@mohasinac/appkit 4.53.1 → 4.54.0

package/dist/features/admin/components/OwnerQuickActions.js

@@ -0,0 +1,142 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+/**
+ * Pencil / clone / bin, on a PUBLIC surface, for whoever owns the record.
+ *
+ * ── What this is for ──────────────────────────────────────────────────────
+ *
+ * An admin or seller spots a problem on the page a visitor sees — a wrong
+ * price, a typo, a bad photo — and today has to navigate to the dashboard,
+ * find the list, search for the row and open it. This is the two-click path to
+ * the editor from where the problem was noticed.
+ *
+ * ── Why it is a new component and not a slot on each card ─────────────────
+ *
+ * 🛑 Measured before building: ZERO public detail views render any owner-only
+ * control, and the only precedent anywhere is `CouponCard`, which has had
+ * `onEdit` / `onToggleActive` / `onDelete` props the whole time and whose two
+ * public consumers pass NONE of them. So there was no pattern to follow and no
+ * second implementation to reconcile — one component, used by every surface,
+ * is what keeps the visibility rule and the confirm copy in one place.
+ *
+ * ── The visibility rule, and why it has three states ──────────────────────
+ *
+ * 🛑 Public pages are static or ISR (`products/[slug]` is `revalidate = 3600`
+ * and reads no session), so `SessionProvider` mounts `initialUser={null}` and
+ * `loading` starts TRUE on every hard load — for signed-in users too. A
+ * two-state `!user → hide` gate therefore renders nothing, then pops the
+ * toolbar in a few hundred milliseconds later, on every single page load.
+ *
+ * So: render NOTHING while `isAuthResolving`. Appearing late is invisible;
+ * appearing with a flash is a bug people report. Same reasoning as
+ * `useCanSeePrices`, which exists for the mirror-image problem.
+ *
+ * ── Who sees what ─────────────────────────────────────────────────────────
+ *
+ *   pencil + bin   the record's owner, or any admin
+ *   clone          admins ONLY
+ *
+ * 🛑 Clone is gated on `useIsAdmin()`, NOT on the same check as the other two.
+ * `useIsOwner` returns `true` for admins AND for the owner, so reusing it
+ * would hand every seller a button that is meant to be a staff tool.
+ *
+ * @tag domain:admin
+ * @tag layer:components
+ * @tag access:client
+ */
+import { useCallback, useState } from "react";
+import { useIsAdmin, useIsOwner } from "../../auth/hooks/useRBAC.js";
+import { useOptionalSession } from "../../../react/contexts/SessionContext.js";
+import { ACTIONS } from "../../../_internal/shared/actions/action-registry.js";
+import { ConfirmDeleteModal } from "../../../ui/components/ConfirmDeleteModal.js";
+import { Icon } from "../../../ui/components/Icon.js";
+import { IconButton } from "../../../ui/components/IconButton.js";
+import { Row, useToast } from "../../../ui/index.js";
+import { normalizeError } from "../../../errors/normalize.js";
+import { toUserMessage } from "../../../errors/error-display-map.js";
+export function OwnerQuickActions({ resource, editHref, onDelete, onClone, ownerId, storeId, recordLabel, placement = "card", className = "", }) {
+    const session = useOptionalSession();
+    const isOwnerOrAdmin = useIsOwner(ownerId);
+    const isAdmin = useIsAdmin();
+    const { showToast } = useToast();
+    const [confirmOpen, setConfirmOpen] = useState(false);
+    const [deleting, setDeleting] = useState(false);
+    const bucket = ACTIONS[resource];
+    const handleConfirmedDelete = useCallback(async () => {
+        if (!onDelete)
+            return;
+        setDeleting(true);
+        try {
+            await onDelete();
+            setConfirmOpen(false);
+        }
+        catch (err) {
+            const normalized = normalizeError(err);
+            /*
+             * 🛑 A failed delete MUST say so. Without this the dialog simply closed
+             * its spinner and the record was still there — and because the caller
+             * navigates away on success, "nothing happened" is indistinguishable
+             * from "it worked but the page did not move". This is a destructive
+             * action on a public page; silence is the worst available answer.
+             */
+            showToast(toUserMessage(normalized.code ?? "UNKNOWN"), "error");
+        }
+        finally {
+            // Always clears, so a failed delete leaves a usable dialog rather than a
+            // permanently-spinning button the user cannot dismiss or retry.
+            setDeleting(false);
+        }
+    }, [onDelete, showToast]);
+    /*
+     * 🛑 Nothing at all until auth resolves — see the header. `loading` starts
+     * true on every hard load of a static page, so this is the common path on
+     * first paint, not an edge case.
+     */
+    if (!session || session.loading)
+        return null;
+    /*
+     * A store-owned record is also "mine" when I own that store.
+     * `SessionUser.storeId` holds the store SLUG and `StoreDocument.storeId` is
+     * the slug too, while `ownerId` is the Auth UID — two different id spaces,
+     * so both have to be checked rather than one standing in for the other.
+     */
+    const ownsStore = Boolean(storeId && session.user?.storeId === storeId);
+    /*
+     * 🛑 `isAdmin` is its OWN term, not folded into `useIsOwner`.
+     *
+     * `useIsOwner` early-returns `false` when `resourceOwnerId` is falsy — BEFORE
+     * it checks admin — so for a record with no owner at all it denies admins
+     * too. Categories, brands, franchises, carousel slides and homepage sections
+     * have no `ownerId`, and those are precisely the collections an admin needs
+     * this toolbar on. Relying on `useIsOwner` alone would have hidden it from
+     * the only person who can edit them.
+     */
+    if (!isAdmin && !isOwnerOrAdmin && !ownsStore)
+        return null;
+    const editDef = bucket.edit;
+    const deleteDef = bucket.delete;
+    const confirmation = deleteDef?.confirmation;
+    const showClone = Boolean(onClone) && isAdmin;
+    return (_jsxs(_Fragment, { children: [_jsxs(Row, { gap: "xs", align: "center", className: className, 
+                /*
+                 * Stops the click reaching an ancestor `<Link>` or the card's own
+                 * `onClick`. Without it, pressing Edit on a card both navigates to the
+                 * editor AND opens the public detail page behind it.
+                 */
+                onClick: (e) => {
+                    e.stopPropagation();
+                }, children: [_jsx(IconButton, { "aria-label": editDef?.ariaLabel ?? editDef?.label ?? "Edit", size: "touch", variant: placement === "card" ? "scrim" : "ghost", icon: _jsx(Icon, { name: "edit" }), onClick: () => {
+                            /*
+                             * `window.location`, not `next/link`. This component is rendered
+                             * inside cards whose whole body is already an anchor, and nesting
+                             * an `<a>` in an `<a>` is invalid HTML that browsers resolve by
+                             * closing the outer one early — which breaks the card's own
+                             * navigation, not just this button's.
+                             */
+                            if (typeof window !== "undefined")
+                                window.location.assign(editHref);
+                        } }), showClone && (_jsx(IconButton, { "aria-label": (bucket.duplicate?.ariaLabel ?? bucket.duplicate?.label) ||
+                            "Duplicate", size: "touch", variant: placement === "card" ? "scrim" : "ghost", icon: _jsx(Icon, { name: "duplicate" }), onClick: () => void onClone?.() })), onDelete && (_jsx(IconButton, { "aria-label": deleteDef?.ariaLabel ?? deleteDef?.label ?? "Delete", size: "touch", variant: placement === "card" ? "scrim" : "danger", icon: _jsx(Icon, { name: "delete" }), onClick: () => setConfirmOpen(true) }))] }), onDelete && (_jsx(ConfirmDeleteModal, { isOpen: confirmOpen, onClose: () => setConfirmOpen(false), onConfirm: handleConfirmedDelete, isDeleting: deleting, title: confirmation?.title ?? "Delete this record?", message: recordLabel && confirmation
+                    ? `${confirmation.body}\n\nDeleting: ${recordLabel}`
+                    : confirmation?.body, confirmText: confirmation?.confirmLabel ?? deleteDef?.label ?? "Delete", variant: "danger" }))] }));
+}

package/dist/features/admin/components/sections/adminSectionsTypes.js

@@ -179,10 +179,19 @@ export const DEFAULT_WELCOME_BUILDER = {
 export const DEFAULT_TRUST_INDICATORS_BUILDER = {
     title: "Why LetItRip?",
     indicators: [
-        { id: "ti-1", icon: "🚚", title: "Free Shipping", description: "On orders above ₹999" },
-        { id: "ti-2", icon: "🔒", title: "Secure Payment", description: "Razorpay protected checkout" },
-        { id: "ti-3", icon: "✅", title: LABEL_VERIFIED_SELLERS, description: "Every store is manually verified" },
-        { id: "ti-4", icon: "↩️", title: "Easy Returns", description: "7-day hassle-free returns" },
+        /*
+         * 🛑 `icon` holds an IconKey, not an emoji.
+         *
+         * These shipped "🚚" / "🔒" / "✅" / "↩️", which the component used only as
+         * a React key — every tile rendered the same hardcoded ✓ regardless. Now
+         * that `resolveTrustIcon` reads the field, an emoji resolves to nothing and
+         * the tile would render text-only, so a default that creates a correct
+         * section has to carry real keys. See trust-icon-aliases.ts.
+         */
+        { id: "ti-1", icon: "ship", title: "Free Shipping", description: "On orders above ₹999" },
+        { id: "ti-2", icon: "lock", title: "Secure Payment", description: "Protected checkout" },
+        { id: "ti-3", icon: "verify", title: LABEL_VERIFIED_SELLERS, description: "Every store is manually verified" },
+        { id: "ti-4", icon: "restore", title: "Easy Returns", description: "7-day hassle-free returns" },
     ],
 };
 export const DEFAULT_CATEGORIES_BUILDER = {

package/dist/features/admin/components/sections/icon-options.d.ts

@@ -0,0 +1,21 @@
+import type { PaginatedSelectOption } from "../../../../ui/components/PaginatedSelect";
+/**
+ * Every valid icon key, as options for the section builders.
+ *
+ * ## 🛑 Why a picker and not the free-text input this replaces
+ *
+ * The trust-indicator icon field was `<Input label="Icon (emoji or text)">`,
+ * and "+ Add indicator" seeded it with `"✨"`. Both were honest while the value
+ * had no reader — the component used `icon` only as a React key and rendered a
+ * hardcoded `✓` regardless. Now that `resolveTrustIcon` reads it, a free-text
+ * value that is not a registry key resolves to `undefined` and the tile renders
+ * with no icon at all: a silent blank, authored through a field that accepted
+ * it without complaint.
+ *
+ * Rule #9 also applies on its own terms — 56 options is well past the 5 above
+ * which a selection must use `<PaginatedSelect>` rather than a bare input.
+ *
+ * The keys are intent words (`verify`, `restore`, `ship`, `lock`), so the key
+ * IS the label; there is no separate display string to keep in sync.
+ */
+export declare const ICON_KEY_OPTIONS: PaginatedSelectOption<string>[];

package/dist/features/admin/components/sections/icon-options.js

@@ -0,0 +1,23 @@
+import { ICONS } from "../../../../ui/icons/icon-registry.js";
+/**
+ * Every valid icon key, as options for the section builders.
+ *
+ * ## 🛑 Why a picker and not the free-text input this replaces
+ *
+ * The trust-indicator icon field was `<Input label="Icon (emoji or text)">`,
+ * and "+ Add indicator" seeded it with `"✨"`. Both were honest while the value
+ * had no reader — the component used `icon` only as a React key and rendered a
+ * hardcoded `✓` regardless. Now that `resolveTrustIcon` reads it, a free-text
+ * value that is not a registry key resolves to `undefined` and the tile renders
+ * with no icon at all: a silent blank, authored through a field that accepted
+ * it without complaint.
+ *
+ * Rule #9 also applies on its own terms — 56 options is well past the 5 above
+ * which a selection must use `<PaginatedSelect>` rather than a bare input.
+ *
+ * The keys are intent words (`verify`, `restore`, `ship`, `lock`), so the key
+ * IS the label; there is no separate display string to keep in sync.
+ */
+export const ICON_KEY_OPTIONS = Object.keys(ICONS)
+    .sort()
+    .map((key) => ({ value: key, label: key }));

package/dist/features/admin/components/sections/sectionTemplates.js

@@ -133,7 +133,10 @@ export const SECTION_TEMPLATES = [
             title: "",
             indicators: [
                 { id: "trust-originals", icon: "shield-check", title: "Authenticity, labelled", description: "Original, reproduction or unverified on every listing — never a silent claim." },
-                { id: "trust-escrow", icon: "lock", title: "Money held until delivery", description: "We hold payment in escrow, so a claim pays from funds we already have." },
+                // No "escrow" here either — see the trust bar in homepage-sections-seed-data.ts.
+                // A TEMPLATE is a claim an admin inserts with one click and is unlikely
+                // to re-read, so a withdrawn claim left in a template comes back by itself.
+                { id: "trust-escrow", icon: "lock", title: "Money held until delivery", description: "Payment reaches the seller after delivery, so a claim is settled from funds still with us." },
                 { id: "trust-india", icon: "truck", title: "India-wide shipping", description: "Delhivery, Blue Dart, DTDC and India Post, with tracking on every order." },
                 { id: "trust-rare", icon: "search", title: "Rare and pre-owned", description: "Four generations of Beyblade, including the lines that are long out of production." },
             ],

package/dist/features/admin/constants/site-settings-tabs.d.ts

@@ -76,38 +76,33 @@ export declare const SITE_SETTINGS_TABS: readonly [{
     readonly label: "⑫ Legal";
     readonly description: "Terms, privacy policy, refund policy and the GST registration details.";
     readonly keywords: ["terms", "privacy", "policy", "gstin", "refund policy", "compliance"];
-}, {
-    readonly id: "whatsapp";
-    readonly label: "⑬ WhatsApp";
-    readonly description: "WhatsApp Business credentials and which messages go out over it.";
-    readonly keywords: ["whatsapp", "meta", "business api", "order updates"];
 }, {
     readonly id: "notifications";
-    readonly label: "⑭ Notifications";
-    readonly description: "Which channels are on — email, WhatsApp, SMS — and the daily digest.";
+    readonly label: "⑬ Notifications";
+    readonly description: "Which channels are on — email and SMS — and the daily digest.";
     readonly keywords: ["email", "sms", "alerts", "digest", "notify"];
 }, {
     readonly id: "procurement";
-    readonly label: "⑮ Procurement";
+    readonly label: "⑭ Procurement";
     readonly description: "Labour rate and the defaults used to price inbound shipments.";
     readonly keywords: ["labour rate", "labor", "import", "landed cost", "supplier"];
 }, {
     readonly id: "emi";
-    readonly label: "⑯ EMI";
+    readonly label: "⑮ EMI";
     readonly description: "Instalment plans: eligibility threshold, tenures and the surcharge split.";
     readonly keywords: ["instalments", "installments", "emi", "pay monthly", "finance"];
 }, {
     readonly id: "gst";
-    readonly label: "⑰ GST";
+    readonly label: "⑯ GST";
     readonly description: "GST rates, HSN defaults and the registered business details.";
     readonly keywords: ["tax", "gst", "hsn", "vat", "invoice tax"];
 }, {
     readonly id: "listings";
-    readonly label: "⑱ Listings";
+    readonly label: "⑰ Listings";
     readonly description: "Which listing types sellers may create, and their defaults.";
     readonly keywords: ["listing types", "auctions on", "enable", "categories"];
 }];
-export declare const SITE_SETTINGS_TAB_IDS: ("about" | "shipping" | "notifications" | "contact" | "auction" | "seo" | "listings" | "appearance" | "emi" | "gst" | "watermark" | "integrations" | "limits" | "announcement" | "whatsapp" | "branding" | "themes" | "fees" | "legal" | "procurement")[];
+export declare const SITE_SETTINGS_TAB_IDS: ("about" | "shipping" | "notifications" | "contact" | "auction" | "seo" | "listings" | "appearance" | "emi" | "gst" | "watermark" | "integrations" | "limits" | "announcement" | "branding" | "themes" | "fees" | "legal" | "procurement")[];
 /**
  * The union `?tab=` is validated against.
  *

package/dist/features/admin/constants/site-settings-tabs.js

@@ -108,39 +108,33 @@ export const SITE_SETTINGS_TABS = [
         description: "Terms, privacy policy, refund policy and the GST registration details.",
         keywords: ["terms", "privacy", "policy", "gstin", "refund policy", "compliance"],
     },
-    {
-        id: "whatsapp",
-        label: "⑬ WhatsApp",
-        description: "WhatsApp Business credentials and which messages go out over it.",
-        keywords: ["whatsapp", "meta", "business api", "order updates"],
-    },
     {
         id: "notifications",
-        label: "⑭ Notifications",
-        description: "Which channels are on — email, WhatsApp, SMS — and the daily digest.",
+        label: "⑬ Notifications",
+        description: "Which channels are on — email and SMS — and the daily digest.",
         keywords: ["email", "sms", "alerts", "digest", "notify"],
     },
     {
         id: "procurement",
-        label: "⑮ Procurement",
+        label: "⑭ Procurement",
         description: "Labour rate and the defaults used to price inbound shipments.",
         keywords: ["labour rate", "labor", "import", "landed cost", "supplier"],
     },
     {
         id: "emi",
-        label: "⑯ EMI",
+        label: "⑮ EMI",
         description: "Instalment plans: eligibility threshold, tenures and the surcharge split.",
         keywords: ["instalments", "installments", "emi", "pay monthly", "finance"],
     },
     {
         id: "gst",
-        label: "⑰ GST",
+        label: "⑯ GST",
         description: "GST rates, HSN defaults and the registered business details.",
         keywords: ["tax", "gst", "hsn", "vat", "invoice tax"],
     },
     {
         id: "listings",
-        label: "⑱ Listings",
+        label: "⑰ Listings",
         description: "Which listing types sellers may create, and their defaults.",
         keywords: ["listing types", "auctions on", "enable", "categories"],
     },

package/dist/features/admin/repository/site-settings.repository.js

@@ -83,7 +83,7 @@ export class SiteSettingsRepository extends BaseRepository {
                 encrypted[key] = encryptSecret(value.trim());
             }
             else if (value !== undefined && typeof value !== "string") {
-                // Non-string credential fields (e.g. whatsappTemplates: Record<string,string>)
+                // Non-string credential fields (e.g. a nested Record<string,string>)
                 // are stored as-is — they are not secret values to encrypt.
                 encrypted[key] = value;
             }

package/dist/features/admin/schemas/admin-editor-forms.d.ts

@@ -12,7 +12,7 @@ export declare const adminStoreUpdateSchema: z.ZodEffects<z.ZodObject<{
     isVerified: z.ZodOptional<z.ZodBoolean>;
     isFeatured: z.ZodOptional<z.ZodBoolean>;
     suspensionReason: z.ZodOptional<z.ZodString>;
-    capabilities: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    capabilities: z.ZodOptional<z.ZodArray<z.ZodEnum<[string, ...string[]]>, "many">>;
     adminNotes: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     storeStatus: StoreStatus;

package/dist/features/admin/schemas/admin-editor-forms.js

@@ -29,6 +29,7 @@ import { z } from "zod";
 import { annotate } from "../../shell/field-ui-meta.js";
 import { mediaUrlSchema } from "../../../validation/schemas.js";
 import { StoreStatusValues } from "../../stores/schemas/firestore.js";
+import { ALL_STORE_CAPABILITIES } from "../../auth/permissions/constants.js";
 const PHONE_RE = /^(\+?91[-\s]?)?[6-9]\d{9}$/;
 /*
  * `adminAddressFormSchema` is DELETED (W5 / D19).
@@ -84,7 +85,9 @@ export const adminStoreUpdateSchema = z
         section: "standing", order: 4, row: "full", kind: "textarea",
         when: (v) => v.storeStatus === "suspended",
     }),
-    capabilities: annotate(z.array(z.string().min(1)).max(50).optional(), {
+    // 🛑 z.enum, not z.string().min(1) — see storeFirestoreSchema. A typo'd
+    // capability used to save cleanly and grant nothing.
+    capabilities: annotate(z.array(z.enum(ALL_STORE_CAPABILITIES)).max(50).optional(), {
         section: "capabilities", sectionLabel: "Capabilities", order: 1, row: "full", kind: "list",
     }),
     adminNotes: annotate(z.string().trim().max(2000).optional(), {

package/dist/features/admin/schemas/admin-user-form.d.ts

@@ -65,67 +65,6 @@ export declare function toPublicProfilePayload(v: {
     linkedin?: string;
 }): Record<string, JsonValue> | undefined;
 export type AdminUserUpdateValues = z.infer<typeof adminUserUpdateSchema>;
-/**
- * A store's WhatsApp Business connection.
- *
- * `accessToken` is optional because the form shows a masked placeholder and
- * only sends the field when the seller types a NEW value — so "absent" means
- * "unchanged", not "clear it". The `.min(20)` therefore applies only to a real
- * replacement, and is there because a truncated token fails silently at sync
- * time rather than on save.
- */
-export declare const whatsappSettingsSchema: z.ZodObject<{
-    catalogSyncEnabled: z.ZodBoolean;
-    phoneNumber: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
-    wabaId: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
-    catalogId: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
-    accessToken: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
-}, "strip", z.ZodTypeAny, {
-    catalogSyncEnabled: boolean;
-    phoneNumber?: string | undefined;
-    accessToken?: string | undefined;
-    wabaId?: string | undefined;
-    catalogId?: string | undefined;
-}, {
-    catalogSyncEnabled: boolean;
-    phoneNumber?: string | undefined;
-    accessToken?: string | undefined;
-    wabaId?: string | undefined;
-    catalogId?: string | undefined;
-}>;
-export type WhatsappSettingsValues = z.infer<typeof whatsappSettingsSchema>;
-/**
- * The CONNECTION form's fields — credentials only.
- *
- * `catalogSyncEnabled` is deliberately absent. Its toggle lives in a different
- * card and owns its own write (`syncToggleMutation`), because the credentials
- * form used to send it unconditionally from two cards away: a seller flipped
- * the switch, saw it move, and nothing persisted it. A field in this schema is
- * a field this form's Save button owns.
- *
- * 🛑 `.omit()` rather than a second literal, so the two cannot drift — it
- * carries the SAME field instances into the new shape, which is what keeps the
- * `annotate()` WeakMap entries alive. (A wrapper such as `.superRefine()` is
- * transparent for the same reason; a field-level re-wrap is not.)
- */
-export declare const whatsappConnectionSchema: z.ZodObject<Omit<{
-    catalogSyncEnabled: z.ZodBoolean;
-    phoneNumber: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
-    wabaId: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
-    catalogId: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
-    accessToken: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
-}, "catalogSyncEnabled">, "strip", z.ZodTypeAny, {
-    phoneNumber?: string | undefined;
-    accessToken?: string | undefined;
-    wabaId?: string | undefined;
-    catalogId?: string | undefined;
-}, {
-    phoneNumber?: string | undefined;
-    accessToken?: string | undefined;
-    wabaId?: string | undefined;
-    catalogId?: string | undefined;
-}>;
-export type WhatsappConnectionValues = z.infer<typeof whatsappConnectionSchema>;
 /**
  * A buyer's lottery entry.
  *

package/dist/features/admin/schemas/admin-user-form.js

@@ -8,24 +8,20 @@
  *      false, and saving any unrelated field silently stripped a real
  *      tester's access.
  *
- *      `SellerWhatsAppSettingsView` writes `accessToken` — a live Meta
- *      credential — plus the WABA and catalog ids the sync runs against. A
- *      malformed id there fails at sync time, hours later, with no obvious
- *      cause.
  *
  *      `LotteryPullForm` is a buyer-facing entry: a transaction id, a payment
  *      time and an item number, all parsed with a bare `parseInt` and a `new
  *      Date(...)` that yields `Invalid Date` on anything unparseable.
  *
  * EXPORTS:
- *   adminUserUpdateSchema, whatsappSettingsSchema, lotteryPullSchema,
+ *   adminUserUpdateSchema, lotteryPullSchema,
  *   and their inferred value types
  *
- * @tag domain:admin,whatsapp,lottery
+ * @tag domain:admin,lottery
  * @tag layer:schema
  * @tag pattern:none
  * @tag access:isomorphic
- * @tag consumers:AdminUserEditorView,SellerWhatsAppSettingsView,LotteryPullForm
+ * @tag consumers:AdminUserEditorView,LotteryPullForm
  * @tag sideEffects:none
  */
 import { z } from "zod";
@@ -131,43 +127,6 @@ export function toPublicProfilePayload(v) {
         publicProfile.socialLinks = socialLinks;
     return Object.keys(publicProfile).length > 0 ? publicProfile : undefined;
 }
-/**
- * A store's WhatsApp Business connection.
- *
- * `accessToken` is optional because the form shows a masked placeholder and
- * only sends the field when the seller types a NEW value — so "absent" means
- * "unchanged", not "clear it". The `.min(20)` therefore applies only to a real
- * replacement, and is there because a truncated token fails silently at sync
- * time rather than on save.
- */
-export const whatsappSettingsSchema = z.object({
-    catalogSyncEnabled: annotate(z.boolean(), {
-        section: "sync", sectionLabel: "Catalog sync", sectionRequired: true, quick: true, order: 1, row: "quarter",
-    }),
-    phoneNumber: annotate(z.string().trim().regex(PHONE_RE, "Enter the 10-digit WhatsApp Business number.").optional().or(z.literal("")), { section: "connection", sectionLabel: "Connection", order: 1, row: "pair" }),
-    // Meta ids are numeric strings; a pasted URL or a stray space is the usual
-    // mistake and produces a sync that never runs.
-    wabaId: annotate(z.string().trim().regex(/^\d{5,32}$/, "A WABA ID is a numeric id, not a URL.").optional().or(z.literal("")), { section: "connection", order: 2, row: "pair" }),
-    catalogId: annotate(z.string().trim().regex(/^\d{5,32}$/, "A catalog ID is a numeric id, not a URL.").optional().or(z.literal("")), { section: "connection", order: 3, row: "pair" }),
-    accessToken: annotate(z.string().trim().min(20, "That access token looks truncated.").optional().or(z.literal("")), { section: "connection", order: 4, row: "full", help: "Leave blank to keep the current token." }),
-});
-/**
- * The CONNECTION form's fields — credentials only.
- *
- * `catalogSyncEnabled` is deliberately absent. Its toggle lives in a different
- * card and owns its own write (`syncToggleMutation`), because the credentials
- * form used to send it unconditionally from two cards away: a seller flipped
- * the switch, saw it move, and nothing persisted it. A field in this schema is
- * a field this form's Save button owns.
- *
- * 🛑 `.omit()` rather than a second literal, so the two cannot drift — it
- * carries the SAME field instances into the new shape, which is what keeps the
- * `annotate()` WeakMap entries alive. (A wrapper such as `.superRefine()` is
- * transparent for the same reason; a field-level re-wrap is not.)
- */
-export const whatsappConnectionSchema = whatsappSettingsSchema.omit({
-    catalogSyncEnabled: true,
-});
 /**
  * A buyer's lottery entry.
  *