@mohasinac/appkit 4.61.0 → 4.62.1

package/dist/client.js

@@ -335,6 +335,10 @@ export { ProtectedRoute, ForgotPasswordView, LoginForm, RegisterForm, ResetPassw
 export { useLogout, useLogin, useGoogleLogin, useLinkGoogleAccount, useRegister, useForgotPassword, useResetPassword, useVerifyEmail, useChangeEmail } from "./features/auth/index.js";
 export { CartView, CartItemRow, CartGroupLineRow, CartSummary, CartPriceBreakdown, CartDrawer, CheckoutView, CheckoutSuccessView, CheckoutAddressStep, useGuestCart, useCartCount, useAddToCart, useCart, useGuestCartMerge, useCartQuery } from "./features/cart/index.js";
 export { StoreAddonsPicker, hasAnyStoreAddon } from "./features/cart/index.js";
+// D46/D47 — the cart's single "pay with my points" control. One per CART, not
+// per store, unlike the add-ons picker above it: points are the buyer's balance
+// rather than something bought from a seller.
+export { PointsTenderPicker } from "./features/cart/index.js";
 export { clientLineTotal } from "./features/cart/utils/line-total.js";
 // `clearCartOps` / `removeCartOpsFor` are exported because the cart page has to
 // drain the queue after a removal succeeds server-side — without them a cleared
@@ -416,6 +420,9 @@ export { couponDraftToPayload } from "./features/seller/schemas/coupon-form.js";
 export { UserAccountHubView, UserOrdersView, UserBidsView, OrderDetailView, UserReturnsView, useNotifications } from "./features/account/index.js";
 export { useOrders, useOrder, OrdersList } from "./features/orders/index.js";
 export { OrderStatusTimeline } from "./features/orders/components/OrderStatusTimeline.js";
+export { OrderProvenanceCard } from "./features/orders/components/OrderProvenanceCard.js";
+// The buyer's dispute form: pick a kind, pick a reason, say what happened.
+export { RaiseDisputeForm } from "./features/orders/components/RaiseDisputeForm.js";
 /*
  * The buyer's completion surface. Client entry only — it fetches and posts.
  */
@@ -493,7 +500,7 @@ export { YourPurchaseStrip } from "./features/orders/components/YourPurchaseStri
 export { ReviewFormDrawer, reviewFormSchema } from "./features/reviews/components/ReviewFormDrawer.js";
 export { PurchaseReviewAffordance } from "./features/reviews/components/PurchaseReviewAffordance.js";
 // Media upload limits — shared by client uploaders + server sign/finalize routes.
-export { MEGABYTE, MAX_IMAGE_BYTES, MAX_PDF_BYTES, MAX_VIDEO_BYTES, MAX_LABEL, MAX_BYTES, ALLOWED_IMAGE_MIMES, IMAGE_ACCEPT_ATTR, ALLOWED_VIDEO_MIMES, ALLOWED_DOC_MIMES, ALLOWED_MIMES, ALLOWED_TYPES_LABEL, MIME_TO_EXT, PDF_MAGIC, VIDEO_CONVERSION_HINTS, classifyMime, isAllowedMime, maxBytesFor, getConversionHint, PRODUCT_MAX_IMAGES, PRODUCT_MAX_VIDEOS, PRODUCT_IMAGE_INDEX_MAX, } from "./_internal/shared/media/limits.js";
+export { MEGABYTE, MAX_IMAGE_BYTES, MAX_PDF_BYTES, MAX_VIDEO_BYTES, MAX_LABEL, MAX_BYTES, ALLOWED_IMAGE_MIMES, IMAGE_ACCEPT_ATTR, ALLOWED_VIDEO_MIMES, ALLOWED_DOC_MIMES, ALLOWED_MIMES, ALLOWED_TYPES_LABEL, MIME_TO_EXT, PDF_MAGIC, VIDEO_CONVERSION_HINTS, classifyMime, isAllowedMime, maxBytesFor, getConversionHint, PRODUCT_MAX_IMAGES, REVIEW_MAX_IMAGES, PRODUCT_MAX_VIDEOS, PRODUCT_IMAGE_INDEX_MAX, } from "./_internal/shared/media/limits.js";
 export { ScamAwarenessModal } from "./features/scams/components/ScamAwarenessModal.js";
 export { SellerTrustBadge } from "./features/scams/components/SellerTrustBadge.js";
 // [CLIENT-ONLY] — Admin panel components for action/nav permission management.
@@ -634,6 +641,29 @@ export { REFUND_COPY } from "./_internal/shared/features/orders/refund-copy.js";
 // See the module docstring for why the exempt set is "seller or carrier fault"
 // rather than "serious reasons".
 export { RETURN_REASON, FINAL_SALE_EXEMPT_REASONS, RETURN_REASON_LABEL, RETURN_REASON_GROUP_LABEL, isFinalSaleExempt, isReturnReason, selectableReturnReasons, } from "./_internal/shared/features/orders/return-reasons.js";
+// Dispute KINDS and their gates. Exported for the same reason the return
+// reasons above are: the buyer's form renders the labels and needs to show the
+// date a `not_reached` dispute becomes filable from, and
+// `@mohasinac/appkit/_internal/*` is NOT a subpath export — `_internal` is
+// reachable only through a barrel.
+export { DISPUTE_KIND, DISPUTE_KIND_LABEL, DISPUTE_GATE, DISPUTE_TRANSIT_WINDOW_DAYS, DISPUTE_NOT_REACHED_GRACE_DAYS, isDisputeKind, checkDisputeGate, resolveDisputeEtd, disputeNotReachedFilableFrom, } from "./_internal/shared/features/orders/dispute-reasons.js";
+/*
+ * The integration switches. Exported from the CLIENT entry because the admin
+ * integrations page is a "use client" surface — it renders each row's label and
+ * `offConsequence` and needs `readIntegrationStates` to show the current
+ * position.
+ *
+ * 🛑 The SAME module is re-exported from `server.ts`, deliberately, because the
+ * route guards resolve their answer through `readIntegrationStates` too. One
+ * expression, two entries — which is the point: a hand-written copy of "is this
+ * integration on" in a guard is how the page and the enforcement drift apart,
+ * and that had already happened once inside the module itself (the payments OR
+ * across both gateways).
+ *
+ * Safe in a client bundle: the file's only import is `import type`, so its
+ * runtime graph is empty and it cannot reach firebase-admin.
+ */
+export { INTEGRATIONS, INTEGRATION_ORDER, readIntegrationStates, integrationPatch, allIntegrationsPatch, } from "./_internal/shared/features/admin/integrations.js";
 // Buyer-facing return/refund request form and the window it is gated on.
 // Exported from the CLIENT entry because the page that renders it is a
 // "use client" route — importing it from the main entry there would drag the

package/dist/constants/api-endpoints.d.ts

@@ -150,6 +150,14 @@ export declare const ADMIN_ENDPOINTS: {
     readonly PAYOUTS_EXPORT: "/api/admin/payouts/export";
     readonly AUDIT_LOG: "/api/admin/audit-log";
     readonly AUDIT_LOG_BY_ID: (id: string) => string;
+    /**
+     * Phase 7 — the GSTR-1 DRAFT export. Takes `?from=&to=` as YYYY-MM-DD and
+     * returns a CSV.
+     *
+     * 🛑 "draft" is in the filename for a reason: nothing in this codebase talks
+     * to the GST portal, and the file is the input to a human filing.
+     */
+    readonly INVOICING_GSTR1: "/api/admin/invoicing/gstr1";
     readonly PAYMENT_CASES: "/api/admin/payment-cases";
     readonly PAYMENT_CASE_BY_ID: (id: string) => string;
     readonly PROTECTION_CLAIMS: "/api/admin/protection-claims";
@@ -272,6 +280,12 @@ export declare const CART_ENDPOINTS: {
     readonly SELECTION: "/api/cart/selection";
     /** Per-store paid add-on selections — the source of truth for what's charged. */
     readonly ADDONS: "/api/cart/addons";
+    /**
+     * Pay with points, on or off (D46/D47). A boolean and nothing else — the
+     * AMOUNT is derived server-side from the live balance and the 50% cap, which
+     * is why there is no `/api/cart/points/amount`.
+     */
+    readonly POINTS: "/api/cart/points";
     readonly COUPON: "/api/cart/coupon";
     /**
      * Add a buyer-assembled group selection as ONE line. Separate from `GET`'s
@@ -535,6 +549,7 @@ export declare const SELLER_ENDPOINTS: {
     readonly BUNDLES: "/api/store/bundles";
     /** Tickets raised ABOUT this store (W11). */
     readonly SUPPORT: "/api/store/support";
+    readonly SUPPORT_TICKET_BY_ID: (id: string) => string;
     readonly BUNDLE_BY_ID: (id: string) => string;
     readonly ORDERS_ASSIGN: (orderId: string) => string;
     readonly PRODUCT_BY_ID: (id: string) => string;
@@ -732,6 +747,14 @@ export declare const API_ENDPOINTS: {
         readonly PAYOUTS_EXPORT: "/api/admin/payouts/export";
         readonly AUDIT_LOG: "/api/admin/audit-log";
         readonly AUDIT_LOG_BY_ID: (id: string) => string;
+        /**
+         * Phase 7 — the GSTR-1 DRAFT export. Takes `?from=&to=` as YYYY-MM-DD and
+         * returns a CSV.
+         *
+         * 🛑 "draft" is in the filename for a reason: nothing in this codebase talks
+         * to the GST portal, and the file is the input to a human filing.
+         */
+        readonly INVOICING_GSTR1: "/api/admin/invoicing/gstr1";
         readonly PAYMENT_CASES: "/api/admin/payment-cases";
         readonly PAYMENT_CASE_BY_ID: (id: string) => string;
         readonly PROTECTION_CLAIMS: "/api/admin/protection-claims";
@@ -854,6 +877,12 @@ export declare const API_ENDPOINTS: {
         readonly SELECTION: "/api/cart/selection";
         /** Per-store paid add-on selections — the source of truth for what's charged. */
         readonly ADDONS: "/api/cart/addons";
+        /**
+         * Pay with points, on or off (D46/D47). A boolean and nothing else — the
+         * AMOUNT is derived server-side from the live balance and the 50% cap, which
+         * is why there is no `/api/cart/points/amount`.
+         */
+        readonly POINTS: "/api/cart/points";
         readonly COUPON: "/api/cart/coupon";
         /**
          * Add a buyer-assembled group selection as ONE line. Separate from `GET`'s
@@ -1061,6 +1090,7 @@ export declare const API_ENDPOINTS: {
         readonly BUNDLES: "/api/store/bundles";
         /** Tickets raised ABOUT this store (W11). */
         readonly SUPPORT: "/api/store/support";
+        readonly SUPPORT_TICKET_BY_ID: (id: string) => string;
         readonly BUNDLE_BY_ID: (id: string) => string;
         readonly ORDERS_ASSIGN: (orderId: string) => string;
         readonly PRODUCT_BY_ID: (id: string) => string;
@@ -1279,6 +1309,14 @@ export declare const API_ROUTES: {
         readonly PAYOUTS_EXPORT: "/api/admin/payouts/export";
         readonly AUDIT_LOG: "/api/admin/audit-log";
         readonly AUDIT_LOG_BY_ID: (id: string) => string;
+        /**
+         * Phase 7 — the GSTR-1 DRAFT export. Takes `?from=&to=` as YYYY-MM-DD and
+         * returns a CSV.
+         *
+         * 🛑 "draft" is in the filename for a reason: nothing in this codebase talks
+         * to the GST portal, and the file is the input to a human filing.
+         */
+        readonly INVOICING_GSTR1: "/api/admin/invoicing/gstr1";
         readonly PAYMENT_CASES: "/api/admin/payment-cases";
         readonly PAYMENT_CASE_BY_ID: (id: string) => string;
         readonly PROTECTION_CLAIMS: "/api/admin/protection-claims";
@@ -1401,6 +1439,12 @@ export declare const API_ROUTES: {
         readonly SELECTION: "/api/cart/selection";
         /** Per-store paid add-on selections — the source of truth for what's charged. */
         readonly ADDONS: "/api/cart/addons";
+        /**
+         * Pay with points, on or off (D46/D47). A boolean and nothing else — the
+         * AMOUNT is derived server-side from the live balance and the 50% cap, which
+         * is why there is no `/api/cart/points/amount`.
+         */
+        readonly POINTS: "/api/cart/points";
         readonly COUPON: "/api/cart/coupon";
         /**
          * Add a buyer-assembled group selection as ONE line. Separate from `GET`'s
@@ -1608,6 +1652,7 @@ export declare const API_ROUTES: {
         readonly BUNDLES: "/api/store/bundles";
         /** Tickets raised ABOUT this store (W11). */
         readonly SUPPORT: "/api/store/support";
+        readonly SUPPORT_TICKET_BY_ID: (id: string) => string;
         readonly BUNDLE_BY_ID: (id: string) => string;
         readonly ORDERS_ASSIGN: (orderId: string) => string;
         readonly PRODUCT_BY_ID: (id: string) => string;

package/dist/constants/api-endpoints.js

@@ -187,6 +187,14 @@ export const ADMIN_ENDPOINTS = {
     PAYOUTS_EXPORT: "/api/admin/payouts/export",
     AUDIT_LOG: "/api/admin/audit-log",
     AUDIT_LOG_BY_ID: (id) => `/api/admin/audit-log/${id}`,
+    /**
+     * Phase 7 — the GSTR-1 DRAFT export. Takes `?from=&to=` as YYYY-MM-DD and
+     * returns a CSV.
+     *
+     * 🛑 "draft" is in the filename for a reason: nothing in this codebase talks
+     * to the GST portal, and the file is the input to a human filing.
+     */
+    INVOICING_GSTR1: "/api/admin/invoicing/gstr1",
     /*
      * Payment protection. `payment-cases` is NOT under `maintenance/` — see the
      * route-map entry for why: maintenance means "something broke, look when you
@@ -325,6 +333,12 @@ export const CART_ENDPOINTS = {
     SELECTION: "/api/cart/selection",
     /** Per-store paid add-on selections — the source of truth for what's charged. */
     ADDONS: "/api/cart/addons",
+    /**
+     * Pay with points, on or off (D46/D47). A boolean and nothing else — the
+     * AMOUNT is derived server-side from the live balance and the 50% cap, which
+     * is why there is no `/api/cart/points/amount`.
+     */
+    POINTS: "/api/cart/points",
     COUPON: "/api/cart/coupon",
     /**
      * Add a buyer-assembled group selection as ONE line. Separate from `GET`'s
@@ -690,6 +704,7 @@ export const SELLER_ENDPOINTS = {
     BUNDLES: "/api/store/bundles",
     /** Tickets raised ABOUT this store (W11). */
     SUPPORT: "/api/store/support",
+    SUPPORT_TICKET_BY_ID: (id) => `/api/store/support/${id}`,
     BUNDLE_BY_ID: (id) => `/api/store/bundles/${id}`,
     ORDERS_ASSIGN: (orderId) => `/api/store/orders/${orderId}/assign`,
     PRODUCT_BY_ID: (id) => `/api/store/products/${id}`,

package/dist/constants/field-names.d.ts

@@ -835,6 +835,7 @@ export declare const COUPON_FIELDS: {
         readonly FIXED: "fixed";
         readonly FREE_SHIPPING: "free_shipping";
         readonly BUY_X_GET_Y: "buy_x_get_y";
+        readonly POINTS_EARN: "points_earn";
     };
     readonly SCOPE_VALUES: {
         readonly ADMIN: "admin";
@@ -982,6 +983,23 @@ export declare const COMMON_FIELDS: {
     readonly IS_ACTIVE: "isActive";
     readonly ORDER: "order";
 };
+/**
+ * The idempotency rows behind a refund.
+ *
+ * 🛑 `STATE` is the claim's own lifecycle ("claimed" → settled), NOT a
+ * postal state. `audit-route-nav-field-constants` matches a raw field
+ * string against every constant that happens to share its VALUE, so it
+ * suggested `ADDRESS_FIELDS.STATE` here — right string, wrong concept, and
+ * taking the suggestion would have made the query read as address filtering.
+ */
+export declare const REFUND_CLAIM_FIELDS: {
+    readonly STATE: "state";
+    readonly CLAIMED_AT: "claimedAt";
+};
+/** Observed market prices, keyed by the taxonomy node they were seen under. */
+export declare const PRICE_OBSERVATION_FIELDS: {
+    readonly CATEGORY_ID: "categoryId";
+};
 export declare const OAUTH_STATE_VALUES: {
     readonly PENDING: "pending";
     readonly USED: "used";

package/dist/constants/field-names.js

@@ -1003,6 +1003,11 @@ export const COUPON_FIELDS = {
         FIXED: "fixed",
         FREE_SHIPPING: "free_shipping",
         BUY_X_GET_Y: "buy_x_get_y",
+        // D51. 🛑 This file calls itself canonical and has been stale twice
+        // (EVENT_FIELDS invented a "published" status, SCAMMER_FIELDS lost
+        // "removed") — Root Cause #34. The authority is `CouponType` in
+        // features/promotions/types; this mirror has to follow it.
+        POINTS_EARN: "points_earn",
     },
     SCOPE_VALUES: {
         ADMIN: "admin",
@@ -1175,6 +1180,29 @@ export const COMMON_FIELDS = {
     ORDER: "order",
 };
 // ============================================================================
+// REFUND CLAIMS
+// ============================================================================
+/**
+ * The idempotency rows behind a refund.
+ *
+ * 🛑 `STATE` is the claim's own lifecycle ("claimed" → settled), NOT a
+ * postal state. `audit-route-nav-field-constants` matches a raw field
+ * string against every constant that happens to share its VALUE, so it
+ * suggested `ADDRESS_FIELDS.STATE` here — right string, wrong concept, and
+ * taking the suggestion would have made the query read as address filtering.
+ */
+export const REFUND_CLAIM_FIELDS = {
+    STATE: "state",
+    CLAIMED_AT: "claimedAt",
+};
+// ============================================================================
+// PRICE OBSERVATIONS
+// ============================================================================
+/** Observed market prices, keyed by the taxonomy node they were seen under. */
+export const PRICE_OBSERVATION_FIELDS = {
+    CATEGORY_ID: "categoryId",
+};
+// ============================================================================
 // OAUTH STATE VALUES
 // ============================================================================
 export const OAUTH_STATE_VALUES = {

package/dist/contracts/index.d.ts

@@ -4,7 +4,7 @@ export type { EmailAttachment, EmailOptions, EmailResult, IEmailProvider, } from
 export type { UploadOptions, StorageFile, IStorageProvider } from "./storage";
 export type { PaymentOrder, PaymentCapture, Refund, Dispute, GatewayPaymentRecord, } from "./payment";
 export { IPaymentProvider } from "./payment";
-export type { ShippingAddress, CreateShipmentInput, Shipment, TrackingEvent, TrackingInfo, ServiceabilityResult, } from "./shipping";
+export type { ShippingAddress, CreateShipmentInput, Shipment, TrackingEvent, TrackingInfo, ServiceabilityResult, WalletBalance, } from "./shipping";
 export { IShippingProvider } from "./shipping";
 export type { SearchOptions, SearchHit, SearchResult, SuggestOptions, ISearchProvider, } from "./search";
 export type { ICacheProvider, QueueJob, IQueueProvider, EventHandler, IEventBus, } from "./infra";

package/dist/contracts/shipping.d.ts

@@ -50,6 +50,38 @@ export interface ServiceabilityResult {
         rate: number;
     }>;
 }
+/**
+ * A courier provider's prepaid balance.
+ *
+ * 🛑 THREE states, not two, and collapsing them is the whole hazard:
+ *
+ * - `{ known: false, supported: false }` — this provider has no wallet at all
+ *   (manual shipping). Nothing to check, ever.
+ * - `{ known: false, supported: true }` — it HAS one and we could not read it
+ *   right now (network, malformed payload, auth). **Treat as "attempt the
+ *   booking"**: the attempt's own failure is the authority, and refusing on an
+ *   unreadable balance would degrade every order on a transient blip.
+ * - `{ known: true, amount }` — a real figure.
+ *
+ * A balance of `0` is the LAST of those, and is a decision to skip. "I could
+ * not read it" is not "there is no money".
+ *
+ * 🛑 There is deliberately NO `creditLimit` field. Measured against the live
+ * Shiprocket API 2026-10-22: `GET /account/details/wallet-balance` returns
+ * `{ data: { balance_amount: string } }` and nothing else, and
+ * `/account/details` is a 404. So postpaid credit is not readable, and a field
+ * with no producer is the speculative-infra pattern this codebase refuses.
+ * When postpaid is granted, re-probe and add it then.
+ */
+export type WalletBalance = {
+    known: true;
+    amount: number;
+    currency?: string;
+} | {
+    known: false;
+    supported: boolean;
+    reason?: string;
+};
 /**
  * Shipping carrier adapter contract. An abstract base class rather than a
  * plain interface so every provider (manual, and any future carrier
@@ -66,4 +98,17 @@ export declare abstract class IShippingProvider {
     abstract cancelShipment(shipmentId: string): Promise<void>;
     abstract checkServiceability(pincode: string, weight: number): Promise<ServiceabilityResult>;
     abstract generateLabel(shipmentId: string): Promise<ArrayBuffer>;
+    /**
+     * The provider's prepaid balance, when it HAS one.
+     *
+     * 🛑 Deliberately NOT abstract. Manual shipping has no wallet — a seller
+     * posts the parcel and claims the cost back — so an abstract member would
+     * force every implementation to invent an answer. A non-abstract default is
+     * the established shape here for a capability a provider lacks (the dispute
+     * contract's `listDisputes() => []` is the precedent).
+     *
+     * The default says "I do not have one", which is TRUE for manual and is not
+     * the same statement as "I have one and it is empty".
+     */
+    getWalletBalance(): Promise<WalletBalance>;
 }

package/dist/contracts/shipping.js

@@ -9,4 +9,19 @@
  * Implemented by the manual provider (default) and its mock.
  */
 export class IShippingProvider {
+    /**
+     * The provider's prepaid balance, when it HAS one.
+     *
+     * 🛑 Deliberately NOT abstract. Manual shipping has no wallet — a seller
+     * posts the parcel and claims the cost back — so an abstract member would
+     * force every implementation to invent an answer. A non-abstract default is
+     * the established shape here for a capability a provider lacks (the dispute
+     * contract's `listDisputes() => []` is the precedent).
+     *
+     * The default says "I do not have one", which is TRUE for manual and is not
+     * the same statement as "I have one and it is empty".
+     */
+    async getWalletBalance() {
+        return { known: false, supported: false };
+    }
 }

package/dist/core/server-action.js

@@ -1,6 +1,6 @@
 import { normalizeError } from "../errors/normalize.js";
 import { toApiIssues } from "../errors/error-envelope.js";
-import { HTTP_ERROR_CODES } from "../errors/error-mapping.js";
+import { HTTP_ERROR_CODES, mapToHttpError } from "../errors/error-mapping.js";
 /**
  * createServerAction — @mohasinac/appkit/core
  *
@@ -97,11 +97,27 @@ export function createServerAction(options) {
         }
         catch (err) {
             void normalizeError(err);
-            const message = err instanceof Error ? err.message : "An unexpected error occurred";
+            /*
+             * 🛑 This never got the Rule #9 fix its sibling `wrapAction` did.
+             *
+             * It took `err.message` verbatim — unscrubbed for 5xx, so a thrown
+             * Node/bundler error's internals reached the client — and emitted NO
+             * `code`, so `toUserMessage(result.code)` downstream could only ever
+             * resolve to the generic sentence.
+             *
+             * It has no in-repo callers, but it is exported from the public barrel,
+             * so it is a trap for the next consumer rather than a live bug. Route it
+             * through the same mapper `wrapAction` uses: `mapToHttpError` scrubs 5xx
+             * messages in production and carries the real one in `internalMessage`
+             * for recorders only.
+             */
+            const mapped = mapToHttpError(err, {
+                isProduction: process.env.NODE_ENV === "production",
+            });
             logger.error(`[createServerAction] handler error in "${actionName}"`, {
                 err,
             });
-            result = { ok: false, error: message };
+            result = { ok: false, code: mapped.code, error: mapped.message };
         }
         // -- 4. After hooks (per-action → global) ------------------------------
         try {

package/dist/errors/error-mapping.js

@@ -42,6 +42,31 @@ function isZodLikeError(err) {
         "issues" in err &&
         Array.isArray(err.issues));
 }
+/**
+ * The issues carried by a `ValidationError`, whichever of the two shapes the
+ * thrower used.
+ *
+ * 🛑 `new ValidationError(msg, parsed.error.issues)` silently lost everything.
+ * `ValidationError` forwards its second argument to `AppError.data`, and the
+ * old test was `isZodLikeError(err.data)` — which requires `"issues" in data`.
+ * An ARRAY has no `.issues` property (`"issues" in [] === false`), so passing
+ * `parsed.error.issues` (the obvious thing to pass, and what four routes do)
+ * produced a 400 with no field information at all. Only passing the whole
+ * `ZodError` worked.
+ *
+ * `media/finalize/route.ts` even carried a comment asserting the opposite —
+ * "carries `issues` through to the client, so the caller learns WHICH field it
+ * got wrong". It did not.
+ *
+ * Accept both, so the next caller cannot get it wrong either way.
+ */
+function issuesFromErrorData(data) {
+    if (Array.isArray(data))
+        return data.length > 0 ? data : undefined;
+    if (isZodLikeError(data))
+        return data.issues;
+    return undefined;
+}
 function isFirestoreLikeError(err) {
     if (typeof err !== "object" || err === null)
         return false;
@@ -110,7 +135,7 @@ function classifyError(err, opts) {
             status: 400,
             code: HTTP_ERROR_CODES.VALIDATION_FAILED,
             message: err.message,
-            issues: isZodLikeError(err.data) ? err.data.issues : undefined,
+            issues: issuesFromErrorData(err.data),
         };
     }
     if (err instanceof AuthenticationError) {

package/dist/features/about/components/AboutView.js

@@ -2,5 +2,5 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { Anchor, Avatar, Badge, Card, Div, Heading, Row, Section, Span, Stack, Text, TextLink } from "../../../ui/index.js";
 import { ROUTES } from "../../../constants/index.js";
 export function AboutView({ labels = {}, howItems = [], valueItems = [], milestones = [], teamMembers = [], ctaBannerClass = "", renderCtaButtons, }) {
-    return (_jsxs(Div, { className: "-mx-4 md:-mx-6 lg:-mx-8 -mt-6 sm:-mt-8 lg:-mt-10", children: [_jsx(Section, { color: "inverse", tone: "accent-banner", padding: "y-4xl", children: _jsxs(Div, { paddingX: "x-page", className: "max-w-4xl mx-auto text-center", children: [_jsx(Heading, { color: "inverse", level: 1, variant: "none", className: "mb-6", mdSize: "5xl", size: "4xl", weight: "bold", children: labels.title }), _jsx(Text, { color: "inverse-muted", variant: "none", className: "max-w-2xl mx-auto", size: "xl", children: labels.subtitle })] }) }), _jsxs(Div, { paddingX: "x-page", className: "max-w-5xl mx-auto", padding: "y-4xl", children: [_jsxs(Section, { className: "text-center max-w-3xl mx-auto", children: [_jsx(Heading, { level: 2, className: "mb-4", children: labels.missionTitle }), _jsx(Text, { size: "lg", variant: "secondary", className: "leading-relaxed", children: labels.missionText })] }), _jsxs(Section, { children: [_jsx(Heading, { level: 2, className: "mb-12", align: "center", children: labels.howItWorksTitle }), _jsx(Div, { className: "grid md:grid-cols-3", gap: "6", children: howItems.map(({ title, text, icon, tone }) => (_jsxs(Card, { variant: `gradient-${tone ?? "indigo"}`, padding: "md", spacing: "sm", children: [_jsx(Div, { children: _jsx(Span, { size: "4xl", children: icon }) }), _jsx(Heading, { level: 3, children: title }), _jsx(Text, { size: "sm", variant: "secondary", className: "leading-relaxed", children: text })] }, title))) })] }), _jsxs(Section, { children: [_jsx(Heading, { level: 2, className: labels.valuesSubtitle ? "mb-3" : "mb-12", align: "center", children: labels.valuesTitle }), labels.valuesSubtitle && (_jsx(Text, { size: "base", variant: "secondary", align: "center", className: "mb-12 max-w-2xl mx-auto leading-relaxed", children: labels.valuesSubtitle })), _jsx(Div, { className: "grid md:grid-cols-3", gap: "5", children: valueItems.map(({ title, text, icon, detail }) => (_jsxs(Stack, { gap: "3", surface: "default", padding: "lg", rounded: "xl", border: "default", children: [_jsx(Div, { children: _jsx(Span, { size: "3xl", children: icon }) }), _jsx(Heading, { level: 3, children: title }), _jsx(Text, { size: "sm", variant: "secondary", className: "leading-relaxed", children: text }), detail && (_jsx(Text, { size: "sm", color: "muted", className: "leading-relaxed", children: detail }))] }, title))) }), labels.valuesLinkLabel && (_jsx(Div, { className: "mt-8 text-center", children: _jsx(TextLink, { href: String(ROUTES.PUBLIC.ETHICS), size: "sm", children: labels.valuesLinkLabel }) }))] }), _jsxs(Section, { children: [_jsx(Heading, { level: 2, className: "mb-10", align: "center", children: labels.milestonesTitle }), _jsx(Stack, { className: "relative border-l-2 border-primary/30 max-w-2xl mx-auto pl-[2rem]", gap: "xl", children: milestones.map(({ year, text }) => (_jsxs(Div, { className: "relative", children: [_jsx(Div, { className: "absolute -left-10 top-1 w-4 h-4 bg-primary border-2 border-white", rounded: "full" }), _jsx(Span, { size: "xs", weight: "bold", className: "text-primary tracking-wide", transform: "uppercase", children: year }), _jsx(Text, { className: "mt-1", children: text })] }, year))) })] }), teamMembers.length > 0 && (_jsxs(Section, { children: [_jsx(Heading, { level: 2, className: "mb-2", align: "center", children: labels.teamTitle }), labels.teamSubtitle && (_jsx(Text, { size: "lg", variant: "secondary", align: "center", className: "mb-12 max-w-2xl mx-auto", children: labels.teamSubtitle })), _jsx(Div, { className: "grid md:grid-cols-3", gap: "6", children: teamMembers.map((member) => (_jsxs(Stack, { gap: "3", surface: "default", padding: "lg", rounded: "xl", border: "default", align: "center", className: "text-center", children: [_jsx(Avatar, { src: member.photoUrl, name: member.name, alt: member.name, size: "lg" }), _jsx(Heading, { level: 3, children: member.name }), _jsxs(Row, { gap: "xs", wrap: true, justify: "center", children: [_jsx(Span, { size: "xs", weight: "bold", className: "text-primary tracking-wide", transform: "uppercase", children: member.role }), member.isFounder && _jsx(Badge, { variant: "primary", size: "xs", children: "Founder" }), member.isDeveloper && _jsx(Badge, { variant: "secondary", size: "xs", children: "Developer" })] }), _jsx(Text, { size: "sm", variant: "secondary", className: "leading-relaxed", children: member.bio }), member.githubUrl && (_jsx(Anchor, { href: member.githubUrl, tone: "muted", size: "sm", underline: "hover", children: "GitHub \u2197" }))] }, member.name))) })] })), _jsxs(Section, { color: "inverse", tone: "accent-banner", className: `text-center ${ctaBannerClass}`, padding: "xl", rounded: "2xl", children: [_jsx(Heading, { color: "inverse", level: 2, variant: "none", className: "mb-8", size: "3xl", weight: "bold", children: labels.ctaTitle }), renderCtaButtons ? (renderCtaButtons()) : (_jsx(Row, { justify: "center", gap: "3", wrap: true, children: _jsxs(Span, { color: "inverse-muted", size: "sm", children: [labels.ctaSell, " \u00B7 ", labels.ctaShop] }) }))] })] })] }));
+    return (_jsxs(Div, { className: "-mx-4 md:-mx-6 lg:-mx-8 -mt-6 sm:-mt-8 lg:-mt-10", children: [_jsx(Section, { color: "inverse", tone: "accent-banner", padding: "y-4xl", children: _jsxs(Div, { paddingX: "x-page", className: "max-w-4xl mx-auto text-center", children: [_jsx(Heading, { color: "inverse", level: 1, variant: "none", className: "mb-6", mdSize: "5xl", size: "4xl", weight: "bold", children: labels.title }), _jsx(Text, { color: "inverse-muted", variant: "none", className: "max-w-2xl mx-auto", size: "xl", children: labels.subtitle })] }) }), _jsxs(Stack, { gap: "section", paddingX: "x-page", className: "max-w-5xl mx-auto", padding: "y-4xl", children: [_jsxs(Section, { className: "text-center max-w-3xl mx-auto", children: [_jsx(Heading, { level: 2, className: "mb-4", children: labels.missionTitle }), _jsx(Text, { size: "lg", variant: "secondary", className: "leading-relaxed", children: labels.missionText })] }), _jsxs(Section, { children: [_jsx(Heading, { level: 2, className: "mb-12", align: "center", children: labels.howItWorksTitle }), _jsx(Div, { className: "grid md:grid-cols-3", gap: "6", children: howItems.map(({ title, text, icon, tone }) => (_jsxs(Card, { variant: `gradient-${tone ?? "indigo"}`, padding: "md", spacing: "sm", children: [_jsx(Div, { children: _jsx(Span, { size: "4xl", children: icon }) }), _jsx(Heading, { level: 3, color: "inverse", variant: "none", children: title }), _jsx(Text, { size: "sm", color: "inverse-muted", variant: "none", className: "leading-relaxed", children: text })] }, title))) })] }), _jsxs(Section, { children: [_jsx(Heading, { level: 2, className: labels.valuesSubtitle ? "mb-3" : "mb-12", align: "center", children: labels.valuesTitle }), labels.valuesSubtitle && (_jsx(Text, { size: "base", variant: "secondary", align: "center", className: "mb-12 max-w-2xl mx-auto leading-relaxed", children: labels.valuesSubtitle })), _jsx(Div, { className: "grid md:grid-cols-3", gap: "5", children: valueItems.map(({ title, text, icon, detail }) => (_jsxs(Stack, { gap: "3", surface: "default", padding: "lg", rounded: "xl", border: "default", children: [_jsx(Div, { children: _jsx(Span, { size: "3xl", children: icon }) }), _jsx(Heading, { level: 3, children: title }), _jsx(Text, { size: "sm", variant: "secondary", className: "leading-relaxed", children: text }), detail && (_jsx(Text, { size: "sm", color: "muted", className: "leading-relaxed", children: detail }))] }, title))) }), labels.valuesLinkLabel && (_jsx(Div, { className: "mt-8 text-center", children: _jsx(TextLink, { href: String(ROUTES.PUBLIC.ETHICS), size: "sm", children: labels.valuesLinkLabel }) }))] }), _jsxs(Section, { children: [_jsx(Heading, { level: 2, className: "mb-10", align: "center", children: labels.milestonesTitle }), _jsx(Stack, { className: "relative border-l-2 border-primary/30 max-w-2xl mx-auto pl-[2rem]", gap: "xl", children: milestones.map(({ year, text }) => (_jsxs(Div, { className: "relative", children: [_jsx(Div, { className: "absolute -left-10 top-1 w-4 h-4 bg-primary border-2 border-white", rounded: "full" }), _jsx(Span, { size: "xs", weight: "bold", className: "text-primary tracking-wide", transform: "uppercase", children: year }), _jsx(Text, { className: "mt-1", children: text })] }, year))) })] }), teamMembers.length > 0 && (_jsxs(Section, { children: [_jsx(Heading, { level: 2, className: "mb-2", align: "center", children: labels.teamTitle }), labels.teamSubtitle && (_jsx(Text, { size: "lg", variant: "secondary", align: "center", className: "mb-12 max-w-2xl mx-auto", children: labels.teamSubtitle })), _jsx(Div, { className: "grid md:grid-cols-3", gap: "6", children: teamMembers.map((member) => (_jsxs(Stack, { gap: "3", surface: "default", padding: "lg", rounded: "xl", border: "default", align: "center", className: "text-center", children: [_jsx(Avatar, { src: member.photoUrl, name: member.name, alt: member.name, size: "lg" }), _jsx(Heading, { level: 3, children: member.name }), _jsxs(Row, { gap: "xs", wrap: true, justify: "center", children: [_jsx(Span, { size: "xs", weight: "bold", className: "text-primary tracking-wide", transform: "uppercase", children: member.role }), member.isFounder && _jsx(Badge, { variant: "primary", size: "xs", children: "Founder" }), member.isDeveloper && _jsx(Badge, { variant: "secondary", size: "xs", children: "Developer" })] }), _jsx(Text, { size: "sm", variant: "secondary", className: "leading-relaxed", children: member.bio }), member.githubUrl && (_jsx(Anchor, { href: member.githubUrl, tone: "muted", size: "sm", underline: "hover", children: "GitHub \u2197" }))] }, member.name))) })] })), _jsxs(Section, { color: "inverse", tone: "accent-banner", className: `text-center ${ctaBannerClass}`, padding: "xl", rounded: "2xl", children: [_jsx(Heading, { color: "inverse", level: 2, variant: "none", className: "mb-8", size: "3xl", weight: "bold", children: labels.ctaTitle }), renderCtaButtons ? (renderCtaButtons()) : (_jsx(Row, { justify: "center", gap: "3", wrap: true, children: _jsxs(Span, { color: "inverse-muted", size: "sm", children: [labels.ctaSell, " \u00B7 ", labels.ctaShop] }) }))] })] })] }));
 }

package/dist/features/account/components/BuyerAuctionsGuideView.js

@@ -2,6 +2,9 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 import { Gavel, TrendingUp, Trophy, AlertTriangle, Package, XCircle, ShieldCheck } from "lucide-react";
 import { Alert, Div, Heading, Li, Row, Section, Span, Stack, Text, Ul } from "../../../ui/index.js";
 import { GC } from "../../_guide-cls.js";
+import { resolvePublishedValues } from "../../../_internal/shared/content/published-values.js";
+/* Phase 9 — one definition of the refund timeline. See the 🛑 at the call site. */
+const { refundBusinessDaysMin: REFUND_DAYS_MIN, refundBusinessDaysMax: REFUND_DAYS_MAX } = resolvePublishedValues();
 const SECTIONS = [
     {
         Icon: Gavel, title: "How Auctions Work",
@@ -25,7 +28,7 @@ const SECTIONS = [
     },
     {
         Icon: XCircle, iconCls: "w-5 h-5 text-rose-500", title: "Pre-order Cancellations",
-        content: (_jsxs(_Fragment, { children: [_jsxs(Text, { className: `${GC.textMuted} mb-3`, children: ["To cancel a pre-order before the item is shipped, open a support ticket with category ", _jsx(Span, { weight: "bold", children: "Billing & Payment" }), " or ", _jsx(Span, { weight: "bold", children: "Order Issue" }), " and reference your order ID."] }), _jsx(Text, { className: GC.textMuted, children: "After cancellation is accepted, refunds follow the standard timeline: 3\u20137 business days to your original payment method." })] })),
+        content: (_jsxs(_Fragment, { children: [_jsxs(Text, { className: `${GC.textMuted} mb-3`, children: ["To cancel a pre-order before the item is shipped, open a support ticket with category ", _jsx(Span, { weight: "bold", children: "Billing & Payment" }), " or ", _jsx(Span, { weight: "bold", children: "Order Issue" }), " and reference your order ID."] }), _jsxs(Text, { className: GC.textMuted, children: ["After cancellation is accepted, refunds follow the standard timeline:", " ", REFUND_DAYS_MIN, "\u2013", REFUND_DAYS_MAX, " business days to your original payment method."] })] })),
     },
     {
         Icon: ShieldCheck, iconCls: "w-5 h-5 text-emerald-500", title: "Bidding Safety Tips",

package/dist/features/account/components/UserOffersPanel.js

@@ -1,11 +1,13 @@
 "use client";
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useCallback, useEffect, useState, useTransition } from "react";
-import { Alert, Badge, Button, Div, Heading, LoginRequiredModal, Row, Spinner, Stack, Text } from "../../../ui/index.js";
+import { Alert, Badge, Button, Div, Heading, LoginRequiredModal, Row, Spinner, Stack, Text, TextLink } from "../../../ui/index.js";
+import { ROUTES } from "../../../next/routing/route-map.js";
 import { isAuthError } from "../../../utils/auth-error.js";
 import { ACTIONS } from "../../../_internal/shared/actions/action-registry.js";
 import { ACCOUNT_ENDPOINTS } from "../../../constants/api-endpoints.js";
 import { normalizeError } from "../../../errors/normalize.js";
+import { toUserMessage } from "../../../errors/error-display-map.js";
 const CLS_COUNTER_AMOUNT = "text-[length:var(--appkit-text-sm)] font-semibold text-info dark:text-info";
 function formatRupees(amount) {
     if (amount === undefined || amount === null)
@@ -60,7 +62,7 @@ function BuyerOfferCard({ offer, onAcceptCounter, onWithdraw, onCheckout, onUpda
             }
         });
     }
-    return (_jsxs(Stack, { surface: "card", padding: "sm", gap: "3", children: [_jsxs(Row, { align: "start", justify: "between", gap: "sm", wrap: true, children: [_jsxs(Div, { className: "min-w-0", children: [_jsx(Text, { className: "truncate", color: "primary", size: "sm", weight: "semibold", children: offer.productTitle ?? "Unknown Product" }), _jsx(Text, { className: "mt-0.5", color: "muted", size: "xs", children: relativeTime(offer.createdAt) })] }), _jsx(Badge, { variant: statusVariant(offer.status), size: "xs", className: "shrink-0 capitalize", children: offer.status })] }), _jsxs(Row, { wrap: true, gap: "md", children: [_jsxs(Div, { children: [_jsx(Text, { className: "tracking-wide", color: "faint", size: "xs", transform: "uppercase", children: "Listed" }), _jsx(Text, { size: "sm", weight: "medium", color: "muted", children: formatRupees(offer.listedPrice) })] }), _jsxs(Div, { children: [_jsx(Text, { className: "tracking-wide", color: "faint", size: "xs", transform: "uppercase", children: "Your Offer" }), _jsx(Text, { size: "sm", weight: "semibold", color: "primary", children: formatRupees(offer.offerAmount) })] }), offer.counterAmount != null && (_jsxs(Div, { children: [_jsx(Text, { className: "tracking-wide", color: "faint", size: "xs", transform: "uppercase", children: "Seller Counter" }), _jsx(Text, { className: CLS_COUNTER_AMOUNT, children: formatRupees(offer.counterAmount) })] })), offer.lockedPrice != null && (_jsxs(Div, { children: [_jsx(Text, { className: "tracking-wide", color: "faint", size: "xs", transform: "uppercase", children: "Agreed Price" }), _jsx(Text, { className: "text-success", size: "sm", weight: "semibold", children: formatRupees(offer.lockedPrice) })] }))] }), offer.sellerNote && (_jsxs(Text, { className: "italic", color: "muted", size: "xs", children: ["Seller note: \"", offer.sellerNote, "\""] })), offer.status === "countered" && (_jsxs(Stack, { gap: "sm", children: [_jsxs(Text, { className: "text-info", size: "xs", weight: "medium", children: ["Seller countered at ", formatRupees(offer.counterAmount), ". Accept or withdraw your offer."] }), _jsxs(Row, { wrap: true, gap: "sm", children: [_jsx(Button, { size: "sm", variant: "primary", onClick: () => act(() => onAcceptCounter(offer.id), { status: "accepted", lockedPrice: offer.counterAmount }), disabled: isPending, children: isPending ? "Accepting…" : `Accept ${formatRupees(offer.counterAmount)}` }), _jsx(Button, { size: "sm", variant: "ghost", onClick: () => setConfirming("withdraw"), disabled: isPending, className: "text-error border border-error/20", children: "Withdraw" })] })] })), offer.status === "accepted" && onCheckout && (_jsx(Button, { size: "sm", variant: "primary", onClick: () => act(() => onCheckout(offer.id), { status: "paid" }), disabled: isPending, children: isPending ? "Processing…" : "Checkout at Agreed Price" })), offer.status === "pending" && (_jsx(Button, { size: "sm", variant: "ghost", onClick: () => setConfirming("withdraw"), disabled: isPending, className: "text-error border border-error/20 text-[length:var(--appkit-text-xs)]", children: "Withdraw Offer" })), confirming === "withdraw" && (_jsxs(Row, { gap: "sm", children: [_jsx(Button, { size: "sm", variant: "ghost", onClick: () => act(() => onWithdraw(offer.id), { status: "withdrawn" }), disabled: isPending, className: "text-error border border-error/20", children: isPending ? "Withdrawing…" : "Confirm Withdraw" }), _jsx(Button, { size: "sm", variant: "ghost", onClick: () => setConfirming(null), disabled: isPending, children: "Cancel" })] })), error && _jsx(Alert, { variant: "error", children: _jsx(Text, { size: "xs", children: error }) })] }));
+    return (_jsxs(Stack, { surface: "card", padding: "sm", gap: "3", children: [_jsxs(Row, { align: "start", justify: "between", gap: "sm", wrap: true, children: [_jsxs(Div, { className: "min-w-0", children: [_jsx(TextLink, { href: String(ROUTES.PUBLIC.PRODUCT_DETAIL(offer.productSlug ?? offer.productId)), size: "sm", weight: "semibold", truncate: true, children: offer.productTitle ?? "Unknown Product" }), _jsx(Text, { className: "mt-0.5", color: "muted", size: "xs", children: relativeTime(offer.createdAt) })] }), _jsx(Badge, { variant: statusVariant(offer.status), size: "xs", className: "shrink-0 capitalize", children: offer.status })] }), _jsxs(Row, { wrap: true, gap: "md", children: [_jsxs(Div, { children: [_jsx(Text, { className: "tracking-wide", color: "faint", size: "xs", transform: "uppercase", children: "Listed" }), _jsx(Text, { size: "sm", weight: "medium", color: "muted", children: formatRupees(offer.listedPrice) })] }), _jsxs(Div, { children: [_jsx(Text, { className: "tracking-wide", color: "faint", size: "xs", transform: "uppercase", children: "Your Offer" }), _jsx(Text, { size: "sm", weight: "semibold", color: "primary", children: formatRupees(offer.offerAmount) })] }), offer.counterAmount != null && (_jsxs(Div, { children: [_jsx(Text, { className: "tracking-wide", color: "faint", size: "xs", transform: "uppercase", children: "Seller Counter" }), _jsx(Text, { className: CLS_COUNTER_AMOUNT, children: formatRupees(offer.counterAmount) })] })), offer.lockedPrice != null && (_jsxs(Div, { children: [_jsx(Text, { className: "tracking-wide", color: "faint", size: "xs", transform: "uppercase", children: "Agreed Price" }), _jsx(Text, { className: "text-success", size: "sm", weight: "semibold", children: formatRupees(offer.lockedPrice) })] }))] }), offer.sellerNote && (_jsxs(Text, { className: "italic", color: "muted", size: "xs", children: ["Seller note: \"", offer.sellerNote, "\""] })), offer.status === "countered" && (_jsxs(Stack, { gap: "sm", children: [_jsxs(Text, { className: "text-info", size: "xs", weight: "medium", children: ["Seller countered at ", formatRupees(offer.counterAmount), ". Accept or withdraw your offer."] }), _jsxs(Row, { wrap: true, gap: "sm", children: [_jsx(Button, { size: "sm", variant: "primary", onClick: () => act(() => onAcceptCounter(offer.id), { status: "accepted", lockedPrice: offer.counterAmount }), disabled: isPending, children: isPending ? "Accepting…" : `Accept ${formatRupees(offer.counterAmount)}` }), _jsx(Button, { size: "sm", variant: "ghost", onClick: () => setConfirming("withdraw"), disabled: isPending, className: "text-error border border-error/20", children: "Withdraw" })] })] })), offer.status === "accepted" && onCheckout && (_jsx(Button, { size: "sm", variant: "primary", onClick: () => act(() => onCheckout(offer.id), { status: "paid" }), disabled: isPending, children: isPending ? "Processing…" : "Checkout at Agreed Price" })), offer.status === "pending" && (_jsx(Button, { size: "sm", variant: "ghost", onClick: () => setConfirming("withdraw"), disabled: isPending, className: "text-error border border-error/20 text-[length:var(--appkit-text-xs)]", children: "Withdraw Offer" })), confirming === "withdraw" && (_jsxs(Row, { gap: "sm", children: [_jsx(Button, { size: "sm", variant: "ghost", onClick: () => act(() => onWithdraw(offer.id), { status: "withdrawn" }), disabled: isPending, className: "text-error border border-error/20", children: isPending ? "Withdrawing…" : "Confirm Withdraw" }), _jsx(Button, { size: "sm", variant: "ghost", onClick: () => setConfirming(null), disabled: isPending, children: "Cancel" })] })), error && _jsx(Alert, { variant: "error", children: _jsx(Text, { size: "xs", children: error }) })] }));
 }
 export function UserOffersPanel({ fetchEndpoint = ACCOUNT_ENDPOINTS.OFFERS, onAcceptCounter, onWithdraw, onCheckout, className = "", }) {
     const [offers, setOffers] = useState([]);
@@ -92,7 +94,7 @@ export function UserOffersPanel({ fetchEndpoint = ACCOUNT_ENDPOINTS.OFFERS, onAc
         }
         catch (err) {
             void normalizeError(err);
-            setFetchError(err instanceof Error ? err.message : "Failed to load offers.");
+            setFetchError(toUserMessage(err?.code, undefined, { fallback: "Failed to load offers." }));
         }
         finally {
             setLoading(false);

package/dist/features/account/components/UserOrdersView.js

@@ -9,6 +9,7 @@ import { PaginatedSelect } from "../../../ui/components/PaginatedSelect.js";
 import { DataListingView } from "../../admin/components/DataListingView.js";
 import { OrderCard } from "../../orders/components/OrdersList.js";
 import { useOrderScope } from "../../orders/components/OrderScopeTabs.js";
+import { ORDER_LANE_TABS } from "../../orders/constants/order-lane-tabs.js";
 import { useSearchParams } from "next/navigation.js";
 const CANCELLABLE_STATUSES = new Set(["pending", "confirmed", "processing"]);
 /*
@@ -34,40 +35,20 @@ const SORT_OPTIONS = [
     { value: sortBy("totalPrice", "DESC"), label: "Highest total" },
     { value: sortBy("totalPrice", "ASC"), label: "Lowest total" },
 ];
-/**
- * Lane tabs — the same auction > offer > standard split the cart and checkout
- * use, viewed after the fact. Every `id` is EXACTLY a stored
- * `OrderDocument.orderType` value (or "" for All): a tab id that doesn't
- * match a real stored value returns zero rows forever with no error anywhere
- * (CLAUDE.md Root Cause #33).
+/*
+ * Lane tabs now come from `features/orders/constants/order-lane-tabs`, shared
+ * with the seller's order list.
  *
- * "standard" is filtered in memory server-side, because orders written before
- * `orderType` existed have no such field and a Firestore `==` would exclude
- * every one of them.
+ * They were defined here as a local array literal, which meant the seller's
+ * list could not have them without a tenth hand-written copy of one union
+ * (Root Cause #61). The shared version derives from a
+ * `Record<OrderType, string>`, so a sixth lane is a compile error rather than
+ * a tab that silently never appears — which is the bug this array already had
+ * once, shipping four tabs for five lanes.
+ *
+ * Every id-correctness note that lived here (byte-exact stored values, the
+ * unhyphenated `preorder`, and the in-memory `standard` filter) moved with it.
  */
-const ORDER_LANE_TABS = [
-    { id: "", label: "All" },
-    { id: "standard", label: "Normal" },
-    { id: "auction", label: "Auction wins" },
-    { id: "offer", label: "Offer wins" },
-    /*
-     * 🛑 `"preorder"` WITHOUT A HYPHEN, and this is not a typo to tidy up.
-     *
-     * `OrderType` (`orders/utils/order-splitter.ts`) spells it `"preorder"`,
-     * while `ListingType` spells the same concept `"pre-order"` WITH a hyphen.
-     * Two unions, two spellings, and the tab must match the one actually stored
-     * on `OrderDocument.orderType` — a tab id matching no stored value returns
-     * zero rows forever with no error anywhere (Root Cause #33), which is
-     * exactly the failure this file's own comment above warns about.
-     *
-     * These two lanes existed in the union and had no tab, so pre-order and
-     * prize-draw orders were reachable only by landing on "All" and scrolling.
-     * Five lanes, four tabs — the eighth instance this session of a
-     * hand-written enumeration drifting from the union it filters.
-     */
-    { id: "preorder", label: "Pre-orders" },
-    { id: "prize-draw", label: "Prize draws" },
-];
 /**
  * Payment-method tabs — a THIRD axis, independent of the lane tabs above and
  * the lifecycle scope beside them.
@@ -162,7 +143,12 @@ export function UserOrdersView({ onOrderClick }) {
         // in flight" without those two questions fighting over one control.
         buildExtraParams: () => orderScope.extraParams,
         renderAboveContent: orderScope.renderAboveContent,
-        renderFilterPanel: ({ pendingFilters, setPendingFilters }) => (_jsxs(Stack, { gap: "md", children: [_jsx(FilterChipGroup, { label: "Type", tabs: ORDER_LANE_TABS, value: pendingFilters.orderType ?? "", onChange: (id) => setPendingFilters((prev) => ({ ...prev, orderType: id })) }), _jsx(FilterChipGroup, { label: "Payment", tabs: PAYMENT_METHOD_TABS, value: pendingFilters.paymentMethod ?? "", onChange: (id) => setPendingFilters((prev) => ({ ...prev, paymentMethod: id })) }), _jsx(Div, { children: _jsx(PaginatedSelect, { value: pendingFilters.status || null, onChange: (v) => setPendingFilters((p) => ({ ...p, status: v ?? "" })), options: STATUS_OPTIONS, placeholder: "All statuses", ariaLabel: "Filter by order status" }) })] })),
+        renderFilterPanel: ({ pendingFilters, setPendingFilters }) => (_jsxs(Stack, { gap: "md", children: [_jsx(FilterChipGroup, { label: "Type", 
+                    // No cast: `FilterChipGroup.tabs` is `readonly FilterChipGroupTab[]`,
+                    // which the shared constant already satisfies. The `as unknown as`
+                    // here was working around the local `as const` literal, not a real
+                    // mismatch.
+                    tabs: ORDER_LANE_TABS, value: pendingFilters.orderType ?? "", onChange: (id) => setPendingFilters((prev) => ({ ...prev, orderType: id })) }), _jsx(FilterChipGroup, { label: "Payment", tabs: PAYMENT_METHOD_TABS, value: pendingFilters.paymentMethod ?? "", onChange: (id) => setPendingFilters((prev) => ({ ...prev, paymentMethod: id })) }), _jsx(Div, { children: _jsx(PaginatedSelect, { value: pendingFilters.status || null, onChange: (v) => setPendingFilters((p) => ({ ...p, status: v ?? "" })), options: STATUS_OPTIONS, placeholder: "All statuses", ariaLabel: "Filter by order status" }) })] })),
         renderCards: (rows, _view, _selection, isLoading) => {
             if (isLoading) {
                 return (_jsx(Stack, { gap: "md", children: Array.from({ length: 3 }).map((_, i) => (_jsx(Div, { className: "h-24 animate-pulse border border-[var(--appkit-color-border)]", rounded: "xl" }, i))) }));