@mohasinac/appkit 4.17.0 → 4.18.0

package/dist/client.d.ts

@@ -436,3 +436,8 @@ export { PRODUCT_FIELDS, PRODUCT_STATUS_TRANSITIONS, ORDER_FIELDS, REVIEW_FIELDS
 export { CART_LANE, CART_LANE_PRIORITY, CART_LANE_LABELS, laneOf, activeLane, laneItems, laneCounts, isLaneCheckoutable, laneBlockReason, isLockedLane, canAddNewItems, type CartLane, type LaneAssignable, } from "./_internal/shared/checkout/lanes";
 export { newsletterSubscribeSchema, quickCreateTaxonomySchema, payoutMarkPaidSchema, } from "./features/admin/schemas/small-forms";
 export { raffleEntrySchema } from "./features/contact/schemas/inquiry-forms";
+export { orderCancelSchema, paymentProofSchema, } from "./features/orders/schemas/buyer-forms";
+export { scamReportFormSchema } from "./features/scams/schemas/report-form";
+export { sublistingCategoryFormSchema } from "./features/store-extensions/schemas/sublisting-category-form";
+export { adminAddressFormSchema, adminStoreUpdateSchema, announcementBarSchema, } from "./features/admin/schemas/admin-editor-forms";
+export { adminOrderUpdateSchema, employeeInviteSchema, hardBanReasonSchema, featureFlagsUpdateSchema, adminAdFormSchema, } from "./features/admin/schemas/admin-ops-forms";

package/dist/client.js

@@ -422,3 +422,8 @@ export { PRODUCT_FIELDS, PRODUCT_STATUS_TRANSITIONS, ORDER_FIELDS, REVIEW_FIELDS
 export { CART_LANE, CART_LANE_PRIORITY, CART_LANE_LABELS, laneOf, activeLane, laneItems, laneCounts, isLaneCheckoutable, laneBlockReason, isLockedLane, canAddNewItems, } from "./_internal/shared/checkout/lanes";
 export { newsletterSubscribeSchema, quickCreateTaxonomySchema, payoutMarkPaidSchema, } from "./features/admin/schemas/small-forms";
 export { raffleEntrySchema } from "./features/contact/schemas/inquiry-forms";
+export { orderCancelSchema, paymentProofSchema, } from "./features/orders/schemas/buyer-forms";
+export { scamReportFormSchema } from "./features/scams/schemas/report-form";
+export { sublistingCategoryFormSchema } from "./features/store-extensions/schemas/sublisting-category-form";
+export { adminAddressFormSchema, adminStoreUpdateSchema, announcementBarSchema, } from "./features/admin/schemas/admin-editor-forms";
+export { adminOrderUpdateSchema, employeeInviteSchema, hardBanReasonSchema, featureFlagsUpdateSchema, adminAdFormSchema, } from "./features/admin/schemas/admin-ops-forms";

package/dist/features/admin/components/AdminAdEditorView.js

@@ -7,6 +7,8 @@ import { useQuery } from "@tanstack/react-query";
 import { Alert, Button, Checkbox, Div, Form, FormActions, Input, Select, Span, Stack, StackedViewShell, Text, Toggle, useToast } from "../../../ui";
 import { apiClient } from "../../../http";
 import { ADMIN_ENDPOINTS } from "../../../constants/api-endpoints";
+import { adminAdFormSchema } from "../schemas/admin-ops-forms";
+import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary";
 const __P = {
     p3: "p-[var(--appkit-space-3)]",
 };
@@ -223,14 +225,14 @@ export function AdminAdEditorView({ adId, endpointBase = ADMIN_ENDPOINTS.ADS, la
     return (_jsx(StackedViewShell, { portal: "admin", ...rest, title: labels.title ?? (adId ? "Edit Ad" : "Create Ad"), sections: [
             metaQuery.error ? (_jsx(Alert, { variant: "error", title: "Could not load ad metadata", children: metaQuery.error instanceof Error ? metaQuery.error.message : "Unknown error" })) : null,
             adQuery.error ? (_jsx(Alert, { variant: "error", title: "Could not load ad", children: adQuery.error instanceof Error ? adQuery.error.message : "Unknown error" })) : null,
-            _jsxs(Form, { onSubmit: (event) => {
+            _jsxs(Form, { schema: adminAdFormSchema, onSubmit: (event) => {
                     event.preventDefault();
                     if (blockedByPublishValidation) {
                         showToast("Cannot save in publish-ready status until validation issues are fixed.", "warning");
                         return;
                     }
                     saveMutation.mutate();
-                }, spacing: "md", children: [_jsx(Input, { label: "Ad name", value: name, onChange: (event) => setName(event.target.value), placeholder: "Summer Campaign" }), _jsxs(Div, { layout: "grid", gap: "3", className: "grid-cols-1 md:grid-cols-3", children: [_jsx(Select, { label: "Provider", value: provider, options: [
+                }, spacing: "md", children: [_jsx(FormErrorSummary, {}), _jsx(Input, { label: "Ad name", value: name, onChange: (event) => setName(event.target.value), placeholder: "Summer Campaign" }), _jsxs(Div, { layout: "grid", gap: "3", className: "grid-cols-1 md:grid-cols-3", children: [_jsx(Select, { label: "Provider", value: provider, options: [
                                     { label: "Manual", value: "manual" },
                                     { label: "AdSense", value: "adsense" },
                                     { label: "Third Party", value: "thirdParty" },

package/dist/features/admin/components/AdminAddressEditorView.js

@@ -9,6 +9,8 @@ import { apiClient } from "../../../http";
 import { ADMIN_ENDPOINTS } from "../../../constants/api-endpoints";
 import { ACTIONS } from "../../../_internal/shared/actions/action-registry";
 import { INDIAN_STATES } from "../../account/constants/addresses";
+import { adminAddressFormSchema } from "../schemas/admin-editor-forms";
+import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary";
 const STATE_OPTIONS = INDIAN_STATES.map((s) => ({ value: s, label: s }));
 // ── Section heading helper ─────────────────────────────────────────────────────
 function SectionHeading({ children }) {
@@ -105,10 +107,10 @@ export function AdminAddressEditorView({ addressId, onSaved, onDeleted, ...rest
     // ── Action sidebar (desktop) ───────────────────────────────────────────────
     const actionSidebar = (_jsxs(Card, { variant: "outlined", padding: "md", spacing: "sm", children: [_jsx(Button, { type: "submit", form: "address-editor-form", className: "w-full", isLoading: isSubmitting, disabled: !canSave || isSubmitting, children: isEdit ? ACTIONS.ADMIN["save-changes"].label : "Create address" }), isEdit && (_jsx(Button, { type: "button", variant: "danger", className: "w-full", isLoading: deleteMutation.isPending, onClick: () => setDeleteOpen(true), children: "Delete address" }))] }));
     // ── Form sections ──────────────────────────────────────────────────────────
-    const formContent = (_jsxs(Form, { id: "address-editor-form", onSubmit: (e) => {
+    const formContent = (_jsxs(Form, { schema: adminAddressFormSchema, id: "address-editor-form", onSubmit: (e) => {
             e.preventDefault();
             saveMutation.mutate();
-        }, spacing: "lg", children: [_jsxs(Card, { variant: "outlined", padding: "lg", children: [_jsx(SectionHeading, { children: "Ownership" }), _jsxs(Stack, { gap: "md", children: [_jsx(Row, { gap: "lg", children: ["user", "store"].map((type) => (_jsxs("label", { className: "flex cursor-pointer items-center gap-[var(--appkit-space-2)]", children: [_jsx(Checkbox, { bare: true, type: "radio", name: "ownerType", value: type, checked: form.ownerType === type, onChange: () => {
+        }, spacing: "lg", children: [_jsx(FormErrorSummary, {}), _jsxs(Card, { variant: "outlined", padding: "lg", children: [_jsx(SectionHeading, { children: "Ownership" }), _jsxs(Stack, { gap: "md", children: [_jsx(Row, { gap: "lg", children: ["user", "store"].map((type) => (_jsxs("label", { className: "flex cursor-pointer items-center gap-[var(--appkit-space-2)]", children: [_jsx(Checkbox, { bare: true, type: "radio", name: "ownerType", value: type, checked: form.ownerType === type, onChange: () => {
                                                 set("ownerType", type);
                                                 set("ownerId", "");
                                             }, className: "accent-[var(--appkit-color-primary)]" }), _jsx(Span, { size: "sm", className: "text-[var(--appkit-color-text)]", transform: "capitalize", children: type })] }, type))) }), _jsx(Input, { label: form.ownerType === "user" ? "User ID" : "Store ID (slug)", value: form.ownerId, onChange: (e) => set("ownerId", e.target.value), required: true, placeholder: form.ownerType === "user" ? "user-mohsin-c" : "store-pokemon-palace", helperText: form.ownerType === "user"

package/dist/features/admin/components/AdminEmployeeEditorView.js

@@ -7,6 +7,8 @@ import { Button, Checkbox, ConfirmDeleteModal, Details, Div, Form, FormActions,
 import { apiClient } from "../../../http";
 import { ADMIN_ENDPOINTS } from "../../../constants/api-endpoints";
 import { PERMISSION_GROUPS, PERMISSION_DOMAINS, getPermissionsForDomain, formatPermLabel, } from "../../auth/permissions/constants";
+import { employeeInviteSchema } from "../schemas/admin-ops-forms";
+import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary";
 const __O = {
     yAuto: "overflow-y-auto",
 };
@@ -130,5 +132,5 @@ export function AdminEmployeeEditorView({ open, onClose, mode, userId, displayNa
         else
             updateMutation.mutate();
     };
-    return (_jsxs(_Fragment, { children: [_jsx(SideDrawer, { isOpen: open, onClose: onClose, title: mode === "invite" ? "Invite Employee" : `Edit — ${displayName ?? "Employee"}`, children: _jsxs(Form, { onSubmit: handleSubmit, spacing: "lg", padding: "md", children: [mode === "invite" && (_jsxs(Stack, { gap: "xs", className: "", children: [_jsx(Label, { size: "sm", weight: "medium", color: "primary", children: "Email address" }), _jsx(Input, { type: "email", required: true, value: email, onChange: (e) => setEmail(e.target.value), placeholder: "employee@example.com" })] })), _jsxs(Stack, { gap: "xs", className: "", children: [_jsx(Label, { size: "sm", weight: "medium", color: "primary", children: "Permission group" }), _jsx(Select, { value: group, onChange: (e) => applyGroupPreset(e.target.value), options: GROUP_OPTIONS }), _jsx(Text, { size: "xs", color: "muted", children: "Selecting a group auto-fills the permissions below. You can still customise individual permissions." })] }), _jsx(PermissionDomainsPanel, { permissions: permissions, togglePerm: togglePerm }), _jsxs(FormActions, { children: [_jsx(Button, { type: "submit", variant: "primary", disabled: isBusy, isLoading: isBusy, children: mode === "invite" ? "Send Invite" : "Save" }), mode === "edit" && userId && (_jsx(Button, { type: "button", variant: "danger", disabled: isBusy, onClick: () => setRevokeOpen(true), children: "Revoke Access" }))] })] }) }), mode === "edit" && (_jsx(ConfirmDeleteModal, { isOpen: revokeOpen, onClose: () => setRevokeOpen(false), onConfirm: () => revokeMutation.mutate(), isDeleting: revokeMutation.isPending, title: "Revoke employee access?", message: `${displayName ?? "This employee"} will lose admin panel access immediately. Their user account remains active — only their role is reset to user.`, confirmText: "Revoke Access", variant: "danger" }))] }));
+    return (_jsxs(_Fragment, { children: [_jsx(SideDrawer, { isOpen: open, onClose: onClose, title: mode === "invite" ? "Invite Employee" : `Edit — ${displayName ?? "Employee"}`, children: _jsxs(Form, { schema: employeeInviteSchema, onSubmit: handleSubmit, spacing: "lg", padding: "md", children: [_jsx(FormErrorSummary, {}), mode === "invite" && (_jsxs(Stack, { gap: "xs", className: "", children: [_jsx(Label, { size: "sm", weight: "medium", color: "primary", children: "Email address" }), _jsx(Input, { type: "email", required: true, value: email, onChange: (e) => setEmail(e.target.value), placeholder: "employee@example.com" })] })), _jsxs(Stack, { gap: "xs", className: "", children: [_jsx(Label, { size: "sm", weight: "medium", color: "primary", children: "Permission group" }), _jsx(Select, { value: group, onChange: (e) => applyGroupPreset(e.target.value), options: GROUP_OPTIONS }), _jsx(Text, { size: "xs", color: "muted", children: "Selecting a group auto-fills the permissions below. You can still customise individual permissions." })] }), _jsx(PermissionDomainsPanel, { permissions: permissions, togglePerm: togglePerm }), _jsxs(FormActions, { children: [_jsx(Button, { type: "submit", variant: "primary", disabled: isBusy, isLoading: isBusy, children: mode === "invite" ? "Send Invite" : "Save" }), mode === "edit" && userId && (_jsx(Button, { type: "button", variant: "danger", disabled: isBusy, onClick: () => setRevokeOpen(true), children: "Revoke Access" }))] })] }) }), mode === "edit" && (_jsx(ConfirmDeleteModal, { isOpen: revokeOpen, onClose: () => setRevokeOpen(false), onConfirm: () => revokeMutation.mutate(), isDeleting: revokeMutation.isPending, title: "Revoke employee access?", message: `${displayName ?? "This employee"} will lose admin panel access immediately. Their user account remains active — only their role is reset to user.`, confirmText: "Revoke Access", variant: "danger" }))] }));
 }

package/dist/features/admin/components/AdminFeatureFlagsView.js

@@ -6,6 +6,8 @@ import { useQuery, useQueryClient } from "@tanstack/react-query";
 import { Alert, Button, Div, Form, FormActions, Input, Row, Stack, StackedViewShell, Text, Toggle, useToast } from "../../../ui";
 import { ADMIN_ENDPOINTS } from "../../../constants/api-endpoints";
 import { apiClient } from "../../../http";
+import { featureFlagsUpdateSchema } from "../schemas/admin-ops-forms";
+import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary";
 const __O = {
     hidden: "overflow-hidden",
 };
@@ -96,10 +98,10 @@ export function AdminFeatureFlagsView({ labels = {}, renderFlags, ...rest }) {
             showToast("Failed to save feature flags.", "error");
         },
     });
-    const defaultFlags = () => (_jsxs(Form, { onSubmit: (event) => {
+    const defaultFlags = () => (_jsxs(Form, { schema: featureFlagsUpdateSchema, onSubmit: (event) => {
             event.preventDefault();
             saveFlags.mutate();
-        }, spacing: "md", children: [_jsx(AccordionSection, { title: "Platform Features", children: PLATFORM_FLAGS.map(({ key, label, desc }) => (_jsx(FlagRow, { label: label, desc: desc, checked: getPlatformFlag(key), onChange: (val) => setPlatformFlag(key, val), rollout: rollouts[key], onRolloutChange: (val) => setRollouts((prev) => ({ ...prev, [key]: val })), showRollout: true }, key))) }), _jsx(AccordionSection, { title: "Listing Types", children: LISTING_TYPE_FLAGS.map(({ key, label, desc }) => (_jsx(FlagRow, { label: label, desc: desc, checked: getListingTypeFlag(key), onChange: (val) => setListingTypeFlag(key, val), showRollout: false }, key))) }), _jsx(AccordionSection, { title: "Category Types", children: CATEGORY_TYPE_FLAGS.map(({ key, label, desc }) => (_jsx(FlagRow, { label: label, desc: desc, checked: getCategoryTypeFlag(key), onChange: (val) => setCategoryTypeFlag(key, val), showRollout: false }, key))) }), _jsxs(FormActions, { align: "right", children: [_jsx(Button, { type: "button", variant: "secondary", onClick: () => {
+        }, spacing: "md", children: [_jsx(FormErrorSummary, {}), _jsx(AccordionSection, { title: "Platform Features", children: PLATFORM_FLAGS.map(({ key, label, desc }) => (_jsx(FlagRow, { label: label, desc: desc, checked: getPlatformFlag(key), onChange: (val) => setPlatformFlag(key, val), rollout: rollouts[key], onRolloutChange: (val) => setRollouts((prev) => ({ ...prev, [key]: val })), showRollout: true }, key))) }), _jsx(AccordionSection, { title: "Listing Types", children: LISTING_TYPE_FLAGS.map(({ key, label, desc }) => (_jsx(FlagRow, { label: label, desc: desc, checked: getListingTypeFlag(key), onChange: (val) => setListingTypeFlag(key, val), showRollout: false }, key))) }), _jsx(AccordionSection, { title: "Category Types", children: CATEGORY_TYPE_FLAGS.map(({ key, label, desc }) => (_jsx(FlagRow, { label: label, desc: desc, checked: getCategoryTypeFlag(key), onChange: (val) => setCategoryTypeFlag(key, val), showRollout: false }, key))) }), _jsxs(FormActions, { align: "right", children: [_jsx(Button, { type: "button", variant: "secondary", onClick: () => {
                             setFlags(data?.flags ?? {});
                             setRollouts(data?.rollouts ?? {});
                         }, disabled: saveFlags.isPending, children: "Reset" }), _jsx(Button, { type: "submit", isLoading: saveFlags.isPending, disabled: saveFlags.isPending, children: "Save All Flags" })] })] }));

package/dist/features/admin/components/AdminOrderEditorView.js

@@ -12,6 +12,8 @@ import { apiClient } from "../../../http";
 import { ADMIN_ENDPOINTS } from "../../../constants/api-endpoints";
 import { ACTIONS } from "../../../_internal/shared/actions/action-registry";
 import { toCurrency } from "../hooks/useAdminListingData";
+import { adminOrderUpdateSchema } from "../schemas/admin-ops-forms";
+import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary";
 const STATUS_OPTIONS = [
     { label: "Pending", value: "pending" },
     { label: "Processing", value: "processing" },
@@ -146,8 +148,8 @@ export function AdminOrderEditorView({ open, onClose, orderId, orderLabel, curre
             setIsRejectingFraud(false);
         }
     };
-    return (_jsx(SideDrawer, { isOpen: open, onClose: onClose, title: orderLabel ? `Order: ${orderLabel}` : "Update Order", children: _jsxs(Form, { onSubmit: (e) => {
+    return (_jsx(SideDrawer, { isOpen: open, onClose: onClose, title: orderLabel ? `Order: ${orderLabel}` : "Update Order", children: _jsxs(Form, { schema: adminOrderUpdateSchema, onSubmit: (e) => {
                 e.preventDefault();
                 saveMutation.mutate();
-            }, spacing: "md", padding: "md", children: [addons && _jsx(OrderAddonBadges, { order: addons, variant: "detail" }), items && items.length > 0 && (_jsxs(Stack, { gap: "xs", children: [_jsxs(Label, { size: "sm", weight: "medium", color: "primary", children: ["Items (", items.length, ")"] }), _jsx(Div, { className: "divide-y divide-[var(--appkit-color-border)] border border-[var(--appkit-color-border)]", rounded: "lg", children: items.map((item, i) => (_jsxs(Div, { layout: "flex", align: "center", gap: "3", padding: "sm", children: [_jsx(Div, { className: "h-10 w-10 shrink-0", rounded: "md", overflow: "hidden", children: _jsx(MediaImage, { src: item.image, alt: item.title, size: "thumbnail" }) }), _jsxs(Div, { className: "min-w-0 flex-1", children: [_jsx(Text, { size: "sm", className: "truncate", weight: "medium", children: item.title }), _jsxs(Text, { size: "xs", color: "muted", children: ["Qty: ", item.quantity, " \u00D7 ", toCurrency(item.unitPrice)] })] }), _jsx(Text, { size: "sm", className: "shrink-0", weight: "semibold", children: toCurrency(item.totalPrice) })] }, item.productId || i))) })] })), _jsx(Select, { label: "Order status", options: STATUS_OPTIONS, value: status, onValueChange: setStatus }), _jsx(Input, { label: "Tracking number (optional)", value: trackingNumber, onChange: (e) => setTrackingNumber(e.target.value), placeholder: "e.g. DEL1234567890IN" }), _jsx(Select, { label: "Carrier (optional)", options: CARRIER_OPTIONS, value: carrier, onValueChange: setCarrier }), _jsxs(Stack, { gap: "xs", children: [_jsx(Label, { size: "sm", weight: "medium", color: "primary", children: "Internal note (optional)" }), _jsx(Textarea, { value: notes, onChange: (e) => setNotes(e.target.value), rows: 3, placeholder: "Reason for status change, escalation notes\u2026" })] }), (status === "refunded" || status === "return_requested") && (_jsx(Input, { label: "Refund amount \u20B9 (optional)", type: "number", min: "0", step: "0.01", value: refundAmount, onChange: (e) => setRefundAmount(e.target.value), placeholder: "e.g. 499.00" })), isManualPayment && (_jsxs(Stack, { gap: "xs", children: [_jsx(Label, { size: "sm", weight: "medium", color: "primary", children: "Payment Proof" }), isRejected && (_jsx(Text, { size: "xs", className: "text-error", weight: "medium", children: "Payment rejected as fraud \u2014 no further action available here." })), isReuploadRequested && !isVerified && (_jsx(Text, { size: "xs", className: "text-warning", weight: "medium", children: "Re-upload requested \u2014 waiting for the buyer to submit a new proof." })), paymentProofUrl ? (_jsxs(Stack, { gap: "xs", children: [_jsx(Div, { border: "default", rounded: "lg", overflow: "hidden", children: _jsx(MediaImage, { src: paymentProofUrl, alt: "Payment screenshot", size: "card" }) }), paymentTransactionId && (_jsxs(Text, { size: "xs", color: "muted", children: ["UTR: ", _jsx(Text, { as: "span", size: "xs", weight: "medium", children: paymentTransactionId })] })), needsVerification && (_jsxs(Stack, { gap: "xs", children: [(displayedUpiId || buyerReportedUpiId) && (_jsxs(Stack, { gap: "xs", children: [_jsxs(Text, { size: "xs", color: "muted", children: ["Expected UPI: ", _jsx(Text, { as: "span", size: "xs", weight: "medium", children: displayedUpiId || "—" }), " · ", "Buyer reported: ", _jsx(Text, { as: "span", size: "xs", weight: "medium", children: buyerReportedUpiId || "—" })] }), paymentUpiMismatch && (_jsx(Div, { rounded: "lg", padding: "inlineSm", className: "border border-error/20", surface: "danger-surface", children: _jsx(Text, { size: "xs", className: "text-error", weight: "semibold", children: "UPI mismatch \u2014 buyer-reported ID doesn't match the one shown for this order." }) }))] })), _jsxs(Text, { size: "xs", color: "muted", children: ["Buyer marked as paid: ", _jsx(Text, { as: "span", size: "xs", weight: "medium", children: buyerMarkedPaid ? "Yes" : "No" }), " · ", "Fraud agreement accepted: ", _jsx(Text, { as: "span", size: "xs", weight: "medium", children: buyerFraudAgreementAccepted ? "Yes" : "No" })] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Label, { size: "sm", weight: "medium", color: "primary", children: "Review note (required for re-upload / reject)" }), _jsx(Textarea, { value: reviewNote, onChange: (e) => setReviewNote(e.target.value), rows: 2, placeholder: "e.g. Screenshot is blurry \u2014 amount not readable / UPI ID doesn't match order" })] }), _jsx(Button, { type: "button", action: ACTIONS.ADMIN["verify-payment"], onClick: handleVerifyPayment, isLoading: isVerifyingPayment, disabled: isVerifyingPayment, variant: "primary", className: "w-full" }), _jsx(Button, { type: "button", action: ACTIONS.ADMIN["request-payment-reupload"], onClick: handleRequestReupload, isLoading: isRequestingReupload, disabled: isRequestingReupload || !reviewNote.trim(), variant: "secondary", className: "w-full" }), _jsx(Button, { type: "button", action: ACTIONS.ADMIN["reject-payment-fraud"], onClick: handleRejectFraud, isLoading: isRejectingFraud, disabled: isRejectingFraud || !reviewNote.trim(), variant: "danger", className: "w-full" })] })), isVerified && (_jsx(Div, { rounded: "lg", padding: "inlineSm", className: "border border-success/20", surface: "success-surface", children: _jsx(Text, { size: "xs", className: "text-success", weight: "medium", children: "Payment verified" }) }))] })) : (_jsx(Text, { size: "xs", color: "faint", children: "No proof uploaded yet." }))] })), _jsxs(FormActions, { align: "right", children: [_jsx(Button, { type: "button", variant: "secondary", onClick: onClose, children: "Cancel" }), _jsx(Button, { type: "submit", isLoading: saveMutation.isPending, disabled: !orderId || saveMutation.isPending, children: "Save changes" })] })] }) }));
+            }, spacing: "md", padding: "md", children: [_jsx(FormErrorSummary, {}), addons && _jsx(OrderAddonBadges, { order: addons, variant: "detail" }), items && items.length > 0 && (_jsxs(Stack, { gap: "xs", children: [_jsxs(Label, { size: "sm", weight: "medium", color: "primary", children: ["Items (", items.length, ")"] }), _jsx(Div, { className: "divide-y divide-[var(--appkit-color-border)] border border-[var(--appkit-color-border)]", rounded: "lg", children: items.map((item, i) => (_jsxs(Div, { layout: "flex", align: "center", gap: "3", padding: "sm", children: [_jsx(Div, { className: "h-10 w-10 shrink-0", rounded: "md", overflow: "hidden", children: _jsx(MediaImage, { src: item.image, alt: item.title, size: "thumbnail" }) }), _jsxs(Div, { className: "min-w-0 flex-1", children: [_jsx(Text, { size: "sm", className: "truncate", weight: "medium", children: item.title }), _jsxs(Text, { size: "xs", color: "muted", children: ["Qty: ", item.quantity, " \u00D7 ", toCurrency(item.unitPrice)] })] }), _jsx(Text, { size: "sm", className: "shrink-0", weight: "semibold", children: toCurrency(item.totalPrice) })] }, item.productId || i))) })] })), _jsx(Select, { label: "Order status", options: STATUS_OPTIONS, value: status, onValueChange: setStatus }), _jsx(Input, { label: "Tracking number (optional)", value: trackingNumber, onChange: (e) => setTrackingNumber(e.target.value), placeholder: "e.g. DEL1234567890IN" }), _jsx(Select, { label: "Carrier (optional)", options: CARRIER_OPTIONS, value: carrier, onValueChange: setCarrier }), _jsxs(Stack, { gap: "xs", children: [_jsx(Label, { size: "sm", weight: "medium", color: "primary", children: "Internal note (optional)" }), _jsx(Textarea, { value: notes, onChange: (e) => setNotes(e.target.value), rows: 3, placeholder: "Reason for status change, escalation notes\u2026" })] }), (status === "refunded" || status === "return_requested") && (_jsx(Input, { label: "Refund amount \u20B9 (optional)", type: "number", min: "0", step: "0.01", value: refundAmount, onChange: (e) => setRefundAmount(e.target.value), placeholder: "e.g. 499.00" })), isManualPayment && (_jsxs(Stack, { gap: "xs", children: [_jsx(Label, { size: "sm", weight: "medium", color: "primary", children: "Payment Proof" }), isRejected && (_jsx(Text, { size: "xs", className: "text-error", weight: "medium", children: "Payment rejected as fraud \u2014 no further action available here." })), isReuploadRequested && !isVerified && (_jsx(Text, { size: "xs", className: "text-warning", weight: "medium", children: "Re-upload requested \u2014 waiting for the buyer to submit a new proof." })), paymentProofUrl ? (_jsxs(Stack, { gap: "xs", children: [_jsx(Div, { border: "default", rounded: "lg", overflow: "hidden", children: _jsx(MediaImage, { src: paymentProofUrl, alt: "Payment screenshot", size: "card" }) }), paymentTransactionId && (_jsxs(Text, { size: "xs", color: "muted", children: ["UTR: ", _jsx(Text, { as: "span", size: "xs", weight: "medium", children: paymentTransactionId })] })), needsVerification && (_jsxs(Stack, { gap: "xs", children: [(displayedUpiId || buyerReportedUpiId) && (_jsxs(Stack, { gap: "xs", children: [_jsxs(Text, { size: "xs", color: "muted", children: ["Expected UPI: ", _jsx(Text, { as: "span", size: "xs", weight: "medium", children: displayedUpiId || "—" }), " · ", "Buyer reported: ", _jsx(Text, { as: "span", size: "xs", weight: "medium", children: buyerReportedUpiId || "—" })] }), paymentUpiMismatch && (_jsx(Div, { rounded: "lg", padding: "inlineSm", className: "border border-error/20", surface: "danger-surface", children: _jsx(Text, { size: "xs", className: "text-error", weight: "semibold", children: "UPI mismatch \u2014 buyer-reported ID doesn't match the one shown for this order." }) }))] })), _jsxs(Text, { size: "xs", color: "muted", children: ["Buyer marked as paid: ", _jsx(Text, { as: "span", size: "xs", weight: "medium", children: buyerMarkedPaid ? "Yes" : "No" }), " · ", "Fraud agreement accepted: ", _jsx(Text, { as: "span", size: "xs", weight: "medium", children: buyerFraudAgreementAccepted ? "Yes" : "No" })] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Label, { size: "sm", weight: "medium", color: "primary", children: "Review note (required for re-upload / reject)" }), _jsx(Textarea, { value: reviewNote, onChange: (e) => setReviewNote(e.target.value), rows: 2, placeholder: "e.g. Screenshot is blurry \u2014 amount not readable / UPI ID doesn't match order" })] }), _jsx(Button, { type: "button", action: ACTIONS.ADMIN["verify-payment"], onClick: handleVerifyPayment, isLoading: isVerifyingPayment, disabled: isVerifyingPayment, variant: "primary", className: "w-full" }), _jsx(Button, { type: "button", action: ACTIONS.ADMIN["request-payment-reupload"], onClick: handleRequestReupload, isLoading: isRequestingReupload, disabled: isRequestingReupload || !reviewNote.trim(), variant: "secondary", className: "w-full" }), _jsx(Button, { type: "button", action: ACTIONS.ADMIN["reject-payment-fraud"], onClick: handleRejectFraud, isLoading: isRejectingFraud, disabled: isRejectingFraud || !reviewNote.trim(), variant: "danger", className: "w-full" })] })), isVerified && (_jsx(Div, { rounded: "lg", padding: "inlineSm", className: "border border-success/20", surface: "success-surface", children: _jsx(Text, { size: "xs", className: "text-success", weight: "medium", children: "Payment verified" }) }))] })) : (_jsx(Text, { size: "xs", color: "faint", children: "No proof uploaded yet." }))] })), _jsxs(FormActions, { align: "right", children: [_jsx(Button, { type: "button", variant: "secondary", onClick: onClose, children: "Cancel" }), _jsx(Button, { type: "submit", isLoading: saveMutation.isPending, disabled: !orderId || saveMutation.isPending, children: "Save changes" })] })] }) }));
 }

package/dist/features/admin/components/AdminSiteView.js

@@ -7,6 +7,8 @@ import { Alert, Button, Form, FormActions, Input, StackedViewShell, Toggle, } fr
 import { useSiteSettings } from "../../../core/hooks/useSiteSettings";
 import { ADMIN_ENDPOINTS } from "../../../constants/api-endpoints";
 import { apiClient } from "../../../http";
+import { announcementBarSchema } from "../schemas/admin-editor-forms";
+import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary";
 export function AdminSiteView({ labels = {}, renderTabs, renderForm, ...rest }) {
     const queryClient = useQueryClient();
     const { data, isLoading, error } = useSiteSettings();
@@ -40,10 +42,10 @@ export function AdminSiteView({ labels = {}, renderTabs, renderForm, ...rest })
             setSaveMessage("Failed to save announcement settings.");
         },
     });
-    const defaultForm = () => (_jsxs(Form, { onSubmit: (event) => {
+    const defaultForm = () => (_jsxs(Form, { schema: announcementBarSchema, onSubmit: (event) => {
             event.preventDefault();
             saveAnnouncement.mutate();
-        }, spacing: "md", children: [_jsx(Toggle, { checked: announcementEnabled, onChange: setAnnouncementEnabled, label: "Show announcement bar on homepage" }), _jsx(Input, { label: "Announcement message", value: announcementMessage, onChange: (event) => setAnnouncementMessage(event.target.value), placeholder: "Enter homepage announcement", disabled: !announcementEnabled, helperText: "This message is shown at the top of the homepage when enabled." }), _jsx(FormActions, { align: "right", children: _jsx(Button, { type: "submit", disabled: saveAnnouncement.isPending || (announcementEnabled && !announcementMessage.trim()), children: saveAnnouncement.isPending ? "Saving..." : "Save announcement" }) }), saveMessage ? (_jsx(Alert, { variant: saveMessage.startsWith("Failed") ? "error" : "success", title: saveMessage.startsWith("Failed") ? "Save failed" : "Saved", children: saveMessage })) : null] }));
+        }, spacing: "md", children: [_jsx(FormErrorSummary, {}), _jsx(Toggle, { checked: announcementEnabled, onChange: setAnnouncementEnabled, label: "Show announcement bar on homepage" }), _jsx(Input, { label: "Announcement message", value: announcementMessage, onChange: (event) => setAnnouncementMessage(event.target.value), placeholder: "Enter homepage announcement", disabled: !announcementEnabled, helperText: "This message is shown at the top of the homepage when enabled." }), _jsx(FormActions, { align: "right", children: _jsx(Button, { type: "submit", disabled: saveAnnouncement.isPending || (announcementEnabled && !announcementMessage.trim()), children: saveAnnouncement.isPending ? "Saving..." : "Save announcement" }) }), saveMessage ? (_jsx(Alert, { variant: saveMessage.startsWith("Failed") ? "error" : "success", title: saveMessage.startsWith("Failed") ? "Save failed" : "Saved", children: saveMessage })) : null] }));
     const loadingAlert = isLoading ? (_jsx(Alert, { variant: "info", title: "Loading settings", children: "Fetching site settings..." })) : null;
     const errorAlert = error ? (_jsx(Alert, { variant: "error", title: "Could not load settings", children: error instanceof Error ? error.message : "Unknown error" })) : null;
     return (_jsx(StackedViewShell, { portal: "admin", ...rest, title: labels.title ?? "Site Settings", sections: [renderTabs?.(), loadingAlert, errorAlert, renderForm?.() ?? defaultForm()] }));

package/dist/features/admin/components/AdminStoreEditorView.js

@@ -6,6 +6,8 @@ import { useQueryClient } from "@tanstack/react-query";
 import { Button, Checkbox, Details, Div, Form, FormActions, Label, Select, SideDrawer, Span, Stack, StackedViewShell, Summary, Textarea, Toggle, useToast } from "../../../ui";
 import { apiClient } from "../../../http";
 import { ADMIN_ENDPOINTS } from "../../../constants/api-endpoints";
+import { adminStoreUpdateSchema } from "../schemas/admin-editor-forms";
+import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary";
 const CAPABILITY_GROUPS = [
     {
         label: "Listings",
@@ -106,15 +108,15 @@ export function AdminStoreEditorView({ open, onClose, storeId, storeName, curren
                     return (_jsxs(Details, { className: "group", children: [_jsxs(Summary, { paddingX: "x-sm", paddingY: "y-xs", weight: "semibold", color: "muted", layout: "flex", align: "center", justify: "between", className: "uppercase tracking-wide hover:bg-[var(--appkit-color-bg)] transition-colors", children: [_jsx(Span, { size: "xs", children: group.label }), _jsxs(Span, { size: "xs", weight: "normal", className: "normal-case", color: "faint", children: [checked, "/", group.caps.length] })] }), _jsx(Div, { layout: "grid", paddingY: "y-xs-tall", className: "grid-cols-2 gap-x-2 gap-y-1.5", surface: "muted", padding: "x-sm", children: group.caps.map((cap) => (_jsxs("label", { className: "flex items-center gap-[var(--appkit-space-2)] cursor-pointer text-[length:var(--appkit-text-xs)] text-[var(--appkit-color-text-muted)]", children: [_jsx(Checkbox, { bare: true, checked: capabilities.has(cap.key), onChange: () => toggleCapability(cap.key), className: "h-3.5 w-3.5 rounded border-[var(--appkit-color-border)] accent-primary" }), cap.label] }, cap.key))) })] }, group.label));
                 }) })] }));
     const renderActionsSection = () => (_jsxs(FormActions, { align: "right", children: [_jsx(Button, { type: "button", variant: "secondary", onClick: onClose, children: "Cancel" }), _jsx(Button, { type: "submit", isLoading: saveMutation.isPending, disabled: !storeId || saveMutation.isPending, children: "Save changes" })] }));
-    return (_jsx(SideDrawer, { isOpen: open, onClose: onClose, title: storeName ? `Manage: ${storeName}` : "Manage Store", children: _jsx(Form, { onSubmit: (e) => {
+    return (_jsx(SideDrawer, { isOpen: open, onClose: onClose, title: storeName ? `Manage: ${storeName}` : "Manage Store", children: _jsxs(Form, { schema: adminStoreUpdateSchema, onSubmit: (e) => {
                 e.preventDefault();
                 saveMutation.mutate();
-            }, padding: "md", children: _jsx(StackedViewShell, { portal: "admin", className: "space-y-4", sections: [
-                    renderStatusSection,
-                    renderNotesSection,
-                    renderTogglesSection,
-                    renderSuspensionSection,
-                    renderCapabilitiesSection,
-                    renderActionsSection,
-                ] }) }) }));
+            }, padding: "md", children: [_jsx(FormErrorSummary, {}), _jsx(StackedViewShell, { portal: "admin", className: "space-y-4", sections: [
+                        renderStatusSection,
+                        renderNotesSection,
+                        renderTogglesSection,
+                        renderSuspensionSection,
+                        renderCapabilitiesSection,
+                        renderActionsSection,
+                    ] })] }) }));
 }

package/dist/features/admin/components/AdminUsersView.js

@@ -18,6 +18,8 @@ import { useBulkAction } from "../../../react";
 import { useBulkEvent } from "../../events/hooks/useBulkEvent";
 import { RTDB_PATHS } from "../../../providers/db-firebase/rtdb-paths";
 import { RealtimeEventStatus } from "../../../react/hooks/useRealtimeEvent";
+import { hardBanReasonSchema } from "../schemas/admin-ops-forms";
+import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary";
 export function AdminUsersView({ children, ...props }) {
     const toast = useToast();
     const queryClient = useQueryClient();
@@ -247,10 +249,10 @@ export function AdminUsersView({ children, ...props }) {
                     setBanModalOpen(false);
                     setBanTargetId(null);
                     setBanReason("");
-                }, title: ACTIONS.ADMIN["ban-user"].confirmation.title, children: [_jsx(AppText, { size: "sm", color: "muted", className: "mb-4", children: ACTIONS.ADMIN["ban-user"].confirmation.body }), _jsxs(Form, { onSubmit: (e) => {
+                }, title: ACTIONS.ADMIN["ban-user"].confirmation.title, children: [_jsx(AppText, { size: "sm", color: "muted", className: "mb-4", children: ACTIONS.ADMIN["ban-user"].confirmation.body }), _jsxs(Form, { schema: hardBanReasonSchema, onSubmit: (e) => {
                             e.preventDefault();
                             banUser.mutate();
-                        }, children: [_jsx(Input, { label: "Reason", value: banReason, onChange: (e) => setBanReason(e.target.value), placeholder: "e.g. Repeated fraud, scam activity\u2026", required: true }), _jsxs(FormActions, { children: [_jsx(Button, { type: "button", variant: "secondary", onClick: () => {
+                        }, children: [_jsx(FormErrorSummary, {}), _jsx(Input, { label: "Reason", value: banReason, onChange: (e) => setBanReason(e.target.value), placeholder: "e.g. Repeated fraud, scam activity\u2026", required: true }), _jsxs(FormActions, { children: [_jsx(Button, { type: "button", variant: "secondary", onClick: () => {
                                             setBanModalOpen(false);
                                             setBanTargetId(null);
                                             setBanReason("");

package/dist/features/admin/schemas/admin-editor-forms.d.ts

@@ -0,0 +1,119 @@
+import { z } from "zod";
+/**
+ * An address written by an admin on someone's behalf.
+ *
+ * Shapes match `AddressDocument` (`addressLine1`, not `line1`) — deliberately
+ * NOT `userAddressSchema`, which is the account-side view of the same data
+ * under different field names. Reusing that one here would have meant
+ * translating on every write.
+ */
+export declare const adminAddressFormSchema: z.ZodObject<{
+    ownerType: z.ZodEnum<["user", "store"]>;
+    ownerId: z.ZodString;
+    label: z.ZodOptional<z.ZodString>;
+    fullName: z.ZodString;
+    phone: z.ZodString;
+    addressLine1: z.ZodString;
+    addressLine2: z.ZodOptional<z.ZodString>;
+    landmark: z.ZodOptional<z.ZodString>;
+    city: z.ZodString;
+    state: z.ZodString;
+    postalCode: z.ZodString;
+    country: z.ZodString;
+    isDefault: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    country: string;
+    ownerId: string;
+    ownerType: "user" | "store";
+    fullName: string;
+    phone: string;
+    addressLine1: string;
+    city: string;
+    state: string;
+    postalCode: string;
+    label?: string | undefined;
+    isDefault?: boolean | undefined;
+    addressLine2?: string | undefined;
+    landmark?: string | undefined;
+}, {
+    country: string;
+    ownerId: string;
+    ownerType: "user" | "store";
+    fullName: string;
+    phone: string;
+    addressLine1: string;
+    city: string;
+    state: string;
+    postalCode: string;
+    label?: string | undefined;
+    isDefault?: boolean | undefined;
+    addressLine2?: string | undefined;
+    landmark?: string | undefined;
+}>;
+export type AdminAddressFormValues = z.infer<typeof adminAddressFormSchema>;
+/**
+ * An admin changing a store's standing.
+ *
+ * `suspensionReason` is required when — and only when — the status is
+ * `suspended`: suspending a seller without a recorded reason leaves them, and
+ * the next admin, with nothing to appeal or review.
+ */
+export declare const adminStoreUpdateSchema: z.ZodEffects<z.ZodObject<{
+    storeStatus: z.ZodEnum<["pending", "active", "suspended", "closed"]>;
+    isVerified: z.ZodOptional<z.ZodBoolean>;
+    isFeatured: z.ZodOptional<z.ZodBoolean>;
+    suspensionReason: z.ZodOptional<z.ZodString>;
+    capabilities: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    adminNotes: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    storeStatus: "closed" | "pending" | "active" | "suspended";
+    isVerified?: boolean | undefined;
+    isFeatured?: boolean | undefined;
+    adminNotes?: string | undefined;
+    suspensionReason?: string | undefined;
+    capabilities?: string[] | undefined;
+}, {
+    storeStatus: "closed" | "pending" | "active" | "suspended";
+    isVerified?: boolean | undefined;
+    isFeatured?: boolean | undefined;
+    adminNotes?: string | undefined;
+    suspensionReason?: string | undefined;
+    capabilities?: string[] | undefined;
+}>, {
+    storeStatus: "closed" | "pending" | "active" | "suspended";
+    isVerified?: boolean | undefined;
+    isFeatured?: boolean | undefined;
+    adminNotes?: string | undefined;
+    suspensionReason?: string | undefined;
+    capabilities?: string[] | undefined;
+}, {
+    storeStatus: "closed" | "pending" | "active" | "suspended";
+    isVerified?: boolean | undefined;
+    isFeatured?: boolean | undefined;
+    adminNotes?: string | undefined;
+    suspensionReason?: string | undefined;
+    capabilities?: string[] | undefined;
+}>;
+export type AdminStoreUpdateValues = z.infer<typeof adminStoreUpdateSchema>;
+/**
+ * The homepage announcement bar.
+ *
+ * 🛑 `message` is the canonical key. The main admin editor saved this copy
+ * under `text` until 2026-08-24 — a key no renderer has ever read — so
+ * admin-authored announcements saved successfully and never appeared. Naming
+ * it here is what stops that recurring.
+ */
+export declare const announcementBarSchema: z.ZodObject<{
+    message: z.ZodOptional<z.ZodString>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    link: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    message?: string | undefined;
+    link?: string | undefined;
+    enabled?: boolean | undefined;
+}, {
+    message?: string | undefined;
+    link?: string | undefined;
+    enabled?: boolean | undefined;
+}>;
+export type AnnouncementBarValues = z.infer<typeof announcementBarSchema>;

package/dist/features/admin/schemas/admin-editor-forms.js

@@ -0,0 +1,141 @@
+/*
+ * WHY: A cluster of admin editors rendered `<Form>` with no schema. Two of
+ *      them write PII, and one changes a store's standing on the platform.
+ *
+ *      `AdminAddressEditorView` is the PII one: `fullName`, `phone` and the
+ *      address lines are all encrypted at rest, and none was checked — a
+ *      postal code could be any string, and `ownerId` (which decides WHOSE
+ *      address this is) was free text.
+ *
+ *      `AdminStoreEditorView` sets `storeStatus`, `isVerified`, `isFeatured`
+ *      and `capabilities`. Recurrent Root Cause #38 lived here: saving any
+ *      field re-sent every other one, so an unrelated edit could silently
+ *      un-verify a store.
+ *
+ * WHAT: One schema per editor.
+ *
+ * EXPORTS:
+ *   adminAddressFormSchema, adminStoreUpdateSchema, announcementBarSchema,
+ *   and their inferred value types
+ *
+ * @tag domain:admin
+ * @tag layer:schema
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:AdminAddressEditorView,AdminStoreEditorView,AdminSiteView
+ * @tag sideEffects:none
+ */
+import { z } from "zod";
+import { annotate } from "../../shell/field-ui-meta";
+const PHONE_RE = /^(\+?91[-\s]?)?[6-9]\d{9}$/;
+/** Indian PIN: six digits, never starting at zero. */
+const PIN_RE = /^[1-9]\d{5}$/;
+/**
+ * An address written by an admin on someone's behalf.
+ *
+ * Shapes match `AddressDocument` (`addressLine1`, not `line1`) — deliberately
+ * NOT `userAddressSchema`, which is the account-side view of the same data
+ * under different field names. Reusing that one here would have meant
+ * translating on every write.
+ */
+export const adminAddressFormSchema = z.object({
+    ownerType: annotate(z.enum(["user", "store"]), {
+        section: "owner", sectionLabel: "Belongs to", sectionRequired: true, quick: true, order: 1, row: "pair",
+    }),
+    ownerId: annotate(z.string().trim().min(1, "Choose who this address belongs to."), {
+        section: "owner", quick: true, order: 2, row: "pair",
+    }),
+    label: annotate(z.string().trim().max(60, "Keep the label short — e.g. Home, Warehouse.").optional(), {
+        section: "address", sectionLabel: "Address", order: 1, row: "pair",
+    }),
+    fullName: annotate(z.string().trim().min(2, "A recipient name is required.").max(120), {
+        section: "address", sectionRequired: true, quick: true, order: 2, row: "pair",
+    }),
+    phone: annotate(z.string().trim().regex(PHONE_RE, "Enter a 10-digit Indian mobile number."), {
+        section: "address", quick: true, order: 3, row: "pair",
+    }),
+    addressLine1: annotate(z.string().trim().min(3, "Street address is required.").max(200), {
+        section: "address", quick: true, order: 4, row: "full",
+    }),
+    addressLine2: annotate(z.string().trim().max(200).optional(), {
+        section: "address", order: 5, row: "full",
+    }),
+    landmark: annotate(z.string().trim().max(120).optional(), {
+        section: "address", order: 6, row: "pair",
+    }),
+    city: annotate(z.string().trim().min(2, "City is required.").max(80), {
+        section: "address", order: 7, row: "pair",
+    }),
+    state: annotate(z.string().trim().min(2, "State is required.").max(80), {
+        section: "address", order: 8, row: "pair",
+    }),
+    // A wrong PIN is the single most common reason a parcel is undeliverable,
+    // and it was previously any string at all.
+    postalCode: annotate(z.string().trim().regex(PIN_RE, "Enter a 6-digit PIN code."), {
+        section: "address", order: 9, row: "pair",
+    }),
+    country: annotate(z.string().trim().min(2).max(60), {
+        section: "address", order: 10, row: "pair",
+    }),
+    isDefault: annotate(z.boolean().optional(), {
+        section: "address", order: 11, row: "quarter",
+    }),
+});
+/**
+ * An admin changing a store's standing.
+ *
+ * `suspensionReason` is required when — and only when — the status is
+ * `suspended`: suspending a seller without a recorded reason leaves them, and
+ * the next admin, with nothing to appeal or review.
+ */
+export const adminStoreUpdateSchema = z
+    .object({
+    storeStatus: annotate(z.enum(["pending", "active", "suspended", "closed"]), {
+        section: "standing", sectionLabel: "Store standing", sectionRequired: true, quick: true, order: 1, row: "pair",
+    }),
+    isVerified: annotate(z.boolean().optional(), {
+        section: "standing", order: 2, row: "quarter",
+    }),
+    isFeatured: annotate(z.boolean().optional(), {
+        section: "standing", order: 3, row: "quarter",
+    }),
+    suspensionReason: annotate(z.string().trim().max(500).optional(), {
+        section: "standing", order: 4, row: "full", kind: "textarea",
+    }),
+    capabilities: annotate(z.array(z.string().min(1)).max(50).optional(), {
+        section: "capabilities", sectionLabel: "Capabilities", order: 1, row: "full", kind: "list",
+    }),
+    adminNotes: annotate(z.string().trim().max(2000).optional(), {
+        section: "capabilities", order: 2, row: "full", kind: "textarea",
+        help: "Internal only — never shown to the store owner or the public.",
+    }),
+})
+    .superRefine((v, ctx) => {
+    if (v.storeStatus === "suspended" && !v.suspensionReason?.trim()) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["suspensionReason"],
+            message: "Record why this store is being suspended.",
+        });
+    }
+});
+/**
+ * The homepage announcement bar.
+ *
+ * 🛑 `message` is the canonical key. The main admin editor saved this copy
+ * under `text` until 2026-08-24 — a key no renderer has ever read — so
+ * admin-authored announcements saved successfully and never appeared. Naming
+ * it here is what stops that recurring.
+ */
+export const announcementBarSchema = z.object({
+    message: annotate(z.string().trim().max(300, "Keep the announcement under 300 characters.").optional(), {
+        section: "announcement", sectionLabel: "Announcement bar", sectionRequired: true,
+        quick: true, order: 1, row: "full",
+    }),
+    enabled: annotate(z.boolean().optional(), {
+        section: "announcement", order: 2, row: "quarter",
+    }),
+    link: annotate(z.string().trim().max(300).optional(), {
+        section: "announcement", order: 3, row: "full",
+    }),
+});

package/dist/features/admin/schemas/admin-ops-forms.d.ts

@@ -0,0 +1,123 @@
+import { z } from "zod";
+export declare const adminOrderUpdateSchema: z.ZodObject<{
+    status: z.ZodEnum<[string, ...string[]]>;
+    trackingNumber: z.ZodOptional<z.ZodString>;
+    carrier: z.ZodOptional<z.ZodString>;
+    refundAmount: z.ZodOptional<z.ZodNumber>;
+    notes: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    status: string;
+    notes?: string | undefined;
+    trackingNumber?: string | undefined;
+    refundAmount?: number | undefined;
+    carrier?: string | undefined;
+}, {
+    status: string;
+    notes?: string | undefined;
+    trackingNumber?: string | undefined;
+    refundAmount?: number | undefined;
+    carrier?: string | undefined;
+}>;
+export type AdminOrderUpdateValues = z.infer<typeof adminOrderUpdateSchema>;
+/** Inviting a team member — an email plus the permissions it grants. */
+export declare const employeeInviteSchema: z.ZodObject<{
+    email: z.ZodString;
+    permissionGroup: z.ZodString;
+    permissions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    email: string;
+    permissionGroup: string;
+    permissions?: string[] | undefined;
+}, {
+    email: string;
+    permissionGroup: string;
+    permissions?: string[] | undefined;
+}>;
+export type EmployeeInviteValues = z.infer<typeof employeeInviteSchema>;
+/**
+ * The reason recorded against a hard ban.
+ *
+ * A hard ban runs an eight-stage destructive cascade; this string is the only
+ * durable record of why. A 10-character floor, matching the admin offer-cancel
+ * reason, because "spam" is not an audit trail.
+ */
+export declare const hardBanReasonSchema: z.ZodObject<{
+    reason: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    reason: string;
+}, {
+    reason: string;
+}>;
+export type HardBanReasonValues = z.infer<typeof hardBanReasonSchema>;
+/**
+ * Feature flags.
+ *
+ * Deliberately open records: flags are added and removed constantly, and a
+ * closed schema here would silently STRIP a newly-added flag on the next save
+ * — the `productBaseSchema` failure applied to configuration. The values are
+ * still constrained, which is what stops a flag being set to an object.
+ */
+export declare const featureFlagsUpdateSchema: z.ZodObject<{
+    flags: z.ZodRecord<z.ZodString, z.ZodBoolean>;
+    rollouts: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNumber>>;
+}, "strip", z.ZodTypeAny, {
+    flags: Record<string, boolean>;
+    rollouts?: Record<string, number> | undefined;
+}, {
+    flags: Record<string, boolean>;
+    rollouts?: Record<string, number> | undefined;
+}>;
+export type FeatureFlagsUpdateValues = z.infer<typeof featureFlagsUpdateSchema>;
+/** An ad placement. `priority` orders competing ads in the same slot. */
+export declare const adminAdFormSchema: z.ZodEffects<z.ZodObject<{
+    name: z.ZodString;
+    provider: z.ZodEnum<["manual", "adsense", "thirdParty"]>;
+    status: z.ZodEnum<["draft", "active", "scheduled", "paused"]>;
+    priority: z.ZodNumber;
+    placementIds: z.ZodArray<z.ZodString, "many">;
+    requiresConsent: z.ZodBoolean;
+    startAt: z.ZodOptional<z.ZodString>;
+    endAt: z.ZodOptional<z.ZodString>;
+    creative: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<import("../../..").FirestoreValue, z.ZodTypeDef, import("../../..").FirestoreValue>>>;
+}, "strip", z.ZodTypeAny, {
+    status: "draft" | "active" | "scheduled" | "paused";
+    name: string;
+    priority: number;
+    provider: "manual" | "adsense" | "thirdParty";
+    placementIds: string[];
+    requiresConsent: boolean;
+    startAt?: string | undefined;
+    endAt?: string | undefined;
+    creative?: Record<string, import("../../..").FirestoreValue> | undefined;
+}, {
+    status: "draft" | "active" | "scheduled" | "paused";
+    name: string;
+    priority: number;
+    provider: "manual" | "adsense" | "thirdParty";
+    placementIds: string[];
+    requiresConsent: boolean;
+    startAt?: string | undefined;
+    endAt?: string | undefined;
+    creative?: Record<string, import("../../..").FirestoreValue> | undefined;
+}>, {
+    status: "draft" | "active" | "scheduled" | "paused";
+    name: string;
+    priority: number;
+    provider: "manual" | "adsense" | "thirdParty";
+    placementIds: string[];
+    requiresConsent: boolean;
+    startAt?: string | undefined;
+    endAt?: string | undefined;
+    creative?: Record<string, import("../../..").FirestoreValue> | undefined;
+}, {
+    status: "draft" | "active" | "scheduled" | "paused";
+    name: string;
+    priority: number;
+    provider: "manual" | "adsense" | "thirdParty";
+    placementIds: string[];
+    requiresConsent: boolean;
+    startAt?: string | undefined;
+    endAt?: string | undefined;
+    creative?: Record<string, import("../../..").FirestoreValue> | undefined;
+}>;
+export type AdminAdFormValues = z.infer<typeof adminAdFormSchema>;

package/dist/features/admin/schemas/admin-ops-forms.js

@@ -0,0 +1,147 @@
+/*
+ * WHY: Four more admin editors rendered `<Form>` with no schema. Each writes
+ *      something an admin cannot easily undo.
+ *
+ *      `AdminOrderEditorView` is the one that touches money: `refundAmount`
+ *      was parsed with a bare `parseFloat` and guarded only by
+ *      `!isNaN(amount) && amount > 0`, with no upper bound and no check
+ *      against the order — so a mistyped figure went straight through as a
+ *      refund instruction.
+ *
+ *      `AdminEmployeeEditorView` grants permissions, and `AdminUsersView`'s
+ *      hard-ban takes a reason that is the entire record of why an account
+ *      was destroyed.
+ *
+ * WHAT: One schema per editor.
+ *
+ * EXPORTS:
+ *   adminOrderUpdateSchema, employeeInviteSchema, hardBanReasonSchema,
+ *   featureFlagsUpdateSchema, adminAdFormSchema, and their value types
+ *
+ * @tag domain:admin
+ * @tag layer:schema
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:AdminOrderEditorView,AdminEmployeeEditorView,AdminUsersView,AdminFeatureFlagsView,AdminAdEditorView
+ * @tag sideEffects:none
+ */
+import { z } from "zod";
+import { annotate } from "../../shell/field-ui-meta";
+import { firestoreValueSchema } from "../../../schemas/firestore-value";
+import { OrderStatusValues } from "../../orders/schemas/firestore";
+/** Derived from the real 9-value union, never restated (Root Cause #36). */
+const orderStatusSchema = z.enum(Object.values(OrderStatusValues));
+export const adminOrderUpdateSchema = z.object({
+    status: annotate(orderStatusSchema, {
+        section: "status", sectionLabel: "Order", sectionRequired: true, quick: true, order: 1, row: "pair",
+    }),
+    trackingNumber: annotate(z.string().trim().max(120).optional(), {
+        section: "shipping", sectionLabel: "Shipping", order: 1, row: "pair",
+    }),
+    carrier: annotate(z.string().trim().max(80).optional(), {
+        section: "shipping", order: 2, row: "pair",
+    }),
+    /*
+     * 🛑 Bounded. This was `parseFloat` + `> 0` with no ceiling, so a slipped
+     * decimal point issued a refund an order of magnitude too large. The cap is
+     * a sanity bound, not a business rule — the route still checks the amount
+     * against the order itself.
+     */
+    refundAmount: annotate(z.coerce
+        .number({ invalid_type_error: "Enter the refund amount as a number." })
+        .positive("A refund must be greater than zero.")
+        .max(10000000, "That looks like a typo — check the decimal point.")
+        .optional(), { section: "shipping", order: 3, row: "pair", kind: "number" }),
+    notes: annotate(z.string().trim().max(2000).optional(), {
+        section: "shipping", order: 4, row: "full", kind: "textarea",
+    }),
+});
+/** Inviting a team member — an email plus the permissions it grants. */
+export const employeeInviteSchema = z.object({
+    email: annotate(z.string().trim().toLowerCase().min(1, "An email address is required.").email("That doesn't look like an email address."), { section: "member", sectionLabel: "Team member", sectionRequired: true, quick: true, order: 1, row: "pair" }),
+    permissionGroup: annotate(z.string().trim().min(1, "Choose a permission group."), {
+        section: "member", quick: true, order: 2, row: "pair",
+    }),
+    permissions: annotate(z.array(z.string().min(1)).max(200).optional(), {
+        section: "member", order: 3, row: "full", kind: "list",
+    }),
+});
+/**
+ * The reason recorded against a hard ban.
+ *
+ * A hard ban runs an eight-stage destructive cascade; this string is the only
+ * durable record of why. A 10-character floor, matching the admin offer-cancel
+ * reason, because "spam" is not an audit trail.
+ */
+export const hardBanReasonSchema = z.object({
+    reason: annotate(z.string().trim().min(10, "Record why this account is being banned — at least 10 characters.").max(500), { section: "ban", sectionLabel: "Reason", sectionRequired: true, quick: true, order: 1, row: "full", kind: "textarea" }),
+});
+/**
+ * Feature flags.
+ *
+ * Deliberately open records: flags are added and removed constantly, and a
+ * closed schema here would silently STRIP a newly-added flag on the next save
+ * — the `productBaseSchema` failure applied to configuration. The values are
+ * still constrained, which is what stops a flag being set to an object.
+ */
+export const featureFlagsUpdateSchema = z.object({
+    flags: annotate(z.record(z.string(), z.boolean()), {
+        section: "flags", sectionLabel: "Feature flags", sectionRequired: true, order: 1, row: "full", kind: "list",
+    }),
+    rollouts: annotate(z.record(z.string(), z.coerce.number().min(0).max(100)).optional(), {
+        section: "flags", order: 2, row: "full", kind: "list",
+        help: "Percentage rollout per flag, 0–100.",
+    }),
+});
+/** An ad placement. `priority` orders competing ads in the same slot. */
+export const adminAdFormSchema = z
+    .object({
+    name: annotate(z.string().trim().min(2, "Give the ad a name.").max(120), {
+        section: "basics", sectionLabel: "Ad", sectionRequired: true, quick: true, order: 1, row: "pair",
+    }),
+    provider: annotate(z.enum(["manual", "adsense", "thirdParty"]), {
+        section: "basics", quick: true, order: 2, row: "pair",
+    }),
+    status: annotate(z.enum(["draft", "active", "scheduled", "paused"]), {
+        section: "basics", quick: true, order: 3, row: "pair",
+    }),
+    priority: annotate(z.coerce.number().int().min(0).max(1000), {
+        section: "basics", order: 4, row: "pair", kind: "number",
+    }),
+    placementIds: annotate(z.array(z.string().min(1)).min(1, "Choose at least one placement."), {
+        section: "placement", sectionLabel: "Placement", sectionRequired: true, order: 1, row: "full", kind: "list",
+    }),
+    requiresConsent: annotate(z.boolean(), {
+        section: "placement", order: 2, row: "quarter",
+    }),
+    startAt: annotate(z.string().optional(), {
+        section: "schedule", sectionLabel: "Schedule", order: 1, row: "pair", kind: "date",
+    }),
+    endAt: annotate(z.string().optional(), {
+        section: "schedule", order: 2, row: "pair", kind: "date",
+    }),
+    // Creative shape varies by provider, so it stays open — an AdSense slot and
+    // a manual banner share almost no fields. Open to a Firestore VALUE tree,
+    // not to anything: `z.unknown()` would pass a function straight to the
+    // driver, which then throws at write time rather than at parse time.
+    creative: annotate(z.record(firestoreValueSchema).optional(), {
+        section: "creative", sectionLabel: "Creative", order: 1, row: "full", kind: "list",
+    }),
+})
+    .superRefine((v, ctx) => {
+    // A scheduled ad with no start date never runs, and nothing would say so.
+    if (v.status === "scheduled" && !v.startAt) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["startAt"],
+            message: "A scheduled ad needs a start date.",
+        });
+    }
+    if (v.startAt && v.endAt && v.endAt <= v.startAt) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["endAt"],
+            message: "The end date must be after the start date.",
+        });
+    }
+});

package/dist/features/orders/schemas/buyer-forms.d.ts

@@ -0,0 +1,46 @@
+import { z } from "zod";
+/**
+ * Cancelling an order.
+ *
+ * A reason floor of 5 characters, because this text is what the seller reads
+ * to decide whether to restock, refund early or dispute — and "x" tells them
+ * nothing. Deliberately low: the buyer is cancelling, not writing an essay,
+ * and a high floor would push them to type filler.
+ */
+export declare const orderCancelSchema: z.ZodObject<{
+    reason: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    reason: string;
+}, {
+    reason: string;
+}>;
+export type OrderCancelValues = z.infer<typeof orderCancelSchema>;
+/**
+ * Uploading proof of a manual (cash / UPI / EMI) payment.
+ *
+ * ## Every field here is evidence
+ *
+ * An admin verifies or rejects on this, and a rejection carries a 7-day ban
+ * cascade — so the cost of a sloppy submission is real in both directions.
+ *
+ * `buyerMarkedPaid` and `buyerFraudAgreementAccepted` are `z.literal(true)`
+ * rather than `z.boolean()`: an unchecked declaration is not a submission with
+ * a `false` in it, it is a form that must not send.
+ */
+export declare const paymentProofSchema: z.ZodObject<{
+    transactionId: z.ZodString;
+    buyerReportedUpiId: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+    buyerMarkedPaid: z.ZodLiteral<true>;
+    buyerFraudAgreementAccepted: z.ZodLiteral<true>;
+}, "strip", z.ZodTypeAny, {
+    transactionId: string;
+    buyerMarkedPaid: true;
+    buyerFraudAgreementAccepted: true;
+    buyerReportedUpiId?: string | undefined;
+}, {
+    transactionId: string;
+    buyerMarkedPaid: true;
+    buyerFraudAgreementAccepted: true;
+    buyerReportedUpiId?: string | undefined;
+}>;
+export type PaymentProofValues = z.infer<typeof paymentProofSchema>;

package/dist/features/orders/schemas/buyer-forms.js

@@ -0,0 +1,81 @@
+/*
+ * WHY: Two buyer-facing order forms rendered `<Form>` with no schema.
+ *
+ *      The manual-payment one is the consequential case. It carries the
+ *      buyer's own claim that they have paid — a UTR, the UPI ID they sent to,
+ *      and a fraud declaration — and an admin decides on that evidence whether
+ *      to release goods. `transactionId` was free text with no floor, so a
+ *      single character satisfied it and reached the review queue looking like
+ *      a reference.
+ *
+ * WHAT: The two schemas, plus a shared `cancellationReason`.
+ *
+ * EXPORTS:
+ *   orderCancelSchema, paymentProofSchema, and their inferred value types
+ *
+ * @tag domain:orders
+ * @tag layer:schema
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:user/orders/[id]/cancel,user/orders/[id]/payment
+ * @tag sideEffects:none
+ */
+import { z } from "zod";
+import { annotate } from "../../shell/field-ui-meta";
+/**
+ * Cancelling an order.
+ *
+ * A reason floor of 5 characters, because this text is what the seller reads
+ * to decide whether to restock, refund early or dispute — and "x" tells them
+ * nothing. Deliberately low: the buyer is cancelling, not writing an essay,
+ * and a high floor would push them to type filler.
+ */
+export const orderCancelSchema = z.object({
+    reason: annotate(z
+        .string()
+        .trim()
+        .min(5, "Give a short reason — the seller sees this.")
+        .max(500, "Keep it under 500 characters."), {
+        section: "cancel",
+        sectionLabel: "Why are you cancelling?",
+        sectionRequired: true,
+        quick: true,
+        order: 1,
+        row: "full",
+        kind: "textarea",
+    }),
+});
+/**
+ * Uploading proof of a manual (cash / UPI / EMI) payment.
+ *
+ * ## Every field here is evidence
+ *
+ * An admin verifies or rejects on this, and a rejection carries a 7-day ban
+ * cascade — so the cost of a sloppy submission is real in both directions.
+ *
+ * `buyerMarkedPaid` and `buyerFraudAgreementAccepted` are `z.literal(true)`
+ * rather than `z.boolean()`: an unchecked declaration is not a submission with
+ * a `false` in it, it is a form that must not send.
+ */
+export const paymentProofSchema = z.object({
+    transactionId: annotate(z
+        .string()
+        .trim()
+        .min(4, "Enter the UTR or reference number from your payment app.")
+        .max(120, "Keep the reference under 120 characters."), { section: "proof", sectionLabel: "Your payment", sectionRequired: true, quick: true, order: 1, row: "pair" }),
+    /*
+     * The UPI ID the buyer actually sent to. Compared against the store's
+     * displayed one so a mismatch is flagged to the admin — which is why the
+     * shape matters, not just its presence.
+     */
+    buyerReportedUpiId: annotate(z
+        .string()
+        .trim()
+        .regex(/^[\w.\-_]{2,256}@[a-zA-Z]{2,64}$/, "Enter the UPI ID you paid to, e.g. name@bank.")
+        .optional()
+        .or(z.literal("")), { section: "proof", order: 2, row: "pair" }),
+    buyerMarkedPaid: annotate(z.literal(true, { errorMap: () => ({ message: "Confirm that you have sent the payment." }) }), { section: "declare", sectionLabel: "Declaration", sectionRequired: true, order: 1, row: "full" }),
+    buyerFraudAgreementAccepted: annotate(z.literal(true, {
+        errorMap: () => ({ message: "You must accept the fraud policy to submit proof." }),
+    }), { section: "declare", order: 2, row: "full" }),
+});

package/dist/features/scams/schemas/report-form.d.ts

@@ -0,0 +1,63 @@
+import { z } from "zod";
+export declare const scamReportFormSchema: z.ZodEffects<z.ZodObject<{
+    displayName: z.ZodString;
+    phones: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    upiIds: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    emails: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    scamType: z.ZodString;
+    scamPlatform: z.ZodOptional<z.ZodString>;
+    amountLost: z.ZodOptional<z.ZodNumber>;
+    itemInvolved: z.ZodOptional<z.ZodString>;
+    description: z.ZodString;
+    reportedByAnon: z.ZodOptional<z.ZodBoolean>;
+    agreed: z.ZodLiteral<true>;
+}, "strip", z.ZodTypeAny, {
+    displayName: string;
+    description: string;
+    scamType: string;
+    agreed: true;
+    reportedByAnon?: boolean | undefined;
+    scamPlatform?: string | undefined;
+    amountLost?: number | undefined;
+    itemInvolved?: string | undefined;
+    phones?: string[] | undefined;
+    upiIds?: string[] | undefined;
+    emails?: string[] | undefined;
+}, {
+    displayName: string;
+    description: string;
+    scamType: string;
+    agreed: true;
+    reportedByAnon?: boolean | undefined;
+    scamPlatform?: string | undefined;
+    amountLost?: number | undefined;
+    itemInvolved?: string | undefined;
+    phones?: string[] | undefined;
+    upiIds?: string[] | undefined;
+    emails?: string[] | undefined;
+}>, {
+    displayName: string;
+    description: string;
+    scamType: string;
+    agreed: true;
+    reportedByAnon?: boolean | undefined;
+    scamPlatform?: string | undefined;
+    amountLost?: number | undefined;
+    itemInvolved?: string | undefined;
+    phones?: string[] | undefined;
+    upiIds?: string[] | undefined;
+    emails?: string[] | undefined;
+}, {
+    displayName: string;
+    description: string;
+    scamType: string;
+    agreed: true;
+    reportedByAnon?: boolean | undefined;
+    scamPlatform?: string | undefined;
+    amountLost?: number | undefined;
+    itemInvolved?: string | undefined;
+    phones?: string[] | undefined;
+    upiIds?: string[] | undefined;
+    emails?: string[] | undefined;
+}>;
+export type ScamReportFormValues = z.infer<typeof scamReportFormSchema>;

package/dist/features/scams/schemas/report-form.js

@@ -0,0 +1,88 @@
+/*
+ * WHY: The public scam-report form (`/scams/report`) rendered `<Form>` with no
+ *      schema. It is the highest-consequence unvalidated form in the app: a
+ *      submission names a real person or business by phone number, UPI ID or
+ *      email and asks the platform to publish an accusation against them.
+ *
+ *      Everything was free text. `amountLost` in particular was a string with
+ *      no bound, and it is displayed on the public scammer profile.
+ *
+ * WHAT: The submit contract.
+ *
+ * ## At least one identifier is required, and no single one is
+ *
+ * A report naming nobody is unactionable, but demanding a phone number would
+ * reject a report about an email-only scammer. So the requirement is on the
+ * SET, checked in a `superRefine` — the same shape the payout-method schema
+ * uses for its per-type bank rules.
+ *
+ * ## `agreed` is `z.literal(true)`
+ *
+ * An unticked declaration is not a submission carrying `false`; it is a form
+ * that must not send. The user is asserting the accusation is truthful, and
+ * that assertion is what makes publishing it defensible.
+ *
+ * EXPORTS: scamReportFormSchema, type ScamReportFormValues
+ *
+ * @tag domain:scams
+ * @tag layer:schema
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:scams/report page
+ * @tag sideEffects:none
+ */
+import { z } from "zod";
+import { annotate } from "../../shell/field-ui-meta";
+const UPI_VPA_RE = /^[\w.\-_]{2,256}@[a-zA-Z]{2,64}$/;
+const PHONE_RE = /^(\+?91[-\s]?)?[6-9]\d{9}$/;
+export const scamReportFormSchema = z
+    .object({
+    displayName: annotate(z.string().trim().min(2, "Give the name or handle they used.").max(160), { section: "who", sectionLabel: "Who", sectionRequired: true, quick: true, order: 1, row: "full" }),
+    // Each entry is shape-checked; the SET is checked in the superRefine.
+    phones: annotate(z.array(z.string().trim().regex(PHONE_RE, "Enter a 10-digit Indian mobile number.")).max(10).optional(), { section: "who", order: 2, row: "full", kind: "list" }),
+    upiIds: annotate(z.array(z.string().trim().regex(UPI_VPA_RE, "Enter a valid UPI ID, e.g. name@bank.")).max(10).optional(), { section: "who", order: 3, row: "full", kind: "list" }),
+    emails: annotate(z.array(z.string().trim().toLowerCase().email("Enter a valid email address.")).max(10).optional(), { section: "who", order: 4, row: "full", kind: "list" }),
+    scamType: annotate(z.string().trim().min(1, "Choose what kind of scam this was."), {
+        section: "what", sectionLabel: "What happened", sectionRequired: true, quick: true, order: 1, row: "pair",
+    }),
+    scamPlatform: annotate(z.string().trim().max(120).optional(), {
+        section: "what", order: 2, row: "pair",
+    }),
+    /*
+     * Coerced and bounded. It arrives from a text input and is rendered on the
+     * public profile, so an unbounded string could publish "one MILLION crore"
+     * as a loss figure. Empty is allowed — plenty of reports are about an
+     * attempt that cost nothing.
+     */
+    amountLost: annotate(z.coerce
+        .number({ invalid_type_error: "Enter the amount as a number." })
+        .min(0, "An amount cannot be negative.")
+        .max(100000000, "That looks like a typo.")
+        .optional(), { section: "what", order: 3, row: "pair", kind: "number" }),
+    itemInvolved: annotate(z.string().trim().max(200).optional(), {
+        section: "what", order: 4, row: "pair",
+    }),
+    description: annotate(z
+        .string()
+        .trim()
+        .min(30, "Describe what happened in at least 30 characters — this is the evidence.")
+        .max(5000, "Keep the description under 5000 characters."), { section: "what", order: 5, row: "full", kind: "textarea" }),
+    reportedByAnon: annotate(z.boolean().optional(), {
+        section: "declare", sectionLabel: "Declaration", order: 1, row: "quarter",
+    }),
+    agreed: annotate(z.literal(true, {
+        errorMap: () => ({ message: "You must confirm this report is truthful before submitting." }),
+    }), { section: "declare", order: 2, row: "full" }),
+})
+    .superRefine((v, ctx) => {
+    const count = (v.phones?.length ?? 0) + (v.upiIds?.length ?? 0) + (v.emails?.length ?? 0);
+    if (count === 0) {
+        // Reported on `phones` so the message has a field to land on; the text
+        // names all three, because any one of them satisfies the rule.
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["phones"],
+            message: "Add at least one phone number, UPI ID or email — a report with no identifier cannot be acted on.",
+        });
+    }
+});

package/dist/features/store-extensions/schemas/sublisting-category-form.d.ts

@@ -0,0 +1,15 @@
+import { z } from "zod";
+export declare const sublistingCategoryFormSchema: z.ZodObject<{
+    name: z.ZodString;
+    itemCode: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    description?: string | undefined;
+    itemCode?: string | undefined;
+}, {
+    name: string;
+    description?: string | undefined;
+    itemCode?: string | undefined;
+}>;
+export type SublistingCategoryFormValues = z.infer<typeof sublistingCategoryFormSchema>;

package/dist/features/store-extensions/schemas/sublisting-category-form.js

@@ -0,0 +1,41 @@
+/*
+ * WHY: Both sub-listing-category pages (`new` and `[id]/edit`) rendered
+ *      `<Form>` with no schema and guarded only on `!name.trim()`. A
+ *      sub-listing category groups the same real-world collectible across
+ *      grades and conditions, so its `itemCode` is the identifier buyers match
+ *      against — and it was unbounded free text.
+ *
+ * WHAT: One schema for both pages.
+ *
+ * `slug`/`seo` are absent: the route derives them, and the sibling route
+ * already recomputes `seo.title`/`seo.description` on rename (verified, not
+ * assumed — it is one of the RC #39 instances that turned out already fixed).
+ *
+ * EXPORTS: sublistingCategoryFormSchema, type SublistingCategoryFormValues
+ *
+ * @tag domain:store-extensions
+ * @tag layer:schema
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:store/sublisting-categories pages
+ * @tag sideEffects:none
+ */
+import { z } from "zod";
+import { annotate } from "../../shell/field-ui-meta";
+export const sublistingCategoryFormSchema = z.object({
+    name: annotate(z.string().trim().min(2, "A name is required.").max(160), {
+        section: "basics", sectionLabel: "Sub-listing", sectionRequired: true,
+        quick: true, order: 1, row: "full",
+    }),
+    /*
+     * The catalogue identifier buyers match on — e.g. "108/120". Bounded and
+     * trimmed so it stays comparable; a stray space made two otherwise identical
+     * codes distinct.
+     */
+    itemCode: annotate(z.string().trim().max(80, "Keep the item code under 80 characters.").optional(), {
+        section: "basics", quick: true, order: 2, row: "pair",
+    }),
+    description: annotate(z.string().trim().max(1000, "Keep the description under 1000 characters.").optional(), {
+        section: "basics", order: 3, row: "full", kind: "textarea",
+    }),
+});

package/dist/index.d.ts

@@ -3286,3 +3286,8 @@ export type { NormalizedError, NormalizedApiError, NormalizedAppError, Normalize
 export { CART_LANE, CART_LANE_PRIORITY, CART_LANE_LABELS, laneOf, activeLane, laneItems, laneCounts, isLaneCheckoutable, laneBlockReason, isLockedLane, canAddNewItems, type CartLane, type LaneAssignable, } from "./_internal/shared/checkout/lanes";
 export { newsletterSubscribeSchema, quickCreateTaxonomySchema, payoutMarkPaidSchema, } from "./features/admin/schemas/small-forms";
 export { raffleEntrySchema } from "./features/contact/schemas/inquiry-forms";
+export { orderCancelSchema, paymentProofSchema, } from "./features/orders/schemas/buyer-forms";
+export { scamReportFormSchema } from "./features/scams/schemas/report-form";
+export { sublistingCategoryFormSchema } from "./features/store-extensions/schemas/sublisting-category-form";
+export { adminAddressFormSchema, adminStoreUpdateSchema, announcementBarSchema, } from "./features/admin/schemas/admin-editor-forms";
+export { adminOrderUpdateSchema, employeeInviteSchema, hardBanReasonSchema, featureFlagsUpdateSchema, adminAdFormSchema, } from "./features/admin/schemas/admin-ops-forms";

package/dist/index.js

@@ -5695,3 +5695,8 @@ export { normalizeError, getErrorMessage, isApiNormalized, isAppNormalized, isFi
 export { CART_LANE, CART_LANE_PRIORITY, CART_LANE_LABELS, laneOf, activeLane, laneItems, laneCounts, isLaneCheckoutable, laneBlockReason, isLockedLane, canAddNewItems, } from "./_internal/shared/checkout/lanes";
 export { newsletterSubscribeSchema, quickCreateTaxonomySchema, payoutMarkPaidSchema, } from "./features/admin/schemas/small-forms";
 export { raffleEntrySchema } from "./features/contact/schemas/inquiry-forms";
+export { orderCancelSchema, paymentProofSchema, } from "./features/orders/schemas/buyer-forms";
+export { scamReportFormSchema } from "./features/scams/schemas/report-form";
+export { sublistingCategoryFormSchema } from "./features/store-extensions/schemas/sublisting-category-form";
+export { adminAddressFormSchema, adminStoreUpdateSchema, announcementBarSchema, } from "./features/admin/schemas/admin-editor-forms";
+export { adminOrderUpdateSchema, employeeInviteSchema, hardBanReasonSchema, featureFlagsUpdateSchema, adminAdFormSchema, } from "./features/admin/schemas/admin-ops-forms";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mohasinac/appkit",
-  "version": "4.17.0",
+  "version": "4.18.0",
   "license": "MIT",
   "publishConfig": {
     "access": "public"