@mohasinac/appkit 4.70.0 → 4.71.2

package/dist/_internal/server/features/seo/sitemap.js

@@ -9,14 +9,13 @@ import { CATEGORIES_COLLECTION, CATEGORY_FIELDS } from "../../../../features/cat
 import { isListingCategory } from "../../../../features/categories/constants/listing-categories.js";
 import { STORE_COLLECTION, STORE_FIELDS } from "../../../../features/stores/schemas/firestore.js";
 import { SCAMMER_COLLECTION } from "../../../../features/scams/schemas/firestore.js";
-import { BEYS_COLLECTION } from "../../../../features/beys/schemas/firestore.js";
-import { PART_GLOSSARY_COLLECTION, ALL_PART_SLOTS } from "../../../../features/parts/schemas/firestore.js";
 import { serverLogger } from "../../../../monitoring/server-logger.js";
 import { PRODUCT_FIELDS } from "../../../../constants/field-names.js";
 import { PRODUCT_DETAIL_LISTING_TYPES } from "./product-detail-types.js";
 import { safeRead } from "../../../../errors/safe-read.js";
 import { siteSettingsRepository } from "../../../../features/admin/repository/site-settings.repository.js";
-import { ALL_BROWSE_PAGES, browsePageForPath, isBrowsePageEnabled, } from "../../../shared/listing-types/feature-flags.js";
+import { ALL_BROWSE_PAGES, ALL_LISTING_TYPES, browsePageForPath, isBrowsePageListed, isListingTypeEnabled, isListingTypeListed, } from "../../../shared/listing-types/feature-flags.js";
+import { pluginFor } from "../../../shared/listing-types/_registry.js";
 import { closedSurfacePrefixes, hiddenSurfaceRoutes, isUnderClosedPrefix, } from "../../../shared/listing-types/hidden-surfaces.js";
 import { getSurfaceCounts } from "../products/surface-counts.js";
 // Product field strings — matches consumer field-names.ts
@@ -122,7 +121,7 @@ function staticPages(baseUrl) {
         // rather than as a lever: priority is unchanged and neither page loses
         // indexability. 2026-09-14, Vercel usage reduction.
         page(String(ROUTES.PUBLIC.PRODUCTS), "daily", 0.9),
-        page(String(ROUTES.PUBLIC.AUCTIONS), "daily", 0.9),
+        page(String(ROUTES.PUBLIC.COLLECTOR_DROPS), "daily", 0.9),
         page(String(ROUTES.PUBLIC.CATEGORIES), "weekly", 0.8),
         page(String(ROUTES.PUBLIC.BRANDS), "weekly", 0.7),
         page(String(ROUTES.BLOG.LIST), "daily", 0.7),
@@ -144,7 +143,7 @@ function staticPages(baseUrl) {
         page(String(ROUTES.PUBLIC.SHIPPING_POLICY), "yearly", 0.3),
         page(String(ROUTES.PUBLIC.PRE_ORDERS), "daily", 0.7),
         page(String(ROUTES.PUBLIC.BUNDLES), "weekly", 0.6),
-        page(String(ROUTES.PUBLIC.PRIZE_DRAWS), "daily", 0.7),
+        page(String(ROUTES.PUBLIC.CLEARANCE), "daily", 0.7),
         /*
          * 🛑 `/classified`, `/digital-codes` and `/live` are NOT listed, and must
          * not be re-added. All three index pages were reduced to redirect stubs
@@ -157,13 +156,13 @@ function staticPages(baseUrl) {
          */
         page(String(ROUTES.PUBLIC.ART), "weekly", 0.6),
         /*
-         * Hubs that exist, are linked, and were never submitted.
-         * `/franchise` is the index for a whole `categoryType`; `/parts` is the
-         * Beyblade parts gallery — both are real pages with real content and both
-         * were absent from the sitemap entirely (measured 2026-10-24).
+         * Hub that exists, is linked, and was never submitted — the index for a
+         * whole `categoryType`, a real page with real content (measured
+         * 2026-10-24). `/parts` (the Beyblade parts gallery) used to be listed
+         * here too; that gallery was removed from this site in favour of the
+         * existing wiki.letitrip.in, which covers the same ground.
          */
         page(String(ROUTES.PUBLIC.FRANCHISE), "weekly", 0.6),
-        page(String(ROUTES.PUBLIC.PARTS), "weekly", 0.6),
         /*
          * `daily`, matching the other one-of-a-kind types rather than `/art`'s
          * weekly: most spares are quantity 1, so the page turns over as fast as
@@ -171,7 +170,7 @@ function staticPages(baseUrl) {
          */
         page(String(ROUTES.PUBLIC.SPARES), "daily", 0.6),
         page(String(ROUTES.PUBLIC.FEES), "monthly", 0.4),
-        page(String(ROUTES.PUBLIC.HOW_AUCTIONS_WORK), "monthly", 0.4),
+        page(String(ROUTES.PUBLIC.HOW_COLLECTOR_DROPS_WORK), "monthly", 0.4),
         page(String(ROUTES.PUBLIC.HOW_PRE_ORDERS_WORK), "monthly", 0.4),
         page(String(ROUTES.PUBLIC.HOW_OFFERS_WORK), "monthly", 0.4),
         page(String(ROUTES.PUBLIC.HOW_CHECKOUT_WORKS), "monthly", 0.4),
@@ -241,17 +240,17 @@ async function fetchListingTypeUrls(baseUrl, listingType, buildUrl, label) {
     }
 }
 const fetchPreOrderUrls = (baseUrl) => fetchListingTypeUrls(baseUrl, "pre-order", (slug) => ROUTES.PUBLIC.PRE_ORDER_DETAIL(slug), "pre-order");
-const fetchPrizeDrawUrls = (baseUrl) => fetchListingTypeUrls(baseUrl, "prize-draw", (slug) => ROUTES.PUBLIC.PRIZE_DRAW_DETAIL(slug), "prize-draw");
+const fetchClearanceUrls = (baseUrl) => fetchListingTypeUrls(baseUrl, "clearance", (slug) => ROUTES.PUBLIC.CLEARANCE_DETAIL(slug), "clearance");
 const fetchClassifiedUrls = (baseUrl) => fetchListingTypeUrls(baseUrl, "classified", (slug) => ROUTES.PUBLIC.CLASSIFIED_DETAIL(slug), "classified");
 const fetchDigitalCodeUrls = (baseUrl) => fetchListingTypeUrls(baseUrl, "digital-code", (slug) => ROUTES.PUBLIC.DIGITAL_CODE_DETAIL(slug), "digital-code");
 const fetchLiveUrls = (baseUrl) => fetchListingTypeUrls(baseUrl, "live", (slug) => ROUTES.PUBLIC.LIVE_DETAIL(slug), "live");
-async function fetchAuctionUrls(baseUrl) {
+async function fetchCollectorDropUrls(baseUrl) {
     try {
         const db = getAdminDb();
         const snap = await db
             .collection(PRODUCT_COLLECTION)
             .where(PRODUCT_STATUS, "==", PRODUCT_STATUS_PUBLISHED)
-            .where("listingType", "==", "auction")
+            .where("listingType", "==", "collector-drop")
             .select(PRODUCT_SLUG, PRODUCT_UPDATED_AT, TEST_DATA_FIELD)
             .limit(2000)
             .get();
@@ -261,7 +260,7 @@ async function fetchAuctionUrls(baseUrl) {
             const data = doc.data();
             const slug = data[PRODUCT_SLUG] ?? doc.id;
             return {
-                url: `${baseUrl}${ROUTES.PUBLIC.AUCTION_DETAIL(slug)}`,
+                url: `${baseUrl}${ROUTES.PUBLIC.COLLECTOR_DROP_DETAIL(slug)}`,
                 lastModified: data[PRODUCT_UPDATED_AT]?.toDate?.() ?? new Date(),
                 changeFrequency: "daily",
                 priority: 0.8,
@@ -270,7 +269,7 @@ async function fetchAuctionUrls(baseUrl) {
     }
     catch (err) {
         void normalizeError(err);
-        return sitemapSectionFailed("auction", err);
+        return sitemapSectionFailed("collector-drop", err);
     }
 }
 async function fetchEventUrls(baseUrl) {
@@ -344,7 +343,7 @@ async function fetchCategoryTypeUrls(baseUrl, categoryType, buildUrl, label) {
 }
 /** A rollup of zero, or no rollup at all, means nothing to show. */
 function hasStock(metrics) {
-    return (metrics?.totalProductCount ?? 0) + (metrics?.totalAuctionCount ?? 0) > 0;
+    return (metrics?.totalProductCount ?? 0) + (metrics?.totalCollectorDropCount ?? 0) > 0;
 }
 async function fetchCategoryUrls(baseUrl) {
     try {
@@ -365,7 +364,7 @@ async function fetchCategoryUrls(baseUrl) {
                 return false;
             }
             const metrics = data[CATEGORY_FIELDS.METRICS];
-            if (metrics?.totalProductCount === undefined && metrics?.totalAuctionCount === undefined) {
+            if (metrics?.totalProductCount === undefined && metrics?.totalCollectorDropCount === undefined) {
                 uncounted++;
             }
             return data[CATEGORY_FIELDS.TIER] === 0 || hasStock(metrics);
@@ -513,67 +512,8 @@ async function fetchScammerUrls(baseUrl) {
         return sitemapSectionFailed("scammer", err);
     }
 }
-/**
- * `/beys/{slug}` — 1,988 model reference pages, and `/parts/{slot}/{code}` —
- * 2,488 part pages. Both carry real measured data (type, system, weight, spin,
- * release code, WBO legality, which models use a part) and both had **zero**
- * sitemap URLs, while 4,658 empty category pages were submitted. The index was
- * precisely inverted.
- *
- * They are submitted together with their prerendering (`static-params.ts`), not
- * before it: a page whose `<title>` still streams into `<body>` is not ready to
- * be advertised.
- */
-async function fetchBeyUrls(baseUrl) {
-    try {
-        const docs = await readAllDocs(getAdminDb().collection(BEYS_COLLECTION).select(PRODUCT_UPDATED_AT, TEST_DATA_FIELD), "bey");
-        return docs
-            .filter((doc) => !isTestDoc(doc.data()))
-            .map((doc) => ({
-            url: `${baseUrl}${ROUTES.PUBLIC.BEY_DETAIL(doc.id)}`,
-            lastModified: doc.data()[PRODUCT_UPDATED_AT]?.toDate?.() ??
-                new Date(),
-            changeFrequency: "monthly",
-            priority: 0.4,
-        }));
-    }
-    catch (err) {
-        void normalizeError(err);
-        return sitemapSectionFailed("bey", err);
-    }
-}
-async function fetchPartUrls(baseUrl) {
-    try {
-        const docs = await readAllDocs(getAdminDb().collection(PART_GLOSSARY_COLLECTION).select(PRODUCT_UPDATED_AT, TEST_DATA_FIELD), "part");
-        const slots = new Set(ALL_PART_SLOTS);
-        return docs
-            .filter((doc) => !isTestDoc(doc.data()))
-            .map((doc) => {
-            // Document id is `{slot}--{tail}`, and the route segment IS the slot.
-            const sep = doc.id.indexOf("--");
-            if (sep === -1)
-                return null;
-            const classification = doc.id.slice(0, sep);
-            const code = doc.id.slice(sep + 2);
-            if (!code || !slots.has(classification))
-                return null;
-            return {
-                url: `${baseUrl}${ROUTES.PUBLIC.PART_DETAIL(classification, code)}`,
-                lastModified: doc.data()[PRODUCT_UPDATED_AT]?.toDate?.() ??
-                    new Date(),
-                changeFrequency: "monthly",
-                priority: 0.4,
-            };
-        })
-            .filter((row) => row !== null);
-    }
-    catch (err) {
-        void normalizeError(err);
-        return sitemapSectionFailed("part", err);
-    }
-}
 export async function buildSitemap({ baseUrl }) {
-    const [productUrls, categoryUrls, brandUrls, franchiseUrls, bundleUrls, groupedListingUrls, eventUrls, blogUrls, auctionUrls, preOrderUrls, prizeDrawUrls, classifiedUrls, digitalCodeUrls, liveUrls, storeUrls, scammerUrls, beyUrls, partUrls,] = await Promise.all([
+    const [productUrls, categoryUrls, brandUrls, franchiseUrls, bundleUrls, groupedListingUrls, eventUrls, blogUrls, collectorDropUrls, preOrderUrls, clearanceUrls, classifiedUrls, digitalCodeUrls, liveUrls, storeUrls, scammerUrls,] = await Promise.all([
         fetchProductUrls(baseUrl),
         fetchCategoryUrls(baseUrl),
         fetchBrandUrls(baseUrl),
@@ -582,16 +522,14 @@ export async function buildSitemap({ baseUrl }) {
         fetchGroupedListingUrls(baseUrl),
         fetchEventUrls(baseUrl),
         fetchBlogPostUrls(baseUrl),
-        fetchAuctionUrls(baseUrl),
+        fetchCollectorDropUrls(baseUrl),
         fetchPreOrderUrls(baseUrl),
-        fetchPrizeDrawUrls(baseUrl),
+        fetchClearanceUrls(baseUrl),
         fetchClassifiedUrls(baseUrl),
         fetchDigitalCodeUrls(baseUrl),
         fetchLiveUrls(baseUrl),
         fetchStoreUrls(baseUrl),
         fetchScammerUrls(baseUrl),
-        fetchBeyUrls(baseUrl),
-        fetchPartUrls(baseUrl),
     ]);
     const staticUrls = staticPages(baseUrl);
     // Per-section count digest. A section that drops to zero is otherwise
@@ -611,17 +549,15 @@ export async function buildSitemap({ baseUrl }) {
         group: groupedListingUrls.length,
         blog: blogUrls.length,
         product: productUrls.length,
-        auction: auctionUrls.length,
+        collectorDrop: collectorDropUrls.length,
         preOrder: preOrderUrls.length,
-        prizeDraw: prizeDrawUrls.length,
+        clearance: clearanceUrls.length,
         classified: classifiedUrls.length,
         digitalCode: digitalCodeUrls.length,
         live: liveUrls.length,
         event: eventUrls.length,
         store: storeUrls.length,
         scammer: scammerUrls.length,
-        bey: beyUrls.length,
-        part: partUrls.length,
     };
     /*
      * Drop every URL belonging to a CLOSED browse section.
@@ -649,13 +585,44 @@ export async function buildSitemap({ baseUrl }) {
         // on a transient Firestore error is the expensive direction of this guess.
         fallback: null,
     });
-    const closed = new Set(ALL_BROWSE_PAGES.filter((p) => !isBrowsePageEnabled(p, settings)));
+    /*
+     * 🛑 `isBrowsePageListed`, not `isBrowsePageEnabled` — this `closed` set is
+     * the SITEMAP's own filter (separate from `hiddenSurfacePaths`/
+     * `closedPrefixes` below, which deliberately mirror the edge 404 gate and
+     * must not diverge from it). `"unlisted"` sections keep serving at 200 —
+     * the edge gate stays on `isBrowsePageEnabled` semantics via
+     * `closedSurfacePrefixes` — they just stop being advertised here.
+     */
+    const closed = new Set(ALL_BROWSE_PAGES.filter((p) => !isBrowsePageListed(p, settings)));
+    /*
+     * The listing-type equivalent of `closed` above — a type that is enabled
+     * (still serves at 200, so NOT in `hiddenSurfaceRoutes`) but set to
+     * `"unlisted"` loses its sitemap entry without losing its edge-gate status.
+     * Mirrors `hiddenSurfaceRoutes`' own routeOf/second-pass shape so a shared
+     * browse route (a route with more than one claimant type) only withdraws once every type
+     * on it is unlisted, not the moment the first one is.
+     */
+    const routeOfType = (type) => String(pluginFor(type).browseRoute ?? "");
+    const unlistedTypeRoutes = new Set();
+    for (const type of ALL_LISTING_TYPES) {
+        if (!isListingTypeEnabled(type, settings))
+            continue; // already in hiddenSurfacePaths
+        if (isListingTypeListed(type, settings))
+            continue;
+        const route = routeOfType(type);
+        if (route)
+            unlistedTypeRoutes.add(route);
+    }
+    for (const type of ALL_LISTING_TYPES) {
+        if (isListingTypeListed(type, settings))
+            unlistedTypeRoutes.delete(routeOfType(type));
+    }
     /*
      * The same treatment for a listing-type surface that is switched off or
-     * measured as holding nothing — `/auctions`, `/art`, `/spares`, …
+     * measured as holding nothing — `/collector-drops`, `/art`, `/spares`, …
      *
      * 🛑 BROWSE ROUTES ONLY, matched on the exact path. Detail URLs are NOT
-     * dropped here and that is deliberate: art, stickers, spares and standard
+     * dropped here and that is deliberate: art-and-stickers, spares and standard
      * all detail at `/products/{slug}`, so a path test cannot tell them apart,
      * and a prefix rule would silently delist the entire standard catalogue the
      * day `spares` emptied. An empty type contributes no detail URLs anyway —
@@ -696,7 +663,10 @@ export async function buildSitemap({ baseUrl }) {
         const path = entry.url.startsWith("http")
             ? new URL(entry.url).pathname
             : entry.url;
-        if (hiddenSurfacePaths.has(path.replace(/\/+$/, "") || "/"))
+        const normalisedPath = path.replace(/\/+$/, "") || "/";
+        if (hiddenSurfacePaths.has(normalisedPath))
+            return false;
+        if (unlistedTypeRoutes.has(normalisedPath))
             return false;
         if (isUnderClosedPrefix(path, closedPrefixes))
             return false;
@@ -714,17 +684,15 @@ export async function buildSitemap({ baseUrl }) {
         ...groupedListingUrls,
         ...blogUrls,
         ...productUrls,
-        ...auctionUrls,
+        ...collectorDropUrls,
         ...preOrderUrls,
-        ...prizeDrawUrls,
+        ...clearanceUrls,
         ...classifiedUrls,
         ...digitalCodeUrls,
         ...liveUrls,
         ...eventUrls,
         ...storeUrls,
         ...scammerUrls,
-        ...beyUrls,
-        ...partUrls,
     ].filter(keep);
     /*
      * Recount AFTER the filter, and exclude a deliberately-closed section from

package/dist/_internal/server/features/seo/static-params.d.ts

@@ -87,21 +87,3 @@ export declare function blogPostSlugs(): Promise<string[]>;
  * because the route is dynamic. The id IS the slug here, so the shared
  * `slugsFrom` projection applies unchanged.
  */
-export declare function beyDetailSlugs(): Promise<string[]>;
-/**
- * `/parts/[classification]/[code]` — 2,488 part reference pages.
- *
- * Two params, so this cannot use `slugsFrom`: the document id is
- * `{slot}--{tail}` and the route splits it across both segments. The URL
- * segment IS the slot (`partSlotFromSegment` is an identity lookup against
- * `ALL_PART_SLOTS`), so the split is the whole derivation.
- *
- * 🛑 Ids carrying no `--`, or an unrecognised slot, are SKIPPED rather than
- * guessed at — a prerendered param that does not resolve is a build-time 404
- * baked into the output. The count of skips is logged so a generator change
- * that breaks the id shape is visible rather than silently halving the set.
- */
-export declare function partDetailParams(): Promise<{
-    classification: string;
-    code: string;
-}[]>;

package/dist/_internal/server/features/seo/static-params.js

@@ -51,8 +51,6 @@ import { getAdminDb } from "../../../../providers/db-firebase/index.js";
 import { PRODUCT_COLLECTION } from "../../../../features/products/schemas/firestore.js";
 import { BLOG_POSTS_COLLECTION, BLOG_POST_FIELDS } from "../../../../features/blog/schemas/firestore.js";
 import { CATEGORIES_COLLECTION, CATEGORY_FIELDS } from "../../../../features/categories/schemas/firestore.js";
-import { BEYS_COLLECTION } from "../../../../features/beys/schemas/firestore.js";
-import { PART_GLOSSARY_COLLECTION, ALL_PART_SLOTS } from "../../../../features/parts/schemas/firestore.js";
 import { PRODUCT_FIELDS } from "../../../../constants/field-names.js";
 import { serverLogger } from "../../../../monitoring/server-logger.js";
 import { PRODUCT_DETAIL_LISTING_TYPES } from "./product-detail-types.js";
@@ -173,56 +171,3 @@ export function blogPostSlugs() {
  * because the route is dynamic. The id IS the slug here, so the shared
  * `slugsFrom` projection applies unchanged.
  */
-export function beyDetailSlugs() {
-    return slugsFrom("bey", (db) => db.collection(BEYS_COLLECTION));
-}
-/**
- * `/parts/[classification]/[code]` — 2,488 part reference pages.
- *
- * Two params, so this cannot use `slugsFrom`: the document id is
- * `{slot}--{tail}` and the route splits it across both segments. The URL
- * segment IS the slot (`partSlotFromSegment` is an identity lookup against
- * `ALL_PART_SLOTS`), so the split is the whole derivation.
- *
- * 🛑 Ids carrying no `--`, or an unrecognised slot, are SKIPPED rather than
- * guessed at — a prerendered param that does not resolve is a build-time 404
- * baked into the output. The count of skips is logged so a generator change
- * that breaks the id shape is visible rather than silently halving the set.
- */
-export async function partDetailParams() {
-    try {
-        const snap = await getAdminDb()
-            .collection(PART_GLOSSARY_COLLECTION)
-            .select()
-            .limit(MAX_PRERENDER)
-            .get();
-        const slots = new Set(ALL_PART_SLOTS);
-        let skipped = 0;
-        const params = [];
-        for (const doc of snap.docs) {
-            const sep = doc.id.indexOf("--");
-            const classification = sep === -1 ? "" : doc.id.slice(0, sep);
-            const code = sep === -1 ? "" : doc.id.slice(sep + 2);
-            if (!code || !slots.has(classification)) {
-                skipped++;
-                continue;
-            }
-            params.push({ classification, code });
-        }
-        if (skipped > 0) {
-            serverLogger.warn(`generateStaticParams: "part" skipped ${skipped} glossary id(s) that are not {slot}--{tail}`, { section: "part", skipped });
-        }
-        if (snap.size >= MAX_PRERENDER) {
-            serverLogger.warn(`generateStaticParams: "part" hit the ${MAX_PRERENDER}-document prerender budget; the remainder render on demand`, { section: "part" });
-        }
-        return params;
-    }
-    catch (err) {
-        void normalizeError(err);
-        serverLogger.error('generateStaticParams: "part" failed and prerendered 0 pages', {
-            section: "part",
-            error: err,
-        });
-        return [];
-    }
-}

package/dist/_internal/server/features/shared/listing-data-factory.js

@@ -4,7 +4,7 @@ import { safeRead } from "../../../../errors/safe-read.js";
 import { loadProductFeaturesForStore } from "../../../../features/products/repository/loadProductFeatures.js";
 import { isPubliclyVisible } from "../../../shared/listing-types/availability.js";
 // Returns a React.cache()-wrapped fetch gated on one listing type.
-// The guard prevents cross-type URL collisions (e.g. /auctions/classified-slug returning wrong product).
+// The guard prevents cross-type URL collisions (e.g. /collector-drops/classified-slug returning wrong product).
 //
 // 🛑 THE STATUS GATE IS LOAD-BEARING, AND ITS ABSENCE WAS A LIVE LEAK.
 //
@@ -17,8 +17,8 @@ import { isPubliclyVisible } from "../../../shared/listing-types/availability.js
 // URL, and because the admin row updated correctly every time, the moderator had
 // no way to notice.
 //
-// One gate here covers SIX detail routes — auction, classified, digital-code,
-// live, pre-order, prize-draw — which is why it belongs in the factory rather
+// One gate here covers SIX detail routes — collector drop, classified, digital-code,
+// live, pre-order, clearance — which is why it belongs in the factory rather
 // than in each page.
 //
 // `isPubliclyVisible` is the same predicate every public LIST query uses, and it

package/dist/_internal/server/features/shipping/courier-block.js

@@ -23,7 +23,10 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  *    operator blind to everything else.
  */
 import { Fragment } from "react";
-import { renderToStaticMarkup } from "react-dom/server";
+// 🛑 Lazy require, not a top-level `react-dom/server` import — this module is
+// reachable from a Server Component via appkit/server, and Next's static tracer
+// fails the build on it. See render-static-markup.ts.
+import { renderStaticMarkup } from "../../../../features/email/render-static-markup.js";
 import { EmailContainer, EmailDoc, EmailRow, } from "../../../../features/email/primitives.js";
 import { paymentCasesRepository } from "../../../../features/payment-cases/repository/payment-cases.repository.js";
 // `adminNotificationsRepository` lives behind the repositories barrel — the
@@ -260,5 +263,5 @@ async function emailStaff(input) {
  * our own constants and the provider/reason enums.
  */
 function renderStaffAlertEmail(title, body) {
-    return `<!DOCTYPE html>${renderToStaticMarkup(_jsx(EmailDoc, { title: title, children: _jsx(EmailContainer, { children: _jsx(EmailRow, { children: body.split("\n\n").map((para, i) => (_jsxs(Fragment, { children: [i > 0 ? _jsx("br", {}) : null, i > 0 ? _jsx("br", {}) : null, para.split("\n").map((line, j) => (_jsxs(Fragment, { children: [j > 0 ? _jsx("br", {}) : null, line] }, j)))] }, i))) }) }) }))}`;
+    return `<!DOCTYPE html>${renderStaticMarkup(_jsx(EmailDoc, { title: title, children: _jsx(EmailContainer, { children: _jsx(EmailRow, { children: body.split("\n\n").map((para, i) => (_jsxs(Fragment, { children: [i > 0 ? _jsx("br", {}) : null, i > 0 ? _jsx("br", {}) : null, para.split("\n").map((line, j) => (_jsxs(Fragment, { children: [j > 0 ? _jsx("br", {}) : null, line] }, j)))] }, i))) }) }) }))}`;
 }

package/dist/_internal/server/features/shipping/reconcile.js

@@ -8,6 +8,7 @@ import { orderRepository } from "../../../../features/orders/repository/orders.r
 import { pointsRepository } from "../../../../features/points/repository/points.repository.js";
 import { reconcileShipping, } from "../../../shared/shipping/quote.js";
 import { serverLogger } from "../../../../monitoring/index.js";
+import { formatMoney } from "../../../../utils/number.formatter.js";
 /**
  * 🛑 IDEMPOTENT, and the guard is `order.shippingReconciliation` being unset.
  *
@@ -106,8 +107,8 @@ export async function reconcileOrderShipping(orderId, actual) {
              * never re-derived, so it stays true of the moment it describes even if
              * the order is edited afterwards.
              */
-            description: `Shipping saving on ${orderId}: charged ₹${order.selectedShippingQuote.chargedRate} ` +
-                `for ${order.selectedShippingQuote.courierName}, shipped ₹${actual.actualRate} ` +
+            description: `Shipping saving on ${orderId}: charged ${formatMoney(order.selectedShippingQuote.chargedRate)} ` +
+                `for ${order.selectedShippingQuote.courierName}, shipped ${formatMoney(actual.actualRate)} ` +
                 `via ${actual.courierName}.`,
         });
     }

package/dist/_internal/server/features/shipping/reimbursement.js

@@ -40,6 +40,7 @@ import { orderRepository } from "../../../../features/orders/repository/orders.r
 import { pointsRepository } from "../../../../features/points/repository/points.repository.js";
 import { reconcileShipping, isReimbursableShipment, } from "../../../shared/shipping/quote.js";
 import { serverLogger } from "../../../../monitoring/index.js";
+import { formatMoney } from "../../../../utils/number.formatter.js";
 /**
  * The seller submits postage evidence on a self-shipped order.
  *
@@ -191,8 +192,8 @@ export async function approveShippingReimbursement(input) {
              * and this string is written once and never re-derived, so it stays true
              * of the moment it describes.
              */
-            description: `Shipping saving on ${input.orderId}: you paid ₹${chargedToBuyer} for postage, ` +
-                `the approved cost was ₹${spent}.`,
+            description: `Shipping saving on ${input.orderId}: you paid ${formatMoney(chargedToBuyer)} for postage, ` +
+                `the approved cost was ${formatMoney(spent)}.`,
         });
     }
     await orderRepository.update(input.orderId, {

package/dist/_internal/server/features/site-settings/actions.d.ts

@@ -7,8 +7,44 @@ export declare function updateActionConfigDomain(actionId: string, enabled: bool
  * Toggle a single nav item's enabled state in siteSettings.navConfig.
  * Also recomputes the derived disabledRoutes[] array from all current nav items.
  * The `allNavItems` argument is the full { id, href } list so we can derive disabledRoutes.
+ *
+ * Preserves the item's existing `order` (3B-1b backlog item 4) — this only
+ * ever writes `enabled`, so a plain `{ enabled }` replacement would silently
+ * drop a prior reorder every time an item is hidden/shown again.
  */
 export declare function updateNavConfigDomain(navId: string, enabled: boolean, allNavItems: Array<{
     id: string;
     href: string;
 }>): Promise<void>;
+/**
+ * Bulk-write per-item `order` into siteSettings.navConfig, for one nav
+ * group's reordered item list. Writes the WHOLE ordered list at once (like
+ * `fieldOrder: string[]` elsewhere) rather than one id at a time, because
+ * "move item X up" is a change to every sibling's relative order, not just
+ * X's — a single-item patch would need the caller to already know the new
+ * order of every other item anyway.
+ *
+ * Preserves each item's existing `enabled` state — reordering must never
+ * silently re-enable (or disable) an item. Does NOT touch `disabledRoutes`:
+ * that array is derived from PUBLIC nav items only (see
+ * `updateNavConfigDomain` above), and reorder is dashboard-sidebar-only
+ * today (3B-1b backlog item 4) — a dashboard item was never eligible to
+ * appear in `disabledRoutes` in the first place.
+ */
+export declare function updateNavOrderDomain(orderedIds: string[]): Promise<void>;
+/**
+ * Admin-created NEW nav entries (overhaul brief, Table D — safe version).
+ * `item` is copied from the caller's closed, pre-registered candidate list
+ * (`ActionDef`s with a real `href`) — this function trusts the caller the
+ * same way `updateNavConfigDomain` trusts `allNavItems`, it does not
+ * re-validate the href against anything, because there is no free-text
+ * path into this function for a malformed value to take.
+ */
+export declare function addNavEntryDomain(group: "admin" | "store" | "user", item: {
+    id: string;
+    href: string;
+    label: string;
+    requiredPermission?: string;
+}): Promise<void>;
+/** The removal half — see `addNavEntryDomain`. */
+export declare function removeNavEntryDomain(navId: string): Promise<void>;

package/dist/_internal/server/features/site-settings/actions.js

@@ -12,12 +12,17 @@ export async function updateActionConfigDomain(actionId, enabled) {
  * Toggle a single nav item's enabled state in siteSettings.navConfig.
  * Also recomputes the derived disabledRoutes[] array from all current nav items.
  * The `allNavItems` argument is the full { id, href } list so we can derive disabledRoutes.
+ *
+ * Preserves the item's existing `order` (3B-1b backlog item 4) — this only
+ * ever writes `enabled`, so a plain `{ enabled }` replacement would silently
+ * drop a prior reorder every time an item is hidden/shown again.
  */
 export async function updateNavConfigDomain(navId, enabled, allNavItems) {
     const current = await siteSettingsRepository.getSingleton();
+    const existingOrder = current.navConfig?.[navId]?.order;
     const merged = {
         ...(current.navConfig ?? {}),
-        [navId]: { enabled },
+        [navId]: { enabled, ...(existingOrder !== undefined ? { order: existingOrder } : {}) },
     };
     const disabledRoutes = allNavItems
         .filter((item) => (merged[item.id]?.enabled ?? true) === false)
@@ -27,3 +32,54 @@ export async function updateNavConfigDomain(navId, enabled, allNavItems) {
         disabledRoutes,
     });
 }
+/**
+ * Bulk-write per-item `order` into siteSettings.navConfig, for one nav
+ * group's reordered item list. Writes the WHOLE ordered list at once (like
+ * `fieldOrder: string[]` elsewhere) rather than one id at a time, because
+ * "move item X up" is a change to every sibling's relative order, not just
+ * X's — a single-item patch would need the caller to already know the new
+ * order of every other item anyway.
+ *
+ * Preserves each item's existing `enabled` state — reordering must never
+ * silently re-enable (or disable) an item. Does NOT touch `disabledRoutes`:
+ * that array is derived from PUBLIC nav items only (see
+ * `updateNavConfigDomain` above), and reorder is dashboard-sidebar-only
+ * today (3B-1b backlog item 4) — a dashboard item was never eligible to
+ * appear in `disabledRoutes` in the first place.
+ */
+export async function updateNavOrderDomain(orderedIds) {
+    const current = await siteSettingsRepository.getSingleton();
+    const merged = {
+        ...(current.navConfig ?? {}),
+    };
+    orderedIds.forEach((id, index) => {
+        merged[id] = { enabled: merged[id]?.enabled ?? true, order: index };
+    });
+    await siteSettingsRepository.updateSingleton({
+        navConfig: merged,
+    });
+}
+/**
+ * Admin-created NEW nav entries (overhaul brief, Table D — safe version).
+ * `item` is copied from the caller's closed, pre-registered candidate list
+ * (`ActionDef`s with a real `href`) — this function trusts the caller the
+ * same way `updateNavConfigDomain` trusts `allNavItems`, it does not
+ * re-validate the href against anything, because there is no free-text
+ * path into this function for a malformed value to take.
+ */
+export async function addNavEntryDomain(group, item) {
+    const current = await siteSettingsRepository.getSingleton();
+    const existing = current.navCustomEntries ?? [];
+    if (existing.some((e) => e.id === item.id))
+        return;
+    await siteSettingsRepository.updateSingleton({
+        navCustomEntries: [...existing, { ...item, group }],
+    });
+}
+/** The removal half — see `addNavEntryDomain`. */
+export async function removeNavEntryDomain(navId) {
+    const current = await siteSettingsRepository.getSingleton();
+    await siteSettingsRepository.updateSingleton({
+        navCustomEntries: (current.navCustomEntries ?? []).filter((e) => e.id !== navId),
+    });
+}

package/dist/_internal/server/features/site-settings/adapters.d.ts

@@ -30,16 +30,16 @@
  * subset.
  */
 import type { SiteSettingsDocument } from "../../../../features/admin/schemas/firestore";
-import type { MediaVideoWatermark } from "../../../../features/media/MediaVideo";
+import type { MediaVideoWatermark } from "../../../../ui/components/MediaVideo";
 import type { PublicSiteSettings } from "../../../shared/features/site-settings/types";
 /**
  * Document fields with a proven `useSiteSettings()` reader. Every entry below
  * was traced to a call site; anything without one belongs in the private list,
  * because an unused public field is pure attack surface.
  */
-export declare const PUBLIC_SITE_SETTINGS_FIELDS: readonly ["contact", "payment", "listings", "notificationChannels", "announcementBar", "support", "navConfig", "actionConfig", "background", "watermark", "disabledRoutes", "chat", "search"];
+export declare const PUBLIC_SITE_SETTINGS_FIELDS: readonly ["contact", "payment", "listings", "notificationChannels", "announcementBar", "support", "navConfig", "actionConfig", "background", "watermark", "disabledRoutes", "chat", "assistant", "search", "enabledLocales"];
 /** Everything else, with the reason it stays server-side. */
-export declare const PRIVATE_SITE_SETTINGS_FIELDS: readonly ["rateChanges", "id", "createdAt", "updatedAt", "credentials", "emailSettings", "legalPages", "commissions", "emi", "gst", "laborRate", "adSettings", "integrations", "platformLimits", "auctionConfig", "siteName", "tagline", "motto", "logo", "favicon", "seo", "socialLinks", "features", "shipping", "returns", "faq", "aboutContent", "navbarConfig", "footerConfig", "theme", "featuredResults", "messaging", "whatsappFeed"];
+export declare const PRIVATE_SITE_SETTINGS_FIELDS: readonly ["rateChanges", "id", "createdAt", "updatedAt", "credentials", "emailSettings", "legalPages", "commissions", "emi", "gst", "maintenance", "laborRate", "adSettings", "integrations", "platformLimits", "collectorDropConfig", "siteName", "tagline", "motto", "logo", "favicon", "seo", "socialLinks", "shipping", "returns", "faq", "aboutContent", "navbarConfig", "footerConfig", "theme", "featuredResults", "messaging", "whatsappFeed"];
 export interface ToPublicSiteSettingsOptions {
     /**
      * The resolved marker → wordmark → text watermark chain. Injected because