupedListingsCarousel
+ *     → _internal/server/features/products/data.js
+ *
+ * This is the Turbopack client-bundle trap from CLAUDE.md's appkit Export
+ * Rules / Recurrent Root Cause #6, reached through an ordinary deep import
+ * rather than a barrel. Keep this file free of any server-only import so a
+ * client component can always call it directly.
+ */
+import type { FirestoreDocument } from "../../../../schemas/types";
+import type { ProductItem } from "../../../../features/products/types";
+export declare function toProductItem(doc: FirestoreDocument): ProductItem;

package/dist/_internal/shared/features/products/to-product-item.js

@@ -0,0 +1,45 @@
+/**
+ * toProductItem — Firestore doc → card-grid `ProductItem` mapper.
+ *
+ * Lives in `_internal/shared/` (client+server safe), NOT in
+ * `_internal/server/features/products/data.ts` where it was originally
+ * written. It is a pure field mapping with no server dependencies of its
+ * own, but `data.ts` transitively reaches `providers/db-firebase/admin.js`
+ * (firebase-admin), and `GroupedListingsCarousel.tsx` is a `"use client"`
+ * component that imports this function as a VALUE. Turbopack resolves a
+ * module's full static import graph before tree-shaking, so that single
+ * import dragged the whole firebase-admin chain into the client bundle and
+ * failed the production build outright:
+ *
+ *   Module not found: .../providers/db-firebase/admin.js
+ *     [Client Component Browser] → GroupedListingsCarousel
+ *     → _internal/server/features/products/data.js
+ *
+ * This is the Turbopack client-bundle trap from CLAUDE.md's appkit Export
+ * Rules / Recurrent Root Cause #6, reached through an ordinary deep import
+ * rather than a barrel. Keep this file free of any server-only import so a
+ * client component can always call it directly.
+ */
+export function toProductItem(doc) {
+    return {
+        id: String(doc.id ?? ""),
+        title: String(doc.title ?? doc.name ?? ""),
+        price: typeof doc.price === "number" ? doc.price : 0,
+        originalPrice: typeof doc.originalPrice === "number" ? doc.originalPrice : undefined,
+        mainImage: Array.isArray(doc.images)
+            ? doc.images[0]
+            : typeof doc.mainImage === "string"
+                ? doc.mainImage
+                : undefined,
+        status: doc.status ?? "published",
+        slug: typeof doc.slug === "string" ? doc.slug : undefined,
+        storeName: typeof doc.storeName === "string" ? doc.storeName : undefined,
+        rating: typeof doc.rating === "number" ? doc.rating : undefined,
+        reviewCount: typeof doc.reviewCount === "number" ? doc.reviewCount : undefined,
+        // Without this, every related-item card silently linked to the standard
+        // PDP regardless of its real type (pluginFor() defaults to "standard"
+        // when listingType is missing) — same bug class as the Phase 1 routing
+        // fix, one hop further downstream in the related-items card link path.
+        listingType: doc.listingType ?? undefined,
+    };
+}

package/dist/client.d.ts

@@ -39,6 +39,8 @@ export { Divider } from "./ui/components/Divider";
 export { Tabs, TabsList, TabsTrigger, TabsContent } from "./ui/components/Tabs";
 export type { TabsProps, TabsListProps, TabsTriggerProps, TabsContentProps } from "./ui/components/Tabs";
 export { SellerProductsView } from "./features/seller/components/SellerProductsView";
+export { SellerOrderDetailPanel } from "./features/seller/components/SellerOrdersView";
+export { SellerPayoutDetailContent } from "./features/seller/components/SellerPayoutsView";
 export { Drawer } from "./ui/components/Drawer";
 export { FilterDrawer } from "./ui/components/FilterDrawer";
 export { Modal } from "./ui/components/Modal";
@@ -122,6 +124,10 @@ export { ProgressBarFill } from "./ui/components/ProgressBarFill";
 export type { ProgressBarFillProps } from "./ui/components/ProgressBarFill";
 export { Main, Section, Nav, Ul, Ol, Li, Table, Thead, Tbody, Tr, Th, Td, Code, Pre, Blockquote } from "./ui/components/Semantic";
 export { Badge } from "./ui/components/Badge";
+export { Avatar, AvatarGroup } from "./ui/components/Avatar";
+export type { AvatarProps, AvatarGroupProps } from "./ui/components/Avatar";
+export { AvatarDisplay } from "./ui/components/AvatarDisplay";
+export type { AvatarDisplayProps } from "./ui/components/AvatarDisplay";
 export { Button } from "./ui/components/Button";
 export { ClaimCouponButton } from "./ui/components/ClaimCouponButton";
 export type { ClaimCouponButtonProps } from "./ui/components/ClaimCouponButton";
@@ -145,6 +151,8 @@ export type { FieldTextareaProps } from "./ui/forms";
 export { FieldTextarea } from "./ui/forms";
 export type { ColorPickerFieldProps } from "./ui/forms";
 export { ColorPickerField } from "./ui/forms";
+export type { FormErrorSummaryProps } from "./ui/forms";
+export { FormErrorSummary } from "./ui/forms";
 export { Select } from "./ui/components/Select";
 export type { SelectOption, SelectProps } from "./ui/components/Select";
 export { Heading } from "./ui/components/Typography";
@@ -168,7 +176,7 @@ export type { ZodSetupProps } from "./validation/ZodSetup";
 export { AdminSidebar } from "./features/admin/components/AdminSidebar";
 export type { AdminSidebarProps, AdminNavItem, AdminNavGroup } from "./features/admin/components/AdminSidebar";
 export { AdminDashboardView, AdminAnalyticsView, AdminPageViewsReportView, AdminPrizeDrawsView, AdminCarouselView, AdminSublistingCategoriesView, AdminFulfillmentView, DataTable, DataListingView, useAdminListingData, toRecordArray, toStringValue, toRelativeDate } from "./features/admin/index";
-export type { AdminDashboardViewProps, AdminAnalyticsViewProps, AdminAnalyticsViewLabels, AdminPageViewsReportViewProps, AdminPrizeDrawsViewProps, AdminCarouselViewProps, AdminFulfillmentViewProps, AdminListingScaffoldRow, ListingViewConfig } from "./features/admin/index";
+export type { AdminDashboardViewProps, AdminAnalyticsViewProps, AdminAnalyticsViewLabels, AdminPrizeDrawsViewProps, AdminCarouselViewProps, AdminFulfillmentViewProps, AdminListingScaffoldRow, ListingViewConfig } from "./features/admin/index";
 export type { BulkActionItem } from "./ui/components/BulkActionBar";
 export { PERMISSION_GROUPS, PERMISSION_DOMAINS, getPermissionsForDomain, formatPermLabel } from "./features/auth/permissions/constants";
 export { ADMIN_ENDPOINTS } from "./constants/index";
@@ -195,8 +203,8 @@ export { AuctionBidsTable } from "./features/auctions/components/AuctionBidsTabl
 export type { AuctionBidsTableProps, AuctionWithBids } from "./features/auctions/components/AuctionBidsTable";
 export { ProtectedRoute, AuthStatusPanel, ForgotPasswordView, LoginForm, RegisterForm, ResetPasswordView, VerifyEmailView } from "./features/auth/index";
 export type { AuthGuardUser, ForgotPasswordViewProps, LoginFormProps, LoginFormValues, RegisterFormProps, RegisterFormValues, ResetPasswordViewProps, VerifyEmailViewProps, } from "./features/auth/index";
-export { useLogout, useLogin, useGoogleLogin, useLinkGoogleAccount, useRegister, useForgotPassword, useResetPassword, useVerifyEmail, useChangePassword, useRequestPasswordChangeOtp, useVerifyPasswordChangeOtp, useChangeEmail } from "./features/auth/index";
-export type { LoginCredentials, RegisterData, ForgotPasswordData, ResetPasswordData, VerifyEmailData, ChangePasswordData, ChangeEmailData } from "./features/auth/index";
+export { useLogout, useLogin, useGoogleLogin, useLinkGoogleAccount, useRegister, useForgotPassword, useResetPassword, useVerifyEmail, useChangeEmail } from "./features/auth/index";
+export type { LoginCredentials, RegisterData, ForgotPasswordData, ResetPasswordData, VerifyEmailData, ChangeEmailData } from "./features/auth/index";
 export { CartView, CartItemRow, CartSummary, CartDrawer, CheckoutView, CheckoutSuccessView, CheckoutAddressStep, useGuestCart, useCartCount, useAddToCart, useCart, useGuestCartMerge, useCartQuery } from "./features/cart/index";
 export { getCartOps, CART_OPS_CHANGE_EVENT } from "./features/cart/utils/pending-ops";
 export type { CartOp } from "./features/cart/utils/pending-ops";
@@ -283,9 +291,15 @@ export type { SellerDashboardViewProps as StoreDashboardViewProps, SellerDashboa
 export { SellerPayoutSettingsView, SellerShippingView, SellerReviewsView, SellerPayoutRequestView, SellerAnalyticsStats, SellerTopProducts, SellerAnalyticsView, SellerPayoutsView, SellerCouponEditorView, SellerBidsView, SellerAddressesView, SellerPreOrdersView, SellerPrizeDrawsView, PrintCenterView, SellerOffersView, SellerGroupedListingsView, StoreGroupedListingsView, SellerAnalyticsAlertsView, StoreAnalyticsAlertsView, BarcodeField, FulfillmentView } from "./features/seller/components/index";
 export type { SellerPayoutSettingsViewProps, SellerShippingViewProps, SellerReviewsViewProps, SellerPayoutRequestViewProps, SellerAnalyticsViewProps, SellerPayoutsViewProps, SellerCouponEditorViewProps, CouponEditorDraft, SellerBidsViewProps, SellerAddressesViewProps, SellerPreOrdersViewProps, SellerPrizeDrawsViewProps, SellerOffersViewProps, SellerGroupedListingsViewProps, SellerAnalyticsAlertsViewProps, BarcodeFieldProps, FulfillmentViewProps } from "./features/seller/components/index";
 export type { SellerAnalyticsSummary, SellerAnalyticsTopProduct } from "./features/seller/types/index";
-export { UserAccountHubView, UserOrdersView, OrderDetailView, UserNotificationsView, UserReturnsView, UserSupportView, useNotifications } from "./features/account/index";
-export type { UserAccountHubViewProps, UserAccountHubViewLabels, UserOrdersViewProps, UserOrdersViewLabels, OrderDetailViewProps, OrderDetailViewLabels, UserNotificationsViewProps, UserNotificationsViewLabels, UserReturnsViewProps, UserReturnsViewLabels, UserSupportViewProps } from "./features/account/index";
+export { UserAccountHubView, UserOrdersView, UserBidsView, OrderDetailView, UserNotificationsView, UserReturnsView, UserSupportView, useNotifications } from "./features/account/index";
+export type { UserAccountHubViewProps, UserAccountHubViewLabels, UserOrdersViewProps, OrderDetailViewProps, OrderDetailViewLabels, UserNotificationsViewProps, UserNotificationsViewLabels, UserReturnsViewProps, UserSupportViewProps } from "./features/account/index";
 export { useOrders, useOrder, OrdersList } from "./features/orders/index";
+export { OrderStatusTimeline } from "./features/orders/components/OrderStatusTimeline";
+export type { OrderStatusTimelineProps } from "./features/orders/components/OrderStatusTimeline";
+export { MANUAL_PAYMENT_METHODS, isManualPaymentMethod, PAYMENT_REVIEW_QUEUE_MODES, isPaymentReviewQueueMode, PAYMENT_WINDOW_MINUTES, } from "./features/orders/constants/payment-window";
+export type { PaymentReviewQueueMode } from "./features/orders/constants/payment-window";
+export { UserOrderTrackView } from "./features/account/components/UserOrderTrackView";
+export type { UserOrderTrackViewProps, UserOrderTrackViewLabels } from "./features/account/components/UserOrderTrackView";
 export { useCouponValidate } from "./features/promotions/hooks/useCouponValidate";
 export { BlogPostView } from "./features/blog/components/BlogPostView";
 export type { BlogPostViewProps } from "./features/blog/components/BlogPostView";
@@ -366,7 +380,8 @@ export type { PaymentProofReviewMessageInput } from "./features/whatsapp-bot/typ
 export type { AdminNotificationDocument, ItemRequestDocument, ModerationQueueDocument, ReportDocument, CustomRoleDocument, AnalyticsCardDocument, ListingTemplateDocument, } from "./features/store-extensions/index";
 export { CommandPalette, useCommandPaletteHotkey } from "./features/shell/index";
 export type { CommandPaletteGroup } from "./features/shell/index";
-export { AdminBlogEditorView, AdminBundleEditorView, AdminCarouselEditorView, AdminCategoryEditorView, AdminCouponEditorView, AdminFaqEditorView, AdminOrderEditorView, AdminProductEditorView, AdminScammerEditorView, AdminSublistingCategoryEditorView, AdminSupportTicketDetailView, } from "./features/admin/index";
+export { AdminBlogEditorView, AdminBundleEditorView, AdminCarouselEditorView, AdminCategoryEditorView, AdminCouponEditorView, AdminFaqEditorView, AdminOrderEditorView, AdminPayoutMarkPaidModal, AdminAuditLogView, ViewAuditLogEntryModal, AdminProductEditorView, AdminScammerEditorView, AdminStoreEditorView, AdminSublistingCategoryEditorView, AdminSupportTicketDetailView, } from "./features/admin/index";
+export type { AdminStoreEditorViewProps, AdminPayoutMarkPaidModalProps, AdminAuditLogViewProps, AuditLogEntryDetail, ViewAuditLogEntryModalProps } from "./features/admin/index";
 export { ADMIN_CHECKOUT_BYPASS_FLAG_KEY } from "./features/admin/schemas/firestore";
 export { SpinWheelView, EventRaffleEntryForm } from "./features/events/index";
 export { Card, CardBody } from "./ui/index";

package/dist/client.js

@@ -52,6 +52,8 @@ export { Alert } from "./ui/components/Alert";
 export { Divider } from "./ui/components/Divider";
 export { Tabs, TabsList, TabsTrigger, TabsContent } from "./ui/components/Tabs";
 export { SellerProductsView } from "./features/seller/components/SellerProductsView";
+export { SellerOrderDetailPanel } from "./features/seller/components/SellerOrdersView";
+export { SellerPayoutDetailContent } from "./features/seller/components/SellerPayoutsView";
 // [CLIENT-ONLY]-Cannot run in SSR mode â€" uses browser-only APIs (window, navigator, localStorage, matchMedia, DOM events) that do not exist in Node.js.
 // Drawer - Component for drawer.
 export { Drawer } from "./ui/components/Drawer";
@@ -186,6 +188,8 @@ export { DynamicBgDiv } from "./ui/components/DynamicBgDiv";
 export { ProgressBarFill } from "./ui/components/ProgressBarFill";
 export { Main, Section, Nav, Ul, Ol, Li, Table, Thead, Tbody, Tr, Th, Td, Code, Pre, Blockquote } from "./ui/components/Semantic";
 export { Badge } from "./ui/components/Badge";
+export { Avatar, AvatarGroup } from "./ui/components/Avatar";
+export { AvatarDisplay } from "./ui/components/AvatarDisplay";
 export { Button } from "./ui/components/Button";
 export { ClaimCouponButton } from "./ui/components/ClaimCouponButton";
 export { Checkbox } from "./ui/components/Checkbox";
@@ -199,6 +203,7 @@ export { FieldSelect } from "./ui/forms";
 export { FieldCheckbox } from "./ui/forms";
 export { FieldTextarea } from "./ui/forms";
 export { ColorPickerField } from "./ui/forms";
+export { FormErrorSummary } from "./ui/forms";
 export { Select } from "./ui/components/Select";
 export { Heading } from "./ui/components/Typography";
 export { Label, Text, Span, Caption } from "./ui/components/Typography";
@@ -231,7 +236,7 @@ export { PageViewTracker } from "./features/analytics/components/PageViewTracker
 export { PAGE_VIEW_ENTITY_TYPES } from "./features/analytics/types";
 export { AuctionBidsTable } from "./features/auctions/components/AuctionBidsTable";
 export { ProtectedRoute, AuthStatusPanel, ForgotPasswordView, LoginForm, RegisterForm, ResetPasswordView, VerifyEmailView } from "./features/auth/index";
-export { useLogout, useLogin, useGoogleLogin, useLinkGoogleAccount, useRegister, useForgotPassword, useResetPassword, useVerifyEmail, useChangePassword, useRequestPasswordChangeOtp, useVerifyPasswordChangeOtp, useChangeEmail } from "./features/auth/index";
+export { useLogout, useLogin, useGoogleLogin, useLinkGoogleAccount, useRegister, useForgotPassword, useResetPassword, useVerifyEmail, useChangeEmail } from "./features/auth/index";
 export { CartView, CartItemRow, CartSummary, CartDrawer, CheckoutView, CheckoutSuccessView, CheckoutAddressStep, useGuestCart, useCartCount, useAddToCart, useCart, useGuestCartMerge, useCartQuery } from "./features/cart/index";
 export { getCartOps, CART_OPS_CHANGE_EVENT } from "./features/cart/utils/pending-ops";
 export { useAddresses, useCreateAddress, useUpdateAddress, useDeleteAddress, useSetDefaultAddress, useAddress } from "./features/account/index";
@@ -290,8 +295,13 @@ export { SellerOffersPanel } from "./features/seller/components/SellerOffersPane
 export { UserOffersPanel } from "./features/account/components/UserOffersPanel";
 export { SellerDashboardView as StoreDashboardView, SellerDashboardView, useSellerDashboard as useStoreDashboard, useSellerDashboard } from "./features/seller/index";
 export { SellerPayoutSettingsView, SellerShippingView, SellerReviewsView, SellerPayoutRequestView, SellerAnalyticsStats, SellerTopProducts, SellerAnalyticsView, SellerPayoutsView, SellerCouponEditorView, SellerBidsView, SellerAddressesView, SellerPreOrdersView, SellerPrizeDrawsView, PrintCenterView, SellerOffersView, SellerGroupedListingsView, StoreGroupedListingsView, SellerAnalyticsAlertsView, StoreAnalyticsAlertsView, BarcodeField, FulfillmentView } from "./features/seller/components/index";
-export { UserAccountHubView, UserOrdersView, OrderDetailView, UserNotificationsView, UserReturnsView, UserSupportView, useNotifications } from "./features/account/index";
+export { UserAccountHubView, UserOrdersView, UserBidsView, OrderDetailView, UserNotificationsView, UserReturnsView, UserSupportView, useNotifications } from "./features/account/index";
 export { useOrders, useOrder, OrdersList } from "./features/orders/index";
+export { OrderStatusTimeline } from "./features/orders/components/OrderStatusTimeline";
+// Manual-payment (cash / UPI / EMI) shared constants — pure data + predicates,
+// no server deps. Used by the buyer proof-upload page and order-detail CTAs.
+export { MANUAL_PAYMENT_METHODS, isManualPaymentMethod, PAYMENT_REVIEW_QUEUE_MODES, isPaymentReviewQueueMode, PAYMENT_WINDOW_MINUTES, } from "./features/orders/constants/payment-window";
+export { UserOrderTrackView } from "./features/account/components/UserOrderTrackView";
 export { useCouponValidate } from "./features/promotions/hooks/useCouponValidate";
 export { BlogPostView } from "./features/blog/components/BlogPostView";
 export { BlogCard, BlogCategoryTabs, BlogListView } from "./features/blog/components/BlogListView";
@@ -360,7 +370,7 @@ export { normalizeError, getErrorMessage, isApiNormalized, isAppNormalized, isFi
 // never touches the sibling crypto-importing helpers.
 export { buildPaymentProofReviewMessage } from "./features/whatsapp-bot/helpers/payment-proof-message";
 export { CommandPalette, useCommandPaletteHotkey } from "./features/shell/index";
-export { AdminBlogEditorView, AdminBundleEditorView, AdminCarouselEditorView, AdminCategoryEditorView, AdminCouponEditorView, AdminFaqEditorView, AdminOrderEditorView, AdminProductEditorView, AdminScammerEditorView, AdminSublistingCategoryEditorView, AdminSupportTicketDetailView, } from "./features/admin/index";
+export { AdminBlogEditorView, AdminBundleEditorView, AdminCarouselEditorView, AdminCategoryEditorView, AdminCouponEditorView, AdminFaqEditorView, AdminOrderEditorView, AdminPayoutMarkPaidModal, AdminAuditLogView, ViewAuditLogEntryModal, AdminProductEditorView, AdminScammerEditorView, AdminStoreEditorView, AdminSublistingCategoryEditorView, AdminSupportTicketDetailView, } from "./features/admin/index";
 export { ADMIN_CHECKOUT_BYPASS_FLAG_KEY } from "./features/admin/schemas/firestore";
 export { SpinWheelView, EventRaffleEntryForm } from "./features/events/index";
 export { Card, CardBody } from "./ui/index";

package/dist/constants/api-endpoints.d.ts

@@ -31,9 +31,6 @@ export declare const ACCOUNT_ENDPOINTS: {
     /** @param userId — Firestore user document id */
     readonly BY_ID: (userId: string) => string;
     readonly PROFILE: "/api/user/profile";
-    readonly CHANGE_PASSWORD: "/api/user/change-password";
-    readonly CHANGE_PASSWORD_OTP_REQUEST: "/api/user/change-password/otp/request";
-    readonly CHANGE_PASSWORD_OTP_VERIFY: "/api/user/change-password/otp/verify";
     /** @param userId — for public profile pages */
     readonly PUBLIC_PROFILE: (userId: string) => string;
     /** @param userId — seller profile page */
@@ -134,6 +131,8 @@ export declare const ADMIN_ENDPOINTS: {
     readonly PAYOUT_BY_ID: (id: string) => string;
     readonly PAYOUTS_WEEKLY: "/api/admin/payouts/weekly";
     readonly PAYOUTS_EXPORT: "/api/admin/payouts/export";
+    readonly AUDIT_LOG: "/api/admin/audit-log";
+    readonly AUDIT_LOG_BY_ID: (id: string) => string;
     readonly SHIPMENTS: "/api/admin/shipments";
     readonly SHIPMENT_BY_ID: (id: string) => string;
     readonly SHIPMENT_LOTS: (id: string) => string;
@@ -484,9 +483,6 @@ export declare const API_ENDPOINTS: {
         /** @param userId — Firestore user document id */
         readonly BY_ID: (userId: string) => string;
         readonly PROFILE: "/api/user/profile";
-        readonly CHANGE_PASSWORD: "/api/user/change-password";
-        readonly CHANGE_PASSWORD_OTP_REQUEST: "/api/user/change-password/otp/request";
-        readonly CHANGE_PASSWORD_OTP_VERIFY: "/api/user/change-password/otp/verify";
         /** @param userId — for public profile pages */
         readonly PUBLIC_PROFILE: (userId: string) => string;
         /** @param userId — seller profile page */
@@ -587,6 +583,8 @@ export declare const API_ENDPOINTS: {
         readonly PAYOUT_BY_ID: (id: string) => string;
         readonly PAYOUTS_WEEKLY: "/api/admin/payouts/weekly";
         readonly PAYOUTS_EXPORT: "/api/admin/payouts/export";
+        readonly AUDIT_LOG: "/api/admin/audit-log";
+        readonly AUDIT_LOG_BY_ID: (id: string) => string;
         readonly SHIPMENTS: "/api/admin/shipments";
         readonly SHIPMENT_BY_ID: (id: string) => string;
         readonly SHIPMENT_LOTS: (id: string) => string;
@@ -939,9 +937,6 @@ export declare const API_ROUTES: {
         /** @param userId — Firestore user document id */
         readonly BY_ID: (userId: string) => string;
         readonly PROFILE: "/api/user/profile";
-        readonly CHANGE_PASSWORD: "/api/user/change-password";
-        readonly CHANGE_PASSWORD_OTP_REQUEST: "/api/user/change-password/otp/request";
-        readonly CHANGE_PASSWORD_OTP_VERIFY: "/api/user/change-password/otp/verify";
         /** @param userId — for public profile pages */
         readonly PUBLIC_PROFILE: (userId: string) => string;
         /** @param userId — seller profile page */
@@ -1042,6 +1037,8 @@ export declare const API_ROUTES: {
         readonly PAYOUT_BY_ID: (id: string) => string;
         readonly PAYOUTS_WEEKLY: "/api/admin/payouts/weekly";
         readonly PAYOUTS_EXPORT: "/api/admin/payouts/export";
+        readonly AUDIT_LOG: "/api/admin/audit-log";
+        readonly AUDIT_LOG_BY_ID: (id: string) => string;
         readonly SHIPMENTS: "/api/admin/shipments";
         readonly SHIPMENT_BY_ID: (id: string) => string;
         readonly SHIPMENT_LOTS: (id: string) => string;

package/dist/constants/api-endpoints.js

@@ -46,9 +46,6 @@ export const ACCOUNT_ENDPOINTS = {
     /** @param userId — Firestore user document id */
     BY_ID: (userId) => `/api/account/${userId}`,
     PROFILE: "/api/user/profile",
-    CHANGE_PASSWORD: "/api/user/change-password",
-    CHANGE_PASSWORD_OTP_REQUEST: "/api/user/change-password/otp/request",
-    CHANGE_PASSWORD_OTP_VERIFY: "/api/user/change-password/otp/verify",
     /** @param userId — for public profile pages */
     PUBLIC_PROFILE: (userId) => `/api/profile/${userId}`,
     /** @param userId — seller profile page */
@@ -161,6 +158,8 @@ export const ADMIN_ENDPOINTS = {
     PAYOUT_BY_ID: (id) => `/api/admin/payouts/${id}`,
     PAYOUTS_WEEKLY: "/api/admin/payouts/weekly",
     PAYOUTS_EXPORT: "/api/admin/payouts/export",
+    AUDIT_LOG: "/api/admin/audit-log",
+    AUDIT_LOG_BY_ID: (id) => `/api/admin/audit-log/${id}`,
     SHIPMENTS: "/api/admin/shipments",
     SHIPMENT_BY_ID: (id) => `/api/admin/shipments/${id}`,
     SHIPMENT_LOTS: (id) => `/api/admin/shipments/${id}/lots`,

package/dist/contracts/client-auth.d.ts

@@ -9,19 +9,15 @@ export interface IClientAuthProvider {
     signInWithEmailAndPassword(email: string, password: string): Promise<void>;
     /** Apply an email verification action code */
     applyActionCode(code: string): Promise<void>;
+    /** Send a verification email to the currently signed-in user's own address */
+    sendEmailVerification(): Promise<void>;
     /** Send a password reset email */
     sendPasswordResetEmail(email: string): Promise<void>;
     /** Confirm a password reset with a code and new password */
     confirmPasswordReset(code: string, newPassword: string): Promise<void>;
     /** Re-authenticate with current password and change to new password */
     reauthenticateAndChangePassword(currentPassword: string, newPassword: string): Promise<void>;
-    /**
-     * Verify the current password only — does NOT change anything. Used to
-     * prove current-password knowledge before an OTP is sent, without the
-     * side effect of immediately applying a new password ahead of that OTP
-     * being verified (see password-change-otp.ts for why the two steps must
-     * stay separate).
-     */
+    /** Verify the current password only — does NOT change anything. */
     reauthenticateOnly(currentPassword: string): Promise<void>;
     /** Re-authenticate and send a verification email to the new address; email updates after user clicks the link */
     reauthenticateAndSendEmailUpdateVerification(currentPassword: string, newEmail: string): Promise<void>;

package/dist/contracts/email.d.ts

@@ -10,6 +10,7 @@ export interface EmailOptions {
     text?: string;
     /** Defaults to SiteConfig.email.fromAddress if omitted. */
     from?: string;
+    cc?: string | string[];
     replyTo?: string;
     attachments?: EmailAttachment[];
     headers?: Record<string, string>;

package/dist/features/account/components/AddressForm.js

@@ -1,9 +1,26 @@
 "use client";
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { normalizeError } from "../../../errors/normalize";
-import { useState } from "react";
+import { useEffect, useState } from "react";
+import { z } from "zod";
 import { Button, Checkbox, FormField, FormGroup, Row, useToast } from "../../../ui";
 import { Form } from "../../../ui/components/Form";
+import { useFormShellState, FormErrorSummary } from "../../../ui/forms";
+// Local form-input schema — `userAddressSchema` (account schemas) uses
+// different field names (`line1`/`line2`, no `fullName`) and a required
+// `id`, since it models the stored Firestore shape, not this form's input.
+const addressFormSchema = z.object({
+    label: z.string().optional(),
+    fullName: z.string().min(1, "Full name is required"),
+    phone: z.string().min(1, "Phone number is required"),
+    addressLine1: z.string().min(1, "Address is required"),
+    addressLine2: z.string().optional(),
+    city: z.string().min(1, "City is required"),
+    state: z.string().min(1, "State is required"),
+    postalCode: z.string().min(1, "Postal code is required"),
+    country: z.string().optional(),
+    isDefault: z.boolean().optional(),
+});
 const DEFAULT_LABELS = {
     label: "Address Label",
     fullName: "Full Name",
@@ -47,10 +64,15 @@ export function AddressForm({ initialData, onSubmit, onCancel, isLoading = false
         country: initialData?.country || defaultCountry,
         isDefault: initialData?.isDefault || false,
     });
+    const { shellCtx, validate } = useFormShellState(addressFormSchema);
+    useEffect(() => {
+        validate(formData);
+        // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, [formData, validate]);
     const handleChange = (field, value) => {
         setFormData((prev) => ({ ...prev, [field]: value }));
     };
-    return (_jsx(Form, { onSubmit: (e) => e.preventDefault(), spacing: "md", children: ({ setFieldError, clearErrors }) => (_jsxs(_Fragment, { children: [_jsx(FormField, { label: mergedLabels.label, name: "label", type: "text", value: formData.label, onChange: (value) => handleChange("label", value), placeholder: mergedPlaceholders.label, required: true }), _jsx(FormField, { label: mergedLabels.fullName, name: "fullName", type: "text", value: formData.fullName, onChange: (value) => handleChange("fullName", value), placeholder: mergedPlaceholders.fullName, required: true }), _jsx(FormField, { label: mergedLabels.phone, name: "phone", type: "tel", value: formData.phone, onChange: (value) => handleChange("phone", value), placeholder: mergedPlaceholders.phone, required: true }), _jsx(FormField, { label: mergedLabels.addressLine1, name: "addressLine1", type: "text", value: formData.addressLine1, onChange: (value) => handleChange("addressLine1", value), placeholder: mergedPlaceholders.addressLine1, required: true }), _jsx(FormField, { label: mergedLabels.addressLine2, name: "addressLine2", type: "text", value: formData.addressLine2, onChange: (value) => handleChange("addressLine2", value), placeholder: mergedPlaceholders.addressLine2 }), _jsxs(FormGroup, { columns: 3, children: [_jsx(FormField, { label: mergedLabels.city, name: "city", type: "text", value: formData.city, onChange: (value) => handleChange("city", value), placeholder: mergedPlaceholders.city, required: true }), _jsx(FormField, { label: mergedLabels.state, name: "state", type: "text", value: formData.state, onChange: (value) => handleChange("state", value), placeholder: mergedPlaceholders.state, required: true }), _jsx(FormField, { label: mergedLabels.postalCode, name: "postalCode", type: "text", value: formData.postalCode, onChange: (value) => handleChange("postalCode", value), placeholder: mergedPlaceholders.postalCode, required: true })] }), _jsx(FormField, { label: mergedLabels.country, name: "country", type: "text", value: formData.country, onChange: (value) => handleChange("country", value), placeholder: mergedPlaceholders.country, required: true }), _jsx(Checkbox, { checked: formData.isDefault, onChange: (e) => handleChange("isDefault", e.target.checked), label: mergedLabels.setDefault }), _jsxs(Row, { padding: "t-xs", align: "center", justify: "start", gap: "xs", children: [_jsx(Button, { type: "button", variant: "outline", onClick: onCancel, disabled: isLoading, children: mergedLabels.cancel }), _jsx(Button, { type: "submit", variant: "primary", disabled: isLoading, isLoading: isLoading, onClick: async () => {
+    return (_jsx(Form, { onSubmit: (e) => e.preventDefault(), spacing: "md", shellCtx: shellCtx, children: ({ setFieldError, clearErrors }) => (_jsxs(_Fragment, { children: [_jsx(FormField, { label: mergedLabels.label, name: "label", type: "text", value: formData.label, onChange: (value) => handleChange("label", value), placeholder: mergedPlaceholders.label, required: true }), _jsx(FormField, { label: mergedLabels.fullName, name: "fullName", type: "text", value: formData.fullName, onChange: (value) => handleChange("fullName", value), placeholder: mergedPlaceholders.fullName, required: true }), _jsx(FormField, { label: mergedLabels.phone, name: "phone", type: "tel", value: formData.phone, onChange: (value) => handleChange("phone", value), placeholder: mergedPlaceholders.phone, required: true }), _jsx(FormField, { label: mergedLabels.addressLine1, name: "addressLine1", type: "text", value: formData.addressLine1, onChange: (value) => handleChange("addressLine1", value), placeholder: mergedPlaceholders.addressLine1, required: true }), _jsx(FormField, { label: mergedLabels.addressLine2, name: "addressLine2", type: "text", value: formData.addressLine2, onChange: (value) => handleChange("addressLine2", value), placeholder: mergedPlaceholders.addressLine2 }), _jsxs(FormGroup, { columns: 3, children: [_jsx(FormField, { label: mergedLabels.city, name: "city", type: "text", value: formData.city, onChange: (value) => handleChange("city", value), placeholder: mergedPlaceholders.city, required: true }), _jsx(FormField, { label: mergedLabels.state, name: "state", type: "text", value: formData.state, onChange: (value) => handleChange("state", value), placeholder: mergedPlaceholders.state, required: true }), _jsx(FormField, { label: mergedLabels.postalCode, name: "postalCode", type: "text", value: formData.postalCode, onChange: (value) => handleChange("postalCode", value), placeholder: mergedPlaceholders.postalCode, required: true })] }), _jsx(FormField, { label: mergedLabels.country, name: "country", type: "text", value: formData.country, onChange: (value) => handleChange("country", value), placeholder: mergedPlaceholders.country, required: true }), _jsx(Checkbox, { checked: formData.isDefault, onChange: (e) => handleChange("isDefault", e.target.checked), label: mergedLabels.setDefault }), _jsx(FormErrorSummary, {}), _jsxs(Row, { padding: "t-xs", align: "center", justify: "start", gap: "xs", children: [_jsx(Button, { type: "button", variant: "outline", onClick: onCancel, disabled: isLoading, children: mergedLabels.cancel }), _jsx(Button, { type: "submit", variant: "primary", disabled: isLoading, isLoading: isLoading, onClick: async () => {
                                 clearErrors();
                                 const errs = {};
                                 if (!formData.fullName.trim())

package/dist/features/account/components/BecomeSellerView.d.ts

@@ -11,7 +11,6 @@ export interface BecomeSellerViewProps {
     renderAlreadySeller?: () => React.ReactNode;
     /** Which state to render. Shell exposes all three slots; consumer controls which is active. */
     state?: "guide" | "success" | "already-seller";
-    isLoading?: boolean;
     className?: string;
 }
-export declare function BecomeSellerView({ labels, renderGuide, renderSuccess, renderAlreadySeller, state, isLoading: _isLoading, className, }: BecomeSellerViewProps): React.JSX.Element;
+export declare function BecomeSellerView({ labels, renderGuide, renderSuccess, renderAlreadySeller, state, className, }: BecomeSellerViewProps): React.JSX.Element;

package/dist/features/account/components/BecomeSellerView.js

@@ -1,5 +1,5 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { Div, Heading } from "../../../ui";
-export function BecomeSellerView({ labels = {}, renderGuide, renderSuccess, renderAlreadySeller, state = "guide", isLoading: _isLoading = false, className = "", }) {
+export function BecomeSellerView({ labels = {}, renderGuide, renderSuccess, renderAlreadySeller, state = "guide", className = "", }) {
     return (_jsxs(Div, { className: className, children: [labels.title && state === "guide" && (_jsx(Heading, { level: 1, className: "mb-6", size: "2xl", weight: "bold", children: labels.title })), state === "guide" && renderGuide?.(), state === "success" && renderSuccess?.(), state === "already-seller" && renderAlreadySeller?.()] }));
 }

package/dist/features/account/components/NotificationBell.js

@@ -32,7 +32,7 @@ const DEFAULT_ICONS = {
 export function NotificationBell({ limit = 10, viewAllHref, labels, icons, renderLink, onMarkAllReadSuccess, onMarkAllReadError, buttonClassName = "", dropdownClassName = "", hideOnMobile = true, }) {
     const [isOpen, setIsOpen] = useState(false);
     const dropdownRef = useRef(null);
-    const { showSuccess, showError: _showError } = useMessage();
+    const { showSuccess } = useMessage();
     const { showToast } = useToast();
     const { notifications, unreadCount, isLoading, refetch, markRead, markAllRead, isMarkingAll, } = useNotifications(limit);
     const notificationIcons = { ...DEFAULT_ICONS, ...icons };

package/dist/features/account/components/UserBidsView.d.ts

@@ -0,0 +1 @@
+export declare function UserBidsView(): import("react").JSX.Element;

package/dist/features/account/components/UserBidsView.js

@@ -0,0 +1,47 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { sortBy, sieveFilter, SIEVE_OP } from "../../../utils/sieve-builder";
+import { ACCOUNT_ENDPOINTS } from "../../../constants/api-endpoints";
+import { ROUTES } from "../../../constants/index";
+import { Div, Span, Stack, TextLink } from "../../../ui";
+import { FieldSelect } from "../../../ui/forms";
+import { AuctionBidsTable } from "../../auctions/components/AuctionBidsTable";
+import { DataListingView } from "../../admin/components/DataListingView";
+const SORT_OPTIONS = [
+    { value: sortBy("bidDate", "DESC"), label: "Newest first" },
+    { value: "bidDate", label: "Oldest first" },
+    { value: sortBy("bidAmount", "DESC"), label: "Highest bid" },
+    { value: "bidAmount", label: "Lowest bid" },
+];
+const STATUS_OPTIONS = [
+    { value: "", label: "All statuses" },
+    { value: "active", label: "Active" },
+    { value: "outbid", label: "Outbid" },
+    { value: "won", label: "Won" },
+    { value: "cancelled", label: "Cancelled" },
+];
+export function UserBidsView() {
+    const config = {
+        portal: "user",
+        title: "My Bids",
+        searchPlaceholder: "Search by auction title…",
+        emptyLabel: "You haven't placed any bids yet.",
+        filterKeys: ["status"],
+        defaultSort: sortBy("bidDate", "DESC"),
+        queryKey: ["user", "bids", "listing"],
+        endpoint: ACCOUNT_ENDPOINTS.BIDS,
+        sortOptions: SORT_OPTIONS,
+        hideTableView: true,
+        mapRows: (response) => response.bids ?? [],
+        getTotal: (response, rows) => response.total ?? rows.length,
+        buildFilters: (state) => (state.status ? sieveFilter("status", SIEVE_OP.EQ, state.status) : undefined),
+        renderFilterPanel: ({ pendingFilters, setPendingFilters }) => (_jsx(FieldSelect, { name: "status", label: "Bid status", value: pendingFilters.status || "", onChange: (v) => setPendingFilters((p) => ({ ...p, status: v })), options: STATUS_OPTIONS })),
+        renderCards: (rows, _view, _selection, isLoading) => {
+            if (isLoading) {
+                return (_jsx(Stack, { gap: "md", children: Array.from({ length: 3 }).map((_, i) => (_jsx(Div, { className: "h-16 animate-pulse border border-[var(--appkit-color-border)]", rounded: "xl" }, i))) }));
+            }
+            return (_jsx(AuctionBidsTable, { bids: rows, portal: "buyer", totalPages: 1, currentPage: 1, onPageChange: () => { }, emptyLabel: _jsxs(Span, { children: ["You haven't placed any bids yet.", " ", _jsx(TextLink, { href: String(ROUTES.PUBLIC.AUCTIONS), children: "Browse auctions" })] }) }));
+        },
+    };
+    return _jsx(DataListingView, { config: config });
+}

package/dist/features/account/components/UserOrdersView.d.ts

@@ -1,12 +1,5 @@
-import React from "react";
-import type { SlottedListingViewProps } from "../../../ui";
-export interface UserOrdersViewLabels {
-    title?: string;
+import type { Order } from "../../orders/types";
+export interface UserOrdersViewProps {
+    onOrderClick?: (order: Order) => void;
 }
-export interface UserOrdersViewProps extends Omit<SlottedListingViewProps, "renderTable"> {
-    labels?: UserOrdersViewLabels;
-    /** @deprecated Use `renderSearch` instead. */
-    renderToolbar?: () => React.ReactNode;
-    renderTable?: () => React.ReactNode;
-}
-export declare function UserOrdersView({ renderToolbar, renderTable, ...props }: UserOrdersViewProps): React.JSX.Element;
+export declare function UserOrdersView({ onOrderClick }: UserOrdersViewProps): import("react").JSX.Element;

package/dist/features/account/components/UserOrdersView.js

@@ -1,5 +1,55 @@
-import { jsx as _jsx } from "react/jsx-runtime";
-import { SlottedListingView } from "../../../ui";
-export function UserOrdersView({ renderToolbar, renderTable, ...props }) {
-    return (_jsx(SlottedListingView, { portal: "user", ...props, renderSearch: renderToolbar ? () => renderToolbar() : props.renderSearch, renderTable: renderTable ?? (() => null) }));
+"use client";
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+import { sortBy, sieveFilter, SIEVE_OP } from "../../../utils/sieve-builder";
+import { ACCOUNT_ENDPOINTS } from "../../../constants/api-endpoints";
+import { ROUTES } from "../../../constants/index";
+import { ACTIONS } from "../../../_internal/shared/actions/action-registry";
+import { Button, Div, Grid, Stack, Text, TextLink } from "../../../ui";
+import { PaginatedSelect } from "../../../ui/components/PaginatedSelect";
+import { DataListingView } from "../../admin/components/DataListingView";
+import { OrderCard } from "../../orders/components/OrdersList";
+const CANCELLABLE_STATUSES = new Set(["pending", "confirmed", "processing"]);
+const TRACKABLE_STATUSES = new Set(["shipped"]);
+const SORT_OPTIONS = [
+    { value: sortBy("createdAt", "DESC"), label: "Newest first" },
+    { value: sortBy("createdAt", "ASC"), label: "Oldest first" },
+    { value: sortBy("totalPrice", "DESC"), label: "Highest total" },
+    { value: sortBy("totalPrice", "ASC"), label: "Lowest total" },
+];
+const STATUS_OPTIONS = [
+    { value: "pending", label: "Pending" },
+    { value: "processing", label: "Processing" },
+    { value: "shipped", label: "Shipped" },
+    { value: "delivered", label: "Delivered" },
+    { value: "cancelled", label: "Cancelled" },
+    { value: "refunded", label: "Refunded" },
+    { value: "return_requested", label: "Return requested" },
+];
+export function UserOrdersView({ onOrderClick }) {
+    const config = {
+        portal: "user",
+        title: "My Orders",
+        searchPlaceholder: "Search by order id…",
+        emptyLabel: "You haven't placed any orders yet.",
+        filterKeys: ["status"],
+        defaultSort: sortBy("createdAt", "DESC"),
+        queryKey: ["user", "orders", "listing"],
+        endpoint: ACCOUNT_ENDPOINTS.ORDERS,
+        sortOptions: SORT_OPTIONS,
+        hideTableView: true,
+        mapRows: (response) => response.items ?? [],
+        getTotal: (response, rows) => response.total ?? rows.length,
+        buildFilters: (state) => (state.status ? sieveFilter("status", SIEVE_OP.EQ, state.status) : undefined),
+        renderFilterPanel: ({ pendingFilters, setPendingFilters }) => (_jsx(Div, { children: _jsx(PaginatedSelect, { value: pendingFilters.status || null, onChange: (v) => setPendingFilters((p) => ({ ...p, status: v ?? "" })), options: STATUS_OPTIONS, placeholder: "All statuses", ariaLabel: "Filter by order status" }) })),
+        renderCards: (rows, _view, _selection, isLoading) => {
+            if (isLoading) {
+                return (_jsx(Stack, { gap: "md", children: Array.from({ length: 3 }).map((_, i) => (_jsx(Div, { className: "h-24 animate-pulse border border-[var(--appkit-color-border)]", rounded: "xl" }, i))) }));
+            }
+            if (rows.length === 0) {
+                return _jsx(Text, { color: "muted", children: "You haven't placed any orders yet." });
+            }
+            return (_jsx(Grid, { gap: "md", className: "grid-cols-1", children: rows.map((order) => (_jsx(OrderCard, { order: order, onClick: onOrderClick, renderActions: () => (_jsxs(_Fragment, { children: [_jsx(Button, { asChild: true, variant: "outline", size: "sm", children: _jsx(TextLink, { href: String(ROUTES.USER.ORDER_DETAIL(order.id)), children: ACTIONS.USER["view-order"].label }) }), TRACKABLE_STATUSES.has(order.orderStatus) && (_jsx(Button, { asChild: true, variant: "ghost", size: "sm", children: _jsx(TextLink, { href: String(ROUTES.USER.ORDER_TRACK(order.id)), children: ACTIONS.USER["track-order"].label }) })), CANCELLABLE_STATUSES.has(order.orderStatus) && (_jsx(Button, { asChild: true, variant: "ghost", size: "sm", children: _jsx(TextLink, { href: String(ROUTES.USER.ORDER_CANCEL(order.id)), children: ACTIONS.USER["cancel-order"].label }) }))] })) }, order.id))) }));
+        },
+    };
+    return _jsx(DataListingView, { config: config });
 }

package/dist/features/account/components/UserReturnsView.d.ts

@@ -1,10 +1,5 @@
-import React from "react";
-import type { SlottedListingViewProps } from "../../../ui";
-export interface UserReturnsViewLabels {
-    title?: string;
+import type { Order } from "../../orders/types";
+export interface UserReturnsViewProps {
+    onOrderClick?: (order: Order) => void;
 }
-export interface UserReturnsViewProps extends Omit<SlottedListingViewProps, "renderTable"> {
-    labels?: UserReturnsViewLabels;
-    renderTable?: () => React.ReactNode;
-}
-export declare function UserReturnsView({ renderTable, ...props }: UserReturnsViewProps): React.JSX.Element;
+export declare function UserReturnsView({ onOrderClick }: UserReturnsViewProps): import("react").JSX.Element;