@mohasinac/appkit 4.70.0 → 4.71.2

package/dist/_internal/shared/content/disclaimers.js

@@ -73,14 +73,14 @@ export const DISCLAIMERS = {
      * legally is skill versus chance. The entry names the exclusions rather than
      * claiming a position we cannot defend in every state.
      */
-    "prize-draw": {
-        heading: "Prize draw terms",
+    "clearance": {
+        heading: "Clearance terms",
         body: "Entry requires a purchase and is void where prohibited by local law. Residents of states that " +
-            "restrict prize draws or games of chance are not eligible, and an entry from such a state will be " +
+            "restrict clearance draws or games of chance are not eligible, and an entry from such a state will be " +
             "refunded rather than drawn. Prizes are as described on the listing, are not transferable and cannot " +
-            "be exchanged for cash. The draw is run by {{siteName}} and is not affiliated with any government lottery.",
+            "be exchanged for cash. The draw is run by {{siteName}} and is not affiliated with any government giveaway.",
         tone: "warning",
-        surfaces: ["PrizeDrawDetailPageView", "/prize-draws", "/lottery", "PrizeRevealModal"],
+        surfaces: ["ClearanceDetailPageView", "/clearance", "/giveaway", "PrizeRevealModal"],
     },
     /*
      * 🛑 Shown wherever a historical price appears. Collectibles displayed with
@@ -156,19 +156,41 @@ export const DISCLAIMERS = {
         tone: "warning",
         surfaces: ["LiveItemDetailPageView", "/live"],
     },
+    /*
+     * 🛑 The 45-day promise and its CONSEQUENCE, in the buyer's own terms.
+     *
+     * This entry used to describe only the deposit mechanics, which left the one
+     * thing a buyer most needs to know unsaid: a pre-order that overruns its
+     * promised date is **cancelled and refunded automatically**, with no further
+     * decision from them. A refund they did not ask for reads as us losing their
+     * order unless it was declared up front — the same argument the
+     * `automated-decision` entry makes.
+     *
+     * `{{preOrderMaxDeliveryDays}}` resolves from `PREORDER_MAX_DELIVERY_DAYS`,
+     * the constant the four enforcement points refuse on, so this is rule 3 of
+     * the header working as intended: a gateway-driven change to the ceiling
+     * updates this text instead of contradicting it. Never type "45" here.
+     *
+     * `tone: "warning"` rather than `legal` — an automatic cancellation is a
+     * consequence the buyer cannot undo, which is the stated bar for warning.
+     */
     "pre-order": {
-        body: "A release date on a pre-order is the manufacturer's estimate and can move or be cancelled by them. " +
+        heading: "Pre-order terms",
+        body: "A pre-order must promise delivery within {{preOrderMaxDeliveryDays}} days of your purchase. " +
+            "If the seller has not delivered by the date shown on the listing, the order is **cancelled and " +
+            "refunded automatically** — you do not have to ask, and the item is not held for you afterwards. " +
+            "The date is the seller's estimate and can move within that window, but never beyond it. " +
             "Your deposit is refundable until the item ships; the remaining balance is charged when it is ready " +
             "to dispatch, against the terms shown when you placed the pre-order.",
-        tone: "legal",
-        surfaces: ["PreOrderDetailPageView", "/pre-orders"],
+        tone: "warning",
+        surfaces: ["PreOrderDetailPageView", "/pre-orders", "CheckoutRouteClient"],
     },
-    "auction-binding": {
+    "collectordrop-binding": {
         body: "A bid is a binding offer to buy at that price and cannot be withdrawn. If the reserve price is not " +
             "met the item does not sell, even if yours was the highest bid. Winning starts a payment window — " +
             "miss it and the win is forfeited.",
         tone: "warning",
-        surfaces: ["PlaceBidForm", "AuctionDetailPageView", "/auctions"],
+        surfaces: ["PlaceBidForm", "CollectorDropDetailPageView", "/collector-drops"],
     },
     "emi": {
         body: "EMI adds a surcharge to the order total, shown before you pay. The instalment plan is between you " +

package/dist/_internal/shared/content/fragmented-paragraphs/en.d.ts

@@ -0,0 +1,20 @@
+/**
+ * English fragmented paragraphs — the PARAGRAPH-shaped sibling of
+ * `composite-sentences/en.ts` (1A-ii). A sentence needs Oxford-comma
+ * grammar joining; a multi-paragraph body (each paragraph already a
+ * complete, standalone clause) just needs the survivors concatenated —
+ * `resolveFragmentedAnswer()` (`../fragments.ts`), already built for
+ * admin-authored FAQ prose, does exactly that and is reused here unchanged
+ * for STATIC developer-authored paragraph content.
+ *
+ * `Record<FragmentedParagraphId, ContentFragment[]>`, NOT `Partial` — same
+ * compile-checked discipline as `SENTENCES_EN`.
+ *
+ * @tag domain:content
+ * @tag layer:shared
+ * @tag access:isomorphic
+ * @tag sideEffects:none
+ */
+import type { ContentFragment } from "../fragments";
+export type FragmentedParagraphId = "cancellationPolicy.sections.3.body";
+export declare const PARAGRAPHS_EN: Record<FragmentedParagraphId, ContentFragment[]>;

package/dist/_internal/shared/content/fragmented-paragraphs/en.js

@@ -0,0 +1,16 @@
+export const PARAGRAPHS_EN = {
+    "cancellationPolicy.sections.3.body": [
+        {
+            governs: { governs: "listingType", value: "collector-drop" },
+            text: "A winning collector drop bid is a commitment to buy and cannot be cancelled by the buyer; failing to pay within the stated window forfeits the win.",
+        },
+        {
+            governs: { governs: "listingType", value: "pre-order" },
+            text: "Pre-orders can be cancelled before the item ships unless the listing states otherwise — some pre-orders are explicitly non-cancellable, and that is shown on the listing before you order.",
+        },
+        {
+            governs: { governs: "listingType", value: "clearance" },
+            text: "Prize-draw entries cannot be cancelled once the draw has closed.",
+        },
+    ],
+};

package/dist/_internal/shared/content/fragmented-paragraphs/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Locale lookup + accessor for fragmented paragraphs (1A-ii, static
+ * paragraph-shaped copy). Mirrors `composite-sentences/index.ts`'s shape —
+ * same `string`-typed locale (appkit stays deployment-agnostic), same
+ * fallback-to-English-on-unregistered-locale default.
+ *
+ * @tag domain:content
+ * @tag layer:shared
+ * @tag access:isomorphic
+ * @tag sideEffects:none
+ */
+import { type FragmentedParagraphId } from "./en";
+import { type ContentFlagSnapshot } from "../fragments";
+export type { FragmentedParagraphId } from "./en";
+/** Server helper — call with the request's resolved locale + the live flag snapshot. */
+export declare function getFragmentedParagraph(id: FragmentedParagraphId, locale: string, settings: ContentFlagSnapshot | null | undefined): string;

package/dist/_internal/shared/content/fragmented-paragraphs/index.js

@@ -0,0 +1,22 @@
+/**
+ * Locale lookup + accessor for fragmented paragraphs (1A-ii, static
+ * paragraph-shaped copy). Mirrors `composite-sentences/index.ts`'s shape —
+ * same `string`-typed locale (appkit stays deployment-agnostic), same
+ * fallback-to-English-on-unregistered-locale default.
+ *
+ * @tag domain:content
+ * @tag layer:shared
+ * @tag access:isomorphic
+ * @tag sideEffects:none
+ */
+import { PARAGRAPHS_EN } from "./en.js";
+import { resolveFragmentedAnswer, } from "../fragments.js";
+import { withBrand } from "../../../../core/brand-text.js";
+const PARAGRAPH_REGISTRIES = {
+    en: PARAGRAPHS_EN,
+};
+/** Server helper — call with the request's resolved locale + the live flag snapshot. */
+export function getFragmentedParagraph(id, locale, settings) {
+    const registry = PARAGRAPH_REGISTRIES[locale] ?? PARAGRAPHS_EN;
+    return withBrand(resolveFragmentedAnswer(registry[id], settings));
+}

package/dist/_internal/shared/content/fragments.d.ts

@@ -0,0 +1,114 @@
+/**
+ * Fragment-level content cascade — the shared primitive behind both the
+ * static-copy composite-sentence resolver (`composite-sentences/registry.ts`)
+ * and the dynamic admin-authored-prose resolver (FAQ answers, disclaimers).
+ *
+ * `isContentVisible` (`../features/content-tags/registry.ts`) already answers
+ * "does this flag still allow the WHOLE document to show" — document-level
+ * `contentTags`, AND-combined. This module answers the same question one
+ * level finer: does this ONE FRAGMENT within an otherwise-visible document
+ * still belong, when the document mentions several governed things but isn't
+ * solely about any one of them.
+ *
+ * 🛑 Deliberately does NOT touch `../templating/placeholders.ts`. That
+ * module's own header is explicit: "NOT a template ENGINE. There are no
+ * conditionals, loops, filters or nesting, and none should be added here — a
+ * real engine would mean user input being evaluated." Fragment visibility
+ * filtering runs as an independent pass that produces a plain joined string,
+ * which is THEN handed to the unchanged `resolvePublishedCopy` for
+ * `{{token}}` substitution — two orthogonal passes, neither aware of the
+ * other.
+ *
+ * @tag domain:content
+ * @tag layer:shared
+ * @tag access:isomorphic
+ * @tag sideEffects:none
+ */
+import { type ContentTag, type ContentFlagSnapshot } from "../features/content-tags/registry";
+export type { ContentFlagSnapshot } from "../features/content-tags/registry";
+/**
+ * One block of content, optionally governed by a single flag.
+ *
+ * `governs` is omitted for a fragment that should always render (the "lead"
+ * clause of a composite sentence, or the first paragraph of a FAQ answer that
+ * doesn't name anything governed). `text` carries no fragment-joining
+ * decoration of its own — the CALLER (sentence-grammar joining vs. paragraph
+ * concatenation) owns how fragments combine; this module only decides WHICH
+ * fragments survive, and (since `whenHidden`) what they say when they don't.
+ *
+ * `whenHidden` is the Item 7 extension (2026-11-03) — "if an FAQ mentions
+ * pre-orders and I disable them, replace that wording, don't hide the FAQ."
+ * Plain omission (the pre-existing, still-default behavior when `whenHidden`
+ * is unset) is correct when the surrounding prose reads fine with the clause
+ * simply gone — a composite sentence's grammar joiner already handles
+ * dropping one item from a list. It is NOT correct when the fragment's own
+ * sentence is specifically ABOUT the governed thing ("Reserve upcoming drops
+ * via our pre-order system") — omitting it either leaves an abrupt gap or,
+ * worse, an empty fragment with nothing to say. `whenHidden` names the
+ * REPLACEMENT sentence/clause to use instead, so the author writes both
+ * versions once, at content-authoring time, rather than the renderer trying
+ * to invent fallback prose. Every fragment written before this field existed
+ * has no `whenHidden`, so every existing caller's output is byte-identical —
+ * this is additive, not a reinterpretation of the existing shape.
+ */
+export interface ContentFragment {
+    governs?: ContentTag;
+    text: string;
+    /** Replacement text when `governs` is disabled. Omitted = omit the fragment (pre-existing behavior). */
+    whenHidden?: string;
+}
+/**
+ * The fragments that survive against the live flag snapshot, in original
+ * order, with each fragment's EFFECTIVE text already resolved (its own
+ * `text` when visible, `whenHidden` when disabled-but-named-a-replacement,
+ * omitted entirely when disabled with no `whenHidden`). Reuses
+ * `isContentVisible` so there is exactly one visibility rule in the
+ * codebase, applied at two granularities (a whole document via
+ * `contentTags`, or one fragment within it via this function) — never two
+ * competing implementations of "is this governed thing enabled."
+ *
+ * A substituted fragment's returned `governs` is cleared — once its text is
+ * the REPLACEMENT, it is no longer the governed clause, and a caller that
+ * re-checked `governs` on the output would incorrectly treat already-swapped
+ * text as still needing to be hidden.
+ */
+export declare function visibleFragments(fragments: ContentFragment[], settings: ContentFlagSnapshot | null | undefined): ContentFragment[];
+/**
+ * Admin-authored prose (FAQ answers, disclaimers, legal-page bodies) —
+ * simple paragraph/sentence CONCATENATION of the surviving fragments, joined
+ * by `separator` (default a blank line, since each fragment in admin prose is
+ * normally already a complete, standalone clause — unlike the single
+ * compound sentence `resolveCompositeSentence` in `composite-sentences/registry.ts`
+ * handles, which needs Oxford-comma-aware grammar joining instead).
+ *
+ * Token substitution (`resolvePublishedCopy`) runs AFTER this, on the joined
+ * result, exactly as it runs on `answer.text` today — unchanged, independent
+ * pass.
+ */
+export declare function resolveFragmentedAnswer(fragments: ContentFragment[], settings: ContentFlagSnapshot | null | undefined, separator?: string): string;
+/**
+ * An admin-configured CTA (link + label) that targets a governable thing —
+ * e.g. `WelcomeSectionConfig.secondaryCtaText`/`.secondaryCtaLink` pointing
+ * at `/pre-orders`. Distinct from both of the above: a CTA is one link+label
+ * PAIR, not composable prose, so it needs its own shape rather than being
+ * forced into `ContentFragment`'s text-fragment model.
+ */
+export interface GovernedLink {
+    label: string;
+    href: string;
+    governs?: ContentTag;
+}
+/**
+ * Resolves a `GovernedLink`, falling back to a safe default when the target
+ * is disabled — NEVER a dead link. `fallback` is the same generic value the
+ * call site already uses when no admin override is configured at all, so a
+ * disabled target degrades to exactly what an unconfigured CTA already looks
+ * like today, not a new state to design for.
+ */
+export declare function resolveGovernedLink(link: GovernedLink | undefined, fallback: {
+    label: string;
+    href: string;
+}, settings: ContentFlagSnapshot | null | undefined): {
+    label: string;
+    href: string;
+};

package/dist/_internal/shared/content/fragments.js

@@ -0,0 +1,88 @@
+/**
+ * Fragment-level content cascade — the shared primitive behind both the
+ * static-copy composite-sentence resolver (`composite-sentences/registry.ts`)
+ * and the dynamic admin-authored-prose resolver (FAQ answers, disclaimers).
+ *
+ * `isContentVisible` (`../features/content-tags/registry.ts`) already answers
+ * "does this flag still allow the WHOLE document to show" — document-level
+ * `contentTags`, AND-combined. This module answers the same question one
+ * level finer: does this ONE FRAGMENT within an otherwise-visible document
+ * still belong, when the document mentions several governed things but isn't
+ * solely about any one of them.
+ *
+ * 🛑 Deliberately does NOT touch `../templating/placeholders.ts`. That
+ * module's own header is explicit: "NOT a template ENGINE. There are no
+ * conditionals, loops, filters or nesting, and none should be added here — a
+ * real engine would mean user input being evaluated." Fragment visibility
+ * filtering runs as an independent pass that produces a plain joined string,
+ * which is THEN handed to the unchanged `resolvePublishedCopy` for
+ * `{{token}}` substitution — two orthogonal passes, neither aware of the
+ * other.
+ *
+ * @tag domain:content
+ * @tag layer:shared
+ * @tag access:isomorphic
+ * @tag sideEffects:none
+ */
+import { isContentVisible, } from "../features/content-tags/registry.js";
+/**
+ * The fragments that survive against the live flag snapshot, in original
+ * order, with each fragment's EFFECTIVE text already resolved (its own
+ * `text` when visible, `whenHidden` when disabled-but-named-a-replacement,
+ * omitted entirely when disabled with no `whenHidden`). Reuses
+ * `isContentVisible` so there is exactly one visibility rule in the
+ * codebase, applied at two granularities (a whole document via
+ * `contentTags`, or one fragment within it via this function) — never two
+ * competing implementations of "is this governed thing enabled."
+ *
+ * A substituted fragment's returned `governs` is cleared — once its text is
+ * the REPLACEMENT, it is no longer the governed clause, and a caller that
+ * re-checked `governs` on the output would incorrectly treat already-swapped
+ * text as still needing to be hidden.
+ */
+export function visibleFragments(fragments, settings) {
+    const out = [];
+    for (const f of fragments) {
+        if (!f.governs || isContentVisible([f.governs], settings)) {
+            out.push(f);
+            continue;
+        }
+        if (f.whenHidden) {
+            out.push({ text: f.whenHidden });
+        }
+        // else: disabled, no replacement named — omitted, exactly as before.
+    }
+    return out;
+}
+/**
+ * Admin-authored prose (FAQ answers, disclaimers, legal-page bodies) —
+ * simple paragraph/sentence CONCATENATION of the surviving fragments, joined
+ * by `separator` (default a blank line, since each fragment in admin prose is
+ * normally already a complete, standalone clause — unlike the single
+ * compound sentence `resolveCompositeSentence` in `composite-sentences/registry.ts`
+ * handles, which needs Oxford-comma-aware grammar joining instead).
+ *
+ * Token substitution (`resolvePublishedCopy`) runs AFTER this, on the joined
+ * result, exactly as it runs on `answer.text` today — unchanged, independent
+ * pass.
+ */
+export function resolveFragmentedAnswer(fragments, settings, separator = "\n\n") {
+    return visibleFragments(fragments, settings)
+        .map((f) => f.text.trim())
+        .filter(Boolean)
+        .join(separator);
+}
+/**
+ * Resolves a `GovernedLink`, falling back to a safe default when the target
+ * is disabled — NEVER a dead link. `fallback` is the same generic value the
+ * call site already uses when no admin override is configured at all, so a
+ * disabled target degrades to exactly what an unconfigured CTA already looks
+ * like today, not a new state to design for.
+ */
+export function resolveGovernedLink(link, fallback, settings) {
+    if (!link)
+        return fallback;
+    if (link.governs && !isContentVisible([link.governs], settings))
+        return fallback;
+    return link;
+}

package/dist/_internal/shared/content/published-values.d.ts

@@ -44,7 +44,7 @@
  * sentence with a word missing, which nobody reports, while `{{wrongKey}}` on
  * a live page gets reported in minutes.
  */
-export type PublishedValueKey = "returnWindowDays" | "sellerAcceptDays" | "sellerDispatchBusinessDays" | "returnRespondHours" | "returnPostDays" | "offerCheckoutHours" | "paymentWindowMinutes" | "deliveryConfirmDays" | "orderCompleteDays" | "shipmentClaimHours" | "saleClaimHours" | "disputeTransitWindowDays" | "disputeNotReachedGraceDays" | "platformFeeMax" | "platformFeePercent" | "shipmentProtectionPercent" | "shipmentProtectionMin" | "saleProtectionPercent" | "saleProtectionMin" | "saleProtectionMaxValue" | "codHandlingPercent" | "codDepositPercent" | "giftWrapFee" | "pointsEarnPercent" | "pointsMaxRedemptionPercent" | "pointsExpiryMonths" | "refundBusinessDaysMin" | "refundBusinessDaysMax" | "siteName";
+export type PublishedValueKey = "returnWindowDays" | "sellerAcceptDays" | "sellerDispatchBusinessDays" | "returnRespondHours" | "returnPostDays" | "offerCheckoutHours" | "paymentWindowMinutes" | "deliveryConfirmDays" | "orderCompleteDays" | "shipmentClaimHours" | "saleClaimHours" | "disputeTransitWindowDays" | "disputeNotReachedGraceDays" | "preOrderMaxDeliveryDays" | "platformFeeMax" | "platformFeePercent" | "shipmentProtectionPercent" | "shipmentProtectionMin" | "saleProtectionPercent" | "saleProtectionMin" | "saleProtectionMaxValue" | "codHandlingPercent" | "codDepositPercent" | "giftWrapFee" | "pointsEarnPercent" | "pointsMaxRedemptionPercent" | "pointsExpiryMonths" | "refundBusinessDaysMin" | "refundBusinessDaysMax" | "siteName" | "siteDomain";
 export type PublishedValues = Record<PublishedValueKey, string>;
 /**
  * The settings this registry reads, where a value genuinely is configurable.
@@ -58,7 +58,7 @@ export type PublishedValues = Record<PublishedValueKey, string>;
 export interface PublishedValueSettings {
     /**
      * The operator's display name, for the disclaimers that name who is making
-     * the statement. Falls back to `SITE_CONFIG.brand.name`.
+     * the statement. Falls back to the injected brand (`getBrandName()`).
      */
     siteName?: string;
     platformFeeMax?: number;

package/dist/_internal/shared/content/published-values.js

@@ -40,13 +40,15 @@
  * somebody has to remember — and it is why there is no literal for the offer
  * deadline or the claim windows even though both appear in published copy.
  */
-import { SITE_CONFIG } from "../../../core/site-config.js";
+import { getBrandName, getBrandDomain } from "../../../core/brand-resolver.js";
 import { OBLIGATION_POLICIES } from "../../../features/obligations/constants/policies.js";
 import { POINTS_EARN_PERCENT, POINTS_EXPIRY_MONTHS, POINTS_MAX_REDEMPTION_PERCENT, } from "../../../features/points/schemas/firestore.js";
 import { PAYMENT_WINDOW_MINUTES } from "../../../features/orders/constants/payment-window.js";
 import { SALE_PROTECTION_MAX_VALUE } from "../features/shipping/protections.js";
 import { LANE_CHECKOUT_WINDOW_MS } from "../checkout/lanes.js";
+import { PREORDER_MAX_DELIVERY_DAYS } from "../checkout/rules/_limits.js";
 import { DISPUTE_TRANSIT_WINDOW_DAYS, DISPUTE_NOT_REACHED_GRACE_DAYS, } from "../features/orders/dispute-reasons.js";
+import { formatMoney } from "../../../utils/number.formatter.js";
 /**
  * The offer checkout deadline, in hours, derived from the constant the lapse
  * sweep actually enforces.
@@ -142,6 +144,7 @@ export function resolvePublishedValues(settings) {
          */
         disputeTransitWindowDays: String(DISPUTE_TRANSIT_WINDOW_DAYS),
         disputeNotReachedGraceDays: String(DISPUTE_NOT_REACHED_GRACE_DAYS),
+        preOrderMaxDeliveryDays: String(PREORDER_MAX_DELIVERY_DAYS),
         // ── Money: settings-driven, with the schema defaults as the fallback ───
         platformFeeMax: formatRupees(settings?.platformFeeMax ?? 10),
         platformFeePercent: String(settings?.platformFeePercent ?? 2),
@@ -173,12 +176,23 @@ export function resolvePublishedValues(settings) {
         refundBusinessDaysMin: "5",
         refundBusinessDaysMax: "7",
         /*
-         * `SITE_CONFIG.brand.name` is appkit's own neutral default ("App") until a
-         * consumer overrides it, which is exactly the right failure mode here: a
-         * fork that forgets to configure its brand publishes a visibly generic
-         * disclaimer rather than silently attributing its legal statements to us.
+         * Admin setting first, then the brand the consumer INJECTED at boot.
+         *
+         * 🛑 Was `SITE_CONFIG.brand.name`, and the reasoning given for that was
+         * right about the failure mode — "a fork that forgets to configure its
+         * brand publishes a visibly generic disclaimer rather than silently
+         * attributing its legal statements to us" — but wrong about the mechanism:
+         * `SITE_CONFIG` is a FROZEN const, and the only thing that can override it
+         * (`createSiteConfig`) has **zero callers**. So the override it described
+         * did not exist, and a consumer with a configured brand still published
+         * "App" in its own legal text whenever `siteSettings.siteName` was unset.
+         *
+         * `getBrandName()` keeps the same safe default ("Site") and adds the
+         * injection path that was missing.
          */
-        siteName: settings?.siteName ?? SITE_CONFIG.brand.name,
+        siteName: settings?.siteName ?? getBrandName(),
+        /** Bare host, for addresses quoted in published copy. */
+        siteDomain: getBrandDomain(),
     };
 }
 /**
@@ -196,11 +210,18 @@ export function resolvePublishedCopy(text, values) {
         return resolved ?? whole;
     });
 }
-/** `₹10`, `₹1,499.50` — no trailing `.00` on a whole rupee figure. */
+/**
+ * `₹10`, `₹1,499.50` — no trailing `.00` on a whole figure.
+ *
+ * 🛑 A `const whole = Number.isInteger(amount)` sat here unused after the A2
+ * conversion, and an unused local is worth opening rather than deleting: in
+ * this codebase a discarded value has three times turned out to be a dropped
+ * one (a lost delivery snapshot, two blank seller tiles, a full page reload).
+ *
+ * Checked — this one is genuinely dead. `formatMoney` runs exactly that test
+ * internally (`Number.isInteger(amount) ? 0 : 2`), which is what this function
+ * used to do by hand before delegating. Nothing is lost by removing it.
+ */
 function formatRupees(amount) {
-    const whole = Number.isInteger(amount);
-    return `₹${amount.toLocaleString("en-IN", {
-        minimumFractionDigits: whole ? 0 : 2,
-        maximumFractionDigits: 2,
-    })}`;
+    return formatMoney(amount);
 }

package/dist/_internal/shared/features/admin/integrations.d.ts

@@ -5,7 +5,7 @@
  *
  * Three of the four already have an authoritative field:
  *
- *   payments  -> `payment.razorpayEnabled`
+ *   payments  -> `payment.razorpayEnabled` OR `.phonepeEnabled` OR `.cashfreeEnabled`
  *   email     -> `messaging.emailEnabled`   (read by `guardSend`)
  *   shipping  -> `shipping.provider`        ("manual" | "shiprocket")
  *
@@ -123,6 +123,7 @@ export interface IntegrationPatch {
     payment?: {
         razorpayEnabled?: boolean;
         phonepeEnabled?: boolean;
+        cashfreeEnabled?: boolean;
     };
     messaging?: {
         emailEnabled: boolean;

package/dist/_internal/shared/features/admin/integrations.js

@@ -5,7 +5,7 @@
  *
  * Three of the four already have an authoritative field:
  *
- *   payments  -> `payment.razorpayEnabled`
+ *   payments  -> `payment.razorpayEnabled` OR `.phonepeEnabled` OR `.cashfreeEnabled`
  *   email     -> `messaging.emailEnabled`   (read by `guardSend`)
  *   shipping  -> `shipping.provider`        ("manual" | "shiprocket")
  *
@@ -53,9 +53,9 @@ export const INTEGRATIONS = {
          */
         offConsequence: "Buyers can no longer pay online. Checkout falls back to the manual methods (cash, UPI with a proof upload), which need an admin to verify every payment by hand. 🛑 Payments already in progress are abandoned — a buyer part-way through the gateway may be charged without an order being placed. Switch off when nobody is checking out.",
         severe: true,
-        // Both gateways, because the enforcing guard is an OR across them. See the
-        // note on `readIntegrationStates`.
-        field: "payment.razorpayEnabled + payment.phonepeEnabled",
+        // All three gateways, because the enforcing guard is an OR across them. See
+        // the note on `readIntegrationStates`.
+        field: "payment.razorpayEnabled + payment.phonepeEnabled + payment.cashfreeEnabled",
         routeGuard: "gated",
         routeGuardNote: "withOnlinePaymentEnabled, on all six /api/payment routes. Predates this page; this page now reads the same expression so the two cannot disagree.",
         failClosed: true,
@@ -182,7 +182,17 @@ export function readIntegrationStates(settings) {
          */
         payments: {
             enabled: settings?.payment?.razorpayEnabled === true ||
-                settings?.payment?.phonepeEnabled === true,
+                settings?.payment?.phonepeEnabled === true ||
+                /*
+                 * 🛑 Cashfree joined this OR when the provider was added, in the SAME
+                 * change. Leaving it out would have 404'd all six /api/payment routes
+                 * for an install whose only enabled gateway is Cashfree — the gateway
+                 * registered, the routes shut, and the admin page reporting "payments
+                 * OFF" about a provider it had just been told to use. That is the same
+                 * disagreement this function exists to make impossible, one gateway
+                 * later.
+                 */
+                settings?.payment?.cashfreeEnabled === true,
         },
         email: { enabled: settings?.messaging?.emailEnabled !== false },
         // "Enabled" means we are booking couriers, i.e. the provider is not manual.
@@ -194,23 +204,31 @@ export function integrationPatch(id, enabled) {
     switch (id) {
         case "payments":
             /*
-             * 🛑 Writes BOTH gateway flags, and the OFF case is why.
+             * 🛑 Writes EVERY gateway flag on the way OFF, and that is why.
              *
-             * The guard is an OR, so clearing only `razorpayEnabled` while PhonePe
-             * was on would leave every /api/payment route open — the switch would
-             * report success and change nothing. "Disable payments" has to mean no
-             * online gateway is live, which is one flag per gateway.
+             * The guard is an OR across all three, so clearing only `razorpayEnabled`
+             * while PhonePe or Cashfree was on would leave every /api/payment route
+             * open — the switch would report success and change nothing. "Disable
+             * payments" has to mean no online gateway is live, which is one flag per
+             * gateway. A fourth gateway must be added here too, not just to the OR.
              *
              * The ON case re-enables RAZORPAY only, deliberately asymmetric:
-             * `providers.config.ts` prefers Razorpay and ignores PhonePe when both
-             * are true (it logs exactly that), so turning both on would set a flag
-             * with no effect and make the page claim two gateways where there is
-             * one. Choosing a gateway is a different decision from switching
-             * payments on, and it belongs in Site Settings → Payment.
+             * `providers.config.ts` resolves ONE provider in the order razorpay →
+             * phonepe → cashfree and ignores the rest (it logs exactly that), so
+             * turning several on would set flags with no effect and make the page
+             * claim three gateways where there is one. Choosing a gateway is a
+             * different decision from switching payments on, and it belongs in Site
+             * Settings → Payment.
              */
             return enabled
                 ? { payment: { razorpayEnabled: true } }
-                : { payment: { razorpayEnabled: false, phonepeEnabled: false } };
+                : {
+                    payment: {
+                        razorpayEnabled: false,
+                        phonepeEnabled: false,
+                        cashfreeEnabled: false,
+                    },
+                };
         case "email":
             return { messaging: { emailEnabled: enabled } };
         case "shipping":

package/dist/_internal/shared/features/admin/row-widget-resources.d.ts

@@ -0,0 +1,4 @@
+import type { AdminRowResource } from "../dashboard/recent-entry";
+export declare const ADMIN_ROW_HREF_BY_RESOURCE: Record<AdminRowResource, (rowId: string) => string>;
+/** Display labels for the "Pin to dashboard" action's resource picker / card subtitle. */
+export declare const ADMIN_ROW_RESOURCE_LABEL: Record<AdminRowResource, string>;

package/dist/_internal/shared/features/admin/row-widget-resources.js

@@ -0,0 +1,29 @@
+/**
+ * Phase 10 ("widget descriptors") — resolves an `adminRow` RecentEntry's
+ * `{resource, rowId}` into a real URL at render time, never stored on the
+ * entry itself. Storing a frozen href would go stale the first time a route
+ * is restructured — the Root Cause #42 mirror-drift pattern. This map is
+ * itself a second hand-maintained mirror one level up (of each view's own
+ * `rowHrefTemplate` literal), which is why `audit-widget-descriptor-sync.mjs`
+ * R1/R5 exist: R1 checks every key here is a real `ACTIONS` bucket, R5
+ * checks every resource's `Admin*View.tsx` still declares `rowHrefTemplate`.
+ *
+ * Only five resources are eligible — see the `AdminRowResource` doc comment
+ * in `recent-entry.ts` for which admin views were checked and excluded.
+ */
+import { ROUTES } from "../../../../next/routing/route-map.js";
+export const ADMIN_ROW_HREF_BY_RESOURCE = {
+    BUNDLE: (rowId) => String(ROUTES.ADMIN.BUNDLES_EDIT(rowId)),
+    CLEARANCE: (rowId) => String(ROUTES.ADMIN.CLEARANCE_EDIT(rowId)),
+    BEY: (rowId) => String(ROUTES.ADMIN.BEYS_EDIT(rowId)),
+    PART: (rowId) => String(ROUTES.ADMIN.PARTS_EDIT(rowId)),
+    SUBLISTING: (rowId) => String(ROUTES.ADMIN.SUBLISTING_CATEGORIES_EDIT(rowId)),
+};
+/** Display labels for the "Pin to dashboard" action's resource picker / card subtitle. */
+export const ADMIN_ROW_RESOURCE_LABEL = {
+    BUNDLE: "Bundle",
+    CLEARANCE: "Clearance listing",
+    BEY: "Bey",
+    PART: "Part",
+    SUBLISTING: "Sublisting category",
+};

package/dist/_internal/shared/features/blog/schema.d.ts

@@ -13,13 +13,13 @@ export declare const blogPostInputSchema: z.ZodObject<{
     metaTitle: z.ZodOptional<z.ZodString>;
     metaDescription: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    status: "draft" | "published";
     title: string;
+    content: string;
+    status: "draft" | "published";
     slug: string;
     category: string;
     tags: string[];
     isFeatured: boolean;
-    content: string;
     youtubeId?: string | undefined;
     excerpt?: string | undefined;
     coverImage?: string | undefined;
@@ -27,9 +27,9 @@ export declare const blogPostInputSchema: z.ZodObject<{
     metaDescription?: string | undefined;
 }, {
     title: string;
+    content: string;
     slug: string;
     category: string;
-    content: string;
     status?: "draft" | "published" | undefined;
     youtubeId?: string | undefined;
     tags?: string[] | undefined;
@@ -53,25 +53,25 @@ export declare const blogPostUpdateSchema: z.ZodObject<Omit<{
     metaTitle: z.ZodOptional<z.ZodOptional<z.ZodString>>;
     metaDescription: z.ZodOptional<z.ZodOptional<z.ZodString>>;
 }, "slug">, "strip", z.ZodTypeAny, {
+    title?: string | undefined;
+    content?: string | undefined;
     status?: "draft" | "published" | undefined;
     youtubeId?: string | undefined;
-    title?: string | undefined;
     category?: string | undefined;
     tags?: string[] | undefined;
     isFeatured?: boolean | undefined;
-    content?: string | undefined;
     excerpt?: string | undefined;
     coverImage?: string | undefined;
     metaTitle?: string | undefined;
     metaDescription?: string | undefined;
 }, {
+    title?: string | undefined;
+    content?: string | undefined;
     status?: "draft" | "published" | undefined;
     youtubeId?: string | undefined;
-    title?: string | undefined;
     category?: string | undefined;
     tags?: string[] | undefined;
     isFeatured?: boolean | undefined;
-    content?: string | undefined;
     excerpt?: string | undefined;
     coverImage?: string | undefined;
     metaTitle?: string | undefined;