@mohasinac/appkit 4.16.1 → 4.18.0

package/dist/features/admin/schemas/admin-editor-forms.js

@@ -0,0 +1,141 @@
+/*
+ * WHY: A cluster of admin editors rendered `<Form>` with no schema. Two of
+ *      them write PII, and one changes a store's standing on the platform.
+ *
+ *      `AdminAddressEditorView` is the PII one: `fullName`, `phone` and the
+ *      address lines are all encrypted at rest, and none was checked — a
+ *      postal code could be any string, and `ownerId` (which decides WHOSE
+ *      address this is) was free text.
+ *
+ *      `AdminStoreEditorView` sets `storeStatus`, `isVerified`, `isFeatured`
+ *      and `capabilities`. Recurrent Root Cause #38 lived here: saving any
+ *      field re-sent every other one, so an unrelated edit could silently
+ *      un-verify a store.
+ *
+ * WHAT: One schema per editor.
+ *
+ * EXPORTS:
+ *   adminAddressFormSchema, adminStoreUpdateSchema, announcementBarSchema,
+ *   and their inferred value types
+ *
+ * @tag domain:admin
+ * @tag layer:schema
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:AdminAddressEditorView,AdminStoreEditorView,AdminSiteView
+ * @tag sideEffects:none
+ */
+import { z } from "zod";
+import { annotate } from "../../shell/field-ui-meta";
+const PHONE_RE = /^(\+?91[-\s]?)?[6-9]\d{9}$/;
+/** Indian PIN: six digits, never starting at zero. */
+const PIN_RE = /^[1-9]\d{5}$/;
+/**
+ * An address written by an admin on someone's behalf.
+ *
+ * Shapes match `AddressDocument` (`addressLine1`, not `line1`) — deliberately
+ * NOT `userAddressSchema`, which is the account-side view of the same data
+ * under different field names. Reusing that one here would have meant
+ * translating on every write.
+ */
+export const adminAddressFormSchema = z.object({
+    ownerType: annotate(z.enum(["user", "store"]), {
+        section: "owner", sectionLabel: "Belongs to", sectionRequired: true, quick: true, order: 1, row: "pair",
+    }),
+    ownerId: annotate(z.string().trim().min(1, "Choose who this address belongs to."), {
+        section: "owner", quick: true, order: 2, row: "pair",
+    }),
+    label: annotate(z.string().trim().max(60, "Keep the label short — e.g. Home, Warehouse.").optional(), {
+        section: "address", sectionLabel: "Address", order: 1, row: "pair",
+    }),
+    fullName: annotate(z.string().trim().min(2, "A recipient name is required.").max(120), {
+        section: "address", sectionRequired: true, quick: true, order: 2, row: "pair",
+    }),
+    phone: annotate(z.string().trim().regex(PHONE_RE, "Enter a 10-digit Indian mobile number."), {
+        section: "address", quick: true, order: 3, row: "pair",
+    }),
+    addressLine1: annotate(z.string().trim().min(3, "Street address is required.").max(200), {
+        section: "address", quick: true, order: 4, row: "full",
+    }),
+    addressLine2: annotate(z.string().trim().max(200).optional(), {
+        section: "address", order: 5, row: "full",
+    }),
+    landmark: annotate(z.string().trim().max(120).optional(), {
+        section: "address", order: 6, row: "pair",
+    }),
+    city: annotate(z.string().trim().min(2, "City is required.").max(80), {
+        section: "address", order: 7, row: "pair",
+    }),
+    state: annotate(z.string().trim().min(2, "State is required.").max(80), {
+        section: "address", order: 8, row: "pair",
+    }),
+    // A wrong PIN is the single most common reason a parcel is undeliverable,
+    // and it was previously any string at all.
+    postalCode: annotate(z.string().trim().regex(PIN_RE, "Enter a 6-digit PIN code."), {
+        section: "address", order: 9, row: "pair",
+    }),
+    country: annotate(z.string().trim().min(2).max(60), {
+        section: "address", order: 10, row: "pair",
+    }),
+    isDefault: annotate(z.boolean().optional(), {
+        section: "address", order: 11, row: "quarter",
+    }),
+});
+/**
+ * An admin changing a store's standing.
+ *
+ * `suspensionReason` is required when — and only when — the status is
+ * `suspended`: suspending a seller without a recorded reason leaves them, and
+ * the next admin, with nothing to appeal or review.
+ */
+export const adminStoreUpdateSchema = z
+    .object({
+    storeStatus: annotate(z.enum(["pending", "active", "suspended", "closed"]), {
+        section: "standing", sectionLabel: "Store standing", sectionRequired: true, quick: true, order: 1, row: "pair",
+    }),
+    isVerified: annotate(z.boolean().optional(), {
+        section: "standing", order: 2, row: "quarter",
+    }),
+    isFeatured: annotate(z.boolean().optional(), {
+        section: "standing", order: 3, row: "quarter",
+    }),
+    suspensionReason: annotate(z.string().trim().max(500).optional(), {
+        section: "standing", order: 4, row: "full", kind: "textarea",
+    }),
+    capabilities: annotate(z.array(z.string().min(1)).max(50).optional(), {
+        section: "capabilities", sectionLabel: "Capabilities", order: 1, row: "full", kind: "list",
+    }),
+    adminNotes: annotate(z.string().trim().max(2000).optional(), {
+        section: "capabilities", order: 2, row: "full", kind: "textarea",
+        help: "Internal only — never shown to the store owner or the public.",
+    }),
+})
+    .superRefine((v, ctx) => {
+    if (v.storeStatus === "suspended" && !v.suspensionReason?.trim()) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["suspensionReason"],
+            message: "Record why this store is being suspended.",
+        });
+    }
+});
+/**
+ * The homepage announcement bar.
+ *
+ * 🛑 `message` is the canonical key. The main admin editor saved this copy
+ * under `text` until 2026-08-24 — a key no renderer has ever read — so
+ * admin-authored announcements saved successfully and never appeared. Naming
+ * it here is what stops that recurring.
+ */
+export const announcementBarSchema = z.object({
+    message: annotate(z.string().trim().max(300, "Keep the announcement under 300 characters.").optional(), {
+        section: "announcement", sectionLabel: "Announcement bar", sectionRequired: true,
+        quick: true, order: 1, row: "full",
+    }),
+    enabled: annotate(z.boolean().optional(), {
+        section: "announcement", order: 2, row: "quarter",
+    }),
+    link: annotate(z.string().trim().max(300).optional(), {
+        section: "announcement", order: 3, row: "full",
+    }),
+});

package/dist/features/admin/schemas/admin-ops-forms.d.ts

@@ -0,0 +1,123 @@
+import { z } from "zod";
+export declare const adminOrderUpdateSchema: z.ZodObject<{
+    status: z.ZodEnum<[string, ...string[]]>;
+    trackingNumber: z.ZodOptional<z.ZodString>;
+    carrier: z.ZodOptional<z.ZodString>;
+    refundAmount: z.ZodOptional<z.ZodNumber>;
+    notes: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    status: string;
+    notes?: string | undefined;
+    trackingNumber?: string | undefined;
+    refundAmount?: number | undefined;
+    carrier?: string | undefined;
+}, {
+    status: string;
+    notes?: string | undefined;
+    trackingNumber?: string | undefined;
+    refundAmount?: number | undefined;
+    carrier?: string | undefined;
+}>;
+export type AdminOrderUpdateValues = z.infer<typeof adminOrderUpdateSchema>;
+/** Inviting a team member — an email plus the permissions it grants. */
+export declare const employeeInviteSchema: z.ZodObject<{
+    email: z.ZodString;
+    permissionGroup: z.ZodString;
+    permissions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    email: string;
+    permissionGroup: string;
+    permissions?: string[] | undefined;
+}, {
+    email: string;
+    permissionGroup: string;
+    permissions?: string[] | undefined;
+}>;
+export type EmployeeInviteValues = z.infer<typeof employeeInviteSchema>;
+/**
+ * The reason recorded against a hard ban.
+ *
+ * A hard ban runs an eight-stage destructive cascade; this string is the only
+ * durable record of why. A 10-character floor, matching the admin offer-cancel
+ * reason, because "spam" is not an audit trail.
+ */
+export declare const hardBanReasonSchema: z.ZodObject<{
+    reason: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    reason: string;
+}, {
+    reason: string;
+}>;
+export type HardBanReasonValues = z.infer<typeof hardBanReasonSchema>;
+/**
+ * Feature flags.
+ *
+ * Deliberately open records: flags are added and removed constantly, and a
+ * closed schema here would silently STRIP a newly-added flag on the next save
+ * — the `productBaseSchema` failure applied to configuration. The values are
+ * still constrained, which is what stops a flag being set to an object.
+ */
+export declare const featureFlagsUpdateSchema: z.ZodObject<{
+    flags: z.ZodRecord<z.ZodString, z.ZodBoolean>;
+    rollouts: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNumber>>;
+}, "strip", z.ZodTypeAny, {
+    flags: Record<string, boolean>;
+    rollouts?: Record<string, number> | undefined;
+}, {
+    flags: Record<string, boolean>;
+    rollouts?: Record<string, number> | undefined;
+}>;
+export type FeatureFlagsUpdateValues = z.infer<typeof featureFlagsUpdateSchema>;
+/** An ad placement. `priority` orders competing ads in the same slot. */
+export declare const adminAdFormSchema: z.ZodEffects<z.ZodObject<{
+    name: z.ZodString;
+    provider: z.ZodEnum<["manual", "adsense", "thirdParty"]>;
+    status: z.ZodEnum<["draft", "active", "scheduled", "paused"]>;
+    priority: z.ZodNumber;
+    placementIds: z.ZodArray<z.ZodString, "many">;
+    requiresConsent: z.ZodBoolean;
+    startAt: z.ZodOptional<z.ZodString>;
+    endAt: z.ZodOptional<z.ZodString>;
+    creative: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<import("../../..").FirestoreValue, z.ZodTypeDef, import("../../..").FirestoreValue>>>;
+}, "strip", z.ZodTypeAny, {
+    status: "draft" | "active" | "scheduled" | "paused";
+    name: string;
+    priority: number;
+    provider: "manual" | "adsense" | "thirdParty";
+    placementIds: string[];
+    requiresConsent: boolean;
+    startAt?: string | undefined;
+    endAt?: string | undefined;
+    creative?: Record<string, import("../../..").FirestoreValue> | undefined;
+}, {
+    status: "draft" | "active" | "scheduled" | "paused";
+    name: string;
+    priority: number;
+    provider: "manual" | "adsense" | "thirdParty";
+    placementIds: string[];
+    requiresConsent: boolean;
+    startAt?: string | undefined;
+    endAt?: string | undefined;
+    creative?: Record<string, import("../../..").FirestoreValue> | undefined;
+}>, {
+    status: "draft" | "active" | "scheduled" | "paused";
+    name: string;
+    priority: number;
+    provider: "manual" | "adsense" | "thirdParty";
+    placementIds: string[];
+    requiresConsent: boolean;
+    startAt?: string | undefined;
+    endAt?: string | undefined;
+    creative?: Record<string, import("../../..").FirestoreValue> | undefined;
+}, {
+    status: "draft" | "active" | "scheduled" | "paused";
+    name: string;
+    priority: number;
+    provider: "manual" | "adsense" | "thirdParty";
+    placementIds: string[];
+    requiresConsent: boolean;
+    startAt?: string | undefined;
+    endAt?: string | undefined;
+    creative?: Record<string, import("../../..").FirestoreValue> | undefined;
+}>;
+export type AdminAdFormValues = z.infer<typeof adminAdFormSchema>;

package/dist/features/admin/schemas/admin-ops-forms.js

@@ -0,0 +1,147 @@
+/*
+ * WHY: Four more admin editors rendered `<Form>` with no schema. Each writes
+ *      something an admin cannot easily undo.
+ *
+ *      `AdminOrderEditorView` is the one that touches money: `refundAmount`
+ *      was parsed with a bare `parseFloat` and guarded only by
+ *      `!isNaN(amount) && amount > 0`, with no upper bound and no check
+ *      against the order — so a mistyped figure went straight through as a
+ *      refund instruction.
+ *
+ *      `AdminEmployeeEditorView` grants permissions, and `AdminUsersView`'s
+ *      hard-ban takes a reason that is the entire record of why an account
+ *      was destroyed.
+ *
+ * WHAT: One schema per editor.
+ *
+ * EXPORTS:
+ *   adminOrderUpdateSchema, employeeInviteSchema, hardBanReasonSchema,
+ *   featureFlagsUpdateSchema, adminAdFormSchema, and their value types
+ *
+ * @tag domain:admin
+ * @tag layer:schema
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:AdminOrderEditorView,AdminEmployeeEditorView,AdminUsersView,AdminFeatureFlagsView,AdminAdEditorView
+ * @tag sideEffects:none
+ */
+import { z } from "zod";
+import { annotate } from "../../shell/field-ui-meta";
+import { firestoreValueSchema } from "../../../schemas/firestore-value";
+import { OrderStatusValues } from "../../orders/schemas/firestore";
+/** Derived from the real 9-value union, never restated (Root Cause #36). */
+const orderStatusSchema = z.enum(Object.values(OrderStatusValues));
+export const adminOrderUpdateSchema = z.object({
+    status: annotate(orderStatusSchema, {
+        section: "status", sectionLabel: "Order", sectionRequired: true, quick: true, order: 1, row: "pair",
+    }),
+    trackingNumber: annotate(z.string().trim().max(120).optional(), {
+        section: "shipping", sectionLabel: "Shipping", order: 1, row: "pair",
+    }),
+    carrier: annotate(z.string().trim().max(80).optional(), {
+        section: "shipping", order: 2, row: "pair",
+    }),
+    /*
+     * 🛑 Bounded. This was `parseFloat` + `> 0` with no ceiling, so a slipped
+     * decimal point issued a refund an order of magnitude too large. The cap is
+     * a sanity bound, not a business rule — the route still checks the amount
+     * against the order itself.
+     */
+    refundAmount: annotate(z.coerce
+        .number({ invalid_type_error: "Enter the refund amount as a number." })
+        .positive("A refund must be greater than zero.")
+        .max(10000000, "That looks like a typo — check the decimal point.")
+        .optional(), { section: "shipping", order: 3, row: "pair", kind: "number" }),
+    notes: annotate(z.string().trim().max(2000).optional(), {
+        section: "shipping", order: 4, row: "full", kind: "textarea",
+    }),
+});
+/** Inviting a team member — an email plus the permissions it grants. */
+export const employeeInviteSchema = z.object({
+    email: annotate(z.string().trim().toLowerCase().min(1, "An email address is required.").email("That doesn't look like an email address."), { section: "member", sectionLabel: "Team member", sectionRequired: true, quick: true, order: 1, row: "pair" }),
+    permissionGroup: annotate(z.string().trim().min(1, "Choose a permission group."), {
+        section: "member", quick: true, order: 2, row: "pair",
+    }),
+    permissions: annotate(z.array(z.string().min(1)).max(200).optional(), {
+        section: "member", order: 3, row: "full", kind: "list",
+    }),
+});
+/**
+ * The reason recorded against a hard ban.
+ *
+ * A hard ban runs an eight-stage destructive cascade; this string is the only
+ * durable record of why. A 10-character floor, matching the admin offer-cancel
+ * reason, because "spam" is not an audit trail.
+ */
+export const hardBanReasonSchema = z.object({
+    reason: annotate(z.string().trim().min(10, "Record why this account is being banned — at least 10 characters.").max(500), { section: "ban", sectionLabel: "Reason", sectionRequired: true, quick: true, order: 1, row: "full", kind: "textarea" }),
+});
+/**
+ * Feature flags.
+ *
+ * Deliberately open records: flags are added and removed constantly, and a
+ * closed schema here would silently STRIP a newly-added flag on the next save
+ * — the `productBaseSchema` failure applied to configuration. The values are
+ * still constrained, which is what stops a flag being set to an object.
+ */
+export const featureFlagsUpdateSchema = z.object({
+    flags: annotate(z.record(z.string(), z.boolean()), {
+        section: "flags", sectionLabel: "Feature flags", sectionRequired: true, order: 1, row: "full", kind: "list",
+    }),
+    rollouts: annotate(z.record(z.string(), z.coerce.number().min(0).max(100)).optional(), {
+        section: "flags", order: 2, row: "full", kind: "list",
+        help: "Percentage rollout per flag, 0–100.",
+    }),
+});
+/** An ad placement. `priority` orders competing ads in the same slot. */
+export const adminAdFormSchema = z
+    .object({
+    name: annotate(z.string().trim().min(2, "Give the ad a name.").max(120), {
+        section: "basics", sectionLabel: "Ad", sectionRequired: true, quick: true, order: 1, row: "pair",
+    }),
+    provider: annotate(z.enum(["manual", "adsense", "thirdParty"]), {
+        section: "basics", quick: true, order: 2, row: "pair",
+    }),
+    status: annotate(z.enum(["draft", "active", "scheduled", "paused"]), {
+        section: "basics", quick: true, order: 3, row: "pair",
+    }),
+    priority: annotate(z.coerce.number().int().min(0).max(1000), {
+        section: "basics", order: 4, row: "pair", kind: "number",
+    }),
+    placementIds: annotate(z.array(z.string().min(1)).min(1, "Choose at least one placement."), {
+        section: "placement", sectionLabel: "Placement", sectionRequired: true, order: 1, row: "full", kind: "list",
+    }),
+    requiresConsent: annotate(z.boolean(), {
+        section: "placement", order: 2, row: "quarter",
+    }),
+    startAt: annotate(z.string().optional(), {
+        section: "schedule", sectionLabel: "Schedule", order: 1, row: "pair", kind: "date",
+    }),
+    endAt: annotate(z.string().optional(), {
+        section: "schedule", order: 2, row: "pair", kind: "date",
+    }),
+    // Creative shape varies by provider, so it stays open — an AdSense slot and
+    // a manual banner share almost no fields. Open to a Firestore VALUE tree,
+    // not to anything: `z.unknown()` would pass a function straight to the
+    // driver, which then throws at write time rather than at parse time.
+    creative: annotate(z.record(firestoreValueSchema).optional(), {
+        section: "creative", sectionLabel: "Creative", order: 1, row: "full", kind: "list",
+    }),
+})
+    .superRefine((v, ctx) => {
+    // A scheduled ad with no start date never runs, and nothing would say so.
+    if (v.status === "scheduled" && !v.startAt) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["startAt"],
+            message: "A scheduled ad needs a start date.",
+        });
+    }
+    if (v.startAt && v.endAt && v.endAt <= v.startAt) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["endAt"],
+            message: "The end date must be after the start date.",
+        });
+    }
+});

package/dist/features/admin/schemas/small-forms.d.ts

@@ -0,0 +1,54 @@
+import { z } from "zod";
+/**
+ * Newsletter subscription — one field, shared by all three boxes (the homepage
+ * banner, the homepage inline form, and the footer slot).
+ *
+ * Trimmed and lowercased before validation so ` Foo@Bar.com ` and
+ * `foo@bar.com` cannot become two subscriptions for one person.
+ */
+export declare const newsletterSubscribeSchema: z.ZodObject<{
+    email: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    email: string;
+}, {
+    email: string;
+}>;
+export type NewsletterSubscribeValues = z.infer<typeof newsletterSubscribeSchema>;
+/**
+ * The quick-create drawer shared in shape by brands and categories.
+ *
+ * Both drawers post `{ name, description, isActive }` to their own endpoint
+ * and differ in nothing else, so one schema serves both. `slug` is absent
+ * deliberately — it is derived from the name on the server, and this codebase
+ * treats a slug as create-only and non-editable everywhere else.
+ */
+export declare const quickCreateTaxonomySchema: z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    isActive: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    description?: string | undefined;
+    isActive?: boolean | undefined;
+}, {
+    name: string;
+    description?: string | undefined;
+    isActive?: boolean | undefined;
+}>;
+export type QuickCreateTaxonomyValues = z.infer<typeof quickCreateTaxonomySchema>;
+/**
+ * Marking a payout paid.
+ *
+ * `transactionId` is REQUIRED, which it was not before. This is the record
+ * that money left the building — an empty one leaves a payout marked paid with
+ * nothing to reconcile it against, and no way to answer a seller asking where
+ * their money went.
+ */
+export declare const payoutMarkPaidSchema: z.ZodObject<{
+    transactionId: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    transactionId: string;
+}, {
+    transactionId: string;
+}>;
+export type PayoutMarkPaidValues = z.infer<typeof payoutMarkPaidSchema>;

package/dist/features/admin/schemas/small-forms.js

@@ -0,0 +1,85 @@
+/*
+ * WHY: A cluster of small forms — three newsletter boxes, two quick-create
+ *      drawers, and the payout mark-paid modal — each rendered `<Form>` with
+ *      no schema. Individually each is two or three fields; together they are
+ *      six surfaces where the only validation was whatever the server said
+ *      after the round-trip, reported as a toast.
+ *
+ *      The newsletter trio matters most despite being one field: an email box
+ *      that accepts anything sends a subscription request for `"asdf"` and
+ *      shows a success message.
+ *
+ * WHAT: One module for the small shared shapes, rather than six schema files
+ *       of three lines each.
+ *
+ * ## Why these live together and the bigger ones do not
+ *
+ * These have no per-entity semantics worth a file of their own — an email is
+ * an email. An entity with real rules (a payout method's per-type bank
+ * requirements, a listing template's defaults tree) keeps its own module,
+ * because that is where the reasoning belongs. Grouping by *size* rather than
+ * by domain is the exception here, and it stops at the point where a schema
+ * needs a paragraph to explain itself.
+ *
+ * EXPORTS:
+ *   newsletterSubscribeSchema, quickCreateTaxonomySchema,
+ *   payoutMarkPaidSchema, and their inferred value types
+ *
+ * @tag domain:admin,homepage,payments
+ * @tag layer:schema
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:newsletter forms,quick-create drawers,AdminPayoutMarkPaidModal
+ * @tag sideEffects:none
+ */
+import { z } from "zod";
+import { annotate } from "../../shell/field-ui-meta";
+/**
+ * Newsletter subscription — one field, shared by all three boxes (the homepage
+ * banner, the homepage inline form, and the footer slot).
+ *
+ * Trimmed and lowercased before validation so ` Foo@Bar.com ` and
+ * `foo@bar.com` cannot become two subscriptions for one person.
+ */
+export const newsletterSubscribeSchema = z.object({
+    email: annotate(z
+        .string()
+        .trim()
+        .toLowerCase()
+        .min(1, "Enter your email address.")
+        .email("That doesn't look like an email address."), { section: "subscribe", sectionLabel: "Newsletter", sectionRequired: true, quick: true, order: 1, row: "full" }),
+});
+/**
+ * The quick-create drawer shared in shape by brands and categories.
+ *
+ * Both drawers post `{ name, description, isActive }` to their own endpoint
+ * and differ in nothing else, so one schema serves both. `slug` is absent
+ * deliberately — it is derived from the name on the server, and this codebase
+ * treats a slug as create-only and non-editable everywhere else.
+ */
+export const quickCreateTaxonomySchema = z.object({
+    name: annotate(z.string().trim().min(1, "A name is required.").max(80, "Keep the name under 80 characters."), {
+        section: "basics", sectionLabel: "Details", sectionRequired: true, quick: true, order: 1, row: "full",
+    }),
+    description: annotate(z.string().max(500, "Keep the description under 500 characters.").optional(), {
+        section: "basics", order: 2, row: "full", kind: "textarea",
+    }),
+    isActive: annotate(z.boolean().optional(), {
+        section: "basics", order: 3, row: "quarter",
+    }),
+});
+/**
+ * Marking a payout paid.
+ *
+ * `transactionId` is REQUIRED, which it was not before. This is the record
+ * that money left the building — an empty one leaves a payout marked paid with
+ * nothing to reconcile it against, and no way to answer a seller asking where
+ * their money went.
+ */
+export const payoutMarkPaidSchema = z.object({
+    transactionId: annotate(z
+        .string()
+        .trim()
+        .min(3, "Enter the bank or UPI reference for this transfer.")
+        .max(120, "Keep the reference under 120 characters."), { section: "payment", sectionLabel: "Payment", sectionRequired: true, quick: true, order: 1, row: "full" }),
+});

package/dist/features/auth/components/ForgotPasswordView.js

@@ -7,6 +7,7 @@ import { Form } from "../../../ui/components/Form";
 import { FieldInput } from "../../../ui/forms/FieldInput";
 import { applyZodIssues } from "../../../ui/forms/FormShell";
 import { forgotPasswordSchema } from "../schemas";
+import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary";
 export function ForgotPasswordView({ onSubmit, isLoading = false, error, success, labels = {}, renderBackLink, className = "", }) {
     const [email, setEmail] = useState("");
     const { showToast } = useToast();
@@ -26,7 +27,7 @@ export function ForgotPasswordView({ onSubmit, isLoading = false, error, success
         };
     }
     return (_jsx(Row, { className: `min-h-[60vh] ${className}`, align: "center", justify: "center", padding: "x-md", children: _jsxs(Stack, { className: "max-w-md w-full", gap: "lg", children: [_jsxs(Div, { className: "text-center", children: [_jsx(Heading, { level: 1, className: "font-extrabold", size: "3xl", children: labels.title ?? "Forgot Password" }), _jsx(Text, { className: "mt-2 text-[var(--appkit-color-text-muted)]", size: "sm", children: labels.description ??
-                                "Enter your email and we'll send you a reset link." })] }), error && (_jsx(Alert, { variant: "error", compact: true, children: error })), success && (_jsx(Alert, { variant: "success", compact: true, children: success })), !success && (_jsx(Form, { noValidate: true, onSubmit: (e) => e.preventDefault(), spacing: "md", children: ({ setFieldError, clearErrors }) => (_jsxs(_Fragment, { children: [_jsx(FieldInput, { name: "email", label: labels.emailLabel ?? "Email address", type: "email", autoComplete: "username", required: true, placeholder: labels.emailPlaceholder ?? "you@example.com", value: email, onChange: setEmail }), _jsx(Button, { type: "submit", isLoading: isLoading, disabled: isLoading, className: "w-full", onClick: buildClickHandler(setFieldError, clearErrors), children: isLoading
+                                "Enter your email and we'll send you a reset link." })] }), error && (_jsx(Alert, { variant: "error", compact: true, children: error })), success && (_jsx(Alert, { variant: "success", compact: true, children: success })), !success && (_jsx(Form, { schema: forgotPasswordSchema, noValidate: true, onSubmit: (e) => e.preventDefault(), spacing: "md", children: ({ setFieldError, clearErrors }) => (_jsxs(_Fragment, { children: [_jsx(FormErrorSummary, {}), _jsx(FieldInput, { name: "email", label: labels.emailLabel ?? "Email address", type: "email", autoComplete: "username", required: true, placeholder: labels.emailPlaceholder ?? "you@example.com", value: email, onChange: setEmail }), _jsx(Button, { type: "submit", isLoading: isLoading, disabled: isLoading, className: "w-full", onClick: buildClickHandler(setFieldError, clearErrors), children: isLoading
                                     ? (labels.submittingLabel ?? "Sending…")
                                     : (labels.submitLabel ?? "Send reset link") })] })) })), renderBackLink && (_jsx(Div, { textSize: "sm", className: "text-center", children: renderBackLink() }))] }) }));
 }

package/dist/features/auth/components/LoginForm.js

@@ -9,6 +9,7 @@ import { FieldCheckbox } from "../../../ui/forms/FieldCheckbox";
 import { applyZodIssues } from "../../../ui/forms/FormShell";
 import { loginSchema } from "../schemas";
 import { SocialAuthButtons } from "./SocialAuthButtons";
+import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary";
 export function LoginForm({ onSubmit, onGoogleLogin, isLoading = false, error, labels = {}, renderSocialButtons, renderCreateAccountLink, renderForgotPasswordLink, className = "", }) {
     const { showToast } = useToast();
     const [values, setValues] = useState({
@@ -16,7 +17,7 @@ export function LoginForm({ onSubmit, onGoogleLogin, isLoading = false, error, l
         password: "",
         rememberMe: false,
     });
-    return (_jsx(Row, { className: `min-h-[60vh] ${className}`, align: "center", justify: "center", padding: "x-md", children: _jsxs(Stack, { className: "max-w-md w-full", gap: "lg", children: [_jsxs(Div, { className: "text-center", children: [_jsx(Row, { justify: "center", className: "mb-3", children: _jsx(SiteMark, { size: "lg" }) }), _jsx(Heading, { level: 1, className: "font-extrabold", size: "3xl", children: labels.title ?? "Sign In" }), (labels.subtitle || renderCreateAccountLink) && (_jsxs(Text, { className: "mt-2", color: "muted", size: "sm", children: [labels.subtitle ?? "Or", " ", renderCreateAccountLink?.()] }))] }), error && (_jsx(Alert, { variant: "error", compact: true, children: error })), _jsx(Form, { noValidate: true, onSubmit: (e) => e.preventDefault(), spacing: "md", children: ({ setFieldError, clearErrors }) => (_jsxs(_Fragment, { children: [_jsx(FieldInput, { name: "email", label: labels.emailLabel ?? "Email address", type: "email", autoComplete: "username", required: true, placeholder: labels.emailPlaceholder ?? "you@example.com", value: values.email, onChange: (v) => setValues({ ...values, email: v }) }), _jsx(FieldInput, { name: "password", label: labels.passwordLabel ?? "Password", type: "password", autoComplete: "current-password", required: true, placeholder: labels.passwordPlaceholder ?? "••••••••", value: values.password, onChange: (v) => setValues({ ...values, password: v }) }), _jsxs(Row, { justify: "between", children: [_jsx(FieldCheckbox, { name: "rememberMe", label: labels.rememberMe ?? "Remember me", checked: values.rememberMe ?? false, onChange: (c) => setValues({ ...values, rememberMe: c }) }), renderForgotPasswordLink?.()] }), _jsx(Button, { type: "submit", isLoading: isLoading, disabled: isLoading, className: "w-full", onClick: async () => {
+    return (_jsx(Row, { className: `min-h-[60vh] ${className}`, align: "center", justify: "center", padding: "x-md", children: _jsxs(Stack, { className: "max-w-md w-full", gap: "lg", children: [_jsxs(Div, { className: "text-center", children: [_jsx(Row, { justify: "center", className: "mb-3", children: _jsx(SiteMark, { size: "lg" }) }), _jsx(Heading, { level: 1, className: "font-extrabold", size: "3xl", children: labels.title ?? "Sign In" }), (labels.subtitle || renderCreateAccountLink) && (_jsxs(Text, { className: "mt-2", color: "muted", size: "sm", children: [labels.subtitle ?? "Or", " ", renderCreateAccountLink?.()] }))] }), error && (_jsx(Alert, { variant: "error", compact: true, children: error })), _jsx(Form, { schema: loginSchema, noValidate: true, onSubmit: (e) => e.preventDefault(), spacing: "md", children: ({ setFieldError, clearErrors }) => (_jsxs(_Fragment, { children: [_jsx(FormErrorSummary, {}), _jsx(FieldInput, { name: "email", label: labels.emailLabel ?? "Email address", type: "email", autoComplete: "username", required: true, placeholder: labels.emailPlaceholder ?? "you@example.com", value: values.email, onChange: (v) => setValues({ ...values, email: v }) }), _jsx(FieldInput, { name: "password", label: labels.passwordLabel ?? "Password", type: "password", autoComplete: "current-password", required: true, placeholder: labels.passwordPlaceholder ?? "••••••••", value: values.password, onChange: (v) => setValues({ ...values, password: v }) }), _jsxs(Row, { justify: "between", children: [_jsx(FieldCheckbox, { name: "rememberMe", label: labels.rememberMe ?? "Remember me", checked: values.rememberMe ?? false, onChange: (c) => setValues({ ...values, rememberMe: c }) }), renderForgotPasswordLink?.()] }), _jsx(Button, { type: "submit", isLoading: isLoading, disabled: isLoading, className: "w-full", onClick: async () => {
                                     clearErrors();
                                     const parsed = loginSchema.safeParse(values);
                                     if (!parsed.success)

package/dist/features/auth/components/RegisterForm.js

@@ -9,6 +9,7 @@ import { FieldInput } from "../../../ui/forms/FieldInput";
 import { FieldCheckbox } from "../../../ui/forms/FieldCheckbox";
 import { applyZodIssues } from "../../../ui/forms/FormShell";
 import { registerSchema, registerPasswordSchema } from "../schemas";
+import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary";
 const registerClientSchema = registerSchema.extend({
     displayName: z.string().min(1, "Enter your name"),
     confirmPassword: registerPasswordSchema,
@@ -28,7 +29,7 @@ export function RegisterForm({ onSubmit, isLoading = false, error, success, labe
         displayName: "",
         acceptTerms: false,
     });
-    return (_jsx(Row, { className: `min-h-[60vh] ${className}`, align: "center", justify: "center", padding: "x-md", children: _jsxs(Stack, { className: "max-w-md w-full", gap: "lg", children: [_jsxs(Div, { className: "text-center", children: [_jsx(Row, { justify: "center", className: "mb-3", children: _jsx(SiteMark, { size: "lg" }) }), _jsx(Heading, { level: 1, className: "font-extrabold", size: "3xl", children: labels.title ?? "Create Account" }), (labels.subtitle || renderLoginLink) && (_jsxs(Text, { className: "mt-2 text-[var(--appkit-color-text-muted)]", size: "sm", children: [labels.subtitle ?? "Already have an account?", " ", renderLoginLink?.()] }))] }), success && (_jsx(Alert, { variant: "success", compact: true, children: success })), error && (_jsx(Alert, { variant: "error", compact: true, children: error })), _jsx(Form, { noValidate: true, onSubmit: (e) => e.preventDefault(), spacing: "md", children: ({ setFieldError, clearErrors }) => (_jsxs(_Fragment, { children: [_jsx(FieldInput, { name: "displayName", label: labels.displayNameLabel ?? "Full name", type: "text", autoComplete: "name", required: true, placeholder: labels.displayNamePlaceholder ?? "Your name", value: values.displayName, onChange: (v) => setValues({ ...values, displayName: v }) }), _jsx(FieldInput, { name: "email", label: labels.emailLabel ?? "Email address", type: "email", autoComplete: "username", required: true, placeholder: labels.emailPlaceholder ?? "you@example.com", value: values.email, onChange: (v) => setValues({ ...values, email: v }) }), _jsxs(Div, { children: [_jsx(FieldInput, { name: "password", label: labels.passwordLabel ?? "Password", type: "password", autoComplete: "new-password", required: true, placeholder: labels.passwordPlaceholder ?? "••••••••", value: values.password, onChange: (v) => setValues({ ...values, password: v }) }), renderPasswordStrength?.(values.password)] }), _jsx(FieldInput, { name: "confirmPassword", label: labels.confirmPasswordLabel ?? "Confirm password", type: "password", autoComplete: "new-password", required: true, placeholder: labels.confirmPasswordPlaceholder ?? "••••••••", value: values.confirmPassword, onChange: (v) => setValues({ ...values, confirmPassword: v }) }), _jsx(FieldCheckbox, { name: "acceptTerms", label: `${labels.acceptTermsLabel ?? "I accept the terms"}`, checked: values.acceptTerms, onChange: (c) => setValues({ ...values, acceptTerms: c }) }), renderTermsLink && (_jsx(Text, { size: "xs", variant: "secondary", children: renderTermsLink() })), _jsx(Button, { type: "submit", isLoading: isLoading, disabled: isLoading, className: "w-full", onClick: async () => {
+    return (_jsx(Row, { className: `min-h-[60vh] ${className}`, align: "center", justify: "center", padding: "x-md", children: _jsxs(Stack, { className: "max-w-md w-full", gap: "lg", children: [_jsxs(Div, { className: "text-center", children: [_jsx(Row, { justify: "center", className: "mb-3", children: _jsx(SiteMark, { size: "lg" }) }), _jsx(Heading, { level: 1, className: "font-extrabold", size: "3xl", children: labels.title ?? "Create Account" }), (labels.subtitle || renderLoginLink) && (_jsxs(Text, { className: "mt-2 text-[var(--appkit-color-text-muted)]", size: "sm", children: [labels.subtitle ?? "Already have an account?", " ", renderLoginLink?.()] }))] }), success && (_jsx(Alert, { variant: "success", compact: true, children: success })), error && (_jsx(Alert, { variant: "error", compact: true, children: error })), _jsx(Form, { schema: registerClientSchema, noValidate: true, onSubmit: (e) => e.preventDefault(), spacing: "md", children: ({ setFieldError, clearErrors }) => (_jsxs(_Fragment, { children: [_jsx(FormErrorSummary, {}), _jsx(FieldInput, { name: "displayName", label: labels.displayNameLabel ?? "Full name", type: "text", autoComplete: "name", required: true, placeholder: labels.displayNamePlaceholder ?? "Your name", value: values.displayName, onChange: (v) => setValues({ ...values, displayName: v }) }), _jsx(FieldInput, { name: "email", label: labels.emailLabel ?? "Email address", type: "email", autoComplete: "username", required: true, placeholder: labels.emailPlaceholder ?? "you@example.com", value: values.email, onChange: (v) => setValues({ ...values, email: v }) }), _jsxs(Div, { children: [_jsx(FieldInput, { name: "password", label: labels.passwordLabel ?? "Password", type: "password", autoComplete: "new-password", required: true, placeholder: labels.passwordPlaceholder ?? "••••••••", value: values.password, onChange: (v) => setValues({ ...values, password: v }) }), renderPasswordStrength?.(values.password)] }), _jsx(FieldInput, { name: "confirmPassword", label: labels.confirmPasswordLabel ?? "Confirm password", type: "password", autoComplete: "new-password", required: true, placeholder: labels.confirmPasswordPlaceholder ?? "••••••••", value: values.confirmPassword, onChange: (v) => setValues({ ...values, confirmPassword: v }) }), _jsx(FieldCheckbox, { name: "acceptTerms", label: `${labels.acceptTermsLabel ?? "I accept the terms"}`, checked: values.acceptTerms, onChange: (c) => setValues({ ...values, acceptTerms: c }) }), renderTermsLink && (_jsx(Text, { size: "xs", variant: "secondary", children: renderTermsLink() })), _jsx(Button, { type: "submit", isLoading: isLoading, disabled: isLoading, className: "w-full", onClick: async () => {
                                     clearErrors();
                                     const parsed = registerClientSchema.safeParse(values);
                                     if (!parsed.success)

package/dist/features/auth/components/ResetPasswordView.js

@@ -7,6 +7,7 @@ import { Alert, Button, Div, Heading, Row, Stack, Text, useToast } from "../../.
 import { Form } from "../../../ui/components/Form";
 import { FieldInput } from "../../../ui/forms/FieldInput";
 import { applyZodIssues } from "../../../ui/forms/FormShell";
+import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary";
 const resetClientSchema = z.object({
     password: z.string().min(6, "Password must be at least 6 characters"),
     confirmPassword: z.string().min(6),
@@ -33,7 +34,7 @@ export function ResetPasswordView({ oobCode, onSubmit, isLoading = false, error,
             }
         };
     }
-    return (_jsx(Row, { className: `min-h-[60vh] ${className}`, align: "center", justify: "center", padding: "x-md", children: _jsxs(Stack, { className: "max-w-md w-full", gap: "lg", children: [_jsxs(Div, { className: "text-center", children: [_jsx(Heading, { level: 1, className: "font-extrabold", size: "3xl", children: labels.title ?? "Reset Password" }), labels.description && (_jsx(Text, { className: "mt-2 text-[var(--appkit-color-text-muted)]", size: "sm", children: labels.description }))] }), error && (_jsx(Alert, { variant: "error", compact: true, children: error })), success ? (_jsxs(Alert, { variant: "success", compact: true, children: [success, renderLoginLink && _jsx(Div, { className: "mt-2", children: renderLoginLink() })] })) : (_jsx(Form, { noValidate: true, onSubmit: (e) => e.preventDefault(), spacing: "md", children: ({ setFieldError, clearErrors }) => (_jsxs(_Fragment, { children: [_jsx(FieldInput, { name: "password", label: labels.passwordLabel ?? "New password", type: "password", autoComplete: "new-password", required: true, placeholder: labels.passwordPlaceholder ?? "••••••••", value: password, onChange: setPassword }), _jsx(FieldInput, { name: "confirmPassword", label: labels.confirmPasswordLabel ?? "Confirm new password", type: "password", autoComplete: "new-password", required: true, placeholder: labels.confirmPasswordPlaceholder ?? "••••••••", value: confirmPassword, onChange: setConfirmPassword }), _jsx(Button, { type: "submit", variant: "primary", isLoading: isLoading, disabled: isLoading, className: "w-full", onClick: buildClickHandler(setFieldError, clearErrors), children: isLoading
+    return (_jsx(Row, { className: `min-h-[60vh] ${className}`, align: "center", justify: "center", padding: "x-md", children: _jsxs(Stack, { className: "max-w-md w-full", gap: "lg", children: [_jsxs(Div, { className: "text-center", children: [_jsx(Heading, { level: 1, className: "font-extrabold", size: "3xl", children: labels.title ?? "Reset Password" }), labels.description && (_jsx(Text, { className: "mt-2 text-[var(--appkit-color-text-muted)]", size: "sm", children: labels.description }))] }), error && (_jsx(Alert, { variant: "error", compact: true, children: error })), success ? (_jsxs(Alert, { variant: "success", compact: true, children: [success, renderLoginLink && _jsx(Div, { className: "mt-2", children: renderLoginLink() })] })) : (_jsx(Form, { schema: resetClientSchema, noValidate: true, onSubmit: (e) => e.preventDefault(), spacing: "md", children: ({ setFieldError, clearErrors }) => (_jsxs(_Fragment, { children: [_jsx(FormErrorSummary, {}), _jsx(FieldInput, { name: "password", label: labels.passwordLabel ?? "New password", type: "password", autoComplete: "new-password", required: true, placeholder: labels.passwordPlaceholder ?? "••••••••", value: password, onChange: setPassword }), _jsx(FieldInput, { name: "confirmPassword", label: labels.confirmPasswordLabel ?? "Confirm new password", type: "password", autoComplete: "new-password", required: true, placeholder: labels.confirmPasswordPlaceholder ?? "••••••••", value: confirmPassword, onChange: setConfirmPassword }), _jsx(Button, { type: "submit", variant: "primary", isLoading: isLoading, disabled: isLoading, className: "w-full", onClick: buildClickHandler(setFieldError, clearErrors), children: isLoading
                                     ? (labels.submittingLabel ?? "Resetting…")
                                     : (labels.submitLabel ?? "Reset password") })] })) }))] }) }));
 }