@mohasinac/appkit 4.29.0 → 4.30.0

package/dist/errors/error-envelope.js

@@ -0,0 +1,96 @@
+/**
+ * The ONE shape of an HTTP error body.
+ *
+ * WHY THIS FILE EXISTS
+ * --------------------
+ * There were four independent producers of an error response, and the client
+ * read a shape none of them fully emitted:
+ *
+ *   - `next/api/api-response.ts`  → `{success, error, details}`  — no `code`
+ *   - `next/api/routeHandler.ts`  → `{ok, success, code, error, issues, requestId}`
+ *   - `errors/error-handler.ts`   → `{..., data: {issues}}`      — issues nested
+ *   - `core/server-action.ts`     → `{ok, error, fieldErrors}`
+ *
+ * while `http/ApiClient.ts`'s `ApiClientError` reads exactly three keys off the
+ * body: `code`, `issues`, `requestId`.
+ *
+ * The consequence was silent and app-wide. On every route built with
+ * `createApiHandler`, a Zod rejection serialised its issues under `details`,
+ * which nothing reads — so `err.code` was `undefined`, `surfaceError`'s
+ * `hasStableErrorCode()` check failed, the `ERROR_DISPLAY_MAP` branch was
+ * skipped, and the user got a bare toast reading "Validation failed" with no
+ * field name. `applyZodIssues(err.issues, …)` was dead code everywhere.
+ *
+ * Every producer now builds its body here, so the wire shape and the reader
+ * cannot drift again. `scripts/audit-api-error-envelope.mjs` enforces it in
+ * both directions.
+ */
+import { HTTP_ERROR_CODES } from "./error-mapping";
+/**
+ * Default stable code for an HTTP status, for producers that don't carry one.
+ *
+ * Mirrors the mapping already applied in `mapToHttpError`'s status branch —
+ * extracted so there is one table rather than two that can disagree about
+ * what a 409 is called.
+ */
+export function codeForStatus(status) {
+    if (status === 401)
+        return HTTP_ERROR_CODES.UNAUTHENTICATED;
+    if (status === 403)
+        return HTTP_ERROR_CODES.FORBIDDEN;
+    if (status === 404)
+        return HTTP_ERROR_CODES.NOT_FOUND;
+    if (status === 409)
+        return HTTP_ERROR_CODES.ALREADY_EXISTS;
+    if (status === 429)
+        return HTTP_ERROR_CODES.RATE_LIMITED;
+    if (status >= 500)
+        return HTTP_ERROR_CODES.INTERNAL;
+    return HTTP_ERROR_CODES.VALIDATION_FAILED;
+}
+/**
+ * Narrow raw Zod issues to the wire shape.
+ *
+ * Deliberately picks ONLY `path`, `message` and `code`. A `ZodIssue` can also
+ * carry `received` / `expected` / `unionErrors`, and `received` is the value
+ * the user actually submitted — i.e. potentially their email, phone or
+ * address. Spreading the issue wholesale would publish that in an error body
+ * and into any client-error log that captures it.
+ *
+ * The `unknown` parameter is the point: this is the sole entry point for issue
+ * arrays arriving from THREE mutually unassignable sources — zod v3
+ * `ZodIssue[]` (appkit), zod v4 `$ZodIssue[]` (the consumer app, a different
+ * major), and the `unknown[]` that `mapToHttpError` already returns. Narrowing
+ * it to any one of them makes the other two uncallable. This function exists
+ * precisely to be the place that narrows.
+ */
+export function toApiIssues(input) {
+    if (!Array.isArray(input) || input.length === 0)
+        return undefined;
+    const mapped = [];
+    for (const raw of input) {
+        if (typeof raw !== "object" || raw === null)
+            continue;
+        const issue = raw;
+        if (typeof issue.message !== "string")
+            continue;
+        mapped.push({
+            message: issue.message,
+            ...(Array.isArray(issue.path)
+                ? { path: issue.path.filter((p) => typeof p === "string" || typeof p === "number") }
+                : {}),
+            ...(typeof issue.code === "string" ? { code: issue.code } : {}),
+        });
+    }
+    return mapped.length ? mapped : undefined;
+}
+export function buildErrorEnvelope(input) {
+    return {
+        ok: false,
+        success: false,
+        code: input.code ?? codeForStatus(input.status ?? 400),
+        error: input.message,
+        ...(input.issues?.length ? { issues: input.issues } : {}),
+        ...(input.requestId ? { requestId: input.requestId } : {}),
+    };
+}

package/dist/errors/error-handler.js

@@ -1,6 +1,7 @@
 import { NextResponse } from "next/server.js";
 import { AppError } from "./base-error";
 import { mapToHttpError } from "./error-mapping";
+import { buildErrorEnvelope, toApiIssues } from "./error-envelope";
 /**
  * Handle API errors with consistent response format.
  * Use in Next.js API route catch blocks.
@@ -23,16 +24,22 @@ export function handleApiError(error) {
             data: error instanceof AppError ? error.data : undefined,
         });
     }
+    // `issues` go at the TOP LEVEL. They used to be nested under
+    // `data.issues`, and `ApiClientError` reads `body.issues` — so this
+    // producer's field errors were as dead as `api-response.ts`'s were.
+    //
+    // `statusCode` is dropped: it only ever duplicated the HTTP status, and
+    // nothing read it off the body.
     return NextResponse.json({
-        success: false,
-        error: mapped.message,
-        code: mapped.code,
-        statusCode: mapped.status,
+        ...buildErrorEnvelope({
+            message: mapped.message,
+            status: mapped.status,
+            code: mapped.code,
+            issues: toApiIssues(mapped.issues),
+        }),
         ...(error instanceof AppError && error.data !== undefined
             ? { data: error.data }
-            : mapped.issues
-                ? { data: { issues: mapped.issues } }
-                : {}),
+            : {}),
     }, { status: mapped.status });
 }
 /**

package/dist/features/account/components/NotificationBell.js

@@ -96,7 +96,7 @@ export function NotificationBell({ limit = 10, viewAllHref, labels, icons, rende
 }
 function renderBellButton(props) {
     const { hideOnMobile, buttonClassName, labels, unreadCount, handleToggle, isOpen } = props;
-    return (_jsxs(Button, { onClick: handleToggle, rounded: "xl", className: `${hideOnMobile ? "hidden md:flex" : "flex"} p-[0.625rem] md:p-[0.75rem] transition-colors relative text-[var(--appkit-color-text-muted)] hover:bg-[var(--appkit-color-bg)] hover:text-[var(--appkit-color-text)] ${buttonClassName}`, "aria-label": labels.title, "aria-expanded": isOpen, children: [_jsx("svg", { className: "w-6 h-6 md:w-7 md:h-7", fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", "aria-hidden": "true", children: _jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2, d: "M15 17h5l-1.405-1.405A2.032 2.032 0 0118 14.158V11a6.002 6.002 0 00-4-5.659V5a2 2 0 10-4 0v.341C7.67 6.165 6 8.388 6 11v3.159c0 .538-.214 1.055-.595 1.436L4 17h5m6 0v1a3 3 0 11-6 0v-1m6 0H9" }) }), unreadCount > 0 && (_jsx(Span, { size: "xs", weight: "semibold", className: CLS_UNREAD_BADGE, children: unreadCount > 99 ? "99+" : unreadCount }))] }));
+    return (_jsxs(Button, { onClick: handleToggle, rounded: "xl", className: `${hideOnMobile ? "hidden md:flex" : "flex"} p-[0.625rem] md:p-[0.75rem] transition-colors relative text-[var(--appkit-color-text-muted)] hover:bg-[var(--appkit-color-bg)] hover:text-[var(--appkit-color-text)] ${buttonClassName}`, "aria-label": labels.title, "aria-expanded": isOpen, children: [_jsx("svg", { className: "w-6 h-6 md:w-7 md:h-7 shrink-0", fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", "aria-hidden": "true", children: _jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2, d: "M15 17h5l-1.405-1.405A2.032 2.032 0 0118 14.158V11a6.002 6.002 0 00-4-5.659V5a2 2 0 10-4 0v.341C7.67 6.165 6 8.388 6 11v3.159c0 .538-.214 1.055-.595 1.436L4 17h5m6 0v1a3 3 0 11-6 0v-1m6 0H9" }) }), unreadCount > 0 && (_jsx(Span, { size: "xs", weight: "semibold", className: CLS_UNREAD_BADGE, children: unreadCount > 99 ? "99+" : unreadCount }))] }));
 }
 function renderNotificationDropdown(props) {
     const { dropdownClassName, labels, unreadCount, isMarkingAll, handleMarkAllRead, isLoading, notifications, notificationIcons, handleMarkRead, handleMarkReadAndClose, renderActionLink, viewAllHref, setIsOpen } = props;

package/dist/features/account/components/UserSidebar.js

@@ -73,13 +73,13 @@ function DrawerContent({ groups, items, activeHref, onItemClick, }) {
                 const hasActive = !!findActiveNavItem(group.items, activeHref);
                 return (_jsxs(Div, { className: "mb-0.5", children: [_jsx(Button, { type: "button", variant: "ghost", onClick: () => toggle(group.title), paddingX: "md", paddingY: "sm", weight: "semibold", rounded: "none", className: `w-full text-[0.6875rem] uppercase tracking-widest transition-colors ${hasActive && !isOpen
                                 ? "text-primary-600 dark:text-primary-400"
-                                : "text-[var(--appkit-color-text-faint)] hover:text-[var(--appkit-color-text-muted)]"}`, children: _jsxs(Row, { align: "center", justify: "between", className: "w-full", children: [_jsx(Span, { children: group.title }), _jsx("svg", { className: `w-3 h-3 transition-transform duration-150 ${isOpen ? "rotate-180" : ""}`, fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", "aria-hidden": "true", children: _jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2.5, d: "M19 9l-7 7-7-7" }) })] }) }), isOpen && (_jsx(Ul, { paddingX: "x-sm", paddingY: "y-bottom-xs", spacing: "2xs", children: group.items.map((item) => (_jsx(Li, { children: _jsx(NavLink, { item: item, isActive: activeItem?.href === item.href, onClick: onItemClick }) }, item.href))) }))] }, group.title));
+                                : "text-[var(--appkit-color-text-faint)] hover:text-[var(--appkit-color-text-muted)]"}`, children: _jsxs(Row, { align: "center", justify: "between", className: "w-full", children: [_jsx(Span, { children: group.title }), _jsx("svg", { className: `w-3 h-3 transition-transform duration-150 ${isOpen ? "rotate-180" : ""} shrink-0`, fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", "aria-hidden": "true", children: _jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2.5, d: "M19 9l-7 7-7-7" }) })] }) }), isOpen && (_jsx(Ul, { paddingX: "x-sm", paddingY: "y-bottom-xs", spacing: "2xs", children: group.items.map((item) => (_jsx(Li, { children: _jsx(NavLink, { item: item, isActive: activeItem?.href === item.href, onClick: onItemClick }) }, item.href))) }))] }, group.title));
             })] }));
 }
 function DrawerPanel({ title, onClose, children, }) {
     const { hand } = useHandMode();
     const { edgeClass, borderClass } = getSidebarOverlayClasses(hand);
-    return (_jsxs(Div, { className: "hidden lg:block", children: [_jsx(Div, { surface: "overlay-xs", className: "fixed inset-0 z-40 backdrop-blur-sm", onClick: onClose, "aria-hidden": "true" }), _jsxs(Stack, { border: "default", shadow: "2xl", role: "dialog", "aria-modal": "true", "aria-label": title, className: `fixed top-0 ${edgeClass} z-50 h-full w-64 ${borderClass}`, surface: "default", children: [_jsxs(Row, { border: "bottom-subtle", paddingY: "y-sm-tall", className: "shrink-0", padding: "x-md", align: "center", justify: "between", children: [_jsx(Span, { size: "xs", weight: "semibold", transform: "uppercase", color: "muted", children: title }), _jsx(IconButton, { "aria-label": "Close", variant: "ghost", size: "sm", onClick: onClose, icon: _jsx("svg", { className: "w-4 h-4", fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", "aria-hidden": "true", children: _jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2, d: "M6 18L18 6M6 6l12 12" }) }) })] }), _jsx(Div, { className: `flex-1 ${__O.yAuto}`, children: children })] })] }));
+    return (_jsxs(Div, { className: "hidden lg:block", children: [_jsx(Div, { surface: "overlay-xs", className: "fixed inset-0 z-40 backdrop-blur-sm", onClick: onClose, "aria-hidden": "true" }), _jsxs(Stack, { border: "default", shadow: "2xl", role: "dialog", "aria-modal": "true", "aria-label": title, className: `fixed top-0 ${edgeClass} z-50 h-full w-64 ${borderClass}`, surface: "default", children: [_jsxs(Row, { border: "bottom-subtle", paddingY: "y-sm-tall", className: "shrink-0", padding: "x-md", align: "center", justify: "between", children: [_jsx(Span, { size: "xs", weight: "semibold", transform: "uppercase", color: "muted", children: title }), _jsx(IconButton, { "aria-label": "Close", variant: "ghost", size: "sm", onClick: onClose, icon: _jsx("svg", { className: "w-4 h-4 shrink-0", fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", "aria-hidden": "true", children: _jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2, d: "M6 18L18 6M6 6l12 12" }) }) })] }), _jsx(Div, { className: `flex-1 ${__O.yAuto}`, children: children })] })] }));
 }
 export function UserSidebar({ items, groups, mobileOpen = false, onCloseMobile, desktopOpen = false, onToggle, variant = "overlay", renderFooter }) {
     const pathname = usePathname();

package/dist/features/account/components/UserSupportView.js

@@ -69,6 +69,7 @@ export function UserSupportView(_props) {
     const tickets = data?.tickets ?? [];
     const invalidate = () => queryClient.invalidateQueries({ queryKey: ["user", "support-tickets"] });
     const createMutation = useApiMutation({
+        errorMessage: "Failed to create ticket.",
         mutationFn: async () => {
             /*
              * This drawer validated NOTHING. Its sibling page
@@ -106,11 +107,9 @@ export function UserSupportView(_props) {
             setNewOrderId("");
             invalidate();
         },
-        onError: (err) => {
-            showToast(err?.message ?? "Failed to create ticket.", "error");
-        },
     });
     const replyMutation = useApiMutation({
+        errorMessage: "Failed to send reply.",
         mutationFn: async () => {
             await apiClient.post(SUPPORT_ENDPOINTS.TICKET_MESSAGES(selectedTicket.id), { body: replyBody.trim() });
         },
@@ -119,9 +118,6 @@ export function UserSupportView(_props) {
             setReplyBody("");
             invalidate();
         },
-        onError: (err) => {
-            showToast(err?.message ?? "Failed to send reply.", "error");
-        },
     });
     return (_jsxs(_Fragment, { children: [_jsxs(Div, { className: "mx-auto max-w-2xl", paddingY: "y-lg", paddingX: "x-md", children: [_jsxs(Row, { className: "mb-4", align: "center", justify: "between", children: [_jsx(Text, { size: "xl", weight: "semibold", color: "primary", children: "Support Tickets" }), _jsx(Button, { type: "button", variant: "primary", size: "sm", onClick: () => setNewTicketOpen(true), children: "New ticket" })] }), renderTicketListArea({ isLoading, error, tickets, setSelectedTicket, setDetailOpen })] }), renderNewTicketDrawer({ newTicketOpen, setNewTicketOpen, newCategory, setNewCategory, newSubject, setNewSubject, newOrderId, setNewOrderId, newDescription, setNewDescription, createMutation }), renderTicketDetailDrawer({ detailOpen, setDetailOpen, selectedTicket, replyBody, setReplyBody, replyMutation })] }));
 }

package/dist/features/account/hooks/useProfile.d.ts

@@ -45,4 +45,10 @@ export declare function useUpdateCurrentProfile(options?: {
     onSuccess?: (data: JsonValue) => void;
     onError?: (error: Error) => void;
     endpoint?: string;
+    /**
+     * Curated failure copy, forwarded to the ONE error surface. A wrapper that
+     * omits this forces its callers to add a second toast of their own, which
+     * is exactly how one failed avatar save produced three stacked banners.
+     */
+    errorMessage?: string;
 }): import("@tanstack/react-query").UseMutationResult<JsonValue, Error, UpdateCurrentProfileInput, unknown>;

package/dist/features/account/hooks/useProfile.js

@@ -14,6 +14,7 @@ export function useUpdateCurrentProfile(options) {
     const queryClient = useQueryClient();
     const endpoint = options?.endpoint ?? ACCOUNT_ENDPOINTS.PROFILE;
     return useApiMutation({
+        errorMessage: options?.errorMessage,
         mutationFn: (data) => apiClient.patch(endpoint, data),
         onSuccess: async (data) => {
             await queryClient.invalidateQueries({ queryKey: ["profile"] });

package/dist/features/admin/components/AdminAdEditorView.js

@@ -83,6 +83,7 @@ export function AdminAdEditorView({ adId, endpointBase = ADMIN_ENDPOINTS.ADS, la
         setThirdPartyUrl(item.creative?.thirdPartyUrl || "");
     }, [adQuery.data]);
     const saveMutation = useApiMutation({
+        errorMessage: "Save failed",
         mutationFn: async () => {
             const payload = {
                 name,
@@ -116,9 +117,6 @@ export function AdminAdEditorView({ adId, endpointBase = ADMIN_ENDPOINTS.ADS, la
                 onSaved?.(savedId);
             }
         },
-        onError: (error) => {
-            showToast(error instanceof Error ? error.message : "Save failed", "error");
-        },
     });
     const placements = adQuery.data?.placements ?? metaQuery.data?.placements ?? [];
     const providerCredentialStatus = metaQuery.data?.providerCredentialStatus;

package/dist/features/admin/components/AdminAddressClustersView.js

@@ -22,6 +22,7 @@ export function AdminAddressClustersView(_props) {
         },
     });
     const flagMutation = useApiMutation({
+        errorMessage: "Failed to flag address.",
         mutationFn: async (id) => {
             await apiClient.patch(ADMIN_ENDPOINTS.ADDRESS_BY_ID(id), { action: "flag_suspicious" });
         },
@@ -29,9 +30,6 @@ export function AdminAddressClustersView(_props) {
             showToast("Address flagged as suspicious.", "success");
             void queryClient.invalidateQueries({ queryKey: ["admin", "address-clusters"] });
         },
-        onError: (err) => {
-            showToast(err.message ?? "Failed to flag address.", "error");
-        },
     });
     const clusters = data?.clusters ?? [];
     return (_jsxs(Stack, { gap: "lg", padding: "page", children: [_jsxs(Stack, { gap: "none", children: [_jsx(Heading, { level: 2, size: "lg", weight: "semibold", color: "primary", children: "Address Clusters" }), _jsx(Text, { size: "sm", color: "muted", className: "mt-1", children: "Users sharing the same physical address. Flagging is informational only \u2014 users are not blocked." })] }), isLoading && (_jsx(Row, { justify: "center", padding: "y-4xl", children: _jsx(Div, { className: "h-6 w-6 animate-spin border-2 border-[var(--appkit-color-primary)] border-t-transparent", rounded: "full" }) })), error && (_jsx(Div, { surface: "danger-surface", color: "error", padding: "inline", rounded: "xl", textSize: "sm", children: "Failed to load clusters." })), !isLoading && clusters.length === 0 && (_jsx(Div, { surface: "muted", padding: "y-4xl", rounded: "xl", className: "text-center", children: _jsx(Text, { color: "muted", size: "sm", children: "No shared addresses found." }) })), clusters.map((cluster) => (_jsxs(Stack, { surface: "card", padding: "md", gap: "md", rounded: "xl", border: "default", children: [_jsxs(Row, { justify: "between", align: "start", gap: "sm", children: [_jsxs(Stack, { gap: "none", children: [_jsx(Text, { size: "xs", color: "muted", weight: "medium", children: "Hash" }), _jsx(Span, { size: "xs", color: "muted", className: "font-mono truncate max-w-xs", children: cluster.addressHash })] }), _jsxs(Badge, { variant: "secondary", size: "sm", children: [cluster.addresses.length, " accounts"] })] }), _jsx(Stack, { gap: "xs", children: cluster.addresses.map((addr) => (_jsxs(Row, { justify: "between", align: "center", gap: "sm", surface: "muted", padding: "inlineSm", rounded: "lg", children: [_jsxs(Stack, { gap: "none", className: "min-w-0", children: [_jsxs(Text, { size: "sm", weight: "medium", color: "primary", className: "truncate", children: [addr.ownerType === "user" ? "User" : "Store", ": ", addr.ownerId] }), addr.city && (_jsx(Text, { size: "xs", color: "muted", children: [addr.city, addr.state, addr.postalCode].filter(Boolean).join(", ") }))] }), _jsxs(Row, { gap: "xs", align: "center", children: [addr.banStatus && (_jsx(Badge, { variant: BAN_BADGE[addr.banStatus] ?? "secondary", size: "sm", children: addr.banStatus.replace(/_/g, " ") })), addr.banStatus !== "suspicious" && (_jsx(Button, { size: "sm", variant: "ghost", onClick: () => flagMutation.mutate(addr.id), disabled: flagMutation.isPending, children: "Flag Suspicious" }))] })] }, addr.id))) })] }, cluster.addressHash)))] }));

package/dist/features/admin/components/AdminAddressEditorView.js

@@ -64,6 +64,7 @@ export function AdminAddressEditorView({ addressId, onSaved, onDeleted, ...rest
         },
     });
     const saveMutation = useApiMutation({
+        errorMessage: "Failed to save address.",
         mutationFn: async () => {
             const payload = {
                 ...form,
@@ -81,11 +82,9 @@ export function AdminAddressEditorView({ addressId, onSaved, onDeleted, ...rest
             if (onSaved && id)
                 onSaved(String(id));
         },
-        onError: (err) => {
-            showToast(err?.message ?? "Failed to save address.", "error");
-        },
     });
     const deleteMutation = useApiMutation({
+        errorMessage: "Failed to delete address.",
         mutationFn: () => apiClient.delete(ADMIN_ENDPOINTS.ADDRESS_BY_ID(addressId)),
         onSuccess: () => {
             showToast("Address deleted.", "success");
@@ -93,7 +92,6 @@ export function AdminAddressEditorView({ addressId, onSaved, onDeleted, ...rest
             if (onDeleted)
                 onDeleted();
         },
-        onError: (err) => showToast(err?.message ?? "Failed to delete address.", "error"),
     });
     const isSubmitting = saveMutation.isPending || isLoading;
     const canSave = form.ownerId &&

package/dist/features/admin/components/AdminAddressesView.js

@@ -133,6 +133,7 @@ export function AdminAddressesView(_props) {
     const queryClient = useQueryClient();
     const { showToast } = useToast();
     const actionMutation = useApiMutation({
+        errorMessage: "Failed to update address.",
         mutationFn: async ({ id, action }) => {
             await apiClient.patch(ADMIN_ENDPOINTS.ADDRESS_BY_ID(id), { action });
         },
@@ -140,9 +141,6 @@ export function AdminAddressesView(_props) {
             showToast("Address updated.", "success");
             void queryClient.invalidateQueries({ queryKey: ["admin", "addresses"] });
         },
-        onError: (err) => {
-            showToast(err.message ?? "Failed to update address.", "error");
-        },
     });
     const handleAction = (id, action) => {
         actionMutation.mutate({ id, action });

package/dist/features/admin/components/AdminAllEventEntriesView.js

@@ -17,6 +17,7 @@ export function AdminAllEventEntriesView({ children, ...props }) {
     const { showToast } = useToast();
     const [selected, setSelected] = React.useState(null);
     const updateMutation = useApiMutation({
+        errorMessage: "Failed to update entry.",
         mutationFn: async ({ id, status }) => {
             await apiClient.patch(ADMIN_ENDPOINTS.ADMIN_EVENT_ENTRY_BY_ID(id), { status });
         },
@@ -24,9 +25,6 @@ export function AdminAllEventEntriesView({ children, ...props }) {
             showToast("Entry updated.", "success");
             queryClient.invalidateQueries({ queryKey: ["admin", "event-entries"] });
         },
-        onError: (err) => {
-            showToast(err?.message ?? "Failed to update entry.", "error");
-        },
     });
     if (React.Children.count(children) > 0) {
         return (_jsx(ListingLayout, { portal: "admin", ...props, children: children }));

package/dist/features/admin/components/AdminBidsView.js

@@ -24,6 +24,7 @@ export function AdminBidsView({ children, ...props }) {
     const [selectedRow, setSelectedRow] = useState(null);
     const [detail, setDetail] = useState(null);
     const cancelMutation = useApiMutation({
+        errorMessage: "Failed to cancel bid.",
         mutationFn: async (bidId) => {
             await apiClient.patch(ADMIN_ENDPOINTS.BID_BY_ID(bidId), { status: "cancelled" });
         },
@@ -33,9 +34,6 @@ export function AdminBidsView({ children, ...props }) {
             setCancelOpen(false);
             setSelectedRow(null);
         },
-        onError: (err) => {
-            showToast(err?.message ?? "Failed to cancel bid.", "error");
-        },
     });
     if (React.Children.count(children) > 0) {
         return (_jsx(ListingLayout, { portal: "admin", ...props, children: children }));

package/dist/features/admin/components/AdminBlogEditorView.js

@@ -114,6 +114,7 @@ export function AdminBlogEditorView({ postId, onSaved, onDeleted, embedded, ...r
     }, [postQuery.data]);
     // --- save ---
     const saveMutation = useApiMutation({
+        errorMessage: "Failed to save post.",
         mutationFn: async () => {
             const payload = {
                 title: draft.title,
@@ -164,18 +165,17 @@ export function AdminBlogEditorView({ postId, onSaved, onDeleted, embedded, ...r
             if (issues && issues.length > 0) {
                 applyZodIssues(issues, setFieldError);
             }
-            showToast(err?.message ?? "Failed to save post.", "error");
         },
     });
     // --- delete ---
     const deleteMutation = useApiMutation({
+        errorMessage: "Failed to delete post.",
         mutationFn: () => apiClient.delete(ADMIN_ENDPOINTS.BLOG_BY_ID(postId)),
         onSuccess: () => {
             showToast("Post deleted.", "success");
             if (onDeleted)
                 onDeleted();
         },
-        onError: (err) => showToast(err?.message ?? "Failed to delete post.", "error"),
     });
     const isLoading = saveMutation.isPending || postQuery.isLoading;
     /**

package/dist/features/admin/components/AdminBrandEditorView.js

@@ -5,6 +5,7 @@ import { useApiMutation } from "@mohasinac/appkit/client";
 import React from "react";
 import { useQuery } from "@tanstack/react-query";
 import { z } from "zod";
+import { mediaUrlSchema } from "../../../validation/schemas";
 import { Button, ConfirmDeleteModal, Div, Form, Input, StackedViewShell, Toggle, useToast, } from "../../../ui";
 import { FieldInput, FormErrorSummary } from "../../../ui/forms";
 import { ImageUpload } from "../../media/upload/ImageUpload";
@@ -15,7 +16,7 @@ const brandFormSchema = z.object({
     name: z.string().min(1, "Brand name is required").max(120),
     slug: z.string().regex(/^[a-z0-9-]+$/i).optional().or(z.literal("")),
     description: z.string().max(2000).optional().or(z.literal("")),
-    logoURL: z.string().url().optional().or(z.literal("")),
+    logoURL: mediaUrlSchema.optional().or(z.literal("")),
     website: z.string().url().optional().or(z.literal("")),
     country: z.string().max(80).optional().or(z.literal("")),
     founded: z.number().int().min(1800).max(new Date().getFullYear()).optional(),
@@ -75,6 +76,7 @@ export function AdminBrandEditorView({ brandId, onSaved, onDeleted, embedded, ..
             setSlug(toBrandSlug(value));
     };
     const saveMutation = useApiMutation({
+        errorMessage: "Failed to save brand.",
         mutationFn: async () => {
             const payload = {
                 name,
@@ -98,18 +100,15 @@ export function AdminBrandEditorView({ brandId, onSaved, onDeleted, embedded, ..
             if (onSaved && id)
                 onSaved(id);
         },
-        onError: (err) => {
-            showToast(err?.message ?? "Failed to save brand.", "error");
-        },
     });
     const deleteMutation = useApiMutation({
+        errorMessage: "Failed to delete brand.",
         mutationFn: () => apiClient.delete(ADMIN_ENDPOINTS.BRAND_BY_ID(brandId)),
         onSuccess: () => {
             showToast("Brand deleted.", "success");
             if (onDeleted)
                 onDeleted();
         },
-        onError: (err) => showToast(err?.message ?? "Failed to delete brand.", "error"),
     });
     const { upload } = useMediaUpload();
     const isSubmitting = saveMutation.isPending || brandQuery.isLoading;

package/dist/features/admin/components/AdminCarouselGroupEditorView.js

@@ -36,6 +36,7 @@ export function AdminCarouselGroupEditorView({ onCreated, carouselId, onSaved, .
         setStatus(doc.status === "active" ? "active" : "draft");
     }, [existing.data]);
     const createMutation = useApiMutation({
+        errorMessage: "create",
         /*
          * PATCH on the edit path, not PUT. `/api/admin/carousels/[id]` exports
          * GET/PATCH/DELETE — copying `AdminFeatureEditorView`'s `apiClient.put`
@@ -62,9 +63,6 @@ export function AdminCarouselGroupEditorView({ onCreated, carouselId, onSaved, .
             else
                 router.push(String(ROUTES.ADMIN.CAROUSEL_DETAIL(id)));
         },
-        onError: (err) => {
-            showToast(err?.message ?? `Failed to ${isEdit ? "update" : "create"} carousel.`, "error");
-        },
     });
     return (_jsx(StackedViewShell, { portal: "admin", ...rest, title: isEdit ? "Edit Carousel" : "New Named Carousel", sections: [
             _jsx(Form, { schema: carouselGroupFormSchema, onSubmit: (e) => e.preventDefault(), spacing: "md", children: ({ setFieldError, clearErrors }) => (_jsxs(_Fragment, { children: [_jsx(FieldInput, { name: "name", label: "Carousel name", value: name, onChange: (v) => setName(v), required: true, placeholder: "e.g. Homepage Hero" }), _jsx(FieldSelect, { name: "status", label: "Status", value: status, onChange: (v) => setStatus(v), options: [

package/dist/features/admin/components/AdminCategoryEditorView.js

@@ -82,6 +82,7 @@ export function AdminCategoryEditorView({ categoryId, onSaved, onDeleted, embedd
             setSlug(toCategorySlug(value));
     };
     const saveMutation = useApiMutation({
+        errorMessage: "Failed to save category.",
         mutationFn: async () => {
             const payload = {
                 name,
@@ -103,18 +104,15 @@ export function AdminCategoryEditorView({ categoryId, onSaved, onDeleted, embedd
             if (onSaved && id)
                 onSaved(id);
         },
-        onError: (err) => {
-            showToast(err?.message ?? "Failed to save category.", "error");
-        },
     });
     const deleteMutation = useApiMutation({
+        errorMessage: "Failed to delete category.",
         mutationFn: () => apiClient.delete(ADMIN_ENDPOINTS.CATEGORY_BY_ID(categoryId)),
         onSuccess: () => {
             showToast("Category deleted.", "success");
             if (onDeleted)
                 onDeleted();
         },
-        onError: (err) => showToast(err?.message ?? "Failed to delete category.", "error"),
     });
     const isSubmitting = saveMutation.isPending || categoryQuery.isLoading;
     const actionSidebar = (_jsx(FormShellContext.Provider, { value: shellCtx, children: _jsxs(Card, { variant: "outlined", padding: "md", spacing: "sm", children: [_jsx(Text, { className: "tracking-widest", color: "muted", size: "xs", weight: "semibold", transform: "uppercase", children: "Status" }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: isEdit ? (isActive ? "Active" : "Inactive") : "New" }), _jsx(FormErrorSummary, {}), _jsx(Button, { type: "submit", form: "category-editor-form", className: "w-full", isLoading: isSubmitting, disabled: !name || isSubmitting, children: isEdit ? "Save changes" : "Create category" }), isEdit && (_jsx(Button, { type: "button", variant: "danger", className: "w-full", isLoading: deleteMutation.isPending, onClick: () => setDeleteOpen(true), children: "Delete category" }))] }) }));

package/dist/features/admin/components/AdminContactEditorView.js

@@ -16,6 +16,7 @@ export function AdminContactEditorView({ open, onClose, submissionId, subject, n
     const queryClient = useQueryClient();
     const { showToast } = useToast();
     const actionMutation = useApiMutation({
+        errorMessage: "Action failed.",
         mutationFn: async (action) => {
             await apiClient.patch(ADMIN_ENDPOINTS.CONTACT_SUBMISSION_BY_ID(submissionId), { action });
         },
@@ -25,9 +26,6 @@ export function AdminContactEditorView({ open, onClose, submissionId, subject, n
             queryClient.invalidateQueries({ queryKey: ["admin", "contact"] });
             onClose();
         },
-        onError: (err) => {
-            showToast(err?.message ?? "Action failed.", "error");
-        },
     });
     const statusColor = {
         new: "bg-info-surface text-info",

package/dist/features/admin/components/AdminContactView.js

@@ -22,6 +22,7 @@ export function AdminContactView({ children, onBulkMarkRead, onBulkArchive, onBu
     const [selectedRow, setSelectedRow] = useState(null);
     const [deleteOpen, setDeleteOpen] = useState(false);
     const actionMutation = useApiMutation({
+        errorMessage: "Action failed.",
         mutationFn: async ({ id, action }) => {
             await apiClient.patch(ADMIN_ENDPOINTS.CONTACT_SUBMISSION_BY_ID(id), { action });
         },
@@ -29,11 +30,9 @@ export function AdminContactView({ children, onBulkMarkRead, onBulkArchive, onBu
             showToast(`${action === "read" ? "Marked as read" : "Archived"}.`, "success");
             queryClient.invalidateQueries({ queryKey: ["admin", "contact"] });
         },
-        onError: (err) => {
-            showToast(err?.message ?? "Action failed.", "error");
-        },
     });
     const deleteMutation = useApiMutation({
+        errorMessage: "Failed to delete.",
         mutationFn: async (id) => {
             await apiClient.delete(ADMIN_ENDPOINTS.CONTACT_SUBMISSION_BY_ID(id));
         },
@@ -43,9 +42,6 @@ export function AdminContactView({ children, onBulkMarkRead, onBulkArchive, onBu
             setDeleteOpen(false);
             setSelectedRow(null);
         },
-        onError: (err) => {
-            showToast(err?.message ?? "Failed to delete.", "error");
-        },
     });
     if (React.Children.count(children) > 0) {
         return (_jsx(ListingLayout, { portal: "admin", ...props, children: children }));

package/dist/features/admin/components/AdminCouponEditorView.js

@@ -132,6 +132,7 @@ export function AdminCouponEditorView({ couponId, onSaved, onDeleted, embedded,
     };
     // --- save ---
     const saveMutation = useApiMutation({
+        errorMessage: "Failed to save coupon.",
         mutationFn: async () => {
             const payload = {
                 name,
@@ -180,19 +181,16 @@ export function AdminCouponEditorView({ couponId, onSaved, onDeleted, embedded,
             if (onSaved && id)
                 onSaved(id);
         },
-        onError: (err) => {
-            showToast(err?.message ?? "Failed to save coupon.", "error");
-        },
     });
     // --- delete ---
     const deleteMutation = useApiMutation({
+        errorMessage: "Failed to delete coupon.",
         mutationFn: () => apiClient.delete(ADMIN_ENDPOINTS.COUPON_BY_ID(couponId)),
         onSuccess: () => {
             showToast("Coupon deleted.", "success");
             if (onDeleted)
                 onDeleted();
         },
-        onError: (err) => showToast(err?.message ?? "Failed to delete coupon.", "error"),
     });
     const isSubmitting = saveMutation.isPending || couponQuery.isLoading;
     const canSave = Boolean(name && (isEdit ? true : code) && discountValue !== "" && startDate);

package/dist/features/admin/components/AdminEmployeeEditorView.js

@@ -76,6 +76,7 @@ export function AdminEmployeeEditorView({ open, onClose, mode, userId, displayNa
         });
     };
     const inviteMutation = useApiMutation({
+        errorMessage: "Failed to invite employee",
         mutationFn: async () => {
             await apiClient.post(ADMIN_ENDPOINTS.TEAM, {
                 email: email.trim(),
@@ -88,11 +89,9 @@ export function AdminEmployeeEditorView({ open, onClose, mode, userId, displayNa
             queryClient.invalidateQueries({ queryKey: ["admin", "team"] });
             onClose();
         },
-        onError: (err) => {
-            showToast(err.message ?? "Failed to invite employee", "error");
-        },
     });
     const updateMutation = useApiMutation({
+        errorMessage: "Failed to update permissions",
         mutationFn: async () => {
             await apiClient.put(ADMIN_ENDPOINTS.TEAM_MEMBER(userId), {
                 permissionGroup: group,
@@ -104,11 +103,9 @@ export function AdminEmployeeEditorView({ open, onClose, mode, userId, displayNa
             queryClient.invalidateQueries({ queryKey: ["admin", "team"] });
             onClose();
         },
-        onError: (err) => {
-            showToast(err.message ?? "Failed to update permissions", "error");
-        },
     });
     const revokeMutation = useApiMutation({
+        errorMessage: "Failed to revoke access",
         mutationFn: async () => {
             await apiClient.delete(ADMIN_ENDPOINTS.TEAM_MEMBER(userId));
         },
@@ -118,9 +115,6 @@ export function AdminEmployeeEditorView({ open, onClose, mode, userId, displayNa
             setRevokeOpen(false);
             onClose();
         },
-        onError: (err) => {
-            showToast(err.message ?? "Failed to revoke access", "error");
-        },
     });
     const isBusy = inviteMutation.isPending ||
         updateMutation.isPending ||

package/dist/features/admin/components/AdminFaqEditorView.js

@@ -91,6 +91,7 @@ export function AdminFaqEditorView({ faqId, onSaved, onDeleted, embedded, ...res
     };
     // --- save ---
     const saveMutation = useApiMutation({
+        errorMessage: "Failed to save FAQ.",
         mutationFn: async () => {
             const payload = {
                 question,
@@ -116,19 +117,16 @@ export function AdminFaqEditorView({ faqId, onSaved, onDeleted, embedded, ...res
             if (onSaved && id)
                 onSaved(id);
         },
-        onError: (err) => {
-            showToast(err?.message ?? "Failed to save FAQ.", "error");
-        },
     });
     // --- delete ---
     const deleteMutation = useApiMutation({
+        errorMessage: "Failed to delete FAQ.",
         mutationFn: () => apiClient.delete(ADMIN_ENDPOINTS.FAQ_BY_ID(faqId)),
         onSuccess: () => {
             showToast("FAQ deleted.", "success");
             if (onDeleted)
                 onDeleted();
         },
-        onError: (err) => showToast(err?.message ?? "Failed to delete FAQ.", "error"),
     });
     const isSubmitting = saveMutation.isPending || faqQuery.isLoading;
     const canSave = Boolean(question.trim()) && Boolean(answer.trim());