@mohasinac/appkit 4.53.2 → 4.54.0-next.0

package/dist/_internal/shared/features/site-settings/supplier-of-record.d.ts

@@ -0,0 +1,56 @@
+/**
+ * The platform's own supplier-of-record identity, injected once at boot.
+ *
+ * ── Why this seam exists ──────────────────────────────────────────────────
+ *
+ * `appkit.config.js → business` is documented as "THE one owner of the
+ * business's statutory identity", and it records what it was created to end:
+ * the legal name, address, GSTIN and support channels had lived in five places
+ * that already disagreed — four different support addresses published, the
+ * registered address saying Solapur while the warehouse said Hyderabad.
+ *
+ * But that file belongs to the CONSUMER, and appkit has no runtime reader for
+ * it. `resolveSupplierIdentity` therefore read `siteSettings.gst.*` instead,
+ * which quietly made the invoice path a SIXTH owner — and the one that decides
+ * what a tax invoice says about who issued it.
+ *
+ * So the consumer injects it at boot, the same way `configureMarketDefaults`
+ * injects currency and locale: one call in `providers.config.ts`, values read
+ * from `src/constants/business.ts`, which reads `appkit.config.js`. One owner,
+ * one hop.
+ *
+ * 🛑 This is NOT a cache of site settings and must not become one. Whether to
+ * charge GST at all stays `siteSettings.gst.enabled` — an operational switch an
+ * admin owns. WHO the supplier is is a fact about the registered entity, is
+ * legally required to be published, and belongs in a committed file.
+ *
+ * @tag domain:site-settings
+ * @tag layer:shared
+ * @tag access:isomorphic
+ * @tag sideEffects:module-state
+ */
+export interface PlatformSupplierIdentity {
+    gstin?: string;
+    legalName?: string;
+    /** One line, as it should appear in an invoice header. */
+    address?: string;
+}
+/**
+ * Register the platform's statutory identity. Call once, at boot.
+ *
+ * Merges rather than replaces, so a partial call cannot blank a field that was
+ * already supplied — the same shape `configureMarketDefaults` uses.
+ */
+export declare function configurePlatformSupplier(identity: PlatformSupplierIdentity): void;
+/**
+ * The registered identity, or an empty object when nothing was injected.
+ *
+ * 🛑 Returns `{}` rather than throwing, and the caller must treat a missing
+ * GSTIN as "not a tax invoice" — which `resolveSupplierIdentity` already does
+ * via `source: "none"`. Throwing here would turn a misconfigured deployment
+ * into a failed CHECKOUT, and an order that cannot be placed is worse than an
+ * invoice that correctly declines to call itself a tax invoice.
+ */
+export declare function getPlatformSupplier(): PlatformSupplierIdentity;
+/** Reset — for tests and for the seed CLI's isolated runs. */
+export declare function resetPlatformSupplier(): void;

package/dist/_internal/shared/features/site-settings/supplier-of-record.js

@@ -0,0 +1,57 @@
+/**
+ * The platform's own supplier-of-record identity, injected once at boot.
+ *
+ * ── Why this seam exists ──────────────────────────────────────────────────
+ *
+ * `appkit.config.js → business` is documented as "THE one owner of the
+ * business's statutory identity", and it records what it was created to end:
+ * the legal name, address, GSTIN and support channels had lived in five places
+ * that already disagreed — four different support addresses published, the
+ * registered address saying Solapur while the warehouse said Hyderabad.
+ *
+ * But that file belongs to the CONSUMER, and appkit has no runtime reader for
+ * it. `resolveSupplierIdentity` therefore read `siteSettings.gst.*` instead,
+ * which quietly made the invoice path a SIXTH owner — and the one that decides
+ * what a tax invoice says about who issued it.
+ *
+ * So the consumer injects it at boot, the same way `configureMarketDefaults`
+ * injects currency and locale: one call in `providers.config.ts`, values read
+ * from `src/constants/business.ts`, which reads `appkit.config.js`. One owner,
+ * one hop.
+ *
+ * 🛑 This is NOT a cache of site settings and must not become one. Whether to
+ * charge GST at all stays `siteSettings.gst.enabled` — an operational switch an
+ * admin owns. WHO the supplier is is a fact about the registered entity, is
+ * legally required to be published, and belongs in a committed file.
+ *
+ * @tag domain:site-settings
+ * @tag layer:shared
+ * @tag access:isomorphic
+ * @tag sideEffects:module-state
+ */
+let _identity = {};
+/**
+ * Register the platform's statutory identity. Call once, at boot.
+ *
+ * Merges rather than replaces, so a partial call cannot blank a field that was
+ * already supplied — the same shape `configureMarketDefaults` uses.
+ */
+export function configurePlatformSupplier(identity) {
+    _identity = { ..._identity, ...identity };
+}
+/**
+ * The registered identity, or an empty object when nothing was injected.
+ *
+ * 🛑 Returns `{}` rather than throwing, and the caller must treat a missing
+ * GSTIN as "not a tax invoice" — which `resolveSupplierIdentity` already does
+ * via `source: "none"`. Throwing here would turn a misconfigured deployment
+ * into a failed CHECKOUT, and an order that cannot be placed is worse than an
+ * invoice that correctly declines to call itself a tax invoice.
+ */
+export function getPlatformSupplier() {
+    return _identity;
+}
+/** Reset — for tests and for the seed CLI's isolated runs. */
+export function resetPlatformSupplier() {
+    _identity = {};
+}

package/dist/_internal/shared/listing-types/tiers.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Which listing types a store may create: the basic/advanced split.
+ *
+ * ── The rule ──────────────────────────────────────────────────────────────
+ *
+ * `standard`, `spares` and `auction` are BASIC — every store can use them.
+ * The other seven are ADVANCED and need the `advanced_listing_types`
+ * capability, because each carries an obligation a new seller has not agreed
+ * to yet: a pre-order takes money for stock that does not exist, a prize draw
+ * is a regulated promotion, a classified happens off-platform with no escrow,
+ * a digital code must be delivered from a pool the seller has to keep stocked,
+ * and a live listing is an animal.
+ *
+ * ── Why a Record and not an array ─────────────────────────────────────────
+ *
+ * 🛑 `Record<ListingType, ListingTypeTier>`, so adding a member to the union
+ * is a COMPILE error here rather than a silent omission that defaults to
+ * whichever branch the code happens to fall through to.
+ * `features/products/types/index.ts` warns that adding a union member touches
+ * 21 named sites of which only 11 are compile-checked; this file is written to
+ * be one of the eleven. Root Cause #61.
+ *
+ * ── Why `capabilities` is `readonly string[]` and not `StoreCapability[]` ──
+ *
+ * Two reasons, and the first is the honest one: that is what is actually
+ * STORED. `storeFirestoreSchema` validates the field as `z.array(z.string())`,
+ * so a capability that is not a union member round-trips today and this helper
+ * must not pretend otherwise. The second is that it keeps this module free of
+ * an import from `features/auth/permissions/constants`, which is the kind of
+ * cross-feature edge `audit-import-cycles` exists to watch.
+ *
+ * A `StoreCapability[]` is assignable to it, so a typed caller loses nothing.
+ */
+import type { ListingType } from "../../../features/products/types/index";
+import type { JsonValue } from "../../../schemas/types";
+export type ListingTypeTier = "basic" | "advanced";
+/**
+ * The capability that unlocks every advanced type at once.
+ *
+ * One flag rather than seven, deliberately: the question a seller is actually
+ * answering is "do I want the complicated listing kinds", and seven checkboxes
+ * invite six of them to be wrong. An admin who needs finer control has the
+ * per-type legacy grants below.
+ */
+export declare const ADVANCED_LISTING_TYPE_CAPABILITY = "advanced_listing_types";
+export declare const LISTING_TYPE_TIER: Record<ListingType, ListingTypeTier>;
+export declare function isAdvancedListingType(listingType: ListingType): boolean;
+/**
+ * Does this capability array carry the advanced-types grant?
+ *
+ * Exists so no call site has to spell the capability string, and so none has
+ * to cast: `capabilities` is `StoreCapability[]` in typed code and
+ * `string[]` as stored, and an `.includes()` across that boundary is where an
+ * `as never` gets reached for — which silences every other check on the
+ * expression, not just the one being worked around.
+ */
+export declare function hasAdvancedListingTypes(capabilities: readonly string[] | null | undefined): boolean;
+/** The types every store can use, with no capability at all. */
+export declare const BASIC_LISTING_TYPES: ListingType[];
+export declare const ADVANCED_LISTING_TYPES: ListingType[];
+export interface ListingTypeAccessContext {
+    /** Admins and employees bypass the tier entirely. */
+    isPrivileged?: boolean;
+    /** The store's stored capability array. Absent/empty is treated as none. */
+    capabilities?: readonly string[] | null;
+}
+/**
+ * May this store create or convert to this listing type?
+ *
+ * Pure — takes the capability array the caller already holds rather than
+ * re-reading the store. Every gate site in the codebase has the store document
+ * in scope already, and a helper that fetched would add one Firestore read per
+ * product write against Rule #6's round-trip budget.
+ */
+export declare function isListingTypeAllowedFor(listingType: ListingType, ctx?: ListingTypeAccessContext): boolean;
+/** Every type this store may use, for building a picker or filtering nav. */
+export declare function listingTypesAllowedFor(ctx?: ListingTypeAccessContext): ListingType[];
+/**
+ * Throwing form, for the server-side write paths.
+ *
+ * 🛑 `listingType` being absent is ALLOWED and must stay that way. Both product
+ * schemas declare it optional, and a partial update that touches only `status`
+ * or `stockQuantity` carries no type at all — refusing those would break every
+ * stock decrement and status flip in the app. The gate's job is to refuse a
+ * NAMED advanced type, not to require one.
+ *
+ * 🛑 On an UPDATE, the caller must additionally compare against the STORED
+ * type and skip this when they match — see `sellerUpdateProduct`. Every
+ * per-type edit page re-sends its own type literal, so asserting on the
+ * submitted value alone locks a seller out of editing listings they already
+ * own as soon as the capability is withdrawn. The rule is about creating and
+ * converting, not about touching.
+ */
+export declare function assertListingTypeAllowed(listingType: JsonValue | undefined, ctx?: ListingTypeAccessContext): void;

package/dist/_internal/shared/listing-types/tiers.js

@@ -0,0 +1,150 @@
+/**
+ * Which listing types a store may create: the basic/advanced split.
+ *
+ * ── The rule ──────────────────────────────────────────────────────────────
+ *
+ * `standard`, `spares` and `auction` are BASIC — every store can use them.
+ * The other seven are ADVANCED and need the `advanced_listing_types`
+ * capability, because each carries an obligation a new seller has not agreed
+ * to yet: a pre-order takes money for stock that does not exist, a prize draw
+ * is a regulated promotion, a classified happens off-platform with no escrow,
+ * a digital code must be delivered from a pool the seller has to keep stocked,
+ * and a live listing is an animal.
+ *
+ * ── Why a Record and not an array ─────────────────────────────────────────
+ *
+ * 🛑 `Record<ListingType, ListingTypeTier>`, so adding a member to the union
+ * is a COMPILE error here rather than a silent omission that defaults to
+ * whichever branch the code happens to fall through to.
+ * `features/products/types/index.ts` warns that adding a union member touches
+ * 21 named sites of which only 11 are compile-checked; this file is written to
+ * be one of the eleven. Root Cause #61.
+ *
+ * ── Why `capabilities` is `readonly string[]` and not `StoreCapability[]` ──
+ *
+ * Two reasons, and the first is the honest one: that is what is actually
+ * STORED. `storeFirestoreSchema` validates the field as `z.array(z.string())`,
+ * so a capability that is not a union member round-trips today and this helper
+ * must not pretend otherwise. The second is that it keeps this module free of
+ * an import from `features/auth/permissions/constants`, which is the kind of
+ * cross-feature edge `audit-import-cycles` exists to watch.
+ *
+ * A `StoreCapability[]` is assignable to it, so a typed caller loses nothing.
+ */
+import { AuthorizationError } from "../../../errors/index.js";
+import { ALL_LISTING_TYPES } from "./feature-flags.js";
+/**
+ * The capability that unlocks every advanced type at once.
+ *
+ * One flag rather than seven, deliberately: the question a seller is actually
+ * answering is "do I want the complicated listing kinds", and seven checkboxes
+ * invite six of them to be wrong. An admin who needs finer control has the
+ * per-type legacy grants below.
+ */
+export const ADVANCED_LISTING_TYPE_CAPABILITY = "advanced_listing_types";
+export const LISTING_TYPE_TIER = {
+    standard: "basic",
+    spares: "basic",
+    auction: "basic",
+    "pre-order": "advanced",
+    "prize-draw": "advanced",
+    classified: "advanced",
+    "digital-code": "advanced",
+    live: "advanced",
+    art: "advanced",
+    stickers: "advanced",
+};
+/**
+ * Capabilities that grant ONE advanced type on their own, for stores that were
+ * granted it before `advanced_listing_types` existed.
+ *
+ * 🛑 Load-bearing, not politeness. `host_preorders` is a real capability some
+ * live stores already carry; dropping it would silently revoke pre-order
+ * access from a seller who had been using it, and a permission that disappears
+ * on deploy is indistinguishable from a bug.
+ *
+ * `host_auctions` deliberately has NO entry: `auction` is basic now, so the
+ * check is gone. The capability string stays declared in the union so existing
+ * store documents carrying it remain valid — it simply no longer gates
+ * anything.
+ */
+const LEGACY_PER_TYPE_GRANT = {
+    "pre-order": "host_preorders",
+};
+export function isAdvancedListingType(listingType) {
+    return LISTING_TYPE_TIER[listingType] === "advanced";
+}
+/**
+ * Does this capability array carry the advanced-types grant?
+ *
+ * Exists so no call site has to spell the capability string, and so none has
+ * to cast: `capabilities` is `StoreCapability[]` in typed code and
+ * `string[]` as stored, and an `.includes()` across that boundary is where an
+ * `as never` gets reached for — which silences every other check on the
+ * expression, not just the one being worked around.
+ */
+export function hasAdvancedListingTypes(capabilities) {
+    return (capabilities ?? []).includes(ADVANCED_LISTING_TYPE_CAPABILITY);
+}
+/** The types every store can use, with no capability at all. */
+export const BASIC_LISTING_TYPES = ALL_LISTING_TYPES.filter((t) => LISTING_TYPE_TIER[t] === "basic");
+export const ADVANCED_LISTING_TYPES = ALL_LISTING_TYPES.filter((t) => LISTING_TYPE_TIER[t] === "advanced");
+/**
+ * May this store create or convert to this listing type?
+ *
+ * Pure — takes the capability array the caller already holds rather than
+ * re-reading the store. Every gate site in the codebase has the store document
+ * in scope already, and a helper that fetched would add one Firestore read per
+ * product write against Rule #6's round-trip budget.
+ */
+export function isListingTypeAllowedFor(listingType, ctx = {}) {
+    if (ctx.isPrivileged)
+        return true;
+    if (!isAdvancedListingType(listingType))
+        return true;
+    const caps = ctx.capabilities ?? [];
+    if (caps.includes(ADVANCED_LISTING_TYPE_CAPABILITY))
+        return true;
+    const legacy = LEGACY_PER_TYPE_GRANT[listingType];
+    return legacy ? caps.includes(legacy) : false;
+}
+/** Every type this store may use, for building a picker or filtering nav. */
+export function listingTypesAllowedFor(ctx = {}) {
+    return ALL_LISTING_TYPES.filter((t) => isListingTypeAllowedFor(t, ctx));
+}
+/**
+ * Throwing form, for the server-side write paths.
+ *
+ * 🛑 `listingType` being absent is ALLOWED and must stay that way. Both product
+ * schemas declare it optional, and a partial update that touches only `status`
+ * or `stockQuantity` carries no type at all — refusing those would break every
+ * stock decrement and status flip in the app. The gate's job is to refuse a
+ * NAMED advanced type, not to require one.
+ *
+ * 🛑 On an UPDATE, the caller must additionally compare against the STORED
+ * type and skip this when they match — see `sellerUpdateProduct`. Every
+ * per-type edit page re-sends its own type literal, so asserting on the
+ * submitted value alone locks a seller out of editing listings they already
+ * own as soon as the capability is withdrawn. The rule is about creating and
+ * converting, not about touching.
+ */
+export function assertListingTypeAllowed(
+/*
+ * `JsonValue | undefined`, not `unknown`. The callers hold
+ * `Record<string, JsonValue>` request bodies, so this is the widest type the
+ * value can genuinely have — and naming it keeps the narrowing below honest,
+ * where `unknown` would let any argument at all through the door and leave
+ * the type-level signal at the call site worth nothing
+ * (`audit-unknown-leakage`).
+ */
+listingType, ctx = {}) {
+    if (typeof listingType !== "string")
+        return;
+    if (!(listingType in LISTING_TYPE_TIER))
+        return;
+    const typed = listingType;
+    if (isListingTypeAllowedFor(typed, ctx))
+        return;
+    throw new AuthorizationError(`Your store is not approved to create ${typed} listings. ` +
+        `Enable advanced listing types in your store settings first.`);
+}

package/dist/cli/index.js

@@ -60,7 +60,6 @@ export const FEATURE_SUBPATH_MAP = {
     loyalty: "@mohasinac/appkit/features/loyalty",
     collections: "@mohasinac/appkit/features/collections",
     preorders: "@mohasinac/appkit/features/pre-orders",
-    "whatsapp-bot": "@mohasinac/appkit/features/whatsapp-bot",
 };
 /**
  * Wraps a Next.js config object. With appkit, only `@mohasinac/appkit` needs to
@@ -112,7 +111,6 @@ const FEATURE_NAMESPACE_MAP = {
     "before-after": "beforeAfter",
     loyalty: "loyalty",
     collections: "collections",
-    "whatsapp-bot": "whatsappBot",
 };
 // Opaque dynamic import — prevents bundlers from statically analysing the path
 const _dynamicImport = new Function("modulePath", "return import(modulePath)");

package/dist/client.d.ts

@@ -213,6 +213,14 @@ export type { ActionRowProps, ActionRowAlign } from "./ui/components/ActionRow";
 export { Textarea } from "./ui/components/Textarea";
 export { GlobalError } from "./next/components/GlobalError";
 export { AppLayoutShell, LocaleSwitcher, useDashboardNav, BottomActionsProvider, useBottomActions, DashboardNavProvider, LayoutClient } from "./features/layout/index";
+/**
+ * A page declares its own inline primary CTA so the floating action control
+ * stays out of its way until that button has been seen and scrolled past. A
+ * page that publishes actions and no anchor gets the control immediately —
+ * which is right for a bulk-selection screen and wrong for anything with a
+ * visible Buy/Checkout button. See `useCtaReveal`.
+ */
+export { ctaAnchorProps, CTA_ANCHOR_ATTR } from "./features/layout/index";
 export type { AppLayoutShellProps, AppLayoutShellSidebarLink, AppLayoutShellSidebarSection, DashboardNavState, MainNavbarItem, LayoutClientProps } from "./features/layout/index";
 export { ListingLayout } from "./ui/components/ListingLayout";
 export type { ListingLayoutProps, ListingLayoutLabels } from "./ui/components/ListingLayout";
@@ -240,6 +248,7 @@ export { SELLER_ENDPOINTS } from "./constants/index";
  * BidDetailPageClient — checklist-page-wiring-detail-pages-detail-page-matches-list-modal.
  */
 export { ACCOUNT_ENDPOINTS } from "./constants/index";
+export { REVIEW_ENDPOINTS } from "./constants/index";
 export { TourProvider, useTour } from "./_internal/client/features/tour/TourProvider";
 export type { TourContextValue, TourRole } from "./_internal/client/features/tour/TourProvider";
 export { apiClient, ApiClientError } from "./http/index";
@@ -411,6 +420,8 @@ export { WISHLIST_MAX, HISTORY_MAX, CART_MAX_ITEMS, } from "./constants/limits";
 export { normalizeListingType, isAuctionListing, isPreOrderListing, isStandardListing, isPrizeDrawListing, isClassifiedListing, isDigitalCodeListing, isLiveListing, isArtListing, isStickersListing, } from "./features/products/utils/listing-type";
 export { isFinalSale, acceptsChangeOfMindReturns, } from "./features/products/constants/final-sale";
 export { isListingTypeEnabled, isCategoryTypeEnabled, enabledListingTypes, enabledCategoryTypes, ALL_LISTING_TYPES, isListingType, } from "./_internal/shared/listing-types/feature-flags";
+export { ADVANCED_LISTING_TYPE_CAPABILITY, ADVANCED_LISTING_TYPES, BASIC_LISTING_TYPES, LISTING_TYPE_TIER, hasAdvancedListingTypes, isAdvancedListingType, isListingTypeAllowedFor, listingTypesAllowedFor, } from "./_internal/shared/listing-types/tiers";
+export type { ListingTypeAccessContext, ListingTypeTier, } from "./_internal/shared/listing-types/tiers";
 export { actionTracker, setActionTrackerSink, resetActionTrackerSink, type ActionEvent, type ActionTrackerSink, } from "./_internal/shared/listing-types/action-tracker";
 export { cartRequiresShipping, cartIsDigitalOnly, cartIsChatOnly, } from "./_internal/shared/listing-types/cart-shipping";
 export { ACTIONS, action, act, canPerformAction, actionsForListingType, actionLabel, type ActionDef, type ActionKind, type ActionResource, type ActionTree, type ActionConfirmation, } from "./_internal/shared/actions/action-registry";
@@ -422,6 +433,16 @@ export type { LayoutBreakpoint, DashboardVariant, LayoutRole, SidebarNavItem, Si
 export { LISTING_TYPE_CAPABILITIES, capabilityFor, canAddToCart, canBid, supportsShipping, requiresVendorVerified, requiresJurisdictionCheck, hasInstantFulfillment, assertNever, } from "./_internal/shared/listing-types/capabilities";
 export type { ListingTypeCapability } from "./_internal/shared/listing-types/capabilities";
 export { LISTING_TYPE_REGISTRY, pluginFor, detectListingTypeFromSlug } from "./_internal/shared/listing-types/_registry";
+export { useStoreListingEntitlements } from "./features/seller/hooks/useStoreListingEntitlements";
+export { OwnerQuickActions } from "./features/admin/components/OwnerQuickActions";
+export { YourPurchaseStrip } from "./features/orders/components/YourPurchaseStrip";
+export { ReviewFormDrawer, reviewFormSchema } from "./features/reviews/components/ReviewFormDrawer";
+export type { ReviewFormDrawerProps, ReviewFormValues } from "./features/reviews/components/ReviewFormDrawer";
+export { PurchaseReviewAffordance } from "./features/reviews/components/PurchaseReviewAffordance";
+export type { PurchaseReviewAffordanceProps } from "./features/reviews/components/PurchaseReviewAffordance";
+export type { YourPurchaseStripProps, PurchaseContext } from "./features/orders/components/YourPurchaseStrip";
+export type { OwnerQuickActionsProps, OwnerQuickActionsResource } from "./features/admin/components/OwnerQuickActions";
+export type { StoreListingEntitlements } from "./features/seller/hooks/useStoreListingEntitlements";
 export type { ListingTypePlugin } from "./_internal/shared/listing-types/_registry";
 export type { ListingType } from "./features/products/types/index";
 export { MEGABYTE, MAX_IMAGE_BYTES, MAX_PDF_BYTES, MAX_VIDEO_BYTES, MAX_LABEL, MAX_BYTES, ALLOWED_IMAGE_MIMES, IMAGE_ACCEPT_ATTR, ALLOWED_VIDEO_MIMES, ALLOWED_DOC_MIMES, ALLOWED_MIMES, ALLOWED_TYPES_LABEL, MIME_TO_EXT, PDF_MAGIC, VIDEO_CONVERSION_HINTS, classifyMime, isAllowedMime, maxBytesFor, getConversionHint, PRODUCT_MAX_IMAGES, PRODUCT_MAX_VIDEOS, PRODUCT_IMAGE_INDEX_MAX, } from "./_internal/shared/media/limits";
@@ -468,8 +489,6 @@ export { SCHEMAS, lookupApiSchema, lookupFormSchema, lookupFirestoreSchema, } fr
 export type { ApiRouteKey, ApiRouteSchema, FirestoreDocument, FirestoreValue, FormFieldValue, FormValues, HttpVerb, JsonArray, JsonObject, JsonObjectWithUndefined, JsonPrimitive, JsonValue, JsonValueWithUndefined, RegisteredApiRouteKey, RegisteredFirestoreCollection, RegisteredFormId, RegisteredRtdbChannel, RegisteredSieveCollection, RegisteredStorageOp, RegisteredWebhookProvider, RegistryEntry, SchemaRegistry, SchemasShape, WebhookSchemaBucket, } from "./schemas/index";
 export { normalizeError, getErrorMessage, isApiNormalized, isAppNormalized, isFirebaseAuthNormalized, isFirebaseFirestoreNormalized, isFirebaseStorageNormalized, isNativeNormalized, isNetworkNormalized, isUnknownNormalized, isZodNormalized, } from "./errors/normalize";
 export type { NormalizedError, NormalizedApiError, NormalizedAppError, NormalizedFirebaseAuthError, NormalizedFirebaseFirestoreError, NormalizedFirebaseStorageError, NormalizedNativeError, NormalizedNetworkError, NormalizedUnknownThrownValue, NormalizedZodError, } from "./errors/normalize";
-export { buildPaymentProofReviewMessage } from "./features/whatsapp-bot/helpers/payment-proof-message";
-export type { PaymentProofReviewMessageInput } from "./features/whatsapp-bot/types";
 export type { AdminNotificationDocument, ItemRequestDocument, ModerationQueueDocument, ReportDocument, CustomRoleDocument, AnalyticsCardDocument, ListingTemplateDocument, } from "./features/store-extensions/index";
 export { CommandPalette, useCommandPaletteHotkey } from "./features/shell/index";
 export type { CommandPaletteGroup } from "./features/shell/index";

package/dist/client.js

@@ -263,6 +263,14 @@ export { ActionRow } from "./ui/components/ActionRow.js";
 export { Textarea } from "./ui/components/Textarea.js";
 export { GlobalError } from "./next/components/GlobalError.js";
 export { AppLayoutShell, LocaleSwitcher, useDashboardNav, BottomActionsProvider, useBottomActions, DashboardNavProvider, LayoutClient } from "./features/layout/index.js";
+/**
+ * A page declares its own inline primary CTA so the floating action control
+ * stays out of its way until that button has been seen and scrolled past. A
+ * page that publishes actions and no anchor gets the control immediately —
+ * which is right for a bulk-selection screen and wrong for anything with a
+ * visible Buy/Checkout button. See `useCtaReveal`.
+ */
+export { ctaAnchorProps, CTA_ANCHOR_ATTR } from "./features/layout/index.js";
 export { ListingLayout } from "./ui/components/ListingLayout.js";
 export { Search } from "./features/search/components/index.js";
 export { ToastProvider, SkipToMain, NavigationLoader } from "./ui/index.js";
@@ -290,6 +298,7 @@ export { SELLER_ENDPOINTS } from "./constants/index.js";
  * BidDetailPageClient — checklist-page-wiring-detail-pages-detail-page-matches-list-modal.
  */
 export { ACCOUNT_ENDPOINTS } from "./constants/index.js";
+export { REVIEW_ENDPOINTS } from "./constants/index.js";
 // P-16 — Tour system (driver.js-backed onboarding walkthrough).
 export { TourProvider, useTour } from "./_internal/client/features/tour/TourProvider.js";
 export { apiClient, ApiClientError } from "./http/index.js";
@@ -424,6 +433,10 @@ export { normalizeListingType, isAuctionListing, isPreOrderListing, isStandardLi
 export { isFinalSale, acceptsChangeOfMindReturns, } from "./features/products/constants/final-sale.js";
 // SB-UNI-X4 2026-05-13 — per-type feature-flag helpers (client-safe).
 export { isListingTypeEnabled, isCategoryTypeEnabled, enabledListingTypes, enabledCategoryTypes, ALL_LISTING_TYPES, isListingType, } from "./_internal/shared/listing-types/feature-flags.js";
+// Basic/advanced listing-type split. Client-safe: the nav filter and any
+// seller-facing picker need the same rule the server enforces, and deriving it
+// twice is how the ten hand-written copies of the union happened.
+export { ADVANCED_LISTING_TYPE_CAPABILITY, ADVANCED_LISTING_TYPES, BASIC_LISTING_TYPES, LISTING_TYPE_TIER, hasAdvancedListingTypes, isAdvancedListingType, isListingTypeAllowedFor, listingTypesAllowedFor, } from "./_internal/shared/listing-types/tiers.js";
 // SB-UNI-X5 2026-05-13 — action telemetry sink (client-safe; defaults to
 // a no-op + console.debug in dev).
 export { actionTracker, setActionTrackerSink, resetActionTrackerSink, } from "./_internal/shared/listing-types/action-tracker.js";
@@ -440,6 +453,16 @@ export { DashboardLayoutClient, RoleGuard } from "./_internal/client/features/la
 // Listing-type capability registry — SB-UNI X1.
 export { LISTING_TYPE_CAPABILITIES, capabilityFor, canAddToCart, canBid, supportsShipping, requiresVendorVerified, requiresJurisdictionCheck, hasInstantFulfillment, assertNever, } from "./_internal/shared/listing-types/capabilities.js";
 export { LISTING_TYPE_REGISTRY, pluginFor, detectListingTypeFromSlug } from "./_internal/shared/listing-types/_registry.js";
+// Which listing types the signed-in seller's own store may create. Needs a
+// fetch because `capabilities` is a PRIVATE store field — see the hook.
+export { useStoreListingEntitlements } from "./features/seller/hooks/useStoreListingEntitlements.js";
+// Pencil / clone / bin for whoever owns the record, on a PUBLIC surface.
+export { OwnerQuickActions } from "./features/admin/components/OwnerQuickActions.js";
+// "You ordered this - track it" / "your review - edit it", on a product page.
+export { YourPurchaseStrip } from "./features/orders/components/YourPurchaseStrip.js";
+// The first review form this app has had - see the component's header.
+export { ReviewFormDrawer, reviewFormSchema } from "./features/reviews/components/ReviewFormDrawer.js";
+export { PurchaseReviewAffordance } from "./features/reviews/components/PurchaseReviewAffordance.js";
 // Media upload limits — shared by client uploaders + server sign/finalize routes.
 export { MEGABYTE, MAX_IMAGE_BYTES, MAX_PDF_BYTES, MAX_VIDEO_BYTES, MAX_LABEL, MAX_BYTES, ALLOWED_IMAGE_MIMES, IMAGE_ACCEPT_ATTR, ALLOWED_VIDEO_MIMES, ALLOWED_DOC_MIMES, ALLOWED_MIMES, ALLOWED_TYPES_LABEL, MIME_TO_EXT, PDF_MAGIC, VIDEO_CONVERSION_HINTS, classifyMime, isAllowedMime, maxBytesFor, getConversionHint, PRODUCT_MAX_IMAGES, PRODUCT_MAX_VIDEOS, PRODUCT_IMAGE_INDEX_MAX, } from "./_internal/shared/media/limits.js";
 export { ScamAwarenessModal } from "./features/scams/components/ScamAwarenessModal.js";
@@ -476,10 +499,6 @@ export { SellerLiveView } from "./features/seller/components/SellerLiveView.js";
 export { SCHEMAS, lookupApiSchema, lookupFormSchema, lookupFirestoreSchema, } from "./schemas/index.js";
 // ── W3 catch-clause normalizer ──────────────────────────────────────────────
 export { normalizeError, getErrorMessage, isApiNormalized, isAppNormalized, isFirebaseAuthNormalized, isFirebaseFirestoreNormalized, isFirebaseStorageNormalized, isNativeNormalized, isNetworkNormalized, isUnknownNormalized, isZodNormalized, } from "./errors/normalize.js";
-// [CLIENT-SAFE] Pure wa.me share-link message builder — imported directly
-// from its isolated file (not ./whatsapp-bot/server) so this barrel's graph
-// never touches the sibling crypto-importing helpers.
-export { buildPaymentProofReviewMessage } from "./features/whatsapp-bot/helpers/payment-proof-message.js";
 export { CommandPalette, useCommandPaletteHotkey } from "./features/shell/index.js";
 export { AdminBlogEditorView, AdminBundleEditorView, AdminCarouselEditorView, AdminCategoryEditorView, AdminCouponEditorView, AdminFaqEditorView, AdminFeatureEditorView, AdminOrderEditorView, AdminPayoutMarkPaidModal, AdminAuditLogView, ViewAuditLogEntryModal, AdminProductEditorView, AdminScammerEditorView, 
 // Client-exported for the W22 /admin/team/{new,[id]/edit} pages. It was

package/dist/constants/api-endpoints.d.ts

@@ -57,6 +57,11 @@ export declare const ACCOUNT_ENDPOINTS: {
     readonly HISTORY_ITEM: (productId: string) => string;
     readonly HISTORY_MERGE: "/api/user/history/merge";
     readonly REVIEWS: "/api/user/reviews";
+    /**
+     * "Have I bought this, and did I review it?" for one product — backs the
+     * purchase strip on a product page. Per-viewer, never cached.
+     */
+    readonly PURCHASE_CONTEXT: (productId: string) => string;
     readonly BIDS: "/api/user/bids";
     readonly BID_BY_ID: (id: string) => string;
     readonly EXPORT: "/api/user/export";
@@ -452,6 +457,8 @@ export declare const PROMOTION_ENDPOINTS: {
 export declare const REVIEW_ENDPOINTS: {
     readonly LIST: "/api/reviews";
     readonly FEATURED: "/api/reviews?featured=true";
+    /** GET / PATCH / DELETE one review. The PATCH is the buyer's own edit. */
+    readonly BY_ID: (id: string) => string;
 };
 export declare const SEARCH_ENDPOINTS: {
     readonly SUGGESTIONS: "/api/search/suggestions";
@@ -619,6 +626,11 @@ export declare const API_ENDPOINTS: {
         readonly HISTORY_ITEM: (productId: string) => string;
         readonly HISTORY_MERGE: "/api/user/history/merge";
         readonly REVIEWS: "/api/user/reviews";
+        /**
+         * "Have I bought this, and did I review it?" for one product — backs the
+         * purchase strip on a product page. Per-viewer, never cached.
+         */
+        readonly PURCHASE_CONTEXT: (productId: string) => string;
         readonly BIDS: "/api/user/bids";
         readonly BID_BY_ID: (id: string) => string;
         readonly EXPORT: "/api/user/export";
@@ -958,6 +970,8 @@ export declare const API_ENDPOINTS: {
     readonly REVIEWS: {
         readonly LIST: "/api/reviews";
         readonly FEATURED: "/api/reviews?featured=true";
+        /** GET / PATCH / DELETE one review. The PATCH is the buyer's own edit. */
+        readonly BY_ID: (id: string) => string;
     };
     readonly SEARCH: {
         readonly SUGGESTIONS: "/api/search/suggestions";
@@ -1146,6 +1160,11 @@ export declare const API_ROUTES: {
         readonly HISTORY_ITEM: (productId: string) => string;
         readonly HISTORY_MERGE: "/api/user/history/merge";
         readonly REVIEWS: "/api/user/reviews";
+        /**
+         * "Have I bought this, and did I review it?" for one product — backs the
+         * purchase strip on a product page. Per-viewer, never cached.
+         */
+        readonly PURCHASE_CONTEXT: (productId: string) => string;
         readonly BIDS: "/api/user/bids";
         readonly BID_BY_ID: (id: string) => string;
         readonly EXPORT: "/api/user/export";
@@ -1485,6 +1504,8 @@ export declare const API_ROUTES: {
     readonly REVIEWS: {
         readonly LIST: "/api/reviews";
         readonly FEATURED: "/api/reviews?featured=true";
+        /** GET / PATCH / DELETE one review. The PATCH is the buyer's own edit. */
+        readonly BY_ID: (id: string) => string;
     };
     readonly SEARCH: {
         readonly SUGGESTIONS: "/api/search/suggestions";

package/dist/constants/api-endpoints.js

@@ -79,6 +79,11 @@ export const ACCOUNT_ENDPOINTS = {
     HISTORY_ITEM: (productId) => `/api/user/history/${encodeURIComponent(productId)}`,
     HISTORY_MERGE: "/api/user/history/merge",
     REVIEWS: "/api/user/reviews",
+    /**
+     * "Have I bought this, and did I review it?" for one product — backs the
+     * purchase strip on a product page. Per-viewer, never cached.
+     */
+    PURCHASE_CONTEXT: (productId) => `/api/user/purchases/${encodeURIComponent(productId)}`,
     BIDS: "/api/user/bids",
     BID_BY_ID: (id) => `/api/user/bids/${id}`,
     EXPORT: "/api/user/export",
@@ -592,6 +597,8 @@ export const PROMOTION_ENDPOINTS = {
 export const REVIEW_ENDPOINTS = {
     LIST: "/api/reviews",
     FEATURED: "/api/reviews?featured=true",
+    /** GET / PATCH / DELETE one review. The PATCH is the buyer's own edit. */
+    BY_ID: (id) => `/api/reviews/${encodeURIComponent(id)}`,
 };
 // ---------------------------------------------------------------------------
 // Search

package/dist/features/account/components/UserOrdersView.js

@@ -11,7 +11,23 @@ import { OrderCard } from "../../orders/components/OrdersList.js";
 import { useOrderScope } from "../../orders/components/OrderScopeTabs.js";
 import { useSearchParams } from "next/navigation.js";
 const CANCELLABLE_STATUSES = new Set(["pending", "confirmed", "processing"]);
-const TRACKABLE_STATUSES = new Set(["shipped"]);
+/*
+ * 🛑 Every PRE-DELIVERY status, not just "shipped".
+ *
+ * It was `["shipped"]` alone, so a buyer whose order was pending, confirmed
+ * or processing had no "where is it" link at all — which is precisely when
+ * they most want one. The timeline on the track page reads correctly for all
+ * of these: it shows the stages reached and the stages still ahead.
+ *
+ * Delivered, cancelled, refunded and returned are excluded because tracking a
+ * finished order is the order detail page's job, not a courier's.
+ */
+const TRACKABLE_STATUSES = new Set([
+    "pending",
+    "confirmed",
+    "processing",
+    "shipped",
+]);
 const SORT_OPTIONS = [
     { value: sortBy("createdAt", "DESC"), label: "Newest first" },
     { value: sortBy("createdAt", "ASC"), label: "Oldest first" },
@@ -77,12 +93,15 @@ export function UserOrdersView({ onOrderClick }) {
         portal: "user",
         title: "My Orders",
         search: {
-            placeholder: "Search by order id…",
-            // `/api/user/orders` filters in memory on `o.id` and nothing else — not
-            // the product titles the rows display, which is what a buyer would try
-            // first. Saying "order id" is the honest promise until the route can
-            // match more.
-            fields: ["id"],
+            placeholder: "Search by item or order id…",
+            /*
+             * The route now matches product titles as well as the order id, so the
+             * placeholder can promise it. It said "order id" because that was all
+             * the route could do, with a comment calling that "the honest promise
+             * until the route can match more" — this is the promise catching up,
+             * not a widened claim.
+             */
+            fields: ["id", "productTitle"],
         },
         emptyLabel: emptyMessage,
         filterKeys: ["status", "orderType"],