@mohasinac/appkit 4.17.0 → 4.19.0

package/dist/features/scams/schemas/report-form.d.ts

@@ -0,0 +1,63 @@
+import { z } from "zod";
+export declare const scamReportFormSchema: z.ZodEffects<z.ZodObject<{
+    displayName: z.ZodString;
+    phones: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    upiIds: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    emails: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    scamType: z.ZodString;
+    scamPlatform: z.ZodOptional<z.ZodString>;
+    amountLost: z.ZodOptional<z.ZodNumber>;
+    itemInvolved: z.ZodOptional<z.ZodString>;
+    description: z.ZodString;
+    reportedByAnon: z.ZodOptional<z.ZodBoolean>;
+    agreed: z.ZodLiteral<true>;
+}, "strip", z.ZodTypeAny, {
+    displayName: string;
+    description: string;
+    scamType: string;
+    agreed: true;
+    reportedByAnon?: boolean | undefined;
+    scamPlatform?: string | undefined;
+    amountLost?: number | undefined;
+    itemInvolved?: string | undefined;
+    phones?: string[] | undefined;
+    upiIds?: string[] | undefined;
+    emails?: string[] | undefined;
+}, {
+    displayName: string;
+    description: string;
+    scamType: string;
+    agreed: true;
+    reportedByAnon?: boolean | undefined;
+    scamPlatform?: string | undefined;
+    amountLost?: number | undefined;
+    itemInvolved?: string | undefined;
+    phones?: string[] | undefined;
+    upiIds?: string[] | undefined;
+    emails?: string[] | undefined;
+}>, {
+    displayName: string;
+    description: string;
+    scamType: string;
+    agreed: true;
+    reportedByAnon?: boolean | undefined;
+    scamPlatform?: string | undefined;
+    amountLost?: number | undefined;
+    itemInvolved?: string | undefined;
+    phones?: string[] | undefined;
+    upiIds?: string[] | undefined;
+    emails?: string[] | undefined;
+}, {
+    displayName: string;
+    description: string;
+    scamType: string;
+    agreed: true;
+    reportedByAnon?: boolean | undefined;
+    scamPlatform?: string | undefined;
+    amountLost?: number | undefined;
+    itemInvolved?: string | undefined;
+    phones?: string[] | undefined;
+    upiIds?: string[] | undefined;
+    emails?: string[] | undefined;
+}>;
+export type ScamReportFormValues = z.infer<typeof scamReportFormSchema>;

package/dist/features/scams/schemas/report-form.js

@@ -0,0 +1,88 @@
+/*
+ * WHY: The public scam-report form (`/scams/report`) rendered `<Form>` with no
+ *      schema. It is the highest-consequence unvalidated form in the app: a
+ *      submission names a real person or business by phone number, UPI ID or
+ *      email and asks the platform to publish an accusation against them.
+ *
+ *      Everything was free text. `amountLost` in particular was a string with
+ *      no bound, and it is displayed on the public scammer profile.
+ *
+ * WHAT: The submit contract.
+ *
+ * ## At least one identifier is required, and no single one is
+ *
+ * A report naming nobody is unactionable, but demanding a phone number would
+ * reject a report about an email-only scammer. So the requirement is on the
+ * SET, checked in a `superRefine` — the same shape the payout-method schema
+ * uses for its per-type bank rules.
+ *
+ * ## `agreed` is `z.literal(true)`
+ *
+ * An unticked declaration is not a submission carrying `false`; it is a form
+ * that must not send. The user is asserting the accusation is truthful, and
+ * that assertion is what makes publishing it defensible.
+ *
+ * EXPORTS: scamReportFormSchema, type ScamReportFormValues
+ *
+ * @tag domain:scams
+ * @tag layer:schema
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:scams/report page
+ * @tag sideEffects:none
+ */
+import { z } from "zod";
+import { annotate } from "../../shell/field-ui-meta";
+const UPI_VPA_RE = /^[\w.\-_]{2,256}@[a-zA-Z]{2,64}$/;
+const PHONE_RE = /^(\+?91[-\s]?)?[6-9]\d{9}$/;
+export const scamReportFormSchema = z
+    .object({
+    displayName: annotate(z.string().trim().min(2, "Give the name or handle they used.").max(160), { section: "who", sectionLabel: "Who", sectionRequired: true, quick: true, order: 1, row: "full" }),
+    // Each entry is shape-checked; the SET is checked in the superRefine.
+    phones: annotate(z.array(z.string().trim().regex(PHONE_RE, "Enter a 10-digit Indian mobile number.")).max(10).optional(), { section: "who", order: 2, row: "full", kind: "list" }),
+    upiIds: annotate(z.array(z.string().trim().regex(UPI_VPA_RE, "Enter a valid UPI ID, e.g. name@bank.")).max(10).optional(), { section: "who", order: 3, row: "full", kind: "list" }),
+    emails: annotate(z.array(z.string().trim().toLowerCase().email("Enter a valid email address.")).max(10).optional(), { section: "who", order: 4, row: "full", kind: "list" }),
+    scamType: annotate(z.string().trim().min(1, "Choose what kind of scam this was."), {
+        section: "what", sectionLabel: "What happened", sectionRequired: true, quick: true, order: 1, row: "pair",
+    }),
+    scamPlatform: annotate(z.string().trim().max(120).optional(), {
+        section: "what", order: 2, row: "pair",
+    }),
+    /*
+     * Coerced and bounded. It arrives from a text input and is rendered on the
+     * public profile, so an unbounded string could publish "one MILLION crore"
+     * as a loss figure. Empty is allowed — plenty of reports are about an
+     * attempt that cost nothing.
+     */
+    amountLost: annotate(z.coerce
+        .number({ invalid_type_error: "Enter the amount as a number." })
+        .min(0, "An amount cannot be negative.")
+        .max(100000000, "That looks like a typo.")
+        .optional(), { section: "what", order: 3, row: "pair", kind: "number" }),
+    itemInvolved: annotate(z.string().trim().max(200).optional(), {
+        section: "what", order: 4, row: "pair",
+    }),
+    description: annotate(z
+        .string()
+        .trim()
+        .min(30, "Describe what happened in at least 30 characters — this is the evidence.")
+        .max(5000, "Keep the description under 5000 characters."), { section: "what", order: 5, row: "full", kind: "textarea" }),
+    reportedByAnon: annotate(z.boolean().optional(), {
+        section: "declare", sectionLabel: "Declaration", order: 1, row: "quarter",
+    }),
+    agreed: annotate(z.literal(true, {
+        errorMap: () => ({ message: "You must confirm this report is truthful before submitting." }),
+    }), { section: "declare", order: 2, row: "full" }),
+})
+    .superRefine((v, ctx) => {
+    const count = (v.phones?.length ?? 0) + (v.upiIds?.length ?? 0) + (v.emails?.length ?? 0);
+    if (count === 0) {
+        // Reported on `phones` so the message has a field to land on; the text
+        // names all three, because any one of them satisfies the rule.
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["phones"],
+            message: "Add at least one phone number, UPI ID or email — a report with no identifier cannot be acted on.",
+        });
+    }
+});

package/dist/features/store-extensions/schemas/sublisting-category-form.d.ts

@@ -0,0 +1,15 @@
+import { z } from "zod";
+export declare const sublistingCategoryFormSchema: z.ZodObject<{
+    name: z.ZodString;
+    itemCode: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    description?: string | undefined;
+    itemCode?: string | undefined;
+}, {
+    name: string;
+    description?: string | undefined;
+    itemCode?: string | undefined;
+}>;
+export type SublistingCategoryFormValues = z.infer<typeof sublistingCategoryFormSchema>;

package/dist/features/store-extensions/schemas/sublisting-category-form.js

@@ -0,0 +1,41 @@
+/*
+ * WHY: Both sub-listing-category pages (`new` and `[id]/edit`) rendered
+ *      `<Form>` with no schema and guarded only on `!name.trim()`. A
+ *      sub-listing category groups the same real-world collectible across
+ *      grades and conditions, so its `itemCode` is the identifier buyers match
+ *      against — and it was unbounded free text.
+ *
+ * WHAT: One schema for both pages.
+ *
+ * `slug`/`seo` are absent: the route derives them, and the sibling route
+ * already recomputes `seo.title`/`seo.description` on rename (verified, not
+ * assumed — it is one of the RC #39 instances that turned out already fixed).
+ *
+ * EXPORTS: sublistingCategoryFormSchema, type SublistingCategoryFormValues
+ *
+ * @tag domain:store-extensions
+ * @tag layer:schema
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:store/sublisting-categories pages
+ * @tag sideEffects:none
+ */
+import { z } from "zod";
+import { annotate } from "../../shell/field-ui-meta";
+export const sublistingCategoryFormSchema = z.object({
+    name: annotate(z.string().trim().min(2, "A name is required.").max(160), {
+        section: "basics", sectionLabel: "Sub-listing", sectionRequired: true,
+        quick: true, order: 1, row: "full",
+    }),
+    /*
+     * The catalogue identifier buyers match on — e.g. "108/120". Bounded and
+     * trimmed so it stays comparable; a stray space made two otherwise identical
+     * codes distinct.
+     */
+    itemCode: annotate(z.string().trim().max(80, "Keep the item code under 80 characters.").optional(), {
+        section: "basics", quick: true, order: 2, row: "pair",
+    }),
+    description: annotate(z.string().trim().max(1000, "Keep the description under 1000 characters.").optional(), {
+        section: "basics", order: 3, row: "full", kind: "textarea",
+    }),
+});

package/dist/features/whatsapp-bot/components/SellerWhatsAppSettingsView.js

@@ -16,6 +16,8 @@ import { apiClient } from "../../../http";
 import { WHATSAPP_SELLER_ENDPOINTS } from "../../../constants/api-endpoints";
 import { ACTIONS } from "../../../_internal/shared/actions/action-registry";
 import { buildPurchaseAnnouncementMessage } from "../helpers/whatsapp";
+import { whatsappSettingsSchema } from "../../admin/schemas/admin-user-form";
+import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary";
 // ---------------------------------------------------------------------------
 // Sub-components
 // ---------------------------------------------------------------------------
@@ -187,10 +189,10 @@ export function SellerWhatsAppSettingsView({ hasCapability }) {
                                     ? cfg?.connected === true
                                     : Boolean(cfg?.[step.checkKey]);
                             return (_jsxs(Row, { gap: "sm", align: "start", children: [_jsx(Row, { textWeight: "bold", textSize: "xs", className: `flex-shrink-0 w-6 h-6 mt-0.5 ${done ? "bg-[var(--appkit-color-success)] text-white" : "bg-[var(--appkit-color-surface-elevated)] text-[var(--appkit-color-text-muted)] dark:text-[var(--appkit-color-text-faint)]"}`, align: "center", justify: "center", rounded: "full", children: done ? "✓" : step.n }), _jsxs(Div, { children: [_jsx(Text, { size: "sm", weight: "medium", color: "primary", children: step.title }), _jsx(Text, { className: "mt-0.5", color: "muted", size: "xs", children: step.body })] })] }, step.n));
-                        }) })] }), _jsxs(Section, { className: CLS_SECTION_CARD, children: [_jsxs(Row, { justify: "between", align: "center", className: "mb-4", children: [_jsx(Heading, { level: 2, size: "sm", weight: "semibold", color: "primary", children: "Connection" }), isLoading ? null : cfg?.connected ? (_jsx(Badge, { variant: "success", children: "Connected" })) : (_jsx(Badge, { variant: "default", children: "Not configured" }))] }), _jsxs(Form, { onSubmit: (e) => {
+                        }) })] }), _jsxs(Section, { className: CLS_SECTION_CARD, children: [_jsxs(Row, { justify: "between", align: "center", className: "mb-4", children: [_jsx(Heading, { level: 2, size: "sm", weight: "semibold", color: "primary", children: "Connection" }), isLoading ? null : cfg?.connected ? (_jsx(Badge, { variant: "success", children: "Connected" })) : (_jsx(Badge, { variant: "default", children: "Not configured" }))] }), _jsxs(Form, { schema: whatsappSettingsSchema, onSubmit: (e) => {
                             e.preventDefault();
                             saveMutation.mutate();
-                        }, spacing: "md", children: [_jsx(Input, { label: "WhatsApp Business Phone Number", value: phoneNumber, onChange: (e) => setPhoneNumber(e.target.value), placeholder: "919876543210", helperText: "Digits only, include country code (e.g. 91 for India)" }), _jsx(Input, { label: "WABA ID (WhatsApp Business Account ID)", value: wabaId, onChange: (e) => setWabaId(e.target.value), placeholder: "123456789012345", helperText: "From Meta Business Manager \u2192 WhatsApp Accounts" }), _jsx(Input, { label: "Catalog ID", value: catalogId, onChange: (e) => setCatalogId(e.target.value), placeholder: "987654321098765", helperText: "From Meta Commerce Manager \u2192 Catalogs" }), _jsx(MaskedTokenInput, { label: "System User Access Token", value: accessToken, onChange: setAccessToken, placeholder: "EAAxxxxxxxx\u2026", helperText: "Long-lived token with WhatsApp Business permissions" }), _jsx(FormActions, { align: "right", children: _jsx(Button, { type: "submit", isLoading: saveMutation.isPending, disabled: saveMutation.isPending, children: saveMutation.isPending ? "Saving…" : ACTIONS.STORE["whatsapp-connect"].label }) })] })] }), _jsxs(Section, { className: CLS_SECTION_CARD, children: [_jsx(Heading, { level: 2, className: "mb-4", color: "primary", size: "sm", weight: "semibold", children: "Catalog Sync" }), _jsxs(Row, { justify: "between", align: "center", className: "mb-4", children: [_jsxs(Div, { children: [_jsx(Text, { size: "sm", color: "muted", children: "Enable catalog sync" }), _jsx(Text, { size: "xs", color: "muted", children: "When enabled, your published standard products can be synced to WhatsApp." })] }), _jsx(Toggle, { checked: syncEnabled, onChange: setSyncEnabled, disabled: !cfg?.connected })] }), cfg?.lastCatalogSyncAt && (_jsxs(Row, { color: "muted", textSize: "xs", gap: "sm", align: "center", className: "mb-3", children: [_jsxs(Text, { children: ["Last sync: ", new Date(cfg.lastCatalogSyncAt).toLocaleString("en-IN")] }), cfg.lastSyncCount !== undefined && _jsxs(Text, { children: ["\u00B7 ", cfg.lastSyncCount, " products"] }), cfg.lastSyncStatus && (_jsx(Badge, { variant: STATUS_VARIANT[cfg.lastSyncStatus] ?? "default", children: cfg.lastSyncStatus }))] })), _jsx(Text, { className: "mb-3", color: "faint", size: "xs", children: "Only published standard products are synced. Auctions and pre-orders are excluded. Batches of up to 50 products per call." }), _jsxs(Row, { gap: "3", children: [_jsx(Button, { onClick: () => syncMutation.mutate(), isLoading: syncMutation.isPending, disabled: !cfg?.connected || !syncEnabled || syncMutation.isPending, variant: "secondary", children: syncMutation.isPending ? "Syncing…" : ACTIONS.STORE["whatsapp-catalog-sync"].label }), _jsx(Button, { onClick: () => void startImport(), isLoading: importing, disabled: !cfg?.connected || !syncEnabled || importing, variant: "secondary", children: importing ? "Importing…" : ACTIONS.STORE["whatsapp-catalog-import"].label })] }), _jsxs(Text, { className: "mt-3", color: "faint", size: "xs", children: [_jsx(Span, { weight: "bold", children: "Push" }), " sends your published standard products to WhatsApp.", " ", _jsx(Span, { weight: "bold", children: "Import" }), " creates draft products from your WhatsApp catalog. Products are matched by slug in the description field."] })] }), _jsxs(Section, { className: CLS_SECTION_CARD, children: [_jsx(Heading, { level: 2, className: "mb-2", color: "primary", size: "sm", weight: "semibold", children: "Purchase Announcement Preview" }), _jsx(Text, { className: "mb-3", color: "muted", size: "xs", children: "This message is sent automatically to your phone and the platform admin when a new order is placed." }), _jsx(Div, { textSize: "sm", className: "font-mono", color: "primary", surface: "muted", padding: "inline", rounded: "lg", children: buildPurchaseAnnouncementMessage({
+                        }, spacing: "md", children: [_jsx(FormErrorSummary, {}), _jsx(Input, { label: "WhatsApp Business Phone Number", value: phoneNumber, onChange: (e) => setPhoneNumber(e.target.value), placeholder: "919876543210", helperText: "Digits only, include country code (e.g. 91 for India)" }), _jsx(Input, { label: "WABA ID (WhatsApp Business Account ID)", value: wabaId, onChange: (e) => setWabaId(e.target.value), placeholder: "123456789012345", helperText: "From Meta Business Manager \u2192 WhatsApp Accounts" }), _jsx(Input, { label: "Catalog ID", value: catalogId, onChange: (e) => setCatalogId(e.target.value), placeholder: "987654321098765", helperText: "From Meta Commerce Manager \u2192 Catalogs" }), _jsx(MaskedTokenInput, { label: "System User Access Token", value: accessToken, onChange: setAccessToken, placeholder: "EAAxxxxxxxx\u2026", helperText: "Long-lived token with WhatsApp Business permissions" }), _jsx(FormActions, { align: "right", children: _jsx(Button, { type: "submit", isLoading: saveMutation.isPending, disabled: saveMutation.isPending, children: saveMutation.isPending ? "Saving…" : ACTIONS.STORE["whatsapp-connect"].label }) })] })] }), _jsxs(Section, { className: CLS_SECTION_CARD, children: [_jsx(Heading, { level: 2, className: "mb-4", color: "primary", size: "sm", weight: "semibold", children: "Catalog Sync" }), _jsxs(Row, { justify: "between", align: "center", className: "mb-4", children: [_jsxs(Div, { children: [_jsx(Text, { size: "sm", color: "muted", children: "Enable catalog sync" }), _jsx(Text, { size: "xs", color: "muted", children: "When enabled, your published standard products can be synced to WhatsApp." })] }), _jsx(Toggle, { checked: syncEnabled, onChange: setSyncEnabled, disabled: !cfg?.connected })] }), cfg?.lastCatalogSyncAt && (_jsxs(Row, { color: "muted", textSize: "xs", gap: "sm", align: "center", className: "mb-3", children: [_jsxs(Text, { children: ["Last sync: ", new Date(cfg.lastCatalogSyncAt).toLocaleString("en-IN")] }), cfg.lastSyncCount !== undefined && _jsxs(Text, { children: ["\u00B7 ", cfg.lastSyncCount, " products"] }), cfg.lastSyncStatus && (_jsx(Badge, { variant: STATUS_VARIANT[cfg.lastSyncStatus] ?? "default", children: cfg.lastSyncStatus }))] })), _jsx(Text, { className: "mb-3", color: "faint", size: "xs", children: "Only published standard products are synced. Auctions and pre-orders are excluded. Batches of up to 50 products per call." }), _jsxs(Row, { gap: "3", children: [_jsx(Button, { onClick: () => syncMutation.mutate(), isLoading: syncMutation.isPending, disabled: !cfg?.connected || !syncEnabled || syncMutation.isPending, variant: "secondary", children: syncMutation.isPending ? "Syncing…" : ACTIONS.STORE["whatsapp-catalog-sync"].label }), _jsx(Button, { onClick: () => void startImport(), isLoading: importing, disabled: !cfg?.connected || !syncEnabled || importing, variant: "secondary", children: importing ? "Importing…" : ACTIONS.STORE["whatsapp-catalog-import"].label })] }), _jsxs(Text, { className: "mt-3", color: "faint", size: "xs", children: [_jsx(Span, { weight: "bold", children: "Push" }), " sends your published standard products to WhatsApp.", " ", _jsx(Span, { weight: "bold", children: "Import" }), " creates draft products from your WhatsApp catalog. Products are matched by slug in the description field."] })] }), _jsxs(Section, { className: CLS_SECTION_CARD, children: [_jsx(Heading, { level: 2, className: "mb-2", color: "primary", size: "sm", weight: "semibold", children: "Purchase Announcement Preview" }), _jsx(Text, { className: "mb-3", color: "muted", size: "xs", children: "This message is sent automatically to your phone and the platform admin when a new order is placed." }), _jsx(Div, { textSize: "sm", className: "font-mono", color: "primary", surface: "muted", padding: "inline", rounded: "lg", children: buildPurchaseAnnouncementMessage({
                             buyerName: "Ravi K.",
                             firstItemName: "Charizard PSA 9",
                             additionalItemCount: 2,

package/dist/index.d.ts

@@ -3286,3 +3286,11 @@ export type { NormalizedError, NormalizedApiError, NormalizedAppError, Normalize
 export { CART_LANE, CART_LANE_PRIORITY, CART_LANE_LABELS, laneOf, activeLane, laneItems, laneCounts, isLaneCheckoutable, laneBlockReason, isLockedLane, canAddNewItems, type CartLane, type LaneAssignable, } from "./_internal/shared/checkout/lanes";
 export { newsletterSubscribeSchema, quickCreateTaxonomySchema, payoutMarkPaidSchema, } from "./features/admin/schemas/small-forms";
 export { raffleEntrySchema } from "./features/contact/schemas/inquiry-forms";
+export { orderCancelSchema, paymentProofSchema, } from "./features/orders/schemas/buyer-forms";
+export { scamReportFormSchema } from "./features/scams/schemas/report-form";
+export { sublistingCategoryFormSchema } from "./features/store-extensions/schemas/sublisting-category-form";
+export { adminAddressFormSchema, adminStoreUpdateSchema, announcementBarSchema, } from "./features/admin/schemas/admin-editor-forms";
+export { adminOrderUpdateSchema, employeeInviteSchema, hardBanReasonSchema, featureFlagsUpdateSchema, adminAdFormSchema, } from "./features/admin/schemas/admin-ops-forms";
+export { changeEmailSchema } from "./features/account/schemas/index";
+export { adminUserUpdateSchema, whatsappSettingsSchema, lotteryPullSchema, } from "./features/admin/schemas/admin-user-form";
+export { siteSettingsFormSchema } from "./features/admin/schemas/site-settings-form";

package/dist/index.js

@@ -5695,3 +5695,11 @@ export { normalizeError, getErrorMessage, isApiNormalized, isAppNormalized, isFi
 export { CART_LANE, CART_LANE_PRIORITY, CART_LANE_LABELS, laneOf, activeLane, laneItems, laneCounts, isLaneCheckoutable, laneBlockReason, isLockedLane, canAddNewItems, } from "./_internal/shared/checkout/lanes";
 export { newsletterSubscribeSchema, quickCreateTaxonomySchema, payoutMarkPaidSchema, } from "./features/admin/schemas/small-forms";
 export { raffleEntrySchema } from "./features/contact/schemas/inquiry-forms";
+export { orderCancelSchema, paymentProofSchema, } from "./features/orders/schemas/buyer-forms";
+export { scamReportFormSchema } from "./features/scams/schemas/report-form";
+export { sublistingCategoryFormSchema } from "./features/store-extensions/schemas/sublisting-category-form";
+export { adminAddressFormSchema, adminStoreUpdateSchema, announcementBarSchema, } from "./features/admin/schemas/admin-editor-forms";
+export { adminOrderUpdateSchema, employeeInviteSchema, hardBanReasonSchema, featureFlagsUpdateSchema, adminAdFormSchema, } from "./features/admin/schemas/admin-ops-forms";
+export { changeEmailSchema } from "./features/account/schemas/index";
+export { adminUserUpdateSchema, whatsappSettingsSchema, lotteryPullSchema, } from "./features/admin/schemas/admin-user-form";
+export { siteSettingsFormSchema } from "./features/admin/schemas/site-settings-form";