@mohasinac/appkit 4.58.0 → 4.60.0

package/dist/features/admin/repository/site-settings.repository.js

@@ -17,6 +17,53 @@ import { cacheManager } from "../../../core/CacheManager.js";
 import { SITE_SETTINGS_COLLECTION, DEFAULT_SITE_SETTINGS_DATA, } from "../schemas/index.js";
 import { DatabaseError } from "../../../errors/index.js";
 import { decryptSecret, encryptSecret, maskSecret } from "../../../security/index.js";
+/**
+ * Flatten a nested update into Firestore dotted field paths, so a partial
+ * group update MERGES into the stored map instead of replacing it.
+ *
+ * `update({ commissions: { gstPercent: 18 } })` deletes every other key under
+ * `commissions`; `update({ "commissions.gstPercent": 18 })` touches one leaf.
+ * See the call site for the five keys that were silently destroyed by the
+ * former (D13).
+ *
+ * Three cases are deliberately NOT recursed into:
+ *
+ * · **Arrays** — an array is a VALUE, not a map. Flattening
+ *   `legalPages.sections.0.title` would make a shorter replacement array leave
+ *   the old tail in place, which is a worse bug than the one being fixed.
+ * · **`undefined`** — kept at its own path so a caller can still delete a
+ *   field. Recursing would turn it into a path to nothing.
+ * · **`Date` and any other class instance** — Firestore stores a `Date` as a
+ *   Timestamp; walking its properties would write `{}`. Tested by rejecting
+ *   anything whose prototype is not `Object.prototype`, which also covers
+ *   `FieldValue` sentinels and `Timestamp` itself.
+ */
+export function toDottedPaths(input, prefix = "") {
+    const out = {};
+    for (const [key, value] of Object.entries(input)) {
+        const path = prefix ? `${prefix}.${key}` : key;
+        const isPlainObject = typeof value === "object" &&
+            value !== null &&
+            !Array.isArray(value) &&
+            Object.getPrototypeOf(value) === Object.prototype;
+        if (isPlainObject) {
+            const nested = toDottedPaths(value, path);
+            /*
+             * An EMPTY object is written at its own path rather than vanishing.
+             * `{ watermark: {} }` is a caller saying "clear this group"; dropping it
+             * because it produced no leaves would silently ignore the instruction.
+             */
+            if (Object.keys(nested).length === 0)
+                out[path] = value;
+            else
+                Object.assign(out, nested);
+        }
+        else {
+            out[path] = value;
+        }
+    }
+    return out;
+}
 /**
  * Repository for site settings management
  *
@@ -113,10 +160,44 @@ export class SiteSettingsRepository extends BaseRepository {
                 ...finalUpdates,
                 updatedAt: new Date(),
             });
+            /*
+             * ── D13: DOTTED PATHS, not a wholesale nested-map replace ────────────
+             *
+             * 🛑 This was `.update(updateData)` with nested objects, and Firestore's
+             * `update()` REPLACES a nested map wholesale rather than merging into
+             * it. So saving `{ commissions: { platformFeePercent: 2 } }` deleted
+             * every other key under `commissions`.
+             *
+             * That is not hypothetical. `AdminSiteSettingsView`'s commissions
+             * payload omitted FIVE keys — `saleProtectionFeeEnabled`,
+             * `saleProtectionFeePercent`, `saleProtectionFeeMin`,
+             * `codHandlingFeeCap`, `codHandlingFeePercent` — with no state, no field
+             * and no control for any of them. So the FIRST save of any commissions
+             * field silently:
+             *
+             *   · stopped sale protection being sold, a product we charge 3% (min
+             *     ₹49) for, with no error and nothing in the UI to notice; and
+             *   · reverted COD handling to code defaults.
+             *
+             * It also made CLAUDE.md's stated remediation — "enable them once at
+             * Admin → Site Settings → Commissions" — impossible, because there was
+             * no control there to enable them with.
+             *
+             * Flattening to dotted paths is the structural fix: `commissions.gstPercent`
+             * touches exactly that leaf. The alternative (adding the five missing
+             * fields to the form) fixes TODAY'S instance and leaves the next group
+             * that grows a field to hit the same wall — and `legalPages` had already
+             * hit it independently (D19), which is the evidence that this recurs.
+             *
+             * 🛑 ARRAYS AND `undefined` ARE NOT FLATTENED. An array is a value, not a
+             * map: flattening `legalPages.sections.0.title` would make a shorter
+             * replacement array leave the old tail behind. And `undefined` must stay
+             * a top-level delete rather than becoming a dotted path to nothing.
+             */
             await this.db
                 .collection(this.collection)
                 .doc(this.SINGLETON_ID)
-                .update(updateData);
+                .update(toDottedPaths(updateData));
             const latest = await this.getSingleton();
             cacheManager.set(this.cacheKey(), latest, {
                 ttl: SiteSettingsRepository.CACHE_TTL_MS,

package/dist/features/admin/schemas/admin-editor-forms.d.ts

@@ -92,6 +92,17 @@ export declare const brandFormSchema: z.ZodObject<{
     website: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
     country: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
     founded: z.ZodOptional<z.ZodNumber>;
+    highlightsText: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+    faqs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        question: z.ZodString;
+        answer: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        question: string;
+        answer: string;
+    }, {
+        question: string;
+        answer: string;
+    }>, "many">>;
     isActive: z.ZodBoolean;
     displayOrder: z.ZodOptional<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
@@ -99,20 +110,30 @@ export declare const brandFormSchema: z.ZodObject<{
     isActive: boolean;
     country?: string | undefined;
     slug?: string | undefined;
+    faqs?: {
+        question: string;
+        answer: string;
+    }[] | undefined;
     description?: string | undefined;
     displayOrder?: number | undefined;
     logoURL?: string | undefined;
     website?: string | undefined;
     founded?: number | undefined;
+    highlightsText?: string | undefined;
 }, {
     name: string;
     isActive: boolean;
     country?: string | undefined;
     slug?: string | undefined;
+    faqs?: {
+        question: string;
+        answer: string;
+    }[] | undefined;
     description?: string | undefined;
     displayOrder?: number | undefined;
     logoURL?: string | undefined;
     website?: string | undefined;
     founded?: number | undefined;
+    highlightsText?: string | undefined;
 }>;
 export type BrandFormValues = z.infer<typeof brandFormSchema>;

package/dist/features/admin/schemas/admin-editor-forms.js

@@ -177,6 +177,50 @@ export const brandFormSchema = z.object({
         section: "identity", order: 2, row: "pair", label: "Country of origin",
     }),
     founded: annotate(z.number().int().min(1800, "That is earlier than any brand on record.").max(new Date().getFullYear(), "A founding year cannot be in the future.").optional(), { section: "identity", order: 3, row: "pair", kind: "number", label: "Founded year" }),
+    /*
+     * ── Editorial content ────────────────────────────────────────────────────
+     *
+     * 🛑 BOTH OF THESE HAVE RENDERED ON THE BRAND PAGE SINCE THEY SHIPPED, with
+     * no way to author them. `BrandDetailPageView:418` mounts
+     * `<CategoryHighlightsAndFaqSection highlights={brand?.highlights}
+     * faqs={brand?.faqs} />`, `CategoryDocument` declares both with a comment
+     * saying they render on "category and BRAND detail pages", and
+     * `CATEGORIES_UPDATABLE_FIELDS` has always permitted the write. The only
+     * missing piece was a form — the category editor had one, the brand editor
+     * did not, so brand highlights and FAQs were unreachable.
+     *
+     * `highlightsText` is a newline-separated textarea rather than a repeater,
+     * matching the category editor exactly: these are a flat `string[]`, an
+     * admin pasting five bullets wants to paste five lines, and order is
+     * preserved by the text itself.
+     */
+    highlightsText: annotate(z.string().optional().or(z.literal("")), {
+        section: "content", sectionLabel: "Content", order: 1, row: "full",
+        kind: "textarea", label: "Highlights — one per line",
+        help: "Short \"why shop this brand\" bullets, shown above the FAQs.",
+    }),
+    /*
+     * 🛑 DECLARED HERE SO THE PARSE COVERS IT, rendered by a custom `renderers`
+     * entry in the editor. `buildSectionsFromSchema` has no `kind` for a
+     * per-row shape, and inventing one for a single consumer would be the
+     * speculative-infra move — `logoURL` already establishes the pattern of a
+     * schema field with a bespoke renderer.
+     *
+     * It lives in the DRAFT rather than its own `useState`, unlike the category
+     * editor's three repeaters. Those predate this form being schema-driven;
+     * here the draft can hold the array, so validation, dirty-tracking and the
+     * error summary all see it, and there is one source of truth instead of two.
+     */
+    faqs: annotate(z
+        .array(z.object({
+        question: z.string().min(1, "A question is required").max(300),
+        answer: z.string().min(1, "An answer is required").max(2000),
+    }))
+        .max(8, "At most 8 questions")
+        .optional(), {
+        section: "content", order: 2, row: "full", label: "Brand FAQs",
+        help: "Rendered beneath the highlights on the brand page.",
+    }),
     isActive: annotate(z.boolean(), {
         section: "visibility", sectionLabel: "Visibility", order: 1, row: "quarter",
         label: "Active",

package/dist/features/admin/schemas/firestore.js

@@ -292,7 +292,11 @@ export const DEFAULT_SITE_SETTINGS_DATA = {
         platformShippingPercent: 10,
         platformShippingFixedMin: 0,
         autoPayoutWindowDays: 7,
-        payoutHoldDays: 2,
+        // 7, not 2 — see `PAYOUT_HOLD_FLOOR_DAYS`. A 2-day hold releases the
+        // seller's money inside both the 7-day return window and the 7-day
+        // sale-protection claim window, so it was never a legal value; it was
+        // merely an unread one (D28).
+        payoutHoldDays: 7,
         minPayoutAmount: 100,
         auctionListingFee: 0,
         preOrderListingFee: 0,

package/dist/features/admin/schemas/site-settings-form.js

@@ -41,6 +41,13 @@
  * @tag sideEffects:none
  */
 import { z } from "zod";
+/*
+ * The floor lives with the payout-hold resolver that enforces it at read
+ * time, so the validation message and the honoured behaviour cannot drift —
+ * two copies of "7" is how `payoutHoldDays: 2` coexisted with a hardcoded 7
+ * for months (D28).
+ */
+import { PAYOUT_HOLD_FLOOR_DAYS } from "../../../_internal/shared/fees/payout-hold.js";
 /** A percentage a human types into a settings box. */
 const percent = (label) => z.coerce
     .number({ invalid_type_error: `${label} must be a number.` })
@@ -102,7 +109,29 @@ export const siteSettingsFormSchema = z
         gatewayFeePercent: percent("Gateway fee"),
         platformFeeMax: money("Platform fee cap"),
         minPayoutAmount: money("Minimum payout"),
-        payoutHoldDays: z.coerce.number().int().min(0).max(365).optional(),
+        /*
+         * 🛑 `.min(PAYOUT_HOLD_FLOOR_DAYS)`, not `.min(0)` — and the floor is
+         * not arbitrary.
+         *
+         * The hold must outlast every window during which money can still
+         * flow back OUT of the order: the 7-day return window
+         * (`returns.windowDays`) and the 7-day sale-protection claim window
+         * (`PROTECTION_CLAIM_WINDOW_HOURS.sale` = 168h). Allowing 0 let an
+         * admin release a seller's money before the buyer could even claim
+         * against protection WE had already sold and would have to fund —
+         * and the stored value was seeded **2**, i.e. inside that window.
+         *
+         * `resolvePayoutHoldDays` already clamps up to the floor at read
+         * time, so behaviour is correct either way. This exists so the admin
+         * is TOLD, at the moment they try it, instead of setting 2 and
+         * believing it took effect.
+         */
+        payoutHoldDays: z.coerce
+            .number()
+            .int()
+            .min(PAYOUT_HOLD_FLOOR_DAYS, `Payout hold must be at least ${PAYOUT_HOLD_FLOOR_DAYS} days — it has to outlast the return window and the protection claim window, or a seller is paid before a buyer can claim.`)
+            .max(365)
+            .optional(),
         codHandlingFee: money("COD handling fee"),
         codDepositPercent: percent("COD deposit"),
     })

package/dist/features/auctions/actions/bid-actions.js

@@ -312,7 +312,19 @@ export async function buyNowAuction(userId, userName, userEmail, input) {
     // Replaces the old `bidsHaveStarted` gate. Buy Now used to vanish the instant
     // anybody bid, eBay-style, which hid it on almost every real auction. What
     // actually matters is whether it is still a better deal than the bidding.
-    if (!isBuyNowAvailable({ buyNowPrice, currentBid: standingBid, isEnded: false, isSold: product.isSold })) {
+    /*
+     * 🛑 `reservePrice` is passed HERE above all: this is the server-side money
+     * gate for a buyout. Omitting it is what let a Buy-Now below the seller's
+     * floor complete (D53) — the reserve was enforced only in
+     * `auctionSettlement`, i.e. only on the competitive path.
+     */
+    if (!isBuyNowAvailable({
+        buyNowPrice,
+        currentBid: standingBid,
+        isEnded: false,
+        isSold: product.isSold,
+        reservePrice: product.reservePrice,
+    })) {
         throw new ValidationError(ERROR_MESSAGES.BID.BUY_NOW_UNAVAILABLE, {
             code: BID_ERROR_CODES.BUY_NOW_UNAVAILABLE,
         });

package/dist/features/auctions/components/AuctionBottomActions.js

@@ -39,7 +39,7 @@ function formatCountdownLabel(remaining) {
  * button can report an error or route to `/checkout?lane=auction`.
  */
 export function AuctionBottomActions(props) {
-    const { currentBid, currency, bidCount, isEnded: ssrIsEnded, auctionEndDate, buyNowPrice } = props;
+    const { currentBid, currency, bidCount, isEnded: ssrIsEnded, auctionEndDate, buyNowPrice, reservePrice } = props;
     /*
      * Derived client-side — see `useIsAuctionEnded`. This bar is a FIXED, always-
      * visible row on mobile, so a stale "Place bid" here is the most prominent
@@ -55,7 +55,7 @@ export function AuctionBottomActions(props) {
     const buyNowMeta = ACTION_META[ACTION_ID.BUY_NOW_AUCTION];
     // Same single predicate the form and the card use. `!!props.onBuyNow` matters
     // because the preview/demo mount passes no action.
-    const buyNowAvailable = isBuyNowAvailable({ buyNowPrice, currentBid, isEnded }) && !!props.onBuyNow;
+    const buyNowAvailable = isBuyNowAvailable({ buyNowPrice, currentBid, isEnded, reservePrice }) && !!props.onBuyNow;
     useBottomActions(isEnded
         ? {}
         : {

package/dist/features/auctions/components/AuctionDetailPageView.js

@@ -52,7 +52,7 @@ function toDescriptionHtml(raw) {
 }
 function renderAuctionInfoPanel(props) {
     const { productId, storeId, title, currentBid, currency, bidCount, isEnded, endDate, buyNowPrice, buyNowAvailable, featured, freeShipping, condition, finalSale, category, categoryName, brand, brandSlug, productFeatures, features, descriptionHtml, safeSeller, storeHref } = props;
-    return (_jsxs(Stack, { gap: "md", children: [_jsxs(Div, { children: [_jsxs(Row, { gap: "xs", wrap: true, className: "mb-2", children: [_jsx(Span, { size: "xs", weight: "semibold", className: CLS_LIVE_BADGE, children: "\uD83C\uDFF7\uFE0F Live Auction" }), _jsx(AuctionLiveStatusBadge, { auctionEndDate: endDate, initialIsEnded: isEnded })] }), _jsx(OwnerQuickActions, { resource: "PRODUCT", placement: "detail", recordLabel: title, storeId: storeId, editHref: String(ROUTES.STORE.PRODUCTS_EDIT(productId)) }), _jsx(Heading, { level: 1, className: "leading-snug", smSize: "2xl", color: "primary", size: "xl", weight: "bold", children: title })] }), _jsxs(Div, { children: [_jsx(Text, { className: "mb-0.5", color: "muted", size: "xs", children: "Current bid" }), _jsx(LiveBidPrice, { productId: productId, currentBid: currentBid, bidCount: bidCount, currency: currency, isEnded: isEnded, priceSize: "2xl", badgeSize: "sm" }), endDate && !isEnded && (_jsxs(Text, { className: "mt-1.5", color: "muted", size: "sm", children: ["Ends in ", _jsx(Span, { weight: "medium", color: "muted", children: _jsx(CountdownDisplay, { targetDate: endDate, format: "auto", expiredLabel: "Ended" }) })] })), endDate && _jsxs(Text, { className: "mt-0.5", color: "faint", size: "xs", children: [isEnded ? "Ended" : "Ends", " ", endDate.toLocaleString()] })] }), buyNowAvailable && buyNowPrice !== null && (_jsxs(Row, { align: "center", gap: "sm", className: "border border-[var(--appkit-color-primary-200)] dark:border-[var(--appkit-color-primary-800)] bg-primary-50 dark:bg-primary-900/20", padding: "inlineSm", rounded: "lg", children: [_jsx(Span, { size: "xs", color: "muted", children: "Buy Now:" }), _jsx(Span, { size: "base", weight: "bold", className: "text-primary-700 dark:text-primary-300", children: _jsx(GatedPrice, { label: "Sign in to see the Buy Now price", children: formatCurrency(buyNowPrice, currency) }) }), _jsx(Span, { size: "xs", color: "faint", children: "\u2014 in \u201CPlace a bid\u201D" })] })), _jsx(ProductFeatureBadges, { featured: featured, freeShipping: freeShipping, condition: condition ?? undefined, finalSale: finalSale, labels: { featured: "Featured", fasterDelivery: "Faster Delivery", ratedSeller: "Rated Seller", condition: "Condition", conditionNew: "New", conditionUsed: "Used", conditionBroken: "For Parts", conditionRefurbished: "Refurbished", returnable: "Returnable", finalSale: "Final Sale", freeShipping: "Free Shipping", codAvailable: "Cash on Delivery", emiAvailable: "EMI Available", wishlistCount: (n) => `${n} wishlisted`, categoryProductCount: (n, cat) => `${n} in ${cat}` } }), (categoryName || category || brand) && (_jsxs(Row, { gap: "sm", wrap: true, children: [category && _jsx(Link, { href: String(ROUTES.PUBLIC.CATEGORY_DETAIL(category)), className: "inline-flex items-center rounded-full border border-[var(--appkit-color-border)] bg-[var(--appkit-color-surface)] px-[var(--appkit-space-2-5)] py-[var(--appkit-space-1)] text-[length:var(--appkit-text-xs)] font-medium text-[var(--appkit-color-text-muted)] transition-colors hover:border-primary-300 hover:bg-primary-surface hover:text-primary-700 dark:hover:border-primary-700/60 dark:hover:text-primary-400", children: categoryName || category }), !category && categoryName && _jsx(Span, { layout: "inline-flex", size: "xs", weight: "medium", border: "subtle", rounded: "full", padding: "pill-sm-tall", surface: "muted", color: "muted", children: categoryName }), brand && brandSlug && _jsx(Link, { href: String(ROUTES.PUBLIC.BRAND_DETAIL(brandSlug)), className: "inline-flex items-center rounded-full border border-[var(--appkit-color-border)] bg-[var(--appkit-color-surface)] px-[var(--appkit-space-2-5)] py-[var(--appkit-space-1)] text-[length:var(--appkit-text-xs)] font-medium text-[var(--appkit-color-text-muted)] transition-colors hover:border-primary-300 hover:bg-primary-surface hover:text-primary-700 dark:hover:border-primary-700/60 dark:hover:text-primary-400", children: brand }), brand && !brandSlug && _jsx(Span, { layout: "inline-flex", size: "xs", weight: "medium", border: "subtle", rounded: "full", padding: "pill-sm-tall", surface: "muted", color: "muted", children: brand })] })), productFeatures && features.length > 0 && _jsx(FeatureBadgeList, { productFeatureIds: features, features: productFeatures }), !productFeatures && features.length > 0 && (_jsxs(Div, { border: "subtle", surface: "muted", padding: "inline", rounded: "xl", children: [_jsx(Text, { className: "mb-2 tracking-wide", color: "muted", size: "xs", weight: "semibold", transform: "uppercase", children: "About this item" }), _jsx(Ul, { spacing: "comfortable", size: "sm", color: "primary", children: features.map((f, i) => _jsxs(Li, { layout: "flex-start", gap: "2", children: [_jsx(Span, { className: "mt-0.5 flex-shrink-0 text-primary-500", children: "\u2022" }), f] }, i)) })] })), descriptionHtml && _jsx(RichText, { html: descriptionHtml, proseClass: "prose prose-sm max-w-none dark:prose-invert prose-p:my-0", className: "text-[length:var(--appkit-text-sm)] leading-relaxed text-[var(--appkit-color-text-muted)] line-clamp-4" }), safeSeller && (_jsx(Div, { className: `${__P.p3}`, border: "subtle", rounded: "xl", surface: "muted", children: _jsxs(Row, { justify: "between", align: "center", children: [_jsxs(Div, { children: [_jsx(Text, { className: "text-[10px] tracking-wide mb-0.5", color: "faint", transform: "uppercase", children: "Listed by" }), _jsx(Text, { size: "sm", weight: "semibold", color: "primary", children: safeSeller })] }), storeHref && _jsx(Link, { href: storeHref, className: "shrink-0 rounded-lg bg-primary/10 dark:bg-primary/20 px-[var(--appkit-space-3)] py-[var(--appkit-space-1-5)] text-[length:var(--appkit-text-xs)] font-semibold text-primary-700 dark:text-primary-300 hover:bg-primary/20 dark:hover:bg-primary/30 transition-colors", children: "Visit Store \u2192" })] }) }))] }));
+    return (_jsxs(Stack, { gap: "md", children: [_jsxs(Div, { children: [_jsxs(Row, { gap: "xs", wrap: true, className: "mb-2", children: [_jsx(Span, { size: "xs", weight: "semibold", className: CLS_LIVE_BADGE, children: "\uD83C\uDFF7\uFE0F Live Auction" }), _jsx(AuctionLiveStatusBadge, { auctionEndDate: endDate, initialIsEnded: isEnded })] }), _jsx(Heading, { level: 1, className: "leading-snug", smSize: "2xl", color: "primary", size: "xl", weight: "bold", children: title }), _jsx(OwnerQuickActions, { resource: "PRODUCT", placement: "detail", recordLabel: title, storeId: storeId, editHref: String(ROUTES.STORE.PRODUCTS_EDIT(productId)) })] }), _jsxs(Div, { children: [_jsx(Text, { className: "mb-0.5", color: "muted", size: "xs", children: "Current bid" }), _jsx(LiveBidPrice, { productId: productId, currentBid: currentBid, bidCount: bidCount, currency: currency, isEnded: isEnded, priceSize: "2xl", badgeSize: "sm" }), endDate && !isEnded && (_jsxs(Text, { className: "mt-1.5", color: "muted", size: "sm", children: ["Ends in ", _jsx(Span, { weight: "medium", color: "muted", children: _jsx(CountdownDisplay, { targetDate: endDate, format: "auto", expiredLabel: "Ended" }) })] })), endDate && _jsxs(Text, { className: "mt-0.5", color: "faint", size: "xs", children: [isEnded ? "Ended" : "Ends", " ", endDate.toLocaleString()] })] }), buyNowAvailable && buyNowPrice !== null && (_jsxs(Row, { align: "center", gap: "sm", className: "border border-[var(--appkit-color-primary-200)] dark:border-[var(--appkit-color-primary-800)] bg-primary-50 dark:bg-primary-900/20", padding: "inlineSm", rounded: "lg", children: [_jsx(Span, { size: "xs", color: "muted", children: "Buy Now:" }), _jsx(Span, { size: "base", weight: "bold", className: "text-primary-700 dark:text-primary-300", children: _jsx(GatedPrice, { label: "Sign in to see the Buy Now price", children: formatCurrency(buyNowPrice, currency) }) }), _jsx(Span, { size: "xs", color: "faint", children: "\u2014 in \u201CPlace a bid\u201D" })] })), _jsx(ProductFeatureBadges, { featured: featured, freeShipping: freeShipping, condition: condition ?? undefined, finalSale: finalSale, labels: { featured: "Featured", fasterDelivery: "Faster Delivery", ratedSeller: "Rated Seller", condition: "Condition", conditionNew: "New", conditionUsed: "Used", conditionBroken: "For Parts", conditionRefurbished: "Refurbished", returnable: "Returnable", finalSale: "Final Sale", freeShipping: "Free Shipping", codAvailable: "Cash on Delivery", emiAvailable: "EMI Available", wishlistCount: (n) => `${n} wishlisted`, categoryProductCount: (n, cat) => `${n} in ${cat}` } }), (categoryName || category || brand) && (_jsxs(Row, { gap: "sm", wrap: true, children: [category && _jsx(Link, { href: String(ROUTES.PUBLIC.CATEGORY_DETAIL(category)), className: "inline-flex items-center rounded-full border border-[var(--appkit-color-border)] bg-[var(--appkit-color-surface)] px-[var(--appkit-space-2-5)] py-[var(--appkit-space-1)] text-[length:var(--appkit-text-xs)] font-medium text-[var(--appkit-color-text-muted)] transition-colors hover:border-primary-300 hover:bg-primary-surface hover:text-primary-700 dark:hover:border-primary-700/60 dark:hover:text-primary-400", children: categoryName || category }), !category && categoryName && _jsx(Span, { layout: "inline-flex", size: "xs", weight: "medium", border: "subtle", rounded: "full", padding: "pill-sm-tall", surface: "muted", color: "muted", children: categoryName }), brand && brandSlug && _jsx(Link, { href: String(ROUTES.PUBLIC.BRAND_DETAIL(brandSlug)), className: "inline-flex items-center rounded-full border border-[var(--appkit-color-border)] bg-[var(--appkit-color-surface)] px-[var(--appkit-space-2-5)] py-[var(--appkit-space-1)] text-[length:var(--appkit-text-xs)] font-medium text-[var(--appkit-color-text-muted)] transition-colors hover:border-primary-300 hover:bg-primary-surface hover:text-primary-700 dark:hover:border-primary-700/60 dark:hover:text-primary-400", children: brand }), brand && !brandSlug && _jsx(Span, { layout: "inline-flex", size: "xs", weight: "medium", border: "subtle", rounded: "full", padding: "pill-sm-tall", surface: "muted", color: "muted", children: brand })] })), productFeatures && features.length > 0 && _jsx(FeatureBadgeList, { productFeatureIds: features, features: productFeatures }), !productFeatures && features.length > 0 && (_jsxs(Div, { border: "subtle", surface: "muted", padding: "inline", rounded: "xl", children: [_jsx(Text, { className: "mb-2 tracking-wide", color: "muted", size: "xs", weight: "semibold", transform: "uppercase", children: "About this item" }), _jsx(Ul, { spacing: "comfortable", size: "sm", color: "primary", children: features.map((f, i) => _jsxs(Li, { layout: "flex-start", gap: "2", children: [_jsx(Span, { className: "mt-0.5 flex-shrink-0 text-primary-500", children: "\u2022" }), f] }, i)) })] })), descriptionHtml && _jsx(RichText, { html: descriptionHtml, proseClass: "prose prose-sm max-w-none dark:prose-invert prose-p:my-0", className: "text-[length:var(--appkit-text-sm)] leading-relaxed text-[var(--appkit-color-text-muted)] line-clamp-4" }), safeSeller && (_jsx(Div, { className: `${__P.p3}`, border: "subtle", rounded: "xl", surface: "muted", children: _jsxs(Row, { justify: "between", align: "center", children: [_jsxs(Div, { children: [_jsx(Text, { className: "text-[10px] tracking-wide mb-0.5", color: "faint", transform: "uppercase", children: "Listed by" }), _jsx(Text, { size: "sm", weight: "semibold", color: "primary", children: safeSeller })] }), storeHref && _jsx(Link, { href: storeHref, className: "shrink-0 rounded-lg bg-primary/10 dark:bg-primary/20 px-[var(--appkit-space-3)] py-[var(--appkit-space-1-5)] text-[length:var(--appkit-text-xs)] font-semibold text-primary-700 dark:text-primary-300 hover:bg-primary/20 dark:hover:bg-primary/30 transition-colors", children: "Visit Store \u2192" })] }) }))] }));
 }
 /**
  * Store reviews for the auction's seller.
@@ -171,6 +171,8 @@ export async function AuctionDetailPageView({ id, initialAuction, onPlaceBid, on
         currentBid,
         isEnded,
         isSold: p.isSold === true,
+        // D53 — so the button is not offered for a buyout the server will refuse.
+        reservePrice: typeof p.reservePrice === "number" ? p.reservePrice : null,
     });
     const condition = typeof p.condition === "string" ? p.condition : null;
     const featured = p.featured === true;

package/dist/features/auctions/components/MarketplaceAuctionCard.d.ts

@@ -29,6 +29,17 @@ export interface MarketplaceAuctionCardData {
      * (Root Cause #48).
      */
     isSold?: boolean;
+    /**
+     * D53 — the reserve, read by `isBuyNowAvailable` so a card cannot advertise
+     * a buyout the server will refuse.
+     *
+     * 🛑 Declared late: the predicate already read `product.reservePrice` while
+     * this type did not carry it, so the card was a type error AND every
+     * doc→card mapper was free to drop it. That is the exact failure the
+     * `isSold` note directly above warns about — a shared predicate reading a
+     * field the card shape does not guarantee.
+     */
+    reservePrice?: number | null;
     /**
      * The seller. Absent from this hand-rolled type entirely until now, so the
      * auction card could not show a seller even where every other card did —

package/dist/features/auctions/components/MarketplaceAuctionCard.js

@@ -1,6 +1,6 @@
 "use client";
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
-import { ProductOwnerQuickActions } from "../../products/components/ProductOwnerQuickActions.js";
+import { RecordOwnerQuickActions } from "../../admin/components/RecordOwnerQuickActions.js";
 import { normalizeError } from "../../../errors/normalize.js";
 import { useCallback, useEffect, useRef, useState } from "react";
 import { useRouter } from "next/navigation.js";
@@ -123,6 +123,8 @@ export function MarketplaceAuctionCard({ product, buyoutPrice, className = "", v
         currentBid: product.currentBid,
         isEnded,
         isSold: product.isSold === true,
+        // D53 — a card must not advertise a buyout price the server refuses.
+        reservePrice: typeof product.reservePrice === "number" ? product.reservePrice : null,
     })
         ? rawBuyoutPrice
         : undefined;
@@ -192,7 +194,7 @@ export function MarketplaceAuctionCard({ product, buyoutPrice, className = "", v
     const ownerActions = renderOwnerActions
         ? renderOwnerActions()
         : product.id
-            ? (_jsx(ProductOwnerQuickActions, { productId: String(product.id), storeId: product.storeId ? String(product.storeId) : undefined, recordLabel: product.title, placement: "card" }))
+            ? (_jsx(RecordOwnerQuickActions, { resource: "PRODUCT", recordId: String(product.id), storeId: product.storeId ? String(product.storeId) : undefined, recordLabel: product.title, placement: "card" }))
             : null;
     if (!ownerActions)
         return card;
@@ -200,5 +202,5 @@ export function MarketplaceAuctionCard({ product, buyoutPrice, className = "", v
      * Sibling of the card, never a child — see the prop's docstring. `z-20`
      * clears this card's own overlays, which all sit at `z-10`.
      */
-    return (_jsxs(Div, { className: "relative h-full", children: [card, _jsx(Div, { className: "absolute right-2 bottom-2 z-20", children: ownerActions })] }));
+    return (_jsxs(Div, { className: "flex h-full flex-col", children: [card, _jsx(Div, { className: "flex justify-end px-[var(--appkit-space-3)] pb-[var(--appkit-space-3)]", children: ownerActions })] }));
 }

package/dist/features/auctions/components/PlaceBidFormClient.d.ts

@@ -40,12 +40,19 @@ export interface PlaceBidFormClientProps {
     isEnded: boolean;
     auctionEndDate: Date | null;
     buyNowPrice: number | null;
+    /**
+     * The seller's floor (D53). Threaded so the Buy-Now control is not offered
+     * for a buyout the server will refuse — `isBuyNowAvailable` now rejects
+     * `buyNowPrice < reservePrice`, and without this prop the button would
+     * render and then error on click.
+     */
+    reservePrice?: number | null;
     bidCount: number;
     tags?: string[];
     onPlaceBid: (input: PlaceBidInput) => Promise<BidActionEnvelope<unknown>>;
     onBuyNow?: () => Promise<BidActionEnvelope<BuyNowSuccess>>;
 }
-export declare function PlaceBidFormClient({ productId, currentBid: ssrCurrentBid, startingBid, tiers, minBidIncrementOverride, currency, isEnded: ssrIsEnded, auctionEndDate, buyNowPrice, bidCount: ssrBidCount, tags, onPlaceBid, onBuyNow, }: PlaceBidFormClientProps): React.JSX.Element;
+export declare function PlaceBidFormClient({ productId, currentBid: ssrCurrentBid, startingBid, tiers, minBidIncrementOverride, currency, isEnded: ssrIsEnded, auctionEndDate, buyNowPrice, reservePrice, bidCount: ssrBidCount, tags, onPlaceBid, onBuyNow, }: PlaceBidFormClientProps): React.JSX.Element;
 /**
  * `PlaceBidModalButton` — opens a modal that hosts the same PlaceBidFormClient.
  *

package/dist/features/auctions/components/PlaceBidFormClient.js

@@ -37,7 +37,7 @@ const __P = {
 /** Feature-specific last resort. Authored copy, never derived from an error. */
 const BID_FALLBACK = "Failed to place bid. Please try again.";
 const BUY_NOW_FALLBACK = "Buy Now failed. Please try again.";
-export function PlaceBidFormClient({ productId, currentBid: ssrCurrentBid, startingBid, tiers, minBidIncrementOverride, currency, isEnded: ssrIsEnded, auctionEndDate, buyNowPrice, bidCount: ssrBidCount, tags = [], onPlaceBid, onBuyNow, }) {
+export function PlaceBidFormClient({ productId, currentBid: ssrCurrentBid, startingBid, tiers, minBidIncrementOverride, currency, isEnded: ssrIsEnded, auctionEndDate, buyNowPrice, reservePrice, bidCount: ssrBidCount, tags = [], onPlaceBid, onBuyNow, }) {
     /*
      * 🛑 Derived here, not trusted from the server.
      *
@@ -142,7 +142,7 @@ export function PlaceBidFormClient({ productId, currentBid: ssrCurrentBid, start
     // `currentBid` here is the LIVE SSE price, so the button hides itself the
     // moment another bidder passes the buyout price — without a page reload, and
     // without this component owning a second copy of the rule.
-    const buyNowAvailable = isBuyNowAvailable({ buyNowPrice, currentBid, isEnded }) && !!onBuyNow;
+    const buyNowAvailable = isBuyNowAvailable({ buyNowPrice, currentBid, isEnded, reservePrice }) && !!onBuyNow;
     const schema = placeBidSchema(minBid, formatCurrency(minBid, currency));
     async function submitBid(amount, setFieldError) {
         try {

package/dist/features/audit-log/schemas/firestore.d.ts

@@ -30,6 +30,20 @@ export declare const AdminAuditActionValues: {
      * offer's own `statusHistory`.
      */
     readonly OFFER_CANCEL: "offer_cancel";
+    /**
+     * Admin credited or debited a buyer's points by hand.
+     *
+     * 🛑 Belongs here rather than only in the ledger, even though the ledger is
+     * already append-only and already records `actorUid` and `adminReason`. The
+     * two answer different questions: the ledger answers "why does THIS ACCOUNT
+     * have 53 points", this answers "what have admins done lately" — and the
+     * second is the one you need when the account is not yet suspected.
+     *
+     * 1 point = ₹1 of spendable discount, so a credit is a liability the platform
+     * must honour and a debit removes value a buyer already holds. That is the
+     * same class as `payout_mark_paid` and `coupon_update`, which are both here.
+     */
+    readonly POINTS_ADJUST: "points_adjust";
 };
 export type AdminAuditAction = (typeof AdminAuditActionValues)[keyof typeof AdminAuditActionValues];
 export interface AdminAuditLogDocument extends BaseDocument {
@@ -69,5 +83,19 @@ export declare const ADMIN_AUDIT_LOG_FIELDS: {
          * offer's own `statusHistory`.
          */
         readonly OFFER_CANCEL: "offer_cancel";
+        /**
+         * Admin credited or debited a buyer's points by hand.
+         *
+         * 🛑 Belongs here rather than only in the ledger, even though the ledger is
+         * already append-only and already records `actorUid` and `adminReason`. The
+         * two answer different questions: the ledger answers "why does THIS ACCOUNT
+         * have 53 points", this answers "what have admins done lately" — and the
+         * second is the one you need when the account is not yet suspected.
+         *
+         * 1 point = ₹1 of spendable discount, so a credit is a liability the platform
+         * must honour and a debit removes value a buyer already holds. That is the
+         * same class as `payout_mark_paid` and `coupon_update`, which are both here.
+         */
+        readonly POINTS_ADJUST: "points_adjust";
     };
 };

package/dist/features/audit-log/schemas/firestore.js

@@ -28,6 +28,20 @@ export const AdminAuditActionValues = {
      * offer's own `statusHistory`.
      */
     OFFER_CANCEL: "offer_cancel",
+    /**
+     * Admin credited or debited a buyer's points by hand.
+     *
+     * 🛑 Belongs here rather than only in the ledger, even though the ledger is
+     * already append-only and already records `actorUid` and `adminReason`. The
+     * two answer different questions: the ledger answers "why does THIS ACCOUNT
+     * have 53 points", this answers "what have admins done lately" — and the
+     * second is the one you need when the account is not yet suspected.
+     *
+     * 1 point = ₹1 of spendable discount, so a credit is a liability the platform
+     * must honour and a debit removes value a buyer already holds. That is the
+     * same class as `payout_mark_paid` and `coupon_update`, which are both here.
+     */
+    POINTS_ADJUST: "points_adjust",
 };
 export const ADMIN_AUDIT_LOG_FIELDS = {
     ACTOR_UID: "actorUid",

package/dist/features/auth/permissions/constants.d.ts

@@ -37,7 +37,23 @@ export type Permission = "admin:dashboard:view" | "admin:users:read" | "admin:us
  * mechanism — and revoking it is a permission change, which the admin audit
  * log already records.
  */
- | "tester:admin-surfaces" | "admin:events:read" | "admin:events:write" | "admin:events:delete" | "admin:event-entries:read" | "admin:event-entries:write" | "admin:support-tickets:read" | "admin:support-tickets:write" | "admin:shipments:read" | "admin:shipments:write" | "admin:catalogue:read" | "admin:catalogue:write" | "admin:grouped-listings:read" | "admin:grouped-listings:write" | "admin:support-tickets:assign" | "admin:support-tickets:close" | "admin:scammers:read" | "admin:scammers:write" | "admin:scammers:verify" | "admin:scammers:delete" | "admin:sessions:read" | "admin:sessions:delete" | "admin:notifications:read" | "admin:notifications:write" | "admin:carts:read" | "admin:wishlists:read" | "admin:feature-flags:read" | "admin:feature-flags:write" | "admin:team:read" | "admin:team:write" | "admin:maintenance:view-server-errors" | "admin:maintenance:view-client-errors" | "admin:maintenance:view-function-errors" | "admin:maintenance:view-cloud-logs" | "admin:maintenance:view-payment-rollbacks" | "admin:maintenance:run-analysis" | "admin:maintenance:purge-errors";
+ | "tester:admin-surfaces" | "admin:events:read" | "admin:events:write" | "admin:events:delete" | "admin:event-entries:read" | "admin:event-entries:write" | "admin:support-tickets:read" | "admin:support-tickets:write" | "admin:shipments:read" | "admin:shipments:write" | "admin:catalogue:read" | "admin:catalogue:write" | "admin:inventory:read" | "admin:inventory:write" | "admin:grouped-listings:read" | "admin:grouped-listings:write" | "admin:support-tickets:assign" | "admin:support-tickets:close" | "admin:scammers:read" | "admin:scammers:write" | "admin:scammers:verify" | "admin:scammers:delete" | "admin:sessions:read" | "admin:sessions:delete" | "admin:notifications:read" | "admin:notifications:write" | "admin:carts:read" | "admin:wishlists:read" | "admin:feature-flags:read" | "admin:feature-flags:write" | "admin:team:read" | "admin:team:write" | "admin:maintenance:view-server-errors" | "admin:maintenance:view-client-errors" | "admin:maintenance:view-function-errors" | "admin:maintenance:view-cloud-logs" | "admin:maintenance:view-payment-rollbacks" | "admin:maintenance:run-analysis" | "admin:maintenance:purge-errors" | "admin:maintenance:view-gateway-events" | "admin:maintenance:view-obligations" | "admin:payment-cases:read" | "admin:payment-cases:write" | "admin:protection-claims:read" | "admin:protection-claims:write"
+/**
+ * Credit or debit a buyer's points by hand.
+ *
+ * 🛑 WRITE ONLY, with no matching `:read`, and that asymmetry is deliberate:
+ * a buyer's balance and ledger are already visible on the admin user detail
+ * page under the permissions that get you there. What needs its own gate is
+ * the act of CREATING SPENDABLE MONEY — 1 point = ₹1 against a future order,
+ * so a credit is a liability the platform must honour.
+ *
+ * Granted to no employee bundle. `createRouteHandler` lets an effective admin
+ * through without consulting the array at all, so this exists to be the thing
+ * an employee bundle would have to name explicitly — and nothing names it.
+ * Same reasoning as `admin:payment-cases:*`: a queue an analyst may read is
+ * different from a decision that moves money.
+ */
+ | "admin:points:write";
 /**
  * Granular user actions that can be soft-banned individually.
  * A user may have multiple simultaneous soft bans of different types.

package/dist/features/auth/permissions/constants.js

@@ -262,6 +262,16 @@ export const PERMISSION_GROUPS = {
         "admin:maintenance:view-cloud-logs",
         "admin:maintenance:view-payment-rollbacks",
         "admin:maintenance:run-analysis",
+        /*
+         * The two new diagnostics surfaces DO belong to this role — a stuck
+         * gateway event and an overdue obligation are exactly what a maintenance
+         * employee should be able to look at.
+         *
+         * 🛑 `admin:payment-cases:*` and `admin:protection-claims:*` deliberately
+         * are NOT here. Those decide money and carry external deadlines.
+         */
+        "admin:maintenance:view-gateway-events",
+        "admin:maintenance:view-obligations",
     ],
 };
 // ============================================================================
@@ -284,6 +294,9 @@ export const ROUTE_PERMISSION_MAP = {
     "/admin/payouts": "admin:payouts:read",
     "/admin/audit-log": "admin:audit-log:read",
     "/admin/shipments": "admin:shipments:read",
+    "/admin/inventory": "admin:inventory:read",
+    "/admin/inventory/boxes": "admin:inventory:read",
+    "/admin/inventory/movements": "admin:inventory:read",
     "/admin/catalogue-approvals": "admin:catalogue:read",
     "/admin/grouped-listings": "admin:grouped-listings:read",
     "/admin/categories": "admin:categories:read",
@@ -326,6 +339,11 @@ export const ROUTE_PERMISSION_MAP = {
     "/admin/maintenance/cloud-logs": "admin:maintenance:view-cloud-logs",
     "/admin/maintenance/payment-rollbacks": "admin:maintenance:view-payment-rollbacks",
     "/admin/maintenance/analysis": "admin:maintenance:run-analysis",
+    "/admin/maintenance/gateway-events": "admin:maintenance:view-gateway-events",
+    "/admin/maintenance/obligations": "admin:maintenance:view-obligations",
+    // Payment protection — admin-only, see the permission union's own 🛑 note.
+    "/admin/money-cases": "admin:payment-cases:read",
+    "/admin/protection-claims": "admin:protection-claims:read",
 };
 /**
  * Every capability, as a runtime value.

package/dist/features/blog/components/BlogPostView.js

@@ -56,5 +56,5 @@ export function BlogPostView({ slug, initialData, labels = {}, renderImage, rend
         })
         : "";
     const coverImageUrl = getMediaUrl(post.coverImage);
-    return (_jsxs(Div, { className: `min-h-screen ${className}`, children: [coverImageUrl && (_jsxs(Div, { className: `relative h-72 md:h-96 ${__O.hidden}`, children: [renderImage ? (renderImage(post)) : (_jsx(MediaImage, { src: coverImageUrl, alt: post.title, size: "hero" })), _jsx(Scrim, { direction: "bottom-up", intensity: "subtle", className: "absolute inset-0" })] })), _jsxs(Div, { className: "max-w-3xl mx-auto", paddingY: "y-3xl", paddingX: "x-md", children: [renderBlogPostHeader(post, date, labels), post.youtubeId && /^[A-Za-z0-9_-]{6,20}$/.test(post.youtubeId) && (_jsx(Div, { className: "mb-8", children: _jsx(Iframe, { src: `https://www.youtube-nocookie.com/embed/${post.youtubeId}`, title: `${post.title} — video`, aspect: "video", rounded: "lg" }) })), post.tags && post.tags.length > 0 && (_jsx(Row, { wrap: true, gap: "sm", className: "mb-8", children: post.tags.map((tag) => (_jsxs(Link, { href: `${String(ROUTES.BLOG.LIST)}?tags=${encodeURIComponent(tag)}`, className: "inline-block px-[var(--appkit-space-3)] py-[var(--appkit-space-1)] rounded-full bg-[var(--appkit-color-surface)] bg-[var(--appkit-color-surface-elevated)] hover:bg-primary/10 text-[var(--appkit-color-text-muted)] hover:text-primary text-[length:var(--appkit-text-xs)] font-medium transition-colors", children: ["#", tag] }, tag))) })), renderAuthorBio && _jsx(Div, { className: "mb-6", children: renderAuthorBio(post) }), _jsx(Div, { surface: "card", padding: "xl", className: "mb-12", children: renderContent ? renderContent(post) : (_jsx(RichText, { html: normalizeRichTextHtml(post.content ?? ""), proseClass: "prose max-w-none dark:prose-invert" })) }), _jsxs(Stack, { gap: "xl", children: [renderBlogPostRelated(related, labels?.relatedTitle ?? "Related Posts", renderRelatedCard), renderBlogPostRelated(relatedByTags, labels?.relatedByTagsTitle ?? "You might also like", renderRelatedCard), renderBlogPostRelated(relatedByAuthor, labels?.relatedByAuthorTitle ?? `More from ${post.authorName}`, renderRelatedCard)] }), renderBackButton && _jsx(Div, { border: "default", className: "mt-10 border-t", padding: "t-xl", children: renderBackButton() })] })] }));
+    return (_jsxs(Div, { className: `min-h-screen ${className}`, children: [coverImageUrl && (_jsxs(Div, { className: `relative h-72 md:h-96 ${__O.hidden}`, children: [renderImage ? (renderImage(post)) : (_jsx(MediaImage, { src: coverImageUrl, alt: post.title, size: "hero" })), _jsx(Scrim, { direction: "bottom-up", intensity: "subtle", className: "absolute inset-0" })] })), _jsxs(Div, { className: "max-w-3xl mx-auto", paddingY: "y-3xl", paddingX: "x-md", children: [renderBlogPostHeader(post, date, labels), post.youtubeId && /^[A-Za-z0-9_-]{6,20}$/.test(post.youtubeId) && (_jsx(Div, { className: "mb-8", children: _jsx(Iframe, { src: `https://www.youtube-nocookie.com/embed/${post.youtubeId}`, title: `${post.title} — video`, aspect: "video", rounded: "lg" }) })), post.tags && post.tags.length > 0 && (_jsx(Row, { wrap: true, gap: "sm", className: "mb-8", children: post.tags.map((tag) => (_jsxs(Link, { href: `${String(ROUTES.BLOG.LIST)}?tags=${encodeURIComponent(tag)}`, className: "inline-block px-[var(--appkit-space-3)] py-[var(--appkit-space-1)] rounded-full bg-[var(--appkit-color-surface-elevated)] hover:bg-primary/10 text-[var(--appkit-color-text-muted)] hover:text-primary text-[length:var(--appkit-text-xs)] font-medium transition-colors", children: ["#", tag] }, tag))) })), renderAuthorBio && _jsx(Div, { className: "mb-6", children: renderAuthorBio(post) }), _jsx(Div, { surface: "card", padding: "xl", className: "mb-12", children: renderContent ? renderContent(post) : (_jsx(RichText, { html: normalizeRichTextHtml(post.content ?? ""), proseClass: "prose max-w-none dark:prose-invert" })) }), _jsxs(Stack, { gap: "xl", children: [renderBlogPostRelated(related, labels?.relatedTitle ?? "Related Posts", renderRelatedCard), renderBlogPostRelated(relatedByTags, labels?.relatedByTagsTitle ?? "You might also like", renderRelatedCard), renderBlogPostRelated(relatedByAuthor, labels?.relatedByAuthorTitle ?? `More from ${post.authorName}`, renderRelatedCard)] }), renderBackButton && _jsx(Div, { border: "default", className: "mt-10 border-t", padding: "t-xl", children: renderBackButton() })] })] }));
 }

package/dist/features/catalogue/components/AdminCatalogueApprovalsView.js

@@ -81,5 +81,5 @@ export function AdminCatalogueApprovalsView() {
                             }, children: "Reject" }), _jsx(Button, { isLoading: approveMutation.isPending, onClick: () => {
                                 approveMutation.mutate(selected.id);
                                 setSelected(null);
-                            }, children: "Approve" })] })) : null }), _jsx(Modal, { isOpen: !!rejectTarget, onClose: () => setRejectTarget(null), title: "Reject this catalogue listing?", size: "sm", children: _jsxs(Stack, { gap: "md", children: [_jsx(Text, { variant: "secondary", children: "The owner will see this reason." }), _jsx(Textarea, { value: rejectReason, onChange: (e) => setRejectReason(e.target.value), rows: 3, placeholder: "Reason for rejection" }), _jsx(Button, { isLoading: rejectMutation.isPending, disabled: !rejectReason.trim(), variant: "danger", onClick: () => rejectMutation.mutate(), children: "Reject" })] }) })] }));
+                            }, children: "Approve" })] })) : null }), _jsx(Modal, { isOpen: !!rejectTarget, onClose: () => setRejectTarget(null), title: "Reject this catalogue listing?", size: "sm", children: _jsxs(Stack, { gap: "md", children: [_jsx(Text, { variant: "secondary", children: "The owner will see this reason." }), _jsx(Textarea, { label: "Reason for rejection", value: rejectReason, onChange: (e) => setRejectReason(e.target.value), rows: 3, placeholder: "Reason for rejection" }), _jsx(Button, { isLoading: rejectMutation.isPending, disabled: !rejectReason.trim(), variant: "danger", onClick: () => rejectMutation.mutate(), children: "Reject" })] }) })] }));
 }