@mohasinac/appkit 4.30.19 → 4.31.0

package/dist/features/admin/schemas/firestore.js

@@ -153,50 +153,6 @@ export const notificationQueryHelpers = {
     ],
     byType: (type) => ["type", "==", type],
 };
-export const CHAT_ROOM_COLLECTION = "chatRooms";
-export const CHAT_ROOM_INDEXED_FIELDS = [
-    "buyerId",
-    "ownerId",
-    "orderId",
-    "participantIds",
-    "adminDeleted",
-    "updatedAt",
-];
-export const CHAT_ROOM_FIELDS = {
-    ID: "id",
-    BUYER_ID: "buyerId",
-    OWNER_ID: "ownerId",
-    ORDER_ID: "orderId",
-    PRODUCT_ID: "productId",
-    PRODUCT_TITLE: "productTitle",
-    BUYER_NAME: "buyerName",
-    OWNER_NAME: "ownerName",
-    LAST_MESSAGE: "lastMessage",
-    LAST_MESSAGE_AT: "lastMessageAt",
-    CREATED_AT: "createdAt",
-    UPDATED_AT: "updatedAt",
-    DELETED_BY: "deletedBy",
-    IS_GROUP: "isGroup",
-    PARTICIPANT_IDS: "participantIds",
-    ADMIN_DELETED: "adminDeleted",
-};
-export const DEFAULT_CHAT_ROOM_DATA = {
-    buyerId: "",
-    ownerId: "",
-    orderId: "",
-    buyerName: "",
-    ownerName: "",
-    deletedBy: [],
-    isGroup: false,
-    participantIds: [],
-    adminDeleted: false,
-};
-export const chatRoomQueryHelpers = {
-    byBuyer: (buyerId) => ["buyerId", "==", buyerId],
-    byOwner: (ownerId) => ["ownerId", "==", ownerId],
-    byOrder: (orderId) => ["orderId", "==", orderId],
-    active: () => ["adminDeleted", "==", false],
-};
 export const DEFAULT_NOTIFICATION_CHANNELS = {
     inApp: { enabled: true, readOnly: true },
     email: { enabled: false, minPriority: "normal" },
@@ -212,6 +168,11 @@ const PRIORITY_ORDER = {
 export function meetsMinPriority(priority, minPriority = "normal") {
     return PRIORITY_ORDER[priority] >= PRIORITY_ORDER[minPriority];
 }
+// `FeatureFlagKey` / `FeatureFlagMeta` / `FEATURE_FLAG_META` were deleted with
+// the `featureFlags` group on 2026-08-29. They described 14 toggles of which 11
+// had no reader anywhere — an admin could switch "Wishlists" or "Reviews" off
+// and watch nothing happen, which is worse than the feature not being
+// configurable at all.
 export const SITE_SETTINGS_COLLECTION = "siteSettings";
 export const SITE_SETTINGS_INDEXED_FIELDS = [];
 /**
@@ -235,6 +196,8 @@ export const DEFAULT_SITE_SETTINGS_DATA = {
         upiManualEnabled: true,
         codEnabled: true,
         otpCheckoutThreshold: 5000,
+        smsVerification: false,
+        adminCheckoutBypass: false,
     },
     emi: {
         enabled: false,
@@ -293,35 +256,22 @@ export const DEFAULT_SITE_SETTINGS_DATA = {
         autoExtendWindowMinutes: 5,
         settlementGracePeriodHours: 24,
     },
-    featureFlags: {
-        chats: true,
-        // Real per-SMS cost via the Firebase phone-auth quota — kept off by
-        // default even though every other flag defaults on. Admin opts in
-        // explicitly; PATCH /api/site-settings resets all users' phoneVerified +
-        // rate-limit state on the false->true transition (resetOtpVerification job).
-        smsVerification: false,
-        translations: true,
-        wishlists: true,
-        auctions: true,
-        reviews: true,
-        events: true,
-        blog: true,
-        coupons: true,
-        notifications: true,
-        sellerRegistration: true,
-        preOrders: true,
-        offers: true,
-        // W1-37 2026-05-23 — Phase 2 listing types enabled by default; all per-type
-        // surfaces (seller + admin via W1-29 + public) are now shipped.
+    // Every type on by default. `isListingTypeEnabled` treats a MISSING key as
+    // enabled, so this block is documentation of the full set rather than the
+    // mechanism — a type absent here still renders. `art` and `stickers` were
+    // missing from the old `featureFlags.listingTypes` literal for exactly that
+    // reason: nothing broke, so nobody noticed (Root Cause #58).
+    listings: {
         listingTypes: {
             standard: true,
             auction: true,
             "pre-order": true,
             "prize-draw": true,
-            bundle: true,
             classified: true,
             "digital-code": true,
             live: true,
+            art: true,
+            stickers: true,
         },
         categoryTypes: {
             category: true,
@@ -371,89 +321,3 @@ export const DEFAULT_TRUST_BAR_ITEMS = [
 // NOTE: labelKey/descKey hold plain display text (not i18n message keys) —
 // this feature-flag list has no matching next-intl namespace, so the admin
 // UI reads these two fields directly rather than through getTranslations().
-export const FEATURE_FLAG_META = [
-    {
-        key: "chats",
-        labelKey: "In-app chats",
-        descKey: "Buyer/seller direct messaging.",
-        icon: "\u{1F4AC}",
-        category: "platform",
-    },
-    {
-        key: "smsVerification",
-        labelKey: "SMS verification",
-        descKey: "Phone-number OTP verification during signup/checkout.",
-        icon: "\u{1F4F1}",
-        category: "platform",
-    },
-    {
-        key: "translations",
-        labelKey: "Translations",
-        descKey: "Locale switcher and translated UI strings.",
-        icon: "\u{1F310}",
-        category: "platform",
-    },
-    {
-        key: "auctions",
-        labelKey: "Auctions",
-        descKey: "Auction listings and bidding.",
-        icon: "\u{1F528}",
-        category: "platform",
-    },
-    {
-        key: "reviews",
-        labelKey: "Reviews",
-        descKey: "Product and store reviews.",
-        icon: "⭐",
-        category: "platform",
-    },
-    {
-        key: "notifications",
-        labelKey: "Notifications",
-        descKey: "In-app notification bell and inbox.",
-        icon: "\u{1F514}",
-        category: "platform",
-    },
-    {
-        key: "sellerRegistration",
-        labelKey: "Seller registration",
-        descKey: "\"Become a seller\" signup flow.",
-        icon: "\u{1F3EA}",
-        category: "platform",
-    },
-    {
-        key: "preOrders",
-        labelKey: "Pre-orders",
-        descKey: "Pre-order listings and deposit checkout.",
-        icon: "\u{1F4E6}",
-        category: "platform",
-    },
-    {
-        key: "wishlists",
-        labelKey: "Wishlists",
-        descKey: "Save-for-later wishlist feature.",
-        icon: "❤️",
-        category: "platform",
-    },
-    {
-        key: "events",
-        labelKey: "Events",
-        descKey: "Sales, raffles, spin-wheel, and lottery events.",
-        icon: "\u{1F389}",
-        category: "platform",
-    },
-    {
-        key: "blog",
-        labelKey: "Blog",
-        descKey: "Blog posts section.",
-        icon: "\u{1F4DD}",
-        category: "platform",
-    },
-    {
-        key: "coupons",
-        labelKey: "Coupons",
-        descKey: "Coupon codes and discounts.",
-        icon: "\u{1F3AB}",
-        category: "platform",
-    },
-];

package/dist/features/admin/schemas/nav-item-form.js

@@ -53,9 +53,16 @@ export const navItemFormSchema = z.object({
         section: "basics", sectionLabel: "Nav item", sectionRequired: true,
         quick: true, order: 1, row: "pair",
     }),
-    href: annotate(hrefSchema, { section: "basics", quick: true, order: 2, row: "pair" }),
+    href: annotate(hrefSchema, {
+        section: "basics", quick: true, order: 2, row: "pair",
+        label: "URL / href",
+        // On the schema rather than the control, so every surface that renders this
+        // field gets it — the editor used to carry it as a local `helperText`.
+        help: "Use relative paths (e.g. /products) or full URLs.",
+    }),
     icon: annotate(z.string().max(60).optional(), {
-        section: "basics", order: 3, row: "pair",
+        section: "basics", order: 3, row: "pair", kind: "select",
+        label: "Icon (optional)",
     }),
     order: annotate(z.coerce.number().int("Order must be a whole number.").min(0, "Order cannot be negative.").optional(), { section: "placement", sectionLabel: "Placement", order: 1, row: "pair" }),
     parentId: annotate(z.string().max(80).optional(), {

package/dist/features/admin/server.d.ts

@@ -5,11 +5,7 @@
  */
 export * from "./actions";
 export { notificationRepository } from "./repository/notification.repository";
-export { chatRepository } from "./repository/chat.repository";
 export { contactSubmissionsRepository } from "../../core/contact-submissions.repository";
-export type { ContactSubmissionDocument, ContactSubmissionCreateInput } from "../../core/contact-submissions.repository";
-export { newsletterRepository } from "../../core/newsletter.repository";
-export type { ChatRoomDocument, ChatRoomCreateInput, } from "./repository/chat.repository";
 export { siteSettingsRepository } from "./repository/site-settings.repository";
 export { GET as adminProductsGET } from "./api/products/route";
 export { GET as adminCouponsGET } from "./api/coupons/route";

package/dist/features/admin/server.js

@@ -5,9 +5,7 @@
  */
 export * from "./actions";
 export { notificationRepository } from "./repository/notification.repository";
-export { chatRepository } from "./repository/chat.repository";
 export { contactSubmissionsRepository } from "../../core/contact-submissions.repository";
-export { newsletterRepository } from "../../core/newsletter.repository";
 export { siteSettingsRepository } from "./repository/site-settings.repository";
 export { GET as adminProductsGET } from "./api/products/route";
 export { GET as adminCouponsGET } from "./api/coupons/route";

package/dist/features/admin/types/index.d.ts

@@ -27,13 +27,6 @@ export interface AdminListParams {
     sort?: string;
     filters?: string;
 }
-export interface AdminListResponse<T> {
-    items: T[];
-    total: number;
-    page: number;
-    perPage: number;
-    totalPages: number;
-}
 export interface AnalyticsMonthEntry {
     month: string;
     orders: number;

package/dist/features/analytics/repository/page-views.repository.d.ts

@@ -28,5 +28,19 @@ export declare class PageViewsRepository extends BaseRepository<PageViewDocument
     /** All day-buckets in [startDate, endDate] (inclusive, YYYY-MM-DD), optionally
      * scoped to one entityType. Used by the admin page-views report tab. */
     listInRange(startDate: string, endDate: string, entityType?: PageViewEntityType): Promise<PageViewDocument[]>;
+    /**
+     * Day-buckets older than `days`, as refs for `batchDelete`.
+     *
+     * 🛑 This collection had NO prune and NO rollup until 2026-08-31. It writes
+     * one document per entity per day, forever, and 27 scheduled functions
+     * existed without one of them touching it — so its growth was bounded only by
+     * how many distinct pages the catalogue had times how long the site had been
+     * up. See `pageViewPrune`.
+     *
+     * Returns refs rather than documents, matching `getOldReadRefs` on
+     * notifications: a prune needs the id, and hydrating the body of every doc it
+     * is about to delete is read budget spent on nothing (Rule #6).
+     */
+    getOlderThanRefs(days: number): Promise<FirebaseFirestore.DocumentReference[]>;
 }
 export declare const pageViewsRepository: PageViewsRepository;

package/dist/features/analytics/repository/page-views.repository.js

@@ -39,5 +39,29 @@ export class PageViewsRepository extends BaseRepository {
         const snap = await query.get();
         return snap.docs.map((d) => this.mapDoc(d));
     }
+    /**
+     * Day-buckets older than `days`, as refs for `batchDelete`.
+     *
+     * 🛑 This collection had NO prune and NO rollup until 2026-08-31. It writes
+     * one document per entity per day, forever, and 27 scheduled functions
+     * existed without one of them touching it — so its growth was bounded only by
+     * how many distinct pages the catalogue had times how long the site had been
+     * up. See `pageViewPrune`.
+     *
+     * Returns refs rather than documents, matching `getOldReadRefs` on
+     * notifications: a prune needs the id, and hydrating the body of every doc it
+     * is about to delete is read budget spent on nothing (Rule #6).
+     */
+    async getOlderThanRefs(days) {
+        const cutoff = new Date();
+        cutoff.setUTCDate(cutoff.getUTCDate() - days);
+        const cutoffKey = cutoff.toISOString().slice(0, 10);
+        // `<` and not `<=`: the cutoff day itself is still inside the window.
+        const snap = await this.getCollection()
+            .where(PAGE_VIEW_FIELDS.DATE, "<", cutoffKey)
+            .select()
+            .get();
+        return snap.docs.map((d) => d.ref);
+    }
 }
 export const pageViewsRepository = new PageViewsRepository();

package/dist/features/auth/actions/index.d.ts

@@ -1,2 +1 @@
 export * from "./profile-actions";
-export * from "./realtime-token-actions";

package/dist/features/auth/actions/index.js

@@ -1,2 +1 @@
 export * from "./profile-actions";
-export * from "./realtime-token-actions";

package/dist/features/auth/actions/realtime-token-actions.js

@@ -5,21 +5,11 @@
  * Called by letitrip thin wrapper which handles auth + rate limiting.
  */
 import { getAdminAuth } from "../../../providers/db-firebase/index";
-import { chatRepository } from "../../admin/repository/chat.repository";
 import { conversationsRepository } from "../../messages/repository/conversations.repository";
 import { storeRepository } from "../../stores/repository/store.repository";
 import { serverLogger } from "../../../monitoring/index";
 import { normalizeError } from "../../../errors/normalize";
 export async function issueRealtimeToken(userId, userRole) {
-    let chatIds = {};
-    try {
-        const userChatIds = await chatRepository.getChatIdsForUser(userId);
-        chatIds = Object.fromEntries(userChatIds.map((id) => [id, true]));
-    }
-    catch (err) {
-        void normalizeError(err);
-        serverLogger.warn("Could not resolve chatIds for realtime token", { userId, err });
-    }
     const conversationIds = {};
     try {
         const buyerConvs = await conversationsRepository.listByBuyer(userId);
@@ -38,12 +28,11 @@ export async function issueRealtimeToken(userId, userRole) {
     }
     const customToken = await getAdminAuth().createCustomToken(userId, {
         role: userRole,
-        chatIds,
         conversationIds,
     });
     serverLogger.info("issueRealtimeToken: token issued", {
         userId,
-        chatCount: Object.keys(chatIds).length,
+        conversationCount: Object.keys(conversationIds).length,
     });
     return { customToken, expiresAt: Date.now() + 3600000 };
 }

package/dist/features/auth/auth-helpers.js

@@ -1,11 +1,9 @@
 import { getTokenTimeRemaining, isTokenExpired } from "./token-helpers";
-const ROLE_HIERARCHY = {
-    user: 0,
-    seller: 1,
-    employee: 2,
-    moderator: 2,
-    admin: 3,
-};
+// Was a SECOND, disagreeing copy of the hierarchy (employee and moderator both
+// ranked 2, where the canonical one puts moderator above employee), so
+// `hasRole` gave a different answer depending on which module you imported.
+// Deleted 2026-08-29 in favour of the one in security/authorization.
+import { ROLE_HIERARCHY } from "../../security/authorization";
 export function hasRole(userRole, requiredRole) {
     return ROLE_HIERARCHY[userRole] >= ROLE_HIERARCHY[requiredRole];
 }

package/dist/features/auth/components/Guards.js

@@ -1,6 +1,7 @@
 "use client";
 import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useEffect, useMemo } from "react";
+import { isAccountDisabled } from "../role-predicates";
 import { Button, Div, Heading, Row, Text } from "../../../ui";
 export function RoleGate({ children, user, allowedRoles, fallback = null, }) {
     if (!user?.role) {
@@ -31,7 +32,7 @@ export function ProtectedRoute({ children, user, loading = false, requireAuth =
         }
         if (user) {
             // Check account status
-            if (requireActiveAccount && user.disabled) {
+            if (requireActiveAccount && isAccountDisabled(user)) {
                 return { isAuthorized: false, redirectPath: unauthorizedPath };
             }
             // Check email verification

package/dist/features/auth/components/LoginForm.d.ts

@@ -2,7 +2,6 @@ import React from "react";
 export interface LoginFormValues {
     email: string;
     password: string;
-    rememberMe?: boolean;
 }
 export interface LoginFormProps {
     onSubmit: (values: LoginFormValues) => Promise<void>;
@@ -17,7 +16,6 @@ export interface LoginFormProps {
         emailPlaceholder?: string;
         passwordLabel?: string;
         passwordPlaceholder?: string;
-        rememberMe?: string;
         forgotPasswordLabel?: string;
         submitLabel?: string;
         submittingLabel?: string;

package/dist/features/auth/components/LoginForm.js

@@ -5,7 +5,6 @@ import { useState } from "react";
 import { Alert, Button, Div, Heading, Row, SiteMark, Stack, Text, useToast } from "../../../ui";
 import { Form } from "../../../ui/components/Form";
 import { FieldInput } from "../../../ui/forms/FieldInput";
-import { FieldCheckbox } from "../../../ui/forms/FieldCheckbox";
 import { applyZodIssues } from "../../../ui/forms/apply-zod-issues";
 import { loginSchema } from "../schemas";
 import { SocialAuthButtons } from "./SocialAuthButtons";
@@ -15,9 +14,8 @@ export function LoginForm({ onSubmit, onGoogleLogin, isLoading = false, error, l
     const [values, setValues] = useState({
         email: "",
         password: "",
-        rememberMe: false,
     });
-    return (_jsx(Row, { className: `min-h-[60vh] ${className}`, align: "center", justify: "center", padding: "x-md", children: _jsxs(Stack, { className: "max-w-md w-full", gap: "lg", children: [_jsxs(Div, { className: "text-center", children: [_jsx(Row, { justify: "center", className: "mb-3", children: _jsx(SiteMark, { size: "lg" }) }), _jsx(Heading, { level: 1, className: "font-extrabold", size: "3xl", children: labels.title ?? "Sign In" }), (labels.subtitle || renderCreateAccountLink) && (_jsxs(Text, { className: "mt-2", color: "muted", size: "sm", children: [labels.subtitle ?? "Or", " ", renderCreateAccountLink?.()] }))] }), error && (_jsx(Alert, { variant: "error", compact: true, children: error })), _jsx(Form, { schema: loginSchema, noValidate: true, onSubmit: (e) => e.preventDefault(), spacing: "md", children: ({ setFieldError, clearErrors }) => (_jsxs(_Fragment, { children: [_jsx(FormErrorSummary, {}), _jsx(FieldInput, { name: "email", label: labels.emailLabel ?? "Email address", type: "email", autoComplete: "username", required: true, placeholder: labels.emailPlaceholder ?? "you@example.com", value: values.email, onChange: (v) => setValues({ ...values, email: v }) }), _jsx(FieldInput, { name: "password", label: labels.passwordLabel ?? "Password", type: "password", autoComplete: "current-password", required: true, placeholder: labels.passwordPlaceholder ?? "••••••••", value: values.password, onChange: (v) => setValues({ ...values, password: v }) }), _jsxs(Row, { justify: "between", children: [_jsx(FieldCheckbox, { name: "rememberMe", label: labels.rememberMe ?? "Remember me", checked: values.rememberMe ?? false, onChange: (c) => setValues({ ...values, rememberMe: c }) }), renderForgotPasswordLink?.()] }), _jsx(Button, { type: "submit", isLoading: isLoading, disabled: isLoading, className: "w-full", onClick: async () => {
+    return (_jsx(Row, { className: `min-h-[60vh] ${className}`, align: "center", justify: "center", padding: "x-md", children: _jsxs(Stack, { className: "max-w-md w-full", gap: "lg", children: [_jsxs(Div, { className: "text-center", children: [_jsx(Row, { justify: "center", className: "mb-3", children: _jsx(SiteMark, { size: "lg" }) }), _jsx(Heading, { level: 1, className: "font-extrabold", size: "3xl", children: labels.title ?? "Sign In" }), (labels.subtitle || renderCreateAccountLink) && (_jsxs(Text, { className: "mt-2", color: "muted", size: "sm", children: [labels.subtitle ?? "Or", " ", renderCreateAccountLink?.()] }))] }), error && (_jsx(Alert, { variant: "error", compact: true, children: error })), _jsx(Form, { schema: loginSchema, noValidate: true, onSubmit: (e) => e.preventDefault(), spacing: "md", children: ({ setFieldError, clearErrors }) => (_jsxs(_Fragment, { children: [_jsx(FormErrorSummary, {}), _jsx(FieldInput, { name: "email", label: labels.emailLabel ?? "Email address", type: "email", autoComplete: "username", required: true, placeholder: labels.emailPlaceholder ?? "you@example.com", value: values.email, onChange: (v) => setValues({ ...values, email: v }) }), _jsx(FieldInput, { name: "password", label: labels.passwordLabel ?? "Password", type: "password", autoComplete: "current-password", required: true, placeholder: labels.passwordPlaceholder ?? "••••••••", value: values.password, onChange: (v) => setValues({ ...values, password: v }) }), _jsx(Row, { justify: "end", children: renderForgotPasswordLink?.() }), _jsx(Button, { type: "submit", isLoading: isLoading, disabled: isLoading, className: "w-full", onClick: async () => {
                                     clearErrors();
                                     const parsed = loginSchema.safeParse(values);
                                     if (!parsed.success)

package/dist/features/auth/components/RegisterForm.js

@@ -1,15 +1,16 @@
 "use client";
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { normalizeError } from "../../../errors/normalize";
-import { useState } from "react";
+import React, { useState } from "react";
 import { z } from "zod";
-import { Alert, Button, Div, Heading, Row, SiteMark, Stack, Text, useToast } from "../../../ui";
-import { Form } from "../../../ui/components/Form";
+import { Alert, Div, Heading, Row, SiteMark, Stack, Text } from "../../../ui";
 import { FieldInput } from "../../../ui/forms/FieldInput";
 import { FieldCheckbox } from "../../../ui/forms/FieldCheckbox";
 import { applyZodIssues } from "../../../ui/forms/apply-zod-issues";
+import { FormShellContext, useFormShellState } from "../../../ui/forms/FormShell";
 import { registerSchema, registerPasswordSchema } from "../schemas";
 import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary";
+import { SectionForm, useSectionFormNav } from "../../shell/SectionForm";
 const registerClientSchema = registerSchema.extend({
     displayName: z.string().min(1, "Enter your name"),
     confirmPassword: registerPasswordSchema,
@@ -20,8 +21,35 @@ const registerClientSchema = registerSchema.extend({
     message: "Passwords do not match",
     path: ["confirmPassword"],
 });
+/*
+ * Hand-authored rather than derived from the schema, which is the exception
+ * here and not the rule.
+ *
+ * Two reasons the generator is the wrong tool for this one form. `labels` is a
+ * PUBLIC prop of a published component — every string below is consumer
+ * overridable, and moving them into schema annotations would silently drop that
+ * override for anyone outside this repo. And `renderPasswordStrength` /
+ * `renderTermsLink` are POSITIONAL slots: a meter that must sit under the
+ * password box, a terms line that must sit under the checkbox. The generator
+ * places fields, not arbitrary nodes between them.
+ *
+ * One section, `required: true` — so it renders open, without a collapse
+ * control, i.e. exactly the flat list it has always been. A five-field signup
+ * form has nothing to group; what it gains here is the error→section
+ * attribution that makes `<FormErrorSummary>` able to jump to a field.
+ */
+function buildSections(labels, renderPasswordStrength, renderTermsLink) {
+    return [
+        {
+            id: "account",
+            label: labels.title ?? "Create Account",
+            required: true,
+            fields: ["displayName", "email", "password", "confirmPassword", "acceptTerms"],
+            render: ({ values, onChange }) => (_jsxs(_Fragment, { children: [_jsx(FieldInput, { name: "displayName", label: labels.displayNameLabel ?? "Full name", type: "text", autoComplete: "name", required: true, placeholder: labels.displayNamePlaceholder ?? "Your name", value: values.displayName, onChange: (v) => onChange({ displayName: v }) }), _jsx(FieldInput, { name: "email", label: labels.emailLabel ?? "Email address", type: "email", autoComplete: "username", required: true, placeholder: labels.emailPlaceholder ?? "you@example.com", value: values.email, onChange: (v) => onChange({ email: v }) }), _jsxs(Div, { children: [_jsx(FieldInput, { name: "password", label: labels.passwordLabel ?? "Password", type: "password", autoComplete: "new-password", required: true, placeholder: labels.passwordPlaceholder ?? "••••••••", value: values.password, onChange: (v) => onChange({ password: v }) }), renderPasswordStrength?.(values.password)] }), _jsx(FieldInput, { name: "confirmPassword", label: labels.confirmPasswordLabel ?? "Confirm password", type: "password", autoComplete: "new-password", required: true, placeholder: labels.confirmPasswordPlaceholder ?? "••••••••", value: values.confirmPassword, onChange: (v) => onChange({ confirmPassword: v }) }), _jsx(FieldCheckbox, { name: "acceptTerms", label: `${labels.acceptTermsLabel ?? "I accept the terms"}`, checked: values.acceptTerms, onChange: (c) => onChange({ acceptTerms: c }) }), renderTermsLink && (_jsx(Text, { size: "xs", variant: "secondary", children: renderTermsLink() }))] })),
+        },
+    ];
+}
 export function RegisterForm({ onSubmit, isLoading = false, error, success, labels = {}, renderSocialButtons, renderLoginLink, renderTermsLink, renderPasswordStrength, className = "", }) {
-    const { showToast } = useToast();
     const [values, setValues] = useState({
         email: "",
         password: "",
@@ -29,19 +57,34 @@ export function RegisterForm({ onSubmit, isLoading = false, error, success, labe
         displayName: "",
         acceptTerms: false,
     });
-    return (_jsx(Row, { className: `min-h-[60vh] ${className}`, align: "center", justify: "center", padding: "x-md", children: _jsxs(Stack, { className: "max-w-md w-full", gap: "lg", children: [_jsxs(Div, { className: "text-center", children: [_jsx(Row, { justify: "center", className: "mb-3", children: _jsx(SiteMark, { size: "lg" }) }), _jsx(Heading, { level: 1, className: "font-extrabold", size: "3xl", children: labels.title ?? "Create Account" }), (labels.subtitle || renderLoginLink) && (_jsxs(Text, { className: "mt-2 text-[var(--appkit-color-text-muted)]", size: "sm", children: [labels.subtitle ?? "Already have an account?", " ", renderLoginLink?.()] }))] }), success && (_jsx(Alert, { variant: "success", compact: true, children: success })), error && (_jsx(Alert, { variant: "error", compact: true, children: error })), _jsx(Form, { schema: registerClientSchema, noValidate: true, onSubmit: (e) => e.preventDefault(), spacing: "md", children: ({ setFieldError, clearErrors }) => (_jsxs(_Fragment, { children: [_jsx(FormErrorSummary, {}), _jsx(FieldInput, { name: "displayName", label: labels.displayNameLabel ?? "Full name", type: "text", autoComplete: "name", required: true, placeholder: labels.displayNamePlaceholder ?? "Your name", value: values.displayName, onChange: (v) => setValues({ ...values, displayName: v }) }), _jsx(FieldInput, { name: "email", label: labels.emailLabel ?? "Email address", type: "email", autoComplete: "username", required: true, placeholder: labels.emailPlaceholder ?? "you@example.com", value: values.email, onChange: (v) => setValues({ ...values, email: v }) }), _jsxs(Div, { children: [_jsx(FieldInput, { name: "password", label: labels.passwordLabel ?? "Password", type: "password", autoComplete: "new-password", required: true, placeholder: labels.passwordPlaceholder ?? "••••••••", value: values.password, onChange: (v) => setValues({ ...values, password: v }) }), renderPasswordStrength?.(values.password)] }), _jsx(FieldInput, { name: "confirmPassword", label: labels.confirmPasswordLabel ?? "Confirm password", type: "password", autoComplete: "new-password", required: true, placeholder: labels.confirmPasswordPlaceholder ?? "••••••••", value: values.confirmPassword, onChange: (v) => setValues({ ...values, confirmPassword: v }) }), _jsx(FieldCheckbox, { name: "acceptTerms", label: `${labels.acceptTermsLabel ?? "I accept the terms"}`, checked: values.acceptTerms, onChange: (c) => setValues({ ...values, acceptTerms: c }) }), renderTermsLink && (_jsx(Text, { size: "xs", variant: "secondary", children: renderTermsLink() })), _jsx(Button, { type: "submit", isLoading: isLoading, disabled: isLoading, className: "w-full", onClick: async () => {
-                                    clearErrors();
-                                    const parsed = registerClientSchema.safeParse(values);
-                                    if (!parsed.success)
-                                        return applyZodIssues(parsed.error.issues, setFieldError);
-                                    try {
-                                        await onSubmit(values);
-                                    }
-                                    catch (err) {
-                                        void normalizeError(err);
-                                        showToast("Registration failed", "error");
-                                    }
-                                }, children: isLoading
-                                    ? (labels.submittingLabel ?? "Creating account…")
-                                    : (labels.submitLabel ?? "Create account") })] })) }), renderSocialButtons?.()] }) }));
+    const sections = React.useMemo(() => buildSections(labels, renderPasswordStrength, renderTermsLink), [labels, renderPasswordStrength, renderTermsLink]);
+    const nav = useSectionFormNav(sections, values, { scope: "auth:register" });
+    const { shellCtx, setFieldError, clearErrors } = useFormShellState(registerClientSchema, {
+        sections: nav.sectionMeta,
+        onGoToSection: nav.goToSection,
+        fieldToSectionIndex: nav.fieldToSectionIndex,
+    });
+    const handleSubmit = async () => {
+        clearErrors();
+        const parsed = registerClientSchema.safeParse(values);
+        if (!parsed.success) {
+            applyZodIssues(parsed.error.issues, setFieldError);
+            return;
+        }
+        try {
+            await onSubmit(values);
+        }
+        catch (err) {
+            /*
+             * On a field, not a toast. "Registration failed" told the user nothing
+             * and discarded whatever the caller actually objected to — a taken
+             * email, a rejected password — which is the one thing they can act on.
+             */
+            const normalized = normalizeError(err);
+            setFieldError("email", normalized.message || "Registration failed");
+        }
+    };
+    return (_jsx(Row, { className: `min-h-[60vh] ${className}`, align: "center", justify: "center", padding: "x-md", children: _jsxs(Stack, { className: "max-w-md w-full", gap: "lg", children: [_jsxs(Div, { className: "text-center", children: [_jsx(Row, { justify: "center", className: "mb-3", children: _jsx(SiteMark, { size: "lg" }) }), _jsx(Heading, { level: 1, className: "font-extrabold", size: "3xl", children: labels.title ?? "Create Account" }), (labels.subtitle || renderLoginLink) && (_jsxs(Text, { className: "mt-2 text-[var(--appkit-color-text-muted)]", size: "sm", children: [labels.subtitle ?? "Already have an account?", " ", renderLoginLink?.()] }))] }), success && (_jsx(Alert, { variant: "success", compact: true, children: success })), error && (_jsx(Alert, { variant: "error", compact: true, children: error })), _jsxs(FormShellContext.Provider, { value: shellCtx, children: [_jsx(FormErrorSummary, {}), _jsx(SectionForm, { sections: sections, values: values, onChange: (partial) => setValues((prev) => Object.assign({}, prev, partial)), onSubmit: handleSubmit, schema: registerClientSchema, openIds: nav.openIds, onOpenChange: nav.setOpenIds, isLoading: isLoading, submitLabel: isLoading
+                                ? (labels.submittingLabel ?? "Creating account…")
+                                : (labels.submitLabel ?? "Create account") })] }), renderSocialButtons?.()] }) }));
 }

package/dist/features/auth/permissions/constants.d.ts

@@ -11,7 +11,33 @@
  * Permission naming: admin:resource:action
  * Ban action naming: plain verb phrase — write_reviews, place_bids, etc.
  */
-export type Permission = "admin:dashboard:view" | "admin:users:read" | "admin:users:write" | "admin:users:delete" | "admin:user-bans:read" | "admin:user-bans:write" | "admin:products:read" | "admin:products:write" | "admin:products:delete" | "admin:orders:read" | "admin:orders:write" | "admin:returns:read" | "admin:returns:write" | "admin:stores:read" | "admin:stores:write" | "admin:store-addresses:read" | "admin:addresses:read" | "admin:addresses:write" | "admin:analytics:view" | "admin:payouts:read" | "admin:payouts:write" | "admin:audit-log:read" | "admin:categories:read" | "admin:categories:write" | "admin:categories:delete" | "admin:brands:read" | "admin:brands:write" | "admin:brands:delete" | "admin:coupons:read" | "admin:coupons:write" | "admin:coupons:delete" | "admin:deals:read" | "admin:deals:write" | "admin:featured:read" | "admin:featured:write" | "admin:reviews:read" | "admin:reviews:write" | "admin:reviews:delete" | "admin:blog:read" | "admin:blog:write" | "admin:blog:delete" | "admin:blog:publish" | "admin:bids:read" | "admin:bids:write" | "admin:offers:read" | "admin:offers:write" | "admin:media:read" | "admin:media:write" | "admin:media:delete" | "admin:site:read" | "admin:site:write" | "admin:settings:write" | "admin:navigation:read" | "admin:navigation:write" | "admin:sections:read" | "admin:sections:write" | "admin:carousel:read" | "admin:carousel:write" | "admin:carousel:delete" | "admin:ads:read" | "admin:ads:write" | "admin:ads:delete" | "admin:faqs:read" | "admin:faqs:write" | "admin:faqs:delete" | "admin:tester-checklist:read" | "admin:tester-checklist:write" | "admin:tester-checklist:delete" | "admin:tester-feedback:read" | "admin:tester-feedback:write" | "admin:newsletter:read" | "admin:newsletter:write" | "admin:contact:read" | "admin:events:read" | "admin:events:write" | "admin:events:delete" | "admin:event-entries:read" | "admin:event-entries:write" | "admin:support-tickets:read" | "admin:support-tickets:write" | "admin:shipments:read" | "admin:shipments:write" | "admin:catalogue:read" | "admin:catalogue:write" | "admin:grouped-listings:read" | "admin:grouped-listings:write" | "admin:support-tickets:assign" | "admin:support-tickets:close" | "admin:scammers:read" | "admin:scammers:write" | "admin:scammers:verify" | "admin:scammers:delete" | "admin:sessions:read" | "admin:sessions:delete" | "admin:notifications:read" | "admin:notifications:write" | "admin:carts:read" | "admin:wishlists:read" | "admin:feature-flags:read" | "admin:feature-flags:write" | "admin:copilot:view" | "admin:team:read" | "admin:team:write" | "admin:maintenance:view-server-errors" | "admin:maintenance:view-client-errors" | "admin:maintenance:view-function-errors" | "admin:maintenance:view-cloud-logs" | "admin:maintenance:view-payment-rollbacks" | "admin:maintenance:run-analysis" | "admin:maintenance:purge-errors";
+export type Permission = "admin:dashboard:view" | "admin:users:read" | "admin:users:write" | "admin:users:delete" | "admin:user-bans:read" | "admin:user-bans:write" | "admin:products:read" | "admin:products:write" | "admin:products:delete" | "admin:orders:read" | "admin:orders:write" | "admin:returns:read" | "admin:returns:write" | "admin:stores:read" | "admin:stores:write" | "admin:store-addresses:read" | "admin:addresses:read" | "admin:addresses:write" | "admin:analytics:view" | "admin:payouts:read" | "admin:payouts:write" | "admin:audit-log:read" | "admin:categories:read" | "admin:categories:write" | "admin:categories:delete" | "admin:brands:read" | "admin:brands:write" | "admin:brands:delete" | "admin:coupons:read" | "admin:coupons:write" | "admin:coupons:delete" | "admin:deals:read" | "admin:deals:write" | "admin:featured:read" | "admin:featured:write" | "admin:reviews:read" | "admin:reviews:write" | "admin:reviews:delete" | "admin:blog:read" | "admin:blog:write" | "admin:blog:delete" | "admin:blog:publish" | "admin:bids:read" | "admin:bids:write" | "admin:offers:read" | "admin:offers:write" | "admin:media:read" | "admin:media:write" | "admin:media:delete" | "admin:site:read" | "admin:site:write" | "admin:settings:write" | "admin:navigation:read" | "admin:navigation:write" | "admin:sections:read" | "admin:sections:write" | "admin:carousel:read" | "admin:carousel:write" | "admin:carousel:delete" | "admin:ads:read" | "admin:ads:write" | "admin:ads:delete" | "admin:faqs:read" | "admin:faqs:write" | "admin:faqs:delete" | "admin:tester-checklist:read" | "admin:tester-checklist:write" | "admin:tester-checklist:delete" | "admin:tester-feedback:read" | "admin:tester-feedback:write" | "admin:newsletter:read" | "admin:newsletter:write" | "admin:contact:read"
+/** Destructive/mutating contact-submission actions. Added 2026-08-29 —
+ * `DELETE /api/admin/contact-submissions/[id]` declared `admin:contact:delete`,
+ * which is not a member of this union and therefore could never be granted. */
+ | "admin:contact:write" | "admin:moderation:read" | "admin:roles:read"
+/**
+ * Skip OTP + payment when placing an order. Replaces
+ * `siteSettings.featureFlags.adminCheckoutBypass`: a capability granted to a
+ * person belongs in the permission system, not in a site-wide toggle that is
+ * either on for every admin or off for all of them.
+ *
+ * Named `admin:checkout:bypass` rather than the bare `checkout:bypass` so it
+ * matches the `admin:resource:action` convention every other member follows
+ * and is picked up by PERMISSION_DOMAINS prefix matching.
+ */
+ | "admin:checkout:bypass"
+/**
+ * Lets a `tester` reach `/admin/**` with real read/write access.
+ *
+ * Replaces the `canTestAdmin` boolean. Not a second role: the hierarchy is
+ * linear, so there is no level meaning "seller-level, plus read admin" that
+ * would not also outrank moderator and employee. Granted through the same
+ * `permissions[]` array employees already use, so there is one grant
+ * mechanism — and revoking it is a permission change, which the admin audit
+ * log already records.
+ */
+ | "tester:admin-surfaces" | "admin:events:read" | "admin:events:write" | "admin:events:delete" | "admin:event-entries:read" | "admin:event-entries:write" | "admin:support-tickets:read" | "admin:support-tickets:write" | "admin:shipments:read" | "admin:shipments:write" | "admin:catalogue:read" | "admin:catalogue:write" | "admin:grouped-listings:read" | "admin:grouped-listings:write" | "admin:support-tickets:assign" | "admin:support-tickets:close" | "admin:scammers:read" | "admin:scammers:write" | "admin:scammers:verify" | "admin:scammers:delete" | "admin:sessions:read" | "admin:sessions:delete" | "admin:notifications:read" | "admin:notifications:write" | "admin:carts:read" | "admin:wishlists:read" | "admin:feature-flags:read" | "admin:feature-flags:write" | "admin:copilot:view" | "admin:team:read" | "admin:team:write" | "admin:maintenance:view-server-errors" | "admin:maintenance:view-client-errors" | "admin:maintenance:view-function-errors" | "admin:maintenance:view-cloud-logs" | "admin:maintenance:view-payment-rollbacks" | "admin:maintenance:run-analysis" | "admin:maintenance:purge-errors";
 /**
  * Granular user actions that can be soft-banned individually.
  * A user may have multiple simultaneous soft bans of different types.