@mohasinac/appkit 4.53.2 → 4.54.1

package/dist/features/reviews/components/ReviewFormDrawer.js

@@ -0,0 +1,127 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Write or edit a review.
+ *
+ * ── This is the first review form the application has ever had ────────────
+ *
+ * 🛑 Measured before building: `useCreateReview` had ZERO component consumers,
+ * `ReviewForm` did not exist, `ViewReviewModal` is read-only, `/user/reviews`
+ * was index-only with no detail or edit route, and the ACTIONS registry had no
+ * REVIEW bucket. The repo already knew — a tester case records
+ * "createReviewAction, useCreateReview and the UI_TEXT.WRITE_REVIEW string all
+ * exist, but no .tsx consumes any of them". So there was a complete write path
+ * with nothing able to reach it.
+ *
+ * ── Field names, because the obvious guesses are all wrong ────────────────
+ *
+ *   body      → `comment`   (NOT `body`)
+ *   owner     → `userId`    (NOT `buyerId`)
+ *   verified  → `verified`  (there is no `isVerifiedPurchase`)
+ *   reply     → `sellerReply`
+ *
+ * `REVIEW_UPDATABLE_FIELDS` is already `["rating","title","comment","images"]`,
+ * so that is exactly what this form owns — and exactly what the PATCH route
+ * accepts now that it is `.strict()`.
+ *
+ * 🛑 Images are deliberately NOT edited here. The PATCH route does not finalise
+ * staged media, so a URL submitted through it would persist as a `tmp/`
+ * reference; `updateReview` owns review media. Rather than ship a picker whose
+ * uploads silently rot, this form edits the text and the rating.
+ *
+ * @tag domain:reviews
+ * @tag layer:components
+ * @tag access:client
+ */
+import { useEffect, useState } from "react";
+import { z } from "zod";
+import { apiClient } from "../../../http/index.js";
+import { ACTIONS } from "../../../_internal/shared/actions/action-registry.js";
+import { REVIEW_ENDPOINTS } from "../../../constants/api-endpoints.js";
+import { Button, FieldInput, FieldTextarea, Form, Row, SideDrawer, Stack, Text, } from "../../../ui/index.js";
+import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary.js";
+// Keys errors by the FULL dotted path, so a nested issue cannot collapse onto
+// one map entry and lose all but the last.
+import { applyZodIssues } from "../../../ui/forms/apply-zod-issues.js";
+import { Icon } from "../../../ui/components/Icon.js";
+import { IconButton } from "../../../ui/components/IconButton.js";
+import { normalizeError } from "../../../errors/normalize.js";
+import { toUserMessage } from "../../../errors/error-display-map.js";
+/**
+ * Mirrors the PATCH route's schema, which is `.strict()`. A field this form can
+ * send that the route does not accept is a 400 naming it — which is the point:
+ * the two were allowed to disagree before, and the route silently accepted
+ * anything.
+ */
+export const reviewFormSchema = z.object({
+    rating: z
+        .number()
+        .int()
+        .min(1, "Pick a rating from 1 to 5")
+        .max(5, "Pick a rating from 1 to 5"),
+    title: z.string().trim().min(1, "Give your review a title").max(100),
+    comment: z
+        .string()
+        .trim()
+        .min(1, "Say something about the item")
+        .max(2000, "Keep it under 2000 characters"),
+});
+const EMPTY = { rating: 0, title: "", comment: "" };
+export function ReviewFormDrawer({ isOpen, onClose, reviewId, productId, storeId, initialValues, onSaved, }) {
+    const editing = Boolean(reviewId);
+    const [values, setValues] = useState({
+        ...EMPTY,
+        ...initialValues,
+    });
+    const [busy, setBusy] = useState(false);
+    const [formError, setFormError] = useState(null);
+    /*
+     * Re-seed when the drawer is reopened for a DIFFERENT review. Without this
+     * the second review a buyer edits in one session shows the first one's text
+     * — the component stays mounted, so initial state alone is not enough.
+     */
+    useEffect(() => {
+        if (isOpen)
+            setValues({ ...EMPTY, ...initialValues });
+        // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, [isOpen, reviewId]);
+    async function submit({ setFieldError, clearErrors, markSubmitAttempted, }) {
+        clearErrors();
+        setFormError(null);
+        markSubmitAttempted?.();
+        const parsed = reviewFormSchema.safeParse(values);
+        if (!parsed.success) {
+            applyZodIssues(parsed.error.issues, setFieldError);
+            return;
+        }
+        setBusy(true);
+        try {
+            if (reviewId) {
+                await apiClient.patch(REVIEW_ENDPOINTS.BY_ID(reviewId), parsed.data);
+            }
+            else {
+                await apiClient.post(REVIEW_ENDPOINTS.LIST, {
+                    ...parsed.data,
+                    productId,
+                    storeId,
+                });
+            }
+            onSaved?.();
+            onClose();
+        }
+        catch (err) {
+            const normalized = normalizeError(err);
+            /*
+             * 🛑 toUserMessage, never the server's own message. A raw `?? error`
+             * fallback is what rendered a Node MODULE_NOT_FOUND with a require
+             * stack inside a bid modal (Root Cause #86); this resolves through
+             * errors.codes.* and terminates at UNKNOWN.
+             */
+            setFormError(toUserMessage(normalized.code ?? "UNKNOWN"));
+        }
+        finally {
+            setBusy(false);
+        }
+    }
+    return (_jsx(SideDrawer, { isOpen: isOpen, onClose: onClose, title: editing ? "Edit your review" : "Write a review", children: _jsx(Form, { schema: reviewFormSchema, onSubmit: (e) => e.preventDefault(), className: "space-y-4", children: ({ setFieldError, clearErrors, markSubmitAttempted }) => (_jsxs(Stack, { gap: "md", children: [_jsx(FormErrorSummary, {}), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "medium", children: "Rating" }), _jsx(Row, { gap: "xs", align: "center", children: [1, 2, 3, 4, 5].map((n) => (_jsx(IconButton, { "aria-label": `${n} star${n === 1 ? "" : "s"}`, "aria-pressed": values.rating === n, size: "md", variant: "ghost", icon: _jsx(Icon, { name: "review", size: "lg", filled: n <= values.rating, tone: n <= values.rating ? "warning" : "faint" }), onClick: () => setValues((v) => ({ ...v, rating: n })) }, n))) })] }), _jsx(FieldInput, { name: "title", label: "Title", required: true, value: values.title, onChange: (title) => setValues((v) => ({ ...v, title })) }), _jsx(FieldTextarea, { name: "comment", label: "Your review", required: true, rows: 6, value: values.comment, onChange: (comment) => setValues((v) => ({ ...v, comment })) }), formError && (_jsx(Text, { size: "sm", color: "error", role: "alert", children: formError })), _jsx(Button, { type: "submit", isLoading: busy, action: editing ? ACTIONS.REVIEW.edit : ACTIONS.REVIEW.write, onClick: () => void submit({ setFieldError, clearErrors, markSubmitAttempted }) })] })) }) }));
+}

package/dist/features/reviews/components/index.d.ts

@@ -11,3 +11,7 @@ export type { ReviewsIndexListingProps } from "./ReviewsIndexListing";
 export { ReviewsListingPanel } from "./ReviewsListingPanel";
 export type { ReviewsListingPanelProps, ReviewsSource } from "./ReviewsListingPanel";
 export type { ReviewDetailPageViewProps } from "./ReviewDetailPageView";
+export { ReviewFormDrawer, reviewFormSchema } from "./ReviewFormDrawer";
+export type { ReviewFormDrawerProps, ReviewFormValues } from "./ReviewFormDrawer";
+export { PurchaseReviewAffordance } from "./PurchaseReviewAffordance";
+export type { PurchaseReviewAffordanceProps } from "./PurchaseReviewAffordance";

package/dist/features/reviews/components/index.js

@@ -4,3 +4,5 @@ export { ReviewSummary } from "./ReviewSummary.js";
 export { ViewReviewModal } from "./ReviewModal.js";
 export { ReviewsIndexListing } from "./ReviewsIndexListing.js";
 export { ReviewsListingPanel } from "./ReviewsListingPanel.js";
+export { ReviewFormDrawer, reviewFormSchema } from "./ReviewFormDrawer.js";
+export { PurchaseReviewAffordance } from "./PurchaseReviewAffordance.js";

package/dist/features/scams/schemas/index.d.ts

@@ -10,11 +10,11 @@ export declare const scammerSocialMediaSchema: z.ZodObject<{
     handle: z.ZodString;
     url: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    platform: "other" | "youtube" | "instagram" | "facebook" | "whatsapp" | "telegram" | "twitter" | "olx" | "linkedin";
+    platform: "other" | "youtube" | "whatsapp" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "linkedin";
     handle: string;
     url?: string | undefined;
 }, {
-    platform: "other" | "youtube" | "instagram" | "facebook" | "whatsapp" | "telegram" | "twitter" | "olx" | "linkedin";
+    platform: "other" | "youtube" | "whatsapp" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "linkedin";
     handle: string;
     url?: string | undefined;
 }>;
@@ -44,11 +44,11 @@ export declare const scammerFirestoreSchema: z.ZodObject<{
         handle: z.ZodString;
         url: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        platform: "other" | "youtube" | "instagram" | "facebook" | "whatsapp" | "telegram" | "twitter" | "olx" | "linkedin";
+        platform: "other" | "youtube" | "whatsapp" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "linkedin";
         handle: string;
         url?: string | undefined;
     }, {
-        platform: "other" | "youtube" | "instagram" | "facebook" | "whatsapp" | "telegram" | "twitter" | "olx" | "linkedin";
+        platform: "other" | "youtube" | "whatsapp" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "linkedin";
         handle: string;
         url?: string | undefined;
     }>, "many">;
@@ -93,7 +93,7 @@ export declare const scammerFirestoreSchema: z.ZodObject<{
     scamType: string;
     reportedBy: string;
     reportedByAnon: boolean;
-    scamPlatform: "other" | "letitrip" | "instagram" | "facebook" | "whatsapp" | "telegram" | "twitter" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
+    scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
     evidence: string[];
     phones: string[];
     upiIds: string[];
@@ -102,7 +102,7 @@ export declare const scammerFirestoreSchema: z.ZodObject<{
     incidentCount: number;
     seoSlug: string;
     socialMedia: {
-        platform: "other" | "youtube" | "instagram" | "facebook" | "whatsapp" | "telegram" | "twitter" | "olx" | "linkedin";
+        platform: "other" | "youtube" | "whatsapp" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "linkedin";
         handle: string;
         url?: string | undefined;
     }[];
@@ -133,7 +133,7 @@ export declare const scammerFirestoreSchema: z.ZodObject<{
     scamType: string;
     reportedBy: string;
     reportedByAnon: boolean;
-    scamPlatform: "other" | "letitrip" | "instagram" | "facebook" | "whatsapp" | "telegram" | "twitter" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
+    scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
     evidence: string[];
     phones: string[];
     upiIds: string[];
@@ -142,7 +142,7 @@ export declare const scammerFirestoreSchema: z.ZodObject<{
     incidentCount: number;
     seoSlug: string;
     socialMedia: {
-        platform: "other" | "youtube" | "instagram" | "facebook" | "whatsapp" | "telegram" | "twitter" | "olx" | "linkedin";
+        platform: "other" | "youtube" | "whatsapp" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "linkedin";
         handle: string;
         url?: string | undefined;
     }[];
@@ -201,7 +201,7 @@ export declare const scammerIncidentFirestoreSchema: z.ZodObject<{
     reportedBy: string;
     scammerId: string;
     reportedByAnon: boolean;
-    scamPlatform: "other" | "letitrip" | "instagram" | "facebook" | "whatsapp" | "telegram" | "twitter" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
+    scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
     evidence: string[];
     verifiedBy?: string | undefined;
     amountLost?: number | undefined;
@@ -224,7 +224,7 @@ export declare const scammerIncidentFirestoreSchema: z.ZodObject<{
     reportedBy: string;
     scammerId: string;
     reportedByAnon: boolean;
-    scamPlatform: "other" | "letitrip" | "instagram" | "facebook" | "whatsapp" | "telegram" | "twitter" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
+    scamPlatform: "other" | "whatsapp" | "letitrip" | "instagram" | "facebook" | "telegram" | "twitter" | "olx" | "facebook_marketplace" | "in_person" | "phone_call";
     evidence: string[];
     verifiedBy?: string | undefined;
     amountLost?: number | undefined;

package/dist/features/search/action-index/settings-entries.js

@@ -169,15 +169,6 @@ export const SITE_SETTINGS_ENTRIES = [
         tab: "notifications",
         kind: "toggle",
     },
-    {
-        slug: "whatsapp-notifications",
-        anchored: true,
-        label: "WhatsApp notifications",
-        description: "Send order updates over WhatsApp.",
-        keywords: ["whatsapp", "order updates", "meta"],
-        tab: "notifications",
-        kind: "toggle",
-    },
     {
         slug: "daily-digest",
         anchored: true,

package/dist/features/seller/actions/seller-actions.d.ts

@@ -130,7 +130,7 @@ export declare function bulkSellerOrder(userId: string, userRole: string, userDi
  * only safe shape — a caller-supplied `storeId` would let a seller file a
  * listing under someone else's store.
  */
-export declare function createSellerProduct(userId: string, userName: string, userEmail: string, input: Record<string, JsonValue>): Promise<void>;
+export declare function createSellerProduct(userId: string, userName: string, userEmail: string, input: Record<string, JsonValue>, userRole?: string): Promise<void>;
 export declare function getSellerStore(userId: string): Promise<StoreDocument | null>;
 export declare function getSellerShipping(userId: string): Promise<import("../../auth").SellerShippingConfig | null>;
 export declare function getSellerPayoutSettings(userId: string): Promise<SellerPayoutDetails | {

package/dist/features/seller/actions/seller-actions.js

@@ -13,6 +13,7 @@ import { normalizeError } from "../../../errors/normalize.js";
 import { enqueueJob } from "../../jobs/actions/enqueue-job.js";
 import { isAdminUser, isStrictSellerUser, isTesterUser } from "../../auth/role-predicates.js";
 import { ApiError, AuthorizationError, NotFoundError, ValidationError, } from "../../../errors/index.js";
+import { assertListingTypeAllowed } from "../../../_internal/shared/listing-types/tiers.js";
 import { userRepository } from "../../auth/repository/user.repository.js";
 import { storeRepository } from "../../stores/repository/store.repository.js";
 import { productRepository } from "../../products/repository/products.repository.js";
@@ -427,7 +428,13 @@ export async function bulkSellerOrder(userId, userRole, userDisplayName, userEma
  * only safe shape — a caller-supplied `storeId` would let a seller file a
  * listing under someone else's store.
  */
-export async function createSellerProduct(userId, userName, userEmail, input) {
+export async function createSellerProduct(userId, userName, userEmail, input, 
+/*
+ * 🛑 Defaults to `"seller"`, which FAILS CLOSED. A caller that forgets to
+ * pass a role gets the gate, not a bypass — the opposite default would make
+ * every un-updated call site an admin.
+ */
+userRole = "seller") {
     const store = await storeRepository.findByOwnerId(userId);
     // Refuse rather than write an orphan. A listing with no store is invisible on
     // its own storefront, forms no order group at checkout, and cannot be paid
@@ -436,6 +443,19 @@ export async function createSellerProduct(userId, userName, userEmail, input) {
     if (!store) {
         throw new NotFoundError("No store found for this account. Create your store first.");
     }
+    /*
+     * The advanced-listing-type gate, at the choke point every create funnels
+     * through.
+     *
+     * It lives HERE rather than only in the consumer action because this is the
+     * one place all creates meet, and because the store document is already in
+     * scope — so the check costs no extra Firestore read (Rule #6). The caller's
+     * own gate is a nicety; this one is the guarantee.
+     */
+    assertListingTypeAllowed(input.listingType, {
+        isPrivileged: userRole === "admin",
+        capabilities: store.capabilities,
+    });
     const finalizedData = await finalizeProductMediaReferences(input);
     await productRepository.create({
         ...finalizedData,
@@ -592,11 +612,37 @@ export async function sellerUpdateProduct(userId, userRole, productId, input) {
     if (!existing)
         throw new NotFoundError("Product not found");
     // existing.storeId is the store slug, not the seller's Firebase UID.
-    if (userRole !== "admin") {
-        const store = await storeRepository.findByOwnerId(userId);
+    const isPrivileged = userRole === "admin";
+    let store = null;
+    if (!isPrivileged) {
+        store = await storeRepository.findByOwnerId(userId);
         if (!store || existing.storeId !== store.id)
             throw new AuthorizationError("You do not own this product");
     }
+    /*
+     * 🛑 The UPDATE path had no listing-type gate at all, which made the
+     * create-time one bypassable in a single request: create a `standard`
+     * listing, then PATCH `listingType: "auction"` onto it and the type stuck.
+     * Gating only creates is gating nothing.
+     *
+     * 🛑 But it fires only on a CHANGE of type, and that is load-bearing. Every
+     * per-type edit page spreads its own literal into the payload
+     * (`store/art/[id]/edit` sends `listingType: "art"`), so gating on the
+     * submitted value alone would lock a seller out of editing listings they
+     * already own the moment the capability was turned off — or an admin revoked
+     * it. The rule is "you may not create or convert INTO an advanced type",
+     * never "you may not touch one".
+     *
+     * Reuses the store already loaded for the ownership check above, so a
+     * non-admin update pays no extra read. An admin skips both.
+     */
+    if (typeof input.listingType === "string" &&
+        input.listingType !== existing.listingType) {
+        assertListingTypeAllowed(input.listingType, {
+            isPrivileged,
+            capabilities: store?.capabilities,
+        });
+    }
     if (typeof input.status === "string" &&
         input.status !== "published" &&
         existing.status === "published") {

package/dist/features/seller/components/SellerPayoutSettingsView.js

@@ -88,6 +88,23 @@ const payoutSettingsDraftSchema = z.object({
      */
     supportsShippingProtection: annotate(z.boolean(), { section: "preferences", order: 5, row: "quarter" }),
     supportsSaleProtection: annotate(z.boolean(), { section: "preferences", order: 6, row: "quarter" }),
+    /*
+     * Advanced listing types — pre-orders, prize draws, classifieds, digital
+     * codes, live items, art and stickers. Everyone can already list
+     * `standard`, `spares` and `auction`.
+     *
+     * 🛑 Alongside payout settings for the same reason the protections are:
+     * each of these carries an obligation, not just a form. A pre-order takes
+     * money for stock that does not exist yet, a prize draw is a regulated
+     * promotion, a classified happens off-platform with no escrow, a
+     * digital-code listing must be delivered from a pool the seller has to keep
+     * stocked, and a live listing is an animal. A new seller should meet those
+     * deliberately rather than by discovering a nav item.
+     *
+     * OFF by default, and the copy has to say what enabling ACCEPTS — the same
+     * reason the protection toggles say what declining costs.
+     */
+    advancedListingTypesEnabled: annotate(z.boolean(), { section: "preferences", order: 7, row: "quarter" }),
 }).superRefine((v, ctx) => {
     if (v.method === "upi") {
         if (!v.upiId.trim()) {
@@ -128,6 +145,13 @@ const DEFAULT_DRAFT = {
     // OFF by default — matches StoreDocument, and absence must read as declined.
     supportsShippingProtection: false,
     supportsSaleProtection: false,
+    /*
+     * OFF by default, which is also the direction the server gate fails. A
+     * default of `true` here would be worse than cosmetic: this draft is what
+     * gets PATCHed, so it would silently GRANT the capability on the next
+     * unrelated save of this form.
+     */
+    advancedListingTypesEnabled: false,
 };
 export function SellerPayoutSettingsView({ apiBase = SELLER_ENDPOINTS.PAYOUT_SETTINGS }) {
     const [draft, setDraft] = useState(DEFAULT_DRAFT);
@@ -175,6 +199,9 @@ export function SellerPayoutSettingsView({ apiBase = SELLER_ENDPOINTS.PAYOUT_SET
                 pricesIncludeGst: res?.data?.pricesIncludeGst ?? true,
                 supportsShippingProtection: res?.data?.supportsShippingProtection ?? false,
                 supportsSaleProtection: res?.data?.supportsSaleProtection ?? false,
+                // Absent means NOT entitled. Defaulting this to `true` would be a
+                // silent GRANT on the next save, since this draft is what gets sent.
+                advancedListingTypesEnabled: res?.data?.advancedListingTypesEnabled ?? false,
             });
         })
             .catch(console.error)
@@ -205,6 +232,7 @@ export function SellerPayoutSettingsView({ apiBase = SELLER_ENDPOINTS.PAYOUT_SET
                 pricesIncludeGst: draft.pricesIncludeGst,
                 supportsShippingProtection: draft.supportsShippingProtection,
                 supportsSaleProtection: draft.supportsSaleProtection,
+                advancedListingTypesEnabled: draft.advancedListingTypesEnabled,
                 // Flat, matching the route's schema. A nested `taxInfo` object was
                 // stripped by `z.object()` and never reached Firestore.
                 gstin: draft.gstin.trim(),
@@ -271,8 +299,8 @@ export function SellerPayoutSettingsView({ apiBase = SELLER_ENDPOINTS.PAYOUT_SET
         {
             id: "preferences",
             label: "Preferences",
-            fields: ["autoPayout", "minimumThreshold", "emiEnabled", "pricesIncludeGst", "supportsShippingProtection", "supportsSaleProtection"],
-            render: ({ values, onChange }) => (_jsxs(Stack, { gap: "md", children: [_jsx(Heading, { level: 3, className: "mb-2", children: "Payout Preferences" }), _jsx(Toggle, { checked: values.autoPayout, onChange: (checked) => onChange({ autoPayout: checked }), label: "Enable auto-payout \u2014 automatically transfer earnings on schedule", disabled: busy }), _jsx(FormField, { name: "minimumThreshold", label: "Minimum Payout Threshold (\u20B9)", type: "number", value: values.minimumThreshold, onChange: (v) => onChange({ minimumThreshold: v }), placeholder: "e.g. 500", helpText: "Payouts are held until your balance exceeds this amount. Leave blank for no minimum.", disabled: busy }), _jsxs(Div, { className: `${__P.p3} bg-[var(--appkit-color-surface-alt)] border border-[var(--appkit-color-border)]`, rounded: "lg", children: [_jsx(Text, { className: "mb-1", size: "sm", weight: "medium", children: "Payout Schedule" }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: "Auto-payouts run every Monday for the previous week's settled orders. Manual payouts can be requested from the Payouts page at any time." })] }), _jsx(Toggle, { checked: values.emiEnabled, onChange: (checked) => onChange({ emiEnabled: checked }), label: "Offer EMI financing on eligible orders", disabled: busy }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: "Only shown to buyers when platform-wide EMI is also enabled and their cart subtotal from your store exceeds the site's minimum order value. Orders on an EMI plan hold your payout until every installment is paid, unless you mark the item \"ship before EMI completes\"." }), _jsx(Toggle, { checked: values.pricesIncludeGst, onChange: (checked) => onChange({ pricesIncludeGst: checked }), label: "The prices I enter already include GST", disabled: busy }), _jsxs(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: ["Buyers always see a tax-inclusive price, so this only changes how your own entry is read. Leave it", " ", _jsx(Span, { weight: "semibold", children: "on" }), " and a \u20B9999 listing at 5% GST means the buyer pays \u20B9999 and you earn \u20B9951.43 \u2014 the \u20B947.57 is GST we collect and remit for you. Turn it", " ", _jsx(Span, { weight: "semibold", children: "off" }), " and \u20B9999 is treated as your ex-GST price: the listing is shown at \u20B91,048.95 and you earn \u20B9999."] }), _jsx(Heading, { level: 3, className: "mb-2 mt-4", children: "Buyer Protections" }), _jsxs(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: ["Two separate covers a buyer can pay for at checkout. Supporting one earns a safety badge on your listings;", " ", _jsx(Span, { weight: "semibold", children: "declining shows buyers a risk notice instead" }), " \u2014 there is no neutral option, because a buyer who is told nothing cannot tell a seller who declined from one who was never asked."] }), _jsx(Toggle, { checked: values.supportsShippingProtection, onChange: (checked) => onChange({ supportsShippingProtection: checked }), label: "Offer shipment protection \u2014 loss or damage in transit", disabled: busy }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: "The parcel never arrived or arrived damaged. We pursue the courier, not you, and the buyer is refunded from the funds we hold \u2014 so a genuine transit loss costs you the item, not an argument." }), _jsx(Toggle, { checked: values.supportsSaleProtection, onChange: (checked) => onChange({ supportsSaleProtection: checked }), label: "Offer sale protection \u2014 item not as described", disabled: busy }), _jsxs(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: ["A no-questions-asked refund on the item itself. Be clear about what this means:", " ", _jsx(Span, { weight: "semibold", children: "a claim we inspect and find genuine is charged back to you" }), " ", "\u2014 that is the cover. A claim we find to be a change of mind is absorbed by us, which is what the buyer's fee pays for. Not offered on your final-sale listings, since \"no returns\" and \"no questions asked\" cannot both be true."] }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: "Changing this does not re-price listings you have already published. It applies to products you save from now on." })] })),
+            fields: ["autoPayout", "minimumThreshold", "emiEnabled", "pricesIncludeGst", "supportsShippingProtection", "supportsSaleProtection", "advancedListingTypesEnabled"],
+            render: ({ values, onChange }) => (_jsxs(Stack, { gap: "md", children: [_jsx(Heading, { level: 3, className: "mb-2", children: "Payout Preferences" }), _jsx(Toggle, { checked: values.autoPayout, onChange: (checked) => onChange({ autoPayout: checked }), label: "Enable auto-payout \u2014 automatically transfer earnings on schedule", disabled: busy }), _jsx(FormField, { name: "minimumThreshold", label: "Minimum Payout Threshold (\u20B9)", type: "number", value: values.minimumThreshold, onChange: (v) => onChange({ minimumThreshold: v }), placeholder: "e.g. 500", helpText: "Payouts are held until your balance exceeds this amount. Leave blank for no minimum.", disabled: busy }), _jsxs(Div, { className: `${__P.p3} bg-[var(--appkit-color-surface-alt)] border border-[var(--appkit-color-border)]`, rounded: "lg", children: [_jsx(Text, { className: "mb-1", size: "sm", weight: "medium", children: "Payout Schedule" }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: "Auto-payouts run every Monday for the previous week's settled orders. Manual payouts can be requested from the Payouts page at any time." })] }), _jsx(Toggle, { checked: values.emiEnabled, onChange: (checked) => onChange({ emiEnabled: checked }), label: "Offer EMI financing on eligible orders", disabled: busy }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: "Only shown to buyers when platform-wide EMI is also enabled and their cart subtotal from your store exceeds the site's minimum order value. Orders on an EMI plan hold your payout until every installment is paid, unless you mark the item \"ship before EMI completes\"." }), _jsx(Toggle, { checked: values.pricesIncludeGst, onChange: (checked) => onChange({ pricesIncludeGst: checked }), label: "The prices I enter already include GST", disabled: busy }), _jsxs(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: ["Buyers always see a tax-inclusive price, so this only changes how your own entry is read. Leave it", " ", _jsx(Span, { weight: "semibold", children: "on" }), " and a \u20B9999 listing at 5% GST means the buyer pays \u20B9999 and you earn \u20B9951.43 \u2014 the \u20B947.57 is GST we collect and remit for you. Turn it", " ", _jsx(Span, { weight: "semibold", children: "off" }), " and \u20B9999 is treated as your ex-GST price: the listing is shown at \u20B91,048.95 and you earn \u20B9999."] }), _jsx(Heading, { level: 3, className: "mb-2 mt-4", children: "Buyer Protections" }), _jsxs(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: ["Two separate covers a buyer can pay for at checkout. Supporting one earns a safety badge on your listings;", " ", _jsx(Span, { weight: "semibold", children: "declining shows buyers a risk notice instead" }), " \u2014 there is no neutral option, because a buyer who is told nothing cannot tell a seller who declined from one who was never asked."] }), _jsx(Toggle, { checked: values.supportsShippingProtection, onChange: (checked) => onChange({ supportsShippingProtection: checked }), label: "Offer shipment protection \u2014 loss or damage in transit", disabled: busy }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: "The parcel never arrived or arrived damaged. We pursue the courier, not you, and the buyer is refunded from the funds we hold \u2014 so a genuine transit loss costs you the item, not an argument." }), _jsx(Toggle, { checked: values.supportsSaleProtection, onChange: (checked) => onChange({ supportsSaleProtection: checked }), label: "Offer sale protection \u2014 item not as described", disabled: busy }), _jsxs(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: ["A no-questions-asked refund on the item itself. Be clear about what this means:", " ", _jsx(Span, { weight: "semibold", children: "a claim we inspect and find genuine is charged back to you" }), " ", "\u2014 that is the cover. A claim we find to be a change of mind is absorbed by us, which is what the buyer's fee pays for. Not offered on your final-sale listings, since \"no returns\" and \"no questions asked\" cannot both be true."] }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: "Changing this does not re-price listings you have already published. It applies to products you save from now on." }), _jsx(Toggle, { checked: values.advancedListingTypesEnabled, onChange: (checked) => onChange({ advancedListingTypesEnabled: checked }), label: "Enable advanced listing types", disabled: busy }), _jsxs(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: ["Adds pre-orders, prize draws, classifieds, digital codes, live items, art and stickers alongside the products, spares and auctions you can already list. Each carries its own obligation:", " ", _jsx(Span, { weight: "semibold", children: "a pre-order takes payment for stock you do not have yet, a prize draw is a regulated promotion, a classified happens off-platform with no escrow protection, a digital code must be delivered from a pool you keep stocked, and a live listing is an animal." }), " ", "Turning this off later does not unpublish listings you have already created \u2014 it only stops you making new ones."] })] })),
         },
     ], [busy, current]);
     const { openIds, setOpenIds, goToSection, fieldToSectionIndex, sectionMeta } = useSectionFormNav(sections, draft);

package/dist/features/seller/components/SellerProductShell.d.ts

@@ -1,6 +1,22 @@
 import React from "react";
 import type { MediaField } from "../../media/types";
-export type ProductListingMode = "standard" | "auction" | "pre-order" | "prize-draw" | "bundle" | "classified" | "digital-code" | "live" | "art" | "stickers" | "spares";
+import type { ListingType } from "../../products/types/index";
+/**
+ * What this shell is editing: any listing type, or a bundle.
+ *
+ * 🛑 DERIVED from `ListingType`, not restated. This was a hand-written copy of
+ * the union plus `"bundle"` — the eleventh such copy in the codebase — and the
+ * whole point of `ALL_LISTING_TYPES_MAP` being a `Record<ListingType, true>`
+ * is that a new member cannot be silently omitted from a list like this one.
+ * Root Cause #61.
+ *
+ * `"bundle"` is a deliberate EXTRA, not an oversight: bundles stopped being a
+ * `listingType` in SB-UNI-D (they are a `categoryType` on `categories` now),
+ * but this shell still edits them, which is what `pluginForMode`'s
+ * `BUNDLE_PLUGIN_FALLBACK` is for. Spelling it as a union with one added
+ * literal says that, where a twelve-item list said nothing.
+ */
+export type ProductListingMode = ListingType | "bundle";
 export interface SellerProductDraft {
     title?: string;
     slug?: string;

package/dist/features/seller/hooks/useStoreListingEntitlements.d.ts

@@ -0,0 +1,8 @@
+import type { ListingType } from "../../products/types/index";
+export interface StoreListingEntitlements {
+    /** Types this store may create. Never empty — basics are always included. */
+    allowed: Set<ListingType>;
+    advancedEnabled: boolean;
+    isLoading: boolean;
+}
+export declare function useStoreListingEntitlements(): StoreListingEntitlements;

package/dist/features/seller/hooks/useStoreListingEntitlements.js

@@ -0,0 +1,70 @@
+"use client";
+/**
+ * Which listing types the signed-in seller's own store may create.
+ *
+ * ── Why this needs a fetch at all ─────────────────────────────────────────
+ *
+ * 🛑 `StoreDocument.capabilities` is listed in `PRIVATE_STORE_FIELDS` —
+ * "internal feature gating; server-enforced, never client-read" — so it is
+ * absent from every public store payload and from the session user. A client
+ * component genuinely cannot derive this locally, and the alternative a
+ * previous draft reached for (publish the capability array to the browser)
+ * would ship `lower_commission_rate`, `priority_support` and fifteen more
+ * admin-granted entitlements to anyone who opened devtools. Root Cause #70.
+ *
+ * So the server sends a PROJECTION: `allowedListingTypes`, already resolved by
+ * `listingTypesAllowedFor` on the same capability array the write-path gate
+ * uses. Client and server therefore agree by construction rather than by two
+ * copies of one rule (Root Cause #30).
+ *
+ * ── Why the loading state is not "denied" ─────────────────────────────────
+ *
+ * `isLoading` is returned and callers must respect it. The three-state rule
+ * from `useCanSeePrices`: "not known yet" rendering as "no" shows an entitled
+ * seller a refusal on every page load. The server refuses authoritatively in
+ * `createSellerProduct` / `sellerUpdateProduct`, so an optimistic render while
+ * the fetch is in flight costs nothing worse than a late refusal.
+ *
+ * @tag domain:seller
+ * @tag layer:hooks
+ * @tag access:client
+ */
+import { useMemo } from "react";
+import { useApiQuery } from "../../../client/api/useApiQuery.js";
+import { apiClient } from "../../../http/index.js";
+import { SELLER_ENDPOINTS } from "../../../constants/api-endpoints.js";
+import { BASIC_LISTING_TYPES } from "../../../_internal/shared/listing-types/tiers.js";
+export function useStoreListingEntitlements() {
+    const query = useApiQuery({
+        queryKey: ["store", "listing-entitlements"],
+        queryFn: async () => {
+            const res = await apiClient.get(SELLER_ENDPOINTS.PAYOUT_SETTINGS);
+            return res?.data ?? {};
+        },
+        /*
+         * The answer changes only when an admin or the seller flips a capability,
+         * so a short window is pointless churn — but it must not be `Infinity`,
+         * because a seller who has just ticked the box in another tab should not
+         * have to hard-reload to see the nav and forms open up.
+         */
+        staleTime: 60000,
+        silentBackgroundFailures: true,
+    });
+    return useMemo(() => {
+        /*
+         * 🛑 Falls back to the BASIC types, not to everything and not to nothing.
+         *
+         * Everything would offer a form that the server then refuses — the exact
+         * "filled in a long wizard and got rejected at publish" experience this
+         * hook exists to prevent. Nothing would lock a seller out of `standard`
+         * on a transient network blip, which is the one type every store has.
+         */
+        const list = query.data?.allowedListingTypes;
+        const allowed = new Set(Array.isArray(list) && list.length > 0 ? list : BASIC_LISTING_TYPES);
+        return {
+            allowed,
+            advancedEnabled: query.data?.advancedListingTypesEnabled === true,
+            isLoading: query.isLoading,
+        };
+    }, [query.data, query.isLoading]);
+}

package/dist/features/store-extensions/repository/store-extensions.repositories.d.ts

@@ -14,7 +14,7 @@
  */
 import { BaseRepository } from "../../../providers/db-firebase";
 import type { DocumentSnapshot } from "firebase-admin/firestore";
-import { type AnalyticsAlertDocument, type AnalyticsCardDocument, type ItemRequestDocument, type ItemRequestReply, type ListingTemplateDocument, type ModerationQueueDocument, type PayoutMethodDocument, type ReportDocument, type ShippingConfigDocument, type StoreCategoryDocument, type StoreGoogleConfigDocument, type StoreWhatsAppConfigDocument } from "../schemas/firestore";
+import { type AnalyticsAlertDocument, type AnalyticsCardDocument, type ItemRequestDocument, type ItemRequestReply, type ListingTemplateDocument, type ModerationQueueDocument, type PayoutMethodDocument, type ReportDocument, type ShippingConfigDocument, type StoreCategoryDocument, type StoreGoogleConfigDocument } from "../schemas/firestore";
 export declare class PayoutMethodsRepository extends BaseRepository<PayoutMethodDocument> {
     /**
      * Bank/UPI details, encrypted at rest by BaseRepository's write hooks.
@@ -103,10 +103,6 @@ export declare class ItemRequestsRepository extends BaseRepository<ItemRequestDo
      */
     appendReply(id: string, reply: ItemRequestReply): Promise<void>;
 }
-export declare class StoreWhatsAppConfigRepository extends BaseRepository<StoreWhatsAppConfigDocument> {
-    constructor();
-    getByStore(storeId: string): Promise<StoreWhatsAppConfigDocument | null>;
-}
 export declare class StoreGoogleConfigRepository extends BaseRepository<StoreGoogleConfigDocument> {
     constructor();
     getByStore(storeId: string): Promise<StoreGoogleConfigDocument | null>;
@@ -120,5 +116,4 @@ export declare const listingTemplatesRepository: ListingTemplatesRepository;
 export declare const moderationQueueRepository: ModerationQueueRepository;
 export declare const reportsRepository: ReportsRepository;
 export declare const itemRequestsRepository: ItemRequestsRepository;
-export declare const storeWhatsAppConfigRepository: StoreWhatsAppConfigRepository;
 export declare const storeGoogleConfigRepository: StoreGoogleConfigRepository;

package/dist/features/store-extensions/repository/store-extensions.repositories.js

@@ -15,7 +15,7 @@
 import { BaseRepository } from "../../../providers/db-firebase/index.js";
 import { arrayUnion, increment } from "../../../contracts/field-ops.js";
 import { decryptPiiFields } from "../../../security/pii-encrypt.js";
-import { ANALYTICS_ALERTS_COLLECTION, ANALYTICS_CARDS_COLLECTION, ITEM_REQUESTS_COLLECTION, LISTING_TEMPLATES_COLLECTION, MODERATION_QUEUE_COLLECTION, PAYOUT_METHODS_COLLECTION, REPORTS_COLLECTION, SHIPPING_CONFIGS_COLLECTION, STORE_CATEGORIES_COLLECTION, STORE_GOOGLE_CONFIG_COLLECTION, STORE_WHATSAPP_CONFIG_COLLECTION, } from "../schemas/firestore.js";
+import { ANALYTICS_ALERTS_COLLECTION, ANALYTICS_CARDS_COLLECTION, ITEM_REQUESTS_COLLECTION, LISTING_TEMPLATES_COLLECTION, MODERATION_QUEUE_COLLECTION, PAYOUT_METHODS_COLLECTION, REPORTS_COLLECTION, SHIPPING_CONFIGS_COLLECTION, STORE_CATEGORIES_COLLECTION, STORE_GOOGLE_CONFIG_COLLECTION, } from "../schemas/firestore.js";
 export class PayoutMethodsRepository extends BaseRepository {
     constructor() {
         super(PAYOUT_METHODS_COLLECTION);
@@ -149,14 +149,6 @@ export class ItemRequestsRepository extends BaseRepository {
         });
     }
 }
-export class StoreWhatsAppConfigRepository extends BaseRepository {
-    constructor() {
-        super(STORE_WHATSAPP_CONFIG_COLLECTION);
-    }
-    async getByStore(storeId) {
-        return this.findOneBy("storeId", storeId);
-    }
-}
 export class StoreGoogleConfigRepository extends BaseRepository {
     constructor() {
         super(STORE_GOOGLE_CONFIG_COLLECTION);
@@ -174,5 +166,4 @@ export const listingTemplatesRepository = new ListingTemplatesRepository();
 export const moderationQueueRepository = new ModerationQueueRepository();
 export const reportsRepository = new ReportsRepository();
 export const itemRequestsRepository = new ItemRequestsRepository();
-export const storeWhatsAppConfigRepository = new StoreWhatsAppConfigRepository();
 export const storeGoogleConfigRepository = new StoreGoogleConfigRepository();

package/dist/features/store-extensions/schemas/firestore.d.ts

@@ -18,7 +18,6 @@ import type { BaseDocument } from "../../../_internal/shared/types/base-document
  *   7. moderationQueue       — video / media moderation queue items
  *   8. reports               — buyer-submitted reports against listings/stores
  *   9. itemRequests          — community item request bulletin board
- *  10. storeWhatsAppConfig   — per-store WhatsApp business catalogue + auto-replies
  *  11. storeGoogleConfig     — per-store Google Business reviews integration
  */
 export type PayoutMethodType = "upi" | "bank" | "card" | "other";
@@ -89,7 +88,7 @@ export interface AnalyticsAlertDocument extends BaseDocument {
     threshold: number;
     windowHours: number;
     isActive: boolean;
-    notifyChannels: Array<"in-app" | "email" | "whatsapp">;
+    notifyChannels: Array<"in-app" | "email">;
     /**
      * When this alert last fired.
      *
@@ -221,21 +220,6 @@ export interface ItemRequestDocument extends BaseDocument {
 export declare const ITEM_REQUESTS_COLLECTION: "itemRequests";
 export declare const ITEM_REQUEST_INDEXED_FIELDS: readonly ["opUserId", "status", "category", "createdAt"];
 export declare const DEFAULT_ITEM_REQUEST_DATA: Partial<ItemRequestDocument>;
-export interface StoreWhatsAppConfigDocument extends BaseDocument {
-    storeId: string;
-    isConnected: boolean;
-    isPaid: boolean;
-    phoneNumber?: string;
-    businessProfileName?: string;
-    catalogUrl?: string;
-    autoReply?: string;
-    welcomeMessage?: string;
-    /** Status of pending WhatsApp Business onboarding (Meta Cloud API). */
-    onboardingStatus?: "pending" | "approved" | "rejected";
-}
-export declare const STORE_WHATSAPP_CONFIG_COLLECTION: "storeWhatsAppConfig";
-export declare const STORE_WHATSAPP_CONFIG_INDEXED_FIELDS: readonly ["storeId", "isConnected", "isPaid"];
-export declare const DEFAULT_STORE_WHATSAPP_CONFIG_DATA: Partial<StoreWhatsAppConfigDocument>;
 export interface StoreGoogleConfigDocument extends BaseDocument {
     storeId: string;
     isConnected: boolean;