@mohasinac/appkit 4.30.19 → 4.31.0

package/dist/_internal/client/features/layout/useSidebarSearch.d.ts

@@ -1,13 +1,29 @@
+import { type NavSearchable } from "../../../shared/features/layout/matchesNavQuery";
 /**
- * Shared inline-filter logic for the Admin/Store/User sidebars — lowercase
- * substring match against item labels, collapsing to only groups with a
- * surviving match. Each sidebar keeps its own accordion/markup; only this
- * pure filtering algorithm is shared so it isn't rewritten three times.
+ * Shared inline-filter logic for the Admin/Store/User sidebars. Each sidebar
+ * keeps its own accordion/markup; only this filtering is shared so it is not
+ * rewritten three times.
+ *
+ * ## It searches what a screen is FOR, not just what it is called
+ *
+ * This was `item.label.toLowerCase().includes(q)`, which could only find a
+ * screen by the name already on the button. "refund" found nothing, because
+ * the screen is called Payouts. "postcode" found nothing, because the field is
+ * called PIN code. "maintenance" found nothing, because that toggle lives
+ * inside Site Settings. W6 gave every nav item a `description` and `keywords`;
+ * `matchesNavQuery` reads all three.
+ *
+ * ## Results are RANKED, and within a group only
+ *
+ * A label hit beats a keyword hit beats a description hit, so typing "orders"
+ * puts **Orders** above the guide that merely mentions orders. Groups keep
+ * their declared order — reordering them by best score would move the sidebar
+ * around under the reader's cursor while they type.
  */
 export declare function useSidebarSearch<Item extends {
     href: string;
     label: string;
-}, Group extends {
+} & Partial<NavSearchable>, Group extends {
     title: string;
     items: Item[];
     defaultOpen?: boolean;

package/dist/_internal/client/features/layout/useSidebarSearch.js

@@ -1,10 +1,26 @@
 "use client";
 import { useMemo, useState } from "react";
+import { matchesNavQuery } from "../../../shared/features/layout/matchesNavQuery";
 /**
- * Shared inline-filter logic for the Admin/Store/User sidebars — lowercase
- * substring match against item labels, collapsing to only groups with a
- * surviving match. Each sidebar keeps its own accordion/markup; only this
- * pure filtering algorithm is shared so it isn't rewritten three times.
+ * Shared inline-filter logic for the Admin/Store/User sidebars. Each sidebar
+ * keeps its own accordion/markup; only this filtering is shared so it is not
+ * rewritten three times.
+ *
+ * ## It searches what a screen is FOR, not just what it is called
+ *
+ * This was `item.label.toLowerCase().includes(q)`, which could only find a
+ * screen by the name already on the button. "refund" found nothing, because
+ * the screen is called Payouts. "postcode" found nothing, because the field is
+ * called PIN code. "maintenance" found nothing, because that toggle lives
+ * inside Site Settings. W6 gave every nav item a `description` and `keywords`;
+ * `matchesNavQuery` reads all three.
+ *
+ * ## Results are RANKED, and within a group only
+ *
+ * A label hit beats a keyword hit beats a description hit, so typing "orders"
+ * puts **Orders** above the guide that merely mentions orders. Groups keep
+ * their declared order — reordering them by best score would move the sidebar
+ * around under the reader's cursor while they type.
  */
 export function useSidebarSearch(groups) {
     const [query, setQuery] = useState("");
@@ -12,9 +28,14 @@ export function useSidebarSearch(groups) {
     const filteredGroups = useMemo(() => {
         if (!isSearching)
             return groups;
-        const q = query.trim().toLowerCase();
         return groups
-            .map((group) => ({ ...group, items: group.items.filter((item) => item.label.toLowerCase().includes(q)) }))
+            .map((group) => {
+            const scored = group.items
+                .map((item) => ({ item, score: matchesNavQuery(item, query) }))
+                .filter((entry) => entry.score > 0)
+                .sort((a, b) => b.score - a.score);
+            return { ...group, items: scored.map((entry) => entry.item) };
+        })
             .filter((group) => group.items.length > 0);
     }, [groups, query, isSearching]);
     return { query, setQuery, isSearching, filteredGroups };

package/dist/_internal/client/features/lottery/LotteryAdminEditView.d.ts

@@ -1,5 +1,28 @@
+/**
+ * LotteryAdminEditView — the slot configuration for one lottery. Sectionised
+ * 2026-08-30.
+ *
+ * ## Two schemas became one
+ *
+ * It declared `lotteryConfigFormSchema` on `<Form>` and parsed
+ * `lotteryConfigWriteSchema` in the submit handler, so the form schema's
+ * duplicate-slot and free-lottery rules had never executed. The form schema is
+ * deleted; `lotteryConfigWriteSchema` carries the annotations now and is both
+ * what this form renders from and what the route parses.
+ *
+ * ## Title and description are gone, not moved
+ *
+ * They were editable here and reached nothing: `LotteryConfigClient` posts
+ * `data.lotteryConfig` to `PUT .../lottery-config` and ignores the rest, and
+ * that route accepts only the config. An event's title, dates, status and
+ * media are edited in the ordinary event editor — this page is the slots. Two
+ * inputs that saved silently into nowhere are worse than their absence, which
+ * is the same call made on `rememberMe`. The title still appears, as the
+ * heading, so it is obvious which lottery is open.
+ */
 import React from "react";
 import type { LotteryConfigWriteInput } from "../../../../features/lottery/schemas/config-write";
+/** One editable row of the slot table. */
 interface LotterySlotRow {
     slotNumber: number;
     name: string;
@@ -22,9 +45,6 @@ interface LotterySlotRow {
  * fullness check reads.
  */
 interface LotteryEventFormData {
-    title: string;
-    description?: string;
-    type: "lottery";
     lotteryConfig: LotteryConfigWriteInput;
 }
 interface LotteryAdminEditViewProps {

package/dist/_internal/client/features/lottery/LotteryAdminEditView.js

@@ -1,98 +1,121 @@
 "use client";
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { useState, useTransition } from "react";
-import { normalizeError } from "../../../../errors/normalize";
-import { toUserMessage } from "../../../../errors/error-display-map";
-import { Stack, Row, Text, Heading, Section, Container, Button, DataTable, } from "../../../../ui";
-import { Form, FieldInput, FieldSelect, Input } from "../../../../ui";
-import { lotteryConfigFormSchema } from "../../../shared/features/lottery/config-form";
-import { lotteryConfigWriteSchema } from "../../../../features/lottery/schemas/config-write";
+/**
+ * LotteryAdminEditView — the slot configuration for one lottery. Sectionised
+ * 2026-08-30.
+ *
+ * ## Two schemas became one
+ *
+ * It declared `lotteryConfigFormSchema` on `<Form>` and parsed
+ * `lotteryConfigWriteSchema` in the submit handler, so the form schema's
+ * duplicate-slot and free-lottery rules had never executed. The form schema is
+ * deleted; `lotteryConfigWriteSchema` carries the annotations now and is both
+ * what this form renders from and what the route parses.
+ *
+ * ## Title and description are gone, not moved
+ *
+ * They were editable here and reached nothing: `LotteryConfigClient` posts
+ * `data.lotteryConfig` to `PUT .../lottery-config` and ignores the rest, and
+ * that route accepts only the config. An event's title, dates, status and
+ * media are edited in the ordinary event editor — this page is the slots. Two
+ * inputs that saved silently into nowhere are worse than their absence, which
+ * is the same call made on `rememberMe`. The title still appears, as the
+ * heading, so it is obvious which lottery is open.
+ */
+import React from "react";
+import { Button, DataTable, Input, Row, Stack, Text, } from "../../../../ui";
 import { FormErrorSummary } from "../../../../ui/forms/FormErrorSummary";
+import { FormShellContext, useFormShellState } from "../../../../ui/forms/FormShell";
+import { applyZodIssues } from "../../../../ui/forms/apply-zod-issues";
+import { StackedViewShell } from "../../../../ui";
+import { buildSectionsFromSchema, visibleValues } from "../../../../features/shell/build-sections";
+import { SectionForm, useSectionFormNav } from "../../../../features/shell/SectionForm";
+import { lotteryConfigWriteSchema } from "../../../../features/lottery/schemas/config-write";
+const MAX_SLOTS = 200;
 export function LotteryAdminEditView({ eventId, initialData, onSubmit, }) {
-    const [isPending, startTransition] = useTransition();
-    const [error, setError] = useState(null);
-    const [title, setTitle] = useState(initialData?.title ?? "");
-    const [description, setDescription] = useState(initialData?.description ?? "");
-    const [pricingMode, setPricingMode] = useState(initialData?.pricingMode ?? "uniform");
-    const [uniformPrice, setUniformPrice] = useState(String(initialData?.uniformPrice ?? 0));
-    const [drawWindowMinutes, setDrawWindowMinutes] = useState(String(initialData?.drawWindowDurationMinutes ?? 5));
-    const [maxPullsPerTx, setMaxPullsPerTx] = useState(String(initialData?.maxPullsPerTransaction ?? 1));
-    const [maxPullsPerUser, setMaxPullsPerUser] = useState(String(initialData?.maxPullsPerUser ?? 1));
-    const [slots, setSlots] = useState(initialData?.slots ?? [{ slotNumber: 1, name: "", price: 0 }]);
-    const addSlot = () => {
-        setSlots((prev) => [
-            ...prev,
-            { slotNumber: prev.length + 1, name: "", price: 0 },
-        ]);
-    };
-    const removeSlot = (idx) => {
-        setSlots((prev) => prev.filter((_, i) => i !== idx).map((s, i) => ({ ...s, slotNumber: i + 1 })));
-    };
-    const updateSlot = (idx, field, value) => {
-        setSlots((prev) => prev.map((s, i) => i === idx
-            ? { ...s, [field]: field === "price" ? Math.round(parseFloat(value) * 100) / 100 || 0 : value }
-            : s));
-    };
+    const [isPending, startTransition] = React.useTransition();
+    const [form, setForm] = React.useState({
+        pricingMode: initialData?.pricingMode ?? "uniform",
+        uniformPrice: initialData?.uniformPrice ?? 0,
+        drawWindowDurationMinutes: initialData?.drawWindowDurationMinutes ?? 5,
+        maxPullsPerTransaction: initialData?.maxPullsPerTransaction ?? 1,
+        maxPullsPerUser: initialData?.maxPullsPerUser ?? 1,
+        slots: initialData?.slots ?? [{ slotNumber: 1, name: "", price: 0 }],
+    });
+    const patch = (partial) => setForm((prev) => Object.assign({}, prev, partial));
+    const sections = React.useMemo(() => buildSectionsFromSchema(lotteryConfigWriteSchema, {
+        renderers: {
+            slots: ({ values, onChange }) => (_jsx(SlotTable, { slots: values.slots, showPrice: values.pricingMode === "variable", onSlotsChange: (next) => onChange({ slots: next }) })),
+        },
+    }), []);
+    const nav = useSectionFormNav(sections, form, { scope: "admin:lottery-config" });
+    const { shellCtx, setFieldError, clearErrors } = useFormShellState(lotteryConfigWriteSchema, {
+        sections: nav.sectionMeta,
+        onGoToSection: nav.goToSection,
+        fieldToSectionIndex: nav.fieldToSectionIndex,
+    });
     const handleSubmit = () => {
-        setError(null);
+        clearErrors();
+        /*
+         * Per-slot prices are dropped under uniform pricing, where the price of a
+         * slot IS `uniformPrice`. They used to be sent in both modes, so a figure
+         * loaded from `initialData` survived a switch to uniform — unreachable on
+         * screen, still written on save. `visibleValues` cannot reach inside an
+         * array, so this one masking stays explicit.
+         */
+        const draft = visibleValues(lotteryConfigWriteSchema, form);
+        const candidate = {
+            ...draft,
+            slots: form.slots.map((s) => ({
+                slotNumber: s.slotNumber,
+                name: s.name,
+                image: s.image?.trim() || undefined,
+                price: form.pricingMode === "variable" ? s.price : 0,
+            })),
+        };
+        const parsed = lotteryConfigWriteSchema.safeParse(candidate);
+        if (!parsed.success) {
+            applyZodIssues(parsed.error.issues, setFieldError);
+            return;
+        }
         startTransition(async () => {
-            try {
-                /*
-                 * 🛑 This used to send `isBooked: false` and `weight: 0` on every slot,
-                 * and drop `bookedByUserId` / `bookedByDisplayName` /
-                 * `bookedByUserLotteryNumber` entirely — against a `.passthrough()`
-                 * PATCH, which made the first save of a live lottery erase every
-                 * purchased slot, silently, with a 200.
-                 *
-                 * The write shape now has NO booking fields at all and is `.strict()`,
-                 * so a slot's buyer is not something this form can express, let alone
-                 * overwrite. `PUT /lottery-config` merges by `slotNumber` against the
-                 * stored config and is the only writer.
-                 */
-                const candidate = {
-                    slots: slots.map((s) => ({
-                        slotNumber: s.slotNumber,
-                        name: s.name,
-                        image: s.image?.trim() || undefined,
-                        price: s.price,
-                    })),
-                    pricingMode,
-                    uniformPrice: pricingMode === "uniform"
-                        ? Math.round(parseFloat(uniformPrice) * 100) / 100 || 0
-                        : undefined,
-                    drawWindowDurationMinutes: parseInt(drawWindowMinutes, 10) || 5,
-                    maxPullsPerTransaction: parseInt(maxPullsPerTx, 10) || 1,
-                    maxPullsPerUser: parseInt(maxPullsPerUser, 10) || 1,
-                };
-                /*
-                 * The schema was passed to `<Form>` and never actually run — so the
-                 * `parseFloat(x) || 0` coercions above, which it exists to catch, were
-                 * still live. Parsed here so a bad slot is refused on the client
-                 * rather than discovered as a 400.
-                 */
-                const parsed = lotteryConfigWriteSchema.safeParse(candidate);
-                if (!parsed.success) {
-                    setError(parsed.error.issues[0]?.message ?? "Check the lottery settings.");
-                    return;
-                }
-                await onSubmit({ title, description, type: "lottery", lotteryConfig: parsed.data });
-            }
-            catch (err) {
-                const e = normalizeError(err);
-                setError(toUserMessage(e.code, undefined, { fallback: "Failed to save lottery." }));
-            }
+            await onSubmit({ lotteryConfig: parsed.data });
         });
     };
-    // Slot table columns
-    const slotColumns = [
+    return (_jsx(StackedViewShell, { portal: "admin", title: eventId
+            ? `Edit lottery${initialData?.title ? ` — ${initialData.title}` : ""}`
+            : "Create lottery", sections: [
+            _jsxs(FormShellContext.Provider, { value: shellCtx, children: [_jsx(FormErrorSummary, {}), _jsx(SectionForm, { sections: sections, values: form, onChange: patch, onSubmit: handleSubmit, schema: lotteryConfigWriteSchema, openIds: nav.openIds, onOpenChange: nav.setOpenIds, isLoading: isPending, submitLabel: eventId ? "Update lottery" : "Create lottery" })] }, "lottery-config-form"),
+        ] }));
+}
+/**
+ * The repeatable slot rows.
+ *
+ * A module-level component rather than an inline renderer: its handlers would
+ * otherwise sit six braces deep inside `useMemo`, which is what
+ * `audit-code-quality`'s DEEP_NESTING rule exists to stop.
+ */
+function SlotTable({ slots, showPrice, onSlotsChange, }) {
+    const addSlot = () => onSlotsChange([...slots, { slotNumber: slots.length + 1, name: "", price: 0 }]);
+    const removeSlot = (idx) => onSlotsChange(slots.filter((_, i) => i !== idx).map((s, i) => ({ ...s, slotNumber: i + 1 })));
+    const updateSlot = (idx, field, value) => onSlotsChange(slots.map((s, i) => i === idx
+        ? {
+            ...s,
+            [field]: field === "price"
+                ? Math.round(parseFloat(value) * 100) / 100 || 0
+                : value,
+        }
+        : s));
+    const rows = slots.map((s, i) => ({ ...s, _idx: i }));
+    const columns = [
         {
             key: "slotNumber",
             header: "#",
-            render: (s) => _jsx(Text, { size: "xs", color: "muted", family: "mono", children: s.slotNumber }),
+            render: (s) => (_jsx(Text, { size: "xs", color: "muted", family: "mono", children: s.slotNumber })),
         },
         {
             key: "name",
-            header: "Prize Name",
+            header: "Prize name",
             render: (s) => (_jsx(Input, { type: "text", className: "w-full", placeholder: `Prize for slot ${s.slotNumber}`, value: s.name, onChange: (e) => updateSlot(s._idx, "name", e.target.value), "aria-label": `Slot ${s.slotNumber} prize name` })),
         },
         {
@@ -100,7 +123,7 @@ export function LotteryAdminEditView({ eventId, initialData, onSubmit, }) {
             header: "Image",
             render: (s) => (_jsx(Input, { type: "text", className: "w-full", placeholder: "/media/\u2026 or https://\u2026", value: s.image ?? "", onChange: (e) => updateSlot(s._idx, "image", e.target.value), "aria-label": `Slot ${s.slotNumber} prize image URL` })),
         },
-        ...(pricingMode === "variable"
+        ...(showPrice
             ? [
                 {
                     key: "price",
@@ -110,9 +133,5 @@ export function LotteryAdminEditView({ eventId, initialData, onSubmit, }) {
             ]
             : []),
     ];
-    const slotsWithIdx = slots.map((s, i) => ({ ...s, _idx: i }));
-    return (_jsx(Container, { children: _jsx(Section, { children: _jsx(Form, { schema: lotteryConfigFormSchema, onSubmit: (e) => e.preventDefault(), className: "space-y-6", children: ({ clearErrors }) => (_jsxs(Stack, { gap: "xl", children: [_jsx(FormErrorSummary, {}), _jsx(Heading, { level: 1, size: "2xl", weight: "bold", children: eventId ? "Edit Lottery" : "Create Lottery" }), _jsxs(Stack, { gap: "md", children: [_jsx(Heading, { level: 2, size: "lg", weight: "semibold", children: "Basic Info" }), _jsx(FieldInput, { name: "title", label: "Title", required: true, value: title, onChange: (v) => { setTitle(v); clearErrors(); } }), _jsx(FieldInput, { name: "description", label: "Description", value: description, onChange: (v) => { setDescription(v); clearErrors(); } })] }), _jsxs(Stack, { gap: "md", children: [_jsx(Heading, { level: 2, size: "lg", weight: "semibold", children: "Configuration" }), _jsx(FieldSelect, { name: "pricingMode", label: "Pricing Mode", value: pricingMode, options: [
-                                        { label: "Uniform (all slots same price)", value: "uniform" },
-                                        { label: "Variable (per-slot pricing)", value: "variable" },
-                                    ], onChange: (v) => setPricingMode(v) }), pricingMode === "uniform" && (_jsx(FieldInput, { name: "uniformPrice", label: "Price per Slot (\u20B9)", type: "number", value: uniformPrice, onChange: (v) => setUniformPrice(v) })), _jsx(FieldInput, { name: "drawWindowMinutes", label: "Draw Window (minutes)", type: "number", value: drawWindowMinutes, onChange: (v) => setDrawWindowMinutes(v) }), _jsx(FieldInput, { name: "maxPullsPerTx", label: "Max Pulls per Transaction", type: "number", value: maxPullsPerTx, onChange: (v) => setMaxPullsPerTx(v) }), _jsx(FieldInput, { name: "maxPullsPerUser", label: "Max Pulls per User", type: "number", value: maxPullsPerUser, onChange: (v) => setMaxPullsPerUser(v) })] }), _jsxs(Stack, { gap: "md", children: [_jsxs(Row, { align: "center", justify: "between", children: [_jsxs(Heading, { level: 2, size: "lg", weight: "semibold", children: ["Slots (", slots.length, ")"] }), _jsx(Button, { type: "button", variant: "secondary", size: "sm", onClick: addSlot, disabled: slots.length >= 200, children: "+ Add Slot" })] }), _jsx(DataTable, { data: slotsWithIdx, columns: slotColumns, keyExtractor: (s) => String(s.slotNumber), emptyMessage: "No slots yet.", actions: (s) => slots.length > 1 ? (_jsx(Button, { type: "button", variant: "ghost", size: "sm", onClick: () => removeSlot(s._idx), "aria-label": `Remove slot ${s.slotNumber}`, children: "\u00D7" })) : null })] }), error && _jsx(Text, { className: "text-error", size: "sm", role: "alert", children: error }), _jsx(Button, { type: "submit", variant: "primary", isLoading: isPending, onClick: handleSubmit, className: "w-full sm:w-auto", children: isPending ? "Saving…" : eventId ? "Update Lottery" : "Create Lottery" })] })) }) }) }));
+    return (_jsxs(Stack, { gap: "md", children: [_jsxs(Row, { align: "center", justify: "between", children: [_jsxs(Text, { size: "sm", color: "muted", children: [slots.length, " slot", slots.length === 1 ? "" : "s"] }), _jsx(Button, { type: "button", variant: "secondary", size: "sm", onClick: addSlot, disabled: slots.length >= MAX_SLOTS, children: "+ Add slot" })] }), _jsx(DataTable, { data: rows, columns: columns, keyExtractor: (s) => String(s.slotNumber), emptyMessage: "No slots yet.", actions: (s) => slots.length > 1 ? (_jsx(Button, { type: "button", variant: "ghost", size: "sm", onClick: () => removeSlot(s._idx), "aria-label": `Remove slot ${s.slotNumber}`, children: "\u00D7" })) : null })] }));
 }

package/dist/_internal/client/features/lottery/LotteryPullForm.d.ts

@@ -1,3 +1,19 @@
+/**
+ * User-facing lottery pull form — claim a slot with a UPI reference.
+ *
+ * Fields come from `lotteryPullSchema`. Two need a `renderers` entry because
+ * their labels depend on `totalSlots`, which a static annotation cannot know,
+ * and one needs `datetime-local` rather than a plain date.
+ *
+ * ## The upper bound stays a runtime check, on purpose
+ *
+ * `purchasedItemNumber` is `.min(1)` in the schema and has no `.max()`: the
+ * ceiling is `totalSlots`, a prop that varies per lottery. A schema shared with
+ * the route cannot carry it, so it is checked after the parse rather than
+ * pretended into the annotation. Everything else the hand-written validation
+ * used to duplicate — the reference length, the phone shape, the date — now
+ * comes from the schema, which is where those rules already lived.
+ */
 import React from "react";
 interface LotteryPullFormProps {
     sourceType: "event" | "product";
@@ -11,10 +27,5 @@ interface LotteryPullFormProps {
         slotName: string;
     }) => void;
 }
-/**
- * User-facing lottery pull form.
- * Submits TX ID + phone + payment time + item number.
- * On success, shows the user their lottery number and assigned prize slot.
- */
 export declare function LotteryPullForm({ sourceType, eventId, productId, totalSlots, maxPullsPerUser, onSuccess, }: LotteryPullFormProps): React.JSX.Element;
 export {};

package/dist/_internal/client/features/lottery/LotteryPullForm.js

@@ -1,34 +1,67 @@
 "use client";
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { useState } from "react";
-import { Stack, Row, Text, Heading, Span, } from "../../../../ui";
-import { Form, FieldInput, Button } from "../../../../ui";
+/**
+ * User-facing lottery pull form — claim a slot with a UPI reference.
+ *
+ * Fields come from `lotteryPullSchema`. Two need a `renderers` entry because
+ * their labels depend on `totalSlots`, which a static annotation cannot know,
+ * and one needs `datetime-local` rather than a plain date.
+ *
+ * ## The upper bound stays a runtime check, on purpose
+ *
+ * `purchasedItemNumber` is `.min(1)` in the schema and has no `.max()`: the
+ * ceiling is `totalSlots`, a prop that varies per lottery. A schema shared with
+ * the route cannot carry it, so it is checked after the parse rather than
+ * pretended into the annotation. Everything else the hand-written validation
+ * used to duplicate — the reference length, the phone shape, the date — now
+ * comes from the schema, which is where those rules already lived.
+ */
+import { useMemo, useState } from "react";
 import { useApiMutation } from "../../../../client/api/useApiMutation";
-import { apiClient } from "../../../../http";
 import { lotteryPullSchema } from "../../../../features/admin/schemas/admin-user-form";
+import { buildSectionsFromSchema } from "../../../../features/shell/build-sections";
+import { SectionForm, useSectionFormNav } from "../../../../features/shell/SectionForm";
+import { apiClient } from "../../../../http";
+import { FieldInput, Heading, Row, Span, Stack, Text } from "../../../../ui";
+import { applyZodIssues } from "../../../../ui/forms/apply-zod-issues";
 import { FormErrorSummary } from "../../../../ui/forms/FormErrorSummary";
-/**
- * User-facing lottery pull form.
- * Submits TX ID + phone + payment time + item number.
- * On success, shows the user their lottery number and assigned prize slot.
- */
+import { FormShellContext, useFormShellState } from "../../../../ui/forms/FormShell";
 export function LotteryPullForm({ sourceType, eventId, productId, totalSlots, maxPullsPerUser, onSuccess, }) {
     const [result, setResult] = useState(null);
-    const [transactionId, setTransactionId] = useState("");
-    const [paymentTime, setPaymentTime] = useState("");
-    const [itemNumber, setItemNumber] = useState("");
-    const [userPhone, setUserPhone] = useState("");
+    const [form, setForm] = useState({
+        sourceType,
+        transactionId: "",
+        paymentTime: "",
+        purchasedItemNumber: "",
+        userPhone: "",
+    });
     const apiRoute = sourceType === "event"
         ? `/api/events/${eventId ?? ""}/lottery-pull`
         : `/api/products/${productId ?? ""}/lottery-pull`;
+    const sections = useMemo(() => buildSectionsFromSchema(lotteryPullSchema, {
+        renderers: {
+            paymentTime: ({ values, onChange, errors }) => (_jsx(FieldInput, { name: "paymentTime", label: "Payment Date & Time", 
+                // `datetime-local`, not `date` — the pull is matched against a
+                // bank timestamp, so the time of day is part of the evidence.
+                type: "datetime-local", required: true, value: values.paymentTime, error: errors.paymentTime, onChange: (v) => onChange({ paymentTime: v }) })),
+            purchasedItemNumber: ({ values, onChange, errors }) => (_jsx(FieldInput, { name: "purchasedItemNumber", label: `Slot Number (1 – ${totalSlots})`, type: "number", placeholder: `Enter a number between 1 and ${totalSlots}`, required: true, value: values.purchasedItemNumber, error: errors.purchasedItemNumber, onChange: (v) => onChange({ purchasedItemNumber: v }) })),
+        },
+    }), [totalSlots]);
+    const nav = useSectionFormNav(sections, form, { scope: "lottery:pull" });
+    const { shellCtx, setFieldError, clearErrors } = useFormShellState(lotteryPullSchema, {
+        sections: nav.sectionMeta,
+        onGoToSection: nav.goToSection,
+        fieldToSectionIndex: nav.fieldToSectionIndex,
+    });
     const mutation = useApiMutation({
+        errorMessage: "Could not submit your entry.",
         mutationFn: () => apiClient.post(apiRoute, {
             sourceType,
             ...(sourceType === "event" ? { eventId } : { productId }),
-            transactionId,
-            paymentTime: new Date(paymentTime).toISOString(),
-            purchasedItemNumber: parseInt(itemNumber, 10),
-            userPhone,
+            transactionId: form.transactionId,
+            paymentTime: new Date(form.paymentTime).toISOString(),
+            purchasedItemNumber: parseInt(form.purchasedItemNumber, 10),
+            userPhone: form.userPhone,
         }),
         successMessage: "Your lottery entry has been submitted!",
         onSuccess: (data) => {
@@ -38,30 +71,22 @@ export function LotteryPullForm({ sourceType, eventId, productId, totalSlots, ma
             }
         },
     });
+    const onSubmit = () => {
+        clearErrors();
+        const parsed = lotteryPullSchema.safeParse(form);
+        if (!parsed.success) {
+            applyZodIssues(parsed.error.issues, setFieldError);
+            return;
+        }
+        // Data-dependent ceiling — see the header.
+        if (parsed.data.purchasedItemNumber > totalSlots) {
+            setFieldError("purchasedItemNumber", `This lottery has ${totalSlots} slots.`);
+            return;
+        }
+        mutation.mutate();
+    };
     if (result) {
         return (_jsxs(Stack, { gap: "sm", padding: "md", rounded: "2xl", surface: "success-surface", className: "border border-success/20", children: [_jsxs(Row, { align: "center", gap: "sm", children: [_jsx(Span, { layout: "inline-flex", color: "inverse", weight: "semibold", className: "bg-success text-[11px] tracking-wide", padding: "pill-sm", rounded: "full", transform: "uppercase", children: "Entry Confirmed" }), _jsxs(Heading, { level: 2, className: "text-success", size: "lg", weight: "bold", children: ["You're #", result.userLotteryNumber, "!"] })] }), _jsxs(Text, { className: "text-success", size: "sm", children: ["You've been assigned", " ", _jsxs(Span, { weight: "bold", children: ["Slot #", result.assignedPrizeSlotNumber] }), result.slotName ? ` — ${result.slotName}` : "", ". Good luck!"] })] }));
     }
-    return (_jsx(Form, { schema: lotteryPullSchema, onSubmit: (e) => e.preventDefault(), className: "space-y-4", children: ({ setFieldError, clearErrors }) => (_jsxs(Stack, { gap: "md", children: [_jsx(FormErrorSummary, {}), _jsx(Heading, { level: 3, size: "lg", weight: "semibold", children: "Submit Your Entry" }), _jsxs(Text, { size: "sm", color: "muted", children: ["Enter your UPI Transaction ID and payment details to claim your slot.", " ", "You may enter up to ", maxPullsPerUser, " time", maxPullsPerUser === 1 ? "" : "s", "."] }), _jsx(FieldInput, { name: "transactionId", label: "Transaction ID (UPI Ref / Payment Ref)", placeholder: "e.g. 123456789012", required: true, value: transactionId, onChange: (v) => { setTransactionId(v); clearErrors(); } }), _jsx(FieldInput, { name: "paymentTime", label: "Payment Date & Time", type: "datetime-local", required: true, value: paymentTime, onChange: (v) => { setPaymentTime(v); clearErrors(); } }), _jsx(FieldInput, { name: "itemNumber", label: `Slot Number (1 – ${totalSlots})`, type: "number", placeholder: `Enter a number between 1 and ${totalSlots}`, required: true, value: itemNumber, onChange: (v) => { setItemNumber(v); clearErrors(); } }), _jsx(FieldInput, { name: "userPhone", label: "Your Phone Number", type: "tel", placeholder: "e.g. 9876543210", required: true, value: userPhone, onChange: (v) => { setUserPhone(v); clearErrors(); } }), _jsx(Button, { type: "submit", variant: "primary", isLoading: mutation.isPending, onClick: () => {
-                        clearErrors();
-                        const num = parseInt(itemNumber, 10);
-                        let valid = true;
-                        if (!transactionId || transactionId.length < 4) {
-                            setFieldError("transactionId", "Transaction ID must be at least 4 characters");
-                            valid = false;
-                        }
-                        if (!paymentTime) {
-                            setFieldError("paymentTime", "Payment date & time is required");
-                            valid = false;
-                        }
-                        if (isNaN(num) || num < 1 || num > totalSlots) {
-                            setFieldError("itemNumber", `Slot number must be between 1 and ${totalSlots}`);
-                            valid = false;
-                        }
-                        if (!userPhone || userPhone.replace(/\D/g, "").length < 10) {
-                            setFieldError("userPhone", "Enter a valid phone number (minimum 10 digits)");
-                            valid = false;
-                        }
-                        if (valid)
-                            mutation.mutate();
-                    }, className: "w-full", children: mutation.isPending ? "Submitting…" : "Submit Entry" })] })) }));
+    return (_jsxs(Stack, { gap: "md", children: [_jsx(Heading, { level: 3, size: "lg", weight: "semibold", children: "Submit Your Entry" }), _jsxs(Text, { size: "sm", color: "muted", children: ["Enter your UPI Transaction ID and payment details to claim your slot. You may enter up to", " ", maxPullsPerUser, " time", maxPullsPerUser === 1 ? "" : "s", "."] }), _jsxs(FormShellContext.Provider, { value: shellCtx, children: [_jsx(FormErrorSummary, {}), _jsx(SectionForm, { sections: sections, values: form, onChange: (partial) => setForm((prev) => Object.assign({}, prev, partial)), onSubmit: onSubmit, schema: lotteryPullSchema, openIds: nav.openIds, onOpenChange: nav.setOpenIds, isLoading: mutation.isPending, submitLabel: "Submit Entry" })] })] }));
 }

package/dist/_internal/server/features/auth/permissions.d.ts

@@ -26,6 +26,8 @@ export declare function checkAnyPermission(resolved: ResolvedPermissions, requir
 type GetUser = () => Promise<{
     uid: string;
     role: string;
+    permissions?: readonly string[] | null;
+    /** @deprecated Legacy tester flags; still read during the migration window. */
     isTester?: boolean;
     canTestAdmin?: boolean;
 } | null>;

package/dist/_internal/server/features/auth/permissions.js

@@ -60,8 +60,9 @@ export function makeAdminSectionLayout(permission, opts) {
             redirect(opts.loginPath ?? String(ROUTES.AUTH.LOGIN));
             return null;
         }
-        // admin role, or a tester explicitly flagged to test admin areas
-        // (isTester && canTestAdmin), passes without a permission check
+        // Admin role, or a tester cleared for admin surfaces (the `tester` role
+        // plus `tester:admin-surfaces`, or the legacy isTester/canTestAdmin pair),
+        // passes without a permission check.
         if (isEffectiveAdminUser(user))
             return children;
         // non-employee non-admin roles have no business in /admin

package/dist/_internal/server/features/categories/data.js

@@ -5,10 +5,21 @@ import { safeRead } from "../../../../errors/safe-read";
 import { CATEGORIES_FEATURED_LIMIT, CATEGORIES_MENU_LIMIT, CATEGORIES_SITEMAP_LIMIT } from "../../../shared/features/categories/config";
 /** Full category document by slug — deduped per request via React.cache(). */
 export const getCategoryForDetail = cache(async (slug) => {
-    const category = (await categoriesRepository.getCategoryBySlug(slug)) ?? null;
-    if (category)
-        void categoriesRepository.incrementViewCount(category.id);
-    return category;
+    /*
+     * 🛑 No view-count write here — deleted 2026-08-31.
+     *
+     * This fired `incrementViewCount` on every render, which was two defects at
+     * once. It is a Firestore WRITE on the render path (Rule #6), and product
+     * and category detail were being counted TWICE by two systems that key
+     * differently: this one on the document by id, and the client
+     * `PageViewTracker` into `pageViews` by slug. They can never reconcile —
+     * they disagree on bots, on prefetch, and on JS-disabled clients — so the
+     * two numbers were guaranteed to drift and neither could be trusted.
+     *
+     * `pageViews` is the single counter now. `viewCount` on the document stays
+     * for historical rows; nothing increments it.
+     */
+    return (await categoriesRepository.getCategoryBySlug(slug)) ?? null;
 });
 /** Flat list of all categories at tier 1 (roots) — for nav/sitemap. */
 export const listRootCategories = cache(async () => {

package/dist/_internal/server/features/classified/index.d.ts

@@ -1,5 +1,4 @@
 export * from "./data";
-export * from "./actions";
 export * from "./adapters";
 export * from "./metadata";
 export * from "./og";

package/dist/_internal/server/features/classified/index.js

@@ -1,5 +1,4 @@
 export * from "./data";
-export * from "./actions";
 export * from "./adapters";
 export * from "./metadata";
 export * from "./og";

package/dist/_internal/server/features/digital-code/index.d.ts

@@ -1,5 +1,4 @@
 export * from "./data";
 export * from "./adapters";
-export * from "./actions";
 export * from "./metadata";
 export * from "./og";

package/dist/_internal/server/features/digital-code/index.js

@@ -1,5 +1,4 @@
 export * from "./data";
 export * from "./adapters";
-export * from "./actions";
 export * from "./metadata";
 export * from "./og";

package/dist/_internal/server/features/live/index.d.ts

@@ -1,5 +1,4 @@
 export * from "./data";
 export * from "./adapters";
-export * from "./actions";
 export * from "./metadata";
 export * from "./og";

package/dist/_internal/server/features/live/index.js

@@ -1,5 +1,4 @@
 export * from "./data";
 export * from "./adapters";
-export * from "./actions";
 export * from "./metadata";
 export * from "./og";