@mohasinac/appkit 4.70.0 → 4.71.0

package/dist/providers/payment-manual/index.js

@@ -40,6 +40,19 @@ export class ManualPaymentProvider extends IPaymentProvider {
     verifyWebhook(_payload, _signature) {
         return false;
     }
+    /**
+     * Manual payment has no gateway callback to verify, so there is nothing that
+     * could make this true.
+     *
+     * 🛑 `false`, never `true`. This is the check that decides whether a payment
+     * is genuine; a provider that cannot verify must REJECT, not wave through.
+     * Returning `true` here would mean a forged gateway callback is accepted on
+     * any install where the gateway flag is off — which is exactly the install
+     * where nobody is watching for one.
+     */
+    verifyCheckoutSignature(_payload, _secret) {
+        return false;
+    }
     /**
      * Manual payments are considered captured the moment the buyer's
      * reference/proof is recorded — there is no separate auth+capture step.

package/dist/providers/payment-phonepe/index.d.ts

@@ -38,7 +38,7 @@
  */
 import type { JsonValue } from "@mohasinac/appkit";
 import { IPaymentProvider } from "../../contracts";
-import type { PaymentOrder, PaymentCapture, Refund, Dispute, GatewayPaymentRecord } from "../../contracts";
+import type { CheckoutIntentMetadata, PaymentOrder, PaymentCapture, Refund, Dispute, GatewayPaymentRecord } from "../../contracts";
 /**
  * PhonePe's `metaInfo` (udf1-udf5, ≤256 chars each) is the only channel that
  * survives from `createOrder()` through to BOTH the Order Status API AND the
@@ -48,12 +48,15 @@ import type { PaymentOrder, PaymentCapture, Refund, Dispute, GatewayPaymentRecor
  * the tab mid-payment. See `confirmAndPlacePhonePeOrderAction` in
  * `_internal/server/features/checkout/actions.ts`.
  */
-export interface PhonePeCheckoutIntent {
-    uid: string;
-    addressId?: string;
-    outOfStockPolicy?: string;
-    notes?: string;
-}
+/**
+ * @deprecated Use `CheckoutIntentMetadata` from `contracts/payment`.
+ *
+ * Kept as an alias so existing imports keep compiling. Every field is ours —
+ * the only PhonePe-specific thing was the name, and it forced generic checkout
+ * code to import this provider for a TYPE (A4). PhonePe carries it in
+ * `udf1..udf4`; that is a packing detail, not a definition.
+ */
+export type PhonePeCheckoutIntent = CheckoutIntentMetadata;
 export interface PhonePeConfig {
     clientId: string;
     clientSecret: string;
@@ -97,6 +100,19 @@ export declare class PhonePeProvider extends IPaymentProvider {
      * the existing webhook route already does.
      */
     verifyWebhook(payload: string, signature: string): boolean;
+    /**
+     * PhonePe has no buyer-present SIGNED callback of this shape.
+     *
+     * Its redirect carries no signature — confirmation comes from the Order
+     * Status API or the webhook (`verifyWebhook` above, which does the real
+     * `validateCallback`). So there is nothing here to verify, and the honest
+     * answer is rejection.
+     *
+     * 🛑 `false`, never `true`. "No signature to check" and "the signature is
+     * good" must never collapse into the same return value on the call that
+     * decides whether a payment is genuine.
+     */
+    verifyCheckoutSignature(_payload: Record<string, string>, _secret: string): boolean;
     /** Wraps the Order Status API. `orderId` here is our `merchantOrderId`. */
     capturePayment(orderId: string): Promise<PaymentCapture>;
     /**

package/dist/providers/payment-phonepe/index.js

@@ -158,6 +158,21 @@ export class PhonePeProvider extends IPaymentProvider {
             return false;
         }
     }
+    /**
+     * PhonePe has no buyer-present SIGNED callback of this shape.
+     *
+     * Its redirect carries no signature — confirmation comes from the Order
+     * Status API or the webhook (`verifyWebhook` above, which does the real
+     * `validateCallback`). So there is nothing here to verify, and the honest
+     * answer is rejection.
+     *
+     * 🛑 `false`, never `true`. "No signature to check" and "the signature is
+     * good" must never collapse into the same return value on the call that
+     * decides whether a payment is genuine.
+     */
+    verifyCheckoutSignature(_payload, _secret) {
+        return false;
+    }
     /** Wraps the Order Status API. `orderId` here is our `merchantOrderId`. */
     async capturePayment(orderId) {
         const status = await this.client.getOrderStatus(orderId, true);

package/dist/providers/payment-razorpay/index.d.ts

@@ -89,6 +89,19 @@ export declare class RazorpayProvider extends IPaymentProvider {
      * is not guaranteed to reproduce the bytes that were signed.
      */
     verifyWebhook(payload: string, signature: string): boolean;
+    /**
+     * The buyer-present callback from `checkout.js`.
+     *
+     * 🛑 Delegates to the SAME `verifyPaymentSignature` the checkout action
+     * called directly before A4b — identical HMAC, identical `hexEqual`
+     * comparison, identical `if (!keySecret) return false`. The dispatch moved
+     * behind the contract; the arithmetic did not move at all. That is what let
+     * this be proven equivalent rather than argued about.
+     *
+     * The three fields are checked before the cast: a callback missing any of
+     * them cannot be verified, and "cannot verify" is rejection.
+     */
+    verifyCheckoutSignature(payload: Record<string, string>, secret: string): boolean;
     /**
      * Resolves a `pay_…` id for either id shape.
      *

package/dist/providers/payment-razorpay/index.js

@@ -54,7 +54,9 @@ import Razorpay from "razorpay";
 import { IPaymentProvider } from "../../contracts/index.js";
 import { getDefaultCurrency } from "../../core/baseline-resolver.js";
 import { paiseToRupees } from "../../core/money.js";
-import { verifyWebhookSignature } from "./signature.js";
+// `verifyPaymentSignature` is re-exported below, but a re-export does not bring
+// it into THIS module's scope — `verifyCheckoutSignature` calls it directly.
+import { verifyPaymentSignature, verifyWebhookSignature } from "./signature.js";
 export { verifyPaymentSignature, verifyWebhookSignature, } from "./signature.js";
 /** Razorpay's own order status vocabulary → the contract's. */
 function mapOrderStatus(status) {
@@ -144,6 +146,24 @@ export class RazorpayProvider extends IPaymentProvider {
             return false;
         return verifyWebhookSignature(payload, signature, this.webhookSecret);
     }
+    /**
+     * The buyer-present callback from `checkout.js`.
+     *
+     * 🛑 Delegates to the SAME `verifyPaymentSignature` the checkout action
+     * called directly before A4b — identical HMAC, identical `hexEqual`
+     * comparison, identical `if (!keySecret) return false`. The dispatch moved
+     * behind the contract; the arithmetic did not move at all. That is what let
+     * this be proven equivalent rather than argued about.
+     *
+     * The three fields are checked before the cast: a callback missing any of
+     * them cannot be verified, and "cannot verify" is rejection.
+     */
+    verifyCheckoutSignature(payload, secret) {
+        const { razorpay_order_id, razorpay_payment_id, razorpay_signature } = payload;
+        if (!razorpay_order_id || !razorpay_payment_id || !razorpay_signature)
+            return false;
+        return verifyPaymentSignature({ razorpay_order_id, razorpay_payment_id, razorpay_signature }, secret);
+    }
     /**
      * Resolves a `pay_…` id for either id shape.
      *

package/dist/providers/tax-india-gst/index.d.ts

@@ -0,0 +1,45 @@
+/**
+ * India GST — the default `ITaxProvider`.
+ *
+ * ## 🛑 This DELEGATES. Every figure still comes from `calculateGst` /
+ * `calculateGstInclusive`.
+ *
+ * Not a rewrite, on purpose. Those two functions split the intra-state half
+ * differently and the difference is load-bearing:
+ *
+ *   calculateGst           cgst = sgst = round(gst / 2); gst RE-DERIVED as half*2
+ *   calculateGstInclusive  cgst = round(gst / 2); sgst = round(gst - cgst)
+ *
+ * Measured on ₹66.67 at 18% inclusive: cgst 5.09, sgst 5.08 — the remainder
+ * lands in sgst so the parts still sum to 10.17. Reimplementing the maths here
+ * to make the two agree would move a paisa on figures GST is filed on. The
+ * seam's whole value is that it adds an abstraction WITHOUT touching arithmetic.
+ *
+ * Verified by `.build-memory/tax-roundtrip.mjs` — 397 breakdowns across every
+ * slab, both supply directions and the rounding edges, byte-identical.
+ *
+ * @tag domain:tax
+ * @tag layer:provider
+ * @tag access:isomorphic
+ */
+import { ITaxProvider, type TaxBreakdown, type TaxJurisdiction, type TaxableItem } from "../../contracts/tax";
+export declare class IndiaGstTaxProvider extends ITaxProvider {
+    readonly id = "india-gst";
+    /**
+     * Intra-state when origin and destination states match.
+     *
+     * 🛑 Absent information is treated as INTRA-state, which preserves the
+     * existing behaviour exactly rather than improving on it. Every current
+     * caller passes an `intraState` boolean it computed itself, and the defaults
+     * across those call sites resolve to intra-state when a place of supply is
+     * unknown — changing that here would alter tax on orders with an incomplete
+     * delivery snapshot, which is precisely the class of row most likely to
+     * exist. A stricter rule is a product decision, not a side effect of adding
+     * an interface.
+     */
+    isSameRegion(jurisdiction: TaxJurisdiction): boolean;
+    onExclusive(item: TaxableItem, jurisdiction: TaxJurisdiction, taxableAmount: number): TaxBreakdown;
+    onInclusive(item: TaxableItem, jurisdiction: TaxJurisdiction, gross: number): TaxBreakdown;
+}
+/** The default instance. A consumer in another jurisdiction registers its own. */
+export declare const indiaGstTaxProvider: IndiaGstTaxProvider;

package/dist/providers/tax-india-gst/index.js

@@ -0,0 +1,78 @@
+/**
+ * India GST — the default `ITaxProvider`.
+ *
+ * ## 🛑 This DELEGATES. Every figure still comes from `calculateGst` /
+ * `calculateGstInclusive`.
+ *
+ * Not a rewrite, on purpose. Those two functions split the intra-state half
+ * differently and the difference is load-bearing:
+ *
+ *   calculateGst           cgst = sgst = round(gst / 2); gst RE-DERIVED as half*2
+ *   calculateGstInclusive  cgst = round(gst / 2); sgst = round(gst - cgst)
+ *
+ * Measured on ₹66.67 at 18% inclusive: cgst 5.09, sgst 5.08 — the remainder
+ * lands in sgst so the parts still sum to 10.17. Reimplementing the maths here
+ * to make the two agree would move a paisa on figures GST is filed on. The
+ * seam's whole value is that it adds an abstraction WITHOUT touching arithmetic.
+ *
+ * Verified by `.build-memory/tax-roundtrip.mjs` — 397 breakdowns across every
+ * slab, both supply directions and the rounding edges, byte-identical.
+ *
+ * @tag domain:tax
+ * @tag layer:provider
+ * @tag access:isomorphic
+ */
+import { ITaxProvider, } from "../../contracts/tax.js";
+import { calculateGst, calculateGstInclusive, } from "../../_internal/shared/fees/calculator.js";
+/** CGST and SGST are each HALF the headline rate; IGST carries all of it. */
+function componentsFrom(breakdown, rate) {
+    const half = rate / 2;
+    if (breakdown.igst > 0 || (breakdown.cgst === 0 && breakdown.sgst === 0 && breakdown.gstAmount > 0)) {
+        return [{ code: "igst", label: "IGST", rate, amount: breakdown.igst }];
+    }
+    if (breakdown.gstAmount === 0)
+        return [];
+    return [
+        { code: "cgst", label: "CGST", rate: half, amount: breakdown.cgst },
+        { code: "sgst", label: "SGST", rate: half, amount: breakdown.sgst },
+    ];
+}
+function toBreakdown(breakdown, rate) {
+    return {
+        taxableAmount: breakdown.taxableAmount,
+        taxAmount: breakdown.gstAmount,
+        components: componentsFrom(breakdown, rate),
+    };
+}
+export class IndiaGstTaxProvider extends ITaxProvider {
+    constructor() {
+        super(...arguments);
+        this.id = "india-gst";
+    }
+    /**
+     * Intra-state when origin and destination states match.
+     *
+     * 🛑 Absent information is treated as INTRA-state, which preserves the
+     * existing behaviour exactly rather than improving on it. Every current
+     * caller passes an `intraState` boolean it computed itself, and the defaults
+     * across those call sites resolve to intra-state when a place of supply is
+     * unknown — changing that here would alter tax on orders with an incomplete
+     * delivery snapshot, which is precisely the class of row most likely to
+     * exist. A stricter rule is a product decision, not a side effect of adding
+     * an interface.
+     */
+    isSameRegion(jurisdiction) {
+        const { origin, destination } = jurisdiction;
+        if (!origin || !destination)
+            return true;
+        return origin.trim().toUpperCase() === destination.trim().toUpperCase();
+    }
+    onExclusive(item, jurisdiction, taxableAmount) {
+        return toBreakdown(calculateGst(item.rate, this.isSameRegion(jurisdiction), taxableAmount), item.rate);
+    }
+    onInclusive(item, jurisdiction, gross) {
+        return toBreakdown(calculateGstInclusive(item.rate, this.isSameRegion(jurisdiction), gross), item.rate);
+    }
+}
+/** The default instance. A consumer in another jurisdiction registers its own. */
+export const indiaGstTaxProvider = new IndiaGstTaxProvider();

package/dist/react/hooks/useScrollToTop.d.ts

@@ -0,0 +1,5 @@
+export interface UseScrollToTopOptions {
+    /** Skip scrolling without unmounting the caller. Default `true`. */
+    enabled?: boolean;
+}
+export declare function useScrollToTop(key: string | null | undefined, { enabled }?: UseScrollToTopOptions): void;

package/dist/react/hooks/useScrollToTop.js

@@ -0,0 +1,70 @@
+"use client";
+/**
+ * useScrollToTop — jump to the top whenever a key changes.
+ *
+ * ## Why a HOOK and not a `<ScrollToTop />` component
+ *
+ * The consumer had a 17-line component doing exactly this. Lifting it as a
+ * component would not work: the only interesting line is
+ * `usePathname()` from `@/i18n/navigation`, and that is the consumer's own
+ * routing choice (next-intl, locale-prefixed). appkit cannot import it, and
+ * taking a `pathname` prop would mean a component whose entire job is to pass
+ * one value to one effect.
+ *
+ * So the mechanism moves and the binding stays: the consumer keeps a four-line
+ * mount that supplies its own `usePathname()`.
+ *
+ * ## 🛑 `behavior: "auto"`, deliberately
+ *
+ * Not `"smooth"`. A route change should look instantaneous; smooth-scrolling a
+ * fresh page animates content the reader has not seen yet, and on a long page
+ * the animation is still running when they start reading. It also ignores
+ * `prefers-reduced-motion`, which `"auto"` sidesteps entirely by not animating.
+ *
+ * ## 🛑 Does NOT fire on mount
+ *
+ * `useEffect` with a dependency runs on mount too, which would fight the
+ * browser's own scroll restoration on a back-navigation — the reader returns to
+ * a list, the browser restores their place, and this yanks them to the top.
+ * The first run is skipped so only genuine changes scroll.
+ *
+ * That is a behaviour FIX, not a port: the consumer's component scrolled on
+ * mount. It was unnoticeable there because Next remounts the tree on a hard
+ * load anyway, but it is wrong for a hook anyone may mount mid-tree.
+ *
+ * @example
+ * ```tsx
+ * "use client";
+ * import { usePathname } from "@/i18n/navigation";
+ * import { useScrollToTop } from "@mohasinac/appkit/react/hooks/useScrollToTop";
+ *
+ * export function ScrollToTop() {
+ *   useScrollToTop(usePathname());
+ *   return null;
+ * }
+ * ```
+ *
+ * @tag domain:routing
+ * @tag layer:client
+ * @tag access:client
+ * @tag sideEffects:dom
+ */
+import { useEffect, useRef } from "react";
+export function useScrollToTop(key, { enabled = true } = {}) {
+    const previous = useRef(undefined);
+    useEffect(() => {
+        if (!enabled)
+            return;
+        // First run: record and do nothing — see the note on scroll restoration.
+        if (previous.current === undefined) {
+            previous.current = key;
+            return;
+        }
+        if (previous.current === key)
+            return;
+        previous.current = key;
+        if (typeof window === "undefined")
+            return;
+        window.scrollTo({ top: 0, left: 0, behavior: "auto" });
+    }, [key, enabled]);
+}

package/dist/schemas/registry.d.ts

@@ -4608,7 +4608,7 @@ export declare const SCHEMAS: {
             status: "open" | "closed" | "in_progress" | "waiting_on_user" | "resolved";
             id: string;
             description: string;
-            category: "general" | "account" | "order_issue" | "billing_payment" | "listing_dispute" | "scam_report" | "refund_request" | "auction_dispute" | "store_change_request" | "order_modification_request" | "unban_request";
+            category: "general" | "order_issue" | "billing_payment" | "account" | "listing_dispute" | "scam_report" | "refund_request" | "auction_dispute" | "store_change_request" | "order_modification_request" | "unban_request";
             createdAt: string | Date | import("zod").objectOutputType<{
                 toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
             }, import("zod").ZodTypeAny, "passthrough">;
@@ -4651,7 +4651,7 @@ export declare const SCHEMAS: {
             status: "open" | "closed" | "in_progress" | "waiting_on_user" | "resolved";
             id: string;
             description: string;
-            category: "general" | "account" | "order_issue" | "billing_payment" | "listing_dispute" | "scam_report" | "refund_request" | "auction_dispute" | "store_change_request" | "order_modification_request" | "unban_request";
+            category: "general" | "order_issue" | "billing_payment" | "account" | "listing_dispute" | "scam_report" | "refund_request" | "auction_dispute" | "store_change_request" | "order_modification_request" | "unban_request";
             createdAt: string | Date | import("zod").objectInputType<{
                 toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
             }, import("zod").ZodTypeAny, "passthrough">;

package/dist/seo/json-ld.js

@@ -13,7 +13,27 @@
  * ```
  */
 const SITE_URL = process.env.NEXT_PUBLIC_SITE_URL ?? "";
-const SITE_NAME = process.env.NEXT_PUBLIC_SITE_NAME ?? "App";
+/**
+ * The brand name, from the injected identity rather than an env var.
+ *
+ * 🛑 A FUNCTION, not a module `const`, and that matters twice over. This was
+ * `const SITE_NAME = process.env.NEXT_PUBLIC_SITE_NAME ?? "App"`, which:
+ *
+ *  - captured its value at IMPORT time, so even after `configureBrand()` runs
+ *    it would have kept whatever it read first; and
+ *  - read the env var this file's own comment at `SiteIdentityOptions` records
+ *    as having shipped `"Letitrip"` to production — the wrong casing, in the
+ *    `Organization.name` Google may put in a Knowledge Panel.
+ *
+ * That comment fixed the two site-wide nodes by taking `opts.siteName`. It did
+ * not fix `publisher` below, which has no opts path, so every article still
+ * emitted the env value. Resolving through `getBrandName()` closes both: there
+ * is now one owner (`appkit.config.js → brand`) and no mis-typeable env var in
+ * the path.
+ */
+function siteName() {
+    return getBrandName();
+}
 /**
  * schema.org requires ABSOLUTE URLs. A relative `image` or `item` is not a
  * lenient-parse case — Google rejects the property, and `image` is *required*
@@ -57,6 +77,7 @@ function absoluteUrl(value, base = SITE_URL) {
     return `${base.replace(/\/+$/, "")}/${v.replace(/^\/+/, "")}`;
 }
 import { ProductStatusValues } from "../features/products/schemas/index.js";
+import { getBrandName } from "../core/brand-resolver.js";
 import { getDefaultCurrency } from "../core/baseline-resolver.js";
 // The defining module, never the `/client` entry: this file is reached from
 // server-only metadata paths and must not pull in a `"use client"` module
@@ -252,12 +273,12 @@ export function blogPostJsonLd(post) {
         author: post.authorName
             ? { "@type": "Person", name: post.authorName, image: post.authorAvatar }
             : undefined,
-        publisher: { "@type": "Organization", name: SITE_NAME, url: SITE_URL },
+        publisher: { "@type": "Organization", name: siteName(), url: SITE_URL },
         mainEntityOfPage: { "@type": "WebPage", "@id": url },
     };
 }
 export function organizationJsonLd(opts) {
-    const name = opts?.siteName?.trim() || SITE_NAME;
+    const name = opts?.siteName?.trim() || siteName();
     const base = (opts?.siteUrl?.trim() || SITE_URL).replace(/\/+$/, "");
     // `sameAs: []` was hardcoded empty while appkit.config.js carried real
     // socialUrls that nothing read. An empty array is worse than omitting the key.
@@ -305,7 +326,7 @@ export function organizationJsonLd(opts) {
     };
 }
 export function searchBoxJsonLd(opts) {
-    const name = opts?.siteName?.trim() || SITE_NAME;
+    const name = opts?.siteName?.trim() || siteName();
     const base = (opts?.siteUrl?.trim() || SITE_URL).replace(/\/+$/, "");
     return {
         "@context": "https://schema.org",

package/dist/ui/components/SiteLogo.d.ts

@@ -15,8 +15,26 @@ export interface SiteLogoProps {
      * dark-primary surfaces in light mode etc.
      */
     tone?: SiteLogoTone;
-    /** Accessible title; defaults to "LetItRip.in". */
+    /** Accessible title. Defaults to `wordmark` + `tld`, so one prop usually suffices. */
     title?: string;
+    /**
+     * The wordmark GLYPHS. Defaults to `title`.
+     *
+     * 🛑 Separate from `title` because they are different things and conflating
+     * them is what hid the brand here. `title` is the accessible name; this is
+     * the text actually drawn in the SVG — and until A5 that text was the literal
+     * `LetItRip`, unreachable by any prop. A consumer could rename the accessible
+     * title and still render someone else's brand.
+     */
+    wordmark?: string;
+    /**
+     * Optional TLD badge drawn in a pill after the wordmark, e.g. `"in"`.
+     *
+     * Omitted by default: a library must not assume its consumer has a TLD worth
+     * showing, let alone which one. `TitleBarLayout` threads `brandTld` through
+     * for the installs that want it.
+     */
+    tld?: string;
     /**
      * Optional admin-uploaded image URL. When present, renders an `<MediaImage>`
      * instead of the SVG wordmark (so the watermark proxy applies). Falls back
@@ -24,4 +42,4 @@ export interface SiteLogoProps {
      */
     src?: string;
 }
-export declare function SiteLogo({ size, tone, title, src, }: SiteLogoProps): import("react").JSX.Element;
+export declare function SiteLogo({ size, tone, title, wordmark, tld, src, }: SiteLogoProps): import("react").JSX.Element;

package/dist/ui/components/SiteLogo.js

@@ -1,12 +1,23 @@
 "use client";
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 /**
- * LetItRip site logo — SVG wordmark "LetItRip" + small ".in" superscript.
+ * Site logo — an SVG wordmark with an optional TLD badge.
+ *
+ * 🛑 The glyphs are the CONSUMER's. This header used to read "SVG wordmark
+ * LetItRip + small .in superscript", and that was an accurate description: the
+ * text was baked into the SVG where no prop could reach it, so every install of
+ * appkit rendered one Indian marketplace's name in its own header. Both are
+ * props now (`wordmark`, `tld`), threaded from `appkit.config.js` through
+ * `AppLayoutShell` -> `TitleBarLayout`.
  *
  * Single source of truth for the site brand mark. The wordmark gradient
  * follows the active theme via `var(--appkit-gradient-logo)`, so a custom
  * admin theme automatically restyles the logo without forking the SVG.
  *
+ * 🛑 The 214-unit viewBox was drawn around an eight-glyph wordmark. A much
+ * longer name will overflow it — pass `src` and use a real logo image rather
+ * than expecting the SVG to re-letter itself.
+ *
  * Sizes are responsive presets — the variant catalogue forbids consumer-side
  * className overrides on primitive components.
  */
@@ -38,18 +49,29 @@ function resolveFill(tone, gradientId) {
             return `url(#${gradientId})`;
     }
 }
-export function SiteLogo({ size = "md", tone = "brand", title = "LetItRip.in", src, }) {
+export function SiteLogo({ size = "md", tone = "brand", 
+/*
+ * 🛑 No brand default. This read `title = "LetItRip.in"`, which put one
+ * consumer's name in a library primitive — and the SVG below ignored it
+ * anyway, drawing the literal `LetItRip` that no prop could reach.
+ *
+ * `"Site"` is deliberately bland: an unconfigured install should look
+ * obviously unconfigured rather than silently wear someone else's brand.
+ */
+title, wordmark, tld, src, }) {
+    const text = wordmark ?? title ?? "Site";
+    const accessibleTitle = title ?? (tld ? `${text}.${tld}` : text);
     const uid = useId();
     const gradientId = `${GRADIENT_ID_PREFIX}-${uid.replace(/:/g, "")}`;
     const heightCls = SIZE_HEIGHTS[size];
     if (src) {
-        return (_jsx(MediaImage, { src: src, alt: title, size: "thumbnail", objectFit: "contain", 
+        return (_jsx(MediaImage, { src: src, alt: accessibleTitle, size: "thumbnail", objectFit: "contain", 
             // backed by the catalogued `size` enum; no consumer-provided overrides.
             className: `block w-auto ${heightCls}` }));
     }
     const fill = resolveFill(tone, gradientId);
     const isGradient = tone === "brand";
-    return (_jsxs("svg", { xmlns: "http://www.w3.org/2000/svg", viewBox: "0 0 214 56", role: "img", "aria-label": title, "data-testid": "site-logo", 
+    return (_jsxs("svg", { xmlns: "http://www.w3.org/2000/svg", viewBox: "0 0 214 56", role: "img", "aria-label": accessibleTitle, "data-testid": "site-logo", 
         // backed by the catalogued `size` enum; no consumer-provided overrides.
-        className: `block w-auto ${heightCls}`, children: [_jsx("title", { children: title }), isGradient && (_jsx("defs", { children: _jsxs("linearGradient", { id: gradientId, x1: "0%", y1: "0%", x2: "100%", y2: "0%", children: [_jsx("stop", { offset: "0%", style: { stopColor: "var(--appkit-logo-stop-from)" } }), _jsx("stop", { offset: "55%", style: { stopColor: "var(--appkit-logo-stop-mid)" } }), _jsx("stop", { offset: "100%", style: { stopColor: "var(--appkit-logo-stop-to)" } })] }) })), _jsx("text", { x: "0", y: "44", fontFamily: "ui-sans-serif, system-ui, -apple-system, 'Segoe UI', Roboto, sans-serif", fontWeight: "800", fontSize: "44", letterSpacing: "-1.5", fill: fill, children: "LetItRip" }), _jsx("rect", { x: "169", y: "5", width: "43", height: "21", rx: "10.5", fill: fill, opacity: "0.12" }), _jsx("text", { x: "174", y: "21", fontFamily: "ui-sans-serif, system-ui, -apple-system, 'Segoe UI', Roboto, sans-serif", fontWeight: "700", fontSize: "15", letterSpacing: "0.2", fill: fill, children: ".in" })] }));
+        className: `block w-auto ${heightCls}`, children: [_jsx("title", { children: accessibleTitle }), isGradient && (_jsx("defs", { children: _jsxs("linearGradient", { id: gradientId, x1: "0%", y1: "0%", x2: "100%", y2: "0%", children: [_jsx("stop", { offset: "0%", style: { stopColor: "var(--appkit-logo-stop-from)" } }), _jsx("stop", { offset: "55%", style: { stopColor: "var(--appkit-logo-stop-mid)" } }), _jsx("stop", { offset: "100%", style: { stopColor: "var(--appkit-logo-stop-to)" } })] }) })), _jsx("text", { x: "0", y: "44", fontFamily: "ui-sans-serif, system-ui, -apple-system, 'Segoe UI', Roboto, sans-serif", fontWeight: "800", fontSize: "44", letterSpacing: "-1.5", fill: fill, children: text }), tld && (_jsxs(_Fragment, { children: [_jsx("rect", { x: "169", y: "5", width: "43", height: "21", rx: "10.5", fill: fill, opacity: "0.12" }), _jsxs("text", { x: "174", y: "21", fontFamily: "ui-sans-serif, system-ui, -apple-system, 'Segoe UI', Roboto, sans-serif", fontWeight: "700", fontSize: "15", letterSpacing: "0.2", fill: fill, children: [".", tld] })] }))] }));
 }

package/dist/ui/components/SiteMark.d.ts

@@ -11,7 +11,7 @@ export interface SiteMarkProps {
      * `"on-primary"` renders the mark in `var(--appkit-color-text)`.
      */
     tone?: SiteMarkTone;
-    /** Accessible title; defaults to "LetItRip.in". */
+    /** Accessible title. Defaults to the configured brand name. */
     title?: string;
     /**
      * Optional admin-uploaded image URL. When present, renders an `<MediaImage>`

package/dist/ui/components/SiteMark.js

@@ -1,8 +1,8 @@
 "use client";
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 /**
- * LetItRip site mark — the icon glyph (distinct from the `SiteLogo` text
- * wordmark). Sourced from `public/logo.svg`'s path data, recolored to follow
+ * Site mark — the icon glyph (distinct from the `SiteLogo` text wordmark).
+ * Sourced from `public/logo.svg`'s path data, recolored to follow
  * the active theme via the same `--appkit-logo-stop-*` variables `SiteLogo`
  * uses, so a custom admin theme restyles both consistently.
  *
@@ -10,6 +10,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  * className overrides on primitive components.
  */
 import { useId } from "react";
+import { getBrandName } from "../../core/brand-resolver.js";
 import { MediaImage } from "../../features/media/MediaImage.js";
 // An SVG <linearGradient> ID prefix, not a class — suffixed with useId()
 // and referenced as fill="url(#…)".
@@ -62,18 +63,32 @@ const MARK_TRANSFORMS = [
     "translate(123,146)",
     "translate(75,187)",
 ];
-export function SiteMark({ size = "md", tone = "brand", title = "LetItRip.in", src, }) {
+export function SiteMark({ size = "md", tone = "brand", 
+/*
+ * 🛑 Was `title = "LetItRip.in"` — one consumer's name as a library default.
+ *
+ * Unlike `SiteLogo`, this is NOT the unreachable-glyph bug: the mark is
+ * geometric paths with no text, so `title` really is only the accessible
+ * name. That makes it the quieter half of the same problem — a screen reader
+ * announced this marketplace on every install, and nothing on screen
+ * disagreed, so there was no way to notice.
+ *
+ * Resolved per render rather than at module load, so it reflects
+ * `configureBrand()` whenever that ran.
+ */
+title, src, }) {
+    const accessibleTitle = title ?? getBrandName();
     const uid = useId();
     const gradientId = `${GRADIENT_ID_PREFIX}-${uid.replace(/:/g, "")}`;
     const heightCls = SIZE_HEIGHTS[size];
     if (src) {
-        return (_jsx(MediaImage, { src: src, alt: title, size: "thumbnail", objectFit: "contain", 
+        return (_jsx(MediaImage, { src: src, alt: accessibleTitle, size: "thumbnail", objectFit: "contain", 
             // backed by the catalogued `size` enum; no consumer-provided overrides.
             className: `block w-auto ${heightCls}` }));
     }
     const fill = resolveFill(tone, gradientId);
     const isGradient = tone === "brand";
-    return (_jsxs("svg", { xmlns: "http://www.w3.org/2000/svg", viewBox: "0 0 236 245", role: "img", "aria-label": title, "data-testid": "site-mark", 
+    return (_jsxs("svg", { xmlns: "http://www.w3.org/2000/svg", viewBox: "0 0 236 245", role: "img", "aria-label": accessibleTitle, "data-testid": "site-mark", 
         // backed by the catalogued `size` enum; no consumer-provided overrides.
-        className: `block w-auto ${heightCls}`, children: [_jsx("title", { children: title }), isGradient && (_jsx("defs", { children: _jsxs("linearGradient", { id: gradientId, x1: "0%", y1: "0%", x2: "100%", y2: "100%", children: [_jsx("stop", { offset: "0%", style: { stopColor: "var(--appkit-logo-stop-from)" } }), _jsx("stop", { offset: "55%", style: { stopColor: "var(--appkit-logo-stop-mid)" } }), _jsx("stop", { offset: "100%", style: { stopColor: "var(--appkit-logo-stop-to)" } })] }) })), MARK_PATHS.map((d, i) => (_jsx("path", { d: d, fill: fill, transform: MARK_TRANSFORMS[i] }, i)))] }));
+        className: `block w-auto ${heightCls}`, children: [_jsx("title", { children: accessibleTitle }), isGradient && (_jsx("defs", { children: _jsxs("linearGradient", { id: gradientId, x1: "0%", y1: "0%", x2: "100%", y2: "100%", children: [_jsx("stop", { offset: "0%", style: { stopColor: "var(--appkit-logo-stop-from)" } }), _jsx("stop", { offset: "55%", style: { stopColor: "var(--appkit-logo-stop-mid)" } }), _jsx("stop", { offset: "100%", style: { stopColor: "var(--appkit-logo-stop-to)" } })] }) })), MARK_PATHS.map((d, i) => (_jsx("path", { d: d, fill: fill, transform: MARK_TRANSFORMS[i] }, i)))] }));
 }

package/dist/utils/date.formatter.d.ts

@@ -20,3 +20,23 @@ export declare function isSameMonth(a: Date | number, b: Date | number): boolean
 export declare function currentYear(): string;
 export declare function nowISO(): string;
 export declare function formatCustomDate(date: Date | string, format?: "short" | "medium" | "long" | "full"): string;
+/**
+ * Render a `YYYY-MM` period as "October 2026".
+ *
+ * Lifted from the consumer's `src/lib/format/inr.ts` (A7), where five
+ * ad-booking surfaces shared it.
+ *
+ * 🛑 `timeZone: "UTC"` is load-bearing and is NOT a default worth overriding.
+ * The period is a calendar month with no time in it, so constructing it as UTC
+ * midnight and formatting in the viewer's zone renders the PREVIOUS month for
+ * anyone west of UTC. India is UTC+5:30, so the bug is invisible to everyone
+ * testing it there — which is why the original carried this same note.
+ *
+ * 🛑 The locale was a hardcoded `"en-IN"` in the consumer copy. It now comes
+ * from the market profile, which is the one thing about that helper that was
+ * genuinely consumer-specific.
+ *
+ * Returns the input unchanged when it is not a parseable `YYYY-MM`, rather than
+ * rendering "Invalid Date" into a billing table.
+ */
+export declare function formatMonthLabel(period: string, locale?: string): string;