@mohasinac/appkit 4.71.0 → 4.71.2

package/dist/contracts/payment.js

@@ -9,4 +9,129 @@
  * Implemented by the manual provider (default) and PhonePe.
  */
 export class IPaymentProvider {
+    constructor() {
+        /**
+         * Listing types this gateway's own merchant terms permit, where the default
+         * is that they do NOT.
+         *
+         * 🛑 FAIL-CLOSED, and that direction is the whole point. Razorpay and
+         * PhonePe both name *"Bidding/Auction houses"* in their prohibited-merchant
+         * lists; Cashfree's published terms do not. The penalty for getting it wrong
+         * is not a declined transaction — it is the merchant account frozen with the
+         * settlement balance held, which takes down payments for EVERY listing type,
+         * not just the offending one. So a gateway is assumed to prohibit a
+         * restricted type until it says otherwise, and a new adapter that forgets to
+         * declare this is safe by omission rather than dangerous by omission.
+         *
+         * 🛑 Declared HERE, on the provider, rather than tested by name at the gate.
+         * `activeGateway === "cashfree"` would restate the compliance rule at every
+         * call site and go quietly wrong the day a second permitted gateway is
+         * added — the ten-hand-written-enumerations shape of Root Cause #61. The
+         * gateway is the thing that knows what its contract allows, so it is the
+         * thing that declares it.
+         *
+         * 🛑 This is NOT the same question as `supportsSplit` in the consumer's
+         * gateway registry, and the two must not be collapsed. Razorpay Route splits
+         * perfectly well AND prohibits auctions; Cashfree happens to do both. One is
+         * a capability, the other is a permission.
+         *
+         * Empty for every provider that has not been checked against its terms.
+         */
+        this.acceptsRestrictedListingTypes = [];
+        /*
+         * 🛑 THERE IS NO `contestDispute` AND NO `submitEvidence`, AND THAT ABSENCE
+         * IS THE RULE — not an unimplemented stub.
+         *
+         * The Razorpay SDK has `disputes.contest(id, { shipping_proof, billing_proof,
+         * explanation_letter, … })`, verified present in the installed 2.9.8. We
+         * deliberately do not expose it.
+         *
+         * Submitting evidence is irreversible, it is judged by a third party, and it
+         * is the one decision a human must make while looking at the actual
+         * documents. Putting it on this contract would make it callable from a
+         * route, and from there from a bulk action.
+         *
+         * The correct surface is Razorpay's own dashboard. Reinforced three ways:
+         * nothing on this contract can call it, `acceptDispute` demands an explicit
+         * confirmation, and the ingest handler is READS ONLY. A later session wanting
+         * to "finish the dispute feature" should read this paragraph first — the
+         * feature is finished; this is the shape.
+         */
+    }
+    /*
+     * ── SPLIT SETTLEMENT ──────────────────────────────────────────────────────
+     *
+     * Both members below are CONCRETE and both REFUSE, which is the opposite of
+     * how the dispute members above are declared — and the asymmetry is the
+     * point.
+     *
+     * Making them `abstract` would break all four existing adapters and force
+     * each to state what it does, which is right for disputes: a gateway that
+     * stays silent on a chargeback is the expensive answer. Here silence is
+     * exactly what must NOT be possible. An optional method a non-splitting
+     * adapter simply does not implement would make `createOrder` drop the split
+     * instruction and collect the whole amount into the platform's account — a
+     * completely successful-looking checkout that is the RBI commingling this
+     * entire mechanism exists to prevent.
+     *
+     * So the base class refuses loudly on behalf of every adapter that has not
+     * overridden it, and `CashfreeProvider` overrides both.
+     *
+     * 🛑 This is NOT a second `supportsSplit`. That field lives on
+     * `RegisteredPaymentGateway` because whether split settlement is AVAILABLE is
+     * a fact about the product the business onboarded (Easy Split is separately
+     * onboarded, not an inherent property of the Cashfree API). What these
+     * methods encode is whether the ADAPTER has an implementation — a different
+     * question with a different owner, exactly as `acceptsRestrictedListingTypes`
+     * is a permission and `supportsSplit` a capability. The two compose: the
+     * resolver picks a split-capable gateway, and the adapter refuses anyway if
+     * it is handed splits it cannot execute. Defence in depth, because the
+     * failure is invisible.
+     */
+    /**
+     * Register a seller as a vendor this gateway can settle money to.
+     *
+     * 🛑 Idempotent by contract. The caller passes a `vendorId` it can always
+     * recompute (the store slug), so a re-run must be safe — an adapter that
+     * creates a second vendor on a repeat call is wrong, and the registration job
+     * WILL re-run (jobs retry, and an admin can re-approve a store).
+     *
+     * 🛑 THROWS rather than returning `rejected` when the adapter has no
+     * implementation, and the distinction is load-bearing: `rejected` is a
+     * statement about the SELLER that an operator would act on by contacting
+     * them, while this is a statement about our own configuration. Reporting a
+     * missing implementation as a seller refusal would send a human to chase the
+     * wrong party.
+     */
+    async registerSettlementVendor(input) {
+        throw Object.assign(new Error(`${this.name} does not implement split-settlement vendor registration, so ` +
+            `vendor "${input.vendorId}" cannot be onboarded through it. Enable a ` +
+            `gateway whose registry entry declares supportsSplit.`), { httpStatus: 501, code: "SPLIT_SETTLEMENT_UNSUPPORTED" });
+    }
+    /**
+     * Create an order, splitting the capture across vendors.
+     *
+     * 🛑 **CALL THIS, NOT `createOrder`, FROM THE CHECKOUT PATH** — always, even
+     * when `splits` is empty. One call site that cannot forget is what makes the
+     * refusal below reachable; a caller that chooses between two methods is a
+     * caller that will one day choose `createOrder` for a multi-vendor cart and
+     * collect the lot into the platform's own account.
+     *
+     * The base implementation refuses a NON-EMPTY list and otherwise delegates,
+     * so a single-vendor cart behaves exactly as it does today on every gateway.
+     *
+     * 🛑 `amount` and every `splits[].amount` are in the SMALLEST CURRENCY UNIT.
+     * The adapter converts, in one place, in both directions.
+     */
+    async createOrderWithSplit(amount, currency, metadata, splits) {
+        if (splits && splits.length > 0) {
+            throw Object.assign(new Error(`${this.name} cannot split a capture across vendors, and was handed ` +
+                `${splits.length} split instruction(s) for store(s) ` +
+                `${splits.map((s) => s.storeId || "(unnamed)").join(", ")}. ` +
+                `Collecting without them would settle those sellers' share into the ` +
+                `platform's own account, which is the commingling split settlement ` +
+                `exists to avoid — so the capture is refused instead.`), { httpStatus: 501, code: "SPLIT_SETTLEMENT_UNSUPPORTED" });
+        }
+        return this.createOrder(amount, currency, metadata);
+    }
 }

package/dist/contracts/registry.d.ts

@@ -1,13 +1,14 @@
 import type { IAuthProvider, ISessionProvider } from "./auth";
 import type { IEmailProvider } from "./email";
 import type { IStorageProvider } from "./storage";
-import type { IPaymentProvider } from "./payment";
+import type { IPaymentProvider, RegisteredPaymentGateway } from "./payment";
 import type { IShippingProvider } from "./shipping";
 import type { ITaxProvider } from "./tax";
 import type { ISearchProvider } from "./search";
 import type { ICacheProvider, IQueueProvider, IEventBus } from "./infra";
 import type { IStyleAdapter } from "./style";
 import type { IDbProvider } from "./repository";
+import type { IAssistantModelProvider } from "./ai";
 export interface IRbacProvider {
     /** Resolve the permission list for a user UID. Admin role returns []. */
     getPermissions: (uid: string) => Promise<string[]>;
@@ -22,6 +23,23 @@ export interface ProviderRegistry {
     style: IStyleAdapter;
     db?: IDbProvider;
     payment?: IPaymentProvider;
+    /**
+     * Every online gateway an admin has enabled — the input to the PER-CART
+     * gateway choice, which `payment` structurally cannot answer because it is
+     * one provider resolved at module load.
+     *
+     * 🛑 ABSENT is not "no gateways"; it is "this install has not adopted the
+     * per-cart resolver". The server helper that reads this treats absence by
+     * falling back to `[payment]` with `supportsSplit: false`, so an install that
+     * registers nothing here keeps its single-vendor behaviour exactly and is
+     * REFUSED for multi-vendor carts rather than silently commingling. That is
+     * the fail-closed direction; the alternative would make an un-migrated
+     * install look compliant.
+     *
+     * See `RegisteredPaymentGateway` for why `supportsSplit` is declared here and
+     * `acceptsRestrictedListingTypes` on the provider.
+     */
+    paymentGateways?: readonly RegisteredPaymentGateway[];
     shipping?: IShippingProvider;
     /**
      * Jurisdiction tax engine. Optional, and defaults to India GST at the call
@@ -35,6 +53,16 @@ export interface ProviderRegistry {
     queue?: IQueueProvider;
     eventBus?: IEventBus;
     rbac?: IRbacProvider;
+    /**
+     * Assistant model vendors, preference-ordered — an ARRAY like
+     * `paymentGateways`, not a single slot like `tax`/`search`, because
+     * `getAssistantProviders()`'s whole point is trying each in order and
+     * refusing (never silently falling back) rather than picking one at
+     * module load. Absent means the Assistant feature's own default
+     * (`[new GroqModelProvider()]`) — registering here is how a second vendor
+     * gets wired without editing `_internal/server/features/assistant/actions.ts`.
+     */
+    aiProviders?: readonly IAssistantModelProvider[];
 }
 export declare function registerProviders(registry: ProviderRegistry): void;
 export declare function getProviders(): ProviderRegistry;

package/dist/core/CacheManager.d.ts

@@ -25,6 +25,27 @@ export declare class CacheManager {
     clear(): void;
     size(): number;
     keys(): string[];
+    /**
+     * Item 8 §18 (overhaul brief) — the admin cache page's real prerequisite.
+     * `.keys()`/`.clear()` already told a caller WHICH keys exist and how to
+     * wipe everything; neither told it how STALE an entry is, which is what
+     * a "current TTL" column needs. Returns `null` for a missing OR already
+     * logically-expired key — same "nothing to show" answer either way, so a
+     * caller never has to special-case the two.
+     */
+    getEntryMeta(key: string): {
+        ageMs: number;
+        ttl: number | undefined;
+        expiresInMs: number | null;
+    } | null;
+    /**
+     * Item 8 §18 — a repository whose cache is keyed per-id/per-slug (e.g.
+     * `products.repository.ts`) has no single key to `.delete()`; every entry
+     * sharing that repository's key prefix needs to go together. The admin
+     * page's "Clear all `<repo>` cache" button is this, not a loop the caller
+     * reimplements against `.keys()` itself.
+     */
+    clearByPrefix(prefix: string): number;
     cleanExpired(): number;
 }
 /** Default shared CacheManager singleton */

package/dist/core/CacheManager.js

@@ -48,6 +48,44 @@ export class CacheManager {
     keys() {
         return Array.from(this.cache.keys());
     }
+    /**
+     * Item 8 §18 (overhaul brief) — the admin cache page's real prerequisite.
+     * `.keys()`/`.clear()` already told a caller WHICH keys exist and how to
+     * wipe everything; neither told it how STALE an entry is, which is what
+     * a "current TTL" column needs. Returns `null` for a missing OR already
+     * logically-expired key — same "nothing to show" answer either way, so a
+     * caller never has to special-case the two.
+     */
+    getEntryMeta(key) {
+        const entry = this.cache.get(key);
+        if (!entry)
+            return null;
+        const ageMs = Date.now() - entry.timestamp;
+        if (entry.ttl && ageMs > entry.ttl)
+            return null;
+        return {
+            ageMs,
+            ttl: entry.ttl,
+            expiresInMs: entry.ttl ? entry.ttl - ageMs : null,
+        };
+    }
+    /**
+     * Item 8 §18 — a repository whose cache is keyed per-id/per-slug (e.g.
+     * `products.repository.ts`) has no single key to `.delete()`; every entry
+     * sharing that repository's key prefix needs to go together. The admin
+     * page's "Clear all `<repo>` cache" button is this, not a loop the caller
+     * reimplements against `.keys()` itself.
+     */
+    clearByPrefix(prefix) {
+        let cleared = 0;
+        for (const key of this.cache.keys()) {
+            if (key.startsWith(prefix)) {
+                this.cache.delete(key);
+                cleared++;
+            }
+        }
+        return cleared;
+    }
     cleanExpired() {
         let cleaned = 0;
         for (const [key, entry] of this.cache.entries()) {

package/dist/core/integration-keys.d.ts

@@ -11,6 +11,12 @@ export interface ResolvedKeys {
     razorpayKeySecret: string;
     /** Webhook signing secret. Optional in practice: without it `verifyWebhook()` fails closed and the buyer-present /verify path still works. */
     razorpayWebhookSecret: string;
+    /** `x-client-id`. 🛑 NOT publishable, unlike `razorpayKeyId` — never hand this to a browser. */
+    cashfreeAppId: string;
+    /** `x-client-secret`. Server-only. */
+    cashfreeSecretKey: string;
+    /** "sandbox" | "production" — selects Cashfree's base URL. Defaults to sandbox. */
+    cashfreeEnvironment: string;
     resendApiKey: string;
     whatsappApiKey: string;
     whatsappPhoneNumberId: string;

package/dist/core/integration-keys.js

@@ -31,6 +31,9 @@ const EMPTY_KEYS = {
     razorpayKeyId: "",
     razorpayKeySecret: "",
     razorpayWebhookSecret: "",
+    cashfreeAppId: "",
+    cashfreeSecretKey: "",
+    cashfreeEnvironment: "",
     resendApiKey: "",
     whatsappApiKey: "",
     whatsappPhoneNumberId: "",
@@ -82,6 +85,17 @@ export async function resolveKeys() {
         phonepeEnvironment: db.phonepeEnvironment || process.env.PHONEPE_ENVIRONMENT || "sandbox",
         phonepeWebhookUsername: db.phonepeWebhookUsername || process.env.PHONEPE_WEBHOOK_USERNAME || "",
         phonepeWebhookPassword: db.phonepeWebhookPassword || process.env.PHONEPE_WEBHOOK_PASSWORD || "",
+        /*
+         * Cashfree. Through `usable()` like Razorpay's, not bare like PhonePe's —
+         * the seed writes `*_PLACEHOLDER` into `credentials`, and a placeholder
+         * reaching Cashfree's API produces an authentication failure mid-checkout
+         * instead of cleanly falling back to the env var. `CashfreeProvider`'s
+         * constructor throws on empty credentials, so an enabled flag with no real
+         * key fails LOUDLY at boot rather than at the moment a buyer tries to pay.
+         */
+        cashfreeAppId: usable(db.cashfreeAppId) || process.env.CASHFREE_APP_ID || "",
+        cashfreeSecretKey: usable(db.cashfreeSecretKey) || process.env.CASHFREE_SECRET_KEY || "",
+        cashfreeEnvironment: usable(db.cashfreeEnvironment) || process.env.CASHFREE_ENVIRONMENT || "sandbox",
         resendApiKey: db.resendApiKey || process.env.RESEND_API_KEY || "",
         whatsappApiKey: db.whatsappApiKey || process.env.WHATSAPP_API_KEY || "",
         whatsappPhoneNumberId: db.whatsappPhoneNumberId || process.env.WHATSAPP_PHONE_NUMBER_ID || "",

package/dist/core/mutation-events.d.ts

@@ -103,9 +103,9 @@ export declare const MUTATION_EVENTS: {
         readonly UPDATED: "appkit/promotion/updated";
         readonly DELETED: "appkit/promotion/deleted";
     };
-    readonly AUCTION: {
-        readonly BID_PLACED: "appkit/auction/bid-placed";
-        readonly SETTLED: "appkit/auction/settled";
+    readonly COLLECTOR_DROP: {
+        readonly BID_PLACED: "appkit/collector-drop/bid-placed";
+        readonly SETTLED: "appkit/collector-drop/settled";
     };
 };
 /**

package/dist/core/mutation-events.js

@@ -104,9 +104,9 @@ export const MUTATION_EVENTS = {
         UPDATED: "appkit/promotion/updated",
         DELETED: "appkit/promotion/deleted",
     },
-    AUCTION: {
-        BID_PLACED: "appkit/auction/bid-placed",
-        SETTLED: "appkit/auction/settled",
+    COLLECTOR_DROP: {
+        BID_PLACED: "appkit/collector-drop/bid-placed",
+        SETTLED: "appkit/collector-drop/settled",
     },
 };
 // --- Helpers ------------------------------------------------------------------
@@ -179,8 +179,10 @@ export function inferMutationEvent(actionName) {
         ["collection", "COLLECTION"],
         ["promotion", "PROMOTION"],
         ["coupon", "PROMOTION"],
-        ["auction", "AUCTION"],
-        ["bid", "AUCTION"],
+        ["collectordrop", "COLLECTOR_DROP"],
+        // pre-rename action names
+        ["auction", "COLLECTOR_DROP"],
+        ["bid", "COLLECTOR_DROP"],
     ];
     for (const [keyword, featureKey] of features) {
         if (name.includes(keyword)) {

package/dist/core/site-config.js

@@ -10,7 +10,7 @@ export const SITE_CONFIG = {
     nav: {
         home: ROUTES.HOME,
         products: ROUTES.PUBLIC.PRODUCTS,
-        auctions: ROUTES.PUBLIC.AUCTIONS,
+        collectorDrops: ROUTES.PUBLIC.COLLECTOR_DROPS,
         preOrders: ROUTES.PUBLIC.PRE_ORDERS,
         sellers: ROUTES.PUBLIC.SELLERS,
         stores: ROUTES.PUBLIC.STORES,

package/dist/core/unit-of-work.d.ts

@@ -13,10 +13,9 @@ export declare class UnitOfWork {
     get orders(): import("..").OrderRepository;
     get reviews(): import("..").ReviewRepository;
     get sessions(): import("..").SessionRepository;
-    get bids(): import("../features/auctions/repository/bid.repository").BidRepository;
+    get bids(): import("../features/collector-drops/repository/bid.repository").BidRepository;
     get carts(): import("..").CartRepository;
     get siteSettings(): import("../features/admin/repository/site-settings.repository").SiteSettingsRepository;
-    get carousel(): import("../features/homepage/repository/carousel.repository").CarouselRepository;
     get homepageSections(): import("../features/homepage/repository/homepage-sections.repository").HomepageSectionsRepository;
     get categories(): import("..").CategoriesRepository;
     get coupons(): import("../features/promotions/repository/coupons.repository").CouponsRepository;

package/dist/core/unit-of-work.js

@@ -35,10 +35,9 @@ import { categoriesRepository } from "../features/categories/repository/categori
 import { productRepository } from "../features/products/repository/products.repository.js";
 import { orderRepository } from "../features/orders/repository/orders.repository.js";
 import { reviewRepository } from "../features/reviews/repository/reviews.repository.js";
-import { bidRepository } from "../features/auctions/repository/bid.repository.js";
+import { bidRepository } from "../features/collector-drops/repository/bid.repository.js";
 import { siteSettingsRepository } from "../features/admin/repository/site-settings.repository.js";
 import { notificationRepository } from "../features/admin/repository/notification.repository.js";
-import { carouselRepository } from "../features/homepage/repository/carousel.repository.js";
 import { homepageSectionsRepository } from "../features/homepage/repository/homepage-sections.repository.js";
 import { couponsRepository } from "../features/promotions/repository/coupons.repository.js";
 import { faqsRepository } from "../features/faq/repository/faqs.repository.js";
@@ -79,9 +78,6 @@ export class UnitOfWork {
     get siteSettings() {
         return siteSettingsRepository;
     }
-    get carousel() {
-        return carouselRepository;
-    }
     get homepageSections() {
         return homepageSectionsRepository;
     }

package/dist/edit-mode/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Public re-export of the appkit edit-mode primitives (Phase 3, overhaul
+ * brief — the admin-only "view as buyer" toggle).
+ *
+ * `EditModeProvider`/`useEditMode` live in `_internal/client/edit-mode/`
+ * for the same reason `HandModeProvider` does — this file is the canonical
+ * public surface so `audit-appkit-reexports` (no `_internal/` in public
+ * barrels) stays green. Mirrors `hand-mode/index.ts`.
+ */
+export { EditModeProvider, useEditMode } from "../_internal/client/edit-mode";
+export type { EditModeContextValue } from "../_internal/client/edit-mode";

package/dist/edit-mode/index.js

@@ -0,0 +1,10 @@
+/**
+ * Public re-export of the appkit edit-mode primitives (Phase 3, overhaul
+ * brief — the admin-only "view as buyer" toggle).
+ *
+ * `EditModeProvider`/`useEditMode` live in `_internal/client/edit-mode/`
+ * for the same reason `HandModeProvider` does — this file is the canonical
+ * public surface so `audit-appkit-reexports` (no `_internal/` in public
+ * barrels) stays green. Mirrors `hand-mode/index.ts`.
+ */
+export { EditModeProvider, useEditMode } from "../_internal/client/edit-mode/index.js";

package/dist/errors/error-codes.d.ts

@@ -1,7 +1,7 @@
 export declare const BID_ERROR_CODES: {
     readonly PRODUCT_NOT_FOUND: "BID_PRODUCT_NOT_FOUND";
-    readonly NOT_AUCTION: "BID_NOT_AUCTION";
-    readonly AUCTION_ENDED: "BID_AUCTION_ENDED";
+    readonly NOT_COLLECTOR_DROP: "BID_NOT_COLLECTOR_DROP";
+    readonly COLLECTOR_DROP_ENDED: "BID_COLLECTOR_DROP_ENDED";
     readonly TOO_LOW: "BID_AMOUNT_TOO_LOW";
     readonly INCREMENT_VIOLATED: "BID_INCREMENT_TOO_LOW";
     readonly SELF_BID: "BID_SELF_BID";
@@ -9,7 +9,7 @@ export declare const BID_ERROR_CODES: {
     /**
      * The buyout price is no longer better than the standing bid. Replaced
      * `BUY_NOW_BIDS_STARTED` (deleted 2026-08-24), which fired the instant anyone
-     * bid at all — that eBay rule hid Buy Now on nearly every live auction.
+     * bid at all — that eBay rule hid Buy Now on nearly every live collector drop.
      */
     readonly BUY_NOW_UNAVAILABLE: "BID_BUY_NOW_UNAVAILABLE";
     readonly BUY_NOW_NO_PRICE: "BID_BUY_NOW_NO_PRICE";
@@ -17,10 +17,10 @@ export declare const BID_ERROR_CODES: {
     readonly BUYOUT_LAPSED: "BID_BUYOUT_LAPSED";
     /** Bidding passed the buyout price while the buyer was in checkout. */
     readonly BUYOUT_OUTBID: "BID_BUYOUT_OUTBID";
-    /** Another buyer's buyout claimed the auction first. */
-    readonly AUCTION_ALREADY_SOLD: "BID_AUCTION_ALREADY_SOLD";
-    /** The auction's clock ran out mid-checkout, so it settled to a real bidder. */
-    readonly AUCTION_ENDED_BEFORE_CHECKOUT: "BID_AUCTION_ENDED_BEFORE_CHECKOUT";
+    /** Another buyer's buyout claimed the collector drop first. */
+    readonly COLLECTOR_DROP_ALREADY_SOLD: "BID_COLLECTOR_DROP_ALREADY_SOLD";
+    /** The collector drop's clock ran out mid-checkout, so it settled to a real bidder. */
+    readonly COLLECTOR_DROP_ENDED_BEFORE_CHECKOUT: "BID_COLLECTOR_DROP_ENDED_BEFORE_CHECKOUT";
 };
 /**
  * Checkout refusals that are BUSINESS rules rather than malformed requests.

package/dist/errors/error-codes.js

@@ -1,7 +1,7 @@
 export const BID_ERROR_CODES = {
     PRODUCT_NOT_FOUND: "BID_PRODUCT_NOT_FOUND",
-    NOT_AUCTION: "BID_NOT_AUCTION",
-    AUCTION_ENDED: "BID_AUCTION_ENDED",
+    NOT_COLLECTOR_DROP: "BID_NOT_COLLECTOR_DROP",
+    COLLECTOR_DROP_ENDED: "BID_COLLECTOR_DROP_ENDED",
     TOO_LOW: "BID_AMOUNT_TOO_LOW",
     INCREMENT_VIOLATED: "BID_INCREMENT_TOO_LOW",
     SELF_BID: "BID_SELF_BID",
@@ -9,7 +9,7 @@ export const BID_ERROR_CODES = {
     /**
      * The buyout price is no longer better than the standing bid. Replaced
      * `BUY_NOW_BIDS_STARTED` (deleted 2026-08-24), which fired the instant anyone
-     * bid at all — that eBay rule hid Buy Now on nearly every live auction.
+     * bid at all — that eBay rule hid Buy Now on nearly every live collector drop.
      */
     BUY_NOW_UNAVAILABLE: "BID_BUY_NOW_UNAVAILABLE",
     BUY_NOW_NO_PRICE: "BID_BUY_NOW_NO_PRICE",
@@ -17,10 +17,10 @@ export const BID_ERROR_CODES = {
     BUYOUT_LAPSED: "BID_BUYOUT_LAPSED",
     /** Bidding passed the buyout price while the buyer was in checkout. */
     BUYOUT_OUTBID: "BID_BUYOUT_OUTBID",
-    /** Another buyer's buyout claimed the auction first. */
-    AUCTION_ALREADY_SOLD: "BID_AUCTION_ALREADY_SOLD",
-    /** The auction's clock ran out mid-checkout, so it settled to a real bidder. */
-    AUCTION_ENDED_BEFORE_CHECKOUT: "BID_AUCTION_ENDED_BEFORE_CHECKOUT",
+    /** Another buyer's buyout claimed the collector drop first. */
+    COLLECTOR_DROP_ALREADY_SOLD: "BID_COLLECTOR_DROP_ALREADY_SOLD",
+    /** The collector drop's clock ran out mid-checkout, so it settled to a real bidder. */
+    COLLECTOR_DROP_ENDED_BEFORE_CHECKOUT: "BID_COLLECTOR_DROP_ENDED_BEFORE_CHECKOUT",
 };
 /**
  * Checkout refusals that are BUSINESS rules rather than malformed requests.

package/dist/errors/error-display-map.js

@@ -117,11 +117,11 @@ export const ERROR_DISPLAY_MAP = {
     [BID_ERROR_CODES.PRODUCT_NOT_FOUND]: {
         messageKey: k(BID_ERROR_CODES.PRODUCT_NOT_FOUND),
     },
-    [BID_ERROR_CODES.NOT_AUCTION]: {
-        messageKey: k(BID_ERROR_CODES.NOT_AUCTION),
+    [BID_ERROR_CODES.NOT_COLLECTOR_DROP]: {
+        messageKey: k(BID_ERROR_CODES.NOT_COLLECTOR_DROP),
     },
-    [BID_ERROR_CODES.AUCTION_ENDED]: {
-        messageKey: k(BID_ERROR_CODES.AUCTION_ENDED),
+    [BID_ERROR_CODES.COLLECTOR_DROP_ENDED]: {
+        messageKey: k(BID_ERROR_CODES.COLLECTOR_DROP_ENDED),
     },
     [BID_ERROR_CODES.TOO_LOW]: {
         field: "amount",
@@ -147,11 +147,11 @@ export const ERROR_DISPLAY_MAP = {
     [BID_ERROR_CODES.BUYOUT_OUTBID]: {
         messageKey: k(BID_ERROR_CODES.BUYOUT_OUTBID),
     },
-    [BID_ERROR_CODES.AUCTION_ALREADY_SOLD]: {
-        messageKey: k(BID_ERROR_CODES.AUCTION_ALREADY_SOLD),
+    [BID_ERROR_CODES.COLLECTOR_DROP_ALREADY_SOLD]: {
+        messageKey: k(BID_ERROR_CODES.COLLECTOR_DROP_ALREADY_SOLD),
     },
-    [BID_ERROR_CODES.AUCTION_ENDED_BEFORE_CHECKOUT]: {
-        messageKey: k(BID_ERROR_CODES.AUCTION_ENDED_BEFORE_CHECKOUT),
+    [BID_ERROR_CODES.COLLECTOR_DROP_ENDED_BEFORE_CHECKOUT]: {
+        messageKey: k(BID_ERROR_CODES.COLLECTOR_DROP_ENDED_BEFORE_CHECKOUT),
     },
     // ---------- Offers ----------
     [OFFER_ERROR_CODES.DISABLED]: { messageKey: k(OFFER_ERROR_CODES.DISABLED) },

package/dist/errors/messages.d.ts

@@ -334,18 +334,18 @@ export declare const ERROR_MESSAGES: {
         readonly FETCH_FAILED: "Failed to load bids";
         readonly CREATE_FAILED: "Failed to place bid";
         readonly NOT_FOUND: "Bid not found";
-        readonly AUCTION_ENDED: "This auction has already ended";
-        readonly AUCTION_NOT_FOUND: "Auction product not found";
-        readonly NOT_AN_AUCTION: "This product is not an auction";
+        readonly COLLECTOR_DROP_ENDED: "This collector drop has already ended";
+        readonly COLLECTOR_DROP_NOT_FOUND: "Collector Drop product not found";
+        readonly NOT_A_COLLECTOR_DROP: "This product is not a collector drop";
         readonly BID_TOO_LOW: "Your bid must be higher than the current bid";
         readonly INCREMENT_TOO_LOW: "Your bid does not meet the minimum increment requirement";
-        readonly OWN_AUCTION: "You cannot bid on your own auction";
+        readonly OWN_COLLECTOR_DROP: "You cannot bid on your own collector drop";
         readonly BUY_NOW_UNAVAILABLE: "Buy Now is unavailable — bidding has already passed the Buy Now price";
-        readonly BUY_NOW_NO_PRICE: "This auction does not have a Buy Now price";
-        readonly BUYOUT_LAPSED: "Your Buy Now claim expired. Head back to the auction to bid or try again.";
+        readonly BUY_NOW_NO_PRICE: "This collector drop does not have a Buy Now price";
+        readonly BUYOUT_LAPSED: "Your Buy Now claim expired. Head back to the collector drop to bid or try again.";
         readonly BUYOUT_OUTBID: "Bidding passed the Buy Now price while you were checking out, so this purchase can no longer go through.";
-        readonly AUCTION_ALREADY_SOLD: "Another buyer completed their purchase first, so this auction is already sold.";
-        readonly AUCTION_ENDED_BEFORE_CHECKOUT: "The auction ended before you completed payment, so it went to the winning bidder.";
+        readonly COLLECTOR_DROP_ALREADY_SOLD: "Another buyer completed their purchase first, so this collector drop is already sold.";
+        readonly COLLECTOR_DROP_ENDED_BEFORE_CHECKOUT: "The collector drop ended before you completed payment, so it went to the winning bidder.";
     };
     readonly CONTACT: {
         readonly SEND_FAILED: "Failed to send your message. Please try again.";

package/dist/errors/messages.js

@@ -360,18 +360,18 @@ export const ERROR_MESSAGES = {
         FETCH_FAILED: "Failed to load bids",
         CREATE_FAILED: "Failed to place bid",
         NOT_FOUND: "Bid not found",
-        AUCTION_ENDED: "This auction has already ended",
-        AUCTION_NOT_FOUND: "Auction product not found",
-        NOT_AN_AUCTION: "This product is not an auction",
+        COLLECTOR_DROP_ENDED: "This collector drop has already ended",
+        COLLECTOR_DROP_NOT_FOUND: "Collector Drop product not found",
+        NOT_A_COLLECTOR_DROP: "This product is not a collector drop",
         BID_TOO_LOW: "Your bid must be higher than the current bid",
         INCREMENT_TOO_LOW: "Your bid does not meet the minimum increment requirement",
-        OWN_AUCTION: "You cannot bid on your own auction",
+        OWN_COLLECTOR_DROP: "You cannot bid on your own collector drop",
         BUY_NOW_UNAVAILABLE: "Buy Now is unavailable — bidding has already passed the Buy Now price",
-        BUY_NOW_NO_PRICE: "This auction does not have a Buy Now price",
-        BUYOUT_LAPSED: "Your Buy Now claim expired. Head back to the auction to bid or try again.",
+        BUY_NOW_NO_PRICE: "This collector drop does not have a Buy Now price",
+        BUYOUT_LAPSED: "Your Buy Now claim expired. Head back to the collector drop to bid or try again.",
         BUYOUT_OUTBID: "Bidding passed the Buy Now price while you were checking out, so this purchase can no longer go through.",
-        AUCTION_ALREADY_SOLD: "Another buyer completed their purchase first, so this auction is already sold.",
-        AUCTION_ENDED_BEFORE_CHECKOUT: "The auction ended before you completed payment, so it went to the winning bidder.",
+        COLLECTOR_DROP_ALREADY_SOLD: "Another buyer completed their purchase first, so this collector drop is already sold.",
+        COLLECTOR_DROP_ENDED_BEFORE_CHECKOUT: "The collector drop ended before you completed payment, so it went to the winning bidder.",
     },
     CONTACT: {
         SEND_FAILED: "Failed to send your message. Please try again.",

package/dist/features/_guide-cls.d.ts

@@ -3,6 +3,7 @@ export declare const GC: {
     sectionHeader: string;
     sectionBody: string;
     iconPrimary: string;
+    iconPrimarySm: string;
     sectionTitle: string;
     listMuted: string;
     listDiscMuted: string;

package/dist/features/_guide-cls.js

@@ -1,14 +1,23 @@
 // Shared className constants for guide view components.
+//
+// 🛑 `iconBg` was a hardcoded gradient (owner's direct correction,
+// 2026-11-05: 11+ guide pages each showing an identically-gradiented icon
+// chip reads as decoration repeated everywhere, not a deliberate accent).
+// One flat, theme-safe tint now — `--appkit-color-border-subtle` already
+// inverts correctly per `[data-theme]`, same token `surface="subtle"`
+// resolves to elsewhere, so there is no separate light/dark color choice
+// to go wrong in one theme and not the other.
 export const GC = {
     sectionWrap: "rounded-2xl border border-[var(--appkit-color-border)] bg-[var(--appkit-color-surface)] overflow-hidden",
     sectionHeader: "flex items-center gap-3 px-6 py-4 border-b border-[var(--appkit-color-border)] bg-[var(--appkit-color-surface-2,var(--appkit-color-border))]/20",
     sectionBody: "px-6 py-5",
     iconPrimary: "w-5 h-5 text-[var(--appkit-color-primary)]",
+    iconPrimarySm: "w-4 h-4 text-[var(--appkit-color-primary)]",
     sectionTitle: "text-base font-semibold text-[var(--appkit-color-text)]",
     listMuted: "space-y-2 text-sm text-[var(--appkit-color-text-muted)]",
     listDiscMuted: "list-disc list-inside space-y-1 text-sm text-[var(--appkit-color-text-muted)]",
     textMuted: "text-sm text-[var(--appkit-color-text-muted)]",
     textStrong: "text-[var(--appkit-color-text)]",
     code: "text-xs bg-[var(--appkit-color-border)] px-1 py-0.5 rounded",
-    iconBg: "[background:linear-gradient(135deg,var(--appkit-color-primary-700)_0%,var(--appkit-color-cobalt)_100%)]",
+    iconBg: "bg-[var(--appkit-color-border-subtle)]",
 };

package/dist/features/about/components/DeveloperView.d.ts

@@ -1,3 +1,4 @@
+import type { DashboardCard } from "../../../_internal/shared/features/dashboard/recent-entry";
 export interface DeveloperViewProps {
     labels?: {
         title?: string;
@@ -6,6 +7,8 @@ export interface DeveloperViewProps {
         backToTeam?: string;
         empty?: string;
     };
+    /** Admin-curated page-region cards (Phase 12). Omit for no extra content. */
+    pageRegionCards?: DashboardCard[];
 }
 /**
  * Reuses the existing `siteSettings.aboutContent.teamMembers` /
@@ -13,4 +16,4 @@ export interface DeveloperViewProps {
  * filtered to `isDeveloper` members — rather than inventing a separate
  * content model just for this page. See CLAUDE.md's About-family notes.
  */
-export declare function DeveloperView({ labels }: DeveloperViewProps): Promise<import("react").JSX.Element>;
+export declare function DeveloperView({ labels, pageRegionCards }: DeveloperViewProps): Promise<import("react").JSX.Element>;