@mohasinac/appkit 4.42.18 → 4.44.0

package/dist/_internal/shared/fees/calculator.js

@@ -107,6 +107,149 @@ export function computeShipmentProtectionFee(subtotal, addonSelected, rates) {
     const percentFee = roundRupees(subtotal * (percent / 100));
     return Math.max(min, percentFee);
 }
+/**
+ * The rate used when nobody has determined one — HSN 95030020, non-electronic
+ * toys, which is nearly this whole catalogue.
+ *
+ * 🛑 A LAST RESORT, not a mechanism. The real resolution order is the
+ * product's own `gstRate` → the category's `taxCodeId` → this. A listing that
+ * reaches this constant means its category has no tax code, and THAT is the
+ * defect to fix; every use must warn and flag the product for triage. The
+ * measure of success is that it fires for nothing.
+ *
+ * It exists because the alternative is worse in one direction specifically:
+ * under GST-inclusive pricing the tax is already inside the price, so backing
+ * out 0% would treat the whole amount as taxable value, pay the seller all of
+ * it, and leave us owing tax on money already handed over. Exclusive pricing
+ * merely fails to collect, which does not lose money we hold.
+ *
+ * Belongs in `siteSettings.gst` the day a rate revision has to land without a
+ * deploy — `TaxCodeDocument.effectiveFrom` records that toys have already
+ * moved once — but a constant is the honest starting point rather than a
+ * settings field nobody has a reason to change.
+ */
+export const DEFAULT_GST_RATE = 5;
+/**
+ * Whether this is an intra-state supply (CGST+SGST) or inter-state (IGST).
+ *
+ * 🛑 NOT a raw `===` on two strings, which is what `createOrderForGroup` and
+ * `previewCheckoutPricing` both did. `constants/geo/subdivisions.ts` opens by
+ * recording why that fails: the same `state` field held *"Karnataka",
+ * "karnataka", "KA" and "Karnatka" depending on which of the three surfaces
+ * created the row*. A picker now fixes new addresses, but the store's state
+ * and every pre-picker row still arrive unnormalised.
+ *
+ * 🛑 Returns `null` for "cannot tell", and the distinction matters. The old
+ * expression was `!!storeState && storeState === buyerState`, so a store with
+ * no address resolved to `false` — i.e. **silently inter-state**, reported as
+ * full IGST. Note what this defect is and is not: IGST total equals
+ * CGST+SGST total, so **the buyer pays exactly the same amount either way**.
+ * It is a compliance and reporting defect on the invoice, not an overcharge —
+ * which is why it is safe to surface as `null` and let the caller log rather
+ * than guess.
+ */
+export function isIntraStateSupply(storeState, buyerState) {
+    const a = normaliseStateName(storeState);
+    const b = normaliseStateName(buyerState);
+    if (!a || !b)
+        return null;
+    return a === b;
+}
+/** Lowercase, collapse whitespace, drop punctuation — "Tamil  Nadu." → "tamil nadu". */
+function normaliseStateName(raw) {
+    if (!raw)
+        return null;
+    const cleaned = raw
+        .normalize("NFKD")
+        .toLowerCase()
+        .replace(/[^a-z\s]/g, " ")
+        .replace(/\s+/g, " ")
+        .trim();
+    return cleaned.length > 0 ? cleaned : null;
+}
+/**
+ * Back the tax OUT of a tax-inclusive amount: `gross × 100 / (100 + rate)`.
+ *
+ * 🛑 **Every price in this system is tax-inclusive.** A listing's `price` is
+ * what the buyer pays; the GST is inside it and is remitted from it. That is
+ * the Indian B2C convention, it is what worldhobbyshop asserts in its own
+ * JSON-LD (`valueAddedTaxIncluded: true`), and it is what makes two listings
+ * at ₹999 cost the same regardless of which seller posted them.
+ *
+ * A seller who would rather think in ex-tax terms sets
+ * `StoreDocument.pricesIncludeGst: false`, and their typed price is grossed up
+ * **once, at write time**, by `ProductRepository`. So the flag is an
+ * AUTHORING convenience and never a display or checkout mode — the money
+ * paths have no branch on it at all, which is the whole point: a mode flag
+ * read in five places is five places to drift.
+ *
+ * `rate <= 0` returns the amount unchanged — an exempt supply has no tax to
+ * back out, and dividing by 100 would be a silent no-op that merely looked
+ * like arithmetic.
+ */
+export function taxableFromInclusive(gross, rate) {
+    if (rate <= 0)
+        return roundRupees(gross);
+    return roundRupees((gross * 100) / (100 + rate)); // audit-money-units-ok: tax back-out, not a paise conversion
+}
+/**
+ * The inverse: gross an EX-TAX amount up to its tax-inclusive equivalent,
+ * `taxable × (100 + rate) / 100`.
+ *
+ * Used in exactly one place — `ProductRepository`, when a store with
+ * `pricesIncludeGst: false` saves a price. That is the whole extent of the
+ * flag: one conversion, at write time, after which the stored price is
+ * tax-inclusive like every other and no money path can tell the difference.
+ *
+ * ₹999 ex-tax at 5% → ₹1,048.95 inclusive, which backs out to ₹999.00 again.
+ * The round trip is exact at 2dp for every rate in the union, asserted rather
+ * than assumed.
+ */
+export function grossFromTaxable(taxable, rate) {
+    if (rate <= 0)
+        return roundRupees(taxable);
+    return roundRupees((taxable * (100 + rate)) / 100); // audit-money-units-ok: tax gross-up, not a paise conversion
+}
+/**
+ * The breakdown of a tax-INCLUSIVE amount, with two invariants guaranteed by
+ * construction rather than by arithmetic luck:
+ *
+ *   **taxable + gstAmount === gross**      (to the paisa)
+ *   **cgst + sgst === gstAmount**          (to the paisa)
+ *
+ * 🛑 Why this exists instead of `calculateGst(rate, intra, taxableFromInclusive(...))`.
+ *
+ * That composition rounds TWICE and overshoots. Measured on the ₹999 @ 5% case
+ * the plan itself specifies: the taxable rounds UP to 951.43, then
+ * `calculateGst`'s intra branch takes `half = round(47.5715 / 2) = 23.79` and
+ * returns `round(half × 2) = 47.58` — so taxable + tax came to **₹999.01** and
+ * the invoice no longer reconciled with the ₹999 the buyer was charged.
+ *
+ * Under the old add-on-top model that could not happen: the tax was whatever
+ * it was and the total was defined as price + tax, so the invariant was free.
+ * Making prices inclusive is what turns it into something that must be
+ * enforced — the tax is now a PARTITION of a fixed amount, not an addition to
+ * it.
+ *
+ * So the tax is the **exact complement** of the taxable value, and the split
+ * assigns the remainder to the second half rather than rounding both. This is
+ * the same discipline `allocateAcrossMembers` already applies, and the same
+ * class of defect as the `Math.round(gstAmount / 2)` split that C0c's defect 2
+ * removed — one level further out.
+ */
+export function calculateGstInclusive(rate, intraState, gross) {
+    if (rate <= 0) {
+        const t = roundRupees(gross);
+        return { taxableAmount: t, cgst: 0, sgst: 0, igst: 0, gstAmount: 0 };
+    }
+    const taxableAmount = taxableFromInclusive(gross, rate);
+    const gstAmount = roundRupees(gross - taxableAmount);
+    if (intraState) {
+        const cgst = roundRupees(gstAmount / 2); // audit-money-units-ok: halving a tax amount
+        return { taxableAmount, cgst, sgst: roundRupees(gstAmount - cgst), igst: 0, gstAmount };
+    }
+    return { taxableAmount, cgst: 0, sgst: 0, igst: gstAmount, gstAmount };
+}
 export function calculateGst(rate, intraState, taxableAmount) {
     const gstAmount = roundRupees(taxableAmount * (rate / 100));
     if (intraState) {

package/dist/_internal/shared/listing-types/art/config.d.ts

@@ -48,9 +48,6 @@ export declare const config: {
     }, {
         readonly value: string;
         readonly label: "Recently Updated";
-    }, {
-        readonly value: string;
-        readonly label: "Most Viewed";
     }];
     publicSortOptions: readonly [{
         readonly value: string;
@@ -70,9 +67,6 @@ export declare const config: {
     }, {
         readonly value: string;
         readonly label: "Name: Z–A";
-    }, {
-        readonly value: string;
-        readonly label: "Most Viewed";
     }];
     extraFacetKeys: readonly string[];
 };

package/dist/_internal/shared/listing-types/classified/config.d.ts

@@ -48,9 +48,6 @@ export declare const config: {
     }, {
         readonly value: string;
         readonly label: "Recently Updated";
-    }, {
-        readonly value: string;
-        readonly label: "Most Viewed";
     }];
     publicSortOptions: readonly [{
         readonly value: string;
@@ -70,9 +67,6 @@ export declare const config: {
     }, {
         readonly value: string;
         readonly label: "Name: Z–A";
-    }, {
-        readonly value: string;
-        readonly label: "Most Viewed";
     }];
     extraFacetKeys: readonly string[];
 };

package/dist/_internal/shared/listing-types/digital-code/config.d.ts

@@ -56,9 +56,6 @@ export declare const config: {
     }, {
         readonly value: string;
         readonly label: "Recently Updated";
-    }, {
-        readonly value: string;
-        readonly label: "Most Viewed";
     }];
     publicSortOptions: readonly [{
         readonly value: string;
@@ -78,9 +75,6 @@ export declare const config: {
     }, {
         readonly value: string;
         readonly label: "Name: Z–A";
-    }, {
-        readonly value: string;
-        readonly label: "Most Viewed";
     }];
     extraFacetKeys: readonly string[];
 };

package/dist/_internal/shared/listing-types/live/config.d.ts

@@ -48,9 +48,6 @@ export declare const config: {
     }, {
         readonly value: string;
         readonly label: "Recently Updated";
-    }, {
-        readonly value: string;
-        readonly label: "Most Viewed";
     }];
     publicSortOptions: readonly [{
         readonly value: string;
@@ -70,9 +67,6 @@ export declare const config: {
     }, {
         readonly value: string;
         readonly label: "Name: Z–A";
-    }, {
-        readonly value: string;
-        readonly label: "Most Viewed";
     }];
     extraFacetKeys: readonly string[];
 };

package/dist/_internal/shared/listing-types/standard/config.d.ts

@@ -48,9 +48,6 @@ export declare const config: {
     }, {
         readonly value: string;
         readonly label: "Recently Updated";
-    }, {
-        readonly value: string;
-        readonly label: "Most Viewed";
     }];
     publicSortOptions: readonly [{
         readonly value: string;
@@ -70,9 +67,6 @@ export declare const config: {
     }, {
         readonly value: string;
         readonly label: "Name: Z–A";
-    }, {
-        readonly value: string;
-        readonly label: "Most Viewed";
     }];
     extraFacetKeys: readonly string[];
 };

package/dist/_internal/shared/listing-types/stickers/config.d.ts

@@ -48,9 +48,6 @@ export declare const config: {
     }, {
         readonly value: string;
         readonly label: "Recently Updated";
-    }, {
-        readonly value: string;
-        readonly label: "Most Viewed";
     }];
     publicSortOptions: readonly [{
         readonly value: string;
@@ -70,9 +67,6 @@ export declare const config: {
     }, {
         readonly value: string;
         readonly label: "Name: Z–A";
-    }, {
-        readonly value: string;
-        readonly label: "Most Viewed";
     }];
     extraFacetKeys: readonly string[];
 };

package/dist/_internal/shared/templating/placeholders.d.ts

@@ -0,0 +1,70 @@
+/**
+ * `{{placeholder}}` interpolation — the ONE implementation.
+ *
+ * Promoted out of `features/faq/schemas/firestore.ts`, where it had served 63
+ * FAQs since the feature shipped. Category description templates need exactly
+ * the same thing, and writing a second regex for it is Root Cause #75's shape:
+ * one of the two eventually learns about a case the other does not, and the
+ * copy a caller reaches is the one they happened to import.
+ *
+ * `features/faq/schemas/firestore.ts` re-exports these under its own names, so
+ * nothing in the FAQ feature changed and no FAQ call site moved.
+ *
+ * 🛑 NOT a template ENGINE. There are no conditionals, loops, filters or
+ * nesting, and none should be added here — a category body is author-facing
+ * copy with a handful of named slots, and a real engine would mean user input
+ * being evaluated. `\w+` is the whole grammar, which is also why it is safe to
+ * run over HTML.
+ */
+/**
+ * Every placeholder name in `text`, in source order, INCLUDING duplicates.
+ *
+ * Duplicates are kept deliberately: a caller counting unfilled slots wants to
+ * know a body says `{{year}}` three times, and `usedPlaceholders` below is the
+ * de-duplicated form for callers that want the set instead.
+ */
+export declare function extractPlaceholders(text: string): string[];
+/** The distinct placeholder names in `text`, in first-appearance order. */
+export declare function usedPlaceholders(text: string): string[];
+/**
+ * What a slot may resolve to.
+ *
+ * 🛑 Declared once and shared with `missingPlaceholders`, which only tests key
+ * PRESENCE and so does not care about the value type at all. It was
+ * `Record<string, unknown>` for exactly that reason, and
+ * `audit-unknown-leakage` was right to reject it: `unknown` at a boundary is
+ * how a caller ends up casting, and a cast is where this codebase's worst
+ * defects live. Sharing the real type costs nothing and means the two
+ * functions cannot disagree about what a value is.
+ */
+export type PlaceholderValues = Readonly<Record<string, string | number | null | undefined>>;
+export interface InterpolateResult {
+    /** The text with every slot replaced. */
+    text: string;
+    /** Slot names that had no value — the caller reports these to the author. */
+    unresolved: string[];
+}
+/**
+ * Replace every `{{slot}}` with its value.
+ *
+ * 🛑 An unresolved slot becomes the EMPTY STRING, never the literal
+ * `{{series}}`, and never a placeholder-ish stand-in like `[series]`. A
+ * literal brace pair reaching a published product description is the single
+ * most visible way this feature can fail, and it is what the `unresolved` list
+ * exists to prevent: the caller surfaces "2 of 9 slots could not be filled:
+ * {{year}}, {{type}}" rather than silently shipping the braces.
+ *
+ * A value that is present but empty/whitespace counts as UNRESOLVED. `{{brand}}`
+ * resolving to `""` because the brand lookup returned nothing is exactly the
+ * case an author needs told about, and treating it as resolved would hide it.
+ */
+export declare function interpolate(text: string, values: PlaceholderValues): InterpolateResult;
+/**
+ * Which of `text`'s slots have no value in `available`.
+ *
+ * Separate from `interpolate` because validation runs at AUTHORING time, when
+ * there is a schema to check against but no real product to fill from — the
+ * admin editor wants to know a template names `{{sereis}}` before anyone
+ * publishes from it.
+ */
+export declare function missingPlaceholders(text: string, available: PlaceholderValues): string[];

package/dist/_internal/shared/templating/placeholders.js

@@ -0,0 +1,73 @@
+/**
+ * `{{placeholder}}` interpolation — the ONE implementation.
+ *
+ * Promoted out of `features/faq/schemas/firestore.ts`, where it had served 63
+ * FAQs since the feature shipped. Category description templates need exactly
+ * the same thing, and writing a second regex for it is Root Cause #75's shape:
+ * one of the two eventually learns about a case the other does not, and the
+ * copy a caller reaches is the one they happened to import.
+ *
+ * `features/faq/schemas/firestore.ts` re-exports these under its own names, so
+ * nothing in the FAQ feature changed and no FAQ call site moved.
+ *
+ * 🛑 NOT a template ENGINE. There are no conditionals, loops, filters or
+ * nesting, and none should be added here — a category body is author-facing
+ * copy with a handful of named slots, and a real engine would mean user input
+ * being evaluated. `\w+` is the whole grammar, which is also why it is safe to
+ * run over HTML.
+ */
+/** The slot syntax. One capture group: the bare name, no braces. */
+const PLACEHOLDER_RE = /\{\{(\w+)\}\}/g;
+/**
+ * Every placeholder name in `text`, in source order, INCLUDING duplicates.
+ *
+ * Duplicates are kept deliberately: a caller counting unfilled slots wants to
+ * know a body says `{{year}}` three times, and `usedPlaceholders` below is the
+ * de-duplicated form for callers that want the set instead.
+ */
+export function extractPlaceholders(text) {
+    return Array.from(text.matchAll(PLACEHOLDER_RE), (m) => m[1]);
+}
+/** The distinct placeholder names in `text`, in first-appearance order. */
+export function usedPlaceholders(text) {
+    return Array.from(new Set(extractPlaceholders(text)));
+}
+/**
+ * Replace every `{{slot}}` with its value.
+ *
+ * 🛑 An unresolved slot becomes the EMPTY STRING, never the literal
+ * `{{series}}`, and never a placeholder-ish stand-in like `[series]`. A
+ * literal brace pair reaching a published product description is the single
+ * most visible way this feature can fail, and it is what the `unresolved` list
+ * exists to prevent: the caller surfaces "2 of 9 slots could not be filled:
+ * {{year}}, {{type}}" rather than silently shipping the braces.
+ *
+ * A value that is present but empty/whitespace counts as UNRESOLVED. `{{brand}}`
+ * resolving to `""` because the brand lookup returned nothing is exactly the
+ * case an author needs told about, and treating it as resolved would hide it.
+ */
+export function interpolate(text, values) {
+    const unresolved = [];
+    const out = text.replace(PLACEHOLDER_RE, (_match, name) => {
+        const raw = values[name];
+        const value = raw == null ? "" : String(raw);
+        if (value.trim() === "") {
+            if (!unresolved.includes(name))
+                unresolved.push(name);
+            return "";
+        }
+        return value;
+    });
+    return { text: out, unresolved };
+}
+/**
+ * Which of `text`'s slots have no value in `available`.
+ *
+ * Separate from `interpolate` because validation runs at AUTHORING time, when
+ * there is a schema to check against but no real product to fill from — the
+ * admin editor wants to know a template names `{{sereis}}` before anyone
+ * publishes from it.
+ */
+export function missingPlaceholders(text, available) {
+    return usedPlaceholders(text).filter((name) => !(name in available));
+}

package/dist/client.d.ts

@@ -488,6 +488,8 @@ export type { CodHandlingFeeRates, WhatsAppNotifyFeeRates, GiftWrapFeeRates, Shi
 export { FAQPageContent } from "./features/faq/index";
 export type { FAQCategory, FAQCategoryItem, FAQSortOption } from "./features/faq/index";
 export { CategoryInlineSelect } from "./features/seller/components/CategoryInlineSelect";
+export { CategoryTemplatePicker, variantForCondition } from "./features/categories/components/CategoryTemplatePicker";
+export type { CategoryTemplatePickerProps, CategoryTemplateApply } from "./features/categories/components/CategoryTemplatePicker";
 export { BrandInlineSelect } from "./features/seller/components/BrandInlineSelect";
 export { API_ENDPOINTS } from "./constants/index";
 export { SELLER_LISTING_TABS, type SellerListingTabId, } from "./features/products/constants/listing-tabs";

package/dist/client.js

@@ -486,6 +486,7 @@ export { checkEmiEligibility, computeEmiSchedule, computeBuyerEmiQuote, } from "
 export { computeCodHandlingFee } from "./_internal/shared/fees/calculator"; // reexport-from-internal-ok: pure fee-calc utility consumed directly by public checkout UI (CheckoutRouteClient.tsx), same category as the sibling computeEmiSchedule/checkEmiEligibility re-export two lines above
 export { FAQPageContent } from "./features/faq/index";
 export { CategoryInlineSelect } from "./features/seller/components/CategoryInlineSelect";
+export { CategoryTemplatePicker, variantForCondition } from "./features/categories/components/CategoryTemplatePicker";
 export { BrandInlineSelect } from "./features/seller/components/BrandInlineSelect";
 export { API_ENDPOINTS } from "./constants/index";
 // [CLIENT-SAFE] Pure, zero-import constant files — dashboard filter-tab

package/dist/constants/api-endpoints.d.ts

@@ -96,6 +96,9 @@ export declare const ADMIN_ENDPOINTS: {
     readonly PAYMENTS_SETTINGS: "/api/admin/payments/settings";
     readonly PRODUCTS: "/api/admin/products";
     readonly PRODUCT_BY_ID: (id: string) => string;
+    /** One request for up to 50 flag writes — replaces a client-side `forEach`
+     *  of single-row PATCHes that fired one invocation per selected row. */
+    readonly PRODUCTS_BULK: "/api/admin/products/bulk";
     readonly ORDERS: "/api/admin/orders";
     readonly ORDER_BY_ID: (id: string) => string;
     readonly ORDER_REFUND: (id: string) => string;
@@ -198,6 +201,8 @@ export declare const ADMIN_ENDPOINTS: {
     readonly SUBLISTING_CATEGORY_BY_ID: (id: string) => string;
     readonly PRODUCT_FEATURES: "/api/admin/features";
     readonly PRODUCT_FEATURE_BY_ID: (id: string) => string;
+    readonly TAX_CODES: "/api/admin/tax-codes";
+    readonly TAX_CODE_BY_ID: (id: string) => string;
     readonly TEAM: "/api/admin/team";
     readonly TEAM_MEMBER: (uid: string) => string;
     readonly USER_HARD_BAN: (uid: string) => string;
@@ -259,6 +264,15 @@ export declare const CATEGORY_ENDPOINTS: {
     readonly ROOT: (pageSize?: number) => string;
     /** @param qs — pre-built querystring (no leading `?`) for structured filters */
     readonly FILTERED: (qs: string) => string;
+    /**
+     * The inherited description template plus the category's public product
+     * defaults, for the seller form's template picker.
+     *
+     * `variant` narrows which body is wanted (`pre_owned`, `new_in_box`, …) and
+     * is part of the cache key — the response is edge-cached for an hour, so a
+     * category change in the form costs zero function invocations on a hit.
+     */
+    readonly DESCRIPTION_TEMPLATE: (id: string, variant?: string) => string;
 };
 export declare const CHECKOUT_ENDPOINTS: {
     readonly PREFLIGHT: "/api/checkout/preflight";
@@ -563,6 +577,9 @@ export declare const API_ENDPOINTS: {
         readonly PAYMENTS_SETTINGS: "/api/admin/payments/settings";
         readonly PRODUCTS: "/api/admin/products";
         readonly PRODUCT_BY_ID: (id: string) => string;
+        /** One request for up to 50 flag writes — replaces a client-side `forEach`
+         *  of single-row PATCHes that fired one invocation per selected row. */
+        readonly PRODUCTS_BULK: "/api/admin/products/bulk";
         readonly ORDERS: "/api/admin/orders";
         readonly ORDER_BY_ID: (id: string) => string;
         readonly ORDER_REFUND: (id: string) => string;
@@ -665,6 +682,8 @@ export declare const API_ENDPOINTS: {
         readonly SUBLISTING_CATEGORY_BY_ID: (id: string) => string;
         readonly PRODUCT_FEATURES: "/api/admin/features";
         readonly PRODUCT_FEATURE_BY_ID: (id: string) => string;
+        readonly TAX_CODES: "/api/admin/tax-codes";
+        readonly TAX_CODE_BY_ID: (id: string) => string;
         readonly TEAM: "/api/admin/team";
         readonly TEAM_MEMBER: (uid: string) => string;
         readonly USER_HARD_BAN: (uid: string) => string;
@@ -726,6 +745,15 @@ export declare const API_ENDPOINTS: {
         readonly ROOT: (pageSize?: number) => string;
         /** @param qs — pre-built querystring (no leading `?`) for structured filters */
         readonly FILTERED: (qs: string) => string;
+        /**
+         * The inherited description template plus the category's public product
+         * defaults, for the seller form's template picker.
+         *
+         * `variant` narrows which body is wanted (`pre_owned`, `new_in_box`, …) and
+         * is part of the cache key — the response is edge-cached for an hour, so a
+         * category change in the form costs zero function invocations on a hit.
+         */
+        readonly DESCRIPTION_TEMPLATE: (id: string, variant?: string) => string;
     };
     readonly BEFORE_AFTER: {
         readonly LIST: "/api/before-after";
@@ -1032,6 +1060,9 @@ export declare const API_ROUTES: {
         readonly PAYMENTS_SETTINGS: "/api/admin/payments/settings";
         readonly PRODUCTS: "/api/admin/products";
         readonly PRODUCT_BY_ID: (id: string) => string;
+        /** One request for up to 50 flag writes — replaces a client-side `forEach`
+         *  of single-row PATCHes that fired one invocation per selected row. */
+        readonly PRODUCTS_BULK: "/api/admin/products/bulk";
         readonly ORDERS: "/api/admin/orders";
         readonly ORDER_BY_ID: (id: string) => string;
         readonly ORDER_REFUND: (id: string) => string;
@@ -1134,6 +1165,8 @@ export declare const API_ROUTES: {
         readonly SUBLISTING_CATEGORY_BY_ID: (id: string) => string;
         readonly PRODUCT_FEATURES: "/api/admin/features";
         readonly PRODUCT_FEATURE_BY_ID: (id: string) => string;
+        readonly TAX_CODES: "/api/admin/tax-codes";
+        readonly TAX_CODE_BY_ID: (id: string) => string;
         readonly TEAM: "/api/admin/team";
         readonly TEAM_MEMBER: (uid: string) => string;
         readonly USER_HARD_BAN: (uid: string) => string;
@@ -1195,6 +1228,15 @@ export declare const API_ROUTES: {
         readonly ROOT: (pageSize?: number) => string;
         /** @param qs — pre-built querystring (no leading `?`) for structured filters */
         readonly FILTERED: (qs: string) => string;
+        /**
+         * The inherited description template plus the category's public product
+         * defaults, for the seller form's template picker.
+         *
+         * `variant` narrows which body is wanted (`pre_owned`, `new_in_box`, …) and
+         * is part of the cache key — the response is edge-cached for an hour, so a
+         * category change in the form costs zero function invocations on a hit.
+         */
+        readonly DESCRIPTION_TEMPLATE: (id: string, variant?: string) => string;
     };
     readonly BEFORE_AFTER: {
         readonly LIST: "/api/before-after";

package/dist/constants/api-endpoints.js

@@ -127,6 +127,9 @@ export const ADMIN_ENDPOINTS = {
     PAYMENTS_SETTINGS: "/api/admin/payments/settings",
     PRODUCTS: "/api/admin/products",
     PRODUCT_BY_ID: (id) => `/api/admin/products/${id}`,
+    /** One request for up to 50 flag writes — replaces a client-side `forEach`
+     *  of single-row PATCHes that fired one invocation per selected row. */
+    PRODUCTS_BULK: "/api/admin/products/bulk",
     ORDERS: "/api/admin/orders",
     ORDER_BY_ID: (id) => `/api/admin/orders/${id}`,
     ORDER_REFUND: (id) => `/api/admin/orders/${id}/refund`,
@@ -230,6 +233,8 @@ export const ADMIN_ENDPOINTS = {
     SUBLISTING_CATEGORY_BY_ID: (id) => `/api/admin/sublisting-categories/${id}`,
     PRODUCT_FEATURES: "/api/admin/features",
     PRODUCT_FEATURE_BY_ID: (id) => `/api/admin/features/${id}`,
+    TAX_CODES: "/api/admin/tax-codes",
+    TAX_CODE_BY_ID: (id) => `/api/admin/tax-codes/${id}`,
     TEAM: "/api/admin/team",
     TEAM_MEMBER: (uid) => `/api/admin/team/${uid}`,
     USER_HARD_BAN: (uid) => `/api/admin/users/${uid}/hard-ban`,
@@ -303,6 +308,15 @@ export const CATEGORY_ENDPOINTS = {
     ROOT: (pageSize = 20) => `/api/categories?tier=0&pageSize=${pageSize}`,
     /** @param qs — pre-built querystring (no leading `?`) for structured filters */
     FILTERED: (qs) => `/api/categories?${qs}`,
+    /**
+     * The inherited description template plus the category's public product
+     * defaults, for the seller form's template picker.
+     *
+     * `variant` narrows which body is wanted (`pre_owned`, `new_in_box`, …) and
+     * is part of the cache key — the response is edge-cached for an hour, so a
+     * category change in the form costs zero function invocations on a hit.
+     */
+    DESCRIPTION_TEMPLATE: (id, variant) => `/api/categories/${id}/description-template${variant ? `?variant=${variant}` : ""}`,
 };
 // ---------------------------------------------------------------------------
 // Checkout

package/dist/features/admin/actions/admin-actions.d.ts

@@ -27,7 +27,7 @@ export declare function adminUpdateUser(adminId: string, uid: string, input: Use
  * removed. Orders, reviews, addresses, payouts, etc. are left untouched —
  * they're business/audit records that reference this uid and deleting
  * them would corrupt other parties' (sellers', buyers') own history, the
- * same reasoning testerSandboxCleanup already documents for why it leaves
+ * same reasoning testDataCleanup already documents for why it leaves
  * orders/reviews/wishlists/history alone when a test product disappears.
  */
 export declare function adminDeleteUser(adminId: string, uid: string): Promise<void>;

package/dist/features/admin/actions/admin-actions.js

@@ -156,7 +156,7 @@ export async function adminUpdateUser(adminId, uid, input) {
  * removed. Orders, reviews, addresses, payouts, etc. are left untouched —
  * they're business/audit records that reference this uid and deleting
  * them would corrupt other parties' (sellers', buyers') own history, the
- * same reasoning testerSandboxCleanup already documents for why it leaves
+ * same reasoning testDataCleanup already documents for why it leaves
  * orders/reviews/wishlists/history alone when a test product disappears.
  */
 export async function adminDeleteUser(adminId, uid) {