@mohasinac/appkit 4.17.0 → 4.19.0

package/dist/features/admin/schemas/site-settings-form.d.ts

@@ -0,0 +1,309 @@
+import { z } from "zod";
+export declare const siteSettingsFormSchema: z.ZodObject<{
+    announcementBar: z.ZodOptional<z.ZodObject<{
+        message: z.ZodOptional<z.ZodString>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        link: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        message: z.ZodOptional<z.ZodString>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        link: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        message: z.ZodOptional<z.ZodString>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        link: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    contact: z.ZodOptional<z.ZodObject<{
+        email: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        supportEmail: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        phone: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        email: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        supportEmail: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        phone: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        email: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        supportEmail: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        phone: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    commissions: z.ZodOptional<z.ZodObject<{
+        platformFeePercent: z.ZodOptional<z.ZodNumber>;
+        gatewayFeePercent: z.ZodOptional<z.ZodNumber>;
+        platformFeeMax: z.ZodOptional<z.ZodNumber>;
+        minPayoutAmount: z.ZodOptional<z.ZodNumber>;
+        payoutHoldDays: z.ZodOptional<z.ZodNumber>;
+        codHandlingFee: z.ZodOptional<z.ZodNumber>;
+        codDepositPercent: z.ZodOptional<z.ZodNumber>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        platformFeePercent: z.ZodOptional<z.ZodNumber>;
+        gatewayFeePercent: z.ZodOptional<z.ZodNumber>;
+        platformFeeMax: z.ZodOptional<z.ZodNumber>;
+        minPayoutAmount: z.ZodOptional<z.ZodNumber>;
+        payoutHoldDays: z.ZodOptional<z.ZodNumber>;
+        codHandlingFee: z.ZodOptional<z.ZodNumber>;
+        codDepositPercent: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        platformFeePercent: z.ZodOptional<z.ZodNumber>;
+        gatewayFeePercent: z.ZodOptional<z.ZodNumber>;
+        platformFeeMax: z.ZodOptional<z.ZodNumber>;
+        minPayoutAmount: z.ZodOptional<z.ZodNumber>;
+        payoutHoldDays: z.ZodOptional<z.ZodNumber>;
+        codHandlingFee: z.ZodOptional<z.ZodNumber>;
+        codDepositPercent: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    laborRate: z.ZodOptional<z.ZodObject<{
+        hourlyRate: z.ZodOptional<z.ZodNumber>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        hourlyRate: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        hourlyRate: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    emi: z.ZodOptional<z.ZodObject<{
+        surchargePercent: z.ZodOptional<z.ZodNumber>;
+        surchargeSellerSharePercent: z.ZodOptional<z.ZodNumber>;
+        minOrderAmount: z.ZodOptional<z.ZodNumber>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        surchargePercent: z.ZodOptional<z.ZodNumber>;
+        surchargeSellerSharePercent: z.ZodOptional<z.ZodNumber>;
+        minOrderAmount: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        surchargePercent: z.ZodOptional<z.ZodNumber>;
+        surchargeSellerSharePercent: z.ZodOptional<z.ZodNumber>;
+        minOrderAmount: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    gst: z.ZodOptional<z.ZodObject<{
+        gstin: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        ratePercent: z.ZodOptional<z.ZodNumber>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        gstin: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        ratePercent: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        gstin: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        ratePercent: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    auctionConfig: z.ZodOptional<z.ZodObject<{
+        minBidIncrement: z.ZodOptional<z.ZodNumber>;
+        extensionMinutes: z.ZodOptional<z.ZodNumber>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        minBidIncrement: z.ZodOptional<z.ZodNumber>;
+        extensionMinutes: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        minBidIncrement: z.ZodOptional<z.ZodNumber>;
+        extensionMinutes: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    seo: z.ZodOptional<z.ZodObject<{
+        title: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        title: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        title: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    announcementBar: z.ZodOptional<z.ZodObject<{
+        message: z.ZodOptional<z.ZodString>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        link: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        message: z.ZodOptional<z.ZodString>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        link: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        message: z.ZodOptional<z.ZodString>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        link: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    contact: z.ZodOptional<z.ZodObject<{
+        email: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        supportEmail: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        phone: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        email: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        supportEmail: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        phone: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        email: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        supportEmail: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        phone: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    commissions: z.ZodOptional<z.ZodObject<{
+        platformFeePercent: z.ZodOptional<z.ZodNumber>;
+        gatewayFeePercent: z.ZodOptional<z.ZodNumber>;
+        platformFeeMax: z.ZodOptional<z.ZodNumber>;
+        minPayoutAmount: z.ZodOptional<z.ZodNumber>;
+        payoutHoldDays: z.ZodOptional<z.ZodNumber>;
+        codHandlingFee: z.ZodOptional<z.ZodNumber>;
+        codDepositPercent: z.ZodOptional<z.ZodNumber>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        platformFeePercent: z.ZodOptional<z.ZodNumber>;
+        gatewayFeePercent: z.ZodOptional<z.ZodNumber>;
+        platformFeeMax: z.ZodOptional<z.ZodNumber>;
+        minPayoutAmount: z.ZodOptional<z.ZodNumber>;
+        payoutHoldDays: z.ZodOptional<z.ZodNumber>;
+        codHandlingFee: z.ZodOptional<z.ZodNumber>;
+        codDepositPercent: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        platformFeePercent: z.ZodOptional<z.ZodNumber>;
+        gatewayFeePercent: z.ZodOptional<z.ZodNumber>;
+        platformFeeMax: z.ZodOptional<z.ZodNumber>;
+        minPayoutAmount: z.ZodOptional<z.ZodNumber>;
+        payoutHoldDays: z.ZodOptional<z.ZodNumber>;
+        codHandlingFee: z.ZodOptional<z.ZodNumber>;
+        codDepositPercent: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    laborRate: z.ZodOptional<z.ZodObject<{
+        hourlyRate: z.ZodOptional<z.ZodNumber>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        hourlyRate: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        hourlyRate: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    emi: z.ZodOptional<z.ZodObject<{
+        surchargePercent: z.ZodOptional<z.ZodNumber>;
+        surchargeSellerSharePercent: z.ZodOptional<z.ZodNumber>;
+        minOrderAmount: z.ZodOptional<z.ZodNumber>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        surchargePercent: z.ZodOptional<z.ZodNumber>;
+        surchargeSellerSharePercent: z.ZodOptional<z.ZodNumber>;
+        minOrderAmount: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        surchargePercent: z.ZodOptional<z.ZodNumber>;
+        surchargeSellerSharePercent: z.ZodOptional<z.ZodNumber>;
+        minOrderAmount: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    gst: z.ZodOptional<z.ZodObject<{
+        gstin: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        ratePercent: z.ZodOptional<z.ZodNumber>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        gstin: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        ratePercent: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        gstin: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        ratePercent: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    auctionConfig: z.ZodOptional<z.ZodObject<{
+        minBidIncrement: z.ZodOptional<z.ZodNumber>;
+        extensionMinutes: z.ZodOptional<z.ZodNumber>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        minBidIncrement: z.ZodOptional<z.ZodNumber>;
+        extensionMinutes: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        minBidIncrement: z.ZodOptional<z.ZodNumber>;
+        extensionMinutes: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    seo: z.ZodOptional<z.ZodObject<{
+        title: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        title: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        title: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    announcementBar: z.ZodOptional<z.ZodObject<{
+        message: z.ZodOptional<z.ZodString>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        link: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        message: z.ZodOptional<z.ZodString>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        link: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        message: z.ZodOptional<z.ZodString>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        link: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    contact: z.ZodOptional<z.ZodObject<{
+        email: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        supportEmail: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        phone: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        email: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        supportEmail: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        phone: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        email: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        supportEmail: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        phone: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    commissions: z.ZodOptional<z.ZodObject<{
+        platformFeePercent: z.ZodOptional<z.ZodNumber>;
+        gatewayFeePercent: z.ZodOptional<z.ZodNumber>;
+        platformFeeMax: z.ZodOptional<z.ZodNumber>;
+        minPayoutAmount: z.ZodOptional<z.ZodNumber>;
+        payoutHoldDays: z.ZodOptional<z.ZodNumber>;
+        codHandlingFee: z.ZodOptional<z.ZodNumber>;
+        codDepositPercent: z.ZodOptional<z.ZodNumber>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        platformFeePercent: z.ZodOptional<z.ZodNumber>;
+        gatewayFeePercent: z.ZodOptional<z.ZodNumber>;
+        platformFeeMax: z.ZodOptional<z.ZodNumber>;
+        minPayoutAmount: z.ZodOptional<z.ZodNumber>;
+        payoutHoldDays: z.ZodOptional<z.ZodNumber>;
+        codHandlingFee: z.ZodOptional<z.ZodNumber>;
+        codDepositPercent: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        platformFeePercent: z.ZodOptional<z.ZodNumber>;
+        gatewayFeePercent: z.ZodOptional<z.ZodNumber>;
+        platformFeeMax: z.ZodOptional<z.ZodNumber>;
+        minPayoutAmount: z.ZodOptional<z.ZodNumber>;
+        payoutHoldDays: z.ZodOptional<z.ZodNumber>;
+        codHandlingFee: z.ZodOptional<z.ZodNumber>;
+        codDepositPercent: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    laborRate: z.ZodOptional<z.ZodObject<{
+        hourlyRate: z.ZodOptional<z.ZodNumber>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        hourlyRate: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        hourlyRate: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    emi: z.ZodOptional<z.ZodObject<{
+        surchargePercent: z.ZodOptional<z.ZodNumber>;
+        surchargeSellerSharePercent: z.ZodOptional<z.ZodNumber>;
+        minOrderAmount: z.ZodOptional<z.ZodNumber>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        surchargePercent: z.ZodOptional<z.ZodNumber>;
+        surchargeSellerSharePercent: z.ZodOptional<z.ZodNumber>;
+        minOrderAmount: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        surchargePercent: z.ZodOptional<z.ZodNumber>;
+        surchargeSellerSharePercent: z.ZodOptional<z.ZodNumber>;
+        minOrderAmount: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    gst: z.ZodOptional<z.ZodObject<{
+        gstin: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        ratePercent: z.ZodOptional<z.ZodNumber>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        gstin: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        ratePercent: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        gstin: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+        ratePercent: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    auctionConfig: z.ZodOptional<z.ZodObject<{
+        minBidIncrement: z.ZodOptional<z.ZodNumber>;
+        extensionMinutes: z.ZodOptional<z.ZodNumber>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        minBidIncrement: z.ZodOptional<z.ZodNumber>;
+        extensionMinutes: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        minBidIncrement: z.ZodOptional<z.ZodNumber>;
+        extensionMinutes: z.ZodOptional<z.ZodNumber>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    seo: z.ZodOptional<z.ZodObject<{
+        title: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        title: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        title: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>>;
+}, z.ZodTypeAny, "passthrough">>;
+export type SiteSettingsFormValues = z.infer<typeof siteSettingsFormSchema>;

package/dist/features/admin/schemas/site-settings-form.js

@@ -0,0 +1,159 @@
+/*
+ * WHY: `AdminSiteSettingsView` is 1826 lines with **21 `<Form>` tags and no
+ *      schema on any of them**. All 21 are tabs over one document and save
+ *      through a single `buildFullPayload()` → one PUT, so this is one form
+ *      wearing twenty-one hats, entirely unvalidated.
+ *
+ *      Live consequences already documented for this exact payload:
+ *        · `announcementBar` was saved under the key `text` until 2026-08-24 —
+ *          a key no renderer has ever read — so admin-authored announcements
+ *          saved successfully and never appeared.
+ *        · `adSettings`, `integrations`, `platformLimits`, `tagline` and
+ *          `favicon` were written here while undeclared on
+ *          `SiteSettingsDocument`, which is how an unmasked ad-credentials
+ *          blob reached anonymous callers (Recurrent Root Cause #70).
+ *
+ * WHAT: A schema that validates the fields with real rules and **passes the
+ *       rest through untouched**.
+ *
+ * ## 🛑 This one is `.passthrough()`, deliberately, and that is the whole point
+ *
+ * Everywhere else in this rework an update schema is `.strict()`. Here that
+ * would be actively dangerous. `buildFullPayload()` demonstrably writes keys
+ * the TypeScript interface does not declare, and a closed schema would SILENTLY
+ * STRIP every one of them on the next save — turning a validation improvement
+ * into the largest single act of data loss in the codebase. That is the
+ * `productBaseSchema` failure, aimed at the site's entire configuration.
+ *
+ * So: constrain what can be reasoned about (percentages that must be 0–100,
+ * money that must be non-negative, a contact email that must be an email), and
+ * let the rest pass. Tightening any group is a separate, evidence-led change —
+ * per the data-integrity protocol, only after a full-collection round-trip
+ * diff proves the schema is a superset of what is stored.
+ *
+ * EXPORTS: siteSettingsFormSchema, type SiteSettingsFormValues
+ *
+ * @tag domain:admin
+ * @tag layer:schema
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:AdminSiteSettingsView
+ * @tag sideEffects:none
+ */
+import { z } from "zod";
+/** A percentage a human types into a settings box. */
+const percent = (label) => z.coerce
+    .number({ invalid_type_error: `${label} must be a number.` })
+    .min(0, `${label} cannot be negative.`)
+    .max(100, `${label} cannot exceed 100%.`)
+    .optional();
+/** A non-negative rupee amount. */
+const money = (label) => z.coerce
+    .number({ invalid_type_error: `${label} must be a number.` })
+    .min(0, `${label} cannot be negative.`)
+    .optional();
+/** An optional email box — blank is allowed, malformed is not. */
+const optionalEmail = z
+    .string()
+    .trim()
+    .toLowerCase()
+    .email("That doesn't look like an email address.")
+    .optional()
+    .or(z.literal(""));
+/** An optional URL box — blank is allowed, malformed is not. */
+const optionalUrl = z
+    .string()
+    .trim()
+    .url("Enter a full URL, including https://.")
+    .optional()
+    .or(z.literal(""));
+export const siteSettingsFormSchema = z
+    .object({
+    /*
+     * 🛑 `message` is the canonical key. Naming it here is what stops the
+     * `text` mistake recurring: a payload carrying `text` still passes (the
+     * schema is open), but the one key a renderer reads is now declared, and
+     * the form is typed against it.
+     */
+    announcementBar: z
+        .object({
+        message: z.string().trim().max(300, "Keep the announcement under 300 characters.").optional(),
+        enabled: z.boolean().optional(),
+        link: optionalUrl,
+    })
+        .passthrough()
+        .optional(),
+    contact: z
+        .object({
+        email: optionalEmail,
+        supportEmail: optionalEmail,
+        phone: z.string().trim().max(40).optional(),
+    })
+        .passthrough()
+        .optional(),
+    /*
+     * The commission block. Every one of these is a percentage or an amount
+     * that multiplies against real orders, and all were free text — a stray
+     * keystroke in `platformFeePercent` changes what every seller is charged.
+     */
+    commissions: z
+        .object({
+        platformFeePercent: percent("Platform fee"),
+        gatewayFeePercent: percent("Gateway fee"),
+        platformFeeMax: money("Platform fee cap"),
+        minPayoutAmount: money("Minimum payout"),
+        payoutHoldDays: z.coerce.number().int().min(0).max(365).optional(),
+        codHandlingFee: money("COD handling fee"),
+        codDepositPercent: percent("COD deposit"),
+    })
+        .passthrough()
+        .optional(),
+    laborRate: z
+        .object({ hourlyRate: money("Hourly rate") })
+        .passthrough()
+        .optional(),
+    emi: z
+        .object({
+        surchargePercent: percent("EMI surcharge"),
+        surchargeSellerSharePercent: percent("Seller share"),
+        minOrderAmount: money("Minimum EMI order"),
+    })
+        .passthrough()
+        .optional(),
+    gst: z
+        .object({
+        // 15 characters, the statutory format. A wrong GSTIN appears on every
+        // invoice the platform issues.
+        gstin: z
+            .string()
+            .trim()
+            .toUpperCase()
+            .regex(/^\d{2}[A-Z]{5}\d{4}[A-Z]\d[A-Z\d][A-Z\d]$/, "That is not a valid 15-character GSTIN.")
+            .optional()
+            .or(z.literal("")),
+        ratePercent: percent("GST rate"),
+    })
+        .passthrough()
+        .optional(),
+    auctionConfig: z
+        .object({
+        minBidIncrement: money("Minimum bid increment"),
+        extensionMinutes: z.coerce.number().int().min(0).max(1440).optional(),
+    })
+        .passthrough()
+        .optional(),
+    seo: z
+        .object({
+        title: z.string().trim().max(70, "Search engines truncate titles past ~70 characters.").optional(),
+        description: z
+            .string()
+            .trim()
+            .max(160, "Search engines truncate descriptions past ~160 characters.")
+            .optional(),
+    })
+        .passthrough()
+        .optional(),
+})
+    // See the header: OPEN on purpose. `buildFullPayload()` writes keys the
+    // document interface does not declare, and closing this would delete them.
+    .passthrough();

package/dist/features/auctions/components/PlaceBidFormClient.js

@@ -13,6 +13,7 @@ import { useLiveAuctionBid } from "../hooks/useLiveAuctionBid";
 import { AUCTION_BUYOUT_WINDOW_MINUTES } from "../../../_internal/shared/checkout/lanes";
 import { BID_PRESET_MULTIPLIERS, isBuyNowAvailable, resolveMinBid, resolveMinBidIncrement, } from "../../../_internal/shared/features/auctions/config";
 import { normalizeError } from "../../../errors/normalize";
+import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary";
 const __P = {
     p5: "p-[var(--appkit-space-5)]",
 };
@@ -179,10 +180,10 @@ export function PlaceBidFormClient({ productId, currentBid: ssrCurrentBid, start
             }
         });
     }
-    return (_jsxs(Stack, { className: `${__P.p5}`, border: "subtle", gap: "md", rounded: "xl", surface: "muted", children: [_jsxs(Stack, { gap: "xs", children: [_jsxs(Row, { justify: "between", align: "center", children: [_jsx(Text, { size: "xs", color: "muted", children: hasBids ? "Current bid" : "Starting bid" }), _jsx(Text, { size: "xs", color: "muted", children: hasBids ? "Starting bid" : "Minimum bid" })] }), _jsxs(Row, { justify: "between", align: "baseline", children: [_jsx(Span, { size: "xl", weight: "bold", className: "text-primary-600 dark:text-primary-400", children: formatCurrency(currentBid, currency) }), _jsx(Span, { size: "sm", color: "muted", children: formatCurrency(hasBids ? startingBid : minBid, currency) })] }), _jsxs(Text, { size: "xs", color: "faint", children: [bidCount, " ", bidCount === 1 ? "bid" : "bids", " \u00B7 min increment", " ", formatCurrency(minBidIncrement, currency)] })] }), _jsx(LoginRequiredModal, { isOpen: showLoginModal, onClose: () => setShowLoginModal(false), message: "You need to be signed in to place a bid. Please log in or create an account to continue." }), _jsx(Form, { onSubmit: (e) => {
+    return (_jsxs(Stack, { className: `${__P.p5}`, border: "subtle", gap: "md", rounded: "xl", surface: "muted", children: [_jsxs(Stack, { gap: "xs", children: [_jsxs(Row, { justify: "between", align: "center", children: [_jsx(Text, { size: "xs", color: "muted", children: hasBids ? "Current bid" : "Starting bid" }), _jsx(Text, { size: "xs", color: "muted", children: hasBids ? "Starting bid" : "Minimum bid" })] }), _jsxs(Row, { justify: "between", align: "baseline", children: [_jsx(Span, { size: "xl", weight: "bold", className: "text-primary-600 dark:text-primary-400", children: formatCurrency(currentBid, currency) }), _jsx(Span, { size: "sm", color: "muted", children: formatCurrency(hasBids ? startingBid : minBid, currency) })] }), _jsxs(Text, { size: "xs", color: "faint", children: [bidCount, " ", bidCount === 1 ? "bid" : "bids", " \u00B7 min increment", " ", formatCurrency(minBidIncrement, currency)] })] }), _jsx(LoginRequiredModal, { isOpen: showLoginModal, onClose: () => setShowLoginModal(false), message: "You need to be signed in to place a bid. Please log in or create an account to continue." }), _jsx(Form, { schema: schema, onSubmit: (e) => {
                     // handler wired through render-prop below — keeps setFieldError in scope
                     e.preventDefault();
-                }, children: ({ setFieldError, clearErrors }) => (_jsxs(Stack, { gap: "sm", children: [_jsxs(Row, { gap: "xs", wrap: true, role: "radiogroup", "aria-label": "Bid amount preset", children: [BID_PRESET_MULTIPLIERS.map((n) => {
+                }, children: ({ setFieldError, clearErrors }) => (_jsxs(Stack, { gap: "sm", children: [_jsx(FormErrorSummary, {}), _jsxs(Row, { gap: "xs", wrap: true, role: "radiogroup", "aria-label": "Bid amount preset", children: [BID_PRESET_MULTIPLIERS.map((n) => {
                                     const amount = presetAmount(n);
                                     const delta = amount - currentBid;
                                     // `delta` is 0 only for the opening preset on a bid-free

package/dist/features/orders/schemas/buyer-forms.d.ts

@@ -0,0 +1,46 @@
+import { z } from "zod";
+/**
+ * Cancelling an order.
+ *
+ * A reason floor of 5 characters, because this text is what the seller reads
+ * to decide whether to restock, refund early or dispute — and "x" tells them
+ * nothing. Deliberately low: the buyer is cancelling, not writing an essay,
+ * and a high floor would push them to type filler.
+ */
+export declare const orderCancelSchema: z.ZodObject<{
+    reason: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    reason: string;
+}, {
+    reason: string;
+}>;
+export type OrderCancelValues = z.infer<typeof orderCancelSchema>;
+/**
+ * Uploading proof of a manual (cash / UPI / EMI) payment.
+ *
+ * ## Every field here is evidence
+ *
+ * An admin verifies or rejects on this, and a rejection carries a 7-day ban
+ * cascade — so the cost of a sloppy submission is real in both directions.
+ *
+ * `buyerMarkedPaid` and `buyerFraudAgreementAccepted` are `z.literal(true)`
+ * rather than `z.boolean()`: an unchecked declaration is not a submission with
+ * a `false` in it, it is a form that must not send.
+ */
+export declare const paymentProofSchema: z.ZodObject<{
+    transactionId: z.ZodString;
+    buyerReportedUpiId: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+    buyerMarkedPaid: z.ZodLiteral<true>;
+    buyerFraudAgreementAccepted: z.ZodLiteral<true>;
+}, "strip", z.ZodTypeAny, {
+    transactionId: string;
+    buyerMarkedPaid: true;
+    buyerFraudAgreementAccepted: true;
+    buyerReportedUpiId?: string | undefined;
+}, {
+    transactionId: string;
+    buyerMarkedPaid: true;
+    buyerFraudAgreementAccepted: true;
+    buyerReportedUpiId?: string | undefined;
+}>;
+export type PaymentProofValues = z.infer<typeof paymentProofSchema>;

package/dist/features/orders/schemas/buyer-forms.js

@@ -0,0 +1,81 @@
+/*
+ * WHY: Two buyer-facing order forms rendered `<Form>` with no schema.
+ *
+ *      The manual-payment one is the consequential case. It carries the
+ *      buyer's own claim that they have paid — a UTR, the UPI ID they sent to,
+ *      and a fraud declaration — and an admin decides on that evidence whether
+ *      to release goods. `transactionId` was free text with no floor, so a
+ *      single character satisfied it and reached the review queue looking like
+ *      a reference.
+ *
+ * WHAT: The two schemas, plus a shared `cancellationReason`.
+ *
+ * EXPORTS:
+ *   orderCancelSchema, paymentProofSchema, and their inferred value types
+ *
+ * @tag domain:orders
+ * @tag layer:schema
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:user/orders/[id]/cancel,user/orders/[id]/payment
+ * @tag sideEffects:none
+ */
+import { z } from "zod";
+import { annotate } from "../../shell/field-ui-meta";
+/**
+ * Cancelling an order.
+ *
+ * A reason floor of 5 characters, because this text is what the seller reads
+ * to decide whether to restock, refund early or dispute — and "x" tells them
+ * nothing. Deliberately low: the buyer is cancelling, not writing an essay,
+ * and a high floor would push them to type filler.
+ */
+export const orderCancelSchema = z.object({
+    reason: annotate(z
+        .string()
+        .trim()
+        .min(5, "Give a short reason — the seller sees this.")
+        .max(500, "Keep it under 500 characters."), {
+        section: "cancel",
+        sectionLabel: "Why are you cancelling?",
+        sectionRequired: true,
+        quick: true,
+        order: 1,
+        row: "full",
+        kind: "textarea",
+    }),
+});
+/**
+ * Uploading proof of a manual (cash / UPI / EMI) payment.
+ *
+ * ## Every field here is evidence
+ *
+ * An admin verifies or rejects on this, and a rejection carries a 7-day ban
+ * cascade — so the cost of a sloppy submission is real in both directions.
+ *
+ * `buyerMarkedPaid` and `buyerFraudAgreementAccepted` are `z.literal(true)`
+ * rather than `z.boolean()`: an unchecked declaration is not a submission with
+ * a `false` in it, it is a form that must not send.
+ */
+export const paymentProofSchema = z.object({
+    transactionId: annotate(z
+        .string()
+        .trim()
+        .min(4, "Enter the UTR or reference number from your payment app.")
+        .max(120, "Keep the reference under 120 characters."), { section: "proof", sectionLabel: "Your payment", sectionRequired: true, quick: true, order: 1, row: "pair" }),
+    /*
+     * The UPI ID the buyer actually sent to. Compared against the store's
+     * displayed one so a mismatch is flagged to the admin — which is why the
+     * shape matters, not just its presence.
+     */
+    buyerReportedUpiId: annotate(z
+        .string()
+        .trim()
+        .regex(/^[\w.\-_]{2,256}@[a-zA-Z]{2,64}$/, "Enter the UPI ID you paid to, e.g. name@bank.")
+        .optional()
+        .or(z.literal("")), { section: "proof", order: 2, row: "pair" }),
+    buyerMarkedPaid: annotate(z.literal(true, { errorMap: () => ({ message: "Confirm that you have sent the payment." }) }), { section: "declare", sectionLabel: "Declaration", sectionRequired: true, order: 1, row: "full" }),
+    buyerFraudAgreementAccepted: annotate(z.literal(true, {
+        errorMap: () => ({ message: "You must accept the fraud policy to submit proof." }),
+    }), { section: "declare", order: 2, row: "full" }),
+});