@mohasinac/appkit 4.14.0 → 4.16.0

package/dist/features/admin/schemas/homepage-section-form.js

@@ -0,0 +1,68 @@
+/*
+ * WHY: `AdminSectionsView` rendered a `<Form>` with no `schema` prop. The route
+ *      validated `order` / `enabled` / `config`, so nothing invalid was ever
+ *      stored — but a bad value came back as a 400 banner after a round-trip
+ *      rather than as an error on the field that caused it.
+ * WHAT: The homepage-section form schema.
+ *
+ * ## `config` stays open, deliberately
+ *
+ * Its shape differs per section type across 21 types, and the route models it
+ * the same way (`z.object({}).passthrough()`). Naming a fixed shape here would
+ * strip whatever the current type actually needs — the exact defect that made
+ * `productBaseSchema` eat every per-type listing field. The form parses it as
+ * JSON and reports malformed input; the per-type meaning stays with the
+ * section renderer that owns it.
+ *
+ * EXPORTS:
+ *   homepageSectionFormSchema, type HomepageSectionFormValues
+ *
+ * @tag domain:admin,homepage
+ * @tag layer:schema
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:AdminSectionsView
+ * @tag sideEffects:none
+ */
+import { z } from "zod";
+import { annotate } from "../../shell/field-ui-meta";
+import { normalizeError } from "../../../errors/normalize";
+/**
+ * 🛑 `annotate()` must be the OUTERMOST call on each field — it keys a WeakMap
+ * by schema instance and every zod wrapper returns a new one.
+ */
+export const homepageSectionFormSchema = z.object({
+    sectionType: annotate(z.string().min(1, "Choose a section type."), {
+        section: "basics", sectionLabel: "Section", sectionRequired: true,
+        quick: true, order: 1, row: "pair",
+    }),
+    order: annotate(z.coerce
+        .number({ invalid_type_error: "Order must be a number." })
+        .int("Order must be a whole number.")
+        .min(0, "Order cannot be negative.")
+        .optional(), { section: "basics", order: 2, row: "pair" }),
+    enabled: annotate(z.boolean(), {
+        section: "basics", order: 3, row: "quarter",
+    }),
+    configJson: annotate(z.string().refine(isParsableJson, { message: "Config must be valid JSON." }), {
+        section: "config", sectionLabel: "Configuration",
+        order: 1, row: "full", kind: "list",
+    }),
+});
+/** Hoisted so the `annotate()` call above stays a simple two-argument call. */
+function isParsableJson(value) {
+    if (!value.trim())
+        return true;
+    try {
+        JSON.parse(value);
+        return true;
+    }
+    catch (_err) {
+        // Normalized rather than suppressed. The parse failure IS the return value
+        // here — `false` answers the only question this asks — but the project
+        // forbids adding new suppression markers, and this is the same shape
+        // AdminSectionsView already uses for the very same JSON parse.
+        void normalizeError(_err);
+        return false;
+    }
+}

package/dist/features/admin/schemas/nav-item-form.d.ts

@@ -0,0 +1,74 @@
+import { z } from "zod";
+/**
+ * 🛑 `annotate()` must be the OUTERMOST call on each field — it keys a WeakMap
+ * by schema instance and every zod wrapper returns a new one.
+ */
+export declare const navItemFormSchema: z.ZodObject<{
+    label: z.ZodString;
+    href: z.ZodEffects<z.ZodString, string, string>;
+    icon: z.ZodOptional<z.ZodString>;
+    order: z.ZodOptional<z.ZodNumber>;
+    parentId: z.ZodOptional<z.ZodString>;
+    isVisible: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    label: string;
+    href: string;
+    icon?: string | undefined;
+    order?: number | undefined;
+    parentId?: string | undefined;
+    isVisible?: boolean | undefined;
+}, {
+    label: string;
+    href: string;
+    icon?: string | undefined;
+    order?: number | undefined;
+    parentId?: string | undefined;
+    isVisible?: boolean | undefined;
+}>;
+export type NavItemFormValues = z.infer<typeof navItemFormSchema>;
+/** Create contract — `label` and `href` are what make an item usable at all. */
+export declare const navItemCreateSchema: z.ZodObject<{
+    label: z.ZodString;
+    href: z.ZodEffects<z.ZodString, string, string>;
+    icon: z.ZodOptional<z.ZodString>;
+    order: z.ZodOptional<z.ZodNumber>;
+    parentId: z.ZodOptional<z.ZodString>;
+    isVisible: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    label: string;
+    href: string;
+    icon?: string | undefined;
+    order?: number | undefined;
+    parentId?: string | undefined;
+    isVisible?: boolean | undefined;
+}, {
+    label: string;
+    href: string;
+    icon?: string | undefined;
+    order?: number | undefined;
+    parentId?: string | undefined;
+    isVisible?: boolean | undefined;
+}>;
+/** Update contract — every field optional. */
+export declare const navItemUpdateSchema: z.ZodObject<{
+    label: z.ZodOptional<z.ZodString>;
+    href: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    icon: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    order: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
+    parentId: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    isVisible: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    label?: string | undefined;
+    icon?: string | undefined;
+    href?: string | undefined;
+    order?: number | undefined;
+    parentId?: string | undefined;
+    isVisible?: boolean | undefined;
+}, {
+    label?: string | undefined;
+    icon?: string | undefined;
+    href?: string | undefined;
+    order?: number | undefined;
+    parentId?: string | undefined;
+    isVisible?: boolean | undefined;
+}>;

package/dist/features/admin/schemas/nav-item-form.js

@@ -0,0 +1,72 @@
+/*
+ * WHY: `AdminNavEditorView` rendered a `<Form>` with no `schema` prop, so the
+ *      only validation on a navigation item was whatever the server said after
+ *      the round-trip — a 400 banner rather than an error on the field that
+ *      caused it. The route DID validate (`navItemSchema` /
+ *      `updateNavItemSchema` in `api/admin/navigation`), so nothing invalid
+ *      was ever stored; the gap was purely that the admin was told badly.
+ * WHAT: The nav-item form schema, shared by the editor and the routes so the
+ *       two cannot disagree about what a valid nav item is.
+ *
+ * ## `href` is checked against real routes only loosely
+ *
+ * A nav item pointing at a page that does not exist is a real defect —
+ * `audit-nav-page-wiring` blocks it — but that check needs the filesystem and
+ * therefore cannot run in a browser. Here the rule is only "shaped like a
+ * path"; the audit remains the authority on whether the path resolves.
+ *
+ * EXPORTS:
+ *   navItemFormSchema, navItemCreateSchema, navItemUpdateSchema,
+ *   type NavItemFormValues
+ *
+ * @tag domain:admin,navigation
+ * @tag layer:schema
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:AdminNavEditorView,/api/admin/navigation
+ * @tag sideEffects:none
+ */
+import { z } from "zod";
+import { annotate } from "../../shell/field-ui-meta";
+/**
+ * A path or an absolute URL.
+ *
+ * Hoisted for readability only. It was originally inlined, and that surfaced a
+ * real bug in `audit-field-ui-meta`: its comment-stripper did not understand
+ * regex literals, so the trailing `\/\/` of this pattern read as the start of
+ * a line comment and blanked the rest of the line — unbalancing the brace walk
+ * and reporting a false NO_SECTION. The audit now handles regex literals; this
+ * stays hoisted because it reads better, not because it has to.
+ */
+const hrefSchema = z
+    .string()
+    .min(1, "A destination is required.")
+    .refine((v) => v.startsWith("/") || /^https?:\/\//.test(v), {
+    message: "Use a path starting with / or a full http(s) URL.",
+});
+/**
+ * 🛑 `annotate()` must be the OUTERMOST call on each field — it keys a WeakMap
+ * by schema instance and every zod wrapper returns a new one.
+ */
+export const navItemFormSchema = z.object({
+    label: annotate(z.string().min(1, "A label is required.").max(60, "Keep the label under 60 characters."), {
+        section: "basics", sectionLabel: "Nav item", sectionRequired: true,
+        quick: true, order: 1, row: "pair",
+    }),
+    href: annotate(hrefSchema, { section: "basics", quick: true, order: 2, row: "pair" }),
+    icon: annotate(z.string().max(60).optional(), {
+        section: "basics", order: 3, row: "pair",
+    }),
+    order: annotate(z.coerce.number().int("Order must be a whole number.").min(0, "Order cannot be negative.").optional(), { section: "placement", sectionLabel: "Placement", order: 1, row: "pair" }),
+    parentId: annotate(z.string().max(80).optional(), {
+        section: "placement", order: 2, row: "pair",
+        help: "Leave blank for a top-level item.",
+    }),
+    isVisible: annotate(z.boolean().optional(), {
+        section: "placement", order: 3, row: "quarter",
+    }),
+});
+/** Create contract — `label` and `href` are what make an item usable at all. */
+export const navItemCreateSchema = navItemFormSchema;
+/** Update contract — every field optional. */
+export const navItemUpdateSchema = navItemFormSchema.partial();

package/dist/features/auctions/components/AuctionBidsTable.d.ts

@@ -14,5 +14,14 @@ export interface AuctionBidsTableProps {
     totalPages?: number;
     currentPage?: number;
     onPageChange?: (page: number) => void;
+    /**
+     * Open a bid. Supplied by the three dashboard bid listings, which were dead
+     * ends until W8 — a bid could be seen here and never opened, so its amount,
+     * auction, timing and outcome existed only as a table row.
+     *
+     * Optional because the PUBLIC bid history on an auction page also renders
+     * this table, and there a row is not something a visitor may open.
+     */
+    onRowClick?: (bid: BidDocument) => void;
 }
-export declare function AuctionBidsTable({ bids, portal, emptyLabel, totalPages, currentPage, onPageChange, }: AuctionBidsTableProps): React.JSX.Element;
+export declare function AuctionBidsTable({ bids, portal, emptyLabel, totalPages, currentPage, onPageChange, onRowClick, }: AuctionBidsTableProps): React.JSX.Element;

package/dist/features/auctions/components/AuctionBidsTable.js

@@ -52,7 +52,22 @@ function groupByAuction(bids) {
     }
     return Array.from(map.values());
 }
-function AuctionRow({ auction, portal, }) {
+/**
+ * Enter/Space activate a non-button element that behaves as one.
+ *
+ * A named helper rather than an inline closure: the inline form nested six
+ * braces deep inside the row's JSX, which is both unreadable and what
+ * `audit-code-quality`'s DEEP_NESTING rule exists to prevent.
+ */
+function activateOnKey(run) {
+    return (e) => {
+        if (e.key !== "Enter" && e.key !== " ")
+            return;
+        e.preventDefault();
+        run();
+    };
+}
+function AuctionRow({ auction, portal, onRowClick, }) {
     const [expanded, setExpanded] = useState(false);
     // Most-recent bid first — matches the caller's own newest-first ordering
     // (see UserBidsPage) instead of re-sorting by amount, which silently threw
@@ -60,14 +75,17 @@ function AuctionRow({ auction, portal, }) {
     const sorted = useMemo(() => [...auction.bids].sort((a, b) => +new Date(b.bidDate) - +new Date(a.bidDate)), [auction.bids]);
     const highest = auction.bids.reduce((max, b) => Math.max(max, b.bidAmount), 0);
     const isWinning = auction.bids.some((b) => b.isWinning);
-    return (_jsxs(Div, { className: `border border-[var(--appkit-color-border)] ${__O.hidden} bg-[var(--appkit-color-surface)]`, rounded: "xl", shadow: "sm", children: [_jsxs(Button, { type: "button", variant: "ghost", onClick: () => setExpanded((v) => !v), gap: "lg", paddingX: "md", paddingY: "md", className: "w-full text-left", "aria-expanded": expanded, children: [_jsx(ChevronRight, { className: `shrink-0 text-[var(--appkit-color-text-muted)] transition-transform ${expanded ? "rotate-90" : ""}`, size: 16 }), _jsx(Div, { className: "flex-1 min-w-0", children: _jsx(Text, { className: "text-[var(--appkit-color-text)] line-clamp-1", size: "sm", weight: "semibold", children: auction.productTitle }) }), _jsxs(Row, { gap: "sm", className: "shrink-0", children: [isWinning && (_jsx(Badge, { variant: "active", children: "Winning" })), _jsxs(Text, { variant: "secondary", size: "xs", children: [auction.bids.length, " bid", auction.bids.length !== 1 ? "s" : ""] }), _jsx(Text, { className: "text-[var(--appkit-color-text)]", size: "sm", weight: "semibold", children: formatBidAmount(highest) })] })] }), expanded && (_jsxs(Div, { className: "border-t border-[var(--appkit-color-border)]", children: [_jsxs(Div, { textSize: "xs", textWeight: "medium", paddingX: "x-md", paddingY: "y-xs", className: `grid text-[var(--appkit-color-text-muted)] uppercase tracking-wide border-b border-[var(--appkit-color-border-subtle)] ${portal === "buyer" ? "[grid-template-columns:1fr_auto_auto]" : "[grid-template-columns:1fr_1fr_auto_auto]"}`, children: [_jsx(Span, { children: portal === "buyer" ? "Amount" : "Bidder" }), portal !== "buyer" && _jsx(Span, { children: "Amount" }), _jsx(Span, { children: "Status" }), _jsx(Span, { className: "text-right", children: "Time" })] }), sorted.map((bid) => (_jsxs(Div, { layout: "grid", align: "center", paddingX: "x-md", paddingY: "y-xs-tall", className: `border-b border-[var(--appkit-color-border-subtle)] last:border-0 hover:bg-[var(--appkit-color-border-subtle)] transition-colors ${portal === "buyer" ? "[grid-template-columns:1fr_auto_auto]" : "[grid-template-columns:1fr_1fr_auto_auto]"}`, children: [portal !== "buyer" && (_jsx(Text, { className: "text-[var(--appkit-color-text)] truncate pr-[0.75rem]", size: "sm", children: bid.userName || bid.userId })), _jsx(Text, { className: "text-[var(--appkit-color-text)]", size: "sm", weight: "medium", children: formatBidAmount(bid.bidAmount) }), _jsx(Badge, { variant: STATUS_VARIANT[bid.status] ?? "pending", className: "capitalize", children: bid.status }), _jsxs(Stack, { gap: "xs", align: "end", children: [_jsx(Text, { variant: "secondary", size: "xs", align: "end", children: relDate(bid.bidDate) }), portal === "buyer" && bid.status === "won" && (_jsx(TextLink, { href: bid.orderId
+    return (_jsxs(Div, { className: `border border-[var(--appkit-color-border)] ${__O.hidden} bg-[var(--appkit-color-surface)]`, rounded: "xl", shadow: "sm", children: [_jsxs(Button, { type: "button", variant: "ghost", onClick: () => setExpanded((v) => !v), gap: "lg", paddingX: "md", paddingY: "md", className: "w-full text-left", "aria-expanded": expanded, children: [_jsx(ChevronRight, { className: `shrink-0 text-[var(--appkit-color-text-muted)] transition-transform ${expanded ? "rotate-90" : ""}`, size: 16 }), _jsx(Div, { className: "flex-1 min-w-0", children: _jsx(Text, { className: "text-[var(--appkit-color-text)] line-clamp-1", size: "sm", weight: "semibold", children: auction.productTitle }) }), _jsxs(Row, { gap: "sm", className: "shrink-0", children: [isWinning && (_jsx(Badge, { variant: "active", children: "Winning" })), _jsxs(Text, { variant: "secondary", size: "xs", children: [auction.bids.length, " bid", auction.bids.length !== 1 ? "s" : ""] }), _jsx(Text, { className: "text-[var(--appkit-color-text)]", size: "sm", weight: "semibold", children: formatBidAmount(highest) })] })] }), expanded && (_jsxs(Div, { className: "border-t border-[var(--appkit-color-border)]", children: [_jsxs(Div, { textSize: "xs", textWeight: "medium", paddingX: "x-md", paddingY: "y-xs", className: `grid text-[var(--appkit-color-text-muted)] uppercase tracking-wide border-b border-[var(--appkit-color-border-subtle)] ${portal === "buyer" ? "[grid-template-columns:1fr_auto_auto]" : "[grid-template-columns:1fr_1fr_auto_auto]"}`, children: [_jsx(Span, { children: portal === "buyer" ? "Amount" : "Bidder" }), portal !== "buyer" && _jsx(Span, { children: "Amount" }), _jsx(Span, { children: "Status" }), _jsx(Span, { className: "text-right", children: "Time" })] }), sorted.map((bid) => (_jsxs(Div, { layout: "grid", align: "center", paddingX: "x-md", paddingY: "y-xs-tall", 
+                        // Keyboard-reachable only when it is actually interactive —
+                        // a row with no handler must not be a tab stop.
+                        role: onRowClick ? "button" : undefined, tabIndex: onRowClick ? 0 : undefined, onClick: onRowClick ? () => onRowClick(bid) : undefined, onKeyDown: onRowClick ? activateOnKey(() => onRowClick(bid)) : undefined, className: `border-b border-[var(--appkit-color-border-subtle)] last:border-0 hover:bg-[var(--appkit-color-border-subtle)] transition-colors ${onRowClick ? "cursor-pointer" : ""} ${portal === "buyer" ? "[grid-template-columns:1fr_auto_auto]" : "[grid-template-columns:1fr_1fr_auto_auto]"}`, children: [portal !== "buyer" && (_jsx(Text, { className: "text-[var(--appkit-color-text)] truncate pr-[0.75rem]", size: "sm", children: bid.userName || bid.userId })), _jsx(Text, { className: "text-[var(--appkit-color-text)]", size: "sm", weight: "medium", children: formatBidAmount(bid.bidAmount) }), _jsx(Badge, { variant: STATUS_VARIANT[bid.status] ?? "pending", className: "capitalize", children: bid.status }), _jsxs(Stack, { gap: "xs", align: "end", children: [_jsx(Text, { variant: "secondary", size: "xs", align: "end", children: relDate(bid.bidDate) }), portal === "buyer" && bid.status === "won" && (_jsx(TextLink, { href: bid.orderId
                                             ? String(ROUTES.USER.ORDER_DETAIL(bid.orderId))
                                             : `${String(ROUTES.USER.CHECKOUT)}?lane=${CART_LANE.AUCTION}`, size: "xs", weight: "semibold", children: bid.orderId ? "View order" : "Pay now →" }))] })] }, bid.id)))] }))] }));
 }
-export function AuctionBidsTable({ bids, portal = "buyer", emptyLabel = "No bids found.", totalPages, currentPage, onPageChange, }) {
+export function AuctionBidsTable({ bids, portal = "buyer", emptyLabel = "No bids found.", totalPages, currentPage, onPageChange, onRowClick, }) {
     const auctions = useMemo(() => groupByAuction(bids), [bids]);
     if (auctions.length === 0) {
         return (_jsx(Div, { padding: "y-6xl", className: "text-left", children: _jsx(Text, { variant: "secondary", children: emptyLabel }) }));
     }
-    return (_jsxs(Stack, { gap: "3", children: [auctions.map((auction) => (_jsx(AuctionRow, { auction: auction, portal: portal }, auction.productId))), totalPages !== undefined && totalPages > 1 && currentPage !== undefined && onPageChange && (_jsx(Row, { justify: "center", children: _jsx(Pagination, { currentPage: currentPage, totalPages: totalPages, onPageChange: onPageChange }) }))] }));
+    return (_jsxs(Stack, { gap: "3", children: [auctions.map((auction) => (_jsx(AuctionRow, { auction: auction, portal: portal, onRowClick: onRowClick }, auction.productId))), totalPages !== undefined && totalPages > 1 && currentPage !== undefined && onPageChange && (_jsx(Row, { justify: "center", children: _jsx(Pagination, { currentPage: currentPage, totalPages: totalPages, onPageChange: onPageChange }) }))] }));
 }

package/dist/features/auctions/components/bid-detail-fields.d.ts

@@ -0,0 +1,29 @@
+import type { BidDocument } from "../schemas/firestore";
+/** Which portal is looking. Decides whether bidder identity is shown. */
+export type BidDetailViewer = "buyer" | "seller" | "admin";
+type FieldRow = {
+    label: string;
+    value: string;
+};
+/**
+ * A bid's status as a badge.
+ *
+ * `forfeited` is deliberately distinguished from `cancelled`: a forfeited bid
+ * WON and then let the payment window lapse, which is the seller's problem and
+ * the buyer's fault; a cancelled one never won anything. Collapsing them would
+ * hide exactly the distinction a support query is about.
+ */
+export declare function bidStatusBadge(status: string | undefined): {
+    label: string;
+    tone: string;
+};
+/**
+ * The scalar rows for a bid's detail modal.
+ *
+ * `bidderName` appears only for seller and admin. A buyer opening their OWN
+ * bid does not need to be told their own name, and the same component is used
+ * by all three, so gating here rather than at each call site is what stops a
+ * future copy-paste showing one buyer another's identity.
+ */
+export declare function buildBidDetailFields(bid: BidDocument, viewer: BidDetailViewer): FieldRow[];
+export {};

package/dist/features/auctions/components/bid-detail-fields.js

@@ -0,0 +1,103 @@
+/*
+ * WHY: All three bid listings — buyer, seller and admin — were dead ends. A
+ *      bid could be SEEN in a list and never opened, so the amount, the
+ *      auction it belongs to, when it was placed and whether it was outbid,
+ *      won or forfeited were only ever visible as a table row. `bid` is also
+ *      one of the three `relatedType` values with no per-record page in ANY
+ *      role, so a bid notification had nowhere to link.
+ * WHAT: The `<RecordDetailModal>` field list for a bid, built once.
+ *
+ * ## One builder, three portals
+ *
+ * The three views differ only in whether they may show the bidder's identity:
+ * a buyer sees their own bid, a seller sees who bid on their auction, and an
+ * admin sees everything. Writing the field list three times would be three
+ * chances to leak a bidder's name into the buyer view or to forget a field in
+ * one portal — the shape of Root Cause #38, one layer up.
+ *
+ * `maskPublicBid` already exists for the PUBLIC bid history and is unchanged;
+ * this is the dashboard equivalent, where the viewer is authenticated and the
+ * question is which role they hold.
+ *
+ * EXPORTS:
+ *   buildBidDetailFields, bidStatusBadge, type BidDetailViewer
+ *
+ * @tag domain:auctions
+ * @tag layer:feature-util
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:UserBidsView,SellerBidsView,AdminBidsView
+ * @tag sideEffects:none
+ */
+const money = (amount, currency = "INR") => amount == null
+    ? "—"
+    : new Intl.NumberFormat("en-IN", { style: "currency", currency, maximumFractionDigits: 2 }).format(amount);
+const when = (value) => {
+    if (!value)
+        return "—";
+    const d = value instanceof Date ? value : new Date(String(value));
+    return Number.isNaN(d.getTime()) ? "—" : d.toLocaleString();
+};
+/**
+ * A bid's status as a badge.
+ *
+ * `forfeited` is deliberately distinguished from `cancelled`: a forfeited bid
+ * WON and then let the payment window lapse, which is the seller's problem and
+ * the buyer's fault; a cancelled one never won anything. Collapsing them would
+ * hide exactly the distinction a support query is about.
+ */
+export function bidStatusBadge(status) {
+    switch (status) {
+        case "won":
+            return { label: "Won", tone: "success" };
+        case "active":
+            return { label: "Leading", tone: "info" };
+        case "outbid":
+            return { label: "Outbid", tone: "warning" };
+        case "forfeited":
+            return { label: "Forfeited — payment window lapsed", tone: "danger" };
+        case "cancelled":
+            return { label: "Cancelled", tone: "default" };
+        case "lost":
+            return { label: "Lost", tone: "default" };
+        default:
+            return { label: status ?? "Unknown", tone: "default" };
+    }
+}
+/**
+ * The scalar rows for a bid's detail modal.
+ *
+ * `bidderName` appears only for seller and admin. A buyer opening their OWN
+ * bid does not need to be told their own name, and the same component is used
+ * by all three, so gating here rather than at each call site is what stops a
+ * future copy-paste showing one buyer another's identity.
+ */
+export function buildBidDetailFields(bid, viewer) {
+    const rows = [
+        { label: "Auction", value: bid.productTitle || bid.productId },
+        { label: "Bid amount", value: money(bid.bidAmount, bid.currency) },
+    ];
+    // Only meaningful when the bid raised a previous one.
+    if (bid.previousBidAmount != null) {
+        rows.push({ label: "Previous high bid", value: money(bid.previousBidAmount, bid.currency) });
+    }
+    if (bid.autoMaxBid != null) {
+        rows.push({ label: "Auto-bid limit", value: money(bid.autoMaxBid, bid.currency) });
+    }
+    rows.push({ label: "Placed", value: when(bid.bidDate ?? bid.createdAt) });
+    if (viewer !== "buyer") {
+        rows.push({ label: "Bidder", value: bid.userName || bid.userId });
+    }
+    // A buyout is a real bid, not a bid-free purchase — surfacing it here is
+    // what makes "why is there no ladder on this auction" answerable.
+    if (bid.isBuyout) {
+        rows.push({ label: "Placed via", value: "Buy Now" });
+    }
+    // The order this bid became. Present only once the win was actually paid,
+    // which is exactly the question "did they ever pay?" asks.
+    if (bid.orderId) {
+        rows.push({ label: "Order", value: bid.orderId });
+    }
+    rows.push({ label: "Bid ID", value: bid.id });
+    return rows;
+}

package/dist/features/auctions/schemas/index.d.ts

@@ -67,20 +67,15 @@ export declare const auctionItemSchema: z.ZodObject<{
     title: string;
     createdAt: string;
     updatedAt: string;
-    slug: string;
     price: number;
+    listingType: "auction";
+    slug: string;
     sellerId: string;
     featured: boolean;
-    listingType: "auction";
     auctionEndDate: string;
     startingBid: number;
     bidCount: number;
     storeId?: string | undefined;
-    description?: string | undefined;
-    mainImage?: string | undefined;
-    images?: string[] | undefined;
-    currentBid?: number | undefined;
-    storeSlug?: string | undefined;
     media?: {
         type: "video" | "image" | "file";
         url: string;
@@ -90,6 +85,11 @@ export declare const auctionItemSchema: z.ZodObject<{
         youtubeId?: string | undefined;
         duration?: number | undefined;
     }[] | undefined;
+    description?: string | undefined;
+    mainImage?: string | undefined;
+    images?: string[] | undefined;
+    currentBid?: number | undefined;
+    storeSlug?: string | undefined;
 }, {
     currency: string;
     status: "draft" | "published" | "archived" | "sold";
@@ -97,20 +97,15 @@ export declare const auctionItemSchema: z.ZodObject<{
     title: string;
     createdAt: string;
     updatedAt: string;
-    slug: string;
     price: number;
+    listingType: "auction";
+    slug: string;
     sellerId: string;
     featured: boolean;
-    listingType: "auction";
     auctionEndDate: string;
     startingBid: number;
     bidCount: number;
     storeId?: string | undefined;
-    description?: string | undefined;
-    mainImage?: string | undefined;
-    images?: string[] | undefined;
-    currentBid?: number | undefined;
-    storeSlug?: string | undefined;
     media?: {
         type: "video" | "image" | "file";
         url: string;
@@ -120,6 +115,11 @@ export declare const auctionItemSchema: z.ZodObject<{
         youtubeId?: string | undefined;
         duration?: number | undefined;
     }[] | undefined;
+    description?: string | undefined;
+    mainImage?: string | undefined;
+    images?: string[] | undefined;
+    currentBid?: number | undefined;
+    storeSlug?: string | undefined;
 }>;
 export declare const bidRecordSchema: z.ZodObject<{
     id: z.ZodString;

package/dist/features/audit-log/schemas/firestore.d.ts

@@ -23,6 +23,13 @@ export declare const AdminAuditActionValues: {
     readonly PAYOUT_MARK_PAID: "payout_mark_paid";
     readonly STORE_STATUS_CHANGE: "store_status_change";
     readonly USER_ROLE_CHANGE: "user_role_change";
+    /**
+     * Admin cancelled an offer. The store keeps sole authority to accept,
+     * counter and decline; cancelling is the ONE write an admin may make, and
+     * it is an escalation — reason required, and recorded both here and in the
+     * offer's own `statusHistory`.
+     */
+    readonly OFFER_CANCEL: "offer_cancel";
 };
 export type AdminAuditAction = (typeof AdminAuditActionValues)[keyof typeof AdminAuditActionValues];
 export interface AdminAuditLogDocument extends BaseDocument {
@@ -55,5 +62,12 @@ export declare const ADMIN_AUDIT_LOG_FIELDS: {
         readonly PAYOUT_MARK_PAID: "payout_mark_paid";
         readonly STORE_STATUS_CHANGE: "store_status_change";
         readonly USER_ROLE_CHANGE: "user_role_change";
+        /**
+         * Admin cancelled an offer. The store keeps sole authority to accept,
+         * counter and decline; cancelling is the ONE write an admin may make, and
+         * it is an escalation — reason required, and recorded both here and in the
+         * offer's own `statusHistory`.
+         */
+        readonly OFFER_CANCEL: "offer_cancel";
     };
 };

package/dist/features/audit-log/schemas/firestore.js

@@ -21,6 +21,13 @@ export const AdminAuditActionValues = {
     PAYOUT_MARK_PAID: "payout_mark_paid",
     STORE_STATUS_CHANGE: "store_status_change",
     USER_ROLE_CHANGE: "user_role_change",
+    /**
+     * Admin cancelled an offer. The store keeps sole authority to accept,
+     * counter and decline; cancelling is the ONE write an admin may make, and
+     * it is an escalation — reason required, and recorded both here and in the
+     * offer's own `statusHistory`.
+     */
+    OFFER_CANCEL: "offer_cancel",
 };
 export const ADMIN_AUDIT_LOG_FIELDS = {
     ACTOR_UID: "actorUid",

package/dist/features/auth/schemas/index.d.ts

@@ -65,14 +65,14 @@ export declare const authUserSchema: z.ZodObject<{
     isEmailVerified: z.ZodOptional<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
     id: string;
-    role?: "user" | "seller" | "moderator" | "employee" | "admin" | undefined;
+    role?: "user" | "admin" | "moderator" | "seller" | "employee" | undefined;
     email?: string | undefined;
     displayName?: string | undefined;
     photoURL?: string | undefined;
     isEmailVerified?: boolean | undefined;
 }, {
     id: string;
-    role?: "user" | "seller" | "moderator" | "employee" | "admin" | undefined;
+    role?: "user" | "admin" | "moderator" | "seller" | "employee" | undefined;
     email?: string | undefined;
     displayName?: string | undefined;
     photoURL?: string | undefined;

package/dist/features/blog/actions/blog-actions.d.ts

@@ -72,8 +72,8 @@ export declare const createBlogPostSchema: z.ZodObject<{
     status: "draft" | "published" | "archived";
     title: string;
     content: string;
-    slug: string;
     category: "news" | "tips" | "guides" | "updates" | "community";
+    slug: string;
     tags: string[];
     isFeatured: boolean;
     excerpt: string;
@@ -108,12 +108,12 @@ export declare const createBlogPostSchema: z.ZodObject<{
 }, {
     title: string;
     content: string;
-    slug: string;
     category: "news" | "tips" | "guides" | "updates" | "community";
+    slug: string;
     excerpt: string;
     status?: "draft" | "published" | "archived" | undefined;
-    tags?: string[] | undefined;
     publishedAt?: string | undefined;
+    tags?: string[] | undefined;
     isFeatured?: boolean | undefined;
     coverImage?: string | {
         type: "video" | "image" | "file";
@@ -211,10 +211,10 @@ export declare const updateBlogPostSchema: z.ZodObject<{
     status?: "draft" | "published" | "archived" | undefined;
     title?: string | undefined;
     content?: string | undefined;
-    slug?: string | undefined;
     category?: "news" | "tips" | "guides" | "updates" | "community" | undefined;
-    tags?: string[] | undefined;
     publishedAt?: string | undefined;
+    slug?: string | undefined;
+    tags?: string[] | undefined;
     isFeatured?: boolean | undefined;
     excerpt?: string | undefined;
     coverImage?: {
@@ -248,10 +248,10 @@ export declare const updateBlogPostSchema: z.ZodObject<{
     status?: "draft" | "published" | "archived" | undefined;
     title?: string | undefined;
     content?: string | undefined;
-    slug?: string | undefined;
     category?: "news" | "tips" | "guides" | "updates" | "community" | undefined;
-    tags?: string[] | undefined;
     publishedAt?: string | undefined;
+    slug?: string | undefined;
+    tags?: string[] | undefined;
     isFeatured?: boolean | undefined;
     excerpt?: string | undefined;
     coverImage?: string | {