@mohasinac/appkit 4.52.5 → 4.53.1

package/dist/features/admin/actions/notification-actions.js

@@ -6,7 +6,6 @@ import { createResendProvider } from "../../../providers/email-resend/provider.j
 import { isChannelHealthy, withChannelRetry } from "../../../_internal/server/notifications/channel-health.js";
 import { enqueueJob } from "../../jobs/actions/enqueue-job.js";
 import { serverLogger } from "../../../monitoring/index.js";
-import { decryptPii } from "../../../security/index.js";
 import { resolveNotificationActionUrl, TYPE_AUDIENCE, } from "../../../_internal/shared/features/notifications/action-url.js";
 import { isEmailEligible } from "../../../_internal/shared/features/notifications/email-eligibility.js";
 import { renderNotificationEmail } from "../../email/notification-templates.js";
@@ -187,11 +186,21 @@ export async function sendNotification(input) {
         void normalizeError(err);
         serverLogger.warn("notification-actions: user prefs lookup failed — defaulting to all channels enabled", { userId: input.userId, error: err instanceof Error ? err.message : String(err) });
     }
-    // If caller didn't supply userEmail, try to decrypt it from the already-fetched user doc.
-    const resolvedEmail = userEmail ??
-        (fetchedUserDoc?.email ? decryptPii(fetchedUserDoc.email) : undefined);
-    const resolvedPhone = userPhone ??
-        (fetchedUserDoc?.phoneNumber ? decryptPii(fetchedUserDoc.phoneNumber) : undefined);
+    /*
+     * The NAMED accessor, not two bare `decryptPii` casts.
+     *
+     * These already decrypted and already worked, but the casts defeated the
+     * brand — so a grep for `reveal*` could not tell this reader from an
+     * unconverted one. `revealUser` is the same decision, stated.
+     *
+     * Revealed rather than masked because this notification is DELIVERED: a
+     * masked address cannot receive mail.
+     */
+    const fetchedUserPlain = fetchedUserDoc
+        ? userRepository.revealUser(fetchedUserDoc)
+        : null;
+    const resolvedEmail = userEmail ?? fetchedUserPlain?.email ?? undefined;
+    const resolvedPhone = userPhone ?? fetchedUserPlain?.phoneNumber ?? undefined;
     // Map NotificationType to a NotificationTypePrefs key.
     /*
      * 🛑 COMPLETE and compile-checked: `Record<NotificationType, …>`, not

package/dist/features/admin/api/bids/route.js

@@ -35,7 +35,7 @@ export const GET = createRouteHandler({
             filters,
             sort,
             page,
-            perPage: pageSize,
+            pageSize: pageSize,
         });
         const totalPages = Math.max(1, Math.ceil(result.total / pageSize));
         return NextResponse.json({

package/dist/features/admin/api/coupons/route.js

@@ -35,7 +35,7 @@ export const GET = createRouteHandler({
             filters,
             sort,
             page,
-            perPage: pageSize,
+            pageSize: pageSize,
         });
         const totalPages = Math.max(1, Math.ceil(result.total / pageSize));
         return NextResponse.json({

package/dist/features/admin/api/products/route.js

@@ -36,7 +36,7 @@ export const GET = createRouteHandler({
             filters,
             sort,
             page,
-            perPage: pageSize,
+            pageSize: pageSize,
         });
         const totalPages = Math.max(1, Math.ceil(result.total / pageSize));
         return NextResponse.json({

package/dist/features/admin/api/reviews/route.js

@@ -35,7 +35,7 @@ export const GET = createRouteHandler({
             filters,
             sort,
             page,
-            perPage: pageSize,
+            pageSize: pageSize,
         });
         const totalPages = Math.max(1, Math.ceil(result.total / pageSize));
         return NextResponse.json({

package/dist/features/admin/components/AdminAdEditorView.js

@@ -3,7 +3,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useApiMutation } from "@mohasinac/appkit/client";
 import React from "react";
 import { useQuery } from "@tanstack/react-query";
-import { Alert, Checkbox, Div, Span, Stack, StackedViewShell, Text, useToast } from "../../../ui/index.js";
+import { Alert, Checkbox, Div, EmptyState, Span, Stack, StackedViewShell, Text, useToast } from "../../../ui/index.js";
 import { apiClient } from "../../../http/index.js";
 import { ADMIN_ENDPOINTS } from "../../../constants/api-endpoints.js";
 import { adminAdFormSchema } from "../schemas/admin-ops-forms.js";
@@ -67,6 +67,18 @@ export function AdminAdEditorView({ adId, endpointBase = ADMIN_ENDPOINTS.ADS, la
         enabled: Boolean(adId),
         staleTime: 15000,
     });
+    /*
+     * 🛑 An invented `adId` used to render the full ad editor with empty
+     * defaults. Ads live inside the `siteSettings` singleton rather than their
+     * own collection, so a Save against a non-existent id does not fail on a
+     * missing document — it writes a NEW ad into the settings array, keyed on
+     * whatever was in the URL. That is Root Cause #98's shape with the blast
+     * radius of a shared document.
+     *
+     * Gated on the query having settled: `isLoading` is true on first paint, so
+     * a bare `!adQuery.data` check would flash this at every real ad.
+     */
+    const adMissing = Boolean(adId) && !adQuery.isLoading && !adQuery.isError && !adQuery.data?.item;
     React.useEffect(() => {
         const item = adQuery.data?.item;
         if (!item)
@@ -88,7 +100,6 @@ export function AdminAdEditorView({ adId, endpointBase = ADMIN_ENDPOINTS.ADS, la
             adsenseSlot: item.creative?.adsenseSlot || "",
             thirdPartyUrl: item.creative?.thirdPartyUrl || "",
         });
-        // eslint-disable-next-line react-hooks/exhaustive-deps
     }, [adQuery.data]);
     const saveMutation = useApiMutation({
         errorMessage: "Save failed",
@@ -208,9 +219,7 @@ export function AdminAdEditorView({ adId, endpointBase = ADMIN_ENDPOINTS.ADS, la
         renderers: {
             placementIds: ({ values }) => (_jsx(PlacementChecklist, { placements: placements, selected: values.placementIds, onToggle: togglePlacement })),
         },
-    }), 
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-    [placements]);
+    }), [placements]);
     const nav = useSectionFormNav(sections, form, { scope: "admin:ad-editor" });
     const { shellCtx, setFieldError, clearErrors } = useFormShellState(adminAdFormSchema, {
         sections: nav.sectionMeta,
@@ -230,6 +239,11 @@ export function AdminAdEditorView({ adId, endpointBase = ADMIN_ENDPOINTS.ADS, la
         }
         saveMutation.mutate();
     };
+    if (adMissing) {
+        return (_jsx(StackedViewShell, { portal: "admin", ...rest, title: "Ad not found", sections: [
+                _jsx(EmptyState, { title: "Ad not found", description: "This ad may have been deleted, or the link may be wrong." }, "missing"),
+            ] }));
+    }
     return (_jsx(StackedViewShell, { portal: "admin", ...rest, title: labels.title ?? (adId ? "Edit Ad" : "Create Ad"), sections: [
             metaQuery.error ? (_jsx(Alert, { variant: "error", title: "Could not load ad metadata", children: metaQuery.error instanceof Error ? metaQuery.error.message : "Unknown error" })) : null,
             adQuery.error ? (_jsx(Alert, { variant: "error", title: "Could not load ad", children: adQuery.error instanceof Error ? adQuery.error.message : "Unknown error" })) : null,

package/dist/features/admin/components/AdminAuditLogView.js

@@ -71,7 +71,7 @@ export function AdminAuditLogView({ children, ...props }) {
             { value: sortBy("createdAt", "DESC"), label: "Newest" },
             { value: sortBy("createdAt", "ASC"), label: "Oldest" },
         ],
-        mapRows: (response) => toRecordArray(response.entries).map((item, index) => {
+        mapRows: (response) => toRecordArray(response.items).map((item, index) => {
             const action = toStringValue(item.action, "unknown");
             return {
                 id: toStringValue(item.id, `audit-${index}`),

package/dist/features/admin/components/AdminBlogEditorView.js

@@ -260,7 +260,6 @@ export function AdminBlogEditorView({ postId, onSaved, onDeleted, embedded, ...r
     // up the component.
     useEffect(() => {
         validate(draft);
-        // eslint-disable-next-line react-hooks/exhaustive-deps
     }, [draft, validate]);
     const formContent = (_jsxs(FormShellContext.Provider, { value: shellCtx, children: [_jsx(FormErrorSummary, {}), _jsx(SectionForm, { sections: sections, values: draft, onChange: update, onSubmit: () => { saveMutation.mutate(); }, schema: blogDraftSchema, openIds: openIds, onOpenChange: setOpenIds, submitLabel: isEdit ? "Save Changes" : "Create Post", isLoading: isLoading }), deleteModal] }));
     if (embedded) {

package/dist/features/admin/components/AdminBlogView.js

@@ -42,7 +42,7 @@ export function AdminBlogView({ children, ...props }) {
             { value: sortBy("createdAt", "DESC"), label: "Newest draft" },
             { value: "title", label: "Title A–Z" },
         ],
-        mapRows: (response) => toRecordArray(response.posts).map((item, index) => ({
+        mapRows: (response) => toRecordArray(response.items).map((item, index) => ({
             id: toStringValue(item.id, `post-${index}`),
             primary: toStringValue(item.title, "Untitled post"),
             secondary: [

package/dist/features/admin/components/AdminBrandsView.js

@@ -33,7 +33,23 @@ const COLUMNS = [
 const ADMIN_BRANDS_CONFIG = {
     portal: "admin",
     title: "Brands",
-    // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
+    /*
+     * Restored 2026-10-17. The note that stood here said "restore it when the
+     * collection gains searchTxt" — `categories` has it, and a brand IS a
+     * `categories` row, so `/api/admin/brands` now passes `q` as a search opt.
+     *
+     * `fields` lists what a user can expect to match, and it is a subset of
+     * `buildCategorySearchTxt`'s source list rather than a guess: that builder
+     * also indexes `path`, `itemCode`, `brandCountry`, ancestor names, authored
+     * aliases and generated misspelling variants, so the box reaches further
+     * than it advertises — never less.
+     */
+    search: {
+        placeholder: "Search brands by name, slug or description…",
+        mode: "partial",
+        fields: ["name", "slug", "description"],
+        commit: "debounce",
+    },
     emptyLabel: "No brands found",
     filterKeys: ["isActive"],
     defaultSort: sortBy("order", "ASC"),

package/dist/features/admin/components/AdminCategoryEditorView.js

@@ -75,7 +75,6 @@ async function loadTaxCodeOptions(query, page) {
     if (query)
         params.set("q", query);
     const res = await apiClient.get(`${ADMIN_ENDPOINTS.TAX_CODES}?${params.toString()}`);
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     const payload = res?.data ?? res;
     const items = payload?.items ?? payload?.data ?? [];
     return {
@@ -116,6 +115,14 @@ const categoryFormSchema = z.object({
         .optional()
         .or(z.literal("")),
     highlightsText: z.string().optional().or(z.literal("")),
+    /*
+     * The Hasbro / international-market name for a generation wave, rendered on
+     * the category page as "Also known as". Editable here because wave naming is
+     * editorial and gets corrected — the seed deliberately leaves it unset
+     * wherever a divergence is not evidenced, and this is how one gets filled in
+     * later without a reseed.
+     */
+    hasbroName: z.string().max(120, "Keep the name under 120 characters").optional().or(z.literal("")),
     taxCodeId: z.string().optional().or(z.literal("")),
     defaultCondition: z.string().optional().or(z.literal("")),
     defaultAuthenticity: z.string().optional().or(z.literal("")),
@@ -146,6 +153,7 @@ const EMPTY_VALUES = {
     showInMenu: true,
     contentBody: "",
     highlightsText: "",
+    hasbroName: "",
     taxCodeId: "",
     defaultCondition: "",
     defaultAuthenticity: "",
@@ -246,6 +254,13 @@ function buildContentPayload(v, faqs, specs, templates, carriedPriceGuidance) {
         contentBody: String(v.contentBody ?? ""),
         highlights: linesToList(String(v.highlightsText ?? "")),
         faqs: faqs.filter((f) => f.question.trim() !== "" && f.answer.trim() !== ""),
+        /*
+         * Omitted when blank rather than sent as `""`. The route schema is
+         * `.min(1)`, so an empty string is a 400 — and "I cleared the field" has
+         * to mean "do not write it", not "write an empty string every reader then
+         * has to treat as absent".
+         */
+        ...(String(v.hasbroName ?? "").trim() ? { hasbroName: String(v.hasbroName).trim() } : {}),
         descriptionTemplates: templates
             .filter((t) => t.label.trim() !== "" && t.body.trim() !== "")
             .map((t) => ({ ...t, id: t.id || toCategorySlug(t.label) || "template" })),
@@ -317,6 +332,7 @@ export function AdminCategoryEditorView({ categoryId, onSaved, onDeleted, embedd
             showInMenu: cat.display?.showInMenu ?? true,
             contentBody: cat.contentBody ?? "",
             highlightsText: listToLines(cat.highlights),
+            hasbroName: cat.hasbroName ?? "",
             taxCodeId: cat.productDefaults?.taxCodeId ?? "",
             defaultCondition: cat.productDefaults?.defaultCondition ?? "",
             defaultAuthenticity: cat.productDefaults?.defaultAuthenticity ?? "",
@@ -431,8 +447,8 @@ export function AdminCategoryEditorView({ categoryId, onSaved, onDeleted, embedd
                 {
                     id: "content",
                     label: "Content & Templates",
-                    fields: ["contentBody", "highlightsText"],
-                    render: ({ values: v, onChange, errors }) => (_jsxs(Stack, { gap: "md", children: [_jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "medium", children: "Category page body" }), _jsx(Textarea, { value: String(v.contentBody ?? ""), onChange: (e) => onChange({ contentBody: e.target.value }), rows: 8, placeholder: "400\u2013900 characters of keyword-rich HTML with links to sibling and parent categories\u2026" }), errors.contentBody ? (_jsx(Text, { size: "sm", variant: "error", role: "alert", children: errors.contentBody })) : (_jsx(Text, { size: "xs", color: "muted", children: "Rendered on the category page. Distinct from the short Description above, which also feeds the SEO meta and every card. 36 of worldhobbyshop's 46 categories carry one of these and it is their actual ranking mechanism; no Shopify competitor in the crawl has any." }))] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "medium", children: "Highlights \u2014 one per line" }), _jsx(Textarea, { value: String(v.highlightsText ?? ""), onChange: (e) => onChange({ highlightsText: e.target.value }), rows: 4, placeholder: "Genuine Takara Tomy stock\nChecked and photographed before listing" }), _jsx(Text, { size: "xs", color: "muted", children: "Short \"why shop this\" bullets, shown above the FAQs. Blank lines are dropped. Up to 12." })] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "medium", children: "Category FAQs" }), _jsx(Text, { size: "xs", color: "muted", children: "Rendered as an accordion on the category page and emitted as FAQPage structured data. Keep platform-wide answers in the global FAQ collection instead \u2014 two copies of one answer means the one that gets fixed is never the one being read." }), _jsx(Repeater, { rows: faqs, onChange: setFaqs, blank: () => ({ question: "", answer: "" }), addLabel: "Add an FAQ", max: 20, renderRow: (row, set) => (_jsxs(_Fragment, { children: [_jsx(Input, { label: "Question", value: row.question, onChange: (e) => set({ question: e.target.value }), placeholder: "Are these compatible with Burst launchers?" }), _jsx(Textarea, { value: row.answer, onChange: (e) => set({ answer: e.target.value }), rows: 3, placeholder: "Answer\u2026" })] })) })] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "medium", children: "Description templates" }), _jsxs(Text, { size: "xs", color: "muted", children: ["What the seller form offers when a listing is filed here. One per condition band \u2014 worldhobbyshop reuses exactly two across 1,195 listings. Slots like", " ", _jsx(Span, { family: "mono", children: "{{title}}" }), ",", " ", _jsx(Span, { family: "mono", children: "{{brand}}" }), ",", " ", _jsx(Span, { family: "mono", children: "{{condition}}" }), " and", " ", _jsx(Span, { family: "mono", children: "{{series}}" }), " are filled from the listing; an unresolved one becomes empty and is reported to the seller, never left as a literal brace pair."] }), _jsx(Repeater, { rows: templates, onChange: setTemplates, blank: () => ({ id: "", label: "", variant: "default", body: "" }), addLabel: "Add a template", max: 8, renderRow: (row, set) => (_jsxs(_Fragment, { children: [_jsxs(Div, { layout: "grid", gap: "4", className: "sm:grid-cols-2", children: [_jsx(Input, { label: "Label", value: row.label, onChange: (e) => set({ label: e.target.value }), placeholder: "Pre-owned \u2014 condition as pictured" }), _jsx(Select, { label: "Condition band", value: row.variant, onChange: (e) => set({ variant: e.target.value }), options: TEMPLATE_VARIANT_OPTIONS })] }), _jsx(Textarea, { value: row.body, onChange: (e) => set({ body: e.target.value }), rows: 6, placeholder: "Important things to know about {{title}} \u2014 HTML permitted\u2026" }), _jsx(Text, { size: "xs", color: "muted", children: usedPlaceholders(row.body).length > 0
+                    fields: ["contentBody", "highlightsText", "hasbroName"],
+                    render: ({ values: v, onChange, errors }) => (_jsxs(Stack, { gap: "md", children: [_jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "medium", children: "Category page body" }), _jsx(Textarea, { value: String(v.contentBody ?? ""), onChange: (e) => onChange({ contentBody: e.target.value }), rows: 8, placeholder: "400\u2013900 characters of keyword-rich HTML with links to sibling and parent categories\u2026" }), errors.contentBody ? (_jsx(Text, { size: "sm", variant: "error", role: "alert", children: errors.contentBody })) : (_jsx(Text, { size: "xs", color: "muted", children: "Rendered on the category page. Distinct from the short Description above, which also feeds the SEO meta and every card. 36 of worldhobbyshop's 46 categories carry one of these and it is their actual ranking mechanism; no Shopify competitor in the crawl has any." }))] }), _jsx(FieldInput, { name: "hasbroName", label: "Hasbro / international name", value: String(v.hasbroName ?? ""), onChange: (val) => onChange({ hasbroName: val }), placeholder: "e.g. Beyblade Burst Turbo", error: errors.hasbroName, hint: "Only when the Hasbro season name genuinely differs from the Takara-Tomy one \u2014 Cho-Z ships as Turbo, God as Evolution. Rendered on the category page as 'Also known as'. Leave blank if there is no divergence, or if you cannot confirm one: a guessed pairing reads as fact." }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "medium", children: "Highlights \u2014 one per line" }), _jsx(Textarea, { value: String(v.highlightsText ?? ""), onChange: (e) => onChange({ highlightsText: e.target.value }), rows: 4, placeholder: "Genuine Takara Tomy stock\nChecked and photographed before listing" }), _jsx(Text, { size: "xs", color: "muted", children: "Short \"why shop this\" bullets, shown above the FAQs. Blank lines are dropped. Up to 12." })] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "medium", children: "Category FAQs" }), _jsx(Text, { size: "xs", color: "muted", children: "Rendered as an accordion on the category page and emitted as FAQPage structured data. Keep platform-wide answers in the global FAQ collection instead \u2014 two copies of one answer means the one that gets fixed is never the one being read." }), _jsx(Repeater, { rows: faqs, onChange: setFaqs, blank: () => ({ question: "", answer: "" }), addLabel: "Add an FAQ", max: 20, renderRow: (row, set) => (_jsxs(_Fragment, { children: [_jsx(Input, { label: "Question", value: row.question, onChange: (e) => set({ question: e.target.value }), placeholder: "Are these compatible with Burst launchers?" }), _jsx(Textarea, { value: row.answer, onChange: (e) => set({ answer: e.target.value }), rows: 3, placeholder: "Answer\u2026" })] })) })] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "medium", children: "Description templates" }), _jsxs(Text, { size: "xs", color: "muted", children: ["What the seller form offers when a listing is filed here. One per condition band \u2014 worldhobbyshop reuses exactly two across 1,195 listings. Slots like", " ", _jsx(Span, { family: "mono", children: "{{title}}" }), ",", " ", _jsx(Span, { family: "mono", children: "{{brand}}" }), ",", " ", _jsx(Span, { family: "mono", children: "{{condition}}" }), " and", " ", _jsx(Span, { family: "mono", children: "{{series}}" }), " are filled from the listing; an unresolved one becomes empty and is reported to the seller, never left as a literal brace pair."] }), _jsx(Repeater, { rows: templates, onChange: setTemplates, blank: () => ({ id: "", label: "", variant: "default", body: "" }), addLabel: "Add a template", max: 8, renderRow: (row, set) => (_jsxs(_Fragment, { children: [_jsxs(Div, { layout: "grid", gap: "4", className: "sm:grid-cols-2", children: [_jsx(Input, { label: "Label", value: row.label, onChange: (e) => set({ label: e.target.value }), placeholder: "Pre-owned \u2014 condition as pictured" }), _jsx(Select, { label: "Condition band", value: row.variant, onChange: (e) => set({ variant: e.target.value }), options: TEMPLATE_VARIANT_OPTIONS })] }), _jsx(Textarea, { value: row.body, onChange: (e) => set({ body: e.target.value }), rows: 6, placeholder: "Important things to know about {{title}} \u2014 HTML permitted\u2026" }), _jsx(Text, { size: "xs", color: "muted", children: usedPlaceholders(row.body).length > 0
                                                         ? `Slots used: ${usedPlaceholders(row.body).map((p) => `{{${p}}}`).join(", ")}`
                                                         : "No slots used — this body will read identically on every listing." })] })) })] })] })),
                 },

package/dist/features/admin/components/AdminContactView.js

@@ -59,7 +59,7 @@ export function AdminContactView({ children, onBulkMarkRead, onBulkArchive, onBu
             { value: sortBy("createdAt", "DESC"), label: "Newest" },
             { value: sortBy("createdAt", "ASC"), label: "Oldest" },
         ],
-        mapRows: (response) => toRecordArray(response.submissions).map((item, index) => ({
+        mapRows: (response) => toRecordArray(response.items).map((item, index) => ({
             id: toStringValue(item.id, `msg-${index}`),
             primary: toStringValue(item.subject, "No subject"),
             secondary: [toStringValue(item.name, "Unknown"), toStringValue(item.email, "")]

package/dist/features/admin/components/AdminEmployeeEditorView.js

@@ -170,9 +170,7 @@ export function AdminEmployeeEditorView({ open, onClose, mode, userId, displayNa
             permissionGroup: ({ values, errors }) => (_jsx(FieldSelectGroup, { value: values.permissionGroup, error: errors.permissionGroup, onChange: applyGroupPreset })),
             permissions: ({ values }) => (_jsx(PermissionDomainsPanel, { permissions: values.permissions, togglePerm: togglePerm })),
         },
-    }), 
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-    [schema]);
+    }), [schema]);
     const nav = useSectionFormNav(sections, form, { scope: "admin:employee-editor" });
     const { shellCtx, setFieldError, clearErrors } = useFormShellState(schema, {
         sections: nav.sectionMeta,

package/dist/features/admin/components/AdminNavigationView.js

@@ -12,7 +12,7 @@ const __O = {
     hidden: "overflow-hidden",
 };
 function NavItemRow({ item, idx, total, reorderPending, onMoveUp, onMoveDown, onVisibilityChange, onEdit, onDelete, }) {
-    return (_jsxs(Row, { surface: "default", padding: "inline", align: "center", gap: "3", children: [_jsxs(Stack, { className: "shrink-0 gap-[0.125rem]", children: [_jsx(Button, { variant: "ghost", type: "button", onClick: () => onMoveUp(idx), disabled: idx === 0 || reorderPending, className: "text-zinc-400 hover:text-zinc-700 hover:text-[var(--appkit-color-text-muted)] disabled:opacity-30 leading-none text-[length:var(--appkit-text-xs)] p-[var(--appkit-space-0)] min-h-0 h-auto rounded-none", "aria-label": "Move up", children: "\u25B2" }), _jsx(Button, { variant: "ghost", type: "button", onClick: () => onMoveDown(idx), disabled: idx >= total - 1 || reorderPending, className: "text-zinc-400 hover:text-zinc-700 hover:text-[var(--appkit-color-text-muted)] disabled:opacity-30 leading-none text-[length:var(--appkit-text-xs)] p-[var(--appkit-space-0)] min-h-0 h-auto rounded-none", "aria-label": "Move down", children: "\u25BC" })] }), _jsxs(Div, { className: "flex-1 min-w-0", children: [_jsxs(Text, { className: "truncate", color: "primary", size: "sm", weight: "medium", children: [item.parentId ? _jsx(Span, { className: "mr-1", color: "faint", children: "\u21B3" }) : null, item.label] }), _jsx(Text, { className: "truncate", color: "muted", size: "xs", children: item.href })] }), _jsx(Toggle, { checked: item.isVisible ?? true, onChange: (val) => onVisibilityChange(item.id, val), label: "" }), _jsx(RowActionMenu, { actions: [
+    return (_jsxs(Row, { surface: "default", padding: "inline", align: "center", gap: "3", children: [_jsxs(Stack, { className: "shrink-0 gap-[0.125rem]", children: [_jsx(Button, { variant: "ghost", type: "button", onClick: () => onMoveUp(idx), disabled: idx === 0 || reorderPending, className: "text-zinc-400 hover:text-[var(--appkit-color-text)] disabled:opacity-30 leading-none text-[length:var(--appkit-text-xs)] p-[var(--appkit-space-0)] min-h-0 h-auto rounded-none", "aria-label": "Move up", children: "\u25B2" }), _jsx(Button, { variant: "ghost", type: "button", onClick: () => onMoveDown(idx), disabled: idx >= total - 1 || reorderPending, className: "text-zinc-400 hover:text-[var(--appkit-color-text)] disabled:opacity-30 leading-none text-[length:var(--appkit-text-xs)] p-[var(--appkit-space-0)] min-h-0 h-auto rounded-none", "aria-label": "Move down", children: "\u25BC" })] }), _jsxs(Div, { className: "flex-1 min-w-0", children: [_jsxs(Text, { className: "truncate", color: "primary", size: "sm", weight: "medium", children: [item.parentId ? _jsx(Span, { className: "mr-1", color: "faint", children: "\u21B3" }) : null, item.label] }), _jsx(Text, { className: "truncate", color: "muted", size: "xs", children: item.href })] }), _jsx(Toggle, { checked: item.isVisible ?? true, onChange: (val) => onVisibilityChange(item.id, val), label: "" }), _jsx(RowActionMenu, { actions: [
                     { label: ROW_ACTION_META[ROW_ACTION_ID.EDIT].label, onClick: () => onEdit(item) },
                     { label: ROW_ACTION_META[ROW_ACTION_ID.DELETE].label, destructive: true, onClick: () => onDelete(item) },
                 ] })] }));

package/dist/features/admin/components/AdminNewsletterView.js

@@ -100,7 +100,7 @@ export function AdminNewsletterView({ children, onBulkUnsubscribe, ...props }) {
         // Opening a row is what makes the destructive actions beside it
         // safe to offer at all.
         onRowClick: (row) => setDetail(row),
-        mapRows: (response) => toRecordArray(response.subscribers).map((item, index) => ({
+        mapRows: (response) => toRecordArray(response.items).map((item, index) => ({
             id: toStringValue(item.id, `sub-${index}`),
             primary: toStringValue(item.email, "Unknown email"),
             secondary: [toStringValue(item.source, ""), item.ipAddress ? "IP logged" : ""]

package/dist/features/admin/components/AdminOrdersView.js

@@ -105,10 +105,17 @@ export function AdminOrdersView({ children, ...props }) {
             throw err;
         }
     }, [showToast]);
+    /*
+     * 🛑 ABOVE the `children` short-circuit. `useOrderScope` sat below it, so a
+     * caller passing children skipped the hook entirely and the hook order
+     * differed between the two render paths — React then reads one hook's state
+     * into another's slot. A hook must run on every render of a component, which
+     * means before any conditional return, always.
+     */
+    const orderScope = useOrderScope();
     if (React.Children.count(children) > 0) {
         return (_jsx(ListingLayout, { portal: "admin", ...props, children: children }));
     }
-    const orderScope = useOrderScope();
     const config = {
         portal: "admin",
         title: "Orders",
@@ -132,7 +139,7 @@ export function AdminOrdersView({ children, ...props }) {
             { value: sortBy("createdAt", "DESC"), label: "Newest" },
             { value: sortBy("createdAt", "ASC"), label: "Oldest" },
         ],
-        mapRows: (response) => toRecordArray(response.orders).map((item, index) => {
+        mapRows: (response) => toRecordArray(response.items).map((item, index) => {
             const orderId = toStringValue(item.id, `order-${index}`);
             const { image, title, extraCount } = firstOrderItem(item);
             return {

package/dist/features/admin/components/AdminPageHeader.js

@@ -10,5 +10,5 @@ export function AdminPageHeader({ title, subtitle, description, badge, breadcrum
     subtitleClass: "text-[length:var(--appkit-text-lg)] text-gray-700",
     spacingClass: "space-y-1",
 }, }) {
-    return (_jsxs(Div, { className: `${themeConfig.gradient} ${__P.p6} ${className}`, children: [breadcrumb && breadcrumb.length > 0 && (_jsx(Nav, { "aria-label": "Breadcrumb", layout: "flex", gap: "xs", textSize: "sm", color: "muted", className: "mb-3", children: breadcrumb.map((crumb, index) => (_jsxs(Span, { layout: "flex", gap: "xs", children: [index > 0 && _jsx(ChevronRight, { className: "w-3 h-3 flex-shrink-0" }), crumb.href && themeConfig.TextLink ? (_jsx(themeConfig.TextLink, { href: crumb.href, className: "hover:text-zinc-700 hover:text-[var(--appkit-color-text-muted)] transition-colors", children: crumb.label })) : (_jsx(Span, { weight: "medium", color: "primary", children: crumb.label }))] }, index))) })), _jsxs(Stack, { direction: "sm-row", align: "center", justify: "between", gap: "md", children: [_jsxs(Div, { className: themeConfig.spacingClass, children: [_jsxs(Row, { gap: "sm", wrap: true, children: [_jsx(Heading, { level: 2, className: themeConfig.titleClass, children: title }), badge && _jsx(Span, { className: "flex-shrink-0", children: badge })] }), subtitle && (_jsx(Text, { className: themeConfig.subtitleClass, children: subtitle })), description && (_jsx(Text, { className: "mt-1", color: "muted", size: "sm", children: description }))] }), actionLabel && onAction && (_jsxs(Button, { variant: "primary", onClick: onAction, disabled: actionDisabled, className: "flex-shrink-0", children: [actionIcon, actionLabel] }))] })] }));
+    return (_jsxs(Div, { className: `${themeConfig.gradient} ${__P.p6} ${className}`, children: [breadcrumb && breadcrumb.length > 0 && (_jsx(Nav, { "aria-label": "Breadcrumb", layout: "flex", gap: "xs", textSize: "sm", color: "muted", className: "mb-3", children: breadcrumb.map((crumb, index) => (_jsxs(Span, { layout: "flex", gap: "xs", children: [index > 0 && _jsx(ChevronRight, { className: "w-3 h-3 flex-shrink-0" }), crumb.href && themeConfig.TextLink ? (_jsx(themeConfig.TextLink, { href: crumb.href, className: "hover:text-[var(--appkit-color-text)] transition-colors", children: crumb.label })) : (_jsx(Span, { weight: "medium", color: "primary", children: crumb.label }))] }, index))) })), _jsxs(Stack, { direction: "sm-row", align: "center", justify: "between", gap: "md", children: [_jsxs(Div, { className: themeConfig.spacingClass, children: [_jsxs(Row, { gap: "sm", wrap: true, children: [_jsx(Heading, { level: 2, className: themeConfig.titleClass, children: title }), badge && _jsx(Span, { className: "flex-shrink-0", children: badge })] }), subtitle && (_jsx(Text, { className: themeConfig.subtitleClass, children: subtitle })), description && (_jsx(Text, { className: "mt-1", color: "muted", size: "sm", children: description }))] }), actionLabel && onAction && (_jsxs(Button, { variant: "primary", onClick: onAction, disabled: actionDisabled, className: "flex-shrink-0", children: [actionIcon, actionLabel] }))] })] }));
 }

package/dist/features/admin/components/AdminPayoutsView.js

@@ -100,7 +100,7 @@ export function AdminPayoutsView({ children, ...props }) {
             { value: sortBy("createdAt", "ASC"), label: "Oldest" },
             { value: sortBy("amount", "DESC"), label: "Highest amount" },
         ],
-        mapRows: (response) => toRecordArray(response.payouts).map((item, index) => ({
+        mapRows: (response) => toRecordArray(response.items).map((item, index) => ({
             id: toStringValue(item.id, `payout-${index}`),
             primary: [`Payout ${toStringValue(item.id, "-")}`, toCurrency(item.amount)].join(" · "),
             secondary: toStringValue(item.storeName ?? item.sellerName, "Unknown store"),

package/dist/features/admin/components/AdminPrizeDrawsView.js

@@ -124,6 +124,17 @@ export function AdminPrizeDrawsView({ children, ...props }) {
         buildExtraParams: () => scope.extraParams,
         renderAboveContent: scope.renderAboveContent,
         rowHrefTemplate: String(ROUTES.ADMIN.PRIZE_DRAWS_EDIT("{id}")),
+        /*
+         * A prize draw IS a product (`listingType: "prize-draw"`), so it is created
+         * in the product editor like every other type — there is deliberately no
+         * `PRIZE_DRAWS_NEW` admin route, and inventing one would be a second create
+         * path for the same document. `?listingType=` preselects the type so the
+         * row an admin creates from here actually appears here.
+         */
+        primaryAction: {
+            label: "Add Prize Draw",
+            href: `${String(ROUTES.ADMIN.PRODUCTS_NEW)}?${PRODUCT_FIELDS.LISTING_TYPE}=prize-draw`,
+        },
         // Rule #7: bulk-action array sourced from the ADMIN_BULK_ACTIONS preset.
         buildBulkActions: (selection) => ADMIN_BULK_ACTIONS.prizeDraws.map((id) => ({
             id,

package/dist/features/admin/components/AdminProductEditorView.d.ts

@@ -1,6 +1,7 @@
 import React from "react";
 import type { StackedViewShellProps } from "../../../ui";
 import type { ProductFormValue } from "../../products/components/ProductForm";
+import type { ListingType } from "../../products/types";
 export interface AdminProductEditorViewProps extends Omit<StackedViewShellProps, "sections"> {
     productId?: string;
     onSaved?: (id: string) => void;
@@ -15,5 +16,13 @@ export interface AdminProductEditorViewProps extends Omit<StackedViewShellProps,
      * background per its normal staleTime rules.
      */
     initialData?: ProductFormValue;
+    /**
+     * Which listing type a NEW product starts on. Lets a per-type admin listing
+     * ("Art", "Classifieds", …) send the admin straight into a create form for
+     * its own type rather than for `standard` — which is what lets those five
+     * pages have a create button at all. Ignored in edit mode, where the stored
+     * `listingType` is the only correct answer.
+     */
+    initialListingType?: ListingType;
 }
-export declare function AdminProductEditorView({ productId, onSaved, onDeleted, embedded, enabledListingTypes, initialData, ...rest }: AdminProductEditorViewProps): React.JSX.Element;
+export declare function AdminProductEditorView({ productId, onSaved, onDeleted, embedded, enabledListingTypes, initialData, initialListingType, ...rest }: AdminProductEditorViewProps): React.JSX.Element;

package/dist/features/admin/components/AdminProductEditorView.js

@@ -26,7 +26,10 @@ const adminProductFormSchema = z.object({
 import { apiClient } from "../../../http/index.js";
 import { ADMIN_ENDPOINTS } from "../../../constants/api-endpoints.js";
 import { ProductForm } from "../../products/components/ProductForm.js";
+import { PriceGuidanceHint } from "../../categories/components/PriceGuidanceHint.js";
 import { normalizeListingType } from "../../products/utils/listing-type.js";
+import { ALL_LISTING_TYPES } from "../../../_internal/shared/listing-types/feature-flags.js";
+import { pluginFor } from "../../../_internal/shared/listing-types/_registry.js";
 import { GroupSettingsPanel } from "../../products/components/GroupSettingsPanel.js";
 import { GroupInlineSelect } from "../../seller/components/GroupInlineSelect.js";
 import { CategoryQuickCreateForm } from "./CategoryQuickCreateForm.js";
@@ -39,38 +42,12 @@ const __P = {
 const __O = {
     yAuto: "overflow-y-auto",
 };
-function modeFromProduct(product) {
-    const lt = normalizeListingType(product);
-    if (lt === "auction")
-        return "auction";
-    if (lt === "pre-order")
-        return "preorder";
-    if (lt === "prize-draw")
-        return "prize-draw";
-    if (lt === "classified")
-        return "classified";
-    if (lt === "digital-code")
-        return "digital-code";
-    if (lt === "live")
-        return "live";
-    return "standard";
-}
-/**
- * SB1-G Phase 4 — applies the selected mode by writing the canonical
- * `listingType` discriminator. Nothing else needs to be written for the mode flip.
- */
-function applyMode(product, mode) {
-    const map = {
-        standard: "standard",
-        auction: "auction",
-        preorder: "pre-order",
-        "prize-draw": "prize-draw",
-        classified: "classified",
-        "digital-code": "digital-code",
-        live: "live",
-    };
-    return { ...product, listingType: map[mode] };
-}
+const modeFromProduct = (product) => normalizeListingType(product);
+/** SB1-G Phase 4 — `listingType` is the only listing-kind field on the schema. */
+const applyMode = (product, mode) => ({
+    ...product,
+    listingType: mode,
+});
 async function loadStoreOptions(query, page) {
     const params = new URLSearchParams({ page: String(page), pageSize: "25" });
     if (query)
@@ -115,12 +92,24 @@ const EMPTY_PRODUCT = {
     // SB1-G Phase 4 — listingType is the only listing-kind field on the schema.
     listingType: "standard",
 };
-export function AdminProductEditorView({ productId, onSaved, onDeleted, embedded, enabledListingTypes, initialData, ...rest }) {
+export function AdminProductEditorView({ productId, onSaved, onDeleted, embedded, enabledListingTypes, initialData, initialListingType, ...rest }) {
     const isEdit = Boolean(productId);
-    const [product, setProduct] = React.useState(EMPTY_PRODUCT);
-    const [mode, setMode] = React.useState("standard");
+    const startType = initialListingType ?? "standard";
+    const [product, setProduct] = React.useState(() => applyMode(EMPTY_PRODUCT, startType));
+    const [mode, setMode] = React.useState(startType);
     const [deleteOpen, setDeleteOpen] = React.useState(false);
     const { showToast } = useToast();
+    /*
+     * One tab per listing type, in registry order, labelled by the plugin.
+     *
+     * `enabledListingTypes` narrows it when a caller passes one — but the type
+     * the editor is CURRENTLY on always survives the filter. Without that, an
+     * admin opening an existing listing of a disabled type gets a Tabs component
+     * whose `value` matches no trigger: no tab reads as selected, and the next
+     * save still writes that type back, so the control silently disagrees with
+     * the record it is editing.
+     */
+    const modeTabs = React.useMemo(() => ALL_LISTING_TYPES.filter((t) => !enabledListingTypes || enabledListingTypes.includes(t) || t === mode).map((t) => ({ value: t, label: pluginFor(t).typeLabel })), [enabledListingTypes, mode]);
     const productQuery = useQuery({
         queryKey: ["admin", "product", productId],
         queryFn: async () => {
@@ -198,7 +187,7 @@ export function AdminProductEditorView({ productId, onSaved, onDeleted, embedded
             label: "Listing type",
             required: true,
             fields: ["listingType"],
-            render: () => (_jsx(Stack, { gap: "md", children: _jsxs(Card, { variant: "outlined", padding: "lg", children: [_jsx(Text, { className: __P.sectionLabel, color: "muted", size: "xs", weight: "semibold", transform: "uppercase", children: "Listing Type" }), _jsxs(Tabs, { value: mode, onChange: handleModeChange, children: [_jsxs(TabsList, { children: [(!enabledListingTypes || enabledListingTypes.includes("standard")) && (_jsx(TabsTrigger, { value: "standard", children: "Standard" })), (!enabledListingTypes || enabledListingTypes.includes("auction")) && (_jsx(TabsTrigger, { value: "auction", children: "Auction" })), (!enabledListingTypes || enabledListingTypes.includes("pre-order")) && (_jsx(TabsTrigger, { value: "preorder", children: "Pre-order" })), (!enabledListingTypes || enabledListingTypes.includes("prize-draw")) && (_jsx(TabsTrigger, { value: "prize-draw", children: "Prize Draw" })), (!enabledListingTypes || enabledListingTypes.includes("classified")) && (_jsx(TabsTrigger, { value: "classified", children: "Classified" })), (!enabledListingTypes || enabledListingTypes.includes("digital-code")) && (_jsx(TabsTrigger, { value: "digital-code", children: "Digital Code" })), (!enabledListingTypes || enabledListingTypes.includes("live")) && (_jsx(TabsTrigger, { value: "live", children: "Live Item" }))] }), _jsx(TabsContent, { value: "standard" }), _jsx(TabsContent, { value: "auction" }), _jsx(TabsContent, { value: "preorder" }), _jsx(TabsContent, { value: "prize-draw" }), _jsx(TabsContent, { value: "classified" }), _jsx(TabsContent, { value: "digital-code" }), _jsx(TabsContent, { value: "live" })] })] }) })),
+            render: () => (_jsx(Stack, { gap: "md", children: _jsxs(Card, { variant: "outlined", padding: "lg", children: [_jsx(Text, { className: __P.sectionLabel, color: "muted", size: "xs", weight: "semibold", transform: "uppercase", children: "Listing Type" }), _jsxs(Tabs, { value: mode, onChange: handleModeChange, children: [_jsx(TabsList, { children: modeTabs.map((t) => (_jsx(TabsTrigger, { value: t.value, children: t.label }, t.value))) }), modeTabs.map((t) => (_jsx(TabsContent, { value: t.value }, t.value)))] })] }) })),
         },
         {
             id: "classification",
@@ -212,8 +201,22 @@ export function AdminProductEditorView({ productId, onSaved, onDeleted, embedded
                                      * determination — the seller forms deliberately omit it and
                                      * let `deriveTaxonomy` resolve it from the category.
                                      */
-                                    canEditTax: true, renderGroupSettings: isEdit && productId
-                                        ? (p) => (_jsx(GroupSettingsPanel, { productId: productId, productSlug: p.slug ?? productId, groupId: p.groupId, isGroupParent: p.isGroupParent, groupParentSlug: p.groupParentSlug, groupChildSlugs: p.groupChildSlugs, groupTitle: p.groupTitle, isAuction: modeFromProduct(p) === "auction", storeProductsEndpoint: ADMIN_ENDPOINTS.PRODUCTS, onGroupChanged: () => productQuery.refetch() }))
+                                    canEditTax: true, renderPriceGuidance: ({ categorySlug }) => categorySlug ? _jsx(PriceGuidanceHint, { categoryId: categorySlug }) : null, renderGroupSettings: isEdit && productId
+                                        ? (p) => (_jsx(GroupSettingsPanel, { productId: productId, productSlug: p.slug ?? productId, groupId: p.groupId, isGroupParent: p.isGroupParent, groupParentSlug: p.groupParentSlug, groupChildSlugs: p.groupChildSlugs, groupTitle: p.groupTitle, 
+                                            /*
+                                             * Read straight off the product the editor is
+                                             * already showing — the rules live on the group
+                                             * PARENT and this panel is only mounted from the
+                                             * parent's own editor, so a second fetch would be a
+                                             * second source of truth for the same five fields.
+                                             */
+                                            groupRules: {
+                                                groupMinMembers: p.groupMinMembers,
+                                                groupMaxMembers: p.groupMaxMembers,
+                                                groupMaxUnitsPerMember: p.groupMaxUnitsPerMember,
+                                                groupRequiredMemberIds: p.groupRequiredMemberIds,
+                                                groupDiscountPercent: p.groupDiscountPercent,
+                                            }, isAuction: modeFromProduct(p) === "auction", storeProductsEndpoint: ADMIN_ENDPOINTS.PRODUCTS, onGroupChanged: () => productQuery.refetch() }))
                                         : undefined, renderGroupJoinField: ({ label, value, onChange, disabled }) => (_jsx(GroupInlineSelect, { scope: "admin", value: value ?? "", onChange: (id) => onChange(id || undefined), disabled: disabled, label: label, placeholder: "None (standalone product)", allowCreate: false })), renderCategorySelector: ({ label, value, onChange, disabled }) => (_jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "medium", color: "primary", children: label }), _jsx(PaginatedSelect, { value: value || null, onChange: (v) => onChange(v ?? ""), loadOptions: loadCategoryOptions, placeholder: "Search categories\u2026", searchPlaceholder: "Type category name\u2026", noResultsText: "No categories found", ariaLabel: label, disabled: disabled, createLabel: "Category", renderCreateForm: ({ onCreated, onCancel }) => (_jsx(CategoryQuickCreateForm, { onSaved: (id, name) => onCreated({ value: id, label: name }), onCancel: onCancel })) })] })), renderBrandSelector: (args) => (_jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "medium", color: "primary", children: args.label }), _jsx(PaginatedSelect, { value: args.multi ? null : (args.value || null), onChange: (v) => args.onValueChange(v ?? ""), loadOptions: loadBrandOptions, placeholder: "Search brands\u2026", searchPlaceholder: "Type brand name\u2026", noResultsText: "No brands found", ariaLabel: args.label, disabled: args.disabled, createLabel: "Brand", renderCreateForm: ({ onCreated, onCancel }) => (_jsx(BrandQuickCreateForm, { onSaved: (id, name) => onCreated({ value: id, label: name }), onCancel: onCancel })) })] })) })] })] }) })),
         },
         {
@@ -239,7 +242,6 @@ export function AdminProductEditorView({ productId, onSaved, onDeleted, embedded
     // Live validation — re-run on every product change, not just on submit.
     React.useEffect(() => {
         validate(product);
-        // eslint-disable-next-line react-hooks/exhaustive-deps
     }, [product, validate]);
     /*
      * ONE submit path. The sidebar button used `form="product-editor-form"` to

package/dist/features/admin/components/AdminProductsView.js

@@ -140,6 +140,16 @@ export function AdminProductsView({ children, ...props }) {
             throw err;
         }
     }, [showToast, overrides]);
+    /*
+     * 🛑 ABOVE the `children` short-circuit, for the same reason as its twin in
+     * `AdminOrdersView`: a hook below a conditional return does not run on every
+     * render, so the hook ORDER differs between the two paths and React reads one
+     * hook's state into another's slot.
+     *
+     * Spans every listing type unless the Type chips narrow it, which is what
+     * makes the middle tab read "Sold & Ended" here rather than one or the other.
+     */
+    const scope = useAvailabilityScope(ALL_LISTING_TYPES);
     if (React.Children.count(children) > 0) {
         return (_jsx(ListingLayout, { portal: "admin", ...props, children: children }));
     }
@@ -151,9 +161,6 @@ export function AdminProductsView({ children, ...props }) {
                     void handleToggle(row.id, key, v);
                 } }, key))) })),
     };
-    // Spans every listing type unless the Type chips narrow it, which is what
-    // makes the middle tab read "Sold & Ended" here rather than one or the other.
-    const scope = useAvailabilityScope(ALL_LISTING_TYPES);
     const config = {
         portal: "admin",
         title: "Products",

package/dist/features/admin/components/AdminScammersView.js

@@ -69,7 +69,7 @@ export function AdminScammersView({ children, ...props }) {
             { value: sortBy("incidentCount", "DESC"), label: "Most incidents" },
         ],
         columns: SCAMMER_COLUMNS,
-        mapRows: (response) => toRecordArray(response.scammers).map((item, index) => ({
+        mapRows: (response) => toRecordArray(response.items).map((item, index) => ({
             id: toStringValue(item.id, `scammer-${index}`),
             primary: Array.isArray(item.displayNames)
                 ? item.displayNames.join(", ")