@mohasinac/appkit 4.13.1 → 4.15.0

package/dist/features/auctions/components/PlaceBidFormClient.d.ts

@@ -15,13 +15,12 @@ export interface PlaceBidFormClientProps {
     isEnded: boolean;
     auctionEndDate: Date | null;
     buyNowPrice: number | null;
-    bidsHaveStarted?: boolean;
     bidCount: number;
     tags?: string[];
     onPlaceBid: (input: PlaceBidInput) => Promise<unknown>;
     onBuyNow?: () => Promise<unknown>;
 }
-export declare function PlaceBidFormClient({ productId, currentBid: ssrCurrentBid, startingBid, tiers, minBidIncrementOverride, currency, isEnded, auctionEndDate, buyNowPrice, bidsHaveStarted, bidCount: ssrBidCount, tags, onPlaceBid, onBuyNow, }: PlaceBidFormClientProps): React.JSX.Element;
+export declare function PlaceBidFormClient({ productId, currentBid: ssrCurrentBid, startingBid, tiers, minBidIncrementOverride, currency, isEnded, auctionEndDate, buyNowPrice, bidCount: ssrBidCount, tags, onPlaceBid, onBuyNow, }: PlaceBidFormClientProps): React.JSX.Element;
 /**
  * `PlaceBidModalButton` — opens a modal that hosts the same PlaceBidFormClient.
  *

package/dist/features/auctions/components/PlaceBidFormClient.js

@@ -10,7 +10,8 @@ import { FieldInput } from "../../../ui/forms/FieldInput";
 import { applyZodIssues } from "../../../ui/forms/FormShell";
 import { placeBidSchema } from "../schemas/bid-input";
 import { useLiveAuctionBid } from "../hooks/useLiveAuctionBid";
-import { BID_PRESET_MULTIPLIERS, resolveMinBid, resolveMinBidIncrement, } from "../../../_internal/shared/features/auctions/config";
+import { AUCTION_BUYOUT_WINDOW_MINUTES } from "../../../_internal/shared/checkout/lanes";
+import { BID_PRESET_MULTIPLIERS, isBuyNowAvailable, resolveMinBid, resolveMinBidIncrement, } from "../../../_internal/shared/features/auctions/config";
 import { normalizeError } from "../../../errors/normalize";
 const __P = {
     p5: "p-[var(--appkit-space-5)]",
@@ -22,7 +23,7 @@ const BID_ERROR_DISPLAY = {
     BID_SELF_BID: "You cannot bid on your own listing.",
     BID_USER_BANNED: "Your account is currently restricted from bidding. Contact support.",
 };
-export function PlaceBidFormClient({ productId, currentBid: ssrCurrentBid, startingBid, tiers, minBidIncrementOverride, currency, isEnded, auctionEndDate, buyNowPrice, bidsHaveStarted = false, bidCount: ssrBidCount, tags = [], onPlaceBid, onBuyNow, }) {
+export function PlaceBidFormClient({ productId, currentBid: ssrCurrentBid, startingBid, tiers, minBidIncrementOverride, currency, isEnded, auctionEndDate, buyNowPrice, bidCount: ssrBidCount, tags = [], onPlaceBid, onBuyNow, }) {
     const router = useRouter();
     // Live-updates while the bid card is open — reflects other bidders'
     // activity on this auction, not just the bidder's own submission.
@@ -97,7 +98,10 @@ export function PlaceBidFormClient({ productId, currentBid: ssrCurrentBid, start
         // presetAmount is derived from currentBid/minBidIncrement, both in deps.
         // eslint-disable-next-line react-hooks/exhaustive-deps
     }, [currentBid, minBidIncrement, stepMul]);
-    const buyNowAvailable = buyNowPrice !== null && !isEnded && !bidsHaveStarted && !!onBuyNow;
+    // `currentBid` here is the LIVE SSE price, so the button hides itself the
+    // moment another bidder passes the buyout price — without a page reload, and
+    // without this component owning a second copy of the rule.
+    const buyNowAvailable = isBuyNowAvailable({ buyNowPrice, currentBid, isEnded }) && !!onBuyNow;
     const schema = placeBidSchema(minBid, formatCurrency(minBid, currency));
     async function submitBid(amount, setFieldError) {
         try {
@@ -205,7 +209,7 @@ export function PlaceBidFormClient({ productId, currentBid: ssrCurrentBid, start
                                     return applyZodIssues(parsed.error.issues, setFieldError);
                                 setSuccess(false);
                                 startTransition(() => submitBid(parsed.data.bidAmount, setFieldError));
-                            }, children: isEnded ? "Auction Ended" : "Place Bid" }), buyNowAvailable && (_jsx(Button, { variant: "secondary", size: "md", className: "w-full", type: "button", disabled: isBuyNowPending || isPending, isLoading: isBuyNowPending, onClick: handleBuyNow, children: `Buy Now — ${formatCurrency(buyNowPrice, currency)}` }))] })) }), tags.length > 0 && (_jsx(Div, { border: "default", className: "border-t", padding: "t-md", children: _jsx(Row, { wrap: true, gap: "xs", children: tags.map((tag) => (_jsx(Span, { rounded: "full", padding: "pill-sm-tall", surface: "subtle", color: "muted", size: "xs", children: tag }, tag))) }) }))] }));
+                            }, children: isEnded ? "Auction Ended" : "Place Bid" }), buyNowAvailable && (_jsxs(_Fragment, { children: [_jsx(Button, { variant: "secondary", size: "md", className: "w-full", type: "button", disabled: isBuyNowPending || isPending, isLoading: isBuyNowPending, onClick: handleBuyNow, children: `Buy Now — ${formatCurrency(buyNowPrice, currency)}` }), _jsxs(Text, { align: "center", size: "xs", color: "muted", children: ["Skips the bidding. The auction stays live until you pay \u2014 complete checkout within ", AUCTION_BUYOUT_WINDOW_MINUTES, " minutes."] })] }))] })) }), tags.length > 0 && (_jsx(Div, { border: "default", className: "border-t", padding: "t-md", children: _jsx(Row, { wrap: true, gap: "xs", children: tags.map((tag) => (_jsx(Span, { rounded: "full", padding: "pill-sm-tall", surface: "subtle", color: "muted", size: "xs", children: tag }, tag))) }) }))] }));
 }
 /**
  * `PlaceBidModalButton` — opens a modal that hosts the same PlaceBidFormClient.

package/dist/features/auctions/components/bid-detail-fields.d.ts

@@ -0,0 +1,29 @@
+import type { BidDocument } from "../schemas/firestore";
+/** Which portal is looking. Decides whether bidder identity is shown. */
+export type BidDetailViewer = "buyer" | "seller" | "admin";
+type FieldRow = {
+    label: string;
+    value: string;
+};
+/**
+ * A bid's status as a badge.
+ *
+ * `forfeited` is deliberately distinguished from `cancelled`: a forfeited bid
+ * WON and then let the payment window lapse, which is the seller's problem and
+ * the buyer's fault; a cancelled one never won anything. Collapsing them would
+ * hide exactly the distinction a support query is about.
+ */
+export declare function bidStatusBadge(status: string | undefined): {
+    label: string;
+    tone: string;
+};
+/**
+ * The scalar rows for a bid's detail modal.
+ *
+ * `bidderName` appears only for seller and admin. A buyer opening their OWN
+ * bid does not need to be told their own name, and the same component is used
+ * by all three, so gating here rather than at each call site is what stops a
+ * future copy-paste showing one buyer another's identity.
+ */
+export declare function buildBidDetailFields(bid: BidDocument, viewer: BidDetailViewer): FieldRow[];
+export {};

package/dist/features/auctions/components/bid-detail-fields.js

@@ -0,0 +1,103 @@
+/*
+ * WHY: All three bid listings — buyer, seller and admin — were dead ends. A
+ *      bid could be SEEN in a list and never opened, so the amount, the
+ *      auction it belongs to, when it was placed and whether it was outbid,
+ *      won or forfeited were only ever visible as a table row. `bid` is also
+ *      one of the three `relatedType` values with no per-record page in ANY
+ *      role, so a bid notification had nowhere to link.
+ * WHAT: The `<RecordDetailModal>` field list for a bid, built once.
+ *
+ * ## One builder, three portals
+ *
+ * The three views differ only in whether they may show the bidder's identity:
+ * a buyer sees their own bid, a seller sees who bid on their auction, and an
+ * admin sees everything. Writing the field list three times would be three
+ * chances to leak a bidder's name into the buyer view or to forget a field in
+ * one portal — the shape of Root Cause #38, one layer up.
+ *
+ * `maskPublicBid` already exists for the PUBLIC bid history and is unchanged;
+ * this is the dashboard equivalent, where the viewer is authenticated and the
+ * question is which role they hold.
+ *
+ * EXPORTS:
+ *   buildBidDetailFields, bidStatusBadge, type BidDetailViewer
+ *
+ * @tag domain:auctions
+ * @tag layer:feature-util
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:UserBidsView,SellerBidsView,AdminBidsView
+ * @tag sideEffects:none
+ */
+const money = (amount, currency = "INR") => amount == null
+    ? "—"
+    : new Intl.NumberFormat("en-IN", { style: "currency", currency, maximumFractionDigits: 2 }).format(amount);
+const when = (value) => {
+    if (!value)
+        return "—";
+    const d = value instanceof Date ? value : new Date(String(value));
+    return Number.isNaN(d.getTime()) ? "—" : d.toLocaleString();
+};
+/**
+ * A bid's status as a badge.
+ *
+ * `forfeited` is deliberately distinguished from `cancelled`: a forfeited bid
+ * WON and then let the payment window lapse, which is the seller's problem and
+ * the buyer's fault; a cancelled one never won anything. Collapsing them would
+ * hide exactly the distinction a support query is about.
+ */
+export function bidStatusBadge(status) {
+    switch (status) {
+        case "won":
+            return { label: "Won", tone: "success" };
+        case "active":
+            return { label: "Leading", tone: "info" };
+        case "outbid":
+            return { label: "Outbid", tone: "warning" };
+        case "forfeited":
+            return { label: "Forfeited — payment window lapsed", tone: "danger" };
+        case "cancelled":
+            return { label: "Cancelled", tone: "default" };
+        case "lost":
+            return { label: "Lost", tone: "default" };
+        default:
+            return { label: status ?? "Unknown", tone: "default" };
+    }
+}
+/**
+ * The scalar rows for a bid's detail modal.
+ *
+ * `bidderName` appears only for seller and admin. A buyer opening their OWN
+ * bid does not need to be told their own name, and the same component is used
+ * by all three, so gating here rather than at each call site is what stops a
+ * future copy-paste showing one buyer another's identity.
+ */
+export function buildBidDetailFields(bid, viewer) {
+    const rows = [
+        { label: "Auction", value: bid.productTitle || bid.productId },
+        { label: "Bid amount", value: money(bid.bidAmount, bid.currency) },
+    ];
+    // Only meaningful when the bid raised a previous one.
+    if (bid.previousBidAmount != null) {
+        rows.push({ label: "Previous high bid", value: money(bid.previousBidAmount, bid.currency) });
+    }
+    if (bid.autoMaxBid != null) {
+        rows.push({ label: "Auto-bid limit", value: money(bid.autoMaxBid, bid.currency) });
+    }
+    rows.push({ label: "Placed", value: when(bid.bidDate ?? bid.createdAt) });
+    if (viewer !== "buyer") {
+        rows.push({ label: "Bidder", value: bid.userName || bid.userId });
+    }
+    // A buyout is a real bid, not a bid-free purchase — surfacing it here is
+    // what makes "why is there no ladder on this auction" answerable.
+    if (bid.isBuyout) {
+        rows.push({ label: "Placed via", value: "Buy Now" });
+    }
+    // The order this bid became. Present only once the win was actually paid,
+    // which is exactly the question "did they ever pay?" asks.
+    if (bid.orderId) {
+        rows.push({ label: "Order", value: bid.orderId });
+    }
+    rows.push({ label: "Bid ID", value: bid.id });
+    return rows;
+}

package/dist/features/auctions/repository/bid.repository.d.ts

@@ -66,6 +66,19 @@ export declare class BidRepository extends BaseRepository<BidDocument> {
      */
     markForfeited(bidId: string): Promise<void>;
     markLost(batch: WriteBatch, ref: DocumentReference): void;
+    /**
+     * Batched "everyone else lost", for callers that are not already inside a
+     * batch of their own — a Buy Now purchase ends the auction outside the
+     * settlement job, and the losing bids can be any number, so this writes them
+     * in Firestore-batch chunks rather than one round-trip per bid.
+     */
+    markManyLost(refs: readonly DocumentReference[]): Promise<void>;
+    /**
+     * A pending Buy Now claim that never became a sale. Not `forfeited` — that
+     * status means "won, then defaulted", and a lapsed claim never won anything;
+     * the auction it was placed against carried on untouched.
+     */
+    markCancelled(bidId: string): Promise<void>;
     markOutbid(batch: WriteBatch, ref: DocumentReference): void;
     markWinning(batch: WriteBatch, ref: DocumentReference): void;
     /**

package/dist/features/auctions/repository/bid.repository.js

@@ -148,6 +148,29 @@ export class BidRepository extends BaseRepository {
             updatedAt: new Date(),
         });
     }
+    /**
+     * Batched "everyone else lost", for callers that are not already inside a
+     * batch of their own — a Buy Now purchase ends the auction outside the
+     * settlement job, and the losing bids can be any number, so this writes them
+     * in Firestore-batch chunks rather than one round-trip per bid.
+     */
+    async markManyLost(refs) {
+        const CHUNK = 400; // under Firestore's 500-write batch limit, with headroom
+        for (let i = 0; i < refs.length; i += CHUNK) {
+            const batch = this.db.batch();
+            for (const ref of refs.slice(i, i + CHUNK))
+                this.markLost(batch, ref);
+            await batch.commit();
+        }
+    }
+    /**
+     * A pending Buy Now claim that never became a sale. Not `forfeited` — that
+     * status means "won, then defaulted", and a lapsed claim never won anything;
+     * the auction it was placed against carried on untouched.
+     */
+    async markCancelled(bidId) {
+        await this.update(bidId, { status: "cancelled", isWinning: false, updatedAt: new Date() });
+    }
     markOutbid(batch, ref) {
         batch.update(ref, {
             status: "outbid",

package/dist/features/auctions/schemas/firestore.d.ts

@@ -35,6 +35,23 @@ export interface BidDocument extends BaseDocument {
      * a dead status badge.
      */
     orderId?: string;
+    /**
+     * True when this bid was created by Buy Now rather than by a buyer typing an
+     * amount. Its `bidAmount` is the listing's `buyNowPrice`.
+     *
+     * A buyout bid starts `active` like any other, but is NOT an ordinary bid in
+     * two respects and both are load-bearing:
+     *  1. **Auction settlement must ignore it.** A pending buyout sits at the BIN
+     *     price, so it would otherwise win by default the moment the auction's
+     *     clock ran out — awarding the item to someone who explicitly did not
+     *     complete their purchase in time.
+     *  2. **It never moves `product.currentBid`.** A pending claim is not a
+     *     public price, and inflating the visible bid to the BIN price would make
+     *     `isBuyNowAvailable` false for everybody else, silently making the
+     *     buyout single-occupancy. Concurrency is settled by the transaction in
+     *     `claimAuctionForCheckout`, not by blocking the second buyer up front.
+     */
+    isBuyout?: boolean;
 }
 export declare const BID_COLLECTION: "bids";
 export declare const BID_INDEXED_FIELDS: readonly ["productId", "userId", "status", "isWinning", "bidDate", "createdAt"];

package/dist/features/auctions/schemas/index.d.ts

@@ -67,19 +67,20 @@ export declare const auctionItemSchema: z.ZodObject<{
     title: string;
     createdAt: string;
     updatedAt: string;
-    featured: boolean;
-    listingType: "auction";
     slug: string;
     price: number;
+    sellerId: string;
+    featured: boolean;
+    listingType: "auction";
     auctionEndDate: string;
     startingBid: number;
     bidCount: number;
-    sellerId: string;
     storeId?: string | undefined;
     description?: string | undefined;
     mainImage?: string | undefined;
     images?: string[] | undefined;
     currentBid?: number | undefined;
+    storeSlug?: string | undefined;
     media?: {
         type: "video" | "image" | "file";
         url: string;
@@ -89,7 +90,6 @@ export declare const auctionItemSchema: z.ZodObject<{
         youtubeId?: string | undefined;
         duration?: number | undefined;
     }[] | undefined;
-    storeSlug?: string | undefined;
 }, {
     currency: string;
     status: "draft" | "published" | "archived" | "sold";
@@ -97,19 +97,20 @@ export declare const auctionItemSchema: z.ZodObject<{
     title: string;
     createdAt: string;
     updatedAt: string;
-    featured: boolean;
-    listingType: "auction";
     slug: string;
     price: number;
+    sellerId: string;
+    featured: boolean;
+    listingType: "auction";
     auctionEndDate: string;
     startingBid: number;
     bidCount: number;
-    sellerId: string;
     storeId?: string | undefined;
     description?: string | undefined;
     mainImage?: string | undefined;
     images?: string[] | undefined;
     currentBid?: number | undefined;
+    storeSlug?: string | undefined;
     media?: {
         type: "video" | "image" | "file";
         url: string;
@@ -119,7 +120,6 @@ export declare const auctionItemSchema: z.ZodObject<{
         youtubeId?: string | undefined;
         duration?: number | undefined;
     }[] | undefined;
-    storeSlug?: string | undefined;
 }>;
 export declare const bidRecordSchema: z.ZodObject<{
     id: z.ZodString;
@@ -134,18 +134,18 @@ export declare const bidRecordSchema: z.ZodObject<{
     currency: string;
     id: string;
     amount: number;
-    auctionId: string;
     bidderId: string;
     isWinning: boolean;
+    auctionId: string;
     placedAt: string;
     bidderDisplayName?: string | undefined;
 }, {
     currency: string;
     id: string;
     amount: number;
-    auctionId: string;
     bidderId: string;
     isWinning: boolean;
+    auctionId: string;
     placedAt: string;
     bidderDisplayName?: string | undefined;
 }>;
@@ -159,12 +159,12 @@ export declare const auctionListParamsSchema: z.ZodObject<{
     sort?: string | undefined;
     page?: number | undefined;
     pageSize?: number | undefined;
-    filters?: string | undefined;
     storeSlug?: string | undefined;
+    filters?: string | undefined;
 }, {
     sort?: string | undefined;
     page?: number | undefined;
     pageSize?: number | undefined;
-    filters?: string | undefined;
     storeSlug?: string | undefined;
+    filters?: string | undefined;
 }>;

package/dist/features/audit-log/schemas/firestore.d.ts

@@ -23,6 +23,13 @@ export declare const AdminAuditActionValues: {
     readonly PAYOUT_MARK_PAID: "payout_mark_paid";
     readonly STORE_STATUS_CHANGE: "store_status_change";
     readonly USER_ROLE_CHANGE: "user_role_change";
+    /**
+     * Admin cancelled an offer. The store keeps sole authority to accept,
+     * counter and decline; cancelling is the ONE write an admin may make, and
+     * it is an escalation — reason required, and recorded both here and in the
+     * offer's own `statusHistory`.
+     */
+    readonly OFFER_CANCEL: "offer_cancel";
 };
 export type AdminAuditAction = (typeof AdminAuditActionValues)[keyof typeof AdminAuditActionValues];
 export interface AdminAuditLogDocument extends BaseDocument {
@@ -55,5 +62,12 @@ export declare const ADMIN_AUDIT_LOG_FIELDS: {
         readonly PAYOUT_MARK_PAID: "payout_mark_paid";
         readonly STORE_STATUS_CHANGE: "store_status_change";
         readonly USER_ROLE_CHANGE: "user_role_change";
+        /**
+         * Admin cancelled an offer. The store keeps sole authority to accept,
+         * counter and decline; cancelling is the ONE write an admin may make, and
+         * it is an escalation — reason required, and recorded both here and in the
+         * offer's own `statusHistory`.
+         */
+        readonly OFFER_CANCEL: "offer_cancel";
     };
 };

package/dist/features/audit-log/schemas/firestore.js

@@ -21,6 +21,13 @@ export const AdminAuditActionValues = {
     PAYOUT_MARK_PAID: "payout_mark_paid",
     STORE_STATUS_CHANGE: "store_status_change",
     USER_ROLE_CHANGE: "user_role_change",
+    /**
+     * Admin cancelled an offer. The store keeps sole authority to accept,
+     * counter and decline; cancelling is the ONE write an admin may make, and
+     * it is an escalation — reason required, and recorded both here and in the
+     * offer's own `statusHistory`.
+     */
+    OFFER_CANCEL: "offer_cancel",
 };
 export const ADMIN_AUDIT_LOG_FIELDS = {
     ACTOR_UID: "actorUid",

package/dist/features/auth/permissions/constants.d.ts

@@ -11,7 +11,7 @@
  * Permission naming: admin:resource:action
  * Ban action naming: plain verb phrase — write_reviews, place_bids, etc.
  */
-export type Permission = "admin:dashboard:view" | "admin:users:read" | "admin:users:write" | "admin:users:delete" | "admin:user-bans:read" | "admin:user-bans:write" | "admin:products:read" | "admin:products:write" | "admin:products:delete" | "admin:orders:read" | "admin:orders:write" | "admin:returns:read" | "admin:returns:write" | "admin:stores:read" | "admin:stores:write" | "admin:store-addresses:read" | "admin:addresses:read" | "admin:addresses:write" | "admin:analytics:view" | "admin:payouts:read" | "admin:payouts:write" | "admin:audit-log:read" | "admin:categories:read" | "admin:categories:write" | "admin:categories:delete" | "admin:brands:read" | "admin:brands:write" | "admin:brands:delete" | "admin:coupons:read" | "admin:coupons:write" | "admin:coupons:delete" | "admin:deals:read" | "admin:deals:write" | "admin:featured:read" | "admin:featured:write" | "admin:reviews:read" | "admin:reviews:write" | "admin:reviews:delete" | "admin:blog:read" | "admin:blog:write" | "admin:blog:delete" | "admin:blog:publish" | "admin:bids:read" | "admin:bids:write" | "admin:media:read" | "admin:media:write" | "admin:media:delete" | "admin:site:read" | "admin:site:write" | "admin:settings:write" | "admin:navigation:read" | "admin:navigation:write" | "admin:sections:read" | "admin:sections:write" | "admin:carousel:read" | "admin:carousel:write" | "admin:carousel:delete" | "admin:ads:read" | "admin:ads:write" | "admin:ads:delete" | "admin:faqs:read" | "admin:faqs:write" | "admin:faqs:delete" | "admin:tester-checklist:read" | "admin:tester-checklist:write" | "admin:tester-checklist:delete" | "admin:tester-feedback:read" | "admin:tester-feedback:write" | "admin:newsletter:read" | "admin:newsletter:write" | "admin:contact:read" | "admin:events:read" | "admin:events:write" | "admin:events:delete" | "admin:event-entries:read" | "admin:event-entries:write" | "admin:support-tickets:read" | "admin:support-tickets:write" | "admin:shipments:read" | "admin:shipments:write" | "admin:catalogue:read" | "admin:catalogue:write" | "admin:support-tickets:assign" | "admin:support-tickets:close" | "admin:scammers:read" | "admin:scammers:write" | "admin:scammers:verify" | "admin:scammers:delete" | "admin:sessions:read" | "admin:sessions:delete" | "admin:notifications:read" | "admin:notifications:write" | "admin:carts:read" | "admin:wishlists:read" | "admin:feature-flags:read" | "admin:feature-flags:write" | "admin:copilot:view" | "admin:team:read" | "admin:team:write" | "admin:maintenance:view-server-errors" | "admin:maintenance:view-client-errors" | "admin:maintenance:view-function-errors" | "admin:maintenance:view-cloud-logs" | "admin:maintenance:view-payment-rollbacks" | "admin:maintenance:run-analysis" | "admin:maintenance:purge-errors";
+export type Permission = "admin:dashboard:view" | "admin:users:read" | "admin:users:write" | "admin:users:delete" | "admin:user-bans:read" | "admin:user-bans:write" | "admin:products:read" | "admin:products:write" | "admin:products:delete" | "admin:orders:read" | "admin:orders:write" | "admin:returns:read" | "admin:returns:write" | "admin:stores:read" | "admin:stores:write" | "admin:store-addresses:read" | "admin:addresses:read" | "admin:addresses:write" | "admin:analytics:view" | "admin:payouts:read" | "admin:payouts:write" | "admin:audit-log:read" | "admin:categories:read" | "admin:categories:write" | "admin:categories:delete" | "admin:brands:read" | "admin:brands:write" | "admin:brands:delete" | "admin:coupons:read" | "admin:coupons:write" | "admin:coupons:delete" | "admin:deals:read" | "admin:deals:write" | "admin:featured:read" | "admin:featured:write" | "admin:reviews:read" | "admin:reviews:write" | "admin:reviews:delete" | "admin:blog:read" | "admin:blog:write" | "admin:blog:delete" | "admin:blog:publish" | "admin:bids:read" | "admin:bids:write" | "admin:offers:read" | "admin:offers:write" | "admin:media:read" | "admin:media:write" | "admin:media:delete" | "admin:site:read" | "admin:site:write" | "admin:settings:write" | "admin:navigation:read" | "admin:navigation:write" | "admin:sections:read" | "admin:sections:write" | "admin:carousel:read" | "admin:carousel:write" | "admin:carousel:delete" | "admin:ads:read" | "admin:ads:write" | "admin:ads:delete" | "admin:faqs:read" | "admin:faqs:write" | "admin:faqs:delete" | "admin:tester-checklist:read" | "admin:tester-checklist:write" | "admin:tester-checklist:delete" | "admin:tester-feedback:read" | "admin:tester-feedback:write" | "admin:newsletter:read" | "admin:newsletter:write" | "admin:contact:read" | "admin:events:read" | "admin:events:write" | "admin:events:delete" | "admin:event-entries:read" | "admin:event-entries:write" | "admin:support-tickets:read" | "admin:support-tickets:write" | "admin:shipments:read" | "admin:shipments:write" | "admin:catalogue:read" | "admin:catalogue:write" | "admin:support-tickets:assign" | "admin:support-tickets:close" | "admin:scammers:read" | "admin:scammers:write" | "admin:scammers:verify" | "admin:scammers:delete" | "admin:sessions:read" | "admin:sessions:delete" | "admin:notifications:read" | "admin:notifications:write" | "admin:carts:read" | "admin:wishlists:read" | "admin:feature-flags:read" | "admin:feature-flags:write" | "admin:copilot:view" | "admin:team:read" | "admin:team:write" | "admin:maintenance:view-server-errors" | "admin:maintenance:view-client-errors" | "admin:maintenance:view-function-errors" | "admin:maintenance:view-cloud-logs" | "admin:maintenance:view-payment-rollbacks" | "admin:maintenance:run-analysis" | "admin:maintenance:purge-errors";
 /**
  * Granular user actions that can be soft-banned individually.
  * A user may have multiple simultaneous soft bans of different types.

package/dist/features/auth/permissions/constants.js

@@ -161,6 +161,7 @@ export const PERMISSION_GROUPS = {
         "admin:carts:read",
         "admin:wishlists:read",
         "admin:bids:read",
+        "admin:offers:read",
     ],
     customer_support: [
         "admin:dashboard:view",
@@ -212,6 +213,8 @@ export const PERMISSION_GROUPS = {
         "admin:reviews:delete",
         "admin:bids:read",
         "admin:bids:write",
+        "admin:offers:read",
+        "admin:offers:write",
         "admin:sessions:read",
         "admin:sessions:delete",
         "admin:carts:read",
@@ -226,6 +229,8 @@ export const PERMISSION_GROUPS = {
         "admin:dashboard:view",
         "admin:bids:read",
         "admin:bids:write",
+        "admin:offers:read",
+        "admin:offers:write",
         "admin:products:read",
         "admin:orders:read",
         "admin:users:read",
@@ -280,6 +285,7 @@ export const ROUTE_PERMISSION_MAP = {
     "/admin/reviews": "admin:reviews:read",
     "/admin/blog": "admin:blog:read",
     "/admin/bids": "admin:bids:read",
+    "/admin/offers": "admin:offers:read",
     "/admin/media": "admin:media:read",
     "/admin/site": "admin:site:read",
     "/admin/settings": "admin:settings:write",
@@ -357,7 +363,10 @@ export const PERMISSION_DOMAINS = [
     { label: "Dashboard", prefix: "admin:dashboard:" },
     { label: "Users & Bans", prefix: "admin:users:|admin:user-bans:" },
     { label: "Products", prefix: "admin:products:" },
-    { label: "Orders & Returns", prefix: "admin:orders:|admin:returns:" },
+    // Offers sit with Orders, not with Content where Bids live: an offer is a
+    // commerce-pipeline object that ends in an order, and the permissions
+    // catalogue should group it where an operator would look for it.
+    { label: "Orders & Returns", prefix: "admin:orders:|admin:returns:|admin:offers:" },
     { label: "Stores", prefix: "admin:stores:|admin:store-addresses:" },
     { label: "Finance", prefix: "admin:analytics:|admin:payouts:" },
     { label: "Catalog", prefix: "admin:categories:|admin:brands:|admin:coupons:|admin:deals:|admin:featured:" },

package/dist/features/blog/actions/blog-actions.d.ts

@@ -72,8 +72,8 @@ export declare const createBlogPostSchema: z.ZodObject<{
     status: "draft" | "published" | "archived";
     title: string;
     content: string;
-    category: "news" | "tips" | "guides" | "updates" | "community";
     slug: string;
+    category: "news" | "tips" | "guides" | "updates" | "community";
     tags: string[];
     isFeatured: boolean;
     excerpt: string;
@@ -108,13 +108,13 @@ export declare const createBlogPostSchema: z.ZodObject<{
 }, {
     title: string;
     content: string;
-    category: "news" | "tips" | "guides" | "updates" | "community";
     slug: string;
+    category: "news" | "tips" | "guides" | "updates" | "community";
     excerpt: string;
     status?: "draft" | "published" | "archived" | undefined;
     tags?: string[] | undefined;
-    isFeatured?: boolean | undefined;
     publishedAt?: string | undefined;
+    isFeatured?: boolean | undefined;
     coverImage?: string | {
         type: "video" | "image" | "file";
         url: string;
@@ -211,11 +211,11 @@ export declare const updateBlogPostSchema: z.ZodObject<{
     status?: "draft" | "published" | "archived" | undefined;
     title?: string | undefined;
     content?: string | undefined;
-    category?: "news" | "tips" | "guides" | "updates" | "community" | undefined;
     slug?: string | undefined;
+    category?: "news" | "tips" | "guides" | "updates" | "community" | undefined;
     tags?: string[] | undefined;
-    isFeatured?: boolean | undefined;
     publishedAt?: string | undefined;
+    isFeatured?: boolean | undefined;
     excerpt?: string | undefined;
     coverImage?: {
         type: "video" | "image" | "file";
@@ -248,11 +248,11 @@ export declare const updateBlogPostSchema: z.ZodObject<{
     status?: "draft" | "published" | "archived" | undefined;
     title?: string | undefined;
     content?: string | undefined;
-    category?: "news" | "tips" | "guides" | "updates" | "community" | undefined;
     slug?: string | undefined;
+    category?: "news" | "tips" | "guides" | "updates" | "community" | undefined;
     tags?: string[] | undefined;
-    isFeatured?: boolean | undefined;
     publishedAt?: string | undefined;
+    isFeatured?: boolean | undefined;
     excerpt?: string | undefined;
     coverImage?: string | {
         type: "video" | "image" | "file";

package/dist/features/blog/schemas/blog-form.d.ts

@@ -0,0 +1,80 @@
+import { z } from "zod";
+/**
+ * The blog form's own schema. Distinct from `blogPostSchema` (blog/schemas),
+ * which requires an `id` this draft cannot have before its first save and
+ * models `coverImage` as a `MediaField` where the form holds a plain URL.
+ *
+ * ## Why `.passthrough()` is gone
+ *
+ * It used to name FOUR of the draft's fourteen fields and rely on passthrough
+ * to keep the other ten alive. That is the single most dangerous shape in this
+ * codebase — `z.object()` strips unknown keys, so the moment anyone tightened
+ * it, ten fields would vanish on the next save with no error. Verified safe to
+ * remove here: every one of the fourteen is now named, and the save payload
+ * (below) maps each explicitly rather than spreading the draft, so there is no
+ * extra key for passthrough to have been protecting.
+ *
+ * ## Section, row and control come from the field itself
+ *
+ * 🛑 `annotate()` must be the OUTERMOST call — it keys a WeakMap by schema
+ * instance and every zod wrapper returns a new one, so
+ * `annotate(z.string(), …).optional()` silently loses the metadata and drops
+ * the field into the "advanced" fallback. `audit-field-ui-meta` blocks it.
+ */
+export declare const blogDraftSchema: z.ZodObject<{
+    title: z.ZodString;
+    /**
+     * NO `blog-` prefix. Surfaced by `roundtrip-diff` in W4: the schema demanded
+     * `/^blog-/`, and **all 20 stored posts fail it** — every seeded post holds
+     * the bare slug (`spot-genuine-takara-tomy-beyblade`) while only the
+     * DOCUMENT ID carries the prefix (`generateBlogPostId` adds it).
+     *
+     * `BlogRepository.findBySlug` queries this field directly, so the public URL
+     * is the bare slug. The regex therefore broke the editor from both ends:
+     * opening any existing post flagged its slug invalid, and "fixing" it to
+     * satisfy the rule would rewrite the stored slug and 404 the live URL.
+     */
+    slug: z.ZodString;
+    excerpt: z.ZodString;
+    content: z.ZodString;
+    coverImage: z.ZodString;
+    youtubeId: z.ZodString;
+    category: z.ZodEnum<["news", "tips", "guides", "updates", "community"]>;
+    tags: z.ZodArray<z.ZodString, "many">;
+    metaTitle: z.ZodString;
+    metaDescription: z.ZodUnion<[z.ZodString, z.ZodLiteral<"">]>;
+    status: z.ZodEnum<["draft", "published", "archived"]>;
+    publishedAt: z.ZodString;
+    authorName: z.ZodString;
+    isFeatured: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    status: "draft" | "published" | "archived";
+    title: string;
+    content: string;
+    youtubeId: string;
+    slug: string;
+    category: "news" | "tips" | "guides" | "updates" | "community";
+    tags: string[];
+    publishedAt: string;
+    isFeatured: boolean;
+    excerpt: string;
+    coverImage: string;
+    authorName: string;
+    metaTitle: string;
+    metaDescription: string;
+}, {
+    status: "draft" | "published" | "archived";
+    title: string;
+    content: string;
+    youtubeId: string;
+    slug: string;
+    category: "news" | "tips" | "guides" | "updates" | "community";
+    tags: string[];
+    publishedAt: string;
+    isFeatured: boolean;
+    excerpt: string;
+    coverImage: string;
+    authorName: string;
+    metaTitle: string;
+    metaDescription: string;
+}>;