@mohasinac/appkit 4.52.4 → 4.53.0

package/dist/features/account/components/index.d.ts

@@ -14,17 +14,11 @@ export { UserAccountHubView } from "./UserAccountHubView";
 export type { UserAccountHubViewProps, UserAccountHubViewLabels, } from "./UserAccountHubView";
 export { ProfileView } from "./ProfileView";
 export type { ProfileViewProps, ProfileViewLabels } from "./ProfileView";
-export { UserSettingsView } from "./UserSettingsView";
-export type { UserSettingsViewProps, UserSettingsViewLabels, } from "./UserSettingsView";
 export { UserOrdersView } from "./UserOrdersView";
 export type { UserOrdersViewProps } from "./UserOrdersView";
 export { UserBidsView } from "./UserBidsView";
 export { OrderDetailView } from "./OrderDetailView";
 export type { OrderDetailViewProps, OrderDetailViewLabels, } from "./OrderDetailView";
-export { UserAddressesView } from "./UserAddressesView";
-export type { UserAddressesViewProps, UserAddressesViewLabels, } from "./UserAddressesView";
-export { UserNotificationsView } from "./UserNotificationsView";
-export type { UserNotificationsViewProps, UserNotificationsViewLabels, } from "./UserNotificationsView";
 export { UserOffersPanel } from "./UserOffersPanel";
 export type { UserOffersPanelProps } from "./UserOffersPanel";
 export { BecomeSellerView } from "./BecomeSellerView";
@@ -33,7 +27,5 @@ export { UserOrderTrackView } from "./UserOrderTrackView";
 export type { UserOrderTrackViewProps, UserOrderTrackViewLabels, } from "./UserOrderTrackView";
 export { UserReturnsView } from "./UserReturnsView";
 export type { UserReturnsViewProps } from "./UserReturnsView";
-export { UserSupportView } from "./UserSupportView";
-export type { UserSupportViewProps } from "./UserSupportView";
 export { NotificationPreferencesPanel } from "./NotificationPreferencesPanel";
 export type { NotificationPreferencesPanelProps } from "./NotificationPreferencesPanel";

package/dist/features/account/components/index.js

@@ -6,15 +6,11 @@ export { NotificationBell } from "./NotificationBell.js";
 export { AddressInlineSelect } from "./AddressInlineSelect.js";
 export { UserAccountHubView } from "./UserAccountHubView.js";
 export { ProfileView } from "./ProfileView.js";
-export { UserSettingsView } from "./UserSettingsView.js";
 export { UserOrdersView } from "./UserOrdersView.js";
 export { UserBidsView } from "./UserBidsView.js";
 export { OrderDetailView } from "./OrderDetailView.js";
-export { UserAddressesView } from "./UserAddressesView.js";
-export { UserNotificationsView } from "./UserNotificationsView.js";
 export { UserOffersPanel } from "./UserOffersPanel.js";
 export { BecomeSellerView } from "./BecomeSellerView.js";
 export { UserOrderTrackView } from "./UserOrderTrackView.js";
 export { UserReturnsView } from "./UserReturnsView.js";
-export { UserSupportView } from "./UserSupportView.js";
 export { NotificationPreferencesPanel } from "./NotificationPreferencesPanel.js";

package/dist/features/addresses/repository/addresses.repository.d.ts

@@ -1,8 +1,7 @@
-import { BaseRepository, type DocumentSnapshot } from "../../../providers/db-firebase";
-import { type AddressBanStatus, type AddressCreateInput, type AddressDocument, type AddressOwnerType, type AddressUpdateInput } from "../schemas";
+import { BaseRepository } from "../../../providers/db-firebase";
+import { type AddressBanStatus, type AddressCreateInput, type AddressDocument, type AddressPlain, type AddressOwnerType, type AddressUpdateInput } from "../schemas";
 export declare class AddressesRepository extends BaseRepository<AddressDocument> {
     constructor();
-    private decryptAddress;
     /**
      * Declared, not hand-rolled.
      *
@@ -15,9 +14,21 @@ export declare class AddressesRepository extends BaseRepository<AddressDocument>
      * call.
      */
     protected piiFields: readonly ["fullName", "phone", "addressLine1", "addressLine2"];
-    protected mapDoc<D = AddressDocument>(snap: DocumentSnapshot): D;
-    createWithId(id: string, data: Partial<AddressDocument>): Promise<AddressDocument>;
-    update(id: string, data: Partial<AddressDocument>): Promise<AddressDocument>;
+    /** Plaintext PII. **Opt-in and named** — shows up in review and in a grep. */
+    revealAddress(doc: AddressDocument): AddressPlain;
+    /** As `revealAddress`, for a list read. */
+    revealAddresss(docs: readonly AddressDocument[]): AddressPlain[];
+    /**
+     * Masked PII — **the default for any surface that only needs to identify a
+     * row to a human.** Decrypts first, then masks: the mask helpers refuse
+     * ciphertext by design, so passing a stored field straight in would return
+     * "Anonymous" for every row.
+     */
+    maskedAddress(doc: AddressDocument): AddressPlain;
+    /** As `maskedAddress`, for a list read. */
+    maskedAddresss(docs: readonly AddressDocument[]): AddressPlain[];
+    createWithId(id: string, data: Partial<AddressPlain>): Promise<AddressDocument>;
+    update(id: string, data: Partial<AddressPlain>): Promise<AddressDocument>;
     listByOwner(ownerType: AddressOwnerType, ownerId: string): Promise<AddressDocument[]>;
     /**
      * 🛑 Requires the composite index `(ownerType ASC, createdAt DESC)`.

package/dist/features/addresses/repository/addresses.repository.js

@@ -13,7 +13,7 @@ import { normalizeError } from "../../../errors/normalize.js";
 import { DatabaseError } from "../../../errors/index.js";
 import { serverLogger } from "../../../monitoring/index.js";
 import { BaseRepository, getFirestoreCount, prepareForFirestore, } from "../../../providers/db-firebase/index.js";
-import { ADDRESS_PII_FIELDS, decryptPiiFields, } from "../../../security/index.js";
+import { maskPii, revealPii, ADDRESS_PII_FIELDS, } from "../../../security/index.js";
 import { ADDRESS_FIELDS, ADDRESSES_COLLECTION, } from "../schemas/index.js";
 export class AddressesRepository extends BaseRepository {
     constructor() {
@@ -31,17 +31,53 @@ export class AddressesRepository extends BaseRepository {
          */
         this.piiFields = ADDRESS_PII_FIELDS;
     }
-    decryptAddress(doc) {
-        return decryptPiiFields(doc, [...ADDRESS_PII_FIELDS]);
+    /*
+     * 🛑 `mapDoc` is NOT overridden, and that absence IS the change.
+     *
+     * It used to decrypt on every read, so ciphertext never left the database
+     * and every caller handled plaintext without ever saying so. Following
+     * `SiteSettingsRepository`: reads return what Firestore holds, and plaintext
+     * requires one of the two named methods below.
+     *
+     * A convention would not hold this. `AddressDocument`'s PII fields are
+     * `Encrypted<string>`, assignable to nothing that wants a plain `string`, so
+     * a reader that skips both accessors is a compile error naming file and line.
+     */
+    /** Plaintext PII. **Opt-in and named** — shows up in review and in a grep. */
+    revealAddress(doc) {
+        return revealPii(doc, ADDRESS_PII_FIELDS);
     }
-    mapDoc(snap) {
-        const raw = super.mapDoc(snap);
-        return this.decryptAddress(raw);
+    /** As `revealAddress`, for a list read. */
+    revealAddresss(docs) {
+        return docs.map((d) => this.revealAddress(d));
     }
+    /**
+     * Masked PII — **the default for any surface that only needs to identify a
+     * row to a human.** Decrypts first, then masks: the mask helpers refuse
+     * ciphertext by design, so passing a stored field straight in would return
+     * "Anonymous" for every row.
+     */
+    maskedAddress(doc) {
+        return maskPii(doc, ADDRESS_PII_FIELDS);
+    }
+    /** As `maskedAddress`, for a list read. */
+    maskedAddresss(docs) {
+        return docs.map((d) => this.maskedAddress(d));
+    }
+    /*
+     * Takes PLAINTEXT, like the base it overrides — this method is what
+     * encrypts (`applyWriteHooks`), so demanding ciphertext from callers
+     * inverted its own contract.
+     */
     async createWithId(id, data) {
         const encrypted = this.applyWriteHooks(data);
         return super.createWithId(id, encrypted);
     }
+    /*
+     * Takes PLAINTEXT, like the base it overrides — this method is the thing
+     * that encrypts (`applyWriteHooks`), so demanding ciphertext from callers
+     * inverted its own contract.
+     */
     async update(id, data) {
         const encrypted = this.applyWriteHooks(data);
         return super.update(id, encrypted);
@@ -105,6 +141,7 @@ export class AddressesRepository extends BaseRepository {
             }
             const now = new Date();
             const docRef = this.getCollection().doc();
+            // Plain in, ciphertext out — the write hook encrypts below.
             const addressData = {
                 ...input,
                 ownerType,
@@ -166,9 +203,27 @@ export class AddressesRepository extends BaseRepository {
         }
         const updateData = { ...input };
         if (input.postalCode || input.addressLine1 || input.addressLine2 !== undefined) {
-            const postalCode = input.postalCode ?? existing.postalCode;
-            const line1 = input.addressLine1 ?? existing.addressLine1;
-            const line2 = input.addressLine2 ?? existing.addressLine2;
+            /*
+             * 🛑 Revealed, because the hash is a BLIND INDEX over plaintext.
+             *
+             * `existing` comes from a find, which no longer decrypts, and these three
+             * fall back to it when the caller did not supply them. Hashing ciphertext
+             * would compute a hash nothing else can reproduce — so every address
+             * edited after this change would stop matching its own duplicates, with
+             * no error and nothing to notice. The brand is what made the fallback
+             * visible; `.postalCode` is not PII and needs no reveal.
+             */
+            const current = this.revealAddress(existing);
+            const postalCode = input.postalCode ?? current.postalCode;
+            const line1 = input.addressLine1 ?? current.addressLine1;
+            const line2 = input.addressLine2 ?? current.addressLine2;
+            /*
+             * The hash is computed from PLAINTEXT, which is the whole point of a
+             * blind index — and `existing` now holds ciphertext, so the three values
+             * feeding it come from the revealed copy above. Casting to the document
+             * shape here would have hashed ciphertext and silently broken
+             * duplicate-detection for every address edited after this change.
+             */
             updateData.addressHash = this.computeAddressHash(postalCode, line1, line2);
         }
         return this.update(addressId, updateData);
@@ -298,6 +353,7 @@ export class AddressesRepository extends BaseRepository {
         }
     }
     async banById(id, banData) {
+        // Plain write payload — see `update`'s own note.
         return this.update(id, {
             banStatus: "banned",
             banReason: banData.banReason,

package/dist/features/addresses/schemas/firestore.d.ts

@@ -8,16 +8,27 @@
  * repository overrides `createWithId` and `create` to inject encryption.
  */
 import type { BaseDocument } from "../../../_internal/shared/types/base-document";
+import type { Encrypted, Plaintext } from "../../../security/encrypted";
 export type AddressOwnerType = "user" | "store";
 export type AddressBanStatus = "banned" | "unban_requested" | "suspicious";
+/**
+ * `AddressDocument` with its PII as plain `string` — what the named repository
+ * accessors return, and what a WRITE path accepts (the repository encrypts).
+ *
+ * `Plaintext<T>` is the one definition of this shape; see `security/encrypted.ts`.
+ * It is deliberately NOT distinguishable from a MASKED value — `maskPii`
+ * returns plain strings too, and no type can express "these characters are
+ * asterisks". The distinction is which named method you called.
+ */
+export type AddressPlain = Plaintext<AddressDocument>;
 export interface AddressDocument extends BaseDocument {
     ownerType: AddressOwnerType;
     ownerId: string;
     label: string;
-    fullName: string;
-    phone: string;
-    addressLine1: string;
-    addressLine2?: string;
+    fullName: Encrypted<string>;
+    phone: Encrypted<string>;
+    addressLine1: Encrypted<string>;
+    addressLine2?: Encrypted<string>;
     landmark?: string;
     city: string;
     state: string;
@@ -40,8 +51,8 @@ export declare const ADDRESS_INDEXED_FIELDS: readonly ["ownerType", "ownerId", "
 export declare const DEFAULT_ADDRESS_DATA: Partial<AddressDocument>;
 export declare const ADDRESS_PUBLIC_FIELDS: readonly ["id", "ownerType", "ownerId", "label", "fullName", "phone", "addressLine1", "addressLine2", "landmark", "city", "state", "postalCode", "country", "isDefault", "addressHash", "banStatus", "banReason", "bannedAt", "autoBanned", "unbanRequestNote", "unbanRequestedAt", "createdAt", "updatedAt"];
 export declare const ADDRESS_UPDATABLE_FIELDS: readonly ["label", "fullName", "phone", "addressLine1", "addressLine2", "landmark", "city", "state", "postalCode", "country", "isDefault", "banStatus", "banReason", "bannedBy", "bannedAt", "autoBanned", "unbanRequestNote", "unbanRequestedAt"];
-export type AddressCreateInput = Omit<AddressDocument, "id" | "ownerType" | "ownerId" | "createdAt" | "updatedAt">;
-export type AddressUpdateInput = Partial<Pick<AddressDocument, (typeof ADDRESS_UPDATABLE_FIELDS)[number]>>;
+export type AddressCreateInput = Omit<AddressPlain, "id" | "ownerType" | "ownerId" | "createdAt" | "updatedAt">;
+export type AddressUpdateInput = Partial<Pick<AddressPlain, (typeof ADDRESS_UPDATABLE_FIELDS)[number]>>;
 export declare const ADDRESS_FIELDS: {
     readonly ID: "id";
     readonly OWNER_TYPE: "ownerType";

package/dist/features/admin/actions/notification-actions.js

@@ -6,7 +6,6 @@ import { createResendProvider } from "../../../providers/email-resend/provider.j
 import { isChannelHealthy, withChannelRetry } from "../../../_internal/server/notifications/channel-health.js";
 import { enqueueJob } from "../../jobs/actions/enqueue-job.js";
 import { serverLogger } from "../../../monitoring/index.js";
-import { decryptPii } from "../../../security/index.js";
 import { resolveNotificationActionUrl, TYPE_AUDIENCE, } from "../../../_internal/shared/features/notifications/action-url.js";
 import { isEmailEligible } from "../../../_internal/shared/features/notifications/email-eligibility.js";
 import { renderNotificationEmail } from "../../email/notification-templates.js";
@@ -187,11 +186,21 @@ export async function sendNotification(input) {
         void normalizeError(err);
         serverLogger.warn("notification-actions: user prefs lookup failed — defaulting to all channels enabled", { userId: input.userId, error: err instanceof Error ? err.message : String(err) });
     }
-    // If caller didn't supply userEmail, try to decrypt it from the already-fetched user doc.
-    const resolvedEmail = userEmail ??
-        (fetchedUserDoc?.email ? decryptPii(fetchedUserDoc.email) : undefined);
-    const resolvedPhone = userPhone ??
-        (fetchedUserDoc?.phoneNumber ? decryptPii(fetchedUserDoc.phoneNumber) : undefined);
+    /*
+     * The NAMED accessor, not two bare `decryptPii` casts.
+     *
+     * These already decrypted and already worked, but the casts defeated the
+     * brand — so a grep for `reveal*` could not tell this reader from an
+     * unconverted one. `revealUser` is the same decision, stated.
+     *
+     * Revealed rather than masked because this notification is DELIVERED: a
+     * masked address cannot receive mail.
+     */
+    const fetchedUserPlain = fetchedUserDoc
+        ? userRepository.revealUser(fetchedUserDoc)
+        : null;
+    const resolvedEmail = userEmail ?? fetchedUserPlain?.email ?? undefined;
+    const resolvedPhone = userPhone ?? fetchedUserPlain?.phoneNumber ?? undefined;
     // Map NotificationType to a NotificationTypePrefs key.
     /*
      * 🛑 COMPLETE and compile-checked: `Record<NotificationType, …>`, not

package/dist/features/admin/api/bids/route.js

@@ -35,7 +35,7 @@ export const GET = createRouteHandler({
             filters,
             sort,
             page,
-            perPage: pageSize,
+            pageSize: pageSize,
         });
         const totalPages = Math.max(1, Math.ceil(result.total / pageSize));
         return NextResponse.json({

package/dist/features/admin/api/coupons/route.js

@@ -35,7 +35,7 @@ export const GET = createRouteHandler({
             filters,
             sort,
             page,
-            perPage: pageSize,
+            pageSize: pageSize,
         });
         const totalPages = Math.max(1, Math.ceil(result.total / pageSize));
         return NextResponse.json({

package/dist/features/admin/api/products/route.js

@@ -36,7 +36,7 @@ export const GET = createRouteHandler({
             filters,
             sort,
             page,
-            perPage: pageSize,
+            pageSize: pageSize,
         });
         const totalPages = Math.max(1, Math.ceil(result.total / pageSize));
         return NextResponse.json({

package/dist/features/admin/api/reviews/route.js

@@ -35,7 +35,7 @@ export const GET = createRouteHandler({
             filters,
             sort,
             page,
-            perPage: pageSize,
+            pageSize: pageSize,
         });
         const totalPages = Math.max(1, Math.ceil(result.total / pageSize));
         return NextResponse.json({

package/dist/features/admin/components/AdminAdEditorView.js

@@ -3,7 +3,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useApiMutation } from "@mohasinac/appkit/client";
 import React from "react";
 import { useQuery } from "@tanstack/react-query";
-import { Alert, Checkbox, Div, Span, Stack, StackedViewShell, Text, useToast } from "../../../ui/index.js";
+import { Alert, Checkbox, Div, EmptyState, Span, Stack, StackedViewShell, Text, useToast } from "../../../ui/index.js";
 import { apiClient } from "../../../http/index.js";
 import { ADMIN_ENDPOINTS } from "../../../constants/api-endpoints.js";
 import { adminAdFormSchema } from "../schemas/admin-ops-forms.js";
@@ -67,6 +67,18 @@ export function AdminAdEditorView({ adId, endpointBase = ADMIN_ENDPOINTS.ADS, la
         enabled: Boolean(adId),
         staleTime: 15000,
     });
+    /*
+     * 🛑 An invented `adId` used to render the full ad editor with empty
+     * defaults. Ads live inside the `siteSettings` singleton rather than their
+     * own collection, so a Save against a non-existent id does not fail on a
+     * missing document — it writes a NEW ad into the settings array, keyed on
+     * whatever was in the URL. That is Root Cause #98's shape with the blast
+     * radius of a shared document.
+     *
+     * Gated on the query having settled: `isLoading` is true on first paint, so
+     * a bare `!adQuery.data` check would flash this at every real ad.
+     */
+    const adMissing = Boolean(adId) && !adQuery.isLoading && !adQuery.isError && !adQuery.data?.item;
     React.useEffect(() => {
         const item = adQuery.data?.item;
         if (!item)
@@ -88,7 +100,6 @@ export function AdminAdEditorView({ adId, endpointBase = ADMIN_ENDPOINTS.ADS, la
             adsenseSlot: item.creative?.adsenseSlot || "",
             thirdPartyUrl: item.creative?.thirdPartyUrl || "",
         });
-        // eslint-disable-next-line react-hooks/exhaustive-deps
     }, [adQuery.data]);
     const saveMutation = useApiMutation({
         errorMessage: "Save failed",
@@ -208,9 +219,7 @@ export function AdminAdEditorView({ adId, endpointBase = ADMIN_ENDPOINTS.ADS, la
         renderers: {
             placementIds: ({ values }) => (_jsx(PlacementChecklist, { placements: placements, selected: values.placementIds, onToggle: togglePlacement })),
         },
-    }), 
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-    [placements]);
+    }), [placements]);
     const nav = useSectionFormNav(sections, form, { scope: "admin:ad-editor" });
     const { shellCtx, setFieldError, clearErrors } = useFormShellState(adminAdFormSchema, {
         sections: nav.sectionMeta,
@@ -230,6 +239,11 @@ export function AdminAdEditorView({ adId, endpointBase = ADMIN_ENDPOINTS.ADS, la
         }
         saveMutation.mutate();
     };
+    if (adMissing) {
+        return (_jsx(StackedViewShell, { portal: "admin", ...rest, title: "Ad not found", sections: [
+                _jsx(EmptyState, { title: "Ad not found", description: "This ad may have been deleted, or the link may be wrong." }, "missing"),
+            ] }));
+    }
     return (_jsx(StackedViewShell, { portal: "admin", ...rest, title: labels.title ?? (adId ? "Edit Ad" : "Create Ad"), sections: [
             metaQuery.error ? (_jsx(Alert, { variant: "error", title: "Could not load ad metadata", children: metaQuery.error instanceof Error ? metaQuery.error.message : "Unknown error" })) : null,
             adQuery.error ? (_jsx(Alert, { variant: "error", title: "Could not load ad", children: adQuery.error instanceof Error ? adQuery.error.message : "Unknown error" })) : null,

package/dist/features/admin/components/AdminAuditLogView.js

@@ -71,7 +71,7 @@ export function AdminAuditLogView({ children, ...props }) {
             { value: sortBy("createdAt", "DESC"), label: "Newest" },
             { value: sortBy("createdAt", "ASC"), label: "Oldest" },
         ],
-        mapRows: (response) => toRecordArray(response.entries).map((item, index) => {
+        mapRows: (response) => toRecordArray(response.items).map((item, index) => {
             const action = toStringValue(item.action, "unknown");
             return {
                 id: toStringValue(item.id, `audit-${index}`),

package/dist/features/admin/components/AdminBlogEditorView.js

@@ -260,7 +260,6 @@ export function AdminBlogEditorView({ postId, onSaved, onDeleted, embedded, ...r
     // up the component.
     useEffect(() => {
         validate(draft);
-        // eslint-disable-next-line react-hooks/exhaustive-deps
     }, [draft, validate]);
     const formContent = (_jsxs(FormShellContext.Provider, { value: shellCtx, children: [_jsx(FormErrorSummary, {}), _jsx(SectionForm, { sections: sections, values: draft, onChange: update, onSubmit: () => { saveMutation.mutate(); }, schema: blogDraftSchema, openIds: openIds, onOpenChange: setOpenIds, submitLabel: isEdit ? "Save Changes" : "Create Post", isLoading: isLoading }), deleteModal] }));
     if (embedded) {

package/dist/features/admin/components/AdminBlogView.js

@@ -42,7 +42,7 @@ export function AdminBlogView({ children, ...props }) {
             { value: sortBy("createdAt", "DESC"), label: "Newest draft" },
             { value: "title", label: "Title A–Z" },
         ],
-        mapRows: (response) => toRecordArray(response.posts).map((item, index) => ({
+        mapRows: (response) => toRecordArray(response.items).map((item, index) => ({
             id: toStringValue(item.id, `post-${index}`),
             primary: toStringValue(item.title, "Untitled post"),
             secondary: [

package/dist/features/admin/components/AdminBrandsView.js

@@ -33,7 +33,23 @@ const COLUMNS = [
 const ADMIN_BRANDS_CONFIG = {
     portal: "admin",
     title: "Brands",
-    // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
+    /*
+     * Restored 2026-10-17. The note that stood here said "restore it when the
+     * collection gains searchTxt" — `categories` has it, and a brand IS a
+     * `categories` row, so `/api/admin/brands` now passes `q` as a search opt.
+     *
+     * `fields` lists what a user can expect to match, and it is a subset of
+     * `buildCategorySearchTxt`'s source list rather than a guess: that builder
+     * also indexes `path`, `itemCode`, `brandCountry`, ancestor names, authored
+     * aliases and generated misspelling variants, so the box reaches further
+     * than it advertises — never less.
+     */
+    search: {
+        placeholder: "Search brands by name, slug or description…",
+        mode: "partial",
+        fields: ["name", "slug", "description"],
+        commit: "debounce",
+    },
     emptyLabel: "No brands found",
     filterKeys: ["isActive"],
     defaultSort: sortBy("order", "ASC"),

package/dist/features/admin/components/AdminCategoryEditorView.js

@@ -75,7 +75,6 @@ async function loadTaxCodeOptions(query, page) {
     if (query)
         params.set("q", query);
     const res = await apiClient.get(`${ADMIN_ENDPOINTS.TAX_CODES}?${params.toString()}`);
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     const payload = res?.data ?? res;
     const items = payload?.items ?? payload?.data ?? [];
     return {

package/dist/features/admin/components/AdminContactView.js

@@ -59,7 +59,7 @@ export function AdminContactView({ children, onBulkMarkRead, onBulkArchive, onBu
             { value: sortBy("createdAt", "DESC"), label: "Newest" },
             { value: sortBy("createdAt", "ASC"), label: "Oldest" },
         ],
-        mapRows: (response) => toRecordArray(response.submissions).map((item, index) => ({
+        mapRows: (response) => toRecordArray(response.items).map((item, index) => ({
             id: toStringValue(item.id, `msg-${index}`),
             primary: toStringValue(item.subject, "No subject"),
             secondary: [toStringValue(item.name, "Unknown"), toStringValue(item.email, "")]

package/dist/features/admin/components/AdminEmployeeEditorView.js

@@ -170,9 +170,7 @@ export function AdminEmployeeEditorView({ open, onClose, mode, userId, displayNa
             permissionGroup: ({ values, errors }) => (_jsx(FieldSelectGroup, { value: values.permissionGroup, error: errors.permissionGroup, onChange: applyGroupPreset })),
             permissions: ({ values }) => (_jsx(PermissionDomainsPanel, { permissions: values.permissions, togglePerm: togglePerm })),
         },
-    }), 
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-    [schema]);
+    }), [schema]);
     const nav = useSectionFormNav(sections, form, { scope: "admin:employee-editor" });
     const { shellCtx, setFieldError, clearErrors } = useFormShellState(schema, {
         sections: nav.sectionMeta,

package/dist/features/admin/components/AdminNewsletterView.js

@@ -100,7 +100,7 @@ export function AdminNewsletterView({ children, onBulkUnsubscribe, ...props }) {
         // Opening a row is what makes the destructive actions beside it
         // safe to offer at all.
         onRowClick: (row) => setDetail(row),
-        mapRows: (response) => toRecordArray(response.subscribers).map((item, index) => ({
+        mapRows: (response) => toRecordArray(response.items).map((item, index) => ({
             id: toStringValue(item.id, `sub-${index}`),
             primary: toStringValue(item.email, "Unknown email"),
             secondary: [toStringValue(item.source, ""), item.ipAddress ? "IP logged" : ""]

package/dist/features/admin/components/AdminOrdersView.js

@@ -105,10 +105,17 @@ export function AdminOrdersView({ children, ...props }) {
             throw err;
         }
     }, [showToast]);
+    /*
+     * 🛑 ABOVE the `children` short-circuit. `useOrderScope` sat below it, so a
+     * caller passing children skipped the hook entirely and the hook order
+     * differed between the two render paths — React then reads one hook's state
+     * into another's slot. A hook must run on every render of a component, which
+     * means before any conditional return, always.
+     */
+    const orderScope = useOrderScope();
     if (React.Children.count(children) > 0) {
         return (_jsx(ListingLayout, { portal: "admin", ...props, children: children }));
     }
-    const orderScope = useOrderScope();
     const config = {
         portal: "admin",
         title: "Orders",
@@ -132,7 +139,7 @@ export function AdminOrdersView({ children, ...props }) {
             { value: sortBy("createdAt", "DESC"), label: "Newest" },
             { value: sortBy("createdAt", "ASC"), label: "Oldest" },
         ],
-        mapRows: (response) => toRecordArray(response.orders).map((item, index) => {
+        mapRows: (response) => toRecordArray(response.items).map((item, index) => {
             const orderId = toStringValue(item.id, `order-${index}`);
             const { image, title, extraCount } = firstOrderItem(item);
             return {

package/dist/features/admin/components/AdminPayoutsView.js

@@ -100,7 +100,7 @@ export function AdminPayoutsView({ children, ...props }) {
             { value: sortBy("createdAt", "ASC"), label: "Oldest" },
             { value: sortBy("amount", "DESC"), label: "Highest amount" },
         ],
-        mapRows: (response) => toRecordArray(response.payouts).map((item, index) => ({
+        mapRows: (response) => toRecordArray(response.items).map((item, index) => ({
             id: toStringValue(item.id, `payout-${index}`),
             primary: [`Payout ${toStringValue(item.id, "-")}`, toCurrency(item.amount)].join(" · "),
             secondary: toStringValue(item.storeName ?? item.sellerName, "Unknown store"),

package/dist/features/admin/components/AdminPrizeDrawsView.js

@@ -124,6 +124,17 @@ export function AdminPrizeDrawsView({ children, ...props }) {
         buildExtraParams: () => scope.extraParams,
         renderAboveContent: scope.renderAboveContent,
         rowHrefTemplate: String(ROUTES.ADMIN.PRIZE_DRAWS_EDIT("{id}")),
+        /*
+         * A prize draw IS a product (`listingType: "prize-draw"`), so it is created
+         * in the product editor like every other type — there is deliberately no
+         * `PRIZE_DRAWS_NEW` admin route, and inventing one would be a second create
+         * path for the same document. `?listingType=` preselects the type so the
+         * row an admin creates from here actually appears here.
+         */
+        primaryAction: {
+            label: "Add Prize Draw",
+            href: `${String(ROUTES.ADMIN.PRODUCTS_NEW)}?${PRODUCT_FIELDS.LISTING_TYPE}=prize-draw`,
+        },
         // Rule #7: bulk-action array sourced from the ADMIN_BULK_ACTIONS preset.
         buildBulkActions: (selection) => ADMIN_BULK_ACTIONS.prizeDraws.map((id) => ({
             id,

package/dist/features/admin/components/AdminProductEditorView.d.ts

@@ -1,6 +1,7 @@
 import React from "react";
 import type { StackedViewShellProps } from "../../../ui";
 import type { ProductFormValue } from "../../products/components/ProductForm";
+import type { ListingType } from "../../products/types";
 export interface AdminProductEditorViewProps extends Omit<StackedViewShellProps, "sections"> {
     productId?: string;
     onSaved?: (id: string) => void;
@@ -15,5 +16,13 @@ export interface AdminProductEditorViewProps extends Omit<StackedViewShellProps,
      * background per its normal staleTime rules.
      */
     initialData?: ProductFormValue;
+    /**
+     * Which listing type a NEW product starts on. Lets a per-type admin listing
+     * ("Art", "Classifieds", …) send the admin straight into a create form for
+     * its own type rather than for `standard` — which is what lets those five
+     * pages have a create button at all. Ignored in edit mode, where the stored
+     * `listingType` is the only correct answer.
+     */
+    initialListingType?: ListingType;
 }
-export declare function AdminProductEditorView({ productId, onSaved, onDeleted, embedded, enabledListingTypes, initialData, ...rest }: AdminProductEditorViewProps): React.JSX.Element;
+export declare function AdminProductEditorView({ productId, onSaved, onDeleted, embedded, enabledListingTypes, initialData, initialListingType, ...rest }: AdminProductEditorViewProps): React.JSX.Element;