@mohasinac/appkit 4.30.18 → 4.31.0

package/dist/features/admin/schemas/firestore.js

@@ -153,50 +153,6 @@ export const notificationQueryHelpers = {
     ],
     byType: (type) => ["type", "==", type],
 };
-export const CHAT_ROOM_COLLECTION = "chatRooms";
-export const CHAT_ROOM_INDEXED_FIELDS = [
-    "buyerId",
-    "ownerId",
-    "orderId",
-    "participantIds",
-    "adminDeleted",
-    "updatedAt",
-];
-export const CHAT_ROOM_FIELDS = {
-    ID: "id",
-    BUYER_ID: "buyerId",
-    OWNER_ID: "ownerId",
-    ORDER_ID: "orderId",
-    PRODUCT_ID: "productId",
-    PRODUCT_TITLE: "productTitle",
-    BUYER_NAME: "buyerName",
-    OWNER_NAME: "ownerName",
-    LAST_MESSAGE: "lastMessage",
-    LAST_MESSAGE_AT: "lastMessageAt",
-    CREATED_AT: "createdAt",
-    UPDATED_AT: "updatedAt",
-    DELETED_BY: "deletedBy",
-    IS_GROUP: "isGroup",
-    PARTICIPANT_IDS: "participantIds",
-    ADMIN_DELETED: "adminDeleted",
-};
-export const DEFAULT_CHAT_ROOM_DATA = {
-    buyerId: "",
-    ownerId: "",
-    orderId: "",
-    buyerName: "",
-    ownerName: "",
-    deletedBy: [],
-    isGroup: false,
-    participantIds: [],
-    adminDeleted: false,
-};
-export const chatRoomQueryHelpers = {
-    byBuyer: (buyerId) => ["buyerId", "==", buyerId],
-    byOwner: (ownerId) => ["ownerId", "==", ownerId],
-    byOrder: (orderId) => ["orderId", "==", orderId],
-    active: () => ["adminDeleted", "==", false],
-};
 export const DEFAULT_NOTIFICATION_CHANNELS = {
     inApp: { enabled: true, readOnly: true },
     email: { enabled: false, minPriority: "normal" },
@@ -212,6 +168,11 @@ const PRIORITY_ORDER = {
 export function meetsMinPriority(priority, minPriority = "normal") {
     return PRIORITY_ORDER[priority] >= PRIORITY_ORDER[minPriority];
 }
+// `FeatureFlagKey` / `FeatureFlagMeta` / `FEATURE_FLAG_META` were deleted with
+// the `featureFlags` group on 2026-08-29. They described 14 toggles of which 11
+// had no reader anywhere — an admin could switch "Wishlists" or "Reviews" off
+// and watch nothing happen, which is worse than the feature not being
+// configurable at all.
 export const SITE_SETTINGS_COLLECTION = "siteSettings";
 export const SITE_SETTINGS_INDEXED_FIELDS = [];
 /**
@@ -235,6 +196,8 @@ export const DEFAULT_SITE_SETTINGS_DATA = {
         upiManualEnabled: true,
         codEnabled: true,
         otpCheckoutThreshold: 5000,
+        smsVerification: false,
+        adminCheckoutBypass: false,
     },
     emi: {
         enabled: false,
@@ -293,35 +256,22 @@ export const DEFAULT_SITE_SETTINGS_DATA = {
         autoExtendWindowMinutes: 5,
         settlementGracePeriodHours: 24,
     },
-    featureFlags: {
-        chats: true,
-        // Real per-SMS cost via the Firebase phone-auth quota — kept off by
-        // default even though every other flag defaults on. Admin opts in
-        // explicitly; PATCH /api/site-settings resets all users' phoneVerified +
-        // rate-limit state on the false->true transition (resetOtpVerification job).
-        smsVerification: false,
-        translations: true,
-        wishlists: true,
-        auctions: true,
-        reviews: true,
-        events: true,
-        blog: true,
-        coupons: true,
-        notifications: true,
-        sellerRegistration: true,
-        preOrders: true,
-        offers: true,
-        // W1-37 2026-05-23 — Phase 2 listing types enabled by default; all per-type
-        // surfaces (seller + admin via W1-29 + public) are now shipped.
+    // Every type on by default. `isListingTypeEnabled` treats a MISSING key as
+    // enabled, so this block is documentation of the full set rather than the
+    // mechanism — a type absent here still renders. `art` and `stickers` were
+    // missing from the old `featureFlags.listingTypes` literal for exactly that
+    // reason: nothing broke, so nobody noticed (Root Cause #58).
+    listings: {
         listingTypes: {
             standard: true,
             auction: true,
             "pre-order": true,
             "prize-draw": true,
-            bundle: true,
             classified: true,
             "digital-code": true,
             live: true,
+            art: true,
+            stickers: true,
         },
         categoryTypes: {
             category: true,
@@ -371,89 +321,3 @@ export const DEFAULT_TRUST_BAR_ITEMS = [
 // NOTE: labelKey/descKey hold plain display text (not i18n message keys) —
 // this feature-flag list has no matching next-intl namespace, so the admin
 // UI reads these two fields directly rather than through getTranslations().
-export const FEATURE_FLAG_META = [
-    {
-        key: "chats",
-        labelKey: "In-app chats",
-        descKey: "Buyer/seller direct messaging.",
-        icon: "\u{1F4AC}",
-        category: "platform",
-    },
-    {
-        key: "smsVerification",
-        labelKey: "SMS verification",
-        descKey: "Phone-number OTP verification during signup/checkout.",
-        icon: "\u{1F4F1}",
-        category: "platform",
-    },
-    {
-        key: "translations",
-        labelKey: "Translations",
-        descKey: "Locale switcher and translated UI strings.",
-        icon: "\u{1F310}",
-        category: "platform",
-    },
-    {
-        key: "auctions",
-        labelKey: "Auctions",
-        descKey: "Auction listings and bidding.",
-        icon: "\u{1F528}",
-        category: "platform",
-    },
-    {
-        key: "reviews",
-        labelKey: "Reviews",
-        descKey: "Product and store reviews.",
-        icon: "⭐",
-        category: "platform",
-    },
-    {
-        key: "notifications",
-        labelKey: "Notifications",
-        descKey: "In-app notification bell and inbox.",
-        icon: "\u{1F514}",
-        category: "platform",
-    },
-    {
-        key: "sellerRegistration",
-        labelKey: "Seller registration",
-        descKey: "\"Become a seller\" signup flow.",
-        icon: "\u{1F3EA}",
-        category: "platform",
-    },
-    {
-        key: "preOrders",
-        labelKey: "Pre-orders",
-        descKey: "Pre-order listings and deposit checkout.",
-        icon: "\u{1F4E6}",
-        category: "platform",
-    },
-    {
-        key: "wishlists",
-        labelKey: "Wishlists",
-        descKey: "Save-for-later wishlist feature.",
-        icon: "❤️",
-        category: "platform",
-    },
-    {
-        key: "events",
-        labelKey: "Events",
-        descKey: "Sales, raffles, spin-wheel, and lottery events.",
-        icon: "\u{1F389}",
-        category: "platform",
-    },
-    {
-        key: "blog",
-        labelKey: "Blog",
-        descKey: "Blog posts section.",
-        icon: "\u{1F4DD}",
-        category: "platform",
-    },
-    {
-        key: "coupons",
-        labelKey: "Coupons",
-        descKey: "Coupon codes and discounts.",
-        icon: "\u{1F3AB}",
-        category: "platform",
-    },
-];

package/dist/features/admin/schemas/nav-item-form.js

@@ -53,9 +53,16 @@ export const navItemFormSchema = z.object({
         section: "basics", sectionLabel: "Nav item", sectionRequired: true,
         quick: true, order: 1, row: "pair",
     }),
-    href: annotate(hrefSchema, { section: "basics", quick: true, order: 2, row: "pair" }),
+    href: annotate(hrefSchema, {
+        section: "basics", quick: true, order: 2, row: "pair",
+        label: "URL / href",
+        // On the schema rather than the control, so every surface that renders this
+        // field gets it — the editor used to carry it as a local `helperText`.
+        help: "Use relative paths (e.g. /products) or full URLs.",
+    }),
     icon: annotate(z.string().max(60).optional(), {
-        section: "basics", order: 3, row: "pair",
+        section: "basics", order: 3, row: "pair", kind: "select",
+        label: "Icon (optional)",
     }),
     order: annotate(z.coerce.number().int("Order must be a whole number.").min(0, "Order cannot be negative.").optional(), { section: "placement", sectionLabel: "Placement", order: 1, row: "pair" }),
     parentId: annotate(z.string().max(80).optional(), {

package/dist/features/admin/server.d.ts

@@ -5,11 +5,7 @@
  */
 export * from "./actions";
 export { notificationRepository } from "./repository/notification.repository";
-export { chatRepository } from "./repository/chat.repository";
 export { contactSubmissionsRepository } from "../../core/contact-submissions.repository";
-export type { ContactSubmissionDocument, ContactSubmissionCreateInput } from "../../core/contact-submissions.repository";
-export { newsletterRepository } from "../../core/newsletter.repository";
-export type { ChatRoomDocument, ChatRoomCreateInput, } from "./repository/chat.repository";
 export { siteSettingsRepository } from "./repository/site-settings.repository";
 export { GET as adminProductsGET } from "./api/products/route";
 export { GET as adminCouponsGET } from "./api/coupons/route";

package/dist/features/admin/server.js

@@ -5,9 +5,7 @@
  */
 export * from "./actions";
 export { notificationRepository } from "./repository/notification.repository";
-export { chatRepository } from "./repository/chat.repository";
 export { contactSubmissionsRepository } from "../../core/contact-submissions.repository";
-export { newsletterRepository } from "../../core/newsletter.repository";
 export { siteSettingsRepository } from "./repository/site-settings.repository";
 export { GET as adminProductsGET } from "./api/products/route";
 export { GET as adminCouponsGET } from "./api/coupons/route";

package/dist/features/admin/types/index.d.ts

@@ -27,13 +27,6 @@ export interface AdminListParams {
     sort?: string;
     filters?: string;
 }
-export interface AdminListResponse<T> {
-    items: T[];
-    total: number;
-    page: number;
-    perPage: number;
-    totalPages: number;
-}
 export interface AnalyticsMonthEntry {
     month: string;
     orders: number;

package/dist/features/analytics/repository/page-views.repository.d.ts

@@ -28,5 +28,19 @@ export declare class PageViewsRepository extends BaseRepository<PageViewDocument
     /** All day-buckets in [startDate, endDate] (inclusive, YYYY-MM-DD), optionally
      * scoped to one entityType. Used by the admin page-views report tab. */
     listInRange(startDate: string, endDate: string, entityType?: PageViewEntityType): Promise<PageViewDocument[]>;
+    /**
+     * Day-buckets older than `days`, as refs for `batchDelete`.
+     *
+     * 🛑 This collection had NO prune and NO rollup until 2026-08-31. It writes
+     * one document per entity per day, forever, and 27 scheduled functions
+     * existed without one of them touching it — so its growth was bounded only by
+     * how many distinct pages the catalogue had times how long the site had been
+     * up. See `pageViewPrune`.
+     *
+     * Returns refs rather than documents, matching `getOldReadRefs` on
+     * notifications: a prune needs the id, and hydrating the body of every doc it
+     * is about to delete is read budget spent on nothing (Rule #6).
+     */
+    getOlderThanRefs(days: number): Promise<FirebaseFirestore.DocumentReference[]>;
 }
 export declare const pageViewsRepository: PageViewsRepository;

package/dist/features/analytics/repository/page-views.repository.js

@@ -39,5 +39,29 @@ export class PageViewsRepository extends BaseRepository {
         const snap = await query.get();
         return snap.docs.map((d) => this.mapDoc(d));
     }
+    /**
+     * Day-buckets older than `days`, as refs for `batchDelete`.
+     *
+     * 🛑 This collection had NO prune and NO rollup until 2026-08-31. It writes
+     * one document per entity per day, forever, and 27 scheduled functions
+     * existed without one of them touching it — so its growth was bounded only by
+     * how many distinct pages the catalogue had times how long the site had been
+     * up. See `pageViewPrune`.
+     *
+     * Returns refs rather than documents, matching `getOldReadRefs` on
+     * notifications: a prune needs the id, and hydrating the body of every doc it
+     * is about to delete is read budget spent on nothing (Rule #6).
+     */
+    async getOlderThanRefs(days) {
+        const cutoff = new Date();
+        cutoff.setUTCDate(cutoff.getUTCDate() - days);
+        const cutoffKey = cutoff.toISOString().slice(0, 10);
+        // `<` and not `<=`: the cutoff day itself is still inside the window.
+        const snap = await this.getCollection()
+            .where(PAGE_VIEW_FIELDS.DATE, "<", cutoffKey)
+            .select()
+            .get();
+        return snap.docs.map((d) => d.ref);
+    }
 }
 export const pageViewsRepository = new PageViewsRepository();

package/dist/features/analytics/types.d.ts

@@ -2,5 +2,5 @@
  * page-views.repository.ts (server-only, imports firebase-admin) so the
  * client-side tracker component can import just this without pulling
  * firebase-admin into the client bundle. */
-export declare const PAGE_VIEW_ENTITY_TYPES: readonly ["product", "store", "category", "homepage", "auction", "review", "user-profile", "blog", "event", "pre-order", "prize-draw", "classified", "digital-code", "live", "bundle", "grouped-listing"];
+export declare const PAGE_VIEW_ENTITY_TYPES: readonly ["product", "store", "category", "homepage", "auction", "review", "user-profile", "blog", "event", "pre-order", "prize-draw", "classified", "digital-code", "live", "bundle", "grouped-listing", "listing"];
 export type PageViewEntityType = (typeof PAGE_VIEW_ENTITY_TYPES)[number];

package/dist/features/analytics/types.js

@@ -21,4 +21,17 @@ export const PAGE_VIEW_ENTITY_TYPES = [
     /** A `groupedListings` document's own page. Distinct from "bundle" — a
      *  bundle is a priced, all-or-nothing set; a group is pick-as-you-wish. */
     "grouped-listing",
+    /**
+     * A public BROWSE page — `/products`, `/auctions`, `/stores`, … — as opposed
+     * to one entity's detail page.
+     *
+     * 🛑 `entityId` must be the bare route name ("products"), NEVER the filtered
+     * URL. `pageViews` doc ids are `${date}_${entityType}_${entityId}` with a
+     * `FieldValue.increment`, so a bounded id costs ONE write per day per page,
+     * while keying on a query string would create a new document per filter
+     * combination — unbounded doc creation on the highest-traffic pages, against
+     * the Firestore write budget in Rule #6. The full URL still travels in the
+     * `url` field, which is recorded but not part of the key.
+     */
+    "listing",
 ];

package/dist/features/auctions/components/AuctionDetailPageView.js

@@ -2,6 +2,7 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 import Link from "next/link";
 import { productRepository } from "../../../repositories";
 import { listBidsByProduct } from "../../auctions/actions/bid-actions";
+import { safeRead } from "../../../errors/safe-read";
 const __P = {
     p3: "p-[var(--appkit-space-3)]",
     p4: "p-[var(--appkit-space-4)]",
@@ -62,11 +63,14 @@ function renderAuctionStoreReviews(storeSlug) {
     return (_jsxs(Section, { className: "mt-10", children: [_jsx(Heading, { level: 2, className: "mb-2", color: "primary", size: "xl", weight: "semibold", children: "Store Reviews" }), _jsx(ReviewsListingPanel, { source: { kind: "store", storeSlug }, stateMode: "local", context: "store", emptyLabel: "This store has no reviews yet." })] }));
 }
 export async function AuctionDetailPageView({ id, initialAuction, onPlaceBid, onBuyNow, productFeatures }) {
+    // The auction IS this page's subject. A read failure must surface rather than
+    // become the same `undefined` a genuinely missing slug produces — the
+    // "Auction Not Found" branch below still handles that real case.
     const product = initialAuction !== undefined
         ? (initialAuction ?? undefined)
-        : await productRepository.findByIdOrSlug(id).catch(() => undefined);
+        : await productRepository.findByIdOrSlug(id);
     const bidsResult = product
-        ? await listBidsByProduct(String(product.id), { pageSize: 5 }).catch(() => null)
+        ? await safeRead(() => listBidsByProduct(String(product.id), { pageSize: 5 }), { route: "/auctions/[slug]", key: "auction.bidHistory", fallback: null })
         : null;
     const storeId = product?.storeId;
     if (!product) {

package/dist/features/auctions/components/MarketplaceAuctionCard.js

@@ -163,8 +163,10 @@ export function MarketplaceAuctionCard({ product, buyoutPrice, className = "", v
             await toggle();
         }
         catch (_err) {
+            // useWishlistToggle rolls back its optimistic state and raises its own
+            // toast on failure, so the heart returns to its true value on screen.
+            // Reporting again here would double-notify for one user action.
             void normalizeError(_err);
-            // The hook rolls back optimistic state when the mutation fails.
         }
     }, [toggle]);
     const countdownClass = isEnded

package/dist/features/auth/actions/index.d.ts

@@ -1,2 +1 @@
 export * from "./profile-actions";
-export * from "./realtime-token-actions";

package/dist/features/auth/actions/index.js

@@ -1,2 +1 @@
 export * from "./profile-actions";
-export * from "./realtime-token-actions";

package/dist/features/auth/actions/profile-actions.js

@@ -5,6 +5,7 @@
  * Auth, rate-limiting, and Next.js specifics are handled by the consumer.
  */
 import { maskPublicReview } from "../../../security";
+import { safeRead } from "../../../errors/safe-read";
 import { finalizeStagedMediaField } from "../../media/finalize";
 import { userRepository } from "../repository/user.repository";
 import { sessionRepository } from "../repository/session.repository";
@@ -65,7 +66,7 @@ export async function getPublicUserProfile(userId) {
 }
 /** Fetch approved reviews for a store. storeId === storeSlug in this project. */
 export async function getSellerReviews(storeId) {
-    const snapshot = await reviewRepository.findApprovedByStore(storeId).catch(() => []);
+    const snapshot = await safeRead(() => reviewRepository.findApprovedByStore(storeId), { route: "/profile/[userId]", key: "reviews.findApprovedByStore", fallback: [] });
     return snapshot.map((r) => ({
         id: r.id,
         productId: r.productId,
@@ -94,7 +95,7 @@ export async function getProfileStoreProducts(storeId) {
 }
 /** Approved product reviews written by this user as a buyer. Excludes seller→buyer ratings. */
 export async function getReviewsAuthoredBy(userId) {
-    const all = await reviewRepository.findApprovedByUser(userId).catch(() => []);
+    const all = await safeRead(() => reviewRepository.findApprovedByUser(userId), { route: "/profile/[userId]", key: "reviews.findApprovedByUser", fallback: [] });
     // reviewerRole:"seller" means this user rated a buyer — not a product review
     const snapshot = all.filter((r) => r.reviewerRole !== "seller");
     return snapshot.map((r) => ({
@@ -121,7 +122,7 @@ export async function getReviewsAuthoredBy(userId) {
 }
 /** Approved seller→buyer reviews received by this buyer. */
 export async function getReviewsReceivedBy(userId) {
-    const snapshot = await reviewRepository.findByReviewee(userId).catch(() => []);
+    const snapshot = await safeRead(() => reviewRepository.findByReviewee(userId), { route: "/profile/[userId]", key: "reviews.findByReviewee", fallback: [] });
     return snapshot.map((r) => ({
         id: r.id,
         productId: r.productId,

package/dist/features/auth/actions/realtime-token-actions.js

@@ -5,21 +5,11 @@
  * Called by letitrip thin wrapper which handles auth + rate limiting.
  */
 import { getAdminAuth } from "../../../providers/db-firebase/index";
-import { chatRepository } from "../../admin/repository/chat.repository";
 import { conversationsRepository } from "../../messages/repository/conversations.repository";
 import { storeRepository } from "../../stores/repository/store.repository";
 import { serverLogger } from "../../../monitoring/index";
 import { normalizeError } from "../../../errors/normalize";
 export async function issueRealtimeToken(userId, userRole) {
-    let chatIds = {};
-    try {
-        const userChatIds = await chatRepository.getChatIdsForUser(userId);
-        chatIds = Object.fromEntries(userChatIds.map((id) => [id, true]));
-    }
-    catch (err) {
-        void normalizeError(err);
-        serverLogger.warn("Could not resolve chatIds for realtime token", { userId, err });
-    }
     const conversationIds = {};
     try {
         const buyerConvs = await conversationsRepository.listByBuyer(userId);
@@ -38,12 +28,11 @@ export async function issueRealtimeToken(userId, userRole) {
     }
     const customToken = await getAdminAuth().createCustomToken(userId, {
         role: userRole,
-        chatIds,
         conversationIds,
     });
     serverLogger.info("issueRealtimeToken: token issued", {
         userId,
-        chatCount: Object.keys(chatIds).length,
+        conversationCount: Object.keys(conversationIds).length,
     });
     return { customToken, expiresAt: Date.now() + 3600000 };
 }

package/dist/features/auth/auth-helpers.js

@@ -1,11 +1,9 @@
 import { getTokenTimeRemaining, isTokenExpired } from "./token-helpers";
-const ROLE_HIERARCHY = {
-    user: 0,
-    seller: 1,
-    employee: 2,
-    moderator: 2,
-    admin: 3,
-};
+// Was a SECOND, disagreeing copy of the hierarchy (employee and moderator both
+// ranked 2, where the canonical one puts moderator above employee), so
+// `hasRole` gave a different answer depending on which module you imported.
+// Deleted 2026-08-29 in favour of the one in security/authorization.
+import { ROLE_HIERARCHY } from "../../security/authorization";
 export function hasRole(userRole, requiredRole) {
     return ROLE_HIERARCHY[userRole] >= ROLE_HIERARCHY[requiredRole];
 }

package/dist/features/auth/components/ForgotPasswordView.js

@@ -22,7 +22,7 @@ export function ForgotPasswordView({ onSubmit, isLoading = false, error, success
             }
             catch (err) {
                 void normalizeError(err);
-                showToast(err instanceof Error ? err.message : "Failed to send reset link", "error");
+                showToast("Failed to send reset link", "error");
             }
         };
     }

package/dist/features/auth/components/Guards.js

@@ -1,6 +1,7 @@
 "use client";
 import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useEffect, useMemo } from "react";
+import { isAccountDisabled } from "../role-predicates";
 import { Button, Div, Heading, Row, Text } from "../../../ui";
 export function RoleGate({ children, user, allowedRoles, fallback = null, }) {
     if (!user?.role) {
@@ -31,7 +32,7 @@ export function ProtectedRoute({ children, user, loading = false, requireAuth =
         }
         if (user) {
             // Check account status
-            if (requireActiveAccount && user.disabled) {
+            if (requireActiveAccount && isAccountDisabled(user)) {
                 return { isAuthorized: false, redirectPath: unauthorizedPath };
             }
             // Check email verification

package/dist/features/auth/components/LoginForm.d.ts

@@ -2,7 +2,6 @@ import React from "react";
 export interface LoginFormValues {
     email: string;
     password: string;
-    rememberMe?: boolean;
 }
 export interface LoginFormProps {
     onSubmit: (values: LoginFormValues) => Promise<void>;
@@ -17,7 +16,6 @@ export interface LoginFormProps {
         emailPlaceholder?: string;
         passwordLabel?: string;
         passwordPlaceholder?: string;
-        rememberMe?: string;
         forgotPasswordLabel?: string;
         submitLabel?: string;
         submittingLabel?: string;

package/dist/features/auth/components/LoginForm.js

@@ -5,7 +5,6 @@ import { useState } from "react";
 import { Alert, Button, Div, Heading, Row, SiteMark, Stack, Text, useToast } from "../../../ui";
 import { Form } from "../../../ui/components/Form";
 import { FieldInput } from "../../../ui/forms/FieldInput";
-import { FieldCheckbox } from "../../../ui/forms/FieldCheckbox";
 import { applyZodIssues } from "../../../ui/forms/apply-zod-issues";
 import { loginSchema } from "../schemas";
 import { SocialAuthButtons } from "./SocialAuthButtons";
@@ -15,9 +14,8 @@ export function LoginForm({ onSubmit, onGoogleLogin, isLoading = false, error, l
     const [values, setValues] = useState({
         email: "",
         password: "",
-        rememberMe: false,
     });
-    return (_jsx(Row, { className: `min-h-[60vh] ${className}`, align: "center", justify: "center", padding: "x-md", children: _jsxs(Stack, { className: "max-w-md w-full", gap: "lg", children: [_jsxs(Div, { className: "text-center", children: [_jsx(Row, { justify: "center", className: "mb-3", children: _jsx(SiteMark, { size: "lg" }) }), _jsx(Heading, { level: 1, className: "font-extrabold", size: "3xl", children: labels.title ?? "Sign In" }), (labels.subtitle || renderCreateAccountLink) && (_jsxs(Text, { className: "mt-2", color: "muted", size: "sm", children: [labels.subtitle ?? "Or", " ", renderCreateAccountLink?.()] }))] }), error && (_jsx(Alert, { variant: "error", compact: true, children: error })), _jsx(Form, { schema: loginSchema, noValidate: true, onSubmit: (e) => e.preventDefault(), spacing: "md", children: ({ setFieldError, clearErrors }) => (_jsxs(_Fragment, { children: [_jsx(FormErrorSummary, {}), _jsx(FieldInput, { name: "email", label: labels.emailLabel ?? "Email address", type: "email", autoComplete: "username", required: true, placeholder: labels.emailPlaceholder ?? "you@example.com", value: values.email, onChange: (v) => setValues({ ...values, email: v }) }), _jsx(FieldInput, { name: "password", label: labels.passwordLabel ?? "Password", type: "password", autoComplete: "current-password", required: true, placeholder: labels.passwordPlaceholder ?? "••••••••", value: values.password, onChange: (v) => setValues({ ...values, password: v }) }), _jsxs(Row, { justify: "between", children: [_jsx(FieldCheckbox, { name: "rememberMe", label: labels.rememberMe ?? "Remember me", checked: values.rememberMe ?? false, onChange: (c) => setValues({ ...values, rememberMe: c }) }), renderForgotPasswordLink?.()] }), _jsx(Button, { type: "submit", isLoading: isLoading, disabled: isLoading, className: "w-full", onClick: async () => {
+    return (_jsx(Row, { className: `min-h-[60vh] ${className}`, align: "center", justify: "center", padding: "x-md", children: _jsxs(Stack, { className: "max-w-md w-full", gap: "lg", children: [_jsxs(Div, { className: "text-center", children: [_jsx(Row, { justify: "center", className: "mb-3", children: _jsx(SiteMark, { size: "lg" }) }), _jsx(Heading, { level: 1, className: "font-extrabold", size: "3xl", children: labels.title ?? "Sign In" }), (labels.subtitle || renderCreateAccountLink) && (_jsxs(Text, { className: "mt-2", color: "muted", size: "sm", children: [labels.subtitle ?? "Or", " ", renderCreateAccountLink?.()] }))] }), error && (_jsx(Alert, { variant: "error", compact: true, children: error })), _jsx(Form, { schema: loginSchema, noValidate: true, onSubmit: (e) => e.preventDefault(), spacing: "md", children: ({ setFieldError, clearErrors }) => (_jsxs(_Fragment, { children: [_jsx(FormErrorSummary, {}), _jsx(FieldInput, { name: "email", label: labels.emailLabel ?? "Email address", type: "email", autoComplete: "username", required: true, placeholder: labels.emailPlaceholder ?? "you@example.com", value: values.email, onChange: (v) => setValues({ ...values, email: v }) }), _jsx(FieldInput, { name: "password", label: labels.passwordLabel ?? "Password", type: "password", autoComplete: "current-password", required: true, placeholder: labels.passwordPlaceholder ?? "••••••••", value: values.password, onChange: (v) => setValues({ ...values, password: v }) }), _jsx(Row, { justify: "end", children: renderForgotPasswordLink?.() }), _jsx(Button, { type: "submit", isLoading: isLoading, disabled: isLoading, className: "w-full", onClick: async () => {
                                     clearErrors();
                                     const parsed = loginSchema.safeParse(values);
                                     if (!parsed.success)
@@ -27,7 +25,7 @@ export function LoginForm({ onSubmit, onGoogleLogin, isLoading = false, error, l
                                     }
                                     catch (err) {
                                         void normalizeError(err);
-                                        showToast(err instanceof Error ? err.message : "Sign in failed", "error");
+                                        showToast("Sign in failed", "error");
                                     }
                                 }, children: isLoading
                                     ? (labels.submittingLabel ?? "Signing in…")