@mohasinac/appkit 4.71.0 → 4.71.2

package/dist/features/seller/components/SellerSparesView.js

@@ -1,6 +1,7 @@
 "use client";
-import { jsx as _jsx } from "react/jsx-runtime";
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
 import { SellerListingTypeView, } from "./SellerListingTypeView.js";
-export function SellerSparesView(props) {
-    return _jsx(SellerListingTypeView, { type: "spares", ...props });
+import { AdminComposableRegion } from "../../dashboard/components/AdminComposableRegion.js";
+export function SellerSparesView({ pageRegionCards = [], ...props }) {
+    return (_jsxs(_Fragment, { children: [_jsx(SellerListingTypeView, { type: "spares", ...props }), _jsx(AdminComposableRegion, { pageId: "store-spares", initialCards: pageRegionCards })] }));
 }

package/dist/features/seller/components/SellerStoreCategoriesView.d.ts

@@ -1,4 +1,5 @@
 import React from "react";
+import type { DashboardCard } from "../../../_internal/shared/features/dashboard/recent-entry";
 export interface SellerStoreCategoriesViewProps {
     onCreateClick?: () => void;
     onEditClick?: (id: string) => void;
@@ -6,5 +7,7 @@ export interface SellerStoreCategoriesViewProps {
     onBulkDelete?: (ids: string[]) => Promise<void>;
     onBulkActivate?: (ids: string[]) => Promise<void>;
     onBulkDeactivate?: (ids: string[]) => Promise<void>;
+    /** Admin-curated page-region cards (Phase 12). Omit for no extra content. */
+    pageRegionCards?: DashboardCard[];
 }
-export declare function SellerStoreCategoriesView({ onCreateClick, onEditClick, onDelete, onBulkDelete, onBulkActivate, onBulkDeactivate, }: SellerStoreCategoriesViewProps): React.JSX.Element;
+export declare function SellerStoreCategoriesView({ onCreateClick, onEditClick, onDelete, onBulkDelete, onBulkActivate, onBulkDeactivate, pageRegionCards, }: SellerStoreCategoriesViewProps): React.JSX.Element;

package/dist/features/seller/components/SellerStoreCategoriesView.js

@@ -18,6 +18,7 @@ import { toRecordArray, toStringValue } from "../hooks/useSellerListingData.js";
 import { useOptimisticRowFlag } from "../../admin/hooks/useOptimisticRowFlag.js";
 import { apiClient } from "../../../http/index.js";
 import { DataListingView } from "../../admin/components/DataListingView.js";
+import { AdminComposableRegion } from "../../dashboard/components/AdminComposableRegion.js";
 const DEFAULT_SORT = "displayOrder";
 const SORT_OPTIONS = [
     { value: sortBy("displayOrder", "ASC"), label: "Display Order" },
@@ -42,7 +43,7 @@ const COLUMNS = [
         render: (row) => (_jsx(Badge, { variant: row.isActive ? "active" : "inactive", size: "xs", children: row.isActive ? "Active" : "Hidden" })),
     },
 ];
-export function SellerStoreCategoriesView({ onCreateClick, onEditClick, onDelete, onBulkDelete, onBulkActivate, onBulkDeactivate, }) {
+export function SellerStoreCategoriesView({ onCreateClick, onEditClick, onDelete, onBulkDelete, onBulkActivate, onBulkDeactivate, pageRegionCards = [], }) {
     /*
      * 🛑 `isActive` was a READ-ONLY badge here, and the update schema was built
      * to take it on its own — shipping-config's even says so in a comment: "a
@@ -143,5 +144,5 @@ export function SellerStoreCategoriesView({ onCreateClick, onEditClick, onDelete
                     }] : []),
             ] })),
     };
-    return (_jsxs(_Fragment, { children: [_jsx(DataListingView, { config: config }), deleteTargetId && (_jsx(ConfirmDeleteModal, { isOpen: true, title: "Delete Category", message: "Are you sure you want to delete this category? This cannot be undone.", onConfirm: () => handleDelete(deleteTargetId), onClose: () => setDeleteTargetId(null), isDeleting: deletingId === deleteTargetId }))] }));
+    return (_jsxs(_Fragment, { children: [_jsx(DataListingView, { config: config }), _jsx(AdminComposableRegion, { pageId: "store-categories", initialCards: pageRegionCards }), deleteTargetId && (_jsx(ConfirmDeleteModal, { isOpen: true, title: "Delete Category", message: "Are you sure you want to delete this category? This cannot be undone.", onConfirm: () => handleDelete(deleteTargetId), onClose: () => setDeleteTargetId(null), isDeleting: deletingId === deleteTargetId }))] }));
 }

package/dist/features/seller/components/SellerStorefrontView.d.ts

@@ -1,3 +1,4 @@
+import type { DashboardCard } from "../../../_internal/shared/features/dashboard/recent-entry";
 export interface StorefrontSaveResult {
     ok: boolean;
     error?: string;
@@ -29,5 +30,7 @@ export interface SellerStorefrontViewProps {
     onSave: (data: StorefrontDraft) => Promise<StorefrontSaveResult>;
     isLoading?: boolean;
     storeSlug?: string;
+    /** Admin-curated page-region cards (Phase 12). Omit for no extra content. */
+    pageRegionCards?: DashboardCard[];
 }
-export declare function SellerStorefrontView({ initialValues, onSave, isLoading, storeSlug, }: SellerStorefrontViewProps): import("react").JSX.Element;
+export declare function SellerStorefrontView({ initialValues, onSave, isLoading, storeSlug, pageRegionCards, }: SellerStorefrontViewProps): import("react").JSX.Element;

package/dist/features/seller/components/SellerStorefrontView.js

@@ -1,5 +1,5 @@
 "use client";
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { useCallback, useEffect, useState } from "react";
 import { z } from "zod";
 import { StackedViewShell } from "../../../ui/components/StackedViewShell.js";
@@ -7,6 +7,7 @@ import { Alert, Div, FormField, FormGroup, Heading, Stack, Text, Toggle, } from
 import { FormShellContext, useFormShellState, applyZodIssues, FormErrorSummary } from "../../../ui/forms/index.js";
 import { ImageUpload, useMediaUpload } from "../../media/index.js";
 import { SectionForm, useSectionFormNav, useFormShell } from "../../shell/index.js";
+import { AdminComposableRegion } from "../../dashboard/components/AdminComposableRegion.js";
 // Small local schema for the storefront form-input shape (not the broader
 // `sellerStoreSchema`, which requires id/storeSlug/ownerId/status/createdAt —
 // fields this editable draft never has, so applying it directly would show
@@ -19,7 +20,7 @@ const storefrontDraftSchema = z.object({
     website: z.string().url("Enter a valid URL").optional().or(z.literal("")),
     vacationMessage: z.string().max(300).optional().or(z.literal("")),
 }).passthrough();
-export function SellerStorefrontView({ initialValues, onSave, isLoading = false, storeSlug = "store", }) {
+export function SellerStorefrontView({ initialValues, onSave, isLoading = false, storeSlug = "store", pageRegionCards = [], }) {
     const [draft, setDraft] = useState(initialValues ?? {});
     const [saving, setSaving] = useState(false);
     const [saved, setSaved] = useState(false);
@@ -87,7 +88,7 @@ export function SellerStorefrontView({ initialValues, onSave, isLoading = false,
     useEffect(() => {
         validate(draft);
     }, [draft, validate]);
-    return (_jsx(StackedViewShell, { portal: "seller", title: "Storefront Settings", sections: [
-            _jsxs(Div, { children: [saved && (_jsx(Alert, { variant: "success", className: "mb-6", children: "Changes saved successfully." })), _jsxs(FormShellContext.Provider, { value: shellCtx, children: [_jsx(FormErrorSummary, {}), _jsx(SectionForm, { sections: sections, values: draft, onChange: update, onSubmit: handleSave, schema: storefrontDraftSchema, openIds: openIds, onOpenChange: setOpenIds, submitLabel: "Save Storefront", isLoading: busy })] })] }, "stepform"),
-        ] }));
+    return (_jsxs(_Fragment, { children: [_jsx(AdminComposableRegion, { pageId: "store-storefront", initialCards: pageRegionCards }), _jsx(StackedViewShell, { portal: "seller", title: "Storefront Settings", sections: [
+                    _jsxs(Div, { children: [saved && (_jsx(Alert, { variant: "success", className: "mb-6", children: "Changes saved successfully." })), _jsxs(FormShellContext.Provider, { value: shellCtx, children: [_jsx(FormErrorSummary, {}), _jsx(SectionForm, { sections: sections, values: draft, onChange: update, onSubmit: handleSave, schema: storefrontDraftSchema, openIds: openIds, onOpenChange: setOpenIds, submitLabel: "Save Storefront", isLoading: busy })] })] }, "stepform"),
+                ] })] }));
 }

package/dist/features/seller/components/SellerSupportView.d.ts

@@ -23,9 +23,12 @@
  */
 import React from "react";
 import type { StackedViewShellProps } from "../../../ui/components/StackedViewShell";
+import type { DashboardCard } from "../../../_internal/shared/features/dashboard/recent-entry";
 export interface SellerSupportViewProps extends Omit<StackedViewShellProps, "sections"> {
     labels?: {
         title?: string;
     };
+    /** Admin-curated page-region cards (Phase 12). Omit for no extra content. */
+    pageRegionCards?: DashboardCard[];
 }
-export declare function SellerSupportView({ labels }: SellerSupportViewProps): React.JSX.Element;
+export declare function SellerSupportView({ labels, pageRegionCards }: SellerSupportViewProps): React.JSX.Element;

package/dist/features/seller/components/SellerSupportView.js

@@ -35,6 +35,7 @@ import { SELLER_ENDPOINTS } from "../../../constants/api-endpoints.js";
 import { SUPPORT_TICKET_FIELDS } from "../../../constants/field-names.js";
 import { sieveFilter, SIEVE_OP } from "../../../utils/sieve-builder.js";
 import { toRelativeDate, toStringValue } from "../../admin/hooks/useAdminListingData.js";
+import { AdminComposableRegion } from "../../dashboard/components/AdminComposableRegion.js";
 /** Status → badge tone. Mirrors `TicketStatusValues`. */
 const STATUS_VARIANT = {
     open: "info",
@@ -93,7 +94,7 @@ function SellerSupportTicketModal({ ticketId, onClose, }) {
             }
             : undefined }));
 }
-export function SellerSupportView({ labels = {} }) {
+export function SellerSupportView({ labels = {}, pageRegionCards = [] }) {
     const [detailId, setDetailId] = React.useState(null);
     const mapRows = React.useCallback((response) => {
         const items = Array.isArray(response?.items) ? response.items : [];
@@ -109,7 +110,7 @@ export function SellerSupportView({ labels = {} }) {
             };
         });
     }, []);
-    return (_jsxs(Stack, { gap: "md", children: [_jsx(DataListingView, { config: {
+    return (_jsxs(Stack, { gap: "md", children: [_jsx(AdminComposableRegion, { pageId: "store-support", initialCards: pageRegionCards }), _jsx(DataListingView, { config: {
                     portal: "seller",
                     title: labels.title ?? "Support",
                     subtitle: "Tickets buyers and staff have raised about your store.",

package/dist/features/seller/components/analytics/SellerAnalyticsStats.d.ts

@@ -3,7 +3,14 @@ import type { SellerAnalyticsSummary } from "../../types";
 /**
  * W1-32 — SellerAnalyticsStats now composes AdminStatCard (the only live
  * stat-card primitive after W1-30) instead of redefining its own inline
- * StatCard. Same gradient presets, same visual identity.
+ * StatCard.
+ *
+ * 🛑 No per-card `gradient` prop (removed 2026-11-05, owner's direct
+ * correction) — 4 differently-colored cards in one row read as a rainbow
+ * strip, not a dashboard. `AdminStatCard` now has one restrained,
+ * theme-safe icon treatment for every card; icons here inherit it via
+ * `currentColor` rather than hardcoding `text-white` for a gradient
+ * background that no longer exists.
  */
 export interface SellerAnalyticsStatsLabels {
     totalRevenue?: string;

package/dist/features/seller/components/analytics/SellerAnalyticsStats.js

@@ -4,5 +4,5 @@ import { TrendingUp, ShoppingBag, Package, CheckCircle } from "lucide-react";
 import { Div } from "../../../../ui/components/Div.js";
 import { AdminStatCard } from "../../../admin/components/analytics/AdminStatCard.js";
 export function SellerAnalyticsStats({ summary, labels = {}, formatRevenue = (amount) => String(amount), className = "", }) {
-    return (_jsxs(Div, { layout: "grid", gap: "4", className: `grid-cols-1 sm:grid-cols-2 xl:grid-cols-4 ${className}`, children: [_jsx(AdminStatCard, { label: labels.totalRevenue ?? "Total Revenue", value: formatRevenue(summary.totalRevenue), gradient: "green", icon: _jsx(TrendingUp, { className: "w-5 h-5 text-white" }) }), _jsx(AdminStatCard, { label: labels.totalOrders ?? "Total Orders", value: String(summary.totalOrders), gradient: "brand", icon: _jsx(ShoppingBag, { className: "w-5 h-5 text-white" }) }), _jsx(AdminStatCard, { label: labels.totalProducts ?? "Total Products", value: String(summary.totalProducts), gradient: "amber", icon: _jsx(Package, { className: "w-5 h-5 text-white" }) }), _jsx(AdminStatCard, { label: labels.publishedProducts ?? "Published", value: String(summary.publishedProducts), gradient: "blue", icon: _jsx(CheckCircle, { className: "w-5 h-5 text-white" }) })] }));
+    return (_jsxs(Div, { layout: "grid", gap: "4", className: `grid-cols-1 sm:grid-cols-2 xl:grid-cols-4 ${className}`, children: [_jsx(AdminStatCard, { label: labels.totalRevenue ?? "Total Revenue", value: formatRevenue(summary.totalRevenue), icon: _jsx(TrendingUp, { className: "w-5 h-5" }) }), _jsx(AdminStatCard, { label: labels.totalOrders ?? "Total Orders", value: String(summary.totalOrders), icon: _jsx(ShoppingBag, { className: "w-5 h-5" }) }), _jsx(AdminStatCard, { label: labels.totalProducts ?? "Total Products", value: String(summary.totalProducts), icon: _jsx(Package, { className: "w-5 h-5" }) }), _jsx(AdminStatCard, { label: labels.publishedProducts ?? "Published", value: String(summary.publishedProducts), icon: _jsx(CheckCircle, { className: "w-5 h-5" }) })] }));
 }

package/dist/features/seller/components/index.d.ts

@@ -111,10 +111,8 @@ export { SellerBundlesView } from "./SellerBundlesView";
 export type { SellerBundlesViewProps } from "./SellerBundlesView";
 export { SellerClassifiedView } from "./SellerClassifiedView";
 export type { SellerClassifiedViewProps } from "./SellerClassifiedView";
-export { SellerArtView } from "./SellerArtView";
-export type { SellerArtViewProps } from "./SellerArtView";
-export { SellerStickersView } from "./SellerStickersView";
-export type { SellerStickersViewProps } from "./SellerStickersView";
+export { SellerArtAndStickersView } from "./SellerArtAndStickersView";
+export type { SellerArtAndStickersViewProps } from "./SellerArtAndStickersView";
 export { SellerSparesView } from "./SellerSparesView";
 export type { SellerSparesViewProps } from "./SellerSparesView";
 export { SellerDigitalCodesView } from "./SellerDigitalCodesView";

package/dist/features/seller/components/index.js

@@ -59,8 +59,7 @@ export { SellerShippingConfigsView } from "./SellerShippingConfigsView.js";
 export { SellerGoogleReviewsView } from "./SellerGoogleReviewsView.js";
 export { SellerBundlesView } from "./SellerBundlesView.js";
 export { SellerClassifiedView } from "./SellerClassifiedView.js";
-export { SellerArtView } from "./SellerArtView.js";
-export { SellerStickersView } from "./SellerStickersView.js";
+export { SellerArtAndStickersView } from "./SellerArtAndStickersView.js";
 export { SellerSparesView } from "./SellerSparesView.js";
 export { SellerDigitalCodesView } from "./SellerDigitalCodesView.js";
 export { SellerLiveView } from "./SellerLiveView.js";

package/dist/features/seller/constants/store-tabs.d.ts

@@ -28,6 +28,10 @@ export type PayoutsTabId = (typeof PAYOUTS_TABS)[number]["id"];
 export declare function isPayoutsTabId(value: string | null | undefined): value is PayoutsTabId;
 /** Shipping defaults, plus the reusable named presets built on top of them. */
 export declare const SHIPPING_TABS: readonly [{
+    readonly id: "options";
+    readonly label: "Shipping options";
+    readonly description: "Which methods you offer, and what your own shipping costs.";
+}, {
     readonly id: "rates";
     readonly label: "Rates & zones";
     readonly description: "What you charge to ship, and where you ship to.";

package/dist/features/seller/constants/store-tabs.js

@@ -36,6 +36,18 @@ export function isPayoutsTabId(value) {
 }
 /** Shipping defaults, plus the reusable named presets built on top of them. */
 export const SHIPPING_TABS = [
+    /*
+     * 🛑 FIRST, and deliberately ahead of "Rates & zones". This is the tab that
+     * writes `StoreDocument.shippingPricing` — the field the CHECKOUT reads to
+     * decide what a buyer is charged. "Rates & zones" writes
+     * `sellerProfiles.shippingConfig`, the legacy flat number `mode.ts` calls an
+     * accident, which the money path consults only as a fallback for a store
+     * that has never saved a real policy.
+     *
+     * Ordering is the only signal a seller gets about which of the two actually
+     * governs their money, so the governing one is where their eye lands.
+     */
+    { id: "options", label: "Shipping options", description: "Which methods you offer, and what your own shipping costs." },
     { id: "rates", label: "Rates & zones", description: "What you charge to ship, and where you ship to." },
     { id: "configs", label: "Named configs", description: "Named shipping rules you can reuse per listing." },
 ];

package/dist/features/seller/hooks/useSellerStorefront.js

@@ -1,6 +1,7 @@
 import { useQuery } from "@tanstack/react-query";
 import { apiClient } from "../../../http/index.js";
 import { ACCOUNT_ENDPOINTS, PROFILE_STATS_ENDPOINTS, } from "../../../constants/api-endpoints.js";
+import { isSellerUser, isAdminUser } from "../../auth/role-predicates.js";
 export function useSellerStorefront(sellerId, options) {
     const profileEndpoint = options?.profileEndpoint ?? ACCOUNT_ENDPOINTS.SELLER_PROFILE(sellerId);
     const productsEndpoint = options?.productsEndpoint ?? PROFILE_STATS_ENDPOINTS.PRODUCTS(sellerId);
@@ -17,7 +18,23 @@ export function useSellerStorefront(sellerId, options) {
     });
     const seller = sellerData?.user;
     const fetchErrorMsg = fetchError?.message ?? null;
-    const notSellerError = seller && seller.role !== "seller" && seller.role !== "admin"
+    /*
+     * ── Is this profile a storefront at all? (1.44) ──────────────────────────
+     *
+     * 🛑 Was `seller.role !== "seller" && seller.role !== "admin"`, reading a
+     * single scalar off the PUBLIC profile payload. Two real failures:
+     *
+     *   1. A seller who also holds `employee` resolved to the higher-ranked
+     *      scalar, so `!== "seller"` was true and their live store page 404'd.
+     *   2. A `tester` owns a real auto-approved store (that is the whole point of
+     *      `isSellerUser` admitting testers) and was 404'd outright.
+     *
+     * `isSellerUser` reads the role SET and includes testers; admin is kept
+     * explicit because admin sees everything, everywhere. `USER_PUBLIC_FIELDS`
+     * now projects `roles`, so the set is actually present in this payload —
+     * without that projection this would have silently fallen back to the scalar.
+     */
+    const notSellerError = seller && !isSellerUser(seller) && !isAdminUser(seller)
         ? "notFound"
         : null;
     const profileError = fetchErrorMsg ?? notSellerError;

package/dist/features/seller/repository/seller-profile.repository.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Seller Profile Repository
+ *
+ * Data access for the `sellerProfiles` Firestore collection — a sidecar to
+ * `users/{uid}`, keyed on the same Firebase Auth UID. See
+ * `seller-profile-firestore.ts` for the full rationale.
+ */
+import { BaseRepository } from "../../../providers/db-firebase";
+import { SellerProfileDocument, SellerProfileCreateInput, SellerProfileUpdateInput } from "../schemas/seller-profile-firestore";
+export declare class SellerProfileRepository extends BaseRepository<SellerProfileDocument> {
+    constructor();
+    protected applyWriteHooks<D extends object>(data: D): D;
+    /** Plaintext PII. Opt-in and named — for the account's own settings page,
+     * the payout run, and anywhere the real value is genuinely needed. */
+    revealProfile(doc: SellerProfileDocument): SellerProfileDocument;
+    /** Masked PII — the default for any admin-facing read. */
+    maskedProfile(doc: SellerProfileDocument): SellerProfileDocument;
+    /** As `UserRepository.maskNested` — field list derived from the decrypted
+     * object itself, never hand-duplicated (Root Cause #42). */
+    private maskNested;
+    /**
+     * Create-or-update by owner UID, which is always this collection's
+     * document id. Uses `set(..., { merge: true })` rather than
+     * `createWithId`/`update` — those two require the caller to already know
+     * whether a row exists, and every real call site here (`becomeSeller`,
+     * `createStore`, `updatePayoutSettings`, the backfill script) is
+     * naturally idempotent instead: "this account now has/updates this
+     * seller data," regardless of whether it had any before.
+     */
+    upsertForOwner(uid: string, data: Omit<SellerProfileCreateInput, "uid"> | SellerProfileUpdateInput): Promise<SellerProfileDocument>;
+}
+export declare const sellerProfileRepository: SellerProfileRepository;

package/dist/features/seller/repository/seller-profile.repository.js

@@ -0,0 +1,98 @@
+/**
+ * Seller Profile Repository
+ *
+ * Data access for the `sellerProfiles` Firestore collection — a sidecar to
+ * `users/{uid}`, keyed on the same Firebase Auth UID. See
+ * `seller-profile-firestore.ts` for the full rationale.
+ */
+import { BaseRepository, prepareForFirestore } from "../../../providers/db-firebase/index.js";
+import { DatabaseError } from "../../../errors/index.js";
+import { normalizeError } from "../../../errors/normalize.js";
+import { decryptPayoutDetails, decryptShippingConfig, encryptPayoutDetails, encryptShippingConfig, maskPii, } from "../../../security/index.js";
+import { SELLER_PROFILE_COLLECTION, } from "../schemas/seller-profile-firestore.js";
+export class SellerProfileRepository extends BaseRepository {
+    constructor() {
+        super(SELLER_PROFILE_COLLECTION);
+    }
+    /*
+     * 🛑 `payoutDetails`/`shippingConfig` carry real PII (bank account numbers,
+     * UPI ids, pickup addresses) and were encrypted on `UserDocument` via
+     * `UserRepository`'s own `applyWriteHooks` override. Moving the FIELDS to
+     * this collection without moving the ENCRYPTION would be a real security
+     * regression — plaintext bank details at rest. Same two functions, same
+     * call shape, just on this repository instead.
+     *
+     * `mapDoc` is deliberately NOT overridden to decrypt — ciphertext-by-
+     * default, matching `StoreRepository`'s own stated convention. Plaintext
+     * is `revealProfile`, named and greppable; masked is `maskedProfile`, the
+     * default for anything admin-facing.
+     */
+    applyWriteHooks(data) {
+        const out = super.applyWriteHooks(data);
+        const access = out;
+        if (access.payoutDetails)
+            access.payoutDetails = encryptPayoutDetails(access.payoutDetails);
+        if (access.shippingConfig)
+            access.shippingConfig = encryptShippingConfig(access.shippingConfig);
+        return out;
+    }
+    /** Plaintext PII. Opt-in and named — for the account's own settings page,
+     * the payout run, and anywhere the real value is genuinely needed. */
+    revealProfile(doc) {
+        const revealed = { ...doc };
+        if (revealed.payoutDetails) {
+            revealed.payoutDetails = decryptPayoutDetails(revealed.payoutDetails);
+        }
+        if (revealed.shippingConfig) {
+            revealed.shippingConfig = decryptShippingConfig(revealed.shippingConfig);
+        }
+        return revealed;
+    }
+    /** Masked PII — the default for any admin-facing read. */
+    maskedProfile(doc) {
+        const masked = this.revealProfile(doc);
+        if (masked.payoutDetails)
+            masked.payoutDetails = this.maskNested(masked.payoutDetails);
+        if (masked.shippingConfig)
+            masked.shippingConfig = this.maskNested(masked.shippingConfig);
+        return masked;
+    }
+    /** As `UserRepository.maskNested` — field list derived from the decrypted
+     * object itself, never hand-duplicated (Root Cause #42). */
+    maskNested(value) {
+        if (!value)
+            return undefined;
+        return maskPii(value, Object.entries(value)
+            .filter(([, v]) => typeof v === "string")
+            .map(([k]) => k));
+    }
+    /**
+     * Create-or-update by owner UID, which is always this collection's
+     * document id. Uses `set(..., { merge: true })` rather than
+     * `createWithId`/`update` — those two require the caller to already know
+     * whether a row exists, and every real call site here (`becomeSeller`,
+     * `createStore`, `updatePayoutSettings`, the backfill script) is
+     * naturally idempotent instead: "this account now has/updates this
+     * seller data," regardless of whether it had any before.
+     */
+    async upsertForOwner(uid, data) {
+        try {
+            const now = new Date();
+            const existing = await this.getCollection().doc(uid).get();
+            const cleanData = prepareForFirestore({
+                ...this.applyWriteHooks(data),
+                uid,
+                ...(existing.exists ? {} : { createdAt: now }),
+                updatedAt: now,
+            });
+            await this.getCollection().doc(uid).set(cleanData, { merge: true });
+            const doc = await this.getCollection().doc(uid).get();
+            return this.mapDoc(doc);
+        }
+        catch (error) {
+            void normalizeError(error);
+            throw new DatabaseError(`Failed to upsert seller profile for uid: ${uid}: ${String(error)}`, error);
+        }
+    }
+}
+export const sellerProfileRepository = new SellerProfileRepository();

package/dist/features/seller/schemas/coupon-form.d.ts

@@ -27,7 +27,7 @@ export declare const couponFormBase: z.ZodObject<{
     applicableCategories: z.ZodArray<z.ZodString, "many">;
 }, "strip", z.ZodTypeAny, {
     code: string;
-    type: "percentage" | "fixed" | "free_shipping";
+    type: "fixed" | "percentage" | "free_shipping";
     isActive: boolean;
     endDate: string;
     startDate: string;
@@ -40,7 +40,7 @@ export declare const couponFormBase: z.ZodObject<{
     maxDiscount?: string | undefined;
 }, {
     code: string;
-    type: "percentage" | "fixed" | "free_shipping";
+    type: "fixed" | "percentage" | "free_shipping";
     isActive: boolean;
     endDate: string;
     startDate: string;
@@ -80,7 +80,7 @@ export declare const sellerCouponFormSchema: z.ZodEffects<z.ZodObject<{
     applicableCategories: z.ZodArray<z.ZodString, "many">;
 }, "strip", z.ZodTypeAny, {
     code: string;
-    type: "percentage" | "fixed" | "free_shipping";
+    type: "fixed" | "percentage" | "free_shipping";
     isActive: boolean;
     endDate: string;
     startDate: string;
@@ -93,7 +93,7 @@ export declare const sellerCouponFormSchema: z.ZodEffects<z.ZodObject<{
     maxDiscount?: string | undefined;
 }, {
     code: string;
-    type: "percentage" | "fixed" | "free_shipping";
+    type: "fixed" | "percentage" | "free_shipping";
     isActive: boolean;
     endDate: string;
     startDate: string;
@@ -106,7 +106,7 @@ export declare const sellerCouponFormSchema: z.ZodEffects<z.ZodObject<{
     maxDiscount?: string | undefined;
 }>, {
     code: string;
-    type: "percentage" | "fixed" | "free_shipping";
+    type: "fixed" | "percentage" | "free_shipping";
     isActive: boolean;
     endDate: string;
     startDate: string;
@@ -119,7 +119,7 @@ export declare const sellerCouponFormSchema: z.ZodEffects<z.ZodObject<{
     maxDiscount?: string | undefined;
 }, {
     code: string;
-    type: "percentage" | "fixed" | "free_shipping";
+    type: "fixed" | "percentage" | "free_shipping";
     isActive: boolean;
     endDate: string;
     startDate: string;
@@ -212,10 +212,10 @@ export declare const adminCouponFormSchema: z.ZodEffects<z.ZodObject<{
         minAmount: number;
     }>, "many">>;
     firstTimeUserOnly: z.ZodBoolean;
-    appliesToAuctions: z.ZodBoolean;
+    appliesToCollectorDrops: z.ZodBoolean;
 }, "strip", z.ZodTypeAny, {
     code: string;
-    type: "percentage" | "fixed" | "free_shipping" | "buy_x_get_y";
+    type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
     isActive: boolean;
     name: string;
     endDate: string;
@@ -226,7 +226,7 @@ export declare const adminCouponFormSchema: z.ZodEffects<z.ZodObject<{
     applicableCategories: string[];
     totalLimit: string;
     perUserLimit: string;
-    appliesToAuctions: boolean;
+    appliesToCollectorDrops: boolean;
     value?: string | undefined;
     description?: string | undefined;
     tiers?: {
@@ -240,7 +240,7 @@ export declare const adminCouponFormSchema: z.ZodEffects<z.ZodObject<{
     getQuantity?: string | undefined;
 }, {
     code: string;
-    type: "percentage" | "fixed" | "free_shipping" | "buy_x_get_y";
+    type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
     isActive: boolean;
     name: string;
     endDate: string;
@@ -251,7 +251,7 @@ export declare const adminCouponFormSchema: z.ZodEffects<z.ZodObject<{
     applicableCategories: string[];
     totalLimit: string;
     perUserLimit: string;
-    appliesToAuctions: boolean;
+    appliesToCollectorDrops: boolean;
     value?: string | undefined;
     description?: string | undefined;
     tiers?: {
@@ -265,7 +265,7 @@ export declare const adminCouponFormSchema: z.ZodEffects<z.ZodObject<{
     getQuantity?: string | undefined;
 }>, {
     code: string;
-    type: "percentage" | "fixed" | "free_shipping" | "buy_x_get_y";
+    type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
     isActive: boolean;
     name: string;
     endDate: string;
@@ -276,7 +276,7 @@ export declare const adminCouponFormSchema: z.ZodEffects<z.ZodObject<{
     applicableCategories: string[];
     totalLimit: string;
     perUserLimit: string;
-    appliesToAuctions: boolean;
+    appliesToCollectorDrops: boolean;
     value?: string | undefined;
     description?: string | undefined;
     tiers?: {
@@ -290,7 +290,7 @@ export declare const adminCouponFormSchema: z.ZodEffects<z.ZodObject<{
     getQuantity?: string | undefined;
 }, {
     code: string;
-    type: "percentage" | "fixed" | "free_shipping" | "buy_x_get_y";
+    type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
     isActive: boolean;
     name: string;
     endDate: string;
@@ -301,7 +301,7 @@ export declare const adminCouponFormSchema: z.ZodEffects<z.ZodObject<{
     applicableCategories: string[];
     totalLimit: string;
     perUserLimit: string;
-    appliesToAuctions: boolean;
+    appliesToCollectorDrops: boolean;
     value?: string | undefined;
     description?: string | undefined;
     tiers?: {

package/dist/features/seller/schemas/coupon-form.js

@@ -294,8 +294,8 @@ export const adminCouponFormSchema = couponFormBase
     firstTimeUserOnly: annotate(z.boolean(), {
         section: "scope", order: 3, row: "quarter", label: "First-time users only",
     }),
-    appliesToAuctions: annotate(z.boolean(), {
-        section: "scope", order: 4, row: "quarter", label: "Applies to auctions",
+    appliesToCollectorDrops: annotate(z.boolean(), {
+        section: "scope", order: 4, row: "quarter", label: "Applies to collector drops",
     }),
 })
     .superRefine((v, ctx) => {

package/dist/features/seller/schemas/index.d.ts

@@ -85,8 +85,8 @@ export declare const sellerStoreSchema: z.ZodObject<{
     createdAt: z.ZodString;
     updatedAt: z.ZodString;
 }, "strip", z.ZodTypeAny, {
-    status: "pending" | "rejected" | "active" | "suspended";
     id: string;
+    status: "pending" | "rejected" | "active" | "suspended";
     createdAt: string;
     updatedAt: string;
     ownerId: string;
@@ -117,8 +117,8 @@ export declare const sellerStoreSchema: z.ZodObject<{
     isVacationMode?: boolean | undefined;
     vacationMessage?: string | undefined;
 }, {
-    status: "pending" | "rejected" | "active" | "suspended";
     id: string;
+    status: "pending" | "rejected" | "active" | "suspended";
     createdAt: string;
     updatedAt: string;
     ownerId: string;
@@ -168,8 +168,8 @@ export declare const payoutRecordSchema: z.ZodObject<{
     updatedAt: z.ZodString;
 }, "strip", z.ZodTypeAny, {
     currency: string;
-    status: "pending" | "processing" | "paid" | "failed";
     id: string;
+    status: "pending" | "processing" | "paid" | "failed";
     sellerId: string;
     sellerName: string;
     sellerEmail: string;
@@ -185,8 +185,8 @@ export declare const payoutRecordSchema: z.ZodObject<{
     processedAt?: string | undefined;
 }, {
     currency: string;
-    status: "pending" | "processing" | "paid" | "failed";
     id: string;
+    status: "pending" | "processing" | "paid" | "failed";
     sellerId: string;
     sellerName: string;
     sellerEmail: string;
@@ -210,17 +210,17 @@ export declare const sellerListParamsSchema: z.ZodObject<{
     sort: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     sort?: string | undefined;
+    q?: string | undefined;
     status?: "pending" | "rejected" | "active" | "suspended" | undefined;
     category?: string | undefined;
     page?: number | undefined;
-    q?: string | undefined;
     perPage?: number | undefined;
 }, {
     sort?: string | undefined;
+    q?: string | undefined;
     status?: "pending" | "rejected" | "active" | "suspended" | undefined;
     category?: string | undefined;
     page?: number | undefined;
-    q?: string | undefined;
     perPage?: number | undefined;
 }>;
 export declare const payoutListParamsSchema: z.ZodObject<{

package/dist/features/seller/schemas/product-form.d.ts

@@ -90,10 +90,10 @@ export declare const productDraftSchema: z.ZodObject<{
     reservePrice: z.ZodOptional<z.ZodNumber>;
     buyNowPrice: z.ZodOptional<z.ZodNumber>;
     minBidIncrement: z.ZodOptional<z.ZodNumber>;
-    auctionEndDate: z.ZodOptional<z.ZodString>;
-    auctionShippingPaidBy: z.ZodOptional<z.ZodEnum<["winner", "seller"]>>;
+    collectorDropEndDate: z.ZodOptional<z.ZodString>;
+    collectorDropShippingPaidBy: z.ZodOptional<z.ZodEnum<["winner", "seller"]>>;
     autoExtendable: z.ZodOptional<z.ZodBoolean>;
-    auctionExtensionMinutes: z.ZodOptional<z.ZodNumber>;
+    collectorDropExtensionMinutes: z.ZodOptional<z.ZodNumber>;
     preOrderDeliveryDate: z.ZodOptional<z.ZodString>;
     preOrderDepositPercent: z.ZodOptional<z.ZodNumber>;
     preOrderMaxQuantity: z.ZodOptional<z.ZodNumber>;
@@ -181,10 +181,10 @@ export declare const productDraftSchema: z.ZodObject<{
     reservePrice: z.ZodOptional<z.ZodNumber>;
     buyNowPrice: z.ZodOptional<z.ZodNumber>;
     minBidIncrement: z.ZodOptional<z.ZodNumber>;
-    auctionEndDate: z.ZodOptional<z.ZodString>;
-    auctionShippingPaidBy: z.ZodOptional<z.ZodEnum<["winner", "seller"]>>;
+    collectorDropEndDate: z.ZodOptional<z.ZodString>;
+    collectorDropShippingPaidBy: z.ZodOptional<z.ZodEnum<["winner", "seller"]>>;
     autoExtendable: z.ZodOptional<z.ZodBoolean>;
-    auctionExtensionMinutes: z.ZodOptional<z.ZodNumber>;
+    collectorDropExtensionMinutes: z.ZodOptional<z.ZodNumber>;
     preOrderDeliveryDate: z.ZodOptional<z.ZodString>;
     preOrderDepositPercent: z.ZodOptional<z.ZodNumber>;
     preOrderMaxQuantity: z.ZodOptional<z.ZodNumber>;
@@ -272,10 +272,10 @@ export declare const productDraftSchema: z.ZodObject<{
     reservePrice: z.ZodOptional<z.ZodNumber>;
     buyNowPrice: z.ZodOptional<z.ZodNumber>;
     minBidIncrement: z.ZodOptional<z.ZodNumber>;
-    auctionEndDate: z.ZodOptional<z.ZodString>;
-    auctionShippingPaidBy: z.ZodOptional<z.ZodEnum<["winner", "seller"]>>;
+    collectorDropEndDate: z.ZodOptional<z.ZodString>;
+    collectorDropShippingPaidBy: z.ZodOptional<z.ZodEnum<["winner", "seller"]>>;
     autoExtendable: z.ZodOptional<z.ZodBoolean>;
-    auctionExtensionMinutes: z.ZodOptional<z.ZodNumber>;
+    collectorDropExtensionMinutes: z.ZodOptional<z.ZodNumber>;
     preOrderDeliveryDate: z.ZodOptional<z.ZodString>;
     preOrderDepositPercent: z.ZodOptional<z.ZodNumber>;
     preOrderMaxQuantity: z.ZodOptional<z.ZodNumber>;