@mohasinac/appkit 4.62.0 → 4.63.0

package/dist/features/seller/components/SellerOrdersView.js

@@ -2,7 +2,13 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { formatPhysicalLocation } from "../../../utils/physical-location.js";
 import { OrderAddonBadges } from "../../orders/components/OrderAddonBadges.js";
+import { OrderProvenanceCard } from "../../orders/components/OrderProvenanceCard.js";
+import { groupOrderItemsByLine } from "../../orders/utils/bundle-grouping.js";
 import { normalizeError } from "../../../errors/normalize.js";
+import { formatCurrency } from "../../../utils/number.formatter.js";
+// The defining module, not a barrel (Root Cause #18). Maps a server error CODE
+// to user-facing copy; it can never return server text, which is the point.
+import { toUserMessage } from "../../../errors/error-display-map.js";
 import { Row, SIEVE_OP, sieveFilter } from "@mohasinac/appkit/client";
 import { sortBy } from "@mohasinac/appkit/client";
 import React, { useState, useCallback } from "react";
@@ -12,6 +18,7 @@ import { SELLER_ENDPOINTS } from "../../../constants/api-endpoints.js";
 import { Badge, Button, Div, FilterChipGroup, SideDrawer, Span, Stack, Text, useToast } from "../../../ui/index.js";
 import { SELLER_ORDER_STATUS_TABS } from "../../admin/constants/filter-tabs.js";
 import { useOrderScope } from "../../orders/components/OrderScopeTabs.js";
+import { ORDER_LANE_TABS } from "../../orders/constants/order-lane-tabs.js";
 import { OrderStatusValues } from "../../orders/schemas/firestore.js";
 import { isManualPaymentMethod } from "../../orders/constants/payment-window.js";
 import { ACTIONS } from "../../../_internal/shared/actions/action-registry.js";
@@ -21,6 +28,7 @@ import { SectionForm, useSectionFormNav, buildSectionsFromSchema, visibleValues,
 import { useFormShellState, FormShellContext } from "../../../ui/forms/index.js";
 import { applyZodIssues } from "../../../ui/forms/apply-zod-issues.js";
 import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary.js";
+import { DispatchForm } from "./DispatchForm.js";
 import { PhysicalLocationModal } from "./PhysicalLocationModal.js";
 import { ROUTES } from "../../../constants/index.js";
 import { toRecordArray, toCurrency, toStringValue } from "../hooks/useSellerListingData.js";
@@ -31,6 +39,13 @@ import { MediaImage } from "../../media/MediaImage.js";
 const __O = {
     yAuto: "overflow-y-auto",
 };
+/*
+ * The hairline that separates each panel section inside the order drawer.
+ * Named because the drawer gained its fourth section with D55's balance
+ * collector, and four copies of one border declaration is four places a
+ * future token rename has to find.
+ */
+const SECTION_DIVIDER = "border-t border-[var(--appkit-color-border)]";
 const DEFAULT_SORT = "-createdAt";
 const SORT_OPTIONS = [
     { value: sortBy("createdAt", "DESC"), label: "Newest" },
@@ -60,6 +75,14 @@ const UPDATE_STATUS_OPTIONS = [
     { value: "delivered", label: "Delivered" },
     { value: "cancelled", label: "Cancelled" },
 ];
+/**
+ * One item row. Extracted verbatim when grouping landed so the single and
+ * grouped paths cannot render differently — two copies of this markup is how
+ * the field-name bug below would come back on one path only.
+ */
+function sellerOrderItemRow(item, key) {
+    return (_jsxs(Row, { paddingY: "y-xs-tall", padding: "x-sm", align: "center", justify: "between", gap: "3", children: [_jsxs(Row, { align: "center", gap: "sm", className: "min-w-0", children: [_jsx(Div, { className: "h-10 w-10 shrink-0", rounded: "md", overflow: "hidden", children: _jsx(MediaImage, { src: item.image, alt: item.title ?? "Order item", size: "thumbnail" }) }), _jsxs(Div, { className: "min-w-0", children: [_jsx(Text, { size: "sm", className: "truncate", weight: "medium", children: item.productTitle ?? item.title ?? item.productId ?? "Item" }), _jsxs(Text, { size: "xs", className: "text-[var(--appkit-color-text-muted)]", children: ["Qty: ", item.quantity ?? 1] })] })] }), _jsx(Text, { size: "sm", className: "shrink-0", weight: "medium", children: toCurrency(item.totalPrice ?? item.unitPrice ?? item.price ?? 0) })] }, key));
+}
 /**
  * Manual-payment state for the seller's read-only badge. Derived from the same
  * two fields the admin queue uses (`paymentProofUrl` + `paymentReviewOutcome`)
@@ -82,6 +105,69 @@ const EMI_INSTALLMENT_BADGE_VARIANT = {
     pending: "warning",
     overdue: "danger",
 };
+/**
+ * D55 — the seller's half of the pre-order balance.
+ *
+ * ## 🛑 Opening is an EVENT, and the control has to say so
+ *
+ * The balance has existed on the order since checkout. What the seller is
+ * declaring here is that the GOODS HAVE ARRIVED — a pre-order's premise is
+ * that the item does not exist yet, so asking for the balance before then is
+ * asking a buyer to fund inventory. The button's label and its blurb both
+ * name that, rather than saying "request payment", which would read as a
+ * nudge the seller could send at any time.
+ *
+ * ## Why no Cancel and no confirm dialog
+ *
+ * Opening takes money NOWHERE and reverses by simply not chasing it — the
+ * worst case is a buyer told a week early. A confirmation step on a
+ * non-destructive, idempotent action is the dialog people learn to click
+ * through, which is what makes the ones on real deletions worthless.
+ *
+ * ## The states are the seller's, not the buyer's
+ *
+ * Once opened the seller cannot act again, so every later state is read-only
+ * here: "with the buyer", "proof submitted, we are checking it", "paid". The
+ * verification is staff-only and deliberately NOT offered — a seller
+ * approving payment to themselves is not a review.
+ */
+function SellerBalanceBlock({ orderId, apiBase, balance, balanceDue, currency, onOpened, }) {
+    const [opening, setOpening] = React.useState(false);
+    const [error, setError] = React.useState(null);
+    if (balance) {
+        const label = balance.status === "paid"
+            ? "Balance paid"
+            : balance.status === "submitted"
+                ? "Balance proof under review"
+                : balance.status === "rejected"
+                    ? "Balance proof rejected — the buyer has been asked to resend"
+                    : "Balance open — awaiting the buyer";
+        return (_jsxs(Div, { children: [_jsx(Text, { size: "sm", weight: "semibold", color: "primary", children: "Pre-order balance" }), _jsxs(Text, { className: "mt-1", color: "muted", size: "xs", children: [formatCurrency(balance.amount, currency), " \u2014 ", label, balance.transactionId ? ` · Ref ${balance.transactionId}` : ""] })] }));
+    }
+    const handleOpen = async () => {
+        setOpening(true);
+        setError(null);
+        try {
+            const res = await fetch(`${apiBase}/${orderId}/open-balance`, {
+                method: "POST",
+                credentials: "include",
+            });
+            if (!res.ok) {
+                setError("Could not open the balance. Try again, or contact support if it persists.");
+                return;
+            }
+            onOpened();
+        }
+        catch (err) {
+            void normalizeError(err);
+            setError("Could not reach the server. Check your connection and try again.");
+        }
+        finally {
+            setOpening(false);
+        }
+    };
+    return (_jsxs(Div, { children: [_jsx(Text, { size: "sm", weight: "semibold", color: "primary", children: "Pre-order balance" }), _jsxs(Text, { className: "mt-1", color: "muted", size: "xs", children: [formatCurrency(balanceDue, currency), " is still owed on this order. Open it once the stock is physically with you \u2014 the buyer is notified and gets a week to pay, and the parcel ships when it clears."] }), _jsx(Row, { className: "mt-2", gap: "3", children: _jsx(Button, { variant: "primary", size: "sm", disabled: opening, onClick: handleOpen, children: opening ? "Opening…" : "Stock has arrived — open balance" }) }), error && (_jsx(Div, { textSize: "xs", className: "mt-2 border border-error/20", color: "error", surface: "danger-surface", padding: "inlineSm", rounded: "lg", children: error }))] }));
+}
 /**
  * Fetches + renders one order's full detail content (items, address,
  * payment, EMI, status/tracking update form). Shared by the seller orders
@@ -198,8 +284,33 @@ export function SellerOrderDetailPanel({ orderId, apiBase, onClose, }) {
                 body: JSON.stringify(payload),
             });
             if (!res.ok) {
-                const d = await res.json().catch(() => ({}));
-                throw new Error(d?.error ?? "Failed to update order");
+                const d = (await res.json().catch(() => ({})));
+                /*
+                 * 🛑 FIELD ERRORS GO ON THE FIELD. The server already sends them.
+                 *
+                 * `mapToHttpError` answers a rejected body with
+                 * `{ status: 400, code: VALIDATION_FAILED, message: "Validation
+                 * failed", issues }` — the per-field detail is ON THE WIRE. This
+                 * handler used to throw `d.error` and render it in the banner below,
+                 * so the seller saw a bare "Validation failed" with nothing marked and
+                 * no way to tell WHICH field was wrong. Rule #9 §6.
+                 *
+                 * `applyZodIssues` keys by the full dotted path, so a nested field
+                 * lands on itself rather than collapsing onto `issue.path[0]`.
+                 */
+                if (Array.isArray(d.issues) && d.issues.length > 0) {
+                    applyZodIssues(d.issues, form.setFieldError);
+                    return;
+                }
+                /*
+                 * 🛑 NEVER the server's own message, and this is not hypothetical.
+                 * `d.error` is server text; rendering it is how a Node
+                 * `MODULE_NOT_FOUND` with a `/var/task/.next/...` require stack was
+                 * once shown inside a buyer's "Place your bid" modal (Root Cause #86).
+                 * `toUserMessage` resolves through `errors.codes.*`, terminates at
+                 * UNKNOWN, and cannot return server internals.
+                 */
+                throw new Error(toUserMessage(d.code));
             }
             const updated = await res.json();
             const next = (updated?.data ?? updated);
@@ -217,8 +328,19 @@ export function SellerOrderDetailPanel({ orderId, apiBase, onClose, }) {
             });
         }
         catch (err) {
-            void normalizeError(err);
-            setSaveError(err.message);
+            /*
+             * `normalizeError`'s RESULT, not an `as Error` cast. The cast asserted a
+             * shape nothing checked, and the only reason it happened to work is that
+             * every throw above is one we construct — a rejected promise from `fetch`
+             * or a JSON parse failure is not an `Error` by that assertion's logic,
+             * it just happens to be one at runtime.
+             *
+             * What reaches the banner is now bounded: either `toUserMessage(code)`
+             * from the throw above (mapped copy, never server text) or a browser-level
+             * network message. Field-level problems never get here at all — they were
+             * routed to the fields by `applyZodIssues`.
+             */
+            setSaveError(normalizeError(err).message);
         }
         finally {
             setSaving(false);
@@ -249,21 +371,41 @@ export function SellerOrderDetailPanel({ orderId, apiBase, onClose, }) {
     const addrLine = typeof rawAddr === "string" && rawAddr.trim()
         ? rawAddr.trim()
         : [addr.addressLine1, addr.city, addr.state, addr.pincode].filter(Boolean).join(", ");
-    return (_jsxs(_Fragment, { children: [loading && (_jsx(Row, { align: "center", justify: "center", padding: "y-4xl", children: _jsx(Div, { className: "h-6 w-6 animate-spin border-2 border-[var(--appkit-color-primary)] border-t-transparent", rounded: "full" }) })), fetchError && (_jsx(Div, { textSize: "sm", className: "mx-4 mt-4 border border-error/20", color: "error", surface: "danger-surface", padding: "inline", rounded: "lg", children: fetchError })), order && !loading && (_jsxs(Stack, { gap: "none", children: [_jsxs(Stack, { className: `flex-1 ${__O.yAuto}`, gap: "5", padding: "md", children: [_jsxs(Row, { align: "center", justify: "between", children: [_jsx(Badge, { variant: STATUS_BADGE_VARIANT[order.status ?? ""] ?? "default", children: order.status ?? "Unknown" }), _jsx(Text, { size: "sm", className: "text-[var(--appkit-color-text-muted)]", children: toRelativeDate(order.createdAt) })] }), (order.items ?? []).length > 0 && (_jsxs(Div, { children: [_jsx(Text, { size: "sm", className: "text-[var(--appkit-color-text)] mb-2", weight: "semibold", children: "Items" }), _jsx(Div, { className: "divide-y divide-[var(--appkit-color-border)] divide-[var(--appkit-color-border)] border border-[var(--appkit-color-border)]", rounded: "lg", children: (order.items ?? []).map((item, i) => (_jsxs(Row, { paddingY: "y-xs-tall", padding: "x-sm", align: "center", justify: "between", gap: "3", children: [_jsxs(Row, { align: "center", gap: "sm", className: "min-w-0", children: [_jsx(Div, { className: "h-10 w-10 shrink-0", rounded: "md", overflow: "hidden", children: _jsx(MediaImage, { src: item.image, alt: item.title ?? "Order item", size: "thumbnail" }) }), _jsxs(Div, { className: "min-w-0", children: [_jsx(Text, { size: "sm", className: "truncate", weight: "medium", children: item.productTitle ?? item.title ?? item.productId ?? "Item" }), _jsxs(Text, { size: "xs", className: "text-[var(--appkit-color-text-muted)]", children: ["Qty: ", item.quantity ?? 1] })] })] }), _jsx(Text, { size: "sm", className: "shrink-0", weight: "medium", children: toCurrency(item.totalPrice ?? item.unitPrice ?? item.price ?? 0) })] }, i))) })] })), _jsx(OrderAddonBadges, { order: order, variant: "detail" }), order.giftWrapAddon && (_jsxs(Div, { className: "border border-[var(--appkit-color-primary-200)] dark:border-[var(--appkit-color-primary-800)]", surface: "subtle", padding: "inline", rounded: "lg", children: [_jsx(Text, { size: "sm", weight: "semibold", children: "\uD83C\uDF81 Gift wrap requested" }), order.giftWrapMessage && (_jsxs(Text, { size: "sm", className: "mt-1 text-[var(--appkit-color-text-muted)]", children: ["\u201C", order.giftWrapMessage, "\u201D"] }))] })), _jsxs(Row, { surface: "muted", padding: "inline", align: "center", justify: "between", rounded: "lg", children: [_jsx(Text, { size: "sm", weight: "semibold", children: "Total" }), _jsx(Text, { size: "sm", className: "text-[var(--appkit-color-primary)]", weight: "bold", children: toCurrency(order.totalAmount ?? order.totalPrice ?? 0) })] }), addrLine && (_jsxs(Div, { children: [_jsx(Text, { size: "sm", className: "mb-1", weight: "semibold", children: "Shipping address" }), _jsx(Text, { size: "sm", className: "text-[var(--appkit-color-text-muted)]", children: [String(addr.fullName ?? ""), addrLine].filter(Boolean).join(" · ") })] })), order.paymentMethod && (_jsxs(Div, { children: [_jsxs(Row, { align: "center", justify: "between", className: "mb-1", gap: "3", children: [_jsx(Text, { size: "sm", weight: "semibold", children: "Payment" }), isManualPaymentMethod(order.paymentMethod) && (_jsx(Badge, { variant: sellerPaymentBadge(order).variant, children: sellerPaymentBadge(order).label }))] }), _jsx(Text, { size: "sm", className: "text-[var(--appkit-color-text-muted)]", transform: "capitalize", children: order.paymentMethod }), isManualPaymentMethod(order.paymentMethod) && order.paymentTransactionId && (_jsxs(Text, { size: "xs", color: "muted", className: "mt-1", children: ["UTR: ", order.paymentTransactionId] }))] })), order.emiEnabled && (_jsxs(Div, { className: "border-t border-[var(--appkit-color-border)]", padding: "t-md", children: [_jsxs(Row, { align: "center", justify: "between", className: "mb-2", children: [_jsxs(Text, { size: "sm", weight: "semibold", children: ["EMI plan ", order.emiTenureMonths ? `· ${order.emiTenureMonths} months` : ""] }), _jsx(Badge, { variant: order.emiComplete ? "success" : "warning", children: order.emiComplete ? "Fully paid" : "In progress" })] }), _jsxs(Row, { align: "center", justify: "between", className: "mb-2", children: [_jsx(Text, { size: "xs", color: "muted", children: "Token collected" }), _jsx(Text, { size: "xs", weight: "medium", children: toCurrency(order.emiTokenAmount ?? 0) })] }), _jsxs(Row, { align: "center", justify: "between", className: "mb-3", children: [_jsx(Text, { size: "xs", color: "muted", children: "Remaining balance" }), _jsx(Text, { size: "xs", weight: "medium", children: toCurrency(order.emiRemainingBalance ?? 0) })] }), _jsx(Div, { className: "divide-y divide-[var(--appkit-color-border)] border border-[var(--appkit-color-border)]", rounded: "lg", children: (order.emiInstallments ?? []).map((inst) => (_jsxs(Row, { paddingY: "y-xs-tall", padding: "x-sm", align: "center", justify: "between", gap: "3", children: [_jsxs(Div, { className: "min-w-0", children: [_jsxs(Text, { size: "sm", weight: "medium", children: ["Installment ", inst.index, " \u00B7 ", toCurrency(inst.amount)] }), _jsx(Text, { size: "xs", color: "muted", children: inst.status === "paid" && inst.paidAt
-                                                                ? `Paid ${toRelativeDate(inst.paidAt)}`
-                                                                : inst.dueDate
-                                                                    ? `Due ${toRelativeDate(inst.dueDate)}`
-                                                                    : "" })] }), _jsxs(Row, { align: "center", gap: "sm", className: "shrink-0", children: [_jsx(Badge, { variant: EMI_INSTALLMENT_BADGE_VARIANT[inst.status] ?? "default", children: inst.status }), inst.status !== "paid" && (_jsx(Button, { action: ACTIONS.STORE["mark-installment-paid"], size: "sm", variant: "outline", isLoading: markingPaidIndex === inst.index, disabled: markingPaidIndex !== null, onClick: () => handleMarkInstallmentPaid(inst.index), children: "Mark paid" }))] })] }, inst.index))) }), emiError && (_jsx(Div, { textSize: "xs", className: "mt-2 border border-error/20", color: "error", surface: "danger-surface", padding: "inlineSm", rounded: "lg", children: emiError }))] })), _jsxs(Stack, { className: "border-t border-[var(--appkit-color-border)]", padding: "t-md", gap: "3", children: [_jsxs(FormShellContext.Provider, { value: form.shellCtx, children: [_jsx(FormErrorSummary, {}), _jsx(SectionForm, { sections: sections, values: draft, onChange: (partial) => setDraft((d) => ({ ...d, ...partial })), onSubmit: () => {
-                                                    // SectionForm scrolls to the first erroring section and then
-                                                    // submits regardless, so the guard lives here.
-                                                    form.clearErrors();
-                                                    const parsed = sellerOrderUpdateSchema.safeParse(visibleValues(sellerOrderUpdateSchema, draft));
-                                                    if (!parsed.success) {
-                                                        applyZodIssues(parsed.error.issues, form.setFieldError);
-                                                        return;
-                                                    }
-                                                    void handleSave();
-                                                }, onValidationChange: () => form.validate(draft), schema: sellerOrderUpdateSchema, openIds: nav.openIds, onOpenChange: nav.setOpenIds, submitLabel: "Save", cancelLabel: "Close", onCancel: onClose, isLoading: saving })] }), saveError && (_jsx(Div, { textSize: "xs", className: "border border-error/20", color: "error", surface: "danger-surface", padding: "inlineSm", rounded: "lg", children: saveError }))] })] }), _jsxs(Row, { border: "top", paddingY: "y-sm-tall", padding: "x-md", align: "center", justify: "end", gap: "3", children: [_jsx(Button, { variant: "outline", onClick: onClose, disabled: saving, children: "Close" }), _jsx(Button, { onClick: handleSave, isLoading: saving, disabled: saving, children: "Save" })] })] }))] }));
+    return (_jsxs(_Fragment, { children: [loading && (_jsx(Row, { align: "center", justify: "center", padding: "y-4xl", children: _jsx(Div, { className: "h-6 w-6 animate-spin border-2 border-[var(--appkit-color-primary)] border-t-transparent", rounded: "full" }) })), fetchError && (_jsx(Div, { textSize: "sm", className: "mx-4 mt-4 border border-error/20", color: "error", surface: "danger-surface", padding: "inline", rounded: "lg", children: fetchError })), order && !loading && (_jsx(Stack, { gap: "none", children: _jsxs(Stack, { className: `flex-1 ${__O.yAuto}`, gap: "5", padding: "md", children: [_jsxs(Row, { align: "center", justify: "between", children: [_jsx(Badge, { variant: STATUS_BADGE_VARIANT[order.status ?? ""] ?? "default", children: order.status ?? "Unknown" }), _jsx(Text, { size: "sm", className: "text-[var(--appkit-color-text-muted)]", children: toRelativeDate(order.createdAt) })] }), _jsx(OrderProvenanceCard, { sourceContext: order.sourceContext, currency: order.currency }), (order.items ?? []).length > 0 && (_jsxs(Div, { children: [_jsx(Text, { size: "sm", className: "text-[var(--appkit-color-text)] mb-2", weight: "semibold", children: "Items" }), _jsx(Div, { className: "divide-y divide-[var(--appkit-color-border)] divide-[var(--appkit-color-border)] border border-[var(--appkit-color-border)]", rounded: "lg", children: groupOrderItemsByLine(order.items ?? []).map((group, gi) => group.kind === "single" ? (sellerOrderItemRow(group.item, `s-${group.index}`)) : (_jsxs(Div, { children: [_jsxs(Row, { paddingY: "y-xs", padding: "x-sm", align: "center", gap: "sm", surface: "muted", children: [_jsx(Text, { size: "xs", weight: "semibold", children: group.groupTitle ?? "Grouped purchase" }), _jsx(Text, { size: "xs", className: "text-[var(--appkit-color-text-muted)]", children: `${group.memberCount} ${group.memberCount === 1 ? "item" : "items"} · one line` })] }), _jsx(Div, { paddingX: "l-md", children: group.items.map(({ item, index }) => sellerOrderItemRow(item, `m-${index}`)) })] }, `g-${gi}`))) })] })), _jsx(OrderAddonBadges, { order: order, variant: "detail" }), order.giftWrapAddon && (_jsxs(Div, { className: "border border-[var(--appkit-color-primary-200)] dark:border-[var(--appkit-color-primary-800)]", surface: "subtle", padding: "inline", rounded: "lg", children: [_jsx(Text, { size: "sm", weight: "semibold", children: "\uD83C\uDF81 Gift wrap requested" }), order.giftWrapMessage && (_jsxs(Text, { size: "sm", className: "mt-1 text-[var(--appkit-color-text-muted)]", children: ["\u201C", order.giftWrapMessage, "\u201D"] }))] })), _jsxs(Row, { surface: "muted", padding: "inline", align: "center", justify: "between", rounded: "lg", children: [_jsx(Text, { size: "sm", weight: "semibold", children: "Total" }), _jsx(Text, { size: "sm", className: "text-[var(--appkit-color-primary)]", weight: "bold", children: toCurrency(order.totalAmount ?? order.totalPrice ?? 0) })] }), addrLine && (_jsxs(Div, { children: [_jsx(Text, { size: "sm", className: "mb-1", weight: "semibold", children: "Shipping address" }), _jsx(Text, { size: "sm", className: "text-[var(--appkit-color-text-muted)]", children: [String(addr.fullName ?? ""), addrLine].filter(Boolean).join(" · ") })] })), order.paymentMethod && (_jsxs(Div, { children: [_jsxs(Row, { align: "center", justify: "between", className: "mb-1", gap: "3", children: [_jsx(Text, { size: "sm", weight: "semibold", children: "Payment" }), isManualPaymentMethod(order.paymentMethod) && (_jsx(Badge, { variant: sellerPaymentBadge(order).variant, children: sellerPaymentBadge(order).label }))] }), _jsx(Text, { size: "sm", className: "text-[var(--appkit-color-text-muted)]", transform: "capitalize", children: order.paymentMethod }), isManualPaymentMethod(order.paymentMethod) && order.paymentTransactionId && (_jsxs(Text, { size: "xs", color: "muted", className: "mt-1", children: ["UTR: ", order.paymentTransactionId] }))] })), order.emiEnabled && (_jsxs(Div, { className: SECTION_DIVIDER, padding: "t-md", children: [_jsxs(Row, { align: "center", justify: "between", className: "mb-2", children: [_jsxs(Text, { size: "sm", weight: "semibold", children: ["EMI plan ", order.emiTenureMonths ? `· ${order.emiTenureMonths} months` : ""] }), _jsx(Badge, { variant: order.emiComplete ? "success" : "warning", children: order.emiComplete ? "Fully paid" : "In progress" })] }), _jsxs(Row, { align: "center", justify: "between", className: "mb-2", children: [_jsx(Text, { size: "xs", color: "muted", children: "Token collected" }), _jsx(Text, { size: "xs", weight: "medium", children: toCurrency(order.emiTokenAmount ?? 0) })] }), _jsxs(Row, { align: "center", justify: "between", className: "mb-3", children: [_jsx(Text, { size: "xs", color: "muted", children: "Remaining balance" }), _jsx(Text, { size: "xs", weight: "medium", children: toCurrency(order.emiRemainingBalance ?? 0) })] }), _jsx(Div, { className: "divide-y divide-[var(--appkit-color-border)] border border-[var(--appkit-color-border)]", rounded: "lg", children: (order.emiInstallments ?? []).map((inst) => (_jsxs(Row, { paddingY: "y-xs-tall", padding: "x-sm", align: "center", justify: "between", gap: "3", children: [_jsxs(Div, { className: "min-w-0", children: [_jsxs(Text, { size: "sm", weight: "medium", children: ["Installment ", inst.index, " \u00B7 ", toCurrency(inst.amount)] }), _jsx(Text, { size: "xs", color: "muted", children: inst.status === "paid" && inst.paidAt
+                                                            ? `Paid ${toRelativeDate(inst.paidAt)}`
+                                                            : inst.dueDate
+                                                                ? `Due ${toRelativeDate(inst.dueDate)}`
+                                                                : "" })] }), _jsxs(Row, { align: "center", gap: "sm", className: "shrink-0", children: [_jsx(Badge, { variant: EMI_INSTALLMENT_BADGE_VARIANT[inst.status] ?? "default", children: inst.status }), inst.status !== "paid" && (_jsx(Button, { action: ACTIONS.STORE["mark-installment-paid"], size: "sm", variant: "outline", isLoading: markingPaidIndex === inst.index, disabled: markingPaidIndex !== null, onClick: () => handleMarkInstallmentPaid(inst.index), children: "Mark paid" }))] })] }, inst.index))) }), emiError && (_jsx(Div, { textSize: "xs", className: "mt-2 border border-error/20", color: "error", surface: "danger-surface", padding: "inlineSm", rounded: "lg", children: emiError }))] })), order.sourceContext?.path === "pre-order" &&
+                            order.sourceContext.balanceDue > 0 && (_jsx(Stack, { className: SECTION_DIVIDER, padding: "t-md", gap: "3", children: _jsx(SellerBalanceBlock, { orderId: orderId, apiBase: apiBase, balance: order.balance, balanceDue: order.sourceContext.balanceDue, currency: order.currency, onOpened: () => {
+                                    showToast("Balance opened — the buyer has been notified", "success");
+                                    void fetch(`${apiBase}/${orderId}`)
+                                        .then((r) => r.json())
+                                        .then((json) => setOrder((json?.data ?? json)))
+                                        .catch((err) => void normalizeError(err));
+                                } }) })), _jsx(Stack, { className: SECTION_DIVIDER, padding: "t-md", gap: "3", children: _jsx(DispatchForm, { orderId: orderId, trackingNumber: order.trackingNumber, platformBooked: order.platformBookedShipment, onDispatched: () => {
+                                    showToast("Dispatch recorded", "success");
+                                    /*
+                                     * Re-read rather than patching local state: the platform
+                                     * branch's tracking id is produced by the CARRIER, so there
+                                     * is no value here to optimistically write. On that branch
+                                     * the job is still running, so this first re-read correctly
+                                     * shows no tracking number yet.
+                                     */
+                                    void fetch(`${apiBase}/${orderId}`)
+                                        .then((r) => r.json())
+                                        .then((json) => setOrder((json?.data ?? json)))
+                                        .catch((err) => void normalizeError(err));
+                                } }) }), _jsxs(Stack, { className: SECTION_DIVIDER, padding: "t-md", gap: "3", children: [_jsxs(FormShellContext.Provider, { value: form.shellCtx, children: [_jsx(FormErrorSummary, {}), _jsx(SectionForm, { sections: sections, values: draft, onChange: (partial) => setDraft((d) => ({ ...d, ...partial })), onSubmit: () => {
+                                                // SectionForm scrolls to the first erroring section and then
+                                                // submits regardless, so the guard lives here.
+                                                form.clearErrors();
+                                                const parsed = sellerOrderUpdateSchema.safeParse(visibleValues(sellerOrderUpdateSchema, draft));
+                                                if (!parsed.success) {
+                                                    applyZodIssues(parsed.error.issues, form.setFieldError);
+                                                    return;
+                                                }
+                                                void handleSave();
+                                            }, onValidationChange: () => form.validate(draft), schema: sellerOrderUpdateSchema, openIds: nav.openIds, onOpenChange: nav.setOpenIds, submitLabel: "Save", cancelLabel: "Close", onCancel: onClose, isLoading: saving })] }), saveError && (_jsx(Div, { textSize: "xs", className: "border border-error/20", color: "error", surface: "danger-surface", padding: "inlineSm", rounded: "lg", children: saveError }))] })] }) }))] }));
 }
 function OrderDetailDrawer({ orderId, apiBase, onClose, }) {
     return (_jsx(SideDrawer, { isOpen: true, title: `Order ${orderId}`, onClose: onClose, children: _jsx(SellerOrderDetailPanel, { orderId: orderId, apiBase: apiBase, onClose: onClose }) }));
@@ -343,9 +485,7 @@ export function SellerOrdersView({ orderDetailApiBase = SELLER_ENDPOINTS.ORDERS,
         {
             key: "primary",
             header: "Order",
-            render: (row) => (_jsxs(Row, { gap: "sm", align: "center", className: "min-w-0", children: [_jsx(Div, { className: "h-10 w-10 shrink-0", rounded: "md", overflow: "hidden", children: _jsx(MediaImage, { src: row.itemImage, alt: row.itemTitle ?? "Order item", size: "thumbnail" }) }), _jsxs(Stack, { gap: "none", className: "min-w-0", children: [_jsx(Text, { className: "truncate", size: "sm", weight: "semibold", children: row.itemTitle
-                                    ? `${row.itemTitle}${row.itemCount > 1 ? ` +${row.itemCount - 1} more` : ""}`
-                                    : row.primary }), _jsxs(Text, { size: "xs", color: "muted", children: [row.buyerName, " \u00B7 ", row.itemCount, " item", row.itemCount !== 1 ? "s" : ""] })] })] })),
+            render: (row) => (_jsxs(Row, { gap: "sm", align: "center", className: "min-w-0", children: [_jsx(Div, { className: "h-10 w-10 shrink-0", rounded: "md", overflow: "hidden", children: _jsx(MediaImage, { src: row.itemImage, alt: row.itemTitle ?? "Order item", size: "thumbnail" }) }), _jsxs(Stack, { gap: "none", className: "min-w-0", children: [_jsx(Text, { className: "truncate", size: "sm", weight: "semibold", children: row.primary }), _jsxs(Text, { size: "xs", color: "muted", children: [row.buyerName, " \u00B7 ", row.itemCount, " item", row.itemCount !== 1 ? "s" : ""] })] })] })),
         },
         {
             key: "totalAmount",
@@ -392,7 +532,7 @@ export function SellerOrdersView({ orderDetailApiBase = SELLER_ENDPOINTS.ORDERS,
             commit: "debounce",
         },
         emptyLabel: "No orders yet",
-        filterKeys: ["status"],
+        filterKeys: ["status", "orderType"],
         defaultSort: DEFAULT_SORT,
         queryKey: ["seller", "orders", "listing"],
         endpoint: SELLER_ENDPOINTS.ORDERS,
@@ -425,10 +565,45 @@ export function SellerOrdersView({ orderDetailApiBase = SELLER_ENDPOINTS.ORDERS,
                  * below as `itemTitle`.
                  */
                 primary: (() => {
-                    const title = typeof firstItem.productTitle === "string" ? firstItem.productTitle : "";
+                    /*
+                     * Counted in LINES, not item rows, and a grouped line is named by
+                     * its own title.
+                     *
+                     * This was `items[0].productTitle` + `itemsArr.length - 1`, so a
+                     * four-member bundle read "Dranzer S +3 more" — an arbitrary
+                     * member, implying four separate purchases. Grouping through the
+                     * same helper the drawer now uses makes it "Starter Bundle", and a
+                     * bundle beside one standalone item "+1 more".
+                     */
+                    const groups = groupOrderItemsByLine(itemsArr
+                        .filter((entry) => Boolean(entry) && typeof entry === "object")
+                        /*
+                         * Narrowed, not cast: `Record<string, unknown>` does NOT
+                         * satisfy `OrderItemForLineGrouping` — its `groupSlug` is
+                         * `unknown`, which is not assignable to `string | undefined`.
+                         * A cast would compile and then group on whatever junk a bad
+                         * document carried.
+                         */
+                        .map((e) => ({
+                        productTitle: typeof e.productTitle === "string" ? e.productTitle : undefined,
+                        groupSlug: typeof e.groupSlug === "string" ? e.groupSlug : undefined,
+                        groupTitle: typeof e.groupTitle === "string" ? e.groupTitle : undefined,
+                        bundleCategorySlug: typeof e.bundleCategorySlug === "string" ? e.bundleCategorySlug : undefined,
+                        bundleProductIds: Array.isArray(e.bundleProductIds)
+                            ? e.bundleProductIds.filter((v) => typeof v === "string")
+                            : undefined,
+                    })));
+                    const head = groups[0];
+                    const extra = Math.max(0, groups.length - 1);
+                    const title = head === undefined
+                        ? typeof firstItem.productTitle === "string"
+                            ? firstItem.productTitle
+                            : ""
+                        : head.kind === "bundle"
+                            ? (head.groupTitle ?? "Grouped purchase")
+                            : (head.item.productTitle ?? "");
                     if (!title)
                         return `Order ${toStringValue(item.id, "-")}`;
-                    const extra = itemsArr.length - 1;
                     return extra > 0 ? `${title} +${extra} more` : title;
                 })(),
                 /*
@@ -456,10 +631,29 @@ export function SellerOrdersView({ orderDetailApiBase = SELLER_ENDPOINTS.ORDERS,
         // The scope narrows; the status chip drills down inside it. Both are
         // emitted — an explicit status always wins, since picking "Delivered"
         // while sitting on Active should show delivered orders, not nothing.
-        buildFilters: (state) => (state.status && state.status !== "All" ? sieveFilter("status", SIEVE_OP.EQ, state.status) : undefined),
+        /*
+         * Two independent axes, joined. The lane answers "how was this won", the
+         * status answers "where is it now" — a seller asking "which of my auction
+         * wins are still unshipped" should not have to choose between them.
+         *
+         * 🛑 `orderType` is a registered SELLER_SIEVE_FIELD as of this change. It
+         * was not, and the failure would have been invisible: `throwExceptions` is
+         * false, so an unallowlisted field drops its clause and the chip would have
+         * returned the seller's whole order list while looking like it filtered
+         * (Root Cause #62). `standard` is stripped from the query server-side and
+         * refined in memory — see `/api/store/orders`.
+         */
+        buildFilters: (state) => [
+            state.status && state.status !== "All"
+                ? sieveFilter("status", SIEVE_OP.EQ, state.status)
+                : null,
+            state.orderType ? sieveFilter("orderType", SIEVE_OP.EQ, state.orderType) : null,
+        ]
+            .filter(Boolean)
+            .join(",") || undefined,
         buildExtraParams: () => orderScope.extraParams,
         renderAboveContent: orderScope.renderAboveContent,
-        renderFilterPanel: ({ pendingFilters, setPendingFilters }) => (_jsx(FilterChipGroup, { label: "Status", tabs: STATUS_OPTIONS, value: pendingFilters.status ?? "", onChange: (id) => setPendingFilters((p) => ({ ...p, status: id })) })),
+        renderFilterPanel: ({ pendingFilters, setPendingFilters }) => (_jsxs(_Fragment, { children: [_jsx(FilterChipGroup, { label: "Status", tabs: STATUS_OPTIONS, value: pendingFilters.status ?? "", onChange: (id) => setPendingFilters((p) => ({ ...p, status: id })) }), _jsx(FilterChipGroup, { label: "Type", tabs: ORDER_LANE_TABS, value: pendingFilters.orderType ?? "", onChange: (id) => setPendingFilters((p) => ({ ...p, orderType: id })) })] })),
         buildBulkActions: (selection) => {
             const handlePrintPackingSlips = () => {
                 const ids = selection.selectedIds.join(",");

package/dist/features/seller/components/index.d.ts

@@ -5,6 +5,7 @@ export { SellerListingTypeView, SELLER_LISTING_TYPE_SPECS } from "./SellerListin
 export type { SellerListingTypeViewProps, SellerListingTypeSpec, SellerListingTypeKey, SellerListingRow } from "./SellerListingTypeView";
 export type { SellerProductsViewProps } from "./SellerProductsView";
 export { PrintCenterView } from "./PrintCenterView";
+export { DispatchForm } from "./DispatchForm";
 export { SellerOrdersView, SellerOrderDetailPanel } from "./SellerOrdersView";
 export type { SellerOrdersViewProps } from "./SellerOrdersView";
 export { SellerOffersView } from "./SellerOffersView";

package/dist/features/seller/components/index.js

@@ -2,6 +2,7 @@ export { SellerDashboardView } from "./SellerDashboardView.js";
 export { SellerProductsView } from "./SellerProductsView.js";
 export { SellerListingTypeView, SELLER_LISTING_TYPE_SPECS } from "./SellerListingTypeView.js";
 export { PrintCenterView } from "./PrintCenterView.js";
+export { DispatchForm } from "./DispatchForm.js";
 export { SellerOrdersView, SellerOrderDetailPanel } from "./SellerOrdersView.js";
 export { SellerOffersView } from "./SellerOffersView.js";
 export { SellerCouponsView } from "./SellerCouponsView.js";

package/dist/features/seller/hooks/useSellerListingData.js

@@ -1,10 +1,35 @@
 "use client";
 import { formatCurrency } from "../../../utils/number.formatter.js";
+// The defining module, not a barrel (Root Cause #18). `hasEncPrefix` is a pure
+// string test with no crypto in its import chain, so it is client-safe.
+import { hasEncPrefix } from "../../../security/pii-mask.js";
 export function toRecordArray(value) {
     return Array.isArray(value) ? value.filter(Boolean) : [];
 }
 export function toStringValue(value, fallback = "-") {
     if (typeof value === "string") {
+        /*
+         * 🛑 Ciphertext is not a display value, and this is the last line of
+         * defence rather than the fix.
+         *
+         * `OrderRepository.mapDoc` deliberately does not decrypt, so any route
+         * that forgets `revealOrders`/`maskedOrders` hands this function a stored
+         * `enc:v1:…` blob — and it is a `string`, so it rendered verbatim.
+         * Measured live in the seller's order list, where the row subtitle read
+         * `enc:v1:8plr3ZzKBqejPPti:MCZsrfOidLkSL6EogbxlCzU=:…` where the buyer's
+         * name belongs.
+         *
+         * This is a RECURRING class, not one slip: eight separate files in appkit
+         * carry a comment recording the same leak, and one of them had already
+         * baked `enc:v1:…` into 383 notification bodies. The route fix is the real
+         * repair; this makes the NEXT one degrade to "-" instead of garbage.
+         *
+         * `hasEncPrefix` rather than `isPiiEncrypted`: its own docstring says this
+         * is the check the display masks want, because a settings-encrypted or
+         * malformed envelope is exactly as unshowable as a PII one.
+         */
+        if (hasEncPrefix(value))
+            return fallback;
         return value.trim() || fallback;
     }
     if (typeof value === "number" || typeof value === "boolean") {

package/dist/features/seller/repository/offer.repository.js

@@ -247,9 +247,10 @@ class OfferRepository extends BaseRepository {
             trigger: ctx?.trigger ?? "offerRepository.updateStatus",
             reason: ctx?.reason,
             note: ctx?.note,
-            // buyerName/buyerEmail live on this document. `encryptPiiFields` is a
-            // flat top-level loop and never descends into arrays, so without this
-            // they would persist in PLAINTEXT inside statusHistory.
+            // buyerName/buyerEmail live on this document. `encryptPiiFields` covers
+            // only NAMED paths, and nothing declares them under
+            // `statusHistory[].changes` — so without this scrub they persist in
+            // PLAINTEXT inside the history.
             piiFields: OFFER_PII_FIELDS,
             historyField: OFFER_FIELDS.STATUS_HISTORY,
             truncatedField: OFFER_FIELDS.STATUS_HISTORY_TRUNCATED,

package/dist/features/seller/schemas/firestore.d.ts

@@ -5,6 +5,7 @@ import { type GenerateOfferIdInput } from "../../../utils/id-generators";
 import type { BaseDocument } from "../../../_internal/shared/types/base-document";
 import type { StatusChangeEntry } from "../../../_internal/shared/history/index";
 import type { Encrypted, Plaintext } from "../../../security/encrypted";
+import type { OfferCoordination } from "../../../_internal/shared/features/offers/coordination";
 export type OfferStatus = "pending" | "accepted" | "declined" | "countered" | "expired" | "withdrawn" | "paid";
 /** Runtime-accessible offer status values — use instead of bare string literals. */
 export declare const OfferStatusValues: {
@@ -50,6 +51,25 @@ export interface OfferDocument extends BaseDocument {
     acceptedAt?: Date;
     checkoutDeadline?: Date;
     respondedAt?: Date;
+    /**
+     * Present when this offer is a COORDINATED purchase — several people
+     * chipping in on one listing.
+     *
+     * 🛑 A field on the offer, not a new document and not a new lifecycle.
+     * Acceptance produces an ordinary `offer-accepted` order; `unitPriceFor`
+     * already honours `lockedPrice`, so tax, payout base, refund ceiling and
+     * the invoice all follow with no new money term. See
+     * `_internal/shared/features/offers/coordination.ts` for the full list of
+     * things this deliberately does NOT add.
+     *
+     * 🛑 No member NAME is stored in here. `encryptPiiFields` CAN reach into an
+     * array (`coordination.members[].name`) — the claim that it cannot was
+     * wrong — but it covers only what is NAMED, and the near-miss `"name"`
+     * reads as covering it while storing plaintext. Members are uids; names
+     * resolve at render time, which removes the field rather than classifying
+     * it. See `coordination.ts`.
+     */
+    coordination?: OfferCoordination;
     /** Set by `markPaid` once the buyer's order exists — makes "paid" auditable. */
     paidOrderId?: string;
     paidAt?: Date;
@@ -93,8 +113,9 @@ export interface OfferDocument extends BaseDocument {
 /**
  * Fields whose changes are recorded in an offer's `statusHistory`.
  *
- * Excludes `buyerName`/`buyerEmail` (PII — `encryptPiiFields` never descends
- * into arrays, so they would persist in plaintext inside the history),
+ * Excludes `buyerName`/`buyerEmail` (PII — nothing declares them under
+ * `statusHistory[].changes`, and `encryptPiiFields` covers only NAMED paths,
+ * so they would persist in plaintext inside the history),
  * `buyerNote`/`sellerNote` (they ride in the entry's `note`), and
  * `updatedAt`/`respondedAt` (noise that would burn the FIFO cap).
  */

package/dist/features/seller/schemas/firestore.js

@@ -15,8 +15,9 @@ export const OfferStatusValues = {
 /**
  * Fields whose changes are recorded in an offer's `statusHistory`.
  *
- * Excludes `buyerName`/`buyerEmail` (PII — `encryptPiiFields` never descends
- * into arrays, so they would persist in plaintext inside the history),
+ * Excludes `buyerName`/`buyerEmail` (PII — nothing declares them under
+ * `statusHistory[].changes`, and `encryptPiiFields` covers only NAMED paths,
+ * so they would persist in plaintext inside the history),
  * `buyerNote`/`sellerNote` (they ride in the entry's `note`), and
  * `updatedAt`/`respondedAt` (noise that would burn the FIFO cap).
  */

package/dist/features/seller/schemas/index.d.ts

@@ -72,13 +72,13 @@ export declare const sellerStoreSchema: z.ZodObject<{
         totalReviews: z.ZodNumber;
         averageRating: z.ZodOptional<z.ZodNumber>;
     }, "strip", z.ZodTypeAny, {
-        itemsSold: number;
         totalProducts: number;
+        itemsSold: number;
         totalReviews: number;
         averageRating?: number | undefined;
     }, {
-        itemsSold: number;
         totalProducts: number;
+        itemsSold: number;
         totalReviews: number;
         averageRating?: number | undefined;
     }>>;
@@ -96,8 +96,8 @@ export declare const sellerStoreSchema: z.ZodObject<{
     location?: string | undefined;
     returnPolicy?: string | undefined;
     stats?: {
-        itemsSold: number;
         totalProducts: number;
+        itemsSold: number;
         totalReviews: number;
         averageRating?: number | undefined;
     } | undefined;
@@ -128,8 +128,8 @@ export declare const sellerStoreSchema: z.ZodObject<{
     location?: string | undefined;
     returnPolicy?: string | undefined;
     stats?: {
-        itemsSold: number;
         totalProducts: number;
+        itemsSold: number;
         totalReviews: number;
         averageRating?: number | undefined;
     } | undefined;

package/dist/features/seller/schemas/order-forms.d.ts

@@ -32,10 +32,30 @@ export declare const sellerOrderUpdateSchema: z.ZodEffects<z.ZodObject<{
 }>;
 export type SellerOrderUpdateValues = z.infer<typeof sellerOrderUpdateSchema>;
 /**
- * Manual shipment entry. `method` is a literal rather than an enum because
- * `ManualShippingProvider` is the only provider — see § "Provider Resolution".
+ * Shipment entry — manual, or booked through the platform.
+ *
+ * 🛑 **`method` was `z.literal("custom")`, and that literal WAS bug 0e.**
+ *
+ * Its comment said *"a literal rather than an enum because
+ * `ManualShippingProvider` is the only provider"* — no longer true:
+ * `providers/shipping-shiprocket/` is 570 lines with all six methods, and
+ * `providers.config.ts` already resolves it from
+ * `siteSettings.shipping.provider`. The seller simply could not EXPRESS
+ * "book this through us", so there was no option to offer, and
+ * `platformBookedShipment` — which `order-math.ts` gates reimbursement on —
+ * had zero writers.
+ *
+ * A DISCRIMINATED UNION rather than an enum plus optional fields, because
+ * the two branches need different things and an optional-everything shape
+ * cannot say so:
+ *
+ * · `custom` — the seller posted it and types the carrier and tracking id.
+ *   Those are REQUIRED, which is the rule enforced in three places today.
+ * · `platform` — we book it, so there is no tracking id to type; it comes
+ *   back from the carrier. Requiring one here would be asking the seller to
+ *   invent the thing the booking produces.
  */
-export declare const shipOrderSchema: z.ZodObject<{
+export declare const shipOrderSchema: z.ZodDiscriminatedUnion<"method", [z.ZodObject<{
     method: z.ZodLiteral<"custom">;
     shippingCarrier: z.ZodString;
     trackingNumber: z.ZodString;
@@ -50,7 +70,44 @@ export declare const shipOrderSchema: z.ZodObject<{
     shippingCarrier: string;
     trackingUrl: string;
     method: "custom";
-}>;
+}>, z.ZodObject<{
+    method: z.ZodLiteral<"platform">;
+    pickupAddressId: z.ZodString;
+    dimensions: z.ZodObject<{
+        weight: z.ZodNumber;
+        length: z.ZodNumber;
+        width: z.ZodNumber;
+        height: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        length: number;
+        weight: number;
+        height: number;
+        width: number;
+    }, {
+        length: number;
+        weight: number;
+        height: number;
+        width: number;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    pickupAddressId: string;
+    method: "platform";
+    dimensions: {
+        length: number;
+        weight: number;
+        height: number;
+        width: number;
+    };
+}, {
+    pickupAddressId: string;
+    method: "platform";
+    dimensions: {
+        length: number;
+        weight: number;
+        height: number;
+        width: number;
+    };
+}>]>;
 export type ShipOrderValues = z.infer<typeof shipOrderSchema>;
 /**
  * Marking one EMI installment paid. `installmentIndex` is 1-based, matching