@mohasinac/appkit 4.53.0 → 4.53.2

package/dist/constants/api-endpoints.d.ts

@@ -273,6 +273,15 @@ export declare const CATEGORY_ENDPOINTS: {
      * category change in the form costs zero function invocations on a hit.
      */
     readonly DESCRIPTION_TEMPLATE: (id: string, variant?: string) => string;
+    /**
+     * The inherited `priceGuidance` band, restated on the calling seller's own
+     * tax basis — seller/admin/moderator only. Deliberately a SEPARATE
+     * endpoint from `DESCRIPTION_TEMPLATE`: that one is public and edge-cached
+     * so anyone can fetch it, and `priceGuidance` is withheld from that
+     * response for the same reason a listing's own price is hidden from guests
+     * (CLAUDE.md § "Guest price gating").
+     */
+    readonly PRICE_GUIDANCE: (id: string) => string;
 };
 export declare const TOOL_ENDPOINTS: {
     /**
@@ -286,6 +295,19 @@ export declare const TOOL_ENDPOINTS: {
      * its invocation allowance.
      */
     readonly PRICE_INDEX_SEARCH: (q: string) => string;
+    /**
+     * Tier 1 adoption — the client resolved these ids LOCALLY, from the
+     * public search artifact, at zero Firestore reads. This route's only job
+     * is the multi-get `searchPriceIndex` otherwise pays for every lookup.
+     */
+    readonly PRICE_INDEX_BANDS: (ids: readonly string[]) => string;
+    /**
+     * The competitor-crawl market band for the same leaves — SIGNED-IN ONLY, and
+     * therefore a separate request from `PRICE_INDEX_BANDS` rather than more
+     * fields on it. That route is public and edge-cached; this one must not be,
+     * or one signed-in lookup populates an entry every guest reads.
+     */
+    readonly PRICE_INDEX_MARKET: (ids: readonly string[]) => string;
 };
 /**
  * The sticker-sheet kiss-cut tracer. Admin-only, every route behind
@@ -377,8 +399,6 @@ export declare const FAQ_ENDPOINTS: {
     readonly VOTE: "/api/faqs/vote";
 };
 export declare const HOMEPAGE_ENDPOINTS: {
-    readonly GET: "/api/homepage";
-    readonly SECTIONS: "/api/homepage-sections";
     readonly CAROUSEL: "/api/carousel";
     readonly NEWSLETTER_SUBSCRIBE: "/api/newsletter/subscribe";
 };
@@ -434,10 +454,9 @@ export declare const REVIEW_ENDPOINTS: {
     readonly FEATURED: "/api/reviews?featured=true";
 };
 export declare const SEARCH_ENDPOINTS: {
-    readonly QUERY: (q: string, extra?: string) => string;
     readonly SUGGESTIONS: "/api/search/suggestions";
-    /** @param params — pre-built querystring (no leading `?`) from a caller-owned URLSearchParams */
-    readonly RAW: (params: string) => string;
+    /** Tier 2 — the viewer's own orders/offers/drafts/addresses. `private, no-store`. */
+    readonly SCOPED: (q: string) => string;
 };
 export declare const SELLER_ENDPOINTS: {
     readonly BECOME: "/api/seller/become";
@@ -816,6 +835,15 @@ export declare const API_ENDPOINTS: {
          * category change in the form costs zero function invocations on a hit.
          */
         readonly DESCRIPTION_TEMPLATE: (id: string, variant?: string) => string;
+        /**
+         * The inherited `priceGuidance` band, restated on the calling seller's own
+         * tax basis — seller/admin/moderator only. Deliberately a SEPARATE
+         * endpoint from `DESCRIPTION_TEMPLATE`: that one is public and edge-cached
+         * so anyone can fetch it, and `priceGuidance` is withheld from that
+         * response for the same reason a listing's own price is hidden from guests
+         * (CLAUDE.md § "Guest price gating").
+         */
+        readonly PRICE_GUIDANCE: (id: string) => string;
     };
     readonly BEFORE_AFTER: {
         readonly LIST: "/api/before-after";
@@ -880,8 +908,6 @@ export declare const API_ENDPOINTS: {
         readonly VOTE: "/api/faqs/vote";
     };
     readonly HOMEPAGE: {
-        readonly GET: "/api/homepage";
-        readonly SECTIONS: "/api/homepage-sections";
         readonly CAROUSEL: "/api/carousel";
         readonly NEWSLETTER_SUBSCRIBE: "/api/newsletter/subscribe";
     };
@@ -934,10 +960,9 @@ export declare const API_ENDPOINTS: {
         readonly FEATURED: "/api/reviews?featured=true";
     };
     readonly SEARCH: {
-        readonly QUERY: (q: string, extra?: string) => string;
         readonly SUGGESTIONS: "/api/search/suggestions";
-        /** @param params — pre-built querystring (no leading `?`) from a caller-owned URLSearchParams */
-        readonly RAW: (params: string) => string;
+        /** Tier 2 — the viewer's own orders/offers/drafts/addresses. `private, no-store`. */
+        readonly SCOPED: (q: string) => string;
     };
     readonly SELLER: {
         readonly BECOME: "/api/seller/become";
@@ -1337,6 +1362,15 @@ export declare const API_ROUTES: {
          * category change in the form costs zero function invocations on a hit.
          */
         readonly DESCRIPTION_TEMPLATE: (id: string, variant?: string) => string;
+        /**
+         * The inherited `priceGuidance` band, restated on the calling seller's own
+         * tax basis — seller/admin/moderator only. Deliberately a SEPARATE
+         * endpoint from `DESCRIPTION_TEMPLATE`: that one is public and edge-cached
+         * so anyone can fetch it, and `priceGuidance` is withheld from that
+         * response for the same reason a listing's own price is hidden from guests
+         * (CLAUDE.md § "Guest price gating").
+         */
+        readonly PRICE_GUIDANCE: (id: string) => string;
     };
     readonly BEFORE_AFTER: {
         readonly LIST: "/api/before-after";
@@ -1401,8 +1435,6 @@ export declare const API_ROUTES: {
         readonly VOTE: "/api/faqs/vote";
     };
     readonly HOMEPAGE: {
-        readonly GET: "/api/homepage";
-        readonly SECTIONS: "/api/homepage-sections";
         readonly CAROUSEL: "/api/carousel";
         readonly NEWSLETTER_SUBSCRIBE: "/api/newsletter/subscribe";
     };
@@ -1455,10 +1487,9 @@ export declare const API_ROUTES: {
         readonly FEATURED: "/api/reviews?featured=true";
     };
     readonly SEARCH: {
-        readonly QUERY: (q: string, extra?: string) => string;
         readonly SUGGESTIONS: "/api/search/suggestions";
-        /** @param params — pre-built querystring (no leading `?`) from a caller-owned URLSearchParams */
-        readonly RAW: (params: string) => string;
+        /** Tier 2 — the viewer's own orders/offers/drafts/addresses. `private, no-store`. */
+        readonly SCOPED: (q: string) => string;
     };
     readonly SELLER: {
         readonly BECOME: "/api/seller/become";

package/dist/constants/api-endpoints.js

@@ -317,6 +317,15 @@ export const CATEGORY_ENDPOINTS = {
      * category change in the form costs zero function invocations on a hit.
      */
     DESCRIPTION_TEMPLATE: (id, variant) => `/api/categories/${id}/description-template${variant ? `?variant=${variant}` : ""}`,
+    /**
+     * The inherited `priceGuidance` band, restated on the calling seller's own
+     * tax basis — seller/admin/moderator only. Deliberately a SEPARATE
+     * endpoint from `DESCRIPTION_TEMPLATE`: that one is public and edge-cached
+     * so anyone can fetch it, and `priceGuidance` is withheld from that
+     * response for the same reason a listing's own price is hidden from guests
+     * (CLAUDE.md § "Guest price gating").
+     */
+    PRICE_GUIDANCE: (id) => `/api/categories/${id}/price-guidance`,
 };
 // ---------------------------------------------------------------------------
 // Tools — public surfaces that answer a question rather than sell something
@@ -333,6 +342,19 @@ export const TOOL_ENDPOINTS = {
      * its invocation allowance.
      */
     PRICE_INDEX_SEARCH: (q) => `/api/tools/price-index?q=${encodeURIComponent(q)}`,
+    /**
+     * Tier 1 adoption — the client resolved these ids LOCALLY, from the
+     * public search artifact, at zero Firestore reads. This route's only job
+     * is the multi-get `searchPriceIndex` otherwise pays for every lookup.
+     */
+    PRICE_INDEX_BANDS: (ids) => `/api/tools/price-index/bands?ids=${ids.map(encodeURIComponent).join(",")}`,
+    /**
+     * The competitor-crawl market band for the same leaves — SIGNED-IN ONLY, and
+     * therefore a separate request from `PRICE_INDEX_BANDS` rather than more
+     * fields on it. That route is public and edge-cached; this one must not be,
+     * or one signed-in lookup populates an entry every guest reads.
+     */
+    PRICE_INDEX_MARKET: (ids) => `/api/tools/price-index/market?ids=${ids.map(encodeURIComponent).join(",")}`,
 };
 /**
  * The sticker-sheet kiss-cut tracer. Admin-only, every route behind
@@ -473,8 +495,17 @@ export const FAQ_ENDPOINTS = {
 // Homepage
 // ---------------------------------------------------------------------------
 export const HOMEPAGE_ENDPOINTS = {
-    GET: "/api/homepage",
-    SECTIONS: "/api/homepage-sections",
+    /*
+     * 🛑 `GET` and `SECTIONS` were both removed 2026-10-19 — `/api/homepage` was
+     * NEVER mounted (only a dead hook referenced it), and `/api/homepage-sections`
+     * was a mounted generic-starter-kit stub writing/reading the real
+     * `homepageSections` collection through an incompatible schema. See the
+     * deletion note in `features/homepage/types/index.ts` for the full writeup.
+     * The real, single section API is `/api/admin/sections` (admin CRUD);
+     * public rendering reads `homepageSectionsRepository` directly, server-side,
+     * in `MarketplaceHomepageView` — no public GET endpoint for sections exists
+     * or is needed.
+     */
     CAROUSEL: "/api/carousel",
     NEWSLETTER_SUBSCRIBE: "/api/newsletter/subscribe",
 };
@@ -566,10 +597,9 @@ export const REVIEW_ENDPOINTS = {
 // Search
 // ---------------------------------------------------------------------------
 export const SEARCH_ENDPOINTS = {
-    QUERY: (q, extra) => `/api/search?q=${encodeURIComponent(q)}${extra ? `&${extra}` : ""}`,
     SUGGESTIONS: "/api/search/suggestions",
-    /** @param params — pre-built querystring (no leading `?`) from a caller-owned URLSearchParams */
-    RAW: (params) => `/api/search?${params}`,
+    /** Tier 2 — the viewer's own orders/offers/drafts/addresses. `private, no-store`. */
+    SCOPED: (q) => `/api/search/scoped?q=${encodeURIComponent(q)}`,
 };
 // ---------------------------------------------------------------------------
 // Seller

package/dist/constants/cache-invalidation.js

@@ -20,7 +20,9 @@ export const COLLECTION_CACHE_PATHS = {
     categories: [CATEGORY_ENDPOINTS.LIST],
     products: [PRODUCT_ENDPOINTS.LIST],
     carouselSlides: [HOMEPAGE_ENDPOINTS.CAROUSEL],
-    homepageSections: [HOMEPAGE_ENDPOINTS.SECTIONS],
+    // No public GET endpoint exists for homepageSections (removed 2026-10-19 —
+    // see HOMEPAGE_ENDPOINTS' own comment). Real-time freshness comes from
+    // `revalidatePath("/")`, which /api/admin/sections already calls on write.
     siteSettings: [SITE_SETTINGS_ENDPOINTS.GET],
     faqs: [FAQ_ENDPOINTS.LIST],
     reviews: [REVIEW_ENDPOINTS.LIST],

package/dist/constants/field-names.d.ts

@@ -49,6 +49,9 @@ export declare const PRODUCT_FIELDS: {
     readonly STOCK_QUANTITY: "stockQuantity";
     readonly AVAILABLE_QUANTITY: "availableQuantity";
     readonly IS_SOLD: "isSold";
+    readonly MADE_TO_ORDER: "madeToOrder";
+    readonly PART_GLOSSARY_ID: "partGlossaryId";
+    readonly COLOURWAY: "colourway";
     readonly MAIN_IMAGE: "mainImage";
     readonly IMAGES: "images";
     readonly VIDEO: "video";
@@ -181,6 +184,7 @@ export declare const PRODUCT_FIELDS: {
         readonly LIVE: "live";
         readonly ART: "art";
         readonly STICKERS: "stickers";
+        readonly SPARES: "spares";
     };
 };
 export declare const PRODUCT_STATUS_TRANSITIONS: Record<string, readonly string[]>;
@@ -853,6 +857,8 @@ export declare const HOMEPAGE_SECTION_FIELDS: {
     readonly ORDER: "order";
     readonly ENABLED: "enabled";
     readonly CONFIG: "config";
+    /** Which page the row belongs to. Absent on a row means "homepage". */
+    readonly SURFACE: "surface";
     readonly CREATED_AT: "createdAt";
     readonly UPDATED_AT: "updatedAt";
     readonly TYPE_VALUES: {

package/dist/constants/field-names.js

@@ -58,6 +58,9 @@ export const PRODUCT_FIELDS = {
     STOCK_QUANTITY: "stockQuantity",
     AVAILABLE_QUANTITY: "availableQuantity",
     IS_SOLD: "isSold",
+    MADE_TO_ORDER: "madeToOrder",
+    PART_GLOSSARY_ID: "partGlossaryId",
+    COLOURWAY: "colourway",
     MAIN_IMAGE: "mainImage",
     IMAGES: "images",
     VIDEO: "video",
@@ -201,6 +204,7 @@ export const PRODUCT_FIELDS = {
         LIVE: "live",
         ART: "art",
         STICKERS: "stickers",
+        SPARES: "spares",
     },
 };
 export const PRODUCT_STATUS_TRANSITIONS = {
@@ -1035,6 +1039,8 @@ export const HOMEPAGE_SECTION_FIELDS = {
     ORDER: "order",
     ENABLED: "enabled",
     CONFIG: "config",
+    /** Which page the row belongs to. Absent on a row means "homepage". */
+    SURFACE: "surface",
     CREATED_AT: "createdAt",
     UPDATED_AT: "updatedAt",
     TYPE_VALUES: {

package/dist/features/about/components/PolicyPageView.d.ts

@@ -1,6 +1,26 @@
-export type PolicyKey = "privacy" | "terms" | "cookies" | "refund" | "ethics" | "conduct";
+export type PolicyKey = "privacy" | "terms" | "cookies" | "refund" | "ethics" | "conduct" | "cancellation" | "grievance";
 export interface PolicyPageViewProps {
     /** Which policy to render */
     policy: PolicyKey;
+    /**
+     * Rendered after the policy sections and before the related links.
+     *
+     * The slot exists for /grievance, whose officer block (name, designation,
+     * email, phone) comes from `appkit.config.js` → `business.grievance` rather
+     * than from i18n — those values are deployment-specific and some are still
+     * undecided, so they render through `<PendingValue>` as a visible
+     * `[to be confirmed]` marker.
+     *
+     * 🛑 Deliberately a `children` ReactNode and not a render prop: this is an
+     * async Server Component, and a function prop would have to cross the
+     * server/client boundary at the call site to be useful. The caller builds
+     * the node and passes it down, which needs nothing serialisable.
+     *
+     * Note it renders under the i18n sections but is SKIPPED when an admin HTML
+     * override is present — an override replaces the page's body, and silently
+     * appending a block the admin cannot see or edit would make the override a
+     * half-truth.
+     */
+    children?: React.ReactNode;
 }
-export declare function PolicyPageView({ policy, }: PolicyPageViewProps): Promise<import("react").JSX.Element>;
+export declare function PolicyPageView({ policy, children, }: PolicyPageViewProps): Promise<import("react").JSX.Element>;

package/dist/features/about/components/PolicyPageView.js

@@ -58,9 +58,21 @@ const POLICY_META = {
         firestoreField: "codeOfConduct",
         relatedLabelKey: "relatedConduct",
     },
+    cancellation: {
+        path: String(ROUTES.PUBLIC.CANCELLATION_POLICY),
+        namespace: "cancellationPolicy",
+        firestoreField: "cancellation",
+        relatedLabelKey: "relatedCancellation",
+    },
+    grievance: {
+        path: String(ROUTES.PUBLIC.GRIEVANCE),
+        namespace: "grievance",
+        firestoreField: "grievance",
+        relatedLabelKey: "relatedGrievance",
+    },
 };
 const POLICY_KEYS = Object.keys(POLICY_META);
-export async function PolicyPageView({ policy, }) {
+export async function PolicyPageView({ policy, children, }) {
     const page = { container: PAGE_CONTAINER };
     const meta = POLICY_META[policy];
     const { getTranslations } = await import("next-intl/server");
@@ -93,5 +105,5 @@ export async function PolicyPageView({ policy, }) {
     }));
     return (_jsxs(Div, { className: "-mx-4 md:-mx-6 lg:-mx-8 -mt-6 sm:-mt-8 lg:-mt-10", children: [_jsx(Section, { color: "inverse", tone: "accent-banner", padding: "banner", children: _jsxs(Div, { className: `${page.container.sm}`, children: [_jsx(Heading, { color: "inverse", level: 1, variant: "none", className: "mb-3", children: t("title") }), _jsx(Text, { color: "inverse", variant: "none", className: "/80", size: "sm", children: t("lastUpdated") })] }) }), _jsxs(Div, { className: `${page.container.sm}`, padding: "content-banner", children: [adminHtml ? (
                     /* Admin-set HTML takes priority */
-                    _jsx(Div, { className: "prose max-w-none", dangerouslySetInnerHTML: { __html: adminHtml } })) : (_jsxs(_Fragment, { children: [t.has("intro") && (_jsx(Text, { variant: "secondary", className: "mb-10 leading-relaxed", size: "base", children: t("intro") })), _jsx(Stack, { gap: "xl", children: sections.map((section, i) => (_jsxs(Section, { children: [_jsx(Heading, { level: 2, className: "mb-3", children: section.heading }), _jsx(Text, { variant: "secondary", className: "leading-relaxed whitespace-pre-line", children: section.body })] }, i))) })] })), relatedLinks.length > 0 && (_jsxs(Div, { className: `mt-14 border-t`, border: "default", padding: "t-xl", children: [_jsx(Heading, { level: 3, className: "mb-3 uppercase tracking-wide", color: "muted", size: "sm", weight: "semibold", children: t("relatedTitle") }), _jsx(Row, { wrap: true, gap: "md", children: relatedLinks.map((l) => (_jsx(TextLink, { href: l.href, variant: "muted", size: "sm", children: l.label }, l.href))) })] }))] })] }));
+                    _jsx(Div, { className: "prose max-w-none", dangerouslySetInnerHTML: { __html: adminHtml } })) : (_jsxs(_Fragment, { children: [t.has("intro") && (_jsx(Text, { variant: "secondary", className: "mb-10 leading-relaxed", size: "base", children: t("intro") })), _jsx(Stack, { gap: "xl", children: sections.map((section, i) => (_jsxs(Section, { children: [_jsx(Heading, { level: 2, className: "mb-3", children: section.heading }), _jsx(Text, { variant: "secondary", className: "leading-relaxed whitespace-pre-line", children: section.body })] }, i))) }), children] })), relatedLinks.length > 0 && (_jsxs(Div, { className: `mt-14 border-t`, border: "default", padding: "t-xl", children: [_jsx(Heading, { level: 3, className: "mb-3 uppercase tracking-wide", color: "muted", size: "sm", weight: "semibold", children: t("relatedTitle") }), _jsx(Row, { wrap: true, gap: "md", children: relatedLinks.map((l) => (_jsx(TextLink, { href: l.href, variant: "muted", size: "sm", children: l.label }, l.href))) })] }))] })] }));
 }

package/dist/features/about/components/PublicProfileView.js

@@ -1,5 +1,6 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import Link from "next/link.js";
+import { productImageUrls } from "../../products/schemas/firestore.js";
 import { getPublicUserProfile, getProfileStoreProducts, getReviewsAuthoredBy, getReviewsReceivedBy } from "../../auth/actions/profile-actions.js";
 import { storeRepository } from "../../stores/repository/store.repository.js";
 import { safeRead } from "../../../errors/safe-read.js";
@@ -37,7 +38,7 @@ function toProductItem(p) {
         originalPrice: p.originalPrice,
         currency: p.currency,
         mainImage: p.mainImage,
-        images: p.images,
+        images: productImageUrls(p.images),
         status: p.status,
         condition: p.condition,
         listingType: p.listingType,

package/dist/features/about/components/ShippingPolicyView.js

@@ -1,4 +1,7 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { normalizeError } from "../../../errors/normalize.js";
+import { serverLogger } from "../../../monitoring/server-logger.js";
+import { siteSettingsRepository } from "../../../repositories/index.js";
 import { ROUTES } from "../../../constants/index.js";
 import { PAGE_CONTAINER } from "../../../_internal/shared/styles/page.js";
 import { Div, Heading, Text, Section, Stack, FlowDiagram } from "../../../ui/index.js";
@@ -8,6 +11,35 @@ export async function ShippingPolicyView({} = {}) {
     const page = { container: PAGE_CONTAINER };
     const { getTranslations } = await import("next-intl/server");
     const t = await getTranslations("shippingPolicy");
+    /*
+     * 🛑 `siteSettings.legalPages.shipping` was WRITTEN by the admin form and
+     * read by nothing.
+     *
+     * Every other legal page renders through `PolicyPageView`, which checks that
+     * group for an admin HTML override. This page does not — it has a bespoke
+     * layout with a five-step delivery diagram that a flat `sections[]` cannot
+     * express — so the override had no reader and an admin who rewrote the
+     * shipping policy saw their text saved successfully and never appear.
+     *
+     * Reading it here rather than converting the page is the deliberate choice:
+     * converting would mean flattening 38 i18n keys into `sections[]` and losing
+     * the diagram, which is a regression dressed up as consolidation.
+     */
+    let adminHtml = "";
+    try {
+        const settings = await siteSettingsRepository.getSingleton();
+        adminHtml = settings.legalPages?.shipping ?? "";
+    }
+    catch (_err) {
+        void normalizeError(_err);
+        // The i18n copy below is a complete policy in its own right, so a failed
+        // read degrades to it — but an admin who HAS overridden this page would
+        // silently see the old text, so the operator needs to know.
+        serverLogger.warn("about.shippingPolicyView: siteSettings.legalPages read failed", {
+            field: "shipping",
+            error: normalizeError(_err).message,
+        });
+    }
     const SECTIONS = [
         { title: t("orderProcessTitle"), text: t("orderProcessText") },
         { title: t("standardTitle"), text: t("standardText") },
@@ -55,5 +87,13 @@ export async function ShippingPolicyView({} = {}) {
             desc: t("diagramStatus5Desc"),
         },
     ];
-    return (_jsxs(Div, { className: "-mx-4 md:-mx-6 lg:-mx-8 -mt-6 sm:-mt-8 lg:-mt-10", children: [_jsx(Section, { color: "inverse", tone: "accent-banner", padding: "banner", children: _jsxs(Div, { className: `${page.container.sm}`, children: [_jsx(Heading, { color: "inverse", level: 1, variant: "none", className: "mb-3", children: t("title") }), _jsx(Text, { color: "inverse", variant: "none", className: "/80", children: t("lastUpdated") })] }) }), _jsxs(Div, { className: `${page.container.sm}`, padding: "content-banner", children: [_jsx(Text, { size: "lg", variant: "secondary", className: "mb-8", children: t("subtitle") }), _jsx(FlowDiagram, { title: `🚚 ${t("diagramTitle")}`, titleClass: "text-sky-700 dark:text-sky-300", connectorClass: "bg-sky-200 dark:bg-sky-800", steps: DIAGRAM_STEPS, className: "mb-10", note: `📌 ${t("diagramNote")}` }), _jsxs(Stack, { gap: "xl", children: [SECTIONS.map(({ title, text }) => (_jsxs(Section, { children: [_jsx(Heading, { level: 2, className: "mb-3", children: title }), _jsx(Text, { variant: "secondary", className: "leading-relaxed", children: text })] }, title))), _jsxs(Section, { rounded: "xl", padding: "lg", border: "default", surface: "subtle", children: [_jsx(Heading, { level: 2, className: "mb-2", children: t("contactTitle") }), _jsx(Text, { variant: "secondary", children: t("contactText") })] })] }), _jsxs(Div, { layout: "flex", gap: "6", textSize: "sm", className: `mt-12 border-t`, border: "default", padding: "t-xl", children: [_jsx(TextLink, { href: String(ROUTES.PUBLIC.TRACK_ORDER), className: CLS_FOOTER_LINK, children: t("trackOrder") }), _jsx(TextLink, { href: String(ROUTES.PUBLIC.HELP), className: CLS_FOOTER_LINK, children: t("helpCenter") }), _jsx(TextLink, { href: String(ROUTES.PUBLIC.CONTACT), className: CLS_FOOTER_LINK, children: t("contactUs") }), _jsx(TextLink, { href: String(ROUTES.PUBLIC.REFUND_POLICY), className: CLS_FOOTER_LINK, children: "Refund Policy" })] })] })] }));
+    return (_jsxs(Div, { className: "-mx-4 md:-mx-6 lg:-mx-8 -mt-6 sm:-mt-8 lg:-mt-10", children: [_jsx(Section, { color: "inverse", tone: "accent-banner", padding: "banner", children: _jsxs(Div, { className: `${page.container.sm}`, children: [_jsx(Heading, { color: "inverse", level: 1, variant: "none", className: "mb-3", children: t("title") }), _jsx(Text, { color: "inverse", variant: "none", className: "/80", children: t("lastUpdated") })] }) }), _jsxs(Div, { className: `${page.container.sm}`, padding: "content-banner", children: [adminHtml ? (
+                    /*
+                      Admin-set HTML replaces the WHOLE body — subtitle, sections,
+                      diagram and contact block — matching PolicyPageView's behaviour
+                      exactly. Rendering the override above the bundled copy would show
+                      two shipping policies on one page, and the reader has no way to
+                      know which one binds.
+                    */
+                    _jsx(Div, { className: "prose max-w-none", dangerouslySetInnerHTML: { __html: adminHtml } })) : (_jsxs(_Fragment, { children: [_jsx(Text, { size: "lg", variant: "secondary", className: "mb-8", children: t("subtitle") }), _jsx(FlowDiagram, { title: `🚚 ${t("diagramTitle")}`, titleClass: "text-sky-700 dark:text-sky-300", connectorClass: "bg-sky-200 dark:bg-sky-800", steps: DIAGRAM_STEPS, className: "mb-10", note: `📌 ${t("diagramNote")}` }), _jsxs(Stack, { gap: "xl", children: [SECTIONS.map(({ title, text }) => (_jsxs(Section, { children: [_jsx(Heading, { level: 2, className: "mb-3", children: title }), _jsx(Text, { variant: "secondary", className: "leading-relaxed", children: text })] }, title))), _jsxs(Section, { rounded: "xl", padding: "lg", border: "default", surface: "subtle", children: [_jsx(Heading, { level: 2, className: "mb-2", children: t("contactTitle") }), _jsx(Text, { variant: "secondary", children: t("contactText") })] })] })] })), _jsxs(Div, { layout: "flex", gap: "6", textSize: "sm", className: `mt-12 border-t`, border: "default", padding: "t-xl", children: [_jsx(TextLink, { href: String(ROUTES.PUBLIC.TRACK_ORDER), className: CLS_FOOTER_LINK, children: t("trackOrder") }), _jsx(TextLink, { href: String(ROUTES.PUBLIC.HELP), className: CLS_FOOTER_LINK, children: t("helpCenter") }), _jsx(TextLink, { href: String(ROUTES.PUBLIC.CONTACT), className: CLS_FOOTER_LINK, children: t("contactUs") }), _jsx(TextLink, { href: String(ROUTES.PUBLIC.REFUND_POLICY), className: CLS_FOOTER_LINK, children: "Refund Policy" })] })] })] }));
 }

package/dist/features/account/components/NotificationBell.js

@@ -109,5 +109,5 @@ function renderNotificationListContent(props) {
         return _jsx(Row, { align: "center", justify: "center", padding: "y-2xl", children: _jsx(Spinner, { size: "md" }) });
     if (notifications.length === 0)
         return (_jsxs(Stack, { justify: "center", className: "text-left", paddingY: "y-2xl", paddingX: "x-md", align: "start", children: [_jsx("svg", { className: "w-12 h-12 text-[var(--appkit-color-text-faint)] mb-3", fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", children: _jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 1.5, d: "M15 17h5l-1.405-1.405A2.032 2.032 0 0118 14.158V11a6.002 6.002 0 00-4-5.659V5a2 2 0 10-4 0v.341C7.67 6.165 6 8.388 6 11v3.159c0 .538-.214 1.055-.595 1.436L4 17h5m6 0v1a3 3 0 11-6 0v-1m6 0H9" }) }), _jsx(Text, { weight: "medium", color: "primary", children: labels.empty }), _jsx(Text, { size: "sm", className: "mt-1", color: "muted", children: labels.emptyDesc })] }));
-    return (_jsx(Ul, { children: notifications.map((notification) => (_jsxs(Li, { layout: "flex-start", gap: "3", padding: "inline", className: `group border-b border-[var(--appkit-color-border)] last:border-0 transition-colors hover:bg-[var(--appkit-color-bg)] dark:hover:bg-[var(--appkit-color-surface-elevated)] ${!notification.isRead ? "bg-primary/5 dark:bg-primary/10" : ""}`, children: [_jsx(Span, { size: "xl", className: "flex-shrink-0 mt-0.5", children: notificationIcons[notification.type] ?? "🔔" }), _jsxs(Div, { className: "flex-1 min-w-0", children: [_jsxs(Row, { align: "start", justify: "between", gap: "xs", children: [_jsxs(Text, { size: "sm", className: "leading-tight", color: "primary", weight: "medium", children: [notification.title, !notification.isRead && _jsx(Span, { className: "ml-1.5 inline-block w-2 h-2 bg-primary flex-shrink-0 align-middle", rounded: "full" })] }), _jsx(Span, { size: "xs", className: "flex-shrink-0", color: "muted", children: formatRelativeTime(notification.createdAt) })] }), _jsx(Text, { size: "sm", className: `mt-0.5`, truncate: 2, color: "muted", children: notification.message }), _jsxs(Row, { gap: "3", className: "mt-1.5", children: [notification.actionUrl && renderActionLink({ href: notification.actionUrl, onClick: () => { void handleMarkReadAndClose(notification); }, className: "text-[length:var(--appkit-text-xs)] text-primary hover:underline font-medium", children: notification.actionLabel ?? labels.viewAction }), !notification.isRead && _jsx(Button, { variant: "ghost", onClick: () => void handleMarkRead(notification.id), className: "text-[length:var(--appkit-text-xs)] text-[var(--appkit-color-text-muted)] hover:text-zinc-700 hover:text-[var(--appkit-color-text-muted)] hover:underline p-[var(--appkit-space-0)] h-auto", children: labels.markRead })] })] })] }, notification.id))) }));
+    return (_jsx(Ul, { children: notifications.map((notification) => (_jsxs(Li, { layout: "flex-start", gap: "3", padding: "inline", className: `group border-b border-[var(--appkit-color-border)] last:border-0 transition-colors hover:bg-[var(--appkit-color-bg)] dark:hover:bg-[var(--appkit-color-surface-elevated)] ${!notification.isRead ? "bg-primary/5 dark:bg-primary/10" : ""}`, children: [_jsx(Span, { size: "xl", className: "flex-shrink-0 mt-0.5", children: notificationIcons[notification.type] ?? "🔔" }), _jsxs(Div, { className: "flex-1 min-w-0", children: [_jsxs(Row, { align: "start", justify: "between", gap: "xs", children: [_jsxs(Text, { size: "sm", className: "leading-tight", color: "primary", weight: "medium", children: [notification.title, !notification.isRead && _jsx(Span, { className: "ml-1.5 inline-block w-2 h-2 bg-primary flex-shrink-0 align-middle", rounded: "full" })] }), _jsx(Span, { size: "xs", className: "flex-shrink-0", color: "muted", children: formatRelativeTime(notification.createdAt) })] }), _jsx(Text, { size: "sm", className: `mt-0.5`, truncate: 2, color: "muted", children: notification.message }), _jsxs(Row, { gap: "3", className: "mt-1.5", children: [notification.actionUrl && renderActionLink({ href: notification.actionUrl, onClick: () => { void handleMarkReadAndClose(notification); }, className: "text-[length:var(--appkit-text-xs)] text-primary hover:underline font-medium", children: notification.actionLabel ?? labels.viewAction }), !notification.isRead && _jsx(Button, { variant: "ghost", onClick: () => void handleMarkRead(notification.id), className: "text-[length:var(--appkit-text-xs)] text-[var(--appkit-color-text-muted)] hover:text-[var(--appkit-color-text)] hover:underline p-[var(--appkit-space-0)] h-auto", children: labels.markRead })] })] })] }, notification.id))) }));
 }

package/dist/features/account/hooks/useProfileStats.js

@@ -4,7 +4,11 @@ import { ACCOUNT_ENDPOINTS } from "../../../constants/api-endpoints.js";
 export function useProfileStats(enabled) {
     const { data: ordersData, isLoading: ordersLoading } = useQuery({
         queryKey: ["user-orders-count"],
-        queryFn: () => apiClient.get(ACCOUNT_ENDPOINTS.ORDERS),
+        queryFn: () => 
+        // `items`, not `orders` — GET /api/user/orders emits the shared list
+        // envelope. Only `total` is read below, so the wrong key never threw
+        // here; it was a false declaration waiting for someone to read it.
+        apiClient.get(ACCOUNT_ENDPOINTS.ORDERS),
         enabled,
     });
     const { data: addressesData, isLoading: addressesLoading } = useQuery({

package/dist/features/addresses/repository/addresses.repository.d.ts

@@ -1,3 +1,4 @@
+import type { JsonValue } from "../../../schemas/types";
 import { BaseRepository } from "../../../providers/db-firebase";
 import { type AddressBanStatus, type AddressCreateInput, type AddressDocument, type AddressPlain, type AddressOwnerType, type AddressUpdateInput } from "../schemas";
 export declare class AddressesRepository extends BaseRepository<AddressDocument> {
@@ -14,6 +15,21 @@ export declare class AddressesRepository extends BaseRepository<AddressDocument>
      * call.
      */
     protected piiFields: readonly ["fullName", "phone", "addressLine1", "addressLine2"];
+    /**
+     * Admin search by name, without decryption. ONLY `fullName` — never
+     * `addressLine1`: "find everyone on Brigade Road" is not a capability
+     * admin needs and is the single most re-identifying field on the
+     * document. See `security/blind-index-tokens.ts` for why this is
+     * whole-word rather than a prefix-expanded index.
+     *
+     * Runs through `applyWriteHooks`, so it reaches every write path
+     * including a seed load — which is what makes it survive the tester
+     * harness's cascade on `addresses` (it references `ownerId`, a
+     * PRESERVE-tier user, so the row itself is never actually wiped — but
+     * the field regenerating on every write is what makes that true by
+     * construction rather than by luck).
+     */
+    protected buildTokensIndexFor(data: Record<string, JsonValue>): Record<string, string[]> | null;
     /** Plaintext PII. **Opt-in and named** — shows up in review and in a grep. */
     revealAddress(doc: AddressDocument): AddressPlain;
     /** As `revealAddress`, for a list read. */

package/dist/features/addresses/repository/addresses.repository.js

@@ -14,6 +14,7 @@ import { DatabaseError } from "../../../errors/index.js";
 import { serverLogger } from "../../../monitoring/index.js";
 import { BaseRepository, getFirestoreCount, prepareForFirestore, } from "../../../providers/db-firebase/index.js";
 import { maskPii, revealPii, ADDRESS_PII_FIELDS, } from "../../../security/index.js";
+import { buildTokensIndex } from "../../../security/blind-index-tokens.js";
 import { ADDRESS_FIELDS, ADDRESSES_COLLECTION, } from "../schemas/index.js";
 export class AddressesRepository extends BaseRepository {
     constructor() {
@@ -31,6 +32,26 @@ export class AddressesRepository extends BaseRepository {
          */
         this.piiFields = ADDRESS_PII_FIELDS;
     }
+    /**
+     * Admin search by name, without decryption. ONLY `fullName` — never
+     * `addressLine1`: "find everyone on Brigade Road" is not a capability
+     * admin needs and is the single most re-identifying field on the
+     * document. See `security/blind-index-tokens.ts` for why this is
+     * whole-word rather than a prefix-expanded index.
+     *
+     * Runs through `applyWriteHooks`, so it reaches every write path
+     * including a seed load — which is what makes it survive the tester
+     * harness's cascade on `addresses` (it references `ownerId`, a
+     * PRESERVE-tier user, so the row itself is never actually wiped — but
+     * the field regenerating on every write is what makes that true by
+     * construction rather than by luck).
+     */
+    buildTokensIndexFor(data) {
+        const fullName = typeof data.fullName === "string" ? data.fullName : undefined;
+        if (!fullName)
+            return null;
+        return { nameTokensIndex: buildTokensIndex(fullName) };
+    }
     /*
      * 🛑 `mapDoc` is NOT overridden, and that absence IS the change.
      *

package/dist/features/admin/actions/admin-actions.js

@@ -238,7 +238,22 @@ export async function adminUpdateProduct(adminId, id, input) {
         finalized.mainImage = await finalizeStagedMediaUrl(finalized.mainImage);
     }
     if (Array.isArray(finalized.images) && finalized.images.length > 0) {
-        finalized.images = await finalizeStagedMediaArray(finalized.images);
+        /*
+         * 🛑 Finalise the URL and KEEP THE REST OF THE OBJECT (A6).
+         *
+         * `finalizeStagedMediaArray` takes and returns `string[]` — it moves
+         * staged uploads to their permanent path. Handing it
+         * `images.map(i => i.url)` and assigning the result back would have
+         * silently dropped `alt`, `width`, `height` and `thumbnailUrl` on every
+         * admin save: the exact lossy-write failure `toProductImages` carries its
+         * own warning about, on the one code path where a human has just typed
+         * the alt text.
+         */
+        const finalisedUrls = await finalizeStagedMediaArray(finalized.images.map((img) => img.url));
+        finalized.images = finalized.images.map((img, i) => ({
+            ...img,
+            url: finalisedUrls[i] ?? img.url,
+        }));
     }
     if (finalized.video?.url) {
         finalized.video = {

package/dist/features/admin/components/AdminCategoryEditorView.js

@@ -115,6 +115,14 @@ const categoryFormSchema = z.object({
         .optional()
         .or(z.literal("")),
     highlightsText: z.string().optional().or(z.literal("")),
+    /*
+     * The Hasbro / international-market name for a generation wave, rendered on
+     * the category page as "Also known as". Editable here because wave naming is
+     * editorial and gets corrected — the seed deliberately leaves it unset
+     * wherever a divergence is not evidenced, and this is how one gets filled in
+     * later without a reseed.
+     */
+    hasbroName: z.string().max(120, "Keep the name under 120 characters").optional().or(z.literal("")),
     taxCodeId: z.string().optional().or(z.literal("")),
     defaultCondition: z.string().optional().or(z.literal("")),
     defaultAuthenticity: z.string().optional().or(z.literal("")),
@@ -145,6 +153,7 @@ const EMPTY_VALUES = {
     showInMenu: true,
     contentBody: "",
     highlightsText: "",
+    hasbroName: "",
     taxCodeId: "",
     defaultCondition: "",
     defaultAuthenticity: "",
@@ -245,6 +254,13 @@ function buildContentPayload(v, faqs, specs, templates, carriedPriceGuidance) {
         contentBody: String(v.contentBody ?? ""),
         highlights: linesToList(String(v.highlightsText ?? "")),
         faqs: faqs.filter((f) => f.question.trim() !== "" && f.answer.trim() !== ""),
+        /*
+         * Omitted when blank rather than sent as `""`. The route schema is
+         * `.min(1)`, so an empty string is a 400 — and "I cleared the field" has
+         * to mean "do not write it", not "write an empty string every reader then
+         * has to treat as absent".
+         */
+        ...(String(v.hasbroName ?? "").trim() ? { hasbroName: String(v.hasbroName).trim() } : {}),
         descriptionTemplates: templates
             .filter((t) => t.label.trim() !== "" && t.body.trim() !== "")
             .map((t) => ({ ...t, id: t.id || toCategorySlug(t.label) || "template" })),
@@ -316,6 +332,7 @@ export function AdminCategoryEditorView({ categoryId, onSaved, onDeleted, embedd
             showInMenu: cat.display?.showInMenu ?? true,
             contentBody: cat.contentBody ?? "",
             highlightsText: listToLines(cat.highlights),
+            hasbroName: cat.hasbroName ?? "",
             taxCodeId: cat.productDefaults?.taxCodeId ?? "",
             defaultCondition: cat.productDefaults?.defaultCondition ?? "",
             defaultAuthenticity: cat.productDefaults?.defaultAuthenticity ?? "",
@@ -430,8 +447,8 @@ export function AdminCategoryEditorView({ categoryId, onSaved, onDeleted, embedd
                 {
                     id: "content",
                     label: "Content & Templates",
-                    fields: ["contentBody", "highlightsText"],
-                    render: ({ values: v, onChange, errors }) => (_jsxs(Stack, { gap: "md", children: [_jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "medium", children: "Category page body" }), _jsx(Textarea, { value: String(v.contentBody ?? ""), onChange: (e) => onChange({ contentBody: e.target.value }), rows: 8, placeholder: "400\u2013900 characters of keyword-rich HTML with links to sibling and parent categories\u2026" }), errors.contentBody ? (_jsx(Text, { size: "sm", variant: "error", role: "alert", children: errors.contentBody })) : (_jsx(Text, { size: "xs", color: "muted", children: "Rendered on the category page. Distinct from the short Description above, which also feeds the SEO meta and every card. 36 of worldhobbyshop's 46 categories carry one of these and it is their actual ranking mechanism; no Shopify competitor in the crawl has any." }))] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "medium", children: "Highlights \u2014 one per line" }), _jsx(Textarea, { value: String(v.highlightsText ?? ""), onChange: (e) => onChange({ highlightsText: e.target.value }), rows: 4, placeholder: "Genuine Takara Tomy stock\nChecked and photographed before listing" }), _jsx(Text, { size: "xs", color: "muted", children: "Short \"why shop this\" bullets, shown above the FAQs. Blank lines are dropped. Up to 12." })] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "medium", children: "Category FAQs" }), _jsx(Text, { size: "xs", color: "muted", children: "Rendered as an accordion on the category page and emitted as FAQPage structured data. Keep platform-wide answers in the global FAQ collection instead \u2014 two copies of one answer means the one that gets fixed is never the one being read." }), _jsx(Repeater, { rows: faqs, onChange: setFaqs, blank: () => ({ question: "", answer: "" }), addLabel: "Add an FAQ", max: 20, renderRow: (row, set) => (_jsxs(_Fragment, { children: [_jsx(Input, { label: "Question", value: row.question, onChange: (e) => set({ question: e.target.value }), placeholder: "Are these compatible with Burst launchers?" }), _jsx(Textarea, { value: row.answer, onChange: (e) => set({ answer: e.target.value }), rows: 3, placeholder: "Answer\u2026" })] })) })] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "medium", children: "Description templates" }), _jsxs(Text, { size: "xs", color: "muted", children: ["What the seller form offers when a listing is filed here. One per condition band \u2014 worldhobbyshop reuses exactly two across 1,195 listings. Slots like", " ", _jsx(Span, { family: "mono", children: "{{title}}" }), ",", " ", _jsx(Span, { family: "mono", children: "{{brand}}" }), ",", " ", _jsx(Span, { family: "mono", children: "{{condition}}" }), " and", " ", _jsx(Span, { family: "mono", children: "{{series}}" }), " are filled from the listing; an unresolved one becomes empty and is reported to the seller, never left as a literal brace pair."] }), _jsx(Repeater, { rows: templates, onChange: setTemplates, blank: () => ({ id: "", label: "", variant: "default", body: "" }), addLabel: "Add a template", max: 8, renderRow: (row, set) => (_jsxs(_Fragment, { children: [_jsxs(Div, { layout: "grid", gap: "4", className: "sm:grid-cols-2", children: [_jsx(Input, { label: "Label", value: row.label, onChange: (e) => set({ label: e.target.value }), placeholder: "Pre-owned \u2014 condition as pictured" }), _jsx(Select, { label: "Condition band", value: row.variant, onChange: (e) => set({ variant: e.target.value }), options: TEMPLATE_VARIANT_OPTIONS })] }), _jsx(Textarea, { value: row.body, onChange: (e) => set({ body: e.target.value }), rows: 6, placeholder: "Important things to know about {{title}} \u2014 HTML permitted\u2026" }), _jsx(Text, { size: "xs", color: "muted", children: usedPlaceholders(row.body).length > 0
+                    fields: ["contentBody", "highlightsText", "hasbroName"],
+                    render: ({ values: v, onChange, errors }) => (_jsxs(Stack, { gap: "md", children: [_jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "medium", children: "Category page body" }), _jsx(Textarea, { value: String(v.contentBody ?? ""), onChange: (e) => onChange({ contentBody: e.target.value }), rows: 8, placeholder: "400\u2013900 characters of keyword-rich HTML with links to sibling and parent categories\u2026" }), errors.contentBody ? (_jsx(Text, { size: "sm", variant: "error", role: "alert", children: errors.contentBody })) : (_jsx(Text, { size: "xs", color: "muted", children: "Rendered on the category page. Distinct from the short Description above, which also feeds the SEO meta and every card. 36 of worldhobbyshop's 46 categories carry one of these and it is their actual ranking mechanism; no Shopify competitor in the crawl has any." }))] }), _jsx(FieldInput, { name: "hasbroName", label: "Hasbro / international name", value: String(v.hasbroName ?? ""), onChange: (val) => onChange({ hasbroName: val }), placeholder: "e.g. Beyblade Burst Turbo", error: errors.hasbroName, hint: "Only when the Hasbro season name genuinely differs from the Takara-Tomy one \u2014 Cho-Z ships as Turbo, God as Evolution. Rendered on the category page as 'Also known as'. Leave blank if there is no divergence, or if you cannot confirm one: a guessed pairing reads as fact." }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "medium", children: "Highlights \u2014 one per line" }), _jsx(Textarea, { value: String(v.highlightsText ?? ""), onChange: (e) => onChange({ highlightsText: e.target.value }), rows: 4, placeholder: "Genuine Takara Tomy stock\nChecked and photographed before listing" }), _jsx(Text, { size: "xs", color: "muted", children: "Short \"why shop this\" bullets, shown above the FAQs. Blank lines are dropped. Up to 12." })] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "medium", children: "Category FAQs" }), _jsx(Text, { size: "xs", color: "muted", children: "Rendered as an accordion on the category page and emitted as FAQPage structured data. Keep platform-wide answers in the global FAQ collection instead \u2014 two copies of one answer means the one that gets fixed is never the one being read." }), _jsx(Repeater, { rows: faqs, onChange: setFaqs, blank: () => ({ question: "", answer: "" }), addLabel: "Add an FAQ", max: 20, renderRow: (row, set) => (_jsxs(_Fragment, { children: [_jsx(Input, { label: "Question", value: row.question, onChange: (e) => set({ question: e.target.value }), placeholder: "Are these compatible with Burst launchers?" }), _jsx(Textarea, { value: row.answer, onChange: (e) => set({ answer: e.target.value }), rows: 3, placeholder: "Answer\u2026" })] })) })] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "medium", children: "Description templates" }), _jsxs(Text, { size: "xs", color: "muted", children: ["What the seller form offers when a listing is filed here. One per condition band \u2014 worldhobbyshop reuses exactly two across 1,195 listings. Slots like", " ", _jsx(Span, { family: "mono", children: "{{title}}" }), ",", " ", _jsx(Span, { family: "mono", children: "{{brand}}" }), ",", " ", _jsx(Span, { family: "mono", children: "{{condition}}" }), " and", " ", _jsx(Span, { family: "mono", children: "{{series}}" }), " are filled from the listing; an unresolved one becomes empty and is reported to the seller, never left as a literal brace pair."] }), _jsx(Repeater, { rows: templates, onChange: setTemplates, blank: () => ({ id: "", label: "", variant: "default", body: "" }), addLabel: "Add a template", max: 8, renderRow: (row, set) => (_jsxs(_Fragment, { children: [_jsxs(Div, { layout: "grid", gap: "4", className: "sm:grid-cols-2", children: [_jsx(Input, { label: "Label", value: row.label, onChange: (e) => set({ label: e.target.value }), placeholder: "Pre-owned \u2014 condition as pictured" }), _jsx(Select, { label: "Condition band", value: row.variant, onChange: (e) => set({ variant: e.target.value }), options: TEMPLATE_VARIANT_OPTIONS })] }), _jsx(Textarea, { value: row.body, onChange: (e) => set({ body: e.target.value }), rows: 6, placeholder: "Important things to know about {{title}} \u2014 HTML permitted\u2026" }), _jsx(Text, { size: "xs", color: "muted", children: usedPlaceholders(row.body).length > 0
                                                         ? `Slots used: ${usedPlaceholders(row.body).map((p) => `{{${p}}}`).join(", ")}`
                                                         : "No slots used — this body will read identically on every listing." })] })) })] })] })),
                 },

package/dist/features/admin/components/AdminNavigationView.js

@@ -12,7 +12,7 @@ const __O = {
     hidden: "overflow-hidden",
 };
 function NavItemRow({ item, idx, total, reorderPending, onMoveUp, onMoveDown, onVisibilityChange, onEdit, onDelete, }) {
-    return (_jsxs(Row, { surface: "default", padding: "inline", align: "center", gap: "3", children: [_jsxs(Stack, { className: "shrink-0 gap-[0.125rem]", children: [_jsx(Button, { variant: "ghost", type: "button", onClick: () => onMoveUp(idx), disabled: idx === 0 || reorderPending, className: "text-zinc-400 hover:text-zinc-700 hover:text-[var(--appkit-color-text-muted)] disabled:opacity-30 leading-none text-[length:var(--appkit-text-xs)] p-[var(--appkit-space-0)] min-h-0 h-auto rounded-none", "aria-label": "Move up", children: "\u25B2" }), _jsx(Button, { variant: "ghost", type: "button", onClick: () => onMoveDown(idx), disabled: idx >= total - 1 || reorderPending, className: "text-zinc-400 hover:text-zinc-700 hover:text-[var(--appkit-color-text-muted)] disabled:opacity-30 leading-none text-[length:var(--appkit-text-xs)] p-[var(--appkit-space-0)] min-h-0 h-auto rounded-none", "aria-label": "Move down", children: "\u25BC" })] }), _jsxs(Div, { className: "flex-1 min-w-0", children: [_jsxs(Text, { className: "truncate", color: "primary", size: "sm", weight: "medium", children: [item.parentId ? _jsx(Span, { className: "mr-1", color: "faint", children: "\u21B3" }) : null, item.label] }), _jsx(Text, { className: "truncate", color: "muted", size: "xs", children: item.href })] }), _jsx(Toggle, { checked: item.isVisible ?? true, onChange: (val) => onVisibilityChange(item.id, val), label: "" }), _jsx(RowActionMenu, { actions: [
+    return (_jsxs(Row, { surface: "default", padding: "inline", align: "center", gap: "3", children: [_jsxs(Stack, { className: "shrink-0 gap-[0.125rem]", children: [_jsx(Button, { variant: "ghost", type: "button", onClick: () => onMoveUp(idx), disabled: idx === 0 || reorderPending, className: "text-zinc-400 hover:text-[var(--appkit-color-text)] disabled:opacity-30 leading-none text-[length:var(--appkit-text-xs)] p-[var(--appkit-space-0)] min-h-0 h-auto rounded-none", "aria-label": "Move up", children: "\u25B2" }), _jsx(Button, { variant: "ghost", type: "button", onClick: () => onMoveDown(idx), disabled: idx >= total - 1 || reorderPending, className: "text-zinc-400 hover:text-[var(--appkit-color-text)] disabled:opacity-30 leading-none text-[length:var(--appkit-text-xs)] p-[var(--appkit-space-0)] min-h-0 h-auto rounded-none", "aria-label": "Move down", children: "\u25BC" })] }), _jsxs(Div, { className: "flex-1 min-w-0", children: [_jsxs(Text, { className: "truncate", color: "primary", size: "sm", weight: "medium", children: [item.parentId ? _jsx(Span, { className: "mr-1", color: "faint", children: "\u21B3" }) : null, item.label] }), _jsx(Text, { className: "truncate", color: "muted", size: "xs", children: item.href })] }), _jsx(Toggle, { checked: item.isVisible ?? true, onChange: (val) => onVisibilityChange(item.id, val), label: "" }), _jsx(RowActionMenu, { actions: [
                     { label: ROW_ACTION_META[ROW_ACTION_ID.EDIT].label, onClick: () => onEdit(item) },
                     { label: ROW_ACTION_META[ROW_ACTION_ID.DELETE].label, destructive: true, onClick: () => onDelete(item) },
                 ] })] }));