@mohasinac/appkit 4.16.1 → 4.18.0

package/dist/features/consultation/components/ConsultationForm.js

@@ -5,6 +5,8 @@ import { Button, Row, Select } from "../../../ui";
 import { Form } from "../../../ui/components/Form";
 import { FieldInput } from "../../../ui/forms/FieldInput";
 import { FieldTextarea } from "../../../ui/forms/FieldTextarea";
+import { bookConsultationSchema } from "../schemas";
+import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary";
 const TIME_SLOTS = [
     "9:00 AM",
     "10:00 AM",
@@ -41,7 +43,7 @@ export function ConsultationForm({ onSubmit, isPending, concerns = [], }) {
         e.preventDefault();
         await onSubmit(form);
     }
-    return (_jsxs(Form, { onSubmit: handleSubmit, spacing: "md", children: [_jsx(FieldInput, { name: "name", type: "text", placeholder: "Full name", value: form.name, onChange: (v) => handleValueChange("name", v), required: true }), _jsx(FieldInput, { name: "email", type: "email", placeholder: "Email address", value: form.email, onChange: (v) => handleValueChange("email", v), required: true }), _jsx(FieldInput, { name: "phone", type: "tel", placeholder: "Phone number", value: form.phone, onChange: (v) => handleValueChange("phone", v), required: true }), concerns.length > 0 && (_jsx(Row, { wrap: true, gap: "sm", children: concerns.map((c) => (_jsx(Button, { type: "button", variant: "outline", size: "sm", onClick: () => toggleConcern(c), className: `rounded-full border px-[var(--appkit-space-3)] py-[var(--appkit-space-1)] text-[length:var(--appkit-text-xs)] transition ${form.concern.includes(c)
+    return (_jsxs(Form, { schema: bookConsultationSchema, onSubmit: handleSubmit, spacing: "md", children: [_jsx(FormErrorSummary, {}), _jsx(FieldInput, { name: "name", type: "text", placeholder: "Full name", value: form.name, onChange: (v) => handleValueChange("name", v), required: true }), _jsx(FieldInput, { name: "email", type: "email", placeholder: "Email address", value: form.email, onChange: (v) => handleValueChange("email", v), required: true }), _jsx(FieldInput, { name: "phone", type: "tel", placeholder: "Phone number", value: form.phone, onChange: (v) => handleValueChange("phone", v), required: true }), concerns.length > 0 && (_jsx(Row, { wrap: true, gap: "sm", children: concerns.map((c) => (_jsx(Button, { type: "button", variant: "outline", size: "sm", onClick: () => toggleConcern(c), className: `rounded-full border px-[var(--appkit-space-3)] py-[var(--appkit-space-1)] text-[length:var(--appkit-text-xs)] transition ${form.concern.includes(c)
                         ? "border-primary bg-primary text-white"
                         : "border-neutral-300 text-neutral-700 hover:border-primary"}`, children: c }, c))) })), _jsxs(Row, { gap: "3", children: [_jsx(FieldInput, { name: "preferredDate", type: "date", value: form.preferredDate, onChange: (v) => handleValueChange("preferredDate", v), required: true, className: "flex-1" }), _jsx(Select, { value: form.preferredTime, onValueChange: (value) => handleValueChange("preferredTime", value), options: TIME_SLOTS.map((t) => ({ value: t, label: t })), wrapperClassName: "flex-1" })] }), _jsx(Select, { value: form.mode, onValueChange: (value) => handleValueChange("mode", value), options: [
                     { value: "remote", label: "Remote (Video Call)" },

package/dist/features/consultation/schemas/index.d.ts

@@ -60,8 +60,8 @@ export declare const consultationBookingSchema: z.ZodObject<{
 export declare const bookConsultationSchema: z.ZodObject<{
     name: z.ZodString;
     email: z.ZodString;
-    phone: z.ZodOptional<z.ZodString>;
-    concern: z.ZodArray<z.ZodString, "many">;
+    phone: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+    concern: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     preferredDate: z.ZodOptional<z.ZodString>;
     preferredTime: z.ZodOptional<z.ZodString>;
     mode: z.ZodOptional<z.ZodEnum<["online", "in_person", "phone"]>>;
@@ -69,19 +69,19 @@ export declare const bookConsultationSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     email: string;
     name: string;
-    concern: string[];
     message?: string | undefined;
     phone?: string | undefined;
     mode?: "phone" | "online" | "in_person" | undefined;
+    concern?: string[] | undefined;
     preferredDate?: string | undefined;
     preferredTime?: string | undefined;
 }, {
     email: string;
     name: string;
-    concern: string[];
     message?: string | undefined;
     phone?: string | undefined;
     mode?: "phone" | "online" | "in_person" | undefined;
+    concern?: string[] | undefined;
     preferredDate?: string | undefined;
     preferredTime?: string | undefined;
 }>;

package/dist/features/consultation/schemas/index.js

@@ -36,12 +36,29 @@ export const consultationBookingSchema = z.object({
  * Form schema for submitting a new consultation booking.
  */
 export const bookConsultationSchema = z.object({
-    name: z.string().min(2),
-    email: z.string().email(),
-    phone: z.string().optional(),
-    concern: z.array(z.string()).min(1, "Select at least one concern"),
+    name: z.string().trim().min(2, "Please tell us your name.").max(120),
+    email: z
+        .string()
+        .trim()
+        .toLowerCase()
+        .min(1, "An email address is required.")
+        .email("That doesn't look like an email address."),
+    // Same shape as the corporate enquiry's — see the note there.
+    phone: z
+        .string()
+        .trim()
+        .regex(/^(\+?91[-\s]?)?[6-9]\d{9}$/, "Enter a 10-digit Indian mobile number.")
+        .optional()
+        .or(z.literal("")),
+    /*
+     * Optional here, though the document treats it as the subject of the
+     * booking: the public form does not render a concern picker, so requiring it
+     * would reject every submission the form can produce. The admin-side booking
+     * path is where it is set.
+     */
+    concern: z.array(z.string()).optional(),
     preferredDate: z.string().optional(),
     preferredTime: z.string().optional(),
     mode: consultationModeSchema.optional(),
-    message: z.string().optional(),
+    message: z.string().trim().max(4000).optional(),
 });

package/dist/features/contact/schemas/inquiry-forms.d.ts

@@ -0,0 +1,13 @@
+import { z } from "zod";
+/**
+ * A raffle entry is one optional message — the entry itself is the act of
+ * submitting. Bounded because the text is rendered back on a leaderboard.
+ */
+export declare const raffleEntrySchema: z.ZodObject<{
+    message: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    message?: string | undefined;
+}, {
+    message?: string | undefined;
+}>;
+export type RaffleEntryValues = z.infer<typeof raffleEntrySchema>;

package/dist/features/contact/schemas/inquiry-forms.js

@@ -0,0 +1,34 @@
+/*
+ * WHY: `EventRaffleEntryForm` rendered `<Form>` with no schema, so a raffle
+ *      entry's message was unbounded — and it is rendered back on a public
+ *      leaderboard.
+ *
+ * ## Why this file holds ONE schema and not three
+ *
+ * It was drafted with three: consultation, corporate and raffle. Two of those
+ * were already implemented — `bookConsultationSchema` and
+ * `submitCorporateInquirySchema` have existed in their own features all along,
+ * and their forms simply never used them. Adding a second copy of each would
+ * have been precisely the duplication this rework exists to remove, so those
+ * two were improved in place instead and only the raffle schema remains here.
+ *
+ * EXPORTS: raffleEntrySchema, type RaffleEntryValues
+ *
+ * @tag domain:events
+ * @tag layer:schema
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:EventRaffleEntryForm
+ * @tag sideEffects:none
+ */
+import { z } from "zod";
+import { annotate } from "../../shell/field-ui-meta";
+/**
+ * A raffle entry is one optional message — the entry itself is the act of
+ * submitting. Bounded because the text is rendered back on a leaderboard.
+ */
+export const raffleEntrySchema = z.object({
+    message: annotate(z.string().trim().max(500, "Keep it under 500 characters.").optional(), {
+        section: "entry", sectionLabel: "Your entry", sectionRequired: true, quick: true, order: 1, row: "full", kind: "textarea",
+    }),
+});

package/dist/features/corporate/components/CorporateInquiryForm.js

@@ -6,6 +6,8 @@ import { Form } from "../../../ui/components/Form";
 import { FieldInput } from "../../../ui/forms/FieldInput";
 import { FieldTextarea } from "../../../ui/forms/FieldTextarea";
 import { FieldCheckbox } from "../../../ui/forms/FieldCheckbox";
+import { submitCorporateInquirySchema } from "../schemas";
+import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary";
 export function CorporateInquiryForm({ onSubmit, isPending, }) {
     const [form, setForm] = React.useState({
         companyName: "",
@@ -26,5 +28,5 @@ export function CorporateInquiryForm({ onSubmit, isPending, }) {
         e.preventDefault();
         await onSubmit(form);
     }
-    return (_jsxs(Form, { onSubmit: handleSubmit, spacing: "md", children: [_jsxs(Div, { layout: "grid", gap: "4", className: "grid-cols-1 sm:grid-cols-2", children: [_jsx(FieldInput, { name: "companyName", type: "text", placeholder: "Company name", value: form.companyName, onChange: (v) => patch("companyName", v), required: true }), _jsx(FieldInput, { name: "contactPerson", type: "text", placeholder: "Contact person", value: form.contactPerson, onChange: (v) => patch("contactPerson", v), required: true }), _jsx(FieldInput, { name: "designation", type: "text", placeholder: "Designation (optional)", value: form.designation ?? "", onChange: (v) => patch("designation", v) }), _jsx(FieldInput, { name: "email", type: "email", placeholder: "Business email", value: form.email, onChange: (v) => patch("email", v), required: true }), _jsx(FieldInput, { name: "phone", type: "tel", placeholder: "Phone number", value: form.phone, onChange: (v) => patch("phone", v), required: true }), _jsx(FieldInput, { name: "units", type: "number", placeholder: "Number of units", value: form.units, onChange: (v) => patch("units", v === "" ? 0 : Number(v)), min: 1, required: true }), _jsx(FieldInput, { name: "budgetPerUnit", type: "number", placeholder: "Budget per unit (optional)", value: form.budgetPerUnit ?? "", onChange: (v) => patch("budgetPerUnit", v === "" ? undefined : Number(v)), min: 0 }), _jsx(FieldInput, { name: "deliveryDateRequired", type: "date", placeholder: "Required by (optional)", value: form.deliveryDateRequired ?? "", onChange: (v) => patch("deliveryDateRequired", v) })] }), _jsx(FieldCheckbox, { name: "customBranding", label: "Custom branding required", checked: form.customBranding, onChange: (c) => patch("customBranding", c) }), _jsx(FieldTextarea, { name: "message", placeholder: "Additional requirements (optional)", value: form.message ?? "", onChange: (v) => patch("message", v), rows: 4 }), _jsx(Button, { type: "submit", isLoading: isPending, disabled: isPending, variant: "primary", className: "w-full", children: isPending ? "Submitting..." : "Submit Inquiry" }), _jsx(Text, { size: "xs", variant: "secondary", children: "We'll respond within 1-2 business days." })] }));
+    return (_jsxs(Form, { schema: submitCorporateInquirySchema, onSubmit: handleSubmit, spacing: "md", children: [_jsx(FormErrorSummary, {}), _jsxs(Div, { layout: "grid", gap: "4", className: "grid-cols-1 sm:grid-cols-2", children: [_jsx(FieldInput, { name: "companyName", type: "text", placeholder: "Company name", value: form.companyName, onChange: (v) => patch("companyName", v), required: true }), _jsx(FieldInput, { name: "contactPerson", type: "text", placeholder: "Contact person", value: form.contactPerson, onChange: (v) => patch("contactPerson", v), required: true }), _jsx(FieldInput, { name: "designation", type: "text", placeholder: "Designation (optional)", value: form.designation ?? "", onChange: (v) => patch("designation", v) }), _jsx(FieldInput, { name: "email", type: "email", placeholder: "Business email", value: form.email, onChange: (v) => patch("email", v), required: true }), _jsx(FieldInput, { name: "phone", type: "tel", placeholder: "Phone number", value: form.phone, onChange: (v) => patch("phone", v), required: true }), _jsx(FieldInput, { name: "units", type: "number", placeholder: "Number of units", value: form.units, onChange: (v) => patch("units", v === "" ? 0 : Number(v)), min: 1, required: true }), _jsx(FieldInput, { name: "budgetPerUnit", type: "number", placeholder: "Budget per unit (optional)", value: form.budgetPerUnit ?? "", onChange: (v) => patch("budgetPerUnit", v === "" ? undefined : Number(v)), min: 0 }), _jsx(FieldInput, { name: "deliveryDateRequired", type: "date", placeholder: "Required by (optional)", value: form.deliveryDateRequired ?? "", onChange: (v) => patch("deliveryDateRequired", v) })] }), _jsx(FieldCheckbox, { name: "customBranding", label: "Custom branding required", checked: form.customBranding, onChange: (c) => patch("customBranding", c) }), _jsx(FieldTextarea, { name: "message", placeholder: "Additional requirements (optional)", value: form.message ?? "", onChange: (v) => patch("message", v), rows: 4 }), _jsx(Button, { type: "submit", isLoading: isPending, disabled: isPending, variant: "primary", className: "w-full", children: isPending ? "Submitting..." : "Submit Inquiry" }), _jsx(Text, { size: "xs", variant: "secondary", children: "We'll respond within 1-2 business days." })] }));
 }

package/dist/features/corporate/schemas/index.d.ts

@@ -64,17 +64,19 @@ export declare const submitCorporateInquirySchema: z.ZodObject<{
     contactPerson: z.ZodString;
     designation: z.ZodOptional<z.ZodString>;
     email: z.ZodString;
-    phone: z.ZodOptional<z.ZodString>;
+    phone: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
     units: z.ZodOptional<z.ZodNumber>;
     budgetPerUnit: z.ZodOptional<z.ZodNumber>;
     totalBudget: z.ZodOptional<z.ZodNumber>;
     deliveryDateRequired: z.ZodOptional<z.ZodString>;
     customBranding: z.ZodDefault<z.ZodBoolean>;
+    message: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     email: string;
     companyName: string;
     contactPerson: string;
     customBranding: boolean;
+    message?: string | undefined;
     phone?: string | undefined;
     designation?: string | undefined;
     units?: number | undefined;
@@ -85,6 +87,7 @@ export declare const submitCorporateInquirySchema: z.ZodObject<{
     email: string;
     companyName: string;
     contactPerson: string;
+    message?: string | undefined;
     phone?: string | undefined;
     designation?: string | undefined;
     units?: number | undefined;

package/dist/features/corporate/schemas/index.js

@@ -37,14 +37,44 @@ export const corporateInquirySchema = z.object({
  * Form schema for submitting a corporate inquiry.
  */
 export const submitCorporateInquirySchema = z.object({
-    companyName: z.string().min(2),
-    contactPerson: z.string().min(2),
-    designation: z.string().optional(),
-    email: z.string().email(),
-    phone: z.string().optional(),
-    units: z.number().int().positive().optional(),
-    budgetPerUnit: z.number().optional(),
-    totalBudget: z.number().optional(),
+    companyName: z.string().trim().min(2, "A company name is required.").max(160),
+    contactPerson: z.string().trim().min(2, "Who should we reply to?").max(120),
+    designation: z.string().trim().max(120).optional(),
+    email: z
+        .string()
+        .trim()
+        .toLowerCase()
+        .min(1, "An email address is required.")
+        .email("That doesn't look like an email address."),
+    // Indian mobile, tolerant of spacing and a country code. Optional — a
+    // reachable email is enough, and demanding a phone number loses enquiries.
+    phone: z
+        .string()
+        .trim()
+        .regex(/^(\+?91[-\s]?)?[6-9]\d{9}$/, "Enter a 10-digit Indian mobile number.")
+        .optional()
+        .or(z.literal("")),
+    /*
+     * 🛑 COERCED. These were `z.number()`, and this schema's own form sends
+     * strings — so every submission carrying a unit count failed to parse the
+     * moment anyone actually wired the form to the schema. Bounds are
+     * deliberately generous: they catch a mistyped figure, not a large order.
+     *
+     * A sales reply is priced from these two, and until now both were free text.
+     */
+    units: z.coerce
+        .number({ invalid_type_error: "Enter the number of units as a number." })
+        .int("Units must be a whole number.")
+        .positive("At least one unit.")
+        .max(1000000, "That looks like a typo — contact us directly for orders this large.")
+        .optional(),
+    budgetPerUnit: z.coerce
+        .number({ invalid_type_error: "Enter a per-unit budget as a number." })
+        .min(0, "A budget cannot be negative.")
+        .max(10000000, "That looks like a typo.")
+        .optional(),
+    totalBudget: z.coerce.number().min(0).optional(),
     deliveryDateRequired: z.string().optional(),
     customBranding: z.boolean().default(false),
+    message: z.string().trim().max(4000).optional(),
 });

package/dist/features/events/components/EventRaffleEntryForm.js

@@ -6,6 +6,8 @@ import { Form } from "../../../ui/components/Form";
 import { FieldTextarea } from "../../../ui/forms/FieldTextarea";
 import { Div, Heading, Stack, Text } from "../../../ui";
 import { Badge } from "../../../ui/components/Badge";
+import { raffleEntrySchema } from "../../contact/schemas/inquiry-forms";
+import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary";
 const __P = {
     p6: "p-[var(--appkit-space-6)]",
 };
@@ -38,5 +40,5 @@ export function EventRaffleEntryForm({ prizeLabel, raffleType = "open_raffle", t
             : raffleType === "top_n_participants"
                 ? `Earliest ${topN ?? "N"} entries qualify.`
                 : "Spin the wheel to claim your prize.";
-    return (_jsxs(Stack, { className: `${__P.p6}`, gap: "md", rounded: "2xl", border: "default", children: [prizeLabel ? (_jsxs(Stack, { gap: "xs", children: [_jsx(Badge, { variant: "warning", children: "Prize" }), _jsx(Heading, { level: 2, weight: "bold", size: "2xl", children: prizeLabel })] })) : null, _jsx(Text, { size: "sm", color: "muted", children: eligibilityCopy }), submitted ? (_jsx(Div, { textSize: "sm", color: "success", surface: "success-surface", padding: "inline", rounded: "lg", children: "You're in. Check the leaderboard for results." })) : overLimit ? (_jsxs(Div, { textSize: "sm", color: "warning", surface: "warning-surface", padding: "inline", rounded: "lg", children: ["You've used all ", maxEntriesPerUser, " entry slot", maxEntriesPerUser === 1 ? "" : "s", " for this raffle."] })) : (_jsxs(Form, { onSubmit: handleSubmit, className: "space-y-[0.75rem]", children: [_jsx(FieldTextarea, { name: "message", label: "Message", hint: "optional \u2014 share why you'd like to win", value: message, onChange: setMessage, rows: 3, maxLength: 500, placeholder: "Share why you'd like to win", disabled: busy }), _jsx(Button, { type: "submit", variant: "primary", disabled: busy, children: busy ? "Submitting…" : "Enter raffle" })] }))] }));
+    return (_jsxs(Stack, { className: `${__P.p6}`, gap: "md", rounded: "2xl", border: "default", children: [prizeLabel ? (_jsxs(Stack, { gap: "xs", children: [_jsx(Badge, { variant: "warning", children: "Prize" }), _jsx(Heading, { level: 2, weight: "bold", size: "2xl", children: prizeLabel })] })) : null, _jsx(Text, { size: "sm", color: "muted", children: eligibilityCopy }), submitted ? (_jsx(Div, { textSize: "sm", color: "success", surface: "success-surface", padding: "inline", rounded: "lg", children: "You're in. Check the leaderboard for results." })) : overLimit ? (_jsxs(Div, { textSize: "sm", color: "warning", surface: "warning-surface", padding: "inline", rounded: "lg", children: ["You've used all ", maxEntriesPerUser, " entry slot", maxEntriesPerUser === 1 ? "" : "s", " for this raffle."] })) : (_jsxs(Form, { schema: raffleEntrySchema, onSubmit: handleSubmit, className: "space-y-[0.75rem]", children: [_jsx(FormErrorSummary, {}), _jsx(FieldTextarea, { name: "message", label: "Message", hint: "optional \u2014 share why you'd like to win", value: message, onChange: setMessage, rows: 3, maxLength: 500, placeholder: "Share why you'd like to win", disabled: busy }), _jsx(Button, { type: "submit", variant: "primary", disabled: busy, children: busy ? "Submitting…" : "Enter raffle" })] }))] }));
 }

package/dist/features/homepage/components/NewsletterBanner.js

@@ -6,6 +6,8 @@ import { Button, Div, Heading, Span, Text } from "../../../ui";
 import { DynamicBgDiv } from "../../../ui/components/DynamicBgDiv";
 import { Form } from "../../../ui/components/Form";
 import { FieldInput } from "../../../ui/forms/FieldInput";
+import { newsletterSubscribeSchema } from "../../admin/schemas/small-forms";
+import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary";
 const CLS_ERROR_TEXT = "mt-3 text-[length:var(--appkit-text-sm)] text-error";
 export function NewsletterBanner({ onSubscribe, eyebrow = "STAY CONNECTED", heading = "Join Our Newsletter", subheading = "Get exclusive offers, new arrivals and more.", placeholder = "Enter your email", ctaLabel = "Subscribe", successMessage = "You're in! Check your inbox.", errorMessage = "Something went wrong. Please try again.", }) {
     const [email, setEmail] = useState("");
@@ -31,5 +33,5 @@ export function NewsletterBanner({ onSubscribe, eyebrow = "STAY CONNECTED", head
             setLoading(false);
         }
     }
-    return (_jsxs(DynamicBgDiv, { background: "var(--newsletter-bg, linear-gradient(135deg, var(--appkit-color-primary) 0%, var(--appkit-color-secondary) 100%))", className: "py-[var(--appkit-space-24)] relative overflow-hidden", children: [_jsx(Div, { className: "pointer-events-none absolute -top-20 -right-20 h-60 w-60 border border-white/[0.06]", rounded: "full" }), _jsx(Div, { className: "pointer-events-none absolute -bottom-16 -left-16 h-48 w-48 border border-dashed border-white/[0.08]", rounded: "full" }), _jsxs(Div, { className: "relative mx-auto max-w-2xl text-left sm:px-[1.5rem]", padding: "x-md", children: [_jsx(Span, { color: "inverse", size: "xs", weight: "semibold", className: "mb-4 inline-flex border border-white/20 tracking-widest /70", rounded: "full", padding: "pill-md", transform: "uppercase", children: eyebrow }), _jsx(Heading, { color: "inverse", level: 2, smSize: "4xl", size: "3xl", weight: "bold", children: heading }), _jsx(Text, { color: "inverse", className: "mt-4 /60", children: subheading }), success ? (_jsx(Text, { paddingY: "md", color: "inverse", className: "mt-8 border border-white/20 bg-[rgba(255,255,255,0.1)]", paddingX: "x-lg", size: "sm", weight: "semibold", rounded: "xl", children: successMessage })) : (_jsxs(Form, { onSubmit: handleSubmit, className: "mt-8 flex gap-[0.75rem]", children: [_jsx(FieldInput, { name: "email", type: "email", value: email, onChange: setEmail, placeholder: placeholder, required: true, className: "flex-1" }), _jsx(Button, { rounded: "xl", type: "submit", disabled: loading, variant: "primary", paddingX: "lg", textSize: "sm", className: "shrink-0 py-[0.75rem] font-[700] transition-opacity disabled:opacity-60 bg-[var(--color-yellow)] text-black", children: loading ? "…" : ctaLabel })] })), error && (_jsx(Text, { className: CLS_ERROR_TEXT, children: errorMessage })), _jsx(Text, { color: "inverse", className: "mt-4 /40", size: "xs", children: "No spam, ever. Unsubscribe anytime." })] })] }));
+    return (_jsxs(DynamicBgDiv, { background: "var(--newsletter-bg, linear-gradient(135deg, var(--appkit-color-primary) 0%, var(--appkit-color-secondary) 100%))", className: "py-[var(--appkit-space-24)] relative overflow-hidden", children: [_jsx(Div, { className: "pointer-events-none absolute -top-20 -right-20 h-60 w-60 border border-white/[0.06]", rounded: "full" }), _jsx(Div, { className: "pointer-events-none absolute -bottom-16 -left-16 h-48 w-48 border border-dashed border-white/[0.08]", rounded: "full" }), _jsxs(Div, { className: "relative mx-auto max-w-2xl text-left sm:px-[1.5rem]", padding: "x-md", children: [_jsx(Span, { color: "inverse", size: "xs", weight: "semibold", className: "mb-4 inline-flex border border-white/20 tracking-widest /70", rounded: "full", padding: "pill-md", transform: "uppercase", children: eyebrow }), _jsx(Heading, { color: "inverse", level: 2, smSize: "4xl", size: "3xl", weight: "bold", children: heading }), _jsx(Text, { color: "inverse", className: "mt-4 /60", children: subheading }), success ? (_jsx(Text, { paddingY: "md", color: "inverse", className: "mt-8 border border-white/20 bg-[rgba(255,255,255,0.1)]", paddingX: "x-lg", size: "sm", weight: "semibold", rounded: "xl", children: successMessage })) : (_jsxs(Form, { schema: newsletterSubscribeSchema, onSubmit: handleSubmit, className: "mt-8 flex gap-[0.75rem]", children: [_jsx(FormErrorSummary, {}), _jsx(FieldInput, { name: "email", type: "email", value: email, onChange: setEmail, placeholder: placeholder, required: true, className: "flex-1" }), _jsx(Button, { rounded: "xl", type: "submit", disabled: loading, variant: "primary", paddingX: "lg", textSize: "sm", className: "shrink-0 py-[0.75rem] font-[700] transition-opacity disabled:opacity-60 bg-[var(--color-yellow)] text-black", children: loading ? "…" : ctaLabel })] })), error && (_jsx(Text, { className: CLS_ERROR_TEXT, children: errorMessage })), _jsx(Text, { color: "inverse", className: "mt-4 /40", size: "xs", children: "No spam, ever. Unsubscribe anytime." })] })] }));
 }

package/dist/features/orders/schemas/buyer-forms.d.ts

@@ -0,0 +1,46 @@
+import { z } from "zod";
+/**
+ * Cancelling an order.
+ *
+ * A reason floor of 5 characters, because this text is what the seller reads
+ * to decide whether to restock, refund early or dispute — and "x" tells them
+ * nothing. Deliberately low: the buyer is cancelling, not writing an essay,
+ * and a high floor would push them to type filler.
+ */
+export declare const orderCancelSchema: z.ZodObject<{
+    reason: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    reason: string;
+}, {
+    reason: string;
+}>;
+export type OrderCancelValues = z.infer<typeof orderCancelSchema>;
+/**
+ * Uploading proof of a manual (cash / UPI / EMI) payment.
+ *
+ * ## Every field here is evidence
+ *
+ * An admin verifies or rejects on this, and a rejection carries a 7-day ban
+ * cascade — so the cost of a sloppy submission is real in both directions.
+ *
+ * `buyerMarkedPaid` and `buyerFraudAgreementAccepted` are `z.literal(true)`
+ * rather than `z.boolean()`: an unchecked declaration is not a submission with
+ * a `false` in it, it is a form that must not send.
+ */
+export declare const paymentProofSchema: z.ZodObject<{
+    transactionId: z.ZodString;
+    buyerReportedUpiId: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+    buyerMarkedPaid: z.ZodLiteral<true>;
+    buyerFraudAgreementAccepted: z.ZodLiteral<true>;
+}, "strip", z.ZodTypeAny, {
+    transactionId: string;
+    buyerMarkedPaid: true;
+    buyerFraudAgreementAccepted: true;
+    buyerReportedUpiId?: string | undefined;
+}, {
+    transactionId: string;
+    buyerMarkedPaid: true;
+    buyerFraudAgreementAccepted: true;
+    buyerReportedUpiId?: string | undefined;
+}>;
+export type PaymentProofValues = z.infer<typeof paymentProofSchema>;

package/dist/features/orders/schemas/buyer-forms.js

@@ -0,0 +1,81 @@
+/*
+ * WHY: Two buyer-facing order forms rendered `<Form>` with no schema.
+ *
+ *      The manual-payment one is the consequential case. It carries the
+ *      buyer's own claim that they have paid — a UTR, the UPI ID they sent to,
+ *      and a fraud declaration — and an admin decides on that evidence whether
+ *      to release goods. `transactionId` was free text with no floor, so a
+ *      single character satisfied it and reached the review queue looking like
+ *      a reference.
+ *
+ * WHAT: The two schemas, plus a shared `cancellationReason`.
+ *
+ * EXPORTS:
+ *   orderCancelSchema, paymentProofSchema, and their inferred value types
+ *
+ * @tag domain:orders
+ * @tag layer:schema
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:user/orders/[id]/cancel,user/orders/[id]/payment
+ * @tag sideEffects:none
+ */
+import { z } from "zod";
+import { annotate } from "../../shell/field-ui-meta";
+/**
+ * Cancelling an order.
+ *
+ * A reason floor of 5 characters, because this text is what the seller reads
+ * to decide whether to restock, refund early or dispute — and "x" tells them
+ * nothing. Deliberately low: the buyer is cancelling, not writing an essay,
+ * and a high floor would push them to type filler.
+ */
+export const orderCancelSchema = z.object({
+    reason: annotate(z
+        .string()
+        .trim()
+        .min(5, "Give a short reason — the seller sees this.")
+        .max(500, "Keep it under 500 characters."), {
+        section: "cancel",
+        sectionLabel: "Why are you cancelling?",
+        sectionRequired: true,
+        quick: true,
+        order: 1,
+        row: "full",
+        kind: "textarea",
+    }),
+});
+/**
+ * Uploading proof of a manual (cash / UPI / EMI) payment.
+ *
+ * ## Every field here is evidence
+ *
+ * An admin verifies or rejects on this, and a rejection carries a 7-day ban
+ * cascade — so the cost of a sloppy submission is real in both directions.
+ *
+ * `buyerMarkedPaid` and `buyerFraudAgreementAccepted` are `z.literal(true)`
+ * rather than `z.boolean()`: an unchecked declaration is not a submission with
+ * a `false` in it, it is a form that must not send.
+ */
+export const paymentProofSchema = z.object({
+    transactionId: annotate(z
+        .string()
+        .trim()
+        .min(4, "Enter the UTR or reference number from your payment app.")
+        .max(120, "Keep the reference under 120 characters."), { section: "proof", sectionLabel: "Your payment", sectionRequired: true, quick: true, order: 1, row: "pair" }),
+    /*
+     * The UPI ID the buyer actually sent to. Compared against the store's
+     * displayed one so a mismatch is flagged to the admin — which is why the
+     * shape matters, not just its presence.
+     */
+    buyerReportedUpiId: annotate(z
+        .string()
+        .trim()
+        .regex(/^[\w.\-_]{2,256}@[a-zA-Z]{2,64}$/, "Enter the UPI ID you paid to, e.g. name@bank.")
+        .optional()
+        .or(z.literal("")), { section: "proof", order: 2, row: "pair" }),
+    buyerMarkedPaid: annotate(z.literal(true, { errorMap: () => ({ message: "Confirm that you have sent the payment." }) }), { section: "declare", sectionLabel: "Declaration", sectionRequired: true, order: 1, row: "full" }),
+    buyerFraudAgreementAccepted: annotate(z.literal(true, {
+        errorMap: () => ({ message: "You must accept the fraud policy to submit proof." }),
+    }), { section: "declare", order: 2, row: "full" }),
+});

package/dist/features/products/components/MakeOfferButton.js

@@ -75,7 +75,7 @@ export function MakeOfferButton({ productId, listedPrice, currency, minOfferPerc
     if (state === "pending") {
         return (_jsxs(Div, { className: `${CLS_PENDING_BOX} ${className}`, children: [_jsx(Span, { size: "lg", children: "\u23F3" }), _jsx(Text, { className: CLS_PENDING_TITLE, children: "Offer Pending" }), _jsx(Text, { className: CLS_PENDING_BODY, children: "You already have an offer on this item. Check My Offers for updates." })] }));
     }
-    return (_jsxs(_Fragment, { children: [_jsx(LoginRequiredModal, { isOpen: showLoginModal, onClose: () => setShowLoginModal(false), message: "You need to be signed in to make an offer. Please log in or create an account to continue." }), _jsx(Button, { variant: "ghost", size: "md", border: "strong", className: `w-full ${className}`, onClick: () => setState("open"), children: "Make Offer" }), _jsx(Modal, { isOpen: state === "open", onClose: () => setState("idle"), size: "md", title: "Make an offer", children: _jsx(Form, { onSubmit: (e) => e.preventDefault(), children: ({ setFieldError, clearErrors }) => (_jsxs(Stack, { gap: "md", children: [_jsxs(Text, { size: "xs", color: "muted", children: ["Listed at ", fmt(listedPrice), " \u00B7 Minimum offer: ", fmt(minOffer)] }), _jsx(FieldInput, { name: "offerAmount", type: "number", label: "Your offer amount", required: true, value: offerAmount, onChange: (value) => {
+    return (_jsxs(_Fragment, { children: [_jsx(LoginRequiredModal, { isOpen: showLoginModal, onClose: () => setShowLoginModal(false), message: "You need to be signed in to make an offer. Please log in or create an account to continue." }), _jsx(Button, { variant: "ghost", size: "md", border: "strong", className: `w-full ${className}`, onClick: () => setState("open"), children: "Make Offer" }), _jsx(Modal, { isOpen: state === "open", onClose: () => setState("idle"), size: "md", title: "Make an offer", children: _jsx(Form, { schema: schema, onSubmit: (e) => e.preventDefault(), children: ({ setFieldError, clearErrors }) => (_jsxs(Stack, { gap: "md", children: [_jsxs(Text, { size: "xs", color: "muted", children: ["Listed at ", fmt(listedPrice), " \u00B7 Minimum offer: ", fmt(minOffer)] }), _jsx(FieldInput, { name: "offerAmount", type: "number", label: "Your offer amount", required: true, value: offerAmount, onChange: (value) => {
                                     setOfferAmount(value);
                                     clearErrors();
                                 }, min: minOffer, max: listedPrice - 1, step: 1, "aria-label": "Offer amount" }), _jsxs(Text, { size: "xs", color: "faint", children: ["Must be between ", fmt(minOffer), " and ", fmt(listedPrice - 1)] }), _jsx(FieldInput, { name: "buyerNote", type: "text", label: "Note to seller (optional)", value: buyerNote, onChange: setBuyerNote, placeholder: "E.g. Bundle deal, long-time fan\u2026", maxLength: 300, "aria-label": "Note to seller" }), _jsx(Text, { size: "xs", color: "muted", children: "The seller will accept, decline, or suggest a counter price." }), _jsx(FormErrorSummary, {}), _jsxs(Stack, { gap: "xs", children: [_jsx(Button, { action: ACTIONS.PRODUCT["make-offer"], variant: "primary", size: "sm", type: "button", isLoading: isPending, disabled: isPending, onClick: () => submit(setFieldError, clearErrors), children: isPending ? "Sending…" : `Send offer of ${fmt(Number(offerAmount) || 0)}` }), _jsx(Button, { variant: "ghost", size: "sm", type: "button", onClick: () => setState("idle"), disabled: isPending, children: "Cancel" })] })] })) }) })] }));

package/dist/features/scams/schemas/report-form.d.ts

@@ -0,0 +1,63 @@
+import { z } from "zod";
+export declare const scamReportFormSchema: z.ZodEffects<z.ZodObject<{
+    displayName: z.ZodString;
+    phones: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    upiIds: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    emails: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    scamType: z.ZodString;
+    scamPlatform: z.ZodOptional<z.ZodString>;
+    amountLost: z.ZodOptional<z.ZodNumber>;
+    itemInvolved: z.ZodOptional<z.ZodString>;
+    description: z.ZodString;
+    reportedByAnon: z.ZodOptional<z.ZodBoolean>;
+    agreed: z.ZodLiteral<true>;
+}, "strip", z.ZodTypeAny, {
+    displayName: string;
+    description: string;
+    scamType: string;
+    agreed: true;
+    reportedByAnon?: boolean | undefined;
+    scamPlatform?: string | undefined;
+    amountLost?: number | undefined;
+    itemInvolved?: string | undefined;
+    phones?: string[] | undefined;
+    upiIds?: string[] | undefined;
+    emails?: string[] | undefined;
+}, {
+    displayName: string;
+    description: string;
+    scamType: string;
+    agreed: true;
+    reportedByAnon?: boolean | undefined;
+    scamPlatform?: string | undefined;
+    amountLost?: number | undefined;
+    itemInvolved?: string | undefined;
+    phones?: string[] | undefined;
+    upiIds?: string[] | undefined;
+    emails?: string[] | undefined;
+}>, {
+    displayName: string;
+    description: string;
+    scamType: string;
+    agreed: true;
+    reportedByAnon?: boolean | undefined;
+    scamPlatform?: string | undefined;
+    amountLost?: number | undefined;
+    itemInvolved?: string | undefined;
+    phones?: string[] | undefined;
+    upiIds?: string[] | undefined;
+    emails?: string[] | undefined;
+}, {
+    displayName: string;
+    description: string;
+    scamType: string;
+    agreed: true;
+    reportedByAnon?: boolean | undefined;
+    scamPlatform?: string | undefined;
+    amountLost?: number | undefined;
+    itemInvolved?: string | undefined;
+    phones?: string[] | undefined;
+    upiIds?: string[] | undefined;
+    emails?: string[] | undefined;
+}>;
+export type ScamReportFormValues = z.infer<typeof scamReportFormSchema>;

package/dist/features/scams/schemas/report-form.js

@@ -0,0 +1,88 @@
+/*
+ * WHY: The public scam-report form (`/scams/report`) rendered `<Form>` with no
+ *      schema. It is the highest-consequence unvalidated form in the app: a
+ *      submission names a real person or business by phone number, UPI ID or
+ *      email and asks the platform to publish an accusation against them.
+ *
+ *      Everything was free text. `amountLost` in particular was a string with
+ *      no bound, and it is displayed on the public scammer profile.
+ *
+ * WHAT: The submit contract.
+ *
+ * ## At least one identifier is required, and no single one is
+ *
+ * A report naming nobody is unactionable, but demanding a phone number would
+ * reject a report about an email-only scammer. So the requirement is on the
+ * SET, checked in a `superRefine` — the same shape the payout-method schema
+ * uses for its per-type bank rules.
+ *
+ * ## `agreed` is `z.literal(true)`
+ *
+ * An unticked declaration is not a submission carrying `false`; it is a form
+ * that must not send. The user is asserting the accusation is truthful, and
+ * that assertion is what makes publishing it defensible.
+ *
+ * EXPORTS: scamReportFormSchema, type ScamReportFormValues
+ *
+ * @tag domain:scams
+ * @tag layer:schema
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:scams/report page
+ * @tag sideEffects:none
+ */
+import { z } from "zod";
+import { annotate } from "../../shell/field-ui-meta";
+const UPI_VPA_RE = /^[\w.\-_]{2,256}@[a-zA-Z]{2,64}$/;
+const PHONE_RE = /^(\+?91[-\s]?)?[6-9]\d{9}$/;
+export const scamReportFormSchema = z
+    .object({
+    displayName: annotate(z.string().trim().min(2, "Give the name or handle they used.").max(160), { section: "who", sectionLabel: "Who", sectionRequired: true, quick: true, order: 1, row: "full" }),
+    // Each entry is shape-checked; the SET is checked in the superRefine.
+    phones: annotate(z.array(z.string().trim().regex(PHONE_RE, "Enter a 10-digit Indian mobile number.")).max(10).optional(), { section: "who", order: 2, row: "full", kind: "list" }),
+    upiIds: annotate(z.array(z.string().trim().regex(UPI_VPA_RE, "Enter a valid UPI ID, e.g. name@bank.")).max(10).optional(), { section: "who", order: 3, row: "full", kind: "list" }),
+    emails: annotate(z.array(z.string().trim().toLowerCase().email("Enter a valid email address.")).max(10).optional(), { section: "who", order: 4, row: "full", kind: "list" }),
+    scamType: annotate(z.string().trim().min(1, "Choose what kind of scam this was."), {
+        section: "what", sectionLabel: "What happened", sectionRequired: true, quick: true, order: 1, row: "pair",
+    }),
+    scamPlatform: annotate(z.string().trim().max(120).optional(), {
+        section: "what", order: 2, row: "pair",
+    }),
+    /*
+     * Coerced and bounded. It arrives from a text input and is rendered on the
+     * public profile, so an unbounded string could publish "one MILLION crore"
+     * as a loss figure. Empty is allowed — plenty of reports are about an
+     * attempt that cost nothing.
+     */
+    amountLost: annotate(z.coerce
+        .number({ invalid_type_error: "Enter the amount as a number." })
+        .min(0, "An amount cannot be negative.")
+        .max(100000000, "That looks like a typo.")
+        .optional(), { section: "what", order: 3, row: "pair", kind: "number" }),
+    itemInvolved: annotate(z.string().trim().max(200).optional(), {
+        section: "what", order: 4, row: "pair",
+    }),
+    description: annotate(z
+        .string()
+        .trim()
+        .min(30, "Describe what happened in at least 30 characters — this is the evidence.")
+        .max(5000, "Keep the description under 5000 characters."), { section: "what", order: 5, row: "full", kind: "textarea" }),
+    reportedByAnon: annotate(z.boolean().optional(), {
+        section: "declare", sectionLabel: "Declaration", order: 1, row: "quarter",
+    }),
+    agreed: annotate(z.literal(true, {
+        errorMap: () => ({ message: "You must confirm this report is truthful before submitting." }),
+    }), { section: "declare", order: 2, row: "full" }),
+})
+    .superRefine((v, ctx) => {
+    const count = (v.phones?.length ?? 0) + (v.upiIds?.length ?? 0) + (v.emails?.length ?? 0);
+    if (count === 0) {
+        // Reported on `phones` so the message has a field to land on; the text
+        // names all three, because any one of them satisfies the rule.
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["phones"],
+            message: "Add at least one phone number, UPI ID or email — a report with no identifier cannot be acted on.",
+        });
+    }
+});

package/dist/features/store-extensions/schemas/sublisting-category-form.d.ts

@@ -0,0 +1,15 @@
+import { z } from "zod";
+export declare const sublistingCategoryFormSchema: z.ZodObject<{
+    name: z.ZodString;
+    itemCode: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    description?: string | undefined;
+    itemCode?: string | undefined;
+}, {
+    name: string;
+    description?: string | undefined;
+    itemCode?: string | undefined;
+}>;
+export type SublistingCategoryFormValues = z.infer<typeof sublistingCategoryFormSchema>;