@mohasinac/appkit 4.30.18 → 4.31.0

package/dist/features/search/action-index/types.js

@@ -0,0 +1,102 @@
+/*
+ * WHY: "Searching 'maintenance' should land me on the maintenance toggle" —
+ *      and `Search.tsx` has had a **complete** quick-links path the whole
+ *      time. Both modes are built: the inline filter already matches
+ *      `link.keywords` as well as the label, the overlay renders a labelled
+ *      band, the keyboard index arithmetic accounts for it, and
+ *      `constants/search.ts` even holds the band's label string.
+ *
+ *      `grep "quickLinks="` returns **zero**. The one real mount passes nine
+ *      props and not that one. A finished feature with no input.
+ *
+ *      The reason nothing passed it is that there was nothing to pass: no
+ *      single list of what a user can DO existed. Nav lived in three arrays,
+ *      quick actions in a registry each page ignored, and settings nowhere at
+ *      all.
+ * WHAT: `ActionIndexEntry` — one shape for every navigable or actionable
+ *       surface, and the type the search, the command palette and (D7) the
+ *       admin control plane all read.
+ *
+ * ## Why `iconName` is a string
+ *
+ * The index is serialised — into a Firestore control document, through an API
+ * route, into React Query's cache. A `LucideIcon` component reference survives
+ * none of those. The renderer resolves the name; the index carries data.
+ *
+ * ## Why `href` and every permission field are CODE-owned
+ *
+ * D7 lets an admin rename, re-describe, retag, reorder and hide an entry —
+ * that is content. It does not let them repoint a built-in entry's route or
+ * relax its permission, because those are routing and access control. An
+ * admin-authored entry supplies its own `href`, and that one is validated at
+ * SAVE time (see the write route): an audit that runs on CI would let a bad
+ * href reach the sidebar and 404 until the next run.
+ *
+ * EXPORTS: ActionIndexEntry, ActionIndexKind, ActionIndexControl,
+ *          type ActionIndexOverride
+ *
+ * @tag domain:search
+ * @tag layer:shared
+ * @tag pattern:registry
+ * @tag access:isomorphic
+ * @tag consumers:Search,CommandPalette,action-index admin screen
+ * @tag sideEffects:none
+ */
+export const ACTION_INDEX_COLLECTION = "actionIndex";
+export const ACTION_INDEX_DOC_ID = "global";
+/**
+ * Apply an admin's overrides to the static base.
+ *
+ * Order is load-bearing: override, then DROP disabled, then append `custom`.
+ * Dropping last would let an admin disable an entry and have their own
+ * replacement for it disappear too, since a custom entry may legitimately
+ * reuse a built-in id to supersede it.
+ */
+export function mergeActionIndex(base, control) {
+    if (!control)
+        return [...base];
+    const merged = [];
+    for (const entry of base) {
+        const override = control.entries?.[entry.id];
+        if (override?.enabled === false)
+            continue;
+        merged.push(override
+            ? {
+                ...entry,
+                ...(override.label !== undefined ? { label: override.label } : {}),
+                ...(override.description !== undefined
+                    ? { description: override.description }
+                    : {}),
+                ...(override.keywords !== undefined ? { keywords: override.keywords } : {}),
+                ...(override.weight !== undefined ? { weight: override.weight } : {}),
+            }
+            : entry);
+    }
+    return merged.concat(control.custom ?? []);
+}
+/**
+ * Drop every entry the viewer may not reach.
+ *
+ * 🛑 Filtered SERVER-side, never in the browser. An entry the client is not
+ * allowed to act on is an entry it must not receive: the label alone is a site
+ * map of the admin panel, which is D8's whole point.
+ */
+export function projectActionIndexForViewer(entries, viewer) {
+    return entries.filter((entry) => {
+        if (entry.requiresTester && !viewer.isTester && !viewer.isAdmin)
+            return false;
+        if (entry.requiredRole && entry.requiredRole !== viewer.role && !viewer.isAdmin) {
+            return false;
+        }
+        /*
+         * An admin bypasses permission checks by design — `isAdminUser` short-
+         * circuits every one of them elsewhere, and an index that disagreed would
+         * hide screens the admin can plainly open from the sidebar.
+         */
+        if (entry.requiredPermission && !viewer.isAdmin) {
+            if (!viewer.permissions?.includes(entry.requiredPermission))
+                return false;
+        }
+        return true;
+    });
+}

package/dist/features/search/action-index/validate-entry.d.ts

@@ -0,0 +1,34 @@
+import type { ActionIndexEntry } from "./types";
+export interface ActionIndexValidationIssue {
+    field: "href" | "deepLink" | "id";
+    message: string;
+}
+export interface ActionIndexValidationContext {
+    /**
+     * Every route the app actually serves, as paths without a locale prefix.
+     * Built from the route map by the caller — a runtime cannot walk `src/app`.
+     */
+    knownRoutes: ReadonlySet<string>;
+    /** Anchors a page is known to render, keyed by route. */
+    knownAnchors?: Readonly<Record<string, ReadonlySet<string>>>;
+    /** Tab ids a route accepts, keyed by route. Absent = `?tab=` not checked. */
+    knownTabs?: Readonly<Record<string, ReadonlySet<string>>>;
+    /** Ids already in use — a duplicate silently shadows an existing entry. */
+    existingIds?: ReadonlySet<string>;
+}
+/**
+ * Normalise an href to the form `knownRoutes` is keyed by: no origin, no
+ * locale segment, no query, no hash, no trailing slash.
+ *
+ * The locale strip matters — an admin pasting the URL out of their address bar
+ * gets `/en/admin/orders`, and rejecting that would be technically correct and
+ * useless.
+ */
+export declare function normaliseRoute(href: string): string;
+/**
+ * The three checks, at save time.
+ *
+ * Returns every issue rather than the first, so an admin fixing a bad entry
+ * does not discover its second problem only after fixing the first.
+ */
+export declare function validateActionIndexEntry(entry: Pick<ActionIndexEntry, "id" | "href" | "deepLink">, ctx: ActionIndexValidationContext): ActionIndexValidationIssue[];

package/dist/features/search/action-index/validate-entry.js

@@ -0,0 +1,114 @@
+/*
+ * WHY: `audit-action-index` runs on CI. An admin-authored entry (D7) is written
+ *      at RUNTIME — so a bad href reaches the sidebar and the search, 404s for
+ *      everyone, and stays there until the next audit run notices. The master
+ *      plan's own words: without save-time validation, "admins can create
+ *      entries" is a self-service 404 generator.
+ * WHAT: The same three checks the audit performs, as a function the write route
+ *       calls before persisting, returning a 400 instead of a broken link.
+ *
+ * ## Why the route cannot just run the audit
+ *
+ * The audit reads FILES — it greps `settings-entries.ts` and the settings view
+ * for `id=` literals. A route has neither at runtime. So the checkable facts
+ * have to be passed in: the set of real routes, and the set of known anchors.
+ * That is the whole reason this is a function taking a context rather than a
+ * copy of the audit.
+ *
+ * ## What it deliberately does NOT check
+ *
+ * Whether the target page renders anything useful. A route that exists and an
+ * anchor that exists are provable from data the server has; "is this a sensible
+ * place to send someone" is not, and a validator that pretends otherwise would
+ * reject legitimate entries and teach admins to work around it.
+ *
+ * EXPORTS: validateActionIndexEntry, type ActionIndexValidationContext,
+ *          type ActionIndexValidationIssue
+ *
+ * @tag domain:search
+ * @tag layer:shared
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag consumers:/api/admin/action-index,audit-action-index
+ * @tag sideEffects:none
+ */
+/**
+ * Normalise an href to the form `knownRoutes` is keyed by: no origin, no
+ * locale segment, no query, no hash, no trailing slash.
+ *
+ * The locale strip matters — an admin pasting the URL out of their address bar
+ * gets `/en/admin/orders`, and rejecting that would be technically correct and
+ * useless.
+ */
+export function normaliseRoute(href) {
+    return (href
+        .replace(/^https?:\/\/[^/]+/, "")
+        .replace(/^\/[a-z]{2}(-[A-Z]{2})?(?=\/)/, "")
+        .replace(/[?#].*$/, "")
+        .replace(/\/+$/, "") || "/");
+}
+/** A dynamic route matches by shape: `/admin/orders/[id]` accepts any id. */
+function matchesKnownRoute(route, knownRoutes) {
+    if (knownRoutes.has(route))
+        return true;
+    const parts = route.split("/");
+    for (const known of knownRoutes) {
+        const knownParts = known.split("/");
+        if (knownParts.length !== parts.length)
+            continue;
+        const ok = knownParts.every((segment, i) => segment === parts[i] || /^\[.+\]$/.test(segment));
+        if (ok)
+            return true;
+    }
+    return false;
+}
+/**
+ * The three checks, at save time.
+ *
+ * Returns every issue rather than the first, so an admin fixing a bad entry
+ * does not discover its second problem only after fixing the first.
+ */
+export function validateActionIndexEntry(entry, ctx) {
+    const issues = [];
+    if (ctx.existingIds?.has(entry.id)) {
+        issues.push({
+            field: "id",
+            message: `"${entry.id}" is already used. A duplicate id silently shadows the existing entry, and an override written for one would land on the other.`,
+        });
+    }
+    const route = normaliseRoute(entry.href);
+    if (!entry.href.trim()) {
+        issues.push({ field: "href", message: "Enter the page this should open." });
+    }
+    else if (!route.startsWith("/")) {
+        issues.push({
+            field: "href",
+            message: "Start the link with / — an index entry points at a page on this site.",
+        });
+    }
+    else if (!matchesKnownRoute(route, ctx.knownRoutes)) {
+        issues.push({
+            field: "href",
+            message: `No page is served at ${route}. Check the path — a link that 404s is worse than no entry at all.`,
+        });
+    }
+    if (entry.deepLink) {
+        const tab = entry.deepLink.match(/[?&]tab=([^&#]+)/)?.[1];
+        const anchor = entry.deepLink.match(/#(.+)$/)?.[1];
+        const tabsForRoute = ctx.knownTabs?.[route];
+        if (tab && tabsForRoute && !tabsForRoute.has(tab)) {
+            issues.push({
+                field: "deepLink",
+                message: `${route} has no "${tab}" tab. The page would open on its default tab, which reads as the search having missed rather than as a broken link.`,
+            });
+        }
+        const anchorsForRoute = ctx.knownAnchors?.[route];
+        if (anchor && anchorsForRoute && !anchorsForRoute.has(anchor)) {
+            issues.push({
+                field: "deepLink",
+                message: `${route} renders nothing with id="${anchor}". The link would scroll nowhere.`,
+            });
+        }
+    }
+    return issues;
+}

package/dist/features/search/hooks/useNavSuggestions.d.ts

@@ -8,8 +8,12 @@ export interface NavSuggestionRecord {
 /**
  * W1-19 — wired to `/api/search/suggestions` 2026-05-23. Fetches up to 20
  * matches (5 per resource type) and surfaces them as typeahead rows.
+ *
+ * `minChars` is trailing and defaulted because this hook is part of appkit's
+ * public API (`appkit/src/index.ts`); existing 2-argument callers keep working
+ * and inherit the gate.
  */
-export declare function useNavSuggestions(query: string, selectedType?: string, debounceMs?: number): {
+export declare function useNavSuggestions(query: string, selectedType?: string, debounceMs?: number, minChars?: number): {
     suggestions: NavSuggestionRecord[];
     isLoading: boolean;
 };

package/dist/features/search/hooks/useNavSuggestions.js

@@ -20,11 +20,28 @@ const SUGGESTION_TYPE_PARAM_MAP = {
     blog: "blog",
     events: "event",
 };
+/**
+ * The shortest query that reaches the network.
+ *
+ * 🛑 Entity suggestions cost a real Firestore round trip — the route reads
+ * products, categories, blog posts and events. Below this length the result is
+ * dominated by whatever happens to sort first, so the request buys noise at the
+ * price of two round trips per typed word, on every page, for every visitor.
+ *
+ * This gate is for the ENTITY band only. Action/nav suggestions match an
+ * in-memory index and should stay available from the first character — typing
+ * "s" and seeing "Settings" is genuinely useful and costs nothing.
+ */
+const DEFAULT_MIN_CHARS = 3;
 /**
  * W1-19 — wired to `/api/search/suggestions` 2026-05-23. Fetches up to 20
  * matches (5 per resource type) and surfaces them as typeahead rows.
+ *
+ * `minChars` is trailing and defaulted because this hook is part of appkit's
+ * public API (`appkit/src/index.ts`); existing 2-argument callers keep working
+ * and inherit the gate.
  */
-export function useNavSuggestions(query, selectedType, debounceMs = 250) {
+export function useNavSuggestions(query, selectedType, debounceMs = 250, minChars = DEFAULT_MIN_CHARS) {
     const [suggestions, setSuggestions] = useState([]);
     const [isLoading, setIsLoading] = useState(false);
     const timerRef = useRef(null);
@@ -35,7 +52,10 @@ export function useNavSuggestions(query, selectedType, debounceMs = 250) {
         if (abortRef.current)
             abortRef.current.abort();
         const trimmed = query.trim();
-        if (!trimmed) {
+        // Below the gate is a deliberate no-op, not a failure: clear the rows and
+        // report not-loading, so the dropdown shows its action band rather than a
+        // spinner that never resolves.
+        if (trimmed.length < minChars) {
             setSuggestions([]);
             setIsLoading(false);
             return;
@@ -76,6 +96,6 @@ export function useNavSuggestions(query, selectedType, debounceMs = 250) {
             if (abortRef.current)
                 abortRef.current.abort();
         };
-    }, [query, selectedType, debounceMs]);
+    }, [query, selectedType, debounceMs, minChars]);
     return { suggestions, isLoading };
 }

package/dist/features/search/repository/search.repository.js

@@ -1,3 +1,5 @@
+import { SIEVE_OP, sieveFilter } from "../../../utils/sieve-builder";
+import { PRODUCT_FIELDS } from "../../../constants/field-names";
 /**
  * SearchRepository
  *
@@ -25,7 +27,7 @@ export class SearchRepository {
             filterParts.push(`condition==${query.condition}`);
         // SB1-G Phase 4 — canonical listingType discriminator.
         if (query.listingType) {
-            filterParts.push(`listingType==${query.listingType}`);
+            filterParts.push(sieveFilter(PRODUCT_FIELDS.LISTING_TYPE, SIEVE_OP.EQ, query.listingType));
         }
         if (query.inStock === true)
             filterParts.push("availableQuantity>0");

package/dist/features/seller/actions/offer-actions.js

@@ -14,11 +14,10 @@ import { storeRepository } from "../../stores/repository/store.repository";
 import { cartRepository } from "../../cart/repository/cart.repository";
 import { maskOfferForSeller } from "../../../security";
 import { ERROR_MESSAGES, AuthorizationError, ValidationError, NotFoundError, OFFER_ERROR_CODES, } from "../../../errors";
-import { siteSettingsRepository } from "../../admin/repository/site-settings.repository";
 import { canMakeOffer } from "../../../_internal/shared/listing-types/capabilities";
 import { normalizeListingType } from "../../products/utils/listing-type";
 import { OfferStatusValues } from "../schemas";
-import { DEFAULT_MIN_OFFER_PERCENT, minOfferAmount, } from "../../../_internal/shared/features/offers/config";
+import { DEFAULT_MIN_OFFER_PERCENT, offerIsOnlyPurchasePath, offersEnabledFor, resolveOfferBounds, } from "../../../_internal/shared/features/offers/config";
 /**
  * How long an accepted offer stays claimable at its locked price. Shared by the
  * seller-accept path, the buyer-accepts-counter path, and the expiry sweep so
@@ -31,34 +30,59 @@ const ERR_NOT_AUTHORISED = "Not authorized";
 export async function makeOffer(userId, userEmail, input) {
     const { productId, offerAmount, buyerNote } = input;
     /**
-     * Three independent gates, checked in widening-to-narrowing order. Only
-     * `makeOffer` is guarded — switching the site flag off must stop NEW offers
-     * without stranding in-flight ones, so accept/decline/counter/withdraw and
-     * `checkoutOffer` deliberately stay open.
+     * Two independent gates, checked in widening-to-narrowing order: the listing
+     * type's `canMakeOffer` capability, then the seller's own `allowOffers`
+     * opt-in.
+     *
+     * There was a third — the site-wide `featureFlags.offers` kill switch — which
+     * cost a Firestore singleton read on every offer attempt. It went with the
+     * rest of that group on 2026-08-29. The two that remain are the ones somebody
+     * actually sets: a per-type capability and a per-listing choice by the seller
+     * who owns the item.
+     *
+     * Both now go through `offersEnabledFor` / `resolveOfferBounds`, which the
+     * buyer's form reads too — the whole point of moving the rule into the shared
+     * config. A second copy here is how the form came to advertise a 50% floor
+     * this function then rejected (see the config's own header).
      */
-    const settings = await siteSettingsRepository.getSingleton().catch(() => null);
-    if (settings?.featureFlags?.offers === false) {
-        throw new ValidationError(ERROR_MESSAGES.OFFER.DISABLED, {
-            code: OFFER_ERROR_CODES.DISABLED,
-        });
-    }
     const product = await productRepository.findById(productId);
     if (!product)
         throw new NotFoundError(ERROR_MESSAGES.PRODUCT.NOT_FOUND);
+    const listingType = normalizeListingType(product);
     // Some listing types cannot be negotiated at all — an auction already has
     // bidding, a prize-draw sells fixed-price entries. This was never checked, so
     // an offer could be (and in seed data was) attached to an auction, producing
     // a cart line that claims `listingType: "standard"` in the offer lane.
-    if (!canMakeOffer(normalizeListingType(product))) {
+    if (!canMakeOffer(listingType)) {
         throw new ValidationError("Offers aren't available for this kind of listing.");
     }
-    if (!product.allowOffers)
+    if (!offersEnabledFor(listingType, product.allowOffers))
         throw new ValidationError("This product does not accept offers.");
-    const minAllowed = minOfferAmount(product.price, product.minOfferPercent);
-    if (offerAmount < minAllowed)
-        throw new ValidationError(`Minimum offer is ₹${minAllowed} (${product.minOfferPercent ?? DEFAULT_MIN_OFFER_PERCENT}% of listing price).`);
-    if (offerAmount >= product.price)
-        throw new ValidationError("Your offer must be below the listed price. Use Add to Cart instead.");
+    const bounds = resolveOfferBounds({
+        listingType,
+        listedPrice: product.price,
+        minOfferPercent: product.minOfferPercent,
+        allowOffers: product.allowOffers,
+    });
+    if (bounds.isBuyRequest) {
+        // No cart on this type and the seller has not opted into haggling, so the
+        // asking price is the only legal amount. Naming that plainly beats a
+        // "minimum offer is ₹X" message where X happens to equal the price.
+        if (offerAmount !== bounds.max)
+            throw new ValidationError(`This seller is not taking lower offers — send a request to buy at ₹${bounds.max}.`);
+    }
+    else {
+        if (offerAmount < bounds.min)
+            throw new ValidationError(`Minimum offer is ₹${bounds.min} (${product.minOfferPercent ?? DEFAULT_MIN_OFFER_PERCENT}% of listing price).`);
+        if (offerAmount > bounds.max)
+            throw new ValidationError(
+            // Deliberately NOT "use Add to Cart instead" unconditionally: on a
+            // listing whose only purchase path is an offer there is no cart button,
+            // so that advice named a control the page does not have.
+            offerIsOnlyPurchasePath(listingType)
+                ? `Your offer cannot exceed the asking price of ₹${product.price}.`
+                : "Your offer must be below the listed price. Use Add to Cart instead.");
+    }
     const offerCount = await offerRepository.countByBuyerAndProduct(userId, productId, product.updatedAt);
     if (offerCount >= 3)
         throw new ValidationError(ERROR_MESSAGES.OFFER.LIMIT_REACHED);

package/dist/features/seller/actions/seller-actions.js

@@ -9,7 +9,7 @@
  * (src/actions/seller.actions.ts) alongside the other seller server actions.
  */
 import { serverLogger } from "../../../monitoring";
-import { isAdminUser, isSellerUser } from "../../auth/role-predicates";
+import { isAdminUser, isStrictSellerUser, isTesterUser } from "../../auth/role-predicates";
 import { ApiError, AuthorizationError, NotFoundError, ValidationError, } from "../../../errors";
 import { userRepository } from "../../auth/repository/user.repository";
 import { storeRepository } from "../../stores/repository/store.repository";
@@ -53,16 +53,40 @@ function maskAccountNumber(accountNumber) {
 // --- Become Seller ------------------------------------------------------------
 export async function becomeSeller(userId) {
     const profile = await userRepository.findById(userId);
-    if (profile && (isSellerUser(profile) || isAdminUser(profile))) {
+    const isTester = isTesterUser(profile);
+    /*
+     * 🛑 `isStrictSellerUser`, not `isSellerUser`.
+     *
+     * `isSellerUser` now answers true for the `tester` role — testers own real
+     * stores and must clear every seller gate. But that makes it the WRONG test
+     * here: a brand-new tester has role `tester` from the moment they are
+     * flagged, so an early return keyed on it would send them straight back with
+     * `storeStatus: "pending"` and they would never reach the auto-approve below.
+     * The tester sandbox depends on that approval.
+     *
+     * A tester who HAS already onboarded is caught by the `storeStatus` clause,
+     * so this stays idempotent for them.
+     */
+    const alreadyOnboarded = profile &&
+        (isStrictSellerUser(profile) ||
+            isAdminUser(profile) ||
+            (isTester && Boolean(profile.storeStatus)));
+    if (alreadyOnboarded) {
         return {
             alreadySeller: true,
             storeStatus: profile.storeStatus ??
                 "pending",
         };
     }
-    const storeStatus = profile?.isTester ? "approved" : "pending";
+    const storeStatus = isTester ? "approved" : "pending";
     await userRepository.update(userId, {
-        role: "seller",
+        // 🛑 A tester must NOT be demoted to `seller` here. `tester` is a peer of
+        // `seller` in the hierarchy and already clears every seller gate
+        // (`isSellerUser` returns true for it), so overwriting the role would
+        // silently strip their tester identity — and with it the Tester Hub and
+        // the test-data visibility their whole programme depends on — the first
+        // time they opened a store.
+        ...(isTester ? {} : { role: "seller" }),
         storeStatus,
     });
     serverLogger.info("becomeSeller: application submitted", { userId, storeStatus });
@@ -83,7 +107,7 @@ export async function createStore(userId, userName, input) {
         storeSlug = `${baseSlug.slice(0, 80 - suffix.length)}${suffix}`;
     }
     const profile = await userRepository.findById(userId);
-    const isTester = profile?.isTester === true;
+    const isTester = isTesterUser(profile);
     const store = await storeRepository.create({
         storeSlug,
         ownerId: userId,

package/dist/features/seller/components/CategoryChipPicker.d.ts

@@ -0,0 +1,9 @@
+import React from "react";
+export interface CategoryChipPickerProps {
+    selected: string[];
+    onSelectedChange: (next: string[]) => void;
+    /** Copy under the control. Defaults to the coupon wording. */
+    emptyHint?: string;
+    allowCreate?: boolean;
+}
+export declare function CategoryChipPicker({ selected, onSelectedChange, emptyHint, allowCreate, }: CategoryChipPickerProps): React.JSX.Element;

package/dist/features/seller/components/CategoryChipPicker.js

@@ -0,0 +1,12 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { IconButton, Row, Span, Stack, Text } from "../../../ui";
+import { CategoryInlineSelect } from "./CategoryInlineSelect";
+export function CategoryChipPicker({ selected, onSelectedChange, emptyHint = "Leave empty to apply to every category.", allowCreate = false, }) {
+    const add = (id) => {
+        if (!id || selected.includes(id))
+            return;
+        onSelectedChange([...selected, id]);
+    };
+    return (_jsxs(Stack, { gap: "xs", children: [_jsx(CategoryInlineSelect, { value: "", onChange: add, allowCreate: allowCreate, placeholder: "Add a category\u2026" }), selected.length > 0 && (_jsx(Row, { wrap: true, gap: "sm", padding: "t-2xs", children: selected.map((cid) => (_jsxs(Span, { layout: "inline-flex", gap: "xs", border: "strong", padding: "pill-sm", rounded: "full", surface: "muted", color: "primary", size: "xs", children: [cid, _jsx(IconButton, { "aria-label": `Remove ${cid}`, variant: "ghost", size: "sm", onClick: () => onSelectedChange(selected.filter((c) => c !== cid)), icon: "\u00D7" })] }, cid))) })), _jsx(Text, { size: "xs", color: "muted", children: emptyHint })] }));
+}

package/dist/features/seller/components/FulfillmentView.js

@@ -37,12 +37,15 @@ export function FulfillmentView({ currentUserId, }) {
             setOrders(res.orders ?? []);
         }
         catch (err) {
-            void normalizeError(err);
+            // An empty fulfilment queue is a normal, expected state, so a swallowed
+            // failure here reads as "nothing to pack" — matching the rest of this
+            // file, surface it instead.
+            showToast(normalizeError(err).message, "error");
         }
         finally {
             setIsLoadingOrders(false);
         }
-    }, []);
+    }, [showToast]);
     useEffect(() => {
         void fetchOrders();
     }, [fetchOrders]);

package/dist/features/seller/components/PhysicalLocationModal.js

@@ -22,7 +22,7 @@ export function PhysicalLocationModal({ count, onSave, onClose }) {
         }
         catch (e) {
             void normalizeError(e);
-            setError(e instanceof Error ? e.message : "Failed to save location");
+            setError("Failed to save location");
         }
         finally {
             setSaving(false);

package/dist/features/seller/components/PrintCenterView.js

@@ -20,10 +20,12 @@ function ProductLabel({ product }) {
                     fontSize: 12,
                     margin: 8,
                 });
+                // JsBarcode throws on a value CODE128 cannot encode. The <svg> is left
+                // empty and the label still prints its title and price — there is no
+                // recovery beyond fixing the barcodeId on the product itself.
             }
             catch (_err) {
                 void normalizeError(_err);
-                // Invalid barcode value — render nothing
             }
         }
     }, [product.barcodeId]);

package/dist/features/seller/components/SellerAddressesView.js

@@ -146,5 +146,9 @@ export function SellerAddressesView({ apiBase = SELLER_ENDPOINTS.STORE_ADDRESSES
     return (_jsxs(Div, { className: "min-h-screen", children: [_jsx(StickyToolbar, { offset: "header", tone: "default", border: true, padding: "md", children: _jsxs(Row, { justify: "between", children: [_jsxs(Stack, { gap: "none", children: [_jsx(Heading, { level: 2, size: "base", weight: "semibold", color: "primary", children: "Pickup Addresses" }), _jsx(Text, { size: "xs", color: "muted", className: "mt-0.5", children: "Manage your store's pickup and return locations" })] }), _jsxs(Row, { gap: "sm", align: "center", children: [_jsx(TextLink, { href: String(ROUTES.STORE.ADDRESSES_NEW), children: "Open full page \u2192" }), _jsxs(Button, { gap: "sm", size: "sm", onClick: openAdd, children: [_jsx(Plus, { className: "h-4 w-4" }), _jsx(Span, { children: "Add Address" })] })] })] }) }), _jsxs(Div, { paddingX: "x-md-lg", className: "max-w-2xl", padding: "y-lg", children: [errorMessage && (_jsx(Div, { textSize: "sm", className: "mb-4 border border-error/20", color: "error", surface: "danger-surface", padding: "inline", rounded: "xl", children: errorMessage })), isLoading ? (_jsx(Row, { justify: "center", padding: "y-4xl", children: _jsx(Div, { className: "h-6 w-6 animate-spin border-2 border-[var(--appkit-color-primary)] border-t-transparent", rounded: "full" }) })) : addresses.length === 0 ? (_jsxs(Stack, { border: "default", className: "border-2 border-dashed", padding: "y-4xl", align: "center", gap: "3", rounded: "xl", children: [_jsx(MapPin, { className: "h-8 w-8 text-[var(--appkit-color-text-muted)]" }), _jsx(Text, { size: "sm", color: "muted", children: "No pickup addresses yet" }), _jsx(Button, { size: "sm", variant: "outline", onClick: openAdd, children: "Add your first address" })] })) : (_jsxs(_Fragment, { children: [_jsxs(Row, { justify: "end", className: "mb-2", children: [_jsx(Button, { size: "sm", variant: listView === "table" ? "primary" : "ghost", onClick: () => setListView("table"), children: "Table" }), _jsx(Button, { size: "sm", variant: listView === "cards" ? "primary" : "ghost", onClick: () => setListView("cards"), children: "Cards" })] }), listView === "cards" ? (_jsx(Grid, { gap: "sm", children: addresses.map((addr) => (_jsx(Div, { className: deletingId === addr.id ? "opacity-50 pointer-events-none" : "", children: _jsx(AddressCard, { address: addr, onEdit: () => openEdit(addr), onDelete: () => handleDelete(addr) }) }, addr.id))) })) : (_jsx(Div, { className: `${__O.xAuto}`, rounded: "lg", border: "default", children: _jsxs(Table, { size: "sm", children: [_jsx(Thead, { surface: "muted", children: _jsxs(Tr, { children: [_jsx(Th, { className: "text-left", padding: "sm", weight: "semibold", children: "Label" }), _jsx(Th, { className: "text-left", padding: "sm", weight: "semibold", children: "Name" }), _jsx(Th, { className: "text-left", padding: "sm", weight: "semibold", children: "City" }), _jsx(Th, { className: "text-left", padding: "sm", weight: "semibold", children: "Phone" }), _jsx(Th, { className: "text-right", padding: "sm", weight: "semibold", children: "Actions" })] }) }), _jsx(Tbody, { children: addresses.map((addr) => {
                                                 const isBanned = addr.banStatus === "banned";
                                                 return (_jsxs(Tr, { className: `border-t border-[var(--appkit-color-border)] ${deletingId === addr.id ? "opacity-50" : ""}`, children: [_jsx(Td, { padding: "sm", children: _jsxs(Row, { gap: "xs", align: "center", children: [_jsx(Span, { children: addr.label }), isBanned && _jsx(Badge, { variant: "danger", size: "sm", children: "Banned" })] }) }), _jsx(Td, { padding: "sm", children: addr.fullName }), _jsxs(Td, { padding: "sm", children: [addr.city, ", ", addr.state] }), _jsx(Td, { className: "tabular-nums", padding: "sm", children: addr.phone }), _jsx(Td, { className: "text-right", padding: "sm", children: isBanned ? (_jsx(Span, { size: "xs", color: "muted", title: "Contact support to resolve address ban", children: "Contact support" })) : (_jsxs(Row, { justify: "end", gap: "xs", children: [_jsx(Button, { size: "sm", variant: "ghost", onClick: () => openEdit(addr), children: ROW_ACTION_META[ROW_ACTION_ID.EDIT].label }), _jsx(Button, { size: "sm", variant: "ghost", onClick: () => handleDelete(addr), children: ROW_ACTION_META[ROW_ACTION_ID.DELETE].label })] })) })] }, addr.id));
-                                            }) })] }) }))] }))] }), _jsx(SideDrawer, { isOpen: drawerOpen, onClose: closeDrawer, title: editingId ? "Edit Address" : "Add Address", footer: _jsxs(Row, { gap: "xs", children: [_jsx(Button, { variant: "outline", onClick: closeDrawer, className: "flex-1", children: "Cancel" }), _jsx(Button, { onClick: handleSave, disabled: saving, className: "flex-1", children: saving ? "Saving…" : editingId ? "Save Changes" : "Add Address" })] }), children: _jsxs(Stack, { gap: "md", padding: "y-2xs", children: [saveError && (_jsx(Div, { textSize: "sm", className: "border border-error/20", color: "error", surface: "danger-surface", padding: "inlineSm", rounded: "lg", children: saveError })), _jsx(FieldInput, { name: "label", label: "Label *", hint: "e.g. Warehouse, Shop, Home", type: "text", value: draft.label, onChange: setField("label"), placeholder: "Warehouse", maxLength: 60 }), _jsxs(Grid, { cols: 2, gap: "sm", children: [_jsx(FieldInput, { name: "fullName", label: "Full Name *", type: "text", value: draft.fullName, onChange: setField("fullName"), placeholder: "Ravi Kumar", maxLength: 100 }), _jsx(FieldInput, { name: "phone", label: "Phone *", type: "tel", value: draft.phone, onChange: setField("phone"), placeholder: "+91 98765 43210", maxLength: 20 })] }), _jsx(FieldInput, { name: "addressLine1", label: "Address Line 1 *", type: "text", value: draft.addressLine1, onChange: setField("addressLine1"), placeholder: "Shop 12, Main Market", maxLength: 200 }), _jsx(FieldInput, { name: "addressLine2", label: "Address Line 2", type: "text", value: draft.addressLine2, onChange: setField("addressLine2"), placeholder: "Building / Floor (optional)", maxLength: 200 }), _jsx(FieldInput, { name: "landmark", label: "Landmark", type: "text", value: draft.landmark, onChange: setField("landmark"), placeholder: "Near metro station (optional)", maxLength: 100 }), _jsxs(Grid, { cols: 2, gap: "sm", children: [_jsx(FieldInput, { name: "city", label: "City *", type: "text", value: draft.city, onChange: setField("city"), placeholder: "Mumbai", maxLength: 100 }), _jsx(FieldInput, { name: "state", label: "State *", type: "text", value: draft.state, onChange: setField("state"), placeholder: "Maharashtra", maxLength: 100 })] }), _jsxs(Grid, { cols: 2, gap: "sm", children: [_jsx(FieldInput, { name: "postalCode", label: "Postal Code *", type: "text", value: draft.postalCode, onChange: setField("postalCode"), placeholder: "400001", maxLength: 10 }), _jsx(FieldInput, { name: "country", label: "Country *", type: "text", value: draft.country, onChange: setField("country"), placeholder: "India", maxLength: 60 })] }), _jsx(FieldCheckbox, { name: "isDefault", label: "Set as default pickup address", checked: draft.isDefault, onChange: (c) => set("isDefault", c) })] }) }), deleteTargetAddr && (_jsx(ConfirmDeleteModal, { isOpen: true, title: "Delete Address", message: `Delete address "${deleteTargetAddr.label}"? This cannot be undone.`, onConfirm: () => { deleteById(deleteTargetAddr.id); setDeleteTargetAddr(null); }, onClose: () => setDeleteTargetAddr(null), isDeleting: deletingId === deleteTargetAddr.id }))] }));
+                                            }) })] }) }))] }))] }), _jsx(SideDrawer, { isOpen: drawerOpen, onClose: closeDrawer, title: editingId ? "Edit Address" : "Add Address", footer: 
+                /* Bare buttons — the SideDrawer footer slot supplies the ActionRow.
+                   The `flex-1` these carried would have beaten its sizing under
+                   `important: true`. */
+                _jsxs(_Fragment, { children: [_jsx(Button, { variant: "outline", onClick: closeDrawer, children: "Cancel" }), _jsx(Button, { onClick: handleSave, disabled: saving, children: saving ? "Saving…" : editingId ? "Save Changes" : "Add Address" })] }), children: _jsxs(Stack, { gap: "md", padding: "y-2xs", children: [saveError && (_jsx(Div, { textSize: "sm", className: "border border-error/20", color: "error", surface: "danger-surface", padding: "inlineSm", rounded: "lg", children: saveError })), _jsx(FieldInput, { name: "label", label: "Label *", hint: "e.g. Warehouse, Shop, Home", type: "text", value: draft.label, onChange: setField("label"), placeholder: "Warehouse", maxLength: 60 }), _jsxs(Grid, { cols: 2, gap: "sm", children: [_jsx(FieldInput, { name: "fullName", label: "Full Name *", type: "text", value: draft.fullName, onChange: setField("fullName"), placeholder: "Ravi Kumar", maxLength: 100 }), _jsx(FieldInput, { name: "phone", label: "Phone *", type: "tel", value: draft.phone, onChange: setField("phone"), placeholder: "+91 98765 43210", maxLength: 20 })] }), _jsx(FieldInput, { name: "addressLine1", label: "Address Line 1 *", type: "text", value: draft.addressLine1, onChange: setField("addressLine1"), placeholder: "Shop 12, Main Market", maxLength: 200 }), _jsx(FieldInput, { name: "addressLine2", label: "Address Line 2", type: "text", value: draft.addressLine2, onChange: setField("addressLine2"), placeholder: "Building / Floor (optional)", maxLength: 200 }), _jsx(FieldInput, { name: "landmark", label: "Landmark", type: "text", value: draft.landmark, onChange: setField("landmark"), placeholder: "Near metro station (optional)", maxLength: 100 }), _jsxs(Grid, { cols: 2, gap: "sm", children: [_jsx(FieldInput, { name: "city", label: "City *", type: "text", value: draft.city, onChange: setField("city"), placeholder: "Mumbai", maxLength: 100 }), _jsx(FieldInput, { name: "state", label: "State *", type: "text", value: draft.state, onChange: setField("state"), placeholder: "Maharashtra", maxLength: 100 })] }), _jsxs(Grid, { cols: 2, gap: "sm", children: [_jsx(FieldInput, { name: "postalCode", label: "Postal Code *", type: "text", value: draft.postalCode, onChange: setField("postalCode"), placeholder: "400001", maxLength: 10 }), _jsx(FieldInput, { name: "country", label: "Country *", type: "text", value: draft.country, onChange: setField("country"), placeholder: "India", maxLength: 60 })] }), _jsx(FieldCheckbox, { name: "isDefault", label: "Set as default pickup address", checked: draft.isDefault, onChange: (c) => set("isDefault", c) })] }) }), deleteTargetAddr && (_jsx(ConfirmDeleteModal, { isOpen: true, title: "Delete Address", message: `Delete address "${deleteTargetAddr.label}"? This cannot be undone.`, onConfirm: () => { deleteById(deleteTargetAddr.id); setDeleteTargetAddr(null); }, onClose: () => setDeleteTargetAddr(null), isDeleting: deletingId === deleteTargetAddr.id }))] }));
 }