@mohasinac/appkit 4.62.0 → 4.63.0

package/dist/constants/api-endpoints.js

@@ -129,6 +129,10 @@ export const ADMIN_ENDPOINTS = {
     /** The action-index control plane (W7 / D7) — GET the whole index, PATCH one override. */
     ACTION_INDEX: "/api/admin/action-index",
     AD_BY_ID: (id) => `/api/admin/ads/${id}`,
+    /** D56 — the self-serve creative moderation queue. */
+    AD_BOOKINGS: "/api/admin/ads/bookings",
+    /** D56 — approve or reject one creative. A rejection REQUIRES a note. */
+    AD_BOOKING_MODERATE: (id) => `/api/admin/ads/bookings/${id}/moderate`,
     PAYMENTS_SETTINGS: "/api/admin/payments/settings",
     PRODUCTS: "/api/admin/products",
     PRODUCT_BY_ID: (id) => `/api/admin/products/${id}`,
@@ -141,6 +145,12 @@ export const ADMIN_ENDPOINTS = {
     ORDER_PAYMENT_VERIFY: (id) => `/api/admin/orders/${id}/payment-verify`,
     ORDER_PAYMENT_REUPLOAD: (id) => `/api/admin/orders/${id}/payment-reupload`,
     ORDER_PAYMENT_REJECT_FRAUD: (id) => `/api/admin/orders/${id}/payment-reject-fraud`,
+    /*
+     * D55 — approve or reject a pre-order BALANCE proof. Separate from the
+     * three `ORDER_PAYMENT_*` routes above, which review the DEPOSIT: the two
+     * payments are months apart and each carries its own proof, status and note.
+     */
+    ORDER_BALANCE_REVIEW: (id) => `/api/admin/orders/${id}/balance-review`,
     USERS: "/api/admin/users",
     USERS_BULK: "/api/admin/users/bulk",
     USER_BY_ID: (uid) => `/api/admin/users/${uid}`,
@@ -187,6 +197,14 @@ export const ADMIN_ENDPOINTS = {
     PAYOUTS_EXPORT: "/api/admin/payouts/export",
     AUDIT_LOG: "/api/admin/audit-log",
     AUDIT_LOG_BY_ID: (id) => `/api/admin/audit-log/${id}`,
+    /**
+     * Phase 7 — the GSTR-1 DRAFT export. Takes `?from=&to=` as YYYY-MM-DD and
+     * returns a CSV.
+     *
+     * 🛑 "draft" is in the filename for a reason: nothing in this codebase talks
+     * to the GST portal, and the file is the input to a human filing.
+     */
+    INVOICING_GSTR1: "/api/admin/invoicing/gstr1",
     /*
      * Payment protection. `payment-cases` is NOT under `maintenance/` — see the
      * route-map entry for why: maintenance means "something broke, look when you
@@ -325,6 +343,19 @@ export const CART_ENDPOINTS = {
     SELECTION: "/api/cart/selection",
     /** Per-store paid add-on selections — the source of truth for what's charged. */
     ADDONS: "/api/cart/addons",
+    /**
+     * Pay with points, on or off (D46/D47). A boolean and nothing else — the
+     * AMOUNT is derived server-side from the live balance and the 50% cap, which
+     * is why there is no `/api/cart/points/amount`.
+     */
+    POINTS: "/api/cart/points",
+    /**
+     * The instalment plan — a TENURE and nothing else. It lives on the cart,
+     * not in a checkout body, because the online path needs the same answer in
+     * two requests (`/api/payment/create-order` captures, `/api/payment/verify`
+     * writes the order). Same reasoning as `POINTS` and `ADDONS` above.
+     */
+    EMI: "/api/cart/emi",
     COUPON: "/api/cart/coupon",
     /**
      * Add a buyer-assembled group selection as ONE line. Separate from `GET`'s
@@ -575,6 +606,13 @@ export const ORDER_ENDPOINTS = {
     BY_ID: (id) => `/api/orders/${id}`,
     TRACK: (trackingId) => `/api/orders/track/${trackingId}`,
     PAYMENT_PROOF: (id) => `/api/orders/${id}/payment-proof`,
+    /*
+     * D55 — proof of paying a pre-order BALANCE. Deliberately a separate
+     * endpoint from `PAYMENT_PROOF`, which is the DEPOSIT's: a pre-order has
+     * two payments months apart, and writing the second over the first would
+     * destroy the evidence for the payment that created the order.
+     */
+    BALANCE_PROOF: (id) => `/api/orders/${id}/balance-proof`,
     DISPUTE: (id) => `/api/orders/${id}/dispute`,
 };
 // ---------------------------------------------------------------------------
@@ -643,6 +681,23 @@ export const SELLER_ENDPOINTS = {
     PRODUCTS: "/api/store/products",
     ORDERS: "/api/store/orders",
     ORDERS_BY_ID: (orderId) => `/api/store/orders/${orderId}`,
+    /**
+     * Dispatch — BOTH branches of `shipOrderSchema`'s discriminated union.
+     *
+     * `method: "custom"` records a carrier the seller posted themselves;
+     * `method: "platform"` enqueues a booking through our own account. One
+     * route, because they are one decision — a second endpoint for the
+     * platform branch would be the same handler behind two ceilings, which is
+     * Root Cause #85.
+     */
+    ORDER_SHIP: (orderId) => `/api/store/orders/${orderId}/ship`,
+    /*
+     * D55 — "the goods have landed, the balance is now payable". An EVENT, not
+     * a derived state: a pre-order's premise is that the item does not exist
+     * yet, so the balance becomes collectable when the seller says stock
+     * arrived, and the buyer's 7-day window runs from that moment.
+     */
+    ORDER_OPEN_BALANCE: (orderId) => `/api/store/orders/${orderId}/open-balance`,
     AUCTIONS: "/api/store/products",
     COUPONS: "/api/store/coupons",
     COUPON_BY_ID: (id) => `/api/store/coupons/${id}`,

package/dist/constants/field-names.d.ts

@@ -230,6 +230,17 @@ export declare const ORDER_FIELDS: {
     readonly TOTAL_AMOUNT: "totalAmount";
     readonly BUYER_ID: "buyerId";
     readonly BUNDLE_ID: "bundleId";
+    /**
+     * Which checkout LANE produced this order (`standard` / `auction` / `offer`
+     * / `preorder` / `prize-draw`) — see § "Checkout Lanes".
+     *
+     * 🛑 Never filter `orderType == "standard"` in a query. Orders written
+     * before the field existed carry no value at all, and a Firestore equality
+     * cannot match an absent field, so that filter silently drops every legacy
+     * order. `UserOrdersView` filters the standard lane in memory for exactly
+     * this reason; the other four values are safe as equalities.
+     */
+    readonly ORDER_TYPE: "orderType";
     readonly CREATED_AT: "createdAt";
     readonly UPDATED_AT: "updatedAt";
     readonly PAYMENT_DEADLINE: "paymentDeadline";
@@ -835,6 +846,7 @@ export declare const COUPON_FIELDS: {
         readonly FIXED: "fixed";
         readonly FREE_SHIPPING: "free_shipping";
         readonly BUY_X_GET_Y: "buy_x_get_y";
+        readonly POINTS_EARN: "points_earn";
     };
     readonly SCOPE_VALUES: {
         readonly ADMIN: "admin";
@@ -999,6 +1011,36 @@ export declare const REFUND_CLAIM_FIELDS: {
 export declare const PRICE_OBSERVATION_FIELDS: {
     readonly CATEGORY_ID: "categoryId";
 };
+/**
+ * A TTL-bounded hold on units of a product. See
+ * `features/inventory/schemas/stock-reservation.ts` for why a reservation is
+ * its own document rather than a counter on the product: the row and the
+ * counter move in ONE transaction, so a crash between them is impossible.
+ */
+export declare const STOCK_RESERVATION_FIELDS: {
+    readonly PRODUCT_ID: "productId";
+    readonly QUANTITY: "quantity";
+    readonly HOLDER_KIND: "holderKind";
+    readonly HOLDER_ID: "holderId";
+    readonly CREATED_BY: "createdBy";
+    readonly STATUS: "status";
+    readonly EXPIRES_AT: "expiresAt";
+    readonly ENDED_AT: "endedAt";
+    readonly ENDED_REASON: "endedReason";
+};
+/**
+ * One advertiser's booking of one placement for one period. The document id
+ * IS the lock (`adBookingId`), so there is deliberately no `period`+`placementId`
+ * uniqueness query to write — see `features/ads/schemas/firestore.ts`.
+ */
+export declare const AD_BOOKING_FIELDS: {
+    readonly PLACEMENT_ID: "placementId";
+    readonly PERIOD: "period";
+    readonly ADVERTISER_UID: "advertiserUid";
+    readonly PAYMENT_STATE: "paymentState";
+    readonly CANCELLED_AT: "cancelledAt";
+    readonly CREATED_AT: "createdAt";
+};
 export declare const OAUTH_STATE_VALUES: {
     readonly PENDING: "pending";
     readonly USED: "used";

package/dist/constants/field-names.js

@@ -258,6 +258,17 @@ export const ORDER_FIELDS = {
     TOTAL_AMOUNT: "totalAmount",
     BUYER_ID: "buyerId",
     BUNDLE_ID: "bundleId",
+    /**
+     * Which checkout LANE produced this order (`standard` / `auction` / `offer`
+     * / `preorder` / `prize-draw`) — see § "Checkout Lanes".
+     *
+     * 🛑 Never filter `orderType == "standard"` in a query. Orders written
+     * before the field existed carry no value at all, and a Firestore equality
+     * cannot match an absent field, so that filter silently drops every legacy
+     * order. `UserOrdersView` filters the standard lane in memory for exactly
+     * this reason; the other four values are safe as equalities.
+     */
+    ORDER_TYPE: "orderType",
     CREATED_AT: "createdAt",
     UPDATED_AT: "updatedAt",
     PAYMENT_DEADLINE: "paymentDeadline",
@@ -1003,6 +1014,11 @@ export const COUPON_FIELDS = {
         FIXED: "fixed",
         FREE_SHIPPING: "free_shipping",
         BUY_X_GET_Y: "buy_x_get_y",
+        // D51. 🛑 This file calls itself canonical and has been stale twice
+        // (EVENT_FIELDS invented a "published" status, SCAMMER_FIELDS lost
+        // "removed") — Root Cause #34. The authority is `CouponType` in
+        // features/promotions/types; this mirror has to follow it.
+        POINTS_EARN: "points_earn",
     },
     SCOPE_VALUES: {
         ADMIN: "admin",
@@ -1198,6 +1214,42 @@ export const PRICE_OBSERVATION_FIELDS = {
     CATEGORY_ID: "categoryId",
 };
 // ============================================================================
+// STOCK RESERVATIONS
+// ============================================================================
+/**
+ * A TTL-bounded hold on units of a product. See
+ * `features/inventory/schemas/stock-reservation.ts` for why a reservation is
+ * its own document rather than a counter on the product: the row and the
+ * counter move in ONE transaction, so a crash between them is impossible.
+ */
+export const STOCK_RESERVATION_FIELDS = {
+    PRODUCT_ID: "productId",
+    QUANTITY: "quantity",
+    HOLDER_KIND: "holderKind",
+    HOLDER_ID: "holderId",
+    CREATED_BY: "createdBy",
+    STATUS: "status",
+    EXPIRES_AT: "expiresAt",
+    ENDED_AT: "endedAt",
+    ENDED_REASON: "endedReason",
+};
+// ============================================================================
+// AD BOOKINGS
+// ============================================================================
+/**
+ * One advertiser's booking of one placement for one period. The document id
+ * IS the lock (`adBookingId`), so there is deliberately no `period`+`placementId`
+ * uniqueness query to write — see `features/ads/schemas/firestore.ts`.
+ */
+export const AD_BOOKING_FIELDS = {
+    PLACEMENT_ID: "placementId",
+    PERIOD: "period",
+    ADVERTISER_UID: "advertiserUid",
+    PAYMENT_STATE: "paymentState",
+    CANCELLED_AT: "cancelledAt",
+    CREATED_AT: "createdAt",
+};
+// ============================================================================
 // OAUTH STATE VALUES
 // ============================================================================
 export const OAUTH_STATE_VALUES = {

package/dist/contracts/index.d.ts

@@ -4,7 +4,7 @@ export type { EmailAttachment, EmailOptions, EmailResult, IEmailProvider, } from
 export type { UploadOptions, StorageFile, IStorageProvider } from "./storage";
 export type { PaymentOrder, PaymentCapture, Refund, Dispute, GatewayPaymentRecord, } from "./payment";
 export { IPaymentProvider } from "./payment";
-export type { ShippingAddress, CreateShipmentInput, Shipment, TrackingEvent, TrackingInfo, ServiceabilityResult, } from "./shipping";
+export type { ShippingAddress, CreateShipmentInput, Shipment, TrackingEvent, TrackingInfo, ServiceabilityResult, WalletBalance, } from "./shipping";
 export { IShippingProvider } from "./shipping";
 export type { SearchOptions, SearchHit, SearchResult, SuggestOptions, ISearchProvider, } from "./search";
 export type { ICacheProvider, QueueJob, IQueueProvider, EventHandler, IEventBus, } from "./infra";

package/dist/contracts/shipping.d.ts

@@ -50,6 +50,38 @@ export interface ServiceabilityResult {
         rate: number;
     }>;
 }
+/**
+ * A courier provider's prepaid balance.
+ *
+ * 🛑 THREE states, not two, and collapsing them is the whole hazard:
+ *
+ * - `{ known: false, supported: false }` — this provider has no wallet at all
+ *   (manual shipping). Nothing to check, ever.
+ * - `{ known: false, supported: true }` — it HAS one and we could not read it
+ *   right now (network, malformed payload, auth). **Treat as "attempt the
+ *   booking"**: the attempt's own failure is the authority, and refusing on an
+ *   unreadable balance would degrade every order on a transient blip.
+ * - `{ known: true, amount }` — a real figure.
+ *
+ * A balance of `0` is the LAST of those, and is a decision to skip. "I could
+ * not read it" is not "there is no money".
+ *
+ * 🛑 There is deliberately NO `creditLimit` field. Measured against the live
+ * Shiprocket API 2026-10-22: `GET /account/details/wallet-balance` returns
+ * `{ data: { balance_amount: string } }` and nothing else, and
+ * `/account/details` is a 404. So postpaid credit is not readable, and a field
+ * with no producer is the speculative-infra pattern this codebase refuses.
+ * When postpaid is granted, re-probe and add it then.
+ */
+export type WalletBalance = {
+    known: true;
+    amount: number;
+    currency?: string;
+} | {
+    known: false;
+    supported: boolean;
+    reason?: string;
+};
 /**
  * Shipping carrier adapter contract. An abstract base class rather than a
  * plain interface so every provider (manual, and any future carrier
@@ -66,4 +98,17 @@ export declare abstract class IShippingProvider {
     abstract cancelShipment(shipmentId: string): Promise<void>;
     abstract checkServiceability(pincode: string, weight: number): Promise<ServiceabilityResult>;
     abstract generateLabel(shipmentId: string): Promise<ArrayBuffer>;
+    /**
+     * The provider's prepaid balance, when it HAS one.
+     *
+     * 🛑 Deliberately NOT abstract. Manual shipping has no wallet — a seller
+     * posts the parcel and claims the cost back — so an abstract member would
+     * force every implementation to invent an answer. A non-abstract default is
+     * the established shape here for a capability a provider lacks (the dispute
+     * contract's `listDisputes() => []` is the precedent).
+     *
+     * The default says "I do not have one", which is TRUE for manual and is not
+     * the same statement as "I have one and it is empty".
+     */
+    getWalletBalance(): Promise<WalletBalance>;
 }

package/dist/contracts/shipping.js

@@ -9,4 +9,19 @@
  * Implemented by the manual provider (default) and its mock.
  */
 export class IShippingProvider {
+    /**
+     * The provider's prepaid balance, when it HAS one.
+     *
+     * 🛑 Deliberately NOT abstract. Manual shipping has no wallet — a seller
+     * posts the parcel and claims the cost back — so an abstract member would
+     * force every implementation to invent an answer. A non-abstract default is
+     * the established shape here for a capability a provider lacks (the dispute
+     * contract's `listDisputes() => []` is the precedent).
+     *
+     * The default says "I do not have one", which is TRUE for manual and is not
+     * the same statement as "I have one and it is empty".
+     */
+    async getWalletBalance() {
+        return { known: false, supported: false };
+    }
 }

package/dist/features/about/components/AboutView.js

@@ -2,5 +2,5 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { Anchor, Avatar, Badge, Card, Div, Heading, Row, Section, Span, Stack, Text, TextLink } from "../../../ui/index.js";
 import { ROUTES } from "../../../constants/index.js";
 export function AboutView({ labels = {}, howItems = [], valueItems = [], milestones = [], teamMembers = [], ctaBannerClass = "", renderCtaButtons, }) {
-    return (_jsxs(Div, { className: "-mx-4 md:-mx-6 lg:-mx-8 -mt-6 sm:-mt-8 lg:-mt-10", children: [_jsx(Section, { color: "inverse", tone: "accent-banner", padding: "y-4xl", children: _jsxs(Div, { paddingX: "x-page", className: "max-w-4xl mx-auto text-center", children: [_jsx(Heading, { color: "inverse", level: 1, variant: "none", className: "mb-6", mdSize: "5xl", size: "4xl", weight: "bold", children: labels.title }), _jsx(Text, { color: "inverse-muted", variant: "none", className: "max-w-2xl mx-auto", size: "xl", children: labels.subtitle })] }) }), _jsxs(Div, { paddingX: "x-page", className: "max-w-5xl mx-auto", padding: "y-4xl", children: [_jsxs(Section, { className: "text-center max-w-3xl mx-auto", children: [_jsx(Heading, { level: 2, className: "mb-4", children: labels.missionTitle }), _jsx(Text, { size: "lg", variant: "secondary", className: "leading-relaxed", children: labels.missionText })] }), _jsxs(Section, { children: [_jsx(Heading, { level: 2, className: "mb-12", align: "center", children: labels.howItWorksTitle }), _jsx(Div, { className: "grid md:grid-cols-3", gap: "6", children: howItems.map(({ title, text, icon, tone }) => (_jsxs(Card, { variant: `gradient-${tone ?? "indigo"}`, padding: "md", spacing: "sm", children: [_jsx(Div, { children: _jsx(Span, { size: "4xl", children: icon }) }), _jsx(Heading, { level: 3, children: title }), _jsx(Text, { size: "sm", variant: "secondary", className: "leading-relaxed", children: text })] }, title))) })] }), _jsxs(Section, { children: [_jsx(Heading, { level: 2, className: labels.valuesSubtitle ? "mb-3" : "mb-12", align: "center", children: labels.valuesTitle }), labels.valuesSubtitle && (_jsx(Text, { size: "base", variant: "secondary", align: "center", className: "mb-12 max-w-2xl mx-auto leading-relaxed", children: labels.valuesSubtitle })), _jsx(Div, { className: "grid md:grid-cols-3", gap: "5", children: valueItems.map(({ title, text, icon, detail }) => (_jsxs(Stack, { gap: "3", surface: "default", padding: "lg", rounded: "xl", border: "default", children: [_jsx(Div, { children: _jsx(Span, { size: "3xl", children: icon }) }), _jsx(Heading, { level: 3, children: title }), _jsx(Text, { size: "sm", variant: "secondary", className: "leading-relaxed", children: text }), detail && (_jsx(Text, { size: "sm", color: "muted", className: "leading-relaxed", children: detail }))] }, title))) }), labels.valuesLinkLabel && (_jsx(Div, { className: "mt-8 text-center", children: _jsx(TextLink, { href: String(ROUTES.PUBLIC.ETHICS), size: "sm", children: labels.valuesLinkLabel }) }))] }), _jsxs(Section, { children: [_jsx(Heading, { level: 2, className: "mb-10", align: "center", children: labels.milestonesTitle }), _jsx(Stack, { className: "relative border-l-2 border-primary/30 max-w-2xl mx-auto pl-[2rem]", gap: "xl", children: milestones.map(({ year, text }) => (_jsxs(Div, { className: "relative", children: [_jsx(Div, { className: "absolute -left-10 top-1 w-4 h-4 bg-primary border-2 border-white", rounded: "full" }), _jsx(Span, { size: "xs", weight: "bold", className: "text-primary tracking-wide", transform: "uppercase", children: year }), _jsx(Text, { className: "mt-1", children: text })] }, year))) })] }), teamMembers.length > 0 && (_jsxs(Section, { children: [_jsx(Heading, { level: 2, className: "mb-2", align: "center", children: labels.teamTitle }), labels.teamSubtitle && (_jsx(Text, { size: "lg", variant: "secondary", align: "center", className: "mb-12 max-w-2xl mx-auto", children: labels.teamSubtitle })), _jsx(Div, { className: "grid md:grid-cols-3", gap: "6", children: teamMembers.map((member) => (_jsxs(Stack, { gap: "3", surface: "default", padding: "lg", rounded: "xl", border: "default", align: "center", className: "text-center", children: [_jsx(Avatar, { src: member.photoUrl, name: member.name, alt: member.name, size: "lg" }), _jsx(Heading, { level: 3, children: member.name }), _jsxs(Row, { gap: "xs", wrap: true, justify: "center", children: [_jsx(Span, { size: "xs", weight: "bold", className: "text-primary tracking-wide", transform: "uppercase", children: member.role }), member.isFounder && _jsx(Badge, { variant: "primary", size: "xs", children: "Founder" }), member.isDeveloper && _jsx(Badge, { variant: "secondary", size: "xs", children: "Developer" })] }), _jsx(Text, { size: "sm", variant: "secondary", className: "leading-relaxed", children: member.bio }), member.githubUrl && (_jsx(Anchor, { href: member.githubUrl, tone: "muted", size: "sm", underline: "hover", children: "GitHub \u2197" }))] }, member.name))) })] })), _jsxs(Section, { color: "inverse", tone: "accent-banner", className: `text-center ${ctaBannerClass}`, padding: "xl", rounded: "2xl", children: [_jsx(Heading, { color: "inverse", level: 2, variant: "none", className: "mb-8", size: "3xl", weight: "bold", children: labels.ctaTitle }), renderCtaButtons ? (renderCtaButtons()) : (_jsx(Row, { justify: "center", gap: "3", wrap: true, children: _jsxs(Span, { color: "inverse-muted", size: "sm", children: [labels.ctaSell, " \u00B7 ", labels.ctaShop] }) }))] })] })] }));
+    return (_jsxs(Div, { className: "-mx-4 md:-mx-6 lg:-mx-8 -mt-6 sm:-mt-8 lg:-mt-10", children: [_jsx(Section, { color: "inverse", tone: "accent-banner", padding: "y-4xl", children: _jsxs(Div, { paddingX: "x-page", className: "max-w-4xl mx-auto text-center", children: [_jsx(Heading, { color: "inverse", level: 1, variant: "none", className: "mb-6", mdSize: "5xl", size: "4xl", weight: "bold", children: labels.title }), _jsx(Text, { color: "inverse-muted", variant: "none", className: "max-w-2xl mx-auto", size: "xl", children: labels.subtitle })] }) }), _jsxs(Stack, { gap: "section", paddingX: "x-page", className: "max-w-5xl mx-auto", padding: "y-4xl", children: [_jsxs(Section, { className: "text-center max-w-3xl mx-auto", children: [_jsx(Heading, { level: 2, className: "mb-4", children: labels.missionTitle }), _jsx(Text, { size: "lg", variant: "secondary", className: "leading-relaxed", children: labels.missionText })] }), _jsxs(Section, { children: [_jsx(Heading, { level: 2, className: "mb-12", align: "center", children: labels.howItWorksTitle }), _jsx(Div, { className: "grid md:grid-cols-3", gap: "6", children: howItems.map(({ title, text, icon, tone }) => (_jsxs(Card, { variant: `gradient-${tone ?? "indigo"}`, padding: "md", spacing: "sm", children: [_jsx(Div, { children: _jsx(Span, { size: "4xl", children: icon }) }), _jsx(Heading, { level: 3, color: "inverse", variant: "none", children: title }), _jsx(Text, { size: "sm", color: "inverse-muted", variant: "none", className: "leading-relaxed", children: text })] }, title))) })] }), _jsxs(Section, { children: [_jsx(Heading, { level: 2, className: labels.valuesSubtitle ? "mb-3" : "mb-12", align: "center", children: labels.valuesTitle }), labels.valuesSubtitle && (_jsx(Text, { size: "base", variant: "secondary", align: "center", className: "mb-12 max-w-2xl mx-auto leading-relaxed", children: labels.valuesSubtitle })), _jsx(Div, { className: "grid md:grid-cols-3", gap: "5", children: valueItems.map(({ title, text, icon, detail }) => (_jsxs(Stack, { gap: "3", surface: "default", padding: "lg", rounded: "xl", border: "default", children: [_jsx(Div, { children: _jsx(Span, { size: "3xl", children: icon }) }), _jsx(Heading, { level: 3, children: title }), _jsx(Text, { size: "sm", variant: "secondary", className: "leading-relaxed", children: text }), detail && (_jsx(Text, { size: "sm", color: "muted", className: "leading-relaxed", children: detail }))] }, title))) }), labels.valuesLinkLabel && (_jsx(Div, { className: "mt-8 text-center", children: _jsx(TextLink, { href: String(ROUTES.PUBLIC.ETHICS), size: "sm", children: labels.valuesLinkLabel }) }))] }), _jsxs(Section, { children: [_jsx(Heading, { level: 2, className: "mb-10", align: "center", children: labels.milestonesTitle }), _jsx(Stack, { className: "relative border-l-2 border-primary/30 max-w-2xl mx-auto pl-[2rem]", gap: "xl", children: milestones.map(({ year, text }) => (_jsxs(Div, { className: "relative", children: [_jsx(Div, { className: "absolute -left-10 top-1 w-4 h-4 bg-primary border-2 border-white", rounded: "full" }), _jsx(Span, { size: "xs", weight: "bold", className: "text-primary tracking-wide", transform: "uppercase", children: year }), _jsx(Text, { className: "mt-1", children: text })] }, year))) })] }), teamMembers.length > 0 && (_jsxs(Section, { children: [_jsx(Heading, { level: 2, className: "mb-2", align: "center", children: labels.teamTitle }), labels.teamSubtitle && (_jsx(Text, { size: "lg", variant: "secondary", align: "center", className: "mb-12 max-w-2xl mx-auto", children: labels.teamSubtitle })), _jsx(Div, { className: "grid md:grid-cols-3", gap: "6", children: teamMembers.map((member) => (_jsxs(Stack, { gap: "3", surface: "default", padding: "lg", rounded: "xl", border: "default", align: "center", className: "text-center", children: [_jsx(Avatar, { src: member.photoUrl, name: member.name, alt: member.name, size: "lg" }), _jsx(Heading, { level: 3, children: member.name }), _jsxs(Row, { gap: "xs", wrap: true, justify: "center", children: [_jsx(Span, { size: "xs", weight: "bold", className: "text-primary tracking-wide", transform: "uppercase", children: member.role }), member.isFounder && _jsx(Badge, { variant: "primary", size: "xs", children: "Founder" }), member.isDeveloper && _jsx(Badge, { variant: "secondary", size: "xs", children: "Developer" })] }), _jsx(Text, { size: "sm", variant: "secondary", className: "leading-relaxed", children: member.bio }), member.githubUrl && (_jsx(Anchor, { href: member.githubUrl, tone: "muted", size: "sm", underline: "hover", children: "GitHub \u2197" }))] }, member.name))) })] })), _jsxs(Section, { color: "inverse", tone: "accent-banner", className: `text-center ${ctaBannerClass}`, padding: "xl", rounded: "2xl", children: [_jsx(Heading, { color: "inverse", level: 2, variant: "none", className: "mb-8", size: "3xl", weight: "bold", children: labels.ctaTitle }), renderCtaButtons ? (renderCtaButtons()) : (_jsx(Row, { justify: "center", gap: "3", wrap: true, children: _jsxs(Span, { color: "inverse-muted", size: "sm", children: [labels.ctaSell, " \u00B7 ", labels.ctaShop] }) }))] })] })] }));
 }

package/dist/features/account/components/BuyerAuctionsGuideView.js

@@ -2,6 +2,9 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 import { Gavel, TrendingUp, Trophy, AlertTriangle, Package, XCircle, ShieldCheck } from "lucide-react";
 import { Alert, Div, Heading, Li, Row, Section, Span, Stack, Text, Ul } from "../../../ui/index.js";
 import { GC } from "../../_guide-cls.js";
+import { resolvePublishedValues } from "../../../_internal/shared/content/published-values.js";
+/* Phase 9 — one definition of the refund timeline. See the 🛑 at the call site. */
+const { refundBusinessDaysMin: REFUND_DAYS_MIN, refundBusinessDaysMax: REFUND_DAYS_MAX } = resolvePublishedValues();
 const SECTIONS = [
     {
         Icon: Gavel, title: "How Auctions Work",
@@ -25,7 +28,7 @@ const SECTIONS = [
     },
     {
         Icon: XCircle, iconCls: "w-5 h-5 text-rose-500", title: "Pre-order Cancellations",
-        content: (_jsxs(_Fragment, { children: [_jsxs(Text, { className: `${GC.textMuted} mb-3`, children: ["To cancel a pre-order before the item is shipped, open a support ticket with category ", _jsx(Span, { weight: "bold", children: "Billing & Payment" }), " or ", _jsx(Span, { weight: "bold", children: "Order Issue" }), " and reference your order ID."] }), _jsx(Text, { className: GC.textMuted, children: "After cancellation is accepted, refunds follow the standard timeline: 3\u20137 business days to your original payment method." })] })),
+        content: (_jsxs(_Fragment, { children: [_jsxs(Text, { className: `${GC.textMuted} mb-3`, children: ["To cancel a pre-order before the item is shipped, open a support ticket with category ", _jsx(Span, { weight: "bold", children: "Billing & Payment" }), " or ", _jsx(Span, { weight: "bold", children: "Order Issue" }), " and reference your order ID."] }), _jsxs(Text, { className: GC.textMuted, children: ["After cancellation is accepted, refunds follow the standard timeline:", " ", REFUND_DAYS_MIN, "\u2013", REFUND_DAYS_MAX, " business days to your original payment method."] })] })),
     },
     {
         Icon: ShieldCheck, iconCls: "w-5 h-5 text-emerald-500", title: "Bidding Safety Tips",

package/dist/features/account/components/UserOrdersView.js

@@ -9,6 +9,7 @@ import { PaginatedSelect } from "../../../ui/components/PaginatedSelect.js";
 import { DataListingView } from "../../admin/components/DataListingView.js";
 import { OrderCard } from "../../orders/components/OrdersList.js";
 import { useOrderScope } from "../../orders/components/OrderScopeTabs.js";
+import { ORDER_LANE_TABS } from "../../orders/constants/order-lane-tabs.js";
 import { useSearchParams } from "next/navigation.js";
 const CANCELLABLE_STATUSES = new Set(["pending", "confirmed", "processing"]);
 /*
@@ -34,40 +35,20 @@ const SORT_OPTIONS = [
     { value: sortBy("totalPrice", "DESC"), label: "Highest total" },
     { value: sortBy("totalPrice", "ASC"), label: "Lowest total" },
 ];
-/**
- * Lane tabs — the same auction > offer > standard split the cart and checkout
- * use, viewed after the fact. Every `id` is EXACTLY a stored
- * `OrderDocument.orderType` value (or "" for All): a tab id that doesn't
- * match a real stored value returns zero rows forever with no error anywhere
- * (CLAUDE.md Root Cause #33).
+/*
+ * Lane tabs now come from `features/orders/constants/order-lane-tabs`, shared
+ * with the seller's order list.
  *
- * "standard" is filtered in memory server-side, because orders written before
- * `orderType` existed have no such field and a Firestore `==` would exclude
- * every one of them.
+ * They were defined here as a local array literal, which meant the seller's
+ * list could not have them without a tenth hand-written copy of one union
+ * (Root Cause #61). The shared version derives from a
+ * `Record<OrderType, string>`, so a sixth lane is a compile error rather than
+ * a tab that silently never appears — which is the bug this array already had
+ * once, shipping four tabs for five lanes.
+ *
+ * Every id-correctness note that lived here (byte-exact stored values, the
+ * unhyphenated `preorder`, and the in-memory `standard` filter) moved with it.
  */
-const ORDER_LANE_TABS = [
-    { id: "", label: "All" },
-    { id: "standard", label: "Normal" },
-    { id: "auction", label: "Auction wins" },
-    { id: "offer", label: "Offer wins" },
-    /*
-     * 🛑 `"preorder"` WITHOUT A HYPHEN, and this is not a typo to tidy up.
-     *
-     * `OrderType` (`orders/utils/order-splitter.ts`) spells it `"preorder"`,
-     * while `ListingType` spells the same concept `"pre-order"` WITH a hyphen.
-     * Two unions, two spellings, and the tab must match the one actually stored
-     * on `OrderDocument.orderType` — a tab id matching no stored value returns
-     * zero rows forever with no error anywhere (Root Cause #33), which is
-     * exactly the failure this file's own comment above warns about.
-     *
-     * These two lanes existed in the union and had no tab, so pre-order and
-     * prize-draw orders were reachable only by landing on "All" and scrolling.
-     * Five lanes, four tabs — the eighth instance this session of a
-     * hand-written enumeration drifting from the union it filters.
-     */
-    { id: "preorder", label: "Pre-orders" },
-    { id: "prize-draw", label: "Prize draws" },
-];
 /**
  * Payment-method tabs — a THIRD axis, independent of the lane tabs above and
  * the lifecycle scope beside them.
@@ -83,9 +64,25 @@ const ORDER_LANE_TABS = [
  * clause is silently dropped and the chip returns the ENTIRE order list while
  * looking like a filter (Root Cause #62).
  */
+/*
+ * 🛑 MEASURED 2026-10-22 — this chip group was INERT, and the comment above it
+ * explained why it should not have been while describing the wrong half.
+ *
+ * `buildFilters` emits `paymentMethod==emi` inside `filters`, and
+ * `/api/user/orders` regex-extracts only `status==` and `orderType==` from
+ * that string. Every other clause is silently dropped — so all three chips
+ * returned the buyer's ENTIRE order list while looking exactly like a working
+ * filter. The note above was careful about the SIEVE allowlist (Root Cause
+ * #62) and the route's own parser was the break, one layer earlier.
+ *
+ * 🛑 And "EMI plans" could not be a `paymentMethod` value any more regardless:
+ * since 0f an instalment order's tender is `online` / `upi_manual` / `cash`,
+ * so the id is now `emiEnabled`, refined in memory by the route alongside the
+ * other two. `cod` and `online` stay real stored `paymentMethod` values.
+ */
 const PAYMENT_METHOD_TABS = [
     { id: "", label: "Any" },
-    { id: "emi", label: "EMI plans" },
+    { id: "emiEnabled", label: "EMI plans" },
     { id: "cod", label: "Cash on delivery" },
     { id: "online", label: "Paid online" },
 ];
@@ -153,7 +150,17 @@ export function UserOrdersView({ onOrderClick }) {
         buildFilters: (state) => [
             state.status ? sieveFilter("status", SIEVE_OP.EQ, state.status) : null,
             state.orderType ? sieveFilter("orderType", SIEVE_OP.EQ, state.orderType) : null,
-            state.paymentMethod ? sieveFilter("paymentMethod", SIEVE_OP.EQ, state.paymentMethod) : null,
+            /*
+             * 🛑 `emiEnabled` is NOT a `paymentMethod`, so it gets its own clause
+             * key — the route refines both in memory (see its note), and emitting
+             * `paymentMethod==emiEnabled` would be a filter for a value no order
+             * can hold.
+             */
+            state.paymentMethod
+                ? state.paymentMethod === "emiEnabled"
+                    ? sieveFilter("emiEnabled", SIEVE_OP.EQ, "true")
+                    : sieveFilter("paymentMethod", SIEVE_OP.EQ, state.paymentMethod)
+                : null,
         ]
             .filter(Boolean)
             .join(",") || undefined,
@@ -162,7 +169,12 @@ export function UserOrdersView({ onOrderClick }) {
         // in flight" without those two questions fighting over one control.
         buildExtraParams: () => orderScope.extraParams,
         renderAboveContent: orderScope.renderAboveContent,
-        renderFilterPanel: ({ pendingFilters, setPendingFilters }) => (_jsxs(Stack, { gap: "md", children: [_jsx(FilterChipGroup, { label: "Type", tabs: ORDER_LANE_TABS, value: pendingFilters.orderType ?? "", onChange: (id) => setPendingFilters((prev) => ({ ...prev, orderType: id })) }), _jsx(FilterChipGroup, { label: "Payment", tabs: PAYMENT_METHOD_TABS, value: pendingFilters.paymentMethod ?? "", onChange: (id) => setPendingFilters((prev) => ({ ...prev, paymentMethod: id })) }), _jsx(Div, { children: _jsx(PaginatedSelect, { value: pendingFilters.status || null, onChange: (v) => setPendingFilters((p) => ({ ...p, status: v ?? "" })), options: STATUS_OPTIONS, placeholder: "All statuses", ariaLabel: "Filter by order status" }) })] })),
+        renderFilterPanel: ({ pendingFilters, setPendingFilters }) => (_jsxs(Stack, { gap: "md", children: [_jsx(FilterChipGroup, { label: "Type", 
+                    // No cast: `FilterChipGroup.tabs` is `readonly FilterChipGroupTab[]`,
+                    // which the shared constant already satisfies. The `as unknown as`
+                    // here was working around the local `as const` literal, not a real
+                    // mismatch.
+                    tabs: ORDER_LANE_TABS, value: pendingFilters.orderType ?? "", onChange: (id) => setPendingFilters((prev) => ({ ...prev, orderType: id })) }), _jsx(FilterChipGroup, { label: "Payment", tabs: PAYMENT_METHOD_TABS, value: pendingFilters.paymentMethod ?? "", onChange: (id) => setPendingFilters((prev) => ({ ...prev, paymentMethod: id })) }), _jsx(Div, { children: _jsx(PaginatedSelect, { value: pendingFilters.status || null, onChange: (v) => setPendingFilters((p) => ({ ...p, status: v ?? "" })), options: STATUS_OPTIONS, placeholder: "All statuses", ariaLabel: "Filter by order status" }) })] })),
         renderCards: (rows, _view, _selection, isLoading) => {
             if (isLoading) {
                 return (_jsx(Stack, { gap: "md", children: Array.from({ length: 3 }).map((_, i) => (_jsx(Div, { className: "h-24 animate-pulse border border-[var(--appkit-color-border)]", rounded: "xl" }, i))) }));

package/dist/features/admin/components/AdminCouponEditorView.js

@@ -22,11 +22,28 @@ const __P = {
 const __O = {
     yAuto: "overflow-y-auto",
 };
+/*
+ * 🛑 Not derived from `COUPON_TYPE_LABELS` on purpose, and the reason is the
+ * opposite of what the duplication framework usually says.
+ *
+ * `points_earn` is OFFERED here, so an admin can create a points offer — but
+ * the editor's discount fields (`discount.value`, `maxDiscount`,
+ * `minPurchase`) are meaningless for it, and it carries `pointsPercent`
+ * instead. Deriving the list would silently add the option the moment the
+ * union grew, which is how `AdminEventsView` ended up offering `contest`,
+ * `giveaway` and `flash-sale` — three values `EventType` never had, each
+ * matching zero rows forever (Root Cause #72).
+ *
+ * So the list is explicit and the entry is deliberate.
+ * `audit-filter-tab-enums` covers the chip row, which is the surface where
+ * coverage actually matters.
+ */
 const TYPE_OPTIONS = [
     { label: "Percentage Discount", value: "percentage" },
     { label: "Fixed Amount Discount", value: "fixed" },
     { label: "Free Shipping", value: "free_shipping" },
     { label: "Buy X Get Y", value: "buy_x_get_y" },
+    { label: "Points Back (awards points, no discount)", value: "points_earn" },
 ];
 // --- Helpers -----------------------------------------------------------------
 function toCouponCode(str) {

package/dist/features/admin/components/AdminIntegrationsView.d.ts

@@ -0,0 +1,55 @@
+import React from "react";
+import { type IntegrationPatch } from "../../../_internal/shared/features/admin/integrations";
+import type { SiteSettingsDocument } from "../schemas/firestore";
+/**
+ * Admin → Site → Integrations. The four switches that decide whether we take
+ * money online, send customer email, book couriers, and offer buyers a support
+ * surface.
+ *
+ * ## Why this page exists rather than a Site Settings tab
+ *
+ * A kill switch for payments has to be findable without hunting a tab strip.
+ * It is also the one surface where the four switches are visible TOGETHER,
+ * which matters because their off-states are not comparable: three of them
+ * stop something and one of them selects a working alternative.
+ *
+ * ## 🛑 The model is the authority; this file renders it
+ *
+ * Every label, summary, consequence, severity and settings path comes from
+ * `INTEGRATIONS`, and the current state comes from `readIntegrationStates` —
+ * **the same expression the route guards resolve through**. That is the whole
+ * point: `withOnlinePaymentEnabled` used to hand-write the payments half, and
+ * the first draft of the model reproduced it WRONG (it read `razorpayEnabled`
+ * alone against a guard that is an OR across both gateways), so with PhonePe
+ * on and Razorpay off a page would have reported "payments OFF" while all six
+ * `/api/payment` routes were open and taking money.
+ *
+ * So this view must never derive a state, a consequence or a field name of its
+ * own. If a row needs a new fact, it goes on the descriptor.
+ *
+ * ## 🛑 `offConsequence` IS the confirmation body
+ *
+ * The registry's `disable-integration` ActionDef deliberately ships an empty
+ * `body`, because the consequence differs per integration and copying each
+ * string into the registry would be a second place for it to drift from. The
+ * dialog is composed here, from the descriptor, at render time.
+ */
+export interface AdminIntegrationsViewProps {
+    /**
+     * The settings document, server-fetched.
+     *
+     * 🛑 `Partial` because this page must render against an older document that
+     * predates `support.enabled`. `readIntegrationStates` chooses a per-field
+     * default for exactly that case — and they are NOT a uniform `?? false`:
+     * email and support default ON, because a missing field must not read as
+     * "we stopped talking to customers".
+     */
+    settings: Partial<SiteSettingsDocument> | null;
+    /**
+     * Persist a settings patch. Supplied by the consumer page so this component
+     * carries no endpoint and no fetch — `PUT /api/admin/site`, which already
+     * records one `recordAdminAction` per write.
+     */
+    onSave: (patch: IntegrationPatch) => Promise<void>;
+}
+export declare function AdminIntegrationsView({ settings, onSave }: AdminIntegrationsViewProps): React.JSX.Element;