@mohasinac/appkit 4.71.0 → 4.71.2

package/dist/features/search/components/SearchResultsPageView.js

@@ -5,6 +5,7 @@ import { Container, Stack, Row } from "../../../ui/components/Layout.js";
 import { Div } from "../../../ui/components/Div.js";
 import { Heading, Text, Span } from "../../../ui/components/Typography.js";
 import { TextLink } from "../../../ui/components/TextLink.js";
+import { MediaImage } from "../../../ui/components/MediaImage.js";
 export function SearchResultsPageView({ result, renderSearchInput, renderAboveGroups, }) {
     const { q, terms, groups, totalHits } = result;
     const hasQuery = q.trim().length > 0;
@@ -22,5 +23,5 @@ export function SearchResultsPageView({ result, renderSearchInput, renderAboveGr
     const normalisedAway = hasQuery && terms.length === 0;
     return (_jsx(Section, { padding: "page", children: _jsx(Container, { children: _jsxs(Stack, { gap: "loose", children: [_jsxs(Stack, { gap: "xs", children: [_jsx(Heading, { level: 1, children: hasQuery ? `Search: ${q}` : "Search" }), hasQuery && !normalisedAway && (_jsx(Text, { color: "muted", size: "sm", children: totalHits === 0
                                     ? "Nothing matched."
-                                    : `${totalHits}${groups.some((g) => g.truncated) ? "+" : ""} result${totalHits === 1 ? "" : "s"} across ${groups.length} section${groups.length === 1 ? "" : "s"}.` }))] }), renderSearchInput?.(), renderAboveGroups?.(), !hasQuery && (_jsx(Text, { color: "muted", children: "Search listings, categories, brands, stores, articles and help pages at once." })), normalisedAway && (_jsx(Text, { color: "muted", children: "That search had no searchable words in it. Try a product, part or category name." })), groups.map((group) => (_jsxs(Stack, { gap: "sm", children: [_jsxs(Row, { justify: "between", align: "center", wrap: true, gap: "sm", children: [_jsxs(Heading, { level: 2, size: "lg", children: [group.label, group.truncated && (_jsxs(Span, { size: "sm", color: "muted", children: [" ", "(", group.hits.length, "+)"] }))] }), _jsxs(TextLink, { href: group.moreHref, children: ["See all ", group.label.toLowerCase(), " \u2192"] })] }), _jsx(Stack, { gap: "xs", children: group.hits.map((hit) => (_jsx(Div, { surface: "card", rounded: "md", overflow: "hidden", children: _jsxs(TextLink, { href: hit.href, variant: "inherit", layout: "flex-col", gap: "xs", paddingX: "sm", paddingY: "sm", className: "w-full hover:bg-surface-hover", children: [_jsx(Text, { size: "sm", weight: "medium", children: hit.title }), hit.detail && (_jsx(Text, { size: "xs", color: "muted", children: hit.detail }))] }) }, `${group.key}-${hit.id}`))) })] }, group.key))), hasQuery && !normalisedAway && totalHits === 0 && (_jsxs(Stack, { gap: "xs", children: [_jsxs(Text, { color: "muted", children: ["No listings, categories, brands, stores, articles or help pages matched \u201C", q, "\u201D."] }), _jsx(TextLink, { href: ROUTES.PUBLIC.PRODUCTS, children: "Browse all listings \u2192" })] }))] }) }) }));
+                                    : `${totalHits}${groups.some((g) => g.truncated) ? "+" : ""} result${totalHits === 1 ? "" : "s"} across ${groups.length} section${groups.length === 1 ? "" : "s"}.` }))] }), renderSearchInput?.(), renderAboveGroups?.(), !hasQuery && (_jsx(Text, { color: "muted", children: "Search listings, categories, brands, stores, articles and help pages at once." })), normalisedAway && (_jsx(Text, { color: "muted", children: "That search had no searchable words in it. Try a product, part or category name." })), groups.map((group) => (_jsxs(Stack, { gap: "sm", children: [_jsxs(Row, { justify: "between", align: "center", wrap: true, gap: "sm", children: [_jsxs(Heading, { level: 2, size: "lg", children: [group.label, group.truncated && (_jsxs(Span, { size: "sm", color: "muted", children: [" ", "(", group.hits.length, "+)"] }))] }), _jsxs(TextLink, { href: group.moreHref, children: ["See all ", group.label.toLowerCase(), " \u2192"] })] }), _jsx(Stack, { gap: "xs", children: group.hits.map((hit) => (_jsx(Div, { surface: "card", rounded: "md", overflow: "hidden", children: _jsxs(TextLink, { href: hit.href, variant: "inherit", layout: "flex", align: "center", gap: "sm", paddingX: "sm", paddingY: "sm", className: "w-full hover:bg-surface-hover", children: [hit.image && (_jsx(MediaImage, { src: hit.image, alt: hit.title, size: "thumbnail", className: "flex-shrink-0" })), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "medium", children: hit.title }), hit.detail && (_jsx(Text, { size: "xs", color: "muted", children: hit.detail }))] })] }) }, `${group.key}-${hit.id}`))) })] }, group.key))), hasQuery && !normalisedAway && totalHits === 0 && (_jsxs(Stack, { gap: "xs", children: [_jsxs(Text, { color: "muted", children: ["No listings, categories, brands, stores, articles or help pages matched \u201C", q, "\u201D."] }), _jsx(TextLink, { href: ROUTES.PUBLIC.PRODUCTS, children: "Browse all listings \u2192" })] }))] }) }) }));
 }

package/dist/features/search/hooks/useNavSuggestions.d.ts

@@ -2,7 +2,7 @@ export interface NavSuggestionRecord {
     objectID: string;
     type: "page" | "category" | "blog" | "event" | "product";
     /**
-     * The real index type key (`auction`, `part`, `faq`, `scammer`, …) when the
+     * The real index type key (`collector drop`, `part`, `faq`, `scammer`, …) when the
      * row came from the local search artifact, which spans 21 types.
      *
      * 🛑 `type` above stays a 5-value union on purpose. It is what the

package/dist/features/search/hooks/useNavSuggestions.js

@@ -7,7 +7,7 @@ const SUGGESTIONS_ENDPOINT = SEARCH_ENDPOINTS.SUGGESTIONS;
  * /api/search/suggestions only understands the 4 content categories it can
  * actually produce typeahead rows for (singular: product/category/blog/event)
  * — it has no dedicated suggestion category for the other 10 SearchResourceType
- * values (auctions, stores, brands, …). Map the ones it does support; for
+ * values (collector drops, stores, brands, …). Map the ones it does support; for
  * everything else, omit `type` entirely so the endpoint returns its
  * unfiltered "all" set rather than zero results. Previously this sent the
  * plural resource-type value verbatim (e.g. "products", the search bar's

package/dist/features/search/hooks/useSiteSearch.js

@@ -85,7 +85,7 @@ function suggestionTypeFor(typeKey) {
         case "group":
             return "page";
         default:
-            // Every listing type — product, auction, pre-order, … — plus anything
+            // Every listing type — product, collector drop, pre-order, … — plus anything
             // added to the index later. A listing is the commonest row and the
             // product icon is the right default for an unknown one.
             return "product";

package/dist/features/seller/actions/offer-actions.js

@@ -86,9 +86,9 @@ export async function makeOffer(userId, userEmail, input) {
         throw new ValidationError("You can't make an offer on your own listing — edit its price instead.");
     }
     const listingType = normalizeListingType(product);
-    // Some listing types cannot be negotiated at all — an auction already has
-    // bidding, a prize-draw sells fixed-price entries. This was never checked, so
-    // an offer could be (and in seed data was) attached to an auction, producing
+    // Some listing types cannot be negotiated at all — a collector drop already has
+    // bidding, clearance sells fixed-price entries. This was never checked, so
+    // an offer could be (and in seed data was) attached to a collector drop, producing
     // a cart line that claims `listingType: "standard"` in the offer lane.
     if (!canMakeOffer(listingType)) {
         throw new ValidationError("Offers aren't available for this kind of listing.");

package/dist/features/seller/actions/seller-actions.d.ts

@@ -125,6 +125,22 @@ export declare function updateStore(userId: string, input: UpdateStoreInput): Pr
 type SafePayoutDetails = Omit<SellerPayoutDetails, "bankAccount"> & {
     bankAccount?: Omit<NonNullable<SellerPayoutDetails["bankAccount"]>, "accountNumber">;
 };
+/**
+ * 🛑 THIS IS THE WRITE PATH, and it used to assert `isConfigured: true`
+ * unconditionally on both arms — so a store could be "payout configured" with
+ * an IFSC that is not an IFSC and a VPA that is not a VPA. The consumer action
+ * that calls it had Zod patterns; this function, which is what actually writes,
+ * had none, so any other caller bypassed every check.
+ *
+ * Now:
+ *   · the destination is VALIDATED here, through the one shared definition
+ *     (`payoutDestinationIssues`), so the check cannot be skipped by reaching
+ *     this function directly;
+ *   · `isConfigured` is DERIVED from that same definition — it means
+ *     FORMAT-VALID and nothing more;
+ *   · the gateway's verification verdict is RESET, because the destination it
+ *     referred to has just changed.
+ */
 export declare function updatePayoutSettings(userId: string, input: UpdatePayoutSettingsInput): Promise<{
     payoutDetails: SafePayoutDetails;
 }>;
@@ -164,6 +180,9 @@ export declare function getSellerPayoutSettings(userId: string): Promise<SellerP
     method: import("../../auth").SellerPayoutMethod;
     upiId?: string;
     isConfigured: boolean;
+    verificationStatus?: import("../../..").PayoutVerificationStatus;
+    verificationMessage?: string;
+    verifiedAt?: Date | string;
 }>;
 export declare function listSellerOrders(userId: string, params?: SellerListParams): Promise<FirebaseSieveResult<OrderDocument>>;
 export declare function getSellerAnalytics(userId: string): Promise<{

package/dist/features/seller/actions/seller-actions.js

@@ -17,9 +17,10 @@ import { ApiError, AuthorizationError, NotFoundError, ValidationError, } from ".
 import { assertListingTypeAllowed } from "../../../_internal/shared/listing-types/tiers.js";
 import { userRepository } from "../../auth/repository/user.repository.js";
 import { storeRepository } from "../../stores/repository/store.repository.js";
+import { sellerProfileRepository } from "../repository/seller-profile.repository.js";
 import { productRepository } from "../../products/repository/products.repository.js";
 import { ProductStatusValues } from "../../products/schemas/index.js";
-import { assertPrizeDrawNotLocked, assertPrizeDrawWonItemsImmutable, assertAuctionTermsMutable, } from "../../../_internal/server/features/products/service.js";
+import { assertClearanceNotLocked, assertClearanceWonItemsImmutable, assertCollectorDropTermsMutable, } from "../../../_internal/server/features/products/service.js";
 import { orderRepository } from "../../orders/repository/orders.repository.js";
 import { OrderStatusValues } from "../../orders/schemas/index.js";
 import { payoutRepository } from "../../payments/repository/payout.repository.js";
@@ -28,10 +29,23 @@ import { couponsRepository } from "../../promotions/repository/coupons.repositor
 import { generateStoreSlug } from "../../stores/schemas/firestore.js";
 import { siteSettingsRepository } from "../../admin/repository/site-settings.repository.js";
 import { computePayoutDeduction } from "../../../_internal/shared/fees/calculator.js";
+/*
+ * The one predicate that decides whether WE still owe this seller a payout. A
+ * split-settled order has already been paid out of the aggregator's escrow, and
+ * marking it payout-eligible would pay the seller twice.
+ */
+import { orderNeedsManualPayout } from "../../../_internal/shared/checkout/settlement-split.js";
+/*
+ * The ONE definition of "is this payout destination well-formed". `isConfigured`
+ * is derived from it rather than asserted, and the gateway's verification
+ * verdict is reset whenever the destination changes.
+ */
+import { payoutDestinationIssues, payoutDestinationIsWellFormed, resetVerificationOnChange, } from "../../../_internal/shared/features/payouts/destination.js";
 import { ordersTaxableValue, ordersShippingReimbursement, ordersPointsBorneByStore, } from "../../../_internal/shared/checkout/order-math.js";
 import { getDefaultCurrency } from "../../../core/baseline-resolver.js";
 import { finalizeStagedMediaUrl, finalizeStagedMediaField, finalizeStagedMediaArray, } from "../../media/finalize.js";
 import { StoreStatusValues } from "../../stores/schemas/firestore.js";
+import { assertCompositeShape } from "../../../_internal/shared/features/products/composite.js";
 // --- Helper -------------------------------------------------------------------
 async function finalizeProductMediaReferences(data) {
     const finalized = { ...data };
@@ -59,6 +73,7 @@ function maskAccountNumber(accountNumber) {
 export async function becomeSeller(userId) {
     const profile = await userRepository.findById(userId);
     const isTester = isTesterUser(profile);
+    const sellerProfile = await sellerProfileRepository.findById(userId);
     /*
      * 🛑 `isStrictSellerUser`, not `isSellerUser`.
      *
@@ -75,12 +90,11 @@ export async function becomeSeller(userId) {
     const alreadyOnboarded = profile &&
         (isStrictSellerUser(profile) ||
             isAdminUser(profile) ||
-            (isTester && Boolean(profile.storeStatus)));
+            (isTester && Boolean(sellerProfile?.storeStatus)));
     if (alreadyOnboarded) {
         return {
             alreadySeller: true,
-            storeStatus: profile.storeStatus ??
-                "pending",
+            storeStatus: sellerProfile?.storeStatus ?? "pending",
         };
     }
     const storeStatus = isTester ? "approved" : "pending";
@@ -92,8 +106,9 @@ export async function becomeSeller(userId) {
         // the test-data visibility their whole programme depends on — the first
         // time they opened a store.
         ...(isTester ? {} : { role: "seller" }),
-        storeStatus,
     });
+    // storeStatus is seller-only data — lives in sellerProfiles, not users.
+    await sellerProfileRepository.upsertForOwner(userId, { storeStatus });
     serverLogger.info("becomeSeller: application submitted", { userId, storeStatus });
     return { storeStatus };
 }
@@ -122,7 +137,9 @@ export async function createStore(userId, userName, input) {
         isPublic: isTester,
         status: isTester ? StoreStatusValues.ACTIVE : StoreStatusValues.PENDING,
     });
-    await userRepository.update(userId, {
+    // storeId/storeSlug/storeStatus are seller-only data — sellerProfiles,
+    // not users. `role`/`isTester` etc. stay on the user doc untouched.
+    await sellerProfileRepository.upsertForOwner(userId, {
         storeId: store.id,
         storeSlug: store.storeSlug,
         storeStatus: isTester ? "approved" : "pending",
@@ -185,10 +202,31 @@ export async function updateStore(userId, input) {
     }
     return { store: updated };
 }
+/**
+ * 🛑 THIS IS THE WRITE PATH, and it used to assert `isConfigured: true`
+ * unconditionally on both arms — so a store could be "payout configured" with
+ * an IFSC that is not an IFSC and a VPA that is not a VPA. The consumer action
+ * that calls it had Zod patterns; this function, which is what actually writes,
+ * had none, so any other caller bypassed every check.
+ *
+ * Now:
+ *   · the destination is VALIDATED here, through the one shared definition
+ *     (`payoutDestinationIssues`), so the check cannot be skipped by reaching
+ *     this function directly;
+ *   · `isConfigured` is DERIVED from that same definition — it means
+ *     FORMAT-VALID and nothing more;
+ *   · the gateway's verification verdict is RESET, because the destination it
+ *     referred to has just changed.
+ */
 export async function updatePayoutSettings(userId, input) {
     let payoutDetails;
     if (input.method === "upi") {
-        payoutDetails = { method: "upi", upiId: input.upiId, isConfigured: true };
+        payoutDetails = {
+            method: "upi",
+            upiId: input.upiId.trim(),
+            isConfigured: false,
+            ...resetVerificationOnChange(),
+        };
     }
     else {
         const { accountNumber, ...bankRest } = input.bankAccount;
@@ -196,13 +234,27 @@ export async function updatePayoutSettings(userId, input) {
             method: "bank_transfer",
             bankAccount: {
                 ...bankRest,
+                ifscCode: bankRest.ifscCode.trim().toUpperCase(),
                 accountNumber,
                 accountNumberMasked: maskAccountNumber(accountNumber),
             },
-            isConfigured: true,
+            isConfigured: false,
+            ...resetVerificationOnChange(),
         };
     }
-    await userRepository.update(userId, { payoutDetails });
+    /*
+     * 🛑 Validated BEFORE the write and THROWN on, not recorded as a flag. A
+     * malformed destination is not a degraded state a seller should be left in
+     * believing it saved — that belief is what `isConfigured: true` created. The
+     * issues carry a dotted path each, so the caller can attach them to the right
+     * field rather than show one banner.
+     */
+    const issues = payoutDestinationIssues(payoutDetails);
+    if (issues.length > 0) {
+        throw new ValidationError(issues.map((issue) => issue.message).join(" "));
+    }
+    payoutDetails.isConfigured = payoutDestinationIsWellFormed(payoutDetails);
+    await sellerProfileRepository.upsertForOwner(userId, { payoutDetails });
     serverLogger.info("updatePayoutSettings: payout details updated", {
         userId,
         method: payoutDetails.method,
@@ -213,8 +265,14 @@ export async function updatePayoutSettings(userId, input) {
     return { payoutDetails: { ...payoutDetails, bankAccount: safeBank } };
 }
 // --- Request Payout -----------------------------------------------------------
-async function computeSellerEarnings(sellerId) {
-    const products = await productRepository.findByStore(sellerId);
+// 🛑 `storeId` is the store's SLUG everywhere else in the codebase
+// (products/orders/payouts all query by it) — `sellerId` here is the
+// seller's Firebase Auth UID, a different id space. Callers must resolve
+// `storeRepository.findByOwnerId(sellerId)` first and pass the real slug;
+// passing the raw UID silently matches zero products/payouts (Root Cause
+// #108 — same identifier confusion in the same field name).
+async function computeSellerEarnings(storeId) {
+    const products = await productRepository.findByStore(storeId);
     const productIds = products.slice(0, 50).map((p) => p.id);
     let deliveredOrders = [];
     if (productIds.length > 0) {
@@ -223,7 +281,7 @@ async function computeSellerEarnings(sellerId) {
             .flat()
             .filter((o) => o.status === OrderStatusValues.DELIVERED);
     }
-    const paidOutIds = await payoutRepository.getPaidOutOrderIds(sellerId);
+    const paidOutIds = await payoutRepository.getPaidOutOrderIds(storeId);
     const eligibleOrders = deliveredOrders.filter((o) => !paidOutIds.has(o.id));
     /*
      * The TAXABLE VALUE — see `orderTaxableValue`. This figure is what the
@@ -290,18 +348,26 @@ async function computeSellerEarnings(sellerId) {
     };
 }
 export async function requestPayout(userId, userName, userEmail, input) {
-    const existing = await payoutRepository.findByStore(userId);
+    // 🛑 Fixed 2026-11-05 — this resolved nothing and every call below ran
+    // against the seller's raw UID instead of the store's slug, which is what
+    // products/orders/payouts are actually keyed by. `computeSellerEarnings`
+    // always found 0 products -> 0 eligible orders -> this threw "No eligible
+    // earnings available for payout." for every real seller, unconditionally.
+    const callerStore = await storeRepository.findByOwnerId(userId);
+    if (!callerStore)
+        throw new AuthorizationError("No store found for this account.");
+    const existing = await payoutRepository.findByStore(callerStore.id);
     const hasPending = existing.some((p) => p.status === PAYOUT_FIELDS.STATUS_VALUES.PENDING ||
         p.status === PAYOUT_FIELDS.STATUS_VALUES.PROCESSING);
     if (hasPending)
         throw new ValidationError("A payout is already pending or processing.");
-    const earnings = await computeSellerEarnings(userId);
+    const earnings = await computeSellerEarnings(callerStore.id);
     if (earnings.netAmount <= 0 || earnings.eligibleOrders.length === 0)
         throw new ValidationError("No eligible earnings available for payout.");
     const payout = await payoutRepository.createPayout({
         /* A seller requesting their own earnings — a liability settlement. */
         payeeType: "store",
-        storeId: userId,
+        storeId: callerStore.id,
         sellerName: userName,
         sellerEmail: userEmail,
         amount: earnings.netAmount,
@@ -337,11 +403,14 @@ export async function bulkSellerOrder(userId, userRole, userDisplayName, userEma
      * encrypts `upiId` again (`PAYOUT_PII_FIELDS`), so the seller-initiated path
      * wrote a permanently unreadable payee address too.
      *
-     * `payoutDetails` is encrypted by `encryptPayoutDetails`, a separate scheme
-     * from the `piiFields` path, which is why `revealUser` unwraps it explicitly.
+     * `payoutDetails` lives on `sellerProfiles` now, encrypted by
+     * `encryptPayoutDetails` there (same scheme as before, moved with the
+     * field) — `revealProfile` unwraps it explicitly, same reasoning as
+     * `UserRepository.revealUser` had.
      */
-    const userPlain = userRepository.revealUser(userDoc);
-    if (!userDoc.payoutDetails?.isConfigured) {
+    const sellerProfileDoc = await sellerProfileRepository.findById(userId);
+    const sellerProfilePlain = sellerProfileDoc ? sellerProfileRepository.revealProfile(sellerProfileDoc) : null;
+    if (!sellerProfilePlain?.payoutDetails?.isConfigured) {
         throw new ValidationError("Payout details are not set up. Please configure your payout method before requesting a payout.");
     }
     // order.storeId is the store slug, not the seller's Firebase UID — resolve
@@ -395,7 +464,16 @@ export async function bulkSellerOrder(userId, userRole, userDisplayName, userEma
     const payoutDoc = await payoutRepository.createPayout({
         /* A seller requesting their own earnings — a liability settlement. */
         payeeType: "store",
-        storeId: userId,
+        // 🛑 Fixed 2026-11-05 — was `storeId: userId` (the UID), even though
+        // `callerStore` is already resolved above and used correctly for the
+        // eligibility check two screens up. Payouts are queried by the store's
+        // SLUG everywhere else (admin dashboard, the automated weekly/auto
+        // sweeps), so a payout written with the UID was invisible to all of
+        // them — not recognized as "already queued," a double-payout risk on
+        // the same orders. Admin callers keep the previous (unaudited) UID
+        // fallback, since `callerStore` is deliberately null for them and this
+        // fix's scope is the seller self-service path, not the admin one.
+        storeId: callerStore?.id ?? userId,
         sellerName: userDisplayName,
         sellerEmail: userEmail,
         orderIds: eligible.map((o) => o.id),
@@ -408,11 +486,11 @@ export async function bulkSellerOrder(userId, userRole, userDisplayName, userEma
         gstAmount: bulkDeduction.gstOnFee,
         gstRate: bulkSiteSettings.commissions.gstPercent / 100,
         currency: getDefaultCurrency(),
-        paymentMethod: userPlain.payoutDetails?.method === "upi"
+        paymentMethod: sellerProfilePlain.payoutDetails?.method === "upi"
             ? "upi"
             : "bank_transfer",
-        upiId: userPlain.payoutDetails?.method === "upi"
-            ? userPlain.payoutDetails.upiId
+        upiId: sellerProfilePlain.payoutDetails?.method === "upi"
+            ? sellerProfilePlain.payoutDetails.upiId
             : undefined,
         /*
          * 🛑 Only the MASKED subset, matching both payout crons.
@@ -425,13 +503,13 @@ export async function bulkSellerOrder(userId, userRole, userDisplayName, userEma
          * revealing it instead would store a real account number in the clear.
          * A payout does not need the full number; it needs to identify the account.
          */
-        bankAccount: userPlain.payoutDetails?.method === "bank_transfer" &&
-            userPlain.payoutDetails.bankAccount
+        bankAccount: sellerProfilePlain.payoutDetails?.method === "bank_transfer" &&
+            sellerProfilePlain.payoutDetails.bankAccount
             ? {
-                accountHolderName: userPlain.payoutDetails.bankAccount.accountHolderName,
-                accountNumberMasked: userPlain.payoutDetails.bankAccount.accountNumberMasked,
-                ifscCode: userPlain.payoutDetails.bankAccount.ifscCode,
-                bankName: userPlain.payoutDetails.bankAccount.bankName,
+                accountHolderName: sellerProfilePlain.payoutDetails.bankAccount.accountHolderName,
+                accountNumberMasked: sellerProfilePlain.payoutDetails.bankAccount.accountNumberMasked,
+                ifscCode: sellerProfilePlain.payoutDetails.bankAccount.ifscCode,
+                bankName: sellerProfilePlain.payoutDetails.bankAccount.bankName,
             }
             : undefined,
         notes: `Payout request for ${eligible.length} custom-shipped delivered order(s)`,
@@ -527,16 +605,16 @@ export async function getSellerStore(userId) {
     return storeRepository.findByOwnerId(userId);
 }
 export async function getSellerShipping(userId) {
-    const userData = await userRepository.findById(userId);
-    if (!userData)
+    const profile = await sellerProfileRepository.findById(userId);
+    if (!profile?.shippingConfig)
         return null;
-    return userData.shippingConfig ?? null;
+    return sellerProfileRepository.revealProfile(profile).shippingConfig ?? null;
 }
 export async function getSellerPayoutSettings(userId) {
-    const userData = await userRepository.findById(userId);
-    if (!userData?.payoutDetails)
+    const profile = await sellerProfileRepository.findById(userId);
+    if (!profile?.payoutDetails)
         return { method: "upi", isConfigured: false };
-    const details = userData.payoutDetails;
+    const details = sellerProfileRepository.revealProfile(profile).payoutDetails;
     if (!details.bankAccount)
         return details;
     const { accountNumber: _removed, ...safeBank } = details.bankAccount;
@@ -612,7 +690,13 @@ export async function getSellerAnalytics(userId) {
     };
 }
 export async function listSellerPayouts(userId, params) {
-    const payouts = await payoutRepository.findByStore(userId);
+    // 🛑 Fixed 2026-11-05 — was `findByStore(userId)`, the seller's raw UID.
+    // It self-consistently showed a payout `bulkSellerOrder` wrote with the
+    // same wrong key (now also fixed), which is exactly what masked the bug:
+    // the one seller who created it could see it, while every automated sweep
+    // and the admin dashboard — both keyed on the real slug — could not.
+    const callerStore = await storeRepository.findByOwnerId(userId);
+    const payouts = callerStore ? await payoutRepository.findByStore(callerStore.id) : [];
     const page = params?.page ?? 1;
     const pageSize = params?.pageSize ?? 20;
     const start = (page - 1) * pageSize;
@@ -673,9 +757,9 @@ export async function sellerUpdateProduct(userId, userRole, productId, input) {
      *
      * 🛑 But it fires only on a CHANGE of type, and that is load-bearing. Every
      * per-type edit page spreads its own literal into the payload
-     * (`store/art/[id]/edit` sends `listingType: "art"`), so gating on the
-     * submitted value alone would lock a seller out of editing listings they
-     * already own the moment the capability was turned off — or an admin revoked
+     * (`store/art/[id]/edit` sends `listingType: "art-and-stickers"`), so gating
+     * on the submitted value alone would lock a seller out of editing listings
+     * they already own the moment the capability was turned off — or an admin revoked
      * it. The rule is "you may not create or convert INTO an advanced type",
      * never "you may not touch one".
      *
@@ -692,10 +776,31 @@ export async function sellerUpdateProduct(userId, userRole, productId, input) {
     if (typeof input.status === "string" &&
         input.status !== "published" &&
         existing.status === "published") {
-        assertPrizeDrawNotLocked(existing, "unpublished or archived");
+        assertClearanceNotLocked(existing, "unpublished or archived");
     }
-    assertPrizeDrawWonItemsImmutable(existing, input.prizeDrawItems);
-    assertAuctionTermsMutable(existing, input);
+    assertClearanceWonItemsImmutable(existing, input.prizeDrawItems);
+    assertCollectorDropTermsMutable(existing, input);
+    /*
+     * 🛑 Validated against the MERGED shape, not the submitted patch.
+     *
+     * An update may send `components` alone and rely on a policy already stored,
+     * or send the policy alone against stored components. Checking the patch by
+     * itself would pass a listing into a state neither half describes — which is
+     * how `components` without a `componentStockPolicy` would get persisted, and
+     * that combination is a money-path hole (see the field's own docstring).
+     *
+     * `in` rather than `??` so an explicit `null` — a seller CLEARING the
+     * components — is honoured instead of falling back to the stored array and
+     * making the field impossible to empty.
+     */
+    assertCompositeShape({
+        components: ("components" in input
+            ? input.components
+            : existing.components) ?? null,
+        componentStockPolicy: ("componentStockPolicy" in input
+            ? input.componentStockPolicy
+            : existing.componentStockPolicy) ?? null,
+    }, productId);
     const finalizedData = await finalizeProductMediaReferences(input);
     const updated = await productRepository.updateProduct(productId, finalizedData);
     serverLogger.info("sellerUpdateProduct", { userId, productId });
@@ -711,7 +816,7 @@ export async function sellerDeleteProduct(userId, userRole, productId) {
         if (!store || existing.storeId !== store.id)
             throw new AuthorizationError("You do not own this product");
     }
-    assertPrizeDrawNotLocked(existing, "deleted");
+    assertClearanceNotLocked(existing, "deleted");
     await productRepository.delete(productId);
     serverLogger.info("sellerDeleteProduct", { userId, productId });
 }
@@ -756,7 +861,21 @@ export async function customShipOrder(userId, userRole, orderId, input) {
         trackingNumber: input.trackingNumber,
         trackingUrl: input.trackingUrl,
         shippingDate: new Date(),
-        payoutStatus: "eligible",
+        /*
+         * 🛑 THE DOUBLE-PAYMENT GUARD. An order whose seller share was settled
+         * straight to them out of the aggregator's escrow at capture
+         * (`order.splitSettlement`) must NOT become payout-eligible: the weekly and
+         * automatic sweeps would then create a `payouts` row for the FULL share and
+         * the seller would be paid twice — once from escrow and once from the
+         * platform's own balance.
+         *
+         * 🛑 `undefined`, not `"requested"`. The field stays ABSENT rather than
+         * being given a status the manual pipeline owns: `getEligibleAutomatic`
+         * filters on `payoutStatus == "eligible"`, so absence keeps it out of every
+         * sweep, while "requested" would claim a payout request nobody made and
+         * `payoutId` would be missing from it.
+         */
+        payoutStatus: orderNeedsManualPayout(order) ? "eligible" : undefined,
     });
     /*
      * 🛑 AFTER the order is marked shipped, and never allowed to fail the

package/dist/features/seller/api/coupons/route.js

@@ -17,7 +17,12 @@ import { getProviders } from "../../../../contracts/index.js";
 import { createRouteHandler } from "../../../../next/api/routeHandler.js";
 import { numParam } from "../../../../utils/search-params.js";
 export const GET = createRouteHandler({
-    roles: ["seller", "admin", "moderator"],
+    /*
+     * 🛑 Was ["seller", "admin", "moderator"]. `moderator` folds to `employee`,
+     * so it admitted every employee to a SELLER surface whose scope is ownership.
+     * Staff reach the same data through the permission-gated admin routes.
+     */
+    roles: ["seller", "admin"],
     handler: async ({ request, user }) => {
         const url = new URL(request.url);
         const page = Math.max(1, numParam(url, "page", 1));

package/dist/features/seller/api/products/route.js

@@ -18,7 +18,12 @@ import { createRouteHandler } from "../../../../next/api/routeHandler.js";
 import { storeRepository } from "../../../stores/repository/store.repository.js";
 import { numParam } from "../../../../utils/search-params.js";
 export const GET = createRouteHandler({
-    roles: ["seller", "admin", "moderator"],
+    /*
+     * 🛑 Was ["seller", "admin", "moderator"]. `moderator` folds to `employee`,
+     * so it admitted every employee to a SELLER surface whose scope is ownership.
+     * Staff reach the same data through the permission-gated admin routes.
+     */
+    roles: ["seller", "admin"],
     handler: async ({ request, user }) => {
         const url = new URL(request.url);
         const page = Math.max(1, numParam(url, "page", 1));

package/dist/features/seller/api/store/route.js

@@ -16,7 +16,12 @@ import { NextResponse } from "next/server.js";
 import { getProviders } from "../../../../contracts/index.js";
 import { createRouteHandler } from "../../../../next/api/routeHandler.js";
 export const GET = createRouteHandler({
-    roles: ["seller", "admin", "moderator"],
+    /*
+     * 🛑 Was ["seller", "admin", "moderator"]. `moderator` folds to `employee`,
+     * so it admitted every employee to a SELLER surface whose scope is ownership.
+     * Staff reach the same data through the permission-gated admin routes.
+     */
+    roles: ["seller", "admin"],
     handler: async ({ user }) => {
         const { db } = getProviders();
         if (!db)

package/dist/features/seller/components/FulfillmentView.d.ts

@@ -1,6 +1,9 @@
 import React from "react";
+import type { DashboardCard } from "../../../_internal/shared/features/dashboard/recent-entry";
 export interface FulfillmentViewProps {
     currentUserId?: string;
     currentUserName?: string;
+    /** Admin-curated page-region cards (Phase 12). Omit for no extra content. */
+    pageRegionCards?: DashboardCard[];
 }
-export declare function FulfillmentView({ currentUserId, }: FulfillmentViewProps): React.JSX.Element;
+export declare function FulfillmentView({ currentUserId, pageRegionCards, }: FulfillmentViewProps): React.JSX.Element;

package/dist/features/seller/components/FulfillmentView.js

@@ -12,6 +12,7 @@ import { normalizeError } from "../../../errors/normalize.js";
 import { useToast } from "../../../ui/components/toast-context.js";
 import { TextLink } from "../../../ui/components/TextLink.js";
 import { ROUTES } from "../../../next/routing/route-map.js";
+import { AdminComposableRegion } from "../../dashboard/components/AdminComposableRegion.js";
 function statusBadgeVariant(status) {
     if (status === "confirmed")
         return "warning";
@@ -21,7 +22,7 @@ function statusBadgeVariant(status) {
         return "success";
     return "default";
 }
-export function FulfillmentView({ currentUserId, }) {
+export function FulfillmentView({ currentUserId, pageRegionCards = [], }) {
     const [mode, setMode] = useState("scan");
     const [orders, setOrders] = useState([]);
     const [scanValue, setScanValue] = useState("");
@@ -114,7 +115,7 @@ export function FulfillmentView({ currentUserId, }) {
     const visibleOrders = filterMine
         ? orders.filter((o) => o.assignedWorkerId === currentUserId)
         : orders;
-    return (_jsxs(Stack, { gap: "md", padding: "md", children: [_jsxs(Row, { align: "center", justify: "between", gap: "sm", wrap: true, children: [_jsx(Heading, { level: 3, children: "Pick & Pack" }), _jsxs(Row, { gap: "xs", children: [_jsx(Button, { onClick: () => setMode("scan"), variant: mode === "scan" ? "primary" : "secondary", size: "sm", children: "Scan Mode" }), _jsx(Button, { onClick: () => setMode("list"), variant: mode === "list" ? "primary" : "secondary", size: "sm", children: "List Mode" })] })] }), mode === "scan" && (_jsxs(Stack, { gap: "md", children: [_jsx(BarcodeField, { autoFocus: true, value: scanValue, onChange: setScanValue, onScan: handleScan, helperText: "Point scanner at an item sticker or type the barcode and press Enter." }), scanError && (_jsx(Text, { color: "error", size: "sm", children: scanError })), scanResult && (_jsxs(Stack, { surface: "card", padding: "md", rounded: "md", gap: "sm", children: [_jsx(Text, { size: "xs", color: "muted", children: "Scanned item" }), _jsx(Heading, { level: 5, children: scanResult.product.title ?? scanResult.product.id }), _jsxs(Row, { gap: "md", wrap: true, children: [_jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "xs", color: "muted", children: "Order" }), _jsxs(Text, { size: "sm", weight: "medium", children: ["#", scanResult.order.id] })] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "xs", color: "muted", children: "Buyer" }), _jsx(Text, { size: "sm", weight: "medium", children: scanResult.order.userName })] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "xs", color: "muted", children: "Status" }), _jsx(Badge, { variant: statusBadgeVariant(scanResult.order.status), children: scanResult.order.status })] })] }), _jsxs(Row, { gap: "xs", children: [_jsx(Button, { variant: "primary", onClick: confirmPick, isLoading: isConfirming, children: "Confirm Pick" }), _jsx(Button, { variant: "secondary", onClick: () => {
+    return (_jsxs(Stack, { gap: "md", padding: "md", children: [_jsxs(Row, { align: "center", justify: "between", gap: "sm", wrap: true, children: [_jsx(Heading, { level: 3, children: "Pick & Pack" }), _jsxs(Row, { gap: "xs", children: [_jsx(Button, { onClick: () => setMode("scan"), variant: mode === "scan" ? "primary" : "secondary", size: "sm", children: "Scan Mode" }), _jsx(Button, { onClick: () => setMode("list"), variant: mode === "list" ? "primary" : "secondary", size: "sm", children: "List Mode" })] })] }), _jsx(AdminComposableRegion, { pageId: "store-fulfillment", initialCards: pageRegionCards }), mode === "scan" && (_jsxs(Stack, { gap: "md", children: [_jsx(BarcodeField, { autoFocus: true, value: scanValue, onChange: setScanValue, onScan: handleScan, helperText: "Point scanner at an item sticker or type the barcode and press Enter." }), scanError && (_jsx(Text, { color: "error", size: "sm", children: scanError })), scanResult && (_jsxs(Stack, { surface: "card", padding: "md", rounded: "md", gap: "sm", children: [_jsx(Text, { size: "xs", color: "muted", children: "Scanned item" }), _jsx(Heading, { level: 5, children: scanResult.product.title ?? scanResult.product.id }), _jsxs(Row, { gap: "md", wrap: true, children: [_jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "xs", color: "muted", children: "Order" }), _jsxs(Text, { size: "sm", weight: "medium", children: ["#", scanResult.order.id] })] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "xs", color: "muted", children: "Buyer" }), _jsx(Text, { size: "sm", weight: "medium", children: scanResult.order.userName })] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "xs", color: "muted", children: "Status" }), _jsx(Badge, { variant: statusBadgeVariant(scanResult.order.status), children: scanResult.order.status })] })] }), _jsxs(Row, { gap: "xs", children: [_jsx(Button, { variant: "primary", onClick: confirmPick, isLoading: isConfirming, children: "Confirm Pick" }), _jsx(Button, { variant: "secondary", onClick: () => {
                                             setScanResult(null);
                                             setScanValue("");
                                             setScanError(null);

package/dist/features/seller/components/PrintCenterView.d.ts

@@ -1,5 +1,6 @@
 import React from "react";
 import { type PhysicalLocationParts } from "../../../utils/physical-location";
+import type { DashboardCard } from "../../../_internal/shared/features/dashboard/recent-entry";
 interface PrintCenterStore {
     id: string;
     storeName: string;
@@ -44,6 +45,8 @@ interface PrintCenterViewProps {
     brandName?: string;
     initialProducts?: PrintCenterProduct[];
     initialOrders?: PrintCenterOrder[];
+    /** Admin-curated page-region cards (Phase 12). Omit for no extra content. */
+    pageRegionCards?: DashboardCard[];
 }
-export declare function PrintCenterView({ store, brandName, initialProducts, initialOrders, }: PrintCenterViewProps): React.JSX.Element;
+export declare function PrintCenterView({ store, isAdmin, brandName, initialProducts, initialOrders, pageRegionCards, }: PrintCenterViewProps): React.JSX.Element;
 export {};