@mohasinac/appkit 4.61.0 → 4.62.1

package/dist/features/admin/components/AdminActionIndexView.js

@@ -27,10 +27,12 @@ import { jsxs as _jsxs, jsx as _jsx } from "react/jsx-runtime";
 import React from "react";
 import { useQuery, useQueryClient } from "@tanstack/react-query";
 import { useApiMutation } from "@mohasinac/appkit/client";
-import { Alert, Badge, Row, Span, Stack, Text, Toggle, useToast } from "../../../ui/index.js";
+import { Alert, Badge, Row, Span, Stack, Text, TextLink, Toggle, useToast } from "../../../ui/index.js";
 import { apiClient } from "../../../http/index.js";
 import { ADMIN_ENDPOINTS } from "../../../constants/api-endpoints.js";
 import { DataListingView } from "./DataListingView.js";
+import { QuickEditMenu } from "./QuickEditMenu.js";
+import { actionIndexOverrideSchema, splitKeywords, joinKeywords, ACTION_INDEX_OVERRIDE_FIELDS, } from "../schemas/action-index-form.js";
 const ENDPOINT = ADMIN_ENDPOINTS.ACTION_INDEX;
 export function AdminActionIndexView({ labels = {} }) {
     const queryClient = useQueryClient();
@@ -41,7 +43,12 @@ export function AdminActionIndexView({ labels = {} }) {
         staleTime: 60000,
     });
     const payload = query.data?.data;
-    const overrides = payload?.control?.entries ?? {};
+    /*
+     * Memoised because the `?? {}` fallback is a fresh object every render,
+     * which makes the `rows` memo below rebuild on every render — it reads
+     * `overrides` for each entry's effective `enabled`.
+     */
+    const overrides = React.useMemo(() => payload?.control?.entries ?? {}, [payload?.control?.entries]);
     const toggleMutation = useApiMutation({
         errorMessage: "Could not update that entry.",
         mutationFn: async (vars) => apiClient.patch(ENDPOINT, {
@@ -53,6 +60,44 @@ export function AdminActionIndexView({ labels = {} }) {
             void queryClient.invalidateQueries({ queryKey: ["admin", "action-index"] });
         },
     });
+    /*
+     * Spread the EXISTING override first, exactly as the toggle does. The
+     * endpoint's `setOverride` replaces the whole override object, so sending
+     * only the edited fields would silently clear this entry's `enabled` —
+     * re-showing something an admin had deliberately hidden.
+     */
+    const overrideMutation = useApiMutation({
+        errorMessage: "Could not save that entry.",
+        mutationFn: async (vars) => {
+            const parsed = actionIndexOverrideSchema.parse(vars.values);
+            return apiClient.patch(ENDPOINT, {
+                entryId: vars.entryId,
+                override: {
+                    ...overrides[vars.entryId],
+                    label: parsed.label,
+                    description: parsed.description,
+                    keywords: splitKeywords(parsed.keywords),
+                    weight: parsed.weight,
+                },
+            });
+        },
+        onSuccess: () => {
+            showToast("Entry saved.", "success");
+            void queryClient.invalidateQueries({ queryKey: ["admin", "action-index"] });
+        },
+    });
+    /** Named so the row-action array stays a flat list of declarations. */
+    const saveOverride = React.useCallback(async (entryId, values) => {
+        await overrideMutation.mutateAsync({ entryId, values });
+    }, [overrideMutation]);
+    const clearMutation = useApiMutation({
+        errorMessage: "Could not reset that entry.",
+        mutationFn: async (entryId) => apiClient.patch(ENDPOINT, { entryId, clear: true }),
+        onSuccess: () => {
+            showToast("Entry reset to its code default.", "success");
+            void queryClient.invalidateQueries({ queryKey: ["admin", "action-index"] });
+        },
+    });
     /*
      * Ordered by weight, then label — the same ranking `matchesNavQuery` gives
      * the search, so the admin reading this list sees entries in the order a
@@ -69,6 +114,10 @@ export function AdminActionIndexView({ labels = {} }) {
         href: `${entry.href}${entry.deepLink ?? ""}`,
         permission: entry.requiredPermission ?? "—",
         enabled: overrides[entry.id]?.enabled !== false,
+        // Seeds the edit drawer. `entry.*` is already override-merged by
+        // `mergeActionIndex`, so these are the effective values an admin sees.
+        keywords: joinKeywords(entry.keywords),
+        weight: entry.weight ?? 0,
     })), [payload?.entries, overrides]);
     const sync = payload?.sync;
     return (_jsxs(Stack, { gap: "md", children: [sync && sync.orphanedOverrides.length > 0 && (_jsxs(Alert, { variant: "warning", title: "Overrides with no entry", children: [sync.orphanedOverrides.length, " saved override", sync.orphanedOverrides.length === 1 ? "" : "s", " point at entries the code no longer has (", sync.orphanedOverrides.slice(0, 4).join(", "), sync.orphanedOverrides.length > 4 ? "…" : "", "). They are ignored \u2014 clear them when convenient."] })), _jsx(DataListingView, { config: {
@@ -109,9 +158,19 @@ export function AdminActionIndexView({ labels = {} }) {
                         },
                         { key: "portal", header: "Portal" },
                         {
+                            /*
+                             * A LINK, not mono text.
+                             *
+                             * This row IS a destination — "where is it" is half of what
+                             * this screen exists to answer, and the answer was printed as
+                             * inert text beside a toggle. The link is also what makes the
+                             * row reachable at all: every other column is metadata about
+                             * the entry, so without it there is no way to go look at the
+                             * thing being enabled or disabled.
+                             */
                             key: "href",
                             header: "Goes to",
-                            render: (row) => (_jsx(Span, { size: "xs", family: "mono", color: "muted", children: row.href })),
+                            render: (row) => (_jsx(TextLink, { href: row.href, size: "xs", onClick: (e) => e.stopPropagation(), children: _jsx(Span, { size: "xs", family: "mono", children: row.href }) })),
                         },
                         {
                             key: "permission",
@@ -121,8 +180,44 @@ export function AdminActionIndexView({ labels = {} }) {
                         {
                             key: "enabled",
                             header: "Shown",
-                            render: (row) => (_jsx(Row, { align: "center", gap: "sm", children: _jsx(Toggle, { checked: row.enabled, size: "sm", "aria-label": `Show ${row.primary}`, onChange: (next) => toggleMutation.mutate({ entryId: row.id, enabled: next }) }) })),
+                            render: (row) => (_jsx(Row, { align: "center", gap: "sm", children: _jsx(Toggle, { checked: row.enabled, size: "sm", ariaLabel: `Show ${row.primary} in navigation and search`, onChange: (next) => toggleMutation.mutate({ entryId: row.id, enabled: next }) }) })),
                         },
                     ],
-                } }), _jsx(Text, { size: "xs", color: "muted", children: "Hiding an entry removes it from the sidebar, the header search and the command palette at once. Labels, descriptions and keywords can be edited here; a route and its required permission belong to the code." })] }));
+                    /*
+                     * 🛑 This exists because the footer below already PROMISED it:
+                     * "Labels, descriptions and keywords can be edited here." They
+                     * could not. `PATCH /api/admin/action-index` has always accepted
+                     * `label` / `description` / `keywords` / `weight` in an override
+                     * (see `ActionIndexOverride`), and the only control on this screen
+                     * was the Shown toggle — so the sentence described a capability the
+                     * server had and the UI had never grown. Root Cause #51's shape: a
+                     * label describing something other than what the surface does.
+                     *
+                     * `href`, `kind` and every permission field stay out, per the
+                     * component docstring: repointing a built-in route is routing, and
+                     * relaxing a permission is access control.
+                     */
+                    renderRowActions: (row) => (_jsx(QuickEditMenu, { actions: [
+                            {
+                                label: "Edit entry",
+                                formTitle: `Edit "${row.primary}"`,
+                                schema: actionIndexOverrideSchema,
+                                fields: ACTION_INDEX_OVERRIDE_FIELDS,
+                                defaultValues: {
+                                    label: row.primary,
+                                    description: row.secondary,
+                                    keywords: row.keywords,
+                                    weight: row.weight,
+                                },
+                                onSubmit: (values) => saveOverride(row.id, values),
+                                submitLabel: "Save entry",
+                            },
+                            {
+                                label: "Reset to code default",
+                                separator: true,
+                                destructive: true,
+                                onClick: () => clearMutation.mutate(row.id),
+                            },
+                        ] })),
+                } }), _jsx(Text, { size: "xs", color: "muted", children: "Hiding an entry removes it from the sidebar, the header search and the command palette at once. Use the row menu to edit an entry\u2019s label, description, keywords and search weight, or to reset it to its code default; a route and its required permission belong to the code." })] }));
 }

package/dist/features/admin/components/AdminAddressClustersView.js

@@ -2,7 +2,8 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useQuery } from "@tanstack/react-query";
 import { useQueryClient } from "@tanstack/react-query";
-import { Badge, Button, Div, Heading, Row, Span, Stack, Text, useToast } from "../../../ui/index.js";
+import { Badge, Button, Div, Heading, Row, Span, Stack, Text, TextLink, useToast } from "../../../ui/index.js";
+import { ROUTES } from "../../../next/routing/route-map.js";
 import { ADMIN_ENDPOINTS } from "../../../constants/api-endpoints.js";
 import { apiClient } from "../../../http/index.js";
 import { useApiMutation } from "@mohasinac/appkit/client";
@@ -31,6 +32,24 @@ export function AdminAddressClustersView(_props) {
             void queryClient.invalidateQueries({ queryKey: ["admin", "address-clusters"] });
         },
     });
+    /*
+     * 🛑 "Flag Suspicious" was ONE-WAY: there was no unflag, so a wrong call —
+     * or a cluster that turned out to be a family sharing an address — left a
+     * permanent mark with no way back from this screen.
+     *
+     * `clear_ban` has existed on the route the whole time and calls
+     * `clearBanById`; only the control was missing.
+     */
+    const clearFlagMutation = useApiMutation({
+        errorMessage: "Failed to clear that flag.",
+        mutationFn: async (id) => {
+            await apiClient.patch(ADMIN_ENDPOINTS.ADDRESS_BY_ID(id), { action: "clear_ban" });
+        },
+        onSuccess: () => {
+            showToast("Flag cleared.", "success");
+            void queryClient.invalidateQueries({ queryKey: ["admin", "address-clusters"] });
+        },
+    });
     const clusters = data?.clusters ?? [];
-    return (_jsxs(Stack, { gap: "lg", padding: "page", children: [_jsxs(Stack, { gap: "none", children: [_jsx(Heading, { level: 2, size: "lg", weight: "semibold", color: "primary", children: "Address Clusters" }), _jsx(Text, { size: "sm", color: "muted", className: "mt-1", children: "Users sharing the same physical address. Flagging is informational only \u2014 users are not blocked." })] }), isLoading && (_jsx(Row, { justify: "center", padding: "y-4xl", children: _jsx(Div, { className: "h-6 w-6 animate-spin border-2 border-[var(--appkit-color-primary)] border-t-transparent", rounded: "full" }) })), error && (_jsx(Div, { surface: "danger-surface", color: "error", padding: "inline", rounded: "xl", textSize: "sm", children: "Failed to load clusters." })), !isLoading && clusters.length === 0 && (_jsx(Div, { surface: "muted", padding: "y-4xl", rounded: "xl", className: "text-center", children: _jsx(Text, { color: "muted", size: "sm", children: "No shared addresses found." }) })), clusters.map((cluster) => (_jsxs(Stack, { surface: "card", padding: "md", gap: "md", rounded: "xl", border: "default", children: [_jsxs(Row, { justify: "between", align: "start", gap: "sm", children: [_jsxs(Stack, { gap: "none", children: [_jsx(Text, { size: "xs", color: "muted", weight: "medium", children: "Hash" }), _jsx(Span, { size: "xs", color: "muted", className: "font-mono truncate max-w-xs", children: cluster.addressHash })] }), _jsxs(Badge, { variant: "secondary", size: "sm", children: [cluster.addresses.length, " accounts"] })] }), _jsx(Stack, { gap: "xs", children: cluster.addresses.map((addr) => (_jsxs(Row, { justify: "between", align: "center", gap: "sm", surface: "muted", padding: "inlineSm", rounded: "lg", children: [_jsxs(Stack, { gap: "none", className: "min-w-0", children: [_jsxs(Text, { size: "sm", weight: "medium", color: "primary", className: "truncate", children: [addr.ownerType === "user" ? "User" : "Store", ": ", addr.ownerId] }), addr.city && (_jsx(Text, { size: "xs", color: "muted", children: [addr.city, addr.state, addr.postalCode].filter(Boolean).join(", ") }))] }), _jsxs(Row, { gap: "xs", align: "center", children: [addr.banStatus && (_jsx(Badge, { variant: BAN_BADGE[addr.banStatus] ?? "secondary", size: "sm", children: addr.banStatus.replace(/_/g, " ") })), addr.banStatus !== "suspicious" && (_jsx(Button, { size: "sm", variant: "ghost", onClick: () => flagMutation.mutate(addr.id), disabled: flagMutation.isPending, children: "Flag Suspicious" }))] })] }, addr.id))) })] }, cluster.addressHash)))] }));
+    return (_jsxs(Stack, { gap: "lg", padding: "page", children: [_jsxs(Stack, { gap: "none", children: [_jsx(Heading, { level: 2, size: "lg", weight: "semibold", color: "primary", children: "Address Clusters" }), _jsx(Text, { size: "sm", color: "muted", className: "mt-1", children: "Users sharing the same physical address. Flagging is informational only \u2014 users are not blocked." })] }), isLoading && (_jsx(Row, { justify: "center", padding: "y-4xl", children: _jsx(Div, { className: "h-6 w-6 animate-spin border-2 border-[var(--appkit-color-primary)] border-t-transparent", rounded: "full" }) })), error && (_jsx(Div, { surface: "danger-surface", color: "error", padding: "inline", rounded: "xl", textSize: "sm", children: "Failed to load clusters." })), !isLoading && clusters.length === 0 && (_jsx(Div, { surface: "muted", padding: "y-4xl", rounded: "xl", className: "text-center", children: _jsx(Text, { color: "muted", size: "sm", children: "No shared addresses found." }) })), clusters.map((cluster) => (_jsxs(Stack, { surface: "card", padding: "md", gap: "md", rounded: "xl", border: "default", children: [_jsxs(Row, { justify: "between", align: "start", gap: "sm", children: [_jsxs(Stack, { gap: "none", children: [_jsx(Text, { size: "xs", color: "muted", weight: "medium", children: "Hash" }), _jsx(Span, { size: "xs", color: "muted", className: "font-mono truncate max-w-xs", children: cluster.addressHash })] }), _jsxs(Badge, { variant: "secondary", size: "sm", children: [cluster.addresses.length, " accounts"] })] }), _jsx(Stack, { gap: "xs", children: cluster.addresses.map((addr) => (_jsxs(Row, { justify: "between", align: "center", gap: "sm", surface: "muted", padding: "inlineSm", rounded: "lg", children: [_jsxs(Stack, { gap: "none", className: "min-w-0", children: [_jsxs(TextLink, { href: addr.ownerType === "user" ? String(ROUTES.ADMIN.USER_DETAIL(addr.ownerId)) : String(ROUTES.ADMIN.STORE_DETAIL(addr.ownerId)), size: "sm", weight: "medium", truncate: true, children: [addr.ownerType === "user" ? "User" : "Store", ": ", addr.ownerId] }), addr.city && (_jsx(Text, { size: "xs", color: "muted", children: [addr.city, addr.state, addr.postalCode].filter(Boolean).join(", ") }))] }), _jsxs(Row, { gap: "xs", align: "center", children: [addr.banStatus && (_jsx(Badge, { variant: BAN_BADGE[addr.banStatus] ?? "secondary", size: "sm", children: addr.banStatus.replace(/_/g, " ") })), addr.banStatus === "suspicious" ? (_jsx(Button, { size: "sm", variant: "ghost", onClick: () => clearFlagMutation.mutate(addr.id), disabled: clearFlagMutation.isPending, children: "Clear flag" })) : (_jsx(Button, { size: "sm", variant: "ghost", onClick: () => flagMutation.mutate(addr.id), disabled: flagMutation.isPending, children: "Flag Suspicious" }))] })] }, addr.id))) })] }, cluster.addressHash)))] }));
 }

package/dist/features/admin/components/AdminBlogEditorView.js

@@ -201,13 +201,13 @@ export function AdminBlogEditorView({ postId, onSaved, onDeleted, embedded, ...r
             required: true,
             quick: true,
             fields: ["title", "slug", "excerpt", "content"],
-            render: ({ values, onChange }) => (_jsxs(Stack, { gap: "5", children: [_jsx(Heading, { level: 3, className: "mb-2", children: "Content" }), _jsx(Input, { label: "Title", value: values.title, onChange: (e) => {
+            render: ({ values, onChange, errors }) => (_jsxs(Stack, { gap: "5", children: [_jsx(Heading, { level: 3, className: "mb-2", children: "Content" }), _jsx(Input, { label: "Title", error: errors.title, value: values.title, onChange: (e) => {
                             const v = e.target.value;
                             onChange({ title: v, ...(!slugManual && { slug: toSlug(v) }) });
-                        }, placeholder: "e.g. How to Grade Pok\u00E9mon Cards" }), _jsx(Input, { label: "Slug", value: values.slug, onChange: (e) => {
+                        }, placeholder: "e.g. How to Grade Pok\u00E9mon Cards" }), _jsx(Input, { label: "Slug", error: errors.slug, value: values.slug, onChange: (e) => {
                             setSlugManual(true);
                             onChange({ slug: e.target.value });
-                        }, placeholder: "blog-how-to-grade-pokemon-cards", helperText: "Auto-generated from title. Must start with 'blog-'." }), _jsx(Input, { label: "Excerpt", value: values.excerpt, onChange: (e) => onChange({ excerpt: e.target.value }), placeholder: "Short summary shown in listings and cards" }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Content" }), _jsx(RichTextEditor, { ariaLabel: "Content", value: values.content, onChange: (v) => onChange({ content: v }), placeholder: "Write your article here...", minHeightClassName: "min-h-[320px]" })] })] })),
+                        }, placeholder: "blog-how-to-grade-pokemon-cards", helperText: "Auto-generated from title. Must start with 'blog-'." }), _jsx(Input, { label: "Excerpt", error: errors.excerpt, value: values.excerpt, onChange: (e) => onChange({ excerpt: e.target.value }), placeholder: "Short summary shown in listings and cards" }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Content" }), _jsx(RichTextEditor, { ariaLabel: "Content", value: values.content, onChange: (v) => onChange({ content: v }), placeholder: "Write your article here...", minHeightClassName: "min-h-[320px]" })] })] })),
         },
         {
             id: "media",
@@ -216,20 +216,20 @@ export function AdminBlogEditorView({ postId, onSaved, onDeleted, embedded, ...r
             // its children, which would abort an in-flight upload.
             keepMounted: true,
             fields: ["coverImage", "youtubeId"],
-            render: ({ values, onChange }) => (_jsxs(Stack, { gap: "5", children: [_jsx(Heading, { level: 3, className: "mb-2", children: "Media" }), _jsx(ImageUpload, { label: "Cover Image", currentImage: values.coverImage, onUpload: (file) => upload(file, "blog", true, {
+            render: ({ values, onChange, errors }) => (_jsxs(Stack, { gap: "5", children: [_jsx(Heading, { level: 3, className: "mb-2", children: "Media" }), _jsx(ImageUpload, { label: "Cover Image", currentImage: values.coverImage, onUpload: (file) => upload(file, "blog", true, {
                             type: "blog-cover",
                             title: values.title || values.slug,
                             category: values.category,
-                        }), onChange: (url) => onChange({ coverImage: url }) }), _jsx(Input, { label: "YouTube Video ID (optional)", value: values.youtubeId, onChange: (e) => onChange({ youtubeId: e.target.value }), placeholder: "e.g. dQw4w9WgXcQ", helperText: "The 11-character video ID from the YouTube URL." })] })),
+                        }), onChange: (url) => onChange({ coverImage: url }) }), _jsx(Input, { label: "YouTube Video ID (optional)", error: errors.youtubeId, value: values.youtubeId, onChange: (e) => onChange({ youtubeId: e.target.value }), placeholder: "e.g. dQw4w9WgXcQ", helperText: "The 11-character video ID from the YouTube URL." })] })),
         },
         {
             id: "seo",
             label: "SEO & Tags",
             quick: true,
             fields: ["category", "tags", "metaTitle", "metaDescription"],
-            render: ({ values, onChange }) => {
+            render: ({ values, onChange, errors }) => {
                 const readTime = Math.max(1, Math.round(values.content.replace(/<[^>]*>/g, "").split(/\s+/).filter(Boolean).length / 200));
-                return (_jsxs(Stack, { gap: "5", children: [_jsx(Heading, { level: 3, className: "mb-2", children: "SEO & Tags" }), _jsxs(Div, { layout: "grid", gap: "4", className: "grid-cols-2", children: [_jsx(Select, { label: "Category", options: CATEGORY_OPTIONS, value: values.category, onValueChange: (v) => onChange({ category: v }) }), _jsxs(Div, { children: [_jsx(Text, { className: "mb-1.5", size: "sm", weight: "medium", children: "Estimated Read Time" }), _jsxs(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: ["~", readTime, " min (auto-calculated from content)"] })] })] }), _jsx(TagInput, { label: "Tags", value: values.tags, onChange: (t) => onChange({ tags: t }), placeholder: "e.g. pokemon, grading, tcg" }), _jsx(Input, { label: "Meta Title (optional)", value: values.metaTitle, onChange: (e) => onChange({ metaTitle: e.target.value }), placeholder: "Defaults to post title" }), _jsx(Input, { label: "Meta Description (optional)", value: values.metaDescription, onChange: (e) => onChange({ metaDescription: e.target.value }), placeholder: "SEO description \u2014 max 160 chars", maxLength: 160 })] }));
+                return (_jsxs(Stack, { gap: "5", children: [_jsx(Heading, { level: 3, className: "mb-2", children: "SEO & Tags" }), _jsxs(Div, { layout: "grid", gap: "4", className: "grid-cols-2", children: [_jsx(Select, { label: "Category", error: errors.category, options: CATEGORY_OPTIONS, value: values.category, onValueChange: (v) => onChange({ category: v }) }), _jsxs(Div, { children: [_jsx(Text, { className: "mb-1.5", size: "sm", weight: "medium", children: "Estimated Read Time" }), _jsxs(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: ["~", readTime, " min (auto-calculated from content)"] })] })] }), _jsx(TagInput, { label: "Tags", error: errors.tags, value: values.tags, onChange: (t) => onChange({ tags: t }), placeholder: "e.g. pokemon, grading, tcg" }), _jsx(Input, { label: "Meta Title (optional)", error: errors.metaTitle, value: values.metaTitle, onChange: (e) => onChange({ metaTitle: e.target.value }), placeholder: "Defaults to post title" }), _jsx(Input, { label: "Meta Description (optional)", error: errors.metaDescription, value: values.metaDescription, onChange: (e) => onChange({ metaDescription: e.target.value }), placeholder: "SEO description \u2014 max 160 chars", maxLength: 160 })] }));
             },
         },
         {
@@ -237,7 +237,7 @@ export function AdminBlogEditorView({ postId, onSaved, onDeleted, embedded, ...r
             label: "Publish",
             quick: true,
             fields: ["status", "publishedAt", "authorName", "isFeatured"],
-            render: ({ values, onChange }) => (_jsxs(Stack, { gap: "5", children: [_jsx(Heading, { level: 3, className: "mb-2", children: "Publish Settings" }), _jsxs(Div, { layout: "grid", gap: "4", className: "grid-cols-2", children: [_jsx(Select, { label: "Status", options: STATUS_OPTIONS, value: values.status, onValueChange: (v) => onChange({ status: v }) }), _jsx(Input, { label: "Publish date (optional)", value: values.publishedAt, onChange: (e) => onChange({ publishedAt: e.target.value }), type: "date", helperText: "Auto-set to now when publishing." })] }), _jsx(Input, { label: "Author Name", value: values.authorName, onChange: (e) => onChange({ authorName: e.target.value }), placeholder: "Author display name" }), _jsx(Toggle, { label: "Featured post", checked: values.isFeatured, onChange: (checked) => onChange({ isFeatured: checked }) }), isEdit && (_jsx(Div, { className: "border-t border-[var(--appkit-color-border)]", padding: "t-md", children: _jsx(Button, { type: "button", variant: "danger", size: "sm", onClick: () => setShowDeleteConfirm(true), isLoading: deleteMutation.isPending, children: "Delete post" }) }))] })),
+            render: ({ values, onChange, errors }) => (_jsxs(Stack, { gap: "5", children: [_jsx(Heading, { level: 3, className: "mb-2", children: "Publish Settings" }), _jsxs(Div, { layout: "grid", gap: "4", className: "grid-cols-2", children: [_jsx(Select, { label: "Status", error: errors.status, options: STATUS_OPTIONS, value: values.status, onValueChange: (v) => onChange({ status: v }) }), _jsx(Input, { label: "Publish date (optional)", error: errors.publishedAt, value: values.publishedAt, onChange: (e) => onChange({ publishedAt: e.target.value }), type: "date", helperText: "Auto-set to now when publishing." })] }), _jsx(Input, { label: "Author Name", error: errors.authorName, value: values.authorName, onChange: (e) => onChange({ authorName: e.target.value }), placeholder: "Author display name" }), _jsx(Toggle, { label: "Featured post", checked: values.isFeatured, onChange: (checked) => onChange({ isFeatured: checked }) }), isEdit && (_jsx(Div, { className: "border-t border-[var(--appkit-color-border)]", padding: "t-md", children: _jsx(Button, { type: "button", variant: "danger", size: "sm", onClick: () => setShowDeleteConfirm(true), isLoading: deleteMutation.isPending, children: "Delete post" }) }))] })),
         },
     ];
     const deleteModal = (_jsx(ConfirmDeleteModal, { isOpen: showDeleteConfirm, onConfirm: () => {

package/dist/features/admin/components/AdminCarouselEditorView.js

@@ -224,7 +224,7 @@ export function AdminCarouselEditorView({ slideId, onSaved, onDeleted, onCancel,
             label: "Slide info",
             required: true,
             fields: ["title", "active", "order", "settings"],
-            render: () => (_jsxs(Stack, { gap: "md", children: [_jsx(FieldInput, { name: "title", label: "Title", value: title, onChange: (v) => setTitle(v), required: true, placeholder: "e.g. Hot Wheels RLC Exclusives" }), _jsx(Toggle, { label: "Active (visible on homepage)", checked: active, onChange: setActive }), _jsx(Input, { label: "Display order", type: "number", value: order, onChange: (e) => setOrder(e.target.value), min: 0, placeholder: "1" }), _jsx(Select, { label: "Slide height", value: height, onChange: (e) => setHeight(e.target.value), options: HEIGHT_OPTIONS }), _jsx(Input, { label: "Autoplay delay (ms)", type: "number", value: autoplayDelayMs, onChange: (e) => setAutoplayDelayMs(e.target.value), min: 1000, max: 15000, placeholder: "4000", helperText: "How long this slide shows before auto-advancing. Default: 4000 ms." })] })),
+            render: () => (_jsxs(Stack, { gap: "md", children: [_jsx(FieldInput, { name: "title", label: "Title", value: title, onChange: (v) => setTitle(v), required: true, placeholder: "e.g. Hot Wheels RLC Exclusives" }), _jsx(Toggle, { label: "Active (visible on homepage)", checked: active, onChange: setActive }), _jsx(Input, { label: "Display order", error: form.shellCtx.errors.order, type: "number", value: order, onChange: (e) => setOrder(e.target.value), min: 0, placeholder: "1" }), _jsx(Select, { label: "Slide height", value: height, onChange: (e) => setHeight(e.target.value), options: HEIGHT_OPTIONS }), _jsx(Input, { label: "Autoplay delay (ms)", type: "number", value: autoplayDelayMs, onChange: (e) => setAutoplayDelayMs(e.target.value), min: 1000, max: 15000, placeholder: "4000", helperText: "How long this slide shows before auto-advancing. Default: 4000 ms." })] })),
         },
         {
             id: "background",

package/dist/features/admin/components/AdminCarouselView.js

@@ -2,8 +2,10 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useApiMutation } from "@mohasinac/appkit/client";
 import React, { useState, useCallback } from "react";
+import { useRouter } from "next/navigation.js";
 import { useQueryClient } from "@tanstack/react-query";
-import { Badge, BulkActionBar, Button, ConfirmDeleteModal, Div, ListingFilterDrawer, ListingLayout, ListingToolbar, Pagination, Row, Span, Stack, Text, StickyToolbar } from "../../../ui/index.js";
+import { Badge, BulkActionBar, Button, ConfirmDeleteModal, Div, ListingFilterDrawer, ListingLayout, ListingToolbar, Pagination, Row, Span, Stack, Text, TextLink, StickyToolbar, Toggle, useToast } from "../../../ui/index.js";
+import { ROUTES } from "../../../next/routing/route-map.js";
 import { useBottomActions } from "../../layout/index.js";
 import { MediaImage } from "../../media/MediaImage.js";
 import { ADMIN_ENDPOINTS, HOMEPAGE_ENDPOINTS } from "../../../constants/api-endpoints.js";
@@ -14,6 +16,8 @@ import { useAdminListing } from "../hooks/useAdminListing.js";
 import { DataTable } from "./DataTable.js";
 import { RowActionMenu } from "../../../ui/components/RowActionMenu.js";
 import { apiClient } from "../../../http/index.js";
+import { normalizeError } from "../../../errors/normalize.js";
+import { toUserMessage } from "../../../errors/error-display-map.js";
 const PAGE_SIZE = 50;
 const FILTER_KEYS = ["active"];
 const DEFAULT_SORT = "order";
@@ -33,6 +37,8 @@ export function AdminCarouselView({ children, onBulkDelete, ...props }) {
     const [deleteTargetId, setDeleteTargetId] = useState(null);
     const [localRows, setLocalRows] = useState([]);
     const queryClient = useQueryClient();
+    const router = useRouter();
+    const { showToast } = useToast();
     const { view, setView, table, searchInput, setSearchInput, commitSearch, filterOpen, setFilterOpen, openFilters, applyFilters, clearFilters, pendingFilters, setPendingFilters, activeFilterCount, hasActiveState, resetAll, rows: fetchedRows, isLoading, errorMessage, currentPage, totalPages, selection, } = useAdminListing({
         filterKeys: FILTER_KEYS,
         defaultSort: DEFAULT_SORT,
@@ -111,8 +117,58 @@ export function AdminCarouselView({ children, onBulkDelete, ...props }) {
         setDraggingId(null);
         reorderMutation.mutate(next.map((r) => r.id));
     };
+    const setActiveMutation = useApiMutation({
+        errorMessage: "Could not change that slide's status.",
+        mutationFn: ({ id, active }) => 
+        // PUT, not PATCH: this route has no PATCH, and every field on
+        // `updateSlideSchema` is optional, so a lone `{ active }` is a valid
+        // partial update.
+        apiClient.put(ADMIN_ENDPOINTS.CAROUSEL_BY_ID(id), { active }),
+        onSuccess: () => {
+            queryClient.invalidateQueries({ queryKey: ["admin", "carousel", "listing"] });
+            // The public hero carousel reads under its own key.
+            queryClient.invalidateQueries({ queryKey: ["carousel"] });
+        },
+    });
+    /*
+     * 🛑 The bulk delete used to be gated entirely on an `onBulkDelete` PROP —
+     * and the page renders `<AdminCarouselView />` with no props at all. So
+     * `bulkActions` was always `[]`, the BulkActionBar never rendered, and
+     * DataTable was handed no selection props either, which meant no checkbox
+     * column existed to select with in the first place.
+     * `ACTIONS.ADMIN["delete-carousel"]` and its confirmation dialog were
+     * unreachable from this page.
+     *
+     * The prop is kept so an embedder can still override the behaviour, but it
+     * no longer decides whether the action EXISTS — this view owns a delete
+     * mutation already and can perfectly well call it N times.
+     */
+    const handleBulkDelete = useCallback(async () => {
+        const ids = selection.selectedIds;
+        try {
+            if (onBulkDelete) {
+                await onBulkDelete(ids);
+            }
+            else {
+                await Promise.all(ids.map((id) => apiClient.delete(ADMIN_ENDPOINTS.CAROUSEL_BY_ID(id))));
+                await queryClient.invalidateQueries({ queryKey: ["admin", "carousel", "listing"] });
+            }
+            selection.clearSelection();
+            showToast(`${ids.length} slide${ids.length === 1 ? "" : "s"} deleted.`, "success");
+        }
+        catch (err) {
+            const normalized = normalizeError(err);
+            /*
+             * The selection is deliberately NOT cleared on failure. `Promise.all`
+             * rejects on the first error, so some of these ids may be gone and
+             * some may not — clearing would hide which rows are still there and
+             * leave the admin no way to retry the remainder.
+             */
+            showToast(toUserMessage(normalized.code, undefined, { fallback: "Could not delete the selected slides." }), "error");
+        }
+    }, [onBulkDelete, selection, queryClient, showToast]);
     const bulkActions = [
-        ...(onBulkDelete ? [buildBulkAction(ACTIONS.ADMIN["delete-carousel"], async () => { await onBulkDelete(selection.selectedIds); selection.clearSelection(); })] : []),
+        buildBulkAction(ACTIONS.ADMIN["delete-carousel"], handleBulkDelete),
     ];
     useBottomActions(selection.selectedCount > 0 ? { bulk: { selectedCount: selection.selectedCount, onClearSelection: selection.clearSelection, actions: bulkActions } } : {});
     if (hasChildren) {
@@ -138,6 +194,24 @@ export function AdminCarouselView({ children, onBulkDelete, ...props }) {
             header: "Details",
             render: (row) => row.secondary,
         },
+        {
+            /*
+             * 🛑 Both preventDefault AND stopPropagation.
+             *
+             * `rowHrefTemplate` makes the whole row an anchor, so stopping
+             * propagation alone leaves the anchor's DEFAULT action intact — the
+             * toggle would flip and then navigate to the edit page, which reads as
+             * "clicking the switch opens the editor". A normal column cell is also
+             * outside the two `<Td>`s DataTable stops propagation on; only the
+             * selection and row-action cells get that for free.
+             */
+            key: "active",
+            header: "Active",
+            className: "w-24",
+            render: (row) => (_jsx(Row, { align: "center", gap: "sm", role: "presentation", onClick: (e) => { e.preventDefault(); e.stopPropagation(); }, onKeyDown: (e) => e.stopPropagation(), children: _jsx(Toggle, { size: "sm", checked: row.status === "Active", ariaLabel: row.status === "Active"
+                        ? `${ACTIONS.ADMIN["deactivate-carousel"].ariaLabel}: ${row.primary}`
+                        : `${ACTIONS.ADMIN["activate-carousel"].ariaLabel}: ${row.primary}`, onChange: (next) => setActiveMutation.mutate({ id: row.id, active: next }) }) })),
+        },
         {
             key: "status",
             header: "Status",
@@ -152,7 +226,10 @@ export function AdminCarouselView({ children, onBulkDelete, ...props }) {
             key: "actions",
             header: "",
             render: (row) => (_jsx(RowActionMenu, { actions: [
-                    { label: ACTIONS.ADMIN["edit-carousel"].label, onClick: () => { window.location.href = `/admin/carousel/${row.id}/edit`; } },
+                    // router.push, not window.location.href — a full page load to
+                    // reach a page the row already links to is strictly worse, and
+                    // this is the same navigation DataTable's row anchor performs.
+                    { label: ACTIONS.ADMIN["edit-carousel"].label, onClick: () => router.push(String(ROUTES.ADMIN.CAROUSEL_EDIT(row.id))) },
                     {
                         label: ACTIONS.ADMIN["delete-carousel"].label,
                         destructive: true,
@@ -163,5 +240,20 @@ export function AdminCarouselView({ children, onBulkDelete, ...props }) {
     ];
     return (_jsxs(Div, { className: "min-h-screen", children: [_jsx(ListingToolbar, { filterCount: activeFilterCount, onFiltersClick: openFilters, searchValue: searchInput, 
                 // Search intentionally absent: this endpoint does not read `q`, so the box accepted typing and changed nothing. Restore it when the collection gains searchTxt — audit-listing-search-capability tracks it.
-                onSearchChange: setSearchInput, onSearchCommit: commitSearch, showTableView: true, view: view, onViewChange: (v) => setView(v), onResetAll: resetAll, hasActiveState: hasActiveState }), totalPages > 1 && (_jsx(StickyToolbar, { offset: "header+pagination", tone: "translucent", border: true, padding: "toolbar", children: _jsx(Row, { justify: "center", children: _jsx(Pagination, { currentPage: currentPage, totalPages: totalPages, onPageChange: (p) => table.setPage(p) }) }) })), selection.selectedCount > 0 && bulkActions.length > 0 && (_jsx(BulkActionBar, { selectedCount: selection.selectedCount, actions: bulkActions, onClearSelection: selection.clearSelection })), _jsxs(Div, { paddingX: "x-sm-md", padding: "y-md", children: [errorMessage && (_jsx(Div, { textSize: "sm", className: "mb-4 border border-error/20", color: "error", surface: "danger-surface", padding: "inline", rounded: "xl", children: errorMessage })), _jsx(DataTable, { rows: displayRows, columns: columns, isLoading: isLoading, emptyLabel: "No carousel slides \u2014 use 'New slide' to add one", rowHrefTemplate: "/admin/carousel/{id}/edit" })] }), _jsx(ListingFilterDrawer, { open: filterOpen, onClose: () => setFilterOpen(false), onApply: applyFilters, onClear: clearFilters, activeCount: activeFilterCount, children: _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { className: "tracking-widest", color: "muted", size: "xs", weight: "semibold", transform: "uppercase", children: "Status" }), _jsx(Row, { wrap: true, gap: "sm", children: [{ label: "All", value: "" }, { label: "Active", value: "true" }, { label: "Inactive", value: "false" }].map((opt) => (_jsx(Button, { variant: "ghost", type: "button", onClick: () => setPendingFilters((p) => ({ ...p, active: opt.value })), className: `rounded-full px-[var(--appkit-space-3)] py-[var(--appkit-space-1)] text-[length:var(--appkit-text-xs)] font-medium border transition-colors min-h-0 h-auto ${(pendingFilters.active || "") === opt.value ? "bg-primary text-white border-primary" : "border-[var(--appkit-color-border)] text-[var(--appkit-color-text-muted)] hover:bg-surface-hover"}`, children: opt.label }, opt.label))) })] }) }), deleteTargetId && (_jsx(ConfirmDeleteModal, { isOpen: true, title: "Delete Carousel Slide", message: "Delete this carousel slide? This cannot be undone.", onConfirm: () => { deleteMutation.mutate(deleteTargetId); setDeleteTargetId(null); }, onClose: () => setDeleteTargetId(null), isDeleting: deleteMutation.isPending }))] }));
+                onSearchChange: setSearchInput, onSearchCommit: commitSearch, showTableView: true, view: view, onViewChange: (v) => setView(v), onResetAll: resetAll, hasActiveState: hasActiveState, 
+                /*
+                 * 🛑 The empty state named a button that did not exist: "No carousel
+                 * slides — use 'New slide' to add one", with no New slide control
+                 * anywhere on the page. `/admin/carousel/new` has always been a real
+                 * route and nothing linked to it.
+                 */
+                extra: _jsx(Button, { gap: "sm", size: "sm", asChild: true, children: _jsx(TextLink, { variant: "inherit", href: String(ROUTES.ADMIN.CAROUSEL_NEW), children: "New slide" }) }) }), totalPages > 1 && (_jsx(StickyToolbar, { offset: "header+pagination", tone: "translucent", border: true, padding: "toolbar", children: _jsx(Row, { justify: "center", children: _jsx(Pagination, { currentPage: currentPage, totalPages: totalPages, onPageChange: (p) => table.setPage(p) }) }) })), selection.selectedCount > 0 && bulkActions.length > 0 && (_jsx(BulkActionBar, { selectedCount: selection.selectedCount, actions: bulkActions, onClearSelection: selection.clearSelection })), _jsxs(Div, { paddingX: "x-sm-md", padding: "y-md", children: [errorMessage && (_jsx(Div, { textSize: "sm", className: "mb-4 border border-error/20", color: "error", surface: "danger-surface", padding: "inline", rounded: "xl", children: errorMessage })), _jsx(DataTable, { rows: displayRows, columns: columns, isLoading: isLoading, emptyLabel: "No carousel slides yet", emptyAction: _jsx(Button, { gap: "sm", size: "sm", asChild: true, children: _jsx(TextLink, { variant: "inherit", href: String(ROUTES.ADMIN.CAROUSEL_NEW), children: "New slide" }) }), rowHrefTemplate: "/admin/carousel/{id}/edit", 
+                        /*
+                         * Selection was destructured and a bulk-action array built from it,
+                         * and these three props were never passed — so no checkbox column
+                         * rendered and nothing could be selected to act on.
+                         */
+                        selectedIds: selection.selectedIdSet, onToggleSelect: (id) => selection.toggle(id), onToggleSelectAll: () => selection.toggleAll() })] }), _jsx(ListingFilterDrawer, { open: filterOpen, onClose: () => setFilterOpen(false), onApply: applyFilters, onClear: clearFilters, activeCount: activeFilterCount, children: _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { className: "tracking-widest", color: "muted", size: "xs", weight: "semibold", transform: "uppercase", children: "Status" }), _jsx(Row, { wrap: true, gap: "sm", children: [{ label: "All", value: "" }, { label: "Active", value: "true" }, { label: "Inactive", value: "false" }].map((opt) => (_jsx(Button, { variant: "ghost", type: "button", onClick: () => setPendingFilters((p) => ({ ...p, active: opt.value })), className: `rounded-full px-[var(--appkit-space-3)] py-[var(--appkit-space-1)] text-[length:var(--appkit-text-xs)] font-medium border transition-colors min-h-0 h-auto ${(pendingFilters.active || "") === opt.value ? "bg-primary text-white border-primary" : "border-[var(--appkit-color-border)] text-[var(--appkit-color-text-muted)] hover:bg-surface-hover"}`, children: opt.label }, opt.label))) })] }) }), deleteTargetId && (_jsx(ConfirmDeleteModal, { isOpen: true, 
+                /* Rule #7: confirmation copy lives on the ActionDef, not here. */
+                title: ACTIONS.ADMIN["delete-carousel"].confirmation?.title, message: ACTIONS.ADMIN["delete-carousel"].confirmation?.body, confirmText: ACTIONS.ADMIN["delete-carousel"].confirmation?.confirmLabel, onConfirm: () => { deleteMutation.mutate(deleteTargetId); setDeleteTargetId(null); }, onClose: () => setDeleteTargetId(null), isDeleting: deleteMutation.isPending }))] }));
 }

package/dist/features/admin/components/AdminCouponEditorView.js

@@ -22,11 +22,28 @@ const __P = {
 const __O = {
     yAuto: "overflow-y-auto",
 };
+/*
+ * 🛑 Not derived from `COUPON_TYPE_LABELS` on purpose, and the reason is the
+ * opposite of what the duplication framework usually says.
+ *
+ * `points_earn` is OFFERED here, so an admin can create a points offer — but
+ * the editor's discount fields (`discount.value`, `maxDiscount`,
+ * `minPurchase`) are meaningless for it, and it carries `pointsPercent`
+ * instead. Deriving the list would silently add the option the moment the
+ * union grew, which is how `AdminEventsView` ended up offering `contest`,
+ * `giveaway` and `flash-sale` — three values `EventType` never had, each
+ * matching zero rows forever (Root Cause #72).
+ *
+ * So the list is explicit and the entry is deliberate.
+ * `audit-filter-tab-enums` covers the chip row, which is the surface where
+ * coverage actually matters.
+ */
 const TYPE_OPTIONS = [
     { label: "Percentage Discount", value: "percentage" },
     { label: "Fixed Amount Discount", value: "fixed" },
     { label: "Free Shipping", value: "free_shipping" },
     { label: "Buy X Get Y", value: "buy_x_get_y" },
+    { label: "Points Back (awards points, no discount)", value: "points_earn" },
 ];
 // --- Helpers -----------------------------------------------------------------
 function toCouponCode(str) {

package/dist/features/admin/components/AdminFulfillmentView.js

@@ -9,7 +9,8 @@ import { PaginatedSelect } from "../../../ui/components/PaginatedSelect.js";
 import { apiClient } from "../../../http/index.js";
 import { ADMIN_ENDPOINTS, SELLER_ENDPOINTS } from "../../../constants/api-endpoints.js";
 import { normalizeError } from "../../../errors/normalize.js";
-import { useToast } from "../../../ui/index.js";
+import { useToast, TextLink } from "../../../ui/index.js";
+import { ROUTES } from "../../../next/routing/route-map.js";
 async function loadStoreOptions(query, page) {
     const params = new URLSearchParams({ page: String(page), pageSize: "25" });
     if (query)
@@ -105,5 +106,5 @@ export function AdminFulfillmentView({ initialStoreId, initialStoreName, }) {
                             setStoreId(null);
                             setOrders([]);
                         }, children: "Change Store" }))] }), !storeId && (_jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", color: "muted", children: "Select a store to view its fulfilment queue." }), _jsx(PaginatedSelect, { value: null, onChange: (v) => { if (v)
-                            setStoreId(v); }, loadOptions: loadStoreOptions, placeholder: "Search stores\u2026", searchPlaceholder: "Type store name\u2026", noResultsText: "No stores found", ariaLabel: "Store" })] })), storeId && (_jsxs(Stack, { gap: "sm", children: [isLoading && (_jsx(Text, { size: "sm", color: "muted", children: "Loading orders\u2026" })), !isLoading && orders.length === 0 && (_jsx(Text, { color: "muted", children: "No orders in the fulfillment queue \u2014 great work!" })), orders.map((order) => (_jsxs(Stack, { surface: "card", padding: "sm", rounded: "md", gap: "xs", children: [_jsxs(Row, { align: "center", gap: "xs", wrap: true, children: [_jsxs(Text, { size: "sm", weight: "medium", children: ["#", order.id] }), _jsx(Badge, { variant: statusBadgeVariant(order.status), children: order.status }), order.pickedAt && _jsx(Badge, { variant: "success", children: "Picked" }), order.packedAt && _jsx(Badge, { variant: "success", children: "Packed" })] }), _jsxs(Text, { size: "xs", color: "muted", children: [order.userName, order.items && order.items.length > 0 && (_jsxs(_Fragment, { children: [" \u00B7 ", order.items.map((i) => i.productTitle).join(", ")] }))] }), order.assignedWorkerId && (_jsxs(Text, { size: "xs", color: "muted", children: ["Assigned to: ", order.assignedWorkerId] })), _jsxs(Row, { gap: "xs", children: [!order.pickedAt && (_jsx(Button, { size: "sm", variant: "secondary", onClick: () => handleMarkPicked(order.id), isLoading: actionLoadingId === order.id + ":picked", children: "Mark Picked" })), order.pickedAt && !order.packedAt && (_jsx(Button, { size: "sm", variant: "secondary", onClick: () => handleMarkPacked(order.id), isLoading: actionLoadingId === order.id + ":packed", children: "Mark Packed" })), order.assignedWorkerId && (_jsx(Button, { size: "sm", variant: "secondary", onClick: () => handleUnassign(order.id), isLoading: actionLoadingId === order.id + ":unassign", children: "Unassign" }))] })] }, order.id)))] })), initialStoreName && !storeId && (_jsxs(Text, { size: "xs", color: "muted", children: ["Previously viewing: ", initialStoreName] }))] }));
+                            setStoreId(v); }, loadOptions: loadStoreOptions, placeholder: "Search stores\u2026", searchPlaceholder: "Type store name\u2026", noResultsText: "No stores found", ariaLabel: "Store" })] })), storeId && (_jsxs(Stack, { gap: "sm", children: [isLoading && (_jsx(Text, { size: "sm", color: "muted", children: "Loading orders\u2026" })), !isLoading && orders.length === 0 && (_jsx(Text, { color: "muted", children: "No orders in the fulfillment queue \u2014 great work!" })), orders.map((order) => (_jsxs(Stack, { surface: "card", padding: "sm", rounded: "md", gap: "xs", children: [_jsxs(Row, { align: "center", gap: "xs", wrap: true, children: [_jsxs(TextLink, { href: String(ROUTES.ADMIN.ORDER_DETAIL(order.id)), size: "sm", weight: "medium", children: ["#", order.id] }), _jsx(Badge, { variant: statusBadgeVariant(order.status), children: order.status }), order.pickedAt && _jsx(Badge, { variant: "success", children: "Picked" }), order.packedAt && _jsx(Badge, { variant: "success", children: "Packed" })] }), _jsxs(Text, { size: "xs", color: "muted", children: [order.userName, order.items && order.items.length > 0 && (_jsxs(_Fragment, { children: [" \u00B7 ", order.items.map((i) => i.productTitle).join(", ")] }))] }), order.assignedWorkerId && (_jsxs(Text, { size: "xs", color: "muted", children: ["Assigned to: ", order.assignedWorkerId] })), _jsxs(Row, { gap: "xs", children: [!order.pickedAt && (_jsx(Button, { size: "sm", variant: "secondary", onClick: () => handleMarkPicked(order.id), isLoading: actionLoadingId === order.id + ":picked", children: "Mark Picked" })), order.pickedAt && !order.packedAt && (_jsx(Button, { size: "sm", variant: "secondary", onClick: () => handleMarkPacked(order.id), isLoading: actionLoadingId === order.id + ":packed", children: "Mark Packed" })), order.assignedWorkerId && (_jsx(Button, { size: "sm", variant: "secondary", onClick: () => handleUnassign(order.id), isLoading: actionLoadingId === order.id + ":unassign", children: "Unassign" }))] })] }, order.id)))] })), initialStoreName && !storeId && (_jsxs(Text, { size: "xs", color: "muted", children: ["Previously viewing: ", initialStoreName] }))] }));
 }

package/dist/features/admin/components/AdminInvoicingView.d.ts

@@ -0,0 +1,2 @@
+import React from "react";
+export declare function AdminInvoicingView(): React.JSX.Element;

package/dist/features/admin/components/AdminInvoicingView.js

@@ -0,0 +1,65 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useState } from "react";
+import { Button, Card, Disclaimer, Div, Heading, Row, Stack, Text } from "../../../ui/index.js";
+import { FieldInput } from "../../../ui/forms/FieldInput.js";
+import { Icon } from "../../../ui/components/Icon.js";
+import { ADMIN_ENDPOINTS } from "../../../constants/api-endpoints.js";
+/**
+ * Admin → Finance → Invoicing: the GSTR-1 draft export (Phase 7d).
+ *
+ * ## 🛑 Why this page exists at all
+ *
+ * The export is an API route, and an API route with no surface is a dead end —
+ * reachable only by someone who already knows the URL, which is Root Cause
+ * #56's shape (16 of 70 listing views had no way to open a row). The person
+ * who needs this is an accountant at quarter end, and they will not type a
+ * query string.
+ *
+ * ## 🛑 It downloads; it does not file
+ *
+ * Nothing here talks to the GST portal — there is no webhook facility in
+ * existence and no GSP contract. The copy says "draft" everywhere it can,
+ * because a page that implied a return had been FILED when it had not is the
+ * most consequential thing this feature could get wrong.
+ */
+/** Indian FY quarters, which is the unit a GSTR-1 is filed in. */
+const QUARTERS = [
+    { label: "Q1 — Apr to Jun", fromMonth: "04-01", toMonth: "06-30" },
+    { label: "Q2 — Jul to Sep", fromMonth: "07-01", toMonth: "09-30" },
+    { label: "Q3 — Oct to Dec", fromMonth: "10-01", toMonth: "12-31" },
+    /*
+     * 🛑 Q4 SPANS A CALENDAR YEAR BOUNDARY. Jan–Mar of FY 26-27 is calendar
+     * 2027, not 2026 — the same off-by-one the `financialYearLabel` helper
+     * exists to contain, surfacing here because a quarter picker has to know it
+     * too. `yearOffset` is what carries it; dropping it would export the wrong
+     * three months with no visible error.
+     */
+    { label: "Q4 — Jan to Mar", fromMonth: "01-01", toMonth: "03-31", yearOffset: 1 },
+];
+function defaultFyStartYear() {
+    const now = new Date();
+    // Zero-based month: April is 3. Jan–Mar belongs to the FY that started last
+    // calendar year.
+    return now.getMonth() >= 3 ? now.getFullYear() : now.getFullYear() - 1;
+}
+export function AdminInvoicingView() {
+    const [fyStart, setFyStart] = useState(String(defaultFyStartYear()));
+    const [from, setFrom] = useState("");
+    const [to, setTo] = useState("");
+    const applyQuarter = (q) => {
+        const start = Number(fyStart);
+        if (!Number.isFinite(start))
+            return;
+        const offset = "yearOffset" in q ? q.yearOffset : 0;
+        setFrom(`${start + offset}-${q.fromMonth}`);
+        setTo(`${start + offset}-${q.toMonth}`);
+    };
+    const href = from && to
+        ? `${ADMIN_ENDPOINTS.INVOICING_GSTR1}?from=${from}&to=${to}`
+        : undefined;
+    return (_jsxs(Stack, { gap: "lg", children: [_jsxs(Div, { children: [_jsx(Heading, { level: 1, children: "Invoicing" }), _jsx(Text, { color: "muted", size: "sm", children: "Export the invoice and credit-note register for a period, as a draft for your accountant." })] }), _jsx(Card, { padding: "md", children: _jsxs(Stack, { gap: "md", children: [_jsx(Heading, { level: 2, children: "GSTR-1 draft" }), _jsx(Disclaimer, { id: "accounting-output" }), _jsx(Row, { gap: "sm", wrap: true, children: _jsx(Div, { className: "w-40", children: _jsx(FieldInput, { name: "fyStart", label: "FY starting", value: fyStart, onChange: setFyStart, hint: "e.g. 2026 for FY 26-27" }) }) }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "semibold", children: "Quarter" }), _jsx(Row, { gap: "sm", wrap: true, children: QUARTERS.map((q) => (_jsx(Button, { type: "button", variant: "secondary", size: "sm", onClick: () => applyQuarter(q), children: q.label }, q.label))) })] }), _jsxs(Row, { gap: "sm", wrap: true, children: [_jsx(Div, { className: "w-48", children: _jsx(FieldInput, { name: "from", label: "From", value: from, onChange: setFrom }) }), _jsx(Div, { className: "w-48", children: _jsx(FieldInput, { name: "to", label: "To", value: to, onChange: setTo }) })] }), _jsxs(Row, { gap: "sm", align: "center", children: [_jsxs(Button, { type: "button", variant: "primary", disabled: !href, onClick: () => {
+                                        if (href)
+                                            window.location.href = href;
+                                    }, children: [_jsx(Icon, { name: "download", size: "sm" }), "Download draft CSV"] }), !href && (_jsx(Text, { color: "muted", size: "xs", children: "Pick a quarter, or enter both dates as YYYY-MM-DD." }))] }), _jsx(Text, { color: "muted", size: "xs", children: "Credit notes appear as negative rows, so the TOTAL row is net of refunds. Any paid order in the window that carries no invoice number is listed at the bottom of the file as a warning \u2014 those are not included in the totals and need looking at." })] }) })] }));
+}