@mohasinac/appkit 4.62.1 → 4.63.1

package/dist/features/seller/components/SellerOrdersView.js

@@ -5,6 +5,7 @@ import { OrderAddonBadges } from "../../orders/components/OrderAddonBadges.js";
 import { OrderProvenanceCard } from "../../orders/components/OrderProvenanceCard.js";
 import { groupOrderItemsByLine } from "../../orders/utils/bundle-grouping.js";
 import { normalizeError } from "../../../errors/normalize.js";
+import { formatCurrency } from "../../../utils/number.formatter.js";
 // The defining module, not a barrel (Root Cause #18). Maps a server error CODE
 // to user-facing copy; it can never return server text, which is the point.
 import { toUserMessage } from "../../../errors/error-display-map.js";
@@ -27,6 +28,7 @@ import { SectionForm, useSectionFormNav, buildSectionsFromSchema, visibleValues,
 import { useFormShellState, FormShellContext } from "../../../ui/forms/index.js";
 import { applyZodIssues } from "../../../ui/forms/apply-zod-issues.js";
 import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary.js";
+import { DispatchForm } from "./DispatchForm.js";
 import { PhysicalLocationModal } from "./PhysicalLocationModal.js";
 import { ROUTES } from "../../../constants/index.js";
 import { toRecordArray, toCurrency, toStringValue } from "../hooks/useSellerListingData.js";
@@ -37,6 +39,13 @@ import { MediaImage } from "../../media/MediaImage.js";
 const __O = {
     yAuto: "overflow-y-auto",
 };
+/*
+ * The hairline that separates each panel section inside the order drawer.
+ * Named because the drawer gained its fourth section with D55's balance
+ * collector, and four copies of one border declaration is four places a
+ * future token rename has to find.
+ */
+const SECTION_DIVIDER = "border-t border-[var(--appkit-color-border)]";
 const DEFAULT_SORT = "-createdAt";
 const SORT_OPTIONS = [
     { value: sortBy("createdAt", "DESC"), label: "Newest" },
@@ -96,6 +105,69 @@ const EMI_INSTALLMENT_BADGE_VARIANT = {
     pending: "warning",
     overdue: "danger",
 };
+/**
+ * D55 — the seller's half of the pre-order balance.
+ *
+ * ## 🛑 Opening is an EVENT, and the control has to say so
+ *
+ * The balance has existed on the order since checkout. What the seller is
+ * declaring here is that the GOODS HAVE ARRIVED — a pre-order's premise is
+ * that the item does not exist yet, so asking for the balance before then is
+ * asking a buyer to fund inventory. The button's label and its blurb both
+ * name that, rather than saying "request payment", which would read as a
+ * nudge the seller could send at any time.
+ *
+ * ## Why no Cancel and no confirm dialog
+ *
+ * Opening takes money NOWHERE and reverses by simply not chasing it — the
+ * worst case is a buyer told a week early. A confirmation step on a
+ * non-destructive, idempotent action is the dialog people learn to click
+ * through, which is what makes the ones on real deletions worthless.
+ *
+ * ## The states are the seller's, not the buyer's
+ *
+ * Once opened the seller cannot act again, so every later state is read-only
+ * here: "with the buyer", "proof submitted, we are checking it", "paid". The
+ * verification is staff-only and deliberately NOT offered — a seller
+ * approving payment to themselves is not a review.
+ */
+function SellerBalanceBlock({ orderId, apiBase, balance, balanceDue, currency, onOpened, }) {
+    const [opening, setOpening] = React.useState(false);
+    const [error, setError] = React.useState(null);
+    if (balance) {
+        const label = balance.status === "paid"
+            ? "Balance paid"
+            : balance.status === "submitted"
+                ? "Balance proof under review"
+                : balance.status === "rejected"
+                    ? "Balance proof rejected — the buyer has been asked to resend"
+                    : "Balance open — awaiting the buyer";
+        return (_jsxs(Div, { children: [_jsx(Text, { size: "sm", weight: "semibold", color: "primary", children: "Pre-order balance" }), _jsxs(Text, { className: "mt-1", color: "muted", size: "xs", children: [formatCurrency(balance.amount, currency), " \u2014 ", label, balance.transactionId ? ` · Ref ${balance.transactionId}` : ""] })] }));
+    }
+    const handleOpen = async () => {
+        setOpening(true);
+        setError(null);
+        try {
+            const res = await fetch(`${apiBase}/${orderId}/open-balance`, {
+                method: "POST",
+                credentials: "include",
+            });
+            if (!res.ok) {
+                setError("Could not open the balance. Try again, or contact support if it persists.");
+                return;
+            }
+            onOpened();
+        }
+        catch (err) {
+            void normalizeError(err);
+            setError("Could not reach the server. Check your connection and try again.");
+        }
+        finally {
+            setOpening(false);
+        }
+    };
+    return (_jsxs(Div, { children: [_jsx(Text, { size: "sm", weight: "semibold", color: "primary", children: "Pre-order balance" }), _jsxs(Text, { className: "mt-1", color: "muted", size: "xs", children: [formatCurrency(balanceDue, currency), " is still owed on this order. Open it once the stock is physically with you \u2014 the buyer is notified and gets a week to pay, and the parcel ships when it clears."] }), _jsx(Row, { className: "mt-2", gap: "3", children: _jsx(Button, { variant: "primary", size: "sm", disabled: opening, onClick: handleOpen, children: opening ? "Opening…" : "Stock has arrived — open balance" }) }), error && (_jsx(Div, { textSize: "xs", className: "mt-2 border border-error/20", color: "error", surface: "danger-surface", padding: "inlineSm", rounded: "lg", children: error }))] }));
+}
 /**
  * Fetches + renders one order's full detail content (items, address,
  * payment, EMI, status/tracking update form). Shared by the seller orders
@@ -299,11 +371,31 @@ export function SellerOrderDetailPanel({ orderId, apiBase, onClose, }) {
     const addrLine = typeof rawAddr === "string" && rawAddr.trim()
         ? rawAddr.trim()
         : [addr.addressLine1, addr.city, addr.state, addr.pincode].filter(Boolean).join(", ");
-    return (_jsxs(_Fragment, { children: [loading && (_jsx(Row, { align: "center", justify: "center", padding: "y-4xl", children: _jsx(Div, { className: "h-6 w-6 animate-spin border-2 border-[var(--appkit-color-primary)] border-t-transparent", rounded: "full" }) })), fetchError && (_jsx(Div, { textSize: "sm", className: "mx-4 mt-4 border border-error/20", color: "error", surface: "danger-surface", padding: "inline", rounded: "lg", children: fetchError })), order && !loading && (_jsx(Stack, { gap: "none", children: _jsxs(Stack, { className: `flex-1 ${__O.yAuto}`, gap: "5", padding: "md", children: [_jsxs(Row, { align: "center", justify: "between", children: [_jsx(Badge, { variant: STATUS_BADGE_VARIANT[order.status ?? ""] ?? "default", children: order.status ?? "Unknown" }), _jsx(Text, { size: "sm", className: "text-[var(--appkit-color-text-muted)]", children: toRelativeDate(order.createdAt) })] }), _jsx(OrderProvenanceCard, { sourceContext: order.sourceContext, currency: order.currency }), (order.items ?? []).length > 0 && (_jsxs(Div, { children: [_jsx(Text, { size: "sm", className: "text-[var(--appkit-color-text)] mb-2", weight: "semibold", children: "Items" }), _jsx(Div, { className: "divide-y divide-[var(--appkit-color-border)] divide-[var(--appkit-color-border)] border border-[var(--appkit-color-border)]", rounded: "lg", children: groupOrderItemsByLine(order.items ?? []).map((group, gi) => group.kind === "single" ? (sellerOrderItemRow(group.item, `s-${group.index}`)) : (_jsxs(Div, { children: [_jsxs(Row, { paddingY: "y-xs", padding: "x-sm", align: "center", gap: "sm", surface: "muted", children: [_jsx(Text, { size: "xs", weight: "semibold", children: group.groupTitle ?? "Grouped purchase" }), _jsx(Text, { size: "xs", className: "text-[var(--appkit-color-text-muted)]", children: `${group.memberCount} ${group.memberCount === 1 ? "item" : "items"} · one line` })] }), _jsx(Div, { className: "pl-4", children: group.items.map(({ item, index }) => sellerOrderItemRow(item, `m-${index}`)) })] }, `g-${gi}`))) })] })), _jsx(OrderAddonBadges, { order: order, variant: "detail" }), order.giftWrapAddon && (_jsxs(Div, { className: "border border-[var(--appkit-color-primary-200)] dark:border-[var(--appkit-color-primary-800)]", surface: "subtle", padding: "inline", rounded: "lg", children: [_jsx(Text, { size: "sm", weight: "semibold", children: "\uD83C\uDF81 Gift wrap requested" }), order.giftWrapMessage && (_jsxs(Text, { size: "sm", className: "mt-1 text-[var(--appkit-color-text-muted)]", children: ["\u201C", order.giftWrapMessage, "\u201D"] }))] })), _jsxs(Row, { surface: "muted", padding: "inline", align: "center", justify: "between", rounded: "lg", children: [_jsx(Text, { size: "sm", weight: "semibold", children: "Total" }), _jsx(Text, { size: "sm", className: "text-[var(--appkit-color-primary)]", weight: "bold", children: toCurrency(order.totalAmount ?? order.totalPrice ?? 0) })] }), addrLine && (_jsxs(Div, { children: [_jsx(Text, { size: "sm", className: "mb-1", weight: "semibold", children: "Shipping address" }), _jsx(Text, { size: "sm", className: "text-[var(--appkit-color-text-muted)]", children: [String(addr.fullName ?? ""), addrLine].filter(Boolean).join(" · ") })] })), order.paymentMethod && (_jsxs(Div, { children: [_jsxs(Row, { align: "center", justify: "between", className: "mb-1", gap: "3", children: [_jsx(Text, { size: "sm", weight: "semibold", children: "Payment" }), isManualPaymentMethod(order.paymentMethod) && (_jsx(Badge, { variant: sellerPaymentBadge(order).variant, children: sellerPaymentBadge(order).label }))] }), _jsx(Text, { size: "sm", className: "text-[var(--appkit-color-text-muted)]", transform: "capitalize", children: order.paymentMethod }), isManualPaymentMethod(order.paymentMethod) && order.paymentTransactionId && (_jsxs(Text, { size: "xs", color: "muted", className: "mt-1", children: ["UTR: ", order.paymentTransactionId] }))] })), order.emiEnabled && (_jsxs(Div, { className: "border-t border-[var(--appkit-color-border)]", padding: "t-md", children: [_jsxs(Row, { align: "center", justify: "between", className: "mb-2", children: [_jsxs(Text, { size: "sm", weight: "semibold", children: ["EMI plan ", order.emiTenureMonths ? `· ${order.emiTenureMonths} months` : ""] }), _jsx(Badge, { variant: order.emiComplete ? "success" : "warning", children: order.emiComplete ? "Fully paid" : "In progress" })] }), _jsxs(Row, { align: "center", justify: "between", className: "mb-2", children: [_jsx(Text, { size: "xs", color: "muted", children: "Token collected" }), _jsx(Text, { size: "xs", weight: "medium", children: toCurrency(order.emiTokenAmount ?? 0) })] }), _jsxs(Row, { align: "center", justify: "between", className: "mb-3", children: [_jsx(Text, { size: "xs", color: "muted", children: "Remaining balance" }), _jsx(Text, { size: "xs", weight: "medium", children: toCurrency(order.emiRemainingBalance ?? 0) })] }), _jsx(Div, { className: "divide-y divide-[var(--appkit-color-border)] border border-[var(--appkit-color-border)]", rounded: "lg", children: (order.emiInstallments ?? []).map((inst) => (_jsxs(Row, { paddingY: "y-xs-tall", padding: "x-sm", align: "center", justify: "between", gap: "3", children: [_jsxs(Div, { className: "min-w-0", children: [_jsxs(Text, { size: "sm", weight: "medium", children: ["Installment ", inst.index, " \u00B7 ", toCurrency(inst.amount)] }), _jsx(Text, { size: "xs", color: "muted", children: inst.status === "paid" && inst.paidAt
+    return (_jsxs(_Fragment, { children: [loading && (_jsx(Row, { align: "center", justify: "center", padding: "y-4xl", children: _jsx(Div, { className: "h-6 w-6 animate-spin border-2 border-[var(--appkit-color-primary)] border-t-transparent", rounded: "full" }) })), fetchError && (_jsx(Div, { textSize: "sm", className: "mx-4 mt-4 border border-error/20", color: "error", surface: "danger-surface", padding: "inline", rounded: "lg", children: fetchError })), order && !loading && (_jsx(Stack, { gap: "none", children: _jsxs(Stack, { className: `flex-1 ${__O.yAuto}`, gap: "5", padding: "md", children: [_jsxs(Row, { align: "center", justify: "between", children: [_jsx(Badge, { variant: STATUS_BADGE_VARIANT[order.status ?? ""] ?? "default", children: order.status ?? "Unknown" }), _jsx(Text, { size: "sm", className: "text-[var(--appkit-color-text-muted)]", children: toRelativeDate(order.createdAt) })] }), _jsx(OrderProvenanceCard, { sourceContext: order.sourceContext, currency: order.currency }), (order.items ?? []).length > 0 && (_jsxs(Div, { children: [_jsx(Text, { size: "sm", className: "text-[var(--appkit-color-text)] mb-2", weight: "semibold", children: "Items" }), _jsx(Div, { className: "divide-y divide-[var(--appkit-color-border)] divide-[var(--appkit-color-border)] border border-[var(--appkit-color-border)]", rounded: "lg", children: groupOrderItemsByLine(order.items ?? []).map((group, gi) => group.kind === "single" ? (sellerOrderItemRow(group.item, `s-${group.index}`)) : (_jsxs(Div, { children: [_jsxs(Row, { paddingY: "y-xs", padding: "x-sm", align: "center", gap: "sm", surface: "muted", children: [_jsx(Text, { size: "xs", weight: "semibold", children: group.groupTitle ?? "Grouped purchase" }), _jsx(Text, { size: "xs", className: "text-[var(--appkit-color-text-muted)]", children: `${group.memberCount} ${group.memberCount === 1 ? "item" : "items"} · one line` })] }), _jsx(Div, { paddingX: "l-md", children: group.items.map(({ item, index }) => sellerOrderItemRow(item, `m-${index}`)) })] }, `g-${gi}`))) })] })), _jsx(OrderAddonBadges, { order: order, variant: "detail" }), order.giftWrapAddon && (_jsxs(Div, { className: "border border-[var(--appkit-color-primary-200)] dark:border-[var(--appkit-color-primary-800)]", surface: "subtle", padding: "inline", rounded: "lg", children: [_jsx(Text, { size: "sm", weight: "semibold", children: "\uD83C\uDF81 Gift wrap requested" }), order.giftWrapMessage && (_jsxs(Text, { size: "sm", className: "mt-1 text-[var(--appkit-color-text-muted)]", children: ["\u201C", order.giftWrapMessage, "\u201D"] }))] })), _jsxs(Row, { surface: "muted", padding: "inline", align: "center", justify: "between", rounded: "lg", children: [_jsx(Text, { size: "sm", weight: "semibold", children: "Total" }), _jsx(Text, { size: "sm", className: "text-[var(--appkit-color-primary)]", weight: "bold", children: toCurrency(order.totalAmount ?? order.totalPrice ?? 0) })] }), addrLine && (_jsxs(Div, { children: [_jsx(Text, { size: "sm", className: "mb-1", weight: "semibold", children: "Shipping address" }), _jsx(Text, { size: "sm", className: "text-[var(--appkit-color-text-muted)]", children: [String(addr.fullName ?? ""), addrLine].filter(Boolean).join(" · ") })] })), order.paymentMethod && (_jsxs(Div, { children: [_jsxs(Row, { align: "center", justify: "between", className: "mb-1", gap: "3", children: [_jsx(Text, { size: "sm", weight: "semibold", children: "Payment" }), isManualPaymentMethod(order.paymentMethod) && (_jsx(Badge, { variant: sellerPaymentBadge(order).variant, children: sellerPaymentBadge(order).label }))] }), _jsx(Text, { size: "sm", className: "text-[var(--appkit-color-text-muted)]", transform: "capitalize", children: order.paymentMethod }), isManualPaymentMethod(order.paymentMethod) && order.paymentTransactionId && (_jsxs(Text, { size: "xs", color: "muted", className: "mt-1", children: ["UTR: ", order.paymentTransactionId] }))] })), order.emiEnabled && (_jsxs(Div, { className: SECTION_DIVIDER, padding: "t-md", children: [_jsxs(Row, { align: "center", justify: "between", className: "mb-2", children: [_jsxs(Text, { size: "sm", weight: "semibold", children: ["EMI plan ", order.emiTenureMonths ? `· ${order.emiTenureMonths} months` : ""] }), _jsx(Badge, { variant: order.emiComplete ? "success" : "warning", children: order.emiComplete ? "Fully paid" : "In progress" })] }), _jsxs(Row, { align: "center", justify: "between", className: "mb-2", children: [_jsx(Text, { size: "xs", color: "muted", children: "Token collected" }), _jsx(Text, { size: "xs", weight: "medium", children: toCurrency(order.emiTokenAmount ?? 0) })] }), _jsxs(Row, { align: "center", justify: "between", className: "mb-3", children: [_jsx(Text, { size: "xs", color: "muted", children: "Remaining balance" }), _jsx(Text, { size: "xs", weight: "medium", children: toCurrency(order.emiRemainingBalance ?? 0) })] }), _jsx(Div, { className: "divide-y divide-[var(--appkit-color-border)] border border-[var(--appkit-color-border)]", rounded: "lg", children: (order.emiInstallments ?? []).map((inst) => (_jsxs(Row, { paddingY: "y-xs-tall", padding: "x-sm", align: "center", justify: "between", gap: "3", children: [_jsxs(Div, { className: "min-w-0", children: [_jsxs(Text, { size: "sm", weight: "medium", children: ["Installment ", inst.index, " \u00B7 ", toCurrency(inst.amount)] }), _jsx(Text, { size: "xs", color: "muted", children: inst.status === "paid" && inst.paidAt
                                                             ? `Paid ${toRelativeDate(inst.paidAt)}`
                                                             : inst.dueDate
                                                                 ? `Due ${toRelativeDate(inst.dueDate)}`
-                                                                : "" })] }), _jsxs(Row, { align: "center", gap: "sm", className: "shrink-0", children: [_jsx(Badge, { variant: EMI_INSTALLMENT_BADGE_VARIANT[inst.status] ?? "default", children: inst.status }), inst.status !== "paid" && (_jsx(Button, { action: ACTIONS.STORE["mark-installment-paid"], size: "sm", variant: "outline", isLoading: markingPaidIndex === inst.index, disabled: markingPaidIndex !== null, onClick: () => handleMarkInstallmentPaid(inst.index), children: "Mark paid" }))] })] }, inst.index))) }), emiError && (_jsx(Div, { textSize: "xs", className: "mt-2 border border-error/20", color: "error", surface: "danger-surface", padding: "inlineSm", rounded: "lg", children: emiError }))] })), _jsxs(Stack, { className: "border-t border-[var(--appkit-color-border)]", padding: "t-md", gap: "3", children: [_jsxs(FormShellContext.Provider, { value: form.shellCtx, children: [_jsx(FormErrorSummary, {}), _jsx(SectionForm, { sections: sections, values: draft, onChange: (partial) => setDraft((d) => ({ ...d, ...partial })), onSubmit: () => {
+                                                                : "" })] }), _jsxs(Row, { align: "center", gap: "sm", className: "shrink-0", children: [_jsx(Badge, { variant: EMI_INSTALLMENT_BADGE_VARIANT[inst.status] ?? "default", children: inst.status }), inst.status !== "paid" && (_jsx(Button, { action: ACTIONS.STORE["mark-installment-paid"], size: "sm", variant: "outline", isLoading: markingPaidIndex === inst.index, disabled: markingPaidIndex !== null, onClick: () => handleMarkInstallmentPaid(inst.index), children: "Mark paid" }))] })] }, inst.index))) }), emiError && (_jsx(Div, { textSize: "xs", className: "mt-2 border border-error/20", color: "error", surface: "danger-surface", padding: "inlineSm", rounded: "lg", children: emiError }))] })), order.sourceContext?.path === "pre-order" &&
+                            order.sourceContext.balanceDue > 0 && (_jsx(Stack, { className: SECTION_DIVIDER, padding: "t-md", gap: "3", children: _jsx(SellerBalanceBlock, { orderId: orderId, apiBase: apiBase, balance: order.balance, balanceDue: order.sourceContext.balanceDue, currency: order.currency, onOpened: () => {
+                                    showToast("Balance opened — the buyer has been notified", "success");
+                                    void fetch(`${apiBase}/${orderId}`)
+                                        .then((r) => r.json())
+                                        .then((json) => setOrder((json?.data ?? json)))
+                                        .catch((err) => void normalizeError(err));
+                                } }) })), _jsx(Stack, { className: SECTION_DIVIDER, padding: "t-md", gap: "3", children: _jsx(DispatchForm, { orderId: orderId, trackingNumber: order.trackingNumber, platformBooked: order.platformBookedShipment, onDispatched: () => {
+                                    showToast("Dispatch recorded", "success");
+                                    /*
+                                     * Re-read rather than patching local state: the platform
+                                     * branch's tracking id is produced by the CARRIER, so there
+                                     * is no value here to optimistically write. On that branch
+                                     * the job is still running, so this first re-read correctly
+                                     * shows no tracking number yet.
+                                     */
+                                    void fetch(`${apiBase}/${orderId}`)
+                                        .then((r) => r.json())
+                                        .then((json) => setOrder((json?.data ?? json)))
+                                        .catch((err) => void normalizeError(err));
+                                } }) }), _jsxs(Stack, { className: SECTION_DIVIDER, padding: "t-md", gap: "3", children: [_jsxs(FormShellContext.Provider, { value: form.shellCtx, children: [_jsx(FormErrorSummary, {}), _jsx(SectionForm, { sections: sections, values: draft, onChange: (partial) => setDraft((d) => ({ ...d, ...partial })), onSubmit: () => {
                                                 // SectionForm scrolls to the first erroring section and then
                                                 // submits regardless, so the guard lives here.
                                                 form.clearErrors();

package/dist/features/seller/components/index.d.ts

@@ -5,6 +5,7 @@ export { SellerListingTypeView, SELLER_LISTING_TYPE_SPECS } from "./SellerListin
 export type { SellerListingTypeViewProps, SellerListingTypeSpec, SellerListingTypeKey, SellerListingRow } from "./SellerListingTypeView";
 export type { SellerProductsViewProps } from "./SellerProductsView";
 export { PrintCenterView } from "./PrintCenterView";
+export { DispatchForm } from "./DispatchForm";
 export { SellerOrdersView, SellerOrderDetailPanel } from "./SellerOrdersView";
 export type { SellerOrdersViewProps } from "./SellerOrdersView";
 export { SellerOffersView } from "./SellerOffersView";

package/dist/features/seller/components/index.js

@@ -2,6 +2,7 @@ export { SellerDashboardView } from "./SellerDashboardView.js";
 export { SellerProductsView } from "./SellerProductsView.js";
 export { SellerListingTypeView, SELLER_LISTING_TYPE_SPECS } from "./SellerListingTypeView.js";
 export { PrintCenterView } from "./PrintCenterView.js";
+export { DispatchForm } from "./DispatchForm.js";
 export { SellerOrdersView, SellerOrderDetailPanel } from "./SellerOrdersView.js";
 export { SellerOffersView } from "./SellerOffersView.js";
 export { SellerCouponsView } from "./SellerCouponsView.js";

package/dist/features/seller/repository/offer.repository.js

@@ -247,9 +247,10 @@ class OfferRepository extends BaseRepository {
             trigger: ctx?.trigger ?? "offerRepository.updateStatus",
             reason: ctx?.reason,
             note: ctx?.note,
-            // buyerName/buyerEmail live on this document. `encryptPiiFields` is a
-            // flat top-level loop and never descends into arrays, so without this
-            // they would persist in PLAINTEXT inside statusHistory.
+            // buyerName/buyerEmail live on this document. `encryptPiiFields` covers
+            // only NAMED paths, and nothing declares them under
+            // `statusHistory[].changes` — so without this scrub they persist in
+            // PLAINTEXT inside the history.
             piiFields: OFFER_PII_FIELDS,
             historyField: OFFER_FIELDS.STATUS_HISTORY,
             truncatedField: OFFER_FIELDS.STATUS_HISTORY_TRUNCATED,

package/dist/features/seller/schemas/firestore.d.ts

@@ -5,6 +5,7 @@ import { type GenerateOfferIdInput } from "../../../utils/id-generators";
 import type { BaseDocument } from "../../../_internal/shared/types/base-document";
 import type { StatusChangeEntry } from "../../../_internal/shared/history/index";
 import type { Encrypted, Plaintext } from "../../../security/encrypted";
+import type { OfferCoordination } from "../../../_internal/shared/features/offers/coordination";
 export type OfferStatus = "pending" | "accepted" | "declined" | "countered" | "expired" | "withdrawn" | "paid";
 /** Runtime-accessible offer status values — use instead of bare string literals. */
 export declare const OfferStatusValues: {
@@ -50,6 +51,25 @@ export interface OfferDocument extends BaseDocument {
     acceptedAt?: Date;
     checkoutDeadline?: Date;
     respondedAt?: Date;
+    /**
+     * Present when this offer is a COORDINATED purchase — several people
+     * chipping in on one listing.
+     *
+     * 🛑 A field on the offer, not a new document and not a new lifecycle.
+     * Acceptance produces an ordinary `offer-accepted` order; `unitPriceFor`
+     * already honours `lockedPrice`, so tax, payout base, refund ceiling and
+     * the invoice all follow with no new money term. See
+     * `_internal/shared/features/offers/coordination.ts` for the full list of
+     * things this deliberately does NOT add.
+     *
+     * 🛑 No member NAME is stored in here. `encryptPiiFields` CAN reach into an
+     * array (`coordination.members[].name`) — the claim that it cannot was
+     * wrong — but it covers only what is NAMED, and the near-miss `"name"`
+     * reads as covering it while storing plaintext. Members are uids; names
+     * resolve at render time, which removes the field rather than classifying
+     * it. See `coordination.ts`.
+     */
+    coordination?: OfferCoordination;
     /** Set by `markPaid` once the buyer's order exists — makes "paid" auditable. */
     paidOrderId?: string;
     paidAt?: Date;
@@ -93,8 +113,9 @@ export interface OfferDocument extends BaseDocument {
 /**
  * Fields whose changes are recorded in an offer's `statusHistory`.
  *
- * Excludes `buyerName`/`buyerEmail` (PII — `encryptPiiFields` never descends
- * into arrays, so they would persist in plaintext inside the history),
+ * Excludes `buyerName`/`buyerEmail` (PII — nothing declares them under
+ * `statusHistory[].changes`, and `encryptPiiFields` covers only NAMED paths,
+ * so they would persist in plaintext inside the history),
  * `buyerNote`/`sellerNote` (they ride in the entry's `note`), and
  * `updatedAt`/`respondedAt` (noise that would burn the FIFO cap).
  */

package/dist/features/seller/schemas/firestore.js

@@ -15,8 +15,9 @@ export const OfferStatusValues = {
 /**
  * Fields whose changes are recorded in an offer's `statusHistory`.
  *
- * Excludes `buyerName`/`buyerEmail` (PII — `encryptPiiFields` never descends
- * into arrays, so they would persist in plaintext inside the history),
+ * Excludes `buyerName`/`buyerEmail` (PII — nothing declares them under
+ * `statusHistory[].changes`, and `encryptPiiFields` covers only NAMED paths,
+ * so they would persist in plaintext inside the history),
  * `buyerNote`/`sellerNote` (they ride in the entry's `note`), and
  * `updatedAt`/`respondedAt` (noise that would burn the FIFO cap).
  */

package/dist/features/seller/schemas/index.d.ts

@@ -72,13 +72,13 @@ export declare const sellerStoreSchema: z.ZodObject<{
         totalReviews: z.ZodNumber;
         averageRating: z.ZodOptional<z.ZodNumber>;
     }, "strip", z.ZodTypeAny, {
-        itemsSold: number;
         totalProducts: number;
+        itemsSold: number;
         totalReviews: number;
         averageRating?: number | undefined;
     }, {
-        itemsSold: number;
         totalProducts: number;
+        itemsSold: number;
         totalReviews: number;
         averageRating?: number | undefined;
     }>>;
@@ -96,8 +96,8 @@ export declare const sellerStoreSchema: z.ZodObject<{
     location?: string | undefined;
     returnPolicy?: string | undefined;
     stats?: {
-        itemsSold: number;
         totalProducts: number;
+        itemsSold: number;
         totalReviews: number;
         averageRating?: number | undefined;
     } | undefined;
@@ -128,8 +128,8 @@ export declare const sellerStoreSchema: z.ZodObject<{
     location?: string | undefined;
     returnPolicy?: string | undefined;
     stats?: {
-        itemsSold: number;
         totalProducts: number;
+        itemsSold: number;
         totalReviews: number;
         averageRating?: number | undefined;
     } | undefined;

package/dist/features/seller/schemas/order-forms.d.ts

@@ -32,10 +32,30 @@ export declare const sellerOrderUpdateSchema: z.ZodEffects<z.ZodObject<{
 }>;
 export type SellerOrderUpdateValues = z.infer<typeof sellerOrderUpdateSchema>;
 /**
- * Manual shipment entry. `method` is a literal rather than an enum because
- * `ManualShippingProvider` is the only provider — see § "Provider Resolution".
+ * Shipment entry — manual, or booked through the platform.
+ *
+ * 🛑 **`method` was `z.literal("custom")`, and that literal WAS bug 0e.**
+ *
+ * Its comment said *"a literal rather than an enum because
+ * `ManualShippingProvider` is the only provider"* — no longer true:
+ * `providers/shipping-shiprocket/` is 570 lines with all six methods, and
+ * `providers.config.ts` already resolves it from
+ * `siteSettings.shipping.provider`. The seller simply could not EXPRESS
+ * "book this through us", so there was no option to offer, and
+ * `platformBookedShipment` — which `order-math.ts` gates reimbursement on —
+ * had zero writers.
+ *
+ * A DISCRIMINATED UNION rather than an enum plus optional fields, because
+ * the two branches need different things and an optional-everything shape
+ * cannot say so:
+ *
+ * · `custom` — the seller posted it and types the carrier and tracking id.
+ *   Those are REQUIRED, which is the rule enforced in three places today.
+ * · `platform` — we book it, so there is no tracking id to type; it comes
+ *   back from the carrier. Requiring one here would be asking the seller to
+ *   invent the thing the booking produces.
  */
-export declare const shipOrderSchema: z.ZodObject<{
+export declare const shipOrderSchema: z.ZodDiscriminatedUnion<"method", [z.ZodObject<{
     method: z.ZodLiteral<"custom">;
     shippingCarrier: z.ZodString;
     trackingNumber: z.ZodString;
@@ -50,7 +70,44 @@ export declare const shipOrderSchema: z.ZodObject<{
     shippingCarrier: string;
     trackingUrl: string;
     method: "custom";
-}>;
+}>, z.ZodObject<{
+    method: z.ZodLiteral<"platform">;
+    pickupAddressId: z.ZodString;
+    dimensions: z.ZodObject<{
+        weight: z.ZodNumber;
+        length: z.ZodNumber;
+        width: z.ZodNumber;
+        height: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        length: number;
+        weight: number;
+        height: number;
+        width: number;
+    }, {
+        length: number;
+        weight: number;
+        height: number;
+        width: number;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    pickupAddressId: string;
+    method: "platform";
+    dimensions: {
+        length: number;
+        weight: number;
+        height: number;
+        width: number;
+    };
+}, {
+    pickupAddressId: string;
+    method: "platform";
+    dimensions: {
+        length: number;
+        weight: number;
+        height: number;
+        width: number;
+    };
+}>]>;
 export type ShipOrderValues = z.infer<typeof shipOrderSchema>;
 /**
  * Marking one EMI installment paid. `installmentIndex` is 1-based, matching

package/dist/features/seller/schemas/order-forms.js

@@ -92,15 +92,48 @@ export const sellerOrderUpdateSchema = z
  * it is also called directly from a server action, where no route ran first.
  */
 /**
- * Manual shipment entry. `method` is a literal rather than an enum because
- * `ManualShippingProvider` is the only provider — see § "Provider Resolution".
+ * Shipment entry — manual, or booked through the platform.
+ *
+ * 🛑 **`method` was `z.literal("custom")`, and that literal WAS bug 0e.**
+ *
+ * Its comment said *"a literal rather than an enum because
+ * `ManualShippingProvider` is the only provider"* — no longer true:
+ * `providers/shipping-shiprocket/` is 570 lines with all six methods, and
+ * `providers.config.ts` already resolves it from
+ * `siteSettings.shipping.provider`. The seller simply could not EXPRESS
+ * "book this through us", so there was no option to offer, and
+ * `platformBookedShipment` — which `order-math.ts` gates reimbursement on —
+ * had zero writers.
+ *
+ * A DISCRIMINATED UNION rather than an enum plus optional fields, because
+ * the two branches need different things and an optional-everything shape
+ * cannot say so:
+ *
+ * · `custom` — the seller posted it and types the carrier and tracking id.
+ *   Those are REQUIRED, which is the rule enforced in three places today.
+ * · `platform` — we book it, so there is no tracking id to type; it comes
+ *   back from the carrier. Requiring one here would be asking the seller to
+ *   invent the thing the booking produces.
  */
-export const shipOrderSchema = z.object({
-    method: z.literal("custom"),
-    shippingCarrier: z.string().min(1),
-    trackingNumber: z.string().min(1),
-    trackingUrl: z.string().url(),
-});
+export const shipOrderSchema = z.discriminatedUnion("method", [
+    z.object({
+        method: z.literal("custom"),
+        shippingCarrier: z.string().min(1),
+        trackingNumber: z.string().min(1),
+        trackingUrl: z.string().url(),
+    }),
+    z.object({
+        method: z.literal("platform"),
+        /* The store address the courier collects from. */
+        pickupAddressId: z.string().min(1),
+        dimensions: z.object({
+            weight: z.number().positive().max(50),
+            length: z.number().positive().max(200),
+            width: z.number().positive().max(200),
+            height: z.number().positive().max(200),
+        }),
+    }),
+]);
 /**
  * Marking one EMI installment paid. `installmentIndex` is 1-based, matching
  * how the schedule is presented to the buyer.

package/dist/features/shipments/schemas/firestore.d.ts

@@ -43,7 +43,32 @@ export interface ShipmentTotals {
 export declare const DEFAULT_SHIPMENT_TOTALS: ShipmentTotals;
 export interface ShipmentDocument extends BaseDocument {
     shipmentNumber: string;
+    /**
+     * The supplier as TYPED. Kept, and kept required, for display.
+     *
+     * 🛑 It is free text, so four shipments from one supplier are four
+     * unjoined strings — "Acme Toys", "acme toys", "Acme Toys Ltd", "ACME".
+     * Nothing can total what we have spent with anyone, which is the first
+     * question anybody asks of procurement data.
+     */
     supplierName: string;
+    /**
+     * The joinable identity — a `vendors` row.
+     *
+     * 🛑 OPTIONAL, and that is deliberate rather than a migration left half
+     * done. Every existing shipment has only the string, and backfilling by
+     * fuzzy-matching names is precisely how two real suppliers get merged into
+     * one spend figure that nobody can unpick afterwards. A shipment gains an
+     * id when a human links it; until then it is honestly unattributed, and
+     * the vendor report can say how many are.
+     *
+     * 🛑 The NAME is not derived from the vendor row on read. Two reasons: a
+     * vendor rename would retroactively rewrite what every past shipment says
+     * it was bought from, and the typed string is evidence of what the invoice
+     * actually said. Same stance the order item's frozen listing snapshot
+     * takes (Part 14).
+     */
+    supplierId?: string;
     originCountry?: string;
     status: ShipmentStatus;
     trackingNumber?: string;

package/dist/features/shipping-boxes/repository/shipping-boxes.repository.d.ts

@@ -39,5 +39,44 @@ export declare class ShippingBoxesRepository extends BaseRepository<ShippingBoxD
         box: ShippingBoxDocument;
         created: boolean;
     }>;
+    /**
+     * Every preset, retired included — the staff management list.
+     *
+     * Separate from `listActive` for the same reason the dispute reasons are: the
+     * picker must never offer a retired row, and a management view must be able
+     * to find one in order to put it back.
+     */
+    listAll(model: SieveModel): Promise<FirebaseSieveResult<ShippingBoxDocument>>;
+    /**
+     * Correct a preset's dimensions. **Staff only** — enforced at the route.
+     *
+     * ## 🛑 This does NOT change any dispatched parcel, by construction
+     *
+     * The dimensions are COPIED onto the shipment at use time (the schema's own
+     * header: *"a preset is a DEFAULT, never a lock"*), so there is no stored
+     * reference for this to reach through. That is precisely why staff editing is
+     * safe to offer at all: a seller's past declaration is a snapshot, and the
+     * courier billed against the figures at dispatch.
+     *
+     * It is staff-only for the mirror reason — these numbers are what the NEXT
+     * seller's dispatch form defaults to, so a wrong edit misdeclares other
+     * people's parcels. A seller who finds a preset wrong adds a new one; staff
+     * decide whether the shared row changes.
+     *
+     * 🛑 The NAME is deliberately not editable. The id is `box-<slug of name>`,
+     * so renaming would either leave the id disagreeing with the name (the
+     * mirror-drift trap) or require a new document, which is just a create. Add
+     * the correctly-named preset and retire this one.
+     */
+    updatePreset(id: string, input: {
+        length?: number;
+        width?: number;
+        height?: number;
+        tareWeight?: number;
+    }): Promise<void>;
+    /** Soft-retire. See the schema for why this is never a delete. */
+    retire(id: string): Promise<void>;
+    /** Put a retired preset back in the picker. */
+    reactivate(id: string): Promise<void>;
 }
 export declare const shippingBoxesRepository: ShippingBoxesRepository;

package/dist/features/shipping-boxes/repository/shipping-boxes.repository.js

@@ -58,6 +58,61 @@ export class ShippingBoxesRepository extends BaseRepository {
         await this.createWithId(id, box);
         return { box, created: true };
     }
+    /**
+     * Every preset, retired included — the staff management list.
+     *
+     * Separate from `listActive` for the same reason the dispute reasons are: the
+     * picker must never offer a retired row, and a management view must be able
+     * to find one in order to put it back.
+     */
+    async listAll(model) {
+        return this.sieveQuery(model, ShippingBoxesRepository.SIEVE_FIELDS, {
+            baseQuery: this.getCollection(),
+            defaultPageSize: 20,
+            maxPageSize: 50,
+        });
+    }
+    /**
+     * Correct a preset's dimensions. **Staff only** — enforced at the route.
+     *
+     * ## 🛑 This does NOT change any dispatched parcel, by construction
+     *
+     * The dimensions are COPIED onto the shipment at use time (the schema's own
+     * header: *"a preset is a DEFAULT, never a lock"*), so there is no stored
+     * reference for this to reach through. That is precisely why staff editing is
+     * safe to offer at all: a seller's past declaration is a snapshot, and the
+     * courier billed against the figures at dispatch.
+     *
+     * It is staff-only for the mirror reason — these numbers are what the NEXT
+     * seller's dispatch form defaults to, so a wrong edit misdeclares other
+     * people's parcels. A seller who finds a preset wrong adds a new one; staff
+     * decide whether the shared row changes.
+     *
+     * 🛑 The NAME is deliberately not editable. The id is `box-<slug of name>`,
+     * so renaming would either leave the id disagreeing with the name (the
+     * mirror-drift trap) or require a new document, which is just a create. Add
+     * the correctly-named preset and retire this one.
+     */
+    async updatePreset(id, input) {
+        const patch = { updatedAt: new Date() };
+        if (input.length !== undefined)
+            patch.length = clampCm(input.length);
+        if (input.width !== undefined)
+            patch.width = clampCm(input.width);
+        if (input.height !== undefined)
+            patch.height = clampCm(input.height);
+        if (input.tareWeight !== undefined)
+            patch.tareWeight = clampKg(input.tareWeight);
+        await this.update(id, patch);
+    }
+    /** Soft-retire. See the schema for why this is never a delete. */
+    async retire(id) {
+        await this.update(id, { isActive: false, updatedAt: new Date() });
+    }
+    /** Put a retired preset back in the picker. */
+    async reactivate(id) {
+        await this.update(id, { isActive: true, updatedAt: new Date() });
+    }
 }
 ShippingBoxesRepository.SIEVE_FIELDS = {
     /*

package/dist/features/shipping-boxes/schemas/firestore.d.ts

@@ -27,10 +27,10 @@
  * cannot dispute without the parcel. The form says so rather than treating it
  * as a required field to get past.
  */
+import type { BaseDocument } from "../../../_internal/shared/types/base-document";
 /** `box-` prefixed slug, so the id reads as what it is. */
 export declare const SHIPPING_BOX_COLLECTION = "shippingBoxes";
-export interface ShippingBoxDocument {
-    id: string;
+export interface ShippingBoxDocument extends BaseDocument {
     /** What a seller picks it by: "Standard Beyblade carton", "Poly mailer S". */
     name: string;
     /** cm. */
@@ -55,8 +55,6 @@ export interface ShippingBoxDocument {
      * not vanish mid-dispatch, and a deleted row takes its author with it.
      */
     isActive: boolean;
-    createdAt: Date;
-    updatedAt: Date;
 }
 export declare const SHIPPING_BOX_FIELDS: {
     readonly ID: "id";

package/dist/features/stores/repository/store.repository.d.ts

@@ -29,6 +29,24 @@ export declare class StoreRepository extends BaseRepository<StoreDocument> {
      * Find a store by its URL slug (also the document ID).
      */
     findBySlug(storeSlug: string): Promise<StoreDocument | null>;
+    /**
+     * The slugs of every store paid at shipping rather than at delivery.
+     *
+     * 🛑 A `Set` of IDS, not the documents. The payout sweep needs only
+     * membership, and loading full store documents for a question answered by a
+     * string would spend the ~3-round-trip budget (Rule #6) on data it discards.
+     *
+     * 🛑 An EQUALITY on `trustedSeller == true`, never `!= false`. A Firestore
+     * inequality excludes every document that LACKS the field — which is every
+     * store, since the flag is new and optional — so `!=` would return the
+     * trusted set and nothing else, or everything, depending on which way you
+     * wrote it. Both are wrong and neither raises.
+     *
+     * Bounded at 500: trust is granted by hand, one store at a time, on risk
+     * grounds. If this ever saturates, the grant has stopped being deliberate
+     * and that is the thing to fix rather than the limit.
+     */
+    findTrustedStoreIds(): Promise<Set<string>>;
     /**
      * Find the store owned by a specific user UID.
      */