@mohasinac/appkit 4.14.0 → 4.15.0

package/dist/features/auctions/components/bid-detail-fields.d.ts

@@ -0,0 +1,29 @@
+import type { BidDocument } from "../schemas/firestore";
+/** Which portal is looking. Decides whether bidder identity is shown. */
+export type BidDetailViewer = "buyer" | "seller" | "admin";
+type FieldRow = {
+    label: string;
+    value: string;
+};
+/**
+ * A bid's status as a badge.
+ *
+ * `forfeited` is deliberately distinguished from `cancelled`: a forfeited bid
+ * WON and then let the payment window lapse, which is the seller's problem and
+ * the buyer's fault; a cancelled one never won anything. Collapsing them would
+ * hide exactly the distinction a support query is about.
+ */
+export declare function bidStatusBadge(status: string | undefined): {
+    label: string;
+    tone: string;
+};
+/**
+ * The scalar rows for a bid's detail modal.
+ *
+ * `bidderName` appears only for seller and admin. A buyer opening their OWN
+ * bid does not need to be told their own name, and the same component is used
+ * by all three, so gating here rather than at each call site is what stops a
+ * future copy-paste showing one buyer another's identity.
+ */
+export declare function buildBidDetailFields(bid: BidDocument, viewer: BidDetailViewer): FieldRow[];
+export {};

package/dist/features/auctions/components/bid-detail-fields.js

@@ -0,0 +1,103 @@
+/*
+ * WHY: All three bid listings — buyer, seller and admin — were dead ends. A
+ *      bid could be SEEN in a list and never opened, so the amount, the
+ *      auction it belongs to, when it was placed and whether it was outbid,
+ *      won or forfeited were only ever visible as a table row. `bid` is also
+ *      one of the three `relatedType` values with no per-record page in ANY
+ *      role, so a bid notification had nowhere to link.
+ * WHAT: The `<RecordDetailModal>` field list for a bid, built once.
+ *
+ * ## One builder, three portals
+ *
+ * The three views differ only in whether they may show the bidder's identity:
+ * a buyer sees their own bid, a seller sees who bid on their auction, and an
+ * admin sees everything. Writing the field list three times would be three
+ * chances to leak a bidder's name into the buyer view or to forget a field in
+ * one portal — the shape of Root Cause #38, one layer up.
+ *
+ * `maskPublicBid` already exists for the PUBLIC bid history and is unchanged;
+ * this is the dashboard equivalent, where the viewer is authenticated and the
+ * question is which role they hold.
+ *
+ * EXPORTS:
+ *   buildBidDetailFields, bidStatusBadge, type BidDetailViewer
+ *
+ * @tag domain:auctions
+ * @tag layer:feature-util
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:UserBidsView,SellerBidsView,AdminBidsView
+ * @tag sideEffects:none
+ */
+const money = (amount, currency = "INR") => amount == null
+    ? "—"
+    : new Intl.NumberFormat("en-IN", { style: "currency", currency, maximumFractionDigits: 2 }).format(amount);
+const when = (value) => {
+    if (!value)
+        return "—";
+    const d = value instanceof Date ? value : new Date(String(value));
+    return Number.isNaN(d.getTime()) ? "—" : d.toLocaleString();
+};
+/**
+ * A bid's status as a badge.
+ *
+ * `forfeited` is deliberately distinguished from `cancelled`: a forfeited bid
+ * WON and then let the payment window lapse, which is the seller's problem and
+ * the buyer's fault; a cancelled one never won anything. Collapsing them would
+ * hide exactly the distinction a support query is about.
+ */
+export function bidStatusBadge(status) {
+    switch (status) {
+        case "won":
+            return { label: "Won", tone: "success" };
+        case "active":
+            return { label: "Leading", tone: "info" };
+        case "outbid":
+            return { label: "Outbid", tone: "warning" };
+        case "forfeited":
+            return { label: "Forfeited — payment window lapsed", tone: "danger" };
+        case "cancelled":
+            return { label: "Cancelled", tone: "default" };
+        case "lost":
+            return { label: "Lost", tone: "default" };
+        default:
+            return { label: status ?? "Unknown", tone: "default" };
+    }
+}
+/**
+ * The scalar rows for a bid's detail modal.
+ *
+ * `bidderName` appears only for seller and admin. A buyer opening their OWN
+ * bid does not need to be told their own name, and the same component is used
+ * by all three, so gating here rather than at each call site is what stops a
+ * future copy-paste showing one buyer another's identity.
+ */
+export function buildBidDetailFields(bid, viewer) {
+    const rows = [
+        { label: "Auction", value: bid.productTitle || bid.productId },
+        { label: "Bid amount", value: money(bid.bidAmount, bid.currency) },
+    ];
+    // Only meaningful when the bid raised a previous one.
+    if (bid.previousBidAmount != null) {
+        rows.push({ label: "Previous high bid", value: money(bid.previousBidAmount, bid.currency) });
+    }
+    if (bid.autoMaxBid != null) {
+        rows.push({ label: "Auto-bid limit", value: money(bid.autoMaxBid, bid.currency) });
+    }
+    rows.push({ label: "Placed", value: when(bid.bidDate ?? bid.createdAt) });
+    if (viewer !== "buyer") {
+        rows.push({ label: "Bidder", value: bid.userName || bid.userId });
+    }
+    // A buyout is a real bid, not a bid-free purchase — surfacing it here is
+    // what makes "why is there no ladder on this auction" answerable.
+    if (bid.isBuyout) {
+        rows.push({ label: "Placed via", value: "Buy Now" });
+    }
+    // The order this bid became. Present only once the win was actually paid,
+    // which is exactly the question "did they ever pay?" asks.
+    if (bid.orderId) {
+        rows.push({ label: "Order", value: bid.orderId });
+    }
+    rows.push({ label: "Bid ID", value: bid.id });
+    return rows;
+}

package/dist/features/audit-log/schemas/firestore.d.ts

@@ -23,6 +23,13 @@ export declare const AdminAuditActionValues: {
     readonly PAYOUT_MARK_PAID: "payout_mark_paid";
     readonly STORE_STATUS_CHANGE: "store_status_change";
     readonly USER_ROLE_CHANGE: "user_role_change";
+    /**
+     * Admin cancelled an offer. The store keeps sole authority to accept,
+     * counter and decline; cancelling is the ONE write an admin may make, and
+     * it is an escalation — reason required, and recorded both here and in the
+     * offer's own `statusHistory`.
+     */
+    readonly OFFER_CANCEL: "offer_cancel";
 };
 export type AdminAuditAction = (typeof AdminAuditActionValues)[keyof typeof AdminAuditActionValues];
 export interface AdminAuditLogDocument extends BaseDocument {
@@ -55,5 +62,12 @@ export declare const ADMIN_AUDIT_LOG_FIELDS: {
         readonly PAYOUT_MARK_PAID: "payout_mark_paid";
         readonly STORE_STATUS_CHANGE: "store_status_change";
         readonly USER_ROLE_CHANGE: "user_role_change";
+        /**
+         * Admin cancelled an offer. The store keeps sole authority to accept,
+         * counter and decline; cancelling is the ONE write an admin may make, and
+         * it is an escalation — reason required, and recorded both here and in the
+         * offer's own `statusHistory`.
+         */
+        readonly OFFER_CANCEL: "offer_cancel";
     };
 };

package/dist/features/audit-log/schemas/firestore.js

@@ -21,6 +21,13 @@ export const AdminAuditActionValues = {
     PAYOUT_MARK_PAID: "payout_mark_paid",
     STORE_STATUS_CHANGE: "store_status_change",
     USER_ROLE_CHANGE: "user_role_change",
+    /**
+     * Admin cancelled an offer. The store keeps sole authority to accept,
+     * counter and decline; cancelling is the ONE write an admin may make, and
+     * it is an escalation — reason required, and recorded both here and in the
+     * offer's own `statusHistory`.
+     */
+    OFFER_CANCEL: "offer_cancel",
 };
 export const ADMIN_AUDIT_LOG_FIELDS = {
     ACTOR_UID: "actorUid",

package/dist/features/blog/schemas/blog-form.d.ts

@@ -0,0 +1,80 @@
+import { z } from "zod";
+/**
+ * The blog form's own schema. Distinct from `blogPostSchema` (blog/schemas),
+ * which requires an `id` this draft cannot have before its first save and
+ * models `coverImage` as a `MediaField` where the form holds a plain URL.
+ *
+ * ## Why `.passthrough()` is gone
+ *
+ * It used to name FOUR of the draft's fourteen fields and rely on passthrough
+ * to keep the other ten alive. That is the single most dangerous shape in this
+ * codebase — `z.object()` strips unknown keys, so the moment anyone tightened
+ * it, ten fields would vanish on the next save with no error. Verified safe to
+ * remove here: every one of the fourteen is now named, and the save payload
+ * (below) maps each explicitly rather than spreading the draft, so there is no
+ * extra key for passthrough to have been protecting.
+ *
+ * ## Section, row and control come from the field itself
+ *
+ * 🛑 `annotate()` must be the OUTERMOST call — it keys a WeakMap by schema
+ * instance and every zod wrapper returns a new one, so
+ * `annotate(z.string(), …).optional()` silently loses the metadata and drops
+ * the field into the "advanced" fallback. `audit-field-ui-meta` blocks it.
+ */
+export declare const blogDraftSchema: z.ZodObject<{
+    title: z.ZodString;
+    /**
+     * NO `blog-` prefix. Surfaced by `roundtrip-diff` in W4: the schema demanded
+     * `/^blog-/`, and **all 20 stored posts fail it** — every seeded post holds
+     * the bare slug (`spot-genuine-takara-tomy-beyblade`) while only the
+     * DOCUMENT ID carries the prefix (`generateBlogPostId` adds it).
+     *
+     * `BlogRepository.findBySlug` queries this field directly, so the public URL
+     * is the bare slug. The regex therefore broke the editor from both ends:
+     * opening any existing post flagged its slug invalid, and "fixing" it to
+     * satisfy the rule would rewrite the stored slug and 404 the live URL.
+     */
+    slug: z.ZodString;
+    excerpt: z.ZodString;
+    content: z.ZodString;
+    coverImage: z.ZodString;
+    youtubeId: z.ZodString;
+    category: z.ZodEnum<["news", "tips", "guides", "updates", "community"]>;
+    tags: z.ZodArray<z.ZodString, "many">;
+    metaTitle: z.ZodString;
+    metaDescription: z.ZodUnion<[z.ZodString, z.ZodLiteral<"">]>;
+    status: z.ZodEnum<["draft", "published", "archived"]>;
+    publishedAt: z.ZodString;
+    authorName: z.ZodString;
+    isFeatured: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    status: "draft" | "published" | "archived";
+    title: string;
+    content: string;
+    youtubeId: string;
+    slug: string;
+    category: "news" | "tips" | "guides" | "updates" | "community";
+    tags: string[];
+    publishedAt: string;
+    isFeatured: boolean;
+    excerpt: string;
+    coverImage: string;
+    authorName: string;
+    metaTitle: string;
+    metaDescription: string;
+}, {
+    status: "draft" | "published" | "archived";
+    title: string;
+    content: string;
+    youtubeId: string;
+    slug: string;
+    category: "news" | "tips" | "guides" | "updates" | "community";
+    tags: string[];
+    publishedAt: string;
+    isFeatured: boolean;
+    excerpt: string;
+    coverImage: string;
+    authorName: string;
+    metaTitle: string;
+    metaDescription: string;
+}>;

package/dist/features/blog/schemas/blog-form.js

@@ -0,0 +1,100 @@
+/*
+ * WHY: The blog form's schema used to live inside `AdminBlogEditorView.tsx`.
+ *      Registering it in `SCHEMAS.forms` from there would have made
+ *      `schemas/registry.ts` import a `.tsx` component — and `routeHandler.ts`
+ *      imports SCHEMAS, so every API route would have pulled the admin blog
+ *      editor's whole React tree into the server bundle. Schemas belong in
+ *      `schemas/`; that is the layering this restores.
+ * WHAT: The blog editor's form schema, with its UI metadata.
+ *
+ * EXPORTS:
+ *   blogDraftSchema
+ *
+ * @tag domain:blog
+ * @tag layer:schema
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:AdminBlogEditorView,SCHEMAS.forms
+ * @tag sideEffects:none
+ */
+import { z } from "zod";
+import { annotate } from "../../shell/field-ui-meta";
+import { blogPostCategorySchema } from "./index";
+/**
+ * The blog form's own schema. Distinct from `blogPostSchema` (blog/schemas),
+ * which requires an `id` this draft cannot have before its first save and
+ * models `coverImage` as a `MediaField` where the form holds a plain URL.
+ *
+ * ## Why `.passthrough()` is gone
+ *
+ * It used to name FOUR of the draft's fourteen fields and rely on passthrough
+ * to keep the other ten alive. That is the single most dangerous shape in this
+ * codebase — `z.object()` strips unknown keys, so the moment anyone tightened
+ * it, ten fields would vanish on the next save with no error. Verified safe to
+ * remove here: every one of the fourteen is now named, and the save payload
+ * (below) maps each explicitly rather than spreading the draft, so there is no
+ * extra key for passthrough to have been protecting.
+ *
+ * ## Section, row and control come from the field itself
+ *
+ * 🛑 `annotate()` must be the OUTERMOST call — it keys a WeakMap by schema
+ * instance and every zod wrapper returns a new one, so
+ * `annotate(z.string(), …).optional()` silently loses the metadata and drops
+ * the field into the "advanced" fallback. `audit-field-ui-meta` blocks it.
+ */
+export const blogDraftSchema = z.object({
+    title: annotate(z.string().min(1, "Title is required"), {
+        section: "content", sectionLabel: "Content", sectionRequired: true,
+        quick: true, order: 1, row: "full",
+    }),
+    /**
+     * NO `blog-` prefix. Surfaced by `roundtrip-diff` in W4: the schema demanded
+     * `/^blog-/`, and **all 20 stored posts fail it** — every seeded post holds
+     * the bare slug (`spot-genuine-takara-tomy-beyblade`) while only the
+     * DOCUMENT ID carries the prefix (`generateBlogPostId` adds it).
+     *
+     * `BlogRepository.findBySlug` queries this field directly, so the public URL
+     * is the bare slug. The regex therefore broke the editor from both ends:
+     * opening any existing post flagged its slug invalid, and "fixing" it to
+     * satisfy the rule would rewrite the stored slug and 404 the live URL.
+     */
+    slug: annotate(z.string().min(1, "Slug is required"), {
+        section: "content", quick: true, order: 2, row: "full",
+        // T1 calculated: derived from the title on CREATE only, then frozen.
+        // Recomputing on rename would break every inbound link and bookmark —
+        // categories, brands and bundles all establish that convention.
+        tier: "t1-derive",
+        help: "Auto-filled from the title. Changing it after publishing breaks existing links.",
+    }),
+    excerpt: annotate(z.string().max(300, "Keep the excerpt under 300 characters."), {
+        section: "content", order: 3, row: "full",
+    }),
+    content: annotate(z.string().min(1, "Content is required"), {
+        section: "content", quick: true, order: 4, row: "full",
+    }),
+    coverImage: annotate(z.string(), {
+        section: "media", sectionLabel: "Media", order: 1, row: "full", kind: "media",
+    }),
+    youtubeId: annotate(z.string(), {
+        section: "media", order: 2, row: "full",
+        help: "A YouTube video id or watch URL — rendered as a privacy-mode embed.",
+    }),
+    category: annotate(blogPostCategorySchema, {
+        section: "seo", sectionLabel: "SEO & Tags", quick: true, order: 1, row: "pair",
+    }),
+    tags: annotate(z.array(z.string()), {
+        section: "seo", order: 2, row: "full", kind: "list",
+    }),
+    metaTitle: annotate(z.string().max(60, "Keep the meta title under 60 characters."), {
+        section: "seo", order: 3, row: "full", tier: "t1-derive",
+    }),
+    metaDescription: annotate(z.string().max(160, "Keep the meta description under 160 characters.").or(z.literal("")), { section: "seo", order: 4, row: "full", tier: "t1-derive" }),
+    status: annotate(z.enum(["draft", "published", "archived"]), {
+        section: "publish", sectionLabel: "Publish", quick: true, order: 1, row: "pair",
+    }),
+    publishedAt: annotate(z.string(), {
+        section: "publish", order: 2, row: "pair", kind: "date",
+    }),
+    authorName: annotate(z.string(), { section: "publish", order: 3, row: "pair" }),
+    isFeatured: annotate(z.boolean(), { section: "publish", order: 4, row: "quarter" }),
+});

package/dist/features/events/components/AdminEventEditorView.js

@@ -2,14 +2,14 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { normalizeError } from "../../../errors/normalize";
 import { useApiMutation } from "@mohasinac/appkit/client";
-import React, { useEffect, useMemo } from "react";
-import { z } from "zod";
+import React, { useEffect } from "react";
 import { useQuery } from "@tanstack/react-query";
 import { Alert, Button, Div, Grid, Heading, Input, Label, RichTextEditor, Row, Select, Stack, StackedViewShell, TagInput, Text, Textarea, Toggle, } from "../../../ui";
 import { FormShellContext, useFormShellState, applyZodIssues, FormErrorSummary } from "../../../ui/forms";
 import { apiClient } from "../../../http";
 import { ADMIN_ENDPOINTS } from "../../../constants/api-endpoints";
-import { StepForm } from "../../shell";
+import { SectionForm, useSectionFormNav } from "../../shell";
+import { eventDraftSchema } from "../schemas/event-form";
 import { ProductInlineSelect } from "../../seller/components/ProductInlineSelect";
 import { CouponInlineSelect } from "../../seller/components/CouponInlineSelect";
 // Covers the cross-type required fields plus the two conditional rules the
@@ -19,27 +19,6 @@ import { CouponInlineSelect } from "../../seller/components/CouponInlineSelect";
 // form-builder arrays, raffle/spin config) are deliberately left unvalidated
 // — modeling their full conditional shape correctly would need much deeper
 // per-type domain rules than this pass is scoped for.
-const eventDraftSchema = z.object({
-    type: z.string(),
-    title: z.string().min(1, "Title is required"),
-    startsAt: z.string().min(1, "Start date is required"),
-    endsAt: z.string().min(1, "End date is required"),
-    couponId: z.string(),
-    displayCode: z.string(),
-    pollOptions: z.array(z.object({ id: z.string(), label: z.string() })),
-}).passthrough().superRefine((v, ctx) => {
-    if (v.type === "offer") {
-        if (!v.couponId.trim()) {
-            ctx.addIssue({ code: z.ZodIssueCode.custom, path: ["couponId"], message: "Coupon is required for offer events" });
-        }
-        if (!v.displayCode.trim()) {
-            ctx.addIssue({ code: z.ZodIssueCode.custom, path: ["displayCode"], message: "Display code is required for offer events" });
-        }
-    }
-    if (v.type === "poll" && v.pollOptions.filter((o) => o.label.trim()).length < 2) {
-        ctx.addIssue({ code: z.ZodIssueCode.custom, path: ["pollOptions"], message: "Poll events require at least 2 options" });
-    }
-});
 const __P = {
     p4: "p-[var(--appkit-space-4)]",
 };
@@ -226,7 +205,6 @@ export function AdminEventEditorView({ eventId, onSaved, embedded, allowedTypes,
     const isEdit = Boolean(eventId);
     const [draft, setDraft] = React.useState(DEFAULT_DRAFT);
     const [slugManual, setSlugManual] = React.useState(false);
-    const [currentStep, setCurrentStep] = React.useState(0);
     const [saveMessage, setSaveMessage] = React.useState(null);
     const [triggerMessage, setTriggerMessage] = React.useState(null);
     const [raffleWinnerName, setRaffleWinnerName] = React.useState("");
@@ -358,44 +336,49 @@ export function AdminEventEditorView({ eventId, onSaved, embedded, allowedTypes,
     });
     const isLoading = saveMutation.isPending || eventQuery.isLoading;
     // --- steps ---
-    const steps = [
+    /**
+     * Sections, not steps — every field reachable at once, one submit at the
+     * bottom. The old wizard gated Settings behind Details validating, so a
+     * missing end date made an event's poll options unreachable.
+     *
+     * Ids match the schema's `section` annotations exactly, which is what lets
+     * `<FormErrorSummary>` jump to the right panel.
+     */
+    const sections = [
         {
+            id: "details",
+            required: true,
+            quick: true,
             label: "Details",
             fields: ["type", "title", "slug", "description", "startsAt", "endsAt", "tags"],
-            validate: (values) => {
-                if (!values.title.trim())
-                    return "Title is required";
-                if (!values.startsAt)
-                    return "Start date is required";
-                if (!values.endsAt)
-                    return "End date is required";
-                return null;
-            },
+            // The per-step `validate` is gone: every rule it stated is already in
+            // eventDraftSchema (title/startsAt/endsAt are .min(1)), and it only ever
+            // acted as a gate to the next step.
             render: ({ values, onChange }) => (_jsxs(Stack, { gap: "md", children: [_jsx(Heading, { level: 3, className: "mb-2", children: "Event Details" }), !isEdit && (_jsx(Select, { label: "Event type", value: values.type, options: allowedTypes ? EVENT_TYPE_OPTIONS.filter((o) => allowedTypes.includes(o.value)) : EVENT_TYPE_OPTIONS, onChange: (e) => onChange({ type: e.target.value }) })), _jsx(Input, { label: "Title", value: values.title, onChange: (e) => {
                             const v = e.target.value;
                             onChange({ title: v, ...(!slugManual && { slug: toEventSlug(v) }) });
                         }, placeholder: "Charizard Flash Sale 2026", required: true }), _jsx(Input, { label: "Slug", value: values.slug, onChange: (e) => { setSlugManual(true); onChange({ slug: e.target.value }); }, placeholder: "event-charizard-flash-sale-2026", helperText: "Auto-generated from title. Must start with 'event-'." }), _jsxs(Stack, { gap: "xs", children: [_jsx(Label, { children: "Description" }), _jsx(RichTextEditor, { value: values.description, onChange: (v) => onChange({ description: v }), minHeightClassName: "min-h-[120px]", placeholder: "Describe this event\u2026" })] }), _jsxs(Grid, { cols: 2, gap: "sm", children: [_jsx(Input, { label: "Starts at", type: "datetime-local", value: values.startsAt, onChange: (e) => onChange({ startsAt: e.target.value }), required: true }), _jsx(Input, { label: "Ends at", type: "datetime-local", value: values.endsAt, onChange: (e) => onChange({ endsAt: e.target.value }), required: true })] }), _jsx(TagInput, { label: "Tags", value: values.tags, onChange: (t) => onChange({ tags: t }), placeholder: "e.g. pokemon, sale, 2026" })] })),
         },
         {
+            id: "media",
             label: "Media",
+            // <Collapse> unmounts its children — without this, collapsing the
+            // section mid-upload discards the transfer.
+            keepMounted: true,
             fields: ["coverImageUrl"],
             render: ({ values, onChange }) => (_jsxs(Stack, { gap: "md", children: [_jsx(Heading, { level: 3, className: "mb-2", children: "Media" }), _jsx(Input, { label: "Cover Image URL (optional)", value: values.coverImageUrl, onChange: (e) => onChange({ coverImageUrl: e.target.value }), placeholder: "https://\u2026", helperText: "Direct link to the event cover image." })] })),
         },
         {
+            id: "settings",
             label: "Settings",
             fields: ["status", "allowGuestParticipation", "discountPercent", "saleBannerText", "couponId", "displayCode", "offerBannerText", "pollOptions", "resultsVisibility", "allowMultiSelect", "allowComment", "maxEntriesPerUser", "hasLeaderboard", "hasPointSystem", "pointsLabel", "entryReviewRequired", "surveyFields", "anonymous", "feedbackFields"],
-            validate: (values) => {
-                if (values.type === "offer" && !values.couponId.trim())
-                    return "Coupon ID is required for offer events";
-                if (values.type === "offer" && !values.displayCode.trim())
-                    return "Display code is required for offer events";
-                if (values.type === "poll" && values.pollOptions.filter((o) => o.label.trim()).length < 2)
-                    return "Poll events require at least 2 options";
-                return null;
-            },
+            // Same: the offer-coupon, offer-display-code and poll-minimum-options
+            // rules are all stated in eventDraftSchema's superRefine, which now
+            // surfaces them inline on the field instead of as a step-blocking banner.
             render: ({ values, onChange }) => (_jsxs(Stack, { gap: "md", children: [_jsx(Heading, { level: 3, className: "mb-2", children: "Event Settings" }), isEdit && (_jsx(Select, { label: "Status", value: values.status, options: EVENT_STATUS_OPTIONS, onChange: (e) => onChange({ status: e.target.value }) })), values.createdBy && (_jsxs(Stack, { gap: "none", children: [_jsx(Text, { size: "sm", weight: "medium", className: "mb-1", children: "Created by" }), _jsx(Text, { size: "sm", color: "muted", children: values.createdBy })] })), _jsxs(Stack, { gap: "xs", surface: "muted", rounded: "lg", border: "default", padding: "sm", children: [_jsx(Toggle, { checked: values.allowGuestParticipation, onChange: (v) => onChange({ allowGuestParticipation: v }), label: "Allow guest participation (no login required)" }), _jsx(Text, { size: "xs", color: "muted", children: "When enabled, unauthenticated visitors can participate in this event (poll vote, survey/feedback response, raffle entry, or wheel spin), identified by a hashed IP address instead of an account. Applies uniformly to whatever entry mechanism this event type uses." })] }), values.type === "sale" && (_jsxs(Stack, { gap: "xs", surface: "muted", rounded: "lg", border: "default", padding: "sm", children: [_jsx(Text, { size: "sm", weight: "semibold", color: "muted", children: "Sale configuration" }), _jsxs(Grid, { cols: 2, gap: "sm", children: [_jsx(Input, { label: "Discount %", type: "number", value: values.discountPercent, onChange: (e) => onChange({ discountPercent: e.target.value }), placeholder: "10" }), _jsx(Input, { label: "Banner text (optional)", value: values.saleBannerText, onChange: (e) => onChange({ saleBannerText: e.target.value }), placeholder: "Limited time \u2014 ends Sunday!" })] })] })), values.type === "offer" && (_jsxs(Stack, { gap: "xs", surface: "muted", rounded: "lg", border: "default", padding: "sm", children: [_jsx(Text, { size: "sm", weight: "semibold", color: "muted", children: "Offer configuration" }), _jsxs(Grid, { cols: 2, gap: "sm", children: [_jsxs(Div, { children: [_jsx(Text, { size: "sm", weight: "medium", className: "mb-1", children: "Coupon" }), _jsx(CouponInlineSelect, { scope: "admin", value: values.couponId, onChange: (id) => onChange({ couponId: id ?? "" }), placeholder: "Search coupons\u2026", allowCreate: false })] }), _jsx(Input, { label: "Display code", value: values.displayCode, onChange: (e) => onChange({ displayCode: e.target.value }), placeholder: "CHARIZARD25", required: true })] }), _jsx(Input, { label: "Banner text (optional)", value: values.offerBannerText, onChange: (e) => onChange({ offerBannerText: e.target.value }), placeholder: "Use CHARIZARD25 at checkout" })] })), values.type === "poll" && (_jsxs(Stack, { gap: "md", rounded: "xl", border: "default", padding: "md", children: [_jsx(Text, { size: "sm", weight: "semibold", color: "muted", children: "Poll configuration" }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "xs", color: "muted", children: "Options (minimum 2)" }), values.pollOptions.map((opt, idx) => (_jsxs(Row, { gap: "xs", children: [_jsx(Div, { className: "flex-1", children: _jsx(Input, { value: opt.label, onChange: (e) => onChange({ pollOptions: values.pollOptions.map((o) => o.id === opt.id ? { ...o, label: e.target.value } : o) }), placeholder: `Option ${idx + 1}` }) }), values.pollOptions.length > 2 && (_jsx(Button, { variant: "ghost", type: "button", onClick: () => onChange({ pollOptions: values.pollOptions.filter((o) => o.id !== opt.id) }), className: CLS_REMOVE_BTN_PX2, "aria-label": "Remove option", children: "\u00D7" }))] }, opt.id))), _jsx(Button, { type: "button", variant: "outline", size: "sm", onClick: () => onChange({ pollOptions: [...values.pollOptions, { id: `opt${Date.now()}`, label: "" }] }), children: "+ Add option" })] }), _jsx(Select, { label: "Results visibility", value: values.resultsVisibility, options: POLL_VISIBILITY_OPTIONS, onChange: (e) => onChange({ resultsVisibility: e.target.value }) }), _jsxs(Stack, { gap: "sm", children: [_jsx(Toggle, { checked: values.allowMultiSelect, onChange: (v) => onChange({ allowMultiSelect: v }), label: "Allow multi-select" }), _jsx(Toggle, { checked: values.allowComment, onChange: (v) => onChange({ allowComment: v }), label: "Allow comment with vote" })] })] })), values.type === "survey" && (_jsxs(Stack, { gap: "md", rounded: "xl", border: "default", padding: "md", children: [_jsx(Text, { size: "sm", weight: "semibold", color: "muted", children: "Survey configuration" }), _jsxs(Grid, { cols: 2, gap: "sm", children: [_jsx(Input, { label: "Max entries per user", type: "number", value: values.maxEntriesPerUser, onChange: (e) => onChange({ maxEntriesPerUser: e.target.value }), placeholder: "1" }), values.hasPointSystem && (_jsx(Input, { label: "Points label", value: values.pointsLabel, onChange: (e) => onChange({ pointsLabel: e.target.value }), placeholder: "Points" }))] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Toggle, { checked: values.requireLogin, onChange: (v) => onChange({ requireLogin: v }), label: "Require login to participate" }), _jsx(Toggle, { checked: values.hasLeaderboard, onChange: (v) => onChange({ hasLeaderboard: v }), label: "Show leaderboard" }), _jsx(Toggle, { checked: values.hasPointSystem, onChange: (v) => onChange({ hasPointSystem: v }), label: "Enable point system" }), _jsx(Toggle, { checked: values.entryReviewRequired, onChange: (v) => onChange({ entryReviewRequired: v }), label: "Require employee review before entry is approved" })] }), _jsx(FormFieldBuilder, { fields: values.surveyFields, setFields: (f) => onChange({ surveyFields: f }) })] })), values.type === "feedback" && (_jsxs(Stack, { gap: "md", rounded: "xl", border: "default", padding: "md", children: [_jsx(Text, { size: "sm", weight: "semibold", color: "muted", children: "Feedback configuration" }), _jsx(Toggle, { checked: values.anonymous, onChange: (v) => onChange({ anonymous: v }), label: "Allow anonymous submissions" }), _jsx(FormFieldBuilder, { fields: values.feedbackFields, setFields: (f) => onChange({ feedbackFields: f }) })] }))] })),
         },
         {
+            id: "raffle",
             label: "Raffle / Spin",
             fields: ["hasRaffle", "raffleType", "raffleTopN", "rafflePrize", "rafflePrizeCouponId", "rafflePrizeProductIds", "spinPrizes", "spinMaxPerUser", "spinWindowStart", "spinWindowEnd"],
             render: ({ values, onChange }) => {
@@ -407,16 +390,11 @@ export function AdminEventEditorView({ eventId, onSaved, embedded, allowedTypes,
         },
     ];
     const alertSection = eventQuery.error ? (_jsx(Alert, { variant: "error", title: "Could not load event", children: eventQuery.error instanceof Error ? eventQuery.error.message : "Unknown error" })) : null;
-    const fieldToStepIndex = useMemo(() => {
-        const map = {};
-        steps.forEach((step, i) => {
-            step.fields?.forEach((field) => { map[field] = i; });
-        });
-        return map;
-        // eslint-disable-next-line react-hooks/exhaustive-deps
-    }, [steps.length]);
-    const wizardShellCtx = useMemo(() => ({ ...shellCtx, fieldToStepIndex, goToStep: (n) => setCurrentStep(n) }), [shellCtx, fieldToStepIndex, setCurrentStep]);
-    const formContent = (_jsxs(Stack, { gap: "sm", children: [alertSection, _jsxs(FormShellContext.Provider, { value: wizardShellCtx, children: [_jsx(FormErrorSummary, {}), _jsx(StepForm, { steps: steps, values: draft, onChange: update, onComplete: () => { saveMutation.mutate(); }, formId: "admin-event", currentStep: currentStep, onStepChange: setCurrentStep, completeLabel: isEdit ? "Save Changes" : "Create Event", isLoading: isLoading })] }), saveMessage && (_jsx(Alert, { variant: saveMessage.toLowerCase().includes("fail") || saveMessage.toLowerCase().includes("error") ? "error" : "success", title: "Save status", children: saveMessage }))] }));
+    // Replaces the hand-rolled fieldToStepIndex + goToStep pair. The hook owns
+    // the expand-then-scroll ordering a raw setState cannot: a collapsed panel
+    // must MOUNT before scrollIntoView and focus can reach the offending field.
+    const { openIds, setOpenIds, goToSection, fieldToSectionIndex, sectionMeta } = useSectionFormNav(sections, draft);
+    const formContent = (_jsxs(Stack, { gap: "sm", children: [alertSection, _jsxs(FormShellContext.Provider, { value: shellCtx, children: [_jsx(FormErrorSummary, {}), _jsx(SectionForm, { sections: sections, values: draft, onChange: update, onSubmit: () => { saveMutation.mutate(); }, schema: eventDraftSchema, openIds: openIds, onOpenChange: setOpenIds, submitLabel: isEdit ? "Save Changes" : "Create Event", isLoading: isLoading })] }), saveMessage && (_jsx(Alert, { variant: saveMessage.toLowerCase().includes("fail") || saveMessage.toLowerCase().includes("error") ? "error" : "success", title: "Save status", children: saveMessage }))] }));
     if (embedded) {
         return _jsx(Div, { className: `${__O.yAuto} ${__P.p4}`, children: formContent });
     }

package/dist/features/events/components/AdminEventEntriesView.js

@@ -1,9 +1,9 @@
 "use client";
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { useApiMutation, sieveFilter, SIEVE_OP, sortBy } from "@mohasinac/appkit/client";
-import React from "react";
+import React, { useState } from "react";
 import { useQuery, useQueryClient } from "@tanstack/react-query";
-import { Alert, Button, Div, Input, Row, Select, Stack, Text, useToast } from "../../../ui";
+import { Alert, Button, Div, Input, Row, Select, Stack, Text, useToast, RecordDetailModal, } from "../../../ui";
 import { apiClient } from "../../../http";
 import { normalizeError } from "../../../errors/normalize";
 import { ACTIONS } from "../../../_internal/shared/actions/action-registry";
@@ -128,6 +128,10 @@ export function AdminEventEntriesView({ eventId, entriesEndpoint, entryReviewEnd
         },
     ];
     const eventTitle = statsQuery.data?.event?.title;
+    // Approve / Waitlist / Cancel were offered on an entry the admin could never
+    // read — the poll vote, the comment and the survey answers were all invisible
+    // (Root Cause #56, "acting blind"). The row already carries the whole entry.
+    const [detail, setDetail] = useState(null);
     const config = {
         portal: "admin",
         title: eventTitle ? `${eventTitle} Entries` : "Event Entries",
@@ -139,6 +143,7 @@ export function AdminEventEntriesView({ eventId, entriesEndpoint, entryReviewEnd
         endpoint: resolvedEntriesEndpoint,
         sortOptions: [{ value: sortBy("submittedAt", "DESC"), label: "Most recent" }],
         columns,
+        onRowClick: (row) => setDetail(row),
         mapRows: (response) => response.items ?? [],
         getTotal: (response) => response.total ?? (response.items ?? []).length,
         buildFilters: (state) => state.reviewStatus ? sieveFilter("reviewStatus", SIEVE_OP.EQ, state.reviewStatus) : undefined,
@@ -146,5 +151,19 @@ export function AdminEventEntriesView({ eventId, entriesEndpoint, entryReviewEnd
         toolbarExtra: eventId ? (_jsx(Button, { variant: "ghost", action: ACTIONS.ADMIN["export-event-entries"], onClick: handleExportReport })) : undefined,
         renderAboveContent: () => (_jsxs(Stack, { gap: "3", className: "px-[var(--appkit-space-3)] pb-[var(--appkit-space-2)]", children: [!eventId ? (_jsx(Alert, { variant: "warning", title: "Missing event id", children: "Event id is required to load entries." })) : null, statsQuery.error ? (_jsx(Alert, { variant: "error", title: "Could not load event stats", children: statsQuery.error instanceof Error ? statsQuery.error.message : "Unknown error" })) : null, _jsxs(Div, { layout: "grid", gap: "3", className: "grid-cols-1 sm:grid-cols-3", children: [_jsx(Alert, { variant: "info", title: "Total entries", children: String(statsQuery.data?.stats?.totalEntries ?? 0) }), _jsx(Alert, { variant: "success", title: "Approved", children: String(statsQuery.data?.stats?.approvedEntries ?? 0) }), _jsx(Alert, { variant: "warning", title: "Flagged", children: String(statsQuery.data?.stats?.flaggedEntries ?? 0) })] })] })),
     };
-    return _jsx(DataListingView, { config: config });
+    return (_jsxs(_Fragment, { children: [_jsx(DataListingView, { config: config }), _jsx(RecordDetailModal, { isOpen: detail !== null, onClose: () => setDetail(null), title: detail?.userDisplayName || detail?.userEmail || "Entry", badges: detail ? [{ label: detail.reviewStatus }] : undefined, description: detail?.pollComment, fields: detail
+                    ? [
+                        { label: "Entrant", value: detail.userDisplayName ?? detail.userId ?? "—" },
+                        { label: "Email", value: detail.userEmail ?? "—" },
+                        { label: "Review status", value: detail.reviewStatus },
+                        { label: "Points", value: detail.points != null ? String(detail.points) : "—" },
+                        { label: "Raffle eligible", value: detail.raffleEligible ? "Yes" : "No" },
+                        { label: "Poll votes", value: detail.pollVotes?.join(", ") || "—" },
+                        { label: "Reviewed by", value: detail.reviewedBy ?? "—" },
+                        { label: "Review note", value: detail.reviewNote ?? "—" },
+                        { label: "Entry ID", value: detail.id },
+                    ]
+                    : undefined, 
+                // The survey/feedback answers — the actual submission being judged.
+                metadata: detail?.formResponses })] }));
 }