@mohasinac/appkit 4.55.0-next.0 → 4.56.0

package/dist/_internal/shared/listing-types/route-gating.js

@@ -0,0 +1,114 @@
+/**
+ * "Does this href lead somewhere the site has switched off?"
+ *
+ * ## Why this exists
+ *
+ * `listings.listingTypes` already hides a disabled type everywhere the type is
+ * named — the nav, the `/products` chips, the admin tabs, the homepage
+ * SECTIONS (`HOMEPAGE_SECTION_LISTING_TYPE` in `MarketplaceHomepageView`). But
+ * a lot of this site's merchandising is free-text content that names a
+ * destination by URL and never mentions a listing type at all: a carousel
+ * slide's overlay button, a card's CTA, a promo-grid tile.
+ *
+ * Measured 2026-10-20 with `auction: false` live: the homepage hero carousel
+ * still shipped a "Live auctions / Place a bid before the timer runs out"
+ * CARD linking to `/auctions`, and a whole `slide-beyblade-auction` slide
+ * whose overlay read "Win it at your price". Both are authored content, so no
+ * type-keyed gate could see them — the only thing that identifies them is
+ * where they point.
+ *
+ * ## The rule, and the one case that makes it non-obvious
+ *
+ * A href is disabled when EVERY listing type that claims its route is
+ * disabled. Not "any" — `art` and `stickers` share `/art`, so a site that
+ * sells art but not stickers must keep `/art` reachable. Treating one disabled
+ * claimant as enough would silently delete a working destination.
+ *
+ * ## What it deliberately does NOT match
+ *
+ * Editorial pages that merely have a type's name in the path — `/help/auctions`,
+ * `/how-auctions-work`, `/seller-guide/prize-draws`. None of them starts with
+ * `/auctions`, so prefix matching excludes them for free, and that is correct:
+ * an explainer about auctions is still honest reading when auctions are off.
+ * A substring test would have eaten all three.
+ *
+ * Store tabs (`/stores/{slug}/auctions`) are also out of scope — those are
+ * resolved by `resolveStoreTabs`, which owns its own visibility, and a second
+ * owner is how a mirror drifts (Root Cause #42).
+ */
+import { LISTING_TYPE_REGISTRY } from "./_registry.js";
+import { ALL_LISTING_TYPES, isListingTypeEnabled } from "./feature-flags.js";
+/**
+ * browse route → every listing type that browses there.
+ *
+ * Built from the registry rather than hand-listed, so a tenth type joins it by
+ * existing. `art` and `stickers` both resolve to `/art`, which is the entire
+ * reason the value is an array.
+ */
+const TYPES_BY_BROWSE_ROUTE = (() => {
+    const map = new Map();
+    for (const type of ALL_LISTING_TYPES) {
+        const route = normalisePath(LISTING_TYPE_REGISTRY[type].browseRoute);
+        if (!route)
+            continue;
+        const existing = map.get(route);
+        if (existing)
+            existing.push(type);
+        else
+            map.set(route, [type]);
+    }
+    return map;
+})();
+/**
+ * Reduce an authored href to a comparable path.
+ *
+ * Returns `""` for anything that is not an in-app path — an absolute URL to
+ * another origin, a `mailto:`, an anchor. Those can never be a listing browse
+ * route, and a caller must not filter them out.
+ *
+ * 🛑 The locale prefix is stripped. `ROUTES` values are unprefixed
+ * (`/auctions`) and `next-intl` adds `/en` at navigation time, but an admin
+ * pasting a URL out of the address bar stores the prefixed form — so a
+ * comparison against the raw value matches the seed and misses the hand-typed
+ * one, which is the half most likely to be wrong.
+ */
+function normalisePath(href) {
+    if (typeof href !== "string")
+        return "";
+    const trimmed = href.trim();
+    if (!trimmed || !trimmed.startsWith("/"))
+        return "";
+    // Drop query + hash: `/auctions?sort=ending` is still /auctions.
+    const path = trimmed.split(/[?#]/)[0] ?? "";
+    // `/en/auctions` → `/auctions`. Two-letter segment only, so a real route
+    // whose first segment is short (there are none today, but `/ar` would be a
+    // plausible future one) is the only thing this could over-match — and it
+    // would have to collide with a locale code to do it.
+    const delocalised = path.replace(/^\/[a-z]{2}(?=\/)/, "");
+    // Trailing slash off, but never reduce "/" to "".
+    return delocalised.length > 1 ? delocalised.replace(/\/+$/, "") : delocalised;
+}
+/**
+ * `true` when `href` points at a listing type's browse page (or any page
+ * beneath it) and every type that browses there is disabled.
+ *
+ * Fails OPEN on anything it cannot classify: an unknown path, an external URL
+ * or a missing settings document all return `false`. A settings read that
+ * errored must not strip working destinations out of the homepage — the same
+ * reasoning as the suggestions endpoint's TTL cache and `src/proxy.ts`'s
+ * disabled-routes gate.
+ */
+export function isDisabledListingHref(href, settings) {
+    const path = normalisePath(href);
+    if (!path)
+        return false;
+    for (const [route, types] of TYPES_BY_BROWSE_ROUTE) {
+        // The browse page itself, or a detail page under it. `startsWith(route)`
+        // alone would match `/live` against `/livestream`, so the boundary is
+        // explicit.
+        if (path !== route && !path.startsWith(`${route}/`))
+            continue;
+        return types.every((type) => !isListingTypeEnabled(type, settings));
+    }
+    return false;
+}

package/dist/_internal/shared/shipping/quote.d.ts

@@ -0,0 +1,153 @@
+/**
+ * What the buyer is quoted for shipping, what the seller actually spent, and
+ * who wears the difference.
+ *
+ * Pure and synchronous — no I/O, no Firestore, no provider. Every surface that
+ * touches a shipping figure resolves through here so the quote shown at
+ * checkout, the amount charged, the order record and the reconciliation can
+ * never disagree (Root Cause #75: a rule reachable by copy-paste WILL be
+ * copied, and the copy never learns about the branch added later).
+ *
+ * ## The model
+ *
+ * 1. Shiprocket returns per-courier rates for the buyer's pincode.
+ * 2. Each rate is ROUNDED UP to the nearest ₹50 and that is what the buyer
+ *    sees and is charged. The raw rate is never shown and never billed.
+ * 3. The seller ships. If their courier is dearer than the charged figure they
+ *    absorb the difference; if it is cheaper the buyer is credited the
+ *    difference in points, 1 point = ₹1.
+ *
+ * ## 🛑 Reconciliation measures against the CHARGED figure, not the raw rate
+ *
+ * This is the decision that makes the whole thing coherent, and it is worth
+ * stating because the obvious alternative is defensible and wrong.
+ *
+ * Measuring against the raw rate would let the platform keep the round-up
+ * (₹70 raw → ₹100 charged → a silent ₹30 margin on every parcel) while still
+ * calling the ₹50 step a "rounding". Measuring against the charged figure
+ * means the buyer is made whole for every rupee they handed over that did not
+ * become postage: ₹100 charged, shipped at ₹47, 53 points back. The round-up
+ * stops being a margin and becomes a BUFFER that absorbs ordinary courier
+ * variance before the seller has to.
+ *
+ * It also makes the rule explainable in one sentence to both sides — "you pay
+ * the rounded quote and get back whatever we did not spend", "you keep the
+ * quote and cover any overage" — and a rule a seller can predict is a rule
+ * they do not dispute.
+ */
+/**
+ * Shipping is always billed in whole ₹50 steps.
+ *
+ * 🛑 Not a formatting choice. A courier rate is a volatile per-parcel number
+ * (fuel, zone, weight slab, surcharge) and quoting it to the rupee invites a
+ * dispute every time the actual differs by ₹3. A coarse step makes the quote
+ * stable, makes it look like a price rather than a machine reading, and buys
+ * the headroom that keeps most orders off the reconciliation path entirely.
+ */
+export declare const SHIPPING_ROUND_UP_TO = 50;
+/**
+ * Round a raw carrier rate up to the next ₹50.
+ *
+ * `Math.ceil`, so ₹70 → ₹100 and ₹100 → ₹100 — a rate exactly on a step is NOT
+ * pushed to the next one. ₹0 stays ₹0: free shipping must survive the rounding
+ * or every free-shipping order silently acquires a ₹50 charge.
+ *
+ * Negative input is clamped to 0 rather than rounded "up" toward zero, which
+ * would otherwise turn a bad provider response into a credit.
+ */
+export declare function roundShippingUp(rawRate: number): number;
+/** One courier the buyer may pick, as offered at checkout. */
+export interface ShippingQuoteOption {
+    /** Stable id from the carrier, so a pick survives a re-quote. */
+    courierId: string;
+    /** Display name — "Ekart", "Delhivery", "India Post". */
+    courierName: string;
+    /**
+     * The carrier's own rate, kept for the audit trail and NEVER rendered.
+     *
+     * 🛑 Showing both numbers would invite "why am I paying ₹100 for a ₹70
+     * courier" — a question whose honest answer (the difference comes back to
+     * you as points if it is not spent) is not something a buyer should have to
+     * reconstruct from two figures on a checkout page.
+     */
+    rawRate: number;
+    /** What the buyer sees and is charged. `roundShippingUp(rawRate)`. */
+    chargedRate: number;
+    estimatedDays: number;
+}
+/**
+ * The option the buyer committed to, frozen onto the order.
+ *
+ * 🛑 Stored, never recomputed. Carrier rates move hourly; re-quoting at
+ * reconciliation time would compare the seller's actual spend against a price
+ * nobody was ever charged, and the buyer's points would change depending on
+ * when the job happened to run. Same reasoning as `OrderSourceContext` being
+ * written once at creation.
+ */
+export interface SelectedShippingQuote {
+    courierId: string;
+    courierName: string;
+    rawRate: number;
+    /** The amount actually added to the order total. */
+    chargedRate: number;
+    estimatedDays: number;
+    /** When the quote was taken, so a stale pick is recognisable. */
+    quotedAt: Date;
+}
+/** What the seller really shipped with, recorded when they dispatch. */
+export interface ActualShipmentCost {
+    courierId: string;
+    courierName: string;
+    /** The seller's real postage, to the rupee. Not rounded. */
+    actualRate: number;
+}
+/**
+ * The outcome of comparing what was charged with what was spent.
+ *
+ * Exactly one of `sellerAbsorbs` / `buyerPoints` is non-zero, and both are
+ * non-negative — a signed "difference" field would make every consumer decide
+ * what its sign meant, and the two directions have completely different
+ * consequences (one is a cost to a seller, one is a credit to a buyer).
+ */
+export interface ShippingReconciliation {
+    /** Rupees the seller eats because their courier cost more than quoted. */
+    sellerAbsorbs: number;
+    /** Points credited to the buyer, 1 point = ₹1. */
+    buyerPoints: number;
+    /** True when the seller shipped with a courier the buyer did not choose. */
+    courierChanged: boolean;
+}
+/**
+ * Compare the charged quote against the real spend.
+ *
+ * 🛑 Works on the CHARGED figure (see the header). The worked examples from the
+ * spec, with the ₹70 Ekart quote billed at ₹100:
+ *
+ *   shipped Delhivery ₹100 → sellerAbsorbs 0,   buyerPoints 0
+ *   shipped Delhivery ₹120 → sellerAbsorbs 20,  buyerPoints 0
+ *   shipped India Post ₹47 → sellerAbsorbs 0,   buyerPoints 53
+ *
+ * Points are the EXACT rupee difference and are deliberately not rounded to a
+ * ₹50 step. The round-up exists to make a *quote* stable; applying it to a
+ * credit would either invent money (rounding up) or quietly keep some of the
+ * buyer's (rounding down).
+ */
+export declare function reconcileShipping(quote: Pick<SelectedShippingQuote, "chargedRate" | "courierId">, actual: ActualShipmentCost): ShippingReconciliation;
+/**
+ * Turn carrier serviceability results into offerable options.
+ *
+ * 🛑 Drops any courier whose rate is not a usable number instead of charging
+ * ₹0 for it. `resolveShippingCost` already carries this lesson in its
+ * `shippingUnavailable` flag: a zero there "would ship every parcel free at
+ * our expense, silently, until somebody noticed". A malformed row from a
+ * provider is missing data, never free postage.
+ *
+ * Sorted cheapest-first, then fastest — the buyer is choosing, so the default
+ * reading order should be the one most of them want.
+ */
+export declare function toQuoteOptions(couriers: readonly {
+    courierId?: string;
+    name: string;
+    rate: number;
+    estimatedDays: number;
+}[]): ShippingQuoteOption[];

package/dist/_internal/shared/shipping/quote.js

@@ -0,0 +1,124 @@
+/**
+ * What the buyer is quoted for shipping, what the seller actually spent, and
+ * who wears the difference.
+ *
+ * Pure and synchronous — no I/O, no Firestore, no provider. Every surface that
+ * touches a shipping figure resolves through here so the quote shown at
+ * checkout, the amount charged, the order record and the reconciliation can
+ * never disagree (Root Cause #75: a rule reachable by copy-paste WILL be
+ * copied, and the copy never learns about the branch added later).
+ *
+ * ## The model
+ *
+ * 1. Shiprocket returns per-courier rates for the buyer's pincode.
+ * 2. Each rate is ROUNDED UP to the nearest ₹50 and that is what the buyer
+ *    sees and is charged. The raw rate is never shown and never billed.
+ * 3. The seller ships. If their courier is dearer than the charged figure they
+ *    absorb the difference; if it is cheaper the buyer is credited the
+ *    difference in points, 1 point = ₹1.
+ *
+ * ## 🛑 Reconciliation measures against the CHARGED figure, not the raw rate
+ *
+ * This is the decision that makes the whole thing coherent, and it is worth
+ * stating because the obvious alternative is defensible and wrong.
+ *
+ * Measuring against the raw rate would let the platform keep the round-up
+ * (₹70 raw → ₹100 charged → a silent ₹30 margin on every parcel) while still
+ * calling the ₹50 step a "rounding". Measuring against the charged figure
+ * means the buyer is made whole for every rupee they handed over that did not
+ * become postage: ₹100 charged, shipped at ₹47, 53 points back. The round-up
+ * stops being a margin and becomes a BUFFER that absorbs ordinary courier
+ * variance before the seller has to.
+ *
+ * It also makes the rule explainable in one sentence to both sides — "you pay
+ * the rounded quote and get back whatever we did not spend", "you keep the
+ * quote and cover any overage" — and a rule a seller can predict is a rule
+ * they do not dispute.
+ */
+/**
+ * Shipping is always billed in whole ₹50 steps.
+ *
+ * 🛑 Not a formatting choice. A courier rate is a volatile per-parcel number
+ * (fuel, zone, weight slab, surcharge) and quoting it to the rupee invites a
+ * dispute every time the actual differs by ₹3. A coarse step makes the quote
+ * stable, makes it look like a price rather than a machine reading, and buys
+ * the headroom that keeps most orders off the reconciliation path entirely.
+ */
+export const SHIPPING_ROUND_UP_TO = 50;
+/**
+ * Round a raw carrier rate up to the next ₹50.
+ *
+ * `Math.ceil`, so ₹70 → ₹100 and ₹100 → ₹100 — a rate exactly on a step is NOT
+ * pushed to the next one. ₹0 stays ₹0: free shipping must survive the rounding
+ * or every free-shipping order silently acquires a ₹50 charge.
+ *
+ * Negative input is clamped to 0 rather than rounded "up" toward zero, which
+ * would otherwise turn a bad provider response into a credit.
+ */
+export function roundShippingUp(rawRate) {
+    if (!Number.isFinite(rawRate) || rawRate <= 0)
+        return 0;
+    return Math.ceil(rawRate / SHIPPING_ROUND_UP_TO) * SHIPPING_ROUND_UP_TO;
+}
+/**
+ * Compare the charged quote against the real spend.
+ *
+ * 🛑 Works on the CHARGED figure (see the header). The worked examples from the
+ * spec, with the ₹70 Ekart quote billed at ₹100:
+ *
+ *   shipped Delhivery ₹100 → sellerAbsorbs 0,   buyerPoints 0
+ *   shipped Delhivery ₹120 → sellerAbsorbs 20,  buyerPoints 0
+ *   shipped India Post ₹47 → sellerAbsorbs 0,   buyerPoints 53
+ *
+ * Points are the EXACT rupee difference and are deliberately not rounded to a
+ * ₹50 step. The round-up exists to make a *quote* stable; applying it to a
+ * credit would either invent money (rounding up) or quietly keep some of the
+ * buyer's (rounding down).
+ */
+export function reconcileShipping(quote, actual) {
+    const charged = Number.isFinite(quote.chargedRate) ? Math.max(0, quote.chargedRate) : 0;
+    const spent = Number.isFinite(actual.actualRate) ? Math.max(0, actual.actualRate) : 0;
+    const delta = roundPaise(charged - spent);
+    return {
+        sellerAbsorbs: delta < 0 ? Math.abs(delta) : 0,
+        buyerPoints: delta > 0 ? delta : 0,
+        courierChanged: quote.courierId !== actual.courierId,
+    };
+}
+/**
+ * Two decimal places.
+ *
+ * Money here is decimal rupees (the paise→rupees migration, Root Cause #31), so
+ * a subtraction can leave a float artefact — `100 - 47.1` is `52.900000000000006`,
+ * and that would become a points credit with eleven decimal places on a user's
+ * balance.
+ */
+function roundPaise(value) {
+    return Math.round(value * 100) / 100;
+}
+/**
+ * Turn carrier serviceability results into offerable options.
+ *
+ * 🛑 Drops any courier whose rate is not a usable number instead of charging
+ * ₹0 for it. `resolveShippingCost` already carries this lesson in its
+ * `shippingUnavailable` flag: a zero there "would ship every parcel free at
+ * our expense, silently, until somebody noticed". A malformed row from a
+ * provider is missing data, never free postage.
+ *
+ * Sorted cheapest-first, then fastest — the buyer is choosing, so the default
+ * reading order should be the one most of them want.
+ */
+export function toQuoteOptions(couriers) {
+    return couriers
+        .filter((c) => Number.isFinite(c.rate) && c.rate > 0 && Boolean(c.name))
+        .map((c) => ({
+        // Providers do not all return an id. Falling back to the name keeps the
+        // pick round-trippable; it is only ever compared against itself.
+        courierId: c.courierId ?? c.name,
+        courierName: c.name,
+        rawRate: c.rate,
+        chargedRate: roundShippingUp(c.rate),
+        estimatedDays: c.estimatedDays,
+    }))
+        .sort((a, b) => a.chargedRate - b.chargedRate || a.estimatedDays - b.estimatedDays);
+}

package/dist/client.d.ts

@@ -534,6 +534,7 @@ export { SELLER_LISTING_TABS, type SellerListingTabId, } from "./features/produc
 export { ALL_TAB, EMPTY_TAB, ADMIN_PRODUCT_STATUS_TABS, ADMIN_PRODUCT_LISTING_TYPE_TABS, ADMIN_BLOG_STATUS_TABS, ADMIN_USER_STATUS_TABS, ADMIN_USER_ROLE_TABS, ADMIN_STORE_STATUS_TABS, ADMIN_PAYOUT_STATUS_TABS, ADMIN_ORDER_STATUS_TABS, ADMIN_REVIEW_STATUS_TABS, ADMIN_REVIEW_RATING_TABS, ADMIN_BID_STATUS_TABS, ADMIN_CONTACT_STATUS_TABS, ADMIN_NEWSLETTER_STATUS_TABS, ADMIN_EVENT_ENTRY_STATUS_TABS, ADMIN_EVENT_STATUS_TABS, ADMIN_CART_OWNERSHIP_TABS, ADMIN_COUPON_TYPE_TABS, SELLER_PRODUCT_STATUS_TABS, SELLER_AUCTION_STATUS_TABS, SELLER_ORDER_STATUS_TABS, SELLER_OFFER_STATUS_TABS, SELLER_BID_STATUS_TABS, } from "./features/admin/constants/filter-tabs";
 export { PRODUCT_FIELDS, PRODUCT_STATUS_TRANSITIONS, ORDER_FIELDS, REVIEW_FIELDS, BID_FIELDS, AD_FIELDS, EVENT_FIELDS, EVENT_ENTRY_FIELDS, PAYOUT_FIELDS, STORE_FIELDS, CATEGORY_FIELDS, BLOG_FIELDS, USER_FIELDS, ADDRESS_FIELDS, BRAND_FIELDS, CART_FIELDS, WISHLIST_FIELDS, HISTORY_FIELDS, NOTIFICATION_FIELDS, SESSION_FIELDS, COUPON_USAGE_FIELDS, SCAMMER_FIELDS, SUPPORT_TICKET_FIELDS, CAROUSEL_FIELDS, COUPON_FIELDS, FAQ_FIELDS, HOMEPAGE_SECTION_FIELDS, SITE_SETTINGS_FIELDS, COMMON_FIELDS, OAUTH_STATE_VALUES, SCHEMA_DEFAULTS, } from "./constants/field-names";
 export { CART_LANE, CART_LANE_PRIORITY, CART_LANE_LABELS, laneOf, activeLane, laneItems, laneCounts, isLaneCheckoutable, laneBlockReason, isLockedLane, canAddNewItems, type CartLane, type LaneAssignable, } from "./_internal/shared/checkout/lanes";
+export { roundShippingUp, toQuoteOptions, reconcileShipping, SHIPPING_ROUND_UP_TO, type ShippingQuoteOption, type SelectedShippingQuote, type ActualShipmentCost, type ShippingReconciliation, } from "./_internal/shared/shipping/quote";
 export { getCartLineMembers, isMultiMemberLine, } from "./_internal/shared/checkout/line-members";
 export { newsletterSubscribeSchema, quickCreateTaxonomySchema, payoutMarkPaidSchema, } from "./features/admin/schemas/small-forms";
 export { raffleEntrySchema } from "./features/contact/schemas/inquiry-forms";

package/dist/client.js

@@ -546,6 +546,14 @@ export { PRODUCT_FIELDS, PRODUCT_STATUS_TRANSITIONS, ORDER_FIELDS, REVIEW_FIELDS
 // Checkout lanes — the derived auction > offer > standard partition of the
 // cart, and the priority rule that decides which one may be checked out.
 export { CART_LANE, CART_LANE_PRIORITY, CART_LANE_LABELS, laneOf, activeLane, laneItems, laneCounts, isLaneCheckoutable, laneBlockReason, isLockedLane, canAddNewItems, } from "./_internal/shared/checkout/lanes.js";
+/*
+ * Shipping quote model. Public because the CONSUMER owns the route that asks
+ * the carrier for rates (`/api/shipping/quote`) and the checkout UI that
+ * renders them — the rounding rule has to be reachable from both, and it must
+ * be the same rule the server-side reconciliation uses, or the buyer is
+ * credited against a figure they were never charged.
+ */
+export { roundShippingUp, toQuoteOptions, reconcileShipping, SHIPPING_ROUND_UP_TO, } from "./_internal/shared/shipping/quote.js";
 /*
  * The cart page needs these to tell a multi-member line from an ordinary one: a
  * group/bundle line's `productId` is a group or category id, not a product id,

package/dist/errors/error-codes.d.ts

@@ -22,6 +22,21 @@ export declare const BID_ERROR_CODES: {
     /** The auction's clock ran out mid-checkout, so it settled to a real bidder. */
     readonly AUCTION_ENDED_BEFORE_CHECKOUT: "BID_AUCTION_ENDED_BEFORE_CHECKOUT";
 };
+/**
+ * Checkout refusals that are BUSINESS rules rather than malformed requests.
+ *
+ * 🛑 Registered here, not left as a bare string at the throw site. The code is
+ * what `toUserMessage` resolves through `errors.codes.*`, and an unregistered
+ * one terminates at `errors.codes.UNKNOWN` — so a buyer refused for a reason
+ * the site can explain in one sentence would instead read "Something went
+ * wrong. Please try again." and retry the same cart forever.
+ * `audit-error-display-i18n` holds both ends: an enum value with no
+ * `messages/en.json` key fails, and so does a key with no enum value.
+ */
+export declare const CHECKOUT_ERROR_CODES: {
+    /** Cart total exceeds `siteSettings.payment.codMaxOrderValue`. */
+    readonly COD_LIMIT_EXCEEDED: "COD_LIMIT_EXCEEDED";
+};
 export declare const OFFER_ERROR_CODES: {
     readonly DISABLED: "OFFER_DISABLED";
     readonly PRICE_TOO_LOW: "OFFER_PRICE_TOO_LOW";

package/dist/errors/error-codes.js

@@ -22,6 +22,21 @@ export const BID_ERROR_CODES = {
     /** The auction's clock ran out mid-checkout, so it settled to a real bidder. */
     AUCTION_ENDED_BEFORE_CHECKOUT: "BID_AUCTION_ENDED_BEFORE_CHECKOUT",
 };
+/**
+ * Checkout refusals that are BUSINESS rules rather than malformed requests.
+ *
+ * 🛑 Registered here, not left as a bare string at the throw site. The code is
+ * what `toUserMessage` resolves through `errors.codes.*`, and an unregistered
+ * one terminates at `errors.codes.UNKNOWN` — so a buyer refused for a reason
+ * the site can explain in one sentence would instead read "Something went
+ * wrong. Please try again." and retry the same cart forever.
+ * `audit-error-display-i18n` holds both ends: an enum value with no
+ * `messages/en.json` key fails, and so does a key with no enum value.
+ */
+export const CHECKOUT_ERROR_CODES = {
+    /** Cart total exceeds `siteSettings.payment.codMaxOrderValue`. */
+    COD_LIMIT_EXCEEDED: "COD_LIMIT_EXCEEDED",
+};
 export const OFFER_ERROR_CODES = {
     DISABLED: "OFFER_DISABLED",
     PRICE_TOO_LOW: "OFFER_PRICE_TOO_LOW",

package/dist/errors/index.d.ts

@@ -1,5 +1,5 @@
 export { AppError } from "./base-error";
-export { ERROR_CODES, BID_ERROR_CODES, OFFER_ERROR_CODES } from "./error-codes";
+export { ERROR_CODES, BID_ERROR_CODES, OFFER_ERROR_CODES, CHECKOUT_ERROR_CODES } from "./error-codes";
 export type { ErrorCode } from "./error-codes";
 export { ERROR_MESSAGES } from "./messages";
 export { ApiError } from "./api-error";

package/dist/errors/index.js

@@ -1,5 +1,5 @@
 export { AppError } from "./base-error.js";
-export { ERROR_CODES, BID_ERROR_CODES, OFFER_ERROR_CODES } from "./error-codes.js";
+export { ERROR_CODES, BID_ERROR_CODES, OFFER_ERROR_CODES, CHECKOUT_ERROR_CODES } from "./error-codes.js";
 export { ERROR_MESSAGES } from "./messages.js";
 // Note: appkit/src/errors has two ERROR_MESSAGE patterns:
 // - ERROR_CODES.AUTH_001 → "Invalid email or password" (code-based)

package/dist/features/account/components/UserBidsView.js

@@ -1,5 +1,5 @@
 "use client";
-import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
 import { sortBy, sieveFilter, SIEVE_OP } from "../../../utils/sieve-builder.js";
 import { ACCOUNT_ENDPOINTS } from "../../../constants/api-endpoints.js";
 import { ROUTES } from "../../../constants/index.js";
@@ -9,6 +9,7 @@ import { buildBidDetailFields, bidStatusBadge } from "../../auctions/components/
 import { FieldSelect } from "../../../ui/forms/index.js";
 import { AuctionBidsTable } from "../../auctions/components/AuctionBidsTable.js";
 import { DataListingView } from "../../admin/components/DataListingView.js";
+import { useListingTypeFlags } from "../../../react/hooks/useListingTypeFlags.js";
 const SORT_OPTIONS = [
     { value: sortBy("bidDate", "DESC"), label: "Newest first" },
     { value: "bidDate", label: "Oldest first" },
@@ -28,6 +29,7 @@ export function UserBidsView() {
     // not an affordance: it is not row-scoped, and it only shows when there are
     // no bids at all.
     const [detail, setDetail] = useState(null);
+    const auctionsEnabled = useListingTypeFlags().auction;
     const config = {
         portal: "user",
         title: "My Bids",
@@ -52,7 +54,7 @@ export function UserBidsView() {
             if (isLoading) {
                 return (_jsx(Stack, { gap: "md", children: Array.from({ length: 3 }).map((_, i) => (_jsx(Div, { className: "h-16 animate-pulse border border-[var(--appkit-color-border)]", rounded: "xl" }, i))) }));
             }
-            return (_jsx(AuctionBidsTable, { bids: rows, portal: "buyer", onRowClick: (bid) => setDetail(bid), totalPages: 1, currentPage: 1, onPageChange: () => { }, emptyLabel: _jsxs(Span, { children: ["You haven't placed any bids yet.", " ", _jsx(TextLink, { href: String(ROUTES.PUBLIC.AUCTIONS), children: "Browse auctions" })] }) }));
+            return (_jsx(AuctionBidsTable, { bids: rows, portal: "buyer", onRowClick: (bid) => setDetail(bid), totalPages: 1, currentPage: 1, onPageChange: () => { }, emptyLabel: _jsxs(Span, { children: ["You haven't placed any bids yet.", auctionsEnabled && (_jsxs(_Fragment, { children: [" ", _jsx(TextLink, { href: String(ROUTES.PUBLIC.AUCTIONS), children: "Browse auctions" })] }))] }) }));
         },
     };
     const badge = detail ? bidStatusBadge(detail.status) : null;

package/dist/features/admin/components/AdminSiteSettingsView.js

@@ -18,6 +18,12 @@ import { ThemeManagerView, } from "../../site-settings/components/ThemeManagerVi
 import { DEFAULT_LIGHT_THEME, DEFAULT_DARK_THEME } from "../../../tokens/themes/index.js";
 import { DEFAULT_AUCTION_BID_INCREMENT_TIERS, } from "../../../_internal/shared/features/auctions/config.js";
 import { validateGstEnablement } from "../../../_internal/shared/features/site-settings/gst-registration.js";
+/*
+ * 🛑 The SAME constant the checkout page and the server-side gate read. An
+ * admin screen that defaulted its own input to a different number would show
+ * a cap that is not the cap being enforced until somebody pressed Save.
+ */
+import { COD_MAX_ORDER_VALUE_FALLBACK } from "../schemas/firestore.js";
 import { siteSettingsFormSchema } from "../schemas/site-settings-form.js";
 import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary.js";
 import { SectionForm } from "../../shell/index.js";
@@ -279,6 +285,7 @@ export function AdminSiteSettingsView({ labels = {}, ...rest }) {
     const [upiManualEnabled, setUpiManualEnabled] = React.useState(true);
     const [codEnabled, setCodEnabled] = React.useState(true);
     const [otpCheckoutThreshold, setOtpCheckoutThreshold] = React.useState(5000);
+    const [codMaxOrderValue, setCodMaxOrderValue] = React.useState(COD_MAX_ORDER_VALUE_FALLBACK);
     // Per-listing-type / per-category-type visibility flags.
     const [listingTypeFlags, setListingTypeFlags] = React.useState({});
     const [categoryTypeFlags, setCategoryTypeFlags] = React.useState({});
@@ -472,6 +479,7 @@ export function AdminSiteSettingsView({ labels = {}, ...rest }) {
         setUpiManualEnabled(s.payment?.upiManualEnabled ?? true);
         setCodEnabled(s.payment?.codEnabled ?? true);
         setOtpCheckoutThreshold(s.payment?.otpCheckoutThreshold ?? 5000);
+        setCodMaxOrderValue(s.payment?.codMaxOrderValue ?? COD_MAX_ORDER_VALUE_FALLBACK);
         setListingTypeFlags(s.listings?.listingTypes ?? {});
         setCategoryTypeFlags(s.listings?.categoryTypes ?? {});
         setNotifEmailTypes(s.notificationChannels?.email?.types ?? []);
@@ -667,7 +675,7 @@ export function AdminSiteSettingsView({ labels = {}, ...rest }) {
             },
             integrations: { googleAnalyticsId: gaMeasurementId, facebookPixelId: fbPixelId, gtmContainerId, clarityProjectId },
             shipping: { freeShippingThreshold, defaultCarrier, maxDeliveryRadius },
-            payment: { razorpayEnabled, phonepeEnabled, upiManualEnabled, codEnabled, otpCheckoutThreshold },
+            payment: { razorpayEnabled, phonepeEnabled, upiManualEnabled, codEnabled, codMaxOrderValue, otpCheckoutThreshold },
             auctionConfig: { bidIncrementTiers: bidIncrementTiers, autoExtendWindowMinutes: autoExtendWindow, settlementGracePeriodHours: settlementGrace },
             platformLimits: { maxProductsPerStore, maxCustomFieldsPerProduct: maxCustomFields, orderCancellationWindowHours: orderCancelWindow },
             legalPages: { terms: termsHtml, privacy: privacyHtml, refundPolicy: refundHtml, shipping: shippingPolicyHtml, cookies: cookieHtml, ethics: ethicsHtml, codeOfConduct: conductHtml },
@@ -791,7 +799,15 @@ export function AdminSiteSettingsView({ labels = {}, ...rest }) {
                                                         // The plugin's own display label, not the raw key — the
                                                         // literal version rendered "pre-order" and
                                                         // "digital-code" at an admin.
-                                                        label: pluginFor(key).typeLabel, checked: listingTypeFlags[key] ?? true, onChange: (v) => setListingTypeFlags((prev) => ({ ...prev, [key]: v })) }, key))) })] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "semibold", children: "Category types" }), _jsx(Grid, { cols: 2, gap: "sm", children: CATEGORY_TYPE_KEYS.map((key) => (_jsx(Toggle, { label: key, checked: categoryTypeFlags[key] ?? true, onChange: (v) => setCategoryTypeFlags((prev) => ({ ...prev, [key]: v })) }, key))) })] })] }) }), _jsx(TabsContent, { value: "integrations", children: _jsxs(SettingsTabForm, { id: "integrations", label: "Integrations", children: [_jsx(Text, { size: "xs", color: "muted", children: "Keys are masked in transit and stored encrypted. Click Reveal to view." }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Razorpay" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "Razorpay Key ID", value: razorpayKeyId, onChange: setRazorpayKeyId, placeholder: "rzp_test_\u2026 / rzp_live_\u2026" }), _jsx(MaskedInput, { label: "Razorpay Key Secret", value: razorpayKeySecret, onChange: setRazorpayKeySecret, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" }), _jsx(MaskedInput, { label: "Razorpay Webhook Secret", value: razorpayWebhookSecret, onChange: setRazorpayWebhookSecret, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "PhonePe" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "PhonePe Client ID", value: phonepeClientId, onChange: setPhonepeClientId, placeholder: "MERCHANTID_\u2026" }), _jsx(MaskedInput, { label: "PhonePe Client Secret", value: phonepeClientSecret, onChange: setPhonepeClientSecret, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" }), _jsx(Input, { label: "PhonePe Client Version", value: phonepeClientVersion, onChange: (e) => setPhonepeClientVersion(e.target.value), placeholder: "1" }), _jsx(Select, { label: "PhonePe Environment", options: PHONEPE_ENVIRONMENT_OPTIONS, value: phonepeEnvironment, onValueChange: setPhonepeEnvironment }), _jsx(MaskedInput, { label: "PhonePe Webhook Username", value: phonepeWebhookUsername, onChange: setPhonepeWebhookUsername, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" }), _jsx(MaskedInput, { label: "PhonePe Webhook Password", value: phonepeWebhookPassword, onChange: setPhonepeWebhookPassword, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "SMTP / Email" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(Input, { label: "SMTP host", value: smtpHost, onChange: (e) => setSmtpHost(e.target.value), placeholder: "smtp.sendgrid.net" }), _jsx(Input, { label: "SMTP port", value: smtpPort, onChange: (e) => setSmtpPort(e.target.value), type: "number", placeholder: "587" }), _jsx(Input, { label: "SMTP user", value: smtpUser, onChange: (e) => setSmtpUser(e.target.value), placeholder: "apikey" })] }), _jsx(Input, { label: "From address", value: smtpFrom, onChange: (e) => setSmtpFrom(e.target.value), placeholder: "noreply@letitrip.in", type: "email" }), _jsx(Text, { size: "xs", color: "muted", children: "Transactional email is delivered through Resend \u2014 set the Resend API key below. These SMTP fields are stored but not currently used for delivery." })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Google Places (store reviews)" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "Google Maps API key", value: googleMapsApiKey, onChange: setGoogleMapsApiKey, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" }), _jsx(Input, { label: "Default Google Place ID", value: googlePlaceId, onChange: (e) => setGooglePlaceId(e.target.value), placeholder: "ChIJ\u2026" })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Analytics & Tracking" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(Input, { label: "Google Analytics ID", value: gaMeasurementId, onChange: (e) => setGaMeasurementId(e.target.value), placeholder: "G-XXXXXXXXXX" }), _jsx(Input, { label: "Facebook Pixel ID", value: fbPixelId, onChange: (e) => setFbPixelId(e.target.value), placeholder: "XXXXXXXXXXXXXXXX" }), _jsx(Input, { label: "GTM Container ID", value: gtmContainerId, onChange: (e) => setGtmContainerId(e.target.value), placeholder: "GTM-XXXXXXX" }), _jsx(Input, { label: "Microsoft Clarity Project ID", value: clarityProjectId, onChange: (e) => setClarityProjectId(e.target.value), placeholder: "abcdefghij", helperText: "Heatmaps and session replay. Recording is strictly masked \u2014 no text or input values are captured. Leave blank to keep Clarity off." })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Meta (Instagram & Facebook Social Feed)" }), _jsx(Text, { size: "xs", color: "muted", children: "Used by the Social Feed section to fetch Instagram and Facebook posts via Meta Graph API v19." }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "Page Access Token", value: metaPageAccessToken, onChange: setMetaPageAccessToken, placeholder: "EAAxxxxxxx\u2026" }), _jsx(Input, { label: "Page ID (or handle)", value: metaPageId, onChange: (e) => setMetaPageId(e.target.value), placeholder: "letitrip" })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "TikTok for Developers (Social Feed)" }), _jsx(Text, { size: "xs", color: "muted", children: "Client credentials + long-lived access token from TikTok for Developers. Used to list your account's public videos." }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "Client Key", value: tiktokClientKey, onChange: setTiktokClientKey, placeholder: "aw\u2026" }), _jsx(MaskedInput, { label: "Client Secret", value: tiktokClientSecret, onChange: setTiktokClientSecret, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" }), _jsx(MaskedInput, { label: "Access Token (long-lived)", value: tiktokAccessToken, onChange: setTiktokAccessToken, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "DeviantArt OAuth2 (Social Feed)" }), _jsx(Text, { size: "xs", color: "muted", children: "Client credentials for DeviantArt gallery fetching (client-credentials OAuth2 flow \u2014 no user login required)." }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "Client ID", value: deviantartClientId, onChange: setDeviantartClientId, placeholder: "1234" }), _jsx(MaskedInput, { label: "Client Secret", value: deviantartClientSecret, onChange: setDeviantartClientSecret, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" })] })] })] }) }), _jsx(TabsContent, { value: "shipping", children: _jsxs(SettingsTabForm, { id: "shipping", label: "Shipping", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Payment methods" }), _jsx(Div, { id: "setting-razorpay-enabled", children: _jsx(Toggle, { label: "Razorpay (online card/UPI/netbanking) enabled \u2014 needs Key ID + Key Secret under Credentials", checked: razorpayEnabled, onChange: setRazorpayEnabled }) }), _jsx(Div, { id: "setting-phonepe-enabled", children: _jsx(Toggle, { label: "PhonePe (online card/UPI) enabled \u2014 ignored while Razorpay is on; only one online gateway runs at a time", checked: phonepeEnabled, onChange: setPhonepeEnabled }) }), _jsx(Div, { id: "setting-manual-payment-enabled", children: _jsx(Toggle, { label: "Manual UPI/bank transfer enabled", checked: upiManualEnabled, onChange: setUpiManualEnabled }) }), _jsx(Div, { id: "setting-cod-enabled", children: _jsx(Toggle, { label: "Cash on delivery (COD) enabled", checked: codEnabled, onChange: setCodEnabled }) }), _jsx(Input, { label: "Free shipping threshold (\u20B9)", value: String(freeShippingThreshold), onChange: (e) => setFreeShippingThreshold(parseInt(e.target.value) || 0), type: "number", min: 0, helperText: "Orders above this amount get free shipping." }), _jsx(Select, { label: "Default carrier", options: CARRIER_OPTIONS, value: defaultCarrier, onValueChange: setDefaultCarrier }), _jsx(Input, { label: "Max delivery radius (km, 0 = no limit)", value: String(maxDeliveryRadius), onChange: (e) => setMaxDeliveryRadius(parseInt(e.target.value) || 0), type: "number", min: 0 }), _jsx(Input, { label: "High-value checkout OTP threshold (\u20B9)", helperText: "Carts at or above this subtotal require an extra OTP verification step before payment (0 = disabled).", value: String(otpCheckoutThreshold), onChange: (e) => setOtpCheckoutThreshold(parseInt(e.target.value) || 0), type: "number", min: 0 }), _jsx(Text, { size: "sm", weight: "medium", color: "muted", className: "pt-[var(--appkit-space-2)]", children: "Seller shipping charge defaults" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(Input, { label: "Seller shipping fixed (\u20B9)", helperText: "Flat shipping charge collected on the seller's behalf.", value: String(sellerShippingFixed), onChange: (e) => setSellerShippingFixed(parseFloat(e.target.value) || 0), type: "number", min: 0 }), _jsx(Input, { label: "Platform shipping (%)", helperText: "Platform's own shipping markup, as a % of order value.", value: String(platformShippingPercent), onChange: (e) => setPlatformShippingPercent(parseFloat(e.target.value) || 0), type: "number", min: 0, max: 100, step: 0.1 }), _jsx(Input, { label: "Platform shipping minimum (\u20B9)", helperText: "Floor for the platform shipping markup.", value: String(platformShippingFixedMin), onChange: (e) => setPlatformShippingFixedMin(parseFloat(e.target.value) || 0), type: "number", min: 0 })] })] }) }), _jsx(TabsContent, { value: "auction", children: _jsxs(SettingsTabForm, { id: "auction", label: "Auction", children: [_jsxs(Stack, { gap: "sm", rounded: "lg", border: "default", padding: "sm", children: [_jsx(Text, { size: "xs", weight: "medium", color: "muted", children: "Bid increment tiers" }), _jsx(Text, { size: "xs", color: "muted", children: "The minimum jump a new bid must clear, based on the current bid amount. A seller's per-listing override can require more than the matching tier, but can never undercut it." }), bidIncrementTiers.map((tier, i) => {
+                                                        label: pluginFor(key).typeLabel, checked: listingTypeFlags[key] ?? true, onChange: (v) => setListingTypeFlags((prev) => ({ ...prev, [key]: v })) }, key))) })] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "semibold", children: "Category types" }), _jsx(Grid, { cols: 2, gap: "sm", children: CATEGORY_TYPE_KEYS.map((key) => (_jsx(Toggle, { label: key, checked: categoryTypeFlags[key] ?? true, onChange: (v) => setCategoryTypeFlags((prev) => ({ ...prev, [key]: v })) }, key))) })] })] }) }), _jsx(TabsContent, { value: "integrations", children: _jsxs(SettingsTabForm, { id: "integrations", label: "Integrations", children: [_jsx(Text, { size: "xs", color: "muted", children: "Keys are masked in transit and stored encrypted. Click Reveal to view." }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Razorpay" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "Razorpay Key ID", value: razorpayKeyId, onChange: setRazorpayKeyId, placeholder: "rzp_test_\u2026 / rzp_live_\u2026" }), _jsx(MaskedInput, { label: "Razorpay Key Secret", value: razorpayKeySecret, onChange: setRazorpayKeySecret, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" }), _jsx(MaskedInput, { label: "Razorpay Webhook Secret", value: razorpayWebhookSecret, onChange: setRazorpayWebhookSecret, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "PhonePe" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "PhonePe Client ID", value: phonepeClientId, onChange: setPhonepeClientId, placeholder: "MERCHANTID_\u2026" }), _jsx(MaskedInput, { label: "PhonePe Client Secret", value: phonepeClientSecret, onChange: setPhonepeClientSecret, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" }), _jsx(Input, { label: "PhonePe Client Version", value: phonepeClientVersion, onChange: (e) => setPhonepeClientVersion(e.target.value), placeholder: "1" }), _jsx(Select, { label: "PhonePe Environment", options: PHONEPE_ENVIRONMENT_OPTIONS, value: phonepeEnvironment, onValueChange: setPhonepeEnvironment }), _jsx(MaskedInput, { label: "PhonePe Webhook Username", value: phonepeWebhookUsername, onChange: setPhonepeWebhookUsername, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" }), _jsx(MaskedInput, { label: "PhonePe Webhook Password", value: phonepeWebhookPassword, onChange: setPhonepeWebhookPassword, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "SMTP / Email" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(Input, { label: "SMTP host", value: smtpHost, onChange: (e) => setSmtpHost(e.target.value), placeholder: "smtp.sendgrid.net" }), _jsx(Input, { label: "SMTP port", value: smtpPort, onChange: (e) => setSmtpPort(e.target.value), type: "number", placeholder: "587" }), _jsx(Input, { label: "SMTP user", value: smtpUser, onChange: (e) => setSmtpUser(e.target.value), placeholder: "apikey" })] }), _jsx(Input, { label: "From address", value: smtpFrom, onChange: (e) => setSmtpFrom(e.target.value), placeholder: "noreply@letitrip.in", type: "email" }), _jsx(Text, { size: "xs", color: "muted", children: "Transactional email is delivered through Resend \u2014 set the Resend API key below. These SMTP fields are stored but not currently used for delivery." })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Google Places (store reviews)" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "Google Maps API key", value: googleMapsApiKey, onChange: setGoogleMapsApiKey, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" }), _jsx(Input, { label: "Default Google Place ID", value: googlePlaceId, onChange: (e) => setGooglePlaceId(e.target.value), placeholder: "ChIJ\u2026" })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Analytics & Tracking" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(Input, { label: "Google Analytics ID", value: gaMeasurementId, onChange: (e) => setGaMeasurementId(e.target.value), placeholder: "G-XXXXXXXXXX" }), _jsx(Input, { label: "Facebook Pixel ID", value: fbPixelId, onChange: (e) => setFbPixelId(e.target.value), placeholder: "XXXXXXXXXXXXXXXX" }), _jsx(Input, { label: "GTM Container ID", value: gtmContainerId, onChange: (e) => setGtmContainerId(e.target.value), placeholder: "GTM-XXXXXXX" }), _jsx(Input, { label: "Microsoft Clarity Project ID", value: clarityProjectId, onChange: (e) => setClarityProjectId(e.target.value), placeholder: "abcdefghij", helperText: "Heatmaps and session replay. Recording is strictly masked \u2014 no text or input values are captured. Leave blank to keep Clarity off." })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Meta (Instagram & Facebook Social Feed)" }), _jsx(Text, { size: "xs", color: "muted", children: "Used by the Social Feed section to fetch Instagram and Facebook posts via Meta Graph API v19." }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "Page Access Token", value: metaPageAccessToken, onChange: setMetaPageAccessToken, placeholder: "EAAxxxxxxx\u2026" }), _jsx(Input, { label: "Page ID (or handle)", value: metaPageId, onChange: (e) => setMetaPageId(e.target.value), placeholder: "letitrip" })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "TikTok for Developers (Social Feed)" }), _jsx(Text, { size: "xs", color: "muted", children: "Client credentials + long-lived access token from TikTok for Developers. Used to list your account's public videos." }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "Client Key", value: tiktokClientKey, onChange: setTiktokClientKey, placeholder: "aw\u2026" }), _jsx(MaskedInput, { label: "Client Secret", value: tiktokClientSecret, onChange: setTiktokClientSecret, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" }), _jsx(MaskedInput, { label: "Access Token (long-lived)", value: tiktokAccessToken, onChange: setTiktokAccessToken, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "DeviantArt OAuth2 (Social Feed)" }), _jsx(Text, { size: "xs", color: "muted", children: "Client credentials for DeviantArt gallery fetching (client-credentials OAuth2 flow \u2014 no user login required)." }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "Client ID", value: deviantartClientId, onChange: setDeviantartClientId, placeholder: "1234" }), _jsx(MaskedInput, { label: "Client Secret", value: deviantartClientSecret, onChange: setDeviantartClientSecret, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" })] })] })] }) }), _jsx(TabsContent, { value: "shipping", children: _jsxs(SettingsTabForm, { id: "shipping", label: "Shipping", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Payment methods" }), _jsx(Div, { id: "setting-razorpay-enabled", children: _jsx(Toggle, { label: "Razorpay (online card/UPI/netbanking) enabled \u2014 needs Key ID + Key Secret under Credentials", checked: razorpayEnabled, onChange: setRazorpayEnabled }) }), _jsx(Div, { id: "setting-phonepe-enabled", children: _jsx(Toggle, { label: "PhonePe (online card/UPI) enabled \u2014 ignored while Razorpay is on; only one online gateway runs at a time", checked: phonepeEnabled, onChange: setPhonepeEnabled }) }), _jsx(Div, { id: "setting-manual-payment-enabled", children: _jsx(Toggle, { label: "Manual UPI/bank transfer enabled", checked: upiManualEnabled, onChange: setUpiManualEnabled }) }), _jsx(Div, { id: "setting-cod-enabled", children: _jsx(Toggle, { label: "Cash on delivery (COD) enabled", checked: codEnabled, onChange: setCodEnabled }) }), _jsx(Input, { label: "Free shipping threshold (\u20B9)", value: String(freeShippingThreshold), onChange: (e) => setFreeShippingThreshold(parseInt(e.target.value) || 0), type: "number", min: 0, helperText: "Orders above this amount get free shipping." }), _jsx(Select, { label: "Default carrier", options: CARRIER_OPTIONS, value: defaultCarrier, onValueChange: setDefaultCarrier }), _jsx(Input, { label: "Max delivery radius (km, 0 = no limit)", value: String(maxDeliveryRadius), onChange: (e) => setMaxDeliveryRadius(parseInt(e.target.value) || 0), type: "number", min: 0 }), _jsx(Input, { label: "COD maximum order value (\u20B9)", 
+                                            /*
+                                              🛑 A MAXIMUM, sitting directly above a THRESHOLD that is a
+                                              minimum. The helper text says which way each one runs,
+                                              because the two fields look identical and mean opposite
+                                              things — and getting it backwards here either refuses every
+                                              COD order or refuses none.
+                                            */
+                                            helperText: "Carts ABOVE this subtotal cannot pay by cash on delivery; the option is shown disabled with the reason. 0 = COD off for every cart.", value: String(codMaxOrderValue), onChange: (e) => setCodMaxOrderValue(parseInt(e.target.value) || 0), type: "number", min: 0, disabled: !codEnabled }), _jsx(Input, { label: "High-value checkout OTP threshold (\u20B9)", helperText: "Carts at or above this subtotal require an extra OTP verification step before payment (0 = disabled).", value: String(otpCheckoutThreshold), onChange: (e) => setOtpCheckoutThreshold(parseInt(e.target.value) || 0), type: "number", min: 0 }), _jsx(Text, { size: "sm", weight: "medium", color: "muted", className: "pt-[var(--appkit-space-2)]", children: "Seller shipping charge defaults" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(Input, { label: "Seller shipping fixed (\u20B9)", helperText: "Flat shipping charge collected on the seller's behalf.", value: String(sellerShippingFixed), onChange: (e) => setSellerShippingFixed(parseFloat(e.target.value) || 0), type: "number", min: 0 }), _jsx(Input, { label: "Platform shipping (%)", helperText: "Platform's own shipping markup, as a % of order value.", value: String(platformShippingPercent), onChange: (e) => setPlatformShippingPercent(parseFloat(e.target.value) || 0), type: "number", min: 0, max: 100, step: 0.1 }), _jsx(Input, { label: "Platform shipping minimum (\u20B9)", helperText: "Floor for the platform shipping markup.", value: String(platformShippingFixedMin), onChange: (e) => setPlatformShippingFixedMin(parseFloat(e.target.value) || 0), type: "number", min: 0 })] })] }) }), _jsx(TabsContent, { value: "auction", children: _jsxs(SettingsTabForm, { id: "auction", label: "Auction", children: [_jsxs(Stack, { gap: "sm", rounded: "lg", border: "default", padding: "sm", children: [_jsx(Text, { size: "xs", weight: "medium", color: "muted", children: "Bid increment tiers" }), _jsx(Text, { size: "xs", color: "muted", children: "The minimum jump a new bid must clear, based on the current bid amount. A seller's per-listing override can require more than the matching tier, but can never undercut it." }), bidIncrementTiers.map((tier, i) => {
                                                     const isLast = i === bidIncrementTiers.length - 1;
                                                     return (_jsxs(Grid, { align: "end", gap: "xs", className: "grid-cols-12", children: [_jsx(Div, { className: "col-span-5", children: isLast ? (_jsxs(_Fragment, { children: [_jsx(Text, { size: "xs", weight: "medium", className: "mb-1", children: "Up to (\u20B9)" }), _jsx(Text, { size: "sm", color: "muted", children: "and above" })] })) : (_jsx(Input, { label: "Up to (\u20B9)", type: "number", min: 1, value: String(tier.upTo ?? ""), onChange: (e) => setBidIncrementTiers(bidIncrementTiers.map((t, j) => j === i ? { ...t, upTo: parseInt(e.target.value) || 0 } : t)) })) }), _jsx(Div, { className: "col-span-5", children: _jsx(Input, { label: "Increment (\u20B9)", type: "number", min: 1, value: String(tier.increment), onChange: (e) => setBidIncrementTiers(bidIncrementTiers.map((t, j) => j === i ? { ...t, increment: parseInt(e.target.value) || 0 } : t)) }) }), _jsx(Row, { centered: true, className: "col-span-2", padding: "b-xs", children: _jsx(Button, { variant: "ghost", type: "button", disabled: bidIncrementTiers.length <= 1, onClick: () => setBidIncrementTiers(bidIncrementTiers.filter((_, j) => j !== i)), "aria-label": "Remove tier", children: "\u00D7" }) })] }, i));
                                                 }), _jsx(Button, { type: "button", variant: "outline", size: "sm", onClick: () => setBidIncrementTiers([