@mohasinac/appkit 4.70.0 → 4.71.2

package/dist/features/auth/schemas/firestore.d.ts

@@ -8,6 +8,8 @@ import type { UserRole } from "../types";
 import type { BannedAction, EmployeeGroup, Permission } from "../permissions/constants";
 import type { BaseDocument } from "../../../_internal/shared/types/base-document";
 import type { Encrypted, Plaintext } from "../../../security/encrypted";
+import type { PayoutVerificationStatus } from "../../../_internal/shared/features/payouts/destination";
+import type { RecentlyVisitedMap, SavedCardsMap } from "../../../_internal/shared/features/dashboard/recent-entry";
 /**
  * Generic schema defaults for user-related data.
  * Consumer-specific values (admin email, currency) belong in SiteConfig, not here.
@@ -75,15 +77,52 @@ export interface UserDocument extends BaseDocument {
     displayName: string | null;
     photoURL: string | null;
     avatarMetadata?: AvatarMetadata | null;
+    /**
+     * ── LEGACY SCALAR — derived on read, never the authority (1.43) ───────────
+     *
+     * 🛑 Do NOT make an authorization decision from this field. `roles` below is
+     * the authority. A single scalar cannot answer "is this seller also an
+     * employee", and answering it wrong is silent: the user keeps one of their
+     * two accesses depending on which check ran first.
+     *
+     * `UserRepository.mapDoc` overwrites this on EVERY read path with the
+     * highest-ranked role in `roles` — deliberately the highest rather than
+     * `primaryRole`, so any guard not yet converted to the set under-grants
+     * nothing a hierarchy comparison would have allowed. Kept required (not
+     * optional) so no existing writer breaks during the transition; removed once
+     * `scripts/backfill-user-roles.mjs --apply --drop-old` has run and the grep
+     * for `.role` on a user document is zero.
+     */
     role: UserRole;
+    /**
+     * ── THE authority: every role this account holds ─────────────────────────
+     *
+     * Up to `getMaxRolesPerUser()` entries (3 today, a setting — never a
+     * literal). No forbidden combinations (owner decision). Permissions are the
+     * UNION across all of them, resolved by `permissionsFor(user)`.
+     *
+     * Optional only because documents written before this field existed have
+     * none; `UserRepository.mapDoc` backfills it from `role` on read, so
+     * application code can treat it as always present. Read it through
+     * `rolesOf(user)` rather than directly, so the alias fold
+     * (`moderator` → `employee`) applies.
+     */
+    roles?: UserRole[];
+    /**
+     * 🛑 DISPLAY ONLY — a badge, a profile line, a default landing tab.
+     *
+     * Never an authorization input. A `primaryRole` that gates anything is the
+     * single-role bug under a new name: an admin whose primary role reads
+     * "user" would be locked out of `/admin` while genuinely holding `admin`.
+     * Resolve it through `primaryRoleOf(user)`, which also guarantees it is a
+     * role the user still actually holds.
+     */
+    primaryRole?: UserRole;
     passwordHash?: string;
     emailVerified: boolean;
     disabled: boolean;
     /** Hard-ban flag — disables Firebase Auth login. Distinct from `disabled` (used elsewhere); read alongside `hardBanReason`/`hardBannedAt`/`hardBannedBy`. Set by `hardBanCascade`, cleared by `hardBanReinstatement` for temporary bans. */
     isDisabled?: boolean;
-    storeId?: string;
-    storeSlug?: string;
-    storeStatus?: "pending" | "approved" | "rejected";
     /**
      * Denormalised sum of this user's `pointsLedger` entries. 1 point = ₹1.
      *
@@ -144,7 +183,7 @@ export interface UserDocument extends BaseDocument {
      */
     stats?: {
         totalOrders: number;
-        auctionsWon: number;
+        collectorDropsWon: number;
         itemsSold: number;
         reviewsCount: number;
     };
@@ -153,8 +192,6 @@ export interface UserDocument extends BaseDocument {
         creationTime?: string;
         loginCount?: number;
     };
-    shippingConfig?: SellerShippingConfig;
-    payoutDetails?: SellerPayoutDetails;
     /** Explicit permission set for this employee. admin role bypasses this field entirely. */
     permissions?: Permission[];
     /** Which preset group this employee was assigned at invite time (display only). */
@@ -213,6 +250,36 @@ export interface UserDocument extends BaseDocument {
         /** Which side CTA panels/drawers/sidebars dock to and where close buttons
          * sit. Absent/"right" = default (right-docked). "left" = left-hand mode. */
         handMode?: "left" | "right";
+        /**
+         * Dashboard hub cards this user has hidden, per scope (`"{portal}:hub"`).
+         * Phase 4A, overhaul brief — point 1's "silence panels I don't use
+         * without an admin-wide change." Hiding here is additive to, never a
+         * substitute for, the site-level nav/content-tag visibility that already
+         * decides whether a card exists at all: a card the admin has disabled
+         * cannot be un-hidden by a user's own list, and a card the user hid stays
+         * hidden until THEY unhide it, never rediscovered by a later page view.
+         */
+        hiddenHubCards?: Record<string, string[]>;
+        /**
+         * Recently-visited pages and recently-used toggles/charts, per scope
+         * (`"{portal}:hub"`). Phase 9, overhaul brief — the dashboard-landing
+         * quick-jump's "save the last visited as a card... up to 10 cards."
+         * Capped at `RECENT_ENTRIES_MAX` per scope by both the client hook and
+         * the server merge route. See `RecentEntry` for why this is a
+         * discriminated union rather than a flat shape.
+         */
+        recentlyVisited?: RecentlyVisitedMap;
+        /**
+         * User-curated dashboard cards, per scope (`"{portal}:hub"`). Phase 9-ii,
+         * overhaul brief — "saving these cards so they're kept even if the
+         * history goes above 10." Deliberately a SEPARATE field from
+         * `recentlyVisited` rather than a `saved: true` flag inside it: the two
+         * have different eviction rules (this one has NO cap; `recentlyVisited`
+         * is capped at `RECENT_ENTRIES_MAX` and FIFO-evicts), so a flag on one
+         * shared array would mean a saved card could still be evicted by the
+         * cap — exactly the bug the owner's own request names.
+         */
+        savedCards?: SavedCardsMap;
     };
 }
 export interface UserSoftBan {
@@ -261,12 +328,39 @@ export interface SellerPayoutDetails {
     method: SellerPayoutMethod;
     upiId?: string;
     bankAccount?: SellerBankAccount;
+    /**
+     * The destination is WELL-FORMED. Nothing more.
+     *
+     * 🛑 It used to be written `true` unconditionally by both arms of
+     * `updatePayoutSettings` (measured 2026-10-31 at
+     * `features/seller/actions/seller-actions.ts:404,414`), so a store could be
+     * "payout configured" with an IFSC that is not an IFSC. It is now derived
+     * from `payoutDestinationIsWellFormed`
+     * (`_internal/shared/features/payouts/destination.ts`) and from nowhere
+     * else — never typed by a caller, never defaulted to `true`.
+     *
+     * 🛑 FORMAT-VALID IS NOT BANK-VERIFIED. Whether the account exists and
+     * belongs to the named holder is `verificationStatus` below, and only a
+     * gateway can answer it.
+     */
     isConfigured: boolean;
+    verificationStatus?: PayoutVerificationStatus;
+    /**
+     * The gateway's own refusal reason, verbatim.
+     *
+     * Operator-facing: it is shown to the seller and the admin because "account
+     * name does not match PAN" is actionable and "verification failed" is not.
+     * It carries no PII of its own — it describes the destination, which the
+     * seller supplied.
+     */
+    verificationMessage?: string;
+    /** When a gateway last ACCEPTED this destination. Absent ≠ never valid; absent = never accepted. */
+    verifiedAt?: Date | string;
 }
 export declare const USER_COLLECTION: "users";
 export declare const DEFAULT_USER_DATA: Partial<UserPlain>;
 export declare const USER_INDEXED_FIELDS: readonly ["email", "emailIndex", "phoneNumber", "phoneIndex", "role", "disabled", "emailVerified", "phoneVerified", "storeSlug", "storeStatus", "isTester", "slug"];
-export declare const USER_PUBLIC_FIELDS: readonly ["uid", "displayName", "photoURL", "avatarMetadata", "role", "createdAt", "storeSlug", "publicProfile", "stats"];
+export declare const USER_PUBLIC_FIELDS: readonly ["uid", "displayName", "photoURL", "avatarMetadata", "role", "roles", "primaryRole", "createdAt", "storeSlug", "publicProfile", "stats"];
 export declare const USER_UPDATABLE_FIELDS: readonly ["displayName", "photoURL"];
 export type UserCreateInput = Omit<UserDocument, "uid" | "id" | "createdAt" | "updatedAt">;
 export type UserUpdateInput = Partial<Pick<UserDocument, "displayName" | "photoURL">>;
@@ -305,7 +399,12 @@ export declare const USER_FIELDS: {
     readonly NAME_TOKENS_INDEX: "nameTokensIndex";
     readonly PHOTO_URL: "photoURL";
     readonly AVATAR_METADATA: "avatarMetadata";
+    /** Legacy scalar — derived on read. Never query it to decide access. */
     readonly ROLE: "role";
+    /** THE role authority. Query with `array-contains`, never `==`. */
+    readonly ROLES: "roles";
+    /** Display label only — see `primaryRoleOf`. */
+    readonly PRIMARY_ROLE: "primaryRole";
     readonly PASSWORD_HASH: "passwordHash";
     readonly EMAIL_VERIFIED: "emailVerified";
     readonly DISABLED: "disabled";
@@ -346,7 +445,7 @@ export declare const USER_FIELDS: {
     readonly STATS: "stats";
     readonly STAT: {
         readonly TOTAL_ORDERS: "stats.totalOrders";
-        readonly AUCTIONS_WON: "stats.auctionsWon";
+        readonly COLLECTOR_DROPS_WON: "stats.collectorDropsWon";
         readonly ITEMS_SOLD: "stats.itemsSold";
         readonly REVIEWS_COUNT: "stats.reviewsCount";
     };

package/dist/features/auth/schemas/firestore.js

@@ -47,7 +47,7 @@ export const DEFAULT_USER_DATA = {
     },
     stats: {
         totalOrders: 0,
-        auctionsWon: 0,
+        collectorDropsWon: 0,
         itemsSold: 0,
         reviewsCount: 0,
     },
@@ -72,6 +72,18 @@ export const USER_PUBLIC_FIELDS = [
     "photoURL",
     "avatarMetadata",
     "role",
+    /*
+     * The full role SET on the public projection, alongside the legacy scalar.
+     *
+     * 🛑 Required, not optional polish: the public storefront decides whether a
+     * profile IS a seller from this payload (`useSellerStorefront`). Projecting
+     * only the scalar meant a seller who also holds `employee` had their store
+     * page 404 — the scalar resolves to the higher-ranked role, so
+     * `role === "seller"` was false for a legitimate seller. No new information
+     * is exposed: `role` was already public.
+     */
+    "roles",
+    "primaryRole",
     "createdAt",
     "storeSlug",
     "publicProfile",
@@ -106,7 +118,12 @@ export const USER_FIELDS = {
     NAME_TOKENS_INDEX: "nameTokensIndex",
     PHOTO_URL: "photoURL",
     AVATAR_METADATA: "avatarMetadata",
+    /** Legacy scalar — derived on read. Never query it to decide access. */
     ROLE: "role",
+    /** THE role authority. Query with `array-contains`, never `==`. */
+    ROLES: "roles",
+    /** Display label only — see `primaryRoleOf`. */
+    PRIMARY_ROLE: "primaryRole",
     PASSWORD_HASH: "passwordHash",
     EMAIL_VERIFIED: "emailVerified",
     DISABLED: "disabled",
@@ -147,7 +164,7 @@ export const USER_FIELDS = {
     STATS: "stats",
     STAT: {
         TOTAL_ORDERS: "stats.totalOrders",
-        AUCTIONS_WON: "stats.auctionsWon",
+        COLLECTOR_DROPS_WON: "stats.collectorDropsWon",
         ITEMS_SOLD: "stats.itemsSold",
         REVIEWS_COUNT: "stats.reviewsCount",
         // `RATING` removed — `stats.rating` had no writer and no buyer-rating

package/dist/features/auth/schemas/index.d.ts

@@ -55,26 +55,46 @@ export declare const resetPasswordSchema: z.ZodObject<{
     password: string;
     token: string;
 }>;
-export declare const userRoleSchema: z.ZodEnum<["user", "seller", "moderator", "employee", "admin"]>;
+/**
+ * 🛑 Must stay in sync with the `UserRole` union in ../types.
+ *
+ * `tester` was MISSING here while being a full member of the union and of
+ * `ROLE_HIERARCHY` — so any payload validated through this schema rejected a
+ * legitimate tester's role. Added 2026-11-07 with the role-set work.
+ *
+ * `moderator` stays declared because stored documents still carry it;
+ * `rolesOf()` folds it to `employee` on read. Removing the member would make
+ * every un-backfilled document fail validation on its next write.
+ */
+export declare const userRoleSchema: z.ZodEnum<["user", "seller", "tester", "moderator", "employee", "admin"]>;
 export declare const authUserSchema: z.ZodObject<{
     id: z.ZodString;
     email: z.ZodOptional<z.ZodString>;
     displayName: z.ZodOptional<z.ZodString>;
     photoURL: z.ZodOptional<z.ZodString>;
-    role: z.ZodOptional<z.ZodEnum<["user", "seller", "moderator", "employee", "admin"]>>;
+    /** Legacy scalar — derived from `roles`. Never an authorization input. */
+    role: z.ZodOptional<z.ZodEnum<["user", "seller", "tester", "moderator", "employee", "admin"]>>;
+    /** THE authority. Cap enforced by `validateRoleSet`, which reads the config. */
+    roles: z.ZodOptional<z.ZodArray<z.ZodEnum<["user", "seller", "tester", "moderator", "employee", "admin"]>, "many">>;
+    /** Display only — see `primaryRoleOf`. */
+    primaryRole: z.ZodOptional<z.ZodEnum<["user", "seller", "tester", "moderator", "employee", "admin"]>>;
     isEmailVerified: z.ZodOptional<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
     id: string;
-    email?: string | undefined;
     displayName?: string | undefined;
-    role?: "user" | "seller" | "moderator" | "employee" | "admin" | undefined;
+    role?: "user" | "seller" | "tester" | "moderator" | "employee" | "admin" | undefined;
+    email?: string | undefined;
+    roles?: ("user" | "seller" | "tester" | "moderator" | "employee" | "admin")[] | undefined;
     photoURL?: string | undefined;
+    primaryRole?: "user" | "seller" | "tester" | "moderator" | "employee" | "admin" | undefined;
     isEmailVerified?: boolean | undefined;
 }, {
     id: string;
-    email?: string | undefined;
     displayName?: string | undefined;
-    role?: "user" | "seller" | "moderator" | "employee" | "admin" | undefined;
+    role?: "user" | "seller" | "tester" | "moderator" | "employee" | "admin" | undefined;
+    email?: string | undefined;
+    roles?: ("user" | "seller" | "tester" | "moderator" | "employee" | "admin")[] | undefined;
     photoURL?: string | undefined;
+    primaryRole?: "user" | "seller" | "tester" | "moderator" | "employee" | "admin" | undefined;
     isEmailVerified?: boolean | undefined;
 }>;

package/dist/features/auth/schemas/index.js

@@ -75,9 +75,21 @@ export const resetPasswordSchema = z.object({
     }),
 });
 // --- Auth user schema ---------------------------------------------------------
+/**
+ * 🛑 Must stay in sync with the `UserRole` union in ../types.
+ *
+ * `tester` was MISSING here while being a full member of the union and of
+ * `ROLE_HIERARCHY` — so any payload validated through this schema rejected a
+ * legitimate tester's role. Added 2026-11-07 with the role-set work.
+ *
+ * `moderator` stays declared because stored documents still carry it;
+ * `rolesOf()` folds it to `employee` on read. Removing the member would make
+ * every un-backfilled document fail validation on its next write.
+ */
 export const userRoleSchema = z.enum([
     "user",
     "seller",
+    "tester",
     "moderator",
     "employee",
     "admin",
@@ -87,6 +99,11 @@ export const authUserSchema = z.object({
     email: z.string().email().optional(),
     displayName: z.string().optional(),
     photoURL: z.string().optional(),
+    /** Legacy scalar — derived from `roles`. Never an authorization input. */
     role: userRoleSchema.optional(),
+    /** THE authority. Cap enforced by `validateRoleSet`, which reads the config. */
+    roles: z.array(userRoleSchema).optional(),
+    /** Display only — see `primaryRoleOf`. */
+    primaryRole: userRoleSchema.optional(),
     isEmailVerified: z.boolean().optional(),
 });

package/dist/features/auth/types/index.d.ts

@@ -11,13 +11,35 @@
  * Both booleans are still read during the migration window — see
  * `isTesterUser` / `canTestAdminSurfaces` in ./role-predicates.
  */
-export type UserRole = "user" | "seller" | "tester" | "moderator" | "employee" | "admin";
+export type UserRole = "user" | "seller" | "tester"
+/**
+ * @deprecated COLLAPSED INTO `employee` (A9, owner 2026-11-07 — they are the
+ * same thing; moderation became an employee permission).
+ *
+ * 🛑 Never assign this to a new user. It stays in the union only because
+ * stored documents written before the fold still carry it, and removing a
+ * member would make every such document fail validation on its next write.
+ * `rolesOf()` folds it to `employee` on read, so a normalised role set never
+ * contains it; `scripts/backfill-user-roles.mjs` removes it from storage.
+ */
+ | "moderator" | "employee" | "admin";
 export interface AuthUser {
     id: string;
     email?: string;
     displayName?: string;
     photoURL?: string;
+    /**
+     * Legacy scalar — the HIGHEST-RANKED role held. 🛑 Not an authorization
+     * input on its own; see `roles`.
+     */
     role?: UserRole;
+    /**
+     * THE role authority — every role this account holds. Read through
+     * `rolesOf(user)` so the `moderator` fold and the scalar fallback apply.
+     */
+    roles?: UserRole[];
+    /** 🛑 DISPLAY ONLY. Never gates anything — see `primaryRoleOf`. */
+    primaryRole?: UserRole;
     isEmailVerified?: boolean;
 }
 export interface LoginInput {

package/dist/features/before-after/schemas/index.d.ts

@@ -22,8 +22,8 @@ export declare const beforeAfterItemSchema: z.ZodObject<{
     sortOrder: z.ZodDefault<z.ZodNumber>;
     createdAt: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    id: string;
     title: string;
+    id: string;
     isActive: boolean;
     sortOrder: number;
     description?: string | undefined;
@@ -34,8 +34,8 @@ export declare const beforeAfterItemSchema: z.ZodObject<{
     beforeImageUrl?: string | undefined;
     afterImageUrl?: string | undefined;
 }, {
-    id: string;
     title: string;
+    id: string;
     description?: string | undefined;
     createdAt?: string | undefined;
     isActive?: boolean | undefined;

package/dist/features/blog/actions/blog-actions.d.ts

@@ -17,13 +17,13 @@ export declare const createBlogPostSchema: z.ZodObject<{
         alt: z.ZodOptional<z.ZodString>;
         thumbnailUrl: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
     }, "strip", z.ZodTypeAny, {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     }, {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     }>, z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, {
@@ -36,13 +36,13 @@ export declare const createBlogPostSchema: z.ZodObject<{
         alt: z.ZodOptional<z.ZodString>;
         thumbnailUrl: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
     }, "strip", z.ZodTypeAny, {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     }, {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     }>, "many">>>;
@@ -52,13 +52,13 @@ export declare const createBlogPostSchema: z.ZodObject<{
         alt: z.ZodOptional<z.ZodString>;
         thumbnailUrl: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
     }, "strip", z.ZodTypeAny, {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     }, {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     }>, "many">>>;
@@ -70,32 +70,32 @@ export declare const createBlogPostSchema: z.ZodObject<{
     metaTitle: z.ZodOptional<z.ZodString>;
     metaDescription: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    status: "draft" | "published" | "archived";
     title: string;
+    content: string;
+    status: "draft" | "published" | "archived";
     slug: string;
     category: "news" | "tips" | "guides" | "updates" | "community";
     tags: string[];
     isFeatured: boolean;
-    content: string;
     excerpt: string;
     readTimeMinutes: number;
     isPinned: boolean;
     additionalImages: {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     }[];
     contentImages: {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     }[];
     publishedAt?: string | undefined;
     coverImage?: {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     } | {
@@ -109,17 +109,17 @@ export declare const createBlogPostSchema: z.ZodObject<{
     metaDescription?: string | undefined;
 }, {
     title: string;
+    content: string;
     slug: string;
     category: "news" | "tips" | "guides" | "updates" | "community";
-    content: string;
     excerpt: string;
     status?: "draft" | "published" | "archived" | undefined;
     tags?: string[] | undefined;
     publishedAt?: string | undefined;
     isFeatured?: boolean | undefined;
     coverImage?: string | {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     } | null | undefined;
@@ -128,14 +128,14 @@ export declare const createBlogPostSchema: z.ZodObject<{
     readTimeMinutes?: number | undefined;
     isPinned?: boolean | undefined;
     additionalImages?: {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     }[] | undefined;
     contentImages?: {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     }[] | undefined;
@@ -159,13 +159,13 @@ export declare const updateBlogPostSchema: z.ZodObject<{
         alt: z.ZodOptional<z.ZodString>;
         thumbnailUrl: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
     }, "strip", z.ZodTypeAny, {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     }, {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     }>, z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, {
@@ -178,13 +178,13 @@ export declare const updateBlogPostSchema: z.ZodObject<{
         alt: z.ZodOptional<z.ZodString>;
         thumbnailUrl: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
     }, "strip", z.ZodTypeAny, {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     }, {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     }>, "many">>>>;
@@ -194,13 +194,13 @@ export declare const updateBlogPostSchema: z.ZodObject<{
         alt: z.ZodOptional<z.ZodString>;
         thumbnailUrl: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
     }, "strip", z.ZodTypeAny, {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     }, {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     }>, "many">>>>;
@@ -212,18 +212,18 @@ export declare const updateBlogPostSchema: z.ZodObject<{
     metaTitle: z.ZodOptional<z.ZodOptional<z.ZodString>>;
     metaDescription: z.ZodOptional<z.ZodOptional<z.ZodString>>;
 }, "strip", z.ZodTypeAny, {
-    status?: "draft" | "published" | "archived" | undefined;
     title?: string | undefined;
+    content?: string | undefined;
+    status?: "draft" | "published" | "archived" | undefined;
     slug?: string | undefined;
     category?: "news" | "tips" | "guides" | "updates" | "community" | undefined;
     tags?: string[] | undefined;
     publishedAt?: string | undefined;
     isFeatured?: boolean | undefined;
-    content?: string | undefined;
     excerpt?: string | undefined;
     coverImage?: {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     } | {
@@ -235,14 +235,14 @@ export declare const updateBlogPostSchema: z.ZodObject<{
     readTimeMinutes?: number | undefined;
     isPinned?: boolean | undefined;
     additionalImages?: {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     }[] | undefined;
     contentImages?: {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     }[] | undefined;
@@ -250,18 +250,18 @@ export declare const updateBlogPostSchema: z.ZodObject<{
     metaTitle?: string | undefined;
     metaDescription?: string | undefined;
 }, {
-    status?: "draft" | "published" | "archived" | undefined;
     title?: string | undefined;
+    content?: string | undefined;
+    status?: "draft" | "published" | "archived" | undefined;
     slug?: string | undefined;
     category?: "news" | "tips" | "guides" | "updates" | "community" | undefined;
     tags?: string[] | undefined;
     publishedAt?: string | undefined;
     isFeatured?: boolean | undefined;
-    content?: string | undefined;
     excerpt?: string | undefined;
     coverImage?: string | {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     } | null | undefined;
@@ -270,14 +270,14 @@ export declare const updateBlogPostSchema: z.ZodObject<{
     readTimeMinutes?: number | undefined;
     isPinned?: boolean | undefined;
     additionalImages?: {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     }[] | undefined;
     contentImages?: {
-        type: "image" | "video" | "file";
         url: string;
+        type: "video" | "image" | "file";
         alt?: string | undefined;
         thumbnailUrl?: string | undefined;
     }[] | undefined;

package/dist/features/blog/actions/blog-actions.js

@@ -1,4 +1,4 @@
-import { sortBy } from "@mohasinac/appkit";
+import { sortBy } from "../../../constants/sort.js";
 import { z } from "zod";
 import { mediaUrlSchema } from "../../../validation/schemas.js";
 import { serverLogger } from "../../../monitoring/index.js";

package/dist/features/blog/components/BlogFeaturedCard.js

@@ -6,7 +6,7 @@ import { Div } from "../../../ui/components/Div.js";
 import { Heading, Span, Text } from "../../../ui/components/Typography.js";
 import { Row, Stack } from "../../../ui/components/Layout.js";
 import { TextLink } from "../../../ui/components/TextLink.js";
-import { MediaImage } from "../../media/MediaImage.js";
+import { MediaImage } from "../../../ui/components/MediaImage.js";
 import { getMediaUrl } from "../../media/types/index.js";
 import { getDefaultLocale } from "../../../core/baseline-resolver.js";
 import { safeDisplayName } from "../../../security/index.js";

package/dist/features/blog/components/BlogIndexListing.js

@@ -3,6 +3,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useState, useCallback, useMemo } from "react";
 import { useUrlTable } from "../../../react/hooks/useUrlTable.js";
 import { useBlogPosts } from "../hooks/useBlog.js";
+import { Button } from "../../../ui/components/Button.js";
 import { Div } from "../../../ui/components/Div.js";
 import { Grid, Row, Stack } from "../../../ui/components/Layout.js";
 import { ListingFilterDrawer } from "../../../ui/components/ListingFilterDrawer.js";
@@ -119,5 +120,5 @@ export function BlogIndexListing({ initialData }) {
     const commitSearch = useCallback(() => {
         table.set(TABLE_KEYS.QUERY, searchInput.trim());
     }, [searchInput, table]);
-    return (_jsxs(Div, { className: "min-h-screen", children: [_jsx(ListingToolbar, { filterCount: activeFilterCount, onFiltersClick: openFilters, searchValue: searchInput, searchPlaceholder: "Search posts...", onSearchChange: setSearchInput, onSearchCommit: commitSearch, sortValue: table.get(TABLE_KEYS.SORT) || DEFAULT_SORT, sortOptions: BLOG_PUBLIC_SORT_OPTIONS, onSortChange: (v) => { table.set(TABLE_KEYS.SORT, v); }, view: view, onViewChange: handleViewToggle, onResetAll: resetAll, hasActiveState: hasActiveState }), totalPages > 1 && (_jsx(StickyToolbar, { offset: "header+pagination", tone: "translucent", border: true, padding: "toolbar", children: _jsx(Row, { justify: "center", children: _jsx(Pagination, { currentPage: currentPage, totalPages: totalPages, onPageChange: (p) => table.setPage(p) }) }) })), _jsx(Div, { padding: "y-lg", children: renderBlogGrid({ isLoading, posts, view }) }), renderBlogFilterDrawer({ filterOpen, setFilterOpen, activeFilterCount, clearFilters, applyFilters, pendingTable })] }));
+    return (_jsxs(Div, { className: "min-h-screen", children: [_jsx(ListingToolbar, { filterCount: activeFilterCount, onFiltersClick: openFilters, searchValue: searchInput, searchPlaceholder: "Search posts...", onSearchChange: setSearchInput, onSearchCommit: commitSearch, sortValue: table.get(TABLE_KEYS.SORT) || DEFAULT_SORT, sortOptions: BLOG_PUBLIC_SORT_OPTIONS, onSortChange: (v) => { table.set(TABLE_KEYS.SORT, v); }, view: view, onViewChange: handleViewToggle, onResetAll: resetAll, hasActiveState: hasActiveState }), totalPages > 1 && (_jsx(StickyToolbar, { offset: "header+pagination", tone: "translucent", border: true, padding: "toolbar", children: _jsx(Row, { justify: "center", children: _jsx(Pagination, { currentPage: currentPage, totalPages: totalPages, onPageChange: (p) => table.setPage(p) }) }) })), _jsxs(Div, { layout: "grid", gap: "8", className: "lg:grid-cols-12", children: [_jsx(Div, { className: "hidden lg:col-span-4 lg:block xl:col-span-3", children: _jsxs(Div, { rounded: "xl", border: "default", padding: "lg", children: [_jsx(BlogFilters, { table: pendingTable, variant: "public" }), _jsxs(Row, { gap: "sm", className: "mt-4", justify: "end", children: [_jsx(Button, { type: "button", variant: "ghost", onClick: clearFilters, children: "Reset all" }), _jsx(Button, { type: "button", variant: "primary", onClick: applyFilters, children: activeFilterCount > 0 ? `Apply (${activeFilterCount})` : "Apply" })] })] }) }), _jsx(Div, { className: "lg:col-span-8 xl:col-span-9", children: _jsx(Div, { padding: "y-lg", children: renderBlogGrid({ isLoading, posts, view }) }) })] }), renderBlogFilterDrawer({ filterOpen, setFilterOpen, activeFilterCount, clearFilters, applyFilters, pendingTable })] }));
 }