@mohasinac/appkit 4.53.1 → 4.54.0

package/dist/_internal/shared/features/site-settings/supplier-of-record.js

@@ -0,0 +1,57 @@
+/**
+ * The platform's own supplier-of-record identity, injected once at boot.
+ *
+ * ── Why this seam exists ──────────────────────────────────────────────────
+ *
+ * `appkit.config.js → business` is documented as "THE one owner of the
+ * business's statutory identity", and it records what it was created to end:
+ * the legal name, address, GSTIN and support channels had lived in five places
+ * that already disagreed — four different support addresses published, the
+ * registered address saying Solapur while the warehouse said Hyderabad.
+ *
+ * But that file belongs to the CONSUMER, and appkit has no runtime reader for
+ * it. `resolveSupplierIdentity` therefore read `siteSettings.gst.*` instead,
+ * which quietly made the invoice path a SIXTH owner — and the one that decides
+ * what a tax invoice says about who issued it.
+ *
+ * So the consumer injects it at boot, the same way `configureMarketDefaults`
+ * injects currency and locale: one call in `providers.config.ts`, values read
+ * from `src/constants/business.ts`, which reads `appkit.config.js`. One owner,
+ * one hop.
+ *
+ * 🛑 This is NOT a cache of site settings and must not become one. Whether to
+ * charge GST at all stays `siteSettings.gst.enabled` — an operational switch an
+ * admin owns. WHO the supplier is is a fact about the registered entity, is
+ * legally required to be published, and belongs in a committed file.
+ *
+ * @tag domain:site-settings
+ * @tag layer:shared
+ * @tag access:isomorphic
+ * @tag sideEffects:module-state
+ */
+let _identity = {};
+/**
+ * Register the platform's statutory identity. Call once, at boot.
+ *
+ * Merges rather than replaces, so a partial call cannot blank a field that was
+ * already supplied — the same shape `configureMarketDefaults` uses.
+ */
+export function configurePlatformSupplier(identity) {
+    _identity = { ..._identity, ...identity };
+}
+/**
+ * The registered identity, or an empty object when nothing was injected.
+ *
+ * 🛑 Returns `{}` rather than throwing, and the caller must treat a missing
+ * GSTIN as "not a tax invoice" — which `resolveSupplierIdentity` already does
+ * via `source: "none"`. Throwing here would turn a misconfigured deployment
+ * into a failed CHECKOUT, and an order that cannot be placed is worse than an
+ * invoice that correctly declines to call itself a tax invoice.
+ */
+export function getPlatformSupplier() {
+    return _identity;
+}
+/** Reset — for tests and for the seed CLI's isolated runs. */
+export function resetPlatformSupplier() {
+    _identity = {};
+}

package/dist/_internal/shared/fees/calculator.d.ts

@@ -82,14 +82,6 @@ export interface CodHandlingFeeRates {
 }
 /** COD handling fee charged to the buyer: max(fixed floor, subtotal × percent). */
 export declare function computeCodHandlingFee(subtotal: number, rates: CodHandlingFeeRates): number;
-export interface WhatsAppNotifyFeeRates {
-    /** Admin master toggle — the addon isn't charged (even if the buyer selected it) unless this is true. */
-    whatsappNotifyFeeEnabled?: boolean;
-    /** Flat rupee fee charged when the buyer opts in. Falls back to ₹10. */
-    whatsappNotifyFee?: number;
-}
-/** Flat WhatsApp order-updates addon fee — charged only when the buyer opted in AND the admin has the addon enabled. */
-export declare function computeWhatsAppNotifyFee(addonSelected: boolean, rates: WhatsAppNotifyFeeRates): number;
 export interface GiftWrapFeeRates {
     /** Admin master toggle — the addon isn't charged (even if the buyer selected it) unless this is true. */
     giftWrapFeeEnabled?: boolean;

package/dist/_internal/shared/fees/calculator.js

@@ -82,13 +82,6 @@ export function computeCodHandlingFee(subtotal, rates) {
     const percentFee = roundRupees(subtotal * (percent / 100));
     return Math.max(min, percentFee);
 }
-const DEFAULT_WHATSAPP_NOTIFY_FEE = 10;
-/** Flat WhatsApp order-updates addon fee — charged only when the buyer opted in AND the admin has the addon enabled. */
-export function computeWhatsAppNotifyFee(addonSelected, rates) {
-    if (!addonSelected || !rates.whatsappNotifyFeeEnabled)
-        return 0;
-    return rates.whatsappNotifyFee ?? DEFAULT_WHATSAPP_NOTIFY_FEE;
-}
 const DEFAULT_GIFT_WRAP_FEE = 49;
 /** Flat gift-wrap addon fee — charged only when the buyer opted in AND the admin has the addon enabled. */
 export function computeGiftWrapFee(addonSelected, rates) {

package/dist/_internal/shared/listing-types/tiers.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Which listing types a store may create: the basic/advanced split.
+ *
+ * ── The rule ──────────────────────────────────────────────────────────────
+ *
+ * `standard`, `spares` and `auction` are BASIC — every store can use them.
+ * The other seven are ADVANCED and need the `advanced_listing_types`
+ * capability, because each carries an obligation a new seller has not agreed
+ * to yet: a pre-order takes money for stock that does not exist, a prize draw
+ * is a regulated promotion, a classified happens off-platform with no escrow,
+ * a digital code must be delivered from a pool the seller has to keep stocked,
+ * and a live listing is an animal.
+ *
+ * ── Why a Record and not an array ─────────────────────────────────────────
+ *
+ * 🛑 `Record<ListingType, ListingTypeTier>`, so adding a member to the union
+ * is a COMPILE error here rather than a silent omission that defaults to
+ * whichever branch the code happens to fall through to.
+ * `features/products/types/index.ts` warns that adding a union member touches
+ * 21 named sites of which only 11 are compile-checked; this file is written to
+ * be one of the eleven. Root Cause #61.
+ *
+ * ── Why `capabilities` is `readonly string[]` and not `StoreCapability[]` ──
+ *
+ * Two reasons, and the first is the honest one: that is what is actually
+ * STORED. `storeFirestoreSchema` validates the field as `z.array(z.string())`,
+ * so a capability that is not a union member round-trips today and this helper
+ * must not pretend otherwise. The second is that it keeps this module free of
+ * an import from `features/auth/permissions/constants`, which is the kind of
+ * cross-feature edge `audit-import-cycles` exists to watch.
+ *
+ * A `StoreCapability[]` is assignable to it, so a typed caller loses nothing.
+ */
+import type { ListingType } from "../../../features/products/types/index";
+import type { JsonValue } from "../../../schemas/types";
+export type ListingTypeTier = "basic" | "advanced";
+/**
+ * The capability that unlocks every advanced type at once.
+ *
+ * One flag rather than seven, deliberately: the question a seller is actually
+ * answering is "do I want the complicated listing kinds", and seven checkboxes
+ * invite six of them to be wrong. An admin who needs finer control has the
+ * per-type legacy grants below.
+ */
+export declare const ADVANCED_LISTING_TYPE_CAPABILITY = "advanced_listing_types";
+export declare const LISTING_TYPE_TIER: Record<ListingType, ListingTypeTier>;
+export declare function isAdvancedListingType(listingType: ListingType): boolean;
+/**
+ * Does this capability array carry the advanced-types grant?
+ *
+ * Exists so no call site has to spell the capability string, and so none has
+ * to cast: `capabilities` is `StoreCapability[]` in typed code and
+ * `string[]` as stored, and an `.includes()` across that boundary is where an
+ * `as never` gets reached for — which silences every other check on the
+ * expression, not just the one being worked around.
+ */
+export declare function hasAdvancedListingTypes(capabilities: readonly string[] | null | undefined): boolean;
+/** The types every store can use, with no capability at all. */
+export declare const BASIC_LISTING_TYPES: ListingType[];
+export declare const ADVANCED_LISTING_TYPES: ListingType[];
+export interface ListingTypeAccessContext {
+    /** Admins and employees bypass the tier entirely. */
+    isPrivileged?: boolean;
+    /** The store's stored capability array. Absent/empty is treated as none. */
+    capabilities?: readonly string[] | null;
+}
+/**
+ * May this store create or convert to this listing type?
+ *
+ * Pure — takes the capability array the caller already holds rather than
+ * re-reading the store. Every gate site in the codebase has the store document
+ * in scope already, and a helper that fetched would add one Firestore read per
+ * product write against Rule #6's round-trip budget.
+ */
+export declare function isListingTypeAllowedFor(listingType: ListingType, ctx?: ListingTypeAccessContext): boolean;
+/** Every type this store may use, for building a picker or filtering nav. */
+export declare function listingTypesAllowedFor(ctx?: ListingTypeAccessContext): ListingType[];
+/**
+ * Throwing form, for the server-side write paths.
+ *
+ * 🛑 `listingType` being absent is ALLOWED and must stay that way. Both product
+ * schemas declare it optional, and a partial update that touches only `status`
+ * or `stockQuantity` carries no type at all — refusing those would break every
+ * stock decrement and status flip in the app. The gate's job is to refuse a
+ * NAMED advanced type, not to require one.
+ *
+ * 🛑 On an UPDATE, the caller must additionally compare against the STORED
+ * type and skip this when they match — see `sellerUpdateProduct`. Every
+ * per-type edit page re-sends its own type literal, so asserting on the
+ * submitted value alone locks a seller out of editing listings they already
+ * own as soon as the capability is withdrawn. The rule is about creating and
+ * converting, not about touching.
+ */
+export declare function assertListingTypeAllowed(listingType: JsonValue | undefined, ctx?: ListingTypeAccessContext): void;

package/dist/_internal/shared/listing-types/tiers.js

@@ -0,0 +1,150 @@
+/**
+ * Which listing types a store may create: the basic/advanced split.
+ *
+ * ── The rule ──────────────────────────────────────────────────────────────
+ *
+ * `standard`, `spares` and `auction` are BASIC — every store can use them.
+ * The other seven are ADVANCED and need the `advanced_listing_types`
+ * capability, because each carries an obligation a new seller has not agreed
+ * to yet: a pre-order takes money for stock that does not exist, a prize draw
+ * is a regulated promotion, a classified happens off-platform with no escrow,
+ * a digital code must be delivered from a pool the seller has to keep stocked,
+ * and a live listing is an animal.
+ *
+ * ── Why a Record and not an array ─────────────────────────────────────────
+ *
+ * 🛑 `Record<ListingType, ListingTypeTier>`, so adding a member to the union
+ * is a COMPILE error here rather than a silent omission that defaults to
+ * whichever branch the code happens to fall through to.
+ * `features/products/types/index.ts` warns that adding a union member touches
+ * 21 named sites of which only 11 are compile-checked; this file is written to
+ * be one of the eleven. Root Cause #61.
+ *
+ * ── Why `capabilities` is `readonly string[]` and not `StoreCapability[]` ──
+ *
+ * Two reasons, and the first is the honest one: that is what is actually
+ * STORED. `storeFirestoreSchema` validates the field as `z.array(z.string())`,
+ * so a capability that is not a union member round-trips today and this helper
+ * must not pretend otherwise. The second is that it keeps this module free of
+ * an import from `features/auth/permissions/constants`, which is the kind of
+ * cross-feature edge `audit-import-cycles` exists to watch.
+ *
+ * A `StoreCapability[]` is assignable to it, so a typed caller loses nothing.
+ */
+import { AuthorizationError } from "../../../errors/index.js";
+import { ALL_LISTING_TYPES } from "./feature-flags.js";
+/**
+ * The capability that unlocks every advanced type at once.
+ *
+ * One flag rather than seven, deliberately: the question a seller is actually
+ * answering is "do I want the complicated listing kinds", and seven checkboxes
+ * invite six of them to be wrong. An admin who needs finer control has the
+ * per-type legacy grants below.
+ */
+export const ADVANCED_LISTING_TYPE_CAPABILITY = "advanced_listing_types";
+export const LISTING_TYPE_TIER = {
+    standard: "basic",
+    spares: "basic",
+    auction: "basic",
+    "pre-order": "advanced",
+    "prize-draw": "advanced",
+    classified: "advanced",
+    "digital-code": "advanced",
+    live: "advanced",
+    art: "advanced",
+    stickers: "advanced",
+};
+/**
+ * Capabilities that grant ONE advanced type on their own, for stores that were
+ * granted it before `advanced_listing_types` existed.
+ *
+ * 🛑 Load-bearing, not politeness. `host_preorders` is a real capability some
+ * live stores already carry; dropping it would silently revoke pre-order
+ * access from a seller who had been using it, and a permission that disappears
+ * on deploy is indistinguishable from a bug.
+ *
+ * `host_auctions` deliberately has NO entry: `auction` is basic now, so the
+ * check is gone. The capability string stays declared in the union so existing
+ * store documents carrying it remain valid — it simply no longer gates
+ * anything.
+ */
+const LEGACY_PER_TYPE_GRANT = {
+    "pre-order": "host_preorders",
+};
+export function isAdvancedListingType(listingType) {
+    return LISTING_TYPE_TIER[listingType] === "advanced";
+}
+/**
+ * Does this capability array carry the advanced-types grant?
+ *
+ * Exists so no call site has to spell the capability string, and so none has
+ * to cast: `capabilities` is `StoreCapability[]` in typed code and
+ * `string[]` as stored, and an `.includes()` across that boundary is where an
+ * `as never` gets reached for — which silences every other check on the
+ * expression, not just the one being worked around.
+ */
+export function hasAdvancedListingTypes(capabilities) {
+    return (capabilities ?? []).includes(ADVANCED_LISTING_TYPE_CAPABILITY);
+}
+/** The types every store can use, with no capability at all. */
+export const BASIC_LISTING_TYPES = ALL_LISTING_TYPES.filter((t) => LISTING_TYPE_TIER[t] === "basic");
+export const ADVANCED_LISTING_TYPES = ALL_LISTING_TYPES.filter((t) => LISTING_TYPE_TIER[t] === "advanced");
+/**
+ * May this store create or convert to this listing type?
+ *
+ * Pure — takes the capability array the caller already holds rather than
+ * re-reading the store. Every gate site in the codebase has the store document
+ * in scope already, and a helper that fetched would add one Firestore read per
+ * product write against Rule #6's round-trip budget.
+ */
+export function isListingTypeAllowedFor(listingType, ctx = {}) {
+    if (ctx.isPrivileged)
+        return true;
+    if (!isAdvancedListingType(listingType))
+        return true;
+    const caps = ctx.capabilities ?? [];
+    if (caps.includes(ADVANCED_LISTING_TYPE_CAPABILITY))
+        return true;
+    const legacy = LEGACY_PER_TYPE_GRANT[listingType];
+    return legacy ? caps.includes(legacy) : false;
+}
+/** Every type this store may use, for building a picker or filtering nav. */
+export function listingTypesAllowedFor(ctx = {}) {
+    return ALL_LISTING_TYPES.filter((t) => isListingTypeAllowedFor(t, ctx));
+}
+/**
+ * Throwing form, for the server-side write paths.
+ *
+ * 🛑 `listingType` being absent is ALLOWED and must stay that way. Both product
+ * schemas declare it optional, and a partial update that touches only `status`
+ * or `stockQuantity` carries no type at all — refusing those would break every
+ * stock decrement and status flip in the app. The gate's job is to refuse a
+ * NAMED advanced type, not to require one.
+ *
+ * 🛑 On an UPDATE, the caller must additionally compare against the STORED
+ * type and skip this when they match — see `sellerUpdateProduct`. Every
+ * per-type edit page re-sends its own type literal, so asserting on the
+ * submitted value alone locks a seller out of editing listings they already
+ * own as soon as the capability is withdrawn. The rule is about creating and
+ * converting, not about touching.
+ */
+export function assertListingTypeAllowed(
+/*
+ * `JsonValue | undefined`, not `unknown`. The callers hold
+ * `Record<string, JsonValue>` request bodies, so this is the widest type the
+ * value can genuinely have — and naming it keeps the narrowing below honest,
+ * where `unknown` would let any argument at all through the door and leave
+ * the type-level signal at the call site worth nothing
+ * (`audit-unknown-leakage`).
+ */
+listingType, ctx = {}) {
+    if (typeof listingType !== "string")
+        return;
+    if (!(listingType in LISTING_TYPE_TIER))
+        return;
+    const typed = listingType;
+    if (isListingTypeAllowedFor(typed, ctx))
+        return;
+    throw new AuthorizationError(`Your store is not approved to create ${typed} listings. ` +
+        `Enable advanced listing types in your store settings first.`);
+}

package/dist/_internal/shared/search/match.js

@@ -119,6 +119,30 @@ export function prepareIndex(artifact) {
         };
     });
 }
+/**
+ * The shortest term allowed to match MID-WORD.
+ *
+ * 🛑 This exists because of a reported bug, and the mechanism is worth stating:
+ * the substring tier is `flat.includes(term)`, and for a one-character term
+ * that is satisfied by almost every record in the artifact. A category's
+ * `detail` is its " › "-joined path, so `"g"` matches
+ * `"Spinning Tops › Beyblade Original › Dragoon Line"` on the `g` in
+ * "Spinning". AND semantics then cannot narrow anything: `"dragoon g"` scored
+ * identically to `"dragoon"` and returned every Dragoon in the catalogue —
+ * which is the "even if I type dragoon g the results show everything"
+ * complaint, and it was never the AND logic's fault.
+ *
+ * 🛑 It does NOT reintroduce a minimum query length. This module's header is
+ * explicit that typing `"d"` and seeing something is what a local index is FOR,
+ * and it still does: the EXACT and PREFIX tiers are untouched, so a
+ * one-character term still matches any word starting with it. Only the mid-word
+ * tier is gated, because one character appearing somewhere inside a string is
+ * not evidence of intent.
+ *
+ * Two rather than three: `"cx"`, `"bu"`, `"gt"` and `"1b"` are real product
+ * vocabulary a collector types, and they discriminate.
+ */
+const MIN_SUBSTRING_TERM = 2;
 /** Best match quality for one term against one field. 0 means no match. */
 function fieldScore(term, words, flat) {
     if (!flat)
@@ -129,8 +153,10 @@ function fieldScore(term, words, flat) {
     for (const w of words)
         if (w.startsWith(term))
             return S_PREFIX;
-    // Mid-word. The capability the token index cannot have.
-    if (flat.includes(term))
+    // Mid-word. The capability the token index cannot have — but see
+    // MIN_SUBSTRING_TERM: for a single character it is not a capability, it is a
+    // match against everything.
+    if (term.length >= MIN_SUBSTRING_TERM && flat.includes(term))
         return S_SUBSTRING;
     return 0;
 }

package/dist/cli/index.js

@@ -60,7 +60,6 @@ export const FEATURE_SUBPATH_MAP = {
     loyalty: "@mohasinac/appkit/features/loyalty",
     collections: "@mohasinac/appkit/features/collections",
     preorders: "@mohasinac/appkit/features/pre-orders",
-    "whatsapp-bot": "@mohasinac/appkit/features/whatsapp-bot",
 };
 /**
  * Wraps a Next.js config object. With appkit, only `@mohasinac/appkit` needs to
@@ -112,7 +111,6 @@ const FEATURE_NAMESPACE_MAP = {
     "before-after": "beforeAfter",
     loyalty: "loyalty",
     collections: "collections",
-    "whatsapp-bot": "whatsappBot",
 };
 // Opaque dynamic import — prevents bundlers from statically analysing the path
 const _dynamicImport = new Function("modulePath", "return import(modulePath)");

package/dist/client.d.ts

@@ -213,6 +213,14 @@ export type { ActionRowProps, ActionRowAlign } from "./ui/components/ActionRow";
 export { Textarea } from "./ui/components/Textarea";
 export { GlobalError } from "./next/components/GlobalError";
 export { AppLayoutShell, LocaleSwitcher, useDashboardNav, BottomActionsProvider, useBottomActions, DashboardNavProvider, LayoutClient } from "./features/layout/index";
+/**
+ * A page declares its own inline primary CTA so the floating action control
+ * stays out of its way until that button has been seen and scrolled past. A
+ * page that publishes actions and no anchor gets the control immediately —
+ * which is right for a bulk-selection screen and wrong for anything with a
+ * visible Buy/Checkout button. See `useCtaReveal`.
+ */
+export { ctaAnchorProps, CTA_ANCHOR_ATTR } from "./features/layout/index";
 export type { AppLayoutShellProps, AppLayoutShellSidebarLink, AppLayoutShellSidebarSection, DashboardNavState, MainNavbarItem, LayoutClientProps } from "./features/layout/index";
 export { ListingLayout } from "./ui/components/ListingLayout";
 export type { ListingLayoutProps, ListingLayoutLabels } from "./ui/components/ListingLayout";
@@ -240,6 +248,7 @@ export { SELLER_ENDPOINTS } from "./constants/index";
  * BidDetailPageClient — checklist-page-wiring-detail-pages-detail-page-matches-list-modal.
  */
 export { ACCOUNT_ENDPOINTS } from "./constants/index";
+export { REVIEW_ENDPOINTS } from "./constants/index";
 export { TourProvider, useTour } from "./_internal/client/features/tour/TourProvider";
 export type { TourContextValue, TourRole } from "./_internal/client/features/tour/TourProvider";
 export { apiClient, ApiClientError } from "./http/index";
@@ -411,6 +420,8 @@ export { WISHLIST_MAX, HISTORY_MAX, CART_MAX_ITEMS, } from "./constants/limits";
 export { normalizeListingType, isAuctionListing, isPreOrderListing, isStandardListing, isPrizeDrawListing, isClassifiedListing, isDigitalCodeListing, isLiveListing, isArtListing, isStickersListing, } from "./features/products/utils/listing-type";
 export { isFinalSale, acceptsChangeOfMindReturns, } from "./features/products/constants/final-sale";
 export { isListingTypeEnabled, isCategoryTypeEnabled, enabledListingTypes, enabledCategoryTypes, ALL_LISTING_TYPES, isListingType, } from "./_internal/shared/listing-types/feature-flags";
+export { ADVANCED_LISTING_TYPE_CAPABILITY, ADVANCED_LISTING_TYPES, BASIC_LISTING_TYPES, LISTING_TYPE_TIER, hasAdvancedListingTypes, isAdvancedListingType, isListingTypeAllowedFor, listingTypesAllowedFor, } from "./_internal/shared/listing-types/tiers";
+export type { ListingTypeAccessContext, ListingTypeTier, } from "./_internal/shared/listing-types/tiers";
 export { actionTracker, setActionTrackerSink, resetActionTrackerSink, type ActionEvent, type ActionTrackerSink, } from "./_internal/shared/listing-types/action-tracker";
 export { cartRequiresShipping, cartIsDigitalOnly, cartIsChatOnly, } from "./_internal/shared/listing-types/cart-shipping";
 export { ACTIONS, action, act, canPerformAction, actionsForListingType, actionLabel, type ActionDef, type ActionKind, type ActionResource, type ActionTree, type ActionConfirmation, } from "./_internal/shared/actions/action-registry";
@@ -422,6 +433,16 @@ export type { LayoutBreakpoint, DashboardVariant, LayoutRole, SidebarNavItem, Si
 export { LISTING_TYPE_CAPABILITIES, capabilityFor, canAddToCart, canBid, supportsShipping, requiresVendorVerified, requiresJurisdictionCheck, hasInstantFulfillment, assertNever, } from "./_internal/shared/listing-types/capabilities";
 export type { ListingTypeCapability } from "./_internal/shared/listing-types/capabilities";
 export { LISTING_TYPE_REGISTRY, pluginFor, detectListingTypeFromSlug } from "./_internal/shared/listing-types/_registry";
+export { useStoreListingEntitlements } from "./features/seller/hooks/useStoreListingEntitlements";
+export { OwnerQuickActions } from "./features/admin/components/OwnerQuickActions";
+export { YourPurchaseStrip } from "./features/orders/components/YourPurchaseStrip";
+export { ReviewFormDrawer, reviewFormSchema } from "./features/reviews/components/ReviewFormDrawer";
+export type { ReviewFormDrawerProps, ReviewFormValues } from "./features/reviews/components/ReviewFormDrawer";
+export { PurchaseReviewAffordance } from "./features/reviews/components/PurchaseReviewAffordance";
+export type { PurchaseReviewAffordanceProps } from "./features/reviews/components/PurchaseReviewAffordance";
+export type { YourPurchaseStripProps, PurchaseContext } from "./features/orders/components/YourPurchaseStrip";
+export type { OwnerQuickActionsProps, OwnerQuickActionsResource } from "./features/admin/components/OwnerQuickActions";
+export type { StoreListingEntitlements } from "./features/seller/hooks/useStoreListingEntitlements";
 export type { ListingTypePlugin } from "./_internal/shared/listing-types/_registry";
 export type { ListingType } from "./features/products/types/index";
 export { MEGABYTE, MAX_IMAGE_BYTES, MAX_PDF_BYTES, MAX_VIDEO_BYTES, MAX_LABEL, MAX_BYTES, ALLOWED_IMAGE_MIMES, IMAGE_ACCEPT_ATTR, ALLOWED_VIDEO_MIMES, ALLOWED_DOC_MIMES, ALLOWED_MIMES, ALLOWED_TYPES_LABEL, MIME_TO_EXT, PDF_MAGIC, VIDEO_CONVERSION_HINTS, classifyMime, isAllowedMime, maxBytesFor, getConversionHint, PRODUCT_MAX_IMAGES, PRODUCT_MAX_VIDEOS, PRODUCT_IMAGE_INDEX_MAX, } from "./_internal/shared/media/limits";
@@ -468,8 +489,8 @@ export { SCHEMAS, lookupApiSchema, lookupFormSchema, lookupFirestoreSchema, } fr
 export type { ApiRouteKey, ApiRouteSchema, FirestoreDocument, FirestoreValue, FormFieldValue, FormValues, HttpVerb, JsonArray, JsonObject, JsonObjectWithUndefined, JsonPrimitive, JsonValue, JsonValueWithUndefined, RegisteredApiRouteKey, RegisteredFirestoreCollection, RegisteredFormId, RegisteredRtdbChannel, RegisteredSieveCollection, RegisteredStorageOp, RegisteredWebhookProvider, RegistryEntry, SchemaRegistry, SchemasShape, WebhookSchemaBucket, } from "./schemas/index";
 export { normalizeError, getErrorMessage, isApiNormalized, isAppNormalized, isFirebaseAuthNormalized, isFirebaseFirestoreNormalized, isFirebaseStorageNormalized, isNativeNormalized, isNetworkNormalized, isUnknownNormalized, isZodNormalized, } from "./errors/normalize";
 export type { NormalizedError, NormalizedApiError, NormalizedAppError, NormalizedFirebaseAuthError, NormalizedFirebaseFirestoreError, NormalizedFirebaseStorageError, NormalizedNativeError, NormalizedNetworkError, NormalizedUnknownThrownValue, NormalizedZodError, } from "./errors/normalize";
-export { buildPaymentProofReviewMessage } from "./features/whatsapp-bot/helpers/payment-proof-message";
-export type { PaymentProofReviewMessageInput } from "./features/whatsapp-bot/types";
+export { buildPaymentProofReviewMessage } from "./features/orders/utils/payment-proof-message";
+export type { PaymentProofReviewMessageInput } from "./features/orders/utils/payment-proof-message";
 export type { AdminNotificationDocument, ItemRequestDocument, ModerationQueueDocument, ReportDocument, CustomRoleDocument, AnalyticsCardDocument, ListingTemplateDocument, } from "./features/store-extensions/index";
 export { CommandPalette, useCommandPaletteHotkey } from "./features/shell/index";
 export type { CommandPaletteGroup } from "./features/shell/index";
@@ -499,7 +520,7 @@ export type { EmiSettings, BuyerEmiQuote } from "./_internal/shared/features/emi
 export type { BuyerFacingFees, BuyerEmiSettings, } from "./_internal/shared/features/site-settings/fees";
 export type { PublicSiteSettings } from "./_internal/shared/features/site-settings/types";
 export { computeCodHandlingFee } from "./_internal/shared/fees/calculator";
-export type { CodHandlingFeeRates, WhatsAppNotifyFeeRates, GiftWrapFeeRates, ShipmentProtectionFeeRates, } from "./_internal/shared/fees/calculator";
+export type { CodHandlingFeeRates, GiftWrapFeeRates, ShipmentProtectionFeeRates, } from "./_internal/shared/fees/calculator";
 export { FAQPageContent } from "./features/faq/index";
 export type { FAQCategory, FAQCategoryItem, FAQSortOption } from "./features/faq/index";
 export { CategoryInlineSelect } from "./features/seller/components/CategoryInlineSelect";
@@ -522,7 +543,7 @@ export { sublistingCategoryFormSchema } from "./features/store-extensions/schema
 export { adminStoreUpdateSchema, announcementBarSchema, } from "./features/admin/schemas/admin-editor-forms";
 export { adminOrderUpdateSchema, employeeInviteSchema, hardBanReasonSchema, featureFlagsUpdateSchema, adminAdFormSchema, } from "./features/admin/schemas/admin-ops-forms";
 export { changeEmailSchema } from "./features/account/schemas/index";
-export { adminUserUpdateSchema, whatsappSettingsSchema, lotteryPullSchema, } from "./features/admin/schemas/admin-user-form";
+export { adminUserUpdateSchema, lotteryPullSchema, } from "./features/admin/schemas/admin-user-form";
 export { siteSettingsFormSchema } from "./features/admin/schemas/site-settings-form";
 export { refineAddressPostal, addressFormSchema, addressUpdateSchema, adminAddressCreateSchema, adminAddressUpdateSchema, addressUnbanRequestSchema, } from "./features/addresses/schemas/address-form";
 export type { AddressFormValues, AddressUpdateValues, AdminAddressCreateValues, } from "./features/addresses/schemas/address-form";

package/dist/client.js

@@ -263,6 +263,14 @@ export { ActionRow } from "./ui/components/ActionRow.js";
 export { Textarea } from "./ui/components/Textarea.js";
 export { GlobalError } from "./next/components/GlobalError.js";
 export { AppLayoutShell, LocaleSwitcher, useDashboardNav, BottomActionsProvider, useBottomActions, DashboardNavProvider, LayoutClient } from "./features/layout/index.js";
+/**
+ * A page declares its own inline primary CTA so the floating action control
+ * stays out of its way until that button has been seen and scrolled past. A
+ * page that publishes actions and no anchor gets the control immediately —
+ * which is right for a bulk-selection screen and wrong for anything with a
+ * visible Buy/Checkout button. See `useCtaReveal`.
+ */
+export { ctaAnchorProps, CTA_ANCHOR_ATTR } from "./features/layout/index.js";
 export { ListingLayout } from "./ui/components/ListingLayout.js";
 export { Search } from "./features/search/components/index.js";
 export { ToastProvider, SkipToMain, NavigationLoader } from "./ui/index.js";
@@ -290,6 +298,7 @@ export { SELLER_ENDPOINTS } from "./constants/index.js";
  * BidDetailPageClient — checklist-page-wiring-detail-pages-detail-page-matches-list-modal.
  */
 export { ACCOUNT_ENDPOINTS } from "./constants/index.js";
+export { REVIEW_ENDPOINTS } from "./constants/index.js";
 // P-16 — Tour system (driver.js-backed onboarding walkthrough).
 export { TourProvider, useTour } from "./_internal/client/features/tour/TourProvider.js";
 export { apiClient, ApiClientError } from "./http/index.js";
@@ -424,6 +433,10 @@ export { normalizeListingType, isAuctionListing, isPreOrderListing, isStandardLi
 export { isFinalSale, acceptsChangeOfMindReturns, } from "./features/products/constants/final-sale.js";
 // SB-UNI-X4 2026-05-13 — per-type feature-flag helpers (client-safe).
 export { isListingTypeEnabled, isCategoryTypeEnabled, enabledListingTypes, enabledCategoryTypes, ALL_LISTING_TYPES, isListingType, } from "./_internal/shared/listing-types/feature-flags.js";
+// Basic/advanced listing-type split. Client-safe: the nav filter and any
+// seller-facing picker need the same rule the server enforces, and deriving it
+// twice is how the ten hand-written copies of the union happened.
+export { ADVANCED_LISTING_TYPE_CAPABILITY, ADVANCED_LISTING_TYPES, BASIC_LISTING_TYPES, LISTING_TYPE_TIER, hasAdvancedListingTypes, isAdvancedListingType, isListingTypeAllowedFor, listingTypesAllowedFor, } from "./_internal/shared/listing-types/tiers.js";
 // SB-UNI-X5 2026-05-13 — action telemetry sink (client-safe; defaults to
 // a no-op + console.debug in dev).
 export { actionTracker, setActionTrackerSink, resetActionTrackerSink, } from "./_internal/shared/listing-types/action-tracker.js";
@@ -440,6 +453,16 @@ export { DashboardLayoutClient, RoleGuard } from "./_internal/client/features/la
 // Listing-type capability registry — SB-UNI X1.
 export { LISTING_TYPE_CAPABILITIES, capabilityFor, canAddToCart, canBid, supportsShipping, requiresVendorVerified, requiresJurisdictionCheck, hasInstantFulfillment, assertNever, } from "./_internal/shared/listing-types/capabilities.js";
 export { LISTING_TYPE_REGISTRY, pluginFor, detectListingTypeFromSlug } from "./_internal/shared/listing-types/_registry.js";
+// Which listing types the signed-in seller's own store may create. Needs a
+// fetch because `capabilities` is a PRIVATE store field — see the hook.
+export { useStoreListingEntitlements } from "./features/seller/hooks/useStoreListingEntitlements.js";
+// Pencil / clone / bin for whoever owns the record, on a PUBLIC surface.
+export { OwnerQuickActions } from "./features/admin/components/OwnerQuickActions.js";
+// "You ordered this - track it" / "your review - edit it", on a product page.
+export { YourPurchaseStrip } from "./features/orders/components/YourPurchaseStrip.js";
+// The first review form this app has had - see the component's header.
+export { ReviewFormDrawer, reviewFormSchema } from "./features/reviews/components/ReviewFormDrawer.js";
+export { PurchaseReviewAffordance } from "./features/reviews/components/PurchaseReviewAffordance.js";
 // Media upload limits — shared by client uploaders + server sign/finalize routes.
 export { MEGABYTE, MAX_IMAGE_BYTES, MAX_PDF_BYTES, MAX_VIDEO_BYTES, MAX_LABEL, MAX_BYTES, ALLOWED_IMAGE_MIMES, IMAGE_ACCEPT_ATTR, ALLOWED_VIDEO_MIMES, ALLOWED_DOC_MIMES, ALLOWED_MIMES, ALLOWED_TYPES_LABEL, MIME_TO_EXT, PDF_MAGIC, VIDEO_CONVERSION_HINTS, classifyMime, isAllowedMime, maxBytesFor, getConversionHint, PRODUCT_MAX_IMAGES, PRODUCT_MAX_VIDEOS, PRODUCT_IMAGE_INDEX_MAX, } from "./_internal/shared/media/limits.js";
 export { ScamAwarenessModal } from "./features/scams/components/ScamAwarenessModal.js";
@@ -476,10 +499,18 @@ export { SellerLiveView } from "./features/seller/components/SellerLiveView.js";
 export { SCHEMAS, lookupApiSchema, lookupFormSchema, lookupFirestoreSchema, } from "./schemas/index.js";
 // ── W3 catch-clause normalizer ──────────────────────────────────────────────
 export { normalizeError, getErrorMessage, isApiNormalized, isAppNormalized, isFirebaseAuthNormalized, isFirebaseFirestoreNormalized, isFirebaseStorageNormalized, isNativeNormalized, isNetworkNormalized, isUnknownNormalized, isZodNormalized, } from "./errors/normalize.js";
-// [CLIENT-SAFE] Pure wa.me share-link message builder — imported directly
-// from its isolated file (not ./whatsapp-bot/server) so this barrel's graph
-// never touches the sibling crypto-importing helpers.
-export { buildPaymentProofReviewMessage } from "./features/whatsapp-bot/helpers/payment-proof-message.js";
+/*
+ * [CLIENT-SAFE] Pure wa.me share-link message builder — no crypto, no network.
+ *
+ * It used to live beside the WhatsApp Cloud API senders, isolated into its own
+ * file precisely so this barrel's import graph never reached their top-level
+ * `crypto` import (Root Cause #24). The Cloud API integration was removed
+ * 2026-10-20 and this moved to `features/orders/utils/`, which is its real
+ * domain: it builds the body of the buyer's "Share for review" link on the
+ * order payment page, and a wa.me deep link needs no token or registered
+ * number.
+ */
+export { buildPaymentProofReviewMessage } from "./features/orders/utils/payment-proof-message.js";
 export { CommandPalette, useCommandPaletteHotkey } from "./features/shell/index.js";
 export { AdminBlogEditorView, AdminBundleEditorView, AdminCarouselEditorView, AdminCategoryEditorView, AdminCouponEditorView, AdminFaqEditorView, AdminFeatureEditorView, AdminOrderEditorView, AdminPayoutMarkPaidModal, AdminAuditLogView, ViewAuditLogEntryModal, AdminProductEditorView, AdminScammerEditorView, 
 // Client-exported for the W22 /admin/team/{new,[id]/edit} pages. It was
@@ -531,7 +562,7 @@ export { sublistingCategoryFormSchema } from "./features/store-extensions/schema
 export { adminStoreUpdateSchema, announcementBarSchema, } from "./features/admin/schemas/admin-editor-forms.js";
 export { adminOrderUpdateSchema, employeeInviteSchema, hardBanReasonSchema, featureFlagsUpdateSchema, adminAdFormSchema, } from "./features/admin/schemas/admin-ops-forms.js";
 export { changeEmailSchema } from "./features/account/schemas/index.js";
-export { adminUserUpdateSchema, whatsappSettingsSchema, lotteryPullSchema, } from "./features/admin/schemas/admin-user-form.js";
+export { adminUserUpdateSchema, lotteryPullSchema, } from "./features/admin/schemas/admin-user-form.js";
 export { siteSettingsFormSchema } from "./features/admin/schemas/site-settings-form.js";
 // The ONE address shape and the ONE postal rule (W5 / D19). Eleven field
 // shapes and fifteen disagreeing postal rules collapsed to these.