@mohasinac/appkit 4.52.5 → 4.53.0

package/dist/features/seller/api/coupons/route.js

@@ -37,7 +37,7 @@ export const GET = createRouteHandler({
             filters: `sellerId==${user.uid}`,
             sort,
             page,
-            perPage: pageSize,
+            pageSize: pageSize,
         });
         return NextResponse.json({
             success: true,

package/dist/features/seller/api/products/route.js

@@ -48,7 +48,7 @@ export const GET = createRouteHandler({
             filters: combinedFilters,
             sort,
             page,
-            perPage: pageSize,
+            pageSize: pageSize,
         });
         const totalPages = Math.max(1, Math.ceil(result.total / pageSize));
         // Keep same response shape as local route so useSellerProducts hook needs no changes

package/dist/features/seller/api/store/route.js

@@ -24,7 +24,7 @@ export const GET = createRouteHandler({
         const repo = db.getRepository("stores");
         const result = await repo.findAll({
             filters: `ownerId==${user.uid}`,
-            perPage: 1,
+            pageSize: 1,
         });
         return NextResponse.json({
             success: true,

package/dist/features/seller/components/SellerBidsView.js

@@ -106,7 +106,7 @@ export function SellerBidsView({ endpoint = SELLER_ENDPOINTS.BIDS }) {
         sortOptions: SORT_OPTIONS,
         initialView: "list",
         columns,
-        mapRows: (response) => toRecordArray(response.bids).map((item, idx) => ({
+        mapRows: (response) => toRecordArray(response.items).map((item, idx) => ({
             id: toStringValue(item.id, `bid-${idx}`),
             productTitle: toStringValue(item.productTitle, "Unknown auction"),
             productId: toStringValue(item.productId, ""),

package/dist/features/seller/components/SellerCouponsView.js

@@ -68,7 +68,7 @@ export function SellerCouponsView({ onCreateClick, onEditClick, onToggle, onDele
             { value: "code", label: "Code A–Z" },
         ],
         hideTableView: true,
-        mapRows: (response) => toRecordArray(response.coupons).map((item, index) => ({
+        mapRows: (response) => toRecordArray(response.items).map((item, index) => ({
             id: toStringValue(item.id, `coupon-${index}`),
             raw: item,
             isActive: getIsActive(item),

package/dist/features/seller/components/SellerListingTypeView.js

@@ -230,7 +230,15 @@ export function SellerListingTypeView({ type, onCreateClick, onEditClick, onDele
         // four options where its four siblings offered five.
         sortOptions: [...plugin.sortOptions],
         columns,
-        mapRows: (response) => toRecordArray(response.products ?? response.items).map((item, index) => ({
+        mapRows: (response) => 
+        /*
+         * `items` only. The `?? response.products` fallback is gone because both
+         * endpoints this config reads (`/api/admin/products`, `/api/store/products`)
+         * now emit the canonical key — verified before removing it. A defence
+         * against a shape that no longer exists reads as though the shape still
+         * might, which is how two spellings stay alive forever.
+         */
+        toRecordArray(response.items).map((item, index) => ({
             id: toStringValue(item.id, `${type}-${index}`),
             title: toStringValue(item.productTitle ?? item.title, "Untitled"),
             price: toCurrency(item.price),

package/dist/features/seller/components/SellerOrdersView.js

@@ -398,7 +398,7 @@ export function SellerOrdersView({ orderDetailApiBase = SELLER_ENDPOINTS.ORDERS,
         endpoint: SELLER_ENDPOINTS.ORDERS,
         sortOptions: SORT_OPTIONS,
         columns,
-        mapRows: (response) => toRecordArray(response.orders).map((item, index) => {
+        mapRows: (response) => toRecordArray(response.items).map((item, index) => {
             const itemsArr = Array.isArray(item.items) ? item.items : [];
             /*
              * Same legacy fallback as AdminOrdersView: `items[]` is canonical and

package/dist/features/seller/components/SellerPayoutSettingsView.js

@@ -258,7 +258,6 @@ export function SellerPayoutSettingsView({ apiBase = SELLER_ENDPOINTS.PAYOUT_SET
     const { shellCtx, setFieldError, clearErrors, validate } = useFormShellState(payoutSettingsDraftSchema, { sections: sectionMeta, onGoToSection: goToSection, fieldToSectionIndex });
     useEffect(() => {
         validate(draft);
-        // eslint-disable-next-line react-hooks/exhaustive-deps
     }, [draft, validate]);
     return (_jsx(StackedViewShell, { portal: "seller", title: "Payout Settings", sections: [
             _jsxs(Div, { children: [error && _jsx(Alert, { variant: "error", className: "mb-4", children: error }), success && _jsx(Alert, { variant: "success", className: "mb-4", children: "Payout details saved." }), _jsxs(FormShellContext.Provider, { value: shellCtx, children: [_jsx(FormErrorSummary, {}), _jsx(SectionForm, { sections: sections, values: draft, onChange: update, onSubmit: handleSave, schema: payoutSettingsDraftSchema, openIds: openIds, onOpenChange: setOpenIds, submitLabel: "Save Payout Details", isLoading: busy })] })] }, "payout"),

package/dist/features/seller/components/SellerPayoutsView.js

@@ -105,7 +105,7 @@ export function SellerPayoutsView({ children, ...props }) {
             { value: sortBy("createdAt", "DESC"), label: "Newest" },
             { value: sortBy("createdAt", "ASC"), label: "Oldest" },
         ],
-        mapRows: (response) => toRecordArray(response.payouts).map((item, index) => {
+        mapRows: (response) => toRecordArray(response.items).map((item, index) => {
             const id = toStringValue(item.id, `payout-${index}`);
             rawByIdRef.current[id] = item;
             return {

package/dist/features/seller/components/SellerProductShell.js

@@ -696,7 +696,6 @@ productId, onSave, onPublish, onDiscard, isLoading = false, storeSlug, renderCat
     // seller types (per the "even on-change errors must be shown" requirement).
     useEffect(() => {
         validate(draft);
-        // eslint-disable-next-line react-hooks/exhaustive-deps
     }, [draft, validate]);
     /*
      * `handleNext` and `stepValidationErrors` are gone with the wizard.

package/dist/features/seller/components/SellerProductsView.js

@@ -502,7 +502,7 @@ export function SellerProductsView({ onDeleteProduct, onCreateClick, }) {
         columns: PRODUCT_COLUMNS,
         primaryAction: onCreateClick ? { label: "New Listing", onClick: onCreateClick } : undefined,
         mapRows: (response) => {
-            const rows = toRecordArray(response.products).map((item, index) => {
+            const rows = toRecordArray(response.items).map((item, index) => {
                 const lt = normalizeListingType(item);
                 // The row's own type, verbatim. This used to be a 4-branch ternary
                 // that collapsed classified / digital-code / live / art / stickers all

package/dist/features/seller/components/SellerShippingView.js

@@ -132,7 +132,6 @@ export function SellerShippingView({ apiBase = SELLER_ENDPOINTS.SHIPPING }) {
     const { shellCtx, setFieldError, clearErrors, validate } = useFormShellState(shippingDraftSchema, { sections: sectionMeta, onGoToSection: goToSection, fieldToSectionIndex });
     useEffect(() => {
         validate(draft);
-        // eslint-disable-next-line react-hooks/exhaustive-deps
     }, [draft, validate]);
     return (_jsx(StackedViewShell, { portal: "seller", title: "Shipping Configuration", sections: [
             _jsxs(Div, { children: [error && _jsx(Alert, { variant: "error", className: "mb-4", children: error }), success && _jsx(Alert, { variant: "success", className: "mb-4", children: "Shipping configuration saved." }), _jsxs(FormShellContext.Provider, { value: shellCtx, children: [_jsx(FormErrorSummary, {}), _jsx(SectionForm, { sections: sections, values: draft, onChange: update, onSubmit: handleSave, schema: shippingDraftSchema, openIds: openIds, onOpenChange: setOpenIds, submitLabel: "Save Configuration", isLoading: busy })] })] }, "shipping"),

package/dist/features/seller/components/SellerStorefrontView.js

@@ -86,7 +86,6 @@ export function SellerStorefrontView({ initialValues, onSave, isLoading = false,
     const { shellCtx, setFieldError, clearErrors, validate } = useFormShellState(storefrontDraftSchema, { sections: sectionMeta, onGoToSection: goToSection, fieldToSectionIndex });
     useEffect(() => {
         validate(draft);
-        // eslint-disable-next-line react-hooks/exhaustive-deps
     }, [draft, validate]);
     return (_jsx(StackedViewShell, { portal: "seller", title: "Storefront Settings", sections: [
             _jsxs(Div, { children: [saved && (_jsx(Alert, { variant: "success", className: "mb-6", children: "Changes saved successfully." })), _jsxs(FormShellContext.Provider, { value: shellCtx, children: [_jsx(FormErrorSummary, {}), _jsx(SectionForm, { sections: sections, values: draft, onChange: update, onSubmit: handleSave, schema: storefrontDraftSchema, openIds: openIds, onOpenChange: setOpenIds, submitLabel: "Save Storefront", isLoading: busy })] })] }, "stepform"),

package/dist/features/seller/components/index.d.ts

@@ -35,8 +35,6 @@ export { SellerProductShell } from "./SellerProductShell";
 export type { SellerProductShellProps, SellerProductDraft, ProductListingMode } from "./SellerProductShell";
 export { SellerStoreSetupView } from "./SellerStoreSetupView";
 export type { SellerStoreSetupViewProps } from "./SellerStoreSetupView";
-export { SellerStoreView } from "./SellerStoreView";
-export type { SellerStoreViewProps } from "./SellerStoreView";
 export { SellerStorefrontView } from "./SellerStorefrontView";
 export type { SellerStorefrontViewProps, StorefrontDraft } from "./SellerStorefrontView";
 export { SellerShippingView } from "./SellerShippingView";
@@ -74,8 +72,6 @@ export { SellerCreateProductView as StoreCreateProductView } from "./SellerCreat
 export type { SellerCreateProductViewProps as StoreCreateProductViewProps } from "./SellerCreateProductView";
 export { SellerEditProductView as StoreEditProductView } from "./SellerEditProductView";
 export type { SellerEditProductViewProps as StoreEditProductViewProps } from "./SellerEditProductView";
-export { SellerStoreView as StoreStorefrontView } from "./SellerStoreView";
-export type { SellerStoreViewProps as StoreStorefrontViewProps } from "./SellerStoreView";
 export { SellerShippingView as StoreShippingView } from "./SellerShippingView";
 export type { SellerShippingViewProps as StoreShippingViewProps } from "./SellerShippingView";
 export { SellerAddressesView as StoreAddressesView } from "./SellerAddressesView";

package/dist/features/seller/components/index.js

@@ -17,7 +17,6 @@ export { SellerCreateProductView } from "./SellerCreateProductView.js";
 export { SellerEditProductView } from "./SellerEditProductView.js";
 export { SellerProductShell } from "./SellerProductShell.js";
 export { SellerStoreSetupView } from "./SellerStoreSetupView.js";
-export { SellerStoreView } from "./SellerStoreView.js";
 export { SellerStorefrontView } from "./SellerStorefrontView.js";
 export { SellerShippingView } from "./SellerShippingView.js";
 export { SellerAddressesView } from "./SellerAddressesView.js";
@@ -40,7 +39,6 @@ export { SellerPayoutSettingsView as StorePayoutSettingsView } from "./SellerPay
 export { SellerAnalyticsView as StoreAnalyticsView } from "./SellerAnalyticsView.js";
 export { SellerCreateProductView as StoreCreateProductView } from "./SellerCreateProductView.js";
 export { SellerEditProductView as StoreEditProductView } from "./SellerEditProductView.js";
-export { SellerStoreView as StoreStorefrontView } from "./SellerStoreView.js";
 export { SellerShippingView as StoreShippingView } from "./SellerShippingView.js";
 export { SellerAddressesView as StoreAddressesView } from "./SellerAddressesView.js";
 export { SellerBidsView as StoreBidsView } from "./SellerBidsView.js";

package/dist/features/seller/repository/offer.repository.d.ts

@@ -7,7 +7,7 @@
 import type { JsonValue } from "../../../schemas/types";
 import { BaseRepository, parseSieveDateValue } from "../../../providers/db-firebase";
 import type { SieveModel, FirebaseSieveResult } from "../../../providers/db-firebase";
-import type { OfferDocument, OfferCreateInput, OfferUpdateInput } from "../schemas";
+import type { OfferDocument, OfferPlain, OfferCreateInput, OfferUpdateInput } from "../schemas";
 import { type HistoryActor } from "../../../_internal/shared/history/index";
 /**
  * Who/why for a write that lands in an offer's `statusHistory`.
@@ -22,7 +22,19 @@ export interface OfferWriteContext {
 declare class OfferRepository extends BaseRepository<OfferDocument> {
     constructor();
     /** Override mapDoc to auto-decrypt PII on every offer read */
-    protected mapDoc<D = OfferDocument>(snap: import("../../../providers/db-firebase").DocumentSnapshot): D;
+    /** Plaintext PII. **Opt-in and named** — shows up in review and in a grep. */
+    revealOffer(doc: OfferDocument): OfferPlain;
+    /** As `revealOffer`, for a list read. */
+    revealOffers(docs: readonly OfferDocument[]): OfferPlain[];
+    /**
+     * Masked PII — **the default for any surface that only needs to identify a
+     * row to a human.** Decrypts first, then masks: the mask helpers refuse
+     * ciphertext by design, so passing a stored field straight in would return
+     * "Anonymous" for every row.
+     */
+    maskedOffer(doc: OfferDocument): OfferPlain;
+    /** As `maskedOffer`, for a list read. */
+    maskedOffers(docs: readonly OfferDocument[]): OfferPlain[];
     /**
      * Every Timestamp field here carries `parseValue: parseSieveDateValue`.
      *
@@ -110,7 +122,7 @@ declare class OfferRepository extends BaseRepository<OfferDocument> {
     list(model: SieveModel, opts?: {
         search?: string;
     }): Promise<FirebaseSieveResult<OfferDocument>>;
-    create(input: OfferCreateInput): Promise<OfferDocument>;
+    createOffer(input: OfferCreateInput): Promise<OfferPlain>;
     findByBuyer(buyerUid: string, model?: SieveModel): Promise<FirebaseSieveResult<OfferDocument>>;
     findByStore(storeId: string, model?: SieveModel, opts?: {
         search?: string;

package/dist/features/seller/repository/offer.repository.js

@@ -9,7 +9,7 @@ import { buildOfferSearchTxt } from "../../../utils/search-txt-builders.js";
 import { BaseRepository, prepareForFirestore, parseSieveDateValue, } from "../../../providers/db-firebase/index.js";
 import { OFFER_COLLECTION, OFFER_FIELDS, OFFER_TRACKED_FIELDS, createOfferId } from "../schemas/index.js";
 import { withHistory } from "../../../_internal/shared/history/index.js";
-import { encryptPiiFields, decryptPiiFields, OFFER_PII_FIELDS, } from "../../../security/index.js";
+import { encryptPiiFields, maskPii, revealPii, OFFER_PII_FIELDS, } from "../../../security/index.js";
 /** Max rounds in one negotiation chain — matches the per-buyer offer limit. */
 const OFFER_CHAIN_MAX = 3;
 class OfferRepository extends BaseRepository {
@@ -17,11 +17,38 @@ class OfferRepository extends BaseRepository {
         super(OFFER_COLLECTION);
     }
     /** Override mapDoc to auto-decrypt PII on every offer read */
-    mapDoc(snap) {
-        const raw = super.mapDoc(snap);
-        return decryptPiiFields(raw, [
-            ...OFFER_PII_FIELDS,
-        ]);
+    /*
+     * 🛑 `mapDoc` is NOT overridden, and that absence IS the change.
+     *
+     * It used to decrypt on every read, so ciphertext never left the database
+     * and every caller handled plaintext without ever saying so. Following
+     * `SiteSettingsRepository`: reads return what Firestore holds, and plaintext
+     * requires one of the two named methods below.
+     *
+     * A convention would not hold this. `OfferDocument`'s PII fields are
+     * `Encrypted<string>`, assignable to nothing that wants a plain `string`, so
+     * a reader that skips both accessors is a compile error naming file and line.
+     */
+    /** Plaintext PII. **Opt-in and named** — shows up in review and in a grep. */
+    revealOffer(doc) {
+        return revealPii(doc, OFFER_PII_FIELDS);
+    }
+    /** As `revealOffer`, for a list read. */
+    revealOffers(docs) {
+        return docs.map((d) => this.revealOffer(d));
+    }
+    /**
+     * Masked PII — **the default for any surface that only needs to identify a
+     * row to a human.** Decrypts first, then masks: the mask helpers refuse
+     * ciphertext by design, so passing a stored field straight in would return
+     * "Anonymous" for every row.
+     */
+    maskedOffer(doc) {
+        return maskPii(doc, OFFER_PII_FIELDS);
+    }
+    /** As `maskedOffer`, for a list read. */
+    maskedOffers(docs) {
+        return docs.map((d) => this.maskedOffer(d));
     }
     /**
      * Paginated, Firestore-native offer list (admin use).
@@ -58,7 +85,14 @@ class OfferRepository extends BaseRepository {
         return win.finish(result);
     }
     // --- Create --------------------------------------------------------------
-    async create(input) {
+    /*
+     * 🛑 NOT an `override` of `create`. `BaseRepository.create` promises to
+     * accept the CIPHERTEXT shape; this accepts PLAINTEXT and encrypts, and
+     * `string` vs `Encrypted<string>` is incompatible in both directions, so an
+     * override is a TS2416 either way — correctly, because the two signatures
+     * genuinely disagree about what the caller holds.
+     */
+    async createOffer(input) {
         const now = new Date();
         const expiresAt = new Date(now.getTime() + 48 * 60 * 60 * 1000); // 48 h
         const id = createOfferId({
@@ -66,6 +100,8 @@ class OfferRepository extends BaseRepository {
             buyerUid: input.buyerUid,
             date: now,
         });
+        // Plain in, ciphertext out — `encryptPiiFields` below is what makes the
+        // document type true.
         const data = {
             ...input,
             status: "pending",

package/dist/features/seller/schemas/firestore.d.ts

@@ -4,6 +4,7 @@
 import { type GenerateOfferIdInput } from "../../../utils/id-generators";
 import type { BaseDocument } from "../../../_internal/shared/types/base-document";
 import type { StatusChangeEntry } from "../../../_internal/shared/history/index";
+import type { Encrypted, Plaintext } from "../../../security/encrypted";
 export type OfferStatus = "pending" | "accepted" | "declined" | "countered" | "expired" | "withdrawn" | "paid";
 /** Runtime-accessible offer status values — use instead of bare string literals. */
 export declare const OfferStatusValues: {
@@ -15,6 +16,16 @@ export declare const OfferStatusValues: {
     readonly WITHDRAWN: "withdrawn";
     readonly PAID: "paid";
 };
+/**
+ * `OfferDocument` with its PII as plain `string` — what the named repository
+ * accessors return, and what a WRITE path accepts (the repository encrypts).
+ *
+ * `Plaintext<T>` is the one definition of this shape; see `security/encrypted.ts`.
+ * It is deliberately NOT distinguishable from a MASKED value — `maskPii`
+ * returns plain strings too, and no type can express "these characters are
+ * asterisks". The distinction is which named method you called.
+ */
+export type OfferPlain = Plaintext<OfferDocument>;
 export interface OfferDocument extends BaseDocument {
     /** Word-prefix search tokens. Derived on write; never fed by a PII field. */
     searchTxt?: string[];
@@ -23,8 +34,8 @@ export interface OfferDocument extends BaseDocument {
     productSlug?: string;
     productImageUrl?: string;
     buyerUid: string;
-    buyerName: string;
-    buyerEmail: string;
+    buyerName: Encrypted<string>;
+    buyerEmail: Encrypted<string>;
     storeId: string;
     storeName: string;
     offerAmount: number;
@@ -126,7 +137,7 @@ export declare const OFFER_FIELDS: {
     /** Word-prefix n-grams for `array-contains` search. Derived by `buildOfferSearchTxt`. */
     readonly SEARCH_TXT: "searchTxt";
 };
-export type OfferCreateInput = Pick<OfferDocument, "productId" | "productTitle" | "productSlug" | "productImageUrl" | "buyerUid" | "buyerName" | "buyerEmail" | "storeId" | "storeName" | "offerAmount" | "listedPrice" | "currency" | "buyerNote" | "previousOfferId" | "chainRootOfferId" | "counterRound">;
+export type OfferCreateInput = Pick<OfferPlain, "productId" | "productTitle" | "productSlug" | "productImageUrl" | "buyerUid" | "buyerName" | "buyerEmail" | "storeId" | "storeName" | "offerAmount" | "listedPrice" | "currency" | "buyerNote" | "previousOfferId" | "chainRootOfferId" | "counterRound">;
 export type OfferUpdateInput = Partial<Pick<OfferDocument, "status" | "counterAmount" | "lockedPrice" | "sellerNote" | "acceptedAt" | "checkoutDeadline" | "respondedAt" | "paidOrderId" | "paidAt" | "updatedAt" | "statusHistory" | "statusHistoryTruncated" | "supersededByOfferId" | "cancelledByAdminUid" | "cancelReason">>;
 export declare const offerQueryHelpers: {
     readonly byBuyer: (buyerUid: string) => readonly ["buyerUid", "==", string];

package/dist/features/seller/schemas/index.d.ts

@@ -213,15 +213,15 @@ export declare const sellerListParamsSchema: z.ZodObject<{
     status?: "pending" | "active" | "rejected" | "suspended" | undefined;
     page?: number | undefined;
     q?: string | undefined;
-    perPage?: number | undefined;
     category?: string | undefined;
+    perPage?: number | undefined;
 }, {
     sort?: string | undefined;
     status?: "pending" | "active" | "rejected" | "suspended" | undefined;
     page?: number | undefined;
     q?: string | undefined;
-    perPage?: number | undefined;
     category?: string | undefined;
+    perPage?: number | undefined;
 }>;
 export declare const payoutListParamsSchema: z.ZodObject<{
     sellerId: z.ZodOptional<z.ZodString>;
@@ -233,12 +233,12 @@ export declare const payoutListParamsSchema: z.ZodObject<{
     sort?: string | undefined;
     status?: "paid" | "failed" | "pending" | "processing" | undefined;
     page?: number | undefined;
-    perPage?: number | undefined;
     sellerId?: string | undefined;
+    perPage?: number | undefined;
 }, {
     sort?: string | undefined;
     status?: "paid" | "failed" | "pending" | "processing" | undefined;
     page?: number | undefined;
-    perPage?: number | undefined;
     sellerId?: string | undefined;
+    perPage?: number | undefined;
 }>;

package/dist/features/seller/schemas/order-forms.d.ts

@@ -31,3 +31,42 @@ export declare const sellerOrderUpdateSchema: z.ZodEffects<z.ZodObject<{
     carrier?: string | undefined;
 }>;
 export type SellerOrderUpdateValues = z.infer<typeof sellerOrderUpdateSchema>;
+/**
+ * Manual shipment entry. `method` is a literal rather than an enum because
+ * `ManualShippingProvider` is the only provider — see § "Provider Resolution".
+ */
+export declare const shipOrderSchema: z.ZodObject<{
+    method: z.ZodLiteral<"custom">;
+    shippingCarrier: z.ZodString;
+    trackingNumber: z.ZodString;
+    trackingUrl: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    trackingNumber: string;
+    shippingCarrier: string;
+    trackingUrl: string;
+    method: "custom";
+}, {
+    trackingNumber: string;
+    shippingCarrier: string;
+    trackingUrl: string;
+    method: "custom";
+}>;
+export type ShipOrderValues = z.infer<typeof shipOrderSchema>;
+/**
+ * Marking one EMI installment paid. `installmentIndex` is 1-based, matching
+ * how the schedule is presented to the buyer.
+ */
+export declare const markEmiInstallmentPaidSchema: z.ZodObject<{
+    installmentIndex: z.ZodNumber;
+    transactionId: z.ZodOptional<z.ZodString>;
+    proofUrl: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    installmentIndex: number;
+    transactionId?: string | undefined;
+    proofUrl?: string | undefined;
+}, {
+    installmentIndex: number;
+    transactionId?: string | undefined;
+    proofUrl?: string | undefined;
+}>;
+export type MarkEmiInstallmentPaidValues = z.infer<typeof markEmiInstallmentPaidSchema>;

package/dist/features/seller/schemas/order-forms.js

@@ -73,3 +73,40 @@ export const sellerOrderUpdateSchema = z
         }
     }
 });
+/*
+ * ── Two schemas lifted out of a `"use server"` module, 2026-10-17 ──
+ *
+ * `shipOrderSchema` and `markEmiInstallmentPaidSchema` were declared privately
+ * inside `src/actions/seller.actions.ts`. The actions safe-parse with them, so
+ * the rule WAS enforced — but their routes could not reach it: a `"use server"`
+ * module may only export async functions, so a schema declared there is
+ * unexportable by construction.
+ *
+ * The consequence was that `POST /api/store/orders/[id]/ship` and
+ * `PATCH .../emi-installment` both did `parseJsonBody(…).catch(() => ({}))`
+ * and handed the result on `as never` — a route reading a body it could not
+ * validate, with the real check an import away and unreachable.
+ *
+ * Declared here so the route and the action share ONE definition rather than
+ * two copies that drift (Root Cause #75). The action keeps its own `safeParse`:
+ * it is also called directly from a server action, where no route ran first.
+ */
+/**
+ * Manual shipment entry. `method` is a literal rather than an enum because
+ * `ManualShippingProvider` is the only provider — see § "Provider Resolution".
+ */
+export const shipOrderSchema = z.object({
+    method: z.literal("custom"),
+    shippingCarrier: z.string().min(1),
+    trackingNumber: z.string().min(1),
+    trackingUrl: z.string().url(),
+});
+/**
+ * Marking one EMI installment paid. `installmentIndex` is 1-based, matching
+ * how the schedule is presented to the buyer.
+ */
+export const markEmiInstallmentPaidSchema = z.object({
+    installmentIndex: z.number().int().min(1),
+    transactionId: z.string().min(1).optional(),
+    proofUrl: z.string().min(1).optional(),
+});

package/dist/features/shell/FormShell.js

@@ -6,7 +6,7 @@ import { Button } from "../../ui/components/Button.js";
 import { IconButton } from "../../ui/components/IconButton.js";
 import { classNames } from "../../ui/style.helper.js";
 import { FORM_ACTION_META, FORM_ACTION_ID } from "../products/constants/action-defs.js";
-import { ActionRow, Div, Row, Span, Stack, Text } from "../../ui/index.js";
+import { ActionRow, Div, OverflowRow, Row, Span, Stack, Text } from "../../ui/index.js";
 /**
  * Carries the `schema` prop passed to `<FormShell>` down to any nested
  * `<SectionForm>` that doesn't declare its own `schema`/`SectionDef.schema` —
@@ -122,7 +122,11 @@ export function FormShell({ isOpen, onClose, title, breadcrumb, schema, isDirty
     };
     if (!isOpen)
         return null;
-    return (_jsxs(FormSchemaContext.Provider, { value: schema, children: [_jsx(Div, { surface: "overlay-sm", className: "fixed inset-0 backdrop-blur-[2px]", style: { zIndex: "calc(var(--appkit-z-modal) - 1)" }, "aria-hidden": "true", onClick: attemptClose }), _jsxs(Div, { layout: "flex", ref: panelRef, role: "dialog", "aria-modal": "true", "aria-label": title, className: "fixed top-0 bottom-0 left-0 right-0 lg:left-[10%] lg:right-[10%] [flex-direction:column] bg-[var(--appkit-color-surface)]", shadow: "2xl", style: { zIndex: "var(--appkit-z-modal)" }, children: [_jsxs(Row, { gap: "sm", paddingX: "x-5", className: "flex-shrink-0 sticky top-0 z-10 border-b border-[var(--appkit-color-border)] bg-[var(--appkit-color-surface)]", padding: "y-sm", children: [previewMode ? (_jsxs(Button, { variant: "ghost", type: "button", onClick: () => setPreviewMode(false), "aria-label": "Back to edit", gap: "xs", rounded: "lg", textSize: "sm", textColor: "muted", className: "flex-shrink-0", children: [_jsx(ArrowLeft, { className: "w-4 h-4" }), _jsx(Span, { className: "hidden sm:inline", children: "Back to Edit" })] })) : (_jsx(IconButton, { type: "button", onClick: attemptClose, "aria-label": "Close", variant: "ghost", rounded: "lg", className: "text-[var(--appkit-color-text-muted)] flex-shrink-0", children: _jsx(X, { className: "w-5 h-5" }) })), _jsxs(Div, { className: "flex-1 min-w-0", children: [breadcrumb && (_jsx(Text, { className: "text-[var(--appkit-color-text-muted)] truncate mb-0.5", size: "xs", children: breadcrumb })), _jsx(Text, { className: "text-[var(--appkit-color-text)] truncate", size: "sm", weight: "semibold", children: previewMode ? `Preview — ${title}` : title })] }), _jsx(Row, { gap: "xs", className: "flex-shrink-0", children: previewMode ? null : (_jsxs(_Fragment, { children: [previewSlot && (_jsxs(Button, { variant: "outline", type: "button", onClick: () => setPreviewMode(true), gap: "xs", rounded: "lg", paddingX: "sm", textSize: "sm", textColor: "muted", children: [_jsx(Eye, { className: "w-4 h-4" }), _jsx(Span, { className: "hidden sm:inline", children: "Preview" })] })), onSaveDraft && (_jsx(Button, { variant: "outline", size: "sm", onClick: handleSaveDraft, disabled: isLoading || savingDraft || publishing, isLoading: savingDraft, children: saveLabel })), onPublish && (_jsx(Button, { variant: "primary", size: "sm", onClick: handlePublish, disabled: isLoading || savingDraft || publishing, isLoading: publishing, children: publishLabel }))] })) })] }), _jsxs(Div, { layout: "flex", className: `flex-1 ${__O.hidden}`, children: [sections && sections.length > 0 && !previewMode && (_jsx("nav", { "aria-label": "Form sections", className: "hidden lg:flex flex-col flex-shrink-0 w-48 border-r border-[var(--appkit-color-border)] py-[var(--appkit-space-4)] px-[var(--appkit-space-3)] gap-[var(--appkit-space-1)] overflow-y-auto", children: sections.map((sec) => (_jsx(Button, { variant: "ghost", type: "button", onClick: () => scrollToSection(sec.id), rounded: "lg", paddingX: "sm", paddingY: "xs", textSize: "sm", textColor: "muted", justify: "start", className: "text-left", children: sec.label }, sec.id))) })), sections && sections.length > 0 && !previewMode && (_jsx(Row, { gap: "px", className: `lg:hidden fixed top-[var(--form-shell-topbar-h,57px)] left-0 right-0 z-10 ${__O.xAuto} px-[1.25rem] bg-[var(--appkit-color-surface)] border-b border-[var(--appkit-color-border)]`, padding: "y-xs", children: sections.map((sec) => (_jsx(Button, { variant: "outline", type: "button", onClick: () => scrollToSection(sec.id), rounded: "full", paddingX: "sm", paddingY: "xs", textSize: "xs", textColor: "muted", className: "flex-shrink-0 hover:border-primary hover:text-primary whitespace-nowrap", children: sec.label }, sec.id))) })), _jsx(Div, { ref: bodyRef, className: classNames("flex-1 overflow-y-auto", sections && sections.length > 0 && !previewMode ? "pt-[var(--appkit-space-0)] lg:pt-[var(--appkit-space-0)]" : ""), children: previewMode && previewSlot ? (_jsxs(_Fragment, { children: [_jsxs(Row, { textSize: "sm", gap: "xs", className: "sticky top-0 z-10 bg-[var(--appkit-color-warning-surface)] border-b border-[var(--appkit-color-warning)] text-[var(--appkit-color-warning-text,var(--appkit-color-warning))]", paddingY: "y-xs", paddingX: "x-md", children: [_jsx(Eye, { className: "w-4 h-4 flex-shrink-0" }), _jsx(Span, { children: "Preview \u2014 not visible to buyers until published" })] }), _jsx(Div, { padding: "y-md", children: previewSlot() })] })) : splitPreview && previewSlot ? (
+    return (_jsxs(FormSchemaContext.Provider, { value: schema, children: [_jsx(Div, { surface: "overlay-sm", className: "fixed inset-0 backdrop-blur-[2px]", style: { zIndex: "calc(var(--appkit-z-modal) - 1)" }, "aria-hidden": "true", onClick: attemptClose }), _jsxs(Div, { layout: "flex", ref: panelRef, role: "dialog", "aria-modal": "true", "aria-label": title, className: "fixed top-0 bottom-0 left-0 right-0 lg:left-[10%] lg:right-[10%] [flex-direction:column] bg-[var(--appkit-color-surface)]", shadow: "2xl", style: { zIndex: "var(--appkit-z-modal)" }, children: [_jsxs(Row, { gap: "sm", paddingX: "x-5", className: "flex-shrink-0 sticky top-0 z-10 border-b border-[var(--appkit-color-border)] bg-[var(--appkit-color-surface)]", padding: "y-sm", children: [previewMode ? (_jsxs(Button, { variant: "ghost", type: "button", onClick: () => setPreviewMode(false), "aria-label": "Back to edit", gap: "xs", rounded: "lg", textSize: "sm", textColor: "muted", className: "flex-shrink-0", children: [_jsx(ArrowLeft, { className: "w-4 h-4" }), _jsx(Span, { className: "hidden sm:inline", children: "Back to Edit" })] })) : (_jsx(IconButton, { type: "button", onClick: attemptClose, "aria-label": "Close", variant: "ghost", rounded: "lg", className: "text-[var(--appkit-color-text-muted)] flex-shrink-0", children: _jsx(X, { className: "w-5 h-5" }) })), _jsxs(Div, { className: "flex-1 min-w-0", children: [breadcrumb && (_jsx(Text, { className: "text-[var(--appkit-color-text-muted)] truncate mb-0.5", size: "xs", children: breadcrumb })), _jsx(Text, { className: "text-[var(--appkit-color-text)] truncate", size: "sm", weight: "semibold", children: previewMode ? `Preview — ${title}` : title })] }), _jsx(Row, { gap: "xs", className: "flex-shrink-0", children: previewMode ? null : (_jsxs(_Fragment, { children: [previewSlot && (_jsxs(Button, { variant: "outline", type: "button", onClick: () => setPreviewMode(true), gap: "xs", rounded: "lg", paddingX: "sm", textSize: "sm", textColor: "muted", children: [_jsx(Eye, { className: "w-4 h-4" }), _jsx(Span, { className: "hidden sm:inline", children: "Preview" })] })), onSaveDraft && (_jsx(Button, { variant: "outline", size: "sm", onClick: handleSaveDraft, disabled: isLoading || savingDraft || publishing, isLoading: savingDraft, children: saveLabel })), onPublish && (_jsx(Button, { variant: "primary", size: "sm", onClick: handlePublish, disabled: isLoading || savingDraft || publishing, isLoading: publishing, children: publishLabel }))] })) })] }), _jsxs(Div, { layout: "flex", className: `flex-1 ${__O.hidden}`, children: [sections && sections.length > 0 && !previewMode && (_jsx("nav", { "aria-label": "Form sections", className: "hidden lg:flex flex-col flex-shrink-0 w-48 border-r border-[var(--appkit-color-border)] py-[var(--appkit-space-4)] px-[var(--appkit-space-3)] gap-[var(--appkit-space-1)] overflow-y-auto", children: sections.map((sec) => (_jsx(Button, { variant: "ghost", type: "button", onClick: () => scrollToSection(sec.id), rounded: "lg", paddingX: "sm", paddingY: "xs", textSize: "sm", textColor: "muted", justify: "start", className: "text-left", children: sec.label }, sec.id))) })), sections && sections.length > 0 && !previewMode && (_jsx(Row, { gap: "px", className: "lg:hidden fixed top-[var(--form-shell-topbar-h,57px)] left-0 right-0 z-10 px-[1.25rem] bg-[var(--appkit-color-surface)] border-b border-[var(--appkit-color-border)]", padding: "y-xs", children: _jsx(OverflowRow, { items: sections.map((sec) => ({
+                                        id: sec.id,
+                                        label: sec.label,
+                                        onSelect: () => scrollToSection(sec.id),
+                                    })), ariaLabel: "Form sections", variant: "nav", placeholder: "Jump to section", searchPlaceholder: "Search sections\u2026" }) })), _jsx(Div, { ref: bodyRef, className: classNames("flex-1 overflow-y-auto", sections && sections.length > 0 && !previewMode ? "pt-[var(--appkit-space-0)] lg:pt-[var(--appkit-space-0)]" : ""), children: previewMode && previewSlot ? (_jsxs(_Fragment, { children: [_jsxs(Row, { textSize: "sm", gap: "xs", className: "sticky top-0 z-10 bg-[var(--appkit-color-warning-surface)] border-b border-[var(--appkit-color-warning)] text-[var(--appkit-color-warning-text,var(--appkit-color-warning))]", paddingY: "y-xs", paddingX: "x-md", children: [_jsx(Eye, { className: "w-4 h-4 flex-shrink-0" }), _jsx(Span, { children: "Preview \u2014 not visible to buyers until published" })] }), _jsx(Div, { padding: "y-md", children: previewSlot() })] })) : splitPreview && previewSlot ? (
                                 // S-STORE-3-D — desktop 60/40 split: form left, preview right.
                                 // Below `lg`, falls back to single-column form (preview-as-modal via existing toggle).
                                 _jsxs(Div, { className: "lg:grid lg:grid-cols-[3fr_2fr] lg:gap-[1.5rem] lg:px-[1.5rem] lg:py-[1.5rem] lg:max-w-[1400px] lg:mx-auto", children: [_jsx(Div, { className: "max-w-3xl mx-auto px-[1.25rem] sm:px-[1.5rem] lg:max-w-none lg:px-[0] lg:py-[0]", padding: "y-lg", children: children }), _jsxs(Div, { className: `hidden lg:block sticky lg:top-4 lg:self-start lg:max-h-[calc(100vh-6rem)] ${__O.yAuto} border border-[var(--appkit-color-border)] bg-[var(--appkit-color-surface-raised)] ${__P.p4}`, rounded: "lg", children: [_jsxs(Row, { textWeight: "semibold", textSize: "xs", gap: "xs", className: "mb-3 uppercase tracking-wide text-[var(--appkit-color-text-muted)]", children: [_jsx(Eye, { className: "w-3.5 h-3.5" }), _jsx(Span, { children: "Live preview" })] }), previewSlot()] })] })) : (_jsx(Div, { className: "max-w-3xl mx-auto px-[1.25rem] sm:px-[1.5rem]", padding: "y-lg", children: children })) })] }), !previewMode && renderBottomBar ? (renderBottomBar()) : !previewMode && (onSaveDraft || onPublish) ? (_jsxs(Stack, { gap: "none", className: "flex-shrink-0 sticky bottom-0 z-10 border-t border-[var(--appkit-color-border)] bg-[var(--appkit-color-surface)]", children: [footerTopSlot && (_jsx(Div, { paddingX: "x-5", padding: "t-sm", children: footerTopSlot })), _jsxs(ActionRow, { align: "end", paddingX: "x-5", padding: "y-sm", style: { paddingBottom: "calc(var(--appkit-space-3) + var(--keyboard-inset-height, 0px))" }, anchor: _jsx(Button, { variant: "ghost", size: "sm", onClick: attemptClose, disabled: isLoading, children: FORM_ACTION_META[FORM_ACTION_ID.DISCARD].label }), children: [onSaveDraft && (_jsx(Button, { variant: "outline", size: "sm", onClick: handleSaveDraft, disabled: isLoading || savingDraft || publishing, isLoading: savingDraft, children: saveLabel })), onPublish && (_jsxs(Button, { variant: "primary", size: "sm", onClick: handlePublish, disabled: isLoading || savingDraft || publishing, isLoading: publishing, children: [publishLabel, " \u2192"] }))] })] })) : null] }), showUnsaved && (_jsxs(_Fragment, { children: [_jsx(Div, { surface: "overlay-lg", className: "fixed inset-0", style: { zIndex: "var(--appkit-z-confirm)" }, onClick: () => setShowUnsaved(false) }), _jsxs(Div, { className: "fixed top-1/2 left-1/2 -translate-x-1/2 -translate-y-1/2 w-[90vw] max-w-sm bg-[var(--appkit-color-surface)]", shadow: "2xl", rounded: "xl", padding: "lg", style: { zIndex: "var(--appkit-z-confirm)" }, children: [_jsxs(Row, { gap: "sm", align: "start", className: "mb-4", children: [_jsx(Span, { layout: "flex-center", className: "flex-shrink-0 w-10 h-10 bg-[var(--appkit-color-warning-surface)]", rounded: "full", children: _jsx(AlertTriangle, { className: "w-5 h-5 text-[var(--appkit-color-warning)]" }) }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { className: "text-[var(--appkit-color-text)]", weight: "semibold", children: "Unsaved changes" }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: "You have unsaved changes. Leave without saving?" })] })] }), _jsxs(Row, { gap: "xs", justify: "end", children: [_jsx(Button, { variant: "outline", size: "sm", onClick: () => setShowUnsaved(false), children: "Stay" }), _jsx(Button, { variant: "danger", size: "sm", onClick: () => { setShowUnsaved(false); onClose(); }, children: "Leave" })] })] })] }))] }));

package/dist/features/shell/QuickFormDrawer.js

@@ -6,7 +6,21 @@ import { Button } from "../../ui/components/Button.js";
 import { IconButton } from "../../ui/components/IconButton.js";
 import { FormField } from "../../ui/components/FormField.js";
 import { Toggle } from "../../ui/components/Toggle.js";
-import { ActionRow, Div, Form, Row, Stack, Text } from "../../ui/index.js";
+/*
+ * Defining modules, not the `ui` barrel — Root Cause #18.
+ *
+ * `ui/index.ts` re-exports `FormField`, `PaginatedSelect` and
+ * `RecordDetailModal`, and those three import back INTO `features/media` and
+ * `features/shell`. So reaching a primitive through the barrel closed a
+ * ten-module cycle (`audit-import-cycles` component 1) — while the deep paths
+ * below have one direction only. `ui → features/media` is the real dependency
+ * and it stays; the barrel hop is what did not need to exist.
+ */
+import { ActionRow } from "../../ui/components/ActionRow.js";
+import { Div } from "../../ui/components/Div.js";
+import { Form } from "../../ui/components/Form.js";
+import { Row, Stack } from "../../ui/components/Layout.js";
+import { Text } from "../../ui/components/Typography.js";
 import { FormShellContext, FormErrorSummary } from "../../ui/forms/index.js";
 import { useHandMode } from "../../_internal/client/hand-mode/index.js";
 function initValues(fields, defaults = {}) {

package/dist/features/shipments/components/AdminShipmentEditorView.js

@@ -62,7 +62,6 @@ export function AdminShipmentEditorView({ shipmentId, onSaved }) {
             laborRatePerHour: doc.laborRatePerHour ?? 0,
             notes: doc.notes ?? "",
         });
-        // eslint-disable-next-line react-hooks/exhaustive-deps
     }, [shipment]);
     const saveMutation = useApiMutation({
         successMessage: isCreate ? "Shipment created" : "Shipment updated",

package/dist/features/shipments/components/AdminShipmentsView.js

@@ -40,7 +40,7 @@ export function AdminShipmentsView({ children, ...props }) {
             { value: sortBy("projectedProfit", "DESC"), label: "Highest projected profit" },
             { value: "shipmentNumber", label: "Shipment # A–Z" },
         ],
-        mapRows: (response) => toRecordArray(response.shipments).map((item, index) => {
+        mapRows: (response) => toRecordArray(response.items).map((item, index) => {
             const totals = item.totals ?? {};
             const totalsComputedAt = item.totalsComputedAt;
             const updatedAt = item.updatedAt;

package/dist/features/sticker-trace/components/StickerCommitPanel.d.ts

@@ -0,0 +1,30 @@
+import type { PrecisionTier } from "../../../_internal/shared/features/sticker-trace/types";
+export interface StickerCommitResult {
+    sheetId: string;
+    runId: string;
+    /** Carries the single per-run claim for the live progress channel. */
+    customToken: string;
+}
+export interface StickerCommitPanelProps {
+    /** The file the studio is currently showing. Null disables the whole panel. */
+    file: File | null;
+    /** The raster's real size, from the studio's own decode. */
+    dimensions: {
+        widthPx: number;
+        heightPx: number;
+    } | null;
+    /**
+     * Does the whole three-hop commit. Injected rather than imported so this
+     * component stays in appkit and the consumer owns the transport — the same
+     * seam the codec uses.
+     */
+    onCommit: (input: {
+        file: File;
+        title: string;
+        tier: PrecisionTier;
+        widthPx: number;
+        heightPx: number;
+    }) => Promise<StickerCommitResult>;
+    onCommitted?: (result: StickerCommitResult) => void;
+}
+export declare function StickerCommitPanel({ file, dimensions, onCommit, onCommitted, }: StickerCommitPanelProps): import("react").JSX.Element;