@mohasinac/appkit 4.14.0 → 4.15.0

package/dist/features/admin/components/AdminScammersView.js

@@ -12,12 +12,7 @@ import { ADMIN_SCAMMER_STATUS_TABS } from "../constants/filter-tabs";
 import { toRecordArray, toRelativeDate, toStringValue, } from "../hooks/useAdminListingData";
 import { DataListingView } from "./DataListingView";
 import { AdminScammerEditorView } from "./AdminScammerEditorView";
-const STATUS_BADGE = {
-    pending_review: "bg-warning-surface text-warning",
-    verified: "bg-success-surface text-success",
-    rejected: "bg-error-surface text-error",
-    removed: "bg-[var(--appkit-color-surface)] text-[var(--appkit-color-text-muted)] bg-[var(--appkit-color-surface-elevated)] text-[var(--appkit-color-text-muted)]",
-};
+import { SCAMMER_STATUS_BADGE, SCAMMER_STATUS_LABEL, toScammerStatus, } from "../../scams/constants/scammer-status-display";
 const SCAMMER_COLUMNS = [
     {
         key: "primary",
@@ -28,7 +23,7 @@ const SCAMMER_COLUMNS = [
         key: "status",
         header: "Status",
         className: "w-36",
-        render: (row) => (_jsx(Span, { className: `inline-flex ${STATUS_BADGE[row.status] ?? STATUS_BADGE.pending_review}`, size: "xs", weight: "medium", rounded: "full", padding: "pill-sm-tall", children: row.status.replace(/_/g, " ") })),
+        render: (row) => (_jsx(Span, { className: `inline-flex ${SCAMMER_STATUS_BADGE[row.status]}`, size: "xs", weight: "medium", rounded: "full", padding: "pill-sm-tall", children: SCAMMER_STATUS_LABEL[row.status] })),
     },
     {
         key: "updatedAt",
@@ -72,7 +67,7 @@ export function AdminScammersView({ children, ...props }) {
             ]
                 .filter(Boolean)
                 .join(" · "),
-            status: toStringValue(item.status, "pending_review"),
+            status: toScammerStatus(item.status),
             updatedAt: toRelativeDate(item.updatedAt ?? item.createdAt),
             _raw: item,
         })),

package/dist/features/admin/components/AdminSectionsView.js

@@ -7,6 +7,8 @@ import { useQuery, useQueryClient } from "@tanstack/react-query";
 import { ProductInlineSelect } from "../../seller/components/ProductInlineSelect";
 import { CategoryInlineSelect } from "../../seller/components/CategoryInlineSelect";
 import { Button, Checkbox, Div, Form, FormActions, Input, Modal, Row, Select, Stack, Text, Textarea, useToast } from "../../../ui";
+import { FormErrorSummary, applyZodIssues } from "../../../ui/forms";
+import { homepageSectionFormSchema } from "../schemas/homepage-section-form";
 import { apiClient } from "../../../http";
 import { ADMIN_ENDPOINTS } from "../../../constants";
 import { ROUTES } from "../../../next/routing/route-map";
@@ -954,27 +956,34 @@ export function AdminSectionsView({ children }) {
     }));
     const hasReorderChanges = reorderDraft.some((item) => sectionOrderMap.get(item.id) !== item.order);
     const canUndoReorderChanges = reorderUndoStack.length > 0;
-    return (_jsxs(_Fragment, { children: [_jsxs(Div, { paddingX: "x-sm-md", padding: "y-md", children: [_jsxs(Row, { className: "mb-4", align: "center", justify: "between", gap: "3", children: [_jsxs(Div, { children: [_jsx(Text, { size: "base", weight: "semibold", color: "primary", children: "Homepage Sections" }), _jsx(Text, { size: "sm", color: "muted", children: "Manage homepage sections and their display order" })] }), _jsx(Row, { align: "center", gap: "sm", children: _jsx(Button, { type: "button", variant: "primary", size: "sm", onClick: () => setIsModalOpen(true), children: "Manage Sections" }) })] }), errorMessage && (_jsx(Div, { textSize: "sm", className: "mb-4 border border-error/20", color: "error", surface: "danger-surface", padding: "inline", rounded: "xl", children: errorMessage })), _jsx(DataTable, { rows: rows, isLoading: isLoading, emptyLabel: "No sections found" })] }), _jsxs(Stack, { className: `mt-4 ${__P.p4}`, gap: "3", rounded: "xl", surface: "default", border: "default", children: [_jsxs(Row, { align: "center", justify: "between", gap: "3", children: [_jsx(Text, { size: "sm", weight: "semibold", color: "primary", children: "Reorder Sections" }), _jsxs(Row, { align: "center", gap: "sm", children: [_jsx(Button, { type: "button", variant: "outline", size: "sm", onClick: reindexDraft, disabled: reorderSections.isPending || reorderDraft.length === 0, children: "Reindex 1..N" }), _jsx(Button, { type: "button", variant: "outline", size: "sm", onClick: undoReorderChange, disabled: reorderSections.isPending || !canUndoReorderChanges, children: "Undo unsaved" }), _jsx(Button, { type: "button", variant: "outline", size: "sm", onClick: resetToServerOrder, disabled: reorderSections.isPending || !hasReorderChanges, children: "Reset to server" }), _jsx(Button, { type: "button", variant: "primary", size: "sm", onClick: () => reorderSections.mutate(), disabled: !hasReorderChanges || reorderSections.isPending, children: reorderSections.isPending ? "Saving order..." : "Save order" })] })] }), reorderDraft.length === 0 ? (_jsx(Text, { size: "sm", color: "muted", children: "No sections to reorder." })) : (_jsx(Stack, { gap: "sm", children: reorderDraft.map((item, index) => (_jsxs(Div, { layout: "grid", gap: "2", align: "center", className: "grid-cols-[auto_1fr_auto_auto_auto]", rounded: "md", padding: "xs", border: "default", draggable: true, onDragStart: () => setDragIndex(index), onDragOver: (event) => event.preventDefault(), onDrop: () => handleReorderDrop(index), onDragEnd: () => setDragIndex(null), children: [_jsx(Text, { size: "sm", weight: "semibold", color: "muted", children: "\u2261" }), _jsxs(Text, { size: "sm", color: "primary", children: [item.type, " #", item.order] }), _jsx(Input, { type: "number", min: 1, max: reorderDraft.length, value: String(item.order), onChange: (event) => updateReorderItemOrder(index, Number(event.target.value) || 1), className: "w-24" }), _jsx(Button, { type: "button", variant: "outline", size: "sm", onClick: () => moveReorderItem(index, -1), disabled: index === 0, children: "Up" }), _jsx(Button, { type: "button", variant: "outline", size: "sm", onClick: () => moveReorderItem(index, 1), disabled: index === reorderDraft.length - 1, children: "Down" })] }, `reorder-${item.id}`))) }))] }), _jsx(Modal, { isOpen: isModalOpen, onClose: () => setIsModalOpen(false), title: "Manage Homepage Section", size: "lg", children: _jsxs(Form, { onSubmit: (event) => {
-                        event.preventDefault();
-                        saveSection.mutate();
-                    }, spacing: "md", children: [_jsx(Select, { label: "Mode", value: mode, onValueChange: (value) => setMode(value), options: [
-                                { label: "Create new section", value: "create" },
-                                { label: "Edit existing section", value: "edit" },
-                            ] }), mode === "edit" ? (_jsx(Select, { label: "Section", value: selectedSectionId, onValueChange: setSelectedSectionId, placeholder: "Select section", options: sections.map((section) => ({
-                                label: `${section.type} (#${section.order})`,
-                                value: section.id,
-                            })) })) : null, _jsx(Select, { label: "Section type", value: sectionType, onValueChange: (value) => {
-                                setSectionType(value);
-                                if (mode === "create") {
-                                    setSelectedSectionId("");
-                                }
-                            }, options: SECTION_TYPE_OPTIONS.map((type) => ({
-                                label: type,
-                                value: type,
-                            })), disabled: mode === "edit" }), _jsx(Input, { label: "Order", type: "number", value: order, onChange: (event) => setOrder(event.target.value), placeholder: "Leave empty to auto-place" }), _jsx(Select, { label: "Enabled", value: enabled ? "true" : "false", onValueChange: (value) => setEnabled(value === "true"), options: [
-                                { label: "Enabled", value: "true" },
-                                { label: "Disabled", value: "false" },
-                            ] }), isTypedBuilder ? renderTypedBuilder() : null, _jsx(Textarea, { label: isTypedBuilder ? "Generated config (JSON preview)" : "Section config (JSON)", value: configJson, onChange: (event) => setConfigJson(event.target.value), rows: 10, readOnly: isTypedBuilder, helperText: isTypedBuilder
-                                ? "This JSON is generated from typed controls above."
-                                : "Provide section config JSON for this section type." }), _jsxs(FormActions, { align: "right", children: [_jsx(Button, { type: "button", variant: "outline", onClick: () => setIsModalOpen(false), children: "Cancel" }), _jsx(Button, { type: "submit", variant: "primary", disabled: saveSection.isPending, children: saveSection.isPending ? "Saving..." : mode === "create" ? "Create section" : "Update section" })] })] }) })] }));
+    return (_jsxs(_Fragment, { children: [_jsxs(Div, { paddingX: "x-sm-md", padding: "y-md", children: [_jsxs(Row, { className: "mb-4", align: "center", justify: "between", gap: "3", children: [_jsxs(Div, { children: [_jsx(Text, { size: "base", weight: "semibold", color: "primary", children: "Homepage Sections" }), _jsx(Text, { size: "sm", color: "muted", children: "Manage homepage sections and their display order" })] }), _jsx(Row, { align: "center", gap: "sm", children: _jsx(Button, { type: "button", variant: "primary", size: "sm", onClick: () => setIsModalOpen(true), children: "Manage Sections" }) })] }), errorMessage && (_jsx(Div, { textSize: "sm", className: "mb-4 border border-error/20", color: "error", surface: "danger-surface", padding: "inline", rounded: "xl", children: errorMessage })), _jsx(DataTable, { rows: rows, isLoading: isLoading, emptyLabel: "No sections found" })] }), _jsxs(Stack, { className: `mt-4 ${__P.p4}`, gap: "3", rounded: "xl", surface: "default", border: "default", children: [_jsxs(Row, { align: "center", justify: "between", gap: "3", children: [_jsx(Text, { size: "sm", weight: "semibold", color: "primary", children: "Reorder Sections" }), _jsxs(Row, { align: "center", gap: "sm", children: [_jsx(Button, { type: "button", variant: "outline", size: "sm", onClick: reindexDraft, disabled: reorderSections.isPending || reorderDraft.length === 0, children: "Reindex 1..N" }), _jsx(Button, { type: "button", variant: "outline", size: "sm", onClick: undoReorderChange, disabled: reorderSections.isPending || !canUndoReorderChanges, children: "Undo unsaved" }), _jsx(Button, { type: "button", variant: "outline", size: "sm", onClick: resetToServerOrder, disabled: reorderSections.isPending || !hasReorderChanges, children: "Reset to server" }), _jsx(Button, { type: "button", variant: "primary", size: "sm", onClick: () => reorderSections.mutate(), disabled: !hasReorderChanges || reorderSections.isPending, children: reorderSections.isPending ? "Saving order..." : "Save order" })] })] }), reorderDraft.length === 0 ? (_jsx(Text, { size: "sm", color: "muted", children: "No sections to reorder." })) : (_jsx(Stack, { gap: "sm", children: reorderDraft.map((item, index) => (_jsxs(Div, { layout: "grid", gap: "2", align: "center", className: "grid-cols-[auto_1fr_auto_auto_auto]", rounded: "md", padding: "xs", border: "default", draggable: true, onDragStart: () => setDragIndex(index), onDragOver: (event) => event.preventDefault(), onDrop: () => handleReorderDrop(index), onDragEnd: () => setDragIndex(null), children: [_jsx(Text, { size: "sm", weight: "semibold", color: "muted", children: "\u2261" }), _jsxs(Text, { size: "sm", color: "primary", children: [item.type, " #", item.order] }), _jsx(Input, { type: "number", min: 1, max: reorderDraft.length, value: String(item.order), onChange: (event) => updateReorderItemOrder(index, Number(event.target.value) || 1), className: "w-24" }), _jsx(Button, { type: "button", variant: "outline", size: "sm", onClick: () => moveReorderItem(index, -1), disabled: index === 0, children: "Up" }), _jsx(Button, { type: "button", variant: "outline", size: "sm", onClick: () => moveReorderItem(index, 1), disabled: index === reorderDraft.length - 1, children: "Down" })] }, `reorder-${item.id}`))) }))] }), _jsx(Modal, { isOpen: isModalOpen, onClose: () => setIsModalOpen(false), title: "Manage Homepage Section", size: "lg", children: _jsx(Form, { schema: homepageSectionFormSchema, onSubmit: (event) => event.preventDefault(), spacing: "md", children: ({ setFieldError, clearErrors }) => (_jsxs(_Fragment, { children: [_jsx(FormErrorSummary, {}), _jsx(Select, { label: "Mode", value: mode, onValueChange: (value) => setMode(value), options: [
+                                    { label: "Create new section", value: "create" },
+                                    { label: "Edit existing section", value: "edit" },
+                                ] }), mode === "edit" ? (_jsx(Select, { label: "Section", value: selectedSectionId, onValueChange: setSelectedSectionId, placeholder: "Select section", options: sections.map((section) => ({
+                                    label: `${section.type} (#${section.order})`,
+                                    value: section.id,
+                                })) })) : null, _jsx(Select, { label: "Section type", value: sectionType, onValueChange: (value) => {
+                                    setSectionType(value);
+                                    if (mode === "create") {
+                                        setSelectedSectionId("");
+                                    }
+                                }, options: SECTION_TYPE_OPTIONS.map((type) => ({
+                                    label: type,
+                                    value: type,
+                                })), disabled: mode === "edit" }), _jsx(Input, { label: "Order", type: "number", value: order, onChange: (event) => setOrder(event.target.value), placeholder: "Leave empty to auto-place" }), _jsx(Select, { label: "Enabled", value: enabled ? "true" : "false", onValueChange: (value) => setEnabled(value === "true"), options: [
+                                    { label: "Enabled", value: "true" },
+                                    { label: "Disabled", value: "false" },
+                                ] }), isTypedBuilder ? renderTypedBuilder() : null, _jsx(Textarea, { label: isTypedBuilder ? "Generated config (JSON preview)" : "Section config (JSON)", value: configJson, onChange: (event) => setConfigJson(event.target.value), rows: 10, readOnly: isTypedBuilder, helperText: isTypedBuilder
+                                    ? "This JSON is generated from typed controls above."
+                                    : "Provide section config JSON for this section type." }), _jsxs(FormActions, { align: "right", children: [_jsx(Button, { type: "button", variant: "outline", onClick: () => setIsModalOpen(false), children: "Cancel" }), _jsx(Button, { type: "submit", variant: "primary", disabled: saveSection.isPending, onClick: () => {
+                                            clearErrors();
+                                            const parsed = homepageSectionFormSchema.safeParse({
+                                                sectionType, order, enabled, configJson,
+                                            });
+                                            if (!parsed.success) {
+                                                applyZodIssues(parsed.error.issues, setFieldError);
+                                                return;
+                                            }
+                                            saveSection.mutate();
+                                        }, children: saveSection.isPending ? "Saving..." : mode === "create" ? "Create section" : "Update section" })] })] })) }) })] }));
 }

package/dist/features/admin/components/AdminSessionsView.js

@@ -5,7 +5,7 @@ import { SIEVE_OP, sieveFilter } from "@mohasinac/appkit/client";
 import { sortBy } from "@mohasinac/appkit/client";
 import React, { useState } from "react";
 import { useQueryClient } from "@tanstack/react-query";
-import { ConfirmDeleteModal, FilterChipGroup, ListingLayout, RowActionMenu, useToast } from "../../../ui";
+import { ConfirmDeleteModal, FilterChipGroup, ListingLayout, RowActionMenu, useToast, RecordDetailModal, } from "../../../ui";
 import { ADMIN_ENDPOINTS } from "../../../constants/api-endpoints";
 import { ADMIN_BULK_ACTIONS, ROW_ACTION_META, ROW_ACTION_ID } from "../../products/constants/action-defs";
 import { toRecordArray, toRelativeDate, toStringValue, } from "../hooks/useAdminListingData";
@@ -20,6 +20,7 @@ function maskIp(ip) {
     return ip.replace(/:\w+$/, ":*");
 }
 export function AdminSessionsView({ children, ...props }) {
+    const [detail, setDetail] = useState(null);
     const queryClient = useQueryClient();
     const { showToast } = useToast();
     const [revokeTarget, setRevokeTarget] = useState(null);
@@ -53,6 +54,9 @@ export function AdminSessionsView({ children, ...props }) {
             { value: "lastActivity", label: "Least recent" },
             { value: sortBy("createdAt", "DESC"), label: "Newest" },
         ],
+        // Opening a row is what makes the destructive actions beside it
+        // safe to offer at all.
+        onRowClick: (row) => setDetail(row),
         mapRows: (response) => toRecordArray(response.sessions).map((item, index) => {
             const deviceInfo = (item.deviceInfo ?? {});
             const userLabel = toStringValue(item.user &&
@@ -60,6 +64,7 @@ export function AdminSessionsView({ children, ...props }) {
             const ipMasked = maskIp(toStringValue(deviceInfo.ip, ""));
             return {
                 id: toStringValue(item.id, `session-${index}`),
+                detail: item,
                 primary: userLabel,
                 secondary: [
                     toStringValue(deviceInfo.browser, "Unknown browser"),
@@ -94,7 +99,17 @@ export function AdminSessionsView({ children, ...props }) {
                 { id: "true", label: "Active only" },
             ], value: pendingFilters.isActive || "", onChange: (v) => setPendingFilters((p) => ({ ...p, isActive: v })) })),
     };
-    return (_jsxs(_Fragment, { children: [_jsx(DataListingView, { config: config }), _jsx(ConfirmDeleteModal, { isOpen: Boolean(revokeTarget), onClose: () => setRevokeTarget(null), onConfirm: () => {
+    return (_jsxs(_Fragment, { children: [_jsx(DataListingView, { config: config }), _jsx(RecordDetailModal, { isOpen: detail !== null, onClose: () => setDetail(null), title: toStringValue(detail?.detail?.userId, "Session"), fields: (() => {
+                    const d = (detail?.detail ?? {});
+                    return detail ? [
+                        { label: "User", value: toStringValue(d.userId, "—") },
+                        { label: "Active", value: d.isActive ? "Yes" : "No" },
+                        { label: "Last activity", value: toRelativeDate(d.lastActivity) },
+                        { label: "Expires", value: toRelativeDate(d.expiresAt) },
+                        { label: "Started", value: toRelativeDate(d.createdAt) },
+                        { label: "Session ID", value: detail?.id ?? "—" },
+                    ] : undefined;
+                })() }), _jsx(ConfirmDeleteModal, { isOpen: Boolean(revokeTarget), onClose: () => setRevokeTarget(null), onConfirm: () => {
                     if (revokeTarget)
                         revokeMutation.mutate(revokeTarget.id);
                 }, isDeleting: revokeMutation.isPending, confirmText: "Revoke", title: "Revoke session?", message: "This will sign the user out of this device immediately.", variant: "danger" })] }));

package/dist/features/admin/components/ViewAuditLogEntryModal.js

@@ -12,6 +12,7 @@ const ACTION_LABELS = {
     checkout_bypass: "Admin checkout bypass",
     coupon_update: "Coupon updated",
     payout_mark_paid: "Payout marked paid",
+    offer_cancel: "Offer cancelled",
     store_status_change: "Store status changed",
     user_role_change: "User role changed",
 };

package/dist/features/admin/components/sections/adminSectionsTypes.d.ts

@@ -1,6 +1,8 @@
 import type { FirestoreDocument } from "@mohasinac/appkit";
-export declare const SECTION_TYPE_OPTIONS: readonly ["welcome", "stats", "trust-indicators", "categories", "brands", "products", "pre-orders", "auctions", "banner", "features", "reviews", "whatsapp-community", "faq", "blog-articles", "newsletter", "stores", "events", "social-feed", "carousel", "custom-cards", "google-reviews", "featured-bundles", "prize-draws", "event-raffles", "collection-cards"];
-export type SectionType = (typeof SECTION_TYPE_OPTIONS)[number];
+import type { SectionType as CanonicalSectionType } from "../../../homepage/schemas/firestore";
+export declare const SECTION_TYPE_OPTIONS: CanonicalSectionType[];
+/** Re-exported, NOT re-declared. There is one `SectionType` in this codebase. */
+export type SectionType = CanonicalSectionType;
 export interface SectionPatchPayload {
     enabled: boolean;
     order?: number;

package/dist/features/admin/components/sections/adminSectionsTypes.js

@@ -1,32 +1,50 @@
 import { ROUTES } from "../../../../next/routing/route-map";
 const LABEL_VERIFIED_SELLERS = "Verified Sellers";
-export const SECTION_TYPE_OPTIONS = [
-    "welcome",
-    "stats",
-    "trust-indicators",
-    "categories",
-    "brands",
-    "products",
-    "pre-orders",
-    "auctions",
-    "banner",
-    "features",
-    "reviews",
-    "whatsapp-community",
-    "faq",
-    "blog-articles",
-    "newsletter",
-    "stores",
-    "events",
-    "social-feed",
-    "carousel",
-    "custom-cards",
-    "google-reviews",
-    "featured-bundles",
-    "prize-draws",
-    "event-raffles",
-    "collection-cards",
-];
+/*
+ * The admin dropdown's section types.
+ *
+ * 🛑 This used to be a bare `as const` array with its OWN `SectionType` derived
+ * from it — a second declaration shadowing the real `SectionType` in
+ * `features/homepage/schemas/firestore.ts`, which is how the two came to
+ * disagree with the create route (Recurrent Root Cause #36's shape, one union
+ * over). The route's own copy was missing `featured-bundles`, `prize-draws`,
+ * `event-raffles` and `collection-cards`, so choosing any of those four in this
+ * dropdown produced a 400 on save — four of twenty-five section types could be
+ * configured in full and never created.
+ *
+ * It is now a `Record<CanonicalSectionType, true>`, so a type added to the
+ * union and not offered here is a COMPILE error, and an entry here that is not
+ * a real section type is too. Declaration order is preserved because the array
+ * is derived from this map's keys, and that order is the dropdown's order.
+ */
+const SECTION_TYPE_PRESENCE = {
+    welcome: true,
+    stats: true,
+    "trust-indicators": true,
+    categories: true,
+    brands: true,
+    products: true,
+    "pre-orders": true,
+    auctions: true,
+    banner: true,
+    features: true,
+    reviews: true,
+    "whatsapp-community": true,
+    faq: true,
+    "blog-articles": true,
+    newsletter: true,
+    stores: true,
+    events: true,
+    "social-feed": true,
+    carousel: true,
+    "custom-cards": true,
+    "google-reviews": true,
+    "featured-bundles": true,
+    "prize-draws": true,
+    "event-raffles": true,
+    "collection-cards": true,
+};
+export const SECTION_TYPE_OPTIONS = Object.keys(SECTION_TYPE_PRESENCE);
 export const DEFAULT_PRODUCTS_BUILDER = {
     title: "Featured Products",
     subtitle: "",

package/dist/features/admin/constants/filter-tabs.d.ts

@@ -188,6 +188,9 @@ export declare const ADMIN_AUDIT_LOG_ACTION_TABS: readonly [{
 }, {
     readonly id: "payout_mark_paid";
     readonly label: "Payout paid";
+}, {
+    readonly id: "offer_cancel";
+    readonly label: "Offer cancelled";
 }, {
     readonly id: "store_status_change";
     readonly label: "Store status";

package/dist/features/admin/constants/filter-tabs.js

@@ -105,6 +105,7 @@ export const ADMIN_AUDIT_LOG_ACTION_TABS = [
     { id: "checkout_bypass", label: "Checkout bypass" },
     { id: "coupon_update", label: "Coupon update" },
     { id: "payout_mark_paid", label: "Payout paid" },
+    { id: "offer_cancel", label: "Offer cancelled" },
     { id: "store_status_change", label: "Store status" },
     { id: "user_role_change", label: "Role change" },
 ];

package/dist/features/admin/schemas/homepage-section-form.d.ts

@@ -0,0 +1,22 @@
+import { z } from "zod";
+/**
+ * 🛑 `annotate()` must be the OUTERMOST call on each field — it keys a WeakMap
+ * by schema instance and every zod wrapper returns a new one.
+ */
+export declare const homepageSectionFormSchema: z.ZodObject<{
+    sectionType: z.ZodString;
+    order: z.ZodOptional<z.ZodNumber>;
+    enabled: z.ZodBoolean;
+    configJson: z.ZodEffects<z.ZodString, string, string>;
+}, "strip", z.ZodTypeAny, {
+    enabled: boolean;
+    sectionType: string;
+    configJson: string;
+    order?: number | undefined;
+}, {
+    enabled: boolean;
+    sectionType: string;
+    configJson: string;
+    order?: number | undefined;
+}>;
+export type HomepageSectionFormValues = z.infer<typeof homepageSectionFormSchema>;

package/dist/features/admin/schemas/homepage-section-form.js

@@ -0,0 +1,68 @@
+/*
+ * WHY: `AdminSectionsView` rendered a `<Form>` with no `schema` prop. The route
+ *      validated `order` / `enabled` / `config`, so nothing invalid was ever
+ *      stored — but a bad value came back as a 400 banner after a round-trip
+ *      rather than as an error on the field that caused it.
+ * WHAT: The homepage-section form schema.
+ *
+ * ## `config` stays open, deliberately
+ *
+ * Its shape differs per section type across 21 types, and the route models it
+ * the same way (`z.object({}).passthrough()`). Naming a fixed shape here would
+ * strip whatever the current type actually needs — the exact defect that made
+ * `productBaseSchema` eat every per-type listing field. The form parses it as
+ * JSON and reports malformed input; the per-type meaning stays with the
+ * section renderer that owns it.
+ *
+ * EXPORTS:
+ *   homepageSectionFormSchema, type HomepageSectionFormValues
+ *
+ * @tag domain:admin,homepage
+ * @tag layer:schema
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:AdminSectionsView
+ * @tag sideEffects:none
+ */
+import { z } from "zod";
+import { annotate } from "../../shell/field-ui-meta";
+import { normalizeError } from "../../../errors/normalize";
+/**
+ * 🛑 `annotate()` must be the OUTERMOST call on each field — it keys a WeakMap
+ * by schema instance and every zod wrapper returns a new one.
+ */
+export const homepageSectionFormSchema = z.object({
+    sectionType: annotate(z.string().min(1, "Choose a section type."), {
+        section: "basics", sectionLabel: "Section", sectionRequired: true,
+        quick: true, order: 1, row: "pair",
+    }),
+    order: annotate(z.coerce
+        .number({ invalid_type_error: "Order must be a number." })
+        .int("Order must be a whole number.")
+        .min(0, "Order cannot be negative.")
+        .optional(), { section: "basics", order: 2, row: "pair" }),
+    enabled: annotate(z.boolean(), {
+        section: "basics", order: 3, row: "quarter",
+    }),
+    configJson: annotate(z.string().refine(isParsableJson, { message: "Config must be valid JSON." }), {
+        section: "config", sectionLabel: "Configuration",
+        order: 1, row: "full", kind: "list",
+    }),
+});
+/** Hoisted so the `annotate()` call above stays a simple two-argument call. */
+function isParsableJson(value) {
+    if (!value.trim())
+        return true;
+    try {
+        JSON.parse(value);
+        return true;
+    }
+    catch (_err) {
+        // Normalized rather than suppressed. The parse failure IS the return value
+        // here — `false` answers the only question this asks — but the project
+        // forbids adding new suppression markers, and this is the same shape
+        // AdminSectionsView already uses for the very same JSON parse.
+        void normalizeError(_err);
+        return false;
+    }
+}

package/dist/features/admin/schemas/nav-item-form.d.ts

@@ -0,0 +1,74 @@
+import { z } from "zod";
+/**
+ * 🛑 `annotate()` must be the OUTERMOST call on each field — it keys a WeakMap
+ * by schema instance and every zod wrapper returns a new one.
+ */
+export declare const navItemFormSchema: z.ZodObject<{
+    label: z.ZodString;
+    href: z.ZodEffects<z.ZodString, string, string>;
+    icon: z.ZodOptional<z.ZodString>;
+    order: z.ZodOptional<z.ZodNumber>;
+    parentId: z.ZodOptional<z.ZodString>;
+    isVisible: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    label: string;
+    href: string;
+    icon?: string | undefined;
+    order?: number | undefined;
+    parentId?: string | undefined;
+    isVisible?: boolean | undefined;
+}, {
+    label: string;
+    href: string;
+    icon?: string | undefined;
+    order?: number | undefined;
+    parentId?: string | undefined;
+    isVisible?: boolean | undefined;
+}>;
+export type NavItemFormValues = z.infer<typeof navItemFormSchema>;
+/** Create contract — `label` and `href` are what make an item usable at all. */
+export declare const navItemCreateSchema: z.ZodObject<{
+    label: z.ZodString;
+    href: z.ZodEffects<z.ZodString, string, string>;
+    icon: z.ZodOptional<z.ZodString>;
+    order: z.ZodOptional<z.ZodNumber>;
+    parentId: z.ZodOptional<z.ZodString>;
+    isVisible: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    label: string;
+    href: string;
+    icon?: string | undefined;
+    order?: number | undefined;
+    parentId?: string | undefined;
+    isVisible?: boolean | undefined;
+}, {
+    label: string;
+    href: string;
+    icon?: string | undefined;
+    order?: number | undefined;
+    parentId?: string | undefined;
+    isVisible?: boolean | undefined;
+}>;
+/** Update contract — every field optional. */
+export declare const navItemUpdateSchema: z.ZodObject<{
+    label: z.ZodOptional<z.ZodString>;
+    href: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    icon: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    order: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
+    parentId: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    isVisible: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    label?: string | undefined;
+    icon?: string | undefined;
+    href?: string | undefined;
+    order?: number | undefined;
+    parentId?: string | undefined;
+    isVisible?: boolean | undefined;
+}, {
+    label?: string | undefined;
+    icon?: string | undefined;
+    href?: string | undefined;
+    order?: number | undefined;
+    parentId?: string | undefined;
+    isVisible?: boolean | undefined;
+}>;

package/dist/features/admin/schemas/nav-item-form.js

@@ -0,0 +1,72 @@
+/*
+ * WHY: `AdminNavEditorView` rendered a `<Form>` with no `schema` prop, so the
+ *      only validation on a navigation item was whatever the server said after
+ *      the round-trip — a 400 banner rather than an error on the field that
+ *      caused it. The route DID validate (`navItemSchema` /
+ *      `updateNavItemSchema` in `api/admin/navigation`), so nothing invalid
+ *      was ever stored; the gap was purely that the admin was told badly.
+ * WHAT: The nav-item form schema, shared by the editor and the routes so the
+ *       two cannot disagree about what a valid nav item is.
+ *
+ * ## `href` is checked against real routes only loosely
+ *
+ * A nav item pointing at a page that does not exist is a real defect —
+ * `audit-nav-page-wiring` blocks it — but that check needs the filesystem and
+ * therefore cannot run in a browser. Here the rule is only "shaped like a
+ * path"; the audit remains the authority on whether the path resolves.
+ *
+ * EXPORTS:
+ *   navItemFormSchema, navItemCreateSchema, navItemUpdateSchema,
+ *   type NavItemFormValues
+ *
+ * @tag domain:admin,navigation
+ * @tag layer:schema
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:AdminNavEditorView,/api/admin/navigation
+ * @tag sideEffects:none
+ */
+import { z } from "zod";
+import { annotate } from "../../shell/field-ui-meta";
+/**
+ * A path or an absolute URL.
+ *
+ * Hoisted for readability only. It was originally inlined, and that surfaced a
+ * real bug in `audit-field-ui-meta`: its comment-stripper did not understand
+ * regex literals, so the trailing `\/\/` of this pattern read as the start of
+ * a line comment and blanked the rest of the line — unbalancing the brace walk
+ * and reporting a false NO_SECTION. The audit now handles regex literals; this
+ * stays hoisted because it reads better, not because it has to.
+ */
+const hrefSchema = z
+    .string()
+    .min(1, "A destination is required.")
+    .refine((v) => v.startsWith("/") || /^https?:\/\//.test(v), {
+    message: "Use a path starting with / or a full http(s) URL.",
+});
+/**
+ * 🛑 `annotate()` must be the OUTERMOST call on each field — it keys a WeakMap
+ * by schema instance and every zod wrapper returns a new one.
+ */
+export const navItemFormSchema = z.object({
+    label: annotate(z.string().min(1, "A label is required.").max(60, "Keep the label under 60 characters."), {
+        section: "basics", sectionLabel: "Nav item", sectionRequired: true,
+        quick: true, order: 1, row: "pair",
+    }),
+    href: annotate(hrefSchema, { section: "basics", quick: true, order: 2, row: "pair" }),
+    icon: annotate(z.string().max(60).optional(), {
+        section: "basics", order: 3, row: "pair",
+    }),
+    order: annotate(z.coerce.number().int("Order must be a whole number.").min(0, "Order cannot be negative.").optional(), { section: "placement", sectionLabel: "Placement", order: 1, row: "pair" }),
+    parentId: annotate(z.string().max(80).optional(), {
+        section: "placement", order: 2, row: "pair",
+        help: "Leave blank for a top-level item.",
+    }),
+    isVisible: annotate(z.boolean().optional(), {
+        section: "placement", order: 3, row: "quarter",
+    }),
+});
+/** Create contract — `label` and `href` are what make an item usable at all. */
+export const navItemCreateSchema = navItemFormSchema;
+/** Update contract — every field optional. */
+export const navItemUpdateSchema = navItemFormSchema.partial();

package/dist/features/auctions/components/AuctionBidsTable.d.ts

@@ -14,5 +14,14 @@ export interface AuctionBidsTableProps {
     totalPages?: number;
     currentPage?: number;
     onPageChange?: (page: number) => void;
+    /**
+     * Open a bid. Supplied by the three dashboard bid listings, which were dead
+     * ends until W8 — a bid could be seen here and never opened, so its amount,
+     * auction, timing and outcome existed only as a table row.
+     *
+     * Optional because the PUBLIC bid history on an auction page also renders
+     * this table, and there a row is not something a visitor may open.
+     */
+    onRowClick?: (bid: BidDocument) => void;
 }
-export declare function AuctionBidsTable({ bids, portal, emptyLabel, totalPages, currentPage, onPageChange, }: AuctionBidsTableProps): React.JSX.Element;
+export declare function AuctionBidsTable({ bids, portal, emptyLabel, totalPages, currentPage, onPageChange, onRowClick, }: AuctionBidsTableProps): React.JSX.Element;

package/dist/features/auctions/components/AuctionBidsTable.js

@@ -52,7 +52,22 @@ function groupByAuction(bids) {
     }
     return Array.from(map.values());
 }
-function AuctionRow({ auction, portal, }) {
+/**
+ * Enter/Space activate a non-button element that behaves as one.
+ *
+ * A named helper rather than an inline closure: the inline form nested six
+ * braces deep inside the row's JSX, which is both unreadable and what
+ * `audit-code-quality`'s DEEP_NESTING rule exists to prevent.
+ */
+function activateOnKey(run) {
+    return (e) => {
+        if (e.key !== "Enter" && e.key !== " ")
+            return;
+        e.preventDefault();
+        run();
+    };
+}
+function AuctionRow({ auction, portal, onRowClick, }) {
     const [expanded, setExpanded] = useState(false);
     // Most-recent bid first — matches the caller's own newest-first ordering
     // (see UserBidsPage) instead of re-sorting by amount, which silently threw
@@ -60,14 +75,17 @@ function AuctionRow({ auction, portal, }) {
     const sorted = useMemo(() => [...auction.bids].sort((a, b) => +new Date(b.bidDate) - +new Date(a.bidDate)), [auction.bids]);
     const highest = auction.bids.reduce((max, b) => Math.max(max, b.bidAmount), 0);
     const isWinning = auction.bids.some((b) => b.isWinning);
-    return (_jsxs(Div, { className: `border border-[var(--appkit-color-border)] ${__O.hidden} bg-[var(--appkit-color-surface)]`, rounded: "xl", shadow: "sm", children: [_jsxs(Button, { type: "button", variant: "ghost", onClick: () => setExpanded((v) => !v), gap: "lg", paddingX: "md", paddingY: "md", className: "w-full text-left", "aria-expanded": expanded, children: [_jsx(ChevronRight, { className: `shrink-0 text-[var(--appkit-color-text-muted)] transition-transform ${expanded ? "rotate-90" : ""}`, size: 16 }), _jsx(Div, { className: "flex-1 min-w-0", children: _jsx(Text, { className: "text-[var(--appkit-color-text)] line-clamp-1", size: "sm", weight: "semibold", children: auction.productTitle }) }), _jsxs(Row, { gap: "sm", className: "shrink-0", children: [isWinning && (_jsx(Badge, { variant: "active", children: "Winning" })), _jsxs(Text, { variant: "secondary", size: "xs", children: [auction.bids.length, " bid", auction.bids.length !== 1 ? "s" : ""] }), _jsx(Text, { className: "text-[var(--appkit-color-text)]", size: "sm", weight: "semibold", children: formatBidAmount(highest) })] })] }), expanded && (_jsxs(Div, { className: "border-t border-[var(--appkit-color-border)]", children: [_jsxs(Div, { textSize: "xs", textWeight: "medium", paddingX: "x-md", paddingY: "y-xs", className: `grid text-[var(--appkit-color-text-muted)] uppercase tracking-wide border-b border-[var(--appkit-color-border-subtle)] ${portal === "buyer" ? "[grid-template-columns:1fr_auto_auto]" : "[grid-template-columns:1fr_1fr_auto_auto]"}`, children: [_jsx(Span, { children: portal === "buyer" ? "Amount" : "Bidder" }), portal !== "buyer" && _jsx(Span, { children: "Amount" }), _jsx(Span, { children: "Status" }), _jsx(Span, { className: "text-right", children: "Time" })] }), sorted.map((bid) => (_jsxs(Div, { layout: "grid", align: "center", paddingX: "x-md", paddingY: "y-xs-tall", className: `border-b border-[var(--appkit-color-border-subtle)] last:border-0 hover:bg-[var(--appkit-color-border-subtle)] transition-colors ${portal === "buyer" ? "[grid-template-columns:1fr_auto_auto]" : "[grid-template-columns:1fr_1fr_auto_auto]"}`, children: [portal !== "buyer" && (_jsx(Text, { className: "text-[var(--appkit-color-text)] truncate pr-[0.75rem]", size: "sm", children: bid.userName || bid.userId })), _jsx(Text, { className: "text-[var(--appkit-color-text)]", size: "sm", weight: "medium", children: formatBidAmount(bid.bidAmount) }), _jsx(Badge, { variant: STATUS_VARIANT[bid.status] ?? "pending", className: "capitalize", children: bid.status }), _jsxs(Stack, { gap: "xs", align: "end", children: [_jsx(Text, { variant: "secondary", size: "xs", align: "end", children: relDate(bid.bidDate) }), portal === "buyer" && bid.status === "won" && (_jsx(TextLink, { href: bid.orderId
+    return (_jsxs(Div, { className: `border border-[var(--appkit-color-border)] ${__O.hidden} bg-[var(--appkit-color-surface)]`, rounded: "xl", shadow: "sm", children: [_jsxs(Button, { type: "button", variant: "ghost", onClick: () => setExpanded((v) => !v), gap: "lg", paddingX: "md", paddingY: "md", className: "w-full text-left", "aria-expanded": expanded, children: [_jsx(ChevronRight, { className: `shrink-0 text-[var(--appkit-color-text-muted)] transition-transform ${expanded ? "rotate-90" : ""}`, size: 16 }), _jsx(Div, { className: "flex-1 min-w-0", children: _jsx(Text, { className: "text-[var(--appkit-color-text)] line-clamp-1", size: "sm", weight: "semibold", children: auction.productTitle }) }), _jsxs(Row, { gap: "sm", className: "shrink-0", children: [isWinning && (_jsx(Badge, { variant: "active", children: "Winning" })), _jsxs(Text, { variant: "secondary", size: "xs", children: [auction.bids.length, " bid", auction.bids.length !== 1 ? "s" : ""] }), _jsx(Text, { className: "text-[var(--appkit-color-text)]", size: "sm", weight: "semibold", children: formatBidAmount(highest) })] })] }), expanded && (_jsxs(Div, { className: "border-t border-[var(--appkit-color-border)]", children: [_jsxs(Div, { textSize: "xs", textWeight: "medium", paddingX: "x-md", paddingY: "y-xs", className: `grid text-[var(--appkit-color-text-muted)] uppercase tracking-wide border-b border-[var(--appkit-color-border-subtle)] ${portal === "buyer" ? "[grid-template-columns:1fr_auto_auto]" : "[grid-template-columns:1fr_1fr_auto_auto]"}`, children: [_jsx(Span, { children: portal === "buyer" ? "Amount" : "Bidder" }), portal !== "buyer" && _jsx(Span, { children: "Amount" }), _jsx(Span, { children: "Status" }), _jsx(Span, { className: "text-right", children: "Time" })] }), sorted.map((bid) => (_jsxs(Div, { layout: "grid", align: "center", paddingX: "x-md", paddingY: "y-xs-tall", 
+                        // Keyboard-reachable only when it is actually interactive —
+                        // a row with no handler must not be a tab stop.
+                        role: onRowClick ? "button" : undefined, tabIndex: onRowClick ? 0 : undefined, onClick: onRowClick ? () => onRowClick(bid) : undefined, onKeyDown: onRowClick ? activateOnKey(() => onRowClick(bid)) : undefined, className: `border-b border-[var(--appkit-color-border-subtle)] last:border-0 hover:bg-[var(--appkit-color-border-subtle)] transition-colors ${onRowClick ? "cursor-pointer" : ""} ${portal === "buyer" ? "[grid-template-columns:1fr_auto_auto]" : "[grid-template-columns:1fr_1fr_auto_auto]"}`, children: [portal !== "buyer" && (_jsx(Text, { className: "text-[var(--appkit-color-text)] truncate pr-[0.75rem]", size: "sm", children: bid.userName || bid.userId })), _jsx(Text, { className: "text-[var(--appkit-color-text)]", size: "sm", weight: "medium", children: formatBidAmount(bid.bidAmount) }), _jsx(Badge, { variant: STATUS_VARIANT[bid.status] ?? "pending", className: "capitalize", children: bid.status }), _jsxs(Stack, { gap: "xs", align: "end", children: [_jsx(Text, { variant: "secondary", size: "xs", align: "end", children: relDate(bid.bidDate) }), portal === "buyer" && bid.status === "won" && (_jsx(TextLink, { href: bid.orderId
                                             ? String(ROUTES.USER.ORDER_DETAIL(bid.orderId))
                                             : `${String(ROUTES.USER.CHECKOUT)}?lane=${CART_LANE.AUCTION}`, size: "xs", weight: "semibold", children: bid.orderId ? "View order" : "Pay now →" }))] })] }, bid.id)))] }))] }));
 }
-export function AuctionBidsTable({ bids, portal = "buyer", emptyLabel = "No bids found.", totalPages, currentPage, onPageChange, }) {
+export function AuctionBidsTable({ bids, portal = "buyer", emptyLabel = "No bids found.", totalPages, currentPage, onPageChange, onRowClick, }) {
     const auctions = useMemo(() => groupByAuction(bids), [bids]);
     if (auctions.length === 0) {
         return (_jsx(Div, { padding: "y-6xl", className: "text-left", children: _jsx(Text, { variant: "secondary", children: emptyLabel }) }));
     }
-    return (_jsxs(Stack, { gap: "3", children: [auctions.map((auction) => (_jsx(AuctionRow, { auction: auction, portal: portal }, auction.productId))), totalPages !== undefined && totalPages > 1 && currentPage !== undefined && onPageChange && (_jsx(Row, { justify: "center", children: _jsx(Pagination, { currentPage: currentPage, totalPages: totalPages, onPageChange: onPageChange }) }))] }));
+    return (_jsxs(Stack, { gap: "3", children: [auctions.map((auction) => (_jsx(AuctionRow, { auction: auction, portal: portal, onRowClick: onRowClick }, auction.productId))), totalPages !== undefined && totalPages > 1 && currentPage !== undefined && onPageChange && (_jsx(Row, { justify: "center", children: _jsx(Pagination, { currentPage: currentPage, totalPages: totalPages, onPageChange: onPageChange }) }))] }));
 }